wrangler 4.129.0 → 4.130.0

package/config-schema.json

@@ -4106,16 +4106,16 @@
       "additionalProperties": false,
       "properties": {
         "logpush": {
-          "$ref": "#/definitions/interface-769040647-11843-22205-769040647-0-567642004818536"
+          "$ref": "#/definitions/interface-769040647-12589-22951-769040647-0-575102004818536"
         },
         "observability": {
-          "$ref": "#/definitions/interface-769040647-11843-22205-769040647-0-567642004818536"
+          "$ref": "#/definitions/interface-769040647-12589-22951-769040647-0-575102004818536"
         },
         "limits": {
-          "$ref": "#/definitions/interface-769040647-11843-22205-769040647-0-567642004818536"
+          "$ref": "#/definitions/interface-769040647-12589-22951-769040647-0-575102004818536"
         },
         "cache": {
-          "$ref": "#/definitions/interface-769040647-11843-22205-769040647-0-567642004818536"
+          "$ref": "#/definitions/interface-769040647-12589-22951-769040647-0-575102004818536"
         },
         "define": {
           "type": "object",
@@ -5419,7 +5419,7 @@
       "description": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments. Previews are branches of your Worker's main instance used to test features during feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `cache`",
       "markdownDescription": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments.\nPreviews are branches of your Worker's main instance used to test features\nduring feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `cache`"
     },
-    "interface-769040647-11843-22205-769040647-0-567642004818536": {
+    "interface-769040647-12589-22951-769040647-0-575102004818536": {
       "type": "object",
       "properties": {
         "name": {
@@ -6038,6 +6038,11 @@
           "description": "The class name of the Durable Object the container is connected to.",
           "markdownDescription": "The class name of the Durable Object the container is connected to."
         },
+        "observability": {
+          "$ref": "#/definitions/ContainerObservability",
+          "description": "Specify the observability behavior of this container application.\n\nWhen set, this overrides the root `observability` config for this container.",
+          "markdownDescription": "Specify the observability behavior of this container application.\n\nWhen set, this overrides the root `observability` config for this container."
+        },
         "scheduling_policy": {
           "type": "string",
           "enum": [
@@ -6229,6 +6234,36 @@
       "required": [
         "image"
       ],
+      "additionalProperties": false
+    },
+    "ContainerObservability": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "If observability is enabled for this container application",
+          "markdownDescription": "If observability is enabled for this container application"
+        },
+        "logs": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean"
+            }
+          },
+          "additionalProperties": false
+        },
+        "target_instance_percentage": {
+          "type": "number",
+          "description": "Percentage of instances to target with application-level observability hot reloads. Mutually exclusive with `target_instance_count`.",
+          "markdownDescription": "Percentage of instances to target with application-level observability hot reloads.\nMutually exclusive with `target_instance_count`."
+        },
+        "target_instance_count": {
+          "type": "number",
+          "description": "Number of instances to target with application-level observability hot reloads. Mutually exclusive with `target_instance_percentage`.",
+          "markdownDescription": "Number of instances to target with application-level observability hot reloads.\nMutually exclusive with `target_instance_percentage`."
