wrangler 4.65.0 → 4.66.0

package/wrangler-dist/cli.js

@@ -5866,7 +5866,7 @@ Pages requires Durable Object bindings to specify the name of the Worker where t
     }
   }
 }
-var require_XDGAppPaths, require_XDG, require_OSPaths, require_node, require_mod_cjs, require_node2, require_mod_cjs2, require_node3, require_mod_cjs3; exports.unstable_defaultWranglerConfig = void 0; exports.experimental_patchConfig = void 0; var getJSONPath, PatchConfigError, MAX_WORKFLOW_NAME_LENGTH, ALLOWED_STRING_ID_PATTERN, ALLOWED_WORKFLOW_INSTANCE_ID_REGEX, ALLOWED_WORKFLOW_NAME_REGEX, mod_esm_exports, import_mod_cjs, mod_esm_default, getC3CommandFromEnv, getWranglerSendMetricsFromEnv, getWranglerSendErrorReportsFromEnv, getCloudflareApiEnvironmentFromEnv, COMPLIANCE_REGION_CONFIG_PUBLIC, COMPLIANCE_REGION_CONFIG_UNKNOWN, getCloudflareComplianceRegionFromEnv, getCloudflareComplianceRegion, getCloudflareApiBaseUrlFromEnv, getCloudflareApiBaseUrl, getSanitizeLogs, getOutputFileDirectoryFromEnv, getOutputFilePathFromEnv, getCIMatchTag, getCIOverrideName, getCIOverrideNetworkModeHost, getCIGeneratePreviewAlias, getWorkersCIBranchName, getBuildConditionsFromEnv, getBuildPlatformFromEnv, getRegistryPath, getD1ExtraLocationChoices, getDockerPath, getSubdomainMixedStateCheckDisabled, getCloudflareLoadDevVarsFromDotEnv, getCloudflareIncludeProcessEnvFromEnv, getTraceHeader, getDisableConfigWatching, getWranglerHideBanner, getCloudflareEnv, getOpenNextDeployFromEnv, getLocalExplorerEnabledFromEnv, Diagnostics, appendEnvName, isString, isValidName, isValidDateTimeStringFormat, isStringArray, isOneOf, all, isMutuallyExclusiveWith, isBoolean, validateRequiredProperty, validateAtLeastOnePropertyRequired, validateOptionalProperty, validateTypedArray, validateOptionalTypedArray, isRequiredProperty, isOptionalProperty, hasProperty, validateAdditionalProperties, getBindingNames, isBindingList, isNamespaceList, isRecord, validateUniqueNameProperty, bucketFormatMessage, friendlyBindingNames, bindingTypeFriendlyNames, ENGLISH, ALLOWED_INSTANCE_TYPES, isRoute, isRouteArray, validateTailConsumers, validateStreamingTailConsumers, validateAndNormalizeRules, validateTriggers, validateRules, validateRule, validateDefines, validateVars, validateBindingsProperty, validateUnsafeSettings, validateDurableObjectBinding, workflowNameFormatMessage, validateWorkflowBinding, validateCflogfwdrObject, validateCflogfwdrBinding, validateAssetsConfig, validateNamedSimpleBinding, validateAIBinding, validateVersionMetadataBinding, validateUnsafeBinding, validateBindingArray, validateCloudchamberConfig, validateKVBinding, validateSendEmailBinding, validateQueueBinding, validateR2Binding, validateD1Binding, validateVectorizeBinding, validateHyperdriveBinding, validateVpcServiceBinding, validateBindingsHaveUniqueNames, validateServiceBinding, validateAnalyticsEngineBinding, validateWorkerNamespaceBinding, validateMTlsCertificateBinding, validateConsumer, validateCompatibilityDate, validatePipelineBinding, validateSecretsStoreSecretBinding, validateHelloWorldBinding, validateWorkerLoaderBinding, validateRateLimitBinding, validateMigrations, validateObservability, validatePythonModules, supportedPagesConfigFields;
