@sonordev/site-kit 5.7.0 → 5.8.1

package/dist/{chunk-4B4S56WJ.mjs → chunk-5B4J3IBX.mjs}

@@ -1,3 +1,75 @@
+import { withSiteParam, withSiteBody } from './chunk-4TLFZ6NR.mjs';
+
+// src/blog/public-reads.ts
+async function fetchBlogPostBySlug({ apiUrl, apiKey, site }, slug) {
+  try {
+    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/posts/${slug}`, site), {
+      headers: { "x-api-key": apiKey },
+      next: { revalidate: 60 }
+    });
+    if (!response.ok) {
+      if (response.status !== 404) console.error("[Blog] Failed to fetch post:", response.statusText);
+      return null;
+    }
+    const data = await response.json();
+    return data.post || null;
+  } catch (error) {
+    console.error("[Blog] Error fetching post:", error);
+    return null;
+  }
+}
+async function fetchBlogCategories({ apiUrl, apiKey, site }) {
+  try {
+    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/categories`, site), {
+      headers: { "x-api-key": apiKey },
+      next: { revalidate: 300 }
+    });
+    if (!response.ok) return [];
+    const data = await response.json();
+    return data.categories || [];
+  } catch (error) {
+    console.error("[Blog] Error fetching categories:", error);
+    return [];
+  }
+}
+async function fetchRelatedBlogPosts({ apiUrl, apiKey, site }, currentPostId, limit, cache = {}) {
+  try {
+    const response = await fetch(`${apiUrl}/public/blog/related`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", "x-api-key": apiKey },
+      body: JSON.stringify(withSiteBody({ current_post_id: currentPostId, limit }, site)),
+      ...cache.revalidate !== void 0 ? { next: { revalidate: cache.revalidate } } : {}
+    });
+    if (!response.ok) {
+      console.error("[Blog] Failed to fetch related posts:", response.statusText);
+      return [];
+    }
+    const data = await response.json();
+    return data.posts || [];
+  } catch (error) {
+    console.error("[Blog] Error fetching related posts:", error);
+    return [];
+  }
+}
+
+// src/blog/artwork.ts
+function resolveBlogArtwork(post, placement = "card") {
+  const editorial = placement === "article" && !!post.editorial_image;
+  const src = (editorial ? post.editorial_image : post.featured_image) || void 0;
+  const alt = editorial ? post.editorial_image_alt ?? "" : post.featured_image_alt ?? post.title ?? "";
+  let composed = false;
+  if (src) {
+    try {
+      composed = /\/Blog\/Cards\//i.test(new URL(src, "https://site-kit.invalid").pathname);
+    } catch {
+    }
+  }
+  return { src, alt, composed };
+}
+function blogArtworkImageStyle(artwork) {
+  return artwork.composed ? { display: "block", height: "auto", maxHeight: "none", objectFit: "contain", transform: "none" } : void 0;
+}
+
 // src/blog/routes.ts
 function blogCategorySlug(category) {
   const value = typeof category === "string" ? category : category?.slug || category?.name || "";
@@ -49,24 +121,6 @@ function resolveBlogPostUrl(post, options = {}) {
   return resolveBlogUrl(createBlogRoutes(options).post(post), options.siteUrl);
 }
 
-// src/blog/artwork.ts
-function resolveBlogArtwork(post, placement = "card") {
-  const editorial = placement === "article" && !!post.editorial_image;
-  const src = (editorial ? post.editorial_image : post.featured_image) || void 0;
-  const alt = editorial ? post.editorial_image_alt ?? "" : post.featured_image_alt ?? post.title ?? "";
-  let composed = false;
-  if (src) {
-    try {
-      composed = /\/Blog\/Cards\//i.test(new URL(src, "https://site-kit.invalid").pathname);
-    } catch {
-    }
-  }
-  return { src, alt, composed };
-}
-function blogArtworkImageStyle(artwork) {
-  return artwork.composed ? { display: "block", height: "auto", maxHeight: "none", objectFit: "contain", transform: "none" } : void 0;
-}
-
 // src/blog/author-schema.ts
 function generateAuthorSchema(author, options = {}) {
   const { siteUrl = "", siteName } = options;
@@ -105,6 +159,6 @@ function generateAuthorSchema(author, options = {}) {
   return schema;
 }
 
-export { blogArtworkImageStyle, blogCategorySlug, createBlogRoutes, generateAuthorSchema, resolveBlogArtwork, resolveBlogPostUrl, resolveBlogUrl };
-//# sourceMappingURL=chunk-4B4S56WJ.mjs.map
-//# sourceMappingURL=chunk-4B4S56WJ.mjs.map
+export { blogArtworkImageStyle, blogCategorySlug, createBlogRoutes, fetchBlogCategories, fetchBlogPostBySlug, fetchRelatedBlogPosts, generateAuthorSchema, resolveBlogArtwork, resolveBlogPostUrl, resolveBlogUrl };
+//# sourceMappingURL=chunk-5B4J3IBX.mjs.map
+//# sourceMappingURL=chunk-5B4J3IBX.mjs.map

