@sonordev/site-kit 3.5.0 → 3.6.0

package/dist/server/index.d.mts

@@ -117,16 +117,27 @@ declare function serverApiFetch<T>(path: string, options?: ServerFetchOptions):
  * `import 'server-only'` makes importing this into a client bundle a hard build
  * error — the raw key stays on the server.
  *
- * Resilience: if minting is unavailable (older API without the endpoint, token
- * auth not configured, transient outage) it returns the RAW KEY, so a build never
- * breaks. Domain-binding is log-only by default, so the raw key still works —
- * worst case is exactly pre-3.2 behavior. Memoized per raw key for the process,
- * so an entire `next build` mints ~once and every static page reuses one seed
- * (the client refreshes on the far side as needed).
+ * FAILS CLOSED. If minting genuinely fails, this throws and the build fails —
+ * it does NOT publish the raw key. A failed deploy is loud and recoverable; a
+ * leaked project secret in public HTML is neither. The only paths that still
+ * return the raw key are a 404 (an older API that predates the endpoint, an
+ * expected state during rollout) and the explicit `SONOR_SITE_TOKEN_FALLBACK=raw`
+ * escape hatch, for when shipping beats being blocked.
  *
- * That fallback is a LAST RESORT, not a soft failure: it publishes the project's
- * long-lived secret in page HTML. Through 3.4.0 it also fired on every
- * statically prerendered page — see resolveFetch() below for why.
+ * That posture is not academic. Through 3.5.0 a throttled mint (HTTP 429)
+ * returned the raw key AND cached it for 60s, so every page rendered in that
+ * window shipped the secret: one real build came out with 180 of 272 prerendered
+ * pages carrying it. The build "succeeded" and nothing downstream noticed.
+ * Rate limiting is transient by definition — the fix is to wait and retry, not
+ * to downgrade to publishing the key.
+ *
+ * Two things keep the request count low enough that throttling is rare:
+ *  - a module-level memo, so a worker mints once and every page reuses the seed;
+ *  - an in-flight map, because that memo is only populated AFTER the await. Next
+ *    renders pages concurrently, so without coalescing the first N concurrent
+ *    renders in a process all miss the cache and all fire a request — a
+ *    stampede per worker, multiplied by one worker per core. That is how a
+ *    single site exhausted a 60/min budget.
  *
  * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API
  * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS

package/dist/server/index.d.ts

@@ -117,16 +117,27 @@ declare function serverApiFetch<T>(path: string, options?: ServerFetchOptions):
  * `import 'server-only'` makes importing this into a client bundle a hard build
  * error — the raw key stays on the server.
  *
- * Resilience: if minting is unavailable (older API without the endpoint, token
- * auth not configured, transient outage) it returns the RAW KEY, so a build never
- * breaks. Domain-binding is log-only by default, so the raw key still works —
- * worst case is exactly pre-3.2 behavior. Memoized per raw key for the process,
- * so an entire `next build` mints ~once and every static page reuses one seed
- * (the client refreshes on the far side as needed).
+ * FAILS CLOSED. If minting genuinely fails, this throws and the build fails —
+ * it does NOT publish the raw key. A failed deploy is loud and recoverable; a
+ * leaked project secret in public HTML is neither. The only paths that still
+ * return the raw key are a 404 (an older API that predates the endpoint, an
+ * expected state during rollout) and the explicit `SONOR_SITE_TOKEN_FALLBACK=raw`
+ * escape hatch, for when shipping beats being blocked.
  *
- * That fallback is a LAST RESORT, not a soft failure: it publishes the project's
- * long-lived secret in page HTML. Through 3.4.0 it also fired on every
- * statically prerendered page — see resolveFetch() below for why.
+ * That posture is not academic. Through 3.5.0 a throttled mint (HTTP 429)
+ * returned the raw key AND cached it for 60s, so every page rendered in that
+ * window shipped the secret: one real build came out with 180 of 272 prerendered
+ * pages carrying it. The build "succeeded" and nothing downstream noticed.
+ * Rate limiting is transient by definition — the fix is to wait and retry, not
+ * to downgrade to publishing the key.
+ *
+ * Two things keep the request count low enough that throttling is rare:
+ *  - a module-level memo, so a worker mints once and every page reuses the seed;
+ *  - an in-flight map, because that memo is only populated AFTER the await. Next
+ *    renders pages concurrently, so without coalescing the first N concurrent
+ *    renders in a process all miss the cache and all fire a request — a
+ *    stampede per worker, multiplied by one worker per core. That is how a
+ *    single site exhausted a 60/min budget.
  *
  * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API
  * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS

package/dist/server/index.js

@@ -1,15 +1,15 @@
 'use strict';
 
-var chunkCXDIWBIQ_js = require('../chunk-CXDIWBIQ.js');
+var chunkT3LOHTC6_js = require('../chunk-T3LOHTC6.js');
 var chunkQPIKPWAZ_js = require('../chunk-QPIKPWAZ.js');
-require('../chunk-NME3SQCB.js');
+require('../chunk-K24NKI35.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "resolveClientCredential", {
   enumerable: true,
-  get: function () { return chunkCXDIWBIQ_js.resolveClientCredential; }
+  get: function () { return chunkT3LOHTC6_js.resolveClientCredential; }
 });
 Object.defineProperty(exports, "requireServerApiConfig", {
   enumerable: true,

package/dist/server/index.mjs

@@ -1,6 +1,6 @@
-export { resolveClientCredential } from '../chunk-MJDYY6S3.mjs';
+export { resolveClientCredential } from '../chunk-5BC7I3KH.mjs';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-UDBUK5ZJ.mjs';
-import '../chunk-QGPYFC6G.mjs';
+import '../chunk-KRZL6VYP.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/signal/index.js

@@ -1,47 +1,47 @@
 'use client';
 'use strict';
 
