@sonordev/site-kit 5.4.0 → 5.5.0

package/AGENTS.md

@@ -78,17 +78,27 @@ export default function RootLayout({ children }) {
 Use `SiteKitLayout`, **never** the deprecated `SiteKitProvider` (it forces the
 whole tree client-side and breaks RSC/SSR). `codemod` migrates it for you.
 
-**Analytics is a deferred, childless sibling — never a wrapper.** Wrapping
-`{children}` in a client analytics/provider de-opts a statically prerenderable
-route to 100% client rendering (the hero paints only after hydration; mobile
-LCP tanks). Run `SiteKitLayout` with `analytics={false}` and mount analytics as
-a deferred, lazy, childless sibling so `{children}` never moves in the tree.
+**Analytics is already a deferred, childless sibling. Don't wrap `{children}`,
+and don't hand-roll it.** Since 3.0.2, `SiteKitLayout` renders `{children}`
+first and mounts analytics, engage and the fleet heartbeat after it, deferred
+to window load + idle (or the first interaction). 4.0.0 removed the last
+wrappers. So the plain layout above is the whole pattern: configure analytics
+with `analytics={{ ... }}`, and track custom events with the standalone
+`trackEvent` / `trackConversion` from `@sonordev/site-kit/analytics` (no
+provider needed; `useAnalytics()` throws outside one).
+
+What still de-opts a statically prerenderable route to 100% client rendering
+(the hero paints only after hydration; mobile LCP tanks) is a component *you*
+wrap around `{children}` that skips server rendering, usually
+`next/dynamic({ ssr: false })`. The old `SiteKitLayout analytics={false}` plus
+a hand-rolled deferred sibling was the workaround for site-kit <3.0.2. On those
+installs, upgrade.
 
 ## Common failure modes → the check that catches it
 
 | Symptom | Cause | Fix | `doctor`/`verify` check |
 |---|---|---|---|
-| Mobile LCP ~4s; server HTML is an empty shell + `self.__next_f` flight data, no `<section>`/`<h1>` | A client provider wraps `{children}` → 100% CSR | `analytics={false}` + deferred childless sibling | `ssr.render` |
+| Mobile LCP ~4s; server HTML is an empty shell + `self.__next_f` flight data, no `<section>`/`<h1>` | Something wraps `{children}` in a component that skips SSR, usually `next/dynamic({ ssr: false })` (e.g. the site's own lazy Providers) → 100% CSR. Never a plain `SiteKitLayout` on site-kit ≥3.0.2 | Keep the layout. Import that wrapper statically or mount it as a childless sibling. On <3.0.2, upgrade | `ssr.render` |
 | Middleware never runs in prod on Netlify | `runtime: 'nodejs'` middleware silently doesn't run on Netlify | Gate logic in a server component, or keep middleware edge-compatible | `middleware.netlify` |
 | Invalid-key console spam; data features paused (401/403) | Stale/rotated key, or an env change wasn't redeployed | Put the current `sonor_` key in `.env.local` and redeploy | `key.valid` |
 | Deprecated `SiteKitProvider` in layout | 2.x integration | `npx sonor-setup codemod --only provider-to-layout --write` | `layout.sitekit` |

package/README.md

@@ -34,6 +34,8 @@ keep their current flow.
 SONOR_API_KEY=sonor_xxxxxxxx_xxxxx
 ```
 
+Copy the key from [app.sonor.io](https://app.sonor.io): **Projects → your project → Settings → API Keys**. Keys start with `sonor_`. Keep it server-side, with no `NEXT_PUBLIC_` prefix.
+
 **One layout component:**
 
 ```tsx
@@ -53,7 +55,7 @@ export default function RootLayout({ children }: { children: React.ReactNode })
 }
 ```
 
-`SiteKitLayout` is an RSC-compatible async Server Component that auto-composes: analytics tracking, Engage widgets, favicons, managed scripts, and sitemap sync. No client-side provider wrapping needed.
+`SiteKitLayout` is an RSC-compatible async Server Component that auto-composes: analytics tracking, Engage widgets, favicons, and managed scripts. No client-side provider wrapping needed: client modules mount as deferred siblings after `{children}`, so the page stays server-rendered. Props and module options: [src/layout/README.md](src/layout/README.md).
 
 **Proxy (optional but recommended):**
 
@@ -154,16 +156,16 @@ SiteKitLayout (RSC server component)
 │   ├── ManagedScripts         (tracking pixels, analytics tags)
 │   └── API preconnect hints
 │
-├── Client-side (lazy-loaded island):
+├── Client-side (childless siblings after {children}, deferred to idle):
 │   ├── AnalyticsProvider      (page views, scroll depth, Web Vitals)
 │   ├── EngageWidget           (popups, nudges, chat)
-│   ├── SignalBridge           (A/B experiments, behavior tracking)
-│   ├── SitemapSync            (keeps Portal seo_pages in sync)
-│   └── IdentityProvider       (unified visitor/session IDs)
+│   ├── SignalBridge           (A/B experiments, opt-in, not deferred)
+│   ├── SitemapSync            (browser sitemap fallback, opt-in)
+│   └── FleetHeartbeat         (kit version + modules, once per session)
 │
 └── Middleware (separate):
     ├── Redirects              (Portal-managed 301/302)
-    ├── Security headers       (CSP, X-Frame-Options, etc.)
+    ├── Security headers       (CSP frame-ancestors, nosniff, etc.)
     └── AI discovery           (Link: rel="describedby" → /llms.txt)
 ```
 
@@ -247,7 +249,7 @@ NEXT_PUBLIC_RECAPTCHA_SITE_KEY=6Le...            # reCAPTCHA Enterprise (forms)
 REVALIDATION_SECRET=your_secret                  # On-demand ISR for llms.txt
 ```
 
-Legacy env vars (`UPTRADE_API_KEY`, `NEXT_PUBLIC_UPTRADE_API_KEY`) are still supported for older sites.
+Uptrade-era variables (`UPTRADE_API_KEY`, `NEXT_PUBLIC_UPTRADE_API_KEY`) aren't read, and `uptrade_` keys aren't accepted. A site that only sets those runs with no key. Move it to `SONOR_API_KEY` with `npx sonor-setup codemod --only uptrade-to-sonor --write`.
 
 ---
 

package/agent-manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@sonordev/site-kit",
-  "version": "5.4.0",
+  "version": "5.5.0",
   "description": "Machine-readable manifest for coding agents integrating a site with Sonor. See AGENTS.md (shipped) and docs/SITE-KIT-AGENT-NATIVE.md.",
   "env": {
     "required": [
@@ -120,7 +120,7 @@
       "import": "@sonordev/site-kit/analytics",
       "side": "client",
       "purpose": "Page views, scroll depth, web vitals, heatmap clicks.",
-      "caution": "Never wrap {children}. Mount as a deferred, lazy, childless sibling or analytics de-opts the route to client rendering (SSR bailout)."
+      "caution": "SiteKitLayout already mounts this as a deferred, childless sibling (site-kit >=3.0.2); configure it with analytics={{ ... }} rather than mounting it yourself. Never wrap {children} in AnalyticsProvider: it puts analytics in the hydration path, and lazy-loaded with next/dynamic({ ssr: false }) it de-opts the route to client rendering (SSR bailout). Track custom events with the standalone trackEvent / trackConversion (no provider needed); useAnalytics() throws outside a provider."
     },
     {
       "name": "engage",
@@ -403,7 +403,7 @@
       "name": "client",
       "import": "@sonordev/site-kit/client",
       "side": "client",
-      "purpose": "useDeferredActivation + shared identity for deferred, non-blocking client work."
+      "purpose": "useDeferredActivation + shared identity for deferred, non-blocking client work; VisualViewportGap keeps fixed bottom UI (the Echo launcher included) on screen when a phone's layout viewport is taller than the visible one."
     },
     {
       "name": "forms/static",
@@ -424,8 +424,8 @@
     },
     {
       "id": "analytics.deferred-sibling",
-      "title": "Deferred, childless analytics sibling (never wrap children)",
-      "code": "// SiteKitLayout with analytics={false}; analytics mounts as a deferred,\n// lazy, CHILDLESS sibling so it never sits in the hydration path and never\n// unmounts the page tree. Children stay in the same tree position always.\n<SiteKitLayout analytics={false}>{children}</SiteKitLayout>\n// + a client island using useDeferredActivation() that lazy-mounts analytics."
+      "title": "Analytics: SiteKitLayout mounts it as a deferred, childless sibling (configure it, never wrap children)",
+      "code": "// site-kit >=3.0.2: SiteKitLayout renders {children} first and mounts analytics\n// (and engage) AFTER it, deferred to load + idle or first interaction. There is\n// no sibling to hand-roll and nothing to turn off. Configure it here:\n<SiteKitLayout analytics={{ excludePaths: ['/admin'] }}>{children}</SiteKitLayout>\n\n// Custom events from any client component, no provider needed. Calls queue\n// until the deferred provider mounts:\nimport { trackEvent } from '@sonordev/site-kit/analytics'\ntrackEvent({ name: 'cta_click', category: 'engagement' })\n\n// Only on site-kit <3.0.2: upgrade. The old stopgap was analytics={false} plus a\n// client island using useDeferredActivation() that lazy-mounts analytics."
