@evinvest/kitstart 0.19.1 → 0.20.0

package/README.md

@@ -45,7 +45,7 @@ brand's `flake.nix` is its own config plus one call — `template/flake.nix` is
 the whole of one:
 
 ```nix
-inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.19.1"; # the version in package-lock.json
+inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.20.0"; # the version in package-lock.json
 inputs.ev.inputs.v_flakes.follows = "v_flakes";
 
 landing = ev.lib.mkLanding {
@@ -937,6 +937,13 @@ export const POST = quoteRoute(site, { env: serverEnv, notifier, webhook, unavai
   suspect, for the body's `suspect` property. Off by default, and to stay off
   until the panel's `lead.created` accepts the property: it refuses an
   unknown one, and the outbox would park the lead. Off, nothing changes.
+- **The visitor's language: `panelLocale`, off.** With
+  `leadWebhook(…, { panelLocale: true })` `ctx.panelLocale` is `fr` or `en`
+  (the site locale's language, `panelLocaleOf`; a locale the panel does not
+  take leaves it absent), and `panelLocaleProperties(ctx.panelLocale)` writes
+  it as `lead.created`'s `properties.locale`. Off by default, and to stay off
+  until the panel accepts the property — it refuses an unknown one, and the
+  outbox would park the lead. Off, the context and the body are as before.
 - **The sale: `panelFlow`, off.** With `leadWebhook(…, { panelFlow: true })`
   `ctx.flow` says how the need was sold (`panelFlowOf(lead)`), and
   `panelFlowProperties(ctx.flow)` writes it as `lead.created`'s properties:

package/dist/core/antispam.d.ts

@@ -1,28 +1,9 @@
 import type { SpamVerdict } from "./lead.js";
-/**
- * Three cheap barriers, none of which needs the visitor to run a script — the
- * form has to work before any JavaScript arrives, so a challenge widget is not
- * an option. A rejected submission is answered exactly like an accepted one,
- * so a bot learns nothing from the response.
- */
-/**
- * The field a human never sees and a form-filling bot fills. A neutral name:
- * a browser's autofill knows `website`, `url` or `company` and would fill the
- * trap for a real person.
- */
-export declare const HONEYPOT_FIELD = "hp_ref";
-/** The trap's name on pages cached before it was renamed; still read. */
-export declare const LEGACY_HONEYPOT_FIELDS: readonly string[];
-/** When the form was rendered, in ms since the epoch. */
-export declare const RENDERED_AT_FIELD = "t";
-/** Faster than this from render to submit is a script, not a person. */
-export declare const MIN_FILL_MS = 3000;
+export { HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_LIMIT_OVERFLOW_KEY, RENDERED_AT_FIELD } from "../generated/contract.js";
 export type Screening = "ok" | SpamVerdict;
 export declare function checkTiming(renderedAt: string | null, now: number): Screening;
 /** How many distinct keys a limiter tracks before new ones share one bucket. */
 export declare const RATE_LIMIT_MAX_KEYS = 10000;
-/** The shared bucket keys past the cap count against. */
-export declare const RATE_LIMIT_OVERFLOW_KEY = "\0overflow";
 /**
  * A fixed-window counter per client address, in memory. Per process by design:
  * it is a speed bump for one bot hammering one pod, not an accounting system,

package/dist/core/antispam.js

@@ -1,21 +1,11 @@
+import { MIN_FILL_MS, RATE_LIMIT_OVERFLOW_KEY } from "../generated/contract.js";
+export { HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_LIMIT_OVERFLOW_KEY, RENDERED_AT_FIELD } from "../generated/contract.js";
 /**
  * Three cheap barriers, none of which needs the visitor to run a script — the
  * form has to work before any JavaScript arrives, so a challenge widget is not
  * an option. A rejected submission is answered exactly like an accepted one,
  * so a bot learns nothing from the response.
  */
-/**
- * The field a human never sees and a form-filling bot fills. A neutral name:
- * a browser's autofill knows `website`, `url` or `company` and would fill the
- * trap for a real person.
