@sonordev/agency-site-kit 0.3.1 → 0.4.1

package/dist/chunk-KXLROAO5.js

@@ -0,0 +1,291 @@
+import { PORTFOLIO_CACHE_TAG } from './chunk-N7TVKUYQ.js';
+import { PORTFOLIO_PREVIEW_COOKIE } from './chunk-L4EOQVRJ.js';
+import { apiFetch } from './chunk-QL6KVIFR.js';
+
+// src/portfolio/sanitize.ts
+function humanizeArchPageEntry(page) {
+  const title = (page?.title || "").trim();
+  if (title && !title.startsWith("/")) return { title };
+  const source = title || (page?.path || "").trim();
+  const lastSegment = source.split(/[?#]/)[0].split("/").filter(Boolean).pop() || "";
+  const label = lastSegment.replace(/\.(html?|php|aspx?)$/i, "").replace(/[-_]+/g, " ").trim().replace(/\b\w/g, (c) => c.toUpperCase());
+  return { title: label || "Home" };
+}
+function sanitizeSiteArchitectureData(data) {
+  if (!data || !Array.isArray(data.groups)) return data;
+  return {
+    ...data,
+    groups: data.groups.map((group) => ({
+      ...group,
+      pages: Array.isArray(group.pages) ? group.pages.map(humanizeArchPageEntry) : []
+    }))
+  };
+}
+function sanitizePortfolioSections(sections) {
+  return sections.map(
+    (section) => section?.sectionType === "portfolioSiteArchitecture" ? { ...section, data: sanitizeSiteArchitectureData(section.data) } : section
+  );
+}
+
+// src/portfolio/server.ts
+var LOG_PREFIX = "[@sonordev/agency-site-kit/portfolio]";
+var PortfolioApiError = class extends Error {
+  constructor(path, message) {
+    super(
+      message ?? `${LOG_PREFIX} Portfolio API request failed: ${path}. This is an infrastructure/config failure (network, 5xx, or missing SONOR_API_KEY), not a missing item \u2014 failing loudly so it cannot be mistaken for a 404 or an empty portfolio.`
+    );
+    this.name = "PortfolioApiError";
+    this.path = path;
+  }
+};
+var PortfolioContractError = class extends PortfolioApiError {
+  constructor(path, field, detail) {
+    super(
+      path,
+      `${LOG_PREFIX} Portfolio API contract violation at "${field}" (${path}): ${detail}. Refusing to render partial or corrupt data.`
+    );
+    this.name = "PortfolioContractError";
+    this.field = field;
+  }
+};
+function assertPortfolioItemShape(item, path) {
+  const fail = (field, detail) => {
+    throw new PortfolioContractError(path, field, detail);
+  };
+  if (typeof item !== "object" || item === null) fail("item", "not an object");
+  const record = item;
+  for (const field of ["id", "slug", "title"]) {
+    const v = record[field];
+    if (typeof v !== "string" || v.length === 0) {
+      fail(field, `expected a non-empty string, got ${JSON.stringify(v)}`);
+    }
+  }
+  for (const field of ["sections", "services", "kpis", "metricsDelta"]) {
+    const v = record[field];
+    if (v != null && !Array.isArray(v)) {
+      fail(field, `expected an array when present, got ${typeof v}`);
+    }
+  }
+  const sections = record.sections ?? [];
+  sections.forEach((section, i) => {
+    if (typeof section !== "object" || section === null) {
+      fail(`sections[${i}]`, "not an object");
+    }
+    const s = section;
+    if (typeof s.sectionType !== "string" || s.sectionType.length === 0) {
+      fail(`sections[${i}].sectionType`, "expected a non-empty string");
+    }
+    if (typeof s.data !== "object" || s.data === null) {
+      fail(`sections[${i}].data`, "expected an object");
+    }
+  });
+}
+async function portfolioGet(path, opts = {}) {
+  const data = await apiFetch(path, {
+    method: "GET",
+    tags: [PORTFOLIO_CACHE_TAG],
+    retry: true,
+    maxAttempts: 3,
+    requireKey: true,
+    ...opts.revalidate !== void 0 ? { revalidate: opts.revalidate } : {}
+  });
+  if (data === null) throw new PortfolioApiError(path);
+  return data;
+}
+async function getDraftPreviewToken() {
+  try {
+    const { draftMode, cookies } = await import('next/headers');
+    const dm = await draftMode();
+    if (!dm.isEnabled) return null;
+    const jar = await cookies();
+    return jar.get(PORTFOLIO_PREVIEW_COOKIE)?.value ?? null;
+  } catch {
+    return null;
+  }
+}
+function buildQuery(params) {
+  const entries = Object.entries(params).filter(
+    (entry) => entry[1] != null
+  );
+  if (entries.length === 0) return "";
+  const qs = new URLSearchParams(
+    entries.map(([k, v]) => [k, String(v)])
+  ).toString();
+  return `?${qs}`;
+}
+async function getPortfolioItems(options) {
+  const query = buildQuery({
+    category: options?.category,
+    featured: options?.featured,
+    limit: options?.limit,
+    offset: options?.offset
+  });
+  return portfolioGet(
+    `/api/public/portfolio/items${query}`
+  );
+}
+async function getPortfolioItem(slug) {
+  if (!slug) {
+    console.warn(`${LOG_PREFIX} getPortfolioItem called with empty slug.`);
+    return null;
+  }
+  const previewToken = await getDraftPreviewToken();
+  const path = previewToken ? `/api/public/portfolio/items/${encodeURIComponent(slug)}?preview=${encodeURIComponent(previewToken)}` : `/api/public/portfolio/items/${encodeURIComponent(slug)}`;
+  const data = await portfolioGet(
+    path,
+    previewToken ? { revalidate: 0 } : {}
+  );
+  if (!data.found || !data.item) {
+    console.warn(`${LOG_PREFIX} Portfolio item not found for slug: "${slug}".`);
+    return null;
+  }
+  assertPortfolioItemShape(data.item, `/api/public/portfolio/items/${slug}`);
+  const { item } = data;
+  return {
+    id: item.id,
+    slug: item.slug,
+    title: item.title,
+    subtitle: item.subtitle,
+    category: item.category,
+    services: item.services,
+    description: item.description,
+    hero_image: item.hero_image,
+    hero_image_alt: item.hero_image_alt,
+    live_url: item.live_url,
+    project_id: item.project_id ?? null,
+    kpis: item.kpis,
+    details: item.details,
+    seo: item.seo,
+    featured: item.featured,
+    order: item.order,
+    published_at: item.published_at,
+    hero_screenshots: item.hero_screenshots,
+    baseline_metrics: item.baseline_metrics,
+    current_metrics: item.current_metrics,
+    metrics_last_refreshed_at: item.metrics_last_refreshed_at,
+    // Sanitized HERE — the enforcing layer. Even with PortfolioPage as a
+    // genuine RSC, each rendered section's data still crosses the client
+    // boundary into the flight payload, and any future bundling regression
+    // would leak the whole item again (the 0.3.1 GSC 404-flood vector).
+    // Sanitize at the last server-side hop, always.
