maven-proxy 1.3.2 → 1.3.3

package/README.md

@@ -288,11 +288,11 @@ Environment variables:
 - OUTBOUND_KEEP_ALIVE_INTERVAL: keep-alive interval (supports s/m/h/d), for example 1s.
 - OUTBOUND_MAX_SOCKETS: max outbound sockets per origin.
 - OUTBOUND_MAX_FREE_SOCKETS: max idle outbound sockets per origin.
-- MAVEN_AFFINITY_ENABLED: enable Maven affinity index.
-- MAVEN_AFFINITY_INDEX_DIR: Maven affinity index directory. Default data/index.
-- MAVEN_NEGATIVE_CACHE_TTL: negative cache TTL (supports s/m/h/d), for example 24h.
-- MAVEN_AFFINITY_FLUSH_INTERVAL: flush interval for affinity event log (supports s/m/h/d), for example 5s.
-- MAVEN_AFFINITY_EVENT_MAX_MB: max size threshold for affinity event log compaction in MB.
+ - MAVEN_NEGATIVE_ENABLED: enable Maven negative index. Default true.
+ - MAVEN_NEGATIVE_INDEX_DIR: Maven negative index directory. Default data/index.
+ - MAVEN_NEGATIVE_CACHE_TTL: negative cache TTL (supports s/m/h/d), for example 24h.
+ - MAVEN_NEGATIVE_FLUSH_INTERVAL: flush interval for negative event log (supports s/m/h/d), for example 5s.
+ - MAVEN_NEGATIVE_EVENT_MAX_MB: max size threshold for negative event log compaction in MB.
 - MAVEN_PROXY_CONFIG_MODE: development or user.
 - MAVEN_PROXY_CONFIG_FILE: explicit config file path.
 - EXISTING_TRUST_STORE_PATH: optional existing truststore path. If present, truststore init prefers it as source.
@@ -343,11 +343,11 @@ Priority:
 - `OUTBOUND_KEEP_ALIVE_INTERVAL`: Keep-alive interval (supports `s/m/h/d`). Default `1s`.
 - `OUTBOUND_MAX_SOCKETS`: Max outbound sockets per origin. Default `64`.
 - `OUTBOUND_MAX_FREE_SOCKETS`: Max idle outbound sockets per origin. Default `16`.
-- `MAVEN_AFFINITY_ENABLED`: Enable Maven affinity cache index. Default `true`.
-- `MAVEN_AFFINITY_INDEX_DIR`: Maven affinity index directory. Default `data/index`.
-- `MAVEN_NEGATIVE_CACHE_TTL`: Negative cache TTL (supports `s/m/h/d`). Default `24h`.
-- `MAVEN_AFFINITY_FLUSH_INTERVAL`: Flush interval for affinity event log (supports `s/m/h/d`). Default `5s`.
-- `MAVEN_AFFINITY_EVENT_MAX_MB`: Max size threshold for affinity event log compaction in MB. Default `8`.
+ - `MAVEN_NEGATIVE_ENABLED`: Enable Maven negative cache index. Default `true`.
+ - `MAVEN_NEGATIVE_INDEX_DIR`: Maven negative index directory. Default `data/index`.
+ - `MAVEN_NEGATIVE_CACHE_TTL`: Negative cache TTL (supports `s/m/h/d`). Default `24h`.
+ - `MAVEN_NEGATIVE_FLUSH_INTERVAL`: Flush interval for negative event log (supports `s/m/h/d`). Default `5s`.
+ - `MAVEN_NEGATIVE_EVENT_MAX_MB`: Max size threshold for negative event log compaction in MB. Default `8`.
 - `UPSTREAM_PROXY_URL`: Generic upstream proxy URL (fallback for HTTP/HTTPS).
 - `UPSTREAM_HTTP_PROXY_URL`: Upstream proxy URL for HTTP requests.
 - `UPSTREAM_HTTPS_PROXY_URL`: Upstream proxy URL for HTTPS requests.

