@cloudflare/config 0.11.0 → 0.12.0

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as WorkerConfig, A as SecretsStoreSecretBinding, B as VersionMetadataBinding, C as MediaBinding, D as R2Binding, E as QueueBinding, F as TypedKvBinding, G as WorkerLoaderBinding, H as VpcServiceBinding, I as TypedPipelineBinding, J as bindings, K as WorkerReference, L as TypedQueueBinding, M as StreamBinding, N as TextBinding, O as RateLimitBinding, P as TypedAiBinding, Q as SettingsConfig, R as UnsafeBinding, S as LogfwdrBinding, T as PipelineBinding, U as WebSearchBinding, V as VpcNetworkBinding, W as WorkerBinding, X as WorkerConfigInput, Y as WorkerConfigExport, Z as defineWorker, _ as FlagshipBinding, _t as InferDurableNamespaces, a as AiBinding, at as Triggers, b as JsonBinding, bt as UnwrapConfig, c as AnalyticsEngineDatasetBinding, ct as DurableObjectDeletedExport, d as BindingDevOptions, dt as DurableObjectTransferredExport, et as ConnectTrigger, f as Bindings, ft as Exports, g as DurableObjectBinding, gt as ConfigContext, h as DispatchNamespaceBinding, ht as exports, i as AgentMemoryBinding, it as ScheduledTrigger, j as SendEmailBinding, k as SecretBinding, l as ArtifactsBinding, lt as DurableObjectExpectingTransferExport, m as D1Binding, mt as WorkerEntrypointExportOptions, n as SettingsConfigInput, nt as FetchTrigger, o as AiSearchBinding, ot as triggers, p as BrowserBinding, pt as WorkerEntrypointExport, q as WorkflowBinding, r as defineSettings, rt as QueueConsumerTrigger, s as AiSearchNamespaceBinding, st as DurableObjectCreatedExport, t as SettingsConfigExport, tt as EmailTrigger, u as AssetsBinding, ut as DurableObjectRenamedExport, v as HyperdriveBinding, vt as InferEnv, w as MtlsCertificateBinding, x as KvBinding, y as ImagesBinding, yt as InferMainModule, z as VectorizeBinding } from "./public-E85Be_2R.mjs";
+import { $ as SettingsConfig, A as SecretsStoreSecretBinding, B as VersionMetadataBinding, C as MediaBinding, Ct as InferMainModule, D as R2Binding, E as QueueBinding, F as TypedKvBinding, G as WorkerLoaderBinding, H as VpcServiceBinding, I as TypedPipelineBinding, J as bindings, K as WorkerReference, L as TypedQueueBinding, M as StreamBinding, N as TextBinding, O as RateLimitBinding, P as TypedAiBinding, Q as ContainerConfig, R as UnsafeBinding, S as LogfwdrBinding, St as InferEnv, T as PipelineBinding, U as WebSearchBinding, V as VpcNetworkBinding, W as WorkerBinding, X as WorkerConfigInput, Y as WorkerConfigExport, Z as defineWorker, _ as FlagshipBinding, _t as ContainerConfigExport, a as AiBinding, at as ScheduledTrigger, b as JsonBinding, bt as ConfigContext, c as AnalyticsEngineDatasetBinding, ct as DurableObjectCreatedExport, d as BindingDevOptions, dt as DurableObjectRenamedExport, et as WorkerConfig, f as Bindings, ft as DurableObjectTransferredExport, g as DurableObjectBinding, gt as exports, h as DispatchNamespaceBinding, ht as WorkerEntrypointExportOptions, i as AgentMemoryBinding, it as QueueConsumerTrigger, j as SendEmailBinding, k as SecretBinding, l as ArtifactsBinding, lt as DurableObjectDeletedExport, m as D1Binding, mt as WorkerEntrypointExport, n as SettingsConfigInput, nt as EmailTrigger, o as AiSearchBinding, ot as Triggers, p as BrowserBinding, pt as Exports, q as WorkflowBinding, r as defineSettings, rt as FetchTrigger, s as AiSearchNamespaceBinding, st as triggers, t as SettingsConfigExport, tt as ConnectTrigger, u as AssetsBinding, ut as DurableObjectExpectingTransferExport, v as HyperdriveBinding, vt as ContainerConfigInput, w as MtlsCertificateBinding, wt as UnwrapConfig, x as KvBinding, xt as InferDurableNamespaces, y as ImagesBinding, yt as defineContainer, z as VectorizeBinding } from "./public-CxIWEZqM.mjs";
 import * as z from "zod";
 import { RawConfig } from "@cloudflare/workers-utils";
 
@@ -321,6 +321,215 @@ declare const BindingSchema: z.ZodType<BindingOutput, BindingInput>;
 declare function validateSingletonBindings(env: Record<string, {
   type: string;
 }>, ctx: z.RefinementCtx): void;
+/**
+ * Input Container schema — validates user-authored `cloudflare.config.ts`
+ * Container exports. Dockerfiles are built by the consuming build tool.
+ */
+declare const InputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
+  type: z.ZodLiteral<"container">;
+  name: z.ZodString;
+  observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstancePercentage: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstanceCount: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  maxInstances: z.ZodDefault<z.ZodNumber>;
+  instanceType: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+    basic: "basic";
+    lite: "lite";
+    "standard-1": "standard-1";
+    "standard-2": "standard-2";
+    "standard-3": "standard-3";
+    "standard-4": "standard-4";
+  }>, z.ZodObject<{
+    vcpu: z.ZodOptional<z.ZodNumber>;
+    memoryMib: z.ZodOptional<z.ZodNumber>;
+    diskMb: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  schedulingPolicy: z.ZodOptional<z.ZodEnum<{
+    default: "default";
+    regional: "regional";
+  }>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
+  constraints: z.ZodOptional<z.ZodObject<{
+    regions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+      ENAM: "ENAM";
+      WNAM: "WNAM";
+      EEUR: "EEUR";
+      WEUR: "WEUR";
+      APAC: "APAC";
+      SAM: "SAM";
+      ME: "ME";
+      OC: "OC";
+      AFR: "AFR";
+    }>>>;
+    jurisdiction: z.ZodOptional<z.ZodEnum<{
+      eu: "eu";
+      fedramp: "fedramp";
+    }>>;
+  }, z.core.$strict>>;
+  rollout: z.ZodOptional<z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+      none: "none";
+      "full-auto": "full-auto";
+      "full-manual": "full-manual";
+    }>>;
+    stepPercentage: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodArray<z.ZodNumber>]>>;
+    activeGracePeriod: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  image: z.ZodUnion<readonly [z.ZodObject<{
+    dockerfile: z.ZodString;
+    buildContext: z.ZodOptional<z.ZodString>;
+    buildVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$strict>, z.ZodObject<{
+    reference: z.ZodString;
+  }, z.core.$strict>]>;
+}, z.core.$strict>, z.ZodObject<{
+  type: z.ZodLiteral<"container">;
+  name: z.ZodString;
+  observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstancePercentage: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstanceCount: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  schedulingPolicy: z.ZodLiteral<"durable-object">;
+  images: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
+    dockerfile: z.ZodString;
+    buildContext: z.ZodOptional<z.ZodString>;
+    buildVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$strict>, z.ZodObject<{
+    reference: z.ZodString;
+  }, z.core.$strict>]>>>;
+}, z.core.$strict>]>;
+type ParsedInputContainerConfig = z.output<typeof InputContainerSchema>;
+/**
+ * Output Container schema — validates Container configs in the Build Output
+ * Specification, after any Dockerfile has been built into a local or remote
+ * image reference.
