@sonordev/site-kit 5.7.0 → 5.8.0

package/dist/chunk-4TLFZ6NR.mjs

@@ -0,0 +1,16 @@
+import { resolveSiteHost } from './chunk-JLVCWC6A.mjs';
+
+// src/sites/site-param.ts
+function withSiteParam(url, site) {
+  const host = resolveSiteHost(site);
+  if (!host) return url;
+  return `${url}${url.includes("?") ? "&" : "?"}site=${encodeURIComponent(host)}`;
+}
+function withSiteBody(body, site) {
+  const host = resolveSiteHost(site);
+  return host ? { ...body, site: host } : body;
+}
+
+export { withSiteBody, withSiteParam };
+//# sourceMappingURL=chunk-4TLFZ6NR.mjs.map
+//# sourceMappingURL=chunk-4TLFZ6NR.mjs.map

package/dist/chunk-4TLFZ6NR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sites/site-param.ts"],"names":[],"mappings":";;;AAiCO,SAAS,aAAA,CAAc,KAAa,IAAA,EAAuB;AAChE,EAAA,MAAM,IAAA,GAAO,gBAAgB,IAAI,CAAA;AACjC,EAAA,IAAI,CAAC,MAAM,OAAO,GAAA;AAClB,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,KAAA,EAAQ,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAC/E;AAMO,SAAS,YAAA,CAA+B,MAAS,IAAA,EAAsC;AAC5F,EAAA,MAAM,IAAA,GAAO,gBAAgB,IAAI,CAAA;AACjC,EAAA,OAAO,OAAO,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,MAAK,GAAI,IAAA;AAC1C","file":"chunk-4TLFZ6NR.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites — withSiteParam / withSiteBody (leaf module)\n *\n * SINGLE SOURCE OF TRUTH for \"tell the Sonor API which sub-site is asking\".\n * Every site-scoped read goes through one of these two: the llms reads\n * (`llms/api`, FAQ items included), every blog read (`blog/server-core` and\n * the blog server-ui components, plus the client `BlogViewTracker`), the\n * managed FAQ, internal-link and content-block reads (`seo/server-api`\n * getFAQData / getInternalLinks / getContentBlock), and the managed redirect\n * rules and hit tracking (`redirects`). Do not re-fork the\n * append-or-omit rule into a module of its own — the llms copy of it is where\n * this came from, and two copies drift.\n *\n * The host comes from `resolveSiteHost` (explicit → NEXT_PUBLIC_SITE_URL host\n * → window.location.host), already normalized, so it matches what the API\n * stores. When nothing resolves, the param/field is OMITTED rather than sent\n * empty: an absent `site` is how single-site projects (and older API servers)\n * keep their project-wide behavior.\n *\n * A leaf on purpose. It imports only `./resolve` (→ `./normalize`), both pure\n * string logic, so the client-stamped `blog` barrel and `BlogViewTracker` can\n * use it without reaching `server-only` code or the sites contract's JSON\n * schema.\n */\nimport { resolveSiteHost } from './resolve'\n\n/**\n * Append `site=<host>` to an API URL or endpoint path. Returns the input\n * unchanged when the host resolves empty.\n *\n *   withSiteParam('/public/blog/posts?page=2', 'bd-charlotte.com')\n *     → '/public/blog/posts?page=2&site=bd-charlotte.com'\n */\nexport function withSiteParam(url: string, site?: string): string {\n  const host = resolveSiteHost(site)\n  if (!host) return url\n  return `${url}${url.includes('?') ? '&' : '?'}site=${encodeURIComponent(host)}`\n}\n\n/**\n * Add `site: <host>` to a JSON request body. Returns the body unchanged (no\n * `site` key at all) when the host resolves empty.\n */\nexport function withSiteBody<T extends object>(body: T, site?: string): T & { site?: string } {\n  const host = resolveSiteHost(site)\n  return host ? { ...body, site: host } : body\n}\n"]}

package/dist/{chunk-4B4S56WJ.mjs → chunk-5B4J3IBX.mjs}

@@ -1,3 +1,75 @@
+import { withSiteParam, withSiteBody } from './chunk-4TLFZ6NR.mjs';
+
+// src/blog/public-reads.ts
+async function fetchBlogPostBySlug({ apiUrl, apiKey, site }, slug) {
+  try {
+    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/posts/${slug}`, site), {
+      headers: { "x-api-key": apiKey },
+      next: { revalidate: 60 }
+    });
+    if (!response.ok) {
+      if (response.status !== 404) console.error("[Blog] Failed to fetch post:", response.statusText);
+      return null;
+    }
+    const data = await response.json();
+    return data.post || null;
+  } catch (error) {
+    console.error("[Blog] Error fetching post:", error);
+    return null;
+  }
+}
+async function fetchBlogCategories({ apiUrl, apiKey, site }) {
+  try {
+    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/categories`, site), {
+      headers: { "x-api-key": apiKey },
+      next: { revalidate: 300 }
+    });
+    if (!response.ok) return [];
+    const data = await response.json();
+    return data.categories || [];
+  } catch (error) {
+    console.error("[Blog] Error fetching categories:", error);
+    return [];
+  }
+}
+async function fetchRelatedBlogPosts({ apiUrl, apiKey, site }, currentPostId, limit, cache = {}) {
+  try {
+    const response = await fetch(`${apiUrl}/public/blog/related`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", "x-api-key": apiKey },
+      body: JSON.stringify(withSiteBody({ current_post_id: currentPostId, limit }, site)),
+      ...cache.revalidate !== void 0 ? { next: { revalidate: cache.revalidate } } : {}
+    });
+    if (!response.ok) {
+      console.error("[Blog] Failed to fetch related posts:", response.statusText);
+      return [];
+    }
+    const data = await response.json();
+    return data.posts || [];
+  } catch (error) {
+    console.error("[Blog] Error fetching related posts:", error);
+    return [];
+  }
+}
+
+// src/blog/artwork.ts
+function resolveBlogArtwork(post, placement = "card") {
+  const editorial = placement === "article" && !!post.editorial_image;
+  const src = (editorial ? post.editorial_image : post.featured_image) || void 0;
+  const alt = editorial ? post.editorial_image_alt ?? "" : post.featured_image_alt ?? post.title ?? "";
+  let composed = false;
+  if (src) {
+    try {
+      composed = /\/Blog\/Cards\//i.test(new URL(src, "https://site-kit.invalid").pathname);
+    } catch {
+    }
+  }
+  return { src, alt, composed };
+}
+function blogArtworkImageStyle(artwork) {
+  return artwork.composed ? { display: "block", height: "auto", maxHeight: "none", objectFit: "contain", transform: "none" } : void 0;
+}
+
 // src/blog/routes.ts
 function blogCategorySlug(category) {
   const value = typeof category === "string" ? category : category?.slug || category?.name || "";
@@ -49,24 +121,6 @@ function resolveBlogPostUrl(post, options = {}) {
   return resolveBlogUrl(createBlogRoutes(options).post(post), options.siteUrl);
 }
 
-// src/blog/artwork.ts
-function resolveBlogArtwork(post, placement = "card") {
-  const editorial = placement === "article" && !!post.editorial_image;
-  const src = (editorial ? post.editorial_image : post.featured_image) || void 0;
-  const alt = editorial ? post.editorial_image_alt ?? "" : post.featured_image_alt ?? post.title ?? "";
-  let composed = false;
-  if (src) {
-    try {
-      composed = /\/Blog\/Cards\//i.test(new URL(src, "https://site-kit.invalid").pathname);
-    } catch {
-    }
-  }
-  return { src, alt, composed };
-}
-function blogArtworkImageStyle(artwork) {
-  return artwork.composed ? { display: "block", height: "auto", maxHeight: "none", objectFit: "contain", transform: "none" } : void 0;
-}
-
 // src/blog/author-schema.ts
 function generateAuthorSchema(author, options = {}) {
   const { siteUrl = "", siteName } = options;
@@ -105,6 +159,6 @@ function generateAuthorSchema(author, options = {}) {
   return schema;
 }
 
-export { blogArtworkImageStyle, blogCategorySlug, createBlogRoutes, generateAuthorSchema, resolveBlogArtwork, resolveBlogPostUrl, resolveBlogUrl };
-//# sourceMappingURL=chunk-4B4S56WJ.mjs.map
-//# sourceMappingURL=chunk-4B4S56WJ.mjs.map
+export { blogArtworkImageStyle, blogCategorySlug, createBlogRoutes, fetchBlogCategories, fetchBlogPostBySlug, fetchRelatedBlogPosts, generateAuthorSchema, resolveBlogArtwork, resolveBlogPostUrl, resolveBlogUrl };
+//# sourceMappingURL=chunk-5B4J3IBX.mjs.map
+//# sourceMappingURL=chunk-5B4J3IBX.mjs.map