- */
-export const HONEYPOT_FIELD = "hp_ref";
-/** The trap's name on pages cached before it was renamed; still read. */
-export const LEGACY_HONEYPOT_FIELDS = ["website"];
-/** When the form was rendered, in ms since the epoch. */
-export const RENDERED_AT_FIELD = "t";
-/** Faster than this from render to submit is a script, not a person. */
-export const MIN_FILL_MS = 3_000;
 /** A render time this far ahead of the clock was forged. */
 const MAX_SKEW_MS = 60_000;
 export function checkTiming(renderedAt, now) {
@@ -26,8 +16,6 @@ export function checkTiming(renderedAt, now) {
 }
 /** How many distinct keys a limiter tracks before new ones share one bucket. */
 export const RATE_LIMIT_MAX_KEYS = 10_000;
-/** The shared bucket keys past the cap count against. */
-export const RATE_LIMIT_OVERFLOW_KEY = "\u0000overflow";
 const PRUNE_EVERY_MS = 1_000;
 /**
  * A fixed-window counter per client address, in memory. Per process by design:

package/dist/core/place/live.d.ts

@@ -23,6 +23,8 @@ export interface PlaceLive<L extends string> {
     telegram?: string;
     /** The panel's kill switches for the messengers; a key left out is on. */
     messengers?: MessengerSwitches;
+    /** Where the place asks for a Google review (`REVIEW_HOSTS`, `https:` only); one that does not validate is dropped. */
+    reviewUrl?: string;
 }
 /**
  * Drops what does not validate instead of failing the page on one bad field.

package/dist/core/place/live.js

@@ -1,6 +1,8 @@
 import { BookingConfigError, parseBookingConfig } from "../booking/validate.js";
 import { TELEGRAM_BOT } from "../messenger.js";
 import { parseInstant } from "./rating.js";
+/** The hosts Google's own review links live on: `g.page/r/…` and `search.google.com/local/writereview`. */
+const REVIEW_HOSTS = ["g.page", "search.google.com"];
 const DAYS = ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday"];
 const TIME = /^([01]\d|2[0-3]):[0-5]\d$/;
 const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
@@ -47,6 +49,13 @@ function httpsUrl(v) {
         return undefined;
     }
 }
+function reviewUrl(v) {
+    const s = httpsUrl(v);
+    if (!s)
+        return undefined;
+    // `httpsUrl` parsed it once already; a host check on the string would be fooled by userinfo (`https://g.page@evil.example`).
+    return REVIEW_HOSTS.includes(new URL(s).hostname) ? s : undefined;
+}
 function landmark(v, locales) {
     if (!isObject(v))
         return undefined;
@@ -139,6 +148,9 @@ export function parsePlaceLive(body, locales, rules = {}) {
     const m = messengers(body.messengers);
     if (m)
         live.messengers = m;
+    const review = reviewUrl(body.reviewUrl);
+    if (review)
+        live.reviewUrl = review;
     return live;
 }
 /**
@@ -168,5 +180,6 @@ export function mergeLive(baked, live) {
         rating: live.rating ?? baked.rating,
         ...(booking ? { booking } : {}),
         ...(switches ? { messengers: switches } : {}),
+        ...(live.reviewUrl ? { reviewUrl: live.reviewUrl } : {}),
     };
 }

package/dist/core/place/rating.d.ts

@@ -1,6 +1,5 @@
 import type { Place, Rating } from "./types.js";
-/** Google Business Profile API policy: no cached copy older than this. */
-export declare const RATING_MAX_AGE_DAYS = 30;
+export { RATING_MAX_AGE_DAYS } from "../../generated/contract.js";
 /**
  * An instant from the live source: RFC 3339 with an offset or `Z`, or a bare
  * date (midnight UTC). A date-time without an offset is refused — `Date.parse`

package/dist/core/place/rating.js

@@ -1,5 +1,5 @@
-/** Google Business Profile API policy: no cached copy older than this. */
-export const RATING_MAX_AGE_DAYS = 30;
+import { RATING_MAX_AGE_DAYS } from "../../generated/contract.js";
+export { RATING_MAX_AGE_DAYS } from "../../generated/contract.js";
 const DATE = /^\d{4}-\d{2}-\d{2}$/;
 const DATE_TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
 /**

package/dist/core/place/types.d.ts

@@ -96,6 +96,8 @@ export interface Place<L extends string> {
      * settings); absent → `DEFAULT_BOOKING`, a call (`bookingOf`).
