void 0.10.11 → 0.10.12

package/dist/cli/cli.mjs

@@ -2078,7 +2078,7 @@ else if (command === "deploy") {
 		log.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../deploy-DT8wsPZd.mjs").then((n) => n.t).then(({ runDeploy }) => {
+	import("../deploy-u7Rv9q_q.mjs").then((n) => n.t).then(({ runDeploy }) => {
 		runDeploy(root, {
 			projectSlug: deployArgs.projectSlug,
 			dir: deployArgs.dir,
@@ -2096,10 +2096,10 @@ else if (command === "deploy") {
 else if (command === "project") runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (root, parsed) => import("../project-cmd-D_w-4w5B.mjs").then(({ runProjectCommand }) => runProjectCommand(root, parsed)));
 else if (command === "secret") runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (root, parsed) => import("../secret-Dt32J6RI.mjs").then(({ runSecretCommand }) => runSecretCommand(root, parsed)));
 else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (root, parsed) => import("../domain-DiaNQbrl.mjs").then(({ runDomainCommand }) => runDomainCommand(root, parsed)));
-else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-PZBsLSGb.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
-else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-AAHU02L6.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
-else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-oup1xBN0.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BdNaOVNa.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-DOiJMRt2.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
+else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CZy5MorI.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
+else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-o_w-8yI8.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-DKcGUNsj.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
 else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-Bujrv5q-.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
@@ -2110,7 +2110,7 @@ else if (command === "prepare") {
 		log.error(err instanceof Error ? err.message : String(err));
 		process.exit(1);
 	}
-	import("../prepare-DOBTY0o4.mjs").then(({ runPrepareCommand }) => {
+	import("../prepare-BoKHgMNx.mjs").then(({ runPrepareCommand }) => {
 		runPrepareCommand(root, prepareArgs).catch((err) => {
 			log.error(err.message ?? err);
 			process.exit(1);
@@ -2118,7 +2118,7 @@ else if (command === "prepare") {
 	});
 } else if (command === "init") {
 	const root = process.cwd();
-	import("../init-Dl2PKuQn.mjs").then(({ runInitCommand, parseInitArgs }) => {
+	import("../init-3rgHKBVi.mjs").then(({ runInitCommand, parseInitArgs }) => {
 		let initArgs;
 		try {
 			initArgs = parseInitArgs(args.slice(1));
@@ -2217,12 +2217,12 @@ else if (command === "-v" || command === "--version") {
 		const root = process.cwd();
 		switch (cmd) {
 			case "init": {
-				const { runInitCommand, parseInitArgs } = await import("../init-Dl2PKuQn.mjs");
+				const { runInitCommand, parseInitArgs } = await import("../init-3rgHKBVi.mjs");
 				await runInitCommand(root, parseInitArgs([]));
 				return;
 			}
 			case "deploy": {
-				const { runDeploy } = await import("../deploy-DT8wsPZd.mjs").then((n) => n.t);
+				const { runDeploy } = await import("../deploy-u7Rv9q_q.mjs").then((n) => n.t);
 				await runDeploy(root);
 				return;
 			}
@@ -2235,13 +2235,13 @@ else if (command === "-v" || command === "--version") {
 			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-D_w-4w5B.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
 			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-Dt32J6RI.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
 			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-DiaNQbrl.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-BdNaOVNa.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-DKcGUNsj.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
 			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-Bujrv5q-.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
-			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-PZBsLSGb.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
-			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-AAHU02L6.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
-			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-oup1xBN0.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
+			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-DOiJMRt2.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
+			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CZy5MorI.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));
+			case "gen": return runSubcommandGroup("gen", genSubcommands, parseGenArgs, (r, p) => import("../gen-o_w-8yI8.mjs").then(({ runGenCommand }) => runGenCommand(r, p)));
 			case "prepare": {
-				const { runPrepareCommand } = await import("../prepare-DOBTY0o4.mjs");
+				const { runPrepareCommand } = await import("../prepare-BoKHgMNx.mjs");
 				await runPrepareCommand(root, parsePrepareArgs([]));
 				return;
 			}

package/dist/cli/env-schema-probe.mjs

@@ -208,7 +208,7 @@ async function runFactsChild(root) {
 		});
 		return;
 	}
-	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-BdDlGhbN.mjs").then((n) => n.c);
+	const { deriveSelfHostSchemaFacts, SelfHostSchemaError } = await import("../env-validation-Dea3v3ej.mjs").then((n) => n.c);
 	try {
 		emitResult({
 			kind: "ok",
@@ -233,7 +233,7 @@ async function runFactsChild(root) {
 * fault → fail closed as a values-free schema error.
 */
 async function runValidateEmittedChild(root) {
-	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-BdDlGhbN.mjs").then((n) => n.c);
+	const { computeInvalidEmittedKeys, readEmittedWorkerVars, SelfHostSchemaError } = await import("../env-validation-Dea3v3ej.mjs").then((n) => n.c);
 	const emitted = readEmittedWorkerVars(root);
 	if (!emitted.ok) {
 		emitResult({