package/dist/chunk-5B4J3IBX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/blog/public-reads.ts","../src/blog/artwork.ts","../src/blog/routes.ts","../src/blog/author-schema.ts"],"names":[],"mappings":";;;AAgCA,eAAsB,oBACpB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,IAClB,IAAA,EAC0B;AAC1B,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,aAAA,CAAc,CAAA,EAAG,MAAM,CAAA,mBAAA,EAAsB,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,EAAG;AAAA,MACvF,OAAA,EAAS,EAAE,WAAA,EAAa,MAAA,EAAO;AAAA,MAC/B,IAAA,EAAM,EAAE,UAAA,EAAY,EAAA;AAAG,KACxB,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,IAAI,SAAS,MAAA,KAAW,GAAA,UAAa,KAAA,CAAM,8BAAA,EAAgC,SAAS,UAAU,CAAA;AAC9F,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,KAAK,IAAA,IAAQ,IAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAClD,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGA,eAAsB,mBAAA,CAAoB,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAK,EAA4C;AAC3G,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,aAAA,CAAc,GAAG,MAAM,CAAA,uBAAA,CAAA,EAA2B,IAAI,CAAA,EAAG;AAAA,MACpF,OAAA,EAAS,EAAE,WAAA,EAAa,MAAA,EAAO;AAAA,MAC/B,IAAA,EAAM,EAAE,UAAA,EAAY,GAAA;AAAI,KACzB,CAAA;AACD,IAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAC1B,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA,CAAK,cAAc,EAAC;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,qCAAqC,KAAK,CAAA;AACxD,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAcA,eAAsB,qBAAA,CACpB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,IAClB,aAAA,EACA,KAAA,EACA,KAAA,GAAiC,EAAC,EACb;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,oBAAA,CAAA,EAAwB;AAAA,MAC5D,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,aAAa,MAAA,EAAO;AAAA,MACnE,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,EAAE,iBAAiB,aAAA,EAAe,KAAA,EAAM,EAAG,IAAI,CAAC,CAAA;AAAA,MAClF,GAAI,KAAA,CAAM,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,CAAM,UAAA,EAAW,EAAE,GAAI;AAAC,KACpF,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,OAAA,CAAQ,KAAA,CAAM,uCAAA,EAAyC,QAAA,CAAS,UAAU,CAAA;AAC1E,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA,CAAK,SAAS,EAAC;AAAA,EACxB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,OAAO,EAAC;AAAA,EACV;AACF;;;AC5FO,SAAS,kBAAA,CAAmB,IAAA,EAAqB,SAAA,GAAgC,MAAA,EAAqB;AAC3G,EAAA,MAAM,SAAA,GAAY,SAAA,KAAc,SAAA,IAAa,CAAC,CAAC,IAAA,CAAK,eAAA;AACpD,EAAA,MAAM,GAAA,GAAA,CAAO,SAAA,GAAY,IAAA,CAAK,eAAA,GAAkB,KAAK,cAAA,KAAmB,MAAA;AACxE,EAAA,MAAM,GAAA,GAAM,YACR,IAAA,CAAK,mBAAA,IAAuB,KAC5B,IAAA,CAAK,kBAAA,IAAsB,KAAK,KAAA,IAAS,EAAA;AAC7C,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI;AAEF,MAAA,QAAA,GAAW,mBAAmB,IAAA,CAAK,IAAI,IAAI,GAAA,EAAK,0BAA0B,EAAE,QAAQ,CAAA;AAAA,IACtF,CAAA,CAAA,MAAQ;AAAA,IAAqE;AAAA,EAC/E;AACA,EAAA,OAAO,EAAE,GAAA,EAAK,GAAA,EAAK,QAAA,EAAS;AAC9B;AAGO,SAAS,sBAAsB,OAAA,EAAiD;AACrF,EAAA,OAAO,OAAA,CAAQ,QAAA,GACX,EAAE,OAAA,EAAS,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,QAAO,GAC/F,MAAA;AACN;;;ACXO,SAAS,iBAAiB,QAAA,EAA6C;AAC5E,EAAA,MAAM,KAAA,GAAQ,OAAO,QAAA,KAAa,QAAA,GAAW,WAAW,QAAA,EAAU,IAAA,IAAQ,UAAU,IAAA,IAAQ,EAAA;AAC5F,EAAA,OAAO,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,EAAE,CAAA;AACtF;AAEA,SAAS,UAAU,IAAA,EAAsB;AACvC,EAAA,MAAM,KAAA,GAAQ,KAAK,IAAA,EAAK;AACxB,EAAA,IAAI,CAAC,KAAA,IAAS,qBAAA,CAAsB,IAAA,CAAK,KAAK,CAAA,IAAK,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACjG,IAAA,MAAM,IAAI,MAAM,kEAAkE,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,MAAM,UAAA,CAAW,GAAG,CAAA,GAAI,KAAA,GAAQ,IAAI,KAAK,CAAA,CAAA;AAClD;AAGO,SAAS,gBAAA,CAAiB,OAAA,GAA8B,EAAC,EAAG;AACjE,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,IAAY,QAAQ,YAAA,IAAgB,OAAA,EAAS,MAAK,IAAK,OAAA;AAC5E,EAAA,MAAM,QAAQ,SAAA,CAAU,GAAG,EAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,GAAA;AACpD,EAAA,MAAM,MAAA,GAAS,KAAA,KAAU,GAAA,GAAM,EAAA,GAAK,KAAA;AACpC,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,KAAK,IAAA,EAA6B;AAChC,MAAA,IAAI,QAAQ,QAAA,EAAU,OAAO,UAAU,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAC,CAAA;AAC7D,MAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,IAAA,CAAK,QAAA,IAAY,QAAQ,QAAQ,CAAA;AACnE,MAAA,OAAO,GAAG,MAAM,CAAA,EAAG,OAAA,CAAQ,qBAAA,IAAyB,WAAW,CAAA,CAAA,EAAI,kBAAA,CAAmB,QAAQ,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,IACzI,CAAA;AAAA,IACA,SAAS,IAAA,EAAsB;AAC7B,MAAA,MAAM,UAAA,GAAa,iBAAiB,IAAI,CAAA;AACxC,MAAA,OAAO,OAAA,CAAQ,YAAA,GACX,SAAA,CAAU,OAAA,CAAQ,YAAA,CAAa,UAAU,CAAC,CAAA,GAC1C,CAAA,EAAG,MAAM,CAAA,UAAA,EAAa,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,OAAA,EAAS,CAAC,IAAA,KAAiB,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAAA,IACxE,MAAA,EAAQ,CAAC,IAAA,KAAiB,CAAA,EAAG,MAAM,CAAA,QAAA,EAAW,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAAA,IACtE,GAAA,EAAK,GAAG,MAAM,CAAA,QAAA,CAAA;AAAA,IACd,IAAA,EAAM,GAAG,MAAM,CAAA,SAAA;AAAA,GACjB;AACF;AAEO,SAAS,cAAA,CAAe,IAAA,EAAc,OAAA,GAAU,EAAA,EAAY;AACjE,EAAA,OAAO,CAAA,EAAG,QAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,EAAG,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA;AACzD;AAGO,SAAS,kBAAA,CAAmB,IAAA,EAAqB,OAAA,GAAqD,EAAC,EAAW;AACvH,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,EAAe,IAAA,EAAK;AAC3C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,SAAS,CAAA,EAAG;AACnC,MAAA,IAAI;AAAE,QAAA,OAAO,IAAI,GAAA,CAAI,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,MAAE,CAAA,CAAA,MAAQ;AAAA,MAA4B;AAAA,IACjF,CAAA,MAAA,IAAW,SAAA,CAAU,UAAA,CAAW,GAAG,KAAK,CAAC,SAAA,CAAU,UAAA,CAAW,IAAI,CAAA,IAAK,CAAC,SAAA,CAAU,QAAA,CAAS,IAAI,CAAA,EAAG;AAChG,MAAA,OAAO,cAAA,CAAe,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,IAClD;AAAA,EACF;AACA,EAAA,OAAO,cAAA,CAAe,iBAAiB,OAAO,CAAA,CAAE,KAAK,IAAI,CAAA,EAAG,QAAQ,OAAO,CAAA;AAC7E;;;ACpDO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAAmD,EAAC,EAC5C;AACR,EAAA,MAAM,EAAE,OAAA,GAAU,EAAA,EAAI,QAAA,EAAS,GAAI,OAAA;AAEnC,EAAA,MAAM,SAAmB,CAAC,GAAI,MAAA,CAAO,OAAA,IAAW,EAAG,CAAA;AACnD,EAAA,IAAI,MAAA,CAAO,YAAA,EAAc,MAAA,CAAO,IAAA,CAAK,OAAO,YAAY,CAAA;AACxD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,EAAS,MAAA,CAAO,KAAK,CAAA,oBAAA,EAAuB,MAAA,CAAO,YAAA,CAAa,OAAO,CAAA,CAAE,CAAA;AAClG,EAAA,IAAI,OAAO,YAAA,EAAc,QAAA,SAAiB,IAAA,CAAK,MAAA,CAAO,aAAa,QAAQ,CAAA;AAC3E,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,EAAQ,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA,CAAE,CAAA;AAG/F,EAAA,MAAM,YAAA,GAAe,CAAC,GAAG,IAAI,IAAI,MAAA,CAAO,MAAA,CAAO,OAAO,CAAC,CAAC,CAAA;AAExD,EAAA,MAAM,MAAA,GAA8B;AAAA,IAClC,UAAA,EAAY,oBAAA;AAAA,IACZ,OAAA,EAAS,QAAA;AAAA,IACT,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,KAAK,MAAA,CAAO,eAAA,IAAmB,GAAG,OAAO,CAAA,aAAA,EAAgB,OAAO,IAAI,CAAA;AAAA,GACtE;AAEA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,QAAA,GAAW,MAAA,CAAO,KAAA;AAC3C,EAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAA,CAAO,QAAA,GAAW;AAAA,MAChB,OAAA,EAAS,cAAA;AAAA,MACT,IAAA,EAAM,OAAO,OAAA,IAAW,QAAA;AAAA,MACxB,GAAI,OAAA,GAAU,EAAE,GAAA,EAAK,OAAA,KAAY;AAAC,KACpC;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,OAAO,MAAA,CAAO,SAAA,SAAkB,WAAA,GAAc,MAAA,CAAO,aAAa,MAAA,CAAO,GAAA;AACpF,EAAA,IAAI,MAAA,CAAO,UAAA,EAAY,MAAA,CAAO,KAAA,GAAQ,MAAA,CAAO,UAAA;AAC7C,EAAA,IAAI,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,YAAA;AAC7C,EAAA,IAAI,MAAA,CAAO,eAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG,MAAA,CAAO,aAAa,MAAA,CAAO,WAAA;AACpF,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG;AACvD,IAAA,MAAA,CAAO,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACpD,OAAA,EAAS,mCAAA;AAAA,MACT,kBAAA,EAAoB;AAAA,KACtB,CAAE,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACT","file":"chunk-5B4J3IBX.mjs","sourcesContent":["/**\n * @sonordev/site-kit/blog — shared public blog reads (leaf module)\n *\n * SINGLE SOURCE OF TRUTH for the three blog reads that both `server-core`\n * (credentials from resolveServerApiConfig) and the server-ui components\n * (credentials from their `apiUrl` / `apiKey` props) make:\n *\n *   - post by slug  — getBlogPost, <BlogPost>\n *   - categories    — getBlogCategories, <BlogList>, <BlogSidebar>\n *   - related posts — getRelatedInsights, <BlogPost>, <RelatedPosts>\n *\n * Each used to be copied into every caller, which is how one copy of the\n * related read kept a camelCase body and a wrong path long after the others\n * were fixed (see the notes in RelatedPosts). Adding the multi-site `site`\n * dimension would have meant a fourth edit to each copy, so they live here now.\n *\n * A leaf on purpose: it takes credentials as arguments and imports no\n * `server-only` code, because the client-stamped `blog` barrel reaches it\n * through BlogList / BlogPost / BlogSidebar. Callers resolve credentials; this\n * module only talks to the API.\n */\nimport { withSiteBody, withSiteParam } from '../sites/site-param'\nimport type { BlogCategory, BlogPost } from './types'\n\nexport interface BlogReadConfig {\n  apiUrl: string\n  apiKey: string\n  /** Sub-site host override. Omit to resolve from NEXT_PUBLIC_SITE_URL. */\n  site?: string\n}\n\n/** GET /public/blog/posts/:slug — null when missing or on any failure. */\nexport async function fetchBlogPostBySlug(\n  { apiUrl, apiKey, site }: BlogReadConfig,\n  slug: string\n): Promise<BlogPost | null> {\n  try {\n    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/posts/${slug}`, site), {\n      headers: { 'x-api-key': apiKey },\n      next: { revalidate: 60 },\n    })\n    if (!response.ok) {\n      if (response.status !