@cloudflare/config 0.19.0 → 0.21.0

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as Settings, A as TextBinding, B as WorkerBinding, C as QueueBinding, D as SecretsStoreSecretBinding, E as SecretBinding, F as UnsafeBinding, G as ContainerDefinition, H as WorkflowBinding, I as VectorizeBinding, J as defineConfig, K as WorkerDefinition, L as VersionMetadataBinding, M as TypedKvBinding, N as TypedPipelineBinding, O as SendEmailBinding, P as TypedQueueBinding, Q as ContainerConfig, R as VpcNetworkBinding, S as PipelineBinding, St as exports, T as RateLimitBinding, U as bindings, V as WorkerLoaderBinding, W as ConfigContext, X as defineWorker, Y as defineContainer, Z as CloudflareConfig, _ as JsonBinding, _t as Exports, a as AnalyticsEngineDatasetBinding, at as ScheduledTrigger, b as MediaBinding, bt as WorkflowExport, c as BindingDevOptions, ct as InferDurableNamespaces, d as D1Binding, dt as UnwrapConfig, et as WorkerConfig, f as DispatchNamespaceBinding, ft as DurableObjectCreatedExport, g as ImagesBinding, gt as DurableObjectTransferredExport, h as HyperdriveBinding, ht as DurableObjectRenamedExport, i as AiSearchNamespaceBinding, it as QueueConsumerTrigger, j as TypedAiBinding, k as StreamBinding, l as Bindings, lt as InferEnv, m as FlagshipBinding, mt as DurableObjectExpectingTransferExport, n as AiBinding, nt as EmailTrigger, o as ArtifactsBinding, ot as Triggers, p as DurableObjectBinding, pt as DurableObjectDeletedExport, q as WorkerReference, r as AiSearchBinding, rt as FetchTrigger, s as AssetsBinding, st as triggers, t as AgentMemoryBinding, tt as ConnectTrigger, u as BrowserBinding, ut as InferMainModule, v as KvBinding, vt as WorkerEntrypointExport, w as R2Binding, x as MtlsCertificateBinding, xt as WorkflowExportOptions, y as LogfwdrBinding, yt as WorkerEntrypointExportOptions, z as VpcServiceBinding } from "./public-X5O6jFLp.mjs";
+import { $ as Settings, A as TextBinding, B as WorkerBinding, C as QueueBinding, D as SecretsStoreSecretBinding, E as SecretBinding, F as UnsafeBinding, G as ContainerDefinition, H as WorkflowBinding, I as VectorizeBinding, J as defineConfig, K as WorkerDefinition, L as VersionMetadataBinding, M as TypedKvBinding, N as TypedPipelineBinding, O as SendEmailBinding, P as TypedQueueBinding, Q as ContainerConfig, R as VpcNetworkBinding, S as PipelineBinding, St as exports, T as RateLimitBinding, U as bindings, V as WorkerLoaderBinding, W as ConfigContext, X as defineWorker, Y as defineContainer, Z as CloudflareConfig, _ as JsonBinding, _t as Exports, a as AnalyticsEngineDatasetBinding, at as ScheduledTrigger, b as MediaBinding, bt as WorkflowExport, c as BindingDevOptions, ct as InferDurableNamespaces, d as D1Binding, dt as UnwrapConfig, et as WorkerConfig, f as DispatchNamespaceBinding, ft as DurableObjectCreatedExport, g as ImagesBinding, gt as DurableObjectTransferredExport, h as HyperdriveBinding, ht as DurableObjectRenamedExport, i as AiSearchNamespaceBinding, it as QueueConsumerTrigger, j as TypedAiBinding, k as StreamBinding, l as Bindings, lt as InferEnv, m as FlagshipBinding, mt as DurableObjectExpectingTransferExport, n as AiBinding, nt as EmailTrigger, o as ArtifactsBinding, ot as Triggers, p as DurableObjectBinding, pt as DurableObjectDeletedExport, q as WorkerReference, r as AiSearchBinding, rt as FetchTrigger, s as AssetsBinding, st as triggers, t as AgentMemoryBinding, tt as ConnectTrigger, u as BrowserBinding, ut as InferMainModule, v as KvBinding, vt as WorkerEntrypointExport, w as R2Binding, x as MtlsCertificateBinding, xt as WorkflowExportOptions, y as LogfwdrBinding, yt as WorkerEntrypointExportOptions, z as VpcServiceBinding } from "./public-u2AoxvhN.mjs";
 import * as z from "zod";
 import { RawConfig } from "@cloudflare/workers-utils";
 
@@ -32,6 +32,12 @@ declare const WorkerBindingSchema: z.ZodObject<{
     remote: z.ZodOptional<z.ZodBoolean>;
   }, z.core.$strict>>;
 }, z.core.$strict>;
+declare const WorkflowBindingSchema: z.ZodObject<{
+  type: z.ZodLiteral<"workflow">;
+  name: z.ZodString;
+  worker: z.ZodString;
+  exportName: z.ZodString;
+}, z.core.$strict>;
 declare const D1BindingSchema: z.ZodObject<{
   type: z.ZodLiteral<"d1">;
   name: z.ZodOptional<z.ZodString>;
@@ -299,6 +305,11 @@ declare const KnownBindingSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodObject<{
   type: z.ZodLiteral<"worker-loader">;
+}, z.core.$strict>, z.ZodObject<{
+  type: z.ZodLiteral<"workflow">;
+  name: z.ZodString;
+  worker: z.ZodString;
+  exportName: z.ZodString;
 }, z.core.$strict>], "type">;
 declare const UnsafeBindingSchema: z.ZodObject<{
   type: z.ZodTemplateLiteral<`unsafe:${string}`>;
