@rshono/core 1.0.0-rc.1 → 1.0.0-rc.11

package/dist/config.d.ts

@@ -1,6 +1,6 @@
 import type { RspackOptions } from '@rspack/core';
 import type { DeployTarget } from './deploy/contract.js';
-/** Which of the two Rspack compilers the {@link RSHonoConfig.rspack} hook is being called for. */
+/** Which of the two Rspack compilers the {@link RshonoConfig.rspack} hook is being called for. */
 export interface RspackHookContext {
     /** `true` for the server (`target: node`) bundle, `false` for the client (`target: web`) bundle. */
     isServer: boolean;
@@ -11,18 +11,23 @@ export interface RspackHookContext {
  * Project configuration for rshono, default-exported from `rshono.config.ts` at the project root
  * (`.js` / `.mjs` also work). Every field is optional; omit the file entirely to accept all defaults.
  *
+ * Deliberately small: it holds what only the *build* can decide. Everything that is a per-request
+ * concern — CSRF, CSP, the body cap — is Hono middleware in `src/server.ts` instead, because Hono
+ * already ships all of it and a config field would only be a worse way to spell the same call.
+ *
  * @example
  * ```ts
  * import { defineConfig } from '@rshono/core';
  *
  * export default defineConfig({
- *   csp: true,
- *   bodySizeLimit: '4mb',
- *   allowedOrigins: ['https://admin.example.com'],
+ *   deploy: 'cloudflare',
+ *   siteUrl: 'https://example.com',
  * });
  * ```
+ *
+ * @see {@link https://www.rshono.com/docs/configuration | Docs — configuration}
  */
-export interface RSHonoConfig {
+export interface RshonoConfig {
     /**
      * The hosting platform `rshono build` targets. Default `'node'` — a long-lived server process, for
      * a VPS, a container or anywhere else you run `rshono start`.
@@ -30,92 +35,75 @@ export interface RSHonoConfig {
      * Overridden by the `--deploy` flag or the `RSHONO_DEPLOY` env var, so one config can still be
      * built for more than one place. `rshono dev` ignores it entirely and always runs the Node dev
      * server.
+     *
+     * @see {@link https://www.rshono.com/docs/deployment | Docs — deployment}
      */
     deploy?: DeployTarget;
     /**
      * The public origin the site is served from, e.g. `'https://example.com'`.
      *
-     * Only used when prerendering `render: 'static'` routes. A prerendered page is one fixed file
-     * handed to everyone, so any absolute URL inside it has to be decided at build time — there is no
-     * request to read a `Host` from. That is what a page's `url` prop is, so without this a static
-     * page bakes in `http://localhost` wherever it builds a canonical tag, an absolute link or an
-     * `og:url`. Dynamic routes are unaffected: they resolve the URL per request.
+     * Only used when prerendering `render: 'static'` routes: they are rendered once at build time, with
+     * no request to read a `Host` from, so a page's `url` prop falls back to `http://localhost` without
+     * this — and that is what its canonical tag, absolute links and `og:url` get baked with. Dynamic
+     * routes resolve the URL per request and are unaffected.
      *
-     * The origin is what's used; a path is rejected rather than silently dropped.
+     * Must be a bare origin; a path is rejected rather than silently dropped.
+     *
+     * @see {@link https://www.rshono.com/docs/configuration#siteurl | Docs — siteUrl}
      */
     siteUrl?: string;
-    /** Default port for `dev` / `start`. Overridden by the `--port` flag or the `PORT` env var. Default `3000`. */
-    port?: number;
-    /** Bind address for `start`. Overridden by the `HOST` env var. Default `'0.0.0.0'`. */
-    host?: string;
     /**
      * Honour `X-Forwarded-Host` / `X-Forwarded-Proto` when resolving the browser-facing request
-     * URL (`getContext().url`, a page's `url` prop, and the origin the CSRF check compares against).
+     * URL — `getRequestContext().url` and a page's `url` prop.
+     *
+     * Middleware in `src/server.ts` is handed Hono's `c` and so reads `c.req.url`, the *internal*
+     * address, whatever this says. Hono's `csrf()` is the one to watch: behind a proxy that rewrites
+     * `Host`, give it the public origin explicitly (`csrf({ origin: 'https://example.com' })`) rather
+     * than leaving it to compare against an address the browser never used.
      *
-     * **Off by default, and leave it off unless a proxy you control sets those headers**, because
-     * any client can send them: with it on and nothing stripping them at the edge, one request can
-     * point every absolute URL your app builds at an attacker's host (and poison a shared cache).
-     * Turn it on when you terminate TLS or rewrite `Host` at a reverse proxy / load balancer.
-     * Always `true` under `rshono dev`, where the framework's own proxy sets them and binds to
-     * localhost. Default `false`.
+     * **Off by default, and leave it off unless a proxy you control sets those headers**: any client
+     * can send them, so with nothing stripping them at the edge one request can point every absolute
+     * URL the app builds at an attacker's host (and poison a shared cache). Turn it on when you
+     * terminate TLS or rewrite `Host` at a reverse proxy / load balancer. Always `true` under
+     * `rshono dev`, where the framework's own proxy sets them and binds to localhost. Default `false`.
+     *
+     * @see {@link https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-Host | MDN — X-Forwarded-Host}
+     * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}
      */
     trustProxy?: boolean;
     /**
-     * CSRF origin check on server-action POSTs — rejects a cross-origin request with 403.
-     * Turn off only behind a gateway that already enforces it. Default `true`.
-     */
-    checkOrigin?: boolean;
-    /**
-     * Extra origins allowed to post server actions, in addition to the app's own origin.
-     * Accepts full origins or bare hosts, e.g. `['https://admin.example.com', 'localhost:4000']`.
-     */
-    allowedOrigins?: string[];
-    /**
-     * Send a strict per-request-nonce `Content-Security-Policy` with every HTML document.
-     * While enabled, `render: 'static'` routes render per request (a prerendered file can't carry a
-     * per-request nonce). Default `false`.
-     */
-    csp?: boolean;
-    /**
-     * Directives merged over the built-in {@link csp} policy, which is deliberately strict
-     * (`default-src 'self'`, no framing, no plugins) and so blocks third-party images, fonts and
-     * API hosts until you widen it here. Set a directive to `''` to drop it entirely.
-     *
-     * The per-request nonce is always appended to `script-src`, whatever you put there.
-     * Ignored unless `csp` is `true`.
+     * Escape hatch: mutate the generated Rspack config just before it's compiled. Called once per
+     * compiler — inspect {@link RspackHookContext.isServer} to tell them apart. Mutate `config` in
+     * place and return nothing, or return a replacement.
      *
      * @example
      * ```ts
-     * cspDirectives: {
-     *   'img-src': "'self' data: https://images.example.com",
-     *   'font-src': "'self' https://fonts.gstatic.com",
-     *   'frame-ancestors': "'self'",
+     * rspack(config, { isServer }) {
+     *   config.module?.rules?.push({ test: /\.svg$/, type: 'asset/source' });
      * }
      * ```
-     */
-    cspDirectives?: Record<string, string>;
-    /**
-     * Max server-action request body before it's rejected with 413 — a memory-exhaustion guard.
-     * A number is bytes; a string carries a unit (`'512kb'`, `'4mb'`); `false` (or `0`) disables the cap.
-     * Default `'1mb'`.
-     */
-    bodySizeLimit?: string | number | false;
-    /** Deadline in milliseconds for a single page render (flight + SSR). Default `10000`. */
-    renderTimeout?: number;
-    /**
-     * Gzip compressible responses (HTML, flight payloads, JSON, CSS, JS). Streaming-safe — each
-     * chunk the renderer flushes is flushed on the wire too. Default `true`.
      *
-     * Set `false` behind a proxy or CDN that already compresses, to avoid doing the work twice.
-     */
-    compress?: boolean;
-    /**
-     * Escape hatch: mutate the generated Rspack config just before it's compiled. Called once per
-     * compiler — inspect {@link RspackHookContext.isServer} to tell them apart. Mutate `config` in
-     * place and return nothing, or return a replacement.
+     * @see {@link https://rspack.rs/config/ | Rspack — configuration reference}
+     * @see {@link https://www.rshono.com/docs/configuration#the-rspack-hook | Docs — the rspack hook}
      */
     rspack?: (config: RspackOptions, ctx: RspackHookContext) => RspackOptions | void;
 }
-/** Identity helper that types a config object — gives editor autocomplete without an explicit annotation. */
-export declare function defineConfig(config: RSHonoConfig): RSHonoConfig;
+/**
+ * Identity helper that types a config object — gives editor autocomplete without an explicit
+ * annotation. Default-export the result from `rshono.config.ts`.
+ *
+ * @param config - The project's {@link RshonoConfig}; every field is optional.
+ * @returns The config, unchanged and fully typed.
+ *
+ * @example
+ * ```ts
+ * // rshono.config.ts
+ * import { defineConfig } from '@rshono/core';
+ *
+ * export default defineConfig({ deploy: 'cloudflare', siteUrl: 'https://example.com' });
+ * ```
+ *
+ * @see {@link https://www.rshono.com/docs/configuration | Docs — configuration}
+ */
+export declare function defineConfig(config: RshonoConfig): RshonoConfig;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,QAAQ,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+GAA+G;IAC/G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACxC,yFAAyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,KAAK,aAAa,GAAG,IAAI,CAAC;CAClF;AAED,6GAA6G;AAC7G,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAE/D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,oGAAoG;IACpG,QAAQ,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,KAAK,aAAa,GAAG,IAAI,CAAC;CAClF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAE/D"}

