@sonordev/site-kit 5.7.0 → 5.8.1

package/dist/chunk-HCN3IKMW.mjs

@@ -0,0 +1,106 @@
+// src/robots/next-internals.ts
+var NEXT_INTERNALS_PATH = /^\/?_next(?:[/*?$]|$)/;
+function isNextInternalsPath(path) {
+  return NEXT_INTERNALS_PATH.test(path.trim());
+}
+var warned = /* @__PURE__ */ new Set();
+function warnDropped(paths) {
+  for (const p of paths) {
+    if (warned.has(p)) continue;
+    warned.add(p);
+    console.warn(
+      `[site-kit/robots] Dropped "Disallow: ${p}". Googlebot needs /_next/ to render pages and index images.`
+    );
+  }
+}
+function stripNextInternals(paths) {
+  if (paths === void 0) return void 0;
+  const list2 = Array.isArray(paths) ? paths : [paths];
+  const dropped = list2.filter(isNextInternalsPath);
+  if (dropped.length === 0) return paths;
+  warnDropped(dropped);
+  const kept = list2.filter((p) => !isNextInternalsPath(p));
+  if (kept.length === 0) return void 0;
+  return Array.isArray(paths) ? kept : kept[0];
+}
+
+// src/llms/aiRobots.ts
+var AI_RETRIEVAL_CRAWLERS = [
+  "OAI-SearchBot",
+  "ChatGPT-User",
+  "Claude-SearchBot",
+  "Claude-User",
+  "PerplexityBot",
+  "Perplexity-User",
+  "GoogleOther",
+  "Applebot",
+  "DuckAssistBot",
+  "MistralAI-User",
+  "YouBot"
+];
+var AI_TRAINING_CRAWLERS = [
+  "GPTBot",
+  "ClaudeBot",
+  "Google-Extended",
+  "Applebot-Extended",
+  "Meta-ExternalAgent",
+  "FacebookBot",
+  "CCBot",
+  "Bytespider",
+  "cohere-ai",
+  "MistralBot",
+  "Amazonbot"
+];
+function buildAiCrawlerRules(options = {}) {
+  const { allow = "/", training = "allow" } = options;
+  const disallow = stripNextInternals(options.disallow);
+  const retrieval = AI_RETRIEVAL_CRAWLERS.map((userAgent) => ({
+    userAgent,
+    allow,
+    ...disallow ? { disallow } : {}
+  }));
+  const trainingRules = AI_TRAINING_CRAWLERS.map(
+    (userAgent) => training === "block" ? { userAgent, disallow: "/" } : { userAgent, allow, ...disallow ? { disallow } : {} }
+  );
+  return [...retrieval, ...trainingRules];
+}
+var yn = (v) => v ? "yes" : "no";
+function formatContentSignals(options = {}) {
+  const { search = true, aiInput = true, aiTrain = true } = options;
+  return [
+    "# Content Signals Policy (https://contentsignals.org): usage preferences",
+    "# for this site\u2019s content. Declarative \u2014 a preference, not enforcement.",
+    `Content-Signal: search=${yn(search)}, ai-input=${yn(aiInput)}, ai-train=${yn(aiTrain)}`
+  ].join("\n");
+}
+var list = (v) => v === void 0 ? [] : Array.isArray(v) ? v : [v];
+function createRobotsTxtHandler(options) {
+  const { rules, contentSignals, sitemap, host } = options;
+  const blocks = [];
+  if (contentSignals) blocks.push(formatContentSignals(contentSignals));
+  for (const rule of rules) {
+    const lines = [`User-Agent: ${rule.userAgent}`];
+    for (const p of list(rule.allow)) lines.push(`Allow: ${p}`);
+    for (const p of list(stripNextInternals(rule.disallow))) lines.push(`Disallow: ${p}`);
+    blocks.push(lines.join("\n"));
+  }
+  const tail = [];
+  for (const s of list(sitemap)) tail.push(`Sitemap: ${s}`);
+  if (host) tail.push(`Host: ${host}`);
+  if (tail.length) blocks.push(tail.join("\n"));
+  const body = `${blocks.join("\n\n")}
+`;
+  return async function GET() {
+    return new Response(body, {
+      status: 200,
+      headers: {
+        "Content-Type": "text/plain; charset=utf-8",
+        "Cache-Control": "public, max-age=3600, s-maxage=86400"
+      }
+    });
+  };
+}
+
+export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler, formatContentSignals, isNextInternalsPath, stripNextInternals };
+//# sourceMappingURL=chunk-HCN3IKMW.mjs.map
+//# sourceMappingURL=chunk-HCN3IKMW.mjs.map

package/dist/chunk-HCN3IKMW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/robots/next-internals.ts","../src/llms/aiRobots.ts"],"names":["list"],"mappings":";AAiBA,IAAM,mBAAA,GAAsB,uBAAA;AAErB,SAAS,oBAAoB,IAAA,EAAuB;AACzD,EAAA,OAAO,mBAAA,CAAoB,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAAA;AAC7C;AAEA,IAAM,MAAA,uBAAa,GAAA,EAAY;AAE/B,SAAS,YAAY,KAAA,EAAuB;AAC1C,EAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AACnB,IAAA,MAAA,CAAO,IAAI,CAAC,CAAA;AACZ,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,wCAAwC,CAAC,CAAA,4DAAA;AAAA,KAC3C;AAAA,EACF;AACF;AAOO,SAAS,mBACd,KAAA,EAC+B;AAC/B,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,MAAA;AAChC,EAAA,MAAMA,QAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AAClD,EAAA,MAAM,OAAA,GAAUA,KAAAA,CAAK,MAAA,CAAO,mBAAmB,CAAA;AAC/C,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,EAAA,WAAA,CAAY,OAAO,CAAA;AACnB,EAAA,MAAM,IAAA,GAAOA,MAAK,MAAA,CAAO,CAAC,MAAM,CAAC,mBAAA,CAAoB,CAAC,CAAC,CAAA;AACvD,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AAC9B,EAAA,OAAO,MAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,IAAA,GAAO,KAAK,CAAC,CAAA;AAC7C;;;ACjBO,IAAM,qBAAA,GAAwB;AAAA,EACnC,eAAA;AAAA,EACA,cAAA;AAAA,EACA,kBAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA,EACA,iBAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AASO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA;AAAA,EACA,WAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF;AA2BO,SAAS,mBAAA,CACd,OAAA,GAAiC,EAAC,EACpB;AACd,EAAA,MAAM,EAAE,KAAA,GAAQ,GAAA,EAAK,QAAA,GAAW,SAAQ,GAAI,OAAA;AAC5C,EAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,OAAA,CAAQ,QAAQ,CAAA;AACpD,EAAA,MAAM,SAAA,GAA0B,qBAAA,CAAsB,GAAA,CAAI,CAAC,SAAA,MAAe;AAAA,IACxE,SAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa;AAAC,GACjC,CAAE,CAAA;AACF,EAAA,MAAM,gBAA8B,oBAAA,CAAqB,GAAA;AAAA,IAAI,CAAC,SAAA,KAC5D,QAAA,KAAa,UACT,EAAE,SAAA,EAAW,UAAU,GAAA,EAAI,GAC3B,EAAE,SAAA,EAAW,OAAO,GAAI,QAAA,GAAW,EAAE,QAAA,EAAS,GAAI,EAAC;AAAG,GAC5D;AACA,EAAA,OAAO,CAAC,GAAG,SAAA,EAAW,GAAG,aAAa,CAAA;AACxC;AAWA,IAAM,EAAA,GAAK,CAAC,CAAA,KAAgB,CAAA,GAAI,KAAA,GAAQ,IAAA;AAOjC,SAAS,oBAAA,CACd,OAAA,GAAiC,EAAC,EAC1B;AACR,EAAA,MAAM,EAAE,MAAA,GAAS,IAAA,EAAM,UAAU,IAAA,EAAM,OAAA,GAAU,MAAK,GAAI,OAAA;AAC1D,EAAA,OAAO;AAAA,IACL,0EAAA;AAAA,IACA,mFAAA;AAAA,IACA,CAAA,uBAAA,EAA0B,EAAA,CAAG,MAAM,CAAC,CAAA,WAAA,EAAc,EAAA,CAAG,OAAO,CAAC,CAAA,WAAA,EAAc,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,GACxF,CAAE,KAAK,IAAI,CAAA;AACb;AAaA,IAAM,IAAA,GAAO,CAAC,CAAA,KACZ,CAAA,KAAM,MAAA,GAAY,EAAC,GAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,GAAI,CAAA,GAAI,CAAC,CAAC,CAAA;AAc3C,SAAS,uBAAuB,OAAA,EAAkC;AACvE,EAAA,MAAM,EAAE,KAAA,EAAO,cAAA,EAAgB,OAAA,EAAS,MAAK,GAAI,OAAA;AACjD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,IAAI,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,oBAAA,CAAqB,cAAc,CAAC,CAAA;AACpE,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,YAAA,EAAe,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAC9C,IAAA,KAAA,MAAW,CAAA,IAAK,KAAK,IAAA,CAAK,KAAK,GAAG,KAAA,CAAM,IAAA,CAAK,CAAA,OAAA,EAAU,CAAC,CAAA,CAAE,CAAA;AAC1D,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,EAAG,KAAA,CAAM,IAAA,CAAK,CAAA,UAAA,EAAa,CAAC,CAAA,CAAE,CAAA;AACpF,IAAA,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,EAC9B;AACA,EAAA,MAAM,OAAiB,EAAC;AACxB,EAAA,KAAA,MAAW,CAAA,IAAK,KAAK,OAAO,CAAA,OAAQ,IAAA,CAAK,CAAA,SAAA,EAAY,CAAC,CAAA,CAAE,CAAA;AACxD,EAAA,IAAI,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,CAAA,MAAA,EAAS,IAAI,CAAA,CAAE,CAAA;AACnC,EAAA,IAAI,KAAK,MAAA,EAAQ,MAAA,CAAO,KAAK,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC,CAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,MAAM,CAAC;AAAA,CAAA;AAEnC,EAAA,OAAO,eAAe,GAAA,GAAyB;AAC7C,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,2BAAA;AAAA,QAChB,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,CAAA;AACF","file":"chunk-HCN3IKMW.mjs","sourcesContent":["/**\n * Keeps `/_next/` out of every robots.txt site-kit emits.\n *\n * Googlebot renders pages with the CSS, JS chunks and optimized images Next\n * serves from `/_next/`, and `/_next/image` is how a site's photos reach\n * Google Images. A `Disallow: /_next/` makes Google judge an unstyled,\n * image-less page, and a 2026-09 fleet sweep found it on ten sites. Sites\n * passed it in by hand, so the builders drop it on the way out rather than\n * trusting callers to leave it off.\n *\n * Single source of truth for that rule — used by `createRobots`\n * (`robots/index.ts`) and by `buildAiCrawlerRules` + `createRobotsTxtHandler`\n * (`llms/aiRobots.ts`). Route any new robots builder through it.\n */\n\n// `/_next`, `/_next/`, `/_next/*`, `/_next/static/`, `/_next/image`, `/_next$`,\n// and the slashless `_next/` typo. `/_nextjs-docs/` is a real path; leave it.\nconst NEXT_INTERNALS_PATH = /^\\/?_next(?:[/*?$]|$)/\n\nexport function isNextInternalsPath(path: string): boolean {\n  return NEXT_INTERNALS_PATH.test(path.trim())\n}\n\nconst warned = new Set<string>()\n\nfunction warnDropped(paths: string[]): void {\n  for (const p of paths) {\n    if (warned.has(p)) continue\n    warned.add(p)\n    console.warn(\n      `[site-kit/robots] Dropped \"Disallow: ${p}\". Googlebot needs /_next/ to render pages and index images.`,\n    )\n  }\n}\n\n/**\n * Removes `/_next` paths from a disallow list, keeping its shape: returns the\n * input untouched when there is nothing to drop, and `undefined` when nothing\n * is left.\n */\nexport function stripNextInternals(\n  paths: string | string[] | undefined,\n): string | string[] | undefined {\n  if (paths === undefined) return undefined\n  const list = Array.isArray(paths) ? paths : [paths]\n  const dropped = list.filter(isNextInternalsPath)\n  if (dropped.length === 0) return paths\n  warnDropped(dropped)\n  const kept = list.filter((p) => !isNextInternalsPath(p))\n  if (kept.length === 0) return undefined\n  return Array.isArray(paths) ? kept : kept[0]\n}\n","/**\n * @sonordev/site-kit/llms — AI crawler robots policy\n *\n * 2026 practice separates AI RETRIEVAL crawlers (they fetch pages to answer\n * live queries and cite the source — visibility with attribution) from AI\n * TRAINING crawlers (they ingest content into future model weights). A site\n * can welcome one and decline the other. This module provides:\n *\n * - Curated user-agent lists for both classes (keep current with vendor docs)\n * - buildAiCrawlerRules(): rules for Next's MetadataRoute robots convention\n * - formatContentSignals(): the Cloudflare Content Signals Policy directive\n *   (search / ai-input / ai-train) — declarative, not enforcement, and NOT\n *   expressible through Next's robots.js convention (it drops unknown\n *   directives), hence:\n * - createRobotsTxtHandler(): a plain-text robots.txt route handler for\n *   sites that want Content-Signal lines in the emitted file.\n *\n * Every builder here drops `/_next` disallow paths (see\n * robots/next-internals.ts): Googlebot needs them to render pages.\n *\n * Canonical import: `@sonordev/site-kit/llms`. `@sonordev/site-kit/robots`\n * re-exports the same functions, because that's where people look for them.\n * Same code either way; the lists live here once.\n */\n\nimport { stripNextInternals } from '../robots/next-internals'\n\n/**\n * Retrieval/search agents — fetch on demand or index for AI search, cite sources.\n *\n * MistralAI-User (Le Chat fetching a page for a user) and YouBot (You.com's\n * search index) were added 2026-09-15: vsf-consulting-nextjs named them in\n * its own robots.txt and had to keep a NOT_YET_IN_KIT list beside this one.\n */\nexport const AI_RETRIEVAL_CRAWLERS = [\n  'OAI-SearchBot',\n  'ChatGPT-User',\n  'Claude-SearchBot',\n  'Claude-User',\n  'PerplexityBot',\n  'Perplexity-User',\n  'GoogleOther',\n  'Applebot',\n  'DuckAssistBot',\n  'MistralAI-User',\n  'YouBot',\n] as const\n\n/**\n * Training crawlers — content may enter future model training corpora.\n *\n * Amazonbot is here rather than in retrieval: Amazon says what it collects\n * may be used to train its AI models, so `training: 'block'` has to cover it.\n * It also feeds Alexa answers, which is the cost of blocking it.\n */\nexport const AI_TRAINING_CRAWLERS = [\n  'GPTBot',\n  'ClaudeBot',\n  'Google-Extended',\n  'Applebot-Extended',\n  'Meta-ExternalAgent',\n  'FacebookBot',\n  'CCBot',\n  'Bytespider',\n  'cohere-ai',\n  'MistralBot',\n  'Amazonbot',\n] as const\n\nexport interface AiCrawlerRulesOptions {\n  /** Paths every AI crawler may fetch (default: everything). */\n  allow?: string | string[]\n  /** Paths withheld from every AI crawler (default: none). `/_next` paths are dropped. */\n  disallow?: string | string[]\n  /**\n   * Policy for TRAINING crawlers. 'allow' (default) welcomes them — the\n   * visibility-maximalist choice for marketing sites that WANT to be in\n   * model knowledge. 'block' opts out of training while retrieval crawlers\n   * stay welcome, so the site is still cited in AI answers.\n   */\n  training?: 'allow' | 'block'\n}\n\ninterface RobotsRule {\n  userAgent: string\n  allow?: string | string[]\n  disallow?: string | string[]\n}\n\n/**\n * Rules for Next's MetadataRoute robots convention (app/robots.(js|ts)).\n * Spread into your existing rules array; order relative to your own rules\n * does not matter (robots matching is per-user-agent, most-specific wins).\n */\nexport function buildAiCrawlerRules(\n  options: AiCrawlerRulesOptions = {},\n): RobotsRule[] {\n  const { allow = '/', training = 'allow' } = options\n  const disallow = stripNextInternals(options.disallow)\n  const retrieval: RobotsRule[] = AI_RETRIEVAL_CRAWLERS.map((userAgent) => ({\n    userAgent,\n    allow,\n    ...(disallow ? { disallow } : {}),\n  }))\n  const trainingRules: RobotsRule[] = AI_TRAINING_CRAWLERS.map((userAgent) =>\n    training === 'block'\n      ? { userAgent, disallow: '/' }\n      : { userAgent, allow, ...(disallow ? { disallow } : {}) },\n  )\n  return [...retrieval, ...trainingRules]\n}\n\nexport interface ContentSignalsOptions {\n  /** May the content be indexed for classic search? Default true. */\n  search?: boolean\n  /** May the content feed a live AI answer (RAG/grounding)? Default true. */\n  aiInput?: boolean\n  /** May the content train future models? Default true. */\n  aiTrain?: boolean\n}\n\nconst yn = (v: boolean) => (v ? 'yes' : 'no')\n\n/**\n * The Cloudflare Content Signals Policy block for robots.txt — a preferences\n * declaration (the IETF AIPREF group is standardizing the same concepts).\n * Emit near the top of the file, before user-agent groups.\n */\nexport function formatContentSignals(\n  options: ContentSignalsOptions = {},\n): string {\n  const { search = true, aiInput = true, aiTrain = true } = options\n  return [\n    '# Content Signals Policy (https://contentsignals.org): usage preferences',\n    '# for this site’s content. Declarative — a preference, not enforcement.',\n    `Content-Signal: search=${yn(search)}, ai-input=${yn(aiInput)}, ai-train=${yn(aiTrain)}`,\n  ].join('\\n')\n}\n\nexport interface RobotsTxtHandlerOptions {\n  /** Robots rules (same shape as MetadataRoute robots rules). */\n  rules: RobotsRule[]\n  /** Content Signals preferences; omit to skip the block entirely. */\n  contentSignals?: ContentSignalsOptions\n  /** Absolute sitemap URL(s). */\n  sitemap?: string | string[]\n  /** Preferred host (emitted as Host:). */\n  host?: string\n}\n\nconst list = (v: string | string[] | undefined): string[] =>\n  v === undefined ? [] : Array.isArray(v) ? v : [v]\n\n/**\n * Plain-text robots.txt route handler (app/robots.txt/route.ts) for sites\n * that want Content-Signal lines — Next's MetadataRoute robots convention\n * cannot emit them. Drop-in:\n *\n *   import { createRobotsTxtHandler, buildAiCrawlerRules } from '@sonordev/site-kit/llms'\n *   export const GET = createRobotsTxtHandler({\n *     rules: [{ userAgent: '*', allow: '/' }, ...buildAiCrawlerRules()],\n *     contentSignals: { search: true, aiInput: true, aiTrain: true },\n *     sitemap: 'https://example.com/sitemap.xml',\n *   })\n */\nexport function createRobotsTxtHandler(options: RobotsTxtHandlerOptions) {\n  const { rules, contentSignals, sitemap, host } = options\n  const blocks: string[] = []\n  if (contentSignals) blocks.push(formatContentSignals(contentSignals))\n  for (const rule of rules) {\n    const lines = [`User-Agent: ${rule.userAgent}`]\n    for (const p of list(rule.allow)) lines.push(`Allow: ${p}`)\n    for (const p of list(stripNextInternals(rule.disallow))) lines.push(`Disallow: ${p}`)\n    blocks.push(lines.join('\\n'))\n  }\n  const tail: string[] = []\n  for (const s of list(sitemap)) tail.push(`Sitemap: ${s}`)\n  if (host) tail.push(`Host: ${host}`)\n  if (tail.length) blocks.push(tail.join('\\n'))\n  const body = `${blocks.join('\\n\\n')}\\n`\n\n  return async function GET(): Promise<Response> {\n    return new Response(body, {\n      status: 200,\n      headers: {\n        'Content-Type': 'text/plain; charset=utf-8',\n        'Cache-Control': 'public, max-age=3600, s-maxage=86400',\n      },\n    })\n  }\n}\n"]}

