@decocms/nextjs 8.0.0 → 8.4.0

package/src/DraftPreviewBadge.render.test.tsx

@@ -1,16 +0,0 @@
-import { renderToString } from "react-dom/server";
-import { describe, expect, it } from "vitest";
-
-import { DraftPreviewBadge } from "./DraftPreviewBadge";
-
-describe("DraftPreviewBadge (render)", () => {
-  it("surfaces the preview-mode label so a reviewer can't mistake a draft for live", () => {
-    const html = renderToString(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
-    expect(html).toContain("Preview mode");
-  });
-
-  it("embeds the deco mark inline (no external asset that could 404 on a consumer site)", () => {
-    const html = renderToString(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
-    expect(html).toContain("data:image/png;base64,");
-  });
-});

package/src/DraftPreviewBadge.test.ts

@@ -1,37 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { buildExitUrl, buildShareUrl } from "./DraftPreviewBadge";
-
-describe("buildShareUrl", () => {
-  it("pins the exact draft version so a recipient sees the same working tree", () => {
-    expect(buildShareUrl("https://fila.vtex.app/pdp/shoe", "abc.localhost:60534@v7")).toBe(
-      "https://fila.vtex.app/pdp/shoe?__draft=abc.localhost%3A60534%40v7",
-    );
-  });
-
-  it("preserves existing query params, only setting the draft token", () => {
-    expect(buildShareUrl("https://fila.vtex.app/plp?sort=price", "h@v1")).toBe(
-      "https://fila.vtex.app/plp?sort=price&__draft=h%40v1",
-    );
-  });
-
-  it("replaces a stale token already in the URL rather than appending a second", () => {
-    expect(buildShareUrl("https://fila.vtex.app/p?__draft=h@old", "h@new")).toBe(
-      "https://fila.vtex.app/p?__draft=h%40new",
-    );
-  });
-});
-
-describe("buildExitUrl", () => {
-  it("sets the ?__draft=off exit sentinel", () => {
-    expect(buildExitUrl("https://fila.vtex.app/pdp/shoe")).toBe(
-      "https://fila.vtex.app/pdp/shoe?__draft=off",
-    );
-  });
-
-  it("overrides an active token with off (leaves preview from anywhere)", () => {
-    expect(buildExitUrl("https://fila.vtex.app/p?__draft=h@v1")).toBe(
-      "https://fila.vtex.app/p?__draft=off",
-    );
-  });
-});

