void 0.10.11 → 0.10.12

package/dist/{git-metadata-CBKaL0v5.mjs → git-metadata-D-gurjzG.mjs}

@@ -1,6 +1,6 @@
 import { execFileSync } from "node:child_process";
 //#region src/cli/git-metadata.ts
-function git(root, args) {
+function git(root, args, env) {
 	try {
 		return execFileSync("git", args, {
 			cwd: root,
@@ -9,7 +9,8 @@ function git(root, args) {
 				"ignore",
 				"pipe",
 				"ignore"
-			]
+			],
+			env
 		}).trim();
 	} catch {
 		return null;
@@ -60,17 +61,17 @@ function getGitHubRepositoryUrl(env) {
 	if (!env.GITHUB_REPOSITORY) return null;
 	return normalizeGitRemoteUrl(`${env.GITHUB_SERVER_URL ?? "https://github.com"}/${env.GITHUB_REPOSITORY}`);
 }
-function collectGitDeployMetadata(root, commit, env = process.env) {
+function collectGitDeployMetadata(root, commit, env = process.env, childEnv = process.env) {
 	const repositoryUrl = getGitHubRepositoryUrl(env) ?? normalizeGitRemoteUrl(git(root, [
 		"remote",
 		"get-url",
 		"origin"
-	]));
+	], childEnv));
 	const gitRef = getGitRefFromEnv(env) ?? git(root, [
 		"rev-parse",
 		"--abbrev-ref",
 		"HEAD"
-	]);
+	], childEnv);
 	return {
 		commit,
 		commitUrl: buildCommitUrl(repositoryUrl, commit),

package/dist/{github-cmd-BdNaOVNa.mjs → github-cmd-DKcGUNsj.mjs}

@@ -1,7 +1,7 @@
 import { A as text, S as confirm, T as log, j as isCancel, k as select, u as import_picocolors, x as cancel } from "./agents-CtgBYqld.mjs";
 import { b as readProjectConfig, c as createCodeChallenge, f as getToken, h as openBrowser, l as createCodeVerifier, n as PlatformClient, o as parsePlatformErrorBody, s as awaitBrowserCallback, t as PlatformApiError } from "./client-Gb71-XkG.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-BBMtLLV9.mjs";
-import { t as collectGitDeployMetadata } from "./git-metadata-CBKaL0v5.mjs";
+import { t as collectGitDeployMetadata } from "./git-metadata-D-gurjzG.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/cli/github-cmd.ts
 /**

package/dist/{headers-BQknpzkn.mjs → headers-nsHIFixA.mjs}

@@ -1,5 +1,5 @@
 import { a as join } from "./dist-DaKKDf8D.mjs";
-import { a as convertRedirectsConfig, d as parseHostPrefixedSource, i as convertHeadersConfig, o as convertRewritesConfig, r as convertFallbacksConfig, s as countSplats, t as VALID_REDIRECT_STATUSES, u as isProtocolRelative } from "./config-E03l1C_h.mjs";
+import { a as convertRedirectsConfig, d as parseHostPrefixedSource, i as convertHeadersConfig, o as convertRewritesConfig, r as convertFallbacksConfig, s as countSplats, t as VALID_REDIRECT_STATUSES, u as isProtocolRelative } from "./config-BkTvs43g.mjs";
 import { i as voidWarn } from "./log-ChfPKsVd.mjs";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/cli/headers.ts