     },
     {
       "id": "env.single-var",
@@ -442,8 +442,8 @@
     {
       "id": "ssr.bailout",
       "symptom": "Mobile LCP ~4s; server HTML is an empty shell + self.__next_f RSC flight data; no <section>/<h1>/<img> tags.",
-      "cause": "A client analytics/provider component wraps {children}, de-opting a statically prerenderable route to 100% client rendering.",
-      "fix": "Run SiteKitLayout with analytics={false} and mount analytics as a deferred, lazy, childless sibling. Verify with `sonor-setup verify --url <url>`.",
+      "cause": "Something wraps {children} in a component that skips server rendering, usually next/dynamic({ ssr: false }) (a site's own lazy Providers or analytics wrapper), so a statically prerenderable route de-opts to 100% client rendering. A plain SiteKitLayout is not the cause on site-kit >=3.0.2: it mounts analytics, engage and the heartbeat as deferred, childless siblings (structural since 4.0.0).",
+      "fix": "Keep the layout: plain <SiteKitLayout>{children}</SiteKitLayout> already mounts analytics as a deferred, childless sibling on site-kit >=3.0.2, so it is not the cause. Find what else wraps {children}, usually a next/dynamic({ ssr: false }) component such as a site's own lazy Providers. Import it statically (a client component still server-renders; only ssr: false skips that) or mount it as a childless sibling. Only on site-kit <3.0.2: upgrade, or as a stopgap run SiteKitLayout with analytics={false} plus a deferred, childless analytics sibling. Verify with `sonor-setup verify --url <url>`.",
       "check": "ssr.render"
     },
     {

package/dist/AnalyticsProvider-KFXAH4GR.mjs

@@ -0,0 +1,11 @@
+export { AnalyticsProvider, useAnalytics, useAnalyticsOptional, useTrackEvent } from './chunk-DYULWKDC.mjs';
+import './chunk-SHLWA6JY.mjs';
+import './chunk-NVSWTDWU.mjs';
+import './chunk-ZZQAGCSI.mjs';
+import './chunk-6EDVCUAG.mjs';
+import './chunk-OFSA7LUH.mjs';
+import './chunk-4XGACM7D.mjs';
+import './chunk-WDBCXRTT.mjs';
+import './chunk-BEXTDHO4.mjs';
+//# sourceMappingURL=AnalyticsProvider-KFXAH4GR.mjs.map
+//# sourceMappingURL=AnalyticsProvider-KFXAH4GR.mjs.map

package/dist/{AnalyticsProvider-2XIOMRCN.mjs.map → AnalyticsProvider-KFXAH4GR.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"AnalyticsProvider-2XIOMRCN.mjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"AnalyticsProvider-KFXAH4GR.mjs"}

package/dist/AnalyticsProvider-WDDW3IJW.js

@@ -0,0 +1,32 @@
+'use strict';
+
+var chunkPIPLBBDH_js = require('./chunk-PIPLBBDH.js');
+require('./chunk-3DWIYCQX.js');
+require('./chunk-OL2QBWAU.js');
+require('./chunk-RC4WWQXR.js');
+require('./chunk-VJMPIRSD.js');
+require('./chunk-QEGUI2Q2.js');
+require('./chunk-HFJQMIFM.js');
+require('./chunk-SUZ3ZLB2.js');
+require('./chunk-SNAQBZPT.js');
+
+
+
+Object.defineProperty(exports, "AnalyticsProvider", {
+  enumerable: true,
+  get: function () { return chunkPIPLBBDH_js.AnalyticsProvider; }
+});
+Object.defineProperty(exports, "useAnalytics", {
+  enumerable: true,
+  get: function () { return chunkPIPLBBDH_js.useAnalytics; }
+});
+Object.defineProperty(exports, "useAnalyticsOptional", {
+  enumerable: true,
+  get: function () { return chunkPIPLBBDH_js.useAnalyticsOptional; }
+});
+Object.defineProperty(exports, "useTrackEvent", {
+  enumerable: true,
+  get: function () { return chunkPIPLBBDH_js.useTrackEvent; }
+});
+//# sourceMappingURL=AnalyticsProvider-WDDW3IJW.js.map
+//# sourceMappingURL=AnalyticsProvider-WDDW3IJW.js.map

package/dist/{AnalyticsProvider-Y2P2BPOI.js.map → AnalyticsProvider-WDDW3IJW.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"AnalyticsProvider-Y2P2BPOI.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"AnalyticsProvider-WDDW3IJW.js"}

package/dist/{BlogViewTracker-6EGEDPP3.js → BlogViewTracker-D4DIEP4Q.js}

@@ -2,9 +2,9 @@
 'use strict';
 
 var chunkHGNSJXWT_js = require('./chunk-HGNSJXWT.js');
-var chunkGQ6CUOLA_js = require('./chunk-GQ6CUOLA.js');
-require('./chunk-VA36CJRV.js');
-require('./chunk-UTOHMK52.js');
+var chunkQEGUI2Q2_js = require('./chunk-QEGUI2Q2.js');
+require('./chunk-HFJQMIFM.js');
+require('./chunk-SUZ3ZLB2.js');
 require('./chunk-SNAQBZPT.js');
 var react = require('react');
 
@@ -19,7 +19,7 @@ function trackBlogView(slug) {
     if (sessionStorage.getItem(key)) return;
   } catch {
   }
-  void chunkGQ6CUOLA_js.sonorFetch(
+  void chunkQEGUI2Q2_js.sonorFetch(
     `${baseUrl}/public/blog/view`,
     {
       method: "POST",
@@ -47,5 +47,5 @@ function BlogViewTracker({ slug }) {
 
 exports.BlogViewTracker = BlogViewTracker;
 exports.trackBlogView = trackBlogView;
-//# sourceMappingURL=BlogViewTracker-6EGEDPP3.js.map
-//# sourceMappingURL=BlogViewTracker-6EGEDPP3.js.map
+//# sourceMappingURL=BlogViewTracker-D4DIEP4Q.js.map
+//# sourceMappingURL=BlogViewTracker-D4DIEP4Q.js.map

package/dist/{BlogViewTracker-6EGEDPP3.js.map → BlogViewTracker-D4DIEP4Q.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/blog/BlogViewTracker.tsx"],"names":["sonorFetch","useDeferredActivation","useEffect"],"mappings":";;;;;;;;;AAmBA,IAAM,kBAAA,GAAqB,wBAAA;AAUpB,SAAS,cAAc,IAAA,EAAoB;AAChD,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,MAAA,KAAW,WAAA,EAAa;AAI5C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,MAAM,UAAU,CAAA,CAAE,oBAAA;AAClB,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,CAAA,CAAE,oBAAA,EAAsB;AAKzC,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,kBAAkB,CAAA,EAAG,IAAI,CAAA,CAAA;AACxC,EAAA,IAAI;AACF,IAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA,EAAG;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,KAAKA,2BAAA;AAAA,IACH,GAAG,OAAO,CAAA,iBAAA,CAAA;AAAA,IACV;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA,KAC/B;AAAA,IACA,EAAE,SAAS,CAAA;AAAE,GACf,CACG,IAAA,CAAK,CAAC,GAAA,KAAQ;AACb,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,MACjC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AAAA,EAEb,CAAC,CAAA;AACL;AAEO,SAAS,eAAA,CAAgB,EAAE,IAAA,EAAK,EAAyB;AAC9D,EAAA,MAAM,KAAA,GAAQC,uCAAsB,IAAI,CAAA;AAExC,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,KAAA,gBAAqB,IAAI,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAEhB,EAAA,OAAO,IAAA;AACT","file":"BlogViewTracker-6EGEDPP3.js","sourcesContent":["'use client'\n\n/**\n * @sonordev/site-kit blog — reader-side view tracking\n *\n * Counts actual readers by POSTing to /public/blog/view once per post per\n * browser session. This replaces the server-side increment that rode\n * GET posts/:slug — under ISR that GET fires on REVALIDATION, not on reads,\n * so view_count was measuring cache churn instead of people.\n *\n * Childless by design (renders null, never wraps children) and gated behind\n * the same idle deferral SiteKitLayout uses, so it stays out of the critical\n * hydration window.\n */\n\nimport { useEffect } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nconst SESSION_KEY_PREFIX = '__sonor_blog_viewed__:'\n\nexport interface BlogViewTrackerProps {\n  slug: string\n}\n\n/**\n * The effect body, exported for tests (the package's vitest runs in node, so\n * the component's mount path can't be exercised directly).\n */\nexport function trackBlogView(slug: string): void {\n  if (!slug || typeof window === 'undefined') return\n\n  // SiteKitLayout globals; the credential is the minted st1. token, never\n  // the raw key. Without SiteKitLayout the globals are absent — no-op.\n  const w = window as Window & {\n    __SITE_KIT_API_URL__?: string\n    __SITE_KIT_API_KEY__?: string\n  }\n  const baseUrl = w.__SITE_KIT_API_URL__\n  if (!baseUrl || !w.__SITE_KIT_API_KEY__) return\n\n  // One view per post per session. sessionStorage can throw (private\n  // windows, storage-blocked browsers) — treat a throw as \"not yet viewed\"\n  // and skip writing rather than skip counting.\n  const key = `${SESSION_KEY_PREFIX}${slug}`\n  try {\n    if (sessionStorage.getItem(key)) return\n  } catch {\n    /* unreadable storage — count the view, skip dedupe */\n  }\n\n  // retries: 0 — the increment is not idempotent, so a retried request\n  // would double-count.\n  void sonorFetch(\n    `${baseUrl}/public/blog/view`,\n    {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ slug }),\n    },\n    { retries: 0 }\n  )\n    .then((res) => {\n      if (res.ok) {\n        try {\n          sessionStorage.setItem(key, '1')\n        } catch {\n          /* storage write blocked — worst case is a re-count next mount */\n        }\n      }\n    })\n    .catch(() => {\n      /* view tracking is best-effort; never surface errors */\n    })\n}\n\nexport function BlogViewTracker({ slug }: BlogViewTrackerProps) {\n  const ready = useDeferredActivation(true)\n\n  useEffect(() => {\n    if (ready) trackBlogView(slug)\n  }, [ready, slug])\n\n  return null\n}\n"]}