package/src/DraftPreviewBadge.tsx

@@ -1,252 +0,0 @@
-"use client";
-
-/**
- * Preview-mode indicator.
- *
- * The draft-preview flow (see `draft.ts`) carries the pointer in a cookie
- * across in-preview navigation, so after the first click the URL no longer
- * shows `?__draft=` — a reviewer can forget they are looking at unpublished
- * content and mistake it for what is live. This badge is the always-on signal:
- * whenever a draft is bound it floats over the page, and clicking it offers the
- * two things a reviewer actually needs — leave preview, or hand the exact draft
- * version to someone else.
- *
- * Deliberately self-contained: `"use client"`, inline styles (no dependency on
- * the host site's CSS/Tailwind), and a very high z-index, so it renders the
- * same on any consumer site. Only mounted when a draft is active
- * (`DraftPreviewIndicator` gates it), so it never costs ordinary traffic.
- */
-import { type ReactNode, useCallback, useEffect, useRef, useState } from "react";
-import { DECO_MARK_DATA_URI } from "./decoMark";
-import { DRAFT_PARAM } from "./draftConstants";
-
-export interface DraftPreviewBadgeProps {
-  /** The `<host>@<version>` token this render is bound to. */
-  pointer: string;
-}
-
-/**
- * URL that re-enters this exact draft version — what "Share Preview Link"
- * copies. Pins the version (the token carries the content ETag), so the
- * recipient sees the same working-tree state, not merely "some draft".
- *
- * Pure and exported for tests: builds off a full href so it needs no DOM.
- */
-export function buildShareUrl(href: string, pointer: string): string {
-  const url = new URL(href);
-  url.searchParams.set(DRAFT_PARAM, pointer);
-  return url.toString();
-}
-
-/**
- * URL that leaves preview mode — `?__draft=off`, the exit sentinel the
- * middleware/page pair understands (it clears the cookie and renders
- * published). Pure and exported for tests.
- */
-export function buildExitUrl(href: string): string {
-  const url = new URL(href);
-  url.searchParams.set(DRAFT_PARAM, "off");
-  return url.toString();
-}
-
-const DECO_GREEN = "#0b3d1e";
-/** Toast background — the deco lime. Text sits on it in dark green for contrast. */
-const DECO_LIME = "#d0ec1a";
-
-/** Leaving preview: an arrow back to the published site. */
-function ExitIcon() {
-  return (
-    <svg
-      width={14}
-      height={14}
-      viewBox="0 0 24 24"
-      fill="none"
-      stroke="currentColor"
-      strokeWidth={2}
-      strokeLinecap="round"
-      strokeLinejoin="round"
-      aria-hidden="true"
-    >
-      <path d="M19 12H5" />
-      <path d="M12 19l-7-7 7-7" />
-    </svg>
-  );
-}
-
-/** Sharing the draft: the classic three-node share glyph. */
-function ShareIcon() {
-  return (
-    <svg
-      width={14}
-      height={14}
-      viewBox="0 0 24 24"
-      fill="none"
-      stroke="currentColor"
-      strokeWidth={2}
-      strokeLinecap="round"
-      strokeLinejoin="round"
-      aria-hidden="true"
-    >
-      <circle cx={18} cy={5} r={3} />
-      <circle cx={6} cy={12} r={3} />
-      <circle cx={18} cy={19} r={3} />
-      <path d="M8.59 13.51l6.83 3.98" />
-      <path d="M15.41 6.51l-6.82 3.98" />
-    </svg>
-  );
-}
-
-export function DraftPreviewBadge({ pointer }: DraftPreviewBadgeProps) {
-  const [open, setOpen] = useState(false);
-  const [copied, setCopied] = useState(false);
-  const rootRef = useRef<HTMLDivElement>(null);
-
-  // Dismiss on outside click or Escape — standard popover behaviour, and it
-  // keeps the badge from trapping focus on a reviewer's own page.
-  useEffect(() => {
-    if (!open) return;
-    const onPointerDown = (e: MouseEvent) => {
-      if (rootRef.current && !rootRef.current.contains(e.target as Node)) setOpen(false);
-    };
-    const onKeyDown = (e: KeyboardEvent) => {
-      if (e.key === "Escape") setOpen(false);
-    };
-    document.addEventListener("mousedown", onPointerDown);
-    document.addEventListener("keydown", onKeyDown);
-    return () => {
-      document.removeEventListener("mousedown", onPointerDown);
-      document.removeEventListener("keydown", onKeyDown);
-    };
-  }, [open]);
-
-  const exitPreview = useCallback(() => {
-    window.location.href = buildExitUrl(window.location.href);
-  }, []);
-
-  const sharePreviewLink = useCallback(async () => {
-    const link = buildShareUrl(window.location.href, pointer);
-    try {
-      await navigator.clipboard.writeText(link);
-      setCopied(true);
-      window.setTimeout(() => setCopied(false), 2000);
-    } catch {
-      // Clipboard blocked (insecure context / permissions): fall back to a
-      // prompt so the reviewer can still copy the link by hand rather than
-      // silently doing nothing.
-      window.prompt("Copy preview link:", link);
-    }
-  }, [pointer]);
-
-  return (
-    <div
-      ref={rootRef}
-      data-deco-preview-badge=""
-      style={{
-        position: "fixed",
-        bottom: 16,
-        left: 16,
-        zIndex: 2147483647,
-        fontFamily:
-          "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif",
-        fontSize: 13,
-        lineHeight: 1.4,
-      }}
-    >
-      {open ? (
-        <div
-          role="menu"
-          style={{
-            position: "absolute",
-            bottom: "calc(100% + 8px)",
-            left: 0,
-            minWidth: 200,
-            background: "#fff",
-            color: "#1a1a1a",
-            borderRadius: 12,
-            boxShadow: "0 8px 30px rgba(0,0,0,0.18), 0 0 0 1px rgba(0,0,0,0.05)",
-            overflow: "hidden",
-          }}
-        >
-          <MenuItem onClick={exitPreview} label="Exit preview" icon={<ExitIcon />} />
-          <div style={{ height: 1, background: "rgba(0,0,0,0.07)" }} />
-          <MenuItem
-            onClick={sharePreviewLink}
-            label={copied ? "Copied!" : "Share preview"}
-            icon={<ShareIcon />}
-          />
-        </div>
-      ) : null}
-
-      <button
-        type="button"
-        aria-expanded={open}
-        aria-label="Preview mode"
-        onClick={() => setOpen((v) => !v)}
-        style={{
-          display: "inline-flex",
-          alignItems: "center",
-          gap: 8,
-          padding: "7px 12px 7px 8px",
-          background: DECO_LIME,
-          color: DECO_GREEN,
-          border: "none",
-          borderRadius: 9999,
-          cursor: "pointer",
-          fontSize: 13,
-          fontWeight: 600,
-          boxShadow: "0 4px 14px rgba(0,0,0,0.25)",
-        }}
-      >
-        <img
-          src={DECO_MARK_DATA_URI}
-          alt=""
-          width={18}
-          height={18}
-          style={{ display: "block", borderRadius: 4 }}
-        />
-        <span>Preview mode</span>
-      </button>
-    </div>
-  );
-}
-
-function MenuItem({
-  onClick,
-  label,
-  icon,
-}: {
-  onClick: () => void;
-  label: string;
-  icon: ReactNode;
-}) {
-  return (
-    <button
-      type="button"
-      role="menuitem"
-      onClick={onClick}
-      style={{
-        display: "flex",
-        alignItems: "center",
-        gap: 10,
-        width: "100%",
-        textAlign: "left",
-        padding: "10px 14px",
-        background: "transparent",
-        border: "none",
-        color: "inherit",
-        cursor: "pointer",
-        fontSize: 13,
-        whiteSpace: "nowrap",
-      }}
-      onMouseEnter={(e) => {
-        e.currentTarget.style.background = "rgba(0,0,0,0.05)";
-      }}
-      onMouseLeave={(e) => {
-        e.currentTarget.style.background = "transparent";
-      }}
-    >
-      <span style={{ display: "inline-flex", flexShrink: 0, color: DECO_GREEN }}>{icon}</span>
-      <span>{label}</span>
-    </button>
-  );
-}

