create-cloudflare 2.72.7 → 2.72.9

package/dist/cli.js

@@ -77461,7 +77461,7 @@ function dedent(templ) {
 __name(dedent, "dedent");
 var esm_default = dedent;
 
-// ../workers-utils/dist/chunk-R5MIV2EH.mjs
+// ../workers-utils/dist/chunk-JGKSDUFK.mjs
 init_chunk_Q72B4Q5Z();
 var import_node_fs = require("node:fs");
 var import_node_path = __toESM(require("node:path"), 1);
@@ -77504,6 +77504,19 @@ function getDurableObjectContainerApps(containers) {
   return Array.isArray(containers) ? containers.filter(isDurableObjectContainerApp) : [];
 }
 __name(getDurableObjectContainerApps, "getDurableObjectContainerApps");
+function getResolvedDurableObjectContainerApps(containers, exports$1) {
+  return getDurableObjectContainerApps(containers).map((container) => {
+    const className = resolveContainerClassName(container, exports$1);
+    if (typeof className !== "string" || className.length === 0) {
+      throw new UserError(
+        `The container "${container.name}" is not linked to a Durable Object. Either set "containers.class_name", or reference this container from a Durable Object's \`exports\` entry via its "container" field.`,
+        { telemetryMessage: "durable object container class unresolved" }
+      );
+    }
+    return { ...container, class_name: className };
+  });
+}
+__name(getResolvedDurableObjectContainerApps, "getResolvedDurableObjectContainerApps");
 function getContainerNameToClassNameMap(exports$1) {
   const containerNameToClassName = /* @__PURE__ */ new Map();
   for (const [className, entry] of Object.entries(
@@ -77604,12 +77617,17 @@ function getDurableObjectClassNameToUseSQLiteMap(migrations, exports$1) {
   return durableObjectClassNameToUseSQLiteMap;
 }
 __name(getDurableObjectClassNameToUseSQLiteMap, "getDurableObjectClassNameToUseSQLiteMap");
-function validateDurableObjectContainerApplications(config50) {
+function validateDurableObjectContainerApplications(config50, containers = getDurableObjectContainerApps(
+  config50.containers
+)) {
   const allDOs = getDurableObjectClassNameToUseSQLiteMap(
     config50.migrations,
     config50.exports
   );
-  for (const container of getDurableObjectContainerApps(config50.containers)) {
+  for (const container of getResolvedDurableObjectContainerApps(
+    containers,
+    config50.exports
+  )) {
     const maybeBoundDO = config50.durable_objects.bindings.find(
       (durableObject) => durableObject.class_name === container.class_name
     );
@@ -79935,7 +79953,7 @@ var APIError = class extends ParseError {
   }
   isGatewayError() {
     if (this.#status !== void 0) {
-      return [524].includes(this.#status);
+      return [502, 503, 504, 524].includes(this.#status);
     }
     return false;
   }
@@ -80395,9 +80413,9 @@ function formatConfigSnippet(snippet, configPath, formatted = true) {
 }
 __name(formatConfigSnippet, "formatConfigSnippet");
 
