void 1.2.1 → 1.4.0

package/dist/{account-cmd-CdUll_35.mjs → account-cmd-HP8bixYo.mjs}

@@ -1,14 +1,14 @@
 import { c as getToken, f as removeToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
-import { n as runLoginCommand } from "./login-Cttnagmm.mjs";
+import { n as runLoginCommand } from "./login-PcFy5mlC.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/account-cmd.ts
 async function runAccountCommand(root, args) {
 	switch (args.subcommand) {
 		case "login": return runLoginCommand(root);
-		case "link": return import("./auth-link-C87vGXM-.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
+		case "link": return import("./auth-link-CedYpDCy.mjs").then(({ runAuthLink }) => runAuthLink(root, args.connectionId));
 		case "logout":
 			if (removeToken(root)) printSuccess("Logged out.");
 			else log.info("Not logged in.");

package/dist/{application-analysis-fEqoSeMp.mjs → application-analysis-DDOQwiXk.mjs}

@@ -1,19 +1,18 @@
 import { a as join, i as isAbsolute, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { c as scanWebSocketRoutesSync, d as readResourceDefinition, f as listConventionFiles, i as inferProjectBindings, m as needsApplicationDatabase, n as FRAMEWORK_SCAN_DIRS, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-DUjCd55H.mjs";
+import { c as scanWebSocketRoutesSync, d as readResourceDefinition, f as listConventionFiles, h as needsApplicationDatabase, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, p as listRouteFiles, r as detectFramework, s as isWebSocketPatternFile } from "./plugin-inference-CeiB6BG5.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths } from "./project-paths-DGu_QZ_Q.mjs";
-import { t as findVoidAuthConfig } from "./config-CyUJzi3q.mjs";
-import { l as getDatabaseDialect, m as resolveBindingNames } from "./config-DHgSEWT7.mjs";
+import { r as findVoidAuthConfig } from "./config-D-6q7EBH.mjs";
+import { l as getDatabaseDialect, m as resolveBindingNames } from "./config-OFOAimzt.mjs";
 import { n as globSync } from "./dist-D15hFhP0.mjs";
+import { m as parseRouteFilename, n as scanPages, p as isRouteEnabledForEnvironment } from "./scan-N9WzdcAl.mjs";
 import { n as isIdentifier, o as moduleExportName } from "./ast-CsZ_q_gc.mjs";
 import { a as staticLiteral, i as staticExportInitializers, o as unwrapStaticExpression, t as bindingNames } from "./ast-bindings-C3yaPs1y.mjs";
 import { n as resourceNameWords } from "./resource-name-C7LVpcRm.mjs";
 import { t as collectMigrations } from "./collect-Dew86qce.mjs";
-import { n as parseRouteFilename, t as isRouteEnabledForEnvironment } from "./parse-filename-DioPHiR9.mjs";
 import { i as scanEmailHandlersSync } from "./email-B9ayYQEG.mjs";
-import { t as scanPages } from "./scan-8IzYXiU_.mjs";
 import { existsSync, readFileSync, readdirSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 import { parseSync } from "vite";
+import { fileURLToPath } from "node:url";
 import { isSandboxRegistryImage } from "@void/deploy-core";
 //#region src/crons/scan.ts
 function extractJobName(filePath) {
@@ -203,12 +202,18 @@ async function scanRoutes(root, options) {
 	const { paths, inventory } = options;
 	const pages = await scanPages(root, {
 		output: options.output,
-		paths
+		paths,
+		checkRoutes: options.checkPageRoutes,
+		environment: options.environment
 	});
-	const routes = inventory.routes.map((route) => ({
-		...route,
-		methods: detectHttpExports(join(paths.routesDir, route.filePath))
-	})).sort(compareRouteSpecificity);
+	const routes = inventory.routes.map((route) => {
+		const methods = detectHttpExports(join(paths.routesDir, route.filePath));
+		if (methods.includes("HEAD")) throw new Error(`routes: '${route.filePath}' exports HEAD. HEAD requests are answered by the GET handler; remove the HEAD export.`);
+		return {
+			...route,
+			methods
+		};
+	}).sort(compareRouteSpecificity);
 	return {
 		...inventory,
 		routes,
@@ -219,7 +224,7 @@ function scanMiddlewareSync(root, paths = readProjectPaths(root)) {
 	return parseMiddlewareDefinitions(globSync("**/*.{ts,mts,js,mjs}", { cwd: paths.middlewareDir }));
 }
 function scanRoutePatternsSync(root, paths = readProjectPaths(root), environment) {
-	return listConventionFiles(paths.routesDir).filter((f) => !isWebSocketPatternFile(f)).map((f) => parseRouteFilename(f)).filter((route) => isRouteEnabledForEnvironment(route, environment)).sort(compareRouteSpecificity);
+	return listRouteFiles(paths.routesDir).filter((f) => !isWebSocketPatternFile(f)).map((f) => parseRouteFilename(f)).filter((route) => isRouteEnabledForEnvironment(route, environment)).sort(compareRouteSpecificity);
 }
 const DEFAULT_SANDBOX_CLASS_NAME = "SandboxV1";
 const DEFAULT_SANDBOX_CONTAINER_NAME = "void-sandbox-v1";
@@ -318,6 +323,7 @@ function analyzeApplicationSync(root, options) {
 	const inferred = inferProjectBindings(root, {
 		paths,
 		environment,
+		filterPages: !framework,
 		bindings: config.inference?.bindings
 	}, scanDirs);
 	const authConfigPath = findVoidAuthConfig(root, paths);