package/dist/{chunk-6FC5Q4KU.mjs → chunk-HOJ4J4X2.mjs}

@@ -1,4 +1,6 @@
-import { getSEOPageData, ensureMetadata, getABTest, recordABImpression, getRedirectData, getRobotsData, getSitemapEntries } from './chunk-TP7H6BSK.mjs';
+import { getSEOPageData, ensureMetadata, getABTest, recordABImpression, getRedirectData, getRobotsData, getSitemapEntries } from './chunk-OE7CTIOU.mjs';
+import { titleProblem, descriptionProblem } from './chunk-MLVHVKFT.mjs';
+import { resolveSiteHost } from './chunk-JLVCWC6A.mjs';
 
 // src/seo/getManagedMetadata.ts
 async function getManagedMetadata(options) {
@@ -36,13 +38,27 @@ async function getManagedMetadata(options) {
     ensureMetadata(path).catch(() => {
     });
   }
-  if (pageData.managed_title) {
-    metadata.title = pageData.managed_title;
+  const identity = {
+    brand: projectData?.brand ?? projectData?.title ?? null,
+    hosts: [resolveSiteHost(), pageData.site, projectData?.domain, projectData?.site_url]
+  };
+  const rejected = {};
+  const rawTitle = pageData.managed_title;
+  const titleIssue = rawTitle ? titleProblem(rawTitle, identity, { path }) : null;
+  if (titleIssue) rejected.title = titleIssue;
+  const managedTitle = rawTitle && !titleIssue ? rawTitle : void 0;
+  const rawDescription = pageData.managed_meta_description || pageData.managed_description;
+  const descriptionIssue = rawDescription ? descriptionProblem(rawDescription, identity) : null;
+  if (descriptionIssue) rejected.description = descriptionIssue;
+  const managedDescription = rawDescription && !descriptionIssue ? rawDescription : void 0;
+  if (titleIssue || descriptionIssue) metadata._rejected = rejected;
+  if (managedTitle) {
+    metadata.title = managedTitle;
   } else if (fallback.title) {
     metadata.title = fallback.title;
   }
-  if (pageData.managed_meta_description || pageData.managed_description) {
-    metadata.description = pageData.managed_meta_description || pageData.managed_description;
+  if (managedDescription) {
+    metadata.description = managedDescription;
   } else if (fallback.description) {
     metadata.description = fallback.description;
   }
@@ -67,8 +83,10 @@ async function getManagedMetadata(options) {
       languages: langAlts
     };
   }
-  const ogTitle = pageData.managed_og_title || pageData.managed_title;
-  const ogDescription = pageData.managed_og_description || pageData.managed_meta_description || pageData.managed_description;
+  const managedOgTitle = pageData.managed_og_title && !titleProblem(pageData.managed_og_title, identity, { path }) ? pageData.managed_og_title : void 0;
+  const managedOgDescription = pageData.managed_og_description && !descriptionProblem(pageData.managed_og_description, identity) ? pageData.managed_og_description : void 0;
+  const ogTitle = managedOgTitle || managedTitle;
+  const ogDescription = managedOgDescription || managedDescription;
   const ogImage = pageData.managed_og_image;
   if (ogTitle || ogDescription || ogImage) {
     metadata.openGraph = {
@@ -201,11 +219,11 @@ async function generateSitemap(options) {
   }));
 }
 async function registerLocalSitemap(options) {
-  const { registerSitemap } = await import('./server-api-RG3ZL3DV.mjs');
+  const { registerSitemap } = await import('./server-api-A2EFCTZX.mjs');
   let entries = options.entries || [];
   if (options.autoDiscover && entries.length === 0) {
     try {
-      const { discoverNextJsRoutes, findAppDirForDiscovery } = await import('./discover-FGTKWOL3.mjs');
+      const { discoverNextJsRoutes, findAppDirForDiscovery } = await import('./discover-CYXYKHZ2.mjs');
       const appDir = findAppDirForDiscovery();
       if (appDir) {
         entries = discoverNextJsRoutes(appDir);
@@ -221,7 +239,7 @@ async function registerLocalSitemap(options) {
   }
   const mode = options.mode ?? "additive";
   console.log(`[Sonor] Registering ${entries.length} sitemap entries (${mode})...`);
-  const result = await registerSitemap(entries, { mode });
+  const result = await registerSitemap(entries, { mode, site: options.site });
   if (result.success) {
     console.log(`[Sonor] Sitemap registered: ${result.created} new, ${result.updated} updated`);
   }
@@ -233,5 +251,5 @@ async function isIndexable(projectId, path) {
 }
 
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable, registerLocalSitemap };
-//# sourceMappingURL=chunk-6FC5Q4KU.mjs.map
-//# sourceMappingURL=chunk-6FC5Q4KU.mjs.map
+//# sourceMappingURL=chunk-HOJ4J4X2.mjs.map
+//# sourceMappingURL=chunk-HOJ4J4X2.mjs.map