@@ -323,6 +334,14 @@ declare function validateSingletonBindings(env: Record<string, {
 declare const InputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
   name: z.ZodString;
   unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
   observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     logs: z.ZodOptional<z.ZodObject<{
@@ -353,14 +372,6 @@ declare const InputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
     default: "default";
     regional: "regional";
   }>>;
-  ssh: z.ZodOptional<z.ZodObject<{
-    enabled: z.ZodBoolean;
-    port: z.ZodOptional<z.ZodNumber>;
-  }, z.core.$strict>>;
-  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
-    publicKey: z.ZodString;
-  }, z.core.$strict>>>;
   constraints: z.ZodOptional<z.ZodObject<{
     regions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
       ENAM: "ENAM";
@@ -397,6 +408,14 @@ declare const InputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
 }, z.core.$strict>, z.ZodObject<{
   name: z.ZodString;
   unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
   schedulingPolicy: z.ZodLiteral<"durable-object">;
   observability: z.ZodOptional<z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
@@ -420,6 +439,14 @@ type ParsedInputContainerConfig = z.output<typeof InputContainerSchema>;
 declare const OutputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
   name: z.ZodString;
   unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
   observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     logs: z.ZodOptional<z.ZodObject<{
@@ -450,14 +477,6 @@ declare const OutputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
     default: "default";
     regional: "regional";
   }>>;
-  ssh: z.ZodOptional<z.ZodObject<{
-    enabled: z.ZodBoolean;
-    port: z.ZodOptional<z.ZodNumber>;
-  }, z.core.$strict>>;
-  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
-    publicKey: z.ZodString;
-  }, z.core.$strict>>>;
   constraints: z.ZodOptional<z.ZodObject<{
     regions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
       ENAM: "ENAM";
@@ -492,6 +511,14 @@ declare const OutputContainerSchema: z.ZodUnion<readonly [z.ZodObject<{
 }, z.core.$strict>, z.ZodObject<{
   name: z.ZodString;
   unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  ssh: z.ZodOptional<z.ZodObject<{
+    enabled: z.ZodBoolean;
+    port: z.ZodOptional<z.ZodNumber>;
+  }, z.core.$strict>>;
+  authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    publicKey: z.ZodString;
+  }, z.core.$strict>>>;
   schedulingPolicy: z.ZodLiteral<"durable-object">;
   observability: z.ZodOptional<z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
@@ -981,6 +1008,14 @@ declare const InputConfigSchema: z.ZodObject<{
   containers: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
     name: z.ZodString;
     unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ssh: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodBoolean;
+      port: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      name: z.ZodString;
+      publicKey: z.ZodString;
+    }, z.core.$strict>>>;
     observability: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
       enabled: z.ZodOptional<z.ZodBoolean>;
       logs: z.ZodOptional<z.ZodObject<{
@@ -1011,14 +1046,6 @@ declare const InputConfigSchema: z.ZodObject<{
       default: "default";
       regional: "regional";
     }>>;
-    ssh: z.ZodOptional<z.ZodObject<{
-      enabled: z.ZodBoolean;
-      port: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strict>>;
-    authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
-      name: z.ZodString;
-      publicKey: z.ZodString;
-    }, z.core.$strict>>>;
     constraints: z.ZodOptional<z.ZodObject<{
       regions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         ENAM: "ENAM";
@@ -1055,6 +1082,14 @@ declare const InputConfigSchema: z.ZodObject<{
   }, z.core.$strict>, z.ZodObject<{
     name: z.ZodString;
     unsafe: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ssh: z.ZodOptional<z.ZodObject<{
+      enabled: z.ZodBoolean;
+      port: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    authorizedKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      name: z.ZodString;
+      publicKey: z.ZodString;
+    }, z.core.$strict>>>;
     schedulingPolicy: z.ZodLiteral<"durable-object">;
     observability: z.ZodOptional<z.ZodObject<{
       enabled: z.ZodOptional<z.ZodBoolean>;
@@ -1311,10 +1346,8 @@ interface GenerateTypesOptions {
    * Package name used in the inline `import("<packageName>")` type expressions
    * for `InferEnv`/`InferDurableNamespaces`/`InferMainModule`/`UnwrapConfig`.
