void 1.1.11 → 1.2.0

package/dist/{deploy-DsW-PrRQ.mjs → deploy-7H32EnUs.mjs}

@@ -1,47 +1,49 @@
-import { n as __toESM, t as __commonJSMin } from "./rolldown-runtime-DXIUcv95.mjs";
+import { n as __toESM, t as __commonJSMin } from "./rolldown-runtime-3h0WiCiA.mjs";
 import { a as join, c as resolve, n as dirname, o as normalize, r as extname, s as relative, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { t as require_picocolors } from "./picocolors-BTps1_gs.mjs";
-import { r as detectFramework } from "./plugin-inference-Bekzjuqw.mjs";
+import { t as require_picocolors } from "./picocolors-BsDfhxIw.mjs";
+import { r as detectFramework } from "./plugin-inference-DUjCd55H.mjs";
 import { n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-DGu_QZ_Q.mjs";
-import { c as isNodeTarget, d as readConfig, f as resolveBindingNames } from "./config-D26zcdKy.mjs";
-import { a as hasSandboxSqliteMigration, c as sandboxContainerConfig, i as assertSandboxNamespaceConfig, o as requiresSandboxPlatformImage, r as SANDBOX_MIGRATION_TAG, s as resolveSandboxConfig, t as analyzeApplicationSync } from "./application-analysis-D7nNmNJb.mjs";
+import { m as resolveBindingNames, p as readConfig, u as isNodeTarget } from "./config-DHgSEWT7.mjs";
+import { a as hasSandboxSqliteMigration, c as sandboxContainerConfig, i as assertSandboxNamespaceConfig, o as requiresSandboxPlatformImage, r as SANDBOX_MIGRATION_TAG, s as resolveSandboxConfig, t as analyzeApplicationSync } from "./application-analysis-fEqoSeMp.mjs";
 import { t as collectMigrations } from "./collect-Dew86qce.mjs";
-import { o as validateSsrEntry } from "./entry-B_0IhV64.mjs";
-import { r as hasEmailHandlers } from "./email-BcjSyAL0.mjs";
-import { i as voidWarn } from "./log-vqY3pqwI.mjs";
+import { o as validateSsrEntry } from "./entry-BEM8ZuGP.mjs";
+import { r as hasEmailHandlers } from "./email-B9ayYQEG.mjs";
+import { i as voidWarn } from "./log-BMwmN5Ae.mjs";
 import { a as resolveDistDir, c as hasDocumentRoutes, l as resolveAssetConfig, n as collectRevalidate, o as resolveWorkerDirName, r as hasRevalidate, s as hasApiRoutes } from "./isr-config-fZaJJ8t7.mjs";
 import { t as writeFileAtomic } from "./atomic-write-Dq6R0BPN.mjs";
 import { s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
 import { c as writeDeploymentPlatform, n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { n as readGeneratedWranglerConfigFile } from "./generated-wrangler-config-DeWj5F9Y.mjs";
-import { i as persistCloudflareConfig, r as materializeCloudflareConfig, s as stashCloudflareDeployPointer } from "./cloudflare-config-rdFOys4X.mjs";
-import { C as readWranglerManagedQueueCleanupCandidates, E as resolveLiveBindingConfig, M as writeWranglerPublishedTrafficSnapshot, O as syncWranglerDurableObjects, a as LIVE_MIGRATION_TAG, c as bindingEntriesForField, h as nextDurableObjectMigrationTag, j as writeProvisionedWranglerConfig, k as syncWranglerWebSockets, m as hasDurableObjectSqliteMigration, o as acknowledgeWranglerManagedQueueRemovals, r as FRIENDLY_BINDING_NAMES, v as readExistingLiveBindingConfig, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-C9XSzrju.mjs";
+import { i as persistCloudflareConfig, r as materializeCloudflareConfig, s as stashCloudflareDeployPointer } from "./cloudflare-config-DchHxPTo.mjs";
+import { A as syncWranglerWebSockets, C as readWranglerManagedQueueCleanupCandidates, D as sameMigrationsDir, E as resolveLiveBindingConfig, M as writeProvisionedWranglerConfig, N as writeWranglerPublishedTrafficSnapshot, a as LIVE_MIGRATION_TAG, c as bindingEntriesForField, h as nextDurableObjectMigrationTag, k as syncWranglerDurableObjects, m as hasDurableObjectSqliteMigration, o as acknowledgeWranglerManagedQueueRemovals, r as FRIENDLY_BINDING_NAMES, v as readExistingLiveBindingConfig, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-F96NnLyb.mjs";
 import { r as trustedCloudflareWorkerAccessHeaders, t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
 import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
 import { a as getApiUrl, c as getToken, l as getTokenSource } from "./auth-B6iOCjKI.mjs";
-import { A as confirm, K as select, L as log, tt as isCancel } from "./dist-BVdsO7Py.mjs";
-import { o as formatCount, p as note, r as createSpinner, u as getErrorMessage } from "./output-Ba6ZbrzY.mjs";
 import { c as resolveRemoteMode, t as CLOUDFLARE_DEPLOY_BUILD_ENV } from "./env-BJjULvL0.mjs";
-import { a as buildEnv, n as readVersionMetadataBinding, r as selectNativeVersionMetadataBinding, t as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV } from "./version-metadata-B1Bm2wSq.mjs";
