miniflare 0.0.0-05973bba4 → 0.0.0-05b1e8391

package/dist/src/index.js

@@ -254,17 +254,17 @@ var require_ignore = __commonJS({
     var throwError = (message, Ctor) => {
       throw new Ctor(message);
     };
-    var checkPath = (path30, originalPath, doThrow) => {
-      if (!isString(path30)) {
+    var checkPath = (path33, originalPath, doThrow) => {
+      if (!isString(path33)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
         );
       }
-      if (!path30) {
+      if (!path33) {
         return doThrow(`path must not be empty`, TypeError);
       }
-      if (checkPath.isNotRelative(path30)) {
+      if (checkPath.isNotRelative(path33)) {
         const r = "`path.relative()`d";
         return doThrow(
           `path should be a ${r} string, but got "${originalPath}"`,
@@ -273,7 +273,7 @@ var require_ignore = __commonJS({
       }
       return true;
     };
-    var isNotRelative = (path30) => REGEX_TEST_INVALID_PATH.test(path30);
+    var isNotRelative = (path33) => REGEX_TEST_INVALID_PATH.test(path33);
     checkPath.isNotRelative = isNotRelative;
     checkPath.convert = (p) => p;
     var Ignore = class {
@@ -332,7 +332,7 @@ var require_ignore = __commonJS({
       //   setting `checkUnignored` to `false` could reduce additional
       //   path matching.
       // @returns {TestResult} true if a file is ignored
-      _testOne(path30, checkUnignored) {
+      _testOne(path33, checkUnignored) {
         let ignored2 = false;
         let unignored = false;
         this._rules.forEach((rule) => {
@@ -340,7 +340,7 @@ var require_ignore = __commonJS({
           if (unignored === negative && ignored2 !== unignored || negative && !ignored2 && !unignored && !checkUnignored) {
             return;
           }
-          const matched = rule.regex.test(path30);
+          const matched = rule.regex.test(path33);
           if (matched) {
             ignored2 = !negative;
             unignored = negative;
@@ -353,24 +353,24 @@ var require_ignore = __commonJS({
       }
       // @returns {TestResult}
       _test(originalPath, cache, checkUnignored, slices) {
-        const path30 = originalPath && checkPath.convert(originalPath);
+        const path33 = originalPath && checkPath.convert(originalPath);
         checkPath(
-          path30,
+          path33,
           originalPath,
           this._allowRelativePaths ? RETURN_FALSE : throwError
         );
-        return this._t(path30, cache, checkUnignored, slices);
+        return this._t(path33, cache, checkUnignored, slices);
       }
-      _t(path30, cache, checkUnignored, slices) {
-        if (path30 in cache) {
-          return cache[path30];
+      _t(path33, cache, checkUnignored, slices) {
+        if (path33 in cache) {
+          return cache[path33];
         }
         if (!slices) {
-          slices = path30.split(SLASH);
+          slices = path33.split(SLASH);
         }
         slices.pop();
         if (!slices.length) {
-          return cache[path30] = this._testOne(path30, checkUnignored);
+          return cache[path33] = this._testOne(path33, checkUnignored);
         }
         const parent = this._t(
           slices.join(SLASH) + SLASH,
@@ -378,24 +378,24 @@ var require_ignore = __commonJS({
           checkUnignored,
           slices
         );
-        return cache[path30] = parent.ignored ? parent : this._testOne(path30, checkUnignored);
+        return cache[path33] = parent.ignored ? parent : this._testOne(path33, checkUnignored);
       }
-      ignores(path30) {
-        return this._test(path30, this._ignoreCache, false).ignored;
+      ignores(path33) {
+        return this._test(path33, this._ignoreCache, false).ignored;
       }
       createFilter() {
-        return (path30) => !this.ignores(path30);
+        return (path33) => !this.ignores(path33);
       }
       filter(paths) {
         return makeArray(paths).filter(this.createFilter());
       }
       // @returns {TestResult}
-      test(path30) {
-        return this._test(path30, this._testCache, true);
+      test(path33) {
+        return this._test(path33, this._testCache, true);
       }
     };
     var factory = (options) => new Ignore(options);
-    var isPathValid = (path30) => checkPath(path30 && checkPath.convert(path30), path30, RETURN_FALSE);
+    var isPathValid = (path33) => checkPath(path33 && checkPath.convert(path33), path33, RETURN_FALSE);
     factory.isPathValid = isPathValid;
     factory.default = factory;
     module2.exports = factory;
@@ -406,7 +406,7 @@ var require_ignore = __commonJS({
       const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
       checkPath.convert = makePosix;
       const REGIX_IS_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path30) => REGIX_IS_WINDOWS_PATH_ABSOLUTE.test(path30) || isNotRelative(path30);
+      checkPath.isNotRelative = (path33) => REGIX_IS_WINDOWS_PATH_ABSOLUTE.test(path33) || isNotRelative(path33);
     }
   }
 });
@@ -449,11 +449,11 @@ var require_Mime = __commonJS({
         }
       }
     };
-    Mime.prototype.getType = function(path30) {
-      path30 = String(path30);
-      let last = path30.replace(/^.*[/\\]/, "").toLowerCase();
+    Mime.prototype.getType = function(path33) {
+      path33 = String(path33);
+      let last = path33.replace(/^.*[/\\]/, "").toLowerCase();
       let ext = last.replace(/^.*\./, "").toLowerCase();
-      let hasPath = last.length < path30.length;
+      let hasPath = last.length < path33.length;
       let hasDot = ext.length < last.length - 1;
       return (hasDot || !hasPath) && this._types[ext] || null;
     };
@@ -520,6 +520,9 @@ __export(src_exports, {
   DispatchFetchDispatcher: () => DispatchFetchDispatcher,
   DurableObjectsOptionsSchema: () => DurableObjectsOptionsSchema,
   DurableObjectsSharedOptionsSchema: () => DurableObjectsSharedOptionsSchema,
+  EMAIL_PLUGIN: () => EMAIL_PLUGIN,
+  EMAIL_PLUGIN_NAME: () => EMAIL_PLUGIN_NAME,
+  EmailOptionsSchema: () => EmailOptionsSchema,
   ErrorEvent: () => ErrorEvent,
   File: () => import_undici4.File,
   FormData: () => import_undici4.FormData,
@@ -541,6 +544,7 @@ __export(src_exports, {
   LiteralSchema: () => LiteralSchema,
   Log: () => Log,
   LogLevel: () => LogLevel,
+  MAX_BULK_GET_KEYS: () => MAX_BULK_GET_KEYS,
   MessageEvent: () => MessageEvent,
   Miniflare: () => Miniflare2,
   MiniflareCoreError: () => MiniflareCoreError,
@@ -589,11 +593,15 @@ __export(src_exports, {
   Response: () => Response,
   RouterError: () => RouterError,
   Runtime: () => Runtime,
+  SECRET_STORE_PLUGIN: () => SECRET_STORE_PLUGIN,
+  SECRET_STORE_PLUGIN_NAME: () => SECRET_STORE_PLUGIN_NAME,
   SERVICE_ENTRY: () => SERVICE_ENTRY,
   SERVICE_LOOPBACK: () => SERVICE_LOOPBACK,
   SITES_NO_CACHE_PREFIX: () => SITES_NO_CACHE_PREFIX,
   SOCKET_ENTRY: () => SOCKET_ENTRY,
   SOCKET_ENTRY_LOCAL: () => SOCKET_ENTRY_LOCAL,
+  SecretsStoreSecretsOptionsSchema: () => SecretsStoreSecretsOptionsSchema,
+  SecretsStoreSecretsSharedOptionsSchema: () => SecretsStoreSecretsSharedOptionsSchema,
   SharedBindings: () => SharedBindings,
   SharedHeaders: () => SharedHeaders,
   SiteBindings: () => SiteBindings,
@@ -628,7 +636,7 @@ __export(src_exports, {
   deserialiseRegExps: () => deserialiseRegExps,
   deserialiseSiteRegExps: () => deserialiseSiteRegExps,
   encodeSitesKey: () => encodeSitesKey,
-  fetch: () => fetch3,
+  fetch: () => fetch4,
   formatZodError: () => formatZodError,
   getAccessibleHosts: () => getAccessibleHosts,
   getAssetsBindingsNames: () => getAssetsBindingsNames,
@@ -683,11 +691,12 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 var import_assert12 = __toESM(require("assert"));
 var import_crypto3 = __toESM(require("crypto"));
-var import_fs24 = __toESM(require("fs"));
+var import_fs27 = __toESM(require("fs"));
+var import_promises13 = require("fs/promises");
 var import_http6 = __toESM(require("http"));
 var import_net = __toESM(require("net"));
 var import_os2 = __toESM(require("os"));
-var import_path28 = __toESM(require("path"));
+var import_path31 = __toESM(require("path"));
 var import_web5 = require("stream/web");
 var import_util5 = __toESM(require("util"));
 var import_zlib = __toESM(require("zlib"));
@@ -770,8 +779,8 @@ function zod_worker_default() {
 }
 
 // src/index.ts
-var import_ws3 = require("ws");
-var import_zod23 = require("zod");
+var import_ws5 = require("ws");
+var import_zod25 = require("zod");
 
 // src/cf.ts
 var import_assert = __toESM(require("assert"));
@@ -909,7 +918,9 @@ var CoreBindings = {
   DATA_LIVE_RELOAD_SCRIPT: "MINIFLARE_LIVE_RELOAD_SCRIPT",
   DURABLE_OBJECT_NAMESPACE_PROXY: "MINIFLARE_PROXY",
   DATA_PROXY_SECRET: "MINIFLARE_PROXY_SECRET",
-  DATA_PROXY_SHARED_SECRET: "MINIFLARE_PROXY_SHARED_SECRET"
+  DATA_PROXY_SHARED_SECRET: "MINIFLARE_PROXY_SHARED_SECRET",
+  TRIGGER_HANDLERS: "TRIGGER_HANDLERS",
+  LOG_REQUESTS: "LOG_REQUESTS"
 };
 var ProxyOps = {
   // Get the target or a property of the target
@@ -1354,12 +1365,12 @@ function createHTTPRevivers(impl) {
     },
     Request(value) {
       (0, import_node_assert.default)(Array.isArray(value));
-      const [method, url20, headers, cf, body] = value;
+      const [method, url23, headers, cf, body] = value;
       (0, import_node_assert.default)(typeof method === "string");
-      (0, import_node_assert.default)(typeof url20 === "string");
+      (0, import_node_assert.default)(typeof url23 === "string");
       (0, import_node_assert.default)(headers instanceof impl.Headers);
       (0, import_node_assert.default)(body === null || impl.isReadableStream(body));
-      return new impl.Request(url20, {
+      return new impl.Request(url23, {
         method,
         headers,
         cf,
@@ -1485,19 +1496,19 @@ function parseWithReadableStreams(impl, stringified, revivers2) {
 }
 
