wrangler 4.139.0 → 4.141.0

package/wrangler-dist/cli.js

@@ -235,6 +235,10 @@ var init_exports = __esm({
 });
 
 // ../workers-utils/src/config/durable-object-exports.ts
+function isLiveDurableObjectExport(exportConfig) {
+  const state3 = exportConfig.state ?? "created";
+  return state3 === "created" || state3 === "expecting-transfer";
+}
 function getDurableObjectExports(exports$1) {
   return partitionExports(exports$1)["durable-object"];
 }
@@ -245,6 +249,7 @@ var init_durable_object_exports = __esm({
   "../workers-utils/src/config/durable-object-exports.ts"() {
     init_import_meta_url();
     init_exports();
+    __name(isLiveDurableObjectExport, "isLiveDurableObjectExport");
     __name(getDurableObjectExports, "getDurableObjectExports");
     __name(hasDurableObjectExports, "hasDurableObjectExports");
   }
@@ -402,7 +407,7 @@ function getDurableObjectClassNameToUseSQLiteMap(migrations, exports$1) {
     if (entry.type !== "durable-object") {
       continue;
     }
-    if (entry.state === void 0 || entry.state === "created" || entry.state === "expecting-transfer") {
+    if (isLiveDurableObjectExport(entry)) {
       durableObjectClassNameToUseSQLiteMap.set(
         className,
         entry.storage === "sqlite"
@@ -3168,6 +3173,19 @@ function indexLocation(file3, index) {
   }
   return { lineText, line, column, ...file3 };
 }
+function parseHumanDuration(s8) {
+  const unitsMap = new Map(Object.entries(units));
+  s8 = s8.trim().toLowerCase();
+  let base = 1;
+  for (const [name2, _5] of unitsMap) {
+    if (s8.endsWith(name2)) {
+      s8 = s8.substring(0, s8.length - name2.length);
+      base = unitsMap.get(name2) || 1;
+      break;
+    }
+  }
+  return Number(s8) * base;
+}
 function parseNonHyphenedUuid(uuid3) {
   if (uuid3 == null || uuid3.includes("-")) {
     return uuid3;
@@ -3237,7 +3255,7 @@ function removeBOMAndValidate(buffer, file3) {
   }
   return content;
 }
-var ParseError, APIError, UNSUPPORTED_BOMS;
+var ParseError, APIError, units, UNSUPPORTED_BOMS;
 var init_parse2 = __esm({
   "../workers-utils/src/parse.ts"() {
     init_import_meta_url();
@@ -3317,6 +3335,48 @@ var init_parse2 = __esm({
     __name(readFileSyncToBuffer, "readFileSyncToBuffer");
     __name(readFileSync, "readFileSync");
     __name(indexLocation, "indexLocation");
+    units = {
+      nanoseconds: 1e-9,
+      nanosecond: 1e-9,
+      microseconds: 1e-6,
+      microsecond: 1e-6,
+      milliseconds: 1e-3,
+      millisecond: 1e-3,
+      seconds: 1,
+      second: 1,
+      minutes: 60,
+      minute: 60,
+      hours: 3600,
+      hour: 3600,
+      days: 86400,
+      day: 86400,
+      weeks: 604800,
+      week: 604800,
+      month: 18144e3,
+      year: 220752e3,
+      nsecs: 1e-9,
+      nsec: 1e-9,
+      usecs: 1e-6,
+      usec: 1e-6,
+      msecs: 1e-3,
+      msec: 1e-3,
+      secs: 1,
+      sec: 1,
+      mins: 60,
+      min: 60,
+      ns: 1e-9,
+      us: 1e-6,
+      ms: 1e-3,
+      mo: 18144e3,
+      yr: 220752e3,
+      s: 1,
+      m: 60,
+      h: 3600,
+      d: 86400,
+      w: 604800,
+      y: 220752e3
+    };
+    __name(parseHumanDuration, "parseHumanDuration");
     __name(parseNonHyphenedUuid, "parseNonHyphenedUuid");
     __name(parseByteSize, "parseByteSize");
     UNSUPPORTED_BOMS = [
@@ -21200,18 +21260,22 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateDefines(envName),
       {}
     ),
-    durable_objects: notInheritable(
-      diagnostics,
-      topLevelEnv,
-      rawConfig,
-      rawEnv,
-      envName,
-      "durable_objects",
-      validateBindingsProperty(envName, validateDurableObjectBinding),
-      {
-        bindings: []
-      }
-    ),
+    durable_objects: (() => {
+      const durableObjects = notInheritable(
+        diagnostics,
+        topLevelEnv,
+        rawConfig,
+        rawEnv,
+        envName,
+        "durable_objects",
+        validateDurableObjectsProperty(envName, true),
+        { bindings: [] }
+      );
+      return {
+        ...durableObjects,
+        bindings: durableObjects.bindings ?? []
+      };
+    })(),
     workflows: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -22995,8 +23059,7 @@ function warnIfDurableObjectsHaveNoLifecycleConfig(diagnostics, durableObjects,
     if (entry === void 0 || entry.type !== "durable-object") {
       return false;
     }
-    const state3 = entry.state ?? "created";
-    return state3 === "created" || state3 === "expecting-transfer";
+    return isLiveDurableObjectExport(entry);
   }, "exportsCovers");
   const uncoveredByExports = exportedDurableObjects.filter(
     (binding) => typeof binding.class_name !== "string" || !exportsCovers(binding.class_name)
@@ -23218,7 +23281,7 @@ function isDockerfile(imagePath, configPath) {
   }
   return false;
 }
-var bucketFormatMessage, friendlyBindingNames, bindingTypeFriendlyNames, ENGLISH, ALLOWED_INSTANCE_TYPES, isRoute, isRouteArray, validateTailConsumers, validateStreamingTailConsumers, validateAndNormalizeRules, ARTIFACTS_EVENT_TYPE_SET, validateTriggers, validateRules, validateRule, validateDefines, validateVars, validateSecrets, validateBindingsProperty, validateUnsafeSettings, validateDurableObjectBinding, workflowNameFormatMessage, validateWorkflowBinding, validateCflogfwdrObject, validateCflogfwdrBinding, validateAssetsConfig, validateNamedSimpleBinding, validateAIBinding, validateVersionMetadataBinding, validateUnsafeBinding, validateBindingArray, validateCloudchamberConfig, validateKVBinding, validateSendEmailBinding, validateQueueBinding, validateR2Binding, validateD1Binding, validateVectorizeBinding, validateAISearchNamespaceBinding, validateAISearchBinding, validateAgentMemoryBinding, validateHyperdriveBinding, validateVpcServiceBinding, validateVpcNetworkBinding, validateBindingsHaveUniqueNames, validateServiceBinding, validateAnalyticsEngineBinding, validateWorkerNamespaceBinding, validateMTlsCertificateBinding, validateConsumer, validateConnectHandler, validateCompatibilityDate, validatePipelineBinding, validateSecretsStoreSecretBinding, validateArtifactsBinding, validateHelloWorldBinding, validateFlagshipBinding, validateWorkerLoaderBinding, validateRateLimitBinding, validatePreviewsConfig, validateMigrations, VALID_EXPORT_STORAGES, JS_IDENTIFIER_RE, validateExports, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MIN, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MAX, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_COUNT_MIN, validateContainerObservability, validateObservability, validateAccess, validateCache, validatePythonModules;
