fix(cache): clamp Workers KV expirationTtl to its 60s minimum (#23407)

Cloudflare Workers KV rejects put() calls whose expirationTtl is below
60 seconds. Some callers use shorter TTLs that work on the memory and
Redis backends, e.g. the 1-second lock release in the Twitter web API
utils and the data258 route, so on Workers those calls throw
"Invalid expiration_ttl of 1".

Clamp the TTL passed to KV in the kv cache module and in the worker
globalCache.set path. The requested TTL is still stored in the cacheTtl
sidecar key.

Based on #23400 and #23403 by @EngDawood.

Co-authored-by: Dawood Saleh <52585641+EngDawood@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: 3 people

lib/utils/cache/index.worker.test.ts

@@ -59,6 +59,15 @@ describe('worker cache with KV binding', () => {
         expect(await env.CACHE.get('rsshub:cacheTtl:worker:default-ttl')).toBeNull();
     });
 
+    it('accepts expiry below the KV minimum of 60 seconds', async () => {
+        await kv.set('worker:short-ttl', 'v', 1);
+        expect(await kv.get('worker:short-ttl')).toBe('v');
+        expect(await env.CACHE.get('rsshub:cacheTtl:worker:short-ttl')).toBe('1');
+
+        await cache.globalCache.set('worker:global-short-ttl', 'v', 1);
+        expect(await cache.globalCache.get('worker:global-short-ttl')).toBe('v');
+    });
+
     it('rejects keys using the reserved ttl prefix', async () => {
         await expect(kv.get('rsshub:cacheTtl:foo')).rejects.toThrow('reserved');
     });

lib/utils/cache/index.worker.ts

@@ -6,7 +6,7 @@ import { config } from '@/config';
 import type CacheModule from './base';
 import { stringify } from './base';
 import http from './http';
-import kv, { getKVNamespace } from './kv';
+import kv, { getKVNamespace, toKVTtl } from './kv';
 
 const cacheModule: CacheModule = config.cache.type === 'http' ? http : kv;
 
@@ -55,7 +55,7 @@ const globalCache: GlobalCache = {
         }
         const stored = stringify(value);
         if (key) {
-            await getKVNamespace()!.put(key, stored, { expirationTtl: maxAge });
+            await getKVNamespace()!.put(key, stored, { expirationTtl: toKVTtl(maxAge) });
         }
     },
     claim: async (key, maxAge) => {

lib/utils/cache/kv.ts

@@ -25,6 +25,10 @@ export const setKVNamespace = (kv: KVNamespace) => {
 
 export const getKVNamespace = () => kvNamespace;
 
+// Workers KV rejects expirationTtl values below 60 seconds
+const KV_MIN_TTL = 60;
+export const toKVTtl = (ttl: number) => Math.max(ttl, KV_MIN_TTL);
+
 export default {
     init: () => {
         // KV namespace is set via setKVNamespace from Worker env binding
@@ -39,7 +43,7 @@ export default {
                 // Refresh TTL by re-setting the value
                 // KV doesn't have a native expire refresh, so we need to re-put
                 // Use waitUntil pattern in production for non-blocking refresh
-                await Promise.all([kvNamespace.put(key, value, { expirationTtl: ttl }), cacheTtl ? kvNamespace.put(cacheTtlKey, cacheTtl, { expirationTtl: ttl }) : Promise.resolve()]);
+                await Promise.all([kvNamespace.put(key, value, { expirationTtl: toKVTtl(ttl) }), cacheTtl ? kvNamespace.put(cacheTtlKey, cacheTtl, { expirationTtl: toKVTtl(ttl) }) : Promise.resolve()]);
             }
             return value || '';
         }
@@ -61,11 +65,11 @@ export default {
             return;
         }
 
-        const promises: Array<Promise<void>> = [kvNamespace.put(key, stored, { expirationTtl: maxAge })];
+        const promises: Array<Promise<void>> = [kvNamespace.put(key, stored, { expirationTtl: toKVTtl(maxAge) })];
 
         if (maxAge !== config.cache.contentExpire) {
             // Store the cache ttl if it is not the default value
-            promises.push(kvNamespace.put(getCacheTtlKey(key), String(maxAge), { expirationTtl: maxAge }));
+            promises.push(kvNamespace.put(getCacheTtlKey(key), String(maxAge), { expirationTtl: toKVTtl(maxAge) }));
         }
 
         await Promise.all(promises);