zudoku 0.82.2 → 0.82.3

package/dist/cli/worker.js

@@ -2921,6 +2921,7 @@ var renderPage = async ({ urlPath }) => {
       outputPath,
       redirect: { from: pathname, to: redirectTo },
       statusCode: response.status,
+      indexStatusCode: response.status,
       html: ""
     };
   }
@@ -2931,6 +2932,7 @@ var renderPage = async ({ urlPath }) => {
   }
   const fileContent = response.body ? await response.text() : "";
   let html = fileContent;
+  let indexStatusCode = response.status;
   if (isProtectedRoute) {
     const bypassRequest = new Request(url);
     const bypassResponse = await server.handleRequest({
@@ -2946,12 +2948,14 @@ var renderPage = async ({ urlPath }) => {
       );
     }
     html = bypassResponse.body ? await bypassResponse.text() : "";
+    indexStatusCode = bypassResponse.status;
   }
   await fs.mkdir(path.dirname(outputPath), { recursive: true });
   await fs.writeFile(outputPath, fileContent);
   return {
     outputPath,
     statusCode: response.status,
+    indexStatusCode,
     redirect: void 0,
     html
   };

package/dist/declarations/app/wrapProtectedRoutes.d.ts

@@ -1,4 +1,9 @@
 import type { RouteObject } from "react-router";
 import type { ProtectedRoutesInput } from "../config/validators/ProtectedRoutesSchema.js";
 export declare const wrapProtectedRoutes: (routes: RouteObject[], protectedRoutes: ProtectedRoutesInput, isAuthenticated: boolean, basePath?: string) => RouteObject[];
+export declare const wrapProtectedRoutesForRender: (routes: RouteObject[], protectedRoutes: ProtectedRoutesInput, { isAuthenticated, bypassProtection, basePath, }: {
+    isAuthenticated: boolean;
+    bypassProtection?: boolean;
+    basePath?: string;
+}) => RouteObject[];
 export declare const warnInlineProtectedRoutes: (routes: RouteObject[], protectedRoutes: ProtectedRoutesInput, basePath?: string) => void;

package/dist/declarations/config/plugin-versions.d.ts

@@ -0,0 +1,5 @@
+export type PluginVersion = {
+    name: string;
+    version: string;
+};
+export declare const getPluginVersions: (pluginDirs: readonly string[]) => Promise<PluginVersion[]>;

package/dist/declarations/vite/package-root.d.ts

@@ -0,0 +1 @@
+export declare const findPackageRoot: (startDir: string) => Promise<string | undefined>;

package/docs/components/landing-page.mdx

@@ -10,7 +10,7 @@ A ready-made, customizable landing page for your developer portal. It comes in t
 covering the most common layouts: a centered hero, a two-column split hero, and a compact
 documentation hub.
 