package/dist/chunk-5B4J3IBX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/blog/public-reads.ts","../src/blog/artwork.ts","../src/blog/routes.ts","../src/blog/author-schema.ts"],"names":[],"mappings":";;;AAgCA,eAAsB,oBACpB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,IAClB,IAAA,EAC0B;AAC1B,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,aAAA,CAAc,CAAA,EAAG,MAAM,CAAA,mBAAA,EAAsB,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,EAAG;AAAA,MACvF,OAAA,EAAS,EAAE,WAAA,EAAa,MAAA,EAAO;AAAA,MAC/B,IAAA,EAAM,EAAE,UAAA,EAAY,EAAA;AAAG,KACxB,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,IAAI,SAAS,MAAA,KAAW,GAAA,UAAa,KAAA,CAAM,8BAAA,EAAgC,SAAS,UAAU,CAAA;AAC9F,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,KAAK,IAAA,IAAQ,IAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAClD,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGA,eAAsB,mBAAA,CAAoB,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAK,EAA4C;AAC3G,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,aAAA,CAAc,GAAG,MAAM,CAAA,uBAAA,CAAA,EAA2B,IAAI,CAAA,EAAG;AAAA,MACpF,OAAA,EAAS,EAAE,WAAA,EAAa,MAAA,EAAO;AAAA,MAC/B,IAAA,EAAM,EAAE,UAAA,EAAY,GAAA;AAAI,KACzB,CAAA;AACD,IAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAC1B,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA,CAAK,cAAc,EAAC;AAAA,EAC7B,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,qCAAqC,KAAK,CAAA;AACxD,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAcA,eAAsB,qBAAA,CACpB,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,IAClB,aAAA,EACA,KAAA,EACA,KAAA,GAAiC,EAAC,EACb;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,oBAAA,CAAA,EAAwB;AAAA,MAC5D,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,aAAa,MAAA,EAAO;AAAA,MACnE,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,EAAE,iBAAiB,aAAA,EAAe,KAAA,EAAM,EAAG,IAAI,CAAC,CAAA;AAAA,MAClF,GAAI,KAAA,CAAM,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,CAAM,UAAA,EAAW,EAAE,GAAI;AAAC,KACpF,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,OAAA,CAAQ,KAAA,CAAM,uCAAA,EAAyC,QAAA,CAAS,UAAU,CAAA;AAC1E,MAAA,OAAO,EAAC;AAAA,IACV;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAA,CAAK,SAAS,EAAC;AAAA,EACxB,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,OAAO,EAAC;AAAA,EACV;AACF;;;AC5FO,SAAS,kBAAA,CAAmB,IAAA,EAAqB,SAAA,GAAgC,MAAA,EAAqB;AAC3G,EAAA,MAAM,SAAA,GAAY,SAAA,KAAc,SAAA,IAAa,CAAC,CAAC,IAAA,CAAK,eAAA;AACpD,EAAA,MAAM,GAAA,GAAA,CAAO,SAAA,GAAY,IAAA,CAAK,eAAA,GAAkB,KAAK,cAAA,KAAmB,MAAA;AACxE,EAAA,MAAM,GAAA,GAAM,YACR,IAAA,CAAK,mBAAA,IAAuB,KAC5B,IAAA,CAAK,kBAAA,IAAsB,KAAK,KAAA,IAAS,EAAA;AAC7C,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI;AAEF,MAAA,QAAA,GAAW,mBAAmB,IAAA,CAAK,IAAI,IAAI,GAAA,EAAK,0BAA0B,EAAE,QAAQ,CAAA;AAAA,IACtF,CAAA,CAAA,MAAQ;AAAA,IAAqE;AAAA,EAC/E;AACA,EAAA,OAAO,EAAE,GAAA,EAAK,GAAA,EAAK,QAAA,EAAS;AAC9B;AAGO,SAAS,sBAAsB,OAAA,EAAiD;AACrF,EAAA,OAAO,OAAA,CAAQ,QAAA,GACX,EAAE,OAAA,EAAS,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,QAAO,GAC/F,MAAA;AACN;;;ACXO,SAAS,iBAAiB,QAAA,EAA6C;AAC5E,EAAA,MAAM,KAAA,GAAQ,OAAO,QAAA,KAAa,QAAA,GAAW,WAAW,QAAA,EAAU,IAAA,IAAQ,UAAU,IAAA,IAAQ,EAAA;AAC5F,EAAA,OAAO,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,EAAE,CAAA;AACtF;AAEA,SAAS,UAAU,IAAA,EAAsB;AACvC,EAAA,MAAM,KAAA,GAAQ,KAAK,IAAA,EAAK;AACxB,EAAA,IAAI,CAAC,KAAA,IAAS,qBAAA,CAAsB,IAAA,CAAK,KAAK,CAAA,IAAK,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,IAAK,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,EAAG;AACjG,IAAA,MAAM,IAAI,MAAM,kEAAkE,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,MAAM,UAAA,CAAW,GAAG,CAAA,GAAI,KAAA,GAAQ,IAAI,KAAK,CAAA,CAAA;AAClD;AAGO,SAAS,gBAAA,CAAiB,OAAA,GAA8B,EAAC,EAAG;AACjE,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,IAAY,QAAQ,YAAA,IAAgB,OAAA,EAAS,MAAK,IAAK,OAAA;AAC5E,EAAA,MAAM,QAAQ,SAAA,CAAU,GAAG,EAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,IAAK,GAAA;AACpD,EAAA,MAAM,MAAA,GAAS,KAAA,KAAU,GAAA,GAAM,EAAA,GAAK,KAAA;AACpC,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,KAAK,IAAA,EAA6B;AAChC,MAAA,IAAI,QAAQ,QAAA,EAAU,OAAO,UAAU,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAC,CAAA;AAC7D,MAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,IAAA,CAAK,QAAA,IAAY,QAAQ,QAAQ,CAAA;AACnE,MAAA,OAAO,GAAG,MAAM,CAAA,EAAG,OAAA,CAAQ,qBAAA,IAAyB,WAAW,CAAA,CAAA,EAAI,kBAAA,CAAmB,QAAQ,CAAC,KAAK,EAAE,CAAA,CAAA,EAAI,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,IACzI,CAAA;AAAA,IACA,SAAS,IAAA,EAAsB;AAC7B,MAAA,MAAM,UAAA,GAAa,iBAAiB,IAAI,CAAA;AACxC,MAAA,OAAO,OAAA,CAAQ,YAAA,GACX,SAAA,CAAU,OAAA,CAAQ,YAAA,CAAa,UAAU,CAAC,CAAA,GAC1C,CAAA,EAAG,MAAM,CAAA,UAAA,EAAa,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AAAA,IAC1D,CAAA;AAAA,IACA,OAAA,EAAS,CAAC,IAAA,KAAiB,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAAA,IACxE,MAAA,EAAQ,CAAC,IAAA,KAAiB,CAAA,EAAG,MAAM,CAAA,QAAA,EAAW,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AAAA,IACtE,GAAA,EAAK,GAAG,MAAM,CAAA,QAAA,CAAA;AAAA,IACd,IAAA,EAAM,GAAG,MAAM,CAAA,SAAA;AAAA,GACjB;AACF;AAEO,SAAS,cAAA,CAAe,IAAA,EAAc,OAAA,GAAU,EAAA,EAAY;AACjE,EAAA,OAAO,CAAA,EAAG,QAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,EAAG,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA;AACzD;AAGO,SAAS,kBAAA,CAAmB,IAAA,EAAqB,OAAA,GAAqD,EAAC,EAAW;AACvH,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,aAAA,EAAe,IAAA,EAAK;AAC3C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,SAAS,CAAA,EAAG;AACnC,MAAA,IAAI;AAAE,QAAA,OAAO,IAAI,GAAA,CAAI,SAAS,CAAA,CAAE,QAAA,EAAS;AAAA,MAAE,CAAA,CAAA,MAAQ;AAAA,MAA4B;AAAA,IACjF,CAAA,MAAA,IAAW,SAAA,CAAU,UAAA,CAAW,GAAG,KAAK,CAAC,SAAA,CAAU,UAAA,CAAW,IAAI,CAAA,IAAK,CAAC,SAAA,CAAU,QAAA,CAAS,IAAI,CAAA,EAAG;AAChG,MAAA,OAAO,cAAA,CAAe,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,IAClD;AAAA,EACF;AACA,EAAA,OAAO,cAAA,CAAe,iBAAiB,OAAO,CAAA,CAAE,KAAK,IAAI,CAAA,EAAG,QAAQ,OAAO,CAAA;AAC7E;;;ACpDO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAAmD,EAAC,EAC5C;AACR,EAAA,MAAM,EAAE,OAAA,GAAU,EAAA,EAAI,QAAA,EAAS,GAAI,OAAA;AAEnC,EAAA,MAAM,SAAmB,CAAC,GAAI,MAAA,CAAO,OAAA,IAAW,EAAG,CAAA;AACnD,EAAA,IAAI,MAAA,CAAO,YAAA,EAAc,MAAA,CAAO,IAAA,CAAK,OAAO,YAAY,CAAA;AACxD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,EAAS,MAAA,CAAO,KAAK,CAAA,oBAAA,EAAuB,MAAA,CAAO,YAAA,CAAa,OAAO,CAAA,CAAE,CAAA;AAClG,EAAA,IAAI,OAAO,YAAA,EAAc,QAAA,SAAiB,IAAA,CAAK,MAAA,CAAO,aAAa,QAAQ,CAAA;AAC3E,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,EAAQ,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA,CAAE,CAAA;AAG/F,EAAA,MAAM,YAAA,GAAe,CAAC,GAAG,IAAI,IAAI,MAAA,CAAO,MAAA,CAAO,OAAO,CAAC,CAAC,CAAA;AAExD,EAAA,MAAM,MAAA,GAA8B;AAAA,IAClC,UAAA,EAAY,oBAAA;AAAA,IACZ,OAAA,EAAS,QAAA;AAAA,IACT,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,KAAK,MAAA,CAAO,eAAA,IAAmB,GAAG,OAAO,CAAA,aAAA,EAAgB,OAAO,IAAI,CAAA;AAAA,GACtE;AAEA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,QAAA,GAAW,MAAA,CAAO,KAAA;AAC3C,EAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAA,CAAO,QAAA,GAAW;AAAA,MAChB,OAAA,EAAS,cAAA;AAAA,MACT,IAAA,EAAM,OAAO,OAAA,IAAW,QAAA;AAAA,MACxB,GAAI,OAAA,GAAU,EAAE,GAAA,EAAK,OAAA,KAAY;AAAC,KACpC;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,OAAO,MAAA,CAAO,SAAA,SAAkB,WAAA,GAAc,MAAA,CAAO,aAAa,MAAA,CAAO,GAAA;AACpF,EAAA,IAAI,MAAA,CAAO,UAAA,EAAY,MAAA,CAAO,KAAA,GAAQ,MAAA,CAAO,UAAA;AAC7C,EAAA,IAAI,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,YAAA;AAC7C,EAAA,IAAI,MAAA,CAAO,eAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG,MAAA,CAAO,aAAa,MAAA,CAAO,WAAA;AACpF,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG;AACvD,IAAA,MAAA,CAAO,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACpD,OAAA,EAAS,mCAAA;AAAA,MACT,kBAAA,EAAoB;AAAA,KACtB,CAAE,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACT","file":"chunk-5B4J3IBX.mjs","sourcesContent":["/**\n * @sonordev/site-kit/blog — shared public blog reads (leaf module)\n *\n * SINGLE SOURCE OF TRUTH for the three blog reads that both `server-core`\n * (credentials from resolveServerApiConfig) and the server-ui components\n * (credentials from their `apiUrl` / `apiKey` props) make:\n *\n *   - post by slug  — getBlogPost, <BlogPost>\n *   - categories    — getBlogCategories, <BlogList>, <BlogSidebar>\n *   - related posts — getRelatedInsights, <BlogPost>, <RelatedPosts>\n *\n * Each used to be copied into every caller, which is how one copy of the\n * related read kept a camelCase body and a wrong path long after the others\n * were fixed (see the notes in RelatedPosts). Adding the multi-site `site`\n * dimension would have meant a fourth edit to each copy, so they live here now.\n *\n * A leaf on purpose: it takes credentials as arguments and imports no\n * `server-only` code, because the client-stamped `blog` barrel reaches it\n * through BlogList / BlogPost / BlogSidebar. Callers resolve credentials; this\n * module only talks to the API.\n */\nimport { withSiteBody, withSiteParam } from '../sites/site-param'\nimport type { BlogCategory, BlogPost } from './types'\n\nexport interface BlogReadConfig {\n  apiUrl: string\n  apiKey: string\n  /** Sub-site host override. Omit to resolve from NEXT_PUBLIC_SITE_URL. */\n  site?: string\n}\n\n/** GET /public/blog/posts/:slug — null when missing or on any failure. */\nexport async function fetchBlogPostBySlug(\n  { apiUrl, apiKey, site }: BlogReadConfig,\n  slug: string\n): Promise<BlogPost | null> {\n  try {\n    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/posts/${slug}`, site), {\n      headers: { 'x-api-key': apiKey },\n      next: { revalidate: 60 },\n    })\n    if (!response.ok) {\n      if (response.status !