package/dist/{config-E03l1C_h.mjs → config-BkTvs43g.mjs}

@@ -5,6 +5,7 @@ import { i as isVoidAuthProvider, t as VOID_AUTH_PROVIDERS } from "./providers-C
 import { readFileSync } from "node:fs";
 //#region src/config.ts
 var config_exports = /* @__PURE__ */ __exportAll({
+	VALID_NOT_FOUND_HANDLING: () => VALID_NOT_FOUND_HANDLING,
 	VALID_REDIRECT_STATUSES: () => VALID_REDIRECT_STATUSES,
 	assertSingleSplat: () => assertSingleSplat,
 	assertUniqueCaptureNames: () => assertUniqueCaptureNames,
@@ -35,6 +36,15 @@ const VALID_APP_TYPES = /* @__PURE__ */ new Set([
 ]);
 const VALID_OUTPUTS = /* @__PURE__ */ new Set(["server", "static"]);
 /**
+* Accepted `routing.notFound` values. Source of truth for the framework, the
+* `AssetConfig.not_found_handling` field, and the schema.json enum.
+*/
+const VALID_NOT_FOUND_HANDLING = /* @__PURE__ */ new Set([
+	"single-page-application",
+	"404-page",
+	"none"
+]);
+/**
 * Allowed 3xx redirect statuses. Source of truth for the framework, the
 * `_redirects` parser (`cli/headers.ts`), and the schema.json enum. 303 is
 * included for POST→GET after-submit patterns; 304/305/306 aren't
@@ -279,6 +289,9 @@ function readConfig(root) {
 	if (obj.routing !== void 0) {
 		if (typeof obj.routing !== "object" || obj.routing === null || Array.isArray(obj.routing)) throw new Error(`config: "routing" in ${CONFIG_FILE} must be an object.`);
 		const routing = obj.routing;
+		if (routing.notFound !== void 0) {
+			if (typeof routing.notFound !== "string" || !VALID_NOT_FOUND_HANDLING.has(routing.notFound)) throw new Error(`config: "routing.notFound" in ${CONFIG_FILE} must be one of: ${[...VALID_NOT_FOUND_HANDLING].join(", ")}.`);
+		}
 		if (routing.revalidate !== void 0) if (typeof routing.revalidate === "number") {
 			if (!Number.isFinite(routing.revalidate) || routing.revalidate < 0) throw new Error(`config: "routing.revalidate" in ${CONFIG_FILE} must be a non-negative finite number.`);
 		} else if (typeof routing.revalidate === "object" && routing.revalidate !== null && !Array.isArray(routing.revalidate)) {

package/dist/{db-PZBsLSGb.mjs → db-DOiJMRt2.mjs}

@@ -3,11 +3,11 @@ import { D as outro, S as confirm, T as log, a as cliTitle, j as isCancel, s as
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { t as cfAccessHeaders } from "./cf-access-Bqw81xAf.mjs";
 import { b as readProjectConfig, f as getToken, m as isStagingMode, n as PlatformClient, t as PlatformApiError } from "./client-Gb71-XkG.mjs";
-import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig, p as resolveBindingNames } from "./config-BkTvs43g.mjs";
 import { r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
 import { c as collectMigrations, d as stripSqlExt, f as writeJournal, n as listDrizzleArtifacts, r as validateMigrations, t as assertJournalCoherence, u as readJournal } from "./validate-Cw_RLeTj.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-D-3_D-Gl.mjs";
-import { formatTimestamp } from "./gen-oup1xBN0.mjs";
+import { formatTimestamp } from "./gen-o_w-8yI8.mjs";
 import { existsSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { execFileSync } from "node:child_process";
@@ -947,7 +947,7 @@ async function runExport(root, args, dialect) {
 	}
 }
 async function runSetUrl(root) {
-	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-E03l1C_h.mjs").then((n) => n.n);
+	const { readConfig: readVoidConfig, getDatabaseDialect: getDialect } = await import("./config-BkTvs43g.mjs").then((n) => n.n);
 	if (getDialect(readVoidConfig(root)) !== "postgresql") {
 		log.error("db: This command is only for PostgreSQL projects. Set \"database\": \"pg\" in void.json.");
 		process.exit(1);