package/bin/maven-proxy.js

@@ -193,11 +193,11 @@ function getDefaultConfigTemplate() {
   appendEntry("OUTBOUND_KEEP_ALIVE_INTERVAL", "1s", "keep-alive 间隔（支持 s/m/h/d），默认 1s。", "Keep-alive interval (supports s/m/h/d). Default: 1s.");
   appendEntry("OUTBOUND_MAX_SOCKETS", "64", "每个源站最大出站连接数，默认 64。", "Maximum outbound sockets per upstream host. Default: 64.");
   appendEntry("OUTBOUND_MAX_FREE_SOCKETS", "16", "每个源站可保留空闲连接上限，默认 16。", "Maximum free outbound sockets kept per upstream host. Default: 16.");
-  appendEntry("MAVEN_AFFINITY_ENABLED", "true", "是否启用 Maven affinity 缓存索引，默认 true。", "Enable Maven affinity index. Default: true.");
-  appendEntry("MAVEN_AFFINITY_INDEX_DIR", "data/index", "Maven affinity 索引目录，默认 data/index。", "Maven affinity index directory. Default: data/index.");
+  appendEntry("MAVEN_NEGATIVE_ENABLED", "true", "是否启用 Maven negative 索引，默认 true。", "Enable Maven negative index. Default: true.");
+  appendEntry("MAVEN_NEGATIVE_INDEX_DIR", "data/index", "Maven negative 索引目录，默认 data/index。", "Maven negative index directory. Default: data/index.");
   appendEntry("MAVEN_NEGATIVE_CACHE_TTL", "24h", "负缓存 TTL（支持 s/m/h/d），默认 24h。", "Negative cache TTL (supports s/m/h/d). Default: 24h.");
-  appendEntry("MAVEN_AFFINITY_FLUSH_INTERVAL", "5s", "affinity 事件日志 flush 周期（支持 s/m/h/d），默认 5s。", "Affinity event log flush interval (supports s/m/h/d). Default: 5s.");
-  appendEntry("MAVEN_AFFINITY_EVENT_MAX_MB", "8", "affinity 事件日志压缩阈值（MB），默认 8。", "Affinity event log compaction threshold in MB. Default: 8.");
+  appendEntry("MAVEN_NEGATIVE_FLUSH_INTERVAL", "5s", "negative 事件日志 flush 周期（支持 s/m/h/d），默认 5s。", "Negative event log flush interval (supports s/m/h/d). Default: 5s.");
+  appendEntry("MAVEN_NEGATIVE_EVENT_MAX_MB", "8", "negative 事件日志压缩阈值（MB），默认 8。", "Negative event log compaction threshold in MB. Default: 8.");
   appendEntry("UPSTREAM_PROXY_URL", "", "通用上级代理地址（HTTP/HTTPS 兜底）。", "Generic upstream proxy URL fallback for HTTP/HTTPS.");
   appendEntry("UPSTREAM_HTTP_PROXY_URL", "", "HTTP 请求使用的上级代理地址。", "Upstream proxy URL for HTTP requests.");
   appendEntry("UPSTREAM_HTTPS_PROXY_URL", "", "HTTPS 请求使用的上级代理地址。", "Upstream proxy URL for HTTPS requests.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maven-proxy",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "Maven proxy with cache, HTTPS MITM for selected domains, and local repo publishing",
   "main": "src/index.js",
   "bin": {
@@ -35,8 +35,8 @@
     "npm:version:patch": "npm version patch",
     "npm:view:version": "npm view maven-proxy version",
     "npm:view:dist-tags": "npm view maven-proxy dist-tags",
-    "replay:affinity": "node --test test/replay-affinity.test.js",
-    "test:replay": "node --test test/replay-affinity.test.js",
+    "replay:negative": "node --test test/replay-negative.test.js",
+    "test:replay": "node --test test/replay-negative.test.js",
     "test": "node --test test/*.test.js"
   },
   "keywords": [],

package/src/cache/{maven-affinity-index.js → maven-negative-index.js}

@@ -31,16 +31,6 @@ function readJsonFile(filePath, fallback) {
   }
 }
 
-function serializeSnapshot(positiveMap, negativeMap, conflictMap) {
-  return {
-    version: 1,
-    generatedAt: new Date().toISOString(),
-    positive: [...positiveMap.entries()],
-    negative: [...negativeMap.entries()],
-    conflicts: [...conflictMap.entries()],
-  };
-}
-
 function normalizeRequestPath(pathname) {
   return String(pathname || "")
     .replace(/\\/g, "/")
@@ -64,22 +54,26 @@ function buildNegativeKey(scope, canonicalKey) {
   return `${String(scope || "").toLowerCase()}|${canonicalKey}`;
 }
 