+    sections: sanitizePortfolioSections(item.sections ?? []),
+    metricsDelta: item.metricsDelta ?? [],
+    sectionsOrdered: item.sectionsOrdered ?? false
+  };
+}
+async function getPortfolioCategories() {
+  return portfolioGet("/api/public/portfolio/categories");
+}
+async function getPortfolioBrandConfig() {
+  const fallback = {
+    primary: "#6366f1",
+    secondary: "#8b5cf6",
+    background: "#0a0a0f",
+    backgroundElevated: "#12121a",
+    surface: "#1a1a2e",
+    surfaceHover: "#22223a",
+    surfaceBorder: "#2a2a3e",
+    textPrimary: "#f0f0f5",
+    textSecondary: "#a0a0b5",
+    textTertiary: "#6b6b80",
+    fontHeading: "Inter, system-ui, sans-serif",
+    fontBody: "Inter, system-ui, sans-serif"
+  };
+  try {
+    const data = await portfolioGet(
+      "/api/public/portfolio/config"
+    );
+    if (!data.brand) {
+      console.warn(`${LOG_PREFIX} Brand config response empty, using defaults.`);
+      return fallback;
+    }
+    return data.brand;
+  } catch {
+    console.warn(`${LOG_PREFIX} Failed to fetch brand config, using defaults.`);
+    return fallback;
+  }
+}
+async function generatePortfolioMetadata(slug) {
+  const item = await getPortfolioItem(slug);
+  if (!item) {
+    return {};
+  }
+  const seo = item.seo;
+  const title = seo?.metaTitle || item.title;
+  const description = seo?.metaDescription || item.description;
+  const keywords = seo?.keywords ?? [];
+  const ogImages = [];
+  if (item.hero_image) {
+    ogImages.push(item.hero_image);
+  }
+  return {
+    title,
+    description,
+    keywords: keywords.length > 0 ? keywords : void 0,
+    openGraph: {
+      title,
+      description,
+      images: ogImages.length > 0 ? ogImages : void 0,
+      type: "article"
+    }
+  };
+}
+async function generatePortfolioStaticParams() {
+  const data = await getPortfolioItems({ limit: 500, offset: 0 });
+  return data.items.map((item) => ({ slug: item.slug }));
+}
+function slugifyCategory(category) {
+  return category.toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+async function generatePortfolioCategoryStaticParams() {
+  const categories = await getPortfolioCategories();
+  return categories.map((c) => ({ category: slugifyCategory(c) }));
+}
+async function generatePortfolioIndexMetadata(options) {
+  const {
+    baseUrl,
+    basePath = "/work",
+    category = null,
+    page = 1,
+    titleBase = "Our Work"
+  } = options;
+  const origin = baseUrl.replace(/\/+$/, "");
+  const prefix = basePath.startsWith("/") ? basePath : `/${basePath}`;
+  let title = titleBase;
+  let path = prefix;
+  if (category) {
+    const categories = await getPortfolioCategories();
+    const match = categories.find((c) => slugifyCategory(c) === category);
+    if (match) title = `${match} | ${titleBase}`;
+    path = `${prefix}/category/${category}`;
+  }
+  if (page > 1) {
+    title = `${title} \u2014 Page ${page}`;
+    path = `${path}?page=${page}`;
+  }
+  return { title, alternates: { canonical: `${origin}${path}` } };
+}
+async function generatePortfolioSitemapEntries(options) {
+  const {
+    baseUrl,
+    basePath = "/work",
+    changeFrequency = "monthly",
+    priority = 0.7
+  } = options;
+  const origin = baseUrl.replace(/\/+$/, "");
+  const prefix = basePath.startsWith("/") ? basePath : `/${basePath}`;
+  const data = await getPortfolioItems({ limit: 500, offset: 0 });
+  return data.items.map((item) => {
+    const lastModified = item.metrics_last_refreshed_at || item.published_at || void 0;
+    return {
+      url: `${origin}${prefix}/${item.slug}`,
+      ...lastModified ? { lastModified } : {},
+      changeFrequency,
+      priority
+    };
+  });
+}
+
+export { PortfolioApiError, PortfolioContractError, assertPortfolioItemShape, generatePortfolioCategoryStaticParams, generatePortfolioIndexMetadata, generatePortfolioMetadata, generatePortfolioSitemapEntries, generatePortfolioStaticParams, getPortfolioBrandConfig, getPortfolioCategories, getPortfolioItem, getPortfolioItems, sanitizeSiteArchitectureData, slugifyCategory };
+//# sourceMappingURL=chunk-KXLROAO5.js.map
+//# sourceMappingURL=chunk-KXLROAO5.js.map

package/dist/chunk-KXLROAO5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/portfolio/sanitize.ts","../src/portfolio/server.ts"],"names":[],"mappings":";;;;;AAwBO,SAAS,sBAAsB,IAAA,EAAwC;AAC5E,EAAA,MAAM,KAAA,GAAA,CAAS,IAAA,EAAM,KAAA,IAAS,EAAA,EAAI,IAAA,EAAK;AACvC,EAAA,IAAI,KAAA,IAAS,CAAC,KAAA,CAAM,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,EAAE,KAAA,EAAM;AACpD,EAAA,MAAM,MAAA,GAAS,KAAA,IAAA,CAAU,IAAA,EAAM,IAAA,IAAQ,IAAI,IAAA,EAAK;AAChD,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,CAAM,MAAM,EAAE,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,KAAI,IAAK,EAAA;AAChF,EAAA,MAAM,QAAQ,WAAA,CACX,OAAA,CAAQ,yBAAyB,EAAE,CAAA,CACnC,QAAQ,QAAA,EAAU,GAAG,CAAA,CACrB,IAAA,GACA,OAAA,CAAQ,OAAA,EAAS,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAC1C,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,IAAS,MAAA,EAAO;AAClC;AAGO,SAAS,6BAA6B,IAAA,EAAgB;AAC3D,EAAA,IAAI,CAAC,QAAQ,CAAC,KAAA,CAAM,QAAQ,IAAA,CAAK,MAAM,GAAG,OAAO,IAAA;AACjD,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,MAAgB;AAAA,MACvC,GAAG,KAAA;AAAA,MACH,KAAA,EAAO,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,qBAAqB,CAAA,GAAI;AAAC,KAChF,CAAE;AAAA,GACJ;AACF;AAGO,SAAS,0BACd,QAAA,EACK;AACL,EAAA,OAAO,QAAA,CAAS,GAAA;AAAA,IAAI,CAAC,OAAA,KACnB,OAAA,EAAS,WAAA,KAAgB,2BAAA,GACrB,EAAE,GAAG,OAAA,EAAS,IAAA,EAAM,4BAAA,CAA6B,OAAA,CAAQ,IAAI,GAAE,GAC/D;AAAA,GACN;AACF;;;AClCA,IAAM,UAAA,GAAa,uCAAA;AAqBZ,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAG3C,WAAA,CAAY,MAAc,OAAA,EAAkB;AAC1C,IAAA,KAAA;AAAA,MACE,OAAA,IACE,CAAA,EAAG,UAAU,CAAA,+BAAA,EAAkC,IAAI,CAAA,uLAAA;AAAA,KAIvD;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAOO,IAAM,sBAAA,GAAN,cAAqC,iBAAA,CAAkB;AAAA,EAG5D,WAAA,CAAY,IAAA,EAAc,KAAA,EAAe,MAAA,EAAgB;AACvD,IAAA,KAAA;AAAA,MACE,IAAA;AAAA,MACA,GAAG,UAAU,CAAA,sCAAA,EAAyC,KAAK,CAAA,GAAA,EAAM,IAAI,MAAM,MAAM,CAAA,6CAAA;AAAA,KAEnF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF;AAOO,SAAS,wBAAA,CACd,MACA,IAAA,EACkD;AAClD,EAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAe,MAAA,KAA0B;AACrD,IAAA,MAAM,IAAI,sBAAA,CAAuB,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,EACtD,CAAA;AAEA,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,IAAA,EAAM,IAAA,CAAK,QAAQ,eAAe,CAAA;AAC3E,EAAA,MAAM,MAAA,GAAS,IAAA;AAEf,EAAA,KAAA,MAAW,KAAA,IAAS,CAAC,IAAA,EAAM,MAAA,EAAQ,OAAO,CAAA,EAAY;AACpD,IAAA,MAAM,CAAA,GAAI,OAAO,KAAK,CAAA;AACtB,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,WAAW,CAAA,EAAG;AAC3C,MAAA,IAAA,CAAK,OAAO,CAAA,iCAAA,EAAoC,IAAA,CAAK,SAAA,CAAU,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,SAAS,CAAC,UAAA,EAAY,UAAA,EAAY,MAAA,EAAQ,cAAc,CAAA,EAAY;AAC7E,IAAA,MAAM,CAAA,GAAI,OAAO,KAAK,CAAA;AACtB,IAAA,IAAI,KAAK,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AAClC,MAAA,IAAA,CAAK,KAAA,EAAO,CAAA,oCAAA,EAAuC,OAAO,CAAC,CAAA,CAAE,CAAA;AAAA,IAC/D;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAY,MAAA,CAAO,QAAA,IAAY,EAAC;AACtC,EAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,OAAA,EAAS,CAAA,KAAM;AAC/B,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,KAAY,IAAA,EAAM;AACnD,MAAA,IAAA,CAAK,CAAA,SAAA,EAAY,CAAC,CAAA,CAAA,CAAA,EAAK,eAAe,CAAA;AAAA,IACxC;AACA,IAAA,MAAM,CAAA,GAAI,OAAA;AACV,IAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,YAAY,CAAA,CAAE,WAAA,CAAY,WAAW,CAAA,EAAG;AACnE,MAAA,IAAA,CAAK,CAAA,SAAA,EAAY,CAAC,CAAA,aAAA,CAAA,EAAiB,6BAA6B,CAAA;AAAA,IAClE;AACA,IAAA,IAAI,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,SAAS,IAAA,EAAM;AACjD,MAAA,IAAA,CAAK,CAAA,SAAA,EAAY,CAAC,CAAA,MAAA,CAAA,EAAU,oBAAoB,CAAA;AAAA,IAClD;AAAA,EACF,CAAC,CAAA;AACH;AAYA,eAAe,YAAA,CACb,IAAA,EACA,IAAA,GAAgC,EAAC,EACrB;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAY,IAAA,EAAM;AAAA,IACnC,MAAA,EAAQ,KAAA;AAAA,IACR,IAAA,EAAM,CAAC,mBAAmB,CAAA;AAAA,IAC1B,KAAA,EAAO,IAAA;AAAA,IACP,WAAA,EAAa,CAAA;AAAA,IACb,UAAA,EAAY,IAAA;AAAA,IACZ,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI;AAAC,GACxE,CAAA;AAED,EAAA,IAAI,IAAA,KAAS,IAAA,EAAM,MAAM,IAAI,kBAAkB,IAAI,CAAA;AACnD,EAAA,OAAO,IAAA;AACT;AAQA,eAAe,oBAAA,GAA+C;AAC5D,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,MAAM,OAAO,cAAc,CAAA;AAC1D,IAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU;AAC3B,IAAA,IAAI,CAAC,EAAA,CAAG,SAAA,EAAW,OAAO,IAAA;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,EAAQ;AAC1B,IAAA,OAAO,GAAA,CAAI,GAAA,CAAI,wBAAwB,CAAA,EAAG,KAAA,IAAS,IAAA;AAAA,EACrD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AASA,SAAS,WAAW,MAAA,EAA8E;AAChG,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA;AAAA,IACrC,CAAC,KAAA,KAAwD,KAAA,CAAM,CAAC,CAAA,IAAK;AAAA,GACvE;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AACjC,EAAA,MAAM,KAAK,IAAI,eAAA;AAAA,IACb,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,CAAA,EAAG,MAAA,CAAO,CAAC,CAAC,CAAC;AAAA,IACtC,QAAA,EAAS;AACX,EAAA,OAAO,IAAI,EAAE,CAAA,CAAA;AACf;AAcA,eAAsB,kBAAkB,OAAA,EAKL;AACjC,EAAA,MAAM,QAAQ,UAAA,CAAW;AAAA,IACvB,UAAU,OAAA,EAAS,QAAA;AAAA,IACnB,UAAU,OAAA,EAAS,QAAA;AAAA,IACnB,OAAO,OAAA,EAAS,KAAA;AAAA,IAChB,QAAQ,OAAA,EAAS;AAAA,GAClB,CAAA;AAED,EAAA,OAAO,YAAA;AAAA,IACL,8BAA8B,KAAK,CAAA;AAAA,GACrC;AACF;AA8CA,eAAsB,iBAAiB,IAAA,EAAiD;AACtF,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,UAAU,CAAA,yCAAA,CAA2C,CAAA;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,MAAM,YAAA,GAAe,MAAM,oBAAA,EAAqB;AAChD,EAAA,MAAM,IAAA,GAAO,YAAA,GACT,CAAA,4BAAA,EAA+B,kBAAA,CAAmB,IAAI,CAAC,CAAA,SAAA,EAAY,kBAAA,CAAmB,YAAY,CAAC,CAAA,CAAA,GACnG,CAAA,4BAAA,EAA+B,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAE3D,EAAA,MAAM,OAAO,MAAM,YAAA;AAAA,IACjB,IAAA;AAAA,IACA,YAAA,GAAe,EAAE,UAAA,EAAY,CAAA,KAAM;AAAC,GACtC;AAEA,EAAA,IAAI,CAAC,IAAA,CAAK,KAAA,IAAS,CAAC,KAAK,IAAA,EAAM;AAC7B,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,UAAU,CAAA,qCAAA,EAAwC,IAAI,CAAA,EAAA,CAAI,CAAA;AAC1E,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,wBAAA,CAAyB,IAAA,CAAK,IAAA,EAAM,CAAA,4BAAA,EAA+B,IAAI,CAAA,CAAE,CAAA;AAGzE,EAAA,MAAM,EAAE,MAAK,GAAI,IAAA;AACjB,EAAA,OAAO;AAAA,IACL,IAAI,IAAA,CAAK,EAAA;AAAA,IACT,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,IAC/B,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,KAAK,IAAA,CAAK,GAAA;AAAA,IACV,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,OAAO,IAAA,CAAK,KAAA;AAAA,IACZ,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,kBAAkB,IAAA,CAAK,gBAAA;AAAA,IACvB,kBAAkB,IAAA,CAAK,gBAAA;AAAA,IACvB,iBAAiB,IAAA,CAAK,eAAA;AAAA,IACtB,2BAA2B,IAAA,CAAK,yBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMhC,QAAA,EAAU,yBAAA,CAA0B,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AAAA,IACvD,YAAA,EAAc,IAAA,CAAK,YAAA,IAAgB,EAAC;AAAA,IACpC,eAAA,EAAiB,KAAK,eAAA,IAAmB;AAAA,GAC3C;AACF;AAUA,eAAsB,sBAAA,GAA4C;AAChE,EAAA,OAAO,aAAuB,kCAAkC,CAAA;AAClE;AAYA,eAAsB,uBAAA,GAAgD;AACpE,EAAA,MAAM,QAAA,GAAwB;AAAA,IAC5B,OAAA,EAAS,SAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,UAAA,EAAY,SAAA;AAAA,IACZ,kBAAA,EAAoB,SAAA;AAAA,IACpB,OAAA,EAAS,SAAA;AAAA,IACT,YAAA,EAAc,SAAA;AAAA,IACd,aAAA,EAAe,SAAA;AAAA,IACf,WAAA,EAAa,SAAA;AAAA,IACb,aAAA,EAAe,SAAA;AAAA,IACf,YAAA,EAAc,SAAA;AAAA,IACd,WAAA,EAAa,8BAAA;AAAA,IACb,QAAA,EAAU;AAAA,GACZ;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,OAAO,MAAM,YAAA;AAAA,MACjB;AAAA,KACF;AACA,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,UAAU,CAAA,6CAAA,CAA+C,CAAA;AACzE,MAAA,OAAO,QAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,EAAG,UAAU,CAAA,8CAAA,CAAgD,CAAA;AAC1E,IAAA,OAAO,QAAA;AAAA,EACT;AACF;AAcA,eAAsB,0BAA0B,IAAA,EAU7C;AACD,EAAA,MAAM,IAAA,GAAO,MAAM,gBAAA,CAAiB,IAAI,CAAA;AAExC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,EAAC;AAAA,EACV;AAGA,EAAA,MAAM,MAA+B,IAAA,CAAK,GAAA;AAC1C,EAAA,MAAM,KAAA,GAAQ,GAAA,EAAK,SAAA,IAAa,IAAA,CAAK,KAAA;AACrC,EAAA,MAAM,WAAA,GAAc,GAAA,EAAK,eAAA,IAAmB,IAAA,CAAK,WAAA;AACjD,EAAA,MAAM,QAAA,GAAW,GAAA,EAAK,QAAA,IAAY,EAAC;AAGnC,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,IAAI,KAAK,UAAA,EAAY;AACnB,IAAA,QAAA,CAAS,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,WAAA;AAAA,IACA,QAAA,EAAU,QAAA,CAAS,MAAA,GAAS,CAAA,GAAI,QAAA,GAAW,MAAA;AAAA,IAC3C,SAAA,EAAW;AAAA,MACT,KAAA;AAAA,MACA,WAAA;AAAA,MACA,MAAA,EAAQ,QAAA,CAAS,MAAA,GAAS,CAAA,GAAI,QAAA,GAAW,MAAA;AAAA,MACzC,IAAA,EAAM;AAAA;AACR,GACF;AACF;AAcA,eAAsB,6BAAA,GAAkE;AAEtF,EAAA,MAAM,IAAA,GAAO,MAAM,iBAAA,CAAkB,EAAE,OAAO,GAAA,EAAK,MAAA,EAAQ,GAAG,CAAA;AAE9D,EAAA,OAAO,IAAA,CAAK,MAAM,GAAA,CAAI,CAAC,UAAU,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK,CAAE,CAAA;AACvD;AAWO,SAAS,gBAAgB,QAAA,EAA0B;AACxD,EAAA,OAAO,QAAA,CACJ,WAAA,EAAY,CACZ,IAAA,EAAK,CACL,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,UAAA,EAAY,EAAE,CAAA;AAC3B;AAYA,eAAsB,qCAAA,GAEpB;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,sBAAA,EAAuB;AAChD,EAAA,OAAO,UAAA,CAAW,IAAI,CAAC,CAAA,MAAO,EAAE,QAAA,EAAU,eAAA,CAAgB,CAAC,CAAA,EAAE,CAAE,CAAA;AACjE;AAOA,eAAsB,+BAA+B,OAAA,EAWa;AAChE,EAAA,MAAM;AAAA,IACJ,OAAA;AAAA,IACA,QAAA,GAAW,OAAA;AAAA,IACX,QAAA,GAAW,IAAA;AAAA,IACX,IAAA,GAAO,CAAA;AAAA,IACP,SAAA,GAAY;AAAA,GACd,GAAI,OAAA;AAEJ,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACzC,EAAA,MAAM,SAAS,QAAA,CAAS,UAAA,CAAW,GAAG,CAAA,GAAI,QAAA,GAAW,IAAI,QAAQ,CAAA,CAAA;AAEjE,EAAA,IAAI,KAAA,GAAQ,SAAA;AACZ,EAAA,IAAI,IAAA,GAAO,MAAA;AAEX,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,MAAM,UAAA,GAAa,MAAM,sBAAA,EAAuB;AAChD,IAAA,MAAM,KAAA,GAAQ,WAAW,IAAA,CAAK,CAAC,MAAM,eAAA,CAAgB,CAAC,MAAM,QAAQ,CAAA;AACpE,IAAA,IAAI,KAAA,EAAO,KAAA,GAAQ,CAAA,EAAG,KAAK,MAAM,SAAS,CAAA,CAAA;AAC1C,IAAA,IAAA,GAAO,CAAA,EAAG,MAAM,CAAA,UAAA,EAAa,QAAQ,CAAA,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,OAAO,CAAA,EAAG;AACZ,IAAA,KAAA,GAAQ,CAAA,EAAG,KAAK,CAAA,aAAA,EAAW,IAAI,CAAA,CAAA;AAC/B,IAAA,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,EAAE,SAAA,EAAW,GAAG,MAAM,CAAA,EAAG,IAAI,CAAA,CAAA,EAAG,EAAE;AAChE;AA+BA,eAAsB,gCAAgC,OAAA,EAOjB;AACnC,EAAA,MAAM;AAAA,IACJ,OAAA;AAAA,IACA,QAAA,GAAW,OAAA;AAAA,IACX,eAAA,GAAkB,SAAA;AAAA,IAClB,QAAA,GAAW;AAAA,GACb,GAAI,OAAA;AAEJ,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACzC,EAAA,MAAM,SAAS,QAAA,CAAS,UAAA,CAAW,GAAG,CAAA,GAAI,QAAA,GAAW,IAAI,QAAQ,CAAA,CAAA;AAEjE,EAAA,MAAM,IAAA,GAAO,MAAM,iBAAA,CAAkB,EAAE,OAAO,GAAA,EAAK,MAAA,EAAQ,GAAG,CAAA;AAE9D,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AAC9B,IAAA,MAAM,YAAA,GACJ,IAAA,CAAK,yBAAA,IAA6B,IAAA,CAAK,YAAA,IAAgB,MAAA;AACzD,IAAA,OAAO;AAAA,MACL,KAAK,CAAA,EAAG,MAAM,GAAG,MAAM,CAAA,CAAA,EAAI,KAAK,IAAI,CAAA,CAAA;AAAA,MACpC,GAAI,YAAA,GAAe,EAAE,YAAA,KAAiB,EAAC;AAAA,MACvC,eAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH","file":"chunk-KXLROAO5.js","sourcesContent":["/**\n * Portfolio section sanitization — single source of truth.\n *\n * Site-architecture entries arrive from generation with raw CLIENT-site paths\n * (often title === path, e.g. \"/wheels/amp-tires\"). Those strings must never\n * cross a server→client props boundary: Googlebot extracts URL-like strings\n * from the RSC flight payload and crawls them against the AGENCY site's\n * origin, flooding Search Console with 404s (seen on upforge.io, June 2026 —\n * ~100 404'd client paths, all traced to /work/* case-study payloads).\n *\n * The enforcement point is `getPortfolioItem` (portfolio/server.ts) — the\n * last hop that is guaranteed server-side no matter how the build behaves.\n * PortfolioPage is a genuine RSC since 0.4.0 (and `pnpm verify` enforces\n * that), but rendered section data still crosses the client boundary as\n * props, and any future bundling regression would leak the whole item again.\n * Sanitize at the fetch, always. The PortfolioPage call is defense-in-depth.\n */\n\ninterface ArchPageEntry {\n  path?: string;\n  title?: string;\n}\n\n/** Convert a raw path/title entry into a display-only { title } label. */\nexport function humanizeArchPageEntry(page: ArchPageEntry): { title: string } {\n  const title = (page?.title || '').trim();\n  if (title && !title.startsWith('/')) return { title };\n  const source = title || (page?.path || '').trim();\n  const lastSegment = source.split(/[?#]/)[0].split('/').filter(Boolean).pop() || '';\n  const label = lastSegment\n    .replace(/\\.(html?|php|aspx?)$/i, '')\n    .replace(/[-_]+/g, ' ')\n    .trim()\n    .replace(/\\b\\w/g, (c) => c.toUpperCase());\n  return { title: label || 'Home' };\n}\n\n/** Strip raw page paths from a portfolioSiteArchitecture data payload. */\nexport function sanitizeSiteArchitectureData(data: any): any {\n  if (!data || !Array.isArray(data.groups)) return data;\n  return {\n    ...data,\n    groups: data.groups.map((group: any) => ({\n      ...group,\n      pages: Array.isArray(group.pages) ? group.pages.map(humanizeArchPageEntry) : [],\n    })),\n  };\n}\n\n/** Sanitize every section that can carry raw client-site paths. */\nexport function sanitizePortfolioSections<T extends { sectionType?: string; data?: any }>(\n  sections: T[],\n): T[] {\n  return sections.map((section) =>\n    section?.sectionType === 'portfolioSiteArchitecture'\n      ? { ...section, data: sanitizeSiteArchitectureData(section.data) }\n      : section,\n  );\n}\n","/**\n * @sonordev/agency-site-kit — Portfolio server-side data fetching\n *\n * RSC (React Server Component) data layer for portfolio pages.\n * All functions are async and designed for use in Next.js App Router\n * server components, generateMetadata(), and generateStaticParams().\n *\n * This file is server-only — no 'use client' directive.\n */\n\nimport { apiFetch } from '../shared/api';\nimport { PORTFOLIO_CACHE_TAG } from '../shared/cache';\nimport { PORTFOLIO_PREVIEW_COOKIE } from '../shared/preview';\nimport { sanitizePortfolioSections } from './sanitize';\nimport type {\n  BrandConfig,\n  MetricsDelta,\n  PortfolioConfigResponse,\n  PortfolioItemFull,\n  PortfolioListResponse,\n  PortfolioSeoData,\n  PortfolioSection,\n} from '../types';\n\nconst LOG_PREFIX = '[@sonordev/agency-site-kit/portfolio]';\n\n// Re-export so consumers and route handlers can reference the same tag.\nexport { PORTFOLIO_CACHE_TAG } from '../shared/cache';\n\n/**\n * Error contract (single source of truth for portfolio content fetching):\n *\n * - \"Not found\" is a DATA answer: the API returns 200 with `found: false`,\n *   and `getPortfolioItem` returns null. Consumers map null → notFound().\n * - Infrastructure failure (network error, 5xx, rate-limit exhaustion,\n *   missing SONOR_API_KEY) THROWS PortfolioApiError. It must never be\n *   conflated with \"not found\": treating an outage as a 404 turns indexed\n *   /work URLs into real 404s during ISR regeneration (the GSC 404-flood\n *   class of incident). A thrown error makes Next.js keep serving the last\n *   good page during background revalidation, and fails builds loudly\n *   instead of silently generating an empty portfolio.\n *\n * The one exception is getPortfolioBrandConfig, which degrades to default\n * branding on failure — cosmetic fallback is safe; content fallback is not.\n */\nexport class PortfolioApiError extends Error {\n  readonly path: string;\n\n  constructor(path: string, message?: string) {\n    super(\n      message ??\n        `${LOG_PREFIX} Portfolio API request failed: ${path}. ` +\n          'This is an infrastructure/config failure (network, 5xx, or missing ' +\n          'SONOR_API_KEY), not a missing item — failing loudly so it cannot be ' +\n          'mistaken for a 404 or an empty portfolio.',\n    );\n    this.name = 'PortfolioApiError';\n    this.path = path;\n  }\n}\n\n/**\n * A 200 response whose body violates the expected shape. Thrown before any\n * mapping so drift between the API and this package surfaces as a loud,\n * named error instead of `undefined` text on live pages.