@hot-updater/aws 1.0.0-rc.42 → 1.0.0-rc.43

package/dist/lambda/index.cjs

@@ -4637,7 +4637,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.42";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.43";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -6803,6 +6803,22 @@ const ORIGIN_CACHE_MAX_ENTRIES = 128;
 const NO_CATALOG_HEADER = "x-hot-updater-catalog";
 /** A shared cache keeps a catalog, or a scope's lack of one, five seconds. */
 const CATALOG_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
+/**
+* The same five seconds for a CDN that reads `CDN-Cache-Control` (RFC 9213),
+* such as Cloudflare's Workers Cache, which then ignores `Cache-Control`.
+* `s-maxage` forbids serving stale, so there an expired catalog held requests
+* at that location until the origin answered. Here, for five more seconds,
+* the CDN answers with the expired copy while it revalidates in the
+* background. `stale-if-error=0` keeps origin errors visible: without it,
+* Cloudflare serves a stale copy on error indefinitely.
+*
+* A device can see a catalog up to 15 seconds after a deploy or a Roll back
+* replaced it: the origin's 5-second catalog memo, then 5 seconds fresh and
+* 5 stale at the CDN. A revoked API key can read a cached catalog up to
+* 10 seconds. Devices and caches that don't read the header keep
+* `Cache-Control`.
+*/
+const CATALOG_CDN_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=5, stale-if-error=0";
 const privateNotFound = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: { "cache-control": "private, no-store" }
@@ -6818,6 +6834,7 @@ const missingCatalog = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		vary: "Accept-Encoding",
 		[NO_CATALOG_HEADER]: "none"
 	}
@@ -6832,6 +6849,7 @@ const catalogResponse = async (catalog, request) => {
 	const etag = `"sha256:${await responseHash(body)}"`;
 	const headers = {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		"content-type": CATALOG_CONTENT_TYPE,
 		etag,
 		vary: "Accept-Encoding"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/aws",
   "type": "module",
-  "version": "1.0.0-rc.42",
+  "version": "1.0.0-rc.43",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -45,9 +45,9 @@
     "es-toolkit": "^1.32.0",
     "execa": "9.5.2",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.0.0-rc.42",
-    "@hot-updater/test-utils": "1.0.0-rc.42",
-    "@hot-updater/protocol": "1.0.0-rc.42"
+    "@hot-updater/mock": "1.0.0-rc.43",
+    "@hot-updater/test-utils": "1.0.0-rc.43",
+    "@hot-updater/protocol": "1.0.0-rc.43"
   },
   "dependencies": {
     "@aws-sdk/client-cloudfront": "3.1066.0",
@@ -62,9 +62,9 @@
     "@aws-sdk/lib-storage": "3.1066.0",
     "@aws-sdk/lib-dynamodb": "3.1066.0",
     "hono": "4.12.34",
-    "@hot-updater/cli-tools": "1.0.0-rc.42",
-    "@hot-updater/server": "1.0.0-rc.42",
-    "@hot-updater/plugin-core": "1.0.0-rc.42"
+    "@hot-updater/plugin-core": "1.0.0-rc.43",
+    "@hot-updater/cli-tools": "1.0.0-rc.43",
+    "@hot-updater/server": "1.0.0-rc.43"
   },
   "scripts": {
     "build": "tsdown",