== 404) console.error('[Blog] Failed to fetch post:', response.statusText)\n      return null\n    }\n    const data = await response.json()\n    return data.post || null\n  } catch (error) {\n    console.error('[Blog] Error fetching post:', error)\n    return null\n  }\n}\n\n/** GET /public/blog/categories — [] on any failure. */\nexport async function fetchBlogCategories({ apiUrl, apiKey, site }: BlogReadConfig): Promise<BlogCategory[]> {\n  try {\n    const response = await fetch(withSiteParam(`${apiUrl}/public/blog/categories`, site), {\n      headers: { 'x-api-key': apiKey },\n      next: { revalidate: 300 },\n    })\n    if (!response.ok) return []\n    const data = await response.json()\n    return data.categories || []\n  } catch (error) {\n    console.error('[Blog] Error fetching categories:', error)\n    return []\n  }\n}\n\n/**\n * POST /public/blog/related — [] on any failure.\n *\n * `/public/blog/*`, not `/api/public/blog/*`: public-blog.controller is one of\n * only two public controllers whose @Controller() omits the `api/` segment.\n * The body is snake_case `current_post_id` (the controller looks the post up\n * by id — there is no slug path), and `site` rides in the body because this is\n * the one blog read that isn't a GET.\n *\n * `revalidate` is optional so <RelatedPosts>, which never set a fetch cache\n * lifetime, keeps rendering exactly as it did.\n */\nexport async function fetchRelatedBlogPosts(\n  { apiUrl, apiKey, site }: BlogReadConfig,\n  currentPostId: string,\n  limit: number,\n  cache: { revalidate?: number } = {}\n): Promise<BlogPost[]> {\n  try {\n    const response = await fetch(`${apiUrl}/public/blog/related`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', 'x-api-key': apiKey },\n      body: JSON.stringify(withSiteBody({ current_post_id: currentPostId, limit }, site)),\n      ...(cache.revalidate !== undefined ? { next: { revalidate: cache.revalidate } } : {}),\n    })\n    if (!response.ok) {\n      console.error('[Blog] Failed to fetch related posts:', response.statusText)\n      return []\n    }\n    const data = await response.json()\n    return data.posts || []\n  } catch (error) {\n    console.error('[Blog] Error fetching related posts:', error)\n    return []\n  }\n}\n","import type { CSSProperties } from 'react'\nimport type { BlogPost } from './types'\n\nexport interface BlogArtwork {\n  src: string | undefined\n  alt: string\n  composed: boolean\n}\n\ntype ArtworkSource = Pick<BlogPost, 'title' | 'featured_image' | 'featured_image_alt' | 'editorial_image' | 'editorial_image_alt'>\n\n/** Single source of truth for article artwork versus complete promotional cards. */\nexport function resolveBlogArtwork(post: ArtworkSource, placement: 'article' | 'card' = 'card'): BlogArtwork {\n  const editorial = placement === 'article' && !!post.editorial_image\n  const src = (editorial ? post.editorial_image : post.featured_image) || undefined\n  const alt = editorial\n    ? post.editorial_image_alt ?? ''\n    : post.featured_image_alt ?? post.title ?? ''\n  let composed = false\n  if (src) {\n    try {\n      // Inspect the path, not a query string that happens to mention a card.\n      composed = /\\/Blog\\/Cards\\//i.test(new URL(src, 'https://site-kit.invalid').pathname)\n    } catch { /* An unrecognized source retains the normal photograph layout. */ }\n  }\n  return { src, alt, composed }\n}\n\n/** Preserve generated text and graphics across every stock card surface. */\nexport function blogArtworkImageStyle(artwork: BlogArtwork): CSSProperties | undefined {\n  return artwork.composed\n    ? { display: 'block', height: 'auto', maxHeight: 'none', objectFit: 'contain', transform: 'none' }\n    : undefined\n}\n","/** Shared, environment-free publication routes for server helpers and blog UI. */\nexport interface BlogRoutePost {\n  slug: string\n  category?: string | { slug?: string; name?: string } | null\n  canonical_url?: string | null\n}\n\nexport interface BlogRoutingOptions {\n  /** Publication root. Defaults to /blog. */\n  basePath?: string\n  /** Existing metadata option; basePath takes precedence when both are set. */\n  blogBasePath?: string\n  /** Use /publication/category/post instead of /publication/post. */\n  includeCategoryInPath?: boolean\n  /** Fallback category for partial cluster records. */\n  category?: string\n  /** A custom local article path. Receives the post's slug and category. */\n  postPath?: (post: BlogRoutePost) => string\n  /** A custom category destination, for example /theforge?category=guides. */\n  categoryPath?: (slug: string) => string\n}\n\nexport function blogCategorySlug(category: BlogRoutePost['category']): string {\n  const value = typeof category === 'string' ? category : category?.slug || category?.name || ''\n  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '')\n}\n\nfunction localPath(path: string): string {\n  const value = path.trim()\n  if (!value || /^[a-z][a-z\\d+.-]*:/i.test(value) || value.startsWith('//') || value.includes('\\\\')) {\n    throw new Error('Blog routes must be local paths, such as /theforge/guides/story.')\n  }\n  return value.startsWith('/') ? value : `/${value}`\n}\n\n/** Single source of truth for publication paths. Custom routes never change OG artwork. */\nexport function createBlogRoutes(options: BlogRoutingOptions = {}) {\n  const raw = (options.basePath ?? options.blogBasePath ?? '/blog').trim() || '/blog'\n  const index = localPath(raw).replace(/\\/+$/, '') || '/'\n  const prefix = index === '/' ? '' : index\n  return {\n    index,\n    post(post: BlogRoutePost): string {\n      if (options.postPath) return localPath(options.postPath(post))\n      const category = blogCategorySlug(post.category || options.category)\n      return `${prefix}${options.includeCategoryInPath && category ? `/${encodeURIComponent(category)}` : ''}/${encodeURIComponent(post.slug)}`\n    },\n    category(slug: string): string {\n      const normalized = blogCategorySlug(slug)\n      return options.categoryPath\n        ? localPath(options.categoryPath(normalized))\n        : `${prefix}/category/${encodeURIComponent(normalized)}`\n    },\n    cluster: (slug: string) => `${prefix}/cluster/${encodeURIComponent(slug)}`,\n    author: (slug: string) => `${prefix}/author/${encodeURIComponent(slug)}`,\n    rss: `${prefix}/rss.xml`,\n    atom: `${prefix}/feed.xml`,\n  }\n}\n\nexport function resolveBlogUrl(path: string, siteUrl = ''): string {\n  return `${siteUrl.replace(/\\/+$/, '')}${localPath(path)}`\n}\n\n/** Metadata, feeds, sitemaps and generated schemas agree on a supplied canonical. */\nexport function resolveBlogPostUrl(post: BlogRoutePost, options: BlogRoutingOptions & { siteUrl?: string } = {}): string {\n  const canonical = post.canonical_url?.trim()\n  if (canonical) {\n    if (/^https?:\\/\\//i.test(canonical)) {\n      try { return new URL(canonical).toString() } catch { /* use the local route */ }\n    } else if (canonical.startsWith('/') && !canonical.startsWith('//') && !canonical.includes('\\\\')) {\n      return resolveBlogUrl(canonical, options.siteUrl)\n    }\n  }\n  return resolveBlogUrl(createBlogRoutes(options).post(post), options.siteUrl)\n}\n","/**\n * @sonordev/site-kit/blog — Author JSON-LD (pure)\n *\n * Split out of `./server-core` on purpose. `generateAuthorSchema` is a pure\n * function — it maps a `BlogAuthor` to a Person schema object and touches no\n * env, no config, and no network. It only ever lived in `server-core` because\n * the other author helpers there (`getAuthorBySlug`, `getAuthorPosts`) do fetch.\n *\n * `AuthorPage` is exported from the client-stamped `@sonordev/site-kit/blog`\n * barrel (see `./index.ts`), so importing this one function from `server-core`\n * dragged that whole server module — its `x-api-key` fetches included — into\n * the browser bundle. Keeping the pure half here means `AuthorPage` can stay in\n * the barrel without pulling a single line of server code with it.\n *\n * Anything added here must stay pure. If it needs an API key or a fetch, it\n * belongs in `./server-core`, not in this file.\n */\n\nimport type { BlogAuthor } from './types'\n\n/**\n * Generate Person JSON-LD schema for an author page\n */\nexport function generateAuthorSchema(\n  author: BlogAuthor,\n  options: { siteUrl?: string; siteName?: string } = {}\n): object {\n  const { siteUrl = '', siteName } = options\n\n  const sameAs: string[] = [...(author.same_as || [])]\n  if (author.linkedin_url) sameAs.push(author.linkedin_url)\n  if (author.twitter_url) sameAs.push(author.twitter_url)\n  if (author.website_url) sameAs.push(author.website_url)\n  if (author.social_links?.twitter) sameAs.push(`https://twitter.com/${author.social_links.twitter}`)\n  if (author.social_links?.linkedin) sameAs.push(author.social_links.linkedin)\n  if (author.social_links?.github) sameAs.push(`https://github.com/${author.social_links.github}`)\n\n  // Deduplicate\n  const uniqueSameAs = [...new Set(sameAs.filter(Boolean))]\n\n  const schema: Record<string, any> = {\n    '@context': 'https://schema.org',\n    '@type': 'Person',\n    name: author.name,\n    url: author.author_page_url || `${siteUrl}/blog/author/${author.slug}`,\n  }\n\n  if (author.title) schema.jobTitle = author.title\n  if (author.company || siteName) {\n    schema.worksFor = {\n      '@type': 'Organization',\n      name: author.company || siteName,\n      ...(siteUrl ? { url: siteUrl } : {}),\n    }\n  }\n  if (author.bio || author.short_bio) schema.description = author.short_bio || author.bio\n  if (author.avatar_url) schema.image = author.avatar_url\n  if (uniqueSameAs.length > 0) schema.sameAs = uniqueSameAs\n  if (author.knows_about && author.knows_about.length > 0) schema.knowsAbout = author.knows_about\n  if (author.credentials && author.credentials.length > 0) {\n    schema.hasCredential = author.credentials.map((c) => ({\n      '@type': 'EducationalOccupationalCredential',\n      credentialCategory: c,\n    }))\n  }\n\n  return schema\n}\n"]}

