@decocms/blocks 7.64.3 → 7.65.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/blocks",
-  "version": "7.64.3",
+  "version": "7.65.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -65,6 +65,7 @@
     "./sdk/invoke": "./src/sdk/invoke.ts",
     "./sdk/logger": "./src/sdk/logger.ts",
     "./sdk/mergeCacheControl": "./src/sdk/mergeCacheControl.ts",
+    "./sdk/nonce": "./src/sdk/nonce.ts",
     "./sdk/normalizeUrls": "./src/sdk/normalizeUrls.ts",
     "./sdk/observability": "./src/sdk/observability.ts",
     "./sdk/otel": "./src/sdk/otel.ts",

package/src/cms/draftSource.test.ts

@@ -32,11 +32,11 @@ describe("parseDraftPointer", () => {
   it("parses <authority><path>@<version>, lowercasing the authority", () => {
     expect(
       parseDraftPointer(
-        "Studio.decocms.com/api/fila/decofile/vm-1/main?token=Tok.abc@8c1d44e",
+        "Studio.decocms.com/api/acme/decofile/vm-1/main?token=Tok.abc@8c1d44e",
       ),
     ).toEqual({
       host: "studio.decocms.com",
-      path: "/api/fila/decofile/vm-1/main?token=Tok.abc",
+      path: "/api/acme/decofile/vm-1/main?token=Tok.abc",
       version: "8c1d44e",
     });
   });
@@ -138,18 +138,18 @@ describe("gating", () => {
   });
 
   it("matches request hosts verbatim, port included, case-insensitively", () => {
-    const env = { DECO_ALLOWED_PREVIEW_HOSTS: "fila.vtex.app, localhost:3100" };
-    expect(isDraftHostAllowed("FILA.VTEX.APP", env)).toBe(true);
+    const env = { DECO_ALLOWED_PREVIEW_HOSTS: "acme.vtex.app, localhost:3100" };
+    expect(isDraftHostAllowed("ACME.VTEX.APP", env)).toBe(true);
     expect(isDraftHostAllowed("localhost:3100", env)).toBe(true);
-    expect(isDraftHostAllowed("fila.com.br", env)).toBe(false);
+    expect(isDraftHostAllowed("acme.com.br", env)).toBe(false);
     expect(isDraftHostAllowed("localhost", env)).toBe(false);
     expect(isDraftHostAllowed(null, env)).toBe(false);
-    expect(isDraftHostAllowed("fila.vtex.app", {})).toBe(false);
+    expect(isDraftHostAllowed("acme.vtex.app", {})).toBe(false);
   });
 });
 
 // Canonical Studio decofile-API pointer prefix (authority + path, no version).
-const P = "studio.decocms.com/api/fila/decofile/vm-1/main?token=tok.abc";
+const P = "studio.decocms.com/api/acme/decofile/vm-1/main?token=tok.abc";
 
 describe("resolveDraftDecofile", () => {
   it("fetches the token's path on its validated origin", async () => {
@@ -168,7 +168,7 @@ describe("resolveDraftDecofile", () => {
     // content-addressed so Studio can answer with CDN-cacheable immutable
     // headers when it matches the served sha.
     expect(calls).toEqual([
-      "https://studio.decocms.com/api/fila/decofile/vm-1/main?token=tok.abc&v=v1",
+      "https://studio.decocms.com/api/acme/decofile/vm-1/main?token=tok.abc&v=v1",
     ]);
   });
 
@@ -298,10 +298,10 @@ describe("DEFAULT_PREVIEW_API_DOMAINS", () => {
 
 describe("site-block preview hosts", () => {
   it("enables the feature from the site block alone — no env needed", () => {
-    setDraftPreviewHosts(["fila.vtex.app", "LOCALHOST:3100", 42, "  "]);
+    setDraftPreviewHosts(["acme.vtex.app", "LOCALHOST:3100", 42, "  "]);
     try {
       expect(isDraftPreviewEnabled({})).toBe(true);
-      expect(isDraftHostAllowed("fila.vtex.app", {})).toBe(true);
+      expect(isDraftHostAllowed("acme.vtex.app", {})).toBe(true);
       // Sanitized: lowercased, non-strings and blanks dropped.
       expect(isDraftHostAllowed("localhost:3100", {})).toBe(true);
       expect(isDraftHostAllowed("evil.example", {})).toBe(false);
@@ -311,13 +311,13 @@ describe("site-block preview hosts", () => {
   });
 