-import { a as emailConfigInputs, c as renderAddressMap, d as collectPrerenderPathsNode, f as prerenderPages, i as createNodeEmailDns, l as renderEmailChecklist, n as SEND_EMAIL_BINDING, o as preflightEmail, p as prerenderPagesNode, r as applyEmailSetup, t as EMAIL_FROM_VAR, u as collectPrerenderPaths } from "./email-cloudflare-etpKiITL.mjs";
-import { n as completeApplicationAnalysis, t as analyzeApplication } from "./application-routing-CZH66gXn.mjs";
+import { a as buildEnv, n as readVersionMetadataBinding, r as selectNativeVersionMetadataBinding, t as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV } from "./version-metadata-tS39iW09.mjs";
+import { a as emailConfigInputs, c as renderAddressMap, d as collectPrerenderPathsNode, f as prerenderPages, i as createNodeEmailDns, l as renderEmailChecklist, n as SEND_EMAIL_BINDING, o as preflightEmail, p as prerenderPagesNode, r as applyEmailSetup, t as EMAIL_FROM_VAR, u as collectPrerenderPaths } from "./email-cloudflare-D03g2TkS.mjs";
+import { n as completeApplicationAnalysis, t as analyzeApplication } from "./application-routing-DAhNP4u3.mjs";
+import { a as record, i as migrateBuiltWranglerConfig, n as prepareCfFrameworkBuildOutput, r as prepareCfStaticBuildOutput, t as prepareCfBuildOutput } from "./cf-build-output-BhVxldCw.mjs";
 import { i as validateMigrations, t as assertJournalCoherence } from "./validate-CnZPMq4q.mjs";
+import { A as confirm, K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
 import { r as getPackageDir } from "./agents-CuNtT0D_.mjs";
-import { a as isExpiredTokenError, r as PlatformClient } from "./client-GuSO3v_x.mjs";
-import { t as getRequestedProjectSlug } from "./resolve-project-WpwkCB_c.mjs";
-import { a as FRAMEWORK_PRESETS, c as hasBackendFiles, i as isCleanCloudflareExit, l as resolveCloudflareOperationArgv, o as detectPreset, s as formatProjectCommand, t as createCloudflareProcessRunner, u as resolveProjectCommand } from "./cloudflare-process-CZJ4viYl.mjs";
-import { f as listSelfHostSecretNames, h as selfHostSchemaFailureMessage, i as SelfHostSecretListError, l as dischargeSelfHostEnvContext, n as SelfHostFirstDeployError, p as readEmittedWorkerVars, r as SelfHostSchemaError, s as deriveSelfHostEnvContextFromVars, t as SelfHostEnvValidationError } from "./env-validation-D_KyMdab.mjs";
-import { a as needsWrapper, r as cleanupWrapper, t as bundleEntry } from "./wrapper-BOigE1xJ.mjs";
-import { A as resolveDeployLiveBindingConfig, C as generateDeployWrapperIfNeeded, D as hasPrerenderSources, E as hasNonPageBackend, F as resolveStaticDeployPreset, I as toManifestSchedulesAndQueues, L as validateDeployMigrations, M as resolveDeployWranglerCompat, N as resolveFullDeployBuildCommand, O as log$1, P as resolveStaticBuildCommand, S as ensureManagedHyperdrive, T as getGitCommit, _ as hasDeploySchemaDrift, a as collectAndHashAssets, b as assertWorkerMainUploaded, c as formatDeploySummary, d as mergeAndLintRoutingRules, f as streamDirectR2Deploy, g as getDeploySchemaDriftMessage, h as assertDeploySchemaDriftFree, i as buildStaticManifest, j as resolveDeployWorkerMain, k as promptDeployProjectConfig, l as printDeployContext, m as warnUnpublishedRouting, n as runStaticDeploy, o as collectWorkerFiles, p as warnIgnoredNotFoundForFramework, r as buildFrameworkManifest, s as detectNonSpaFallbackWarning, t as assembleVoidManifest, u as printDeploySuccess, v as assertEnvSchemaValid, w as getExitCode, x as createProjectFromSlug, y as assertProjectDeployAccess } from "./deploy-managed-static-Dqz06S2u.mjs";
-import { a as checkCloudflareProvisionDrift, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionCloudflareResources, i as assertValidResourceName, m as isRealKvId, s as deleteEnvVarCaseAware } from "./provision-BuifYvLc.mjs";
-import { c as scrubWranglerAuthCredentials, n as buildSchemaProbeEnv, o as resolveDeployTransport, r as deployChildEnv, s as scrubManagedDeployBuildMarkers, t as MANAGED_DEPLOY_BUILD_ENV } from "./deploy-transport-nY3vLXPL.mjs";
-import { i as safePositional, n as getVoidUserAgent, r as readCfUploadOutput, t as getCfCliVersion } from "./cf-user-agent-ChjQp2MU.mjs";
-import { t as promptForLoginToken } from "./login-BJvGW5Eu.mjs";
-import { a as record, i as migrateBuiltWranglerConfig, n as prepareCfFrameworkBuildOutput, r as prepareCfStaticBuildOutput, t as prepareCfBuildOutput } from "./cf-build-output-Bc8i3dzE.mjs";
-import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, t as CloudflareAuthenticationError } from "./cloudflare-auth-DSvBc1Gu.mjs";
