rivet-design 0.14.13 → 0.14.15

package/dist/server.js

@@ -36,7 +36,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.startServer = exports.runServerShutdownTasks = exports.isRivetCorsOriginAllowed = exports.isRivetUiStaticAssetPath = exports.isEmbeddedAgentUiHost = exports.resolveEmbeddedAgentPreviewOrigin = exports.resolveEmbeddedAgentUiOrigin = exports.resolveRivetListenHost = exports.sendInactiveVariantsEventStream = exports.readRivetUiIndexHtml = exports.isHostedRootApiPath = exports.isDemoAuthExemptApiPath = exports.injectRivetUiBootstrap = exports.DIST_UI_PATH = exports.RIVET_CORS_ALLOWED_HEADERS = exports.INACTIVE_VARIANTS_EVENT_HEARTBEAT_MS = void 0;
+exports.startServer = exports.runServerShutdownTasks = exports.isRivetCorsOriginAllowed = exports.isRivetUiStaticAssetPath = exports.isEmbeddedAgentUiHost = exports.resolveEmbeddedAgentPreviewOrigin = exports.resolveEmbeddedAgentUiOrigin = exports.resolveRivetListenHost = exports.sendInactiveVariantsEventStream = exports.readRivetUiIndexHtml = exports.injectRivetUiBootstrap = exports.DIST_UI_PATH = exports.RIVET_CORS_ALLOWED_HEADERS = exports.INACTIVE_VARIANTS_EVENT_HEARTBEAT_MS = void 0;
 const Sentry = __importStar(require("@sentry/node"));
 const express_1 = __importDefault(require("express"));
 const cors_1 = __importDefault(require("cors"));
@@ -54,7 +54,6 @@ const proxy_config_1 = require("./proxy-middleware/proxy-config");
 const StaticFileService_1 = require("./services/StaticFileService");
 const static_1 = require("./routes/static");
 const ConfigManager_1 = require("./services/ConfigManager");
-const accessTokenRefresh_1 = require("./services/accessTokenRefresh");
 const evaluateFlags_1 = require("./config/evaluateFlags");
 const FeatureFlagService_1 = require("./services/FeatureFlagService");
 const DesktopVersionPolicyService_1 = require("./services/DesktopVersionPolicyService");
@@ -67,14 +66,6 @@ const serverHandshake_1 = require("./cli/serverHandshake");
 const telemetry_1 = require("./config/telemetry");
 const HistoryReplayService_1 = require("./services/HistoryReplayService");
 const VariantHistoryService_1 = require("./services/VariantHistoryService");
-const demo_1 = require("./routes/demo");
-const HostedDemoSessionService_1 = require("./services/HostedDemoSessionService");
-const HostedDemoSessionStore_1 = require("./services/HostedDemoSessionStore");
-const http_proxy_middleware_1 = require("http-proxy-middleware");
-const HostedDemoAuthSessionService_1 = require("./services/HostedDemoAuthSessionService");
-const HostedDemoAuthSessionStore_1 = require("./services/HostedDemoAuthSessionStore");
-const shouldRecordHostedDemoSessionAction_1 = require("./utils/shouldRecordHostedDemoSessionAction");
-const hostedDemoSessionAuthRefresh_1 = require("./services/hostedDemoSessionAuthRefresh");
 const RequestAuthContext_1 = require("./services/RequestAuthContext");
 const log = (0, index_core_1.createLogger)('RivetServer');
 const QUEUE_ACCESS_TOKEN_BYTES = 32;
@@ -138,33 +129,6 @@ const injectRivetUiBootstrap = (html, bootstrap) => {
     return `${script}${html}`;
 };
 exports.injectRivetUiBootstrap = injectRivetUiBootstrap;
-const isDemoAuthExemptApiPath = (pathName) => {
-    if (pathName === '/config' ||
-        pathName === '/feature-flags' ||
-        pathName === '/health' ||
-        pathName === '/auth/store') {
-        return true;
-    }
-    if (pathName === '/demo/session' || pathName.startsWith('/demo/session/')) {
-        return true;
-    }
-    return false;
-};
-exports.isDemoAuthExemptApiPath = isDemoAuthExemptApiPath;
-const isHostedRootApiPath = (pathName) => {
-    if (pathName === '/config' ||
-        pathName === '/feature-flags' ||
-        pathName === '/health' ||
-        pathName === '/auth/store' ||
-        pathName === '/support') {
-        return true;
-    }
-    if (pathName === '/demo/session' || pathName.startsWith('/demo/session/')) {
-        return true;
-    }
-    return false;
-};
-exports.isHostedRootApiPath = isHostedRootApiPath;
 /**
  * Reads the Rivet UI entry document that references the active built assets.
