wrangler 4.108.0 → 4.109.0

package/wrangler-dist/cli.js

@@ -44525,7 +44525,7 @@ var name, version;
 var init_package = __esm({
   "package.json"() {
     name = "wrangler";
-    version = "4.108.0";
+    version = "4.109.0";
   }
 });
 
@@ -124002,7 +124002,8 @@ var init_user2 = __esm({
       "connectivity:admin": "See, change, and bind to Connectivity Directory services, including creating services targeting Cloudflare Tunnel.",
       "email_routing:write": "See and change Email Routing settings, rules, and destination addresses.",
       "email_sending:write": "See and change Email Sending settings and configuration.",
-      "browser:write": "See and manage Browser Run sessions"
+      "browser:write": "See and manage Browser Run sessions",
+      "challenge-widgets.write": "See and change Turnstile widgets"
     };
     DefaultScopeKeys = Object.keys(DefaultScopes);
     __name(validateScopeKeys, "validateScopeKeys");
@@ -148087,7 +148088,22 @@ ${dashLink}`, {
           }
         ).then(
           () => ({ targets: [`workflow: ${workflow.name}`] }),
-          (error53) => ({ targets: [], error: error53 })
+          (error53) => {
+            if (error53 instanceof APIError && error53.code === WORKFLOW_CRON_REQUIRES_PAID_PLAN_CODE && workflow.schedules) {
+              error53.preventReport();
+              return {
+                targets: [],
+                error: new UserError(
+                  `Workflow "${workflow.name}" has "schedules" configured, but scheduled Workflows require a paid Workers plan.`,
+                  {
+                    cause: error53,
+                    telemetryMessage: "triggers deploy workflow cron requires paid plan"
+                  }
+                )
+              };
+            }
+            return { targets: [], error: error53 };
+          }
         )
       );
     }
@@ -153430,7 +153446,7 @@ function renderInconsistentExportsAcrossVersionsError(serverMessage) {
     "Learn more: https://developers.cloudflare.com/workers/configuration/versions-and-deployments/gradual-deployments/#gradual-deployments-for-durable-objects"
   ].join("\n");
 }
-var import_undici4, import_command_exists2, import_dotenv, require_ignore, require_heap, require_heap2, require_difflib, require_difflib2, require_util9, require_styles2, require_has_flag2, require_supports_colors2, require_trap2, require_zalgo2, require_america2, require_zebra2, require_rainbow2, require_random2, require_colors2, require_safe2, require_colorize, require_lib4, __getOwnPropNames4, __commonJS22, __defProp5, __name22, UserError2, FatalError2, JsonFriendlyFatalError2, CharacterCodes2, ParseOptions2, ScanError2, SyntaxKind2, parse22, ParseErrorCode2, TomlError4, DATE_TIME_RE4, TomlDate4, INT_REGEX4, FLOAT_REGEX4, LEADING_ZERO4, ESCAPE_REGEX4, ESC_MAP4, KEY_PART_RE4, BARE_KEY4, dist_default6, ParseError2, units2, UNSUPPORTED_BOMS2, PATH_TO_DEPLOY_CONFIG2, esm_default5, AssetsSchema, KnownBindingSchema, UnsafeBindingSchema, BindingSchema, CacheSchema, SINGLETON_BINDING_TYPES, listFormatter, EnvSchema, ExportSchema, LimitsSchema, ObservabilitySchema, PlacementSchema, TailConsumerSchema, TriggerSchema, UnsafeSchema, BaseWorkerSchema, InputWorkerSchema, ModuleTypeSchema, ManifestSchema, require_dist2, ApplicationRollout2, BadRequestWithCodeError2, CreateApplicationRolloutRequest2, DeploymentNotFoundError2, ImageRegistryAlreadyExistsError2, ImageRegistryIsPublic2, ImageRegistryNotAllowedError2, ImageRegistryNotFoundError2, ImageRegistryProtocolAlreadyExists2, ImageRegistryProtocolIsReferencedError2, ImageRegistryProtocolNotFound2, ProvisionerConfiguration2, RolloutStep2, SecretNameAlreadyExists2, SecretNotFound2, SSHPublicKeyNotFoundError2, UpdateApplicationRolloutRequest2, runDockerCmd2, isDockerRunning2, verifyDockerInstalled2, queuesUrl, MAX_ROUTES_RULES, MAX_ROUTES_RULE_LENGTH, formatInvalidRoutes, MAX_ASSET_SIZE, CF_ASSETS_IGNORE_FILENAME, REDIRECTS_FILENAME, HEADERS_FILENAME, import_ignore, types, other_default, types2, standard_default, __classPrivateFieldGet7, _Mime_extensionToType, _Mime_typeToExtension, _Mime_typeToExtensions, Mime, Mime_default, src_default, normalizeFilePath, getContentType, hashFile, decodeJwtPayload, isJwtExpired, BULK_UPLOAD_CONCURRENCY, EDGE_KV_UPLOAD_CONCURRENCY, MAX_UPLOAD_ATTEMPTS, MAX_UPLOAD_GATEWAY_ERRORS, MAX_DIFF_LINES, syncAssets, buildAssetManifest, WORKER_JS_FILENAME, nameBindings, ONE_KIB_BYTES, MAX_GZIP_SIZE_BYTES, WORKER_NOT_FOUND_ERR_CODE, WORKER_LEGACY_ENVIRONMENT_NOT_FOUND_ERR_CODE, BLANK_INPUT, moduleTypeMimeType, INVALID_INHERIT_BINDING_CODE, EXPORTS_RECONCILIATION_ERROR_CODE, INCONSISTENT_EXPORTS_ACROSS_VERSIONS_CODE, ACTOR_BINDING_DEPENDS_ON_EXPORT_CODE, suppressNotFoundError, esm_default22, isConnectedStatusExplained, ProvisionResourceHandler, R2Handler, AISearchNamespaceHandler, AgentMemoryNamespaceHandler, KVHandler, D1Handler, HANDLERS, InternalConfigSchema, StaticRoutingSchema, MetadataStaticRedirectEntry, MetadataRedirectEntry, MetadataStaticRedirects, MetadataRedirects, MetadataHeaderEntry, MetadataHeaders, RedirectsSchema, HeadersSchema, sourceMappingPrepareStackTrace, retrieveSourceMapOverride, placeholderError, CALL_SITE_REGEXP, CallSite, WORKFLOW_NOT_FOUND_CODE, import_json_diff, reorderableBindings, getCloudflareAccountIdFromEnv2, validateRoutes2, MAX_DNS_LABEL_LENGTH, HASH_LENGTH, ALIAS_VALIDATION_REGEX;
+var import_undici4, import_command_exists2, import_dotenv, require_ignore, require_heap, require_heap2, require_difflib, require_difflib2, require_util9, require_styles2, require_has_flag2, require_supports_colors2, require_trap2, require_zalgo2, require_america2, require_zebra2, require_rainbow2, require_random2, require_colors2, require_safe2, require_colorize, require_lib4, __getOwnPropNames4, __commonJS22, __defProp5, __name22, UserError2, FatalError2, JsonFriendlyFatalError2, CharacterCodes2, ParseOptions2, ScanError2, SyntaxKind2, parse22, ParseErrorCode2, TomlError4, DATE_TIME_RE4, TomlDate4, INT_REGEX4, FLOAT_REGEX4, LEADING_ZERO4, ESCAPE_REGEX4, ESC_MAP4, KEY_PART_RE4, BARE_KEY4, dist_default6, ParseError2, units2, UNSUPPORTED_BOMS2, PATH_TO_DEPLOY_CONFIG2, esm_default5, AssetsSchema, KnownBindingSchema, UnsafeBindingSchema, BindingSchema, CacheSchema, SINGLETON_BINDING_TYPES, listFormatter, EnvSchema, ExportSchema, LimitsSchema, ObservabilitySchema, PlacementSchema, TailConsumerSchema, TriggerSchema, UnsafeSchema, BaseWorkerSchema, InputWorkerSchema, ModuleTypeSchema, ManifestSchema, require_dist2, ApplicationRollout2, BadRequestWithCodeError2, CreateApplicationRolloutRequest2, DeploymentNotFoundError2, ImageRegistryAlreadyExistsError2, ImageRegistryIsPublic2, ImageRegistryNotAllowedError2, ImageRegistryNotFoundError2, ImageRegistryProtocolAlreadyExists2, ImageRegistryProtocolIsReferencedError2, ImageRegistryProtocolNotFound2, ProvisionerConfiguration2, RolloutStep2, SecretNameAlreadyExists2, SecretNotFound2, SSHPublicKeyNotFoundError2, UpdateApplicationRolloutRequest2, runDockerCmd2, isDockerRunning2, verifyDockerInstalled2, INVALID_INHERIT_BINDING_CODE, EXPORTS_RECONCILIATION_ERROR_CODE, INCONSISTENT_EXPORTS_ACROSS_VERSIONS_CODE, ACTOR_BINDING_DEPENDS_ON_EXPORT_CODE, WORKFLOW_CRON_REQUIRES_PAID_PLAN_CODE, queuesUrl, MAX_ROUTES_RULES, MAX_ROUTES_RULE_LENGTH, formatInvalidRoutes, MAX_ASSET_SIZE, CF_ASSETS_IGNORE_FILENAME, REDIRECTS_FILENAME, HEADERS_FILENAME, import_ignore, types, other_default, types2, standard_default, __classPrivateFieldGet7, _Mime_extensionToType, _Mime_typeToExtension, _Mime_typeToExtensions, Mime, Mime_default, src_default, normalizeFilePath, getContentType, hashFile, decodeJwtPayload, isJwtExpired, BULK_UPLOAD_CONCURRENCY, EDGE_KV_UPLOAD_CONCURRENCY, MAX_UPLOAD_ATTEMPTS, MAX_UPLOAD_GATEWAY_ERRORS, MAX_DIFF_LINES, syncAssets, buildAssetManifest, WORKER_JS_FILENAME, nameBindings, ONE_KIB_BYTES, MAX_GZIP_SIZE_BYTES, WORKER_NOT_FOUND_ERR_CODE, WORKER_LEGACY_ENVIRONMENT_NOT_FOUND_ERR_CODE, BLANK_INPUT, moduleTypeMimeType, suppressNotFoundError, esm_default22, isConnectedStatusExplained, ProvisionResourceHandler, R2Handler, AISearchNamespaceHandler, AgentMemoryNamespaceHandler, KVHandler, D1Handler, HANDLERS, InternalConfigSchema, StaticRoutingSchema, MetadataStaticRedirectEntry, MetadataRedirectEntry, MetadataStaticRedirects, MetadataRedirects, MetadataHeaderEntry, MetadataHeaders, RedirectsSchema, HeadersSchema, sourceMappingPrepareStackTrace, retrieveSourceMapOverride, placeholderError, CALL_SITE_REGEXP, CallSite, WORKFLOW_NOT_FOUND_CODE, import_json_diff, reorderableBindings, getCloudflareAccountIdFromEnv2, validateRoutes2, MAX_DNS_LABEL_LENGTH, HASH_LENGTH, ALIAS_VALIDATION_REGEX;
