void 1.4.0 → 1.6.0

package/dist/{deploy-CdM-LAxX.mjs → deploy-D_gEojD2.mjs}

@@ -1,53 +1,55 @@
-import { n as __toESM, t as __commonJSMin } from "./rolldown-runtime-3h0WiCiA.mjs";
-import { a as join, c as resolve, n as dirname, o as normalize, r as extname, s as relative, t as basename } from "./dist-ipQi0Q8y.mjs";
-import { t as require_picocolors } from "./picocolors-BsDfhxIw.mjs";
-import { r as detectFramework } from "./plugin-inference-CeiB6BG5.mjs";
-import { n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-DGu_QZ_Q.mjs";
-import { m as resolveBindingNames, p as readConfig, u as isNodeTarget } from "./config-OFOAimzt.mjs";
-import { a as hasSandboxSqliteMigration, c as sandboxContainerConfig, i as assertSandboxNamespaceConfig, o as requiresSandboxPlatformImage, r as SANDBOX_MIGRATION_TAG, s as resolveSandboxConfig, t as analyzeApplicationSync } from "./application-analysis-DDOQwiXk.mjs";
-import { t as collectMigrations } from "./collect-Dew86qce.mjs";
-import { o as validateSsrEntry } from "./entry-BEM8ZuGP.mjs";
-import { r as hasEmailHandlers } from "./email-B9ayYQEG.mjs";
-import { a as resolveDistDir, c as hasDocumentRoutes, l as resolveAssetConfig, n as collectRevalidate, o as resolveWorkerDirName, r as hasRevalidate, s as hasApiRoutes } from "./isr-config-fZaJJ8t7.mjs";
-import { t as writeFileAtomic } from "./atomic-write-Dq6R0BPN.mjs";
-import { s as listPlatformConnections } from "./platform-registry-B9mWX9LO.mjs";
-import { c as writeDeploymentPlatform, n as readDeploymentPlatform, r as readProjectConfig } from "./project-rqDnVsJN.mjs";
-import { n as readGeneratedWranglerConfigFile } from "./generated-wrangler-config-DeWj5F9Y.mjs";
-import { a as persistCloudflareConfig, c as stashCloudflareDeployPointer, i as materializeCloudflareConfig } from "./cloudflare-config-CH1AylZT.mjs";
-import { A as syncWranglerWebSockets, C as readWranglerManagedQueueCleanupCandidates, D as sameMigrationsDir, E as resolveLiveBindingConfig, L as writeVoidProjectConfig, M as writeProvisionedWranglerConfig, N as writeWranglerPublishedTrafficSnapshot, a as LIVE_MIGRATION_TAG, c as bindingEntriesForField, h as nextDurableObjectMigrationTag, k as syncWranglerDurableObjects, m as hasDurableObjectSqliteMigration, o as acknowledgeWranglerManagedQueueRemovals, r as FRIENDLY_BINDING_NAMES, v as readExistingLiveBindingConfig, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-I-scB_1t.mjs";
-import { r as trustedCloudflareWorkerAccessHeaders, t as cfAccessHeaders } from "./cf-access-BM9G0lhO.mjs";
-import { t as ensurePlatformAccessToken } from "./cf-access-CWP4avfP.mjs";
-import { a as getApiUrl, c as getToken, l as getTokenSource } from "./auth-B6iOCjKI.mjs";
-import { i as otherQueueConsumers, n as chooseCloudflareQueueName, o as scopedCloudflareQueueName, r as cloudflareQueueName } from "./dispatch-CLa2LThw.mjs";
-import { l as resolveRemoteMode, n as CLOUDFLARE_QUEUE_NAMES_BUILD_ENV, t as CLOUDFLARE_DEPLOY_BUILD_ENV } from "./env-BaMz0j7H.mjs";
-import { t as assertNoPrerenderFailures } from "./prerender-render-CaShbHJ3.mjs";
-import { a as buildEnv, n as readVersionMetadataBinding, r as selectNativeVersionMetadataBinding, t as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV } from "./version-metadata-D2vfMQzv.mjs";
-import { a as emailConfigInputs, c as renderAddressMap, d as isGeneratedAssetHeaders, g as prerenderPagesNode, h as prerenderPages, i as createNodeEmailDns, l as renderEmailChecklist, m as collectPrerenderPathsNode, n as SEND_EMAIL_BINDING, o as preflightEmail, p as collectPrerenderPaths, r as applyEmailSetup, t as EMAIL_FROM_VAR } from "./email-cloudflare-PMbAev9Q.mjs";
-import { n as completeApplicationAnalysis, t as analyzeApplication } from "./application-routing-4719u_kf.mjs";
-import { a as record, i as migrateBuiltWranglerConfig, n as prepareCfFrameworkBuildOutput, r as prepareCfStaticBuildOutput, t as prepareCfBuildOutput } from "./cf-build-output-XpNR9zoh.mjs";
-import { i as validateMigrations, t as assertJournalCoherence } from "./validate-CnZPMq4q.mjs";
-import { A as confirm, K as select, L as log, tt as isCancel } from "./dist-Cor9XGoz.mjs";
-import { r as getPackageDir } from "./agents-CuNtT0D_.mjs";