+        }
+      },
       "additionalProperties": false,
       "description": "Configuration for a container application",
       "markdownDescription": "Configuration for a container application"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.129.0",
+  "version": "4.130.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "assembly",
@@ -66,17 +66,17 @@
     "esbuild": "0.28.1",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20260903.1",
-    "@cloudflare/kv-asset-handler": "0.5.0",
-    "miniflare": "5.20260903.0-alpha",
-    "@cloudflare/unenv-preset": "2.16.1"
+    "workerd": "1.20260908.1",
+    "miniflare": "5.20260908.0-alpha",
+    "@cloudflare/unenv-preset": "2.16.1",
+    "@cloudflare/kv-asset-handler": "0.5.0"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
     "@aws-sdk/s3-request-presigner": "^3.721.0",
     "@bomb.sh/tab": "^0.0.12",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^5.20260903.1",
+    "@cloudflare/workers-types": "^5.20260908.1",
     "@cspotcode/source-map-support": "0.8.1",
     "@netlify/build-info": "10.5.1",
     "@sentry/node": "^7.86.0",
@@ -156,25 +156,25 @@
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
     "zod": "4.4.3",
-    "@cloudflare/autoconfig": "0.4.2",
-    "@cloudflare/cli-shared-helpers": "0.1.27",
-    "@cloudflare/build-output-utils": "0.4.0",
-    "@cloudflare/config": "0.10.0",
+    "@cloudflare/autoconfig": "0.4.3",
+    "@cloudflare/build-output-utils": "0.4.1",
+    "@cloudflare/cli-shared-helpers": "0.1.28",
+    "@cloudflare/deploy-helpers": "0.10.3",
+    "@cloudflare/config": "0.11.0",
     "@cloudflare/containers-shared": "0.16.0",
-    "@cloudflare/deploy-helpers": "0.10.1",
+    "@cloudflare/pages-shared": "^0.13.178",
+    "@cloudflare/runtime-types": "0.0.23",
     "@cloudflare/pages-functions": "0.1.0",
-    "@cloudflare/pages-shared": "^0.13.176",
-    "@cloudflare/workers-auth": "0.6.8",
-    "@cloudflare/workflows-shared": "0.13.0",
-    "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/workers-utils": "0.36.0",
-    "@cloudflare/runtime-types": "0.0.21",
-    "@cloudflare/remote-bindings": "0.0.19",
+    "@cloudflare/remote-bindings": "0.0.21",
+    "@cloudflare/workers-auth": "0.6.10",
     "@cloudflare/workers-shared": "0.19.9",
-    "@cloudflare/workers-tsconfig": "0.0.0"
+    "@cloudflare/shared-ast-primitives": "1.1.0",
+    "@cloudflare/workers-tsconfig": "0.0.0",
+    "@cloudflare/workers-utils": "0.37.0",
+    "@cloudflare/workflows-shared": "0.13.0"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^5.20260903.1"
+    "@cloudflare/workers-types": "^5.20260908.1"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/templates/startDevWorker/ProxyWorker.ts

@@ -163,81 +163,164 @@ export class ProxyWorker implements DurableObject {
 				}
 			}
 
-			// explicitly NOT await-ing this promise, we are in a loop and want to process the whole queue quickly + synchronously
-			void fetch(userWorkerUrl, new Request(request, { headers }))
-				.then(async (res) => {
-					res = new Response(res.body, res);
-					rewriteUrlRelatedHeaders(res.headers, innerUrl, outerUrl);
-
-					await checkForPreviewTokenError(res, this.env, proxyData);
-
-					if (isHtmlResponse(res)) {
-						res = insertLiveReloadScript(request, res, this.env, proxyData);
-					}
-
-					if (isSseResponse(res)) {
-						void sendMessageToProxyController(this.env, {
-							type: "sseResponseDetected",
-						});
-					}
-
-					deferredResponse.resolve(res);
-				})
-				.catch((error: Error) => {
-					// errors here are network errors or from response post-processing
-					// to catch only network errors, use the 2nd param of the fetch.then()
-
-					// we have crossed an async boundary, so proxyData may have changed
-					// if proxyData.userWorkerUrl has changed, it means there is a new downstream UserWorker
-					// and that this error is stale since it was for a request to the old UserWorker
-					// only report the error if the request still targets the current
-					// UserWorker. isSameUserWorkerOrigin compares origin (not href) so a
-					// genuine error on a non-root path isn't misread as a reload — see
-					// its docs.
