Update to Vercel

SKILL.md line diff

--- before
+++ after
@@ -1,170 +1,252 @@
 ---
 name: vercel-services
-description: "Vercel Services — deploy multiple services within a single Vercel project. Use for monorepo layouts or when combining a backend (Python, Go) with a frontend (Next.js, Vite) in one deployment."
+description: Configure and troubleshoot Vercel Services for multiple frontends and backends in one project. Use when composing a polyglot or multi-service application on one Vercel deployment; defining the `services` key, service-targeted rewrites, or service bindings in `vercel.json`; or running all services with `vercel dev`.
+summary: Compose multiple frontends and backends in one Vercel project (Beta)
 metadata:
   priority: 7
   docs:
     - "https://vercel.com/docs/services"
-  sitemap: "https://vercel.com/sitemap/docs.xml"
+    - "https://vercel.com/docs/services/routing"
+    - "https://vercel.com/docs/services/bindings"
+    - "https://vercel.com/docs/services/config-reference"
+    - "https://vercel.com/docs/services/experimental"
+    - "https://vercel.com/docs/services/pricing"
+  sitemap: "https://vercel.com/sitemap.xml"
   pathPatterns:
-    - 'backend/**'
-    - 'backend/main.py'
-    - 'backend/main.go'
-    - 'backend/go.mod'
-    - 'backend/pyproject.toml'
-    - 'backend/requirements.txt'
-    - 'frontend/**'
-    - 'apps/*/backend/**'
-    - 'apps/*/frontend/**'
-    - 'services/*/vercel.json'
-    - '*/pyproject.toml'
-    - '*/go.mod'
+    - 'vercel.json'
+    - 'apps/*/vercel.json'
   bashPatterns:
-    - '\bvercel\s+dev\b.*-L'
-    - '\bpip\s+install\b.*fastapi'
-    - '\buv\s+(sync|pip|run)\b'
-    - '\bgo\s+(run|build|mod)\b'
-    - '\bpython\s+-m\s+uvicorn\b'
-    - '\buvicorn\b'
-  importPatterns:
-    - "fastapi"
+    - '\b(?:vercel|vc)\s+dev\b[^\n]*(?:--local|-L)(?:\s|$)'
+  importPatterns: []
   promptSignals:
     phrases:
-      - "services api"
       - "vercel services"
-      - "multi-service"
-      - "python backend"
-      - "go backend"
-      - "fastapi"
-      - "deploy backend"
-      - "backend and frontend"
-      - "multiple services"
+      - "vercel service binding"
+      - "vercel service bindings"
+      - "multi-service vercel"
+      - "multiple services on vercel"
+      - "frontend and backend on vercel"
     allOf:
-      - [backend, frontend]
-      - [python, vercel]
-      - [go, vercel]
-      - [backend, deploy]
-      - [service, monorepo]
-      - [fastapi, deploy]
+      - [backend, vercel]
+      - [polyglot, vercel]
+      - [multiple, services, vercel]
+      - [services, vercel.json]
+      - [vercel, service, binding]
     anyOf:
       - "backend"
       - "monorepo"
+      - "polyglot"
       - "service"
-      - "python"
-      - "golang"
-    noneOf:
-      - "turborepo cache"
-      - "turbo.json"
-      - "aws lambda"
-      - "docker compose"
+      - "binding"
+      - "vercel"
+    noneOf: []
     minScore: 6
+retrieval:
+  aliases:
+    - Vercel Services
+    - multi-service project
+    - polyglot project
+    - service binding
+    - service rewrite
+  intents:
+    - deploy frontend and backend together in one project
+    - configure the services key in vercel.json
+    - configure service rewrites
+    - call the backend privately with a service binding
+    - keep a service private with no public route
+    - serve a service on a subdomain
+    - strip a route prefix before it reaches the backend service
+    - run all services locally
+  entities:
+    - services
+    - bindings
+    - destination.service
+    - root
+    - experimentalServices
+  examples:
+    - put a Next.js frontend and a FastAPI backend in one project
+    - deploy a Vite SPA with an Express API behind /api
+    - add a Go service to an existing Next.js project
+    - my frontend cannot reach the backend service
+    - the backend returns 404 for every /api route
+    - point api.example.com at the backend
 ---
 
-# Deploy multi-service projects with Vercel
+# Vercel Services
 
-Services let you deploy multiple independently-built units within a single Vercel project. The typical use case is combining different runtimes (e.g. Python + JavaScript) in one deployment with shared routing and environment variables, but services work for any combination — multiple services of the same runtime, different frameworks, or a mix.
+Use the `services` model whenever one application is made of multiple tightly coupled components, such as a frontend plus a backend, that should deploy to one Vercel project.
 