      */
     booking?: BookingConfig;
+    /** Where the place asks for a Google review (`PlaceLive.reviewUrl`); live only, absent until the panel sends it. */
+    reviewUrl?: string;
 }
 /** Which messengers the panel lets a place offer; a key left out is on. */
 export interface MessengerSwitches {

package/dist/core/routing.d.ts

@@ -31,14 +31,9 @@ import type { Site } from "./site.js";
  * must not be cached as permanent. Only page paths enter it — `/quote`,
  * `/sitemap.xml`, `/og` and the brand's files pass straight through.
  */
-/** Not indexable, not in the sitemap, but negotiated like any other page. */
-export declare const THANKS = "/thanks";
-export declare const LANG_COOKIE = "lang";
-export declare const LANG_COOKIE_MAX_AGE = 31536000;
-/** The prefix a `[location]` route param carries in host link mode. */
-export declare const HOST_MARK = "_";
+export { GONE, GONE_HEADER, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, THANKS } from "../generated/contract.js";
 /**
- * How a dead path reaches a 404 a visitor without JavaScript can read.
+ * The path no route matches, in a language.
  *
  * Next 16 cannot put a `notFound()` boundary into the HTML: that response is
  * an empty `<html id="__next_error__">` the client fills in after hydration.
@@ -48,29 +43,18 @@ export declare const HOST_MARK = "_";
  * says which language and place the 404 speaks for in {@link GONE_HEADER}.
  * Reserved: no place may take `404` as its slug.
  */
-export declare const GONE = "404";
-/** The path no route matches, in a language. */
 export declare function gonePath(locale: string): string;
 /**
- * Set only by the proxy, on a `gone` rewrite, and stripped from every other
- * request; read only by the global not-found page, a route of its own — a
- * page that read it would render per request, and none does.
+ * `fr` or `fr/_royat`: the 404's language and, if it has one, its place. Read
+ * only by the global not-found page, a route of its own — a page that read it
+ * would render per request, and none does.
  */
-export declare const GONE_HEADER = "x-landing-not-found";
-/** `fr` or `fr/_royat`: the 404's language and, if it has one, its place. */
 export declare function goneHeader(locale: string, location: string | null): string;
 /** Inverse of {@link goneHeader}; anything absent or malformed reads as nothing. */
 export declare function parseGoneHeader(value: string | null): {
     locale?: string;
     location?: string;
 };
-/**
- * The routes every landing has outside `[locale]`, which pass untouched: the
- * form target, its booking request (`bookingRoute`) and its price
- * confirmation (`confirmRoute`), the OG card, the probe, the sitemap and robots. Anything else without a language but
- * `/_next/…` and the site's `publicFiles` is `gone`.
- */
-export declare const NON_PAGE_ROUTES: readonly string[];
 /** @deprecated The same list as {@link NON_PAGE_ROUTES}, under its old name. */
 export declare const PASS_PATHS: readonly string[];
 /** The `[location]` param for a slug in a mode: `_royat` on its host, `royat` through the apex. */

package/dist/core/routing.js

@@ -1,3 +1,4 @@
+import { GONE, HOST_MARK, NON_PAGE_ROUTES, THANKS } from "../generated/contract.js";
 /**
  * Which place and which language a request gets, decided before any route
  * renders. Pure, so it is tested without a server — and mirrored by the Rust
@@ -29,14 +30,9 @@
  * must not be cached as permanent. Only page paths enter it — `/quote`,
  * `/sitemap.xml`, `/og` and the brand's files pass straight through.
  */
-/** Not indexable, not in the sitemap, but negotiated like any other page. */
-export const THANKS = "/thanks";
-export const LANG_COOKIE = "lang";
-export const LANG_COOKIE_MAX_AGE = 31_536_000;
-/** The prefix a `[location]` route param carries in host link mode. */
-export const HOST_MARK = "_";
+export { GONE, GONE_HEADER, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, THANKS } from "../generated/contract.js";
 /**
- * How a dead path reaches a 404 a visitor without JavaScript can read.
+ * The path no route matches, in a language.
  *
  * Next 16 cannot put a `notFound()` boundary into the HTML: that response is
  * an empty `<html id="__next_error__">` the client fills in after hydration.
@@ -46,18 +42,14 @@ export const HOST_MARK = "_";
  * says which language and place the 404 speaks for in {@link GONE_HEADER}.
  * Reserved: no place may take `404` as its slug.
