@camstack/server 1.1.58 → 1.1.59

package/dist/api/core/auth.router.js

@@ -179,11 +179,15 @@ async function passkeySecondFactorOptedIn(userId, provider) {
 // `redirect` buttons (OIDC / magic-link) + pre-auth `widget`s (passkey).
 // The widget arm is enriched server-side with a public `bundleUrl` from
 // `addonId` + `bundle`, so the addon never encodes the static-route
-// scheme. `?v=<now>` guards against a stale cached bundle after an addon
-// update (the login page loads rarely, so cache-busting is free here).
+// scheme. The version is a PATH prefix (`v<…>/`), not a `?v=` query, so the
+// bundle's relative sibling imports inherit it and a CDN busts the WHOLE
+// bundle atomically on deploy (see the stamping site below).
 const PublicWidgetLoginMethodSchema = types_1.WidgetLoginMethodSchema.extend({
     bundleUrl: zod_1.z.string(),
 });
+/** Stable per hub PROCESS — busts the login widget bundle URL on each
+ *  restart/deploy while caching cleanly within the process's uptime. */
+const AUTH_BUNDLE_VERSION = String(Date.now());
 const PublicLoginMethodSchema = zod_1.z.discriminatedUnion('kind', [
     types_1.RedirectLoginMethodSchema,
     PublicWidgetLoginMethodSchema,
@@ -961,10 +965,18 @@ function createAuthRouter(auth, registry, moleculer = null, shareTokens = null,
                         }
                         continue;
                     }
-                    // Widget arm — stamp a public bundleUrl from addonId + bundle.
+                    // Widget arm — stamp a public bundleUrl with the version in the
+                    // PATH, not a `?v=` query. Module-Federation bundles import their
+                    // fixed-name siblings (`./_stub.js`) by RELATIVE url, which never
+                    // inherit a query — so a `?v=` busts only the entry and a CDN edge
+                    // keeps serving a stale `_stub.js` (missing the newest widget). A
+                    // path prefix makes every relative import inherit it → one atomic
+                    // whole-bundle cache miss per deploy, on any CDN. `AUTH_BUNDLE_VERSION`
+                    // is stable per hub process (busts on restart/deploy, caches within
+                    // uptime). The `/api/addon-widgets` route strips the `v<…>/` segment.
                     const parsed = PublicWidgetLoginMethodSchema.safeParse({
                         ...raw,
-                        bundleUrl: `/api/addon-widgets/${raw.addonId}/${raw.bundle}?v=${Date.now()}`,
+                        bundleUrl: `/api/addon-widgets/${raw.addonId}/v${AUTH_BUNDLE_VERSION}/${raw.bundle}`,
                     });
                     if (parsed.success) {
                         out.push(parsed.data);

package/dist/core/moleculer/moleculer.service.js

@@ -308,6 +308,10 @@ class MoleculerService {
             this.brokerSafe.createService((0, system_1.createHubCapForwardService)(onUnownedCall));
             const registry = new system_1.LocalChildRegistry({
                 server: (0, system_1.createLocalTransport)().createServer(nodeId),
+                // This node's own id — lets the cap-call-out router serve a pin-to-self
+                // from the co-resident sibling instead of bouncing it through
+                // onUnownedCall (a pin to ANOTHER node still bypasses the sibling).
+                ownNodeId: nodeId,
                 onUnownedCall,
                 logger: {
                     info: (msg, meta) => logger.info(msg, meta !== null && meta !== undefined

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.1.58",
+  "version": "1.1.59",
   "private": false,
   "files": [
     "dist",
@@ -23,19 +23,19 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.1.47",
+    "@camstack/addon-admin-ui": "1.1.48",
     "@camstack/addon-advanced-notifier": "1.1.21",
     "@camstack/addon-auth": "1.1.6",
     "@camstack/addon-decoder-nodeav": "1.1.9",
     "@camstack/addon-notifiers": "1.1.21",
-    "@camstack/addon-pipeline": "1.1.52",
-    "@camstack/addon-pipeline-orchestrator": "1.1.42",
-    "@camstack/addon-post-analysis": "1.1.24",
+    "@camstack/addon-pipeline": "1.1.53",
+    "@camstack/addon-pipeline-orchestrator": "1.1.43",
+    "@camstack/addon-post-analysis": "1.1.25",
     "@camstack/sdk": "1.1.22",
     "@camstack/shm-ring": "1.0.21",
-    "@camstack/system": "1.1.45",
-    "@camstack/types": "1.1.40",
-    "@camstack/ui-library": "1.1.32",
+    "@camstack/system": "1.1.46",
+    "@camstack/types": "1.1.41",
+    "@camstack/ui-library": "1.1.33",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/multipart": "^10.0.0",