feat: cut over rust web main shell

wolai-frontend/src/app/api/auth/mnote-web-token/route.test.ts

@@ -0,0 +1,46 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mockConvexAuthNextjsToken = vi.fn();
+
+vi.mock("@convex-dev/auth/nextjs/server", () => ({
+  convexAuthNextjsToken: mockConvexAuthNextjsToken,
+}));
+
+describe("/api/auth/mnote-web-token compat route", () => {
+  beforeEach(() => {
+    mockConvexAuthNextjsToken.mockReset();
+  });
+
+  it("有 token 时仅作为 next-auth-token-debug compat 边界写入 mnote-web cookie", async () => {
+    mockConvexAuthNextjsToken.mockResolvedValue("token-demo");
+
+    const { GET } = await import("./route");
+    const response = await GET();
+    const payload = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("x-mnote-web-owner")).toBe("mnote-web");
+    expect(response.headers.get("x-mnote-compat-boundary")).toBe("next-auth-token-debug");
+    expect(payload).toEqual({
+      ok: true,
+      owner: "mnote-web",
+      compatibility: "next-auth-token-debug",
+    });
+    expect(response.headers.get("set-cookie")).toContain("mnote_web_convex_token=token-demo");
+  });
+
+  it("无 token 时清空兼容 cookie 并保留 mnote-web owner header", async () => {
+    mockConvexAuthNextjsToken.mockResolvedValue("");
+
+    const { GET } = await import("./route");
+    const response = await GET();
+    const payload = await response.json();
+
+    expect(response.status).toBe(401);
+    expect(response.headers.get("x-mnote-web-owner")).toBe("mnote-web");
+    expect(response.headers.get("x-mnote-compat-boundary")).toBe("next-auth-token-debug");
+    expect(payload).toEqual({ error: "未登录" });
+    expect(response.headers.get("set-cookie")).toContain("mnote_web_convex_token=");
+    expect(response.headers.get("set-cookie")).toContain("Max-Age=0");
+  });
+});

wolai-frontend/src/app/api/auth/mnote-web-token/route.ts

@@ -2,6 +2,11 @@ import { NextResponse } from "next/server";
 import { convexAuthNextjsToken } from "@convex-dev/auth/nextjs/server";
 
 const COOKIE_NAME = "mnote_web_convex_token";
+const COMPAT_HEADERS = {
+  "cache-control": "no-store",
+  "x-mnote-web-owner": "mnote-web",
+  "x-mnote-compat-boundary": "next-auth-token-debug",
+};
 
 export const dynamic = "force-dynamic";
 
@@ -18,11 +23,17 @@ export async function GET() {
       path: "/",
       maxAge: 0,
     });
-    response.headers.set("cache-control", "no-store");
+    for (const [name, value] of Object.entries(COMPAT_HEADERS)) {
+      response.headers.set(name, value);
+    }
     return response;
   }
 
-  const response = NextResponse.json({ ok: true });
+  const response = NextResponse.json({
+    ok: true,
+    owner: "mnote-web",
+    compatibility: "next-auth-token-debug",
+  });
   response.cookies.set({
     name: COOKIE_NAME,
     value: token,
@@ -30,6 +41,8 @@ export async function GET() {
     sameSite: "lax",
     path: "/",
   });
-  response.headers.set("cache-control", "no-store");
+  for (const [name, value] of Object.entries(COMPAT_HEADERS)) {
+    response.headers.set(name, value);
+  }
   return response;
 }

wolai-frontend/src/app/api/documents/copy-tree/route.ts

@@ -1,94 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type CopyTreeItem = {
-  documentId: string;
-  recursive: boolean;
-};
-
-type CopyTreePayload = {
-  items?: CopyTreeItem[] | null;
-  targetParentId?: string | null;
-};
-
-type TreeCopyResponse = {
-  requestId?: string;
-  traceId?: string;
-  result?: {
-    items?: Array<{
-      oldId: string;
-      newId: string;
-    }>;
-  } | null;
-};
-
-export const dynamic = "force-dynamic";
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const payload = (await request.json()) as CopyTreePayload;
-    const normalizedItems = (payload.items ?? [])
-      .filter((item) => item?.documentId)
-      .map((item) => ({
-        documentId: item.documentId.trim(),
-        recursive: Boolean(item.recursive),
-      }))
-      .filter((item) => item.documentId.length > 0);
-
-    if (normalizedItems.length === 0) {
-      return NextResponse.json({ error: "items 为空" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "copy",
-        targetParentId:
-          typeof payload.targetParentId === "string" ? payload.targetParentId.trim() || null : null,
-        items: normalizedItems,
-      }),
-    });
-
-    const result = (await response.json().catch(() => null)) as
-      | TreeCopyResponse
-      | { error?: string }
-      | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            result && typeof result === "object" && "error" in result && typeof result.error === "string"
-              ? result.error
-              : "复制页面失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      items: result?.result?.items ?? [],
-      meta: {
-        requestId: result?.requestId,
-        traceId: result?.traceId,
-        commandName: "tree.subtree.copy",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "复制页面失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/create/route.ts