\n */\nexport class PortfolioContractError extends PortfolioApiError {\n  readonly field: string;\n\n  constructor(path: string, field: string, detail: string) {\n    super(\n      path,\n      `${LOG_PREFIX} Portfolio API contract violation at \"${field}\" (${path}): ${detail}. ` +\n        'Refusing to render partial or corrupt data.',\n    );\n    this.name = 'PortfolioContractError';\n    this.field = field;\n  }\n}\n\n/**\n * Minimal runtime shape check for the single-item response. Deliberately\n * lenient about unknown extra fields (the API may grow) and strict about\n * the fields this package renders from.\n */\nexport function assertPortfolioItemShape(\n  item: unknown,\n  path: string,\n): asserts item is PortfolioItemApiResponse['item'] {\n  const fail = (field: string, detail: string): never => {\n    throw new PortfolioContractError(path, field, detail);\n  };\n\n  if (typeof item !== 'object' || item === null) fail('item', 'not an object');\n  const record = item as Record<string, unknown>;\n\n  for (const field of ['id', 'slug', 'title'] as const) {\n    const v = record[field];\n    if (typeof v !== 'string' || v.length === 0) {\n      fail(field, `expected a non-empty string, got ${JSON.stringify(v)}`);\n    }\n  }\n\n  for (const field of ['sections', 'services', 'kpis', 'metricsDelta'] as const) {\n    const v = record[field];\n    if (v != null && !Array.isArray(v)) {\n      fail(field, `expected an array when present, got ${typeof v}`);\n    }\n  }\n\n  const sections = (record.sections ?? []) as unknown[];\n  sections.forEach((section, i) => {\n    if (typeof section !== 'object' || section === null) {\n      fail(`sections[${i}]`, 'not an object');\n    }\n    const s = section as Record<string, unknown>;\n    if (typeof s.sectionType !== 'string' || s.sectionType.length === 0) {\n      fail(`sections[${i}].sectionType`, 'expected a non-empty string');\n    }\n    if (typeof s.data !== 'object' || s.data === null) {\n      fail(`sections[${i}].data`, 'expected an object');\n    }\n  });\n}\n\n/**\n * GET against the public portfolio API with the shared portfolio cache tag,\n * so the Portal's revalidation webhook can invalidate every portfolio fetch\n * (list, detail, categories, config, sitemap data) via one revalidateTag.\n *\n * Retries transient failures (429/502/503 + network) up to 3 attempts, then\n * throws PortfolioApiError per the error contract above. All portfolio\n * endpoints answer \"unknown slug\" with 200 + `found: false`, so a null from\n * the fetcher can only mean infrastructure failure.\n */\nasync function portfolioGet<T>(\n  path: string,\n  opts: { revalidate?: number } = {},\n): Promise<T> {\n  const data = await apiFetch<T>(path, {\n    method: 'GET',\n    tags: [PORTFOLIO_CACHE_TAG],\n    retry: true,\n    maxAttempts: 3,\n    requireKey: true,\n    ...(opts.revalidate !== undefined ? { revalidate: opts.revalidate } : {}),\n  });\n\n  if (data === null) throw new PortfolioApiError(path);\n  return data;\n}\n\n/**\n * Draft preview: when Next draft mode is active AND the preview cookie is\n * set (both done by createPortfolioPreviewHandler), returns the raw token\n * so getPortfolioItem can fetch the unpublished item uncached. Fails soft —\n * outside a request scope (build, tests) this is simply not a draft.\n */\nasync function getDraftPreviewToken(): Promise<string | null> {\n  try {\n    const { draftMode, cookies } = await import('next/headers');\n    const dm = await draftMode();\n    if (!dm.isEnabled) return null;\n    const jar = await cookies();\n    return jar.get(PORTFOLIO_PREVIEW_COOKIE)?.value ?? null;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Builds a query string from an object, omitting undefined/null values.\n */\nfunction buildQuery(params: Record<string, string | number | boolean | undefined | null>): string {\n  const entries = Object.entries(params).filter(\n    (entry): entry is [string, string | number | boolean] => entry[1] != null,\n  );\n  if (entries.length === 0) return '';\n  const qs = new URLSearchParams(\n    entries.map(([k, v]) => [k, String(v)]),\n  ).toString();\n  return `?${qs}`;\n}\n\n// ---------------------------------------------------------------------------\n// Public API — List items\n// ---------------------------------------------------------------------------\n\n/**\n * Fetches published portfolio items from the public API.\n * Cached via Next.js ISR (revalidate: 3600).\n *\n * An empty portfolio is `{ items: [] }` from a healthy API. Infrastructure\n * failure throws PortfolioApiError (see the error contract above) — it never\n * silently renders an empty portfolio or an empty sitemap.\n */\nexport async function getPortfolioItems(options?: {\n  category?: string;\n  featured?: boolean;\n  limit?: number;\n  offset?: number;\n}): Promise<PortfolioListResponse> {\n  const query = buildQuery({\n    category: options?.category,\n    featured: options?.featured,\n    limit: options?.limit,\n    offset: options?.offset,\n  });\n\n  return portfolioGet<PortfolioListResponse>(\n    `/api/public/portfolio/items${query}`,\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Public API — Single item\n// ---------------------------------------------------------------------------\n\n/** Shape returned by the single-item API endpoint. */\ninterface PortfolioItemApiResponse {\n  found: boolean;\n  item: {\n    id: string;\n    slug: string;\n    title: string;\n    subtitle: string;\n    category: string;\n    services: string[];\n    description: string;\n    hero_image: string;\n    hero_image_alt: string;\n    live_url: string | null;\n    project_id: string | null;\n    kpis: PortfolioItemFull['kpis'];\n    details: PortfolioItemFull['details'];\n    seo: PortfolioItemFull['seo'];\n    featured: boolean;\n    order?: number;\n    published_at: string | null;\n    hero_screenshots: PortfolioItemFull['hero_screenshots'];\n    baseline_metrics: PortfolioItemFull['baseline_metrics'];\n    current_metrics: PortfolioItemFull['current_metrics'];\n    metrics_last_refreshed_at: string | null;\n    sections: PortfolioSection[];\n    metricsDelta: MetricsDelta[];\n    sectionsOrdered?: boolean;\n  };\n}\n\n/**\n * Fetches a single portfolio item by slug, including full Sanity sections\n * and live metrics delta. This is the main data function for portfolio detail pages.