+ */
+declare const OutputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
+  type: z.ZodLiteral<"container">;
+  name: z.ZodString;
+  observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstancePercentage: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstanceCount: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  maxInstances: z.ZodDefault<z.ZodNumber>;
+  instanceType: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+    basic: "basic";
+    lite: "lite";
+    "standard-1": "standard-1";
+    "standard-2": "standard-2";
+    "standard-3": "standard-3";
+    "standard-4": "standard-4";
+  }>, z.ZodObject<{
+    vcpu: z.ZodOptional<z.ZodNumber>;
+    memoryMib: z.ZodOptional<z.ZodNumber>;
+    diskMb: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  schedulingPolicy: z.ZodOptional<z.ZodEnum<{
+    default: "default";
+    regional: "regional";
+  }>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
+  constraints: z.ZodOptional<z.ZodObject<{
+    regions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+      ENAM: "ENAM";
+      WNAM: "WNAM";
+      EEUR: "EEUR";
+      WEUR: "WEUR";
+      APAC: "APAC";
+      SAM: "SAM";
+      ME: "ME";
+      OC: "OC";
+      AFR: "AFR";
+    }>>>;
+    jurisdiction: z.ZodOptional<z.ZodEnum<{
+      eu: "eu";
+      fedramp: "fedramp";
+    }>>;
+  }, z.core.$strict>>;
+  rollout: z.ZodOptional<z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+      none: "none";
+      "full-auto": "full-auto";
+      "full-manual": "full-manual";
+    }>>;
+    stepPercentage: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodArray<z.ZodNumber>]>>;
+    activeGracePeriod: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  image: z.ZodUnion<readonly [z.ZodObject<{
+    reference: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    localReference: z.ZodString;
+  }, z.core.$strict>]>;
+}, z.core.$strict>, z.ZodObject<{
+  type: z.ZodLiteral<"container">;
+  name: z.ZodString;
+  observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstancePercentage: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>, z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    logs: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    targetInstanceCount: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>]>>;
+  unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  schedulingPolicy: z.ZodLiteral<"durable-object">;
+  images: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
+    reference: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    localReference: z.ZodString;
+  }, z.core.$strict>]>>>;
+}, z.core.$strict>]>;
+type ParsedOutputContainerConfig = z.output<typeof OutputContainerSchema>;
 declare const DurableObjectCreatedExportSchema: z.ZodObject<{
   type: z.ZodLiteral<"durable-object">;
   state: z.ZodOptional<z.ZodLiteral<"created">>;
@@ -815,15 +1024,18 @@ declare function generateTypes({
 /**
  * Convert a parsed `@cloudflare/config` config into a Wrangler `RawConfig`.
  *
- * The caller is responsible for unwrapping any function/promise wrapper around
- * the config and validating it against `InputWorkerSchema` before passing it in.
+ * The caller is responsible for unwrapping any function/promise wrappers and
+ * validating the configs against their corresponding input schemas before
+ * passing them in.
  *
  * @param workerConfig The parsed (post-validation) Worker config.
  * @param settingsConfig The optional parsed settings config, whose fields
  * are merged onto the result.
+ * @param containerExports The parsed Container exports to include in the
+ * result.
  * @returns The corresponding Wrangler `RawConfig`.
  */
-declare function convertToWranglerConfig(workerConfig: ParsedInputWorkerConfig, settingsConfig?: ParsedInputSettingsConfig): RawConfig;
+declare function convertToWranglerConfig(workerConfig: ParsedInputWorkerConfig, settingsConfig?: ParsedInputSettingsConfig, containerExports?: ParsedInputContainerConfig[]): RawConfig;
 //#endregion
 //#region src/load.d.ts
 /**
@@ -888,8 +1100,9 @@ declare function registerConfigHooks(): () => void;
 //#endregion
 //#region src/config-loader.d.ts
 type ParsedConfigExports = {
+  default?: ParsedInputWorkerConfig;
   settings?: ParsedInputSettingsConfig;
-} & Record<string, ParsedInputWorkerConfig>;
+} & Record<string, ParsedInputContainerConfig | ParsedInputWorkerConfig>;
 type ConfigParseResult = z.ZodSafeParseSuccess<ParsedConfigExports> | z.ZodSafeParseError<unknown>;
 interface LoadAndValidateConfigResult {
   /**
@@ -903,9 +1116,10 @@ interface LoadAndValidateConfigResult {
 /**
  * Resolve and validate loaded `cloudflare.config.ts` exports.
  *
- * Config inputs are resolved once by identity. Top-level Worker exports are
- * also parsed once by identity; unexported references are resolved only far
- * enough to replace the reference with the Worker's name.
+ * Config inputs are resolved once by identity. Top-level Worker and Container
+ * exports are also parsed once by identity. References are resolved only far
+ * enough to replace them with resource names, then Container links are
+ * validated across the exported resources.
  */
 declare function resolveAndValidateConfigExports(exports: Record<string, unknown>, ctx: ConfigContext): Promise<ConfigParseResult>;
 /**
@@ -915,4 +1129,4 @@ declare function loadAndValidateConfig(configPath: string, ctx: ConfigContext, o
   include?: string[];
 }): Promise<LoadAndValidateConfigResult>;
 //#endregion
-export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, AnalyticsEngineDatasetBindingSchema, ArtifactsBinding, AssetsBinding, AssetsSchema, BindingDevOptions, BindingSchema, Bindings, BrowserBinding, BrowserBindingSchema, ConfigContext, type ConfigParseResult, ConnectTrigger, D1Binding, D1BindingSchema, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectCreatedExportSchema, DurableObjectDeletedExport, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExport, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExport, DurableObjectRenamedExportSchema, DurableObjectTransferredExport, DurableObjectTransferredExportSchema, EmailTrigger, ExportSchema, Exports, FetchTrigger, FlagshipBinding, FlagshipBindingSchema, HyperdriveBinding, HyperdriveBindingSchema, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, InputSettingsSchema, InputWorkerSchema, JsonBinding, KVBindingSchema, KnownBindingSchema, KvBinding, type LoadAndValidateConfigResult, type LoadConfigResult, LogfwdrBinding, MediaBinding, type ModuleType, ModuleTypeSchema, MtlsCertificateBinding, OutputSettingsSchema, OutputWorkerSchema, type ParsedConfigExports, type ParsedInputSettingsConfig, type ParsedInputWorkerConfig, type ParsedOutputSettingsConfig, type ParsedOutputWorkerConfig, PipelineBinding, QueueBinding, QueueBindingSchema, QueueConsumerTrigger, R2Binding, R2BindingSchema, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, SettingsConfig, SettingsConfigExport, SettingsConfigInput, StreamBinding, TailConsumerSchema, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnsafeBindingSchema, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WebSearchBinding, WorkerBinding, WorkerBindingSchema, WorkerConfig, WorkerConfigExport, WorkerConfigInput, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerEntrypointExportSchema, WorkerLoaderBinding, WorkerReference, WorkflowBinding, bindings, convertToWranglerConfig, defineSettings, defineWorker, exports, generateTypes, loadAndValidateConfig, loadConfig, registerConfigHooks, resolveAndValidateConfigExports, triggers, validateSingletonBindings };