package/dist/chunk-HOJ4J4X2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/seo/getManagedMetadata.ts","../src/seo/routing.ts"],"names":[],"mappings":";;;;;AA6BA,eAAsB,mBACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,GAAW,EAAC,EAAG,SAAA,GAAY,EAAC,EAAG,OAAA,EAAS,WAAA,GAAc,UAAA,EAAW,GAAI,OAAA;AACnF,EAAA,MAAM,YAAY,WAAA,KAAgB,WAAA;AAElC,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,IAAI,CAAA;AACxC,EAAA,MAAM,WAAW,MAAA,EAAQ,IAAA;AACzB,EAAA,MAAM,cAAc,MAAA,EAAQ,OAAA;AAG5B,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,MAAM,YAAA,GAAsC;AAAA,MAC1C,GAAG,QAAA;AAAA,MACH,GAAG,SAAA;AAAA,MACH,QAAA,EAAU,KAAA;AAAA,MACV,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,IAAI,CAAC,SAAA,IAAa,WAAA,EAAa,QAAA,EAAU;AACvC,MAAA,YAAA,CAAa,KAAA,GAAQ;AAAA,QACnB,MAAM,WAAA,CAAY,QAAA;AAAA,QAClB,OAAO,WAAA,CAAY;AAAA,OACrB;AAAA,IACF;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAGA,EAAA,MAAM,QAAA,GAAkC;AAAA,IACtC,QAAA,EAAU,IAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AAEA,EAAA,IAAI,CAAC,SAAA,IAAa,WAAA,EAAa,QAAA,EAAU;AACvC,IAAA,QAAA,CAAS,KAAA,GAAQ;AAAA,MACf,MAAM,WAAA,CAAY,QAAA;AAAA,MAClB,OAAO,WAAA,CAAY;AAAA,KACrB;AAAA,EACF;AAKA,EAAA,IAAI,CAAC,SAAS,aAAA,IAAiB,CAAC,SAAS,wBAAA,IAA4B,CAAC,SAAS,mBAAA,EAAqB;AAClG,IAAA,cAAA,CAAe,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACrC;AAKA,EAAA,MAAM,QAAA,GAAyB;AAAA,IAC7B,KAAA,EAAO,WAAA,EAAa,KAAA,IAAS,WAAA,EAAa,KAAA,IAAS,IAAA;AAAA,IACnD,KAAA,EAAO,CAAC,eAAA,EAAgB,EAAG,SAAS,IAAA,EAAM,WAAA,EAAa,MAAA,EAAQ,WAAA,EAAa,QAAQ;AAAA,GACtF;AACA,EAAA,MAAM,WAA4D,EAAC;AACnE,EAAA,MAAM,WAAW,QAAA,CAAS,aAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,WAAW,YAAA,CAAa,QAAA,EAAU,UAAU,EAAE,IAAA,EAAM,CAAA,GAAI,IAAA;AAC3E,EAAA,IAAI,UAAA,WAAqB,KAAA,GAAQ,UAAA;AACjC,EAAA,MAAM,YAAA,GAAe,QAAA,IAAY,CAAC,UAAA,GAAa,QAAA,GAAW,MAAA;AAE1D,EAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,wBAAA,IAA4B,QAAA,CAAS,mBAAA;AACrE,EAAA,MAAM,gBAAA,GAAmB,cAAA,GAAiB,kBAAA,CAAmB,cAAA,EAAgB,QAAQ,CAAA,GAAI,IAAA;AACzF,EAAA,IAAI,gBAAA,WAA2B,WAAA,GAAc,gBAAA;AAC7C,EAAA,MAAM,kBAAA,GAAqB,cAAA,IAAkB,CAAC,gBAAA,GAAmB,cAAA,GAAiB,MAAA;AAElF,EAAA,IAAI,UAAA,IAAc,gBAAA,EAAkB,QAAA,CAAS,SAAA,GAAY,QAAA;AAGzD,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,QAAA,CAAS,KAAA,GAAQ,YAAA;AAAA,EACnB,CAAA,MAAA,IAAW,SAAS,KAAA,EAAO;AACzB,IAAA,QAAA,CAAS,QAAQ,QAAA,CAAS,KAAA;AAAA,EAC5B;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,QAAA,CAAS,WAAA,GAAc,kBAAA;AAAA,EACzB,CAAA,MAAA,IAAW,SAAS,WAAA,EAAa;AAC/B,IAAA,QAAA,CAAS,cAAc,QAAA,CAAS,WAAA;AAAA,EAClC;AAGA,EAAA,IAAI,QAAA,CAAS,kBAAkB,MAAA,EAAQ;AACrC,IAAA,QAAA,CAAS,WAAW,QAAA,CAAS,gBAAA;AAAA,EAC/B,CAAA,MAAA,IAAW,SAAS,QAAA,EAAU;AAC5B,IAAA,QAAA,CAAS,WAAW,QAAA,CAAS,QAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,IAAA,QAAA,CAAS,SAAS,QAAA,CAAS,cAAA;AAAA,EAC7B;AAGA,EAAA,IAAI,SAAS,iBAAA,EAAmB;AAC9B,IAAA,QAAA,CAAS,UAAA,GAAa;AAAA,MACpB,GAAG,QAAA,CAAS,UAAA;AAAA,MACZ,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,WAAW,QAAA,CAAS,mBAAA;AAC1B,EAAA,IAAI,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,EAAG;AACxE,IAAA,QAAA,CAAS,UAAA,GAAa;AAAA,MACpB,GAAG,QAAA,CAAS,UAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACb;AAAA,EACF;AAIA,EAAA,MAAM,cAAA,GACJ,QAAA,CAAS,gBAAA,IAAoB,CAAC,YAAA,CAAa,QAAA,CAAS,gBAAA,EAAkB,QAAA,EAAU,EAAE,IAAA,EAAM,CAAA,GACpF,SAAS,gBAAA,GACT,MAAA;AACN,EAAA,MAAM,oBAAA,GACJ,QAAA,CAAS,sBAAA,IAA0B,CAAC,kBAAA,CAAmB,SAAS,sBAAA,EAAwB,QAAQ,CAAA,GAC5F,QAAA,CAAS,sBAAA,GACT,MAAA;AACN,EAAA,MAAM,UAAU,cAAA,IAAkB,YAAA;AAClC,EAAA,MAAM,gBAAgB,oBAAA,IAAwB,kBAAA;AAC9C,EAAA,MAAM,UAAU,QAAA,CAAS,gBAAA;AAEzB,EAAA,IAAI,OAAA,IAAW,iBAAiB,OAAA,EAAS;AACvC,IAAA,QAAA,CAAS,SAAA,GAAY;AAAA,MACnB,GAAI,OAAA,IAAW,EAAE,KAAA,EAAO,OAAA,EAAQ;AAAA,MAChC,GAAI,aAAA,IAAiB,EAAE,WAAA,EAAa,aAAA,EAAc;AAAA,MAClD,GAAI,WAAW,EAAE,MAAA,EAAQ,CAAC,EAAE,GAAA,EAAK,OAAA,EAAS,CAAA;AAAE,KAC9C;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,IAAW,iBAAiB,OAAA,EAAS;AACvC,IAAA,QAAA,CAAS,OAAA,GAAU;AAAA,MACjB,IAAA,EAAM,qBAAA;AAAA,MACN,GAAI,OAAA,IAAW,EAAE,KAAA,EAAO,OAAA,EAAQ;AAAA,MAChC,GAAI,aAAA,IAAiB,EAAE,WAAA,EAAa,aAAA,EAAc;AAAA,MAClD,GAAI,OAAA,IAAW,EAAE,MAAA,EAAQ,CAAC,OAAO,CAAA;AAAE,KACrC;AAAA,EACF;AAGA,EAAA,OAAO;AAAA,IACL,GAAG,QAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH,QAAA,EAAU,IAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AACF;AAkBA,eAAsB,aACpB,OAAA,EAC8B;AAC9B,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,EAAU,GAAI,OAAA;AAEnC,EAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAExC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,OAAA;AAEJ,EAAA,IAAI,SAAA,EAAW;AAEb,IAAA,MAAM,IAAA,GAAO,UAAU,KAAA,CAAM,EAAE,EAAE,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS;AACrD,MAAA,OAAA,CAAS,GAAA,IAAO,CAAA,IAAK,GAAA,GAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAAA,IAC/C,GAAG,CAAC,CAAA;AACJ,IAAA,OAAA,GAAW,IAAA,CAAK,IAAI,IAAI,CAAA,GAAI,MAAQ,IAAA,CAAK,aAAA,GAAgB,MAAO,GAAA,GAAM,GAAA;AAAA,EACxE,CAAA,MAAO;AAEL,IAAA,OAAA,GAAU,IAAA,CAAK,MAAA,EAAO,GAAI,IAAA,CAAK,gBAAgB,GAAA,GAAM,GAAA;AAAA,EACvD;AAGA,EAAA,kBAAA,CAAmB,KAAK,EAAA,EAAI,OAAA,EAAS,SAAS,CAAA,CAAE,MAAM,MAAM;AAAA,EAE5D,CAAC,CAAA;AAED,EAAA,OAAO;AAAA,IACL,QAAQ,IAAA,CAAK,EAAA;AAAA,IACb,OAAA;AAAA,IACA,KAAA,EAAO,OAAA,KAAY,GAAA,GAAM,IAAA,CAAK,YAAY,IAAA,CAAK;AAAA,GACjD;AACF;AAOA,eAAsB,yBACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,SAAA,EAAW,GAAG,eAAA,EAAgB,GAAI,OAAA;AAG1C,EAAA,MAAM,QAAA,GAAW,MAAM,kBAAA,CAAmB,eAAe,CAAA;AAGzD,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa;AAAA,IACnC,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,KAAA,EAAO,OAAA;AAAA,IACP;AAAA,GACD,CAAA;AAED,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,QAAA,CAAS,QAAQ,SAAA,CAAU,KAAA;AAAA,EAC7B;AAGA,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa;AAAA,IAClC,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,KAAA,EAAO,aAAA;AAAA,IACP;AAAA,GACD,CAAA;AAED,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,QAAA,CAAS,cAAc,QAAA,CAAS,KAAA;AAAA,EAClC;AAEA,EAAA,OAAO,QAAA;AACT;;;AClPA,eAAsB,YACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,IAAI,CAAA;AAE3C,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,QAAA,CAAS,cAAc,IAAI,IAAA,CAAK,SAAS,UAAU,CAAA,mBAAI,IAAI,IAAA,EAAK,EAAG;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,MAAM,WAAA,GAAc,QAAA,CAAS,eAAA,IAAmB,QAAA,CAAS,gBAAA;AACzD,EAAA,MAAM,aAAa,WAAA,CAAY,UAAA,CAAW,SAAS,CAAA,IAAK,WAAA,CAAY,WAAW,UAAU,CAAA;AAEzF,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,YAAY,QAAA,CAAS,WAAA;AAAA,IACrB;AAAA,GACF;AACF;AAKA,SAAS,kBAAkB,MAAA,EAAiC;AAC1D,EAAA,MAAM,SAAA,GAA6B;AAAA,IACjC,KAAA,EAAO,IAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,WAAA,EAAY,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,EAAM,CAAA;AAE/D,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,KAAS,SAAA,EAAW,SAAA,CAAU,KAAA,GAAQ,KAAA;AAC1C,IAAA,IAAI,IAAA,KAAS,UAAA,EAAY,SAAA,CAAU,MAAA,GAAS,KAAA;AAC5C,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,SAAA,CAAU,SAAA,GAAY,IAAA;AAChD,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,SAAA,CAAU,SAAA,GAAY,IAAA;AAChD,IAAA,IAAI,IAAA,KAAS,cAAA,EAAgB,SAAA,CAAU,YAAA,GAAe,IAAA;AACtD,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,cAAc,CAAA,EAAG;AACnC,MAAA,SAAA,CAAU,WAAA,GAAc,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,EAAE,CAAA;AAAA,IACzD;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC/B,MAAA,SAAA,CAAU,iBAAA,GAAoB,KAAA;AAAA,IAChC;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,SAAA,CAAU,iBAAA,GAAoB,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,EAAE,CAAA;AAAA,IAC/D;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAcA,eAAsB,mBACpB,OAAA,EAC0B;AAC1B,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,MAAM,YAAA,GAAe,MAAM,aAAA,CAAc,IAAI,CAAA;AAE7C,EAAA,IAAI,CAAC,YAAA,EAAc;AAEjB,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAK;AAAA,EACrC;AAEA,EAAA,OAAO,kBAAkB,YAAY,CAAA;AACvC;AAgBA,eAAsB,gBACpB,OAAA,EACyB;AACzB,EAAA,MAAM,EAAE,OAAA,EAAS,aAAA,GAAgB,IAAA,EAAK,GAAI,OAAA;AAE1C,EAAA,MAAM,KAAA,GAAQ,MAAM,iBAAA,CAAkB,EAAE,eAAe,CAAA;AAEvD,EAAA,MAAM,cAAA,GAAiB,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAEtE,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,MAAsF;AAAA,IACtG,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,GAAA,EAAK,CAAA,EAAG,cAAc,CAAA,EAAG,KAAK,IAAI,CAAA,CAAA;AAAA,IAClC,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,UAAA,EAAa,KAAK,UAAA,IAAc,QAAA;AAAA,IAChC,QAAA,EAAU,KAAK,QAAA,IAAY;AAAA,GAC7B,CAAE,CAAA;AACJ;AA4BA,eAAsB,qBAAqB,OAAA,EA2BxC;AACD,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,2BAAc,CAAA;AAEvD,EAAA,IAAI,OAAA,GAAU,OAAA,CAAQ,OAAA,IAAW,EAAC;AAMlC,EAAA,IAAI,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,oBAAA,EAAsB,sBAAA,EAAuB,GAAI,MAAM,OAAO,yBAAqB,CAAA;AAC3F,MAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAA,GAAU,qBAAqB,MAAM,CAAA;AACrC,QAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,wBAAA,EAA2B,OAAA,CAAQ,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAAA,MACnF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kCAAkC,KAAK,CAAA;AAAA,IACvD;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,KAAK,wCAAwC,CAAA;AACrD,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,CAAA,EAAG,SAAS,CAAA,EAAE;AAAA,EACjD;AASA,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,UAAA;AAE7B,EAAA,OAAA,CAAQ,IAAI,CAAA,oBAAA,EAAuB,OAAA,CAAQ,MAAM,CAAA,kBAAA,EAAqB,IAAI,CAAA,IAAA,CAAM,CAAA;AAChF,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAE1E,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,IAAI,CAAA,4BAAA,EAA+B,MAAA,CAAO,OAAO,CAAA,MAAA,EAAS,MAAA,CAAO,OAAO,CAAA,QAAA,CAAU,CAAA;AAAA,EAC5F;AAEA,EAAA,OAAO,MAAA;AACT;AAOA,eAAsB,WAAA,CACpB,WACA,IAAA,EACkB;AAClB,EAAA,MAAM,YAAY,MAAM,kBAAA,CAAmB,EAAa,MAAM,CAAA;AAC9D,EAAA,OAAO,SAAA,CAAU,KAAA;AACnB","file":"chunk-HOJ4J4X2.mjs","sourcesContent":["import type { Metadata } from 'next'\nimport { getSEOPageData, getABTest, recordABImpression, ensureMetadata } from './server-api'\nimport { descriptionProblem, titleProblem, type MetaIdentity } from '../seo-meta/contract'\nimport { resolveSiteHost } from '../sites/resolve'\nimport type { \n  GetManagedMetadataOptions, \n  ManagedMetadataResult,\n  GetABVariantOptions,\n  ABTestResult \n} from './types'\n\n/**\n * Get managed metadata for a page\n * \n * Use in generateMetadata() to fetch Portal-managed SEO data\n * \n * @example\n * ```tsx\n * export async function generateMetadata({ params }) {\n *   return getManagedMetadata({\n *     path: `/services/${params.slug}`,\n *     fallback: {\n *       title: 'Our Services',\n *       description: 'Learn about our services'\n *     }\n *   })\n * }\n * ```\n */\nexport async function getManagedMetadata(\n  options: GetManagedMetadataOptions\n): Promise<ManagedMetadataResult> {\n  const { path, fallback = {}, overrides = {}, favicon: faviconMode = 'metadata' } = options\n  const omitIcons = faviconMode === 'component'\n\n  const result = await getSEOPageData(path)\n  const pageData = result?.page\n  const projectData = result?.project\n\n  // If no managed data, return fallback (still include favicon from project if available, unless using component)\n  if (!pageData) {\n    const fallbackMeta: ManagedMetadataResult = {\n      ...fallback,\n      ...overrides,\n      _managed: false,\n      _source: 'fallback',\n    } as ManagedMetadataResult\n\n    if (!omitIcons && projectData?.logo_url) {\n      fallbackMeta.icons = {\n        icon: projectData.logo_url,\n        apple: projectData.logo_url,\n      }\n    }\n\n    return fallbackMeta\n  }\n\n  // Build metadata from managed values, falling back to provided fallbacks\n  const metadata: ManagedMetadataResult = {\n    _managed: true,\n    _source: 'database',\n  }\n\n  if (!omitIcons && projectData?.logo_url) {\n    metadata.icons = {\n      icon: projectData.logo_url,\n      apple: projectData.logo_url,\n    }\n  }\n\n  // Signal fallback — when page exists but both title & description are empty,\n  // trigger Signal AI to generate them (fire-and-forget so it never blocks TTFB;\n  // the generated data will be available on the next request)\n  if (!pageData.managed_title && !pageData.managed_meta_description && !pageData.managed_description) {\n    ensureMetadata(path).catch(() => {})\n  }\n\n  // Quality gate (seo-meta/contract): a managed value that names the domain,\n  // was hard-cut mid-word, ends on a separator, or respells the brand never\n  // ships. The page's own fallback does, so no site needs its own guard.