-Use it as the `element` of a [custom page](/docs/custom-pages) — typically your home page:
+Use it as the `element` of a [custom page](/docs/guides/custom-pages) — typically your home page:
 
 ```tsx title=zudoku.config.tsx
 import { LandingPage } from "zudoku/components";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zudoku",
-  "version": "0.82.2",
+  "version": "0.82.3",
   "type": "module",
   "engines": {
     "node": ">=20.19.0 <21.0.0 || >=22.12.0"
@@ -177,8 +177,9 @@
     "@envelop/core": "5.5.1",
     "@graphiql/toolkit": "0.12.1",
     "@graphql-typed-document-node/core": "3.2.0",
-    "@hono/node-server": "2.0.3",
+    "@hono/node-server": "2.0.8",
     "@lekoarts/rehype-meta-as-attributes": "3.0.3",
+    "@mdx-js/mdx": "3.1.0",
     "@mdx-js/react": "3.1.1",
     "@mdx-js/rollup": "3.1.1",
     "@pothos/core": "4.12.0",
@@ -206,14 +207,14 @@
     "@radix-ui/react-toggle-group": "1.1.11",
     "@radix-ui/react-tooltip": "1.2.8",
     "@radix-ui/react-visually-hidden": "1.2.4",
-    "@scalar/openapi-parser": "0.23.13",
+    "@scalar/openapi-parser": "0.28.4",
     "@scalar/snippetz": "0.9.11",
-    "@sentry/node": "10.52.0",
+    "@sentry/node": "10.62.0",
     "@shikijs/langs": "4.2.0",
     "@shikijs/rehype": "4.2.0",
     "@shikijs/themes": "4.2.0",
     "@shikijs/transformers": "4.2.0",
-    "@tailwindcss/typography": "0.5.19",
+    "@tailwindcss/typography": "0.5.20",
     "@tailwindcss/vite": "4.3.0",
     "@tanem/react-nprogress": "6.0.3",
     "@tanstack/react-query": "5.101.0",
@@ -242,7 +243,7 @@
     "hast-util-heading-rank": "3.0.0",
     "hast-util-to-jsx-runtime": "2.3.6",
     "hast-util-to-string": "3.0.1",
-    "hono": "4.12.25",
+    "hono": "4.12.27",
     "http-terminator": "3.2.0",
     "javascript-stringify": "2.1.0",
     "jose": "6.2.3",
@@ -277,7 +278,7 @@
     "remark-frontmatter": "5.0.0",
     "remark-gfm": "4.0.1",
     "remark-mdx-frontmatter": "5.2.0",
-    "semver": "7.8.2",
+    "semver": "7.8.5",
     "shiki": "4.2.0",
     "sitemap": "9.0.1",
     "strip-ansi": "7.2.0",
@@ -295,7 +296,7 @@
     "zustand": "5.0.14"
   },
   "devDependencies": {
-    "@graphql-codegen/cli": "7.1.1",
+    "@graphql-codegen/cli": "7.1.3",
     "@inkeep/cxkit-types": "0.5.119",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
@@ -307,14 +308,14 @@
     "@types/hast": "3.0.4",
     "@types/json-schema": "7.0.15",
     "@types/mdast": "4.0.4",
-    "@types/mdx": "2.0.13",
+    "@types/mdx": "2.0.14",
     "@types/node": "22.19.1",
     "@types/react-is": "19.2.0",
     "@types/semver": "7.7.1",
     "@types/unist": "3.0.3",
     "@types/yargs": "17.0.35",
-    "@typescript/native-preview": "7.0.0-dev.20260610.1",
-    "@vitest/coverage-v8": "4.1.8",
+    "@typescript/native-preview": "7.0.0-dev.20260624.1",
+    "@vitest/coverage-v8": "4.1.9",
     "happy-dom": "20.10.2",
     "oxc-parser": "^0.135.0",
     "react": "19.2.7",

package/src/app/entry.server.tsx

@@ -26,7 +26,7 @@ import type { Adapter } from "./adapter.js";
 import { getRoutesByConfig } from "./main.js";
 import { protectChunks as rawProtectChunks } from "./protectChunks.js";
 import { getSsrCacheControl } from "./ssrCacheControl.js";
-import { wrapProtectedRoutes } from "./wrapProtectedRoutes.js";
+import { wrapProtectedRoutesForRender } from "./wrapProtectedRoutes.js";
 
 export { getRoutesByConfig };
 export type { Adapter, AdapterContext } from "./adapter.js";
@@ -104,12 +104,16 @@ export const handleRequest = async ({
   const ssrAuth = await resolveSsrAuth(request);
 
   // No-op lazy() on protected subtrees for unauthed requests so loaders
-  // don't run for a 401 render.
-  const effectiveRoutes = wrapProtectedRoutes(
+  // don't run for a 401 render. A bypass render (search-index pass) keeps the
+  // real content so Pagefind can index protected routes.
+  const effectiveRoutes = wrapProtectedRoutesForRender(
     routes,
     config.protectedRoutes,
-    !!ssrAuth?.profile,
-    basePath,
+    {
+      isAuthenticated: !!ssrAuth?.profile,
+      bypassProtection,
+      basePath,
+    },
   );
 
   const { query, dataRoutes } = createStaticHandler(effectiveRoutes, {

package/src/app/wrapProtectedRoutes.ts

@@ -47,6 +47,31 @@ export const wrapProtectedRoutes = (
   });
 };
 
+// Route-wrapping decision for an SSR/SSG render. The prerender does a second
