@lovable.dev/vite-tanstack-config 2.22.0 → 2.23.1

package/README.md

@@ -16,3 +16,7 @@ Apps can pass through Vite options and adjust the React, TanStack Start, Nitro,
 ## Build exit watchdog
 
 Inside a Lovable build with prerender enabled, the build process is forced to exit if it is still alive 60 seconds after the last build hook has returned, and a `[lovable-build-exit-report]` block naming the open handle types is written to stderr. Adjust it with `defineConfig({ buildExitWatchdog: { graceMs, enabled } })`; the grace is clamped to 5 s–10 min. The `LOVABLE_PRERENDER_EXIT_GRACE_MS` and `LOVABLE_PRERENDER_EXIT_WATCHDOG=off` environment variables override the config.
+
+## Route manifest
+
+Inside a Lovable build, the route surface of the app is written to `dist/.lovable/routes.json` after the build: `{ version, generator, basepath?, serverEntry, requestMiddleware?, routes }`, where `routes` is the generated route tree's `fullPaths` union in TanStack path syntax (`/posts/$postId`, `/files/$`, `/docs/{-$version}`). Lovable's serving layer uses it to answer requests no route can match without starting the app. The file is enumerated with `@tanstack/router-generator` through an in-memory overlay, so the build never rewrites `routeTree.gen.ts`, and it is skipped — with a warning naming the reason — whenever the app can answer paths outside its route tree: `tanstackStart.spa`, `router.virtualRouteConfig`, `nitro.routeRules`/`handlers`, a project `nitro.config.*` / `.config/nitro.*` / `.nitrorc` file (Nitro loads it on its own, so the wrapper cannot see what it adds), a `rewrite` in the router file, a `basepath` there that `tanstackStart.router.basepath` does not declare (a computed or shorthand one included), or a router file (`router.entry`, resolved the way TanStack Start resolves it) that cannot be read to check either.

package/dist/hmr-gate.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
+let node_crypto = require("node:crypto");
 //#region src/hmr-gate/index.ts
 const statusCorsOriginRe = /^(?:https:\/\/(?:[^/]+\.)?lovable\.dev|https?:\/\/(?:(?:[^/:]+\.)?localhost|127\.0\.0\.1|\[::1\]))(?::\d+)?$/;
 function requestPathname(req) {

package/dist/hmr-gate.js

@@ -1,5 +1,5 @@
-import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
+import { createHash } from "node:crypto";
 //#region src/hmr-gate/index.ts
 const statusCorsOriginRe = /^(?:https:\/\/(?:[^/]+\.)?lovable\.dev|https?:\/\/(?:(?:[^/:]+\.)?localhost|127\.0\.0\.1|\[::1\]))(?::\d+)?$/;
 function requestPathname(req) {

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
+let node_fs = require("node:fs");
 let node_path = require("node:path");
 let node_url = require("node:url");
 let vite = require("vite");
@@ -153,7 +154,7 @@ function bundledDevCssUrlShim() {
 //#endregion
 //#region package.json
 var name = "@lovable.dev/vite-tanstack-config";
-var version = "2.22.0";
+var version = "2.23.1";
 //#endregion
 //#region src/logging.ts
 const PACKAGE_NAME = "@lovable.dev/vite-tanstack-config";
@@ -168,7 +169,7 @@ const CLIENT_OUTPUT_DIR = `${PUBLISH_OUTPUT_DIR}/client`;
 //#endregion
 //#region src/documents.ts
 const DOCUMENT_SET_VERSION = 1;
-const GENERATOR = `${name}@${version}`;
+const GENERATOR$1 = `${name}@${version}`;
 const DOCUMENT_SET_DIR = ".lovable";
 const DOCUMENT_SET_FILE = "output.json";
 const DOCUMENT_SET_PLUGIN_NAME = "lovable:document-set";
@@ -341,7 +342,7 @@ function createDocumentSet(routerBasePath) {
 					}
 					logWarning(`Not publishing prerendered route ${entry.route}: it produced no ${entry.file}.`);
 				}
-				const payload = serializeDocumentSet(present, GENERATOR);
+				const payload = serializeDocumentSet(present, GENERATOR$1);
 				if (payload === void 0) return;
 				try {
 					await mkdir(nodePath.dirname(artifact), { recursive: true });
@@ -367,12 +368,319 @@ function createDocumentSet(routerBasePath) {
 	};
 }
 //#endregion
+//#region src/routes.ts
+const ROUTE_MANIFEST_VERSION = 1;
+const GENERATOR = `${name}@${version}`;
+const ROUTE_MANIFEST_DIR = ".lovable";
+const ROUTE_MANIFEST_FILE = "routes.json";
+const ROUTE_MANIFEST_MAX_ROUTES = 1e3;
+const ROUTE_MANIFEST_MAX_BYTES = 512 * 1024;
+const ROUTE_MANIFEST_PLUGIN_NAME = "lovable:route-manifest";
