@8ux-co/eelzap 0.10.2 → 0.11.1

package/CHANGELOG.md

@@ -5,6 +5,65 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.11.1] - 2026-10-16
+
+### Added
+
+- Install marker (#1113): `ZapPreview` (`./react` and `./next`) now renders `<meta name="zap-client" content="<version>" data-site="<siteKey>">`, server-side and without JavaScript (React 19 hoists it into `<head>`). Zap reads it to show «Instalado» in site settings without opening a preview. No record tag and no stega: a published page stays untagged. The marker's version lives in `src/version.ts`, held equal to the runtime's by a spec.
+- `previewPath` (the «Ruta en tu sitio» of a collection or a document) now comes back on reads, not only on `update()`: `collections.list()`, `collections.get()`, `documents.list()` and `documents.get()` carry it, `null` when unset, so a seed or infrastructure-as-code can detect drift. Server code with a `secret_` key or a suite credential only; a `public_` key's answer is unchanged.
+- `structured-values` capability in `zap:ready`. To a client that has it, the editor sends a CURRENCY field's live value as `{ amountMinor, currency, text }` and an ENUM's as `{ value, label }`, the delivery API's shapes; the overlay writes `text` / `label`, and `useZapLiveUpdates` / `mergeLiveValues` merge `{ amountMinor, currency, amount, text }` and `{ value, label }`, so code reading `price.amountMinor` or `category.value` keeps working while the editor types. Clients without it keep getting text.
+- `data-zap-site-renders` and `fields(…).derived(key)`: mark an element that shows what your site computes from a field (an italic-split title, a long text split into paragraphs, an uppercased label). The overlay outlines it, opens the field on a click and anchors comments to it, and never writes into it; stega markers inside it are not indexed. The value is `recordRef#fieldKey`, or a bare field key inside `data-zap-entry`. Your site keeps the element current with `useZapLiveUpdates` or `onValues`.
+- `CurrencyValue.amount` (reads): the amount in major units, `amountMinor` divided by ten to the currency's ISO 4217 exponent.
+
+### Changed
+
+- Smoother scroll sync in Comparar. The page that follows applies the latest `zap:scroll-to` once per animation frame, always instantly (a site's `scroll-behavior: smooth` no longer animates against the next update), instead of every message as it arrives. `zap:scroll` now anchors to the last tagged field at or above the viewport's top and adds two optional fields, `next` (`{ recordRef, fieldKey, nth }`, the tagged field below it) and `progress` (0..1, how far the top is from one to the other); the following page places its top that far between its own two fields, so it no longer jumps when the anchor changes on pages that space their fields differently. Both fields are optional: a 0.11.0 page or editor ignores them and keeps the anchor and offset.
+- The delivery API's `amount` on a CURRENCY value is in major units (`48000` for COP `amountMinor: 4800000`, `4800` for JPY `4800`); it used to repeat `amountMinor`.
+- The currency exponent table adds the four-digit codes (CLF, UYW).
+- «Editar» on a CURRENCY field is a text input in the reader's locale: it shows `46.000` (es) or `46,000.00` (en), and reads typed or pasted text the way Zap's own money field does, so `30.000` in es-CO, `$ 30.000` and `30,000.50` save the amount you meant. It used to read `30.000` as thirty.
+- `zap:ready` reports client version `0.11.1`.
+
+## [0.11.0] - 2026-10-08
+
+### Added
+
+- Comparar support in the preview client, for Zap's side-by-side view of the published page and the draft. Two new capabilities in `zap:ready`, so the editor offers each only to a client that has it:
+  - `scroll-sync`: `zap:scroll-sync` `{ enabled }` turns on `zap:scroll` `{ y, x?, anchor? }` reports, one per animation frame at most, with the scroll position as fractions and the tagged field nearest the top as an anchor (`{ recordRef, fieldKey, nth, offset }`). `zap:scroll-to` (same shape) places the page by the anchor, or by the fraction when the page lacks that field, and is never reported back, so two frames cannot chase each other.
