@getvitops/generator 6.0.0 → 8.0.0

package/dist/index.mjs

@@ -9,6 +9,7 @@ import { LIGHTNESS_LADDER, contrastLc, generateOklchPalette, hexToOklch, oklchSt
 import { AD_PLATFORMS, AD_PROVIDER_KEYS } from "@getvitops/utils/ads";
 import { generateIconInclude, nodesToHtml, resolveIcon, t } from "@getvitops/utils";
 import { getIconData, iconToSVG, replaceIDs } from "@iconify/utils";
+import { resolveSitemapUrl } from "@getvitops/utils/indexing";
 
 //#region src/shared.ts
 /**
@@ -187,7 +188,9 @@ const TW_CLASH = new Set([
 	"text-wrap",
 	"text-nowrap",
 	"text-balance",
-	"text-pretty"
+	"text-pretty",
+	"rounded-none",
+	"rounded-full"
 ]);
 
 //#endregion
@@ -326,7 +329,7 @@ const LADDER_TOLERANCE = .03;
 function ladderWarnings(palette) {
 	const warnings = [];
 	for (const [hue, expanded] of Object.entries(palette)) for (const [step, deviation] of Object.entries(expanded.deviations ?? {})) {
-		if (Math.abs(deviation) <= .03) continue;
+		if (Math.abs(deviation) <= LADDER_TOLERANCE) continue;
 		const dir = deviation > 0 ? "lighter" : "darker";
 		warnings.push(`colors.palette.${hue}: the colour pinned at step ${step} is ${Math.abs(deviation).toFixed(3)} ${dir} than the shared lightness ladder — this hue will read ${dir} than others at ${step}. Legal, but move it to a neighbouring step if that wasn't intended.`);
 	}
@@ -1257,6 +1260,18 @@ const OpeningHoursSchema = z.object({
 	opens: z.string().check(z.regex(/^\d{2}:\d{2}$/)),
 	closes: z.string().check(z.regex(/^\d{2}:\d{2}$/))
 });
+/**
+* A dated deviation from the recurring `hours` — holiday hours, a one-off
+* closure, a temporary schedule. Same schema.org shape
+* (`OpeningHoursSpecification`), distinguished by carrying `validFrom`. A
+* full closure omits `opens`/`closes` rather than encoding an open interval.
+*/
+const SpecialHoursSchema = z.object({
+	validFrom: IsoDate,
+	validThrough: z.optional(IsoDate),
+	opens: z.optional(z.string().check(z.regex(/^\d{2}:\d{2}$/))),
+	closes: z.optional(z.string().check(z.regex(/^\d{2}:\d{2}$/)))
+});
 const LocalBusinessType = z.enum([
 	"LocalBusiness",
 	"Store",
@@ -1272,6 +1287,11 @@ const LocalBusinessType = z.enum([
 	"RealEstateAgent",
 	"Organization"
 ]);
+const ListingPlatform = z.enum([
+	"google",
+	"bing",
+	"apple"
+]);
 const LocationSchema = z.object({
 	slug: z.optional(LocalizableSchema),
 	name: LocalizableSchema,
@@ -1280,13 +1300,17 @@ const LocationSchema = z.object({
 	address: z.optional(PostalAddressSchema),
 	geo: z.optional(GeoSchema),
 	hours: z.optional(z.array(OpeningHoursSchema)),
+	hoursSpecial: desc(z.optional(z.array(SpecialHoursSchema)), "Holiday/temporary hours, as dated deviations from the recurring `hours` — distinct from it because these carry a date range rather than a weekday."),
 	type: z.optional(LocalBusinessType),
 	description: z.optional(LocalizableSchema),
 	areaServed: z.optional(z.array(z.string())),
 	priceRange: z.optional(z.string()),
 	paymentAccepted: z.optional(z.array(z.string())),
 	currenciesAccepted: z.optional(Iso4217),
-	knowsLanguage: z.optional(z.array(z.string()))
+	knowsLanguage: z.optional(z.array(z.string())),
+	photos: desc(z.optional(z.array(ImageRefSchema)), "Location photos (logo, storefront, interior, …) → JSON-LD `image`. Every listing platform (GBP, Bing Places, Apple Business Connect) wants these; none can derive them."),
+	sameAs: desc(z.optional(z.array(z.url())), "This location's own profile URLs (its Google Business Profile, Bing Places listing, Apple Business Connect location, Facebook page, …) → JSON-LD `sameAs`. Distinct from `organization.sameAs`, which is the company overall — a multi-location org's locations do not share one GBP listing."),
+	listings: desc(z.optional(z.partialRecord(ListingPlatform, z.string())), "External listing IDs for this location, keyed by platform — the Google Business Profile location id, the Bing Places business id, the Apple Business Connect location id. Not consumed by the generator today; recorded here so a future sync has a stable id to match against instead of risking a duplicate listing.")
