Keep Cloudflare preview assets fresh across releases

Author: rodrix2000

DEPLOYMENT.md

@@ -45,7 +45,10 @@ submission drafts, internal notes, install endpoints, templates and the upstream
 
 Preview-only transformations remove Omarchy's production Plausible script,
 add noindex meta/response headers, and set the homepage Open Graph URL to the
-preview domain. Source HTML retains upstream analytics/canonical metadata for
+preview domain. CSS/JavaScript entry URLs gain content-hash query versions;
+`Cache-Control: no-cache` requests revalidation of the remaining preview assets.
+This prevents old cached styles from being paired with new release markup.
+Source HTML retains upstream analytics/canonical metadata for
 review; do not upload the entire source tree to a different host.
 
 Noindex is a request to search engines, **not access control**. This preview and

IMPLEMENTATION-NOTES.md

@@ -64,6 +64,11 @@ SHA-256 comparisons for all 33 referenced assets/imports/fonts. All five video
 links remained present. Missing/private paths returned 404. The public package
 removes production analytics and includes noindex headers.
 
+The public release's browser check exposed a stale stylesheet in an existing
+Chrome session. Preview packaging now fingerprints CSS/JavaScript entry URLs
+and requests cache revalidation. The source tree keeps its original filenames
+and static architecture; no bundler or runtime cache workaround was added.
+
 ## Intentional deviations and limits
 
 - The public preview uses Cloudflare Pages instead of upstream GitHub Pages.

bin/prepare-preview

@@ -3,6 +3,7 @@
 require "fileutils"
 require "tmpdir"
 require "uri"
+require "digest"
 
 root = File.expand_path("..", __dir__)
 cache = File.join(root, ".cloudflare")
@@ -40,6 +41,15 @@ public_paths.each do |entry|
       html = html.gsub(/^[ \t]*<script\b[^>]*src=["']https:\/\/plausible\.io\/[^"']+["'][^>]*>\s*<\/script>\s*\n?/i, "")
       html = html.sub("</head>", "    <meta name=\"robots\" content=\"noindex, nofollow\">\n  </head>")
       html = html.sub('<meta property="og:url" content="https://omarchy.org/">', '<meta property="og:url" content="https://omarchy.rudyr.com/">') if relative == "index.html"
+      # Fingerprint entry URLs so existing preview visitors cannot mix an old
+      # cached stylesheet/script with new HTML. Source filenames stay unchanged.
+      html = html.gsub(/((?:href|src)=["'])(\/assets\/[^"'?#]+\.(?:css|js))(["'])/) do
+        opening, path, closing = Regexp.last_match.captures
+        asset = File.join(root, path)
+        abort "Missing linked entry asset: #{path}" unless File.file?(asset)
+        version = Digest::SHA256.file(asset).hexdigest[0, 12]
+        "#{opening}#{path}?v=#{version}#{closing}"
+      end
       File.write(target, html)
     else
       FileUtils.cp(file, target)
@@ -50,6 +60,7 @@ end
 
 File.write(File.join(output, "_headers"), <<~HEADERS)
   /*
+    Cache-Control: no-cache
     X-Robots-Tag: noindex, nofollow
     X-Content-Type-Options: nosniff
     Referrer-Policy: strict-origin-when-cross-origin