veryfront 0.1.1067 → 0.1.1068

package/esm/cli/commands/deploy/command.d.ts

@@ -82,10 +82,20 @@ interface Release {
     build_status: string;
     deploy_status: string;
 }
-interface Deployment {
+export type DeploymentRoutingConvergence = {
+    status: "converged";
+    acknowledged: number;
+    recipients: number;
+} | {
+    status: "pending";
+} | {
+    status: "skipped";
+};
+export interface Deployment {
     id: string;
     release_id: string;
     environment_id: string;
+    routing_convergence?: DeploymentRoutingConvergence;
 }
 export interface DeploymentVerification {
     projectId: string;
@@ -128,6 +138,7 @@ interface DeploymentVerificationOptions {
     delayMs?: number;
     verifiedRelease?: ReleaseSourceVerification;
 }
+export declare function getDeploymentRoutingConvergenceWarning(deployment: Deployment): string | null;
 export declare function assertProjectOwnership(resourceType: "Environment" | "Release", resource: {
     id: string;
     project_id?: string;

package/esm/cli/commands/deploy/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,wBAAwB,CAAC;AAchG;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAO5B,oDAAoD;;GAGvD,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;IALzB,oDAAoD;;GAKO,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;IAfxB,oDAAoD;;GAsBtD,CAAC;AAEH;;GAEG;AACH,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,GAAG,IAAI,CAAC;CACV;AAED,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC3C;AAED;;GAEG;AACH,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAaD,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,qBAAqB;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAqDD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,QAAQ,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAmCD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmB7B;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0EAErE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CASrB;AAMD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,yBAAyB,CAAC,CA2BpC;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAoEjC;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBvD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqHzE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,wBAAwB,CAAC;AAchG;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAO5B,oDAAoD;;GAGvD,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;IALzB,oDAAoD;;GAKO,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;IAfxB,oDAAoD;;GAsBtD,CAAC;AAEH;;GAEG;AACH,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,GAAG,IAAI,CAAC;CACV;AAED,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC3C;AAED;;GAEG;AACH,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAcD,MAAM,MAAM,4BAA4B,GACpC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,qBAAqB;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAsDD,wBAAgB,sCAAsC,CACpD,UAAU,EAAE,UAAU,GACrB,MAAM,GAAG,IAAI,CAaf;AAED,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,QAAQ,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAmCD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmB7B;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0EAErE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CASrB;AAMD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,yBAAyB,CAAC,CA2BpC;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAoEjC;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBvD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA4HzE"}

package/esm/cli/commands/deploy/command.js

@@ -10,7 +10,7 @@ import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import { cwd } from "../../../src/platform/index.js";
 import { createApiClient, resolveConfigWithAuth } from "../../shared/config.js";
 import { CommonArgs, createArgParser } from "../../shared/args.js";
-import { confirmPrompt, logInfo, logSuccess } from "../../utils/index.js";
+import { confirmPrompt, logInfo, logSuccess, logWarning } from "../../utils/index.js";
 import { createNoopSpinner, createSpinner, muted } from "../../ui/index.js";
 import { isJsonMode, streamJsonLine } from "../../shared/json-output.js";
 import { computeSourceDigest, getProjectTarget, normalizeControlPlane, readPushReceipt, resolveGitSource, validatePushReceipt, } from "../../shared/deployment-provenance.js";
@@ -60,8 +60,20 @@ function normalizeDeployment(deployment) {
         id: deployment.id,
         release_id: releaseId,
         environment_id: environmentId,
+        routing_convergence: deployment.routing_convergence,
     };
 }
+export function getDeploymentRoutingConvergenceWarning(deployment) {
+    const convergence = deployment.routing_convergence;
+    if (!convergence)
+        return null;
+    if (convergence.status === "converged" &&
+        convergence.recipients > 0 &&
+        convergence.acknowledged >= convergence.recipients) {
+        return null;
+    }
+    return `Deployment ${deployment.id} committed, but data-plane routing convergence was not confirmed; bounded cache expiry remains the recovery path`;
+}
 export function assertProjectOwnership(resourceType, resource, projectId) {
     if (resource.project_id && resource.project_id !== projectId) {
         throw new Error(`${resourceType} ${resource.id} does not belong to resolved project ${projectId}`);
@@ -348,6 +360,12 @@ export async function deployCommand(options) {
     logInfo(`  Environment: ${env} (${verification.environmentId})`);
     logInfo(`  Release: ${release.name} (${verification.releaseVersion}, ${verification.releaseId})`);
     logInfo(`  Deployment: ${verification.deploymentId}`);
+    if (deployment.routing_convergence?.status === "converged") {
+        logInfo(`  Data plane: ${deployment.routing_convergence.acknowledged}/${deployment.routing_convergence.recipients} proxy replicas converged`);
+    }
+    const routingConvergenceWarning = getDeploymentRoutingConvergenceWarning(deployment);
+    if (routingConvergenceWarning)
+        logWarning(routingConvergenceWarning);
     logInfo(`  Commit: ${verification.commitSha}`);
     logInfo(`  Source digest: ${verification.sourceDigest}`);
     logInfo(`  Control plane: ${normalizeControlPlane(config.apiUrl)}`);
@@ -448,6 +466,14 @@ async function deployCommandJson(options) {
             sourceDigest: source.sourceDigest,
         }, { verifiedRelease });
         streamJsonLine({ type: "step", name: "verify-deployment", status: "completed" });
+        const routingConvergenceWarning = getDeploymentRoutingConvergenceWarning(deployment);
+        if (routingConvergenceWarning) {
+            streamJsonLine({
+                type: "warning",
+                code: "routing-convergence-unconfirmed",
+                message: routingConvergenceWarning,
+            });
+        }
         streamJsonLine({
             type: "result",
             success: true,
@@ -462,6 +488,7 @@ async function deployCommandJson(options) {
                 environment: env,
                 environmentId: verification.environmentId,
                 deploymentId: verification.deploymentId,
+                routingConvergence: deployment.routing_convergence ?? null,
                 commitSha: verification.commitSha,
                 sourceDigest: verification.sourceDigest,
                 controlPlane: normalizeControlPlane(config.apiUrl),

package/esm/cli/commands/deploy/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Deploy command - Create and deploy releases
  */
-export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
-export type { DeploymentVerification, DeployOptions, ReleaseSourceVerification, } from "./command.js";
+export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getDeploymentRoutingConvergenceWarning, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
+export type { Deployment, DeploymentRoutingConvergence, DeploymentVerification, DeployOptions, ReleaseSourceVerification, } from "./command.js";
 export { handleDeployCommand } from "./handler.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/cli/commands/deploy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,sCAAsC,EACtC,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,UAAU,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,aAAa,EACb,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/esm/cli/commands/deploy/index.js