+  - `diff-marks`: `zap:marks` `{ marks: [{ recordRef, fieldKey, tone, label, active? }] }` (up to 200) marks every element of each field, red for `removed` and green for `added`, the active change tinted and named. An empty list clears them; marks follow scrolling and re-rendering.
+- The editor bridge (`@8ux-co/eelzap/internal/editor`) adds `setScrollSync`, `scrollTo`, `setMarks` and the `onScroll` handler.
+- Opt-in fragment transport for preview tokens (#947). The client advertises
+  `fragment-token` to the editor and sends `tokenTransport: 'fragment'` to the
+  live-site session API. Without either opt-in, legacy query URLs remain the
+  default, so sites on SDK 0.10.2 and earlier keep working, including the editor's
+  first load before the client announces its capabilities.
+- `createDraftModeRoute` exchanges fragment tokens through a same-origin POST
+  body and redirects with `303` to a validated clean path. Its exchange page
+  loads an external script from the same route (`?script=1`), supporting
+  `script-src 'self'`. POST requires `Sec-Fetch-Site: same-origin` or an `Origin`
+  equal to the request's own origin; otherwise it returns `403` without cookies.
+
+### Changed
+
+- `zap:ready` reports client version `0.11.0`.
+- The 0.11 client renews live-site draft sessions with a same-origin POST to the
+  site's draft route.
+
+### Migration
+
+- **Upgrading to 0.11 requires the site's draft route to export `POST` as well
+  as `GET`**, for example `export const POST = createDraftModeRoute({ … })` and
+  `export const GET = POST` (see the README), or `export const { GET, POST } = …`
+  in an equivalent wrapper. A route that exports only `GET` answers `405` to the
+  new client and editor preview breaks. Upgrade the route handler and the
+  browser client together. Sites on the script-tag (CDN boot) snippet that adopt
+  the new snippet need the same `GET` and `POST` route.
+- Legacy `GET ?token=…` remains supported for older clients; its query tokens
+  can still appear in site request logs. Only fragment exchanges keep tokens out
+  of request URLs.
+- Deploy order: Zap must ship to production (the session API's
+  `tokenTransport: 'fragment'` and the 0.11.0 CDN bundles) before 0.11.0 is
+  published to npm, since the published boot pins those bundles by path and SRI.
+
 ## [0.10.2] - Unreleased
 
 ### Added

package/README.md

@@ -66,7 +66,7 @@ const { data: posts } = await cms.items.list('blog-posts', {
 | `retry`          | `boolean \| RetryOptions`         | No       | On                       |
 
 `apiKey` is a site API key (`secret_…` or `public_…`), or a preview token
-(`zpt_…`) from a draft-mode URL.
+(`zpt_…`) from a draft-mode exchange.
 
 ### Draft preview
 
@@ -107,8 +107,10 @@ createClient({
 
 ### Rate limits and retries
 
-A site key may send 100 requests a minute (`public_`: 60), and past that the
-API answers `429` with `Retry-After`. The client waits that long and tries
+A site key may send 300 requests a minute (`public_`: 180), all at once after a
+quiet spell, and a published read the API has already answered, with nothing
+changed on the site since, is served from its cache for free (`X-Zap-Cache:
+HIT`). Past the limit the API answers `429` with `Retry-After`. The client waits that long and tries
 again, so a build that renders every page, or a seed script, does not fail
 half-way. A `503` that carries `Retry-After` is retried the same way.
 
@@ -404,22 +406,49 @@ export default async function RootLayout({ children }: { children: React.ReactNo
 import { cookies, draftMode } from 'next/headers'
 import { createDraftModeRoute } from '@8ux-co/eelzap/next'
 
-export const GET = createDraftModeRoute({
+export const POST = createDraftModeRoute({
   siteKey: 'your-site-key',
   apiKey: process.env.EELZAP_API_KEY!, // one of the site's own API keys
   draftMode,
   cookies,
 })
+export const GET = POST
 ```
 
 `<ZapPreview />` tells the editor where the route lives (`/api/zap-preview`
 by default; `draftRoute="/es/preview"` or `draftRoute={null}` otherwise).
