create-cloudflare 2.70.13 → 2.70.15

package/dist/cli.js

@@ -75471,7 +75471,7 @@ function getGlobalWranglerCachePath() {
 }
 __name(getGlobalWranglerCachePath, "getGlobalWranglerCachePath");
 
-// ../workers-utils/dist/chunk-Y3JVLYM6.mjs
+// ../workers-utils/dist/chunk-3K53PSCY.mjs
 init_chunk_Q72B4Q5Z();
 var import_node_fs2 = require("node:fs");
 var import_node_path2 = __toESM(require("node:path"), 1);
@@ -77822,10 +77822,20 @@ var APIError = class extends ParseError {
    * endpoint-specific structured error payloads.
    */
   meta;
-  constructor({ status: status2, ...rest }) {
+  /**
+   * Optional number of milliseconds the API asked us to wait before retrying,
+   * derived from the response's `Retry-After` header (if present).
+   */
+  retryAfterMs;
+  constructor({
+    status: status2,
+    retryAfterMs,
+    ...rest
+  }) {
     super(rest);
     this.name = this.constructor.name;
     this.#status = status2;
+    this.retryAfterMs = retryAfterMs;
   }
   get status() {
     return this.#status;
@@ -95068,6 +95078,10 @@ var getLocalExplorerEnabledFromEnv = getBooleanEnvironmentVariableFactory({
   variableName: "X_LOCAL_EXPLORER",
   defaultValue: true
 });
+var getLocalObservabilityEnabledFromEnv = getBooleanEnvironmentVariableFactory({
+  variableName: "X_LOCAL_OBSERVABILITY",
+  defaultValue: false
+});
 var getBrowserRenderingHeadfulFromEnv = getBooleanEnvironmentVariableFactory({
   variableName: "X_BROWSER_HEADFUL",
   defaultValue: false
@@ -95590,14 +95604,21 @@ function normalizeAndValidateConfig(rawConfig, configPath, userConfigPath, args,
   const diagnostics = new Diagnostics(
     `Processing ${configPath ? import_node_path4.default.relative(process.cwd(), configPath) : "wrangler"} configuration:`
   );
+  const isRedirectedConfig2 = isRedirectedRawConfig(
+    rawConfig,
+    configPath,
+    userConfigPath
+  );
   if ("legacy_env" in rawConfig) {
-    diagnostics.errors.push(
-      dedent`
-				The "legacy_env" field is no longer supported, so please remove it from your configuration file.
-				Service environments have been removed, and each environment is now deployed as its own Worker named "<name>-<environment>". This matches the behaviour of "legacy_env = true", which was the default, so removing the field will not change how your Worker is deployed.
-				Refer to https://developers.cloudflare.com/workers/wrangler/environments/ for more information.
-			`
-    );
+    if (!isRedirectedConfig2) {
+      diagnostics.errors.push(
+        dedent`
+					The "legacy_env" field is no longer supported, so please remove it from your configuration file.
+					Service environments have been removed, and each environment is now deployed as its own Worker named "<name>-<environment>". This matches the behaviour of "legacy_env = true", which was the default, so removing the field will not change how your Worker is deployed.
+					Refer to https://developers.cloudflare.com/workers/wrangler/environments/ for more information.
+				`
+      );
+    }
     delete rawConfig.legacy_env;
   }
   validateOptionalProperty(
@@ -95673,11 +95694,6 @@ function normalizeAndValidateConfig(rawConfig, configPath, userConfigPath, args,
     isDispatchNamespace,
     preserveOriginalMain
   );
-  const isRedirectedConfig2 = isRedirectedRawConfig(
-    rawConfig,
-    configPath,
-    userConfigPath
-  );
   const definedEnvironments = Object.keys(rawConfig.env ?? {});
   if (isRedirectedConfig2 && definedEnvironments.length > 0) {
     diagnostics.errors.push(
@@ -98662,12 +98678,47 @@ var validateR2Binding = /* @__PURE__ */ __name((diagnostics, field, value) => {
   if (!isRemoteValid(value, field, diagnostics)) {
     isValid = false;
   }
+  if (hasProperty(value, "local_dev")) {
+    const localDev = value.local_dev;
+    if (typeof localDev !== "object" || localDev === null) {
+      diagnostics.errors.push(
+        `"${field}" bindings should, optionally, have an object "local_dev" field but got ${JSON.stringify(
+          value
+        )}.`
+      );
+      isValid = false;
+    } else {
+      experimental(
+        diagnostics,
+        { local_dev: localDev },
+        "local_dev.experimental_s3_credentials"
+      );
+      if (hasProperty(localDev, "experimental_s3_credentials")) {
