veryfront 0.1.814 → 0.1.817

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.814",
+    "version": "0.1.817",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/html/hydration-script-builder/templates/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../../../src/src/html/hydration-script-builder/templates/router.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,cAwtB3B,CAAC"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../../../src/src/html/hydration-script-builder/templates/router.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,cAmvB3B,CAAC"}

package/esm/src/html/hydration-script-builder/templates/router.js

@@ -33,6 +33,7 @@ export const getRouterScript = () => `
     const MAX_RETRIES = 2;
     const MAX_CACHE_SIZE = 50;
     const CACHE_TTL_MS = 5 * 60 * 1000;
+    const BACKGROUND_REFRESH_INTERVAL_MS = 30 * 1000;
     const PREFETCH_DELAY_MS = 100;
     const MAX_PREFETCH_PATHS = 100;
 
@@ -126,6 +127,8 @@ export const getRouterScript = () => `
     // LRU Cache with TTL (single Map to prevent sync issues)
     // ============================================
     const pageDataCache = new Map();
+    const pendingPageDataFetches = new Map();
+    const backgroundRefreshTimestamps = new Map();
 
     function getCachedPageData(path) {
       const entry = pageDataCache.get(path);
@@ -134,13 +137,17 @@ export const getRouterScript = () => `
       if (Date.now() - entry.timestamp < CACHE_TTL_MS) return entry.data;
 
       pageDataCache.delete(path);
+      backgroundRefreshTimestamps.delete(path);
       return null;
     }
 
     function setCachedPageData(path, data) {
       if (pageDataCache.size >= MAX_CACHE_SIZE) {
         const oldest = pageDataCache.keys().next().value;
-        if (oldest) pageDataCache.delete(oldest);
+        if (oldest) {
+          pageDataCache.delete(oldest);
+          backgroundRefreshTimestamps.delete(oldest);
+        }
       }
 
       pageDataCache.set(path, { data, timestamp: Date.now() });
@@ -291,13 +298,33 @@ export const getRouterScript = () => `
       return data;
     }
 
+    function fetchPageDataDeduped(path) {
+      const pending = pendingPageDataFetches.get(path);
+      if (pending) return pending;
+
+      const refreshPromise = fetchPageDataFresh(path, null).finally(() => {
+        pendingPageDataFetches.delete(path);
+      });
+      pendingPageDataFetches.set(path, refreshPromise);
+      return refreshPromise;
+    }
+
+    function refreshPageDataInBackground(path) {
+      const lastRefreshAt = backgroundRefreshTimestamps.get(path) || 0;
+      const now = Date.now();
+      if (now - lastRefreshAt < BACKGROUND_REFRESH_INTERVAL_MS) return;
+
+      backgroundRefreshTimestamps.set(path, now);
+      fetchPageDataDeduped(path).catch((error) => {
+        logBackgroundFetchFailure('Stale page data refresh', path, error);
+      });
+    }
+
     async function fetchPageDataForNavigation(path, signal) {
       const cached = getCachedPageData(path);
       if (cached) {
         log('Using cached page data:', path);
-        fetchPageDataFresh(path, null).catch((error) => {
-          logBackgroundFetchFailure('Stale page data refresh', path, error);
-        });
+        refreshPageDataInBackground(path);
         return cached;
       }
 
@@ -306,7 +333,7 @@ export const getRouterScript = () => `
 
     async function fetchPageDataForPrefetch(path) {
       if (getCachedPageData(path)) return;
-      return fetchPageDataFresh(path, null)
+      return fetchPageDataDeduped(path)
         .then((data) => preloadModulesForPageData(data, path))
         .catch((error) => {
           logBackgroundFetchFailure('Page data prefetch', path, error);

