`context.session` is accessed on prerendered public routes, breaking `export const prerender = true`

[hayatosc]

Description

When using EmDash with Astro, setting export const prerender = true on a public page causes runtime errors because EmDash middleware accesses context.session even on prerendered routes.

Problem

EmDash middleware reads context.session on public routes without checking whether the route is prerendered.

emdash/packages/core/src/astro/middleware.ts

Line 201 in 7aa3de2

const sessionUser = await context.session?.get("user");

emdash/packages/core/src/astro/middleware.ts

Line 353 in 7aa3de2

const isAuthenticated = !!(await context.session?.get("user"));

Fix

On public route, avoid any context.session access when context.isPrerendered is true.

for example:

const sessionUser = context.isPrerendered
    ? null
    : await context.session?.get("user");

Steps to reproduce

1. Create an EmDash site with output: "server" and the EmDash integration enabled.
2. In a public page such as src/pages/index.astro, add:

export const prerender = true

3. Start dev server
4. Go http://localhost:4321

Environment

• emdash: 0.1.0
• astro: 6.1.3
• @astrojs/cloudflare: 13.1.7