+// "bypass" pass over protected routes to build the search index; that pass must
+// render the real (unstubbed) protected content, so it is treated as
+// authenticated here. Without this, the bypass pass renders an empty shell and
+// the Pagefind index for protected routes ends up empty (issue #2672).
+export const wrapProtectedRoutesForRender = (
+  routes: RouteObject[],
+  protectedRoutes: ProtectedRoutesInput,
+  {
+    isAuthenticated,
+    bypassProtection,
+    basePath,
+  }: {
+    isAuthenticated: boolean;
+    bypassProtection?: boolean;
+    basePath?: string;
+  },
+): RouteObject[] =>
+  wrapProtectedRoutes(
+    routes,
+    protectedRoutes,
+    isAuthenticated || bypassProtection === true,
+    basePath,
+  );
+
 // Inline elements can't be chunk-isolated; RouteGuard still blocks render,
 // but the JS ships in the main bundle. Only meaningful in dev.
 export const warnInlineProtectedRoutes = (

package/src/config/loader.ts

@@ -12,6 +12,7 @@ import { getZudokuRootDir } from "../cli/common/package-json.js";
 import { runPluginTransformConfig } from "../lib/core/transform-config.js";
 import invariant from "../lib/util/invariant.js";
 import { fileExists } from "./file-exists.js";
+import { getPluginVersions } from "./plugin-versions.js";
 import type {
   ResolvedZudokuConfig,
   ZudokuConfig,
@@ -240,6 +241,20 @@ export async function loadZudokuConfig(
       { timestamp: true },
     );
 
+    // Surface which versions of external plugins (created via `createPlugin`)
+    // the build is running, so build logs can pin down e.g. the monetization
+    // plugin version without each plugin having to log it itself.
+    const pluginVersions = await getPluginVersions(config.__pluginDirs ?? []);
+    if (pluginVersions.length > 0) {
+      logger.info(
+        colors.cyan(`loaded plugins `) +
+          colors.dim(
+            pluginVersions.map((p) => `${p.name}@${p.version}`).join(", "),
+          ),
+        { timestamp: true },
+      );
+    }
+
     return { config, envPrefix, publicEnv };
   } catch (error) {
     const lastValid = getConfig();

package/src/config/plugin-versions.ts

@@ -0,0 +1,38 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { findPackageRoot } from "../vite/package-root.js";
+
+export type PluginVersion = { name: string; version: string };
+
+// Reads the `name`@`version` from each plugin dir's nearest package.json,
+// deduped by package name.
+export const getPluginVersions = async (
+  pluginDirs: readonly string[],
+): Promise<PluginVersion[]> => {
+  const roots = await Promise.all(
+    [...new Set(pluginDirs)].map(findPackageRoot),
+  );
+
+  const resolved = await Promise.all(
+    roots.map(async (root): Promise<PluginVersion | undefined> => {
+      if (!root) return undefined;
+      try {
+        const pkg = JSON.parse(
+          await readFile(path.join(root, "package.json"), "utf-8"),
+        ) as { name?: string; version?: string };
+        if (!pkg.name) return undefined;
+        return { name: pkg.name, version: pkg.version ?? "unknown" };
+      } catch {
+        // A plugin without a readable package.json simply isn't reported.
+        return undefined;
+      }
+    }),
+  );
+
+  const byName = new Map<string, PluginVersion>();
+  for (const version of resolved) {
+    if (version && !byName.has(version.name)) byName.set(version.name, version);
+  }
+
+  return [...byName.values()];
+};

package/src/lib/components/navigation/NavigationCategory.tsx

@@ -63,11 +63,12 @@ const NavigationCategoryInner = ({
         setOpen((prev) => !prev);
         setHasInteracted(true);
       }}
-      variant="ghost"
+      variant="none"
       size="icon"
       aria-label={open ? "Collapse section" : "Expand section"}
       aria-expanded={open}
-      className="size-6 hover:bg-[hsl(from_var(--accent)_h_s_calc(l+6*var(--dark)))]"
+      // -my-0.5 keeps the chevron from making folder rows taller than plain ones
+      className="size-6 -my-0.5"
     >
       <ChevronRightIcon
         size={16}

package/src/lib/components/navigation/StackRows.tsx

@@ -24,7 +24,7 @@ export const StackDrillRow = ({
     className={cn(navigationListItem(), "group justify-between", className)}
   >
     <span className="flex items-center gap-2 truncate">{children}</span>
-    <span className="grid size-6 shrink-0 place-items-center">