-import { a as isExpiredTokenError, r as PlatformClient } from "./client-B3LnB_bE.mjs";
-import { o as formatCount, p as note, r as createSpinner, u as getErrorMessage } from "./output-BpgYODYx.mjs";
-import { t as getRequestedProjectSlug } from "./resolve-project-Xoi6eTWY.mjs";
-import { i as safePositional, r as readCfUploadOutput, t as CF_VERSION_SOURCE_MAX_OUTPUT_BYTES } from "./cf-command-values-ByHk0xg4.mjs";
-import { a as FRAMEWORK_PRESETS, c as hasBackendFiles, i as isCleanCloudflareExit, l as resolveCloudflareOperationArgv, o as detectPreset, s as formatProjectCommand, t as createCloudflareProcessRunner, u as resolveProjectCommand } from "./cloudflare-process-8jEYIeim.mjs";
-import { f as listSelfHostSecretNames, h as selfHostSchemaFailureMessage, i as SelfHostSecretListError, l as dischargeSelfHostEnvContext, n as SelfHostFirstDeployError, p as readEmittedWorkerVars, r as SelfHostSchemaError, s as deriveSelfHostEnvContextFromVars, t as SelfHostEnvValidationError } from "./env-validation-B3VobvXm.mjs";
-import { a as needsWrapper, r as cleanupWrapper, t as bundleEntry } from "./wrapper-BBl1rC32.mjs";
-import { A as promptDeployProjectConfig, C as ensureManagedHyperdrive, D as hasNonPageBackend, E as getGitCommit, F as resolveStaticBuildCommand, I as resolveStaticDeployPreset, L as toManifestSchedulesAndQueues, M as resolveDeployWorkerMain, N as resolveDeployWranglerCompat, O as hasPrerenderSources, P as resolveFullDeployBuildCommand, R as validateDeployMigrations, S as createProjectFromSlug, T as getExitCode, _ as getDeploySchemaDriftMessage, a as collectAndHashAssets, b as assertProjectDeployAccess, c as readWranglerHtmlHandling, d as printDeploySuccess, f as mergeAndLintRoutingRules, g as assertDeploySchemaDriftFree, h as warnUnpublishedRouting, i as buildStaticManifest, j as resolveDeployLiveBindingConfig, k as log$1, l as formatDeploySummary, m as warnIgnoredNotFoundForFramework, n as runStaticDeploy, o as collectWorkerFiles, p as streamDirectR2Deploy, r as buildFrameworkManifest, s as detectNonSpaFallbackWarning, t as assembleVoidManifest, u as printDeployContext, v as hasDeploySchemaDrift, w as generateDeployWrapperIfNeeded, x as assertWorkerMainUploaded, y as assertEnvSchemaValid } from "./deploy-managed-static-DjeBFG2c.mjs";
-import { a as checkCloudflareProvisionDrift, b as resolveWorkersDevComplianceRegion, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionCloudflareResources, i as assertValidResourceName, m as isRealKvId, s as deleteEnvVarCaseAware } from "./provision-DztLJ97X.mjs";
-import { c as scrubWranglerAuthCredentials, n as buildSchemaProbeEnv, o as resolveDeployTransport, r as deployChildEnv, s as scrubManagedDeployBuildMarkers, t as MANAGED_DEPLOY_BUILD_ENV } from "./deploy-transport-DIq_gFTP.mjs";
-import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareWorkerSettings } from "./cf-worker-settings-Dg27RzyT.mjs";
-import { t as sanitizeTerminalLogText } from "./terminal-log-text-D9ACPOuG.mjs";
-import { t as promptForLoginToken } from "./login-PcFy5mlC.mjs";
-import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, t as CloudflareAuthenticationError } from "./cloudflare-auth-DyD_kVFr.mjs";
-import { a as createCloudflareEmptyDomainPublisher, i as createCloudflareEmptyCronPublisher } from "./cloudflare-operations-Bc-7fN44.mjs";
-import { n as openMigrationValidationDatabase, t as SqliteMigrationError } from "./sqlite-validation-BzKMWnO4.mjs";
-import { r as discoverFrameworkWranglerFiles, t as migrateLegacyVoidConfig } from "./migrate-B8S2xTcb.mjs";
-import { a as runMySqlMigrations } from "./runner-mysql-BWmbk5IE.mjs";
-import { i as runPgMigrations } from "./runner-pg-Cr3qrqi4.mjs";
-import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
+import { n as __toESM, t as __commonJSMin } from "./rolldown-runtime-uD8oG6U2.mjs";
+import { a as join, c as resolve, n as dirname, o as normalize, r as extname, s as relative, t as basename } from "./dist-DMYe8CZJ.mjs";
+import { t as require_picocolors } from "./picocolors-D1NxSLw-.mjs";
+import { r as detectFramework } from "./plugin-inference-CdLbxZL_.mjs";
+import { n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-CdGv9Tmi.mjs";
+import { m as resolveBindingNames, p as readConfig, r as convertHeadersConfig, u as isNodeTarget } from "./config-BITKQ3O6.mjs";