+const ROUTER_GENERATOR_PACKAGE = "@tanstack/router-generator";
+const ENTRY_EXTENSIONS = [
+	"",
+	".ts",
+	".js",
+	".mts",
+	".mjs",
+	".tsx",
+	".jsx"
+];
+const NITRO_CONFIG_EXTENSIONS = [
+	".js",
+	".ts",
+	".mjs",
+	".cjs",
+	".mts",
+	".cts",
+	".json",
+	".jsonc",
+	".json5",
+	".yaml",
+	".yml",
+	".toml"
+];
+const NITRO_CONFIG_FILES = [
+	...NITRO_CONFIG_EXTENSIONS.map((extension) => `nitro.config${extension}`),
+	...NITRO_CONFIG_EXTENSIONS.flatMap((extension) => [`.config/nitro${extension}`, `.config/nitro.config${extension}`]),
+	".nitrorc"
+];
+function subOptions(options, key) {
+	const value = options[key];
+	return typeof value === "object" && value !== null ? value : {};
+}
+function stringOption(options, key, fallback) {
+	const value = options[key];
+	return typeof value === "string" ? value : fallback;
+}
+/** Why no manifest is emitted: the app can answer paths outside its route tree. */
+function routeManifestOptOut(inputs) {
+	const { tanstackStart } = inputs;
+	if (tanstackStart.spa != null && subOptions(tanstackStart, "spa").enabled !== false) return "tanstackStart.spa serves the shell for every path";
+	if (subOptions(tanstackStart, "router").virtualRouteConfig !== void 0) return "tanstackStart.router.virtualRouteConfig is set";
+	if (typeof inputs.nitro === "object" && inputs.nitro !== null) {
+		for (const key of [
+			"routeRules",
+			"handlers",
+			"devHandlers"
+		]) if (key in inputs.nitro) return `nitro.${key} is set`;
+	}
+}
+function routeFullPaths(routeNodes, inferFullPath) {
+	const paths = /* @__PURE__ */ new Set();
+	for (const node of routeNodes) {
+		if (node.routePath === void 0 || node.isNonPath) continue;
+		paths.add(inferFullPath(node));
+	}
+	return [...paths].sort();
+}
+const COMMENTS = String.raw`(?:(?://[^\n]*\n|/\*[\s\S]*?\*/)\s*)*`;
+const BASEPATH_PROPERTY = new RegExp(String.raw`(?<=[{,]\s*${COMMENTS})\bbasepath\b\s*(?::\s*(?:(['"\x60])([^'"\x60]*)\1)?|(?=${COMMENTS}[,}]))`, "g");
+/**
+* Whether an object-literal `basepath` property in the router file names anything but
+* the declared basepath; a computed value or a shorthand cannot be checked and disagrees.
+*/
+function routerBasepathDisagrees(routerSource, declared) {
+	for (const property of routerSource.matchAll(BASEPATH_PROPERTY)) {
+		const literal = property[2];
+		if (literal === void 0 || normalizeBasePath(literal) !== declared) return true;
+	}
+	return false;
+}
+/** The artifact bytes, or undefined when the manifest would exceed the worker's caps. */
+function serializeRouteManifest(manifest) {
+	if (manifest.routes.length > 1e3) {
+		logWarning(`Not publishing the route manifest: ${manifest.routes.length} routes exceed the ${ROUTE_MANIFEST_MAX_ROUTES}-route limit.`);
+		return;
+	}
+	const payload = JSON.stringify(manifest);
+	const bytes = Buffer.byteLength(payload, "utf8");
+	if (bytes > 524288) {
+		logWarning(`Not publishing the route manifest: ${bytes} bytes exceed the ${ROUTE_MANIFEST_MAX_BYTES}-byte limit.`);
+		return;
+	}
+	return payload;
+}
+function createOverlayFs(fsp) {
+	const overlay = /* @__PURE__ */ new Map();
+	const memStat = () => ({
+		mtimeMs: BigInt(Date.now()) * 1000000n,
+		mode: 420,
+		uid: 0,
+		gid: 0
+	});
+	return {
+		async stat(filePath) {
+			if (overlay.has(filePath)) return memStat();
+			const stat = await fsp.stat(filePath, { bigint: true });
+			return {
+				mtimeMs: stat.mtimeMs,
+				mode: Number(stat.mode),
+				uid: Number(stat.uid),
+				gid: Number(stat.gid)
+			};
+		},
+		async readFile(filePath) {
+			const overlaid = overlay.get(filePath);
+			if (overlaid !== void 0) return {
+				stat: memStat(),
+				fileContent: overlaid
+			};
+			try {
+				const [stat, fileContent] = await Promise.all([fsp.stat(filePath, { bigint: true }), fsp.readFile(filePath, "utf8")]);
+				return {
+					stat: { mtimeMs: stat.mtimeMs },
+					fileContent
+				};
+			} catch (error) {
+				if (error.code === "ENOENT") return "file-not-existing";
+				throw error;
+			}
+		},
+		async writeFile(filePath, content) {
+			overlay.set(filePath, content);
+		},
+		async rename(oldPath, newPath) {
+			const content = overlay.get(oldPath);
+			if (content === void 0) return;