   it("env REPLACES the block hosts when set — the operational escape hatch", () => {
-    setDraftPreviewHosts(["fila.vtex.app"]);
+    setDraftPreviewHosts(["acme.vtex.app"]);
     try {
       const env = { DECO_ALLOWED_PREVIEW_HOSTS: "other.example" };
       expect(isDraftHostAllowed("other.example", env)).toBe(true);
       // Not merged: env is a kill switch / override, so the block value must
       // not survive alongside it.
-      expect(isDraftHostAllowed("fila.vtex.app", env)).toBe(false);
+      expect(isDraftHostAllowed("acme.vtex.app", env)).toBe(false);
     } finally {
       setDraftPreviewHosts([]);
     }
@@ -326,41 +326,41 @@ describe("site-block preview hosts", () => {
 
 describe("deco-hosted preview domains (setDecoSiteHost)", () => {
   it("infers <site>.deco.site and enables the feature", () => {
-    setDecoSiteHost("als-storefront");
+    setDecoSiteHost("acme");
     try {
       expect(isDraftPreviewEnabled({})).toBe(true);
-      expect(isDraftHostAllowed("als-storefront.deco.site", {})).toBe(true);
+      expect(isDraftHostAllowed("acme.deco.site", {})).toBe(true);
       expect(isDraftHostAllowed("other.deco.site", {})).toBe(false);
       // A custom production domain is never inferred.
-      expect(isDraftHostAllowed("www.als-storefront.com", {})).toBe(false);
+      expect(isDraftHostAllowed("www.acme.com", {})).toBe(false);
     } finally {
       setDecoSiteHost(null);
     }
   });
 
   it("infers the <site>.deco-cx.workers.dev deploy host", () => {
-    setDecoSiteHost("casaevideo-tanstack");
+    setDecoSiteHost("acme-tanstack");
     try {
-      expect(isDraftHostAllowed("casaevideo-tanstack.deco-cx.workers.dev", {})).toBe(true);
+      expect(isDraftHostAllowed("acme-tanstack.deco-cx.workers.dev", {})).toBe(true);
       // Exact match only — another worker on the same account is not admitted.
       expect(isDraftHostAllowed("other-site.deco-cx.workers.dev", {})).toBe(false);
       // No nested subdomain widens the match.
       expect(
-        isDraftHostAllowed("casaevideo-tanstack.evil.deco-cx.workers.dev", {}),
+        isDraftHostAllowed("acme-tanstack.evil.deco-cx.workers.dev", {}),
       ).toBe(false);
       // Wrong apex.
-      expect(isDraftHostAllowed("casaevideo-tanstack.deco-cx.workers.example", {})).toBe(false);
+      expect(isDraftHostAllowed("acme-tanstack.deco-cx.workers.example", {})).toBe(false);
     } finally {
       setDecoSiteHost(null);
     }
   });
 
   it("is merged ON TOP of the site block, not replacing it", () => {
-    setDraftPreviewHosts(["fila.vtex.app"]);
-    setDecoSiteHost("als-storefront");
+    setDraftPreviewHosts(["acme.vtex.app"]);
+    setDecoSiteHost("acme");
     try {
-      expect(isDraftHostAllowed("fila.vtex.app", {})).toBe(true);
-      expect(isDraftHostAllowed("als-storefront.deco.site", {})).toBe(true);
+      expect(isDraftHostAllowed("acme.vtex.app", {})).toBe(true);
+      expect(isDraftHostAllowed("acme.deco.site", {})).toBe(true);
     } finally {
       setDraftPreviewHosts([]);
       setDecoSiteHost(null);
@@ -368,11 +368,11 @@ describe("deco-hosted preview domains (setDecoSiteHost)", () => {
   });
 
   it("is merged ON TOP of the env escape hatch too", () => {
-    setDecoSiteHost("als-storefront");
+    setDecoSiteHost("acme");
     try {
       const env = { DECO_ALLOWED_PREVIEW_HOSTS: "other.example" };
       expect(isDraftHostAllowed("other.example", env)).toBe(true);
-      expect(isDraftHostAllowed("als-storefront.deco.site", env)).toBe(true);
+      expect(isDraftHostAllowed("acme.deco.site", env)).toBe(true);
     } finally {
       setDecoSiteHost(null);
     }
@@ -392,16 +392,16 @@ describe("deco-hosted preview domains (setDecoSiteHost)", () => {
   });
 
