@salesforce/retail-react-app 10.2.0-nightly-20260812155833 → 10.2.0

package/CHANGELOG.md

@@ -1,7 +1,4 @@
-## v10.2.0-dev (Jul 13, 2026)
-- [Feature] Forward two backend-gating signals on the Commerce Client shopper-agent widget's `routingAttributes`: `clientVersion` (sourced from `cc_cdnVersion`, so the runtime can gate rich components on the client's capability version; omitted when unset) and `isCartMgmtSupported` (string `'true'`/`'false'`, default `'false'`, read from `cc_routingAttributes`). Brings the PWA commerce-client path to parity with the SFRA cartridge.
-- [Feature] Enable shopper identity (customer context) for the Commerce Client (Cimulate) shopper-agent provider. Unlike MIAW, Commerce Client widgets do not expose `getAuthLinkKey`, so the browser extracts the Commerce Client JWT from the deployment-scoped `cim_af_ct_<orgId>_<embeddedServiceName>` key (`sessionStorage` is authoritative; `localStorage` is a compatibility fallback) and POSTs it to a new same-origin proxy `POST /api/agent/authlink` (`registerAuthLinkRoute`, mounted in `app/ssr.js`). The proxy calls SCRT2's `/iamessage/api/v2/authorization/authlink` with an `Authorization: Bearer <jwt>` header to obtain an `auth_link_key`; the SCRT2 origin is read server-side from `scrt2Url` in `COMMERCE_AGENT_SETTINGS` (a different host from Core's My Domain) and validated against a Salesforce domain allowlist, with an Origin/Referer CSRF check, to prevent SSRF. The `auth_link_key` is then forwarded to the existing Token Bridge to bind the conversation to the shopper's SLAS session. Linking is idempotent — deduped by `conversationId` + SLAS identity — and re-runs both on a new conversation (`onCimulateWidgetReady`) and on a SLAS identity transition (guest ↔ registered / account switch), gated on `my_domain` resolution. [#3943](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3943)
-- [Bugfix] Fix the Shopper Agent Token Bridge proxy (`/api/agent/identity/bridge`) failing to reach Core in two cases: (1) same-origin POSTs were rejected with 403 `FORBIDDEN_ORIGIN` because the CSRF Origin check compared `URL.hostname` (no port) against `req.headers.host` (with port), so a non-standard dev port like `localhost:3000` never matched — now compares `URL.host`; (2) a scheme-less My Domain value (e.g. `orgfarm-1234.my.salesforce.com`) was rejected as 400 `UNTRUSTED_MYDOMAIN` because `new URL()` threw on it — the value is now normalized to an absolute `https://` origin before validation and fetch. The `AGENT_MYDOMAIN` environment variable configures the My Domain.
+## v10.2.0 (Aug 12, 2026)
 - [Bugfix] Fix the Data Cloud recommender catalog event field name: `personalizationContextId` → `personalizationContentId`. The official `@salesforce/cc-datacloud-typescript` SDK type and Salesforce docs both define `personalizationContentId` (Content); the `Context` spelling did not match, so the recommender UUID (`__recoUUID`) was sent under a key Data Cloud does not recognize and is expected to be dropped on ingest.
 - [Feature] Add `cc_showFab` for the Commerce Client shopper-agent widget: when `'true'`, renders a floating action button at `cc_widgetPosition` that opens the agent panel and hides while it is open. Defaults to `'false'`.
 - [Bugfix] Honor `cc_dialogFullHeight: 'false'`, which was previously dropped from the widget options so the bundle's full-height default always won.

