@sonordev/site-kit 3.7.0 → 3.8.0

package/dist/securityHeaders-CwsFdDcJ.d.mts

@@ -0,0 +1,49 @@
+/**
+ * Default security headers applied by site-kit middleware.
+ *
+ * These match industry best practices and are the same headers
+ * recommended by Next.js documentation. All are opt-out.
+ */
+/**
+ * Single source of truth for who may frame a site-kit site.
+ *
+ * Upforge showcases live client work inside iframes on its portfolio /
+ * area pages, so every managed marketing site has to be embeddable from
+ * upforge.io. `X-Frame-Options` cannot express an allowlist (`ALLOW-FROM`
+ * is dead and ignored by every current browser), so the CSP
+ * `frame-ancestors` directive is the only way to say "these origins and
+ * nobody else". Everything not listed here is still blocked.
+ *
+ * Do NOT re-fork this list into individual sites' middleware/next.config —
+ * add origins here and let the fleet inherit them.
+ */
+declare const DEFAULT_FRAME_ANCESTORS: string[];
+interface SecurityHeadersConfig {
+    /** X-Frame-Options value. false to disable. Default: omitted when
+     * `frameAncestors` is active (the two conflict), otherwise 'DENY'. */
+    frameOptions?: 'DENY' | 'SAMEORIGIN' | false;
+    /**
+     * Origins allowed to frame this site, emitted as a CSP `frame-ancestors`
+     * directive. Defaults to {@link DEFAULT_FRAME_ANCESTORS} ('self' + upforge.io)
+     * so Upforge can showcase the site. Pass an array to extend/replace, or
+     * `false` to opt out entirely and fall back to X-Frame-Options.
+     *
+     * Ignored if a `Content-Security-Policy` is supplied via `customHeaders` —
+     * that CSP wins, and must carry its own frame-ancestors directive.
+     */
+    frameAncestors?: string[] | false;
+    /** X-Content-Type-Options: nosniff. Default: true */
+    contentTypeOptions?: boolean;
+    /** X-XSS-Protection header. Default: true */
+    xssProtection?: boolean;
+    /** Referrer-Policy value. Default: 'strict-origin-when-cross-origin' */
+    referrerPolicy?: string;
+    /** Permissions-Policy value. Default restricts camera, microphone, geolocation */
+    permissionsPolicy?: string;
+    /** X-DNS-Prefetch-Control. Default: true (on) */
+    dnsPrefetchControl?: boolean;
+    /** Additional custom headers */
+    customHeaders?: Record<string, string>;
+}
+
+export { DEFAULT_FRAME_ANCESTORS as D, type SecurityHeadersConfig as S };

package/dist/securityHeaders-CwsFdDcJ.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Default security headers applied by site-kit middleware.
+ *
+ * These match industry best practices and are the same headers
+ * recommended by Next.js documentation. All are opt-out.
+ */
+/**
+ * Single source of truth for who may frame a site-kit site.
+ *
+ * Upforge showcases live client work inside iframes on its portfolio /
+ * area pages, so every managed marketing site has to be embeddable from
+ * upforge.io. `X-Frame-Options` cannot express an allowlist (`ALLOW-FROM`
+ * is dead and ignored by every current browser), so the CSP
+ * `frame-ancestors` directive is the only way to say "these origins and
+ * nobody else". Everything not listed here is still blocked.
+ *
+ * Do NOT re-fork this list into individual sites' middleware/next.config —
+ * add origins here and let the fleet inherit them.
+ */
+declare const DEFAULT_FRAME_ANCESTORS: string[];
+interface SecurityHeadersConfig {
+    /** X-Frame-Options value. false to disable. Default: omitted when
+     * `frameAncestors` is active (the two conflict), otherwise 'DENY'. */
+    frameOptions?: 'DENY' | 'SAMEORIGIN' | false;
+    /**
+     * Origins allowed to frame this site, emitted as a CSP `frame-ancestors`
+     * directive. Defaults to {@link DEFAULT_FRAME_ANCESTORS} ('self' + upforge.io)
+     * so Upforge can showcase the site. Pass an array to extend/replace, or
+     * `false` to opt out entirely and fall back to X-Frame-Options.
+     *
+     * Ignored if a `Content-Security-Policy` is supplied via `customHeaders` —
+     * that CSP wins, and must carry its own frame-ancestors directive.
+     */
+    frameAncestors?: string[] | false;
+    /** X-Content-Type-Options: nosniff. Default: true */
+    contentTypeOptions?: boolean;
+    /** X-XSS-Protection header. Default: true */
+    xssProtection?: boolean;
+    /** Referrer-Policy value. Default: 'strict-origin-when-cross-origin' */
+    referrerPolicy?: string;
+    /** Permissions-Policy value. Default restricts camera, microphone, geolocation */
+    permissionsPolicy?: string;
+    /** X-DNS-Prefetch-Control. Default: true (on) */
+    dnsPrefetchControl?: boolean;
+    /** Additional custom headers */
+    customHeaders?: Record<string, string>;
+}
+
+export { DEFAULT_FRAME_ANCESTORS as D, type SecurityHeadersConfig as S };

package/dist/seo/client.js

@@ -1,18 +1,18 @@
 'use client';
 'use strict';
 
