@agent-native/core 0.22.32 → 0.22.34

package/dist/client/extensions/ExtensionViewer.spec.js

@@ -0,0 +1,94 @@
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+// @vitest-environment happy-dom
+import { act } from "react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { createRoot } from "react-dom/client";
+import { MemoryRouter } from "react-router";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { ExtensionViewer } from "./ExtensionViewer.js";
+const embedState = vi.hoisted(() => ({ active: false }));
+vi.mock("../embed-auth.js", () => ({
+    ensureEmbedAuthFetchInterceptor: vi.fn(),
+    isEmbedMcpChatBridgeActive: () => embedState.active,
+}));
+vi.mock("../sharing/ShareButton.js", () => ({
+    ShareButton: () => _jsx("button", { type: "button", children: "Share" }),
+}));
+vi.mock("../AgentPanel.js", () => ({
+    AgentToggleButton: () => _jsx("button", { type: "button", children: "Agent" }),
+}));
+vi.mock("../notifications/NotificationsBell.js", () => ({
+    NotificationsBell: () => _jsx("button", { type: "button", children: "Notifications" }),
+}));
+vi.mock("../composer/PromptComposer.js", () => ({
+    PromptComposer: () => _jsx("div", {}),
+}));
+vi.mock("../components/ui/popover.js", () => ({
+    Popover: ({ children }) => (_jsx("div", { children: children })),
+    PopoverContent: ({ children }) => (_jsx("div", { children: children })),
+    PopoverTrigger: ({ children }) => (_jsx(_Fragment, { children: children })),
+}));
+vi.mock("../components/ui/tooltip.js", () => ({
+    Tooltip: ({ children }) => _jsx(_Fragment, { children: children }),
+    TooltipContent: ({ children }) => (_jsx("div", { children: children })),
+    TooltipProvider: ({ children }) => (_jsx(_Fragment, { children: children })),
+    TooltipTrigger: ({ children }) => (_jsx(_Fragment, { children: children })),
+}));
+const extensionResponse = {
+    id: "ext-1",
+    name: "GitHub Stars Over Time",
+    description: "Tracks stars",
+    content: "<section>Star history chart</section>",
+    updatedAt: "2026-05-22T00:00:00.000Z",
+    ownerEmail: "owner@example.test",
+    role: "owner",
+    canDelete: true,
+};
+describe("ExtensionViewer MCP embeds", () => {
+    let container;
+    let root;
+    let queryClient;
+    beforeEach(() => {
+        vi.stubGlobal("IS_REACT_ACT_ENVIRONMENT", true);
+        vi.stubGlobal("fetch", vi.fn(async () => Response.json(extensionResponse)));
+        embedState.active = false;
+        queryClient = new QueryClient({
+            defaultOptions: {
+                queries: { retry: false },
+                mutations: { retry: false },
+            },
+        });
+        container = document.createElement("div");
+        root = createRoot(container);
+    });
+    afterEach(() => {
+        act(() => root.unmount());
+        queryClient.clear();
+        container.remove();
+        vi.unstubAllGlobals();
+    });
+    async function renderViewer() {
+        await act(async () => {
+            root.render(_jsx(QueryClientProvider, { client: queryClient, children: _jsx(MemoryRouter, { initialEntries: ["/extensions/ext-1/github-stars"], children: _jsx(ExtensionViewer, { extensionId: "ext-1" }) }) }));
+        });
+        await vi.waitFor(() => {
+            expect(container.querySelector("iframe")).toBeTruthy();
+        });
+        return container.querySelector("iframe");
+    }
+    it("uses the extension render route in the normal app", async () => {
+        const iframe = await renderViewer();
+        expect(iframe.getAttribute("src")).toContain("/_agent-native/extensions/ext-1/render");
+        expect(iframe.getAttribute("srcdoc")).toBeNull();
+        expect(iframe.getAttribute("sandbox")).toBe("allow-scripts allow-forms");
+    });
+    it("uses sandboxed srcdoc inside MCP chat embeds to avoid a blocked nested route frame", async () => {
+        embedState.active = true;
+        const iframe = await renderViewer();
+        expect(iframe.getAttribute("src")).toBeNull();
+        expect(iframe.getAttribute("srcdoc")).toContain("Star history chart");
+        expect(iframe.getAttribute("srcdoc")).toContain("agent-native-extension-binding");
+        expect(iframe.getAttribute("sandbox")).toBe("allow-scripts allow-forms");
+    });
+});
+//# sourceMappingURL=ExtensionViewer.spec.js.map

