miniflare 0.0.0-e51304ca0 → 0.0.0-e55f489db

package/dist/src/index.js

@@ -254,17 +254,17 @@ var require_ignore = __commonJS({
     var throwError = (message, Ctor) => {
       throw new Ctor(message);
     };
-    var checkPath = (path30, originalPath, doThrow) => {
-      if (!isString(path30)) {
+    var checkPath = (path34, originalPath, doThrow) => {
+      if (!isString(path34)) {
         return doThrow(
           `path must be a string, but got \`${originalPath}\``,
           TypeError
         );
       }
-      if (!path30) {
+      if (!path34) {
         return doThrow(`path must not be empty`, TypeError);
       }
-      if (checkPath.isNotRelative(path30)) {
+      if (checkPath.isNotRelative(path34)) {
         const r = "`path.relative()`d";
         return doThrow(
           `path should be a ${r} string, but got "${originalPath}"`,
@@ -273,7 +273,7 @@ var require_ignore = __commonJS({
       }
       return true;
     };
-    var isNotRelative = (path30) => REGEX_TEST_INVALID_PATH.test(path30);
+    var isNotRelative = (path34) => REGEX_TEST_INVALID_PATH.test(path34);
     checkPath.isNotRelative = isNotRelative;
     checkPath.convert = (p) => p;
     var Ignore = class {
@@ -332,7 +332,7 @@ var require_ignore = __commonJS({
       //   setting `checkUnignored` to `false` could reduce additional
       //   path matching.
       // @returns {TestResult} true if a file is ignored
-      _testOne(path30, checkUnignored) {
+      _testOne(path34, checkUnignored) {
         let ignored2 = false;
         let unignored = false;
         this._rules.forEach((rule) => {
@@ -340,7 +340,7 @@ var require_ignore = __commonJS({
           if (unignored === negative && ignored2 !== unignored || negative && !ignored2 && !unignored && !checkUnignored) {
             return;
           }
-          const matched = rule.regex.test(path30);
+          const matched = rule.regex.test(path34);
           if (matched) {
             ignored2 = !negative;
             unignored = negative;
@@ -353,24 +353,24 @@ var require_ignore = __commonJS({
       }
       // @returns {TestResult}
       _test(originalPath, cache, checkUnignored, slices) {
-        const path30 = originalPath && checkPath.convert(originalPath);
+        const path34 = originalPath && checkPath.convert(originalPath);
         checkPath(
-          path30,
+          path34,
           originalPath,
           this._allowRelativePaths ? RETURN_FALSE : throwError
         );
-        return this._t(path30, cache, checkUnignored, slices);
+        return this._t(path34, cache, checkUnignored, slices);
       }
-      _t(path30, cache, checkUnignored, slices) {
-        if (path30 in cache) {
-          return cache[path30];
+      _t(path34, cache, checkUnignored, slices) {
+        if (path34 in cache) {
+          return cache[path34];
         }
         if (!slices) {
-          slices = path30.split(SLASH);
+          slices = path34.split(SLASH);
         }
         slices.pop();
         if (!slices.length) {
-          return cache[path30] = this._testOne(path30, checkUnignored);
+          return cache[path34] = this._testOne(path34, checkUnignored);
         }
         const parent = this._t(
           slices.join(SLASH) + SLASH,
@@ -378,24 +378,24 @@ var require_ignore = __commonJS({
           checkUnignored,
           slices
         );
-        return cache[path30] = parent.ignored ? parent : this._testOne(path30, checkUnignored);
+        return cache[path34] = parent.ignored ? parent : this._testOne(path34, checkUnignored);
       }
-      ignores(path30) {
-        return this._test(path30, this._ignoreCache, false).ignored;
+      ignores(path34) {
+        return this._test(path34, this._ignoreCache, false).ignored;
       }
       createFilter() {
-        return (path30) => !this.ignores(path30);
+        return (path34) => !this.ignores(path34);
       }
       filter(paths) {
         return makeArray(paths).filter(this.createFilter());
       }
       // @returns {TestResult}
-      test(path30) {
-        return this._test(path30, this._testCache, true);
+      test(path34) {
+        return this._test(path34, this._testCache, true);
       }
     };
     var factory = (options) => new Ignore(options);
-    var isPathValid = (path30) => checkPath(path30 && checkPath.convert(path30), path30, RETURN_FALSE);
+    var isPathValid = (path34) => checkPath(path34 && checkPath.convert(path34), path34, RETURN_FALSE);
     factory.isPathValid = isPathValid;
     factory.default = factory;
     module2.exports = factory;
@@ -406,7 +406,7 @@ var require_ignore = __commonJS({
       const makePosix = (str) => /^\\\\\?\\/.test(str) || /["<>|\u0000-\u001F]+/u.test(str) ? str : str.replace(/\\/g, "/");
       checkPath.convert = makePosix;
       const REGIX_IS_WINDOWS_PATH_ABSOLUTE = /^[a-z]:\//i;
-      checkPath.isNotRelative = (path30) => REGIX_IS_WINDOWS_PATH_ABSOLUTE.test(path30) || isNotRelative(path30);
+      checkPath.isNotRelative = (path34) => REGIX_IS_WINDOWS_PATH_ABSOLUTE.test(path34) || isNotRelative(path34);
     }
   }
 });
@@ -449,11 +449,11 @@ var require_Mime = __commonJS({
         }
       }
     };
-    Mime.prototype.getType = function(path30) {
-      path30 = String(path30);
-      let last = path30.replace(/^.*[/\\]/, "").toLowerCase();
+    Mime.prototype.getType = function(path34) {
+      path34 = String(path34);
+      let last = path34.replace(/^.*[/\\]/, "").toLowerCase();
       let ext = last.replace(/^.*\./, "").toLowerCase();
-      let hasPath = last.length < path30.length;
+      let hasPath = last.length < path34.length;
       let hasDot = ext.length < last.length - 1;
       return (hasDot || !hasPath) && this._types[ext] || null;
     };
@@ -493,7 +493,11 @@ var require_mime = __commonJS({
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  ANALYTICS_ENGINE_PLUGIN: () => ANALYTICS_ENGINE_PLUGIN,
+  ANALYTICS_ENGINE_PLUGIN_NAME: () => ANALYTICS_ENGINE_PLUGIN_NAME,
   ASSETS_PLUGIN: () => ASSETS_PLUGIN,
+  AnalyticsEngineSchemaOptionsSchema: () => AnalyticsEngineSchemaOptionsSchema,
+  AnalyticsEngineSchemaSharedOptionsSchema: () => AnalyticsEngineSchemaSharedOptionsSchema,
   AssetsOptionsSchema: () => AssetsOptionsSchema,
   CACHE_PLUGIN: () => CACHE_PLUGIN,
   CACHE_PLUGIN_NAME: () => CACHE_PLUGIN_NAME,
@@ -520,6 +524,9 @@ __export(src_exports, {
   DispatchFetchDispatcher: () => DispatchFetchDispatcher,
   DurableObjectsOptionsSchema: () => DurableObjectsOptionsSchema,
   DurableObjectsSharedOptionsSchema: () => DurableObjectsSharedOptionsSchema,
+  EMAIL_PLUGIN: () => EMAIL_PLUGIN,
+  EMAIL_PLUGIN_NAME: () => EMAIL_PLUGIN_NAME,
+  EmailOptionsSchema: () => EmailOptionsSchema,
   ErrorEvent: () => ErrorEvent,
   File: () => import_undici4.File,
   FormData: () => import_undici4.FormData,
@@ -541,6 +548,7 @@ __export(src_exports, {
   LiteralSchema: () => LiteralSchema,
   Log: () => Log,
   LogLevel: () => LogLevel,
+  MAX_BULK_GET_KEYS: () => MAX_BULK_GET_KEYS,
   MessageEvent: () => MessageEvent,
   Miniflare: () => Miniflare2,
   MiniflareCoreError: () => MiniflareCoreError,
@@ -589,11 +597,15 @@ __export(src_exports, {
   Response: () => Response,
   RouterError: () => RouterError,
   Runtime: () => Runtime,
+  SECRET_STORE_PLUGIN: () => SECRET_STORE_PLUGIN,
+  SECRET_STORE_PLUGIN_NAME: () => SECRET_STORE_PLUGIN_NAME,
   SERVICE_ENTRY: () => SERVICE_ENTRY,
   SERVICE_LOOPBACK: () => SERVICE_LOOPBACK,
   SITES_NO_CACHE_PREFIX: () => SITES_NO_CACHE_PREFIX,
   SOCKET_ENTRY: () => SOCKET_ENTRY,
   SOCKET_ENTRY_LOCAL: () => SOCKET_ENTRY_LOCAL,
+  SecretsStoreSecretsOptionsSchema: () => SecretsStoreSecretsOptionsSchema,
+  SecretsStoreSecretsSharedOptionsSchema: () => SecretsStoreSecretsSharedOptionsSchema,
   SharedBindings: () => SharedBindings,
   SharedHeaders: () => SharedHeaders,
   SiteBindings: () => SiteBindings,
@@ -628,7 +640,7 @@ __export(src_exports, {
   deserialiseRegExps: () => deserialiseRegExps,
   deserialiseSiteRegExps: () => deserialiseSiteRegExps,
   encodeSitesKey: () => encodeSitesKey,
-  fetch: () => fetch3,
+  fetch: () => fetch4,
   formatZodError: () => formatZodError,
   getAccessibleHosts: () => getAccessibleHosts,
   getAssetsBindingsNames: () => getAssetsBindingsNames,
@@ -683,11 +695,12 @@ __export(src_exports, {
 module.exports = __toCommonJS(src_exports);
 var import_assert12 = __toESM(require("assert"));
 var import_crypto3 = __toESM(require("crypto"));
-var import_fs24 = __toESM(require("fs"));
+var import_fs28 = __toESM(require("fs"));
+var import_promises13 = require("fs/promises");
 var import_http6 = __toESM(require("http"));
 var import_net = __toESM(require("net"));
 var import_os2 = __toESM(require("os"));
-var import_path28 = __toESM(require("path"));
+var import_path32 = __toESM(require("path"));
 var import_web5 = require("stream/web");
 var import_util5 = __toESM(require("util"));
 var import_zlib = __toESM(require("zlib"));
@@ -770,8 +783,8 @@ function zod_worker_default() {
 }
 
 // src/index.ts
-var import_ws3 = require("ws");
-var import_zod23 = require("zod");
+var import_ws5 = require("ws");
+var import_zod26 = require("zod");
 
 // src/cf.ts
 var import_assert = __toESM(require("assert"));
@@ -909,7 +922,9 @@ var CoreBindings = {
   DATA_LIVE_RELOAD_SCRIPT: "MINIFLARE_LIVE_RELOAD_SCRIPT",
   DURABLE_OBJECT_NAMESPACE_PROXY: "MINIFLARE_PROXY",
   DATA_PROXY_SECRET: "MINIFLARE_PROXY_SECRET",
-  DATA_PROXY_SHARED_SECRET: "MINIFLARE_PROXY_SHARED_SECRET"
+  DATA_PROXY_SHARED_SECRET: "MINIFLARE_PROXY_SHARED_SECRET",
+  TRIGGER_HANDLERS: "TRIGGER_HANDLERS",
+  LOG_REQUESTS: "LOG_REQUESTS"
 };
 var ProxyOps = {
   // Get the target or a property of the target
@@ -1354,12 +1369,12 @@ function createHTTPRevivers(impl) {
     },
     Request(value) {
       (0, import_node_assert.default)(Array.isArray(value));
-      const [method, url20, headers, cf, body] = value;
+      const [method, url24, headers, cf, body] = value;
       (0, import_node_assert.default)(typeof method === "string");
-      (0, import_node_assert.default)(typeof url20 === "string");
+      (0, import_node_assert.default)(typeof url24 === "string");
       (0, import_node_assert.default)(headers instanceof impl.Headers);
       (0, import_node_assert.default)(body === null || impl.isReadableStream(body));
-      return new impl.Request(url20, {
+      return new impl.Request(url24, {
         method,
         headers,
         cf,
@@ -1485,19 +1500,19 @@ function parseWithReadableStreams(impl, stringified, revivers2) {
 }
 
 // src/workers/core/routing.ts
-function matchRoutes(routes, url20) {
+function matchRoutes(routes, url24) {
   for (const route of routes) {
-    if (route.protocol && route.protocol !== url20.protocol) continue;
+    if (route.protocol && route.protocol !== url24.protocol) continue;
     if (route.allowHostnamePrefix) {
-      if (!url20.hostname.endsWith(route.hostname)) continue;
+      if (!url24.hostname.endsWith(route.hostname)) continue;
     } else {
-      if (url20.hostname !== route.hostname) continue;
+      if (url24.hostname !== route.hostname) continue;
     }
-    const path30 = url20.pathname + url20.search;
+    const path34 = url24.pathname + url24.search;
     if (route.allowPathSuffix) {
-      if (!path30.startsWith(route.path)) continue;
+      if (!path34.startsWith(route.path)) continue;
     } else {
-      if (path30 !== route.path) continue;
+      if (path34 !== route.path) continue;
     }
     return route.target;
   }
@@ -1697,7 +1712,8 @@ var KVLimits = {
   MAX_KEY_SIZE: 512,
   MAX_VALUE_SIZE: 25 * 1024 * 1024,
   MAX_VALUE_SIZE_TEST: 1024,
-  MAX_METADATA_SIZE: 1024
+  MAX_METADATA_SIZE: 1024,
+  MAX_BULK_SIZE: 25 * 1024 * 1024
 };
 var KVParams = {
   URL_ENCODED: "urlencoded",
@@ -1718,6 +1734,7 @@ var SiteBindings = {
   JSON_SITE_FILTER: "MINIFLARE_SITE_FILTER"
 };
 var SITES_NO_CACHE_PREFIX = "$__MINIFLARE_SITES__$/";
+var MAX_BULK_GET_KEYS = 100;
 function encodeSitesKey(key) {
   return SITES_NO_CACHE_PREFIX + encodeURIComponent(key);
 }
@@ -1725,8 +1742,8 @@ function decodeSitesKey(key) {
   return key.startsWith(SITES_NO_CACHE_PREFIX) ? decodeURIComponent(key.substring(SITES_NO_CACHE_PREFIX.length)) : key;
 }
 function isSitesRequest(request) {
-  const url20 = new URL(request.url);
-  return url20.pathname.startsWith(`/${SITES_NO_CACHE_PREFIX}`);
+  const url24 = new URL(request.url);
+  return url24.pathname.startsWith(`/${SITES_NO_CACHE_PREFIX}`);
 }
 function serialiseRegExp(regExp) {
   const str = regExp.toString();
@@ -1877,8 +1894,8 @@ var Response = class _Response extends import_undici3.Response {
     Object.setPrototypeOf(response, _Response.prototype);
     return response;
   }
-  static redirect(url20, status) {
-    const response = import_undici3.Response.redirect(url20, status);
+  static redirect(url24, status) {
+    const response = import_undici3.Response.redirect(url24, status);
     Object.setPrototypeOf(response, _Response.prototype);
     return response;
   }
@@ -2359,18 +2376,18 @@ function headersFromIncomingRequest(req) {
   );
   return new undici.Headers(Object.fromEntries(entries));
 }
-async function fetch3(input, init2) {
+async function fetch4(input, init2) {
   const requestInit = init2;
   const request = new Request(input, requestInit);
   if (request.method === "GET" && request.headers.get("upgrade") === "websocket") {
-    const url20 = new URL(request.url);
-    if (url20.protocol !== "http:" && url20.protocol !== "https:") {
+    const url24 = new URL(request.url);
+    if (url24.protocol !== "http:" && url24.protocol !== "https:") {
       throw new TypeError(
-        `Fetch API cannot load: ${url20.toString()}.
+        `Fetch API cannot load: ${url24.toString()}.
 Make sure you're using http(s):// URLs for WebSocket requests via fetch.`
       );
     }
-    url20.protocol = url20.protocol.replace("http", "ws");
+    url24.protocol = url24.protocol.replace("http", "ws");
     const headers = {};
     let protocols;
     for (const [key, value] of request.headers.entries()) {
@@ -2382,10 +2399,10 @@ Make sure you're using http(s):// URLs for WebSocket requests via fetch.`
     }
     let rejectUnauthorized;
     if (requestInit.dispatcher instanceof DispatchFetchDispatcher) {
-      requestInit.dispatcher.addHeaders(headers, url20.pathname + url20.search);
+      requestInit.dispatcher.addHeaders(headers, url24.pathname + url24.search);
       rejectUnauthorized = { rejectUnauthorized: false };
     }
-    const ws = new import_ws2.default(url20, protocols, {
+    const ws = new import_ws2.default(url24, protocols, {
       followRedirects: request.redirect === "follow",
       headers,
       ...rejectUnauthorized
@@ -2441,8 +2458,8 @@ var DispatchFetchDispatcher = class extends undici.Dispatcher {
     if (cfBlob !== void 0) this.cfBlobJson = JSON.stringify(cfBlob);
   }
   cfBlobJson;
-  addHeaders(headers, path30) {
-    const originalURL = this.userRuntimeOrigin + path30;
+  addHeaders(headers, path34) {
+    const originalURL = this.userRuntimeOrigin + path34;
     addHeader(headers, CoreHeaders.ORIGINAL_URL, originalURL);
     addHeader(headers, CoreHeaders.DISABLE_PRETTY_ERROR, "true");
     if (this.cfBlobJson !== void 0) {
@@ -2454,16 +2471,16 @@ var DispatchFetchDispatcher = class extends undici.Dispatcher {
     if (origin === this.userRuntimeOrigin) origin = this.actualRuntimeOrigin;
     if (origin === this.actualRuntimeOrigin) {
       options.origin = origin;
-      let path30 = options.path;
+      let path34 = options.path;
       if (options.query !== void 0) {
-        const url20 = new URL(path30, "http://placeholder/");
+        const url24 = new URL(path34, "http://placeholder/");
         for (const [key, value] of Object.entries(options.query)) {
-          url20.searchParams.append(key, value);
+          url24.searchParams.append(key, value);
         }
-        path30 = url20.pathname + url20.search;
+        path34 = url24.pathname + url24.search;
       }
       options.headers ??= {};
-      this.addHeaders(options.headers, path30);
+      this.addHeaders(options.headers, path34);
       return this.runtimeDispatcher.dispatch(options, handler);
     } else {
       return this.globalDispatcher.dispatch(options, handler);
@@ -2558,8 +2575,8 @@ function valueOrFile(value, filePath) {
 var import_os = require("os");
 function getAccessibleHosts(ipv4Only = false) {
   const hosts = [];
-  Object.values((0, import_os.networkInterfaces)()).forEach((net2) => {
-    net2?.forEach(({ family, address }) => {
+  Object.values((0, import_os.networkInterfaces)()).forEach((net3) => {
+    net3?.forEach(({ family, address }) => {
       if (family === "IPv4" || family === 4) {
         hosts.push(address);
       } else if (!ipv4Only) {
@@ -2573,6 +2590,329 @@ function getAccessibleHosts(ipv4Only = false) {
 // src/http/index.ts
 var import_undici4 = require("undici");
 
