devflare 1.0.0-next.16 → 1.0.0-next.18

package/dist/{index-fvsadj32.js → index-2bmtj21z.js}

@@ -3,12 +3,12 @@ import {
   getEffectiveAccountId,
   getOrCreateNamedKVNamespace,
   getPrimaryAccount
-} from "./index-jb75kwa4.js";
+} from "./index-502y7w13.js";
 import {
   isAuthenticated,
   kvGet,
   kvPut
-} from "./index-0w826dsr.js";
+} from "./index-2vbzamev.js";
 
 // src/cloudflare/usage.ts
 var USAGE_KEY_PREFIX = "usage:";

package/dist/{index-816krz9p.js → index-2dpmd14d.js}

@@ -3,7 +3,7 @@ import {
 } from "./index-rbht7m9r.js";
 import {
   resolveConfigPath
-} from "./index-0apbm26n.js";
+} from "./index-bc5pvbbd.js";
 
 // src/cli/config-path.ts
 import { stat } from "node:fs/promises";

package/dist/{index-3ke5d2vn.js → index-2fa0afdp.js}

@@ -441,8 +441,8 @@ var CORE_HELP_PAGES = [
       "devflare build [--config <path>] [--env <name>] [--debug]"
     ],
     description: [
-      "Resolves your Devflare config, applies environment overrides, and generates the Wrangler-facing artifacts used by deploy flows.",
-      "This is the safest way to inspect what Devflare will hand to Wrangler before you actually deploy."
+      "Resolves your Devflare config locally, applies environment overrides, and generates the build artifacts used by deploy flows.",
+      "Build preserves named bindings instead of provisioning Cloudflare resources, so it is the safest way to inspect what Devflare will hand to deploy before you actually ship."
     ],
     options: [
       entry("--config <path>", "Use a specific devflare config file"),
@@ -455,24 +455,26 @@ var CORE_HELP_PAGES = [
     ],
     notes: [
       "Build currently writes `.devflare/wrangler.jsonc`, `.devflare/build/wrangler.jsonc`, and `.wrangler/deploy/config.json`.",
-      "`devflare deploy` runs the same artifact preparation step automatically before invoking Wrangler."
+      "Build does not query or provision Cloudflare account resources on its own; name-based bindings stay as names in the generated artifacts until deploy time.",
+      "`devflare deploy` runs the same artifact preparation step automatically before invoking Wrangler, unless you provide `--build <path>` to reuse an existing build artifact."
     ]
   },
   {
     path: ["deploy"],
     summary: "Deploy explicitly to Cloudflare production or preview targets",
     usage: [
-      "devflare deploy --prod [--config <path>] [--message <text>] [--tag <text>] [--debug]",
-      "devflare deploy --production [--config <path>] [--message <text>] [--tag <text>] [--debug]",
-      "devflare deploy --preview <name> [--config <path>] [--message <text>] [--tag <text>]",
-      "devflare deploy --preview [--config <path>] [--branch-name <branch>] [--message <text>] [--tag <text>]",
+      "devflare deploy --prod [--config <path>] [--build <path>] [--message <text>] [--tag <text>] [--debug]",
+      "devflare deploy --production [--config <path>] [--build <path>] [--message <text>] [--tag <text>] [--debug]",
+      "devflare deploy --preview <name> [--config <path>] [--build <path>] [--message <text>] [--tag <text>]",
+      "devflare deploy --preview [--config <path>] [--build <path>] [--branch-name <branch>] [--message <text>] [--tag <text>]",
       "devflare deploy --prod --dry-run [--config <path>]",
       "devflare deploy --preview <name> --dry-run [--config <path>]",
       "devflare deploy --preview --dry-run [--config <path>]"
     ],
     description: [
       "Deploy requires an explicit target: production via `--prod` / `--production`, or preview via `--preview`.",
-      "Named preview deploys such as `--preview next` or `--preview pr-1` target `config.env.preview`, provision preview-scoped resources automatically, and deploy dedicated preview-scope Workers when your config is wired for them. Bare `--preview` keeps the same-worker preview upload flow and can still use `--branch-name` or CI/git metadata for preview-aware naming."
+      "Named preview deploys such as `--preview next` or `--preview pr-1` target `config.env.preview`, provision preview-scoped resources automatically, and deploy dedicated preview-scope Workers when your config is wired for them. Bare `--preview` keeps the same-worker preview upload flow and can still use `--branch-name` or CI/git metadata for preview-aware naming.",
+      "Production and named preview deploys also provision missing deploy-time resources such as KV namespaces, D1 databases, R2 buckets, and Queues when Devflare has enough information to create them."
     ],
     options: [
       entry("--prod", "Deploy to the production environment explicitly"),