 });
 const OrganizationSchema = z.object({
 	name: desc(z.optional(LocalizableSchema), "Trading name, as a reader would recognise it (e.g. \"Acme\"). Localisable."),
@@ -1595,6 +1619,27 @@ const AdPropertySchema = z.object({
 	enabled: desc(z.optional(z.boolean()), "Set false to keep the property on record without emitting its tag.")
 });
 /**
+* How one location's Google reviews are selected and ordered for display.
+*
+* Keyed by `organization.locations` key, mirroring `site.ads`/`site.searchConsole`
+* — `vitops reviews` needs to know which physical location a fetched review set
+* belongs to, and that record already exists.
+*/
+const ReviewLocationSchema = z.object({
+	accountId: desc(z.optional(z.string()), "GBP account resource id (`accounts/…`), overriding `site.reviews.accountId` for this location."),
+	locationId: desc(z.string(), "GBP location resource id (`locations/…`) to fetch reviews for."),
+	featured: desc(z.optional(z.array(z.string())), "Review ids to always include, in this order, ahead of everything else automatically selected."),
+	minRating: desc(z.optional(z.number()), "Drop reviews below this star rating (default 4) from the automatic (non-featured) selection."),
+	limit: desc(z.optional(z.number()), "Keep at most this many reviews after filtering."),
+	sort: desc(z.optional(z.enum(["recent", "rating"])), "Ordering for the non-featured remainder (default `recent`).")
+});
+const ReviewsSchema = z.object({
+	accountId: desc(z.optional(z.string()), "Default GBP account resource id (`accounts/…`) for locations that do not override it."),
+	locations: desc(z.record(z.string(), ReviewLocationSchema), "Which `organization.locations` to fetch Google reviews for, and how each one’s reviews are filtered/ordered. `vitops reviews` writes the result to `.vitops/reviews.json`."),
+	schema: desc(z.optional(z.boolean()), "Emit `Review` JSON-LD for these reviews (default false). Off by default: Google’s structured-data policy treats a business marking up reviews of itself as ineligible for review rich results, and risks a manual action."),
+	avatars: desc(z.optional(z.boolean()), "Render the reviewer’s Google-hosted avatar photo (default false). Off by default: every visitor would otherwise issue a third-party request to googleusercontent.com, and the URLs are not guaranteed to stay live.")
+});
+/**
 * Which template set the generated legal documents are written against. This is
 * a closed enum rather than a free string because an unrecognised value would
 * otherwise silently fall back to the wrong body of law; `validateConfig` rejects
@@ -1646,7 +1691,8 @@ const SiteSectionSchema = z.object({
 	})), "Canonical domain + redirecting aliases."),
 	dns: desc(z.optional(z.record(z.string(), DnsDomainSchema)), "Desired DNS state per domain (provider, nameservers, records) — declarative reference, not applied automatically."),
 	cloudflare: desc(z.optional(z.record(z.string(), z.unknown())), "Deliberate escape hatch for provider-specific Cloudflare settings — out of scope to model here."),
-	searchConsole: desc(z.optional(z.record(z.string(), SearchConsoleSetupSchema)), "Domains to onboard as Google Search Console *domain properties* via `vitops search setup`, keyed by bare hostname (mirrors `dns`). Credentials come from the environment (CLOUDFLARE_API_TOKEN + the Google OAuth vars) — never in this file."),
+	google: desc(z.optional(z.object({ project: desc(z.string(), "Google Cloud project id that API usage is attributed to (quota and billing). One project per site keeps usage separate — Search Console today, Maps and anything else later. Sent as `x-goog-user-project`, which is required when the credential is a *user* one (an ADC login from `gcloud auth application-default login`, or `VITOPS_GOOGLE_*`): those use a shared OAuth client that carries no project of its own. A service-account credential belongs to a project already, so this is not needed for it. The identity must hold `serviceusage.services.use` on the project, and the APIs being called must be enabled there.") })), "This site's Google Cloud project. Not a secret — the credentials stay in the environment."),
+	searchConsole: desc(z.optional(z.record(z.string(), SearchConsoleSetupSchema)), "Domains to onboard as Google Search Console *domain properties* via `vitops search setup`, keyed by bare hostname (mirrors `dns`). Credentials come from the environment (CLOUDFLARE_API_TOKEN + the Google OAuth vars) — never in this file. Set `google.project` when using a user credential."),
 	environments: desc(z.record(z.string(), EnvironmentSchema), "Deploy environments (production, dev, …): URL, API origin, analytics toggle, robots policy, active A/B variant."),
 	abTesting: desc(z.optional(z.object({
 		enabled: z.boolean(),
@@ -1700,6 +1746,7 @@ const SiteSectionSchema = z.object({
 		platforms: desc(z.optional(z.array(z.string())), "Informational list of ad platforms in use. Capture recognises every known click-ID parameter regardless.")