package/app/components/shopper-agent/index.jsx

@@ -31,14 +31,12 @@ import {
     getPersistedCommerceClientOpenState,
     persistCommerceClientOpenState,
     resetEmbeddedMessagingForCommerceSessionChange,
-    resolveCommerceClientRoutingAttributes,
     resolveCommerceClientScriptUrl,
     validateCommerceClientAgentSettings
 } from '@salesforce/retail-react-app/app/utils/shopper-agent-utils'
 import {resolveCommerceClientOverrideOptions} from '@salesforce/retail-react-app/app/utils/commerce-client-overrides'
 import {callTokenBridge} from '@salesforce/retail-react-app/app/components/shopper-agent/token-bridge'
 import CommerceClientFab from '@salesforce/retail-react-app/app/components/shopper-agent/commerce-client-fab'
-import {callAuthLinkProxy} from '@salesforce/retail-react-app/app/components/shopper-agent/auth-link-proxy'
 
 const onClient = typeof window !== 'undefined'
 
@@ -209,7 +207,6 @@ const ShopperAgentWindow = ({commerceAgentConfiguration, domainUrl}) => {
         salesforceOrgId,
         commerceOrgId,
         siteId,
-        provider = 'miaw',
         enableConversationContext = 'false',
         conversationContext = [],
         enableAgentFromFloatingButton = 'true'
@@ -236,12 +233,6 @@ const ShopperAgentWindow = ({commerceAgentConfiguration, domainUrl}) => {
     /**
      * Reset embedded messaging whenever customerType changes (login, logout, registration).
      * This ensures the chat context is cleared when user authentication state changes.
-     *
-     * MIAW-only: resetEmbeddedMessagingForCommerceSessionChange() drives
-     * window.embeddedservice_bootstrap.userVerificationAPI.clearSession, which
-     * exists only for the Salesforce Embedded Messaging (MIAW) provider. The
-     * Commerce Client provider re-links its conversation in place instead of
-     * clearing the session, so we no-op here for any non-MIAW provider.
      */
     useEffect(() => {
         const prev = prevCommerceCustomerTypeRef.current
@@ -252,11 +243,11 @@ const ShopperAgentWindow = ({commerceAgentConfiguration, domainUrl}) => {
             return
         }
 
-        // Reset on any customerType change (login, logout, register) — MIAW only.
-        if (prev !== customerType && provider === 'miaw') {
+        // Reset on any customerType change (login, logout, register)
+        if (prev !== customerType) {
             resetEmbeddedMessagingForCommerceSessionChange()
         }
-    }, [customerType, provider])
+    }, [customerType])
 