package/dist/{deploy-DT8wsPZd.mjs → deploy-u7Rv9q_q.mjs}

@@ -5,22 +5,22 @@ import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourc
 import { a as scanQueuesSync, i as scanWebSocketRoutesSync, o as scanJobsSync, r as scanRoutes, s as findVoidAuthConfig } from "./scan-DYXkrasO.mjs";
 import { t as cfAccessHeaders } from "./cf-access-Bqw81xAf.mjs";
 import { C as ensureCloudflaredToken, S as writeProjectConfig, a as isExpiredTokenError, b as readProjectConfig, f as getToken, i as isCliOutdatedError, m as isStagingMode, n as PlatformClient, o as parsePlatformErrorBody, p as getTokenSource, t as PlatformApiError, u as getApiUrl } from "./client-Gb71-XkG.mjs";
-import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-BkTvs43g.mjs";
 import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
 import { o as validateSsrEntry } from "./entry-D7yy4xVH.mjs";
 import { i as voidWarn, r as voidLog } from "./log-ChfPKsVd.mjs";
-import { a as resolveProjectCommand, c as mergeAndExpand, i as hasBackendFiles, l as parseDotenvFile, n as detectPreset, o as resolveWranglerArgv, r as formatProjectCommand, t as FRAMEWORK_PRESETS, u as scanWranglerDotenvKeys } from "./preset-BGrvB4Bl.mjs";
+import { a as resolveProjectCommand, c as mergeAndExpand, i as hasBackendFiles, l as parseDotenvFile, n as detectPreset, o as resolveWranglerArgv, r as formatProjectCommand, t as FRAMEWORK_PRESETS, u as scanWranglerDotenvKeys } from "./preset-BjyR3lzz.mjs";
 import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";
 import { t as findEnvFile } from "./env-types-QBj-ndax.mjs";
-import { a as collectPlaintextVarWarningsFromVars, d as getDeployEnvDefaults, f as readEmittedWorkerVars, i as SelfHostSecretListError, l as fetchRemoteSecretNames, m as validateProdEnv, n as SelfHostFirstDeployError, o as deriveSelfHostEnvContextFromVars, p as selfHostSchemaFailureMessage, r as SelfHostSchemaError, s as dischargeSelfHostEnvContext, t as SelfHostEnvValidationError, u as formatEnvReport } from "./env-validation-BdDlGhbN.mjs";
+import { a as collectPlaintextVarWarningsFromVars, d as getDeployEnvDefaults, f as readEmittedWorkerVars, i as SelfHostSecretListError, l as fetchRemoteSecretNames, m as validateProdEnv, n as SelfHostFirstDeployError, o as deriveSelfHostEnvContextFromVars, p as selfHostSchemaFailureMessage, r as SelfHostSchemaError, s as dischargeSelfHostEnvContext, t as SelfHostEnvValidationError, u as formatEnvReport } from "./env-validation-Dea3v3ej.mjs";
 import { n as writeDrizzleConfig } from "./config-CutEMNGJ.mjs";
 import { a as buildMigrationPlanBundle, c as collectMigrations, r as validateMigrations, t as assertJournalCoherence } from "./validate-Cw_RLeTj.mjs";
 import { t as scanPages } from "./scan-DEwlM_Xy.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-D-3_D-Gl.mjs";
 import { i as promptProjectSetupAction, n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-DsYvl3TB.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BBMtLLV9.mjs";
-import { t as collectGitDeployMetadata } from "./git-metadata-CBKaL0v5.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BQknpzkn.mjs";
+import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-nsHIFixA.mjs";
 import { t as promptForLoginToken } from "./login-BT3H8PN3.mjs";
 import { createRequire } from "node:module";
 import { copyFileSync, cpSync, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
@@ -56,24 +56,26 @@ const VOID_INTERNAL_WORKER_FIRST = ["/__void", "/__void/*"];
 function resolveAssetRoutingPolicy(inputs) {
 	const workerFirst = workerOwnsHtmlRouting(inputs);
 	const apiWorkerFirst = !workerFirst && (inputs.hasApiRoutes === true || inputs.authEnabled === true);
+	const assetConfig = workerFirst ? {
+		not_found_handling: "none",
+		run_worker_first: ["/**"]
+	} : apiWorkerFirst ? {
+		not_found_handling: "single-page-application",
+		run_worker_first: [
+			"/api",
+			"/api/*",
+			...VOID_INTERNAL_WORKER_FIRST
+		]
+	} : {
+		not_found_handling: "single-page-application",
+		run_worker_first: [...VOID_INTERNAL_WORKER_FIRST]
+	};
+	if (inputs.notFound !== void 0) assetConfig.not_found_handling = inputs.notFound;
 	return {
-		assetConfig: workerFirst ? {
-			not_found_handling: "none",
-			run_worker_first: ["/**"]
-		} : apiWorkerFirst ? {
-			not_found_handling: "single-page-application",
-			run_worker_first: [
-				"/api",
-				"/api/*",
-				...VOID_INTERNAL_WORKER_FIRST
-			]
-		} : {
-			not_found_handling: "single-page-application",
-			run_worker_first: [...VOID_INTERNAL_WORKER_FIRST]
-		},
+		assetConfig,
 		apiWorkerFirst,
 		workerFirst,
-		workerSpaFallback: workerFirst && !inputs.isSsr && !inputs.hasPages
+		workerSpaFallback: workerFirst && !inputs.isSsr && !inputs.hasPages && (inputs.notFound === void 0 || inputs.notFound === "single-page-application")
 	};
 }
 const SANDBOX_MIGRATION_TAG = "void-sandbox-v1";
@@ -2469,11 +2471,24 @@ function stripDevOnlyRuleFields(rules) {
 *
 * When the user has no fallbacks configured, the platform-level SPA switch
 * is left intact (zero worker-side overhead for the common case).
-*/
-function resolveSpaFallbackChain(appType, fallbackRules) {
