@morphika/andami 0.6.0 → 0.8.3

package/app/(site)/[slug]/page.tsx

@@ -7,6 +7,7 @@ import type { Page } from "../../../lib/sanity/types";
 import { PageRenderer } from "../../../components/blocks";
 import { getSiteConfig } from "../../../lib/config";
 import { assetUrl } from "../../../lib/assets";
+import BreadcrumbJsonLd from "../../../components/seo/BreadcrumbJsonLd";
 
 const cfg = getSiteConfig();
 
@@ -83,6 +84,12 @@ export default async function DynamicPage({ params }: PageProps) {
 
   return (
     <main className="min-h-screen">
+      <BreadcrumbJsonLd
+        items={[
+          { name: "Home", path: "/" },
+          { name: page.title },
+        ]}
+      />
       <PageRenderer page={page} />
     </main>
   );

package/app/(site)/layout.tsx

@@ -1,7 +1,4 @@
-import { cache } from "react";
-import { client } from "../../lib/sanity/client";
-import { siteSettingsQuery } from "../../lib/sanity/queries";
-import type { SiteSettings } from "../../lib/sanity/types";
+import { getCachedSiteSettings } from "../../lib/seo/site-settings";
 import { NavColorProvider } from "../../lib/contexts/NavColorContext";
 import { NavAnimationProvider } from "../../lib/contexts/NavAnimationContext";
 import { PageExitProvider } from "../../lib/contexts/PageExitContext";
@@ -10,23 +7,14 @@ import { getSiteConfig } from "../../lib/config";
 import Navbar from "../../components/ui/Navbar";
 import CustomCursor from "../../components/ui/CustomCursor";
 import ScrollToTop from "../../components/ui/ScrollToTop";
-
-// CPU Audit Fix 3: React cache() deduplicates within a render pass.
-const getSiteSettings = cache(async (): Promise<SiteSettings | null> => {
-  try {
-    return await client.fetch<SiteSettings>(siteSettingsQuery);
-  } catch (error) {
-    console.error("[SiteLayout] Failed to fetch site settings:", error);
-    return null;
-  }
-});
+import SiteSeoHead from "../../components/seo/SiteSeoHead";
 
 export default async function SiteLayout({
   children,
 }: {
   children: React.ReactNode;
 }) {
-  const settings = await getSiteSettings();
+  const settings = await getCachedSiteSettings();
   const navColor = settings?.nav_design?.color || "yellow-lime";
 
   const cfg = getSiteConfig();
@@ -36,6 +24,7 @@ export default async function SiteLayout({
       <NavColorProvider initialColor={navColor}>
         <NavAnimationProvider>
           <PageExitProvider>
+            <SiteSeoHead />
             <div data-site {...(cfg.features.customCursor ? { "data-custom-cursor": true } : {})}>
               <Navbar
                 navItems={settings?.nav_items}

package/app/(site)/work/[slug]/page.tsx

@@ -7,6 +7,8 @@ import type { Page } from "../../../../lib/sanity/types";
 import { PageRenderer } from "../../../../components/blocks";
 import { getSiteConfig } from "../../../../lib/config";
 import { assetUrl } from "../../../../lib/assets";
+import ProjectJsonLd from "../../../../components/seo/ProjectJsonLd";
+import BreadcrumbJsonLd from "../../../../components/seo/BreadcrumbJsonLd";
 
 const cfg = getSiteConfig();
 
@@ -83,6 +85,14 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
 
   return (
     <main className="min-h-screen">
+      <ProjectJsonLd page={page} />
+      <BreadcrumbJsonLd
+        items={[
+          { name: "Home", path: "/" },
+          { name: "Work", path: "/work" },
+          { name: page.title },
+        ]}
+      />
       <PageRenderer page={page} />
     </main>
   );

