@webflow/cloud-app 0.1.0-beta.9 → 0.1.1-beta.bad4bbe.0

package/README.md

@@ -10,13 +10,7 @@ config, runs the build, and produces a worker-ready output directory. No
 `wrangler.json`, no adapter packages in your `package.json`, no generated config
 files in your tree — all of that happens in an ephemeral build workspace.
 
-This is the same engine the Webflow CLI and Webflow Cloud's server-side builder
-use, so a build is identical wherever it runs.
-
-> **Status:** early. The public API and the host port seam below are stable; the
-> framework build pipeline is being extracted from the canonical
-> (cosmic-builder) implementation. `buildApp` throws `NotImplementedError` until
-> that lands.
+> **Status:** early. The public API and the host port seam below are stable.
 
 ## Install
 
@@ -42,17 +36,38 @@ const result = await buildApp({
 console.log(result.framework, result.deploymentType, result.entrypointPath);
 ```
 
-## Ports — running the same engine anywhere
-
-Everything environment-specific is injected, so the engine itself is pure build
-logic and stays public-safe (no auth, upload, secrets, or vendor SDKs baked in).
-
-| Port         | Required | Default                                   | Why a host overrides it                                                |
-| ------------ | -------- | ----------------------------------------- | ---------------------------------------------------------------------- |
-| `logger`     | yes      | `consoleLogger` / `silentLogger` provided | route output into oclif spinners, ECS structured logs, etc.            |
-| `runCommand` | yes      | `nodeCommandRunner` provided              | control/sandbox how `npm`, the framework build, and `wrangler` execute |
-| `telemetry`  | no       | `noopTelemetry`                           | wrap `dd-trace` so existing dashboards keep working                    |
-| `fs`         | no       | `nodeFileSystem`                          | plug in a virtual filesystem (e.g. browser-based agents)               |
+Hosts can supply an optional public `assetVersionToken` through `BuildOptions`
+or `BuildContext`. Next.js emits it through `deploymentId`; Astro emits it through
+the adapter's `client.assetQueryParams` as `?dpl=<token>`. The token must be URL-safe,
+at most 128 characters, and must not start with `dpl_`. This requires Next.js
+14.1.4+ or Astro 5.15+. Existing callers without the input retain their framework
+configuration. The token is public, not an authorization credential. Hosts
+generate tokens and implement version-aware request routing. CSS `url()`
+references may not carry the token.
+
+Hosts that drive framework builders directly must await
+`builder.validateInstalledDependencies()` after the final dependency install
+and before executing the build command. `buildApp()` calls this hook automatically;
+`getBuildCommand()` only returns the command and does not validate dependencies.
+
+Known limitation: browser checks with Astro 5.18.2 and
+`@astrojs/cloudflare` 12.6.13 found that stylesheet URLs carry the token, but
+hydrated component entrypoints and their JavaScript imports do not. This occurs
+at both `/` and `/app` mounts. The Astro 5.15+ requirement indicates API
+availability, not complete asset coverage; Astro 5 token emission must not be
+treated as full skew protection.
+
+## Ports — running the engine anywhere
+
+Callers provide logging and command execution through the `ports` option.
+Telemetry and filesystem operations have default implementations.
+
+| Port         | Required | Default                                   | Purpose                                                          |
+| ------------ | -------- | ----------------------------------------- | ---------------------------------------------------------------- |
+| `logger`     | yes      | `consoleLogger` / `silentLogger` provided | Send build output to your application logs                       |
+| `runCommand` | yes      | `nodeCommandRunner` provided              | Control how npm, framework builds, and Wrangler commands execute |
+| `telemetry`  | no       | `noopTelemetry`                           | Connect build events and spans to your telemetry system          |
+| `fs`         | no       | `nodeFileSystem`                          | Supply filesystem operations through the filesystem port         |
 
 ## `webflow.json`
 
@@ -75,8 +90,8 @@ pin it) and **bindings are declared here** rather than in `wrangler.json`:
 You declare the binding name (and, for R2/D1, the resource name) — Webflow Cloud
 provisions the resource and namespaces it per environment. KV ids / D1
 `database_id`s are assigned for you; omit them. Limits: up to 5 of each type; R2
-bucket names are lowercase alphanumeric + hyphens, ≤27 chars. (`vars` is not
-supported yet — it needs deployer support to propagate.)
+bucket names are lowercase alphanumeric + hyphens, ≤27 chars. The `vars` field
+is not supported.
