@lynkow/next 0.1.0

package/LICENSE

@@ -0,0 +1,29 @@
+Lynkow SDK - Proprietary License
+
+Copyright (c) 2026 Lynkow. All rights reserved.
+
+This software and associated documentation files (the "Software") are the
+proprietary property of Lynkow and are protected by copyright law.
+
+PERMITTED USE:
+- You may use this Software solely in connection with Lynkow services
+- You may install and use the Software in your applications that integrate
+  with the Lynkow platform
+
+RESTRICTIONS:
+- You may NOT copy, modify, merge, publish, distribute, sublicense, or sell
+  copies of the Software
+- You may NOT reverse engineer, decompile, or disassemble the Software
+- You may NOT use the Software for any purpose other than integrating with
+  Lynkow services
+- You may NOT remove or alter any proprietary notices or labels on the Software
+
+NO WARRANTY:
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+LYNKOW BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+For licensing inquiries, contact: contact@lynkow.com

package/README.md

@@ -0,0 +1,257 @@
+# @lynkow/next
+
+The Next.js adapter for [Lynkow](https://lynkow.com). It holds the code every
+Lynkow site on Next needs and no site should have to maintain by hand, so a fix
+reaches an existing site as a version bump.
+
+It builds on the [`lynkow`](https://www.npmjs.com/package/lynkow) SDK, which
+stays framework-agnostic.
+
+```bash
+npm install @lynkow/next lynkow
+```
+
+It requires Next.js 16, React 18.2 or 19, and `lynkow` 1.60 or later.
+
+| Entry | For |
+|---|---|
+| `@lynkow/next` | Configuration, locale paths, caching and `trackEvent`, safe to import anywhere |
+| `@lynkow/next/proxy` | The site's `src/proxy.ts`: redirects, locale routing, preview and Markdown helpers |
+| `@lynkow/next/server` | Route handlers and server components: text routes, JSON-LD, metadata, revalidation |
+| `@lynkow/next/client` | Client components: the visual editor, `Editable`, the analytics tracker |
+| `@lynkow/next/image-loader` | The `next/image` loader for Lynkow media |
+
+## Configuration
+
+The adapter reads no environment variable. Your application reads its own and
+passes the values to `resolveConfig`, which validates them and throws one error
+listing every problem:
+
+```ts
+// src/lib/config.ts
+import { createClients, createLocalePaths, resolveConfig } from '@lynkow/next'
+
+export const config = resolveConfig({
+  siteId: process.env.NEXT_PUBLIC_LYNKOW_SITE_ID,
+  siteUrl: process.env.NEXT_PUBLIC_SITE_URL,
+  locales: process.env.NEXT_PUBLIC_LOCALES,
+  defaultLocale: process.env.NEXT_PUBLIC_DEFAULT_LOCALE,
+  prefixDefaultLocale: process.env.NEXT_PUBLIC_PREFIX_DEFAULT_LOCALE,
+  apiUrl: process.env.NEXT_PUBLIC_LYNKOW_API_URL,
+  publishableKey: process.env.NEXT_PUBLIC_LYNKOW_PUBLISHABLE_KEY,
+})
+
+export const paths = createLocalePaths(config)
+export const lynkow = createClients(config)
+```
+
+`createClients` returns one SDK client per configured locale, created on first
+use and reused, with the SDK's own cache off so Next's data cache is the only
+one. A locale that is not configured throws instead of creating a client.
+
+Every value in that configuration reaches the browser. Keep server secrets,
+such as the webhook signing secret, out of it.
+
+## Locale paths
+
+`createLocalePaths(config)` is the one place a public path gets its locale.
+With `prefixDefaultLocale: true` (the default) every locale is prefixed, so
+`/en/about` and `/fr/a-propos`. With `false`, the default locale is served
+without its prefix, so `/about` and `/fr/a-propos`.
+
+```ts
+paths.localePath('fr', '/blog')          // '/fr/blog'
+paths.fromApiPath('/en/blog/post', 'en') // '/blog/post' when the default locale is unprefixed
+paths.localizeHref('/contact', 'fr')     // '/fr/contact'
+```
+
+Build every localized path through it: a path written by hand as
+`/${locale}/...` is right with one setting and wrong with the other.
+
+## Caching
+
+`cached(tags, revalidate)` puts one SDK read into Next's data cache, with the
+tags the revalidation webhook invalidates. `TAGS` and `REVALIDATE` hold the tag
+names and the default durations.
+
+```ts
+import { cached, REVALIDATE, TAGS } from '@lynkow/next'
+
+const page = await client.pages.getBySlug('home', cached([TAGS.page('home')], REVALIDATE.page))
+```
+
+## Server
+
+```ts
+// src/lib/server.ts
+import { cached, REVALIDATE, TAGS } from '@lynkow/next'
+import { createLynkowServer } from '@lynkow/next/server'
+import { config, lynkow } from './config'
+
+export const server = createLynkowServer({
+  config,
+  client: (locale) => lynkow(locale),
+  getSiteDomain: async (locale) => {
+    const site = await lynkow(locale).blocks.siteConfig(cached([TAGS.site], REVALIDATE.site))
+    return site.data.site.domain
+  },
+})
+```
+
+- `server.textRoute(read, contentType)` serves a file Lynkow generates, such as
+  `sitemap.xml` or `llms.txt`, cached under the SEO tag, with its URLs moved to
+  this deployment's origin.
+- `server.JsonLdScript` renders schema.org nodes as one JSON-LD script.
+- `server.pageMetadata(page, locale, path)` and `server.routeMetadata(...)`
+  build Next metadata, canonical and hreflang URLs included, through the locale
+  paths.
