@sonordev/site-kit 3.0.5 → 3.2.1

package/dist/chunk-WZHWWOUC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sites/contract.ts"],"names":[],"mappings":";;;AAgBO,IAAM,0BAAA,GAA6B;AAanC,SAAS,kBAAkB,IAAA,EAAqC;AACrE,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,UAAU,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAChC,EAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AAEf,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA;AAEhC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAEpC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AACpC,EAAA,OAAO,CAAA,IAAK,IAAA;AACd;AAGO,SAAS,SAAS,IAAA,EAAsB;AAC7C,EAAA,OAAO,KAAK,UAAA,CAAW,MAAM,IAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACnD;AAOO,SAAS,QAAA,CAAS,GAA8B,CAAA,EAAuC;AAC5F,EAAA,IAAI,CAAC,CAAA,IAAK,CAAC,CAAA,EAAG,OAAO,KAAA;AACrB,EAAA,OAAO,QAAA,CAAS,CAAC,CAAA,KAAM,QAAA,CAAS,CAAC,CAAA;AACnC;AAMO,SAAS,YAAY,KAAA,EAAiD;AAC3E,EAAA,IAAI,CAAC,KAAA,IAAU,CAAC,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA,IAAK,CAAC,KAAA,CAAM,UAAA,CAAW,UAAU,CAAA,EAAI,OAAO,IAAA;AACtF,EAAA,IAAI;AACF,IAAA,OAAO,iBAAA,CAAkB,IAAI,GAAA,CAAI,KAAK,EAAE,IAAI,CAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,SAAS,qBAAqB,KAAA,EAAiC;AACpE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,CAAA,IAAK,iBAAA,CAAkB,KAAK,CAAA,KAAM,KAAA;AACvF;AAMO,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,yCAAA;AAAA,EACT,GAAA,EAAK,4CAAA;AAAA,EACL,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EACE,yJAAA;AAAA,EACF,IAAA,EAAM,CAAC,QAAA,EAAU,MAAM,CAAA;AAAA,EACvB,OAAA,EAAS;AACX","file":"chunk-WZHWWOUC.js","sourcesContent":["/**\n * @sonordev/site-kit/sites/contract — Multi-site \"site\" dimension host contract (v1)\n *\n * Single source of truth for normalizing and comparing sub-site host values\n * (the multi-site `site` dimension, see CLAUDE.md). Same pattern as\n * `@sonordev/site-kit/llms/contract` and `@sonordev/site-kit/slots/contract`:\n * site-kit owns the canonical logic; the Nest APIs keep byte-identical inline\n * mirrors (sonor-api `src/common/utils/site-host.ts`, signal-api\n * `src/shared/utils/seo-page-pick.util.ts`) guarded by the shared drift-test\n * vectors in `contract.test.ts` — so a divergent copy fails CI on either side.\n *\n * Pure string logic only (no Node built-ins) so it is safe in the browser:\n * site-kit itself normalizes `__SITE_KIT_SITE__` with `normalizeSiteHost`.\n */\n\n/** Bump on breaking changes to the normalized host shape. */\nexport const SITE_HOST_CONTRACT_VERSION = 1 as const\n\n/**\n * normalizeSiteHost — canonical normalizer for a sub-site host value before it\n * is persisted or used as a filter.\n *\n *   `https://OhioPowerStudies.com:3000/path` → `ohiopowerstudies.com`\n *\n * Lowercases, strips protocol, keeps host only (drops path + query), strips\n * port (rollups span dev/prod). Returns null for empty/non-string input.\n * Note: `www.` is intentionally preserved here — use `sameSite`/`stripWww`\n * for www-insensitive equality.\n */\nexport function normalizeSiteHost(site?: string | null): string | null {\n  if (!site || typeof site !== 'string') return null\n  let s = site.trim().toLowerCase()\n  if (!s) return null\n  // Strip protocol if present\n  s = s.replace(/^https?:\\/\\//, '')\n  // Keep host only — drop everything from first slash onward\n  const slash = s.indexOf('/')\n  if (slash >= 0) s = s.slice(0, slash)\n  // Strip port (rollups span dev/prod)\n  const colon = s.indexOf(':')\n  if (colon >= 0) s = s.slice(0, colon)\n  return s || null\n}\n\n/** Strip a leading `www.