package/dist/client/extensions/ExtensionViewer.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExtensionViewer.spec.js","sourceRoot":"","sources":["../../../src/client/extensions/ExtensionViewer.spec.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAc,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAa,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEzD,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,+BAA+B,EAAE,EAAE,CAAC,EAAE,EAAE;IACxC,0BAA0B,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM;CACpD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,GAAG,EAAE,CAAC,iBAAQ,IAAI,EAAC,QAAQ,sBAAe;CACxD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAQ,IAAI,EAAC,QAAQ,sBAAe;CAC9D,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAQ,IAAI,EAAC,QAAQ,8BAAuB;CACtE,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,cAAc,EAAE,GAAG,EAAE,CAAC,eAAO;CAC9B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CACxD,wBAAM,QAAQ,GAAO,CACtB;IACD,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CAC/D,wBAAM,QAAQ,GAAO,CACtB;IACD,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CAC/D,4BAAG,QAAQ,GAAI,CAChB;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,4BAAG,QAAQ,GAAI;IACzE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CAC/D,wBAAM,QAAQ,GAAO,CACtB;IACD,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CAChE,4BAAG,QAAQ,GAAI,CAChB;IACD,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAiC,EAAE,EAAE,CAAC,CAC/D,4BAAG,QAAQ,GAAI,CAChB;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,iBAAiB,GAAG;IACxB,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,uCAAuC;IAChD,SAAS,EAAE,0BAA0B;IACrC,UAAU,EAAE,oBAAoB;IAChC,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,IAAI,SAAyB,CAAC;IAC9B,IAAI,IAAU,CAAC;IACf,IAAI,WAAwB,CAAC;IAE7B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAChD,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CACpD,CAAC;QACF,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC;QAC1B,WAAW,GAAG,IAAI,WAAW,CAAC;YAC5B,cAAc,EAAE;gBACd,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;gBACzB,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;aAC5B;SACF,CAAC,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,SAAS,CAAC,MAAM,EAAE,CAAC;QACnB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY;QACzB,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,IAAI,CAAC,MAAM,CACT,KAAC,mBAAmB,IAAC,MAAM,EAAE,WAAW,YACtC,KAAC,YAAY,IAAC,cAAc,EAAE,CAAC,gCAAgC,CAAC,YAC9D,KAAC,eAAe,IAAC,WAAW,EAAC,OAAO,GAAG,GAC1B,GACK,CACvB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAsB,CAAC;IAChE,CAAC;IAED,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,wCAAwC,CACzC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QAEpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAC7C,gCAAgC,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment happy-dom\nimport React, { act } from \"react\";\nimport { QueryClient, QueryClientProvider } from \"@tanstack/react-query\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { MemoryRouter } from \"react-router\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport { ExtensionViewer } from \"./ExtensionViewer.js\";\n\nconst embedState = vi.hoisted(() => ({ active: false }));\n\nvi.mock(\"../embed-auth.js\", () => ({\n  ensureEmbedAuthFetchInterceptor: vi.fn(),\n  isEmbedMcpChatBridgeActive: () => embedState.active,\n}));\n\nvi.mock(\"../sharing/ShareButton.js\", () => ({\n  ShareButton: () => <button type=\"button\">Share</button>,\n}));\n\nvi.mock(\"../AgentPanel.js\", () => ({\n  AgentToggleButton: () => <button type=\"button\">Agent</button>,\n}));\n\nvi.mock(\"../notifications/NotificationsBell.js\", () => ({\n  NotificationsBell: () => <button type=\"button\">Notifications</button>,\n}));\n\nvi.mock(\"../composer/PromptComposer.js\", () => ({\n  PromptComposer: () => <div />,\n}));\n\nvi.mock(\"../components/ui/popover.js\", () => ({\n  Popover: ({ children }: { children: React.ReactNode }) => (\n    <div>{children}</div>\n  ),\n  PopoverContent: ({ children }: { children: React.ReactNode }) => (\n    <div>{children}</div>\n  ),\n  PopoverTrigger: ({ children }: { children: React.ReactNode }) => (\n    <>{children}</>\n  ),\n}));\n\nvi.mock(\"../components/ui/tooltip.js\", () => ({\n  Tooltip: ({ children }: { children: React.ReactNode }) => <>{children}</>,\n  TooltipContent: ({ children }: { children: React.ReactNode }) => (\n    <div>{children}</div>\n  ),\n  TooltipProvider: ({ children }: { children: React.ReactNode }) => (\n    <>{children}</>\n  ),\n  TooltipTrigger: ({ children }: { children: React.ReactNode }) => (\n    <>{children}</>\n  ),\n}));\n\nconst extensionResponse = {\n  id: \"ext-1\",\n  name: \"GitHub Stars Over Time\",\n  description: \"Tracks stars\",\n  content: \"<section>Star history chart</section>\",\n  updatedAt: \"2026-05-22T00:00:00.000Z\",\n  ownerEmail: \"owner@example.test\",\n  role: \"owner\",\n  canDelete: true,\n};\n\ndescribe(\"ExtensionViewer MCP embeds\", () => {\n  let container: HTMLDivElement;\n  let root: Root;\n  let queryClient: QueryClient;\n\n  beforeEach(() => {\n    vi.stubGlobal(\"IS_REACT_ACT_ENVIRONMENT\", true);\n    vi.stubGlobal(\n      \"fetch\",\n      vi.fn(async () => Response.json(extensionResponse)),\n    );\n    embedState.active = false;\n    queryClient = new QueryClient({\n      defaultOptions: {\n        queries: { retry: false },\n        mutations: { retry: false },\n      },\n    });\n    container = document.createElement(\"div\");\n    root = createRoot(container);\n  });\n\n  afterEach(() => {\n    act(() => root.unmount());\n    queryClient.clear();\n    container.remove();\n    vi.unstubAllGlobals();\n  });\n\n  async function renderViewer() {\n    await act(async () => {\n      root.render(\n        <QueryClientProvider client={queryClient}>\n          <MemoryRouter initialEntries={[\"/extensions/ext-1/github-stars\"]}>\n            <ExtensionViewer extensionId=\"ext-1\" />\n          </MemoryRouter>\n        </QueryClientProvider>,\n      );\n    });\n    await vi.waitFor(() => {\n      expect(container.querySelector(\"iframe\")).toBeTruthy();\n    });\n    return container.querySelector(\"iframe\") as HTMLIFrameElement;\n  }\n\n  it(\"uses the extension render route in the normal app\", async () => {\n    const iframe = await renderViewer();\n\n    expect(iframe.getAttribute(\"src\")).toContain(\n      \"/_agent-native/extensions/ext-1/render\",\n    );\n    expect(iframe.getAttribute(\"srcdoc\")).toBeNull();\n    expect(iframe.getAttribute(\"sandbox\")).toBe(\"allow-scripts allow-forms\");\n  });\n\n  it(\"uses sandboxed srcdoc inside MCP chat embeds to avoid a blocked nested route frame\", async () => {\n    embedState.active = true;\n    const iframe = await renderViewer();\n\n    expect(iframe.getAttribute(\"src\")).toBeNull();\n    expect(iframe.getAttribute(\"srcdoc\")).toContain(\"Star history chart\");\n    expect(iframe.getAttribute(\"srcdoc\")).toContain(\n      \"agent-native-extension-binding\",\n    );\n    expect(iframe.getAttribute(\"sandbox\")).toBe(\"allow-scripts allow-forms\");\n  });\n});\n"]}