+
+The revalidation webhook takes its secret from a server-only variable, never
+from the configuration above:
+
+```ts
+// src/app/api/revalidate/route.ts
+import { createRevalidateHandler } from '@lynkow/next/server'
+
+export const runtime = 'nodejs'
+export const POST = createRevalidateHandler({ secret: process.env.LYNKOW_WEBHOOK_SECRET })
+```
+
+Without a secret it answers 503. A request whose `X-Webhook-Signature` does not
+match the raw body, or whose signed timestamp is more than five minutes from
+this server's clock, answers 401.
+
+## Proxy
+
+```ts
+// src/proxy.ts
+import { createClients } from '@lynkow/next'
+import { createLynkowProxy } from '@lynkow/next/proxy'
+import { config as site } from './lib/config'
+
+export default createLynkowProxy({ config: site, client: createClients(site) })
+
+export const config = {
+  matcher: ['/((?!_next/|api/|.*\\.[\\w]+$).*)'],
+}
+```
+
+`createLynkowProxy` runs three things on every page request, in this order:
+
+1. **Redirects** created in the Lynkow admin, matched on the path as the
+   visitor typed it, with the status code the editor chose. A target written
+   without a locale gets the visitor's. Answers are cached in the process for
+   one minute, at most 500 paths, and a failed lookup is never cached.
+2. **Locale routing.** With `prefixDefaultLocale` on, a path without a locale
+   answers 307 to the visitor's locale (the `NEXT_LOCALE` cookie, then
+   `Accept-Language`, then the default) and sets the cookie. With it off, a
+   path without a locale is the default locale's page, served under the same
+   URL, and `/<default>/...` answers 308 to it. A locale segment in another
+   case, such as `/FR/`, answers 308 to its lowercase form.
+3. **Preview headers**, through `withLynkowPreview`.
+
+The `matcher` stays in your `src/proxy.ts`, because Next requires it to be a
+literal there. It must exclude everything that is not a page.
+
+`withLynkowPreview` lets the Lynkow dashboard frame the site on a preview
+request (`?lynkow-preview=true`): it rewrites the `frame-ancestors` directive of
+the response's `Content-Security-Policy` and removes `X-Frame-Options`, keeping
+the rest of the policy. `lynkowPreviewMiddleware()` does the same on its own.
+`markdownProxy` rewrites a request that prefers Markdown to `/md/...`, for a
+site that composes its own proxy:
+
+```ts
+import { NextResponse, type NextRequest } from 'next/server'
+import { markdownProxy, withLynkowPreview } from '@lynkow/next/proxy'
+
+export default withLynkowPreview((request: NextRequest) => markdownProxy(request) ?? NextResponse.next())
+```
+
+## Visual editor
+
+```tsx
+// src/app/layout.tsx
+import { LynkowVisualEditor } from '@lynkow/next/client'
+
+<LynkowVisualEditor>{children}</LynkowVisualEditor>
+```
+
+`useBlockData`, `useLynkowField` and `useIsPreviewMode` read the live values
+while an editor works on the page. The module starts with `'use client'`, so a
+server component can render the provider directly.
+
+`EditableBlock` marks the element that renders one site block, and `Editable`
+marks a field inside it, so an editor can click it on the page and edit it in
+place. They render `data-lynkow-*` attributes on the element named by `as`,
+and add no wrapper of their own. A field outside any `EditableBlock` is logged
+in development and skipped by the editor.
+
+```tsx
+import { Editable, EditableBlock } from '@lynkow/next/client'
+
+<EditableBlock slug="header" as="header">
+  <Editable field="title" as="h1">{data.title}</Editable>
+</EditableBlock>
+```
+
+Mark the element that holds the text and nothing else: the editor edits its
+`textContent` in place.
+
+`<Editable html={value}>` renders a richtext field as HTML. Pass it only
+richtext the Lynkow API returned, which the API sanitizes; in a preview the
+value comes from the Lynkow dashboard instead, and only from the origin the
+visual editor was configured with.
+
+## Analytics
+
+```tsx
+// src/app/[locale]/layout.tsx
+import { LynkowTracker } from '@lynkow/next/client'
+
+<LynkowTracker config={config} consent={consent} />
+```
+
+`LynkowTracker` loads Lynkow's analytics script once, and only when `consent`
+allows it. `consent` describes the site's consent banner and the visitor's
+answer:
+
+| `consent` | Tracker |
+|---|---|
+| `{ mode: null, state: 'not-required' }` | Loads: the site has no consent gate |
+| `{ mode: 'notice-only', state }` | Loads: the banner informs rather than asks |
+| `{ mode: 'opt-out', state: 'pending' \| 'granted' }` | Loads |
+| `{ mode: 'opt-out', state: 'denied' }` | Does not load |
+| `{ mode: 'opt-in', state: 'granted' }` | Loads |
+| `{ mode: 'opt-in', state: 'pending' \| 'denied' \| 'unavailable' }` | Does not load |
+
+`unavailable` means the consent configuration could not be read, so an opt-in
+site never loads the tracker on a guess. Any other `mode` does not load it
+either. `trackerAllowed(consent)` returns the same decision.
+
+This decides whether the script is added. Once it runs, the tracker follows the
+visitor's later answers through Lynkow's own consent banner. With another
+banner, a refusal given after the script loaded takes effect on the next full
+page load.
+
+`trackEvent(type, data)` sends one custom event through the tracker already on
+the page. `type` is the SDK's closed `AnalyticsEventType` enum. It returns
+`false`, never throws, when no tracker has loaded.
+
+## Images
+
+Next wants a file for a custom image loader, so re-export this one from yours:
+
+```ts
+// src/image-loader.ts
+export { default } from '@lynkow/next/image-loader'
+```
+
+```ts
+// next.config.ts
+images: { loader: 'custom', loaderFile: './src/image-loader.ts' }
+```
+
+Lynkow media is resized at the Lynkow CDN, at the width `next/image` asks for,
+never upscaled, in the best format the browser accepts, at quality 80 unless
+the `quality` prop says otherwise. A relative URL, such as a file in `/public`,
+comes back unchanged, and so does an absolute URL that is not Lynkow media.

