fix(deploy): prevent stale SPA entry caching

nginx/default.conf.template

@@ -11,6 +11,19 @@ server {
         return 200 "ok\n";
     }
 
+    # SPA 入口每次重新校验，避免发布后浏览器继续运行旧资源清单。
+    location = /index.html {
+        add_header Cache-Control "no-store, no-cache, must-revalidate" always;
+        add_header Pragma "no-cache" always;
+        add_header Expires "0" always;
+    }
+
+    # Vite 产物文件名带内容哈希，可安全长期缓存。
+    location /assets/ {
+        try_files $uri =404;
+        add_header Cache-Control "public, max-age=31536000, immutable" always;
+    }
+
     # 前端统一请求 /api，保持原始路径转发给 Gateway。
     location /api/ {
         client_max_body_size 55m;
@@ -36,6 +49,7 @@ server {
 
     # 支持 Vue Router history 路由直接刷新。
     location / {
+        add_header Cache-Control "no-store, no-cache, must-revalidate" always;
         try_files $uri $uri/ /index.html;
     }
 }

src/deployment/nginxConfig.test.mjs

@@ -13,6 +13,12 @@ test('allows 50 MiB uploads with multipart overhead through both API proxies', (
   assert.equal(config.match(/client_max_body_size 55m;/g)?.length, 2)
 })
 
+test('does not cache the SPA entry while keeping hashed assets immutable', () => {
+  assert.match(config, /location = \/index\.html[\s\S]*no-store, no-cache, must-revalidate/)
+  assert.match(config, /location \/assets\/[\s\S]*max-age=31536000, immutable/)
+  assert.match(config, /location \/ \{[\s\S]*no-store, no-cache, must-revalidate[\s\S]*try_files \$uri \$uri\/ \/index\.html/)
+})
+
 test('routes domestic and overseas browser APIs to their test gateways without duplicate api prefixes', () => {
   assert.match(testCompose, /API_UPSTREAM: "http:\/\/test-api-cn\.buggoglobal\.com"/)
   assert.match(testCompose, /OVERSEAS_API_UPSTREAM: "http:\/\/test-api-global\.buggoglobal\.com"/)