    *
-   * Defaults to `"@cloudflare/config"`. Integrations that bundle
-   * `@cloudflare/config` (e.g. `@cloudflare/vite-plugin`) should pass their
-   * own re-export path here so users don't need to depend on
-   * `@cloudflare/config` directly.
+   * Defaults to `"@cloudflare/config"`. Integrations should pass the public
+   * `cf/config` package used to author `cloudflare.config.ts` files.
    */
   packageName?: string;
 }
@@ -1425,4 +1458,4 @@ declare function loadAndParseConfig(configPath: string, ctx: ConfigContext): Pro
 /** Load and parse only account settings from the default export. */
 declare function loadAndParseConfigSettings(configPath: string, ctx: ConfigContext): Promise<LoadAndParseConfigSettingsResult>;
 //#endregion
-export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, AnalyticsEngineDatasetBindingSchema, ArtifactsBinding, AssetsBinding, AssetsSchema, BindingDevOptions, BindingSchema, Bindings, BrowserBinding, BrowserBindingSchema, CloudflareConfig, ConfigContext, type ConfigParseResult, type ConfigSettingsParseResult, ConnectTrigger, ContainerConfig, ContainerDefinition, D1Binding, D1BindingSchema, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectCreatedExportSchema, DurableObjectDeletedExport, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExport, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExport, DurableObjectRenamedExportSchema, DurableObjectTransferredExport, DurableObjectTransferredExportSchema, EmailTrigger, ExportSchema, Exports, FetchTrigger, FlagshipBinding, FlagshipBindingSchema, HyperdriveBinding, HyperdriveBindingSchema, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, InputConfigSchema, InputContainerSchema, InputSettingsSchema, type InputWorkerConfig, InputWorkerSchema, JsonBinding, KVBindingSchema, KnownBindingSchema, KvBinding, type LoadAndParseConfigResult, type LoadAndParseConfigSettingsResult, type LoadConfigResult, LogfwdrBinding, MediaBinding, type ModuleType, ModuleTypeSchema, MtlsCertificateBinding, OutputContainerSchema, OutputRootConfigSchema, OutputWorkerSchema, type ParsedInputConfig, type ParsedInputContainerConfig, type ParsedInputSettingsConfig, type ParsedInputWorkerConfig, type ParsedOutputContainerConfig, type ParsedOutputRootConfig, type ParsedOutputWorkerConfig, PipelineBinding, QueueBinding, QueueBindingSchema, QueueConsumerTrigger, R2Binding, R2BindingSchema, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, Settings, StreamBinding, TailConsumerSchema, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnsafeBindingSchema, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WorkerBinding, WorkerBindingSchema, WorkerConfig, WorkerDefinition, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerEntrypointExportSchema, WorkerLoaderBinding, WorkerReference, WorkflowBinding, WorkflowExport, WorkflowExportOptions, WorkflowExportSchema, bindings, convertToWranglerConfig, defineConfig, defineContainer, defineWorker, exports, generateTypes, loadAndParseConfig, loadAndParseConfigSettings, loadConfig, registerConfigHooks, resolveAndParseConfig, resolveAndParseConfigSettings, triggers, validateSingletonBindings };
+export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, AnalyticsEngineDatasetBindingSchema, ArtifactsBinding, AssetsBinding, AssetsSchema, BindingDevOptions, BindingSchema, Bindings, BrowserBinding, BrowserBindingSchema, CloudflareConfig, ConfigContext, type ConfigParseResult, type ConfigSettingsParseResult, ConnectTrigger, ContainerConfig, ContainerDefinition, D1Binding, D1BindingSchema, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectCreatedExportSchema, DurableObjectDeletedExport, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExport, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExport, DurableObjectRenamedExportSchema, DurableObjectTransferredExport, DurableObjectTransferredExportSchema, EmailTrigger, ExportSchema, Exports, FetchTrigger, FlagshipBinding, FlagshipBindingSchema, HyperdriveBinding, HyperdriveBindingSchema, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, InputConfigSchema, InputContainerSchema, InputSettingsSchema, type InputWorkerConfig, InputWorkerSchema, JsonBinding, KVBindingSchema, KnownBindingSchema, KvBinding, type LoadAndParseConfigResult, type LoadAndParseConfigSettingsResult, type