fix: read correct session cookie for auth-aware nav

[makeitraina]

What

Changes the SESSION_COOKIE constant in src/lib/auth-script.ts from "assembly_session" (a placeholder) to "current-portal-session" (the cookie the dashboard actually sets).

Why

Now that the marketing site serves from assembly.com, the current-portal-session cookie set by the dashboard on .assembly.com is visible to the marketing site. The auth-aware UI (showing "Open Assembly" for signed-in users vs "Log in" + "Get started" for signed-out) was already fully built but never activated because the script was looking for a cookie name that nothing sets.

This also affects:

• Pricing page — hides the Free tier for signed-in users
• CTAs site-wide — AuthLink components swap between "Get started" and "Open Assembly" / "Add app to workspace"

Screenshots

No visual changes to the components themselves — the auth-only / unauth-only CSS mechanism and nav markup are unchanged. The fix just makes the detection read the right cookie so the existing toggle actually fires.

To test on a preview URL (not on .assembly.com), append ?authed=1 to simulate signed-in or ?authed=0 for signed-out.

Checklist

• npm run build passes
• Tested on mobile and desktop
• Preview deploy looks correct

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
assembly-studio-website	Ready	Preview	Aug 24, 2026 5:27pm

[greptile-apps]

Greptile Summary

Updates the auth-aware presentation bridge to detect the session cookie currently set by the Assembly dashboard.

• Replaces the placeholder assembly_session cookie name with current-portal-session.
• Updates comments to describe the shared .assembly.com cookie contract and preview override behavior.

Confidence Score: 5/5

The PR appears safe to merge, with no actionable correctness or security issues identified.

The change is narrowly scoped to the cookie-name contract used by the existing auth-aware presentation logic, and the affected consumers continue to receive the same boolean auth-state signal.

Important Files Changed

Filename	Overview
src/lib/auth-script.ts	Aligns the client-side session-cookie lookup with the dashboard cookie name; no actionable defect was established.

_{Reviews (1): Last reviewed commit: "fix: read the correct session cookie for..." | Re-trigger Greptile}