@marvalt/digivalt-core 0.2.30 → 0.2.33

package/docs/SEO-PERFORMANCE.md

@@ -1,6 +1,8 @@
 # SEO and PageSpeed with `@marvalt/digivalt-core`
 
-This guide is for **Vite + React** apps (including Lovable exports) that already use DigiValt static generation. It complements WordPress content with **document metadata**, **structured data**, and **performance-minded image/font patterns**.
+This guide is for **Vite + React** apps that use DigiValt static generation. It complements WordPress content with **document metadata**, **structured data**, and **performance-minded image/font patterns**.
+
+**How the system fits together** (WP vs env, prerender, editor workflow): **[SEO-AIO.md](./SEO-AIO.md)**. Team handbook: `digivalt-collaboration-docs/DIGIVALT_SEO_AIO.md`.
 
 ## Prerequisites
 
@@ -30,6 +32,10 @@ Use the **`VITE_SEO_*`** prefix so SEO-related keys are easy to copy into a chec
 | `VITE_SEO_FACEBOOK_APP_ID` | Optional `fb:app_id`. |
 | `VITE_SEO_GOOGLE_SITE_VERIFICATION` | Google Search Console meta content. |
 | `VITE_SEO_BING_SITE_VERIFICATION` | Bing `msvalidate.01` content. |
+| `VITE_SEO_ROUTE_PREFIXES` | Optional. Comma list `rest_base:/app-prefix` for CPT sitemap/prerender paths (e.g. `eventbrite_event:/events`). Pages are always `/{slug}` except the Reading Settings front page → `/`. |
+| `VITE_SEO_FRONT_PAGE_SLUG` | Optional. Force this WP page slug to `/` when Reading Settings `front_page` does not match the app homepage. |
+
+Per-URL title, description, canonical, robots, OG image, FAQ, and schema live in the **DigiValt SEO** WordPress plugin (`digivalt_seo` on the REST object), not in env.
 
 ### Performance toggles (optional)
 
@@ -41,24 +47,48 @@ Read via `getPerformanceConfig()` from `@marvalt/digivalt-core/config`. Set to `
 - `VITE_PERF_SERVICE_WORKER` (default off)
 - `VITE_PERF_CACHING` (default on)
 
-## Sitemap (`/sitemap.xml`)
+## Sitemap (`/sitemap.xml`) and robots
+
+**Runtime:** Cloudflare Pages Functions:
+
+- **`functions/sitemap.xml.ts`** → `/sitemap.xml` (canonical host from `VITE_SEO_SITE_URL` / `SITE_URL`)
+- **`functions/robots.txt.ts`** → `/robots.txt` (`Allow: /` plus `Sitemap:`). Do not commit **`public/robots.txt`**; it would shadow the Function.
+
+Do not add **`public/sitemap.xml`**.
+
+**Build time:** `generateSitemapPaths` writes **`public/sitemap-paths.json`**:
+
+```json
+{ "urls": [ { "path": "/", "lastmod": "2026-09-18T00:00:00Z", "image": "https://…" } ] }
+```
+
+A legacy `paths: string[]` array is still accepted by the Function. If there are more than 45k URLs, an index plus `sitemap-paths-N.json` shards are written; `/sitemap.xml` then emits a sitemap index.
+
+Sources (frontend routes only — never raw CMS permalinks):
+
+1. **`public/sitemap-static-paths.json`** — app-owned public routes (not utility `noindex` URLs).
+2. Published **pages**: front page (Reading Settings `front_page` slug or id) → `/`; other pages → `/{slug}`. `digivalt_seo.robots_index === false` and non-`publish` statuses are omitted.
+3. Other post types only when listed in **`VITE_SEO_ROUTE_PREFIXES`**.
+4. PHPList issues from **`phplist-data.json`** under **`VITE_PHPLIST_NEWSLETTER_ROUTE_BASE`** (default `/newsletters`).
+5. Header and footer menus: URL kept only if it already maps to a collected app path.
 
-**Runtime:** A **Cloudflare Pages Function** at **`functions/sitemap.xml.ts`** serves **`/sitemap.xml`**. It **`fetch`es `/sitemap-paths.json`** from the deployed static assets and uses **`VITE_SEO_SITE_URL`** (or **`SITE_URL`**) for canonical `<loc>` values (fallback: request origin). Do not add **`public/sitemap.xml`**; it would shadow the Function.
+`lastmod` comes from `modified_gmt` / `modified` / newsletter `sent_at`. Do not emit fake `changefreq` or `priority`.
 