-var chunkZY3G7JGT_js = require('../chunk-ZY3G7JGT.js');
-var chunkY4U3OCKH_js = require('../chunk-Y4U3OCKH.js');
+var chunk7F3RT2RX_js = require('../chunk-7F3RT2RX.js');
+var chunk7ZY44LI4_js = require('../chunk-7ZY44LI4.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "ExperimentConversion", {
   enumerable: true,
-  get: function () { return chunkZY3G7JGT_js.ExperimentConversion; }
+  get: function () { return chunk7F3RT2RX_js.ExperimentConversion; }
 });
 Object.defineProperty(exports, "SignalExperiment", {
   enumerable: true,
-  get: function () { return chunkZY3G7JGT_js.SignalExperiment; }
+  get: function () { return chunk7F3RT2RX_js.SignalExperiment; }
 });
 Object.defineProperty(exports, "useExperimentVariant", {
   enumerable: true,
-  get: function () { return chunkZY3G7JGT_js.useExperimentVariant; }
+  get: function () { return chunk7F3RT2RX_js.useExperimentVariant; }
 });
 Object.defineProperty(exports, "SignalBridge", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.SignalBridge; }
+  get: function () { return chunk7ZY44LI4_js.SignalBridge; }
 });
 Object.defineProperty(exports, "useSignal", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.useSignal; }
+  get: function () { return chunk7ZY44LI4_js.useSignal; }
 });
 Object.defineProperty(exports, "useSignalConfig", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.useSignalConfig; }
+  get: function () { return chunk7ZY44LI4_js.useSignalConfig; }
 });
 Object.defineProperty(exports, "useSignalEvent", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.useSignalEvent; }
+  get: function () { return chunk7ZY44LI4_js.useSignalEvent; }
 });
 Object.defineProperty(exports, "useSignalExperiment", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.useSignalExperiment; }
+  get: function () { return chunk7ZY44LI4_js.useSignalExperiment; }
 });
 Object.defineProperty(exports, "useSignalOutcome", {
   enumerable: true,
-  get: function () { return chunkY4U3OCKH_js.useSignalOutcome; }
+  get: function () { return chunk7ZY44LI4_js.useSignalOutcome; }
 });
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/signal/index.mjs

@@ -1,6 +1,6 @@
 'use client';
-export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-HRJ65XKY.mjs';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-UFOOVODL.mjs';
+export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-V4LF47AS.mjs';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-RHKFINCS.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/sync/index.js

@@ -1,60 +1,60 @@
 'use strict';
 
-var chunkTBMFLLRV_js = require('../chunk-TBMFLLRV.js');
-require('../chunk-XY4NJJEX.js');
-require('../chunk-UXEB6UAR.js');
-require('../chunk-NME3SQCB.js');
+var chunkKJD5UJ4C_js = require('../chunk-KJD5UJ4C.js');
+require('../chunk-FMUTOABC.js');
+require('../chunk-KTHQKVGZ.js');
+require('../chunk-K24NKI35.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "BookingWidget", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.BookingWidget; }
+  get: function () { return chunkKJD5UJ4C_js.BookingWidget; }
 });
 Object.defineProperty(exports, "createBooking", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.createBooking; }
+  get: function () { return chunkKJD5UJ4C_js.createBooking; }
 });
 Object.defineProperty(exports, "createSlotHold", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.createSlotHold; }
+  get: function () { return chunkKJD5UJ4C_js.createSlotHold; }
 });
 Object.defineProperty(exports, "detectTimezone", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.detectTimezone; }
+  get: function () { return chunkKJD5UJ4C_js.detectTimezone; }
 });
 Object.defineProperty(exports, "fetchAvailability", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.fetchAvailability; }
+  get: function () { return chunkKJD5UJ4C_js.fetchAvailability; }
 });
 Object.defineProperty(exports, "fetchAvailableDates", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.fetchAvailableDates; }
+  get: function () { return chunkKJD5UJ4C_js.fetchAvailableDates; }
 });
 Object.defineProperty(exports, "fetchBookingTypeDetails", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.fetchBookingTypeDetails; }
+  get: function () { return chunkKJD5UJ4C_js.fetchBookingTypeDetails; }
 });
 Object.defineProperty(exports, "fetchBookingTypes", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.fetchBookingTypes; }
+  get: function () { return chunkKJD5UJ4C_js.fetchBookingTypes; }
 });
 Object.defineProperty(exports, "formatDate", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.formatDate; }
+  get: function () { return chunkKJD5UJ4C_js.formatDate; }
 });
 Object.defineProperty(exports, "formatDuration", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.formatDuration; }
+  get: function () { return chunkKJD5UJ4C_js.formatDuration; }
 });
 Object.defineProperty(exports, "formatTime", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.formatTime; }
+  get: function () { return chunkKJD5UJ4C_js.formatTime; }
 });
 Object.defineProperty(exports, "releaseSlotHold", {
   enumerable: true,
-  get: function () { return chunkTBMFLLRV_js.releaseSlotHold; }
+  get: function () { return chunkKJD5UJ4C_js.releaseSlotHold; }
 });
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/sync/index.mjs

@@ -1,7 +1,7 @@
-export { BookingWidget, createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, releaseSlotHold } from '../chunk-7FZWMAI2.mjs';
-import '../chunk-VX3WK77I.mjs';
-import '../chunk-BNJH2RFU.mjs';
-import '../chunk-QGPYFC6G.mjs';
+export { BookingWidget, createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, releaseSlotHold } from '../chunk-C7MKSHRI.mjs';
+import '../chunk-S32BEPZM.mjs';
+import '../chunk-BYW3MJ36.mjs';
+import '../chunk-KRZL6VYP.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonordev/site-kit",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "description": "Complete client-side integration kit for Sonor - SEO, Analytics, Engage, Forms, Blog",
   "license": "MIT",
   "repository": {