package/dist/{chunk-M5GY2AI3.mjs → chunk-5K6B4LWV.mjs}

@@ -1,4 +1,5 @@
-import { SITE_KIT_VERSION } from './chunk-QRBPT6Z6.mjs';
+import { resolveFetch } from './chunk-BQP6JIE2.mjs';
+import { SITE_KIT_VERSION } from './chunk-OESGRWI4.mjs';
 import 'server-only';
 
 var MINT_PATH = "/api/public/site-token";
@@ -35,13 +36,6 @@ function failClosed(reason, rawKey, now) {
     `site-kit: could not mint a site token (${reason}). Refusing to publish the raw SONOR_API_KEY in page HTML, so this build fails instead. Check that the mint endpoint is reachable and the key is valid, then rebuild. To ship anyway \u2014 which publishes the project secret in public HTML \u2014 set SONOR_SITE_TOKEN_FALLBACK=raw.`
   );
 }
-function resolveFetch() {
-  const current = globalThis.fetch;
-  if (!current) throw new Error("site-kit: global fetch is unavailable");
-  const original = current._nextOriginalFetch;
-  if (typeof original === "function") return { fn: original, unpatched: true };
-  return { fn: current, unpatched: false };
-}
 function isFrameworkSignal(err) {
   if (!err || typeof err !== "object") return false;
   const e = err;
@@ -130,5 +124,5 @@ async function mintWithRetry(rawKey, apiUrl) {
 }
 
 export { resolveClientCredential };
-//# sourceMappingURL=chunk-M5GY2AI3.mjs.map
-//# sourceMappingURL=chunk-M5GY2AI3.mjs.map
+//# sourceMappingURL=chunk-5K6B4LWV.mjs.map
+//# sourceMappingURL=chunk-5K6B4LWV.mjs.map