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/analytics-engine/analytics-engine.worker.ts
+var import_fs3 = __toESM(require("fs"));
+var import_path6 = __toESM(require("path"));
+var import_url3 = __toESM(require("url"));
+var contents3;
+function analytics_engine_worker_default() {
+  if (contents3 !== void 0) return contents3;
+  const filePath = import_path6.default.join(__dirname, "workers", "analytics-engine/analytics-engine.worker.js");
+  contents3 = import_fs3.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url3.default.pathToFileURL(filePath);
+  return contents3;
+}
+
+// src/plugins/analytics-engine/index.ts
+var import_zod5 = require("zod");
+
+// src/plugins/shared/index.ts
+var import_crypto = __toESM(require("crypto"));
+var import_fs5 = require("fs");
+var import_promises3 = __toESM(require("fs/promises"));
+var import_path8 = __toESM(require("path"));
+var import_url6 = require("url");
+var import_zod4 = require("zod");
+
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/shared/object-entry.worker.ts
+var import_fs4 = __toESM(require("fs"));
+var import_path7 = __toESM(require("path"));
+var import_url4 = __toESM(require("url"));
+var contents4;
+function object_entry_worker_default() {
+  if (contents4 !== void 0) return contents4;
+  const filePath = import_path7.default.join(__dirname, "workers", "shared/object-entry.worker.js");
+  contents4 = import_fs4.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url4.default.pathToFileURL(filePath);
+  return contents4;
+}
+
+// src/plugins/shared/constants.ts
+var SOCKET_ENTRY = "entry";
+var SOCKET_ENTRY_LOCAL = "entry:local";
+var SOCKET_DIRECT_PREFIX = "direct";
+function getDirectSocketName(workerIndex, entrypoint) {
+  return `${SOCKET_DIRECT_PREFIX}:${workerIndex}:${entrypoint}`;
+}
+var SERVICE_LOOPBACK = "loopback";
+var HOST_CAPNP_CONNECT = "miniflare-unsafe-internal-capnp-connect";
+var WORKER_BINDING_SERVICE_LOOPBACK = {
+  name: CoreBindings.SERVICE_LOOPBACK,
+  service: { name: SERVICE_LOOPBACK }
+};
+var WORKER_BINDING_ENABLE_CONTROL_ENDPOINTS = {
+  name: SharedBindings.MAYBE_JSON_ENABLE_CONTROL_ENDPOINTS,
+  json: "true"
+};
+var WORKER_BINDING_ENABLE_STICKY_BLOBS = {
+  name: SharedBindings.MAYBE_JSON_ENABLE_STICKY_BLOBS,
+  json: "true"
+};
+var enableControlEndpoints = false;
+function getMiniflareObjectBindings(unsafeStickyBlobs) {
+  const result = [];
+  if (enableControlEndpoints) {
+    result.push(WORKER_BINDING_ENABLE_CONTROL_ENDPOINTS);
+  }
+  if (unsafeStickyBlobs) {
+    result.push(WORKER_BINDING_ENABLE_STICKY_BLOBS);
+  }
+  return result;
+}
+function _enableControlEndpoints() {
+  enableControlEndpoints = true;
+}
+function objectEntryWorker(durableObjectNamespace, namespace) {
+  return {
+    compatibilityDate: "2023-07-24",
+    modules: [
+      { name: "object-entry.worker.js", esModule: object_entry_worker_default() }
+    ],
+    bindings: [
+      { name: SharedBindings.TEXT_NAMESPACE, text: namespace },
+      {
+        name: SharedBindings.DURABLE_OBJECT_NAMESPACE_OBJECT,
+        durableObjectNamespace
+      }
+    ]
+  };
+}
+var kUnsafeEphemeralUniqueKey = Symbol.for(
+  "miniflare.kUnsafeEphemeralUniqueKey"
+);
+
+// src/plugins/shared/routing.ts
+var import_url5 = require("url");
+var RouterError = class extends MiniflareError {
+};
+function routeSpecificity(url24) {
+  const hostParts = url24.host.split(".");
+  let hostScore = hostParts.length;
+  if (hostParts[0] === "*") hostScore -= 2;
+  const pathParts = url24.pathname.split("/");
+  let pathScore = pathParts.length;
+  if (pathParts[pathParts.length - 1] === "*") pathScore -= 2;
+  return hostScore * 26 + pathScore;
+}
+function parseRoutes(allRoutes) {
+  const routes = [];
+  for (const [target, targetRoutes] of allRoutes) {
+    for (const route of targetRoutes) {
+      const hasProtocol = /^[a-z0-9+\-.]+:\/\//i.test(route);
+      let urlInput = route;
+      if (!hasProtocol) urlInput = `https://${urlInput}`;
+      const url24 = new import_url5.URL(urlInput);
+      const specificity = routeSpecificity(url24);
+      const protocol = hasProtocol ? url24.protocol : void 0;
+      const internationalisedAllowHostnamePrefix = url24.hostname.startsWith("xn--*");
+      const allowHostnamePrefix = url24.hostname.startsWith("*") || internationalisedAllowHostnamePrefix;
+      const anyHostname = url24.hostname === "*";
+      if (allowHostnamePrefix && !anyHostname) {
+        let hostname = url24.hostname;
+        if (internationalisedAllowHostnamePrefix) {
+          hostname = (0, import_url5.domainToUnicode)(hostname);
+        }
+        url24.hostname = hostname.substring(1);
+      }
+      const allowPathSuffix = url24.pathname.endsWith("*");
+      if (allowPathSuffix) {
+        url24.pathname = url24.pathname.substring(0, url24.pathname.length - 1);
+      }
+      if (url24.search) {
+        throw new RouterError(
+          "ERR_QUERY_STRING",
+          `Route "${route}" for "${target}" contains a query string. This is not allowed.`
+        );
+      }
+      if (url24.toString().includes("*") && !anyHostname) {
+        throw new RouterError(
+          "ERR_INFIX_WILDCARD",
+          `Route "${route}" for "${target}" contains an infix wildcard. This is not allowed.`
+        );
+      }
+      routes.push({
+        target,
+        route,
+        specificity,
+        protocol,
+        allowHostnamePrefix,
+        hostname: anyHostname ? "" : url24.hostname,
+        path: url24.pathname,
+        allowPathSuffix
+      });
+    }
+  }
+  routes.sort((a, b) => {
+    if (a.specificity === b.specificity) {
+      return b.route.length - a.route.length;
+    } else {
+      return b.specificity - a.specificity;
+    }
+  });
+  return routes;
+}
+
+// src/plugins/shared/index.ts
+var DEFAULT_PERSIST_ROOT = ".mf";
+var PersistenceSchema = import_zod4.z.union([import_zod4.z.boolean(), import_zod4.z.string().url(), PathSchema]).optional();
+var ProxyNodeBinding = class {
+  constructor(proxyOverrideHandler) {
+    this.proxyOverrideHandler = proxyOverrideHandler;
+  }
+};
+function namespaceKeys(namespaces) {
+  if (Array.isArray(namespaces)) {
+    return namespaces;
+  } else if (namespaces !== void 0) {
+    return Object.keys(namespaces);
+  } else {
+    return [];
+  }
+}
+function namespaceEntries(namespaces) {
+  if (Array.isArray(namespaces)) {
+    return namespaces.map((bindingName) => [bindingName, bindingName]);
+  } else if (namespaces !== void 0) {
+    return Object.entries(namespaces);
+  } else {
+    return [];
+  }
+}
+function maybeParseURL(url24) {
+  if (typeof url24 !== "string" || import_path8.default.isAbsolute(url24)) return;
+  try {
+    return new URL(url24);
+  } catch {
+  }
+}
+function getPersistPath(pluginName, tmpPath, persist) {
+  const memoryishPath = import_path8.default.join(tmpPath, pluginName);
+  if (persist === void 0 || persist === false) {
+    return memoryishPath;
+  }
+  const url24 = maybeParseURL(persist);
+  if (url24 !== void 0) {
+    if (url24.protocol === "memory:") {
+      return memoryishPath;
+    } else if (url24.protocol === "file:") {
+      return (0, import_url6.fileURLToPath)(url24);
+    }
+    throw new MiniflareCoreError(
+      "ERR_PERSIST_UNSUPPORTED",
+      `Unsupported "${url24.protocol}" persistence protocol for storage: ${url24.href}`
+    );
+  }
+  return persist === true ? import_path8.default.join(DEFAULT_PERSIST_ROOT, pluginName) : persist;
+}
+function durableObjectNamespaceIdFromName(uniqueKey, name) {
+  const key = import_crypto.default.createHash("sha256").update(uniqueKey).digest();
+  const nameHmac = import_crypto.default.createHmac("sha256", key).update(name).digest().subarray(0, 16);
+  const hmac = import_crypto.default.createHmac("sha256", key).update(nameHmac).digest().subarray(0, 16);
+  return Buffer.concat([nameHmac, hmac]).toString("hex");
+}
+async function migrateDatabase(log, uniqueKey, persistPath, namespace) {
+  const sanitisedNamespace = sanitisePath(namespace);
+  const previousDir = import_path8.default.join(persistPath, sanitisedNamespace);
+  const previousPath = import_path8.default.join(previousDir, "db.sqlite");
+  const previousWalPath = import_path8.default.join(previousDir, "db.sqlite-wal");
+  if (!(0, import_fs5.existsSync)(previousPath)) return;
+  const id = durableObjectNamespaceIdFromName(uniqueKey, namespace);
+  const newDir = import_path8.default.join(persistPath, uniqueKey);
+  const newPath = import_path8.default.join(newDir, `${id}.sqlite`);
+  const newWalPath = import_path8.default.join(newDir, `${id}.sqlite-wal`);
+  if ((0, import_fs5.existsSync)(newPath)) {
+    log.debug(
+      `Not migrating ${previousPath} to ${newPath} as it already exists`
+    );
+    return;
+  }
+  log.debug(`Migrating ${previousPath} to ${newPath}...`);
+  await import_promises3.default.mkdir(newDir, { recursive: true });
+  try {
+    await import_promises3.default.copyFile(previousPath, newPath);
+    if ((0, import_fs5.existsSync)(previousWalPath)) {
+      await import_promises3.default.copyFile(previousWalPath, newWalPath);
+    }
+    await import_promises3.default.unlink(previousPath);
+    await import_promises3.default.unlink(previousWalPath);
+  } catch (e) {
+    log.warn(`Error migrating ${previousPath} to ${newPath}: ${e}`);
+  }
+}
+
+// src/plugins/analytics-engine/index.ts
+var AnalyticsEngineSchema = import_zod5.z.record(
+  import_zod5.z.object({
+    dataset: import_zod5.z.string()
+  })
+);
+var AnalyticsEngineSchemaOptionsSchema = import_zod5.z.object({
+  analyticsEngineDatasets: AnalyticsEngineSchema.optional()
+});
+var AnalyticsEngineSchemaSharedOptionsSchema = import_zod5.z.object({
+  analyticsEngineDatasetsPersist: PersistenceSchema
+});
+var ANALYTICS_ENGINE_PLUGIN_NAME = "analytics-engine";
+var ANALYTICS_ENGINE_PLUGIN = {
+  options: AnalyticsEngineSchemaOptionsSchema,
+  sharedOptions: AnalyticsEngineSchemaSharedOptionsSchema,
+  async getBindings(options) {
+    if (!options.analyticsEngineDatasets) {
+      return [];
+    }
+    const bindings = Object.entries(
+      options.analyticsEngineDatasets
+    ).map(([name, config]) => {
+      return {
+        name,
+        service: {
+          name: `${ANALYTICS_ENGINE_PLUGIN_NAME}:${config.dataset}`,
+          entrypoint: "LocalAnalyticsEngineDataset"
+        }
+      };
+    });
+    return bindings;
+  },
+  getNodeBindings(options) {
+    if (!options.analyticsEngineDatasets) {
+      return {};
+    }
+    return Object.fromEntries(
+      Object.keys(options.analyticsEngineDatasets).map((name) => [
+        name,
+        new ProxyNodeBinding()
+      ])
+    );
+  },
+  async getServices({ options }) {
+    if (!options.analyticsEngineDatasets) {
+      return [];
+    }
+    return [
+      ...Object.entries(options.analyticsEngineDatasets).map(
+        ([_, config]) => {
+          return {
+            name: `${ANALYTICS_ENGINE_PLUGIN_NAME}:${config.dataset}`,
+            worker: {
+              compatibilityDate: "2025-01-01",
+              modules: [
+                {
+                  name: "analytics-engine.worker.js",
+                  esModule: analytics_engine_worker_default()
+                }
+              ],
+              bindings: [
+                {
+                  name: "dataset",
+                  json: JSON.stringify(config.dataset)
+                }
+              ]
+            }
+          };
+        }
+      )
+    ];
+  }
+};
+
 // src/plugins/assets/index.ts
 var import_node_crypto = __toESM(require("node:crypto"));
 var import_promises7 = __toESM(require("node:fs/promises"));
@@ -2593,51 +2933,52 @@ var REDIRECTS_FILENAME = "_redirects";
 var HEADERS_FILENAME = "_headers";
 
 // ../workers-shared/utils/types.ts
-var import_zod4 = require("zod");
-var InternalConfigSchema = import_zod4.z.object({
-  account_id: import_zod4.z.number().optional(),
-  script_id: import_zod4.z.number().optional()
+var import_zod6 = require("zod");
+var InternalConfigSchema = import_zod6.z.object({
+  account_id: import_zod6.z.number().optional(),
+  script_id: import_zod6.z.number().optional(),
+  debug: import_zod6.z.boolean().optional()
 });
-var RouterConfigSchema = import_zod4.z.object({
-  invoke_user_worker_ahead_of_assets: import_zod4.z.boolean().optional(),
-  has_user_worker: import_zod4.z.boolean().optional(),
+var RouterConfigSchema = import_zod6.z.object({
+  invoke_user_worker_ahead_of_assets: import_zod6.z.boolean().optional(),
+  has_user_worker: import_zod6.z.boolean().optional(),
   ...InternalConfigSchema.shape
 });
-var MetadataStaticRedirectEntry = import_zod4.z.object({
-  status: import_zod4.z.number(),
-  to: import_zod4.z.string(),
-  lineNumber: import_zod4.z.number()
+var MetadataStaticRedirectEntry = import_zod6.z.object({
+  status: import_zod6.z.number(),
+  to: import_zod6.z.string(),
+  lineNumber: import_zod6.z.number()
 });
-var MetadataRedirectEntry = import_zod4.z.object({
-  status: import_zod4.z.number(),
-  to: import_zod4.z.string()
+var MetadataRedirectEntry = import_zod6.z.object({
+  status: import_zod6.z.number(),
+  to: import_zod6.z.string()
 });
-var MetadataStaticRedirects = import_zod4.z.record(MetadataStaticRedirectEntry);
-var MetadataRedirects = import_zod4.z.record(MetadataRedirectEntry);
-var MetadataHeaderEntry = import_zod4.z.object({
-  set: import_zod4.z.record(import_zod4.z.string()).optional(),
-  unset: import_zod4.z.array(import_zod4.z.string()).optional()
+var MetadataStaticRedirects = import_zod6.z.record(MetadataStaticRedirectEntry);
+var MetadataRedirects = import_zod6.z.record(MetadataRedirectEntry);
+var MetadataHeaderEntry = import_zod6.z.object({
+  set: import_zod6.z.record(import_zod6.z.string()).optional(),
+  unset: import_zod6.z.array(import_zod6.z.string()).optional()
 });
-var MetadataHeaders = import_zod4.z.record(MetadataHeaderEntry);
-var RedirectsSchema = import_zod4.z.object({
-  version: import_zod4.z.literal(1),
+var MetadataHeaders = import_zod6.z.record(MetadataHeaderEntry);
+var RedirectsSchema = import_zod6.z.object({
+  version: import_zod6.z.literal(1),
   staticRules: MetadataStaticRedirects,
   rules: MetadataRedirects
 }).optional();
-var HeadersSchema = import_zod4.z.object({
-  version: import_zod4.z.literal(2),
+var HeadersSchema = import_zod6.z.object({
+  version: import_zod6.z.literal(2),
   rules: MetadataHeaders
 }).optional();
-var AssetConfigSchema = import_zod4.z.object({
-  compatibility_date: import_zod4.z.string().optional(),
-  compatibility_flags: import_zod4.z.array(import_zod4.z.string()).optional(),
-  html_handling: import_zod4.z.enum([
+var AssetConfigSchema = import_zod6.z.object({
+  compatibility_date: import_zod6.z.string().optional(),
+  compatibility_flags: import_zod6.z.array(import_zod6.z.string()).optional(),
+  html_handling: import_zod6.z.enum([
     "auto-trailing-slash",
     "force-trailing-slash",
     "drop-trailing-slash",
     "none"
   ]).optional(),
-  not_found_handling: import_zod4.z.enum(["single-page-application", "404-page", "none"]).optional(),
+  not_found_handling: import_zod6.z.enum(["single-page-application", "404-page", "none"]).optional(),
   redirects: RedirectsSchema,
   headers: HeadersSchema,
   ...InternalConfigSchema.shape
@@ -2816,13 +3157,14 @@ ${invalidHeaderRulesList}`
   }
   const rules = {};
   for (const rule of headers.rules) {
-    rules[rule.path] = {};
+    const configuredRule = {};
     if (Object.keys(rule.headers).length) {
-      rules[rule.path].set = rule.headers;
+      configuredRule.set = rule.headers;
     }
     if (rule.unsetHeaders.length) {
-      rules[rule.path].unset = rule.unsetHeaders;
+      configuredRule.unset = rule.unsetHeaders;
     }
+    rules[rule.path] = configuredRule;
   }
   return {
     headers: {
@@ -2833,12 +3175,12 @@ ${invalidHeaderRulesList}`
 }
 
 // ../workers-shared/utils/configuration/validateURL.ts
-var extractPathname = (path30 = "/", includeSearch, includeHash) => {
-  if (!path30.startsWith("/")) {
-    path30 = `/${path30}`;
+var extractPathname = (path34 = "/", includeSearch, includeHash) => {
+  if (!path34.startsWith("/")) {
+    path34 = `/${path34}`;
   }
-  const url20 = new URL(`//${path30}`, "relative://");
-  return `${url20.pathname}${includeSearch ? url20.search : ""}${includeHash ? url20.hash : ""}`;
+  const url24 = new URL(`//${path34}`, "relative://");
+  return `${url24.pathname}${includeSearch ? url24.search : ""}${includeHash ? url24.hash : ""}`;
 };
 var URL_REGEX = /^https:\/\/+(?<host>[^/]+)\/?(?<path>.*)/;
 var HOST_WITH_PORT_REGEX = /.*:\d+$/;
@@ -2870,8 +3212,8 @@ var validateUrl = (token, onlyRelative = false, disallowPorts = false, includeSe
     if (!token.startsWith("/") && onlyRelative) {
       token = `/${token}`;
     }
-    const path30 = PATH_REGEX.exec(token);
-    if (path30) {
+    const path34 = PATH_REGEX.exec(token);
+    if (path34) {
       try {
         return [extractPathname(token, includeSearch, includeHash), void 0];
       } catch {
@@ -2891,26 +3233,29 @@ function urlHasHost(token) {
 
 // ../workers-shared/utils/configuration/parseHeaders.ts
 var LINE_IS_PROBABLY_A_PATH = new RegExp(/^([^\s]+:\/\/|^\/)/);
-function parseHeaders(input) {
+function parseHeaders(input, {
+  maxRules = MAX_HEADER_RULES,
+  maxLineLength = MAX_LINE_LENGTH
+} = {}) {
   const lines = input.split("\n");
   const rules = [];
   const invalid = [];
   let rule = void 0;
   for (let i = 0; i < lines.length; i++) {
-    const line = lines[i].trim();
+    const line = (lines[i] || "").trim();
     if (line.length === 0 || line.startsWith("#")) {
       continue;
     }
-    if (line.length > MAX_LINE_LENGTH) {
+    if (line.length > maxLineLength) {
       invalid.push({
-        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${MAX_LINE_LENGTH}.`
+        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${maxLineLength}.`
       });
       continue;
     }
     if (LINE_IS_PROBABLY_A_PATH.test(line)) {
-      if (rules.length >= MAX_HEADER_RULES) {
+      if (rules.length >= maxRules) {
         invalid.push({
-          message: `Maximum number of rules supported is ${MAX_HEADER_RULES}. Skipping remaining ${lines.length - i} lines of file.`
+          message: `Maximum number of rules supported is ${maxRules}. Skipping remaining ${lines.length - i} lines of file.`
         });
         break;
       }
@@ -2929,7 +3274,7 @@ function parseHeaders(input) {
           });
         }
       }
-      const [path30, pathError] = validateUrl(line, false, true);
+      const [path34, pathError] = validateUrl(line, false, true);
       if (pathError) {
         invalid.push({
           line,
@@ -2940,7 +3285,7 @@ function parseHeaders(input) {
         continue;
       }
       rule = {
-        path: path30,
+        path: path34,
         line,
         headers: {},
         unsetHeaders: []
@@ -2968,7 +3313,7 @@ function parseHeaders(input) {
       continue;
     }
     const [rawName, ...rawValue] = line.split(HEADER_SEPARATOR);
-    const name = rawName.trim().toLowerCase();
+    const name = (rawName || "").trim().toLowerCase();
     if (name.includes(" ")) {
       invalid.push({
         line,
@@ -3026,7 +3371,11 @@ function isValidRule(rule) {
 }
 
 // ../workers-shared/utils/configuration/parseRedirects.ts
-function parseRedirects(input) {
+function parseRedirects(input, {
+  maxStaticRules = MAX_STATIC_REDIRECT_RULES,
+  maxDynamicRules = MAX_DYNAMIC_REDIRECT_RULES,
+  maxLineLength = MAX_LINE_LENGTH
+} = {}) {
   const lines = input.split("\n");
   const rules = [];
   const seen_paths = /* @__PURE__ */ new Set();
@@ -3035,13 +3384,13 @@ function parseRedirects(input) {
   let dynamicRules = 0;
   let canCreateStaticRule = true;
   for (let i = 0; i < lines.length; i++) {
-    const line = lines[i].trim();
+    const line = (lines[i] || "").trim();
     if (line.length === 0 || line.startsWith("#")) {
       continue;
     }
-    if (line.length > MAX_LINE_LENGTH) {
+    if (line.length > maxLineLength) {
       invalid.push({
-        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${MAX_LINE_LENGTH}.`
+        message: `Ignoring line ${i + 1} as it exceeds the maximum allowed length of ${maxLineLength}.`
       });
       continue;
     }
@@ -3067,18 +3416,18 @@ function parseRedirects(input) {
     const from = fromResult[0];
     if (canCreateStaticRule && !from.match(SPLAT_REGEX) && !from.match(PLACEHOLDER_REGEX)) {
       staticRules += 1;
-      if (staticRules > MAX_STATIC_REDIRECT_RULES) {
+      if (staticRules > maxStaticRules) {
         invalid.push({
-          message: `Maximum number of static rules supported is ${MAX_STATIC_REDIRECT_RULES}. Skipping line.`
+          message: `Maximum number of static rules supported is ${maxStaticRules}. Skipping line.`
         });
         continue;
       }
     } else {
       dynamicRules += 1;
       canCreateStaticRule = false;
-      if (dynamicRules > MAX_DYNAMIC_REDIRECT_RULES) {
+      if (dynamicRules > maxDynamicRules) {
         invalid.push({
-          message: `Maximum number of dynamic rules supported is ${MAX_DYNAMIC_REDIRECT_RULES}. Skipping remaining ${lines.length - i} lines of file.`
+          message: `Maximum number of dynamic rules supported is ${maxDynamicRules}. Skipping remaining ${lines.length - i} lines of file.`
         });
         break;
       }
@@ -3233,77 +3582,77 @@ function prettyBytes(number, options) {
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/assets/assets.worker.ts
-var import_fs3 = __toESM(require("fs"));
-var import_path6 = __toESM(require("path"));
-var import_url3 = __toESM(require("url"));
-var contents3;
+var import_fs6 = __toESM(require("fs"));
+var import_path9 = __toESM(require("path"));
+var import_url7 = __toESM(require("url"));
+var contents5;
 function assets_worker_default() {
-  if (contents3 !== void 0) return contents3;
-  const filePath = import_path6.default.join(__dirname, "workers", "assets/assets.worker.js");
-  contents3 = import_fs3.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url3.default.pathToFileURL(filePath);
-  return contents3;
+  if (contents5 !== void 0) return contents5;
+  const filePath = import_path9.default.join(__dirname, "workers", "assets/assets.worker.js");
+  contents5 = import_fs6.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url7.default.pathToFileURL(filePath);
+  return contents5;
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/assets/assets-kv.worker.ts
-var import_fs4 = __toESM(require("fs"));
-var import_path7 = __toESM(require("path"));
-var import_url4 = __toESM(require("url"));
-var contents4;
+var import_fs7 = __toESM(require("fs"));
+var import_path10 = __toESM(require("path"));
+var import_url8 = __toESM(require("url"));
+var contents6;
 function assets_kv_worker_default() {
-  if (contents4 !== void 0) return contents4;
-  const filePath = import_path7.default.join(__dirname, "workers", "assets/assets-kv.worker.js");
-  contents4 = import_fs4.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url4.default.pathToFileURL(filePath);
-  return contents4;
+  if (contents6 !== void 0) return contents6;
+  const filePath = import_path10.default.join(__dirname, "workers", "assets/assets-kv.worker.js");
+  contents6 = import_fs7.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url8.default.pathToFileURL(filePath);
+  return contents6;
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/assets/router.worker.ts
-var import_fs5 = __toESM(require("fs"));
-var import_path8 = __toESM(require("path"));
-var import_url5 = __toESM(require("url"));
-var contents5;
+var import_fs8 = __toESM(require("fs"));
+var import_path11 = __toESM(require("path"));
+var import_url9 = __toESM(require("url"));
+var contents7;
 function router_worker_default() {
-  if (contents5 !== void 0) return contents5;
-  const filePath = import_path8.default.join(__dirname, "workers", "assets/router.worker.js");
-  contents5 = import_fs5.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url5.default.pathToFileURL(filePath);
-  return contents5;
+  if (contents7 !== void 0) return contents7;
+  const filePath = import_path11.default.join(__dirname, "workers", "assets/router.worker.js");
+  contents7 = import_fs8.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url9.default.pathToFileURL(filePath);
+  return contents7;
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/assets/rpc-proxy.worker.ts
-var import_fs6 = __toESM(require("fs"));
-var import_path9 = __toESM(require("path"));
-var import_url6 = __toESM(require("url"));
-var contents6;
+var import_fs9 = __toESM(require("fs"));
+var import_path12 = __toESM(require("path"));
+var import_url10 = __toESM(require("url"));
+var contents8;
 function rpc_proxy_worker_default() {
-  if (contents6 !== void 0) return contents6;
-  const filePath = import_path9.default.join(__dirname, "workers", "assets/rpc-proxy.worker.js");
-  contents6 = import_fs6.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url6.default.pathToFileURL(filePath);
-  return contents6;
+  if (contents8 !== void 0) return contents8;
+  const filePath = import_path12.default.join(__dirname, "workers", "assets/rpc-proxy.worker.js");
+  contents8 = import_fs9.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url10.default.pathToFileURL(filePath);
+  return contents8;
 }
 