@@ -480,6 +482,7 @@ var CORE_HELP_PAGES = [
       entry("--preview", "Deploy a same-worker preview upload"),
       entry("--preview <name>", "Deploy a named preview scope such as `next` or `pr-1`"),
       entry("--config <path>", "Use a specific devflare config file"),
+      entry("--build <path>", "Reuse an existing build artifact such as `.devflare/build` or `.wrangler/deploy/config.json` instead of rebuilding"),
       entry("--env <name>", "Usually unnecessary because the explicit target already pins production vs preview. If you pass it, it must match that target"),
       entry("--dry-run", "Print the synthesized Wrangler config and skip the actual deployment"),
       entry("--branch-name <branch>", "Provide explicit branch metadata for preview-aware naming when your workflow needs it"),
@@ -489,6 +492,7 @@ var CORE_HELP_PAGES = [
     ],
     examples: [
       entry("devflare deploy --prod", "Deploy explicitly to production"),
+      entry("devflare deploy --prod --build .devflare/build", "Deploy a previously built artifact without rebuilding the package"),
       entry('devflare deploy --production --message "Release"', "Deploy to production with an explicit deployment message"),
       entry("devflare deploy --preview next", "Deploy the named `next` preview scope and provision preview-scoped resources automatically"),
       entry("devflare deploy --preview pr-1", "Deploy the named `pr-1` preview scope directly"),
@@ -499,6 +503,7 @@ var CORE_HELP_PAGES = [
       "`devflare deploy` without an explicit target is rejected from the CLI so production and preview destinations stay unmistakable.",
       "`--prod` / `--production` clear preview-scope environment overrides such as `DEVFLARE_PREVIEW_BRANCH` so production deploys stay pointed at stable Worker names.",
       "Named preview deploys automatically provision preview-scoped resources before building and deploying.",
+      "When a build artifact still contains name-based bindings, deploy resolves or provisions the concrete Cloudflare resources and rewrites the generated Wrangler config with the IDs Wrangler requires.",
       "Plain `--preview` still uses Cloudflare preview uploads, so it cannot be the first-ever upload for a brand-new Worker, preview URLs remain limited for Workers that implement Durable Objects, and preview uploads do not apply Durable Object migrations."
     ]
   },
@@ -819,7 +824,7 @@ var PREVIEW_HELP_PAGES = [
     ],
     description: [
       "The default view resolves the current worker family from local config, or scans child `devflare.config.*` files when you run it from a monorepo root, then inspects live Cloudflare Workers and groups dedicated preview Worker names into preview scopes such as `next` or `pr-42`.",
-      "Use `bindings` to inspect preview-scoped resource associations for one scope, or `cleanup` to delete dedicated preview Workers plus preview-only Cloudflare resources for one scope or every discovered scope."
+      "Use `bindings` to inspect preview-scoped resource associations for one scope, or `cleanup` to delete dedicated preview Workers plus preview-only Cloudflare resources for one scope or every live scope Devflare can discover from Worker names."
     ],
     subcommands: [
       entry("list", "List stable workers plus dedicated preview scopes for the current worker family (default)"),
@@ -831,7 +836,7 @@ var PREVIEW_HELP_PAGES = [
       entry("--config <path>", "Use a specific devflare config file for config-aware preview commands"),
       entry("--env <name>", "Resolve a non-default `config.env[name]` before config-aware preview commands when your preview bindings live outside `env.preview`"),
       entry("--scope <name>", "Resolve preview-scoped names for a specific identifier on config-aware preview commands"),
-      entry("--all", "Clean every discovered preview scope for the current worker family when used with `cleanup`"),
+      entry("--all", "Clean every live preview scope Devflare can discover for the current worker family when used with `cleanup`"),
       entry("--apply", "Execute cleanup instead of doing a dry run"),
       entry("--worker <name>", "Override the primary worker name shown in the `bindings` report header")
     ],
@@ -840,12 +845,13 @@ var PREVIEW_HELP_PAGES = [
       entry("devflare previews --account <id>", "List preview scopes for every configured package when run from a monorepo root"),
       entry("devflare previews bindings --scope next", "Inspect the `next` preview scope and its live worker associations"),
       entry("devflare previews cleanup --scope next --apply", "Delete preview-only resources and dedicated Workers for the `next` scope"),