 var init_dist9 = __esm({
   "../deploy-helpers/dist/index.mjs"() {
     init_import_meta_url();
@@ -157518,6 +157534,11 @@ ${codeblock}`, options);
     }, "verifyDockerInstalled");
     __name(getFailedToRunDockerErrorMessage2, "getFailedToRunDockerErrorMessage");
     __name3(getFailedToRunDockerErrorMessage2, "getFailedToRunDockerErrorMessage");
+    INVALID_INHERIT_BINDING_CODE = 10057;
+    EXPORTS_RECONCILIATION_ERROR_CODE = 100402;
+    INCONSISTENT_EXPORTS_ACROSS_VERSIONS_CODE = 100405;
+    ACTOR_BINDING_DEPENDS_ON_EXPORT_CODE = 100406;
+    WORKFLOW_CRON_REQUIRES_PAID_PLAN_CODE = 10208;
     __name(getZoneForRoute, "getZoneForRoute");
     __name3(getZoneForRoute, "getZoneForRoute");
     __name(getZoneIdFromHost, "getZoneIdFromHost");
@@ -159193,10 +159214,6 @@ Ensure all assets in your assets directory "${dir2}" conform with the Workers ma
     __name3(warnOnErrorUpdatingServiceAndEnvironmentTags, "warnOnErrorUpdatingServiceAndEnvironmentTags");
     __name(tagsAreEqual, "tagsAreEqual");
     __name3(tagsAreEqual, "tagsAreEqual");
-    INVALID_INHERIT_BINDING_CODE = 10057;
-    EXPORTS_RECONCILIATION_ERROR_CODE = 100402;
-    INCONSISTENT_EXPORTS_ACROSS_VERSIONS_CODE = 100405;
-    ACTOR_BINDING_DEPENDS_ON_EXPORT_CODE = 100406;
     __name(getMigrationsToUpload, "getMigrationsToUpload");
     __name3(getMigrationsToUpload, "getMigrationsToUpload");
     suppressNotFoundError = /* @__PURE__ */ __name3((err) => {
@@ -166920,7 +166937,7 @@ function directoryContainsAnySkill(dirPath, skillNames) {
 async function computeTelemetryCurrentAgentSkillsInstalled() {
   let agentId = null;
   try {
-    const detection = detectAgenticEnvironment(process.env, []);
+    const detection = detectAgenticEnvironment();
     agentId = detection.id;
   } catch {
     return null;
@@ -169118,7 +169135,7 @@ function getMetricsDispatcher(options) {
   let amplitude_event_id = 0;
   let agent = null;
   try {
-    const agentDetection = detectAgenticEnvironment(process.env, []);
+    const agentDetection = detectAgenticEnvironment();
     agent = agentDetection.id;
   } catch {
   }
@@ -202716,17 +202733,26 @@ var init_config5 = __esm({
           observability: {
             logs_enabled: config2.observability?.logs?.enabled ?? config2.observability?.enabled === true
           },
+          // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, falls back to deprecated `wrangler_ssh` when `ssh` is not set
           wrangler_ssh: container.ssh ?? container.wrangler_ssh,
           authorized_keys: container.authorized_keys,
           trusted_user_ca_keys: container.trusted_user_ca_keys
         };
         let instanceTypeOrLimits;
         const MB2 = 1e3 * 1e3;
-        if (container.configuration?.disk !== void 0 || container.configuration?.vcpu !== void 0 || container.configuration?.memory_mib !== void 0) {
+        if (
+          // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
+          container.configuration?.disk !== void 0 || // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
+          container.configuration?.vcpu !== void 0 || // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
+          container.configuration?.memory_mib !== void 0
+        ) {
           instanceTypeOrLimits = {
+            // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
             disk_bytes: (container.configuration?.disk?.size_mb ?? 2e3) * MB2,
             // defaults to 2GB in bytes
+            // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
             vcpu: container.configuration?.vcpu ?? 0.0625,
+            // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, deprecated `configuration` path for custom instance types
             memory_mib: container.configuration?.memory_mib ?? 256
           };
         } else if (typeof container.instance_type === "string" || container.instance_type === void 0) {
@@ -208685,6 +208711,7 @@ function collectAllPipelines(args) {
       pipelinesMap.set(pipeline2.binding, {
         binding: pipeline2.binding,
         stream: pipeline2.stream,
+        // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, falls back to deprecated `pipeline` when `stream` is not set
         pipeline: pipeline2.pipeline
       });
     }
@@ -209476,6 +209503,7 @@ function collectPipelinesPerEnvironment(args) {
       } else if (pipeline2.pipeline) {
         pipelines.push({
           binding: pipeline2.binding,
+          // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, falls back to deprecated `pipeline` when `stream` is not set
           pipeline: pipeline2.pipeline
         });
       } else {
@@ -217861,11 +217889,12 @@ async function parseFormDataFromFile(file7) {
   const bundle = await fs$1.readFile(file7);
   const firstLine = bundle.findIndex((v7) => v7 === 10);
   const boundary = Uint8Array.prototype.slice.call(bundle, 2, firstLine).toString();
-  return await new Response(bundle, {
+  const response = new Response(bundle, {
     headers: {
       "Content-Type": "multipart/form-data; boundary=" + boundary
     }
-  }).formData();
+  });
+  return await response.formData();
 }
 async function analyseBundle(workerBundle) {
   if (typeof workerBundle === "string") {
@@ -219331,6 +219360,7 @@ async function handleInteractiveCloudchamberCreateCommand(args, config2, environ
   const selectedLabels = await promptForLabels(labels, [], false);
   const account = await loadAccount();
   const memoryMib = resolveMemory(args, config2.cloudchamber) ?? account.defaults.memory_mib ?? Math.round(
+    // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, falls back to deprecated `memory` when `memory_mib` is not set
     parseByteSize(account.defaults.memory ?? "2000MiB", 1024) / (1024 * 1024)
   );
   const vcpu = args.vcpu ?? config2.cloudchamber.vcpu ?? account.defaults.vcpus;
@@ -219957,6 +219987,7 @@ function containerAppToCreateApplication(accountId, containerApp, observability,
   );
   const instanceType = containerAppToInstanceType(containerApp);
   const configuration = {
+    // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, reads deprecated `configuration` from API response
     ...containerApp.configuration,
     ...instanceType,
     observability: observabilityConfiguration
@@ -219975,6 +220006,7 @@ function containerAppToCreateApplication(accountId, containerApp, observability,
       // De-sugar image name
       image: resolveImageName(accountId, configuration.image)
     },
+    // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, `instances` is deprecated in favor of `max_instances`
     instances: containerApp.instances ?? 0,
     scheduling_policy: containerApp.scheduling_policy ?? "default" /* DEFAULT */,
     constraints: {
@@ -220050,7 +220082,9 @@ async function apply2(args, config2) {
       if (appConfigNoDefaults.scheduling_policy === void 0) {
         appConfig.scheduling_policy = prevApp.scheduling_policy;
       }
-      if (prevApp.durable_objects !== void 0 && appConfigNoDefaults.durable_objects !== void 0 && prevApp.durable_objects.namespace_id !== appConfigNoDefaults.durable_objects.namespace_id) {
+      if (prevApp.durable_objects !== void 0 && // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, reads deprecated `durable_objects` from config
+      appConfigNoDefaults.durable_objects !== void 0 && prevApp.durable_objects.namespace_id !== // eslint-disable-next-line @typescript-eslint/no-deprecated -- kept for backward compatibility, reads deprecated `durable_objects` from config
+      appConfigNoDefaults.durable_objects.namespace_id) {
         throw new UserError(
           `Application "${prevApp.name}" is assigned to durable object ${prevApp.durable_objects.namespace_id}, but a new DO namespace is being assigned to the application,
 					you should delete the container application and deploy again`,
@@ -233711,8 +233745,9 @@ var init_d12 = __esm({
 // src/utils/add-created-resource-config.ts
 async function createdResourceConfig(resource, snippet, configPath, env7, defaults3) {
   const envString = env7 ? ` in the "${env7}" environment` : "";
+  const resourceName = friendlyBindingNames2[resource];
   logger2.log(
-    `To access your new ${friendlyBindingNames2[resource]} in your Worker, add the following snippet to your configuration file${envString}:`
+    `To access your new ${resourceName} in your Worker, add the following snippet to your configuration file${envString}:`