\n  const identity: MetaIdentity = {\n    brand: projectData?.brand ?? projectData?.title ?? null,\n    hosts: [resolveSiteHost(), pageData.site, projectData?.domain, projectData?.site_url],\n  }\n  const rejected: NonNullable<ManagedMetadataResult['_rejected']> = {}\n  const rawTitle = pageData.managed_title\n  const titleIssue = rawTitle ? titleProblem(rawTitle, identity, { path }) : null\n  if (titleIssue) rejected.title = titleIssue\n  const managedTitle = rawTitle && !titleIssue ? rawTitle : undefined\n\n  const rawDescription = pageData.managed_meta_description || pageData.managed_description\n  const descriptionIssue = rawDescription ? descriptionProblem(rawDescription, identity) : null\n  if (descriptionIssue) rejected.description = descriptionIssue\n  const managedDescription = rawDescription && !descriptionIssue ? rawDescription : undefined\n\n  if (titleIssue || descriptionIssue) metadata._rejected = rejected\n\n  // Title\n  if (managedTitle) {\n    metadata.title = managedTitle\n  } else if (fallback.title) {\n    metadata.title = fallback.title\n  }\n\n  // Description\n  if (managedDescription) {\n    metadata.description = managedDescription\n  } else if (fallback.description) {\n    metadata.description = fallback.description\n  }\n\n  // Keywords\n  if (pageData.managed_keywords?.length) {\n    metadata.keywords = pageData.managed_keywords\n  } else if (fallback.keywords) {\n    metadata.keywords = fallback.keywords\n  }\n\n  // Robots\n  if (pageData.managed_robots) {\n    metadata.robots = pageData.managed_robots\n  }\n\n  // Canonical\n  if (pageData.managed_canonical) {\n    metadata.alternates = {\n      ...metadata.alternates,\n      canonical: pageData.managed_canonical,\n    }\n  }\n\n  // Optional hreflang map from Portal (expansion / multilingual sites)\n  const langAlts = pageData.language_alternates\n  if (langAlts && typeof langAlts === 'object' && !Array.isArray(langAlts)) {\n    metadata.alternates = {\n      ...metadata.alternates,\n      languages: langAlts as Record<string, string>,\n    }\n  }\n\n  // Open Graph — the same gate, so a rejected title can't still ship in\n  // every share preview through og:title / twitter:title.\n  const managedOgTitle =\n    pageData.managed_og_title && !titleProblem(pageData.managed_og_title, identity, { path })\n      ? pageData.managed_og_title\n      : undefined\n  const managedOgDescription =\n    pageData.managed_og_description && !descriptionProblem(pageData.managed_og_description, identity)\n      ? pageData.managed_og_description\n      : undefined\n  const ogTitle = managedOgTitle || managedTitle\n  const ogDescription = managedOgDescription || managedDescription\n  const ogImage = pageData.managed_og_image\n\n  if (ogTitle || ogDescription || ogImage) {\n    metadata.openGraph = {\n      ...(ogTitle && { title: ogTitle }),\n      ...(ogDescription && { description: ogDescription }),\n      ...(ogImage && { images: [{ url: ogImage }] }),\n    }\n  }\n\n  // Twitter (use OG values as fallback)\n  if (ogTitle || ogDescription || ogImage) {\n    metadata.twitter = {\n      card: 'summary_large_image',\n      ...(ogTitle && { title: ogTitle }),\n      ...(ogDescription && { description: ogDescription }),\n      ...(ogImage && { images: [ogImage] }),\n    }\n  }\n\n  // Apply overrides last\n  return {\n    ...metadata,\n    ...overrides,\n    _managed: true,\n    _source: 'database',\n  }\n}\n\n/**\n * Get A/B test variant for a field\n * \n * @example\n * ```tsx\n * const variant = await getABVariant({\n *   path: '/pricing',\n *   field: 'title',\n *   sessionId: cookies().get('session_id')?.value\n * })\n * \n * if (variant) {\n *   // Use variant.value instead of default\n * }\n * ```\n */\nexport async function getABVariant(\n  options: GetABVariantOptions\n): Promise<ABTestResult | null> {\n  const { path, field, sessionId } = options\n\n  const test = await getABTest(path, field)\n\n  if (!test) {\n    return null\n  }\n\n  // Determine variant based on session ID or random\n  let variant: 'a' | 'b'\n  \n  if (sessionId) {\n    // Consistent variant for same session\n    const hash = sessionId.split('').reduce((acc, char) => {\n      return ((acc << 5) - acc) + char.charCodeAt(0)\n    }, 0)\n    variant = (Math.abs(hash) % 100) < (test.traffic_split * 100) ? 'a' : 'b'\n  } else {\n    // Random variant\n    variant = Math.random() < test.traffic_split ? 'a' : 'b'\n  }\n\n  // Record impression (fire and forget)\n  recordABImpression(test.id, variant, sessionId).catch(() => {\n    // Silently fail - don't block rendering\n  })\n\n  return {\n    testId: test.id,\n    variant,\n    value: variant === 'a' ? test.variant_a : test.variant_b,\n  }\n}\n\n/**\n * Get managed metadata with A/B test support\n * \n * Automatically applies running A/B test variants to metadata\n */\nexport async function getManagedMetadataWithAB(\n  options: GetManagedMetadataOptions & { sessionId?: string }\n): Promise<ManagedMetadataResult> {\n  const { sessionId, ...metadataOptions } = options\n  \n  // Get base metadata\n  const metadata = await getManagedMetadata(metadataOptions)\n\n  // Check for title A/B test\n  const titleTest = await getABVariant({\n    path: options.path,\n    field: 'title',\n    sessionId,\n  })\n\n  if (titleTest) {\n    metadata.title = titleTest.value\n  }\n\n  // Check for description A/B test\n  const descTest = await getABVariant({\n    path: options.path,\n    field: 'description',\n    sessionId,\n  })\n\n  if (descTest) {\n    metadata.description = descTest.value\n  }\n\n  return metadata\n}\n","import { getRedirectData, getRobotsData, getSitemapEntries } from './server-api'\nimport type { \n  GetRedirectOptions, \n  RedirectResult, \n  GetRobotsOptions, \n  RobotsDirective,\n  GetSitemapEntriesOptions,\n  SitemapEntry \n} from './types'\n\n/**\n * Get redirect for a path if one exists\n * \n * Use in Next.js middleware to handle managed redirects\n * \n * @example\n * ```tsx\n * // proxy.ts\n * import { getRedirect } from '@sonordev/site-kit/seo'\n * \n * export default async function proxy(request) {\n *   const redirect = await getRedirect({ path: request.nextUrl.pathname })\n *   \n *   if (redirect) {\n *     return NextResponse.redirect(redirect.destination, redirect.statusCode)\n *   }\n * }\n * ```\n */\nexport async function getRedirect(\n  options: GetRedirectOptions\n): Promise<RedirectResult | null> {\n  const { path } = options\n\n  const redirect = await getRedirectData(path)\n\n  if (!redirect) {\n    return null\n  }\n\n  // Check if expired\n  if (redirect.expires_at && new Date(redirect.expires_at) < new Date()) {\n    return null\n  }\n\n  // Determine destination\n  const destination = redirect.destination_url || redirect.destination_path\n  const isExternal = destination.startsWith('http://') || destination.startsWith('https://')\n\n  return {\n    destination,\n    statusCode: redirect.status_code,\n    isExternal,\n  }\n}\n\n/**\n * Parse robots directive string into structured object\n */\nfunction parseRobotsString(robots: string): RobotsDirective {\n  const directive: RobotsDirective = {\n    index: true,\n    follow: true,\n  }\n\n  const parts = robots.toLowerCase().split(',').map(p => p.trim())\n\n  for (const part of parts) {\n    if (part === 'noindex') directive.index = false\n    if (part === 'nofollow') directive.follow = false\n    if (part === 'noarchive') directive.noarchive = true\n    if (part === 'nosnippet') directive.nosnippet = true\n    if (part === 'noimageindex') directive.noimageindex = true\n    if (part.startsWith('max-snippet:')) {\n      directive.max_snippet = parseInt(part.split(':')[1], 10)\n    }\n    if (part.startsWith('max-image-preview:')) {\n      const value = part.split(':')[1] as 'none' | 'standard' | 'large'\n      directive.max_image_preview = value\n    }\n    if (part.startsWith('max-video-preview:')) {\n      directive.max_video_preview = parseInt(part.split(':')[1], 10)\n    }\n  }\n\n  return directive\n}\n\n/**\n * Get robots directive for a page\n * \n * @example\n * ```tsx\n * const robots = await getRobotsDirective({ path: '/private-page' })\n * \n * if (!robots.index) {\n *   // Page should not be indexed\n * }\n * ```\n */\nexport async function getRobotsDirective(\n  options: GetRobotsOptions\n): Promise<RobotsDirective> {\n  const { path } = options\n\n  const robotsString = await getRobotsData(path)\n\n  if (!robotsString) {\n    // Default: index and follow\n    return { index: true, follow: true }\n  }\n\n  return parseRobotsString(robotsString)\n}\n\n/**\n * Get the project's managed page list as sitemap entries\n *\n * Returns `{ path, url, lastmod, changefreq, priority }`, which is NOT Next's\n * `MetadataRoute.Sitemap` shape (`lastModified` / `changeFrequency`). For\n * app/sitemap.ts prefer `createSitemap` from `@sonordev/site-kit/sitemap`.\n *\n * @example\n * ```tsx\n * import { generateSitemap } from '@sonordev/site-kit/seo'\n *\n * const entries = await generateSitemap({ baseUrl: 'https://example.com' })\n * ```\n */\nexport async function generateSitemap(\n  options: GetSitemapEntriesOptions\n): Promise<SitemapEntry[]> {\n  const { baseUrl, publishedOnly = true } = options\n\n  const pages = await getSitemapEntries({ publishedOnly })\n\n  const normalizedBase = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n\n  return pages.map((page: { path: string; lastmod?: string; changefreq?: string; priority?: number }) => ({\n    path: page.path,\n    url: `${normalizedBase}${page.path}`,\n    lastmod: page.lastmod,\n    changefreq: (page.changefreq || 'weekly') as SitemapEntry['changefreq'],\n    priority: page.priority ?? 0.5,\n  }))\n}\n\n/**\n * Register local sitemap entries with Sonor\n * \n * Call this at build time to sync your local routes to seo_pages.\n * This ensures analytics only tracks real pages.\n * \n * After registration, Signal AI will generate optimized meta titles\n * and descriptions for pages that don't have managed meta yet.\n * \n * @example\n * ```ts\n * // scripts/register-sitemap.ts\n * import { registerLocalSitemap } from '@sonordev/site-kit/seo/server'\n *\n * // Option 1: Provide entries directly\n * await registerLocalSitemap({\n *   entries: [\n *     { path: '/', title: 'Home', priority: 1.0 },\n *     { path: '/about', title: 'About Us', priority: 0.8 },\n *   ]\n * })\n *\n * // Option 2: Auto-discover from Next.js app directory\n * await registerLocalSitemap({ autoDiscover: true })\n * ```\n */\nexport async function registerLocalSitemap(options: {\n  entries?: Array<{\n    path: string\n    title?: string\n    priority?: number\n    changefreq?: 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never'\n  }>\n  autoDiscover?: boolean\n  /** Trigger Signal AI to generate optimized meta titles/descriptions (default: true) */\n  optimize_meta?: boolean\n  /**\n   * Sync mode. Defaults to 'additive' for explicit entries (a partial list must\n   * never delete the rest of the site's pages) and 'full-replace' for\n   * autoDiscover (which enumerates the complete route set).\n   */\n  mode?: 'additive' | 'full-replace'\n  /** Sub-site host on a multi-site project. Defaults to NEXT_PUBLIC_SITE_URL's host. */\n  site?: string\n}): Promise<{\n  success: boolean\n  created: number\n  updated: number\n  removed?: number\n  meta_optimization?: {\n    triggered: boolean\n    pages_queued: number\n  } | null\n}> {\n  const { registerSitemap } = await import('./server-api')\n\n  let entries = options.entries || []\n\n  // Auto-discover from the Next.js app directory if requested. Lazy-import the\n  // fs-backed discovery module so `fs` never enters this file's STATIC graph —\n  // getRedirect/isIndexable below are imported by edge middleware, which has no\n  // fs. Discovery only runs at build time, in Node, so a dynamic import is fine.\n  if (options.autoDiscover && entries.length === 0) {\n    try {\n      const { discoverNextJsRoutes, findAppDirForDiscovery } = await import('../sitemap/discover')\n      const appDir = findAppDirForDiscovery()\n      if (appDir) {\n        entries = discoverNextJsRoutes(appDir)\n        console.log(`[Sonor] Auto-discovered ${entries.length} routes from app directory`)\n      }\n    } catch (error) {\n      console.error('[Sonor] Auto-discovery failed:', error)\n    }\n  }\n\n  if (entries.length === 0) {\n    console.warn('[Sonor] No sitemap entries to register')\n    return { success: true, created: 0, updated: 0 }\n  }\n\n  // A route set discovered from the filesystem is structurally incomplete (it\n  // can't enumerate dynamic routes and ignores sitemap excludes), and an\n  // explicit entry list is often partial — either way a full-replace would\n  // silently delete real pages. Default everything to additive; a caller that\n  // truly holds the complete page set opts in with mode: 'full-replace'. The\n  // recommended `sonor-register-sitemap` postbuild additionally self-skips when\n  // an app/sitemap route already owns the sync.\n  const mode = options.mode ?? 'additive'\n\n  console.log(`[Sonor] Registering ${entries.length} sitemap entries (${mode})...`)\n  const result = await registerSitemap(entries, { mode, site: options.site })\n  \n  if (result.success) {\n    console.log(`[Sonor] Sitemap registered: ${result.created} new, ${result.updated} updated`)\n  }\n  \n  return result\n}\n\n/**\n * Check if a path should be indexed\n * \n * Quick helper to check indexability without full directive parsing\n */\nexport async function isIndexable(\n  projectId: string,\n  path: string\n): Promise<boolean> {\n  const directive = await getRobotsDirective({ projectId, path })\n  return directive.index\n}\n"]}

