create-cloudflare 2.73.1 → 2.73.3

package/dist/cli.js

@@ -92534,7 +92534,7 @@ function formatZodError(error51) {
 }
 __name(formatZodError, "formatZodError");
 
-// ../workers-utils/dist/chunk-AUSY7DKT.mjs
+// ../workers-utils/dist/chunk-TAK63GWY.mjs
 var import_node_module6 = require("node:module");
 
 // ../workers-utils/dist/chunk-M3RITKR3.mjs
@@ -92583,7 +92583,7 @@ function dedent(templ) {
 __name(dedent, "dedent");
 var esm_default = dedent;
 
-// ../workers-utils/dist/chunk-AUSY7DKT.mjs
+// ../workers-utils/dist/chunk-TAK63GWY.mjs
 init_chunk_U6NEESU5();
 var import_node_fs = require("node:fs");
 var import_node_path = __toESM(require("node:path"), 1);
@@ -95581,12 +95581,23 @@ function findRedirectedWranglerConfig(cwd, userConfigPath) {
     );
   }
   if (userConfigPath) {
-    if (import_node_path.default.join(import_node_path.default.dirname(userConfigPath), PATH_TO_DEPLOY_CONFIG) !== deployConfigPath) {
+    const expectedDeployConfigPath = import_node_path.default.join(
+      import_node_path.default.dirname(userConfigPath),
+      PATH_TO_DEPLOY_CONFIG
+    );
+    if (expectedDeployConfigPath !== deployConfigPath) {
       throw new UserError(
         esm_default`
 					Found both a user configuration file at "${import_node_path.default.relative(".", userConfigPath)}"
 					and a deploy configuration file at "${import_node_path.default.relative(".", deployConfigPath)}".
 					But these do not share the same base path so it is not clear which should be used.
+
+					A deploy configuration file is generated by a build tool to redirect Wrangler to the configuration it generated.
+					It is only applied when it sits alongside the user configuration file, which here would be "${import_node_path.default.relative(".", expectedDeployConfigPath)}".
+
+					Please either delete "${import_node_path.default.relative(".", deployConfigPath)}" if it is left over from a previous build,
+					or try running this command from the directory containing the configuration you want to use.
+					See https://developers.cloudflare.com/workers/wrangler/configuration/#generated-wrangler-configuration
 				`,
         { telemetryMessage: false }
       );
@@ -98629,11 +98640,13 @@ var defaultWranglerConfig = {
   containers: void 0,
   send_email: [],
   browser: void 0,
+  analytics: void 0,
   unsafe: {},
   mtls_certificates: [],
   tail_consumers: void 0,
   streaming_tail_consumers: void 0,
   pipelines: [],
+  k2: [],
   vpc_services: [],
   vpc_networks: []
 };
@@ -99074,6 +99087,7 @@ var friendlyBindingNames = {
   analytics_engine_datasets: "Analytics Engine Dataset",
   text_blobs: "Text Blob",
   browser: "Browser Run",
+  analytics: "Analytics SQL",
   ai: "AI",
   images: "Images",
   stream: "Stream",
@@ -99086,6 +99100,7 @@ var friendlyBindingNames = {
   mtls_certificates: "mTLS Certificate",
   workflows: "Workflow",
   pipelines: "Pipeline",
+  k2: "K2 Stream",
   secrets_store_secrets: "Secrets Store Secret",
   artifacts: "Artifacts",
   ratelimits: "Rate Limit",
@@ -99106,6 +99121,7 @@ var bindingTypeFriendlyNames = {
   wasm_module: "Wasm Module",
   text_blob: "Text Blob",
   browser: "Browser Run",
+  analytics: "Analytics SQL",
   ai: "AI",
   images: "Images",
   stream: "Stream",
@@ -99127,6 +99143,7 @@ var bindingTypeFriendlyNames = {
   dispatch_namespace: "Dispatch Namespace",
   mtls_certificate: "mTLS Certificate",
   pipeline: "Pipeline",
+  k2: "K2 Stream",
   secrets_store_secret: "Secrets Store Secret",
   artifacts: "Artifacts",
   logfwdr: "logfwdr",
@@ -100494,6 +100511,16 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateNamedSimpleBinding(envName),
       void 0
     ),
+    analytics: notInheritable(
+      diagnostics,
+      topLevelEnv,
+      rawConfig,
+      rawEnv,
+      envName,
+      "analytics",
+      validateNamedSimpleBinding(envName),
+      void 0
+    ),
     ai: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -100544,6 +100571,16 @@ function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDisp
       validateBindingArray(envName, validatePipelineBinding),
       []
     ),
+    k2: notInheritable(
+      diagnostics,
+      topLevelEnv,
+      rawConfig,
+      rawEnv,
+      envName,
+      "k2",
+      validateBindingArray(envName, validateK2Binding),
+      []
+    ),
     secrets_store_secrets: notInheritable(
       diagnostics,
       topLevelEnv,
@@ -101645,6 +101682,13 @@ var validateAssetsConfig = /* @__PURE__ */ __name((diagnostics, field, value) =>
     "string",
     ["single-page-application", "404-page", "none"]
   ) && isValid;
+  isValid = validateOptionalProperty(
+    diagnostics,
+    field,
+    "base_path",
+    value.base_path,
+    "string"
+  ) && isValid;
   if (value.run_worker_first !== void 0) {
     if (typeof value.run_worker_first === "boolean") {
       isValid = validateOptionalProperty(
@@ -101675,6 +101719,7 @@ var validateAssetsConfig = /* @__PURE__ */ __name((diagnostics, field, value) =>
     "binding",
     "html_handling",
     "not_found_handling",
+    "base_path",
     "run_worker_first"
   ]) && isValid;
   return isValid;
@@ -101761,6 +101806,7 @@ var validateUnsafeBinding = /* @__PURE__ */ __name((diagnostics, field, value) =
       "data_blob",
       "text_blob",
       "browser",
+      "analytics",
       "ai",
       "ai_search_namespace",
       "ai_search",
@@ -101773,6 +101819,7 @@ var validateUnsafeBinding = /* @__PURE__ */ __name((diagnostics, field, value) =
       "logfwdr",
       "mtls_certificate",
       "pipeline",
+      "k2",
       "worker_loader",
       "vpc_service",
       "flagship",
@@ -102429,9 +102476,9 @@ function validateContainerApp(envName, topLevelName, configPath, options = {}) {
           constraints.jurisdiction,