@@ -1,83 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreeCreateResponse = {
-  requestId?: string;
-  traceId?: string;
-  result?: {
-    documentId?: string;
-    parentId?: string | null;
-    title?: string | null;
-    sortOrder?: number | null;
-    workspaceId?: string | null;
-    execution?: {
-      access_scope?: "private" | "shared" | "public";
-      is_template?: boolean;
-      created_at?: string | null;
-      updated_at?: string | null;
-    } | null;
-  } | null;
-};
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { parentId }: { parentId?: string | null } = await request.json();
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "create",
-        parentId: typeof parentId === "string" ? parentId.trim() || null : null,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as TreeCreateResponse | { error?: string } | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "创建页面失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      id: payload?.result?.documentId ?? "",
-      title: payload?.result?.title ?? "无标题",
-      parent_id: payload?.result?.parentId ?? null,
-      sort_order: payload?.result?.sortOrder ?? null,
-      workspace_id: payload?.result?.workspaceId ?? undefined,
-      access_scope: payload?.result?.execution?.access_scope ?? "private",
-      is_template: payload?.result?.execution?.is_template ?? false,
-      created_at: payload?.result?.execution?.created_at ?? null,
-      updated_at:
-        payload?.result?.execution?.updated_at ??
-        payload?.result?.execution?.created_at ??
-        null,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.node.create",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "创建页面失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/delete/route.ts

@@ -1,75 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreeArchiveResponse = {
-  requestId?: string;
-  traceId?: string;
-};
-
-type DeletePayload = {
-  documentId?: string | null;
-  workspaceId?: string | null;
-};
-
-export const dynamic = "force-dynamic";
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { documentId, workspaceId }: DeletePayload = await request.json();
-    const normalizedDocumentId = typeof documentId === "string" ? documentId.trim() : "";
-    if (!normalizedDocumentId) {
-      return NextResponse.json({ error: "缺少 documentId" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "archive",
-        documentId: normalizedDocumentId,
-        workspaceId: typeof workspaceId === "string" ? workspaceId.trim() || null : null,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as
-      | TreeArchiveResponse
-      | { error?: string }
-      | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "删除失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.node.archive",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "删除失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/embed/route.ts

@@ -1,74 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreeEmbedResponse = {
-  requestId?: string;
-  traceId?: string;
-};
-
-type EmbedPayload = {
-  sourceId?: string | null;
-  targetId?: string | null;
-};
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { sourceId, targetId }: EmbedPayload = await request.json();
-    const normalizedSourceId = typeof sourceId === "string" ? sourceId.trim() : "";
-    const normalizedTargetId = typeof targetId === "string" ? targetId.trim() : "";
-    if (!normalizedSourceId || !normalizedTargetId) {
-      return NextResponse.json({ error: "缺少 sourceId 或 targetId" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "embed",
-        sourceId: normalizedSourceId,
-        targetId: normalizedTargetId,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as
-      | TreeEmbedResponse
-      | { error?: string }
-      | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "嵌入失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      ok: true,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.node.embed",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "嵌入失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/move/route.ts

@@ -1,79 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreeMoveResponse = {
-  requestId?: string;
-  traceId?: string;
-  result?: {
-    documentId?: string;
-    parentId?: string | null;
-    sortOrder?: number | null;
-  } | null;
-};
-
-type MovePayload = {
-  documentId?: string | null;
-  parentId?: string | null;
-  position?: number | null;
-  workspaceId?: string | null;
-};
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { documentId, parentId = null, position, workspaceId }: MovePayload = await request.json();
-    const normalizedDocumentId = typeof documentId === "string" ? documentId.trim() : "";
-    if (!normalizedDocumentId) {
-      return NextResponse.json({ error: "缺少 documentId" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "move",
-        documentId: normalizedDocumentId,
-        parentId: typeof parentId === "string" ? parentId.trim() || null : null,
-        sortOrder: typeof position === "number" && Number.isFinite(position) ? Math.floor(position) : 0,
-        workspaceId: typeof workspaceId === "string" ? workspaceId.trim() || null : null,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as TreeMoveResponse | { error?: string } | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "移动失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      ok: true,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.subtree.move",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "移动失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/purge/route.ts

