From 9946fad7b461262ad89419f1b981f42867f950bd Mon Sep 17 00:00:00 2001
From: Roman Claudiu <roman.claudiumihai@gmail.com>
Date: Sat, 7 Nov 2026 19:05:29 +0200
Subject: [PATCH] cacheable-request - fix: pass the response status to the
 cache policy

http-cache-semantics reads the status code from `response.status`.
A Node IncomingMessage has only `statusCode`, so the policy used 200
for each new response. Set `status` from `statusCode` before the
policy is created, as the revalidation path does.

This stops the cache from storing a 206 response to a range request
and error responses such as 503 that have heuristic freshness.
---
 packages/cacheable-request/src/index.ts       |  2 +
 packages/cacheable-request/test/cache.test.ts | 55 +++++++++++++++++++
 2 files changed, 57 insertions(+)

diff --git a/packages/cacheable-request/src/index.ts b/packages/cacheable-request/src/index.ts
index d5909ae4..103cd1b7 100644
--- a/packages/cacheable-request/src/index.ts
+++ b/packages/cacheable-request/src/index.ts
@@ -183,6 +183,8 @@ class CacheableRequest {
 					}
 
 					if (!response.fromCache) {
+						// http-cache-semantics reads the status code from `status`, not `statusCode`
+						response.status = response.statusCode;
 						response.cachePolicy = new CachePolicy(
 							options_,
 							response,
diff --git a/packages/cacheable-request/test/cache.test.ts b/packages/cacheable-request/test/cache.test.ts
index 668629b9..e7f1abc5 100644
--- a/packages/cacheable-request/test/cache.test.ts
+++ b/packages/cacheable-request/test/cache.test.ts
@@ -172,6 +172,28 @@ beforeAll(async () => {
 			body,
 		});
 	});
+	s.get("/partial-content", (request_: any, response_: any) => {
+		response_.setHeader("Cache-Control", "public, max-age=60");
+		if (request_.headers.range === "bytes=0-4") {
+			response_.statusCode = 206;
+			response_.setHeader("Content-Range", "bytes 0-4/11");
+			response_.end("hello");
+			return;
+		}
+
+		response_.end("hello world");
+	});
+	let serviceUnavailableIndex = 0;
+	// biome-ignore lint/correctness/noUnusedFunctionParameters: legacy
+	s.get("/service-unavailable", (request_: any, response_: any) => {
+		serviceUnavailableIndex++;
+		response_.statusCode = 503;
+		response_.setHeader(
+			"Last-Modified",
+			new Date(Date.now() - 86_400_000).toUTCString(),
+		);
+		response_.end(serviceUnavailableIndex.toString());
+	});
 	const etag = "foobar";
 
 	const payload = JSON.stringify({ foo: "bar" });
@@ -674,6 +696,39 @@ test("checks status codes when comparing cache & response", async () => {
 	expect(secondResponse.body).toBe("ok");
 });
 
+test("A 206 response to a range request is not served for a full request", async () => {
+	const endpoint = "/partial-content";
+	const cache = new Map();
+	const cacheableRequest = new CacheableRequest(request, cache);
+	const cacheableRequestHelper = promisify(cacheableRequest.request());
+	const options = parseWithWhatwg(s.url + endpoint);
+	const partialResponse: any = await cacheableRequestHelper({
+		...options,
+		headers: { range: "bytes=0-4" },
+	});
+	const fullResponse: any = await cacheableRequestHelper(options);
+	expect(partialResponse.statusCode).toBe(206);
+	expect(partialResponse.body).toBe("hello");
+	expect(fullResponse.statusCode).toBe(200);
+	expect(fullResponse.fromCache).toBe(false);
+	expect(fullResponse.body).toBe("hello world");
+});
+
+test("Error responses with heuristic freshness are not cached", async () => {
+	const endpoint = "/service-unavailable";
+	const cache = new Map();
+	const cacheableRequest = new CacheableRequest(request, cache);
+	const cacheableRequestHelper = promisify(cacheableRequest.request());
+	const options = parseWithWhatwg(s.url + endpoint);
+	const firstResponse: any = await cacheableRequestHelper(options);
+	const secondResponse: any = await cacheableRequestHelper(options);
+	expect(cache.size).toBe(0);
+	expect(firstResponse.statusCode).toBe(503);
+	expect(secondResponse.statusCode).toBe(503);
+	expect(secondResponse.fromCache).toBe(false);
+	expect(Number(secondResponse.body)).toBe(Number(firstResponse.body) + 1);
+});
+
 test("304 responses with forceRefresh do not clobber cache", async () => {
 	const endpoint = "/etag";
 	const cache = new Map();