@@ -1,5 +1,5 @@
 /**
  * Deploy command - Create and deploy releases
  */
-export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
+export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getDeploymentRoutingConvergenceWarning, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
 export { handleDeployCommand } from "./handler.js";

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1067",
+    "version": "0.1.1068",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/proxy/handler.d.ts

@@ -48,6 +48,20 @@ export interface ProxyRequestOptions {
     url?: URL;
     timing?: ProxyServerTiming;
 }
+export interface ProxyRoutingInvalidation {
+    projectId: string;
+    projectSlug?: string;
+    deploymentId?: string;
+    environmentId?: string;
+    environmentName?: string;
+    releaseId?: string;
+}
+export interface ConfirmedProxyRoutingInvalidation extends ProxyRoutingInvalidation {
+    projectSlug: string;
+    environmentId: string;
+    environmentName: string;
+    releaseId: string;
+}
 export declare function createProxyHandler(options: ProxyHandlerOptions): {
     processRequest: (req: Request, options?: ProxyRequestOptions) => Promise<ProxyContext>;
     getTokenForApi: (req: Request, options?: ProxyRequestOptions) => Promise<string | undefined>;
@@ -59,6 +73,11 @@ export declare function createProxyHandler(options: ProxyHandlerOptions): {
     }>;
     close: () => Promise<void>;
     validateConfig: () => string[];
+    invalidateRoutingLookup: (input: ProxyRoutingInvalidation) => {
+        evictedEntries: number;
+        generation: number;
+    };
+    invalidateAndConfirmRoutingLookup: (input: ConfirmedProxyRoutingInvalidation) => Promise<void>;
     localProjects: Record<string, string>;
 };
 export type ProxyHandler = ReturnType<typeof createProxyHandler>;

package/esm/src/proxy/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAenD,OAAO,EAAiC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG3F,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAE9E,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAuRX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA+PtD,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,YAAY,CAAC;0BAkYjB,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAhgBH,MAAM,EAAE;;EAsiBpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CA+B7E"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAenD,OAAO,EAAiC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG3F,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAE9E,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAoSX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAkC,SAAQ,wBAAwB;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA4atD,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,YAAY,CAAC;0BAwYjB,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAtgBH,MAAM,EAAE;qCA7KK,wBAAwB,KAAG;QACjE,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;KACpB;+CAkIQ,iCAAiC,KACvC,OAAO,CAAC,IAAI,CAAC;;EAqlBjB;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CA+B7E"}