-This skill covers **project structure and configuration**. For the actual deployment, defer to the **deployments-cicd** skill.
+Services is [in Beta on all plans](https://vercel.com/docs/services). Say so when you recommend it.
 
-## How It Works
+Services build independently but ship together as one deployment. That buys skew protection between frontend and backend, preview environments where every service is in sync, atomic deployments and rollbacks of the whole app, and private service-to-service communication through bindings. Public traffic enters through one ordered route table.
 
-A service is an independently built unit within your project, deployed to the same domain under a unique subpath. At build time, Vercel builds each service separately. At request time, Vercel routes incoming requests to the correct service based on the URL path prefix (longest prefix wins).
+## Choose the right structure
 
-- Services are enabled via the `experimentalServices` field in `vercel.json` (see reference project).
-- `vercel dev -L` auto-detects frameworks and runs all services locally as one application, handling routing automatically. The `-L` flag (short for `--local`) runs without authenticating with Vercel Cloud.
-- Only `vercel.json` lives at the root. Each service manages its own dependencies independently.
+| Need | Use |
+| --- | --- |
+| Multiple tightly coupled components, such as a frontend and a backend, that should ship as one app | Vercel Services |
+| One framework can own the whole app, such as Next.js with Route Handlers | One normal Vercel project without Services |
+| Teams own their services and deploy and roll back on their own cadence | Separate Vercel projects in a monorepo |
+| Independently deployed frontends must render as one site | Vercel Microfrontends |
 
-## Configuration
+The benefits and the drawback are the same fact: every deployment ships all services together. Reach for separate projects only when you specifically need to deploy or roll back one service independently of the others.
 
-Define services in `vercel.json`:
+Do not introduce Services just to split one framework into arbitrary processes. Use it when an independently built component has a real runtime, framework, dependency, or ownership reason to exist.
 