package/src/SectionRenderer.test.tsx

@@ -1,97 +0,0 @@
-import { registerSection, registerSections, registerSectionsSync } from "@decocms/blocks/cms";
-import { renderToString } from "react-dom/server";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { SectionRenderer } from "./SectionRenderer";
-
-function Hero({ label }: { label?: string }) {
-  return <h1>{`hero-${label ?? "none"}`}</h1>;
-}
-
-// The test environment runs under jsdom (see root vitest.config.ts), where
-// `window` is defined. next/dynamic's internals branch on
-// `typeof window === "undefined"` to decide server vs. client behavior, so
-// under jsdom it always takes the client path — `{ ssr: false }` vs.
-// `{ ssr: true }` produce IDENTICAL rendered output here (both effectively
-// render `null` during a synchronous renderToString call, since the loader's
-// promise can't resolve in time regardless of the ssr option). Asserting on
-// rendered HTML would therefore pass even if ClientOnlySection passed
-// `{ ssr: true }` by mistake — it exercises no real server/window-undefined
-// code path in this environment.
-//
-// Instead we verify the actual contract ClientOnlySection is responsible
-// for: that it calls next/dynamic with `{ ssr: false }`. We spy on the
-// `next/dynamic` module import via `vi.mock` + `vi.hoisted`.
-const { dynamicSpy } = vi.hoisted(() => ({ dynamicSpy: vi.fn() }));
-
-vi.mock("next/dynamic", () => ({
-  default: (loader: unknown, options: unknown) => {
-    dynamicSpy(loader, options);
-    return function DynamicStub() {
-      return null;
-    };
-  },
-}));
-
-beforeEach(() => {
-  dynamicSpy.mockClear();
-});
-
-describe("SectionRenderer (next)", () => {
-  it("renders a sync-registered section directly", async () => {
-    const KEY = "site/sections/NextSyncA.tsx";
-    registerSectionsSync({ [KEY]: { default: Hero } });
-
-    const element = await SectionRenderer({
-      resolved: { key: KEY, component: KEY, props: { label: "a" } } as any,
-    });
-    const html = renderToString(element);
-    expect(html).toContain("hero-a");
-  });
-
-  it("awaits a code-split (non-sync) section's loader", async () => {
-    const KEY = "site/sections/NextLazyA.tsx";
-    registerSections({ [KEY]: () => Promise.resolve({ default: Hero }) });
-
-    const element = await SectionRenderer({
-      resolved: { key: KEY, component: KEY, props: { label: "b" } } as any,
-    });
-    const html = renderToString(element);
-    expect(html).toContain("hero-b");
-  });
-
-  it("routes a clientOnly-registered section through next/dynamic with ssr:false", async () => {
-    const KEY = "site/sections/NextClientOnlyA.tsx";
-    const loader = () => Promise.resolve({ default: Hero });
-    registerSection(KEY, loader, { clientOnly: true });
-
-    const element = await SectionRenderer({
-      resolved: { key: KEY, component: KEY, props: { label: "c" } } as any,
-    });
-    const html = renderToString(element);
-
-    // The actual contract: ClientOnlySection must call next/dynamic with
-    // { ssr: false } for this section's loader. This fails if the
-    // implementation is changed to pass { ssr: true } (or omits the option).
-    expect(dynamicSpy).toHaveBeenCalledWith(loader, { ssr: false });
-
-    // The section shell (wrapping <section> + manifest key) still renders
-    // server-side regardless of the dynamic child's ssr option.
-    expect(html).toContain(`data-manifest-key="${KEY}"`);
-  });
-
-  it("warns and renders nothing for an unregistered section", async () => {
-    const KEY = "site/sections/NextMissingA.tsx";
-    const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
-
-    const element = await SectionRenderer({
-      resolved: { key: KEY, component: KEY, props: {} } as any,
-    });
-
-    expect(element).toBeNull();
-    expect(warnSpy).toHaveBeenCalledWith(
-      expect.stringContaining(`No component registered for: ${KEY}`),
-    );
-
-    warnSpy.mockRestore();
-  });
-});