 
 The deploy-contract fields (`contract_version`, `framework`, `deployment_type`,
 `entrypoint_path`, `skip_no_bundle`) are filled in by the build and validated
@@ -85,77 +100,11 @@ before output is produced.
 
 ## Development
 
-```bash
-npm install      # from the monorepo root
-npm test         # jest
-npm run build    # tsc → dist/
-npm run type-check
-```
-
-## How consumers resolve this package
-
-Two consumers build with this engine: the Webflow CLI (`apps/webflow-cli`, same
-monorepo) and the cosmic-builder image (`webflow/infrastructure`, a separate
-repo). Which copy of `@webflow/cloud-app` they load is decided by **where
-`npm install` ran**, not by how the code is bundled and not at runtime — a
-`require("@webflow/cloud-app")` just reads whatever `npm` put in `node_modules`.
-
-| Scenario                                                                     | `node_modules/@webflow/cloud-app` is… | Source                |
-| ---------------------------------------------------------------------------- | ------------------------------------- | --------------------- |
-| End user runs `npm i -g @webflow/webflow-cli`                                | the registry copy npm fetched         | npm registry          |
-| Engineer working in the webflow-cli repo (`npm ci`, build, run local `dist`) | a symlink to `apps/webflow-cloud-app` | workspace (repo tree) |
-| CI for webflow-cli (unit, regression, e2e)                                   | a symlink to `apps/webflow-cloud-app` | workspace (repo tree) |
-| cosmic-builder (separate repo)                                               | the registry copy npm fetched         | npm registry          |
-
-- **Inside this monorepo the CLI always uses the workspace copy.**
-  `apps/webflow-cloud-app` is a workspace member, so npm links it by name
-  while the declared version matches — `apps/webflow-cli`
-  depends on it at an exact pin equal to this package's version (enforced in CI
-  by `npm run check:cloud-app-pin`; a mismatched pin would make npm silently
-  install the registry copy instead). Edit the source here and it takes effect on
-  the next build.
-- **The published CLI uses the registry copy.** The engine is kept external in
-  the CLI's tsup bundle (it is CJS, not inlined), so the shipped `dist` keeps
-  `require("@webflow/cloud-app")` and resolves it at the user's install time.
-  The CLI's `package.json` carries an exact pin (not a caret, since this is a
-  prerelease line the CLI is built and tested against), so released builds
-  resolve exactly that version from npm.
-- **cosmic-builder is a different repo**, so it has no workspace copy and always
-  resolves from the registry. That is why publishing to npm (below) still
-  matters even though the CLI links the workspace in development.
-
-## Publishing
-
-Published **manually** from this folder — there is no GitHub Action. Its release
-cadence follows the build engine, not the CLI. It is a regular changesets
-workspace package, but `changeset publish` always publishes with `--tag latest`,
-which would move `latest` onto a beta, so it must already be on npm before a CLI
-release: `publish-packages.sh` refuses to run otherwise, and skips it once it is.
-Don't add changesets for this package — changesets can't increment a prerelease
-(it would turn `0.1.0-beta.7` into `0.1.0`); bump the version by hand. CI fails
-(`npm run check:cloud-app-pin`) if a changeset names it.
-
-This is a prerelease line (`0.1.0-beta.x`), so always pass an explicit
-`--tag` — npm would otherwise move the `latest` tag onto a beta. The CLI pins
-this exact version, so move the pin in the same PR (CI runs
-`npm run check:cloud-app-pin`):
+From the repository root:
 
 ```bash
-# from apps/webflow-cloud-app
-npm version prerelease --preid beta --no-git-tag-version   # 0.1.0-beta.7 → 0.1.0-beta.8
-# set "@webflow/cloud-app" in apps/webflow-cli/package.json to the same version
-# and run `npm install` from the repo root
-npm publish --tag beta                                     # installs via @webflow/cloud-app@beta
+npm ci
+npm test --workspace=@webflow/cloud-app
+npm run build --workspace=@webflow/cloud-app
+npm run type-check --workspace=@webflow/cloud-app
 ```
-
-To test a build against the consumers (webflow-cli, cosmic-builder) before a
-real release, publish the same version under a throwaway ticket-scoped tag so
-it never touches `latest` or `beta`:
-
-```bash
-npm publish --tag beta7-cloud888     # installs via @webflow/cloud-app@beta7-cloud888
-```
-
-Consumers then pin that exact version (e.g. `"@webflow/cloud-app": "0.1.0-beta.8"`)
-and CI resolves it from the registry. Remove a throwaway tag when done with
-`npm dist-tag rm @webflow/cloud-app beta7-cloud888`.