-      entry("devflare previews cleanup --all --apply", "Delete preview-only resources and dedicated Workers for every discovered preview scope")
+      entry("devflare previews cleanup --all --apply", "Delete preview-only resources and dedicated Workers for every live discovered preview scope")
     ],
     notes: [
       "The default `list` view can aggregate every configured package from a monorepo root. `bindings` and `cleanup` still need one configured package, so run them inside that package or pass `--config <path>`.",
       "`bindings` and `cleanup` default to preview-oriented config resolution already, so `--env preview` is usually redundant unless your project stores preview bindings under a different env key.",
       "`cleanup` removes preview-only Cloudflare resources for the targeted scope and also deletes dedicated preview-scope Worker scripts when that scope is deployed as its own Worker family. Service bindings, Durable Object bindings, and routes attached only to those dedicated preview Workers disappear with them.",
+      "`cleanup --all` only targets live preview scopes Devflare can discover from Worker names. Use `--scope <name>` when you need to clean one scope explicitly, even if its dedicated preview Workers are already gone.",
       "Stable shared Workers are never deleted by `cleanup`."
     ]
   },
@@ -887,21 +893,21 @@ var PREVIEW_HELP_PAGES = [
     "devflare previews cleanup [--config <path>] [--env <name>] [--scope <name> | --all] [--account <id>] [--apply]"
   ], [
     "Resolves preview-scoped resource names from the current config, deletes dedicated preview Worker scripts for the targeted scope when they exist, and removes matching preview-only Cloudflare resources from the selected account. Preview-only service bindings, Durable Object bindings, and routes attached exclusively to those dedicated Workers disappear with them.",
-    "Use `--scope <name>` for one preview scope or `--all` to iterate every discovered preview scope for the current worker family."
+    "Use `--scope <name>` for one preview scope or `--all` to iterate every live preview scope Devflare can discover for the current worker family."
   ], [
     entry("--config <path>", "Use a specific devflare config file"),
     entry("--env <name>", "Resolve a non-default `config.env[name]` before cleanup when your preview bindings live outside `env.preview`"),
-    entry("--scope <name>", "Clean one preview scope instead of the default synthetic `preview` scope"),
-    entry("--all", "Clean every discovered preview scope for the current worker family"),
+    entry("--scope <name>", "Clean one preview scope instead of the default `preview` scope"),
+    entry("--all", "Clean every live preview scope Devflare can discover for the current worker family"),
     entry("--account <id>", "Use a specific Cloudflare account"),
     entry("--apply", "Apply the cleanup instead of doing a dry run")
   ], [
     entry("devflare previews cleanup --scope next", "Show which dedicated Workers and preview-only resources belong to the `next` scope"),
-    entry("devflare previews cleanup --all", "Show the cleanup plan for every discovered preview scope"),
-    entry("devflare previews cleanup --all --apply", "Delete dedicated preview Workers and preview-only resources for every discovered preview scope")
+    entry("devflare previews cleanup --all", "Show the cleanup plan for every live discovered preview scope"),
+    entry("devflare previews cleanup --all --apply", "Delete dedicated preview Workers and preview-only resources for every live discovered preview scope")
   ], [
     "Dedicated preview Worker scripts are candidates only when their names resolve to the targeted preview scope. Stable shared Workers are never deleted.",
-    "Without `--scope`, the command defaults to the synthetic `preview` scope. Use `--all` when you want every discovered preview scope instead of just that default.",
+    "Without `--scope`, the command defaults to the `preview` scope. Use `--all` when you want every live preview scope Devflare can discover instead of just that default.",
     "Deleting dedicated preview Worker scripts removes preview-only service bindings, Durable Object bindings, and routes owned solely by those Workers.",
     "Omit `--env preview` unless your config stores preview bindings under a different env key.",
     "Analytics Engine datasets and Browser Rendering bindings are intentionally reported as warnings instead of deleted resources."
@@ -1041,6 +1047,138 @@ function renderHelp(path, options = {}) {
   };
 }
 