-export class MavenAffinityIndex {
+function serializeSnapshot(negativeMap) {
+  return {
+    version: 1,
+    generatedAt: new Date().toISOString(),
+    negative: [...negativeMap.entries()],
+  };
+}
+
+export class MavenNegativeIndex {
   constructor(config) {
-    this.enabled = toBool(config.mavenAffinityEnabled, true);
-    this.indexDir = config.mavenAffinityIndexDir;
+    this.enabled = toBool(config.mavenNegativeEnabled, true);
+    this.indexDir = config.mavenNegativeIndexDir;
     this.negativeTtlMs = toPositiveInt(config.mavenNegativeCacheTtlMs, 24 * 60 * 60 * 1000);
-    this.flushIntervalMs = toPositiveInt(config.mavenAffinityFlushIntervalMs, 5000);
-    this.maxEventBytes = toPositiveInt(config.mavenAffinityEventMaxBytes, 8 * 1024 * 1024);
+    this.flushIntervalMs = toPositiveInt(config.mavenNegativeFlushIntervalMs, 5000);
+    this.maxEventBytes = toPositiveInt(config.mavenNegativeEventMaxBytes, 8 * 1024 * 1024);
 
-    this.snapshotPath = path.join(this.indexDir, "maven-affinity.snapshot.json");
-    this.eventLogPath = path.join(this.indexDir, "maven-affinity.events.log");
+    this.snapshotPath = path.join(this.indexDir, "maven-negative.snapshot.json");
+    this.eventLogPath = path.join(this.indexDir, "maven-negative.events.log");
 
-    // Positive entries are persistent and have no TTL. They are removed only
-    // when the cache file disappears or a conflict is detected.
-    this.positive = new Map();
     this.negative = new Map();
-    this.conflicts = new Map();
 
     this.pendingEvents = [];
     this.flushTimer = null;
@@ -98,7 +92,7 @@ export class MavenAffinityIndex {
 
     this.flushTimer = setInterval(() => {
       this.flush().catch((error) => {
-        console.error(`[affinity] flush failed: ${error.message}`);
+        console.error(`[maven-negative] flush failed: ${error.message}`);
       });
     }, this.flushIntervalMs);
 
@@ -113,20 +107,12 @@ export class MavenAffinityIndex {
       return;
     }
 
-    for (const [key, value] of snapshot.positive || []) {
-      this.positive.set(key, value);
-    }
-
     const currentTime = nowMs();
     for (const [key, value] of snapshot.negative || []) {
       if (value?.expireAt && value.expireAt > currentTime) {
         this.negative.set(key, value);
       }
     }
-
-    for (const [key, value] of snapshot.conflicts || []) {
-      this.conflicts.set(key, value);
-    }
   }
 
   #replayEventLog() {
@@ -167,22 +153,6 @@ export class MavenAffinityIndex {
       return;
     }
 
-    if (type === "positive_upsert") {
-      this.positive.set(payload.key, payload.value);
-      if (append) {
-        this.#enqueueEvent(type, payload);
-      }
-      return;
-    }
-
-    if (type === "positive_remove") {
-      this.positive.delete(payload.key);
-      if (append) {
-        this.#enqueueEvent(type, payload);
-      }
-      return;
-    }
-
     if (type === "negative_upsert") {
       if (payload.value?.expireAt > nowMs()) {
         this.negative.set(payload.key, payload.value);
@@ -202,50 +172,6 @@ export class MavenAffinityIndex {
       }
       return;
     }
-
-    if (type === "conflict_set") {
-      this.conflicts.set(payload.key, payload.value);
-      if (append) {
-        this.#enqueueEvent(type, payload);
-      }
-      return;
-    }
-
-    if (type === "conflict_clear") {
-      this.conflicts.delete(payload.key);
-      if (append) {
-        this.#enqueueEvent(type, payload);
-      }
-    }
-  }
-
-  async resolvePreferredCachePath(canonicalKey) {
-    if (!this.enabled || !canonicalKey) {
-      return "";
-    }
-
-    if (this.conflicts.has(canonicalKey)) {
-      return "";
-    }
-
-    const existing = this.positive.get(canonicalKey);
-    if (!existing?.cachePath) {
-      return "";
-    }
-
-    try {
-      const stats = await fs.promises.stat(existing.cachePath);
-      if (!stats.isFile()) {
-        throw new Error("not-file");
-      }
-      return existing.cachePath;
-    } catch {
-      this.#applyEvent({
-        type: "positive_remove",
-        payload: { key: canonicalKey },
-      });
-      return "";
-    }
   }
 
   shouldSkipRequest(canonicalKey, urlObj) {
@@ -271,58 +197,6 @@ export class MavenAffinityIndex {
     return true;
   }
 