 // src/workers/core/routing.ts
-function matchRoutes(routes, url20) {
+function matchRoutes(routes, url23) {
   for (const route of routes) {
-    if (route.protocol && route.protocol !== url20.protocol) continue;
+    if (route.protocol && route.protocol !== url23.protocol) continue;
     if (route.allowHostnamePrefix) {
-      if (!url20.hostname.endsWith(route.hostname)) continue;
+      if (!url23.hostname.endsWith(route.hostname)) continue;
     } else {
-      if (url20.hostname !== route.hostname) continue;
+      if (url23.hostname !== route.hostname) continue;
     }
-    const path30 = url20.pathname + url20.search;
+    const path33 = url23.pathname + url23.search;
     if (route.allowPathSuffix) {
-      if (!path30.startsWith(route.path)) continue;
+      if (!path33.startsWith(route.path)) continue;
     } else {
-      if (path30 !== route.path) continue;
+      if (path33 !== route.path) continue;
     }
     return route.target;
   }
@@ -1697,7 +1708,8 @@ var KVLimits = {
   MAX_KEY_SIZE: 512,
   MAX_VALUE_SIZE: 25 * 1024 * 1024,
   MAX_VALUE_SIZE_TEST: 1024,
-  MAX_METADATA_SIZE: 1024
+  MAX_METADATA_SIZE: 1024,
+  MAX_BULK_SIZE: 25 * 1024 * 1024
 };
 var KVParams = {
   URL_ENCODED: "urlencoded",
@@ -1718,6 +1730,7 @@ var SiteBindings = {
   JSON_SITE_FILTER: "MINIFLARE_SITE_FILTER"
 };
 var SITES_NO_CACHE_PREFIX = "$__MINIFLARE_SITES__$/";
+var MAX_BULK_GET_KEYS = 100;
 function encodeSitesKey(key) {
   return SITES_NO_CACHE_PREFIX + encodeURIComponent(key);
 }
@@ -1725,8 +1738,8 @@ function decodeSitesKey(key) {
   return key.startsWith(SITES_NO_CACHE_PREFIX) ? decodeURIComponent(key.substring(SITES_NO_CACHE_PREFIX.length)) : key;
 }
 function isSitesRequest(request) {
-  const url20 = new URL(request.url);
-  return url20.pathname.startsWith(`/${SITES_NO_CACHE_PREFIX}`);
+  const url23 = new URL(request.url);
+  return url23.pathname.startsWith(`/${SITES_NO_CACHE_PREFIX}`);
 }
 function serialiseRegExp(regExp) {
   const str = regExp.toString();
@@ -1877,8 +1890,8 @@ var Response = class _Response extends import_undici3.Response {
     Object.setPrototypeOf(response, _Response.prototype);
     return response;
   }
-  static redirect(url20, status) {
-    const response = import_undici3.Response.redirect(url20, status);
+  static redirect(url23, status) {
+    const response = import_undici3.Response.redirect(url23, status);
     Object.setPrototypeOf(response, _Response.prototype);
     return response;
   }
@@ -2359,18 +2372,18 @@ function headersFromIncomingRequest(req) {
   );
   return new undici.Headers(Object.fromEntries(entries));
 }
-async function fetch3(input, init2) {
+async function fetch4(input, init2) {
   const requestInit = init2;
   const request = new Request(input, requestInit);
   if (request.method === "GET" && request.headers.get("upgrade") === "websocket") {
-    const url20 = new URL(request.url);
-    if (url20.protocol !== "http:" && url20.protocol !== "https:") {
+    const url23 = new URL(request.url);
+    if (url23.protocol !== "http:" && url23.protocol !== "https:") {
       throw new TypeError(
-        `Fetch API cannot load: ${url20.toString()}.
+        `Fetch API cannot load: ${url23.toString()}.
 Make sure you're using http(s):// URLs for WebSocket requests via fetch.`
       );
     }
-    url20.protocol = url20.protocol.replace("http", "ws");
+    url23.protocol = url23.protocol.replace("http", "ws");
     const headers = {};
     let protocols;
     for (const [key, value] of request.headers.entries()) {
@@ -2382,10 +2395,10 @@ Make sure you're using http(s):// URLs for WebSocket requests via fetch.`
     }
     let rejectUnauthorized;
     if (requestInit.dispatcher instanceof DispatchFetchDispatcher) {
-      requestInit.dispatcher.addHeaders(headers, url20.pathname + url20.search);
+      requestInit.dispatcher.addHeaders(headers, url23.pathname + url23.search);
       rejectUnauthorized = { rejectUnauthorized: false };
     }
-    const ws = new import_ws2.default(url20, protocols, {
+    const ws = new import_ws2.default(url23, protocols, {
       followRedirects: request.redirect === "follow",
       headers,
       ...rejectUnauthorized
@@ -2441,8 +2454,8 @@ var DispatchFetchDispatcher = class extends undici.Dispatcher {
     if (cfBlob !== void 0) this.cfBlobJson = JSON.stringify(cfBlob);
   }
   cfBlobJson;
-  addHeaders(headers, path30) {
-    const originalURL = this.userRuntimeOrigin + path30;
+  addHeaders(headers, path33) {
+    const originalURL = this.userRuntimeOrigin + path33;
     addHeader(headers, CoreHeaders.ORIGINAL_URL, originalURL);
     addHeader(headers, CoreHeaders.DISABLE_PRETTY_ERROR, "true");
     if (this.cfBlobJson !== void 0) {
@@ -2454,16 +2467,16 @@ var DispatchFetchDispatcher = class extends undici.Dispatcher {
     if (origin === this.userRuntimeOrigin) origin = this.actualRuntimeOrigin;
     if (origin === this.actualRuntimeOrigin) {
       options.origin = origin;
-      let path30 = options.path;
+      let path33 = options.path;
       if (options.query !== void 0) {
-        const url20 = new URL(path30, "http://placeholder/");
+        const url23 = new URL(path33, "http://placeholder/");
         for (const [key, value] of Object.entries(options.query)) {
-          url20.searchParams.append(key, value);
+          url23.searchParams.append(key, value);
         }
-        path30 = url20.pathname + url20.search;
+        path33 = url23.pathname + url23.search;
       }
       options.headers ??= {};
-      this.addHeaders(options.headers, path30);
+      this.addHeaders(options.headers, path33);
       return this.runtimeDispatcher.dispatch(options, handler);
     } else {
       return this.globalDispatcher.dispatch(options, handler);
@@ -2558,8 +2571,8 @@ function valueOrFile(value, filePath) {
 var import_os = require("os");
 function getAccessibleHosts(ipv4Only = false) {
   const hosts = [];
-  Object.values((0, import_os.networkInterfaces)()).forEach((net2) => {
-    net2?.forEach(({ family, address }) => {
+  Object.values((0, import_os.networkInterfaces)()).forEach((net3) => {
+    net3?.forEach(({ family, address }) => {
       if (family === "IPv4" || family === 4) {
         hosts.push(address);
       } else if (!ipv4Only) {
@@ -2816,13 +2829,14 @@ ${invalidHeaderRulesList}`
   }
   const rules = {};
   for (const rule of headers.rules) {
-    rules[rule.path] = {};
+    const configuredRule = {};
     if (Object.keys(rule.headers).length) {
-      rules[rule.path].set = rule.headers;
+      configuredRule.set = rule.headers;
     }
     if (rule.unsetHeaders.length) {
-      rules[rule.path].unset = rule.unsetHeaders;
+      configuredRule.unset = rule.unsetHeaders;
     }
+    rules[rule.path] = configuredRule;
   }
   return {
     headers: {
@@ -2833,12 +2847,12 @@ ${invalidHeaderRulesList}`
 }
 
 // ../workers-shared/utils/configuration/validateURL.ts
-var extractPathname = (path30 = "/", includeSearch, includeHash) => {
-  if (!path30.startsWith("/")) {
-    path30 = `/${path30}`;
+var extractPathname = (path33 = "/", includeSearch, includeHash) => {
+  if (!path33.startsWith("/")) {
+    path33 = `/${path33}`;
   }
-  const url20 = new URL(`//${path30}`, "relative://");
-  return `${url20.pathname}${includeSearch ? url20.search : ""}${includeHash ? url20.hash : ""}`;
+  const url23 = new URL(`//${path33}`, "relative://");
+  return `${url23.pathname}${includeSearch ? url23.search : ""}${includeHash ? url23.hash : ""}`;
 };
 var URL_REGEX = /^https:\/\/+(?<host>[^/]+)\/?(?<path>.*)/;
 var HOST_WITH_PORT_REGEX = /.*:\d+$/;
@@ -2870,8 +2884,8 @@ var validateUrl = (token, onlyRelative = false, disallowPorts = false, includeSe
     if (!token.startsWith("/") && onlyRelative) {
       token = `/${token}`;
     }
-    const path30 = PATH_REGEX.exec(token);
-    if (path30) {
+    const path33 = PATH_REGEX.exec(token);
+    if (path33) {
       try {
         return [extractPathname(token, includeSearch, includeHash), void 0];
       } catch {
@@ -2891,26 +2905,29 @@ function urlHasHost(token) {
 
 // ../workers-shared/utils/configuration/parseHeaders.ts
 var LINE_IS_PROBABLY_A_PATH = new RegExp(/^([^\s]+:\/\/|^\/)/);
-function parseHeaders(input) {
+function parseHeaders(input, {
+  maxRules = MAX_HEADER_RULES,
+  maxLineLength = MAX_LINE_LENGTH
+} = {}) {
   const lines = input.split("\n");
   const rules = [];
   const invalid = [];
   let rule = void 0;
   for (let i = 0; i < lines.length; i++) {
-    const line = lines[i].trim();
+    const line = (lines[i] || "").trim();
     if (line.length === 0 || line.startsWith("#")) {
       continue;
     }
-    if (line.length > MAX_LINE_LENGTH) {
+    if (line.length > maxLineLength) {
       invalid.push({
-        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${MAX_LINE_LENGTH}.`
+        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${maxLineLength}.`
       });
       continue;
     }
     if (LINE_IS_PROBABLY_A_PATH.test(line)) {
-      if (rules.length >= MAX_HEADER_RULES) {
+      if (rules.length >= maxRules) {
         invalid.push({
-          message: `Maximum number of rules supported is ${MAX_HEADER_RULES}. Skipping remaining ${lines.length - i} lines of file.`
+          message: `Maximum number of rules supported is ${maxRules}. Skipping remaining ${lines.length - i} lines of file.`
         });
         break;
       }
@@ -2929,7 +2946,7 @@ function parseHeaders(input) {
           });
         }
       }
-      const [path30, pathError] = validateUrl(line, false, true);
+      const [path33, pathError] = validateUrl(line, false, true);
       if (pathError) {
         invalid.push({
           line,
@@ -2940,7 +2957,7 @@ function parseHeaders(input) {
         continue;
       }
       rule = {
-        path: path30,
+        path: path33,
         line,
         headers: {},
         unsetHeaders: []
@@ -2968,7 +2985,7 @@ function parseHeaders(input) {
       continue;
     }
     const [rawName, ...rawValue] = line.split(HEADER_SEPARATOR);
-    const name = rawName.trim().toLowerCase();
+    const name = (rawName || "").trim().toLowerCase();
     if (name.includes(" ")) {
       invalid.push({
         line,
@@ -3026,7 +3043,11 @@ function isValidRule(rule) {
 }
 
 // ../workers-shared/utils/configuration/parseRedirects.ts
-function parseRedirects(input) {
+function parseRedirects(input, {
+  maxStaticRules = MAX_STATIC_REDIRECT_RULES,
+  maxDynamicRules = MAX_DYNAMIC_REDIRECT_RULES,
+  maxLineLength = MAX_LINE_LENGTH
+} = {}) {
   const lines = input.split("\n");
   const rules = [];
   const seen_paths = /* @__PURE__ */ new Set();
@@ -3035,13 +3056,13 @@ function parseRedirects(input) {
   let dynamicRules = 0;
   let canCreateStaticRule = true;
   for (let i = 0; i < lines.length; i++) {
-    const line = lines[i].trim();
+    const line = (lines[i] || "").trim();
     if (line.length === 0 || line.startsWith("#")) {
       continue;
     }
-    if (line.length > MAX_LINE_LENGTH) {
+    if (line.length > maxLineLength) {
       invalid.push({
-        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${MAX_LINE_LENGTH}.`
+        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${maxLineLength}.`
       });
       continue;
     }
@@ -3067,18 +3088,18 @@ function parseRedirects(input) {
     const from = fromResult[0];
     if (canCreateStaticRule && !from.match(SPLAT_REGEX) && !from.match(PLACEHOLDER_REGEX)) {
       staticRules += 1;
-      if (staticRules > MAX_STATIC_REDIRECT_RULES) {
+      if (staticRules > maxStaticRules) {
         invalid.push({
-          message: `Maximum number of static rules supported is ${MAX_STATIC_REDIRECT_RULES}. Skipping line.`
+          message: `Maximum number of static rules supported is ${maxStaticRules}. Skipping line.`
         });
         continue;
       }
     } else {
       dynamicRules += 1;
       canCreateStaticRule = false;
-      if (dynamicRules > MAX_DYNAMIC_REDIRECT_RULES) {
+      if (dynamicRules > maxDynamicRules) {
         invalid.push({
-          message: `Maximum number of dynamic rules supported is ${MAX_DYNAMIC_REDIRECT_RULES}. Skipping remaining ${lines.length - i} lines of file.`
+          message: `Maximum number of dynamic rules supported is ${maxDynamicRules}. Skipping remaining ${lines.length - i} lines of file.`
         });
         break;
       }
@@ -10093,11 +10114,11 @@ var kUnsafeEphemeralUniqueKey = Symbol.for(
 var import_url12 = require("url");
 var RouterError = class extends MiniflareError {
 };
-function routeSpecificity(url20) {
-  const hostParts = url20.host.split(".");
+function routeSpecificity(url23) {
+  const hostParts = url23.host.split(".");
   let hostScore = hostParts.length;
   if (hostParts[0] === "*") hostScore -= 2;
-  const pathParts = url20.pathname.split("/");
+  const pathParts = url23.pathname.split("/");
   let pathScore = pathParts.length;
   if (pathParts[pathParts.length - 1] === "*") pathScore -= 2;
   return hostScore * 26 + pathScore;
@@ -10109,30 +10130,30 @@ function parseRoutes(allRoutes) {
       const hasProtocol = /^[a-z0-9+\-.]+:\/\//i.test(route);
       let urlInput = route;
       if (!hasProtocol) urlInput = `https://${urlInput}`;
-      const url20 = new import_url12.URL(urlInput);
-      const specificity = routeSpecificity(url20);
-      const protocol = hasProtocol ? url20.protocol : void 0;
-      const internationalisedAllowHostnamePrefix = url20.hostname.startsWith("xn--*");
-      const allowHostnamePrefix = url20.hostname.startsWith("*") || internationalisedAllowHostnamePrefix;
-      const anyHostname = url20.hostname === "*";
+      const url23 = new import_url12.URL(urlInput);
+      const specificity = routeSpecificity(url23);
+      const protocol = hasProtocol ? url23.protocol : void 0;
+      const internationalisedAllowHostnamePrefix = url23.hostname.startsWith("xn--*");
+      const allowHostnamePrefix = url23.hostname.startsWith("*") || internationalisedAllowHostnamePrefix;
+      const anyHostname = url23.hostname === "*";
       if (allowHostnamePrefix && !anyHostname) {
-        let hostname = url20.hostname;
+        let hostname = url23.hostname;
         if (internationalisedAllowHostnamePrefix) {
           hostname = (0, import_url12.domainToUnicode)(hostname);
         }
-        url20.hostname = hostname.substring(1);
+        url23.hostname = hostname.substring(1);
       }
-      const allowPathSuffix = url20.pathname.endsWith("*");
+      const allowPathSuffix = url23.pathname.endsWith("*");
       if (allowPathSuffix) {
-        url20.pathname = url20.pathname.substring(0, url20.pathname.length - 1);
+        url23.pathname = url23.pathname.substring(0, url23.pathname.length - 1);
       }
-      if (url20.search) {
+      if (url23.search) {
         throw new RouterError(
           "ERR_QUERY_STRING",
           `Route "${route}" for "${target}" contains a query string. This is not allowed.`
         );
       }
-      if (url20.toString().includes("*") && !anyHostname) {
+      if (url23.toString().includes("*") && !anyHostname) {
         throw new RouterError(
           "ERR_INFIX_WILDCARD",
           `Route "${route}" for "${target}" contains an infix wildcard. This is not allowed.`
@@ -10144,8 +10165,8 @@ function parseRoutes(allRoutes) {
         specificity,
         protocol,
         allowHostnamePrefix,
-        hostname: anyHostname ? "" : url20.hostname,
-        path: url20.pathname,
+        hostname: anyHostname ? "" : url23.hostname,
+        path: url23.pathname,
         allowPathSuffix
       });
     }
@@ -10186,10 +10207,10 @@ function namespaceEntries(namespaces) {
     return [];
   }
 }
-function maybeParseURL(url20) {
-  if (typeof url20 !== "string" || import_path15.default.isAbsolute(url20)) return;
+function maybeParseURL(url23) {
+  if (typeof url23 !== "string" || import_path15.default.isAbsolute(url23)) return;
   try {
-    return new URL(url20);
+    return new URL(url23);
   } catch {
   }
 }
@@ -10198,16 +10219,16 @@ function getPersistPath(pluginName, tmpPath, persist) {
   if (persist === void 0 || persist === false) {
     return memoryishPath;
   }
-  const url20 = maybeParseURL(persist);
-  if (url20 !== void 0) {
-    if (url20.protocol === "memory:") {
+  const url23 = maybeParseURL(persist);
+  if (url23 !== void 0) {
+    if (url23.protocol === "memory:") {
       return memoryishPath;
-    } else if (url20.protocol === "file:") {
-      return (0, import_url13.fileURLToPath)(url20);
+    } else if (url23.protocol === "file:") {
+      return (0, import_url13.fileURLToPath)(url23);
     }
     throw new MiniflareCoreError(
       "ERR_PERSIST_UNSUPPORTED",
-      `Unsupported "${url20.protocol}" persistence protocol for storage: ${url20.href}`
+      `Unsupported "${url23.protocol}" persistence protocol for storage: ${url23.href}`
     );
   }
   return persist === true ? import_path15.default.join(DEFAULT_PERSIST_ROOT, pluginName) : persist;
@@ -10541,7 +10562,7 @@ function parseNodeCompatibilityFlags(compatibilityFlags) {
 