package/esm/src/proxy/handler.d.ts

@@ -1,5 +1,6 @@
 import { type ParsedDomain } from "../server/utils/domain-parser.js";
 import type { TokenCache } from "./cache/types.js";
+import { type ProxyServerTiming } from "./server-timing.js";
 export { __resetCachedAuthProviderForTests } from "./proxy-access-control.js";
 export declare const INTERNAL_PROXY_HEADERS: readonly ["x-token", "x-project-slug", "x-environment", "x-environment-id", "x-content-source-id", "x-forwarded-host", "x-project-path", "x-project-id", "x-release-id", "x-branch-id", "x-branch-name"];
 export interface ProxyConfig {
@@ -45,6 +46,7 @@ export interface ProxyHandlerOptions {
 }
 export interface ProxyRequestOptions {
     url?: URL;
+    timing?: ProxyServerTiming;
 }
 export declare function createProxyHandler(options: ProxyHandlerOptions): {
     processRequest: (req: Request, options?: ProxyRequestOptions) => Promise<ProxyContext>;

package/esm/src/proxy/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAenD,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAE9E,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAyGX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAgBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA6DtD,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,YAAY,CAAC;0BAiRjB,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAlUH,MAAM,EAAE;;EAwWpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAwB7E"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAcnD,OAAO,EAAiC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE3F,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAE9E,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAyGX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAgBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA0EtD,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,YAAY,CAAC;0BAuRjB,OAAO,YACH,mBAAmB,KAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAzUH,MAAM,EAAE;;EA+WpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAwB7E"}

package/esm/src/proxy/handler.js

@@ -6,6 +6,7 @@ import { checkProtectedProxyAccess } from "./proxy-access-control.js";
 import { createLocalProjectResolver } from "./local-project-resolver.js";
 import { isMissingCustomDomainProjectError, resolveProxyRequestToken, } from "./proxy-token-resolution.js";
 import { createProjectNotFoundProxyContext, createProxyErrorContext, createReleaseNotFoundProxyContext, } from "./proxy-error-context.js";
+import { profileProxyServerTimingPhase } from "./server-timing.js";
 export { __resetCachedAuthProviderForTests } from "./proxy-access-control.js";
 export const INTERNAL_PROXY_HEADERS = [
     "x-token",
@@ -106,6 +107,9 @@ export function createProxyHandler(options) {
         previewApiClientId: config.previewApiClientId,
         previewApiClientSecret: config.previewApiClientSecret,
     }, { cache });
+    async function resolveProjectLookup(lookupKey, token, timing) {
+        return await profileProxyServerTimingPhase(timing ?? { enabled: false, startedAt: 0, phases: new Map() }, "proxy.project_lookup", () => lookupProjectByDomain(lookupKey, config.apiBaseUrl, token, logger));
+    }
     function validateConfig() {
         const missing = [];
         if (!config.apiClientId)
@@ -114,8 +118,8 @@ export function createProxyHandler(options) {
             missing.push("VERYFRONT_PROXY_API_CLIENT_SECRET");
         return missing;
     }
-    async function resolveReleaseAndProtection(req, url, token, userToken, lookupKey, envMatcher, logContext) {
-        const lookupResult = await lookupProjectByDomain(lookupKey, config.apiBaseUrl, token, logger);
+    async function resolveReleaseAndProtection(req, url, token, userToken, lookupKey, envMatcher, timing, logContext) {
+        const lookupResult = await resolveProjectLookup(lookupKey, token, timing);
         if (!lookupResult)
             return { projectId: undefined, releaseId: undefined };
         const matchingEnv = lookupResult.environments?.find(envMatcher);
@@ -232,7 +236,7 @@ export function createProxyHandler(options) {
                         token,
                     });
                 }
-                const lookupResult = await lookupProjectByDomain(host, config.apiBaseUrl, token, logger);
+                const lookupResult = await resolveProjectLookup(host, token, options.timing);
                 if (!lookupResult) {
                     logger?.info("Custom domain not found", { domain: host });
                     return createProxyErrorContext(base, {
@@ -276,7 +280,7 @@ export function createProxyHandler(options) {
             }
             else if (projectSlug && scope === "production" && token && parsedDomain.environment) {
                 const targetEnv = parsedDomain.environment.toLowerCase();
-                const resolved = await resolveReleaseAndProtection(req, url, token, userToken, projectSlug, (env) => env.name.toLowerCase() === targetEnv, { projectSlug });
+                const resolved = await resolveReleaseAndProtection(req, url, token, userToken, projectSlug, (env) => env.name.toLowerCase() === targetEnv, options.timing, { projectSlug });
                 if ("error" in resolved) {
                     return createProxyErrorContext(base, {
                         status: resolved.error.status,
@@ -308,7 +312,7 @@ export function createProxyHandler(options) {
             else if (projectSlug && scope === "preview" && token) {
                 // Preview uses branch-based content (no releaseId needed), but must
                 // still enforce the environment's `protected` flag like other scopes.
-                const resolved = await resolveReleaseAndProtection(req, url, token, userToken, projectSlug, (env) => env.name.toLowerCase() === "preview", { projectSlug });
+                const resolved = await resolveReleaseAndProtection(req, url, token, userToken, projectSlug, (env) => env.name.toLowerCase() === "preview", options.timing, { projectSlug });
                 if ("error" in resolved) {
                     return createProxyErrorContext(base, {
                         status: resolved.error.status,