\n *\n * Returns null ONLY when the item genuinely does not exist (API answered\n * `found: false`) — safe to map to notFound(). Infrastructure failures throw\n * PortfolioApiError instead, so an API outage during ISR regeneration keeps\n * serving the last good page rather than minting a real 404.\n */\nexport async function getPortfolioItem(slug: string): Promise<PortfolioItemFull | null> {\n  if (!slug) {\n    console.warn(`${LOG_PREFIX} getPortfolioItem called with empty slug.`);\n    return null;\n  }\n\n  // Draft preview (dashboard Preview button): fetch with the token, uncached.\n  const previewToken = await getDraftPreviewToken();\n  const path = previewToken\n    ? `/api/public/portfolio/items/${encodeURIComponent(slug)}?preview=${encodeURIComponent(previewToken)}`\n    : `/api/public/portfolio/items/${encodeURIComponent(slug)}`;\n\n  const data = await portfolioGet<PortfolioItemApiResponse>(\n    path,\n    previewToken ? { revalidate: 0 } : {},\n  );\n\n  if (!data.found || !data.item) {\n    console.warn(`${LOG_PREFIX} Portfolio item not found for slug: \"${slug}\".`);\n    return null;\n  }\n\n  // Contract guard — a malformed 200 must not reach the renderer.\n  assertPortfolioItemShape(data.item, `/api/public/portfolio/items/${slug}`);\n\n  // Map the API response to the PortfolioItemFull type\n  const { item } = data;\n  return {\n    id: item.id,\n    slug: item.slug,\n    title: item.title,\n    subtitle: item.subtitle,\n    category: item.category,\n    services: item.services,\n    description: item.description,\n    hero_image: item.hero_image,\n    hero_image_alt: item.hero_image_alt,\n    live_url: item.live_url,\n    project_id: item.project_id ?? null,\n    kpis: item.kpis,\n    details: item.details,\n    seo: item.seo,\n    featured: item.featured,\n    order: item.order,\n    published_at: item.published_at,\n    hero_screenshots: item.hero_screenshots,\n    baseline_metrics: item.baseline_metrics,\n    current_metrics: item.current_metrics,\n    metrics_last_refreshed_at: item.metrics_last_refreshed_at,\n    // Sanitized HERE — the enforcing layer. Even with PortfolioPage as a\n    // genuine RSC, each rendered section's data still crosses the client\n    // boundary into the flight payload, and any future bundling regression\n    // would leak the whole item again (the 0.3.1 GSC 404-flood vector).\n    // Sanitize at the last server-side hop, always.\n    sections: sanitizePortfolioSections(item.sections ?? []),\n    metricsDelta: item.metricsDelta ?? [],\n    sectionsOrdered: item.sectionsOrdered ?? false,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Public API — Categories\n// ---------------------------------------------------------------------------\n\n/**\n * Fetches available portfolio categories.\n * Infrastructure failure throws PortfolioApiError (see error contract).\n */\nexport async function getPortfolioCategories(): Promise<string[]> {\n  return portfolioGet<string[]>('/api/public/portfolio/categories');\n}\n\n// ---------------------------------------------------------------------------\n// Public API — Brand config\n// ---------------------------------------------------------------------------\n\n/**\n * Fetches brand configuration for the agency (colors, fonts, logo).\n * Returns sensible defaults when the API call fails — the ONE deliberate\n * exception to the throw-on-failure contract: brand config is cosmetic, and\n * an API blip must not take down the whole layout that wraps every page.\n */\nexport async function getPortfolioBrandConfig(): Promise<BrandConfig> {\n  const fallback: BrandConfig = {\n    primary: '#6366f1',\n    secondary: '#8b5cf6',\n    background: '#0a0a0f',\n    backgroundElevated: '#12121a',\n    surface: '#1a1a2e',\n    surfaceHover: '#22223a',\n    surfaceBorder: '#2a2a3e',\n    textPrimary: '#f0f0f5',\n    textSecondary: '#a0a0b5',\n    textTertiary: '#6b6b80',\n    fontHeading: 'Inter, system-ui, sans-serif',\n    fontBody: 'Inter, system-ui, sans-serif',\n  };\n\n  try {\n    const data = await portfolioGet<PortfolioConfigResponse>(\n      '/api/public/portfolio/config',\n    );\n    if (!data.brand) {\n      console.warn(`${LOG_PREFIX} Brand config response empty, using defaults.`);\n      return fallback;\n    }\n    return data.brand;\n  } catch {\n    console.warn(`${LOG_PREFIX} Failed to fetch brand config, using defaults.`);\n    return fallback;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Next.js Metadata helper\n// ---------------------------------------------------------------------------\n\n/**\n * Generates Next.js Metadata for a portfolio item page.\n * For use in generateMetadata() in the App Router.\n *\n * Returns an empty object when the item does not exist (safe to spread into\n * the metadata return value); infrastructure failures throw so a build never\n * silently ships pages with missing metadata.\n */\nexport async function generatePortfolioMetadata(slug: string): Promise<{\n  title?: string;\n  description?: string;\n  keywords?: string[];\n  openGraph?: {\n    title?: string;\n    description?: string;\n    images?: string[];\n    type?: string;\n  };\n}> {\n  const item = await getPortfolioItem(slug);\n\n  if (!item) {\n    return {};\n  }\n\n  // Prefer dedicated SEO data if available, fall back to item fields\n  const seo: PortfolioSeoData | null = item.seo;\n  const title = seo?.metaTitle || item.title;\n  const description = seo?.metaDescription || item.description;\n  const keywords = seo?.keywords ?? [];\n\n  // Collect OG images: prefer SEO og image, then hero image\n  const ogImages: string[] = [];\n  if (item.hero_image) {\n    ogImages.push(item.hero_image);\n  }\n\n  return {\n    title,\n    description,\n    keywords: keywords.length > 0 ? keywords : undefined,\n    openGraph: {\n      title,\n      description,\n      images: ogImages.length > 0 ? ogImages : undefined,\n      type: 'article',\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Next.js Static Params helper\n// ---------------------------------------------------------------------------\n\n/**\n * Generates static params for portfolio pages.\n * For use in generateStaticParams() in the App Router.\n *\n * Fetches all published portfolio items and returns their slugs.\n * Infrastructure failure throws, failing the build loudly instead of\n * silently building a site with zero portfolio pages.