+*
+* `notFound` is the explicit `routing.notFound` from void.json. It overrides
+* the value this function would otherwise infer from `appType`, mirroring
+* `resolveAssetRoutingPolicy` on the worker-with-assets path. It is resolved
+* *before* the SPA branch, not patched onto the result afterwards: an override
+* away from `single-page-application` must also skip the synthetic
+* `/* -> /index.html` rule below, otherwise the SPA shell would still be
+* served — just through a fallback rule instead of the platform switch — and
+* the override would be a no-op. This matters because `detectPreset`
+* classifies any Vite project without backend files as `spa`, so a plain Vite
+* MPA lands on `appType: 'spa'` and `routing.notFound: '404-page'` is its only
+* escape hatch.
+*/
+function resolveSpaFallbackChain(appType, fallbackRules, notFound) {
 	const userRules = fallbackRules && fallbackRules.length > 0 ? fallbackRules : void 0;
-	if (appType !== "spa") return {
-		assetConfig: { not_found_handling: appType === "static" ? "404-page" : "none" },
+	const handling = notFound ?? (appType === "spa" ? "single-page-application" : appType === "static" ? "404-page" : "none");
+	if (handling !== "single-page-application") return {
+		assetConfig: { not_found_handling: handling },
 		fallbackRules: userRules
 	};
 	if (!userRules) return {
@@ -2724,17 +2739,21 @@ function toLiveManifest(live) {
 	};
 }
 /**
-* If the user configured `routing.fallbacks` on a non-SPA app, the platform
-* still applies the rules but no `/* -> /index.html` SPA shell is synthesised
-* — unmatched paths fall through to the platform 404. Returns the warning
+* If the user configured `routing.fallbacks` on an app whose resolved
+* `not_found_handling` is not `single-page-application`, the platform still
+* applies the rules but no `/* -> /index.html` SPA shell is synthesised —
+* unmatched paths fall through to the platform 404. Returns the warning
 * message string when that mismatch is detected, or `null` otherwise. Pure
 * function; callers decide whether/how to surface the message (CLI progress,
 * `console.warn`, etc.).
+*
+* The message names `not_found_handling` rather than the app type because an
+* explicit `routing.notFound` can land here too — the app may well be a SPA.
 */
 function detectNonSpaFallbackWarning(assetConfig, fallbackRules) {
 	if (assetConfig?.not_found_handling === "single-page-application") return null;
 	if (!fallbackRules || fallbackRules.length === 0) return null;
-	return "routing.fallbacks is set but appType is not \"spa\"; fallbacks will be applied, but no \"/* -> /index.html\" SPA shell fallback is synthesised — unmatched paths fall through to the platform 404.";
+	return "routing.fallbacks is set but not_found_handling is not \"single-page-application\"; fallbacks will be applied, but no \"/* -> /index.html\" SPA shell fallback is synthesised — unmatched paths fall through to the platform 404.";
 }
 /**
 * Build a Void-app deploy manifest from the inferred bindings + per-feature
@@ -2839,8 +2858,8 @@ function collectWorkerFiles(workerDir) {
 * Build a static-deploy manifest. Pure shape transformation — no I/O.
 */
 function buildStaticManifest(opts) {
-	const { appType, hashedAssetsPrefix, headerRules, redirectRules, fallbackRules } = opts;
-	const { assetConfig, fallbackRules: resolvedFallbackRules } = resolveSpaFallbackChain(appType, fallbackRules);
+	const { appType, hashedAssetsPrefix, headerRules, redirectRules, fallbackRules, notFound } = opts;
+	const { assetConfig, fallbackRules: resolvedFallbackRules } = resolveSpaFallbackChain(appType, fallbackRules, notFound);
 	const manifest = {
 		version: 3,
 		assetManifestVersion: 2,
@@ -3335,6 +3354,7 @@ var deploy_exports = /* @__PURE__ */ __exportAll({
 	ensurePreviouslyDeployedLiveBindingConfig: () => ensurePreviouslyDeployedLiveBindingConfig,
 	generateDeployWrapperIfNeeded: () => generateDeployWrapperIfNeeded,
 	hasDeploySchemaDrift: () => hasDeploySchemaDrift,
+	hasPrerenderSources: () => hasPrerenderSources,
 	hashWranglerUploader: () => hashWranglerUploader,
 	loadDeployEnv: () => loadDeployEnv,
 	parseRootWranglerConfig: () => parseRootWranglerConfig,
@@ -3344,6 +3364,7 @@ var deploy_exports = /* @__PURE__ */ __exportAll({
 	resolveDeployWorkerMain: () => resolveDeployWorkerMain,
 	resolveDeployWranglerCompat: () => resolveDeployWranglerCompat,
 	resolveDistDir: () => resolveDistDir,
+	resolveFullDeployBuildCommand: () => resolveFullDeployBuildCommand,
 	resolveStaticBuildCommand: () => resolveStaticBuildCommand,
 	resolveStaticDeployPreset: () => resolveStaticDeployPreset,
 	resolveWorkerDirName: () => resolveWorkerDirName,
@@ -3356,6 +3377,7 @@ var deploy_exports = /* @__PURE__ */ __exportAll({
 	streamDeployEvents: () => streamDeployEvents,
 	validateAuthMigrationSchema: () => validateAuthMigrationSchema,
 	verifyGeneratedDeployConfig: () => verifyGeneratedDeployConfig,
+	warnIgnoredNotFoundForFramework: () => warnIgnoredNotFoundForFramework,
 	warnRedundantForceOn3xx: () => warnRedundantForceOn3xx,
 	warnUnpublishedRouting: () => warnUnpublishedRouting
 });
