veryfront 0.1.1039 → 0.1.1040

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1039",
+    "version": "0.1.1040",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/modules/server/module-response-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-response-cache.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-response-cache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAQzD,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oCAAoC;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,+BAA+B,CAAC;IACvC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;CAClC;AAiDD,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,oCAAoC,GAC5C,MAAM,CAmBR;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAqBpD;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED,wBAAgB,kDAAkD,CAChE,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GACrC,IAAI,CAEN"}
+{"version":3,"file":"module-response-cache.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-response-cache.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAQzD,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oCAAoC;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gCAAgC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,+BAA+B,CAAC;IACvC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;CAClC;AAkED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,oCAAoC,GAC5C,MAAM,CAqBR;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAqBpD;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED,wBAAgB,kDAAkD,CAChE,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GACrC,IAAI,CAEN"}

package/esm/src/modules/server/module-response-cache.js

@@ -44,6 +44,22 @@ async function getDistributedCache() {
         return null;
     return cache.type === "api" || cache.type === "redis" ? cache : null;
 }
+/**
+ * The distributed cache backend validates keys against a strict charset
+ * (alphanumeric plus `_ : . - /`) and rejects anything else with HTTP 400.
+ * Request module paths routinely contain characters outside that set — notably
+ * `@` (e.g. `/@vite/env`) — so an unsanitized path makes the composed key
+ * unstorable and the response is silently never cached.
+ *
+ * We prefix a hash of the exact path (collision resistance for two paths that
+ * clamp to the same readable form) with a charset-clamped readable form (kept
+ * for debuggability). `:` is deliberately excluded from the readable form so it
+ * cannot be confused with the key's field separator.
+ */
+function sanitizeModulePathForCacheKey(modulePath) {
+    const readable = modulePath.replace(/[^a-zA-Z0-9_.\-/]/g, "-");
+    return `${hashString(modulePath)}-${readable}`;
+}
 export function buildReleaseModuleResponseCacheKey(options) {
     const projectScope = [
         options.projectIdentity,
@@ -51,6 +67,8 @@ export function buildReleaseModuleResponseCacheKey(options) {
         options.projectSlug ?? "",
         options.branch ?? "",
     ].join("\0");
+    // Fields are joined with `:` (an allowed key character) rather than a NUL
+    // byte, which the distributed cache backend's key validator also rejects.
     return [
         "module-server-release-response",
         hashString(projectScope),
@@ -60,8 +78,8 @@ export function buildReleaseModuleResponseCacheKey(options) {
         options.releaseDependencyManifestVersion == null
             ? ""
             : `release-dependency-manifest:${options.releaseDependencyManifestVersion}`,
-        options.modulePath,
-    ].join("\0");
+        sanitizeModulePathForCacheKey(options.modulePath),
+    ].join(":");
 }
 export async function getReleaseModuleResponse(cacheKey) {
     const localEntry = releaseModuleResponseCache.get(cacheKey);

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1039";
+export declare const VERSION = "0.1.1040";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1039";
+export const VERSION = "0.1.1040";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1039",
+  "version": "0.1.1040",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -330,9 +330,9 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "ws": "8.21.0",
-    "@veryfront/ext-bundler-esbuild": "0.1.1039",
-    "@veryfront/ext-content-mdx": "0.1.1039",
-    "@veryfront/ext-css-tailwind": "0.1.1039"
+    "@veryfront/ext-bundler-esbuild": "0.1.1040",
+    "@veryfront/ext-content-mdx": "0.1.1040",
+    "@veryfront/ext-css-tailwind": "0.1.1040"
   },
   "devDependencies": {
     "@types/node": "20.9.0"