package/app/admin/settings/page.tsx

@@ -1,132 +1,136 @@
-"use client";
-
-import { useState, useEffect, useCallback } from "react";
-import MetadataEditor from "../../../components/admin/MetadataEditor";
-import { csrfHeaders } from "../../../lib/csrf-client";
-import type { SiteSettings } from "../../../lib/sanity/types";
-
-/**
- * /admin/settings — Global settings page.
- * Only contains Site Metadata.
- * Navigation + Footer are managed in /admin/navigation.
- */
-export default function AdminSettingsPage() {
-  // ── Global settings state ──
-  const [settings, setSettings] = useState<SiteSettings | null>(null);
-
-  // ── UI state ──
-  const [loading, setLoading] = useState(true);
-  const [savingMeta, setSavingMeta] = useState(false);
-  const [message, setMessage] = useState<{
-    type: "success" | "error";
-    text: string;
-  } | null>(null);
-
-  // ── Load settings ──
-  const fetchSettings = useCallback(async () => {
-    try {
-      const res = await fetch("/api/admin/settings");
-      if (res.ok) {
-        const data = await res.json();
-        setSettings(data.settings || null);
-      }
-    } catch {
-      setMessage({ type: "error", text: "Failed to load settings" });
-    } finally {
-      setLoading(false);
-    }
-  }, []);
-
-  useEffect(() => {
-    fetchSettings();
-  }, [fetchSettings]);
-
-  // ── Auto-dismiss messages ──
-  useEffect(() => {
-    if (!message) return;
-    const timer = setTimeout(() => setMessage(null), 5000);
-    return () => clearTimeout(timer);
-  }, [message]);
-
-  // ── Save handler ──
-  const handleSaveMeta = async (data: {
-    default_title: string;
-    default_description: string;
-    default_og_image: string;
-    favicon_path: string;
-    analytics_id: string;
-  }) => {
-    setSavingMeta(true);
-    setMessage(null);
-    try {
-      const res = await fetch("/api/admin/settings", {
-        method: "POST",
-        headers: { "Content-Type": "application/json", ...csrfHeaders() },
-        body: JSON.stringify({ section: "metadata", data }),
-      });
-      if (!res.ok) {
-        const errData = await res.json();
-        throw new Error(errData.error || "Save failed");
-      }
-      setMessage({ type: "success", text: "Metadata saved" });
-      // Refresh settings to get updated data
-      const settingsRes = await fetch("/api/admin/settings");
-      if (settingsRes.ok) {
-        const settingsData = await settingsRes.json();
-        setSettings(settingsData.settings || null);
-      }
-    } catch (err) {
-      setMessage({
-        type: "error",
-        text: err instanceof Error ? err.message : "Save failed",
-      });
-    } finally {
-      setSavingMeta(false);
-    }
-  };
-
-  // ── Loading state ──
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center py-20">
-        <span className="text-sm text-neutral-400 animate-pulse">
-          Loading settings...
-        </span>
-      </div>
-    );
-  }
-
-  return (
-    <div className="space-y-8">
-      <h1 className="text-2xl font-semibold text-neutral-900">
-        Metadata
-      </h1>
-
-      {/* Message banner */}
-      {message && (
-        <div
-          className={`p-3 rounded-xl border transition-opacity ${
-            message.type === "success"
-              ? "border-green-200 bg-green-50 text-green-700"
-              : "border-red-200 bg-red-50 text-red-700"
-          }`}
-        >
-          <p className="text-sm">{message.text}</p>
-        </div>
-      )}
-
-      {/* ====== SITE METADATA ====== */}
-      <MetadataEditor
-        initialData={{
-          default_title: settings?.default_title || "",
-          default_description: settings?.default_description || "",
-          default_og_image: settings?.default_og_image || "",
-          favicon_path: settings?.favicon_path || "",
-          analytics_id: settings?.analytics_id || "",
-        }}
-        onSave={handleSaveMeta}
-        saving={savingMeta}
-      />
-    </div>
-  );
-}
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+import MetadataEditor, { type MetadataData } from "../../../components/admin/MetadataEditor";