+var bucketFormatMessage, friendlyBindingNames, bindingTypeFriendlyNames, ENGLISH, ALLOWED_INSTANCE_TYPES, isRoute, isRouteArray, validateTailConsumers, validateStreamingTailConsumers, validateAndNormalizeRules, ARTIFACTS_EVENT_TYPE_SET, validateTriggers, validateRules, validateRule, validateDefines, validateVars, validateSecrets, validateBindingsProperty, DURABLE_OBJECTS_CODE_UPDATE_MAX_DELAY_SECONDS, MILLISECOND_PRECISION_TOLERANCE, validateDurableObjectsProperty, validateUnsafeSettings, validateDurableObjectBinding, workflowNameFormatMessage, validateWorkflowBinding, validateCflogfwdrObject, validateCflogfwdrBinding, validateAssetsConfig, validateNamedSimpleBinding, validateAIBinding, validateVersionMetadataBinding, validateUnsafeBinding, validateBindingArray, validateCloudchamberConfig, validateKVBinding, validateSendEmailBinding, validateQueueBinding, validateR2Binding, validateD1Binding, validateVectorizeBinding, validateAISearchNamespaceBinding, validateAISearchBinding, validateAgentMemoryBinding, validateHyperdriveBinding, validateVpcServiceBinding, validateVpcNetworkBinding, validateBindingsHaveUniqueNames, validateServiceBinding, validateAnalyticsEngineBinding, validateWorkerNamespaceBinding, validateMTlsCertificateBinding, validateConsumer, validateConnectHandler, validateCompatibilityDate, validatePipelineBinding, validateSecretsStoreSecretBinding, validateArtifactsBinding, validateHelloWorldBinding, validateFlagshipBinding, validateWorkerLoaderBinding, validateRateLimitBinding, validatePreviewsConfig, validateMigrations, VALID_EXPORT_STORAGES, JS_IDENTIFIER_RE, validateExports, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MIN, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_PERCENTAGE_MAX, CONTAINER_OBSERVABILITY_TARGET_INSTANCE_COUNT_MIN, validateContainerObservability, validateObservability, validateAccess, validateCache, validatePythonModules;
 var init_validation = __esm({
   "../workers-utils/src/config/validation.ts"() {
     init_import_meta_url();
@@ -23761,6 +23824,85 @@ Please add a binding for each to "${fieldPath}.bindings":
       }
       return isValid;
     }, "validateBindingsProperty");
+    DURABLE_OBJECTS_CODE_UPDATE_MAX_DELAY_SECONDS = 24 * 60 * 60;
+    MILLISECOND_PRECISION_TOLERANCE = 1e-6;
+    validateDurableObjectsProperty = /* @__PURE__ */ __name((envName, allowMissingBindings = false, allowCodeUpdateStrategy = true) => (diagnostics, field, value, config2) => {
+      const fieldPath = config2 === void 0 ? `${field}` : `env.${envName}.${field}`;
+      if (value === void 0) {
+        return true;
+      }
+      if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        diagnostics.errors.push(
+          `The field "${fieldPath}" should be an object but got ${JSON.stringify(value)}.`
+        );
+        return false;
+      }
+      validateAdditionalProperties(
+        diagnostics,
+        fieldPath,
+        Object.keys(value),
+        allowCodeUpdateStrategy ? ["bindings", "code_update_strategy"] : ["bindings"]
+      );
+      const bindingsContainer = allowMissingBindings && !hasProperty(value, "bindings") ? { ...value, bindings: [] } : value;
+      let isValid = validateBindingsProperty(
+        envName,
+        validateDurableObjectBinding
+      )(diagnostics, field, bindingsContainer, config2);
+      if (!allowCodeUpdateStrategy) {
+        return isValid;
+      }
+      if (!hasProperty(value, "code_update_strategy") || value.code_update_strategy === void 0) {
+        return isValid;
+      }
+      const strategy = value.code_update_strategy;
+      const strategyPath = `${fieldPath}.code_update_strategy`;
+      if (typeof strategy !== "object" || strategy === null || Array.isArray(strategy)) {
+        diagnostics.errors.push(
+          `The field "${strategyPath}" should be an object but got ${JSON.stringify(strategy)}.`
+        );
+        return false;
+      }
+      validateAdditionalProperties(
+        diagnostics,
+        strategyPath,
+        Object.keys(strategy),
+        ["mode", "max_delay"]
+      );
+      isValid = validateRequiredProperty(
+        diagnostics,
+        strategyPath,
+        "mode",
+        hasProperty(strategy, "mode") ? strategy.mode : void 0,
+        "string",
+        ["immediate", "deferred"]
+      ) && isValid;
+      const maxDelay = hasProperty(strategy, "max_delay") ? strategy.max_delay : void 0;
+      const maxDelayHasValidType = validateOptionalProperty(
+        diagnostics,
+        strategyPath,
+        "max_delay",
+        maxDelay,
+        "number"
+      );
+      isValid = maxDelayHasValidType && isValid;
+      if (maxDelayHasValidType && typeof maxDelay === "number" && (!Number.isFinite(maxDelay) || maxDelay < 0 || maxDelay > DURABLE_OBJECTS_CODE_UPDATE_MAX_DELAY_SECONDS)) {
+        diagnostics.errors.push(
+          `Expected "${strategyPath}.max_delay" to be between 0 and ${DURABLE_OBJECTS_CODE_UPDATE_MAX_DELAY_SECONDS} seconds but got ${JSON.stringify(maxDelay)}.`
+        );
+        isValid = false;
+      }
+      if (maxDelayHasValidType && typeof maxDelay === "number" && Number.isFinite(maxDelay) && maxDelay >= 0 && maxDelay <= DURABLE_OBJECTS_CODE_UPDATE_MAX_DELAY_SECONDS) {
+        const milliseconds = maxDelay * 1e3;
+        const roundedMilliseconds = Math.round(milliseconds);
+        if (maxDelay > 0 && roundedMilliseconds === 0 || Math.abs(milliseconds - roundedMilliseconds) > MILLISECOND_PRECISION_TOLERANCE) {
+          diagnostics.errors.push(
+            `Expected "${strategyPath}.max_delay" to use millisecond precision but got ${JSON.stringify(maxDelay)}.`
+          );
+          isValid = false;
+        }
+      }
+      return isValid;
+    }, "validateDurableObjectsProperty");