package/esm/src/proxy/main.js

@@ -238,7 +238,7 @@ function forwardToServer(req, url) {
     const host = req.headers.get("host") || "";
     const execute = async (lifecycle) => {
         try {
-            const ctx = await profileProxyServerTimingPhase(proxyTiming, "proxy.resolve_request", () => proxyHandler.processRequest(req, { url }));
+            const ctx = await profileProxyServerTimingPhase(proxyTiming, "proxy.resolve_request", () => proxyHandler.processRequest(req, { url, timing: proxyTiming }));
             return runWithProxyRequestContext({
                 requestId,
                 projectSlug: ctx.projectSlug,

package/esm/src/proxy/proxy-token-resolution.d.ts

@@ -28,6 +28,7 @@ export interface ResolveProxyRequestTokenOptions {
 }
 export interface ResolvedProxyRequestToken {
     token?: string;
+    tokenSource?: "signed-internal" | "user" | "service" | "static";
     userToken?: string;
     tokenFetchError?: unknown;
 }

package/esm/src/proxy/proxy-token-resolution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-token-resolution.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/proxy-token-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CACN,KAAK,EAAE,UAAU,EACjB,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,0BAA0B,CAAC;IACnC,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C,iCAAiC,CAAC,EAAE,OAAO,CAAC;IAC5C,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAID,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGzE;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAqDpC"}
+{"version":3,"file":"proxy-token-resolution.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/proxy-token-resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CACN,KAAK,EAAE,UAAU,EACjB,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,0BAA0B,CAAC;IACnC,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C,iCAAiC,CAAC,EAAE,OAAO,CAAC;IAC5C,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAID,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGzE;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CA0DpC"}

package/esm/src/proxy/proxy-token-resolution.js

@@ -14,9 +14,12 @@ export async function resolveProxyRequestToken(options) {
     const useSignedInternalControlPlaneToken = options.allowSignedInternalControlPlaneToken &&
         options.signedInternalControlPlaneRequest;
     let token;
+    let tokenSource;
     let tokenFetchError;
     if (useSignedInternalControlPlaneToken) {
         token = req.headers.get("x-token") ?? undefined;
+        if (token)
+            tokenSource = "signed-internal";
         logger?.debug("Using signed control-plane token for internal request", {
             pathname: url.pathname,
             scope,
@@ -24,6 +27,7 @@ export async function resolveProxyRequestToken(options) {
     }
     else if (scope === "preview" && userToken) {
         token = userToken;
+        tokenSource = "user";
         logger?.debug("Using user auth token for preview");
     }
     if (!token && config.apiClientId && config.apiClientSecret) {
@@ -31,6 +35,7 @@ export async function resolveProxyRequestToken(options) {
         if (projectSlug || customDomain) {
             try {
                 token = await tokenManager.getToken(scope, projectSlug, customDomain);
+                tokenSource = "service";
             }
             catch (error) {
                 tokenFetchError = error;
@@ -45,7 +50,8 @@ export async function resolveProxyRequestToken(options) {
     }
     if (!token && config.apiToken) {
         token = config.apiToken;
+        tokenSource = "static";
         logger?.debug("Using static API token fallback");
     }
-    return { token, userToken, tokenFetchError };
+    return { token, tokenSource, userToken, tokenFetchError };
 }