  */
@@ -284,9 +248,7 @@ const startServer = async (options) => {
     const userPortWithFallback = userPort ?? _1.DEFAULT_USER_PORT;
     const userHostWithFallback = userHost ?? 'localhost';
     const hasUserDevServer = typeof userPort === 'number' && Number.isInteger(userPort) && userPort > 0;
-    const isDemoModeEnabled = options.demoMode?.enabled ?? false;
-    const requiresDemoAuth = options.demoMode?.requireSignedInUsers ?? true;
-    const isGitEnabled = options.isGitEnabled ?? !isDemoModeEnabled;
+    const isGitEnabled = options.isGitEnabled ?? true;
     const queueAccessToken = sessionBridge && agentApplyMode === 'embedded'
         ? (0, crypto_1.randomBytes)(QUEUE_ACCESS_TOKEN_BYTES).toString('base64url')
         : null;
@@ -336,9 +298,7 @@ const startServer = async (options) => {
         const shutdownAndExit = async (code) => {
             log.info('Server shutting down, cleaning up...');
             (0, WorktreeManager_1.cleanupOrphanedWorktrees)();
-            if (!isDemoModeEnabled) {
-                (0, serverHandshake_1.removeHandshake)(projectPath, process.pid);
-            }
+            (0, serverHandshake_1.removeHandshake)(projectPath, process.pid);
             const results = await Promise.allSettled([
                 options.beforeShutdown?.(),
                 telemetry?.shutdown(),
@@ -386,10 +346,6 @@ const startServer = async (options) => {
             .filter((origin) => origin.length > 0)
             .forEach((origin) => corsOrigins.add(origin));
     }
-    if (isDemoModeEnabled) {
-        corsOrigins.add('https://rivet.design');
-        corsOrigins.add('https://demo.rivet.design');
-    }
     // CORS configuration for local development
     app.use((req, res, next) => {
         (0, cors_1.default)({
@@ -429,13 +385,7 @@ const startServer = async (options) => {
         });
     }
     const jsonBodyParser = express_1.default.json({ limit: '50mb' });
-    app.use((req, res, next) => {
-        if (req.originalUrl.startsWith('/try/')) {
-            next();
-            return;
-        }
-        jsonBodyParser(req, res, next);
-    });
+    app.use(jsonBodyParser);
     // Request logging middleware
     app.use((req, res, next) => {
         log.debug(`${req.method} ${req.originalUrl}`);
@@ -480,7 +430,7 @@ const startServer = async (options) => {
     // Serve hashed UI assets from root so both / and /rivet entrypoints can load them.
     app.use('/assets', express_1.default.static(path_1.default.join(exports.DIST_UI_PATH, 'assets'), uiStaticOptions));
     app.use('/rivet/assets', express_1.default.static(path_1.default.join(exports.DIST_UI_PATH, 'assets'), uiStaticOptions));
-    // Serve public font files used by auth and hosted demo UI.
+    // Serve public font files used by the auth UI.
     app.use('/fonts', express_1.default.static(path_1.default.join(exports.DIST_UI_PATH, 'fonts'), uiStaticOptions));
     app.use('/rivet/fonts', express_1.default.static(path_1.default.join(exports.DIST_UI_PATH, 'fonts'), uiStaticOptions));
     // Serve favicon at root for hosted/static deployments.
