@adobe/helix-html-pipeline 6.27.23 → 6.27.25

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [6.27.25](https://github.com/adobe/helix-html-pipeline/compare/v6.27.24...v6.27.25) (2026-03-10)
+
+
+### Bug Fixes
+
+* better logging for xfh ([b09cf5d](https://github.com/adobe/helix-html-pipeline/commit/b09cf5de887f56aadebf6db37812910a9d45f7e2))
+
+## [6.27.24](https://github.com/adobe/helix-html-pipeline/compare/v6.27.23...v6.27.24) (2026-03-10)
+
+
+### Bug Fixes
+
+* **init-config:** warn when cdn.prod.host is absent and x-forwarded-host fallback is used ([#1038](https://github.com/adobe/helix-html-pipeline/issues/1038)) ([ba213ab](https://github.com/adobe/helix-html-pipeline/commit/ba213ab6a989697927c85578d06af1e5afeae229))
+
 ## [6.27.23](https://github.com/adobe/helix-html-pipeline/compare/v6.27.22...v6.27.23) (2026-02-22)
 
 

package/CLAUDE.md

@@ -0,0 +1,75 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Commands
+
+```bash
+npm test          # Run tests with c8 code coverage
+npm run lint      # Run ESLint
+npm ci            # Install dependencies (CI-style)
+```
+
+Run a single test file:
+```bash
+npx mocha test/html-pipe.test.js
+```
+
+Run a specific test by name (grep):
+```bash
+npx mocha --grep "test name" test/rendering.test.js
+```
+
+## Architecture
+
+This is a platform-neutral (Node + Cloudflare Worker) library for rendering Helix3 HTML responses. It serves as shared code between `helix-pipeline-service` and `helix-cloudflare-page`.
+
+### Entry Points (Pipe Functions)
+
+Each HTTP response type has a dedicated "pipe" function:
+- **`htmlPipe`** (`src/html-pipe.js`) — Markdown → HTML rendering pipeline (30+ steps)
+- **`jsonPipe`** (`src/json-pipe.js`) — JSON response pipeline with folder mapping
+- **`optionsPipe`** (`src/options-pipe.js`) — HTTP OPTIONS method handler
+- **`robotsPipe`** (`src/robots-pipe.js`) — `robots.txt` generation
+- **`sitemapPipe`** (`src/sitemap-pipe.js`) — XML sitemap generation
+
+### Core Classes
+
+- **`PipelineState`** — Execution context; holds org, site, repo, owner, ref, partition, metadata, headers, and content
+- **`PipelineRequest`** / **`PipelineResponse`** — HTTP request/response wrappers
+- **`PipelineContent`** — Content container (source markdown, parsed AST, rendered HTML)
+- **`PipelineStatusError`** — Custom error for pipeline-specific HTTP status codes
+
+### Pipeline Steps Pattern
+
+Each step is an async function with signature `(state, req?, res?) => void`. Steps live in `src/steps/` and are composed in sequence within each pipe function. Categories:
+- **Content fetching**: `fetch-content.js`, `fetch-404.js`, `fetch-sourced-metadata.js`
+- **Markdown processing**: `parse-markdown.js`, `split-sections.js`
+- **HTML transformation**: `make-html.js`, `create-page-blocks.js`, `create-pictures.js`, `extract-metadata.js`
+- **URL rewriting**: `rewrite-urls.js`, `rewrite-icons.js`
+- **Response formatting**: `stringify-response.js`, `render.js`, `render-code.js`
+
+### AST Processing
+
+Uses the `unified` ecosystem (remark for Markdown, rehype for HTML). The conversion path is: raw Markdown → mdast (via `remark-parse`) → hast (via custom `mdast-to-hast.js`) → serialized HTML (via `rehype-stringify`). Custom handling in `src/utils/mdast-to-hast.js` and `src/utils/hast-utils.js`.
+
+### Platform Abstraction
+
+Crypto operations use `src/utils/crypto.node.js` vs `src/utils/crypto.worker.js` to stay compatible with both Node.js and Cloudflare Worker runtimes. No Node-specific or browser-specific modules should be added as runtime dependencies.
+
+### Content Sources
+
+Content is fetched from two S3-backed sources:
+- **Content bus** — Markdown and metadata (`.md`, `metadata.json`)
+- **Code bus** — Templates, headers, footers, scripts
+
+The S3 loader is injected into `PipelineState` and abstracted for testing via `test/FileS3Loader.js` and `test/StaticS3Loader.js`.
+
+## Testing
+
+Tests use Mocha + c8. Test fixtures live in `test/fixtures/` organized by type (`content/`, `code/`, `json/`, `mdasts/`, `sections/`). The `test/setup-env.js` file initializes the test environment.
+
+Key test files:
+- `test/rendering.test.js` — Large integration tests for HTML rendering (49KB)
+- `test/html-pipe.test.js` / `test/json-pipe.test.js` — Pipe-level integration tests
+- `test/steps/` and `test/utils/` — Unit tests for individual modules