+{"version":3,"sources":["../src/blog/BlogViewTracker.tsx"],"names":["sonorFetch","useDeferredActivation","useEffect"],"mappings":";;;;;;;;;AAmBA,IAAM,kBAAA,GAAqB,wBAAA;AAUpB,SAAS,cAAc,IAAA,EAAoB;AAChD,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,MAAA,KAAW,WAAA,EAAa;AAI5C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,MAAM,UAAU,CAAA,CAAE,oBAAA;AAClB,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,CAAA,CAAE,oBAAA,EAAsB;AAKzC,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,kBAAkB,CAAA,EAAG,IAAI,CAAA,CAAA;AACxC,EAAA,IAAI;AACF,IAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA,EAAG;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,KAAKA,2BAAA;AAAA,IACH,GAAG,OAAO,CAAA,iBAAA,CAAA;AAAA,IACV;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA,KAC/B;AAAA,IACA,EAAE,SAAS,CAAA;AAAE,GACf,CACG,IAAA,CAAK,CAAC,GAAA,KAAQ;AACb,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,MACjC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AAAA,EAEb,CAAC,CAAA;AACL;AAEO,SAAS,eAAA,CAAgB,EAAE,IAAA,EAAK,EAAyB;AAC9D,EAAA,MAAM,KAAA,GAAQC,uCAAsB,IAAI,CAAA;AAExC,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,KAAA,gBAAqB,IAAI,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAEhB,EAAA,OAAO,IAAA;AACT","file":"BlogViewTracker-D4DIEP4Q.js","sourcesContent":["'use client'\n\n/**\n * @sonordev/site-kit blog — reader-side view tracking\n *\n * Counts actual readers by POSTing to /public/blog/view once per post per\n * browser session. This replaces the server-side increment that rode\n * GET posts/:slug — under ISR that GET fires on REVALIDATION, not on reads,\n * so view_count was measuring cache churn instead of people.\n *\n * Childless by design (renders null, never wraps children) and gated behind\n * the same idle deferral SiteKitLayout uses, so it stays out of the critical\n * hydration window.\n */\n\nimport { useEffect } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nconst SESSION_KEY_PREFIX = '__sonor_blog_viewed__:'\n\nexport interface BlogViewTrackerProps {\n  slug: string\n}\n\n/**\n * The effect body, exported for tests (the package's vitest runs in node, so\n * the component's mount path can't be exercised directly).\n */\nexport function trackBlogView(slug: string): void {\n  if (!slug || typeof window === 'undefined') return\n\n  // SiteKitLayout globals; the credential is the minted st1. token, never\n  // the raw key. Without SiteKitLayout the globals are absent — no-op.\n  const w = window as Window & {\n    __SITE_KIT_API_URL__?: string\n    __SITE_KIT_API_KEY__?: string\n  }\n  const baseUrl = w.__SITE_KIT_API_URL__\n  if (!baseUrl || !w.__SITE_KIT_API_KEY__) return\n\n  // One view per post per session. sessionStorage can throw (private\n  // windows, storage-blocked browsers) — treat a throw as \"not yet viewed\"\n  // and skip writing rather than skip counting.\n  const key = `${SESSION_KEY_PREFIX}${slug}`\n  try {\n    if (sessionStorage.getItem(key)) return\n  } catch {\n    /* unreadable storage — count the view, skip dedupe */\n  }\n\n  // retries: 0 — the increment is not idempotent, so a retried request\n  // would double-count.\n  void sonorFetch(\n    `${baseUrl}/public/blog/view`,\n    {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ slug }),\n    },\n    { retries: 0 }\n  )\n    .then((res) => {\n      if (res.ok) {\n        try {\n          sessionStorage.setItem(key, '1')\n        } catch {\n          /* storage write blocked — worst case is a re-count next mount */\n        }\n      }\n    })\n    .catch(() => {\n      /* view tracking is best-effort; never surface errors */\n    })\n}\n\nexport function BlogViewTracker({ slug }: BlogViewTrackerProps) {\n  const ready = useDeferredActivation(true)\n\n  useEffect(() => {\n    if (ready) trackBlogView(slug)\n  }, [ready, slug])\n\n  return null\n}\n"]}

package/dist/{BlogViewTracker-R4YQ76WP.mjs → BlogViewTracker-ZVEGGH3Y.mjs}

@@ -1,8 +1,8 @@
 'use client';
 import { useDeferredActivation } from './chunk-ZVBLXXNJ.mjs';
-import { sonorFetch } from './chunk-MIFP6QEQ.mjs';
-import './chunk-I4PDSDVE.mjs';
-import './chunk-7U7C6XRI.mjs';
+import { sonorFetch } from './chunk-OFSA7LUH.mjs';
+import './chunk-4XGACM7D.mjs';
+import './chunk-WDBCXRTT.mjs';
 import './chunk-BEXTDHO4.mjs';
 import { useEffect } from 'react';
 
@@ -44,5 +44,5 @@ function BlogViewTracker({ slug }) {
 }
 
 export { BlogViewTracker, trackBlogView };
-//# sourceMappingURL=BlogViewTracker-R4YQ76WP.mjs.map
-//# sourceMappingURL=BlogViewTracker-R4YQ76WP.mjs.map
+//# sourceMappingURL=BlogViewTracker-ZVEGGH3Y.mjs.map
+//# sourceMappingURL=BlogViewTracker-ZVEGGH3Y.mjs.map

package/dist/{BlogViewTracker-R4YQ76WP.mjs.map → BlogViewTracker-ZVEGGH3Y.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/blog/BlogViewTracker.tsx"],"names":[],"mappings":";;;;;;;AAmBA,IAAM,kBAAA,GAAqB,wBAAA;AAUpB,SAAS,cAAc,IAAA,EAAoB;AAChD,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,MAAA,KAAW,WAAA,EAAa;AAI5C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,MAAM,UAAU,CAAA,CAAE,oBAAA;AAClB,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,CAAA,CAAE,oBAAA,EAAsB;AAKzC,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,kBAAkB,CAAA,EAAG,IAAI,CAAA,CAAA;AACxC,EAAA,IAAI;AACF,IAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA,EAAG;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,KAAK,UAAA;AAAA,IACH,GAAG,OAAO,CAAA,iBAAA,CAAA;AAAA,IACV;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA,KAC/B;AAAA,IACA,EAAE,SAAS,CAAA;AAAE,GACf,CACG,IAAA,CAAK,CAAC,GAAA,KAAQ;AACb,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,MACjC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AAAA,EAEb,CAAC,CAAA;AACL;AAEO,SAAS,eAAA,CAAgB,EAAE,IAAA,EAAK,EAAyB;AAC9D,EAAA,MAAM,KAAA,GAAQ,sBAAsB,IAAI,CAAA;AAExC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,KAAA,gBAAqB,IAAI,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAEhB,EAAA,OAAO,IAAA;AACT","file":"BlogViewTracker-R4YQ76WP.mjs","sourcesContent":["'use client'\n\n/**\n * @sonordev/site-kit blog — reader-side view tracking\n *\n * Counts actual readers by POSTing to /public/blog/view once per post per\n * browser session. This replaces the server-side increment that rode\n * GET posts/:slug — under ISR that GET fires on REVALIDATION, not on reads,\n * so view_count was measuring cache churn instead of people.\n *\n * Childless by design (renders null, never wraps children) and gated behind\n * the same idle deferral SiteKitLayout uses, so it stays out of the critical\n * hydration window.\n */\n\nimport { useEffect } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nconst SESSION_KEY_PREFIX = '__sonor_blog_viewed__:'\n\nexport interface BlogViewTrackerProps {\n  slug: string\n}\n\n/**\n * The effect body, exported for tests (the package's vitest runs in node, so\n * the component's mount path can't be exercised directly).\n */\nexport function trackBlogView(slug: string): void {\n  if (!slug || typeof window === 'undefined') return\n\n  // SiteKitLayout globals; the credential is the minted st1. token, never\n  // the raw key. Without SiteKitLayout the globals are absent — no-op.\n  const w = window as Window & {\n    __SITE_KIT_API_URL__?: string\n    __SITE_KIT_API_KEY__?: string\n  }\n  const baseUrl = w.__SITE_KIT_API_URL__\n  if (!baseUrl || !w.__SITE_KIT_API_KEY__) return\n\n  // One view per post per session. sessionStorage can throw (private\n  // windows, storage-blocked browsers) — treat a throw as \"not yet viewed\"\n  // and skip writing rather than skip counting.\n  const key = `${SESSION_KEY_PREFIX}${slug}`\n  try {\n    if (sessionStorage.getItem(key)) return\n  } catch {\n    /* unreadable storage — count the view, skip dedupe */\n  }\n\n  // retries: 0 — the increment is not idempotent, so a retried request\n  // would double-count.\n  void sonorFetch(\n    `${baseUrl}/public/blog/view`,\n    {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ slug }),\n    },\n    { retries: 0 }\n  )\n    .then((res) => {\n      if (res.ok) {\n        try {\n          sessionStorage.setItem(key, '1')\n        } catch {\n          /* storage write blocked — worst case is a re-count next mount */\n        }\n      }\n    })\n    .catch(() => {\n      /* view tracking is best-effort; never surface errors */\n    })\n}\n\nexport function BlogViewTracker({ slug }: BlogViewTrackerProps) {\n  const ready = useDeferredActivation(true)\n\n  useEffect(() => {\n    if (ready) trackBlogView(slug)\n  }, [ready, slug])\n\n  return null\n}\n"]}