-import { a as createCloudflareEmptyDomainPublisher, i as createCloudflareEmptyCronPublisher } from "./cloudflare-operations-DH3GedbV.mjs";
+import { a as isExpiredTokenError, r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { o as formatCount, p as note, r as createSpinner, u as getErrorMessage } from "./output-BpgYODYx.mjs";
+import { t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
+import { i as safePositional, r as readCfUploadOutput, t as CF_VERSION_SOURCE_MAX_OUTPUT_BYTES } from "./cf-command-values-ByHk0xg4.mjs";
+import { a as FRAMEWORK_PRESETS, c as hasBackendFiles, i as isCleanCloudflareExit, l as resolveCloudflareOperationArgv, o as detectPreset, s as formatProjectCommand, t as createCloudflareProcessRunner, u as resolveProjectCommand } from "./cloudflare-process-8jEYIeim.mjs";
+import { f as listSelfHostSecretNames, h as selfHostSchemaFailureMessage, i as SelfHostSecretListError, l as dischargeSelfHostEnvContext, n as SelfHostFirstDeployError, p as readEmittedWorkerVars, r as SelfHostSchemaError, s as deriveSelfHostEnvContextFromVars, t as SelfHostEnvValidationError } from "./env-validation-Dwq3PJzK.mjs";
+import { a as needsWrapper, r as cleanupWrapper, t as bundleEntry } from "./wrapper-D3sZyh2C.mjs";
+import { A as resolveDeployLiveBindingConfig, C as generateDeployWrapperIfNeeded, D as hasPrerenderSources, E as hasNonPageBackend, F as resolveStaticDeployPreset, I as toManifestSchedulesAndQueues, L as validateDeployMigrations, M as resolveDeployWranglerCompat, N as resolveFullDeployBuildCommand, O as log$1, P as resolveStaticBuildCommand, S as ensureManagedHyperdrive, T as getGitCommit, _ as hasDeploySchemaDrift, a as collectAndHashAssets, b as assertWorkerMainUploaded, c as formatDeploySummary, d as mergeAndLintRoutingRules, f as streamDirectR2Deploy, g as getDeploySchemaDriftMessage, h as assertDeploySchemaDriftFree, i as buildStaticManifest, j as resolveDeployWorkerMain, k as promptDeployProjectConfig, l as printDeployContext, m as warnUnpublishedRouting, n as runStaticDeploy, o as collectWorkerFiles, p as warnIgnoredNotFoundForFramework, r as buildFrameworkManifest, s as detectNonSpaFallbackWarning, t as assembleVoidManifest, u as printDeploySuccess, v as assertEnvSchemaValid, w as getExitCode, x as createProjectFromSlug, y as assertProjectDeployAccess } from "./deploy-managed-static-DlvcvnQT.mjs";
+import { a as checkCloudflareProvisionDrift, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionCloudflareResources, i as assertValidResourceName, m as isRealKvId, s as deleteEnvVarCaseAware } from "./provision-DtROpNNI.mjs";
+import { c as scrubWranglerAuthCredentials, n as buildSchemaProbeEnv, o as resolveDeployTransport, r as deployChildEnv, s as scrubManagedDeployBuildMarkers, t as MANAGED_DEPLOY_BUILD_ENV } from "./deploy-transport-BzGEj0Ge.mjs";
+import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareObservability } from "./cf-worker-settings-BECvvTVd.mjs";
+import { t as sanitizeTerminalLogText } from "./terminal-log-text-D9ACPOuG.mjs";
+import { t as promptForLoginToken } from "./login-Cttnagmm.mjs";
+import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, t as CloudflareAuthenticationError } from "./cloudflare-auth-Byo_0_N9.mjs";
+import { a as createCloudflareEmptyDomainPublisher, i as createCloudflareEmptyCronPublisher } from "./cloudflare-operations-Dh9dEHJj.mjs";
 import { n as openMigrationValidationDatabase, t as SqliteMigrationError } from "./sqlite-validation-BzKMWnO4.mjs";
-import { a as discoverFrameworkWranglerFiles, i as writeVoidProjectConfig, t as migrateLegacyVoidConfig } from "./migrate-8rk56vV8.mjs";
+import { a as discoverFrameworkWranglerFiles, i as writeVoidProjectConfig, t as migrateLegacyVoidConfig } from "./migrate-DyT2jJ8y.mjs";
 import { a as runMySqlMigrations } from "./runner-mysql-BWmbk5IE.mjs";
 import { i as runPgMigrations } from "./runner-pg-Cr3qrqi4.mjs";
 import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
@@ -54,9 +56,10 @@ import { homedir, tmpdir } from "node:os";
 import { isDeepStrictEqual } from "node:util";
 import { applyEdits, modify, parse } from "jsonc-parser";
 import { execFile, execSync, spawn } from "node:child_process";
-import { CloudflareWorkerInspectionError, activateCloudflareVersion, assertCloudflareBindingsPreserved, assertCloudflareDurableObjectLifecycleSupported, assertExistingCloudflareConfig, encodeCloudflareVersionMessage, extractWorkersDevSubdomain, normalizeWorkersDevSubdomain, parseRootWranglerConfig, parseRootWranglerConfig as parseRootWranglerConfig$1, readBindingFieldPresence, readCloudflareTriggerConfig, readConfigEntryString, readExistingCloudflareWorker, readStoredResourceName, readWranglerTopLevelString, renderCloudflareStaticEntry, resolveD1MigrateTarget, stageCloudflareStaticAssets, writeCloudflareFrameworkDeployConfig, writeCloudflareStaticDeployConfig } from "@void/deploy-cloudflare";