-// ../workers-utils/dist/chunk-KBTXSRPS.mjs
+// ../workers-utils/dist/chunk-YZWVNJ5I.mjs
 init_chunk_Q72B4Q5Z();
-var DEFAULT_COMPAT_DATE = "2026-09-11";
+var DEFAULT_COMPAT_DATE = "2026-09-16";
 function assertNever(_value) {
 }
 __name(assertNever, "assertNever");
@@ -80677,13 +80695,6 @@ function mapWorkerMetadataBindings(bindings) {
           }
         ];
         break;
-      case "websearch":
-        {
-          configObj.websearch = {
-            binding: binding.name
-          };
-        }
-        break;
       case "agent_memory": {
         configObj.agent_memory = [
           ...configObj.agent_memory ?? [],
@@ -81347,7 +81358,6 @@ var import_node_crypto = require("node:crypto");
 var import_node_os5 = require("node:os");
 var timersPromises = __toESM(require("node:timers/promises"), 1);
 var import_promises2 = require("node:timers/promises");
-var import_node_console = require("node:console");
 var require_vendors2 = __commonJS2({
   "../../node_modules/.pnpm/ci-info@4.4.0/node_modules/ci-info/vendors.json"(exports$1, module2) {
     module2.exports = [
@@ -82976,7 +82986,6 @@ var defaultWranglerConfig = {
   vectorize: [],
   ai_search_namespaces: [],
   ai_search: [],
-  websearch: void 0,
   agent_memory: [],
   hyperdrive: [],
   workflows: [],
@@ -98285,7 +98294,6 @@ var friendlyBindingNames = {
   vectorize: "Vectorize Index",
   ai_search_namespaces: "AI Search Namespace",
   ai_search: "AI Search Instance",
-  websearch: "Web Search",
   agent_memory: "Agent Memory",
   hyperdrive: "Hyperdrive Config",
   r2_buckets: "R2 Bucket",
@@ -98339,7 +98347,6 @@ var bindingTypeFriendlyNames = {
   vectorize: "Vectorize Index",
   ai_search_namespace: "AI Search Namespace",
   ai_search: "AI Search Instance",
-  websearch: "Web Search",
   agent_memory: "Agent Memory",
   hyperdrive: "Hyperdrive Config",
   service: "Worker",
@@ -99069,17 +99076,31 @@ function validateRoutes(diagnostics, topLevelEnv, rawEnv, envName) {
   return result;
 }
 __name(validateRoutes, "validateRoutes");
-function normalizeAndValidatePlacement(diagnostics, topLevelEnv, rawEnv) {
-  if (rawEnv.placement) {
+function normalizeAndValidatePlacement(diagnostics, topLevelEnv, rawEnv, diagnosticField = "placement") {
+  if (rawEnv.placement !== void 0) {
+    if (typeof rawEnv.placement !== "object" || rawEnv.placement === null || Array.isArray(rawEnv.placement)) {
+      diagnostics.errors.push(
+        `The field "${diagnosticField}" should be an object but got ${JSON.stringify(rawEnv.placement)}.`
+      );
+      return inheritable(
+        diagnostics,
+        topLevelEnv,
+        rawEnv,
+        "placement",
+        () => true,
+        void 0
+      );
+    }
     const placement = rawEnv.placement;
     const hasHint = "hint" in placement;
-    const hasRegion = "region" in placement;
-    const hasHost = "host" in placement;
-    const hasHostname = "hostname" in placement;
-    const hasTargetedFields = hasRegion || hasHost || hasHostname;
+    const targetedFields = ["region", "host", "hostname"];
+    const presentTargetedFields = targetedFields.filter(
+      (field) => field in placement
+    );
+    const hasTargetedFields = presentTargetedFields.length > 0;
     if (hasHint && hasTargetedFields) {
       diagnostics.errors.push(
-        `"placement" cannot have both "hint" (smart format) and "region"/"host"/"hostname" (targeted format) fields`
+        `"${diagnosticField}" cannot have both "hint" (smart format) and "region"/"host"/"hostname" (targeted format) fields`
       );
       return inheritable(
         diagnostics,
@@ -99093,7 +99114,7 @@ function normalizeAndValidatePlacement(diagnostics, topLevelEnv, rawEnv) {
     if (hasHint) {
       validateRequiredProperty(
         diagnostics,
-        "placement",
+        diagnosticField,
         "mode",
         placement.mode,
         "string",
@@ -99103,75 +99124,58 @@ function normalizeAndValidatePlacement(diagnostics, topLevelEnv, rawEnv) {
       const hint = placement.hint;
       if (hint !== void 0 && typeof hint !== "string") {
         diagnostics.errors.push(
-          `"placement.hint" must be a string when "placement.mode" is "${mode}"`
+          `"${diagnosticField}.hint" must be a string when "${diagnosticField}.mode" is "${mode}"`
         );
       }
       if (hint && mode !== "smart") {
         diagnostics.errors.push(
-          `"placement.hint" can only be set when "placement.mode" is "smart"`
+          `"${diagnosticField}.hint" can only be set when "${diagnosticField}.mode" is "smart"`
         );
       }
     } else if (hasTargetedFields) {
       validateOptionalProperty(
         diagnostics,
-        "placement",
+        diagnosticField,
         "mode",
         placement.mode,
         "string",
-        ["off", "targeted"]
+        ["targeted"]
       );
-      if (hasRegion) {
-        validateOptionalProperty(
-          diagnostics,
-          "placement",
-          "region",
-          placement.region,
-          "string"
-        );
-      }
-      if (hasHost) {
-        validateOptionalProperty(
+      for (const field of presentTargetedFields) {
+        validateRequiredProperty(
           diagnostics,
-          "placement",
-          "host",
-          placement.host,
-          "string"
-        );
-      }
-      if (hasHostname) {
-        validateOptionalProperty(
-          diagnostics,
-          "placement",
-          "hostname",
-          placement.hostname,
+          diagnosticField,
+          field,
+          placement[field],
           "string"
         );
-      }
-      const fieldsPresent = [hasRegion, hasHost, hasHostname].filter(Boolean);
-      if (fieldsPresent.length > 1) {
-        const presentFields = [];
-        if (hasRegion) {
-          presentFields.push("region");
-        }
-        if (hasHost) {
-          presentFields.push("host");
-        }
-        if (hasHostname) {
-          presentFields.push("hostname");
+        if (placement[field] === "") {
+          diagnostics.errors.push(
+            `"${diagnosticField}.${field}" must be a non-empty string.`
+          );
         }
+      }
+      if (presentTargetedFields.length > 1) {
         diagnostics.errors.push(