 // src/plugins/core/index.ts
 var import_assert9 = __toESM(require("assert"));
-var import_fs15 = require("fs");
+var import_fs16 = require("fs");
 var import_promises6 = __toESM(require("fs/promises"));
-var import_path18 = __toESM(require("path"));
+var import_path19 = __toESM(require("path"));
 var import_stream2 = require("stream");
 var import_tls = __toESM(require("tls"));
 var import_util3 = require("util");
 var import_undici7 = require("undici");
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/core/entry.worker.ts
-var import_fs7 = __toESM(require("fs"));
-var import_path10 = __toESM(require("path"));
-var import_url7 = __toESM(require("url"));
-var contents7;
+var import_fs10 = __toESM(require("fs"));
+var import_path13 = __toESM(require("path"));
+var import_url11 = __toESM(require("url"));
+var contents9;
 function entry_worker_default() {
-  if (contents7 !== void 0) return contents7;
-  const filePath = import_path10.default.join(__dirname, "workers", "core/entry.worker.js");
-  contents7 = import_fs7.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url7.default.pathToFileURL(filePath);
-  return contents7;
+  if (contents9 !== void 0) return contents9;
+  const filePath = import_path13.default.join(__dirname, "workers", "core/entry.worker.js");
+  contents9 = import_fs10.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url11.default.pathToFileURL(filePath);
+  return contents9;
 }
 
 // src/plugins/core/index.ts
-var import_zod12 = require("zod");
+var import_zod13 = require("zod");
 
 // src/runtime/index.ts
 var import_assert4 = __toESM(require("assert"));
@@ -3312,7 +3661,7 @@ var import_events2 = require("events");
 var import_readline = __toESM(require("readline"));
 var import_stream = require("stream");
 var import_workerd2 = __toESM(require("workerd"));
-var import_zod5 = require("zod");
+var import_zod7 = require("zod");
 
 // ../../node_modules/.pnpm/capnp-es@0.0.7_typescript@5.7.3/node_modules/capnp-es/dist/shared/capnp-es.DAoyiaGr.mjs
 var ListElementSize = /* @__PURE__ */ ((ListElementSize2) => {
@@ -9867,15 +10216,15 @@ function serializeConfig(config) {
 }
 
 // src/runtime/index.ts
-var ControlMessageSchema = import_zod5.z.discriminatedUnion("event", [
-  import_zod5.z.object({
-    event: import_zod5.z.literal("listen"),
-    socket: import_zod5.z.string(),
-    port: import_zod5.z.number()
+var ControlMessageSchema = import_zod7.z.discriminatedUnion("event", [
+  import_zod7.z.object({
+    event: import_zod7.z.literal("listen"),
+    socket: import_zod7.z.string(),
+    port: import_zod7.z.number()
   }),
-  import_zod5.z.object({
-    event: import_zod5.z.literal("listen-inspector"),
-    port: import_zod5.z.number()
+  import_zod7.z.object({
+    event: import_zod7.z.literal("listen-inspector"),
+    port: import_zod7.z.number()
   })
 ]);
 var kInspectorSocket = Symbol("kInspectorSocket");
@@ -9977,300 +10326,65 @@ var ASSETS_KV_SERVICE_NAME = `${ASSETS_PLUGIN_NAME}:kv`;
 var import_promises4 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/cache/cache.worker.ts
-var import_fs8 = __toESM(require("fs"));
-var import_path11 = __toESM(require("path"));
-var import_url8 = __toESM(require("url"));
-var contents8;
-function cache_worker_default() {
-  if (contents8 !== void 0) return contents8;
-  const filePath = import_path11.default.join(__dirname, "workers", "cache/cache.worker.js");
-  contents8 = import_fs8.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url8.default.pathToFileURL(filePath);
-  return contents8;
-}
-
-// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/cache/cache-entry.worker.ts
-var import_fs9 = __toESM(require("fs"));
-var import_path12 = __toESM(require("path"));
-var import_url9 = __toESM(require("url"));
-var contents9;
-function cache_entry_worker_default() {
-  if (contents9 !== void 0) return contents9;
-  const filePath = import_path12.default.join(__dirname, "workers", "cache/cache-entry.worker.js");
-  contents9 = import_fs9.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url9.default.pathToFileURL(filePath);
-  return contents9;
-}
-
-// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/cache/cache-entry-noop.worker.ts
-var import_fs10 = __toESM(require("fs"));
-var import_path13 = __toESM(require("path"));
-var import_url10 = __toESM(require("url"));
+var import_fs11 = __toESM(require("fs"));
+var import_path14 = __toESM(require("path"));
+var import_url12 = __toESM(require("url"));
 var contents10;
-function cache_entry_noop_worker_default() {
+function cache_worker_default() {
   if (contents10 !== void 0) return contents10;
-  const filePath = import_path13.default.join(__dirname, "workers", "cache/cache-entry-noop.worker.js");
-  contents10 = import_fs10.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url10.default.pathToFileURL(filePath);
+  const filePath = import_path14.default.join(__dirname, "workers", "cache/cache.worker.js");
+  contents10 = import_fs11.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url12.default.pathToFileURL(filePath);
   return contents10;
 }
 
-// src/plugins/cache/index.ts
-var import_zod7 = require("zod");
-
-// src/plugins/shared/index.ts
-var import_crypto = __toESM(require("crypto"));
-var import_fs12 = require("fs");
-var import_promises3 = __toESM(require("fs/promises"));
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/cache/cache-entry.worker.ts
+var import_fs12 = __toESM(require("fs"));
 var import_path15 = __toESM(require("path"));
-var import_url13 = require("url");
-var import_zod6 = require("zod");
-
-// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/shared/object-entry.worker.ts
-var import_fs11 = __toESM(require("fs"));
-var import_path14 = __toESM(require("path"));
-var import_url11 = __toESM(require("url"));
+var import_url13 = __toESM(require("url"));
 var contents11;
-function object_entry_worker_default() {
+function cache_entry_worker_default() {
   if (contents11 !== void 0) return contents11;
-  const filePath = import_path14.default.join(__dirname, "workers", "shared/object-entry.worker.js");
-  contents11 = import_fs11.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url11.default.pathToFileURL(filePath);
+  const filePath = import_path15.default.join(__dirname, "workers", "cache/cache-entry.worker.js");
+  contents11 = import_fs12.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url13.default.pathToFileURL(filePath);
   return contents11;
 }
 
-// src/plugins/shared/constants.ts
-var SOCKET_ENTRY = "entry";
-var SOCKET_ENTRY_LOCAL = "entry:local";
-var SOCKET_DIRECT_PREFIX = "direct";
-function getDirectSocketName(workerIndex, entrypoint) {
-  return `${SOCKET_DIRECT_PREFIX}:${workerIndex}:${entrypoint}`;
-}
-var SERVICE_LOOPBACK = "loopback";
-var HOST_CAPNP_CONNECT = "miniflare-unsafe-internal-capnp-connect";
-var WORKER_BINDING_SERVICE_LOOPBACK = {
-  name: CoreBindings.SERVICE_LOOPBACK,
-  service: { name: SERVICE_LOOPBACK }
-};
-var WORKER_BINDING_ENABLE_CONTROL_ENDPOINTS = {
-  name: SharedBindings.MAYBE_JSON_ENABLE_CONTROL_ENDPOINTS,
-  json: "true"
-};
-var WORKER_BINDING_ENABLE_STICKY_BLOBS = {
-  name: SharedBindings.MAYBE_JSON_ENABLE_STICKY_BLOBS,
-  json: "true"
-};
-var enableControlEndpoints = false;
-function getMiniflareObjectBindings(unsafeStickyBlobs) {
-  const result = [];
-  if (enableControlEndpoints) {
-    result.push(WORKER_BINDING_ENABLE_CONTROL_ENDPOINTS);
-  }
-  if (unsafeStickyBlobs) {
-    result.push(WORKER_BINDING_ENABLE_STICKY_BLOBS);
-  }
-  return result;
-}
-function _enableControlEndpoints() {
-  enableControlEndpoints = true;
-}
-function objectEntryWorker(durableObjectNamespace, namespace) {
-  return {
-    compatibilityDate: "2023-07-24",
-    modules: [
-      { name: "object-entry.worker.js", esModule: object_entry_worker_default() }
-    ],
-    bindings: [
-      { name: SharedBindings.TEXT_NAMESPACE, text: namespace },
-      {
-        name: SharedBindings.DURABLE_OBJECT_NAMESPACE_OBJECT,
-        durableObjectNamespace
-      }
-    ]
-  };
-}
-var kUnsafeEphemeralUniqueKey = Symbol.for(
-  "miniflare.kUnsafeEphemeralUniqueKey"
-);
-
-// src/plugins/shared/routing.ts
-var import_url12 = require("url");
-var RouterError = class extends MiniflareError {
-};
-function routeSpecificity(url20) {
-  const hostParts = url20.host.split(".");
-  let hostScore = hostParts.length;
-  if (hostParts[0] === "*") hostScore -= 2;
-  const pathParts = url20.pathname.split("/");
-  let pathScore = pathParts.length;
-  if (pathParts[pathParts.length - 1] === "*") pathScore -= 2;
-  return hostScore * 26 + pathScore;
-}
-function parseRoutes(allRoutes) {
-  const routes = [];
-  for (const [target, targetRoutes] of allRoutes) {
-    for (const route of targetRoutes) {
-      const hasProtocol = /^[a-z0-9+\-.]+:\/\//i.test(route);
-      let urlInput = route;
-      if (!hasProtocol) urlInput = `https://${urlInput}`;
-      const url20 = new import_url12.URL(urlInput);
-      const specificity = routeSpecificity(url20);
-      const protocol = hasProtocol ? url20.protocol : void 0;
-      const internationalisedAllowHostnamePrefix = url20.hostname.startsWith("xn--*");
-      const allowHostnamePrefix = url20.hostname.startsWith("*") || internationalisedAllowHostnamePrefix;
-      const anyHostname = url20.hostname === "*";
-      if (allowHostnamePrefix && !anyHostname) {
-        let hostname = url20.hostname;
-        if (internationalisedAllowHostnamePrefix) {
-          hostname = (0, import_url12.domainToUnicode)(hostname);
-        }
-        url20.hostname = hostname.substring(1);
-      }
-      const allowPathSuffix = url20.pathname.endsWith("*");
-      if (allowPathSuffix) {
-        url20.pathname = url20.pathname.substring(0, url20.pathname.length - 1);
-      }
-      if (url20.search) {
-        throw new RouterError(
-          "ERR_QUERY_STRING",
-          `Route "${route}" for "${target}" contains a query string. This is not allowed.`
-        );
-      }
-      if (url20.toString().includes("*") && !anyHostname) {
-        throw new RouterError(
-          "ERR_INFIX_WILDCARD",
-          `Route "${route}" for "${target}" contains an infix wildcard. This is not allowed.`
-        );
-      }
-      routes.push({
-        target,
-        route,
-        specificity,
-        protocol,
-        allowHostnamePrefix,
-        hostname: anyHostname ? "" : url20.hostname,
-        path: url20.pathname,
-        allowPathSuffix
-      });
-    }
-  }
-  routes.sort((a, b) => {
-    if (a.specificity === b.specificity) {
-      return b.route.length - a.route.length;
-    } else {
-      return b.specificity - a.specificity;
-    }
-  });
-  return routes;
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/cache/cache-entry-noop.worker.ts
+var import_fs13 = __toESM(require("fs"));
+var import_path16 = __toESM(require("path"));
+var import_url14 = __toESM(require("url"));
+var contents12;
+function cache_entry_noop_worker_default() {
+  if (contents12 !== void 0) return contents12;
+  const filePath = import_path16.default.join(__dirname, "workers", "cache/cache-entry-noop.worker.js");
+  contents12 = import_fs13.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url14.default.pathToFileURL(filePath);
+  return contents12;
 }
 
-// src/plugins/shared/index.ts
-var DEFAULT_PERSIST_ROOT = ".mf";
-var PersistenceSchema = import_zod6.z.union([import_zod6.z.boolean(), import_zod6.z.string().url(), PathSchema]).optional();
-var ProxyNodeBinding = class {
-  constructor(proxyOverrideHandler) {
-    this.proxyOverrideHandler = proxyOverrideHandler;
-  }
+// src/plugins/cache/index.ts
+var import_zod8 = require("zod");
+var CacheOptionsSchema = import_zod8.z.object({
+  cache: import_zod8.z.boolean().optional(),
+  cacheWarnUsage: import_zod8.z.boolean().optional()
+});
+var CacheSharedOptionsSchema = import_zod8.z.object({
+  cachePersist: PersistenceSchema
+});
+var CACHE_PLUGIN_NAME = "cache";
+var CACHE_STORAGE_SERVICE_NAME = `${CACHE_PLUGIN_NAME}:storage`;
+var CACHE_SERVICE_PREFIX = `${CACHE_PLUGIN_NAME}:cache`;
+var CACHE_OBJECT_CLASS_NAME = "CacheObject";
+var CACHE_OBJECT = {
+  serviceName: CACHE_SERVICE_PREFIX,
+  className: CACHE_OBJECT_CLASS_NAME
 };
-function namespaceKeys(namespaces) {
-  if (Array.isArray(namespaces)) {
-    return namespaces;
-  } else if (namespaces !== void 0) {
-    return Object.keys(namespaces);
-  } else {
-    return [];
-  }
+function getCacheServiceName(workerIndex) {
+  return `${CACHE_PLUGIN_NAME}:${workerIndex}`;
 }
-function namespaceEntries(namespaces) {
-  if (Array.isArray(namespaces)) {
-    return namespaces.map((bindingName) => [bindingName, bindingName]);
-  } else if (namespaces !== void 0) {
-    return Object.entries(namespaces);
-  } else {
-    return [];
-  }
-}
-function maybeParseURL(url20) {
-  if (typeof url20 !== "string" || import_path15.default.isAbsolute(url20)) return;
-  try {
-    return new URL(url20);
-  } catch {
-  }
-}
-function getPersistPath(pluginName, tmpPath, persist) {
-  const memoryishPath = import_path15.default.join(tmpPath, pluginName);
-  if (persist === void 0 || persist === false) {
-    return memoryishPath;
-  }
-  const url20 = maybeParseURL(persist);
-  if (url20 !== void 0) {
-    if (url20.protocol === "memory:") {
-      return memoryishPath;
-    } else if (url20.protocol === "file:") {
-      return (0, import_url13.fileURLToPath)(url20);
-    }
-    throw new MiniflareCoreError(
-      "ERR_PERSIST_UNSUPPORTED",
-      `Unsupported "${url20.protocol}" persistence protocol for storage: ${url20.href}`
-    );
-  }
-  return persist === true ? import_path15.default.join(DEFAULT_PERSIST_ROOT, pluginName) : persist;
-}
-function durableObjectNamespaceIdFromName(uniqueKey, name) {
-  const key = import_crypto.default.createHash("sha256").update(uniqueKey).digest();
-  const nameHmac = import_crypto.default.createHmac("sha256", key).update(name).digest().subarray(0, 16);
-  const hmac = import_crypto.default.createHmac("sha256", key).update(nameHmac).digest().subarray(0, 16);
-  return Buffer.concat([nameHmac, hmac]).toString("hex");
-}
-async function migrateDatabase(log, uniqueKey, persistPath, namespace) {
-  const sanitisedNamespace = sanitisePath(namespace);
-  const previousDir = import_path15.default.join(persistPath, sanitisedNamespace);
-  const previousPath = import_path15.default.join(previousDir, "db.sqlite");
-  const previousWalPath = import_path15.default.join(previousDir, "db.sqlite-wal");
-  if (!(0, import_fs12.existsSync)(previousPath)) return;
-  const id = durableObjectNamespaceIdFromName(uniqueKey, namespace);
-  const newDir = import_path15.default.join(persistPath, uniqueKey);
-  const newPath = import_path15.default.join(newDir, `${id}.sqlite`);
-  const newWalPath = import_path15.default.join(newDir, `${id}.sqlite-wal`);
-  if ((0, import_fs12.existsSync)(newPath)) {
-    log.debug(
-      `Not migrating ${previousPath} to ${newPath} as it already exists`
-    );
-    return;
-  }
-  log.debug(`Migrating ${previousPath} to ${newPath}...`);
-  await import_promises3.default.mkdir(newDir, { recursive: true });
-  try {
-    await import_promises3.default.copyFile(previousPath, newPath);
-    if ((0, import_fs12.existsSync)(previousWalPath)) {
-      await import_promises3.default.copyFile(previousWalPath, newWalPath);
-    }
-    await import_promises3.default.unlink(previousPath);
-    await import_promises3.default.unlink(previousWalPath);
-  } catch (e) {
-    log.warn(`Error migrating ${previousPath} to ${newPath}: ${e}`);
-  }
-}
-
-// src/plugins/cache/index.ts
-var CacheOptionsSchema = import_zod7.z.object({
-  cache: import_zod7.z.boolean().optional(),
-  cacheWarnUsage: import_zod7.z.boolean().optional()
-});
-var CacheSharedOptionsSchema = import_zod7.z.object({
-  cachePersist: PersistenceSchema
-});
-var CACHE_PLUGIN_NAME = "cache";
-var CACHE_STORAGE_SERVICE_NAME = `${CACHE_PLUGIN_NAME}:storage`;
-var CACHE_SERVICE_PREFIX = `${CACHE_PLUGIN_NAME}:cache`;
-var CACHE_OBJECT_CLASS_NAME = "CacheObject";
-var CACHE_OBJECT = {
-  serviceName: CACHE_SERVICE_PREFIX,
-  className: CACHE_OBJECT_CLASS_NAME
-};
-function getCacheServiceName(workerIndex) {
-  return `${CACHE_PLUGIN_NAME}:${workerIndex}`;
-}
-var CACHE_PLUGIN = {
-  options: CacheOptionsSchema,
-  sharedOptions: CacheSharedOptionsSchema,
-  getBindings() {
+var CACHE_PLUGIN = {
+  options: CacheOptionsSchema,
+  sharedOptions: CacheSharedOptionsSchema,
+  getBindings() {
     return [];
   },
   getNodeBindings() {
@@ -10372,27 +10486,27 @@ var CACHE_PLUGIN = {
 
 // src/plugins/do/index.ts
 var import_promises5 = __toESM(require("fs/promises"));
-var import_zod8 = require("zod");
-var DurableObjectsOptionsSchema = import_zod8.z.object({
-  durableObjects: import_zod8.z.record(
-    import_zod8.z.union([
-      import_zod8.z.string(),
-      import_zod8.z.object({
-        className: import_zod8.z.string(),
-        scriptName: import_zod8.z.string().optional(),
-        useSQLite: import_zod8.z.boolean().optional(),
+var import_zod9 = require("zod");
+var DurableObjectsOptionsSchema = import_zod9.z.object({
+  durableObjects: import_zod9.z.record(
+    import_zod9.z.union([
+      import_zod9.z.string(),
+      import_zod9.z.object({
+        className: import_zod9.z.string(),
+        scriptName: import_zod9.z.string().optional(),
+        useSQLite: import_zod9.z.boolean().optional(),
         // Allow `uniqueKey` to be customised. We use in Wrangler when setting
         // up stub Durable Objects that proxy requests to Durable Objects in
         // another `workerd` process, to ensure the IDs created by the stub
         // object can be used by the real object too.
-        unsafeUniqueKey: import_zod8.z.union([import_zod8.z.string(), import_zod8.z.literal(kUnsafeEphemeralUniqueKey)]).optional(),
+        unsafeUniqueKey: import_zod9.z.union([import_zod9.z.string(), import_zod9.z.literal(kUnsafeEphemeralUniqueKey)]).optional(),
         // Prevents the Durable Object being evicted.
-        unsafePreventEviction: import_zod8.z.boolean().optional()
+        unsafePreventEviction: import_zod9.z.boolean().optional()
       })
     ])
   ).optional()
 });
-var DurableObjectsSharedOptionsSchema = import_zod8.z.object({
+var DurableObjectsSharedOptionsSchema = import_zod9.z.object({
   durableObjectsPersist: PersistenceSchema
 });
 function normaliseDurableObject(designator) {
@@ -10491,14 +10605,14 @@ function getCustomServiceName(workerIndex, kind, bindingName) {
 
 // src/plugins/core/modules.ts
 var import_assert5 = __toESM(require("assert"));
-var import_fs13 = require("fs");
+var import_fs14 = require("fs");
 var import_module = require("module");
-var import_path16 = __toESM(require("path"));
-var import_url14 = require("url");
+var import_path17 = __toESM(require("path"));
+var import_url15 = require("url");
 var import_util = require("util");
 var import_acorn = require("acorn");
 var import_acorn_walk = require("acorn-walk");
-var import_zod9 = require("zod");
+var import_zod10 = require("zod");
 
 // src/plugins/core/node-compat.ts
 function getNodeCompat(compatibilityDate = "2000-01-01", compatibilityFlags) {
@@ -10541,7 +10655,7 @@ function parseNodeCompatibilityFlags(compatibilityFlags) {
 
