create-cloudflare 2.73.1 → 2.73.2

package/dist/cli.js

@@ -98629,11 +98629,13 @@ var defaultWranglerConfig = {
   containers: void 0,
   send_email: [],
   browser: void 0,
+  analytics: void 0,
   unsafe: {},
   mtls_certificates: [],
   tail_consumers: void 0,
   streaming_tail_consumers: void 0,
   pipelines: [],
+  k2: [],
   vpc_services: [],
   vpc_networks: []
 };
@@ -99074,6 +99076,7 @@ var friendlyBindingNames = {
   analytics_engine_datasets: "Analytics Engine Dataset",
   text_blobs: "Text Blob",
   browser: "Browser Run",
+  analytics: "Analytics SQL",
   ai: "AI",
   images: "Images",
   stream: "Stream",
@@ -99086,6 +99089,7 @@ var friendlyBindingNames = {
   mtls_certificates: "mTLS Certificate",
   workflows: "Workflow",
   pipelines: "Pipeline",
+  k2: "K2 Stream",
   secrets_store_secrets: "Secrets Store Secret",
   artifacts: "Artifacts",
   ratelimits: "Rate Limit",
@@ -99106,6 +99110,7 @@ var bindingTypeFriendlyNames = {
   wasm_module: "Wasm Module",
   text_blob: "Text Blob",
   browser: "Browser Run",
+  analytics: "Analytics SQL",
   ai: "AI",
   images: "Images",
   stream: "Stream",
@@ -99127,6 +99132,7 @@ var bindingTypeFriendlyNames = {
   dispatch_namespace: "Dispatch Namespace",
   mtls_certificate: "mTLS Certificate",
   pipeline: "Pipeline",
+  k2: "K2 Stream",
   secrets_store_secret: "Secrets Store Secret",
   artifacts: "Artifacts",
   logfwdr: "logfwdr",
@@ -100494,6 +100500,16 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateNamedSimpleBinding(envName),
       void 0
     ),
+    analytics: notInheritable(
+      diagnostics,
+      topLevelEnv,
+      rawConfig,
+      rawEnv,
+      envName,
+      "analytics",
+      validateNamedSimpleBinding(envName),
+      void 0
+    ),
     ai: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -100544,6 +100560,16 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateBindingArray(envName, validatePipelineBinding),
       []
     ),
+    k2: notInheritable(
+      diagnostics,
+      topLevelEnv,
+      rawConfig,
+      rawEnv,
+      envName,
+      "k2",
+      validateBindingArray(envName, validateK2Binding),
+      []
+    ),
     secrets_store_secrets: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -101761,6 +101787,7 @@ var validateUnsafeBinding = /* @__PURE__ */ __name((diagnostics, field, value) =
       "data_blob",
       "text_blob",
       "browser",
+      "analytics",
       "ai",
       "ai_search_namespace",
       "ai_search",
@@ -101773,6 +101800,7 @@ var validateUnsafeBinding = /* @__PURE__ */ __name((diagnostics, field, value) =
       "logfwdr",
       "mtls_certificate",
       "pipeline",
+      "k2",
       "worker_loader",
       "vpc_service",
       "flagship",
@@ -102429,9 +102457,9 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
           constraints.jurisdiction,
           "string"
         );
-        if (constraints.jurisdiction && !["eu", "fedramp"].includes(constraints.jurisdiction)) {
+        if (constraints.jurisdiction && !["eu", "fedramp", "us"].includes(constraints.jurisdiction)) {
           diagnostics.errors.push(
-            `${field}.constraints.jurisdiction must be one of: "eu", "fedramp"`
+            `${field}.constraints.jurisdiction must be one of: "eu", "fedramp", "us"`
           );
         }
         if (validateOptionalTypedArray(
@@ -103724,6 +103752,38 @@ var validatePipelineBinding = /* @__PURE__ */ __name((diagnostics, field, value)
   ]);
   return isValid;
 }, "validatePipelineBinding");
+var validateK2Binding = /* @__PURE__ */ __name((diagnostics, field, value) => {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    diagnostics.errors.push(
+      `"${field}" bindings should be objects, but got ${JSON.stringify(value)}`
+    );
+    return false;
+  }
+  let isValid = true;
+  if (!isRequiredProperty(value, "binding", "string")) {
+    diagnostics.errors.push(`"${field}" must have a string "binding" field.`);
+    isValid = false;
+  }
+  if (!isRequiredProperty(value, "stream", "string")) {
+    diagnostics.errors.push(`"${field}" must have a string "stream" field.`);
+    isValid = false;
+  }
+  if (!isRemoteValid(value, field, diagnostics)) {
+    isValid = false;
+  }
+  if ("remote" in value && value.remote === false) {
+    diagnostics.errors.push(