 The page names only a path: the editor joins it to the page's own verified
-origin, mints a ten-minute preview token and loads
-`{origin}{route}?token=…&path=…`. The route checks the token with Zap
-(minted for this site, live), enables draft mode with cookies that survive
-inside Zap's frame (`SameSite=None; Secure; Partitioned`) and redirects to the
-page without the token. `createDraftModeExitRoute({ draftMode })` ends it.
+origin and mints a ten-minute preview token. The editor uses the legacy
+`{origin}{route}?token=…&path=…` unless the site's client has announced the
+`fragment-token` capability. The new client advertises that capability; the
+editor then uses `{origin}{route}#token=…&path=…`. Before the first ready/hello
+message, it keeps the query form, so older clients keep working.
+
+URL fragments never reach the HTTP server or its request logs. The route's
+tiny exchange page loads its script from the same route (`?script=1`,
+`application/javascript`), so `script-src 'self'` works without an inline
+script. The script clears the fragment
+from browser history, then submits `token` and `path` in an
+`application/x-www-form-urlencoded` POST body to the same clean route URL.
+POST requires `Sec-Fetch-Site: same-origin` or an `Origin` header equal to the
+request's own origin. Other POSTs, including those missing both headers,
+return `403` without setting cookies. The route checks the token with Zap
+(minted for this site, live), enables
+draft mode with cookies that survive inside Zap's frame
+(`SameSite=None; Secure; Partitioned`) and answers `303` to the clean `path`.
+The target must be a same-origin relative path beginning with a single `/`;
+external URLs, protocol-relative paths, backslashes, control characters and
+paths containing preview tokens are refused. `createDraftModeExitRoute({ draftMode })`
+ends it.
+
+Upgrade the site's route handler and browser client together and export both
+`GET` and `POST` as above before opting into the new exchange. The new live-site
+client sends `tokenTransport: 'fragment'` to `POST /api/public/v1/preview/session`
+and renews drafts with a same-origin POST. Without that field, the API returns
+the legacy query URL. Legacy `GET ?token=…&path=…` remains supported and keeps
+older sites working; those requests can still expose tokens to URL logs.
+Live-site draft-session renewal uses a POST body directly, without navigating
+the tab or putting a token in a request URL.
 
 Read drafts on the server with the token as the credential:
 
@@ -563,6 +592,20 @@ the unsaved values merged in, and `onValues(entry, handler)` from
 `@8ux-co/eelzap/react` calls you with each patch (it is framework-free; the
 overlay also announces each patch as an `eelzap:values` window event).
 
+When an element shows something your code builds from a field (a title split
+around an italic word, a long text split into paragraphs, an uppercased
+label), spread `f.derived('title')` on it, or write
+`data-zap-site-renders="blog-posts/my-post#title"` by hand (a bare field key
+inside `data-zap-entry`). The overlay still outlines it, opens the field on a
+click and anchors comments to it, but never writes into it: your component
+re-renders it from `useZapLiveUpdates` or `onValues`.