-          `"placement" fields ${presentFields.map((f) => `"${f}"`).join(", ")} are mutually exclusive. Only one can be specified.`
+          `"${diagnosticField}" fields ${presentTargetedFields.map((field) => `"${field}"`).join(", ")} are mutually exclusive. Only one can be specified.`
         );
       }
     } else {
       validateRequiredProperty(
         diagnostics,
-        "placement",
+        diagnosticField,
         "mode",
         placement.mode,
         "string",
         ["off", "smart", "targeted"]
       );
+      if (placement.mode === "targeted") {
+        validateAtLeastOnePropertyRequired(diagnostics, diagnosticField, [
+          { key: "region", value: placement.region, type: "string" },
+          { key: "host", value: placement.host, type: "string" },
+          { key: "hostname", value: placement.hostname, type: "string" }
+        ]);
+      }
     }
   }
   return inheritable(
@@ -99614,16 +99618,6 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateBindingArray(envName, validateAISearchBinding),
       []
     ),
-    websearch: notInheritable(
-      diagnostics,
-      topLevelEnv,
-      rawConfig,
-      rawEnv,
-      envName,
-      "websearch",
-      validateNamedSimpleBinding(envName),
-      void 0
-    ),
     agent_memory: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -100876,7 +100870,6 @@ var validateUnsafeBinding = /* @__PURE__ */ __name((diagnostics, field, value) =
       "ai",
       "ai_search_namespace",
       "ai_search",
-      "websearch",
       "agent_memory",
       "kv_namespace",
       "durable_object_namespace",
@@ -101092,8 +101085,25 @@ function validateDurableObjectContainerImages(diagnostics, field, images, compli
         valid = false;
       }
     }
+    const isDockerfileBuild = hasDockerfile && !hasImage;
+    if (isDockerfileBuild) {
+      if (image.build_context !== void 0 && (typeof image.build_context !== "string" || image.build_context.length === 0)) {
+        diagnostics.errors.push(
+          `"${imageField}.build_context" must be a non-empty string.`
+        );
+        valid = false;
+      }
+      if (image.build_vars !== void 0 && (typeof image.build_vars !== "object" || image.build_vars === null || Array.isArray(image.build_vars) || Object.values(image.build_vars).some(
+        (value) => typeof value !== "string"
+      ))) {
+        diagnostics.errors.push(
+          `"${imageField}.build_vars" must be an object with string values.`
+        );
+        valid = false;
+      }
+    }
     const unsupportedFields = Object.keys(image).filter(
-      (property) => property !== "dockerfile" && property !== "image"
+      (property) => property !== "dockerfile" && property !== "image" && !(isDockerfileBuild && (property === "build_context" || property === "build_vars"))
     );
     if (unsupportedFields.length > 0) {
       diagnostics.errors.push(
@@ -101105,6 +101115,32 @@ function validateDurableObjectContainerImages(diagnostics, field, images, compli
   return valid;
 }
 __name(validateDurableObjectContainerImages, "validateDurableObjectContainerImages");
+function validateDurableObjectContainerUnsafe(diagnostics, field, value) {
+  if (value === void 0) {
+    return;
+  }
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    diagnostics.errors.push(`"${field}" should be an object.`);
+    return;
+  }
+  const unsafe = value;
+  const configuration = unsafe.configuration;
+  if (Object.keys(unsafe).some((key) => key !== "configuration") || configuration !== void 0 && (typeof configuration !== "object" || configuration === null || Array.isArray(configuration) || Object.keys(configuration).some((key) => key !== "experimental_flags"))) {
+    diagnostics.errors.push(
+      `Only "${field}.configuration.experimental_flags" is supported for Durable Object-managed Containers.`
+    );
+    return;
+  }
+  if (configuration !== void 0) {
+    const flags = configuration.experimental_flags;
+    if (flags !== void 0 && (!Array.isArray(flags) || flags.some((flag) => typeof flag !== "string"))) {
+      diagnostics.errors.push(
+        `"${field}.configuration.experimental_flags" should be an array of strings.`
+      );
+    }
+  }
+}
+__name(validateDurableObjectContainerUnsafe, "validateDurableObjectContainerUnsafe");
 function validateContainerApp(envName, topLevelName, configPath, options = {}) {
   const { generateDefaultName = true } = options;
   return (diagnostics, field, value, config210) => {
@@ -101120,19 +101156,16 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
     for (const containerAppOptional of value) {
       const isDurableObjectManaged = containerAppOptional.scheduling_policy === "durable_object";
       const hasValidDurableObjectClassName = typeof containerAppOptional.class_name === "string" && containerAppOptional.class_name.length > 0;
-      if (isDurableObjectManaged) {
-        if (!hasValidDurableObjectClassName) {
-          diagnostics.errors.push(
-            `"containers.class_name" must be a non-empty string when "containers.scheduling_policy" is "durable_object".`
-          );
-        }
-      } else {
-        validateOptionalProperty(
-          diagnostics,
-          field,
-          "class_name",
-          containerAppOptional.class_name,
-          "string"
+      validateOptionalProperty(
+        diagnostics,
+        field,
+        "class_name",
+        containerAppOptional.class_name,
+        "string"
+      );
+      if (isDurableObjectManaged && containerAppOptional.class_name === "") {
+        diagnostics.errors.push(
+          `"containers.class_name" must be a non-empty string when specified for a Durable Object-managed Container.`
         );
       }
       validateOptionalProperty(
@@ -101142,7 +101175,7 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
         containerAppOptional.name,
         "string"
       );
-      if (generateDefaultName && !containerAppOptional.name && (!isDurableObjectManaged || hasValidDurableObjectClassName)) {
+      if (generateDefaultName && !containerAppOptional.name && (!isDurableObjectManaged || containerAppOptional.class_name === void 0 || hasValidDurableObjectClassName)) {
         if (containerAppOptional.class_name === void 0) {
           diagnostics.errors.push(