 // src/plugins/core/modules.ts
 var SUGGEST_BUNDLE = "If you're trying to import an npm package, you'll need to bundle your Worker first.";
-var SUGGEST_NODE = "If you're trying to import a Node.js built-in module, or an npm package that uses Node.js built-ins, you'll either need to:\n- Bundle your Worker, configuring your bundler to polyfill Node.js built-ins\n- Configure your bundler to load Workers-compatible builds by changing the main fields/conditions\n- Enable the `nodejs_compat` compatibility flag and use the `NodeJsCompatModule` module type\n- Find an alternative package that doesn't require Node.js built-ins";
+var SUGGEST_NODE = "If you're trying to import a Node.js built-in module, or an npm package that uses Node.js built-ins, you'll either need to:\n- Bundle your Worker, configuring your bundler to polyfill Node.js built-ins\n- Configure your bundler to load Workers-compatible builds by changing the main fields/conditions\n- Enable the `nodejs_compat` compatibility flag\n- Find an alternative package that doesn't require Node.js built-ins";
 var builtinModulesWithPrefix = import_module.builtinModules.concat(
   import_module.builtinModules.map((module2) => `node:${module2}`)
 );
@@ -10553,55 +10667,54 @@ function maybeGetStringScriptPathIndex(scriptPath) {
   const match = stringScriptRegexp.exec(scriptPath);
   return match === null ? void 0 : parseInt(match[1]);
 }
-var ModuleRuleTypeSchema = import_zod9.z.enum([
+var ModuleRuleTypeSchema = import_zod10.z.enum([
   "ESModule",
   "CommonJS",
-  "NodeJsCompatModule",
   "Text",
   "Data",
   "CompiledWasm",
   "PythonModule",
   "PythonRequirement"
 ]);
-var ModuleRuleSchema = import_zod9.z.object({
+var ModuleRuleSchema = import_zod10.z.object({
   type: ModuleRuleTypeSchema,
-  include: import_zod9.z.string().array(),
-  fallthrough: import_zod9.z.boolean().optional()
+  include: import_zod10.z.string().array(),
+  fallthrough: import_zod10.z.boolean().optional()
 });
-var ModuleDefinitionSchema = import_zod9.z.object({
+var ModuleDefinitionSchema = import_zod10.z.object({
   type: ModuleRuleTypeSchema,
   path: PathSchema,
-  contents: import_zod9.z.string().or(import_zod9.z.instanceof(Uint8Array)).optional()
+  contents: import_zod10.z.string().or(import_zod10.z.instanceof(Uint8Array)).optional()
 });
-var SourceOptionsSchema = import_zod9.z.union([
-  import_zod9.z.object({
+var SourceOptionsSchema = import_zod10.z.union([
+  import_zod10.z.object({
     // Manually defined modules
     // (used by Wrangler which has its own module collection code)
-    modules: import_zod9.z.array(ModuleDefinitionSchema),
+    modules: import_zod10.z.array(ModuleDefinitionSchema),
     // `modules` "name"s will be their paths relative to this value.
     // This ensures file paths in stack traces are correct.
     modulesRoot: PathSchema.optional()
   }),
-  import_zod9.z.object({
-    script: import_zod9.z.string(),
+  import_zod10.z.object({
+    script: import_zod10.z.string(),
     // Optional script path for resolving modules, and stack traces file names
     scriptPath: PathSchema.optional(),
     // Automatically collect modules by parsing `script` if `true`, or treat as
     // service-worker if `false`
-    modules: import_zod9.z.boolean().optional(),
+    modules: import_zod10.z.boolean().optional(),
     // How to interpret automatically collected modules
-    modulesRules: import_zod9.z.array(ModuleRuleSchema).optional(),
+    modulesRules: import_zod10.z.array(ModuleRuleSchema).optional(),
     // `modules` "name"s will be their paths relative to this value.
     // This ensures file paths in stack traces are correct.
     modulesRoot: PathSchema.optional()
   }),
-  import_zod9.z.object({
+  import_zod10.z.object({
     scriptPath: PathSchema,
     // Automatically collect modules by parsing `scriptPath` if `true`, or treat
     // as service-worker if `false`
-    modules: import_zod9.z.boolean().optional(),
+    modules: import_zod10.z.boolean().optional(),
     // How to interpret automatically collected modules
-    modulesRules: import_zod9.z.array(ModuleRuleSchema).optional(),
+    modulesRules: import_zod10.z.array(ModuleRuleSchema).optional(),
     // `modules` "name"s will be their paths relative to this value.
     // This ensures file paths in stack traces are correct.
     modulesRoot: PathSchema.optional()
@@ -10625,14 +10738,14 @@ function compileModuleRules(rules) {
   return compiledRules;
 }
 function moduleName(modulesRoot, modulePath) {
-  const name = import_path16.default.relative(modulesRoot, modulePath);
-  return import_path16.default.sep === "\\" ? name.replaceAll("\\", "/") : name;
+  const name = import_path17.default.relative(modulesRoot, modulePath);
+  return import_path17.default.sep === "\\" ? name.replaceAll("\\", "/") : name;
 }
 function withSourceURL(script, scriptPath) {
   if (script.lastIndexOf("//# sourceURL=") !== -1) return script;
   let scriptURL = scriptPath;
   if (maybeGetStringScriptPathIndex(scriptPath) === void 0) {
-    scriptURL = (0, import_url14.pathToFileURL)(scriptPath);
+    scriptURL = (0, import_url15.pathToFileURL)(scriptPath);
   }
   const sourceURL = `
 //# sourceURL=${scriptURL}
@@ -10640,7 +10753,7 @@ function withSourceURL(script, scriptPath) {
   return script + sourceURL;
 }
 function getResolveErrorPrefix(referencingPath) {
-  const relative2 = import_path16.default.relative("", referencingPath);
+  const relative2 = import_path17.default.relative("", referencingPath);
   return `Unable to resolve "${relative2}" dependency`;
 }
 var ModuleLocator = class {
@@ -10736,12 +10849,11 @@ ${dim(modulesConfig)}`;
       throw new MiniflareCoreError("ERR_MODULE_DYNAMIC_SPEC", message);
     }
     const spec = specExpression.value;
-    const isNodeJsCompatModule = referencingType === "NodeJsCompatModule";
     if (
       // `cloudflare:` and `workerd:` imports don't need to be included explicitly
       spec.startsWith("cloudflare:") || spec.startsWith("workerd:") || // Node.js compat v1 requires imports to be prefixed with `node:`
       this.#nodejsCompatMode === "v1" && spec.startsWith("node:") || // Node.js compat modules and v2 can also handle non-prefixed imports
-      (this.#nodejsCompatMode === "v2" || isNodeJsCompatModule) && builtinModulesWithPrefix.includes(spec) || // Async Local Storage mode (node_als) only deals with `node:async_hooks` imports
+      this.#nodejsCompatMode === "v2" && builtinModulesWithPrefix.includes(spec) || // Async Local Storage mode (node_als) only deals with `node:async_hooks` imports
       this.#nodejsCompatMode === "als" && spec === "node:async_hooks" || // Any "additional" external modules can be ignored
       this.additionalModuleNames.includes(spec)
     ) {
@@ -10754,7 +10866,7 @@ ${dim(modulesConfig)}`;
         `${prefix}: imports are unsupported in string \`script\` without defined \`scriptPath\``
       );
     }
-    const identifier = import_path16.default.resolve(import_path16.default.dirname(referencingPath), spec);
+    const identifier = import_path17.default.resolve(import_path17.default.dirname(referencingPath), spec);
     const name = moduleName(this.modulesRoot, identifier);
     if (this.#visitedPaths.has(identifier)) return;
     this.#visitedPaths.add(identifier);
@@ -10771,11 +10883,10 @@ ${dim(modulesConfig)}`;
 ${suggestion}`
       );
     }
-    const data = (0, import_fs13.readFileSync)(identifier);
+    const data = (0, import_fs14.readFileSync)(identifier);
     switch (rule.type) {
       case "ESModule":
       case "CommonJS":
-      case "NodeJsCompatModule":
         const code = data.toString("utf8");
         this.#visitJavaScriptModule(code, identifier, rule.type);
         break;
@@ -10806,61 +10917,56 @@ function createJavaScriptModule(code, name, modulePath, type) {
     return { name, esModule: code };
   } else if (type === "CommonJS") {
     return { name, commonJsModule: code };
-  } else if (type === "NodeJsCompatModule") {
-    return { name, nodeJsCompatModule: code };
   }
   const exhaustive = type;
   import_assert5.default.fail(`Unreachable: ${exhaustive} JavaScript modules are unsupported`);
 }
 var encoder = new import_util.TextEncoder();
 var decoder = new import_util.TextDecoder();
-function contentsToString(contents20) {
-  return typeof contents20 === "string" ? contents20 : decoder.decode(contents20);
+function contentsToString(contents24) {
+  return typeof contents24 === "string" ? contents24 : decoder.decode(contents24);
 }
-function contentsToArray(contents20) {
-  return typeof contents20 === "string" ? encoder.encode(contents20) : contents20;
+function contentsToArray(contents24) {
+  return typeof contents24 === "string" ? encoder.encode(contents24) : contents24;
 }
 function convertModuleDefinition(modulesRoot, def) {
   const name = moduleName(modulesRoot, def.path);
-  const contents20 = def.contents ?? (0, import_fs13.readFileSync)(def.path);
+  const contents24 = def.contents ?? (0, import_fs14.readFileSync)(def.path);
   switch (def.type) {
     case "ESModule":
     case "CommonJS":
-    case "NodeJsCompatModule":
       return createJavaScriptModule(
-        contentsToString(contents20),
+        contentsToString(contents24),
         name,
-        import_path16.default.resolve(modulesRoot, def.path),
+        import_path17.default.resolve(modulesRoot, def.path),
         def.type
       );
     case "Text":
-      return { name, text: contentsToString(contents20) };
+      return { name, text: contentsToString(contents24) };
     case "Data":
-      return { name, data: contentsToArray(contents20) };
+      return { name, data: contentsToArray(contents24) };
     case "CompiledWasm":
-      return { name, wasm: contentsToArray(contents20) };
+      return { name, wasm: contentsToArray(contents24) };
     case "PythonModule":
-      return { name, pythonModule: contentsToString(contents20) };
+      return { name, pythonModule: contentsToString(contents24) };
     case "PythonRequirement":
-      return { name, pythonRequirement: contentsToString(contents20) };
+      return { name, pythonRequirement: contentsToString(contents24) };
     default:
       const exhaustive = def.type;
       import_assert5.default.fail(`Unreachable: ${exhaustive} modules are unsupported`);
   }
 }
 function convertWorkerModule(mod) {
-  const path30 = mod.name;
-  (0, import_assert5.default)(path30 !== void 0);
+  const path34 = mod.name;
+  (0, import_assert5.default)(path34 !== void 0);
   const m = mod;
-  if ("esModule" in m) return { path: path30, type: "ESModule" };
-  else if ("commonJsModule" in m) return { path: path30, type: "CommonJS" };
-  else if ("nodeJsCompatModule" in m)
-    return { path: path30, type: "NodeJsCompatModule" };
-  else if ("text" in m) return { path: path30, type: "Text" };
-  else if ("data" in m) return { path: path30, type: "Data" };
-  else if ("wasm" in m) return { path: path30, type: "CompiledWasm" };
-  else if ("pythonModule" in m) return { path: path30, type: "PythonModule" };
-  else if ("pythonRequirement" in m) return { path: path30, type: "PythonRequirement" };
+  if ("esModule" in m) return { path: path34, type: "ESModule" };
+  else if ("commonJsModule" in m) return { path: path34, type: "CommonJS" };
+  else if ("text" in m) return { path: path34, type: "Text" };
+  else if ("data" in m) return { path: path34, type: "Data" };
+  else if ("wasm" in m) return { path: path34, type: "CompiledWasm" };
+  else if ("pythonModule" in m) return { path: path34, type: "PythonModule" };
+  else if ("pythonRequirement" in m) return { path: path34, type: "PythonRequirement" };
   (0, import_assert5.default)(
     !("json" in m || "fallbackService" in m),
     "Unreachable: json or fallbackService modules aren't generated"
@@ -10886,10 +10992,10 @@ var import_web2 = require("stream/web");
 var import_worker_threads = require("worker_threads");
 
 // src/plugins/core/errors/index.ts
-var import_fs14 = __toESM(require("fs"));
-var import_path17 = __toESM(require("path"));
-var import_url15 = require("url");
-var import_zod10 = require("zod");
+var import_fs15 = __toESM(require("fs"));
+var import_path18 = __toESM(require("path"));
+var import_url16 = require("url");
+var import_zod11 = require("zod");
 
 // src/plugins/core/errors/sourcemap.ts
 var import_assert6 = __toESM(require("assert"));
@@ -10937,7 +11043,7 @@ function parseCallSite(line) {
     typeName,
     functionName,
     methodName,
-    fileName: lineMatch[2] || null,
+    fileName: lineMatch[2],
     lineNumber: parseInt(lineMatch[3]) || null,
     columnNumber: parseInt(lineMatch[4]) || null,
     native: isNative
@@ -10947,6 +11053,21 @@ var CallSite = class {
   constructor(opts) {
     this.opts = opts;
   }
+  getScriptHash() {
+    throw new Error("Method not implemented.");
+  }
+  getEnclosingColumnNumber() {
+    throw new Error("Method not implemented.");
+  }
+  getEnclosingLineNumber() {
+    throw new Error("Method not implemented.");
+  }
+  getPosition() {
+    throw new Error("Method not implemented.");
+  }
+  toString() {
+    throw new Error("Method not implemented.");
+  }
   getThis() {
     return null;
   }
@@ -11061,8 +11182,8 @@ function getSourceMapper() {
 // src/plugins/core/errors/index.ts
 function maybeGetDiskFile(filePath) {
   try {
-    const contents20 = import_fs14.default.readFileSync(filePath, "utf8");
-    return { path: filePath, contents: contents20 };
+    const contents24 = import_fs15.default.readFileSync(filePath, "utf8");
+    return { path: filePath, contents: contents24 };
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
   }
@@ -11070,19 +11191,19 @@ function maybeGetDiskFile(filePath) {
 function maybeGetFile2(workerSrcOpts, fileSpecifier) {
   const maybeUrl = maybeParseURL(fileSpecifier);
   if (maybeUrl !== void 0 && maybeUrl.protocol === "file:") {
-    const filePath = (0, import_url15.fileURLToPath)(maybeUrl);
+    const filePath = (0, import_url16.fileURLToPath)(maybeUrl);
     for (const srcOpts of workerSrcOpts) {
       if (Array.isArray(srcOpts.modules)) {
         const modulesRoot = srcOpts.modulesRoot ?? "";
         for (const module2 of srcOpts.modules) {
-          if (module2.contents !== void 0 && import_path17.default.resolve(modulesRoot, module2.path) === filePath) {
-            const contents20 = contentsToString(module2.contents);
-            return { path: filePath, contents: contents20 };
+          if (module2.contents !== void 0 && import_path18.default.resolve(modulesRoot, module2.path) === filePath) {
+            const contents24 = contentsToString(module2.contents);
+            return { path: filePath, contents: contents24 };
           }
         }
       } else if ("script" in srcOpts && "scriptPath" in srcOpts && srcOpts.script !== void 0 && srcOpts.scriptPath !== void 0) {
         const modulesRoot = srcOpts.modules && srcOpts.modulesRoot || "";
-        if (import_path17.default.resolve(modulesRoot, srcOpts.scriptPath) === filePath) {
+        if (import_path18.default.resolve(modulesRoot, srcOpts.scriptPath) === filePath) {
           return { path: filePath, contents: srcOpts.script };
         }
       }
@@ -11105,19 +11226,19 @@ function getSourceMappedStack(workerSrcOpts, error) {
     const matches = [...sourceFile.contents.matchAll(sourceMapRegexp)];
     if (matches.length === 0) return null;
     const sourceMapMatch = matches[matches.length - 1];
-    const root = import_path17.default.dirname(sourceFile.path);
-    const sourceMapPath = import_path17.default.resolve(root, sourceMapMatch[1]);
+    const root = import_path18.default.dirname(sourceFile.path);
+    const sourceMapPath = import_path18.default.resolve(root, sourceMapMatch[1]);
     const sourceMapFile = maybeGetDiskFile(sourceMapPath);
     if (sourceMapFile === void 0) return null;
     return { map: sourceMapFile.contents, url: sourceMapFile.path };
   }
   return getSourceMapper()(retrieveSourceMap, error);
 }
-var JsonErrorSchema = import_zod10.z.lazy(
-  () => import_zod10.z.object({
-    message: import_zod10.z.string().optional(),
-    name: import_zod10.z.string().optional(),
-    stack: import_zod10.z.string().optional(),
+var JsonErrorSchema = import_zod11.z.lazy(
+  () => import_zod11.z.object({
+    message: import_zod11.z.string().optional(),
+    name: import_zod11.z.string().optional(),
+    stack: import_zod11.z.string().optional(),
     cause: JsonErrorSchema.optional()
   })
 );
@@ -11256,7 +11377,7 @@ var SynchronousFetcher = class {
       transferList: [this.#channel.port2]
     });
   }
-  fetch(url20, init2) {
+  fetch(url24, init2) {
     this.#ensureWorker();
     Atomics.store(
       this.#notifyHandle,
@@ -11269,7 +11390,7 @@ var SynchronousFetcher = class {
     this.#channel.port1.postMessage({
       id,
       method: init2.method,
-      url: url20.toString(),
+      url: url24.toString(),
       headers: init2.headers,
       body: init2.body
     });
@@ -11389,8 +11510,8 @@ var ProxyClient = class {
   }
 };
 var ProxyClientBridge = class {
-  constructor(url20, dispatchFetch) {
-    this.url = url20;
+  constructor(url24, dispatchFetch) {
+    this.url = url24;
     this.dispatchFetch = dispatchFetch;
     this.#finalizationRegistry = new FinalizationRegistry(this.#finalizeProxy);
   }
@@ -11778,73 +11899,74 @@ var ProxyStubHandler = class extends Function {
 };
 
 // src/plugins/core/services.ts
-var import_zod11 = require("zod");
+var import_zod12 = require("zod");
 var kCurrentWorker = Symbol.for("miniflare.kCurrentWorker");
-var HttpOptionsHeaderSchema = import_zod11.z.object({
-  name: import_zod11.z.string(),
+var HttpOptionsHeaderSchema = import_zod12.z.object({
+  name: import_zod12.z.string(),
   // name should be required
-  value: import_zod11.z.ostring()
+  value: import_zod12.z.ostring()
   // If omitted, the header will be removed
 });
-var HttpOptionsSchema = import_zod11.z.object({
-  style: import_zod11.z.nativeEnum(HttpOptions_Style).optional(),
-  forwardedProtoHeader: import_zod11.z.ostring(),
-  cfBlobHeader: import_zod11.z.ostring(),
+var HttpOptionsSchema = import_zod12.z.object({
+  style: import_zod12.z.nativeEnum(HttpOptions_Style).optional(),
+  forwardedProtoHeader: import_zod12.z.ostring(),
+  cfBlobHeader: import_zod12.z.ostring(),
   injectRequestHeaders: HttpOptionsHeaderSchema.array().optional(),
   injectResponseHeaders: HttpOptionsHeaderSchema.array().optional()
 }).transform((options) => ({
   ...options,
   capnpConnectHost: HOST_CAPNP_CONNECT
 }));
-var TlsOptionsKeypairSchema = import_zod11.z.object({
-  privateKey: import_zod11.z.ostring(),
-  certificateChain: import_zod11.z.ostring()
+var TlsOptionsKeypairSchema = import_zod12.z.object({
+  privateKey: import_zod12.z.ostring(),
+  certificateChain: import_zod12.z.ostring()
 });
-var TlsOptionsSchema = import_zod11.z.object({
+var TlsOptionsSchema = import_zod12.z.object({
   keypair: TlsOptionsKeypairSchema.optional(),
-  requireClientCerts: import_zod11.z.oboolean(),
-  trustBrowserCas: import_zod11.z.oboolean(),
-  trustedCertificates: import_zod11.z.string().array().optional(),
-  minVersion: import_zod11.z.nativeEnum(TlsOptions_Version).optional(),
-  cipherList: import_zod11.z.ostring()
+  requireClientCerts: import_zod12.z.oboolean(),
+  trustBrowserCas: import_zod12.z.oboolean(),
+  trustedCertificates: import_zod12.z.string().array().optional(),
+  minVersion: import_zod12.z.nativeEnum(TlsOptions_Version).optional(),
+  cipherList: import_zod12.z.ostring()
 });
-var NetworkSchema = import_zod11.z.object({
-  allow: import_zod11.z.string().array().optional(),
-  deny: import_zod11.z.string().array().optional(),
+var NetworkSchema = import_zod12.z.object({
+  allow: import_zod12.z.string().array().optional(),
+  deny: import_zod12.z.string().array().optional(),
   tlsOptions: TlsOptionsSchema.optional()
 });
-var ExternalServerSchema = import_zod11.z.intersection(
-  import_zod11.z.object({ address: import_zod11.z.string() }),
+var ExternalServerSchema = import_zod12.z.intersection(
+  import_zod12.z.object({ address: import_zod12.z.string() }),
   // address should be required
-  import_zod11.z.union([
-    import_zod11.z.object({ http: import_zod11.z.optional(HttpOptionsSchema) }),
-    import_zod11.z.object({
-      https: import_zod11.z.optional(
-        import_zod11.z.object({
+  import_zod12.z.union([
+    import_zod12.z.object({ http: import_zod12.z.optional(HttpOptionsSchema) }),
+    import_zod12.z.object({
+      https: import_zod12.z.optional(
+        import_zod12.z.object({
           options: HttpOptionsSchema.optional(),
           tlsOptions: TlsOptionsSchema.optional(),
-          certificateHost: import_zod11.z.ostring()
+          certificateHost: import_zod12.z.ostring()
         })
       )
     })
   ])
 );
-var DiskDirectorySchema = import_zod11.z.object({
-  path: import_zod11.z.string(),
+var DiskDirectorySchema = import_zod12.z.object({
+  path: import_zod12.z.string(),
   // path should be required
-  writable: import_zod11.z.oboolean()
+  writable: import_zod12.z.oboolean()
 });
-var ServiceFetchSchema = import_zod11.z.custom((v) => typeof v === "function");
-var ServiceDesignatorSchema = import_zod11.z.union([
-  import_zod11.z.string(),
-  import_zod11.z.literal(kCurrentWorker),
-  import_zod11.z.object({
-    name: import_zod11.z.union([import_zod11.z.string(), import_zod11.z.literal(kCurrentWorker)]),
-    entrypoint: import_zod11.z.ostring()
+var ServiceFetchSchema = import_zod12.z.custom((v) => typeof v === "function");
+var ServiceDesignatorSchema = import_zod12.z.union([
+  import_zod12.z.string(),
+  import_zod12.z.literal(kCurrentWorker),
+  import_zod12.z.object({
+    name: import_zod12.z.union([import_zod12.z.string(), import_zod12.z.literal(kCurrentWorker)]),
+    entrypoint: import_zod12.z.ostring(),
+    props: import_zod12.z.record(import_zod12.z.unknown()).optional()
   }),
-  import_zod11.z.object({ network: NetworkSchema }),
-  import_zod11.z.object({ external: ExternalServerSchema }),
-  import_zod11.z.object({ disk: DiskDirectorySchema }),
+  import_zod12.z.object({ network: NetworkSchema }),
+  import_zod12.z.object({ external: ExternalServerSchema }),
+  import_zod12.z.object({ disk: DiskDirectorySchema }),
   ServiceFetchSchema
 ]);
 