LoadConfigResult, LogfwdrBinding, MediaBinding, type ModuleType, ModuleTypeSchema, MtlsCertificateBinding, OutputContainerSchema, OutputRootConfigSchema, OutputWorkerSchema, type ParsedInputConfig, type ParsedInputContainerConfig, type ParsedInputSettingsConfig, type ParsedInputWorkerConfig, type ParsedOutputContainerConfig, type ParsedOutputRootConfig, type ParsedOutputWorkerConfig, PipelineBinding, QueueBinding, QueueBindingSchema, QueueConsumerTrigger, R2Binding, R2BindingSchema, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, Settings, StreamBinding, TailConsumerSchema, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnsafeBindingSchema, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WorkerBinding, WorkerBindingSchema, WorkerConfig, WorkerDefinition, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerEntrypointExportSchema, WorkerLoaderBinding, WorkerReference, WorkflowBinding, WorkflowBindingSchema, WorkflowExport, WorkflowExportOptions, WorkflowExportSchema, bindings, convertToWranglerConfig, defineConfig, defineContainer, defineWorker, exports, generateTypes, loadAndParseConfig, loadAndParseConfigSettings, loadConfig, registerConfigHooks, resolveAndParseConfig, resolveAndParseConfigSettings, triggers, validateSingletonBindings };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as triggers, i as exports$1, n as defineContainer, o as bindings, r as defineWorker, t as defineConfig } from "./public-CvUXcSEm.mjs";
+import { a as triggers, i as exports$1, n as defineContainer, o as bindings, r as defineWorker, t as defineConfig } from "./public-srUjWEOA.mjs";
 import * as nodeModule from "node:module";
 import { createRequire } from "node:module";
 import * as z from "zod";
@@ -39,6 +39,12 @@ const WorkerBindingSchema = z.strictObject({
 	props: z.record(z.string(), z.unknown()).optional(),
 	dev: RemoteBindingDevSchema.optional()
 });
+const WorkflowBindingSchema = z.strictObject({
+	type: z.literal("workflow"),
+	name: z.string(),
+	worker: z.string(),
+	exportName: z.string()
+});
 const D1BindingSchema = z.strictObject({
 	type: z.literal("d1"),
 	name: z.string().optional(),
@@ -203,7 +209,8 @@ const KnownBindingSchema = z.discriminatedUnion("type", [
 		return value.tunnelId !== void 0 && value.networkId !== void 0 ? `"vpc-network" bindings must specify exactly one of "tunnelId" or "networkId", not both` : `"vpc-network" bindings must specify either "tunnelId" or "networkId"`;
 	} }),
 	WorkerBindingSchema,
-	z.strictObject({ type: z.literal("worker-loader") })
+	z.strictObject({ type: z.literal("worker-loader") }),
+	WorkflowBindingSchema
 ]);
 const UnsafeBindingSchema = z.looseObject({
 	type: z.templateLiteral(["unsafe:", z.string().min(1)]),
@@ -326,7 +333,15 @@ const ContainerObservabilityBaseSchema = z.strictObject({
 const StandardContainerObservabilitySchema = z.union([ContainerObservabilityBaseSchema.extend({ targetInstancePercentage: z.number().min(0).max(100).optional() }), ContainerObservabilityBaseSchema.extend({ targetInstanceCount: z.number().int().nonnegative().optional() })]);
 const BaseContainerSchema = z.strictObject({
 	name: z.string().min(1),
-	unsafe: z.record(z.string(), z.unknown()).optional()
+	unsafe: z.record(z.string(), z.unknown()).optional(),
+	ssh: z.strictObject({
+		enabled: z.boolean(),
+		port: z.number().int().min(1).max(65535).optional()
+	}).optional(),
+	authorizedKeys: z.array(z.strictObject({
+		name: z.string(),
+		publicKey: z.string()
+	})).optional()
 });
 const StandardContainerBaseSchema = BaseContainerSchema.extend({
 	observability: StandardContainerObservabilitySchema.optional(),
@@ -344,14 +359,6 @@ const StandardContainerBaseSchema = BaseContainerSchema.extend({
 		diskMb: z.number().nonnegative().optional()
 	})]).optional(),
 	schedulingPolicy: z.enum(["default", "regional"]).optional(),
-	ssh: z.strictObject({
-		enabled: z.boolean(),
-		port: z.number().int().min(1).max(65535).optional()
-	}).optional(),
-	authorizedKeys: z.array(z.strictObject({
-		name: z.string(),
-		publicKey: z.string()
-	})).optional(),
 	constraints: z.strictObject({
 		regions: z.array(z.enum([
 			"ENAM",
@@ -818,6 +825,11 @@ function convertContainer(container) {
 	const converted = { name: container.name };
 	if (container.observability !== void 0) converted.observability = convertContainerObservability(container.observability);