   it("DECO_ALLOWED_PREVIEW_HOSTS=none kills the inferred hosts too", () => {
-    setDraftPreviewHosts(["fila.vtex.app"]);
-    setDecoSiteHost("als-storefront");
+    setDraftPreviewHosts(["acme.vtex.app"]);
+    setDecoSiteHost("acme");
     try {
       // The kill switch wins over the inferred hosts AND the site block, so a
       // bad rollout can be stopped without a deploy.
       const env = { DECO_ALLOWED_PREVIEW_HOSTS: "none" };
       expect(isDraftPreviewEnabled(env)).toBe(false);
-      expect(isDraftHostAllowed("als-storefront.deco.site", env)).toBe(false);
-      expect(isDraftHostAllowed("als-storefront.deco-cx.workers.dev", env)).toBe(false);
-      expect(isDraftHostAllowed("fila.vtex.app", env)).toBe(false);
+      expect(isDraftHostAllowed("acme.deco.site", env)).toBe(false);
+      expect(isDraftHostAllowed("acme.deco-cx.workers.dev", env)).toBe(false);
+      expect(isDraftHostAllowed("acme.vtex.app", env)).toBe(false);
     } finally {
       setDraftPreviewHosts([]);
       setDecoSiteHost(null);

package/src/cms/draftSource.ts

@@ -179,7 +179,7 @@ export function setDraftPreviewHosts(hosts: readonly unknown[]): void {
  *
  *   - `<site>.deco.site` — the stable deco-hosted domain.
  *   - `<site>.deco-cx.workers.dev` — the workers.dev deploy URL
- *     (e.g. `casaevideo-tanstack.deco-cx.workers.dev`).
+ *     (e.g. `acme-tanstack.deco-cx.workers.dev`).
  *
  * Both are MERGED with the site-block/env list rather than replacing it: they
  * are deco-operated infra, so a signed draft grant can preview there out of the

package/src/cms/layoutCacheRace.test.ts

@@ -13,7 +13,7 @@ import {
  * Regression test for the layout-cache index-corruption bug that shipped in
  * @decocms/start@6.12.1 and was fixed in 6.12.2 (blocks commit 73d4f19,
  * "fix(cms): don't mutate shared cached section objects when stamping
- * index"). Two live production sites (casaevideo-tanstack, bagaggio-tanstack)
+ * index"). Two live production sites
  * hit this in the wild as an intermittent "footer renders above other
  * sections" bug under concurrent traffic.
  *

package/src/cms/loader.test.ts

@@ -78,32 +78,32 @@ describe("matchPath", () => {
     // These are the cases that issue #213 documents as broken.
 
     it("matches with the optional group present", () => {
-      expect(matchPath("/{granado/}?*", "/granado/perfumaria")).toEqual({
+      expect(matchPath("/{acme/}?*", "/acme/perfumaria")).toEqual({
         "0": "perfumaria",
       });
     });
 
     it("matches with the optional group absent", () => {
-      expect(matchPath("/{granado/}?*", "/perfumaria")).toEqual({
+      expect(matchPath("/{acme/}?*", "/perfumaria")).toEqual({
         "0": "perfumaria",
       });
     });
 
     it("matches root when optional prefix and splat collapse to empty", () => {
-      expect(matchPath("/{granado/}?*", "/")).toEqual({ "0": "" });
+      expect(matchPath("/{acme/}?*", "/")).toEqual({ "0": "" });
     });
 
     it("matches with an optional prefix before a literal segment", () => {
       expect(
         matchPath(
-          "/{granado/}?campanhas/*",
-          "/granado/campanhas/destaques-2023",
+          "/{acme/}?campanhas/*",
+          "/acme/campanhas/destaques-2023",
         ),
       ).toEqual({
         "0": "destaques-2023",
       });
       expect(
-        matchPath("/{granado/}?campanhas/*", "/campanhas/destaques-2023"),
+        matchPath("/{acme/}?campanhas/*", "/campanhas/destaques-2023"),
       ).toEqual({
         "0": "destaques-2023",
       });
@@ -158,7 +158,7 @@ describe("findPageByPath specificity", () => {
       },
       "pages-pdp-plp": {
         name: "PDP & PLP",
-        path: "/{granado/}?*",
+        path: "/{acme/}?*",
         sections: [],
       },
       "pages-product": {
@@ -179,8 +179,8 @@ describe("findPageByPath specificity", () => {
   });
 