     validateUnsafeSettings = /* @__PURE__ */ __name((envName) => (diagnostics, field, value, config2) => {
       const fieldPath = config2 === void 0 ? `${field}` : `env.${envName}.${field}`;
       if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -25626,7 +25768,7 @@ ${resolution}`);
         previews,
         `${field}.placement`
       );
-      isValid = validateBindingsProperty(envName, validateDurableObjectBinding)(
+      isValid = validateDurableObjectsProperty(envName, false, false)(
         diagnostics,
         `${field}.durable_objects`,
         previews.durable_objects,
@@ -27179,7 +27321,7 @@ var DEFAULT_COMPAT_DATE;
 var init_default_compat_date = __esm({
   "../workers-utils/src/default-compat-date.ts"() {
     init_import_meta_url();
-    DEFAULT_COMPAT_DATE = "2026-09-23";
+    DEFAULT_COMPAT_DATE = "2026-09-25";
   }
 });
 
@@ -62482,7 +62624,7 @@ var name, version2;
 var init_package = __esm({
   "package.json"() {
     name = "wrangler";
-    version2 = "4.139.0";
+    version2 = "4.141.0";
   }
 });
 
@@ -124309,12 +124451,11 @@ var init_cloudflare = __esm({
     cloudflare_default = Cloudflare;
   }
 });
-
-// ../workers-auth/dist/chunk-O6YSETKJ.mjs
 var __defProp2, __name2;
-var init_chunk_O6YSETKJ = __esm({
-  "../workers-auth/dist/chunk-O6YSETKJ.mjs"() {
+var init_chunk_VAZEJK55 = __esm({
+  "../workers-auth/dist/chunk-VAZEJK55.mjs"() {
     init_import_meta_url();
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __defProp2 = Object.defineProperty;
     __name2 = /* @__PURE__ */ __name((target, value) => __defProp2(target, "name", { value, configurable: true }), "__name");
   }
@@ -126810,12 +126951,13 @@ function scrubEncryptedCredentials(options) {
   return { backendAvailable: false, encryptedFileExisted };
 }
 var import_undici3, hasWarnedAboutDeprecatedV1ApiToken, getCloudflareAPITokenFromEnv, getCloudflareGlobalAuthKeyFromEnv, getCloudflareGlobalAuthEmailFromEnv, ACCOUNT_ID_PATTERN, getAuthDomainFromEnv, getAuthUrlFromEnv, getTokenUrlFromEnv, getRevokeUrlFromEnv, readCloudflareAccountIdFromEnv, DEVICE_AUTH_PATH, getAccessClientIdFromEnv, getAccessClientSecretFromEnv, getCfAuthorizationTokenFromEnv, getCloudflareAuthUseKeyringFromEnv, headersCache, usesAccessCache, RECOMMENDED_CODE_VERIFIER_LENGTH, RECOMMENDED_STATE_LENGTH, PKCE_CHARSET, generateVerificationUrl, generateAuthUrl, POW_MAX_ITERATIONS, TEMPORARY_TERMS_URLS, TEMPORARY_TERMS_PROMPT, TEMPORARY_TERMS_NOTICE, TEMPORARY_TERMS_ERROR, EVENT_ACCOUNT_ERRORS, esm_default3, ErrorOAuth2, ErrorUnknown, ErrorNoAuthCode, ErrorInvalidReturnedStateParam, ErrorInvalidJson, ErrorInvalidScope, ErrorInvalidRequest, ErrorInvalidToken, ErrorAuthenticationGrant, ErrorUnauthorizedClient, ErrorAccessDenied, ErrorUnsupportedResponseType, ErrorServerError, ErrorTemporarilyUnavailable, ErrorAccessTokenResponse, ErrorInvalidClient, ErrorInvalidGrant, ErrorUnsupportedGrantType, DEVICE_FLOW_MAX_DURATION_SECONDS, DEVICE_FLOW_MIN_POLL_INTERVAL_SECONDS, RESERVED_PROFILE_NAMES, BARE_KEY2, HAS_WELLFORMED2, FILE_FORMATS, USER_AUTH_CONFIG_PATH, FileCredentialStore, KEY_LENGTH_BYTES, IV_LENGTH_BYTES, TAG_LENGTH_BYTES, ALGORITHM_LABEL, CIPHER_NAME, EncryptedFileCredentialStore, PINNED_KEYRING_VERSION, npmRunner, cachedBindingPathByDir, entryFactoryOverride, runner, cachedProbeResult, LinuxSecretToolKeyProvider, SECURITY_EXIT_ITEM_NOT_FOUND, runner2, MacSecurityKeyProvider, NapiKeyringKeyProvider, testProviderFactory, sessionFlags;
-var init_chunk_WMSASLDV = __esm({
-  "../workers-auth/dist/chunk-WMSASLDV.mjs"() {
+var init_chunk_RV27PEH3 = __esm({
+  "../workers-auth/dist/chunk-RV27PEH3.mjs"() {
     init_import_meta_url();
-    init_chunk_O6YSETKJ();
+    init_chunk_VAZEJK55();
     init_src();
     import_undici3 = __toESM(require_undici(), 1);
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     hasWarnedAboutDeprecatedV1ApiToken = false;
     __name(readStoredAuthState, "readStoredAuthState");
     __name2(readStoredAuthState, "readStoredAuthState");
@@ -127786,12 +127928,11 @@ var init_chunk_WMSASLDV = __esm({
     __name2(scrubEncryptedCredentials, "scrubEncryptedCredentials");
   }
 });
-
-// ../workers-auth/dist/index.mjs
 var init_dist2 = __esm({
   "../workers-auth/dist/index.mjs"() {
     init_import_meta_url();
-    init_chunk_WMSASLDV();
+    init_chunk_RV27PEH3();
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
   }
 });
 function createPreferences(getConfigPath2) {
@@ -128699,12 +128840,13 @@ function createAuthConfigFileHelpers(deps) {
   };
 }
 var millisecondsInMinute, minutesInYear, minutesInMonth, minutesInDay, constructFromSymbol, defaultOptions2, formatDistanceLocale, formatDistance, dateFormats, timeFormats, dateTimeFormats, formatLong, formatRelativeLocale, formatRelative, eraValues, quarterValues, monthValues, dayValues, dayPeriodValues, formattingDayPeriodValues, ordinalNumber, localize, matchOrdinalNumberPattern, parseOrdinalNumberPattern, matchEraPatterns, parseEraPatterns, matchQuarterPatterns, parseQuarterPatterns, matchMonthPatterns, parseMonthPatterns, matchDayPatterns, parseDayPatterns, matchDayPeriodPatterns, parseDayPeriodPatterns, match, enUS, MEMBERSHIPS_INACCESSIBLE_CODES, DIRECTORY_BINDINGS_FILE, ENCRYPTED_PROFILE_CONFIG_EXTENSION;
-var init_chunk_V6MEAFHI = __esm({
-  "../workers-auth/dist/chunk-V6MEAFHI.mjs"() {
+var init_chunk_2JQZNT7W = __esm({
+  "../workers-auth/dist/chunk-2JQZNT7W.mjs"() {
     init_import_meta_url();
-    init_chunk_WMSASLDV();
-    init_chunk_O6YSETKJ();
+    init_chunk_RV27PEH3();
+    init_chunk_VAZEJK55();
     init_src();
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __name(createPreferences, "createPreferences");
     __name2(createPreferences, "createPreferences");
     millisecondsInMinute = 6e4;
@@ -129216,9 +129358,10 @@ var DefaultScopes, DefaultScopeKeys, WRANGLER_KEYRING_SERVICE_NAME, WRANGLER_CLI
 var init_wrangler = __esm({
   "../workers-auth/dist/wrangler/index.mjs"() {
     init_import_meta_url();
-    init_chunk_V6MEAFHI();
-    init_chunk_O6YSETKJ();
+    init_chunk_2JQZNT7W();
+    init_chunk_VAZEJK55();
     init_src();
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     DefaultScopes = {
       "account:read": "See your account info such as account details, analytics, and memberships.",