   );
   logger2.log(
     formatConfigSnippet(
@@ -292321,7 +292356,7 @@ async function runDeployCommandHandler(args, {
   config: config2,
   pagesToWorkersDelegation = false
 }) {
-  const nameOwnershipUnverified = !config2.configPath && isNonInteractiveOrCI2() && (pagesToWorkersDelegation || !args.name);
+  const nameOwnershipUnverified = !config2.configPath && isNonInteractiveOrCI2() && pagesToWorkersDelegation;
   const autoConfigResult = await maybeRunAutoConfig(args, config2, {
     skipConfirmations: pagesToWorkersDelegation
   });
@@ -302713,10 +302748,10 @@ var init_friendly_validator_errors = __esm({
 // src/utils/detect-agent.ts
 function detectAgent() {
   try {
-    const detection = detectAgenticEnvironment(
-      process.env,
-      NO_PROCESS_ANCESTRY
-    );
+    const detection = detectAgenticEnvironment({
+      env: process.env,
+      processAncestry: NO_PROCESS_ANCESTRY
+    });
     return { isAgent: detection.type === "agent", id: detection.id };
   } catch {
     return { isAgent: false, id: null };
@@ -353031,6 +353066,478 @@ Try running with --log-level debug for more information.`;
     });
   }
 });
+
+// src/turnstile/client.ts
+async function createWidget(config2, body) {
+  const accountId = await requireAuth(config2);
+  return await fetchResult2(
+    config2,
+    `/accounts/${accountId}/challenges/widgets`,
+    {
+      method: "POST",
+      headers: JSON_HEADERS2,
+      body: JSON.stringify(body)
+    }
+  );
+}
+async function getWidget(config2, sitekey) {
+  const accountId = await requireAuth(config2);
+  return await fetchResult2(
+    config2,
+    `/accounts/${accountId}/challenges/widgets/${sitekey}`,
+    {
+      method: "GET"
+    }
+  );
+}
+async function listWidgets(config2) {
+  const accountId = await requireAuth(config2);
+  return await fetchPagedListResult2(
+    config2,
+    `/accounts/${accountId}/challenges/widgets`,
+    {
+      method: "GET"
+    }
+  );
+}
+async function updateWidget(config2, sitekey, body) {
+  const accountId = await requireAuth(config2);
+  return await fetchResult2(
+    config2,
+    `/accounts/${accountId}/challenges/widgets/${sitekey}`,
+    {
+      method: "PUT",
+      headers: JSON_HEADERS2,
+      body: JSON.stringify(body)
+    }
+  );
+}
+async function deleteWidget(config2, sitekey) {
+  const accountId = await requireAuth(config2);
+  return await fetchResult2(
+    config2,
+    `/accounts/${accountId}/challenges/widgets/${sitekey}`,
+    {
+      method: "DELETE"
+    }
+  );
+}
+var WidgetModes, ClearanceLevels, WidgetRegions, JSON_HEADERS2;
+var init_client16 = __esm({
+  "src/turnstile/client.ts"() {
+    init_import_meta_url();
+    init_cfetch();
+    init_user3();
+    WidgetModes = ["managed", "invisible", "non-interactive"];
+    ClearanceLevels = [
+      "no_clearance",
+      "jschallenge",
+      "managed",
+      "interactive"
+    ];
+    WidgetRegions = ["world", "china"];
+    JSON_HEADERS2 = { "Content-Type": "application/json" };
+    __name(createWidget, "createWidget");
+    __name(getWidget, "getWidget");
+    __name(listWidgets, "listWidgets");
+    __name(updateWidget, "updateWidget");
+    __name(deleteWidget, "deleteWidget");
+  }
+});
+
+// src/turnstile/index.ts
+var turnstileNamespace, turnstileWidgetNamespace, splitCsv, sharedWidgetOptions;
+var init_turnstile2 = __esm({
+  "src/turnstile/index.ts"() {
+    init_import_meta_url();
+    init_create_command();
+    init_client16();
+    turnstileNamespace = createNamespace({
+      metadata: {
+        description: "\u{1F6E1}\uFE0F Manage Turnstile widgets",
+        status: "alpha",
+        owner: "Product: Turnstile",
+        category: "Networking & security"
+      }
+    });
+    turnstileWidgetNamespace = createNamespace({
+      metadata: {
+        description: "Manage Turnstile widgets",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      }
+    });
+    splitCsv = /* @__PURE__ */ __name((values) => values.flatMap(
+      (v7) => String(v7).split(",").map((s7) => s7.trim())
+    ).filter(Boolean), "splitCsv");
+    sharedWidgetOptions = /* @__PURE__ */ __name((options) => ({
+      domain: {
+        alias: "domains",
+        type: "string",
+        array: true,
+        demandOption: options.required,
+        coerce: splitCsv,
+        description: "Allowed hostnames for this widget. Pass multiple times or comma-separate, e.g. --domain example.com --domain www.example.com."
+      },
+      mode: {
+        type: "string",
+        choices: WidgetModes,
+        demandOption: options.required,
+        description: "Widget mode"
+      },
+      "clearance-level": {
+        type: "string",
+        choices: ClearanceLevels,
+        description: "Challenge clearance level granted when this widget is embedded on a Cloudflare site"
+      },
+      "bot-fight-mode": {
+        type: "boolean",
+        description: "Issue computationally expensive challenges in response to malicious bots (Enterprise only)"
+      },
+      "ephemeral-id": {
+        type: "boolean",
+        description: "Return the Ephemeral ID in /siteverify responses (Enterprise only)"
+      },
+      offlabel: {
+        type: "boolean",
+        description: "Do not show any Cloudflare branding on the widget (Enterprise only)"
+      }
+    }), "sharedWidgetOptions");
+  }
+});
+
+// src/turnstile/create.ts
+var turnstileWidgetCreateCommand;
+var init_create20 = __esm({
+  "src/turnstile/create.ts"() {
+    init_import_meta_url();
+    init_create_command();
+    init_is_interactive();
+    init_logger();
+    init_client16();
+    init_turnstile2();
+    turnstileWidgetCreateCommand = createCommand({
+      metadata: {
+        description: "Create a Turnstile widget",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      },
+      behaviour: {
+        supportTemporary: true,
+        printBanner: /* @__PURE__ */ __name((args) => !args.json && !isNonInteractiveOrCI2(), "printBanner")
+      },
+      args: {
+        name: {
+          type: "string",
+          demandOption: true,
+          description: "Human-readable widget name"
+        },
+        ...sharedWidgetOptions({ required: true }),
+        region: {
+          type: "string",
+          choices: WidgetRegions,
+          description: "Region where this widget can be used. Cannot be changed after creation."
+        },
+        json: {
+          type: "boolean",
+          default: false,
+          description: "Print the created widget as JSON only"
+        }
+      },
+      positionalArgs: ["name"],
+      async handler(args, { config: config2 }) {
+        const widget = await createWidget(config2, {
+          name: args.name,
+          domains: args.domain,
+          mode: args.mode,
+          bot_fight_mode: args.botFightMode,
+          clearance_level: args.clearanceLevel,
+          ephemeral_id: args.ephemeralId,
+          offlabel: args.offlabel,
+          region: args.region
+        });
+        if (args.json) {
+          logger2.log(JSON.stringify(widget, null, 2));
+          return;
+        }
+        logger2.log(`\u2705 Created Turnstile widget '${widget.name}'`);
+        logger2.log(`   sitekey: ${widget.sitekey}`);
+        logger2.log(`   secret:  ${widget.secret}`);
+        logger2.log("");
+        logger2.log(
+          "The sitekey is public; embed it in your frontend. The secret must stay on your backend and is used for siteverify:"
+        );
+        logger2.log(
+          "   POST https://challenges.cloudflare.com/turnstile/v0/siteverify"
+        );
+        logger2.log('        { secret: "<secret>", response: "<turnstile-token>" }');
+        logger2.log("");
+        logger2.log(
+          `To retrieve the secret later: \`wrangler turnstile widget get ${widget.sitekey}\`. It's redacted from \`list\` and \`update\` output but always available via \`get\`.`
+        );
+      }
+    });
+  }
+});
+
+// src/turnstile/delete.ts
+var turnstileWidgetDeleteCommand;
+var init_delete19 = __esm({
+  "src/turnstile/delete.ts"() {
+    init_import_meta_url();
+    init_dist();
+    init_create_command();
+    init_dialogs();
+    init_is_interactive();
+    init_logger();
+    init_client16();
+    turnstileWidgetDeleteCommand = createCommand({
+      metadata: {
+        description: "Delete a Turnstile widget",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      },
+      behaviour: {
+        supportTemporary: true,