package/dist/config.js

@@ -1,4 +1,20 @@
-/** Identity helper that types a config object — gives editor autocomplete without an explicit annotation. */
+/**
+ * Identity helper that types a config object — gives editor autocomplete without an explicit
+ * annotation. Default-export the result from `rshono.config.ts`.
+ *
+ * @param config - The project's {@link RshonoConfig}; every field is optional.
+ * @returns The config, unchanged and fully typed.
+ *
+ * @example
+ * ```ts
+ * // rshono.config.ts
+ * import { defineConfig } from '@rshono/core';
+ *
+ * export default defineConfig({ deploy: 'cloudflare', siteUrl: 'https://example.com' });
+ * ```
+ *
+ * @see {@link https://www.rshono.com/docs/configuration | Docs — configuration}
+ */
 export function defineConfig(config) {
     return config;
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAyHA,6GAA6G;AAC7G,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { RspackOptions } from '@rspack/core';\nimport type { DeployTarget } from './deploy/contract.js';\n\n/** Which of the two Rspack compilers the {@link RSHonoConfig.rspack} hook is being called for. */\nexport interface RspackHookContext {\n  /** `true` for the server (`target: node`) bundle, `false` for the client (`target: web`) bundle. */\n  isServer: boolean;\n  /** `true` under `rshono dev`, `false` under `rshono build`. */\n  isDev: boolean;\n}\n\n/**\n * Project configuration for rshono, default-exported from `rshono.config.ts` at the project root\n * (`.js` / `.mjs` also work). Every field is optional; omit the file entirely to accept all defaults.\n *\n * @example\n * ```ts\n * import { defineConfig } from '@rshono/core';\n *\n * export default defineConfig({\n *   csp: true,\n *   bodySizeLimit: '4mb',\n *   allowedOrigins: ['https://admin.example.com'],\n * });\n * ```\n */\nexport interface RSHonoConfig {\n  /**\n   * The hosting platform `rshono build` targets. Default `'node'` — a long-lived server process, for\n   * a VPS, a container or anywhere else you run `rshono start`.\n   *\n   * Overridden by the `--deploy` flag or the `RSHONO_DEPLOY` env var, so one config can still be\n   * built for more than one place. `rshono dev` ignores it entirely and always runs the Node dev\n   * server.\n   */\n  deploy?: DeployTarget;\n  /**\n   * The public origin the site is served from, e.g. `'https://example.com'`.\n   *\n   * Only used when prerendering `render: 'static'` routes. A prerendered page is one fixed file\n   * handed to everyone, so any absolute URL inside it has to be decided at build time — there is no\n   * request to read a `Host` from. That is what a page's `url` prop is, so without this a static\n   * page bakes in `http://localhost` wherever it builds a canonical tag, an absolute link or an\n   * `og:url`. Dynamic routes are unaffected: they resolve the URL per request.\n   *\n   * The origin is what's used; a path is rejected rather than silently dropped.\n   */\n  siteUrl?: string;\n  /** Default port for `dev` / `start`. Overridden by the `--port` flag or the `PORT` env var. Default `3000`. */\n  port?: number;\n  /** Bind address for `start`. Overridden by the `HOST` env var. Default `'0.0.0.0'`. */\n  host?: string;\n  /**\n   * Honour `X-Forwarded-Host` / `X-Forwarded-Proto` when resolving the browser-facing request\n   * URL (`getContext().url`, a page's `url` prop, and the origin the CSRF check compares against).\n   *\n   * **Off by default, and leave it off unless a proxy you control sets those headers**, because\n   * any client can send them: with it on and nothing stripping them at the edge, one request can\n   * point every absolute URL your app builds at an attacker's host (and poison a shared cache).\n   * Turn it on when you terminate TLS or rewrite `Host` at a reverse proxy / load balancer.\n   * Always `true` under `rshono dev`, where the framework's own proxy sets them and binds to\n   * localhost. Default `false`.\n   */\n  trustProxy?: boolean;\n  /**\n   * CSRF origin check on server-action POSTs — rejects a cross-origin request with 403.\n   * Turn off only behind a gateway that already enforces it. Default `true`.\n   */\n  checkOrigin?: boolean;\n  /**\n   * Extra origins allowed to post server actions, in addition to the app's own origin.\n   * Accepts full origins or bare hosts, e.g. `['https://admin.example.com', 'localhost:4000']`.\n   */\n  allowedOrigins?: string[];\n  /**\n   * Send a strict per-request-nonce `Content-Security-Policy` with every HTML document.\n   * While enabled, `render: 'static'` routes render per request (a prerendered file can't carry a\n   * per-request nonce). Default `false`.\n   */\n  csp?: boolean;\n  /**\n   * Directives merged over the built-in {@link csp} policy, which is deliberately strict\n   * (`default-src 'self'`, no framing, no plugins) and so blocks third-party images, fonts and\n   * API hosts until you widen it here. Set a directive to `''` to drop it entirely.\n   *\n   * The per-request nonce is always appended to `script-src`, whatever you put there.\n   * Ignored unless `csp` is `true`.\n   *\n   * @example\n   * ```ts\n   * cspDirectives: {\n   *   'img-src': \"'self' data: https://images.example.com\",\n   *   'font-src': \"'self' https://fonts.gstatic.com\",\n   *   'frame-ancestors': \"'self'\",\n   * }\n   * ```\n   */\n  cspDirectives?: Record<string, string>;\n  /**\n   * Max server-action request body before it's rejected with 413 — a memory-exhaustion guard.\n   * A number is bytes; a string carries a unit (`'512kb'`, `'4mb'`); `false` (or `0`) disables the cap.\n   * Default `'1mb'`.\n   */\n  bodySizeLimit?: string | number | false;\n  /** Deadline in milliseconds for a single page render (flight + SSR). Default `10000`. */\n  renderTimeout?: number;\n  /**\n   * Gzip compressible responses (HTML, flight payloads, JSON, CSS, JS). Streaming-safe — each\n   * chunk the renderer flushes is flushed on the wire too. Default `true`.\n   *\n   * Set `false` behind a proxy or CDN that already compresses, to avoid doing the work twice.\n   */\n  compress?: boolean;\n  /**\n   * Escape hatch: mutate the generated Rspack config just before it's compiled. Called once per\n   * compiler — inspect {@link RspackHookContext.isServer} to tell them apart. Mutate `config` in\n   * place and return nothing, or return a replacement.\n   */\n  rspack?: (config: RspackOptions, ctx: RspackHookContext) => RspackOptions | void;\n}\n\n/** Identity helper that types a config object — gives editor autocomplete without an explicit annotation. */\nexport function defineConfig(config: RSHonoConfig): RSHonoConfig {\n  return config;\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AA6FA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { RspackOptions } from '@rspack/core';\nimport type { DeployTarget } from './deploy/contract.js';\n\n/** Which of the two Rspack compilers the {@link RshonoConfig.rspack} hook is being called for. */\nexport interface RspackHookContext {\n  /** `true` for the server (`target: node`) bundle, `false` for the client (`target: web`) bundle. */\n  isServer: boolean;\n  /** `true` under `rshono dev`, `false` under `rshono build`. */\n  isDev: boolean;\n}\n\n/**\n * Project configuration for rshono, default-exported from `rshono.config.ts` at the project root\n * (`.js` / `.mjs` also work). Every field is optional; omit the file entirely to accept all defaults.\n *\n * Deliberately small: it holds what only the *build* can decide. Everything that is a per-request\n * concern — CSRF, CSP, the body cap — is Hono middleware in `src/server.ts` instead, because Hono\n * already ships all of it and a config field would only be a worse way to spell the same call.\n *\n * @example\n * ```ts\n * import { defineConfig } from '@rshono/core';\n *\n * export default defineConfig({\n *   deploy: 'cloudflare',\n *   siteUrl: 'https://example.com',\n * });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/configuration | Docs — configuration}\n */\nexport interface RshonoConfig {\n  /**\n   * The hosting platform `rshono build` targets. Default `'node'` — a long-lived server process, for\n   * a VPS, a container or anywhere else you run `rshono start`.\n   *\n   * Overridden by the `--deploy` flag or the `RSHONO_DEPLOY` env var, so one config can still be\n   * built for more than one place. `rshono dev` ignores it entirely and always runs the Node dev\n   * server.\n   *\n   * @see {@link https://www.rshono.com/docs/deployment | Docs — deployment}\n   */\n  deploy?: DeployTarget;\n  /**\n   * The public origin the site is served from, e.g. `'https://example.com'`.\n   *\n   * Only used when prerendering `render: 'static'` routes: they are rendered once at build time, with\n   * no request to read a `Host` from, so a page's `url` prop falls back to `http://localhost` without\n   * this — and that is what its canonical tag, absolute links and `og:url` get baked with. Dynamic\n   * routes resolve the URL per request and are unaffected.\n   *\n   * Must be a bare origin; a path is rejected rather than silently dropped.\n   *\n   * @see {@link https://www.rshono.com/docs/configuration#siteurl | Docs — siteUrl}\n   */\n  siteUrl?: string;\n  /**\n   * Honour `X-Forwarded-Host` / `X-Forwarded-Proto` when resolving the browser-facing request\n   * URL — `getRequestContext().url` and a page's `url` prop.\n   *\n   * Middleware in `src/server.ts` is handed Hono's `c` and so reads `c.req.url`, the *internal*\n   * address, whatever this says. Hono's `csrf()` is the one to watch: behind a proxy that rewrites\n   * `Host`, give it the public origin explicitly (`csrf({ origin: 'https://example.com' })`) rather\n   * than leaving it to compare against an address the browser never used.\n   *\n   * **Off by default, and leave it off unless a proxy you control sets those headers**: any client\n   * can send them, so with nothing stripping them at the edge one request can point every absolute\n   * URL the app builds at an attacker's host (and poison a shared cache). Turn it on when you\n   * terminate TLS or rewrite `Host` at a reverse proxy / load balancer. Always `true` under\n   * `rshono dev`, where the framework's own proxy sets them and binds to localhost. Default `false`.\n   *\n   * @see {@link https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Forwarded-Host | MDN — X-Forwarded-Host}\n   * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}\n   */\n  trustProxy?: boolean;\n  /**\n   * Escape hatch: mutate the generated Rspack config just before it's compiled. Called once per\n   * compiler — inspect {@link RspackHookContext.isServer} to tell them apart. Mutate `config` in\n   * place and return nothing, or return a replacement.\n   *\n   * @example\n   * ```ts\n   * rspack(config, { isServer }) {\n   *   config.module?.rules?.push({ test: /\\.svg$/, type: 'asset/source' });\n   * }\n   * ```\n   *\n   * @see {@link https://rspack.rs/config/ | Rspack — configuration reference}\n   * @see {@link https://www.rshono.com/docs/configuration#the-rspack-hook | Docs — the rspack hook}\n   */\n  rspack?: (config: RspackOptions, ctx: RspackHookContext) => RspackOptions | void;\n}\n\n/**\n * Identity helper that types a config object — gives editor autocomplete without an explicit\n * annotation. Default-export the result from `rshono.config.ts`.\n *\n * @param config - The project's {@link RshonoConfig}; every field is optional.\n * @returns The config, unchanged and fully typed.\n *\n * @example\n * ```ts\n * // rshono.config.ts\n * import { defineConfig } from '@rshono/core';\n *\n * export default defineConfig({ deploy: 'cloudflare', siteUrl: 'https://example.com' });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/configuration | Docs — configuration}\n */\nexport function defineConfig(config: RshonoConfig): RshonoConfig {\n  return config;\n}\n"]}