-					if (
-						isSameUserWorkerOrigin(userWorkerUrl, this.proxyData?.userWorkerUrl)
-					) {
-						void sendMessageToProxyController(this.env, {
-							type: "error",
-							error: {
-								name: error.name,
-								message: error.message,
-								stack: error.stack,
-								cause: error.cause,
-							},
-						});
-
-						deferredResponse.reject(error);
-					}
-
-					// if the request can be retried (subset of idempotent requests which have no body), requeue it
-					else if (request.method === "GET" || request.method === "HEAD") {
-						this.requestRetryQueue.set(request, deferredResponse);
-						// we would only end up here if the downstream UserWorker is chang*ing*
-						// i.e. we are in a `pause`d state and expecting a `play` message soon
-						// this request will be processed (retried) when the `play` message arrives
-						// for that reason, we do not need to call `this.processQueue` here
-						// (but, also, it can't hurt to call it since it bails when
-						// in a `pause`d state i.e. `this.proxyData` is undefined)
-					}
-
-					// if the request cannot be retried, respond with 503 Service Unavailable
-					// important to note, this is not an (unexpected) error -- it is an acceptable flow of local development
-					// it would be incorrect to retry non-idempotent requests
-					// and would require cloning all body streams to avoid stream reuse (which is inefficient but not out of the question in the future)
-					// this is a good enough UX for now since it solves the most common GET use-case
-					else {
-						deferredResponse.resolve(
-							new Response(
-								"Your worker restarted mid-request. Please try sending the request again. Only GET or HEAD requests are retried automatically.",
-								{
-									status: 503,
-									headers: { "Retry-After": "0" },
-								}
+			/**
+			 * Sends the request to the UserWorker and settles `deferredResponse`
+			 * with the outcome — or requeues the request if the UserWorker is
+			 * mid-reload. The promise chain is deliberately not awaited (`void`):
+			 * we are in a loop and want to process the whole queue quickly +
+			 * synchronously.
+			 *
+			 * A connection-level failure (the `fetch` itself rejects, so no
+			 * response was received) on a same-origin GET/HEAD request is retried
+			 * before being reported — see the rejection handler.
+			 *
+			 * Kept as a `const` arrow function: the handlers re-read
+			 * `this.proxyData` across async boundaries to detect UserWorker
+			 * reloads, so they need the ProxyWorker's lexical `this`.
+			 *
+			 * @param attempt the number of attempts that have already failed
+			 * (`0` on the first try)
+			 */
+			const attemptUserWorkerFetch = (attempt = 0) =>
+				void fetch(userWorkerUrl, new Request(request, { headers }))
+					.then(
+						async (res) => {
+							if (attempt > 0) {
+								console.warn(
+									`ProxyWorker: ${request.method} ${request.url} recovered on attempt ${attempt + 1} after a dropped connection to the UserWorker`
+								);
+							}
+
+							res = new Response(res.body, res);
+							rewriteUrlRelatedHeaders(res.headers, innerUrl, outerUrl);
+
+							await checkForPreviewTokenError(res, this.env, proxyData);
+
+							if (isHtmlResponse(res)) {
+								res = insertLiveReloadScript(request, res, this.env, proxyData);
+							}
+
+							if (isSseResponse(res)) {
+								void sendMessageToProxyController(this.env, {
+									type: "sseResponseDetected",
+								});
+							}
+
+							deferredResponse.resolve(res);
+						},
+						(error: Error) => {
+							// the fetch itself rejected: a connection-level failure, and no
+							// response was received. Errors thrown while post-processing a
+							// received response skip this handler and land in the .catch
+							// below, so they are reported rather than retried and can never
+							// re-run the UserWorker's handler.
+							//
+							// When the UserWorker origin is unchanged (i.e. this is not a
+							// reload — see the same check in the .catch below), the failure
+							// is most commonly the UserWorker's HTTP server closing a reused
+							// keep-alive connection at the same moment this request was
+							// written to it (kj's client pool idleTimeout and server
+							// pipelineTimeout both default to 5s, so a connection idling ~5s
+							// races the close). Retrying bodyless requests draws a fresh
+							// connection and absorbs the race, mirroring the requeue in the
+							// .catch for reloads: retry immediately, then once more after
+							// 250ms (3 attempts in total).