package/dist/chunk-5K6B4LWV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/mint-site-token.ts"],"names":[],"mappings":";;;;AAgDA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,iBAAA,GAAoB,MAAA;AAO1B,IAAM,iBAAA,GAAoB,CAAA;AAC1B,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,mBAAA,GAAsB,GAAA;AAM5B,IAAM,KAAA,uBAAY,GAAA,EAAwB;AAO1C,IAAM,QAAA,uBAAe,GAAA,EAA6B;AAElD,IAAM,KAAA,GAAQ,CAAC,EAAA,KAAe,IAAI,OAAA,CAAc,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,EAAE,CAAC,CAAA;AAOxE,SAAS,YAAA,CAAa,KAAsB,OAAA,EAAyB;AACnE,EAAA,MAAM,MAAA,GAAS,GAAA,EAAK,OAAA,EAAS,GAAA,GAAM,aAAa,CAAA;AAChD,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,OAAA,GAAU,OAAO,MAAM,CAAA;AAC7B,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,GAC9B,OAAA,GAAU,GAAA,GACV,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI;AAClC,IAAA,IAAI,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,GAAK,GAAG,OAAO,IAAA,CAAK,GAAA,CAAI,EAAA,EAAI,mBAAmB,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,oBAAA,GAAuB,CAAA,IAAK,SAAS,mBAAmB,CAAA;AAC1E;AAGA,IAAM,iBAAA,GAAoB,CAAC,MAAA,KAAmB,MAAA,KAAW,OAAO,MAAA,IAAU,GAAA;AAM1E,SAAS,kBAAA,GAA8B;AACrC,EAAA,OACE,OAAO,OAAA,KAAY,WAAA,IACnB,OAAA,CAAQ,KAAK,yBAAA,KAA8B,KAAA;AAE/C;AAEA,SAAS,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,GAAA,EAAqB;AACvE,EAAA,IAAI,oBAAmB,EAAG;AACxB,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,sCAAsC,MAAM,CAAA,uMAAA;AAAA,KAG9C;AACA,IAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,EAAE,UAAA,EAAY,QAAQ,SAAA,EAAW,GAAA,GAAM,KAAQ,CAAA;AACjE,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,0CAA0C,MAAM,CAAA,uRAAA;AAAA,GAIlD;AACF;AAsBO,SAAS,kBAAkB,GAAA,EAAuB;AACvD,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAC5C,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,sBAAA,EAAwB,OAAO,IAAA;AAChD,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,yBAAA,EAA2B,OAAO,IAAA;AACjD,EAAA,IAAI,OAAO,EAAE,MAAA,KAAW,QAAA,IAAY,EAAE,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACzE,EAAA,IAAI,EAAE,QAAA,qBAAa,MAAA,CAAO,GAAA,CAAI,gBAAgB,GAAG,OAAO,IAAA;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,eAAsB,uBAAA,CACpB,QACA,MAAA,EACiB;AACjB,EAAA,IAAI,CAAC,QAAQ,OAAO,EAAA;AAEpB,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,iBAAiB,CAAA,EAAG,OAAO,MAAA;AAEjD,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AAC/B,EAAA,IAAI,UAAU,MAAA,CAAO,SAAA,GAAY,KAAK,GAAA,EAAI,SAAU,MAAA,CAAO,UAAA;AAG3D,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACnC,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,EAAQ,MAAM,CAAA;AAC5C,EAAA,QAAA,CAAS,GAAA,CAAI,QAAQ,OAAO,CAAA;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAA;AAAA,EACf,CAAA,SAAE;AACA,IAAA,QAAA,CAAS,OAAO,MAAM,CAAA;AAAA,EACxB;AACF;AAEA,eAAe,aAAA,CAAc,QAAgB,MAAA,EAAiC;AAC5E,EAAA,MAAM,IAAA,GAAA,CAAQ,MAAA,IAAU,sBAAA,EAAwB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAClE,EAAA,IAAI,UAAA,GAAa,eAAA;AAEjB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,iBAAA,EAAmB,OAAA,EAAA,EAAW;AAC5D,IAAA,IAAI,GAAA,GAAuB,IAAA;AAC3B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,KAAc,YAAA,EAAa;AAChD,MAAA,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI;AAAA,QACzC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,WAAA,EAAa,MAAA;AAAA,UACb,mBAAA,EAAqB;AAAA,SACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,GAAI,YAAY,EAAC,GAAK,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,EAAM,EAAE;AAAA,QACpD,MAAA,EACE,OAAO,WAAA,KAAgB,WAAA,IAAe,YAAY,OAAA,GAC9C,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA,GACnC,KAAA;AAAA,OACP,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG,MAAM,GAAA;AAClC,MAAA,UAAA,GAAa,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,eAAA;AAClD,MAAA,IAAI,OAAA,GAAU,oBAAoB,CAAA,EAAG;AACnC,QAAA,MAAM,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,OAAO,CAAC,CAAA;AACvC,QAAA;AAAA,MACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,OAAY,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,MAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AACpB,MAAA,MAAM,YAAY,OAAO,IAAA,EAAM,SAAA,KAAc,QAAA,GAAW,KAAK,SAAA,GAAY,IAAA;AACzE,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,UAAA,CAAW,iBAAiB,CAAA,EAAG;AACpE,QAAA,KAAA,CAAM,IAAI,MAAA,EAAQ;AAAA,UAChB,UAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,IAAK,SAAA,GAAY,GAAA,GAAQ,CAAA,EAAG,EAAA,GAAK,GAAM;AAAA,SACrE,CAAA;AACD,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,UAAA,GAAa,+BAAA;AACb,MAAA;AAAA,IACF;AAKA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACtB,MAAA,KAAA,CAAM,GAAA,CAAI,MAAA,EAAQ,EAAE,UAAA,EAAY,MAAA,EAAQ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,EAAQ,CAAA;AACxE,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,UAAA,GAAa,CAAA,KAAA,EAAQ,IAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,IAAI,kBAAkB,GAAA,CAAI,MAAM,CAAA,IAAK,OAAA,GAAU,oBAAoB,CAAA,EAAG;AACpE,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,EAAK,OAAO,CAAA;AACvC,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,oCAAA,EAAuC,GAAA,CAAI,MAAM,CAAA,cAAA,EAAiB,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA,YAAA,EACrE,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,iBAAiB,CAAA,EAAA;AAAA,OAChD;AACA,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA;AAAA,EACF;AAEA,EAAA,OAAO,UAAA,CAAW,UAAA,EAAY,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAClD","file":"chunk-5K6B4LWV.mjs","sourcesContent":["/**\n * @sonordev/site-kit/server — Client-token minting (server-only)\n *\n * SiteKitLayout holds the raw `SONOR_API_KEY` server-side but must NOT ship it to\n * the browser. This mints a short-lived, project-scoped token (server-to-server,\n * authenticated with the raw key, no browser Origin so it passes domain-binding)\n * and returns THAT for the layout to inject instead.\n *\n * `import 'server-only'` makes importing this into a client bundle a hard build\n * error — the raw key stays on the server.\n *\n * FAILS CLOSED. If minting genuinely fails, this throws and the build fails —\n * it does NOT publish the raw key. A failed deploy is loud and recoverable; a\n * leaked project secret in public HTML is neither. The only paths that still\n * return the raw key are a 404 (an older API that predates the endpoint, an\n * expected state during rollout) and the explicit `SONOR_SITE_TOKEN_FALLBACK=raw`\n * escape hatch, for when shipping beats being blocked.\n *\n * That posture is not academic. Through 3.5.0 a throttled mint (HTTP 429)\n * returned the raw key AND cached it for 60s, so every page rendered in that\n * window shipped the secret: one real build came out with 180 of 272 prerendered\n * pages carrying it. The build \"succeeded\" and nothing downstream noticed.\n * Rate limiting is transient by definition — the fix is to wait and retry, not\n * to downgrade to publishing the key.\n *\n * Two things keep the request count low enough that throttling is rare:\n *  - a module-level memo, so a worker mints once and every page reuses the seed;\n *  - an in-flight map, because that memo is only populated AFTER the await. Next\n *    renders pages concurrently, so without coalescing the first N concurrent\n *    renders in a process all miss the cache and all fire a request — a\n *    stampede per worker, multiplied by one worker per core. That is how a\n *    single site exhausted a 60/min budget.\n *\n * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API\n * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS\n * (sonor-api common/site-auth/site-token.util.ts — currently 400 days, raised\n * from 30 alongside this fix). A site not rebuilt within that window serves a\n * seed the client cannot refresh, and its forms/analytics/engage start failing\n * for new visitors. Keep that limit comfortably longer than the fleet's\n * realistic redeploy gap; marketing sites routinely go many months untouched.\n */\nimport 'server-only'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport { resolveFetch } from '../shared/fresh-fetch'\n\n// Re-exported for this module's unit tests; the helper lives in shared/fresh-fetch.\nexport { resolveFetch }\n\nconst MINT_PATH = '/api/public/site-token'\nconst MINT_TIMEOUT_MS = 4_000\nconst SITE_TOKEN_PREFIX = 'st1.'\n\n/**\n * Retry budget for transient failures (429 / 5xx / network). Rate limiting is\n * measured per minute, so a few seconds of backoff clears it; the whole ladder\n * costs at most ~20s once per build worker, and only when something is wrong.\n */\nconst MINT_MAX_ATTEMPTS = 4\nconst MINT_BACKOFF_BASE_MS = 500\nconst MINT_BACKOFF_CAP_MS = 8_000\n\ninterface CacheEntry {\n  credential: string\n  expiresAt: number\n}\nconst cache = new Map<string, CacheEntry>()\n\n/**\n * Requests already in flight, keyed by raw key. The `cache` above is only\n * written after the response lands, so concurrent renders would otherwise each\n * start their own mint. See the module header.\n */\nconst inflight = new Map<string, Promise<string>>()\n\nconst sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms))\n\n/**\n * Honour `Retry-After` when the server sends it (delta-seconds or HTTP date),\n * otherwise exponential backoff. Capped so a misconfigured server cannot stall\n * a build indefinitely.\n */\nfunction retryDelayMs(res: Response | null, attempt: number): number {\n  const header = res?.headers?.get?.('retry-after')\n  if (header) {\n    const seconds = Number(header)\n    const ms = Number.isFinite(seconds)\n      ? seconds * 1000\n      : Date.parse(header) - Date.now()\n    if (Number.isFinite(ms) && ms > 0) return Math.min(ms, MINT_BACKOFF_CAP_MS)\n  }\n  return Math.min(MINT_BACKOFF_BASE_MS * 2 ** attempt, MINT_BACKOFF_CAP_MS)\n}\n\n/** 429 and 5xx are transient; waiting is the correct response to both. */\nconst isRetryableStatus = (status: number) => status === 429 || status >= 500\n\n/**\n * The escape hatch, for when a broken mint must not block a release. Opt-in and\n * loud: it re-enables publishing the project secret in page HTML.\n */\nfunction rawFallbackAllowed(): boolean {\n  return (\n    typeof process !== 'undefined' &&\n    process.env?.SONOR_SITE_TOKEN_FALLBACK === 'raw'\n  )\n}\n\nfunction failClosed(reason: string, rawKey: string, now: number): string {\n  if (rawFallbackAllowed()) {\n    console.warn(\n      `[SiteKitLayout] Token mint failed (${reason}) and SONOR_SITE_TOKEN_FALLBACK=raw is set; ` +\n        'injecting the RAW API KEY into page HTML. The key is publicly readable wherever ' +\n        'this page is served — unset the escape hatch once the mint is healthy.',\n    )\n    cache.set(rawKey, { credential: rawKey, expiresAt: now + 60_000 })\n    return rawKey\n  }\n  throw new Error(\n    `site-kit: could not mint a site token (${reason}). Refusing to publish the raw ` +\n      'SONOR_API_KEY in page HTML, so this build fails instead. Check that the mint ' +\n      'endpoint is reachable and the key is valid, then rebuild. To ship anyway — ' +\n      'which publishes the project secret in public HTML — set SONOR_SITE_TOKEN_FALLBACK=raw.',\n  )\n}\n\n/*\n * The mint uses Next's saved original fetch (resolveFetch, shared/fresh-fetch.ts,\n * which documents why). A credential is not page data: `cache: 'no-store'` would\n * bail a static route before the request goes out (verified on Next 16.2.9: the\n * mint endpoint received zero requests for a static build, and every page\n * shipped the raw key), and a Data Cache entry would let a fresh deploy re-bake a\n * months-old seed. The module-level memo above is the only cache we want: one\n * mint per build process, and a build-fresh seed on every deploy.\n */\n\n/**\n * Next signals \"this render must go dynamic\" by THROWING (DynamicServerError,\n * static-gen bailout, redirect/notFound digests, React's postpone). Those are\n * the framework's control flow, not a mint failure. Swallowing one makes Next\n * believe the render succeeded statically — which is precisely how the raw key\n * ended up stranded in prerendered HTML with no error anywhere. Let them\n * propagate; only real network/HTTP failures fall back to the raw key.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function isFrameworkSignal(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false\n  const e = err as { digest?: unknown; code?: unknown; $$typeof?: unknown }\n  if (e.digest === 'DYNAMIC_SERVER_USAGE') return true\n  if (e.code === 'NEXT_STATIC_GEN_BAILOUT') return true\n  if (typeof e.digest === 'string' && e.digest.startsWith('NEXT_')) return true\n  if (e.$$typeof === Symbol.for('react.postpone')) return true\n  return false\n}\n\nexport async function resolveClientCredential(\n  rawKey: string,\n  apiUrl: string,\n): Promise<string> {\n  if (!rawKey) return ''\n  // Env should hold a raw key; if it already looks like a token, pass it through.\n  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey\n\n  const cached = cache.get(rawKey)\n  if (cached && cached.expiresAt > Date.now()) return cached.credential\n\n  // Collapse concurrent renders onto one request rather than a stampede.\n  const pending = inflight.get(rawKey)\n  if (pending) return pending\n\n  const request = mintWithRetry(rawKey, apiUrl)\n  inflight.set(rawKey, request)\n  try {\n    return await request\n  } finally {\n    inflight.delete(rawKey)\n  }\n}\n\nasync function mintWithRetry(rawKey: string, apiUrl: string): Promise<string> {\n  const base = (apiUrl || 'https://api.sonor.io').replace(/\\/+$/, '')\n  let lastReason = 'unknown error'\n\n  for (let attempt = 0; attempt < MINT_MAX_ATTEMPTS; attempt++) {\n    let res: Response | null = null\n    try {\n      const { fn: fetchFn, unpatched } = resolveFetch()\n      res = await fetchFn(`${base}${MINT_PATH}`, {\n        method: 'POST',\n        headers: {\n          'content-type': 'application/json',\n          'x-api-key': rawKey,\n          'x-sitekit-version': SITE_KIT_VERSION,\n        },\n        // Only meaningful on the fallback path, where a future Next stopped\n        // exposing `_nextOriginalFetch` and we're back on the patched fetch.\n        // `revalidate: false` is the one setting that neither bails out of static\n        // generation nor downgrades the route to ISR; a Data Cache entry is the\n        // lesser evil versus shipping the raw key again.\n        ...(unpatched ? {} : ({ next: { revalidate: false } } as RequestInit)),\n        signal:\n          typeof AbortSignal !== 'undefined' && AbortSignal.timeout\n            ? AbortSignal.timeout(MINT_TIMEOUT_MS)\n            : undefined,\n      })\n    } catch (err) {\n      // Never swallow the framework's own control flow — see isFrameworkSignal.\n      if (isFrameworkSignal(err)) throw err\n      lastReason = err instanceof Error ? err.message : 'network error'\n      if (attempt < MINT_MAX_ATTEMPTS - 1) {\n        await sleep(retryDelayMs(null, attempt))\n        continue\n      }\n      break\n    }\n\n    if (res.ok) {\n      const data: any = await res.json().catch(() => null)\n      const token = data?.token\n      const expiresIn = typeof data?.expiresIn === 'number' ? data.expiresIn : 3600\n      if (typeof token === 'string' && token.startsWith(SITE_TOKEN_PREFIX)) {\n        cache.set(rawKey, {\n          credential: token,\n          expiresAt: Date.now() + Math.min((expiresIn * 1000) / 2, 30 * 60_000),\n        })\n        return token\n      }\n      lastReason = 'mint returned no usable token'\n      break\n    }\n\n    // 404 = an API older than the endpoint. Expected during rollout, and the raw\n    // key is exactly what such an API still expects, so this stays a fallback\n    // rather than a build failure.\n    if (res.status === 404) {\n      cache.set(rawKey, { credential: rawKey, expiresAt: Date.now() + 60_000 })\n      return rawKey\n    }\n\n    lastReason = `HTTP ${res.status}`\n    if (isRetryableStatus(res.status) && attempt < MINT_MAX_ATTEMPTS - 1) {\n      const delay = retryDelayMs(res, attempt)\n      console.warn(\n        `[SiteKitLayout] Token mint returned ${res.status}; retrying in ${Math.round(delay)}ms ` +\n          `(attempt ${attempt + 2}/${MINT_MAX_ATTEMPTS}).`,\n      )\n      await sleep(delay)\n      continue\n    }\n    break\n  }\n\n  return failClosed(lastReason, rawKey, Date.now())\n}\n"]}