@@ -3368,7 +3390,7 @@ let loadedProvisionModule;
 * so a managed deploy never imports it — and thus never loads `proper-lockfile`.
 */
 async function loadProvisionModule() {
-	loadedProvisionModule ??= await import("./provision-BLrCEBbI.mjs");
+	loadedProvisionModule ??= await import("./provision-rShh6MKY.mjs");
 	return loadedProvisionModule;
 }
 /**
@@ -3512,14 +3534,44 @@ async function runDeploy(root, options) {
 * `cfAccessHeaders(process.env)` / the cloudflared pair-guard AFTER the build
 * step. Only the service-token pair is scrubbed; the cloudflared
 * `CF_ACCESS_TOKEN` JWT (dev path) is left untouched.
-*/
-function buildEnv(extra) {
+*
+* `localBinRoot` is an explicit OPT-IN, not a default. Build commands are run
+* through a shell (`execSync`) and a user-configured `inference.build` (e.g.
+* `vitepress build && vite build`) names bare binaries that only exist in the
+* project's own `node_modules/.bin`; under the build container's
+* `npx --yes void deploy` that happens to work — npx prepends every ancestor
+* `.bin` itself — but a directly invoked `node_modules/.bin/void deploy` or a
+* globally installed `void` inherits no such PATH and the bare binary fails to
+* resolve. Passing it makes the project's bin dir shadow the system one for
+* that child, so it belongs ONLY on the three build execs. The other callers
+* (`getGitCommit`, the drizzle-kit spawn) exec a system binary or an absolute
+* path and must not hand a dependency-shipped `node_modules/.bin/git` a child
+* process holding `VOID_TOKEN`.
+*/
+function buildEnv(extra, options) {
 	const env = {
 		...process.env,
 		...extra
 	};
 	delete env.CF_ACCESS_CLIENT_ID;
 	delete env.CF_ACCESS_CLIENT_SECRET;
+	return options?.localBinRoot === void 0 ? env : prependLocalBinToPath(env, options.localBinRoot);
+}
+/**
+* Prepend `<root>/node_modules/.bin` to the child env's PATH, preserving
+* whatever was already there.
+*
+* PATH is looked up case-insensitively and written back under the SAME key the
+* env already used: Windows reports it as `Path`, and `{ ...process.env }`
+* drops the case-insensitive lookup that `process.env` itself provides, so
+* hardcoding `PATH` would leave the real variable untouched and add a dead one.
+*/
+function prependLocalBinToPath(env, root) {
+	const binDir = join(root, "node_modules", ".bin");
+	const delimiter = process.platform === "win32" ? ";" : ":";
+	const pathKey = Object.keys(env).find((key) => key.toLowerCase() === "path") ?? "PATH";
+	const existing = env[pathKey];
+	env[pathKey] = existing ? `${binDir}${delimiter}${existing}` : binDir;
 	return env;
 }
 /**
@@ -5847,7 +5899,7 @@ async function runDeployInner(root, options, cliLog) {
 				name: detected.name,
 				class: detected.class
 			});
-			const gitMetadata = collectGitDeployMetadata(root, options?.skipBuild ? null : getGitCommit(root));
+			const gitMetadata = collectGitDeployMetadata(root, options?.skipBuild ? null : getGitCommit(root), process.env, buildEnv());
 			const fwPreset = FRAMEWORK_PRESETS[detected.name];
 			if (detected.class === "b" || detected.class === "c") {
 				if (!fwPreset) {
@@ -5855,18 +5907,21 @@ async function runDeployInner(root, options, cliLog) {
 					process.exit(1);
 				}
 				await runFrameworkDeploy(root, config, client, detected, fwPreset, voidConfig, options?.skipBuild, gitMetadata, cliLog);
-			} else await runFullDeploy(root, config, client, fwPreset, options?.skipBuild, gitMetadata, detected, cliLog);
+			} else await runFullDeploy(root, config, client, voidConfig, fwPreset, options?.skipBuild, gitMetadata, detected, cliLog);
 			return;
 		}
-		if (!preset && !voidConfig.inference?.appType) preset = detectPreset(root, { spa: options?.spa });
-		const gitMetadata = collectGitDeployMetadata(root, options?.skipBuild ? null : getGitCommit(root));
+		if (!preset && !voidConfig.inference?.appType) preset = detectPreset(root, {
+			spa: options?.spa,
+			strictBackend: true
+		});
+		const gitMetadata = collectGitDeployMetadata(root, options?.skipBuild ? null : getGitCommit(root), process.env, buildEnv());
 		if (preset) {
 			preset = {
 				...preset,
 				buildCommand: resolveStaticBuildCommand(preset, voidConfig.inference?.build, Boolean(options?.dir))
 			};
 			await runStaticDeploy(root, config, client, preset, options?.skipBuild, gitMetadata, void 0, void 0, void 0, void 0, voidConfig.routing, cliLog);
-		} else await runFullDeploy(root, config, client, void 0, options?.skipBuild, gitMetadata, void 0, cliLog);
+		} else await runFullDeploy(root, config, client, voidConfig, void 0, options?.skipBuild, gitMetadata, void 0, cliLog);
 		return;
 	} catch (error) {
 		if (isExpiredTokenError(error)) {
@@ -5905,6 +5960,57 @@ function resolveStaticBuildCommand(preset, buildOverride, hasExplicitDir = false
 	if (hasExplicitDir) return null;
 	return buildOverride ?? preset.buildCommand;
 }
+/**
+* Resolve the build command for a FULL (Class A / Void app) deploy.
+*
+* `inference.build` wins when set, matching `runFrameworkDeploy` and the static
+* path's `resolveStaticBuildCommand`. Without it the full path was the only
+* deploy mode that ignored the config and hardcoded `vite build`, so an app that