       "user:read": "See your user info such as name, email address, and account memberships.",
@@ -135505,10 +135648,21 @@ function convertExports(config2, result) {
   const converted = {};
   const unknownExports = {};
   for (const [exportName, value] of Object.entries(exports$2)) {
-    if (value.type === "worker" || value.type === "workflow") {
+    if (value.type === "worker") {
       converted[exportName] = value;
       continue;
     }
+    if (value.type === "workflow") {
+      const { defaultRetention, ...workflow } = value;
+      converted[exportName] = {
+        ...workflow,
+        ...defaultRetention !== void 0 && { default_retention: {
+          ...defaultRetention.successRetention !== void 0 && { success_retention: defaultRetention.successRetention },
+          ...defaultRetention.errorRetention !== void 0 && { error_retention: defaultRetention.errorRetention }
+        } }
+      };
+      continue;
+    }
     if (value.type !== "durable-object") {
       unknownExports[exportName] = value;
       continue;
@@ -136288,9 +136442,9 @@ var init_dist3 = __esm({
       limits: strictObject({ steps: number2().int().min(1).optional() }).optional(),
       concurrency: strictObject({ limit: number2().int().min(1).optional() }).optional(),
       schedules: union([string2().min(1), array(string2().min(1)).min(1)]).optional(),
-      default_retention: strictObject({
-        success_retention: WorkflowRetentionSchema.optional(),
-        error_retention: WorkflowRetentionSchema.optional()
+      defaultRetention: strictObject({
+        successRetention: WorkflowRetentionSchema.optional(),
+        errorRetention: WorkflowRetentionSchema.optional()
       }).optional()
     });
     DurableObjectCreatedSqliteExportSchema = DurableObjectCreatedExportSchema.extend({ storage: literal("sqlite") });
@@ -136512,11 +136666,13 @@ var init_dist3 = __esm({
     }, "../../node_modules/.pnpm/ts-dedent@2.2.0/node_modules/ts-dedent/dist/index.js") });
     import_dist = require_dist2();
     __name(generateTypes, "generateTypes");
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __defProp3 = Object.defineProperty;
     __name3 = /* @__PURE__ */ __name((target, value) => __defProp3(target, "name", {
       value,
       configurable: true
     }), "__name");
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     UserError2 = class extends Error {
       static {
         __name(this, "UserError");
@@ -136776,11 +136932,13 @@ var init_dist4 = __esm({
     __name(getWorkerConfigPath, "getWorkerConfigPath");
     __name(getWorkerBundleDir, "getWorkerBundleDir");
     __name(getWorkerAssetsDir, "getWorkerAssetsDir");
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __defProp4 = Object.defineProperty;
     __name4 = /* @__PURE__ */ __name((target, value) => __defProp4(target, "name", {
       value,
       configurable: true
     }), "__name");
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __name(isDirectory2, "isDirectory");
     __name4(isDirectory2, "isDirectory");
     __name(removeDir2, "removeDir");
@@ -140144,10 +140302,12 @@ async function pushImageIfChanged({
     const parsedRemoteManifest = JSON.parse(remoteManifest);
     if (parsedRemoteManifest.Descriptor.digest === hash2) {
       logger3.log("Image already exists remotely, skipping push");
-      logger3.debug(
-        `Untagging built image: ${sourceTag} since there was no change.`
-      );
-      await runDockerCmd(pathToDocker, ["image", "rm", sourceTag]);
+      if (cleanupSourceTag !== false) {
+        logger3.debug(
+          `Untagging built image: ${sourceTag} since there was no change.`
+        );
+        await runDockerCmd(pathToDocker, ["image", "rm", sourceTag]);
+      }
       return { remoteDigest: remoteDigest2 };
     }
   } catch (error53) {
@@ -141845,7 +142005,7 @@ async function getCreds(permissions, complianceConfig) {
 function isValidImageTag(value) {
   return IMAGE_TAG_REGEXP.test(value);
 }
-var require$1, __create2, __defProp5, __getOwnPropDesc2, __getOwnPropNames3, __getProtoOf2, __hasOwnProp2, __name5, __require2, __commonJS3, __copyProps2, __toESM2, require_constants7, require_buffer_util, require_limiter, require_permessage_deflate2, require_validation, require_receiver2, require_sender2, require_event_target, require_extension, require_websocket2, require_stream, require_subprotocol, require_websocket_server, ApiError, CancelError2, CancelablePromise, OpenAPI, isDefined, isString2, isStringWithValue, isBlob3, isErrorResponse, base643, getQueryString, getUrl, getFormData, resolve10, getHeaders2, getRequestBody, isResponseSchemaV4, parseResponseSchemaV4, sendRequest, getResponseHeader, getResponseBody, catchErrorCodes, executeRequest, buildApiResult, request, requestPaginated, debugLogRequest, debugLogResponse, ApplicationRollout, AssignIPv4, AssignIPv6, BadRequestWithCodeError, ContainerImagePreparationStatus, CreateApplicationRolloutRequest, DeploymentMutationError, DeploymentNotFoundError, ExternalRegistryKind, ImageRegistryAlreadyExistsError, ImageRegistryIsPublic, ImageRegistryNotAllowedError, ImageRegistryNotFoundError, ImageRegistryProtocolAlreadyExists, ImageRegistryProtocolIsReferencedError, ImageRegistryProtocolNotFound, InstanceType, ProvisionerConfiguration, RolloutStep, SchedulingPolicy, SecretNameAlreadyExists, SecretNotFound, SSHPublicKeyNotFoundError, UpdateApplicationRolloutRequest, AccountService, ApplicationsService, ContainerImagePreparationsService, DeploymentsService, ImageRegistriesService, PlacementsService, RolloutsService, SshPublicKeysService, noop, logger3, fetchResult3, fetchPagedListResult3, getCloudflareRegistryWithAccountNamespace, MF_DEV_CONTAINER_PREFIX, getDevContainerImageName, runDockerCmd, runDockerCmdWithOutput, isDockerRunning, verifyDockerInstalled, cleanupContainers, getContainerIdsFromImage, DEFAULT_CONTAINER_EGRESS_INTERCEPTOR_IMAGE, getAndValidateRegistryType, MB, MiB, instanceTypes, LEGACY_TO_CANONICAL, MAX_DOCKER_REPOSITORY_NAME_LENGTH, DIGEST_SUFFIX_REGEXP, DIGEST_VALUE_REGEXP, TAG_SUFFIX_REGEXP, BUILD_OUTPUT_IMAGE_NAMESPACE, DOCKER_REPOSITORY_NAME_LENGTH, Diff, doAction, configRolloutStepsToAPI, MAX_DOCKER_REPOSITORY_NAME_LENGTH2, MAX_NAMED_IMAGE_SLUG_LENGTH, IMAGE_ID_HASH_LENGTH, import_websocket, containersSshOptions, MAX_REPOSITORY_LENGTH, REPOSITORY_COMPONENT_REGEXP, TAG_REGEXP, IMAGE_TAG_REGEXP;