+
+```tsx
+const live = useZapLiveUpdates(post)
+const [head, tail] = splitTitle(cleanStega(live.content.title))
+<h1 {...fields(post).derived('title')}>{head} <em>{tail}</em></h1>
+```
+
 ### Suggestions on the live site
 
 With `siteId`, people with a Zap seat in your workspace can suggest changes on

package/dist/{chunk-T6S3S5RH.js → chunk-G2JAAZKS.js}

@@ -62,14 +62,22 @@ var MAX_URL_LENGTH = 2048;
 var MAX_TAG_REPORT = 2e3;
 var MAX_LABELS = 500;
 var MAX_PINS = 50;
+var MAX_MARKS = 200;
+var MAX_MARK_LABEL = 200;
+var MAX_ANCHOR_NTH = 5e3;
 var OVERLAY_MODES = ["inspect", "select", "spot", "off"];
+var MAX_CAPABILITIES = 32;
 var CAPABILITIES = [
   "overlay",
   "values",
   "stega",
   "pins",
   "links",
-  "refresh"
+  "refresh",
+  "scroll-sync",
+  "diff-marks",
+  "fragment-token",
+  "structured-values"
 ];
 var MAX_EMAIL_LENGTH = 320;
 function emptyDropStats() {
@@ -151,13 +159,30 @@ function isPin(value) {
 function isFieldRef(value) {
   return isObject(value) && isRecordRef(value.recordRef) && isFieldKey(value.fieldKey);
 }
+function isScrollRef(value) {
+  return isFieldRef(value) && Number.isInteger(value.nth) && isFiniteNumber(value.nth, 0, MAX_ANCHOR_NTH);
+}
+function isScrollPayload(value) {
+  if (!isObject(value) || !isFiniteNumber(value.y, 0, 1)) return false;
+  if (value.x !== void 0 && !isFiniteNumber(value.x, 0, 1)) return false;
+  if (value.progress !== void 0 && !isFiniteNumber(value.progress, 0, 1)) return false;
+  const anchor = value.anchor;
+  return isOptional(value.next, isScrollRef) && (anchor === void 0 || isScrollRef(anchor) && isFiniteNumber(anchor.offset, -1e7, 1e7));
+}
+function isDiffMark(value) {
+  return isFieldRef(value) && (value.tone === "removed" || value.tone === "added") && isString(value.label, MAX_MARK_LABEL) && (value.active === void 0 || typeof value.active === "boolean");
+}
 function isPreviewValue(value) {
   if (value === null || typeof value === "boolean") return true;
   if (typeof value === "string") return true;
   if (typeof value === "number") return Number.isFinite(value);
   if (!isObject(value)) return false;
-  const keys = Object.keys(value);
-  if (keys.length !== 1) return false;
+  const keys = Object.keys(value).sort().join(",");
+  if (keys === "amountMinor,currency,text") {
+    return Number.isSafeInteger(value.amountMinor) && isString(value.currency, 8) && typeof value.text === "string";
+  }
+  if (keys === "label,value") return isString(value.value, 2e3) && isString(value.label, 2e3);
+  if (keys.includes(",")) return false;
   if ("text" in value) return typeof value.text === "string";
   if ("html" in value) return typeof value.html === "string";
   if ("url" in value) return isString(value.url, MAX_URL_LENGTH);
@@ -203,7 +228,10 @@ function parseTag(value) {
   return { recordRef, fieldKey };
 }
 var PAGE_VALIDATORS = {
-  "zap:ready": (p) => isObject(p) && isString(p.version, 32) && Array.isArray(p.capabilities) && p.capabilities.length <= CAPABILITIES.length && p.capabilities.every((c) => CAPABILITIES.includes(c)) && isHttpUrl(p.pageUrl) && (p.draftRoute === void 0 || p.draftRoute === null || isDraftRoutePath(p.draftRoute)),
+  "zap:ready": (p) => isObject(p) && isString(p.version, 32) && Array.isArray(p.capabilities) && // A capability this editor does not know is IGNORED, never a refusal: a
+  // newer client on a site must not go dark against an editor that has not
+  // shipped its protocol yet (#953, 0.11.0 added two). Bounded all the same.