+export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, AnalyticsEngineDatasetBindingSchema, ArtifactsBinding, AssetsBinding, AssetsSchema, BindingDevOptions, BindingSchema, Bindings, BrowserBinding, BrowserBindingSchema, ConfigContext, type ConfigParseResult, ConnectTrigger, ContainerConfig, ContainerConfigExport, ContainerConfigInput, D1Binding, D1BindingSchema, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectCreatedExportSchema, DurableObjectDeletedExport, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExport, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExport, DurableObjectRenamedExportSchema, DurableObjectTransferredExport, DurableObjectTransferredExportSchema, EmailTrigger, ExportSchema, Exports, FetchTrigger, FlagshipBinding, FlagshipBindingSchema, HyperdriveBinding, HyperdriveBindingSchema, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, InputContainerSchema, InputSettingsSchema, InputWorkerSchema, JsonBinding, KVBindingSchema, KnownBindingSchema, KvBinding, type LoadAndValidateConfigResult, type LoadConfigResult, LogfwdrBinding, MediaBinding, type ModuleType, ModuleTypeSchema, MtlsCertificateBinding, OutputContainerSchema, OutputSettingsSchema, OutputWorkerSchema, type ParsedConfigExports, type ParsedInputContainerConfig, type ParsedInputSettingsConfig, type ParsedInputWorkerConfig, type ParsedOutputContainerConfig, type ParsedOutputSettingsConfig, type ParsedOutputWorkerConfig, PipelineBinding, QueueBinding, QueueBindingSchema, QueueConsumerTrigger, R2Binding, R2BindingSchema, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, SettingsConfig, SettingsConfigExport, SettingsConfigInput, StreamBinding, TailConsumerSchema, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnsafeBindingSchema, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WebSearchBinding, WorkerBinding, WorkerBindingSchema, WorkerConfig, WorkerConfigExport, WorkerConfigInput, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerEntrypointExportSchema, WorkerLoaderBinding, WorkerReference, WorkflowBinding, bindings, convertToWranglerConfig, defineContainer, defineSettings, defineWorker, exports, generateTypes, loadAndValidateConfig, loadConfig, registerConfigHooks, resolveAndValidateConfigExports, triggers, validateSingletonBindings };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as bindings, i as triggers, n as defineWorker, r as exports$1, t as defineSettings } from "./public-bN7EDGtD.mjs";
+import { a as triggers, i as exports$1, n as defineWorker, o as bindings, r as defineContainer, t as defineSettings } from "./public-BYCVISMH.mjs";
 import * as nodeModule from "node:module";
 import * as z from "zod";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -263,6 +263,136 @@ function validateSingletonBindings(env, ctx) {
 	});
 }
 const EnvSchema = z.record(z.string(), BindingSchema).superRefine(validateSingletonBindings).optional();
+const ContainerImageDockerfileSchema = z.strictObject({
+	dockerfile: z.string().min(1),
+	buildContext: z.string().optional(),
+	buildVars: z.record(z.string(), z.string()).optional()
+});
+const ContainerImageReferenceSchema = z.strictObject({ reference: z.string().min(1) });
+const ContainerImageLocalReferenceSchema = z.strictObject({ localReference: z.string().min(1) });
+const InputContainerImageSchema = z.union([ContainerImageDockerfileSchema, ContainerImageReferenceSchema]);
+const OutputContainerImageSchema = z.union([ContainerImageReferenceSchema, ContainerImageLocalReferenceSchema]);
+const VALID_ROLLOUT_STEP_PERCENTAGES = new Set([
+	5,
+	10,
+	20,
+	25,
+	50,
+	100
+]);
+const ContainerRolloutStepPercentageSchema = z.union([z.number(), z.array(z.number())]).superRefine((stepPercentage, ctx) => {
+	if (typeof stepPercentage === "number") {
+		if (!VALID_ROLLOUT_STEP_PERCENTAGES.has(stepPercentage)) ctx.addIssue({
+			code: "custom",
+			message: "A rollout step percentage must be one of 5, 10, 20, 25, 50, or 100"
+		});
+		return;
+	}
+	if (stepPercentage.length === 0) {
+		ctx.addIssue({
+			code: "custom",
+			message: "A rollout must contain at least one step percentage"
+		});
+		return;
+	}
+	for (const [index, step] of stepPercentage.entries()) {
+		if (step < 10 || step > 100) ctx.addIssue({
+			code: "custom",
+			path: [index],
+			message: "Rollout step percentages must be between 10 and 100"
+		});
+		const previousStep = stepPercentage[index - 1];
+		if (previousStep !== void 0 && step < previousStep) ctx.addIssue({
+			code: "custom",
+			path: [index],
+			message: "Rollout step percentages must be in ascending order"
+		});
+	}
+	const lastIndex = stepPercentage.length - 1;
+	if (stepPercentage[lastIndex] !== 100) ctx.addIssue({
+		code: "custom",
+		path: [lastIndex],
+		message: "The final rollout step percentage must be 100"
+	});
+});
+function validateContainerRelationships(container, ctx) {
+	const stepPercentage = container.rollout?.stepPercentage;
+	if (Array.isArray(stepPercentage) && container.maxInstances !== void 0 && stepPercentage.length > container.maxInstances) ctx.addIssue({
+		code: "custom",
+		path: ["rollout", "stepPercentage"],
+		message: "A rollout cannot contain more steps than the maximum number of instances"
+	});
+}
+const ContainerObservabilityBaseSchema = z.strictObject({
+	enabled: z.boolean().optional(),
+	logs: z.strictObject({ enabled: z.boolean().optional() }).optional()
+});
+const ContainerObservabilitySchema = z.union([ContainerObservabilityBaseSchema.extend({ targetInstancePercentage: z.number().min(0).max(100).optional() }), ContainerObservabilityBaseSchema.extend({ targetInstanceCount: z.number().int().nonnegative().optional() })]);
+const BaseContainerSchema = z.strictObject({
+	type: z.literal("container"),
+	name: z.string().min(1),
+	observability: ContainerObservabilitySchema.optional(),
+	unsafe: z.record(z.string(), z.unknown()).optional()
+});
+const StandardContainerBaseSchema = BaseContainerSchema.extend({
+	maxInstances: z.number().int().nonnegative().default(20),
+	instanceType: z.union([z.enum([
+		"basic",
+		"lite",
+		"standard-1",
+		"standard-2",
+		"standard-3",
+		"standard-4"
+	]), z.strictObject({
+		vcpu: z.number().min(.0625).optional(),
+		memoryMib: z.number().nonnegative().optional(),
+		diskMb: z.number().nonnegative().optional()
+	})]).optional(),
+	schedulingPolicy: z.enum(["default", "regional"]).optional(),
+	ssh: z.strictObject({
+		enabled: z.boolean(),
+		port: z.number().int().min(1).max(65535).optional()
+	}).optional(),
+	authorizedKeys: z.array(z.strictObject({
+		name: z.string(),
+		publicKey: z.string()
+	})).optional(),
+	constraints: z.strictObject({
+		regions: z.array(z.enum([
+			"ENAM",
+			"WNAM",
+			"EEUR",
+			"WEUR",
+			"APAC",
+			"SAM",
+			"ME",
+			"OC",
+			"AFR"
+		])).optional(),
+		jurisdiction: z.enum(["eu", "fedramp"]).optional()
+	}).optional(),
+	rollout: z.strictObject({
+		kind: z.enum([
+			"full-auto",
+			"none",
+			"full-manual"
+		]).optional(),
+		stepPercentage: ContainerRolloutStepPercentageSchema.optional(),
+		activeGracePeriod: z.number().nonnegative().optional()
+	}).optional()
+});
+const DurableObjectContainerBaseSchema = BaseContainerSchema.extend({ schedulingPolicy: z.literal("durable-object") });
+/**
+* Input Container schema — validates user-authored `cloudflare.config.ts`
+* Container exports. Dockerfiles are built by the consuming build tool.
+*/
+const InputContainerSchema = z.union([StandardContainerBaseSchema.extend({ image: InputContainerImageSchema }).superRefine(validateContainerRelationships), DurableObjectContainerBaseSchema.extend({ images: z.record(z.string(), InputContainerImageSchema).optional() })]);
+/**
+* Output Container schema — validates Container configs in the Build Output
+* Specification, after any Dockerfile has been built into a local or remote
+* image reference.
+*/
+const OutputContainerSchema = z.union([StandardContainerBaseSchema.extend({ image: OutputContainerImageSchema }).superRefine(validateContainerRelationships), DurableObjectContainerBaseSchema.extend({ images: z.record(z.string(), OutputContainerImageSchema).optional() })]);
 const DurableObjectCreatedExportSchema = z.strictObject({
 	type: z.literal("durable-object"),
 	state: z.literal("created").optional(),
@@ -441,8 +571,13 @@ const InputSettingsSchema = z.strictObject({
 * Build Output Specification. Adds the `mode` the build was produced in.
 */
 const OutputSettingsSchema = InputSettingsSchema.extend({ mode: z.string().optional() });
+const DEFAULT_EXPORT_NAME = "default";
 const SETTINGS_EXPORT_NAME = "settings";
-const SUPPORTED_EXPORT_TYPES = new Set(["worker", "settings"]);
+const SUPPORTED_EXPORT_TYPES = new Set([
+	"container",
+	"worker",
+	"settings"
+]);
 function invalidConfigExportMessage(exportName) {
 	return `The \`${exportName}\` export is not a supported export type. Move constants, helper functions, and other unsupported exports to a separate module.`;
 }
@@ -459,6 +594,15 @@ const ConfigExportsTypeSchema = z.record(z.string(), z.unknown()).check((ctx) =>
 			});
 			continue;
 		}
+		if (key === DEFAULT_EXPORT_NAME && type !== "worker") {
+			ctx.issues.push({
+				code: "custom",
+				input: value,
+				path: [key],
+				message: `The \`${DEFAULT_EXPORT_NAME}\` export is reserved for a \`worker\` config; found a \`${type}\` config.`
+			});
+			continue;
+		}
 		const isSettingsName = key === SETTINGS_EXPORT_NAME;
 		const isSettingsType = type === "settings";
 		if (isSettingsType && !isSettingsName) ctx.issues.push({
@@ -656,18 +800,26 @@ __name(createFatalError, "createFatalError");
 
 //#endregion
 //#region src/convert.ts
+const ROLLOUT_KIND_MAP = {
+	"full-auto": "full_auto",
+	"full-manual": "full_manual",
+	none: "none"
+};
 /**
 * Convert a parsed `@cloudflare/config` config into a Wrangler `RawConfig`.