package/dist/chunk-4QTGOTFV.js

@@ -0,0 +1,95 @@
+// src/locale-paths.ts
+var ABSOLUTE_HREF = /^([a-z][a-z0-9+.-]*:|\/\/)/i;
+function createLocalePaths(config) {
+  const { locales, defaultLocale, prefixDefaultLocale, siteUrl } = config;
+  const byKey = new Map(locales.map((locale) => [locale.toLowerCase(), locale]));
+  const site = new URL(siteUrl);
+  function toLocale(value) {
+    return value ? byKey.get(value.toLowerCase()) ?? null : null;
+  }
+  function leadingLocale(pathname) {
+    const end = pathname.indexOf("/", 1);
+    const locale = toLocale(end === -1 ? pathname.slice(1) : pathname.slice(1, end));
+    if (!locale) return null;
+    return { locale, rest: end === -1 ? "/" : pathname.slice(end) };
+  }
+  function localeFromPath(pathname) {
+    return leadingLocale(pathname)?.locale ?? (prefixDefaultLocale ? null : defaultLocale);
+  }
+  function localePath(locale, path = "/") {
+    const canonical = toLocale(locale);
+    if (!canonical) {
+      throw new RangeError(
+        `${JSON.stringify(locale)} is not one of the configured locales (${locales.join(", ")})`
+      );
+    }
+    const { pathname: raw, suffix } = splitSuffix(path.startsWith("/") ? path : `/${path}`);
+    const pathname = onSite(raw);
+    if (!prefixDefaultLocale && canonical === defaultLocale) return pathname + suffix;
+    const segment = `/${canonical.toLowerCase()}`;
+    return (pathname === "/" ? segment : segment + pathname) + suffix;
+  }
+  function fromApiPath(path, locale) {
+    if (!path.startsWith("/") || path.startsWith("//")) return path;
+    const { pathname, suffix } = splitSuffix(path);
+    const leading = leadingLocale(pathname);
+    return leading ? localePath(leading.locale, leading.rest + suffix) : localePath(locale, pathname + suffix);
+  }
+  function localizeHref(href, locale) {
+    if (!href || ABSOLUTE_HREF.test(href) || !href.startsWith("/")) return href;
+    return fromApiPath(href, locale);
+  }
+  function hrefLocale(href) {
+    if (!ABSOLUTE_HREF.test(href) && !href.startsWith("/")) return null;
+    try {
+      const url = new URL(href, site);
+      return url.origin === site.origin ? localeFromPath(url.pathname) : null;
+    } catch {
+      return null;
+    }
+  }
+  function negotiateLocale(acceptLanguage) {
+    if (!acceptLanguage) return defaultLocale;
+    const ranked = acceptLanguage.split(",").map((part) => {
+      const [tag = "", ...params] = part.trim().split(";");
+      const q = params.find((param) => param.trim().startsWith("q="));
+      return { tag: tag.trim().toLowerCase(), q: q ? Number.parseFloat(q.split("=")[1] ?? "") : 1 };
+    }).filter((entry) => entry.tag.length > 0 && !Number.isNaN(entry.q)).sort((a, b) => b.q - a.q);
+    for (const { tag } of ranked) {
+      const exact = byKey.get(tag);
+      if (exact) return exact;
+      const base = tag.split("-")[0];
+      const partial = locales.find((code) => code.toLowerCase().split("-")[0] === base);
+      if (partial) return partial;
+    }
+    return defaultLocale;
+  }
+  function absoluteUrl(path) {
+    return `${siteUrl}${path.startsWith("/") ? path : `/${path}`}`;
+  }
+  return {
+    locales,
+    defaultLocale,
+    prefixDefaultLocale,
+    toLocale,
+    isLocale: (value) => toLocale(value) !== null,
+    localeFromPath,
+    localePath,
+    fromApiPath,
+    localizeHref,
+    hrefLocale,
+    negotiateLocale,
+    absoluteUrl
+  };
+}
+function onSite(pathname) {
+  return pathname.replace(/[\t\n\r]/g, "").replace(/^[/\\]+/, "/");
+}
+function splitSuffix(path) {
+  const index = path.search(/[?#]/);
+  return index === -1 ? { pathname: path, suffix: "" } : { pathname: path.slice(0, index), suffix: path.slice(index) };
+}
+
+export { ABSOLUTE_HREF, createLocalePaths };
+//# sourceMappingURL=chunk-4QTGOTFV.js.map
+//# sourceMappingURL=chunk-4QTGOTFV.js.map

package/dist/chunk-4QTGOTFV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/locale-paths.ts"],"names":[],"mappings":";AAGO,IAAM,aAAA,GAAgB;AAoFtB,SAAS,kBAAkB,MAAA,EAAuC;AACvE,EAAA,MAAM,EAAE,OAAA,EAAS,aAAA,EAAe,mBAAA,EAAqB,SAAQ,GAAI,MAAA;AACjE,EAAA,MAAM,KAAA,GAAQ,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,WAAA,EAAY,EAAG,MAAM,CAAC,CAAC,CAAA;AAC7E,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,OAAO,CAAA;AAE5B,EAAA,SAAS,SAAS,KAAA,EAAiD;AACjE,IAAA,OAAO,QAAS,KAAA,CAAM,GAAA,CAAI,MAAM,WAAA,EAAa,KAAK,IAAA,GAAQ,IAAA;AAAA,EAC5D;AAGA,EAAA,SAAS,cAAc,QAAA,EAA2D;AAChF,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAK,CAAC,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,KAAQ,EAAA,GAAK,QAAA,CAAS,KAAA,CAAM,CAAC,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAC/E,IAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,IAAA,OAAO,EAAE,QAAQ,IAAA,EAAM,GAAA,KAAQ,KAAK,GAAA,GAAM,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA,EAAE;AAAA,EAChE;AAEA,EAAA,SAAS,eAAe,QAAA,EAAiC;AACvD,IAAA,OAAO,aAAA,CAAc,QAAQ,CAAA,EAAG,MAAA,KAAW,sBAAsB,IAAA,GAAO,aAAA,CAAA;AAAA,EAC1E;AAEA,EAAA,SAAS,UAAA,CAAW,MAAA,EAAgB,IAAA,GAAO,GAAA,EAAa;AACtD,IAAA,MAAM,SAAA,GAAY,SAAS,MAAM,CAAA;AACjC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,IAAI,UAAA;AAAA,QACR,CAAA,EAAG,KAAK,SAAA,CAAU,MAAM,CAAC,CAAA,uCAAA,EAA0C,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACvF;AAAA,IACF;AACA,IAAA,MAAM,EAAE,QAAA,EAAU,GAAA,EAAK,MAAA,EAAO,GAAI,WAAA,CAAY,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA;AACtF,IAAA,MAAM,QAAA,GAAW,OAAO,GAAG,CAAA;AAC3B,IAAA,IAAI,CAAC,mBAAA,IAAuB,SAAA,KAAc,aAAA,SAAsB,QAAA,GAAW,MAAA;AAC3E,IAAA,MAAM,OAAA,GAAU,CAAA,CAAA,EAAI,SAAA,CAAU,WAAA,EAAa,CAAA,CAAA;AAC3C,IAAA,OAAA,CAAQ,QAAA,KAAa,GAAA,GAAM,OAAA,GAAU,OAAA,GAAU,QAAA,IAAY,MAAA;AAAA,EAC7D;AAEA,EAAA,SAAS,WAAA,CAAY,MAAc,MAAA,EAAwB;AACzD,IAAA,IAAI,CAAC,KAAK,UAAA,CAAW,GAAG,KAAK,IAAA,CAAK,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,IAAA;AAC3D,IAAA,MAAM,EAAE,QAAA,EAAU,MAAA,EAAO,GAAI,YAAY,IAAI,CAAA;AAC7C,IAAA,MAAM,OAAA,GAAU,cAAc,QAAQ,CAAA;AACtC,IAAA,OAAO,OAAA,GACH,UAAA,CAAW,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,IAAA,GAAO,MAAM,CAAA,GAChD,UAAA,CAAW,MAAA,EAAQ,QAAA,GAAW,MAAM,CAAA;AAAA,EAC1C;AAEA,EAAA,SAAS,YAAA,CAAa,MAAc,MAAA,EAAwB;AAC1D,IAAA,IAAI,CAAC,IAAA,IAAQ,aAAA,CAAc,IAAA,CAAK,IAAI,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AACvE,IAAA,OAAO,WAAA,CAAY,MAAM,MAAM,CAAA;AAAA,EACjC;AAEA,EAAA,SAAS,WAAW,IAAA,EAA6B;AAC/C,IAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,IAAI,CAAA,IAAK,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AAC/D,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,EAAM,IAAI,CAAA;AAC9B,MAAA,OAAO,IAAI,MAAA,KAAW,IAAA,CAAK,SAAS,cAAA,CAAe,GAAA,CAAI,QAAQ,CAAA,GAAI,IAAA;AAAA,IACrE,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,gBAAgB,cAAA,EAAmD;AAC1E,IAAA,IAAI,CAAC,gBAAgB,OAAO,aAAA;AAE5B,IAAA,MAAM,SAAS,cAAA,CACZ,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,IAAA,KAAS;AACb,MAAA,MAAM,CAAC,GAAA,GAAM,EAAA,EAAI,GAAG,MAAM,IAAI,IAAA,CAAK,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AACnD,MAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,CAAC,KAAA,KAAU,MAAM,IAAA,EAAK,CAAE,UAAA,CAAW,IAAI,CAAC,CAAA;AAC9D,MAAA,OAAO,EAAE,GAAA,EAAK,GAAA,CAAI,MAAK,CAAE,WAAA,IAAe,CAAA,EAAG,CAAA,GAAI,OAAO,UAAA,CAAW,CAAA,CAAE,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAE,IAAI,CAAA,EAAE;AAAA,IAC9F,CAAC,EACA,MAAA,CAAO,CAAC,UAAU,KAAA,CAAM,GAAA,CAAI,MAAA,GAAS,CAAA,IAAK,CAAC,MAAA,CAAO,MAAM,KAAA,CAAM,CAAC,CAAC,CAAA,CAChE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM,CAAA,CAAE,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA;AAE3B,IAAA,KAAA,MAAW,EAAE,GAAA,EAAI,IAAK,MAAA,EAAQ;AAC5B,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAC3B,MAAA,IAAI,OAAO,OAAO,KAAA;AAElB,MAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC7B,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,WAAA,EAAY,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,MAAM,IAAI,CAAA;AAChF,MAAA,IAAI,SAAS,OAAO,OAAA;AAAA,IACtB;AAEA,IAAA,OAAO,aAAA;AAAA,EACT;AAEA,EAAA,SAAS,YAAY,IAAA,EAAsB;AACzC,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA,CAAA;AAAA,EAC9D;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,aAAA;AAAA,IACA,mBAAA;AAAA,IACA,QAAA;AAAA,IACA,QAAA,EAAU,CAAC,KAAA,KAA2B,QAAA,CAAS,KAAK,CAAA,KAAM,IAAA;AAAA,IAC1D,cAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,UAAA;AAAA,IACA,eAAA;AAAA,IACA;AAAA,GACF;AACF;AAOA,SAAS,OAAO,QAAA,EAA0B;AACxC,EAAA,OAAO,SAAS,OAAA,CAAQ,WAAA,EAAa,EAAE,CAAA,CAAE,OAAA,CAAQ,WAAW,GAAG,CAAA;AACjE;AAGA,SAAS,YAAY,IAAA,EAAoD;AACvE,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA;AAChC,EAAA,OAAO,UAAU,EAAA,GACb,EAAE,UAAU,IAAA,EAAM,MAAA,EAAQ,IAAG,GAC7B,EAAE,UAAU,IAAA,CAAK,KAAA,CAAM,GAAG,KAAK,CAAA,EAAG,QAAQ,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA,EAAE;AAClE","file":"chunk-4QTGOTFV.js","sourcesContent":["import type { LynkowNextConfig } from './config.js'\n\n/** An href that names its own scheme (`https:`, `mailto:`), or a protocol-relative one. */\nexport const ABSOLUTE_HREF = /^([a-z][a-z0-9+.-]*:|\\/\\/)/i\n\n/**\n * The one place a public path gets its locale, bound to a configuration.\n *\n * Every localized path of a site goes through {@link LocalePaths.localePath}\n * or {@link LocalePaths.fromApiPath}. That is what makes `prefixDefaultLocale`\n * hold everywhere: a path built by hand as `/${locale}/...` is right with the\n * flag on and wrong with it off.\n */\nexport interface LocalePaths {\n  readonly locales: readonly string[]\n  readonly defaultLocale: string\n  readonly prefixDefaultLocale: boolean\n\n  /** The configured spelling of a locale, matched case-insensitively, or null. */\n  toLocale(value: string | null | undefined): string | null\n\n  /** Whether a value names a configured locale, in any case. */\n  isLocale(value: string | null | undefined): value is string\n\n  /**\n   * The locale a path belongs to. A path whose first segment names a locale\n   * belongs to it. Any other path belongs to the default locale when the\n   * default locale is served unprefixed, and to none otherwise. That includes\n   * paths that are not pages at all, such as `/_next/...