+import { a as hasSandboxSqliteMigration, c as sandboxContainerConfig, i as assertSandboxNamespaceConfig, o as requiresSandboxPlatformImage, r as SANDBOX_MIGRATION_TAG, s as resolveSandboxConfig, t as analyzeApplicationSync } from "./application-analysis-HRFsZOv3.mjs";
+import { t as collectMigrations } from "./collect-C6Blu9yw.mjs";
+import { o as validateSsrEntry } from "./entry-CBZsCy3O.mjs";
+import { r as hasEmailHandlers } from "./email-BHY72ixO.mjs";
+import { c as VOID_INTERNAL_WORKER_FIRST, d as hasDocumentRoutes, f as resolveAssetConfig, i as readGeneratedAssetHeadersFile, l as edgeRulesNeedWorker, u as hasApiRoutes } from "./headers-CuTEdP9C.mjs";
+import { t as writeFileAtomic } from "./atomic-write-DA6eD1Kp.mjs";
+import { s as listPlatformConnections } from "./platform-registry-DZ_2Xuqd.mjs";
+import { c as writeDeploymentPlatform, n as readDeploymentPlatform, r as readProjectConfig } from "./project-CLwxcEdq.mjs";
+import { n as readGeneratedWranglerConfigFile } from "./generated-wrangler-config-CoDaaFsA.mjs";
+import { a as persistCloudflareConfig, c as stashCloudflareDeployPointer, i as materializeCloudflareConfig } from "./cloudflare-config-eQunqX6A.mjs";
+import { A as syncWranglerWebSockets, C as readWranglerManagedQueueCleanupCandidates, D as sameMigrationsDir, E as resolveLiveBindingConfig, L as writeVoidProjectConfig, M as writeProvisionedWranglerConfig, N as writeWranglerPublishedTrafficSnapshot, a as LIVE_MIGRATION_TAG, c as bindingEntriesForField, h as nextDurableObjectMigrationTag, k as syncWranglerDurableObjects, m as hasDurableObjectSqliteMigration, o as acknowledgeWranglerManagedQueueRemovals, r as FRIENDLY_BINDING_NAMES, v as readExistingLiveBindingConfig, w as readWranglerPublishedTrafficSnapshot } from "./wrangler-DESSbN8L.mjs";
+import { r as trustedCloudflareWorkerAccessHeaders, t as cfAccessHeaders } from "./cf-access-pejlJmuy.mjs";
+import { t as ensurePlatformAccessToken } from "./cf-access-BmBT2h8_.mjs";
+import { a as getApiUrl, c as getToken, l as getTokenSource } from "./auth-Dy8svcqQ.mjs";
+import { n as record, t as migrateBuiltWranglerConfig } from "./cf-config-migrate-Dy8MrKgF.mjs";
+import { l as resolveRemoteMode, n as CLOUDFLARE_QUEUE_NAMES_BUILD_ENV, t as CLOUDFLARE_DEPLOY_BUILD_ENV } from "./env-CuzZZyjB.mjs";
+import { i as otherQueueConsumers, n as chooseCloudflareQueueName, o as scopedCloudflareQueueName, r as cloudflareQueueName } from "./dispatch-BNLB5_Gm.mjs";
+import { a as resolveDistDir, n as collectRevalidate, o as resolveWorkerDirName, r as hasRevalidate } from "./isr-config-Czzb4mIq.mjs";
+import { t as assertNoPrerenderFailures } from "./prerender-render-RlAj6hh8.mjs";
+import { a as buildEnv, n as readVersionMetadataBinding, r as selectNativeVersionMetadataBinding, t as CLOUDFLARE_PRESERVE_BINDINGS_BUILD_ENV } from "./version-metadata-C8hLzQkv.mjs";
+import { a as emailConfigInputs, c as renderAddressMap, d as collectPrerenderPathsNode, f as prerenderPages, i as createNodeEmailDns, l as renderEmailChecklist, n as SEND_EMAIL_BINDING, o as preflightEmail, p as prerenderPagesNode, r as applyEmailSetup, t as EMAIL_FROM_VAR, u as collectPrerenderPaths } from "./email-cloudflare-MvJIxrwx.mjs";
+import { n as completeApplicationAnalysis, t as analyzeApplication } from "./application-routing-P4TggvWp.mjs";
+import { n as prepareCfFrameworkBuildOutput, r as prepareCfStaticBuildOutput, t as prepareCfBuildOutput } from "./cf-build-output-B1C8U83u.mjs";
+import { i as validateMigrations, t as assertJournalCoherence } from "./validate-Ddzl-IwT.mjs";
+import { A as confirm, K as select, L as log, tt as isCancel } from "./dist-D23AAMxT.mjs";
+import { r as getPackageDir } from "./agents-DRo8gzni.mjs";
+import { a as isExpiredTokenError, r as PlatformClient } from "./client-CoxPEhJq.mjs";
+import { o as formatCount, p as note, r as createSpinner, u as getErrorMessage } from "./output-BCdLioKP.mjs";
+import { t as getRequestedProjectSlug } from "./resolve-project-D0YNnJfm.mjs";
+import { i as safePositional, r as readCfUploadOutput, t as CF_VERSION_SOURCE_MAX_OUTPUT_BYTES } from "./cf-command-values-Ccl-zRhl.mjs";