@@ -11852,10 +11974,12 @@ var ServiceDesignatorSchema = import_zod11.z.union([
 var trustedCertificates = process.platform === "win32" ? Array.from(import_tls.default.rootCertificates) : [];
 if (process.env.NODE_EXTRA_CA_CERTS !== void 0) {
   try {
-    const extra = (0, import_fs15.readFileSync)(process.env.NODE_EXTRA_CA_CERTS, "utf8");
-    const pemBegin = "-----BEGIN";
-    for (const cert of extra.split(pemBegin)) {
-      if (cert.trim() !== "") trustedCertificates.push(pemBegin + cert);
+    const extra = (0, import_fs16.readFileSync)(process.env.NODE_EXTRA_CA_CERTS, "utf8");
+    const certs = extra.match(
+      /-----BEGIN CERTIFICATE-----[\s\S]+?-----END CERTIFICATE-----/g
+    );
+    if (certs !== null) {
+      trustedCertificates.push(...certs);
     }
   } catch {
   }
@@ -11865,45 +11989,46 @@ var numericCompare = new Intl.Collator(void 0, { numeric: true }).compare;
 function createFetchMock() {
   return new import_undici7.MockAgent();
 }
-var WrappedBindingSchema = import_zod12.z.object({
-  scriptName: import_zod12.z.string(),
-  entrypoint: import_zod12.z.string().optional(),
-  bindings: import_zod12.z.record(JsonSchema).optional()
+var WrappedBindingSchema = import_zod13.z.object({
+  scriptName: import_zod13.z.string(),
+  entrypoint: import_zod13.z.string().optional(),
+  bindings: import_zod13.z.record(JsonSchema).optional()
 });
-var UnusableStringSchema = import_zod12.z.string().transform(() => void 0);
-var UnsafeDirectSocketSchema = import_zod12.z.object({
-  host: import_zod12.z.ostring(),
-  port: import_zod12.z.onumber(),
-  entrypoint: import_zod12.z.ostring(),
-  proxy: import_zod12.z.oboolean()
+var UnusableStringSchema = import_zod13.z.string().transform(() => void 0);
+var UnsafeDirectSocketSchema = import_zod13.z.object({
+  host: import_zod13.z.ostring(),
+  port: import_zod13.z.onumber(),
+  entrypoint: import_zod13.z.ostring(),
+  proxy: import_zod13.z.oboolean()
 });
-var CoreOptionsSchemaInput = import_zod12.z.intersection(
+var CoreOptionsSchemaInput = import_zod13.z.intersection(
   SourceOptionsSchema,
-  import_zod12.z.object({
-    name: import_zod12.z.string().optional(),
+  import_zod13.z.object({
+    name: import_zod13.z.string().optional(),
     rootPath: UnusableStringSchema.optional(),
-    compatibilityDate: import_zod12.z.string().optional(),
-    compatibilityFlags: import_zod12.z.string().array().optional(),
-    routes: import_zod12.z.string().array().optional(),
-    bindings: import_zod12.z.record(JsonSchema).optional(),
-    wasmBindings: import_zod12.z.record(import_zod12.z.union([PathSchema, import_zod12.z.instanceof(Uint8Array)])).optional(),
-    textBlobBindings: import_zod12.z.record(PathSchema).optional(),
-    dataBlobBindings: import_zod12.z.record(import_zod12.z.union([PathSchema, import_zod12.z.instanceof(Uint8Array)])).optional(),
-    serviceBindings: import_zod12.z.record(ServiceDesignatorSchema).optional(),
-    wrappedBindings: import_zod12.z.record(import_zod12.z.union([import_zod12.z.string(), WrappedBindingSchema])).optional(),
+    compatibilityDate: import_zod13.z.string().optional(),
+    compatibilityFlags: import_zod13.z.string().array().optional(),
+    unsafeInspectorProxy: import_zod13.z.boolean().optional(),
+    routes: import_zod13.z.string().array().optional(),
+    bindings: import_zod13.z.record(JsonSchema).optional(),
+    wasmBindings: import_zod13.z.record(import_zod13.z.union([PathSchema, import_zod13.z.instanceof(Uint8Array)])).optional(),
+    textBlobBindings: import_zod13.z.record(PathSchema).optional(),
+    dataBlobBindings: import_zod13.z.record(import_zod13.z.union([PathSchema, import_zod13.z.instanceof(Uint8Array)])).optional(),
+    serviceBindings: import_zod13.z.record(ServiceDesignatorSchema).optional(),
+    wrappedBindings: import_zod13.z.record(import_zod13.z.union([import_zod13.z.string(), WrappedBindingSchema])).optional(),
     outboundService: ServiceDesignatorSchema.optional(),
-    fetchMock: import_zod12.z.instanceof(import_undici7.MockAgent).optional(),
+    fetchMock: import_zod13.z.instanceof(import_undici7.MockAgent).optional(),
     // TODO(soon): remove this in favour of per-object `unsafeUniqueKey: kEphemeralUniqueKey`
-    unsafeEphemeralDurableObjects: import_zod12.z.boolean().optional(),
+    unsafeEphemeralDurableObjects: import_zod13.z.boolean().optional(),
     unsafeDirectSockets: UnsafeDirectSocketSchema.array().optional(),
-    unsafeEvalBinding: import_zod12.z.string().optional(),
-    unsafeUseModuleFallbackService: import_zod12.z.boolean().optional(),
+    unsafeEvalBinding: import_zod13.z.string().optional(),
+    unsafeUseModuleFallbackService: import_zod13.z.boolean().optional(),
     /** Used to set the vitest pool worker SELF binding to point to the Router Worker if there are assets.
      (If there are assets but we're not using vitest, the miniflare entry worker can point directly to
      Router Worker)
      */
-    hasAssetsAndIsVitest: import_zod12.z.boolean().optional(),
-    unsafeEnableAssetsRpc: import_zod12.z.boolean().optional()
+    hasAssetsAndIsVitest: import_zod13.z.boolean().optional(),
+    tails: import_zod13.z.array(ServiceDesignatorSchema).optional()
   })
 );
 var CoreOptionsSchema = CoreOptionsSchemaInput.transform((value) => {
@@ -11916,35 +12041,38 @@ var CoreOptionsSchema = CoreOptionsSchemaInput.transform((value) => {
       );
     }
     value.fetchMock = void 0;
-    value.outboundService = (req) => fetch3(req, { dispatcher: fetchMock });
+    value.outboundService = (req) => fetch4(req, { dispatcher: fetchMock });
   }
   return value;
 });
-var CoreSharedOptionsSchema = import_zod12.z.object({
+var CoreSharedOptionsSchema = import_zod13.z.object({
   rootPath: UnusableStringSchema.optional(),
-  host: import_zod12.z.string().optional(),
-  port: import_zod12.z.number().optional(),
-  https: import_zod12.z.boolean().optional(),
-  httpsKey: import_zod12.z.string().optional(),
-  httpsKeyPath: import_zod12.z.string().optional(),
-  httpsCert: import_zod12.z.string().optional(),
-  httpsCertPath: import_zod12.z.string().optional(),
-  inspectorPort: import_zod12.z.number().optional(),
-  verbose: import_zod12.z.boolean().optional(),
-  log: import_zod12.z.instanceof(Log).optional(),
-  handleRuntimeStdio: import_zod12.z.function(import_zod12.z.tuple([import_zod12.z.instanceof(import_stream2.Readable), import_zod12.z.instanceof(import_stream2.Readable)])).optional(),
-  upstream: import_zod12.z.string().optional(),
+  host: import_zod13.z.string().optional(),
+  port: import_zod13.z.number().optional(),
+  https: import_zod13.z.boolean().optional(),
+  httpsKey: import_zod13.z.string().optional(),
+  httpsKeyPath: import_zod13.z.string().optional(),
+  httpsCert: import_zod13.z.string().optional(),
+  httpsCertPath: import_zod13.z.string().optional(),
+  inspectorPort: import_zod13.z.number().optional(),
+  verbose: import_zod13.z.boolean().optional(),
+  log: import_zod13.z.instanceof(Log).optional(),
+  handleRuntimeStdio: import_zod13.z.function(import_zod13.z.tuple([import_zod13.z.instanceof(import_stream2.Readable), import_zod13.z.instanceof(import_stream2.Readable)])).optional(),
+  upstream: import_zod13.z.string().optional(),
   // TODO: add back validation of cf object
-  cf: import_zod12.z.union([import_zod12.z.boolean(), import_zod12.z.string(), import_zod12.z.record(import_zod12.z.any())]).optional(),
-  liveReload: import_zod12.z.boolean().optional(),
+  cf: import_zod13.z.union([import_zod13.z.boolean(), import_zod13.z.string(), import_zod13.z.record(import_zod13.z.any())]).optional(),
+  liveReload: import_zod13.z.boolean().optional(),
   // This is a shared secret between a proxy server and miniflare that can be
   // passed in a header to prove that the request came from the proxy and not
   // some malicious attacker.
-  unsafeProxySharedSecret: import_zod12.z.string().optional(),
+  unsafeProxySharedSecret: import_zod13.z.string().optional(),
   unsafeModuleFallbackService: ServiceFetchSchema.optional(),
   // Keep blobs when deleting/overwriting keys, required for stacked storage
-  unsafeStickyBlobs: import_zod12.z.boolean().optional(),
-  unsafeEnableAssetsRpc: import_zod12.z.boolean().optional()
+  unsafeStickyBlobs: import_zod13.z.boolean().optional(),
+  // Enable directly triggering user Worker handlers with paths like `/cdn-cgi/handler/scheduled`
+  unsafeTriggerHandlers: import_zod13.z.boolean().optional(),
+  // Enable logging requests
+  logRequests: import_zod13.z.boolean().default(true)
 });
 var CORE_PLUGIN_NAME2 = "core";
 var LIVE_RELOAD_SCRIPT_TEMPLATE = (port) => `<script defer type="application/javascript">
@@ -11970,9 +12098,10 @@ var SCRIPT_CUSTOM_SERVICE = `addEventListener("fetch", (event) => {
   request.headers.set("${CoreHeaders.ORIGINAL_URL}", request.url);
   event.respondWith(${CoreBindings.SERVICE_LOOPBACK}.fetch(request));
 })`;
-function getCustomServiceDesignator(refererName, workerIndex, kind, name, service, hasAssetsAndIsVitest = false, unsafeEnableAssetsRpc = false) {
+function getCustomServiceDesignator(refererName, workerIndex, kind, name, service, hasAssetsAndIsVitest = false) {
   let serviceName;
   let entrypoint;
+  let props;
   if (typeof service === "function") {
     serviceName = getCustomServiceName(workerIndex, kind, name);
   } else if (typeof service === "object") {
@@ -11983,15 +12112,18 @@ function getCustomServiceDesignator(refererName, workerIndex, kind, name, servic
         serviceName = getUserServiceName(service.name);
       }
       entrypoint = service.entrypoint;
+      if (service.props) {
+        props = { json: JSON.stringify(service.props) };
+      }
     } else {
       serviceName = getBuiltinServiceName(workerIndex, kind, name);
     }
   } else if (service === kCurrentWorker) {
-    serviceName = hasAssetsAndIsVitest ? unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${refererName}` : `${ROUTER_SERVICE_NAME}:${refererName}` : getUserServiceName(refererName);
+    serviceName = hasAssetsAndIsVitest ? `${RPC_PROXY_SERVICE_NAME}:${refererName}` : getUserServiceName(refererName);
   } else {
     serviceName = getUserServiceName(service);
   }
-  return { name: serviceName, entrypoint };
+  return { name: serviceName, entrypoint, props };
 }
 function maybeGetCustomServiceService(workerIndex, kind, name, service) {
   if (typeof service === "function") {
@@ -12085,7 +12217,7 @@ var CORE_PLUGIN = {
     if (options.textBlobBindings !== void 0) {
       bindings.push(
         ...Object.entries(options.textBlobBindings).map(
-          ([name, path30]) => import_promises6.default.readFile(path30, "utf8").then((text) => ({ name, text }))
+          ([name, path34]) => import_promises6.default.readFile(path34, "utf8").then((text) => ({ name, text }))
         )
       );
     }
@@ -12108,8 +12240,7 @@ var CORE_PLUGIN = {
               "#" /* UNKNOWN */,
               name,
               service,
-              options.hasAssetsAndIsVitest,
-              options.unsafeEnableAssetsRpc
+              options.hasAssetsAndIsVitest
             )
           };
         })
@@ -12159,7 +12290,7 @@ var CORE_PLUGIN = {
     if (options.textBlobBindings !== void 0) {
       bindingEntries3.push(
         ...Object.entries(options.textBlobBindings).map(
-          ([name, path30]) => import_promises6.default.readFile(path30, "utf8").then((text) => [name, text])
+          ([name, path34]) => import_promises6.default.readFile(path34, "utf8").then((text) => [name, text])
         )
       );
     }
@@ -12207,16 +12338,16 @@ var CORE_PLUGIN = {
     );
     if ("modules" in workerScript) {
       const subDirs = new Set(
-        workerScript.modules.map(({ name: name2 }) => import_path18.default.posix.dirname(name2))
+        workerScript.modules.map(({ name: name2 }) => import_path19.default.posix.dirname(name2))
       );
       subDirs.delete(".");
       for (const module2 of additionalModules) {
         workerScript.modules.push(module2);
         for (const subDir of subDirs) {
-          const relativePath = import_path18.default.posix.relative(subDir, module2.name);
+          const relativePath = import_path19.default.posix.relative(subDir, module2.name);
           const relativePathString = JSON.stringify(relativePath);
           workerScript.modules.push({
-            name: import_path18.default.posix.join(subDir, module2.name),
+            name: import_path19.default.posix.join(subDir, module2.name),
             // TODO(someday): if we ever have additional modules without
             //  default exports, this may be a problem. For now, our only
             //  additional module is `__STATIC_CONTENT_MANIFEST` so it's fine.
@@ -12332,11 +12463,21 @@ Ensure ${stringName} doesn't include unbundled \`import\`s.`
             "$" /* KNOWN */,
             CUSTOM_SERVICE_KNOWN_OUTBOUND,
             options.outboundService,
-            options.hasAssetsAndIsVitest,
-            options.unsafeEnableAssetsRpc
+            options.hasAssetsAndIsVitest
           ),
           cacheApiOutbound: { name: getCacheServiceName(workerIndex) },
-          moduleFallback: options.unsafeUseModuleFallbackService && sharedOptions.unsafeModuleFallbackService !== void 0 ? `localhost:${loopbackPort}` : void 0
+          moduleFallback: options.unsafeUseModuleFallbackService && sharedOptions.unsafeModuleFallbackService !== void 0 ? `localhost:${loopbackPort}` : void 0,
+          tails: options.tails === void 0 ? void 0 : options.tails.map((service) => {
+            return getCustomServiceDesignator(
+              /* referrer */
+              options.name,
+              workerIndex,
+              "#" /* UNKNOWN */,
+              name,
+              service,
+              options.hasAssetsAndIsVitest
+            );
+          })
         }
       });
     }
@@ -12351,6 +12492,17 @@ Ensure ${stringName} doesn't include unbundled \`import\`s.`
         if (maybeService !== void 0) services.push(maybeService);
       }
     }
+    if (options.tails !== void 0) {
+      for (const service of options.tails) {
+        const maybeService = maybeGetCustomServiceService(
+          workerIndex,
+          "#" /* UNKNOWN */,
+          name,
+          service
+        );
+        if (maybeService !== void 0) services.push(maybeService);
+      }
+    }
     if (options.outboundService !== void 0) {
       const maybeService = maybeGetCustomServiceService(
         workerIndex,
@@ -12377,6 +12529,14 @@ function getGlobalServices({
     WORKER_BINDING_SERVICE_LOOPBACK,
     // For converting stack-traces to pretty-error pages
     { name: CoreBindings.JSON_ROUTES, json: JSON.stringify(routes) },
+    {
+      name: CoreBindings.TRIGGER_HANDLERS,
+      json: JSON.stringify(!!sharedOptions.unsafeTriggerHandlers)
+    },
+    {
+      name: CoreBindings.LOG_REQUESTS,
+      json: JSON.stringify(!!sharedOptions.logRequests)
+    },
     { name: CoreBindings.JSON_CF_BLOB, json: JSON.stringify(sharedOptions.cf) },
     { name: CoreBindings.JSON_LOG_LEVEL, json: JSON.stringify(log.level) },
     {
@@ -12426,13 +12586,8 @@ function getGlobalServices({
       name: SERVICE_ENTRY,
       worker: {
         modules: [{ name: "entry.worker.js", esModule: entry_worker_default() }],
-        compatibilityDate: "2023-04-04",
-        compatibilityFlags: [
-          "nodejs_compat",
-          "service_binding_extra_handlers",
-          "brotli_content_encoding",
-          "rpc"
-        ],
+        compatibilityDate: "2025-03-17",
+        compatibilityFlags: ["nodejs_compat", "service_binding_extra_handlers"],
         bindings: serviceEntryBindings,
         durableObjectNamespaces: [
           {
@@ -12470,7 +12625,7 @@ function getGlobalServices({
   ];
 }
 function getWorkerScript(options, workerIndex, additionalModuleNames) {
-  const modulesRoot = import_path18.default.resolve(
+  const modulesRoot = import_path19.default.resolve(
     ("modulesRoot" in options ? options.modulesRoot : void 0) ?? ""
   );
   if (Array.isArray(options.modules)) {
@@ -12484,7 +12639,7 @@ function getWorkerScript(options, workerIndex, additionalModuleNames) {
   if ("script" in options && options.script !== void 0) {
     code = options.script;
   } else if ("scriptPath" in options && options.scriptPath !== void 0) {
-    code = (0, import_fs15.readFileSync)(options.scriptPath, "utf8");
+    code = (0, import_fs16.readFileSync)(options.scriptPath, "utf8");
   } else {
     import_assert9.default.fail("Unreachable: Workers must have code");
   }
@@ -12506,17 +12661,22 @@ function getWorkerScript(options, workerIndex, additionalModuleNames) {
 }
 
 // src/plugins/assets/schema.ts
-var import_zod13 = require("zod");
-var AssetsOptionsSchema = import_zod13.z.object({
-  assets: import_zod13.z.object({
+var import_zod14 = require("zod");
+var AssetsOptionsSchema = import_zod14.z.object({
+  assets: import_zod14.z.object({
     // User Worker name or vitest runner - this is only ever set inside miniflare
     // The assets plugin needs access to the worker name to create the router worker - user worker binding
-    workerName: import_zod13.z.string().optional(),
+    workerName: import_zod14.z.string().optional(),
     directory: PathSchema,
-    binding: import_zod13.z.string().optional(),
+    binding: import_zod14.z.string().optional(),
     routerConfig: RouterConfigSchema.optional(),
-    assetConfig: AssetConfigSchema.optional()
-  }).optional()
+    assetConfig: AssetConfigSchema.omit({
+      compatibility_date: true,
+      compatibility_flags: true
+    }).optional()
+  }).optional(),
+  compatibilityDate: import_zod14.z.string().optional(),
+  compatibilityFlags: import_zod14.z.string().array().optional()
 });
 
 // src/plugins/assets/index.ts
@@ -12544,14 +12704,18 @@ var ASSETS_PLUGIN = {
       [options.assets.binding]: new ProxyNodeBinding()
     };
   },
-  async getServices({ options, unsafeEnableAssetsRpc }) {
+  async getServices({ options }) {
     if (!options.assets) {
       return [];
     }
     const storageServiceName = `${ASSETS_PLUGIN_NAME}:storage`;
     const storageService = {
       name: storageServiceName,
-      disk: { path: options.assets.directory, writable: true }
+      disk: {
+        path: options.assets.directory,
+        writable: true,
+        allowDotfiles: true
+      }
     };
     const { encodedAssetManifest, assetsReverseMap } = await buildAssetManifest(
       options.assets.directory
@@ -12591,9 +12755,12 @@ var ASSETS_PLUGIN = {
       );
     }
     const assetConfig = {
+      compatibility_date: options.compatibilityDate,
+      compatibility_flags: options.compatibilityFlags,
       ...options.assets.assetConfig,
       redirects: parsedRedirects,
-      headers: parsedHeaders
+      headers: parsedHeaders,
+      debug: true
     };
     const id = options.assets.workerName;
     const namespaceService = {
@@ -12679,36 +12846,39 @@ var ASSETS_PLUGIN = {
         ]
       }
     };
-    const services = [
+    const assetsProxyService = {
+      name: `${RPC_PROXY_SERVICE_NAME}:${id}`,
+      worker: {
+        compatibilityDate: "2024-08-01",
+        modules: [
+          {
+            name: "assets-proxy-worker.mjs",
+            esModule: rpc_proxy_worker_default()
+          }
+        ],
+        bindings: [
+          {
+            name: "ROUTER_WORKER",
+            service: {
+              name: `${ROUTER_SERVICE_NAME}:${id}`
+            }
+          },
+          {
+            name: "USER_WORKER",
+            service: {
+              name: getUserServiceName(id)
+            }
+          }
+        ]
+      }
+    };
+    return [
       storageService,
       namespaceService,
       assetService,
-      routerService
+      routerService,
+      assetsProxyService
     ];
-    if (unsafeEnableAssetsRpc) {
-      const assetsProxyService = {
-        name: `${RPC_PROXY_SERVICE_NAME}:${id}`,
-        worker: {
-          compatibilityDate: "2024-08-01",
-          modules: [
-            {
-              name: "assets-proxy-worker.mjs",
-              esModule: rpc_proxy_worker_default()
-            }
-          ],
-          bindings: [
-            {
-              name: "ROUTER_WORKER",
-              service: {
-                name: `${ROUTER_SERVICE_NAME}:${id}`
-              }
-            }
-          ]
-        }
-      };
-      services.push(assetsProxyService);
-    }
-    return services;
   }
 };
 var buildAssetManifest = async (dir) => {
@@ -12814,9 +12984,9 @@ var encodeManifest = (manifest) => {
 var bytesToHex = (buffer) => {
   return [...new Uint8Array(buffer)].map((b) => b.toString(16).padStart(2, "0")).join("");
 };
-var hashPath = async (path30) => {
+var hashPath = async (path34) => {
   const encoder3 = new TextEncoder();
-  const data = encoder3.encode(path30);
+  const data = encoder3.encode(path34);
   const hashBuffer = await import_node_crypto.default.subtle.digest(
     "SHA-256",
     data.buffer
@@ -12828,23 +12998,23 @@ var hashPath = async (path30) => {
 var import_promises8 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/d1/database.worker.ts
-var import_fs16 = __toESM(require("fs"));
-var import_path19 = __toESM(require("path"));
-var import_url16 = __toESM(require("url"));
-var contents12;
+var import_fs17 = __toESM(require("fs"));
+var import_path20 = __toESM(require("path"));
+var import_url17 = __toESM(require("url"));
+var contents13;
 function database_worker_default() {
-  if (contents12 !== void 0) return contents12;
-  const filePath = import_path19.default.join(__dirname, "workers", "d1/database.worker.js");
-  contents12 = import_fs16.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url16.default.pathToFileURL(filePath);
-  return contents12;
+  if (contents13 !== void 0) return contents13;
+  const filePath = import_path20.default.join(__dirname, "workers", "d1/database.worker.js");
+  contents13 = import_fs17.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url17.default.pathToFileURL(filePath);
+  return contents13;
 }
 