== 404) console.error('[Blog] Failed to fetch post:', response.statusText)\n      return null\n    }\n    const data = await response.json()\n    return data.post || null\n  } catch (error) {\n    console.error('[Blog] Error fetching post:', error)\n    return null\n  }\n}\n\n/** GET /public/blog/categories — [] on any failure. */\nexport async function fetchBlogCategories({ apiUrl, apiKey, site }: BlogReadConfig): Promise<BlogCategory[]> {\n  try {\n    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/categories`, site), {\n      headers: { 'x-api-key': apiKey },\n      next: { revalidate: 300 },\n    })\n    if (!response.ok) return []\n    const data = await response.json()\n    return data.categories || []\n  } catch (error) {\n    console.error('[Blog] Error fetching categories:', error)\n    return []\n  }\n}\n\n/**\n * POST /public/blog/related — [] on any failure.\n *\n * `/public/blog/*`, not `/api/public/blog/*`: public-blog.controller is one of\n * only two public controllers whose @Controller() omits the `api/` segment.\n * The body is snake_case `current_post_id` (the controller looks the post up\n * by id — there is no slug path), and `site` rides in the body because this is\n * the one blog read that isn't a GET.\n *\n * `revalidate` is optional so <RelatedPosts>, which never set a fetch cache\n * lifetime, keeps rendering exactly as it did.\n */\nexport async function fetchRelatedBlogPosts(\n  { apiUrl, apiKey, site }: BlogReadConfig,\n  currentPostId: string,\n  limit: number,\n  cache: { revalidate?: number } = {}\n): Promise<BlogPost[]> {\n  try {\n    const response = await fetch(`${apiUrl}/public/blog/related`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', 'x-api-key': apiKey },\n      body: JSON.stringify(withSiteBody({ current_post_id: currentPostId, limit }, site)),\n      ...(cache.revalidate !== undefined ? { next: { revalidate: cache.revalidate } } : {}),\n    })\n    if (!response.ok) {\n      console.error('[Blog] Failed to fetch related posts:', response.statusText)\n      return []\n    }\n    const data = await response.json()\n    return data.posts || []\n  } catch (error) {\n    console.error('[Blog] Error fetching related posts:', error)\n    return []\n  }\n}\n","import type { CSSProperties } from 'react'\nimport type { BlogPost } from './types'\n\nexport interface BlogArtwork {\n  src: string | undefined\n  alt: string\n  composed: boolean\n}\n\ntype ArtworkSource = Pick<BlogPost, 'title' | 'featured_image' | 'featured_image_alt' | 'editorial_image' | 'editorial_image_alt'>\n\n/** Single source of truth for article artwork versus complete promotional cards. */\nexport function resolveBlogArtwork(post: ArtworkSource, placement: 'article' | 'card' = 'card'): BlogArtwork {\n  const editorial = placement === 'article' && !!post.editorial_image\n  const src = (editorial ? post.editorial_image : post.featured_image) || undefined\n  const alt = editorial\n    ? post.editorial_image_alt ?? ''\n    : post.featured_image_alt ?? post.title ?? ''\n  let composed = false\n  if (src) {\n    try {\n      // Inspect the path, not a query string that happens to mention a card.\n      composed = /\\/Blog\\/Cards\\//i.test(new URL(src, 'https://site-kit.invalid').pathname)\n    } catch { /* An unrecognized source retains the normal photograph layout. */ }\n  }\n  return { src, alt, composed }\n}\n\n/** Preserve generated text and graphics across every stock card surface. */\nexport function blogArtworkImageStyle(artwork: BlogArtwork): CSSProperties | undefined {\n  return artwork.composed\n    ? { display: 'block', height: 'auto', maxHeight: 'none', objectFit: 'contain', transform: 'none' }\n    : undefined\n}\n","/** Shared, environment-free publication routes for server helpers and blog UI. */\nexport interface BlogRoutePost {\n  slug: string\n  category?: string | { slug?: string; name?: string } | null\n  canonical_url?: string | null\n}\n\nexport interface BlogRoutingOptions {\n  /** Publication root. Defaults to /blog. */\n  basePath?: string\n  /** Existing metadata option; basePath takes precedence when both are set. */\n  blogBasePath?: string\n  /** Use /publication/category/post instead of /publication/post. */\n  includeCategoryInPath?: boolean\n  /** Fallback category for partial cluster records. */\n  category?: string\n  /** A custom local article path. Receives the post's slug and category. */\n  postPath?: (post: BlogRoutePost) => string\n  /** A custom category destination, for example /theforge?category=guides. */\n  categoryPath?: (slug: string) => string\n}\n\nexport function blogCategorySlug(category: BlogRoutePost['category']): string {\n  const value = typeof category === 'string' ? category : category?.slug || category?.name || ''\n  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '')\n}\n\nfunction localPath(path: string): string {\n  const value = path.trim()\n  if (!value || /^[a-z][a-z\\d+.-]*:/i.test(value) || value.startsWith('//') || value.includes('\\\\')) {\n    throw new Error('Blog routes must be local paths, such as /theforge/guides/story.')\n  }\n  return value.startsWith('/') ? value : `/${value}`\n}\n\n/** Single source of truth for publication paths. Custom routes never change OG artwork. */\nexport function createBlogRoutes(options: BlogRoutingOptions = {}) {\n  const raw = (options.basePath ?? options.blogBasePath ?? '/blog').trim() || '/blog'\n  const index = localPath(raw).replace(/\\/+$/, '') || '/'\n  const prefix = index === '/' ? '' : index\n  return {\n    index,\n    post(post: BlogRoutePost): string {\n      if (options.postPath) return localPath(options.postPath(post))\n      const category = blogCategorySlug(post.category || options.category)\n      return `${prefix}${options.includeCategoryInPath && category ? `/${encodeURIComponent(category)}` : ''}/${encodeURIComponent(post.slug)}`\n    },\n    category(slug: string): string {\n      const normalized = blogCategorySlug(slug)\n      return options.categoryPath\n        ? localPath(options.categoryPath(normalized))\n        : `${prefix}/category/${encodeURIComponent(normalized)}`\n    },\n    cluster: (slug: string) => `${prefix}/cluster/${encodeURIComponent(slug)}`,\n    author: (slug: string) => `${prefix}/author/${encodeURIComponent(slug)}`,\n    rss: `${prefix}/rss.xml`,\n    atom: `${prefix}/feed.xml`,\n  }\n}\n\nexport function resolveBlogUrl(path: string, siteUrl = ''): string {\n  return `${siteUrl.replace(/\\/+$/, '')}${localPath(path)}`\n}\n\n/** Metadata, feeds, sitemaps and generated schemas agree on a supplied canonical. */\nexport function resolveBlogPostUrl(post: BlogRoutePost, options: BlogRoutingOptions & { siteUrl?: string } = {}): string {\n  const canonical = post.canonical_url?.trim()\n  if (canonical) {\n    if (/^https?:\\/\\//i.test(canonical)) {\n      try { return new URL(canonical).toString() } catch { /* use the local route */ }\n    } else if (canonical.startsWith('/') && !canonical.startsWith('//') && !canonical.includes('\\\\')) {\n      return resolveBlogUrl(canonical, options.siteUrl)\n    }\n  }\n  return resolveBlogUrl(createBlogRoutes(options).post(post), options.siteUrl)\n}\n","/**\n * @sonordev/site-kit/blog — Author JSON-LD (pure)\n *\n * Split out of `./server-core` on purpose. `generateAuthorSchema` is a pure\n * function — it maps a `BlogAuthor` to a Person schema object and touches no\n * env, no config, and no network. It only ever lived in `server-core` because\n * the other author helpers there (`getAuthorBySlug`, `getAuthorPosts`) do fetch.\n *\n * `AuthorPage` is exported from the client-stamped `@sonordev/site-kit/blog`\n * barrel (see `./index.ts`), so importing this one function from `server-core`\n * dragged that whole server module — its `x-api-key` fetches included — into\n * the browser bundle. Keeping the pure half here means `AuthorPage` can stay in\n * the barrel without pulling a single line of server code with it.\n *\n * Anything added here must stay pure. If it needs an API key or a fetch, it\n * belongs in `./server-core`, not in this file.\n */\n\nimport type { BlogAuthor } from './types'\n\n/**\n * Generate Person JSON-LD schema for an author page\n */\nexport function generateAuthorSchema(\n  author: BlogAuthor,\n  options: { siteUrl?: string; siteName?: string } = {}\n): object {\n  const { siteUrl = '', siteName } = options\n\n  const sameAs: string[] = [...(author.same_as || [])]\n  if (author.linkedin_url) sameAs.push(author.linkedin_url)\n  if (author.twitter_url) sameAs.push(author.twitter_url)\n  if (author.website_url) sameAs.push(author.website_url)\n  if (author.social_links?.twitter) sameAs.push(`https://twitter.com/${author.social_links.twitter}`)\n  if (author.social_links?.linkedin) sameAs.push(author.social_links.linkedin)\n  if (author.social_links?.github) sameAs.push(`https://github.com/${author.social_links.github}`)\n\n  // Deduplicate\n  const uniqueSameAs = [...new Set(sameAs.filter(Boolean))]\n\n  const schema: Record<string, any> = {\n    '@context': 'https://schema.org',\n    '@type': 'Person',\n    name: author.name,\n    url: author.author_page_url || `${siteUrl}/blog/author/${author.slug}`,\n  }\n\n  if (author.title) schema.jobTitle = author.title\n  if (author.company || siteName) {\n    schema.worksFor = {\n      '@type': 'Organization',\n      name: author.company || siteName,\n      ...(siteUrl ? { url: siteUrl } : {}),\n    }\n  }\n  if (author.bio || author.short_bio) schema.description = author.short_bio || author.bio\n  if (author.avatar_url) schema.image = author.avatar_url\n  if (uniqueSameAs.length > 0) schema.sameAs = uniqueSameAs\n  if (author.knows_about && author.knows_about.length > 0) schema.knowsAbout = author.knows_about\n  if (author.credentials && author.credentials.length > 0) {\n    schema.hasCredential = author.credentials.map((c) => ({\n      '@type': 'EducationalOccupationalCredential',\n      credentialCategory: c,\n    }))\n  }\n\n  return schema\n}\n"]}