+      `"${field}" does not support \`remote: false\`. K2 bindings always access remote resources; omit "remote" or set \`remote: true\`.`
+    );
+    isValid = false;
+  }
+  validateAdditionalProperties(diagnostics, field, Object.keys(value), [
+    "binding",
+    "stream",
+    "remote"
+  ]);
+  return isValid;
+}, "validateK2Binding");
 var validateSecretsStoreSecretBinding = /* @__PURE__ */ __name((diagnostics, field, value) => {
   if (typeof value !== "object" || value === null) {
     diagnostics.errors.push(
@@ -104014,11 +104074,13 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     "streaming_tail_consumers",
     "unsafe",
     "browser",
+    "analytics",
     "ai",
     "images",
     "stream",
     "media",
     "pipelines",
+    "k2",
     "secrets_store_secrets",
     "artifacts",
     "unsafe_hello_world",
@@ -104168,6 +104230,14 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
       void 0
     ) && isValid;
   }
+  if (previews.analytics !== void 0) {
+    isValid = validateNamedSimpleBinding(envName)(
+      diagnostics,
+      `${field}.analytics`,
+      previews.analytics,
+      void 0
+    ) && isValid;
+  }
   if (previews.ai !== void 0) {
     isValid = validateAIBinding(envName)(
       diagnostics,
@@ -104212,6 +104282,12 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     previews.secrets_store_secrets,
     void 0
   ) && isValid;
+  isValid = validateBindingArray(envName, validateK2Binding)(
+    diagnostics,
+    `${field}.k2`,
+    previews.k2,
+    void 0
+  ) && isValid;
   isValid = validateBindingArray(envName, validateArtifactsBinding)(
     diagnostics,
     `${field}.artifacts`,
@@ -105348,6 +105424,7 @@ var BINDING_LOCAL_SUPPORT = {
   mtls_certificate: "remote",
   dispatch_namespace: "remote",
   // Reach out to the @cloudflare/wrangler team before adding anything here
+  k2: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai_search: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai_search_namespace: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
@@ -105355,7 +105432,8 @@ var BINDING_LOCAL_SUPPORT = {
   artifacts: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_service: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_network: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
-  agent_memory: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator"
+  agent_memory: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
+  analytics: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator"
 };
 function getBindingLocalSupport(type) {
   if (type in BINDING_LOCAL_SUPPORT) {
@@ -105686,6 +105764,13 @@ function mapWorkerMetadataBindings(bindings) {
           };
         }
         break;
+      case "analytics":
+        {
+          configObj.analytics = {
+            binding: binding.name
+          };
+        }
+        break;
       case "ai":
         {
           configObj.ai = {
@@ -105941,6 +106026,12 @@ function mapWorkerMetadataBindings(bindings) {
           }
         ];
         break;
+      case "k2":
+        configObj.k2 = [
+          ...configObj.k2 ?? [],
+          { binding: binding.name, stream: binding.stream }
+        ];
+        break;
       case "assets":
         configObj.assets = {
           binding: binding.name
@@ -106030,7 +106121,7 @@ function mapWorkerMetadataBindings(bindings) {
   }, {});
 }
 __name(mapWorkerMetadataBindings, "mapWorkerMetadataBindings");
-var DEFAULT_COMPAT_DATE = "2026-09-26";
+var DEFAULT_COMPAT_DATE = "2026-10-01";
 function constructWranglerConfig(config50) {
   const mappedBindings = mapWorkerMetadataBindings(config50.bindings);
   const durableObjectClassNames = config50.bindings.filter(
@@ -106178,6 +106269,11 @@ function convertConfigToBindings(config50, options) {
         output[binding] = { type: "browser", ...x };
         break;
       }
+      case "analytics": {
+        const { binding, ...x } = info;
+        output[binding] = { type: "analytics", ...x };
+        break;
+      }
       case "durable_objects": {
         for (const { name: name3, ...x } of info.bindings ?? []) {
           output[name3] = { type: "durable_object_namespace", ...x };
@@ -106333,6 +106429,15 @@ function convertConfigToBindings(config50, options) {
         }
         break;
       }
+      case "k2": {
+        if (pages) {
+          break;
+        }
+        for (const { binding, ...x } of info) {