\n */\nexport async function generatePortfolioStaticParams(): Promise<Array<{ slug: string }>> {\n  // Fetch a large batch to cover all published items\n  const data = await getPortfolioItems({ limit: 500, offset: 0 });\n\n  return data.items.map((item) => ({ slug: item.slug }));\n}\n\n// ---------------------------------------------------------------------------\n// Category helpers (route-based, crawlable filtering)\n// ---------------------------------------------------------------------------\n\n/**\n * URL slug for a category display value (\"Web Development\" → \"web-development\").\n * Single source of truth for category URLs — PortfolioIndex resolves slugs\n * back to the original values by matching against getPortfolioCategories().\n */\nexport function slugifyCategory(category: string): string {\n  return category\n    .toLowerCase()\n    .trim()\n    .replace(/[^a-z0-9]+/g, '-')\n    .replace(/^-+|-+$/g, '');\n}\n\n/**\n * Static params for the category filter routes.\n * For use in app/work/category/[category]/page.tsx:\n *\n * ```ts\n * export async function generateStaticParams() {\n *   return generatePortfolioCategoryStaticParams();\n * }\n * ```\n */\nexport async function generatePortfolioCategoryStaticParams(): Promise<\n  Array<{ category: string }>\n> {\n  const categories = await getPortfolioCategories();\n  return categories.map((c) => ({ category: slugifyCategory(c) }));\n}\n\n/**\n * Metadata for index + category + paginated portfolio routes: a stable\n * title/canonical so filtered and paginated variants don't compete in\n * search. Spread into generateMetadata()'s return value.\n */\nexport async function generatePortfolioIndexMetadata(options: {\n  /** Site origin (e.g. \"https://youragency.com\"). */\n  baseUrl: string;\n  /** Route prefix. Defaults to \"/work\". */\n  basePath?: string;\n  /** Active category SLUG (from the route param), if any. */\n  category?: string | null;\n  /** 1-based page number. */\n  page?: number;\n  /** Title base, e.g. \"Our Work\". Category/page qualifiers are appended. */\n  titleBase?: string;\n}): Promise<{ title: string; alternates: { canonical: string } }> {\n  const {\n    baseUrl,\n    basePath = '/work',\n    category = null,\n    page = 1,\n    titleBase = 'Our Work',\n  } = options;\n\n  const origin = baseUrl.replace(/\\/+$/, '');\n  const prefix = basePath.startsWith('/') ? basePath : `/${basePath}`;\n\n  let title = titleBase;\n  let path = prefix;\n\n  if (category) {\n    const categories = await getPortfolioCategories();\n    const match = categories.find((c) => slugifyCategory(c) === category);\n    if (match) title = `${match} | ${titleBase}`;\n    path = `${prefix}/category/${category}`;\n  }\n  if (page > 1) {\n    title = `${title} — Page ${page}`;\n    path = `${path}?page=${page}`;\n  }\n\n  return { title, alternates: { canonical: `${origin}${path}` } };\n}\n\n// ---------------------------------------------------------------------------\n// Next.js Sitemap helper\n// ---------------------------------------------------------------------------\n\n/** One entry in the shape Next.js expects from app/sitemap.(js|ts). */\nexport interface PortfolioSitemapEntry {\n  url: string;\n  lastModified?: string;\n  changeFrequency?: 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never';\n  priority?: number;\n}\n\n/**\n * Builds sitemap entries for every published portfolio item, in the shape\n * Next.js `app/sitemap.(js|ts)` expects — spread the result into the array\n * you return:\n *\n * ```ts\n * const portfolio = await generatePortfolioSitemapEntries({\n *   baseUrl: 'https://youragency.com',\n * });\n * return [...staticEntries, ...portfolio];\n * ```\n *\n * `lastModified` prefers the metrics refresh timestamp (case studies change\n * when their live metrics update) and falls back to the publish date.\n * Infrastructure failure throws — a sitemap silently missing every case\n * study is how portfolio URLs fall out of the index.\n */\nexport async function generatePortfolioSitemapEntries(options: {\n  /** Site origin, no trailing slash needed (e.g. \"https://youragency.com\"). */\n  baseUrl: string;\n  /** Route prefix for case studies. Defaults to \"/work\". */\n  basePath?: string;\n  changeFrequency?: PortfolioSitemapEntry['changeFrequency'];\n  priority?: number;\n}): Promise<PortfolioSitemapEntry[]> {\n  const {\n    baseUrl,\n    basePath = '/work',\n    changeFrequency = 'monthly',\n    priority = 0.7,\n  } = options;\n\n  const origin = baseUrl.replace(/\\/+$/, '');\n  const prefix = basePath.startsWith('/') ? basePath : `/${basePath}`;\n\n  const data = await getPortfolioItems({ limit: 500, offset: 0 });\n\n  return data.items.map((item) => {\n    const lastModified =\n      item.metrics_last_refreshed_at || item.published_at || undefined;\n    return {\n      url: `${origin}${prefix}/${item.slug}`,\n      ...(lastModified ? { lastModified } : {}),\n      changeFrequency,\n      priority,\n    };\n  });\n}\n"]}

package/dist/chunk-L4EOQVRJ.js

@@ -0,0 +1,6 @@
+// src/shared/preview.ts
+var PORTFOLIO_PREVIEW_COOKIE = "__sonor_portfolio_preview";
+
+export { PORTFOLIO_PREVIEW_COOKIE };
+//# sourceMappingURL=chunk-L4EOQVRJ.js.map
+//# sourceMappingURL=chunk-L4EOQVRJ.js.map

package/dist/chunk-L4EOQVRJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/preview.ts"],"names":[],"mappings":";AAIO,IAAM,wBAAA,GAA2B","file":"chunk-L4EOQVRJ.js","sourcesContent":["/**\n * Draft-preview constants shared by the preview route handler (sets the\n * cookie) and the portfolio data layer (reads it). One name, one place.\n */\nexport const PORTFOLIO_PREVIEW_COOKIE = '__sonor_portfolio_preview';\n"]}

package/dist/chunk-NI4FVCLS.cjs

@@ -0,0 +1,32 @@
+'use strict';
+
+// src/shared/images.ts
+var SANITY_ASSET_REF = /^image-[A-Za-z0-9]+-\d+x\d+-[a-z0-9]+$/;
+var FILENAME_DIMS = /-(\d{2,5})x(\d{2,5})\.[a-z0-9]+(?:\?.*)?$/i;
+var warnedAboutRefs = false;
+function resolvePortfolioImage(input) {
+  const raw = typeof input === "string" ? input : input?.asset?._ref ?? "";
+  const value = (raw || "").trim();
+  if (!value) return null;
+  if (SANITY_ASSET_REF.test(value)) {
+    if (!warnedAboutRefs && typeof console !== "undefined") {
+      warnedAboutRefs = true;
+      console.warn(
+        "[@sonordev/agency-site-kit] Received a raw Sanity asset ref instead of an image URL \u2014 skipping render. The Sonor API should resolve image refs to cdn.sanity.io URLs before returning portfolio sections."
