@businessdash/sdk 0.9.60 → 0.9.80

package/dist/legal-core/index.cjs

@@ -0,0 +1,115 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/legal-core/index.ts
+var index_exports = {};
+__export(index_exports, {
+  legalFooterLinks: () => legalFooterLinks,
+  legalLastUpdated: () => legalLastUpdated,
+  legalPageSeo: () => legalPageSeo,
+  legalSlugFrom: () => legalSlugFrom,
+  renderLegalPageHtml: () => renderLegalPageHtml,
+  resolveLegalPage: () => resolveLegalPage
+});
+module.exports = __toCommonJS(index_exports);
+function legalSlugFrom(input) {
+  if (!input) return "";
+  const joined = Array.isArray(input) ? input.join("/") : input;
+  return joined.trim().toLowerCase().replace(/^\/+|\/+$/g, "").replace(/\/{2,}/g, "/");
+}
+async function resolveLegalPage(options) {
+  const slug = legalSlugFrom(options.slug);
+  if (!slug) return null;
+  try {
+    return await options.client.legal.get(slug);
+  } catch {
+    return null;
+  }
+}
+function legalFooterLinks(list, options = {}) {
+  const items = Array.isArray(list) ? list : list.items;
+  const base = (options.basePath ?? "").replace(/\/+$/, "");
+  return items.filter((doc) => doc.showInFooter).map((doc) => ({ href: `${base}/${doc.slug}`, label: doc.title }));
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function legalLastUpdated(document, locale) {
+  if (!document.effectiveDate) return null;
+  const date = new Date(document.effectiveDate);
+  if (Number.isNaN(date.getTime())) return null;
+  return date.toLocaleDateString(locale, {
+    year: "numeric",
+    month: "long",
+    day: "numeric",
+    timeZone: "UTC"
+  });
+}
+function renderLegalPageHtml(document, options = {}) {
+  const presentation = document.presentation;
+  const className = options.className ?? "biab-legal";
+  const homeHref = options.homeHref ?? "/";
+  const updated = legalLastUpdated(document, options.locale);
+  const logo = (where) => {
+    const show = where === "header" ? presentation.showLogoInHeader : presentation.showLogoInFooter;
+    if (!show || !presentation.logoUrl) return "";
+    return `<a href="${escapeHtml(homeHref)}" data-biab-legal-logo-link><img src="${escapeHtml(presentation.logoUrl)}" alt="" data-biab-legal-logo="${where}" /></a>`;
+  };
+  const parts = [
+    `<article class="${escapeHtml(className)}" data-biab-legal>`,
+    "<header data-biab-legal-header>",
+    logo("header"),
+    presentation.headerHtml ?? "",
+    `<h1 data-biab-legal-title>${escapeHtml(document.title)}</h1>`,
+    updated ? `<p data-biab-legal-updated>Last updated: ${escapeHtml(updated)}</p>` : "",
+    "</header>",
+    `<div data-biab-legal-body>${document.contentHtml}</div>`,
+    "<footer data-biab-legal-footer>",
+    presentation.footerHtml ?? "",
+    logo("footer"),
+    "</footer>",
+    "</article>"
+  ];
+  return parts.filter(Boolean).join("");
+}
+function legalPageSeo(document, options = {}) {
+  const title = options.siteName ? `${document.title} \u2014 ${options.siteName}` : document.title;
+  return {
+    title,
+    // Built from the title rather than the body: the first sentence of a
+    // privacy policy is boilerplate ("This policy explains how…") and makes
+    // a description indistinguishable from every other company's.