 *
-* The caller is responsible for unwrapping any function/promise wrapper around
-* the config and validating it against `InputWorkerSchema` before passing it in.
+* The caller is responsible for unwrapping any function/promise wrappers and
+* validating the configs against their corresponding input schemas before
+* passing them in.
 *
 * @param workerConfig The parsed (post-validation) Worker config.
 * @param settingsConfig The optional parsed settings config, whose fields
 * are merged onto the result.
+* @param containerExports The parsed Container exports to include in the
+* result.
 * @returns The corresponding Wrangler `RawConfig`.
 */
-function convertToWranglerConfig(workerConfig, settingsConfig) {
+function convertToWranglerConfig(workerConfig, settingsConfig, containerExports = []) {
 	const result = {};
 	convertTopLevel(workerConfig, result);
 	convertBindingsAndAssets(workerConfig, result);
@@ -676,8 +828,50 @@ function convertToWranglerConfig(workerConfig, settingsConfig) {
 	convertTriggers(workerConfig, result);
 	convertTailConsumers(workerConfig, result);
 	if (settingsConfig !== void 0) convertSettings(settingsConfig, result);
+	if (containerExports.length > 0) result.containers = containerExports.map((container) => convertContainer(container));
 	return result;
 }
+function convertContainer(container) {
+	if (container.schedulingPolicy === "durable-object") throw new UserError("Durable Object-managed Containers are not currently supported by `convertToWranglerConfig()`.", { telemetryMessage: false });
+	const converted = { name: container.name };
+	if (container.observability !== void 0) converted.observability = convertContainerObservability(container.observability);
+	if (container.unsafe !== void 0) converted.unsafe = container.unsafe;
+	converted.image = "dockerfile" in container.image ? container.image.dockerfile : container.image.reference;
+	converted.max_instances = container.maxInstances;
+	if ("dockerfile" in container.image) {
+		if (container.image.buildContext !== void 0) converted.image_build_context = container.image.buildContext;
+		if (container.image.buildVars !== void 0) converted.image_vars = container.image.buildVars;
+	}
+	if (container.instanceType !== void 0) if (typeof container.instanceType === "string") converted.instance_type = container.instanceType;
+	else {
+		const instanceType = {};
+		if (container.instanceType.vcpu !== void 0) instanceType.vcpu = container.instanceType.vcpu;
+		if (container.instanceType.memoryMib !== void 0) instanceType.memory_mib = container.instanceType.memoryMib;
+		if (container.instanceType.diskMb !== void 0) instanceType.disk_mb = container.instanceType.diskMb;
+		converted.instance_type = instanceType;
+	}
+	if (container.schedulingPolicy !== void 0) converted.scheduling_policy = container.schedulingPolicy;
+	if (container.ssh !== void 0) converted.ssh = container.ssh;
+	if (container.authorizedKeys !== void 0) converted.authorized_keys = container.authorizedKeys.map(({ name, publicKey }) => ({
+		name,
+		public_key: publicKey
+	}));
+	if (container.constraints !== void 0) converted.constraints = container.constraints;
+	if (container.rollout !== void 0) {
+		if (container.rollout.kind !== void 0) converted.rollout_kind = ROLLOUT_KIND_MAP[container.rollout.kind];
+		if (container.rollout.stepPercentage !== void 0) converted.rollout_step_percentage = container.rollout.stepPercentage;
+		if (container.rollout.activeGracePeriod !== void 0) converted.rollout_active_grace_period = container.rollout.activeGracePeriod;
+	}
+	return converted;
+}
+function convertContainerObservability(observability) {
+	const converted = {};
+	if (observability.enabled !== void 0) converted.enabled = observability.enabled;
+	if (observability.logs !== void 0) converted.logs = observability.logs;
+	if ("targetInstancePercentage" in observability && observability.targetInstancePercentage !== void 0) converted.target_instance_percentage = observability.targetInstancePercentage;
+	if ("targetInstanceCount" in observability && observability.targetInstanceCount !== void 0) converted.target_instance_count = observability.targetInstanceCount;
+	return converted;
+}
 /**
 * Merge a parsed settings config's fields (`account_id`, `compliance_region`)
 * onto an existing Wrangler `RawConfig`.
@@ -1351,6 +1545,9 @@ function isRecord(value) {
 function isConfigReference(value) {
 	return typeof value === "function" || isRecord(value);
 }
+function normalizeConfigReference(reference, resolved, expectedType) {
+	return isRecord(resolved) && resolved.type === expectedType && typeof resolved.name === "string" ? resolved.name : reference;
+}
 function createDefinitionResolver(ctx) {
 	const resolvedDefinitions = /* @__PURE__ */ new Map();
 	return (input) => {
@@ -1371,7 +1568,7 @@ async function normalizeWorkerReferences(resolved, resolveDefinition) {
 		const target = await resolveDefinition(binding.worker);
 		env[bindingName] = {
 			...binding,
-			worker: isRecord(target) ? target.name : void 0
+			worker: normalizeConfigReference(binding.worker, target, "worker")
 		};
 	}
 	return {
@@ -1379,22 +1576,151 @@ async function normalizeWorkerReferences(resolved, resolveDefinition) {
 		env
 	};
 }
+async function normalizeContainerReferences(resolved, resolveDefinition, resolvedExports) {
+	const issues = [];
+	if (!isRecord(resolved) || !isRecord(resolved.exports)) return {
+		value: resolved,
+		issues
+	};
+	const workerExports = { ...resolved.exports };
+	for (const [exportName, workerExport] of Object.entries(workerExports)) {
+		if (!isRecord(workerExport) || workerExport.type !== "durable-object" || workerExport.container === void 0) continue;
+		const reference = workerExport.container;
+		if (typeof reference === "string") {
+			issues.push({
+				code: "custom",
+				input: reference,
+				path: [
+					"exports",
+					exportName,
+					"container"
+				],
+				message: "Container provided as a string. Reference an exported Container definition instead."
+			});
+			workerExports[exportName] = {
+				...workerExport,
+				container: void 0
+			};
+			continue;
+		}
+		const target = await resolveDefinition(reference);
+		if (isRecord(target) && target.type === "container" && typeof target.name === "string" && !Object.values(resolvedExports).includes(target)) {
+			issues.push({
+				code: "custom",
+				input: reference,
+				path: [
+					"exports",
+					exportName,
+					"container"
+				],
+				message: `The referenced Container "${target.name}" is not exported.`
+			});
+			workerExports[exportName] = {
+				...workerExport,
+				container: void 0
+			};
+			continue;
+		}
+		workerExports[exportName] = {
+			...workerExport,
+			container: normalizeConfigReference(reference, target, "container")
+		};
+	}
+	return {
+		value: {
+			...resolved,
+			exports: workerExports
+		},
+		issues
+	};
+}
+async function normalizeConfigReferences(resolved, resolveDefinition, resolvedExports) {
+	return normalizeContainerReferences(await normalizeWorkerReferences(resolved, resolveDefinition), resolveDefinition, resolvedExports);
+}
 function prefixIssues(issues, prefix) {
 	return issues.map((issue) => ({
 		...issue,
 		path: [prefix, ...issue.path]
 	}));
 }
+function validateUniqueResourceNames(configExports) {
+	const issues = [];
+	const exportNameByResourceName = {
+		container: /* @__PURE__ */ new Map(),
+		worker: /* @__PURE__ */ new Map()
+	};
+	for (const [exportName, config] of Object.entries(configExports)) {
+		if (config.type !== "container" && config.type !== "worker") continue;
+		const resourceType = config.type === "container" ? "Container" : "Worker";
+		const exportNames = exportNameByResourceName[config.type];
+		const previousExportName = exportNames.get(config.name);
+		if (previousExportName !== void 0) {
+			issues.push({
+				code: "custom",
+				input: config.name,
+				path: [exportName, "name"],
+				message: `The ${resourceType} name "${config.name}" is also used by the "${previousExportName}" export. ${resourceType} names must be unique.`
+			});
+			continue;
+		}
+		exportNames.set(config.name, exportName);
+	}
+	return issues;
+}
+function validateContainerExportLinks(configExports) {
+	const issues = [];
+	const containerNames = /* @__PURE__ */ new Set();
+	for (const config of Object.values(configExports)) if (config.type === "container") containerNames.add(config.name);
+	const firstReferenceByContainerName = /* @__PURE__ */ new Map();
+	for (const [workerExportName, config] of Object.entries(configExports)) {
+		if (config.type !== "worker") continue;
+		for (const [durableObjectExportName, workerExport] of Object.entries(config.exports ?? {})) {
+			if (workerExport.type !== "durable-object" || !("container" in workerExport) || workerExport.container === void 0) continue;
+			const containerName = workerExport.container;
+			const path = [
+				workerExportName,
+				"exports",
+				durableObjectExportName,
+				"container"
+			];
+			if (!containerNames.has(containerName)) {
+				issues.push({
+					code: "custom",
+					input: containerName,
+					path,
+					message: `The Container "${containerName}" is not exported from this configuration.`
+				});
+				continue;
+			}
+			const firstReference = firstReferenceByContainerName.get(containerName);
+			if (firstReference !== void 0) {
+				issues.push({
+					code: "custom",
+					input: containerName,
+					path,
+					message: `The Container "${containerName}" is already referenced by "${firstReference.workerExportName}.exports.${firstReference.durableObjectExportName}". A Container can only be linked to one Durable Object.`
+				});
+				continue;
+			}
+			firstReferenceByContainerName.set(containerName, {
+				workerExportName,
+				durableObjectExportName
+			});
+		}
+	}
+	return issues;
+}
 /**
 * Resolve and validate loaded `cloudflare.config.ts` exports.