 	if (container.unsafe !== void 0) converted.unsafe = container.unsafe;
+	if (container.ssh !== void 0) converted.ssh = container.ssh;
+	if (container.authorizedKeys !== void 0) converted.authorized_keys = container.authorizedKeys.map(({ name, publicKey }) => ({
+		name,
+		public_key: publicKey
+	}));
 	if (container.schedulingPolicy === "durable-object") {
 		converted.scheduling_policy = "durable_object";
 		if (container.images !== void 0) converted.images = Object.fromEntries(Object.entries(container.images).map(([name, image]) => [name, convertDurableObjectContainerImage(image)]));
@@ -838,11 +850,6 @@ function convertContainer(container) {
 		converted.instance_type = instanceType;
 	}
 	if (container.schedulingPolicy !== void 0) converted.scheduling_policy = container.schedulingPolicy;
-	if (container.ssh !== void 0) converted.ssh = container.ssh;
-	if (container.authorizedKeys !== void 0) converted.authorized_keys = container.authorizedKeys.map(({ name, publicKey }) => ({
-		name,
-		public_key: publicKey
-	}));
 	if (container.constraints !== void 0) converted.constraints = container.constraints;
 	if (container.rollout !== void 0) {
 		if (container.rollout.kind !== void 0) converted.rollout_kind = ROLLOUT_KIND_MAP[container.rollout.kind];
@@ -1206,6 +1213,14 @@ function convertBindingsAndAssets(config, result) {
 			case "worker-loader":
 				workerLoaders.push({ binding: name });
 				break;
+			case "workflow":
+				workflows.push({
+					binding: name,
+					name: binding.name,
+					class_name: binding.exportName,
+					script_name: binding.worker
+				});
+				break;
 		}
 	}
 	if (kvNamespaces.length) result.kv_namespaces = kvNamespaces;
@@ -1737,4 +1752,4 @@ async function loadAndParseConfigSettings(configPath, ctx) {
 }
 
 //#endregion
-export { AnalyticsEngineDatasetBindingSchema, AssetsSchema, BindingSchema, BrowserBindingSchema, D1BindingSchema, DurableObjectCreatedExportSchema, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExportSchema, DurableObjectTransferredExportSchema, ExportSchema, FlagshipBindingSchema, HyperdriveBindingSchema, InputConfigSchema, InputContainerSchema, InputSettingsSchema, InputWorkerSchema, KVBindingSchema, KnownBindingSchema, ModuleTypeSchema, OutputContainerSchema, OutputRootConfigSchema, OutputWorkerSchema, QueueBindingSchema, R2BindingSchema, TailConsumerSchema, UnsafeBindingSchema, WorkerBindingSchema, WorkerEntrypointExportSchema, WorkflowExportSchema, bindings, convertToWranglerConfig, defineConfig, defineContainer, defineWorker, exports$1 as exports, generateTypes, loadAndParseConfig, loadAndParseConfigSettings, loadConfig, registerConfigHooks, resolveAndParseConfig, resolveAndParseConfigSettings, triggers, validateSingletonBindings };
+export { AnalyticsEngineDatasetBindingSchema, AssetsSchema, BindingSchema, BrowserBindingSchema, D1BindingSchema, DurableObjectCreatedExportSchema, DurableObjectDeletedExportSchema, DurableObjectExpectingTransferExportSchema, DurableObjectRenamedExportSchema, DurableObjectTransferredExportSchema, ExportSchema, FlagshipBindingSchema, HyperdriveBindingSchema, InputConfigSchema, InputContainerSchema, InputSettingsSchema, InputWorkerSchema, KVBindingSchema, KnownBindingSchema, ModuleTypeSchema, OutputContainerSchema, OutputRootConfigSchema, OutputWorkerSchema, QueueBindingSchema, R2BindingSchema, TailConsumerSchema, UnsafeBindingSchema, WorkerBindingSchema, WorkerEntrypointExportSchema, WorkflowBindingSchema, WorkflowExportSchema, bindings, convertToWranglerConfig, defineConfig, defineContainer, defineWorker, exports$1 as exports, generateTypes, loadAndParseConfig, loadAndParseConfigSettings, loadConfig, registerConfigHooks, resolveAndParseConfig, resolveAndParseConfigSettings, triggers, validateSingletonBindings };

package/dist/{public-CvUXcSEm.mjs → public-srUjWEOA.mjs}

@@ -123,7 +123,11 @@ const bindings = {
 		type: "worker",
 		...options
 	}),
-	workerLoader: () => ({ type: "worker-loader" })
+	workerLoader: () => ({ type: "worker-loader" }),
+	workflow: (options) => ({
+		type: "workflow",
+		...options
+	})
 };
 
 //#endregion

package/dist/{public-X5O6jFLp.d.mts → public-u2AoxvhN.d.mts}

@@ -610,7 +610,7 @@ interface CloudflareConfig extends Settings {
 /**
  * Union of all binding definitions accepted in `env`.