 	})), "Ad-click attribution for conversion tracking."),
 	ads: desc(z.optional(z.partialRecord(AdProviderSchema, AdPropertySchema)), "Ad properties this site is linked to, keyed by platform. Read by `vitops ads setup` (ensure the DNS verification record), `vitops ads tags` (emit the consent-gated pixel), and the generated cookie notice (disclose what each pixel stores). Credentials never live here — the DNS write uses CLOUDFLARE_API_TOKEN from the environment."),
+	reviews: desc(z.optional(ReviewsSchema), "Google Business Profile reviews to cache and display, keyed by `organization.locations`. Read by `vitops reviews`. Credentials never live here — a Google OAuth credential comes from the environment, same as `site.searchConsole`."),
 	security: desc(z.optional(z.object({ turnstile: z.optional(z.object({ siteKey: desc(z.optional(z.string()), "Cloudflare Turnstile site key (public).") })) })), "Security integrations (bot protection)."),
 	legal: desc(z.optional(z.object({
 		jurisdiction: desc(z.optional(JurisdictionSchema), "Which legal template set the generated documents use. Default `ca`."),
@@ -1986,6 +2033,17 @@ function validateConfig(input) {
 		if (entry.domainVerification != null && entry.domain == null && site.domains?.canonical == null) errors.push(issue([...at, "domain"], `site.ads.${provider}.domainVerification needs a domain to put the record on — set site.domains.canonical, or state site.ads.${provider}.domain explicitly`));
 		if (entry.accountId == null && entry.pixelId == null) errors.push(issue(at, `site.ads.${provider} identifies nothing — set accountId (the advertising account) and/or pixelId (the tag: ${platform.tag.needs} is what its snippet needs)`));
 	}
+	for (const [key, entry] of Object.entries(site.reviews?.locations ?? {})) {
+		const at = [
+			"site",
+			"reviews",
+			"locations",
+			key
+		];
+		if (!has(org?.locations, key)) errors.push(issue(at, `"${key}" is not an organization.locations key`));
+		else if (org?.locations?.[key]?.listings?.google == null) errors.push(issue(at, `organization.locations.${key} has no listings.google id — record the GBP location id there first`));
+		if (entry.accountId == null && site.reviews?.accountId == null) errors.push(issue([...at, "accountId"], `no accountId — set site.reviews.accountId or site.reviews.locations.${key}.accountId`));
+	}
 	if (errors.length) return {
 		ok: false,
 		data: void 0,
@@ -2212,13 +2270,14 @@ const TIERS = {
 			"tree",
 			"tree__item",
 			"tree__content",
+			"tree__summary",
 			"tree__toggle",
 			"tree__label"
 		], "patterns/tree.css", true),
 		wc: {
 			tag: "wc-tree",
 			registered: true,
-			adds: "filter, expand/collapse all, hash deep-linking"
+			adds: "WAI-ARIA tree semantics, roving-tabindex keyboard navigation, filter, expand/collapse all, hash deep-linking"
 		},
 		astro: a("Tree", "wc"),
 		use: "`<Tree items={…} />` — it emits `<wc-tree>` itself, so do NOT add your own wrapper."
@@ -2240,6 +2299,21 @@ const TIERS = {
 		bricks: "vitops-carousel",
 		use: "`<Carousel slides={…} label=\"…\" />` — it emits `<wc-carousel>` itself, so do NOT add your own wrapper. `.carousel` is the shell and `.carousel__track` the scroller; add `loop` for the cloned infinite strip (`autoplay` implies it)."