+var require$13, __create2, __defProp5, __getOwnPropDesc2, __getOwnPropNames3, __getProtoOf2, __hasOwnProp2, __name5, __require2, __commonJS3, __copyProps2, __toESM2, require_constants7, require_buffer_util, require_limiter, require_permessage_deflate2, require_validation, require_receiver2, require_sender2, require_event_target, require_extension, require_websocket2, require_stream, require_subprotocol, require_websocket_server, ApiError, CancelError2, CancelablePromise, OpenAPI, isDefined, isString2, isStringWithValue, isBlob3, isErrorResponse, base643, getQueryString, getUrl, getFormData, resolve10, getHeaders2, getRequestBody, isResponseSchemaV4, parseResponseSchemaV4, sendRequest, getResponseHeader, getResponseBody, catchErrorCodes, executeRequest, buildApiResult, request, requestPaginated, debugLogRequest, debugLogResponse, ApplicationRollout, AssignIPv4, AssignIPv6, BadRequestWithCodeError, ContainerImagePreparationStatus, CreateApplicationRolloutRequest, DeploymentMutationError, DeploymentNotFoundError, ExternalRegistryKind, ImageRegistryAlreadyExistsError, ImageRegistryIsPublic, ImageRegistryNotAllowedError, ImageRegistryNotFoundError, ImageRegistryProtocolAlreadyExists, ImageRegistryProtocolIsReferencedError, ImageRegistryProtocolNotFound, InstanceType, ProvisionerConfiguration, RolloutStep, SchedulingPolicy, SecretNameAlreadyExists, SecretNotFound, SSHPublicKeyNotFoundError, UpdateApplicationRolloutRequest, AccountService, ApplicationsService, ContainerImagePreparationsService, DeploymentsService, ImageRegistriesService, PlacementsService, RolloutsService, SshPublicKeysService, noop, logger3, fetchResult3, fetchPagedListResult3, getCloudflareRegistryWithAccountNamespace, MF_DEV_CONTAINER_PREFIX, getDevContainerImageName, runDockerCmd, runDockerCmdWithOutput, isDockerRunning, verifyDockerInstalled, cleanupContainers, getContainerIdsFromImage, DEFAULT_CONTAINER_EGRESS_INTERCEPTOR_IMAGE, getAndValidateRegistryType, MB, MiB, instanceTypes, LEGACY_TO_CANONICAL, MAX_DOCKER_REPOSITORY_NAME_LENGTH, DIGEST_SUFFIX_REGEXP, DIGEST_VALUE_REGEXP, TAG_SUFFIX_REGEXP, BUILD_OUTPUT_IMAGE_NAMESPACE, DOCKER_REPOSITORY_NAME_LENGTH, Diff, doAction, configRolloutStepsToAPI, MAX_DOCKER_REPOSITORY_NAME_LENGTH2, MAX_NAMED_IMAGE_SLUG_LENGTH, IMAGE_ID_HASH_LENGTH, import_websocket, containersSshOptions, MAX_REPOSITORY_LENGTH, REPOSITORY_COMPONENT_REGEXP, TAG_REGEXP, IMAGE_TAG_REGEXP;
 var init_dist9 = __esm({
   "../containers-shared/dist/index.mjs"() {
     init_import_meta_url();
@@ -141858,7 +142018,7 @@ var init_dist9 = __esm({
     init_colors();
     init_src();
     init_interactive();
-    require$1 = nodeModule.createRequire(typeof __filename === "string" ? __filename : import_meta_url);
+    require$13 = nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __create2 = Object.create;
     __defProp5 = Object.defineProperty;
     __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -141866,10 +142026,10 @@ var init_dist9 = __esm({
     __getProtoOf2 = Object.getPrototypeOf;
     __hasOwnProp2 = Object.prototype.hasOwnProperty;
     __name5 = /* @__PURE__ */ __name((target, value) => __defProp5(target, "name", { value, configurable: true }), "__name");
-    __require2 = /* @__PURE__ */ ((x7) => typeof require$1 !== "undefined" ? require$1 : typeof Proxy !== "undefined" ? new Proxy(x7, {
-      get: /* @__PURE__ */ __name((a8, b11) => (typeof require$1 !== "undefined" ? require$1 : a8)[b11], "get")
+    __require2 = /* @__PURE__ */ ((x7) => typeof require$13 !== "undefined" ? require$13 : typeof Proxy !== "undefined" ? new Proxy(x7, {
+      get: /* @__PURE__ */ __name((a8, b11) => (typeof require$13 !== "undefined" ? require$13 : a8)[b11], "get")
     }) : x7)(function(x7) {
-      if (typeof require$1 !== "undefined") return require$1.apply(this, arguments);
+      if (typeof require$13 !== "undefined") return require$13.apply(this, arguments);
       throw Error('Dynamic require of "' + x7 + '" is not supported');
     });
     __commonJS3 = /* @__PURE__ */ __name((cb2, mod2) => /* @__PURE__ */ __name(function __require22() {
@@ -162517,7 +162677,7 @@ async function fetchDeployableVersions(complianceConfig, accountId, workerName,
   }
   return versions2;
 }
-async function createDeployment(complianceConfig, accountId, workerName, versionTraffic, message, force) {
+async function createDeployment(complianceConfig, accountId, workerName, versionTraffic, message, force, codeUpdateStrategy) {
   return await fetchResult(
     complianceConfig,
     `/accounts/${accountId}/workers/scripts/${workerName}/deployments${force ? "?force=true" : ""}`,
@@ -162531,7 +162691,8 @@ async function createDeployment(complianceConfig, accountId, workerName, version
         ),
         annotations: {
           "workers/message": message
-        }
+        },
+        code_update_strategy: codeUpdateStrategy
       })
     }
   );
@@ -162816,6 +162977,7 @@ function createWorkerUploadForm(worker, bindings, options) {
     main: main2,
     sourceMaps,
     migrations,
+    code_update_strategy,
     exports: configuredExports,
     compatibility_date,
     compatibility_flags,
@@ -163498,6 +163660,7 @@ function createWorkerUploadForm(worker, bindings, options) {
       compatibility_flags
     },
     ...migrations && { migrations },
+    ...code_update_strategy && { code_update_strategy },
     ...configuredExports && Object.keys(configuredExports).length > 0 && {
       exports: configuredExports
     },
@@ -175123,6 +175286,9 @@ async function deployWorker(props, config2, buildResult, callbacks) {
   printBundleSize(bundleSize);
   const canUseNewVersionsDeploymentsApi = workerExists && props.dispatchNamespace === void 0 && format9 === "modules" && migrations === void 0 && !hasDurableObjectExports(config2.exports) && !config2.first_party_worker && props.containers.source === void 0 && // Rollout skip can recover Container metadata absent from local config.