package/dist/deploy/cloudflare/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/deploy/cloudflare/build.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAmDxD;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BpF"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/deploy/cloudflare/build.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAuDxD;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBpF"}

package/dist/deploy/cloudflare/build.js

@@ -26,13 +26,16 @@ function workerName(rootDir) {
         .replace(/^-+|-+$/g, '');
     return name || 'rshono-app';
 }
-function wranglerConfig(rootDir, today) {
+// Fixed, not the day the build ran: wrangler's bundled workerd refuses a date newer than its own, so a config
+// dated today would deploy fine and never start under `wrangler dev`. See the test that holds it behind today.
+const COMPATIBILITY_DATE = '2026-07-01';
+function wranglerConfig(rootDir) {
     return `${JSON.stringify({
         $schema: 'node_modules/wrangler/config-schema.json',
         name: workerName(rootDir),
         main: 'dist/server/main.mjs',
-        compatibility_date: today,
-        // AsyncLocalStorage — how the framework binds the request context that `getContext()` reads.
+        compatibility_date: COMPATIBILITY_DATE,
+        // AsyncLocalStorage — how the framework binds the request context that `getRequestContext()` reads.
         compatibility_flags: ['nodejs_compat'],
         assets: {
             directory: `dist/${ASSETS_DIR.split(/[\\/]/).join('/')}`,
@@ -65,8 +68,7 @@ export async function finalizeCloudflareBuild(ctx) {
     }
     const existing = WRANGLER_FILES.find((file) => existsSync(join(ctx.rootDir, file)));
     if (!existing) {
-        const today = new Date().toISOString().slice(0, 10);
-        writeFileSync(join(ctx.rootDir, 'wrangler.jsonc'), wranglerConfig(ctx.rootDir, today));
+        writeFileSync(join(ctx.rootDir, 'wrangler.jsonc'), wranglerConfig(ctx.rootDir));
         console.log('  • wrote wrangler.jsonc (yours now — edit freely, the build will not touch it again)');
     }
     console.log(`  • assembled ${join('dist', ASSETS_DIR)} for Workers Assets`);