  */
-export const GONE = "404";
-/** The path no route matches, in a language. */
 export function gonePath(locale) {
     return `/${locale}/${GONE}/${GONE}`;
 }
 /**
- * Set only by the proxy, on a `gone` rewrite, and stripped from every other
- * request; read only by the global not-found page, a route of its own — a
- * page that read it would render per request, and none does.
+ * `fr` or `fr/_royat`: the 404's language and, if it has one, its place. Read
+ * only by the global not-found page, a route of its own — a page that read it
+ * would render per request, and none does.
  */
-export const GONE_HEADER = "x-landing-not-found";
-/** `fr` or `fr/_royat`: the 404's language and, if it has one, its place. */
 export function goneHeader(locale, location) {
     return location ? `${locale}/${location}` : locale;
 }
@@ -68,13 +60,6 @@ export function parseGoneHeader(value) {
         return {};
     return { ...(locale ? { locale } : {}), ...(location ? { location } : {}) };
 }
-/**
- * The routes every landing has outside `[locale]`, which pass untouched: the
- * form target, its booking request (`bookingRoute`) and its price
- * confirmation (`confirmRoute`), the OG card, the probe, the sitemap and robots. Anything else without a language but
- * `/_next/…` and the site's `publicFiles` is `gone`.
- */
-export const NON_PAGE_ROUTES = ["/quote", "/quote/booking", "/quote/confirm", "/og", "/health", "/sitemap.xml", "/robots.txt"];
 /** @deprecated The same list as {@link NON_PAGE_ROUTES}, under its old name. */
 export const PASS_PATHS = NON_PAGE_ROUTES;
 function isInfrastructure(pathname, publicFiles) {

package/dist/core/seo/sitemap.d.ts

@@ -1,5 +1,6 @@
 import type { Place } from "../place/types.js";
 import type { Site } from "../site.js";
+export { AI_CRAWLERS } from "../../generated/contract.js";
 /**
  * One sitemap per host: a sitemap may only list URLs on its own host, and a
  * place's canonical host is its subdomain (the apex on a `single` site). The
@@ -36,8 +37,6 @@ export interface RobotsFile {
  * places a crawler drops).
  */
 export declare function sitemapFor<L extends string, P extends string>(site: Site<L, P>, host: string, places: readonly Place<L>[]): SitemapEntry[];
-/** Crawlers named explicitly: several treat a bare wildcard as ambiguous. */
-export declare const AI_CRAWLERS: string[];
 /**
  * Allow everything, and point at the host's own sitemap. Unpublished places
  * are held back by `noindex`, not here, so a crawler can still read the

package/dist/core/seo/sitemap.js

@@ -1,6 +1,8 @@
+import { AI_CRAWLERS } from "../../generated/contract.js";
 import { isPublished } from "../place/publication.js";
 import { placeOrigin, siteOrigin } from "../place/view.js";
 import { createRouting } from "../routing.js";
+export { AI_CRAWLERS } from "../../generated/contract.js";
 function cluster(site, origin, suffix, priority) {
     const languages = site.i18n.languageAlternates(suffix || "/", origin);
     return site.i18n.locales.map(locale => ({
@@ -28,8 +30,6 @@ export function sitemapFor(site, host, places) {
         return [];
     return site.pageKeys.flatMap(page => cluster(site, origin, site.pages[page], page === "home" ? 1 : 0.8));
 }
-/** Crawlers named explicitly: several treat a bare wildcard as ambiguous. */
-export const AI_CRAWLERS = ["GPTBot", "ClaudeBot", "PerplexityBot", "Google-Extended"];
 /**
  * Allow everything, and point at the host's own sitemap. Unpublished places
  * are held back by `noindex`, not here, so a crawler can still read the

package/dist/generated/contract.d.ts

@@ -0,0 +1,15 @@
+export declare const HONEYPOT_FIELD = "hp_ref";
+export declare const LEGACY_HONEYPOT_FIELDS: readonly ["website"];
+export declare const RENDERED_AT_FIELD = "t";
+export declare const MIN_FILL_MS = 3000;
+export declare const RATE_LIMIT_OVERFLOW_KEY = "\0overflow";
+export declare const THANKS = "/thanks";
+export declare const LANG_COOKIE = "lang";
+export declare const LANG_COOKIE_MAX_AGE = 31536000;
+export declare const HOST_MARK = "_";
+export declare const GONE = "404";
+export declare const GONE_HEADER = "x-landing-not-found";
+export declare const NON_PAGE_ROUTES: readonly ["/quote", "/quote/booking", "/quote/confirm", "/og", "/health", "/sitemap.xml", "/robots.txt"];
+export declare const OG_IMAGE_SIZE: readonly [1200, 630];
+export declare const RATING_MAX_AGE_DAYS = 30;
+export declare const AI_CRAWLERS: readonly ["GPTBot", "ClaudeBot", "PerplexityBot", "Google-Extended"];

package/dist/generated/contract.js

@@ -0,0 +1,16 @@
+// AUTO-GENERATED by `nix run .#gen` — do not edit.