     const formatMessageRef = useRef(formatMessage)
     formatMessageRef.current = formatMessage
@@ -596,11 +587,6 @@ const DEFAULT_COMMERCE_CLIENT_PANEL_WIDTH = '420px'
  *
  * @param {Object} props - Component props
  * @param {Object} props.commerceAgentConfiguration - Commerce agent configuration object
- * @param {Object} props.lastAuthLinkKeyRef - Last successful conversation/shopper link key
- * @param {Object} props.lastCommerceClientJWTRef - Last successfully linked Commerce Client JWT
- * @param {Object} props.authLinkGenerationRef - Monotonic auth-link attempt generation
- * @param {Object} props.authLinkQueueRef - Serialized auth-link operation queue
- * @param {Object} props.lastAttemptedCommerceClientJWTRef - JWT used by the latest auth-link attempt
  * @param {string} props.commerceAgentConfiguration.scrt2Url - SCRT2 URL (passed to `messagingConfig.scrt2Url`)
  * @param {string} props.commerceAgentConfiguration.salesforceOrgId - Salesforce org ID (passed to `messagingConfig.orgId`)
  * @param {string} [props.commerceAgentConfiguration.cc_esDeveloperName] - Embedded Service developer name
@@ -623,19 +609,12 @@ const DEFAULT_COMMERCE_CLIENT_PANEL_WIDTH = '420px'
  * @param {string} [props.commerceAgentConfiguration.cc_isOpen] - When 'true', the widget opens automatically on page load (forwarded as `componentConfig.isOpen`); defaults to 'false'
  * @param {string} [props.commerceAgentConfiguration.cc_isDevelopment] - When 'true', logs widget events to the console (forwarded as `isDevelopment`)
  * @param {Object} [props.commerceAgentConfiguration.cc_theme] - Partial theme overrides for the widget
- * @param {Object} [props.commerceAgentConfiguration.cc_routingAttributes] - Optional Agentforce routing attributes forwarded to the widget as `routingAttributes`. Augmented with `isCartMgmtSupported` (string `'true'`/`'false'`, default `'false'`) and, unless a `commerceClientScriptSourceUrl` override is set, `clientVersion` (from `cc_cdnVersion`) for backend component gating
+ * @param {Object} [props.commerceAgentConfiguration.cc_routingAttributes] - Optional Agentforce routing attributes forwarded to the widget as `routingAttributes`
  * @param {string} [props.commerceAgentConfiguration.cc_overridesUrl] - Optional HTTPS URL of a component override script, forwarded as `overridesUrl`
  * @param {Object} [props.commerceAgentConfiguration.cc_overrides] - Optional inline map of widget override keys (e.g. `ProductTile`) to already-registered custom element tag names, forwarded as `overrides`. Mutually exclusive with `cc_overridesUrl`, which it takes precedence over
  * @returns {JSX.Element} A container element the Commerce Client widget is rendered into
  */
-const CommerceClientAgentWindow = ({
-    commerceAgentConfiguration,
-    lastAuthLinkKeyRef,
-    lastCommerceClientJWTRef,
-    authLinkGenerationRef,
-    authLinkQueueRef,
-    lastAttemptedCommerceClientJWTRef
-}) => {
+const CommerceClientAgentWindow = ({commerceAgentConfiguration}) => {
     const {
         scrt2Url,
         salesforceOrgId,
@@ -657,8 +636,6 @@ const CommerceClientAgentWindow = ({
         cc_enableDownloadTranscript = 'true',
         cc_theme,
         cc_searchConfig,
-        cc_cdnVersion,
-        commerceClientScriptSourceUrl,
         cc_routingAttributes,
         cc_overridesUrl,
         cc_overrides
@@ -666,319 +643,6 @@ const CommerceClientAgentWindow = ({
 