package/dist/deploy/cloudflare/build.js.map

@@ -1 +1 @@
-{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/deploy/cloudflare/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG3C,2GAA2G;AAC3G,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEhD,MAAM,cAAc,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG;;;;;CAKpB,CAAC;AAEF,6EAA6E;AAC7E,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;SAC3B,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,YAAY,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;QACzB,IAAI,EAAE,sBAAsB;QAC5B,kBAAkB,EAAE,KAAK;QACzB,6FAA6F;QAC7F,mBAAmB,EAAE,CAAC,eAAe,CAAC;QACtC,MAAM,EAAE;YACN,SAAS,EAAE,QAAQ,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACxD,6FAA6F;YAC7F,OAAO,EAAE,QAAQ;SAClB;KACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAuB;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,mGAAmG;IACnG,oCAAoC;IACpC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9F,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IACpH,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import { cpSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { rm } from 'node:fs/promises';\nimport { basename, join } from 'node:path';\nimport type { DeployBuildContext } from '../presets.js';\n\n/** Wrangler serves one directory, so the three kinds of asset the build produces are assembled into it. */\nconst ASSETS_DIR = join('cloudflare', 'assets');\n\nconst WRANGLER_FILES = ['wrangler.jsonc', 'wrangler.json', 'wrangler.toml'];\n\n/**\n * Caching and crawler rules for the assembled tree, in the file Workers Assets reads them from.\n *\n * The hashed bundle is immutable by construction, which is the one thing the CDN cannot infer. The\n * prerender tree is reachable under its own prefix (see `SSG_PREFIX` in `runtime.ts`) and holds a\n * second copy of pages that already have real URLs, so it is marked `noindex` rather than left for a\n * crawler to find twice.\n */\nconst HEADERS_FILE = `/_static/*\n  Cache-Control: public, max-age=31536000, immutable\n\n/__ssg/*\n  X-Robots-Tag: noindex\n`;\n\n/** A Wrangler worker name: lowercase, and only the characters it accepts. */\nfunction workerName(rootDir: string): string {\n  const name = basename(rootDir)\n    .toLowerCase()\n    .replace(/[^a-z0-9-]+/g, '-')\n    .replace(/^-+|-+$/g, '');\n  return name || 'rshono-app';\n}\n\nfunction wranglerConfig(rootDir: string, today: string): string {\n  return `${JSON.stringify(\n    {\n      $schema: 'node_modules/wrangler/config-schema.json',\n      name: workerName(rootDir),\n      main: 'dist/server/main.mjs',\n      compatibility_date: today,\n      // AsyncLocalStorage — how the framework binds the request context that `getContext()` reads.\n      compatibility_flags: ['nodejs_compat'],\n      assets: {\n        directory: `dist/${ASSETS_DIR.split(/[\\\\/]/).join('/')}`,\n        // Read by the worker for `public/` files and prerendered pages; the CDN still answers first.\n        binding: 'ASSETS',\n      },\n    },\n    null,\n    2,\n  )}\\n`;\n}\n\n/**\n * Arranges a Workers deployment: one assets directory holding everything the CDN should serve, and a\n * `wrangler.jsonc` to deploy with if the project has no Wrangler config of its own.\n */\nexport async function finalizeCloudflareBuild(ctx: DeployBuildContext): Promise<void> {\n  const assetsDir = join(ctx.distDir, ASSETS_DIR);\n  // Rebuilt from scratch, so a file deleted from `public/` or a route that stopped being static does\n  // not survive in the deployed tree.\n  await rm(assetsDir, { recursive: true, force: true });\n  mkdirSync(assetsDir, { recursive: true });\n\n  cpSync(ctx.staticDir, join(assetsDir, '_static'), { recursive: true });\n  if (ctx.publicDir) cpSync(ctx.publicDir, assetsDir, { recursive: true });\n  if (existsSync(ctx.ssgDir)) cpSync(ctx.ssgDir, join(assetsDir, '__ssg'), { recursive: true });\n\n  const headersFile = join(assetsDir, '_headers');\n  if (existsSync(headersFile)) {\n    console.warn(`  ⚠ public/_headers is in the way of the generated one — /_static/* will not be marked immutable.`);\n  } else {\n    writeFileSync(headersFile, HEADERS_FILE);\n  }\n\n  const existing = WRANGLER_FILES.find((file) => existsSync(join(ctx.rootDir, file)));\n  if (!existing) {\n    const today = new Date().toISOString().slice(0, 10);\n    writeFileSync(join(ctx.rootDir, 'wrangler.jsonc'), wranglerConfig(ctx.rootDir, today));\n    console.log('  • wrote wrangler.jsonc (yours now — edit freely, the build will not touch it again)');\n  }\n\n  console.log(`  • assembled ${join('dist', ASSETS_DIR)} for Workers Assets`);\n}\n"]}
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/deploy/cloudflare/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG3C,2GAA2G;AAC3G,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEhD,MAAM,cAAc,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG;;;;;CAKpB,CAAC;AAEF,6EAA6E;AAC7E,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;SAC3B,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,YAAY,CAAC;AAC9B,CAAC;AAED,8GAA8G;AAC9G,+GAA+G;AAC/G,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAExC,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,GAAG,IAAI,CAAC,SAAS,CACtB;QACE,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC;QACzB,IAAI,EAAE,sBAAsB;QAC5B,kBAAkB,EAAE,kBAAkB;QACtC,oGAAoG;QACpG,mBAAmB,EAAE,CAAC,eAAe,CAAC;QACtC,MAAM,EAAE;YACN,SAAS,EAAE,QAAQ,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACxD,6FAA6F;YAC7F,OAAO,EAAE,QAAQ;SAClB;KACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AACR,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAuB;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,mGAAmG;IACnG,oCAAoC;IACpC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9F,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IACpH,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import { cpSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { rm } from 'node:fs/promises';\nimport { basename, join } from 'node:path';\nimport type { DeployBuildContext } from '../presets.js';\n\n/** Wrangler serves one directory, so the three kinds of asset the build produces are assembled into it. */\nconst ASSETS_DIR = join('cloudflare', 'assets');\n\nconst WRANGLER_FILES = ['wrangler.jsonc', 'wrangler.json', 'wrangler.toml'];\n\n/**\n * Caching and crawler rules for the assembled tree, in the file Workers Assets reads them from.\n *\n * The hashed bundle is immutable by construction, which is the one thing the CDN cannot infer. The\n * prerender tree is reachable under its own prefix (see `SSG_PREFIX` in `runtime.ts`) and holds a\n * second copy of pages that already have real URLs, so it is marked `noindex` rather than left for a\n * crawler to find twice.\n */\nconst HEADERS_FILE = `/_static/*\n  Cache-Control: public, max-age=31536000, immutable\n\n/__ssg/*\n  X-Robots-Tag: noindex\n`;\n\n/** A Wrangler worker name: lowercase, and only the characters it accepts. */\nfunction workerName(rootDir: string): string {\n  const name = basename(rootDir)\n    .toLowerCase()\n    .replace(/[^a-z0-9-]+/g, '-')\n    .replace(/^-+|-+$/g, '');\n  return name || 'rshono-app';\n}\n\n// Fixed, not the day the build ran: wrangler's bundled workerd refuses a date newer than its own, so a config\n// dated today would deploy fine and never start under `wrangler dev`. See the test that holds it behind today.\nconst COMPATIBILITY_DATE = '2026-07-01';\n\nfunction wranglerConfig(rootDir: string): string {\n  return `${JSON.stringify(\n    {\n      $schema: 'node_modules/wrangler/config-schema.json',\n      name: workerName(rootDir),\n      main: 'dist/server/main.mjs',\n      compatibility_date: COMPATIBILITY_DATE,\n      // AsyncLocalStorage — how the framework binds the request context that `getRequestContext()` reads.\n      compatibility_flags: ['nodejs_compat'],\n      assets: {\n        directory: `dist/${ASSETS_DIR.split(/[\\\\/]/).join('/')}`,\n        // Read by the worker for `public/` files and prerendered pages; the CDN still answers first.\n        binding: 'ASSETS',\n      },\n    },\n    null,\n    2,\n  )}\\n`;\n}\n\n/**\n * Arranges a Workers deployment: one assets directory holding everything the CDN should serve, and a\n * `wrangler.jsonc` to deploy with if the project has no Wrangler config of its own.\n */\nexport async function finalizeCloudflareBuild(ctx: DeployBuildContext): Promise<void> {\n  const assetsDir = join(ctx.distDir, ASSETS_DIR);\n  // Rebuilt from scratch, so a file deleted from `public/` or a route that stopped being static does\n  // not survive in the deployed tree.\n  await rm(assetsDir, { recursive: true, force: true });\n  mkdirSync(assetsDir, { recursive: true });\n\n  cpSync(ctx.staticDir, join(assetsDir, '_static'), { recursive: true });\n  if (ctx.publicDir) cpSync(ctx.publicDir, assetsDir, { recursive: true });\n  if (existsSync(ctx.ssgDir)) cpSync(ctx.ssgDir, join(assetsDir, '__ssg'), { recursive: true });\n\n  const headersFile = join(assetsDir, '_headers');\n  if (existsSync(headersFile)) {\n    console.warn(`  ⚠ public/_headers is in the way of the generated one — /_static/* will not be marked immutable.`);\n  } else {\n    writeFileSync(headersFile, HEADERS_FILE);\n  }\n\n  const existing = WRANGLER_FILES.find((file) => existsSync(join(ctx.rootDir, file)));\n  if (!existing) {\n    writeFileSync(join(ctx.rootDir, 'wrangler.jsonc'), wranglerConfig(ctx.rootDir));\n    console.log('  • wrote wrangler.jsonc (yours now — edit freely, the build will not touch it again)');\n  }\n\n  console.log(`  • assembled ${join('dist', ASSETS_DIR)} for Workers Assets`);\n}\n"]}