`, so a caller that\n   * routes requests filters those first.\n   */\n  localeFromPath(pathname: string): string | null\n\n  /**\n   * The public path of `path` in `locale`: `/fr/blog`, or `/blog` for the\n   * default locale when it is served unprefixed. The locale segment is written\n   * lowercased, as the API writes it. A query or fragment is kept. A leading\n   * run of slashes or backslashes collapses to one, so `//evil.example` stays a\n   * path once a default locale is stripped. Dot segments are left as written:\n   * `/.//evil.example` resolves to `//evil.example` in `new URL()`, so a caller\n   * that resolves the result checks the resolved path, as the proxy does.\n   *\n   * @throws {RangeError} When `locale` is not a configured locale.\n   */\n  localePath(locale: string, path?: string): string\n\n  /**\n   * The public path of a path the API returned.\n   *\n   * On a multilingual site the API prefixes every path with its row's locale,\n   * the default one included, so `/en/blog/post` is mapped to `/blog/post`\n   * when the default locale is served unprefixed. A path with no locale\n   * segment, as on a single-locale site, belongs to `locale`. Anything that is\n   * not a root-relative path is returned unchanged.\n   */\n  fromApiPath(path: string, locale: string): string\n\n  /**\n   * An href from CMS content, made to lead to `locale`.\n   *\n   * Navigation blocks store locale-agnostic hrefs (`/blog`, `/contact`), which\n   * is right for an editor, so the locale is added at render: without it every\n   * internal link goes through a redirect. An href that already names a locale\n   * keeps it, normalized like {@link fromApiPath}. Absolute URLs, `mailto:` and\n   * `tel:` links, anchors, query-only and relative hrefs are left untouched.\n   */\n  localizeHref(href: string, locale: string): string\n\n  /**\n   * The locale a link leads to on this site, or null when it leads elsewhere:\n   * another origin, a `mailto:`, an anchor, a relative path. An absolute URL\n   * on the site's own origin counts as this site, which catches an editor's\n   * pasted `https://<site>/fr/...`.\n   */\n  hrefLocale(href: string): string | null\n\n  /**\n   * The best match between an `Accept-Language` header and the configured\n   * locales, falling back to the default locale rather than to a 404.\n   */\n  negotiateLocale(acceptLanguage: string | null | undefined): string\n\n  /** `path` on the site's origin. */\n  absoluteUrl(path: string): string\n}\n\n/** Binds the locale path helpers to a configuration from {@link resolveConfig}. */\nexport function createLocalePaths(config: LynkowNextConfig): LocalePaths {\n  const { locales, defaultLocale, prefixDefaultLocale, siteUrl } = config\n  const byKey = new Map(locales.map((locale) => [locale.toLowerCase(), locale]))\n  const site = new URL(siteUrl)\n\n  function toLocale(value: string | null | undefined): string | null {\n    return value ? (byKey.get(value.toLowerCase()) ?? null) : null\n  }\n\n  /** The locale named by the first segment of a pathname, and what follows it. */\n  function leadingLocale(pathname: string): { locale: string; rest: string } | null {\n    const end = pathname.indexOf('/', 1)\n    const locale = toLocale(end === -1 ? pathname.slice(1) : pathname.slice(1, end))\n    if (!locale) return null\n    return { locale, rest: end === -1 ? '/' : pathname.slice(end) }\n  }\n\n  function localeFromPath(pathname: string): string | null {\n    return leadingLocale(pathname)?.locale ?? (prefixDefaultLocale ? null : defaultLocale)\n  }\n\n  function localePath(locale: string, path = '/'): string {\n    const canonical = toLocale(locale)\n    if (!canonical) {\n      throw new RangeError(\n        `${JSON.stringify(locale)} is not one of the configured locales (${locales.join(', ')})`\n      )\n    }\n    const { pathname: raw, suffix } = splitSuffix(path.startsWith('/') ? path : `/${path}`)\n    const pathname = onSite(raw)\n    if (!prefixDefaultLocale && canonical === defaultLocale) return pathname + suffix\n    const segment = `/${canonical.toLowerCase()}`\n    return (pathname === '/' ? segment : segment + pathname) + suffix\n  }\n\n  function fromApiPath(path: string, locale: string): string {\n    if (!path.startsWith('/') || path.startsWith('//')) return path\n    const { pathname, suffix } = splitSuffix(path)\n    const leading = leadingLocale(pathname)\n    return leading\n      ? localePath(leading.locale, leading.rest + suffix)\n      : localePath(locale, pathname + suffix)\n  }\n\n  function localizeHref(href: string, locale: string): string {\n    if (!href || ABSOLUTE_HREF.test(href) || !href.startsWith('/')) return href\n    return fromApiPath(href, locale)\n  }\n\n  function hrefLocale(href: string): string | null {\n    if (!ABSOLUTE_HREF.test(href) && !href.startsWith('/')) return null\n    try {\n      const url = new URL(href, site)\n      return url.origin === site.origin ? localeFromPath(url.pathname) : null\n    } catch {\n      return null\n    }\n  }\n\n  function negotiateLocale(acceptLanguage: string | null | undefined): string {\n    if (!acceptLanguage) return defaultLocale\n\n    const ranked = acceptLanguage\n      .split(',')\n      .map((part) => {\n        const [tag = '', ...params] = part.trim().split(';')\n        const q = params.find((param) => param.trim().startsWith('q='))\n        return { tag: tag.trim().toLowerCase(), q: q ? Number.parseFloat(q.split('=')[1] ?? '') : 1 }\n      })\n      .filter((entry) => entry.tag.length > 0 && !Number.isNaN(entry.q))\n      .sort((a, b) => b.q - a.q)\n\n    for (const { tag } of ranked) {\n      const exact = byKey.get(tag)\n      if (exact) return exact\n\n      const base = tag.split('-')[0]\n      const partial = locales.find((code) => code.toLowerCase().split('-')[0] === base)\n      if (partial) return partial\n    }\n\n    return defaultLocale\n  }\n\n  function absoluteUrl(path: string): string {\n    return `${siteUrl}${path.startsWith('/') ? path : `/${path}`}`\n  }\n\n  return {\n    locales,\n    defaultLocale,\n    prefixDefaultLocale,\n    toLocale,\n    isLocale: (value): value is string => toLocale(value) !== null,\n    localeFromPath,\n    localePath,\n    fromApiPath,\n    localizeHref,\n    hrefLocale,\n    negotiateLocale,\n    absoluteUrl,\n  }\n}\n\n/**\n * A root-relative pathname that a browser cannot read as another host. The URL\n * parser drops tabs and newlines anywhere and reads a backslash as a slash, so\n * `/\\t/evil.example` and `/\\evil.example` are both `//evil.example` to it.\n */\nfunction onSite(pathname: string): string {\n  return pathname.replace(/[\\t\\n\\r]/g, '').replace(/^[/\\\\]+/, '/')\n}\n\n/** A path split before its query string or fragment. */\nfunction splitSuffix(path: string): { pathname: string; suffix: string } {\n  const index = path.search(/[?#]/)\n  return index === -1\n    ? { pathname: path, suffix: '' }\n    : { pathname: path.slice(0, index), suffix: path.slice(index) }\n}\n"]}

package/dist/chunk-XNN4SECG.js

@@ -0,0 +1,55 @@
+// src/cache.ts
+var REVALIDATE = {
+  /** Site config and global blocks: header, footer, branding. */
+  site: 3600,
+  /** Structural pages driven by site blocks. */
+  page: 300,
+  /** Blog articles, categories, tags. */
+  blog: 300,
+  /** Approved reviews. */
+  reviews: 900,
+  /** Form schemas. */
+  forms: 3600,
+  /** The cookie consent banner configuration. */
+  consent: 3600,
+  /** sitemap.xml, robots.txt, llms.txt. */
+  seo: 3600,
+  /** The path table used for static generation and redirect matching. */
+  paths: 600,
+  /**
+   * One search result page.
+   *
+   * Short on purpose. Next keys its fetch cache on the full URL, so every
+   * distinct query is its own entry and a long ceiling would pin a large,
+   * unbounded set of them. The tag is what actually keeps results honest: a
+   * publish evicts every cached query at once.
+   */
+  search: 60
+};
+var TAGS = {
+  site: "lynkow:site",
+  pages: "lynkow:pages",
+  page: (slug) => `lynkow:page:${slug}`,
+  contents: "lynkow:contents",
+  content: (slug) => `lynkow:content:${slug}`,
+  categories: "lynkow:categories",
+  tags: "lynkow:tags",
+  reviews: "lynkow:reviews",
+  forms: "lynkow:forms",
+  form: (slug) => `lynkow:form:${slug}`,
+  consent: "lynkow:consent",
+  seo: "lynkow:seo",
+  paths: "lynkow:paths",
+  search: "lynkow:search"
+};
+function cached(tags, revalidate) {
+  const fetchOptions = { next: { tags, revalidate } };
+  return { fetchOptions };
+}
+function uncached() {
+  return { fetchOptions: { cache: "no-store" } };
+}
+
+export { REVALIDATE, TAGS, cached, uncached };
+//# sourceMappingURL=chunk-XNN4SECG.js.map
+//# sourceMappingURL=chunk-XNN4SECG.js.map

package/dist/chunk-XNN4SECG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cache.ts"],"names":[],"mappings":";AA4BO,IAAM,UAAA,GAAa;AAAA;AAAA,EAExB,IAAA,EAAM,IAAA;AAAA;AAAA,EAEN,IAAA,EAAM,GAAA;AAAA;AAAA,EAEN,IAAA,EAAM,GAAA;AAAA;AAAA,EAEN,OAAA,EAAS,GAAA;AAAA;AAAA,EAET,KAAA,EAAO,IAAA;AAAA;AAAA,EAEP,OAAA,EAAS,IAAA;AAAA;AAAA,EAET,GAAA,EAAK,IAAA;AAAA;AAAA,EAEL,KAAA,EAAO,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASP,MAAA,EAAQ;AACV;AAEO,IAAM,IAAA,GAAO;AAAA,EAClB,IAAA,EAAM,aAAA;AAAA,EACN,KAAA,EAAO,cAAA;AAAA,EACP,IAAA,EAAM,CAAC,IAAA,KAAiB,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA;AAAA,EAC3C,QAAA,EAAU,iBAAA;AAAA,EACV,OAAA,EAAS,CAAC,IAAA,KAAiB,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA;AAAA,EACjD,UAAA,EAAY,mBAAA;AAAA,EACZ,IAAA,EAAM,aAAA;AAAA,EACN,OAAA,EAAS,gBAAA;AAAA,EACT,KAAA,EAAO,cAAA;AAAA,EACP,IAAA,EAAM,CAAC,IAAA,KAAiB,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA;AAAA,EAC3C,OAAA,EAAS,gBAAA;AAAA,EACT,GAAA,EAAK,YAAA;AAAA,EACL,KAAA,EAAO,cAAA;AAAA,EACP,MAAA,EAAQ;AACV;AAQO,SAAS,MAAA,CAAO,MAAgB,UAAA,EAAwC;AAC7E,EAAA,MAAM,eAAgC,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,YAAW,EAAE;AACnE,EAAA,OAAO,EAAE,YAAA,EAAa;AACxB;AAMO,SAAS,QAAA,GAA+B;AAC7C,EAAA,OAAO,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,YAAW,EAAE;AAC/C","file":"chunk-XNN4SECG.js","sourcesContent":["/**\n * The caching strategy of a Lynkow site on Next, in one file.