 	},
+	gallery: {
+		css: c([
+			"gallery",
+			"gallery__item",
+			"gallery__trigger",
+			"gallery__thumb"
+		], "patterns/gallery.css", true),
+		wc: {
+			tag: "wc-gallery",
+			registered: true,
+			adds: "a real `showModal()` open, neighbour preload and the thumbnail→full-image view-transition morph"
+		},
+		astro: a("Gallery", "wc"),
+		use: "`<Gallery images={…} label=\"…\" />` — it emits `<wc-gallery>` wrapping a `<Carousel />` (which emits its own `<wc-carousel>`) itself, so do NOT add your own wrapper around either. Each thumbnail is a plain `<a href=\"#slide-id\">` into the carousel's own `<li id=\"slide-id\">` inside a single `<dialog class=\"lightbox-dialog\">` (see `lightbox`), so it is a working modal lightbox — WITH prev/next — before any script runs. Stepping between images is the carousel's job, not the gallery's."
+	},
 	entries: {
 		css: c([
 			"entries__table",
@@ -2318,7 +2392,22 @@ const TIERS = {
 			registered: true,
 			adds: "fills the track with enough copies to scroll seamlessly"
 		},
-		use: "`<wc-marquee>` around one `.marquee__content`. Scrolls via CSS alone; JS only removes the seam."
+		astro: a("Marquee", "wc"),
+		use: "`<Marquee>` around one `.marquee__content`, or `<wc-marquee>` by hand. Scrolls via CSS alone; JS only removes the seam."
+	},
+	counter: {
+		css: c([
+			"counter",
+			"counter__value",
+			"counter__presentation"
+		], "patterns/counter.css"),
+		wc: {
+			tag: "wc-counter",
+			registered: true,
+			adds: "animates from a start value to the value already in the fallback text, on intersection"
+		},
+		astro: a("Counter", "wc"),
+		use: "`<Counter value=\"94%\" />` — it emits `<wc-counter>` itself, so do NOT add your own wrapper. The final value is parsed from the fallback text, never passed separately."
 	},
 	"multi-field": {
 		css: c([
@@ -2579,8 +2668,12 @@ const TIERS = {
 		use: "`.notification` with a role variant; wrap in `<wc-dismissable>` to make it dismissable."
 	},
 	lightbox: {
-		css: c(["lightbox", "lightbox-dialog__content"], "patterns/lightbox.css", true),
-		use: "`.lightbox` thumbnails plus a `<dialog>`."
+		css: c([
+			"lightbox-dialog",
+			"lightbox-dialog__track",
+			"lightbox-dialog__close"
+		], "patterns/lightbox.css", true),
+		use: "The single `<dialog class=\"lightbox-dialog\">` a gallery opens — it wraps ONE `.carousel` (`lightbox-dialog__track`) of every image, not one dialog per image. Use `gallery` for the thumbnail grid that drives it — `<Gallery />` emits both, and the carousel inside already owns prev/next/dots/keys/swipe."
 	},
 	comment: {
 		css: c([
@@ -2590,6 +2683,17 @@ const TIERS = {
 		], "patterns/comment.css", true),
 		use: "`.comment` inside `.comment-thread`."
 	},
+	review: {
+		css: c([
+			"review",
+			"review__stars",
+			"review__body",
+			"review__reply",
+			"review__source"
+		], "patterns/review.css", true),
+		astro: a("ReviewCard", "css"),
+		use: "`<ReviewCard review={…} />` — one card, from `vitops reviews`' `.vitops/reviews.json` cache. Put several inside `<Carousel>` slides or `<Marquee>` items; there is no group component and no `wc-review`."
+	},
 	tabs: {
 		css: c(["tabs"], void 0, true),
 		use: "Generated pattern only; no structural partial and no component yet."
@@ -3451,6 +3555,9 @@ and a heading and a footer, \`subgrid\` is the one that makes them line up. Neve
 - **Display** — \`block\`, \`inline\`, \`inline-block\`, \`flex\`, \`grid\`, \`hidden\`
   (breakpoint-prefixable, e.g. \`md-hidden\`).
 - **Accessibility** — \`sr-only\` / \`not-sr-only\` (breakpoint-prefixable).
