@hot-updater/server 1.0.0-rc.41 → 1.0.0-rc.43

package/dist/handlerReleaseCatalogRoutes.cjs

@@ -9,6 +9,22 @@ const ORIGIN_CACHE_MAX_ENTRIES = 128;
 const NO_CATALOG_HEADER = "x-hot-updater-catalog";
 /** A shared cache keeps a catalog, or a scope's lack of one, five seconds. */
 const CATALOG_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
+/**
+* The same five seconds for a CDN that reads `CDN-Cache-Control` (RFC 9213),
+* such as Cloudflare's Workers Cache, which then ignores `Cache-Control`.
+* `s-maxage` forbids serving stale, so there an expired catalog held requests
+* at that location until the origin answered. Here, for five more seconds,
+* the CDN answers with the expired copy while it revalidates in the
+* background. `stale-if-error=0` keeps origin errors visible: without it,
+* Cloudflare serves a stale copy on error indefinitely.
+*
+* A device can see a catalog up to 15 seconds after a deploy or a Roll back
+* replaced it: the origin's 5-second catalog memo, then 5 seconds fresh and
+* 5 stale at the CDN. A revoked API key can read a cached catalog up to
+* 10 seconds. Devices and caches that don't read the header keep
+* `Cache-Control`.
+*/
+const CATALOG_CDN_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=5, stale-if-error=0";
 const privateNotFound = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: { "cache-control": "private, no-store" }
@@ -24,6 +40,7 @@ const missingCatalog = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		vary: "Accept-Encoding",
 		[NO_CATALOG_HEADER]: "none"
 	}
@@ -38,6 +55,7 @@ const catalogResponse = async (catalog, request) => {
 	const etag = `"sha256:${await responseHash(body)}"`;
 	const headers = {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		"content-type": CATALOG_CONTENT_TYPE,
 		etag,
 		vary: "Accept-Encoding"

package/dist/handlerReleaseCatalogRoutes.mjs

@@ -9,6 +9,22 @@ const ORIGIN_CACHE_MAX_ENTRIES = 128;
 const NO_CATALOG_HEADER = "x-hot-updater-catalog";
 /** A shared cache keeps a catalog, or a scope's lack of one, five seconds. */
 const CATALOG_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
+/**
+* The same five seconds for a CDN that reads `CDN-Cache-Control` (RFC 9213),
+* such as Cloudflare's Workers Cache, which then ignores `Cache-Control`.
+* `s-maxage` forbids serving stale, so there an expired catalog held requests
+* at that location until the origin answered. Here, for five more seconds,
+* the CDN answers with the expired copy while it revalidates in the
+* background. `stale-if-error=0` keeps origin errors visible: without it,
+* Cloudflare serves a stale copy on error indefinitely.
+*
+* A device can see a catalog up to 15 seconds after a deploy or a Roll back
+* replaced it: the origin's 5-second catalog memo, then 5 seconds fresh and
+* 5 stale at the CDN. A revoked API key can read a cached catalog up to
+* 10 seconds. Devices and caches that don't read the header keep
+* `Cache-Control`.
+*/
+const CATALOG_CDN_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=5, stale-if-error=0";
 const privateNotFound = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: { "cache-control": "private, no-store" }
@@ -24,6 +40,7 @@ const missingCatalog = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		vary: "Accept-Encoding",
 		[NO_CATALOG_HEADER]: "none"
 	}
@@ -38,6 +55,7 @@ const catalogResponse = async (catalog, request) => {
 	const etag = `"sha256:${await responseHash(body)}"`;
 	const headers = {
 		"cache-control": CATALOG_CACHE_CONTROL,
+		"cdn-cache-control": CATALOG_CDN_CACHE_CONTROL,
 		"content-type": CATALOG_CONTENT_TYPE,
 		etag,
 		vary: "Accept-Encoding"

package/dist/package.cjs

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "1.0.0-rc.41";
+var version = "1.0.0-rc.43";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/package.mjs

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "1.0.0-rc.41";
+var version = "1.0.0-rc.43";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/server",
-  "version": "1.0.0-rc.41",
+  "version": "1.0.0-rc.43",
   "type": "module",
   "description": "React Native OTA solution for self-hosted",
   "sideEffects": false,
@@ -58,11 +58,11 @@
   "dependencies": {
     "rou3": "0.7.9",
     "verkit": "0.4.0",
-    "@hot-updater/protocol": "1.0.0-rc.41",
-    "@hot-updater/plugin-core": "1.0.0-rc.41",
-    "@hot-updater/plugin-remote-config": "1.0.0-rc.41",
-    "@hot-updater/plugin-api-keys": "1.0.0-rc.41",
-    "@hot-updater/plugin-insights": "1.0.0-rc.41"
+    "@hot-updater/plugin-core": "1.0.0-rc.43",
+    "@hot-updater/plugin-api-keys": "1.0.0-rc.43",
+    "@hot-updater/protocol": "1.0.0-rc.43",
+    "@hot-updater/plugin-remote-config": "1.0.0-rc.43",
+    "@hot-updater/plugin-insights": "1.0.0-rc.43"
   },
   "peerDependencies": {
     "@prisma/client": "*",
@@ -103,8 +103,8 @@
     "prisma": "6.19.3",
     "uuidv7": "^1.0.2",
     "wrangler": "^4.69.0",
-    "@hot-updater/standalone": "1.0.0-rc.41",
-    "@hot-updater/test-utils": "1.0.0-rc.41"
+    "@hot-updater/standalone": "1.0.0-rc.43",
+    "@hot-updater/test-utils": "1.0.0-rc.43"
   },
   "nx": {
     "implicitDependencies": [