package/dist/assetVersionToken.d.ts

@@ -0,0 +1,9 @@
+/** Hosts check this before requesting versioned framework output from a release. */
+export declare const ASSET_VERSION_TOKEN_SUPPORT = 1;
+/** Typed host input wins over customer/process env during template rendering. */
+export declare function assetVersionTemplateEnvironment(token: string | undefined): {
+    WEBFLOW_ASSET_VERSION_TOKEN: string;
+};
+/** Run after dependency installation; older frameworks silently ignore this input. */
+export declare function assertAssetVersionFrameworkSupport(token: string | undefined, framework: 'nextjs' | 'astro', cwd: string): void;
+//# sourceMappingURL=assetVersionToken.d.ts.map

package/dist/assetVersionToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetVersionToken.d.ts","sourceRoot":"","sources":["../src/assetVersionToken.ts"],"names":[],"mappings":"AAKA,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAS7C,iFAAiF;AACjF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG;IAC1E,2BAA2B,EAAE,MAAM,CAAC;CACrC,CAEA;AAED,sFAAsF;AACtF,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,SAAS,EAAE,QAAQ,GAAG,OAAO,EAC7B,GAAG,EAAE,MAAM,GACV,IAAI,CAaN"}

package/dist/assetVersionToken.js

@@ -0,0 +1,37 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSET_VERSION_TOKEN_SUPPORT = void 0;
+exports.assetVersionTemplateEnvironment = assetVersionTemplateEnvironment;
+exports.assertAssetVersionFrameworkSupport = assertAssetVersionFrameworkSupport;
+const zod_1 = require("zod");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const semver_1 = require("semver");
+/** Hosts check this before requesting versioned framework output from a release. */
+exports.ASSET_VERSION_TOKEN_SUPPORT = 1;
+const tokenSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[A-Za-z0-9_-]+$/)
+    .refine((token) => !token.startsWith('dpl_'), 'The dpl_ prefix is reserved');
+/** Typed host input wins over customer/process env during template rendering. */
+function assetVersionTemplateEnvironment(token) {
+    return { WEBFLOW_ASSET_VERSION_TOKEN: token === undefined ? '' : tokenSchema.parse(token) };
+}
+/** Run after dependency installation; older frameworks silently ignore this input. */
+function assertAssetVersionFrameworkSupport(token, framework, cwd) {
+    if (token === undefined)
+        return;
+    const packageName = framework === 'nextjs' ? 'next' : 'astro';
+    const installed = zod_1.z
+        .object({ version: zod_1.z.string() })
+        .parse(JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(cwd, 'node_modules', packageName, 'package.json'), 'utf8')));
+    const supported = framework === 'nextjs' ? '>=14.1.4' : '>=5.15.0';
+    if (!(0, semver_1.satisfies)(installed.version, supported, { includePrerelease: true }))
+        throw new Error(`Asset version tokens require ${framework} ${supported}`);
+}
+//# sourceMappingURL=assetVersionToken.js.map

package/dist/assetVersionToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetVersionToken.js","sourceRoot":"","sources":["../src/assetVersionToken.ts"],"names":[],"mappings":";;;;;;AAgBA,0EAIC;AAGD,gFAiBC;AAxCD,6BAAwB;AACxB,sDAAyB;AACzB,0DAA6B;AAC7B,mCAAmC;AAEnC,oFAAoF;AACvE,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAE7C,MAAM,WAAW,GAAG,OAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,kBAAkB,CAAC;KACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAC;AAE/E,iFAAiF;AACjF,SAAgB,+BAA+B,CAAC,KAAyB;IAGvE,OAAO,EAAE,2BAA2B,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,sFAAsF;AACtF,SAAgB,kCAAkC,CAChD,KAAyB,EACzB,SAA6B,EAC7B,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,WAAW,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAC;SAChB,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SAC/B,KAAK,CACJ,IAAI,CAAC,KAAK,CACR,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACrF,CACF,CAAC;IACJ,MAAM,SAAS,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACnE,IAAI,CAAC,IAAA,kBAAS,EAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/bindings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,IAAI,CAAC;AASvC,eAAO,MAAM,eAAe;;;;;;;;;gCAEZ,CAAC;AACjB,eAAO,MAAM,eAAe;;;;;;;;;gCAEZ,CAAC;AACjB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;gCAOZ,CAAC;AAEjB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAMX,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAGvE;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAG7E;AAED,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBvD;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAmBhE;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,IAAI,SAAgB,GACnB,YAAY,CAmBd"}
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAUvC,eAAO,MAAM,eAAe;;;;;;;;;gCAEZ,CAAC;AACjB,eAAO,MAAM,eAAe;;;;;;;;;gCAEZ,CAAC;AACjB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;gCAOZ,CAAC;AAEjB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAMX,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAGvE;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAG7E;AAED,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBvD;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAmBhE;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,IAAI,SAAgB,GACnB,YAAY,CAmBd"}

package/dist/bindings.js

@@ -25,8 +25,9 @@ const zod_1 = require("zod");
 const errors_1 = require("./frameworks/errors");
 /** Max number of each binding type, matching the deployer's limits. */
 exports.MAX_BINDINGS_PER_TYPE = 5;
-// Cloudflare assigns the real ids at deploy time; these only satisfy the
-// build-phase wrangler schema + `wrangler deploy --dry-run`.