-```json
+## Define services and public ingress
+
+If `vercel.json` already has an `experimentalServices` key, the project is on the earlier configuration model: read [references/experimental-services.md](references/experimental-services.md) before changing it.
+
+Each service requires a `root` relative to `vercel.json`. Let Vercel detect the framework unless pinning it is necessary. Set `entrypoint` relative to the service root when the runtime needs one.
+
+```json filename="vercel.json"
 {
-  "experimentalServices": {
-    "web": {
-      "entrypoint": "apps/web",
-      "routePrefix": "/"
+  "services": {
+    "frontend": {
+      "root": "apps/web",
+      "bindings": [
+        {
+          "type": "service",
+          "service": "backend",
+          "format": "url",
+          "env": "BACKEND_INTERNAL_URL"
+        }
+      ]
     },
-    "api": {
-      "entrypoint": "backend/main.py",
-      "routePrefix": "/server"
+    "backend": {
+      "root": "apps/backend",
+      "entrypoint": "main:app"
     }
-  }
+  },
+  "rewrites": [
+    { "source": "/api/(.*)", "destination": { "service": "backend" } },
+    { "source": "/(.*)", "destination": { "service": "frontend" } }
+  ]
 }
 ```
 
-The project's Framework Preset must be set to **Services** in the Vercel dashboard.
+The top-level rewrites expose the services. A service without a matching top-level rewrite is private: not reachable from the public internet, only through bindings.
 
-### Configuration fields
+Keep configuration ownership clear:
 
-| Field          | Required | Description                                                |
-|----------------|----------|------------------------------------------------------------|
-| `entrypoint`   | Yes      | Path to the service entrypoint file or directory.          |
-| `routePrefix`  | Yes      | URL path prefix for routing (e.g. `/`, `/api`, `/svc/go`). |
-| `framework`    | No       | Framework slug. Pins detection; auto-detected if unset.    |
-| `memory`       | No       | Max available RAM in MB (128–10,240).                      |
-| `maxDuration`  | No       | Execution timeout in seconds (1–900).                      |
-| `includeFiles` | No       | Glob patterns for files to include in the deployment.      |
-| `excludeFiles` | No       | Glob patterns for files to exclude from the deployment.    |
+- Keep public `rewrites`, `redirects`, `headers`, and other URL behavior at the top level.
+- Put `functions`, `installCommand`, `buildCommand`, `devCommand`, `ignoreCommand`, `outputDirectory`, and framework settings on the service that owns them.
+- Put service-local `headers`, `redirects`, `rewrites`, or `routes` inside a service only when they should run after public ingress selects that service.
+- Set `runtime: "container"` when a service must build from a Dockerfile or OCI image. Use `entrypoint` for a nonstandard Dockerfile and `command` to override the image command.
 
-Do not add unknown fields — they will cause the build to fail.
+## Route requests correctly
 
-## Supported runtimes and frameworks
+Top-level rewrites are evaluated in order. Put specific rules before the catch-all.
 
-Services is in beta. **Python** and **Go** are tested and production-ready. Other runtimes may work but are not yet validated.
+Routing into a service is final. If the selected service returns a 404 or 405, Vercel does not try the next top-level rewrite.
 
-### Python
+Split the URL namespace by what the frontend needs:
 
-Works with FastAPI, Flask, Django, or any ASGI/WSGI application. Framework is auto-detected. Set `entrypoint` to the application file (e.g. `"backend/main.py"`). Dependencies go in `pyproject.toml` in the service directory.
+- Frontends without their own server routes, such as Vite or Create React App builds, let the backend own all of `/api`.
+- Frameworks with their own API routes, such as Next.js, share the namespace: send only a sub-namespace such as `/api/v1/(.*)` or specific prefixes such as `/api/users/(.*)` to the backend, and let the framework keep the rest.
 
-### Go
+The service receives the original request path. With the example above, `GET /api/users` reaches `backend` as `/api/users`, not `/users`. Either make the backend handle the prefix, such as FastAPI `root_path`, or strip it with a service-scoped rewrite:
 
-Set `entrypoint` to the service **directory** (e.g. `"backend"`), not a file. **Must** set `"framework": "go"` explicitly in `vercel.json` — auto-detection does not work for Go services. Dependencies in `go.mod` in the service directory.
+```json filename="vercel.json"
+{
+  "services": {
+    "backend": {
+      "root": "apps/backend",
+      "entrypoint": "main:app",
+      "rewrites": [
+        { "source": "/api/:path(.*)?", "destination": "/:path" }
+      ]
+    }
+  }
+}
+```
 
-### Other runtimes (untested)
+An SPA service that serves a static `index.html`, such as a Vite build, needs a service-scoped catch-all so deep links resolve:
 
-Vercel supports Node.js, Bun, Rust, Ruby, Wasm, and Edge runtimes for functions. These can theoretically be used as services but are not yet validated.
+```json filename="vercel.json"
+{
+  "services": {
+    "frontend": {
+      "root": "apps/web",
+      "rewrites": [
+        { "source": "/(.*)", "destination": "/index.html" }
+      ]
+    }
+  }
+}
+```
+
+A service destination's `path` selects which route runs inside the service without changing the path the service code sees. A query string in it adds state the service's own rules can match, such as `"path": "/:path*?org=:orgSlug"` ([routing docs](https://vercel.com/docs/services/routing)). To change the path the code sees, use a service-scoped rewrite or a `request.path` transform in the service's own `routes`.
+
+## Serve a service on a subdomain
+
+Host-matched top-level rewrites can put a service on its own subdomain, such as `api.example.com`, while the catch-all serves the frontend:
+
+```json filename="vercel.json"
+{
+  "rewrites": [
+    {
+      "source": "/(.*)",
+      "has": [{ "type": "host", "value": "api.example.com" }],
+      "destination": { "service": "backend" }
+    },
+    { "source": "/api/(.*)", "destination": { "service": "backend" } },
+    { "source": "/(.*)", "destination": { "service": "frontend" } }
+  ]
+}
+```
 
-## Routing