           "string"
         );
-        if (constraints.jurisdiction && !["eu", "fedramp"].includes(constraints.jurisdiction)) {
+        if (constraints.jurisdiction && !["eu", "fedramp", "us"].includes(constraints.jurisdiction)) {
           diagnostics.errors.push(
-            `${field}.constraints.jurisdiction must be one of: "eu", "fedramp"`
+            `${field}.constraints.jurisdiction must be one of: "eu", "fedramp", "us"`
           );
         }
         if (validateOptionalTypedArray(
@@ -103724,6 +103771,38 @@ var validatePipelineBinding = /* @__PURE__ */ __name((diagnostics, field, value)
   ]);
   return isValid;
 }, "validatePipelineBinding");
+var validateK2Binding = /* @__PURE__ */ __name((diagnostics, field, value) => {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    diagnostics.errors.push(
+      `"${field}" bindings should be objects, but got ${JSON.stringify(value)}`
+    );
+    return false;
+  }
+  let isValid = true;
+  if (!isRequiredProperty(value, "binding", "string")) {
+    diagnostics.errors.push(`"${field}" must have a string "binding" field.`);
+    isValid = false;
+  }
+  if (!isRequiredProperty(value, "stream", "string")) {
+    diagnostics.errors.push(`"${field}" must have a string "stream" field.`);
+    isValid = false;
+  }
+  if (!isRemoteValid(value, field, diagnostics)) {
+    isValid = false;
+  }
+  if ("remote" in value && value.remote === false) {
+    diagnostics.errors.push(
+      `"${field}" does not support \`remote: false\`. K2 bindings always access remote resources; omit "remote" or set \`remote: true\`.`
+    );
+    isValid = false;
+  }
+  validateAdditionalProperties(diagnostics, field, Object.keys(value), [
+    "binding",
+    "stream",
+    "remote"
+  ]);
+  return isValid;
+}, "validateK2Binding");
 var validateSecretsStoreSecretBinding = /* @__PURE__ */ __name((diagnostics, field, value) => {
   if (typeof value !== "object" || value === null) {
     diagnostics.errors.push(
@@ -104014,11 +104093,13 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     "streaming_tail_consumers",
     "unsafe",
     "browser",
+    "analytics",
     "ai",
     "images",
     "stream",
     "media",
     "pipelines",
+    "k2",
     "secrets_store_secrets",
     "artifacts",
     "unsafe_hello_world",
@@ -104168,6 +104249,14 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
       void 0
     ) && isValid;
   }
+  if (previews.analytics !== void 0) {
+    isValid = validateNamedSimpleBinding(envName)(
+      diagnostics,
+      `${field}.analytics`,
+      previews.analytics,
+      void 0
+    ) && isValid;
+  }
   if (previews.ai !== void 0) {
     isValid = validateAIBinding(envName)(
       diagnostics,
@@ -104212,6 +104301,12 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName, configPath) => (di
     previews.secrets_store_secrets,
     void 0
   ) && isValid;
+  isValid = validateBindingArray(envName, validateK2Binding)(
+    diagnostics,
+    `${field}.k2`,
+    previews.k2,
+    void 0
+  ) && isValid;
   isValid = validateBindingArray(envName, validateArtifactsBinding)(
     diagnostics,
     `${field}.artifacts`,
@@ -105348,6 +105443,7 @@ var BINDING_LOCAL_SUPPORT = {
   mtls_certificate: "remote",
   dispatch_namespace: "remote",
   // Reach out to the @cloudflare/wrangler team before adding anything here
+  k2: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai_search: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   ai_search_namespace: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
@@ -105355,7 +105451,8 @@ var BINDING_LOCAL_SUPPORT = {
   artifacts: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_service: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
   vpc_network: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
-  agent_memory: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator"
+  agent_memory: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator",
+  analytics: "DO-NOT-USE-this-resource-will-never-have-a-local-simulator"
 };
 function getBindingLocalSupport(type) {
   if (type in BINDING_LOCAL_SUPPORT) {
@@ -105686,6 +105783,13 @@ function mapWorkerMetadataBindings(bindings) {
           };
         }
         break;
+      case "analytics":
+        {
+          configObj.analytics = {
+            binding: binding.name
+          };
+        }
+        break;
       case "ai":
         {
           configObj.ai = {
@@ -105941,6 +106045,12 @@ function mapWorkerMetadataBindings(bindings) {
           }
         ];
         break;
+      case "k2":
+        configObj.k2 = [
+          ...configObj.k2 ?? [],
+          { binding: binding.name, stream: binding.stream }
+        ];
+        break;
       case "assets":
         configObj.assets = {
           binding: binding.name
@@ -106030,7 +106140,7 @@ function mapWorkerMetadataBindings(bindings) {
   }, {});
 }
 __name(mapWorkerMetadataBindings, "mapWorkerMetadataBindings");
-var DEFAULT_COMPAT_DATE = "2026-09-26";
+var DEFAULT_COMPAT_DATE = "2026-10-06";
 function constructWranglerConfig(config50) {
   const mappedBindings = mapWorkerMetadataBindings(config50.bindings);
   const durableObjectClassNames = config50.bindings.filter(
@@ -106178,6 +106288,11 @@ function convertConfigToBindings(config50, options) {
         output[binding] = { type: "browser", ...x };
         break;
       }
+      case "analytics": {
+        const { binding, ...x } = info;
+        output[binding] = { type: "analytics", ...x };
+        break;
+      }
       case "durable_objects": {
         for (const { name: name3, ...x } of info.bindings ?? []) {
           output[name3] = { type: "durable_object_namespace", ...x };
@@ -106333,6 +106448,15 @@ function convertConfigToBindings(config50, options) {
