@sonordev/site-kit 5.6.0 → 5.7.0

package/dist/{chunk-GJ6NOLGC.mjs.map → chunk-HBN4A2N4.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/forms/defaultSuccessMessage.ts","../src/forms/normalize-config.ts","../src/forms/recaptcha.ts","../src/forms/ga4-identity.ts","../src/forms/submitForm.ts"],"names":[],"mappings":";;;;AACO,IAAM,4BAAA,GACX;;;ACiBK,SAAS,oBAAoB,IAAA,EAA8B;AAChE,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAA,CAAY,EAAE,WAAA,IAAe,CAAA,KAAM,CAAA,CAAE,WAAA,IAAe,CAAA,CAAE,CAAA;AAAA,EACjF;AACA,EAAA,IAAI,KAAK,MAAA,EAAQ;AACf,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAA,CAAY,EAAE,UAAA,IAAc,CAAA,KAAM,CAAA,CAAE,UAAA,IAAc,CAAA,CAAE,CAAA;AAAA,EAChF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,EAAO,MAAA,IAAU,CAAA;AAC1C,EAAA,MAAM,gBAAgB,WAAA,GAAc,CAAA;AAEpC,EAAA,MAAM,UAAA,GACJ,OAAO,IAAA,CAAK,eAAA,KAAoB,WAAW,IAAA,CAAK,eAAA,CAAgB,MAAK,GAAI,EAAA;AAC3E,EAAA,MAAM,eAAA,GACJ,UAAA,KACC,OAAQ,IAAA,CAAqC,cAAA,KAAmB,QAAA,GAC7D,MAAA,CAAQ,IAAA,CAAqC,cAAc,CAAA,CAAE,IAAA,EAAK,GAClE,EAAA,CAAA,IACJ,4BAAA;AAEF,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,eAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACrCA,SAAS,WAAW,eAAA,EAA8C;AAChE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAA;AAC1C,EAAA,IAAI,iBAAiB,OAAO,eAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,MAAA;AACZ,EAAA,OAAO,GAAA,CAAI,+BAAA,IAAmC,OAAA,CAAQ,GAAA,CAAI,8BAAA;AAC5D;AAGA,IAAM,yBAAA,GAA4B,GAAA;AAElC,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,OAAA,CAAQ,IAAI,CAAA;AACZ,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,MAAA;AACZ,IAAA,IAAI,GAAA,CAAI,YAAY,UAAA,EAAY;AAC9B,MAAA,OAAA,CAAQ,IAAI,UAAU,CAAA;AACtB,MAAA;AAAA,IACF;AAKA,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,MAAA,GAAS,CAAC,KAAA,KAAe;AAC7B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,IACf,CAAA;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,GAAG,yBAAyB,CAAA;AAEvE,IAAA,MAAM,eAAe,MAAM;AACzB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,GAAA,CAAI,YAAY,UAAA,EAAY;AAC9B,QAAA,YAAA,CAAa,MAAM,CAAA;AACnB,QAAA,MAAA,CAAO,IAAI,UAAU,CAAA;AACrB,QAAA;AAAA,MACF;AACA,MAAA,UAAA,CAAW,cAAc,EAAE,CAAA;AAAA,IAC7B,CAAA;AAEA,IAAA,MAAM,QAAA,GAAW,QAAA,CAAS,aAAA,CAAc,qCAAqC,CAAA;AAC7E,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,YAAA,EAAa;AACb,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,GAAA,GAAM,yDAAyD,OAAO,CAAA,CAAA;AAC7E,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,MAAA,GAAS,MAAM,YAAA,EAAa;AACnC,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,YAAA,CAAa,MAAM,CAAA;AACnB,MAAA,MAAA,CAAO,IAAI,CAAA;AAAA,IACb,CAAA;AACA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC,CAAC,CAAA;AACH;AAMA,eAAsB,kBAAkB,eAAA,EAAkD;AACxF,EAAA,MAAM,OAAA,GAAU,WAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,IAAW,OAAO,MAAA,KAAW,aAAa,OAAO,IAAA;AACtD,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,MAAM,UAAA,CAAW,OAAO,CAAA;AAC3C,IAAA,IAAI,CAAC,UAAA,EAAY,UAAA,EAAY,OAAA,EAAS,OAAO,IAAA;AAK7C,IAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,WAAW,UAAA,CAAW,KAAA,CAAM,OAAO,CAAC,CAAA;AACzE,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AAC/E,IAAA,OAAO,KAAA,IAAS,IAAA;AAAA,EAClB,SAAS,GAAA,EAAK;AAGZ,IAAA,IAAI;AACF,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,GAAG,CAAC,CAAA;AACvD,MAAA,MAAM,GAAA,GAAM,MAAA;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AACnF,MAAA,OAAO,KAAA,IAAS,IAAA;AAAA,IAClB,SAAS,QAAA,EAAU;AACjB,MAAA,OAAA,CAAQ,IAAA,CAAK,wBAAwB,QAAQ,CAAA;AAC7C,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;;;ACpEA,SAAS,UAAA,CAAW,KAAa,IAAA,EAAkC;AACjE,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAC1D,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,IAAI,OAAO,CAAA,WAAA,EAAc,OAAO,UAAU,CAAC,CAAA;AACnE,EAAA,OAAO,KAAA,GAAQ,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,MAAA;AAChD;AAEO,SAAS,eAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,EAAC;AAC7C,EAAA,MAAM,GAAA,GAAM,SAAS,MAAA,IAAU,EAAA;AAC/B,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAC;AAElB,EAAA,MAAM,WAAwB,EAAC;AAK/B,EAAA,MAAM,EAAA,GAAK,UAAA,CAAW,GAAA,EAAK,KAAK,CAAA;AAChC,EAAA,IAAI,EAAA,EAAI;AACN,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,KAAA,CAAM,GAAG,CAAA;AAC1B,IAAA,IAAI,KAAA,CAAM,UAAU,CAAA,EAAG;AACrB,MAAA,MAAM,QAAA,GAAW,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA;AACtE,MAAA,IAAI,YAAA,CAAa,IAAA,CAAK,QAAQ,CAAA,WAAY,UAAA,GAAa,QAAA;AAAA,IACzD;AAAA,EACF;AAGA,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAK;AACxB,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAC7B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC/B,IAAA,MAAM,SAAA,GAAY,oBAAA,CAAqB,IAAA,CAAK,IAAI,IAAI,CAAC,CAAA;AACrD,IAAA,IAAI,CAAC,SAAA,EAAW;AAChB,IAAA,MAAM,KAAA,GAAQ,mBAAmB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAC,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA;AAChE,IAAA,IAAI,KAAA,CAAM,MAAA,IAAU,CAAA,IAAK,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA,EAAG,QAAA,CAAS,SAAS,CAAA,GAAI,MAAM,CAAC,CAAA;AAAA,EAChF;AACA,EAAA,IAAI,OAAO,IAAA,CAAK,QAAQ,EAAE,MAAA,GAAS,CAAA,WAAY,UAAA,GAAa,QAAA;AAE5D,EAAA,OAAO,QAAA;AACT;;;ACnDO,SAAS,YAAA,GAA+D;AAI7E,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,oBAAA,IAAwB,sBAAA,GACxC,OAAA,CAAQ,GAAA,CAAI,aAAA,IAAiB,OAAA,CAAQ,GAAA,CAAI,yBAAA,IAA6B,sBAAA;AAC5E,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC1B;AAEA,SAAS,YAAA,GAA8C;AACrD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,EAAC;AAC3C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,MAAA,CAAO,SAAS,MAAM,CAAA;AACzD,EAAA,MAAM,MAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,OAAO,CAAC,YAAA,EAAc,cAAc,cAAA,EAAgB,UAAA,EAAY,aAAa,CAAA,EAAG;AACzF,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,GAAA;AACT;AAoBA,eAAsB,UAAA,CAAW;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA,EAAqC;AACnC,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,YAAA,EAAa;AACxC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,EAC/E;AAGA,EAAA,MAAM,iBAAiB,MAAA,CAAO,iBAAA,GAC1B,MAAM,iBAAA,CAAkB,MAAA,CAAO,kBAAkB,CAAA,GACjD,IAAA;AACJ,EAAA,IAAI,MAAA,CAAO,iBAAA,IAAqB,CAAC,cAAA,EAAgB;AAC/C,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AAEA,EAAA,MAAM,iBAAA,GAAoB,OAAO,cAAA,IAAkB,sBAAA;AACnD,EAAA,MAAM,MAAM,YAAA,EAAa;AAIzB,EAAA,MAAM,MAAM,eAAA,EAAgB;AAE5B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,QAAQ,MAAA,CAAO,EAAA;AAAA,IACf,SAAS,MAAA,CAAO,EAAA;AAAA,IAChB,IAAA,EAAM;AAAA,MACJ,GAAG,MAAA;AAAA,MACH,GAAI,OAAO,gBAAA,GAAmB,EAAE,CAAC,iBAAiB,GAAG,aAAA,EAAc,GAAI;AAAC,KAC1E;AAAA,IACA,QAAA,EAAU;AAAA,MACR,SAAS,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,IAAA;AAAA,MAChE,UAAU,OAAO,QAAA,KAAa,WAAA,GAAc,QAAA,CAAS,YAAY,IAAA,GAAO,IAAA;AAAA,MACxE,SAAA,EAAW,OAAO,SAAA,KAAc,WAAA,GAAc,UAAU,SAAA,GAAY,IAAA;AAAA,MACpE,WACE,OAAO,cAAA,KAAmB,cAAc,cAAA,CAAe,OAAA,CAAQ,SAAS,CAAA,GAAI,IAAA;AAAA;AAAA;AAAA;AAAA,MAI9E,WACE,OAAO,YAAA,KAAiB,cAAc,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,GAAI,IAAA;AAAA,MAC1E,gBAAgB,cAAA,IAAkB,MAAA;AAAA,MAClC,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,aAAa,GAAA,CAAI,YAAA;AAAA,MACjB,SAAS,GAAA,CAAI,QAAA;AAAA,MACb,YAAY,GAAA,CAAI,WAAA;AAAA,MAChB,GAAG,GAAA;AAAA;AAAA;AAAA,MAGH,IAAA,EACE,OAAO,MAAA,KAAW,WAAA,GACb,OAA0C,iBAAA,IAC3C,MAAA,CAAO,SAAS,IAAA,GAChB,MAAA;AAAA,MACN,aAAA,EAAe;AAAA;AACjB,GACF;AAEA,EAAA,MAAM,WAAW,MAAM,UAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,aAAA,EAAe,UAAU,MAAM,CAAA;AAAA,OACjC;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,KAC9B;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,MAAM,OAAO,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAEnD,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAA,CACJ,IAAA,EAAM,OAAA,IACN,IAAA,EAAM,KAAA,KACL,QAAA,CAAS,UAAA,IAAc,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA,CAAA,EAE9C,QAAA,GACA,IAAA,EAAK;AACR,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,MAAM,CAAA,uBAAA,EAA0B,GAAG,CAAA,CAAA,GAAK,CAAA,uBAAA,EAA0B,SAAS,MAAM,CAAA,CAAA;AAAA,KACnF;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT","file":"chunk-GJ6NOLGC.mjs","sourcesContent":["/** Shown when the API omits or returns an empty `success_message`. */\nexport const DEFAULT_FORM_SUCCESS_MESSAGE =\n  'Thank you for your submission! We will be in touch soon.'\n","/**\n * Shared form-config normalizer — the ONE place a raw\n * /api/public/forms/config payload becomes a ManagedFormConfig.\n *\n * Deliberately has no `'use client'` directive and no hooks, so it is usable\n * from a Server Component (StaticForm) as well as from useForm's client\n * fetch. Both the server shell and the hydrated enhancement must agree on\n * field order, step count and success copy or the swap visibly jumps, so\n * there must never be a second copy of this.\n */\n\nimport type { ManagedFormConfig } from './types'\nimport { DEFAULT_FORM_SUCCESS_MESSAGE } from './defaultSuccessMessage'\n\n/**\n * Normalize a raw /api/public/forms/config payload into ManagedFormConfig.\n * Single source of truth — used for both the client fetch and server-provided\n * `initialForm`, so the two paths can never drift.