package/dist/chunk-5O7JSWT6.js

@@ -0,0 +1,8 @@
+'use strict';
+
+// src/shared/version.ts
+var SITE_KIT_VERSION = "5.8.0";
+
+exports.SITE_KIT_VERSION = SITE_KIT_VERSION;
+//# sourceMappingURL=chunk-5O7JSWT6.js.map
+//# sourceMappingURL=chunk-5O7JSWT6.js.map

package/dist/{chunk-5TXXTYXL.js.map → chunk-5O7JSWT6.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;AASO,IAAM,gBAAA,GAAmB","file":"chunk-5TXXTYXL.js","sourcesContent":["/**\n * @sonordev/site-kit shared - Package version constant\n *\n * Single source of truth for the version the kit reports at runtime (the\n * x-sitekit-version request header set by sonorFetch). Kept as a plain const\n * so client bundles don't need JSON imports; scripts/verify-dts.cjs asserts\n * it matches package.json at publish time, and version.test.ts asserts it in\n * dev, so it can't silently drift.\n */\nexport const SITE_KIT_VERSION = '5.7.0'\n"]}
+{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;AASO,IAAM,gBAAA,GAAmB","file":"chunk-5O7JSWT6.js","sourcesContent":["/**\n * @sonordev/site-kit shared - Package version constant\n *\n * Single source of truth for the version the kit reports at runtime (the\n * x-sitekit-version request header set by sonorFetch). Kept as a plain const\n * so client bundles don't need JSON imports; scripts/verify-dts.cjs asserts\n * it matches package.json at publish time, and version.test.ts asserts it in\n * dev, so it can't silently drift.\n */\nexport const SITE_KIT_VERSION = '5.8.0'\n"]}

package/dist/chunk-5SANRSX3.mjs

@@ -0,0 +1,17 @@
+// src/shared/page-leave.ts
+function onPageLeave(onLeave, win = window, doc = document) {
+  const handleVisibilityChange = () => {
+    if (doc.visibilityState === "hidden") onLeave();
+  };
+  const handlePageHide = () => onLeave();
+  doc.addEventListener("visibilitychange", handleVisibilityChange);
+  win.addEventListener("pagehide", handlePageHide);
+  return () => {
+    doc.removeEventListener("visibilitychange", handleVisibilityChange);
+    win.removeEventListener("pagehide", handlePageHide);
+  };
+}
+
+export { onPageLeave };
+//# sourceMappingURL=chunk-5SANRSX3.mjs.map
+//# sourceMappingURL=chunk-5SANRSX3.mjs.map

package/dist/chunk-5SANRSX3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/page-leave.ts"],"names":[],"mappings":";AAwBO,SAAS,WAAA,CACd,OAAA,EACA,GAAA,GAAsB,MAAA,EACtB,MAAqE,QAAA,EACzD;AACZ,EAAA,MAAM,yBAAyB,MAAM;AACnC,IAAA,IAAI,GAAA,CAAI,eAAA,KAAoB,QAAA,EAAU,OAAA,EAAQ;AAAA,EAChD,CAAA;AACA,EAAA,MAAM,cAAA,GAAiB,MAAM,OAAA,EAAQ;AAErC,EAAA,GAAA,CAAI,gBAAA,CAAiB,oBAAoB,sBAAsB,CAAA;AAC/D,EAAA,GAAA,CAAI,gBAAA,CAAiB,YAAY,cAAc,CAAA;AAE/C,EAAA,OAAO,MAAM;AACX,IAAA,GAAA,CAAI,mBAAA,CAAoB,oBAAoB,sBAAsB,CAAA;AAClE,IAAA,GAAA,CAAI,mBAAA,CAAoB,YAAY,cAAc,CAAA;AAAA,EACpD,CAAA;AACF","file":"chunk-5SANRSX3.mjs","sourcesContent":["/**\n * @sonordev/site-kit - page-leave signal\n *\n * SINGLE SOURCE OF TRUTH for \"the visitor may be gone, send what you have\".\n * Used by form abandonment, Signal's behavior flush and scroll-depth reporting.\n * Do NOT hand-roll another pagehide/visibilitychange pair.\n *\n * Two events, because neither covers every leave on its own:\n * - `visibilitychange` to hidden: tab switch, app switch, screen lock, and the\n *   last thing a mobile browser reliably fires before it discards a\n *   backgrounded tab (it often never fires pagehide for those).\n * - `pagehide`: full navigation or close, including Safari versions that skip\n *   visibilitychange on navigation.\n *\n * Never `beforeunload`: iOS Safari doesn't fire it, and Firefox won't put a\n * page that listens for it in the back/forward cache.\n *\n * One leave usually fires both events, and a hidden tab can come back, so\n * `onLeave` can run several times per page. It must be idempotent.\n */\n\ntype ListenerTarget = Pick<EventTarget, 'addEventListener' | 'removeEventListener'>\n\n/** Call `onLeave` whenever the page is hidden or unloaded. Returns the cleanup. */\nexport function onPageLeave(\n  onLeave: () => void,\n  win: ListenerTarget = window,\n  doc: ListenerTarget & { visibilityState: DocumentVisibilityState } = document,\n): () => void {\n  const handleVisibilityChange = () => {\n    if (doc.visibilityState === 'hidden') onLeave()\n  }\n  const handlePageHide = () => onLeave()\n\n  doc.addEventListener('visibilitychange', handleVisibilityChange)\n  win.addEventListener('pagehide', handlePageHide)\n\n  return () => {\n    doc.removeEventListener('visibilitychange', handleVisibilityChange)\n    win.removeEventListener('pagehide', handlePageHide)\n  }\n}\n"]}

package/dist/{chunk-FBDHKYNF.mjs → chunk-5WGMXSCB.mjs}

@@ -1,4 +1,4 @@
-import { getApiConfig } from './chunk-HBN4A2N4.mjs';
+import { getApiConfig } from './chunk-QVHVL7EX.mjs';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 
 function HoneypotField({ name, value, onChange }) {
@@ -56,5 +56,5 @@ function NativeFallbackFields({ config, returnTo }) {
 }
 
 export { HoneypotField, NativeFallbackFields, nativeFormProps };
-//# sourceMappingURL=chunk-FBDHKYNF.mjs.map
-//# sourceMappingURL=chunk-FBDHKYNF.mjs.map
+//# sourceMappingURL=chunk-5WGMXSCB.mjs.map
+//# sourceMappingURL=chunk-5WGMXSCB.mjs.map