+{"version":3,"sources":["../src/blog/BlogViewTracker.tsx"],"names":[],"mappings":";;;;;;;AAmBA,IAAM,kBAAA,GAAqB,wBAAA;AAUpB,SAAS,cAAc,IAAA,EAAoB;AAChD,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,MAAA,KAAW,WAAA,EAAa;AAI5C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,MAAM,UAAU,CAAA,CAAE,oBAAA;AAClB,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,CAAA,CAAE,oBAAA,EAAsB;AAKzC,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,kBAAkB,CAAA,EAAG,IAAI,CAAA,CAAA;AACxC,EAAA,IAAI;AACF,IAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,GAAG,CAAA,EAAG;AAAA,EACnC,CAAA,CAAA,MAAQ;AAAA,EAER;AAIA,EAAA,KAAK,UAAA;AAAA,IACH,GAAG,OAAO,CAAA,iBAAA,CAAA;AAAA,IACV;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAM;AAAA,KAC/B;AAAA,IACA,EAAE,SAAS,CAAA;AAAE,GACf,CACG,IAAA,CAAK,CAAC,GAAA,KAAQ;AACb,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,MACjC,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AAAA,EAEb,CAAC,CAAA;AACL;AAEO,SAAS,eAAA,CAAgB,EAAE,IAAA,EAAK,EAAyB;AAC9D,EAAA,MAAM,KAAA,GAAQ,sBAAsB,IAAI,CAAA;AAExC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,KAAA,gBAAqB,IAAI,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,KAAA,EAAO,IAAI,CAAC,CAAA;AAEhB,EAAA,OAAO,IAAA;AACT","file":"BlogViewTracker-ZVEGGH3Y.mjs","sourcesContent":["'use client'\n\n/**\n * @sonordev/site-kit blog — reader-side view tracking\n *\n * Counts actual readers by POSTing to /public/blog/view once per post per\n * browser session. This replaces the server-side increment that rode\n * GET posts/:slug — under ISR that GET fires on REVALIDATION, not on reads,\n * so view_count was measuring cache churn instead of people.\n *\n * Childless by design (renders null, never wraps children) and gated behind\n * the same idle deferral SiteKitLayout uses, so it stays out of the critical\n * hydration window.\n */\n\nimport { useEffect } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nconst SESSION_KEY_PREFIX = '__sonor_blog_viewed__:'\n\nexport interface BlogViewTrackerProps {\n  slug: string\n}\n\n/**\n * The effect body, exported for tests (the package's vitest runs in node, so\n * the component's mount path can't be exercised directly).\n */\nexport function trackBlogView(slug: string): void {\n  if (!slug || typeof window === 'undefined') return\n\n  // SiteKitLayout globals; the credential is the minted st1. token, never\n  // the raw key. Without SiteKitLayout the globals are absent — no-op.\n  const w = window as Window & {\n    __SITE_KIT_API_URL__?: string\n    __SITE_KIT_API_KEY__?: string\n  }\n  const baseUrl = w.__SITE_KIT_API_URL__\n  if (!baseUrl || !w.__SITE_KIT_API_KEY__) return\n\n  // One view per post per session. sessionStorage can throw (private\n  // windows, storage-blocked browsers) — treat a throw as \"not yet viewed\"\n  // and skip writing rather than skip counting.\n  const key = `${SESSION_KEY_PREFIX}${slug}`\n  try {\n    if (sessionStorage.getItem(key)) return\n  } catch {\n    /* unreadable storage — count the view, skip dedupe */\n  }\n\n  // retries: 0 — the increment is not idempotent, so a retried request\n  // would double-count.\n  void sonorFetch(\n    `${baseUrl}/public/blog/view`,\n    {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ slug }),\n    },\n    { retries: 0 }\n  )\n    .then((res) => {\n      if (res.ok) {\n        try {\n          sessionStorage.setItem(key, '1')\n        } catch {\n          /* storage write blocked — worst case is a re-count next mount */\n        }\n      }\n    })\n    .catch(() => {\n      /* view tracking is best-effort; never surface errors */\n    })\n}\n\nexport function BlogViewTracker({ slug }: BlogViewTrackerProps) {\n  const ready = useDeferredActivation(true)\n\n  useEffect(() => {\n    if (ready) trackBlogView(slug)\n  }, [ready, slug])\n\n  return null\n}\n"]}

package/dist/ChatWidget-2ZYPYIMQ.js

@@ -0,0 +1,22 @@
+'use strict';
+
+var chunk2OU4KBUN_js = require('./chunk-2OU4KBUN.js');
+require('./chunk-ESP5RMB7.js');
+require('./chunk-G6WF4G3E.js');
+require('./chunk-YNC5D3FT.js');
+require('./chunk-BNOQXDPJ.js');
+require('./chunk-KHPJ3CEL.js');
+require('./chunk-VJMPIRSD.js');
+require('./chunk-QEGUI2Q2.js');
+require('./chunk-HFJQMIFM.js');
+require('./chunk-SUZ3ZLB2.js');
+require('./chunk-SNAQBZPT.js');
+
+
+
+Object.defineProperty(exports, "ChatWidget", {
+  enumerable: true,
+  get: function () { return chunk2OU4KBUN_js.ChatWidget; }
+});
+//# sourceMappingURL=ChatWidget-2ZYPYIMQ.js.map
+//# sourceMappingURL=ChatWidget-2ZYPYIMQ.js.map

package/dist/{ChatWidget-2OFWPCWF.js.map → ChatWidget-2ZYPYIMQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"ChatWidget-2OFWPCWF.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"ChatWidget-2ZYPYIMQ.js"}

package/dist/ChatWidget-FYCCLMQE.mjs

@@ -0,0 +1,13 @@
+export { ChatWidget } from './chunk-UZL2QU2V.mjs';
+import './chunk-4U5NCKQY.mjs';
+import './chunk-NSWO43XW.mjs';
+import './chunk-DRLHQQBH.mjs';
+import './chunk-TX2QQ7IX.mjs';
+import './chunk-TMVKRQGJ.mjs';
+import './chunk-6EDVCUAG.mjs';
+import './chunk-OFSA7LUH.mjs';
+import './chunk-4XGACM7D.mjs';
+import './chunk-WDBCXRTT.mjs';
+import './chunk-BEXTDHO4.mjs';
+//# sourceMappingURL=ChatWidget-FYCCLMQE.mjs.map
+//# sourceMappingURL=ChatWidget-FYCCLMQE.mjs.map

package/dist/{ChatWidget-4AOGHYXQ.mjs.map → ChatWidget-FYCCLMQE.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"ChatWidget-4AOGHYXQ.mjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"ChatWidget-FYCCLMQE.mjs"}

package/dist/EngageWidget-6HUZYOY7.mjs

@@ -0,0 +1,11 @@
+export { EngageWidget } from './chunk-S6FEC6UT.mjs';
+import './chunk-4U5NCKQY.mjs';
+import './chunk-NSWO43XW.mjs';
+import './chunk-ZZQAGCSI.mjs';
+import './chunk-6EDVCUAG.mjs';
+import './chunk-OFSA7LUH.mjs';
+import './chunk-4XGACM7D.mjs';
+import './chunk-WDBCXRTT.mjs';
+import './chunk-BEXTDHO4.mjs';
+//# sourceMappingURL=EngageWidget-6HUZYOY7.mjs.map
+//# sourceMappingURL=EngageWidget-6HUZYOY7.mjs.map

package/dist/{EngageWidget-SFO2XRNG.mjs.map → EngageWidget-6HUZYOY7.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"EngageWidget-SFO2XRNG.mjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"EngageWidget-6HUZYOY7.mjs"}

package/dist/EngageWidget-MYQTBBW6.js

@@ -0,0 +1,20 @@
+'use strict';
+
+var chunkSQVYLIIN_js = require('./chunk-SQVYLIIN.js');
+require('./chunk-ESP5RMB7.js');
+require('./chunk-G6WF4G3E.js');
+require('./chunk-RC4WWQXR.js');
+require('./chunk-VJMPIRSD.js');
+require('./chunk-QEGUI2Q2.js');
+require('./chunk-HFJQMIFM.js');
+require('./chunk-SUZ3ZLB2.js');
+require('./chunk-SNAQBZPT.js');
+
+
+
+Object.defineProperty(exports, "EngageWidget", {
+  enumerable: true,
+  get: function () { return chunkSQVYLIIN_js.EngageWidget; }
+});
+//# sourceMappingURL=EngageWidget-MYQTBBW6.js.map
+//# sourceMappingURL=EngageWidget-MYQTBBW6.js.map

package/dist/{EngageWidget-T4KAAD3G.js.map → EngageWidget-MYQTBBW6.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"EngageWidget-T4KAAD3G.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"EngageWidget-MYQTBBW6.js"}

package/dist/{FileField-CE2XNBBG.js → FileField-JK2S24XU.js}

@@ -1,9 +1,9 @@
 'use client';
 'use strict';
 
-var chunkGQ6CUOLA_js = require('./chunk-GQ6CUOLA.js');
-require('./chunk-VA36CJRV.js');