+    description: options.siteName ? `The ${document.title.toLowerCase()} for ${options.siteName}.` : `Read our ${document.title.toLowerCase()}.`,
+    ...options.canonical === void 0 ? {} : { canonical: options.canonical },
+    openGraph: {
+      title,
+      type: "article",
+      ...options.canonical === void 0 ? {} : { url: options.canonical }
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  legalFooterLinks,
+  legalLastUpdated,
+  legalPageSeo,
+  legalSlugFrom,
+  renderLegalPageHtml,
+  resolveLegalPage
+});

package/dist/legal-core/index.d.ts

@@ -0,0 +1,160 @@
+/**
+ * `@businessdash/sdk/legal` — the org's legal pages, rendered on their site.
+ *
+ * Privacy policy, terms, refund policy: written once in the BusinessDash
+ * dashboard, and appearing on the org's own domain without anyone authoring a
+ * page for them.
+ *
+ * ## The design constraint that decides everything: your page must win
+ *
+ * A consumer who writes their own `/privacy` must keep it, and their build must
+ * not fail because we also wanted that path. There is a tempting wrong answer —
+ * generate `app/privacy/page.tsx` at install time — and it fails badly: two
+ * files claiming one route is a hard build error in Next, Remix, Nuxt, Astro,
+ * SvelteKit and TanStack Start alike. It turns "I wrote my own privacy page"
+ * into a broken deploy.
+ *
+ * So **this SDK never claims a literal path.** It gives you a resolver to mount
+ * in a CATCH-ALL route, and every one of those frameworks resolves a static
+ * segment before a catch-all:
+ *
+ * | Framework    | Your page              | The catch-all              |
+ * |--------------|------------------------|----------------------------|
+ * | Next (app)   | `app/privacy/page.tsx` | `app/[...slug]/page.tsx`   |
+ * | Remix / RR7  | `routes/privacy.tsx`   | `routes/$.tsx`             |
+ * | Astro        | `pages/privacy.astro`  | `pages/[...slug].astro`    |
+ * | Nuxt         | `pages/privacy.vue`    | `pages/[...slug].vue`      |
+ * | SvelteKit    | `routes/privacy/+page` | `routes/[...rest]/+page`   |
+ * | TanStack     | `routes/privacy.tsx`   | `routes/$.tsx`             |
+ *
+ * Write your own page and it simply shadows ours. No conflict, no build error,
+ * no configuration, and nothing to remove — the override is the framework's own
+ * routing precedence rather than anything we invented.
+ *
+ * The corollary: `resolveLegalPage()` returns `null` for a slug with no
+ * document, and your catch-all must then fall through to its normal 404. It is
+ * a resolver, not a router, precisely so it cannot swallow paths it has no
+ * business answering.
+ *
+ * ## What you render
+ *
+ * `contentHtml` is sanitised server-side when the org saves it, so it is safe
+ * to inject. The page is deliberately unstyled markup: legal pages should look
+ * like the rest of the site, and an SDK that shipped its own typography would
+ * be one more thing to override. `renderLegalPageHtml()` produces semantic HTML
+ * with stable `data-biab-legal-*` hooks you can style, or ignore entirely and
+ * build your own from the same data.
+ *
+ * @module
+ */
+import type { LegalDocument, LegalDocumentSummary, LegalListResponse, LegalPresentation } from "../contracts.js";
+/** The subset of the SDK client this module needs. */
+export type LegalClientLike = {
+    legal: {
+        list(): Promise<LegalListResponse>;
+        get(slug: string): Promise<LegalDocument>;
+    };
+};
+/**
+ * Turn a catch-all's path segments into a slug.
+ *
+ * Accepts what each framework actually hands you — an array of segments, a
+ * joined path, with or without leading slashes — because normalising this at
+ * every call site is how the two sides end up disagreeing about `/privacy/`
+ * versus `privacy`.
+ */
+export declare function legalSlugFrom(input: string | string[] | undefined): string;
+export type ResolveLegalPageOptions = {
+    client: LegalClientLike;
+    /** Whatever the catch-all captured. */
+    slug: string | string[] | undefined;
+};
+/**
+ * The document at this path, or null if there isn't one.
