fix: ask the config service whether a site exists, not head.html

.github/workflows/deploy.yaml

@@ -41,14 +41,14 @@ jobs:
 
       - name: Deploy to Cloudflare Workers (production)
         if: github.ref_name == 'main'
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
 
       - name: Deploy to Cloudflare Workers (stage)
         if: github.ref_name == 'stage'
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

.gitignore

@@ -22,7 +22,7 @@ jspm_packages/
 .env.production.local
 .env.local
 
-.dev.vars
+.dev.vars*
 .wrangler/
 .DS_Store
 .cursor

README.md

@@ -11,17 +11,26 @@ Prerequisites:
 
 This worker performs all content operations via [da-admin](https://github.com/adobe/da-admin). For local development, you will also need to check out and run da-admin locally.
 
+One read of config.aem.page, pipeline scope, answers existence, head.html and `contentSource`. Its url names the store.
+
+The config service needs a shared secret, so local development points at `dev/lookup-shim.js` instead. Add the org and site to its `SITES` table. A site missing from the table is answered 404. A source url on api.aem.live reads as source-bus.
+
 To run da-universal locally:
 
 1. Clone this repo to your computer.
 1. Run `npm install`
 1. Use `npx wrangler login` if not done before. Walk through the steps in browser.
-1. In a terminal, run `npm run dev` this repo's folder.
+1. In a terminal, run `npm run dev:lookups` to start the stand-in lookups on port 4713.
+1. In a second terminal, run `npm run dev` in this repo's folder.
 1. The da-ue service API is available via https://localhost:4712
 
+Running against the stand-in warns that `HLX_CONFIG_SERVICE_TOKEN` is missing, which it is, and nothing asks for it.
+
+with the shared secret, use `npm run dev` at the real services instead of the stand-in. Put `HLX_CONFIG_SERVICE_TOKEN="<token>"` in `.dev.vars.dev`, which is gitignored, and run `npm run dev -- --var HLX_CONFIG_SERVICE:https://config.aem.page`.
+
 ### Run on stage
 
-You can deploy da-universal on Cloudflare stage via `npm deploy:stage` to test it in a real worker environment.
+You can deploy da-universal on Cloudflare stage via `npm run deploy:stage` to test it in a real worker environment.
 
 ## Customer documentation
 https://docs.da.live/developers/reference/universal-editor

dev/lookup-shim.js

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2026 Adobe. All rights reserved.
+ * This file is licensed to you under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License. You may obtain a copy
+ * of the License at http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under
+ * the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR REPRESENTATIONS
+ * OF ANY KIND, either express or implied. See the License for the specific language
+ * governing permissions and limitations under the License.
+ */
+
+// stands in for config.aem.page, which needs a shared secret. one read of the pipeline scope
+// answers whether the site exists, its head.html and which store holds it. a site in SITES exists,
+// and one with a source url on api.aem.live is source-bus
+const SITES = {
+  'org/site': 'https://content.da.live/org/site/',
+};
+
+// what the code bus has at {owner}/{repo}/{ref}/head.html, which the pipeline scope answers with
+const HEAD_HTML = '<link rel="stylesheet" href="/styles/styles.css"/>\n<script src="/scripts/scripts.js" type="module"></script>\n';
+
+export default {
+  async fetch(req) {
+    const url = new URL(req.url);
+
+    const [ref, site, org] = (url.pathname.split('/')[1] ?? '').split('--');
+    if (!org || !site) {
+      return new Response('', { status: 400, headers: { 'x-error': 'invalid rso path parameter.' } });
+    }
+
+    const source = SITES[`${org}/${site}`];
+    if (!source) {
+      return new Response('', { status: 404, headers: { 'x-error': 'config not found.' } });
+    }
+
+    // both stores are `type: markup`, so only the url separates them
+    const body = JSON.stringify({
+      ref,
+      site,
+      org,
+      head: { html: HEAD_HTML },
+      contentSource: { type: 'markup', url: source },
+    });
+    return new Response(body, { status: 200, headers: { 'content-type': 'application/json' } });
+  },
+};

dev/lookup-shim.toml

@@ -0,0 +1,9 @@
+# the stand-in gets its own config, so wrangler dev does not read wrangler.toml: no daadmin
+# binding to connect, and no HLX_CONFIG_SERVICE_TOKEN to warn about
+name = "da-ue-lookup-shim"
+main = "lookup-shim.js"
+compatibility_date = "2023-11-21"
+
+[dev]
+port = 4713
+inspector_port = 9234