+        printBanner: /* @__PURE__ */ __name((args) => !args.json && !isNonInteractiveOrCI2(), "printBanner")
+      },
+      args: {
+        sitekey: {
+          type: "string",
+          demandOption: true,
+          description: "The sitekey of the widget"
+        },
+        "skip-confirmation": {
+          type: "boolean",
+          alias: "y",
+          default: false,
+          description: "Skip confirmation prompt"
+        },
+        json: {
+          type: "boolean",
+          default: false,
+          description: "Return output as JSON. Requires --skip-confirmation."
+        }
+      },
+      positionalArgs: ["sitekey"],
+      async handler({ sitekey, skipConfirmation, json: json2 }, { config: config2 }) {
+        if (json2 && !skipConfirmation) {
+          throw new JsonFriendlyFatalError(
+            JSON.stringify({
+              error: "Pass --skip-confirmation (-y) to skip the confirmation prompt when using --json."
+            }),
+            { telemetryMessage: "turnstile widget delete json requires skip" }
+          );
+        }
+        if (!skipConfirmation) {
+          const proceed = await confirm2(
+            `About to delete Turnstile widget ${sitekey}. This breaks any deployed Worker still using the widget's sitekey or secret. Continue?`,
+            { defaultValue: false, fallbackValue: false }
+          );
+          if (!proceed) {
+            logger2.log("Deletion cancelled.");
+            return;
+          }
+        }
+        await deleteWidget(config2, sitekey);
+        if (json2) {
+          logger2.log(JSON.stringify({ sitekey, success: true }, null, 2));
+          return;
+        }
+        logger2.log(`\u2705 Deleted Turnstile widget ${sitekey}`);
+      }
+    });
+  }
+});
+
+// src/turnstile/get.ts
+function formatWidget(widget) {
+  const rows = [
+    ["Sitekey", widget.sitekey],
+    ["Name", widget.name],
+    ["Mode", widget.mode],
+    ["Domains", widget.domains.join(", ")],
+    ["Clearance level", widget.clearance_level],
+    ["Bot fight mode", widget.bot_fight_mode ? "yes" : "no"],
+    ["Region", widget.region],
+    ["Off-label", widget.offlabel ? "yes" : "no"],
+    ["Ephemeral ID", widget.ephemeral_id ? "yes" : "no"],
+    ["Secret", widget.secret],
+    ["Created", widget.created_on],
+    ["Modified", widget.modified_on]
+  ];
+  const widest = Math.max(...rows.map(([k6]) => k6.length));
+  return rows.map(([k6, v7]) => `  ${k6.padEnd(widest)}   ${v7}`).join("\n");
+}
+var turnstileWidgetGetCommand;
+var init_get14 = __esm({
+  "src/turnstile/get.ts"() {
+    init_import_meta_url();
+    init_create_command();
+    init_is_interactive();
+    init_logger();
+    init_client16();
+    __name(formatWidget, "formatWidget");
+    turnstileWidgetGetCommand = createCommand({
+      metadata: {
+        description: "Get a Turnstile widget",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      },
+      behaviour: {
+        supportTemporary: true,
+        printBanner: /* @__PURE__ */ __name((args) => !args.json && !isNonInteractiveOrCI2(), "printBanner")
+      },
+      args: {
+        sitekey: {
+          type: "string",
+          demandOption: true,
+          description: "The sitekey of the widget"
+        },
+        json: {
+          type: "boolean",
+          default: false,
+          description: "Print the widget as JSON instead of a formatted view"
+        }
+      },
+      positionalArgs: ["sitekey"],
+      async handler(args, { config: config2 }) {
+        const widget = await getWidget(config2, args.sitekey);
+        if (args.json) {
+          logger2.log(JSON.stringify(widget, null, 2));
+          return;
+        }
+        logger2.log(formatWidget(widget));
+      }
+    });
+  }
+});
+
+// src/turnstile/list.ts
+function widgetRowForTable(widget) {
+  return {
+    sitekey: widget.sitekey,
+    name: widget.name,
+    mode: widget.mode,
+    domains: widget.domains.join(", "),
+    clearance_level: widget.clearance_level,
+    bot_fight_mode: widget.bot_fight_mode ? "yes" : "no",
+    region: widget.region,
+    created_on: widget.created_on
+  };
+}
+var turnstileWidgetListCommand;
+var init_list27 = __esm({
+  "src/turnstile/list.ts"() {
+    init_import_meta_url();
+    init_create_command();
+    init_is_interactive();
+    init_logger();
+    init_client16();
+    __name(widgetRowForTable, "widgetRowForTable");
+    turnstileWidgetListCommand = createCommand({
+      metadata: {
+        description: "List Turnstile widgets",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      },
+      behaviour: {
+        supportTemporary: true,
+        printBanner: /* @__PURE__ */ __name((args) => !args.json && !isNonInteractiveOrCI2(), "printBanner")
+      },
+      args: {
+        json: {
+          type: "boolean",
+          default: false,
+          description: "Print widgets as JSON instead of a table"
+        }
+      },
+      async handler(args, { config: config2 }) {
+        const widgets = await listWidgets(config2);
+        if (args.json) {
+          logger2.log(JSON.stringify(widgets, null, 2));
+          return;
+        }
+        if (widgets.length === 0) {
+          logger2.log("No Turnstile widgets found.");
+          return;
+        }
+        const label = widgets.length === 1 ? "widget" : "widgets";
+        logger2.log(`Found ${widgets.length} ${label}:`);
+        logger2.table(widgets.map(widgetRowForTable));
+      }
+    });
+  }
+});
+
+// src/turnstile/update.ts
+var turnstileWidgetUpdateCommand;
+var init_update11 = __esm({
+  "src/turnstile/update.ts"() {
+    init_import_meta_url();
+    init_dist();
+    init_create_command();
+    init_is_interactive();
+    init_logger();
+    init_client16();
+    init_turnstile2();
+    turnstileWidgetUpdateCommand = createCommand({
+      metadata: {
+        description: "Update a Turnstile widget",
+        status: "alpha",
+        owner: "Product: Turnstile"
+      },
+      behaviour: {
+        supportTemporary: true,
+        printBanner: /* @__PURE__ */ __name((args) => !args.json && !isNonInteractiveOrCI2(), "printBanner")
+      },
+      args: {
+        sitekey: {
+          type: "string",
+          demandOption: true,
+          description: "The sitekey of the widget"
+        },
+        name: {
+          type: "string",
+          description: "New human-readable name for the widget"
+        },
+        ...sharedWidgetOptions({ required: false }),
+        json: {
+          type: "boolean",
+          default: false,
+          description: "Print the updated widget as JSON only"
+        }
+      },
+      positionalArgs: ["sitekey"],
+      async handler(args, { config: config2 }) {
+        const hasChanges = args.name !== void 0 || args.domain !== void 0 || args.mode !== void 0 || args.botFightMode !== void 0 || args.clearanceLevel !== void 0 || args.ephemeralId !== void 0 || args.offlabel !== void 0;
+        if (!hasChanges) {
+          throw new UserError(
+            "No fields to update. Pass at least one of --name, --domain, --mode, --clearance-level, --bot-fight-mode, --ephemeral-id, --offlabel.",
+            { telemetryMessage: "turnstile widget update no fields" }
+          );
+        }
+        const current = await getWidget(config2, args.sitekey);
+        const updated = await updateWidget(config2, args.sitekey, {
+          name: args.name ?? current.name,
+          domains: args.domain ?? current.domains,
+          mode: args.mode ?? current.mode,
+          bot_fight_mode: args.botFightMode ?? current.bot_fight_mode,
+          clearance_level: args.clearanceLevel ?? current.clearance_level,
+          ephemeral_id: args.ephemeralId ?? current.ephemeral_id,
+          offlabel: args.offlabel ?? current.offlabel
+        });
+        const { secret: _secret, ...withoutSecret } = updated;
+        if (args.json) {
+          logger2.log(JSON.stringify(withoutSecret, null, 2));
+          return;
+        }
+        logger2.log(`\u2705 Updated Turnstile widget ${updated.sitekey}`);
+        logger2.log(JSON.stringify(withoutSecret, null, 2));
+      }
+    });
+  }
+});
 function describeProfile(profile) {
   return profile ?? "default";
 }
@@ -354231,7 +354738,7 @@ async function listVectors(config2, indexName, options) {
   });
 }
 var jsonContentType2;
-var init_client16 = __esm({
+var init_client17 = __esm({
   "src/vectorize/client.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -354300,7 +354807,7 @@ var init_common3 = __esm({
 