   containerMetadata === void 0;
+  if (!canUseNewVersionsDeploymentsApi) {
+    worker.code_update_strategy = props.durableObjectsCodeUpdateStrategy;
+  }
   let workerBundle;
   const dockerPath = getDockerPath();
   if (isDryRun) {
@@ -175195,13 +175361,16 @@ async function deployWorker(props, config2, buildResult, callbacks) {
         );
         const versionMap = /* @__PURE__ */ new Map();
         versionMap.set(versionResult.id, 100);
+        const unsafeMetadata = config2.unsafe?.metadata;
+        const codeUpdateStrategy = unsafeMetadata !== void 0 && "code_update_strategy" in unsafeMetadata ? unsafeMetadata.code_update_strategy : props.durableObjectsCodeUpdateStrategy;
         await createDeployment(
           config2,
           accountId,
           scriptName,
           versionMap,
           props.message,
-          void 0
+          void 0,
+          codeUpdateStrategy
         );
         const nextTags = applyServiceAndEnvironmentTags(config2, tags);
         try {
@@ -175401,12 +175570,16 @@ async function deployWorker(props, config2, buildResult, callbacks) {
         });
       }
     }
-    await deployContainers(config2, containerDeployments, {
-      versionId,
-      accountId,
-      scriptName,
-      dispatchNamespace: props.dispatchNamespace
-    });
+    await deployContainers(
+      { ...config2, containers: props.containers.source },
+      containerDeployments,
+      {
+        versionId,
+        accountId,
+        scriptName,
+        dispatchNamespace: props.dispatchNamespace
+      }
+    );
   }
   if (!skipContainerChanges && durableObjectContainerConfig.length > 0) {
     assert38__default.default(versionId && accountId);
@@ -176630,7 +176803,7 @@ function getDeclaredDOClassNames(config2) {
   for (const [className, entry] of Object.entries(
     getDurableObjectExports(config2.exports)
   )) {
-    if (entry.state === void 0 || entry.state === "created" || entry.state === "expecting-transfer") {
+    if (isLiveDurableObjectExport(entry)) {
       declared.add(className);
     }
   }
@@ -176762,7 +176935,7 @@ function getPreviewExports(exports$1) {
   }
   return previewExports;
 }
-async function prepareContainersForPreview(config2, workerName, previewSlug, callbacks) {
+async function prepareContainersForPreview(config2, workerName, previewSlug, callbacks, localImageReferences) {
   const previewContainers = config2.previews?.containers ?? [];
   if (previewContainers.length === 0 || !callbacks.getNormalizedContainerOptions) {
     return { scopedContainerConfig: void 0, normalisedContainerConfig: [] };
@@ -176782,11 +176955,11 @@ async function prepareContainersForPreview(config2, workerName, previewSlug, cal
   const containersNeedingDocker = normalisedContainerConfig.filter(
     (container) => "dockerfile" in container
   );
-  if (containersNeedingDocker.length > 0) {
+  if (containersNeedingDocker.length > 0 || localImageReferences.size > 0) {
     await verifyDockerInstalled({
       dockerPath: getDockerPath(),
       operation: "creating a preview",
-      imageNoun: containersNeedingDocker.length !== 1 ? "the configured images" : "the configured image",
+      imageNoun: containersNeedingDocker.length + localImageReferences.size !== 1 ? "the configured images" : "the configured image",
       hint: 'If you cannot run Docker locally, set "image" to a prebuilt registry image instead of a Dockerfile path for the affected entries in "previews.containers".'
     });
   }
@@ -177207,7 +177380,7 @@ async function provisionParentWorker(config2, accountId, workerName, json2) {
     preview_urls ?? workers_dev
   );
 }
-async function runPreview(accountId, args, config2, buildResult, assetsOptions, callbacks, workerName, replaceTailConsumersAfterCreate = false) {
+async function runPreview(accountId, args, config2, buildResult, assetsOptions, callbacks, workerName, replaceTailConsumersAfterCreate = false, localImageReferences = /* @__PURE__ */ new Map()) {
   let secrets;
   if (args.secretsFile) {
     secrets = (await parseBulkInputToObject(args.secretsFile))?.content;
@@ -177286,7 +177459,8 @@ async function runPreview(accountId, args, config2, buildResult, assetsOptions,
     config2,
     workerName,
     previewResource.slug,
-    callbacks
+    callbacks,
+    localImageReferences
   );
   const deploymentRequest = await assemblePreviewDeploymentSettings(
     config2,
@@ -177324,7 +177498,7 @@ async function runPreview(accountId, args, config2, buildResult, assetsOptions,
         normalisedContainerConfig,
         deployment,
         accountId,
-        { quiet: args.json === true }
+        { quiet: args.json === true, localImageReferences }
       );
     } catch (error53) {
       logger.warn(
@@ -178807,9 +178981,10 @@ var CF_KEYRING_SERVICE_NAME, CF_CLI_NAME, CF_DISPLAY_NAME, CF_OAUTH_CALLBACK_URL
 var init_cf = __esm({
   "../workers-auth/dist/cf/index.mjs"() {
     init_import_meta_url();
-    init_chunk_V6MEAFHI();
-    init_chunk_O6YSETKJ();
+    init_chunk_2JQZNT7W();
+    init_chunk_VAZEJK55();
     init_src();
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     CF_KEYRING_SERVICE_NAME = "cloudflare";
     CF_CLI_NAME = "cf";
     CF_DISPLAY_NAME = "cf";
@@ -179812,7 +179987,7 @@ var init_dist14 = __esm({
     init_wrapper();
     init_create_worker_upload_form();
     import_undici13 = __toESM(require_undici(), 1);
-    version3 = "0.0.34";
+    version3 = "0.0.36";
     NoDefaultValueProvided2 = class extends UserError {
       static {
         __name(this, "NoDefaultValueProvided");
@@ -212776,6 +212951,98 @@ var init_collectKeyValues = __esm({
   }
 });
 
+// src/versions/deployment-args.ts
+function parseDurableObjectsCodeUpdateMode(value) {
+  if (typeof value !== "string") {
+    throwInvalidCodeUpdateMode();
+  }
+  const [mode, duration3, ...extraValues] = value.trim().split(/\s+/);
+  if (mode === "immediate" && duration3 === void 0) {
+    return { mode };
+  }
+  if (mode === "deferred" && duration3 !== void 0 && extraValues.length === 0) {
+    const seconds = parseHumanDuration(duration3);
+    if (/\d/.test(duration3) && Number.isFinite(seconds) && seconds >= 0 && seconds <= MAX_DURABLE_OBJECTS_CODE_UPDATE_DELAY_SECONDS && hasMillisecondPrecision(seconds)) {
+      return { mode, max_delay: seconds };
+    }
+    throw new CommandLineArgsError(
+      'The duration passed to "--durable-objects-code-update-mode deferred" must be between 0 seconds and 24 hours and use millisecond precision.',
+      { telemetryMessage: "durable objects code update delay invalid" }
+    );
+  }
+  throwInvalidCodeUpdateMode();
+}
+function hasMillisecondPrecision(seconds) {
+  const milliseconds = seconds * 1e3;
+  const roundedMilliseconds = Math.round(milliseconds);
+  return (seconds === 0 || roundedMilliseconds > 0) && Math.abs(milliseconds - roundedMilliseconds) <= 1e-6;
+}
+function throwInvalidCodeUpdateMode() {
+  throw new CommandLineArgsError(
+    'The argument "--durable-objects-code-update-mode" must be either "immediate" or "deferred <duration>".',
+    { telemetryMessage: "durable objects code update mode invalid" }
+  );
+}
+function normalizeDurableObjectsCodeUpdateModeArgs(argv) {
+  const normalizedArgv = [];
+  for (let i8 = 0; i8 < argv.length; i8++) {
+    const arg = argv[i8];
+    if (arg === "--") {
+      normalizedArgv.push(...argv.slice(i8));
+      break;
+    }
+    const separateMode = arg === DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG;
+    const inlineMode = arg.startsWith(
+      `${DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG}=`
+    ) ? arg.slice(DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG.length + 1) : void 0;
+    const mode = separateMode ? argv[i8 + 1] : inlineMode;
+    const durationIndex = i8 + (separateMode ? 2 : 1);
+    const duration3 = argv[durationIndex];
+    if (mode === "deferred" && duration3 !== void 0 && (!duration3.startsWith("-") || Number.isFinite(parseHumanDuration(duration3)))) {