+- **Shape** — \`rounded-none\`, \`rounded-full\` (the two radii with no design-token meaning of
+  their own; every other radius comes from the pattern token cascade, not a utility). Tailwind
+  ships its own \`rounded-*\` scale, so these are css/bricks only.
 - **State hooks** — \`is-active\`, \`is-open\` (styling flags toggled by JS / native state).
 
 ## Spacing
@@ -4007,11 +4114,12 @@ split in two rather than shelved whole. \`layout.css\` (patterns) and \`layout-u
 format reaches the same arrangement by its own route — patterns in \`@layer components\`,
 utilities as \`@utility\`.
 
-Known gap: the \`typography.headings\` bare-element bindings (\`h1\`, \`h2\`, \`body\`) are
-emitted alongside \`.font-<role>\` and so sit in \`vitops.utilities\`, where a tag rule
-outranks every pattern — \`<h2 class="pull-quote">\` keeps the heading's font-size in
-\`css\`/\`bricks\` and the pattern's in \`tailwind\`, which puts the bindings in \`@layer base\`.
-Give the element a \`.font-<role>\` class to pin it either way.
+The \`typography.headings\` bare-element bindings (\`h1\`, \`h2\`, \`body\`) are a DEFAULT for an
+unstyled element, not a utility, so they emit into their own chunk in \`vitops.base\` — below
+every pattern — rather than alongside \`.font-<role>\` in \`vitops.utilities\`. That is what lets
+\`<h2 class="pull-quote">\` keep the pattern's font-size in every format: the bare \`h2\` binding
+never outranks \`.pull-quote\`, regardless of specificity, because a layer decides before
+specificity is ever asked.
 
 ## \`bricks\` — WordPress / Bricks Builder payload
 
@@ -5009,6 +5117,7 @@ grants**, tracking where each command runs:
 | --- | --- | --- |
 | **Service account** (JWT bearer) | \`VITOPS_GSC_SERVICE_ACCOUNT\` (inline JSON) or \`GOOGLE_APPLICATION_CREDENTIALS\` (path) | \`search notify\` — never expires, right for CI |
 | **User OAuth** (refresh token) | \`VITOPS_GOOGLE_CLIENT_ID\` / \`_CLIENT_SECRET\` / \`_REFRESH_TOKEN\` | \`search setup\` — **required** |
+| **User OAuth via ADC** (fallback) | none — a \`gcloud auth application-default login\` credential | either, when no \`VITOPS_GOOGLE_*\` is set |
 
 Cloudflare uses \`CLOUDFLARE_API_TOKEN\` (a \`Zone:DNS:Edit\` token; the standard "Edit zone DNS"
 template also carries the \`Zone:Read\` the zone-by-name lookup needs).
@@ -5022,6 +5131,33 @@ revoked, and for an OAuth client still in *Testing* publishing status Google exp
 Console does not care which identity calls it, and someone who has run \`search setup\` already
 holds a Google credential.
 
+**Being logged in to gcloud is enough**, which also sidesteps the 7-day expiry above — the Cloud
+SDK client is published, so its refresh token doesn't rot. The Search Console scopes are not in
+the default ADC set, so ask for them:
+
+\`\`\`
+gcloud auth application-default login \\
+  --scopes=openid,https://www.googleapis.com/auth/siteverification,\\
+https://www.googleapis.com/auth/webmasters,https://www.googleapis.com/auth/cloud-platform
+\`\`\`
+
+Explicit \`VITOPS_GOOGLE_*\` vars win over it: a stale local login silently overriding a
+deliberate CI secret is the worst available precedence.
+
+Two things follow from ADC using a **shared** OAuth client, and both fail as a bare \`403\`:
+
+- **It owns no project, so \`site.google.project\` is required** — sent as \`x-goog-user-project\`.
+  Without it: *"requires a quota project, which is not set by default"*. A service account
+  belongs to a project already, so the header is **not** sent for one; attaching a different
+  project would newly require \`serviceusage.services.use\` there and break a working credential.
+- **That project needs the APIs enabled** (\`searchconsole.googleapis.com\`,
+  \`siteverification.googleapis.com\`) and \`serviceusage.services.use\` for the identity. One
+  project per site keeps usage and billing separate — one grant per site, one admin identity.
+
+\`GOOGLE_APPLICATION_CREDENTIALS\` carries **either kind**, since it is both Google's convention
+and where gcloud writes ADC. It is discriminated on the JSON's \`type\` field, never on which
+fields are present.