-  recordSuccess({ canonicalKey, host, cachePath, fileName, urlObj = null }) {
-    if (!this.enabled || !canonicalKey || !cachePath || !fileName) {
-      return;
-    }
-
-    const previous = this.positive.get(canonicalKey);
-    if (previous && previous.fileName !== fileName) {
-      this.#applyEvent({
-        type: "conflict_set",
-        payload: {
-          key: canonicalKey,
-          value: {
-            reason: "file-name-mismatch",
-            updatedAt: nowMs(),
-            previousFileName: previous.fileName,
-            currentFileName: fileName,
-          },
-        },
-      });
-
-      this.#applyEvent({
-        type: "positive_remove",
-        payload: { key: canonicalKey },
-      });
-      return;
-    }
-
-    this.#applyEvent({
-      type: "positive_upsert",
-      payload: {
-        key: canonicalKey,
-        value: {
-          cachePath,
-          fileName,
-          host: String(host || "").toLowerCase(),
-          updatedAt: nowMs(),
-        },
-      },
-    });
-
-    const successScope = buildNegativeScope(urlObj);
-    if (successScope) {
-      const negativeKey = buildNegativeKey(successScope, canonicalKey);
-      if (this.negative.has(negativeKey)) {
-        this.#applyEvent({
-          type: "negative_remove",
-          payload: { key: negativeKey },
-        });
-      }
-    }
-  }
-
   recordNegative({ canonicalKey, urlObj, statusCode = 404, ttlMs = this.negativeTtlMs }) {
     const scope = buildNegativeScope(urlObj);
     if (!this.enabled || !canonicalKey || !scope) {
@@ -345,6 +219,16 @@ export class MavenAffinityIndex {
     });
   }
 
+  clearNegative({ canonicalKey, urlObj }) {
+    const scope = buildNegativeScope(urlObj);
+    if (!this.enabled || !canonicalKey || !scope) {
+      return;
+    }
+
+    const key = buildNegativeKey(scope, canonicalKey);
+    this.#applyEvent({ type: "negative_remove", payload: { key } });
+  }
+
   async flush() {
     if (!this.enabled || this.flushing) {
       return;
@@ -370,7 +254,7 @@ export class MavenAffinityIndex {
   }
 
   async #writeSnapshotAndResetEventLog() {
-    const snapshot = serializeSnapshot(this.positive, this.negative, this.conflicts);
+    const snapshot = serializeSnapshot(this.negative);
     const tempPath = `${this.snapshotPath}.tmp`;
     await fs.promises.writeFile(tempPath, `${JSON.stringify(snapshot, null, 2)}\n`, "utf8");
     await fs.promises.rename(tempPath, this.snapshotPath);

package/src/config/config.js

@@ -230,15 +230,16 @@ const multiThreadMinSizeBytes = Math.max(0, toInt(process.env.MULTI_THREAD_MIN_S
 const downloadTimeout = process.env.DOWNLOAD_TIMEOUT || "60s";
 const outboundKeepAliveInterval = process.env.OUTBOUND_KEEP_ALIVE_INTERVAL || "1s";
 const mavenNegativeCacheTtl = process.env.MAVEN_NEGATIVE_CACHE_TTL || "24h";
-const mavenAffinityFlushInterval = process.env.MAVEN_AFFINITY_FLUSH_INTERVAL || "5s";
+// Prefer new MAVEN_NEGATIVE_* names but fall back to legacy MAVEN_AFFINITY_* for compatibility
+const mavenNegativeFlushInterval = process.env.MAVEN_NEGATIVE_FLUSH_INTERVAL || process.env.MAVEN_AFFINITY_FLUSH_INTERVAL || "5s";
 const logRetention = process.env.LOG_RETENTION || "7d";
 