\n */\nexport function normalizeFormConfig(data: any): ManagedFormConfig {\n  if (data.steps) {\n    data.steps.sort((a: any, b: any) => (a.step_number || 0) - (b.step_number || 0))\n  }\n  if (data.fields) {\n    data.fields.sort((a: any, b: any) => (a.sort_order || 0) - (b.sort_order || 0))\n  }\n\n  const total_steps = data.steps?.length || 1\n  const is_multi_step = total_steps > 1\n\n  const apiSuccess =\n    typeof data.success_message === 'string' ? data.success_message.trim() : ''\n  const success_message =\n    apiSuccess ||\n    (typeof (data as { successMessage?: string }).successMessage === 'string'\n      ? String((data as { successMessage?: string }).successMessage).trim()\n      : '') ||\n    DEFAULT_FORM_SUCCESS_MESSAGE\n\n  return {\n    ...data,\n    success_message,\n    total_steps,\n    is_multi_step,\n  }\n}\n","/**\n * reCAPTCHA Enterprise - Client-side token generation for site-kit forms\n *\n * Site key is read from:\n * - window.__SITE_KIT_RECAPTCHA_SITE_KEY__ (set by SiteKitLayout)\n * - process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY (when bundled in Next.js app)\n */\n\nfunction getSiteKey(explicitSiteKey?: string): string | undefined {\n  if (typeof window === 'undefined') return undefined\n  if (explicitSiteKey) return explicitSiteKey\n  const win = window as any\n  return win.__SITE_KIT_RECAPTCHA_SITE_KEY__ ?? process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY\n}\n\n/** Max time to wait for reCAPTCHA Enterprise to become usable before giving up. */\nconst RECAPTCHA_LOAD_TIMEOUT_MS = 10000\n\nfunction loadScript(siteKey: string): Promise<any> {\n  return new Promise((resolve) => {\n    if (typeof window === 'undefined') {\n      resolve(null)\n      return\n    }\n    const win = window as any\n    if (win.grecaptcha?.enterprise) {\n      resolve(win.grecaptcha)\n      return\n    }\n\n    // Never hang the form: if the script is blocked (ad-blocker), stalls, or\n    // never initializes `grecaptcha.enterprise`, resolve null after a timeout.\n    // The caller treats a null result as \"no token\" rather than waiting forever.\n    let settled = false\n    const finish = (value: any) => {\n      if (settled) return\n      settled = true\n      resolve(value)\n    }\n    const giveUp = setTimeout(() => finish(null), RECAPTCHA_LOAD_TIMEOUT_MS)\n\n    const waitForReady = () => {\n      if (settled) return\n      if (win.grecaptcha?.enterprise) {\n        clearTimeout(giveUp)\n        finish(win.grecaptcha)\n        return\n      }\n      setTimeout(waitForReady, 50)\n    }\n\n    const existing = document.querySelector('script[src*=\"recaptcha/enterprise\"]')\n    if (existing) {\n      waitForReady()\n      return\n    }\n\n    const script = document.createElement('script')\n    script.src = `https://www.google.com/recaptcha/enterprise.js?render=${siteKey}`\n    script.async = true\n    script.onload = () => waitForReady()\n    script.onerror = () => {\n      clearTimeout(giveUp)\n      finish(null)\n    }\n    document.head.appendChild(script)\n  })\n}\n\n/**\n * Get a reCAPTCHA Enterprise token for form submission.\n * Returns null if not configured or in SSR.\n */\nexport async function getRecaptchaToken(explicitSiteKey?: string): Promise<string | null> {\n  const siteKey = getSiteKey(explicitSiteKey)\n  if (!siteKey || typeof window === 'undefined') return null\n  try {\n    const grecaptcha = await loadScript(siteKey)\n    if (!grecaptcha?.enterprise?.execute) return null\n    // loadScript only waits for grecaptcha.enterprise to EXIST — execute()\n    // before enterprise.ready() rejects while the widget initializes (cold\n    // page load = every first-visit submitter). A swallowed rejection here\n    // means no token, and a requireRecaptcha project hard-rejects the lead.\n    await new Promise<void>((resolve) => grecaptcha.enterprise.ready(resolve))\n    const token = await grecaptcha.enterprise.execute(siteKey, { action: 'submit' })\n    return token || null\n  } catch (err) {\n    // One retry after a beat — first-execute flakes persist on slow devices\n    // even post-ready, and a dropped token is a dropped lead.\n    try {\n      await new Promise((resolve) => setTimeout(resolve, 800))\n      const win = window as any\n      const token = await win.grecaptcha.enterprise.execute(siteKey, { action: 'submit' })\n      return token || null\n    } catch (retryErr) {\n      console.warn('[site-kit reCAPTCHA]', retryErr)\n      return null\n    }\n  }\n}\n","/**\n * Reads the visitor's GA4 identity out of their own first-party cookies so a\n * lead conversion can be reported SERVER-side.\n *\n * Why the server has to do the reporting: Sonor's form-submit endpoint answers\n * with a byte-identical success payload whether it accepted a submission or\n * quarantined it as spam (deliberately — a bot must never learn it was\n * caught). So the browser cannot tell a real lead from a filtered one, and a\n * site firing its own ad conversion bills both. The accept/reject verdict only\n * exists on the server, so the conversion has to be sent from there — and to\n * send it, the server needs the GA4 identity that only the browser can see.\n *\n * Nothing here is a new identifier: these are cookies Google's own tag already\n * set on this visitor. We read them, we never write them.\n */\n\nexport interface Ga4Identity {\n  /** GA4 client id, from `_ga`. Without it a server-sent event has no identity. */\n  gaClientId?: string\n  /**\n   * GA4 session ids keyed by container id (the measurement id minus `G-`), from\n   * the `_ga_<CONTAINER>` cookies.\n   *\n   * A map rather than one value because a page may carry more than one GA4\n   * property, and picking the wrong one would silently attach the lead to the\n   * wrong session — the sender knows which measurement id it is configured for,\n   * this side does not.\n   */\n  gaSessions?: Record<string, string>\n}\n\nfunction readCookie(jar: string, name: string): string | undefined {\n  const escaped = name.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n  const match = jar.match(new RegExp(`(?:^|;\\\\s*)${escaped}=([^;]*)`))\n  return match ? decodeURIComponent(match[1]) : undefined\n}\n\nexport function readGa4Identity(): Ga4Identity {\n  if (typeof document === 'undefined') return {}\n  const jar = document.cookie || ''\n  if (!jar) return {}\n\n  const identity: Ga4Identity = {}\n\n  // `_ga` is `GA1.<depth>.<id1>.<id2>`; the client id is the last two parts\n  // joined. Reading the raw cookie rather than the trailing two segments\n  // blindly keeps it correct when the depth prefix varies by domain scope.\n  const ga = readCookie(jar, '_ga')\n  if (ga) {\n    const parts = ga.split('.')\n    if (parts.length >= 4) {\n      const clientId = `${parts[parts.length - 2]}.${parts[parts.length - 1]}`\n      if (/^\\d+\\.\\d+$/.test(clientId)) identity.gaClientId = clientId\n    }\n  }\n\n  // `_ga_<CONTAINER>` is `GS<v>.<depth>.<session_id>.<session_number>....`\n  const sessions: Record<string, string> = {}\n  for (const raw of jar.split(';')) {\n    const cookie = raw.trim()\n    const eq = cookie.indexOf('=')\n    if (eq < 0) continue\n    const name = cookie.slice(0, eq)\n    const container = /^_ga_([A-Z0-9]+)$/i.exec(name)?.[1]\n    if (!container) continue\n    const parts = decodeURIComponent(cookie.slice(eq + 1)).split('.')\n    if (parts.length >= 3 && /^\\d+$/.test(parts[2])) sessions[container] = parts[2]\n  }\n  if (Object.keys(sessions).length > 0) identity.gaSessions = sessions\n\n  return identity\n}\n","/**\n * @sonordev/site-kit/forms - Shared submission logic\n *\n * Single source of truth for sending a managed form to the Sonor API. Both\n * <ManagedForm> (via FormClient) and the headless useForm() hook submit through\n * here, so the request shape, retry behaviour, reCAPTCHA handling, and error\n * parsing can never drift between the two paths.\n */\n\nimport { sonorFetch } from '../shared/sonorFetch'\nimport { getRecaptchaToken } from './recaptcha'\nimport { DEFAULT_HONEYPOT_FIELD } from './contract'\nimport { readGa4Identity } from './ga4-identity'\nimport type { ManagedFormConfig } from './types'\n\n// The honeypot trap-field name lives once in the shared forms contract\n// (single source of truth for site-kit's client + sonor-api's intake).\n// Re-exported so existing importers of this path keep resolving it.\nexport { DEFAULT_HONEYPOT_FIELD }\n\nexport function getApiConfig(): { apiUrl: string; apiKey: string | undefined } {\n  // Server branch must honor the same env override SiteKitLayout feeds into\n  // __SITE_KIT_API_URL__, or SSR-rendered absolute URLs (the native form\n  // action) would point at prod from a staging site.\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : process.env.SONOR_API_URL || process.env.NEXT_PUBLIC_SONOR_API_URL || 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  return { apiUrl, apiKey }\n}\n\nfunction getUTMParams(): Record<string, string | null> {\n  if (typeof window === 'undefined') return {}\n  const params = new URLSearchParams(window.location.search)\n  const out: Record<string, string | null> = {}\n  for (const key of ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content']) {\n    out[key] = params.get(key)\n  }\n  return out\n}\n\nexport interface SubmitFormArgs {\n  config: ManagedFormConfig\n  /**\n   * Field values to submit. The caller must pass VISIBLE values only —\n   * conditionally-hidden fields should be excluded so stale values are not sent.\n   */\n  values: Record<string, unknown>\n  /** Honeypot input value (empty string for the headless hook, which has no honeypot UI). */\n  honeypotValue: string\n  /** Timestamp (ms) the form was first rendered — a weak anti-bot timing signal. */\n  formLoadedAt: number\n}\n\n/**\n * Submit a managed form. Throws on failure (network, timeout, or a non-2xx\n * response) with a human-readable message; resolves with the parsed API\n * response on success.