package/dist/{chunk-FBDHKYNF.mjs.map → chunk-5WGMXSCB.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/forms/HoneypotField.tsx","../src/forms/native-fallback.tsx"],"names":["jsx"],"mappings":";;;AAqCO,SAAS,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,EAAuB;AAC3E,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,KAAa,UAAA;AACxC,EAAA,uBACE,GAAA;AAAA,IAAC,OAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,MAAA;AAAA,MACL,IAAA;AAAA,MACA,QAAA,EAAU,EAAA;AAAA,MACV,YAAA,EAAa,cAAA;AAAA,MACb,aAAA,EAAY,MAAA;AAAA,MACZ,KAAA,EAAK,IAAA;AAAA,MACL,kBAAA,EAAiB,EAAA;AAAA,MAGjB,gBAAA,EAAe,EAAA;AAAA,MACf,eAAA,EAAc,MAAA;AAAA,MACd,gBAAA,EAAe,OAAA;AAAA,MACf,eAAA,EAAc,EAAA;AAAA,MACd,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,IAAA,EAAM,KAAA;AAAA,QACN,KAAA,EAAO,CAAA;AAAA,QACP,MAAA,EAAQ,CAAA;AAAA,QACR,QAAA,EAAU,QAAA;AAAA,QACV,OAAA,EAAS,CAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,aAAA,EAAe;AAAA,OACjB;AAAA,MACC,GAAI,WAAA,GACD;AAAA,QACE,OAAO,KAAA,IAAS,EAAA;AAAA,QAChB,QAAA,EAAU,CAAC,CAAA,KAA2C;AACpD,UAAA,QAAA,CAAU,CAAA,CAAE,OAAO,KAAK,CAAA;AACxB,UAAA,IAAI,CAAA,CAAE,OAAO,KAAA,EAAO;AAElB,YAAA,OAAA,CAAQ,KAAK,4BAA4B,CAAA;AAAA,UAC3C;AAAA,QACF;AAAA,OACF,GACA,EAAE,YAAA,EAAc,EAAA;AAAG;AAAA,GACzB;AAEJ;ACjDA,SAAS,eAAe,MAAA,EAAuD;AAC7E,EAAA,OAAO,CAAC,CAAC,MAAA,EAAQ,YAAA,IAAgB,CAAC,MAAA,CAAO,aAAA;AAC3C;AAGO,SAAS,gBACd,MAAA,EACsC;AACtC,EAAA,IAAI,CAAC,cAAA,CAAe,MAAM,CAAA,SAAU,EAAC;AACrC,EAAA,MAAM,EAAE,MAAA,EAAO,GAAI,YAAA,EAAa;AAChC,EAAA,OAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,+BAAA,CAAA,EAAmC,QAAQ,MAAA,EAAO;AAC9E;AAaO,SAAS,oBAAA,CAAqB,EAAE,MAAA,EAAQ,QAAA,EAAS,EAA8B;AACpF,EAAA,IAAI,CAAC,cAAA,CAAe,MAAM,CAAA,EAAG,OAAO,IAAA;AACpC,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAA,GAAAA,CAAC,OAAA,EAAA,EAAM,IAAA,EAAK,QAAA,EAAS,IAAA,EAAK,aAAY,KAAA,EAAO,MAAA,CAAQ,YAAA,EAAc,QAAA,EAAQ,IAAA,EAAC,CAAA;AAAA,IAC3E,QAAA,mBAAWA,GAAAA,CAAC,OAAA,EAAA,EAAM,IAAA,EAAK,QAAA,EAAS,IAAA,EAAK,YAAA,EAAa,KAAA,EAAO,QAAA,EAAU,QAAA,EAAQ,IAAA,EAAC,CAAA,GAAK;AAAA,GAAA,EACpF,CAAA;AAEJ","file":"chunk-FBDHKYNF.mjs","sourcesContent":["/**\n * Single source of truth for the honeypot input — rendered by BOTH form\n * experiences (classic and stage) inside their <form>. The customRender path\n * deliberately gets none (documented limitation: custom renders lose the\n * honeypot, which is why alternate experiences must be render branches).\n *\n * Invariants (do not weaken any of these):\n * - `inert` blocks focus/interaction at the browser level, surviving hostile\n *   site CSS that could defeat the inline styles.\n * - data-sk-honeypot gives site CSS a stable opt-OUT hook.\n * - Controlled input: bots filling via JS still fire React onChange, so the\n *   value reaches submitForm's data payload.\n * - Name comes from config (`honeypot_field || DEFAULT_HONEYPOT_FIELD` from\n *   the shared contract) — resolved by the caller, never forked here.\n * - The trap must be invisible to AUTOFILL as well as to people. A browser or\n *   password manager filling a hidden input flags a real visitor as a bot, and\n *   because the value is stripped server-side the mistake is undiagnosable\n *   after the fact. `autocomplete=\"off\"` does not achieve this — it is the one\n *   value Chrome deliberately ignores for contact/address autofill — so the\n *   trap declares `new-password` (never offered saved contact data) plus the\n *   documented per-manager opt-outs.\n */\n\nimport React from 'react'\n\nexport interface HoneypotFieldProps {\n  name: string\n  value?: string\n  /**\n   * Omit for STATIC mode — an uncontrolled trap a Server Component can render.\n   * The trap's whole job is server-side (the value is read off the submission\n   * and stripped), so it needs no client state to work; the controlled form is\n   * only so the hydrated JSON path can read it back out of React state.\n   */\n  onChange?: (value: string) => void\n}\n\nexport function HoneypotField({ name, value, onChange }: HoneypotFieldProps) {\n  const interactive = typeof onChange === 'function'\n  return (\n    <input\n      type=\"text\"\n      name={name}\n      tabIndex={-1}\n      autoComplete=\"new-password\"\n      aria-hidden=\"true\"\n      inert\n      data-sk-honeypot=\"\"\n      // Password-manager opt-outs: 1Password, LastPass, Dashlane, Bitwarden.\n      // Each ignores its own attribute; none respects autocomplete alone.\n      data-1p-ignore=\"\"\n      data-lpignore=\"true\"\n      data-form-type=\"other\"\n      data-bwignore=\"\"\n      style={{\n        position: 'absolute',\n        left: -9999,\n        width: 1,\n        height: 1,\n        overflow: 'hidden',\n        opacity: 0,\n        visibility: 'hidden',\n        pointerEvents: 'none',\n      }}\n      {...(interactive\n        ? {\n            value: value ?? '',\n            onChange: (e: React.ChangeEvent<HTMLInputElement>) => {\n              onChange!(e.target.value)\n              if (e.target.value) {\n                // Bot detected\n                console.warn('[Forms] Honeypot triggered')\n              }\n            },\n          }\n        : { defaultValue: '' })}\n    />\n  )\n}\n","'use client'\n\n/**\n * No-JS native submission fallback — the floor under every managed form.\n *\n * The classic form is the SSR/no-JS surface (experiences are post-hydration\n * chunks), so it alone carries a real `action`/`method` pointing at\n * sonor-api's POST /api/public/forms/submit-native. With JS running, the\n * form's onSubmit preventDefault()s and the JSON path wins; without JS the\n * browser performs an ordinary form-encoded POST and the lead still lands.\n *\n * Auth rides in the hidden `_sk_token` field: a signed, single-purpose\n * credential minted by the api-key-authenticated forms/config endpoint\n * (`native_token` in the response). No token in the config (older API, or no\n * signing secret) means no fallback — the form keeps its historical behavior\n * rather than pointing at an endpoint that will reject it.\n *\n * Multi-step forms are excluded: step navigation is JS, and a native POST of\n * step-1 fields alone fails whole-form validation server-side. Single-step\n * forms are the overwhelming lead-capture case.\n *\n * Single source of truth for the gating — the form attrs and the hidden\n * fields must always agree, so both read the same predicate.\n */\n\nimport React from 'react'\nimport type { ManagedFormConfig } from './types'\nimport { getApiConfig } from './submitForm'\n\nfunction nativeEligible(config: ManagedFormConfig | null | undefined): boolean {\n  return !!config?.native_token && !config.is_multi_step\n}\n\n/** `action`/`method` for the classic <form> — empty when ineligible. */\nexport function nativeFormProps(\n  config: ManagedFormConfig | null | undefined,\n): { action?: string; method?: 'post' } {\n  if (!nativeEligible(config)) return {}\n  const { apiUrl } = getApiConfig()\n  return { action: `${apiUrl}/api/public/forms/submit-native`, method: 'post' }\n}\n\nexport interface NativeFallbackFieldsProps {\n  config: ManagedFormConfig | null | undefined\n  /**\n   * Absolute URL the native 303 should land on (usually the page hosting the\n   * form). Optional — without it the server falls back to the Referer origin,\n   * which loses the path but still returns the visitor to the right site.\n   */\n  returnTo?: string\n}\n\n/** Hidden control fields the native endpoint reads (`_sk_*` namespace). */\nexport function NativeFallbackFields({ config, returnTo }: NativeFallbackFieldsProps) {\n  if (!nativeEligible(config)) return null\n  return (\n    <>\n      <input type=\"hidden\" name=\"_sk_token\" value={config!.native_token} readOnly />\n      {returnTo ? <input type=\"hidden\" name=\"_sk_return\" value={returnTo} readOnly /> : null}\n    </>\n  )\n}\n"]}
+{"version":3,"sources":["../src/forms/HoneypotField.tsx","../src/forms/native-fallback.tsx"],"names":["jsx"],"mappings":";;;AAqCO,SAAS,aAAA,CAAc,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,EAAuB;AAC3E,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,KAAa,UAAA;AACxC,EAAA,uBACE,GAAA;AAAA,IAAC,OAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,MAAA;AAAA,MACL,IAAA;AAAA,MACA,QAAA,EAAU,EAAA;AAAA,MACV,YAAA,EAAa,cAAA;AAAA,MACb,aAAA,EAAY,MAAA;AAAA,MACZ,KAAA,EAAK,IAAA;AAAA,MACL,kBAAA,EAAiB,EAAA;AAAA,MAGjB,gBAAA,EAAe,EAAA;AAAA,MACf,eAAA,EAAc,MAAA;AAAA,MACd,gBAAA,EAAe,OAAA;AAAA,MACf,eAAA,EAAc,EAAA;AAAA,MACd,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,IAAA,EAAM,KAAA;AAAA,QACN,KAAA,EAAO,CAAA;AAAA,QACP,MAAA,EAAQ,CAAA;AAAA,QACR,QAAA,EAAU,QAAA;AAAA,QACV,OAAA,EAAS,CAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,aAAA,EAAe;AAAA,OACjB;AAAA,MACC,GAAI,WAAA,GACD;AAAA,QACE,OAAO,KAAA,IAAS,EAAA;AAAA,QAChB,QAAA,EAAU,CAAC,CAAA,KAA2C;AACpD,UAAA,QAAA,CAAU,CAAA,CAAE,OAAO,KAAK,CAAA;AACxB,UAAA,IAAI,CAAA,CAAE,OAAO,KAAA,EAAO;AAElB,YAAA,OAAA,CAAQ,KAAK,4BAA4B,CAAA;AAAA,UAC3C;AAAA,QACF;AAAA,OACF,GACA,EAAE,YAAA,EAAc,EAAA;AAAG;AAAA,GACzB;AAEJ;ACjDA,SAAS,eAAe,MAAA,EAAuD;AAC7E,EAAA,OAAO,CAAC,CAAC,MAAA,EAAQ,YAAA,IAAgB,CAAC,MAAA,CAAO,aAAA;AAC3C;AAGO,SAAS,gBACd,MAAA,EACsC;AACtC,EAAA,IAAI,CAAC,cAAA,CAAe,MAAM,CAAA,SAAU,EAAC;AACrC,EAAA,MAAM,EAAE,MAAA,EAAO,GAAI,YAAA,EAAa;AAChC,EAAA,OAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,+BAAA,CAAA,EAAmC,QAAQ,MAAA,EAAO;AAC9E;AAaO,SAAS,oBAAA,CAAqB,EAAE,MAAA,EAAQ,QAAA,EAAS,EAA8B;AACpF,EAAA,IAAI,CAAC,cAAA,CAAe,MAAM,CAAA,EAAG,OAAO,IAAA;AACpC,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAA,GAAAA,CAAC,OAAA,EAAA,EAAM,IAAA,EAAK,QAAA,EAAS,IAAA,EAAK,aAAY,KAAA,EAAO,MAAA,CAAQ,YAAA,EAAc,QAAA,EAAQ,IAAA,EAAC,CAAA;AAAA,IAC3E,QAAA,mBAAWA,GAAAA,CAAC,OAAA,EAAA,EAAM,IAAA,EAAK,QAAA,EAAS,IAAA,EAAK,YAAA,EAAa,KAAA,EAAO,QAAA,EAAU,QAAA,EAAQ,IAAA,EAAC,CAAA,GAAK;AAAA,GAAA,EACpF,CAAA;AAEJ","file":"chunk-5WGMXSCB.mjs","sourcesContent":["/**\n * Single source of truth for the honeypot input — rendered by BOTH form\n * experiences (classic and stage) inside their <form>. The customRender path\n * deliberately gets none (documented limitation: custom renders lose the\n * honeypot, which is why alternate experiences must be render branches).\n *\n * Invariants (do not weaken any of these):\n * - `inert` blocks focus/interaction at the browser level, surviving hostile\n *   site CSS that could defeat the inline styles.\n * - data-sk-honeypot gives site CSS a stable opt-OUT hook.\n * - Controlled input: bots filling via JS still fire React onChange, so the\n *   value reaches submitForm's data payload.\n * - Name comes from config (`honeypot_field || DEFAULT_HONEYPOT_FIELD` from\n *   the shared contract) — resolved by the caller, never forked here.\n * - The trap must be invisible to AUTOFILL as well as to people. A browser or\n *   password manager filling a hidden input flags a real visitor as a bot, and\n *   because the value is stripped server-side the mistake is undiagnosable\n *   after the fact. `autocomplete=\"off\"` does not achieve this — it is the one\n *   value Chrome deliberately ignores for contact/address autofill — so the\n *   trap declares `new-password` (never offered saved contact data) plus the\n *   documented per-manager opt-outs.\n */\n\nimport React from 'react'\n\nexport interface HoneypotFieldProps {\n  name: string\n  value?: string\n  /**\n   * Omit for STATIC mode — an uncontrolled trap a Server Component can render.\n   * The trap's whole job is server-side (the value is read off the submission\n   * and stripped), so it needs no client state to work; the controlled form is\n   * only so the hydrated JSON path can read it back out of React state.\n   */\n  onChange?: (value: string) => void\n}\n\nexport function HoneypotField({ name, value, onChange }: HoneypotFieldProps) {\n  const interactive = typeof onChange === 'function'\n  return (\n    <input\n      type=\"text\"\n      name={name}\n      tabIndex={-1}\n      autoComplete=\"new-password\"\n      aria-hidden=\"true\"\n      inert\n      data-sk-honeypot=\"\"\n      // Password-manager opt-outs: 1Password, LastPass, Dashlane, Bitwarden.\n      // Each ignores its own attribute; none respects autocomplete alone.\n      data-1p-ignore=\"\"\n      data-lpignore=\"true\"\n      data-form-type=\"other\"\n      data-bwignore=\"\"\n      style={{\n        position: 'absolute',\n        left: -9999,\n        width: 1,\n        height: 1,\n        overflow: 'hidden',\n        opacity: 0,\n        visibility: 'hidden',\n        pointerEvents: 'none',\n      }}\n      {...(interactive\n        ? {\n            value: value ?? '',\n            onChange: (e: React.ChangeEvent<HTMLInputElement>) => {\n              onChange!(e.target.value)\n              if (e.target.value) {\n                // Bot detected\n                console.warn('[Forms] Honeypot triggered')\n              }\n            },\n          }\n        : { defaultValue: '' })}\n    />\n  )\n}\n","'use client'\n\n/**\n * No-JS native submission fallback — the floor under every managed form.\n *\n * The classic form is the SSR/no-JS surface (experiences are post-hydration\n * chunks), so it alone carries a real `action`/`method` pointing at\n * sonor-api's POST /api/public/forms/submit-native. With JS running, the\n * form's onSubmit preventDefault()s and the JSON path wins; without JS the\n * browser performs an ordinary form-encoded POST and the lead still lands.\n *\n * Auth rides in the hidden `_sk_token` field: a signed, single-purpose\n * credential minted by the api-key-authenticated forms/config endpoint\n * (`native_token` in the response). No token in the config (older API, or no\n * signing secret) means no fallback — the form keeps its historical behavior\n * rather than pointing at an endpoint that will reject it.\n *\n * Multi-step forms are excluded: step navigation is JS, and a native POST of\n * step-1 fields alone fails whole-form validation server-side. Single-step\n * forms are the overwhelming lead-capture case.\n *\n * Single source of truth for the gating — the form attrs and the hidden\n * fields must always agree, so both read the same predicate.\n */\n\nimport React from 'react'\nimport type { ManagedFormConfig } from './types'\nimport { getApiConfig } from './submitForm'\n\nfunction nativeEligible(config: ManagedFormConfig | null | undefined): boolean {\n  return !!config?.native_token && !config.is_multi_step\n}\n\n/** `action`/`method` for the classic <form> — empty when ineligible. */\nexport function nativeFormProps(\n  config: ManagedFormConfig | null | undefined,\n): { action?: string; method?: 'post' } {\n  if (!nativeEligible(config)) return {}\n  const { apiUrl } = getApiConfig()\n  return { action: `${apiUrl}/api/public/forms/submit-native`, method: 'post' }\n}\n\nexport interface NativeFallbackFieldsProps {\n  config: ManagedFormConfig | null | undefined\n  /**\n   * Absolute URL the native 303 should land on (usually the page hosting the\n   * form). Optional — without it the server falls back to the Referer origin,\n   * which loses the path but still returns the visitor to the right site.\n   */\n  returnTo?: string\n}\n\n/** Hidden control fields the native endpoint reads (`_sk_*` namespace). */\nexport function NativeFallbackFields({ config, returnTo }: NativeFallbackFieldsProps) {\n  if (!nativeEligible(config)) return null\n  return (\n    <>\n      <input type=\"hidden\" name=\"_sk_token\" value={config!.native_token} readOnly />\n      {returnTo ? <input type=\"hidden\" name=\"_sk_return\" value={returnTo} readOnly /> : null}\n    </>\n  )\n}\n"]}