+export const HONEYPOT_FIELD = "hp_ref";
+export const LEGACY_HONEYPOT_FIELDS = ["website"];
+export const RENDERED_AT_FIELD = "t";
+export const MIN_FILL_MS = 3000;
+export const RATE_LIMIT_OVERFLOW_KEY = "\0overflow";
+export const THANKS = "/thanks";
+export const LANG_COOKIE = "lang";
+export const LANG_COOKIE_MAX_AGE = 31536000;
+export const HOST_MARK = "_";
+export const GONE = "404";
+export const GONE_HEADER = "x-landing-not-found";
+export const NON_PAGE_ROUTES = ["/quote", "/quote/booking", "/quote/confirm", "/og", "/health", "/sitemap.xml", "/robots.txt"];
+export const OG_IMAGE_SIZE = [1200, 630];
+export const RATING_MAX_AGE_DAYS = 30;
+export const AI_CRAWLERS = ["GPTBot", "ClaudeBot", "PerplexityBot", "Google-Extended"];

package/dist/next/metadata.js

@@ -1,8 +1,8 @@
 import { isPublished } from "../core/place/publication.js";
+import { OG_IMAGE_SIZE } from "../generated/contract.js";
 import { placeOrigin, siteOrigin } from "../core/place/view.js";
 import { ogImageUrl } from "../core/seo/sitemap.js";
 import { ogLocaleOf } from "../core/site.js";
-const OG_SIZE = { width: 1200, height: 630 };
 const PRE_LAUNCH = { index: false, follow: false };
 function others(site, locale) {
     return site.i18n.locales.filter(l => l !== locale).map(l => ogLocaleOf(site, l));
@@ -22,7 +22,7 @@ function head(site, page) {
             ...(page.canonical !== null ? { url: page.canonical } : {}),
             locale: ogLocaleOf(site, page.locale),
             alternateLocale: others(site, page.locale),
-            images: [{ url: page.image, ...OG_SIZE }],
+            images: [{ url: page.image, width: OG_IMAGE_SIZE[0], height: OG_IMAGE_SIZE[1] }],
         },
         twitter: { card: "summary_large_image" },
     };

package/dist/next/og.js

@@ -1,9 +1,10 @@
 import { ImageResponse } from "next/og.js";
 import { memoByKey } from "../core/memo.js";
+import { OG_IMAGE_SIZE } from "../generated/contract.js";
 import { bakedPlace } from "../core/site.js";
 export function ogRoute(site, options) {
-    const width = options.width ?? 1200;
-    const height = options.height ?? 630;
+    const width = options.width ?? OG_IMAGE_SIZE[0];
+    const height = options.height ?? OG_IMAGE_SIZE[1];
     // Read once per process, like the cards; a failed read is retried next time.