     // Loads the Commerce Client messaging UMD bundle, which exposes window.CimulateMessaging.
     const scriptLoadStatus = useScript(resolveCommerceClientScriptUrl(commerceAgentConfiguration))
-    const {formatMessage} = useIntl()
-    const toast = useToast()
-    const toastRef = useRef(toast)
-    toastRef.current = toast
-
-    // Customer details and auth tokens for Commerce Client session init
-    const {getTokenWhenReady} = useAccessToken()
-    const getTokenWhenReadyRef = useRef(getTokenWhenReady)
-    getTokenWhenReadyRef.current = getTokenWhenReady
-
-    const {organizationId, siteId: configSiteId} = useConfig()
-
-    // Fetch my_domain from the Shopper Configurations API. Auth-linking calls
-    // Core (via the Token Bridge), which is only reachable once my_domain has
-    // resolved, so we gate performAuthLink on it exactly like the MIAW provider.
-    const {data: configurationsData} = useConfigurations({})
-    const myDomain = configurationsData?.configurations?.find(
-        (config) => config.configurationType === 'globalConfiguration' && config.id === 'my_domain'
-    )?.value
-
-    const configRef = useRef({organizationId, configSiteId, myDomain})
-    configRef.current = {organizationId, configSiteId, myDomain}
-
-    const formatMessageRef = useRef(formatMessage)
-    formatMessageRef.current = formatMessage
-
-    // --- Auth-link triggers ---
-    // The SLAS shopper identity. Auth-linking binds the Commerce Client
-    // conversation to THIS shopper, so a change on either side (new
-    // conversation, or guest<->registered / account switch) must re-link.
-    const {usid} = useUsid()
-    const {customerType} = useCustomerType()
-
-    // Latest identity values, read from a ref so the (stable, mount-once)
-    // window listeners always see current values without re-subscribing.
-    const identityRef = useRef({usid, customerType})
-    identityRef.current = {usid, customerType}
-
-    const commerceClientStorageScope = `${salesforceOrgId}_${
-        cc_esDeveloperName || embeddedServiceName
-    }`
-    const commerceClientTokenKey = `cim_af_ct_${commerceClientStorageScope}`
-    const commerceClientConversationKey = `cim_af_conv_${commerceClientStorageScope}`
-    const isCommerceClientReady =
-        !scriptLoadStatus?.error &&
-        (scriptLoadStatus?.loaded || (onClient && Boolean(window.CimulateMessaging)))
-    const effectiveScriptLoadStatus = useMemo(
-        () => ({loaded: isCommerceClientReady, error: Boolean(scriptLoadStatus?.error)}),
-        [isCommerceClientReady, scriptLoadStatus?.error]
-    )
-
-    // The helpers below feed the two re-link triggers (new conversation, SLAS
-    // identity change), which both route through the idempotent performAuthLink().
-
-    /**
-     * Resolve a stable identifier for the current SLAS shopper. Guests share
-     * the sentinel "guest" so a guest re-open does not look like a new identity,
-     * while a login/logout/account-switch produces a different value.
-     */
-    const getSlasIdentity = () => {
-        const {usid: currentUsid, customerType: currentType} = identityRef.current
-        if (currentType === 'registered') {
-            return `registered:${currentUsid || ''}`
-        }
-        return 'guest'
-    }
-
-    /**
-     * Read the Commerce Client conversationId from this widget's scoped session
-     * key (value shape: {"conversationId":"...","storedAt":...}). Returns null
-     * if not present yet (e.g. conversation still being created).
-     */
-    const readConversationId = () => {
-        try {
-            const value = window.sessionStorage.getItem(commerceClientConversationKey)
-            return value ? JSON.parse(value)?.conversationId || null : null
-        } catch (err) {
-            console.error('[Commerce Client] Failed to read conversationId', err)
-            return null
-        }
-    }
-
-    /**
-     * Extract this widget's Commerce Client JWT from its scoped cim_af_ct_* key.
-     * The session-scoped value is authoritative; localStorage is a compatibility
-     * fallback for SDK versions that persist the same scoped key there.
-     */
-    const extractCommerceClientJWT = (excludedJWT = null) => {
-        const stores = [window.sessionStorage, window.localStorage]
-        for (const store of stores) {
-            try {
-                const data = JSON.parse(store.getItem(commerceClientTokenKey) || 'null')
-                const accessToken = data?.accessToken
-                if (typeof accessToken === 'string' && accessToken.trim().length > 0) {
-                    return accessToken !== excludedJWT ? accessToken : null
-                }
-            } catch (err) {
-                console.error('[Commerce Client] Failed to parse storage for JWT', err)
-            }
-        }
-        return null
-    }
-
-    /**
-     * Poll storage for the Commerce Client JWT with capped exponential backoff.
-     * The SDK stores the JWT asynchronously after a conversation is created, so
-     * on the `onCimulateWidgetReady` signal the token may not exist yet.
-     *
-     * The per-attempt delay is capped (`maxDelay`) and we do NOT sleep after the
-     * final check, so the worst-case wait is bounded (~4.5s with the defaults)
-     * rather than growing unbounded with the retry count. The token normally
-     * lands within the first second; the cap only affects the give-up path.
-     */
-    const waitForCommerceClientJWT = async (
-        excludedJWT = null,
-        maxRetries = 8,
-        initialDelay = 100,
-        maxDelay = 1000
-    ) => {
-        for (let attempt = 0; attempt < maxRetries; attempt++) {
-            const jwt = extractCommerceClientJWT(excludedJWT)
-            if (jwt) return jwt
-            // No point sleeping after the last check — nothing reads the result.
-            if (attempt === maxRetries - 1) break
-            const delay = Math.min(maxDelay, initialDelay * Math.pow(2, attempt))
-            await new Promise((resolve) => setTimeout(resolve, delay))
-        }
-        return null
-    }
-
-    /**
-     * Idempotently link the current Commerce Client conversation to the current
-     * SLAS shopper. Deduped by `${conversationId}:${slasIdentity}` — a no-op if
-     * that exact pair was already linked successfully.
-     *
-     * @param {Object} opts
-     * @param {string} opts.reason - Diagnostic label for the triggering signal.
-     */
-    const performAuthLink = ({reason, excludedJWT = null}) => {
-        const generation = ++authLinkGenerationRef.current
-        const scheduledJWT = extractCommerceClientJWT()
-        if (scheduledJWT) {
-            lastAttemptedCommerceClientJWTRef.current = scheduledJWT
-        }
-        const run = async () => {
-            const {organizationId: orgId, configSiteId: sid, myDomain: domain} = configRef.current
-            if (!orgId || !sid) {
-                console.error('[Commerce Client] performAuthLink: missing organizationId or siteId')
-                return
-            }
-
-            // The Token Bridge reaches Core, which needs my_domain resolved. The mount
-            // is already gated on !isConfigurationsLoading, so this is a defensive skip
-            // rather than a call to the bridge with an unresolved domain.
-            if (!domain) {
-                console.warn(
-                    `[Commerce Client] performAuthLink(${reason}): my_domain not resolved yet`