+  p.capabilities.length <= MAX_CAPABILITIES && p.capabilities.every((c) => isString(c, 32)) && isHttpUrl(p.pageUrl) && (p.draftRoute === void 0 || p.draftRoute === null || isDraftRoutePath(p.draftRoute)),
   "zap:tags": (p) => Array.isArray(p) && p.length <= MAX_TAG_REPORT && p.every(
     (t) => isObject(t) && typeof t.tag === "string" && isRecordRef(t.recordRef) && isFieldKey(t.fieldKey) && t.tag === `${t.recordRef}#${t.fieldKey}` && Number.isInteger(t.count) && t.count > 0 && (t.source === void 0 || t.source === "stega" || t.source === "attr")
   ),
@@ -213,7 +241,8 @@ var PAGE_VALIDATORS = {
   "zap:error": (p) => isObject(p) && typeof p.code === "string" && ERROR_CODE_RE.test(p.code) && isOptional(p.detail, (d) => isString(d, 500)),
   "zap:spot": (p) => isObject(p) && isSpotPoint(p.spot) && isObject(p.viewport) && isFiniteNumber(p.viewport.w, 1, 1e5) && isFiniteNumber(p.viewport.h, 1, 1e7) && isHttpUrl(p.pageUrl),
   "zap:pin": (p) => isObject(p) && isPinId(p.id),
-  "zap:paused": (p) => isObject(p) && (p.reason === "runaway" || p.reason === "cap") && Number.isInteger(p.count) && p.count >= 0
+  "zap:paused": (p) => isObject(p) && (p.reason === "runaway" || p.reason === "cap") && Number.isInteger(p.count) && p.count >= 0,
+  "zap:scroll": isScrollPayload
 };
 var EDITOR_VALIDATORS = {
   "zap:hello": (p) => {
@@ -239,7 +268,10 @@ var EDITOR_VALIDATORS = {
   "zap:zoom": (p) => isObject(p) && isZoom(p.zoom),
   "zap:refresh": isObject,
   "zap:highlight": (p) => isObject(p) && isAnchorList(p.anchors, isDomAnchor),
-  "zap:pins": (p) => isObject(p) && Array.isArray(p.pins) && p.pins.length <= MAX_PINS && p.pins.every(isPin)
+  "zap:pins": (p) => isObject(p) && Array.isArray(p.pins) && p.pins.length <= MAX_PINS && p.pins.every(isPin),
+  "zap:scroll-sync": (p) => isObject(p) && typeof p.enabled === "boolean",
+  "zap:scroll-to": isScrollPayload,
+  "zap:marks": (p) => isObject(p) && Array.isArray(p.marks) && p.marks.length <= MAX_MARKS && p.marks.every(isDiffMark)
 };
 var PAGE_MESSAGE_TYPES = /* @__PURE__ */ Object.keys(PAGE_VALIDATORS);
 var EDITOR_MESSAGE_TYPES = /* @__PURE__ */ Object.keys(
@@ -528,6 +560,10 @@ var DEFAULT_THEME = {
 };
 var SELECTED_TINT = "rgba(207,135,0,0.10)";
 var CHECK_SVG = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M20 6 9 17l-5-5"/></svg>';
+var TONES = {
+  removed: ["#FB2C36", "rgba(251,44,54,0.08)", "#C10007", "\u2212"],
+  added: ["#00C950", "rgba(0,201,80,0.08)", "#008236", "+"]
+};
 var Overlay = class {
   constructor(options) {
     __publicField(this, "options", options);
@@ -543,6 +579,7 @@ var Overlay = class {
     __publicField(this, "highlighted", []);
     __publicField(this, "selected", []);
     __publicField(this, "pins", []);
+    __publicField(this, "marks", []);
     __publicField(this, "pending", null);
     __publicField(this, "capture", null);
     __publicField(this, "frame", null);
@@ -669,6 +706,11 @@ var Overlay = class {
     this.pins = pins.slice(0, MAX_PINS);
     this.clearPending();
   }
+  /** Draw these diff marks (Comparar), in every mode; an empty list clears them. */
+  setMarks(marks) {
+    this.marks = marks.slice();
+    this.schedule();
+  }
   /** Drop the pending spot pin. */
   clearPending() {
     this.pending = null;
@@ -688,7 +730,8 @@ var Overlay = class {
     const nodes = Array.from(this.layer?.children ?? []);
     const boxes = nodes.filter((node) => node.className === "box").map((node) => ({
       kind: node.dataset.kind,