package/dist/{application-routing-DAhNP4u3.mjs → application-routing-4719u_kf.mjs}

@@ -1,10 +1,12 @@
-import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-fEqoSeMp.mjs";
+import { l as scanRoutes, t as analyzeApplicationSync } from "./application-analysis-DDOQwiXk.mjs";
 //#region src/application-routing.ts
 /** Complete route/page analysis using the same resource and handler inventories. */
 async function completeApplicationAnalysis(analysis) {
 	const scan = await scanRoutes(analysis.root, {
 		output: analysis.config.output,
 		paths: analysis.paths,
+		checkPageRoutes: !analysis.framework,
+		environment: analysis.framework ? void 0 : analysis.environment,
 		inventory: {
 			routes: analysis.routes,
 			middleware: analysis.middleware,

package/dist/auth-g2TQbDLD.d.mts

@@ -0,0 +1,70 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { Auth, BetterAuthOptions, Session, User } from "better-auth";
+import { Context, Env } from "hono";
+//#region src/runtime/auth.d.ts
+/**
+ * Filled in by the generated `.void/auth.d.ts` with the user and session types
+ * Better Auth infers from the app's `auth.ts`. Empty when the app has no
+ * `auth.ts`, so `AuthUser`/`AuthSession` fall back to Better Auth's base shapes.
+ *
+ * `AuthUser`/`AuthSession` stay type aliases (not merged interfaces) so they
+ * remain assignable to `Record<string, unknown>`, and a union config (a function
+ * form that returns different shapes per branch) stays a valid union type.
+ */
+interface VoidAuthTypes {}
+/**
+ * Better Auth's inferred `{ user, session }` for an `auth.ts` default export.
+ * Used by the generated `.void/auth.d.ts`; it lives here so `better-auth`
+ * resolves from Void's own dependencies, not the app's.
+ *
+ * An `any` default export (an `auth.js` without `allowJs`, or an import that
+ * does not resolve) keeps Better Auth's base shapes instead of a user type that
+ * accepts any key. The tuple check also catches the error `any` of an untyped
+ * import.
+ */
+type InferAuthSession<T> = [unknown] extends [T] ? {
+  user: User;
+  session: Session;
+} : Auth<Extract<T extends ((...args: Array<never>) => infer R) ? R : T, BetterAuthOptions>>["$Infer"]["Session"];
+type AuthUser = VoidAuthTypes extends {
+  user: infer U;
+} ? U : User;
+type AuthSession = VoidAuthTypes extends {
+  session: infer S;
+} ? S : Session;
+type AuthState = {
+  session: AuthSession;
+  user: AuthUser;
+};
+type VoidAuthConfigContext = {
+  defaults: BetterAuthOptions;
+  env: Record<string, unknown>;
+  dialect: "sqlite" | "postgresql" | "mysql";
+  request: Request;
+};
+type VoidAuthConfig = BetterAuthOptions | ((ctx: VoidAuthConfigContext) => BetterAuthOptions);
+/**
+ * Shared AsyncLocalStorage that holds the authenticated Better Auth state for the
+ * current request.
+ *
+ * Stored on `globalThis` under a `Symbol.for` key so duplicate module loads
+ * (e.g. once by void's bundled runtime and once by Vite's SSR module runner
+ * when user code imports from `void/auth`) share a single ALS instance. Without
+ * this, the middleware writes to one instance and `getUser()` reads another,
+ * always returning null.
+ */
+type AuthContextStore = {
+  user: AuthUser | null;
+  state: AuthState | null;
+};
+declare const authContext: AsyncLocalStorage<AuthContextStore>;
+declare function defineAuth<T extends VoidAuthConfig>(config: T): T;
+declare function getUser(): AuthUser | null;
+declare function getSession(): AuthState | null;
+declare function requireAuth<E extends Env & {
+  Variables: {
+    user: AuthUser | null;
+  };
+}>(c: Context<E>): AuthUser;
+//#endregion
+export { VoidAuthConfig as a, authContext as c, getUser as d, requireAuth as f, InferAuthSession as i, defineAuth as l, AuthState as n, VoidAuthConfigContext as o, AuthUser as r, VoidAuthTypes as s, AuthSession as t, getSession as u };