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-html-pipeline",
-  "version": "6.27.23",
+  "version": "6.27.25",
   "description": "Helix HTML Pipeline",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -70,12 +70,12 @@
     "unist-util-visit-parents": "6.0.2"
   },
   "devDependencies": {
-    "@adobe/eslint-config-helix": "3.0.19",
+    "@adobe/eslint-config-helix": "3.0.21",
     "@eslint/config-helpers": "0.5.2",
     "@markedjs/html-differ": "5.0.4",
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/git": "10.0.1",
-    "@semantic-release/npm": "13.1.3",
+    "@semantic-release/npm": "13.1.4",
     "c8": "10.1.3",
     "eslint": "9.4.0",
     "eslint-import-resolver-exports": "1.0.0-beta.5",
@@ -84,7 +84,7 @@
     "esmock": "2.7.3",
     "husky": "9.1.7",
     "js-yaml": "4.1.1",
-    "jsdom": "28.0.0",
+    "jsdom": "28.1.0",
     "junit-report-builder": "5.1.1",
     "lint-staged": "16.2.7",
     "mocha": "11.7.5",

package/src/steps/init-config.js

@@ -10,7 +10,7 @@
  * governing permissions and limitations under the License.
  */
 import { Modifiers } from '../utils/modifiers.js';
-import { getOriginalHost } from './utils.js';
+import { getOriginalHost, getXFH } from './utils.js';
 import { recordLastModified } from '../utils/last-modified.js';
 
 function replaceParams(str, info) {
@@ -43,6 +43,11 @@ export default function initConfig(state, req, res) {
   // set custom preview and live hosts
   state.previewHost = replaceParams(config.cdn?.preview?.host, state);
   state.liveHost = replaceParams(config.cdn?.live?.host, state);
-  state.prodHost = config.cdn?.prod?.host || getOriginalHost(req.headers);
+  const configuredProdHost = config.cdn?.prod?.host;
+  const xfh = getXFH(req.headers);
+  if (!configuredProdHost && xfh && !xfh.endsWith('.aem.page') && !xfh.endsWith('.aem.live')) {
+    state.log.warn(`[${state.org}/${state.site}] cdn.prod.host is not configured, falling back to x-forwarded-host: ${xfh}`);
+  }
+  state.prodHost = configuredProdHost || getOriginalHost(req.headers);
   recordLastModified(state, res, 'config', state.config.lastModified);
 }

package/src/steps/utils.js

@@ -17,11 +17,11 @@ const MEDIA_BLOB_REGEXP = /^https:\/\/.*\.(aem|hlx3?)\.(live|page)\/media_.*/;
 const HELIX_URL_REGEXP = /^https:\/\/.*\.(aem|hlx3?)\.(live|page)\/?.*/;
 
 /**
- * Returns the original host name from the request to the outer CDN.
+ * Returns the x-forwarded-host from the header
  * @param {object} headers The request headers
  * @returns {string} The original host
  */
-export function getOriginalHost(headers) {
+export function getXFH(headers) {
   const xfh = headers.get('x-forwarded-host');
   if (xfh) {
     const segs = xfh.split(',');
@@ -32,7 +32,16 @@ export function getOriginalHost(headers) {
       }
     }
   }
-  return headers.get('host');
+  return '';
+}
+
+/**
+ * Returns the original host name from the request to the outer CDN.
+ * @param {object} headers The request headers
+ * @returns {string} The original host
+ */
+export function getOriginalHost(headers) {
+  return getXFH(headers) || headers.get('host');
 }
 
 /**