@@ -491,7 +441,7 @@ const startServer = async (options) => {
         res.sendFile('favicon.ico', { root: exports.DIST_UI_PATH });
     });
     // Serve Rivet UI at /rivet for every mode; static apps use /static for the
-    // user project preview and still need the hosted demo UI at /rivet.
+    // user project preview and still need the editor UI at /rivet.
     app.get(/^\/rivet(?:\/.*)?$/, (req, res, next) => {
         if ((0, exports.isRivetUiStaticAssetPath)(req.path)) {
             next();
@@ -548,195 +498,6 @@ const startServer = async (options) => {
             next();
         });
     });
-    const demoAuthSessionService = isDemoModeEnabled
-        ? new HostedDemoAuthSessionService_1.HostedDemoAuthSessionService({
-            store: options.demoMode?.authRedisUrl
-                ? new HostedDemoAuthSessionStore_1.RedisHostedDemoAuthSessionStore({
-                    redisUrl: options.demoMode.authRedisUrl,
-                    keyPrefix: options.demoMode.authRedisKeyPrefix ??
-                        'rivet:hosted-demo:auth-session',
-                })
-                : undefined,
-        })
-        : null;
-    if (demoAuthSessionService) {
-        await demoAuthSessionService.initialize();
-    }
-    if (demoAuthSessionService) {
-        app.use(async (req, res, next) => {
-            try {
-                const sessionId = demoAuthSessionService.getOrCreateSessionId(req, res);
-                const auth = await (0, hostedDemoSessionAuthRefresh_1.resolveHostedDemoSessionAuthWithRefresh)({
-                    demoAuthSessionService,
-                    sessionId,
-                    res,
-                    getProxyUrl: () => (0, ConfigManager_1.getConfigManager)().getProxyUrl(),
-                });
-                const headerToken = getBearerTokenFromHeader(req.headers.authorization);
-                res.locals.demoAuthSessionId = sessionId;
-                (0, RequestAuthContext_1.runWithRequestAuthContext)({
-                    token: auth?.token ?? headerToken,
-                    refreshToken: auth?.refreshToken,
-                    email: auth?.email,
-                }, () => {
-                    next();
-                });
-            }
-            catch (error) {
-                next(error);
-            }
-        });
-    }
-    const isDemoRequestAuthenticated = (req) => {
-        if (!isDemoModeEnabled || !requiresDemoAuth) {
-            return true;
-        }
-        return Boolean(demoAuthSessionService?.getAuthForRequest(req));
-    };
-    const getDemoRequestOwnerUserId = (req) => {
-        if (!requiresDemoAuth) {
-            return null;
-        }
-        const cookieAuthEmail = demoAuthSessionService
-            ?.getAuthForRequest(req)
-            ?.email?.trim()
-            .toLowerCase();
-        if (cookieAuthEmail) {
-            return cookieAuthEmail;
-        }
-        const email = (0, ConfigManager_1.getConfigManager)().getEmail();
-        if (!email) {
-            return null;
-        }
-        return email.trim().toLowerCase();
-    };
-    let demoSessionService = null;
-    if (isDemoModeEnabled &&
-        options.demoMode?.allowSessionProvisioning !== false) {
-        const sessionMetadataRedisUrl = options.demoMode?.sessionMetadataRedisUrl ??
-            options.demoMode?.authRedisUrl;
-        const sessionMetadataStore = sessionMetadataRedisUrl
-            ? new HostedDemoSessionStore_1.RedisHostedDemoSessionStore({
-                redisUrl: sessionMetadataRedisUrl,
-                keyPrefix: options.demoMode?.sessionMetadataRedisKeyPrefix ??