 // src/plugins/d1/index.ts
-var import_zod14 = require("zod");
-var D1OptionsSchema = import_zod14.z.object({
-  d1Databases: import_zod14.z.union([import_zod14.z.record(import_zod14.z.string()), import_zod14.z.string().array()]).optional()
+var import_zod15 = require("zod");
+var D1OptionsSchema = import_zod15.z.object({
+  d1Databases: import_zod15.z.union([import_zod15.z.record(import_zod15.z.string()), import_zod15.z.string().array()]).optional()
 });
-var D1SharedOptionsSchema = import_zod14.z.object({
+var D1SharedOptionsSchema = import_zod15.z.object({
   d1Persist: PersistenceSchema
 });
 var D1_PLUGIN_NAME = "d1";
@@ -12955,67 +13125,181 @@ var D1_PLUGIN = {
   }
 };
 
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/email/email.worker.ts
+var import_fs18 = __toESM(require("fs"));
+var import_path21 = __toESM(require("path"));
+var import_url18 = __toESM(require("url"));
+var contents14;
+function email_worker_default() {
+  if (contents14 !== void 0) return contents14;
+  const filePath = import_path21.default.join(__dirname, "workers", "email/email.worker.js");
+  contents14 = import_fs18.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url18.default.pathToFileURL(filePath);
+  return contents14;
+}
+
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/email/send_email.worker.ts
+var import_fs19 = __toESM(require("fs"));
+var import_path22 = __toESM(require("path"));
+var import_url19 = __toESM(require("url"));
+var contents15;
+function send_email_worker_default() {
+  if (contents15 !== void 0) return contents15;
+  const filePath = import_path22.default.join(__dirname, "workers", "email/send_email.worker.js");
+  contents15 = import_fs19.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url19.default.pathToFileURL(filePath);
+  return contents15;
+}
+
+// src/plugins/email/index.ts
+var import_zod16 = require("zod");
+var EmailBindingOptionsSchema = import_zod16.z.object({
+  name: import_zod16.z.string()
+}).and(
+  import_zod16.z.union([
+    import_zod16.z.object({
+      destination_address: import_zod16.z.string().optional(),
+      allowed_destination_addresses: import_zod16.z.never().optional()
+    }),
+    import_zod16.z.object({
+      allowed_destination_addresses: import_zod16.z.array(import_zod16.z.string()).optional(),
+      destination_address: import_zod16.z.never().optional()
+    })
+  ])
+);
+var EmailOptionsSchema = import_zod16.z.object({
+  email: import_zod16.z.object({
+    send_email: import_zod16.z.array(EmailBindingOptionsSchema).optional()
+  }).optional()
+});
+var EMAIL_PLUGIN_NAME = "email";
+var SERVICE_SEND_EMAIL_WORKER_PREFIX = `SEND-EMAIL-WORKER`;
+function buildJsonBindings(bindings) {
+  return Object.entries(bindings).map(([name, value]) => ({
+    name,
+    json: JSON.stringify(value)
+  }));
+}
+var EMAIL_PLUGIN = {
+  options: EmailOptionsSchema,
+  getBindings(options) {
+    if (!options.email?.send_email) {
+      return [];
+    }
+    const sendEmailBindings = options.email.send_email;
+    return sendEmailBindings.map(({ name }) => ({
+      name,
+      service: {
+        entrypoint: "SendEmailBinding",
+        name: `${SERVICE_SEND_EMAIL_WORKER_PREFIX}:${name}`
+      }
+    }));
+  },
+  getNodeBindings(_options) {
+    return {};
+  },
+  async getServices(args) {
+    const extensions = [];
+    const services = [];
+    if (args.workerIndex === 0) {
+      extensions.push({
+        modules: [
+          {
+            name: "cloudflare-internal:email",
+            esModule: email_worker_default(),
+            internal: true
+          }
+        ]
+      });
+    }
+    for (const { name, ...config } of args.options.email?.send_email ?? []) {
+      services.push({
+        name: `${SERVICE_SEND_EMAIL_WORKER_PREFIX}:${name}`,
+        worker: {
+          compatibilityDate: "2025-03-17",
+          modules: [
+            {
+              name: "send_email.mjs",
+              esModule: send_email_worker_default()
+            }
+          ],
+          bindings: [
+            ...buildJsonBindings(config),
+            WORKER_BINDING_SERVICE_LOOPBACK
+          ]
+        }
+      });
+    }
+    return {
+      services,
+      extensions
+    };
+  }
+};
+
 // src/plugins/hyperdrive/index.ts
 var import_node_assert3 = __toESM(require("node:assert"));
-var import_zod15 = require("zod");
+var import_zod17 = require("zod");
 var HYPERDRIVE_PLUGIN_NAME = "hyperdrive";
-function hasPostgresProtocol(url20) {
-  return url20.protocol === "postgresql:" || url20.protocol === "postgres:";
+function hasPostgresProtocol(url24) {
+  return url24.protocol === "postgresql:" || url24.protocol === "postgres:";
 }
-function getPort(url20) {
-  if (url20.port !== "") return url20.port;
-  if (hasPostgresProtocol(url20)) return "5432";
-  import_node_assert3.default.fail(`Expected known protocol, got ${url20.protocol}`);
+function hasMysqlProtocol(url24) {
+  return url24.protocol === "mysql:";
 }
-var HyperdriveSchema = import_zod15.z.union([import_zod15.z.string().url(), import_zod15.z.instanceof(URL)]).transform((url20, ctx) => {
-  if (typeof url20 === "string") url20 = new URL(url20);
-  if (url20.protocol === "") {
+function getPort(url24) {
+  if (url24.port !== "") return url24.port;
+  if (hasPostgresProtocol(url24)) return "5432";
+  if (hasMysqlProtocol(url24)) return "3306";
+  import_node_assert3.default.fail(`Expected known protocol, got ${url24.protocol}`);
+}
+var HyperdriveSchema = import_zod17.z.union([import_zod17.z.string().url(), import_zod17.z.instanceof(URL)]).transform((url24, ctx) => {
+  if (typeof url24 === "string") url24 = new URL(url24);
+  if (url24.protocol === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
-      message: "You must specify the database protocol - e.g. 'postgresql'."
+      code: import_zod17.z.ZodIssueCode.custom,
+      message: "You must specify the database protocol - e.g. 'postgresql'/'mysql'."
     });
-  } else if (!hasPostgresProtocol(url20)) {
+  } else if (!hasPostgresProtocol(url24) && !hasMysqlProtocol(url24)) {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
-      message: "Only PostgreSQL or PostgreSQL compatible databases are currently supported."
+      code: import_zod17.z.ZodIssueCode.custom,
+      message: "Only PostgreSQL-compatible or MySQL-compatible databases are currently supported."
     });
   }
-  if (url20.host === "") {
+  if (url24.host === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod17.z.ZodIssueCode.custom,
       message: "You must provide a hostname or IP address in your connection string - e.g. 'user:password@database-hostname.example.com:5432/databasename"
     });
   }
-  if (url20.pathname === "") {
+  if (url24.pathname === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod17.z.ZodIssueCode.custom,
       message: "You must provide a database name as the path component - e.g. /postgres"
     });
   }
-  if (url20.username === "") {
+  if (url24.username === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod17.z.ZodIssueCode.custom,
       message: "You must provide a username - e.g. 'user:password@database.example.com:port/databasename'"
     });
   }
-  if (url20.password === "") {
+  if (url24.password === "") {
     ctx.addIssue({
-      code: import_zod15.z.ZodIssueCode.custom,
+      code: import_zod17.z.ZodIssueCode.custom,
       message: "You must provide a password - e.g. 'user:password@database.example.com:port/databasename' "
     });
   }
-  return url20;
+  return url24;
 });
-var HyperdriveInputOptionsSchema = import_zod15.z.object({
-  hyperdrives: import_zod15.z.record(import_zod15.z.string(), HyperdriveSchema).optional()
+var HyperdriveInputOptionsSchema = import_zod17.z.object({
+  hyperdrives: import_zod17.z.record(import_zod17.z.string(), HyperdriveSchema).optional()
 });
 var HYPERDRIVE_PLUGIN = {
   options: HyperdriveInputOptionsSchema,
   getBindings(options) {
     return Object.entries(options.hyperdrives ?? {}).map(
-      ([name, url20]) => {
-        const database = url20.pathname.replace("/", "");
-        const scheme = url20.protocol.replace(":", "");
+      ([name, url24]) => {
+        const database = url24.pathname.replace("/", "");
+        const scheme = url24.protocol.replace(":", "");
         return {
           name,
           hyperdrive: {
@@ -13023,8 +13307,8 @@ var HYPERDRIVE_PLUGIN = {
               name: `${HYPERDRIVE_PLUGIN_NAME}:${name}`
             },
             database: decodeURIComponent(database),
-            user: decodeURIComponent(url20.username),
-            password: decodeURIComponent(url20.password),
+            user: decodeURIComponent(url24.username),
+            password: decodeURIComponent(url24.password),
             scheme
           }
         };
@@ -13033,11 +13317,11 @@ var HYPERDRIVE_PLUGIN = {
   },
   getNodeBindings(options) {
     return Object.fromEntries(
-      Object.entries(options.hyperdrives ?? {}).map(([name, url20]) => {
+      Object.entries(options.hyperdrives ?? {}).map(([name, url24]) => {
         const connectionOverrides = {
-          connectionString: `${url20}`,
-          port: Number.parseInt(url20.port),
-          host: url20.hostname
+          connectionString: `${url24}`,
+          port: Number.parseInt(url24.port),
+          host: url24.hostname
         };
         const proxyNodeBinding = new ProxyNodeBinding({
           get(target, prop) {
@@ -13050,10 +13334,10 @@ var HYPERDRIVE_PLUGIN = {
   },
   async getServices({ options }) {
     return Object.entries(options.hyperdrives ?? {}).map(
-      ([name, url20]) => ({
+      ([name, url24]) => ({
         name: `${HYPERDRIVE_PLUGIN_NAME}:${name}`,
         external: {
-          address: `${url20.hostname}:${getPort(url20)}`,
+          address: `${url24.hostname}:${getPort(url24)}`,
           tcp: {}
         }
       })
@@ -13065,19 +13349,19 @@ var HYPERDRIVE_PLUGIN = {
 var import_promises10 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/kv/namespace.worker.ts
-var import_fs17 = __toESM(require("fs"));
-var import_path20 = __toESM(require("path"));
-var import_url17 = __toESM(require("url"));
-var contents13;
+var import_fs20 = __toESM(require("fs"));
+var import_path23 = __toESM(require("path"));
+var import_url20 = __toESM(require("url"));
+var contents16;
 function namespace_worker_default() {
-  if (contents13 !== void 0) return contents13;
-  const filePath = import_path20.default.join(__dirname, "workers", "kv/namespace.worker.js");
-  contents13 = import_fs17.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url17.default.pathToFileURL(filePath);
-  return contents13;
+  if (contents16 !== void 0) return contents16;
+  const filePath = import_path23.default.join(__dirname, "workers", "kv/namespace.worker.js");
+  contents16 = import_fs20.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url20.default.pathToFileURL(filePath);
+  return contents16;
 }
 
 // src/plugins/kv/index.ts
-var import_zod16 = require("zod");
+var import_zod18 = require("zod");
 
 // src/plugins/kv/constants.ts
 var KV_PLUGIN_NAME = "kv";
@@ -13085,25 +13369,25 @@ var KV_PLUGIN_NAME = "kv";
 // src/plugins/kv/sites.ts
 var import_assert10 = __toESM(require("assert"));
 var import_promises9 = __toESM(require("fs/promises"));
-var import_path22 = __toESM(require("path"));
+var import_path25 = __toESM(require("path"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/kv/sites.worker.ts
-var import_fs18 = __toESM(require("fs"));
-var import_path21 = __toESM(require("path"));
-var import_url18 = __toESM(require("url"));
-var contents14;
+var import_fs21 = __toESM(require("fs"));
+var import_path24 = __toESM(require("path"));
+var import_url21 = __toESM(require("url"));
+var contents17;
 function sites_worker_default() {
-  if (contents14 !== void 0) return contents14;
-  const filePath = import_path21.default.join(__dirname, "workers", "kv/sites.worker.js");
-  contents14 = import_fs18.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url18.default.pathToFileURL(filePath);
-  return contents14;
+  if (contents17 !== void 0) return contents17;
+  const filePath = import_path24.default.join(__dirname, "workers", "kv/sites.worker.js");
+  contents17 = import_fs21.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url21.default.pathToFileURL(filePath);
+  return contents17;
 }
 
 // src/plugins/kv/sites.ts
 async function* listKeysInDirectoryInner(rootPath2, currentPath) {
   const fileEntries = await import_promises9.default.readdir(currentPath, { withFileTypes: true });
   for (const fileEntry of fileEntries) {
-    const filePath = import_path22.default.posix.join(currentPath, fileEntry.name);
+    const filePath = import_path25.default.posix.join(currentPath, fileEntry.name);
     if (fileEntry.isDirectory()) {
       yield* listKeysInDirectoryInner(rootPath2, filePath);
     } else {
@@ -13112,7 +13396,7 @@ async function* listKeysInDirectoryInner(rootPath2, currentPath) {
   }
 }
 function listKeysInDirectory(rootPath2) {
-  rootPath2 = import_path22.default.resolve(rootPath2);
+  rootPath2 = import_path25.default.resolve(rootPath2);
   return listKeysInDirectoryInner(rootPath2, rootPath2);
 }
 var sitesRegExpsCache = /* @__PURE__ */ new WeakMap();
@@ -13163,7 +13447,7 @@ function getSitesServices(options) {
   const siteRegExps = sitesRegExpsCache.get(options);
   (0, import_assert10.default)(siteRegExps !== void 0);
   const serialisedSiteRegExps = serialiseSiteRegExps(siteRegExps);
-  const persist = import_path22.default.resolve(options.sitePath);
+  const persist = import_path25.default.resolve(options.sitePath);
   const storageServiceName = `${SERVICE_NAMESPACE_SITE}:storage`;
   const storageService = {
     name: storageServiceName,
@@ -13196,14 +13480,14 @@ function getSitesServices(options) {
 }
 
 // src/plugins/kv/index.ts
-var KVOptionsSchema = import_zod16.z.object({
-  kvNamespaces: import_zod16.z.union([import_zod16.z.record(import_zod16.z.string()), import_zod16.z.string().array()]).optional(),
+var KVOptionsSchema = import_zod18.z.object({
+  kvNamespaces: import_zod18.z.union([import_zod18.z.record(import_zod18.z.string()), import_zod18.z.string().array()]).optional(),
   // Workers Sites
   sitePath: PathSchema.optional(),
-  siteInclude: import_zod16.z.string().array().optional(),
-  siteExclude: import_zod16.z.string().array().optional()
+  siteInclude: import_zod18.z.string().array().optional(),
+  siteExclude: import_zod18.z.string().array().optional()
 });
-var KVSharedOptionsSchema = import_zod16.z.object({
+var KVSharedOptionsSchema = import_zod18.z.object({
   kvPersist: PersistenceSchema
 });
 var SERVICE_NAMESPACE_PREFIX = `${KV_PLUGIN_NAME}:ns`;
@@ -13307,21 +13591,21 @@ var KV_PLUGIN = {
 };
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/pipelines/pipeline.worker.ts
-var import_fs19 = __toESM(require("fs"));
-var import_path23 = __toESM(require("path"));
-var import_url19 = __toESM(require("url"));
-var contents15;
+var import_fs22 = __toESM(require("fs"));
+var import_path26 = __toESM(require("path"));
+var import_url22 = __toESM(require("url"));
+var contents18;
 function pipeline_worker_default() {
-  if (contents15 !== void 0) return contents15;
-  const filePath = import_path23.default.join(__dirname, "workers", "pipelines/pipeline.worker.js");
-  contents15 = import_fs19.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url19.default.pathToFileURL(filePath);
-  return contents15;
+  if (contents18 !== void 0) return contents18;
+  const filePath = import_path26.default.join(__dirname, "workers", "pipelines/pipeline.worker.js");
+  contents18 = import_fs22.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url22.default.pathToFileURL(filePath);
+  return contents18;
 }
 
 // src/plugins/pipelines/index.ts
-var import_zod17 = require("zod");
-var PipelineOptionsSchema = import_zod17.z.object({
-  pipelines: import_zod17.z.union([import_zod17.z.record(import_zod17.z.string()), import_zod17.z.string().array()]).optional()
+var import_zod19 = require("zod");
+var PipelineOptionsSchema = import_zod19.z.object({
+  pipelines: import_zod19.z.union([import_zod19.z.record(import_zod19.z.string()), import_zod19.z.string().array()]).optional()
 });
 var PIPELINES_PLUGIN_NAME = "pipelines";
 var SERVICE_PIPELINE_PREFIX = `${PIPELINES_PLUGIN_NAME}:pipeline`;
@@ -13374,32 +13658,32 @@ function bindingEntries(namespaces) {
 }
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/queues/broker.worker.ts
-var import_fs20 = __toESM(require("fs"));
-var import_path24 = __toESM(require("path"));
-var import_url20 = __toESM(require("url"));
-var contents16;
+var import_fs23 = __toESM(require("fs"));
+var import_path27 = __toESM(require("path"));
+var import_url23 = __toESM(require("url"));
+var contents19;
 function broker_worker_default() {
-  if (contents16 !== void 0) return contents16;
-  const filePath = import_path24.default.join(__dirname, "workers", "queues/broker.worker.js");
-  contents16 = import_fs20.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url20.default.pathToFileURL(filePath);
-  return contents16;
+  if (contents19 !== void 0) return contents19;
+  const filePath = import_path27.default.join(__dirname, "workers", "queues/broker.worker.js");
+  contents19 = import_fs23.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url23.default.pathToFileURL(filePath);
+  return contents19;
 }
 
 // src/plugins/queues/index.ts
-var import_zod18 = require("zod");
+var import_zod20 = require("zod");
 
 // src/plugins/queues/errors.ts
 var QueuesError = class extends MiniflareError {
 };
 
 // src/plugins/queues/index.ts
-var QueuesOptionsSchema = import_zod18.z.object({
-  queueProducers: import_zod18.z.union([
-    import_zod18.z.record(QueueProducerOptionsSchema),
-    import_zod18.z.string().array(),
-    import_zod18.z.record(import_zod18.z.string())
+var QueuesOptionsSchema = import_zod20.z.object({
+  queueProducers: import_zod20.z.union([
+    import_zod20.z.record(QueueProducerOptionsSchema),
+    import_zod20.z.string().array(),
+    import_zod20.z.record(import_zod20.z.string())
   ]).optional(),
-  queueConsumers: import_zod18.z.union([import_zod18.z.record(QueueConsumerOptionsSchema), import_zod18.z.string().array()]).optional()
+  queueConsumers: import_zod20.z.union([import_zod20.z.record(QueueConsumerOptionsSchema), import_zod20.z.string().array()]).optional()
 });
 var QUEUES_PLUGIN_NAME = "queues";
 var SERVICE_QUEUE_PREFIX = `${QUEUES_PLUGIN_NAME}:queue`;
@@ -13515,23 +13799,23 @@ function bindingKeys(namespaces) {
 var import_promises11 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/r2/bucket.worker.ts
-var import_fs21 = __toESM(require("fs"));
-var import_path25 = __toESM(require("path"));
-var import_url21 = __toESM(require("url"));
-var contents17;
+var import_fs24 = __toESM(require("fs"));
+var import_path28 = __toESM(require("path"));
+var import_url24 = __toESM(require("url"));
+var contents20;
 function bucket_worker_default() {
-  if (contents17 !== void 0) return contents17;
-  const filePath = import_path25.default.join(__dirname, "workers", "r2/bucket.worker.js");
-  contents17 = import_fs21.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url21.default.pathToFileURL(filePath);
-  return contents17;
+  if (contents20 !== void 0) return contents20;
+  const filePath = import_path28.default.join(__dirname, "workers", "r2/bucket.worker.js");
+  contents20 = import_fs24.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url24.default.pathToFileURL(filePath);
+  return contents20;
 }
 
 // src/plugins/r2/index.ts
-var import_zod19 = require("zod");
-var R2OptionsSchema = import_zod19.z.object({
-  r2Buckets: import_zod19.z.union([import_zod19.z.record(import_zod19.z.string()), import_zod19.z.string().array()]).optional()
+var import_zod21 = require("zod");
+var R2OptionsSchema = import_zod21.z.object({
+  r2Buckets: import_zod21.z.union([import_zod21.z.record(import_zod21.z.string()), import_zod21.z.string().array()]).optional()
 });
-var R2SharedOptionsSchema = import_zod19.z.object({
+var R2SharedOptionsSchema = import_zod21.z.object({
   r2Persist: PersistenceSchema
 });
 var R2_PLUGIN_NAME = "r2";
@@ -13625,38 +13909,38 @@ var R2_PLUGIN = {
 };
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/ratelimit/ratelimit.worker.ts
-var import_fs22 = __toESM(require("fs"));
-var import_path26 = __toESM(require("path"));
-var import_url22 = __toESM(require("url"));
-var contents18;
+var import_fs25 = __toESM(require("fs"));
+var import_path29 = __toESM(require("path"));
+var import_url25 = __toESM(require("url"));
+var contents21;
 function ratelimit_worker_default() {
-  if (contents18 !== void 0) return contents18;
-  const filePath = import_path26.default.join(__dirname, "workers", "ratelimit/ratelimit.worker.js");
-  contents18 = import_fs22.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url22.default.pathToFileURL(filePath);
-  return contents18;
+  if (contents21 !== void 0) return contents21;
+  const filePath = import_path29.default.join(__dirname, "workers", "ratelimit/ratelimit.worker.js");
+  contents21 = import_fs25.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url25.default.pathToFileURL(filePath);
+  return contents21;
 }
 