package/esm/src/proxy/handler.js

@@ -26,6 +26,7 @@ export const INTERNAL_PROXY_HEADERS = [
 ];
 const DEFAULT_PROXY_ROUTING_CACHE_TTL_MS = 60_000;
 const DEFAULT_PROXY_ROUTING_CACHE_MAX_ENTRIES = 1_000;
+const MAX_ROUTING_LOOKUP_INVALIDATION_RETRIES = 2;
 function readNonNegativeIntegerEnv(name, fallback) {
     const raw = getEnv(name);
     if (!raw)
@@ -46,6 +47,12 @@ class ProxyLookupAuthError extends Error {
         this.name = "ProxyLookupAuthError";
     }
 }
+class ProxyRoutingInvalidationRaceError extends Error {
+    constructor() {
+        super("Project routing changed during request; retry");
+        this.name = "ProxyRoutingInvalidationRaceError";
+    }
+}
 function isProxyLookupAuthError(error) {
     return error instanceof ProxyLookupAuthError;
 }
@@ -225,6 +232,11 @@ export function createProxyHandler(options) {
     const routingCacheMaxEntries = readNonNegativeIntegerEnv("VERYFRONT_PROXY_ROUTING_CACHE_MAX_ENTRIES", DEFAULT_PROXY_ROUTING_CACHE_MAX_ENTRIES);
     const routingLookupCache = new Map();
     const routingLookupInflight = new Map();
+    const projectInvalidationGenerations = new Map();
+    const lookupKeyInvalidationGenerations = new Map();
+    const activeRoutingLookupGenerations = new Map();
+    const maxTrackedInvalidationGenerations = Math.max(routingCacheMaxEntries, DEFAULT_PROXY_ROUTING_CACHE_MAX_ENTRIES);
+    let routingLookupGeneration = 0;
     async function resolveProjectLookup(lookupKey, token, timing) {
         return await profileProxyServerTimingPhase(timing ?? { enabled: false, startedAt: 0, phases: new Map() }, "proxy.project_lookup", () => lookupProjectByDomain(lookupKey, config.apiBaseUrl, token, logger));
     }
@@ -261,6 +273,71 @@ export function createProxyHandler(options) {
             expiresAt: Date.now() + routingCacheTtlMs,
         });
     }
+    function pruneInvalidationGenerations(generations) {
+        const oldestActiveGeneration = activeRoutingLookupGenerations.size > 0
+            ? Math.min(...activeRoutingLookupGenerations.keys())
+            : Number.POSITIVE_INFINITY;
+        while (generations.size > maxTrackedInvalidationGenerations) {
+            const oldestEntry = generations.entries().next().value;
+            if (!oldestEntry || oldestEntry[1] > oldestActiveGeneration)
+                break;
+            generations.delete(oldestEntry[0]);
+        }
+    }
+    function rememberInvalidationGeneration(generations, key, generation) {
+        generations.delete(key);
+        generations.set(key, generation);
+        pruneInvalidationGenerations(generations);
+    }
+    function beginRoutingLookup(generation) {
+        activeRoutingLookupGenerations.set(generation, (activeRoutingLookupGenerations.get(generation) ?? 0) + 1);
+    }
+    function endRoutingLookup(generation) {
+        const activeCount = activeRoutingLookupGenerations.get(generation) ?? 0;
+        if (activeCount <= 1)
+            activeRoutingLookupGenerations.delete(generation);
+        else
+            activeRoutingLookupGenerations.set(generation, activeCount - 1);
+        pruneInvalidationGenerations(projectInvalidationGenerations);
+        pruneInvalidationGenerations(lookupKeyInvalidationGenerations);
+    }
+    function wasRoutingLookupInvalidated(cacheKey, result, startedAtGeneration) {
+        const keyGeneration = lookupKeyInvalidationGenerations.get(cacheKey) ?? 0;
+        if (keyGeneration > startedAtGeneration)
+            return true;
+        if (!result)
+            return false;
+        return (projectInvalidationGenerations.get(result.id) ?? 0) > startedAtGeneration;
+    }
+    function invalidateRoutingLookup(input) {
+        const generation = ++routingLookupGeneration;
+        rememberInvalidationGeneration(projectInvalidationGenerations, input.projectId, generation);
+        const normalizedProjectSlug = input.projectSlug
+            ? normalizeProjectLookupKey(input.projectSlug)
+            : undefined;
+        if (normalizedProjectSlug) {
+            rememberInvalidationGeneration(lookupKeyInvalidationGenerations, normalizedProjectSlug, generation);
+        }
+        let evictedEntries = 0;
+        for (const [cacheKey, entry] of routingLookupCache) {
+            if (entry.value.id !== input.projectId && cacheKey !== normalizedProjectSlug)
+                continue;
+            routingLookupCache.delete(cacheKey);
+            rememberInvalidationGeneration(lookupKeyInvalidationGenerations, cacheKey, generation);
+            evictedEntries++;
+        }
+        logger?.info("Proxy routing metadata invalidated after deployment activation", {
+            projectId: input.projectId,
+            projectSlug: input.projectSlug,
+            deploymentId: input.deploymentId,
+            environmentId: input.environmentId,
+            environmentName: input.environmentName,
+            releaseId: input.releaseId,
+            generation,
+            evictedEntries,
+        });
+        return { evictedEntries, generation };
+    }
     async function resolveProjectRoutingLookup(lookupKey, token, timing) {
         const cacheKey = normalizeProjectLookupKey(lookupKey);
         return await profileProxyServerTimingPhase(timing ?? { enabled: false, startedAt: 0, phases: new Map() }, "proxy.routing_lookup", async () => {
@@ -270,27 +347,89 @@ export function createProxyHandler(options) {
                 return cached;
             }
             const existingLookup = routingLookupInflight.get(cacheKey);
-            if (existingLookup) {
+            if (existingLookup?.generation === routingLookupGeneration) {
                 logger?.debug("Proxy routing metadata lookup joined in-flight request", { lookupKey });
-                return await existingLookup;
+                return await existingLookup.promise;
             }
-            const lookupPromise = lookupProjectRoutingMetadata(lookupKey, config.apiBaseUrl, token, logger)
-                .then((result) => {
-                if (result) {
-                    setCachedRoutingLookup(cacheKey, result);
+            const lookupPromise = (async () => {
+                for (let attempt = 0; attempt <= MAX_ROUTING_LOOKUP_INVALIDATION_RETRIES; attempt++) {
+                    const startedAtGeneration = routingLookupGeneration;
+                    beginRoutingLookup(startedAtGeneration);
+                    try {
+                        const result = await lookupProjectRoutingMetadata(lookupKey, config.apiBaseUrl, token, logger);
+                        if (!wasRoutingLookupInvalidated(cacheKey, result, startedAtGeneration)) {
+                            if (result)
+                                setCachedRoutingLookup(cacheKey, result);
+                            return result;
+                        }
+                        logger?.info("Retrying proxy routing metadata lookup after invalidation race", {
+                            lookupKey,
+                            attempt: attempt + 1,
+                            generation: routingLookupGeneration,
+                        });
+                        if (attempt === MAX_ROUTING_LOOKUP_INVALIDATION_RETRIES) {
+                            logger?.warn("Proxy routing metadata changed repeatedly during lookup; failing request closed", {
+                                lookupKey,
+                                attempts: attempt + 1,
+                            });
+                            throw new ProxyRoutingInvalidationRaceError();
+                        }
+                    }
+                    finally {
+                        endRoutingLookup(startedAtGeneration);
+                    }
                 }
-                return result;
-            })
-                .finally(() => {
-                routingLookupInflight.delete(cacheKey);
-            });
-            routingLookupInflight.set(cacheKey, lookupPromise);
-            return await lookupPromise;
+                return null;
+            })();
+            const inflightEntry = {
+                generation: routingLookupGeneration,
+                promise: lookupPromise,
+            };
+            routingLookupInflight.set(cacheKey, inflightEntry);
+            try {
+                return await lookupPromise;
+            }
+            finally {
+                if (routingLookupInflight.get(cacheKey) === inflightEntry) {
+                    routingLookupInflight.delete(cacheKey);
+                }
+            }
         });
     }
     async function resolveProjectAccessLookup(lookupKey, token, includeUsers, timing) {
         return await profileProxyServerTimingPhase(timing ?? { enabled: false, startedAt: 0, phases: new Map() }, "proxy.access_lookup", () => lookupProjectAccessMetadata(lookupKey, config.apiBaseUrl, token, includeUsers, logger));
     }
+    async function invalidateAndConfirmRoutingLookup(input) {
+        invalidateRoutingLookup(input);
+        const scope = getScope(input.environmentName.toLowerCase());
+        const resolveWithToken = async (token) => {
+            const result = await resolveProjectRoutingLookup(input.projectSlug, token);
+            const environment = result?.environments?.find((candidate) => candidate.id === input.environmentId);
+            if (result?.id !== input.projectId ||
+                environment?.active_release_id !== input.releaseId) {
+                throw new Error(`Proxy routing metadata did not converge for project ${input.projectId} environment ${input.environmentId}`);
+            }
+        };
+        let token = await tokenManager.getToken(scope, input.projectSlug);
+        try {
+            await resolveWithToken(token);
+        }
+        catch (error) {
+            if (!isProxyLookupAuthError(error))
+                throw error;
+            await tokenManager.invalidateToken(scope, input.projectSlug);
+            token = await tokenManager.getToken(scope, input.projectSlug);
+            await resolveWithToken(token);
+        }
+        logger?.info("Proxy routing metadata converged after deployment activation", {
+            projectId: input.projectId,
+            projectSlug: input.projectSlug,
+            deploymentId: input.deploymentId,
+            environmentId: input.environmentId,
+            environmentName: input.environmentName,
+            releaseId: input.releaseId,
+        });
+    }
     function validateConfig() {
         const missing = [];
         if (!config.apiClientId)
@@ -410,6 +549,9 @@ export function createProxyHandler(options) {
                 return await resolveWithCurrentToken();
             }
             catch (error) {
+                if (error instanceof ProxyRoutingInvalidationRaceError) {
+                    return { error: { status: 503, message: error.message } };
+                }
                 if (!isProxyLookupAuthError(error))
                     throw error;
                 const projectKey = tokenIdentity.projectSlug ?? tokenIdentity.customDomain;
@@ -444,6 +586,9 @@ export function createProxyHandler(options) {
                     return await resolveWithCurrentToken();
                 }
                 catch (retryError) {
+                    if (retryError instanceof ProxyRoutingInvalidationRaceError) {
+                        return { error: { status: 503, message: retryError.message } };
+                    }
                     if (!isProxyLookupAuthError(retryError))
                         throw retryError;
                     logger?.error("Proxy API token rejected after refresh", retryError, {
@@ -689,6 +834,8 @@ export function createProxyHandler(options) {
         getStats,
         close,
         validateConfig,
+        invalidateRoutingLookup,
+        invalidateAndConfirmRoutingLookup,
         localProjects,
     };
 }