+    <span className="grid size-6 -my-0.5 shrink-0 place-items-center">
       <ChevronRightIcon size={16} />
     </span>
   </Link>

package/src/vite/api/SchemaManager.ts

@@ -1,10 +1,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
-import {
-  $RefParser,
-  type JSONSchema,
-} from "@apidevtools/json-schema-ref-parser";
-import { upgrade, validate } from "@scalar/openapi-parser";
+import { $RefParser } from "@apidevtools/json-schema-ref-parser";
+import { upgrade } from "@scalar/openapi-parser";
 import { deepEqual } from "fast-equals";
 import type { LoadedConfig } from "../../config/config.js";
 import type { Processor } from "../../config/validators/BuildSchema.js";
@@ -98,7 +95,14 @@ export class SchemaManager {
     this.storeDir = storeDir;
     this.config = config;
     this.processors = [
-      ({ schema }) => upgrade(schema).specification as OpenAPIDocument,
+      ({ schema }) => {
+        const upgraded = upgrade(schema as unknown as Record<string, unknown>)
+          .specification as OpenAPIDocument;
+        if (upgraded?.info && typeof upgraded.info.version !== "string") {
+          upgraded.info.version = "0.0.1";
+        }
+        return upgraded;
+      },
       flattenAllOfProcessor,
       ...processors,
     ];
@@ -147,7 +151,6 @@ export class SchemaManager {
         this.referencedBy.get(file)?.add(filePath);
       });
 
-    const validatedSchema = await this.validateSchema(schema, filePath);
     const processedSchema = await this.processors.reduce(
       async (schema, processor) =>
         processor({
@@ -162,7 +165,7 @@ export class SchemaManager {
               },
             }),
         }),
-      Promise.resolve(validatedSchema),
+      Promise.resolve(schema as OpenAPIDocument),
     );
 
     const processedTime = Date.now();
@@ -365,21 +368,4 @@ export class SchemaManager {
       `${fileName}${suffix}${extension}`,
     );
   };
-
-  private validateSchema = async (
-    schema: JSONSchema,
-    filePath: string,
-  ): Promise<OpenAPIDocument> => {
-    const validated = await validate(schema);
-    if (validated.errors?.length) {
-      // biome-ignore lint/suspicious/noConsole: Logging allowed here
-      console.warn(`Schema warnings in ${filePath}:`);
-      for (const error of validated.errors) {
-        // biome-ignore lint/suspicious/noConsole: Logging allowed here
-        console.warn(error);
-      }
-    }
-
-    return schema as OpenAPIDocument;
-  };
 }

package/src/vite/plugin-mdx.ts

@@ -1,8 +1,10 @@
 import rehypeMetaAsAttributes from "@lekoarts/rehype-meta-as-attributes";
+import { nodeTypes } from "@mdx-js/mdx";
 import mdx from "@mdx-js/rollup";
 import type { Root as HastRoot } from "hast";
 import { toString as hastToString } from "hast-util-to-string";
 import rehypeMdxImportMedia from "rehype-mdx-import-media";
+import rehypeRaw from "rehype-raw";
 import rehypeSlug from "rehype-slug";
 import remarkComment from "remark-comment";
 import remarkDirective from "remark-directive";
@@ -128,6 +130,7 @@ const viteMdxPlugin = async (): Promise<Plugin> => {
       : [...defaultRemarkPlugins, ...(buildConfig?.remarkPlugins ?? [])];
 
   const defaultRehypePlugins = [
+    [rehypeRaw, { passThrough: nodeTypes }],
     rehypeSlug,
     rehypeExtractTocWithJsx,
     rehypeExtractTocWithJsxExport,

package/src/vite/prerender/prerender.ts

@@ -20,7 +20,11 @@ import {
 } from "../plugin-markdown-export.js";
 import { isTTY, throttle, writeLine } from "../reporter.js";
 import { generateSitemap } from "../sitemap.js";
-import { routesToPaths, routesToRewrites } from "./utils.js";
+import {
+  routesToPaths,
+  routesToRewrites,
+  selectPagesToIndex,
+} from "./utils.js";
 import type { StaticWorkerData, WorkerData } from "./worker.js";
 
 const Piscina = PiscinaImport as unknown as typeof PiscinaImport.default;
@@ -28,7 +32,13 @@ const Piscina = PiscinaImport as unknown as typeof PiscinaImport.default;
 export type WorkerResult = {
   outputPath: string;
   html: string;
+  // Status of the page as served statically (the file written to disk). For a
+  // protected route during SSG this is 401 (the sign-in page).
   statusCode: number;
+  // Status of the render whose HTML is fed to the search index. Equals
+  // `statusCode` for normal routes; for protected routes it's the bypass