 // src/plugins/core/modules.ts
 var SUGGEST_BUNDLE = "If you're trying to import an npm package, you'll need to bundle your Worker first.";
-var SUGGEST_NODE = "If you're trying to import a Node.js built-in module, or an npm package that uses Node.js built-ins, you'll either need to:\n- Bundle your Worker, configuring your bundler to polyfill Node.js built-ins\n- Configure your bundler to load Workers-compatible builds by changing the main fields/conditions\n- Enable the `nodejs_compat` compatibility flag and use the `NodeJsCompatModule` module type\n- Find an alternative package that doesn't require Node.js built-ins";
+var SUGGEST_NODE = "If you're trying to import a Node.js built-in module, or an npm package that uses Node.js built-ins, you'll either need to:\n- Bundle your Worker, configuring your bundler to polyfill Node.js built-ins\n- Configure your bundler to load Workers-compatible builds by changing the main fields/conditions\n- Enable the `nodejs_compat` compatibility flag\n- Find an alternative package that doesn't require Node.js built-ins";
 var builtinModulesWithPrefix = import_module.builtinModules.concat(
   import_module.builtinModules.map((module2) => `node:${module2}`)
 );
@@ -10556,7 +10577,6 @@ function maybeGetStringScriptPathIndex(scriptPath) {
 var ModuleRuleTypeSchema = import_zod9.z.enum([
   "ESModule",
   "CommonJS",
-  "NodeJsCompatModule",
   "Text",
   "Data",
   "CompiledWasm",
@@ -10736,12 +10756,11 @@ ${dim(modulesConfig)}`;
       throw new MiniflareCoreError("ERR_MODULE_DYNAMIC_SPEC", message);
     }
     const spec = specExpression.value;
-    const isNodeJsCompatModule = referencingType === "NodeJsCompatModule";
     if (
       // `cloudflare:` and `workerd:` imports don't need to be included explicitly
       spec.startsWith("cloudflare:") || spec.startsWith("workerd:") || // Node.js compat v1 requires imports to be prefixed with `node:`
       this.#nodejsCompatMode === "v1" && spec.startsWith("node:") || // Node.js compat modules and v2 can also handle non-prefixed imports
-      (this.#nodejsCompatMode === "v2" || isNodeJsCompatModule) && builtinModulesWithPrefix.includes(spec) || // Async Local Storage mode (node_als) only deals with `node:async_hooks` imports
+      this.#nodejsCompatMode === "v2" && builtinModulesWithPrefix.includes(spec) || // Async Local Storage mode (node_als) only deals with `node:async_hooks` imports
       this.#nodejsCompatMode === "als" && spec === "node:async_hooks" || // Any "additional" external modules can be ignored
       this.additionalModuleNames.includes(spec)
     ) {
@@ -10775,7 +10794,6 @@ ${suggestion}`
     switch (rule.type) {
       case "ESModule":
       case "CommonJS":
-      case "NodeJsCompatModule":
         const code = data.toString("utf8");
         this.#visitJavaScriptModule(code, identifier, rule.type);
         break;
@@ -10806,61 +10824,56 @@ function createJavaScriptModule(code, name, modulePath, type) {
     return { name, esModule: code };
   } else if (type === "CommonJS") {
     return { name, commonJsModule: code };
-  } else if (type === "NodeJsCompatModule") {
-    return { name, nodeJsCompatModule: code };
   }
   const exhaustive = type;
   import_assert5.default.fail(`Unreachable: ${exhaustive} JavaScript modules are unsupported`);
 }
 var encoder = new import_util.TextEncoder();
 var decoder = new import_util.TextDecoder();
-function contentsToString(contents20) {
-  return typeof contents20 === "string" ? contents20 : decoder.decode(contents20);
+function contentsToString(contents23) {
+  return typeof contents23 === "string" ? contents23 : decoder.decode(contents23);
 }
-function contentsToArray(contents20) {
-  return typeof contents20 === "string" ? encoder.encode(contents20) : contents20;
+function contentsToArray(contents23) {
+  return typeof contents23 === "string" ? encoder.encode(contents23) : contents23;
 }
 function convertModuleDefinition(modulesRoot, def) {
   const name = moduleName(modulesRoot, def.path);
-  const contents20 = def.contents ?? (0, import_fs13.readFileSync)(def.path);
+  const contents23 = def.contents ?? (0, import_fs13.readFileSync)(def.path);
   switch (def.type) {
     case "ESModule":
     case "CommonJS":
-    case "NodeJsCompatModule":
       return createJavaScriptModule(
-        contentsToString(contents20),
+        contentsToString(contents23),
         name,
         import_path16.default.resolve(modulesRoot, def.path),
         def.type
       );
     case "Text":
-      return { name, text: contentsToString(contents20) };
+      return { name, text: contentsToString(contents23) };
     case "Data":
-      return { name, data: contentsToArray(contents20) };
+      return { name, data: contentsToArray(contents23) };
     case "CompiledWasm":
-      return { name, wasm: contentsToArray(contents20) };
+      return { name, wasm: contentsToArray(contents23) };
     case "PythonModule":
-      return { name, pythonModule: contentsToString(contents20) };
+      return { name, pythonModule: contentsToString(contents23) };
     case "PythonRequirement":
-      return { name, pythonRequirement: contentsToString(contents20) };
+      return { name, pythonRequirement: contentsToString(contents23) };
     default:
       const exhaustive = def.type;
       import_assert5.default.fail(`Unreachable: ${exhaustive} modules are unsupported`);
   }
 }
 function convertWorkerModule(mod) {
-  const path30 = mod.name;
-  (0, import_assert5.default)(path30 !== void 0);
+  const path33 = mod.name;
+  (0, import_assert5.default)(path33 !== void 0);
   const m = mod;
-  if ("esModule" in m) return { path: path30, type: "ESModule" };
-  else if ("commonJsModule" in m) return { path: path30, type: "CommonJS" };
-  else if ("nodeJsCompatModule" in m)
-    return { path: path30, type: "NodeJsCompatModule" };
-  else if ("text" in m) return { path: path30, type: "Text" };
-  else if ("data" in m) return { path: path30, type: "Data" };
-  else if ("wasm" in m) return { path: path30, type: "CompiledWasm" };
-  else if ("pythonModule" in m) return { path: path30, type: "PythonModule" };
-  else if ("pythonRequirement" in m) return { path: path30, type: "PythonRequirement" };
+  if ("esModule" in m) return { path: path33, type: "ESModule" };
+  else if ("commonJsModule" in m) return { path: path33, type: "CommonJS" };
+  else if ("text" in m) return { path: path33, type: "Text" };
+  else if ("data" in m) return { path: path33, type: "Data" };
+  else if ("wasm" in m) return { path: path33, type: "CompiledWasm" };
+  else if ("pythonModule" in m) return { path: path33, type: "PythonModule" };
+  else if ("pythonRequirement" in m) return { path: path33, type: "PythonRequirement" };
   (0, import_assert5.default)(
     !("json" in m || "fallbackService" in m),
     "Unreachable: json or fallbackService modules aren't generated"
@@ -11061,8 +11074,8 @@ function getSourceMapper() {
 // src/plugins/core/errors/index.ts
 function maybeGetDiskFile(filePath) {
   try {
-    const contents20 = import_fs14.default.readFileSync(filePath, "utf8");
-    return { path: filePath, contents: contents20 };
+    const contents23 = import_fs14.default.readFileSync(filePath, "utf8");
+    return { path: filePath, contents: contents23 };
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
@@ -11076,8 +11089,8 @@ function maybeGetFile2(workerSrcOpts, fileSpecifier) {
         const modulesRoot = srcOpts.modulesRoot ?? "";
         for (const module2 of srcOpts.modules) {
           if (module2.contents !== void 0 && import_path17.default.resolve(modulesRoot, module2.path) === filePath) {
-            const contents20 = contentsToString(module2.contents);
-            return { path: filePath, contents: contents20 };
+            const contents23 = contentsToString(module2.contents);
+            return { path: filePath, contents: contents23 };
           }
         }
       } else if ("script" in srcOpts && "scriptPath" in srcOpts && srcOpts.script !== void 0 && srcOpts.scriptPath !== void 0) {
@@ -11256,7 +11269,7 @@ var SynchronousFetcher = class {
       transferList: [this.#channel.port2]
     });
   }
-  fetch(url20, init2) {
+  fetch(url23, init2) {
     this.#ensureWorker();
     Atomics.store(
       this.#notifyHandle,
@@ -11269,7 +11282,7 @@ var SynchronousFetcher = class {
     this.#channel.port1.postMessage({
       id,
       method: init2.method,
-      url: url20.toString(),
+      url: url23.toString(),
       headers: init2.headers,
       body: init2.body
     });
@@ -11389,8 +11402,8 @@ var ProxyClient = class {
   }
 };
 var ProxyClientBridge = class {
-  constructor(url20, dispatchFetch) {
-    this.url = url20;
+  constructor(url23, dispatchFetch) {
+    this.url = url23;
     this.dispatchFetch = dispatchFetch;
     this.#finalizationRegistry = new FinalizationRegistry(this.#finalizeProxy);
   }
@@ -11884,6 +11897,7 @@ var CoreOptionsSchemaInput = import_zod12.z.intersection(
     rootPath: UnusableStringSchema.optional(),
     compatibilityDate: import_zod12.z.string().optional(),
     compatibilityFlags: import_zod12.z.string().array().optional(),
+    unsafeInspectorProxy: import_zod12.z.boolean().optional(),
     routes: import_zod12.z.string().array().optional(),
     bindings: import_zod12.z.record(JsonSchema).optional(),
     wasmBindings: import_zod12.z.record(import_zod12.z.union([PathSchema, import_zod12.z.instanceof(Uint8Array)])).optional(),
@@ -11902,8 +11916,7 @@ var CoreOptionsSchemaInput = import_zod12.z.intersection(
      (If there are assets but we're not using vitest, the miniflare entry worker can point directly to
      Router Worker)
      */
-    hasAssetsAndIsVitest: import_zod12.z.boolean().optional(),
-    unsafeEnableAssetsRpc: import_zod12.z.boolean().optional()
+    hasAssetsAndIsVitest: import_zod12.z.boolean().optional()
   })
 );
 var CoreOptionsSchema = CoreOptionsSchemaInput.transform((value) => {
@@ -11916,7 +11929,7 @@ var CoreOptionsSchema = CoreOptionsSchemaInput.transform((value) => {
       );
     }
     value.fetchMock = void 0;
-    value.outboundService = (req) => fetch3(req, { dispatcher: fetchMock });
+    value.outboundService = (req) => fetch4(req, { dispatcher: fetchMock });
   }
   return value;
 });
@@ -11944,7 +11957,10 @@ var CoreSharedOptionsSchema = import_zod12.z.object({
   unsafeModuleFallbackService: ServiceFetchSchema.optional(),
   // Keep blobs when deleting/overwriting keys, required for stacked storage
   unsafeStickyBlobs: import_zod12.z.boolean().optional(),
-  unsafeEnableAssetsRpc: import_zod12.z.boolean().optional()
+  // Enable directly triggering user Worker handlers with paths like `/cdn-cgi/handler/scheduled`
+  unsafeTriggerHandlers: import_zod12.z.boolean().optional(),
+  // Enable logging requests
+  logRequests: import_zod12.z.boolean().default(true)
 });
 var CORE_PLUGIN_NAME2 = "core";
 var LIVE_RELOAD_SCRIPT_TEMPLATE = (port) => `<script defer type="application/javascript">
@@ -11970,7 +11986,7 @@ var SCRIPT_CUSTOM_SERVICE = `addEventListener("fetch", (event) => {
   request.headers.set("${CoreHeaders.ORIGINAL_URL}", request.url);
   event.respondWith(${CoreBindings.SERVICE_LOOPBACK}.fetch(request));
 })`;
-function getCustomServiceDesignator(refererName, workerIndex, kind, name, service, hasAssetsAndIsVitest = false, unsafeEnableAssetsRpc = false) {
+function getCustomServiceDesignator(refererName, workerIndex, kind, name, service, hasAssetsAndIsVitest = false) {
   let serviceName;
   let entrypoint;
   if (typeof service === "function") {
@@ -11987,7 +12003,7 @@ function getCustomServiceDesignator(refererName, workerIndex, kind, name, servic
       serviceName = getBuiltinServiceName(workerIndex, kind, name);
     }
   } else if (service === kCurrentWorker) {
-    serviceName = hasAssetsAndIsVitest ? unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${refererName}` : `${ROUTER_SERVICE_NAME}:${refererName}` : getUserServiceName(refererName);
+    serviceName = hasAssetsAndIsVitest ? `${RPC_PROXY_SERVICE_NAME}:${refererName}` : getUserServiceName(refererName);
   } else {
     serviceName = getUserServiceName(service);
   }
@@ -12085,7 +12101,7 @@ var CORE_PLUGIN = {
     if (options.textBlobBindings !== void 0) {
       bindings.push(
         ...Object.entries(options.textBlobBindings).map(
-          ([name, path30]) => import_promises6.default.readFile(path30, "utf8").then((text) => ({ name, text }))
+          ([name, path33]) => import_promises6.default.readFile(path33, "utf8").then((text) => ({ name, text }))
         )
       );
     }
@@ -12108,8 +12124,7 @@ var CORE_PLUGIN = {
               "#" /* UNKNOWN */,
               name,
               service,
-              options.hasAssetsAndIsVitest,
-              options.unsafeEnableAssetsRpc
+              options.hasAssetsAndIsVitest
             )
           };
         })
@@ -12159,7 +12174,7 @@ var CORE_PLUGIN = {
     if (options.textBlobBindings !== void 0) {
       bindingEntries3.push(
         ...Object.entries(options.textBlobBindings).map(
-          ([name, path30]) => import_promises6.default.readFile(path30, "utf8").then((text) => [name, text])
+          ([name, path33]) => import_promises6.default.readFile(path33, "utf8").then((text) => [name, text])
         )
       );
     }
@@ -12332,8 +12347,7 @@ Ensure ${stringName} doesn't include unbundled \`import\`s.`
             "$" /* KNOWN */,
             CUSTOM_SERVICE_KNOWN_OUTBOUND,
             options.outboundService,
-            options.hasAssetsAndIsVitest,
-            options.unsafeEnableAssetsRpc
+            options.hasAssetsAndIsVitest
           ),
           cacheApiOutbound: { name: getCacheServiceName(workerIndex) },
           moduleFallback: options.unsafeUseModuleFallbackService && sharedOptions.unsafeModuleFallbackService !== void 0 ? `localhost:${loopbackPort}` : void 0
@@ -12377,6 +12391,14 @@ function getGlobalServices({
     WORKER_BINDING_SERVICE_LOOPBACK,
     // For converting stack-traces to pretty-error pages
     { name: CoreBindings.JSON_ROUTES, json: JSON.stringify(routes) },
+    {
+      name: CoreBindings.TRIGGER_HANDLERS,
+      json: JSON.stringify(!!sharedOptions.unsafeTriggerHandlers)
+    },
+    {
+      name: CoreBindings.LOG_REQUESTS,
+      json: JSON.stringify(!!sharedOptions.logRequests)
+    },
     { name: CoreBindings.JSON_CF_BLOB, json: JSON.stringify(sharedOptions.cf) },
     { name: CoreBindings.JSON_LOG_LEVEL, json: JSON.stringify(log.level) },
     {
@@ -12426,13 +12448,8 @@ function getGlobalServices({
       name: SERVICE_ENTRY,
       worker: {
         modules: [{ name: "entry.worker.js", esModule: entry_worker_default() }],
-        compatibilityDate: "2023-04-04",
-        compatibilityFlags: [
-          "nodejs_compat",
-          "service_binding_extra_handlers",
-          "brotli_content_encoding",
-          "rpc"
-        ],
+        compatibilityDate: "2025-03-17",
+        compatibilityFlags: ["nodejs_compat", "service_binding_extra_handlers"],
         bindings: serviceEntryBindings,
         durableObjectNamespaces: [
           {
@@ -12515,8 +12532,13 @@ var AssetsOptionsSchema = import_zod13.z.object({
     directory: PathSchema,
     binding: import_zod13.z.string().optional(),
     routerConfig: RouterConfigSchema.optional(),
-    assetConfig: AssetConfigSchema.optional()
-  }).optional()
+    assetConfig: AssetConfigSchema.omit({
+      compatibility_date: true,
+      compatibility_flags: true
+    }).optional()
+  }).optional(),
+  compatibilityDate: import_zod13.z.string().optional(),
+  compatibilityFlags: import_zod13.z.string().array().optional()
 });
 