+// Cloudflare assigns the real ids at deploy time. The user wrangler schema and
+// `wrangler deploy --dry-run` accept bindings without ids; the placeholders keep
+// the bridge valid against the strict `loadWranglerJson` schema.
 const KV_ID_PLACEHOLDER = '0'.repeat(32);
 const D1_ID_PLACEHOLDER = '00000000-0000-0000-0000-000000000000';
 // `binding` is the JS binding name (e.g. `env.MY_KV`). `id` / `database_id` are

package/dist/bindings.js.map

@@ -1 +1 @@
-{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":";;;AAwDA,sCAGC;AAGD,wCAGC;AAGD,oDAgBC;AAGD,4CAmBC;AAeD,wDAsBC;AA/ID;;;;;;;;;;;;;;GAcG;AACH,6BAAwB;AAExB,gDAA2D;AAG3D,uEAAuE;AAC1D,QAAA,qBAAqB,GAAG,CAAC,CAAC;AAEvC,yEAAyE;AACzE,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzC,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AAEjE,gFAAgF;AAChF,wEAAwE;AAC3D,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC1D,WAAW,EAAE,CAAC;AACJ,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KACxD,WAAW,EAAE,CAAC;AACJ,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,WAAW,EAAE,CAAC;AAEJ,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB,6FAA6F;AAC7F,SAAgB,aAAa,CAAC,GAAY;IACxC,MAAM,MAAM,GAAG,sBAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,+DAA+D;AAC/D,SAAgB,cAAc,CAAC,QAAqC;IAClE,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,2GAA2G;AAC3G,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,6BAAoB,CAC5B,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,6DAA6D,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,6BAAoB,CAC5B,uCAAuC,IAAI,uCAAuC,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,6BAAoB,CAC5B,uCAAuC,IAAI,gDAAgD,IAAI,CAAC,MAAM,eAAe,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAgB,gBAAgB,CAAC,QAAyB;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,sCAAsC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,qCAAqC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,mCAAmC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CACvG,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACvC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;GAGG;AACU,QAAA,2BAA2B,GAAG,YAAY,CAAC;AAExD;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,QAAyB,EACzB,IAAI,GAAG,aAAa;IAEpB,OAAO;QACL,IAAI;QACJ,kBAAkB,EAAE,mCAA2B;QAC/C,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,iBAAiB;SAC9B,CAAC,CAAC;QACH,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;QACH,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,iBAAiB;YAC/C,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../src/bindings.ts"],"names":[],"mappings":";;;AAyDA,sCAGC;AAGD,wCAGC;AAGD,oDAgBC;AAGD,4CAmBC;AAeD,wDAsBC;AAhJD;;;;;;;;;;;;;;GAcG;AACH,6BAAwB;AAExB,gDAA2D;AAG3D,uEAAuE;AAC1D,QAAA,qBAAqB,GAAG,CAAC,CAAC;AAEvC,+EAA+E;AAC/E,iFAAiF;AACjF,iEAAiE;AACjE,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzC,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AAEjE,gFAAgF;AAChF,wEAAwE;AAC3D,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC1D,WAAW,EAAE,CAAC;AACJ,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KACxD,WAAW,EAAE,CAAC;AACJ,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,WAAW,EAAE,CAAC;AAEJ,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB,6FAA6F;AAC7F,SAAgB,aAAa,CAAC,GAAY;IACxC,MAAM,MAAM,GAAG,sBAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,+DAA+D;AAC/D,SAAgB,cAAc,CAAC,QAAqC;IAClE,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,2GAA2G;AAC3G,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,6BAAoB,CAC5B,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,6DAA6D,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,6BAAoB,CAC5B,uCAAuC,IAAI,uCAAuC,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,6BAAoB,CAC5B,uCAAuC,IAAI,gDAAgD,IAAI,CAAC,MAAM,eAAe,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAgB,gBAAgB,CAAC,QAAyB;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,sCAAsC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,qCAAqC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CACzG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,6BAAqB,EAAE,CAAC;QACvD,MAAM,IAAI,6BAAoB,CAC5B,mCAAmC,QAAQ,CAAC,EAAG,CAAC,MAAM,wBAAwB,6BAAqB,GAAG,CACvG,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACvC,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;GAGG;AACU,QAAA,2BAA2B,GAAG,YAAY,CAAC;AAExD;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,QAAyB,EACzB,IAAI,GAAG,aAAa;IAEpB,OAAO;QACL,IAAI;QACJ,kBAAkB,EAAE,mCAA2B;QAC/C,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,iBAAiB;SAC9B,CAAC,CAAC;QACH,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;QACH,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,iBAAiB;YAC/C,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/config/package-json.d.ts

@@ -24,16 +24,16 @@ export declare const PackageJsonSchema: z.ZodObject<{
         node: z.ZodOptional<z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
-    name?: string | undefined;
     version?: string | undefined;
+    name?: string | undefined;
     dependencies?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     engines?: z.objectOutputType<{
         node: z.ZodOptional<z.ZodUnknown>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
-    name?: string | undefined;
     version?: string | undefined;
+    name?: string | undefined;
     dependencies?: Record<string, string> | undefined;
     devDependencies?: Record<string, string> | undefined;
     engines?: z.objectInputType<{

package/dist/diagnostics.d.ts

@@ -0,0 +1,23 @@
+export type DiagnosticLevel = 'warn' | 'error';
+export declare const DiagnosticCode: {
+    readonly ASTRO_SESSION_BINDING_MISSING: "ASTRO_SESSION_BINDING_MISSING";
+    readonly WRANGLER_JSON_INVALID: "WRANGLER_JSON_INVALID";
+};
+export type DiagnosticCode = (typeof DiagnosticCode)[keyof typeof DiagnosticCode];
+export interface Diagnostic {
+    level: DiagnosticLevel;
+    code: DiagnosticCode;
+    /** One sentence: what is wrong and what it breaks. No newlines. */
+    message: string;
+    /** One sentence: the exact change to make. No newlines. */
+    fix?: string;
+}
+export declare const DIAGNOSTIC_LINE_PATTERN: RegExp;
+export declare function formatDiagnostic({ level, code, message, fix }: Diagnostic): string;
+export declare function parseDiagnostic(line: string): {
+    level: DiagnosticLevel;
+    code: string;
+    message: string;
+    fix?: string;
+} | undefined;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,CAAC;AAE/C,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAElF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID,eAAO,MAAM,uBAAuB,QAC6B,CAAC;AAElE,wBAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,UAAU,GAAG,MAAM,CAKlF;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOrF"}

package/dist/diagnostics.js

@@ -0,0 +1,31 @@
+"use strict";
+// Machine-readable build diagnostics. The format and code registry match cosmic-builder's BUILD_DIAGNOSTICS.md
+// (keep codes in sync). Agents, the CLI and (later) the dashboard pick these
+// lines out of the build log by the `[cloud:<level>:<CODE>]` prefix, so a code
+// must never change meaning once shipped.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DIAGNOSTIC_LINE_PATTERN = exports.DiagnosticCode = void 0;
+exports.formatDiagnostic = formatDiagnostic;
+exports.parseDiagnostic = parseDiagnostic;
+exports.DiagnosticCode = {
+    ASTRO_SESSION_BINDING_MISSING: 'ASTRO_SESSION_BINDING_MISSING',
+    WRANGLER_JSON_INVALID: 'WRANGLER_JSON_INVALID',
+};
+// Matches the first line of a diagnostic. Errors may carry detail lines after it.