-**Build time:** **`public/sitemap-paths.json`** is **generated** by **`@marvalt/digivalt-core/generators`** (`generateSitemapPaths`) at the end of **`generateAllData`**, and when **`VITE_IS_LOVABLE=true`** the app’s **`scripts/generate.ts`** still runs that step so paths stay in sync with committed **`wordpress-data.json`**. Sources merged:
+Fixture mode (`VITE_IS_LOVABLE=true`) still regenerates sitemap + **`seo-manifest.json`** from committed JSON.
 
-1. **`public/sitemap-static-paths.json`** — you maintain this for **React-only / Lovable** public routes (not inferred from code).
-2. **`navigation_menu`** items in **`wordpress-data.json`** (recursive `url` fields), filtered to **`http(s)`** and the CMS host from **`VITE_WORDPRESS_API_URL`** / **`WORDPRESS_API_URL`**.
-3. **`link`** on entities in top-level arrays whose keys match **`config.post_types`** (fallback: other top-level arrays minus a fixed skip list). Taxonomy archives are omitted by default.
+## Prerender (same HTML for humans and crawlers)
 
-Paths are normalized (no trailing slash except **`/`**), deduped, and sorted. If generation fails, a safe fallback writes **`{ "paths": ["/"] }`**.
+`generateSeoManifest` writes **`public/seo-manifest.json`**. After `vite build`, **`prerenderSeoHtml`** (template `scripts/prerender-seo.ts`) copies `dist/index.html` per indexable path, injects `<head>` and a crawlable snapshot inside `#root`. Client JS hydrates as usual. This is not React SSR.
 