package/dist/deploy/cloudflare/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/deploy/cloudflare/runtime.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA2EpD;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,aA4DrB,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/deploy/cloudflare/runtime.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAuDpD;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,aAgDrB,CAAC"}

package/dist/deploy/cloudflare/runtime.js

@@ -1,4 +1,4 @@
-import { prerenderedRelPath } from '../../server/prerendered.js';
+import { createPageCache, prerenderedRelPath, toPrerenderedPage } from '../../server/prerendered.js';
 /**
  * Where `finalize` puts the prerendered pages inside the assets directory.
  *
@@ -41,27 +41,8 @@ async function assetResponse(c, path, headers) {
 function serveAsset(asset) {
     return new Response(asset.body, asset);
 }
-/**
- * A weak `ETag` for a body the asset store gave us no validator for.
- *
- * Web Crypto rather than `node:crypto`: this module is compiled for `workerd`, and the digest is the
- * one thing here that has a platform-neutral form.
- */
-async function weakEtag(body) {
-    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(body));
-    const bytes = String.fromCharCode(...new Uint8Array(digest));
-    const base64url = btoa(bytes).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-    return `W/"${base64url.slice(0, 22)}"`;
-}
-/**
- * Prerendered pages, keyed by the path that produced them.
- *
- * Per isolate rather than per process, and bounded for the same reason the Node cache is: a site with
- * thousands of prerendered pages should keep a working set, not the whole build. Only *hits* are
- * cached, so nobody can mint entries by requesting paths that do not exist.
- */
-const pageCache = new Map();
-const MAX_CACHED_PAGES = 128;
+/** Prerendered pages, keyed by the path that produced them. Per isolate rather than per process. */
+const pageCache = createPageCache();
 /**
  * Cloudflare Workers: the host owns the process, so there is nothing to listen on; the CDN owns the
  * assets, so there is nothing to serve from disk; and there is no filesystem, so `.env` files and a
@@ -72,7 +53,7 @@ const MAX_CACHED_PAGES = 128;
 export const runtime = {
     serveApp(app) {
         // What Workers looks for on the default export. `app.fetch` already takes `(request, env, ctx)`,
-        // which is why bindings arrive as `c.env` — and so why `getContext().env` sees them.
+        // which is why bindings arrive as `c.env` — and so why `getRequestContext().env` sees them.
         return { fetch: app.fetch };
     },
     mountStaticAssets(app) {
@@ -105,25 +86,14 @@ export const runtime = {
         const asset = await assetResponse(c, `${SSG_PREFIX}/${relPath}`);
         if (!asset || asset.status !== 200)
             return null;
-        const body = await asset.text();
-        const page = {
-            body,
-            contentLength: String(new TextEncoder().encode(body).byteLength),
-            // The store's own validator where it has one — it already describes these exact bytes. Weakened
-            // because compression downstream would make a strong one wrong for the compressed encoding.
-            etag: asset.headers.get('etag')?.replace(/^(?!W\/)/, 'W/') ?? (await weakEtag(body)),
-        };
+        // The store's own validator where it has one — it already describes these exact bytes.
+        const page = await toPrerenderedPage(new Uint8Array(await asset.arrayBuffer()), asset.headers.get('etag'));
         pageCache.set(key, page);
-        if (pageCache.size > MAX_CACHED_PAGES)
-            pageCache.delete(pageCache.keys().next().value);
         return page;
     },
-    // Cloudflare compresses on the way out at the edge, and `workerd` has no `node:zlib` stream to do
-    // it with anyway. Doing it here would only spend CPU on bytes the edge is about to re-encode.
-    compress: null,
     loadEnv() {
         // Nothing to load: a Worker has no filesystem and no `.env`. Secrets and bindings arrive per
-        // request as `c.env`, which `getContext().env` already merges — see `runtime/context.ts`.
+        // request as `c.env`, which `getRequestContext().env` already merges — see `runtime/context.ts`.
     },
 };
 //# sourceMappingURL=runtime.js.map