` from a host (\"www.tps.com\" → \"tps.com\"). */\nexport function stripWww(host: string): string {\n  return host.startsWith('www.') ? host.slice(4) : host\n}\n\n/**\n * www-insensitive sub-site host equality — `www.a.com` and `a.com` are the\n * same site. Operands are expected already-normalized (lowercase host);\n * returns false if either side is missing.\n */\nexport function sameSite(a: string | null | undefined, b: string | null | undefined): boolean {\n  if (!a || !b) return false\n  return stripWww(a) === stripWww(b)\n}\n\n/**\n * Host of a full URL (\"https://ohiopowerstudies.com/x\" → \"ohiopowerstudies.com\"),\n * null for site-relative paths (\"/services\") and unparseable input.\n */\nexport function hostFromUrl(value: string | null | undefined): string | null {\n  if (!value || (!value.startsWith('http://') && !value.startsWith('https://'))) return null\n  try {\n    return normalizeSiteHost(new URL(value).host)\n  } catch {\n    return null\n  }\n}\n\n/** True when `value` is a non-empty normalized host (lowercase, no protocol/path/port). */\nexport function isNormalizedSiteHost(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0 && normalizeSiteHost(value) === value\n}\n\n/**\n * Agent-native contract: JSON Schema for a normalized `site` value, so services\n * and agents can validate the dimension mechanically without importing the code.\n */\nexport const SITE_HOST_JSON_SCHEMA = {\n  $schema: 'http://json-schema.org/draft-07/schema#',\n  $id: 'https://sonor.io/schemas/site-host.v1.json',\n  title: 'NormalizedSiteHost',\n  description:\n    'A normalized sub-site host (the multi-site `site` dimension): lowercase, no protocol, no path, no port. null denotes a project-wide (unattributed) row.',\n  type: ['string', 'null'],\n  pattern: '^[a-z0-9.-]+$',\n} as const\n"]}

package/dist/chunk-X3S6KXAP.mjs

@@ -0,0 +1,47 @@
+// src/forms/contract.ts
+var FORMS_HONEYPOT_CONTRACT_VERSION = 1;
+var DEFAULT_HONEYPOT_FIELD = "_sk_hp_url";
+var GENERIC_HONEYPOT_FIELDS = Object.freeze([
+  DEFAULT_HONEYPOT_FIELD,
+  "website",
+  "_hp_field",
+  "bot-field",
+  "bot_field"
+]);
+function resolveHoneypotFieldNames(opts) {
+  const names = /* @__PURE__ */ new Set();
+  if (!opts.enabled) return names;
+  const real = new Set(opts.realFieldSlugs ?? []);
+  for (const generic of GENERIC_HONEYPOT_FIELDS) {
+    if (!real.has(generic)) names.add(generic);
+  }
+  if (opts.formHoneypotField) names.add(opts.formHoneypotField);
+  return names;
+}
+function isHoneypotTriggered(data, fieldNames) {
+  for (const fieldName of fieldNames) {
+    const value = data?.[fieldName];
+    if (value == null) continue;
+    if (typeof value !== "string" || value.trim() !== "") return true;
+  }
+  return false;
+}
+var HONEYPOT_CONFIG_JSON_SCHEMA = {
+  $schema: "http://json-schema.org/draft-07/schema#",
+  $id: "https://sonor.io/schemas/honeypot-config.v1.json",
+  title: "HoneypotConfig",
+  description: "The honeypot slice of a public managed-form config.",
+  type: "object",
+  properties: {
+    honeypot_enabled: { type: "boolean" },
+    honeypot_field: {
+      description: `Trap field name; defaults to "${DEFAULT_HONEYPOT_FIELD}" when unset.`,
+      type: "string"
+    }
+  },
+  additionalProperties: true
+};
+
+export { DEFAULT_HONEYPOT_FIELD, FORMS_HONEYPOT_CONTRACT_VERSION, GENERIC_HONEYPOT_FIELDS, HONEYPOT_CONFIG_JSON_SCHEMA, isHoneypotTriggered, resolveHoneypotFieldNames };
+//# sourceMappingURL=chunk-X3S6KXAP.mjs.map
+//# sourceMappingURL=chunk-X3S6KXAP.mjs.map