+        const credentials = localDev.experimental_s3_credentials;
+        if (typeof credentials !== "object" || credentials === null || !isRequiredProperty(credentials, "accessKeyId", "string") || !isRequiredProperty(credentials, "secretAccessKey", "string")) {
+          diagnostics.errors.push(
+            `"${field}" bindings should, optionally, have a "local_dev.experimental_s3_credentials" field with string "accessKeyId" and "secretAccessKey" fields, but got ${JSON.stringify(
+              value
+            )}.`
+          );
+          isValid = false;
+        }
+      }
+      validateAdditionalProperties(
+        diagnostics,
+        `${field}.local_dev`,
+        Object.keys(localDev),
+        ["experimental_s3_credentials"]
+      );
+    }
+  }
   validateAdditionalProperties(diagnostics, field, Object.keys(value), [
     "binding",
     "bucket_name",
     "preview_bucket_name",
     "jurisdiction",
-    "remote"
+    "remote",
+    "local_dev"
   ]);
   return isValid;
 }, "validateR2Binding");
@@ -102101,6 +102152,7 @@ async function fetchInternalBase(complianceConfig, resource, init = {}, userAgen
   logHeaders(response.headers, logger);
   logger.debugWithSanitization?.("RESPONSE:", jsonText);
   logger.debug("-- END CF API RESPONSE");
+  const retryAfterMs = parseRetryAfterMs(response.headers);
   if (!jsonText && (response.status === 204 || response.status === 205)) {
     return {
       response: {
@@ -102109,7 +102161,8 @@ async function fetchInternalBase(complianceConfig, resource, init = {}, userAgen
         errors: [],
         messages: []
       },
-      status: response.status
+      status: response.status,
+      retryAfterMs
     };
   }
   if (isWAFBlockResponse(response.headers)) {
@@ -102118,12 +102171,13 @@ async function fetchInternalBase(complianceConfig, resource, init = {}, userAgen
       method,
       resource,
       response.status,
-      response.statusText
+      response.statusText,
+      retryAfterMs
     );
   }
   try {
     const json2 = parseJSON(jsonText);
-    return { response: json2, status: response.status };
+    return { response: json2, status: response.status, retryAfterMs };
   } catch {
     const rayId = extractWAFBlockRayId(response.headers);
     throw new APIError({
@@ -102138,13 +102192,18 @@ async function fetchInternalBase(complianceConfig, resource, init = {}, userAgen
         ...rayId ? [{ text: `Cloudflare Ray ID: ${rayId}` }] : []
       ],
       status: response.status,
+      retryAfterMs,
       telemetryMessage: false
     });
   }
 }
 __name(fetchInternalBase, "fetchInternalBase");
 async function fetchResultBase(complianceConfig, resource, init = {}, userAgent, logger, queryParams, abortSignal, credentials) {
-  const { response: json2, status: status2 } = await fetchInternalBase(
+  const {
+    response: json2,
+    status: status2,
+    retryAfterMs
+  } = await fetchInternalBase(
     complianceConfig,
     resource,
     init,
@@ -102157,7 +102216,7 @@ async function fetchResultBase(complianceConfig, resource, init = {}, userAgent,
   if (json2.success) {
     return json2.result;
   } else {
-    throwFetchError(resource, json2, status2);
+    throwFetchError(resource, json2, status2, retryAfterMs);
   }
 }
 __name(fetchResultBase, "fetchResultBase");
@@ -102170,7 +102229,11 @@ async function fetchListResultBase(complianceConfig, resource, init = {}, userAg
       queryParams = new import_node_url2.URLSearchParams(queryParams);
       queryParams.set("cursor", cursor);
     }
-    const { response: json2, status: status2 } = await fetchInternalBase(
+    const {
+      response: json2,
+      status: status2,
+      retryAfterMs
+    } = await fetchInternalBase(
       complianceConfig,
       resource,
       init,
@@ -102188,7 +102251,7 @@ async function fetchListResultBase(complianceConfig, resource, init = {}, userAg
         getMoreResults = false;
       }
     } else {
-      throwFetchError(resource, json2, status2);
+      throwFetchError(resource, json2, status2, retryAfterMs);
     }
   }
   return results;
@@ -102206,6 +102269,24 @@ function isWAFBlockResponse(headers) {
   return headers.get("cf-mitigated") === "challenge";
 }
 __name(isWAFBlockResponse, "isWAFBlockResponse");
+function parseRetryAfterValue(retryAfter) {