  */
-type Binding = AgentMemoryBinding | AiBinding | AiSearchBinding | AiSearchNamespaceBinding | AnalyticsEngineDatasetBinding | ArtifactsBinding | AssetsBinding | BrowserBinding | D1Binding | DispatchNamespaceBinding | DurableObjectBinding | FlagshipBinding | HyperdriveBinding | ImagesBinding$1 | JsonBinding | KvBinding | LogfwdrBinding | MediaBinding$1 | MtlsCertificateBinding | PipelineBinding | QueueBinding | R2Binding | RateLimitBinding | SecretBinding | SecretsStoreSecretBinding | SendEmailBinding | StreamBinding$1 | TextBinding | UnsafeBinding | VectorizeBinding | VersionMetadataBinding | VpcNetworkBinding | VpcServiceBinding | WorkerBinding | WorkerLoaderBinding;
+type Binding = AgentMemoryBinding | AiBinding | AiSearchBinding | AiSearchNamespaceBinding | AnalyticsEngineDatasetBinding | ArtifactsBinding | AssetsBinding | BrowserBinding | D1Binding | DispatchNamespaceBinding | DurableObjectBinding | FlagshipBinding | HyperdriveBinding | ImagesBinding$1 | JsonBinding | KvBinding | LogfwdrBinding | MediaBinding$1 | MtlsCertificateBinding | PipelineBinding | QueueBinding | R2Binding | RateLimitBinding | SecretBinding | SecretsStoreSecretBinding | SendEmailBinding | StreamBinding$1 | TextBinding | UnsafeBinding | VectorizeBinding | VersionMetadataBinding | VpcNetworkBinding | VpcServiceBinding | WorkerBinding | WorkerLoaderBinding | WorkflowBinding;
 /**
  * Union of all trigger definitions accepted in `triggers`.
  */
@@ -677,6 +677,26 @@ interface BaseContainerConfig {
    * @hidden
    */
   unsafe?: Record<string, unknown>;
+  ssh?: {
+    /**
+     * If enabled, users with write access to the Container application can
+     * connect to it over SSH.
+     *
+     * @default true
+     */
+    enabled: boolean;
+    /**
+     * Port that the SSH service is running on.
+     *
+     * @default 22
+     */
+    port?: number;
+  };
+  /** SSH public keys to put in the Container's authorized_keys file. */
+  authorizedKeys?: Array<{
+    name: string;
+    publicKey: string;
+  }>;
 }
 /** A Container application managed with a standard scheduling policy. */
 interface StandardContainerConfig extends BaseContainerConfig {
@@ -720,26 +740,6 @@ interface StandardContainerConfig extends BaseContainerConfig {
    * @default "default"
    */
   schedulingPolicy?: "default" | "regional";
-  ssh?: {
-    /**
-     * If enabled, users with write access to the Container application can
-     * connect to it over SSH.
-     *
-     * @default false
-     */
-    enabled: boolean;
-    /**
-     * Port that the SSH service is running on.
-     *
-     * @default 22
-     */
-    port?: number;
-  };
-  /** SSH public keys to put in the Container's authorized_keys file. */
-  authorizedKeys?: Array<{
-    name: string;
-    publicKey: string;
-  }>;
   /** Scheduling constraints for Container placement. */
   constraints?: {
     /** Limit Container placement to specific geographic regions. */
@@ -1086,6 +1086,11 @@ interface ConfigContext {
  * another context before they are used.
  */
 type ConfigInput<T$1> = T$1 | Promise<T$1> | ((ctx: ConfigContext) => T$1 | Promise<T$1>);
+/** Recursively apply declared config properties without expanding open records. */
+type ContextualProperties<TInput extends object, TConfig> = TInput extends readonly unknown[] ? TConfig extends readonly (infer TElement)[] ? { [K in keyof TInput]: ContextualConfig<TInput[K], TElement> } : TConfig : string extends keyof TConfig ? TConfig : { [K in keyof TConfig]: K extends keyof TInput ? ContextualConfig<TInput[K], TConfig[K]> : TConfig[K] };
+type ContextualConfig<TInput, TConfig> = TInput extends Promise<infer TValue> ? Promise<ContextualConfig<TValue, TConfig>> : TInput extends ((ctx: ConfigContext) => infer TResult) ? (ctx: ConfigContext) => ContextualConfig<TResult, TConfig> : TConfig extends unknown ? TInput extends TConfig ? TInput & (TInput extends object ? ContextualProperties<TInput, TConfig> : TConfig) : never : never;
+/** Create a type-safe identity helper for a configuration value or factory. */
+
 type ContainerDefinition<T$1 extends ContainerConfig = ContainerConfig> = ConfigInput<T$1>;
 type WorkerDefinition<T$1 extends WorkerConfig = WorkerConfig> = ConfigInput<T$1>;
 /** A Worker name, value, promise, or context-aware factory. */
@@ -1105,7 +1110,7 @@ type WorkerReference = string | WorkerDefinition;
  * });
  * ```
  */
-declare const defineConfig: <const TInput extends ConfigInput<CloudflareConfig>>(config: TInput) => TInput;
+declare const defineConfig: <const TInput extends ConfigInput<CloudflareConfig>>(config: TInput & ContextualConfig<TInput, CloudflareConfig>) => TInput;
 /**
  * Define a Container.
  *
@@ -1119,7 +1124,7 @@ declare const defineConfig: <const TInput extends ConfigInput<CloudflareConfig>>
  * });
  * ```
  */
-declare const defineContainer: <const TInput extends ConfigInput<ContainerConfig>>(config: TInput) => TInput;
+declare const defineContainer: <const TInput extends ConfigInput<ContainerConfig>>(config: TInput & ContextualConfig<TInput, ContainerConfig>) => TInput;
 /**
  * Define a Worker.