@@ -1,77 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreePurgeResponse = {
-  requestId?: string;
-  traceId?: string;
-  result?: {
-    purged?: boolean;
-  } | null;
-};
-
-type PurgePayload = {
-  documentId?: string | null;
-};
-
-export const dynamic = "force-dynamic";
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { documentId }: PurgePayload = await request.json();
-    const normalizedDocumentId = typeof documentId === "string" ? documentId.trim() : "";
-    if (!normalizedDocumentId) {
-      return NextResponse.json({ error: "缺少 documentId" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "purge",
-        documentId: normalizedDocumentId,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as
-      | TreePurgeResponse
-      | { error?: string }
-      | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "彻底删除失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      purged: payload?.result?.purged ?? true,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.node.purge",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "彻底删除失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/restore/route.ts

@@ -1,75 +0,0 @@
-import { NextResponse } from "next/server";
-import { isConvexEnabled } from "@/lib/convex/enabled";
-
-type TreeRestoreResponse = {
-  requestId?: string;
-  traceId?: string;
-};
-
-type RestorePayload = {
-  documentId?: string | null;
-  workspaceId?: string | null;
-};
-
-export const dynamic = "force-dynamic";
-
-export async function POST(request: Request) {
-  if (!isConvexEnabled()) {
-    return NextResponse.json({ error: "当前仅支持 Convex 模式" }, { status: 501 });
-  }
-
-  try {
-    const { documentId, workspaceId }: RestorePayload = await request.json();
-    const normalizedDocumentId = typeof documentId === "string" ? documentId.trim() : "";
-    if (!normalizedDocumentId) {
-      return NextResponse.json({ error: "缺少 documentId" }, { status: 400 });
-    }
-
-    const upstreamUrl = new URL("/api/tree/commands", request.url);
-    const response = await fetch(upstreamUrl.toString(), {
-      method: "POST",
-      headers: new Headers({
-        "content-type": "application/json",
-      }),
-      body: JSON.stringify({
-        action: "restore",
-        documentId: normalizedDocumentId,
-        workspaceId: typeof workspaceId === "string" ? workspaceId.trim() || null : null,
-      }),
-    });
-
-    const payload = (await response.json().catch(() => null)) as
-      | TreeRestoreResponse
-      | { error?: string }
-      | null;
-    if (!response.ok) {
-      return NextResponse.json(
-        {
-          error:
-            payload && typeof payload === "object" && "error" in payload && typeof payload.error === "string"
-              ? payload.error
-              : "恢复失败，请稍后再试",
-        },
-        { status: response.status },
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      meta: {
-        requestId: payload?.requestId,
-        traceId: payload?.traceId,
-        commandName: "tree.node.restore",
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error: error instanceof Error ? error.message : "恢复失败，请稍后再试",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export const runtime = "nodejs";

wolai-frontend/src/app/api/documents/route-adapters.test.ts

@@ -214,7 +214,11 @@ describe("documents route adapters", () => {
 
     const response = await postTitle(new Request("http://localhost/api/documents/title", {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: {
+        "authorization": "Bearer test-token",
+        "content-type": "application/json",
+        "cookie": "convex-auth=test-cookie",
+      },
       body: JSON.stringify({ documentId: "doc_1", workspaceId: "ws_1", title: "新标题" }),
     }));
     const payload = await response.json() as {
@@ -235,6 +239,15 @@ describe("documents route adapters", () => {
         }),
       }),
     );
+    const renameCall = fetchMock.mock.calls.find(([, init]) => {
+      if (!init || typeof init.body !== "string") {
+        return false;
+      }
+      return init.body.includes('"action":"rename"');
+    });
+    const forwardedHeaders = renameCall?.[1]?.headers as Headers;
+    expect(forwardedHeaders.get("authorization")).toBe("Bearer test-token");
+    expect(forwardedHeaders.get("cookie")).toBe("convex-auth=test-cookie");
     expect(payload.ok).toBe(true);
     expect(payload.meta.commandName).toBe("tree.node.rename");
   });