 // src/plugins/ratelimit/index.ts
-var import_zod20 = require("zod");
+var import_zod22 = require("zod");
 var PeriodType = /* @__PURE__ */ ((PeriodType2) => {
   PeriodType2[PeriodType2["TENSECONDS"] = 10] = "TENSECONDS";
   PeriodType2[PeriodType2["MINUTE"] = 60] = "MINUTE";
   return PeriodType2;
 })(PeriodType || {});
-var RatelimitConfigSchema = import_zod20.z.object({
-  simple: import_zod20.z.object({
-    limit: import_zod20.z.number().gt(0),
+var RatelimitConfigSchema = import_zod22.z.object({
+  simple: import_zod22.z.object({
+    limit: import_zod22.z.number().gt(0),
     // may relax this to be any number in the future
-    period: import_zod20.z.nativeEnum(PeriodType).optional()
+    period: import_zod22.z.nativeEnum(PeriodType).optional()
   })
 });
-var RatelimitOptionsSchema = import_zod20.z.object({
-  ratelimits: import_zod20.z.record(RatelimitConfigSchema).optional()
+var RatelimitOptionsSchema = import_zod22.z.object({
+  ratelimits: import_zod22.z.record(RatelimitConfigSchema).optional()
 });
 var RATELIMIT_PLUGIN_NAME = "ratelimit";
 var SERVICE_RATELIMIT_PREFIX = `${RATELIMIT_PLUGIN_NAME}`;
 var SERVICE_RATELIMIT_MODULE = `cloudflare-internal:${SERVICE_RATELIMIT_PREFIX}:module`;
-function buildJsonBindings(bindings) {
+function buildJsonBindings2(bindings) {
   return Object.entries(bindings).map(([name, value]) => ({
     name,
     json: JSON.stringify(value)
@@ -13673,7 +13957,7 @@ var RATELIMIT_PLUGIN = {
         name,
         wrapped: {
           moduleName: SERVICE_RATELIMIT_MODULE,
-          innerBindings: buildJsonBindings({
+          innerBindings: buildJsonBindings2({
             namespaceId: name,
             limit: config.simple.limit,
             period: config.simple.period
@@ -13715,33 +13999,164 @@ var RATELIMIT_PLUGIN = {
   }
 };
 
+// embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/secrets-store/secret.worker.ts
+var import_fs26 = __toESM(require("fs"));
+var import_path30 = __toESM(require("path"));
+var import_url26 = __toESM(require("url"));
+var contents22;
+function secret_worker_default() {
+  if (contents22 !== void 0) return contents22;
+  const filePath = import_path30.default.join(__dirname, "workers", "secrets-store/secret.worker.js");
+  contents22 = import_fs26.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url26.default.pathToFileURL(filePath);
+  return contents22;
+}
+
+// src/plugins/secret-store/index.ts
+var import_zod23 = require("zod");
+var SecretsStoreSecretsSchema = import_zod23.z.record(
+  import_zod23.z.object({
+    store_id: import_zod23.z.string(),
+    secret_name: import_zod23.z.string()
+  })
+);
+var SecretsStoreSecretsOptionsSchema = import_zod23.z.object({
+  secretsStoreSecrets: SecretsStoreSecretsSchema.optional()
+});
+var SecretsStoreSecretsSharedOptionsSchema = import_zod23.z.object({
+  secretsStorePersist: PersistenceSchema
+});
+var SECRET_STORE_PLUGIN_NAME = "secrets-store";
+function getkvNamespacesOptions(secretsStoreSecrets) {
+  const storeIds = new Set(
+    Object.values(secretsStoreSecrets).map((store) => store.store_id)
+  );
+  const storeIdKvNamespaceEntries = Array.from(storeIds).map((storeId) => [
+    storeId,
+    `${SECRET_STORE_PLUGIN_NAME}:${storeId}`
+  ]);
+  return {
+    kvNamespaces: Object.fromEntries(storeIdKvNamespaceEntries)
+  };
+}
+function isKvBinding(binding) {
+  return "kvNamespace" in binding;
+}
+var SECRET_STORE_PLUGIN = {
+  options: SecretsStoreSecretsOptionsSchema,
+  sharedOptions: SecretsStoreSecretsSharedOptionsSchema,
+  async getBindings(options) {
+    if (!options.secretsStoreSecrets) {
+      return [];
+    }
+    const bindings = Object.entries(
+      options.secretsStoreSecrets
+    ).map(([name, config]) => {
+      return {
+        name,
+        service: {
+          name: `${SECRET_STORE_PLUGIN_NAME}:${config.store_id}:${config.secret_name}`,
+          entrypoint: "SecretsStoreSecret"
+        }
+      };
+    });
+    return bindings;
+  },
+  getNodeBindings(options) {
+    if (!options.secretsStoreSecrets) {
+      return {};
+    }
+    return Object.fromEntries(
+      Object.keys(options.secretsStoreSecrets).map((name) => [
+        name,
+        new ProxyNodeBinding()
+      ])
+    );
+  },
+  async getServices({ options, sharedOptions, ...restOptions }) {
+    if (!options.secretsStoreSecrets) {
+      return [];
+    }
+    const kvServices = await KV_PLUGIN.getServices({
+      options: getkvNamespacesOptions(options.secretsStoreSecrets),
+      sharedOptions: {
+        kvPersist: sharedOptions.secretsStorePersist
+      },
+      ...restOptions
+    });
+    const kvBindings = await KV_PLUGIN.getBindings(
+      getkvNamespacesOptions(options.secretsStoreSecrets),
+      restOptions.workerIndex
+    );
+    if (!kvBindings || !kvBindings.every(isKvBinding)) {
+      throw new Error(
+        "Expected KV plugin to return bindings with kvNamespace defined"
+      );
+    }
+    if (!Array.isArray(kvServices)) {
+      throw new Error("Expected KV plugin to return an array of services");
+    }
+    return [
+      ...kvServices,
+      ...Object.entries(options.secretsStoreSecrets).map(
+        ([_, config]) => {
+          return {
+            name: `${SECRET_STORE_PLUGIN_NAME}:${config.store_id}:${config.secret_name}`,
+            worker: {
+              compatibilityDate: "2025-01-01",
+              modules: [
+                {
+                  name: "secret.worker.js",
+                  esModule: secret_worker_default()
+                }
+              ],
+              bindings: [
+                {
+                  name: "store",
+                  kvNamespace: kvBindings.find(
+                    // Look up the corresponding KV namespace for the store id
+                    (binding) => binding.name === config.store_id
+                  )?.kvNamespace
+                },
+                {
+                  name: "secret_name",
+                  json: JSON.stringify(config.secret_name)
+                }
+              ]
+            }
+          };
+        }
+      )
+    ];
+  }
+};
+
 // src/plugins/workflows/index.ts
 var import_promises12 = __toESM(require("fs/promises"));
 
 // embed-worker:/home/runner/work/workers-sdk/workers-sdk/packages/miniflare/src/workers/workflows/binding.worker.ts
-var import_fs23 = __toESM(require("fs"));
-var import_path27 = __toESM(require("path"));
-var import_url23 = __toESM(require("url"));
-var contents19;
+var import_fs27 = __toESM(require("fs"));
+var import_path31 = __toESM(require("path"));
+var import_url27 = __toESM(require("url"));
+var contents23;
 function binding_worker_default() {
-  if (contents19 !== void 0) return contents19;
-  const filePath = import_path27.default.join(__dirname, "workers", "workflows/binding.worker.js");
-  contents19 = import_fs23.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url23.default.pathToFileURL(filePath);
-  return contents19;
+  if (contents23 !== void 0) return contents23;
+  const filePath = import_path31.default.join(__dirname, "workers", "workflows/binding.worker.js");
+  contents23 = import_fs27.default.readFileSync(filePath, "utf8") + "//# sourceURL=" + import_url27.default.pathToFileURL(filePath);
+  return contents23;
 }
 
 // src/plugins/workflows/index.ts
-var import_zod21 = require("zod");
-var WorkflowsOptionsSchema = import_zod21.z.object({
-  workflows: import_zod21.z.record(
-    import_zod21.z.object({
-      name: import_zod21.z.string(),
-      className: import_zod21.z.string(),
-      scriptName: import_zod21.z.string().optional()
+var import_zod24 = require("zod");
+var WorkflowsOptionsSchema = import_zod24.z.object({
+  workflows: import_zod24.z.record(
+    import_zod24.z.object({
+      name: import_zod24.z.string(),
+      className: import_zod24.z.string(),
+      scriptName: import_zod24.z.string().optional()
     })
   ).optional()
 });
-var WorkflowsSharedOptionsSchema = import_zod21.z.object({
+var WorkflowsSharedOptionsSchema = import_zod24.z.object({
   workflowsPersist: PersistenceSchema
 });
 var WORKFLOWS_PLUGIN_NAME = "workflows";
@@ -13846,10 +14261,447 @@ var PLUGINS = {
   [RATELIMIT_PLUGIN_NAME]: RATELIMIT_PLUGIN,
   [ASSETS_PLUGIN_NAME]: ASSETS_PLUGIN,
   [WORKFLOWS_PLUGIN_NAME]: WORKFLOWS_PLUGIN,
-  [PIPELINES_PLUGIN_NAME]: PIPELINE_PLUGIN
+  [PIPELINES_PLUGIN_NAME]: PIPELINE_PLUGIN,
+  [SECRET_STORE_PLUGIN_NAME]: SECRET_STORE_PLUGIN,
+  [EMAIL_PLUGIN_NAME]: EMAIL_PLUGIN,
+  [ANALYTICS_ENGINE_PLUGIN_NAME]: ANALYTICS_ENGINE_PLUGIN
 };
 var PLUGIN_ENTRIES = Object.entries(PLUGINS);
 
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var import_node_crypto2 = __toESM(require("node:crypto"));
+var import_node_http = require("node:http");
+
+// ../../node_modules/.pnpm/get-port@7.1.0/node_modules/get-port/index.js
+var import_node_net = __toESM(require("node:net"), 1);
+var import_node_os = __toESM(require("node:os"), 1);
+var Locked = class extends Error {
+  constructor(port) {
+    super(`${port} is locked`);
+  }
+};
+var lockedPorts = {
+  old: /* @__PURE__ */ new Set(),
+  young: /* @__PURE__ */ new Set()
+};
+var releaseOldLockedPortsIntervalMs = 1e3 * 15;
+var timeout;
+var getLocalHosts = () => {
+  const interfaces = import_node_os.default.networkInterfaces();
+  const results = /* @__PURE__ */ new Set([void 0, "0.0.0.0"]);
+  for (const _interface of Object.values(interfaces)) {
+    for (const config of _interface) {
+      results.add(config.address);
+    }
+  }
+  return results;
+};
+var checkAvailablePort = (options) => new Promise((resolve2, reject) => {
+  const server = import_node_net.default.createServer();
+  server.unref();
+  server.on("error", reject);
+  server.listen(options, () => {
+    const { port } = server.address();
+    server.close(() => {
+      resolve2(port);
+    });
+  });
+});
+var getAvailablePort = async (options, hosts) => {
+  if (options.host || options.port === 0) {
+    return checkAvailablePort(options);
+  }
+  for (const host of hosts) {
+    try {
+      await checkAvailablePort({ port: options.port, host });
+    } catch (error) {
+      if (!["EADDRNOTAVAIL", "EINVAL"].includes(error.code)) {
+        throw error;
+      }
+    }
+  }
+  return options.port;
+};
+var portCheckSequence = function* (ports) {
+  if (ports) {
+    yield* ports;
+  }
+  yield 0;
+};
+async function getPorts(options) {
+  let ports;
+  let exclude = /* @__PURE__ */ new Set();
+  if (options) {
+    if (options.port) {
+      ports = typeof options.port === "number" ? [options.port] : options.port;
+    }
+    if (options.exclude) {
+      const excludeIterable = options.exclude;
+      if (typeof excludeIterable[Symbol.iterator] !== "function") {
+        throw new TypeError("The `exclude` option must be an iterable.");
+      }
+      for (const element of excludeIterable) {
+        if (typeof element !== "number") {
+          throw new TypeError("Each item in the `exclude` option must be a number corresponding to the port you want excluded.");
+        }
+        if (!Number.isSafeInteger(element)) {
+          throw new TypeError(`Number ${element} in the exclude option is not a safe integer and can't be used`);
+        }
+      }
+      exclude = new Set(excludeIterable);
+    }
+  }
+  if (timeout === void 0) {
+    timeout = setTimeout(() => {
+      timeout = void 0;
+      lockedPorts.old = lockedPorts.young;
+      lockedPorts.young = /* @__PURE__ */ new Set();
+    }, releaseOldLockedPortsIntervalMs);
+    if (timeout.unref) {
+      timeout.unref();
+    }
+  }
+  const hosts = getLocalHosts();
+  for (const port of portCheckSequence(ports)) {
+    try {
+      if (exclude.has(port)) {
+        continue;
+      }
+      let availablePort = await getAvailablePort({ ...options, port }, hosts);
+      while (lockedPorts.old.has(availablePort) || lockedPorts.young.has(availablePort)) {
+        if (port !== 0) {
+          throw new Locked(port);
+        }
+        availablePort = await getAvailablePort({ ...options, port }, hosts);
+      }
+      lockedPorts.young.add(availablePort);
+      return availablePort;
+    } catch (error) {
+      if (!["EADDRINUSE", "EACCES"].includes(error.code) && !(error instanceof Locked)) {
+        throw error;
+      }
+    }
+  }
+  throw new Error("No available ports found");
+}
+
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var import_ws4 = __toESM(require("ws"));
+
+// package.json
+var version = "0.0.0-e55f489db";
+
+// src/plugins/core/inspector-proxy/inspector-proxy.ts
+var import_node_assert4 = __toESM(require("node:assert"));
+var import_ws3 = __toESM(require("ws"));
+
+// src/plugins/core/inspector-proxy/devtools.ts
+function isDevToolsEvent(event, name) {
+  return typeof event === "object" && event !== null && "method" in event && event.method === name;
+}
+
+// src/plugins/core/inspector-proxy/inspector-proxy.ts
+var InspectorProxy = class {
+  #workerName;
+  #runtimeWs;
+  #devtoolsWs;
+  #devtoolsHaveFileSystemAccess = false;
+  constructor(workerName, runtimeWs) {
+    this.#workerName = workerName;
+    this.#runtimeWs = runtimeWs;
+    this.#runtimeWs.once("open", () => this.#handleRuntimeWebSocketOpen());
+  }
+  get workerName() {
+    return this.#workerName;
+  }
+  get path() {
+    return `/${this.#workerName}`;
+  }
+  onDevtoolsConnected(devtoolsWs, devtoolsHaveFileSystemAccess) {
+    if (this.#devtoolsWs) {
+      devtoolsWs.close(
+        1013,
+        "Too many clients; only one can be connected at a time"
+      );
+      return;
+    }
+    this.#devtoolsWs = devtoolsWs;
+    this.#devtoolsHaveFileSystemAccess = devtoolsHaveFileSystemAccess;
+    (0, import_node_assert4.default)(this.#devtoolsWs?.readyState === import_ws3.default.OPEN);
+    this.#devtoolsWs.on("error", console.error);
+    this.#devtoolsWs.once("close", () => {
+      if (this.#runtimeWs?.OPEN) {
+        this.#sendMessageToRuntime({
+          method: "Debugger.disable",
+          id: this.#nextCounter()
+        });
+      }
+      this.#devtoolsWs = void 0;
+    });
+    this.#devtoolsWs.on("message", (data) => {
+      const message = JSON.parse(data.toString());
+      (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+      this.#sendMessageToRuntime(message);
+    });
+  }
+  #runtimeMessageCounter = 1e8;
+  #nextCounter() {
+    return ++this.#runtimeMessageCounter;
+  }
+  #runtimeKeepAliveInterval;
+  #handleRuntimeWebSocketOpen() {
+    (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+    this.#runtimeWs.on("message", (data) => {
+      const message = JSON.parse(data.toString());
+      if (!this.#devtoolsWs) {
+        return;
+      }
+      if (isDevToolsEvent(message, "Debugger.scriptParsed")) {
+        return this.#handleRuntimeScriptParsed(message);
+      }
+      return this.#sendMessageToDevtools(message);
+    });
+    clearInterval(this.#runtimeKeepAliveInterval);
+    this.#runtimeKeepAliveInterval = setInterval(() => {
+      if (this.#runtimeWs?.OPEN) {
+        this.#sendMessageToRuntime({
+          method: "Runtime.getIsolateId",
+          id: this.#nextCounter()
+        });
+      }
+    }, 1e4);
+  }
+  #handleRuntimeScriptParsed(message) {
+    if (!this.#devtoolsHaveFileSystemAccess && message.params.sourceMapURL !== void 0 && // Don't try to find a sourcemap for e.g. node-internal: scripts
+    message.params.url.startsWith("file:")) {
+      const url24 = new URL(message.params.sourceMapURL, message.params.url);
+      if (url24.protocol === "file:") {
+        message.params.sourceMapURL = url24.href.replace(
+          "file:",
+          "wrangler-file:"
+        );
+      }
+    }
+    return this.#sendMessageToDevtools(message);
+  }
+  #sendMessageToDevtools(message) {
+    (0, import_node_assert4.default)(this.#devtoolsWs);
+    if (!this.#devtoolsWs.OPEN) {
+      this.#devtoolsWs.once(
+        "open",
+        () => this.#devtoolsWs?.send(JSON.stringify(message))
+      );
+      return;
+    }
+    this.#devtoolsWs.send(JSON.stringify(message));
+  }
+  #sendMessageToRuntime(message) {
+    (0, import_node_assert4.default)(this.#runtimeWs?.OPEN);
+    this.#runtimeWs.send(JSON.stringify(message));
+  }
+  async dispose() {
+    clearInterval(this.#runtimeKeepAliveInterval);
+    this.#devtoolsWs?.close();
+  }
+};
+
+// src/plugins/core/inspector-proxy/inspector-proxy-controller.ts
+var InspectorProxyController = class {
+  constructor(inspectorPortOption, log, workerNamesToProxy) {
+    this.inspectorPortOption = inspectorPortOption;
+    this.log = log;
+    this.workerNamesToProxy = workerNamesToProxy;
+    this.#inspectorPort = this.#getInspectorPortToUse();
+    this.#server = this.#initializeServer();
+    this.#runtimeConnectionEstablished = new DeferredPromise();
+  }
+  #runtimeConnectionEstablished;
+  #proxies = [];
+  #server;
+  #inspectorPort;
+  async #getInspectorPortToUse() {
+    return this.inspectorPortOption !== 0 ? this.inspectorPortOption : await getPorts();
+  }
+  async #initializeServer() {
+    const server = (0, import_node_http.createServer)(async (req, res) => {
+      const maybeJson = await this.#handleDevToolsJsonRequest(
+        req.headers.host ?? "localhost",
+        req.url ?? "/"
+      );
+      if (maybeJson !== null) {
+        res.setHeader("Content-Type", "application/json");
+        res.end(JSON.stringify(maybeJson));
+        return;
+      }
+      res.statusCode = 404;
+      res.end(null);
+    });
+    this.#initializeWebSocketServer(server);
+    const listeningPromise = new Promise(
+      (resolve2) => server.once("listening", resolve2)
+    );
+    server.listen(await this.#inspectorPort);
+    await listeningPromise;
+    return server;
+  }
+  async #restartServer() {
+    const server = await this.#server;
+    server.closeAllConnections();
+    await new Promise((resolve2, reject) => {
+      server.close((err) => err ? reject(err) : resolve2());
+    });
+    const listeningPromise = new Promise(
+      (resolve2) => server.once("listening", resolve2)
+    );
+    server.listen(await this.#inspectorPort);
+    await listeningPromise;
+  }
+  #initializeWebSocketServer(server) {
+    const devtoolsWebSocketServer = new import_ws4.WebSocketServer({ server });
+    devtoolsWebSocketServer.on("connection", (devtoolsWs, upgradeRequest) => {
+      const validationError = this.#validateDevToolsWebSocketUpgradeRequest(upgradeRequest);
+      if (validationError !== null) {
+        devtoolsWs.close();
+        return;
+      }
+      const proxy = this.#proxies.find(
+        ({ path: path34 }) => upgradeRequest.url === path34
+      );
+      if (!proxy) {
+        this.log.warn(
+          `Warning: An inspector connection was requested for the ${upgradeRequest.url} path but no such inspector exists`
+        );
+        devtoolsWs.close();
+        return;
+      }
+      proxy.onDevtoolsConnected(
+        devtoolsWs,
+        this.#checkIfDevtoolsHaveFileSystemAccess(upgradeRequest)
+      );
+    });
+  }
+  #validateDevToolsWebSocketUpgradeRequest(req) {
+    const hostHeader = req.headers.host;
+    if (hostHeader == null) return { statusText: null, status: 400 };
+    try {
+      const host = new URL(`http://${hostHeader}`);
+      if (!ALLOWED_HOST_HOSTNAMES.includes(host.hostname)) {
+        return { statusText: "Disallowed `Host` header", status: 401 };
+      }
+    } catch {
+      return { statusText: "Expected `Host` header", status: 400 };
+    }
+    let originHeader = req.headers.origin;
+    if (!originHeader && !req.headers["user-agent"]) {
+      originHeader = "http://localhost";
+    }
+    if (!originHeader) {
+      return { statusText: "Expected `Origin` header", status: 400 };
+    }
+    try {
+      const origin = new URL(originHeader);
+      const allowed = ALLOWED_ORIGIN_HOSTNAMES.some((rule) => {
+        if (typeof rule === "string") return origin.hostname === rule;
+        else return rule.test(origin.hostname);
+      });
+      if (!allowed) {
+        return { statusText: "Disallowed `Origin` header", status: 401 };
+      }
+    } catch {
+      return { statusText: "Expected `Origin` header", status: 400 };
+    }
+    return null;
+  }
+  #checkIfDevtoolsHaveFileSystemAccess(req) {
+    const userAgent = req.headers["user-agent"] ?? "";
+    const hasFileSystemAccess = !/mozilla/i.test(userAgent);
+    return hasFileSystemAccess;
+  }
+  #inspectorId = import_node_crypto2.default.randomUUID();
+  async #handleDevToolsJsonRequest(host, path34) {
+    if (path34 === "/json/version") {
+      return {
+        Browser: `miniflare/v${version}`,
+        // TODO: (someday): The DevTools protocol should match that of workerd.
+        // This could be exposed by the preview API.
+        "Protocol-Version": "1.3"
+      };
+    }
+    if (path34 === "/json" || path34 === "/json/list") {
+      return this.#proxies.map(({ workerName }) => {
+        const localHost = `${host}/${workerName}`;
+        const devtoolsFrontendUrl = `https://devtools.devprod.cloudflare.dev/js_app?theme=systemPreferred&debugger=true&ws=${localHost}`;
+        return {
+          id: `${this.#inspectorId}-${workerName}`,
+          type: "node",
+          // TODO: can we specify different type?
+          description: "workers",
+          webSocketDebuggerUrl: `ws://${localHost}`,
+          devtoolsFrontendUrl,
+          devtoolsFrontendUrlCompat: devtoolsFrontendUrl,
+          // Below are fields that are visible in the DevTools UI.
+          title: workerName.length === 0 || this.#proxies.length === 1 ? `Cloudflare Worker` : `Cloudflare Worker: ${workerName}`,
+          faviconUrl: "https://workers.cloudflare.com/favicon.ico"
+          // url: "http://" + localHost, // looks unnecessary
+        };
+      });
+    }
+    return null;
+  }
+  async getInspectorURL() {
+    return getWebsocketURL(await this.#inspectorPort);
+  }
+  async updateConnection(inspectorPortOption, runtimeInspectorPort) {
+    if (this.inspectorPortOption !== inspectorPortOption) {
+      this.inspectorPortOption = inspectorPortOption;
+      this.#inspectorPort = this.#getInspectorPortToUse();
+      await this.#restartServer();
+    }
+    const workerdInspectorJson = await fetch(
+      `http://127.0.0.1:${runtimeInspectorPort}/json`
+    ).then((resp) => resp.json());
+    this.#proxies = workerdInspectorJson.map(({ id }) => {
+      if (!id.startsWith("core:user:")) {
+        return;
+      }
+      const workerName = id.replace(/^core:user:/, "");
+      if (!this.workerNamesToProxy.has(workerName)) {
+        return;
+      }
+      return new InspectorProxy(
+        workerName,
+        new import_ws4.default(`ws://127.0.0.1:${runtimeInspectorPort}/${id}`)
+      );
+    }).filter(Boolean);
+    this.#runtimeConnectionEstablished.resolve();
+  }
+  async #waitForReady() {
+    await this.#runtimeConnectionEstablished;
+  }
+  get ready() {
+    return this.#waitForReady();
+  }
+  async dispose() {
+    await Promise.all(this.#proxies.map((proxy) => proxy.dispose()));
+    const server = await this.#server;
+    return new Promise((resolve2, reject) => {
+      server.close((err) => err ? reject(err) : resolve2());
+    });
+  }
+};
+function getWebsocketURL(port) {
+  return new URL(`ws://127.0.0.1:${port}`);
+}
+var ALLOWED_HOST_HOSTNAMES = ["127.0.0.1", "[::1]", "localhost"];
+var ALLOWED_ORIGIN_HOSTNAMES = [
+  "devtools.devprod.cloudflare.dev",
+  "cloudflare-devtools.pages.dev",
+  /^[a-z0-9]+\.cloudflare-devtools\.pages\.dev$/,
+  "127.0.0.1",
+  "[::1]",
+  "localhost"
+];
+
 // src/shared/mime-types.ts
 var compressedByCloudflareFL = /* @__PURE__ */ new Set([
   // list copied from https://developers.cloudflare.com/speed/optimization/content/brotli/content-compression/#:~:text=If%20supported%20by%20visitors%E2%80%99%20web%20browsers%2C%20Cloudflare%20will%20return%20Gzip%20or%20Brotli%2Dencoded%20responses%20for%20the%20following%20content%20types%3A
@@ -13907,6 +14759,9 @@ function isCompressedByCloudflareFL(contentTypeHeader) {
   return compressedByCloudflareFL.has(contentType);
 }
 