-import ignore from "ignore";
 import { getWorkerAssetsDir, getWorkerBundleDir, getWorkerConfigPath, readBuildOutput } from "@cloudflare/build-output-utils";
+import { convertToWranglerConfig } from "@cloudflare/config";
+import ignore from "ignore";
+import { CloudflareWorkerInspectionError, activateCloudflareVersion, assertCloudflareBindingsPreserved, assertCloudflareDurableObjectLifecycleSupported, assertExistingCloudflareConfig, cloudflareCommandDiagnostic, encodeCloudflareVersionMessage, extractWorkersDevSubdomain, normalizeWorkersDevSubdomain, parseRootWranglerConfig, parseRootWranglerConfig as parseRootWranglerConfig$1, readBindingFieldPresence, readCloudflareTriggerConfig, readConfigEntryString, readExistingCloudflareWorker, readStoredResourceName, readWranglerTopLevelString, renderCloudflareStaticEntry, resolveD1MigrateTarget, stageCloudflareStaticAssets, writeCloudflareFrameworkDeployConfig, writeCloudflareStaticDeployConfig } from "@void/deploy-cloudflare";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import mime from "mime";
 import { Minimatch } from "minimatch";
@@ -1898,6 +1901,14 @@ function bindingsFromOutput(env, workerName, activeSecrets, explicitSecrets) {
 					...value.deliveryDelay === void 0 ? {} : { delivery_delay: value.deliveryDelay }
 				});
 				break;
+			case "rate-limit":
+				bindings.push({
+					name,
+					type: "ratelimit",
+					namespace_id: requiredString(value.namespace, name),
+					simple: value.simple
+				});
+				break;
 			case "ai":
 			case "browser":
 			case "images":
@@ -1983,11 +1994,25 @@ function bindingsFromOutput(env, workerName, activeSecrets, explicitSecrets) {
 	}
 	return bindings;
 }
+const durableObjectStates = /* @__PURE__ */ new Set([
+	"created",
+	"deleted",
+	"renamed",
+	"transferred",
+	"expecting-transfer"
+]);
+/**
+* The `exports` that cf uploads for the same Build Output. cf converts them with
+* `@cloudflare/config`'s `convertToWranglerConfig` (cf `build-*.mjs`), and its
+* `resolveExportsUploadPayload` (cf `containers-*.mjs`) sends Worker entrypoints,
+* then Durable Objects, then Workflows reduced to their identity. Cloudflare
+* stages a version at 0% only when its exports are identical to the live
+* version's, and that version may have been uploaded by cf.
+*/
 function exportsFromOutput(exports, bindings) {
 	if (exports === void 0) return;
 	const entries = record(exports);
 	if (!entries) throw new Error("Cloudflare Durable Object exports were not readable.");
-	const result = {};
 	const workflows = /* @__PURE__ */ new Map();
 	for (const [name, raw] of Object.entries(entries)) {
 		const value = record(raw);
@@ -1995,48 +2020,42 @@ function exportsFromOutput(exports, bindings) {
 			const workflowName = requiredString(value.name, `Workflow export ${name} name`);
 			if (workflows.has(workflowName)) throw new Error(`Cloudflare Workflow ${workflowName} has multiple local exports.`);
 			workflows.set(workflowName, name);
-			result[name] = {
-				type: "workflow",
-				name: workflowName
-			};
-			continue;
-		}
-		if (value?.type === "worker") {
-			result[name] = {
-				type: "worker",
-				...value.cache === void 0 ? {} : { cache: value.cache }
-			};
 			continue;
 		}
+		if (value?.type === "worker") continue;
 		if (!value || value.type !== "durable-object") throw new Error(`Cloudflare export ${name} cannot be uploaded with pinned secrets.`);
-		if (value.state === "deleted") result[name] = {
-			type: "durable-object",
-			state: "deleted"
-		};
-		else if (value.state === "renamed" || value.state === "transferred") {
-			const renamed = value.state === "renamed";
-			result[name] = {
-				type: "durable-object",
-				state: value.state,
-				[renamed ? "renamed_to" : "transferred_to"]: requiredString(value[renamed ? "renamedTo" : "transferredTo"], name)
-			};
-		} else if (value.storage === "sqlite" || value.storage === "legacy-kv") {
-			if (value.state !== void 0 && !["created", "expecting-transfer"].includes(String(value.state))) throw new Error(`Cloudflare Durable Object export ${name} has an unsupported state.`);
-			result[name] = {
-				type: "durable-object",
-				storage: value.storage,
-				state: value.state ?? "created",
-				...value.container === void 0 ? {} : { container: requiredString(value.container, name) },