\n */\nexport async function submitForm({\n  config,\n  values,\n  honeypotValue,\n  formLoadedAt,\n}: SubmitFormArgs): Promise<unknown> {\n  const { apiUrl, apiKey } = getApiConfig()\n  if (!apiKey) {\n    throw new Error('API key is required. Set SONOR_API_KEY in your environment.')\n  }\n\n  // reCAPTCHA token is fetched right before the POST so it cannot expire.\n  const recaptchaToken = config.recaptcha_enabled\n    ? await getRecaptchaToken(config.recaptcha_site_key)\n    : null\n  if (config.recaptcha_enabled && !recaptchaToken) {\n    throw new Error('Verification could not be completed. Please try again.')\n  }\n\n  const honeypotFieldName = config.honeypot_field || DEFAULT_HONEYPOT_FIELD\n  const utm = getUTMParams()\n  // The visitor's existing GA4 cookies, so Sonor can report an accepted lead\n  // as a conversion server-side. Nothing is written or created here — see\n  // ga4-identity.ts for why the server, not this browser, has to do it.\n  const ga4 = readGa4Identity()\n\n  const payload = {\n    formId: config.id,\n    form_id: config.id,\n    data: {\n      ...values,\n      ...(config.honeypot_enabled ? { [honeypotFieldName]: honeypotValue } : {}),\n    },\n    metadata: {\n      pageUrl: typeof window !== 'undefined' ? window.location.href : null,\n      referrer: typeof document !== 'undefined' ? document.referrer || null : null,\n      userAgent: typeof navigator !== 'undefined' ? navigator.userAgent : null,\n      sessionId:\n        typeof sessionStorage !== 'undefined' ? sessionStorage.getItem('_sk_sid') : null,\n      // Anonymous visitor id (_sk_vid) — the same id Analytics/Signal stamp on\n      // page views, so the Sonor side can bind this lead to its browsing session\n      // (page -> lead attribution). Sent on every submission; null pre-hydration.\n      visitorId:\n        typeof localStorage !== 'undefined' ? localStorage.getItem('_sk_vid') : null,\n      recaptchaToken: recaptchaToken || undefined,\n      utmSource: utm.utm_source,\n      utmMedium: utm.utm_medium,\n      utmCampaign: utm.utm_campaign,\n      utmTerm: utm.utm_term,\n      utmContent: utm.utm_content,\n      ...ga4,\n      // Sub-site host — preserved on form_submissions for lead attribution\n      // across multi-site projects. Resolved by SiteKitClientProviders.\n      site:\n        typeof window !== 'undefined'\n          ? (window as { __SITE_KIT_SITE__?: string }).__SITE_KIT_SITE__ ||\n            window.location.host\n          : undefined,\n      _formLoadedAt: formLoadedAt,\n    },\n  }\n\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/submit`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(payload),\n    },\n    { retries: 2, timeoutMs: 20000 },\n  )\n\n  const data = await response.json().catch(() => null)\n\n  if (!response.ok) {\n    const msg = (\n      data?.message ??\n      data?.error ??\n      (response.statusText || `HTTP ${response.status}`)\n    )\n      .toString()\n      .trim()\n    throw new Error(\n      msg ? `Failed to submit form: ${msg}` : `Failed to submit form (${response.status})`,\n    )\n  }\n\n  return data\n}\n"]}
+{"version":3,"sources":["../src/forms/defaultSuccessMessage.ts","../src/forms/normalize-config.ts","../src/forms/recaptcha.ts","../src/forms/ga4-identity.ts","../src/forms/submitForm.ts"],"names":[],"mappings":";;;;AACO,IAAM,4BAAA,GACX;;;ACiBK,SAAS,oBAAoB,IAAA,EAA8B;AAChE,EAAA,IAAI,KAAK,KAAA,EAAO;AACd,IAAA,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAA,CAAY,EAAE,WAAA,IAAe,CAAA,KAAM,CAAA,CAAE,WAAA,IAAe,CAAA,CAAE,CAAA;AAAA,EACjF;AACA,EAAA,IAAI,KAAK,MAAA,EAAQ;AACf,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAA,CAAY,EAAE,UAAA,IAAc,CAAA,KAAM,CAAA,CAAE,UAAA,IAAc,CAAA,CAAE,CAAA;AAAA,EAChF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,KAAA,EAAO,MAAA,IAAU,CAAA;AAC1C,EAAA,MAAM,gBAAgB,WAAA,GAAc,CAAA;AAEpC,EAAA,MAAM,UAAA,GACJ,OAAO,IAAA,CAAK,eAAA,KAAoB,WAAW,IAAA,CAAK,eAAA,CAAgB,MAAK,GAAI,EAAA;AAC3E,EAAA,MAAM,eAAA,GACJ,UAAA,KACC,OAAQ,IAAA,CAAqC,cAAA,KAAmB,QAAA,GAC7D,MAAA,CAAQ,IAAA,CAAqC,cAAc,CAAA,CAAE,IAAA,EAAK,GAClE,EAAA,CAAA,IACJ,4BAAA;AAEF,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,eAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;;;ACrCA,SAAS,WAAW,eAAA,EAA8C;AAChE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAA;AAC1C,EAAA,IAAI,iBAAiB,OAAO,eAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,MAAA;AACZ,EAAA,OAAO,GAAA,CAAI,+BAAA,IAAmC,OAAA,CAAQ,GAAA,CAAI,8BAAA;AAC5D;AAGA,IAAM,yBAAA,GAA4B,GAAA;AAElC,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,OAAA,CAAQ,IAAI,CAAA;AACZ,MAAA;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,MAAA;AACZ,IAAA,IAAI,GAAA,CAAI,YAAY,UAAA,EAAY;AAC9B,MAAA,OAAA,CAAQ,IAAI,UAAU,CAAA;AACtB,MAAA;AAAA,IACF;AAKA,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,MAAA,GAAS,CAAC,KAAA,KAAe;AAC7B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,IACf,CAAA;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,GAAG,yBAAyB,CAAA;AAEvE,IAAA,MAAM,eAAe,MAAM;AACzB,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,IAAI,GAAA,CAAI,YAAY,UAAA,EAAY;AAC9B,QAAA,YAAA,CAAa,MAAM,CAAA;AACnB,QAAA,MAAA,CAAO,IAAI,UAAU,CAAA;AACrB,QAAA;AAAA,MACF;AACA,MAAA,UAAA,CAAW,cAAc,EAAE,CAAA;AAAA,IAC7B,CAAA;AAEA,IAAA,MAAM,QAAA,GAAW,QAAA,CAAS,aAAA,CAAc,qCAAqC,CAAA;AAC7E,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,YAAA,EAAa;AACb,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,GAAA,GAAM,yDAAyD,OAAO,CAAA,CAAA;AAC7E,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,MAAA,GAAS,MAAM,YAAA,EAAa;AACnC,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,YAAA,CAAa,MAAM,CAAA;AACnB,MAAA,MAAA,CAAO,IAAI,CAAA;AAAA,IACb,CAAA;AACA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC,CAAC,CAAA;AACH;AAMA,eAAsB,kBAAkB,eAAA,EAAkD;AACxF,EAAA,MAAM,OAAA,GAAU,WAAW,eAAe,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,IAAW,OAAO,MAAA,KAAW,aAAa,OAAO,IAAA;AACtD,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,MAAM,UAAA,CAAW,OAAO,CAAA;AAC3C,IAAA,IAAI,CAAC,UAAA,EAAY,UAAA,EAAY,OAAA,EAAS,OAAO,IAAA;AAK7C,IAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,WAAW,UAAA,CAAW,KAAA,CAAM,OAAO,CAAC,CAAA;AACzE,IAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,CAAW,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AAC/E,IAAA,OAAO,KAAA,IAAS,IAAA;AAAA,EAClB,SAAS,GAAA,EAAK;AAGZ,IAAA,IAAI;AACF,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,GAAG,CAAC,CAAA;AACvD,MAAA,MAAM,GAAA,GAAM,MAAA;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,UAAA,CAAW,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AACnF,MAAA,OAAO,KAAA,IAAS,IAAA;AAAA,IAClB,SAAS,QAAA,EAAU;AACjB,MAAA,OAAA,CAAQ,IAAA,CAAK,wBAAwB,QAAQ,CAAA;AAC7C,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;;;ACpEA,SAAS,UAAA,CAAW,KAAa,IAAA,EAAkC;AACjE,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAC1D,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,IAAI,OAAO,CAAA,WAAA,EAAc,OAAO,UAAU,CAAC,CAAA;AACnE,EAAA,OAAO,KAAA,GAAQ,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,MAAA;AAChD;AAEO,SAAS,eAAA,GAA+B;AAC7C,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,EAAC;AAC7C,EAAA,MAAM,GAAA,GAAM,SAAS,MAAA,IAAU,EAAA;AAC/B,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAC;AAElB,EAAA,MAAM,WAAwB,EAAC;AAK/B,EAAA,MAAM,EAAA,GAAK,UAAA,CAAW,GAAA,EAAK,KAAK,CAAA;AAChC,EAAA,IAAI,EAAA,EAAI;AACN,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,KAAA,CAAM,GAAG,CAAA;AAC1B,IAAA,IAAI,KAAA,CAAM,UAAU,CAAA,EAAG;AACrB,MAAA,MAAM,QAAA,GAAW,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,KAAA,CAAM,MAAA,GAAS,CAAC,CAAC,CAAA,CAAA;AACtE,MAAA,IAAI,YAAA,CAAa,IAAA,CAAK,QAAQ,CAAA,WAAY,UAAA,GAAa,QAAA;AAAA,IACzD;AAAA,EACF;AAGA,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAK;AACxB,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAC7B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC/B,IAAA,MAAM,SAAA,GAAY,oBAAA,CAAqB,IAAA,CAAK,IAAI,IAAI,CAAC,CAAA;AACrD,IAAA,IAAI,CAAC,SAAA,EAAW;AAChB,IAAA,MAAM,KAAA,GAAQ,mBAAmB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAC,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA;AAChE,IAAA,IAAI,KAAA,CAAM,MAAA,IAAU,CAAA,IAAK,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA,EAAG,QAAA,CAAS,SAAS,CAAA,GAAI,MAAM,CAAC,CAAA;AAAA,EAChF;AACA,EAAA,IAAI,OAAO,IAAA,CAAK,QAAQ,EAAE,MAAA,GAAS,CAAA,WAAY,UAAA,GAAa,QAAA;AAE5D,EAAA,OAAO,QAAA;AACT;;;ACnDO,SAAS,YAAA,GAA+D;AAI7E,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GACb,MAAA,CAAe,oBAAA,IAAwB,sBAAA,GACxC,OAAA,CAAQ,GAAA,CAAI,aAAA,IAAiB,OAAA,CAAQ,GAAA,CAAI,yBAAA,IAA6B,sBAAA;AAC5E,EAAA,MAAM,MAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GAAe,OAAe,oBAAA,GAAuB,MAAA;AACzE,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC1B;AAEA,SAAS,YAAA,GAA8C;AACrD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,EAAC;AAC3C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,MAAA,CAAO,SAAS,MAAM,CAAA;AACzD,EAAA,MAAM,MAAqC,EAAC;AAC5C,EAAA,KAAA,MAAW,OAAO,CAAC,YAAA,EAAc,cAAc,cAAA,EAAgB,UAAA,EAAY,aAAa,CAAA,EAAG;AACzF,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,GAAA;AACT;AAoBA,eAAsB,UAAA,CAAW;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA,EAAqC;AACnC,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,YAAA,EAAa;AACxC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,EAC/E;AAGA,EAAA,MAAM,iBAAiB,MAAA,CAAO,iBAAA,GAC1B,MAAM,iBAAA,CAAkB,MAAA,CAAO,kBAAkB,CAAA,GACjD,