package/dist/chunk-X3S6KXAP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/contract.ts"],"names":[],"mappings":";AAkBO,IAAM,+BAAA,GAAkC;AAOxC,IAAM,sBAAA,GAAyB;AAO/B,IAAM,uBAAA,GAA6C,OAAO,MAAA,CAAO;AAAA,EACtE,sBAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,0BAA0B,IAAA,EAI1B;AACd,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,IAAI,CAAC,IAAA,CAAK,OAAA,EAAS,OAAO,KAAA;AAC1B,EAAA,MAAM,OAAO,IAAI,GAAA,CAAI,IAAA,CAAK,cAAA,IAAkB,EAAE,CAAA;AAC9C,EAAA,KAAA,MAAW,WAAW,uBAAA,EAAyB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,EAAG,KAAA,CAAM,IAAI,OAAO,CAAA;AAAA,EAC3C;AACA,EAAA,IAAI,IAAA,CAAK,iBAAA,EAAmB,KAAA,CAAM,GAAA,CAAI,KAAK,iBAAiB,CAAA;AAC5D,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,mBAAA,CACd,MACA,UAAA,EACS;AACT,EAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,IAAA,MAAM,KAAA,GAAQ,OAAO,SAAS,CAAA;AAC9B,IAAA,IAAI,SAAS,IAAA,EAAM;AAGnB,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,MAAM,IAAA,EAAK,KAAM,IAAI,OAAO,IAAA;AAAA,EAC/D;AACA,EAAA,OAAO,KAAA;AACT;AAMO,IAAM,2BAAA,GAA8B;AAAA,EACzC,OAAA,EAAS,yCAAA;AAAA,EACT,GAAA,EAAK,kDAAA;AAAA,EACL,KAAA,EAAO,gBAAA;AAAA,EACP,WAAA,EAAa,qDAAA;AAAA,EACb,IAAA,EAAM,QAAA;AAAA,EACN,UAAA,EAAY;AAAA,IACV,gBAAA,EAAkB,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,cAAA,EAAgB;AAAA,MACd,WAAA,EAAa,iCAAiC,sBAAsB,CAAA,aAAA,CAAA;AAAA,MACpE,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,oBAAA,EAAsB;AACxB","file":"chunk-X3S6KXAP.mjs","sourcesContent":["/**\n * @sonordev/site-kit/forms/contract — managed-form honeypot policy (v1)\n *\n * Single source of truth for the honeypot trap-field naming + server-side\n * detection policy, shared by the client (site-kit emits the trap field) and\n * the server (sonor-api names the trap in the form config it returns AND\n * detects hits on intake). Same pattern as the other site-kit contracts:\n * sonor-api keeps a byte-identical inline mirror\n * (`src/modules/forms/honeypot-contract.ts`) guarded by the shared drift-test\n * vectors in `contract.test.ts`.\n *\n * The default field name (`_sk_hp_url`) is deliberately obscure: a common name\n * like \"website\" collides with real form fields and flags genuine submissions\n * as spam, so generic names are only trusted when they DON'T match a real\n * field of the form (see `resolveHoneypotFieldNames`).\n */\n\n/** Bump on breaking changes to the honeypot policy. */\nexport const FORMS_HONEYPOT_CONTRACT_VERSION = 1 as const\n\n/**\n * Default honeypot field name emitted by site-kit and used by the server as the\n * fallback trap name when a form has no explicitly configured `honeypot_field`.\n * Deliberately obscure to avoid colliding with real form fields.\n */\nexport const DEFAULT_HONEYPOT_FIELD = '_sk_hp_url'\n\n/**\n * Generic trap names the server also watches on intake — the canonical default\n * plus legacy names still emitted by older deployed forms. Each is only trusted\n * when it doesn't collide with a real configured field of the form.\n */\nexport const GENERIC_HONEYPOT_FIELDS: readonly string[] = Object.freeze([\n  DEFAULT_HONEYPOT_FIELD,\n  'website',\n  '_hp_field',\n  'bot-field',\n  'bot_field',\n])\n\n/**\n * Build the set of field names the server treats as honeypot traps for one form.\n * Generic names that collide with a real field slug are dropped (or every real\n * lead using that field would be flagged); the form's dedicated\n * `honeypot_field` is always honored. Returns an empty set when disabled.\n */\nexport function resolveHoneypotFieldNames(opts: {\n  enabled: boolean\n  formHoneypotField?: string | null\n  realFieldSlugs?: Iterable<string>\n}): Set<string> {\n  const names = new Set<string>()\n  if (!opts.enabled) return names\n  const real = new Set(opts.realFieldSlugs ?? [])\n  for (const generic of GENERIC_HONEYPOT_FIELDS) {\n    if (!real.has(generic)) names.add(generic)\n  }\n  if (opts.formHoneypotField) names.add(opts.formHoneypotField)\n  return names\n}\n\n/**\n * True when any watched trap field carries a non-empty value — the marker of an\n * automated submission (real users never see or fill the trap).