     let fonts;
     const loadFonts = () => {

package/dist/server/index.d.ts

@@ -16,6 +16,6 @@ export { parseSmtpUrl, sendMail, type Mail, type SendOptions } from "./smtp.js";
 export { defaultLeadMail, leadNotifier, MAIL_PER_MINUTE, type LeadMail, type LeadMailShown, type LeadNotifier, type NeedLabel, type NotifyEnv } from "./notify.js";
 export { clientKey, NO_CLIENT_ADDRESS, parseProxyTrust, type ProxyTrust } from "./client-key.js";
 export { checkLeadStore } from "./boot.js";
-export { leadWebhook, panelChannel, panelFlowOf, panelFlowProperties, type BookingQueued, type BookingWebhookContext, type BuildBookingBody, type BuildWebhookBody, type LeadWebhook, type LeadWebhookContext, type LeadWebhookOptions, type PanelChannel, type PanelFlow, type PanelFlowProperties, } from "./lead-webhook.js";
+export { leadWebhook, panelChannel, panelFlowOf, panelFlowProperties, panelLocaleOf, panelLocaleProperties, type BookingQueued, type BookingWebhookContext, type BuildBookingBody, type BuildWebhookBody, type LeadWebhook, type LeadWebhookContext, type LeadWebhookOptions, type PanelChannel, type PanelFlow, type PanelFlowProperties, type PanelLocale, } from "./lead-webhook.js";
 export { checkWebhookUrl, openWebhookOutbox, WEBHOOK_HORIZON_MS, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_MAX_DELAY_MS, WEBHOOK_TICK_MS, type DeadRow, type OutboxRow, type OutboxState, type TickReport, type WebhookOutbox, type WebhookOutboxOptions, type WebhookTarget, } from "./webhook-outbox.js";
 export { signatureHeaders, signWebhook, type WebhookSignatureHeaders, type WebhookSigning } from "./webhook-signature.js";

package/dist/server/index.js

@@ -16,6 +16,6 @@ export { parseSmtpUrl, sendMail } from "./smtp.js";
 export { defaultLeadMail, leadNotifier, MAIL_PER_MINUTE } from "./notify.js";
 export { clientKey, NO_CLIENT_ADDRESS, parseProxyTrust } from "./client-key.js";
 export { checkLeadStore } from "./boot.js";
-export { leadWebhook, panelChannel, panelFlowOf, panelFlowProperties, } from "./lead-webhook.js";
+export { leadWebhook, panelChannel, panelFlowOf, panelFlowProperties, panelLocaleOf, panelLocaleProperties, } from "./lead-webhook.js";
 export { checkWebhookUrl, openWebhookOutbox, WEBHOOK_HORIZON_MS, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_MAX_DELAY_MS, WEBHOOK_TICK_MS, } from "./webhook-outbox.js";
 export { signatureHeaders, signWebhook } from "./webhook-signature.js";

package/dist/server/lead-webhook.d.ts

@@ -55,7 +55,22 @@ export interface LeadWebhookContext {
      * on a lead that has one; otherwise absent, and the body must not carry it.
      */
     messageRef?: string;
+    /**
+     * The language the visitor read the page in, as the panel's
+     * `properties.locale` takes it (`panelLocaleOf`): `fr` or `en` only, and
+     * only under `panelLocale`; otherwise absent, and the body must not carry
+     * the property. `panelLocaleProperties` writes it.
+     */
+    panelLocale?: PanelLocale;
 }
+/** The languages the Service-Arb panel's `lead.created` takes in `properties.locale`. */
+export type PanelLocale = "fr" | "en";
+/** The panel's locale for a site locale (`fr`, `en-GB` → `en`), or nothing for one it does not take. */
+export declare function panelLocaleOf(locale: string): PanelLocale | undefined;
+/** `ctx.panelLocale` as `lead.created`'s properties, to spread into the body's `properties`; `{}` without one. */
+export declare function panelLocaleProperties(locale: PanelLocale | undefined): {
+    locale?: PanelLocale;
+};
 /** A lead's sale as the panel's `lead.created` may carry it. */
 export interface PanelFlow {
     flow: LeadFlow;
@@ -146,6 +161,8 @@ export interface LeadWebhook {
     readonly panelBooking?: boolean;
     /** Whether `ctx.channel` says `whatsapp` / `telegram` and `ctx.messageRef` is filled in (`LeadWebhookOptions.panelMessenger`). */
     readonly panelMessenger?: boolean;
+    /** Whether `ctx.panelLocale` is filled in (`LeadWebhookOptions.panelLocale`). */
+    readonly panelLocale?: boolean;
     /**
      * Queues `booking.requested@1` behind the lead's `lead.created`, through
      * the same outbox: not sent until that row is delivered, and a `409` / `425`
@@ -198,6 +215,13 @@ export interface LeadWebhookOptions extends WebhookOutboxOptions {
      * messenger lead goes as a `form`, without its reference.
      */
     panelMessenger?: boolean;
+    /**
+     * The switch for `properties.locale` (`ctx.panelLocale`: `fr` or `en`). Off
+     * (the default) until the panel's `lead.created` accepts the property — it
+     * refuses an unknown one, and the outbox would park the lead. Off, the
+     * context carries nothing and the body is as it was.