+// Leading whitespace is allowed because the CLI indents every log line.
+exports.DIAGNOSTIC_LINE_PATTERN = /^\s*\[cloud:(warn|error):([A-Z0-9_]+)\] (.*?)(?: Fix: (.*))?$/;
+function formatDiagnostic({ level, code, message, fix }) {
+    if (/[\r\n]/.test(message) || (fix && /[\r\n]/.test(fix))) {
+        throw new Error(`diagnostic ${code}: message and fix must be single-line`);
+    }
+    return `[cloud:${level}:${code}] ${message}` + (fix ? ` Fix: ${fix}` : '');
+}
+function parseDiagnostic(line) {
+    const match = exports.DIAGNOSTIC_LINE_PATTERN.exec(line.split(/\r?\n/, 1)[0].replace(/\r+$/, ''));
+    if (!match) {
+        return undefined;
+    }
+    const [, level, code, message, fix] = match;
+    return { level: level, code, message, ...(fix !== undefined ? { fix } : {}) };
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../src/diagnostics.ts"],"names":[],"mappings":";AAAA,+GAA+G;AAC/G,6EAA6E;AAC7E,+EAA+E;AAC/E,0CAA0C;;;AAyB1C,4CAKC;AAED,0CASC;AArCY,QAAA,cAAc,GAAG;IAC5B,6BAA6B,EAAE,+BAA+B;IAC9D,qBAAqB,EAAE,uBAAuB;CACtC,CAAC;AAaX,kFAAkF;AAClF,wEAAwE;AAC3D,QAAA,uBAAuB,GAClC,+DAA+D,CAAC;AAElE,SAAgB,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAc;IACxE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAgB,eAAe,CAC7B,IAAY;IAEZ,MAAM,KAAK,GAAG,+BAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,KAAwB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC"}

package/dist/frameworks/astro/adapter-patches/assert-adapter-nested-under-mount.d.ts

@@ -20,9 +20,9 @@
  * Everything else passes: a missing `assetsPath`, a metadata-only tree, and an asset-less app
  * (an empty `<mount>/` dir still counts as nested).
  *
- * `ensureFixedCloudflareAdapter` forces a fixed adapter, which is what keeps this nearly
- * unreachable. It is reachable through a non-semver adapter spec (git URL, `file:`, alias) or a
- * cross-major pin the forced upgrade leaves alone.
+ * `ensureCompatibleCloudflareAdapter` clamps the adapter into a base-path-fixed range, which is
+ * what keeps this nearly unreachable. It is reachable through a non-semver adapter spec (git URL,
+ * `file:`, alias) whose range it cannot verify and therefore leaves alone.
  */
 export declare function assertAdapterNestedUnderMount(cwd: string, assetsPath: string, cleanMountPath: string): void;
 //# sourceMappingURL=assert-adapter-nested-under-mount.d.ts.map

package/dist/frameworks/astro/adapter-patches/assert-adapter-nested-under-mount.js

@@ -92,9 +92,9 @@ function listEntries(dir) {
  * Everything else passes: a missing `assetsPath`, a metadata-only tree, and an asset-less app
  * (an empty `<mount>/` dir still counts as nested).
  *
- * `ensureFixedCloudflareAdapter` forces a fixed adapter, which is what keeps this nearly
- * unreachable. It is reachable through a non-semver adapter spec (git URL, `file:`, alias) or a
- * cross-major pin the forced upgrade leaves alone.
+ * `ensureCompatibleCloudflareAdapter` clamps the adapter into a base-path-fixed range, which is
+ * what keeps this nearly unreachable. It is reachable through a non-semver adapter spec (git URL,
+ * `file:`, alias) whose range it cannot verify and therefore leaves alone.
  */
 function assertAdapterNestedUnderMount(cwd, assetsPath, cleanMountPath) {
     if (!cleanMountPath) {

package/dist/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.d.ts

@@ -0,0 +1,34 @@
+import type { Logger, CommandRunner } from '../../../ports';
+export interface EnsureCompatibleCloudflareAdapterParams {
+    log: Logger;
+    runCommand: CommandRunner;
+    cwd: string;
+    /** e.g. `@astrojs/cloudflare`. */
+    adapterName: string;
+    /**
+     * The adapter range compatible with the project's Astro version, from
+     * `resolveCloudflareAdapterRange` (e.g. `>=14.1.7 <14.2.0` or `^13.3.1`).