-                    'rivet:hosted-demo:demo-session',
-            })
-            : undefined;
-        demoSessionService = new HostedDemoSessionService_1.HostedDemoSessionService({
-            repoPath: projectPath,
-            telemetry,
-            templateProjectPath: options.demoMode?.templateProjectPath ?? 'examples/microsoft-paint',
-            worktreesRootPath: options.demoMode?.worktreesRootPath,
-            sessionTtlMs: options.demoMode?.sessionTtlMs,
-            sessionIdleTtlMs: options.demoMode?.sessionIdleTtlMs,
-            maxActiveSessions: options.demoMode?.maxActiveSessions,
-            baseRivetPort: options.demoMode?.baseRivetPort,
-            publicBaseUrl: options.demoMode?.publicBaseUrl,
-            sessionMetadataStore,
-        });
-        await demoSessionService.initialize();
-    }
-    if (isDemoModeEnabled && requiresDemoAuth) {
-        app.use('/api', (req, res, next) => {
-            if ((0, exports.isDemoAuthExemptApiPath)(req.path)) {
-                next();
-                return;
-            }
-            if (!isDemoRequestAuthenticated(req)) {
-                res.status(401).json({ error: 'Authentication required' });
-                return;
-            }
-            next();
-        });
-    }
-    if (demoSessionService) {
-        const activeSessionApiProxy = (0, http_proxy_middleware_1.createProxyMiddleware)({
-            changeOrigin: true,
-            pathRewrite: (pathName) => `/api${pathName}`,
-            on: {
-                proxyReq: (proxyReq, req) => {
-                    (0, http_proxy_middleware_1.fixRequestBody)(proxyReq, req);
-                },
-            },
-            router: (req) => {
-                const activeDemoSessionId = demoAuthSessionService?.getActiveDemoSessionIdForRequest(req) ?? null;
-                if (!activeDemoSessionId) {
-                    return undefined;
-                }
-                return (demoSessionService.getSessionProxyTarget(activeDemoSessionId) ??
-                    undefined);
-            },
-        });
-        app.use('/api', (req, res, next) => {
-            if ((0, exports.isHostedRootApiPath)(req.path)) {
-                next();
-                return;
-            }
-            const activeDemoSessionId = demoAuthSessionService?.getActiveDemoSessionIdForRequest(req) ?? null;
-            if (!activeDemoSessionId) {
-                res.status(409).json({
-                    error: 'No active demo session. Call /api/demo/session first.',
-                });
-                return;
-            }
-            const sessionOwnerUserId = demoSessionService.getSessionOwnerUserId(activeDemoSessionId);
-            const requestOwnerUserId = getDemoRequestOwnerUserId(req);
-            if (requiresDemoAuth &&
-                sessionOwnerUserId &&
-                requestOwnerUserId &&
-                sessionOwnerUserId !== requestOwnerUserId) {
-                res.status(403).json({ error: 'Session access denied' });
-                return;
-            }
-            const auth = demoAuthSessionService?.getAuthForRequest(req);
-            if (auth?.token) {
-                req.headers.authorization = `Bearer ${auth.token}`;
-            }
-            void (async () => {
-                try {
-                    await demoSessionService.ensureRuntimeReady(activeDemoSessionId);
-                }
-                catch (error) {
-                    const message = error instanceof Error ? error.message : '';
-                    if (message === 'Session not found') {
-                        demoAuthSessionService?.clearActiveDemoSessionIdForRequest(req, res);
-                        if (!res.headersSent) {
-                            res.status(409).json({
-                                error: 'No active demo session. Call /api/demo/session first.',
-                            });
-                        }
-                        return;
-                    }
-                    log.warn('Hosted demo runtime rehydration failed for active session API', error);
-                    if (!res.headersSent) {
-                        res.status(503).json({
-                            error: 'Demo session runtime unavailable',
-                        });
-                    }
-                    return;
-                }
-                const target = demoSessionService.getSessionProxyTarget(activeDemoSessionId);