 // src/plugins/assets/index.ts
@@ -12544,14 +12566,18 @@ var ASSETS_PLUGIN = {
       [options.assets.binding]: new ProxyNodeBinding()
     };
   },
-  async getServices({ options, unsafeEnableAssetsRpc }) {
+  async getServices({ options }) {
     if (!options.assets) {
       return [];
     }
     const storageServiceName = `${ASSETS_PLUGIN_NAME}:storage`;
     const storageService = {
       name: storageServiceName,
-      disk: { path: options.assets.directory, writable: true }
+      disk: {
+        path: options.assets.directory,
+        writable: true,
+        allowDotfiles: true
+      }
     };
     const { encodedAssetManifest, assetsReverseMap } = await buildAssetManifest(
       options.assets.directory
@@ -12591,6 +12617,8 @@ var ASSETS_PLUGIN = {
       );
     }
     const assetConfig = {
+      compatibility_date: options.compatibilityDate,
+      compatibility_flags: options.compatibilityFlags,
       ...options.assets.assetConfig,
       redirects: parsedRedirects,
       headers: parsedHeaders
@@ -12679,36 +12707,39 @@ var ASSETS_PLUGIN = {
         ]
       }
     };
-    const services = [
+    const assetsProxyService = {
+      name: `${RPC_PROXY_SERVICE_NAME}:${id}`,
+      worker: {
+        compatibilityDate: "2024-08-01",
+        modules: [
+          {
+            name: "assets-proxy-worker.mjs",
+            esModule: rpc_proxy_worker_default()
+          }
+        ],
+        bindings: [
+          {
+            name: "ROUTER_WORKER",
+            service: {
+              name: `${ROUTER_SERVICE_NAME}:${id}`
+            }
+          },
+          {
+            name: "USER_WORKER",
+            service: {
+              name: getUserServiceName(id)
+            }
+          }
+        ]
+      }
+    };
+    return [
       storageService,
       namespaceService,
       assetService,
-      routerService
+      routerService,
+      assetsProxyService
     ];
-    if (unsafeEnableAssetsRpc) {
-      const assetsProxyService = {
-        name: `${RPC_PROXY_SERVICE_NAME}:${id}`,
-        worker: {
-          compatibilityDate: "2024-08-01",
-          modules: [
-            {
-              name: "assets-proxy-worker.mjs",
-              esModule: rpc_proxy_worker_default()
-            }
-          ],
-          bindings: [
-            {
-              name: "ROUTER_WORKER",
-              service: {
-                name: `${ROUTER_SERVICE_NAME}:${id}`
-              }
-            }
-          ]
-        }
-      };
-      services.push(assetsProxyService);
-    }
-    return services;
   }
 };
 var buildAssetManifest = async (dir) => {
@@ -12814,9 +12845,9 @@ var encodeManifest = (manifest) => {
 var bytesToHex = (buffer) => {
   return [...new Uint8Array(buffer)].map((b) => b.toString(16).padStart(2, "0")).join("");
 };
-var hashPath = async (path30) => {
+var hashPath = async (path33) => {
   const encoder3 = new TextEncoder();
-  const data = encoder3.encode(path30);
+  const data = encoder3.encode(path33);
   const hashBuffer = await import_node_crypto.default.subtle.digest(
     "SHA-256",
     data.buffer
@@ -12955,67 +12986,181 @@ var D1_PLUGIN = {
   }
 };
 
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/email/email.worker.ts
+var import_fs17 = __toESM(require("fs"));
+var import_path20 = __toESM(require("path"));
+var import_url17 = __toESM(require("url"));
+var contents13;
+function email_worker_default() {
+  if (contents13 !== void 0) return contents13;
+  const filePath = import_path20.default.join(__dirname, "workers", "email/email.worker.js");
+  contents13 = import_fs17.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url17.default.pathToFileURL(filePath);
+  return contents13;
+}
+
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/email/send_email.worker.ts
+var import_fs18 = __toESM(require("fs"));
+var import_path21 = __toESM(require("path"));
+var import_url18 = __toESM(require("url"));
+var contents14;
+function send_email_worker_default() {
+  if (contents14 !== void 0) return contents14;
+  const filePath = import_path21.default.join(__dirname, "workers", "email/send_email.worker.js");
+  contents14 = import_fs18.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url18.default.pathToFileURL(filePath);
+  return contents14;
+}
+
+// src/plugins/email/index.ts
+var import_zod15 = require("zod");
+var EmailBindingOptionsSchema = import_zod15.z.object({
+  name: import_zod15.z.string()
+}).and(
+  import_zod15.z.union([
+    import_zod15.z.object({
+      destination_address: import_zod15.z.string().optional(),
+      allowed_destination_addresses: import_zod15.z.never().optional()
+    }),
+    import_zod15.z.object({
+      allowed_destination_addresses: import_zod15.z.array(import_zod15.z.string()).optional(),
+      destination_address: import_zod15.z.never().optional()
+    })
+  ])
+);
+var EmailOptionsSchema = import_zod15.z.object({
+  email: import_zod15.z.object({
+    send_email: import_zod15.z.array(EmailBindingOptionsSchema).optional()
+  }).optional()
+});
+var EMAIL_PLUGIN_NAME = "email";
+var SERVICE_SEND_EMAIL_WORKER_PREFIX = `SEND-EMAIL-WORKER`;
+function buildJsonBindings(bindings) {
+  return Object.entries(bindings).map(([name, value]) => ({
+    name,
+    json: JSON.stringify(value)
+  }));
+}
+var EMAIL_PLUGIN = {
+  options: EmailOptionsSchema,
+  getBindings(options) {
+    if (!options.email?.send_email) {
+      return [];
+    }
+    const sendEmailBindings = options.email.send_email;
+    return sendEmailBindings.map(({ name }) => ({
+      name,
+      service: {
+        entrypoint: "SendEmailBinding",
+        name: `${SERVICE_SEND_EMAIL_WORKER_PREFIX}:${name}`
+      }
+    }));
+  },
+  getNodeBindings(_options) {
+    return {};
+  },
+  async getServices(args) {
+    const extensions = [];
+    const services = [];
+    if (args.workerIndex === 0) {
+      extensions.push({
+        modules: [
+          {
+            name: "cloudflare-internal:email",
+            esModule: email_worker_default(),
+            internal: true
+          }
+        ]
+      });
+    }
+    for (const { name, ...config } of args.options.email?.send_email ?? []) {
+      services.push({
+        name: `${SERVICE_SEND_EMAIL_WORKER_PREFIX}:${name}`,
+        worker: {
+          compatibilityDate: "2025-03-17",
+          modules: [
+            {
+              name: "send_email.mjs",
+              esModule: send_email_worker_default()
+            }
+          ],
+          bindings: [
+            ...buildJsonBindings(config),
+            WORKER_BINDING_SERVICE_LOOPBACK
+          ]
+        }
+      });
+    }
+    return {
+      services,
+      extensions
+    };
+  }
+};
+
 // src/plugins/hyperdrive/index.ts
 var import_node_assert3 = __toESM(require("node:assert"));
-var import_zod15 = require("zod");
+var import_zod16 = require("zod");
 var HYPERDRIVE_PLUGIN_NAME = "hyperdrive";
-function hasPostgresProtocol(url20) {
-  return url20.protocol === "postgresql:" || url20.protocol === "postgres:";
+function hasPostgresProtocol(url23) {
+  return url23.protocol === "postgresql:" || url23.protocol === "postgres:";
+}
+function hasMysqlProtocol(url23) {
+  return url23.protocol === "mysql:";
 }
-function getPort(url20) {
-  if (url20.port !== "") return url20.port;
-  if (hasPostgresProtocol(url20)) return "5432";
-  import_node_assert3.default.fail(`Expected known protocol, got ${url20.protocol}`);
+function getPort(url23) {
+  if (url23.port !== "") return url23.port;
+  if (hasPostgresProtocol(url23)) return "5432";
+  if (hasMysqlProtocol(url23)) return "3306";
+  import_node_assert3.default.fail(`Expected known protocol, got ${url23.protocol}`);
 }
-var HyperdriveSchema = import_zod15.z.union([import_zod15.z.string().url(), import_zod15.z.instanceof(URL)]).transform((url20, ctx) => {
-  if (typeof url20 === "string") url20 = new URL(url20);
-  if (url20.protocol === "") {
+var HyperdriveSchema = import_zod16.z.union([import_zod16.z.string().url(), import_zod16.z.instanceof(URL)]).transform((url23, ctx) => {
+  if (typeof url23 === "string") url23 = new URL(url23);
+  if (url23.protocol === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
-      message: "You must specify the database protocol - e.g. 'postgresql'."
+      code: import_zod16.z.ZodIssueCode.custom,
+      message: "You must specify the database protocol - e.g. 'postgresql'/'mysql'."
     });
-  } else if (!hasPostgresProtocol(url20)) {
+  } else if (!hasPostgresProtocol(url23) && !hasMysqlProtocol(url23)) {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
-      message: "Only PostgreSQL or PostgreSQL compatible databases are currently supported."
+      code: import_zod16.z.ZodIssueCode.custom,
+      message: "Only PostgreSQL-compatible or MySQL-compatible databases are currently supported."
     });
   }
-  if (url20.host === "") {
+  if (url23.host === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod16.z.ZodIssueCode.custom,
       message: "You must provide a hostname or IP address in your connection string - e.g. 'user:password@database-hostname.example.com:5432/databasename"
     });
   }
-  if (url20.pathname === "") {
+  if (url23.pathname === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod16.z.ZodIssueCode.custom,
       message: "You must provide a database name as the path component - e.g. /postgres"
     });
   }
-  if (url20.username === "") {
+  if (url23.username === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod16.z.ZodIssueCode.custom,
       message: "You must provide a username - e.g. 'user:password@database.example.com:port/databasename'"
     });
   }
-  if (url20.password === "") {
+  if (url23.password === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod16.z.ZodIssueCode.custom,
       message: "You must provide a password - e.g. 'user:password@database.example.com:port/databasename' "
     });
   }
-  return url20;
+  return url23;
 });
-var HyperdriveInputOptionsSchema = import_zod15.z.object({
-  hyperdrives: import_zod15.z.record(import_zod15.z.string(), HyperdriveSchema).optional()
+var HyperdriveInputOptionsSchema = import_zod16.z.object({
+  hyperdrives: import_zod16.z.record(import_zod16.z.string(), HyperdriveSchema).optional()
 });
 var HYPERDRIVE_PLUGIN = {
   options: HyperdriveInputOptionsSchema,
   getBindings(options) {
     return Object.entries(options.hyperdrives ?? {}).map(
-      ([name, url20]) => {
-        const database = url20.pathname.replace("/", "");
-        const scheme = url20.protocol.replace(":", "");
+      ([name, url23]) => {
+        const database = url23.pathname.replace("/", "");
+        const scheme = url23.protocol.replace(":", "");
         return {
           name,
           hyperdrive: {
@@ -13023,8 +13168,8 @@ var HYPERDRIVE_PLUGIN = {
               name: `${HYPERDRIVE_PLUGIN_NAME}:${name}`
             },
             database: decodeURIComponent(database),
-            user: decodeURIComponent(url20.username),
-            password: decodeURIComponent(url20.password),
+            user: decodeURIComponent(url23.username),
+            password: decodeURIComponent(url23.password),
             scheme
           }
         };
@@ -13033,11 +13178,11 @@ var HYPERDRIVE_PLUGIN = {
   },
   getNodeBindings(options) {
     return Object.fromEntries(
-      Object.entries(options.hyperdrives ?? {}).map(([name, url20]) => {
+      Object.entries(options.hyperdrives ?? {}).map(([name, url23]) => {
         const connectionOverrides = {
-          connectionString: `${url20}`,
-          port: Number.parseInt(url20.port),
-          host: url20.hostname
+          connectionString: `${url23}`,
+          port: Number.parseInt(url23.port),
+          host: url23.hostname
         };
         const proxyNodeBinding = new ProxyNodeBinding({
           get(target, prop) {
@@ -13050,10 +13195,10 @@ var HYPERDRIVE_PLUGIN = {
   },
   async getServices({ options }) {
     return Object.entries(options.hyperdrives ?? {}).map(
-      ([name, url20]) => ({
+      ([name, url23]) => ({
         name: `${HYPERDRIVE_PLUGIN_NAME}:${name}`,
         external: {
-          address: `${url20.hostname}:${getPort(url20)}`,
+          address: `${url23.hostname}:${getPort(url23)}`,
           tcp: {}
         }
       })
@@ -13065,19 +13210,19 @@ var HYPERDRIVE_PLUGIN = {
 var import_promises10 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/kv/namespace.worker.ts
-var import_fs17 = __toESM(require("fs"));
-var import_path20 = __toESM(require("path"));
-var import_url17 = __toESM(require("url"));
-var contents13;
+var import_fs19 = __toESM(require("fs"));
+var import_path22 = __toESM(require("path"));
+var import_url19 = __toESM(require("url"));
+var contents15;
 function namespace_worker_default() {
-  if (contents13 !== void 0) return contents13;
-  const filePath = import_path20.default.join(__dirname, "workers", "kv/namespace.worker.js");
-  contents13 = import_fs17.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url17.default.pathToFileURL(filePath);
-  return contents13;
+  if (contents15 !== void 0) return contents15;
+  const filePath = import_path22.default.join(__dirname, "workers", "kv/namespace.worker.js");
+  contents15 = import_fs19.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url19.default.pathToFileURL(filePath);
+  return contents15;
 }
 