\n */\nexport function isHoneypotTriggered(\n  data: Record<string, unknown> | null | undefined,\n  fieldNames: Iterable<string>,\n): boolean {\n  for (const fieldName of fieldNames) {\n    const value = data?.[fieldName]\n    if (value == null) continue\n    // A filled trap is almost always a non-empty string; any non-string value a\n    // bot injected (number/object/bool) also counts as filled.\n    if (typeof value !== 'string' || value.trim() !== '') return true\n  }\n  return false\n}\n\n/**\n * Agent-native contract: JSON Schema for the honeypot slice of the public form\n * config, so services and agents can validate it mechanically.\n */\nexport const HONEYPOT_CONFIG_JSON_SCHEMA = {\n  $schema: 'http://json-schema.org/draft-07/schema#',\n  $id: 'https://sonor.io/schemas/honeypot-config.v1.json',\n  title: 'HoneypotConfig',\n  description: 'The honeypot slice of a public managed-form config.',\n  type: 'object',\n  properties: {\n    honeypot_enabled: { type: 'boolean' },\n    honeypot_field: {\n      description: `Trap field name; defaults to \"${DEFAULT_HONEYPOT_FIELD}\" when unset.`,\n      type: 'string',\n    },\n  },\n  additionalProperties: true,\n} as const\n"]}

package/dist/chunk-X4OPM3SK.mjs

@@ -0,0 +1,43 @@
+// src/sites/contract.ts
+var SITE_HOST_CONTRACT_VERSION = 1;
+function normalizeSiteHost(site) {
+  if (!site || typeof site !== "string") return null;
+  let s = site.trim().toLowerCase();
+  if (!s) return null;
+  s = s.replace(/^https?:\/\//, "");
+  const slash = s.indexOf("/");
+  if (slash >= 0) s = s.slice(0, slash);
+  const colon = s.indexOf(":");
+  if (colon >= 0) s = s.slice(0, colon);
+  return s || null;
+}
+function stripWww(host) {
+  return host.startsWith("www.") ? host.slice(4) : host;
+}
+function sameSite(a, b) {
+  if (!a || !b) return false;
+  return stripWww(a) === stripWww(b);
+}
+function hostFromUrl(value) {
+  if (!value || !value.startsWith("http://") && !value.startsWith("https://")) return null;
+  try {
+    return normalizeSiteHost(new URL(value).host);
+  } catch {
+    return null;
+  }
+}
+function isNormalizedSiteHost(value) {
+  return typeof value === "string" && value.length > 0 && normalizeSiteHost(value) === value;
+}
+var SITE_HOST_JSON_SCHEMA = {
+  $schema: "http://json-schema.org/draft-07/schema#",
+  $id: "https://sonor.io/schemas/site-host.v1.json",
+  title: "NormalizedSiteHost",
+  description: "A normalized sub-site host (the multi-site `site` dimension): lowercase, no protocol, no path, no port. null denotes a project-wide (unattributed) row.",
+  type: ["string", "null"],
+  pattern: "^[a-z0-9.-]+$"
+};
+
+export { SITE_HOST_CONTRACT_VERSION, SITE_HOST_JSON_SCHEMA, hostFromUrl, isNormalizedSiteHost, normalizeSiteHost, sameSite, stripWww };
+//# sourceMappingURL=chunk-X4OPM3SK.mjs.map
+//# sourceMappingURL=chunk-X4OPM3SK.mjs.map