-                if (!target) {
-                    demoAuthSessionService?.clearActiveDemoSessionIdForRequest(req, res);
-                    if (!res.headersSent) {
-                        res.status(409).json({
-                            error: 'No active demo session. Call /api/demo/session first.',
-                        });
-                    }
-                    return;
-                }
-                if ((0, shouldRecordHostedDemoSessionAction_1.shouldRecordHostedDemoSessionAction)(req)) {
-                    try {
-                        await demoSessionService.recordSessionAction(activeDemoSessionId);
-                    }
-                    catch (error) {
-                        log.warn('Failed to persist hosted demo session action timestamp', error);
-                    }
-                }
-                activeSessionApiProxy(req, res, next);
-            })();
-        });
-    }
     // API routes for Rivet functionality
     app.use('/api', (0, integrations_1.createIntegrationsRouter)());
     void (0, WorktreeManager_1.pruneWorktrees)(projectPath); // prune stale registry entries from prior crashes
@@ -747,114 +508,6 @@ const startServer = async (options) => {
         isGitEnabled,
         isGatewayLlmEnabled,
     }));
-    let trySessionProxy = null;
-    if (demoSessionService) {
-        app.use('/api', (0, demo_1.createDemoRouter)(demoSessionService, {
-            requireSignedInUsers: requiresDemoAuth,
-            getActiveDemoSessionIdForRequest: demoAuthSessionService
-                ? (req) => demoAuthSessionService.getActiveDemoSessionIdForRequest(req)
-                : undefined,
-            storeActiveDemoSessionIdForRequest: demoAuthSessionService
-                ? (req, res, demoSessionId) => demoAuthSessionService.storeActiveDemoSessionIdForRequest(req, res, demoSessionId)
-                : undefined,
-            clearActiveDemoSessionIdForRequest: demoAuthSessionService
-                ? (req, res) => demoAuthSessionService.clearActiveDemoSessionIdForRequest(req, res)
-                : undefined,
-            telemetry,
-            deploymentEnv: process.env.NODE_ENV ?? 'development',
-        }));
-        const mountedTrySessionProxy = (0, http_proxy_middleware_1.createProxyMiddleware)({
-            changeOrigin: true,
-            ws: true,
-            router: (req) => {
-                const sessionIdParam = req.params.sessionId;
-                const sessionId = Array.isArray(sessionIdParam)
-                    ? sessionIdParam[0]
-                    : sessionIdParam;
-                return demoSessionService.getSessionProxyTarget(sessionId) ?? undefined;
-            },
-        });
-        trySessionProxy = mountedTrySessionProxy;
-        // Browsers resolve default favicon relative to the document URL under /try/:id/,
-        // so requests hit this path instead of /. Serve the Rivet UI favicon here too.
-        app.get('/try/:sessionId/favicon.ico', (_req, res) => {
-            res.sendFile('favicon.ico', { root: exports.DIST_UI_PATH });
-        });
-        app.use('/try/:sessionId', (req, res, next) => {
-            if (!isDemoRequestAuthenticated(req)) {
-                if (req.accepts('html')) {
-                    res.redirect('/');
-                    return;
-                }
-                res.status(401).json({ error: 'Authentication required' });
-                return;
-            }
-            const sessionIdParam = req.params.sessionId;
-            const sessionId = Array.isArray(sessionIdParam)
-                ? sessionIdParam[0]
-                : sessionIdParam;
-            const sessionOwnerUserId = demoSessionService.getSessionOwnerUserId(sessionId);
-            const requestOwnerUserId = getDemoRequestOwnerUserId(req);
-            if (requiresDemoAuth &&
-                sessionOwnerUserId &&
-                requestOwnerUserId &&
-                sessionOwnerUserId !== requestOwnerUserId) {
-                res.status(403).json({ error: 'Session access denied' });
-                return;
-            }
-            const auth = demoAuthSessionService?.getAuthForRequest(req);
-            if (auth?.token) {
-                req.headers.authorization = `Bearer ${auth.token}`;
-            }
-            void (async () => {
-                try {