package/dist/{auth-link-C87vGXM-.mjs → auth-link-CedYpDCy.mjs}

@@ -1,9 +1,9 @@
 import { a as getApiUrl, c as getToken, m as savePlatformToken, p as runPlatformLogin, u as openBrowser } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { l as formatUrl } from "./output-BpgYODYx.mjs";
-import { r as selectPlatformLoginMethod } from "./login-Cttnagmm.mjs";
-import { t as discoverPlatform } from "./platform-cmd-D5I1beUX.mjs";
+import { r as selectPlatformLoginMethod } from "./login-PcFy5mlC.mjs";
+import { t as discoverPlatform } from "./platform-cmd-DZK2ixMl.mjs";
 //#region src/cli/auth-link.ts
 async function runAuthLink(root, connectionId) {
 	const token = getToken(root);

package/dist/{auth-router-6I81r-ix.mjs → auth-router-vafo7x8w.mjs}

@@ -1,4 +1,4 @@
-import { s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
+import { c as normalizePlatformApiUrl, s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
 import { n as readDeploymentPlatform } from "./project-rqDnVsJN.mjs";
 import { K as select, tt as isCancel } from "./dist-Cor9XGoz.mjs";
 //#region src/cli/auth-router.ts
@@ -39,23 +39,28 @@ async function chooseDestination(root, args, interactive) {
 async function runAuthRouter(root, args, interactive = Boolean(process.stdin.isTTY)) {
 	const destination = await chooseDestination(root, args, interactive);
 	if (destination.platform === "cloudflare") {
-		const { runCloudflareCommand } = await import("./cloudflare-cmd-DMzCv12s.mjs");
+		const { runCloudflareCommand } = await import("./cloudflare-cmd-D-b_u3T4.mjs");
 		await runCloudflareCommand(root, { subcommand: args.subcommand });
 		return;
 	}
-	const { runAccountCommand } = await import("./account-cmd-CdUll_35.mjs");
+	const { runAccountCommand } = await import("./account-cmd-HP8bixYo.mjs");
 	const subcommand = args.subcommand === "status" ? "whoami" : args.subcommand;
 	if (!destination.apiUrl) {
 		await runAccountCommand(root, { subcommand });
 		return;
 	}
-	const previous = process.env.VOID_API_URL;
+	const previous = {
+		VOID_API_URL: process.env.VOID_API_URL,
+		VOID_TOKEN: process.env.VOID_TOKEN
+	};
+	const tokenBound = Boolean(previous.VOID_TOKEN && previous.VOID_API_URL && normalizePlatformApiUrl(previous.VOID_API_URL) === destination.apiUrl);
 	process.env.VOID_API_URL = destination.apiUrl;
+	if (previous.VOID_TOKEN && !tokenBound) delete process.env.VOID_TOKEN;
 	try {
 		await runAccountCommand(root, { subcommand });
 	} finally {
-		if (previous === void 0) delete process.env.VOID_API_URL;
-		else process.env.VOID_API_URL = previous;
+		for (const [name, value] of Object.entries(previous)) if (value === void 0) delete process.env[name];
+		else process.env[name] = value;
 	}
 }
 //#endregion