+var require_XDGAppPaths, require_XDG, require_OSPaths, require_node, require_mod_cjs, require_node2, require_mod_cjs2, require_node3, require_mod_cjs3; exports.unstable_defaultWranglerConfig = void 0; exports.experimental_patchConfig = void 0; var getJSONPath, PatchConfigError, MAX_WORKFLOW_NAME_LENGTH, ALLOWED_STRING_ID_PATTERN, ALLOWED_WORKFLOW_INSTANCE_ID_REGEX, ALLOWED_WORKFLOW_NAME_REGEX, mod_esm_exports, import_mod_cjs, mod_esm_default, getC3CommandFromEnv, getWranglerSendMetricsFromEnv, getWranglerSendErrorReportsFromEnv, getCloudflareApiEnvironmentFromEnv, COMPLIANCE_REGION_CONFIG_PUBLIC, COMPLIANCE_REGION_CONFIG_UNKNOWN, getCloudflareComplianceRegionFromEnv, getCloudflareComplianceRegion, getCloudflareApiBaseUrlFromEnv, getCloudflareApiBaseUrl, getSanitizeLogs, getOutputFileDirectoryFromEnv, getOutputFilePathFromEnv, getCIMatchTag, getCIOverrideName, getCIOverrideNetworkModeHost, getCIGeneratePreviewAlias, getWorkersCIBranchName, getBuildConditionsFromEnv, getBuildPlatformFromEnv, getRegistryPath, getD1ExtraLocationChoices, getDockerPath, getSubdomainMixedStateCheckDisabled, getCloudflareLoadDevVarsFromDotEnv, getCloudflareIncludeProcessEnvFromEnv, getTraceHeader, getDisableConfigWatching, getWranglerHideBanner, getCloudflareEnv, getOpenNextDeployFromEnv, getLocalExplorerEnabledFromEnv, getWranglerCacheDirFromEnv, Diagnostics, appendEnvName, isString, isValidName, isValidDateTimeStringFormat, isStringArray, isOneOf, all, isMutuallyExclusiveWith, isBoolean, validateRequiredProperty, validateAtLeastOnePropertyRequired, validateOptionalProperty, validateTypedArray, validateOptionalTypedArray, isRequiredProperty, isOptionalProperty, hasProperty, validateAdditionalProperties, getBindingNames, isBindingList, isNamespaceList, isRecord, validateUniqueNameProperty, bucketFormatMessage, friendlyBindingNames, bindingTypeFriendlyNames, ENGLISH, ALLOWED_INSTANCE_TYPES, isRoute, isRouteArray, validateTailConsumers, validateStreamingTailConsumers, validateAndNormalizeRules, validateTriggers, validateRules, validateRule, validateDefines, validateVars, validateBindingsProperty, validateUnsafeSettings, validateDurableObjectBinding, workflowNameFormatMessage, validateWorkflowBinding, validateCflogfwdrObject, validateCflogfwdrBinding, validateAssetsConfig, validateNamedSimpleBinding, validateAIBinding, validateVersionMetadataBinding, validateUnsafeBinding, validateBindingArray, validateCloudchamberConfig, validateKVBinding, validateSendEmailBinding, validateQueueBinding, validateR2Binding, validateD1Binding, validateVectorizeBinding, validateHyperdriveBinding, validateVpcServiceBinding, validateBindingsHaveUniqueNames, validateServiceBinding, validateAnalyticsEngineBinding, validateWorkerNamespaceBinding, validateMTlsCertificateBinding, validateConsumer, validateCompatibilityDate, validatePipelineBinding, validateSecretsStoreSecretBinding, validateHelloWorldBinding, validateWorkerLoaderBinding, validateRateLimitBinding, validateMigrations, validateObservability, validatePythonModules, supportedPagesConfigFields;
 var init_dist = __esm({
   "../workers-utils/dist/index.mjs"() {
     init_import_meta_url();
@@ -6715,6 +6715,9 @@ var init_dist = __esm({
       variableName: "X_LOCAL_EXPLORER",
       defaultValue: false
     });
+    getWranglerCacheDirFromEnv = getEnvironmentVariableFactory({
+      variableName: "WRANGLER_CACHE_DIR"
+    });
     Diagnostics = class {
       static {
         __name(this, "Diagnostics");
@@ -50980,7 +50983,7 @@ var name, version;
 var init_package = __esm({
   "package.json"() {
     name = "wrangler";
-    version = "4.65.0";
+    version = "4.66.0";
   }
 });
 
@@ -56888,17 +56891,25 @@ var init_is_interactive = __esm({
   }
 });
 function getCacheFolder() {