 *
-* Config inputs are resolved once by identity. Top-level Worker exports are
-* also parsed once by identity; unexported references are resolved only far
-* enough to replace the reference with the Worker's name.
+* Config inputs are resolved once by identity. Top-level Worker and Container
+* exports are also parsed once by identity. References are resolved only far
+* enough to replace them with resource names, then Container links are
+* validated across the exported resources.
 */
 async function resolveAndValidateConfigExports(exports$2, ctx) {
 	const resolveDefinition = createDefinitionResolver(ctx);
-	const parsedWorkers = /* @__PURE__ */ new Map();
+	const parsedResources = /* @__PURE__ */ new Map();
 	const resolvedExports = {};
 	for (const [name, input] of Object.entries(exports$2)) resolvedExports[name] = await resolveDefinition(input);
 	const typeResult = ConfigExportsTypeSchema.safeParse(resolvedExports);
@@ -1408,17 +1734,20 @@ async function resolveAndValidateConfigExports(exports$2, ctx) {
 	for (const [name, input] of Object.entries(exports$2)) {
 		const resolved = resolvedExports[name];
 		if (!isRecord(resolved)) continue;
-		if (resolved.type === "worker") {
-			let result = parsedWorkers.get(input);
-			if (!result) {
-				result = InputWorkerSchema.safeParse(await normalizeWorkerReferences(resolved, resolveDefinition));
-				parsedWorkers.set(input, result);
-				if (!result.success) issues.push(...prefixIssues(result.error.issues, name));
-			}
-			if (result.success) data[name] = result.data;
-			continue;
+		if (resolved.type !== "worker" && resolved.type !== "container") continue;
+		let result = parsedResources.get(input);
+		if (!result) {
+			if (resolved.type === "worker") {
+				const normalized = await normalizeConfigReferences(resolved, resolveDefinition, resolvedExports);
+				issues.push(...prefixIssues(normalized.issues, name));
+				result = InputWorkerSchema.safeParse(normalized.value);
+			} else result = InputContainerSchema.safeParse(resolved);
+			parsedResources.set(input, result);
+			if (!result.success) issues.push(...prefixIssues(result.error.issues, name));
 		}
+		if (result.success) data[name] = result.data;
 	}
+	issues.push(...validateUniqueResourceNames(data), ...validateContainerExportLinks(data));
 	return issues.length > 0 ? {
 		success: false,
 		error: new z.ZodError(issues)
@@ -1439,4 +1768,4 @@ async function loadAndValidateConfig(configPath, ctx, options) {
 }
 
 //#endregion
-export { AnalyticsEngineDatasetBindingSchema, AssetsSchema, BindingSchema, BrowserBindingSchema, D1BindingSchema, DurableObjectCreatedExportSchema, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExportSchema, DurableObjectTransferredExportSchema, ExportSchema, FlagshipBindingSchema, HyperdriveBindingSchema, InputSettingsSchema, InputWorkerSchema, KVBindingSchema, KnownBindingSchema, ModuleTypeSchema, OutputSettingsSchema, OutputWorkerSchema, QueueBindingSchema, R2BindingSchema, TailConsumerSchema, UnsafeBindingSchema, WorkerBindingSchema, WorkerEntrypointExportSchema, bindings, convertToWranglerConfig, defineSettings, defineWorker, exports$1 as exports, generateTypes, loadAndValidateConfig, loadConfig, registerConfigHooks, resolveAndValidateConfigExports, triggers, validateSingletonBindings };
+export { AnalyticsEngineDatasetBindingSchema, AssetsSchema, BindingSchema, BrowserBindingSchema, D1BindingSchema, DurableObjectCreatedExportSchema, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExportSchema, DurableObjectTransferredExportSchema, ExportSchema, FlagshipBindingSchema, HyperdriveBindingSchema, InputContainerSchema, InputSettingsSchema, InputWorkerSchema, KVBindingSchema, KnownBindingSchema, ModuleTypeSchema, OutputContainerSchema, OutputSettingsSchema, OutputWorkerSchema, QueueBindingSchema, R2BindingSchema, TailConsumerSchema, UnsafeBindingSchema, WorkerBindingSchema, WorkerEntrypointExportSchema, bindings, convertToWranglerConfig, defineContainer, defineSettings, defineWorker, exports$1 as exports, generateTypes, loadAndValidateConfig, loadConfig, registerConfigHooks, resolveAndValidateConfigExports, triggers, validateSingletonBindings };

package/dist/{public-bN7EDGtD.mjs → public-BYCVISMH.mjs}

@@ -193,12 +193,17 @@ function worker(options = {}) {
 *
 * @example
 * ```typescript
-* import { defineWorker, exports } from "@cloudflare/config";
+* import { defineContainer, defineWorker, exports } from "@cloudflare/config";
+*
+* const myContainer = defineContainer({
+*   name: "my-container",
+*   image: { dockerfile: "./Dockerfile" },
+* });
 *
 * export default defineWorker({
 *   exports: {
 *     MyDurableObject: exports.durableObject({ storage: "sqlite" }),
-*     MyContainerDO:   exports.durableObject({ storage: "sqlite", container: "my-container" }),
+*     MyContainerDO:   exports.durableObject({ storage: "sqlite", container: myContainer }),
 *     OldClass:        exports.durableObject({ state: "deleted" }),
 *     OldName:         exports.durableObject({ state: "renamed", renamedTo: "NewName" }),
 *     Outgoing:        exports.durableObject({ state: "transferred", transferredTo: "target-worker" }),
@@ -236,6 +241,11 @@ function createConfigDefiner(type) {
 	return define;
 }
 
+//#endregion
+//#region src/container-definition.ts
+/** Declare a Container application. */
+const defineContainer = createConfigDefiner("container");
+
 //#endregion
 //#region src/worker-definition.ts
 const defineWorker = createConfigDefiner("worker");
@@ -249,4 +259,4 @@ const defineWorker = createConfigDefiner("worker");
 const defineSettings = createConfigDefiner("settings");
 
 //#endregion
-export { bindings as a, triggers as i, defineWorker as n, exports as r, defineSettings as t };
+export { triggers as a, exports as i, defineWorker as n, bindings as o, defineContainer as r, defineSettings as t };

package/dist/{public-E85Be_2R.d.mts → public-CxIWEZqM.d.mts}

@@ -231,6 +231,25 @@ type ConfigWithType<T$1 extends ConfigObject, TType extends string> = T$1 & {
   type: TType;
 };
 //#endregion
+//#region src/container-definition.d.ts
+type ContainerConfigExport<T$1 extends ContainerConfig = ContainerConfig> = ConfigInput<T$1>;
+type DistributiveOmit<T$1, K$1 extends PropertyKey> = T$1 extends unknown ? Omit<T$1, K$1> : never;
+/**
+ * Authored Container config shape — {@link ContainerConfig} without the `type`
+ * discriminant, which `defineContainer` injects.