+import { csrfHeaders } from "../../../lib/csrf-client";
+import type { SiteSettings } from "../../../lib/sanity/types";
+
+/**
+ * /admin/settings — Global settings page.
+ * Only contains Site Metadata.
+ * Navigation + Footer are managed in /admin/navigation.
+ */
+export default function AdminSettingsPage() {
+  // ── Global settings state ──
+  const [settings, setSettings] = useState<SiteSettings | null>(null);
+
+  // ── UI state ──
+  const [loading, setLoading] = useState(true);
+  const [savingMeta, setSavingMeta] = useState(false);
+  const [message, setMessage] = useState<{
+    type: "success" | "error";
+    text: string;
+  } | null>(null);
+
+  // ── Load settings ──
+  const fetchSettings = useCallback(async () => {
+    try {
+      const res = await fetch("/api/admin/settings");
+      if (res.ok) {
+        const data = await res.json();
+        setSettings(data.settings || null);
+      }
+    } catch {
+      setMessage({ type: "error", text: "Failed to load settings" });
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    fetchSettings();
+  }, [fetchSettings]);
+
+  // ── Auto-dismiss messages ──
+  useEffect(() => {
+    if (!message) return;
+    const timer = setTimeout(() => setMessage(null), 5000);
+    return () => clearTimeout(timer);
+  }, [message]);
+
+  // ── Save handler ──
+  const handleSaveMeta = async (data: MetadataData) => {
+    setSavingMeta(true);
+    setMessage(null);
+    try {
+      const res = await fetch("/api/admin/settings", {
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...csrfHeaders() },
+        body: JSON.stringify({ section: "metadata", data }),
+      });
+      if (!res.ok) {
+        const errData = await res.json();
+        throw new Error(errData.error || "Save failed");
+      }
+      setMessage({ type: "success", text: "Metadata saved" });
+      // Refresh settings to get updated data
+      const settingsRes = await fetch("/api/admin/settings");
+      if (settingsRes.ok) {
+        const settingsData = await settingsRes.json();
+        setSettings(settingsData.settings || null);
+      }
+    } catch (err) {
+      setMessage({
+        type: "error",
+        text: err instanceof Error ? err.message : "Save failed",
+      });
+    } finally {
+      setSavingMeta(false);
+    }
+  };
+
+  // ── Loading state ──
+  if (loading) {
+    return (
+      <div className="flex items-center justify-center py-20">
+        <span className="text-sm text-neutral-400 animate-pulse">
+          Loading settings...
+        </span>
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-8">
+      <h1 className="text-2xl font-semibold text-neutral-900">
+        Metadata
+      </h1>
+
+      {/* Message banner */}
+      {message && (
+        <div
+          className={`p-3 rounded-xl border transition-opacity ${
+            message.type === "success"
+              ? "border-green-200 bg-green-50 text-green-700"
+              : "border-red-200 bg-red-50 text-red-700"
+          }`}
+        >
+          <p className="text-sm">{message.text}</p>
+        </div>
+      )}
+
+      {/* ====== SITE METADATA ====== */}
+      <MetadataEditor
+        initialData={{
+          default_title: settings?.default_title || "",
+          default_description: settings?.default_description || "",
+          default_og_image: settings?.default_og_image || "",
+          favicon_path: settings?.favicon_path || "",
+          analytics_id: settings?.analytics_id || "",
+          org_logo: settings?.org_logo || "",
+          default_author: settings?.default_author || "",
+          social_links: settings?.social_links || [],
+          founding_year: settings?.founding_year,
+          address_locality: settings?.address_locality || "",
+          address_country: settings?.address_country || "",
+          contact_email: settings?.contact_email || "",
+          keywords: settings?.keywords || [],
+          verification_google: settings?.verification_google || "",
+          verification_bing: settings?.verification_bing || "",
+        }}
+        onSave={handleSaveMeta}
+        saving={savingMeta}
+      />
+    </div>
+  );
+}