+import { a as FRAMEWORK_PRESETS, c as hasBackendFiles, i as isCleanCloudflareExit, l as resolveCloudflareOperationArgv, o as detectPreset, s as formatProjectCommand, t as createCloudflareProcessRunner, u as resolveProjectCommand } from "./cloudflare-process-DjJ638A-.mjs";
+import { f as listSelfHostSecretNames, h as selfHostSchemaFailureMessage, i as SelfHostSecretListError, l as dischargeSelfHostEnvContext, n as SelfHostFirstDeployError, p as readEmittedWorkerVars, r as SelfHostSchemaError, s as deriveSelfHostEnvContextFromVars, t as SelfHostEnvValidationError } from "./env-validation-GV1oD4EV.mjs";
+import { a as needsWrapper, r as cleanupWrapper, t as bundleEntry } from "./wrapper-C9SUxoj7.mjs";
+import { A as promptDeployProjectConfig, C as ensureManagedHyperdrive, D as hasNonPageBackend, E as getGitCommit, F as resolveStaticBuildCommand, I as resolveStaticDeployPreset, L as toManifestSchedulesAndQueues, M as resolveDeployWorkerMain, N as resolveDeployWranglerCompat, O as hasPrerenderSources, P as resolveFullDeployBuildCommand, R as validateDeployMigrations, S as createProjectFromSlug, T as getExitCode, _ as getDeploySchemaDriftMessage, a as collectAndHashAssets, b as assertProjectDeployAccess, c as readWranglerHtmlHandling, d as printDeploySuccess, f as mergeAndLintRoutingRules, g as assertDeploySchemaDriftFree, h as warnUnpublishedRouting, i as buildStaticManifest, j as resolveDeployLiveBindingConfig, k as log$1, l as formatDeploySummary, m as warnIgnoredNotFoundForFramework, n as runStaticDeploy, o as collectWorkerFiles, p as streamDirectR2Deploy, r as buildFrameworkManifest, s as detectNonSpaFallbackWarning, t as assembleVoidManifest, u as printDeployContext, v as hasDeploySchemaDrift, w as generateDeployWrapperIfNeeded, x as assertWorkerMainUploaded, y as assertEnvSchemaValid } from "./deploy-managed-static-BHVbB_-A.mjs";
+import { a as checkCloudflareProvisionDrift, b as resolveWorkersDevComplianceRegion, d as isQueueConfirmedAbsent, f as isRealD1Id, g as provisionCloudflareResources, i as assertValidResourceName, m as isRealKvId, s as deleteEnvVarCaseAware } from "./provision-BbCzpbXs.mjs";
+import { c as scrubWranglerAuthCredentials, n as buildSchemaProbeEnv, o as resolveDeployTransport, r as deployChildEnv, s as scrubManagedDeployBuildMarkers, t as MANAGED_DEPLOY_BUILD_ENV } from "./deploy-transport-DEyOUfac.mjs";
+import { n as getCfCliVersion, r as getVoidUserAgent, t as publishCloudflareWorkerSettings } from "./cf-worker-settings-CARs4Wy9.mjs";
+import { t as sanitizeTerminalLogText } from "./terminal-log-text-DNsWJREL.mjs";
+import { t as promptForLoginToken } from "./login-CJopTWX4.mjs";
+import { a as parseCloudflareAuthSession, i as ensureCloudflareAuthentication, n as cloudflareCredentialOverrides, t as CloudflareAuthenticationError } from "./cloudflare-auth-CEu-1Ps_.mjs";
+import { a as createCloudflareEmptyDomainPublisher, i as createCloudflareEmptyCronPublisher } from "./cloudflare-operations-CrskD4_O.mjs";
+import { n as openMigrationValidationDatabase, t as SqliteMigrationError } from "./sqlite-validation-CLJXXN93.mjs";
+import { r as discoverFrameworkWranglerFiles, t as migrateLegacyVoidConfig } from "./migrate-ChHHZBTi.mjs";
+import { a as runMySqlMigrations } from "./runner-mysql-Bdmsp_x4.mjs";
+import { i as runPgMigrations } from "./runner-pg-mYc75KfH.mjs";
+import { t as collectGitDeployMetadata } from "./git-metadata-Cukp5kV5.mjs";
 import { createRequire } from "node:module";
 import { cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, realpathSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -65,7 +67,7 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import mime from "mime";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { Minimatch } from "minimatch";
-//#region src/cli/cloudflare-candidate.ts
+// src/cli/cloudflare-candidate.ts
 const CANDIDATE_FILE = ".void/cloudflare-candidate.json";
 const INVALID_CANDIDATE_MESSAGE = "The saved Cloudflare candidate receipt is invalid. Restore or remove .void/cloudflare-candidate.json before retrying.";
 /** A saved upload chain: a non-empty list of distinct, non-empty version IDs. */
@@ -104,8 +106,7 @@ function clearCloudflareCandidate(root) {
 	const path = join(root, CANDIDATE_FILE);
 	if (existsSync(path)) unlinkSync(path);
