@super-line/transport-cloudflare 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -3,6 +3,12 @@
 Generated from conventional commits by [git-cliff](https://git-cliff.org) —
 run `pnpm changelog` rather than editing by hand.
 
+## [transport-cloudflare-v0.2.0] — 2026-10-18
+
+### Features
+
+- A refused credential closes 4401, and the client stops retrying it ([35c6e25])
+
 ## [transport-cloudflare-v0.1.0] — 2026-10-15
 
 ### Features

package/README.md

@@ -71,7 +71,7 @@ For durable state in the same object, pair it with [`@super-line/collections-clo
 
 ## Behavior notes
 
-- **Handshake** — `transport: 'cloudflare'`, `query` from the URL, `headers` from the request, `raw` is the `Request`. A throwing `authenticate` gets a plain `401` and no socket; a refused Control Center connection is closed `4401` after the upgrade.
+- **Handshake** — `transport: 'cloudflare'`, `query` from the URL, `headers` from the request, `raw` is the `Request`. An `authenticate` that throws `SuperLineError('UNAUTHORIZED')`, and a refused Control Center connection, are closed `4401` after the upgrade, so the client can tell them from an outage; any other throw gets a plain `401` and no socket.
 - **What a wake loses** — everything in memory: `conn.data` (`onConnection` runs again for each resumed socket), memory collection backends, module state. Keep `ctx` and `env` JSON-serializable; the snapshot is stored as JSON.
 - **A subscription can end with the socket open** — a wake runs each subscription's policy again, and one it now refuses reaches the client's `onError` with `kind: 'resubscribe'`.
 - **Timers keep the node awake** — your own, `plugin-queue`'s polling (always), `plugin-inspector`'s keepalive (while a Control Center watches). A plugin's `ctx.hold()` keeps it awake on purpose.

package/dist/index.js

@@ -1,5 +1,6 @@
 // src/transport.ts
 import { getLogger } from "@logtape/logtape";
+import { SuperLineError } from "@super-line/core";
 var log = getLogger(["super-line", "transport-cloudflare"]);
 var CLOSE_NOT_RESUMABLE = 4409;
 var SNAPSHOTS = "_sl_conn";
@@ -37,7 +38,8 @@ function cloudflareServerTransport(ctx) {
       try {
         auth = await hooks.authenticate(handshake);
       } catch (err) {
-        log.warn("authenticate threw \u2014 rejecting connection with 401 {error}", { error: err });
+        log.warn("authenticate threw \u2014 refusing the connection {error}", { error: err });
+        if (err instanceof SuperLineError && err.code === "UNAUTHORIZED") return refuseAfterUpgrade(void 0, err);
         return new Response("Unauthorized", { status: 401 });
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-line/transport-cloudflare",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "type": "module",
   "description": "Cloudflare Durable Object transport for super-line: one Durable Object is one node, with hibernatable WebSockets that resume transparently on wake.",
   "license": "MIT",
@@ -46,8 +46,8 @@
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^5.20261013.1",
-    "@super-line/core": "^0.21.0",
-    "@super-line/server": "^0.22.0"
+    "@super-line/core": "^0.22.0",
+    "@super-line/server": "^0.23.0"
   },
   "scripts": {
     "build": "tsup"