package/dist/chunk-5SANRSX3.mjs

@@ -0,0 +1,17 @@
+// src/shared/page-leave.ts
+function onPageLeave(onLeave, win = window, doc = document) {
+  const handleVisibilityChange = () => {
+    if (doc.visibilityState === "hidden") onLeave();
+  };
+  const handlePageHide = () => onLeave();
+  doc.addEventListener("visibilitychange", handleVisibilityChange);
+  win.addEventListener("pagehide", handlePageHide);
+  return () => {
+    doc.removeEventListener("visibilitychange", handleVisibilityChange);
+    win.removeEventListener("pagehide", handlePageHide);
+  };
+}
+
+export { onPageLeave };
+//# sourceMappingURL=chunk-5SANRSX3.mjs.map
+//# sourceMappingURL=chunk-5SANRSX3.mjs.map

package/dist/chunk-5SANRSX3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/page-leave.ts"],"names":[],"mappings":";AAwBO,SAAS,WAAA,CACd,OAAA,EACA,GAAA,GAAsB,MAAA,EACtB,MAAqE,QAAA,EACzD;AACZ,EAAA,MAAM,yBAAyB,MAAM;AACnC,IAAA,IAAI,GAAA,CAAI,eAAA,KAAoB,QAAA,EAAU,OAAA,EAAQ;AAAA,EAChD,CAAA;AACA,EAAA,MAAM,cAAA,GAAiB,MAAM,OAAA,EAAQ;AAErC,EAAA,GAAA,CAAI,gBAAA,CAAiB,oBAAoB,sBAAsB,CAAA;AAC/D,EAAA,GAAA,CAAI,gBAAA,CAAiB,YAAY,cAAc,CAAA;AAE/C,EAAA,OAAO,MAAM;AACX,IAAA,GAAA,CAAI,mBAAA,CAAoB,oBAAoB,sBAAsB,CAAA;AAClE,IAAA,GAAA,CAAI,mBAAA,CAAoB,YAAY,cAAc,CAAA;AAAA,EACpD,CAAA;AACF","file":"chunk-5SANRSX3.mjs","sourcesContent":["/**\n * @sonordev/site-kit - page-leave signal\n *\n * SINGLE SOURCE OF TRUTH for \"the visitor may be gone, send what you have\".\n * Used by form abandonment, Signal's behavior flush and scroll-depth reporting.\n * Do NOT hand-roll another pagehide/visibilitychange pair.\n *\n * Two events, because neither covers every leave on its own:\n * - `visibilitychange` to hidden: tab switch, app switch, screen lock, and the\n *   last thing a mobile browser reliably fires before it discards a\n *   backgrounded tab (it often never fires pagehide for those).\n * - `pagehide`: full navigation or close, including Safari versions that skip\n *   visibilitychange on navigation.\n *\n * Never `beforeunload`: iOS Safari doesn't fire it, and Firefox won't put a\n * page that listens for it in the back/forward cache.\n *\n * One leave usually fires both events, and a hidden tab can come back, so\n * `onLeave` can run several times per page. It must be idempotent.\n */\n\ntype ListenerTarget = Pick<EventTarget, 'addEventListener' | 'removeEventListener'>\n\n/** Call `onLeave` whenever the page is hidden or unloaded. Returns the cleanup. */\nexport function onPageLeave(\n  onLeave: () => void,\n  win: ListenerTarget = window,\n  doc: ListenerTarget & { visibilityState: DocumentVisibilityState } = document,\n): () => void {\n  const handleVisibilityChange = () => {\n    if (doc.visibilityState === 'hidden') onLeave()\n  }\n  const handlePageHide = () => onLeave()\n\n  doc.addEventListener('visibilitychange', handleVisibilityChange)\n  win.addEventListener('pagehide', handlePageHide)\n\n  return () => {\n    doc.removeEventListener('visibilitychange', handleVisibilityChange)\n    win.removeEventListener('pagehide', handlePageHide)\n  }\n}\n"]}