+
 ⚠️ Do not add \`googleapis\` — an enormous dependency for a handful of REST endpoints in a CLI
 that installs into every consumer project. The JWT is minted with ~30 lines of \`node:crypto\`.
 `;
@@ -5322,7 +5458,7 @@ function emitDesignMd(ctx) {
 	if (pDefaults.br) pushRadius("DEFAULT", pDefaults.br);
 	for (const [n, v] of Object.entries(pRadii)) pushRadius(n, v);
 	const roundedNames = new Set(rounded.map(([k]) => k));
-	/** `var(--br-default)` → `{rounded.DEFAULT}`, `var(--br-pill, 999px)` → `{rounded.pill}`. */
+	/** `var(--br-default)` → `{rounded.DEFAULT}`, `var(--br-circle, 50%)` → `{rounded.circle}`. */
 	const roundedRef = (value) => {
 		const v = varName(value);
 		const bare = v?.startsWith("br-") ? v.slice(3) : void 0;
@@ -7281,8 +7417,10 @@ function build(ds, format, assetsDir, buildOpts = {}) {
 		const headings = typography?.headings ?? {};
 		let typo = `/* GENERATED typography roles — do not edit by hand. */\n`;
 		for (const [role, spec] of Object.entries(roles)) typo += `.font-${role} {\n${decls(roleDecls(role, spec))}\n}\n`;
-		for (const [tag, role] of Object.entries(headings)) if (roles[role]) typo += `${tag} {\n${decls(roleDecls(role, roles[role]))}\n}\n`;
 		generated["typography.css"] = typo;
+		let typoHeadings = `/* GENERATED typography.headings bare-element bindings — do not edit by hand. */\n`;
+		for (const [tag, role] of Object.entries(headings)) if (roles[role]) typoHeadings += `${tag} {\n${decls(roleDecls(role, roles[role]))}\n}\n`;
+		generated["typography-headings.css"] = typoHeadings;
 	}
 	const stateRules = (sel, role, states, colorProp = "background-color") => {
 		let out = "";
@@ -8038,6 +8176,7 @@ const CHUNK_LAYER = {
 	"global.css": "vitops.base",
 	"generated/type-tokens.css": "vitops.base",
 	"generated/tokens.css": "vitops.base",
+	"generated/typography-headings.css": "vitops.base",
 	"generated/color.css": "vitops.utilities",
 	"generated/shadows.css": "vitops.utilities",
 	"generated/typography.css": "vitops.utilities",
@@ -8207,6 +8346,68 @@ function loadConfigFile(input, siteEnv) {
 	return resolveConfig(typeof input === "string" ? JSON.parse(readFileSync(input, "utf8")) : input, siteEnv);
 }
 
+//#endregion
+//#region src/robots.ts
+/**
+* `robots.txt`, generated from the same fact the indexing gate and the
+* `<meta name="robots">` tag already read.
+*
+* Before this, nothing in the toolchain emitted one at all — a staging
+* environment with `robots: "noindex,nofollow"` got a `<meta>` tag and a
+* blocked `search notify` run, but a crawler reading `/robots.txt` directly
+* saw nothing and was free to index it anyway. `plan()`
+* (`@getvitops/utils/indexing`) already treats `noindex` in the resolved
+* environment's directive as a hard stop for notifying search engines; this is
+* the same fact, read the same way, applied to the file crawlers actually ask
+* for first.
+*
+* A sibling of `generateLegal`, not a `generate()` format: this renders from a
+* **`Config`** (a `site.environments` entry), not a `DesignSystem`, so bolting
+* it onto `generate()` would be a format that ignores its own input.
+*
+* Pure: no filesystem, no clock, no shared state. The CLI writes it to stdout
+* or `--out`; the Astro integration writes `public/robots.txt` directly,
+* mirroring how it already writes the IndexNow key file.
+*/
+/**
+* A directive string (`site.environments[env].robots` or `site.seo.robots`)
+* blocks indexing if it contains `noindex` — matching `plan()`'s own check in
+* `@getvitops/utils/indexing`, so the two can't read the same fact two ways.
+*/
+function isBlocked(directive) {
+	return /noindex/i.test(directive ?? "");
+}
+/**
+* Render `robots.txt` for one environment.