+			overlay.set(newPath, content);
+			overlay.delete(oldPath);
+		},
+		async chmod() {},
+		async chown() {}
+	};
+}
+async function loadRouterGenerator(root) {
+	const { createRequire } = await import("node:module");
+	const { pathToFileURL } = await import("node:url");
+	const nodePath = await import("node:path");
+	const { readFile } = await import("node:fs/promises");
+	let lastError;
+	for (const base of [nodePath.join(root, "package.json"), require("url").pathToFileURL(__filename).href]) try {
+		const packageJsonPath = createRequire(base).resolve(`${ROUTER_GENERATOR_PACKAGE}/package.json`);
+		const packageJson = JSON.parse(await readFile(packageJsonPath, "utf8"));
+		const entry = packageJson.exports?.["."]?.import?.default ?? packageJson.module ?? packageJson.main;
+		if (entry === void 0) throw new Error(`${ROUTER_GENERATOR_PACKAGE} declares no entry point`);
+		return await import(pathToFileURL(nodePath.join(nodePath.dirname(packageJsonPath), entry)).href);
+	} catch (error) {
+		lastError = error;
+	}
+	throw lastError;
+}
+/** The first of `names` (relative to `dir`) that exists, as given. */
+async function findExisting(dir, names) {
+	const { access } = await import("node:fs/promises");
+	const nodePath = await import("node:path");
+	for (const name of names) if (await access(nodePath.join(dir, name)).then(() => true, () => false)) return name;
+}
+async function resolveEntryFile(srcDirectory, entry) {
+	const { stat } = await import("node:fs/promises");
+	const base = (await import("node:path")).resolve(srcDirectory, entry.startsWith("./") ? entry : `./${entry}`);
+	for (const extension of ENTRY_EXTENSIONS) {
+		const file = `${base}${extension}`;
+		if (await stat(file).then((stats) => stats.isFile(), () => false)) return file;
+	}
+}
+async function readSource(file) {
+	if (file === void 0) return void 0;
+	const { readFile } = await import("node:fs/promises");
+	return readFile(file, "utf8").catch(() => void 0);
+}
+async function enumerateRoutes(options) {
+	const fsp = await import("node:fs/promises");
+	const nodePath = await import("node:path");
+	const os = await import("node:os");
+	const generator = await loadRouterGenerator(options.root);
+	const { root, srcDirectory } = options;
+	const routesDirectory = nodePath.resolve(root, srcDirectory, stringOption(options.router, "routesDirectory", "routes"));
+	const generatedRouteTree = nodePath.resolve(root, srcDirectory, stringOption(options.router, "generatedRouteTree", "routeTree.gen.ts"));
+	const tmpDir = await fsp.mkdtemp(nodePath.join(os.tmpdir(), "lovable-route-manifest-"));
+	try {
+		const config = generator.getConfig({
+			...options.router,
+			routesDirectory,
+			generatedRouteTree,
+			tmpDir,
+			disableLogging: true,
+			enableRouteTreeFormatting: false
+		}, root);
+		const crawler = new generator.Generator({
+			config,
+			root,
+			fs: createOverlayFs(fsp)
+		});
+		await crawler.run();
+		const crawl = await crawler.getCrawlingResult();
+		if (crawl === void 0) throw new Error("the route generator produced no crawling result");
+		return routeFullPaths(crawl.acc.routeNodes, generator.inferFullPath);
+	} finally {
+		await fsp.rm(tmpDir, {
+			recursive: true,
+			force: true
+		}).catch(() => {});
+	}
+}
+function createRouteManifestPlugin(inputs) {
+	let root = process.cwd();
+	return {
+		name: ROUTE_MANIFEST_PLUGIN_NAME,
+		apply: "build",
+		enforce: "post",
+		configResolved(config) {
+			root = config.root;
+		},
+		buildApp: {
+			order: "post",
+			async handler() {
+				const { mkdir, rm, writeFile } = await import("node:fs/promises");
+				const nodePath = await import("node:path");
+				const artifact = nodePath.join(root, PUBLISH_OUTPUT_DIR, ROUTE_MANIFEST_DIR, ROUTE_MANIFEST_FILE);
+				await rm(artifact, { force: true }).catch((error) => {
+					logWarning(`Could not remove a previous build's route manifest: ${String(error)}`);
+				});
+				const optOut = routeManifestOptOut(inputs);
+				if (optOut !== void 0) {
+					logWarning(`Not publishing a route manifest: ${optOut}.`);
+					return;
+				}
+				const nitroConfig = await findExisting(root, NITRO_CONFIG_FILES);
+				if (nitroConfig !== void 0) {