+     */
+    compatibleRange: string;
+    /** The user's declared adapter spec (from package.json), or undefined if absent. */
+    declaredVersion: string | undefined;
+}
+/**
+ * Ensure the project resolves a `@astrojs/cloudflare` within the range that is
+ * compatible with its Astro version (see `resolveCloudflareAdapterRange`).
+ *
+ * - Adapter absent -> install the compatible range.
+ * - Declared range NOT a subset of the compatible range -> force-install the
+ *   compatible range and warn. This catches both a too-low range (a base-path-buggy
+ *   13.x, withastro/astro#16276) and a too-high one (an unbounded `^14.0.0` that
+ *   floats to 14.2.x and breaks Astro 7.0/7.1, whose adapter peerDeps lie).
+ * - Declared range already within the compatible range -> leave it alone.
+ * - Unparseable spec (`workspace:` / `file:` / `npm:` alias) -> warn and leave it;
+ *   we cannot reason about the range, and forcing could clobber an intentional link.
+ *
+ * `npm install --save <pkg>@<range>` rewrites BOTH package.json and the lockfile
+ * entry for this package, so a forced install overrides a lockfile-pinned
+ * incompatible version.
+ */
+export declare function ensureCompatibleCloudflareAdapter(params: EnsureCompatibleCloudflareAdapterParams): Promise<void>;
+//# sourceMappingURL=ensure-compatible-cloudflare-adapter.d.ts.map

package/dist/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-compatible-cloudflare-adapter.d.ts","sourceRoot":"","sources":["../../../../src/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG5D,MAAM,WAAW,uCAAuC;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,aAAa,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,uCAAuC,GAC9C,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureCompatibleCloudflareAdapter = ensureCompatibleCloudflareAdapter;
+const semver = __importStar(require("semver"));
+const utils_1 = require("../../../utils");
+/**
+ * Ensure the project resolves a `@astrojs/cloudflare` within the range that is
+ * compatible with its Astro version (see `resolveCloudflareAdapterRange`).
+ *
+ * - Adapter absent -> install the compatible range.
+ * - Declared range NOT a subset of the compatible range -> force-install the
+ *   compatible range and warn. This catches both a too-low range (a base-path-buggy
+ *   13.x, withastro/astro#16276) and a too-high one (an unbounded `^14.0.0` that
+ *   floats to 14.2.x and breaks Astro 7.0/7.1, whose adapter peerDeps lie).
+ * - Declared range already within the compatible range -> leave it alone.
+ * - Unparseable spec (`workspace:` / `file:` / `npm:` alias) -> warn and leave it;
+ *   we cannot reason about the range, and forcing could clobber an intentional link.
+ *
+ * `npm install --save <pkg>@<range>` rewrites BOTH package.json and the lockfile
+ * entry for this package, so a forced install overrides a lockfile-pinned
+ * incompatible version.
+ */
+async function ensureCompatibleCloudflareAdapter(params) {
+    const { log, runCommand, cwd, adapterName, compatibleRange, declaredVersion } = params;
+    if (!declaredVersion) {
+        log.warn(`Installing ${adapterName}@${compatibleRange} (required for Cloudflare deployment)...`);
+        await (0, utils_1.npm)({
+            log,
+            runCommand,
+            cwd,
+            args: ['install', '--save', `${adapterName}@${compatibleRange}`],
+        });
+        return;
+    }
+    const declaredRange = semver.validRange(declaredVersion);
+    if (!declaredRange) {
+        // workspace:/file:/npm: alias and other non-semver specs — can't compare, leave as-is.
+        log.warn(`Cannot verify ${adapterName}@${declaredVersion} against the compatible range ${compatibleRange}; ` +
+            `leaving it as declared. If the build fails, pin ${adapterName}@${compatibleRange} manually.`);
+        return;
+    }
+    if (semver.subset(declaredRange, compatibleRange)) {
+        // Every version the declared range allows is already compatible.