 // src/plugins/kv/index.ts
-var import_zod16 = require("zod");
+var import_zod17 = require("zod");
 
 // src/plugins/kv/constants.ts
 var KV_PLUGIN_NAME = "kv";
@@ -13085,25 +13230,25 @@ var KV_PLUGIN_NAME = "kv";
 // src/plugins/kv/sites.ts
 var import_assert10 = __toESM(require("assert"));
 var import_promises9 = __toESM(require("fs/promises"));
-var import_path22 = __toESM(require("path"));
+var import_path24 = __toESM(require("path"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/kv/sites.worker.ts
-var import_fs18 = __toESM(require("fs"));
-var import_path21 = __toESM(require("path"));
-var import_url18 = __toESM(require("url"));
-var contents14;
+var import_fs20 = __toESM(require("fs"));
+var import_path23 = __toESM(require("path"));
+var import_url20 = __toESM(require("url"));
+var contents16;
 function sites_worker_default() {
-  if (contents14 !== void 0) return contents14;
-  const filePath = import_path21.default.join(__dirname, "workers", "kv/sites.worker.js");
-  contents14 = import_fs18.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url18.default.pathToFileURL(filePath);
-  return contents14;
+  if (contents16 !== void 0) return contents16;
+  const filePath = import_path23.default.join(__dirname, "workers", "kv/sites.worker.js");
+  contents16 = import_fs20.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url20.default.pathToFileURL(filePath);
+  return contents16;
 }
 
 // src/plugins/kv/sites.ts
 async function* listKeysInDirectoryInner(rootPath2, currentPath) {
   const fileEntries = await import_promises9.default.readdir(currentPath, { withFileTypes: true });
   for (const fileEntry of fileEntries) {
-    const filePath = import_path22.default.posix.join(currentPath, fileEntry.name);
+    const filePath = import_path24.default.posix.join(currentPath, fileEntry.name);
     if (fileEntry.isDirectory()) {
       yield* listKeysInDirectoryInner(rootPath2, filePath);
     } else {
@@ -13112,7 +13257,7 @@ async function* listKeysInDirectoryInner(rootPath2, currentPath) {
   }
 }
 function listKeysInDirectory(rootPath2) {
-  rootPath2 = import_path22.default.resolve(rootPath2);
+  rootPath2 = import_path24.default.resolve(rootPath2);
   return listKeysInDirectoryInner(rootPath2, rootPath2);
 }
 var sitesRegExpsCache = /* @__PURE__ */ new WeakMap();
@@ -13163,7 +13308,7 @@ function getSitesServices(options) {
   const siteRegExps = sitesRegExpsCache.get(options);
   (0, import_assert10.default)(siteRegExps !== void 0);
   const serialisedSiteRegExps = serialiseSiteRegExps(siteRegExps);
-  const persist = import_path22.default.resolve(options.sitePath);
+  const persist = import_path24.default.resolve(options.sitePath);
   const storageServiceName = `${SERVICE_NAMESPACE_SITE}:storage`;
   const storageService = {
     name: storageServiceName,
@@ -13196,14 +13341,14 @@ function getSitesServices(options) {
 }
 
 // src/plugins/kv/index.ts
-var KVOptionsSchema = import_zod16.z.object({
-  kvNamespaces: import_zod16.z.union([import_zod16.z.record(import_zod16.z.string()), import_zod16.z.string().array()]).optional(),
+var KVOptionsSchema = import_zod17.z.object({
+  kvNamespaces: import_zod17.z.union([import_zod17.z.record(import_zod17.z.string()), import_zod17.z.string().array()]).optional(),
   // Workers Sites
   sitePath: PathSchema.optional(),
-  siteInclude: import_zod16.z.string().array().optional(),
-  siteExclude: import_zod16.z.string().array().optional()
+  siteInclude: import_zod17.z.string().array().optional(),
+  siteExclude: import_zod17.z.string().array().optional()
 });
-var KVSharedOptionsSchema = import_zod16.z.object({
+var KVSharedOptionsSchema = import_zod17.z.object({
   kvPersist: PersistenceSchema
 });
 var SERVICE_NAMESPACE_PREFIX = `${KV_PLUGIN_NAME}:ns`;
@@ -13307,21 +13452,21 @@ var KV_PLUGIN = {
 };
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/pipelines/pipeline.worker.ts
-var import_fs19 = __toESM(require("fs"));
-var import_path23 = __toESM(require("path"));
-var import_url19 = __toESM(require("url"));
-var contents15;
+var import_fs21 = __toESM(require("fs"));
+var import_path25 = __toESM(require("path"));
+var import_url21 = __toESM(require("url"));
+var contents17;
 function pipeline_worker_default() {
-  if (contents15 !== void 0) return contents15;
-  const filePath = import_path23.default.join(__dirname, "workers", "pipelines/pipeline.worker.js");
-  contents15 = import_fs19.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url19.default.pathToFileURL(filePath);
-  return contents15;
+  if (contents17 !== void 0) return contents17;
+  const filePath = import_path25.default.join(__dirname, "workers", "pipelines/pipeline.worker.js");
+  contents17 = import_fs21.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url21.default.pathToFileURL(filePath);
+  return contents17;
 }
 
 // src/plugins/pipelines/index.ts
-var import_zod17 = require("zod");
-var PipelineOptionsSchema = import_zod17.z.object({
-  pipelines: import_zod17.z.union([import_zod17.z.record(import_zod17.z.string()), import_zod17.z.string().array()]).optional()
+var import_zod18 = require("zod");
+var PipelineOptionsSchema = import_zod18.z.object({
+  pipelines: import_zod18.z.union([import_zod18.z.record(import_zod18.z.string()), import_zod18.z.string().array()]).optional()
 });
 var PIPELINES_PLUGIN_NAME = "pipelines";
 var SERVICE_PIPELINE_PREFIX = `${PIPELINES_PLUGIN_NAME}:pipeline`;
@@ -13374,32 +13519,32 @@ function bindingEntries(namespaces) {
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/queues/broker.worker.ts
-var import_fs20 = __toESM(require("fs"));
-var import_path24 = __toESM(require("path"));
-var import_url20 = __toESM(require("url"));
-var contents16;
+var import_fs22 = __toESM(require("fs"));
+var import_path26 = __toESM(require("path"));
+var import_url22 = __toESM(require("url"));
+var contents18;
 function broker_worker_default() {
-  if (contents16 !== void 0) return contents16;
-  const filePath = import_path24.default.join(__dirname, "workers", "queues/broker.worker.js");
-  contents16 = import_fs20.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url20.default.pathToFileURL(filePath);
-  return contents16;
+  if (contents18 !== void 0) return contents18;
+  const filePath = import_path26.default.join(__dirname, "workers", "queues/broker.worker.js");
+  contents18 = import_fs22.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url22.default.pathToFileURL(filePath);
+  return contents18;
 }
 
 // src/plugins/queues/index.ts
-var import_zod18 = require("zod");
+var import_zod19 = require("zod");
 
 // src/plugins/queues/errors.ts
 var QueuesError = class extends MiniflareError {
 };
 
 // src/plugins/queues/index.ts
-var QueuesOptionsSchema = import_zod18.z.object({
-  queueProducers: import_zod18.z.union([
-    import_zod18.z.record(QueueProducerOptionsSchema),
-    import_zod18.z.string().array(),
-    import_zod18.z.record(import_zod18.z.string())
+var QueuesOptionsSchema = import_zod19.z.object({
+  queueProducers: import_zod19.z.union([
+    import_zod19.z.record(QueueProducerOptionsSchema),
+    import_zod19.z.string().array(),
+    import_zod19.z.record(import_zod19.z.string())
   ]).optional(),
-  queueConsumers: import_zod18.z.union([import_zod18.z.record(QueueConsumerOptionsSchema), import_zod18.z.string().array()]).optional()
+  queueConsumers: import_zod19.z.union([import_zod19.z.record(QueueConsumerOptionsSchema), import_zod19.z.string().array()]).optional()
 });
 var QUEUES_PLUGIN_NAME = "queues";
 var SERVICE_QUEUE_PREFIX = `${QUEUES_PLUGIN_NAME}:queue`;
@@ -13515,23 +13660,23 @@ function bindingKeys(namespaces) {
 var import_promises11 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/r2/bucket.worker.ts
-var import_fs21 = __toESM(require("fs"));
-var import_path25 = __toESM(require("path"));
-var import_url21 = __toESM(require("url"));
-var contents17;
+var import_fs23 = __toESM(require("fs"));
+var import_path27 = __toESM(require("path"));
+var import_url23 = __toESM(require("url"));
+var contents19;
 function bucket_worker_default() {
-  if (contents17 !== void 0) return contents17;
-  const filePath = import_path25.default.join(__dirname, "workers", "r2/bucket.worker.js");
-  contents17 = import_fs21.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url21.default.pathToFileURL(filePath);
-  return contents17;
+  if (contents19 !== void 0) return contents19;
+  const filePath = import_path27.default.join(__dirname, "workers", "r2/bucket.worker.js");
+  contents19 = import_fs23.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url23.default.pathToFileURL(filePath);
+  return contents19;
 }
 
 // src/plugins/r2/index.ts
-var import_zod19 = require("zod");
-var R2OptionsSchema = import_zod19.z.object({
-  r2Buckets: import_zod19.z.union([import_zod19.z.record(import_zod19.z.string()), import_zod19.z.string().array()]).optional()
+var import_zod20 = require("zod");
+var R2OptionsSchema = import_zod20.z.object({
+  r2Buckets: import_zod20.z.union([import_zod20.z.record(import_zod20.z.string()), import_zod20.z.string().array()]).optional()
 });
-var R2SharedOptionsSchema = import_zod19.z.object({
+var R2SharedOptionsSchema = import_zod20.z.object({
   r2Persist: PersistenceSchema
 });
 var R2_PLUGIN_NAME = "r2";
@@ -13625,38 +13770,38 @@ var R2_PLUGIN = {
 };
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/ratelimit/ratelimit.worker.ts
-var import_fs22 = __toESM(require("fs"));
-var import_path26 = __toESM(require("path"));
-var import_url22 = __toESM(require("url"));
-var contents18;
+var import_fs24 = __toESM(require("fs"));
+var import_path28 = __toESM(require("path"));
+var import_url24 = __toESM(require("url"));
+var contents20;
 function ratelimit_worker_default() {
-  if (contents18 !== void 0) return contents18;
-  const filePath = import_path26.default.join(__dirname, "workers", "ratelimit/ratelimit.worker.js");
-  contents18 = import_fs22.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url22.default.pathToFileURL(filePath);
-  return contents18;
+  if (contents20 !== void 0) return contents20;
+  const filePath = import_path28.default.join(__dirname, "workers", "ratelimit/ratelimit.worker.js");
+  contents20 = import_fs24.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url24.default.pathToFileURL(filePath);
+  return contents20;
 }
 
 // src/plugins/ratelimit/index.ts
-var import_zod20 = require("zod");
+var import_zod21 = require("zod");
 var PeriodType = /* @__PURE__ */ ((PeriodType2) => {
   PeriodType2[PeriodType2["TENSECONDS"] = 10] = "TENSECONDS";
   PeriodType2[PeriodType2["MINUTE"] = 60] = "MINUTE";
   return PeriodType2;
 })(PeriodType || {});
-var RatelimitConfigSchema = import_zod20.z.object({
-  simple: import_zod20.z.object({
-    limit: import_zod20.z.number().gt(0),
+var RatelimitConfigSchema = import_zod21.z.object({
+  simple: import_zod21.z.object({
+    limit: import_zod21.z.number().gt(0),
     // may relax this to be any number in the future
-    period: import_zod20.z.nativeEnum(PeriodType).optional()
+    period: import_zod21.z.nativeEnum(PeriodType).optional()
   })
 });
-var RatelimitOptionsSchema = import_zod20.z.object({
-  ratelimits: import_zod20.z.record(RatelimitConfigSchema).optional()
+var RatelimitOptionsSchema = import_zod21.z.object({
+  ratelimits: import_zod21.z.record(RatelimitConfigSchema).optional()
 });
 var RATELIMIT_PLUGIN_NAME = "ratelimit";
 var SERVICE_RATELIMIT_PREFIX = `${RATELIMIT_PLUGIN_NAME}`;
 var SERVICE_RATELIMIT_MODULE = `cloudflare-internal:${SERVICE_RATELIMIT_PREFIX}:module`;
-function buildJsonBindings(bindings) {
+function buildJsonBindings2(bindings) {
   return Object.entries(bindings).map(([name, value]) => ({
     name,
     json: JSON.stringify(value)
@@ -13673,7 +13818,7 @@ var RATELIMIT_PLUGIN = {
         name,
         wrapped: {
           moduleName: SERVICE_RATELIMIT_MODULE,
-          innerBindings: buildJsonBindings({
+          innerBindings: buildJsonBindings2({
             namespaceId: name,
             limit: config.simple.limit,
             period: config.simple.period
@@ -13715,33 +13860,164 @@ var RATELIMIT_PLUGIN = {
   }
 };
 