package/dist/chunk-X4OPM3SK.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sites/contract.ts"],"names":[],"mappings":";AAgBO,IAAM,0BAAA,GAA6B;AAanC,SAAS,kBAAkB,IAAA,EAAqC;AACrE,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,UAAU,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAChC,EAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AAEf,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA;AAEhC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAEpC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AACpC,EAAA,OAAO,CAAA,IAAK,IAAA;AACd;AAGO,SAAS,SAAS,IAAA,EAAsB;AAC7C,EAAA,OAAO,KAAK,UAAA,CAAW,MAAM,IAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACnD;AAOO,SAAS,QAAA,CAAS,GAA8B,CAAA,EAAuC;AAC5F,EAAA,IAAI,CAAC,CAAA,IAAK,CAAC,CAAA,EAAG,OAAO,KAAA;AACrB,EAAA,OAAO,QAAA,CAAS,CAAC,CAAA,KAAM,QAAA,CAAS,CAAC,CAAA;AACnC;AAMO,SAAS,YAAY,KAAA,EAAiD;AAC3E,EAAA,IAAI,CAAC,KAAA,IAAU,CAAC,KAAA,CAAM,UAAA,CAAW,SAAS,CAAA,IAAK,CAAC,KAAA,CAAM,UAAA,CAAW,UAAU,CAAA,EAAI,OAAO,IAAA;AACtF,EAAA,IAAI;AACF,IAAA,OAAO,iBAAA,CAAkB,IAAI,GAAA,CAAI,KAAK,EAAE,IAAI,CAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,SAAS,qBAAqB,KAAA,EAAiC;AACpE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,CAAA,IAAK,iBAAA,CAAkB,KAAK,CAAA,KAAM,KAAA;AACvF;AAMO,IAAM,qBAAA,GAAwB;AAAA,EACnC,OAAA,EAAS,yCAAA;AAAA,EACT,GAAA,EAAK,4CAAA;AAAA,EACL,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EACE,yJAAA;AAAA,EACF,IAAA,EAAM,CAAC,QAAA,EAAU,MAAM,CAAA;AAAA,EACvB,OAAA,EAAS;AACX","file":"chunk-X4OPM3SK.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites/contract — Multi-site \"site\" dimension host contract (v1)\n *\n * Single source of truth for normalizing and comparing sub-site host values\n * (the multi-site `site` dimension, see CLAUDE.md). Same pattern as\n * `@sonordev/site-kit/llms/contract` and `@sonordev/site-kit/slots/contract`:\n * site-kit owns the canonical logic; the Nest APIs keep byte-identical inline\n * mirrors (sonor-api `src/common/utils/site-host.ts`, signal-api\n * `src/shared/utils/seo-page-pick.util.ts`) guarded by the shared drift-test\n * vectors in `contract.test.ts` — so a divergent copy fails CI on either side.\n *\n * Pure string logic only (no Node built-ins) so it is safe in the browser:\n * site-kit itself normalizes `__SITE_KIT_SITE__` with `normalizeSiteHost`.\n */\n\n/** Bump on breaking changes to the normalized host shape. */\nexport const SITE_HOST_CONTRACT_VERSION = 1 as const\n\n/**\n * normalizeSiteHost — canonical normalizer for a sub-site host value before it\n * is persisted or used as a filter.\n *\n *   `https://OhioPowerStudies.com:3000/path` → `ohiopowerstudies.com`\n *\n * Lowercases, strips protocol, keeps host only (drops path + query), strips\n * port (rollups span dev/prod). Returns null for empty/non-string input.\n * Note: `www.` is intentionally preserved here — use `sameSite`/`stripWww`\n * for www-insensitive equality.\n */\nexport function normalizeSiteHost(site?: string | null): string | null {\n  if (!site || typeof site !== 'string') return null\n  let s = site.trim().toLowerCase()\n  if (!s) return null\n  // Strip protocol if present\n  s = s.replace(/^https?:\\/\\//, '')\n  // Keep host only — drop everything from first slash onward\n  const slash = s.indexOf('/')\n  if (slash >= 0) s = s.slice(0, slash)\n  // Strip port (rollups span dev/prod)\n  const colon = s.indexOf(':')\n  if (colon >= 0) s = s.slice(0, colon)\n  return s || null\n}\n\n/** Strip a leading `www.` from a host (\"www.tps.com\" → \"tps.com\"). */\nexport function stripWww(host: string): string {\n  return host.startsWith('www.') ? host.slice(4) : host\n}\n\n/**\n * www-insensitive sub-site host equality — `www.a.com` and `a.com` are the\n * same site. Operands are expected already-normalized (lowercase host);\n * returns false if either side is missing.\n */\nexport function sameSite(a: string | null | undefined, b: string | null | undefined): boolean {\n  if (!a || !b) return false\n  return stripWww(a) === stripWww(b)\n}\n\n/**\n * Host of a full URL (\"https://ohiopowerstudies.com/x\" → \"ohiopowerstudies.com\"),\n * null for site-relative paths (\"/services\") and unparseable input.