package/dist/chunk-5XFFUP6D.js

@@ -0,0 +1,100 @@
+'use strict';
+
+// src/forms/field-rules.ts
+var DISPLAY_ONLY_FIELD_TYPES = [
+  "heading",
+  "section_header",
+  "paragraph",
+  "hidden"
+];
+function isDisplayOnly(field) {
+  return DISPLAY_ONLY_FIELD_TYPES.includes(field.field_type);
+}
+function isEmptyValue(value) {
+  if (value === void 0 || value === null || value === "") return true;
+  if (Array.isArray(value)) return value.length === 0;
+  return false;
+}
+function isUnanswered(value) {
+  return isEmptyValue(value) || value === false;
+}
+function searchableTexts(value) {
+  const items = Array.isArray(value) ? value : [value];
+  return items.map((item) => item === void 0 || item === null ? "" : String(item));
+}
+function isFieldVisible(field, values) {
+  const condition = field.conditional?.show_when;
+  if (!condition) return true;
+  const { field: condField, operator, value } = condition;
+  const fieldValue = values[condField];
+  switch (operator) {
+    case "equals":
+      return fieldValue === value;
+    case "not_equals":
+      return fieldValue !== value;
+    case "contains":
+      return searchableTexts(fieldValue).some((text) => text.includes(String(value)));
+    case "not_contains":
+      return !searchableTexts(fieldValue).some((text) => text.includes(String(value)));
+    case "is_empty":
+      return isUnanswered(fieldValue);
+    case "not_empty":
+      return !isUnanswered(fieldValue);
+    case "greater_than":
+      return Number(fieldValue) > Number(value);
+    case "less_than":
+      return Number(fieldValue) < Number(value);
+    default:
+      return true;
+  }
+}
+function validateField(field, values, isVisible = (f) => isFieldVisible(f, values)) {
+  if (!isVisible(field)) return null;
+  if (isDisplayOnly(field)) return null;
+  const value = values[field.slug];
+  const rules = field.validation || {};
+  if (isUnanswered(value)) {
+    return field.is_required ? rules.custom_error || `${field.label} is required` : null;
+  }
+  const strValue = String(value);
+  if (rules.min_length && strValue.length < rules.min_length) {
+    return `${field.label} must be at least ${rules.min_length} characters`;
+  }
+  if (rules.max_length && strValue.length > rules.max_length) {
+    return `${field.label} must be no more than ${rules.max_length} characters`;
+  }
+  if (rules.min !== void 0 && Number(value) < rules.min) {
+    return `${field.label} must be at least ${rules.min}`;
+  }
+  if (rules.max !== void 0 && Number(value) > rules.max) {
+    return `${field.label} must be no more than ${rules.max}`;
+  }
+  if (rules.pattern) {
+    try {
+      if (!new RegExp(rules.pattern).test(strValue)) {
+        return rules.custom_error || `${field.label} is invalid`;
+      }
+    } catch {
+    }
+  }
+  if (field.field_type === "email" && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(strValue)) {
+    return "Please enter a valid email address";
+  }
+  if (field.field_type === "phone" && !/^[\d\s\-\+\(\)]+$/.test(strValue)) {
+    return "Please enter a valid phone number";
+  }
+  return null;
+}
+function isFieldComplete(field, values, isVisible = (f) => isFieldVisible(f, values)) {
+  if (!isVisible(field) || isDisplayOnly(field)) return false;
+  if (isEmptyValue(values[field.slug])) return false;
+  return validateField(field, values, isVisible) === null;
+}
+
+exports.isDisplayOnly = isDisplayOnly;
+exports.isEmptyValue = isEmptyValue;
+exports.isFieldComplete = isFieldComplete;
+exports.isFieldVisible = isFieldVisible;
+exports.validateField = validateField;
+//# sourceMappingURL=chunk-5XFFUP6D.js.map
+//# sourceMappingURL=chunk-5XFFUP6D.js.map