package/dist/{chunk-H6YVT3BL.js → chunk-I3ND4XYW.js}

@@ -1,6 +1,8 @@
 'use strict';
 
 var chunkJP5WGL75_js = require('./chunk-JP5WGL75.js');
+var chunkYN7QHLWF_js = require('./chunk-YN7QHLWF.js');
+var chunkH5NBFNND_js = require('./chunk-H5NBFNND.js');
 var server = require('next/server');
 
 var DEFAULT_PORTAL_URL = "https://api.sonor.io";
@@ -12,9 +14,9 @@ var DEFAULT_FETCH_TIMEOUT_MS = 300;
 var FAILURE_COOLDOWN_MS = 3e4;
 var SK_PATH_HEADER = "x-sk-path";
 var rulesCache = /* @__PURE__ */ new Map();
-function getRedirectCacheKey(apiKey, domain) {
-  if (apiKey) return `key:${apiKey}`;
-  return `domain:${domain || ""}`;
+function getRedirectCacheKey(apiKey, domain, site) {
+  const scope = apiKey ? `key:${apiKey}` : `domain:${domain || ""}`;
+  return `${scope}|site:${site}`;
 }
 async function fetchRedirectRules(config) {
   const now = Date.now();
@@ -27,7 +29,8 @@ async function fetchRedirectRules(config) {
     const siteConfig = await chunkJP5WGL75_js.getSiteConfig({ apiUrl: baseUrl });
     domain = siteConfig?.domain;
   }
-  const cacheKey = getRedirectCacheKey(apiKey, domain);
+  const site = chunkH5NBFNND_js.resolveSiteHost(config.site);
+  const cacheKey = getRedirectCacheKey(apiKey, domain, site);
   const cached = rulesCache.get(cacheKey);
   if (cached && now < cached.expiry) {
     return cached.rules;
@@ -36,10 +39,10 @@ async function fetchRedirectRules(config) {
     let url;
     const headers = { "Content-Type": "application/json" };
     if (apiKey) {
-      url = `${baseUrl}/api/public/seo/redirects`;
+      url = chunkYN7QHLWF_js.withSiteParam(`${baseUrl}/api/public/seo/redirects`, site);
       headers["x-api-key"] = apiKey;
     } else if (domain) {
-      url = `${baseUrl}/api/public/seo/redirects?domain=${encodeURIComponent(domain)}`;
+      url = chunkYN7QHLWF_js.withSiteParam(`${baseUrl}/api/public/seo/redirects?domain=${encodeURIComponent(domain)}`, site);
     } else {
       return [];
     }
@@ -102,7 +105,7 @@ async function trackRedirectHit(config, fromPath, domainForHit) {
     await fetch(`${baseUrl}/api/public/seo/redirects/hit`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ domain, from_path: fromPath })
+      body: JSON.stringify(chunkYN7QHLWF_js.withSiteBody({ domain, from_path: fromPath }, config.site))
     });
   } catch {
   }
@@ -126,5 +129,5 @@ exports.findRedirectMatch = findRedirectMatch;
 exports.generateNextRedirects = generateNextRedirects;
 exports.handleManagedRedirects = handleManagedRedirects;
 exports.trackRedirectHit = trackRedirectHit;
-//# sourceMappingURL=chunk-H6YVT3BL.js.map
-//# sourceMappingURL=chunk-H6YVT3BL.js.map
+//# sourceMappingURL=chunk-I3ND4XYW.js.map
+//# sourceMappingURL=chunk-I3ND4XYW.js.map