\n *\n * Next 15 changed `fetch()` to be uncached by default, so nothing here is\n * inherited: a read that does not pass one of these option bags hits the Lynkow\n * API on every single request. Every data read in this app therefore goes\n * through `cached()`. The durations are defaults tuned for a content site; a\n * site that wants others passes its own number to `cached()`.\n *\n * Two mechanisms, deliberately combined:\n *\n *   - `revalidate` is the ceiling. Even with no webhook wired, content is never\n *     more than this many seconds stale.\n *   - `tags` are the floor. The revalidation webhook calls `revalidateTag()` so\n *     an edit in the admin appears in seconds rather than minutes.\n *\n * A tag is only useful if the webhook actually sends the matching event, so the\n * names here and the ones the revalidation handler maps MUST stay in step.\n */\nimport type { BaseRequestOptions } from 'lynkow'\n\n/**\n * `RequestInit` as Next extends it. Spelled out here because this entry\n * imports nothing from `next`, whose global types carry that extension.\n */\ntype NextRequestInit = RequestInit & { next?: { tags?: string[]; revalidate?: number | false } }\n\n/** Seconds. Tuned for a content site: rarely-changing structure lives longer. */\nexport const REVALIDATE = {\n  /** Site config and global blocks: header, footer, branding. */\n  site: 3600,\n  /** Structural pages driven by site blocks. */\n  page: 300,\n  /** Blog articles, categories, tags. */\n  blog: 300,\n  /** Approved reviews. */\n  reviews: 900,\n  /** Form schemas. */\n  forms: 3600,\n  /** The cookie consent banner configuration. */\n  consent: 3600,\n  /** sitemap.xml, robots.txt, llms.txt. */\n  seo: 3600,\n  /** The path table used for static generation and redirect matching. */\n  paths: 600,\n  /**\n   * One search result page.\n   *\n   * Short on purpose. Next keys its fetch cache on the full URL, so every\n   * distinct query is its own entry and a long ceiling would pin a large,\n   * unbounded set of them. The tag is what actually keeps results honest: a\n   * publish evicts every cached query at once.\n   */\n  search: 60,\n} as const\n\nexport const TAGS = {\n  site: 'lynkow:site',\n  pages: 'lynkow:pages',\n  page: (slug: string) => `lynkow:page:${slug}`,\n  contents: 'lynkow:contents',\n  content: (slug: string) => `lynkow:content:${slug}`,\n  categories: 'lynkow:categories',\n  tags: 'lynkow:tags',\n  reviews: 'lynkow:reviews',\n  forms: 'lynkow:forms',\n  form: (slug: string) => `lynkow:form:${slug}`,\n  consent: 'lynkow:consent',\n  seo: 'lynkow:seo',\n  paths: 'lynkow:paths',\n  search: 'lynkow:search',\n} as const\n\n/**\n * Build the per-request options that put one Lynkow read into the Next cache.\n *\n * @example\n * const page = await lynkow(locale).pages.getBySlug('home', cached([TAGS.page('home')], REVALIDATE.page))\n */\nexport function cached(tags: string[], revalidate: number): BaseRequestOptions {\n  const fetchOptions: NextRequestInit = { next: { tags, revalidate } }\n  return { fetchOptions }\n}\n\n/**\n * For a read that must never be served from cache: a preview render, or a\n * form schema fetched at submit time.\n */\nexport function uncached(): BaseRequestOptions {\n  return { fetchOptions: { cache: 'no-store' } }\n}\n"]}

package/dist/client/index.d.ts

@@ -0,0 +1,152 @@
+import * as react from 'react';
+import react__default, { ElementType, ReactNode } from 'react';
+import { VisualEditorConfig, VisualEditorInstance } from 'lynkow/visual-editor';
+
+/**
+ * Props of {@link LynkowVisualEditor}.
+ *
+ * Extends {@link VisualEditorConfig}, so `cmsOrigin` is documented once, on the
+ * config the core reads, and means the same thing here.
+ */
+interface LynkowVisualEditorProps extends VisualEditorConfig {
+    /** Your application. Rendered unchanged; the provider adds no wrapper element. */
+    children: react__default.ReactNode;
+}
+declare function LynkowVisualEditor({ children, ...config }: LynkowVisualEditorProps): react__default.JSX.Element;
+
+declare function useBlockData<T extends Record<string, any>>(blockSlug: string, initialData: T): T;
+declare function useLynkowField<T>(blockSlug: string, fieldKey: string, initialValue: T): T;
+declare function useIsPreviewMode(): boolean;
+
+interface LynkowVisualEditorContextValue {
+    instance: VisualEditorInstance | null;
+    isPreviewMode: boolean;
+    blocksData: Record<string, Record<string, any>>;
+}
+
+/**
+ * Names the site block this subtree renders.