package/dist/deploy/cloudflare/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/deploy/cloudflare/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,6BAA6B,CAAC;AAGvF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,QAAQ,CAAC;AAO5B,SAAS,aAAa,CAAC,CAAU;IAC/B,MAAM,OAAO,GAAI,CAAC,CAAC,GAA8C,EAAE,MAAM,CAAC;IAC1E,OAAO,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAAC,CAAU,EAAE,IAAY,EAAE,OAAiB;IACtE,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,mGAAmG;IACnG,oCAAoC;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAe;IACjC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;AACrD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB;IACpC,QAAQ,CAAC,GAAS;QAChB,iGAAiG;QACjG,qFAAqF;QACrF,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,iBAAiB,CAAC,GAAS;QACzB,8FAA8F;QAC9F,6FAA6F;QAC7F,4DAA4D;QAC5D,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACtD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,GAAS;QAC3B,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC9C,+FAA+F;YAC/F,4FAA4F;YAC5F,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,CAAU,EAAE,OAAO;QACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAoB;YAC5B,IAAI;YACJ,aAAa,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;YAChE,gGAAgG;YAChG,4FAA4F;YAC5F,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;SACrF,CAAC;QAEF,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,SAAS,CAAC,IAAI,GAAG,gBAAgB;YAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kGAAkG;IAClG,8FAA8F;IAC9F,QAAQ,EAAE,IAAI;IAEd,OAAO;QACL,6FAA6F;QAC7F,0FAA0F;IAC5F,CAAC;CACF,CAAC","sourcesContent":["import type { Context, Hono } from 'hono';\nimport { prerenderedRelPath, type PrerenderedPage } from '../../server/prerendered.js';\nimport type { DeployRuntime } from '../contract.js';\n\n/**\n * Where `finalize` puts the prerendered pages inside the assets directory.\n *\n * A prefix of its own, rather than the pages' real URLs, is what keeps every page URL reaching the\n * worker: one URL answers with a document or a flight payload depending on `Accept`, and a CDN keyed\n * on the path alone cannot make that choice. Assets miss, the worker runs, the worker negotiates.\n *\n * The bytes are public either way — they are a public page — but they are also reachable under this\n * path, so `finalize` writes a `_headers` rule marking the tree `noindex` rather than leaving a\n * crawler to find the same page twice.\n */\nconst SSG_PREFIX = '/__ssg';\n\n/** The Workers Assets binding, as much of it as this file uses. */\ninterface AssetsBinding {\n  fetch(request: Request): Promise<Response>;\n}\n\nfunction assetsBinding(c: Context): AssetsBinding | null {\n  const binding = (c.env as { ASSETS?: AssetsBinding } | undefined)?.ASSETS;\n  return binding && typeof binding.fetch === 'function' ? binding : null;\n}\n\n/**\n * Asks the assets binding for one path, or `null` when there is no binding at all — so a caller can\n * tell \"this deployment serves its assets some other way\" from \"that file is not there\".\n *\n * `headers` is passed on only where the *client's* conditional and range requests should be answered\n * by the store: forwarding an `If-None-Match` while fetching a page to serve would come back 304 with\n * no body, which is a useless answer to \"give me this page\".\n */\nasync function assetResponse(c: Context, path: string, headers?: Headers): Promise<Response | null> {\n  const binding = assetsBinding(c);\n  if (!binding) return null;\n  // Resolved against the request so the asset request carries this deployment's own origin; only the\n  // path is ever used to look one up.\n  const url = new URL(path, c.req.url);\n  return binding.fetch(new Request(url, { method: 'GET', headers }));\n}\n\n/**\n * Hands an asset response back as the app's own.\n *\n * Rebuilt rather than returned as-is because a `Response` that came from `fetch` has immutable\n * headers, and the framework's outermost middleware sets its baseline security headers on the way out.\n */\nfunction serveAsset(asset: Response): Response {\n  return new Response(asset.body, asset);\n}\n\n/**\n * A weak `ETag` for a body the asset store gave us no validator for.\n *\n * Web Crypto rather than `node:crypto`: this module is compiled for `workerd`, and the digest is the\n * one thing here that has a platform-neutral form.\n */\nasync function weakEtag(body: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(body));\n  const bytes = String.fromCharCode(...new Uint8Array(digest));\n  const base64url = btoa(bytes).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  return `W/\"${base64url.slice(0, 22)}\"`;\n}\n\n/**\n * Prerendered pages, keyed by the path that produced them.\n *\n * Per isolate rather than per process, and bounded for the same reason the Node cache is: a site with\n * thousands of prerendered pages should keep a working set, not the whole build. Only *hits* are\n * cached, so nobody can mint entries by requesting paths that do not exist.\n */\nconst pageCache = new Map<string, PrerenderedPage>();\nconst MAX_CACHED_PAGES = 128;\n\n/**\n * Cloudflare Workers: the host owns the process, so there is nothing to listen on; the CDN owns the\n * assets, so there is nothing to serve from disk; and there is no filesystem, so `.env` files and a\n * streaming gzip are both out.\n *\n * What is left is the assets binding, which every read here goes through.\n */\nexport const runtime: DeployRuntime = {\n  serveApp(app: Hono): unknown {\n    // What Workers looks for on the default export. `app.fetch` already takes `(request, env, ctx)`,\n    // which is why bindings arrive as `c.env` — and so why `getContext().env` sees them.\n    return { fetch: app.fetch };\n  },\n\n  mountStaticAssets(app: Hono): void {\n    // Normally dead: with the scaffolded config the CDN answers `/_static/*` before the worker is\n    // invoked at all. It exists so the deployment is still correct — if slower — under an assets\n    // configuration that routes everything to the worker first.\n    app.on(['GET', 'HEAD'], '/_static/*', async (c, next) => {\n      const asset = await assetResponse(c, c.req.path, c.req.raw.headers);\n      return asset && asset.status !== 404 ? serveAsset(asset) : next();\n    });\n  },\n\n  mountPublicFallback(app: Hono): void {\n    app.on(['GET', 'HEAD'], '/*', async (c, next) => {\n      // The prerender tree lives in the same store; it is reachable directly from the CDN by design,\n      // but the app itself only ever serves it through `readPrerendered`, negotiated on `Accept`.\n      if (c.req.path.startsWith(`${SSG_PREFIX}/`)) return next();\n      const asset = await assetResponse(c, c.req.path, c.req.raw.headers);\n      return asset && asset.status !== 404 ? serveAsset(asset) : next();\n    });\n  },\n\n  async readPrerendered(c: Context, variant): Promise<PrerenderedPage | null> {\n    const relPath = prerenderedRelPath(c.req.path, variant);\n    if (relPath === null) return null;\n\n    const key = `${variant}\\0${relPath}`;\n    const cached = pageCache.get(key);\n    if (cached) return cached;\n\n    const asset = await assetResponse(c, `${SSG_PREFIX}/${relPath}`);\n    if (!asset || asset.status !== 200) return null;\n\n    const body = await asset.text();\n    const page: PrerenderedPage = {\n      body,\n      contentLength: String(new TextEncoder().encode(body).byteLength),\n      // The store's own validator where it has one — it already describes these exact bytes. Weakened\n      // because compression downstream would make a strong one wrong for the compressed encoding.\n      etag: asset.headers.get('etag')?.replace(/^(?!W\\/)/, 'W/') ?? (await weakEtag(body)),\n    };\n\n    pageCache.set(key, page);\n    if (pageCache.size > MAX_CACHED_PAGES) pageCache.delete(pageCache.keys().next().value!);\n    return page;\n  },\n\n  // Cloudflare compresses on the way out at the edge, and `workerd` has no `node:zlib` stream to do\n  // it with anyway. Doing it here would only spend CPU on bytes the edge is about to re-encode.\n  compress: null,\n\n  loadEnv(): void {\n    // Nothing to load: a Worker has no filesystem and no `.env`. Secrets and bindings arrive per\n    // request as `c.env`, which `getContext().env` already merges — see `runtime/context.ts`.\n  },\n};\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/deploy/cloudflare/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAwB,MAAM,6BAA6B,CAAC;AAG3H;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG,QAAQ,CAAC;AAO5B,SAAS,aAAa,CAAC,CAAU;IAC/B,MAAM,OAAO,GAAI,CAAC,CAAC,GAA8C,EAAE,MAAM,CAAC;IAC1E,OAAO,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAAC,CAAU,EAAE,IAAY,EAAE,OAAiB;IACtE,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,mGAAmG;IACnG,oCAAoC;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAe;IACjC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,oGAAoG;AACpG,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB;IACpC,QAAQ,CAAC,GAAS;QAChB,iGAAiG;QACjG,4FAA4F;QAC5F,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,iBAAiB,CAAC,GAAS;QACzB,8FAA8F;QAC9F,6FAA6F;QAC7F,4DAA4D;QAC5D,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACtD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,GAAS;QAC3B,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC9C,+FAA+F;YAC/F,4FAA4F;YAC5F,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,CAAU,EAAE,OAAO;QACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEhD,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3G,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,6FAA6F;QAC7F,iGAAiG;IACnG,CAAC;CACF,CAAC","sourcesContent":["import type { Context, Hono } from 'hono';\nimport { createPageCache, prerenderedRelPath, toPrerenderedPage, type PrerenderedPage } from '../../server/prerendered.js';\nimport type { DeployRuntime } from '../contract.js';\n\n/**\n * Where `finalize` puts the prerendered pages inside the assets directory.\n *\n * A prefix of its own, rather than the pages' real URLs, is what keeps every page URL reaching the\n * worker: one URL answers with a document or a flight payload depending on `Accept`, and a CDN keyed\n * on the path alone cannot make that choice. Assets miss, the worker runs, the worker negotiates.\n *\n * The bytes are public either way — they are a public page — but they are also reachable under this\n * path, so `finalize` writes a `_headers` rule marking the tree `noindex` rather than leaving a\n * crawler to find the same page twice.\n */\nconst SSG_PREFIX = '/__ssg';\n\n/** The Workers Assets binding, as much of it as this file uses. */\ninterface AssetsBinding {\n  fetch(request: Request): Promise<Response>;\n}\n\nfunction assetsBinding(c: Context): AssetsBinding | null {\n  const binding = (c.env as { ASSETS?: AssetsBinding } | undefined)?.ASSETS;\n  return binding && typeof binding.fetch === 'function' ? binding : null;\n}\n\n/**\n * Asks the assets binding for one path, or `null` when there is no binding at all — so a caller can\n * tell \"this deployment serves its assets some other way\" from \"that file is not there\".\n *\n * `headers` is passed on only where the *client's* conditional and range requests should be answered\n * by the store: forwarding an `If-None-Match` while fetching a page to serve would come back 304 with\n * no body, which is a useless answer to \"give me this page\".\n */\nasync function assetResponse(c: Context, path: string, headers?: Headers): Promise<Response | null> {\n  const binding = assetsBinding(c);\n  if (!binding) return null;\n  // Resolved against the request so the asset request carries this deployment's own origin; only the\n  // path is ever used to look one up.\n  const url = new URL(path, c.req.url);\n  return binding.fetch(new Request(url, { method: 'GET', headers }));\n}\n\n/**\n * Hands an asset response back as the app's own.\n *\n * Rebuilt rather than returned as-is because a `Response` that came from `fetch` has immutable\n * headers, and the framework's outermost middleware sets its baseline security headers on the way out.\n */\nfunction serveAsset(asset: Response): Response {\n  return new Response(asset.body, asset);\n}\n\n/** Prerendered pages, keyed by the path that produced them. Per isolate rather than per process. */\nconst pageCache = createPageCache();\n\n/**\n * Cloudflare Workers: the host owns the process, so there is nothing to listen on; the CDN owns the\n * assets, so there is nothing to serve from disk; and there is no filesystem, so `.env` files and a\n * streaming gzip are both out.\n *\n * What is left is the assets binding, which every read here goes through.\n */\nexport const runtime: DeployRuntime = {\n  serveApp(app: Hono): unknown {\n    // What Workers looks for on the default export. `app.fetch` already takes `(request, env, ctx)`,\n    // which is why bindings arrive as `c.env` — and so why `getRequestContext().env` sees them.\n    return { fetch: app.fetch };\n  },\n\n  mountStaticAssets(app: Hono): void {\n    // Normally dead: with the scaffolded config the CDN answers `/_static/*` before the worker is\n    // invoked at all. It exists so the deployment is still correct — if slower — under an assets\n    // configuration that routes everything to the worker first.\n    app.on(['GET', 'HEAD'], '/_static/*', async (c, next) => {\n      const asset = await assetResponse(c, c.req.path, c.req.raw.headers);\n      return asset && asset.status !== 404 ? serveAsset(asset) : next();\n    });\n  },\n\n  mountPublicFallback(app: Hono): void {\n    app.on(['GET', 'HEAD'], '/*', async (c, next) => {\n      // The prerender tree lives in the same store; it is reachable directly from the CDN by design,\n      // but the app itself only ever serves it through `readPrerendered`, negotiated on `Accept`.\n      if (c.req.path.startsWith(`${SSG_PREFIX}/`)) return next();\n      const asset = await assetResponse(c, c.req.path, c.req.raw.headers);\n      return asset && asset.status !== 404 ? serveAsset(asset) : next();\n    });\n  },\n\n  async readPrerendered(c: Context, variant): Promise<PrerenderedPage | null> {\n    const relPath = prerenderedRelPath(c.req.path, variant);\n    if (relPath === null) return null;\n\n    const key = `${variant}\\0${relPath}`;\n    const cached = pageCache.get(key);\n    if (cached) return cached;\n\n    const asset = await assetResponse(c, `${SSG_PREFIX}/${relPath}`);\n    if (!asset || asset.status !== 200) return null;\n\n    // The store's own validator where it has one — it already describes these exact bytes.\n    const page = await toPrerenderedPage(new Uint8Array(await asset.arrayBuffer()), asset.headers.get('etag'));\n    pageCache.set(key, page);\n    return page;\n  },\n\n  loadEnv(): void {\n    // Nothing to load: a Worker has no filesystem and no `.env`. Secrets and bindings arrive per\n    // request as `c.env`, which `getRequestContext().env` already merges — see `runtime/context.ts`.\n  },\n};\n"]}