IAAA;AACJ,EAAA,IAAI,MAAA,CAAO,iBAAA,IAAqB,CAAC,cAAA,EAAgB;AAC/C,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC1E;AAEA,EAAA,MAAM,iBAAA,GAAoB,OAAO,cAAA,IAAkB,sBAAA;AACnD,EAAA,MAAM,MAAM,YAAA,EAAa;AAIzB,EAAA,MAAM,MAAM,eAAA,EAAgB;AAE5B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,QAAQ,MAAA,CAAO,EAAA;AAAA,IACf,SAAS,MAAA,CAAO,EAAA;AAAA,IAChB,IAAA,EAAM;AAAA,MACJ,GAAG,MAAA;AAAA,MACH,GAAI,OAAO,gBAAA,GAAmB,EAAE,CAAC,iBAAiB,GAAG,aAAA,EAAc,GAAI;AAAC,KAC1E;AAAA,IACA,QAAA,EAAU;AAAA,MACR,SAAS,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,IAAA;AAAA,MAChE,UAAU,OAAO,QAAA,KAAa,WAAA,GAAc,QAAA,CAAS,YAAY,IAAA,GAAO,IAAA;AAAA,MACxE,SAAA,EAAW,OAAO,SAAA,KAAc,WAAA,GAAc,UAAU,SAAA,GAAY,IAAA;AAAA,MACpE,WACE,OAAO,cAAA,KAAmB,cAAc,cAAA,CAAe,OAAA,CAAQ,SAAS,CAAA,GAAI,IAAA;AAAA;AAAA;AAAA;AAAA,MAI9E,WACE,OAAO,YAAA,KAAiB,cAAc,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,GAAI,IAAA;AAAA,MAC1E,gBAAgB,cAAA,IAAkB,MAAA;AAAA,MAClC,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,aAAa,GAAA,CAAI,YAAA;AAAA,MACjB,SAAS,GAAA,CAAI,QAAA;AAAA,MACb,YAAY,GAAA,CAAI,WAAA;AAAA,MAChB,GAAG,GAAA;AAAA;AAAA;AAAA,MAGH,IAAA,EACE,OAAO,MAAA,KAAW,WAAA,GACb,OAA0C,iBAAA,IAC3C,MAAA,CAAO,SAAS,IAAA,GAChB,MAAA;AAAA,MACN,aAAA,EAAe;AAAA;AACjB,GACF;AAEA,EAAA,MAAM,WAAW,MAAM,UAAA;AAAA,IACrB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IACT;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,aAAA,EAAe,UAAU,MAAM,CAAA;AAAA,OACjC;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,KAC9B;AAAA,IACA,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,GAAA;AAAM,GACjC;AAEA,EAAA,MAAM,OAAO,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAEnD,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,GAAA,GAAA,CACJ,IAAA,EAAM,OAAA,IACN,IAAA,EAAM,KAAA,KACL,QAAA,CAAS,UAAA,IAAc,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA,CAAA,EAE9C,QAAA,GACA,IAAA,EAAK;AACR,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,MAAM,CAAA,uBAAA,EAA0B,GAAG,CAAA,CAAA,GAAK,CAAA,uBAAA,EAA0B,SAAS,MAAM,CAAA,CAAA;AAAA,KACnF;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT","file":"chunk-HBN4A2N4.mjs","sourcesContent":["/** Shown when the API omits or returns an empty `success_message`. */\nexport const DEFAULT_FORM_SUCCESS_MESSAGE =\n  'Thank you for your submission! We will be in touch soon.'\n","/**\n * Shared form-config normalizer — the ONE place a raw\n * /api/public/forms/config payload becomes a ManagedFormConfig.\n *\n * Deliberately has no `'use client'` directive and no hooks, so it is usable\n * from a Server Component (StaticForm) as well as from useForm's client\n * fetch. Both the server shell and the hydrated enhancement must agree on\n * field order, step count and success copy or the swap visibly jumps, so\n * there must never be a second copy of this.\n */\n\nimport type { ManagedFormConfig } from './types'\nimport { DEFAULT_FORM_SUCCESS_MESSAGE } from './defaultSuccessMessage'\n\n/**\n * Normalize a raw /api/public/forms/config payload into ManagedFormConfig.\n * Single source of truth — used for both the client fetch and server-provided\n * `initialForm`, so the two paths can never drift.\n */\nexport function normalizeFormConfig(data: any): ManagedFormConfig {\n  if (data.steps) {\n    data.steps.sort((a: any, b: any) => (a.step_number || 0) - (b.step_number || 0))\n  }\n  if (data.fields) {\n    data.fields.sort((a: any, b: any) => (a.sort_order || 0) - (b.sort_order || 0))\n  }\n\n  const total_steps = data.steps?.length || 1\n  const is_multi_step = total_steps > 1\n\n  const apiSuccess =\n    typeof data.success_message === 'string' ? data.success_message.trim() : ''\n  const success_message =\n    apiSuccess ||\n    (typeof (data as { successMessage?: string }).successMessage === 'string'\n      ? String((data as { successMessage?: string }).successMessage).trim()\n      : '') ||\n    DEFAULT_FORM_SUCCESS_MESSAGE\n\n  return {\n    ...data,\n    success_message,\n    total_steps,\n    is_multi_step,\n  }\n}\n","/**\n * reCAPTCHA Enterprise - Client-side token generation for site-kit forms\n *\n * Site key is read from:\n * - window.__SITE_KIT_RECAPTCHA_SITE_KEY__ (set by SiteKitLayout)\n * - process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY (when bundled in Next.js app)\n */\n\nfunction getSiteKey(explicitSiteKey?: string): string | undefined {\n  if (typeof window === 'undefined') return undefined\n  if (explicitSiteKey) return explicitSiteKey\n  const win = window as any\n  return win.__SITE_KIT_RECAPTCHA_SITE_KEY__ ?? process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY\n}\n\n/** Max time to wait for reCAPTCHA Enterprise to become usable before giving up. */\nconst RECAPTCHA_LOAD_TIMEOUT_MS = 10000\n\nfunction loadScript(siteKey: string): Promise<any> {\n  return new Promise((resolve) => {\n    if (typeof window === 'undefined') {\n      resolve(null)\n      return\n    }\n    const win = window as any\n    if (win.grecaptcha?.enterprise) {\n      resolve(win.grecaptcha)\n      return\n    }\n\n    // Never hang the form: if the script is blocked (ad-blocker), stalls, or\n    // never initializes `grecaptcha.enterprise`, resolve null after a timeout.\n    // The caller treats a null result as \"no token\" rather than waiting forever.\n    let settled = false\n    const finish = (value: any) => {\n      if (settled) return\n      settled = true\n      resolve(value)\n    }\n    const giveUp = setTimeout(() => finish(null), RECAPTCHA_LOAD_TIMEOUT_MS)\n\n    const waitForReady = () => {\n      if (settled) return\n      if (win.grecaptcha?.enterprise) {\n        clearTimeout(giveUp)\n        finish(win.grecaptcha)\n        return\n      }\n      setTimeout(waitForReady, 50)\n    }\n\n    const existing = document.querySelector('script[src*=\"recaptcha/enterprise\"]')\n    if (existing) {\n      waitForReady()\n      return\n    }\n\n    const script = document.createElement('script')\n    script.src = `https://www.google.com/recaptcha/enterprise.js?render=${siteKey}`\n    script.async = true\n    script.onload = () => waitForReady()\n    script.onerror = () => {\n      clearTimeout(giveUp)\n      finish(null)\n    }\n    document.head.appendChild(script)\n  })\n}\n\n/**\n * Get a reCAPTCHA Enterprise token for form submission.\n * Returns null if not configured or in SSR.\n */\nexport async function getRecaptchaToken(explicitSiteKey?: string): Promise<string | null> {\n  const siteKey = getSiteKey(explicitSiteKey)\n  if (!siteKey || typeof window === 'undefined') return null\n  try {\n    const grecaptcha = await loadScript(siteKey)\n    if (!grecaptcha?.enterprise?.execute) return null\n    // loadScript only waits for grecaptcha.enterprise to EXIST — execute()\n    // before enterprise.ready() rejects while the widget initializes (cold\n    // page load = every first-visit submitter). A swallowed rejection here\n    // means no token, and a requireRecaptcha project hard-rejects the lead.\n    await new Promise<void>((resolve) => grecaptcha.enterprise.ready(resolve))\n    const token = await grecaptcha.enterprise.execute(siteKey, { action: 'submit' })\n    return token || null\n  } catch (err) {\n    // One retry after a beat — first-execute flakes persist on slow devices\n    // even post-ready, and a dropped token is a dropped lead.\n    try {\n      await new Promise((resolve) => setTimeout(resolve, 800))\n      const win = window as any\n      const token = await win.grecaptcha.enterprise.execute(siteKey, { action: 'submit' })\n      return token || null\n    } catch (retryErr) {\n      console.warn('[site-kit reCAPTCHA]', retryErr)\n      return null\n    }\n  }\n}\n","/**\n * Reads the visitor's GA4 identity out of their own first-party cookies so a\n * lead conversion can be reported SERVER-side.\n *\n * Why the server has to do the reporting: Sonor's form-submit endpoint answers\n * with a byte-identical success payload whether it accepted a submission or\n * quarantined it as spam (deliberately — a bot must never learn it was\n * caught). So the browser cannot tell a real lead from a filtered one, and a\n * site firing its own ad conversion bills both. The accept/reject verdict only\n * exists on the server, so the conversion has to be sent from there — and to\n * send it, the server needs the GA4 identity that only the browser can see.\n *\n * Nothing here is a new identifier: these are cookies Google's own tag already\n * set on this visitor. We read them, we never write them.\n */\n\nexport interface Ga4Identity {\n  /** GA4 client id, from `_ga`. Without it a server-sent event has no identity. */\n  gaClientId?: string\n  /**\n   * GA4 session ids keyed by container id (the measurement id minus `G-`), from\n   * the `_ga_<CONTAINER>` cookies.\n   *\n   * A map rather than one value because a page may carry more than one GA4\n   * property, and picking the wrong one would silently attach the lead to the\n   * wrong session — the sender knows which measurement id it is configured for,\n   * this side does not.\n   */\n  gaSessions?: Record<string, string>\n}\n\nfunction readCookie(jar: string, name: string): string | undefined {\n  const escaped = name.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n  const match = jar.match(new RegExp(`(?:^|;\\\\s*)${escaped}=([^;]*)`))\n  return match ? decodeURIComponent(match[1]) : undefined\n}\n\nexport function readGa4Identity(): Ga4Identity {\n  if (typeof document === 'undefined') return {}\n  const jar = document.cookie || ''\n  if (!jar) return {}\n\n  const identity: Ga4Identity = {}\n\n  // `_ga` is `GA1.