-  if (__cacheFolder || __cacheFolder === null) {
-    return __cacheFolder;
+  const envCacheDir = getWranglerCacheDirFromEnv();
+  if (envCacheDir) {
+    return envCacheDir;
   }
   const closestNodeModulesDirectory = findUpSync2("node_modules", {
     type: "directory"
   });
-  __cacheFolder = closestNodeModulesDirectory ? path32__namespace.join(closestNodeModulesDirectory, ".cache/wrangler") : null;
-  if (!__cacheFolder) {
-    logger.debug("No folder available to cache configuration");
+  const nodeModulesCache = closestNodeModulesDirectory ? path32__namespace.join(closestNodeModulesDirectory, ".cache", "wrangler") : null;
+  const wranglerCache = path32__namespace.join(process.cwd(), ".wrangler", "cache");
+  if (nodeModulesCache && fs24.existsSync(nodeModulesCache)) {
+    return nodeModulesCache;
+  }
+  if (fs24.existsSync(wranglerCache)) {
+    return wranglerCache;
+  }
+  if (nodeModulesCache) {
+    return nodeModulesCache;
   }
-  return __cacheFolder;
+  return wranglerCache;
 }
 function showCacheMessage(fields, folder) {
   if (!cacheMessageShown && !isNonInteractiveOrCI()) {
@@ -56915,16 +56926,10 @@ function showCacheMessage(fields, folder) {
 function getConfigCache(fileName) {
   try {
     const cacheFolder = getCacheFolder();
-    if (cacheFolder) {
-      const configCacheLocation = path32__namespace.join(cacheFolder, fileName);
-      const configCache = JSON.parse(
-        fs24.readFileSync(configCacheLocation, "utf-8")
-      );
-      showCacheMessage(Object.keys(configCache), cacheFolder);
-      return configCache;
-    } else {
-      return {};
-    }
+    const configCacheLocation = path32__namespace.join(cacheFolder, fileName);
+    const configCache = JSON.parse(fs24.readFileSync(configCacheLocation, "utf-8"));
+    showCacheMessage(Object.keys(configCache), cacheFolder);
+    return configCache;
   } catch {
     return {};
   }
@@ -56947,12 +56952,12 @@ function purgeConfigCaches() {
   if (cacheFolder) {
     fs24.rmSync(cacheFolder, { recursive: true, force: true });
   }
-  __cacheFolder = void 0;
 }
-var cacheMessageShown, __cacheFolder, arrayFormatter;
+var cacheMessageShown, arrayFormatter;
 var init_config_cache = __esm({
   "src/config-cache.ts"() {
     init_import_meta_url();
+    init_dist();
     init_find_up();
     init_is_interactive();
     init_logger();
@@ -216459,7 +216464,7 @@ var init_astro2 = __esm({
         return {
           wranglerConfig: {
             main: `${outputDir}/_worker.js/index.js`,
-            compatibility_flags: ["nodejs_compat", "global_fetch_strictly_public"],
+            compatibility_flags: ["global_fetch_strictly_public"],
             assets: {
               binding: "ASSETS",
               directory: outputDir
@@ -216779,7 +216784,7 @@ var init_qwik2 = __esm({
         return {
           wranglerConfig: {
             main: "./dist/_worker.js",
-            compatibility_flags: ["nodejs_compat", "global_fetch_strictly_public"],
+            compatibility_flags: ["global_fetch_strictly_public"],
             assets: {
               binding: "ASSET",
               directory: "./dist"
@@ -216797,6 +216802,30 @@ var init_qwik2 = __esm({
     __name(addAssetsIgnoreFile, "addAssetsIgnoreFile");
   }
 });
+function extractConfigObject(node2) {
+  if (t3.ObjectExpression.check(node2)) {
+    return node2;
+  }
+  if (t3.ArrowFunctionExpression.check(node2)) {
+    if (t3.ObjectExpression.check(node2.body)) {
+      return node2.body;