-var chunkTQS2X5A3_js = require('../chunk-TQS2X5A3.js');
+var chunkGSOLN2FC_js = require('../chunk-GSOLN2FC.js');
 require('../chunk-JEOKDUPQ.js');
-require('../chunk-AKBGYQLC.js');
-require('../chunk-GZHLVOW3.js');
-require('../chunk-SCMHZBTN.js');
+require('../chunk-ATOUXWFR.js');
+require('../chunk-BB2C5JUA.js');
+require('../chunk-JXT2WWXW.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "SitemapSync", {
   enumerable: true,
-  get: function () { return chunkTQS2X5A3_js.SitemapSync; }
+  get: function () { return chunkGSOLN2FC_js.SitemapSync; }
 });
 //# sourceMappingURL=client.js.map
 //# sourceMappingURL=client.js.map

package/dist/seo/client.mjs

@@ -1,9 +1,9 @@
 'use client';
-export { SitemapSync } from '../chunk-FP523A7G.mjs';
+export { SitemapSync } from '../chunk-BVOUZL2S.mjs';
 import '../chunk-QJU6HBSK.mjs';
-import '../chunk-NM7L2XKF.mjs';
-import '../chunk-QAYCRXT4.mjs';
-import '../chunk-2HH4VVJT.mjs';
+import '../chunk-RSFSXEV2.mjs';
+import '../chunk-TKP3YFNS.mjs';
+import '../chunk-JVT6CUNN.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=client.mjs.map
 //# sourceMappingURL=client.mjs.map

package/dist/seo/index.js

@@ -1,16 +1,16 @@
 'use strict';
 
 var chunkDV2LJYFD_js = require('../chunk-DV2LJYFD.js');
-var chunkATG4FJY6_js = require('../chunk-ATG4FJY6.js');
+var chunkH6AU3WKF_js = require('../chunk-H6AU3WKF.js');
 var chunkJ7QI3GDX_js = require('../chunk-J7QI3GDX.js');
-var chunkTQS2X5A3_js = require('../chunk-TQS2X5A3.js');
+var chunkGSOLN2FC_js = require('../chunk-GSOLN2FC.js');
 var chunkVMVEL4WU_js = require('../chunk-VMVEL4WU.js');
 var chunkQCZBXG7G_js = require('../chunk-QCZBXG7G.js');
 require('../chunk-QPIKPWAZ.js');
 require('../chunk-JEOKDUPQ.js');
-require('../chunk-AKBGYQLC.js');
-require('../chunk-GZHLVOW3.js');
-require('../chunk-SCMHZBTN.js');
+require('../chunk-ATOUXWFR.js');
+require('../chunk-BB2C5JUA.js');
+require('../chunk-JXT2WWXW.js');
 require('../chunk-ZSMWDLMK.js');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -118,7 +118,7 @@ async function LLMSchemaAsync({
 }) {
   const { page: pageData, project } = await chunkQCZBXG7G_js.getSEOPageData(path);
   const raw = pageData?.managed_llm_schema;
-  const picked = chunkATG4FJY6_js.pickManagedLlmSchemaForJsonLd(raw);
+  const picked = chunkH6AU3WKF_js.pickManagedLlmSchemaForJsonLd(raw);
   if (!picked) {
     return null;
   }
@@ -687,7 +687,7 @@ Object.defineProperty(exports, "ManagedScripts", {
 });
 Object.defineProperty(exports, "SitemapSync", {
   enumerable: true,
-  get: function () { return chunkTQS2X5A3_js.SitemapSync; }
+  get: function () { return chunkGSOLN2FC_js.SitemapSync; }
 });
 Object.defineProperty(exports, "generateSitemap", {
   enumerable: true,