package/dist/chunk-5XFFUP6D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/field-rules.ts"],"names":[],"mappings":";;;AAmBO,IAAM,wBAAA,GAA8C;AAAA,EACzD,SAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,cAAc,KAAA,EAA2B;AACvD,EAAA,OAAO,wBAAA,CAAyB,QAAA,CAAS,KAAA,CAAM,UAAU,CAAA;AAC3D;AAMO,SAAS,aAAa,KAAA,EAAyB;AACpD,EAAA,IAAI,UAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,IAAI,OAAO,IAAA;AAClE,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,KAAW,CAAA;AAClD,EAAA,OAAO,KAAA;AACT;AAOA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,OAAO,YAAA,CAAa,KAAK,CAAA,IAAK,KAAA,KAAU,KAAA;AAC1C;AAOA,SAAS,gBAAgB,KAAA,EAA0B;AACjD,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACnD,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAU,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,IAAA,GAAO,EAAA,GAAK,MAAA,CAAO,IAAI,CAAE,CAAA;AACtF;AAGO,SAAS,cAAA,CAAe,OAAkB,MAAA,EAA0C;AACzF,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAa,SAAA;AACrC,EAAA,IAAI,CAAC,WAAW,OAAO,IAAA;AAEvB,EAAA,MAAM,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU,OAAM,GAAI,SAAA;AAC9C,EAAA,MAAM,UAAA,GAAa,OAAO,SAAS,CAAA;AAEnC,EAAA,QAAQ,QAAA;AAAU,IAChB,KAAK,QAAA;AACH,MAAA,OAAO,UAAA,KAAe,KAAA;AAAA,IACxB,KAAK,YAAA;AACH,MAAA,OAAO,UAAA,KAAe,KAAA;AAAA,IACxB,KAAK,UAAA;AACH,MAAA,OAAO,eAAA,CAAgB,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IAChF,KAAK,cAAA;AACH,MAAA,OAAO,CAAC,eAAA,CAAgB,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACjF,KAAK,UAAA;AACH,MAAA,OAAO,aAAa,UAAU,CAAA;AAAA,IAChC,KAAK,WAAA;AACH,MAAA,OAAO,CAAC,aAAa,UAAU,CAAA;AAAA,IACjC,KAAK,cAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1C,KAAK,WAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1C;AACE,MAAA,OAAO,IAAA;AAAA;AAEb;AAOO,SAAS,aAAA,CACd,OACA,MAAA,EACA,SAAA,GAA2C,CAAC,CAAA,KAAM,cAAA,CAAe,CAAA,EAAG,MAAM,CAAA,EAC3D;AACf,EAAA,IAAI,CAAC,SAAA,CAAU,KAAK,CAAA,EAAG,OAAO,IAAA;AAC9B,EAAA,IAAI,aAAA,CAAc,KAAK,CAAA,EAAG,OAAO,IAAA;AAEjC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,UAAA,IAAc,EAAC;AAEnC,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,IAAA,OAAO,MAAM,WAAA,GAAc,KAAA,CAAM,gBAAgB,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,GAAiB,IAAA;AAAA,EAClF;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,KAAK,CAAA;AAG7B,EAAA,IAAI,KAAA,CAAM,UAAA,IAAc,QAAA,CAAS,MAAA,GAAS,MAAM,UAAA,EAAY;AAC1D,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,kBAAA,EAAqB,MAAM,UAAU,CAAA,WAAA,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,KAAA,CAAM,UAAA,IAAc,QAAA,CAAS,MAAA,GAAS,MAAM,UAAA,EAAY;AAC1D,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,sBAAA,EAAyB,MAAM,UAAU,CAAA,WAAA,CAAA;AAAA,EAChE;AAGA,EAAA,IAAI,MAAM,GAAA,KAAQ,MAAA,IAAa,OAAO,KAAK,CAAA,GAAI,MAAM,GAAA,EAAK;AACxD,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,kBAAA,EAAqB,MAAM,GAAG,CAAA,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,MAAM,GAAA,KAAQ,MAAA,IAAa,OAAO,KAAK,CAAA,GAAI,MAAM,GAAA,EAAK;AACxD,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,sBAAA,EAAyB,MAAM,GAAG,CAAA,CAAA;AAAA,EACzD;AAGA,EAAA,IAAI,MAAM,OAAA,EAAS;AACjB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAI,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7C,QAAA,OAAO,KAAA,CAAM,YAAA,IAAgB,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,WAAA,CAAA;AAAA,MAC7C;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,IAAI,MAAM,UAAA,KAAe,OAAA,IAAW,CAAC,4BAAA,CAA6B,IAAA,CAAK,QAAQ,CAAA,EAAG;AAChF,IAAA,OAAO,oCAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,UAAA,KAAe,OAAA,IAAW,CAAC,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvE,IAAA,OAAO,mCAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,eAAA,CACd,OACA,MAAA,EACA,SAAA,GAA2C,CAAC,CAAA,KAAM,cAAA,CAAe,CAAA,EAAG,MAAM,CAAA,EACjE;AACT,EAAA,IAAI,CAAC,SAAA,CAAU,KAAK,KAAK,aAAA,CAAc,KAAK,GAAG,OAAO,KAAA;AACtD,EAAA,IAAI,aAAa,MAAA,CAAO,KAAA,CAAM,IAAI,CAAC,GAAG,OAAO,KAAA;AAC7C,EAAA,OAAO,aAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,SAAS,CAAA,KAAM,IAAA;AACrD","file":"chunk-5XFFUP6D.js","sourcesContent":["/**\n * @sonordev/site-kit/forms - field rules\n *\n * SINGLE SOURCE OF TRUTH for a managed form's per-field rules: whether a field\n * is shown (conditional `show_when`), whether a value counts as an answer, what\n * validation says about it, and whether it's complete. useForm (headless) and\n * FormClient (classic, stage and spotlight) both route through here, as do\n * the experiences' question planning and the field_interactions `completed`\n * flag. useForm and FormClient each carried their own copy until 2026-09-15,\n * and they had already drifted (a `contains` condition read an unanswered\n * field as the text \"undefined\" in one and \"\" in the other). Don't re-fork\n * any of this into a component.\n *\n * Pure: no React, no DOM.\n */\n\nimport type { FormField } from './types'\n\n/** Field types that render content but take no answer. */\nexport const DISPLAY_ONLY_FIELD_TYPES: readonly string[] = [\n  'heading',\n  'section_header',\n  'paragraph',\n  'hidden',\n]\n\nexport function isDisplayOnly(field: FormField): boolean {\n  return DISPLAY_ONLY_FIELD_TYPES.includes(field.field_type)\n}\n\n/**\n * No value at all: undefined, null, '', or an empty selection — a checkbox\n * group or multi-select emits [] once every option is unticked.\n */\nexport function isEmptyValue(value: unknown): boolean {\n  if (value === undefined || value === null || value === '') return true\n  if (Array.isArray(value)) return value.length === 0\n  return false\n}\n\n/**\n * Nothing the visitor has said yes to. What `required` and the\n * is_empty / not_empty conditions test: an empty value, or an unticked single\n * checkbox (it emits `false`). A number 0 is an answer.\n */\nfunction isUnanswered(value: unknown): boolean {\n  return isEmptyValue(value) || value === false\n}\n\n/**\n * The text a `contains` condition searches: each selected option of a\n * multi-value field, and '' for no value. Never \"null\" or \"undefined\", which\n * made `contains \"n\"` show a field before anything was entered.\n */\nfunction searchableTexts(value: unknown): string[] {\n  const items = Array.isArray(value) ? value : [value]\n  return items.map((item) => (item === undefined || item === null ? '' : String(item)))\n}\n\n/** Whether `field` is shown, given the form's current values. */\nexport function isFieldVisible(field: FormField, values: Record<string, unknown>): boolean {\n  const condition = field.conditional?.show_when\n  if (!condition) return true\n\n  const { field: condField, operator, value } = condition\n  const fieldValue = values[condField]\n\n  switch (operator) {\n    case 'equals':\n      return fieldValue === value\n    case 'not_equals':\n      return fieldValue !== value\n    case 'contains':\n      return searchableTexts(fieldValue).some((text) => text.includes(String(value)))\n    case 'not_contains':\n      return !searchableTexts(fieldValue).some((text) => text.includes(String(value)))\n    case 'is_empty':\n      return isUnanswered(fieldValue)\n    case 'not_empty':\n      return !isUnanswered(fieldValue)\n    case 'greater_than':\n      return Number(fieldValue) > Number(value)\n    case 'less_than':\n      return Number(fieldValue) < Number(value)\n    default:\n      return true\n  }\n}\n\n/**\n * The error to show for `field`, or null when it's fine. Hidden and\n * display-only fields never error. `isVisible` lets a caller pass its own\n * memoized visibility check; it defaults to {@link isFieldVisible}.\n */\nexport function validateField(\n  field: FormField,\n  values: Record<string, unknown>,\n  isVisible: (field: FormField) => boolean = (f) => isFieldVisible(f, values),\n): string | null {\n  if (!isVisible(field)) return null\n  if (isDisplayOnly(field)) return null\n\n  const value = values[field.slug]\n  const rules = field.validation || {}\n\n  if (isUnanswered(value)) {\n    return field.is_required ? rules.custom_error || `${field.label} is required` : null\n  }\n\n  const strValue = String(value)\n\n  // Length checks\n  if (rules.min_length && strValue.length < rules.min_length) {\n    return `${field.label} must be at least ${rules.min_length} characters`\n  }\n  if (rules.max_length && strValue.length > rules.max_length) {\n    return `${field.label} must be no more than ${rules.max_length} characters`\n  }\n\n  // Numeric checks\n  if (rules.min !== undefined && Number(value) < rules.min) {\n    return `${field.label} must be at least ${rules.min}`\n  }\n  if (rules.max !== undefined && Number(value) > rules.max) {\n    return `${field.label} must be no more than ${rules.max}`\n  }\n\n  // Pattern check — guard against an invalid admin-entered pattern.\n  if (rules.pattern) {\n    try {\n      if (!new RegExp(rules.pattern).test(strValue)) {\n        return rules.custom_error || `${field.label} is invalid`\n      }\n    } catch {\n      // Malformed pattern — skip rather than crashing the form.\n    }\n  }\n\n  if (field.field_type === 'email' && !/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(strValue)) {\n    return 'Please enter a valid email address'\n  }\n\n  if (field.field_type === 'phone' && !/^[\\d\\s\\-\\+\\(\\)]+$/.test(strValue)) {\n    return 'Please enter a valid phone number'\n  }\n\n  return null\n}\n\n/**\n * The field holds a real, valid answer: visible, something a visitor answers,\n * not empty, and passing validation. Drives FormClient's valid tick and\n * momentum count, the experiences' beat completion, and\n * `field_interactions[slug].completed`. An unticked optional checkbox is an\n * answer (\"no\"); an empty selection is not.\n */\nexport function isFieldComplete(\n  field: FormField,\n  values: Record<string, unknown>,\n  isVisible: (field: FormField) => boolean = (f) => isFieldVisible(f, values),\n): boolean {\n  if (!isVisible(field) || isDisplayOnly(field)) return false\n  if (isEmptyValue(values[field.slug])) return false\n  return validateField(field, values, isVisible) === null\n}\n"]}

package/dist/{chunk-7ZX6TO6C.mjs → chunk-6HFFTGFP.mjs}

@@ -1,6 +1,6 @@
 'use client';
-import { useAnalyticsOptional } from './chunk-O2VJZOR2.mjs';
-import { sonorFetch } from './chunk-XLPU3TEE.mjs';
+import { useAnalyticsOptional } from './chunk-O4YBWJHP.mjs';
+import { sonorFetch } from './chunk-7THZOAUR.mjs';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 import React5, { useState, useEffect, useMemo, useRef, useCallback } from 'react';
 