\n */\nexport function hostFromUrl(value: string | null | undefined): string | null {\n  if (!value || (!value.startsWith('http://') && !value.startsWith('https://'))) return null\n  try {\n    return normalizeSiteHost(new URL(value).host)\n  } catch {\n    return null\n  }\n}\n\n/** True when `value` is a non-empty normalized host (lowercase, no protocol/path/port). */\nexport function isNormalizedSiteHost(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0 && normalizeSiteHost(value) === value\n}\n\n/**\n * Agent-native contract: JSON Schema for a normalized `site` value, so services\n * and agents can validate the dimension mechanically without importing the code.\n */\nexport const SITE_HOST_JSON_SCHEMA = {\n  $schema: 'http://json-schema.org/draft-07/schema#',\n  $id: 'https://sonor.io/schemas/site-host.v1.json',\n  title: 'NormalizedSiteHost',\n  description:\n    'A normalized sub-site host (the multi-site `site` dimension): lowercase, no protocol, no path, no port. null denotes a project-wide (unattributed) row.',\n  type: ['string', 'null'],\n  pattern: '^[a-z0-9.-]+$',\n} as const\n"]}

package/dist/{chunk-T4QBSRA4.mjs → chunk-XHEXIYKY.mjs}

@@ -1,5 +1,6 @@
 'use client';
-import { useAnalyticsOptional } from './chunk-65SMJBHW.mjs';
+import { useAnalyticsOptional } from './chunk-IR5UC236.mjs';
+import { sonorFetch } from './chunk-SBT4J733.mjs';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 import React5, { useState, useEffect, useMemo, useRef, useCallback } from 'react';
 
@@ -101,18 +102,15 @@ function getApiKey() {
 async function apiPost(endpoint, body = {}) {
   const { apiUrl, apiKey } = getApiConfig();
   if (!apiKey) {
-    console.error("[Commerce] No API key configured");
+    console.warn("[Commerce] No API key configured");
     return null;
   }
   try {
-    const response = await fetch(`${apiUrl}${endpoint}`, {
+    const response = await sonorFetch(`${apiUrl}${endpoint}`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify(body)
-    });
+    }, { apiKey });
     if (!response.ok) {
       const text = await response.text();
       let body2 = null;
@@ -121,12 +119,12 @@ async function apiPost(endpoint, body = {}) {
       } catch {
         body2 = text;
       }
-      console.error(`[Commerce] API error:`, response.status, response.statusText || "Unknown", body2);
+      console.warn(`[Commerce] API error:`, response.status, response.statusText || "Unknown", body2);
       return null;
     }
     return await response.json();
   } catch (error) {
-    console.error("[Commerce] Network error:", error);
+    console.warn("[Commerce] Network error:", error);
     return null;
   }
 }
@@ -266,14 +264,11 @@ async function fetchActiveProcessor() {
   const { apiUrl, apiKey } = getApiConfig();
   if (!apiKey) return null;
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/processor`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/processor`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({})
-    });
+    }, { apiKey });
     if (!response.ok) return null;
     const data = await response.json();
     return data?.processor || null;
@@ -285,12 +280,9 @@ async function registerForEvent(eventId, scheduleId, customer) {
   const { apiUrl, apiKey } = getApiConfig();
   const analyticsSessionId = typeof sessionStorage !== "undefined" ? sessionStorage.getItem("_sk_sid") : null;