-				...value.state === "expecting-transfer" ? { transfer_from: requiredString(value.transferFrom, name) } : {}
-			};
-		} else throw new Error(`Cloudflare Durable Object export ${name} has no storage type.`);
+		const state = value.state ?? "created";
+		if (!durableObjectStates.has(String(state))) throw new Error(`Cloudflare Durable Object export ${name} has an unsupported state.`);
+		if (state === "renamed" || state === "transferred") requiredString(value[state === "renamed" ? "renamedTo" : "transferredTo"], name);
+		else if (state !== "deleted") {
+			if (value.storage !== "sqlite" && value.storage !== "legacy-kv") throw new Error(`Cloudflare Durable Object export ${name} has no storage type.`);
+			if (value.container !== void 0) requiredString(value.container, name);
+			if (state === "expecting-transfer") requiredString(value.transferFrom, name);
+		}
 	}
 	for (const binding of bindings) {
 		if (binding.type !== "workflow") continue;
 		const localExport = workflows.get(String(binding.workflow_name));
 		if (localExport !== void 0 && (binding.script_name !== void 0 || binding.class_name !== localExport)) throw new Error(`Cloudflare Workflow binding ${binding.name} conflicts with its local export.`);
 	}
-	return result;
+	const converted = record(convertToWranglerConfig({
+		worker: { exports: entries },
+		containers: []
+	}).exports) ?? {};
+	const result = {};
+	for (const type of [
+		"worker",
+		"durable-object",
+		"workflow"
+	]) for (const [name, value] of Object.entries(converted)) {
+		const entry = record(value);
+		if (entry?.type !== type) continue;
+		result[name] = type === "workflow" ? {
+			type,
+			name: entry.name
+		} : entry;
+	}
+	return Object.keys(result).length > 0 ? result : void 0;
 }
 async function preflightWorkflowExports(options) {
 	for (const raw of Object.values(options.exports ?? {})) {
@@ -2904,7 +2923,7 @@ function createCfVersionRunner(options) {
 				cwd: output.directory,
 				capture: true,
 				timeoutMs: 3e4,
-				maxOutputBytes: 1048576
+				maxOutputBytes: CF_VERSION_SOURCE_MAX_OUTPUT_BYTES
 			}) : await run(args, true);
 			const result = {
 				...called,
@@ -2912,12 +2931,15 @@ function createCfVersionRunner(options) {
 			};
 			if (!isCleanCloudflareExit(result)) return result;
 			const version = result.data;
-			if (!isRecord(version) || version.id !== operation.versionId || !Array.isArray(version.bindings)) return failed("The Cloudflare Worker version was not readable.");
+			if (!isRecord(version) || version.id !== operation.versionId) return failed("The Cloudflare Worker version was not readable.");
+			const bindings = version.bindings === void 0 ? [] : version.bindings;
+			if (!Array.isArray(bindings)) return failed("The Cloudflare Worker version was not readable.");
 			return {
 				...result,
 				data: {
 					...version,
-					resources: { bindings: version.bindings }
+					bindings,
+					resources: { bindings }
 				}
 			};
 		}
@@ -3010,12 +3032,30 @@ function createCfVersionRunner(options) {
 				await readBuildOutput(directory);
 				const verified = await verifyResources(directory);
 				if (!isCleanCloudflareExit(verified)) return verified;
-				return await run([
+				const deployed = await run([
 					"workers",
 					"triggers",
 					"deploy",
 					"--prebuilt"
 				], command.capture, directory);
+				if (isCleanCloudflareExit(deployed) && raw.observability !== void 0) {
+					const credentials = options.pinnedUpload;
+					if (!credentials || !credentials.verifyUploader()) return failed("The Cloudflare settings publisher is unavailable.");
+					try {
+						const token = await credentials.getToken();
+						if (!token || !credentials.verifyUploader()) return failed("Cloudflare session is unavailable for publishing Worker settings.");
+						await publishCloudflareObservability({
+							apiBaseUrl: credentials.apiBaseUrl,
+							accountId: credentials.accountId,
+							workerName,
+							observability: raw.observability,
+							headers: { Authorization: `Bearer ${token}` }
+						});
+					} catch (cause) {
+						return failed(cause instanceof Error ? cause.message : "Cloudflare settings update failed.");
+					}
+				}
+				return deployed;
 			} finally {
 				rmSync(directory, {
 					recursive: true,
@@ -3378,7 +3418,7 @@ function formatCloudflareActivationError(result) {
 				"Set CLOUDFLARE_WORKERS_SUBDOMAIN to your account subdomain (for example \"my-team\")",
 				"and retry. Void caches it after a successful workers.dev deployment; production traffic is unchanged."