+  if (!retryAfter) {
+    return void 0;
+  }
+  if (/^\d+$/.test(retryAfter.trim())) {
+    return Number(retryAfter) * 1e3;
+  }
+  const retryAfterDate = new Date(retryAfter);
+  if (!Number.isNaN(retryAfterDate.getTime())) {
+    return Math.max(0, retryAfterDate.getTime() - Date.now());
+  }
+  return void 0;
+}
+__name(parseRetryAfterValue, "parseRetryAfterValue");
+function parseRetryAfterMs(headers) {
+  return parseRetryAfterValue(headers.get("Retry-After"));
+}
+__name(parseRetryAfterMs, "parseRetryAfterMs");
 function extractWAFBlockRayId(headers) {
   return headers.get("cf-ray") ?? void 0;
 }
@@ -102285,7 +102366,7 @@ function escapeCharacter(character) {
   }).join("");
 }
 __name(escapeCharacter, "escapeCharacter");
-function throwFetchError(resource, response, status2) {
+function throwFetchError(resource, response, status2, retryAfterMs) {
   const errors = response.errors ?? [];
   for (const error52 of errors) {
     maybeThrowFriendlyError(error52);
@@ -102303,10 +102384,19 @@ function throwFetchError(resource, response, status2) {
       notes.push({ text: fallbackMessage });
     }
   }
+  if (retryAfterMs !== void 0) {
+    notes.push({
+      text: `The API responded with a "Retry-After" header indicating you should wait ${Math.ceil(retryAfterMs / 1e3)} second(s) before retrying.`
+    });
+  }
   const error512 = new APIError({
     text: `A request to the Cloudflare API (${resource}) failed.`,
     notes,
     status: status2,
+    // hoist the parsed `Retry-After` header (if any) so consumers such as
+    // `retryOnAPIFailure()` can back off for the amount of time the API
+    // asked us to wait, e.g. when rate limited (HTTP 429).
+    retryAfterMs,
     telemetryMessage: false
   });
   const code = errors[0]?.code;
@@ -102321,7 +102411,7 @@ function throwFetchError(resource, response, status2) {
   throw error512;
 }
 __name(throwFetchError, "throwFetchError");
-function throwWAFBlockError(headers, method, resource, status2, statusText) {
+function throwWAFBlockError(headers, method, resource, status2, statusText, retryAfterMs) {
   const rayId = extractWAFBlockRayId(headers);
   throw new APIError({
     text: "The Cloudflare API responded with a WAF block page instead of the expected JSON response",
@@ -102338,6 +102428,7 @@ function throwWAFBlockError(headers, method, resource, status2, statusText) {
       }
     ],
     status: status2,
+    retryAfterMs,
     telemetryMessage: false
   });
 }
@@ -102436,24 +102527,42 @@ ${url2}`
 }
 __name(handleBrowserOpenError, "handleBrowserOpenError");
 var MAX_ATTEMPTS = 3;
+var MAX_RETRY_AFTER_MS = 6e4;
 async function retryOnAPIFailure(action, logger, backoff = 0, attempts = MAX_ATTEMPTS, abortSignal) {
   try {
     return await action();
   } catch (err) {
     if (err instanceof APIError) {
-      if (!err.isRetryable()) {
+      if (!err.isRetryable() && err.status !== 429) {
         throw err;
       }
     } else if (err instanceof DOMException && err.name === "TimeoutError") ;
     else if (!(err instanceof TypeError)) {
       throw err;
     }
-    logger.debug(`Retrying API call after error...`);
-    logger.debug(err);
+    const retryAfterMs = err instanceof APIError ? err.retryAfterMs : void 0;
+    if (retryAfterMs !== void 0 && retryAfterMs > MAX_RETRY_AFTER_MS) {
+      throw err;
+    }
     if (attempts <= 1) {
       throw err;
     }
-    await (0, import_promises2.setTimeout)(backoff, void 0, { signal: abortSignal });
+    const jitter = Math.random() * 1e3;
+    let wait = backoff;
+    if (retryAfterMs !== void 0) {
+      wait = retryAfterMs + jitter;
+    } else if (err instanceof APIError && err.status === 429) {
+      wait = Math.max(backoff, 1e3) + jitter;
+    }
+    if (retryAfterMs !== void 0) {
+      logger.info(
+        `Received a "Retry-After" header from the Cloudflare API. Waiting ${Math.ceil(retryAfterMs / 1e3)} second(s) before retrying...`
+      );
+    } else {
+      logger.debug(`Retrying API call after error...`);
+      logger.debug(err);
+    }
+    await (0, import_promises2.setTimeout)(wait, void 0, { signal: abortSignal });
     return retryOnAPIFailure(
       action,
       logger,
@@ -109449,7 +109558,7 @@ var Yargs = YargsFactory(esm_default2);
 var yargs_default = Yargs;
 