package/esm/src/proxy/main.js

@@ -15,6 +15,8 @@
  * - LOCAL_PROJECTS: JSON map of slug → filesystem path (for dev)
  * - CACHE_TYPE: "memory" (default) or "redis"
  * - REDIS_URL: Redis connection URL (required if CACHE_TYPE=redis)
+ * - VERYFRONT_PROXY_EXPECTED_REPLICAS: Minimum proxy replicas required to acknowledge routing changes
+ * - VERYFRONT_PROXY_ROUTING_INVALIDATION_SECRET: HMAC secret for Redis routing events and acknowledgements
  * - VERYFRONT_API_INTERNAL_URL: API URL for internal endpoints (falls back to VERYFRONT_PROXY_API_BASE_URL)
  * - VERYFRONT_API_INTERNAL_USER: Basic auth user for internal API
  * - VERYFRONT_API_INTERNAL_PASS: Basic auth pass for internal API
@@ -42,6 +44,8 @@ import { createUpstreamFailureResponse, createUpstreamTimeoutResponse, UPSTREAM_
 import { createProxyServerTiming, markProxyServerTimingPhase, profileProxyServerTimingPhase, withProxyServerTimingHeader, } from "./server-timing.js";
 import { removeStickyCookieFromPublicCacheableResponse } from "./response-headers.js";
 import { closeProxyServerWithin, createProxyDrainingResponse, parseProxyDrainTimeoutMs, ProxyRequestDrainTracker, } from "./request-drain.js";
+import { handleProxyRoutingInvalidationRequest, PROXY_ROUTING_INVALIDATION_PATH, } from "./routing-invalidation.js";
+import { startProxyRoutingInvalidationBus } from "./routing-invalidation-redis.js";
 function getLocalProjects() {
     const raw = getEnv("LOCAL_PROJECTS");
     return raw ? JSON.parse(raw) : {};
@@ -98,6 +102,17 @@ const DEFAULT_SERVER_RETRY_DELAY_MS = 100;
 const VERYFRONT_SERVER_RETRY_COUNT = parseInt(getEnv("VERYFRONT_SERVER_RETRY_COUNT") || String(DEFAULT_SERVER_RETRY_COUNT));
 const VERYFRONT_SERVER_RETRY_DELAY_MS = parseInt(getEnv("VERYFRONT_SERVER_RETRY_DELAY_MS") || String(DEFAULT_SERVER_RETRY_DELAY_MS));
 const SHUTDOWN_DRAIN_TIMEOUT_MS = parseProxyDrainTimeoutMs(getEnv("SHUTDOWN_DRAIN_TIMEOUT_MS"), DEFAULT_SHUTDOWN_DRAIN_TIMEOUT_MS);
+const routingInvalidationSecret = getEnv("VERYFRONT_PROXY_ROUTING_INVALIDATION_SECRET") ?? "";
+const routingInvalidationSecretBytes = new TextEncoder().encode(routingInvalidationSecret).byteLength;
+const expectedReplicasRaw = getEnv("VERYFRONT_PROXY_EXPECTED_REPLICAS");
+const expectedReplicas = Number(expectedReplicasRaw);
+const hasValidExpectedReplicas = Number.isInteger(expectedReplicas) && expectedReplicas > 0;
+if (isProduction() && !hasValidExpectedReplicas) {
+    throw new Error("VERYFRONT_PROXY_EXPECTED_REPLICAS must be a positive integer in production");
+}
+if (isProduction() && routingInvalidationSecretBytes < 32) {
+    throw new Error("VERYFRONT_PROXY_ROUTING_INVALIDATION_SECRET must contain at least 32 bytes in production");
+}
 const proxyRequestDrainTracker = new ProxyRequestDrainTracker();
 let shuttingDown = false;
 const { createAuthProvider } = await importFirstPartyExtensionModule("ext-auth-jwt", "@veryfront/ext-auth-jwt").catch((error) => {
@@ -106,16 +121,32 @@ const { createAuthProvider } = await importFirstPartyExtensionModule("ext-auth-j
 register("AuthProvider", createAuthProvider({}));
 // Initialize cache and proxy handler
 const cache = await createCacheFromEnv();
+const routingInvalidationLogger = {
+    debug: (msg, extra) => proxyLogger.debug(msg, extra),
+    info: (msg, extra) => proxyLogger.info(msg, extra),
+    warn: (msg, extra) => proxyLogger.warn(msg, extra),
+    error: (msg, error, extra) => proxyLogger.error(msg, extra ?? {}, error),
+};
 const proxyHandler = createProxyHandler({
     config,
     cache,
-    logger: {
-        debug: (msg, extra) => proxyLogger.debug(msg, extra),
-        info: (msg, extra) => proxyLogger.info(msg, extra),
-        warn: (msg, extra) => proxyLogger.warn(msg, extra),
-        error: (msg, error, extra) => proxyLogger.error(msg, extra ?? {}, error),
-    },
+    logger: routingInvalidationLogger,
+});
+const routingInvalidationBus = await startProxyRoutingInvalidationBus({
+    expectedReplicas: hasValidExpectedReplicas ? expectedReplicas : undefined,
+    integritySecret: routingInvalidationSecret,
+    logger: routingInvalidationLogger,
+    onInvalidate: proxyHandler.invalidateAndConfirmRoutingLookup,
+}).catch((error) => {
+    if (isProduction()) {
+        throw new Error("Proxy routing invalidation bus failed to start", { cause: error });
+    }
+    proxyLogger.error("Proxy routing invalidation bus failed; TTL recovery remains active", {}, error instanceof Error ? error : new Error(String(error)));
+    return null;
 });
+if (isProduction() && !routingInvalidationBus) {
+    throw new Error("Proxy routing invalidation bus requires REDIS_URL and a valid VERYFRONT_PROXY_ROUTING_INVALIDATION_SECRET in production");
+}
 // Validate configuration on startup
 const missingCredentials = proxyHandler.validateConfig();
 if (missingCredentials.length > 0) {
@@ -499,6 +530,11 @@ async function router(req) {
         if (req.headers.get("upgrade")?.toLowerCase() === "websocket") {
             response = await handleWebSocketUpgrade(req, url);
         }
+        else if (url.pathname === PROXY_ROUTING_INVALIDATION_PATH) {
+            response = await handleProxyRoutingInvalidationRequest(req, {
+                publisher: routingInvalidationBus,
+            });
+        }
         else if (url.pathname === "/_proxy/stats") {
             response = Object.keys(proxyHandler.localProjects).length === 0
                 ? new Response("Forbidden", { status: 403 })
@@ -533,6 +569,8 @@ async function shutdown(signal) {
         drainTimeoutMs: SHUTDOWN_DRAIN_TIMEOUT_MS,
     });
     try {
+        // New requests receive the draining response after shuttingDown is set.
+        // Keep this replica subscribed while already-started responses finish.
         const drained = await proxyRequestDrainTracker.waitForDrain(SHUTDOWN_DRAIN_TIMEOUT_MS);
         if (!drained) {
             const now = performance.now();
@@ -545,6 +583,7 @@ async function shutdown(signal) {
                 })),
             });
         }
+        await routingInvalidationBus?.close();
         const closed = await closeProxyServerWithin(() => server.close(), PROXY_SERVER_CLOSE_TIMEOUT_MS);
         if (!closed) {
             proxyLogger.warn("Proxy server close timed out; process exit will close remaining connections", {

