@checkstack/backend 0.6.2 → 0.6.4

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @checkstack/backend
 
+## 0.6.4
+
+### Patch Changes
+
+- a713e0f: Fix static file Content-Length header stripped by Hono middleware
+
+  Hono's CORS middleware wraps raw `Response` objects and strips Bun's auto-generated headers. Switched to using `c.body()` + `c.header()` so Content-Type and Content-Length survive the middleware pipeline. Extracted a shared `serveFile` helper for all static file routes.
+
+## 0.6.3
+
+### Patch Changes
+
+- 3da7582: Fix favicon not loading in production container and add NotFound page
+
+  - **Backend**: Fix static file serving so root-level files like `/favicon.svg` are served from the dist directory before the SPA fallback catches them
+  - **UI**: Add `NotFound` component with stacked-checkmark logo, physics-inspired falling "4" animation, and low-power device fallback
+  - **Frontend**: Add catch-all `*` route to display the NotFound page for unmatched routes, and add the Checkstack logo to the navbar
+  - **Favicon**: Redesign with stacked checkmarks in the brand purple/indigo palette
+
 ## 0.6.2
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkstack/backend",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "checkstack": {
     "type": "backend"
   },
@@ -15,11 +15,11 @@
   "dependencies": {
     "@checkstack/api-docs-common": "0.1.9",
     "@checkstack/auth-common": "0.6.1",
-    "@checkstack/backend-api": "0.11.1",
+    "@checkstack/backend-api": "0.12.0",
     "@checkstack/common": "0.6.5",
     "@checkstack/drizzle-helper": "0.0.4",
-    "@checkstack/queue-api": "0.2.12",
-    "@checkstack/signal-backend": "0.1.18",
+    "@checkstack/queue-api": "0.2.13",
+    "@checkstack/signal-backend": "0.1.19",
     "@checkstack/signal-common": "0.1.9",
     "@hono/zod-validator": "^0.7.6",
     "@orpc/client": "^1.13.14",
@@ -40,6 +40,6 @@
     "@types/bun": "latest",
     "@checkstack/tsconfig": "0.0.5",
     "@checkstack/scripts": "0.1.2",
-    "@checkstack/test-utils-backend": "0.1.18"
+    "@checkstack/test-utils-backend": "0.1.19"
   }
 }

package/src/index.ts

@@ -1,5 +1,5 @@
 import type { Server } from "bun";
-import { Hono } from "hono";
+import { type Context, Hono } from "hono";
 import { PluginManager } from "./plugin-manager";
 import { logger } from "hono/logger";
 import { migrate } from "drizzle-orm/node-postgres/migrator";
@@ -174,6 +174,13 @@ app.get("/.well-known/jwks.json", async (c) => {
 const frontendDistPath = process.env.CHECKSTACK_FRONTEND_DIST;
 if (frontendDistPath && fs.existsSync(frontendDistPath)) {
   rootLogger.info(`📦 Serving frontend from: ${frontendDistPath}`);
+  /** Serve a static file via Hono's context to preserve headers through middleware. */
+  const serveFile = async (c: Context, filePath: string) => {
+    const file = Bun.file(filePath);
+    c.header("Content-Type", file.type);
+    c.header("Content-Length", String(file.size));
+    return c.body(file.stream());
+  };
 
   // Serve static assets (JS, CSS, images, etc.)
   app.get("/assets/*", async (c) => {
@@ -181,10 +188,7 @@ if (frontendDistPath && fs.existsSync(frontendDistPath)) {
     const filePath = path.join(frontendDistPath, "assets", assetPath);
 
     if (fs.existsSync(filePath)) {
-      const file = Bun.file(filePath);
-      return new Response(file, {
-        headers: { "Content-Type": file.type },
-      });
+      return serveFile(c, filePath);
     }
     return c.notFound();
   });
@@ -195,27 +199,34 @@ if (frontendDistPath && fs.existsSync(frontendDistPath)) {
     const filePath = path.join(frontendDistPath, "vendor", vendorPath);
 
     if (fs.existsSync(filePath)) {
-      const file = Bun.file(filePath);
-      return new Response(file, {
-        headers: { "Content-Type": file.type },
-      });
+      return serveFile(c, filePath);
     }
     return c.notFound();
   });
 
-  // Serve index.html for all non-API routes (SPA fallback)
+  // Serve root-level static files (e.g., /favicon.svg) from the dist directory
+  // before the SPA fallback, so they don't get caught by the index.html handler
   app.get("*", async (c, next) => {
     // Skip API and WebSocket routes - let them pass through to actual handlers
     if (c.req.path.startsWith("/api")) {
       return next();
     }
 
+    // Check if the request maps to an actual file in the dist root
+    // (e.g., /favicon.svg -> dist/favicon.svg)
+    const reqPath = c.req.path.slice(1); // Remove leading "/"
+    if (reqPath && reqPath !== "" && !reqPath.includes("..")) {
+      const staticFilePath = path.join(frontendDistPath, reqPath);
+      // Only serve if it's a file (not a directory) and exists
+      if (fs.existsSync(staticFilePath) && fs.statSync(staticFilePath).isFile()) {
+        return serveFile(c, staticFilePath);
+      }
+    }
+
+    // SPA fallback: serve index.html for all remaining non-API routes
     const indexPath = path.join(frontendDistPath, "index.html");
     if (fs.existsSync(indexPath)) {
-      const file = Bun.file(indexPath);
-      return new Response(file, {
-        headers: { "Content-Type": "text/html" },
-      });
+      return serveFile(c, indexPath);
     }
     return c.notFound();
   });