+							if (
+								isSameUserWorkerOrigin(
+									userWorkerUrl,
+									this.proxyData?.userWorkerUrl
+								) &&
+								(request.method === "GET" || request.method === "HEAD") &&
+								attempt < 2
+							) {
+								setTimeout(
+									() => {
+										// the UserWorker may have started reloading while this
+										// retry was queued (even at 0ms — setTimeout defers to a
+										// later task). `proxyData` carries the destination AND the
+										// headers, so retrying with the captured one could reach
+										// the pre-reload Worker or send a stale preview token.
+										// Requeue instead and let the current proxyData rebuild it.
+										if (this.proxyData !== proxyData) {
+											this.requestRetryQueue.set(request, deferredResponse);
+											this.processQueue();
+											return;
+										}
+
+										attemptUserWorkerFetch(attempt + 1);
+									},
+									attempt === 0 ? 0 : 250
+								);
+								return;
+							}
+
+							throw error;
+						}
+					)
+					.catch((error: Error) => {
+						// errors here are from response post-processing, or connection-
+						// level failures rethrown by the rejection handler above (a
+						// non-retriable method, or the retry budget was exhausted)
+
+						// we have crossed an async boundary, so proxyData may have changed
+						// if proxyData.userWorkerUrl has changed, it means there is a new downstream UserWorker
+						// and that this error is stale since it was for a request to the old UserWorker
+						// only report the error if the request still targets the current
+						// UserWorker. isSameUserWorkerOrigin compares origin (not href) so a
+						// genuine error on a non-root path isn't misread as a reload — see
+						// its docs.
+						if (
+							isSameUserWorkerOrigin(
+								userWorkerUrl,
+								this.proxyData?.userWorkerUrl
 							)
-						);
-					}
-				});
+						) {
+							const attemptsNote = ` (failed after ${attempt + 1} ${
+								attempt === 0 ? "attempt" : "attempts"
+							})`;
+							void sendMessageToProxyController(this.env, {
+								type: "error",
+								error: {
+									name: error.name,
+									message: `${request.method} ${request.url}${attemptsNote}: ${error.message}`,
+									stack: error.stack,
+									cause: error.cause,
+								},
+							});
+
+							deferredResponse.reject(error);
+						}
+
+						// if the request can be retried (subset of idempotent requests which have no body), requeue it
+						else if (request.method === "GET" || request.method === "HEAD") {
+							this.requestRetryQueue.set(request, deferredResponse);
+							// we would only end up here if the downstream UserWorker is chang*ing*
+							// i.e. we are in a `pause`d state and expecting a `play` message soon
+							// this request will be processed (retried) when the `play` message arrives
+							// for that reason, we do not need to call `this.processQueue` here
+							// (but, also, it can't hurt to call it since it bails when
+							// in a `pause`d state i.e. `this.proxyData` is undefined)
+						}
+
+						// if the request cannot be retried, respond with 503 Service Unavailable
+						// important to note, this is not an (unexpected) error -- it is an acceptable flow of local development
+						// it would be incorrect to retry non-idempotent requests
+						// and would require cloning all body streams to avoid stream reuse (which is inefficient but not out of the question in the future)
+						// this is a good enough UX for now since it solves the most common GET use-case
+						else {
+							deferredResponse.resolve(
+								new Response(
+									"Your worker restarted mid-request. Please try sending the request again. Only GET or HEAD requests are retried automatically.",
+									{
+										status: 503,
+										headers: { "Retry-After": "0" },
+									}
+								)
+							);
+						}
+					});
+
+			attemptUserWorkerFetch();
 		}
 	}
 }

package/wrangler-dist/ProxyWorker.js

@@ -139,26 +139,57 @@ var ProxyWorker = class {
           headers.set(key, value);
         }
       }
-      void fetch(userWorkerUrl, new Request(request, { headers })).then(async (res) => {