package/esm/src/proxy/routing-invalidation-redis.d.ts

@@ -0,0 +1,33 @@
+import type { ProxyRoutingInvalidationEvent, ProxyRoutingInvalidationPublisher } from "./routing-invalidation.js";
+type RedisListener = (message: string, channel: string) => void;
+export interface RoutingInvalidationRedisClient {
+    connect(): Promise<void>;
+    publish(channel: string, message: string): Promise<number>;
+    subscribe(channel: string, listener: RedisListener): Promise<number>;
+    unsubscribe(channel: string): Promise<number>;
+    close(): Promise<void>;
+    destroy(): void;
+    on?(event: "error", listener: (error: unknown) => void): unknown;
+}
+interface RoutingInvalidationLogger {
+    info(message: string, extra?: Record<string, unknown>): void;
+    warn(message: string, extra?: Record<string, unknown>): void;
+    error(message: string, error?: Error, extra?: Record<string, unknown>): void;
+}
+export interface ProxyRoutingInvalidationBus extends ProxyRoutingInvalidationPublisher {
+    close(): Promise<void>;
+}
+interface StartProxyRoutingInvalidationBusOptions {
+    acknowledgementTimeoutMs?: number;
+    createClient?: (redisUrl: string) => RoutingInvalidationRedisClient | Promise<RoutingInvalidationRedisClient>;
+    expectedReplicas?: number;
+    now?: () => number;
+    logger?: RoutingInvalidationLogger;
+    onInvalidate: (event: ProxyRoutingInvalidationEvent) => unknown | Promise<unknown>;
+    integritySecret?: string;
+    redisUrl?: string;
+    replicaId?: string;
+}
+export declare function startProxyRoutingInvalidationBus(options: StartProxyRoutingInvalidationBusOptions): Promise<ProxyRoutingInvalidationBus | null>;
+export {};
+//# sourceMappingURL=routing-invalidation-redis.d.ts.map

package/esm/src/proxy/routing-invalidation-redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-invalidation-redis.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/routing-invalidation-redis.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,6BAA6B,EAC7B,iCAAiC,EAElC,MAAM,2BAA2B,CAAC;AAgBnC,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAGhE,MAAM,WAAW,8BAA8B;IAC7C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC;IAChB,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;CAClE;AAED,UAAU,yBAAyB;IACjC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,2BAA4B,SAAQ,iCAAiC;IACpF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,UAAU,uCAAuC;IAC/C,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,QAAQ,EAAE,MAAM,KACb,8BAA8B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,YAAY,EAAE,CAAC,KAAK,EAAE,6BAA6B,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmPD,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAgP7C"}