package/dist/chunk-I3ND4XYW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/redirects/index.ts"],"names":["getSiteConfig","resolveSiteHost","withSiteParam","NextResponse","withSiteBody"],"mappings":";;;;;;;AAqEA,IAAM,kBAAA,GAAqB,sBAAA;AAO3B,SAAS,SAAA,GAAgC;AACvC,EAAA,MAAM,GAAA,GAAM,OAAO,OAAA,KAAY,WAAA,IAAe,QAAQ,GAAA,GAAM,OAAA,CAAQ,IAAI,aAAA,GAAgB,MAAA;AACxF,EAAA,OAAO,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,GAAM,GAAA,GAAM,MAAA;AAChD;AACA,IAAM,wBAAA,GAA2B,GAAA;AAKjC,IAAM,mBAAA,GAAsB,GAAA;AAQrB,IAAM,cAAA,GAAiB;AAG9B,IAAM,UAAA,uBAAiB,GAAA,EAAuD;AAO9E,SAAS,mBAAA,CAAoB,MAAA,EAA4B,MAAA,EAA4B,IAAA,EAAsB;AACzG,EAAA,MAAM,QAAQ,MAAA,GAAS,CAAA,IAAA,EAAO,MAAM,CAAA,CAAA,GAAK,CAAA,OAAA,EAAU,UAAU,EAAE,CAAA,CAAA;AAC/D,EAAA,OAAO,CAAA,EAAG,KAAK,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA;AAC9B;AAQA,eAAsB,mBAAmB,MAAA,EAAiD;AACxF,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,YAAA,GAAe,OAAO,YAAA,IAAgB,GAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AAEtD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,KAAW,OAAO,OAAA,KAAY,eAAe,OAAA,CAAQ,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,aAAA,GAAgB,MAAA,CAAA;AAC7G,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAW,QAAA,GAAW,MAAA,GAAS,MAAA;AACrD,EAAA,IAAI,SAAS,MAAA,CAAO,MAAA;AAEpB,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ;AACtB,IAAA,MAAM,aAAa,MAAMA,8BAAA,CAAc,EAAE,MAAA,EAAQ,SAAS,CAAA;AAC1D,IAAA,MAAA,GAAS,UAAA,EAAY,MAAA;AAAA,EACvB;AAIA,EAAA,MAAM,IAAA,GAAOC,gCAAA,CAAgB,MAAA,CAAO,IAAI,CAAA;AACxC,EAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,MAAA,EAAQ,MAAA,EAAQ,IAAI,CAAA;AACzD,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AACtC,EAAA,IAAI,MAAA,IAAU,GAAA,GAAM,MAAA,CAAO,MAAA,EAAQ;AACjC,IAAA,OAAO,MAAA,CAAO,KAAA;AAAA,EAChB;AAEA,EAAA,IAAI;AACF,IAAA,IAAI,GAAA;AACJ,IAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAE7E,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,GAAA,GAAMC,8BAAA,CAAc,CAAA,EAAG,OAAO,CAAA,yBAAA,CAAA,EAA6B,IAAI,CAAA;AAC/D,MAAA,OAAA,CAAQ,WAAW,CAAA,GAAI,MAAA;AAAA,IACzB,WAAW,MAAA,EAAQ;AACjB,MAAA,GAAA,GAAMA,8BAAA,CAAc,GAAG,OAAO,CAAA,iCAAA,EAAoC,mBAAmB,MAAM,CAAC,IAAI,IAAI,CAAA;AAAA,IACtG,CAAA,MAAO;AACL,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,MAAM,SAAA,GAAY,OAAO,cAAA,IAAkB,wBAAA;AAG3C,IAAA,MAAM,MAAA,GACJ,OAAO,WAAA,KAAgB,WAAA,IAAe,OAAO,WAAA,CAAY,OAAA,KAAY,UAAA,GACjE,WAAA,CAAY,OAAA,CAAQ,SAAS,CAAA,GAC7B,KAAA,CAAA;AAEN,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,OAAA;AAAA,MACA,MAAA;AAAA;AAAA;AAAA,MAGA,IAAA,EAAM,EAAE,UAAA,EAAY,YAAA;AAAa,KAClC,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sCAAA,EAAyC,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACnE,MAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,MAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,IAC3B;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,MAAM,KAAA,GAAA,CAAS,KAAK,SAAA,IAAa,IAAI,MAAA,CAAO,CAAC,CAAA,KAAoB,CAAA,CAAE,UAAU,CAAA;AAC7E,IAAA,UAAA,CAAW,GAAA,CAAI,UAAU,EAAE,KAAA,EAAO,QAAQ,GAAA,GAAM,YAAA,GAAe,KAAM,CAAA;AACrE,IAAA,OAAO,KAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,KAAA,EAAO,MAAA,EAAQ,KAAA,IAAS,EAAC,EAAG,MAAA,EAAQ,GAAA,GAAM,mBAAA,EAAqB,CAAA;AAC1F,IAAA,OAAO,MAAA,EAAQ,SAAS,EAAC;AAAA,EAC3B;AACF;AAOO,SAAS,iBAAA,CACd,UACA,KAAA,EAC0B;AAC1B,EAAA,OAAO,KAAA,CAAM,KAAK,CAAA,CAAA,KAAK;AACrB,IAAA,IAAI,CAAA,CAAE,SAAA,KAAc,QAAA,EAAU,OAAO,IAAA;AACrC,IAAA,MAAM,cAAA,GAAiB,CAAA,CAAE,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,GAAI,CAAA,CAAE,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,CAAA,CAAE,SAAA;AAChF,IAAA,MAAM,cAAA,GAAiB,SAAS,QAAA,CAAS,GAAG,IAAI,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,QAAA;AACxE,IAAA,OAAO,cAAA,KAAmB,cAAA;AAAA,EAC5B,CAAC,CAAA;AACH;AAMA,eAAsB,sBAAA,CACpB,SACA,MAAA,EACmC;AACnC,EAAA,MAAM,QAAA,GAAW,QAAQ,OAAA,CAAQ,QAAA;AAGjC,EAAA,IACE,QAAA,CAAS,UAAA,CAAW,QAAQ,CAAA,IAC5B,QAAA,CAAS,UAAA,CAAW,MAAM,CAAA,IAC1B,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EACrB;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,MAAM,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,QAAA,EAAU,KAAK,CAAA;AAE/C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,cAAc,IAAI,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,QAAQ,GAAG,CAAA;AAGtD,EAAA,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,OAAA,CAAQ,CAAC,OAAO,GAAA,KAAQ;AACnD,IAAA,WAAA,CAAY,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACzC,CAAC,CAAA;AAGD,EAAA,gBAAA,CAAiB,QAAQ,KAAA,CAAM,SAAA,EAAW,OAAO,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAGvE,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,aAAa,CAAA;AAC/C,EAAA,OAAOC,mBAAA,CAAa,QAAA,CAAS,WAAA,EAAa,UAAU,CAAA;AACtD;AAQA,eAAsB,gBAAA,CAAiB,MAAA,EAAwB,QAAA,EAAkB,YAAA,EAAsC;AACrH,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,YAAA,IAAgB,SAAA,EAAU,IAAK,kBAAA;AACtD,IAAA,MAAM,MAAA,GAAS,YAAA,IAAgB,MAAA,CAAO,MAAA,IAAA,CAAW,MAAMH,8BAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,CAAA,GAAI,MAAA;AACnH,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,KAAA,CAAM,CAAA,EAAG,OAAO,CAAA,6BAAA,CAAA,EAAiC;AAAA,MACrD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAUI,6BAAA,CAAa,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAA,EAAS,EAAG,MAAA,CAAO,IAAI,CAAC;AAAA,KAChF,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAwBA,eAAsB,sBAAsB,MAAA,EAIxC;AAGF,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,EAAE,cAAA,EAAgB,KAAQ,GAAG,MAAA,EAAQ,YAAA,EAAc,CAAA,EAAG,CAAA;AAE7F,EAAA,OAAO,KAAA,CAAM,IAAI,CAAA,CAAA,MAAM;AAAA,IACrB,QAAQ,CAAA,CAAE,SAAA;AAAA,IACV,aAAa,CAAA,CAAE,OAAA;AAAA,IACf,SAAA,EAAW,CAAA,CAAE,aAAA,KAAkB,KAAA,IAAS,EAAE,aAAA,KAAkB;AAAA,GAC9D,CAAE,CAAA;AACJ;AAKO,SAAS,kBAAA,GAA2B;AACzC,EAAA,UAAA,CAAW,KAAA,EAAM;AACnB","file":"chunk-I3ND4XYW.js","sourcesContent":["/**\n * Managed Redirects - Next.js Middleware Helper\n * \n * Fetches redirect rules from Portal and applies them.\n * Supports API key only (domain resolved from Portal) or domain-based lookup.\n *\n * On a multi-site project (one Sonor project, many domains) rules are per\n * host: a rule with no site applies everywhere, and one tagged\n * 'bd-charlotte.com' applies only there. The list read and the hit both name\n * the host through `sites/site-param` (explicit `site` > NEXT_PUBLIC_SITE_URL\n * host), and the in-memory cache key carries it too. Keyed by API key alone,\n * two hosts served by one process would share whichever list was fetched\n * first, for the whole cache window.\n *\n * Usage in proxy.ts (API key only):\n * \n * import { handleManagedRedirects } from '@sonordev/site-kit/redirects'\n * \n * export default async function proxy(request: NextRequest) {\n *   const redirect = await handleManagedRedirects(request, {\n *     apiKey: process.env.SONOR_API_KEY,\n *     portalApiUrl: process.env.SONOR_API_URL,\n *   })\n *   if (redirect) return redirect\n *   return NextResponse.next()\n * }\n * \n * Or with domain (legacy):\n *   const redirect = await handleManagedRedirects(request, { domain: 'example.com' })\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { getSiteConfig } from '../site-config'\nimport { resolveSiteHost } from '../sites/resolve'\nimport { withSiteBody, withSiteParam } from '../sites/site-param'\n\nexport interface RedirectRule {\n  from_path: string\n  to_path: string\n  redirect_type: '301' | '302' | '307' | '308'\n  is_enabled: boolean\n}\n\nexport interface RedirectConfig {\n  /** Domain to fetch redirects for (optional when apiKey is set) */\n  domain?: string\n  /** Project API key; when set, redirects are fetched by key (no domain needed) */\n  apiKey?: string\n  /**\n   * Sub-site host on a multi-site project (e.g. 'bd-charlotte.com'). Same\n   * meaning as the `site` argument of withSiteParam: when unset it comes from\n   * the NEXT_PUBLIC_SITE_URL host. The API returns this host's rules plus the\n   * project-wide ones. When nothing resolves no site is sent, and the API\n   * answers for the project's primary domain.\n   */\n  site?: string\n  portalApiUrl?: string\n  cacheSeconds?: number\n  /**\n   * Hard ceiling on the rules fetch, in ms. Default 300.\n   *\n   * This fetch can sit in front of HTML (proxy hot path / not-found render),\n   * and without a bound a *slow* Portal becomes every page's TTFB — the\n   * try/catch only fails open on error, not on slow. Build-time callers\n   * (generateNextRedirects) pass a larger value.\n   */\n  fetchTimeoutMs?: number\n}\n\nconst DEFAULT_PORTAL_URL = 'https://api.sonor.io'\n\n/**\n * Env parity with the API key: SONOR_API_URL was honored for the key's\n * sibling everywhere else in the kit but ignored here, so sites overriding\n * the API URL by env silently fetched redirect rules from production.\n */\nfunction envApiUrl(): string | undefined {\n  const raw = typeof process !== 'undefined' && process.env ? process.env.SONOR_API_URL : undefined\n  return typeof raw === 'string' && raw ? raw : undefined\n}\nconst DEFAULT_FETCH_TIMEOUT_MS = 300\n/**\n * After a failed fetch, don't re-hit the API for this long. Without this a\n * cold instance with a down Portal pays the full timeout on EVERY request.\n */\nconst FAILURE_COOLDOWN_MS = 30_000\n\n/**\n * Request header the site-kit proxy stamps with `pathname + search` so the\n * not-found boundary (which receives no URL from Next) can know what was\n * requested. Single source of truth — used by createProxy and the deprecated\n * resolveManagedRedirect.\n */\nexport const SK_PATH_HEADER = 'x-sk-path'\n\n// Cache for redirect rules keyed by apiKey or 'domain:'+domain, plus the site host\nconst rulesCache = new Map<string, { rules: RedirectRule[]; expiry: number }>()\n\n/**\n * The host is part of the key because rules are per host. One process can\n * serve several hosts of a multi-site project (a `site` passed per call), and\n * a key without it would hand every host the first host's list.\n */\nfunction getRedirectCacheKey(apiKey: string | undefined, domain: string | undefined, site: string): string {\n  const scope = apiKey ? `key:${apiKey}` : `domain:${domain || ''}`\n  return `${scope}|site:${site}`\n}\n\n/**\n * Fetch redirect rules from Portal API.\n * When apiKey is set (or from env), uses key-based endpoint (no domain required).\n * Otherwise uses domain query (or domain from getSiteConfig when only env API key is set).\n * Either way the site host goes along as `?site=`, left off when it resolves empty.\n */\nexport async function fetchRedirectRules(config: RedirectConfig): Promise<RedirectRule[]> {\n  const now = Date.now()\n  const cacheSeconds = config.cacheSeconds ?? 300\n  const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n\n  const rawKey = config.apiKey ?? (typeof process !== 'undefined' && process.env ? process.env.SONOR_API_KEY : undefined)\n  const apiKey = typeof rawKey === 'string' ? rawKey : undefined\n  let domain = config.domain\n\n  if (!apiKey && !domain) {\n    const siteConfig = await getSiteConfig({ apiUrl: baseUrl })\n    domain = siteConfig?.domain\n  }\n\n  // Resolved once, so the cache key and the ?site= param always name the same\n  // host: the entry a host reads is the list fetched for that host.\n  const site = resolveSiteHost(config.site)\n  const cacheKey = getRedirectCacheKey(apiKey, domain, site)\n  const cached = rulesCache.get(cacheKey)\n  if (cached && now < cached.expiry) {\n    return cached.rules\n  }\n\n  try {\n    let url: string\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' }\n\n    if (apiKey) {\n      url = withSiteParam(`${baseUrl}/api/public/seo/redirects`, site)\n      headers['x-api-key'] = apiKey\n    } else if (domain) {\n      url = withSiteParam(`${baseUrl}/api/public/seo/redirects?domain=${encodeURIComponent(domain)}`, site)\n    } else {\n      return []\n    }\n\n    const timeoutMs = config.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS\n    // Guarded like every other web API here (see shared/identity): AbortSignal\n    // .timeout is Node 17.3+/modern edge; when absent we just fetch unbounded.\n    const signal =\n      typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n        ? AbortSignal.timeout(timeoutMs)\n        : undefined\n\n    const res = await fetch(url, {\n      headers,\n      signal,\n      // No-op in proxy (outside the data cache) but real in RSC renders,\n      // where the not-found resolver runs.\n      next: { revalidate: cacheSeconds },\n    })\n\n    if (!res.ok) {\n      console.error(`[site-kit] Failed to fetch redirects: ${res.status}`)\n      rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n      return cached?.rules ?? []\n    }\n\n    const data = await res.json()\n    const rules = (data.redirects || []).filter((r: RedirectRule) => r.is_enabled)\n    rulesCache.set(cacheKey, { rules, expiry: now + cacheSeconds * 1000 })\n    return rules\n  } catch (error) {\n    console.error('[site-kit] Error fetching redirects:', error)\n    rulesCache.set(cacheKey, { rules: cached?.rules ?? [], expiry: now + FAILURE_COOLDOWN_MS })\n    return cached?.rules ?? []\n  }\n}\n\n/**\n * Find the rule matching a pathname (exact, tolerating trailing-slash\n * variance). Single source of truth for match semantics — used by the proxy\n * hot path and the not-found resolver. Do not re-fork.\n */\nexport function findRedirectMatch(\n  pathname: string,\n  rules: RedirectRule[],\n): RedirectRule | undefined {\n  return rules.find(r => {\n    if (r.from_path === pathname) return true\n    const normalizedFrom = r.from_path.endsWith('/') ? r.from_path.slice(0, -1) : r.from_path\n    const normalizedPath = pathname.endsWith('/') ? pathname.slice(0, -1) : pathname\n    return normalizedFrom === normalizedPath\n  })\n}\n\n/**\n * Handle managed redirects in middleware\n * Returns a NextResponse.redirect if a match is found, otherwise undefined\n */\nexport async function handleManagedRedirects(\n  request: NextRequest,\n  config: RedirectConfig,\n): Promise<NextResponse | undefined> {\n  const pathname = request.nextUrl.pathname\n  \n  // Skip for static assets and API routes\n  if (\n    pathname.startsWith('/_next') ||\n    pathname.startsWith('/api') ||\n    pathname.includes('.') // Has file extension\n  ) {\n    return undefined\n  }\n\n  const rules = await fetchRedirectRules(config)\n  const match = findRedirectMatch(pathname, rules)\n\n  if (!match) {\n    return undefined\n  }\n\n  // Build redirect URL\n  const redirectUrl = new URL(match.to_path, request.url)\n  \n  // Preserve query params\n  request.nextUrl.searchParams.forEach((value, key) => {\n    redirectUrl.searchParams.set(key, value)\n  })\n\n  // Track hit (fire and forget); domain may be from config or resolved by apiKey\n  trackRedirectHit(config, match.from_path, config.domain).catch(() => {})\n\n  // Return redirect response\n  const statusCode = parseInt(match.redirect_type) as 301 | 302 | 307 | 308\n  return NextResponse.redirect(redirectUrl, statusCode)\n}\n\n/**\n * Track redirect hit for analytics (needs domain; resolved from config or getSiteConfig when using apiKey)\n * Exported for the not-found resolver — fire-and-forget, never throws.\n * The site host goes in the body so a multi-site project counts the hit on\n * that host's rule, not the project-wide one.\n */\nexport async function trackRedirectHit(config: RedirectConfig, fromPath: string, domainForHit?: string): Promise<void> {\n  try {\n    const baseUrl = config.portalApiUrl || envApiUrl() || DEFAULT_PORTAL_URL\n    const domain = domainForHit ?? config.domain ?? (await getSiteConfig({ apiKey: config.apiKey, apiUrl: baseUrl }))?.domain\n    if (!domain) return\n    await fetch(`${baseUrl}/api/public/seo/redirects/hit`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(withSiteBody({ domain, from_path: fromPath }, config.site)),\n    })\n  } catch {\n    // Ignore tracking errors\n  }\n}\n\n/**\n * Generate Next.js redirects config from Portal\n * Use this in next.config.js for build-time redirects\n *\n * The site host resolves as it does everywhere else. Next loads .env files\n * before it evaluates next.config, so a NEXT_PUBLIC_SITE_URL from .env.local\n * or the host's env is already visible here, and each build of a multi-site\n * project bakes in its own host's rules.\n *\n * Usage in next.config.js:\n * \n * const { generateNextRedirects } = require('@sonordev/site-kit/redirects')\n * \n * module.exports = {\n *   async redirects() {\n *     return generateNextRedirects({\n *       domain: 'example.com',\n *       portalApiUrl: process.env.PORTAL_API_URL,\n *     })\n *   }\n * }\n */\nexport async function generateNextRedirects(config: RedirectConfig): Promise<Array<{\n  source: string\n  destination: string\n  permanent: boolean\n}>> {\n  // Build-time: nothing is waiting on this response, so allow a generous\n  // timeout instead of the request-path default.\n  const rules = await fetchRedirectRules({ fetchTimeoutMs: 10_000, ...config, cacheSeconds: 0 })\n  \n  return rules.map(r => ({\n    source: r.from_path,\n    destination: r.to_path,\n    permanent: r.redirect_type === '301' || r.redirect_type === '308',\n  }))\n}\n\n/**\n * Clear redirect cache (useful for development)\n */\nexport function clearRedirectCache(): void {\n  rulesCache.clear()\n}\n"]}

package/dist/chunk-I7AZC5ZQ.js

@@ -14283,4 +14283,3 @@ exports.parse = parse;
 exports.parseExpression = parseExpression;
 exports.tokTypes = tokTypes;
 //# sourceMappingURL=chunk-I7AZC5ZQ.js.map
-//# sourceMappingURL=chunk-I7AZC5ZQ.js.map

package/dist/{chunk-V5THCFPG.mjs → chunk-JFJ7NHS3.mjs}

@@ -1,5 +1,5 @@
-import { resolveSiteHost } from './chunk-GZJE23Y5.mjs';
-import { configureSiteCredential, currentCredential } from './chunk-ABZGEHTC.mjs';
+import { resolveSiteHost } from './chunk-JLVCWC6A.mjs';
+import { configureSiteCredential, currentCredential } from './chunk-XSAHJ2BB.mjs';
 