package/dist/seo/index.mjs

@@ -1,16 +1,16 @@
 export { ManagedNoScripts, ManagedScripts } from '../chunk-6PJTLBRR.mjs';
-import { pickManagedLlmSchemaForJsonLd } from '../chunk-H23ZT2I2.mjs';
+import { pickManagedLlmSchemaForJsonLd } from '../chunk-PENNTSJE.mjs';
 import { safeJsonLd } from '../chunk-662YHKWW.mjs';
-export { SitemapSync } from '../chunk-FP523A7G.mjs';
+export { SitemapSync } from '../chunk-BVOUZL2S.mjs';
 import { getManagedMetadata } from '../chunk-QGV7FEUI.mjs';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-QGV7FEUI.mjs';
 import { getContentBlock, getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, getEntities } from '../chunk-2CHOHLB7.mjs';
 export { getABTest, getContentBlock, getEntities, getEntityEnhancedSchema, getFAQData, getInternalLinks, getManagedScripts, getPrimaryEntity, getRedirectData, getRobotsData, getSEOPageData, getSchemaMarkups, getSitemapEntries, getVisibilityScore, getVisibilitySummary, recordABImpression, registerSitemap } from '../chunk-2CHOHLB7.mjs';
 import '../chunk-UDBUK5ZJ.mjs';
 import '../chunk-QJU6HBSK.mjs';
-import '../chunk-NM7L2XKF.mjs';
-import '../chunk-QAYCRXT4.mjs';
-import '../chunk-2HH4VVJT.mjs';
+import '../chunk-RSFSXEV2.mjs';
+import '../chunk-TKP3YFNS.mjs';
+import '../chunk-JVT6CUNN.mjs';
 import '../chunk-4XPGGLVP.mjs';
 import { cache, Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';

package/dist/server/index.js

@@ -1,15 +1,15 @@
 'use strict';
 
-var chunkWQ64SU6E_js = require('../chunk-WQ64SU6E.js');
+var chunkULY2QZWA_js = require('../chunk-ULY2QZWA.js');
 var chunkQPIKPWAZ_js = require('../chunk-QPIKPWAZ.js');
-require('../chunk-SCMHZBTN.js');
+require('../chunk-JXT2WWXW.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "resolveClientCredential", {
   enumerable: true,
-  get: function () { return chunkWQ64SU6E_js.resolveClientCredential; }
+  get: function () { return chunkULY2QZWA_js.resolveClientCredential; }
 });
 Object.defineProperty(exports, "requireServerApiConfig", {
   enumerable: true,

package/dist/server/index.mjs

@@ -1,6 +1,6 @@
-export { resolveClientCredential } from '../chunk-54ZC6LPR.mjs';
+export { resolveClientCredential } from '../chunk-W5ZYM276.mjs';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-UDBUK5ZJ.mjs';
-import '../chunk-2HH4VVJT.mjs';
+import '../chunk-JVT6CUNN.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/signal/index.js

@@ -1,47 +1,47 @@
 'use client';
 'use strict';
 
-var chunkAUBFDSTJ_js = require('../chunk-AUBFDSTJ.js');
-var chunkR3CXRMP7_js = require('../chunk-R3CXRMP7.js');
+var chunkS3J7MEOD_js = require('../chunk-S3J7MEOD.js');
+var chunkA2FHTQGB_js = require('../chunk-A2FHTQGB.js');
 require('../chunk-ZSMWDLMK.js');
 
 
 
 Object.defineProperty(exports, "ExperimentConversion", {
   enumerable: true,
-  get: function () { return chunkAUBFDSTJ_js.ExperimentConversion; }
+  get: function () { return chunkS3J7MEOD_js.ExperimentConversion; }
 });
 Object.defineProperty(exports, "SignalExperiment", {
   enumerable: true,
-  get: function () { return chunkAUBFDSTJ_js.SignalExperiment; }
+  get: function () { return chunkS3J7MEOD_js.SignalExperiment; }
 });
 Object.defineProperty(exports, "useExperimentVariant", {
   enumerable: true,
-  get: function () { return chunkAUBFDSTJ_js.useExperimentVariant; }
+  get: function () { return chunkS3J7MEOD_js.useExperimentVariant; }
 });
 Object.defineProperty(exports, "SignalBridge", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.SignalBridge; }
+  get: function () { return chunkA2FHTQGB_js.SignalBridge; }
 });
 Object.defineProperty(exports, "useSignal", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.useSignal; }
+  get: function () { return chunkA2FHTQGB_js.useSignal; }
 });
 Object.defineProperty(exports, "useSignalConfig", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.useSignalConfig; }
+  get: function () { return chunkA2FHTQGB_js.useSignalConfig; }
 });
 Object.defineProperty(exports, "useSignalEvent", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.useSignalEvent; }
+  get: function () { return chunkA2FHTQGB_js.useSignalEvent; }
 });
 Object.defineProperty(exports, "useSignalExperiment", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.useSignalExperiment; }
+  get: function () { return chunkA2FHTQGB_js.useSignalExperiment; }
 });
 Object.defineProperty(exports, "useSignalOutcome", {
   enumerable: true,
-  get: function () { return chunkR3CXRMP7_js.useSignalOutcome; }
+  get: function () { return chunkA2FHTQGB_js.useSignalOutcome; }
 });
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/signal/index.mjs