package/esm/src/security/http/response/cache-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/security/http/response/cache-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAahD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAmBjE"}
+{"version":3,"file":"cache-handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/security/http/response/cache-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAahD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAuBjE"}

package/esm/src/security/http/response/cache-handler.js

@@ -23,5 +23,8 @@ export function buildCacheControl(strategy) {
     if (strategy.mustRevalidate) {
         parts.push("must-revalidate");
     }
+    if (typeof strategy.staleWhileRevalidate === "number") {
+        parts.push(`stale-while-revalidate=${strategy.staleWhileRevalidate}`);
+    }
     return parts.join(", ");
 }

package/esm/src/security/http/response/types.d.ts

@@ -10,6 +10,7 @@ export type CacheStrategy = "no-cache" | "no-store" | "short" | "medium" | "long
     public?: boolean;
     immutable?: boolean;
     mustRevalidate?: boolean;
+    staleWhileRevalidate?: number;
 };
 export interface ResponseBuilderConfig {
     securityConfig?: SecurityConfig | null;

package/esm/src/security/http/response/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/src/security/http/response/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,UAAU,GACV,OAAO,GACP,QAAQ,GACR,MAAM,GACN,WAAW,GACX,MAAM,GACN;IACA,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEJ,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,oCAAoC,EAAE,cAAc,CAAC;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/src/security/http/response/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,UAAU,GACV,OAAO,GACP,QAAQ,GACR,MAAM,GACN,WAAW,GACX,MAAM,GACN;IACA,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEJ,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,oCAAoC,EAAE,cAAc,CAAC;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B"}

package/esm/src/server/handlers/request/module/page-data-endpoint-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page-data-endpoint-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/module/page-data-endpoint-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAwBhE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,cAAc,EACnB,qBAAqB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,eAAe,EAC/D,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,aAAa,EAC9C,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,GAC1C,OAAO,CAAC,aAAa,CAAC,CAoGxB"}
+{"version":3,"file":"page-data-endpoint-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/module/page-data-endpoint-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AA0EhE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,cAAc,EACnB,qBAAqB,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,eAAe,EAC/D,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,aAAa,EAC9C,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,GAC1C,OAAO,CAAC,aAAa,CAAC,CA6GxB"}