+ *
+ * **Null means fall through to your own 404.** Returning an "empty legal page"
+ * would put a bare heading reading "Privacy Policy" on every unmatched URL on
+ * the site, which is worse than a 404 in every way that matters — it is wrong
+ * for users, wrong for crawlers, and hides real routing mistakes.
+ *
+ * A network failure also returns null rather than throwing. A catch-all runs on
+ * every unmatched request, and an exception there takes down paths that have
+ * nothing to do with legal pages; a 404 during an outage is recoverable, a
+ * 500 on every unknown URL is not.
+ */
+export declare function resolveLegalPage(options: ResolveLegalPageOptions): Promise<LegalDocument | null>;
+/**
+ * The links an org wants in their footer.
+ *
+ * Filtered on `showInFooter`, which is separate from published on purpose: an
+ * org may need a document to exist at a URL they hand to a processor without
+ * putting it in front of every visitor.
+ */
+export declare function legalFooterLinks(list: LegalListResponse | LegalDocumentSummary[], options?: {
+    basePath?: string;
+}): Array<{
+    href: string;
+    label: string;
+}>;
+/**
+ * "Last updated" text, or null when the org never set a date.
+ *
+ * Uses `effectiveDate` in preference to `updatedAt`: a typo fix bumps
+ * `updatedAt` and should not tell every reader the terms changed. The org
+ * decides when a change was material by setting the effective date.
+ *
+ * ## Formatted in UTC, deliberately
+ *
+ * The dashboard stores a calendar date as midnight UTC, so formatting in the
+ * READER's zone shifts it a day for everyone west of UTC — an effective date of
+ * 1 August renders as "July 31" in New York. On a marketing page that is a
+ * cosmetic bug; on a document whose whole purpose is to say when terms changed,
+ * it is a wrong date shown to roughly half the audience.
+ */
+export declare function legalLastUpdated(document: Pick<LegalDocument, "effectiveDate">, locale?: string): string | null;
+export type RenderLegalPageOptions = {
+    /** Wrapped around everything. Defaults to `biab-legal`. */
+    className?: string;
+    /** Locale for the "Last updated" line. */
+    locale?: string;
+    /** Where the logo links to. Defaults to `/`. */
+    homeHref?: string;
+};
+/**
+ * Semantic markup for one document: header, title, body, footer.
+ *
+ * Unstyled by design. Every element carries a stable `data-biab-legal-*`
+ * attribute so a stylesheet can reach it, and none carries a class you would
+ * have to fight. If you want a different structure, read the same fields off
+ * the document and build your own — this is a convenience, not a requirement.
+ *
+ * `contentHtml`, `headerHtml` and `footerHtml` are inserted as-is because they
+ * were sanitised when the org saved them. The title and logo URL are escaped
+ * here, since they are plain values that have never been through a sanitiser.
+ */
+export declare function renderLegalPageHtml(document: LegalDocument, options?: RenderLegalPageOptions): string;
+/**
+ * Page metadata for a legal document.
+ *
+ * `noindex` is deliberately NOT set. Legal pages should be indexable: people
+ * search for "acme refund policy", and app stores and payment processors check
+ * that the URL you gave them resolves to something a crawler can see.
+ *
+ * Feed this to `@businessdash/sdk/seo-core`'s adapters, or spread it into your
+ * framework's own metadata export.
+ */
+export declare function legalPageSeo(document: LegalDocument, options?: {
+    siteName?: string;
+    canonical?: string;
+}): {
+    title: string;
+    description: string;
+    canonical?: string;
+    openGraph: {
+        title: string;
+        type: "article";
+        url?: string;
+    };
+};
+export type { LegalDocument, LegalDocumentSummary, LegalPresentation };
+//# sourceMappingURL=index.d.ts.map

package/dist/legal-core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/legal-core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,KAAK,EACX,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,iBAAiB,CAAC;AAEzB,sDAAsD;AACtD,MAAM,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE;QACN,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;KAC1C,CAAC;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,CAQ1E;AAED,MAAM,MAAM,uBAAuB,GAAG;IACrC,MAAM,EAAE,eAAe,CAAC;IACxB,uCAAuC;IACvC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAQ/B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC/B,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,EAAE,EAChD,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAMxC;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,EAC9C,MAAM,CAAC,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAUf;AAED,MAAM,MAAM,sBAAsB,GAAG;IACpC,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE,sBAA2B,GAClC,MAAM,CAqCR;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACrD;IACF,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D,CAqBA;AAED,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/legal-core/index.js

@@ -0,0 +1,220 @@
+/**
+ * `@businessdash/sdk/legal` — the org's legal pages, rendered on their site.