package/esm/src/proxy/routing-invalidation-redis.js

@@ -0,0 +1,394 @@
+import * as dntShim from "../../_dnt.shims.js";
+import { getRedisModule } from "../platform/adapters/redis/modules.js";
+import { getEnv } from "../platform/compat/process.js";
+const ROUTING_INVALIDATION_CHANNEL = "vf-proxy-routing-invalidations-v1";
+const ROUTING_INVALIDATION_ACK_PREFIX = `${ROUTING_INVALIDATION_CHANNEL}:ack:`;
+const DEFAULT_ACKNOWLEDGEMENT_TIMEOUT_MS = 1_500;
+const DEFAULT_CONNECT_TIMEOUT_MS = 3_000;
+const MAX_RECONNECT_ATTEMPTS = 5;
+const MAX_RECENT_EVENT_IDS = 1_000;
+const MAX_SIGNED_ENVELOPE_BYTES = 24 * 1024;
+const MAX_SIGNED_PAYLOAD_BYTES = 16 * 1024;
+const DEFAULT_MAX_ENVELOPE_AGE_MS = 60_000;
+const DEFAULT_MAX_ENVELOPE_FUTURE_MS = 5_000;
+const INTEGRITY_SECRET_ENV_VAR = "VERYFRONT_PROXY_ROUTING_INVALIDATION_SECRET";
+const EVENT_SIGNATURE_DOMAIN = "vf-proxy-routing-invalidation:event:v1";
+const ACK_SIGNATURE_DOMAIN = "vf-proxy-routing-invalidation:ack:v1";
+function positiveInteger(value, fallback) {
+    const parsed = Number(value);
+    return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+}
+function encodedByteLength(value) {
+    return new TextEncoder().encode(value).byteLength;
+}
+function parseSignedEnvelope(message) {
+    if (encodedByteLength(message) > MAX_SIGNED_ENVELOPE_BYTES)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(message);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const envelope = parsed;
+    if (envelope.version !== 1 ||
+        typeof envelope.issuedAtMs !== "number" ||
+        !Number.isInteger(envelope.issuedAtMs) ||
+        envelope.issuedAtMs <= 0 ||
+        typeof envelope.payload !== "string" ||
+        encodedByteLength(envelope.payload) > MAX_SIGNED_PAYLOAD_BYTES ||
+        typeof envelope.signature !== "string" ||
+        envelope.signature.length < 32 ||
+        envelope.signature.length > 128) {
+        return null;
+    }
+    return envelope;
+}
+function signatureDomainPrefix(domain) {
+    return domain === "event" ? EVENT_SIGNATURE_DOMAIN : ACK_SIGNATURE_DOMAIN;
+}
+function signatureInput(domain, issuedAtMs, payload) {
+    const encoded = new TextEncoder().encode(`${signatureDomainPrefix(domain)}\0${issuedAtMs}\0${payload}`);
+    return encoded.buffer.slice(encoded.byteOffset, encoded.byteOffset + encoded.byteLength);
+}
+function base64UrlEncode(bytes) {
+    const binary = Array.from(new Uint8Array(bytes), (byte) => String.fromCharCode(byte)).join("");
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+}
+function base64UrlDecode(value) {
+    if (!/^[A-Za-z0-9_-]+$/u.test(value))
+        return null;
+    const padded = value.replaceAll("-", "+").replaceAll("_", "/").padEnd(Math.ceil(value.length / 4) * 4, "=");
+    try {
+        return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0)).buffer;
+    }
+    catch {
+        return null;
+    }
+}
+async function createHmacKey(secret) {
+    return dntShim.crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+}
+async function signPayload(key, domain, issuedAtMs, payload) {
+    return base64UrlEncode(await dntShim.crypto.subtle.sign("HMAC", key, signatureInput(domain, issuedAtMs, payload)));
+}
+async function verifyPayloadSignature(key, domain, issuedAtMs, payload, signature) {
+    const signatureBytes = base64UrlDecode(signature);
+    if (!signatureBytes)
+        return false;
+    return await dntShim.crypto.subtle.verify("HMAC", key, signatureBytes, signatureInput(domain, issuedAtMs, payload));
+}
+async function serializeSignedEnvelope(key, domain, payload, now) {
+    if (encodedByteLength(payload) > MAX_SIGNED_PAYLOAD_BYTES) {
+        throw new Error("Proxy routing invalidation payload is too large");
+    }
+    const issuedAtMs = Math.trunc(now());
+    return JSON.stringify({
+        version: 1,
+        issuedAtMs,
+        payload,
+        signature: await signPayload(key, domain, issuedAtMs, payload),
+    });
+}
+async function verifySignedEnvelope(key, domain, message, now) {
+    const envelope = parseSignedEnvelope(message);
+    if (!envelope)
+        return null;
+    const currentTimeMs = now();
+    if (envelope.issuedAtMs < currentTimeMs - DEFAULT_MAX_ENVELOPE_AGE_MS ||
+        envelope.issuedAtMs > currentTimeMs + DEFAULT_MAX_ENVELOPE_FUTURE_MS) {
+        return null;
+    }
+    const verified = await verifyPayloadSignature(key, domain, envelope.issuedAtMs, envelope.payload, envelope.signature);
+    return verified ? envelope.payload : null;
+}
+function parseEvent(message) {
+    if (encodedByteLength(message) > MAX_SIGNED_PAYLOAD_BYTES)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(message);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const event = parsed;
+    if (event.version !== 1 ||
+        typeof event.eventId !== "string" || !event.eventId ||
+        typeof event.projectId !== "string" || !event.projectId ||
+        typeof event.projectSlug !== "string" || !event.projectSlug ||
+        typeof event.deploymentId !== "string" || !event.deploymentId ||
+        typeof event.environmentId !== "string" || !event.environmentId ||
+        typeof event.environmentName !== "string" || !event.environmentName ||
+        typeof event.releaseId !== "string" || !event.releaseId) {
+        return null;
+    }
+    return event;
+}
+function parseAcknowledgement(message) {
+    if (encodedByteLength(message) > MAX_SIGNED_PAYLOAD_BYTES)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(message);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const acknowledgement = parsed;
+    if (typeof acknowledgement.eventId !== "string" || !acknowledgement.eventId ||
+        typeof acknowledgement.replicaId !== "string" || !acknowledgement.replicaId) {
+        return null;
+    }
+    return acknowledgement;
+}
+async function createDefaultClient(redisUrl) {
+    const { NodeRedis } = await getRedisModule();
+    if (!NodeRedis)
+        throw new Error("Redis client module is unavailable");
+    const createClient = NodeRedis.createClient;
+    return createClient({
+        url: redisUrl,
+        socket: {
+            connectTimeout: DEFAULT_CONNECT_TIMEOUT_MS,
+            reconnectStrategy: (retries) => retries >= MAX_RECONNECT_ATTEMPTS
+                ? new Error("Routing invalidation Redis reconnect limit reached")
+                : Math.min(100 * 2 ** retries, 1_000),
+        },
+    });
+}
+async function closeClient(client, logger) {
+    try {
+        await client.close();
+    }
+    catch (error) {
+        client.destroy();
+        logger?.warn("Failed to close routing invalidation Redis client cleanly", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+export async function startProxyRoutingInvalidationBus(options) {
+    const redisUrl = options.redisUrl === undefined ? getEnv("REDIS_URL") : options.redisUrl;
+    if (!redisUrl)
+        return null;
+    const integritySecret = options.integritySecret ?? getEnv(INTEGRITY_SECRET_ENV_VAR) ?? "";
+    if (!integritySecret)
+        return null;
+    const expectedReplicas = positiveInteger(options.expectedReplicas ?? getEnv("VERYFRONT_PROXY_EXPECTED_REPLICAS"), 1);
+    const acknowledgementTimeoutMs = positiveInteger(options.acknowledgementTimeoutMs, DEFAULT_ACKNOWLEDGEMENT_TIMEOUT_MS);
+    const replicaId = options.replicaId ?? getEnv("HOSTNAME") ?? dntShim.crypto.randomUUID();
+    const createClient = options.createClient ?? createDefaultClient;
+    const publishClient = await createClient(redisUrl);
+    const subscribeClient = await createClient(redisUrl);
+    const processedEventIds = new Set();
+    const eventProcessing = new Map();
+    const hmacKey = await createHmacKey(integritySecret);
+    const now = options.now ?? (() => Date.now());
+    const acknowledgementListeners = new Map();
+    const activeAcknowledgementChannels = new Set();
+    const closeWaiters = new Set();
+    let closed = false;
+    const waitForClose = () => {
+        if (closed)
+            return Promise.resolve();
+        return new Promise((resolve) => {
+            closeWaiters.add(resolve);
+        });
+    };
+    const resolveCloseWaiters = () => {
+        for (const resolve of closeWaiters)
+            resolve();
+        closeWaiters.clear();
+    };
+    const subscribeAcknowledgement = async (channel, listener) => {
+        let listeners = acknowledgementListeners.get(channel);
+        if (!listeners) {
+            listeners = new Set();
+            acknowledgementListeners.set(channel, listeners);
+            await subscribeClient.subscribe(channel, (message, receivedChannel) => {
+                if (receivedChannel !== channel)
+                    return;
+                for (const acknowledgementListener of listeners ?? []) {
+                    acknowledgementListener(message, receivedChannel);
+                }
+            });
+        }
+        listeners.add(listener);
+        activeAcknowledgementChannels.add(channel);
+    };
+    const unsubscribeAcknowledgement = async (channel, listener) => {
+        const listeners = acknowledgementListeners.get(channel);
+        if (!listeners)
+            return;
+        listeners.delete(listener);
+        if (listeners.size > 0)
+            return;
+        acknowledgementListeners.delete(channel);
+        activeAcknowledgementChannels.delete(channel);
+        if (!closed)
+            await subscribeClient.unsubscribe(channel);
+    };
+    const rememberProcessedEvent = (eventId) => {
+        processedEventIds.delete(eventId);
+        processedEventIds.add(eventId);
+        while (processedEventIds.size > MAX_RECENT_EVENT_IDS) {
+            const oldestEventId = processedEventIds.values().next().value;
+            if (!oldestEventId)
+                break;
+            processedEventIds.delete(oldestEventId);
+        }
+    };
+    const processEvent = (event) => {
+        if (processedEventIds.has(event.eventId))
+            return Promise.resolve();
+        const existing = eventProcessing.get(event.eventId);
+        if (existing)
+            return existing;
+        const processing = Promise.resolve()
+            .then(() => options.onInvalidate(event))
+            .then(() => {
+            rememberProcessedEvent(event.eventId);
+            eventProcessing.delete(event.eventId);
+        }, (error) => {
+            eventProcessing.delete(event.eventId);
+            throw error;
+        });
+        eventProcessing.set(event.eventId, processing);
+        return processing;
+    };
+    const logRedisError = (error) => {
+        options.logger?.error("Proxy routing invalidation Redis error", error instanceof Error ? error : new Error(String(error)));
+    };
+    publishClient.on?.("error", logRedisError);
+    subscribeClient.on?.("error", logRedisError);
+    try {
+        await Promise.all([publishClient.connect(), subscribeClient.connect()]);
+        await subscribeClient.subscribe(ROUTING_INVALIDATION_CHANNEL, (message, channel) => {
+            if (channel !== ROUTING_INVALIDATION_CHANNEL)
+                return;
+            void verifySignedEnvelope(hmacKey, "event", message, now)
+                .then((payload) => {
+                if (!payload || closed)
+                    return null;
+                const event = parseEvent(payload);
+                if (!event)
+                    return null;
+                return processEvent(event).then(async () => {
+                    if (closed)
+                        return;
+                    const acknowledgementPayload = JSON.stringify({ eventId: event.eventId, replicaId });
+                    await publishClient.publish(`${ROUTING_INVALIDATION_ACK_PREFIX}${event.eventId}`, await serializeSignedEnvelope(hmacKey, "ack", acknowledgementPayload, now));
+                });
+            })
+                .catch((error) => {
+                options.logger?.error("Failed to apply proxy routing invalidation", error instanceof Error ? error : new Error(String(error)));
+            });
+        });
+    }
+    catch (error) {
+        publishClient.destroy();
+        subscribeClient.destroy();
+        throw error;
+    }
+    options.logger?.info("Proxy routing invalidation bus connected", {
+        expectedReplicas,
+        replicaId,
+    });
+    return {
+        async publish(event) {
+            if (closed)
+                throw new Error("Proxy routing invalidation bus is closed");
+            const acknowledgementChannel = `${ROUTING_INVALIDATION_ACK_PREFIX}${event.eventId}`;
+            const acknowledgedReplicas = new Set();
+            let recipients = 0;
+            let resolveAcknowledged;
+            const acknowledgementReceived = new Promise((resolve) => {
+                resolveAcknowledged = resolve;
+            });
+            const acknowledgementListener = (message, channel) => {
+                if (channel !== acknowledgementChannel)
+                    return;
+                void verifySignedEnvelope(hmacKey, "ack", message, now)
+                    .then((payload) => {
+                    if (!payload)
+                        return;
+                    const acknowledgement = parseAcknowledgement(payload);
+                    if (!acknowledgement || acknowledgement.eventId !== event.eventId)
+                        return;
+                    acknowledgedReplicas.add(acknowledgement.replicaId);
+                    if (recipients > 0 && acknowledgedReplicas.size >= recipients) {
+                        resolveAcknowledged?.();
+                    }
+                })
+                    .catch((error) => {
+                    options.logger?.error("Failed to verify proxy routing invalidation acknowledgement", error instanceof Error ? error : new Error(String(error)), { eventId: event.eventId });
+                });
+            };
+            await subscribeAcknowledgement(acknowledgementChannel, acknowledgementListener);
+            try {
+                const eventPayload = JSON.stringify(event);
+                try {
+                    recipients = await publishClient.publish(ROUTING_INVALIDATION_CHANNEL, await serializeSignedEnvelope(hmacKey, "event", eventPayload, now));
+                }
+                catch (error) {
+                    if (!closed)
+                        throw error;
+                    return {
+                        acknowledged: acknowledgedReplicas.size,
+                        converged: false,
+                        recipients,
+                    };
+                }
+                if (recipients > 0 && acknowledgedReplicas.size >= recipients)
+                    resolveAcknowledged?.();
+                if (recipients > 0) {
+                    let timeout;
+                    await Promise.race([
+                        acknowledgementReceived,
+                        waitForClose(),
+                        new Promise((resolve) => {
+                            timeout = setTimeout(resolve, acknowledgementTimeoutMs);
+                        }),
+                    ]);
+                    if (timeout !== undefined)
+                        clearTimeout(timeout);
+                }
+                const acknowledged = acknowledgedReplicas.size;
+                return {
+                    acknowledged,
+                    converged: recipients >= expectedReplicas && acknowledged >= recipients,
+                    recipients,
+                };
+            }
+            finally {
+                await unsubscribeAcknowledgement(acknowledgementChannel, acknowledgementListener);
+            }
+        },
+        async close() {
+            if (closed)
+                return;
+            closed = true;
+            resolveCloseWaiters();
+            try {
+                await Promise.allSettled([
+                    subscribeClient.unsubscribe(ROUTING_INVALIDATION_CHANNEL),
+                    ...[...activeAcknowledgementChannels].map((channel) => subscribeClient.unsubscribe(channel)),
+                ]);
+            }
+            finally {
+                await Promise.all([
+                    closeClient(publishClient, options.logger),
+                    closeClient(subscribeClient, options.logger),
+                ]);
+            }
+        },
+    };
+}