 // package.json
-var version2 = "2.70.13";
+var version2 = "2.70.15";
 
 // src/metrics.ts
 var import_node_async_hooks = require("node:async_hooks");
@@ -110977,7 +111086,7 @@ var hasTsConfig = (path7) => {
 };
 
 // src/helpers/pnpmBuildApprovals.ts
-var APPROVED_BUILDS = ["esbuild", "workerd", "sharp"];
+var APPROVED_BUILDS = ["esbuild", "workerd"];
 var APPROVED_BUILDS_SET = new Set(APPROVED_BUILDS);
 var writePnpmBuildApprovals = (projectPath) => {
   const { npm: npm24 } = detectPackageManager();
@@ -110997,9 +111106,9 @@ var writePnpmBuildApprovals = (projectPath) => {
 };
 var FRESH_HEADER = [
   "# Pre-approve build scripts for the packages C3 itself installs that need",
-  "# them: `workerd` downloads the platform binary, `esbuild` and `sharp`",
-  "# (via miniflare) download/build native bindings. Without these, pnpm 11+",
-  "# aborts the install with ERR_PNPM_IGNORED_BUILDS."
+  "# them: `workerd` downloads the platform binary and `esbuild` downloads/",
+  "# builds native bindings. Without these, pnpm 11+ aborts the install with",
+  "# ERR_PNPM_IGNORED_BUILDS."
 ];
 var formatEntry = (pkg) => pkg.startsWith("@") ? `  '${pkg}': true` : `  ${pkg}: true`;
 var freshWorkspaceYaml = () => [
@@ -112018,24 +112127,24 @@ __name2(getPropertyName, "getPropertyName");
 var package_default = {
   name: "frameworks_clis_info",
   dependencies: {
-    "@angular/create": "22.0.7",
-    "@tanstack/cli": "0.69.5",
-    "create-analog": "2.6.3",
+    "@angular/create": "22.0.8",
+    "@tanstack/cli": "0.70.1",
+    "create-analog": "2.6.4",
     "create-astro": "5.2.2",
     "create-docusaurus": "3.10.2",
     "create-hono": "0.19.4",
     "create-next-app": "16.2.11",
     "create-qwik": "1.20.0",
-    "create-react-router": "8.2.0",
+    "create-react-router": "8.3.0",
     "create-rwsdk": "3.1.3",
-    "create-solid": "0.7.0",
-    "create-vike": "0.0.662",
+    "create-solid": "0.8.0",
+    "create-vike": "0.0.668",
     "create-vite": "9.1.1",
-    "create-vue": "3.22.4",
+    "create-vue": "3.23.0",
     "create-waku": "0.12.5-1.0.0-alpha.10-0",
     gatsby: "5.16.1",
-    nuxi: "3.36.1",
-    sv: "0.16.3"
+    nuxi: "3.37.0",
+    sv: "0.16.5"
   },
   info: [
     "This package.json is only used to keep track of the frameworks cli dependencies",
@@ -112957,7 +113066,7 @@ var generate14 = async (ctx) => {
 var configure6 = async () => {
   const packages = ["nitro-cloudflare-dev"];
   if (pm === "pnpm") {
-    packages.push("h3");
+    packages.push("h3@^1");
   }
   await installPackages2(packages, {
     dev: true,
@@ -113053,7 +113162,7 @@ var generate15 = async (ctx) => {
 var configure7 = async () => {
   const packages = ["nitro-cloudflare-dev", "nitropack"];
   if (pm2 === "pnpm") {
-    packages.push("h3");
+    packages.push("h3@^1");
   }
   await installPackages2(packages, {
     dev: true,
@@ -114539,7 +114648,7 @@ If the application uses Durable Objects or Workflows, refer to the relevant best
 var import_node_assert6 = __toESM(require("node:assert"));
 