-      label: node.querySelector(".chip")?.textContent ?? null
+      label: node.querySelector(".chip")?.textContent ?? null,
+      ...node.dataset.tone ? { tone: node.dataset.tone } : {}
     }));
     const capture = this.capture?.style.display === "block" ? this.capture : null;
     return { boxes, pins: nodes.filter((n) => n.className === "pin"), capture, zoom: this.zoom };
@@ -810,7 +853,12 @@ var Overlay = class {
   render() {
     const layer = this.layer;
     if (!layer) return;
-    const boxes = [];
+    const boxes = this.marks.filter((mark) => mark.element.isConnected).map(({ element, tone, label, active }) => ({
+      element,
+      kind: "mark",
+      label: active ? label : null,
+      mark: { tone, active }
+    }));
     const seen = /* @__PURE__ */ new Set();
     const add = (element, kind) => {
       if (seen.has(element) || !element.isConnected) return;
@@ -894,14 +942,17 @@ var Overlay = class {
     node.className = "box";
     node.dataset.kind = box.kind;
     const offset = 3 / z;
+    const mark = box.mark;
+    const [markOutline, markTint, markChip, sign] = mark ? TONES[mark.tone] : [];
+    if (mark) node.dataset.tone = mark.tone;
     Object.assign(node.style, {
       left: `${rect.left - offset}px`,
       top: `${rect.top - offset}px`,
       width: `${rect.width + offset * 2}px`,
       height: `${rect.height + offset * 2}px`,
-      outline: `${px(2)} solid ${this.theme.outline}`,
+      outline: mark ? mark.active ? `${px(2)} solid ${markOutline}` : `${px(1.5)} dashed ${markOutline}` : `${px(2)} solid ${this.theme.outline}`,
       borderRadius: px(3),
-      background: box.kind === "selected" ? SELECTED_TINT : "transparent"
+      background: box.kind === "selected" ? SELECTED_TINT : mark?.active ? markTint : "transparent"
     });
     const tooSmall = box.kind === "selected" && box.element !== this.hover && Math.min(rect.width, rect.height) * z < CHIP_HEIGHT_PX;
     if (box.label && box.kind !== "highlight" && !tooSmall) {
@@ -917,9 +968,15 @@ var Overlay = class {
         gap: px(4),
         borderRadius: px(6),
         fontSize: px(12),
-        background: this.theme.chip,
-        color: this.theme.chipText
+        background: markChip ?? this.theme.chip,
+        color: mark ? "#FFFFFF" : this.theme.chipText
       });
+      if (sign) {
+        const glyph = doc.createElement("span");
+        glyph.className = "sign";
+        glyph.textContent = sign;
+        chip.appendChild(glyph);
+      }
       if (box.kind === "selected") {
         const icon = doc.createElement("span");
         icon.className = "icon";
@@ -959,6 +1016,7 @@ var STYLES = `
   letter-spacing: 0; text-transform: none; font-style: normal; box-sizing: border-box;
 }
 .of { font-weight: 400; opacity: .72; }
+.sign { font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace; }
 .capture { position: fixed; inset: 0; pointer-events: auto; cursor: crosshair; display: none; }
 .pin {
   position: fixed; box-sizing: border-box; pointer-events: auto; cursor: pointer; text-align: center;
@@ -970,10 +1028,26 @@ var STYLES = `
 `;
 
 // src/preview/tags.ts
-var TAG_SELECTOR = "[data-zap],[data-zap-field]";
+var TAG_SELECTOR = "[data-zap],[data-zap-field],[data-zap-site-renders]";
+var SITE_RENDERS_SELECTOR = "[data-zap-site-renders]";
 function readElementTag(element) {
   const locale = readLocale(element);
   const html = element.hasAttribute("data-zap-html");
+  const siteRenders = element.getAttribute("data-zap-site-renders");