             `"containers.name" is required when "containers.class_name" is not defined, because there is no class name to derive a default name from. Either name this container and reference it from a Durable Object's \`exports\` entry, or set "containers.class_name".`
@@ -101164,12 +101197,35 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
           containerAppOptional.images,
           options.complianceConfig
         );
+        validateContainerObservability(
+          diagnostics,
+          `${field}.observability`,
+          containerAppOptional.observability,
+          config210
+        );
+        if (containerAppOptional.observability?.target_instance_count !== void 0 || containerAppOptional.observability?.target_instance_percentage !== void 0) {
+          diagnostics.errors.push(
+            `"${field}.observability" only supports enabling or disabling logs for Durable Object-managed Containers; instance targeting is not supported.`
+          );
+        }
+        validateDurableObjectContainerUnsafe(
+          diagnostics,
+          `${field}.unsafe`,
+          containerAppOptional.unsafe
+        );
         const unsupportedFields = Object.keys(containerAppOptional).filter(
-          (key) => !["name", "class_name", "scheduling_policy", "images"].includes(key)
+          (key) => ![
+            "name",
+            "class_name",
+            "scheduling_policy",
+            "images",
+            "observability",
+            "unsafe"
+          ].includes(key)
         );
         if (unsupportedFields.length > 0) {
           diagnostics.errors.push(
-            `Unsupported fields for Durable Object-managed Containers in ${field}: ${unsupportedFields.map((key) => `"${key}"`).join(",")}. Only "name", "class_name", "scheduling_policy", and "images" are supported.`
+            `Unsupported fields for Durable Object-managed Containers in ${field}: ${unsupportedFields.map((key) => `"${key}"`).join(",")}. Only "name", "class_name", "scheduling_policy", "images", "observability", and restricted "unsafe" settings are supported.`
           );
         }
         continue;
@@ -103012,6 +103068,8 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     "d1_databases",
     "r2_buckets",
     "vectorize",
+    "ai_search_namespaces",
+    "ai_search",
     "hyperdrive",
     "services",
     "analytics_engine_datasets",
@@ -103038,6 +103096,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     "logpush",
     "observability",
     "limits",
+    "placement",
     "cache"
   ]) && isValid;
   isValid = validateVars(envName)(
@@ -103052,6 +103111,12 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     previews.define,
     void 0
   ) && isValid;
+  normalizeAndValidatePlacement(
+    diagnostics,
+    void 0,
+    previews,
+    `${field}.placement`
+  );
   isValid = validateBindingsProperty(envName, validateDurableObjectBinding)(
     diagnostics,
     `${field}.durable_objects`,
@@ -103098,6 +103163,18 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     previews.vectorize,
     void 0
   ) && isValid;
+  isValid = validateBindingArray(envName, validateAISearchNamespaceBinding)(
+    diagnostics,
+    `${field}.ai_search_namespaces`,
+    previews.ai_search_namespaces,
+    void 0
+  ) && isValid;
+  isValid = validateBindingArray(envName, validateAISearchBinding)(
+    diagnostics,
+    `${field}.ai_search`,
+    previews.ai_search,
+    void 0
+  ) && isValid;
   isValid = validateBindingArray(envName, validateHyperdriveBinding)(
     diagnostics,
     `${field}.hyperdrive`,
@@ -104251,7 +104328,6 @@ var BINDING_LOCAL_SUPPORT = {
   flagship: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_service: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_network: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
-  websearch: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   agent_memory: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator"
 };
 function getBindingLocalSupport(type) {
@@ -104745,11 +104821,6 @@ function convertConfigToBindings(config210, options) {
         }
         break;
       }
-      case "websearch": {
-        const { binding, ...x } = info;
-        output[binding] = { type: "websearch", ...x };
-        break;
-      }
       case "agent_memory": {
         for (const { binding, ...x } of info) {
           output[binding] = { type: "agent_memory", ...x };
@@ -104922,7 +104993,6 @@ function printBindings(bindings, options) {
     bindings
   );
   const ai_search = extractBindingsOfType("ai_search", bindings);
-  const websearch = extractBindingsOfType("websearch", bindings);
   const agent_memory = extractBindingsOfType("agent_memory", bindings);
   const hyperdrive = extractBindingsOfType("hyperdrive", bindings);
   const r2_buckets = extractBindingsOfType("r2_bucket", bindings);
@@ -105140,16 +105210,6 @@ function printBindings(bindings, options) {
       }))
     );
   }
-  if (websearch.length > 0) {
-    output.push(
-      ...websearch.map(({ binding }) => ({
-        name: binding,
-        type: getBindingTypeFriendlyName("websearch"),
-        value: void 0,
-        mode: getMode({ isSimulatedLocally: false })
-      }))
-    );
-  }
   if (agent_memory.length > 0) {
     output.push(
       ...agent_memory.map(({ binding, namespace }) => ({
@@ -105631,7 +105691,7 @@ ${allTailConsumers.map(({ service, streaming }) => {
     log2(
       `${containersTitle}
 ${containers.map(
-        (container) => container.scheduling_policy === "durable_object" ? `- ${container.class_name} (durable_object)` : `- ${container.name} (${container.image})`
+        (container) => container.scheduling_policy === "durable_object" ? `- ${container.class_name ?? container.name} (durable_object)` : `- ${container.name} (${container.image})`
       ).join("\n")}`
     );
     log2("");
@@ -107635,7 +107695,7 @@ function getWorkerNameFromProject(projectPath) {
 }
 __name(getWorkerNameFromProject, "getWorkerNameFromProject");
 function toUrlPath(filePath) {
-  (0, import_node_console.assert)(
+  (0, import_node_assert2.default)(
     !/^[a-z]:/i.test(filePath),
     "Tried to convert a Windows file path with a drive to a URL path."
   );
@@ -112533,7 +112593,7 @@ var Yargs = YargsFactory(esm_default2);
 var yargs_default = Yargs;
 
