alchemy 0.77.5 → 0.78.0

package/src/cloudflare/compatibility-date.gen.ts

@@ -4,4 +4,4 @@
 /**
  * The default Cloudflare Workers compatibility date, set based on the latest workerd release at the time of build.
  */
-export const DEFAULT_COMPATIBILITY_DATE = "2025-11-11";
+export const DEFAULT_COMPATIBILITY_DATE = "2025-11-19";

package/src/cloudflare/container.ts

@@ -221,6 +221,11 @@ export async function Container<T>(
       ...props,
       name: `cloudflare-dev/${name}`, // prefix used by Miniflare
       tag,
+      build: props.build ?? {
+        dockerfile: "Dockerfile",
+        platform: "linux/amd64",
+        context: process.cwd(),
+      },
     } as ImageProps);
 
     return {
@@ -240,7 +245,11 @@ export async function Container<T>(
           platform: props.build?.platform ?? "linux/amd64",
           ...props.build,
         }
-      : undefined,
+      : {
+          dockerfile: "Dockerfile",
+          platform: "linux/amd64",
+          context: process.cwd(),
+        },
     image: props.image,
     registry: {
       server: "registry.cloudflare.com",
@@ -562,9 +571,6 @@ export const ContainerApplication = Resource(
         logs: {
           enabled: true,
         },
-        logging: {
-          enabled: true,
-        },
       },
     };
     if (this.phase === "update" && this.output?.id) {
@@ -1039,9 +1045,6 @@ interface CreateRolloutApplicationResponse {
       logs?: {
         enabled: boolean;
       };
-      logging?: {
-        enabled: boolean;
-      };
     };
   };
   target_configuration: DeploymentConfiguration;

package/src/cloudflare/d1-database.ts

@@ -386,7 +386,10 @@ const _D1Database = Resource(
           `Cannot update primaryLocationHint from '${this.output.primaryLocationHint}' to '${props.primaryLocationHint}' after database creation.`,
         );
       }
-      if (props.jurisdiction !== this.output?.jurisdiction) {
+      if (
+        (props.jurisdiction ?? "default") !==
+        (this.output?.jurisdiction ?? "default")
+      ) {
         throw new Error(
           `Cannot update jurisdiction from '${this.output.jurisdiction}' to '${props.jurisdiction}' after database creation.`,
         );
@@ -468,7 +471,8 @@ export async function createDatabase(
   // Create new D1 database
   const createPayload: any = {
     name: databaseName,
-    jurisdiction: props.jurisdiction,
+    jurisdiction:
+      props.jurisdiction !== "default" ? props.jurisdiction : undefined,
   };
 
   if (props.primaryLocationHint) {

package/src/cloudflare/index.ts

@@ -69,11 +69,11 @@ export * from "./vectorize-metadata-index.ts";
 export * from "./version-metadata.ts";
 export * from "./vite/vite.ts";
 export * from "./website.ts";
-export { WorkerLoader } from "./worker-loader.ts";
+export * from "./worker-loader.ts";
 export * from "./worker-ref.ts";
 export * from "./worker-stub.ts";
 export * from "./worker-subdomain.ts";
 export * from "./worker.ts";
-export { Workflow } from "./workflow.ts";
+export * from "./workflow.ts";
 export * from "./wrangler.json.ts";
 export * from "./zone.ts";

