Remove Agent-specific proxy routes

Author: FCalabria

.changeset/bright-agents-proxy.md

@@ -0,0 +1,5 @@
+---
+'@shopify/hydrogen': patch
+---
+
+Direct Storefront Agent proxy routes have been removed. Route Storefront Agent requests through the generic Shopify API proxy under `/__shopify/*`.

packages/hydrogen/skills/hydrogen-request-handlers/SKILL.md

@@ -27,7 +27,7 @@ Request
   -> framework 404 page
 ```
 
-`handleShopifyRoutes` owns Hydrogen routes the framework should never see: SFAPI proxy URLs, `/checkout`, cart permalinks like `/cart/{variantId}:{quantity}`, AJAX cart URLs like `/cart.js` and `/cart/add.js`, `/api/mcp`, `/agent/*`, `/graphiql` in development, and app-registered handler groups such as `createCartServerHandlers()` or `createCustomerAccountServerHandlers()`.
+`handleShopifyRoutes` owns Hydrogen routes the framework should never see: SFAPI proxy URLs, the generic `/__shopify/*` API proxy, `/checkout`, cart permalinks like `/cart/{variantId}:{quantity}`, AJAX cart URLs like `/cart.js` and `/cart/add.js`, `/api/mcp`, `/graphiql` in development, and app-registered handler groups such as `createCartServerHandlers()` or `createCustomerAccountServerHandlers()`.
 
 `handleShopifyRedirects` is a post-routing 404 check for `/admin`, configured standard route redirects, Storefront URL redirects, and same-origin query-param redirects. Do not run it on every request.
 

packages/hydrogen/skills/hydrogen-setup/steps/2-scaffold.md

@@ -10,7 +10,7 @@ Preserve the app's existing route shape when present. When there is no establish
 - `/products/{handle}` for product detail. Use plural `products`, not `/product`.
 - `/cart` for the full cart page.
 
-Hydrogen-owned handlers are not page routes: `/api/cart`, `/api/{api-version}/graphql.json`, `/checkout`, cart permalinks like `/cart/{variantId}:{quantity}`, AJAX cart URLs like `/cart.js` and `/cart/add.js`, `/api/mcp`, `/agent/*`, `/graphiql` in development, `/admin` redirects, and Storefront URL redirects belong in the `hydrogen-request-handlers` wiring.
+Hydrogen-owned handlers are not page routes: `/api/cart`, `/api/{api-version}/graphql.json`, the generic `/__shopify/*` API proxy, `/checkout`, cart permalinks like `/cart/{variantId}:{quantity}`, AJAX cart URLs like `/cart.js` and `/cart/add.js`, `/api/mcp`, `/graphiql` in development, `/admin` redirects, and Storefront URL redirects belong in the `hydrogen-request-handlers` wiring.
 
 Invoke the `hydrogen-routing` skill and create the shared route template manifest for Shopify resources such as products, collections, pages, blogs, or articles.
 

packages/hydrogen/src/core/headers.ts

@@ -6,7 +6,6 @@ export const REQUEST_GROUP_ID_HEADER = "Custom-Storefront-Request-Group-ID";
 export const SDK_VARIANT_HEADER = "X-SDK-Variant";
 export const SDK_VARIANT_SOURCE_HEADER = "X-SDK-Variant-Source";
 export const SDK_VERSION_HEADER = "X-SDK-Version";
-export const SHOPIFY_CHAT_FRAME_ORIGIN_HEADER = "Sec-Shopify-Chat-Frame-Origin";
 export const SHOPIFY_STOREFRONT_ORIGIN_HEADER = "Sec-Shopify-Storefront-Origin";
 export const STOREFRONT_ID_HEADER = "Shopify-Storefront-Id";
 export const SHOPIFY_STOREFRONT_S_HEADER = "Shopify-Storefront-S";
@@ -51,7 +50,6 @@ export type ShopifyHeaderName =
   | typeof SDK_VARIANT_HEADER
   | typeof SDK_VARIANT_SOURCE_HEADER
   | typeof SDK_VERSION_HEADER
-  | typeof SHOPIFY_CHAT_FRAME_ORIGIN_HEADER
   | typeof SHOPIFY_STOREFRONT_ORIGIN_HEADER
   | typeof SHOPIFY_STOREFRONT_S_HEADER
   | typeof SHOPIFY_STOREFRONT_Y_HEADER
@@ -118,8 +116,6 @@ export const SFAPI_REQUEST_HEADER_ALLOWLIST = defineHeaderList(
 
 export const MCP_REQUEST_HEADER_ALLOWLIST = defineHeaderList(...COMMON_PROXY_HEADER_ALLOWLIST);
 
-export const AGENT_REQUEST_HEADER_ALLOWLIST = defineHeaderList(...COMMON_PROXY_HEADER_ALLOWLIST);
-
 export const AJAX_API_REQUEST_HEADER_ALLOWLIST = defineHeaderList(
   ...COMMON_PROXY_HEADER_ALLOWLIST,
   "content-length",

packages/hydrogen/src/core/request-routing/handle-shopify-routes.ts

@@ -1,4 +1,3 @@
-import { handleAgentProxy } from "./interceptors/agent-proxy";
 import { handleAjaxApi } from "./interceptors/ajax-api";
 import { handleShopifyApiProxy } from "./interceptors/api-proxy";
 import { handleCheckoutRedirect } from "./interceptors/checkout";
@@ -16,7 +15,6 @@ const SHOPIFY_ROUTE_INTERCEPTORS = [
   handleCheckoutRedirect,
   handleWellKnownProxy,
   handleMcpProxy,
-  handleAgentProxy,
   handleAjaxApi,
 ] satisfies readonly HydrogenRouteInterceptor[];
 

packages/hydrogen/src/core/request-routing/interceptors/agent-proxy.test.ts

@@ -29,8 +29,6 @@ export function isHydrogenServerHandoffPath(pathname: string): boolean {
   );
 }
 
-export const AGENT_BUYER_CLAIMS_RE =
-  /^(?:\/[a-z]{2}(?:-[a-z]{2})?)?\/agent\/(?:handoff|buyer-claims)(?:\.[^/.]+)?\/?$/i;
 export const WELL_KNOWN_RE = /^\/\.well-known\/(?:apple-developer-merchantid-domain-association)$/;
 export const AJAX_CART_RE =
   /^(?:\/[a-z]{2}(?:-[a-z]{2})?)?\/cart(?:\.(?:js|json)|\/(?:add|update|change|clear)(?:\.(?:js|json))?)$/i;