         }
         break;
       }
+      case "k2": {
+        if (pages) {
+          break;
+        }
+        for (const { binding, ...x } of info) {
+          output[binding] = { type: "k2", ...x };
+        }
+        break;
+      }
       case "secrets_store_secrets": {
         for (const { binding, ...x } of info) {
           output[binding] = { type: "secrets_store_secret", ...x };
@@ -106490,6 +106614,7 @@ function printBindings(bindings, options) {
   );
   const text_blobs = extractBindingsOfType("text_blob", bindings);
   const browser = extractBindingsOfType("browser", bindings);
+  const analytics = extractBindingsOfType("analytics", bindings);
   const images = extractBindingsOfType("images", bindings);
   const stream = extractBindingsOfType("stream", bindings);
   const ai = extractBindingsOfType("ai", bindings);
@@ -106507,6 +106632,7 @@ function printBindings(bindings, options) {
   );
   const mtls_certificates = extractBindingsOfType("mtls_certificate", bindings);
   const pipelines = extractBindingsOfType("pipeline", bindings);
+  const k2 = extractBindingsOfType("k2", bindings);
   const ratelimits = extractBindingsOfType("ratelimit", bindings);
   const assets = extractBindingsOfType("assets", bindings);
   const unsafe_hello_world = extractBindingsOfType(
@@ -106886,6 +107012,18 @@ function printBindings(bindings, options) {
       }))
     );
   }
+  if (analytics.length > 0) {
+    output.push(
+      ...analytics.map(({ binding, remote }) => ({
+        name: binding,
+        type: getBindingTypeFriendlyName("analytics"),
+        value: void 0,
+        mode: getMode({
+          isSimulatedLocally: (remote === true || remote === void 0) && !context.remoteBindingsDisabled ? false : void 0
+        })
+      }))
+    );
+  }
   if (images.length > 0) {
     output.push(
       ...images.map(({ binding, remote }) => ({
@@ -106948,6 +107086,19 @@ function printBindings(bindings, options) {
       )
     );
   }
+  if (k2.length > 0) {
+    output.push(
+      ...k2.map(({ binding, stream: k2Stream }) => ({
+        name: binding,
+        type: getBindingTypeFriendlyName("k2"),
+        value: k2Stream,
+        mode: getMode({
+          // K2 always writes to the real stream; `remote: false` is rejected during validation.
+          isSimulatedLocally: context.remoteBindingsDisabled ? void 0 : false
+        })
+      }))
+    );
+  }
   if (ratelimits.length > 0) {
     output.push(
       ...ratelimits.map(({ name: name3, simple }) => ({
@@ -108250,13 +108401,16 @@ You can try:
 __name(validateBinary, "validateBinary");
 function redactCloudflaredArgsForLogging(args) {
   const redacted = [...args];
+  const sensitiveArgs = ["--token", "--allowed-mail"];
   for (let i = 0; i < redacted.length; i++) {
     const arg = redacted[i];
-    if (arg === "--token" && i + 1 < redacted.length) {
-      redacted[i + 1] = "[REDACTED]";
-    }
-    if (arg.startsWith("--token=")) {
-      redacted[i] = "--token=[REDACTED]";
+    for (const sensitiveArg of sensitiveArgs) {
+      if (arg === sensitiveArg && i + 1 < redacted.length) {
+        redacted[i + 1] = "[REDACTED]";
+      }
+      if (arg.startsWith(`${sensitiveArg}=`)) {
+        redacted[i] = `${sensitiveArg}=[REDACTED]`;
+      }
     }
   }
   return redacted;
@@ -108535,6 +108689,27 @@ async function spawnCloudflared(args, options) {
     confirmDownload: options?.confirmDownload,
     logger
   });
+  if (args.some(
+    (arg) => arg === "--allowed-mail" || arg.startsWith("--allowed-mail=")
+  )) {
+    const minimumVersion = "2026.9.2";
+    const installedVersion = getInstalledVersion(binPath);
+    if (!installedVersion || isVersionOutdated(installedVersion, minimumVersion)) {
+      throw new UserError(
+        `[cloudflared] --allowed-mail requires cloudflared ${minimumVersion} or later.
+
+` + (installedVersion ? `The selected binary (${binPath}) is version ${installedVersion}.
+
+` : `Could not determine the version of the selected binary (${binPath}).
+
+`) + `Update cloudflared in your PATH or set CLOUDFLARED_PATH to a compatible binary.
+Download instructions: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/`,
+        {
+          telemetryMessage: "tunnel cloudflared allowed mail unsupported version"
+        }
+      );
+    }
+  }
   logger?.debug(
     `Spawning cloudflared: ${binPath} ${redactCloudflaredArgsForLogging(args).join(" ")}`
   );
@@ -108714,10 +108889,25 @@ function startTunnel(options) {
   const reminderIntervalMs = options.reminderIntervalMs ?? DEFAULT_TUNNEL_REMINDER_INTERVAL_MS;
   const defaultExpiryMs = options.expiryMs ?? DEFAULT_TUNNEL_EXPIRY_MS;
   const isNamedTunnel = options.token !== void 0;
+  if (isNamedTunnel && (options.allowedMail?.length ?? 0) > 0) {
+    throw new UserError(
+      "The `allowedMail` option is only supported for Quick Tunnels.",
+      { telemetryMessage: "tunnel allowed mail named tunnel conflict" }
+    );
+  }
   const timeFormatter = new Intl.DateTimeFormat(void 0, {
     timeStyle: "short"
   });
-  const cloudflaredArgs = isNamedTunnel ? ["tunnel", "--no-autoupdate", "run"] : ["tunnel", "--no-autoupdate", "--url", options.origin.href];
+  const cloudflaredArgs = isNamedTunnel ? ["tunnel", "--no-autoupdate", "run"] : [
+    "tunnel",
+    "--no-autoupdate",
+    "--url",
+    options.origin.href,
+    ...(options.allowedMail ?? []).flatMap((allowedMail) => [
+      "--allowed-mail",
+      allowedMail
+    ])
+  ];
   const cloudflaredPromise = spawnCloudflared(cloudflaredArgs, {
     stdio: "pipe",
     env: options.token ? { TUNNEL_TOKEN: options.token } : void 0,
@@ -114190,7 +114380,7 @@ var Yargs = YargsFactory(esm_default2);
 var yargs_default = Yargs;
 