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/register`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/register`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         offeringId: eventId,
         scheduleId,
@@ -298,7 +290,7 @@ async function registerForEvent(eventId, scheduleId, customer) {
         analyticsSessionId
         // Pass for conversion tracking
       })
-    });
+    }, { apiKey, retries: 0 });
     if (!response.ok) {
       const error = await response.json();
       return { success: false, error: error.message || "Registration failed" };
@@ -316,14 +308,11 @@ async function registerForEvent(eventId, scheduleId, customer) {
 async function validateDiscountCode(code, subtotal, offeringIds = []) {
   const { apiUrl, apiKey } = getApiConfig();
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/discount/validate`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/discount/validate`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ code, subtotal, offeringIds })
-    });
+    }, { apiKey });
     if (!response.ok) {
       const body = await response.json().catch(() => ({}));
       return { valid: false, message: body?.message || "Invalid discount code" };
@@ -337,14 +326,11 @@ async function fetchProcessorConfig() {
   const { apiUrl, apiKey } = getApiConfig();
   if (!apiKey) return null;
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/processor-config`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/processor-config`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({})
-    });
+    }, { apiKey });
     if (!response.ok) return null;
     return await response.json();
   } catch {
@@ -356,17 +342,14 @@ async function createPaymentIntent(options) {
   const apiKey = getApiKey();
   const sessionId = typeof sessionStorage !== "undefined" ? sessionStorage.getItem("_sk_sid") : null;
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/create-payment-intent`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/create-payment-intent`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         ...options,
         analyticsSessionId: sessionId
       })
-    });
+    }, { apiKey, retries: 0 });
     const data = await response.json();
     if (!response.ok) throw new Error(data.message || "Failed to create payment intent");
     return data;
@@ -379,12 +362,9 @@ async function createCheckoutSession(optionsOrOfferingId, legacyOptions) {
   const options = typeof optionsOrOfferingId === "string" ? { offeringId: optionsOrOfferingId, ...legacyOptions } : optionsOrOfferingId;
   const analyticsSessionId = typeof sessionStorage !== "undefined" ? sessionStorage.getItem("_sk_sid") : null;
   try {
-    const response = await fetch(`${apiUrl}/api/public/commerce/checkout`, {
+    const response = await sonorFetch(`${apiUrl}/api/public/commerce/checkout`, {
       method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-api-key": apiKey
-      },
+      headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         ...options,
         analyticsSessionId,
@@ -392,7 +372,7 @@ async function createCheckoutSession(optionsOrOfferingId, legacyOptions) {
         successUrl: options.successUrl || (typeof window !== "undefined" ? window.location.href : ""),
         cancelUrl: options.cancelUrl || (typeof window !== "undefined" ? window.location.href : "")
       })
-    });
+    }, { apiKey, retries: 0 });
     if (!response.ok) {
       const text = await response.text();
       let body = {};
@@ -402,8 +382,8 @@ async function createCheckoutSession(optionsOrOfferingId, legacyOptions) {
       }
       const errObj = body?.error && typeof body.error === "object" ? body.error : body;