 ## Imports
 
 ```ts
 import {
+  DigiValtRouteSeo,
   DigiValtSeoHead,
   JsonLd,
+  resolvePageSeo,
+  buildPageJsonLd,
   getSeoDefaultsFromEnv,
   buildEventJsonLd,
   createOrganizationSchema,
@@ -72,8 +102,9 @@ Prefer **`@marvalt/digivalt-core/seo`** so build scripts that only import `gener
 
 ## SPA behaviour
 
-- **`DigiValtSeoHead`** updates `<head>` on the **client** when routes change. Ensure **one instance per logical page** (or merge props in a layout) so title/description match the active route.
-- **Crawlers:** Many search engines execute JavaScript; for **fully static HTML per URL** you need **SSG/prerender** or SSR (separate from this package).
+- **`DigiValtRouteSeo`** (preferred) sets Helmet + JSON-LD from a WordPress entity’s `digivalt_seo` field, falling back to visible title/excerpt then `VITE_SEO_*`.
+- **`DigiValtSeoHead`** still updates `<head>` on the **client** for in-app navigation.
+- **Crawlers:** prerendered `dist/{path}/index.html` snapshots carry title, meta, JSON-LD, and body HTML without executing JavaScript.
 - **Analytics:** Fire page views on client route changes so funnels match SPA navigation (measurement, not a ranking factor).
 
 ## Components
@@ -146,7 +177,9 @@ After `npx digivalt-init`, add:
 1. `npm install react-helmet-async`
 2. `HelmetProvider` at the app root
 3. SEO env vars (at least `VITE_SEO_SITE_URL`, `VITE_SEO_SITE_NAME`, `VITE_SEO_DEFAULT_OG_IMAGE` for production)
-4. Per-route **`DigiValtSeoHead`** + optional **`JsonLd`**
+4. Per-route **`DigiValtRouteSeo`** (or `DigiValtSeoHead` + `JsonLd`)
+5. Install **DigiValt SEO** on WordPress for per-URL fields
+6. Confirm build runs generate **and** `scripts/prerender-seo.ts`
 
 ## Upgrading from older `@marvalt/digivalt-core`
 

package/docs/SHORTCODES.md

@@ -4,7 +4,7 @@ After install: `node_modules/@marvalt/digivalt-core/docs/SHORTCODES.md`.
 
 The same list lives at the package root as `GLOBAL-SHORTCODES.md`.
 
-Content editors type shortcodes into WordPress. `@marvalt/wparser` finds `[name attr="value"]` in block HTML. `createAppRegistry` (in package **source** `src/utils/wpRegistry.tsx`, copied into apps by `digivalt-init`) maps names to React components.
+Content editors type shortcodes into WordPress. `@marvalt/wparser` finds `[name attr="value"]` in block HTML. `createContentRegistry()` from `@marvalt/digivalt-core/registry` maps package-supported names to React components. `digivalt-init` does not copy a registry file.
 
 **Do not register these as WordPress PHP shortcodes.** They must stay literal in REST content.
 
@@ -15,18 +15,17 @@ Content editors type shortcodes into WordPress. `@marvalt/wparser` finds `[name
 | `[mautic_form id="1"]` | `@marvalt/madapter` `getMauticShortcodeHandlers()` | Optional `title`, `description`. See `node_modules/@marvalt/madapter/docs/SHORTCODES.md`. |
 | `[phplist_subscribe list="1" attrs="firstname,lastname"]` | `@marvalt/plister` `getPhplistShortcodeHandlers()` | Visible fields only. Optional `page`, `title`, `intro`. See `node_modules/@marvalt/plister/docs/SHORTCODES.md`. |
 | `[gf_embed id="1"]` / `[gform …]` | core | Gravity Forms inline. |
-| `[popupbtn_gf …]` / `[popupbtn_mautic …]` | core | App Dialog/Button popups. |
-| `[member_*]` / `[testimonial_*]` / `[event_*]` | `@marvalt/shcoder` | CPT cards, grids, slideshows. |
+| `[popupbtn_gf …]` / `[popupbtn_mautic …]` | core | Package-local popup controls. |
 
 Full attribute list: package root [GLOBAL-SHORTCODES.md](../GLOBAL-SHORTCODES.md).
 
 ## If shortcodes stay as raw text
 
-1. The shortcode is not in `registry.shortcodes` — merge adapter handlers, or recopy `wpRegistry.tsx` after upgrading.
+1. The shortcode is not in `registry.shortcodes` — use `createContentRegistry()` or merge the required custom handler.
 2. Someone registered a PHP shortcode in WordPress — undo that so the token remains in the API response.
 3. Mautic/PHPList JSON was not generated, or `QueryClientProvider` is missing.
 
-## Standalone (no DigiValt `createAppRegistry`)
+## Standalone custom registry
 
 ```tsx
 import { getMauticShortcodeHandlers } from '@marvalt/madapter';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marvalt/digivalt-core",
-  "version": "0.2.30",
+  "version": "0.2.33",
   "description": "Core glue logic and shared context for DigiVAlt frontend applications",
   "license": "GPL-3.0-or-later",
   "main": "dist/index.cjs",
@@ -42,6 +42,11 @@
       "import": "./dist/seo.esm.js",
       "require": "./dist/seo.cjs"
     },
+    "./registry": {
+      "types": "./dist/registry.d.ts",
+      "import": "./dist/registry.esm.js",
+      "require": "./dist/registry.cjs"
+    },
     "./integrations": {
       "types": "./dist/integrations.d.ts",
       "import": "./dist/integrations.esm.js",
@@ -101,24 +106,30 @@
     "typescript": "^5.5.3"
   },
   "peerDependencies": {
+    "@tanstack/react-query": ">=5",
     "react": ">=18",
     "react-dom": ">=18",
     "react-helmet-async": ">=2"
   },
+  "peerDependenciesMeta": {
+    "@tanstack/react-query": {
+      "optional": true
+    }
+  },
   "engines": {
     "node": ">=18.0.0",
     "npm": ">=8.0.0"
   },
   "dependencies": {
     "@digivalt/tracker": "^0.1.1",
-    "@marvalt/dstyler": "^0.1.51",
+    "@marvalt/dstyler": "^0.1.53",
     "@marvalt/madapter": "^2.3.11",
     "@marvalt/plister": "^0.3.0",
-    "@marvalt/sadapter": "^0.1.5",
-    "@marvalt/shcoder": "^0.1.35",
-    "@marvalt/tadapter": "^1.0.12",
+    "@marvalt/sadapter": "^0.1.6",
+    "@marvalt/shcoder": "^0.1.37",
+    "@marvalt/tadapter": "^1.0.14",
     "@marvalt/wadapter": "^2.3.61",
-    "@marvalt/wparser": "^0.1.79",
+    "@marvalt/wparser": "^0.1.82",
     "@radix-ui/react-toast": "^1.2.15",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/template/DIGIVALT_SETUP.md

@@ -2,9 +2,9 @@
 
 Welcome to your new **DigiVAlt** architecture project!
 