+  // render (200) so the full content gets indexed (issue #2672).
+  indexStatusCode: number;
   redirect?: { from: string; to: string };
 };
 
@@ -173,9 +183,24 @@ export const prerender = async ({
   }
 
   if (pagefindIndex) {
-    const pagesToIndex = workerResults.flatMap(({ statusCode, html }, i) =>
-      statusCode < 400 ? { url: paths[i], html } : [],
+    const { include: pagesToIndex, exclude } = selectPagesToIndex(
+      workerResults,
+      paths,
     );
+
+    // Surface anything dropped from the index (e.g. a protected route whose
+    // bypass render returned >= 400). A page silently missing from the index
+    // is the exact symptom of #2672, so make it visible rather than quiet.
+    if (exclude.length > 0) {
+      const details = exclude
+        .map(({ url, status }) => `${url} (${status})`)
+        .join(", ");
+      logger.warn(
+        colors.yellow(
+          `⚠ ${exclude.length} route(s) excluded from the search index (render status >= 400): ${details}`,
+        ),
+      );
+    }
     // Batch size caps concurrent IPC writes to the pagefind child process;
     // higher values can overflow its pipe buffer and trigger ENOBUFS.
     const BATCH_SIZE = 40;

package/src/vite/prerender/utils.ts

@@ -74,3 +74,36 @@ export const routesToPaths = (routes: RouteObject[]): string[] =>
 
 export const routesToRewrites = (routes: RouteObject[]): RouteRewrite[] =>
   collectRewrites(resolveRoutes(routes));
+
+type IndexablePage = { indexStatusCode: number; html: string };
+
+type IndexSelection = {
+  include: { url: string; html: string }[];
+  exclude: { url: string; status: number }[];
+};
+
+// Splits prerendered pages into those added to the search index and those
+// skipped because their indexed render failed. `indexStatusCode` is the status
+// of the render whose HTML is indexed: for protected routes that's the bypass
+// render (200), not the gated main render (401), so protected pages aren't
+// silently dropped (issue #2672). Excluded pages are returned rather than
+// dropped in silence so the caller can warn about them, since a protected page
+// missing from the index is exactly the symptom this fix targets.
+export const selectPagesToIndex = (
+  pages: IndexablePage[],
+  paths: string[],
+): IndexSelection => {
+  const withUrl = pages.flatMap(({ indexStatusCode, html }, i) => {
+    const url = paths[i];
+    return url === undefined ? [] : [{ url, html, indexStatusCode }];
+  });
+
+  return {
+    include: withUrl
+      .filter((p) => p.indexStatusCode < 400)
+      .map(({ url, html }) => ({ url, html })),
+    exclude: withUrl
+      .filter((p) => p.indexStatusCode >= 400)
+      .map(({ url, indexStatusCode }) => ({ url, status: indexStatusCode })),
+  };
+};

package/src/vite/prerender/worker.ts

@@ -64,6 +64,7 @@ const renderPage = async ({ urlPath }: WorkerData): Promise<WorkerResult> => {
       outputPath,
       redirect: { from: pathname, to: redirectTo },
       statusCode: response.status,
+      indexStatusCode: response.status,
       html: "",
     };
   }
@@ -77,8 +78,12 @@ const renderPage = async ({ urlPath }: WorkerData): Promise<WorkerResult> => {
   // Get HTML content for file write
   const fileContent = response.body ? await response.text() : "";
 
-  // For protected routes, do a second render with protection bypassed for search index
+  // For protected routes, do a second render with protection bypassed so the
+  // search index gets the full content instead of the gated sign-in page. The
+  // file on disk stays the gated (401) render; only `html`/`indexStatusCode`
+  // reflect the bypass render.
   let html = fileContent;
+  let indexStatusCode = response.status;
   if (isProtectedRoute) {
     const bypassRequest = new Request(url);
     const bypassResponse = await server.handleRequest({
@@ -96,6 +101,7 @@ const renderPage = async ({ urlPath }: WorkerData): Promise<WorkerResult> => {
     }
 
     html = bypassResponse.body ? await bypassResponse.text() : "";
+    indexStatusCode = bypassResponse.status;
   }
 
   // Write the file
@@ -105,6 +111,7 @@ const renderPage = async ({ urlPath }: WorkerData): Promise<WorkerResult> => {
   return {
     outputPath,
     statusCode: response.status,
+    indexStatusCode,
     redirect: undefined,
     html,
   };