package/dist/AnalyticsProvider-35EDQA5V.js

@@ -1,31 +0,0 @@
-'use strict';
-
-var chunkQ2SPOBHU_js = require('./chunk-Q2SPOBHU.js');
-require('./chunk-HMFFAUCD.js');
-require('./chunk-XB57AM6T.js');
-require('./chunk-VJMPIRSD.js');
-require('./chunk-XY4NJJEX.js');
-require('./chunk-UXEB6UAR.js');
-require('./chunk-NME3SQCB.js');
-require('./chunk-ZSMWDLMK.js');
-
-
-
-Object.defineProperty(exports, "AnalyticsProvider", {
-  enumerable: true,
-  get: function () { return chunkQ2SPOBHU_js.AnalyticsProvider; }
-});
-Object.defineProperty(exports, "useAnalytics", {
-  enumerable: true,
-  get: function () { return chunkQ2SPOBHU_js.useAnalytics; }
-});
-Object.defineProperty(exports, "useAnalyticsOptional", {
-  enumerable: true,
-  get: function () { return chunkQ2SPOBHU_js.useAnalyticsOptional; }
-});
-Object.defineProperty(exports, "useTrackEvent", {
-  enumerable: true,
-  get: function () { return chunkQ2SPOBHU_js.useTrackEvent; }
-});
-//# sourceMappingURL=AnalyticsProvider-35EDQA5V.js.map
-//# sourceMappingURL=AnalyticsProvider-35EDQA5V.js.map

package/dist/AnalyticsProvider-V5CWTWWO.mjs

@@ -1,10 +0,0 @@
-export { AnalyticsProvider, useAnalytics, useAnalyticsOptional, useTrackEvent } from './chunk-LZSHZVBE.mjs';
-import './chunk-3DPXOZAU.mjs';
-import './chunk-AX4AROLH.mjs';
-import './chunk-6EDVCUAG.mjs';
-import './chunk-VX3WK77I.mjs';
-import './chunk-BNJH2RFU.mjs';
-import './chunk-QGPYFC6G.mjs';
-import './chunk-4XPGGLVP.mjs';
-//# sourceMappingURL=AnalyticsProvider-V5CWTWWO.mjs.map
-//# sourceMappingURL=AnalyticsProvider-V5CWTWWO.mjs.map

package/dist/ChatWidget-2OK6DD66.js

@@ -1,19 +0,0 @@
-'use strict';
-
-var chunkEH7QQU6P_js = require('./chunk-EH7QQU6P.js');
-require('./chunk-TJS6FPR7.js');
-require('./chunk-V6NVBFEP.js');
-require('./chunk-VJMPIRSD.js');
-require('./chunk-XY4NJJEX.js');
-require('./chunk-UXEB6UAR.js');
-require('./chunk-NME3SQCB.js');
-require('./chunk-ZSMWDLMK.js');
-
-
-
-Object.defineProperty(exports, "ChatWidget", {
-  enumerable: true,
-  get: function () { return chunkEH7QQU6P_js.ChatWidget; }
-});
-//# sourceMappingURL=ChatWidget-2OK6DD66.js.map
-//# sourceMappingURL=ChatWidget-2OK6DD66.js.map

package/dist/ChatWidget-WNT6VNJK.mjs

@@ -1,10 +0,0 @@
-export { ChatWidget } from './chunk-YKPAFEJ4.mjs';
-import './chunk-INGAARGC.mjs';
-import './chunk-X3S6KXAP.mjs';
-import './chunk-6EDVCUAG.mjs';
-import './chunk-VX3WK77I.mjs';
-import './chunk-BNJH2RFU.mjs';
-import './chunk-QGPYFC6G.mjs';
-import './chunk-4XPGGLVP.mjs';
-//# sourceMappingURL=ChatWidget-WNT6VNJK.mjs.map
-//# sourceMappingURL=ChatWidget-WNT6VNJK.mjs.map

package/dist/EngageWidget-7RZIC426.js

@@ -1,18 +0,0 @@
-'use strict';
-
-var chunk3KEZ2YHQ_js = require('./chunk-3KEZ2YHQ.js');
-require('./chunk-XB57AM6T.js');
-require('./chunk-VJMPIRSD.js');
-require('./chunk-XY4NJJEX.js');
-require('./chunk-UXEB6UAR.js');
-require('./chunk-NME3SQCB.js');
-require('./chunk-ZSMWDLMK.js');
-
-
-
-Object.defineProperty(exports, "EngageWidget", {
-  enumerable: true,
-  get: function () { return chunk3KEZ2YHQ_js.EngageWidget; }
-});
-//# sourceMappingURL=EngageWidget-7RZIC426.js.map
-//# sourceMappingURL=EngageWidget-7RZIC426.js.map

package/dist/EngageWidget-GWME22IP.mjs

@@ -1,9 +0,0 @@
-export { EngageWidget } from './chunk-STTSIODQ.mjs';
-import './chunk-AX4AROLH.mjs';
-import './chunk-6EDVCUAG.mjs';
-import './chunk-VX3WK77I.mjs';
-import './chunk-BNJH2RFU.mjs';
-import './chunk-QGPYFC6G.mjs';
-import './chunk-4XPGGLVP.mjs';
-//# sourceMappingURL=EngageWidget-GWME22IP.mjs.map
-//# sourceMappingURL=EngageWidget-GWME22IP.mjs.map

package/dist/SitemapSync-7PXQMF5A.mjs

@@ -1,8 +0,0 @@
-export { SitemapSync } from './chunk-2NA5CAK5.mjs';
-import './chunk-QJU6HBSK.mjs';
-import './chunk-VX3WK77I.mjs';
-import './chunk-BNJH2RFU.mjs';
-import './chunk-QGPYFC6G.mjs';
-import './chunk-4XPGGLVP.mjs';
-//# sourceMappingURL=SitemapSync-7PXQMF5A.mjs.map
-//# sourceMappingURL=SitemapSync-7PXQMF5A.mjs.map

package/dist/SitemapSync-O3J2DPV7.js

@@ -1,17 +0,0 @@
-'use strict';
-
-var chunkCTPE3G5W_js = require('./chunk-CTPE3G5W.js');
-require('./chunk-JEOKDUPQ.js');
-require('./chunk-XY4NJJEX.js');
-require('./chunk-UXEB6UAR.js');
-require('./chunk-NME3SQCB.js');
-require('./chunk-ZSMWDLMK.js');
-
-
-
-Object.defineProperty(exports, "SitemapSync", {
-  enumerable: true,
-  get: function () { return chunkCTPE3G5W_js.SitemapSync; }
-});
-//# sourceMappingURL=SitemapSync-O3J2DPV7.js.map
-//# sourceMappingURL=SitemapSync-O3J2DPV7.js.map