+					logWarning(`Not publishing a route manifest: nitro loads ${nitroConfig} on its own, and it may add routes.`);
+					return;
+				}
+				const { tanstackStart } = inputs;
+				const srcDirectory = stringOption(tanstackStart, "srcDirectory", "src");
+				const router = subOptions(tanstackStart, "router");
+				const sourceDir = nodePath.resolve(root, srcDirectory);
+				const routerEntry = stringOption(router, "entry", "router");
+				const routerSource = await readSource(await resolveEntryFile(sourceDir, routerEntry));
+				if (routerSource === void 0) {
+					logWarning(`Not publishing a route manifest: could not read the router file (${routerEntry} under ${srcDirectory}) to check its settings.`);
+					return;
+				}
+				if (/\brewrite\s*:/.test(routerSource)) {
+					logWarning("Not publishing a route manifest: the router file sets `rewrite`.");
+					return;
+				}
+				const basepath = normalizeBasePath(router.basepath);
+				if (routerBasepathDisagrees(routerSource, basepath)) {
+					logWarning("Not publishing a route manifest: the router file sets a `basepath` that tanstackStart.router.basepath does not declare.");
+					return;
+				}
+				let routes;
+				try {
+					routes = await enumerateRoutes({
+						root,
+						srcDirectory,
+						router
+					});
+				} catch (error) {
+					logWarning(`Not publishing a route manifest; could not enumerate the route tree: ${String(error)}`);
+					return;
+				}
+				if (routes.length === 0) {
+					logWarning("Not publishing a route manifest: the route tree has no routes.");
+					return;
+				}
+				const startSource = await readSource(await resolveEntryFile(sourceDir, stringOption(subOptions(tanstackStart, "start"), "entry", "start")));
+				const payload = serializeRouteManifest({
+					version: ROUTE_MANIFEST_VERSION,
+					generator: GENERATOR,
+					...basepath === "" ? {} : { basepath },
+					serverEntry: typeof subOptions(tanstackStart, "server").entry === "string" ? "custom" : "default",
+					...startSource === void 0 ? {} : { requestMiddleware: /\brequestMiddleware\b/.test(startSource) },
+					routes
+				});
+				if (payload === void 0) return;
+				try {
+					await mkdir(nodePath.dirname(artifact), { recursive: true });
+					await writeFile(artifact, payload);
+				} catch (error) {
+					logWarning(`Could not write the route manifest; unknown paths fall back to SSR: ${String(error)}`);
+				}
+			}
+		}
+	};
+}
+//#endregion
 //#region src/index.ts
 const SANDBOX_ENV_VAR = "DEV_SERVER__PROJECT_PATH";
 const LOVABLE_SANDBOX_ENV_VAR = "LOVABLE_SANDBOX";
 function isSandboxEnvironment() {
 	return process.env[LOVABLE_SANDBOX_ENV_VAR] === "1" || !!process.env[SANDBOX_ENV_VAR];
 }
+function sandboxFsAllow(root) {
+	let nodeModules;
+	let realRoot;
+	try {
+		nodeModules = node_fs.realpathSync.native((0, node_path.join)(root, "node_modules"));
+		realRoot = node_fs.realpathSync.native(root);
+	} catch {
+		return;
+	}
+	if (nodeModules.startsWith(realRoot + node_path.sep)) return void 0;
+	return [(0, vite.searchForWorkspaceRoot)(root), nodeModules];
+}
 const TOOL_MANAGED_WATCH_IGNORES = [
 	"**/.workspace/**",
 	"**/.agents/**",
@@ -1222,6 +1530,10 @@ function defineConfig(configOrOptions = {}) {
 		if (command === "build" && isSandbox) {
 			const { startOptions, skipReporter, documentSet } = pinPrerenderForLovableBuild(tanstackStartOptions);
 			internalPlugins.push(tanstackStart(startOptions), skipReporter, documentSet);
+			internalPlugins.push(createRouteManifestPlugin({
+				tanstackStart: tanstackStartOptions,
+				nitro: options.nitro
+			}));
 		} else internalPlugins.push(tanstackStart(tanstackStartOptions));
 		const explicitNitro = options.nitro === true || typeof options.nitro === "object" && options.nitro !== null;
 		if (options.nitro !== false && command === "build") {
@@ -1344,12 +1656,14 @@ function defineConfig(configOrOptions = {}) {
 		}
 		if (isSandbox) {
 			validateConfig(config);
+			const fsAllow = sandboxFsAllow(process.cwd());
 			config = cleanServerConfig((0, vite.mergeConfig)(config, { server: {
 				host: "::",
 				port: 8080,
 				strictPort: true,
 				watch: { ignored: [...TOOL_MANAGED_WATCH_IGNORES] },
-				hmr: { overlay: false }