   it("prefers the home page over an optional-group splat catch-all", () => {
-    // Regression: /{granado/}?* matches "/" and was out-ranking the home
-    // because the `{granado` segment counted as a param. The home block
+    // Regression: /{acme/}?* matches "/" and was out-ranking the home
+    // because the `{acme` segment counted as a param. The home block
     // is a literal-only `/` path and must always win.
     setBlocks({
       "pages-home": {
@@ -190,7 +190,7 @@ describe("findPageByPath specificity", () => {
       },
       "pages-pdp-plp": {
         name: "PDP & PLP",
-        path: "/{granado/}?*",
+        path: "/{acme/}?*",
         sections: [],
       },
     });
@@ -228,7 +228,7 @@ describe("loadBlocks draft override — key percent-encoding", () => {
   // (`pages-Home (principal)-1`). Under snapshot semantics the draft REPLACES
   // the file-backed base wholesale, so an encoded/raw twin pair can never
   // coexist — these regression tests (from the merge era, when ~73% of
-  // casaevideo's pages silently ignored drafts) now pin that property.
+  // one production site's pages silently ignored drafts) now pin that property.
 
   afterEach(() => {
     setBlocks({});

package/src/cms/loader.ts

@@ -254,13 +254,13 @@ export function withDraftBlocks<T>(
 // `/` (literals=0) vs the catch-all `/{prefix/}?*` (literals=0, params=1).
 // Without this, the URLPattern fix (#213/#214) inadvertently lets a
 // `/{group/}?*` catch-all out-rank an exact `/` home page because the
-// `{group` segment counted as a param. See deco-sites/granadobr-tanstack
-// where `/` was being routed to the granado PDP/PLP block's NotFound
+// `{group` segment counted as a param. See a production storefront
+// where `/` was being routed to a brand-prefixed PDP/PLP block's NotFound
 // fallback.
 //
 // Order produced:
 //   /foo/bar (no wildcard, literals=2) > /foo/:x (no wildcard, lit=1, param=1)
-//   /foo (no wildcard) > /{granado/}?*  (has wildcard) > /*
+//   /foo (no wildcard) > /{acme/}?*  (has wildcard) > /*
 function pathSpecificityKey(path: string): [number, number, number] {
   const parts = path.split("/").filter(Boolean);
   let literals = 0;

package/src/cms/resolve.test.ts

@@ -816,7 +816,7 @@ describe("extractSeoFromProps — commerce jsonLD structured data", () => {
   });
 
   it("derives title/description/canonical and emits the ItemList JSON-LD (PLP)", () => {
-    // The casaevideo.com.br/eletroportateis regression: a page.seo pointing at
+    // The acme.com.br/eletroportateis regression: a page.seo pointing at
     // commerce/sections/Seo/SeoPLPV2.tsx resolved its jsonLD but emitted no
     // schema.org. There is no section component in start to run this transform.
     const seo = extractSeoFromProps({

package/src/cms/resolve.ts

@@ -1982,7 +1982,7 @@ function pruneCommerceJsonLD(
  * ship loaders/types, not sections), so nothing else runs this transform.
  * Without it, PLP/PDP pages whose `page.seo` points at those types emit a
  * <title>/canonical (from top-level override props) but NO schema.org
- * structured data — the casaevideo.com.br/eletroportateis regression.
+ * structured data — the acme.com.br/eletroportateis regression.
  *
  * Manual override fields already read into `seo` always win; this only fills
  * gaps and appends the JSON-LD. The caller guards on `seo.jsonLDs` so a real

package/src/hooks/LiveControls.tsx

@@ -1,4 +1,5 @@
 import React, { useEffect } from "react";
+import { getRequestNonce } from "../sdk/nonce";
 
 interface LiveControlsProps {
   site?: string;
@@ -135,5 +136,7 @@ function LiveControlsScript() {
     })();
   `;
 