-Because your Lovable interface is completely decoupled from the data pipeline, the `@marvalt/digivalt-core` package securely builds the glue between your frontend and your Cloudflare Worker backend.
+Your Vite interface is decoupled from the data pipeline. `@marvalt/digivalt-core` supplies static generation and runtime helpers for your Cloudflare Pages app.
 
-Follow these instructions strictly to hydrate a brand new Lovable project with real data.
+Follow these instructions to hydrate a new Vite project with real data.
 
 ---
 
@@ -17,7 +17,7 @@ npm install -D vite-node
 ```
 
 ## 🛠️ 2. Wire the Build Scripts
-`digivalt-init` now preflights your app and patches safe script cases automatically. In a standard Lovable/Vite app, it should add or update the DigiVAlt build wiring for you.
+`digivalt-init` preflights your app and patches safe script cases automatically. In a standard Vite app, it should add or update the DigiValt build wiring for you.
 
 Still verify your `package.json` after running init. The expected result is:
 
@@ -58,7 +58,7 @@ VITE_GRAVITY_FORMS_SECRET="your_cs_secret"
 # Local Execution Mode (Set to "direct" internally so your local UI bypasses Cloudflare)
 VITE_AUTH_MODE="direct"
 ```
-*⚠️ **CRITICAL WARNING:** NEVER place `VITE_IS_LOVABLE=true` inside `.env.local` locally! That variable instructs the application to mute API traffic completely, pretending the data does not exist.*
+*⚠️ **CRITICAL WARNING:** Never enable fixture mode (`VITE_IS_LOVABLE=true`) in `.env.local` when you need live generation. The backwards-compatible flag skips API traffic and uses committed data.*
 
 ## 🌩️ 5. Deploy Infrastructure to Cloudflare
 Once you connect this GitHub repository to the Cloudflare Pages dashboard:
@@ -77,15 +77,21 @@ Init will:
 - refresh older DigiVAlt-managed `scripts/generate.ts` files
 - reconcile the DigiValt-managed sections inside `.env.example` and `.env.local.example`
 - warn instead of overwriting custom build logic or custom generator scripts
-- report stale legacy workarounds that may no longer be needed
+- report stale legacy workarounds and local registry files that may no longer be needed
+
+## App chrome and WordPress page bodies
+
+Use `DigiValtProviders`, `DigiValtWpPage`, and `createContentRegistry` from `@marvalt/digivalt-core/registry`. Read static chrome content with `getAppChrome()` from `@marvalt/digivalt-core/static`.
+
+> Build Header/Footer in the app. Read menus, logo, and copy from WordPress static data (`getAppChrome()`). Apply the app’s layout and Tailwind. Do not render the WordPress header/footer template part and do not pipe `footer.blocks` / `header.blocks` through wparser.
 