package/src/cloudflare/permission-groups.ts

@@ -359,6 +359,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants write access to Account Rulesets",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "ece81d7757ff406cad61f221a4920d55",
+    name: "Account Security Center Insights Read",
+    description: "Grants read access to Security Center Insights",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "cfa2e2893226455c9b945914969dff7c",
+    name: "Account Security Center Insights Write",
+    description: "Grants write access to Security Center Insights",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "c1fde68c7bcc44588cbb6ddbc16d6480",
     name: "Account Settings Read",
@@ -527,6 +539,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants write access to Browser Rendering API",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "da5fe84b9c5446a0a5955b673fafa288",
+    name: "CASB Read",
+    description: "Grants read access to Cloudflare CASB",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "b9ed086b20864ad89c5aac24cdd02365",
+    name: "CASB Write",
+    description: "Grants write access to Cloudflare CASB",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "47b936e2027140c0a474cac8887b8c29",
     name: "CF Agents Read",
@@ -970,6 +994,18 @@ export const PERMISSION_GROUPS = [
     description: "Grants full access to Email Security dmarc reports\n",
     scopes: ["com.cloudflare.api.account.zone"],
   },
+  {
+    id: "2d5b4b1f6c89487bb7184c2c1dcd3bf1",
+    name: "Email Sending Read",
+    description: "Grants access to reading data from Email Sending",
+    scopes: ["com.cloudflare.api.account"],
+  },
+  {
+    id: "5df633d6b41c42bcaf5b4a62b9d14b64",
+    name: "Email Sending Write",
+    description: "Grants access to reading and writing data from Email Sending",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "4ec32dfcb35641c5bb32d5ef1ab963b4",
     name: "Firewall Services Read",
@@ -1426,6 +1462,12 @@ export const PERMISSION_GROUPS = [
     description: "Grants admin access to Realtime configuration",
     scopes: ["com.cloudflare.api.account"],
   },
+  {
+    id: "9bb90620717647a39679e1d951f140d6",
+    name: "Registrar Domains Read",
+    description: "Grants read access to Cloudflare Registrar domains",
+    scopes: ["com.cloudflare.api.account"],
+  },
   {
     id: "93ae59e7a40c4287a57ff6e501186a63",
     name: "Response Compression Read",

package/src/cloudflare/worker-assets.ts

@@ -1,4 +1,5 @@
 import fs from "node:fs/promises";
+import path from "pathe";
 import { AsyncQueue } from "../util/async-queue.ts";
 import { withExponentialBackoff } from "../util/retry.ts";
 import { extractCloudflareResult } from "./api-response.ts";
@@ -38,7 +39,10 @@ export async function uploadAssets(
   },
 ): Promise<AssetUploadResult> {
   // Process the assets configuration once at the beginning
-  const processedConfig = createAssetConfig(assetConfig);
+  const processedConfig = await createAssetConfigWithFiles(
+    assets.path,
+    assetConfig,
+  );
 
   const manifest: Record<string, FileMetadata> = {};
   const filesByHash = new Map<string, Assets.FileMetadata>();
@@ -95,6 +99,35 @@ export async function uploadAssets(
   };
 }
 
+async function createAssetConfigWithFiles(
+  assetsPath: string,
+  config: AssetsConfig = {},
+): Promise<AssetsConfig> {
+  const [_headers, _redirects] = await Promise.all([
+    readFileOrProperty("_headers"),
+    readFileOrProperty("_redirects"),
+  ]);
+  return createAssetConfig({
+    ...config,
+    _headers,
+    _redirects,
+  });
+
+  async function readFileOrProperty(
+    property: "_headers" | "_redirects",
+  ): Promise<string | undefined> {
+    const content = await fs
+      .readFile(path.join(assetsPath, property), "utf-8")
+      .catch(() => undefined);
+    if (content && config[property]) {
+      throw new Error(
+        `Cannot use both ${property} file and ${property} property`,
+      );
+    }
+    return content ?? config[property];
+  }
+}
+
 /**
  * Creates asset configuration object from provided config or defaults
  */

package/src/cloudflare/worker-bundle.ts

@@ -351,6 +351,7 @@ export namespace WorkerBundleSource {
           ".js": "jsx",
           ".mjs": "jsx",
           ".cjs": "jsx",
+          ".sql": "text",
         },
         format,
         sourceRoot: this.props.outdir,

package/src/cloudflare/worker.ts

@@ -71,11 +71,13 @@ import { createEmptyWorker, exists } from "./worker-stub.ts";
 export interface AssetsConfig {
   /**
    * The contents of a _headers file (used to attach custom headers on asset responses)
+   * @default the `_headers` file in the assets directory, if present
    */
   _headers?: string;
 