package/dist/chunk-CXDIWBIQ.js

@@ -1,78 +0,0 @@
-'use strict';
-
-var chunkNME3SQCB_js = require('./chunk-NME3SQCB.js');
-require('server-only');
-
-var MINT_PATH = "/api/public/site-token";
-var MINT_TIMEOUT_MS = 4e3;
-var SITE_TOKEN_PREFIX = "st1.";
-var cache = /* @__PURE__ */ new Map();
-function resolveFetch() {
-  const current = globalThis.fetch;
-  if (!current) throw new Error("site-kit: global fetch is unavailable");
-  const original = current._nextOriginalFetch;
-  if (typeof original === "function") return { fn: original, unpatched: true };
-  return { fn: current, unpatched: false };
-}
-function isFrameworkSignal(err) {
-  if (!err || typeof err !== "object") return false;
-  const e = err;
-  if (e.digest === "DYNAMIC_SERVER_USAGE") return true;
-  if (e.code === "NEXT_STATIC_GEN_BAILOUT") return true;
-  if (typeof e.digest === "string" && e.digest.startsWith("NEXT_")) return true;
-  if (e.$$typeof === /* @__PURE__ */ Symbol.for("react.postpone")) return true;
-  return false;
-}
-async function resolveClientCredential(rawKey, apiUrl) {
-  if (!rawKey) return "";
-  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey;
-  const now = Date.now();
-  const cached = cache.get(rawKey);
-  if (cached && cached.expiresAt > now) return cached.credential;
-  const base = (apiUrl || "https://api.sonor.io").replace(/\/+$/, "");
-  try {
-    const { fn: fetchFn, unpatched } = resolveFetch();
-    const res = await fetchFn(`${base}${MINT_PATH}`, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        "x-api-key": rawKey,
-        "x-sitekit-version": chunkNME3SQCB_js.SITE_KIT_VERSION
-      },
-      // Only meaningful on the fallback path, where a future Next stopped
-      // exposing `_nextOriginalFetch` and we're back on the patched fetch.
-      // `revalidate: false` is the one setting that neither bails out of static
-      // generation nor downgrades the route to ISR; a Data Cache entry is the
-      // lesser evil versus shipping the raw key again.
-      ...unpatched ? {} : { next: { revalidate: false } },
-      signal: typeof AbortSignal !== "undefined" && AbortSignal.timeout ? AbortSignal.timeout(MINT_TIMEOUT_MS) : void 0
-    });
-    if (res.ok) {
-      const data = await res.json().catch(() => null);
-      const token = data?.token;
-      const expiresIn = typeof data?.expiresIn === "number" ? data.expiresIn : 3600;
-      if (typeof token === "string" && token.startsWith(SITE_TOKEN_PREFIX)) {
-        cache.set(rawKey, {
-          credential: token,
-          expiresAt: now + Math.min(expiresIn * 1e3 / 2, 30 * 6e4)
-        });
-        return token;
-      }
-    } else if (res.status !== 404) {
-      console.warn(
-        `[SiteKitLayout] Token mint returned ${res.status}; injecting the RAW API KEY into page HTML for this render (publicly readable wherever this page is served).`
-      );
-    }
-  } catch (err) {
-    if (isFrameworkSignal(err)) throw err;
-    console.warn(
-      "[SiteKitLayout] Token mint unavailable; injecting the RAW API KEY into page HTML for this render. The key is publicly readable wherever this page is served \u2014 check that the mint endpoint is reachable, then rebuild."
-    );
-  }
-  cache.set(rawKey, { credential: rawKey, expiresAt: now + 6e4 });
-  return rawKey;
-}
-
-exports.resolveClientCredential = resolveClientCredential;
-//# sourceMappingURL=chunk-CXDIWBIQ.js.map
-//# sourceMappingURL=chunk-CXDIWBIQ.js.map

