@brandlab-digital/site-next 0.1.0-alpha.15 → 0.1.0-alpha.16

package/dist/headers.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Brandlab security/response headers (Brandlab Project Standard §2).
+ *
+ * One canonical header set for every client site, composed into
+ * `next.config.ts`:
+ *
+ *   async headers() {
+ *     return buildBrandlabHeaderRules({ isProduction })
+ *   }
+ *
+ * The X-Robots-Tag here carries snippet-display controls only; per-page
+ * indexation stays owned by Metadata.robots (noindex pages override via
+ * their <meta name="robots">).
+ */
+export interface BrandlabHeader {
+    key: string;
+    value: string;
+}
+export interface BrandlabHeaderRule {
+    source: string;
+    headers: BrandlabHeader[];
+}
+export declare const BRANDLAB_DEFAULT_PERMISSIONS_POLICY = "camera=(), microphone=(), geolocation=(self)";
+export declare const BRANDLAB_DEFAULT_X_ROBOTS_TAG = "max-snippet:-1, max-image-preview:large, max-video-preview:-1";
+export declare const BRANDLAB_HSTS_VALUE = "max-age=31536000; includeSubDomains; preload";
+export declare function buildBrandlabSecurityHeaders(options: {
+    isProduction: boolean;
+    permissionsPolicy?: string;
+    /** Pass null to omit the snippet-control header entirely. */
+    xRobotsTag?: string | null;
+    extraHeaders?: readonly BrandlabHeader[];
+}): BrandlabHeader[];
+export declare function buildBrandlabHeaderRules(options: {
+    isProduction: boolean;
+    source?: string;
+    permissionsPolicy?: string;
+    xRobotsTag?: string | null;
+    extraHeaders?: readonly BrandlabHeader[];
+}): BrandlabHeaderRule[];
+//# sourceMappingURL=headers.d.ts.map

package/dist/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,cAAc,EAAE,CAAA;CAC1B;AAED,eAAO,MAAM,mCAAmC,iDACA,CAAA;AAEhD,eAAO,MAAM,6BAA6B,kEACuB,CAAA;AAEjE,eAAO,MAAM,mBAAmB,iDACgB,CAAA;AAEhD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE;IACpD,YAAY,EAAE,OAAO,CAAA;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAkBnB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,YAAY,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC,GAAG,kBAAkB,EAAE,CAOvB"}

package/dist/headers.js

@@ -0,0 +1,43 @@
+/**
+ * Brandlab security/response headers (Brandlab Project Standard §2).
+ *
+ * One canonical header set for every client site, composed into
+ * `next.config.ts`:
+ *
+ *   async headers() {
+ *     return buildBrandlabHeaderRules({ isProduction })
+ *   }
+ *
+ * The X-Robots-Tag here carries snippet-display controls only; per-page
+ * indexation stays owned by Metadata.robots (noindex pages override via
+ * their <meta name="robots">).
+ */
+export const BRANDLAB_DEFAULT_PERMISSIONS_POLICY = 'camera=(), microphone=(), geolocation=(self)';
+export const BRANDLAB_DEFAULT_X_ROBOTS_TAG = 'max-snippet:-1, max-image-preview:large, max-video-preview:-1';
+export const BRANDLAB_HSTS_VALUE = 'max-age=31536000; includeSubDomains; preload';
+export function buildBrandlabSecurityHeaders(options) {
+    const xRobotsTag = options.xRobotsTag === undefined ? BRANDLAB_DEFAULT_X_ROBOTS_TAG : options.xRobotsTag;
+    return [
+        { key: 'X-Frame-Options', value: 'DENY' },
+        { key: 'X-Content-Type-Options', value: 'nosniff' },
+        { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
+        {
+            key: 'Permissions-Policy',
+            value: options.permissionsPolicy ?? BRANDLAB_DEFAULT_PERMISSIONS_POLICY,
+        },
+        ...(xRobotsTag ? [{ key: 'X-Robots-Tag', value: xRobotsTag }] : []),
+        ...(options.isProduction
+            ? [{ key: 'Strict-Transport-Security', value: BRANDLAB_HSTS_VALUE }]
+            : []),
+        ...(options.extraHeaders ?? []),
+    ];
+}
+export function buildBrandlabHeaderRules(options) {
+    return [
+        {
+            source: options.source ?? '/:path*',
+            headers: buildBrandlabSecurityHeaders(options),
+        },
+    ];
+}
+//# sourceMappingURL=headers.js.map