package/dist/{better-auth-shared-D-6z0q0f.mjs → better-auth-shared-7FM3Uk2N.mjs}

@@ -1,4 +1,5 @@
 import { i as getVoidAuthProviderSettingEnvNames, o as isVoidSocialAuthProvider, r as getVoidAuthProviderEnvNames } from "./providers-BUHwJlmM.mjs";
+import { t as isUnchangedStaticAsset } from "./static-asset-marker-Btf-6oCD.mjs";
 import { t as authContext } from "./auth-3sGB0zJ1.mjs";
 import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
 import { betterAuth } from "better-auth";
@@ -104,8 +105,15 @@ function resolveSocialProviders(env, configuredProviders) {
 	}
 	return Object.keys(providers).length > 0 ? providers : void 0;
 }
-function appendAuthHeaders(c, source, includeCachePolicy) {
+function appendAuthHeaders(c, source, includeCachePolicy, staticAsset) {
 	if (!source) return;
+	if (staticAsset) {
+		source.forEach((value, key) => {
+			if (!["cache-control", "pragma"].includes(key.toLowerCase())) c.header(key, value, { append: key.toLowerCase() === "set-cookie" });
+		});
+		if (includeCachePolicy) c.header("Cache-Control", source.has("set-cookie") ? "private, no-store" : privateCachePolicy(c.res.headers.get("cache-control")));
+		return;
+	}
 	const routeDirectives = bareCacheDirectives(c.res.headers.get("cache-control"));
 	const keepRoutePolicy = routeDirectives.has("no-store") || routeDirectives.has("private") && routeDirectives.has("no-cache");
 	source.forEach((value, key) => {
@@ -123,6 +131,44 @@ function bareCacheDirectives(policy) {
 	const directives = (policy ?? "").match(/(?:[^",]|"(?:[^"\\]|\\.)*"?)+/g) ?? [];
 	return new Set(directives.map((directive) => directive.trim().toLowerCase()).filter((directive) => !directive.includes("=")));
 }
+/**
+* The same policy for one browser only: `public`, `proxy-revalidate`,
+* `s-maxage` and a field-scoped `private` give way to a leading `private`.
+* A policy that is already private or no-store stays as it is.
+*/
+function privateCachePolicy(policy) {
+	const directives = splitCacheDirectives(policy ?? "");
+	if (directives.length === 0) return "private, no-store";
+	const lowered = directives.map((directive) => directive.toLowerCase());
+	if (lowered.includes("private") || lowered.includes("no-store")) return policy;
+	return ["private", ...directives.filter((_directive, index) => {
+		const directive = lowered[index];
+		const equals = directive.indexOf("=");
+		const name = (equals === -1 ? directive : directive.slice(0, equals)).trim();
+		return ![
+			"public",
+			"proxy-revalidate",
+			"s-maxage",
+			"private"
+		].includes(name);
+	})].join(", ");
+}
+function splitCacheDirectives(policy) {
+	const directives = [];
+	let start = 0;
+	let quoted = false;
+	for (let index = 0; index < policy.length; index++) {
+		const char = policy[index];
+		if (quoted && char === "\\") index++;
+		else if (char === "\"") quoted = !quoted;
+		else if (char === "," && !quoted) {
+			directives.push(policy.slice(start, index));
+			start = index + 1;
+		}
+	}
+	directives.push(policy.slice(start));
+	return directives.map((directive) => directive.trim()).filter(Boolean);
+}
 function resolveUserConfig(userConfig, defaults, request, env, dialect) {
 	const mergeEmailAndPasswordDefaults = (options) => {
 		if (!defaults.emailAndPassword?.password || !options.emailAndPassword) return options;
@@ -282,7 +328,7 @@ function createVoidAuthRuntime(dialect, applyMigrations) {
 			"authorization",
 			"cf-access-jwt-assertion"
 		].some((header) => c.req.raw.headers.has(header));
-		appendAuthHeaders(c, result.headers, state !== null || credentialed || result.headers?.has("set-cookie") === true);
+		appendAuthHeaders(c, result.headers, state !== null || credentialed || result.headers?.has("set-cookie") === true, isUnchangedStaticAsset(c));
 	}
 	async function handleVoidAuthRequest(c, runtime, database) {
 		const existingAuth = c.get("__voidAuth");

package/dist/{better-auth-shared-DVk2DkTW.d.mts → better-auth-shared-BHB8kiTE.d.mts}