 // src/vectorize/create.ts
 var vectorizeCreateCommand;
-var init_create20 = __esm({
+var init_create21 = __esm({
   "src/vectorize/create.ts"() {
     init_import_meta_url();
     init_dist();
@@ -354308,7 +354815,7 @@ var init_create20 = __esm({
     init_logger();
     init_add_created_resource_config();
     init_getValidBindingName();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeCreateCommand = createCommand({
       metadata: {
@@ -354432,7 +354939,7 @@ var init_createMetadataIndex = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeCreateMetadataIndexCommand = createCommand({
       metadata: {
         description: "Enable metadata filtering on the specified property",
@@ -354475,13 +354982,13 @@ var init_createMetadataIndex = __esm({
 
 // src/vectorize/delete.ts
 var vectorizeDeleteCommand;
-var init_delete19 = __esm({
+var init_delete20 = __esm({
   "src/vectorize/delete.ts"() {
     init_import_meta_url();
     init_create_command();
     init_dialogs();
     init_logger();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeDeleteCommand = createCommand({
       metadata: {
@@ -354538,7 +355045,7 @@ var init_deleteByIds = __esm({
     init_dist();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeDeleteVectorsCommand = createCommand({
       metadata: {
         description: "Delete vectors in a Vectorize index",
@@ -354586,7 +355093,7 @@ var init_deleteMetadataIndex = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeDeleteMetadataIndexCommand = createCommand({
       metadata: {
         description: "Delete metadata indexes",
@@ -354622,12 +355129,12 @@ var init_deleteMetadataIndex = __esm({
 