+				hmr: { overlay: false },
+				...fsAllow ? { fs: { allow: fsAllow } } : {}
 			} }));
 		} else config = (0, vite.mergeConfig)({ server: {
 			host: "::",

package/dist/index.js

@@ -1,6 +1,7 @@
+import { realpathSync } from "node:fs";
 import { basename, extname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { loadEnv, mergeConfig } from "vite";
+import { loadEnv, mergeConfig, searchForWorkspaceRoot } from "vite";
 import https from "node:https";
 //#region src/assetsProxyPlugin.ts
 const ASSET_RE = /^\/__l5e\/assets-v1\//;
@@ -129,7 +130,7 @@ function bundledDevCssUrlShim() {
 //#endregion
 //#region package.json
 var name = "@lovable.dev/vite-tanstack-config";
-var version = "2.22.0";
+var version = "2.23.1";
 //#endregion
 //#region src/logging.ts
 const PACKAGE_NAME = "@lovable.dev/vite-tanstack-config";
@@ -144,7 +145,7 @@ const CLIENT_OUTPUT_DIR = `${PUBLISH_OUTPUT_DIR}/client`;
 //#endregion
 //#region src/documents.ts
 const DOCUMENT_SET_VERSION = 1;
-const GENERATOR = `${name}@${version}`;
+const GENERATOR$1 = `${name}@${version}`;
 const DOCUMENT_SET_DIR = ".lovable";
 const DOCUMENT_SET_FILE = "output.json";
 const DOCUMENT_SET_PLUGIN_NAME = "lovable:document-set";
@@ -317,7 +318,7 @@ function createDocumentSet(routerBasePath) {
 					}
 					logWarning(`Not publishing prerendered route ${entry.route}: it produced no ${entry.file}.`);
 				}
-				const payload = serializeDocumentSet(present, GENERATOR);
+				const payload = serializeDocumentSet(present, GENERATOR$1);
 				if (payload === void 0) return;
 				try {
 					await mkdir(nodePath.dirname(artifact), { recursive: true });
@@ -343,12 +344,319 @@ function createDocumentSet(routerBasePath) {
 	};
 }
 //#endregion
+//#region src/routes.ts
+const ROUTE_MANIFEST_VERSION = 1;
+const GENERATOR = `${name}@${version}`;
+const ROUTE_MANIFEST_DIR = ".lovable";
+const ROUTE_MANIFEST_FILE = "routes.json";
+const ROUTE_MANIFEST_MAX_ROUTES = 1e3;
+const ROUTE_MANIFEST_MAX_BYTES = 512 * 1024;
+const ROUTE_MANIFEST_PLUGIN_NAME = "lovable:route-manifest";
+const ROUTER_GENERATOR_PACKAGE = "@tanstack/router-generator";
+const ENTRY_EXTENSIONS = [
+	"",
+	".ts",
+	".js",
+	".mts",
+	".mjs",
+	".tsx",
+	".jsx"
+];
+const NITRO_CONFIG_EXTENSIONS = [
+	".js",
+	".ts",
+	".mjs",
+	".cjs",
+	".mts",
+	".cts",
+	".json",
+	".jsonc",
+	".json5",
+	".yaml",
+	".yml",
+	".toml"
+];
+const NITRO_CONFIG_FILES = [
+	...NITRO_CONFIG_EXTENSIONS.map((extension) => `nitro.config${extension}`),
+	...NITRO_CONFIG_EXTENSIONS.flatMap((extension) => [`.config/nitro${extension}`, `.config/nitro.config${extension}`]),
+	".nitrorc"
+];
+function subOptions(options, key) {
+	const value = options[key];
+	return typeof value === "object" && value !== null ? value : {};
+}
+function stringOption(options, key, fallback) {
+	const value = options[key];
+	return typeof value === "string" ? value : fallback;
+}
+/** Why no manifest is emitted: the app can answer paths outside its route tree. */
+function routeManifestOptOut(inputs) {
+	const { tanstackStart } = inputs;
+	if (tanstackStart.spa != null && subOptions(tanstackStart, "spa").enabled !== false) return "tanstackStart.spa serves the shell for every path";
+	if (subOptions(tanstackStart, "router").virtualRouteConfig !== void 0) return "tanstackStart.router.virtualRouteConfig is set";
+	if (typeof inputs.nitro === "object" && inputs.nitro !== null) {
+		for (const key of [
+			"routeRules",
+			"handlers",
+			"devHandlers"
+		]) if (key in inputs.nitro) return `nitro.${key} is set`;
+	}
+}
+function routeFullPaths(routeNodes, inferFullPath) {
+	const paths = /* @__PURE__ */ new Set();
+	for (const node of routeNodes) {
+		if (node.routePath === void 0 || node.isNonPath) continue;
+		paths.add(inferFullPath(node));
+	}
+	return [...paths].sort();
+}
+const COMMENTS = String.raw`(?:(?://[^\n]*\n|/\*[\s\S]*?\*/)\s*)*`;
+const BASEPATH_PROPERTY = new RegExp(String.raw`(?<=[{,]\s*${COMMENTS})\bbasepath\b\s*(?::\s*(?:(['"\x60])([^'"\x60]*)\1)?|(?=${COMMENTS}[,}]))`, "g");
+/**
+* Whether an object-literal `basepath` property in the router file names anything but
+* the declared basepath; a computed value or a shorthand cannot be checked and disagrees.