+ */
+type ContainerConfigInput = DistributiveOmit<ContainerConfig, "type">;
+/** Declare a Container application. */
+declare const defineContainer: <const TInput extends ConfigInput<ContainerConfigInput>>(config: TInput) => TInput extends ((ctx: ConfigContext) => infer TResult) ? (ctx: ConfigContext) => TResult extends Promise<infer TConfig extends {
+  [x: string]: unknown;
+}> ? Promise<ConfigWithType<TConfig, "container">> : TResult extends {
+  [x: string]: unknown;
+} ? ConfigWithType<TResult, "container"> : never : TInput extends Promise<infer TConfig extends {
+  [x: string]: unknown;
+}> ? Promise<ConfigWithType<TConfig, "container">> : TInput extends {
+  [x: string]: unknown;
+} ? ConfigWithType<TInput, "container"> : never;
+//#endregion
 //#region src/exports.d.ts
 /**
  * Storage backend for the Durable Object.
@@ -238,17 +257,16 @@ type ConfigWithType<T$1 extends ConfigObject, TType extends string> = T$1 & {
  * Containers are only supported on the SQLite storage engine, so `container` is
  * only offered alongside `storage: "sqlite"`.
  */
-type DurableObjectStorageOptions = {
+type DurableObjectStorageOptions<TContainer extends ContainerConfigExport | undefined = ContainerConfigExport | undefined> = {
   /**
    * Selects the SQLite-backed storage engine (recommended for new
    * classes).
    */
   storage: "sqlite";
   /**
-   * Attach a container to this Durable Object, by container name. The
-   * name must match an entry in the top level `containers` array.
+   * Attach a Container application to this Durable Object by config reference.
    */
-  container?: string;
+  container?: TContainer;
 } | {
   /** Selects the legacy key-value storage engine. */
   storage: "legacy-kv";
@@ -261,9 +279,9 @@ type DurableObjectStorageOptions = {
  *
  * For reference, see https://developers.cloudflare.com/workers/wrangler/configuration/#durable-objects
  */
-type DurableObjectCreatedExportOptions = {
+type DurableObjectCreatedExportOptions<TContainer extends ContainerConfigExport | undefined = ContainerConfigExport | undefined> = {
   state?: "created";
-} & DurableObjectStorageOptions;
+} & DurableObjectStorageOptions<TContainer>;
 /**
  * Retire a provisioned Durable Object namespace whose class has
  * been removed from code.
@@ -303,14 +321,14 @@ interface DurableObjectTransferredExportOptions {
  * Prepare to receive cross-Worker Durable Object transfer.
  * Once the source Worker's `transferred` export is deployed, this entry becomes a normal live `durable-object` export.
  */
-type DurableObjectExpectingTransferExportOptions = {
+type DurableObjectExpectingTransferExportOptions<TContainer extends ContainerConfigExport | undefined = ContainerConfigExport | undefined> = {
   state: "expecting-transfer";
   /**
    * The source Worker for the two-phase cross-Worker transfer.
    */
   transferFrom: string;
-} & DurableObjectStorageOptions;
-type DurableObjectCreatedExport = DurableObjectCreatedExportOptions & {
+} & DurableObjectStorageOptions<TContainer>;
+type DurableObjectCreatedExport<TContainer extends ContainerConfigExport | undefined = ContainerConfigExport | undefined> = DurableObjectCreatedExportOptions<TContainer> & {
   type: "durable-object";
 };
 interface DurableObjectDeletedExport extends DurableObjectDeletedExportOptions {
@@ -322,7 +340,7 @@ interface DurableObjectRenamedExport extends DurableObjectRenamedExportOptions {
 interface DurableObjectTransferredExport extends DurableObjectTransferredExportOptions {
   type: "durable-object";
 }
-type DurableObjectExpectingTransferExport = DurableObjectExpectingTransferExportOptions & {
+type DurableObjectExpectingTransferExport<TContainer extends ContainerConfigExport | undefined = ContainerConfigExport | undefined> = DurableObjectExpectingTransferExportOptions<TContainer> & {
   type: "durable-object";
 };
 type DurableObjectExportOptions = DurableObjectCreatedExportOptions | DurableObjectDeletedExportOptions | DurableObjectRenamedExportOptions | DurableObjectTransferredExportOptions | DurableObjectExpectingTransferExportOptions;
@@ -349,7 +367,7 @@ interface Exports {
    *
    * For reference, see https://developers.cloudflare.com/workers/wrangler/configuration/#durable-objects
    */
-  durableObject(options: DurableObjectCreatedExportOptions): DurableObjectCreatedExport;
+  durableObject<TContainer extends ContainerConfigExport | undefined = undefined>(options: DurableObjectCreatedExportOptions<TContainer>): DurableObjectCreatedExport<TContainer>;
   /**
    * Retire a provisioned Durable Object namespace whose class has been removed from code.
    */
@@ -366,7 +384,7 @@ interface Exports {
    * Prepare to receive cross-Worker Durable Object transfer.
    * The source Worker must follow up with a deployment containing a `transferred` export to commit the transfer.
    */
-  durableObject(options: DurableObjectExpectingTransferExportOptions): DurableObjectExpectingTransferExport;
+  durableObject<TContainer extends ContainerConfigExport | undefined = undefined>(options: DurableObjectExpectingTransferExportOptions<TContainer>): DurableObjectExpectingTransferExport<TContainer>;
   durableObject(options: DurableObjectExportOptions): DurableObjectExports;
   /** Declares a WorkerEntrypoint export defined by this Worker. */
   worker(options?: WorkerEntrypointExportOptions): WorkerEntrypointExport;
@@ -376,12 +394,17 @@ interface Exports {
  *
  * @example
  * ```typescript
- * import { defineWorker, exports } from "@cloudflare/config";
+ * import { defineContainer, defineWorker, exports } from "@cloudflare/config";
+ *
+ * const myContainer = defineContainer({
+ *   name: "my-container",
+ *   image: { dockerfile: "./Dockerfile" },
+ * });
  *
  * export default defineWorker({
  *   exports: {
  *     MyDurableObject: exports.durableObject({ storage: "sqlite" }),
- *     MyContainerDO:   exports.durableObject({ storage: "sqlite", container: "my-container" }),
+ *     MyContainerDO:   exports.durableObject({ storage: "sqlite", container: myContainer }),
  *     OldClass:        exports.durableObject({ state: "deleted" }),
  *     OldName:         exports.durableObject({ state: "renamed", renamedTo: "NewName" }),
  *     Outgoing:        exports.durableObject({ state: "transferred", transferredTo: "target-worker" }),
@@ -571,6 +594,181 @@ type Trigger = ConnectTrigger | EmailTrigger | FetchTrigger | QueueConsumerTrigg
  * classes and tombstone lifecycle operations.
  */
 type Export = DurableObjectCreatedExport | DurableObjectDeletedExport | DurableObjectRenamedExport | DurableObjectTransferredExport | DurableObjectExpectingTransferExport | WorkerEntrypointExport;
+/** An image source accepted in an authored Container configuration. */
+type ContainerImage = {
+  /** The path to a Dockerfile. */
+  dockerfile: string;
+  /**
+   * Build context of the application.
+   *
+   * @default The directory containing `dockerfile`.
+   */
+  buildContext?: string;
+  /** Image variables available to the image at build time only. */
+  buildVars?: Record<string, string>;
+} | {
+  /**
+   * Reference to an existing image.
+   *
+   * For supported registries, refer to
+   * https://developers.cloudflare.com/containers/guides/image-management/#use-pre-built-container-images
+   */
+  reference: string;
+};
+/** Fields shared by all Container application configurations. */
+interface BaseContainerConfig {
+  /**
+   * Discriminates this config as a Container config.
+   *
+   * Injected automatically by `defineContainer`; only needs to be written by
+   * hand when authoring a raw config object without the helper.
+   */
+  type: "container";
+  /**
+   * Name of the application.
+   *
+   * This is also the identifier used to reference the Container from a Durable
+   * Object's `exports` entry via its `container` field.