+// src/cli/workspace-build-guard.ts
+import { readdir, readFile, stat } from "node:fs/promises";
+import { dirname, join } from "pathe";
+import { fileURLToPath } from "node:url";
+function isTruthyEnvFlag(value) {
+  const normalized = value?.trim().toLowerCase();
+  return normalized !== undefined && ["1", "true", "yes", "on"].includes(normalized);
+}
+function isCiEnvironment(env) {
+  return isTruthyEnvFlag(env.CI) || isTruthyEnvFlag(env.GITHUB_ACTIONS);
+}
+async function pathExists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readPackageName(packageRoot) {
+  try {
+    const packageJson = JSON.parse(await readFile(join(packageRoot, "package.json"), "utf8"));
+    return typeof packageJson.name === "string" ? packageJson.name : undefined;
+  } catch {
+    return;
+  }
+}
+async function findLocalDevflarePackageRoot(startDirectory) {
+  let currentDirectory = startDirectory;
+  while (true) {
+    if (await pathExists(join(currentDirectory, "package.json"))) {
+      const packageName = await readPackageName(currentDirectory);
+      if (packageName === "devflare") {
+        return currentDirectory;
+      }
+    }
+    const parentDirectory = dirname(currentDirectory);
+    if (parentDirectory === currentDirectory) {
+      return;
+    }
+    currentDirectory = parentDirectory;
+  }
+}
+async function getLatestModifiedTime(path) {
+  if (!await pathExists(path)) {
+    return;
+  }
+  const entry2 = await stat(path);
+  if (entry2.isFile()) {
+    return entry2.mtimeMs;
+  }
+  if (!entry2.isDirectory()) {
+    return;
+  }
+  let newestModifiedTime = 0;
+  const children = await readdir(path, { withFileTypes: true });
+  for (const child of children) {
+    if (child.name === "node_modules" || child.name === ".turbo") {
+      continue;
+    }
+    const childModifiedTime = await getLatestModifiedTime(join(path, child.name));
+    if (typeof childModifiedTime === "number" && childModifiedTime > newestModifiedTime) {
+      newestModifiedTime = childModifiedTime;
+    }
+  }
+  return newestModifiedTime > 0 ? newestModifiedTime : entry2.mtimeMs;
+}
+async function getLocalWorkspaceBuildStatus(options = {}) {
+  const packageRoot = options.packageRoot ?? await findLocalDevflarePackageRoot(dirname(fileURLToPath(import.meta.url)));
+  if (!packageRoot) {
+    return {
+      state: "not-applicable"
+    };
+  }
+  const sourceDirectory = join(packageRoot, "src");
+  if (!await pathExists(sourceDirectory)) {
+    return {
+      state: "not-applicable",
+      packageRoot
+    };
+  }
+  const distDirectory = join(packageRoot, "dist");
+  if (!await pathExists(distDirectory)) {
+    const sourceNewestAt2 = await getLatestModifiedTime(sourceDirectory);
+    return {
+      state: "missing-dist",
+      packageRoot,
+      ...typeof sourceNewestAt2 === "number" ? { sourceNewestAt: new Date(sourceNewestAt2) } : {}
+    };
+  }
+  const [sourceNewestAt, distNewestAt] = await Promise.all([
+    getLatestModifiedTime(sourceDirectory),
+    getLatestModifiedTime(distDirectory)
+  ]);
+  if (typeof sourceNewestAt !== "number" || typeof distNewestAt !== "number") {
+    return {
+      state: "not-applicable",
+      packageRoot
+    };
+  }
+  return {
+    state: sourceNewestAt > distNewestAt ? "stale" : "fresh",
+    packageRoot,
+    sourceNewestAt: new Date(sourceNewestAt),
+    distNewestAt: new Date(distNewestAt)
+  };
+}
+async function getLocalWorkspaceBuildGuardMessage(command, options = {}) {
+  if (!["build", "deploy", "types"].includes(command)) {
+    return;
+  }
+  const env = options.env ?? process.env;
+  if (isTruthyEnvFlag(env.DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD)) {
+    return;
+  }
+  if (isCiEnvironment(env)) {
+    return;
+  }
+  const status = await getLocalWorkspaceBuildStatus({
+    packageRoot: options.packageRoot
+  });
+  if (status.state === "fresh" || status.state === "not-applicable") {
+    return;
+  }
+  const timestampSummary = status.sourceNewestAt ? ` Latest source change: ${status.sourceNewestAt.toISOString()}.` : "";
+  const distTimestampSummary = status.distNewestAt ? ` Latest dist build: ${status.distNewestAt.toISOString()}.` : "";
+  if (status.state === "missing-dist") {
+    return `Local Devflare workspace exports are missing. Running \`devflare ${command}\` from this repository can mix the live CLI source with missing runtime exports. Run \`bun run --cwd packages/devflare build\` first, or set DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD=true to bypass this guard.${timestampSummary}`;