package/dist/chunk-CXDIWBIQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/mint-site-token.ts"],"names":["SITE_KIT_VERSION"],"mappings":";;;;;AAiCA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,iBAAA,GAAoB,MAAA;AAM1B,IAAM,KAAA,uBAAY,GAAA,EAAwB;AA8BnC,SAAS,YAAA,GAAsD;AACpE,EAAA,MAAM,UAAU,UAAA,CAAW,KAAA;AAG3B,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACrE,EAAA,MAAM,WAAW,OAAA,CAAQ,kBAAA;AACzB,EAAA,IAAI,OAAO,aAAa,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,QAAA,EAAU,WAAW,IAAA,EAAK;AAC3E,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,EAAW,KAAA,EAAM;AACzC;AAYO,SAAS,kBAAkB,GAAA,EAAuB;AACvD,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAC5C,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,sBAAA,EAAwB,OAAO,IAAA;AAChD,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,yBAAA,EAA2B,OAAO,IAAA;AACjD,EAAA,IAAI,OAAO,EAAE,MAAA,KAAW,QAAA,IAAY,EAAE,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACzE,EAAA,IAAI,EAAE,QAAA,qBAAa,MAAA,CAAO,GAAA,CAAI,gBAAgB,GAAG,OAAO,IAAA;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,eAAsB,uBAAA,CACpB,QACA,MAAA,EACiB;AACjB,EAAA,IAAI,CAAC,QAAQ,OAAO,EAAA;AAEpB,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,iBAAiB,CAAA,EAAG,OAAO,MAAA;AAEjD,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AAC/B,EAAA,IAAI,MAAA,IAAU,MAAA,CAAO,SAAA,GAAY,GAAA,SAAY,MAAA,CAAO,UAAA;AAEpD,EAAA,MAAM,IAAA,GAAA,CAAQ,MAAA,IAAU,sBAAA,EAAwB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,KAAc,YAAA,EAAa;AAChD,IAAA,MAAM,MAAM,MAAM,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,WAAA,EAAa,MAAA;AAAA,QACb,mBAAA,EAAqBA;AAAA,OACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,GAAI,YAAY,EAAC,GAAK,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,EAAM,EAAE;AAAA,MACpD,MAAA,EACE,OAAO,WAAA,KAAgB,WAAA,IAAe,YAAY,OAAA,GAC9C,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA,GACnC,KAAA;AAAA,KACP,CAAA;AAED,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,OAAY,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,MAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AACpB,MAAA,MAAM,YAAY,OAAO,IAAA,EAAM,SAAA,KAAc,QAAA,GAAW,KAAK,SAAA,GAAY,IAAA;AACzE,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,UAAA,CAAW,iBAAiB,CAAA,EAAG;AACpE,QAAA,KAAA,CAAM,IAAI,MAAA,EAAQ;AAAA,UAChB,UAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,MAAM,IAAA,CAAK,GAAA,CAAK,YAAY,GAAA,GAAQ,CAAA,EAAG,KAAK,GAAM;AAAA,SAC9D,CAAA;AACD,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF,CAAA,MAAA,IAAW,GAAA,CAAI,MAAA,KAAW,GAAA,EAAK;AAG7B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,oCAAA,EAAuC,IAAI,MAAM,CAAA,4GAAA;AAAA,OAEnD;AAAA,IACF;AAAA,EACF,SAAS,GAAA,EAAK;AAEZ,IAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG,MAAM,GAAA;AAClC,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KAGF;AAAA,EACF;AAIA,EAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,EAAE,UAAA,EAAY,QAAQ,SAAA,EAAW,GAAA,GAAM,KAAQ,CAAA;AACjE,EAAA,OAAO,MAAA;AACT","file":"chunk-CXDIWBIQ.js","sourcesContent":["/**\n * @sonordev/site-kit/server — Client-token minting (server-only)\n *\n * SiteKitLayout holds the raw `SONOR_API_KEY` server-side but must NOT ship it to\n * the browser. This mints a short-lived, project-scoped token (server-to-server,\n * authenticated with the raw key, no browser Origin so it passes domain-binding)\n * and returns THAT for the layout to inject instead.\n *\n * `import 'server-only'` makes importing this into a client bundle a hard build\n * error — the raw key stays on the server.\n *\n * Resilience: if minting is unavailable (older API without the endpoint, token\n * auth not configured, transient outage) it returns the RAW KEY, so a build never\n * breaks. Domain-binding is log-only by default, so the raw key still works —\n * worst case is exactly pre-3.2 behavior. Memoized per raw key for the process,\n * so an entire `next build` mints ~once and every static page reuses one seed\n * (the client refreshes on the far side as needed).\n *\n * That fallback is a LAST RESORT, not a soft failure: it publishes the project's\n * long-lived secret in page HTML. Through 3.4.0 it also fired on every\n * statically prerendered page — see resolveFetch() below for why.\n *\n * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API\n * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS\n * (sonor-api common/site-auth/site-token.util.ts — currently 400 days, raised\n * from 30 alongside this fix). A site not rebuilt within that window serves a\n * seed the client cannot refresh, and its forms/analytics/engage start failing\n * for new visitors. Keep that limit comfortably longer than the fleet's\n * realistic redeploy gap; marketing sites routinely go many months untouched.\n */\nimport 'server-only'\nimport { SITE_KIT_VERSION } from '../shared/version'\n\nconst MINT_PATH = '/api/public/site-token'\nconst MINT_TIMEOUT_MS = 4_000\nconst SITE_TOKEN_PREFIX = 'st1.'\n\ninterface CacheEntry {\n  credential: string\n  expiresAt: number\n}\nconst cache = new Map<string, CacheEntry>()\n\ntype FetchLike = typeof fetch\n\n/**\n * Next.js monkey-patches `globalThis.fetch` so every call participates in its\n * Data Cache and static-generation tracking. This mint must NOT participate.\n *\n * `cache: 'no-store'` marks the calling scope dynamic, so during `next build`\n * Next throws DynamicServerError *before the request goes out*. On a statically\n * prerendered route the mint therefore never ran at all — the catch below\n * swallowed the bailout and every page shipped the raw key. (Verified against\n * Next 16.2.9: the mint endpoint received zero requests for a static build.)\n *\n * The two obvious repairs are both wrong:\n *   - `next: { revalidate: N }` LOWERS the route's revalidate window\n *     (patch-fetch.js: `finalRevalidate < revalidateStore.revalidate`), quietly\n *     converting fully-static pages into ISR across the whole fleet.\n *   - `next: { revalidate: false }` keeps pages static but writes the token into\n *     the Data Cache, which hosts persist across builds — a fresh deploy could\n *     re-bake a months-old seed, which is the exact failure we're removing.\n *\n * A credential mint is not page data and has no business in the page data cache.\n * So we call the original fetch Next saves on the patched one and stay invisible\n * to the framework: no bailout, no cache entry, no effect on staticness. The\n * module-level memo above is the only cache we want — one mint per build\n * process, and a build-fresh seed on every deploy.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function resolveFetch(): { fn: FetchLike; unpatched: boolean } {\n  const current = globalThis.fetch as\n    | (FetchLike & { _nextOriginalFetch?: FetchLike })\n    | undefined\n  if (!current) throw new Error('site-kit: global fetch is unavailable')\n  const original = current._nextOriginalFetch\n  if (typeof original === 'function') return { fn: original, unpatched: true }\n  return { fn: current, unpatched: false }\n}\n\n/**\n * Next signals \"this render must go dynamic\" by THROWING (DynamicServerError,\n * static-gen bailout, redirect/notFound digests, React's postpone). Those are\n * the framework's control flow, not a mint failure. Swallowing one makes Next\n * believe the render succeeded statically — which is precisely how the raw key\n * ended up stranded in prerendered HTML with no error anywhere. Let them\n * propagate; only real network/HTTP failures fall back to the raw key.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function isFrameworkSignal(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false\n  const e = err as { digest?: unknown; code?: unknown; $$typeof?: unknown }\n  if (e.digest === 'DYNAMIC_SERVER_USAGE') return true\n  if (e.code === 'NEXT_STATIC_GEN_BAILOUT') return true\n  if (typeof e.digest === 'string' && e.digest.startsWith('NEXT_')) return true\n  if (e.$$typeof === Symbol.for('react.postpone')) return true\n  return false\n}\n\nexport async function resolveClientCredential(\n  rawKey: string,\n  apiUrl: string,\n): Promise<string> {\n  if (!rawKey) return ''\n  // Env should hold a raw key; if it already looks like a token, pass it through.\n  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey\n\n  const now = Date.now()\n  const cached = cache.get(rawKey)\n  if (cached && cached.expiresAt > now) return cached.credential\n\n  const base = (apiUrl || 'https://api.sonor.io').replace(/\\/+$/, '')\n  try {\n    const { fn: fetchFn, unpatched } = resolveFetch()\n    const res = await fetchFn(`${base}${MINT_PATH}`, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/json',\n        'x-api-key': rawKey,\n        'x-sitekit-version': SITE_KIT_VERSION,\n      },\n      // Only meaningful on the fallback path, where a future Next stopped\n      // exposing `_nextOriginalFetch` and we're back on the patched fetch.\n      // `revalidate: false` is the one setting that neither bails out of static\n      // generation nor downgrades the route to ISR; a Data Cache entry is the\n      // lesser evil versus shipping the raw key again.\n      ...(unpatched ? {} : ({ next: { revalidate: false } } as RequestInit)),\n      signal:\n        typeof AbortSignal !== 'undefined' && AbortSignal.timeout\n          ? AbortSignal.timeout(MINT_TIMEOUT_MS)\n          : undefined,\n    })\n\n    if (res.ok) {\n      const data: any = await res.json().catch(() => null)\n      const token = data?.token\n      const expiresIn = typeof data?.expiresIn === 'number' ? data.expiresIn : 3600\n      if (typeof token === 'string' && token.startsWith(SITE_TOKEN_PREFIX)) {\n        cache.set(rawKey, {\n          credential: token,\n          expiresAt: now + Math.min((expiresIn * 1000) / 2, 30 * 60_000),\n        })\n        return token\n      }\n    } else if (res.status !== 404) {\n      // 404 = older API without the endpoint (expected during rollout). Anything\n      // else is worth a server-side note. Never logs the key value.\n      console.warn(\n        `[SiteKitLayout] Token mint returned ${res.status}; injecting the RAW API KEY ` +\n          'into page HTML for this render (publicly readable wherever this page is served).',\n      )\n    }\n  } catch (err) {\n    // Never swallow the framework's own control flow — see isFrameworkSignal.\n    if (isFrameworkSignal(err)) throw err\n    console.warn(\n      '[SiteKitLayout] Token mint unavailable; injecting the RAW API KEY into page HTML ' +\n        'for this render. The key is publicly readable wherever this page is served — ' +\n        'check that the mint endpoint is reachable, then rebuild.',\n    )\n  }\n\n  // Fallback: the raw key (pre-3.2 behavior). Short cache so a transient outage\n  // retries soon rather than pinning the raw key for the whole build.\n  cache.set(rawKey, { credential: rawKey, expiresAt: now + 60_000 })\n  return rawKey\n}\n"]}