-require('./chunk-UTOHMK52.js');
+var chunkQEGUI2Q2_js = require('./chunk-QEGUI2Q2.js');
+require('./chunk-HFJQMIFM.js');
+require('./chunk-SUZ3ZLB2.js');
 require('./chunk-SNAQBZPT.js');
 var React = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -67,7 +67,7 @@ async function uploadFormFile(file) {
   }
   const body = new FormData();
   body.append("file", file);
-  const response = await chunkGQ6CUOLA_js.sonorFetch(
+  const response = await chunkQEGUI2Q2_js.sonorFetch(
     `${apiUrl}/api/public/forms/upload`,
     {
       method: "POST",
@@ -87,5 +87,5 @@ async function uploadFormFile(file) {
 }
 
 exports.FileField = FileField;
-//# sourceMappingURL=FileField-CE2XNBBG.js.map
-//# sourceMappingURL=FileField-CE2XNBBG.js.map
+//# sourceMappingURL=FileField-JK2S24XU.js.map
+//# sourceMappingURL=FileField-JK2S24XU.js.map

package/dist/{FileField-CE2XNBBG.js.map → FileField-JK2S24XU.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/forms/FileField.tsx"],"names":["React","jsxs","Fragment","jsx","sonorFetch"],"mappings":";;;;;;;;;;;;;AAmCO,SAAS,SAAA,CAAU;AAAA,EACxB,KAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA,EAAmB;AACjB,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIA,sBAAA,CAAM,SAAyC,MAAM,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,sBAAA,CAAM,SAAS,EAAE,CAAA;AAEjD,EAAA,MAAM,UAAA,GAAa,OAAO,CAAA,KAA2C;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA;AAC/B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,WAAA,CAAY,KAAK,IAAI,CAAA;AACrB,IAAA,SAAA,CAAU,WAAW,CAAA;AACrB,IAAA,QAAA,CAAS,EAAE,CAAA;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,cAAA,CAAe,IAAI,CAAA;AACrC,MAAA,QAAA,CAAS,GAAG,CAAA;AACZ,MAAA,SAAA,CAAU,MAAM,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,GAAG,CAAA;AAChD,MAAA,QAAA,CAAS,EAAE,CAAA;AACX,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAA,CAAAC,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAC,cAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,EAAA,EAAI,OAAA;AAAA,QACJ,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA,QAAA,EAAW,WAAW,CAAA,aAAA,CAAA;AAAA,QAC/C,IAAA,EAAK,MAAA;AAAA,QACL,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,UAAU,KAAA,CAAM,WAAA;AAAA,QAChB,UAAU,MAAA,KAAW,WAAA;AAAA,QACrB,QAAA,EAAU,UAAA;AAAA,QACV,KAAA,EAAO;AAAA;AAAA,KACT;AAAA,IACC,MAAA,KAAW,WAAA,oBACVF,eAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,kCAAA,EAAoC,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,EAAE,EAAG,QAAA,EAAA;AAAA,MAAA,YAAA;AAAA,MACxE,QAAA;AAAA,MAAS;AAAA,KAAA,EACtB,CAAA;AAAA,IAED,MAAA,KAAW,OAAA,oBACVE,cAAA,CAAC,GAAA,EAAA,EAAE,MAAK,OAAA,EAAQ,KAAA,EAAO,EAAE,KAAA,EAAO,4BAA4B,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,IAAK,QAAA,EAAA,8CAAA,EAE1F;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAGA,eAAe,eAAe,IAAA,EAA6B;AACzD,EAAA,MAAM,SACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,wBAAwB,sBAAA,GACxC,sBAAA;AACN,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,QAAA,EAAS;AAC1B,EAAA,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAGxB,EAAA,MAAM,WAAW,MAAMC,2BAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAAA,MAC7C;AAAA,KACF;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,OAAQ,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACpD,EAAA,IAAI,CAAC,MAAM,GAAA,EAAK;AACd,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,IAAA,CAAK,GAAA;AACd","file":"FileField-CE2XNBBG.js","sourcesContent":["'use client'\n\n/**\n * File upload field — the one field type that cannot render on the server.\n *\n * It holds upload state and reads the browser-published credential globals, so\n * it lives here rather than in FormField.tsx. Pulling it out is what lets\n * FormField drop its `'use client'` directive and render inside a Server\n * Component (see StaticForm.tsx); a form WITHOUT a file field now ships no\n * field-rendering JavaScript at all.\n *\n * Uploads the chosen file to the Sonor API, which stores it and returns a\n * public URL — that URL becomes the field value, so large files never touch\n * the JSON submission body. The value stays empty until the upload succeeds,\n * so a required file field correctly blocks submission until the upload\n * completes (rather than submitting a useless bare filename).\n *\n * Note: forms containing a file field are NOT native-POST eligible (see\n * native-fallback.tsx) — a form-encoded POST cannot run this upload — so the\n * server shell renders a plain disabled-looking file input and the real\n * control arrives with the enhancement.\n */\n\nimport React from 'react'\nimport type { FormField as FormFieldType } from './types'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nexport interface FileFieldProps {\n  field: FormFieldType\n  inputId: string\n  classPrefix: string\n  baseInputStyle: React.CSSProperties\n  onChange: (value: unknown) => void\n}\n\nexport function FileField({\n  field,\n  inputId,\n  classPrefix,\n  baseInputStyle,\n  onChange,\n}: FileFieldProps) {\n  const [status, setStatus] = React.useState<'idle' | 'uploading' | 'error'>('idle')\n  const [fileName, setFileName] = React.useState('')\n\n  const handleFile = async (e: React.ChangeEvent<HTMLInputElement>) => {\n    const file = e.target.files?.[0]\n    if (!file) return\n    setFileName(file.name)\n    setStatus('uploading')\n    onChange('') // clear any prior URL until this upload completes\n    try {\n      const url = await uploadFormFile(file)\n      onChange(url)\n      setStatus('idle')\n    } catch (err) {\n      console.error('[Forms] File upload failed:', err)\n      onChange('')\n      setStatus('error')\n    }\n  }\n\n  return (\n    <>\n      <input\n        id={inputId}\n        className={`${classPrefix}__input ${classPrefix}__input--file`}\n        type=\"file\"\n        name={field.slug}\n        required={field.is_required}\n        disabled={status === 'uploading'}\n        onChange={handleFile}\n        style={baseInputStyle}\n      />\n      {status === 'uploading' && (\n        <p style={{ color: 'var(--sk-text-tertiary, #6b7280)', fontSize: 14, marginTop: 4 }}>\n          Uploading {fileName}…\n        </p>\n      )}\n      {status === 'error' && (\n        <p role=\"alert\" style={{ color: 'var(--sk-error, #dc2626)', fontSize: 14, marginTop: 4 }}>\n          Upload failed. Please choose the file again.\n        </p>\n      )}\n    </>\n  )\n}\n\n/** Upload a single file to the Sonor API and return its stored public URL. */\nasync function uploadFormFile(file: File): Promise<string> {\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  if (!apiKey) {\n    throw new Error('API key is required to upload files.')\n  }\n\n  const body = new FormData()\n  body.append('file', file)\n\n  // No Content-Type header — the browser sets the multipart boundary itself.\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/upload`,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${apiKey}` },\n      body,\n    },\n    { retries: 1, timeoutMs: 60000 },\n  )\n\n  if (!response.ok) {\n    throw new Error(`Upload failed (${response.status})`)\n  }\n  const data = (await response.json().catch(() => null)) as { url?: string } | null\n  if (!data?.url) {\n    throw new Error('Upload did not return a URL.')\n  }\n  return data.url\n}\n"]}