package/esm/src/proxy/routing-invalidation.d.ts

@@ -0,0 +1,32 @@
+export declare const PROXY_ROUTING_INVALIDATION_PATH = "/_proxy/internal/routing-invalidation";
+export declare const PROXY_ROUTING_INVALIDATION_PLATFORM = "proxy-routing";
+export declare const PROXY_ROUTING_INVALIDATION_SUBJECT = "deployment-routing-invalidation";
+export interface ProxyRoutingInvalidationRequest {
+    version: 1;
+    projectId: string;
+    projectSlug: string;
+    deploymentId: string;
+    environmentId: string;
+    environmentName: string;
+    releaseId: string;
+}
+export interface ProxyRoutingInvalidationEvent extends ProxyRoutingInvalidationRequest {
+    eventId: string;
+}
+export interface ProxyRoutingInvalidationPublishResult {
+    acknowledged: number;
+    converged: boolean;
+    recipients: number;
+}
+export interface ProxyRoutingInvalidationPublisher {
+    publish(event: ProxyRoutingInvalidationEvent): Promise<ProxyRoutingInvalidationPublishResult>;
+}
+interface ProxyRoutingInvalidationHandlerOptions {
+    createEventId?: () => string;
+    publicKeyPem?: string;
+    publisher: ProxyRoutingInvalidationPublisher | null;
+}
+export declare function parseProxyRoutingInvalidationRequest(body: string): ProxyRoutingInvalidationRequest | null;
+export declare function handleProxyRoutingInvalidationRequest(req: Request, options: ProxyRoutingInvalidationHandlerOptions): Promise<Response>;
+export {};
+//# sourceMappingURL=routing-invalidation.d.ts.map