+ *
+ * `as` exists so this adds no DOM node: pass the element the block already had
+ * (`as="header"`, `as="section"`) rather than nesting a div inside it.
+ */
+declare function EditableBlock({ slug, as: As, className, children, }: {
+    slug: string;
+    as?: ElementType;
+    className?: string;
+    children: ReactNode;
+}): react.JSX.Element;
+type EditableCommon = {
+    /** The field key, exactly as the site block schema spells it. */
+    field: string;
+    /** What the editor's badge shows. Defaults to the field key. */
+    label?: string;
+    /** Picks the badge icon and tells the admin which control to open. */
+    type?: 'text' | 'richtext' | 'url' | 'image' | 'number' | 'date' | 'select' | 'boolean';
+    as?: ElementType;
+    className?: string;
+};
+/**
+ * `children` for a plain text field, `html` for a richtext one. Never both:
+ * a richtext field is injected rather than rendered, so the two cannot share a
+ * code path without also sharing the injection.
+ */
+type EditableProps = (EditableCommon & {
+    children: string;
+    html?: never;
+}) | (EditableCommon & {
+    html: string;
+    children?: never;
+});
+/**
+ * One editable field.
+ *
+ * The value passed in is the SERVER-rendered one and stays the value in
+ * production: `useLynkowField` returns its third argument whenever the page is
+ * not inside the editor. Inside it, the hook returns whatever the admin has
+ * typed, so a change made in the dashboard's side panel appears here without a
+ * reload.
+ *
+ * FLAT KEYS ONLY. The hook indexes the block data with `key in data`, so a
+ * repeater row (`services[0].title`) has no addressable key and cannot be
+ * marked. Those fields stay editable from the dashboard; they are simply not
+ * clickable on the page. Marking the repeater's container would be worse than
+ * not marking it, because inline editing would flatten the whole list to text.
+ */
+declare function Editable({ field, label, type, as: As, className, children, html, }: EditableProps): react.JSX.Element;
+
+/** A validated configuration, frozen. Every field is safe to ship to the browser. */
+interface LynkowNextConfig {
+    readonly siteId: string;
+    /** The site's origin, with no trailing slash, so `${siteUrl}${path}` is always well formed. */
+    readonly siteUrl: string;
+    /** The API origin, with no trailing slash. */
+    readonly apiUrl: string;
+    readonly publishableKey: string | undefined;
+    /** The locales as configured, in their configured case. URLs carry them lowercased. */
+    readonly locales: readonly string[];
+    /** One of `locales`, in its configured case. */
+    readonly defaultLocale: string;
+    readonly prefixDefaultLocale: boolean;
+}
+
+/**
+ * What the site's consent state lets the analytics tracker do.
+ *
+ * - `mode: null`: the site has no consent gate, because the banner is off in
+ *   the admin or the consent code was removed. Loading the tracker is not this
+ *   component's decision to refuse.
+ * - `notice-only`: the banner informs rather than asks, so the tracker loads.
+ * - `opt-out`: the tracker loads unless the visitor refused.
+ * - `opt-in`: the tracker loads only once the visitor granted analytics.
+ *   `unavailable` means the consent configuration could not be read, so there
+ *   is no choice to read against: the tracker never loads from here then.
+ *
+ * A mode outside these four never loads it: a value this package does not know
+ * cannot be read as consent.
+ *
+ * This decides whether the script is ADDED. Once it runs, the tracker follows
+ * later answers through Lynkow's own consent banner, which it listens to; a
+ * refusal given through another banner reaches it on the next full page load.
+ */
+type TrackerConsent = {
+    mode: null;
+    state: 'not-required';
+} | {
+    mode: 'opt-out' | 'notice-only';
+    state: 'pending' | 'granted' | 'denied';
+} | {
+    mode: 'opt-in';
+    state: 'pending' | 'granted' | 'denied' | 'unavailable';
+};
+/** Props of {@link LynkowTracker}. */
+interface LynkowTrackerProps {
+    config: Pick<LynkowNextConfig, 'siteId' | 'apiUrl'>;
+    consent: TrackerConsent;
+}
+/** Whether the tracker may load under this consent state. */
+declare function trackerAllowed(consent: TrackerConsent): boolean;
+/**
+ * Loads Lynkow's analytics tracker when the consent state allows it, unless a
+ * copy is already on the page.
+ *
+ * The tracker is a self-contained script the API serves. It records pageviews,
+ * client-side navigations included, scroll depth, engaged time, outbound and
+ * file links, rage and dead clicks, form events, Core Web Vitals and click
+ * heatmaps on its own.
+ *
+ * ONE TRACKER, NEVER TWO. A browser client of the SDK loads `tracker.js` on its
+ * own, under the id `lynkow-tracker`, and two copies each send every event.
+ * This component therefore injects the script only when no copy exists, under
+ * that same id, which the SDK's loader checks and waits on instead of adding
+ * its own.
+ *
+ * The consent mode is passed to the script as `data-consent-mode`. Without it
+ * the tracker works the mode out from the page, and on a site whose banner is
+ * not the SDK's own it finds none and tracks before the visitor answers.
+ *
+ * Renders nothing.
+ */
+declare function LynkowTracker({ config, consent }: LynkowTrackerProps): null;
+
+export { Editable, EditableBlock, LynkowTracker, type LynkowTrackerProps, LynkowVisualEditor, type LynkowVisualEditorContextValue, type LynkowVisualEditorProps, type TrackerConsent, trackerAllowed, useBlockData, useIsPreviewMode, useLynkowField };