<depth>.<id1>.<id2>`; the client id is the last two parts\n  // joined. Reading the raw cookie rather than the trailing two segments\n  // blindly keeps it correct when the depth prefix varies by domain scope.\n  const ga = readCookie(jar, '_ga')\n  if (ga) {\n    const parts = ga.split('.')\n    if (parts.length >= 4) {\n      const clientId = `${parts[parts.length - 2]}.${parts[parts.length - 1]}`\n      if (/^\\d+\\.\\d+$/.test(clientId)) identity.gaClientId = clientId\n    }\n  }\n\n  // `_ga_<CONTAINER>` is `GS<v>.<depth>.<session_id>.<session_number>....`\n  const sessions: Record<string, string> = {}\n  for (const raw of jar.split(';')) {\n    const cookie = raw.trim()\n    const eq = cookie.indexOf('=')\n    if (eq < 0) continue\n    const name = cookie.slice(0, eq)\n    const container = /^_ga_([A-Z0-9]+)$/i.exec(name)?.[1]\n    if (!container) continue\n    const parts = decodeURIComponent(cookie.slice(eq + 1)).split('.')\n    if (parts.length >= 3 && /^\\d+$/.test(parts[2])) sessions[container] = parts[2]\n  }\n  if (Object.keys(sessions).length > 0) identity.gaSessions = sessions\n\n  return identity\n}\n","/**\n * @sonordev/site-kit/forms - Shared submission logic\n *\n * Single source of truth for sending a managed form to the Sonor API. Both\n * <ManagedForm> (via FormClient) and the headless useForm() hook submit through\n * here, so the request shape, retry behaviour, reCAPTCHA handling, and error\n * parsing can never drift between the two paths.\n */\n\nimport { sonorFetch } from '../shared/sonorFetch'\nimport { getRecaptchaToken } from './recaptcha'\nimport { DEFAULT_HONEYPOT_FIELD } from './contract'\nimport { readGa4Identity } from './ga4-identity'\nimport type { ManagedFormConfig } from './types'\n\n// The honeypot trap-field name lives once in the shared forms contract\n// (single source of truth for site-kit's client + sonor-api's intake).\n// Re-exported so existing importers of this path keep resolving it.\nexport { DEFAULT_HONEYPOT_FIELD }\n\nexport function getApiConfig(): { apiUrl: string; apiKey: string | undefined } {\n  // Server branch must honor the same env override SiteKitLayout feeds into\n  // __SITE_KIT_API_URL__, or SSR-rendered absolute URLs (the native form\n  // action) would point at prod from a staging site.\n  const apiUrl =\n    typeof window !== 'undefined'\n      ? (window as any).__SITE_KIT_API_URL__ || 'https://api.sonor.io'\n      : process.env.SONOR_API_URL || process.env.NEXT_PUBLIC_SONOR_API_URL || 'https://api.sonor.io'\n  const apiKey =\n    typeof window !== 'undefined' ? (window as any).__SITE_KIT_API_KEY__ : undefined\n  return { apiUrl, apiKey }\n}\n\nfunction getUTMParams(): Record<string, string | null> {\n  if (typeof window === 'undefined') return {}\n  const params = new URLSearchParams(window.location.search)\n  const out: Record<string, string | null> = {}\n  for (const key of ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content']) {\n    out[key] = params.get(key)\n  }\n  return out\n}\n\nexport interface SubmitFormArgs {\n  config: ManagedFormConfig\n  /**\n   * Field values to submit. The caller must pass VISIBLE values only —\n   * conditionally-hidden fields should be excluded so stale values are not sent.\n   */\n  values: Record<string, unknown>\n  /** Honeypot input value (empty string for the headless hook, which has no honeypot UI). */\n  honeypotValue: string\n  /** Timestamp (ms) the form was first rendered — a weak anti-bot timing signal. */\n  formLoadedAt: number\n}\n\n/**\n * Submit a managed form. Throws on failure (network, timeout, or a non-2xx\n * response) with a human-readable message; resolves with the parsed API\n * response on success.\n */\nexport async function submitForm({\n  config,\n  values,\n  honeypotValue,\n  formLoadedAt,\n}: SubmitFormArgs): Promise<unknown> {\n  const { apiUrl, apiKey } = getApiConfig()\n  if (!apiKey) {\n    throw new Error('API key is required. Set SONOR_API_KEY in your environment.')\n  }\n\n  // reCAPTCHA token is fetched right before the POST so it cannot expire.\n  const recaptchaToken = config.recaptcha_enabled\n    ? await getRecaptchaToken(config.recaptcha_site_key)\n    : null\n  if (config.recaptcha_enabled && !recaptchaToken) {\n    throw new Error('Verification could not be completed. Please try again.')\n  }\n\n  const honeypotFieldName = config.honeypot_field || DEFAULT_HONEYPOT_FIELD\n  const utm = getUTMParams()\n  // The visitor's existing GA4 cookies, so Sonor can report an accepted lead\n  // as a conversion server-side. Nothing is written or created here — see\n  // ga4-identity.ts for why the server, not this browser, has to do it.\n  const ga4 = readGa4Identity()\n\n  const payload = {\n    formId: config.id,\n    form_id: config.id,\n    data: {\n      ...values,\n      ...(config.honeypot_enabled ? { [honeypotFieldName]: honeypotValue } : {}),\n    },\n    metadata: {\n      pageUrl: typeof window !== 'undefined' ? window.location.href : null,\n      referrer: typeof document !== 'undefined' ? document.referrer || null : null,\n      userAgent: typeof navigator !== 'undefined' ? navigator.userAgent : null,\n      sessionId:\n        typeof sessionStorage !== 'undefined' ? sessionStorage.getItem('_sk_sid') : null,\n      // Anonymous visitor id (_sk_vid) — the same id Analytics/Signal stamp on\n      // page views, so the Sonor side can bind this lead to its browsing session\n      // (page -> lead attribution). Sent on every submission; null pre-hydration.\n      visitorId:\n        typeof localStorage !== 'undefined' ? localStorage.getItem('_sk_vid') : null,\n      recaptchaToken: recaptchaToken || undefined,\n      utmSource: utm.utm_source,\n      utmMedium: utm.utm_medium,\n      utmCampaign: utm.utm_campaign,\n      utmTerm: utm.utm_term,\n      utmContent: utm.utm_content,\n      ...ga4,\n      // Sub-site host — preserved on form_submissions for lead attribution\n      // across multi-site projects. Resolved by SiteKitClientProviders.\n      site:\n        typeof window !== 'undefined'\n          ? (window as { __SITE_KIT_SITE__?: string }).__SITE_KIT_SITE__ ||\n            window.location.host\n          : undefined,\n      _formLoadedAt: formLoadedAt,\n    },\n  }\n\n  const response = await sonorFetch(\n    `${apiUrl}/api/public/forms/submit`,\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${apiKey}`,\n      },\n      body: JSON.stringify(payload),\n    },\n    { retries: 2, timeoutMs: 20000 },\n  )\n\n  const data = await response.json().catch(() => null)\n\n  if (!response.ok) {\n    const msg = (\n      data?.message ??\n      data?.error ??\n      (response.statusText || `HTTP ${response.status}`)\n    )\n      .toString()\n      .trim()\n    throw new Error(\n      msg ? `Failed to submit form: ${msg}` : `Failed to submit form (${response.status})`,\n    )\n  }\n\n  return data\n}\n"]}

package/dist/{chunk-AJQI3WTN.mjs → chunk-ILNCUSXW.mjs}

@@ -118,5 +118,5 @@ function clearRedirectCache() {
 }
 
 export { SK_PATH_HEADER, clearRedirectCache, fetchRedirectRules, findRedirectMatch, generateNextRedirects, handleManagedRedirects, trackRedirectHit };
-//# sourceMappingURL=chunk-AJQI3WTN.mjs.map
-//# sourceMappingURL=chunk-AJQI3WTN.mjs.map
+//# sourceMappingURL=chunk-ILNCUSXW.mjs.map
+//# sourceMappingURL=chunk-ILNCUSXW.mjs.map

package/dist/{chunk-AJQI3WTN.mjs.map → chunk-ILNCUSXW.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/redirects/index.ts"],"names":[],"mappings":";;;AAmDA,IAAM,kBAAA,GAAqB,sBAAA;AAO3B,SAAS,SAAA,GAAgC;AACvC,EAAA,MAAM,GAAA,GAAM,OAAO,OAAA,KAAY,WAAA,IAAe,QAAQ,GAAA,GAAM,OAAA,CAAQ,IAAI,aAAA,GAAgB,MAAA;AACxF,EAAA,OAAO,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,GAAM,GAAA,GAAM,MAAA;AAChD;AACA,IAAM,wBAAA,GAA2B,GAAA;AAKjC,IAAM,mBAAA,GAAsB,GAAA;AAQrB,IAAM,cAAA,GAAiB;AAG9B,IAAM,UAAA,uBAAiB,GAAA,EAAuD;AAE9E,SAAS,mBAAA,CAAoB,QAA4B,MAAA,EAAoC;AAC3F,EAAA,IAAI,MAAA,EAAQ,OAAO,CAAA,IAAA,EAAO,MAAM,CAAA,CAAA;AAChC,EAAA,OAAO,CAAA,OAAA,EAAU,UAAU,EAAE,CAAA,CAAA;AAC/B;AAOA,eAAsB,mBAAmB,MAAA,EAAiD;AACxF,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,YAAA,GAAe,OAAO,YAAA,IAAgB,GAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AAEtD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,KAAW,OAAO,OAAA,KAAY,eAAe,OAAA,CAAQ,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,aAAA,GAAgB,MAAA,CAAA;AAC7G,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAW,QAAA,GAAW,MAAA,GAAS,MAAA;AACrD,EAAA,IAAI,SAAS,MAAA,CAAO,MAAA;AAEpB,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ;AACtB,IAAA,MAAM,aAAa,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,SAAS,CAAA;AAC1D,IAAA,MAAA,GAAS,UAAA,EAAY,MAAA;AAAA,EACvB;AAEA,EAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,MAAA,EAAQ,MAAM,CAAA;AACnD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AACtC,EAAA,IAAI,MAAA,IAAU,GAAA,GAAM,MAAA,CAAO,MAAA,EAAQ;AACjC,IAAA,OAAO,MAAA,CAAO,KAAA;AAAA,EAChB;AAEA,EAAA,IAAI;AACF,IAAA,IAAI,GAAA;AACJ,IAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAE7E,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,GAAA,GAAM,GAAG,OAAO,CAAA,yBAAA,CAAA;AAChB,MAAA,OAAA,CAAQ,WAAW,CAAA,GAAI,MAAA;AAAA,IACzB,WAAW,MAAA,EAAQ;AACjB,MAAA,GAAA,GAAM,CAAA,EAAG,OAAO,CAAA,iCAAA,EAAoC,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,IAChF,CAAA,MAAO;AACL,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,MAAM,SAAA,GAAY,OAAO,cAAA,IAAkB,wBAAA;AAG3C,IAAA,MAAM,MAAA,GACJ,OAAO,WAAA,KAAgB,WAAA,IAAe,OAAO,WAAA,CAAY,OAAA,KAAY,UAAA,GACjE,WAAA,CAAY,OAAA,CAAQ,SAAS,CAAA,GAC7B,KAAA,CAAA;AAEN,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,OAAA;AAAA,MACA,MAAA;AAAA;AAAA;AAAA,MAGA,IAAA,EAAM,EAAE,UAAA,EAAY,YAAA;AAAa,KAClC,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sCAAA,EAAyC,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACnE,MAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,MAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,IAC3B;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,MAAM,KAAA,GAAA,CAAS,KAAK,SAAA,IAAa,IAAI,MAAA,CAAO,CAAC,CAAA,KAAoB,CAAA,CAAE,UAAU,CAAA;AAC7E,IAAA,UAAA,CAAW,GAAA,CAAI,UAAU,EAAE,KAAA,EAAO,QAAQ,GAAA,GAAM,YAAA,GAAe,KAAM,CAAA;AACrE,IAAA,OAAO,KAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,IAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,EAC3B;AACF;AAOO,SAAS,iBAAA,CACd,UACA,KAAA,EAC0B;AAC1B,EAAA,OAAO,KAAA,CAAM,KAAK,CAAA,CAAA,KAAK;AACrB,IAAA,IAAI,CAAA,CAAE,SAAA,KAAc,QAAA,EAAU,OAAO,IAAA;AACrC,IAAA,MAAM,cAAA,GAAiB,CAAA,CAAE,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,GAAI,CAAA,CAAE,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,CAAA,CAAE,SAAA;AAChF,IAAA,MAAM,cAAA,GAAiB,SAAS,QAAA,CAAS,GAAG,IAAI,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,QAAA;AACxE,IAAA,OAAO,cAAA,KAAmB,cAAA;AAAA,EAC5B,CAAC,CAAA;AACH;AAMA,eAAsB,sBAAA,CACpB,SACA,MAAA,EACmC;AACnC,EAAA,MAAM,QAAA,GAAW,QAAQ,OAAA,CAAQ,QAAA;AAGjC,EAAA,IACE,QAAA,CAAS,UAAA,CAAW,QAAQ,CAAA,IAC5B,QAAA,CAAS,UAAA,CAAW,MAAM,CAAA,IAC1B,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EACrB;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,MAAM,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,QAAA,EAAU,KAAK,CAAA;AAE/C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,cAAc,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,QAAQ,GAAG,CAAA;AAGtD,EAAA,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,OAAA,CAAQ,CAAC,OAAO,GAAA,KAAQ;AACnD,IAAA,WAAA,CAAY,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACzC,CAAC,CAAA;AAGD,EAAA,gBAAA,CAAiB,QAAQ,KAAA,CAAM,SAAA,EAAW,OAAO,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAGvE,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,aAAa,CAAA;AAC/C,EAAA,OAAO,YAAA,CAAa,QAAA,CAAS,WAAA,EAAa,UAAU,CAAA;AACtD;AAMA,eAAsB,gBAAA,CAAiB,MAAA,EAAwB,QAAA,EAAkB,YAAA,EAAsC;AACrH,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AACtD,IAAA,MAAM,MAAA,GAAS,YAAA,IAAgB,MAAA,CAAO,MAAA,IAAA,CAAW,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,CAAA,GAAI,MAAA;AACnH,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,6BAAA,CAAA,EAAiC;AAAA,MACrD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,SAAA,EAAW,UAAU;AAAA,KACrD,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAmBA,eAAsB,sBAAsB,MAAA,EAIxC;AAGF,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,EAAE,cAAA,EAAgB,KAAQ,GAAG,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAG,CAAA;AAE7F,EAAA,OAAO,KAAA,CAAM,IAAI,CAAA,CAAA,MAAM;AAAA,IACrB,QAAQ,CAAA,CAAE,SAAA;AAAA,IACV,aAAa,CAAA,CAAE,OAAA;AAAA,IACf,SAAA,EAAW,CAAA,CAAE,aAAA,KAAkB,KAAA,IAAS,EAAE,aAAA,KAAkB;AAAA,GAC9D,CAAE,CAAA;AACJ;AAKO,SAAS,kBAAA,GAA2B;AACzC,EAAA,UAAA,CAAW,KAAA,EAAM;AACnB","file":"chunk-AJQI3WTN.mjs","sourcesContent":["/**\n * Managed Redirects - Next.js Middleware Helper\n * \n * Fetches redirect rules from Portal and applies them.\n * Supports API key only (domain resolved from Portal) or domain-based lookup.\n * \n * Usage in proxy.ts (API key only):\n * \n * import { handleManagedRedirects } from '@sonordev/site-kit/redirects'\n * \n * export default async function proxy(request: NextRequest) {\n *   const redirect = await handleManagedRedirects(request, {\n *     apiKey: process.env.SONOR_API_KEY,\n *     portalApiUrl: process.env.SONOR_API_URL,\n *   })\n *   if (redirect) return redirect\n *   return NextResponse.next()\n * }\n * \n * Or with domain (legacy):\n *   const redirect = await handleManagedRedirects(request, { domain: 'example.com' })\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { getSiteConfig } from '../site-config'\n\nexport interface RedirectRule {\n  from_path: string\n  to_path: string\n  redirect_type: '301' | '302' | '307' | '308'\n  is_enabled: boolean\n}\n\nexport interface RedirectConfig {\n  /** Domain to fetch redirects for (optional when apiKey is set) */\n  domain?: string\n  /** Project API key; when set, redirects are fetched by key (no domain needed) */\n  apiKey?: string\n  portalApiUrl?: string\n  cacheSeconds?: number\n  /**\n   * Hard ceiling on the rules fetch, in ms. Default 300.\n   *\n   * This fetch can sit in front of HTML (proxy hot path / not-found render),\n   * and without a bound a *slow* Portal becomes every page's TTFB — the\n   * try/catch only fails open on error, not on slow. Build-time callers\n   * (generateNextRedirects) pass a larger value.\n   */\n  fetchTimeoutMs?: number\n}\n\nconst DEFAULT_PORTAL_URL = 'https://api.sonor.io'\n\n/**\n * Env parity with the API key: SONOR_API_URL was honored for the key's\n * sibling everywhere else in the kit but ignored here, so sites overriding\n * the API URL by env silently fetched redirect rules from production.\n */\nfunction envApiUrl(): string | undefined {\n  const raw = typeof process !== 'undefined' && process.env ? process.env.SONOR_API_URL : undefined\n  return typeof raw === 'string' && raw ? raw : undefined\n}\nconst DEFAULT_FETCH_TIMEOUT_MS = 300\n/**\n * After a failed fetch, don't re-hit the API for this long. Without this a\n * cold instance with a down Portal pays the full timeout on EVERY request.\n */\nconst FAILURE_COOLDOWN_MS = 30_000\n\n/**\n * Request header the site-kit proxy stamps with `pathname + search` so the\n * not-found boundary (which receives no URL from Next) can know what was\n * requested. Single source of truth — used by createProxy and\n * resolveManagedRedirect.\n */\nexport const SK_PATH_HEADER = 'x-sk-path'\n\n// Cache for redirect rules keyed by apiKey or 'domain:'+domain\nconst rulesCache = new Map<string, { rules: RedirectRule[]; expiry: number }>()\n\nfunction getRedirectCacheKey(apiKey: string | undefined, domain: string | undefined): string {\n  if (apiKey) return `key:${apiKey}`\n  return `domain:${domain || ''}`\n}\n\n/**\n * Fetch redirect rules from Portal API.\n * When apiKey is set (or from env), uses key-based endpoint (no domain required).\n * Otherwise uses domain query (or domain from getSiteConfig when only env API key is set).\n */\nexport async function fetchRedirectRules(config: RedirectConfig): Promise<RedirectRule[]> {\n  const now = Date.now()\n  const cacheSeconds = config.cacheSeconds ?? 300\n  const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n\n  const rawKey = config.apiKey ?? (typeof process !== 'undefined' && process.env ? process.env.SONOR_API_KEY : undefined)\n  const apiKey = typeof rawKey === 'string' ? rawKey : undefined\n  let domain = config.domain\n\n  if (!apiKey && !domain) {\n    const siteConfig = await getSiteConfig({ apiUrl: baseUrl })\n    domain = siteConfig?.domain\n  }\n\n  const cacheKey = getRedirectCacheKey(apiKey, domain)\n  const cached = rulesCache.get(cacheKey)\n  if (cached && now < cached.expiry) {\n    return cached.rules\n  }\n\n  try {\n    let url: string\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' }\n\n    if (apiKey) {\n      url = `${baseUrl}/api/public/seo/redirects`\n      headers['x-api-key'] = apiKey\n    } else if (domain) {\n      url = `${baseUrl}/api/public/seo/redirects?domain=${encodeURIComponent(domain)}`\n    } else {\n      return []\n    }\n\n    const timeoutMs = config.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS\n    // Guarded like every other web API here (see shared/identity): AbortSignal\n    // .timeout is Node 17.3+/modern edge; when absent we just fetch unbounded.\n    const signal =\n      typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n        ? AbortSignal.timeout(timeoutMs)\n        : undefined\n\n    const res = await fetch(url, {\n      headers,\n      signal,\n      // No-op in proxy (outside the data cache) but real in RSC renders,\n      // where the not-found resolver runs.\n      next: { revalidate: cacheSeconds },\n    })\n\n    if (!res.ok) {\n      console.error(`[site-kit] Failed to fetch redirects: ${res.status}`)\n      rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n      return cached?.rules ?? []\n    }\n\n    const data = await res.json()\n    const rules = (data.redirects || []).filter((r: RedirectRule) => r.is_enabled)\n    rulesCache.set(cacheKey, { rules, expiry: now + cacheSeconds * 1000 })\n    return rules\n  } catch (error) {\n    console.error('[site-kit] Error fetching redirects:', error)\n    rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n    return cached?.rules ?? []\n  }\n}\n\n/**\n * Find the rule matching a pathname (exact, tolerating trailing-slash\n * variance). Single source of truth for match semantics — used by the proxy\n * hot path and the not-found resolver. Do not re-fork.