+{"version":3,"sources":["../src/forms/FileField.tsx"],"names":["React","jsxs","Fragment","jsx","sonorFetch"],"mappings":";;;;;;;;;;;;;AAmCO,SAAS,SAAA,CAAU;AAAA,EACxB,KAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA,EAAmB;AACjB,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIA,sBAAA,CAAM,SAAyC,MAAM,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,sBAAA,CAAM,SAAS,EAAE,CAAA;AAEjD,EAAA,MAAM,UAAA,GAAa,OAAO,CAAA,KAA2C;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA;AAC/B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,WAAA,CAAY,KAAK,IAAI,CAAA;AACrB,IAAA,SAAA,CAAU,WAAW,CAAA;AACrB,IAAA,QAAA,CAAS,EAAE,CAAA;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,cAAA,CAAe,IAAI,CAAA;AACrC,MAAA,QAAA,CAAS,GAAG,CAAA;AACZ,MAAA,SAAA,CAAU,MAAM,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,GAAG,CAAA;AAChD,MAAA,QAAA,CAAS,EAAE,CAAA;AACX,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAA,CAAAC,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAC,cAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,EAAA,EAAI,OAAA;AAAA,QACJ,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA,QAAA,EAAW,WAAW,CAAA,aAAA,CAAA;AAAA,QAC/C,IAAA,EAAK,MAAA;AAAA,QACL,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,UAAU,KAAA,CAAM,WAAA;AAAA,QAChB,UAAU,MAAA,KAAW,WAAA;AAAA,QACrB,QAAA,EAAU,UAAA;AAAA,QACV,KAAA,EAAO;AAAA;AAAA,KACT;AAAA,IACC,MAAA,KAAW,WAAA,oBACVF,eAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,kCAAA,EAAoC,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,EAAE,EAAG,QAAA,EAAA;AAAA,MAAA,YAAA;AAAA,MACxE,QAAA;AAAA,MAAS;AAAA,KAAA,EACtB,CAAA;AAAA,IAED,MAAA,KAAW,OAAA,oBACVE,cAAA,CAAC,GAAA,EAAA,EAAE,MAAK,OAAA,EAAQ,KAAA,EAAO,EAAE,KAAA,EAAO,4BAA4B,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,IAAK,QAAA,EAAA,8CAAA,EAE1F;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAGA,eAAe,eAAe,IAAA,EAA6B;AACzD,EAAA,MAAM,SACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,wBAAwB,sBAAA,GACxC,sBAAA;AACN,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,QAAA,EAAS;AAC1B,EAAA,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAGxB,EAAA,MAAM,WAAW,MAAMC,2BAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAAA,MAC7C;AAAA,KACF;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,OAAQ,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACpD,EAAA,IAAI,CAAC,MAAM,GAAA,EAAK;AACd,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,IAAA,CAAK,GAAA;AACd","file":"FileField-JK2S24XU.js","sourcesContent":["'use client'\n\n/**\n * File upload field — the one field type that cannot render on the server.\n *\n * It holds upload state and reads the browser-published credential globals, so\n * it lives here rather than in FormField.tsx. Pulling it out is what lets\n * FormField drop its `'use client'` directive and render inside a Server\n * Component (see StaticForm.tsx); a form WITHOUT a file field now ships no\n * field-rendering JavaScript at all.\n *\n * Uploads the chosen file to the Sonor API, which stores it and returns a\n * public URL — that URL becomes the field value, so large files never touch\n * the JSON submission body. The value stays empty until the upload succeeds,\n * so a required file field correctly blocks submission until the upload\n * completes (rather than submitting a useless bare filename).\n *\n * Note: forms containing a file field are NOT native-POST eligible (see\n * native-fallback.tsx) — a form-encoded POST cannot run this upload — so the\n * server shell renders a plain disabled-looking file input and the real\n * control arrives with the enhancement.\n */\n\nimport React from 'react'\nimport type { FormField as FormFieldType } from './types'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nexport interface FileFieldProps {\n  field: FormFieldType\n  inputId: string\n  classPrefix: string\n  baseInputStyle: React.CSSProperties\n  onChange: (value: unknown) => void\n}\n\nexport function FileField({\n  field,\n  inputId,\n  classPrefix,\n  baseInputStyle,\n  onChange,\n}: FileFieldProps) {\n  const [status, setStatus] = React.useState<'idle' | 'uploading' | 'error'>('idle')\n  const [fileName, setFileName] = React.useState('')\n\n  const handleFile = async (e: React.ChangeEvent<HTMLInputElement>) => {\n    const file = e.target.files?.[0]\n    if (!file) return\n    setFileName(file.name)\n    setStatus('uploading')\n    onChange('') // clear any prior URL until this upload completes\n    try {\n      const url = await uploadFormFile(file)\n      onChange(url)\n      setStatus('idle')\n    } catch (err) {\n      console.error('[Forms] File upload failed:', err)\n      onChange('')\n      setStatus('error')\n    }\n  }\n\n  return (\n    <>\n      <input\n        id={inputId}\n        className={`${classPrefix}__input ${classPrefix}__input--file`}\n        type=\"file\"\n        name={field.slug}\n        required={field.is_required}\n        disabled={status === 'uploading'}\n        onChange={handleFile}\n        style={baseInputStyle}\n      />\n      {status === 'uploading' && (\n        <p style={{ color: 'var(--sk-text-tertiary, #6b7280)', fontSize: 14, marginTop: 4 }}>\n          Uploading {fileName}…\n        </p>\n      )}\n      {status === 'error' && (\n        <p role=\"alert\" style={{ color: 'var(--sk-error, #dc2626)', fontSize: 14, marginTop: 4 }}>\n          Upload failed. Please choose the file again.\n        </p>\n      )}\n    </>\n  )\n}\n\n/** Upload a single file to the Sonor API and return its stored public URL. */\nasync function uploadFormFile(file: File): Promise<string> {\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  if (!apiKey) {\n    throw new Error('API key is required to upload files.')\n  }\n\n  const body = new FormData()\n  body.append('file', file)\n\n  // No Content-Type header — the browser sets the multipart boundary itself.\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/upload`,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${apiKey}` },\n      body,\n    },\n    { retries: 1, timeoutMs: 60000 },\n  )\n\n  if (!response.ok) {\n    throw new Error(`Upload failed (${response.status})`)\n  }\n  const data = (await response.json().catch(() => null)) as { url?: string } | null\n  if (!data?.url) {\n    throw new Error('Upload did not return a URL.')\n  }\n  return data.url\n}\n"]}

package/dist/{FileField-7DF2SLPF.mjs → FileField-OZZHWGPA.mjs}

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from './chunk-MIFP6QEQ.mjs';
-import './chunk-I4PDSDVE.mjs';
-import './chunk-7U7C6XRI.mjs';
+import { sonorFetch } from './chunk-OFSA7LUH.mjs';
+import './chunk-4XGACM7D.mjs';
+import './chunk-WDBCXRTT.mjs';
 import './chunk-BEXTDHO4.mjs';
 import React from 'react';
 import { jsxs, Fragment, jsx } from 'react/jsx-runtime';
@@ -81,5 +81,5 @@ async function uploadFormFile(file) {
 }
 
 export { FileField };
-//# sourceMappingURL=FileField-7DF2SLPF.mjs.map
-//# sourceMappingURL=FileField-7DF2SLPF.mjs.map
+//# sourceMappingURL=FileField-OZZHWGPA.mjs.map
+//# sourceMappingURL=FileField-OZZHWGPA.mjs.map

package/dist/{FileField-7DF2SLPF.mjs.map → FileField-OZZHWGPA.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/forms/FileField.tsx"],"names":[],"mappings":";;;;;;;AAmCO,SAAS,SAAA,CAAU;AAAA,EACxB,KAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA,EAAmB;AACjB,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,KAAA,CAAM,SAAyC,MAAM,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAI,KAAA,CAAM,SAAS,EAAE,CAAA;AAEjD,EAAA,MAAM,UAAA,GAAa,OAAO,CAAA,KAA2C;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA;AAC/B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,WAAA,CAAY,KAAK,IAAI,CAAA;AACrB,IAAA,SAAA,CAAU,WAAW,CAAA;AACrB,IAAA,QAAA,CAAS,EAAE,CAAA;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,cAAA,CAAe,IAAI,CAAA;AACrC,MAAA,QAAA,CAAS,GAAG,CAAA;AACZ,MAAA,SAAA,CAAU,MAAM,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,GAAG,CAAA;AAChD,MAAA,QAAA,CAAS,EAAE,CAAA;AACX,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AAEA,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAA,GAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,EAAA,EAAI,OAAA;AAAA,QACJ,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA,QAAA,EAAW,WAAW,CAAA,aAAA,CAAA;AAAA,QAC/C,IAAA,EAAK,MAAA;AAAA,QACL,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,UAAU,KAAA,CAAM,WAAA;AAAA,QAChB,UAAU,MAAA,KAAW,WAAA;AAAA,QACrB,QAAA,EAAU,UAAA;AAAA,QACV,KAAA,EAAO;AAAA;AAAA,KACT;AAAA,IACC,MAAA,KAAW,WAAA,oBACV,IAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,kCAAA,EAAoC,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,EAAE,EAAG,QAAA,EAAA;AAAA,MAAA,YAAA;AAAA,MACxE,QAAA;AAAA,MAAS;AAAA,KAAA,EACtB,CAAA;AAAA,IAED,MAAA,KAAW,OAAA,oBACV,GAAA,CAAC,GAAA,EAAA,EAAE,MAAK,OAAA,EAAQ,KAAA,EAAO,EAAE,KAAA,EAAO,4BAA4B,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,IAAK,QAAA,EAAA,8CAAA,EAE1F;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAGA,eAAe,eAAe,IAAA,EAA6B;AACzD,EAAA,MAAM,SACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,wBAAwB,sBAAA,GACxC,sBAAA;AACN,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,QAAA,EAAS;AAC1B,EAAA,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAGxB,EAAA,MAAM,WAAW,MAAM,UAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAAA,MAC7C;AAAA,KACF;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,OAAQ,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACpD,EAAA,IAAI,CAAC,MAAM,GAAA,EAAK;AACd,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,IAAA,CAAK,GAAA;AACd","file":"FileField-7DF2SLPF.mjs","sourcesContent":["'use client'\n\n/**\n * File upload field — the one field type that cannot render on the server.