-        res = new Response(res.body, res);
-        rewriteUrlRelatedHeaders(res.headers, innerUrl, outerUrl);
-        await checkForPreviewTokenError(res, this.env, proxyData);
-        if (isHtmlResponse(res)) {
-          res = insertLiveReloadScript(request, res, this.env, proxyData);
+      const attemptUserWorkerFetch = (attempt = 0) => void fetch(userWorkerUrl, new Request(request, { headers })).then(
+        async (res) => {
+          if (attempt > 0) {
+            console.warn(
+              `ProxyWorker: ${request.method} ${request.url} recovered on attempt ${attempt + 1} after a dropped connection to the UserWorker`
+            );
+          }
+          res = new Response(res.body, res);
+          rewriteUrlRelatedHeaders(res.headers, innerUrl, outerUrl);
+          await checkForPreviewTokenError(res, this.env, proxyData);
+          if (isHtmlResponse(res)) {
+            res = insertLiveReloadScript(request, res, this.env, proxyData);
+          }
+          if (isSseResponse(res)) {
+            void sendMessageToProxyController(this.env, {
+              type: "sseResponseDetected"
+            });
+          }
+          deferredResponse.resolve(res);
+        },
+        (error) => {
+          if (isSameUserWorkerOrigin(
+            userWorkerUrl,
+            this.proxyData?.userWorkerUrl
+          ) && (request.method === "GET" || request.method === "HEAD") && attempt < 2) {
+            setTimeout(
+              () => {
+                if (this.proxyData !== proxyData) {
+                  this.requestRetryQueue.set(request, deferredResponse);
+                  this.processQueue();
+                  return;
+                }
+                attemptUserWorkerFetch(attempt + 1);
+              },
+              attempt === 0 ? 0 : 250
+            );
+            return;
+          }
+          throw error;
         }
-        if (isSseResponse(res)) {
-          void sendMessageToProxyController(this.env, {
-            type: "sseResponseDetected"
-          });
-        }
-        deferredResponse.resolve(res);
-      }).catch((error) => {
-        if (isSameUserWorkerOrigin(userWorkerUrl, this.proxyData?.userWorkerUrl)) {
+      ).catch((error) => {
+        if (isSameUserWorkerOrigin(
+          userWorkerUrl,
+          this.proxyData?.userWorkerUrl
+        )) {
+          const attemptsNote = ` (failed after ${attempt + 1} ${attempt === 0 ? "attempt" : "attempts"})`;
           void sendMessageToProxyController(this.env, {
             type: "error",
             error: {
               name: error.name,
-              message: error.message,
+              message: `${request.method} ${request.url}${attemptsNote}: ${error.message}`,
               stack: error.stack,
               cause: error.cause
             }
@@ -178,6 +209,7 @@ var ProxyWorker = class {
           );
         }
       });
+      attemptUserWorkerFetch();
     }
   }
 };

package/wrangler-dist/cli.d.ts

@@ -1274,6 +1274,23 @@ type UnsafeBinding = {
 /**
  * Configuration for a container application
  */
+type ContainerObservability = {
+    /** If observability is enabled for this container application */
+    enabled?: boolean;
+    logs?: {
+        enabled?: boolean;
+    };
+    /**
+     * Percentage of instances to target with application-level observability hot reloads.
+     * Mutually exclusive with `target_instance_count`.
+     */
+    target_instance_percentage?: number;
+    /**
+     * Number of instances to target with application-level observability hot reloads.
+     * Mutually exclusive with `target_instance_percentage`.
+     */
+    target_instance_count?: number;
+};
 type ContainerApp = {
     /**
      * Name of the application.
@@ -1320,6 +1337,12 @@ type ContainerApp = {
      * field. Exactly one of the two directions must be configured.
      */
     class_name?: string;
+    /**
+     * Specify the observability behavior of this container application.
+     *
+     * When set, this overrides the root `observability` config for this container.
+     */
+    observability?: ContainerObservability;
     /**
      * The scheduling policy of the application
      * @optional