package/dist/index.mjs

@@ -1,24 +1,24 @@
 import { r as __toESM } from "./rolldown-runtime-DJK8HYOj.mjs";
 import { a as join, n as dirname, s as relative } from "./dist-DaKKDf8D.mjs";
 import { M as require_picocolors } from "./agents-CtgBYqld.mjs";
-import { A as resolveAssetRoutingPolicy, C as syncWranglerBindings, D as resolveSandboxConfig, E as isSandboxEnabled, O as hasApiRoutes, S as resolveLiveBindingConfig, T as SANDBOX_MIGRATION_TAG, _ as nextDurableObjectMigrationTag, a as prerenderPagesNode, c as filterLoadedEnv, d as LIVE_MIGRATION_TAG, g as hasDurableObjectSqliteMigration, h as ensureWranglerNodejsAlsFlag, i as prerenderPages, k as hasDocumentRoutes, l as resolveRemoteMode, m as ensureWranglerCompatibilityDate, n as resolveDistDir, o as collectRevalidate, p as ensureWranglerCompat, r as resolveWorkerDirName, s as hasRevalidate, u as stripInternalEnvKeys, v as normalizeWranglerCompatibilityFlags, x as readWranglerCompat, y as readExistingLiveBindingConfig } from "./deploy-DT8wsPZd.mjs";
+import { A as resolveAssetRoutingPolicy, C as syncWranglerBindings, D as resolveSandboxConfig, E as isSandboxEnabled, O as hasApiRoutes, S as resolveLiveBindingConfig, T as SANDBOX_MIGRATION_TAG, _ as nextDurableObjectMigrationTag, a as prerenderPagesNode, c as filterLoadedEnv, d as LIVE_MIGRATION_TAG, g as hasDurableObjectSqliteMigration, h as ensureWranglerNodejsAlsFlag, i as prerenderPages, k as hasDocumentRoutes, l as resolveRemoteMode, m as ensureWranglerCompatibilityDate, n as resolveDistDir, o as collectRevalidate, p as ensureWranglerCompat, r as resolveWorkerDirName, s as hasRevalidate, u as stripInternalEnvKeys, v as normalizeWranglerCompatibilityFlags, x as readWranglerCompat, y as readExistingLiveBindingConfig } from "./deploy-u7Rv9q_q.mjs";
 import { i as resolveProjectPaths, n as readProjectPaths, t as assertNoRootSourceConventionConflicts } from "./project-paths-BQd7OmIo.mjs";
 import { a as scanQueuesSync, c as loadVoidAuthConfig, i as scanWebSocketRoutesSync, n as scanRoutePatternsSync, o as scanJobsSync, r as scanRoutes, s as findVoidAuthConfig, t as scanMiddlewareSync } from "./scan-DYXkrasO.mjs";
 import { b as readProjectConfig, f as getToken, m as isStagingMode } from "./client-Gb71-XkG.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig, l as isNodeTarget, p as resolveBindingNames } from "./config-BkTvs43g.mjs";
 import { a as inferBindingsFromSource, i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, o as walk, r as detectFramework, t as DEFAULT_SCAN_DIRS } from "./plugin-inference-DMeavIJ6.mjs";
 import { a as validateSsrEntries, c as isIdentifier, l as isLiteral, n as SSR_SERVER_ENTRY_RELATIVE_PATHS, o as validateSsrEntry, t as SSR_CLIENT_ENTRY_RELATIVE_PATHS, u as isMemberExpression } from "./entry-D7yy4xVH.mjs";
 import { i as voidWarn, n as voidError, r as voidLog, t as setShowTimestamp } from "./log-ChfPKsVd.mjs";
-import { l as parseDotenvFile } from "./preset-BGrvB4Bl.mjs";
+import { l as parseDotenvFile } from "./preset-BjyR3lzz.mjs";
 import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, o as DRIZZLE_OPERATORS, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-COI2DsZv.mjs";
 import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";
 import { t as MagicString } from "./magic-string.es-ZQjdJFFn.mjs";
 import { n as findEnvFileForPaths, r as generateEnvTypes, t as findEnvFile } from "./env-types-QBj-ndax.mjs";
-import { h as loadUserEnvFile } from "./env-validation-BdDlGhbN.mjs";
+import { h as loadUserEnvFile } from "./env-validation-Dea3v3ej.mjs";
 import { i as resolveLayoutIds } from "./scan-DEwlM_Xy.mjs";
 import { n as STAGING_PROXY_URL, t as DEFAULT_PROXY_URL } from "./proxy-D-3_D-Gl.mjs";
-import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-BQknpzkn.mjs";
+import { n as lintDuplicateSources, r as mergeRoutingRules, t as lintDestinationSplats } from "./headers-nsHIFixA.mjs";
 import { n as INTERNAL_BINDING_PREFIXES, t as INTERNAL_BINDING_EXACT_NAMES } from "./env-raw-Cx8ElDdj.mjs";
 import { n as defer } from "./defer-YsYDUoii.mjs";
 import { VoidAssetRewriteError, basicAuth, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled } from "./runtime/handler.mjs";
@@ -1687,7 +1687,7 @@ function migrationPlugin(root, dialect, databaseId = "local", persistRoot = join
 					if (applied.length > 0) voidLog(`Applied ${applied.length} migration(s): ${applied.join(", ")}`);
 				}
 				if (auth?.enabled) {
-					const { runLocalVoidAuthMigrations } = await import("./node-BDx8pmhq.mjs");
+					const { runLocalVoidAuthMigrations } = await import("./node-Da0UcsGA.mjs");
 					await runLocalVoidAuthMigrations(root, dialect, persistRoot, databaseId, auth.configPath);
 					voidLog("Applied Better Auth migrations");
 				}
@@ -3562,9 +3562,19 @@ function compilePageRoutes(lines, scan, pages, options) {
 * Class A framework wrappers. If the app returns 404, check ASSETS binding
 * for static files and set cache headers. Edge caching of hashed assets
 * happens at the dispatch layer (see design doc 0042).
+*
+* `notFound` is the RESOLVED `assetConfig.not_found_handling` for this build
+* (`resolveAssetRoutingPolicy`), and it decides what happens once the asset
+* binding has also answered 404. It is a separate argument from
+* `serveSpaFallback` because the two are not derived from each other: the
+* common worker-first app runs with `not_found_handling: 'none'` and STILL
+* wants the worker-side shell fallback (that is the whole reason the flag
+* exists). They are mutually exclusive in practice — `resolveAssetRoutingPolicy`
+* clears `workerSpaFallback` whenever an explicit `routing.notFound` asks for
+* anything other than the SPA shell.
 */
-function compileAssetFallbackHelper(assetsDir = "assets", serveSpaFallback = false) {
-	const spaFallbackCode = serveSpaFallback ? `  // SPA fallback: when HTML-owning features make
+function compileAssetFallbackHelper(assetsDir = "assets", serveSpaFallback = false, notFound = "none") {
+	const fallthroughCode = serveSpaFallback ? `  // SPA fallback: when HTML-owning features make
   // assetConfig.not_found_handling = 'none', the asset binding returns 404
   // instead of falling back to index.html itself. Do that fallback here, after
   // user routes/middleware have run, so auth gates and OAuth callbacks see the request first.