 			].join("\n");
-		case "readiness-staging-failed": return `deploy: Cloudflare could not stage the uploaded Worker Version at zero-percent traffic${status}; production traffic is unchanged.${cloudflareCode}${diagnostic}${result.cloudflareErrorCode === 10210 && /Durable Object migration/i.test(result.diagnostic ?? "") ? "\n\nReview the Durable Object migration, then run `void deploy --platform cloudflare --atomic`. For future deploys, set deploy.cloudflare.mode to \"atomic\" in void.config.ts." : ""}`;
+		case "readiness-staging-failed": return `deploy: Cloudflare could not stage the uploaded Worker Version at zero-percent traffic${status}; production traffic is unchanged.${cloudflareCode}${diagnostic}${result.cloudflareErrorCode === 10210 && (result.diagnostic ?? "").toLowerCase().includes("durable object migration") ? "\n\nReview the Durable Object migration, then run `void deploy --platform cloudflare --atomic`. For future deploys, set deploy.cloudflare.mode to \"atomic\" in void.config.ts." : result.cloudflareErrorCode === 100405 ? "\n\nThe new version declares different exports from the live version (for example a Durable Object or Workflow class), so Cloudflare cannot split traffic between them. Run `void deploy --platform cloudflare --atomic` once to publish it at 100% directly; it receives traffic before readiness is checked." : ""}`;
 		case "atomic-failed": return `deploy: Cloudflare could not publish the Worker atomically${status}; inspect production status before retrying.${cloudflareCode}${diagnostic}`;
 		case "atomic-output-invalid": return "deploy: Cloudflare published atomically but did not report a version id or URL. Inspect `void project status` immediately.";
 		case "atomic-readiness-failed":
@@ -4011,33 +4051,87 @@ async function checkWranglerMigrationApplySet(configPath, config, binding, migra
 	};
 	return { ok: true };
 }
-/** Apply remote D1 changes and prove no migrations remain pending. */
-async function applyAndVerifyRemoteD1Migrations(d1MigrateToken, configPath, runWrangler, assertUploaderStillPinned) {
+function cloudflareReason(result) {
+	const detail = cloudflareCommandDiagnostic({
+		...result,
+		stdout: ""
+	});
+	return detail ? `\nCloudflare: ${sanitizeTerminalLogText(detail)}` : "";
+}
+/** Name the restore point when deploy stops after it applied D1 migrations. */
+function logD1RestoreAfterDeployFailure(restoreCommand) {
+	log$1.error(`deploy: D1 migrations were applied before the deploy stopped. Fix the error and deploy again.
+If the live version cannot run against the new schema, restore the point saved before them (discards every later write):\n  ${restoreCommand}`);
+}
+/**
+* Apply remote D1 changes and prove no migrations remain pending. Returns the command that
+* restores the point saved before them, if this deploy applied any.
+*/
+async function applyAndVerifyRemoteD1Migrations(d1MigrateToken, configPath, runWrangler, assertUploaderStillPinned, restorePlatformFlag = false) {
+	let restoreCommand;
 	if (d1MigrateToken) {
 		log$1.step("Applying D1 migrations...");
 		if (!assertUploaderStillPinned()) return false;
+		const readPending = async () => {
+			const listed = await Promise.resolve(runWrangler({
+				type: "d1.migrations.list",
+				database: d1MigrateToken,
+				configPath
+			}, { capture: true }));
+			const pending = listed.data?.pending;
+			if (isCleanCloudflareExit(listed) && Array.isArray(pending)) return pending;
+			log$1.error(`deploy: could not read the pending D1 migrations for "${d1MigrateToken}" before applying them ` + (isCleanCloudflareExit(listed) ? "(Cloudflare returned no pending migration list). " : `(exit ${String(listed.status)}). `) + "Refusing to migrate without knowing whether a restore point is needed. Rerun once Cloudflare can be reached." + cloudflareReason(listed));
+		};
+		const pendingBefore = await readPending();
+		if (!pendingBefore) return false;
+		let restoreHint = "";
+		if (pendingBefore.length > 0) {
+			const restorePoint = await Promise.resolve(runWrangler({
+				type: "d1.time-travel.bookmark",
+				database: d1MigrateToken,
+				configPath
+			}, { capture: true }));
+			const bookmark = restorePoint.data?.bookmark;
+			if (!isCleanCloudflareExit(restorePoint) || typeof bookmark !== "string") {
+				log$1.error(`deploy: could not save a D1 restore point for "${d1MigrateToken}" before applying ${formatCount(pendingBefore.length, "migration")}. A Worker rollback does not undo a migration. Refusing to migrate without a restore point. Rerun once the restore point can be saved.` + cloudflareReason(restorePoint));
+				return false;
+			}