-                    await demoSessionService.ensureRuntimeReady(sessionId);
-                }
-                catch (error) {
-                    const message = error instanceof Error ? error.message : '';
-                    if (message === 'Session not found') {
-                        demoAuthSessionService?.clearActiveDemoSessionIdForRequest(req, res);
-                        telemetry?.trackTryoutProxySessionMissing({
-                            demoSessionId: sessionId,
-                            deploymentEnv: process.env.NODE_ENV ?? 'development',
-                        });
-                        if (!res.headersSent) {
-                            res.status(404).json({ error: 'Session not found' });
-                        }
-                        return;
-                    }
-                    log.warn('Hosted demo runtime rehydration failed for try session', error);
-                    if (!res.headersSent) {
-                        res.status(503).json({
-                            error: 'Demo session runtime unavailable',
-                        });
-                    }
-                    return;
-                }
-                const target = demoSessionService.getSessionProxyTarget(sessionId);
-                if (!target) {
-                    demoAuthSessionService?.clearActiveDemoSessionIdForRequest(req, res);
-                    telemetry?.trackTryoutProxySessionMissing({
-                        demoSessionId: sessionId,
-                        deploymentEnv: process.env.NODE_ENV ?? 'development',
-                    });
-                    if (!res.headersSent) {
-                        res.status(404).json({ error: 'Session not found' });
-                    }
-                    return;
-                }
-                if ((0, shouldRecordHostedDemoSessionAction_1.shouldRecordHostedDemoSessionAction)(req)) {
-                    try {
-                        await demoSessionService.recordSessionAction(sessionId);
-                    }
-                    catch (error) {
-                        log.warn('Failed to persist hosted demo session action timestamp', error);
-                    }
-                }
-                mountedTrySessionProxy(req, res, next);
-            })();
-        });
-    }
     app.use('/api', (0, support_1.createSupportRouter)(telemetry));
     // Static routes (only for static projects)
     if (staticService) {
@@ -881,46 +534,16 @@ const startServer = async (options) => {
     });
     app.get('/api/feature-flags', async (req, res) => {
         const configManager = (0, ConfigManager_1.getConfigManager)();
-        const demoSessionId = res.locals.demoAuthSessionId;
-        const demoAuth = demoAuthSessionService?.getAuthForSessionId(demoSessionId ?? '');
-        const fallbackEmail = demoAuthSessionService
-            ? demoAuth?.email
-            : configManager.getEmail();
         const featureFlagUserKey = (0, featureFlagUserKey_1.getConfigFeatureFlagUserKey)({
             headers: req.headers,
-            fallbackEmail,
+            fallbackEmail: configManager.getEmail(),
         });
         const featureFlags = await (0, evaluateFlags_1.getFeatureFlags)({ userKey: featureFlagUserKey });
         res.json({ featureFlags });
     });
     // Config endpoint
-    app.get('/api/config', async (req, res) => {
+    app.get('/api/config', async (_req, res) => {
         const configManager = (0, ConfigManager_1.getConfigManager)();
-        const demoSessionId = res.locals.demoAuthSessionId;
-        const demoAuth = demoAuthSessionService?.getAuthForSessionId(demoSessionId ?? '');
-        const isAuthenticatedInDemoMode = Boolean(demoAuth?.token);
-        const isAuthenticated = demoAuthSessionService
-            ? isAuthenticatedInDemoMode
-            : configManager.isAuthenticated();
-        const email = demoAuthSessionService
-            ? demoAuth?.email
-            : configManager.getEmail();
-        const userId = demoAuthSessionService
-            ? demoAuth?.userId
-            : configManager.getUserId();
-        // Display name lives in the access token's user_metadata (Google OAuth).
-        // Decode the demo session's token directly; otherwise let ConfigManager
-        // read it off the locally stored token. May be undefined (email-only
-        // logins) — the UI falls back to email-derived initials.
