@hot-updater/firebase 1.0.0-rc.42 → 1.0.0-rc.43

package/dist/firebase/functions/index.cjs

@@ -4591,7 +4591,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.42";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.43";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -6757,6 +6757,22 @@ const ORIGIN_CACHE_MAX_ENTRIES = 128;
 const NO_CATALOG_HEADER = "x-hot-updater-catalog";
 /** A shared cache keeps a catalog, or a scope's lack of one, five seconds. */
 const CATALOG_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
+/**
+* The same five seconds for a CDN that reads `CDN-Cache-Control` (RFC 9213),
+* such as Cloudflare's Workers Cache, which then ignores `Cache-Control`.
+* `s-maxage` forbids serving stale, so there an expired catalog held requests
+* at that location until the origin answered. Here, for five more seconds,
+* the CDN answers with the expired copy while it revalidates in the
+* background. `stale-if-error=0` keeps origin errors visible: without it,
+* Cloudflare serves a stale copy on error indefinitely.
+*
+* A device can see a catalog up to 15 seconds after a deploy or a Roll back
+* replaced it: the origin's 5-second catalog memo, then 5 seconds fresh and
+* 5 stale at the CDN. A revoked API key can read a cached catalog up to
+* 10 seconds. Devices and caches that don't read the header keep
+* `Cache-Control`.
+*/
+const CATALOG_CDN_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=5, stale-if-error=0";
 const privateNotFound = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: { "cache-control": "private, no-store" }
@@ -6772,6 +6788,7 @@ const missingCatalog = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		vary: "Accept-Encoding",
 		[NO_CATALOG_HEADER]: "none"
 	}
@@ -6786,6 +6803,7 @@ const catalogResponse = async (catalog, request) => {
 	const etag = `"sha256:${await responseHash(body)}"`;
 	const headers = {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		"content-type": CATALOG_CONTENT_TYPE,
 		etag,
 		vary: "Accept-Encoding"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/firebase",
   "type": "module",
-  "version": "1.0.0-rc.42",
+  "version": "1.0.0-rc.43",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "types": "dist/index.d.cts",
@@ -37,10 +37,10 @@
   ],
   "dependencies": {
     "hono": "4.12.34",
-    "@hot-updater/protocol": "1.0.0-rc.42",
-    "@hot-updater/plugin-core": "1.0.0-rc.42",
-    "@hot-updater/cli-tools": "1.0.0-rc.42",
-    "@hot-updater/server": "1.0.0-rc.42"
+    "@hot-updater/cli-tools": "1.0.0-rc.43",
+    "@hot-updater/server": "1.0.0-rc.43",
+    "@hot-updater/plugin-core": "1.0.0-rc.43",
+    "@hot-updater/protocol": "1.0.0-rc.43"
   },
   "publishConfig": {
     "access": "public"
@@ -55,8 +55,8 @@
     "firebase-tools": "15.29.0",
     "fkill": "^9.0.0",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.0.0-rc.42",
-    "@hot-updater/test-utils": "1.0.0-rc.42"
+    "@hot-updater/mock": "1.0.0-rc.43",
+    "@hot-updater/test-utils": "1.0.0-rc.43"
   },
   "peerDependencies": {
     "firebase-admin": "*",