 // src/vectorize/get.ts
 var vectorizeGetCommand;
-var init_get14 = __esm({
+var init_get15 = __esm({
   "src/vectorize/get.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeGetCommand = createCommand({
       metadata: {
@@ -354685,7 +355192,7 @@ var init_getByIds = __esm({
     init_dist();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeGetVectorsCommand = createCommand({
       metadata: {
         description: "Get vectors from a Vectorize index",
@@ -354753,7 +355260,7 @@ var init_info5 = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeInfoCommand = createCommand({
       metadata: {
         description: "Get additional details about the index",
@@ -354805,7 +355312,7 @@ var init_insert = __esm({
     import_undici21 = __toESM(require_undici());
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeInsertCommand = createCommand({
       metadata: {
@@ -354919,12 +355426,12 @@ var init_insert = __esm({
 
 // src/vectorize/list.ts
 var vectorizeListCommand;
-var init_list27 = __esm({
+var init_list28 = __esm({
   "src/vectorize/list.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeListCommand = createCommand({
       metadata: {
@@ -354987,7 +355494,7 @@ var init_listMetadataIndex = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeListMetadataIndexCommand = createCommand({
       metadata: {
         description: "List metadata properties on which metadata filtering is enabled",
@@ -355046,7 +355553,7 @@ var init_listVectors = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeListVectorsCommand = createCommand({
       metadata: {
         description: "List vector identifiers in a Vectorize index",
@@ -355199,7 +355706,7 @@ var init_query = __esm({
     init_dist();
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     vectorizeQueryCommand = createCommand({
       metadata: {
         description: "Query a Vectorize index",
@@ -355334,7 +355841,7 @@ var init_upsert = __esm({
     import_undici22 = __toESM(require_undici());
     init_create_command();
     init_logger();
-    init_client16();
+    init_client17();
     init_common3();
     vectorizeUpsertCommand = createCommand({
       metadata: {
@@ -356145,7 +356652,7 @@ function formatTrigger(trigger) {
   }
 }
 var BLANK_INPUT3, VERSION_LIST_LIMIT, versionsListCommand;
-var init_list28 = __esm({
+var init_list29 = __esm({
   "src/versions/list.ts"() {
     init_import_meta_url();
     init_dist6();
@@ -356230,7 +356737,7 @@ function getDeploymentSource(deployment) {
   });
 }
 var BLANK_INPUT4, deploymentsListCommand;
-var init_list29 = __esm({
+var init_list30 = __esm({
   "src/versions/deployments/list.ts"() {
     init_import_meta_url();
     init_dist6();
@@ -356241,7 +356748,7 @@ var init_list29 = __esm({
     init_user3();
     init_render_labelled_values();
     init_api2();
-    init_list28();
+    init_list29();
     BLANK_INPUT4 = "-";
     deploymentsListCommand = createCommand({
       metadata: {
@@ -356348,7 +356855,7 @@ var init_status3 = __esm({
     init_user3();
     init_render_labelled_values();
     init_api2();
-    init_list29();
+    init_list30();
     BLANK_INPUT5 = "-";
     deploymentsStatusCommand = createCommand({
       metadata: {
@@ -356969,7 +357476,7 @@ var init_bulk3 = __esm({
 