 const downloadTimeoutMs = Math.max(1, parseDurationToMs(downloadTimeout, 60 * 1000));
 const outboundKeepAliveMsecs = Math.max(1, parseDurationToMs(outboundKeepAliveInterval, 1000));
 const mavenNegativeCacheTtlMs = Math.max(1, parseDurationToMs(mavenNegativeCacheTtl, 24 * 60 * 60 * 1000));
-const mavenAffinityFlushIntervalMs = Math.max(1, parseDurationToMs(mavenAffinityFlushInterval, 5 * 1000));
+const mavenNegativeFlushIntervalMs = Math.max(1, parseDurationToMs(mavenNegativeFlushInterval, 5 * 1000));
 const logRetentionDays = Math.max(1, Math.ceil(parseDurationToMs(logRetention, 7 * 24 * 60 * 60 * 1000) / (24 * 60 * 60 * 1000)));
-const mavenAffinityEventMaxBytes = Math.max(1, toInt(process.env.MAVEN_AFFINITY_EVENT_MAX_MB, 8)) * 1024 * 1024;
+const mavenNegativeEventMaxBytes = Math.max(1, toInt(process.env.MAVEN_NEGATIVE_EVENT_MAX_MB ?? process.env.MAVEN_AFFINITY_EVENT_MAX_MB, 8)) * 1024 * 1024;
 
 export const config = {
   configMode,
@@ -268,13 +269,20 @@ export const config = {
   outboundKeepAliveMsecs,
   outboundMaxSockets: Math.max(1, toInt(process.env.OUTBOUND_MAX_SOCKETS, 64)),
   outboundMaxFreeSockets: Math.max(1, toInt(process.env.OUTBOUND_MAX_FREE_SOCKETS, 16)),
-  mavenAffinityEnabled: toBool(process.env.MAVEN_AFFINITY_ENABLED, true),
-  mavenAffinityIndexDir: path.resolve(configBaseDir, process.env.MAVEN_AFFINITY_INDEX_DIR || "data/index"),
+  // Negative-only index configuration (new names)
+  mavenNegativeEnabled: toBool(process.env.MAVEN_NEGATIVE_ENABLED ?? process.env.MAVEN_AFFINITY_ENABLED, true),
+  mavenNegativeIndexDir: path.resolve(configBaseDir, process.env.MAVEN_NEGATIVE_INDEX_DIR || process.env.MAVEN_AFFINITY_INDEX_DIR || "data/index"),
   mavenNegativeCacheTtl,
   mavenNegativeCacheTtlMs,
-  mavenAffinityFlushInterval,
-  mavenAffinityFlushIntervalMs,
-  mavenAffinityEventMaxBytes,
+  mavenNegativeFlushInterval,
+  mavenNegativeFlushIntervalMs,
+  mavenNegativeEventMaxBytes,
+  // Backwards-compatible aliases for older code that still references affinity names
+  mavenAffinityEnabled: toBool(process.env.MAVEN_NEGATIVE_ENABLED ?? process.env.MAVEN_AFFINITY_ENABLED, true),
+  mavenAffinityIndexDir: path.resolve(configBaseDir, process.env.MAVEN_NEGATIVE_INDEX_DIR || process.env.MAVEN_AFFINITY_INDEX_DIR || "data/index"),
+  mavenAffinityFlushInterval: mavenNegativeFlushInterval,
+  mavenAffinityFlushIntervalMs: mavenNegativeFlushIntervalMs,
+  mavenAffinityEventMaxBytes: mavenNegativeEventMaxBytes,
   cacheCleanupEnabled: toBool(process.env.CACHE_CLEANUP_ENABLED, true),
   cacheCleanupDailyAt: process.env.CACHE_CLEANUP_DAILY_AT || "03:00",
   cacheCleanupCheckMinInterval: process.env.CACHE_CLEANUP_CHECK_MIN_INTERVAL || "10m",

package/src/index.js

@@ -7,7 +7,7 @@ import { startProxyServer } from "./proxy/proxy-server.js";
 import { startRepoServer } from "./repo/repo-server.js";
 import { getTrustStoreCommands } from "./cert/truststore-utils.js";
 import { UpstreamProxyManager } from "./proxy/upstream-proxy.js";
-import { MavenAffinityIndex } from "./cache/maven-affinity-index.js";
+import { MavenNegativeIndex } from "./cache/maven-negative-index.js";
 import { CacheCleanupManager } from "./cache/cache-cleanup-manager.js";
 import { installConsoleLogFileMirror, installGlobalErrorLogging } from "./common/console-log-file.js";
 