   /**
    * The contents of a _redirects file (used to apply redirects or proxy paths ahead of asset serving)
+   * @default the `_redirects` file in the assets directory, if present
    */
   _redirects?: string;
 

package/src/util/detect-node-runtime.ts

@@ -6,7 +6,5 @@ export type Runtime = "bun" | "deno" | "node";
 export function detectRuntime(): Runtime {
   if (typeof Bun !== "undefined" && Bun !== null) return "bun";
   if (typeof Deno !== "undefined" && Deno !== null) return "deno";
-  if (typeof process !== "undefined" && process.release?.name === "node")
-    return "node";
   return "node";
 }

package/src/util/detect-package-manager.ts

@@ -1,20 +1,24 @@
+import path from "pathe";
 import { exists } from "./exists.ts";
+import { findWorkspaceRoot } from "./find-workspace-root.ts";
 
 export type PackageManager = "bun" | "pnpm" | "yarn" | "npm" | "deno";
 
 export async function detectPackageManager(
-  path: string = process.cwd(),
+  root: string = process.cwd(),
 ): Promise<PackageManager> {
-  if (await exists(`${path}/deno.lock`)) return "deno";
+  root = await findWorkspaceRoot(root);
+
+  if (await exists(path.resolve(root, "deno.lock"))) return "deno";
   if (
-    (await exists(`${path}/deno.json`)) ||
-    (await exists(`${path}/deno.jsonc`))
+    (await exists(path.resolve(root, "deno.json"))) ||
+    (await exists(path.resolve(root, "deno.jsonc")))
   )
     return "deno";
-  if (await exists(`${path}/bun.lockb`)) return "bun";
-  if (await exists(`${path}/bun.lock`)) return "bun";
-  if (await exists(`${path}/pnpm-lock.yaml`)) return "pnpm";
-  if (await exists(`${path}/yarn.lock`)) return "yarn";
+  if (await exists(path.resolve(root, "bun.lockb"))) return "bun";
+  if (await exists(path.resolve(root, "bun.lock"))) return "bun";
+  if (await exists(path.resolve(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (await exists(path.resolve(root, "yarn.lock"))) return "yarn";
 
   if (process.env.npm_execpath?.includes("bun")) {
     return "bun";

package/templates/tanstack-start/alchemy.run.ts

@@ -1,9 +1,15 @@
 import alchemy from "alchemy";
-import { TanStackStart } from "alchemy/cloudflare";
+import { R2Bucket, TanStackStart } from "alchemy/cloudflare";
 
 const app = await alchemy("{projectName}");
 
-export const website = await TanStackStart("website");
+const r2 = await R2Bucket("r2");
+
+export const website = await TanStackStart("website", {
+  bindings: {
+    R2: r2,
+  },
+});
 
 console.log({
   url: website.url,

package/templates/tanstack-start/src/routes/demo.start.server-funcs.tsx

@@ -1,22 +1,17 @@
-import fs from "node:fs";
-import { useCallback, useState } from "react";
 import { createFileRoute, useRouter } from "@tanstack/react-router";
 import { createServerFn } from "@tanstack/react-start";
+import { env } from "cloudflare:workers";
+import { useCallback, useState } from "react";
 
-const filePath = "todos.json";
+const key = "todos.json";
 
-async function readTodos() {
-  return JSON.parse(
-    await fs.promises.readFile(filePath, "utf-8").catch(() =>
-      JSON.stringify(
-        [
-          { id: 1, name: "Get groceries" },
-          { id: 2, name: "Buy a new phone" },
-        ],
-        null,
-        2,
-      ),
-    ),
+async function readTodos(): Promise<{ id: number; name: string }[]> {
+  const todos = await env.R2.get(key);
+  return (
+    (await todos?.json()) ?? [
+      { id: 1, name: "Get groceries" },
+      { id: 2, name: "Buy a new phone" },
+    ]
   );
 }
 
@@ -29,7 +24,7 @@ const addTodo = createServerFn({ method: "POST" })
   .handler(async ({ data }) => {
     const todos = await readTodos();
     todos.push({ id: todos.length + 1, name: data });
-    await fs.promises.writeFile(filePath, JSON.stringify(todos, null, 2));
+    await env.R2.put(key, JSON.stringify(todos, null, 2));
     return todos;
   });
 

package/workers/tunnel-proxy.js

@@ -83,7 +83,7 @@ const renderErrorHtml = (props) => `
             Alchemy</a>.</p>
       </div>
       <div class="bg-slate-200 px-5 py-3 flex flex-col w-full max-w-lg">
-        <p class="text-sm text-slate-500">Alchemy 0.77.5</p>
+        <p class="text-sm text-slate-500">Alchemy 0.78.0</p>
       </div>
     </div>
   </body>