wolai-frontend/src/app/api/documents/title/route.ts

@@ -35,11 +35,20 @@ export async function POST(request: Request) {
 
       if (commandName !== PAGE_COMMAND_NAMES.updateTitle) {
         const upstreamUrl = new URL("/api/tree/commands", request.url);
+        const upstreamHeaders = new Headers({
+          "content-type": "application/json",
+        });
+        const authorization = request.headers.get("authorization");
+        const cookie = request.headers.get("cookie");
+        if (authorization) {
+          upstreamHeaders.set("authorization", authorization);
+        }
+        if (cookie) {
+          upstreamHeaders.set("cookie", cookie);
+        }
         const response = await fetch(upstreamUrl.toString(), {
           method: "POST",
-          headers: new Headers({
-            "content-type": "application/json",
-          }),
+          headers: upstreamHeaders,
           body: JSON.stringify({
             action: "rename",
             documentId: normalizedDocumentId,

wolai-frontend/src/app/api/mnote-web/stream/route.test.ts

@@ -133,6 +133,9 @@ describe("/api/mnote-web/stream route", () => {
     expect(response.status).toBe(200);
     expect(response.headers.get("content-type")).toContain("text/event-stream");
     expect(response.headers.get("cache-control")).toBe("no-store");
+    expect(response.headers.get("x-mnote-web-owner")).toBe("mnote-web");
+    expect(response.headers.get("x-mnote-tree-stream-owner")).toBe("rust-web");
+    expect(response.headers.get("x-mnote-compat-boundary")).toBe("mnote-web-stream-alias");
     expect(await response.text()).toContain("event: snapshot");
     expect(fetchSpy).not.toHaveBeenCalled();
     expect(mockExecuteRustBridgeQuery).not.toHaveBeenCalled();

wolai-frontend/src/app/api/mnote-web/stream/route.ts

@@ -156,7 +156,10 @@ export async function GET(request: Request) {
       "content-type": "text/event-stream; charset=utf-8",
       "cache-control": "no-store",
       connection: "keep-alive",
-      "x-upstream": "next-tree-stream",
+      "x-upstream": "next-tree-stream-compat",
+      "x-mnote-web-owner": "mnote-web",
+      "x-mnote-tree-stream-owner": "rust-web",
+      "x-mnote-compat-boundary": "mnote-web-stream-alias",
     },
   });
 }

wolai-frontend/src/app/api/tree/shell/route.test.ts

@@ -1,96 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const mockResolveMnoteWebInternalUrl = vi.fn();
-const mockBuildForwardHeaders = vi.fn();
-const mockFetch = vi.fn();
-
-vi.mock("@/lib/mnote-web/internal-url", () => ({
-  resolveMnoteWebInternalUrl: (...args: unknown[]) => mockResolveMnoteWebInternalUrl(...args),
-}));
-
-vi.mock("@/lib/server/forward-headers", () => ({
-  buildForwardHeaders: (...args: unknown[]) => mockBuildForwardHeaders(...args),
-}));
-
-describe("/api/tree/shell route", () => {
-  beforeEach(() => {
-    mockResolveMnoteWebInternalUrl.mockReset();
-    mockBuildForwardHeaders.mockReset();
-    mockFetch.mockReset();
-    vi.stubGlobal("fetch", mockFetch);
-  });
-
-  it("未显式 debug 时不应再代理 3104 tree shell", async () => {
-    const { GET } = await import("./route");
-    const response = await GET(
-      new Request(
-        "http://127.0.0.1:3000/api/tree/shell?workspaceId=ws_1&mode=page&activeDocumentId=doc_9",
-      ),
-    );
-
-    expect(mockResolveMnoteWebInternalUrl).not.toHaveBeenCalled();
-    expect(mockFetch).not.toHaveBeenCalled();
-    expect(response.status).toBe(404);
-    expect(await response.json()).toEqual({
-      error: "tree shell proxy 默认关闭；主路径使用 3000 inline rust compat host",
-    });
-  });
-
-  it("显式 debug 时才通过 3000 同源代理回源 mnote-web tree shell，并移除不应透传的响应头", async () => {
-    mockResolveMnoteWebInternalUrl.mockResolvedValue("http://127.0.0.1:3104");
-    mockBuildForwardHeaders.mockResolvedValue(
-      new Headers({
-        cookie: "session=abc",
-        authorization: "Bearer test-token",
-      }),
-    );
-    mockFetch.mockResolvedValue(
-      new Response("<!doctype html><html><body>tree shell</body></html>", {
-        status: 200,
-        headers: {
-          "content-type": "text/html; charset=utf-8",
-          "set-cookie": "debug=1",
-          connection: "keep-alive",
-          "x-upstream": "mnote-web-tree",
-        },
-      }),
-    );
-
-    const { GET } = await import("./route");
-    const response = await GET(
-      new Request(
-        "http://127.0.0.1:3000/api/tree/shell?workspaceId=ws_1&mode=page&activeDocumentId=doc_9&debug=1",
-        {
-          method: "GET",
-          headers: {
-            cookie: "session=abc",
-          },
-        },
-      ),
-    );
-
-    expect(mockFetch).toHaveBeenCalledWith(
-      "http://127.0.0.1:3104/tree?workspaceId=ws_1&mode=page&activeDocumentId=doc_9&debug=1",
-      expect.objectContaining({
-        method: "GET",
-        headers: expect.any(Headers),
-        cache: "no-store",
-        redirect: "manual",
-      }),
-    );
-
-    const fetchHeaders = mockFetch.mock.calls[0]?.[1]?.headers as Headers;
-    expect(fetchHeaders.get("cookie")).toBe("session=abc");
-    expect(fetchHeaders.get("authorization")).toBe("Bearer test-token");
-    expect(fetchHeaders.get("accept")).toContain("text/html");
-    expect(fetchHeaders.get("x-mnote-source-channel")).toBe("next_tree_shell_proxy");
-
-    expect(response.status).toBe(200);
-    expect(response.headers.get("content-type")).toContain("text/html");
-    expect(response.headers.get("cache-control")).toBe("no-store");
-    expect(response.headers.get("set-cookie")).toBeNull();
-    expect(response.headers.get("connection")).toBeNull();
-    expect(response.headers.get("x-upstream")).toBe("mnote-web-tree");
-    expect(await response.text()).toContain("tree shell");
-  });
-});