@@ -3583,6 +3593,13 @@ function compileAssetFallbackHelper(assetsDir = "assets", serveSpaFallback = fal
       return res;
     }
   }
+  return response;` : notFound === "404-page" ? `  const accept = request.headers.get("accept") ?? "";
+  const assetContentType = asset.headers.get("content-type") ?? "";
+  if (accept.includes("text/html") && assetContentType.includes("text/html")) {
+    const res = new Response(asset.body, asset);
+    res.headers.set("Cache-Control", "no-store");
+    return res;
+  }
   return response;` : `  return response;`;
 	return `
 async function serveWithAssets(request, env, response) {
@@ -3597,7 +3614,7 @@ async function serveWithAssets(request, env, response) {
     }
     return res;
   }
-${spaFallbackCode}
+${fallthroughCode}
 }
 `;
 }
@@ -3616,7 +3633,7 @@ ${spaFallbackCode}
 * remote mode (`__VOID_REMOTE`) and replace local bindings with
 * proxy-backed versions.
 */
-function compileWorkerEntry(hasQueues = false, remote, assetsDir = "assets", webSocketClasses = [], runtimeEnvPath = "void/_env", envSchemaModule, sandbox, serveSpaFallback = false, live, isr) {
+function compileWorkerEntry(hasQueues = false, remote, assetsDir = "assets", webSocketClasses = [], runtimeEnvPath = "void/_env", envSchemaModule, sandbox, serveSpaFallback = false, live, isr, notFound = "none") {
 	const remotePath = remote?.remotePath;
 	const remoteBindingNames = JSON.stringify(remote?.bindingNames);
 	const createRemoteEnvCall = `createRemoteEnv(env${remote?.bindingNames ? `, ${remoteBindingNames}` : ""})`;
@@ -3661,7 +3678,7 @@ function __filterInternalBindings(env) {
   });
 }
 `;
-	const assetHelper = compileAssetFallbackHelper(assetsDir, serveSpaFallback);
+	const assetHelper = compileAssetFallbackHelper(assetsDir, serveSpaFallback, notFound);
 	const isrImport = isr ? `import { handleIsr } from ${JSON.stringify(isr.runtimePath)};\nimport { __VOID_ISR_REVALIDATE, __VOID_ISR_DEPLOYMENT_ID } from 'virtual:void-routes';\n` : "";
 	const isrEnvCapture = isr ? `  env.__VOID_ISR_DEPLOYMENT_ID ??= __VOID_ISR_DEPLOYMENT_ID;\n  env.__VOID_ISR_HOST = new URL(request.url).hostname;\n` : "";
 	const isrDeploymentStamp = isr ? `  env.__VOID_ISR_DEPLOYMENT_ID ??= __VOID_ISR_DEPLOYMENT_ID;\n` : "";
@@ -4418,6 +4435,15 @@ function routingPlugin(root, options) {
 		if (!scan) return false;
 		return resolveCurrentAssetRoutingPolicy().workerSpaFallback;
 	}
+	/**
+	* The `not_found_handling` the generated worker entry must agree with. Read
+	* off the SAME resolved policy that produces the wrangler asset config, so
+	* the emitted `serveWithAssets` can never disagree with the platform switch
+	* it is standing in for.
+	*/
+	function currentNotFoundHandling() {
+		return resolveCurrentAssetRoutingPolicy().assetConfig.not_found_handling ?? "none";
+	}
 	function resolveCurrentAssetRoutingPolicy() {
 		if (!scan) return resolveAssetRoutingPolicy({
 			isSsr: Boolean(ssr),
@@ -4427,7 +4453,8 @@ function routingPlugin(root, options) {
 			hasMiddleware: false,
 			hasWebSockets: false,
 			authEnabled: compileOptions.auth !== null,
-			liveEnabled: options.live !== void 0
+			liveEnabled: options.live !== void 0,
+			notFound: options.routing?.notFound
 		});
 		return resolveAssetRoutingPolicy({
 			isSsr: Boolean(ssr),
@@ -4437,7 +4464,8 @@ function routingPlugin(root, options) {
 			hasMiddleware: scan.middleware.length > 0,
 			hasWebSockets: hasDocumentRoutes(scan.websockets ?? []),
 			authEnabled: compileOptions.auth !== null,
-			liveEnabled: options.live !== void 0
+			liveEnabled: options.live !== void 0,
+			notFound: options.routing?.notFound
 		});
 	}
 	const outDir = join(root, ".void");
@@ -4520,7 +4548,7 @@ function routingPlugin(root, options) {
 					bindingName: options.sandboxBindingName,
 					className: options.sandboxClassName,
 					runtimePath: sandboxRuntimePath
-				} : false, shouldServeSpaFallback(), options.live, isr));
+				} : false, shouldServeSpaFallback(), options.live, isr, currentNotFoundHandling()));
 			}
 		},
 		resolveId: {
@@ -4571,7 +4599,7 @@ function routingPlugin(root, options) {
 					bindingName: options.sandboxBindingName,
 					className: options.sandboxClassName,
 					runtimePath: sandboxRuntimePath
-				} : false, shouldServeSpaFallback(), options.live));
+				} : false, shouldServeSpaFallback(), options.live, void 0, currentNotFoundHandling()));
 				const structural = event !== "change";
 				const pageManifestChanged = isInDirectory(normalizedPath, normalizedPagesDir) && (structural || normalizedPath.endsWith(".md"));
 				for (const env of Object.values(devServer.environments)) {
@@ -4706,10 +4734,10 @@ function warnIfPackageJsonIsNotEsm(root) {
 * dead-code-eliminated in `vite build`. Production deploys go through
 * `cli/wrapper.ts` instead.
 */
-function getFrameworkEntry(framework, root, devTriggerToken) {
+function getFrameworkEntry(framework, root, devTriggerToken, notFound) {
 	const isBuild = isViteBuildOrPreview();
 	if (!isBuild) writeFrameworkTriggersDispatch(root, devTriggerToken);
-	return generateClassATriggerWrapper(root, framework, getOriginalFrameworkEntry(framework, root), isBuild);
+	return generateClassATriggerWrapper(root, framework, getOriginalFrameworkEntry(framework, root), isBuild, void 0, notFound);
 }
 /** The framework's own server entry, before our trigger wrapper. */
 function getOriginalFrameworkEntry(framework, root) {
@@ -4738,7 +4766,7 @@ function getOriginalFrameworkEntry(framework, root) {
 * dispatch file (and its transitive user-cron/queue imports + dev token)
 * would still ship in the production bundle.
 */
-function generateClassATriggerWrapper(root, framework, original, isBuild, assetsDir = "assets") {
+function generateClassATriggerWrapper(root, framework, original, isBuild, assetsDir = "assets", notFound) {
 	const outDir = join(root, ".void");
 	mkdirSync(outDir, { recursive: true });
 	const wrapperPath = join(outDir, `${framework}-trigger-wrapper.ts`);
@@ -4751,7 +4779,7 @@ export default {
     return serveWithAssets(request, env, await original.fetch(request, env, ctx));
   },
 };
-${compileAssetFallbackHelper(assetsDir)}
+${compileAssetFallbackHelper(assetsDir, false, notFound)}
 ` : `// @ts-nocheck — Auto-generated by Void in dev. Do NOT edit.
 import original from ${JSON.stringify(original)};
 