+          output[binding] = { type: "k2", ...x };
+        }
+        break;
+      }
       case "secrets_store_secrets": {
         for (const { binding, ...x } of info) {
           output[binding] = { type: "secrets_store_secret", ...x };
@@ -106490,6 +106595,7 @@ function printBindings(bindings, options) {
   );
   const text_blobs = extractBindingsOfType("text_blob", bindings);
   const browser = extractBindingsOfType("browser", bindings);
+  const analytics = extractBindingsOfType("analytics", bindings);
   const images = extractBindingsOfType("images", bindings);
   const stream = extractBindingsOfType("stream", bindings);
   const ai = extractBindingsOfType("ai", bindings);
@@ -106507,6 +106613,7 @@ function printBindings(bindings, options) {
   );
   const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings);
   const pipelines = extractBindingsOfType("pipeline", bindings);
+  const k2 = extractBindingsOfType("k2", bindings);
   const ratelimits = extractBindingsOfType("ratelimit", bindings);
   const assets = extractBindingsOfType("assets", bindings);
   const unsafe_hello_world = extractBindingsOfType(
@@ -106886,6 +106993,18 @@ function printBindings(bindings, options) {
       }))
     );
   }
+  if (analytics.length > 0) {
+    output.push(
+      ...analytics.map(({ binding, remote }) => ({
+        name: binding,
+        type: getBindingTypeFriendlyName("analytics"),
+        value: void 0,
+        mode: getMode({
+          isSimulatedLocally: (remote === true || remote === void 0) && !context.remoteBindingsDisabled ? false : void 0
+        })
+      }))
+    );
+  }
   if (images.length > 0) {
     output.push(
       ...images.map(({ binding, remote }) => ({
@@ -106948,6 +107067,19 @@ function printBindings(bindings, options) {
       )
     );
   }
+  if (k2.length > 0) {
+    output.push(
+      ...k2.map(({ binding, stream: k2Stream }) => ({
+        name: binding,
+        type: getBindingTypeFriendlyName("k2"),
+        value: k2Stream,
+        mode: getMode({
+          // K2 always writes to the real stream; `remote: false` is rejected during validation.
+          isSimulatedLocally: context.remoteBindingsDisabled ? void 0 : false
+        })
+      }))
+    );
+  }
   if (ratelimits.length > 0) {
     output.push(
       ...ratelimits.map(({ name: name3, simple }) => ({
@@ -108250,13 +108382,16 @@ You can try:
 __name(validateBinary, "validateBinary");
 function redactCloudflaredArgsForLogging(args) {
   const redacted = [...args];
+  const sensitiveArgs = ["--token", "--allowed-mail"];
   for (let i = 0; i < redacted.length; i++) {
     const arg = redacted[i];
-    if (arg === "--token" && i + 1 < redacted.length) {
-      redacted[i + 1] = "[REDACTED]";
-    }
-    if (arg.startsWith("--token=")) {
-      redacted[i] = "--token=[REDACTED]";
+    for (const sensitiveArg of sensitiveArgs) {
+      if (arg === sensitiveArg && i + 1 < redacted.length) {
+        redacted[i + 1] = "[REDACTED]";
+      }
+      if (arg.startsWith(`${sensitiveArg}=`)) {
+        redacted[i] = `${sensitiveArg}=[REDACTED]`;
+      }
     }
   }
   return redacted;
@@ -108535,6 +108670,27 @@ async function spawnCloudflared(args, options) {
     confirmDownload: options?.confirmDownload,
     logger
   });
+  if (args.some(
+    (arg) => arg === "--allowed-mail" || arg.startsWith("--allowed-mail=")
+  )) {
+    const minimumVersion = "2026.9.2";
+    const installedVersion = getInstalledVersion(binPath);
+    if (!installedVersion || isVersionOutdated(installedVersion, minimumVersion)) {
+      throw new UserError(
+        `[cloudflared] --allowed-mail requires cloudflared ${minimumVersion} or later.
+
+` + (installedVersion ? `The selected binary (${binPath}) is version ${installedVersion}.
+
+` : `Could not determine the version of the selected binary (${binPath}).
+
+`) + `Update cloudflared in your PATH or set CLOUDFLARED_PATH to a compatible binary.
+Download instructions: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/`,
+        {
+          telemetryMessage: "tunnel cloudflared allowed mail unsupported version"
+        }
+      );
+    }
+  }
   logger?.debug(
     `Spawning cloudflared: ${binPath} ${redactCloudflaredArgsForLogging(args).join(" ")}`
   );
@@ -114190,7 +114346,7 @@ var Yargs = YargsFactory(esm_default2);
 var yargs_default = Yargs;
 