+Subdomains resolve only where that domain is attached: production, or a custom environment with a custom domain. Preview deployments get a single generated URL, so keep the subpath rewrite alongside the host rule and point the frontend at the relative path, for example `NEXT_PUBLIC_API_URL=/api`, so every preview calls its own deployment.
 
-Vercel evaluates route prefixes from longest to shortest (most specific first), with the primary service (`/`) as the catch-all. Vercel automatically mounts services at their `routePrefix`, so service handlers should **not** include the prefix in their routes.
+## Call services privately with bindings
 
-For frontend frameworks mounted on a subpath (not `/`), configure the framework's own base path (e.g. `basePath` in `next.config.js`) to match `routePrefix`.
+Declare a binding on the caller service, name the target service, and choose the environment variable that receives the generated URL. Do not hardcode deployment hostnames or manually set binding variables.
 
-## Environment variables
+```ts
+const url = new URL('/api/users', process.env.BACKEND_INTERNAL_URL);
+const response = await fetch(url);
+```
 
-Vercel auto-generates URL variables so services can find each other:
+Bindings are deployment-aware and do not create public routes. They are available to functions at runtime, not during builds or in Routing Middleware. Internal calls skip the public Firewall, Deployment Protection, top-level middleware, and CDN pipeline.
 
-| Variable                        | Example value                            | Availability | Use case                              |
-|---------------------------------|------------------------------------------|--------------|---------------------------------------|
-| `{SERVICENAME}_URL`             | `https://your-deploy.vercel.app/svc/api` | Server-side  | Server-to-server requests             |
-| `NEXT_PUBLIC_{SERVICENAME}_URL` | `/svc/api`                               | Client-side  | Browser requests (relative, no CORS)  |
+Each call over a binding is billed as one [Service Request](https://vercel.com/docs/services/pricing), with no Edge Request or Fast Data Transfer charge. The bytes a service returns are still billed as Fast Origin Transfer.
 
-`SERVICENAME` is the key name from `experimentalServices`, uppercased. If you define an env var with the same name in project settings, your value takes precedence.
+Public exposure is decided only by top-level rewrites. A service with no top-level rewrite is private: it is unreachable from the public internet and only accessible through its bindings. A service with both bindings and a top-level rewrite is also reachable publicly, so do not assume binding-only access implies the routes are protected.
 
-## Usage
+A binding grants network reachability, not application authentication. Add service-level authorization when the target must verify the caller.
 
-1. Read `references/fastapi-vite/` for the canonical project layout.
-2. Adapt the structure to the user's chosen runtimes — services can use any supported runtime, not just the ones in the reference.
-3. Define service routes **without** the route prefix — Vercel strips the prefix before forwarding.
-4. Validate that each service in `vercel.json` has `entrypoint` and `routePrefix`. Only set `framework` when auto-detection fails (required for Go).
+Native Go and Rust runtime services cannot currently consume bindings. Build those callers as container services when they need bindings. Node.js and Python services can use bindings directly.
 
-## Output
+## Develop and deploy
 
-After scaffolding, present the created file structure to the user. After deployment, present the deployment URL (refer to the **deployments-cicd** skill for details).
+Run every service and inject local binding variables:
 
-## Troubleshooting
+```bash
+vercel dev
+```
 
-### 404 on routes after deployment
+Use local-only mode when cloud authentication is unnecessary:
 
-The project needs the Services framework preset:
+```bash
+vercel dev -L
+```
 
-1. Go to Project Settings → Build & Deployment → Framework Preset
-2. Select **Services** from the dropdown
-3. Redeploy
+Deploy the project normally with `vercel` or Git integration. All services participate in the same preview and production deployment.
 
-### Routes return unexpected results
+## Troubleshoot
 
-1. Ensure all services are picked up by `vercel dev` — check logs. If a service is missing, verify `vercel.json`. Try setting `framework` explicitly.
-2. Validate route prefix behavior: handlers declare routes without `routePrefix` (e.g. `/health`), but requests from other services use the full prefix (e.g. `/api/health`).
-3. For frontend services on a subpath, confirm the framework's base path config matches `routePrefix`.
+- **No public traffic reaches a service:** add a top-level rewrite targeting it.
+- **The wrong service receives a request:** reorder rewrites so the most specific rule comes first and the catch-all is last.
+- **A backend returns 404:** confirm its routes include the public prefix because Vercel preserves the original request path, or strip the prefix with a service-scoped rewrite.
+- **An SPA returns 404 on deep links:** add a service-scoped catch-all rewrite to `/index.html`.
+- **A subdomain works in production but not in previews:** preview URLs have a single host, so host rules never match there. Keep a subpath rewrite to the same service and use the relative URL in the frontend.
+- **A binding variable is missing:** declare the binding on the caller and access it from runtime function code, not build code or middleware.
+- **Build settings are ignored or rejected:** move top-level build and runtime fields into the owning service.
+- **Framework detection is wrong:** set that service's `framework` or `entrypoint` explicitly instead of changing the whole project.
+- **Validation rejects `services` together with `experimentalServices`:** `vercel.json` can declare only one; finish the migration in [references/experimental-services.md](references/experimental-services.md).
+
+## Related skills
+
+- Deployment commands and CI: `⤳ skill: deployments-cicd`
+- Function runtime behavior and limits: `⤳ skill: vercel-functions`
+- Independent frontend deployments: `⤳ skill: microfrontends`