+*/
+function routerBasepathDisagrees(routerSource, declared) {
+	for (const property of routerSource.matchAll(BASEPATH_PROPERTY)) {
+		const literal = property[2];
+		if (literal === void 0 || normalizeBasePath(literal) !== declared) return true;
+	}
+	return false;
+}
+/** The artifact bytes, or undefined when the manifest would exceed the worker's caps. */
+function serializeRouteManifest(manifest) {
+	if (manifest.routes.length > 1e3) {
+		logWarning(`Not publishing the route manifest: ${manifest.routes.length} routes exceed the ${ROUTE_MANIFEST_MAX_ROUTES}-route limit.`);
+		return;
+	}
+	const payload = JSON.stringify(manifest);
+	const bytes = Buffer.byteLength(payload, "utf8");
+	if (bytes > 524288) {
+		logWarning(`Not publishing the route manifest: ${bytes} bytes exceed the ${ROUTE_MANIFEST_MAX_BYTES}-byte limit.`);
+		return;
+	}
+	return payload;
+}
+function createOverlayFs(fsp) {
+	const overlay = /* @__PURE__ */ new Map();
+	const memStat = () => ({
+		mtimeMs: BigInt(Date.now()) * 1000000n,
+		mode: 420,
+		uid: 0,
+		gid: 0
+	});
+	return {
+		async stat(filePath) {
+			if (overlay.has(filePath)) return memStat();
+			const stat = await fsp.stat(filePath, { bigint: true });
+			return {
+				mtimeMs: stat.mtimeMs,
+				mode: Number(stat.mode),
+				uid: Number(stat.uid),
+				gid: Number(stat.gid)
+			};
+		},
+		async readFile(filePath) {
+			const overlaid = overlay.get(filePath);
+			if (overlaid !== void 0) return {
+				stat: memStat(),
+				fileContent: overlaid
+			};
+			try {
+				const [stat, fileContent] = await Promise.all([fsp.stat(filePath, { bigint: true }), fsp.readFile(filePath, "utf8")]);
+				return {
+					stat: { mtimeMs: stat.mtimeMs },
+					fileContent
+				};
+			} catch (error) {
+				if (error.code === "ENOENT") return "file-not-existing";
+				throw error;
+			}
+		},
+		async writeFile(filePath, content) {
+			overlay.set(filePath, content);
+		},
+		async rename(oldPath, newPath) {
+			const content = overlay.get(oldPath);
+			if (content === void 0) return;
+			overlay.set(newPath, content);
+			overlay.delete(oldPath);
+		},
+		async chmod() {},
+		async chown() {}
+	};
+}
+async function loadRouterGenerator(root) {
+	const { createRequire } = await import("node:module");
+	const { pathToFileURL } = await import("node:url");
+	const nodePath = await import("node:path");
+	const { readFile } = await import("node:fs/promises");
+	let lastError;
+	for (const base of [nodePath.join(root, "package.json"), import.meta.url]) try {
+		const packageJsonPath = createRequire(base).resolve(`${ROUTER_GENERATOR_PACKAGE}/package.json`);
+		const packageJson = JSON.parse(await readFile(packageJsonPath, "utf8"));
+		const entry = packageJson.exports?.["."]?.import?.default ?? packageJson.module ?? packageJson.main;
+		if (entry === void 0) throw new Error(`${ROUTER_GENERATOR_PACKAGE} declares no entry point`);
+		return await import(pathToFileURL(nodePath.join(nodePath.dirname(packageJsonPath), entry)).href);
+	} catch (error) {
+		lastError = error;
+	}
+	throw lastError;
+}
+/** The first of `names` (relative to `dir`) that exists, as given. */
+async function findExisting(dir, names) {
+	const { access } = await import("node:fs/promises");
+	const nodePath = await import("node:path");
+	for (const name of names) if (await access(nodePath.join(dir, name)).then(() => true, () => false)) return name;
+}
+async function resolveEntryFile(srcDirectory, entry) {
+	const { stat } = await import("node:fs/promises");
+	const base = (await import("node:path")).resolve(srcDirectory, entry.startsWith("./") ? entry : `./${entry}`);
+	for (const extension of ENTRY_EXTENSIONS) {
+		const file = `${base}${extension}`;
+		if (await stat(file).then((stats) => stats.isFile(), () => false)) return file;
+	}
+}
+async function readSource(file) {
+	if (file === void 0) return void 0;
+	const { readFile } = await import("node:fs/promises");
+	return readFile(file, "utf8").catch(() => void 0);