+    }
+    if (t3.BlockStatement.check(node2.body)) {
+      return extractFromBlockStatement(node2.body);
+    }
+  }
+  if (t3.FunctionExpression.check(node2)) {
+    return extractFromBlockStatement(node2.body);
+  }
+  return null;
+}
+function extractFromBlockStatement(block) {
+  const returnStmt = block.body.find((s7) => t3.ReturnStatement.check(s7));
+  if (returnStmt && t3.ReturnStatement.check(returnStmt) && returnStmt.argument && t3.ObjectExpression.check(returnStmt.argument)) {
+    return returnStmt.argument;
+  }
+  return null;
+}
 function checkIfViteConfigUsesCloudflarePlugin(projectPath) {
   const filePath = getViteConfigPath(projectPath);
   let importsCloudflarePlugin = false;
@@ -216816,14 +216845,16 @@ function checkIfViteConfigUsesCloudflarePlugin(projectPath) {
       if (callee.name !== "defineConfig") {
         return this.traverse(n8);
       }
-      const config = n8.node.arguments[0];
-      if (!t3.ObjectExpression.check(config)) {
+      const configObject = extractConfigObject(n8.node.arguments[0]);
+      if (!configObject) {
         logger.debug(
-          `Vite config uses a non-object expression (e.g., function). Skipping Cloudflare plugin check.`
+          `Vite config uses an unsupported expression type. Skipping Cloudflare plugin check.`
         );
         return this.traverse(n8);
       }
-      const pluginsProp = config.properties.find((prop) => isPluginsProp(prop));
+      const pluginsProp = configObject.properties.find(
+        (prop) => isPluginsProp(prop)
+      );
       if (!pluginsProp || !t3.ArrayExpression.check(pluginsProp.value)) {
         logger.debug(
           `Vite config does not have a valid plugins array. Skipping Cloudflare plugin check.`
@@ -216878,13 +216909,17 @@ function transformViteConfig(projectPath, options = {}) {
       if (callee.name !== "defineConfig") {
         return this.traverse(n8);
       }
-      const config = n8.node.arguments[0];
-      if (!t3.ObjectExpression.check(config)) {
+      const configObject = extractConfigObject(n8.node.arguments[0]);
+      if (!configObject) {
+        const argType = n8.node.arguments[0]?.type ?? "unknown";
         throw new UserError(esm_default3`
-					Cannot modify Vite config: expected an object literal but found ${config.type}.
+					Cannot modify Vite config: could not extract a config object (found ${argType}).
 
-					The Cloudflare plugin can only be automatically added to Vite configs that use a simple object.
-					If your config uses a function or other dynamic configuration, please manually add the plugin:
+					The Cloudflare plugin can only be automatically added to Vite configs that use:
+					  - A simple object: defineConfig({ plugins: [...] })
+					  - An arrow function returning an object: defineConfig(() => ({ plugins: [...] }))
+
+					If your config uses a more complex pattern, please manually add the plugin:
 
 					  import { cloudflare } from "@cloudflare/vite-plugin";
 
@@ -216893,7 +216928,9 @@ function transformViteConfig(projectPath, options = {}) {
 					  });
 				`);
       }
-      const pluginsProp = config.properties.find((prop) => isPluginsProp(prop));
+      const pluginsProp = configObject.properties.find(
+        (prop) => isPluginsProp(prop)
+      );
       if (!pluginsProp || !t3.ArrayExpression.check(pluginsProp.value)) {
         throw new UserError(esm_default3`
 					Cannot modify Vite config: could not find a valid plugins array.