@@ -84,8 +84,8 @@ async function main() {
   }
 
   const upstreamProxyManager = new UpstreamProxyManager(config, matchesDomain);
-  const mavenAffinityIndex = new MavenAffinityIndex(config);
-  await mavenAffinityIndex.init();
+  const mavenNegativeIndex = new MavenNegativeIndex(config);
+  await mavenNegativeIndex.init();
   const cacheCleanupManager = new CacheCleanupManager(config);
   await cacheCleanupManager.init();
 
@@ -97,7 +97,7 @@ async function main() {
     downloader,
     matchesDomain,
     upstreamProxyManager,
-    mavenAffinityIndex,
+    mavenNegativeIndex,
     cacheCleanupManager,
   );
   const repoServer = startRepoServer(config, downloader, cacheCleanupManager);
@@ -132,12 +132,12 @@ async function main() {
   startupInfo(`[maven-proxy] outbound keepAlive interval: ${config.outboundKeepAliveInterval}`);
   startupInfo(`[maven-proxy] outbound maxSockets: ${config.outboundMaxSockets}`);
   startupInfo(`[maven-proxy] outbound maxFreeSockets: ${config.outboundMaxFreeSockets}`);
-  startupInfo(`[maven-proxy] maven affinity enabled: ${config.mavenAffinityEnabled}`);
-  startupInfo(`[maven-proxy] maven affinity index dir: ${config.mavenAffinityIndexDir}`);
+  startupInfo(`[maven-proxy] maven negative index enabled: ${config.mavenNegativeEnabled}`);
+  startupInfo(`[maven-proxy] maven negative index dir: ${config.mavenNegativeIndexDir}`);
   startupInfo(`[maven-proxy] maven negative cache ttl: ${config.mavenNegativeCacheTtl}`);
-  startupInfo(`[maven-proxy] maven affinity flush interval: ${config.mavenAffinityFlushInterval}`);
+  startupInfo(`[maven-proxy] maven negative flush interval: ${config.mavenNegativeFlushInterval}`);
   startupInfo(`[maven-proxy] download timeout: ${config.downloadTimeout}`);
-  startupInfo(`[maven-proxy] maven affinity event max(MB): ${config.mavenAffinityEventMaxBytes / (1024 * 1024)}`);
+  startupInfo(`[maven-proxy] maven negative event max(MB): ${config.mavenNegativeEventMaxBytes / (1024 * 1024)}`);
   startupInfo(`[maven-proxy] cache cleanup enabled: ${config.cacheCleanupEnabled}`);
   startupInfo(`[maven-proxy] cache cleanup daily at: ${config.cacheCleanupDailyAt}`);
   startupInfo(`[maven-proxy] cache touch on hit: ${config.cacheTouchOnHit}`);
@@ -169,7 +169,7 @@ async function main() {
     repoServer.close();
     upstreamProxyManager.destroy();
     void cacheCleanupManager.destroy();
-    void mavenAffinityIndex.destroy();
+    void mavenNegativeIndex.destroy();
   };
 
   process.on("SIGINT", shutdown);

package/src/proxy/proxy-http-handler.js

@@ -36,6 +36,44 @@ function pickClient(protocol) {
   return protocol === "https:" ? https : http;
 }
 