+* needs more than one build step — an SSG that emits the site, then Void's build
+* packaging it via `publicDir` alongside the worker — had no way to express it
+* and died on the missing `index.html` entry.
+*
+* The two returned strings are deliberately different for the FALLBACK: `label`
+* goes to the user (`formatProjectCommand` rewrites `vite` → `vp` without
+* expanding an absolute bin path), `command` is what actually runs
+* (`resolveProjectCommand` expands to the local bin). A configured command is
+* the user's own text and is used verbatim for both, so what is printed is
+* exactly what is executed.
+*/
+function resolveFullDeployBuildCommand(root, buildOverride) {
+	if (buildOverride) return {
+		label: buildOverride,
+		command: buildOverride
+	};
+	return {
+		label: formatProjectCommand(root, "vite build"),
+		command: resolveProjectCommand(root, "vite build")
+	};
+}
+/**
+* Whether the built worker's `__voidCollectPrerenderPaths` can return anything
+* at all. When it cannot, booting it is pure cost and the deploy skips it.
+*
+* These three are exactly — and only — the sources `compilePrerenderCollector`
+* (`router/compile.ts`) emits a `paths.push(...)` for:
+*   1. `scan.pages.pages` — static patterns + dynamic pages' `getPrerenderPaths()`
+*   2. the custom SSR entry's top-level `getPrerenderPaths()` (`ssr` argument)
+*   3. `options.explicitPrerenderPaths` — void.json `routing.prerender`
+* With none of them present the collector is a generated function whose body
+* returns `[...new Set([])]`, so skipping is result-identical.
+*
+* Skipping matters beyond speed. `collectPrerenderPaths` boots the worker in
+* Miniflare with bindings from `wranglerVars + loadEnv('production', root, '')`
+* only, and the generated fetch handler validates the `env.ts` schema at boot.
+* An app whose secrets live on the platform (never in a committed `.env`) gets
+* an HTTP 500 there and the deploy dies — for an app that had nothing to
+* prerender in the first place. The only workaround was moving the secret into
+* `.env.production`, which `loadDeployEnv` then publishes as a plaintext
+* manifest var. So this guard also removes a real incentive to leak secrets.
+*/
+function hasPrerenderSources(inputs) {
+	return inputs.hasPages || inputs.hasSsrEntry || (inputs.explicitPrerenderPaths?.length ?? 0) > 0;
+}
 function resolveStaticDeployPreset(root, voidConfig, options) {
 	if (options?.dir) return detectPreset(root, {
 		dir: options.dir,
@@ -6165,7 +6271,7 @@ function assembleVoidManifest(pageScan, isFrameworkMode, opts, revalidateConfig)
 		pathRevalidate: isFrameworkMode || revalidateConfig == null || typeof revalidateConfig !== "object" ? void 0 : revalidateConfig
 	});
 }
-async function runStaticDeploy(root, config, client, preset, skipBuild, gitMetadata, hashedAssetsPrefix, headerRules, redirectRules, fallbackRules, routing, cliLog) {
+async function runStaticDeploy(root, config, client, preset, skipBuild, gitMetadata, hashedAssetsPrefix, headerRules, redirectRules, fallbackRules, routing, cliLog, notFound) {
 	const typeLabel = preset.appType === "spa" ? "Static SPA" : "Static Site";
 	log.info(`${typeLabel} deploy`);
 	cliLog?.info("deploy_mode", {
@@ -6179,7 +6285,7 @@ async function runStaticDeploy(root, config, client, preset, skipBuild, gitMetad
 		execSync(preset.buildCommand, {
 			cwd: root,
 			stdio: "inherit",
-			env: buildEnv()
+			env: buildEnv(void 0, { localBinRoot: root })
 		});
 		cliLog?.info("build_end", { durationMs: Date.now() - buildStartedAt });
 	} else if (skipBuild) cliLog?.info("build_skipped", { reason: "skipBuild" });
@@ -6223,7 +6329,8 @@ async function runStaticDeploy(root, config, client, preset, skipBuild, gitMetad
 		hashedAssetsPrefix: hashedAssetsPrefix ?? "assets",
 		headerRules,
 		redirectRules,
-		fallbackRules
+		fallbackRules,
+		notFound: notFound ?? routing?.notFound
 	});
 	cliLog?.info("package_end", {
 		mode: "static",
@@ -6257,6 +6364,27 @@ function warnRedundantForceOn3xx(count) {
 	log.warn(`Found ${count} redundant "!" on 3xx entries in _redirects (these always force by nature; safe to remove).`);
 }
 /**
+* Class B/C framework deploys pin `not_found_handling: 'none'`, so
+* `routing.notFound` does nothing there — say so instead of dropping it
+* silently.
+*
+* These presets emit no `run_worker_first`, so Cloudflare's default applies and
+* the asset layer answers before the framework worker: real prerendered files
+* already win. `not_found_handling` only governs what the framework's own
+* `env.ASSETS.fetch()` delegation returns, which is framework-internal
+* plumbing. Honoring the override there would be a behavior change, not a fix —
+* `single-page-application` makes an unmatched delegation return
+* `dist/client/index.html` at **200** (Astro/SvelteKit hybrid builds commonly
+* prerender the root, so real 404s silently become the home page), and
+* `404-page` steals the 404 from the framework's own error route.
+*
+* Silenced when unset.
+*/
+function warnIgnoredNotFoundForFramework(notFound, frameworkName) {
+	if (notFound === void 0) return;