@@ -216954,6 +216991,8 @@ var init_vite_config = __esm({
     init_codemod();
     b3 = recast5.types.builders;
     t3 = recast5.types.namedTypes;
+    __name(extractConfigObject, "extractConfigObject");
+    __name(extractFromBlockStatement, "extractFromBlockStatement");
     __name(checkIfViteConfigUsesCloudflarePlugin, "checkIfViteConfigUsesCloudflarePlugin");
     __name(getViteConfigPath, "getViteConfigPath");
     knownIncompatiblePlugins = ["nitro", "nitroV2Plugin", "netlify"];
@@ -217255,7 +217294,6 @@ var init_solid_start2 = __esm({
         return {
           wranglerConfig: {
             main: "./.output/server/index.mjs",
-            compatibility_flags: ["nodejs_compat"],
             assets: {
               binding: "ASSETS",
               directory: "./.output/public"
@@ -217333,7 +217371,6 @@ var init_sveltekit = __esm({
         return {
           wranglerConfig: {
             main: ".svelte-kit/cloudflare/_worker.js",
-            compatibility_flags: ["nodejs_als"],
             assets: {
               binding: "ASSETS",
               directory: ".svelte-kit/cloudflare"
@@ -217374,7 +217411,6 @@ var init_tanstack = __esm({
         }
         return {
           wranglerConfig: {
-            compatibility_flags: ["nodejs_compat"],
             main: "@tanstack/react-start/server-entry"
           }
         };
@@ -217747,7 +217783,6 @@ var init_waku2 = __esm({
         return {
           wranglerConfig: {
             main: "./dist/server/serve-cloudflare.js",
-            compatibility_flags: ["nodejs_compat"],
             assets: {
               binding: "ASSETS",
               directory: "./dist/public",
@@ -217773,7 +217808,7 @@ function getFramework2(frameworkId) {
   const framework = targetedFramework ?? staticFramework;
   return new framework.class({ id: framework.id, name: framework.name });
 }
-var staticFramework, allKnownFrameworks;
+var staticFramework, allKnownFrameworks, allKnownFrameworksIds;
 var init_get_framework2 = __esm({
   "src/autoconfig/frameworks/get-framework.ts"() {
     init_import_meta_url();
@@ -217816,6 +217851,9 @@ var init_get_framework2 = __esm({
       { id: "waku", name: "Waku", class: Waku2 },
       { id: "cloudflare-pages", name: "Cloudflare Pages", class: CloudflarePages }
     ];
+    allKnownFrameworksIds = new Set(
+      allKnownFrameworks.map(({ id }) => id)
+    );
     __name(getFramework2, "getFramework");
   }
 });
@@ -217896,6 +217934,9 @@ function assertNonConfigured(details) {
     "Error: expected the current project not to be already configured"
   );
 }
+function throwMultipleFrameworksNonInteractiveError(settings) {
+  throw new MultipleFrameworksCIError(settings.map((b11) => b11.name));
+}
 async function hasIndexHtml(dir) {
   const children = await fs14.readdir(dir);
   for (const child of children) {
@@ -217961,11 +218002,13 @@ async function detectFramework(projectPath, wranglerConfig) {
     captureException(err);
   });
   const buildSettings = await project.getBuildSettings();
-  if (buildSettings && buildSettings?.length > 1) {
-    throw new MultipleFrameworksError(buildSettings.map((b11) => b11.name));
+  if (project.workspace?.isRoot) {
+    throw new UserError(
+      "The Wrangler application detection logic has been run in the root of a workspace, this is not supported. Change your working directory to one of the applications in the workspace and try again."
+    );
   }
+  const detectedFramework = findDetectedFramework(buildSettings);
   const packageManager = convertDetectedPackageManager(project.packageManager);
-  const detectedFramework = buildSettings[0];
   if (await isPagesProject(projectPath, wranglerConfig, detectedFramework)) {
     return {
       detectedFramework: {
@@ -217979,6 +218022,46 @@ async function detectFramework(projectPath, wranglerConfig) {
   }
   return { detectedFramework, packageManager };
 }
+function findDetectedFramework(settings) {
+  if (settings.length === 0) {
+    return void 0;
+  }
+  if (settings.length === 1) {
+    return settings[0];
+  }
+  const settingsForOnlyKnownFrameworks = settings.filter(
+    ({ framework }) => allKnownFrameworksIds.has(framework.id)