package/dist/chunk-MJDYY6S3.mjs

@@ -1,76 +0,0 @@
-import { SITE_KIT_VERSION } from './chunk-QGPYFC6G.mjs';
-import 'server-only';
-
-var MINT_PATH = "/api/public/site-token";
-var MINT_TIMEOUT_MS = 4e3;
-var SITE_TOKEN_PREFIX = "st1.";
-var cache = /* @__PURE__ */ new Map();
-function resolveFetch() {
-  const current = globalThis.fetch;
-  if (!current) throw new Error("site-kit: global fetch is unavailable");
-  const original = current._nextOriginalFetch;
-  if (typeof original === "function") return { fn: original, unpatched: true };
-  return { fn: current, unpatched: false };
-}
-function isFrameworkSignal(err) {
-  if (!err || typeof err !== "object") return false;
-  const e = err;
-  if (e.digest === "DYNAMIC_SERVER_USAGE") return true;
-  if (e.code === "NEXT_STATIC_GEN_BAILOUT") return true;
-  if (typeof e.digest === "string" && e.digest.startsWith("NEXT_")) return true;
-  if (e.$$typeof === /* @__PURE__ */ Symbol.for("react.postpone")) return true;
-  return false;
-}
-async function resolveClientCredential(rawKey, apiUrl) {
-  if (!rawKey) return "";
-  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey;
-  const now = Date.now();
-  const cached = cache.get(rawKey);
-  if (cached && cached.expiresAt > now) return cached.credential;
-  const base = (apiUrl || "https://api.sonor.io").replace(/\/+$/, "");
-  try {
-    const { fn: fetchFn, unpatched } = resolveFetch();
-    const res = await fetchFn(`${base}${MINT_PATH}`, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        "x-api-key": rawKey,
-        "x-sitekit-version": SITE_KIT_VERSION
-      },
-      // Only meaningful on the fallback path, where a future Next stopped
-      // exposing `_nextOriginalFetch` and we're back on the patched fetch.
-      // `revalidate: false` is the one setting that neither bails out of static
-      // generation nor downgrades the route to ISR; a Data Cache entry is the
-      // lesser evil versus shipping the raw key again.
-      ...unpatched ? {} : { next: { revalidate: false } },
-      signal: typeof AbortSignal !== "undefined" && AbortSignal.timeout ? AbortSignal.timeout(MINT_TIMEOUT_MS) : void 0
-    });
-    if (res.ok) {
-      const data = await res.json().catch(() => null);
-      const token = data?.token;
-      const expiresIn = typeof data?.expiresIn === "number" ? data.expiresIn : 3600;
-      if (typeof token === "string" && token.startsWith(SITE_TOKEN_PREFIX)) {
-        cache.set(rawKey, {
-          credential: token,
-          expiresAt: now + Math.min(expiresIn * 1e3 / 2, 30 * 6e4)
-        });
-        return token;
-      }
-    } else if (res.status !== 404) {
-      console.warn(
-        `[SiteKitLayout] Token mint returned ${res.status}; injecting the RAW API KEY into page HTML for this render (publicly readable wherever this page is served).`
-      );
-    }
-  } catch (err) {
-    if (isFrameworkSignal(err)) throw err;
-    console.warn(
-      "[SiteKitLayout] Token mint unavailable; injecting the RAW API KEY into page HTML for this render. The key is publicly readable wherever this page is served \u2014 check that the mint endpoint is reachable, then rebuild."
-    );
-  }
-  cache.set(rawKey, { credential: rawKey, expiresAt: now + 6e4 });
-  return rawKey;
-}
-
-export { resolveClientCredential };
-//# sourceMappingURL=chunk-MJDYY6S3.mjs.map
-//# sourceMappingURL=chunk-MJDYY6S3.mjs.map