 // package.json
-var version2 = "2.73.1";
+var version2 = "2.73.2";
 
 // src/metrics.ts
 var import_node_async_hooks = require("node:async_hooks");
@@ -116906,7 +117062,7 @@ var package_default = {
     "create-waku": "0.12.5-1.0.0-alpha.10-0",
     gatsby: "5.16.1",
     nuxi: "3.37.0",
-    sv: "0.17.1"
+    sv: "1.0.1"
   },
   info: [
     "This package.json is only used to keep track of the frameworks cli dependencies",
@@ -119103,7 +119259,7 @@ var updateTypeDefinitions = (ctx) => {
     }
   });
 };
-var typesPath2 = "src/worker-configuration.d.ts";
+var typesPath2 = "./src/worker-configuration.d.ts";
 var config39 = {
   configVersion: 1,
   id: "svelte",
@@ -119601,7 +119757,7 @@ If the application uses Durable Objects or Workflows, refer to the relevant best
 var import_node_assert7 = __toESM(require("node:assert"));
 
 // ../wrangler/package.json
-var version3 = "4.143.1";
+var version3 = "4.147.0";
 
 // src/git.ts
 var offerGit = async (ctx) => {
@@ -123303,6 +123459,9 @@ async function updateTsConfig(ctx, { usesNodeCompat }) {
     }
     const currentTypes = config50.compilerOptions?.types ?? [];
     let newTypes = new Set(currentTypes);
+    if (config50.extends === "$app/tsconfig") {
+      newTypes.add("$app/types");
+    }
     if (ctx.template.workersTypes === "installed") {
       const entrypointVersion = getLatestTypesEntrypoint(ctx);
       const explicitEntrypoint = currentTypes.some(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudflare",
-  "version": "2.73.1",
+  "version": "2.73.2",
   "description": "A CLI for creating and deploying new applications to Cloudflare.",
   "keywords": [
     "cloudflare",
@@ -31,7 +31,7 @@
     "@babel/parser": "^7.21.3",
     "@babel/types": "^7.21.4",
     "@clack/prompts": "^1.2.0",
-    "@cloudflare/workers-types": "^5.20260926.1",
+    "@cloudflare/workers-types": "^5.20261001.1",
     "@types/command-exists": "^1.2.0",
     "@types/cross-spawn": "^6.0.2",
     "@types/deepmerge": "^2.2.0",
@@ -70,13 +70,13 @@
     "which-pm-runs": "^1.1.0",
     "wrap-ansi": "^9.0.0",
     "yargs": "^17.7.2",
-    "@cloudflare/cli-shared-helpers": "0.2.0",
-    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/cli-shared-helpers": "0.2.3",
     "@cloudflare/mock-npm-registry": "0.0.0",
+    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/vite-plugin": "1.62.5",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/vite-plugin": "1.62.1",
-    "@cloudflare/workers-utils": "0.44.0",
-    "wrangler": "4.143.1"
+    "@cloudflare/workers-utils": "0.46.0",
+    "wrangler": "4.147.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/templates/svelte/pages/c3.ts

@@ -126,7 +126,7 @@ const updateTypeDefinitions = (ctx: C3Context) => {
 	});
 };
 
-const typesPath = "src/worker-configuration.d.ts";
+const typesPath = "./src/worker-configuration.d.ts";
 const config: TemplateConfig = {
 	configVersion: 1,
 	id: "svelte",