@@ -5210,9 +5238,10 @@ function voidPlugin(options) {
 	mkdirSync(outDir, { recursive: true });
 	function mergeBindings(resolved) {
 		const result = { ...workerConfig };
-		if (workerConfig.assets && resolved.assets) {
-			delete resolved.assets.not_found_handling;
-			delete resolved.assets.run_worker_first;
+		const generatedAssets = workerConfig.assets;
+		if (generatedAssets && resolved.assets) {
+			if (generatedAssets.not_found_handling !== void 0) delete resolved.assets.not_found_handling;
+			if (generatedAssets.run_worker_first !== void 0) delete resolved.assets.run_worker_first;
 		}
 		const d1Name = bindingNames?.d1 ?? "DB";
 		const d1 = [];
@@ -5448,12 +5477,20 @@ function voidPlugin(options) {
 		}
 	};
 	if (framework) {
-		workerConfig.main = getFrameworkEntry(framework, root, devTriggerToken);
+		workerConfig.main = getFrameworkEntry(framework, root, devTriggerToken, config.routing?.notFound);
 		const frameworkBuildWrapperPlugin = {
 			name: "void:framework-build-wrapper",
+			config(_userConfig, env) {
+				const notFound = config.routing?.notFound;
+				if (env.command !== "build" || notFound === void 0) return;
+				workerConfig.assets = {
+					...workerConfig.assets,
+					not_found_handling: notFound
+				};
+			},
 			configResolved(resolved) {
 				if (resolved.command !== "build") return;
-				generateClassATriggerWrapper(root, framework, getOriginalFrameworkEntry(framework, root), true, resolved.build.assetsDir);
+				generateClassATriggerWrapper(root, framework, getOriginalFrameworkEntry(framework, root), true, resolved.build.assetsDir, config.routing?.notFound);
 			}
 		};
 		const existingFlags = workerConfig.compatibility_flags ?? [];
@@ -5554,7 +5591,8 @@ function voidPlugin(options) {
 		hasMiddleware,
 		hasWebSockets: hasDocumentRoutes(websocketRoutes),
 		authEnabled,
-		liveEnabled: liveConfig !== void 0
+		liveEnabled: liveConfig !== void 0,
+		notFound: config.routing?.notFound
 	});
 	workerConfig.main = join(root, ".void", "entry.ts");
 	if (jobs.length > 0) workerConfig.triggers = { crons: jobs.flatMap((job) => job.crons) };