+ *
+ * Privacy policy, terms, refund policy: written once in the BusinessDash
+ * dashboard, and appearing on the org's own domain without anyone authoring a
+ * page for them.
+ *
+ * ## The design constraint that decides everything: your page must win
+ *
+ * A consumer who writes their own `/privacy` must keep it, and their build must
+ * not fail because we also wanted that path. There is a tempting wrong answer —
+ * generate `app/privacy/page.tsx` at install time — and it fails badly: two
+ * files claiming one route is a hard build error in Next, Remix, Nuxt, Astro,
+ * SvelteKit and TanStack Start alike. It turns "I wrote my own privacy page"
+ * into a broken deploy.
+ *
+ * So **this SDK never claims a literal path.** It gives you a resolver to mount
+ * in a CATCH-ALL route, and every one of those frameworks resolves a static
+ * segment before a catch-all:
+ *
+ * | Framework    | Your page              | The catch-all              |
+ * |--------------|------------------------|----------------------------|
+ * | Next (app)   | `app/privacy/page.tsx` | `app/[...slug]/page.tsx`   |
+ * | Remix / RR7  | `routes/privacy.tsx`   | `routes/$.tsx`             |
+ * | Astro        | `pages/privacy.astro`  | `pages/[...slug].astro`    |
+ * | Nuxt         | `pages/privacy.vue`    | `pages/[...slug].vue`      |
+ * | SvelteKit    | `routes/privacy/+page` | `routes/[...rest]/+page`   |
+ * | TanStack     | `routes/privacy.tsx`   | `routes/$.tsx`             |
+ *
+ * Write your own page and it simply shadows ours. No conflict, no build error,
+ * no configuration, and nothing to remove — the override is the framework's own
+ * routing precedence rather than anything we invented.
+ *
+ * The corollary: `resolveLegalPage()` returns `null` for a slug with no
+ * document, and your catch-all must then fall through to its normal 404. It is
+ * a resolver, not a router, precisely so it cannot swallow paths it has no
+ * business answering.
+ *
+ * ## What you render
+ *
+ * `contentHtml` is sanitised server-side when the org saves it, so it is safe
+ * to inject. The page is deliberately unstyled markup: legal pages should look
+ * like the rest of the site, and an SDK that shipped its own typography would
+ * be one more thing to override. `renderLegalPageHtml()` produces semantic HTML
+ * with stable `data-biab-legal-*` hooks you can style, or ignore entirely and
+ * build your own from the same data.
+ *
+ * @module
+ */
+/**
+ * Turn a catch-all's path segments into a slug.
+ *
+ * Accepts what each framework actually hands you — an array of segments, a
+ * joined path, with or without leading slashes — because normalising this at
+ * every call site is how the two sides end up disagreeing about `/privacy/`
+ * versus `privacy`.
+ */
+export function legalSlugFrom(input) {
+    if (!input)
+        return "";
+    const joined = Array.isArray(input) ? input.join("/") : input;
+    return joined
+        .trim()
+        .toLowerCase()
+        .replace(/^\/+|\/+$/g, "")
+        .replace(/\/{2,}/g, "/");
+}
+/**
+ * The document at this path, or null if there isn't one.
