jskelet 0.4.2 → 0.4.3

package/CHANGELOG.md

@@ -24,9 +24,19 @@ one is listed under a **Breaking** heading.
   query time and a default 24h lookback became `1d` plus network delay — Free
   zones reject anything wider than one day. Both ends are now pinned from the
   same clock (`datetime_leq` included).
+- Missing `/assets/*` responses no longer keep the long-lived `immutable`
+  Cache-Control that `headersMiddleware` stamps for static prefixes. A deploy
+  race (prune-before-write) could 404 a hashed CSS URL for a moment; a CDN then
+  cached that HTML 404 for a year and browsers refused it as a stylesheet
+  (`MIME type 'text/html'`). Catch-all and `notFound` handlers now set
+  `Cache-Control: no-store`. CSS and sprite builds write the new file before
+  pruning older hashes so the same content hash never has a gap.
 
 ### Added
 
+- Marketing homepage ops storyboard: Redis L2, `/_jskelet/admin` panel mock and
+  Cloudflare purge flow, with tabbed visual scenes animated by the vanilla
+  `motion` API (Framer Motion’s non-React package) via an `ops-story` island.
 - VS Code / Cursor extension skeleton under `extensions/vscode-jsk`: `.jsk`
   language id, TextMate highlighting (`{{ }}` / `{#if}` / `{#each}` /
   components), language config, and snippets. Install from that folder or
@@ -144,6 +154,14 @@ one is listed under a **Breaking** heading.
   island contract, path-based `invalidateHtmlCache` (replacing the outdated
   “no targeted invalidation” claim), Redis / admin / data-cache callouts, and
   bilingual doc links under `docs/` and `docs/en/`.
+- Marketing compare live latency demo now measures two same-sized fragments
+  (cached vs `no-store`) with an explicit 80 ms simulated upstream inside the
+  shared producer — a hit skips that wait so the gap is visible even when RTT
+  dominates the wall clock. The island prints transferred bytes, Server-Timing
+  `produce` duration, and a View Source section contrasts `__NEXT_DATA__`
+  payload tax with plain JSkelet HTML. The measured-weight block also shows an
+  estimated Next.js App Router first-load breakdown beside this site’s real
+  gzip totals (clearly labelled estimate, not a build from this repo).
 - Duplicate component named exports (or the same PascalCase tag in two files)
   now **fail** at build and at server startup instead of warning and letting
   the second definition win. Overwriting `components/index.js` barrel exports

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jskelet",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "A framework that feels like no framework: Express 5 + build-time .jsk (or EJS) SSR, vanilla JS islands, Tailwind v4 and an in-process HTML TTL cache.",
   "type": "module",
   "license": "MIT",

package/src/build/paths.mjs

@@ -131,13 +131,23 @@ export function patchManifest(key, url) {
 /**
  * Eski hash'li çıktıları temizler.
  *
+ * Yeni dosya **önce** yazılmalı, prune sonra gelmeli: aynı içerik aynı hash'i
+ * üretir ve önce silmek `/assets/app.<hash>.css` için kısa bir 404 penceresi
+ * açar. CDN o 404'ü `immutable` ile saklarsa (eski headersMiddleware
+ * davranışı) tarayıcı bir yıl boyunca stilsiz kalır.
+ *
  * @param {string[]} prefixes
+ * @param {{ keep?: string[] }} [options] Korunacak dosya adları (ör. yeni
+ *   yazılan `app.<hash>.css`); `.br` / `.gz` sonekleri de eşleşir.
  */
-export function pruneAssets(prefixes) {
+export function pruneAssets(prefixes, { keep = [] } = {}) {
   if (!fs.existsSync(paths.assets)) return;
+
   for (const file of fs.readdirSync(paths.assets)) {
-    if (prefixes.some((prefix) => file.startsWith(prefix))) {
-      fs.rmSync(path.join(paths.assets, file), { force: true });
+    if (!prefixes.some((prefix) => file.startsWith(prefix))) continue;
+    if (keep.some((name) => file === name || file.startsWith(`${name}.`))) {
+      continue;
     }
+    fs.rmSync(path.join(paths.assets, file), { force: true });
   }
 }

package/src/build/tasks/css.mjs

@@ -64,9 +64,11 @@ export async function buildCss(config, { watch = false } = {}) {
 
   const run = async () => {
     const started = Date.now();
-    pruneAssets(["app."]);
     const css = await compile(input);
+    // Önce yaz, sonra eski hash'leri sil — aynı hash'e düşen içerikte 404
+    // penceresi olmasın (CDN immutable zehirlenmesi).
     const url = writeAsset("app.css", css);
+    pruneAssets(["app."], { keep: [path.basename(url)] });
     return { url, bytes: Buffer.byteLength(css), elapsed: Date.now() - started };
   };
 

package/src/build/tasks/icons.mjs

@@ -192,8 +192,6 @@ export async function buildIconSprite(config) {
     config.icons?.scan ?? ["views", "client", "routes", "lib", "features", "shared"]
   ).map((dir) => path.resolve(config.root, dir));
 
-  pruneAssets(["sprite."]);
-
   const used = [...scanUsedIcons(scanDirs)].sort();
   const symbols = [];
   const missing = [];
@@ -214,6 +212,7 @@ export async function buildIconSprite(config) {
 
   const sprite = `<svg xmlns="http://www.w3.org/2000/svg" style="display:none">${symbols.join("")}</svg>`;
   const url = writeAsset("sprite.svg", sprite);
+  pruneAssets(["sprite."], { keep: [path.basename(url)] });
 
   log.detail(`${symbols.length} symbols`);
   if (missing.length) {

package/src/server/create-app.js

@@ -148,7 +148,10 @@ export async function createApp(options = {}) {
 
   app.use(async (req, res, next) => {
     try {
-      res.status(404).type("html").send(await renderNotFound());
+      // headersMiddleware `/assets/*` için immutable basmış olabilir; eksik bir
+      // hash'li dosyanın 404'ü CDN'de bir yıl zehirlenmesin.
+      res.status(404).setHeader("Cache-Control", "no-store");
+      res.type("html").send(await renderNotFound());
     } catch (error) {
       next(error);
     }
@@ -168,7 +171,8 @@ export async function createApp(options = {}) {
     }
 
     if (isNotFoundError(error)) {
-      res.status(404).type("html").send(await renderNotFound());
+      res.status(404).setHeader("Cache-Control", "no-store");
+      res.type("html").send(await renderNotFound());
       return;
     }