\n *\n * It holds upload state and reads the browser-published credential globals, so\n * it lives here rather than in FormField.tsx. Pulling it out is what lets\n * FormField drop its `'use client'` directive and render inside a Server\n * Component (see StaticForm.tsx); a form WITHOUT a file field now ships no\n * field-rendering JavaScript at all.\n *\n * Uploads the chosen file to the Sonor API, which stores it and returns a\n * public URL — that URL becomes the field value, so large files never touch\n * the JSON submission body. The value stays empty until the upload succeeds,\n * so a required file field correctly blocks submission until the upload\n * completes (rather than submitting a useless bare filename).\n *\n * Note: forms containing a file field are NOT native-POST eligible (see\n * native-fallback.tsx) — a form-encoded POST cannot run this upload — so the\n * server shell renders a plain disabled-looking file input and the real\n * control arrives with the enhancement.\n */\n\nimport React from 'react'\nimport type { FormField as FormFieldType } from './types'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nexport interface FileFieldProps {\n  field: FormFieldType\n  inputId: string\n  classPrefix: string\n  baseInputStyle: React.CSSProperties\n  onChange: (value: unknown) => void\n}\n\nexport function FileField({\n  field,\n  inputId,\n  classPrefix,\n  baseInputStyle,\n  onChange,\n}: FileFieldProps) {\n  const [status, setStatus] = React.useState<'idle' | 'uploading' | 'error'>('idle')\n  const [fileName, setFileName] = React.useState('')\n\n  const handleFile = async (e: React.ChangeEvent<HTMLInputElement>) => {\n    const file = e.target.files?.[0]\n    if (!file) return\n    setFileName(file.name)\n    setStatus('uploading')\n    onChange('') // clear any prior URL until this upload completes\n    try {\n      const url = await uploadFormFile(file)\n      onChange(url)\n      setStatus('idle')\n    } catch (err) {\n      console.error('[Forms] File upload failed:', err)\n      onChange('')\n      setStatus('error')\n    }\n  }\n\n  return (\n    <>\n      <input\n        id={inputId}\n        className={`${classPrefix}__input ${classPrefix}__input--file`}\n        type=\"file\"\n        name={field.slug}\n        required={field.is_required}\n        disabled={status === 'uploading'}\n        onChange={handleFile}\n        style={baseInputStyle}\n      />\n      {status === 'uploading' && (\n        <p style={{ color: 'var(--sk-text-tertiary, #6b7280)', fontSize: 14, marginTop: 4 }}>\n          Uploading {fileName}…\n        </p>\n      )}\n      {status === 'error' && (\n        <p role=\"alert\" style={{ color: 'var(--sk-error, #dc2626)', fontSize: 14, marginTop: 4 }}>\n          Upload failed. Please choose the file again.\n        </p>\n      )}\n    </>\n  )\n}\n\n/** Upload a single file to the Sonor API and return its stored public URL. */\nasync function uploadFormFile(file: File): Promise<string> {\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  if (!apiKey) {\n    throw new Error('API key is required to upload files.')\n  }\n\n  const body = new FormData()\n  body.append('file', file)\n\n  // No Content-Type header — the browser sets the multipart boundary itself.\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/upload`,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${apiKey}` },\n      body,\n    },\n    { retries: 1, timeoutMs: 60000 },\n  )\n\n  if (!response.ok) {\n    throw new Error(`Upload failed (${response.status})`)\n  }\n  const data = (await response.json().catch(() => null)) as { url?: string } | null\n  if (!data?.url) {\n    throw new Error('Upload did not return a URL.')\n  }\n  return data.url\n}\n"]}
+{"version":3,"sources":["../src/forms/FileField.tsx"],"names":[],"mappings":";;;;;;;AAmCO,SAAS,SAAA,CAAU;AAAA,EACxB,KAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA,EAAmB;AACjB,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,KAAA,CAAM,SAAyC,MAAM,CAAA;AACjF,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAI,KAAA,CAAM,SAAS,EAAE,CAAA;AAEjD,EAAA,MAAM,UAAA,GAAa,OAAO,CAAA,KAA2C;AACnE,IAAA,MAAM,IAAA,GAAO,CAAA,CAAE,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA;AAC/B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,WAAA,CAAY,KAAK,IAAI,CAAA;AACrB,IAAA,SAAA,CAAU,WAAW,CAAA;AACrB,IAAA,QAAA,CAAS,EAAE,CAAA;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,cAAA,CAAe,IAAI,CAAA;AACrC,MAAA,QAAA,CAAS,GAAG,CAAA;AACZ,MAAA,SAAA,CAAU,MAAM,CAAA;AAAA,IAClB,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,GAAG,CAAA;AAChD,MAAA,QAAA,CAAS,EAAE,CAAA;AACX,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,CAAA;AAEA,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAA,GAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,EAAA,EAAI,OAAA;AAAA,QACJ,SAAA,EAAW,CAAA,EAAG,WAAW,CAAA,QAAA,EAAW,WAAW,CAAA,aAAA,CAAA;AAAA,QAC/C,IAAA,EAAK,MAAA;AAAA,QACL,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,UAAU,KAAA,CAAM,WAAA;AAAA,QAChB,UAAU,MAAA,KAAW,WAAA;AAAA,QACrB,QAAA,EAAU,UAAA;AAAA,QACV,KAAA,EAAO;AAAA;AAAA,KACT;AAAA,IACC,MAAA,KAAW,WAAA,oBACV,IAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,kCAAA,EAAoC,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,EAAE,EAAG,QAAA,EAAA;AAAA,MAAA,YAAA;AAAA,MACxE,QAAA;AAAA,MAAS;AAAA,KAAA,EACtB,CAAA;AAAA,IAED,MAAA,KAAW,OAAA,oBACV,GAAA,CAAC,GAAA,EAAA,EAAE,MAAK,OAAA,EAAQ,KAAA,EAAO,EAAE,KAAA,EAAO,4BAA4B,QAAA,EAAU,EAAA,EAAI,SAAA,EAAW,CAAA,IAAK,QAAA,EAAA,8CAAA,EAE1F;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAGA,eAAe,eAAe,IAAA,EAA6B;AACzD,EAAA,MAAM,SACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,wBAAwB,sBAAA,GACxC,sBAAA;AACN,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,QAAA,EAAS;AAC1B,EAAA,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAGxB,EAAA,MAAM,WAAW,MAAM,UAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAAA,MAC7C;AAAA,KACF;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,OAAQ,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACpD,EAAA,IAAI,CAAC,MAAM,GAAA,EAAK;AACd,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,IAAA,CAAK,GAAA;AACd","file":"FileField-OZZHWGPA.mjs","sourcesContent":["'use client'\n\n/**\n * File upload field — the one field type that cannot render on the server.\n *\n * It holds upload state and reads the browser-published credential globals, so\n * it lives here rather than in FormField.tsx. Pulling it out is what lets\n * FormField drop its `'use client'` directive and render inside a Server\n * Component (see StaticForm.tsx); a form WITHOUT a file field now ships no\n * field-rendering JavaScript at all.\n *\n * Uploads the chosen file to the Sonor API, which stores it and returns a\n * public URL — that URL becomes the field value, so large files never touch\n * the JSON submission body. The value stays empty until the upload succeeds,\n * so a required file field correctly blocks submission until the upload\n * completes (rather than submitting a useless bare filename).\n *\n * Note: forms containing a file field are NOT native-POST eligible (see\n * native-fallback.tsx) — a form-encoded POST cannot run this upload — so the\n * server shell renders a plain disabled-looking file input and the real\n * control arrives with the enhancement.\n */\n\nimport React from 'react'\nimport type { FormField as FormFieldType } from './types'\nimport { sonorFetch } from '../shared/sonorFetch'\n\nexport interface FileFieldProps {\n  field: FormFieldType\n  inputId: string\n  classPrefix: string\n  baseInputStyle: React.CSSProperties\n  onChange: (value: unknown) => void\n}\n\nexport function FileField({\n  field,\n  inputId,\n  classPrefix,\n  baseInputStyle,\n  onChange,\n}: FileFieldProps) {\n  const [status, setStatus] = React.useState<'idle' | 'uploading' | 'error'>('idle')\n  const [fileName, setFileName] = React.useState('')\n\n  const handleFile = async (e: React.ChangeEvent<HTMLInputElement>) => {\n    const file = e.target.files?.