@@ -229,6 +229,15 @@ async function fetchCategories() {
   );
   return result?.categories || [];
 }
+function shippingSelection(rate) {
+  if (!rate) return {};
+  return {
+    shippingCarrier: rate.carrier,
+    shippingService: rate.service,
+    shippingCost: parseFloat(rate.amount),
+    ...rate.quote ? { shippingQuote: rate.quote } : {}
+  };
+}
 async function fetchShippingRates(shippingAddress, offerings) {
   const result = await apiPost(
     "/api/public/commerce/shipping-rates",
@@ -305,19 +314,43 @@ async function registerForEvent(eventId, scheduleId, customer) {
     return { success: false, error: "Network error. Please try again." };
   }
 }
+function readErrorMessage(body) {
+  const b = body && typeof body === "object" ? body : {};
+  const nested = b.error && typeof b.error === "object" ? b.error : b;
+  return (typeof b.message === "string" ? b.message : null) || (typeof nested.message === "string" ? nested.message : null) || (typeof nested.detail === "string" ? nested.detail : null) || (typeof b.error === "string" ? b.error : null);
+}
+function toDiscountValidationResult(body) {
+  const b = body && typeof body === "object" ? body : {};
+  if (b.valid !== true) return { valid: false, message: readErrorMessage(b) || "Invalid discount code" };
+  const amount = typeof b.discount_amount === "number" ? b.discount_amount : typeof b.calculated_discount === "number" ? b.calculated_discount : 0;
+  return {
+    valid: true,
+    discount_amount: amount,
+    discount_type: b.discount_type,
+    discount_value: b.discount_value,
+    code: b.code,
+    name: b.name
+  };
+}
+function toCheckoutBody(options) {
+  const { discountCode, ...rest } = options;
+  return discountCode ? { ...rest, discount_code: discountCode } : rest;
+}
 async function validateDiscountCode(code, subtotal, offeringIds = []) {
   const { apiUrl, apiKey } = getApiConfig();
   try {
     const response = await sonorFetch(`${apiUrl}/api/public/commerce/discount/validate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ code, subtotal, offeringIds })
+      // offering_ids is the API's name. Older APIs read only that, so
+      // applicability went unchecked while this sent offeringIds.
+      body: JSON.stringify({ code, subtotal, offering_ids: offeringIds })
     }, { apiKey });
+    const body = await response.json().catch(() => ({}));
     if (!response.ok) {
-      const body = await response.json().catch(() => ({}));
-      return { valid: false, message: body?.message || "Invalid discount code" };
+      return { valid: false, message: readErrorMessage(body) || "Invalid discount code" };
     }
-    return await response.json();
+    return toDiscountValidationResult(body);
   } catch {
     return { valid: false, message: "Could not validate discount code" };
   }
@@ -346,12 +379,12 @@ async function createPaymentIntent(options) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        ...options,
+        ...toCheckoutBody(options),
         analyticsSessionId: sessionId
       })
     }, { apiKey, retries: 0 });
     const data = await response.json();
-    if (!response.ok) throw new Error(data.message || "Failed to create payment intent");
+    if (!response.ok) throw new Error(readErrorMessage(data) || "Failed to create payment intent");
     return data;
   } catch (error) {
     return { success: false, error: error?.message || "Network error. Please try again." };
@@ -366,7 +399,7 @@ async function createCheckoutSession(optionsOrOfferingId, legacyOptions) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        ...options,
+        ...toCheckoutBody(options),
         analyticsSessionId,
         // Pass for conversion tracking
         successUrl: options.successUrl || (typeof window !== "undefined" ? window.location.href : ""),
@@ -380,8 +413,7 @@ async function createCheckoutSession(optionsOrOfferingId, legacyOptions) {
         body = JSON.parse(text);
       } catch {
       }
-      const errObj = body?.error && typeof body.error === "object" ? body.error : body;
-      const message = (typeof body?.message === "string" ? body.message : null) || (typeof errObj?.message === "string" ? errObj.message : null) || (typeof errObj?.detail === "string" ? errObj.detail : null) || (typeof body?.error === "string" ? body.error : null) || "Payment could not be processed. Please try again or use a different card.";
+      const message = readErrorMessage(body) || "Payment could not be processed. Please try again or use a different card.";
       if (typeof console !== "undefined") {
         console.warn("[Commerce] Checkout failed:", response.status, message, body);
       }
@@ -2669,9 +2701,7 @@ function PaymentStep({
         };
         if (needsShipping && shippingAddress) {
           checkoutOpts.shippingAddress = shippingAddress;
-          checkoutOpts.shippingCarrier = shippingRate?.carrier;
-          checkoutOpts.shippingService = shippingRate?.service;
-          checkoutOpts.shippingCost = shippingCost;
+          Object.assign(checkoutOpts, shippingSelection(shippingRate));
         }
         const piResult = await createPaymentIntent(checkoutOpts);
         if (destroyed) return;
@@ -2735,9 +2765,7 @@ function PaymentStep({
         };
         if (needsShipping && shippingAddress) {
           checkoutOpts.shippingAddress = shippingAddress;
-          checkoutOpts.shippingCarrier = shippingRate?.carrier;
-          checkoutOpts.shippingService = shippingRate?.service;
-          checkoutOpts.shippingCost = shippingCost;
+          Object.assign(checkoutOpts, shippingSelection(shippingRate));
         }
         const result = await createCheckoutSession(checkoutOpts);
         if (result.success && !result.payment_url) {
@@ -2778,9 +2806,7 @@ function PaymentStep({
         };
         if (needsShipping && shippingAddress) {
           checkoutOpts.shippingAddress = shippingAddress;
-          checkoutOpts.shippingCarrier = shippingRate?.carrier;
-          checkoutOpts.shippingService = shippingRate?.service;
-          checkoutOpts.shippingCost = shippingCost;
+          Object.assign(checkoutOpts, shippingSelection(shippingRate));
         }
         const result = await createCheckoutSession(checkoutOpts);
         if (result.success && result.checkout_url) {
@@ -4559,9 +4585,7 @@ function CheckoutForm({
             name: customer.name,
             phone: customer.phone
           };
-          checkoutOptions.shippingCarrier = selectedRate.carrier;
-          checkoutOptions.shippingService = selectedRate.service;
-          checkoutOptions.shippingCost = parseFloat(selectedRate.amount);
+          Object.assign(checkoutOptions, shippingSelection(selectedRate));
         }
         const result = await createCheckoutSession(offering.id, checkoutOptions);
         if (result.success && result.payment_url) {
@@ -7985,6 +8009,6 @@ function CapacityBadge({
   );
 }
 
-export { CalendarView, CapacityBadge, CheckoutForm, EventCalendar, EventCheckout, EventEmbed, EventJsonLd, EventModal, EventTile, EventsAgenda, EventsWidget, OfferingCard, OfferingList, ProductDetail, ProductEmbed, ProductGrid, ProductPage, RegistrationForm, SizeChart, UpcomingEvents, createCheckoutSession, createPaymentIntent, fetchActiveProcessor, fetchCategories, fetchLatestOffering, fetchNextEvent, fetchOffering, fetchOfferings, fetchProcessorConfig, fetchProductBySlug, fetchProducts, fetchProductsPublic, fetchServices, fetchShippingRates, fetchUpcomingEvents, formatDate, formatDateRange, formatDateTime, formatPrice, formatTime, getOfferingUrl, getRelativeTimeUntil, getSpotsRemaining, googleCalendarUrl, icsForEvent, icsResponse, isEventSoldOut, registerForEvent, useEventModal, validateAddress, validateDiscountCode };
-//# sourceMappingURL=chunk-7ZX6TO6C.mjs.map
-//# sourceMappingURL=chunk-7ZX6TO6C.mjs.map
+export { CalendarView, CapacityBadge, CheckoutForm, EventCalendar, EventCheckout, EventEmbed, EventJsonLd, EventModal, EventTile, EventsAgenda, EventsWidget, OfferingCard, OfferingList, ProductDetail, ProductEmbed, ProductGrid, ProductPage, RegistrationForm, SizeChart, UpcomingEvents, createCheckoutSession, createPaymentIntent, fetchActiveProcessor, fetchCategories, fetchLatestOffering, fetchNextEvent, fetchOffering, fetchOfferings, fetchProcessorConfig, fetchProductBySlug, fetchProducts, fetchProductsPublic, fetchServices, fetchShippingRates, fetchUpcomingEvents, formatDate, formatDateRange, formatDateTime, formatPrice, formatTime, getOfferingUrl, getRelativeTimeUntil, getSpotsRemaining, googleCalendarUrl, icsForEvent, icsResponse, isEventSoldOut, registerForEvent, shippingSelection, useEventModal, validateAddress, validateDiscountCode };
+//# sourceMappingURL=chunk-6HFFTGFP.mjs.map
+//# sourceMappingURL=chunk-6HFFTGFP.mjs.map