+// src/workers/secrets-store/constants.ts
+var ADMIN_API = "SecretsStoreSecret::admin_api";
+
 // src/zod-format.ts
 var import_assert11 = __toESM(require("assert"));
 var import_util4 = __toESM(require("util"));
@@ -13945,8 +14800,8 @@ function hasMultipleDistinctMessages(issues, atDepth) {
   }
   return false;
 }
-function annotate(groupCounts, annotated, input, issue, path30, groupId) {
-  if (path30.length === 0) {
+function annotate(groupCounts, annotated, input, issue, path34, groupId) {
+  if (path34.length === 0) {
     if (issue.code === "invalid_union") {
       const unionIssues = issue.unionErrors.flatMap(({ issues }) => issues);
       let newGroupId;
@@ -13992,7 +14847,7 @@ function annotate(groupCounts, annotated, input, issue, path30, groupId) {
       [kGroupId]: groupId
     };
   }
-  const [head, ...tail] = path30;
+  const [head, ...tail] = path34;
   (0, import_assert11.default)(isRecord(input), "Expected object/array input for nested issue");
   if (annotated === void 0) {
     if (Array.isArray(input)) {
@@ -14197,7 +15052,7 @@ function validateOptions(opts) {
   );
   const sharedRootPath = multipleWorkers ? getRootPath(sharedOpts) : "";
   const workerRootPaths = workerOpts.map(
-    (opts2) => import_path28.default.resolve(sharedRootPath, getRootPath(opts2))
+    (opts2) => import_path32.default.resolve(sharedRootPath, getRootPath(opts2))
   );
   try {
     for (const [key, plugin] of PLUGIN_ENTRIES) {
@@ -14213,7 +15068,7 @@ function validateOptions(opts) {
       }
     }
   } catch (e) {
-    if (e instanceof import_zod23.z.ZodError) {
+    if (e instanceof import_zod26.z.ZodError) {
       let formatted;
       try {
         formatted = formatZodError(e, opts);
@@ -14589,18 +15444,45 @@ var Miniflare2 = class _Miniflare {
   #liveReloadServer;
   #webSocketServer;
   #webSocketExtraHeaders;
+  #maybeInspectorProxyController;
+  #previousRuntimeInspectorPort;
   constructor(opts) {
     const [sharedOpts, workerOpts] = validateOptions(opts);
     this.#sharedOpts = sharedOpts;
     this.#workerOpts = workerOpts;
+    const workerNamesToProxy = new Set(
+      this.#workerOpts.filter(({ core: { unsafeInspectorProxy } }) => !!unsafeInspectorProxy).map((w) => w.core.name ?? "")
+    );
+    const enableInspectorProxy = workerNamesToProxy.size > 0;
+    if (enableInspectorProxy) {
+      if (this.#sharedOpts.core.inspectorPort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_MISSING_INSPECTOR_PROXY_PORT",
+          "inspector proxy requested but without an inspectorPort specified"
+        );
+      }
+    }
     if (maybeInstanceRegistry !== void 0) {
       const object = { name: "Miniflare", stack: "" };
       Error.captureStackTrace(object, _Miniflare);
       maybeInstanceRegistry.set(this, object.stack);
     }
     this.#log = this.#sharedOpts.core.log ?? new NoOpLog();
-    this.#liveReloadServer = new import_ws3.WebSocketServer({ noServer: true });
-    this.#webSocketServer = new import_ws3.WebSocketServer({
+    if (enableInspectorProxy) {
+      if (this.#sharedOpts.core.inspectorPort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_MISSING_INSPECTOR_PROXY_PORT",
+          "inspector proxy requested but without an inspectorPort specified"
+        );
+      }
+      this.#maybeInspectorProxyController = new InspectorProxyController(
+        this.#sharedOpts.core.inspectorPort,
+        this.#log,
+        workerNamesToProxy
+      );
+    }
+    this.#liveReloadServer = new import_ws5.WebSocketServer({ noServer: true });
+    this.#webSocketServer = new import_ws5.WebSocketServer({
       noServer: true,
       // Disable automatic handling of `Sec-WebSocket-Protocol` header,
       // Cloudflare Workers require users to include this header themselves in
@@ -14619,7 +15501,7 @@ var Miniflare2 = class _Miniflare {
         }
       }
     });
-    this.#tmpPath = import_path28.default.join(
+    this.#tmpPath = import_path32.default.join(
       import_os2.default.tmpdir(),
       `miniflare-${import_crypto3.default.randomBytes(16).toString("hex")}`
     );
@@ -14627,7 +15509,7 @@ var Miniflare2 = class _Miniflare {
     this.#removeExitHook = (0, import_exit_hook.default)(() => {
       void this.#runtime?.dispose();
       try {
-        import_fs24.default.rmSync(this.#tmpPath, { force: true, recursive: true });
+        import_fs28.default.rmSync(this.#tmpPath, { force: true, recursive: true });
       } catch (e) {
         this.#log.debug(`Unable to remove temporary directory: ${String(e)}`);
       }
@@ -14664,7 +15546,7 @@ var Miniflare2 = class _Miniflare {
       if (!(response instanceof Response)) {
         response = new Response(response.body, response);
       }
-      return import_zod23.z.instanceof(Response).parse(response);
+      return import_zod26.z.instanceof(Response).parse(response);
     } catch (e) {
       return new Response(e?.stack ?? e, { status: 500 });
     }
@@ -14687,11 +15569,11 @@ var Miniflare2 = class _Miniflare {
     (0, import_assert12.default)(!Array.isArray(cfBlob));
     const cf = cfBlob ? JSON.parse(cfBlob) : void 0;
     const originalUrl = headers.get(CoreHeaders.ORIGINAL_URL);
-    const url20 = new URL(originalUrl ?? req.url ?? "", "http://localhost");
+    const url24 = new URL(originalUrl ?? req.url ?? "", "http://localhost");
     headers.delete(CoreHeaders.ORIGINAL_URL);
     const noBody = req.method === "GET" || req.method === "HEAD";
     const body = noBody ? void 0 : safeReadableStreamFrom(req);
-    const request = new Request(url20, {
+    const request = new Request(url24, {
       method: req.method,
       headers,
       body,
@@ -14712,13 +15594,13 @@ var Miniflare2 = class _Miniflare {
           request,
           this
         );
-      } else if (url20.pathname === "/core/error") {
+      } else if (url24.pathname === "/core/error") {
         response = await handlePrettyErrorRequest(
           this.#log,
           this.#workerSrcOpts,
           request
         );
-      } else if (url20.pathname === "/core/log") {
+      } else if (url24.pathname === "/core/log") {
         const level = parseInt(request.headers.get(SharedHeaders.LOG_LEVEL));
         (0, import_assert12.default)(
           0 /* NONE */ <= level && level <= 5 /* VERBOSE */,
@@ -14729,6 +15611,17 @@ var Miniflare2 = class _Miniflare {
         if (!$.enabled) message = stripAnsi(message);
         this.#log.logWithLevel(logLevel, message);
         response = new Response(null, { status: 204 });
+      } else if (url24.pathname === "/core/store-temp-file") {
+        const prefix = url24.searchParams.get("prefix");
+        const folder = prefix ? `files/${prefix}` : "files";
+        await (0, import_promises13.mkdir)(import_path32.default.join(this.#tmpPath, folder), { recursive: true });
+        const filePath = import_path32.default.join(
+          this.#tmpPath,
+          folder,
+          `${import_crypto3.default.randomUUID()}.${url24.searchParams.get("extension") ?? "txt"}`
+        );
+        await (0, import_promises13.writeFile)(filePath, await request.text());
+        response = new Response(filePath, { status: 200 });
       }
     } catch (e) {
       this.#log.error(e);
@@ -14911,14 +15804,13 @@ var Miniflare2 = class _Miniflare {
               );
               if (maybeAssetTargetService && !binding.service?.entrypoint) {
                 (0, import_assert12.default)(binding.service?.name);
-                binding.service.name = this.#sharedOpts.core.unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${targetWorkerName}` : `${ROUTER_SERVICE_NAME}:${targetWorkerName}`;
+                binding.service.name = `${RPC_PROXY_SERVICE_NAME}:${targetWorkerName}`;
               }
             }
           }
         }
       }
       const unsafeStickyBlobs = sharedOpts.core.unsafeStickyBlobs ?? false;
-      const unsafeEnableAssetsRpc = sharedOpts.core.unsafeEnableAssetsRpc ?? false;
       const unsafeEphemeralDurableObjects = workerOpts.core.unsafeEphemeralDurableObjects ?? false;
       const pluginServicesOptionsBase = {
         log: this.#log,
@@ -14933,8 +15825,7 @@ var Miniflare2 = class _Miniflare {
         durableObjectClassNames,
         unsafeEphemeralDurableObjects,
         queueProducers,
-        queueConsumers,
-        unsafeEnableAssetsRpc
+        queueConsumers
       };
       for (const [key, plugin] of PLUGIN_ENTRIES) {
         const pluginServicesExtensions = await plugin.getServices({
@@ -14982,13 +15873,16 @@ var Miniflare2 = class _Miniflare {
           directSocket.host,
           directSocket.port
         );
+        const service = workerOpts.assets.assets && entrypoint === "default" ? {
+          name: `${RPC_PROXY_SERVICE_NAME}:${workerOpts.core.name}`
+        } : {
+          name: getUserServiceName(workerName),
+          entrypoint: entrypoint === "default" ? void 0 : entrypoint
+        };
         sockets.push({
           name,
           address,
-          service: {
-            name: getUserServiceName(workerName),
-            entrypoint: entrypoint === "default" ? void 0 : entrypoint
-          },
+          service,
           http: {
             style: directSocket.proxy ? HttpOptions_Style.PROXY : void 0,
             cfBlobHeader: CoreHeaders.CF_BLOB,
@@ -15001,15 +15895,15 @@ var Miniflare2 = class _Miniflare {
       sharedOptions: sharedOpts.core,
       allWorkerRoutes,
       /*
-       * - if Workers + Assets project but NOT Vitest, point to Router Worker or
-       *   Proxy Worker depending on whether experimental flag `unsafeEnableAssetsRpc`
-       *   was set
-       * - if Vitest with assets, the self binding on the test runner will point to
-       *   Router Worker
+       * - if Workers + Assets project but NOT Vitest, the fallback Worker (see
+       *   `MINIFLARE_USER_FALLBACK`) should point to the (assets) RPC Proxy Worker
+       * - if Vitest with assets, the fallback Worker should point to the Vitest
+       *   runner Worker, while the SELF binding on the test runner will point to
+       *   the (assets) RPC Proxy Worker
        */
       fallbackWorkerName: this.#workerOpts[0].assets.assets && !this.#workerOpts[0].core.name?.startsWith(
         "vitest-pool-workers-runner-"
-      ) ? this.#sharedOpts.core.unsafeEnableAssetsRpc ? `${RPC_PROXY_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : `${ROUTER_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : getUserServiceName(this.#workerOpts[0].core.name),
+      ) ? `${RPC_PROXY_SERVICE_NAME}:${this.#workerOpts[0].core.name}` : getUserServiceName(this.#workerOpts[0].core.name),
       loopbackPort,
       log: this.#log,
       proxyBindings
@@ -15060,14 +15954,19 @@ var Miniflare2 = class _Miniflare {
       configuredHost,
       this.#sharedOpts.core.port
     );
-    let inspectorAddress;
+    let runtimeInspectorAddress;
     if (this.#sharedOpts.core.inspectorPort !== void 0) {
-      inspectorAddress = this.#getSocketAddress(
+      let runtimeInspectorPort = this.#sharedOpts.core.inspectorPort;
+      if (this.#maybeInspectorProxyController !== void 0) {
+        runtimeInspectorPort = 0;
+      }
+      runtimeInspectorAddress = this.#getSocketAddress(
         kInspectorSocket,
-        this.#previousSharedOpts?.core.inspectorPort,
+        this.#previousRuntimeInspectorPort,
         "localhost",
-        this.#sharedOpts.core.inspectorPort
+        runtimeInspectorPort
       );
+      this.#previousRuntimeInspectorPort = runtimeInspectorPort;
     }
     const loopbackAddress = `${maybeGetLocallyAccessibleHost(configuredHost) ?? getURLSafeHost(configuredHost)}:${loopbackPort}`;
     const runtimeOpts = {
@@ -15075,7 +15974,7 @@ var Miniflare2 = class _Miniflare {
       entryAddress,
       loopbackAddress,
       requiredSockets,
-      inspectorAddress,
+      inspectorAddress: runtimeInspectorAddress,
       verbose: this.#sharedOpts.core.verbose,
       handleRuntimeStdio: this.#sharedOpts.core.handleRuntimeStdio
     };
@@ -15091,6 +15990,20 @@ var Miniflare2 = class _Miniflare {
       );
     }
     this.#socketPorts = maybeSocketPorts;
+    if (this.#maybeInspectorProxyController !== void 0 && this.#sharedOpts.core.inspectorPort !== void 0) {
+      const maybePort = this.#socketPorts.get(kInspectorSocket);
+      if (maybePort === void 0) {
+        throw new MiniflareCoreError(
+          "ERR_RUNTIME_FAILURE",
+          "Unable to access the runtime inspector socket."
+        );
+      } else {
+        await this.#maybeInspectorProxyController.updateConnection(
+          this.#sharedOpts.core.inspectorPort,
+          maybePort
+        );
+      }
+    }
     const entrySocket = config.sockets?.[0];
     const secure = entrySocket !== void 0 && "https" in entrySocket;
     const previousEntryURL = this.#runtimeEntryURL;
@@ -15122,10 +16035,12 @@ var Miniflare2 = class _Miniflare {
     if (!this.#runtimeMutex.hasWaiting) {
       const ready = initial ? "Ready" : "Updated and ready";
       const urlSafeHost = getURLSafeHost(configuredHost);
-      this.#log.info(
-        `${ready} on ${secure ? "https" : "http"}://${urlSafeHost}:${entryPort}`
-      );
-      if (initial) {
+      if (this.#sharedOpts.core.logRequests) {
+        this.#log.info(
+          `${ready} on ${secure ? "https" : "http"}://${urlSafeHost}:${entryPort}`
+        );
+      }
+      if (initial && this.#sharedOpts.core.logRequests) {
         const hosts = [];
         if (configuredHost === "::" || configuredHost === "*") {
           hosts.push("localhost");
@@ -15145,6 +16060,7 @@ var Miniflare2 = class _Miniflare {
     await this.#initPromise;
     await this.#runtimeMutex.drained();
     if (disposing) return new URL("http://[100::]/");
+    await this.#maybeInspectorProxyController?.ready;
     this.#checkDisposed();
     (0, import_assert12.default)(this.#runtimeEntryURL !== void 0);
     return new URL(this.#runtimeEntryURL.toString());
@@ -15160,6 +16076,9 @@ var Miniflare2 = class _Miniflare {
   async getInspectorURL() {
     this.#checkDisposed();
     await this.ready;
+    if (this.#maybeInspectorProxyController !== void 0) {
+      return this.#maybeInspectorProxyController.getInspectorURL();
+    }
     (0, import_assert12.default)(this.#socketPorts !== void 0);
     const maybePort = this.#socketPorts.get(kInspectorSocket);
     if (maybePort === void 0) {
@@ -15220,11 +16139,11 @@ var Miniflare2 = class _Miniflare {
     (0, import_assert12.default)(this.#runtimeEntryURL !== void 0);
     (0, import_assert12.default)(this.#runtimeDispatcher !== void 0);
     const forward = new Request(input, init2);
-    const url20 = new URL(forward.url);
+    const url24 = new URL(forward.url);
     const actualRuntimeOrigin = this.#runtimeEntryURL.origin;
-    const userRuntimeOrigin = url20.origin;
-    url20.protocol = this.#runtimeEntryURL.protocol;
-    url20.host = this.#runtimeEntryURL.host;
+    const userRuntimeOrigin = url24.origin;
+    url24.protocol = this.#runtimeEntryURL.protocol;
+    url24.host = this.#runtimeEntryURL.host;
     if (forward.body !== null && forward.headers.get("Content-Length") === "0") {
       forward.headers.delete("Content-Length");
     }
@@ -15238,7 +16157,7 @@ var Miniflare2 = class _Miniflare {
     );
     const forwardInit = forward;
     forwardInit.dispatcher = dispatcher;
-    const response = await fetch3(url20, forwardInit);
+    const response = await fetch4(url24, forwardInit);
     const stack = response.headers.get(CoreHeaders.ERROR_STACK);
     if (response.status === 500 && stack !== null) {
       const caught = JsonErrorSchema.parse(await response.json());
@@ -15354,6 +16273,18 @@ var Miniflare2 = class _Miniflare {
   getKVNamespace(bindingName, workerName) {
     return this.#getProxy(KV_PLUGIN_NAME, bindingName, workerName);
   }
+  getSecretsStoreSecretAPI(bindingName, workerName) {
+    return this.#getProxy(
+      SECRET_STORE_PLUGIN_NAME,
+      bindingName,
+      workerName
+    ).then((binding) => {
+      return binding[ADMIN_API];
+    });
+  }
+  getSecretsStoreSecret(bindingName, workerName) {
+    return this.#getProxy(SECRET_STORE_PLUGIN_NAME, bindingName, workerName);
+  }
   getQueueProducer(bindingName, workerName) {
     return this.#getProxy(QUEUES_PLUGIN_NAME, bindingName, workerName);
   }
@@ -15386,14 +16317,19 @@ var Miniflare2 = class _Miniflare {
       await this.#proxyClient?.dispose();
       await this.#runtime?.dispose();
       await this.#stopLoopbackServer();
-      await import_fs24.default.promises.rm(this.#tmpPath, { force: true, recursive: true });
+      await import_fs28.default.promises.rm(this.#tmpPath, { force: true, recursive: true });
+      await this.#maybeInspectorProxyController?.dispose();
       maybeInstanceRegistry?.delete(this);
     }
   }
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ANALYTICS_ENGINE_PLUGIN,
+  ANALYTICS_ENGINE_PLUGIN_NAME,
   ASSETS_PLUGIN,
+  AnalyticsEngineSchemaOptionsSchema,
+  AnalyticsEngineSchemaSharedOptionsSchema,
   AssetsOptionsSchema,
   CACHE_PLUGIN,
   CACHE_PLUGIN_NAME,
@@ -15420,6 +16356,9 @@ var Miniflare2 = class _Miniflare {
   DispatchFetchDispatcher,
   DurableObjectsOptionsSchema,
   DurableObjectsSharedOptionsSchema,
+  EMAIL_PLUGIN,
+  EMAIL_PLUGIN_NAME,
+  EmailOptionsSchema,
   ErrorEvent,
   File,
   FormData,
@@ -15441,6 +16380,7 @@ var Miniflare2 = class _Miniflare {
   LiteralSchema,
   Log,
   LogLevel,
+  MAX_BULK_GET_KEYS,
   MessageEvent,
   Miniflare,
   MiniflareCoreError,
@@ -15489,11 +16429,15 @@ var Miniflare2 = class _Miniflare {
   Response,
   RouterError,
   Runtime,
+  SECRET_STORE_PLUGIN,
+  SECRET_STORE_PLUGIN_NAME,
   SERVICE_ENTRY,
   SERVICE_LOOPBACK,
   SITES_NO_CACHE_PREFIX,
   SOCKET_ENTRY,
   SOCKET_ENTRY_LOCAL,
+  SecretsStoreSecretsOptionsSchema,
+  SecretsStoreSecretsSharedOptionsSchema,
   SharedBindings,
   SharedHeaders,
   SiteBindings,