 // src/shared/publishCredential.ts
 function publishSiteCredential({
@@ -19,5 +19,5 @@ function publishSiteCredential({
 }
 
 export { publishSiteCredential };
-//# sourceMappingURL=chunk-V5THCFPG.mjs.map
-//# sourceMappingURL=chunk-V5THCFPG.mjs.map
+//# sourceMappingURL=chunk-JFJ7NHS3.mjs.map
+//# sourceMappingURL=chunk-JFJ7NHS3.mjs.map

package/dist/{chunk-V5THCFPG.mjs.map → chunk-JFJ7NHS3.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":[],"mappings":";;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAA,uBAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuB,iBAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQ,eAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-V5THCFPG.mjs","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}
+{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":[],"mappings":";;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAA,uBAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuB,iBAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQ,eAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-JFJ7NHS3.mjs","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}

package/dist/{chunk-KXGD4E7G.js → chunk-JI4EUPHB.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkOZ3FU4BT_js = require('./chunk-OZ3FU4BT.js');
-var chunk4WBTM6YE_js = require('./chunk-4WBTM6YE.js');
+var chunkH5NBFNND_js = require('./chunk-H5NBFNND.js');
+var chunkLOEP76MQ_js = require('./chunk-LOEP76MQ.js');
 
 // src/shared/publishCredential.ts
 function publishSiteCredential({
@@ -12,14 +12,14 @@ function publishSiteCredential({
   mapsBrowserKey
 }) {
   if (typeof window === "undefined") return;
-  chunk4WBTM6YE_js.configureSiteCredential({ credential: apiKey, apiUrl });
+  chunkLOEP76MQ_js.configureSiteCredential({ credential: apiKey, apiUrl });
   window.__SITE_KIT_API_URL__ = apiUrl;
-  window.__SITE_KIT_API_KEY__ = chunk4WBTM6YE_js.currentCredential(apiKey);
+  window.__SITE_KIT_API_KEY__ = chunkLOEP76MQ_js.currentCredential(apiKey);
   window.__SITE_KIT_DEBUG__ = debug;
-  window.__SITE_KIT_SITE__ = site ?? chunkOZ3FU4BT_js.resolveSiteHost();
+  window.__SITE_KIT_SITE__ = site ?? chunkH5NBFNND_js.resolveSiteHost();
   if (mapsBrowserKey) window.__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey;
 }
 
 exports.publishSiteCredential = publishSiteCredential;
-//# sourceMappingURL=chunk-KXGD4E7G.js.map
-//# sourceMappingURL=chunk-KXGD4E7G.js.map
+//# sourceMappingURL=chunk-JI4EUPHB.js.map
+//# sourceMappingURL=chunk-JI4EUPHB.js.map

package/dist/{chunk-KXGD4E7G.js.map → chunk-JI4EUPHB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":["configureSiteCredential","currentCredential","resolveSiteHost"],"mappings":";;;;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAAA,wCAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuBC,kCAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQC,gCAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-KXGD4E7G.js","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}
+{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":["configureSiteCredential","currentCredential","resolveSiteHost"],"mappings":";;;;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAAA,wCAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuBC,kCAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQC,gCAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-JI4EUPHB.js","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}

package/dist/{chunk-GZJE23Y5.mjs → chunk-JLVCWC6A.mjs}

@@ -17,5 +17,5 @@ function resolveSiteHost(explicitSite) {
 }
 
 export { resolveSiteHost };
-//# sourceMappingURL=chunk-GZJE23Y5.mjs.map
-//# sourceMappingURL=chunk-GZJE23Y5.mjs.map
+//# sourceMappingURL=chunk-JLVCWC6A.mjs.map
+//# sourceMappingURL=chunk-JLVCWC6A.mjs.map

package/dist/chunk-JLVCWC6A.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sites/resolve.ts"],"names":[],"mappings":";;;AAkCO,SAAS,gBAAgB,YAAA,EAA+B;AAC7D,EAAA,MAAM,aACJ,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,IAAI,oBAAA,GAAuB,MAAA;AAEtE,EAAA,IAAI,WAAW,YAAA,IAAgB,EAAA;AAC/B,EAAA,IAAI,CAAC,YAAY,UAAA,EAAY;AAC3B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,IAAI,GAAA,CAAI,UAAU,CAAA,CAAE,IAAA;AAAA,IACjC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,IAAY,OAAO,MAAA,KAAW,WAAA,EAAa;AAC9C,IAAA,QAAA,GAAW,OAAO,QAAA,CAAS,IAAA;AAAA,EAC7B;AACA,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,EAAA;AACxC","file":"chunk-JLVCWC6A.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites — resolveSiteHost (leaf module)\n *\n * SINGLE SOURCE OF TRUTH for \"which sub-site am I?\" — the multi-site `site`\n * dimension that lets one Sonor project host many domains (bd-aec.com plus 48\n * sibling domains; truepowersystems.com plus 16 state microsites).\n *\n * Precedence, per the platform site contract:\n *   explicit `site` > NEXT_PUBLIC_SITE_URL host > window.location.host\n *\n * Deliberately usable on BOTH sides. The browser half seeds\n * `window.__SITE_KIT_SITE__` (see `shared/publishCredential`); the build half\n * tags the sitemap sync, the llms.txt reads and every blog read (see\n * `sitemap/index`, `llms/writeLLMsTxt`, and `./site-param`, which appends the\n * host to API requests) so a build describes only its OWN host. Server-side the\n * `window` branch simply never fires, which leaves the NEXT_PUBLIC_SITE_URL\n * host — the right source at build time.\n *\n * Do not re-fork this. Before it existed the build path sent no `site` at all,\n * so every site in a 49-domain network read whichever sibling's seo_pages row\n * the database happened to hand back for a shared path like `/` — bd-aec.com\n * shipped soqwriters.com's homepage copy in its llms.txt.\n *\n * Its own file, not `./contract`, for the same bundle reason as\n * `./normalize`: browser entries import this without dragging the contract's\n * JSON schema along.\n */\nimport { normalizeSiteHost } from './normalize'\n\n/**\n * Resolve the sub-site host. Always returns a string (possibly empty), already\n * normalized with the shared contract (lowercase host, no protocol/path/port)\n * so it matches exactly what the Sonor API stores.\n */\nexport function resolveSiteHost(explicitSite?: string): string {\n  const envSiteUrl =\n    typeof process !== 'undefined' ? process.env.NEXT_PUBLIC_SITE_URL : undefined\n\n  let resolved = explicitSite ?? ''\n  if (!resolved && envSiteUrl) {\n    try {\n      resolved = new URL(envSiteUrl).host\n    } catch {\n      /* malformed URL — fall through to client-side host */\n    }\n  }\n  if (!resolved && typeof window !== 'undefined') {\n    resolved = window.location.host\n  }\n  return normalizeSiteHost(resolved) ?? ''\n}\n"]}

package/dist/chunk-JOYMIGR2.mjs

@@ -24840,4 +24840,3 @@ traverse3.cache = cache;
 
 export { Hub, NodePath_Final, Scope, isArrayExpression, isFunctionDeclaration, isIdentifier, isJSXAttribute, isJSXExpressionContainer, isJSXIdentifier, isJSXMemberExpression, isJSXText, isObjectExpression, isStringLiteral, isTemplateLiteral, isVariableDeclarator, traverse3 as traverse, visitors };
 //# sourceMappingURL=chunk-JOYMIGR2.mjs.map
-//# sourceMappingURL=chunk-JOYMIGR2.mjs.map

package/dist/chunk-JS75ORH7.js

@@ -24858,4 +24858,3 @@ exports.isVariableDeclarator = isVariableDeclarator;
 exports.traverse = traverse3;
 exports.visitors = visitors;
 //# sourceMappingURL=chunk-JS75ORH7.js.map
-//# sourceMappingURL=chunk-JS75ORH7.js.map

package/dist/{chunk-Q7347KP6.mjs → chunk-JX5SM2MX.mjs}

@@ -1,7 +1,7 @@
 'use client';
+import { isEmptyValue, isDisplayOnly } from './chunk-QRHVMTHF.mjs';
 import { useMemo, useState, useRef, useEffect } from 'react';
 
-// src/forms/field-controls.ts
 var NO_CONTROLS = {};
 function useFieldControls(fields) {
   const needsDate = useMemo(
@@ -26,7 +26,7 @@ function useFieldControls(fields) {
     }
     if (needsFile && !requested.current.file) {
       requested.current.file = true;
-      import('./FileField-JJN5QKDL.mjs').then((m) => {
+      import('./FileField-Y5YM365S.mjs').then((m) => {
         if (!cancelled) setControls((prev) => ({ ...prev, File: m.FileField }));
       }).catch(() => {
         requested.current.file = false;
@@ -40,10 +40,9 @@ function useFieldControls(fields) {
 }
 
 // src/forms/experience-plan.ts
-var NON_QUESTION_TYPES = ["heading", "section_header", "paragraph", "hidden"];
 function stageQuestions(config) {
   const input = (config.fields || []).filter(
-    (f) => !NON_QUESTION_TYPES.includes(f.field_type)
+    (f) => !isDisplayOnly(f)
   );
   if (!config.is_multi_step || !config.steps?.length) {
     return input.map((field) => ({ field }));
@@ -120,11 +119,6 @@ function stageFirstName(value) {
   if (!token || token.length > 24) return null;
   return token;
 }
-function isEmptyValue(value) {
-  if (value === void 0 || value === null || value === "") return true;
-  if (Array.isArray(value)) return value.length === 0;
-  return false;
-}
 function formatAnswer(value) {
   if (isEmptyValue(value)) return null;
   if (Array.isArray(value)) return value.map(String).join(", ");
@@ -133,6 +127,6 @@ function formatAnswer(value) {
 }
 var AUTO_ADVANCE_TYPES = ["radio", "select", "rating"];
 
-export { AUTO_ADVANCE_TYPES, countStageQuestions, countStageViews, formatAnswer, isEmptyValue, stageEstimate, stageFirstName, stageViews, useFieldControls };
-//# sourceMappingURL=chunk-Q7347KP6.mjs.map
-//# sourceMappingURL=chunk-Q7347KP6.mjs.map
+export { AUTO_ADVANCE_TYPES, countStageQuestions, countStageViews, formatAnswer, stageEstimate, stageFirstName, stageViews, useFieldControls };
+//# sourceMappingURL=chunk-JX5SM2MX.mjs.map
+//# sourceMappingURL=chunk-JX5SM2MX.mjs.map