+			const pendingAfterBookmark = await readPending();
+			if (!pendingAfterBookmark) return false;
+			if (pendingAfterBookmark.length > 0) {
+				restoreCommand = `void db restore${restorePlatformFlag ? " --platform cloudflare" : ""} --bookmark=${bookmark}`;
+				restoreHint = `
+To undo these migrations, restore this point (discards every later write):
+  ${restoreCommand}`;
+				log$1.info(`Saved a D1 restore point before applying ${formatCount(pendingAfterBookmark.length, "migration")}.${restoreHint}`);
+			}
+			if (!assertUploaderStillPinned()) return false;
+		}
 		const migrate = await Promise.resolve(runWrangler({
 			type: "d1.migrations.apply",
 			database: d1MigrateToken,
 			configPath
 		}, { capture: false }));
 		if (!isCleanCloudflareExit(migrate)) {
-			log$1.error(`deploy: remote D1 migrations failed for "${d1MigrateToken}" (exit ${String(migrate.status)}). Fix the migration and rerun. Note: D1 always enforces foreign_keys=ON — a Drizzle table-rebuild using PRAGMA foreign_keys=OFF must use PRAGMA defer_foreign_keys instead.`);
+			log$1.error(`deploy: remote D1 migrations failed for "${d1MigrateToken}" (exit ${String(migrate.status)}). Fix the migration and rerun. Note: D1 always enforces foreign_keys=ON — a Drizzle table-rebuild using PRAGMA foreign_keys=OFF must use PRAGMA defer_foreign_keys instead.` + restoreHint);
+			return false;
+		}
+		if (!assertUploaderStillPinned()) {
+			if (restoreCommand) logD1RestoreAfterDeployFailure(restoreCommand);
 			return false;
 		}
-		if (!assertUploaderStillPinned()) return false;
 		const migrateList = await Promise.resolve(runWrangler({
 			type: "d1.migrations.list",
 			database: d1MigrateToken,
 			configPath
 		}, { capture: true }));
 		if (!isCleanCloudflareExit(migrateList)) {
-			log$1.error(`deploy: could not verify the remote migration state for "${d1MigrateToken}" (\`d1 migrations list\` exit ${String(migrateList.status)}). Refusing to deploy against an unverified schema — rerun once wrangler can reach your account.`);
+			log$1.error(`deploy: could not verify the remote migration state for "${d1MigrateToken}" (\`d1 migrations list\` exit ${String(migrateList.status)}). Refusing to deploy against an unverified schema — rerun once wrangler can reach your account.` + restoreHint);
 			return false;
 		}
 		const migrationState = migrateList.data;
 		if (Array.isArray(migrationState?.pending) && migrationState.pending.length > 0) {
-			log$1.error([`deploy: remote D1 still has UNAPPLIED migrations for "${d1MigrateToken}" after apply.`, "The schema is not current for this deployment. Fix or apply the pending migrations, then retry."].join("\n"));
+			log$1.error([`deploy: remote D1 still has UNAPPLIED migrations for "${d1MigrateToken}" after apply.`, "The schema is not current for this deployment. Fix or apply the pending migrations, then retry."].join("\n") + restoreHint);
 			return false;
 		}
 		if (!Array.isArray(migrationState?.pending) || !migrationState.pending.every((name) => typeof name === "string")) {
@@ -4045,11 +4139,11 @@ async function applyAndVerifyRemoteD1Migrations(d1MigrateToken, configPath, runW
 				`deploy: could not confirm the remote migration state for "${d1MigrateToken}".`,
 				"Cloudflare returned an invalid pending migration set. Refusing to deploy against an unverified schema.",
 				"Retry once the database migration state can be read."
-			].join("\n"));
+			].join("\n") + restoreHint);
 			return false;
 		}
 	}
-	return true;
+	return { restoreCommand };
 }
 //#endregion
 //#region src/cli/deploy-cloudflare-build.ts
@@ -4293,15 +4387,21 @@ async function migrateCloudflareWorker(input) {
 			return exit(1);
 		}
 	}
-	if (!await applyAndVerifyRemoteD1Migrations(d1MigrateToken, configPath, runWrangler, assertUploaderStillPinned)) return exit(1);
+	const d1 = await applyAndVerifyRemoteD1Migrations(d1MigrateToken, configPath, runWrangler, assertUploaderStillPinned, readDeploymentPlatform(root) !== "cloudflare");
+	if (!d1) return exit(1);
+	const d1RestoreCommand = d1.restoreCommand;
 	if (!verifyCloudflareDeployArtifact(root, deps, {
 		...verifyOptions,
 		requiredSecretNames: schemaFacts.requiredKeys
-	})) return exit(1);
+	})) {
+		if (d1RestoreCommand) logD1RestoreAfterDeployFailure(d1RestoreCommand);
+		return exit(1);
+	}
 	return {
 		workerWasMissingBeforeSecretProvisioning,
 		initialAuthSecret,
-		appliedMigrations
+		appliedMigrations,
+		d1RestoreCommand
 	};
 }
 //#endregion
@@ -4580,8 +4680,16 @@ async function prepareCloudflareDeploySource(root, options, voidConfig) {
 		].join("\n"));
 		return null;
 	}
