@teamscala/service-boot 0.23.552 → 0.23.554

package/package.json

@@ -27,7 +27,7 @@
   "repository": "https://github.com/teamgbg/service-boot",
   "sideEffects": false,
   "type": "module",
-  "version": "0.23.552",
+  "version": "0.23.554",
   "dependencies": {
     "@orpc/openapi": "*",
     "@orpc/server": "*",
@@ -310,4 +310,4 @@
     "./ws-boot-self-test": "./src/ws-boot-self-test.ts",
     "./ws-boot-self-test.ts": "./src/ws-boot-self-test.ts"
   }
-}
+}

package/src/asset-proxy.ts

@@ -18,16 +18,31 @@ const CACHE_HEADERS = {
 	Vary: "Accept",
 } as const;
 
+/**
+ * A content-addressed asset URL that answers 404 is a race artifact — a page
+ * fetched moments before an asset set rotated, or a rebuild mid-write. The
+ * URL carries no meaning a cache may keep: a stale HTML will never become
+ * valid again, and Cloudflare's default edge TTL caches a header-less 404 for
+ * hours (measured 2026-10-23: chunk 404s served `max-age=14400` from the edge
+ * for files that existed at origin), re-breaking every client that held the
+ * old page. Never cacheable.
+ */
+const NOT_FOUND_HEADERS = { "cache-control": "no-store" } as const;
+
+export function assetNotFoundResponse(): Response {
+	return new Response("Not Found", { status: 404, headers: NOT_FOUND_HEADERS });
+}
+
 export async function handleAssetProxy(req: Request): Promise<Response> {
 	const url = new URL(req.url);
 	const prefix = "/api/assets/";
 	if (!url.pathname.startsWith(prefix)) {
-		return new Response("Not Found", { status: 404 });
+		return assetNotFoundResponse();
 	}
 
 	const key = decodeURIComponent(url.pathname.slice(prefix.length));
 	if (!key) {
-		return new Response("Not Found", { status: 404 });
+		return assetNotFoundResponse();
 	}
 
 	const s3 = await getClient();
@@ -48,7 +63,7 @@ export async function handleAssetProxy(req: Request): Promise<Response> {
 			error: err,
 			key,
 		});
-		return new Response("Not Found", { status: 404 });
+		return assetNotFoundResponse();
 	}
 
 	const baseEtag = stats.etag || `"${key}"`;

package/src/register-static-assets.ts

@@ -95,7 +95,11 @@ export async function registerStaticAssets(
 				headers: { "cache-control": "public, max-age=31536000, immutable" },
 			});
 		}
-		return c.notFound();
+		// A hashed asset URL that misses is a race artifact (page from before an
+		// asset rotation, or a rebuild mid-write) — never cacheable, else the
+		// edge pins the 404 and re-breaks every client holding the old page
+		// (assetNotFoundResponse's header note).
+		return new Response("Not Found", { status: 404, headers: { "cache-control": "no-store" } });
 	});
 
 	app.get("/ext/*", async (c) => {
@@ -110,6 +114,6 @@ export async function registerStaticAssets(
 				headers: { "cache-control": "public, max-age=3600" },
 			});
 		}
-		return c.notFound();
+		return new Response("Not Found", { status: 404, headers: { "cache-control": "no-store" } });
 	});
 }

package/src/two-phase-minimal-app.ts

@@ -87,7 +87,12 @@ export async function buildMinimalApp(
 			const logo = await resolveErrorPageLogo(serviceSlug);
 			return buildResourceNotFoundResponse("page", logo, 404);
 		}
-		return c.json({ error: "Not Found" }, 404);
+		// No-store: a 404 a cache may keep (Cloudflare's default edge TTL caches
+		// a header-less 404 on cacheable extensions for hours) re-serves the miss
+		// long after the resource exists — same class as the asset-route misses.
+		return c.json({ error: "Not Found" }, 404, {
+			"cache-control": "no-store",
+		});
 	});
 
 	app.use("*", readinessGate);