eslint.config.js

@@ -14,7 +14,7 @@ import { defineConfig, globalIgnores } from '@eslint/config-helpers';
 import { recommended, source, test } from '@adobe/eslint-config-helix';
 
 export default defineConfig([
-  globalIgnores(['.vscode/*', '.wrangler/*', 'coverage/*']),
+  globalIgnores(['.vscode/*', '**/.wrangler/**', 'coverage/*']),
   {
     languageOptions: {
       ...recommended.languageOptions,

package.json

@@ -7,6 +7,7 @@
     "deploy": "wrangler deploy",
     "deploy:stage": "wrangler deploy --env stage",
     "dev": "wrangler dev --local-protocol https --env dev",
+    "dev:lookups": "wrangler dev -c dev/lookup-shim.toml",
     "start": "wrangler dev --local-protocol https --env dev",
     "test": "c8 mocha --spec=test/**/*.test.js",
     "lint": "eslint ."

src/handlers/get.js

@@ -21,7 +21,7 @@ export default async function getHandler({ req, env, daCtx }) {
   if (path.startsWith('/favicon.ico')) return get404();
   if (path.startsWith('/robots.txt')) return getRobots();
 
-  if (path.startsWith('/gimme_cookie')) return getCookie({ req, daCtx });
+  if (path.startsWith('/gimme_cookie')) return getCookie({ req, env, daCtx });
 
   const resourceRegex = /\.(css|js|js\.map|json|xml|woff|woff2|otf|ttf|plain\.html|html)$/i;
   if (resourceRegex.test(path)) {
@@ -35,8 +35,14 @@ export default async function getHandler({ req, env, daCtx }) {
       handleAEMProxyRequest({ req, env, daCtx }),
     ]);
 
-    const storeRes = daSourceGetRes.status === 'fulfilled' ? daSourceGetRes.value : undefined;
-    const aemRes = aemProxyRes.status === 'fulfilled' ? aemProxyRes.value : undefined;
+    // logs a rejection rather than rethrowing it, since the other read may still answer
+    const settled = (result, read) => {
+      if (result.status === 'fulfilled') return result.value;
+      console.error(`${read} threw on ${path}`, result.reason);
+      return undefined;
+    };
+    const storeRes = settled(daSourceGetRes, 'the store read');
+    const aemRes = settled(aemProxyRes, 'the aem proxy');
 
     let response;
     if (storeRes?.status === 200) {

src/responses/index.js

@@ -77,6 +77,10 @@ export function post503(message = '', error = '') {
   });
 }
 
+export function post404(message = '') {
+  return daResp({ body: message, status: 404, contentType: 'text/plain; charset=utf-8' });
+}
+
 // RFC 9110 requires an Allow header on a 405, and reads are what is left once the write is gone.
 export function post405(message = '') {
   return daResp({

src/routes/cookie.js

@@ -12,9 +12,9 @@
 import { daResp, get401 } from '../responses/index.js';
 import { isTrustedOrigin } from '../utils/constants.js';
 
-async function exchangeSiteToken(org, site, accessToken) {
+async function exchangeSiteToken(env, org, site, accessToken) {
   try {
-    const response = await fetch('https://admin.hlx.page/auth/adobe/exchange', {
+    const response = await fetch(new URL('/auth/adobe/exchange', env.AEM_API), {
       method: 'POST',
       headers: {
         'Content-Type': 'application/json',
@@ -48,7 +48,7 @@ async function exchangeSiteToken(org, site, accessToken) {
   }
 }
 
-export async function getCookie({ req, daCtx }) {
+export async function getCookie({ req, env, daCtx }) {
   const { headers } = req;
 
   if (!isTrustedOrigin(headers.get('Origin'))) return daResp({ body: '403 Forbidden', status: 403, contentType: 'text/plain' });
@@ -67,7 +67,7 @@ export async function getCookie({ req, daCtx }) {
 
       // Try to exchange for site token
       if (org && site && !daCtx.siteToken) {
-        const siteTokenData = await exchangeSiteToken(org, site, cookieValue);
+        const siteTokenData = await exchangeSiteToken(env, org, site, cookieValue);
         if (siteTokenData) {
           // Calculate Max-Age based on token expiry time (siteTokenExpiry is in milliseconds)
           const now = Date.now();