 // package.json
-var version2 = "2.73.1";
+var version2 = "2.73.3";
 
 // src/metrics.ts
 var import_node_async_hooks = require("node:async_hooks");
@@ -116888,13 +117078,13 @@ __name2(getPropertyName, "getPropertyName");
 var package_default = {
   name: "frameworks_clis_info",
   dependencies: {
-    "@angular/create": "22.2.0",
-    "@tanstack/cli": "0.71.0",
-    "create-analog": "2.7.5",
+    "@angular/create": "22.2.1",
+    "@tanstack/cli": "0.71.1",
+    "create-analog": "2.8.0",
     "create-astro": "5.2.4",
     "create-docusaurus": "3.10.2",
     "create-hono": "0.19.5",
-    "create-next-app": "16.3.6",
+    "create-next-app": "16.3.8",
     "create-qwik": "1.20.1",
     "create-react-router": "8.4.0",
     "create-rwsdk": "3.1.3",
@@ -116906,7 +117096,7 @@ var package_default = {
     "create-waku": "0.12.5-1.0.0-alpha.10-0",
     gatsby: "5.16.1",
     nuxi: "3.37.0",
-    sv: "0.17.1"
+    sv: "1.0.1"
   },
   info: [
     "This package.json is only used to keep track of the frameworks cli dependencies",
@@ -119103,7 +119293,7 @@ var updateTypeDefinitions = (ctx) => {
     }
   });
 };
-var typesPath2 = "src/worker-configuration.d.ts";
+var typesPath2 = "./src/worker-configuration.d.ts";
 var config39 = {
   configVersion: 1,
   id: "svelte",
@@ -119601,7 +119791,7 @@ If the application uses Durable Objects or Workflows, refer to the relevant best
 var import_node_assert7 = __toESM(require("node:assert"));
 