package/esm/src/server/handlers/request/module/page-data-endpoint-handler.js

@@ -8,11 +8,44 @@ import { HTTP_GATEWAY_TIMEOUT } from "../../../../utils/constants/http.js";
 import { serverLogger } from "../../../../utils/index.js";
 import { Singleflight } from "../../../../utils/singleflight.js";
 import { requestHasCacheSensitiveState } from "../../../../cache/request-cacheability.js";
+import { getEnv } from "../../../../platform/compat/process.js";
 const PAGE_DATA_TIMEOUT_MS = 25_000;
-const PAGE_DATA_CACHE_TTL_MS = 60_000;
-const PAGE_DATA_CACHE_MAX_ENTRIES = 500;
+const PAGE_DATA_CACHE_TTL_MS = readPositiveIntegerEnv("VERYFRONT_PAGE_DATA_CACHE_TTL_MS", 60_000);
+const PAGE_DATA_CACHE_STALE_MS = readPositiveIntegerEnv("VERYFRONT_PAGE_DATA_CACHE_STALE_MS", 30 * 60_000);
+const PAGE_DATA_CACHE_MAX_ENTRIES = readPositiveIntegerEnv("VERYFRONT_PAGE_DATA_CACHE_MAX_ENTRIES", 500);
+const PAGE_DATA_CACHE_MAX_AGE_SECONDS = Math.max(0, Math.floor(PAGE_DATA_CACHE_TTL_MS / 1000));
+const PAGE_DATA_CACHE_STALE_SECONDS = Math.max(0, Math.floor(PAGE_DATA_CACHE_STALE_MS / 1000));
 const pageDataCache = new Map();
 const pageDataFlight = new Singleflight();
+const RELEASE_PAGE_DATA_CACHE_POLICY = {
+    ttlMs: PAGE_DATA_CACHE_TTL_MS,
+    staleMs: PAGE_DATA_CACHE_STALE_MS,
+    maxAgeSeconds: PAGE_DATA_CACHE_MAX_AGE_SECONDS,
+    staleSeconds: PAGE_DATA_CACHE_STALE_SECONDS,
+};
+function readPositiveIntegerEnv(name, fallback) {
+    const raw = getEnv(name);
+    if (!raw)
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isFinite(value) || value < 0)
+        return fallback;
+    return Math.floor(value);
+}
+function getPageDataCachePolicy(ctx) {
+    const environment = ctx.resolvedEnvironment ?? ctx.requestContext?.mode ?? "preview";
+    const isReleaseBackedProduction = environment === "production" && !!ctx.releaseId;
+    if (isReleaseBackedProduction)
+        return RELEASE_PAGE_DATA_CACHE_POLICY;
+    return {
+        ...RELEASE_PAGE_DATA_CACHE_POLICY,
+        staleMs: 0,
+        staleSeconds: 0,
+    };
+}
+function isPageDataCacheEnabled() {
+    return PAGE_DATA_CACHE_MAX_ENTRIES > 0;
+}
 export function __clearPageDataEndpointCacheForTests() {
     pageDataCache.clear();
 }
@@ -24,13 +57,22 @@ export function handlePageDataEndpoint(req, pathname, ctx, createResponseBuilder
                 .replace(/\.json$/, "") || "";
             const url = new URL(req.url);
             const renderer = await getRendererForProject(ctx);
-            const cacheKey = requestHasCacheSensitiveState(req)
+            const cacheKey = !isPageDataCacheEnabled() || requestHasCacheSensitiveState(req)
                 ? null
                 : buildPageDataCacheKey(ctx, slug, url);
+            const cachePolicy = cacheKey ? getPageDataCachePolicy(ctx) : null;
             const payload = cacheKey
-                ? await resolveCachedPageData(cacheKey, () => withTimeoutThrow(renderer.resolvePageData(slug, { request: req, url }), PAGE_DATA_TIMEOUT_MS, `resolvePageData for ${slug}`))
+                ? await resolveCachedPageData(cacheKey, () => withTimeoutThrow(renderer.resolvePageData(slug, { request: req, url }), PAGE_DATA_TIMEOUT_MS, `resolvePageData for ${slug}`), cachePolicy)
                 : await resolveUncachedPageData(() => withTimeoutThrow(renderer.resolvePageData(slug, { request: req, url }), PAGE_DATA_TIMEOUT_MS, `resolvePageData for ${slug}`));
-            const cacheStrategy = cacheKey ? { maxAge: 60, public: true } : "no-cache";
+            const cacheStrategy = cacheKey
+                ? {
+                    maxAge: cachePolicy.maxAgeSeconds,
+                    public: true,
+                    ...(cachePolicy.staleSeconds > 0
+                        ? { staleWhileRevalidate: cachePolicy.staleSeconds }
+                        : {}),
+                }
+                : "no-cache";
             const builder = createResponseBuilder(ctx).withCORS(req, ctx.securityConfig?.cors);
             if (hasMatchingEtag(req, payload.etag)) {
                 return respond(builder.notModified(payload.etag));
@@ -78,25 +120,35 @@ export function handlePageDataEndpoint(req, pathname, ctx, createResponseBuilder
         "module.pageData.projectSlug": ctx.projectSlug || "unknown",
     });
 }
-async function resolveCachedPageData(cacheKey, resolve) {