package/src/SectionRenderer.tsx

@@ -1,58 +0,0 @@
-import type { ResolvedSection } from "@decocms/blocks/cms";
-import { getSection, getSectionOptions, getSyncComponent } from "@decocms/blocks/cms";
-import { SectionErrorBoundary } from "@decocms/blocks/hooks";
-import { createElement, type ReactNode } from "react";
-import { ClientOnlySection } from "./ClientOnlySection";
-
-interface SectionRendererProps {
-  resolved: ResolvedSection;
-  errorFallback?: ReactNode;
-}
-
-/**
- * Renders one resolved section. Runs inside an async Server Component tree,
- * so code-split sections are loaded via a plain await — no client-side
- * React.lazy/Suspense needed for content in the initial response.
- */
-export async function SectionRenderer({ resolved, errorFallback }: SectionRendererProps) {
-  const sectionId = resolved.key
-    .replace(/\//g, "-")
-    .replace(/\.tsx$/, "")
-    .replace(/^site-sections-/, "");
-
-  const options = getSectionOptions(resolved.component);
-  const errFallback = options?.errorFallback
-    ? createElement(options.errorFallback, { error: new Error("") })
-    : errorFallback;
-
-  const isClientOnly = options?.clientOnly === true;
-  const SyncComp = getSyncComponent(resolved.component);
-  let content: ReactNode;
-
-  if (isClientOnly) {
-    const loader = getSection(resolved.component);
-    if (!loader) {
-      console.warn(`[SectionRenderer] No component registered for: ${resolved.component}`);
-      return null;
-    }
-    content = <ClientOnlySection loader={loader} props={resolved.props} />;
-  } else if (SyncComp) {
-    content = createElement(SyncComp, resolved.props);
-  } else {
-    const loader = getSection(resolved.component);
-    if (!loader) {
-      console.warn(`[SectionRenderer] No component registered for: ${resolved.component}`);
-      return null;
-    }
-    const mod = await loader();
-    content = createElement(mod.default, resolved.props);
-  }
-
-  return (
-    <section id={sectionId} data-manifest-key={resolved.key}>
-      <SectionErrorBoundary sectionKey={resolved.key} fallback={errFallback}>
-        {content}
-      </SectionErrorBoundary>
-    </section>
-  );
-}

