fix: canonicalize public memroos host

Author: Alba [bot]

apps/memroos/public/landing/index.html

@@ -17,6 +17,7 @@
 <meta name="twitter:title" content="MemroOS - The Memory Layer for AI Agents">
 <meta name="twitter:description" content="Shared memory and governed orchestration for agentic product, sales, and engineering workflows.">
 <meta name="twitter:image" content="https://memroos.com/screenshots/memroos-og.png">
+<link rel="canonical" href="https://memroos.com/">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">
 

apps/memroos/src/__tests__/proxy.test.ts

@@ -455,6 +455,17 @@ describe("proxy", () => {
     );
   });
 
+  it("redirects www public traffic to the canonical apex host", async () => {
+    const response = await proxy(
+      new NextRequest("https://www.memroos.com/blog?ref=gsc", {
+        headers: { host: "www.memroos.com" },
+      })
+    );
+
+    expect(response.status).toBe(308);
+    expect(response.headers.get("location")).toBe("https://memroos.com/blog?ref=gsc");
+  });
+
   it("allows analytics and Google Fonts endpoints in the content security policy", async () => {
     const response = await proxy(
       new NextRequest("https://memroos.com/", {

apps/memroos/src/app/__tests__/landing-research-paper.test.ts

@@ -62,6 +62,7 @@ describe("public landing research proof", () => {
 
     const landingSource = readFileSync(landingIndexPath, "utf8");
     expect(landingSource).toContain("See the actual product");
+    expect(landingSource).toContain('<link rel="canonical" href="https://memroos.com/">');
     expect(landingSource).toContain("data-shot=\"dispatch\"");
     expect(landingSource).toContain("/landing/assets/shots/operator-floor.png");
     expect(landingSource).toContain("/landing/styles/memroos-refresh.css");

apps/memroos/src/proxy.ts

@@ -10,6 +10,8 @@ const PUBLIC_HOSTS = new Set([
   "memroos.vercel.app",
   "memroos.localhost",
 ]);
+const CANONICAL_PUBLIC_HOST = "memroos.com";
+const WWW_PUBLIC_HOST = "www.memroos.com";
 const LEGACY_HOSTS = new Set(["memroos.dev", "www.memroos.dev"]);
 const DEFAULT_HTTPS_APP_HOSTS = new Set<string>();
 
@@ -236,6 +238,13 @@ export async function proxy(request: NextRequest): Promise<NextResponse> {
     return NextResponse.redirect("https://memroos.com/", 308);
   }
 
+  if (host === WWW_PUBLIC_HOST) {
+    const canonicalUrl = request.nextUrl.clone();
+    canonicalUrl.protocol = "https:";
+    canonicalUrl.hostname = CANONICAL_PUBLIC_HOST;
+    return withSecurityHeaders(NextResponse.redirect(canonicalUrl, 308));
+  }
+
   // Public marketing host: serve landing assets, redirect everything else to "/"
   if (isPublicLandingHost(host)) {
     if (isUnderstandRoute) {