+  );
+  if (settingsForOnlyKnownFrameworks.length === 0) {
+    if (isNonInteractiveOrCI()) {
+      throwMultipleFrameworksNonInteractiveError(settings);
+    }
+    return settings[0];
+  }
+  if (settingsForOnlyKnownFrameworks.length === 1) {
+    return settingsForOnlyKnownFrameworks[0];
+  }
+  if (settingsForOnlyKnownFrameworks.length === 2) {
+    const frameworkIdsFound = new Set(
+      settings.map(({ framework }) => framework.id)
+    );
+    const viteId = "vite";
+    if (frameworkIdsFound.has(viteId)) {
+      const knownNonViteSettings = settingsForOnlyKnownFrameworks.find(
+        ({ framework }) => framework.id !== viteId
+      );
+      if (knownNonViteSettings) {
+        return knownNonViteSettings;
+      }
+    }
+  }
+  if (isNonInteractiveOrCI()) {
+    throw new MultipleFrameworksCIError(
+      settingsForOnlyKnownFrameworks.map((b11) => b11.name)
+    );
+  }
+  return settingsForOnlyKnownFrameworks[0];
+}
 function getWorkerNameFromProject(projectPath) {
   const packageJsonPath = path32.resolve(projectPath, "package.json");
   let packageJsonName;
@@ -218230,7 +218313,7 @@ async function confirmAutoConfigDetails(autoConfigDetails) {
   }
   return updatedAutoConfigDetails;
 }
-var MultipleFrameworksError, invalidWorkerNameCharsRegex, invalidWorkerNameStartEndRegex, workerNameLengthLimit;
+var MultipleFrameworksCIError, invalidWorkerNameCharsRegex, invalidWorkerNameStartEndRegex, workerNameLengthLimit;
 var init_details2 = __esm({
   "src/autoconfig/details.ts"() {
     init_import_meta_url();
@@ -218239,9 +218322,11 @@ var init_details2 = __esm({
     init_lib5();
     init_node5();
     init_esm10();
+    init_esm2();
     init_config_cache();
     init_handle_errors();
     init_dialogs();
+    init_is_interactive();
     init_logger();
     init_metrics2();
     init_package_manager();
@@ -218250,23 +218335,33 @@ var init_details2 = __esm({
     init_telemetry_utils();
     __name(convertDetectedPackageManager, "convertDetectedPackageManager");
     __name(assertNonConfigured, "assertNonConfigured");
-    MultipleFrameworksError = class extends FatalError {
+    MultipleFrameworksCIError = class extends FatalError {
       static {
-        __name(this, "MultipleFrameworksError");
+        __name(this, "MultipleFrameworksCIError");
       }
       constructor(frameworks2) {
         super(
-          `Wrangler was unable to automatically configure your project to work with Cloudflare, since multiple frameworks were found: ${frameworks2.join(", ")}`,
+          esm_default3`Wrangler was unable to automatically configure your project to work with Cloudflare, since multiple frameworks were found: ${frameworks2.join(", ")}.
+
+				To fix this issue either:
+				  - check your project's configuration to make sure that the target framework
+				    is the only configured one and try again
+				  - run \`wrangler setup\` locally to get an interactive user experience where
+				    you can specify what framework you want to target
+
+			`,
           1,
           { telemetryMessage: true }
         );
       }
     };
+    __name(throwMultipleFrameworksNonInteractiveError, "throwMultipleFrameworksNonInteractiveError");
     __name(hasIndexHtml, "hasIndexHtml");
     __name(findAssetsDir, "findAssetsDir");
     __name(getWorkerName, "getWorkerName");
     __name(isPagesProject, "isPagesProject");
     __name(detectFramework, "detectFramework");
+    __name(findDetectedFramework, "findDetectedFramework");
     __name(getWorkerNameFromProject, "getWorkerNameFromProject");
     __name(getDetailsForAutoConfig, "getDetailsForAutoConfig");
     __name(getProjectBuildCommand, "getProjectBuildCommand");
@@ -218330,8 +218425,7 @@ var init_add_wrangler_assetsignore = __esm({
       const s7 = spinner();
       s7.start("Adding Wrangler files to the .assetsignore file");
       const linesToAppend = [
-        "",
-        ...!existingAssetsIgnoreContent.match(/\n\s*$/) ? [""] : []
+        ...assetsIgnorePreExisted ? ["", ...!existingAssetsIgnoreContent.match(/\n\s*$/) ? [""] : []] : []
       ];
       if (!hasDotWrangler && wranglerAssetsIgnoreFilesToAdd.length > 1) {