+	log.warn(`"routing.notFound" in void.json is ignored for ${frameworkName} deploys (not_found_handling is pinned to "none" — the framework's own worker owns unmatched HTML).`);
+}
+/**
 * Class B/C framework deploy: build with framework CLI, package with preset output paths.
 */
 async function runFrameworkDeploy(root, config, client, detected, fwPreset, voidConfig, skipBuild, gitMetadata, cliLog) {
@@ -6274,7 +6402,7 @@ async function runFrameworkDeploy(root, config, client, detected, fwPreset, void
 		execSync(voidConfig.inference?.build ?? resolveProjectCommand(root, fwPreset.buildCommand), {
 			cwd: root,
 			stdio: "inherit",
-			env: buildEnv()
+			env: buildEnv(void 0, { localBinRoot: root })
 		});
 		cliLog?.info("build_end", { durationMs: Date.now() - buildStartedAt });
 	} else cliLog?.info("build_skipped", { reason: "skipBuild" });
@@ -6286,6 +6414,7 @@ async function runFrameworkDeploy(root, config, client, detected, fwPreset, void
 		routing: voidConfig.routing
 	});
 	warnRedundantForceOn3xx(redundantForceOn3xx);
+	warnIgnoredNotFoundForFramework(voidConfig.routing?.notFound, detected.name);
 	lintDuplicateSources(redirectRules, "redirects/rewrites (pre-asset)");
 	lintDuplicateSources(fallbackRules, "fallbacks (post-asset)");
 	lintDestinationSplats(redirectRules, "redirects/rewrites (pre-asset)");
@@ -6454,21 +6583,21 @@ async function runFrameworkDeploy(root, config, client, detected, fwPreset, void
 	warnUnpublishedRouting(result);
 	outro("Done!");
 }
-async function runFullDeploy(root, config, client, fwPreset, skipBuild, gitMetadata, detected, cliLog) {
+async function runFullDeploy(root, config, client, voidConfig, fwPreset, skipBuild, gitMetadata, detected, cliLog) {
 	cliLog?.info("deploy_mode", {
 		mode: "full",
 		framework: detected?.name
 	});
 	if (!skipBuild) {
-		const buildCmd = formatProjectCommand(root, "vite build");
+		const { label: buildCmd, command: buildExec } = resolveFullDeployBuildCommand(root, voidConfig.inference?.build);
 		log.step(`Building (${buildCmd})...`);
 		cliLog?.info("build_start", { command: buildCmd });
 		const buildStartedAt = Date.now();
 		try {
-			execSync(resolveProjectCommand(root, "vite build"), {
+			execSync(buildExec, {
 				cwd: root,
 				stdio: "inherit",
-				env: buildEnv({ VOID_DEPLOY_PROJECT_ID: config.projectId })
+				env: buildEnv({ VOID_DEPLOY_PROJECT_ID: config.projectId }, { localBinRoot: root })
 			});
 			cliLog?.info("build_end", { durationMs: Date.now() - buildStartedAt });
 		} catch (err) {
@@ -6489,7 +6618,7 @@ async function runFullDeploy(root, config, client, fwPreset, skipBuild, gitMetad
 		}
 	}
 	const isFrameworkMode = detected != null;
-	const deployConfig = readConfig(root);
+	const deployConfig = voidConfig;
 	const paths = resolveProjectPaths(root, deployConfig);
 	const dialect = getDatabaseDialect(deployConfig);
 	const deployScanDirs = deployConfig.inference?.scanDirs ?? (isFrameworkMode ? FRAMEWORK_SCAN_DIRS : void 0);
@@ -6600,7 +6729,8 @@ async function runFullDeploy(root, config, client, fwPreset, skipBuild, gitMetad
 	const hasDocumentRoutes$1 = hasDocumentRoutes(routeScan.routes);
 	const hasMiddleware = routeScan.middleware.length > 0;
 	const hasWebSockets = webSockets.length > 0;
-	const isSsr = isFrameworkMode ? true : Boolean(validateSsrEntry(root, paths)) || hasPages && deployConfig.output !== "static";
+	const ssrEntry = isFrameworkMode ? null : validateSsrEntry(root, paths);
+	const isSsr = isFrameworkMode ? true : Boolean(ssrEntry) || hasPages && deployConfig.output !== "static";
 	const pageScan = existsSync(paths.pagesDir) ? routeScan.pages.pages.length > 0 ? routeScan.pages : await scanPages(root, {
 		output: deployConfig.output,
 		paths
@@ -6614,10 +6744,15 @@ async function runFullDeploy(root, config, client, fwPreset, skipBuild, gitMetad
 				buildCommand: null,
 				outputDir: clientDir,
 				appType: "static"
-			}, true, gitMetadata, assetsPrefix, headerRules, redirectRules, fallbackRules, void 0, cliLog);
+			}, true, gitMetadata, assetsPrefix, headerRules, redirectRules, fallbackRules, void 0, cliLog, deployConfig.routing?.notFound);
 		}
 	}
-	const uniquePrerenderPaths = deployConfig.output === "static" || isFrameworkMode ? [] : isNodeTarget(deployConfig.target) ? await collectPrerenderPathsNode({
+	const prerenderSourcesPresent = hasPrerenderSources({
+		hasPages,
+		hasSsrEntry: ssrEntry !== null,
+		explicitPrerenderPaths: deployConfig.routing?.prerender
+	});
+	const uniquePrerenderPaths = deployConfig.output === "static" || isFrameworkMode || !prerenderSourcesPresent ? [] : isNodeTarget(deployConfig.target) ? await collectPrerenderPathsNode({
 		root,
 		ssrDir: join(distDir, "ssr"),
 		clientDir
@@ -6648,7 +6783,8 @@ async function runFullDeploy(root, config, client, fwPreset, skipBuild, gitMetad
 		hasMiddleware,
 		hasWebSockets: hasDocumentRoutes(webSockets),
 		authEnabled,
-		liveEnabled: liveConfig !== void 0
+		liveEnabled: liveConfig !== void 0,
+		notFound: deployConfig.routing?.notFound
 	});
 	s.start("Checking for changes...");
 	cliLog?.info("preflight_start", { dir: clientDir });