wolai-frontend/src/app/api/tree/shell/route.ts

@@ -1,80 +0,0 @@
-import { NextResponse } from "next/server";
-import { resolveMnoteWebInternalUrl } from "@/lib/mnote-web/internal-url";
-import { buildForwardHeaders } from "@/lib/server/forward-headers";
-
-export const dynamic = "force-dynamic";
-export const runtime = "nodejs";
-
-const stripHopByHopHeaders = (headers: Headers) => {
-  // 说明：代理响应不应继续透传 hop-by-hop headers，避免浏览器拿到无效连接语义。
-  const hopByHopHeaders = [
-    "connection",
-    "keep-alive",
-    "proxy-authenticate",
-    "proxy-authorization",
-    "te",
-    "trailer",
-    "transfer-encoding",
-    "upgrade",
-    "content-length",
-  ];
-  hopByHopHeaders.forEach((name) => headers.delete(name));
-};
-
-export async function GET(request: Request) {
-  try {
-    const requestUrl = new URL(request.url);
-    const debugEnabled =
-      requestUrl.searchParams.get("debug") === "1" ||
-      requestUrl.searchParams.get("internal") === "1" ||
-      process.env.MNOTE_WEB_ENABLE_DEBUG_SHELL_ROUTES === "1";
-    if (!debugEnabled) {
-      return NextResponse.json(
-        {
-          error: "tree shell proxy 默认关闭；主路径使用 3000 inline rust compat host",
-        },
-        { status: 404 },
-      );
-    }
-
-    const internalBaseUrl = await resolveMnoteWebInternalUrl();
-    const targetUrl = new URL("/tree", `${internalBaseUrl}/`);
-    targetUrl.search = requestUrl.search;
-
-    const headers = await buildForwardHeaders(request);
-    headers.set("accept", "text/html,application/xhtml+xml");
-    headers.set("x-mnote-source-channel", "next_tree_shell_proxy");
-    headers.set("x-mnote-source-client", "wolai-frontend");
-
-    const workspaceId = requestUrl.searchParams.get("workspaceId")?.trim();
-    if (workspaceId && !headers.has("x-mnote-workspace-id")) {
-      headers.set("x-mnote-workspace-id", workspaceId);
-    }
-
-    const upstream = await fetch(targetUrl.toString(), {
-      method: "GET",
-      headers,
-      cache: "no-store",
-      redirect: "manual",
-    });
-    const body = await upstream.arrayBuffer();
-    const responseHeaders = new Headers(upstream.headers);
-    stripHopByHopHeaders(responseHeaders);
-    responseHeaders.delete("set-cookie");
-    responseHeaders.set("cache-control", "no-store");
-
-    return new NextResponse(body, {
-      status: upstream.status,
-      statusText: upstream.statusText,
-      headers: responseHeaders,
-    });
-  } catch (error) {
-    const message = error instanceof Error ? error.message : "tree shell 代理失败";
-    return NextResponse.json(
-      {
-        error: message,
-      },
-      { status: 502 },
-    );
-  }
-}