 // ../wrangler/package.json
-var version3 = "4.113.0";
+var version3 = "4.115.0";
 
 // src/git.ts
 var offerGit = async (ctx) => {
@@ -114594,16 +114703,24 @@ var gitCommit = async (ctx) => {
       silent: true,
       cwd: ctx.project.path
     });
+  } catch {
+    s.stop(`${brandColor("git")} ${dim(`commit failed`)}`);
+    updateStatus(
+      "Failed to create initial commit. You can commit manually later."
+    );
+    return;
+  }
+  s.stop();
+  try {
     await runCommand(
       ["git", "commit", "-m", ctx.commitMessage, "--no-verify"],
       {
-        silent: true,
         cwd: ctx.project.path
       }
     );
-    s.stop(`${brandColor("git")} ${dim(`commit`)}`);
+    updateStatus(`${brandColor("git")} ${dim(`commit`)}`);
   } catch {
-    s.stop(`${brandColor("git")} ${dim(`commit failed`)}`);
+    updateStatus(`${brandColor("git")} ${dim(`commit failed`)}`);
     updateStatus(
       "Failed to create initial commit. You can commit manually later."
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudflare",
-  "version": "2.70.13",
+  "version": "2.70.15",
   "description": "A CLI for creating and deploying new applications to Cloudflare.",
   "keywords": [
     "cloudflare",
@@ -31,7 +31,7 @@
     "@babel/parser": "^7.21.3",
     "@babel/types": "^7.21.4",
     "@clack/prompts": "^1.2.0",
-    "@cloudflare/workers-types": "^5.20260721.1",
+    "@cloudflare/workers-types": "^5.20260722.1",
     "@types/command-exists": "^1.2.0",
     "@types/cross-spawn": "^6.0.2",
     "@types/deepmerge": "^2.2.0",
@@ -65,19 +65,19 @@
     "tree-kill": "1.2.2",
     "typescript": "5.8.3",
     "undici": "7.28.0",
-    "vite": "8.0.13",
+    "vite": "8.1.5",
     "vite-tsconfig-paths": "^4.0.8",
     "vitest": "4.1.0",
     "which-pm-runs": "^1.1.0",
     "wrap-ansi": "^9.0.0",
     "yargs": "^17.7.2",
-    "@cloudflare/cli-shared-helpers": "0.1.16",
-    "@cloudflare/mock-npm-registry": "0.0.0",
-    "@cloudflare/vite-plugin": "1.46.0",
     "@cloudflare/codemod": "1.1.0",
-    "@cloudflare/workers-utils": "0.28.0",
-    "wrangler": "4.113.0",
-    "@cloudflare/workers-tsconfig": "0.0.0"
+    "@cloudflare/cli-shared-helpers": "0.1.17",
+    "@cloudflare/mock-npm-registry": "0.0.0",
+    "@cloudflare/vite-plugin": "1.48.0",
+    "@cloudflare/workers-tsconfig": "0.0.0",
+    "@cloudflare/workers-utils": "0.29.0",
+    "wrangler": "4.115.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/templates/hello-world-workflows/js/src/index.js