+  if (siteRenders !== null) {
+    const value = siteRenders.trim();
+    if (value.includes("#")) {
+      const parsed = parseTag(value);
+      if (!parsed) {
+        return { ok: false, problem: { attribute: "data-zap-site-renders", value: clip(value) } };
+      }
+      return {
+        ok: true,
+        tagged: build(element, parsed.recordRef, parsed.fieldKey, locale, false, true)
+      };
+    }
+    return readEntryField(element, value, "data-zap-site-renders", locale, false, true);
+  }
   const direct = element.getAttribute("data-zap");
   if (direct !== null) {
     const parsed = parseTag(direct);
@@ -982,18 +1056,21 @@ function readElementTag(element) {
   }
   const field = element.getAttribute("data-zap-field");
   if (field === null) return null;
+  return readEntryField(element, field, "data-zap-field", locale, html, false);
+}
+function readEntryField(element, field, attribute, locale, html, siteRenders) {
   const fieldKey = field.trim();
   if (!parseTag(`doc:x#${fieldKey}`)) {
-    return { ok: false, problem: { attribute: "data-zap-field", value: clip(field) } };
+    return { ok: false, problem: { attribute, value: clip(field) } };
   }
   const container = element.closest("[data-zap-entry]");
   const entry = container?.getAttribute("data-zap-entry")?.trim();
   if (!entry || !parseRecordRef(entry)) {
     return { ok: false, problem: { attribute: "data-zap-entry", value: clip(entry ?? "") } };
   }
-  return { ok: true, tagged: build(element, entry, fieldKey, locale, html) };
+  return { ok: true, tagged: build(element, entry, fieldKey, locale, html, siteRenders) };
 }
-function build(element, recordRef, fieldKey, locale, html) {
+function build(element, recordRef, fieldKey, locale, html, siteRenders = false) {
   return {
     element,
     recordRef,
@@ -1001,7 +1078,8 @@ function build(element, recordRef, fieldKey, locale, html) {
     tag: `${recordRef}#${fieldKey}`,
     locale,
     html,
-    source: "attr"
+    source: "attr",
+    ...siteRenders ? { siteRenders: true } : {}
   };
 }
 var NON_RENDERED = /^(?:head|title|script|style|template|noscript|textarea)$/;
@@ -1053,6 +1131,7 @@ var TagIndex = class {
       if (!element || !hasStega(text.data)) continue;
       if (NON_RENDERED.test(element.localName) || element.closest("head")) continue;
       if (byElement.get(element)?.source === "attr") continue;
+      if (element.closest(SITE_RENDERS_SELECTOR)) continue;
       for (const found of stegaDecode(text.data)) {
         add(element, {
           element,
@@ -1145,7 +1224,13 @@ function observeTags(target, onChange, options = {}) {
     subtree: true,
     childList: true,
     attributes: true,
-    attributeFilter: ["data-zap", "data-zap-field", "data-zap-entry", "data-zap-locale"],
+    attributeFilter: [
+      "data-zap",
+      "data-zap-field",
+      "data-zap-entry",
+      "data-zap-locale",
+      "data-zap-site-renders"
+    ],
     characterData: true
   });
   return () => {
@@ -1184,6 +1269,9 @@ export {
   MAX_TAG_REPORT,
   MAX_LABELS,
   MAX_PINS,
+  MAX_MARKS,
+  MAX_MARK_LABEL,
+  MAX_ANCHOR_NTH,
   OVERLAY_MODES,
   CAPABILITIES,
   MAX_EMAIL_LENGTH,
@@ -1194,6 +1282,7 @@ export {
   isDraftRoutePath,
   isPinId,
   isPin,
+  isDiffMark,
   isPreviewValue,
   utf8Length,
   isDomAnchor,
@@ -1227,4 +1316,4 @@ export {
   DEFAULT_SHORTCUT,
   isShortcut
 };
-//# sourceMappingURL=chunk-T6S3S5RH.js.map
+//# sourceMappingURL=chunk-G2JAAZKS.js.map