Prevent control UI index caching

Carlos Maldonado · Carlos Maldonado · commit 62738540ddf5 · 2026-04-20T14:40:04.000-06:00
diff --git a/src/gateway/control-ui.http.test.ts b/src/gateway/control-ui.http.test.ts
@@ -368,6 +368,20 @@ describe("handleControlUiHttpRequest", () => {
     });
   });
 
+  it("serves control-ui index with no-store cache headers", async () => {
+    await withControlUiRoot({
+      fn: async (tmp) => {
+        const getRes = runControlUiRequest({ url: "/", method: "GET", rootPath: tmp });
+        expect(getRes.handled).toBe(true);
+        expect(getRes.res.setHeader).toHaveBeenCalledWith("Cache-Control", "no-store");
+
+        const headRes = runControlUiRequest({ url: "/", method: "HEAD", rootPath: tmp });
+        expect(headRes.handled).toBe(true);
+        expect(headRes.res.setHeader).toHaveBeenCalledWith("Cache-Control", "no-store");
+      },
+    });
+  });
+
   it("includes CSP hash for inline scripts in index.html", async () => {
     const scriptContent = "(function(){ var x = 1; })();";
     const html = `<html><head><script>${scriptContent}</script></head><body></body></html>\n`;
diff --git a/src/gateway/control-ui.ts b/src/gateway/control-ui.ts
@@ -468,12 +468,16 @@ export function handleControlUiAvatarRequest(
   }
 }
 
+function controlUiCacheControlForPath(filePath: string): string {
+  return path.basename(filePath).toLowerCase() === "index.html"
+    ? "no-store"
+    : "no-cache";
+}
+
 function setStaticFileHeaders(res: ServerResponse, filePath: string) {
   const ext = path.extname(filePath).toLowerCase();
   res.setHeader("Content-Type", contentTypeForExt(ext));
-  // Static UI should never be cached aggressively while iterating; allow the
-  // browser to revalidate.
-  res.setHeader("Cache-Control", "no-cache");
+  res.setHeader("Cache-Control", controlUiCacheControlForPath(filePath));
 }
 
 function serveResolvedFile(res: ServerResponse, filePath: string, body: Buffer) {
@@ -490,7 +494,7 @@ function serveResolvedIndexHtml(res: ServerResponse, body: string) {
     );
   }
   res.setHeader("Content-Type", "text/html; charset=utf-8");
-  res.setHeader("Cache-Control", "no-cache");
+  res.setHeader("Cache-Control", "no-store");
   res.end(body);
 }
 

Original file line number	Diff line number	Diff line change
`@@ -468,12 +468,16 @@ export function handleControlUiAvatarRequest(`
`468`	`468`	`}`
`469`	`469`	`}`
`470`	`470`
	`471`	`+function controlUiCacheControlForPath(filePath: string): string {`
	`472`	`+ return path.basename(filePath).toLowerCase() === "index.html"`
	`473`	`+ ? "no-store"`
	`474`	`+ : "no-cache";`
	`475`	`+}`
	`476`	`+`
`471`	`477`	`function setStaticFileHeaders(res: ServerResponse, filePath: string) {`
`472`	`478`	`const ext = path.extname(filePath).toLowerCase();`
`473`	`479`	`res.setHeader("Content-Type", contentTypeForExt(ext));`
`474`		`- // Static UI should never be cached aggressively while iterating; allow the`
`475`		`- // browser to revalidate.`
`476`		`- res.setHeader("Cache-Control", "no-cache");`
	`480`	`+ res.setHeader("Cache-Control", controlUiCacheControlForPath(filePath));`
`477`	`481`	`}`
`478`	`482`
`479`	`483`	`function serveResolvedFile(res: ServerResponse, filePath: string, body: Buffer) {`
`@@ -490,7 +494,7 @@ function serveResolvedIndexHtml(res: ServerResponse, body: string) {`
`490`	`494`	`);`
`491`	`495`	`}`
`492`	`496`	`res.setHeader("Content-Type", "text/html; charset=utf-8");`
`493`		`- res.setHeader("Cache-Control", "no-cache");`
	`497`	`+ res.setHeader("Cache-Control", "no-store");`
`494`	`498`	`res.end(body);`
`495`	`499`	`}`
`496`	`500`