+ *
+ * **Null means fall through to your own 404.** Returning an "empty legal page"
+ * would put a bare heading reading "Privacy Policy" on every unmatched URL on
+ * the site, which is worse than a 404 in every way that matters — it is wrong
+ * for users, wrong for crawlers, and hides real routing mistakes.
+ *
+ * A network failure also returns null rather than throwing. A catch-all runs on
+ * every unmatched request, and an exception there takes down paths that have
+ * nothing to do with legal pages; a 404 during an outage is recoverable, a
+ * 500 on every unknown URL is not.
+ */
+export async function resolveLegalPage(options) {
+    const slug = legalSlugFrom(options.slug);
+    if (!slug)
+        return null;
+    try {
+        return await options.client.legal.get(slug);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The links an org wants in their footer.
+ *
+ * Filtered on `showInFooter`, which is separate from published on purpose: an
+ * org may need a document to exist at a URL they hand to a processor without
+ * putting it in front of every visitor.
+ */
+export function legalFooterLinks(list, options = {}) {
+    const items = Array.isArray(list) ? list : list.items;
+    const base = (options.basePath ?? "").replace(/\/+$/, "");
+    return items
+        .filter((doc) => doc.showInFooter)
+        .map((doc) => ({ href: `${base}/${doc.slug}`, label: doc.title }));
+}
+/** Escape text destined for markup. Titles are plain text, not HTML. */
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+/**
+ * "Last updated" text, or null when the org never set a date.
+ *
+ * Uses `effectiveDate` in preference to `updatedAt`: a typo fix bumps
+ * `updatedAt` and should not tell every reader the terms changed. The org
+ * decides when a change was material by setting the effective date.
+ *
+ * ## Formatted in UTC, deliberately
+ *
+ * The dashboard stores a calendar date as midnight UTC, so formatting in the
+ * READER's zone shifts it a day for everyone west of UTC — an effective date of
+ * 1 August renders as "July 31" in New York. On a marketing page that is a
+ * cosmetic bug; on a document whose whole purpose is to say when terms changed,
+ * it is a wrong date shown to roughly half the audience.
+ */
+export function legalLastUpdated(document, locale) {
+    if (!document.effectiveDate)
+        return null;
+    const date = new Date(document.effectiveDate);
+    if (Number.isNaN(date.getTime()))
+        return null;
+    return date.toLocaleDateString(locale, {
+        year: "numeric",
+        month: "long",
+        day: "numeric",
+        timeZone: "UTC",
+    });
+}
+/**
+ * Semantic markup for one document: header, title, body, footer.
+ *
+ * Unstyled by design. Every element carries a stable `data-biab-legal-*`
+ * attribute so a stylesheet can reach it, and none carries a class you would
+ * have to fight. If you want a different structure, read the same fields off
+ * the document and build your own — this is a convenience, not a requirement.
+ *
+ * `contentHtml`, `headerHtml` and `footerHtml` are inserted as-is because they
+ * were sanitised when the org saved them. The title and logo URL are escaped
+ * here, since they are plain values that have never been through a sanitiser.
+ */
+export function renderLegalPageHtml(document, options = {}) {
+    const presentation = document.presentation;
+    const className = options.className ?? "biab-legal";
+    const homeHref = options.homeHref ?? "/";
+    const updated = legalLastUpdated(document, options.locale);
+    const logo = (where) => {
+        const show = where === "header"
+            ? presentation.showLogoInHeader
+            : presentation.showLogoInFooter;
+        if (!show || !presentation.logoUrl)
+            return "";
+        return (`<a href="${escapeHtml(homeHref)}" data-biab-legal-logo-link>` +
+            `<img src="${escapeHtml(presentation.logoUrl)}" alt="" data-biab-legal-logo="${where}" />` +
+            "</a>");
+    };
+    const parts = [
+        `<article class="${escapeHtml(className)}" data-biab-legal>`,
+        "<header data-biab-legal-header>",
+        logo("header"),
+        presentation.headerHtml ?? "",
+        `<h1 data-biab-legal-title>${escapeHtml(document.title)}</h1>`,
+        updated
+            ? `<p data-biab-legal-updated>Last updated: ${escapeHtml(updated)}</p>`
+            : "",
+        "</header>",
+        `<div data-biab-legal-body>${document.contentHtml}</div>`,
+        "<footer data-biab-legal-footer>",
+        presentation.footerHtml ?? "",
+        logo("footer"),
+        "</footer>",
+        "</article>",
+    ];
+    return parts.filter(Boolean).join("");
+}
+/**
+ * Page metadata for a legal document.