 ## 7. SEO and PageSpeed (optional)
 
 1. Install **`react-helmet-async`** and wrap your app with **`HelmetProvider`** at the root (next to the router).
 2. Set at least **`VITE_SEO_SITE_URL`** (no trailing slash), **`VITE_SEO_SITE_NAME`**, **`VITE_SEO_DEFAULT_TITLE`**, **`VITE_SEO_DEFAULT_DESCRIPTION`**, and **`VITE_SEO_DEFAULT_OG_IMAGE`** in Cloudflare Pages / `.env.local`.
-3. Import **`DigiValtSeoHead`** and **`JsonLd`** from **`@marvalt/digivalt-core/seo`** in your layouts or page components; pass **`pathname`** per route for correct canonical URLs.
-4. **Sitemap:** **`/sitemap.xml`** is served by **`functions/sitemap.xml.ts`**. **`public/sitemap-paths.json`** is **generated** when you run **`npm run build`** (or `generate`): it merges (a) **`public/sitemap-static-paths.json`** — edit this for Lovable/SPA-only routes, (b) URLs from **`navigation_menu`** in **`wordpress-data.json`**, (c) **`link`** pathnames from CPT/post arrays listed under **`config.post_types`**. Only CMS links whose host matches **`VITE_WORDPRESS_API_URL`** / **`WORDPRESS_API_URL`** are included. Canonical `<loc>` values use **`VITE_SEO_SITE_URL`** (or **`SITE_URL`**). Do not add **`public/sitemap.xml`** (it would shadow the Function). With **`VITE_IS_LOVABLE=true`**, static fetch is skipped but sitemap paths are still regenerated from committed JSON.
-5. Read the full guide shipped with the package: **`node_modules/@marvalt/digivalt-core/docs/SEO-PERFORMANCE.md`** (or in the repo: `digivalt-npm-packages/digivalt-core/docs/SEO-PERFORMANCE.md`).
+3. Import **`DigiValtRouteSeo`** (or **`DigiValtSeoHead`** / **`JsonLd`**) from **`@marvalt/digivalt-core/seo`**; pass **`pathname`** per route.
+4. **Sitemap / robots / prerender:** **`/sitemap.xml`** and **`/robots.txt`** are Pages Functions. **`public/sitemap-paths.json`** and **`seo-manifest.json`** are generated on `generate` / `build`. After `vite build`, run **`scripts/prerender-seo.ts`**. Edit **`public/sitemap-static-paths.json`** for app-only indexable routes. Do not add **`public/sitemap.xml`** or **`public/robots.txt`**. Per-URL meta lives in the **DigiValt SEO** WordPress plugin; site identity stays in **`VITE_SEO_*`**. Optional **`VITE_SEO_ROUTE_PREFIXES`** maps CPT REST slugs to app path prefixes. See **`docs/SEO-PERFORMANCE.md`**.
+5. Read the full guide shipped with the package: **`node_modules/@marvalt/digivalt-core/docs/SEO-PERFORMANCE.md`**.
 
 ## 8. Analytics (Google Analytics / Matomo)
 

package/template/functions/robots.txt.ts

@@ -0,0 +1,27 @@
+/**
+ * Serves /robots.txt with a Sitemap directive using VITE_SEO_SITE_URL when set.
+ */
+
+function normalizeBase(raw: string | undefined): string | null {
+  if (!raw || typeof raw !== 'string') return null;
+  const t = raw.trim().replace(/\/+$/, '');
+  return t || null;
+}
+
+export async function onRequestGet(context: { request: Request; env: Record<string, string | undefined> }) {
+  const { request, env } = context;
+  const fromEnv = normalizeBase(env.VITE_SEO_SITE_URL || env.SITE_URL);
+  const origin = new URL(request.url).origin.replace(/\/+$/, '');
+  const base = fromEnv || origin;
+  const body = `User-agent: *
+Allow: /
+
+Sitemap: ${base}/sitemap.xml
+`;
+  return new Response(body, {
+    headers: {
+      'Content-Type': 'text/plain; charset=utf-8',
+      'Cache-Control': 'public, max-age=300',
+    },
+  });
+}