+}
+async function enumerateRoutes(options) {
+	const fsp = await import("node:fs/promises");
+	const nodePath = await import("node:path");
+	const os = await import("node:os");
+	const generator = await loadRouterGenerator(options.root);
+	const { root, srcDirectory } = options;
+	const routesDirectory = nodePath.resolve(root, srcDirectory, stringOption(options.router, "routesDirectory", "routes"));
+	const generatedRouteTree = nodePath.resolve(root, srcDirectory, stringOption(options.router, "generatedRouteTree", "routeTree.gen.ts"));
+	const tmpDir = await fsp.mkdtemp(nodePath.join(os.tmpdir(), "lovable-route-manifest-"));
+	try {
+		const config = generator.getConfig({
+			...options.router,
+			routesDirectory,
+			generatedRouteTree,
+			tmpDir,
+			disableLogging: true,
+			enableRouteTreeFormatting: false
+		}, root);
+		const crawler = new generator.Generator({
+			config,
+			root,
+			fs: createOverlayFs(fsp)
+		});
+		await crawler.run();
+		const crawl = await crawler.getCrawlingResult();
+		if (crawl === void 0) throw new Error("the route generator produced no crawling result");
+		return routeFullPaths(crawl.acc.routeNodes, generator.inferFullPath);
+	} finally {
+		await fsp.rm(tmpDir, {
+			recursive: true,
+			force: true
+		}).catch(() => {});
+	}
+}
+function createRouteManifestPlugin(inputs) {
+	let root = process.cwd();
+	return {
+		name: ROUTE_MANIFEST_PLUGIN_NAME,
+		apply: "build",
+		enforce: "post",
+		configResolved(config) {
+			root = config.root;
+		},
+		buildApp: {
+			order: "post",
+			async handler() {
+				const { mkdir, rm, writeFile } = await import("node:fs/promises");
+				const nodePath = await import("node:path");
+				const artifact = nodePath.join(root, PUBLISH_OUTPUT_DIR, ROUTE_MANIFEST_DIR, ROUTE_MANIFEST_FILE);
+				await rm(artifact, { force: true }).catch((error) => {
+					logWarning(`Could not remove a previous build's route manifest: ${String(error)}`);
+				});
+				const optOut = routeManifestOptOut(inputs);
+				if (optOut !== void 0) {
+					logWarning(`Not publishing a route manifest: ${optOut}.`);
+					return;
+				}
+				const nitroConfig = await findExisting(root, NITRO_CONFIG_FILES);
+				if (nitroConfig !== void 0) {
+					logWarning(`Not publishing a route manifest: nitro loads ${nitroConfig} on its own, and it may add routes.`);
+					return;
+				}
+				const { tanstackStart } = inputs;
+				const srcDirectory = stringOption(tanstackStart, "srcDirectory", "src");
+				const router = subOptions(tanstackStart, "router");
+				const sourceDir = nodePath.resolve(root, srcDirectory);
+				const routerEntry = stringOption(router, "entry", "router");
+				const routerSource = await readSource(await resolveEntryFile(sourceDir, routerEntry));
+				if (routerSource === void 0) {
+					logWarning(`Not publishing a route manifest: could not read the router file (${routerEntry} under ${srcDirectory}) to check its settings.`);
+					return;
+				}
+				if (/\brewrite\s*:/.test(routerSource)) {
+					logWarning("Not publishing a route manifest: the router file sets `rewrite`.");
+					return;
+				}
+				const basepath = normalizeBasePath(router.basepath);
+				if (routerBasepathDisagrees(routerSource, basepath)) {
+					logWarning("Not publishing a route manifest: the router file sets a `basepath` that tanstackStart.router.basepath does not declare.");
+					return;
+				}
+				let routes;
+				try {
+					routes = await enumerateRoutes({
+						root,
+						srcDirectory,
+						router
+					});
+				} catch (error) {
+					logWarning(`Not publishing a route manifest; could not enumerate the route tree: ${String(error)}`);
+					return;
+				}
+				if (routes.length === 0) {
+					logWarning("Not publishing a route manifest: the route tree has no routes.");
+					return;
+				}
+				const startSource = await readSource(await resolveEntryFile(sourceDir, stringOption(subOptions(tanstackStart, "start"), "entry", "start")));
+				const payload = serializeRouteManifest({