-  return <script type="module" dangerouslySetInnerHTML={{ __html: script }} />;
+  return (
+    <script type="module" nonce={getRequestNonce()} dangerouslySetInnerHTML={{ __html: script }} />
+  );
 }

package/src/middleware/observability.test.ts

@@ -309,7 +309,7 @@ describe("normalizePath cardinality", () => {
   it("collapses CMS content slugs", () => {
     expect(normalizePath("/mochila-de-couro")).toBe("/:slug");
     expect(normalizePath("/moveis/quarto-infantil")).toBe("/moveis/:slug");
-    expect(normalizePath("/granado/eau-de-toilette-spritz-100ml")).toBe("/granado/:slug");
+    expect(normalizePath("/acme/eau-de-toilette-spritz-100ml")).toBe("/acme/:slug");
     expect(normalizePath("/moveis/quarto-adulto/cabeceiras-mesa-de-cabeceiras")).toBe(
       "/moveis/:slug/:slug",
     );

package/src/middleware/observability.ts

@@ -737,7 +737,7 @@ export function normalizePath(path: string): string {
   //
   //   /mochila-de-couro
   //   /moveis/quarto-infantil
-  //   /granado/eau-de-toilette-spritz-100ml
+  //   /acme/eau-de-toilette-spritz-100ml
   //
   // Measured on the production ClickHouse, `http.route` reached 20,714
   // distinct values across only 6 tenants — on `http.server.request.duration`,

package/src/preview/DraftPreviewBadge.render.test.tsx

@@ -11,7 +11,7 @@ describe("DraftPreviewBadge (render)", () => {
   // pass, actually ships. The badge fails closed: nothing here, by design
   // (see the module doc for why render-then-hide is worse).
   it("renders nothing without a client to run the reveal effect", () => {
-    const html = renderToString(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
+    const html = renderToString(<DraftPreviewBadge pointer="acme.vtex.app@v1" />);
     expect(html).toBe("");
   });
 
@@ -34,14 +34,14 @@ describe("DraftPreviewBadge (render)", () => {
 
     it("reveals the preview-mode label after mount, once confirmed unframed", () => {
       act(() => {
-        root.render(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
+        root.render(<DraftPreviewBadge pointer="acme.vtex.app@v1" />);
       });
       expect(container.textContent).toContain("Preview mode");
     });
 
     it("embeds the deco mark inline (no external asset that could 404 on a consumer site)", () => {
       act(() => {
-        root.render(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
+        root.render(<DraftPreviewBadge pointer="acme.vtex.app@v1" />);
       });
       expect(container.innerHTML).toContain("data:image/png;base64,");
     });
@@ -58,7 +58,7 @@ describe("DraftPreviewBadge (render)", () => {
       it("stays hidden — Studio's own preview surface already has its own chrome", () => {
         Object.defineProperty(window, "top", { value: {}, configurable: true });
         act(() => {
-          root.render(<DraftPreviewBadge pointer="fila.vtex.app@v1" />);
+          root.render(<DraftPreviewBadge pointer="acme.vtex.app@v1" />);
         });
         expect(container.textContent).toBe("");
       });

package/src/preview/DraftPreviewBadge.test.ts

@@ -4,34 +4,34 @@ import { buildExitUrl, buildShareUrl, isFramed } from "./DraftPreviewBadge";
 
 describe("buildShareUrl", () => {
   it("pins the exact draft version so a recipient sees the same working tree", () => {
-    expect(buildShareUrl("https://fila.vtex.app/pdp/shoe", "abc.localhost:60534@v7")).toBe(
-      "https://fila.vtex.app/pdp/shoe?__draft=abc.localhost%3A60534%40v7",
+    expect(buildShareUrl("https://acme.vtex.app/pdp/shoe", "abc.localhost:60534@v7")).toBe(
+      "https://acme.vtex.app/pdp/shoe?__draft=abc.localhost%3A60534%40v7",
     );
   });
 
   it("preserves existing query params, only setting the draft token", () => {
-    expect(buildShareUrl("https://fila.vtex.app/plp?sort=price", "h@v1")).toBe(
-      "https://fila.vtex.app/plp?sort=price&__draft=h%40v1",
+    expect(buildShareUrl("https://acme.vtex.app/plp?sort=price", "h@v1")).toBe(
+      "https://acme.vtex.app/plp?sort=price&__draft=h%40v1",
     );
   });
 