+*
+* A blocked environment gets `Disallow: /` for every user agent and no sitemap
+* line — publishing the sitemap of a site asking not to be indexed would be
+* the more damaging way to get this wrong, handing every listed URL to a
+* crawler that then finds itself blocked from all of them, but has already
+* seen where they are. An allowed environment gets a permissive robots.txt
+* plus a `Sitemap:` line, using the exact URL `vitops search notify` would
+* submit — `site.seo.indexing.sitemapUrl`, or `<canonical>/sitemap-index.xml`,
+* the same default `@astrojs/sitemap` produces.
+*/
+function renderRobotsTxt(cfg, options = {}) {
+	const envName = options.env ?? "production";
+	const site = cfg.site;
+	const env = site.environments?.[envName];
+	const directive = env?.robots ?? site.seo?.robots;
+	const lines = ["User-agent: *"];
+	if (isBlocked(directive)) {
+		lines.push("Disallow: /");
+		return lines.join("\n") + "\n";
+	}
+	lines.push("Allow: /");
+	const sitemapUrl = resolveSitemapUrl({
+		canonical: env?.url ?? site.domains?.canonical,
+		sitemapUrl: site.seo?.indexing?.sitemapUrl
+	});
+	if (sitemapUrl) lines.push("", `Sitemap: ${sitemapUrl}`);
+	return lines.join("\n") + "\n";
+}
+
 //#endregion
 //#region src/index.ts
 /**
@@ -8308,10 +8509,7 @@ function defaultConfig() {
 				p: "1rem",
 				fs: "1rem"
 			},
-			radii: {
-				pill: "999px",
-				circle: "50%"
-			},
+			radii: { circle: "50%" },
 			groups: {
 				control: {
 					ds: "var(--ds-default)",
@@ -8486,5 +8684,5 @@ function defaultConfig() {
 }
 
 //#endregion
-export { AD_PROVIDERS, BASE_HOOK, CONFIG_SCHEMA_URL, CONTRAST, ConfigSchema, DARK_SEL, DOC_ORDER, DOC_SLUGS, DesignSystemSchema, JURISDICTIONS, JURISDICTION_COUNTRIES, KNOWN_PROCESSORS, NUMERIC_STEPS, REQUIRED_ROLES, ROLE_TOKEN_KEYS, SCHEMA_LOCAL_PATH, SCHEMA_URL, SiteFontSchema, TEMPLATES, TIERS, TIER_NAMES, TW_CLASH, buildIconSprite, configJsonSchema, deepMerge, defaultConfig, derivePolicyVars, detectProcessorKeys, enabledDocs, expandPalette, functionalRole, generate, generateDocs, generateLegal, isConfig, jsonSchema, loadIconSvg, movedTokens, parseMarkdown, processorsMissingLocation, renderInlineMarkdown, renderMarkdown, renderNodes, resolveConfig, resolveInput, resolvePrivacyContact, resolveProcessors, resolveTheme, roleColorUtilities, roleHue, roleKind, schemaTreeNodes, spriteId, stripNulls, tierPatterns, tierTags, toContentNodes, toHtmlFragment, toPortableText, tokenClass, tokenVar, validate, validateConfig };
+export { AD_PROVIDERS, BASE_HOOK, CONFIG_SCHEMA_URL, CONTRAST, ConfigSchema, DARK_SEL, DOC_ORDER, DOC_SLUGS, DesignSystemSchema, JURISDICTIONS, JURISDICTION_COUNTRIES, KNOWN_PROCESSORS, NUMERIC_STEPS, REQUIRED_ROLES, ROLE_TOKEN_KEYS, SCHEMA_LOCAL_PATH, SCHEMA_URL, SiteFontSchema, TEMPLATES, TIERS, TIER_NAMES, TW_CLASH, buildIconSprite, configJsonSchema, deepMerge, defaultConfig, derivePolicyVars, detectProcessorKeys, enabledDocs, expandPalette, functionalRole, generate, generateDocs, generateLegal, isConfig, jsonSchema, loadIconSvg, movedTokens, parseMarkdown, processorsMissingLocation, renderInlineMarkdown, renderMarkdown, renderNodes, renderRobotsTxt, resolveConfig, resolveInput, resolvePrivacyContact, resolveProcessors, resolveTheme, roleColorUtilities, roleHue, roleKind, schemaTreeNodes, spriteId, stripNulls, tierPatterns, tierTags, toContentNodes, toHtmlFragment, toPortableText, tokenClass, tokenVar, validate, validateConfig };
 //# sourceMappingURL=index.mjs.map