@@ -1,6 +1,6 @@
 'use client';
-export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-TZTO5CDS.mjs';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-LSWTMMKJ.mjs';
+export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-JXN6OCFB.mjs';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-HQJS7VWB.mjs';
 import '../chunk-4XPGGLVP.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/sitemap/index.d.mts

@@ -1,4 +1,4 @@
-import { L as LLMsDataResponse } from '../types-DhCAWUmd.mjs';
+import { L as LLMsDataResponse, W as WriteLLMsTxtOptions } from '../writeLLMsTxt-SpMdyHQT.mjs';
 import '../llms/contract.mjs';
 
 /**
@@ -75,6 +75,13 @@ interface SitemapConfig {
     getLocalData?: () => Promise<LLMsDataResponse | null>;
     /** Pass-through to GET /api/public/llms/txt?publicSummaryOnly=true and local llms fallback */
     llmsPublicSummaryOnly?: boolean;
+    /**
+     * Site-authored sections appended to the build-time llms-full.txt (see
+     * WriteLLMsTxtOptions.customSections). Use with formatSourcedFactsSection
+     * to publish the site's verified citation registry as a "Sourced facts"
+     * section AI answer engines can quote with attribution.
+     */
+    llmsCustomSections?: WriteLLMsTxtOptions['customSections'];
     /** Use Signal AI visibility scores to compute page priority (40% visibility + 30% depth + 30% base) */
     intelligentPriority?: boolean;
     /** When true, append `/llms.txt` to sitemap (low priority). Default false. */

package/dist/sitemap/index.d.ts

@@ -1,4 +1,4 @@
-import { L as LLMsDataResponse } from '../types-xcP_owwn.js';
+import { L as LLMsDataResponse, W as WriteLLMsTxtOptions } from '../writeLLMsTxt-BFaNr4re.js';
 import '../llms/contract.js';
 
 /**
@@ -75,6 +75,13 @@ interface SitemapConfig {
     getLocalData?: () => Promise<LLMsDataResponse | null>;
     /** Pass-through to GET /api/public/llms/txt?publicSummaryOnly=true and local llms fallback */
     llmsPublicSummaryOnly?: boolean;
+    /**
+     * Site-authored sections appended to the build-time llms-full.txt (see
+     * WriteLLMsTxtOptions.customSections). Use with formatSourcedFactsSection
+     * to publish the site's verified citation registry as a "Sourced facts"
+     * section AI answer engines can quote with attribution.
+     */
+    llmsCustomSections?: WriteLLMsTxtOptions['customSections'];
     /** Use Signal AI visibility scores to compute page priority (40% visibility + 30% depth + 30% base) */
     intelligentPriority?: boolean;
     /** When true, append `/llms.txt` to sitemap (low priority). Default false. */

package/dist/sitemap/index.js

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunk6T4NVCAT_js = require('../chunk-6T4NVCAT.js');
+var chunkXMBYDIV6_js = require('../chunk-XMBYDIV6.js');
 var chunkJP5WGL75_js = require('../chunk-JP5WGL75.js');
-require('../chunk-ATG4FJY6.js');
+require('../chunk-H6AU3WKF.js');
 var chunkJEOKDUPQ_js = require('../chunk-JEOKDUPQ.js');
 require('../chunk-ZSMWDLMK.js');
 var fs = require('fs');
@@ -477,13 +477,14 @@ function createSitemap(config) {
           }
           if (config.optimizedLLMsTxt !== false) {
             try {
-              const writeResult = await chunk6T4NVCAT_js.writeLLMsTxtToPublic({
+              const writeResult = await chunkXMBYDIV6_js.writeLLMsTxtToPublic({
                 apiUrl,
                 apiKey,
                 full: config.optimizedLLMsFullTxt ?? false,
                 fallbackToLocal: true,
                 getLocalData: config.getLocalData,
-                publicSummaryOnly: config.llmsPublicSummaryOnly
+                publicSummaryOnly: config.llmsPublicSummaryOnly,
+                customSections: config.llmsCustomSections
               });
               if (writeResult.success) {
                 console.log(`[site-kit] Wrote llms.txt (optimized=${writeResult.optimized})`);