+     */
+    panelLocale?: boolean;
     /** The body of `booking.requested@1`; absent → booking requests are dropped whatever `panelBooking` says. */
     buildBookingBody?: BuildBookingBody | undefined;
 }

package/dist/server/lead-webhook.js

@@ -3,6 +3,15 @@ import { randomUUID } from "node:crypto";
 import { channelOf, suspectOf } from "../core/lead.js";
 import { experimentsDeclaredBody } from "./experiments-declared.js";
 import { openWebhookOutbox } from "./webhook-outbox.js";
+/** The panel's locale for a site locale (`fr`, `en-GB` → `en`), or nothing for one it does not take. */
+export function panelLocaleOf(locale) {
+    const primary = locale.toLowerCase().split(/[-_]/, 1)[0];
+    return primary === "fr" || primary === "en" ? primary : undefined;
+}
+/** `ctx.panelLocale` as `lead.created`'s properties, to spread into the body's `properties`; `{}` without one. */
+export function panelLocaleProperties(locale) {
+    return locale ? { locale } : {};
+}
 /** The sale `ctx.flow` describes, or nothing for a lead without a flow. */
 export function panelFlowOf(lead) {
     if (!lead.flow)
@@ -40,7 +49,7 @@ export function panelChannel(channel, messenger = false) {
  * so a broken setting fails startup rather than a lead.
  */
 export function leadWebhook(site, env, options) {
-    const { buildBody, buildBookingBody, signing, panelSuspect = false, panelFlow = false, panelBooking = false, panelMessenger = false, ...outboxOptions } = options;
+    const { buildBody, buildBookingBody, signing, panelSuspect = false, panelFlow = false, panelBooking = false, panelMessenger = false, panelLocale = false, ...outboxOptions } = options;
     if (!env.leadWebhook || !buildBody)
         return null;
     if (env.leadsDb.kind !== "sqlite")
@@ -54,6 +63,7 @@ export function leadWebhook(site, env, options) {
         panelFlow,
         panelBooking,
         panelMessenger,
+        panelLocale,
         requestBooking(request) {
             if (!panelBooking || !buildBookingBody)
                 return { kind: "off" };
@@ -77,6 +87,7 @@ export function leadWebhook(site, env, options) {
         enqueue(lead, id, meta) {
             const suspect = panelSuspect ? suspectOf(lead) : undefined;
             const flow = panelFlow ? panelFlowOf(lead) : undefined;
+            const locale = panelLocale ? panelLocaleOf(meta.locale) : undefined;
             const ctx = {
                 leadId: id,
                 brandId: site.brand.id,
@@ -87,6 +98,7 @@ export function leadWebhook(site, env, options) {
                 ...(flow ? { flow } : {}),
                 channel: panelChannel(channelOf(lead), panelMessenger),
                 ...(panelMessenger && lead.messageRef ? { messageRef: lead.messageRef } : {}),
+                ...(locale ? { panelLocale: locale } : {}),
             };
             const body = JSON.stringify(buildBody(lead, ctx));
             if (typeof body !== "string")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evinvest/kitstart",
-  "version": "0.19.1",
+  "version": "0.20.0",
   "description": "Landing-site machinery for local-service brands: a site composition root, the Place/Presence/ServiceArea model with a publication gate, host/locale routing, schema.org and SEO builders, the lead funnel with its antispam, and analytics events. Pure core at '.', more subpaths per runtime.",
   "license": "BlueOak-1.0.0",
   "publishConfig": {

package/template/flake.nix

@@ -3,7 +3,7 @@
     v_flakes.url = "github:valeratrades/v_flakes?ref=v1.6";
     # The lib flake at the tag of the @evinvest/kitstart version in
     # package-lock.json — mkLanding refuses a mismatch.
-    ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.19.1";
+    ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.20.0";
     ev.inputs.v_flakes.follows = "v_flakes";
   };
 

package/template/package.json

@@ -19,8 +19,8 @@
   },
   "dependencies": {
     "@evinvest/analytics": "^0.4.0",
-    "@evinvest/i18n": "^0.10.0",
-    "@evinvest/kitstart": "^0.19.0",
+    "@evinvest/i18n": "^0.11.0",
+    "@evinvest/kitstart": "^0.20.0",
     "@evinvest/marketing": "^0.3.0",
     "@evinvest/uikit": "^0.29.0",
     "next": "16.4.0",