package/dist/{init-Dl2PKuQn.mjs → init-3rgHKBVi.mjs}

@@ -3,9 +3,9 @@ import { A as text, D as outro, E as note, S as confirm, T as log, a as cliTitle
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { S as writeProjectConfig, b as readProjectConfig, f as getToken, m as isStagingMode, n as PlatformClient } from "./client-Gb71-XkG.mjs";
 import { n as ensureProjectTsconfig, t as createProjectTsconfig } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-BkTvs43g.mjs";
 import { r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
-import { l as parseDotenvFile, r as formatProjectCommand, s as expandDotenv } from "./preset-BGrvB4Bl.mjs";
+import { l as parseDotenvFile, r as formatProjectCommand, s as expandDotenv } from "./preset-BjyR3lzz.mjs";
 import { t as MagicString } from "./magic-string.es-ZQjdJFFn.mjs";
 import { n as writeDrizzleConfig } from "./config-CutEMNGJ.mjs";
 import { n as promptAndCreateProject, r as promptProjectSelection } from "./create-project-DsYvl3TB.mjs";

package/dist/{node-BDx8pmhq.mjs → node-Da0UcsGA.mjs}

@@ -1,6 +1,6 @@
 import { a as join } from "./dist-DaKKDf8D.mjs";
 import { c as loadVoidAuthConfig, s as findVoidAuthConfig } from "./scan-DYXkrasO.mjs";
-import { f as readConfig } from "./config-E03l1C_h.mjs";
+import { f as readConfig } from "./config-BkTvs43g.mjs";
 import { a as resolveVoidAuthMigrationSchema } from "./route-types-COI2DsZv.mjs";
 import { n as applySqliteAuthMigrations, t as applyPgAuthMigrations } from "./auth-migrations-BTZ-ATvQ.mjs";
 import { getMiniflareDatabasePath } from "./runner-kapo9aPs.mjs";

package/dist/pages/index.mjs

@@ -1,8 +1,8 @@
 import { a as join } from "../dist-DaKKDf8D.mjs";
 import { r as resolvePagesDir } from "../project-paths-BQd7OmIo.mjs";
-import { f as readConfig } from "../config-E03l1C_h.mjs";
+import { f as readConfig } from "../config-BkTvs43g.mjs";
 import { a as resolveNamedLayout, i as resolveLayoutIds, n as resolveEffectiveLayoutChain, r as resolveLayoutChain, t as scanPages } from "../scan-DEwlM_Xy.mjs";
-import { i as parseRedirectsFile } from "../headers-BQknpzkn.mjs";
+import { i as parseRedirectsFile } from "../headers-nsHIFixA.mjs";
 import { renderBodyAttrs, renderHeadToString, renderHtmlAttrs, resolveHead } from "./head.mjs";
 import { serializePageData } from "./serialize.mjs";
 //#region src/pages/manifest.ts

package/dist/{prepare-DOBTY0o4.mjs → prepare-BoKHgMNx.mjs}

@@ -3,7 +3,7 @@ import { D as outro, E as note, T as log, a as cliTitle, w as intro } from "./ag
 import { i as resolveProjectPaths } from "./project-paths-BQd7OmIo.mjs";
 import { c as loadVoidAuthConfig, r as scanRoutes, s as findVoidAuthConfig } from "./scan-DYXkrasO.mjs";
 import { n as ensureProjectTsconfig, r as writeFileIfChanged } from "./project-tsconfig-B-QtXjLQ.mjs";
-import { c as getDatabaseDialect, f as readConfig } from "./config-E03l1C_h.mjs";
+import { c as getDatabaseDialect, f as readConfig } from "./config-BkTvs43g.mjs";
 import { i as inferProjectBindings, n as FRAMEWORK_SCAN_DIRS, r as detectFramework } from "./plugin-inference-DMeavIJ6.mjs";
 import { i as generateVoidAuthDrizzleSchema, n as generateQueueTypes, r as generateVoidAuthDatabaseModule, s as generateDbDts, t as generateRouteTypes } from "./route-types-COI2DsZv.mjs";
 import { t as discoverSchema } from "./discover-CJHyvYfR.mjs";

