[aralroca]

A wave of core improvements that came out of building a large content+tools app on Janux — each one is something the framework claimed or implied but didn't fully deliver, now with tests and docs.

Routing & server

• headers rules in janux.config.ts — same grammar and ordering as redirects: every matching rule contributes, later rules override a header both name, and except carves holes. The motivating case: Cross-Origin-Opener-Policy/Cross-Origin-Embedder-Policy everywhere (for SharedArrayBuffer) except the pages that embed third-party iframes. Docs: navigation → "Response headers".
• redirect() from pages with typed 3xx statuses. Docs: core-api.
• Declared rewrites hand HTTP handlers the resolved pathname — the request keeps the browser's URL, the handler's url.pathname is the rewritten one, the query survives.

Build

• images: false opts out of the image variant pre-encode entirely (apps that serve their public/ images verbatim were paying the encode on every build); a corrupt source image is skipped with a warning instead of failing the whole build; public/sw.js survives builds (retireServiceWorker now takes the app root).

Interop & client runtime

• Pages whose only client code is standalone foreign() hosts now ship the runtime. The server render registry tracks foreign hosts, the HTML shell gates its scripts on runtimeUrl rather than islands alone, island loaders register every def their module exports, and schema gains json() for pass-through payloads the app doesn't shape.
• The first React commit of a foreign root lands synchronously (flushSync) over the SSR markup. A concurrent first commit left the host empty for at least a frame; after an SPA navigation that collapsed the page to header+footer, and Chrome's scroll anchoring then dragged a freshly-restored scroll offset to the bottom of the page — "back goes to the footer". Regression test uses MutationObserver callbacks as checkpoints: the host is never observed empty.
• The navigation morph never diffs inside a live foreign host. React fibers keep node references: text rewritten behind their back makes later renders bail out against content they never wrote, and a same-position replacement by a different element re-parented React's children, so every unmount threw NotFoundError: removeChild. The morph now passes shouldSkipChildren for hosts with a live root — call-site props still flow through the synced data-jxf-props attribute push. This also turned a long-flaky interop test ("refreshes a preserved standalone foreign…") deterministic: the flake was this bug.
  • Depends on diff-dom-streaming ≥ 0.6.11 (feat: shouldSkipChildren — leave a node's children to another renderer brisa-build/diff-dom-streaming#26). The option is ignored gracefully below that; refresh the lockfile once it's released.
• react-dom joins the runtime pre-bundle includes (the flushSync import), keeping the mid-session re-optimize away.

DX

• janux dev picks up janux.config.ts edits live. Bun keys its module cache on the file path and ignores the ?mtime query the re-import used for cache busting, so every dev session was stuck with the config it booted with. The entry is now evicted explicitly (createRequire(...).cache) on every read. Docs: cli-and-deployment.

Tests

Full monorepo suite green (the only local failures are the pre-existing docs-playground e2e ones that run against a stale July apps/docs/dist — identical on main). New/extended: routing-rules (headers), server (declared headers, standalone-foreign runtime), app-config (config re-read mid-process), image-optimizer + service-worker + commands (escape hatches), registry (module def registration), interop/foreign (empty-host guard + the now-deterministic refresh test), deps (runtime includes census).

🤖 Generated with Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.