package/dist/deploy/contract.d.ts

@@ -1,13 +1,26 @@
-import type { Context, Hono, MiddlewareHandler } from 'hono';
+import type { Context, Hono } from 'hono';
 import type { PrerenderVariant, PrerenderedPage } from '../server/prerendered.js';
 /**
- * A hosting platform rshono can build for. Selected with {@link RSHonoConfig.deploy}, the
+ * A hosting platform `rshono build` targets. Selected with `deploy` in `rshono.config.ts`, the
  * `--deploy` flag or the `RSHONO_DEPLOY` env var, and resolved to a preset by `deploy/presets.ts`.
  *
+ * - `'node'` (the default) — rshono binds the port itself and you run the build with `rshono start`.
+ *   Covers a VPS, a container, a PaaS, and — through `node:` compatibility — Bun and Deno.
+ * - `'cloudflare'` — a Worker; the entry exports `{ fetch }`.
+ * - `'vercel'` — a Vercel function, plus the on-disk layout and config file streaming needs there.
+ * - `'aws-lambda'` — a streaming Lambda handler.
+ *
+ * One entry per *handoff* — who opens the socket, and what shape a request arrives in — because that
+ * is the part an app cannot arrange for itself. There is deliberately no target whose only content
+ * would be "run the Node build", which is why Bun and Deno have none: importing the `node` bundle
+ * under those runtimes is the whole of what one would say.
+ *
  * `rshono dev` always runs the `node` server whatever this says — the dev server owns the process,
  * watches both compilers and fronts them on one port, none of which a hosting platform provides.
+ *
+ * @see {@link https://www.rshono.com/docs/deployment#the-targets | Docs — the targets}
  */
-export type DeployTarget = 'node' | 'cloudflare' | 'bun' | 'deno' | 'vercel' | 'netlify' | 'aws-lambda';
+export type DeployTarget = 'node' | 'cloudflare' | 'vercel' | 'aws-lambda';
 /**
  * Everything the app server needs from the platform it is running on.
  *
@@ -16,18 +29,18 @@ export type DeployTarget = 'node' | 'cloudflare' | 'bun' | 'deno' | 'vercel' | '
  * ever in the bundle. `runtime/entry.rsc.tsx` is written against this interface and nothing else —
  * it is the whole of what "which platform is this" means at request time.
  *
- * The split is deliberately by *capability*, not by runtime: a platform with a filesystem reuses the
- * implementations in `server/` (`static.ts`, `compress.ts`, `ssg.ts`) and only differs in how the
- * finished app is handed over.
+ * The members are the capabilities that genuinely differ between a host with a disk and one without:
+ * who opens the socket, who serves the assets, where a prerendered page is read from, and whether
+ * there is a `.env` to load at all.
  */
 export interface DeployRuntime {
     /**
      * Hands the assembled app to the platform, and returns whatever the entry module should
      * `export default` there.
      *
-     * The two shapes hosting takes, in one call: where rshono owns the process (node, bun, deno) this
-     * binds a port and returns nothing; where the host owns it, it returns the export the platform
-     * looks for — `{ fetch }` on Workers, a handler function on Vercel/Netlify/Lambda.
+     * The two shapes hosting takes, in one call: where rshono owns the process this binds a port and
+     * returns nothing; where the host owns it, it returns the export the platform looks for —
+     * `{ fetch }` on Workers, a handler function on Vercel and Lambda.
      */
     serveApp(app: Hono): unknown;
     /**
@@ -52,13 +65,6 @@ export interface DeployRuntime {
      * (see `prerenderedRelPath`).
      */
     readPrerendered(c: Context, variant: PrerenderVariant): Promise<PrerenderedPage | null>;
-    /**
-     * Response compression, or `null` where the platform already compresses on the way out (and
-     * doing it twice would only cost CPU) or cannot stream a compressor at all.
-     *
-     * Whether it is *used* is still the app's `compress` setting; this is only whether it is available.
-     */
-    compress: MiddlewareHandler | null;
     /** Loads `.env` files, where the platform has a filesystem to read them from. Env is bindings elsewhere. */
     loadEnv(): void;
 }

package/dist/deploy/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/deploy/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,YAAY,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAExG;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,mBAAmB,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACrC;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACxF;;;;;OAKG;IACH,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,4GAA4G;IAC5G,OAAO,IAAI,IAAI,CAAC;CACjB"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/deploy/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAElF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,mBAAmB,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACrC;;;;;;;;OAQG;IACH,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACxF,4GAA4G;IAC5G,OAAO,IAAI,IAAI,CAAC;CACjB"}