         linesToAppend.push("# wrangler files");
@@ -218413,8 +218507,7 @@ var init_add_wrangler_gitignore = __esm({
       const s7 = spinner();
       s7.start("Adding Wrangler files to the .gitignore file");
       const linesToAppend = [
-        "",
-        ...!existingGitIgnoreContent.match(/\n\s*$/) ? [""] : []
+        ...gitIgnorePreExisted ? ["", ...!existingGitIgnoreContent.match(/\n\s*$/) ? [""] : []] : []
       ];
       if (!hasDotWrangler && wranglerGitIgnoreFilesToAdd.length > 1) {
         linesToAppend.push("# wrangler files");
@@ -218488,10 +218581,10 @@ async function runAutoConfig(autoConfigDetails, autoConfigOptions = {}) {
     const { npx } = packageManager;
     autoConfigSummary = await buildOperationsSummary(
       { ...autoConfigDetails, outputDir: autoConfigDetails.outputDir },
-      {
+      ensureNodejsCompatIsInConfig({
         ...wranglerConfig,
         ...dryRunConfigurationResults.wranglerConfig
-      },
+      }),
       {
         build: dryRunConfigurationResults.buildCommandOverride ?? autoConfigDetails.buildCommand,
         deploy: dryRunConfigurationResults.deployCommandOverride ?? `${npx} wrangler deploy`,
@@ -218553,13 +218646,15 @@ ${JSON.stringify(autoConfigDetails, null, 2)}...`
           },
           null,
           2
-        )
+        ) + "\n"
       );
     }
     await saveWranglerJsonc(
       autoConfigDetails.projectPath,
-      wranglerConfig,
-      configurationResults.wranglerConfig
+      ensureNodejsCompatIsInConfig({
+        ...wranglerConfig,
+        ...configurationResults.wranglerConfig
+      })
     );
     addWranglerToGitIgnore(autoConfigDetails.projectPath);
     if (autoConfigDetails.outputDir === autoConfigDetails.projectPath) {
@@ -218595,11 +218690,21 @@ ${JSON.stringify(autoConfigDetails, null, 2)}...`
   );
   return autoConfigSummary;
 }
-async function saveWranglerJsonc(projectPath, baseWranglerConfig, configurationWranglerConfig) {
-  const autoconfigWranglerConfigValues = {
-    ...baseWranglerConfig,
-    ...configurationWranglerConfig
+function ensureNodejsCompatIsInConfig(wranglerConfig) {
+  if (wranglerConfig.compatibility_flags?.includes("nodejs_compat")) {
+    return wranglerConfig;
+  }
+  return {
+    ...wranglerConfig,
+    compatibility_flags: [
+      ...wranglerConfig.compatibility_flags?.filter(
+        (flag) => !flag.startsWith("nodejs_")
+      ) ?? [],
+      "nodejs_compat"
+    ]
   };
+}
+async function saveWranglerJsonc(projectPath, wranglerConfig) {
   let existingWranglerConfig = {};
   const wranglerConfigPath = getDirWranglerJsonConfigPath(projectPath);
   if (wranglerConfigPath) {
@@ -218614,11 +218719,11 @@ async function saveWranglerJsonc(projectPath, baseWranglerConfig, configurationW
     JSON.stringify(
       {
         ...existingWranglerConfig,
-        ...autoconfigWranglerConfigValues
+        ...wranglerConfig
       },
       null,
       2
-    )
+    ) + "\n"
   );
 }
 async function buildOperationsSummary(autoConfigDetails, wranglerConfigToWrite, projectCommands, packageJsonScriptsOverrides) {
@@ -218707,6 +218812,7 @@ var init_run = __esm({
     init_telemetry_utils();
     init_uses_typescript();
     __name(runAutoConfig, "runAutoConfig");
+    __name(ensureNodejsCompatIsInConfig, "ensureNodejsCompatIsInConfig");
     __name(saveWranglerJsonc, "saveWranglerJsonc");
     __name(buildOperationsSummary, "buildOperationsSummary");
     __name(getDirWranglerJsonConfigPath, "getDirWranglerJsonConfigPath");
@@ -219761,6 +219867,16 @@ var init_deploy2 = __esm({
           describe: "Rollout strategy for Containers changes. If set to immediate, it will override `rollout_percentage_steps` if configured and roll out to 100% of instances in one step. ",
           choices: ["immediate", "gradual"]
         },
+        tag: {
+          describe: "A tag for this Worker Version",
+          type: "string",
+          requiresArg: true
+        },
+        message: {
+          describe: "A descriptive message for this Worker Version and Deployment",
+          type: "string",
+          requiresArg: true
+        },
         strict: {
