1.4.0: not_found, server-only response options, compression

- Server functions can return not_found: true to render the 404 page
  with status 404.
- Page components and window.__PAGE_PROPS__ (and HMR updates) only get
  props, query, url and error. response_options, redirect, cache settings
  and res_transform stay on the server, so cookies and private headers no
  longer end up in the HTML. BunextPageProps is narrowed to match
  (breaking for code that read server-only fields from component props).
- response_options headers go through a Headers object, so repeated
  headers such as several Set-Cookie survive.
- Redirects: status_code wins over permanent; response_options headers
  and res_transform apply to redirects too.
- Gzip for compressible text responses; compress: false to turn it off.
- Files the router matches but never bundles (.server.ts, __root,
  excluded paths and directories) return 404 instead of looping through
  dev rebuild retries.
- Missing public files return 404 rather than 403, so dotted page paths
  like /users/john.doe fall through to pages again.
- importFresh detects rewrites within the filesystem's mtime granularity.
- README: self-hosted React (not esm.sh), snake_case option names, static
  file serving, cache headers, the new options.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/server/web-pages/generate-web-html.tsx

@@ -9,6 +9,7 @@ import { AppData } from "../../../data/app-data";
 import _ from "lodash";
 import grabDirNames from "../../../utils/grab-dir-names";
 import { NoSEORobotsValue } from "../../../utils/disable-seo";
+import grabClientPageProps from "../../../utils/grab-client-page-props";
 
 const { ROOT_DIR } = grabDirNames();
 
@@ -38,10 +39,15 @@ export default async function genWebHTML({
         throw new Error(`Main Component not found!`);
     }
 
+    // Only the client-safe part reaches the components and the HTML;
+    // response_options (headers, cookies) etc. stay on the server. Head and
+    // meta still get the full server result: they only render here.
+    const client_props = grabClientPageProps(pageProps);
+
     let serializedProps = "{}";
 
     try {
-        serializedProps = serializeForScript(pageProps || {});
+        serializedProps = serializeForScript(client_props);
     } catch (error) {}
 
     const page_hydration_script = await grabWebPageHydrationScript();
@@ -157,7 +163,7 @@ export default async function genWebHTML({
                     id={ClientRootElementIDName}
                     suppressHydrationWarning={!dev}
                 >
-                    <Main {...pageProps} />
+                    <Main {...client_props} />
                 </div>
             </body>
         </html>