package/app/api/admin/settings/route.ts

@@ -296,12 +296,81 @@ export async function POST(request: NextRequest) {
             { status: 400 }
           );
         }
+        // Validate social_links array — each entry must be a safe URL
+        const socialLinks: Array<{ _key?: string; label?: string; url: string }> = [];
+        if (Array.isArray(data.social_links)) {
+          if (data.social_links.length > 25) {
+            return NextResponse.json(
+              { error: "social_links exceeds maximum of 25 entries" },
+              { status: 400 }
+            );
+          }
+          for (const link of data.social_links) {
+            if (!link || typeof link !== "object") continue;
+            if (typeof link.url !== "string" || !link.url.trim()) continue;
+            if (!isSafeUrl(link.url)) {
+              return NextResponse.json(
+                { error: "Social link URL uses a disallowed protocol" },
+                { status: 400 }
+              );
+            }
+            socialLinks.push({
+              _key: typeof link._key === "string" ? link._key : crypto.randomUUID().slice(0, 8),
+              ...(typeof link.label === "string" && link.label.trim()
+                ? { label: link.label.slice(0, 200) }
+                : {}),
+              url: link.url.slice(0, 500),
+            });
+          }
+        }
+        // Validate keywords array — strings, length-limited
+        const keywords: string[] = [];
+        if (Array.isArray(data.keywords)) {
+          if (data.keywords.length > 20) {
+            return NextResponse.json(
+              { error: "keywords exceeds maximum of 20 entries" },
+              { status: 400 }
+            );
+          }
+          for (const k of data.keywords) {
+            if (typeof k === "string" && k.trim()) {
+              keywords.push(k.trim().slice(0, 100));
+            }
+          }
+        }
+        // Validate founding_year
+        let foundingYear: number | undefined;
+        if (typeof data.founding_year === "number" && data.founding_year > 0) {
+          const currentYear = new Date().getFullYear();
+          if (data.founding_year >= 1800 && data.founding_year <= currentYear) {
+            foundingYear = Math.round(data.founding_year);
+          }
+        }
+        // Validate email format (basic)
+        let contactEmail = "";
+        if (typeof data.contact_email === "string" && data.contact_email.trim()) {
+          const email = data.contact_email.trim().slice(0, 200);
+          // Basic email shape check — full validation lives in Sanity schema
+          if (/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+            contactEmail = email;
+          }
+        }
         patch = {
           default_title: data.default_title || "",
           default_description: data.default_description || "",
           default_og_image: data.default_og_image || "",
           favicon_path: data.favicon_path || "",
           analytics_id: data.analytics_id || "",
+          org_logo: typeof data.org_logo === "string" ? data.org_logo.slice(0, 500) : "",
+          default_author: typeof data.default_author === "string" ? data.default_author.slice(0, 200) : "",
+          social_links: socialLinks,
+          founding_year: foundingYear,
+          address_locality: typeof data.address_locality === "string" ? data.address_locality.slice(0, 200) : "",
+          address_country: typeof data.address_country === "string" ? data.address_country.slice(0, 100) : "",
+          contact_email: contactEmail,
+          keywords,
+          verification_google: typeof data.verification_google === "string" ? data.verification_google.slice(0, 500) : "",
+          verification_bing: typeof data.verification_bing === "string" ? data.verification_bing.slice(0, 500) : "",
         };
         break;
       }

