dangernoodle-io / breadboard / 27034188992

100%

push

github

feat(ota): self-ensuring-fresh apply + CORS on cross-origin OTA routes (#345)

- apply is cache-first + self-ensuring-fresh: when the cached update check
  is stale, the handler refreshes via bb_update_check_run_blocking
  (serialized with the worker) before deciding, so a fleet apply right after
  a release no longer no-ops on a stale RAM cache; a fresh cache keeps the
  existing 200/202 fast path. adds CONFIG_BB_OTA_PULL_APPLY_CACHE_FRESH_S
  (default 300), BB_ERR_TIMEOUT, and a host-testable freshness predicate
- emit Access-Control-Allow-Origin + Access-Control-Allow-Private-Network on
  the OTA route responses (apply, progress, status) so a cross-origin SPA can
  read them; previously only the OPTIONS preflight set CORS, leaving these
  responses unreadable cross-origin

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

1364 of 1364 branches covered (100.0%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

2324 of 2324 relevant lines covered (100.0%)

931.37 hits per line