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/secrets-store/secret.worker.ts
+var import_fs25 = __toESM(require("fs"));
+var import_path29 = __toESM(require("path"));
+var import_url25 = __toESM(require("url"));
+var contents21;
+function secret_worker_default() {
+  if (contents21 !== void 0) return contents21;
+  const filePath = import_path29.default.join(__dirname, "workers", "secrets-store/secret.worker.js");
+  contents21 = import_fs25.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url25.default.pathToFileURL(filePath);
+  return contents21;
+}
+
+// src/plugins/secret-store/index.ts
+var import_zod22 = require("zod");
+var SecretsStoreSecretsSchema = import_zod22.z.record(
+  import_zod22.z.object({
+    store_id: import_zod22.z.string(),
+    secret_name: import_zod22.z.string()
+  })
+);
+var SecretsStoreSecretsOptionsSchema = import_zod22.z.object({
+  secretsStoreSecrets: SecretsStoreSecretsSchema.optional()
+});
+var SecretsStoreSecretsSharedOptionsSchema = import_zod22.z.object({
+  secretsStorePersist: PersistenceSchema
+});
+var SECRET_STORE_PLUGIN_NAME = "secrets-store";
+function getkvNamespacesOptions(secretsStoreSecrets) {
+  const storeIds = new Set(
+    Object.values(secretsStoreSecrets).map((store) => store.store_id)
+  );
+  const storeIdKvNamespaceEntries = Array.from(storeIds).map((storeId) => [
+    storeId,
+    `${SECRET_STORE_PLUGIN_NAME}:${storeId}`
+  ]);
+  return {
+    kvNamespaces: Object.fromEntries(storeIdKvNamespaceEntries)
+  };
+}
+function isKvBinding(binding) {
+  return "kvNamespace" in binding;
+}
+var SECRET_STORE_PLUGIN = {
+  options: SecretsStoreSecretsOptionsSchema,
+  sharedOptions: SecretsStoreSecretsSharedOptionsSchema,
+  async getBindings(options) {
+    if (!options.secretsStoreSecrets) {
+      return [];
+    }
+    const bindings = Object.entries(
+      options.secretsStoreSecrets
+    ).map(([name, config]) => {
+      return {
+        name,
+        service: {
+          name: `${SECRET_STORE_PLUGIN_NAME}:${config.store_id}:${config.secret_name}`,
+          entrypoint: "SecretsStoreSecret"
+        }
+      };
+    });
+    return bindings;
+  },
+  getNodeBindings(options) {
+    if (!options.secretsStoreSecrets) {
+      return {};
+    }
+    return Object.fromEntries(
+      Object.keys(options.secretsStoreSecrets).map((name) => [
+        name,
+        new ProxyNodeBinding()
+      ])
+    );
+  },
+  async getServices({ options, sharedOptions, ...restOptions }) {
+    if (!options.secretsStoreSecrets) {
+      return [];
+    }
+    const kvServices = await KV_PLUGIN.getServices({
+      options: getkvNamespacesOptions(options.secretsStoreSecrets),
+      sharedOptions: {
+        kvPersist: sharedOptions.secretsStorePersist
+      },
+      ...restOptions
+    });
+    const kvBindings = await KV_PLUGIN.getBindings(
+      getkvNamespacesOptions(options.secretsStoreSecrets),
+      restOptions.workerIndex
+    );
+    if (!kvBindings || !kvBindings.every(isKvBinding)) {
+      throw new Error(
+        "Expected KV plugin to return bindings with kvNamespace defined"
+      );
+    }
+    if (!Array.isArray(kvServices)) {
+      throw new Error("Expected KV plugin to return an array of services");
+    }
+    return [
+      ...kvServices,
+      ...Object.entries(options.secretsStoreSecrets).map(
+        ([_, config]) => {
+          return {
+            name: `${SECRET_STORE_PLUGIN_NAME}:${config.store_id}:${config.secret_name}`,
+            worker: {
+              compatibilityDate: "2025-01-01",
+              modules: [
+                {
+                  name: "secret.worker.js",
+                  esModule: secret_worker_default()
+                }
+              ],
+              bindings: [
+                {
+                  name: "store",
+                  kvNamespace: kvBindings.find(
+                    // Look up the corresponding KV namespace for the store id
+                    (binding) => binding.name === config.store_id
+                  )?.kvNamespace
+                },
+                {
+                  name: "secret_name",
+                  json: JSON.stringify(config.secret_name)
+                }
+              ]
+            }
+          };
+        }
+      )
+    ];
+  }
+};
+
 // src/plugins/workflows/index.ts
 var import_promises12 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/workflows/binding.worker.ts
-var import_fs23 = __toESM(require("fs"));
-var import_path27 = __toESM(require("path"));
-var import_url23 = __toESM(require("url"));
-var contents19;
+var import_fs26 = __toESM(require("fs"));
+var import_path30 = __toESM(require("path"));
+var import_url26 = __toESM(require("url"));
+var contents22;
 function binding_worker_default() {
-  if (contents19 !== void 0) return contents19;
-  const filePath = import_path27.default.join(__dirname, "workers", "workflows/binding.worker.js");
-  contents19 = import_fs23.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url23.default.pathToFileURL(filePath);
-  return contents19;
+  if (contents22 !== void 0) return contents22;
+  const filePath = import_path30.default.join(__dirname, "workers", "workflows/binding.worker.js");
+  contents22 = import_fs26.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url26.default.pathToFileURL(filePath);
+  return contents22;
 }
 
 // src/plugins/workflows/index.ts
-var import_zod21 = require("zod");
-var WorkflowsOptionsSchema = import_zod21.z.object({
-  workflows: import_zod21.z.record(
-    import_zod21.z.object({
-      name: import_zod21.z.string(),
-      className: import_zod21.z.string(),
-      scriptName: import_zod21.z.string().optional()
+var import_zod23 = require("zod");
+var WorkflowsOptionsSchema = import_zod23.z.object({
+  workflows: import_zod23.z.record(
+    import_zod23.z.object({
+      name: import_zod23.z.string(),
+      className: import_zod23.z.string(),
+      scriptName: import_zod23.z.string().optional()
     })
   ).optional()
 });
-var WorkflowsSharedOptionsSchema = import_zod21.z.object({
+var WorkflowsSharedOptionsSchema = import_zod23.z.object({
   workflowsPersist: PersistenceSchema
 });
 var WORKFLOWS_PLUGIN_NAME = "workflows";
@@ -13846,10 +14122,446 @@ var PLUGINS = {
   [RATELIMIT_PLUGIN_NAME]: RATELIMIT_PLUGIN,
   [ASSETS_PLUGIN_NAME]: ASSETS_PLUGIN,
   [WORKFLOWS_PLUGIN_NAME]: WORKFLOWS_PLUGIN,
-  [PIPELINES_PLUGIN_NAME]: PIPELINE_PLUGIN
+  [PIPELINES_PLUGIN_NAME]: PIPELINE_PLUGIN,
+  [SECRET_STORE_PLUGIN_NAME]: SECRET_STORE_PLUGIN,
+  [EMAIL_PLUGIN_NAME]: EMAIL_PLUGIN
 };
 var PLUGIN_ENTRIES = Object.entries(PLUGINS);
 