@@ -22,13 +22,6 @@ import { WorkflowEntrypoint } from "cloudflare:workers";
  */
 
 export class MyWorkflow extends WorkflowEntrypoint {
-	/**
-	 * @param {Env} env
-	 */
-	constructor(env) {
-		this.env = env;
-	}
-
 	/**
 	 * @param {WorkflowEvent<Params>} event
 	 * @param {WorkflowStep} step

package/templates/nuxt/pages/c3.ts

@@ -33,9 +33,12 @@ const configure = async () => {
 	const packages = ["nitro-cloudflare-dev"];
 
 	// When using pnpm, explicitly add h3 package so the H3Event type declaration can be updated.
-	// Package managers other than pnpm will hoist the dependency, as will pnpm with `--shamefully-hoist`
+	// Package managers other than pnpm will hoist the dependency, as will pnpm with `--shamefully-hoist`.
+	// Pin to the h3 major used by nitropack — h3's `latest` dist-tag now points at the 2.x release
+	// candidates, which are incompatible with the h3 v1 runtime Nuxt/Nitro use and break
+	// `event.context.cloudflare` in dev.
 	if (pm === "pnpm") {
-		packages.push("h3");
+		packages.push("h3@^1");
 	}
 
 	await installPackages(packages, {

package/templates/nuxt/workers/c3.ts

@@ -33,9 +33,12 @@ const configure = async () => {
 	const packages = ["nitro-cloudflare-dev", "nitropack"];
 
 	// When using pnpm, explicitly add h3 package so the H3Event type declaration can be updated.
-	// Package managers other than pnpm will hoist the dependency, as will pnpm with `--shamefully-hoist`
+	// Package managers other than pnpm will hoist the dependency, as will pnpm with `--shamefully-hoist`.
+	// Pin to the h3 major used by nitropack — h3's `latest` dist-tag now points at the 2.x release
+	// candidates, which are incompatible with the h3 v1 runtime Nuxt/Nitro use and break
+	// `event.context.cloudflare` in dev.
 	if (pm === "pnpm") {
-		packages.push("h3");
+		packages.push("h3@^1");
 	}
 
 	await installPackages(packages, {

package/templates/react-router/ts/app/entry.server.tsx

@@ -1,42 +0,0 @@
-import type { EntryContext } from "react-router";
-import { ServerRouter } from "react-router";
-import { isbot } from "isbot";
-import { renderToReadableStream } from "react-dom/server";
-
-export default async function handleRequest(
-  request: Request,
-  responseStatusCode: number,
-  responseHeaders: Headers,
-  routerContext: EntryContext,
-) {
-  let shellRendered = false;
-  const userAgent = request.headers.get("user-agent");
-
-  const body = await renderToReadableStream(
-    <ServerRouter context={routerContext} url={request.url} />,
-    {
-      onError(error: unknown) {
-        responseStatusCode = 500;
-        // Log streaming rendering errors from inside the shell.  Don't log
-        // errors encountered during initial shell rendering since they'll
-        // reject and get logged in handleDocumentRequest.
-        if (shellRendered) {
-          console.error(error);
-        }
-      },
-    },
-  );
-  shellRendered = true;
-
-  // Ensure requests from bots and SPA Mode renders wait for all content to load before responding
-  // https://react.dev/reference/react-dom/server/renderToPipeableStream#waiting-for-all-content-to-load-for-crawlers-and-static-generation
-  if ((userAgent && isbot(userAgent)) || routerContext.isSpaMode) {
-    await body.allReady;
-  }
-
-  responseHeaders.set("Content-Type", "text/html");
-  return new Response(body, {
-    headers: responseHeaders,
-    status: responseStatusCode,
-  });
-}