  *
@@ -1133,7 +1138,7 @@ declare const defineContainer: <const TInput extends ConfigInput<ContainerConfig
  * });
  * ```
  */
-declare const defineWorker: <const TInput extends ConfigInput<WorkerConfig>>(config: TInput) => TInput;
+declare const defineWorker: <const TInput extends ConfigInput<WorkerConfig>>(config: TInput & ContextualConfig<TInput, WorkerConfig>) => TInput;
 //#endregion
 //#region src/utils.d.ts
 /**
@@ -1647,15 +1652,17 @@ interface WorkerLoaderBinding {
   type: "worker-loader";
 }
 interface WorkflowBindingOptions<TWorker$1 extends WorkerReference = WorkerReference, TExportName$1 extends WorkflowExportName<TWorker$1> = WorkflowExportName<TWorker$1>> {
+  /** The name of the Workflow. */
+  name: string;
   /** The name or config of the Worker that defines the Workflow. */
   worker: TWorker$1;
   /** The exported class name of the Workflow. */
   exportName: TExportName$1;
 }
 /**
- * Binding to a Workflow. `worker` is the name or config of the Worker that
- * defines the Workflow; `exportName` is the exported `WorkflowEntrypoint`
- * class name.
+ * Binding to a Workflow. `name` identifies the Workflow, `worker` is the name
+ * or config of the Worker that defines it, and `exportName` is the exported
+ * `WorkflowEntrypoint` class name.
  */
 interface WorkflowBinding<TWorker$1 extends WorkerReference = WorkerReference, TExportName$1 extends WorkflowExportName<TWorker$1> = WorkflowExportName<TWorker$1>> extends WorkflowBindingOptions<TWorker$1, TExportName$1> {
   type: "workflow";
@@ -1825,6 +1832,12 @@ interface Bindings {
   worker<TWorker$1 extends WorkerReference, TExportName$1 extends WorkerEntrypointExportName<TWorker$1> | undefined = undefined>(options: WorkerBindingOptions<TWorker$1, TExportName$1>): WorkerBinding<TWorker$1, NoInfer<TExportName$1>>;
   /** Binding to a Worker Loader. */
   workerLoader(): WorkerLoaderBinding;
+  /**
+   * Create a Workflow binding.
+   * `worker` may be a Worker config reference or a Worker name.
+   * `exportName` must be a valid `WorkflowEntrypoint` export for the given Worker.
+   */
+  workflow<TWorker$1 extends WorkerReference, TExportName$1 extends WorkflowExportName<TWorker$1>>(options: WorkflowBindingOptions<TWorker$1, TExportName$1>): WorkflowBinding<TWorker$1, NoInfer<TExportName$1>>;
 }
 declare const bindings: Bindings;
 //#endregion

package/dist/public.d.mts

@@ -1,2 +1,2 @@
-import { $ as Settings, A as TextBinding, B as WorkerBinding, C as QueueBinding, D as SecretsStoreSecretBinding, E as SecretBinding, F as UnsafeBinding, G as ContainerDefinition, H as WorkflowBinding, I as VectorizeBinding, J as defineConfig, K as WorkerDefinition, L as VersionMetadataBinding, M as TypedKvBinding, N as TypedPipelineBinding, O as SendEmailBinding, P as TypedQueueBinding, Q as ContainerConfig, R as VpcNetworkBinding, S as PipelineBinding, St as exports, T as RateLimitBinding, U as bindings, V as WorkerLoaderBinding, W as ConfigContext, X as defineWorker, Y as defineContainer, Z as CloudflareConfig, _ as JsonBinding, _t as Exports, a as AnalyticsEngineDatasetBinding, at as ScheduledTrigger, b as MediaBinding, bt as WorkflowExport, c as BindingDevOptions, ct as InferDurableNamespaces, d as D1Binding, dt as UnwrapConfig, et as WorkerConfig, f as DispatchNamespaceBinding, ft as DurableObjectCreatedExport, g as ImagesBinding, gt as DurableObjectTransferredExport, h as HyperdriveBinding, ht as DurableObjectRenamedExport, i as AiSearchNamespaceBinding, it as QueueConsumerTrigger, j as TypedAiBinding, k as StreamBinding, l as Bindings, lt as InferEnv, m as FlagshipBinding, mt as DurableObjectExpectingTransferExport, n as AiBinding, nt as EmailTrigger, o as ArtifactsBinding, ot as Triggers, p as DurableObjectBinding, pt as DurableObjectDeletedExport, q as WorkerReference, r as AiSearchBinding, rt as FetchTrigger, s as AssetsBinding, st as triggers, t as AgentMemoryBinding, tt as ConnectTrigger, u as BrowserBinding, ut as InferMainModule, v as KvBinding, vt as WorkerEntrypointExport, w as R2Binding, x as MtlsCertificateBinding, xt as WorkflowExportOptions, y as LogfwdrBinding, yt as WorkerEntrypointExportOptions, z as VpcServiceBinding } from "./public-X5O6jFLp.mjs";