+function hasFileExtension(urlObj) {
+  try {
+    const pathname = String(urlObj?.pathname || "");
+    const base = path.basename(pathname || "").toLowerCase();
+    if (!base) return false;
+
+    const knownSuffixes = [
+      ".pom",
+      ".jar",
+      ".aar",
+      ".war",
+      ".zip",
+      ".module",
+      ".xml",
+      ".sha1",
+      ".md5",
+      ".sha256",
+      ".sha512",
+      ".asc",
+      ".json",
+      ".toml",
+      ".klib",
+      ".tgz",
+      ".tar.gz",
+    ];
+
+    if (knownSuffixes.some((s) => base.endsWith(s))) return true;
+
+    const ext = path.extname(base);
+    if (!ext) return false;
+
+    // Treat numeric-only extensions (like version segments) as NOT an extension.
+    return /[a-zA-Z]/.test(ext);
+  } catch {
+    return false;
+  }
+}
+
 function sanitizeHeaders(headers = {}) {
   const result = { ...headers };
   const blocked = [
@@ -80,11 +118,7 @@ function sendErrorText(res, statusCode, message, context = "proxy") {
   sendText(res, statusCode, message);
 }
 
-export function isPositiveAffinityEligible(fileName) {
-  const lower = String(fileName || "").toLowerCase();
-  const base = lower.replace(/\.(sha1|sha256|sha512|md5|asc)$/i, "");
-  return /\.(jar|aar|war)$/i.test(base);
-}
+// Positive affinity removed: only negative index (404/410) is retained.
 
 function buildUrl(req, forcedProtocol = null) {
   const raw = req.url || "/";
@@ -204,7 +238,7 @@ export function createHttpRequestHandler({
         mavenCacheIgnorePathPrefixRules: config.mavenCacheIgnorePathPrefixRules,
       });
 
-      if (ecosystem === "maven" && mavenAffinityIndex?.enabled) {
+      if (ecosystem === "maven" && mavenAffinityIndex) {
         canonical = parseMavenReleaseCanonical(urlObj);
       }
     } catch (error) {
@@ -221,24 +255,21 @@ export function createHttpRequestHandler({
     }
 
     if (canonical && mavenAffinityIndex) {
-      const canUsePositiveAffinity = !config.mavenCacheUseDomainDir && isPositiveAffinityEligible(canonical.fileName);
-
-      if (canUsePositiveAffinity) {
-        const preferredPath = await mavenAffinityIndex.resolvePreferredCachePath(canonical.canonicalKey);
-        if (preferredPath) {
-          console.log(`[proxy] affinity hit canonical=${canonical.canonicalKey} host=${urlObj.hostname}`);
-          await serveFile(res, req, preferredPath, cacheCleanupManager);
-          return;
-        }
-      }
-
       if (mavenAffinityIndex.shouldSkipRequest(canonical.canonicalKey, urlObj)) {
-        console.log(`[proxy] affinity negative skip canonical=${canonical.canonicalKey} host=${urlObj.hostname}`);
+        console.log(`[proxy] negative skip canonical=${canonical.canonicalKey} host=${urlObj.hostname}`);
         sendText(res, 404, "Not Found");
         return;
       }
     }
 
+    // If the requested resource has no file extension, do not cache it.
+    // If a file without extension already exists in cache, it was handled above.
+    if (!hasFileExtension(urlObj)) {
+      console.log(`[proxy] skip caching for extensionless path host=${urlObj.hostname} path=${urlObj.pathname}`);
+      forwardDirectRequest(req, res, urlObj, config.downloadTimeoutMs, upstreamProxyManager);
+      return;
+    }
+
     try {
       console.log(`[proxy] local cache miss host=${urlObj.hostname} path=${urlObj.pathname}`);
       if (cacheCleanupManager) {
@@ -247,19 +278,13 @@ export function createHttpRequestHandler({
       await fs.promises.mkdir(path.dirname(cachePath), { recursive: true });
       await downloader.ensureCached(urlObj, cachePath, req.headers);
 
-      if (
-        canonical &&
-        mavenAffinityIndex &&
-        !config.mavenCacheUseDomainDir &&
-        isPositiveAffinityEligible(canonical.fileName)
-      ) {
-        mavenAffinityIndex.recordSuccess({
-          canonicalKey: canonical.canonicalKey,
-          host: urlObj.hostname,
-          cachePath,
-          fileName: canonical.fileName,
-          urlObj,
-        });
+      if (canonical && mavenAffinityIndex) {
+        try {
+          // Clear any negative entry for this request scope on successful fetch.
+          mavenAffinityIndex.clearNegative({ canonicalKey: canonical.canonicalKey, urlObj });
+        } catch (err) {
+          console.error(`[proxy] clearing negative index failed: ${err?.message || err}`);
+        }
       }
 
       res.setHeader("x-cache", "MISS");