package/dist/{preset-BGrvB4Bl.mjs → preset-BjyR3lzz.mjs}

@@ -1,6 +1,6 @@
-import { a as join, c as resolve, n as dirname } from "./dist-DaKKDf8D.mjs";
+import { a as join, c as resolve, n as dirname, s as relative } from "./dist-DaKKDf8D.mjs";
 import { n as readProjectPaths } from "./project-paths-BQd7OmIo.mjs";
-import { i as hasSsrEntry } from "./entry-D7yy4xVH.mjs";
+import { i as hasSsrEntry, r as getSsrServerEntryPath } from "./entry-D7yy4xVH.mjs";
 import { i as readPackageJson, n as hasPackageDependency, t as getPackageDependencies } from "./package-json-Cx1osYo6.mjs";
 import { createRequire } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
@@ -446,6 +446,15 @@ function formatProjectCommand(root, command) {
 /**
 * Detect a static deploy preset based on the project root.
 * Returns null when the project requires a full worker deploy.
+*
+* `strictBackend` refuses (throws) instead of returning an SSG preset when the
+* project ALSO has backend sources. SSG detection (step 2) deliberately runs
+* before the backend check (step 3), so without this an SSG repo that grew a
+* single `routes/api/*.ts` would deploy as a pure static site with the backend
+* silently dropped and no diagnostic. Opt-in because only the UNCONFIGURED
+* auto-detect path is ambiguous: `--dir` and a configured
+* `inference.appType: "static" | "spa"` are the user stating what they want, and
+* must keep working silently.
 */
 function detectPreset(root, options) {
 	if (options?.dir) return {
@@ -457,6 +466,10 @@ function detectPreset(root, options) {
 	if (pkg) {
 		const allDeps = getPackageDependencies(pkg);
 		for (const preset of Object.values(SSG_PRESETS)) if (preset.dep in allDeps) {
+			if (options?.strictBackend) {
+				const backendSources = findBackendSources(root);
+				if (backendSources.length > 0) throw new Error(ssgWithBackendMessage(preset.dep, backendSources));
+			}
 			const overrides = preset.resolve?.(root);
 			const cmd = overrides?.buildCommand ?? preset.buildCommand;
 			const out = overrides?.outputDir ?? preset.outputDir;
@@ -486,6 +499,25 @@ function detectPreset(root, options) {
 	return null;
 }
 /**
+* The refusal shown when an SSG project also carries backend sources and no
+* `inference.appType` says which one to deploy. Names the exact directories
+* found and both ways out.
+*/
+function ssgWithBackendMessage(ssgDep, backendSources) {
+	return [
+		`deploy: "${ssgDep}" was detected, but this project also has backend code: ${backendSources.join(", ")}.`,
+		"A static deploy would silently drop it, so Void will not guess. Pick one in void.json:",
+		"",
+		"  Deploy the static output only (the backend is NOT deployed):",
+		"    { \"inference\": { \"appType\": \"static\" } }",
+		"",
+		"  Deploy both — the SSG emits the site, then Void packages it with the worker:",
+		"    { \"inference\": { \"appType\": \"void\", \"build\": \"<ssg> build && vite build\" } }",
+		"    ...and in vite.config.ts add voidPlugin() plus `publicDir: \"<ssg output dir>\"`,",
+		"    so the generated site is copied into the client build alongside the worker."
+	].join("\n");
+}
+/**
 * Resolve a local node_modules/.bin executable path.
 * Falls back to bare command name if the bin doesn't exist locally.
 */
@@ -523,6 +555,27 @@ function detectViteBinary(root) {
 	return "vite";
 }
 /**
+* Every backend source in the project that requires a full worker deploy, named
+* relative to the root (e.g. `routes/`, `src/main.ssr.tsx`).
+*
+* Returned as a list rather than a boolean so a caller that has to REJECT a
+* static deploy can tell the user exactly what would have been dropped.
+*/
+function findBackendSources(root) {
+	const paths = readProjectPaths(root);
+	const found = [];
+	for (const dir of [
+		paths.routesDir,
+		paths.pagesDir,
+		paths.middlewareDir,
+		paths.cronsDir,
+		paths.queuesDir
+	]) if (existsSync(dir)) found.push(`${relative(root, dir)}/`);
+	const ssrEntry = getSsrServerEntryPath(root, paths);
+	if (ssrEntry) found.push(relative(root, ssrEntry));
+	return found;
+}
+/**
 * Check whether the project has backend files that require a full worker deploy.
 */
 function hasBackendFiles(root) {

package/dist/{provision-BLrCEBbI.mjs → provision-rShh6MKY.mjs}

@@ -1,7 +1,7 @@
 import { a as join, c as resolve, n as dirname, o as normalize, t as basename } from "./dist-DaKKDf8D.mjs";
-import { b as readProvisionedBindingEntry, f as assertNoDuplicateMembers, w as writeProvisionedWranglerConfig } from "./deploy-DT8wsPZd.mjs";
+import { b as readProvisionedBindingEntry, f as assertNoDuplicateMembers, w as writeProvisionedWranglerConfig } from "./deploy-u7Rv9q_q.mjs";
 import { i as voidWarn, r as voidLog } from "./log-ChfPKsVd.mjs";
-import { o as resolveWranglerArgv, u as scanWranglerDotenvKeys } from "./preset-BGrvB4Bl.mjs";
+import { o as resolveWranglerArgv, u as scanWranglerDotenvKeys } from "./preset-BjyR3lzz.mjs";
 import { createRequire } from "node:module";
 import { closeSync, existsSync, fsyncSync, lstatSync, openSync, readFileSync, readlinkSync, realpathSync, renameSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.11",
+  "version": "0.10.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -356,7 +356,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.11"
+    "@void/md": "0.10.12"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/schema.json

@@ -144,6 +144,11 @@
       "type": "object",
       "description": "Routing configuration — headers, redirects, rewrites, fallbacks, revalidation, prerendering.",
       "properties": {
+        "notFound": {
+          "type": "string",
+          "enum": ["single-page-application", "404-page", "none"],
+          "description": "Override how the asset layer answers a request that matched no asset and no worker route. Void infers \"single-page-application\" when the worker does not own HTML routing; set \"404-page\" for a static-site-generator build so unknown URLs serve 404.html with a real HTTP 404 instead of index.html with a 200. Does not change run_worker_first. Ignored for SvelteKit, Nuxt, Analog, and Astro deploys, which pin not_found_handling to \"none\" because the framework's own worker owns unmatched HTML."
+        },
         "revalidate": {
           "description": "Edge caching TTL in seconds. A number sets a global TTL for all SSR pages. An object maps URL patterns to TTLs (first match wins). Set to 0 to disable caching for a path.",
           "oneOf": [

package/skills/void/docs/guide/app-types.md

@@ -73,6 +73,48 @@ At the edge, the resolution order is:
 
 **Deploy:** `void deploy` or `void deploy --dir <path>` uploads static files directly. Assets are served from the edge with automatic caching.
 