+   */
+  name: string;
+  /** Configures observability for Container instances. */
+  observability?: {
+    /** Whether observability is enabled. */
+    enabled?: boolean;
+    logs?: {
+      /** Whether log collection is enabled. */
+      enabled?: boolean;
+    };
+  } & ({
+    /** Percentage of Container instances targeted for observability. */
+    targetInstancePercentage?: number;
+    targetInstanceCount?: never;
+  } | {
+    targetInstancePercentage?: never;
+    /** Number of Container instances targeted for observability. */
+    targetInstanceCount?: number;
+  });
+  /**
+   * Passed through without client-side validation or transformation.
+   *
+   * @hidden
+   */
+  unsafe?: Record<string, unknown>;
+}
+/** A Container application managed with a standard scheduling policy. */
+interface StandardContainerConfig extends BaseContainerConfig {
+  /** The image to build or deploy. */
+  image: ContainerImage;
+  /**
+   * Maximum number of application instances.
+   *
+   * @default 20
+   */
+  maxInstances?: number;
+  /**
+   * The instance type to be used for the Container.
+   * Select from one of the following named instance types:
+   *
+   * - lite: 1/16 vCPU, 256 MiB memory, and 2 GB disk
+   * - basic: 1/4 vCPU, 1 GiB memory, and 4 GB disk
+   * - standard-1: 1/2 vCPU, 4 GiB memory, and 8 GB disk
+   * - standard-2: 1 vCPU, 6 GiB memory, and 12 GB disk
+   * - standard-3: 2 vCPU, 8 GiB memory, and 16 GB disk
+   * - standard-4: 4 vCPU, 12 GiB memory, and 20 GB disk
+   *
+   * Customers on an enterprise plan have the additional option to set custom
+   * limits.
+   *
+   * @default "lite"
+   */
+  instanceType?: "basic" | "lite" | "standard-1" | "standard-2" | "standard-3" | "standard-4" | {
+    /** @default 0.0625 (1/16 vCPU) */
+    vcpu?: number;
+    /** @default 256 MiB */
+    memoryMib?: number;
+    /** @default 2 GB */
+    diskMb?: number;
+  };
+  /**
+   * The scheduling policy of the application.
+   *
+   * @default "default"
+   */
+  schedulingPolicy?: "default" | "regional";
+  ssh?: {
+    /**
+     * If enabled, users with write access to the Container application can
+     * connect to it over SSH.
+     *
+     * @default false
+     */
+    enabled: boolean;
+    /**
+     * Port that the SSH service is running on.
+     *
+     * @default 22
+     */
+    port?: number;
+  };
+  /** SSH public keys to put in the Container's authorized_keys file. */
+  authorizedKeys?: Array<{
+    name: string;
+    publicKey: string;
+  }>;
+  /** Scheduling constraints for Container placement. */
+  constraints?: {
+    /** Limit Container placement to specific geographic regions. */
+    regions?: Array<"ENAM" | "WNAM" | "EEUR" | "WEUR" | "APAC" | "SAM" | "ME" | "OC" | "AFR">;
+    /** Restrict Containers to compliance boundaries. */
+    jurisdiction?: "eu" | "fedramp";
+  };
+  rollout?: {
+    /**
+     * How a rollout should be created. It supports the following modes:
+     *
+     * - full-auto: The Container application will be rolled out fully
+     *   automatically.
+     * - none: The Container application will not have a rollout or update.
+     * - full-manual: The Container application will be rolled out by manually
+     *   progressing through the rollout steps.
+     *
+     * @default "full-auto"
+     * @hidden
+     */
+    kind?: "full-auto" | "none" | "full-manual";
+    /**
+     * Configures what percentage of instances should be updated at each step of
+     * a rollout. You can specify this as a single number or an array of numbers.
+     *
+     * If this is a single number, each step will progress by that percentage.
+     * The options are 5, 10, 20, 25, 50, or 100.
+     *
+     * If this is an array, each step specifies the cumulative rollout progress.
+     * The final step must be 100.
+     *
+     * @default [10, 100]
+     */
+    stepPercentage?: number | number[];
+    /**
+     * Configures the grace period, in seconds, for active instances before they
+     * are shut down during a rollout.
+     *
+     * @default 0
+     */
+    activeGracePeriod?: number;
+  };
+}
+/** A Container application managed by a Durable Object. */
+interface DurableObjectContainerConfig extends BaseContainerConfig {
+  schedulingPolicy: "durable-object";
+  /** Named images that the Durable Object can start. */
+  images?: Record<string, ContainerImage>;
+}
+/**
+ * Container application configuration. This is the input shape passed to
+ * `defineContainer` and is validated at runtime by `InputContainerSchema`.
+ */
+type ContainerConfig = DurableObjectContainerConfig | StandardContainerConfig;
 /**
  * Worker configuration. This is the input shape passed to
  * [`defineWorker`](https://developers.cloudflare.com/workers/wrangler/configuration/).
@@ -1606,4 +1804,4 @@ declare const defineSettings: <const TInput extends ConfigInput<SettingsConfigIn
   [x: string]: unknown;
 } ? ConfigWithType<TInput, "settings"> : never;
 //#endregion
-export { WorkerConfig as $, SecretsStoreSecretBinding as A, VersionMetadataBinding as B, MediaBinding$1 as C, R2Binding as D, QueueBinding as E, TypedKvBinding as F, WorkerLoaderBinding as G, VpcServiceBinding as H, TypedPipelineBinding as I, bindings as J, WorkerReference as K, TypedQueueBinding as L, StreamBinding$1 as M, TextBinding as N, RateLimitBinding as O, TypedAiBinding as P, SettingsConfig as Q, UnsafeBinding as R, LogfwdrBinding as S, PipelineBinding as T, WebSearchBinding as U, VpcNetworkBinding as V, WorkerBinding as W, WorkerConfigInput as X, WorkerConfigExport as Y, defineWorker as Z, FlagshipBinding as _, InferDurableNamespaces as _t, AiBinding as a, Triggers as at, JsonBinding as b, UnwrapConfig as bt, AnalyticsEngineDatasetBinding as c, DurableObjectDeletedExport as ct, BindingDevOptions as d, DurableObjectTransferredExport as dt, ConnectTrigger as et, Bindings as f, Exports as ft, DurableObjectBinding as g, ConfigContext as gt, DispatchNamespaceBinding as h, exports as ht, AgentMemoryBinding as i, ScheduledTrigger as it, SendEmailBinding as j, SecretBinding as k, ArtifactsBinding as l, DurableObjectExpectingTransferExport as lt, D1Binding as m, WorkerEntrypointExportOptions as mt, SettingsConfigInput as n, FetchTrigger as nt, AiSearchBinding as o, triggers as ot, BrowserBinding as p, WorkerEntrypointExport as pt, WorkflowBinding as q, defineSettings as r, QueueConsumerTrigger as rt, AiSearchNamespaceBinding as s, DurableObjectCreatedExport as st, SettingsConfigExport as t, EmailTrigger as tt, AssetsBinding as u, DurableObjectRenamedExport as ut, HyperdriveBinding as v, InferEnv as vt, MtlsCertificateBinding as w, KvBinding as x, ImagesBinding$1 as y, InferMainModule as yt, VectorizeBinding as z };
+export { SettingsConfig as $, SecretsStoreSecretBinding as A, VersionMetadataBinding as B, MediaBinding$1 as C, InferMainModule as Ct, R2Binding as D, QueueBinding as E, TypedKvBinding as F, WorkerLoaderBinding as G, VpcServiceBinding as H, TypedPipelineBinding as I, bindings as J, WorkerReference as K, TypedQueueBinding as L, StreamBinding$1 as M, TextBinding as N, RateLimitBinding as O, TypedAiBinding as P, ContainerConfig as Q, UnsafeBinding as R, LogfwdrBinding as S, InferEnv as St, PipelineBinding as T, WebSearchBinding as U, VpcNetworkBinding as V, WorkerBinding as W, WorkerConfigInput as X, WorkerConfigExport as Y, defineWorker as Z, FlagshipBinding as _, ContainerConfigExport as _t, AiBinding as a, ScheduledTrigger as at, JsonBinding as b, ConfigContext as bt, AnalyticsEngineDatasetBinding as c, DurableObjectCreatedExport as ct, BindingDevOptions as d, DurableObjectRenamedExport as dt, WorkerConfig as et, Bindings as f, DurableObjectTransferredExport as ft, DurableObjectBinding as g, exports as gt, DispatchNamespaceBinding as h, WorkerEntrypointExportOptions as ht, AgentMemoryBinding as i, QueueConsumerTrigger as it, SendEmailBinding as j, SecretBinding as k, ArtifactsBinding as l, DurableObjectDeletedExport as lt, D1Binding as m, WorkerEntrypointExport as mt, SettingsConfigInput as n, EmailTrigger as nt, AiSearchBinding as o, Triggers as ot, BrowserBinding as p, Exports as pt, WorkflowBinding as q, defineSettings as r, FetchTrigger as rt, AiSearchNamespaceBinding as s, triggers as st, SettingsConfigExport as t, ConnectTrigger as tt, AssetsBinding as u, DurableObjectExpectingTransferExport as ut, HyperdriveBinding as v, ContainerConfigInput as vt, MtlsCertificateBinding as w, UnwrapConfig as wt, KvBinding as x, InferDurableNamespaces as xt, ImagesBinding$1 as y, defineContainer as yt, VectorizeBinding as z };

