@pyreon/zero 0.12.14 → 0.12.15

package/lib/server.js

@@ -328,11 +328,36 @@ function resolveConfig(userConfig = {}) {
 *
 * Wraps an SSR handler and caches responses per URL path.
 * Serves stale content immediately while revalidating in the background.
+*
+* Bounded by `config.maxEntries` (default: 1000) with LRU eviction. The
+* `Map` preserves insertion order, so re-inserting an entry on every
+* serve (touching it) keeps the LRU order correct. Without the cap,
+* unbounded URL spaces like `/user/:id` would grow cache memory without
+* limit over the server's lifetime — a real leak in long-running
+* deployments.
 */
 function createISRHandler(handler, config) {
 	const cache = /* @__PURE__ */ new Map();
 	const revalidating = /* @__PURE__ */ new Set();
 	const revalidateMs = config.revalidate * 1e3;
+	const maxEntries = Math.max(1, config.maxEntries ?? 1e3);
+	function set(key, entry) {
+		if (cache.has(key)) cache.delete(key);
+		cache.set(key, entry);
+		while (cache.size > maxEntries) {
+			const oldest = cache.keys().next().value;
+			if (oldest === void 0) break;
+			cache.delete(oldest);
+		}
+	}
+	function touch(key) {
+		const entry = cache.get(key);
+		if (entry !== void 0) {
+			cache.delete(key);
+			cache.set(key, entry);
+		}
+		return entry;
+	}
 	async function revalidate(url) {
 		const key = url.pathname;
 		if (revalidating.has(key)) return;
@@ -344,7 +369,7 @@ function createISRHandler(handler, config) {
 			res.headers.forEach((v, k) => {
 				headers[k] = v;
 			});
-			cache.set(key, {
+			set(key, {
 				html,
 				headers,
 				timestamp: Date.now()
@@ -357,7 +382,7 @@ function createISRHandler(handler, config) {
 		if (req.method !== "GET") return handler(req);
 		const url = new URL(req.url);
 		const key = url.pathname;
-		const entry = cache.get(key);
+		const entry = touch(key);
 		if (entry) {
 			const age = Date.now() - entry.timestamp;
 			if (age > revalidateMs) revalidate(url);