+      );
+    }
+    return null;
+  }
+  if (!/^https?:\/\//i.test(value) && !value.startsWith("/")) return null;
+  const dims = value.match(FILENAME_DIMS);
+  if (dims) {
+    const width = parseInt(dims[1], 10);
+    const height = parseInt(dims[2], 10);
+    if (width > 0 && height > 0) return { url: value, width, height };
+  }
+  return { url: value };
+}
+
+exports.resolvePortfolioImage = resolvePortfolioImage;
+//# sourceMappingURL=chunk-NI4FVCLS.cjs.map
+//# sourceMappingURL=chunk-NI4FVCLS.cjs.map

package/dist/chunk-NI4FVCLS.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/images.ts"],"names":[],"mappings":";;;AAsBA,IAAM,gBAAA,GAAmB,wCAAA;AAGzB,IAAM,aAAA,GAAgB,4CAAA;AAMtB,IAAI,eAAA,GAAkB,KAAA;AAOf,SAAS,sBACd,KAAA,EAC+B;AAC/B,EAAA,MAAM,MACJ,OAAO,KAAA,KAAU,WAAW,KAAA,GAAQ,KAAA,EAAO,OAAO,IAAA,IAAQ,EAAA;AAC5D,EAAA,MAAM,KAAA,GAAA,CAAS,GAAA,IAAO,EAAA,EAAI,IAAA,EAAK;AAC/B,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,EAAA,IAAI,gBAAA,CAAiB,IAAA,CAAK,KAAK,CAAA,EAAG;AAChC,IAAA,IAAI,CAAC,eAAA,IAAmB,OAAO,OAAA,KAAY,WAAA,EAAa;AACtD,MAAA,eAAA,GAAkB,IAAA;AAClB,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OAGF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,KAAK,CAAA,IAAK,CAAC,KAAA,CAAM,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AAEnE,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,aAAa,CAAA;AACtC,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,CAAC,GAAG,EAAE,CAAA;AAClC,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,CAAC,GAAG,EAAE,CAAA;AACnC,IAAA,IAAI,KAAA,GAAQ,KAAK,MAAA,GAAS,CAAA,SAAU,EAAE,GAAA,EAAK,KAAA,EAAO,KAAA,EAAO,MAAA,EAAO;AAAA,EAClE;AAEA,EAAA,OAAO,EAAE,KAAK,KAAA,EAAM;AACtB","file":"chunk-NI4FVCLS.cjs","sourcesContent":["/**\n * Portfolio image resolution — single source of truth for turning the mixed\n * image shapes the API sends (plain URL strings, Supabase Storage URLs,\n * Sanity image objects) into something safe to render.\n *\n * IMPORTANT: a raw Sanity asset _ref (`image-{id}-{W}x{H}-{fmt}`) is an asset\n * ID, NOT a URL. Rendering it as `src` issues a garbage relative request\n * against the agency site's origin. Resolving refs to cdn.sanity.io URLs is\n * the API's job (it owns the Sanity project config); this helper refuses refs\n * so a broken image can never render, and warns once so the gap is visible.\n *\n * When a URL carries `-{W}x{H}.{ext}` dimensions (Sanity CDN URLs always do),\n * they're parsed out so callers can give next/image exact intrinsic sizes.\n */\n\nexport interface ResolvedPortfolioImage {\n  url: string;\n  width?: number;\n  height?: number;\n}\n\n/** Raw Sanity asset reference — an ID, not a URL. */\nconst SANITY_ASSET_REF = /^image-[A-Za-z0-9]+-\\d+x\\d+-[a-z0-9]+$/;\n\n/** `…-1200x800.png` (optionally with a query string) → intrinsic dimensions. */\nconst FILENAME_DIMS = /-(\\d{2,5})x(\\d{2,5})\\.[a-z0-9]+(?:\\?.*)?$/i;\n\ninterface SanityImageLike {\n  asset?: { _ref?: string };\n}\n\nlet warnedAboutRefs = false;\n\n/**\n * Resolve a portfolio image input into a renderable URL (+ intrinsic\n * dimensions when they can be derived). Returns null for empty values and\n * for unresolved Sanity refs — callers skip rendering in that case.\n */\nexport function resolvePortfolioImage(\n  input: string | SanityImageLike | null | undefined,\n): ResolvedPortfolioImage | null {\n  const raw =\n    typeof input === 'string' ? input : input?.asset?._ref ?? '';\n  const value = (raw || '').trim();\n  if (!value) return null;\n\n  if (SANITY_ASSET_REF.test(value)) {\n    if (!warnedAboutRefs && typeof console !== 'undefined') {\n      warnedAboutRefs = true;\n      console.warn(\n        '[@sonordev/agency-site-kit] Received a raw Sanity asset ref instead of an ' +\n          'image URL — skipping render. The Sonor API should resolve image refs to ' +\n          'cdn.sanity.io URLs before returning portfolio sections.',\n      );\n    }\n    return null;\n  }\n\n  // Only absolute http(s) URLs or site-rooted paths are renderable.\n  if (!/^https?:\\/\\//i.test(value) && !value.startsWith('/')) return null;\n\n  const dims = value.match(FILENAME_DIMS);\n  if (dims) {\n    const width = parseInt(dims[1], 10);\n    const height = parseInt(dims[2], 10);\n    if (width > 0 && height > 0) return { url: value, width, height };\n  }\n\n  return { url: value };\n}\n"]}