+ *
+ * `noindex` is deliberately NOT set. Legal pages should be indexable: people
+ * search for "acme refund policy", and app stores and payment processors check
+ * that the URL you gave them resolves to something a crawler can see.
+ *
+ * Feed this to `@businessdash/sdk/seo-core`'s adapters, or spread it into your
+ * framework's own metadata export.
+ */
+export function legalPageSeo(document, options = {}) {
+    const title = options.siteName
+        ? `${document.title} — ${options.siteName}`
+        : document.title;
+    return {
+        title,
+        // Built from the title rather than the body: the first sentence of a
+        // privacy policy is boilerplate ("This policy explains how…") and makes
+        // a description indistinguishable from every other company's.
+        description: options.siteName
+            ? `The ${document.title.toLowerCase()} for ${options.siteName}.`
+            : `Read our ${document.title.toLowerCase()}.`,
+        ...(options.canonical === undefined
+            ? {}
+            : { canonical: options.canonical }),
+        openGraph: {
+            title,
+            type: "article",
+            ...(options.canonical === undefined ? {} : { url: options.canonical }),
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/legal-core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/legal-core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAiBH;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,OAAO,MAAM;SACX,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAAgC;IAEhC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC/B,IAAgD,EAChD,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,KAAK;SACV,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC;SACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,KAAK;SACV,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC/B,QAA8C,EAC9C,MAAe;IAEf,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACtC,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,KAAK;KACf,CAAC,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAClC,QAAuB,EACvB,UAAkC,EAAE;IAEpC,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;IACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE;QAC3C,MAAM,IAAI,GACT,KAAK,KAAK,QAAQ;YACjB,CAAC,CAAC,YAAY,CAAC,gBAAgB;YAC/B,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,CACN,YAAY,UAAU,CAAC,QAAQ,CAAC,8BAA8B;YAC9D,aAAa,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,kCAAkC,KAAK,MAAM;YAC1F,MAAM,CACN,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG;QACb,mBAAmB,UAAU,CAAC,SAAS,CAAC,oBAAoB;QAC5D,iCAAiC;QACjC,IAAI,CAAC,QAAQ,CAAC;QACd,YAAY,CAAC,UAAU,IAAI,EAAE;QAC7B,6BAA6B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO;QAC9D,OAAO;YACN,CAAC,CAAC,4CAA4C,UAAU,CAAC,OAAO,CAAC,MAAM;YACvE,CAAC,CAAC,EAAE;QACL,WAAW;QACX,6BAA6B,QAAQ,CAAC,WAAW,QAAQ;QACzD,iCAAiC;QACjC,YAAY,CAAC,UAAU,IAAI,EAAE;QAC7B,IAAI,CAAC,QAAQ,CAAC;QACd,WAAW;QACX,YAAY;KACZ,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC3B,QAAuB,EACvB,UAAqD,EAAE;IAOvD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ;QAC7B,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,MAAM,OAAO,CAAC,QAAQ,EAAE;QAC3C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClB,OAAO;QACN,KAAK;QACL,qEAAqE;QACrE,wEAAwE;QACxE,8DAA8D;QAC9D,WAAW,EAAE,OAAO,CAAC,QAAQ;YAC5B,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,OAAO,CAAC,QAAQ,GAAG;YAChE,CAAC,CAAC,YAAY,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG;QAC9C,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,SAAS,EAAE;YACV,KAAK;YACL,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;SACtE;KACD,CAAC;AACH,CAAC"}

package/dist/marketing-core/index.d.ts

@@ -0,0 +1,66 @@
+/**
+ * `@businessdash/sdk/marketing` — the headless marketing-page controller.