 }
-//#endregion
-//#region src/cli/cloudflare-link.ts
+// src/cli/cloudflare-link.ts
 const LINK_FILE = ".void/cloudflare-link.json";
 /** A pending handoff survives a failed build, so retrying cannot provision replacements. */
 function readCloudflareLink(root) {
@@ -218,8 +219,7 @@ async function maybeLinkCloudflareDeploy(root, options = {}, deps = {}) {
 	});
 	return isCancel(accepted) || accepted !== true ? "cancelled" : "existing";
 }
-//#endregion
-//#region src/cli/cloudflare-readiness.ts
+// src/cli/cloudflare-readiness.ts
 const STATE_FILE = join(".void", "cloudflare.json");
 /** Resolve the account subdomain without exposing Cloudflare credentials to project code. */
 function resolveCloudflareWorkersDevSubdomain(root, accountId, env = process.env) {
@@ -324,8 +324,7 @@ function readCloudflareLocalState(root) {
 		return {};
 	}
 }
-//#endregion
-//#region src/cli/deploy-binding-snapshot.ts
+// src/cli/deploy-binding-snapshot.ts
 /** The id-bearing binding fields whose identity must survive the build unchanged. */
 const DEPLOY_BINDING_IDENTITY_FIELDS = {
 	d1: {
@@ -748,8 +747,7 @@ function collectEmittedQueueGroupNames(value, group) {
 function deployPointerPath(root) {
 	return join(root, ".wrangler", "deploy", "config.json");
 }
-//#endregion
-//#region src/cli/deploy-resources.ts
+// src/cli/deploy-resources.ts
 /** Human labels for a drifted resource kind, used in guidance messages. */
 const CLOUDFLARE_RESOURCE_LABELS = {
 	d1: "D1 database",
@@ -936,8 +934,7 @@ async function computeDesiredCloudflareResources(root, voidConfig, configPath, a
 		needsLive: bindings.needsLive === true
 	};
 }
-//#endregion
-//#region src/cli/deploy-artifact-validation.ts
+// src/cli/deploy-artifact-validation.ts
 /**
 * Derive the env schema's server and required key names in an isolated subprocess, so project
 * code never runs in the credentialed parent. Loaded lazily to keep it out of managed deploys.
@@ -1357,8 +1354,7 @@ async function validateCloudflarePostBuildEnv(options) {
 	}
 	return true;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json
+// ../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json
 var require_vendors = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = [
 		{
@@ -1685,8 +1681,7 @@ var require_vendors = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 	];
 }));
-//#endregion
-//#region src/cli/deploy-cloudflare-auth.ts
+// src/cli/deploy-cloudflare-auth.ts
 var import_ci_info = (/* @__PURE__ */ __commonJSMin(((exports) => {
 	const vendors = require_vendors();
 	const env = process.env;
@@ -1882,11 +1877,9 @@ async function ensureCloudflareAuthSecret(options) {
 	if (!(await list(false)).includes("BETTER_AUTH_SECRET")) throw new CloudflareAuthSecretError(`deploy: Cloudflare reported success but ${BETTER_AUTH_SECRET_NAME} was not present afterward. No worker was uploaded; retry once Cloudflare secret storage is available.`, "verification-failed");
 	return { created: true };
 }
-//#endregion
-//#region src/cli/node-buffer.ts
+// src/cli/node-buffer.ts
 const Buffer$2 = Buffer$1;
-//#endregion
-//#region src/cli/cf-version-api.ts
+// src/cli/cf-version-api.ts
 var CloudflareApiError = class extends Error {
 	status;
 	code;
@@ -2429,7 +2422,7 @@ async function prepareContainerMetadata(options) {
 						maxOutputBytes: 16777216
 					});
 					if (pushed.status !== 0 || pushed.signal || pushed.error) throw new Error("Cloudflare Container image push failed.");
-					const matches = [...pushed.stdout.matchAll(/Pushed image:\s*(\S+)/g)];
+					const matches = [...`${pushed.stdout}\n${pushed.stderr}`.matchAll(/Pushed image:\s*(\S+)/g)];
 					const remote = matches.length === 1 ? matches[0][1] : "";
 					if (!remote.startsWith(`registry.cloudflare.com/${options.accountId}/`) || [...remote].some((character) => character.charCodeAt(0) <= 32 || character.charCodeAt(0) === 127)) throw new Error("Cloudflare Container image push did not return the verified account registry.");
 					image = await dockerImageDigest(remote, Math.min(12e4, remaining()), options.verifyUploader);
@@ -2503,15 +2496,7 @@ async function ensureContainerApplications(options) {
 * uploads. A user-authored `_headers` is not sent on this path.