-                )
-                return
-            }
-
-            const slasIdentity = getSlasIdentity()
-
-            try {
-                const commerceClientJWT = await waitForCommerceClientJWT(excludedJWT)
-                if (!commerceClientJWT) {
-                    console.warn(
-                        `[Commerce Client] performAuthLink(${reason}): no JWT after polling`
-                    )
-                    return
-                }
-                lastAttemptedCommerceClientJWTRef.current = commerceClientJWT
-                if (generation !== authLinkGenerationRef.current) return
-
-                // Dedup on (conversation, shopper). conversationId is read here — after
-                // the JWT poll — so a still-creating conversation has time to appear.
-                // A new-conversation trigger waits for a different JWT before reaching
-                // this guard, so it can bypass a still-stale conversationId safely.
-                const conversationId = readConversationId()
-                const linkKey = `${conversationId || 'unknown'}:${slasIdentity}`
-                if (!excludedJWT && lastAuthLinkKeyRef.current === linkKey) {
-                    // Already linked this exact (conversation, shopper) pair.
-                    console.warn(
-                        `[Commerce Client] performAuthLink(${reason}): already linked, skipping`
-                    )
-                    return
-                }
-
-                const isHttpOnly =
-                    typeof window !== 'undefined'
-                        ? window.__MRT_ENABLE_HTTPONLY_SESSION_COOKIES__ === 'true'
-                        : process.env.MRT_ENABLE_HTTPONLY_SESSION_COOKIES === 'true'
-
-                const slasAccessToken = isHttpOnly
-                    ? undefined
-                    : await getTokenWhenReadyRef.current()
-                if (generation !== authLinkGenerationRef.current) return
-
-                // Step 1: auth link key from SCRT. The SCRT authlink endpoint
-                // authenticates with the Commerce Client JWT (Bearer) alone — it
-                // needs neither the siteId nor the conversationId.
-                const authLinkResponse = await callAuthLinkProxy({commerceClientJWT})
-                if (generation !== authLinkGenerationRef.current) return
-                const authLinkKey = authLinkResponse?.auth_link_key || authLinkResponse?.authLinkKey
-                if (!authLinkKey || typeof authLinkKey !== 'string') {
-                    console.error(
-                        `[Commerce Client] performAuthLink(${reason}): no auth link key`,
-                        authLinkResponse
-                    )
-                    return
-                }
-
-                // Step 2: token bridge (links conversation to the SLAS shopper).
-                // Operations are serialized so the newest identity is the final
-                // server-side mutation even when an older request was already sent.
-                const result = await callTokenBridge({authLinkKey, slasAccessToken, siteId: sid})
-                if (generation !== authLinkGenerationRef.current) return
-                if (result.status !== HTTP_OK) {
-                    const errorCode = result.body?.error || `HTTP_${result.status}`
-                    console.error(
-                        `[Commerce Client] performAuthLink(${reason}): token bridge failed`,
-                        {
-                            status: result.status,
-                            error: errorCode
-                        }
-                    )
-                    toastRef.current({
-                        title: formatMessageRef.current(SESSION_INIT_ERROR_MESSAGE),
-                        status: 'error'
-                    })
-                    return
-                }
-
-                lastAuthLinkKeyRef.current = linkKey
-                lastCommerceClientJWTRef.current = commerceClientJWT
-            } catch (error) {
-                if (generation !== authLinkGenerationRef.current) return
-                console.error(`[Commerce Client] performAuthLink(${reason}) threw`, error)
-                toastRef.current({
-                    title: formatMessageRef.current(SESSION_INIT_ERROR_MESSAGE),
-                    status: 'error'
-                })
-            }
-        }
-
-        const queued = authLinkQueueRef.current.then(run, run)
-        authLinkQueueRef.current = queued
-        return queued
-    }
-
-    // Keep a stable ref so window listeners registered once always call the
-    // latest performAuthLink closure (which reads current config/identity).
-    const performAuthLinkRef = useRef(performAuthLink)
-    performAuthLinkRef.current = performAuthLink
-
-    /**
-     * Trigger 1 — new Commerce Client conversation.
-     * `onCimulateWidgetReady` is a cancelable handshake the widget dispatches
-     * ONLY when it creates a NEW conversation (not on sessionStorage resume).
-     * We use it purely as the "new conversation identity" signal and run the
-     * link asynchronously — we do NOT call preventDefault()/done() here, so the
-     * widget proceeds immediately; the JWT poll in performAuthLink waits for the
-     * new conversation's token to land.
-     */
-    useEffect(() => {
-        if (!isCommerceClientReady) {
-            return
-        }
-        const handleWidgetReady = () => {
-            // Clear-chat can dispatch this event before storage rotates. Wait for
-            // the new token rather than authenticating the previous conversation.
-            const excludedJWT =
-                lastAttemptedCommerceClientJWTRef.current || lastCommerceClientJWTRef.current
-            performAuthLinkRef.current({
-                reason: 'widget-ready',
-                excludedJWT: excludedJWT || null
-            })
-        }
-        window.addEventListener('onCimulateWidgetReady', handleWidgetReady)
-        return () => {
-            window.removeEventListener('onCimulateWidgetReady', handleWidgetReady)
-        }
-    }, [isCommerceClientReady])
-
-    /**
-     * Trigger 2 — SLAS shopper identity transition.
-     * Login, logout, registration and account switch all rotate the SLAS token
-     * (reflected here as a change in customerType/usid). The conversation is
-     * unchanged but is now linked to the wrong (or anonymous) shopper, so we
-     * re-link. Skips the initial mount; the composite dedup key in
-     * performAuthLink prevents a redundant link if nothing effectively changed.
-     */
-    const prevSlasIdentityRef = useRef(undefined)
-    useEffect(() => {
-        if (!isCommerceClientReady) {
-            return
-        }
-        const identity = getSlasIdentity()
-        const prev = prevSlasIdentityRef.current
-        prevSlasIdentityRef.current = identity
-
-        // A resumed conversation does not emit widget-ready, so link it here.
-        // A genuine cold start still waits for the widget-ready trigger.
-        if (prev === undefined) {
-            if (readConversationId()) {
-                performAuthLinkRef.current({reason: 'resumed-conversation'})
-            }
-            return
-        }
-        if (prev !== identity) {
-            performAuthLinkRef.current({reason: 'slas-identity-change'})
-        }
-    }, [customerType, usid, isCommerceClientReady])
 