@@ -1,5 +1,5 @@
 import { t as VoidAuthProvider } from "./providers-BNKRacMr.mjs";
-import { i as VoidAuthConfig, n as AuthState } from "./auth-DkcFflXV.mjs";
+import { a as VoidAuthConfig, n as AuthState } from "./auth-g2TQbDLD.mjs";
 import { BetterAuthOptions, betterAuth } from "better-auth";
 import { Context } from "hono";
 import { DBFieldAttribute } from "better-auth/db";

package/dist/{build-cmd-ex1g-j_e.mjs → build-cmd-9vUAQ1_V.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { H as outro, L as log } from "./dist-Cor9XGoz.mjs";
-import { n as PlatformApiError, r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { n as PlatformApiError, r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { f as import_picocolors, i as dim, m as printSuccess } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 import { appendFileSync, writeFileSync } from "node:fs";

package/dist/{cache-oHzrnY3z.mjs → cache-jvwLNb0h.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { L as log } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess, o as formatCount, r as createSpinner } from "./output-BpgYODYx.mjs";
 import { a as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
 //#region src/cli/cache.ts

package/dist/{cancel-deploy-viAMD0Q_.mjs → cancel-deploy-Dw0UmWKO.mjs}

@@ -1,7 +1,7 @@
 import { r as readProjectConfig } from "./project-rqDnVsJN.mjs";
 import { c as getToken } from "./auth-B6iOCjKI.mjs";
 import { A as confirm, H as outro, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { r as PlatformClient } from "./client-BEkdj1kx.mjs";
+import { r as PlatformClient } from "./client-B3LnB_bE.mjs";
 import { m as printSuccess } from "./output-BpgYODYx.mjs";
 //#region src/cli/cancel-deploy.ts
 const ACTIVE_STATUSES = /* @__PURE__ */ new Set([