 */
 function readGeneratedAssetHeaders(output) {
-	if (!output.assetsDirectory) return;
-	let text;
-	try {
-		text = readFileSync(join(getWorkerAssetsDir(output.directory), "_headers"), "utf8");
-	} catch (cause) {
-		if (cause instanceof Error && "code" in cause && cause.code === "ENOENT") return;
-		throw cause;
-	}
-	return isGeneratedAssetHeaders(text) ? text : void 0;
+	return output.assetsDirectory ? readGeneratedAssetHeadersFile(getWorkerAssetsDir(output.directory)) : void 0;
 }
 async function uploadAssets(options) {
 	if (!options.output.assetsDirectory) return;
@@ -2716,8 +2701,7 @@ async function uploadPinnedCloudflareVersion(options) {
 		urls: Array.isArray(uploaded.urls) ? uploaded.urls.filter((url) => typeof url === "string") : []
 	};
 }
-//#endregion
-//#region src/cli/cf-version-runner.ts
+// src/cli/cf-version-runner.ts
 function failed(message) {
 	return {
 		status: 1,
@@ -2968,7 +2952,7 @@ function createCfVersionRunner(options) {
 	const uploadedResult = (result) => {
 		if (!isCleanCloudflareExit(result)) return result;
 		if (isRecord(result.data) && typeof result.data.versionId === "string") return result;
-		const { versionId, previewUrl, workersDevUrl } = readCfUploadOutput(result.stdout);
+		const { versionId, previewUrl, workersDevUrl } = readCfUploadOutput(result);
 		return {
 			...result,
 			data: versionId ? {
@@ -3299,8 +3283,7 @@ function createCfVersionRunner(options) {
 		return failed(`Unsupported Cloudflare activation operation: ${operation.type}`);
 	};
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-helpers.ts
+// src/cli/deploy-cloudflare-helpers.ts
 /**
 * Discover the root wrangler config path the same way the build / bindings
 * writer do (wrangler.jsonc first, then wrangler.json). Falls back to the
@@ -3672,8 +3655,7 @@ function cloudflareWorkerReadinessHeaders() {
 		CF_ACCESS_TOKEN: process.env.CF_ACCESS_TOKEN
 	});
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-static.ts
+// src/cli/deploy-cloudflare-static.ts
 /** Default runtime date for static and framework Workers that set none. */
 const DEFAULT_COMPATIBILITY_DATE = "2026-09-11";
 /** Build the trusted Wrangler pointer for a framework that emits Worker files directly. */
@@ -3783,6 +3765,57 @@ async function resolveCloudflareVoidStaticPreset(root, voidConfig) {
 		appType: "static"
 	};
 }
+/**
+* Route a static deploy around its thin edge Worker. Without edge rules that
+* Worker only answers `/__void/ready`, so Cloudflare serves every other request
+* from assets without starting it. The Void-generated `_headers` is not such a
+* rule: it only marks fingerprinted files immutable, which Cloudflare applies
+* itself. Any other rule keeps the Worker in front of every request.
+*/
+function planStaticEdgeRouting(options) {
+	const generatedHeaders = readGeneratedAssetHeadersFile(options.outputDir);
+	const merged = mergeAndLintRoutingRules(options.outputDir, options.routing);
+	const manifest = buildStaticManifest({
+		appType: options.appType,
+		alwaysUseHttps: options.routing?.alwaysUseHttps,
+		hashedAssetsPrefix: "assets",
+		headerRules: merged.headerRules,
+		redirectRules: merged.redirectRules,
+		fallbackRules: merged.fallbackRules,
+		notFound: options.routing?.notFound,
+		html_handling: options.htmlHandling
+	});
+	const assetConfig = manifest.assetConfig ?? { not_found_handling: "none" };
+	const entry = {
+		alwaysUseHttps: manifest.alwaysUseHttps,
+		headerRules: manifest.headerRules,
+		redirectRules: manifest.redirectRules,
+		fallbackRules: manifest.fallbackRules
+	};
+	const userHeaderRules = generatedHeaders === void 0 ? entry.headerRules : convertHeadersConfig(options.routing?.headers);
+	if (edgeRulesNeedWorker({
+		...entry,
+		headerRules: userHeaderRules
+	})) return {
+		assetConfig: {
+			...assetConfig,
+			run_worker_first: true
+		},
+		entry,
+		assetHeaders: void 0
+	};
+	return {
+		assetConfig: {
+			...assetConfig,
+			run_worker_first: [...VOID_INTERNAL_WORKER_FIRST]
+		},
+		entry: {
+			...entry,
+			headerRules: void 0
+		},
+		assetHeaders: generatedHeaders
+	};
+}
 async function runCloudflareStaticDeploy(root, options, voidConfig, preset, cliLog, deps, initialCloudflareLink, initialCloudflareCandidate) {
 	const exit = deps.exit ?? ((code) => process.exit(code));
 	const configPath = discoverRootWranglerConfig(root);
@@ -3840,16 +3873,11 @@ async function runCloudflareStaticDeploy(root, options, voidConfig, preset, cliL
 		log$1.error(["deploy: the root Wrangler config changed during the static build.", "Refusing to upload a config rewritten by project build code. Restore the config and retry."].join("\n"));
 		return exit(1);
 	}
-	const merged = mergeAndLintRoutingRules(preset.outputDir, voidConfig.routing);
-	const manifest = buildStaticManifest({
+	const edgeRouting = planStaticEdgeRouting({
+		outputDir: preset.outputDir,
 		appType: preset.appType,
-		alwaysUseHttps: voidConfig.routing?.alwaysUseHttps,
-		hashedAssetsPrefix: "assets",
-		headerRules: merged.headerRules,
-		redirectRules: merged.redirectRules,
