From c5aa2f0e40aba4f316844a2ac95ec7d5987399c8 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeffemmett@gmail.com>
Date: Fri, 10 Apr 2026 17:29:54 -0400
Subject: [PATCH] fix: exclude manifest.json, sw.js, textures from auth
 middleware

PWA manifest and service worker must be accessible without the access
cookie for browser installability checks to work.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 middleware.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/middleware.ts b/middleware.ts
index 775ca0e..896c865 100644
--- a/middleware.ts
+++ b/middleware.ts
@@ -20,6 +20,6 @@ export const config = {
      * - /_next (Next.js internals)
      * - /favicon.ico, /icon*, /apple-icon*, /og-image* (static assets)
      */
-    "/((?!gate|api/verify-code|api/version|_next|favicon\\.ico|icon|apple-icon|og-image).*)",
+    "/((?!gate|api/verify-code|api/version|_next|favicon\\.ico|icon|apple-icon|og-image|manifest\\.json|sw\\.js|textures/).*)",
   ],
 }