v2.5.1

• 634360f (patch): Fixed cf-access-policy Access discovery incorrectly treating a successful cross-spawn result with error: null as a launch failure, causing Cannot read properties of null (reading 'message') even when the underlying cf command succeeded.

v2.5.0

• 3174aa2 (minor): Added the cf-access-policy CLI for reconciling reusable Cloudflare Access policies and self-hosted applications from a typed access.config.ts, plus the root defineAccessConfig helper and configuration types.
• 4f1d2a8 (minor): Added preconditionFailed (412) and preconditionRequired (428) HTTP error generators to @adrianhall/cloudflare-toolkit/errors, matching the signature/shape of every other generator.

v2.4.0

• 400fbae (minor): Added path-specific audience checking to the cloudflareAccess() middleware.

v2.3.0

• 59fca9e (minor): Added empty-r2-bucket CLI command to empty an R2 bucket using an undocumented dashboard API

v2.2.1

Patch Changes

• 72d5a52: Updated release pipeline so that it no longer requires two pull requests.

v2.2.0

Minor Changes

• 950a368: Add Terraform-to-Wrangler generation and a fail-closed container preteardown CLI, including deployment documentation and Terraform Agent Skills.

v2.1.0

Minor Changes

• 0ab0f5e: cloudflareLogger now honors a LOG_LEVEL Worker binding (c.env.LOG_LEVEL) to set the minimum
  log level. It accepts any of the six levels (trace/debug/info/warn/error/fatal,
  case-insensitive) and sits below an explicit options.level but above the
  resolveLoggerConfig(env.ENVIRONMENT, "worker") default. A value that is set but unrecognized is
  ignored with a console.warn, and an unset binding preserves the previous behavior.

v2.0.0

Major Changes

• cad6fcd: Replace the Cloudflare Access user context variables with a namespaced identity object that includes its credential source.

v1.0.2

Patch Changes

• 8c6453c: Improved documentation across the project with enhanced clarity, examples, and organization.

v1.0.1

Patch Changes

• 125077c: Add contentTooLarge (413) to the framework-agnostic root entry point's re-exports. It was added
  to @adrianhall/cloudflare-toolkit/errors after the root barrel was originally wired and was
  never backfilled — every other error generator was already re-exported from
  @adrianhall/cloudflare-toolkit.

  Also adds the corresponding contentTooLarge(input?) | 413 row to skills/cloudflare-toolkit/SKILL.md's
  HTTP Errors table, which previously omitted it as well.