Bypass cached validator endpoints

Dockerfile

@@ -8,7 +8,7 @@
 FROM python:3.11-slim
 
 # Build trigger — change this to force HF Space Docker rebuild
-LABEL build.version="2026-04-12-v3"
+LABEL build.version="2026-04-12-v4"
 
 # Non-root user for security
 RUN useradd -m -u 1000 appuser

README.md

@@ -13,7 +13,7 @@ tags:
   - reinforcement-learning
 pinned: false
 fullWidth: false
-build_version: 2026-04-12-v3
+build_version: 2026-04-12-v4
 ---
 
 # PayOps — Payment Operations Incident Response

openenv.yaml

@@ -4,6 +4,13 @@ type: space
 runtime: fastapi
 app: server.app:app
 port: 7860
+endpoints:
+  reset: /reset
+  step: /step
+  tasks: /tasks-v2
+  grader: /grader-v2
+  health: /health-v2
+  metadata: /metadata-v2
 tasks:
 - id: EASY-001
   task_id: EASY-001

server/app.py

@@ -25,7 +25,7 @@ import time
 from collections import defaultdict
 from typing import Any, Dict, List, Optional
 
-from fastapi import FastAPI, HTTPException, WebSocket, WebSocketDisconnect
+from fastapi import FastAPI, HTTPException, Request, WebSocket, WebSocketDisconnect
 from fastapi.responses import JSONResponse
 from pydantic import BaseModel, ConfigDict
 
@@ -45,9 +45,25 @@ app = FastAPI(
         "Payment Operations Incident Response environment. "
         "An AI agent reviews financial transactions and decides how to handle them."
     ),
-    version="2.0.1",
+    version="2.0.2",
 )
 
+_APP_VERSION = "2.0.2"
+_NO_CACHE_HEADERS = {
+    "Cache-Control": "no-store, no-cache, must-revalidate, max-age=0",
+    "Pragma": "no-cache",
+    "Expires": "0",
+}
+
+
+@app.middleware("http")
+async def disable_cache_for_validator_paths(request: Request, call_next):
+    """Prevent stale validator responses from being served from caches."""
+    response = await call_next(request)
+    if request.method in {"GET", "HEAD"}:
+        response.headers.update(_NO_CACHE_HEADERS)
+    return response
+
 
 @app.get("/", include_in_schema=False)
 async def root():
@@ -64,10 +80,16 @@ async def metadata():
             "Payment Operations Incident Response environment. "
             "An AI agent reviews financial transactions and decides how to handle them."
         ),
-        "version": "2.0.1",
+        "version": _APP_VERSION,
     }
 
 
+@app.get("/metadata-v2")
+async def metadata_v2():
+    """Versioned metadata alias used to bypass stale edge caches."""
+    return await metadata()
+
+
 # Per-session environment instances — one per /reset call.
 # Keyed by episode_id; keeps the last _MAX_SESSIONS sessions to bound memory.
 _MAX_SESSIONS = 20
@@ -293,6 +315,12 @@ async def tasks():
     return result
 
 
+@app.get("/tasks-v2", summary="List all available tasks")
+async def tasks_v2():
+    """Versioned tasks alias used to bypass stale edge caches."""
+    return await tasks()
+
+
 @app.get("/grader", summary="Grade the current episode")
 async def grader():
     """
@@ -374,6 +402,12 @@ async def grader():
     }
 
 
+@app.get("/grader-v2", summary="Grade the current episode")
+async def grader_v2():
+    """Versioned grader alias used to bypass stale edge caches."""
+    return await grader()
+
+
 @app.post("/baseline", response_model=BaselineResult, summary="Run the baseline agent")
 async def baseline():
     """
@@ -582,7 +616,7 @@ async def health():
     return {
         "status": "healthy",
         "environment": "payops_env",
-        "version": "2.0.1",
+        "version": _APP_VERSION,
         "episode_id": episode_id,
         "episode_seed": episode_seed,
         "current_task_id": current_task,
@@ -591,6 +625,12 @@ async def health():
     }
 
 
+@app.get("/health-v2", summary="Health check")
+async def health_v2():
+    """Versioned health alias used to bypass stale edge caches."""
+    return await health()
+
+
 # ---------------------------------------------------------------------------
 # Entry point
 # ---------------------------------------------------------------------------