package/dist/{cf-build-output-BhVxldCw.mjs → cf-build-output-XpNR9zoh.mjs}

@@ -1,9 +1,10 @@
 import { a as join, c as resolve, i as isAbsolute, n as dirname, r as extname, s as relative, t as basename } from "./dist-ipQi0Q8y.mjs";
 import { n as readGeneratedWranglerConfigFile } from "./generated-wrangler-config-DeWj5F9Y.mjs";
+import { t as WORKER_CONDITIONS } from "./worker-conditions-AWFRcFxR.mjs";
 import { copyFileSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { isRecord } from "@void/deploy-core";
-import { randomUUID } from "node:crypto";
+import { randomBytes, randomUUID } from "node:crypto";
 import { tmpdir } from "node:os";
 import { isDeepStrictEqual } from "node:util";
 import { spawn, spawnSync } from "node:child_process";
@@ -393,10 +394,24 @@ function copyBundle(source, destination) {
 	}
 	return modules;
 }
+function stagePackageContext(directory, projectRoot) {
+	const root = resolve(projectRoot);
+	const manifest = join(root, "package.json");
+	if (!existsSync(manifest)) return;
+	copyFileSync(manifest, join(directory, "package.json"));
+	for (let parent = root;; parent = dirname(parent)) {
+		const modules = join(parent, "node_modules");
+		if (existsSync(modules)) {
+			symlinkSync(modules, join(directory, "node_modules"), process.platform === "win32" ? "junction" : "dir");
+			break;
+		}
+		if (parent === dirname(parent)) break;
+	}
+}
 /** Create a disposable cf Build Output tree from an existing Cloudflare Worker build. */
-async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
+async function prepareCfBuildOutput(workerDirectory, accountId, mode, projectRoot = workerDirectory) {
 	const source = resolve(workerDirectory);
-	if (existsSync(getRootConfigPath(source))) return prepareNativeBuildOutput(source, accountId, mode);
+	if (existsSync(getRootConfigPath(source))) return prepareNativeBuildOutput(source, accountId, mode, projectRoot);
 	if (!existsSync(join(source, "wrangler.json"))) throw new Error(`No Cloudflare Worker build found in ${source}. Pass the project root that contains .cloudflare/output/v0, or the Worker output directory that contains wrangler.json.`);
 	const raw = record(JSON.parse(readFileSync(join(source, "wrangler.json"), "utf8")));
 	if (!raw) return null;
@@ -420,6 +435,7 @@ async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
 		await Promise.all(images.map((image) => image.dispose()));
 	};
 	try {
+		stagePackageContext(directory, projectRoot);
 		const bundle = getWorkerBundleDir(directory);
 		mkdirSync(bundle, { recursive: true });
 		const modules = copyBundle(source, bundle);
@@ -478,7 +494,7 @@ async function prepareCfBuildOutput(workerDirectory, accountId, mode) {
 	}
 }
 /** Copy and complete the native artifact without changing the Vite build's inputs or metadata. */
-async function prepareNativeBuildOutput(source, accountId, mode) {
+async function prepareNativeBuildOutput(source, accountId, mode, projectRoot = source) {
 	const built = await readBuildOutput(source);
 	if (accountId !== void 0 && built.rootConfig.accountId !== void 0 && accountId !== built.rootConfig.accountId || mode !== void 0 && mode !== built.rootConfig.buildContext.mode) return null;
 	const directory = mkdtempSync(join(tmpdir(), "void-cf-native-"));
@@ -489,6 +505,7 @@ async function prepareNativeBuildOutput(source, accountId, mode) {
 		});
 	};
 	try {
+		stagePackageContext(directory, projectRoot);
 		await writeRootConfig(directory, {
 			accountId: accountId ?? built.rootConfig.accountId,
 			complianceRegion: built.rootConfig.complianceRegion
@@ -529,6 +546,104 @@ async function prepareNativeBuildOutput(source, accountId, mode) {
 		throw error;
 	}
 }
+const ADDITIONAL_MODULE_FILTER = /\.(?:wasm(?:\?module)?|bin|txt|html|sql)$/;
+const ADDITIONAL_MODULE_EXTENSIONS = /* @__PURE__ */ new Set([
+	".wasm",
+	".bin",
+	".txt",
+	".html",
+	".sql"
+]);
+/** Keep letters, digits, `.`, `_` and `-`: the name ends up inside a JS import string. */
+function safeFileStem(stem) {
+	let safe = "";
+	for (const char of stem) {
+		const code = char.charCodeAt(0);
+		safe += code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122 || char === "." || char === "_" || char === "-" ? char : "_";
+	}
+	return safe || "module";
+}
+/** The file behind a resolved id that is uploaded as a Worker module, if it is one. */
+function additionalModulePath(id) {
+	const query = id.indexOf("?");
+	const path = query === -1 ? id : id.slice(0, query);
+	if (query !== -1 && !(id.slice(query) === "?module" && path.endsWith(".wasm"))) return;
+	return ADDITIONAL_MODULE_EXTENSIONS.has(extname(path)) ? path : void 0;
+}
+/**
+* Keep Wasm, data and text imports out of the bundle and emit each file beside it, as
+* `@cloudflare/vite-plugin` does, so `copyBundle` uploads them as Worker modules.
+*/
+function additionalModulesPlugin() {
+	const marker = `__VOID_MODULE_${randomBytes(8).toString("hex")}__`;
+	const paths = [];
+	const keys = /* @__PURE__ */ new Map();
+	const fileNames = /* @__PURE__ */ new Map();
+	const usedFileNames = /* @__PURE__ */ new Set();
+	return {
+		name: "void:additional-modules",
+		enforce: "pre",
+		resolveId: {
+			filter: { id: [ADDITIONAL_MODULE_FILTER, /^#/] },
+			async handler(source, importer, options) {
+				const resolved = await this.resolve(source, importer, options);
+				const path = resolved ? additionalModulePath(resolved.id) : void 0;
+				if (!path) return resolved;
+				let key = keys.get(path);
+				if (key === void 0) {
+					key = paths.push(path) - 1;
+					keys.set(path, key);
+				}
+				return {
+					id: `${marker}${key}${marker}`,
+					external: true
+				};
+			}
+		},
+		renderChunk: {
+			filter: { code: marker },
+			handler(code, chunk) {
+				const emit = (path) => {
+					let fileName = fileNames.get(path);
+					if (fileName === void 0) {
+						const extension = extname(path);
+						const stem = safeFileStem(basename(path, extension));
+						fileName = stem + extension;
+						for (let count = 2; usedFileNames.has(fileName); count++) fileName = `${stem}${count}${extension}`;
+						usedFileNames.add(fileName);
+						fileNames.set(path, fileName);
+						this.emitFile({
+							type: "asset",
+							fileName,
+							originalFileName: path,
+							source: readFileSync(path)
+						});
+					}
+					return fileName;
+				};
+				let output = "";
+				let cursor = 0;
+				let start = code.indexOf(marker);
+				while (start !== -1) {
+					const keyStart = start + marker.length;
+					const end = code.indexOf(marker, keyStart);
+					if (end === -1) break;
+					const keyText = code.slice(keyStart, end);
+					const path = keyText === String(Number(keyText)) ? paths[Number(keyText)] : void 0;
+					if (path === void 0) {
+						start = code.indexOf(marker, keyStart);
+						continue;
+					}
+					const importPath = relative(dirname(chunk.fileName), emit(path));
+					output += code.slice(cursor, start) + (importPath.startsWith(".") ? importPath : `./${importPath}`);
+					cursor = end + marker.length;
+					start = code.indexOf(marker, cursor);
+				}
+				return output + code.slice(cursor);
+			}
+		}
+	};
+}
 /** Bundle a generated Worker entry with Vite, then hand the result to `prepareCfBuildOutput`. */
 async function prepareBundledBuildOutput(options) {
 	const scratch = mkdtempSync(join(tmpdir(), options.scratchPrefix));
@@ -539,6 +654,8 @@ async function prepareBundledBuildOutput(options) {
 			root: options.projectRoot,
 			publicDir: false,
 			logLevel: "error",
+			plugins: [additionalModulesPlugin()],
+			resolve: { conditions: [...WORKER_CONDITIONS, "production"] },
 			build: {
 				outDir: scratch,
 				emptyOutDir: true,
@@ -556,7 +673,7 @@ async function prepareBundledBuildOutput(options) {
 			main: "index.js",
 			assets: options.assets
 		}), { mode: 384 });
-		return await prepareCfBuildOutput(scratch, options.accountId);
+		return await prepareCfBuildOutput(scratch, options.accountId, void 0, options.projectRoot);
 	} finally {
 		rmSync(scratch, {
 			recursive: true,