+        return;
+    }
+    log.warn(`${adapterName}@${declaredVersion} is outside the range compatible with your Astro version ` +
+        `(${compatibleRange}). Installing ${adapterName}@${compatibleRange} to avoid broken asset serving ` +
+        `or missing-export build failures on mounted apps.`);
+    await (0, utils_1.npm)({
+        log,
+        runCommand,
+        cwd,
+        args: ['install', '--save', `${adapterName}@${compatibleRange}`],
+    });
+}
+//# sourceMappingURL=ensure-compatible-cloudflare-adapter.js.map

package/dist/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-compatible-cloudflare-adapter.js","sourceRoot":"","sources":["../../../../src/frameworks/astro/adapter-patches/ensure-compatible-cloudflare-adapter.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,8EA4CC;AAjFD,+CAAiC;AAGjC,0CAAqC;AAiBrC;;;;;;;;;;;;;;;;GAgBG;AACI,KAAK,UAAU,iCAAiC,CACrD,MAA+C;IAE/C,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAEvF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,cAAc,WAAW,IAAI,eAAe,0CAA0C,CACvF,CAAC;QACF,MAAM,IAAA,WAAG,EAAC;YACR,GAAG;YACH,UAAU;YACV,GAAG;YACH,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,uFAAuF;QACvF,GAAG,CAAC,IAAI,CACN,iBAAiB,WAAW,IAAI,eAAe,iCAAiC,eAAe,IAAI;YACjG,mDAAmD,WAAW,IAAI,eAAe,YAAY,CAChG,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QAClD,iEAAiE;QACjE,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CACN,GAAG,WAAW,IAAI,eAAe,2DAA2D;QAC1F,IAAI,eAAe,iBAAiB,WAAW,IAAI,eAAe,iCAAiC;QACnG,mDAAmD,CACtD,CAAC;IACF,MAAM,IAAA,WAAG,EAAC;QACR,GAAG;QACH,UAAU;QACV,GAAG;QACH,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,WAAW,IAAI,eAAe,EAAE,CAAC;KACjE,CAAC,CAAC;AACL,CAAC"}

package/dist/frameworks/astro/adapter-patches/resolve-cloudflare-adapter.d.ts

@@ -0,0 +1,39 @@
+/** One Astro line and the `@astrojs/cloudflare` range that is compatible with it. */
+export interface AdapterCompatRow {
+    /** Matched against the project's declared Astro version (coerced to its floor). */
+    astroRange: string;
+    /** The `@astrojs/cloudflare` range to install/clamp to for this Astro line. */
+    adapterRange: string;
+}
+/**
+ * Astro -> `@astrojs/cloudflare` compatibility, newest Astro line first.
+ *
+ * The adapter's own peerDependencies are too loose to trust: 14.2.0 imports
+ * `beginContentEntryCollection`, an export that only exists in astro@7.2.0, yet
+ * still declares peer `astro@^7.0.0`. An unbounded `^14.0.0` install therefore
+ * floats to 14.2.x and breaks Astro 7.0/7.1 builds. We pin a bounded window per
+ * Astro line instead: wide enough to pull the latest compatible adapter, capped
+ * below the first release that needs a newer Astro than the declared line
+ * guarantees.
+ *
+ * Each floor also sits at or above the base-path fix (withastro/astro#16276,
+ * adapter 13.3.1; every 14.x is clean), so resolving from this table keeps the
+ * verbatim `dist/client` copy correct.
+ *
+ * Keyed on the declared Astro floor: a project that declares `astro@^7.0.0`
+ * promises to run on 7.0, so its adapter must stay 7.0-compatible (< 14.2.0)
+ * even if the caret later floats Astro up. Adapter 14.1.x works across all of
+ * 7.x, so clamping down is always safe.
+ */
+export declare const CLOUDFLARE_ADAPTER_TABLE: readonly AdapterCompatRow[];
+/**
+ * Resolve the compatible `@astrojs/cloudflare` range for a declared Astro version.
+ *
+ * Matches the first table row the Astro version's floor satisfies. Throws when
+ * the version is unparseable or outside every known line, so a builder fails
+ * loudly rather than silently installing an unbounded adapter.
+ *
+ * @param declaredAstroVersion The `astro` spec from package.json (e.g. `^7.0.0`).
+ */
+export declare function resolveCloudflareAdapterRange(declaredAstroVersion: string | undefined): string;
+//# sourceMappingURL=resolve-cloudflare-adapter.d.ts.map

package/dist/frameworks/astro/adapter-patches/resolve-cloudflare-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-cloudflare-adapter.d.ts","sourceRoot":"","sources":["../../../../src/frameworks/astro/adapter-patches/resolve-cloudflare-adapter.ts"],"names":[],"mappings":"AAIA,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,gBAAgB,EAQ/D,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CA2B9F"}