+					version: ROUTE_MANIFEST_VERSION,
+					generator: GENERATOR,
+					...basepath === "" ? {} : { basepath },
+					serverEntry: typeof subOptions(tanstackStart, "server").entry === "string" ? "custom" : "default",
+					...startSource === void 0 ? {} : { requestMiddleware: /\brequestMiddleware\b/.test(startSource) },
+					routes
+				});
+				if (payload === void 0) return;
+				try {
+					await mkdir(nodePath.dirname(artifact), { recursive: true });
+					await writeFile(artifact, payload);
+				} catch (error) {
+					logWarning(`Could not write the route manifest; unknown paths fall back to SSR: ${String(error)}`);
+				}
+			}
+		}
+	};
+}
+//#endregion
 //#region src/index.ts
 const SANDBOX_ENV_VAR = "DEV_SERVER__PROJECT_PATH";
 const LOVABLE_SANDBOX_ENV_VAR = "LOVABLE_SANDBOX";
 function isSandboxEnvironment() {
 	return process.env[LOVABLE_SANDBOX_ENV_VAR] === "1" || !!process.env[SANDBOX_ENV_VAR];
 }
+function sandboxFsAllow(root) {
+	let nodeModules;
+	let realRoot;
+	try {
+		nodeModules = realpathSync.native(join(root, "node_modules"));
+		realRoot = realpathSync.native(root);
+	} catch {
+		return;
+	}
+	if (nodeModules.startsWith(realRoot + sep)) return void 0;
+	return [searchForWorkspaceRoot(root), nodeModules];
+}
 const TOOL_MANAGED_WATCH_IGNORES = [
 	"**/.workspace/**",
 	"**/.agents/**",
@@ -1198,6 +1506,10 @@ function defineConfig(configOrOptions = {}) {
 		if (command === "build" && isSandbox) {
 			const { startOptions, skipReporter, documentSet } = pinPrerenderForLovableBuild(tanstackStartOptions);
 			internalPlugins.push(tanstackStart(startOptions), skipReporter, documentSet);
+			internalPlugins.push(createRouteManifestPlugin({
+				tanstackStart: tanstackStartOptions,
+				nitro: options.nitro
+			}));
 		} else internalPlugins.push(tanstackStart(tanstackStartOptions));
 		const explicitNitro = options.nitro === true || typeof options.nitro === "object" && options.nitro !== null;
 		if (options.nitro !== false && command === "build") {
@@ -1320,12 +1632,14 @@ function defineConfig(configOrOptions = {}) {
 		}
 		if (isSandbox) {
 			validateConfig(config);
+			const fsAllow = sandboxFsAllow(process.cwd());
 			config = cleanServerConfig(mergeConfig(config, { server: {
 				host: "::",
 				port: 8080,
 				strictPort: true,
 				watch: { ignored: [...TOOL_MANAGED_WATCH_IGNORES] },
-				hmr: { overlay: false }
+				hmr: { overlay: false },
+				...fsAllow ? { fs: { allow: fsAllow } } : {}
 			} }));
 		} else config = mergeConfig({ server: {
 			host: "::",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/vite-tanstack-config",
-  "version": "2.22.0",
+  "version": "2.23.1",
   "description": "Vite config wrapper for Lovable TanStack Start projects",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -69,19 +69,28 @@
     "vite-tsconfig-paths": ">=6.0.0",
     "nitro": ">=3.0.260603-beta",
     "@tanstack/react-start": ">=1.100.0",
+    "@tanstack/router-generator": ">=1.121.0 <1.166.45 || >=1.166.49",
     "@vitejs/plugin-react": ">=4.0.0"
   },
   "peerDependenciesMeta": {
     "nitro": {
       "optional": true
+    },
+    "@tanstack/router-generator": {
+      "optional": true
     }
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.0",
+    "@tanstack/react-query": "^5.102.8",
+    "@tanstack/react-router": "1.170.30",
     "@tanstack/react-start": "^1.167.50",
+    "@tanstack/router-generator": "^1.167.31",
     "@types/node": "22.13.13",
     "@vitejs/plugin-react": "^5.2.0",
     "nitro": "3.0.260603-beta",
+    "react": "19.3.0",
+    "react-dom": "19.3.0",
     "rimraf": "^5.0.0",
     "tsdown": "^0.22.5",
     "typescript": "7.0.2",
@@ -100,7 +109,8 @@
     "typecheck": "tsgo --noEmit",
     "dev": "tsdown --watch",
     "test": "vitest run",
-    "test:watch": "vitest",
+    "test:unit": "vitest run --project unit",
+    "test:watch": "vitest --project unit",
     "clean": "rimraf dist",
     "coverage": "vitest run --coverage"
   }