package/dist/deploy/contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/deploy/contract.ts"],"names":[],"mappings":"","sourcesContent":["import type { Context, Hono, MiddlewareHandler } from 'hono';\nimport type { PrerenderVariant, PrerenderedPage } from '../server/prerendered.js';\n\n/**\n * A hosting platform rshono can build for. Selected with {@link RSHonoConfig.deploy}, the\n * `--deploy` flag or the `RSHONO_DEPLOY` env var, and resolved to a preset by `deploy/presets.ts`.\n *\n * `rshono dev` always runs the `node` server whatever this says — the dev server owns the process,\n * watches both compilers and fronts them on one port, none of which a hosting platform provides.\n */\nexport type DeployTarget = 'node' | 'cloudflare' | 'bun' | 'deno' | 'vercel' | 'netlify' | 'aws-lambda';\n\n/**\n * Everything the app server needs from the platform it is running on.\n *\n * One preset implements this per target, and the `@rshono/deploy` alias resolves to exactly that\n * module at build time (see `builder/rspack-config.ts`), so only the selected platform's code is\n * ever in the bundle. `runtime/entry.rsc.tsx` is written against this interface and nothing else —\n * it is the whole of what \"which platform is this\" means at request time.\n *\n * The split is deliberately by *capability*, not by runtime: a platform with a filesystem reuses the\n * implementations in `server/` (`static.ts`, `compress.ts`, `ssg.ts`) and only differs in how the\n * finished app is handed over.\n */\nexport interface DeployRuntime {\n  /**\n   * Hands the assembled app to the platform, and returns whatever the entry module should\n   * `export default` there.\n   *\n   * The two shapes hosting takes, in one call: where rshono owns the process (node, bun, deno) this\n   * binds a port and returns nothing; where the host owns it, it returns the export the platform\n   * looks for — `{ fetch }` on Workers, a handler function on Vercel/Netlify/Lambda.\n   */\n  serveApp(app: Hono): unknown;\n  /**\n   * Mounts the hashed client bundle at `/_static`. A no-op where the platform's own CDN serves it\n   * before a request ever reaches the app.\n   *\n   * Called *before* the app's routes, so the bundle is never shadowed by one.\n   */\n  mountStaticAssets(app: Hono): void;\n  /**\n   * Mounts the `public/` fallback at the web root — files served verbatim, and only for paths no\n   * route claimed. Called *after* every route for exactly that reason.\n   */\n  mountPublicFallback(app: Hono): void;\n  /**\n   * Reads the page prerendered for `c.req.path` by `rshono build`, or `null` when there is none (in\n   * which case the route renders per request, which is always a valid answer).\n   *\n   * Takes the whole {@link Context} rather than just the path because on a platform with no\n   * filesystem the store *is* a request-scoped binding — `c.env.ASSETS` on Workers. The path is\n   * untrusted either way, so an implementation has to treat traversal as a miss, not a lookup\n   * (see `prerenderedRelPath`).\n   */\n  readPrerendered(c: Context, variant: PrerenderVariant): Promise<PrerenderedPage | null>;\n  /**\n   * Response compression, or `null` where the platform already compresses on the way out (and\n   * doing it twice would only cost CPU) or cannot stream a compressor at all.\n   *\n   * Whether it is *used* is still the app's `compress` setting; this is only whether it is available.\n   */\n  compress: MiddlewareHandler | null;\n  /** Loads `.env` files, where the platform has a filesystem to read them from. Env is bindings elsewhere. */\n  loadEnv(): void;\n}\n"]}
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/deploy/contract.ts"],"names":[],"mappings":"","sourcesContent":["import type { Context, Hono } from 'hono';\nimport type { PrerenderVariant, PrerenderedPage } from '../server/prerendered.js';\n\n/**\n * A hosting platform `rshono build` targets. Selected with `deploy` in `rshono.config.ts`, the\n * `--deploy` flag or the `RSHONO_DEPLOY` env var, and resolved to a preset by `deploy/presets.ts`.\n *\n * - `'node'` (the default) — rshono binds the port itself and you run the build with `rshono start`.\n *   Covers a VPS, a container, a PaaS, and — through `node:` compatibility — Bun and Deno.\n * - `'cloudflare'` — a Worker; the entry exports `{ fetch }`.\n * - `'vercel'` — a Vercel function, plus the on-disk layout and config file streaming needs there.\n * - `'aws-lambda'` — a streaming Lambda handler.\n *\n * One entry per *handoff* — who opens the socket, and what shape a request arrives in — because that\n * is the part an app cannot arrange for itself. There is deliberately no target whose only content\n * would be \"run the Node build\", which is why Bun and Deno have none: importing the `node` bundle\n * under those runtimes is the whole of what one would say.\n *\n * `rshono dev` always runs the `node` server whatever this says — the dev server owns the process,\n * watches both compilers and fronts them on one port, none of which a hosting platform provides.\n *\n * @see {@link https://www.rshono.com/docs/deployment#the-targets | Docs — the targets}\n */\nexport type DeployTarget = 'node' | 'cloudflare' | 'vercel' | 'aws-lambda';\n\n/**\n * Everything the app server needs from the platform it is running on.\n *\n * One preset implements this per target, and the `@rshono/deploy` alias resolves to exactly that\n * module at build time (see `builder/rspack-config.ts`), so only the selected platform's code is\n * ever in the bundle. `runtime/entry.rsc.tsx` is written against this interface and nothing else —\n * it is the whole of what \"which platform is this\" means at request time.\n *\n * The members are the capabilities that genuinely differ between a host with a disk and one without:\n * who opens the socket, who serves the assets, where a prerendered page is read from, and whether\n * there is a `.env` to load at all.\n */\nexport interface DeployRuntime {\n  /**\n   * Hands the assembled app to the platform, and returns whatever the entry module should\n   * `export default` there.\n   *\n   * The two shapes hosting takes, in one call: where rshono owns the process this binds a port and\n   * returns nothing; where the host owns it, it returns the export the platform looks for —\n   * `{ fetch }` on Workers, a handler function on Vercel and Lambda.\n   */\n  serveApp(app: Hono): unknown;\n  /**\n   * Mounts the hashed client bundle at `/_static`. A no-op where the platform's own CDN serves it\n   * before a request ever reaches the app.\n   *\n   * Called *before* the app's routes, so the bundle is never shadowed by one.\n   */\n  mountStaticAssets(app: Hono): void;\n  /**\n   * Mounts the `public/` fallback at the web root — files served verbatim, and only for paths no\n   * route claimed. Called *after* every route for exactly that reason.\n   */\n  mountPublicFallback(app: Hono): void;\n  /**\n   * Reads the page prerendered for `c.req.path` by `rshono build`, or `null` when there is none (in\n   * which case the route renders per request, which is always a valid answer).\n   *\n   * Takes the whole {@link Context} rather than just the path because on a platform with no\n   * filesystem the store *is* a request-scoped binding — `c.env.ASSETS` on Workers. The path is\n   * untrusted either way, so an implementation has to treat traversal as a miss, not a lookup\n   * (see `prerenderedRelPath`).\n   */\n  readPrerendered(c: Context, variant: PrerenderVariant): Promise<PrerenderedPage | null>;\n  /** Loads `.env` files, where the platform has a filesystem to read them from. Env is bindings elsewhere. */\n  loadEnv(): void;\n}\n"]}

package/dist/deploy/filesystem.d.ts

@@ -2,7 +2,7 @@ import type { DeployRuntime } from './contract.js';
 /**
  * Everything a deploy target with a real filesystem does the same way.
  *
- * Node, Bun, Deno and the serverless runtimes that unpack a bundle onto disk (Vercel, Netlify, Lambda)
+ * Node and the serverless runtimes that unpack a bundle onto a read-only disk (Vercel, AWS Lambda)
  * differ only in how the finished app is handed over — so each of those presets is this object plus
  * its own {@link DeployRuntime.serveApp}, and the implementations live once, in `server/`.
  */

package/dist/deploy/filesystem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/deploy/filesystem.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAqBnD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAmB7D,CAAC"}
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/deploy/filesystem.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoBnD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAiB7D,CAAC"}

package/dist/deploy/filesystem.js

@@ -1,19 +1,17 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
-import { compress } from '../server/compress.js';
 import { loadEnvFiles } from '../server/load-env.js';
 import { readPrerendered } from '../server/ssg.js';
 import { createPublicFallback, createStaticAssetsApp } from '../server/static.js';
 const isDev = __RSHONO_CONFIG__.isDev;
 /**
- * The project root, derived from where the bundle itself ended up: `rshono build` writes the server
- * bundle to `<root>/dist/server/main.mjs`, and this module is bundled into it, which makes
- * `import.meta.dirname` `<root>/dist/server` at runtime.
+ * The project root, derived from where the bundle ended up: this module is compiled into
+ * `<root>/dist/server/main.mjs`, so `import.meta.dirname` is `<root>/dist/server` at runtime.
  *
- * Derived rather than baked in at build time on purpose: an absolute build-time path would tie the
- * output to the machine that produced it, and building in CI to run somewhere else is the normal case.
- * A preset that relocates the bundle keeps `dist/server/main.mjs` intact inside its own layout for
- * exactly this reason.
+ * Derived rather than baked in at build time, because an absolute build-time path would tie the
+ * output to the machine that produced it — and building in CI to run somewhere else is the normal
+ * case. A preset that relocates the bundle keeps `dist/server/main.mjs` intact inside its own layout
+ * for exactly this reason.
  */
 const rootDir = join(import.meta.dirname, '..', '..');
 const staticDir = join(rootDir, 'dist', 'static');
@@ -23,7 +21,7 @@ const publicDir = isDev ? join(rootDir, 'public') : join(rootDir, 'dist', 'publi
 /**
  * Everything a deploy target with a real filesystem does the same way.
  *
- * Node, Bun, Deno and the serverless runtimes that unpack a bundle onto disk (Vercel, Netlify, Lambda)
+ * Node and the serverless runtimes that unpack a bundle onto a read-only disk (Vercel, AWS Lambda)
  * differ only in how the finished app is handed over — so each of those presets is this object plus
  * its own {@link DeployRuntime.serveApp}, and the implementations live once, in `server/`.
  */
@@ -39,7 +37,6 @@ export const fileSystemRuntime = {
     readPrerendered(c, variant) {
         return readPrerendered(ssgDir, c.req.path, variant);
     },
-    compress: compress(),
     loadEnv() {
         loadEnvFiles(rootDir);
     },