           describe: "Enables strict mode for the deploy command, this prevents deployments to occur when there are even small potential risks.",
           type: "boolean",
@@ -219967,7 +220083,9 @@ var init_deploy2 = __esm({
           dispatchNamespace: args.dispatchNamespace,
           experimentalAutoCreate: args.experimentalAutoCreate,
           containersRollout: args.containersRollout,
-          strict: args.strict
+          strict: args.strict,
+          tag: args.tag,
+          message: args.message
         });
         writeOutput({
           type: "deploy",
@@ -225274,7 +225392,8 @@ var init_validate3 = __esm({
         "functions",
         "**/.DS_Store",
         "**/node_modules",
-        "**/.git"
+        "**/.git",
+        ".wrangler"
       ].map((pattern) => new import_minimatch2.Minimatch(pattern));
       const directory = path32.resolve(args.directory);
       const fileCountLimit = args.fileCountLimit ?? MAX_ASSET_COUNT_DEFAULT;
@@ -289816,6 +289935,10 @@ See https://developers.cloudflare.com/workers/platform/compatibility-dates for m
       tail_consumers: config.tail_consumers,
       streaming_tail_consumers: config.streaming_tail_consumers,
       limits: config.limits,
+      annotations: props.tag || props.message ? {
+        "workers/message": props.message,
+        "workers/tag": props.tag
+      } : void 0,
       assets: props.assetsOptions && assetsJwt ? {
         jwt: assetsJwt,
         routerConfig: props.assetsOptions.routerConfig,
@@ -289924,7 +290047,7 @@ See https://developers.cloudflare.com/workers/platform/compatibility-dates for m
             accountId,
             scriptName,
             versionMap,
-            void 0
+            props.message
           );
           const nextTags = applyServiceAndEnvironmentTags(config, tags);
           try {
@@ -291887,31 +292010,48 @@ var init_get_port = __esm({
 });
 
 // src/utils/memoizeGetPort.ts
-function memoizeGetPort(defaultPort, host) {
+function isNetworkBindPermissionError(e9) {
+  return e9 !== null && typeof e9 === "object" && "code" in e9 && (e9.code === "EPERM" || e9.code === "EACCES") && "syscall" in e9 && (e9.syscall === "listen" || e9.syscall === "bind");
+}
+function memoizeGetPort(defaultPort, defaultHost) {
   let portValue;
-  let cachedHost = host;
-  return async (forHost = host) => {
+  let cachedHost = defaultHost;
+  return async (forHost = defaultHost) => {
     if (forHost !== cachedHost) {
       portValue = void 0;
       cachedHost = forHost;
     }
-    portValue = portValue ?? await getPorts({
-      port: portNumbers(
-        defaultPort,
-        defaultPort + NUM_CONSECUTIVE_PORTS_TO_PROBE
-      ),
-      host
-    });
-    return portValue;
+    try {
+      portValue = portValue ?? await getPorts({
+        port: portNumbers(
+          defaultPort,
+          defaultPort + NUM_CONSECUTIVE_PORTS_TO_PROBE
+        ),
+        host: forHost
+      });
+      return portValue;
+    } catch (e9) {
+      if (isNetworkBindPermissionError(e9)) {
+        throw new UserError(
+          `Failed to bind to ${forHost}:${defaultPort}: permission denied.
+This usually means a sandbox or security policy is preventing network access.
+If you are running inside a restricted environment (container, VM, AI coding agent, etc.),
+configure it to allow binding to loopback addresses.`
+        );
+      }
+      throw e9;
+    }
   };
 }
 var import_ci_info4, NUM_CONSECUTIVE_PORTS_TO_PROBE;
 var init_memoizeGetPort = __esm({
   "src/utils/memoizeGetPort.ts"() {
     init_import_meta_url();
+    init_dist();
     import_ci_info4 = __toESM(require_ci_info());
     init_get_port();
     NUM_CONSECUTIVE_PORTS_TO_PROBE = import_ci_info4.default.isCI ? 0 : 10;
+    __name(isNetworkBindPermissionError, "isNetworkBindPermissionError");
     __name(memoizeGetPort, "memoizeGetPort");
   }
 });
@@ -292796,6 +292936,7 @@ var init_ProxyController = __esm({
           httpsCert: cert?.cert,
           httpsKey: cert?.key,
           stripDisablePrettyError: false,
+          unsafeLocalExplorer: false,
           workers: [
             {
               name: "ProxyWorker",