package/dist/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAYH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,8CAA8C,CAAA;AAEhD,MAAM,CAAC,MAAM,6BAA6B,GACxC,+DAA+D,CAAA;AAEjE,MAAM,CAAC,MAAM,mBAAmB,GAC9B,8CAA8C,CAAA;AAEhD,MAAM,UAAU,4BAA4B,CAAC,OAM5C;IACC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAA;IAEvF,OAAO;QACL,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE;QACzC,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE;QACnD,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,iCAAiC,EAAE;QACpE;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,OAAO,CAAC,iBAAiB,IAAI,mCAAmC;SACxE;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAMxC;IACC,OAAO;QACL;YACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;YACnC,OAAO,EAAE,4BAA4B,CAAC,OAAO,CAAC;SAC/C;KACF,CAAA;AACH,CAAC"}

package/dist/robots.d.ts

@@ -5,7 +5,6 @@ export interface BrandlabRobotsMetadata {
         disallow?: string;
     }>;
     sitemap?: string;
-    host?: string;
 }
 export declare function buildRobotsMetadata(options: {
     siteUrl: string;

package/dist/robots.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"robots.d.ts","sourceRoot":"","sources":["../src/robots.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAQD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,GAAG,sBAAsB,CAkBzB"}
+{"version":3,"file":"robots.d.ts","sourceRoot":"","sources":["../src/robots.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAQD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,GAAG,sBAAsB,CAoBzB"}

package/dist/robots.js

@@ -15,10 +15,12 @@ export function buildRobotsMetadata(options) {
             rules: [{ userAgent: '*', disallow: '/' }],
         };
     }
+    // No `host` directive: it is a non-standard robots.txt extension ignored
+    // by Google and Bing; canonical-host consolidation is owned by permanent
+    // edge redirects + canonical URLs (Brandlab Project Standard §5).
     return {
         rules: [{ userAgent: '*', allow: '/' }],
         sitemap: absoluteUrl(options.siteUrl, '/sitemap.xml'),
-        host: absoluteUrl(options.siteUrl, '/'),
     };
 }
 //# sourceMappingURL=robots.js.map

package/dist/robots.js.map

@@ -1 +1 @@
-{"version":3,"file":"robots.js","sourceRoot":"","sources":["../src/robots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAQtE,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;IAC/D,OAAO,GAAG,IAAI,GAAG,cAAc,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAKnC;IACC,MAAM,WAAW,GAAG,eAAe,CAAC;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAA;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;SAC3C,CAAA;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;QACrD,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;KACxC,CAAA;AACH,CAAC"}
+{"version":3,"file":"robots.js","sourceRoot":"","sources":["../src/robots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAOtE,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;IAC/D,OAAO,GAAG,IAAI,GAAG,cAAc,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAKnC;IACC,MAAM,WAAW,GAAG,eAAe,CAAC;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAA;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;SAC3C,CAAA;IACH,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;KACtD,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brandlab-digital/site-next",
-  "version": "0.1.0-alpha.15",
+  "version": "0.1.0-alpha.16",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -13,7 +13,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@brandlab-digital/site-core": "0.1.0-alpha.15"
+    "@brandlab-digital/site-core": "0.1.0-alpha.16"
   },
   "peerDependencies": {
     "next": ">=16",
@@ -43,6 +43,10 @@
     "./instrumentation-client": {
       "types": "./dist/instrumentation-client.d.ts",
       "import": "./dist/instrumentation-client.js"
+    },
+    "./headers": {
+      "types": "./dist/headers.d.ts",
+      "import": "./dist/headers.js"
     }
   }
 }