package/dist/{env-AAHU02L6.mjs → env-CZy5MorI.mjs}

@@ -2,7 +2,7 @@ import { a as join } from "./dist-DaKKDf8D.mjs";
 import { D as outro, E as note, T as log, a as cliTitle, w as intro } from "./agents-CtgBYqld.mjs";
 import { b as readProjectConfig, f as getToken, n as PlatformClient } from "./client-Gb71-XkG.mjs";
 import { r as generateEnvTypes, t as findEnvFile } from "./env-types-QBj-ndax.mjs";
-import { h as loadUserEnvFile, l as fetchRemoteSecretNames, m as validateProdEnv, u as formatEnvReport } from "./env-validation-BdDlGhbN.mjs";
+import { h as loadUserEnvFile, l as fetchRemoteSecretNames, m as validateProdEnv, u as formatEnvReport } from "./env-validation-Dea3v3ej.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 //#region src/cli/env-example.ts
 /**

package/dist/{env-validation-BdDlGhbN.mjs → env-validation-Dea3v3ej.mjs}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./rolldown-runtime-DJK8HYOj.mjs";
 import { a as join, c as resolve, n as dirname } from "./dist-DaKKDf8D.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
-import { c as mergeAndExpand, l as parseDotenvFile, o as resolveWranglerArgv } from "./preset-BGrvB4Bl.mjs";
+import { c as mergeAndExpand, l as parseDotenvFile, o as resolveWranglerArgv } from "./preset-BjyR3lzz.mjs";
 import { t as findEnvFile } from "./env-types-QBj-ndax.mjs";
 import { getSecretOverride } from "./runtime/env-helpers.mjs";
 import { t as isLikelySecretKey } from "./env-mask-Dd47NbR6.mjs";

package/dist/{gen-oup1xBN0.mjs → gen-o_w-8yI8.mjs}

@@ -2,7 +2,7 @@ import { a as join, n as dirname, s as relative } from "./dist-DaKKDf8D.mjs";
 import { D as outro, T as log, a as cliTitle, j as isCancel, k as select, w as intro, x as cancel } from "./agents-CtgBYqld.mjs";
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { n as ensureProjectTsconfig } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-BkTvs43g.mjs";
 import { n as writeDrizzleConfig } from "./config-CutEMNGJ.mjs";
 import { c as collectMigrations, n as listDrizzleArtifacts, t as assertJournalCoherence, u as readJournal } from "./validate-Cw_RLeTj.mjs";
 import { t as buildDrizzleKitSpawnEnv } from "./yarn-pnp-DJn3SAHF.mjs";