@solidjs/start 2.0.0 → 2.0.2

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @solidjs/start
 
+## 2.0.2
+
+### Patch Changes
+
+- e21fadf: fix potentially incomplete first chunk for chunk readers
+- d78288f: Declare an explicit `Content-Type: text/plain; charset=utf-8` on seroval-stream server function responses (success and error paths) so intermediaries cannot content-sniff a type onto them
+
+## 2.0.1
+
+### Patch Changes
+
+- fd5e2ae: Delegate `vite preview` to Nitro when its preview plugin is active, including for static builds that intentionally have no server entry.
+
 ## 2.0.0
 
 ### Highlights
@@ -100,6 +113,7 @@ SolidStart v2 requires Node.js 24 or newer and Vite 8. Most SolidStart v1 applic
   Route files are imported through an id carrying the picked exports in the query (`routes/api.ts?pick=GET`), which left the id ending in the export name. Plugins whose filter is anchored on the file extension (`/\.[cm]?[jt]sx?$/`, the default for `unplugin-auto-import`, `unplugin-macros` and others) silently skipped every route file. The id now ends with a `lang.<ext>` marker, the same convention Vue SFCs use for `?vue&type=script&lang.ts`. Chunk filenames are unchanged.
 
 - d8f1ea8: Apply the configured `nonce` to the two script tags that were still missing it, so a strict `script-src` CSP no longer needs `unsafe-inline`:
+
   - The client-side redirect that streaming mode emits after the shell has already flushed (`<script>window.location=...</script>`) now carries the nonce.
   - The SPA entry script tag now carries the nonce, matching the SSR entry script.
 
@@ -279,6 +293,7 @@ SolidStart v2 requires Node.js 24 or newer and Vite 8. Most SolidStart v1 applic
 - 8256190: Rework `@solidjs/start/env`
 - 6cbba24: Fix multiple Set-Cookie headers being lost on redirect responses
 - d4cc548: ## Bump Seroval
+
   - version `1.4.1`
 
 - dd40610: Handle base url in api routes

package/dist/config/dev-server.js

@@ -17,6 +17,10 @@ export function devServer(serverEntryPath) {
         {
             name: "solid-start-dev-server",
             configurePreviewServer(server) {
+                // Nitro's preview hook handles both server and static builds.
+                // Static builds have no server entry, so detect the active plugin instead.
+                if (server.config.plugins.some(plugin => plugin.name === "nitro:preview"))
+                    return;
                 const serverEntryUrl = pathToFileURL(resolvePreviewServerEntry(server.config.root)).href;
                 return () => {
                     server.middlewares.use(async (req, res) => {

package/dist/fns/handler.js

@@ -122,6 +122,8 @@ export async function handleServerFunction(h3Event) {
             h3Event.res.headers.set("content-type", "text/javascript");
             return serializeToJSStream(instance, result);
         }
+        // explicit type keeps intermediaries (e.g. Go proxies) from sniffing one onto the stream
+        h3Event.res.headers.set("content-type", "text/plain; charset=utf-8");
         return serializeToJSONStream(result);
     }
     catch (x) {
@@ -167,6 +169,7 @@ export async function handleServerFunction(h3Event) {
                 h3Event.res.headers.set("content-type", "text/javascript");
                 return serializeToJSStream(instance, x);
             }
+            h3Event.res.headers.set("content-type", "text/plain; charset=utf-8");
             return serializeToJSONStream(x);
         }
         return x;

package/dist/fns/serialization.js

@@ -135,10 +135,14 @@ export class SerovalChunkReader {
         }
     }
     async next() {
-        // Check if the buffer is empty
-        if (this.buffer.length === 0) {
+        // Check if the buffer is empty or incomplete
+        if (this.buffer.length < 12) {
             // if we are already done...
             if (this.done) {
+                // incomplete stream
+                if (this.buffer.length !== 0) {
+                    throw new Error("Malformed server function stream.");
+                }
                 return {
                     done: true,
                     value: undefined,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidjs/start",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/solidjs/solid-start.git",