 // package.json
-var version2 = "2.72.7";
+var version2 = "2.72.9";
 
 // src/metrics.ts
 var import_node_async_hooks = require("node:async_hooks");
@@ -115120,20 +115180,20 @@ __name2(getPropertyName, "getPropertyName");
 var package_default = {
   name: "frameworks_clis_info",
   dependencies: {
-    "@angular/create": "22.1.7",
+    "@angular/create": "22.1.8",
     "@tanstack/cli": "0.71.0",
-    "create-analog": "2.7.1",
+    "create-analog": "2.7.2",
     "create-astro": "5.2.4",
     "create-docusaurus": "3.10.2",
     "create-hono": "0.19.5",
-    "create-next-app": "16.3.4",
+    "create-next-app": "16.3.5",
     "create-qwik": "1.20.0",
     "create-react-router": "8.3.1",
     "create-rwsdk": "3.1.3",
     "create-solid": "0.12.0",
     "create-vike": "0.0.681",
     "create-vinext-app": "1.0.0-beta.2",
-    "create-vite": "9.2.0",
+    "create-vite": "9.2.1",
     "create-vue": "3.23.0",
     "create-waku": "0.12.5-1.0.0-alpha.10-0",
     gatsby: "5.16.1",
@@ -117699,6 +117759,27 @@ For all limits and quotas, retrieve from the product's \`/platform/limits/\` pag
 