+      normalizedArgv.push(
+        `${DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG}=deferred ${duration3}`
+      );
+      i8 = durationIndex;
+      continue;
+    }
+    normalizedArgv.push(arg);
+  }
+  return normalizedArgv;
+}
+function resolveDurableObjectsCodeUpdateStrategy(codeUpdateMode, codeUpdateStrategy) {
+  const strategy = codeUpdateMode ?? codeUpdateStrategy ?? DEFAULT_DURABLE_OBJECTS_CODE_UPDATE_STRATEGY;
+  return strategy.mode === "immediate" ? { mode: "immediate" } : {
+    mode: "deferred",
+    max_delay: strategy.max_delay ?? DEFAULT_DURABLE_OBJECTS_CODE_UPDATE_STRATEGY.max_delay
+  };
+}
+var DEFAULT_DURABLE_OBJECTS_CODE_UPDATE_STRATEGY, MAX_DURABLE_OBJECTS_CODE_UPDATE_DELAY_SECONDS, DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG, durableObjectsCodeUpdateModeArg;
+var init_deployment_args = __esm({
+  "src/versions/deployment-args.ts"() {
+    init_import_meta_url();
+    init_src();
+    DEFAULT_DURABLE_OBJECTS_CODE_UPDATE_STRATEGY = {
+      mode: "deferred",
+      max_delay: 300
+    };
+    MAX_DURABLE_OBJECTS_CODE_UPDATE_DELAY_SECONDS = 24 * 60 * 60;
+    DURABLE_OBJECTS_CODE_UPDATE_MODE_FLAG = "--durable-objects-code-update-mode";
+    __name(parseDurableObjectsCodeUpdateMode, "parseDurableObjectsCodeUpdateMode");
+    __name(hasMillisecondPrecision, "hasMillisecondPrecision");
+    __name(throwInvalidCodeUpdateMode, "throwInvalidCodeUpdateMode");
+    __name(normalizeDurableObjectsCodeUpdateModeArgs, "normalizeDurableObjectsCodeUpdateModeArgs");
+    __name(resolveDurableObjectsCodeUpdateStrategy, "resolveDurableObjectsCodeUpdateStrategy");
+    durableObjectsCodeUpdateModeArg = {
+      "durable-objects-code-update-mode": {
+        describe: "How to update Durable Object code: immediate, or deferred followed by a maximum delay (for example, deferred 30s)",
+        type: "string",
+        requiresArg: true,
+        coerce: parseDurableObjectsCodeUpdateMode
+      }
+    };
+  }
+});
+
 // src/deployment-bundle/merge-config-args.ts
 async function mergeSharedConfigArgs(command2, args, config2) {
   const entry = await getEntry(args, config2, command2);
@@ -212881,6 +213148,10 @@ async function mergeDeployConfigArgs(args, config2) {
       dispatchNamespace: args.dispatchNamespace,
       oldAssetTtl: args.oldAssetTtl,
       containersRollout: args.containersRollout,
+      durableObjectsCodeUpdateStrategy: resolveDurableObjectsCodeUpdateStrategy(
+        args.durableObjectsCodeUpdateMode,
+        config2.durable_objects.code_update_strategy
+      ),
       containers: {
         ...shared.containers,
         standard: {
@@ -212964,6 +213235,7 @@ var init_merge_config_args = __esm({
     init_user3();
     init_collectKeyValues();
     init_getScriptName();
+    init_deployment_args();
     init_entry();
     init_route_zone_args();
     __name(mergeSharedConfigArgs, "mergeSharedConfigArgs");
@@ -264452,6 +264724,7 @@ var init_dist15 = __esm({
     __toESM(require_main4(), 1);
     esprimaParser = __toESM(require_esprima3(), 1);
     typescriptParser = __toESM(require_typescript2(), 1);
+    nodeModule.createRequire(import_meta_url || (typeof __filename === "string" ? __filename : "/"));
     __defProp6 = Object.defineProperty;
     __name6 = /* @__PURE__ */ __name((target, value) => __defProp6(target, "name", { value, configurable: true }), "__name");
     __name(parseJs, "parseJs");
@@ -265291,7 +265564,7 @@ var init_packages3 = __esm({
     init_command2();
     init_src();
     installPackages = /* @__PURE__ */ __name(async (packageManager, packages, config2 = {}) => {
-      const { force, dev: dev2, startText, doneText } = config2;
+      const { cwd: cwd2 = process.cwd(), force, dev: dev2, startText, doneText } = config2;
       const isWorkspaceRoot = config2.isWorkspaceRoot ?? false;
       if (packages.length === 0) {
         let cmd$1;
@@ -265313,7 +265586,7 @@ var init_packages3 = __esm({
           ...force === true ? ["--force"] : [],
           ...getWorkspaceInstallRootFlag(packageManager, isWorkspaceRoot)
         ], {
-          cwd: process.cwd(),
+          cwd: cwd2,
           startText,
           doneText,
           silent: true
@@ -265347,12 +265620,13 @@ var init_packages3 = __esm({
         ...force === true ? ["--force"] : [],
         ...getWorkspaceInstallRootFlag(packageManager, isWorkspaceRoot)
       ], {
+        cwd: cwd2,
         startText,
         doneText,
         silent: true
       });
       if (packageManager === "npm") {
-        const pkgJsonPath = path28__namespace.default.join(process.cwd(), "package.json");
+        const pkgJsonPath = path28__namespace.default.join(cwd2, "package.json");
         const pkgJson = parsePackageJSON(readFileSync(pkgJsonPath), pkgJsonPath);
         const deps = config2.dev ? pkgJson.devDependencies : pkgJson.dependencies;
         assert38__default.default(deps, "dependencies should be defined");
@@ -288527,6 +288801,7 @@ var init_deploy3 = __esm({
     init_sites2();
     init_detect_agent();
     init_getScriptName();
+    init_deployment_args();
     init_autoconfig2();
     init_open_next();
     __name(parseEventCode, "parseEventCode");
@@ -288541,6 +288816,7 @@ var init_deploy3 = __esm({
       args: {
         ...experimentalNewConfigArg,
         ...sharedDeployVersionsArgs,
+        ...durableObjectsCodeUpdateModeArg,
         "event-code": {
           describe: "Create a temporary account for an event",
           type: "string",
@@ -299334,6 +299610,7 @@ async function runPagesToWorkersDeploy(delegation) {
     oldAssetTtl: void 0,
     dispatchNamespace: void 0,
     containersRollout: void 0,
+    durableObjectsCodeUpdateMode: void 0,
     path: void 0,
     script: void 0,
     name: void 0,
@@ -302626,6 +302903,7 @@ async function toEnvironment(deploymentConfig, accountId) {
     deploymentConfig.durable_object_namespaces ?? {}
   )) {
     configObj.durable_objects ??= { bindings: [] };
+    configObj.durable_objects.bindings ??= [];
     if (ns.class_name && ns.class_name !== "") {
       configObj.durable_objects.bindings.push({
         name: name2,
@@ -340275,7 +340553,8 @@ async function deployPreviewContainers(scopedConfig, normalisedContainerConfig,
       scopedConfig,
       normalisedContainerConfig,
       deployment,
-      accountId
+      accountId,
+      options.localImageReferences
     );
   }
   const previousLogLevel = getLogLevel();
@@ -340287,14 +340566,15 @@ async function deployPreviewContainers(scopedConfig, normalisedContainerConfig,
         scopedConfig,
         normalisedContainerConfig,
         deployment,
-        accountId
+        accountId,
+        options.localImageReferences
       )
     );
   } finally {
     setLogLevel(previousLogLevel);
   }
 }
-async function applyPreviewContainers(scopedConfig, normalisedContainerConfig, deployment, accountId) {
+async function applyPreviewContainers(scopedConfig, normalisedContainerConfig, deployment, accountId, localImageReferences) {
   initContainersSharedContext({ logger: logger2, fetchPagedListResult: fetchPagedListResult2, fetchResult: fetchResult2 });
   await fillOpenAPIConfiguration(scopedConfig, containersScope);
   const dockerPath = getDockerPath();
@@ -340322,7 +340602,19 @@ async function applyPreviewContainers(scopedConfig, normalisedContainerConfig, d
       );
     }
     let imageRef;
-    if ("dockerfile" in container) {
+    const localImageReference = localImageReferences?.get(container.class_name);
+    if (localImageReference !== void 0) {
+      imageRef = await pushImageIfChanged({
+        pathToDocker: dockerPath,
+        sourceTag: localImageReference,
+        targetTag: localImageReference,
+        accountId,
+        complianceConfig: scopedConfig,
+        containerConfig: container,
+        // Build Output can be uploaded again without rebuilding the image.