+  }
+  return `Local Devflare workspace exports are stale. Running \`devflare ${command}\` from this repository can mix newer CLI source with older \`devflare/runtime\` exports.${timestampSummary}${distTimestampSummary} Run \`bun run --cwd packages/devflare build\` first, or set DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD=true to bypass this guard.`;
+}
+
 // src/cli/index.ts
 function parseArgs(argv) {
   const args = [];
@@ -1122,6 +1260,11 @@ async function runCli(argv, options = {}) {
     logLine(logger, renderedHelp.styled);
     return { exitCode: 0, output: renderedHelp.plain };
   }
+  const workspaceBuildGuardMessage = await getLocalWorkspaceBuildGuardMessage(parsed.command);
+  if (workspaceBuildGuardMessage) {
+    logger.error(workspaceBuildGuardMessage);
+    return { exitCode: 1 };
+  }
   switch (parsed.command) {
     case "version":
       const version = await getPackageVersion();
@@ -1163,58 +1306,58 @@ async function runCli(argv, options = {}) {
   }
 }
 async function runInit(parsed, logger, options) {
-  const { runInitCommand } = await import("./init-r4hnxan3.js");
+  const { runInitCommand } = await import("./init-wfh63bfz.js");
   return runInitCommand(parsed, logger, options);
 }
 async function runDev(parsed, logger, options) {
-  const { runDevCommand } = await import("./dev-2pd33m28.js");
+  const { runDevCommand } = await import("./dev-qqysg50t.js");
   return runDevCommand(parsed, logger, options);
 }
 async function runBuild(parsed, logger, options) {
-  const { runBuildCommand } = await import("./build-66866ahs.js");
+  const { runBuildCommand } = await import("./build-28561w5v.js");
   return runBuildCommand(parsed, logger, options);
 }
 async function runDeploy(parsed, logger, options) {
-  const { runDeployCommand } = await import("./deploy-ex4g5avz.js");
+  const { runDeployCommand } = await import("./deploy-t9dehmn0.js");
   return runDeployCommand(parsed, logger, {
     ...options,
     requireExplicitDeployTarget: true
   });
 }
 async function runTypes(parsed, logger, options) {
-  const { runTypesCommand } = await import("./types-0sqwkp7x.js");
+  const { runTypesCommand } = await import("./types-rv5xwgsn.js");
   return runTypesCommand(parsed, logger, options);
 }
 async function runDoctor(parsed, logger, options) {
-  const { runDoctorCommand } = await import("./doctor-04ammrrh.js");
+  const { runDoctorCommand } = await import("./doctor-fmqsrafk.js");
   return runDoctorCommand(parsed, logger, options);
 }
 async function runConfig(parsed, logger, options) {
-  const { runConfigCommand } = await import("./config-q0g5qdga.js");
+  const { runConfigCommand } = await import("./config-gpexkzth.js");
   return runConfigCommand(parsed, logger, options);
 }
 async function runAccount(parsed, logger, options) {
-  const { runAccountCommand } = await import("./account-pzq69nys.js");
+  const { runAccountCommand } = await import("./account-9gt3tej1.js");
   return runAccountCommand(parsed, logger, options);
 }
 async function runLogin(parsed, logger, options) {
-  const { runLoginCommand } = await import("./login-2hnz4m4n.js");
+  const { runLoginCommand } = await import("./login-b51faqpc.js");
   return runLoginCommand(parsed, logger, options);
 }
 async function runPreviews(parsed, logger, options) {
-  const { runPreviewsCommand } = await import("./previews-q031mx34.js");
+  const { runPreviewsCommand } = await import("./previews-q8ph9wbe.js");
   return runPreviewsCommand(parsed, logger, options);
 }
 async function runProductions(parsed, logger, options) {
-  const { runProductionsCommand } = await import("./productions-120xg0aq.js");
+  const { runProductionsCommand } = await import("./productions-bf2cnr05.js");
   return runProductionsCommand(parsed, logger, options);
 }
 async function runWorker(parsed, logger, options) {
-  const { runWorkerCommand } = await import("./worker-qtam8grz.js");
+  const { runWorkerCommand } = await import("./worker-ttj7vwce.js");
   return runWorkerCommand(parsed, logger, options);
 }
 async function runToken(parsed, logger, options) {
-  const { runTokenCommand } = await import("./token-kedhcret.js");
+  const { runTokenCommand } = await import("./token-grwp8z4q.js");
   return runTokenCommand(parsed, logger, options);
 }
 async function runAI() {