+async function resolveCachedPageData(cacheKey, resolve, cachePolicy) {
     const cached = getCachedPageData(cacheKey);
-    if (cached) {
+    if (cached?.state === "fresh") {
         markRequestProfilePhase("page_data.cache_hit");
-        return cached;
+        return cached.entry;
+    }
+    if (cached?.state === "stale") {
+        markRequestProfilePhase("page_data.cache_stale");
+        refreshStalePageData(cacheKey, resolve, cachePolicy);
+        return cached.entry;
     }
     markRequestProfilePhase("page_data.cache_miss");
     return await pageDataFlight.do(cacheKey, async () => {
         const concurrentCached = getCachedPageData(cacheKey);
-        if (concurrentCached) {
+        if (concurrentCached?.state === "fresh") {
             markRequestProfilePhase("page_data.cache_hit_after_wait");
-            return concurrentCached;
+            return concurrentCached.entry;
+        }
+        if (concurrentCached?.state === "stale") {
+            markRequestProfilePhase("page_data.cache_stale_after_wait");
+            refreshStalePageData(cacheKey, resolve, cachePolicy);
+            return concurrentCached.entry;
         }
-        const payload = await resolveUncachedPageData(resolve);
+        const payload = await resolveUncachedPageData(resolve, cachePolicy);
         setCachedPageData(cacheKey, payload);
         return payload;
     });
 }
-async function resolveUncachedPageData(resolve) {
+async function resolveUncachedPageData(resolve, cachePolicy = RELEASE_PAGE_DATA_CACHE_POLICY) {
     const startedAt = performance.now();
     const pageData = await resolve();
     markRequestProfilePhase("page_data.resolve", performance.now() - startedAt);
@@ -107,20 +159,32 @@ async function resolveUncachedPageData(resolve) {
     return {
         body,
         etag,
-        expiresAt: Date.now() + PAGE_DATA_CACHE_TTL_MS,
+        expiresAt: Date.now() + cachePolicy.ttlMs,
+        staleUntil: Date.now() + cachePolicy.ttlMs + cachePolicy.staleMs,
     };
 }
 function getCachedPageData(cacheKey) {
     const entry = pageDataCache.get(cacheKey);
     if (!entry)
         return null;
-    if (Date.now() <= entry.expiresAt)
-        return entry;
+    const now = Date.now();
+    if (now <= entry.expiresAt) {
+        pageDataCache.delete(cacheKey);
+        pageDataCache.set(cacheKey, entry);
+        return { entry, state: "fresh" };
+    }
+    if (now <= entry.staleUntil) {
+        pageDataCache.delete(cacheKey);
+        pageDataCache.set(cacheKey, entry);
+        return { entry, state: "stale" };
+    }
     pageDataCache.delete(cacheKey);
     markRequestProfilePhase("page_data.cache_expired");
     return null;
 }
 function setCachedPageData(cacheKey, entry) {
+    if (!isPageDataCacheEnabled())
+        return;
     if (pageDataCache.size >= PAGE_DATA_CACHE_MAX_ENTRIES && !pageDataCache.has(cacheKey)) {
         const oldestKey = pageDataCache.keys().next().value;
         if (oldestKey)
@@ -128,6 +192,23 @@ function setCachedPageData(cacheKey, entry) {
     }
     pageDataCache.set(cacheKey, entry);
 }
+function refreshStalePageData(cacheKey, resolve, cachePolicy) {
+    void pageDataFlight.do(cacheKey, async () => {
+        const payload = await resolveUncachedPageData(resolve, cachePolicy);
+        setCachedPageData(cacheKey, payload);
+        return payload;
+    }).then(() => {
+        markRequestProfilePhase("page_data.refresh_background");
+    }, (error) => {
+        serverLogger.warn("[page-data] Background refresh failed", {
+            detail: error instanceof Error ? error.message : String(error),
+        });
+        const stale = pageDataCache.get(cacheKey);
+        if (stale && Date.now() > stale.staleUntil) {
+            pageDataCache.delete(cacheKey);
+        }
+    });
+}
 function buildPageDataCacheKey(ctx, slug, url) {
     const projectKey = ctx.projectId ?? ctx.projectSlug ?? ctx.projectDir;
     const environment = ctx.resolvedEnvironment ?? ctx.requestContext?.mode ?? "preview";

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.814";
+export declare const VERSION = "0.1.817";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.814";
+export const VERSION = "0.1.817";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.814",
+  "version": "0.1.817",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",