+        cleanupSourceTag: false
+      });
+    } else if ("dockerfile" in container) {
       imageRef = await buildContainer(
         { ...container, name: container.name.toLowerCase() },
         deployment.id,
@@ -342819,6 +343111,7 @@ var init_subscription_types = __esm({
     EventSourceType = /* @__PURE__ */ ((EventSourceType2) => {
       EventSourceType2["ARTIFACTS"] = "artifacts";
       EventSourceType2["ARTIFACTS_REPO"] = "artifacts.repo";
+      EventSourceType2["BROWSER_RUN"] = "browserRun";
       EventSourceType2["EMAIL_SENDING"] = "email.sending";
       EventSourceType2["IMAGES"] = "images";
       EventSourceType2["KV"] = "kv";
@@ -342841,6 +343134,8 @@ function parseSourceArgument(source, args) {
       return { type: "artifacts" /* ARTIFACTS */ };
     case "artifacts.repo" /* ARTIFACTS_REPO */:
       return { type: "artifacts.repo" /* ARTIFACTS_REPO */ };
+    case "browserRun" /* BROWSER_RUN */:
+      return { type: "browserRun" /* BROWSER_RUN */ };
     case "email.sending" /* EMAIL_SENDING */:
       if (!args.zoneId) {
         throw new UserError(
@@ -352140,14 +352435,15 @@ async function fetchDeployableVersions2(complianceConfig, accountId, workerName,
     versionCache
   );
 }
-async function createDeployment2(complianceConfig, accountId, workerName, versionTraffic, message, force) {
+async function createDeployment2(complianceConfig, accountId, workerName, versionTraffic, message, force, codeUpdateStrategy) {
   return createDeployment(
     complianceConfig,
     accountId,
     workerName,
     versionTraffic,
     message,
-    force
+    force,
+    codeUpdateStrategy
   );
 }
 async function patchNonVersionedScriptSettings2(complianceConfig, accountId, workerName, settings) {
@@ -352606,6 +352902,7 @@ var init_deploy6 = __esm({
     init_user3();
     init_render_labelled_values();
     init_api4();
+    init_deployment_args();
     init_src3();
     EPSILON = 1e-3;
     BLANK_INPUT2 = "-";
@@ -352624,6 +352921,7 @@ var init_deploy6 = __esm({
       },
       args: {
         ...experimentalNewConfigArg,
+        ...durableObjectsCodeUpdateModeArg,
         name: {
           describe: "Name of the worker",
           type: "string",
@@ -352785,7 +353083,12 @@ var init_deploy6 = __esm({
                 accountId,
                 workerName,
                 confirmedVersionTraffic,
-                message
+                message,
+                void 0,
+                resolveDurableObjectsCodeUpdateStrategy(
+                  args.durableObjectsCodeUpdateMode,
+                  config2.durable_objects.code_update_strategy
+                )
               );
             }
           });
@@ -353302,9 +353605,11 @@ var init_rollback = __esm({
     init_user3();
     init_api4();
     init_deploy6();
+    init_deployment_args();
     CANNOT_ROLLBACK_WITH_MODIFIED_SECERT_CODE = 10220;
     versionsRollbackCommand = createCommand({
       args: {
+        ...durableObjectsCodeUpdateModeArg,
         "version-id": {
           describe: "The ID of the Worker Version to rollback to",
           type: "string",
@@ -353389,7 +353694,12 @@ Rolling back to a previous deployment will not rollback any of the bound resourc
             accountId,
             workerName,
             rollbackTraffic,
-            message
+            message,
+            void 0,
+            resolveDurableObjectsCodeUpdateStrategy(
+              args.durableObjectsCodeUpdateMode,
+              config2.durable_objects.code_update_strategy
+            )
           );
         } catch (e11) {
           if (e11 instanceof APIError && e11.code === CANNOT_ROLLBACK_WITH_MODIFIED_SECERT_CODE) {
@@ -353410,7 +353720,11 @@ Rolling back to a previous deployment will not rollback any of the bound resourc
                 workerName,
                 rollbackTraffic,
                 message,
-                true
+                true,
+                resolveDurableObjectsCodeUpdateStrategy(
+                  args.durableObjectsCodeUpdateMode,
+                  config2.durable_objects.code_update_strategy
+                )
               );
             } else {
               cancel("Aborting rollback...");
@@ -359313,7 +359627,9 @@ function createCLIParser(argv) {
       requiresArg: true
     }
   };
-  const wrangler = yargs_default(argv).strict().showHelpOnFail(false).fail((msg, error53) => {
+  const wrangler = yargs_default(
+    normalizeDurableObjectsCodeUpdateModeArgs(argv)
+  ).strict().showHelpOnFail(false).fail((msg, error53) => {
     if (!error53 || error53.name === "YError") {
       error53 = new CommandLineArgsError(msg, {
         telemetryMessage: "yargs validation error"
@@ -361540,6 +361856,7 @@ var init_src7 = __esm({
     init_upsert();
     init_versions8();
     init_deploy6();
+    init_deployment_args();
     init_deployments5();
     init_list32();
     init_status3();
@@ -362814,10 +363131,11 @@ var init_DevEnv = __esm({
 `, event.cause);
           logger2.debug("=> Error contextual data:", event.data);
         } else if (event.source === "ProxyController" && event.reason.startsWith("Error inside ProxyWorker")) {
-          const detail = event.cause.message || event.cause.cause?.message || "unknown error";
           logger2.error(
-            `${event.reason} (the affected request failed; the dev server continues): ${detail}`
+            `${event.reason} (the affected request failed; the dev server continues): ${event.cause.message || "unknown error"}`
           );
+          logger2.debug(`Error in ${event.source}: ${event.reason}
+`, event.cause);
           logger2.debug("=> Error contextual data:", event.data);
         } else if (event.source === "ConfigController" && event.cause instanceof ParseError) {
           logger2.error(event.cause);