@hubpav/hwio-web-worker 0.6.6 → 0.7.1

package/dist/headers.d.ts

@@ -28,6 +28,12 @@ export interface HWioHeadersOptions {
     cache?: Record<string, string>;
     /** Extra headers on every response (e.g. X-Robots-Tag: noindex). */
     extra?: Record<string, string>;
+    /**
+     * Add a host-scoped `_headers` rule that marks preview deployments (`*.workers.dev`) noindex.
+     * Needed on sites whose Worker does not run for HTML (`run_worker_first: ["/csp-report"]`),
+     * where the handler's own preview header never applies.
+     */
+    previewNoindex?: boolean;
 }
 export declare function hwioBuildCsp(o: HWioHeadersOptions): string;
 export declare function hwioSecurityHeaders(o: HWioHeadersOptions): Record<string, string>;

package/dist/headers.js

@@ -70,5 +70,7 @@ export function hwioRenderHeadersFile(o) {
     const security = Object.entries(hwioSecurityHeaders(o)).map(([k, v]) => `  ${k}: ${v}`);
     const hints = (o.earlyHints ?? []).length ? hwioEarlyHintLinks(o.earlyHints).map((l) => `  Link: ${l}`) : [];
     blocks.push(`/*\n${[...security, ...hints].join('\n')}`);
+    if (o.previewNoindex)
+        blocks.push('https://:preview.:account.workers.dev/*\n  X-Robots-Tag: noindex, nofollow');
     return `# Generated by @hubpav/hwio-web-worker (hwioRenderHeadersFile). Edit the site's hwioUi() options, not this file.\n${blocks.join('\n\n')}\n`;
 }

package/dist/index.d.ts

@@ -8,6 +8,12 @@ export interface HWioWorkerOptions {
     earlyHints?: string[];
     /** Name of the static assets binding. */
     assetsBinding?: string;
+    /**
+     * Hostname suffixes treated as preview deployments (Workers Builds non-production branches,
+     * `wrangler versions upload --preview-alias`): the canonical redirect is skipped there and
+     * every response carries `X-Robots-Tag: noindex, nofollow`. Default: ['.workers.dev'].
+     */
+    previewHosts?: string[];
 }
 /**
  * Fetch handler for an Astro static site on Cloudflare Workers with static assets.

package/dist/index.js

@@ -6,10 +6,11 @@ export * from './headers.js';
  * `run_worker_first: true` also get the canonical redirect and Early Hints.
  */
 export function hwioWorker(options = {}) {
-    const { canonicalHost = null, cspReport = true, earlyHints = [], assetsBinding = 'ASSETS' } = options;
+    const { canonicalHost = null, cspReport = true, earlyHints = [], assetsBinding = 'ASSETS', previewHosts = ['.workers.dev'] } = options;
     return {
         async fetch(request, env) {
             const url = new URL(request.url);
+            const preview = previewHosts.some((suffix) => url.hostname.endsWith(suffix));
             if (cspReport && url.pathname === '/csp-report') {
                 if (request.method === 'POST') {
                     try {
@@ -22,7 +23,7 @@ export function hwioWorker(options = {}) {
                 }
                 return new Response(null, { status: 204 });
             }
-            if (canonicalHost && (url.protocol !== 'https:' || url.hostname !== canonicalHost)) {
+            if (canonicalHost && !preview && (url.protocol !== 'https:' || url.hostname !== canonicalHost)) {
                 url.protocol = 'https:';
                 url.hostname = canonicalHost;
                 return Response.redirect(url.toString(), 301);
@@ -31,12 +32,15 @@ export function hwioWorker(options = {}) {
             if (!assets)
                 return new Response('assets binding missing', { status: 500 });
             const res = await assets.fetch(request);
-            if (earlyHints.length && res.status === 200 && (res.headers.get('content-type') ?? '').includes('text/html')) {
-                const withHints = new Response(res.body, res);
-                hwioEarlyHintLinks(earlyHints).forEach((l) => withHints.headers.append('Link', l));
-                return withHints;
-            }
-            return res;
+            const html = res.status === 200 && (res.headers.get('content-type') ?? '').includes('text/html');
+            if (!preview && !(earlyHints.length && html))
+                return res;
+            const out = new Response(res.body, res);
+            if (earlyHints.length && html)
+                hwioEarlyHintLinks(earlyHints).forEach((l) => out.headers.append('Link', l));
+            if (preview)
+                out.headers.set('X-Robots-Tag', 'noindex, nofollow');
+            return out;
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hubpav/hwio-web-worker",
-  "version": "0.6.6",
+  "version": "0.7.1",
   "description": "Shared Cloudflare Worker handler and security-header builder for the HARDWARIO static sites: canonical-host redirect, CSP report collector, Early Hints, _headers generation.",
   "license": "MIT",
   "type": "module",