package/app/llms.txt/route.ts

@@ -0,0 +1,146 @@
+/**
+ * /llms.txt — AI/LLM-friendly site summary.
+ *
+ * Emerging standard (adopted by Vercel, Anthropic, Mintlify): a markdown file
+ * that gives LLM agents (ChatGPT, Perplexity, Claude, etc.) a curated,
+ * machine-readable overview of the site. Reduces hallucination and improves
+ * citation accuracy when AI assistants answer questions about the site.
+ *
+ * Format follows the llms.txt convention: H1 title, blockquote description,
+ * optional facts block, then sections of links with brief descriptions.
+ *
+ * Cached via ISR (24h, matching pages) — zero serverless CPU after first
+ * generation per revalidation window.
+ */
+
+import { NextResponse } from "next/server";
+import { client } from "../../lib/sanity/client";
+import {
+  allPagesForSitemapQuery,
+  allProjectsForSitemapQuery,
+} from "../../lib/sanity/queries";
+import { getCachedSiteSettings } from "../../lib/seo/site-settings";
+import { getSiteConfig } from "../../lib/config";
+
+// ISR — regenerate at most once per 24h. Admin can trigger on-demand
+// revalidation via /api/admin/revalidate (same as pages).
+export const revalidate = 86400;
+
+interface PageEntry {
+  slug: string;
+  updatedAt: string;
+  title?: string;
+  description?: string;
+}
+
+interface ProjectEntry extends PageEntry {
+  thumbnail_path?: string;
+  published_at?: string;
+}
+
+function escapeMd(s: string | undefined): string {
+  if (!s) return "";
+  return s.replace(/[\r\n]+/g, " ").replace(/\s+/g, " ").trim();
+}
+
+export async function GET() {
+  const cfg = getSiteConfig();
+  const domain = cfg.domain.replace(/\/$/, "");
+
+  const [settings, pages, projects] = await Promise.all([
+    getCachedSiteSettings(),
+    client.fetch<PageEntry[]>(allPagesForSitemapQuery).catch(() => [] as PageEntry[]),
+    client.fetch<ProjectEntry[]>(allProjectsForSitemapQuery).catch(() => [] as ProjectEntry[]),
+  ]);
+
+  const lines: string[] = [];
+
+  // ─── HEADER ───────────────────────────────────────────────
+  lines.push(`# ${cfg.name}`);
+  lines.push("");
+
+  const description =
+    settings?.default_description ||
+    cfg.defaults.metaDescription ||
+    "";
+  if (description) {
+    lines.push(`> ${escapeMd(description)}`);
+    lines.push("");
+  }
+
+  // ─── ORGANIZATION FACTS ──────────────────────────────────
+  // Citation-friendly: discrete facts LLMs can quote directly.
+  const facts: string[] = [];
+  if (settings?.founding_year) {
+    facts.push(`**Founded:** ${settings.founding_year}`);
+  }
+  if (settings?.address_locality || settings?.address_country) {
+    const loc = [settings.address_locality, settings.address_country]
+      .filter(Boolean)
+      .join(", ");
+    facts.push(`**Location:** ${loc}`);
+  }
+  if (settings?.contact_email) {
+    facts.push(`**Contact:** ${settings.contact_email}`);
+  }
+  if (settings?.keywords && settings.keywords.length > 0) {
+    facts.push(`**Specializes in:** ${settings.keywords.join(", ")}`);
+  }
+  if (facts.length > 0) {
+    lines.push(...facts);
+    lines.push("");
+  }
+
+  // ─── SOCIAL PROFILES ─────────────────────────────────────
+  if (settings?.social_links && settings.social_links.length > 0) {
+    lines.push("**Social profiles:**");
+    for (const link of settings.social_links) {
+      if (!link.url) continue;
+      const label = link.label?.trim();
+      // Emit "Label: URL" only when a meaningful label is present (and is not
+      // just a duplicate of the URL). Otherwise emit the URL alone — avoids
+      // the "URL: URL" duplication when a user types the URL into both fields.
+      const showLabel = label && label !== link.url;
+      lines.push(showLabel ? `- ${label}: ${link.url}` : `- ${link.url}`);
+    }
+    lines.push("");
+  }
+
+  // ─── PROJECTS ────────────────────────────────────────────
+  if (projects.length > 0) {
+    lines.push("## Projects");
+    lines.push("");
+    for (const p of projects) {
+      const url = `${domain}/work/${p.slug}`;
+      const title = escapeMd(p.title) || p.slug;
+      const desc = escapeMd(p.description);
+      lines.push(desc ? `- [${title}](${url}): ${desc}` : `- [${title}](${url})`);
+    }
+    lines.push("");
+  }
+
+  // ─── PAGES ───────────────────────────────────────────────
+  if (pages.length > 0) {
+    lines.push("## Pages");
+    lines.push("");
+    for (const p of pages) {
+      const url = `${domain}/${p.slug}`;
+      const title = escapeMd(p.title) || p.slug;
+      const desc = escapeMd(p.description);
+      lines.push(desc ? `- [${title}](${url}): ${desc}` : `- [${title}](${url})`);
+    }
+    lines.push("");
+  }
+
+  const body = lines.join("\n");
+
+  return new NextResponse(body, {
+    status: 200,
+    headers: {
+      "Content-Type": "text/plain; charset=utf-8",
+      // CDN cache: serve from edge for 24h, allow stale-while-revalidate up
+      // to 1h. Matches the ISR window.
+      "Cache-Control": "public, s-maxage=86400, stale-while-revalidate=3600",
+    },
+  });
+}