 Run \`wrangler types\` after changing bindings in wrangler.jsonc.
 
+## Local Explorer (Debugging & Inspection)
+
+When running \`npx wrangler dev\`, a Local Explorer API is available for inspecting and debugging local Workers, bindings, and storage state. The API base URL is printed in the terminal when the dev server starts.
+
+Key endpoints (relative to the dev server URL):
+
+| Endpoint | Description |
+|----------|-------------|
+| \`GET /cdn-cgi/local/explorer/api/local/workers\` | List local Workers and their bindings |
+| \`GET /cdn-cgi/local/explorer/api/storage/kv/namespaces\` | List KV namespaces |
+| \`GET /cdn-cgi/local/explorer/api/d1/database\` | List D1 databases |
+| \`GET /cdn-cgi/local/explorer/api/r2/buckets\` | List R2 buckets |
+| \`GET /cdn-cgi/local/explorer/api/workers/durable_objects/namespaces\` | List Durable Object namespaces |
+| \`GET /cdn-cgi/local/explorer/api/workflows\` | List Workflows |
+| \`POST /cdn-cgi/local/explorer/api/local/observability/query\` | Run a read-only SQL query (SELECT/WITH only) over captured request traces and console logs. Tables: \`spans\`, \`logs\` (read attributes via \`json(attributes)\`). Example: \`curl -X POST <base>/cdn-cgi/local/explorer/api/local/observability/query -H 'Content-Type: application/json' -d '{"sql":"SELECT service, name, outcome, duration_ms FROM spans WHERE parent_id IS NULL LIMIT 20"}'\` |
+| \`POST /cdn-cgi/local/explorer/api/local/observability/clear\` | Clear all captured traces and logs |
+
+If the routes above don't cover what you need, fetch the full OpenAPI schema (large - use only as a last resort): \`GET /cdn-cgi/local/explorer/api\`
+
+Use the Local Explorer to debug issues by inspecting storage state (KV keys, D1 rows, R2 objects, DO storage), viewing Worker bindings, and querying request traces and logs captured during the dev session.
+
 ## Node.js Compatibility
 