     const isDialog = cc_displayType === 'dialog'
     const isFullHeight = isDialog && cc_dialogFullHeight === 'true'
@@ -1016,11 +680,7 @@ const CommerceClientAgentWindow = ({
             capabilitiesVersion: cc_capabilitiesVersion,
             enableEscalationToAgent: cc_enableEscalationToAgent !== 'false',
             enableDownloadTranscript: cc_enableDownloadTranscript !== 'false',
-            routingAttributes: resolveCommerceClientRoutingAttributes({
-                cc_routingAttributes,
-                cc_cdnVersion,
-                commerceClientScriptSourceUrl
-            }),
+            routingAttributes: cc_routingAttributes,
             logoUrl: cc_logoUrl,
             headerText: cc_headerText,
             disclaimerMarkdown: cc_disclaimerMarkdown,
@@ -1051,8 +711,6 @@ const CommerceClientAgentWindow = ({
             cc_enableEscalationToAgent,
             cc_enableDownloadTranscript,
             cc_routingAttributes,
-            cc_cdnVersion,
-            commerceClientScriptSourceUrl,
             cc_logoUrl,
             cc_headerText,
             cc_disclaimerMarkdown,
@@ -1071,7 +729,7 @@ const CommerceClientAgentWindow = ({
     )
 