package/template/functions/sitemap.xml.ts

@@ -1,65 +1,143 @@
-/**
- * Serves /sitemap.xml from canonical site URL + public/sitemap-paths.json (generated at build).
- * Set VITE_SEO_SITE_URL (or SITE_URL) on Cloudflare Pages for production canonical hosts.
- */
-
-function normalizeBase(raw: string | undefined): string | null {
-  if (!raw || typeof raw !== 'string') return null;
-  const t = raw.trim().replace(/\/+$/, '');
-  return t || null;
-}
-
-function escapeXml(s: string): string {
-  return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
-}
-
-async function loadPaths(request: Request): Promise<string[]> {
-  try {
-    const jsonUrl = new URL('/sitemap-paths.json', request.url);
-    const res = await fetch(jsonUrl.toString());
-    if (!res.ok) return ['/'];
-    const data: unknown = await res.json();
-    const list: string[] = [];
-    if (Array.isArray(data)) {
-      for (const p of data) {
-        if (typeof p === 'string' && p.startsWith('/')) list.push(p);
-      }
-    } else if (data && typeof data === 'object' && Array.isArray((data as { paths?: unknown }).paths)) {
-      for (const p of (data as { paths: unknown[] }).paths) {
-        if (typeof p === 'string' && p.startsWith('/')) list.push(p);
-      }
-    }
-    return list.length ? list : ['/'];
-  } catch {
-    return ['/'];
-  }
-}
-
-function buildSitemap(base: string, paths: string[]): string {
-  const lines = paths.map((p) => {
-    const loc = p === '/' ? base : `${base}${p.startsWith('/') ? p : `/${p}`}`;
-    return `  <url><loc>${escapeXml(loc)}</loc></url>`;
-  });
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
-${lines.join('\n')}
-</urlset>`;
-}
-
-export async function onRequestGet(context: { request: Request; env: Record<string, string | undefined> }) {
-  const { request, env } = context;
-  const fromEnv = normalizeBase(env.VITE_SEO_SITE_URL || env.SITE_URL);
-  const origin = new URL(request.url).origin.replace(/\/+$/, '');
-  const base = fromEnv || origin;
-
-  const rawPaths = await loadPaths(request);
-  const paths = [...new Set(rawPaths.length ? rawPaths : ['/'])];
-
-  const xml = buildSitemap(base, paths);
-  return new Response(xml, {
-    headers: {
-      'Content-Type': 'application/xml; charset=utf-8',
-      'Cache-Control': 'public, max-age=300',
-    },
-  });
-}
+/**
+ * Serves /sitemap.xml from canonical site URL + public/sitemap-paths.json (generated at build).
+ * Set VITE_SEO_SITE_URL (or SITE_URL) on Cloudflare Pages for production canonical hosts.
+ */
+
+const IMAGE_NS = 'http://www.google.com/schemas/sitemap-image/1.1';
+
+function normalizeBase(raw: string | undefined): string | null {
+  if (!raw || typeof raw !== 'string') return null;
+  const t = raw.trim().replace(/\/+$/, '');
+  return t || null;
+}
+
+function escapeXml(s: string): string {
+  return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+}
+
+type SitemapUrl = { path: string; lastmod?: string; image?: string };
+
+function asUrls(data: unknown): SitemapUrl[] {
+  if (!data || typeof data !== 'object') return [];
+  const rec = data as { urls?: unknown; paths?: unknown };
+  if (Array.isArray(rec.urls)) {
+    return rec.urls
+      .map((u) => {
+        if (typeof u === 'string' && u.startsWith('/')) return { path: u };
+        if (u && typeof u === 'object' && typeof (u as { path?: unknown }).path === 'string') {
+          const row = u as { path: string; lastmod?: unknown; image?: unknown };
+          return {
+            path: row.path,
+            lastmod: typeof row.lastmod === 'string' ? row.lastmod : undefined,
+            image: typeof row.image === 'string' ? row.image : undefined,
+          };
+        }
+        return null;
+      })
+      .filter((u): u is SitemapUrl => !!u && u.path.startsWith('/'));
+  }
+  if (Array.isArray(rec.paths)) {
+    return rec.paths.filter((p): p is string => typeof p === 'string' && p.startsWith('/')).map((path) => ({ path }));
+  }
+  return [];
+}
+
+async function fetchJson(request: Request, pathname: string): Promise<unknown> {
+  const jsonUrl = new URL(pathname, request.url);
+  const res = await fetch(jsonUrl.toString());
+  if (!res.ok) return null;
+  return res.json();
+}
+
+async function loadUrls(request: Request): Promise<SitemapUrl[]> {
+  try {
+    const data = await fetchJson(request, '/sitemap-paths.json');
+    if (!data || typeof data !== 'object') return [{ path: '/' }];
+    const rec = data as { index?: unknown; parts?: unknown };
+    if (rec.index === true && typeof rec.parts === 'number' && rec.parts > 1) {
+      const partParam = new URL(request.url).searchParams.get('part');
+      if (partParam === null) {
+        return [];
+      }
+      const part = Number(partParam);
+      if (!Number.isInteger(part) || part < 0 || part >= rec.parts) return [{ path: '/' }];
+      const shard = await fetchJson(request, `/sitemap-paths-${part}.json`);
+      const urls = asUrls(shard);
+      return urls.length ? urls : [{ path: '/' }];
+    }
+    const urls = asUrls(data);
+    return urls.length ? urls : [{ path: '/' }];
+  } catch {
+    return [{ path: '/' }];
+  }
+}
+
+async function loadIndexParts(request: Request): Promise<number | null> {
+  try {
+    const data = await fetchJson(request, '/sitemap-paths.json');
+    if (data && typeof data === 'object') {
+      const rec = data as { index?: unknown; parts?: unknown };
+      if (rec.index === true && typeof rec.parts === 'number' && rec.parts > 1) return rec.parts;
+    }
+  } catch {
+    /* ignore */
+  }
+  return null;
+}
+
+function locFor(base: string, p: string): string {
+  return p === '/' ? base : `${base}${p.startsWith('/') ? p : `/${p}`}`;
+}
+
+function buildUrlset(base: string, urls: SitemapUrl[]): string {
+  const lines = urls.map((u) => {
+    const loc = locFor(base, u.path);
+    const lastmod = u.lastmod ? `\n    <lastmod>${escapeXml(u.lastmod)}</lastmod>` : '';
+    const image = u.image
+      ? `\n    <image:image>\n      <image:loc>${escapeXml(u.image)}</image:loc>\n    </image:image>`
+      : '';
+    return `  <url>\n    <loc>${escapeXml(loc)}</loc>${lastmod}${image}\n  </url>`;
+  });
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="${IMAGE_NS}">
+${lines.join('\n')}
+</urlset>`;
+}
+
+function buildIndex(base: string, parts: number): string {
+  const items = [];
+  for (let i = 0; i < parts; i++) {
+    items.push(`  <sitemap><loc>${escapeXml(`${base}/sitemap.xml?part=${i}`)}</loc></sitemap>`);
+  }
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+${items.join('\n')}
+</sitemapindex>`;
+}
+
+export async function onRequestGet(context: { request: Request; env: Record<string, string | undefined> }) {
+  const { request, env } = context;
+  const fromEnv = normalizeBase(env.VITE_SEO_SITE_URL || env.SITE_URL);
+  const origin = new URL(request.url).origin.replace(/\/+$/, '');
+  const base = fromEnv || origin;
+  const part = new URL(request.url).searchParams.get('part');
+
+  const indexParts = await loadIndexParts(request);
+  if (indexParts && part === null) {
+    return new Response(buildIndex(base, indexParts), {
+      headers: {
+        'Content-Type': 'application/xml; charset=utf-8',
+        'Cache-Control': 'public, max-age=300',
+      },
+    });
+  }
+
+  const urls = await loadUrls(request);
+  const xml = buildUrlset(base, urls.length ? urls : [{ path: '/' }]);
+  return new Response(xml, {
+    headers: {
+      'Content-Type': 'application/xml; charset=utf-8',
+      'Cache-Control': 'public, max-age=300',
+    },
+  });
+}