 https://developers.cloudflare.com/workers/runtime-apis/nodejs/
@@ -117725,7 +117806,7 @@ If the application uses Durable Objects or Workflows, refer to the relevant best
 var import_node_assert7 = __toESM(require("node:assert"));
 
 // ../wrangler/package.json
-var version3 = "4.131.1";
+var version3 = "4.133.0";
 
 // src/git.ts
 var offerGit = async (ctx) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudflare",
-  "version": "2.72.7",
+  "version": "2.72.9",
   "description": "A CLI for creating and deploying new applications to Cloudflare.",
   "keywords": [
     "cloudflare",
@@ -31,7 +31,7 @@
     "@babel/parser": "^7.21.3",
     "@babel/types": "^7.21.4",
     "@clack/prompts": "^1.2.0",
-    "@cloudflare/workers-types": "^5.20260911.1",
+    "@cloudflare/workers-types": "^5.20260916.1",
     "@types/command-exists": "^1.2.0",
     "@types/cross-spawn": "^6.0.2",
     "@types/deepmerge": "^2.2.0",
@@ -50,7 +50,6 @@
     "dns2": "^2.1.0",
     "dotenv": "16.3.1",
     "esbuild": "0.28.1",
-    "execa": "^7.1.1",
     "exit-hook": "2.2.1",
     "get-port": "^7.1.0",
     "haikunator": "^2.1.2",
@@ -71,13 +70,13 @@
     "which-pm-runs": "^1.1.0",
     "wrap-ansi": "^9.0.0",
     "yargs": "^17.7.2",
-    "@cloudflare/cli-shared-helpers": "0.1.29",
+    "@cloudflare/cli-shared-helpers": "0.1.32",
     "@cloudflare/mock-npm-registry": "0.0.0",
     "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/vite-plugin": "1.54.8",
+    "@cloudflare/vite-plugin": "1.54.11",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.38.0",
-    "wrangler": "4.131.1"
+    "@cloudflare/workers-utils": "0.39.1",
+    "wrangler": "4.133.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/templates/common/js/src/index.js

@@ -37,8 +37,8 @@ export default {
 		return new Response(
 			`Try making requests to:
       <ul>
-      <li><code><a href="/redirect?redirectUrl=https://example.com/">/redirect?redirectUrl=https://example.com/</a></code>,</li>
-      <li><code><a href="/proxy?modify&proxyUrl=https://example.com/">/proxy?modify&proxyUrl=https://example.com/</a></code>, or</li>
+      <li><code><a href="/redirect">/redirect</a></code>,</li>
+      <li><code><a href="/proxy?modify">/proxy?modify</a></code>, or</li>
       <li><code><a href="/api/todos">/api/todos</a></code></li>`,
 			{ headers: { 'Content-Type': 'text/html' } }
 		);

package/templates/common/js/src/proxy.js

@@ -1,16 +1,14 @@
+// Keep the destination fixed to prevent this Worker from becoming an open proxy.
+const PROXY_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx) {
 		const url = new URL(request.url);
 