-		fallbackRules: merged.fallbackRules,
-		notFound: voidConfig.routing?.notFound,
-		html_handling: readWranglerHtmlHandling(rootConfig)
+		routing: voidConfig.routing,
+		htmlHandling: readWranglerHtmlHandling(rootConfig)
 	});
 	const entryPath = join(root, ".void", "deploy", "cloudflare", "static-edge.mjs");
 	mkdirSync(dirname(entryPath), { recursive: true });
@@ -3862,7 +3890,7 @@ async function runCloudflareStaticDeploy(root, options, voidConfig, preset, cliL
 		main: relative(dirname(staticConfigPath), entryPath),
 		assetsDirectory: relative(dirname(staticConfigPath), preset.outputDir),
 		compatibilityDate: voidConfig.worker?.compatibility_date ?? readWranglerTopLevelString(rootConfig, "compatibility_date") ?? DEFAULT_COMPATIBILITY_DATE,
-		assetConfig: manifest.assetConfig ?? { not_found_handling: "none" }
+		assetConfig: edgeRouting.assetConfig
 	});
 	deduplicateGeneratedCompatibilityFlags(staticConfigPath, configPath);
 	const staticConfig = parseRootWranglerConfig(staticConfigPath);
@@ -3876,17 +3904,15 @@ async function runCloudflareStaticDeploy(root, options, voidConfig, preset, cliL
 	}, null, 2)}\n`, { mode: 384 });
 	writeFileSync(entryPath, renderCloudflareStaticEntry({
 		runtimeImport: "void/edge",
-		alwaysUseHttps: manifest.alwaysUseHttps,
-		headerRules: manifest.headerRules,
-		redirectRules: manifest.redirectRules,
-		fallbackRules: manifest.fallbackRules,
+		...edgeRouting.entry,
 		versionMetadataBinding
 	}));
 	if (existingWorker) assertExistingCloudflareConfig(existingWorker, parseRootWranglerConfig(staticConfigPath), true);
 	const stagedAssetsDirectory = join(root, ".void", "deploy", "cloudflare", "assets");
 	stageCloudflareStaticAssets({
 		sourceDirectory: preset.outputDir,
-		destinationDirectory: stagedAssetsDirectory
+		destinationDirectory: stagedAssetsDirectory,
+		headers: edgeRouting.assetHeaders
 	});
 	const queueConsumerCleanup = readWranglerManagedQueueCleanupCandidates(configPath);
 	assertCloudflareDeployTargetUnchanged({
@@ -3969,8 +3995,7 @@ async function runCloudflareStaticDeploy(root, options, voidConfig, preset, cliL
 	}), execution.previewUrl);
 	printDeploySuccess();
 }
-//#endregion
-//#region src/cli/deploy-migrations.ts
+// src/cli/deploy-migrations.ts
 /**
 * Apply the checked-in migrations to an in-memory SQLite database and assert the resulting
 * schema has every required auth table and column, with its primary key, NOT NULL, UNIQUE and
@@ -4357,8 +4382,7 @@ To undo these migrations, restore this point (discards every later write):
 	}
 	return { restoreCommand };
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-build.ts
+// src/cli/deploy-cloudflare-build.ts
 /** Build the Worker without Cloudflare credentials, then run the post-build gates. */
 async function buildCloudflareWorker(input) {
 	const { root, voidConfig, deps, exit, atomic, frameworkPreset, detectedFramework } = input;
@@ -4532,8 +4556,7 @@ async function buildCloudflareWorker(input) {
 		prepareBuildOutput
 	};
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-migrate.ts
+// src/cli/deploy-cloudflare-migrate.ts
 /** Provision the auth secret and apply database migrations, then verify the artifact. */
 async function migrateCloudflareWorker(input) {
 	const { root, deps, exit, cliLog } = input;
@@ -4619,8 +4642,7 @@ async function migrateCloudflareWorker(input) {
 		d1RestoreCommand
 	};
 }
-//#endregion
-//#region src/cli/cloudflare-deploy/classify.ts
+// src/cli/cloudflare-deploy/classify.ts
 /**
 * Narrow native Cloudflare deploys to app shapes whose emitted Worker artifact
 * the current verifier understands. This runs before any account operation;
@@ -4660,8 +4682,7 @@ function unsupported(reason) {
 		reason
 	};
 }
-//#endregion
-//#region src/cli/cloudflare-isr.ts
+// src/cli/cloudflare-isr.ts
 /** A configured opt-in authorizes only the cache identity declared before the build. */
 function approvedCloudflareIsrBinding(config, rootConfig) {
 	if (config.routing?.isr !== true || resolveBindingNames(config.inference?.bindings)?.kv === "ISR_CACHE") return [];
@@ -4697,8 +4718,7 @@ async function chooseCloudflareIsr(root, config, options) {
 	log.info(`Saved routing.isr: ${String(enabled)} in void.config.ts. ISR caching ${enabled ? "will be enabled in this deployment" : "stays disabled until you change this setting"}.`);
 	return enabled;
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-email.ts
+// src/cli/deploy-cloudflare-email.ts
 /** Whether the root config carries the `send_email` binding Void writes. */
 function hasVoidSendEmailBinding(rootConfig) {
 	return Array.isArray(rootConfig.send_email) && rootConfig.send_email.some((binding) => binding?.name === "SEND_EMAIL");
@@ -4853,8 +4873,7 @@ async function runCloudflareEmailStep(input) {
 function existingAddresses(rootConfig, pre) {
 	return Array.isArray(rootConfig.addresses) ? rootConfig.addresses.map((a) => typeof a === "string" ? a.toLowerCase() : "").filter((a) => pre.addresses.includes(a)) : [];
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-queues.ts