 // ../wrangler/package.json
-var version3 = "4.143.1";
+var version3 = "4.148.0";
 
 // src/git.ts
 var offerGit = async (ctx) => {
@@ -123303,6 +123493,9 @@ async function updateTsConfig(ctx, { usesNodeCompat }) {
     }
     const currentTypes = config50.compilerOptions?.types ?? [];
     let newTypes = new Set(currentTypes);
+    if (config50.extends === "$app/tsconfig") {
+      newTypes.add("$app/types");
+    }
     if (ctx.template.workersTypes === "installed") {
       const entrypointVersion = getLatestTypesEntrypoint(ctx);
       const explicitEntrypoint = currentTypes.some(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-cloudflare",
-  "version": "2.73.1",
+  "version": "2.73.3",
   "description": "A CLI for creating and deploying new applications to Cloudflare.",
   "keywords": [
     "cloudflare",
@@ -31,7 +31,7 @@
     "@babel/parser": "^7.21.3",
     "@babel/types": "^7.21.4",
     "@clack/prompts": "^1.2.0",
-    "@cloudflare/workers-types": "^5.20260926.1",
+    "@cloudflare/workers-types": "^5.20261006.1",
     "@types/command-exists": "^1.2.0",
     "@types/cross-spawn": "^6.0.2",
     "@types/deepmerge": "^2.2.0",
@@ -70,13 +70,13 @@
     "which-pm-runs": "^1.1.0",
     "wrap-ansi": "^9.0.0",
     "yargs": "^17.7.2",
-    "@cloudflare/cli-shared-helpers": "0.2.0",
-    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/cli-shared-helpers": "0.2.4",
     "@cloudflare/mock-npm-registry": "0.0.0",
+    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/vite-plugin": "1.63.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/vite-plugin": "1.62.1",
-    "@cloudflare/workers-utils": "0.44.0",
-    "wrangler": "4.143.1"
+    "@cloudflare/workers-utils": "0.47.0",
+    "wrangler": "4.148.0"
   },
   "engines": {
     "node": ">=22.0.0"

package/templates/svelte/pages/c3.ts

@@ -126,7 +126,7 @@ const updateTypeDefinitions = (ctx: C3Context) => {
 	});
 };
 
-const typesPath = "src/worker-configuration.d.ts";
+const typesPath = "./src/worker-configuration.d.ts";
 const config: TemplateConfig = {
 	configVersion: 1,
 	id: "svelte",