-        const name = demoAuthSessionService
-            ? demoAuth?.token
-                ? ((0, accessTokenRefresh_1.getJwtDisplayName)(demoAuth.token) ?? undefined)
-                : undefined
-            : configManager.getDisplayName();
-        const activeDemoSessionId = demoAuth?.activeDemoSessionId ?? null;
-        const activeSession = activeDemoSessionId
-            ? demoSessionService?.getSession(activeDemoSessionId)
-            : null;
         const desktopVersionPolicy = await (0, DesktopVersionPolicyService_1.getDesktopVersionPolicyService)().getPolicy();
         // In the zero-to-one flow the outer `projectPath` arg points at the
         // generated subproject (`<workspaceRoot>/.rivet/<slug>/`), but the
@@ -928,74 +551,31 @@ const startServer = async (options) => {
         // `.rivet/variants/` and per-project comments live. Prefer the bridge's
         // view so the UI's projectPathAtom resolves to the directory that owns
         // shared state, not the subproject of a single session.
-        const livePath = activeSession?.projectPath ??
-            sessionBridge?.getProjectPath() ??
-            projectPath;
+        const livePath = sessionBridge?.getProjectPath() ?? projectPath;
         res.json({
-            agentModeAvailable: isAuthenticated,
-            email,
-            userId,
-            name,
-            activeDemoSessionId,
+            agentModeAvailable: configManager.isAuthenticated(),
+            email: configManager.getEmail(),
+            userId: configManager.getUserId(),
+            name: configManager.getDisplayName(),
             isMCPSession: sessionBridge?.isActive() ?? false,
             mcpEditor: mcpEditor ?? null,
             agentApplyMode: sessionBridge?.isActive()
                 ? (agentApplyMode ?? 'external')
                 : null,
             projectPath: livePath,
-            demoMode: isDemoModeEnabled,
             desktopVersionPolicy,
         });
     });
     // Store auth credentials after browser-based OAuth completion.
-    // Hosted demo mode stores auth by browser session; non-demo keeps local config behavior.
     app.post('/api/auth/store', (req, res) => {
         const { email, token, refreshToken, userId } = req.body ?? {};
         if (!email || !token) {
-            if (demoAuthSessionService) {
-                telemetry?.trackTryoutAuthStoreFailed({
-                    reason: 'missing_email_or_token',
-                    statusCode: 400,
-                    deploymentEnv: process.env.NODE_ENV ?? 'development',
-                });
-            }
             return res.status(400).json({ error: 'Missing email or token' });
         }
         try {
-            if (demoAuthSessionService) {
-                const sessionId = res.locals.demoAuthSessionId;
-                const demoSessionId = sessionId
-                    ? demoAuthSessionService.storeAuthForSessionId(sessionId, res, {
-                        token,
-                        email,
-                        refreshToken,
-                        userId,
-                    })
-                    : demoAuthSessionService.storeAuthForRequest(req, res, {
-                        token,
-                        email,
-                        refreshToken,
-                        userId,
-                    });
-                telemetry?.trackTryoutAuthStoreCompleted({
-                    demoSessionId,
-                    hasRefreshToken: Boolean(refreshToken),
-                    deploymentEnv: process.env.NODE_ENV ?? 'development',
-                });
-            }
-            else {
-                const configManager = (0, ConfigManager_1.getConfigManager)();
-                configManager.setAuth(token, email, refreshToken, userId);
-            }
+            (0, ConfigManager_1.getConfigManager)().setAuth(token, email, refreshToken, userId);
         }
-        catch (error) {
-            if (demoAuthSessionService) {
-                telemetry?.trackTryoutAuthStoreFailed({
-                    reason: error instanceof Error ? error.message : 'auth_store_failed',
-                    statusCode: 500,
-                    deploymentEnv: process.env.NODE_ENV ?? 'development',
-                });
-            }
+        catch {
             return res
                 .status(500)
                 .json({ error: 'Failed to store auth credentials' });
@@ -1004,14 +584,9 @@ const startServer = async (options) => {
         log.info(`Stored auth for ${email} via browser OAuth`);
         res.json({ success: true });
     });
-    app.post('/api/auth/logout', (req, res) => {
+    app.post('/api/auth/logout', (_req, res) => {
         try {
-            if (demoAuthSessionService) {
-                demoAuthSessionService.clearAuthForRequest(req, res);
-            }
-            else {
-                (0, ConfigManager_1.getConfigManager)().clearAuth();
-            }
+            (0, ConfigManager_1.getConfigManager)().clearAuth();
         }
         catch (error) {
             log.warn('Logout failed', error);
@@ -1117,15 +692,11 @@ const startServer = async (options) => {
     // Start server
     const activeSockets = new Set();
     // Advertise this server for CLI attach (`rivet status`, `rivet open`, …).