+// src/cli/deploy-cloudflare-queues.ts
 function isValidQueueName(name) {
 	try {
 		assertValidResourceName("queue", name);
@@ -4961,8 +4980,7 @@ async function chooseCloudflareQueueNames(input) {
 		absent
 	};
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-preflight.ts
+// src/cli/deploy-cloudflare-preflight.ts
 /** Validate source-level native deploy inputs before account operations or project code. */
 async function prepareCloudflareDeploySource(root, options, voidConfig) {
 	if (options.skipBuild) {
@@ -5292,8 +5310,7 @@ async function preflightCloudflareWorker(input) {
 		expectedDurableObjectState
 	};
 }
-//#endregion
-//#region src/cli/deploy-cloudflare-publish.ts
+// src/cli/deploy-cloudflare-publish.ts
 /** Upload the verified Worker as a candidate version, probe it, and activate it. */
 async function publishCloudflareWorker(input) {
 	const { root, deps, exit, cliLog, atomic, detectedFramework, initialCloudflareCandidate } = input;
@@ -5390,8 +5407,7 @@ async function publishCloudflareWorker(input) {
 		framework: detectedFramework?.name
 	}), execution.previewUrl);
 }
-//#endregion
-//#region src/cli/deploy-cloudflare.ts
+// src/cli/deploy-cloudflare.ts
 /** Deploy to the user's own Cloudflare account through the guarded native Worker flow. */
 async function runCloudflareDeploy(root, options, cliLog, deps = {}) {
 	options = withRecordedReadinessAccessOrigin(options);
@@ -5505,8 +5521,7 @@ async function runCloudflareDeploy(root, options, cliLog, deps = {}) {
 	if (preflight.emailMap) log$1.message(renderAddressMap(preflight.emailMap));
 	printDeploySuccess();
 }
-//#endregion
-//#region src/cli/deploy-managed-framework.ts
+// src/cli/deploy-managed-framework.ts
 /**
 * Class B/C framework deploy: build with framework CLI, package with preset output paths.
 */
@@ -5659,8 +5674,7 @@ async function runFrameworkDeploy(root, config, client, detected, fwPreset, void
 	warnUnpublishedRouting(result);
 	printDeploySuccess(result.published !== false);
 }
-//#endregion
-//#region src/cli/deploy-managed-full.ts
+// src/cli/deploy-managed-full.ts
 async function runFullDeploy(root, config, client, voidConfig, fwPreset, skipBuild, gitMetadata, detected, cliLog) {
 	cliLog?.info("deploy_mode", {
 		mode: "full",
@@ -5933,8 +5947,7 @@ async function runFullDeploy(root, config, client, voidConfig, fwPreset, skipBui
 	warnUnpublishedRouting(result);
 	printDeploySuccess(result.published !== false);
 }
-//#endregion
-//#region src/cli/github-oidc.ts
+// src/cli/github-oidc.ts
 /**
 * GitHub Actions OIDC → Void deploy-token exchange for `void deploy` without `VOID_TOKEN`.
 *
@@ -6029,8 +6042,7 @@ async function safeText(res) {
 		return "";
 	}
 }
-//#endregion
-//#region src/cli/installed-void.ts
+// src/cli/installed-void.ts
 /** A global CLI still builds with the project's installed Vite plugin. */
 function assertInstalledVoidMatchesCli(root) {
 	const projectManifest = join(root, "package.json");
@@ -6067,8 +6079,7 @@ function assertInstalledVoidMatchesCli(root) {
 	if (installedVersion !== cli.version) throw new Error(`deploy: this CLI is void@${cli.version}, but the project's installed Vite plugin is ${installedVersion ? `void@${installedVersion}` : "missing"}. Install the same Void version in the project (or link this development checkout) before deploying. The build imports the project package; mixing versions can rewrite legacy config and produce an unsafe Cloudflare deploy target.`);
 	if (installedPackageDir && existsSync(join(cliPackageDir, "src", "index.ts")) && realpathSync(installedPackageDir) !== realpathSync(cliPackageDir)) throw new Error("deploy: this development CLI and the project Vite plugin come from different Void builds, even though their package versions match. Link the same development checkout into the project before deploying.");
 }
-//#endregion
-//#region src/cli/log-file.ts
+// src/cli/log-file.ts
 /**
 * Flatten a serialized `ErrChainNode` (from `describeErrorChain`, or read back
 * out of a JSONL record) to a single inline string, joining cause levels with
@@ -6218,8 +6229,7 @@ function openDeployLog(opts) {
 		}
 	};
 }
-//#endregion
-//#region src/cli/log-summary.ts
+// src/cli/log-summary.ts
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 const FIELD_VALUE_MAX = 80;
 const LINE_MAX = 160;
@@ -6361,8 +6371,7 @@ function buildDeployLogSummary(path) {
 	}
 	return formatDeployLogSummary(text.split("\n"));
 }
-//#endregion
-//#region src/cli/deploy.ts
+// src/cli/deploy.ts
 function resolveDeploymentPlatform(root, options) {
 	return options?.platform ?? readDeploymentPlatform(root) ?? "void";
 }
@@ -6612,5 +6621,4 @@ async function runManagedDeploy(root, options, cliLog) {
 		throw error;
 	}
 }
-//#endregion
 export { discoverRootWranglerConfig as a, runWranglerAuthToken as c, checkWranglerMigrationApplySet as i, deriveWorkerName as l, resolveDeploymentPlatform as n, createDeployWranglerRunner as o, runDeploy as r, isWranglerNonInteractiveOrCI as s, parseRootWranglerConfig$1 as t };