package/esm/src/proxy/routing-invalidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-invalidation.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/routing-invalidation.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,+BAA+B,0CAA0C,CAAC;AACvF,eAAO,MAAM,mCAAmC,kBAAkB,CAAC;AACnE,eAAO,MAAM,kCAAkC,oCAAoC,CAAC;AAOpF,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA8B,SAAQ,+BAA+B;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qCAAqC;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,CACL,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,qCAAqC,CAAC,CAAC;CACnD;AAED,UAAU,sCAAsC;IAC9C,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,iCAAiC,GAAG,IAAI,CAAC;CACrD;AAkDD,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,GACX,+BAA+B,GAAG,IAAI,CA+BxC;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,QAAQ,CAAC,CAqDnB"}

package/esm/src/proxy/routing-invalidation.js

@@ -0,0 +1,135 @@
+import * as dntShim from "../../_dnt.shims.js";
+import { verifyDispatchJws } from "../channels/control-plane.js";
+import { getHostEnv } from "../platform/compat/process.js";
+export const PROXY_ROUTING_INVALIDATION_PATH = "/_proxy/internal/routing-invalidation";
+export const PROXY_ROUTING_INVALIDATION_PLATFORM = "proxy-routing";
+export const PROXY_ROUTING_INVALIDATION_SUBJECT = "deployment-routing-invalidation";
+const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
+const PUBLIC_KEY_ENV_VAR = "CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY";
+const MAX_SIGNATURE_AGE_SECONDS = 60;
+const MAX_REQUEST_BODY_BYTES = 16 * 1024;
+function jsonResponse(status, body) {
+    return Response.json(body, {
+        status,
+        headers: { "cache-control": "no-store" },
+    });
+}
+function nonEmptyString(value) {
+    return typeof value === "string" && value.length > 0;
+}
+async function readBoundedRequestBody(req) {
+    if (!req.body)
+        return { body: "" };
+    const reader = req.body.getReader();
+    const chunks = [];
+    let totalBytes = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            totalBytes += value.byteLength;
+            if (totalBytes > MAX_REQUEST_BODY_BYTES) {
+                await reader.cancel("Request body is too large").catch(() => undefined);
+                return { error: "too-large" };
+            }
+            chunks.push(value);
+        }
+    }
+    catch {
+        return { error: "unreadable" };
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(totalBytes);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return { body: new TextDecoder().decode(bytes) };
+}
+export function parseProxyRoutingInvalidationRequest(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    const input = parsed;
+    if (input.version !== 1 ||
+        !nonEmptyString(input.projectId) ||
+        !nonEmptyString(input.projectSlug) ||
+        !nonEmptyString(input.deploymentId) ||
+        !nonEmptyString(input.environmentId) ||
+        !nonEmptyString(input.environmentName) ||
+        !nonEmptyString(input.releaseId)) {
+        return null;
+    }
+    return {
+        version: 1,
+        projectId: input.projectId,
+        projectSlug: input.projectSlug,
+        deploymentId: input.deploymentId,
+        environmentId: input.environmentId,
+        environmentName: input.environmentName,
+        releaseId: input.releaseId,
+    };
+}
+export async function handleProxyRoutingInvalidationRequest(req, options) {
+    if (req.method !== "POST") {
+        return new Response(null, { status: 405, headers: { allow: "POST" } });
+    }
+    const publicKeyPem = options.publicKeyPem ?? getHostEnv(PUBLIC_KEY_ENV_VAR) ?? "";
+    if (!publicKeyPem || !options.publisher) {
+        return jsonResponse(503, { error: "Routing invalidation is unavailable" });
+    }
+    const declaredLength = Number(req.headers.get("content-length") ?? 0);
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_REQUEST_BODY_BYTES) {
+        return jsonResponse(413, { error: "Request body is too large" });
+    }
+    const bodyResult = await readBoundedRequestBody(req);
+    if ("error" in bodyResult && bodyResult.error === "too-large") {
+        return jsonResponse(413, { error: "Request body is too large" });
+    }
+    if ("error" in bodyResult) {
+        return jsonResponse(400, { error: "Invalid routing invalidation request" });
+    }
+    const { body } = bodyResult;
+    const input = parseProxyRoutingInvalidationRequest(body);
+    if (!input)
+        return jsonResponse(400, { error: "Invalid routing invalidation request" });
+    const jws = req.headers.get(DISPATCH_JWS_HEADER);
+    if (!jws)
+        return jsonResponse(401, { error: "Invalid routing invalidation signature" });
+    try {
+        await verifyDispatchJws(jws, body, {
+            audience: input.projectSlug,
+            expectedPlatform: PROXY_ROUTING_INVALIDATION_PLATFORM,
+            expectedProjectId: input.projectId,
+            expectedSubject: PROXY_ROUTING_INVALIDATION_SUBJECT,
+            maxAgeSeconds: MAX_SIGNATURE_AGE_SECONDS,
+            publicKeyPem,
+        });
+    }
+    catch {
+        return jsonResponse(401, { error: "Invalid routing invalidation signature" });
+    }
+    try {
+        const createEventId = options.createEventId ?? (() => dntShim.crypto.randomUUID());
+        const result = await options.publisher.publish({
+            eventId: createEventId(),
+            ...input,
+        });
+        return jsonResponse(result.converged ? 200 : 503, { ...result });
+    }
+    catch {
+        return jsonResponse(503, { error: "Routing invalidation did not converge" });
+    }
+}

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1067";
+export declare const VERSION = "0.1.1068";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1067";
+export const VERSION = "0.1.1068";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1067",
+  "version": "0.1.1068",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -328,10 +328,10 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "ws": "8.21.0",
-    "@veryfront/ext-bundler-esbuild": "0.1.1067",
-    "@veryfront/ext-content-mdx": "0.1.1067",
-    "@veryfront/ext-css-tailwind": "0.1.1067",
-    "@veryfront/ext-parser-babel": "0.1.1067"
+    "@veryfront/ext-bundler-esbuild": "0.1.1068",
+    "@veryfront/ext-content-mdx": "0.1.1068",
+    "@veryfront/ext-css-tailwind": "0.1.1068",
+    "@veryfront/ext-parser-babel": "0.1.1068"
   },
   "devDependencies": {
     "@types/node": "20.9.0"