-    // Hosted demo orchestrators are multi-session and never CLI-attached.
     let handshakeApplyMode = 'none';
     if (sessionBridge) {
         handshakeApplyMode = agentApplyMode === 'embedded' ? 'embedded' : 'none';
     }
     const advertiseCliHandshake = () => {
-        if (isDemoModeEnabled) {
-            return;
-        }
         try {
             (0, serverHandshake_1.writeHandshake)({
                 version: serverHandshake_1.CLI_HANDSHAKE_VERSION,
@@ -1144,9 +715,6 @@ const startServer = async (options) => {
         }
     };
     const retireCliHandshake = () => {
-        if (isDemoModeEnabled) {
-            return;
-        }
         (0, serverHandshake_1.removeHandshake)(projectPath, process.pid);
     };
     const httpServer = await new Promise((resolve, reject) => {
@@ -1176,44 +744,6 @@ const startServer = async (options) => {
         server.on('upgrade', (req, socket, head) => {
             const pathname = req.url?.split('?')[0] ?? '';
             log.debug(`WebSocket upgrade request for: ${pathname}`);
-            const trySessionMatch = /^\/try\/([^/]+)/.exec(pathname);
-            if (trySessionMatch && trySessionProxy?.upgrade && demoSessionService) {
-                const sessionId = trySessionMatch[1];
-                void (async () => {
-                    try {
-                        await demoSessionService.ensureRuntimeReady(sessionId);
-                    }
-                    catch {
-                        socket.destroy();
-                        return;
-                    }
-                    const target = demoSessionService.getSessionProxyTarget(sessionId);
-                    if (!target) {
-                        socket.destroy();
-                        return;
-                    }
-                    if (requiresDemoAuth) {
-                        const auth = demoAuthSessionService?.getAuthForRequest(req);
-                        if (!auth?.token) {
-                            log.debug('Rejecting unauthenticated hosted demo upgrade request');
-                            socket.destroy();
-                            return;
-                        }
-                        const sessionOwnerUserId = demoSessionService.getSessionOwnerUserId(sessionId);
-                        const requestOwnerUserId = auth.email?.trim().toLowerCase() ?? null;
-                        if (sessionOwnerUserId &&
-                            requestOwnerUserId &&
-                            sessionOwnerUserId !== requestOwnerUserId) {
-                            log.debug('Rejecting non-owner hosted demo upgrade request');
-                            socket.destroy();
-                            return;
-                        }
-                    }
-                    log.debug('Proxying upgrade to hosted demo session for HMR');
-                    trySessionProxy.upgrade(req, socket, head);
-                })();
-                return;
-            }
             // Proxy to user's dev server for HMR
             const proxyUpgrade = userDevProxy?.middleware?.upgrade;
             if ((framework !== 'static' || hasUserDevServer) && proxyUpgrade) {
@@ -1271,10 +801,6 @@ const startServer = async (options) => {
                     return;
                 }
                 void (async () => {
-                    if (demoSessionService) {
-                        await demoSessionService.shutdown();
-                    }
-                    demoAuthSessionService?.shutdown();
                     await (0, exports.runServerShutdownTasks)({
                         beforeShutdown: options.beforeShutdown,
                         telemetry,