+	const storedDir = desired.d1 && readStoredResourceName(parseRootWranglerConfig(configPath), "d1_databases", desired.d1.binding, "migrations_dir");
+	if (!(options.reuseExistingWorker || readCloudflareLink(root)) && desired.d1?.migrationsDir !== void 0 && storedDir !== void 0 && !sameMigrationsDir(configPath, storedDir, desired.d1.migrationsDir)) {
+		const expected = JSON.stringify(desired.d1.migrationsDir);
+		let fix = `Set migrations_dir to ${expected} in d1_databases of ${basename(configPath)}, or remove it and Void will fill it in.`;
+		if (basename(configPath) === ".void-wrangler.jsonc") fix = `Set migrations_dir to ${expected} in cloudflare.d1_databases of void.config.ts${readStoredResourceName(voidConfig.cloudflare ?? {}, "d1_databases", desired.d1.binding, "migrations_dir") === void 0 ? "." : ", or remove it and Void will fill it in."}`;
+		log$1.error(`deploy: D1 binding ${JSON.stringify(desired.d1.binding)} sets migrations_dir ${JSON.stringify(storedDir)}, but Void generates and applies migrations from ${expected}. ${fix}`);
+		return null;
+	}
 	if (desired.d1) {
-		const migrationsPattern = resolveWranglerMigrationPattern(parseRootWranglerConfig(configPath), desired.d1.binding, desired.d1.migrationsDir ?? relative(dirname(configPath), migrationsDir));
+		const migrationsPattern = resolveWranglerMigrationPattern(parseRootWranglerConfig(configPath), desired.d1.binding, storedDir ?? desired.d1.migrationsDir ?? relative(dirname(configPath), migrationsDir));
 		if (!migrationsPattern.ok) {
 			log$1.error(migrationsPattern.reason);
 			return null;
@@ -4740,7 +4848,7 @@ async function preflightCloudflareWorker(input) {
 		}
 		cliLog.info("cloudflare_sandbox_available");
 	}
-	const d1MigrationsDirDiffers = () => desired.d1 != null && readStoredResourceName(parseRootWranglerConfig(configPath), "d1_databases", desired.d1.binding, "migrations_dir") !== desired.d1.migrationsDir;
+	const d1MigrationsDirMissing = () => desired.d1?.migrationsDir !== void 0 && readStoredResourceName(parseRootWranglerConfig(configPath), "d1_databases", desired.d1.binding, "migrations_dir") === void 0;
 	const provisionAndVerify = async () => {
 		if (existingWorker) {
 			const { missing } = checkCloudflareProvisionDrift(configPath, desired);
@@ -4782,13 +4890,13 @@ async function preflightCloudflareWorker(input) {
 			log$1.error(formatCloudflareDriftMessage(missing, reasons, "deploy: provisioning did not satisfy every required resource:", "Retry `void deploy --platform cloudflare`, or provision the listed resources manually."));
 			return exit(1);
 		}
-		if (desired.d1 && d1MigrationsDirDiffers()) {
+		if (desired.d1 && d1MigrationsDirMissing()) {
 			log$1.error(`deploy: provisioning did not set migrations_dir for D1 binding ${desired.d1.binding}. Retry \`void deploy --platform cloudflare\`.`);
 			return exit(1);
 		}
 	};
 	const { missing: initiallyMissing } = checkCloudflareProvisionDrift(configPath, desired);
-	const d1NeedsConfigReconciliation = !existingWorker && d1MigrationsDirDiffers();
+	const d1NeedsConfigReconciliation = !existingWorker && d1MigrationsDirMissing();
 	if (options.provision || initiallyMissing.length > 0 || d1NeedsConfigReconciliation) await provisionAndVerify();
 	else {
 		const invalidQueues = desired.queues.filter((name) => {
@@ -5034,27 +5142,44 @@ async function runCloudflareDeploy(root, options, cliLog, deps = {}) {
 		source,
 		preflight
 	});
-	await publishCloudflareWorker({
+	const migration = await migrateCloudflareWorker({
 		root,
 		deps,
 		exit,
 		cliLog,
-		atomic,
-		detectedFramework,
-		initialCloudflareCandidate,
 		source,
 		preflight,
-		build,
-		migration: await migrateCloudflareWorker({
+		build
+	});
+	let restoreReported = false;
+	const reportRestore = () => {
+		if (migration.d1RestoreCommand && !restoreReported) {
+			restoreReported = true;
+			logD1RestoreAfterDeployFailure(migration.d1RestoreCommand);
+		}
+	};
+	const exitAfterMigrations = (code) => {
+		if (code !== 0) reportRestore();
+		return exit(code);
+	};
+	try {
+		await publishCloudflareWorker({
 			root,
 			deps,
-			exit,
+			exit: exitAfterMigrations,
 			cliLog,
+			atomic,
+			detectedFramework,
+			initialCloudflareCandidate,
 			source,
 			preflight,
-			build
-		})
-	});
+			build,
+			migration
+		});
+	} catch (error) {
+		reportRestore();
+		throw error;
+	}
 	if (preflight.emailMap) log$1.message(renderAddressMap(preflight.emailMap));
 	printDeploySuccess();
 }

package/dist/deploy-CE0Ev0Ob.mjs

@@ -0,0 +1,2 @@
+import "./deploy-transport-BzGEj0Ge.mjs";
+export { i as checkWranglerMigrationApplySet, t as parseRootWranglerConfig, r as runDeploy } from "./deploy-7H32EnUs.mjs";