   it("replaces a stale token already in the URL rather than appending a second", () => {
-    expect(buildShareUrl("https://fila.vtex.app/p?__draft=h@old", "h@new")).toBe(
-      "https://fila.vtex.app/p?__draft=h%40new",
+    expect(buildShareUrl("https://acme.vtex.app/p?__draft=h@old", "h@new")).toBe(
+      "https://acme.vtex.app/p?__draft=h%40new",
     );
   });
 });
 
 describe("buildExitUrl", () => {
   it("sets the ?__draft=off exit sentinel", () => {
-    expect(buildExitUrl("https://fila.vtex.app/pdp/shoe")).toBe(
-      "https://fila.vtex.app/pdp/shoe?__draft=off",
+    expect(buildExitUrl("https://acme.vtex.app/pdp/shoe")).toBe(
+      "https://acme.vtex.app/pdp/shoe?__draft=off",
     );
   });
 
   it("overrides an active token with off (leaves preview from anywhere)", () => {
-    expect(buildExitUrl("https://fila.vtex.app/p?__draft=h@v1")).toBe(
-      "https://fila.vtex.app/p?__draft=off",
+    expect(buildExitUrl("https://acme.vtex.app/p?__draft=h@v1")).toBe(
+      "https://acme.vtex.app/p?__draft=off",
     );
   });
 });

package/src/sdk/abTesting.test.ts

@@ -12,8 +12,8 @@ import {
 // Test helpers
 // ---------------------------------------------------------------------------
 
-const REAL_HOST = "www.bagaggio.com.br";
-const FALLBACK_HOST = "lojabagaggio.deco.site";
+const REAL_HOST = "www.acme.com.br";
+const FALLBACK_HOST = "lojaacme.deco.site";
 
 function makeUrl(path = "/x"): URL {
   return new URL(`https://${REAL_HOST}${path}`);

package/src/sdk/experiments.test.ts

@@ -305,16 +305,16 @@ describe("readExperimentConfig", () => {
   const kv = (value: unknown) => ({ get: async () => value as never });
 
   it("reads contract 1's document", async () => {
-    expect(await readExperimentConfig(kv(CONFIG), "www.farmrio.com")).toEqual(CONFIG);
+    expect(await readExperimentConfig(kv(CONFIG), "www.acme.com")).toEqual(CONFIG);
   });
 
   it("returns null instead of throwing when the binding is missing", async () => {
-    expect(await readExperimentConfig(undefined, "www.farmrio.com")).toBeNull();
+    expect(await readExperimentConfig(undefined, "www.acme.com")).toBeNull();
   });
 
   it("returns null on an unset key or a malformed document", async () => {
-    expect(await readExperimentConfig(kv(null), "www.farmrio.com")).toBeNull();
-    expect(await readExperimentConfig(kv({ version: 1 }), "www.farmrio.com")).toBeNull();
+    expect(await readExperimentConfig(kv(null), "www.acme.com")).toBeNull();
+    expect(await readExperimentConfig(kv({ version: 1 }), "www.acme.com")).toBeNull();
   });
 
   it("returns null when KV itself fails — never a thrown request", async () => {
@@ -323,6 +323,6 @@ describe("readExperimentConfig", () => {
         throw new Error("KV unavailable");
       },
     };
-    expect(await readExperimentConfig(broken, "www.farmrio.com")).toBeNull();
+    expect(await readExperimentConfig(broken, "www.acme.com")).toBeNull();
   });
 });

package/src/sdk/logger.test.ts

@@ -185,7 +185,7 @@ describe("setLoggerAttributeFloor", () => {
   });
 
   it("applies the floor even when the caller passes no attrs", () => {
-    setLoggerAttributeFloor({ tenant: "lebiscuit" });
+    setLoggerAttributeFloor({ tenant: "acme" });
     const calls: Array<Record<string, unknown> | undefined> = [];
     configureLogger({
       log(_level, _msg, attrs) {
@@ -195,11 +195,11 @@ describe("setLoggerAttributeFloor", () => {
 
     logger.info("no-attrs");
 