     // Inject the widget into the container once the bundle is loaded
-    useCommerceClientMessaging(effectiveScriptLoadStatus, widgetOptions)
+    useCommerceClientMessaging(scriptLoadStatus, widgetOptions)
 
     return (
         <>
@@ -1094,12 +752,7 @@ CommerceClientAgentWindow.propTypes = {
      * @type {Object}
      * @required
      */
-    commerceAgentConfiguration: PropTypes.object.isRequired,
-    lastAuthLinkKeyRef: PropTypes.shape({current: PropTypes.string}).isRequired,
-    lastCommerceClientJWTRef: PropTypes.shape({current: PropTypes.string}).isRequired,
-    authLinkGenerationRef: PropTypes.shape({current: PropTypes.number}).isRequired,
-    authLinkQueueRef: PropTypes.shape({current: PropTypes.object}).isRequired,
-    lastAttemptedCommerceClientJWTRef: PropTypes.shape({current: PropTypes.string}).isRequired
+    commerceAgentConfiguration: PropTypes.object.isRequired
 }
 
 /**
@@ -1135,14 +788,6 @@ CommerceClientAgentWindow.propTypes = {
  * @see {@link isEnabled} - Enabled state checker
  */
 const ShopperAgent = ({commerceAgentConfiguration, basketDoneLoading}) => {
-    // Preserve successful-link state while the inner widget unmounts during a
-    // basket refresh so a same-identity remount stays deduped and login re-links.
-    const lastAuthLinkKeyRef = useRef(null)
-    const lastCommerceClientJWTRef = useRef(null)
-    const authLinkGenerationRef = useRef(0)
-    const authLinkQueueRef = useRef(Promise.resolve())
-    const lastAttemptedCommerceClientJWTRef = useRef(null)
-
     // Extract enabled state and provider from configuration.
     // `provider` defaults to 'miaw' to preserve backwards compatibility with the
     // existing Salesforce Embedded Messaging (MIAW) integration.
@@ -1172,11 +817,6 @@ const ShopperAgent = ({commerceAgentConfiguration, basketDoneLoading}) => {
             <div data-testid="shopper-agent">
                 <CommerceClientAgentWindow
                     commerceAgentConfiguration={commerceAgentConfiguration}
-                    lastAuthLinkKeyRef={lastAuthLinkKeyRef}
-                    lastCommerceClientJWTRef={lastCommerceClientJWTRef}
-                    authLinkGenerationRef={authLinkGenerationRef}
-                    authLinkQueueRef={authLinkQueueRef}
-                    lastAttemptedCommerceClientJWTRef={lastAttemptedCommerceClientJWTRef}
                 />
             </div>
         ) : null