[0]\n    if (!file) return\n    setFileName(file.name)\n    setStatus('uploading')\n    onChange('') // clear any prior URL until this upload completes\n    try {\n      const url = await uploadFormFile(file)\n      onChange(url)\n      setStatus('idle')\n    } catch (err) {\n      console.error('[Forms] File upload failed:', err)\n      onChange('')\n      setStatus('error')\n    }\n  }\n\n  return (\n    <>\n      <input\n        id={inputId}\n        className={`${classPrefix}__input ${classPrefix}__input--file`}\n        type=\"file\"\n        name={field.slug}\n        required={field.is_required}\n        disabled={status === 'uploading'}\n        onChange={handleFile}\n        style={baseInputStyle}\n      />\n      {status === 'uploading' && (\n        <p style={{ color: 'var(--sk-text-tertiary, #6b7280)', fontSize: 14, marginTop: 4 }}>\n          Uploading {fileName}…\n        </p>\n      )}\n      {status === 'error' && (\n        <p role=\"alert\" style={{ color: 'var(--sk-error, #dc2626)', fontSize: 14, marginTop: 4 }}>\n          Upload failed. Please choose the file again.\n        </p>\n      )}\n    </>\n  )\n}\n\n/** Upload a single file to the Sonor API and return its stored public URL. */\nasync function uploadFormFile(file: File): Promise<string> {\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  if (!apiKey) {\n    throw new Error('API key is required to upload files.')\n  }\n\n  const body = new FormData()\n  body.append('file', file)\n\n  // No Content-Type header — the browser sets the multipart boundary itself.\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/upload`,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${apiKey}` },\n      body,\n    },\n    { retries: 1, timeoutMs: 60000 },\n  )\n\n  if (!response.ok) {\n    throw new Error(`Upload failed (${response.status})`)\n  }\n  const data = (await response.json().catch(() => null)) as { url?: string } | null\n  if (!data?.url) {\n    throw new Error('Upload did not return a URL.')\n  }\n  return data.url\n}\n"]}

package/dist/{FormSpotlight-ZD3WR5BC.js → FormSpotlight-5AXFQU5M.js}

@@ -2,7 +2,7 @@
 'use strict';
 
 var chunkMVHR77V4_js = require('./chunk-MVHR77V4.js');
-var chunk7PLH3H3W_js = require('./chunk-7PLH3H3W.js');
+var chunkQ26VZNM2_js = require('./chunk-Q26VZNM2.js');
 var chunkIPV2TUAT_js = require('./chunk-IPV2TUAT.js');
 require('./chunk-SNAQBZPT.js');
 var react = require('react');
@@ -46,14 +46,14 @@ function renderCompletionTemplate(template, field, values) {
     if (token === "label") return field.label;
     if (token === "first_name") {
       const key = Object.keys(values).find((k) => /^first[_-]?name$/i.test(k));
-      return (key ? chunk7PLH3H3W_js.stageFirstName(values[key]) : null) || "";
+      return (key ? chunkQ26VZNM2_js.stageFirstName(values[key]) : null) || "";
     }
     return stringify(values[token]);
   }).replace(/\s{2,}/g, " ").trim();
 }
 function groupSentence(fields, values) {
   const val = (f) => values[f.slug];
-  const answered = fields.filter((f) => !chunk7PLH3H3W_js.isEmptyValue(val(f)));
+  const answered = fields.filter((f) => !chunkQ26VZNM2_js.isEmptyValue(val(f)));
   if (answered.length === 0) return null;
   for (const f of answered) {
     const template = f.completion_message?.trim();
@@ -68,14 +68,14 @@ function groupSentence(fields, values) {
   );
   if (firstNameField || anyNameField) {
     const source = firstNameField ?? anyNameField;
-    const name = chunk7PLH3H3W_js.stageFirstName(val(source));
+    const name = chunkQ26VZNM2_js.stageFirstName(val(source));
     if (name) return `Nice to meet you, ${name}.`;
   }
   const email = fields.find(
-    (f) => f.field_type === "email" && !chunk7PLH3H3W_js.isEmptyValue(val(f))
+    (f) => f.field_type === "email" && !chunkQ26VZNM2_js.isEmptyValue(val(f))
   );
   const phone = fields.find(
-    (f) => (f.field_type === "phone" || f.field_type === "tel") && !chunk7PLH3H3W_js.isEmptyValue(val(f))
+    (f) => (f.field_type === "phone" || f.field_type === "tel") && !chunkQ26VZNM2_js.isEmptyValue(val(f))
   );
   if (email && phone) return `We'll follow up at ${val(email)} or ${val(phone)}.`;
   if (email) return `We'll follow up at ${val(email)}.`;
@@ -253,9 +253,9 @@ function FormSpotlight({
   trackStepChange,
   honeypot
 }) {
-  const fieldControls = chunk7PLH3H3W_js.useFieldControls(config.fields);
+  const fieldControls = chunkQ26VZNM2_js.useFieldControls(config.fields);
   const views = react.useMemo(() => {
-    return chunk7PLH3H3W_js.stageViews(config).map((v) => ({ ...v, fields: v.fields.filter(isFieldVisible) })).filter((v) => v.fields.length > 0);
+    return chunkQ26VZNM2_js.stageViews(config).map((v) => ({ ...v, fields: v.fields.filter(isFieldVisible) })).filter((v) => v.fields.length > 0);
   }, [config, isFieldVisible]);
   const questions = react.useMemo(() => views.flatMap((v) => v.fields), [views]);
   const questionCount = questions.length;
@@ -277,8 +277,8 @@ function FormSpotlight({
   const activeGroup = activeSlug ? groupOf(activeSlug) : -1;
   const groupComplete = react.useCallback(
     (view) => view.fields.every(
-      (f) => fieldIsComplete(f) || !f.is_required && chunk7PLH3H3W_js.isEmptyValue(values[f.slug])
-    ) && view.fields.some((f) => !chunk7PLH3H3W_js.isEmptyValue(values[f.slug])),
+      (f) => fieldIsComplete(f) || !f.is_required && chunkQ26VZNM2_js.isEmptyValue(values[f.slug])
+    ) && view.fields.some((f) => !chunkQ26VZNM2_js.isEmptyValue(values[f.slug])),
     [fieldIsComplete, values]
   );
   const completeCount = questions.reduce((n, q) => n + (fieldIsComplete(q) ? 1 : 0), 0);
@@ -476,7 +476,7 @@ function FormSpotlight({
     (field, soloAutoAdvance) => (value) => {
       setLive(true);
       setFieldValue(field.slug, value);
-      if (soloAutoAdvance && !chunk7PLH3H3W_js.isEmptyValue(value)) {
+      if (soloAutoAdvance && !chunkQ26VZNM2_js.isEmptyValue(value)) {
         clearAutoTimer();
         autoTimer.current = window.setTimeout(() => {
           autoTimer.current = null;
@@ -591,7 +591,7 @@ function FormSpotlight({
         ),
         /* @__PURE__ */ jsxRuntime.jsxs("header", { className: "sk-stage__head", "data-sk-part": "stage-head", children: [
           /* @__PURE__ */ jsxRuntime.jsx("span", { className: "sk-stage__head-name", children: config.name }),
-          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "sk-stage__head-meta", "data-sk-part": "stage-estimate", children: `Takes ${chunk7PLH3H3W_js.stageEstimate(questionCount)}` })
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "sk-stage__head-meta", "data-sk-part": "stage-estimate", children: `Takes ${chunkQ26VZNM2_js.stageEstimate(questionCount)}` })
         ] }),
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sk-stage__hud", "data-sk-part": "stage-hud", children: [
           /* @__PURE__ */ jsxRuntime.jsx(
@@ -687,7 +687,7 @@ function FormSpotlight({
                               showValid: !!touched[f.slug] && !errors[f.slug] && fieldIsComplete(f),
                               onChange: handleFieldChange(
                                 f,
-                                view.fields.length === 1 && chunk7PLH3H3W_js.AUTO_ADVANCE_TYPES.includes(f.field_type)
+                                view.fields.length === 1 && chunkQ26VZNM2_js.AUTO_ADVANCE_TYPES.includes(f.field_type)
                               )
                             }
                           )
@@ -753,5 +753,5 @@ exports.FormSpotlight = FormSpotlight;
 exports.SpotStyles = SpotStyles;
 exports.groupSentence = groupSentence;
 exports.renderCompletionTemplate = renderCompletionTemplate;
-//# sourceMappingURL=FormSpotlight-ZD3WR5BC.js.map
-//# sourceMappingURL=FormSpotlight-ZD3WR5BC.js.map
+//# sourceMappingURL=FormSpotlight-5AXFQU5M.js.map
+//# sourceMappingURL=FormSpotlight-5AXFQU5M.js.map