package/dist/chunk-MJDYY6S3.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/mint-site-token.ts"],"names":[],"mappings":";;;AAiCA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,iBAAA,GAAoB,MAAA;AAM1B,IAAM,KAAA,uBAAY,GAAA,EAAwB;AA8BnC,SAAS,YAAA,GAAsD;AACpE,EAAA,MAAM,UAAU,UAAA,CAAW,KAAA;AAG3B,EAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACrE,EAAA,MAAM,WAAW,OAAA,CAAQ,kBAAA;AACzB,EAAA,IAAI,OAAO,aAAa,UAAA,EAAY,OAAO,EAAE,EAAA,EAAI,QAAA,EAAU,WAAW,IAAA,EAAK;AAC3E,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,EAAW,KAAA,EAAM;AACzC;AAYO,SAAS,kBAAkB,GAAA,EAAuB;AACvD,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAC5C,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,sBAAA,EAAwB,OAAO,IAAA;AAChD,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,yBAAA,EAA2B,OAAO,IAAA;AACjD,EAAA,IAAI,OAAO,EAAE,MAAA,KAAW,QAAA,IAAY,EAAE,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACzE,EAAA,IAAI,EAAE,QAAA,qBAAa,MAAA,CAAO,GAAA,CAAI,gBAAgB,GAAG,OAAO,IAAA;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,eAAsB,uBAAA,CACpB,QACA,MAAA,EACiB;AACjB,EAAA,IAAI,CAAC,QAAQ,OAAO,EAAA;AAEpB,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,iBAAiB,CAAA,EAAG,OAAO,MAAA;AAEjD,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AAC/B,EAAA,IAAI,MAAA,IAAU,MAAA,CAAO,SAAA,GAAY,GAAA,SAAY,MAAA,CAAO,UAAA;AAEpD,EAAA,MAAM,IAAA,GAAA,CAAQ,MAAA,IAAU,sBAAA,EAAwB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,KAAc,YAAA,EAAa;AAChD,IAAA,MAAM,MAAM,MAAM,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,WAAA,EAAa,MAAA;AAAA,QACb,mBAAA,EAAqB;AAAA,OACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,GAAI,YAAY,EAAC,GAAK,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,EAAM,EAAE;AAAA,MACpD,MAAA,EACE,OAAO,WAAA,KAAgB,WAAA,IAAe,YAAY,OAAA,GAC9C,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA,GACnC,KAAA;AAAA,KACP,CAAA;AAED,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,OAAY,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,MAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AACpB,MAAA,MAAM,YAAY,OAAO,IAAA,EAAM,SAAA,KAAc,QAAA,GAAW,KAAK,SAAA,GAAY,IAAA;AACzE,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,UAAA,CAAW,iBAAiB,CAAA,EAAG;AACpE,QAAA,KAAA,CAAM,IAAI,MAAA,EAAQ;AAAA,UAChB,UAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,MAAM,IAAA,CAAK,GAAA,CAAK,YAAY,GAAA,GAAQ,CAAA,EAAG,KAAK,GAAM;AAAA,SAC9D,CAAA;AACD,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF,CAAA,MAAA,IAAW,GAAA,CAAI,MAAA,KAAW,GAAA,EAAK;AAG7B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,oCAAA,EAAuC,IAAI,MAAM,CAAA,4GAAA;AAAA,OAEnD;AAAA,IACF;AAAA,EACF,SAAS,GAAA,EAAK;AAEZ,IAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG,MAAM,GAAA;AAClC,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KAGF;AAAA,EACF;AAIA,EAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,EAAE,UAAA,EAAY,QAAQ,SAAA,EAAW,GAAA,GAAM,KAAQ,CAAA;AACjE,EAAA,OAAO,MAAA;AACT","file":"chunk-MJDYY6S3.mjs","sourcesContent":["/**\n * @sonordev/site-kit/server — Client-token minting (server-only)\n *\n * SiteKitLayout holds the raw `SONOR_API_KEY` server-side but must NOT ship it to\n * the browser. This mints a short-lived, project-scoped token (server-to-server,\n * authenticated with the raw key, no browser Origin so it passes domain-binding)\n * and returns THAT for the layout to inject instead.\n *\n * `import 'server-only'` makes importing this into a client bundle a hard build\n * error — the raw key stays on the server.\n *\n * Resilience: if minting is unavailable (older API without the endpoint, token\n * auth not configured, transient outage) it returns the RAW KEY, so a build never\n * breaks. Domain-binding is log-only by default, so the raw key still works —\n * worst case is exactly pre-3.2 behavior. Memoized per raw key for the process,\n * so an entire `next build` mints ~once and every static page reuses one seed\n * (the client refreshes on the far side as needed).\n *\n * That fallback is a LAST RESORT, not a soft failure: it publishes the project's\n * long-lived secret in page HTML. Through 3.4.0 it also fired on every\n * statically prerendered page — see resolveFetch() below for why.\n *\n * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API\n * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS\n * (sonor-api common/site-auth/site-token.util.ts — currently 400 days, raised\n * from 30 alongside this fix). A site not rebuilt within that window serves a\n * seed the client cannot refresh, and its forms/analytics/engage start failing\n * for new visitors. Keep that limit comfortably longer than the fleet's\n * realistic redeploy gap; marketing sites routinely go many months untouched.\n */\nimport 'server-only'\nimport { SITE_KIT_VERSION } from '../shared/version'\n\nconst MINT_PATH = '/api/public/site-token'\nconst MINT_TIMEOUT_MS = 4_000\nconst SITE_TOKEN_PREFIX = 'st1.'\n\ninterface CacheEntry {\n  credential: string\n  expiresAt: number\n}\nconst cache = new Map<string, CacheEntry>()\n\ntype FetchLike = typeof fetch\n\n/**\n * Next.js monkey-patches `globalThis.fetch` so every call participates in its\n * Data Cache and static-generation tracking. This mint must NOT participate.\n *\n * `cache: 'no-store'` marks the calling scope dynamic, so during `next build`\n * Next throws DynamicServerError *before the request goes out*. On a statically\n * prerendered route the mint therefore never ran at all — the catch below\n * swallowed the bailout and every page shipped the raw key. (Verified against\n * Next 16.2.9: the mint endpoint received zero requests for a static build.)