package/dist/public.d.mts

@@ -1,2 +1,2 @@
-import { $ as WorkerConfig, A as SecretsStoreSecretBinding, B as VersionMetadataBinding, C as MediaBinding, D as R2Binding, E as QueueBinding, F as TypedKvBinding, G as WorkerLoaderBinding, H as VpcServiceBinding, I as TypedPipelineBinding, J as bindings, K as WorkerReference, L as TypedQueueBinding, M as StreamBinding, N as TextBinding, O as RateLimitBinding, P as TypedAiBinding, Q as SettingsConfig, R as UnsafeBinding, S as LogfwdrBinding, T as PipelineBinding, U as WebSearchBinding, V as VpcNetworkBinding, W as WorkerBinding, X as WorkerConfigInput, Y as WorkerConfigExport, Z as defineWorker, _ as FlagshipBinding, _t as InferDurableNamespaces, a as AiBinding, at as Triggers, b as JsonBinding, bt as UnwrapConfig, c as AnalyticsEngineDatasetBinding, ct as DurableObjectDeletedExport, d as BindingDevOptions, dt as DurableObjectTransferredExport, et as ConnectTrigger, f as Bindings, ft as Exports, g as DurableObjectBinding, gt as ConfigContext, h as DispatchNamespaceBinding, ht as exports, i as AgentMemoryBinding, it as ScheduledTrigger, j as SendEmailBinding, k as SecretBinding, l as ArtifactsBinding, lt as DurableObjectExpectingTransferExport, m as D1Binding, mt as WorkerEntrypointExportOptions, n as SettingsConfigInput, nt as FetchTrigger, o as AiSearchBinding, ot as triggers, p as BrowserBinding, pt as WorkerEntrypointExport, q as WorkflowBinding, r as defineSettings, rt as QueueConsumerTrigger, s as AiSearchNamespaceBinding, st as DurableObjectCreatedExport, t as SettingsConfigExport, tt as EmailTrigger, u as AssetsBinding, ut as DurableObjectRenamedExport, v as HyperdriveBinding, vt as InferEnv, w as MtlsCertificateBinding, x as KvBinding, y as ImagesBinding, yt as InferMainModule, z as VectorizeBinding } from "./public-E85Be_2R.mjs";
-export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, ArtifactsBinding, AssetsBinding, BindingDevOptions, Bindings, BrowserBinding, ConfigContext, ConnectTrigger, D1Binding, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectDeletedExport, DurableObjectExpectingTransferExport, DurableObjectRenamedExport, DurableObjectTransferredExport, EmailTrigger, Exports, FetchTrigger, FlagshipBinding, HyperdriveBinding, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, JsonBinding, KvBinding, LogfwdrBinding, MediaBinding, MtlsCertificateBinding, PipelineBinding, QueueBinding, QueueConsumerTrigger, R2Binding, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, SettingsConfig, SettingsConfigExport, SettingsConfigInput, StreamBinding, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WebSearchBinding, WorkerBinding, WorkerConfig, WorkerConfigExport, WorkerConfigInput, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerLoaderBinding, WorkerReference, WorkflowBinding, bindings, defineSettings, defineWorker, exports, triggers };
+import { $ as SettingsConfig, A as SecretsStoreSecretBinding, B as VersionMetadataBinding, C as MediaBinding, Ct as InferMainModule, D as R2Binding, E as QueueBinding, F as TypedKvBinding, G as WorkerLoaderBinding, H as VpcServiceBinding, I as TypedPipelineBinding, J as bindings, K as WorkerReference, L as TypedQueueBinding, M as StreamBinding, N as TextBinding, O as RateLimitBinding, P as TypedAiBinding, Q as ContainerConfig, R as UnsafeBinding, S as LogfwdrBinding, St as InferEnv, T as PipelineBinding, U as WebSearchBinding, V as VpcNetworkBinding, W as WorkerBinding, X as WorkerConfigInput, Y as WorkerConfigExport, Z as defineWorker, _ as FlagshipBinding, _t as ContainerConfigExport, a as AiBinding, at as ScheduledTrigger, b as JsonBinding, bt as ConfigContext, c as AnalyticsEngineDatasetBinding, ct as DurableObjectCreatedExport, d as BindingDevOptions, dt as DurableObjectRenamedExport, et as WorkerConfig, f as Bindings, ft as DurableObjectTransferredExport, g as DurableObjectBinding, gt as exports, h as DispatchNamespaceBinding, ht as WorkerEntrypointExportOptions, i as AgentMemoryBinding, it as QueueConsumerTrigger, j as SendEmailBinding, k as SecretBinding, l as ArtifactsBinding, lt as DurableObjectDeletedExport, m as D1Binding, mt as WorkerEntrypointExport, n as SettingsConfigInput, nt as EmailTrigger, o as AiSearchBinding, ot as Triggers, p as BrowserBinding, pt as Exports, q as WorkflowBinding, r as defineSettings, rt as FetchTrigger, s as AiSearchNamespaceBinding, st as triggers, t as SettingsConfigExport, tt as ConnectTrigger, u as AssetsBinding, ut as DurableObjectExpectingTransferExport, v as HyperdriveBinding, vt as ContainerConfigInput, w as MtlsCertificateBinding, wt as UnwrapConfig, x as KvBinding, xt as InferDurableNamespaces, y as ImagesBinding, yt as defineContainer, z as VectorizeBinding } from "./public-CxIWEZqM.mjs";
+export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, ArtifactsBinding, AssetsBinding, BindingDevOptions, Bindings, BrowserBinding, ConfigContext, ConnectTrigger, ContainerConfig, ContainerConfigExport, ContainerConfigInput, D1Binding, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectDeletedExport, DurableObjectExpectingTransferExport, DurableObjectRenamedExport, DurableObjectTransferredExport, EmailTrigger, Exports, FetchTrigger, FlagshipBinding, HyperdriveBinding, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, JsonBinding, KvBinding, LogfwdrBinding, MediaBinding, MtlsCertificateBinding, PipelineBinding, QueueBinding, QueueConsumerTrigger, R2Binding, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, SettingsConfig, SettingsConfigExport, SettingsConfigInput, StreamBinding, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WebSearchBinding, WorkerBinding, WorkerConfig, WorkerConfigExport, WorkerConfigInput, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerLoaderBinding, WorkerReference, WorkflowBinding, bindings, defineContainer, defineSettings, defineWorker, exports, triggers };

package/dist/public.mjs

@@ -1,3 +1,3 @@
-import { a as bindings, i as triggers, n as defineWorker, r as exports, t as defineSettings } from "./public-bN7EDGtD.mjs";
+import { a as triggers, i as exports, n as defineWorker, o as bindings, r as defineContainer, t as defineSettings } from "./public-BYCVISMH.mjs";
 
-export { bindings, defineSettings, defineWorker, exports, triggers };
+export { bindings, defineContainer, defineSettings, defineWorker, exports, triggers };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/config",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Definitions and utilities for configuring Cloudflare Workers and related products. This is not yet stable enough for external use — APIs may change without notice.",
   "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/config#readme",
   "bugs": {
@@ -31,13 +31,13 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260908.1",
+    "@cloudflare/workers-types": "^5.20260911.1",
     "ts-dedent": "^2.2.0",
     "tsdown": "0.16.3",
     "typescript": "5.8.3",
     "vitest": "4.1.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.37.0"
+    "@cloudflare/workers-utils": "0.38.1"
   },
   "workers-sdk": {
     "prerelease": true