+## Adding a backend to a static site
+
+A static site generator plus a few API routes is a Void app, not a static site. Auto-detection sees the SSG dependency first (priority 2 below), so if you leave `inference.appType` unset, `void deploy` refuses rather than deploying the site and silently dropping `routes/`. Tell it which you meant.
+
+To deploy the site **and** the backend, run both builds from one command and let Void's build fold the generated site into its client output:
+
+```json
+// void.json
+{
+  "inference": {
+    "appType": "void",
+    "build": "vitepress build && vite build"
+  }
+}
+```
+
+```ts
+// vite.config.ts
+import { defineConfig } from 'vite';
+import { voidPlugin } from 'void';
+
+export default defineConfig({
+  plugins: [voidPlugin()],
+  // The SSG's output becomes the static assets of the Void build.
+  publicDir: '.vitepress/dist',
+});
+```
+
+`vitepress build` emits the site, then `vite build` copies `publicDir` into `dist/client` and emits the worker into `dist/ssr`. Keep `voidPlugin()` in the **root** `vite.config.ts` only — not in the generator's own config (e.g. `.vitepress/config.ts`).
+
+Because the worker now owns unmatched requests, add [`routing.notFound`](../reference/config.md#routing-notfound) if you want the generator's `404.html` instead of the SPA-style `index.html` fallback:
+
+```json
+{ "routing": { "notFound": "404-page" } }
+```
+
+To deploy the static output only and **not** the backend, say so explicitly:
+
+```json
+{ "inference": { "appType": "static" } }
+```
+
 ## Auto-Detection
 
 When running `void deploy` and no `inference.appType` is set in `void.json`, the detection logic runs in this order:
@@ -81,6 +123,7 @@ When running `void deploy` and no `inference.appType` is set in `void.json`, the
 | -------- | --------------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
 | 1        | `--dir` flag                                                                                                    | Static (or SPA with `--spa`)                |
 | 2        | Known SSG in dependencies (`vitepress`, `@docusaurus/core`)                                                     | Static, builds with SSG CLI                 |
+| 2a       | ...and backend files also exist                                                                                 | Refused — set `inference.appType` yourself  |
 | 3        | `@tanstack/react-start`, `@react-router/dev`, `@sveltejs/kit`, `nuxt`, `@analogjs/platform`, or `astro` in deps | Framework                                   |
 | 4        | Backend files exist (`routes/`, `pages/`, `middleware/`, `crons/`, `queues/`, SSR entry)                        | Void app                                    |
 | 5        | `vite` or `vite-plus` in dependencies, no backend files                                                         | SPA, builds with `vite build` or `vp build` |

package/skills/void/docs/guide/edge/static-assets.md

@@ -97,6 +97,29 @@ This is the path needed for preview auth and other middleware. Cloudflare's plat
 
 For Void apps with only `/api` routes, Void keeps the platform SPA fallback and scopes `run_worker_first` to `/api` and `/api/*`. Static assets and non-API SPA navigations stay on the asset platform. API requests, including browser document navigations such as OAuth callbacks, reach the worker instead of being rewritten to `index.html`.
 
+### Unmatched requests
+
+`not_found_handling` decides what the asset layer does with a request that matched no asset and no worker route. Void infers it:
+
+| App shape                                         | Inferred value                   | Result for an unknown URL        |
+| ------------------------------------------------- | -------------------------------- | -------------------------------- |
+| Pages or SSR                                      | `none`                           | The worker's own 404             |
+| Worker owns HTML, no `pages/`, no SSR entry       | `none` + worker fallback         | `index.html` with status **200** |
+| Asset-first (only `/api` routes, or none)         | `single-page-application`        | `index.html` with status **200** |
+| Framework deploy (SvelteKit, Nuxt, Analog, Astro) | `none` — pinned, not overridable | The framework worker's own 404   |
+
+The middle row is a worker with `middleware/`, a route outside `/api`, a document websocket, or Live, but no `pages/` and no SSR entry. `run_worker_first: ['/**']` sends everything to the worker, which bypasses the platform's SPA switch, so the generated worker does that fallback itself for HTML navigations — after your middleware has run, so auth gates and OAuth callbacks still see the request first.
+
+The SPA fallback is right for a single-page app, where deep links must boot the client router. It is wrong for a site whose HTML was generated per page: unknown URLs return 200 instead of 404, and the generator's `404.html` is never served. Nothing in a built asset tree distinguishes the two, so Void does not guess — override it with [`routing.notFound`](../../reference/config.md#routing-notfound):
+
+```json
+{ "routing": { "notFound": "404-page" } }
+```
+
+Accepted values are `"single-page-application"`, `"404-page"`, and `"none"`. `run_worker_first` keeps its inferred value, so API routes, auth, and `/__void/*` still reach the worker first. Setting anything other than `"single-page-application"` also turns off the worker-side `index.html` fallback described above — otherwise it would answer the request before `not_found_handling` was ever consulted. With `"404-page"` the worker serves whatever the asset binding returns for the unmatched path, which is Cloudflare's nearest `404.html` — but only for HTML navigations (requests whose `Accept` includes `text/html`), so an API route that deliberately returns a 404 keeps its own body, status and headers. If the build has no `404.html`, the worker's own 404 is kept.
+
+The last row is the exception: `routing.notFound` is **ignored** for SvelteKit, Nuxt, Analog, and Astro deploys, and `void deploy` warns when you set it. Those deploys emit no `run_worker_first`, so the asset layer already answers first and real prerendered files win — `not_found_handling` would only change what the framework's own `env.ASSETS.fetch()` delegation returns, where `"single-page-application"` turns genuine 404s into the prerendered home page at 200 and `"404-page"` takes the 404 away from the framework's own error route. TanStack Start and React Router deploys are not affected; they follow the rows above.
+
 ### Generated config
 