package/dist/chunk-5XFFUP6D.js

@@ -0,0 +1,100 @@
+'use strict';
+
+// src/forms/field-rules.ts
+var DISPLAY_ONLY_FIELD_TYPES = [
+  "heading",
+  "section_header",
+  "paragraph",
+  "hidden"
+];
+function isDisplayOnly(field) {
+  return DISPLAY_ONLY_FIELD_TYPES.includes(field.field_type);
+}
+function isEmptyValue(value) {
+  if (value === void 0 || value === null || value === "") return true;
+  if (Array.isArray(value)) return value.length === 0;
+  return false;
+}
+function isUnanswered(value) {
+  return isEmptyValue(value) || value === false;
+}
+function searchableTexts(value) {
+  const items = Array.isArray(value) ? value : [value];
+  return items.map((item) => item === void 0 || item === null ? "" : String(item));
+}
+function isFieldVisible(field, values) {
+  const condition = field.conditional?.show_when;
+  if (!condition) return true;
+  const { field: condField, operator, value } = condition;
+  const fieldValue = values[condField];
+  switch (operator) {
+    case "equals":
+      return fieldValue === value;
+    case "not_equals":
+      return fieldValue !== value;
+    case "contains":
+      return searchableTexts(fieldValue).some((text) => text.includes(String(value)));
+    case "not_contains":
+      return !searchableTexts(fieldValue).some((text) => text.includes(String(value)));
+    case "is_empty":
+      return isUnanswered(fieldValue);
+    case "not_empty":
+      return !isUnanswered(fieldValue);
+    case "greater_than":
+      return Number(fieldValue) > Number(value);
+    case "less_than":
+      return Number(fieldValue) < Number(value);
+    default:
+      return true;
+  }
+}
+function validateField(field, values, isVisible = (f) => isFieldVisible(f, values)) {
+  if (!isVisible(field)) return null;
+  if (isDisplayOnly(field)) return null;
+  const value = values[field.slug];
+  const rules = field.validation || {};
+  if (isUnanswered(value)) {
+    return field.is_required ? rules.custom_error || `${field.label} is required` : null;
+  }
+  const strValue = String(value);
+  if (rules.min_length && strValue.length < rules.min_length) {
+    return `${field.label} must be at least ${rules.min_length} characters`;
+  }
+  if (rules.max_length && strValue.length > rules.max_length) {
+    return `${field.label} must be no more than ${rules.max_length} characters`;
+  }
+  if (rules.min !== void 0 && Number(value) < rules.min) {
+    return `${field.label} must be at least ${rules.min}`;
+  }
+  if (rules.max !== void 0 && Number(value) > rules.max) {
+    return `${field.label} must be no more than ${rules.max}`;
+  }
+  if (rules.pattern) {
+    try {
+      if (!new RegExp(rules.pattern).test(strValue)) {
+        return rules.custom_error || `${field.label} is invalid`;
+      }
+    } catch {
+    }
+  }
+  if (field.field_type === "email" && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(strValue)) {
+    return "Please enter a valid email address";
+  }
+  if (field.field_type === "phone" && !/^[\d\s\-\+\(\)]+$/.test(strValue)) {
+    return "Please enter a valid phone number";
+  }
+  return null;
+}
+function isFieldComplete(field, values, isVisible = (f) => isFieldVisible(f, values)) {
+  if (!isVisible(field) || isDisplayOnly(field)) return false;
+  if (isEmptyValue(values[field.slug])) return false;
+  return validateField(field, values, isVisible) === null;
+}
+
+exports.isDisplayOnly = isDisplayOnly;
+exports.isEmptyValue = isEmptyValue;
+exports.isFieldComplete = isFieldComplete;
+exports.isFieldVisible = isFieldVisible;
+exports.validateField = validateField;
+//# sourceMappingURL=chunk-5XFFUP6D.js.map
+//# sourceMappingURL=chunk-5XFFUP6D.js.map