package/src/config.cjs

@@ -1,92 +0,0 @@
-/**
- * next.config wrapper for Deco sites. CommonJS on purpose: next.config.js
- * is CJS in most sites and this package is "type": "module", so a .js
- * file here would be ESM and unrequireable on Node < 22.
- *
- * Adds:
- * 1. Rewrites for the Studio-protocol URLs Next cannot express as route
- *    segments — `/.decofile` (segments can't start with a dot) and
- *    `/live/_meta` (`_`-prefixed segments are Next "private folders",
- *    silently excluded from routing) — plus `/live/previews/*`, all
- *    funneled to `/deco/*` where a single catch-all route
- *    (`app/deco/[[...deco]]/route.ts` + createDecoRouteHandlers) serves
- *    the whole protocol.
- * 2. transpilePackages for the raw-TS @decocms packages.
- * 3. Response headers that keep a draft-preview render out of every cache.
- */
-const DECO_REWRITES = [
-  { source: "/.decofile", destination: "/deco/decofile" },
-  { source: "/live/_meta", destination: "/deco/meta" },
-  { source: "/live/previews/:path*", destination: "/deco/previews/:path*" },
-];
-
-const DECO_TRANSPILE = ["@decocms/blocks", "@decocms/blocks-admin", "@decocms/nextjs"];
-
-/**
- * A draft render must never be cached or indexed: with the pointer in a cookie
- * it shares a URL with the published page, so a shared cache keyed on URL alone
- * would serve unpublished content to a real visitor.
- *
- * Two rules, not one: `has` entries within a rule are ANDed, and the two
- * signals never coincide. On ENTRY the pointer is in the query and the cookie
- * has not been set yet (middleware sets it in the response); on every
- * navigation after that it is the cookie and the query is gone.
- *
- * MEASURED LIMIT — do not assume `no-store` is in force. On a *dynamic* App
- * Router response Next reserves `Cache-Control` and `Vary` and overwrites
- * whatever we set, from here AND from middleware: the wire shows
- * `Cache-Control: no-cache, must-revalidate` and
- * `Vary: rsc, next-router-state-tree, …`. Verified that these rules do match
- * (a marker header on the same rules came through on both signals and was
- * correctly absent otherwise) — it is those two header names specifically that
- * Next owns. `X-Robots-Tag` does get through.
- *
- * Why that is still safe: `no-cache` is not "don't cache", it is "never reuse
- * without revalidating with the origin", so a compliant shared cache cannot
- * serve a stored draft to a different visitor — it has to ask us first, and we
- * answer per-request. That also covers the loss of `Vary: Cookie`. The residual
- * risk is a cache that ignores `no-cache`; closing that needs a CDN-level rule,
- * which is a deployment concern rather than something this package can set.
- * `Cache-Control`/`Vary` are kept here so the intent is explicit and so they
- * apply anywhere Next is not overriding them.
- */
-const DRAFT_NO_STORE_HEADERS = [
-  { key: "Cache-Control", value: "no-store, private" },
-  { key: "Vary", value: "Cookie" },
-  { key: "X-Robots-Tag", value: "noindex, nofollow" },
-];
-
-const DECO_DRAFT_HEADERS = [
-  {
-    source: "/:path*",
-    has: [{ type: "query", key: "__draft" }],
-    headers: DRAFT_NO_STORE_HEADERS,
-  },
-  {
-    source: "/:path*",
-    has: [{ type: "cookie", key: "__deco_draft" }],
-    headers: DRAFT_NO_STORE_HEADERS,
-  },
-];
-
-function withDeco(nextConfig = {}) {
-  const userRewrites = nextConfig.rewrites;
-  const userHeaders = nextConfig.headers;
-  return {
-    ...nextConfig,
-    transpilePackages: [...new Set([...(nextConfig.transpilePackages ?? []), ...DECO_TRANSPILE])],
-    async rewrites() {
-      const user = typeof userRewrites === "function" ? await userRewrites() : (userRewrites ?? []);
-      if (Array.isArray(user)) return [...DECO_REWRITES, ...user];
-      return { ...user, beforeFiles: [...DECO_REWRITES, ...(user.beforeFiles ?? [])] };
-    },
-    async headers() {
-      const user = typeof userHeaders === "function" ? await userHeaders() : (userHeaders ?? []);
-      // Draft rules first: a site's own catch-all Cache-Control must not win
-      // over the one thing standing between a draft and a shared cache.
-      return [...DECO_DRAFT_HEADERS, ...user];
-    },
-  };
-}
-
-module.exports = { withDeco, DECO_REWRITES, DECO_DRAFT_HEADERS };