package/dist/cf-build-output-bd8Uwv1P.mjs

@@ -0,0 +1 @@
+export { t as prepareCfBuildOutput } from "./cf-build-output-XpNR9zoh.mjs";

package/dist/{cf-worker-settings-BECvvTVd.mjs → cf-worker-settings-Dg27RzyT.mjs}

@@ -16,8 +16,14 @@ function getCfCliVersion(attribution) {
 //#endregion
 //#region src/cli/cf-worker-settings.ts
 /** Version uploads leave Worker-wide settings untouched; publish only explicit configuration. */
-async function publishCloudflareObservability(options) {
-	if (!isRecord(options.observability)) throw new Error("The Cloudflare Worker observability settings were not readable.");
+async function publishCloudflareWorkerSettings(options) {
+	if (options.observability !== void 0 && !isRecord(options.observability)) throw new Error("The Cloudflare Worker observability settings were not readable.");
+	if (options.logpush !== void 0 && typeof options.logpush !== "boolean") throw new Error("The Cloudflare Worker Logpush setting was not readable.");
+	const settings = {
+		...options.observability === void 0 ? {} : { observability: options.observability },
+		...options.logpush === void 0 ? {} : { logpush: options.logpush }
+	};
+	if (Object.keys(settings).length === 0) return;
 	const endpoint = `${options.apiBaseUrl.replace(/\/$/, "")}/accounts/${encodeURIComponent(options.accountId)}/workers/scripts/${encodeURIComponent(options.workerName)}/script-settings`;
 	const response = await fetch(endpoint, {
 		method: "PATCH",
@@ -26,12 +32,12 @@ async function publishCloudflareObservability(options) {
 			...options.headers,
 			"Content-Type": "application/json"
 		},
-		body: JSON.stringify({ observability: options.observability }),
+		body: JSON.stringify(settings),
 		redirect: "error",
 		signal: AbortSignal.timeout(3e4)
 	});
 	const body = await response.json();
-	if (!response.ok || !isRecord(body) || body.success !== true) throw new Error(`Cloudflare did not update Worker observability (HTTP ${response.status}).`);
+	if (!response.ok || !isRecord(body) || body.success !== true) throw new Error(`Cloudflare did not update Worker settings (HTTP ${response.status}).`);
 }
 //#endregion
-export { getCfCliVersion as n, getVoidUserAgent as r, publishCloudflareObservability as t };
+export { getCfCliVersion as n, getVoidUserAgent as r, publishCloudflareWorkerSettings as t };