 // src/versions/secrets/delete.ts
 var versionsSecretDeleteCommand;
-var init_delete20 = __esm({
+var init_delete21 = __esm({
   "src/versions/secrets/delete.ts"() {
     init_import_meta_url();
     init_dist();
@@ -357085,7 +357592,7 @@ var init_delete20 = __esm({
 
 // src/versions/secrets/list.ts
 var versionsSecretsListCommand;
-var init_list30 = __esm({
+var init_list31 = __esm({
   "src/versions/secrets/list.ts"() {
     init_import_meta_url();
     init_dist();
@@ -357405,7 +357912,7 @@ var init_view3 = __esm({
     init_print_bindings();
     init_render_labelled_values();
     init_api2();
-    init_list28();
+    init_list29();
     BLANK_INPUT6 = "-";
     versionsViewCommand = createCommand({
       metadata: {
@@ -357566,7 +358073,7 @@ async function updateService(config2, serviceId, body) {
     }
   );
 }
-var init_client17 = __esm({
+var init_client18 = __esm({
   "src/vpc/client.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -357969,12 +358476,12 @@ var init_validation2 = __esm({
 
 // src/vpc/create.ts
 var vpcServiceCreateCommand;
-var init_create21 = __esm({
+var init_create22 = __esm({
   "src/vpc/create.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client17();
+    init_client18();
     init_shared9();
     init_validation2();
     init_vpc();
@@ -358005,12 +358512,12 @@ var init_create21 = __esm({
 
 // src/vpc/delete.ts
 var vpcServiceDeleteCommand;
-var init_delete21 = __esm({
+var init_delete22 = __esm({
   "src/vpc/delete.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client17();
+    init_client18();
     vpcServiceDeleteCommand = createCommand({
       metadata: {
         description: "Delete a VPC service",
@@ -358036,12 +358543,12 @@ var init_delete21 = __esm({
 
 // src/vpc/get.ts
 var vpcServiceGetCommand;
-var init_get15 = __esm({
+var init_get16 = __esm({
   "src/vpc/get.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client17();
+    init_client18();
     init_shared9();
     vpcServiceGetCommand = createCommand({
       metadata: {
@@ -358071,12 +358578,12 @@ var init_get15 = __esm({
 
 // src/vpc/list.ts
 var vpcServiceListCommand;
-var init_list31 = __esm({
+var init_list32 = __esm({
   "src/vpc/list.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client17();
+    init_client18();
     init_shared9();
     vpcServiceListCommand = createCommand({
       metadata: {
@@ -358100,12 +358607,12 @@ var init_list31 = __esm({
 
 // src/vpc/update.ts
 var vpcServiceUpdateCommand;
-var init_update11 = __esm({
+var init_update12 = __esm({
   "src/vpc/update.ts"() {
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client17();
+    init_client18();
     init_shared9();
     init_validation2();
     init_vpc();
@@ -358170,7 +358677,7 @@ async function search(config2, body) {
   );
 }
 var jsonContentType3;
-var init_client18 = __esm({
+var init_client19 = __esm({
   "src/websearch/client.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -358187,7 +358694,7 @@ var init_search3 = __esm({
     init_import_meta_url();
     init_create_command();
     init_logger();
-    init_client18();
+    init_client19();
     websearchSearchCommand = createCommand({
       metadata: {
         description: "Run a query against Cloudflare Web Search",
@@ -358319,8 +358826,12 @@ async function getLocalInstanceIdFromArgs(port, args) {
   }
   return id;
 }
-async function updateLocalInstanceStatus(port, workflowName, instanceId, action, from) {
-  const body = from ? { action, from } : { action };
+async function updateLocalInstanceStatus(port, workflowName, instanceId, action, from, rollback) {
+  const body = {
+    action,
+    ...from ? { from } : {},
+    ...action === "terminate" && rollback === true ? { rollback: true } : {}
+  };
   await fetchLocalResult(
     port,
     `/workflows/${encodeURIComponent(workflowName)}/instances/${encodeURIComponent(instanceId)}/status`,
@@ -358359,7 +358870,7 @@ var init_local = __esm({
 
 // src/workflows/commands/delete.ts
 var workflowsDeleteCommand;
-var init_delete22 = __esm({
+var init_delete23 = __esm({
   "src/workflows/commands/delete.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -358535,8 +359046,12 @@ async function getInstanceIdFromArgs(accountId, args, config2) {
   }
   return id;
 }
-async function updateInstanceStatus(config2, accountId, workflowName, instanceId, status2, from) {
-  const body = from ? { status: status2, from } : { status: status2 };
+async function updateInstanceStatus(config2, accountId, workflowName, instanceId, status2, from, rollback) {
+  const body = {
+    status: status2,
+    ...from ? { from } : {},
+    ...status2 === "terminate" && rollback === true ? { rollback: true } : {}
+  };
   await fetchResult2(
     config2,
     `/accounts/${accountId}/workflows/${workflowName}/instances/${instanceId}/status`,
@@ -358864,7 +359379,7 @@ var init_describe2 = __esm({
 