package/src/config.d.cts

@@ -1,4 +0,0 @@
-import type { NextConfig } from "next";
-
-export declare const DECO_REWRITES: Array<{ source: string; destination: string }>;
-export declare function withDeco(nextConfig?: NextConfig): NextConfig;

package/src/config.test.ts

@@ -1,86 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { DECO_REWRITES, withDeco } from "./config.cjs";
-
-// withDeco()'s declared return type is the standard (loosely typed) Next.js
-// NextConfig, whose `rewrites`/`transpilePackages` are optional and
-// union-typed. The runtime object always has them (withDeco always sets
-// them), so tests assert that with `!` / casts rather than loosening the
-// public declaration.
-describe("withDeco", () => {
-  it("adds rewrites and transpilePackages to a bare config", async () => {
-    const cfg = withDeco({});
-    expect(cfg.transpilePackages).toEqual(
-      expect.arrayContaining(["@decocms/blocks", "@decocms/blocks-admin", "@decocms/nextjs"]),
-    );
-    expect(await cfg.rewrites!()).toEqual(DECO_REWRITES);
-  });
-
-  it("prepends deco rewrites to a user's array-returning rewrites()", async () => {
-    const cfg = withDeco({
-      rewrites: async () => [{ source: "/a", destination: "/b" }],
-    });
-    const out = (await cfg.rewrites!()) as Array<{ source: string; destination: string }>;
-    expect(out.slice(0, DECO_REWRITES.length)).toEqual(DECO_REWRITES);
-    expect(out.at(-1)).toEqual({ source: "/a", destination: "/b" });
-  });
-
-  it("merges into a user's object-form rewrites via beforeFiles", async () => {
-    const cfg = withDeco({
-      rewrites: async () => ({
-        beforeFiles: [{ source: "/x", destination: "/y" }],
-        afterFiles: [],
-        fallback: [],
-      }),
-    });
-    const out = (await cfg.rewrites!()) as {
-      beforeFiles: Array<{ source: string; destination: string }>;
-    };
-    expect(out.beforeFiles.slice(0, DECO_REWRITES.length)).toEqual(DECO_REWRITES);
-    expect(out.beforeFiles.at(-1)).toEqual({ source: "/x", destination: "/y" });
-  });
-
-  it("dedupes transpilePackages", () => {
-    const cfg = withDeco({ transpilePackages: ["@decocms/blocks", "other"] });
-    expect(cfg.transpilePackages!.filter((p: string) => p === "@decocms/blocks")).toHaveLength(1);
-    expect(cfg.transpilePackages).toContain("other");
-  });
-});
-
-describe("withDeco draft headers", () => {
-  it("adds no-store/no-index rules for both draft signals", async () => {
-    const headers = await withDeco({}).headers!();
-    // Two rules, not one: `has` entries within a rule are ANDed, and the query
-    // (entry) and cookie (navigation) signals never coincide.
-    expect(headers).toHaveLength(2);
-    expect(headers[0].has).toEqual([{ type: "query", key: "__draft" }]);
-    expect(headers[1].has).toEqual([{ type: "cookie", key: "__deco_draft" }]);
-
-    for (const rule of headers) {
-      const byKey = Object.fromEntries(rule.headers.map((h) => [h.key, h.value]));
-      // `no-store` is what actually stops a shared cache serving unpublished
-      // content to a real visitor — the pointer being a cookie means draft and
-      // published share a URL.
-      expect(byKey["Cache-Control"]).toBe("no-store, private");
-      expect(byKey.Vary).toBe("Cookie");
-      expect(byKey["X-Robots-Tag"]).toBe("noindex, nofollow");
-    }
-  });
-
-  it("keeps a site's own headers, with the draft rules taking precedence", async () => {
-    const cfg = withDeco({
-      headers: async () => [
-        { source: "/:path*", headers: [{ key: "Cache-Control", value: "public, max-age=3600" }] },
-      ],
-    });
-    const headers = await cfg.headers!();
-    expect(headers).toHaveLength(3);
-    // A site's catch-all cache policy must not out-rank the draft rules.
-    expect(headers[0].has).toBeDefined();
-    expect(headers[1].has).toBeDefined();
-    expect(headers[2].headers[0].value).toBe("public, max-age=3600");
-  });
-
-  it("leaves a site without headers() untouched apart from the draft rules", async () => {
-    expect(await withDeco({}).headers!()).toHaveLength(2);
-  });
-});