package/dist/chunk-5XFFUP6D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/field-rules.ts"],"names":[],"mappings":";;;AAmBO,IAAM,wBAAA,GAA8C;AAAA,EACzD,SAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,cAAc,KAAA,EAA2B;AACvD,EAAA,OAAO,wBAAA,CAAyB,QAAA,CAAS,KAAA,CAAM,UAAU,CAAA;AAC3D;AAMO,SAAS,aAAa,KAAA,EAAyB;AACpD,EAAA,IAAI,UAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,IAAI,OAAO,IAAA;AAClE,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,KAAW,CAAA;AAClD,EAAA,OAAO,KAAA;AACT;AAOA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,OAAO,YAAA,CAAa,KAAK,CAAA,IAAK,KAAA,KAAU,KAAA;AAC1C;AAOA,SAAS,gBAAgB,KAAA,EAA0B;AACjD,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACnD,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAU,IAAA,KAAS,MAAA,IAAa,IAAA,KAAS,IAAA,GAAO,EAAA,GAAK,MAAA,CAAO,IAAI,CAAE,CAAA;AACtF;AAGO,SAAS,cAAA,CAAe,OAAkB,MAAA,EAA0C;AACzF,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAa,SAAA;AACrC,EAAA,IAAI,CAAC,WAAW,OAAO,IAAA;AAEvB,EAAA,MAAM,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU,OAAM,GAAI,SAAA;AAC9C,EAAA,MAAM,UAAA,GAAa,OAAO,SAAS,CAAA;AAEnC,EAAA,QAAQ,QAAA;AAAU,IAChB,KAAK,QAAA;AACH,MAAA,OAAO,UAAA,KAAe,KAAA;AAAA,IACxB,KAAK,YAAA;AACH,MAAA,OAAO,UAAA,KAAe,KAAA;AAAA,IACxB,KAAK,UAAA;AACH,MAAA,OAAO,eAAA,CAAgB,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IAChF,KAAK,cAAA;AACH,MAAA,OAAO,CAAC,eAAA,CAAgB,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACjF,KAAK,UAAA;AACH,MAAA,OAAO,aAAa,UAAU,CAAA;AAAA,IAChC,KAAK,WAAA;AACH,MAAA,OAAO,CAAC,aAAa,UAAU,CAAA;AAAA,IACjC,KAAK,cAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1C,KAAK,WAAA;AACH,MAAA,OAAO,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1C;AACE,MAAA,OAAO,IAAA;AAAA;AAEb;AAOO,SAAS,aAAA,CACd,OACA,MAAA,EACA,SAAA,GAA2C,CAAC,CAAA,KAAM,cAAA,CAAe,CAAA,EAAG,MAAM,CAAA,EAC3D;AACf,EAAA,IAAI,CAAC,SAAA,CAAU,KAAK,CAAA,EAAG,OAAO,IAAA;AAC9B,EAAA,IAAI,aAAA,CAAc,KAAK,CAAA,EAAG,OAAO,IAAA;AAEjC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,UAAA,IAAc,EAAC;AAEnC,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,IAAA,OAAO,MAAM,WAAA,GAAc,KAAA,CAAM,gBAAgB,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,GAAiB,IAAA;AAAA,EAClF;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,KAAK,CAAA;AAG7B,EAAA,IAAI,KAAA,CAAM,UAAA,IAAc,QAAA,CAAS,MAAA,GAAS,MAAM,UAAA,EAAY;AAC1D,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,kBAAA,EAAqB,MAAM,UAAU,CAAA,WAAA,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,KAAA,CAAM,UAAA,IAAc,QAAA,CAAS,MAAA,GAAS,MAAM,UAAA,EAAY;AAC1D,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,sBAAA,EAAyB,MAAM,UAAU,CAAA,WAAA,CAAA;AAAA,EAChE;AAGA,EAAA,IAAI,MAAM,GAAA,KAAQ,MAAA,IAAa,OAAO,KAAK,CAAA,GAAI,MAAM,GAAA,EAAK;AACxD,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,kBAAA,EAAqB,MAAM,GAAG,CAAA,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,MAAM,GAAA,KAAQ,MAAA,IAAa,OAAO,KAAK,CAAA,GAAI,MAAM,GAAA,EAAK;AACxD,IAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,sBAAA,EAAyB,MAAM,GAAG,CAAA,CAAA;AAAA,EACzD;AAGA,EAAA,IAAI,MAAM,OAAA,EAAS;AACjB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAI,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7C,QAAA,OAAO,KAAA,CAAM,YAAA,IAAgB,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,WAAA,CAAA;AAAA,MAC7C;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,IAAI,MAAM,UAAA,KAAe,OAAA,IAAW,CAAC,4BAAA,CAA6B,IAAA,CAAK,QAAQ,CAAA,EAAG;AAChF,IAAA,OAAO,oCAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAM,UAAA,KAAe,OAAA,IAAW,CAAC,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACvE,IAAA,OAAO,mCAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,eAAA,CACd,OACA,MAAA,EACA,SAAA,GAA2C,CAAC,CAAA,KAAM,cAAA,CAAe,CAAA,EAAG,MAAM,CAAA,EACjE;AACT,EAAA,IAAI,CAAC,SAAA,CAAU,KAAK,KAAK,aAAA,CAAc,KAAK,GAAG,OAAO,KAAA;AACtD,EAAA,IAAI,aAAa,MAAA,CAAO,KAAA,CAAM,IAAI,CAAC,GAAG,OAAO,KAAA;AAC7C,EAAA,OAAO,aAAA,CAAc,KAAA,EAAO,MAAA,EAAQ,SAAS,CAAA,KAAM,IAAA;AACrD","file":"chunk-5XFFUP6D.js","sourcesContent":["/**\n * @sonordev/site-kit/forms - field rules\n *\n * SINGLE SOURCE OF TRUTH for a managed form's per-field rules: whether a field\n * is shown (conditional `show_when`), whether a value counts as an answer, what\n * validation says about it, and whether it's complete. useForm (headless) and\n * FormClient (classic, stage and spotlight) both route through here, as do\n * the experiences' question planning and the field_interactions `completed`\n * flag. useForm and FormClient each carried their own copy until 2026-09-15,\n * and they had already drifted (a `contains` condition read an unanswered\n * field as the text \"undefined\" in one and \"\" in the other). Don't re-fork\n * any of this into a component.\n *\n * Pure: no React, no DOM.\n */\n\nimport type { FormField } from './types'\n\n/** Field types that render content but take no answer. */\nexport const DISPLAY_ONLY_FIELD_TYPES: readonly string[] = [\n  'heading',\n  'section_header',\n  'paragraph',\n  'hidden',\n]\n\nexport function isDisplayOnly(field: FormField): boolean {\n  return DISPLAY_ONLY_FIELD_TYPES.includes(field.field_type)\n}\n\n/**\n * No value at all: undefined, null, '', or an empty selection — a checkbox\n * group or multi-select emits [] once every option is unticked.\n */\nexport function isEmptyValue(value: unknown): boolean {\n  if (value === undefined || value === null || value === '') return true\n  if (Array.isArray(value)) return value.length === 0\n  return false\n}\n\n/**\n * Nothing the visitor has said yes to. What `required` and the\n * is_empty / not_empty conditions test: an empty value, or an unticked single\n * checkbox (it emits `false`). A number 0 is an answer.\n */\nfunction isUnanswered(value: unknown): boolean {\n  return isEmptyValue(value) || value === false\n}\n\n/**\n * The text a `contains` condition searches: each selected option of a\n * multi-value field, and '' for no value. Never \"null\" or \"undefined\", which\n * made `contains \"n\"` show a field before anything was entered.\n */\nfunction searchableTexts(value: unknown): string[] {\n  const items = Array.isArray(value) ? value : [value]\n  return items.map((item) => (item === undefined || item === null ? '' : String(item)))\n}\n\n/** Whether `field` is shown, given the form's current values. */\nexport function isFieldVisible(field: FormField, values: Record<string, unknown>): boolean {\n  const condition = field.conditional?.show_when\n  if (!condition) return true\n\n  const { field: condField, operator, value } = condition\n  const fieldValue = values[condField]\n\n  switch (operator) {\n    case 'equals':\n      return fieldValue === value\n    case 'not_equals':\n      return fieldValue !== value\n    case 'contains':\n      return searchableTexts(fieldValue).some((text) => text.includes(String(value)))\n    case 'not_contains':\n      return !searchableTexts(fieldValue).some((text) => text.includes(String(value)))\n    case 'is_empty':\n      return isUnanswered(fieldValue)\n    case 'not_empty':\n      return !isUnanswered(fieldValue)\n    case 'greater_than':\n      return Number(fieldValue) > Number(value)\n    case 'less_than':\n      return Number(fieldValue) < Number(value)\n    default:\n      return true\n  }\n}\n\n/**\n * The error to show for `field`, or null when it's fine. Hidden and\n * display-only fields never error. `isVisible` lets a caller pass its own\n * memoized visibility check; it defaults to {@link isFieldVisible}.\n */\nexport function validateField(\n  field: FormField,\n  values: Record<string, unknown>,\n  isVisible: (field: FormField) => boolean = (f) => isFieldVisible(f, values),\n): string | null {\n  if (!isVisible(field)) return null\n  if (isDisplayOnly(field)) return null\n\n  const value = values[field.slug]\n  const rules = field.validation || {}\n\n  if (isUnanswered(value)) {\n    return field.is_required ? rules.custom_error || `${field.label} is required` : null\n  }\n\n  const strValue = String(value)\n\n  // Length checks\n  if (rules.min_length && strValue.length < rules.min_length) {\n    return `${field.label} must be at least ${rules.min_length} characters`\n  }\n  if (rules.max_length && strValue.length > rules.max_length) {\n    return `${field.label} must be no more than ${rules.max_length} characters`\n  }\n\n  // Numeric checks\n  if (rules.min !== undefined && Number(value) < rules.min) {\n    return `${field.label} must be at least ${rules.min}`\n  }\n  if (rules.max !== undefined && Number(value) > rules.max) {\n    return `${field.label} must be no more than ${rules.max}`\n  }\n\n  // Pattern check — guard against an invalid admin-entered pattern.\n  if (rules.pattern) {\n    try {\n      if (!new RegExp(rules.pattern).test(strValue)) {\n        return rules.custom_error || `${field.label} is invalid`\n      }\n    } catch {\n      // Malformed pattern — skip rather than crashing the form.\n    }\n  }\n\n  if (field.field_type === 'email' && !/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(strValue)) {\n    return 'Please enter a valid email address'\n  }\n\n  if (field.field_type === 'phone' && !/^[\\d\\s\\-\\+\\(\\)]+$/.test(strValue)) {\n    return 'Please enter a valid phone number'\n  }\n\n  return null\n}\n\n/**\n * The field holds a real, valid answer: visible, something a visitor answers,\n * not empty, and passing validation. Drives FormClient's valid tick and\n * momentum count, the experiences' beat completion, and\n * `field_interactions[slug].completed`. An unticked optional checkbox is an\n * answer (\"no\"); an empty selection is not.\n */\nexport function isFieldComplete(\n  field: FormField,\n  values: Record<string, unknown>,\n  isVisible: (field: FormField) => boolean = (f) => isFieldVisible(f, values),\n): boolean {\n  if (!isVisible(field) || isDisplayOnly(field)) return false\n  if (isEmptyValue(values[field.slug])) return false\n  return validateField(field, values, isVisible) === null\n}\n"]}

package/dist/chunk-5YA6SI4Z.mjs

@@ -14277,4 +14277,3 @@ function getColumn(locData, pos) {
 
 export { getColumn, getLine, parse, parseExpression, tokTypes };
 //# sourceMappingURL=chunk-5YA6SI4Z.mjs.map
-//# sourceMappingURL=chunk-5YA6SI4Z.mjs.map