 // src/workflows/commands/instances/list.ts
 var workflowsInstancesListCommand;
-var init_list32 = __esm({
+var init_list33 = __esm({
   "src/workflows/commands/instances/list.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -359306,17 +359821,37 @@ var init_terminate = __esm({
           describe: "ID of the instance - instead of an UUID you can type 'latest' to get the latest instance and describe it",
           type: "string",
           demandOption: true
+        },
+        rollback: {
+          describe: "Run registered rollback handlers before terminating",
+          type: "boolean",
+          default: false
         }
       },
       async handler(args, { config: config2 }) {
         let id;
         if (args.local) {
           id = await getLocalInstanceIdFromArgs(args.port, args);
-          await updateLocalInstanceStatus(args.port, args.name, id, "terminate");
+          await updateLocalInstanceStatus(
+            args.port,
+            args.name,
+            id,
+            "terminate",
+            void 0,
+            args.rollback
+          );
         } else {
           const accountId = await requireAuth(config2);
           id = await getInstanceIdFromArgs(accountId, args, config2);
-          await updateInstanceStatus(config2, accountId, args.name, id, "terminate");
+          await updateInstanceStatus(
+            config2,
+            accountId,
+            args.name,
+            id,
+            "terminate",
+            void 0,
+            args.rollback
+          );
         }
         logger2.info(
           `\u{1F977} The instance "${id}" from ${args.name} was terminated successfully`
@@ -359399,7 +359934,7 @@ var init_terminate_all = __esm({
 
 // src/workflows/commands/list.ts
 var workflowsListCommand;
-var init_list33 = __esm({
+var init_list34 = __esm({
   "src/workflows/commands/list.ts"() {
     init_import_meta_url();
     init_cfetch();
@@ -360577,6 +361112,34 @@ function createCLIParser(argv) {
     }
   ]);
   registry2.registerNamespace("flagship");
+  registry2.define([
+    { command: "wrangler turnstile", definition: turnstileNamespace },
+    {
+      command: "wrangler turnstile widget",
+      definition: turnstileWidgetNamespace
+    },
+    {
+      command: "wrangler turnstile widget create",
+      definition: turnstileWidgetCreateCommand
+    },
+    {
+      command: "wrangler turnstile widget delete",
+      definition: turnstileWidgetDeleteCommand
+    },
+    {
+      command: "wrangler turnstile widget get",
+      definition: turnstileWidgetGetCommand
+    },
+    {
+      command: "wrangler turnstile widget list",
+      definition: turnstileWidgetListCommand
+    },
+    {
+      command: "wrangler turnstile widget update",
+      definition: turnstileWidgetUpdateCommand
+    }
+  ]);
+  registry2.registerNamespace("turnstile");
   registry2.define([
     { command: "wrangler tunnel", definition: tunnelNamespace },
     {
@@ -361753,22 +362316,28 @@ var init_src2 = __esm({
     init_list26();
     init_quick_start();
     init_run();
+    init_create20();
+    init_delete19();
+    init_get14();
+    init_turnstile2();
+    init_list27();
+    init_update11();
     init_type_generation();
     init_commands10();
     init_profiles3();
     init_constants5();
     init_log_file();
-    init_create20();
+    init_create21();
     init_createMetadataIndex();
-    init_delete19();
+    init_delete20();
     init_deleteByIds();
     init_deleteMetadataIndex();
-    init_get14();
+    init_get15();
     init_getByIds();
     init_vectorize2();
     init_info5();
     init_insert();
-    init_list27();
+    init_list28();
     init_listMetadataIndex();
     init_listVectors();
     init_query();
@@ -361776,38 +362345,38 @@ var init_src2 = __esm({
     init_versions8();
     init_deploy5();
     init_deployments5();
-    init_list29();
+    init_list30();
     init_status3();
     init_view2();
-    init_list28();
+    init_list29();
     init_rollback();
     init_secrets4();
     init_bulk3();
-    init_delete20();
-    init_list30();
+    init_delete21();
+    init_list31();
     init_put();
     init_upload5();
     init_view3();
-    init_create21();
-    init_delete21();
-    init_get15();
+    init_create22();
+    init_delete22();
+    init_get16();
     init_vpc();
-    init_list31();
-    init_update11();
+    init_list32();
+    init_update12();
     init_websearch();
     init_search3();
     init_workflows2();
-    init_delete22();
+    init_delete23();
     init_describe();
     init_describe2();
-    init_list32();
+    init_list33();
     init_pause();
     init_restart();
     init_resume();
     init_send_event2();
     init_terminate();
     init_terminate_all();
-    init_list33();
+    init_list34();
     init_trigger();
     init_wrangler_banner();
     if (proxy) {
@@ -369243,6 +369812,17 @@ function createTestHarness(options) {
     return miniflare;
   }
   __name(getRuntimeMiniflare, "getRuntimeMiniflare");
+  function getWorkerDevEnv(session, workerName) {
+    const devEnv = session.devEnvs.find(
+      (d8) => d8.config.latestConfig?.name === workerName
+    );
+    assert42__default.default(
+      devEnv,
+      `Worker ${JSON.stringify(workerName)} config is not available.`
+    );
+    return devEnv;
+  }
+  __name(getWorkerDevEnv, "getWorkerDevEnv");
   function getInputUrl(input) {
     if (typeof input === "string") {
       return input;
@@ -369303,10 +369883,7 @@ function createTestHarness(options) {
         const session = await resolveSession();
         const miniflare = await getRuntimeMiniflare(session);
         const workerName = resolveWorkerName2(session, name2);
-        const devEnv = session.devEnvs.find(
-          (d8) => d8.config.latestConfig?.name === workerName
-        );
-        const bindingConfig = devEnv?.config.latestConfig?.bindings?.[bindingName];
+        const bindingConfig = getWorkerDevEnv(session, workerName).config.latestConfig?.bindings?.[bindingName];
         if (bindingConfig?.type !== "workflow") {
           throw new TypeError(
             `No Workflow binding named ${JSON.stringify(bindingName)} found in ${JSON.stringify(workerName)} worker.`
@@ -369365,13 +369942,34 @@ function createTestHarness(options) {
           const result = await response.json();
           return result;
         },
+        async listDurableObjectIds(bindingName) {
+          const session = await resolveSession();
+          const miniflare = await getRuntimeMiniflare(session);
+          const workerName = resolveWorkerName2(session, name2);
+          debugLog(`durable object ids - ${bindingName} - started`, workerName);
+          try {
+            const ids = await miniflare.listDurableObjectIds(
+              bindingName,
+              workerName
+            );
+            debugLog(
+              `durable object ids - ${bindingName} - completed (${ids.length} found)`,
+              workerName
+            );
+            return ids;
+          } catch (error53) {
+            debugLog(
+              `durable object ids - ${bindingName} - failed`,
+              workerName
+            );
+            throw error53;
+          }
+        },
         async applyD1Migrations(bindingName) {
           const session = await resolveSession();
           const miniflare = await getRuntimeMiniflare(session);
           const workerName = resolveWorkerName2(session, name2);
-          const workerConfig = session.devEnvs.find(
-            (devEnv) => devEnv.config.latestConfig?.name === workerName
-          )?.config.latestWranglerConfig;
+          const workerConfig = getWorkerDevEnv(session, workerName).config.latestWranglerConfig;
           assert42__default.default(
             workerConfig,
             `Worker ${JSON.stringify(workerName)} config is not available.`