\n */\nexport function findRedirectMatch(\n  pathname: string,\n  rules: RedirectRule[],\n): RedirectRule | undefined {\n  return rules.find(r => {\n    if (r.from_path === pathname) return true\n    const normalizedFrom = r.from_path.endsWith('/') ? r.from_path.slice(0, -1) : r.from_path\n    const normalizedPath = pathname.endsWith('/') ? pathname.slice(0, -1) : pathname\n    return normalizedFrom === normalizedPath\n  })\n}\n\n/**\n * Handle managed redirects in middleware\n * Returns a NextResponse.redirect if a match is found, otherwise undefined\n */\nexport async function handleManagedRedirects(\n  request: NextRequest,\n  config: RedirectConfig,\n): Promise<NextResponse | undefined> {\n  const pathname = request.nextUrl.pathname\n  \n  // Skip for static assets and API routes\n  if (\n    pathname.startsWith('/_next') ||\n    pathname.startsWith('/api') ||\n    pathname.includes('.') // Has file extension\n  ) {\n    return undefined\n  }\n\n  const rules = await fetchRedirectRules(config)\n  const match = findRedirectMatch(pathname, rules)\n\n  if (!match) {\n    return undefined\n  }\n\n  // Build redirect URL\n  const redirectUrl = new URL(match.to_path, request.url)\n  \n  // Preserve query params\n  request.nextUrl.searchParams.forEach((value, key) => {\n    redirectUrl.searchParams.set(key, value)\n  })\n\n  // Track hit (fire and forget); domain may be from config or resolved by apiKey\n  trackRedirectHit(config, match.from_path, config.domain).catch(() => {})\n\n  // Return redirect response\n  const statusCode = parseInt(match.redirect_type) as 301 | 302 | 307 | 308\n  return NextResponse.redirect(redirectUrl, statusCode)\n}\n\n/**\n * Track redirect hit for analytics (needs domain; resolved from config or getSiteConfig when using apiKey)\n * Exported for the not-found resolver — fire-and-forget, never throws.\n */\nexport async function trackRedirectHit(config: RedirectConfig, fromPath: string, domainForHit?: string): Promise<void> {\n  try {\n    const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n    const domain = domainForHit ?? config.domain ?? (await getSiteConfig({ apiKey: config.apiKey, apiUrl: baseUrl }))?.domain\n    if (!domain) return\n    await fetch(`${baseUrl}/api/public/seo/redirects/hit`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ domain, from_path: fromPath }),\n    })\n  } catch {\n    // Ignore tracking errors\n  }\n}\n\n/**\n * Generate Next.js redirects config from Portal\n * Use this in next.config.js for build-time redirects\n * \n * Usage in next.config.js:\n * \n * const { generateNextRedirects } = require('@sonordev/site-kit/redirects')\n * \n * module.exports = {\n *   async redirects() {\n *     return generateNextRedirects({\n *       domain: 'example.com',\n *       portalApiUrl: process.env.PORTAL_API_URL,\n *     })\n *   }\n * }\n */\nexport async function generateNextRedirects(config: RedirectConfig): Promise<Array<{\n  source: string\n  destination: string\n  permanent: boolean\n}>> {\n  // Build-time: nothing is waiting on this response, so allow a generous\n  // timeout instead of the request-path default.\n  const rules = await fetchRedirectRules({ fetchTimeoutMs: 10_000, ...config, cacheSeconds: 0 })\n  \n  return rules.map(r => ({\n    source: r.from_path,\n    destination: r.to_path,\n    permanent: r.redirect_type === '301' || r.redirect_type === '308',\n  }))\n}\n\n/**\n * Clear redirect cache (useful for development)\n */\nexport function clearRedirectCache(): void {\n  rulesCache.clear()\n}\n"]}
+{"version":3,"sources":["../src/redirects/index.ts"],"names":[],"mappings":";;;AAmDA,IAAM,kBAAA,GAAqB,sBAAA;AAO3B,SAAS,SAAA,GAAgC;AACvC,EAAA,MAAM,GAAA,GAAM,OAAO,OAAA,KAAY,WAAA,IAAe,QAAQ,GAAA,GAAM,OAAA,CAAQ,IAAI,aAAA,GAAgB,MAAA;AACxF,EAAA,OAAO,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,GAAM,GAAA,GAAM,MAAA;AAChD;AACA,IAAM,wBAAA,GAA2B,GAAA;AAKjC,IAAM,mBAAA,GAAsB,GAAA;AAQrB,IAAM,cAAA,GAAiB;AAG9B,IAAM,UAAA,uBAAiB,GAAA,EAAuD;AAE9E,SAAS,mBAAA,CAAoB,QAA4B,MAAA,EAAoC;AAC3F,EAAA,IAAI,MAAA,EAAQ,OAAO,CAAA,IAAA,EAAO,MAAM,CAAA,CAAA;AAChC,EAAA,OAAO,CAAA,OAAA,EAAU,UAAU,EAAE,CAAA,CAAA;AAC/B;AAOA,eAAsB,mBAAmB,MAAA,EAAiD;AACxF,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,YAAA,GAAe,OAAO,YAAA,IAAgB,GAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AAEtD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,KAAW,OAAO,OAAA,KAAY,eAAe,OAAA,CAAQ,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,aAAA,GAAgB,MAAA,CAAA;AAC7G,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAW,QAAA,GAAW,MAAA,GAAS,MAAA;AACrD,EAAA,IAAI,SAAS,MAAA,CAAO,MAAA;AAEpB,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ;AACtB,IAAA,MAAM,aAAa,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,SAAS,CAAA;AAC1D,IAAA,MAAA,GAAS,UAAA,EAAY,MAAA;AAAA,EACvB;AAEA,EAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,MAAA,EAAQ,MAAM,CAAA;AACnD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AACtC,EAAA,IAAI,MAAA,IAAU,GAAA,GAAM,MAAA,CAAO,MAAA,EAAQ;AACjC,IAAA,OAAO,MAAA,CAAO,KAAA;AAAA,EAChB;AAEA,EAAA,IAAI;AACF,IAAA,IAAI,GAAA;AACJ,IAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAE7E,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,GAAA,GAAM,GAAG,OAAO,CAAA,yBAAA,CAAA;AAChB,MAAA,OAAA,CAAQ,WAAW,CAAA,GAAI,MAAA;AAAA,IACzB,WAAW,MAAA,EAAQ;AACjB,MAAA,GAAA,GAAM,CAAA,EAAG,OAAO,CAAA,iCAAA,EAAoC,kBAAA,CAAmB,MAAM,CAAC,CAAA,CAAA;AAAA,IAChF,CAAA,MAAO;AACL,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,MAAM,SAAA,GAAY,OAAO,cAAA,IAAkB,wBAAA;AAG3C,IAAA,MAAM,MAAA,GACJ,OAAO,WAAA,KAAgB,WAAA,IAAe,OAAO,WAAA,CAAY,OAAA,KAAY,UAAA,GACjE,WAAA,CAAY,OAAA,CAAQ,SAAS,CAAA,GAC7B,KAAA,CAAA;AAEN,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,OAAA;AAAA,MACA,MAAA;AAAA;AAAA;AAAA,MAGA,IAAA,EAAM,EAAE,UAAA,EAAY,YAAA;AAAa,KAClC,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sCAAA,EAAyC,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACnE,MAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,MAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,IAC3B;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,MAAM,KAAA,GAAA,CAAS,KAAK,SAAA,IAAa,IAAI,MAAA,CAAO,CAAC,CAAA,KAAoB,CAAA,CAAE,UAAU,CAAA;AAC7E,IAAA,UAAA,CAAW,GAAA,CAAI,UAAU,EAAE,KAAA,EAAO,QAAQ,GAAA,GAAM,YAAA,GAAe,KAAM,CAAA;AACrE,IAAA,OAAO,KAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,IAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,EAC3B;AACF;AAOO,SAAS,iBAAA,CACd,UACA,KAAA,EAC0B;AAC1B,EAAA,OAAO,KAAA,CAAM,KAAK,CAAA,CAAA,KAAK;AACrB,IAAA,IAAI,CAAA,CAAE,SAAA,KAAc,QAAA,EAAU,OAAO,IAAA;AACrC,IAAA,MAAM,cAAA,GAAiB,CAAA,CAAE,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,GAAI,CAAA,CAAE,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,CAAA,CAAE,SAAA;AAChF,IAAA,MAAM,cAAA,GAAiB,SAAS,QAAA,CAAS,GAAG,IAAI,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,QAAA;AACxE,IAAA,OAAO,cAAA,KAAmB,cAAA;AAAA,EAC5B,CAAC,CAAA;AACH;AAMA,eAAsB,sBAAA,CACpB,SACA,MAAA,EACmC;AACnC,EAAA,MAAM,QAAA,GAAW,QAAQ,OAAA,CAAQ,QAAA;AAGjC,EAAA,IACE,QAAA,CAAS,UAAA,CAAW,QAAQ,CAAA,IAC5B,QAAA,CAAS,UAAA,CAAW,MAAM,CAAA,IAC1B,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EACrB;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,MAAM,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,QAAA,EAAU,KAAK,CAAA;AAE/C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,cAAc,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,QAAQ,GAAG,CAAA;AAGtD,EAAA,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,OAAA,CAAQ,CAAC,OAAO,GAAA,KAAQ;AACnD,IAAA,WAAA,CAAY,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACzC,CAAC,CAAA;AAGD,EAAA,gBAAA,CAAiB,QAAQ,KAAA,CAAM,SAAA,EAAW,OAAO,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAGvE,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,aAAa,CAAA;AAC/C,EAAA,OAAO,YAAA,CAAa,QAAA,CAAS,WAAA,EAAa,UAAU,CAAA;AACtD;AAMA,eAAsB,gBAAA,CAAiB,MAAA,EAAwB,QAAA,EAAkB,YAAA,EAAsC;AACrH,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AACtD,IAAA,MAAM,MAAA,GAAS,YAAA,IAAgB,MAAA,CAAO,MAAA,IAAA,CAAW,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,CAAA,GAAI,MAAA;AACnH,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,6BAAA,CAAA,EAAiC;AAAA,MACrD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,SAAA,EAAW,UAAU;AAAA,KACrD,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAmBA,eAAsB,sBAAsB,MAAA,EAIxC;AAGF,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,EAAE,cAAA,EAAgB,KAAQ,GAAG,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAG,CAAA;AAE7F,EAAA,OAAO,KAAA,CAAM,IAAI,CAAA,CAAA,MAAM;AAAA,IACrB,QAAQ,CAAA,CAAE,SAAA;AAAA,IACV,aAAa,CAAA,CAAE,OAAA;AAAA,IACf,SAAA,EAAW,CAAA,CAAE,aAAA,KAAkB,KAAA,IAAS,EAAE,aAAA,KAAkB;AAAA,GAC9D,CAAE,CAAA;AACJ;AAKO,SAAS,kBAAA,GAA2B;AACzC,EAAA,UAAA,CAAW,KAAA,EAAM;AACnB","file":"chunk-ILNCUSXW.mjs","sourcesContent":["/**\n * Managed Redirects - Next.js Middleware Helper\n * \n * Fetches redirect rules from Portal and applies them.\n * Supports API key only (domain resolved from Portal) or domain-based lookup.\n * \n * Usage in proxy.ts (API key only):\n * \n * import { handleManagedRedirects } from '@sonordev/site-kit/redirects'\n * \n * export default async function proxy(request: NextRequest) {\n *   const redirect = await handleManagedRedirects(request, {\n *     apiKey: process.env.SONOR_API_KEY,\n *     portalApiUrl: process.env.SONOR_API_URL,\n *   })\n *   if (redirect) return redirect\n *   return NextResponse.next()\n * }\n * \n * Or with domain (legacy):\n *   const redirect = await handleManagedRedirects(request, { domain: 'example.com' })\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { getSiteConfig } from '../site-config'\n\nexport interface RedirectRule {\n  from_path: string\n  to_path: string\n  redirect_type: '301' | '302' | '307' | '308'\n  is_enabled: boolean\n}\n\nexport interface RedirectConfig {\n  /** Domain to fetch redirects for (optional when apiKey is set) */\n  domain?: string\n  /** Project API key; when set, redirects are fetched by key (no domain needed) */\n  apiKey?: string\n  portalApiUrl?: string\n  cacheSeconds?: number\n  /**\n   * Hard ceiling on the rules fetch, in ms. Default 300.