+import { $ as Settings, A as TextBinding, B as WorkerBinding, C as QueueBinding, D as SecretsStoreSecretBinding, E as SecretBinding, F as UnsafeBinding, G as ContainerDefinition, H as WorkflowBinding, I as VectorizeBinding, J as defineConfig, K as WorkerDefinition, L as VersionMetadataBinding, M as TypedKvBinding, N as TypedPipelineBinding, O as SendEmailBinding, P as TypedQueueBinding, Q as ContainerConfig, R as VpcNetworkBinding, S as PipelineBinding, St as exports, T as RateLimitBinding, U as bindings, V as WorkerLoaderBinding, W as ConfigContext, X as defineWorker, Y as defineContainer, Z as CloudflareConfig, _ as JsonBinding, _t as Exports, a as AnalyticsEngineDatasetBinding, at as ScheduledTrigger, b as MediaBinding, bt as WorkflowExport, c as BindingDevOptions, ct as InferDurableNamespaces, d as D1Binding, dt as UnwrapConfig, et as WorkerConfig, f as DispatchNamespaceBinding, ft as DurableObjectCreatedExport, g as ImagesBinding, gt as DurableObjectTransferredExport, h as HyperdriveBinding, ht as DurableObjectRenamedExport, i as AiSearchNamespaceBinding, it as QueueConsumerTrigger, j as TypedAiBinding, k as StreamBinding, l as Bindings, lt as InferEnv, m as FlagshipBinding, mt as DurableObjectExpectingTransferExport, n as AiBinding, nt as EmailTrigger, o as ArtifactsBinding, ot as Triggers, p as DurableObjectBinding, pt as DurableObjectDeletedExport, q as WorkerReference, r as AiSearchBinding, rt as FetchTrigger, s as AssetsBinding, st as triggers, t as AgentMemoryBinding, tt as ConnectTrigger, u as BrowserBinding, ut as InferMainModule, v as KvBinding, vt as WorkerEntrypointExport, w as R2Binding, x as MtlsCertificateBinding, xt as WorkflowExportOptions, y as LogfwdrBinding, yt as WorkerEntrypointExportOptions, z as VpcServiceBinding } from "./public-u2AoxvhN.mjs";
 export { AgentMemoryBinding, AiBinding, AiSearchBinding, AiSearchNamespaceBinding, AnalyticsEngineDatasetBinding, ArtifactsBinding, AssetsBinding, BindingDevOptions, Bindings, BrowserBinding, CloudflareConfig, ConfigContext, ConnectTrigger, ContainerConfig, ContainerDefinition, D1Binding, DispatchNamespaceBinding, DurableObjectBinding, DurableObjectCreatedExport, DurableObjectDeletedExport, DurableObjectExpectingTransferExport, DurableObjectRenamedExport, DurableObjectTransferredExport, EmailTrigger, Exports, FetchTrigger, FlagshipBinding, HyperdriveBinding, ImagesBinding, InferDurableNamespaces, InferEnv, InferMainModule, JsonBinding, KvBinding, LogfwdrBinding, MediaBinding, MtlsCertificateBinding, PipelineBinding, QueueBinding, QueueConsumerTrigger, R2Binding, RateLimitBinding, ScheduledTrigger, SecretBinding, SecretsStoreSecretBinding, SendEmailBinding, Settings, StreamBinding, TextBinding, Triggers, TypedAiBinding, TypedKvBinding, TypedPipelineBinding, TypedQueueBinding, UnsafeBinding, UnwrapConfig, VectorizeBinding, VersionMetadataBinding, VpcNetworkBinding, VpcServiceBinding, WorkerBinding, WorkerConfig, WorkerDefinition, WorkerEntrypointExport, WorkerEntrypointExportOptions, WorkerLoaderBinding, WorkerReference, WorkflowBinding, WorkflowExport, WorkflowExportOptions, bindings, defineConfig, defineContainer, defineWorker, exports, triggers };

package/dist/public.mjs

@@ -1,3 +1,3 @@
-import { a as triggers, i as exports, n as defineContainer, o as bindings, r as defineWorker, t as defineConfig } from "./public-CvUXcSEm.mjs";
+import { a as triggers, i as exports, n as defineContainer, o as bindings, r as defineWorker, t as defineConfig } from "./public-srUjWEOA.mjs";
 
 export { bindings, defineConfig, defineContainer, defineWorker, exports, triggers };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/config",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "description": "Definitions and utilities for configuring Cloudflare Workers and related products. This is not yet stable enough for external use — APIs may change without notice.",
   "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/config#readme",
   "bugs": {
@@ -31,7 +31,7 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^5.20260925.1",
+    "@cloudflare/workers-types": "^5.20260926.1",
     "ts-dedent": "^2.2.0",
     "tsdown": "0.16.3",
     "typescript": "5.8.3",