-		const proxyUrl = url.searchParams.get('proxyUrl'); // get a query param value (?proxyUrl=...)
-		const modify = url.searchParams.has('modify'); // check if a query param is set (?proxyUrl=...&modify)
-
-		if (!proxyUrl) {
-			return new Response('Bad request: Missing `proxyUrl` query param', { status: 400 });
-		}
+		const modify = url.searchParams.has('modify'); // check if a query param is set (?modify)
 
 		// make subrequests with the global `fetch()` function
-		let res = await fetch(proxyUrl, request);
+		let res = await fetch(PROXY_URL, request);
 
 		// optionally, modify the respone
 		if (modify) {

package/templates/common/js/src/redirect.js

@@ -1,13 +1,9 @@
+// Keep the destination fixed to prevent this Worker from becoming an open redirect.
+const REDIRECT_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx) {
-		const url = new URL(request.url);
-		const redirectUrl = url.searchParams.get('redirectUrl'); // get a query param value (?redirectUrl=...)
-
-		if (!redirectUrl) {
-			return new Response('Bad request: Missing `redirectUrl` query param', { status: 400 });
-		}
-
 		// The Response class has static methods to create common Response objects as a convenience
-		return Response.redirect(redirectUrl);
+		return Response.redirect(REDIRECT_URL);
 	},
 };

package/templates/common/ts/src/index.ts

@@ -40,8 +40,8 @@ export default {
 		return new Response(
 			`Try making requests to:
       <ul>
-      <li><code><a href="/redirect?redirectUrl=https://example.com/">/redirect?redirectUrl=https://example.com/</a></code>,</li>
-      <li><code><a href="/proxy?modify&proxyUrl=https://example.com/">/proxy?modify&proxyUrl=https://example.com/</a></code>, or</li>
+      <li><code><a href="/redirect">/redirect</a></code>,</li>
+      <li><code><a href="/proxy?modify">/proxy?modify</a></code>, or</li>
       <li><code><a href="/api/todos">/api/todos</a></code></li>`,
 			{ headers: { 'Content-Type': 'text/html' } }
 		);

package/templates/common/ts/src/proxy.ts

@@ -1,16 +1,14 @@
+// Keep the destination fixed to prevent this Worker from becoming an open proxy.
+const PROXY_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx): Promise<Response> {
 		const url = new URL(request.url);
 
-		const proxyUrl = url.searchParams.get('proxyUrl'); // get a query param value (?proxyUrl=...)
-		const modify = url.searchParams.has('modify'); // check if a query param is set (?proxyUrl=...&modify)
-
-		if (!proxyUrl) {
-			return new Response('Bad request: Missing `proxyUrl` query param', { status: 400 });
-		}
+		const modify = url.searchParams.has('modify'); // check if a query param is set (?modify)
 
 		// make subrequests with the global `fetch()` function
-		let res = await fetch(proxyUrl, request);
+		let res = await fetch(PROXY_URL, request);
 
 		// optionally, modify the respone
 		if (modify) {

package/templates/common/ts/src/redirect.ts

@@ -1,13 +1,9 @@
+// Keep the destination fixed to prevent this Worker from becoming an open redirect.
+const REDIRECT_URL = 'https://example.com/';
+
 export default {
 	async fetch(request, env, ctx): Promise<Response> {
-		const url = new URL(request.url);
-		const redirectUrl = url.searchParams.get('redirectUrl'); // get a query param value (?redirectUrl=...)
-
-		if (!redirectUrl) {
-			return new Response('Bad request: Missing `redirectUrl` query param', { status: 400 });
-		}
-
 		// The Response class has static methods to create common Response objects as a convenience
-		return Response.redirect(redirectUrl);
+		return Response.redirect(REDIRECT_URL);
 	},
 } satisfies ExportedHandler<Env>;