package/template/scripts/generate.ts

@@ -1,15 +1,7 @@
-import { generateAllData, generateSitemapPathsSafe } from '@marvalt/digivalt-core/generators';
+import { generateAllData, generateSitemapPathsSafe, generateSeoManifestSafe } from '@marvalt/digivalt-core/generators';
 
 async function runGenerators() {
-  console.log('🚀 Starting DigiVAlt static data generation for Landing Project...');
-
-  if (process.env.VITE_IS_LOVABLE === 'true') {
-    console.log(
-      '⚡ Lovable Environment Detected (VITE_IS_LOVABLE). Skipping static data fetch; refreshing sitemap paths from committed JSON.'
-    );
-    await generateSitemapPathsSafe();
-    return;
-  }
+  console.log('🚀 Starting DigiVAlt static data generation...');
 
   try {
     await generateAllData();
@@ -17,6 +9,7 @@ async function runGenerators() {
   } catch (error) {
     console.error('❌ Data fetching encountered an error, but continuing build gracefully:', error);
     await generateSitemapPathsSafe();
+    await generateSeoManifestSafe();
   }
 }
 

package/template/scripts/prerender-seo.ts

@@ -0,0 +1,10 @@
+import { prerenderSeoHtml } from '@marvalt/digivalt-core/generators';
+
+async function run() {
+  await prerenderSeoHtml();
+}
+
+run().catch((e) => {
+  console.error('❌ SEO prerender failed:', e);
+  process.exit(1);
+});