-    expect(calls[0]).toEqual({ tenant: "lebiscuit" });
+    expect(calls[0]).toEqual({ tenant: "acme" });
   });
 
   it("clearing the floor restores the no-op fast path", () => {
-    setLoggerAttributeFloor({ tenant: "lebiscuit" });
+    setLoggerAttributeFloor({ tenant: "acme" });
     setLoggerAttributeFloor({});
     const calls: Array<Record<string, unknown> | undefined> = [];
     configureLogger({

package/src/sdk/nonce.ts

@@ -0,0 +1,46 @@
+/**
+ * Per-request CSP nonce.
+ *
+ * When the TanStack worker entry runs with `cspMode: "enforce"`, it generates a
+ * fresh nonce per request, stashes it in the RequestContext bag (below), and
+ * threads it into:
+ *
+ *   - the TanStack router (`router.options.ssr.nonce`), so `ScriptOnce` and the
+ *     framework's own hydration scripts carry `nonce=…`;
+ *   - the hand-written inline `<script>` tags in the deco layout / live-controls
+ *     components (they read it via `getRequestNonce()`);
+ *   - the enforced `Content-Security-Policy` header's `script-src`.
+ *
+ * Lives in `runtime` (not `tanstack`) so both the tanstack worker and the
+ * runtime components (e.g. LiveControls) can reach it without crossing the
+ * one-way package dependency graph.
+ *
+ * The nonce is only produced on the server and only in enforce mode; in the
+ * browser the RequestContext is a no-op stub, so `getRequestNonce()` returns
+ * `undefined` and every consumer degrades to "no nonce attribute".
+ */
+import { RequestContext } from "./requestContext";
+
+/** RequestContext bag key holding the current request's CSP nonce. */
+export const NONCE_BAG_KEY = "deco.csp.nonce";
+
+/**
+ * Generate a CSP nonce: 128 bits of CSPRNG randomness, base64-encoded. Fresh
+ * per request — never reuse across responses, or the nonce loses all value.
+ */
+export function generateNonce(): string {
+  const bytes = new Uint8Array(16);
+  crypto.getRandomValues(bytes);
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary);
+}
+
+/**
+ * The current request's CSP nonce, or `undefined` when CSP is not enforced
+ * (report-only mode) or on the client. Read this in an SSR component to nonce
+ * an inline `<script>`: `<script nonce={getRequestNonce()} … />`.
+ */
+export function getRequestNonce(): string | undefined {
+  return RequestContext.getBag<string>(NONCE_BAG_KEY);
+}

package/src/sdk/normalizeUrls.ts

@@ -13,8 +13,8 @@
  * // In site's setup.ts:
  * import { registerProductionOrigins } from "@decocms/start/sdk/normalizeUrls";
  * registerProductionOrigins([
- *   "https://www.casaevideo.com.br",
- *   "https://casaevideo.com.br",
+ *   "https://www.acme.com.br",
+ *   "https://acme.com.br",
  * ]);
  * ```
  */

package/src/sdk/otel.test.ts

@@ -169,13 +169,13 @@ describe("instrumentWorker — identity floor", () => {
 
   it("stamps service.name and service.version on the logger floor", async () => {
     const handler = { fetch: vi.fn().mockResolvedValue(new Response("ok")) };
-    const wrapped = instrumentWorker(handler, { serviceName: "casaevideo-tanstack" });
+    const wrapped = instrumentWorker(handler, { serviceName: "acme-tanstack" });
 
     const env: TestEnv = { CF_VERSION_METADATA: { id: "abc123" } };
     await wrapped.fetch(new Request("https://example.test/"), env, fakeCtx());
 
     const floor = logger._getLoggerAttributeFloorForTests();
-    expect(floor["service.name"]).toBe("casaevideo-tanstack");
+    expect(floor["service.name"]).toBe("acme-tanstack");
     expect(floor["service.version"]).toBe("abc123");
   });
 

package/src/sdk/otel.ts

@@ -312,7 +312,7 @@ interface WorkerHandler {
 // into Copy A's `otlpMeter` while the per-request `recordRequestMetric`
 // closure reads from Copy B's empty `otlpMeter`. Net effect in prod:
 // `bootObservability` runs (we observed the very first `POST /v1/metrics`
-// from miess-tanstack), but every subsequent request's `flush()` finds an
+// from a production storefront), but every subsequent request's `flush()` finds an
 // empty buffer because the meter the framework writes into is a different
 // instance from the one the exporter drains.
 //

package/src/sdk/useSuggestions.ts

@@ -1,7 +1,7 @@
 /**
  * Search-suggestions hook factory.
  *
- * Both casaevideo-storefront and baggagio-tanstack independently
+ * Two production storefronts independently
  * invented the same shape for autocomplete-style suggestions:
  *
  *  - module-level signal for the current payload + loading flag