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var import_node_crypto2 = __toESM(require("node:crypto"));
+var import_node_http = require("node:http");
+
+// ../../node_modules/.pnpm/get-port@7.1.0/node_modules/get-port/index.js
+var import_node_net = __toESM(require("node:net"), 1);
+var import_node_os = __toESM(require("node:os"), 1);
+var Locked = class extends Error {
+  constructor(port) {
+    super(`${port} is locked`);
+  }
+};
+var lockedPorts = {
+  old: /* @__PURE__ */ new Set(),
+  young: /* @__PURE__ */ new Set()
+};
+var releaseOldLockedPortsIntervalMs = 1e3 * 15;
+var timeout;
+var getLocalHosts = () => {
+  const interfaces = import_node_os.default.networkInterfaces();
+  const results = /* @__PURE__ */ new Set([void 0, "0.0.0.0"]);
+  for (const _interface of Object.values(interfaces)) {
+    for (const config of _interface) {
+      results.add(config.address);
+    }
+  }
+  return results;
+};
+var checkAvailablePort = (options) => new Promise((resolve2, reject) => {
+  const server = import_node_net.default.createServer();
+  server.unref();
+  server.on("error", reject);
+  server.listen(options, () => {
+    const { port } = server.address();
+    server.close(() => {
+      resolve2(port);
+    });
+  });
+});
+var getAvailablePort = async (options, hosts) => {
+  if (options.host || options.port === 0) {
+    return checkAvailablePort(options);
+  }
+  for (const host of hosts) {
+    try {
+      await checkAvailablePort({ port: options.port, host });
+    } catch (error) {
+      if (!["EADDRNOTAVAIL", "EINVAL"].includes(error.code)) {
+        throw error;
+      }
+    }
+  }
+  return options.port;
+};
+var portCheckSequence = function* (ports) {
+  if (ports) {
+    yield* ports;
+  }
+  yield 0;
+};
+async function getPorts(options) {
+  let ports;
+  let exclude = /* @__PURE__ */ new Set();
+  if (options) {
+    if (options.port) {
+      ports = typeof options.port === "number" ? [options.port] : options.port;
+    }
+    if (options.exclude) {
+      const excludeIterable = options.exclude;
+      if (typeof excludeIterable[Symbol.iterator] !== "function") {
+        throw new TypeError("The `exclude` option must be an iterable.");
+      }
+      for (const element of excludeIterable) {
+        if (typeof element !== "number") {
+          throw new TypeError("Each item in the `exclude` option must be a number corresponding to the port you want excluded.");
+        }
+        if (!Number.isSafeInteger(element)) {
+          throw new TypeError(`Number ${element} in the exclude option is not a safe integer and can't be used`);
+        }
+      }
+      exclude = new Set(excludeIterable);
+    }
+  }
+  if (timeout === void 0) {
+    timeout = setTimeout(() => {
+      timeout = void 0;
+      lockedPorts.old = lockedPorts.young;
+      lockedPorts.young = /* @__PURE__ */ new Set();
+    }, releaseOldLockedPortsIntervalMs);
+    if (timeout.unref) {
+      timeout.unref();
+    }
+  }
+  const hosts = getLocalHosts();
+  for (const port of portCheckSequence(ports)) {
+    try {
+      if (exclude.has(port)) {
+        continue;
+      }
+      let availablePort = await getAvailablePort({ ...options, port }, hosts);
+      while (lockedPorts.old.has(availablePort) || lockedPorts.young.has(availablePort)) {
+        if (port !== 0) {
+          throw new Locked(port);
+        }
+        availablePort = await getAvailablePort({ ...options, port }, hosts);
+      }
+      lockedPorts.young.add(availablePort);
+      return availablePort;
+    } catch (error) {
+      if (!["EADDRINUSE", "EACCES"].includes(error.code) && !(error instanceof Locked)) {
+        throw error;
+      }
+    }
+  }
+  throw new Error("No available ports found");
+}
+
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var import_ws4 = __toESM(require("ws"));
+
+// package.json
+var version = "0.0.0-05b1e8391";
+
+// src/plugins/core/inspector-proxy/inspector-proxy.ts
+var import_node_assert4 = __toESM(require("node:assert"));
+var import_ws3 = __toESM(require("ws"));
+
+// src/plugins/core/inspector-proxy/devtools.ts
+function isDevToolsEvent(event, name) {
+  return typeof event === "object" && event !== null && "method" in event && event.method === name;
+}
+
+// src/plugins/core/inspector-proxy/inspector-proxy.ts
+var InspectorProxy = class {
+  #workerName;
+  #runtimeWs;
+  #devtoolsWs;
+  #devtoolsHaveFileSystemAccess = false;
+  constructor(workerName, runtimeWs) {
+    this.#workerName = workerName;
+    this.#runtimeWs = runtimeWs;
+    this.#runtimeWs.once("open", () => this.#handleRuntimeWebSocketOpen());
+  }
+  get workerName() {
+    return this.#workerName;
+  }
+  get path() {
+    return `/${this.#workerName}`;
+  }
+  onDevtoolsConnected(devtoolsWs, devtoolsHaveFileSystemAccess) {
+    if (this.#devtoolsWs) {
+      devtoolsWs.close(
+        1013,
+        "Too many clients; only one can be connected at a time"
+      );
+      return;
+    }
+    this.#devtoolsWs = devtoolsWs;
+    this.#devtoolsHaveFileSystemAccess = devtoolsHaveFileSystemAccess;
+    (0, import_node_assert4.default)(this.#devtoolsWs?.readyState === import_ws3.default.OPEN);
+    this.#devtoolsWs.on("error", console.error);
+    this.#devtoolsWs.once("close", () => {
+      if (this.#runtimeWs?.OPEN) {
+        this.#sendMessageToRuntime({
+          method: "Debugger.disable",
+          id: this.#nextCounter()
+        });
+      }
+      this.#devtoolsWs = void 0;
+    });
+    this.#devtoolsWs.on("message", (data) => {
+      const message = JSON.parse(data.toString());
+      (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+      this.#sendMessageToRuntime(message);
+    });
+  }
+  #runtimeMessageCounter = 1e8;
+  #nextCounter() {
+    return ++this.#runtimeMessageCounter;
+  }
+  #runtimeKeepAliveInterval;
+  #handleRuntimeWebSocketOpen() {
+    (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+    this.#runtimeWs.on("message", (data) => {
+      const message = JSON.parse(data.toString());
+      if (!this.#devtoolsWs) {
+        return;
+      }
+      if (isDevToolsEvent(message, "Debugger.scriptParsed")) {
+        return this.#handleRuntimeScriptParsed(message);
+      }
+      return this.#sendMessageToDevtools(message);
+    });
+    clearInterval(this.#runtimeKeepAliveInterval);
+    this.#runtimeKeepAliveInterval = setInterval(() => {
+      if (this.#runtimeWs?.OPEN) {
+        this.#sendMessageToRuntime({
+          method: "Runtime.getIsolateId",
+          id: this.#nextCounter()
+        });
+      }
+    }, 1e4);
+  }
+  #handleRuntimeScriptParsed(message) {
+    if (!this.#devtoolsHaveFileSystemAccess && message.params.sourceMapURL !== void 0 && // Don't try to find a sourcemap for e.g. node-internal: scripts
+    message.params.url.startsWith("file:")) {
+      const url23 = new URL(message.params.sourceMapURL, message.params.url);
+      if (url23.protocol === "file:") {
+        message.params.sourceMapURL = url23.href.replace(
+          "file:",
+          "wrangler-file:"
+        );
+      }
+    }
+    return this.#sendMessageToDevtools(message);
+  }
+  #sendMessageToDevtools(message) {
+    (0, import_node_assert4.default)(this.#devtoolsWs);
+    if (!this.#devtoolsWs.OPEN) {
+      this.#devtoolsWs.once(
+        "open",
+        () => this.#devtoolsWs?.send(JSON.stringify(message))
+      );
+      return;
+    }
+    this.#devtoolsWs.send(JSON.stringify(message));
+  }
+  #sendMessageToRuntime(message) {
+    (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+    this.#runtimeWs.send(JSON.stringify(message));
+  }
+  async dispose() {
+    clearInterval(this.#runtimeKeepAliveInterval);
+    this.#devtoolsWs?.close();
+  }
+};
+
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var InspectorProxyController = class {
+  constructor(inspectorPortOption, log, workerNamesToProxy) {
+    this.inspectorPortOption = inspectorPortOption;
+    this.log = log;
+    this.workerNamesToProxy = workerNamesToProxy;
+    this.#inspectorPort = this.#getInspectorPortToUse();
+    this.#server = this.#initializeServer();
+    this.#runtimeConnectionEstablished = new DeferredPromise();
+  }
+  #runtimeConnectionEstablished;
+  #proxies = [];
+  #server;
+  #inspectorPort;
+  async #getInspectorPortToUse() {
+    return this.inspectorPortOption !== 0 ? this.inspectorPortOption : await getPorts();
+  }
+  async #initializeServer() {
+    const server = (0, import_node_http.createServer)(async (req, res) => {
+      const maybeJson = await this.#handleDevToolsJsonRequest(
+        req.headers.host ?? "localhost",
+        req.url ?? "/"
+      );
+      if (maybeJson !== null) {
+        res.setHeader("Content-Type", "application/json");
+        res.end(JSON.stringify(maybeJson));
+        return;
+      }
+      res.statusCode = 404;
+      res.end(null);
+    });
+    this.#initializeWebSocketServer(server);
+    const listeningPromise = new Promise(
+      (resolve2) => server.once("listening", resolve2)
+    );
+    server.listen(await this.#inspectorPort);
+    await listeningPromise;
+    return server;
+  }
+  async #restartServer() {
+    const server = await this.#server;
+    server.closeAllConnections();
+    await new Promise((resolve2, reject) => {
+      server.close((err) => err ? reject(err) : resolve2());
+    });
+    const listeningPromise = new Promise(
+      (resolve2) => server.once("listening", resolve2)
+    );
+    server.listen(await this.#inspectorPort);
+    await listeningPromise;
+  }
+  #initializeWebSocketServer(server) {
+    const devtoolsWebSocketServer = new import_ws4.WebSocketServer({ server });
+    devtoolsWebSocketServer.on("connection", (devtoolsWs, upgradeRequest) => {
+      const validationError = this.#validateDevToolsWebSocketUpgradeRequest(upgradeRequest);
+      if (validationError !== null) {
+        devtoolsWs.close();
+        return;
+      }
+      const proxy = this.#proxies.find(
+        ({ path: path33 }) => upgradeRequest.url === path33
+      );
+      if (!proxy) {
+        this.log.warn(
+          `Warning: An inspector connection was requested for the ${upgradeRequest.url} path but no such inspector exists`
+        );
+        devtoolsWs.close();
+        return;
+      }
+      proxy.onDevtoolsConnected(
+        devtoolsWs,
+        this.#checkIfDevtoolsHaveFileSystemAccess(upgradeRequest)
+      );
+    });
+  }
+  #validateDevToolsWebSocketUpgradeRequest(req) {
+    const hostHeader = req.headers.host;
+    if (hostHeader == null) return { statusText: null, status: 400 };
+    try {
+      const host = new URL(`http://${hostHeader}`);
+      if (!ALLOWED_HOST_HOSTNAMES.includes(host.hostname)) {
+        return { statusText: "Disallowed `Host` header", status: 401 };
+      }
+    } catch {
+      return { statusText: "Expected `Host` header", status: 400 };
+    }
+    let originHeader = req.headers.origin;
+    if (!originHeader && !req.headers["user-agent"]) {
+      originHeader = "http://localhost";
+    }
+    if (!originHeader) {
+      return { statusText: "Expected `Origin` header", status: 400 };
+    }
+    try {
+      const origin = new URL(originHeader);
+      const allowed = ALLOWED_ORIGIN_HOSTNAMES.some((rule) => {
+        if (typeof rule === "string") return origin.hostname === rule;
+        else return rule.test(origin.hostname);
+      });
+      if (!allowed) {
+        return { statusText: "Disallowed `Origin` header", status: 401 };
+      }
+    } catch {
+      return { statusText: "Expected `Origin` header", status: 400 };
+    }
+    return null;
+  }
+  #checkIfDevtoolsHaveFileSystemAccess(req) {
+    const userAgent = req.headers["user-agent"] ?? "";
+    const hasFileSystemAccess = !/mozilla/i.test(userAgent);
+    return hasFileSystemAccess;
+  }
+  #inspectorId = import_node_crypto2.default.randomUUID();
+  async #handleDevToolsJsonRequest(host, path33) {
+    if (path33 === "/json/version") {
+      return {
+        Browser: `miniflare/v${version}`,
+        // TODO: (someday): The DevTools protocol should match that of workerd.
+        // This could be exposed by the preview API.
+        "Protocol-Version": "1.3"
+      };
+    }
+    if (path33 === "/json" || path33 === "/json/list") {
+      return this.#proxies.map(({ workerName }) => {
+        const localHost = `${host}/${workerName}`;
+        const devtoolsFrontendUrl = `https://devtools.devprod.cloudflare.dev/js_app?theme=systemPreferred&debugger=true&ws=${localHost}`;
+        return {
+          id: `${this.#inspectorId}-${workerName}`,
+          type: "node",
+          // TODO: can we specify different type?
+          description: "workers",
+          webSocketDebuggerUrl: `ws://${localHost}`,
+          devtoolsFrontendUrl,
+          devtoolsFrontendUrlCompat: devtoolsFrontendUrl,
+          // Below are fields that are visible in the DevTools UI.
+          title: workerName.length === 0 || this.#proxies.length === 1 ? `Cloudflare Worker` : `Cloudflare Worker: ${workerName}`,
+          faviconUrl: "https://workers.cloudflare.com/favicon.ico"
+          // url: "http://" + localHost, // looks unnecessary
+        };
+      });
+    }
+    return null;
+  }
+  async getInspectorURL() {
+    return getWebsocketURL(await this.#inspectorPort);
+  }
+  async updateConnection(inspectorPortOption, runtimeInspectorPort) {
+    if (this.inspectorPortOption !== inspectorPortOption) {
+      this.inspectorPortOption = inspectorPortOption;
+      this.#inspectorPort = this.#getInspectorPortToUse();
+      await this.#restartServer();
+    }
+    const workerdInspectorJson = await fetch(
+      `http://127.0.0.1:${runtimeInspectorPort}/json`
+    ).then((resp) => resp.json());
+    this.#proxies = workerdInspectorJson.map(({ id }) => {
+      if (!id.startsWith("core:user:")) {
+        return;
+      }
+      const workerName = id.replace(/^core:user:/, "");
+      if (!this.workerNamesToProxy.has(workerName)) {
+        return;
+      }
+      return new InspectorProxy(
+        workerName,
+        new import_ws4.default(`ws://127.0.0.1:${runtimeInspectorPort}/${id}`)
+      );
+    }).filter(Boolean);
+    this.#runtimeConnectionEstablished.resolve();
+  }
+  async #waitForReady() {
+    await this.#runtimeConnectionEstablished;
+  }
+  get ready() {
+    return this.#waitForReady();
+  }
+  async dispose() {
+    await Promise.all(this.#proxies.map((proxy) => proxy.dispose()));
+    const server = await this.#server;
+    return new Promise((resolve2, reject) => {
+      server.close((err) => err ? reject(err) : resolve2());
+    });
+  }
+};
+function getWebsocketURL(port) {
+  return new URL(`ws://127.0.0.1:${port}`);
+}
+var ALLOWED_HOST_HOSTNAMES = ["127.0.0.1", "[::1]", "localhost"];
+var ALLOWED_ORIGIN_HOSTNAMES = [
+  "devtools.devprod.cloudflare.dev",
+  "cloudflare-devtools.pages.dev",
+  /^[a-z0-9]+\.cloudflare-devtools\.pages\.dev$/,
+  "127.0.0.1",
+  "[::1]",
+  "localhost"
+];
+
 // src/shared/mime-types.ts
 var compressedByCloudflareFL = /* @__PURE__ */ new Set([
   // list copied from https://developers.cloudflare.com/speed/optimization/content/brotli/content-compression/#:~:text=If%20supported%20by%20visitors%E2%80%99%20web%20browsers%2C%20Cloudflare%20will%20return%20Gzip%20or%20Brotli%2Dencoded%20responses%20for%20the%20following%20content%20types%3A
@@ -13907,6 +14619,9 @@ function isCompressedByCloudflareFL(contentTypeHeader) {
   return compressedByCloudflareFL.has(contentType);
 }
 