       const message = (typeof body?.message === "string" ? body.message : null) || (typeof errObj?.message === "string" ? errObj.message : null) || (typeof errObj?.detail === "string" ? errObj.detail : null) || (typeof body?.error === "string" ? body.error : null) || "Payment could not be processed. Please try again or use a different card.";
-      if (typeof console !== "undefined" && console.error) {
-        console.error("[Commerce] Checkout failed:", response.status, message, body);
+      if (typeof console !== "undefined") {
+        console.warn("[Commerce] Checkout failed:", response.status, message, body);
       }
       return { success: false, error: message };
     }
@@ -687,7 +667,7 @@ function OfferingList({
         }
         setOfferings(data);
       } catch (e) {
-        console.error("Failed to load offerings:", e);
+        console.warn("Failed to load offerings:", e);
         setError("Failed to load items.");
       } finally {
         setLoading(false);
@@ -1175,7 +1155,7 @@ function ProductEmbed({
         }
         setProduct(data);
       } catch (e) {
-        console.error("Failed to load product:", e);
+        console.warn("Failed to load product:", e);
       } finally {
         setLoading(false);
       }
@@ -3952,7 +3932,7 @@ function ProductGrid({
         setProducts(data);
         setTotal(count);
       } catch (e) {
-        console.error("Failed to load products:", e);
+        console.warn("Failed to load products:", e);
       } finally {
         setLoading(false);
       }
@@ -7121,26 +7101,23 @@ function EventsWidget({
       setLoading(true);
       setError(null);
       try {
-        const response = await fetch(`${apiUrl}/api/public/commerce/events`, {
+        const response = await sonorFetch(`${apiUrl}/api/public/commerce/events`, {
           method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "x-api-key": apiKey
-          },
+          headers: { "Content-Type": "application/json" },
           body: JSON.stringify({
             type: "event",
             category,
             limit: limit * 2
             // Fetch extra for calendar view
           })
-        });
+        }, { apiKey });
         if (!response.ok) {
           throw new Error("Failed to fetch events");
         }
         const data = await response.json();
         setEvents(data.events || []);
       } catch (err) {
-        console.error("Error loading events:", err);
+        console.warn("Error loading events:", err);
         setError("Unable to load events. Please try again later.");
       } finally {
         setLoading(false);
@@ -7759,5 +7736,5 @@ function groupEventsByOffering(events) {
 }
 
 export { CalendarView, CheckoutForm, EventCalendar, EventCheckout, EventEmbed, EventModal, EventTile, EventsWidget, OfferingCard, OfferingList, ProductDetail, ProductEmbed, ProductGrid, ProductPage, RegistrationForm, SizeChart, UpcomingEvents, createCheckoutSession, createPaymentIntent, fetchActiveProcessor, fetchCategories, fetchLatestOffering, fetchNextEvent, fetchOffering, fetchOfferings, fetchProcessorConfig, fetchProductBySlug, fetchProducts, fetchProductsPublic, fetchServices, fetchShippingRates, fetchUpcomingEvents, formatDate, formatDateRange, formatDateTime, formatPrice, formatTime, getOfferingUrl, getRelativeTimeUntil, getSpotsRemaining, isEventSoldOut, registerForEvent, useEventModal, validateAddress, validateDiscountCode };
-//# sourceMappingURL=chunk-T4QBSRA4.mjs.map
-//# sourceMappingURL=chunk-T4QBSRA4.mjs.map
+//# sourceMappingURL=chunk-XHEXIYKY.mjs.map
+//# sourceMappingURL=chunk-XHEXIYKY.mjs.map