fix(site): force gate worker to run before serving static assets - #51
Merged
Conversation
Verified live: internal pages returned a plain 200 with none of the gate's redirect/cookie logic, because Cloudflare serves a request straight from the asset router whenever its path matches a real file in dist/ — which every visibility: internal page does. The gate's fetch handler in src/worker/gate.ts never ran at all. run_worker_first = true routes every request through the Worker first; it calls env.ASSETS.fetch() itself for public paths and already-authorized internal ones, same as before.
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
nyuchi-docs-mcp | c681e53 | Commit Preview URL Branch Preview URL |
Aug 01 2026, 02:25 AM |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
shamwari-docs-ai | c681e53 | Commit Preview URL Branch Preview URL |
Aug 01 2026, 02:25 AM |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
nyuchi-docs | c681e53 | Commit Preview URL Branch Preview URL |
Aug 01 2026, 02:26 AM |
bryanfawcett
marked this pull request as ready for review
August 1, 2026 08:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
curl https://docs.nyuchi.com/deployment/agentgateway/returned a plain200, not the expected302to WorkOS login. The gate's fetch handler wasn't running at all.dist/, bypassing the Worker'sfetch()entirely — and everyvisibility: internalpage is a real file.run_worker_first = truein[assets]— routes every request throughsrc/worker/gate.tsfirst; it still callsenv.ASSETS.fetch()itself for public paths and authorized internal ones, so behavior for everything else is unchanged.Test plan
wrangler deploy --dry-run— bundles clean, same bindingscurl -I https://docs.nyuchi.com/deployment/agentgateway/returns302toidentity.nyuchi.comGenerated by Claude Code