package/dist/deploy/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAuC7B;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,GAChD,MAAM,CAwcR;AA0VD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAmVD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAiC7B;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,GAChD,MAAM,CA6ZR;AA0VD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAmVD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/deploy/build.js

@@ -21,11 +21,9 @@ import { discoverApiRoutes, discoverPlugins, discoverActionFiles, getMissingDefa
 import { getWorkspaceCoreExports, } from "./workspace-core.js";
 import { generateActionRegistryForProject } from "../vite/action-types-plugin.js";
 import { mcpEmbedStaticAssetRouteRules } from "../shared/mcp-embed-headers.js";
-import { EMBED_SESSION_COOKIE, EMBED_TOKEN_QUERY_PARAM, } from "../shared/embed-auth.js";
 const cwd = process.cwd();
 const preset = process.env.NITRO_PRESET || "node";
 const DEFAULT_SSR_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=604800, stale-if-error=3600";
-const AUTHENTICATED_SSR_CACHE_CONTROL = "private, max-age=5, stale-while-revalidate=604800, stale-if-error=3600";
 function normalizeConfiguredAppBasePath() {
     const raw = process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH;
     if (!raw || raw === "/")
@@ -264,62 +262,21 @@ function injectHeadScript(html, script) {
 }
 
 const DEFAULT_SSR_CACHE_CONTROL = ${JSON.stringify(DEFAULT_SSR_CACHE_CONTROL)};
-const AUTHENTICATED_SSR_CACHE_CONTROL = ${JSON.stringify(AUTHENTICATED_SSR_CACHE_CONTROL)};
-const EMBED_SESSION_COOKIE = ${JSON.stringify(EMBED_SESSION_COOKIE)};
-const EMBED_TOKEN_QUERY_PARAM = ${JSON.stringify(EMBED_TOKEN_QUERY_PARAM)};
-const ANONYMOUS_SESSION_COOKIE_NAMES = new Set(["an_docs_session"]);
-const BETTER_AUTH_SESSION_COOKIE_RE = /\\.session_(?:token|data)$/;
 
-function isAuthenticatedCookieName(name) {
-  if (ANONYMOUS_SESSION_COOKIE_NAMES.has(name)) return false;
-  const bareName = String(name || "").replace(/^__(?:Secure|Host)-/, "");
-  return (
-    bareName === EMBED_SESSION_COOKIE ||
-    bareName === "an_session" ||
-    bareName === "an_session_workspace" ||
-    bareName.startsWith("an_session_") ||
-    bareName === "an.session_token" ||
-    bareName === "an.session_data" ||
-    BETTER_AUTH_SESSION_COOKIE_RE.test(bareName)
-  );
-}
-
-function requestHasAuthenticatedCookie(cookieHeader) {
-  if (!cookieHeader) return false;
-  return String(cookieHeader)
-    .split(";")
-    .map((cookie) => cookie.trim().split("=", 1)[0]?.trim())
-    .filter(Boolean)
-    .some(isAuthenticatedCookieName);
-}
-
-function requestHasAuthSignal(request) {
-  const url = new URL(request.url);
-  return Boolean(
-    request.headers.get("authorization") ||
-    requestHasAuthenticatedCookie(request.headers.get("cookie")) ||
-    url.searchParams.has(EMBED_TOKEN_QUERY_PARAM) ||
-    url.searchParams.has("_session")
-  );
-}
-
-function applyDefaultSsrCacheHeader(headers, status, hasAuthSignal) {
+function applyDefaultSsrCacheHeader(headers, status) {
   if (headers.has("cache-control")) return;
   if (status < 200 || status >= 400) return;
 
   const contentType = (headers.get("content-type") || "").toLowerCase();
   if (!contentType.includes("text/html")) return;
 
-  headers.set(
-    "cache-control",
-    hasAuthSignal ? AUTHENTICATED_SSR_CACHE_CONTROL : DEFAULT_SSR_CACHE_CONTROL,
-  );
+  headers.set("cache-control", DEFAULT_SSR_CACHE_CONTROL);
 }
 
-async function rewriteMountedResponse(response, basePath, hasAuthSignal) {
+async function rewriteMountedResponse(response, basePath) {
   const sentryClientConfigScript = getSentryClientConfigScript();
   const headers = new Headers(response.headers);
-  applyDefaultSsrCacheHeader(headers, response.status, hasAuthSignal);
+  applyDefaultSsrCacheHeader(headers, response.status);
 
   const location = headers.get("location");
   if (location?.startsWith("/") && !location.startsWith("//")) {
@@ -435,7 +392,6 @@ ${actionRegistrations.join("\n")}
       return new Response(null, { status: 404 });
     }
     const request = requestWithPathname(event.req, p);
-    const hasAuthSignal = requestHasAuthSignal(event.req);
     if (event.req.method === "HEAD") {
       const getRequest = requestWithMethod(request, "GET");
       const response = await rrHandler(getRequest);
@@ -446,10 +402,9 @@ ${actionRegistrations.join("\n")}
           headers: response.headers,
         }),
         basePath,
-        hasAuthSignal,
       );
     }
-    return rewriteMountedResponse(await rrHandler(request), basePath, hasAuthSignal);
+    return rewriteMountedResponse(await rrHandler(request), basePath);
   }));
 
   _handler = app.fetch.bind(app);