\n *\n * The two obvious repairs are both wrong:\n *   - `next: { revalidate: N }` LOWERS the route's revalidate window\n *     (patch-fetch.js: `finalRevalidate < revalidateStore.revalidate`), quietly\n *     converting fully-static pages into ISR across the whole fleet.\n *   - `next: { revalidate: false }` keeps pages static but writes the token into\n *     the Data Cache, which hosts persist across builds — a fresh deploy could\n *     re-bake a months-old seed, which is the exact failure we're removing.\n *\n * A credential mint is not page data and has no business in the page data cache.\n * So we call the original fetch Next saves on the patched one and stay invisible\n * to the framework: no bailout, no cache entry, no effect on staticness. The\n * module-level memo above is the only cache we want — one mint per build\n * process, and a build-fresh seed on every deploy.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function resolveFetch(): { fn: FetchLike; unpatched: boolean } {\n  const current = globalThis.fetch as\n    | (FetchLike & { _nextOriginalFetch?: FetchLike })\n    | undefined\n  if (!current) throw new Error('site-kit: global fetch is unavailable')\n  const original = current._nextOriginalFetch\n  if (typeof original === 'function') return { fn: original, unpatched: true }\n  return { fn: current, unpatched: false }\n}\n\n/**\n * Next signals \"this render must go dynamic\" by THROWING (DynamicServerError,\n * static-gen bailout, redirect/notFound digests, React's postpone). Those are\n * the framework's control flow, not a mint failure. Swallowing one makes Next\n * believe the render succeeded statically — which is precisely how the raw key\n * ended up stranded in prerendered HTML with no error anywhere. Let them\n * propagate; only real network/HTTP failures fall back to the raw key.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function isFrameworkSignal(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false\n  const e = err as { digest?: unknown; code?: unknown; $$typeof?: unknown }\n  if (e.digest === 'DYNAMIC_SERVER_USAGE') return true\n  if (e.code === 'NEXT_STATIC_GEN_BAILOUT') return true\n  if (typeof e.digest === 'string' && e.digest.startsWith('NEXT_')) return true\n  if (e.$$typeof === Symbol.for('react.postpone')) return true\n  return false\n}\n\nexport async function resolveClientCredential(\n  rawKey: string,\n  apiUrl: string,\n): Promise<string> {\n  if (!rawKey) return ''\n  // Env should hold a raw key; if it already looks like a token, pass it through.\n  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey\n\n  const now = Date.now()\n  const cached = cache.get(rawKey)\n  if (cached && cached.expiresAt > now) return cached.credential\n\n  const base = (apiUrl || 'https://api.sonor.io').replace(/\\/+$/, '')\n  try {\n    const { fn: fetchFn, unpatched } = resolveFetch()\n    const res = await fetchFn(`${base}${MINT_PATH}`, {\n      method: 'POST',\n      headers: {\n        'content-type': 'application/json',\n        'x-api-key': rawKey,\n        'x-sitekit-version': SITE_KIT_VERSION,\n      },\n      // Only meaningful on the fallback path, where a future Next stopped\n      // exposing `_nextOriginalFetch` and we're back on the patched fetch.\n      // `revalidate: false` is the one setting that neither bails out of static\n      // generation nor downgrades the route to ISR; a Data Cache entry is the\n      // lesser evil versus shipping the raw key again.\n      ...(unpatched ? {} : ({ next: { revalidate: false } } as RequestInit)),\n      signal:\n        typeof AbortSignal !== 'undefined' && AbortSignal.timeout\n          ? AbortSignal.timeout(MINT_TIMEOUT_MS)\n          : undefined,\n    })\n\n    if (res.ok) {\n      const data: any = await res.json().catch(() => null)\n      const token = data?.token\n      const expiresIn = typeof data?.expiresIn === 'number' ? data.expiresIn : 3600\n      if (typeof token === 'string' && token.startsWith(SITE_TOKEN_PREFIX)) {\n        cache.set(rawKey, {\n          credential: token,\n          expiresAt: now + Math.min((expiresIn * 1000) / 2, 30 * 60_000),\n        })\n        return token\n      }\n    } else if (res.status !== 404) {\n      // 404 = older API without the endpoint (expected during rollout). Anything\n      // else is worth a server-side note. Never logs the key value.\n      console.warn(\n        `[SiteKitLayout] Token mint returned ${res.status}; injecting the RAW API KEY ` +\n          'into page HTML for this render (publicly readable wherever this page is served).',\n      )\n    }\n  } catch (err) {\n    // Never swallow the framework's own control flow — see isFrameworkSignal.\n    if (isFrameworkSignal(err)) throw err\n    console.warn(\n      '[SiteKitLayout] Token mint unavailable; injecting the RAW API KEY into page HTML ' +\n        'for this render. The key is publicly readable wherever this page is served — ' +\n        'check that the mint endpoint is reachable, then rebuild.',\n    )\n  }\n\n  // Fallback: the raw key (pre-3.2 behavior). Short cache so a transient outage\n  // retries soon rather than pinning the raw key for the whole build.\n  cache.set(rawKey, { credential: rawKey, expiresAt: now + 60_000 })\n  return rawKey\n}\n"]}

package/dist/chunk-NME3SQCB.js

@@ -1,8 +0,0 @@
-'use strict';
-
-// src/shared/version.ts
-var SITE_KIT_VERSION = "3.5.0";
-
-exports.SITE_KIT_VERSION = SITE_KIT_VERSION;
-//# sourceMappingURL=chunk-NME3SQCB.js.map
-//# sourceMappingURL=chunk-NME3SQCB.js.map