 Void owns the generated asset routing policy during dev and build. If a root `wrangler.jsonc` contains stale `not_found_handling` or `run_worker_first` values, Void replaces those fields so generated config cannot accidentally change which layer sees a request first.

package/skills/void/docs/integrations/frameworks/overview.md

@@ -77,6 +77,7 @@ Most configuration is inferred automatically. Use `void.json` to override defaul
 | `routing.prerender`  | Paths to prerender as static HTML at deploy time                                                                                                              |
 | `routing.revalidate` | Default revalidation TTL in seconds for cached responses                                                                                                      |
 | `inference.bindings` | Override inferred bindings. You only need this if auto-detection is not doing what you want. Accepts `true` or a custom binding name such as `"db": "MY_DB"`. |
+| `routing.notFound`   | **Ignored.** SvelteKit, Nuxt, Analog, and Astro pin `not_found_handling` to `"none"` — the framework worker owns unmatched HTML. `void deploy` warns if set.  |
 
 See [Configuration](../../reference/config.md) for the full reference.
 

package/skills/void/docs/reference/config.md

@@ -378,6 +378,24 @@ Paths to prerender as static HTML at deploy time. Each path must start with `/`.
 }
 ```
 
+#### `routing.notFound`
+
+Override how the asset layer answers a request that matched no asset and no worker route. One of `"single-page-application"`, `"404-page"`, or `"none"`. If omitted, Void infers it — see [Static Assets](../guide/edge/static-assets.md#unmatched-requests).
+
+```json
+{
+  "routing": {
+    "notFound": "404-page"
+  }
+}
+```
+
+Set `"404-page"` when your assets come from a static site generator (VitePress, Docusaurus, …) and you want unknown URLs to serve the generator's own `404.html` with a real HTTP 404. Without it, an app whose only backend is API routes keeps the inferred SPA fallback, so every unknown URL returns `index.html` with a `200` — correct for a single-page app, wrong for a generated site, and bad for crawlers.
+
+`run_worker_first` is untouched, so API routes, auth, and `/__void/*` still reach the worker first. When the worker owns HTML routing it also serves the resolved behavior itself, since `run_worker_first: ["/**"]` means the platform switch never runs — see [Unmatched requests](../guide/edge/static-assets.md#unmatched-requests).
+
+This does **not** apply to SvelteKit, Nuxt, Analog, or Astro deploys: those pin `not_found_handling` to `"none"` because the framework's own worker owns unmatched HTML, and `void deploy` warns if you set `routing.notFound` anyway.
+
 ### `inference`
 
 Configuration for build-time inference, including how Void detects your app type, bindings, and build process.
@@ -403,12 +421,20 @@ Custom names are used in the deploy manifest, Wrangler config generation/sync, r
 
 #### `inference.build`
 
-Override the build command. Useful for frameworks with their own CLIs (Nuxt, Astro) or static apps with custom build scripts. If omitted, the CLI uses the detected default build command for the current app type.
+Override the build command. Useful for frameworks with their own CLIs (Nuxt, Astro) or static apps with custom build scripts. If omitted, the CLI uses the detected default build command for the current app type. It applies to every app type, including `"void"` (where the default is `vite build`).
 
 ```json
 { "inference": { "build": "nuxt build --preset cloudflare-module" } }
 ```
 
+The command is run through a shell from the project root, with the project's own `node_modules/.bin` on `PATH`, so bare binaries and `&&` chains work:
+
+```json
+{ "inference": { "build": "vitepress build && vite build" } }
+```
+
+That chain is how a static site generator and a Void backend ship together — see [Adding a backend to a static site](../guide/app-types.md#adding-a-backend-to-a-static-site).
+
 #### `inference.scanDirs`
 
 Override which directories are scanned for [binding inference](./resource-inference.md). Paths are relative to the project root. Replaces the default directories for the current mode.