+ *
+ * Marketing pages were React-only, and the reason was accidental: the logic is
+ * a cache, a fetch and a status flag. This lifts it out so every binding can
+ * render a schema-driven page.
+ *
+ * ## Why the cache matters here specifically
+ *
+ * A site can have many marketing pages, and a visitor reads one. Fetching all
+ * of them to render one is the obvious mistake, so `open()` pulls a single page
+ * on demand, and `prefetch()` exists for the case where you know what is coming
+ * next (a nav hover, a likely next step) and want it warm before the click.
+ *
+ * The SDK client keeps its own cache; this controller does not duplicate it. It
+ * tracks WHICH page is showing and whether a request is in flight — the cache
+ * itself stays one layer down, where every framework already shares it.
+ *
+ * @module
+ */
+import type { GetSiteMarketingPageResponse, ListSiteMarketingPagesResponse } from "../contracts.js";
+export type MarketingCoreClient = {
+    marketingPages: {
+        list(): Promise<ListSiteMarketingPagesResponse>;
+        get(pageKey?: string, options?: {
+            skipCache?: boolean;
+        }): Promise<GetSiteMarketingPageResponse>;
+        prefetch(pageKey?: string): Promise<GetSiteMarketingPageResponse>;
+    };
+};
+export type MarketingStatus = "idle" | "loading" | "ready" | "error";
+/** Field names are STABLE and load-bearing for every framework binding. */
+export type MarketingSnapshot = {
+    status: MarketingStatus;
+    /** Every page on the site — keys and titles, not bodies. */
+    pages: ListSiteMarketingPagesResponse["pages"];
+    /** The page currently open, or `null`. */
+    page: GetSiteMarketingPageResponse | null;
+    /** Which key `page` belongs to. */
+    pageKey: string | null;
+    error: Error | null;
+    pending: {
+        list: boolean;
+        page: boolean;
+    };
+};
+export type MarketingController = {
+    snapshot(): MarketingSnapshot;
+    subscribe(callback: (snapshot: MarketingSnapshot) => void): () => void;
+    /** Fetch the page index. */
+    load(): Promise<void>;
+    /** Fetch and show one page. */
+    open(pageKey?: string, options?: {
+        skipCache?: boolean;
+    }): Promise<void>;
+    /** Warm a page's cache without showing it. Failures are swallowed. */
+    prefetch(pageKey?: string): Promise<void>;
+    close(): void;
+    destroy(): void;
+};
+export type CreateMarketingControllerOptions = {
+    client: MarketingCoreClient;
+    onError?: (error: Error) => void;
+};
+export declare function createMarketingController(options: CreateMarketingControllerOptions): MarketingController;
+//# sourceMappingURL=index.d.ts.map

package/dist/marketing-core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/marketing-core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EACX,4BAA4B,EAC5B,8BAA8B,EAC9B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG;IACjC,cAAc,EAAE;QACf,IAAI,IAAI,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAChD,GAAG,CACF,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,GAC/B,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;KAClE,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAErE,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,4DAA4D;IAC5D,KAAK,EAAE,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC/C,0CAA0C;IAC1C,IAAI,EAAE,4BAA4B,GAAG,IAAI,CAAC;IAC1C,mCAAmC;IACnC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IACjC,QAAQ,IAAI,iBAAiB,CAAC;IAC9B,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACvE,4BAA4B;IAC5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,IAAI,IAAI,CAAC;IACd,OAAO,IAAI,IAAI,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACjC,CAAC;AAMF,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,gCAAgC,GACvC,mBAAmB,CAoIrB"}