\n   *\n   * This fetch can sit in front of HTML (proxy hot path / not-found render),\n   * and without a bound a *slow* Portal becomes every page's TTFB — the\n   * try/catch only fails open on error, not on slow. Build-time callers\n   * (generateNextRedirects) pass a larger value.\n   */\n  fetchTimeoutMs?: number\n}\n\nconst DEFAULT_PORTAL_URL = 'https://api.sonor.io'\n\n/**\n * Env parity with the API key: SONOR_API_URL was honored for the key's\n * sibling everywhere else in the kit but ignored here, so sites overriding\n * the API URL by env silently fetched redirect rules from production.\n */\nfunction envApiUrl(): string | undefined {\n  const raw = typeof process !== 'undefined' && process.env ? process.env.SONOR_API_URL : undefined\n  return typeof raw === 'string' && raw ? raw : undefined\n}\nconst DEFAULT_FETCH_TIMEOUT_MS = 300\n/**\n * After a failed fetch, don't re-hit the API for this long. Without this a\n * cold instance with a down Portal pays the full timeout on EVERY request.\n */\nconst FAILURE_COOLDOWN_MS = 30_000\n\n/**\n * Request header the site-kit proxy stamps with `pathname + search` so the\n * not-found boundary (which receives no URL from Next) can know what was\n * requested. Single source of truth — used by createProxy and the deprecated\n * resolveManagedRedirect.\n */\nexport const SK_PATH_HEADER = 'x-sk-path'\n\n// Cache for redirect rules keyed by apiKey or 'domain:'+domain\nconst rulesCache = new Map<string, { rules: RedirectRule[]; expiry: number }>()\n\nfunction getRedirectCacheKey(apiKey: string | undefined, domain: string | undefined): string {\n  if (apiKey) return `key:${apiKey}`\n  return `domain:${domain || ''}`\n}\n\n/**\n * Fetch redirect rules from Portal API.\n * When apiKey is set (or from env), uses key-based endpoint (no domain required).\n * Otherwise uses domain query (or domain from getSiteConfig when only env API key is set).\n */\nexport async function fetchRedirectRules(config: RedirectConfig): Promise<RedirectRule[]> {\n  const now = Date.now()\n  const cacheSeconds = config.cacheSeconds ?? 300\n  const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n\n  const rawKey = config.apiKey ?? (typeof process !== 'undefined' && process.env ? process.env.SONOR_API_KEY : undefined)\n  const apiKey = typeof rawKey === 'string' ? rawKey : undefined\n  let domain = config.domain\n\n  if (!apiKey && !domain) {\n    const siteConfig = await getSiteConfig({ apiUrl: baseUrl })\n    domain = siteConfig?.domain\n  }\n\n  const cacheKey = getRedirectCacheKey(apiKey, domain)\n  const cached = rulesCache.get(cacheKey)\n  if (cached && now < cached.expiry) {\n    return cached.rules\n  }\n\n  try {\n    let url: string\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' }\n\n    if (apiKey) {\n      url = `${baseUrl}/api/public/seo/redirects`\n      headers['x-api-key'] = apiKey\n    } else if (domain) {\n      url = `${baseUrl}/api/public/seo/redirects?domain=${encodeURIComponent(domain)}`\n    } else {\n      return []\n    }\n\n    const timeoutMs = config.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS\n    // Guarded like every other web API here (see shared/identity): AbortSignal\n    // .timeout is Node 17.3+/modern edge; when absent we just fetch unbounded.\n    const signal =\n      typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n        ? AbortSignal.timeout(timeoutMs)\n        : undefined\n\n    const res = await fetch(url, {\n      headers,\n      signal,\n      // No-op in proxy (outside the data cache) but real in RSC renders,\n      // where the not-found resolver runs.\n      next: { revalidate: cacheSeconds },\n    })\n\n    if (!res.ok) {\n      console.error(`[site-kit] Failed to fetch redirects: ${res.status}`)\n      rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n      return cached?.rules ?? []\n    }\n\n    const data = await res.json()\n    const rules = (data.redirects || []).filter((r: RedirectRule) => r.is_enabled)\n    rulesCache.set(cacheKey, { rules, expiry: now + cacheSeconds * 1000 })\n    return rules\n  } catch (error) {\n    console.error('[site-kit] Error fetching redirects:', error)\n    rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n    return cached?.rules ?? []\n  }\n}\n\n/**\n * Find the rule matching a pathname (exact, tolerating trailing-slash\n * variance). Single source of truth for match semantics — used by the proxy\n * hot path and the not-found resolver. Do not re-fork.\n */\nexport function findRedirectMatch(\n  pathname: string,\n  rules: RedirectRule[],\n): RedirectRule | undefined {\n  return rules.find(r => {\n    if (r.from_path === pathname) return true\n    const normalizedFrom = r.from_path.endsWith('/') ? r.from_path.slice(0, -1) : r.from_path\n    const normalizedPath = pathname.endsWith('/') ? pathname.slice(0, -1) : pathname\n    return normalizedFrom === normalizedPath\n  })\n}\n\n/**\n * Handle managed redirects in middleware\n * Returns a NextResponse.redirect if a match is found, otherwise undefined\n */\nexport async function handleManagedRedirects(\n  request: NextRequest,\n  config: RedirectConfig,\n): Promise<NextResponse | undefined> {\n  const pathname = request.nextUrl.pathname\n  \n  // Skip for static assets and API routes\n  if (\n    pathname.startsWith('/_next') ||\n    pathname.startsWith('/api') ||\n    pathname.includes('.') // Has file extension\n  ) {\n    return undefined\n  }\n\n  const rules = await fetchRedirectRules(config)\n  const match = findRedirectMatch(pathname, rules)\n\n  if (!match) {\n    return undefined\n  }\n\n  // Build redirect URL\n  const redirectUrl = new URL(match.to_path, request.url)\n  \n  // Preserve query params\n  request.nextUrl.searchParams.forEach((value, key) => {\n    redirectUrl.searchParams.set(key, value)\n  })\n\n  // Track hit (fire and forget); domain may be from config or resolved by apiKey\n  trackRedirectHit(config, match.from_path, config.domain).catch(() => {})\n\n  // Return redirect response\n  const statusCode = parseInt(match.redirect_type) as 301 | 302 | 307 | 308\n  return NextResponse.redirect(redirectUrl, statusCode)\n}\n\n/**\n * Track redirect hit for analytics (needs domain; resolved from config or getSiteConfig when using apiKey)\n * Exported for the not-found resolver — fire-and-forget, never throws.\n */\nexport async function trackRedirectHit(config: RedirectConfig, fromPath: string, domainForHit?: string): Promise<void> {\n  try {\n    const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n    const domain = domainForHit ?? config.domain ?? (await getSiteConfig({ apiKey: config.apiKey, apiUrl: baseUrl }))?.domain\n    if (!domain) return\n    await fetch(`${baseUrl}/api/public/seo/redirects/hit`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ domain, from_path: fromPath }),\n    })\n  } catch {\n    // Ignore tracking errors\n  }\n}\n\n/**\n * Generate Next.js redirects config from Portal\n * Use this in next.config.js for build-time redirects\n * \n * Usage in next.config.js:\n * \n * const { generateNextRedirects } = require('@sonordev/site-kit/redirects')\n * \n * module.exports = {\n *   async redirects() {\n *     return generateNextRedirects({\n *       domain: 'example.com',\n *       portalApiUrl: process.env.PORTAL_API_URL,\n *     })\n *   }\n * }\n */\nexport async function generateNextRedirects(config: RedirectConfig): Promise<Array<{\n  source: string\n  destination: string\n  permanent: boolean\n}>> {\n  // Build-time: nothing is waiting on this response, so allow a generous\n  // timeout instead of the request-path default.\n  const rules = await fetchRedirectRules({ fetchTimeoutMs: 10_000, ...config, cacheSeconds: 0 })\n  \n  return rules.map(r => ({\n    source: r.from_path,\n    destination: r.to_path,\n    permanent: r.redirect_type === '301' || r.redirect_type === '308',\n  }))\n}\n\n/**\n * Clear redirect cache (useful for development)\n */\nexport function clearRedirectCache(): void {\n  rulesCache.clear()\n}\n"]}

package/dist/{chunk-473WDGQZ.mjs → chunk-JNAXDFC4.mjs}

@@ -529,7 +529,7 @@ async function BlogPost({
     ...item,
     answer: addExternalLinkTargets(item.answer || "", siteUrlResolved)
   })) ?? faqRaw;
-  const { BlogViewTracker } = await import('./BlogViewTracker-ZUGLBOVI.mjs');
+  const { BlogViewTracker } = await import('./BlogViewTracker-CKYG6MYU.mjs');
   if (children) {
     return /* @__PURE__ */ jsxs(Fragment, { children: [
       /* @__PURE__ */ jsx(BlogViewTracker, { slug: post.slug }),
@@ -1358,5 +1358,5 @@ async function RelatedPosts({
 }
 
 export { BlogLayout, BlogList, BlogPage, BlogPost, BlogPostPage, BlogSidebar, CategoryPage, ClusterNavigation, RelatedPosts, ServiceCallout, ServiceCallouts, addExternalLinkTargets, getAuthorSocialLinks, normalizeSiteHost, readingTimeMinutes, resolveBlogSiteUrl };
-//# sourceMappingURL=chunk-473WDGQZ.mjs.map
-//# sourceMappingURL=chunk-473WDGQZ.mjs.map
+//# sourceMappingURL=chunk-JNAXDFC4.mjs.map
+//# sourceMappingURL=chunk-JNAXDFC4.mjs.map