+// src/workers/secrets-store/constants.ts
+var ADMIN_API = "SecretsStoreSecret::admin_api";
+
 // src/zod-format.ts
 var import_assert11 = __toESM(require("assert"));
 var import_util4 = __toESM(require("util"));
@@ -13945,8 +14660,8 @@ function hasMultipleDistinctMessages(issues, atDepth) {
   }
   return false;
 }
-function annotate(groupCounts, annotated, input, issue, path30, groupId) {
-  if (path30.length === 0) {
+function annotate(groupCounts, annotated, input, issue, path33, groupId) {
+  if (path33.length === 0) {
     if (issue.code === "invalid_union") {
       const unionIssues = issue.unionErrors.flatMap(({ issues }) => issues);
       let newGroupId;
@@ -13992,7 +14707,7 @@ function annotate(groupCounts, annotated, input, issue, path30, groupId) {
       [kGroupId]: groupId
     };
   }
-  const [head, ...tail] = path30;
+  const [head, ...tail] = path33;
   (0, import_assert11.default)(isRecord(input), "Expected object/array input for nested issue");
   if (annotated === void 0) {
     if (Array.isArray(input)) {
@@ -14197,7 +14912,7 @@ function validateOptions(opts) {
   );
   const sharedRootPath = multipleWorkers ? getRootPath(sharedOpts) : "";
   const workerRootPaths = workerOpts.map(
-    (opts2) => import_path28.default.resolve(sharedRootPath, getRootPath(opts2))
+    (opts2) => import_path31.default.resolve(sharedRootPath, getRootPath(opts2))
   );
   try {
     for (const [key, plugin] of PLUGIN_ENTRIES) {
@@ -14213,7 +14928,7 @@ function validateOptions(opts) {
       }
     }
   } catch (e) {
-    if (e instanceof import_zod23.z.ZodError) {
+    if (e instanceof import_zod25.z.ZodError) {
       let formatted;
       try {
         formatted = formatZodError(e, opts);
@@ -14589,18 +15304,45 @@ var Miniflare2 = class _Miniflare {
   #liveReloadServer;
   #webSocketServer;
   #webSocketExtraHeaders;
+  #maybeInspectorProxyController;
+  #previousRuntimeInspectorPort;
   constructor(opts) {
     const [sharedOpts, workerOpts] = validateOptions(opts);
     this.#sharedOpts = sharedOpts;
     this.#workerOpts = workerOpts;
+    const workerNamesToProxy = new Set(
+      this.#workerOpts.filter(({ core: { unsafeInspectorProxy } }) => !!unsafeInspectorProxy).map((w) => w.core.name ?? "")
+    );
+    const enableInspectorProxy = workerNamesToProxy.size > 0;
+    if (enableInspectorProxy) {
+      if (this.#sharedOpts.core.inspectorPort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_MISSING_INSPECTOR_PROXY_PORT",
+          "inspector proxy requested but without an inspectorPort specified"
+        );
+      }
+    }
     if (maybeInstanceRegistry !== void 0) {
       const object = { name: "Miniflare", stack: "" };
       Error.captureStackTrace(object, _Miniflare);
       maybeInstanceRegistry.set(this, object.stack);
     }
     this.#log = this.#sharedOpts.core.log ?? new NoOpLog();
-    this.#liveReloadServer = new import_ws3.WebSocketServer({ noServer: true });
-    this.#webSocketServer = new import_ws3.WebSocketServer({
+    if (enableInspectorProxy) {
+      if (this.#sharedOpts.core.inspectorPort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_MISSING_INSPECTOR_PROXY_PORT",
+          "inspector proxy requested but without an inspectorPort specified"
+        );
+      }
+      this.#maybeInspectorProxyController = new InspectorProxyController(
+        this.#sharedOpts.core.inspectorPort,
+        this.#log,
+        workerNamesToProxy
+      );
+    }
+    this.#liveReloadServer = new import_ws5.WebSocketServer({ noServer: true });
+    this.#webSocketServer = new import_ws5.WebSocketServer({
       noServer: true,
       // Disable automatic handling of `Sec-WebSocket-Protocol` header,
       // Cloudflare Workers require users to include this header themselves in
@@ -14619,7 +15361,7 @@ var Miniflare2 = class _Miniflare {
         }
       }
     });
-    this.#tmpPath = import_path28.default.join(
+    this.#tmpPath = import_path31.default.join(
       import_os2.default.tmpdir(),
       `miniflare-${import_crypto3.default.randomBytes(16).toString("hex")}`
     );
@@ -14627,7 +15369,7 @@ var Miniflare2 = class _Miniflare {
     this.#removeExitHook = (0, import_exit_hook.default)(() => {
       void this.#runtime?.dispose();
       try {
-        import_fs24.default.rmSync(this.#tmpPath, { force: true, recursive: true });
+        import_fs27.default.rmSync(this.#tmpPath, { force: true, recursive: true });
       } catch (e) {
         this.#log.debug(`Unable to remove temporary directory: ${String(e)}`);
       }
@@ -14664,7 +15406,7 @@ var Miniflare2 = class _Miniflare {
       if (!(response instanceof Response)) {
         response = new Response(response.body, response);
       }
-      return import_zod23.z.instanceof(Response).parse(response);
+      return import_zod25.z.instanceof(Response).parse(response);
     } catch (e) {
       return new Response(e?.stack ?? e, { status: 500 });
     }
@@ -14687,11 +15429,11 @@ var Miniflare2 = class _Miniflare {
     (0, import_assert12.default)(!Array.isArray(cfBlob));
     const cf = cfBlob ? JSON.parse(cfBlob) : void 0;
     const originalUrl = headers.get(CoreHeaders.ORIGINAL_URL);
-    const url20 = new URL(originalUrl ?? req.url ?? "", "http://localhost");
+    const url23 = new URL(originalUrl ?? req.url ?? "", "http://localhost");
     headers.delete(CoreHeaders.ORIGINAL_URL);
     const noBody = req.method === "GET" || req.method === "HEAD";
     const body = noBody ? void 0 : safeReadableStreamFrom(req);
-    const request = new Request(url20, {
+    const request = new Request(url23, {
       method: req.method,
       headers,
       body,
@@ -14712,13 +15454,13 @@ var Miniflare2 = class _Miniflare {
           request,
           this
         );
-      } else if (url20.pathname === "/core/error") {
+      } else if (url23.pathname === "/core/error") {
         response = await handlePrettyErrorRequest(
           this.#log,
           this.#workerSrcOpts,
           request
         );
-      } else if (url20.pathname === "/core/log") {
+      } else if (url23.pathname === "/core/log") {
         const level = parseInt(request.headers.get(SharedHeaders.LOG_LEVEL));
         (0, import_assert12.default)(
           0 /* NONE */ <= level && level <= 5 /* VERBOSE */,
@@ -14729,6 +15471,17 @@ var Miniflare2 = class _Miniflare {
         if (!$.enabled) message = stripAnsi(message);
         this.#log.logWithLevel(logLevel, message);
         response = new Response(null, { status: 204 });
+      } else if (url23.pathname === "/core/store-temp-file") {
+        const prefix = url23.searchParams.get("prefix");
+        const folder = prefix ? `files/${prefix}` : "files";
+        await (0, import_promises13.mkdir)(import_path31.default.join(this.#tmpPath, folder), { recursive: true });
+        const filePath = import_path31.default.join(
+          this.#tmpPath,
+          folder,
+          `${import_crypto3.default.randomUUID()}.${url23.searchParams.get("extension") ?? "txt"}`
+        );
+        await (0, import_promises13.writeFile)(filePath, await request.text());
+        response = new Response(filePath, { status: 200 });
       }
     } catch (e) {
       this.#log.error(e);
@@ -14911,14 +15664,13 @@ var Miniflare2 = class _Miniflare {
               );
               if (maybeAssetTargetService && !binding.service?.entrypoint) {
                 (0, import_assert12.default)(binding.service?.name);
-                binding.service.name = this.#sharedOpts.core.unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${targetWorkerName}` : `${ROUTER_SERVICE_NAME}:${targetWorkerName}`;
+                binding.service.name = `${RPC_PROXY_SERVICE_NAME}:${targetWorkerName}`;
               }
             }
           }
         }
       }
       const unsafeStickyBlobs = sharedOpts.core.unsafeStickyBlobs ?? false;
-      const unsafeEnableAssetsRpc = sharedOpts.core.unsafeEnableAssetsRpc ?? false;
       const unsafeEphemeralDurableObjects = workerOpts.core.unsafeEphemeralDurableObjects ?? false;
       const pluginServicesOptionsBase = {
         log: this.#log,
@@ -14933,8 +15685,7 @@ var Miniflare2 = class _Miniflare {
         durableObjectClassNames,
         unsafeEphemeralDurableObjects,
         queueProducers,
-        queueConsumers,
-        unsafeEnableAssetsRpc
+        queueConsumers
       };
       for (const [key, plugin] of PLUGIN_ENTRIES) {
         const pluginServicesExtensions = await plugin.getServices({
@@ -14982,13 +15733,16 @@ var Miniflare2 = class _Miniflare {
           directSocket.host,
           directSocket.port
         );
+        const service = workerOpts.assets.assets && entrypoint === "default" ? {
+          name: `${RPC_PROXY_SERVICE_NAME}:${workerOpts.core.name}`
+        } : {
+          name: getUserServiceName(workerName),
+          entrypoint: entrypoint === "default" ? void 0 : entrypoint
+        };
         sockets.push({
           name,
           address,
-          service: {
-            name: getUserServiceName(workerName),
-            entrypoint: entrypoint === "default" ? void 0 : entrypoint
-          },
+          service,
           http: {
             style: directSocket.proxy ? HttpOptions_Style.PROXY : void 0,
             cfBlobHeader: CoreHeaders.CF_BLOB,
@@ -15001,15 +15755,15 @@ var Miniflare2 = class _Miniflare {
       sharedOptions: sharedOpts.core,
       allWorkerRoutes,
       /*
-       * - if Workers + Assets project but NOT Vitest, point to Router Worker or
-       *   Proxy Worker depending on whether experimental flag `unsafeEnableAssetsRpc`
-       *   was set
-       * - if Vitest with assets, the self binding on the test runner will point to
-       *   Router Worker
+       * - if Workers + Assets project but NOT Vitest, the fallback Worker (see
+       *   `MINIFLARE_USER_FALLBACK`) should point to the (assets) RPC Proxy Worker
+       * - if Vitest with assets, the fallback Worker should point to the Vitest
+       *   runner Worker, while the SELF binding on the test runner will point to
+       *   the (assets) RPC Proxy Worker
        */
       fallbackWorkerName: this.#workerOpts[0].assets.assets && !this.#workerOpts[0].core.name?.startsWith(
         "vitest-pool-workers-runner-"
-      ) ? this.#sharedOpts.core.unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : `${ROUTER_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : getUserServiceName(this.#workerOpts[0].core.name),
+      ) ? `${RPC_PROXY_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : getUserServiceName(this.#workerOpts[0].core.name),
       loopbackPort,
       log: this.#log,
       proxyBindings
@@ -15060,14 +15814,19 @@ var Miniflare2 = class _Miniflare {
       configuredHost,
       this.#sharedOpts.core.port
     );
-    let inspectorAddress;
+    let runtimeInspectorAddress;
     if (this.#sharedOpts.core.inspectorPort !== void 0) {
-      inspectorAddress = this.#getSocketAddress(
+      let runtimeInspectorPort = this.#sharedOpts.core.inspectorPort;
+      if (this.#maybeInspectorProxyController !== void 0) {
+        runtimeInspectorPort = 0;
+      }
+      runtimeInspectorAddress = this.#getSocketAddress(
         kInspectorSocket,
-        this.#previousSharedOpts?.core.inspectorPort,
+        this.#previousRuntimeInspectorPort,
         "localhost",
-        this.#sharedOpts.core.inspectorPort
+        runtimeInspectorPort
       );
+      this.#previousRuntimeInspectorPort = runtimeInspectorPort;
     }
     const loopbackAddress = `${maybeGetLocallyAccessibleHost(configuredHost) ?? getURLSafeHost(configuredHost)}:${loopbackPort}`;
     const runtimeOpts = {
@@ -15075,7 +15834,7 @@ var Miniflare2 = class _Miniflare {
       entryAddress,
       loopbackAddress,
       requiredSockets,
-      inspectorAddress,
+      inspectorAddress: runtimeInspectorAddress,
       verbose: this.#sharedOpts.core.verbose,
       handleRuntimeStdio: this.#sharedOpts.core.handleRuntimeStdio
     };
@@ -15091,6 +15850,20 @@ var Miniflare2 = class _Miniflare {
       );
     }
     this.#socketPorts = maybeSocketPorts;
+    if (this.#maybeInspectorProxyController !== void 0 && this.#sharedOpts.core.inspectorPort !== void 0) {
+      const maybePort = this.#socketPorts.get(kInspectorSocket);
+      if (maybePort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_RUNTIME_FAILURE",
+          "Unable to access the runtime inspector socket."
+        );
+      } else {
+        await this.#maybeInspectorProxyController.updateConnection(
+          this.#sharedOpts.core.inspectorPort,
+          maybePort
+        );
+      }
+    }
     const entrySocket = config.sockets?.[0];
     const secure = entrySocket !== void 0 && "https" in entrySocket;
     const previousEntryURL = this.#runtimeEntryURL;
@@ -15122,10 +15895,12 @@ var Miniflare2 = class _Miniflare {
     if (!this.#runtimeMutex.hasWaiting) {
       const ready = initial ? "Ready" : "Updated and ready";
       const urlSafeHost = getURLSafeHost(configuredHost);
-      this.#log.info(
-        `${ready} on ${secure ? "https" : "http"}://${urlSafeHost}:${entryPort}`
-      );
-      if (initial) {
+      if (this.#sharedOpts.core.logRequests) {
+        this.#log.info(
+          `${ready} on ${secure ? "https" : "http"}://${urlSafeHost}:${entryPort}`
+        );
+      }
+      if (initial && this.#sharedOpts.core.logRequests) {
         const hosts = [];
         if (configuredHost === "::" || configuredHost === "*") {
           hosts.push("localhost");
@@ -15145,6 +15920,7 @@ var Miniflare2 = class _Miniflare {
     await this.#initPromise;
     await this.#runtimeMutex.drained();
     if (disposing) return new URL("http://[100::]/");
+    await this.#maybeInspectorProxyController?.ready;
     this.#checkDisposed();
     (0, import_assert12.default)(this.#runtimeEntryURL !== void 0);
     return new URL(this.#runtimeEntryURL.toString());
@@ -15160,6 +15936,9 @@ var Miniflare2 = class _Miniflare {
   async getInspectorURL() {
     this.#checkDisposed();
     await this.ready;
+    if (this.#maybeInspectorProxyController !== void 0) {
+      return this.#maybeInspectorProxyController.getInspectorURL();
+    }
     (0, import_assert12.default)(this.#socketPorts !== void 0);
     const maybePort = this.#socketPorts.get(kInspectorSocket);
     if (maybePort === void 0) {
@@ -15220,11 +15999,11 @@ var Miniflare2 = class _Miniflare {
     (0, import_assert12.default)(this.#runtimeEntryURL !== void 0);
     (0, import_assert12.default)(this.#runtimeDispatcher !== void 0);
     const forward = new Request(input, init2);
-    const url20 = new URL(forward.url);
+    const url23 = new URL(forward.url);
     const actualRuntimeOrigin = this.#runtimeEntryURL.origin;
-    const userRuntimeOrigin = url20.origin;
-    url20.protocol = this.#runtimeEntryURL.protocol;
-    url20.host = this.#runtimeEntryURL.host;
+    const userRuntimeOrigin = url23.origin;
+    url23.protocol = this.#runtimeEntryURL.protocol;
+    url23.host = this.#runtimeEntryURL.host;
     if (forward.body !== null && forward.headers.get("Content-Length") === "0") {
       forward.headers.delete("Content-Length");
     }
@@ -15238,7 +16017,7 @@ var Miniflare2 = class _Miniflare {
     );
     const forwardInit = forward;
     forwardInit.dispatcher = dispatcher;
-    const response = await fetch3(url20, forwardInit);
+    const response = await fetch4(url23, forwardInit);
     const stack = response.headers.get(CoreHeaders.ERROR_STACK);
     if (response.status === 500 && stack !== null) {
       const caught = JsonErrorSchema.parse(await response.json());
@@ -15354,6 +16133,18 @@ var Miniflare2 = class _Miniflare {
   getKVNamespace(bindingName, workerName) {
     return this.#getProxy(KV_PLUGIN_NAME, bindingName, workerName);
   }
+  getSecretsStoreSecretAPI(bindingName, workerName) {
+    return this.#getProxy(
+      SECRET_STORE_PLUGIN_NAME,
+      bindingName,
+      workerName
+    ).then((binding) => {
+      return binding[ADMIN_API];
+    });
+  }
+  getSecretsStoreSecret(bindingName, workerName) {
+    return this.#getProxy(SECRET_STORE_PLUGIN_NAME, bindingName, workerName);
+  }
   getQueueProducer(bindingName, workerName) {
     return this.#getProxy(QUEUES_PLUGIN_NAME, bindingName, workerName);
   }
@@ -15386,7 +16177,8 @@ var Miniflare2 = class _Miniflare {
       await this.#proxyClient?.dispose();
       await this.#runtime?.dispose();
       await this.#stopLoopbackServer();
-      await import_fs24.default.promises.rm(this.#tmpPath, { force: true, recursive: true });
+      await import_fs27.default.promises.rm(this.#tmpPath, { force: true, recursive: true });
+      await this.#maybeInspectorProxyController?.dispose();
       maybeInstanceRegistry?.delete(this);
     }
   }
@@ -15420,6 +16212,9 @@ var Miniflare2 = class _Miniflare {
   DispatchFetchDispatcher,
   DurableObjectsOptionsSchema,
   DurableObjectsSharedOptionsSchema,
+  EMAIL_PLUGIN,
+  EMAIL_PLUGIN_NAME,
+  EmailOptionsSchema,
   ErrorEvent,
   File,
   FormData,
@@ -15441,6 +16236,7 @@ var Miniflare2 = class _Miniflare {
   LiteralSchema,
   Log,
   LogLevel,
+  MAX_BULK_GET_KEYS,
   MessageEvent,
   Miniflare,
   MiniflareCoreError,
@@ -15489,11 +16285,15 @@ var Miniflare2 = class _Miniflare {
   Response,
   RouterError,
   Runtime,
+  SECRET_STORE_PLUGIN,
+  SECRET_STORE_PLUGIN_NAME,
   SERVICE_ENTRY,
   SERVICE_LOOPBACK,
   SITES_NO_CACHE_PREFIX,
   SOCKET_ENTRY,
   SOCKET_ENTRY_LOCAL,
+  SecretsStoreSecretsOptionsSchema,
+  SecretsStoreSecretsSharedOptionsSchema,
   SharedBindings,
   SharedHeaders,
   SiteBindings,