package/dist/chunk-JX5SM2MX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/field-controls.ts","../src/forms/experience-plan.ts"],"names":[],"mappings":";;;AAqCA,IAAM,cAA6B,EAAC;AAE7B,SAAS,iBAAiB,MAAA,EAAoD;AACnF,EAAA,MAAM,SAAA,GAAY,OAAA;AAAA,IAChB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,KAAe,MAAA,IAAU,CAAA,CAAE,UAAA,KAAe,UAAU,CAAA;AAAA,IACvF,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAA;AAAA,IAChB,MAAA,CAAO,UAAU,EAAC,EAAG,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,KAAe,MAAM,CAAA;AAAA,IACxD,CAAC,MAAM;AAAA,GACT;AAEA,EAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAI,SAAwB,WAAW,CAAA;AAEnE,EAAA,MAAM,YAAY,MAAA,CAAO,EAAE,MAAM,KAAA,EAAO,IAAA,EAAM,OAAO,CAAA;AAErD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,SAAA,GAAY,KAAA;AAEhB,IAAA,IAAI,SAAA,IAAa,CAAC,SAAA,CAAU,OAAA,CAAQ,IAAA,EAAM;AACxC,MAAA,SAAA,CAAU,QAAQ,IAAA,GAAO,IAAA;AACzB,MAAA,OAAO,2BAAc,CAAA,CAClB,IAAA,CAAK,CAAC,CAAA,KAAM;AACX,QAAA,IAAI,CAAC,SAAA,EAAW,WAAA,CAAY,CAAC,IAAA,MAAU,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,CAAA,CAAE,UAAA,EAAW,CAAE,CAAA;AAAA,MACzE,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AAGX,QAAA,SAAA,CAAU,QAAQ,IAAA,GAAO,KAAA;AAAA,MAC3B,CAAC,CAAA;AAAA,IACL;AAEA,IAAA,IAAI,SAAA,IAAa,CAAC,SAAA,CAAU,OAAA,CAAQ,IAAA,EAAM;AACxC,MAAA,SAAA,CAAU,QAAQ,IAAA,GAAO,IAAA;AACzB,MAAA,OAAO,0BAAa,CAAA,CACjB,IAAA,CAAK,CAAC,CAAA,KAAM;AACX,QAAA,IAAI,CAAC,SAAA,EAAW,WAAA,CAAY,CAAC,IAAA,MAAU,EAAE,GAAG,IAAA,EAAM,IAAA,EAAM,CAAA,CAAE,SAAA,EAAU,CAAE,CAAA;AAAA,MACxE,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,QAAA,SAAA,CAAU,QAAQ,IAAA,GAAO,KAAA;AAAA,MAC3B,CAAC,CAAA;AAAA,IACL;AAEA,IAAA,OAAO,MAAM;AACX,MAAA,SAAA,GAAY,IAAA;AAAA,IACd,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,SAAS,CAAC,CAAA;AAEzB,EAAA,OAAO,QAAA;AACT;;;ACrDO,SAAS,eAAe,MAAA,EAA4C;AACzE,EAAA,MAAM,KAAA,GAAA,CAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,MAAA;AAAA,IAClC,CAAC,CAAA,KAAM,CAAC,aAAA,CAAc,CAAC;AAAA,GACzB;AACA,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,IAAiB,CAAC,MAAA,CAAO,OAAO,MAAA,EAAQ;AAClD,IAAA,OAAO,MAAM,GAAA,CAAI,CAAC,KAAA,MAAW,EAAE,OAAM,CAAE,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAG,MAAA,CAAO,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,WAAA,GAAc,EAAE,WAAW,CAAA;AAC9E,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,EAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,IAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AACzB,MAAA,IAAI,KAAA,CAAM,OAAA,KAAY,IAAA,CAAK,EAAA,EAAI;AAC7B,QAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACxB,QAAA,OAAA,CAAQ,GAAA,CAAI,MAAM,EAAE,CAAA;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACA,EAAA,KAAA,MAAW,SAAS,KAAA,EAAO;AACzB,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,EAAE,GAAG,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,GAAA;AACT;AAEA,IAAM,cAAA,GAAyC;AAAA,EAC7C,IAAA,EAAM,CAAA;AAAA,EACN,MAAM,CAAA,GAAI,CAAA;AAAA,EACV,OAAO,CAAA,GAAI,CAAA;AAAA,EACX,SAAS,CAAA,GAAI;AACf,CAAA;AAQO,SAAS,WAAW,MAAA,EAAwC;AACjE,EAAA,MAAM,SAAA,GAAY,eAAe,MAAM,CAAA;AACvC,EAAA,MAAM,QAAqB,EAAC;AAC5B,EAAA,IAAI,IAAA,GAAyB,IAAA;AAC7B,EAAA,IAAI,SAAA,GAAY,CAAA;AAEhB,EAAA,MAAM,QAAQ,MAAM;AAClB,IAAA,IAAI,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA;AACzB,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,SAAA,GAAY,CAAA;AAAA,EACd,CAAA;AAEA,EAAA,KAAA,MAAW,KAAK,SAAA,EAAW;AACzB,IAAA,MAAM,QAAA,GAAW,cAAA,CAAe,CAAA,CAAE,KAAA,CAAM,KAAK,CAAA,IAAK,CAAA;AAClD,IAAA,MAAM,iBAAiB,IAAA,IAAQ,IAAA,CAAK,IAAA,EAAM,EAAA,KAAO,EAAE,IAAA,EAAM,EAAA;AACzD,IAAA,IAAI,QAAA,IAAY,CAAA,IAAK,cAAA,EAAgB,KAAA,EAAM;AAC3C,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,IAAA,GAAO,EAAE,QAAQ,CAAC,CAAA,CAAE,KAAK,CAAA,EAAG,IAAA,EAAM,EAAE,IAAA,EAAK;AACzC,MAAA,SAAA,GAAY,QAAA;AACZ,MAAA,IAAI,QAAA,IAAY,GAAG,KAAA,EAAM;AACzB,MAAA;AAAA,IACF;AACA,IAAA,IAAI,SAAA,GAAY,QAAA,GAAW,MAAA,EAAQ,KAAA,EAAM;AACzC,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,IAAA,GAAO,EAAE,QAAQ,CAAC,CAAA,CAAE,KAAK,CAAA,EAAG,IAAA,EAAM,EAAE,IAAA,EAAK;AACzC,MAAA,SAAA,GAAY,QAAA;AACZ,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA;AACxB,IAAA,SAAA,IAAa,QAAA;AAAA,EACf;AACA,EAAA,KAAA,EAAM;AACN,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,gBAAgB,MAAA,EAAmC;AACjE,EAAA,OAAO,UAAA,CAAW,MAAM,CAAA,CAAE,MAAA;AAC5B;AAEO,SAAS,oBAAoB,MAAA,EAAmC;AACrE,EAAA,OAAO,cAAA,CAAe,MAAM,CAAA,CAAE,MAAA;AAChC;AAMO,SAAS,cAAc,aAAA,EAA+B;AAC3D,EAAA,MAAM,UAAU,aAAA,GAAgB,CAAA;AAChC,EAAA,IAAI,OAAA,GAAU,EAAA,EAAI,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,GAAA,CAAI,EAAA,EAAI,IAAA,CAAK,IAAA,CAAK,OAAA,GAAU,CAAC,CAAA,GAAI,CAAC,CAAC,CAAA,QAAA,CAAA;AAC1E,EAAA,IAAI,OAAA,IAAW,IAAI,OAAO,gBAAA;AAC1B,EAAA,OAAO,CAAA,MAAA,EAAS,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAC,CAAA,QAAA,CAAA;AAC1C;AAGO,SAAS,eAAe,KAAA,EAA+B;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,QAAQ,KAAA,CAAM,IAAA,GAAO,KAAA,CAAM,KAAK,EAAE,CAAC,CAAA;AACzC,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,MAAA,GAAS,IAAI,OAAO,IAAA;AACxC,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,aAAa,KAAA,EAA+B;AAC1D,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG,OAAO,IAAA;AAChC,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,QAAQ,KAAA,GAAQ,IAAA;AACvD,EAAA,OAAO,OAAO,KAAK,CAAA;AACrB;AAGO,IAAM,kBAAA,GAAqB,CAAC,OAAA,EAAS,QAAA,EAAU,QAAQ","file":"chunk-JX5SM2MX.mjs","sourcesContent":["'use client'\n\n/**\n * The field controls that need React hooks, loaded only when a form actually\n * has a field that uses them.\n *\n * FormField deliberately does NOT import these. DatePicker carries 17 hooks\n * and FileField holds upload state; importing them there put both in\n * FormField's chunk, which the build stamps `'use client'` — so a Server\n * Component rendering a single text input shipped 38 KB of date picker to the\n * browser. Injecting them from the client side keeps FormField hook-free and\n * therefore server-renderable, which is the whole basis of StaticForm.\n *\n * Injection alone still put both controls in the forms entry's eager graph,\n * because a module-level constant referencing them is a static import: every\n * form paid for the date picker, and most forms have no date field. They are\n * now fetched on demand, per control, from the field list.\n *\n * The wait costs nothing visually. FormField already renders the native\n * control when a control is absent (static mode does exactly this), so a date\n * field paints as `<input type=\"date\">` and upgrades in place when the chunk\n * lands — the same enhancement path a no-JS visitor never leaves.\n *\n * Every client renderer of <FormField> (FormClient, FormSpotlight, FormStage)\n * calls this hook, so the experiences and the classic form always offer\n * identical controls.\n */\n\nimport { useEffect, useMemo, useRef, useState } from 'react'\nimport type { FormField as FormFieldType } from './types'\n\nexport interface FieldControls {\n  Date?: React.ComponentType<any>\n  File?: React.ComponentType<any>\n}\n\n/** Stable identity for the common case (no date, no file) — no render churn. */\nconst NO_CONTROLS: FieldControls = {}\n\nexport function useFieldControls(fields: FormFieldType[] | undefined): FieldControls {\n  const needsDate = useMemo(\n    () => (fields ?? []).some((f) => f.field_type === 'date' || f.field_type === 'datetime'),\n    [fields],\n  )\n  const needsFile = useMemo(\n    () => (fields ?? []).some((f) => f.field_type === 'file'),\n    [fields],\n  )\n\n  const [controls, setControls] = useState<FieldControls>(NO_CONTROLS)\n  // Guards re-import when a conditional field toggles visibility mid-fill.\n  const requested = useRef({ date: false, file: false })\n\n  useEffect(() => {\n    let cancelled = false\n\n    if (needsDate && !requested.current.date) {\n      requested.current.date = true\n      import('./DatePicker')\n        .then((m) => {\n          if (!cancelled) setControls((prev) => ({ ...prev, Date: m.DatePicker }))\n        })\n        .catch(() => {\n          // Chunk never arrived — the native date input stays, which submits\n          // the same value. A failed fetch must not cost the lead.\n          requested.current.date = false\n        })\n    }\n\n    if (needsFile && !requested.current.file) {\n      requested.current.file = true\n      import('./FileField')\n        .then((m) => {\n          if (!cancelled) setControls((prev) => ({ ...prev, File: m.FileField }))\n        })\n        .catch(() => {\n          requested.current.file = false\n        })\n    }\n\n    return () => {\n      cancelled = true\n    }\n  }, [needsDate, needsFile])\n\n  return controls\n}\n","/**\n * Shared planning helpers for the alternate form experiences (stage,\n * spotlight). Pure data — no React, no CSS — so FormClient can import the\n * counts it needs for tracking WITHOUT pulling an experience component (and\n * its stylesheet) into every site's forms bundle. The components themselves\n * are lazy-loaded; this module is the only part that ships eagerly.\n */\n\nimport type {\n  FormField as FormFieldType,\n  FormStep,\n  ManagedFormConfig,\n} from './types'\n// Display-only types are never staged; what counts as empty is shared with\n// validation. Both live in field-rules.ts.\nimport { isDisplayOnly, isEmptyValue } from './field-rules'\n\nexport interface StageQuestion {\n  field: FormFieldType\n  /** The step (chapter) this question belongs to, when the form is multi-step. */\n  step?: FormStep\n}\n\nexport interface StageView {\n  fields: FormFieldType[]\n  step?: FormStep\n}\n\n/**\n * Flatten a form into its ordered question list. Steps become chapters:\n * multi-step forms iterate steps in step_number order (fields are already\n * sorted by sort_order via normalizeFormConfig); stepless fields trail.\n */\nexport function stageQuestions(config: ManagedFormConfig): StageQuestion[] {\n  const input = (config.fields || []).filter(\n    (f) => !isDisplayOnly(f),\n  )\n  if (!config.is_multi_step || !config.steps?.length) {\n    return input.map((field) => ({ field }))\n  }\n  const ordered = [...config.steps].sort((a, b) => a.step_number - b.step_number)\n  const out: StageQuestion[] = []\n  const claimed = new Set<string>()\n  for (const step of ordered) {\n    for (const field of input) {\n      if (field.step_id === step.id) {\n        out.push({ field, step })\n        claimed.add(field.id)\n      }\n    }\n  }\n  for (const field of input) {\n    if (!claimed.has(field.id)) out.push({ field })\n  }\n  return out\n}\n\nconst WIDTH_FRACTION: Record<string, number> = {\n  full: 1,\n  half: 1 / 2,\n  third: 1 / 3,\n  quarter: 1 / 4,\n}\n\n/**\n * Group questions into beats using the classic grid's own row math:\n * consecutive sub-full-width fields fill a row (2 halves, 3 thirds...) and\n * that row is one beat; a full-width field closes any open row and stands\n * alone; a chapter change always starts a fresh beat.\n */\nexport function stageViews(config: ManagedFormConfig): StageView[] {\n  const questions = stageQuestions(config)\n  const views: StageView[] = []\n  let open: StageView | null = null\n  let openWidth = 0\n\n  const close = () => {\n    if (open) views.push(open)\n    open = null\n    openWidth = 0\n  }\n\n  for (const q of questions) {\n    const fraction = WIDTH_FRACTION[q.field.width] ?? 1\n    const chapterChanged = open && open.step?.id !== q.step?.id\n    if (fraction >= 1 || chapterChanged) close()\n    if (!open) {\n      open = { fields: [q.field], step: q.step }\n      openWidth = fraction\n      if (fraction >= 1) close()\n      continue\n    }\n    if (openWidth + fraction > 1.0001) close()\n    if (!open) {\n      open = { fields: [q.field], step: q.step }\n      openWidth = fraction\n      continue\n    }\n    open.fields.push(q.field)\n    openWidth += fraction\n  }\n  close()\n  return views\n}\n\nexport function countStageViews(config: ManagedFormConfig): number {\n  return stageViews(config).length\n}\n\nexport function countStageQuestions(config: ManagedFormConfig): number {\n  return stageQuestions(config).length\n}\n\n/**\n * Honest, friendly time estimate: \"about 40 seconds\".\n * ~8s per question, rounded to something a human would actually say.\n */\nexport function stageEstimate(questionCount: number): string {\n  const seconds = questionCount * 8\n  if (seconds < 50) return `about ${Math.max(15, Math.ceil(seconds / 5) * 5)} seconds`\n  if (seconds <= 90) return 'about a minute'\n  return `about ${Math.round(seconds / 60)} minutes`\n}\n\n/** First name for the greeting — conservative: short, single token, else null. */\nexport function stageFirstName(value: unknown): string | null {\n  if (typeof value !== 'string') return null\n  const token = value.trim().split(/\\s+/)[0]\n  if (!token || token.length > 24) return null\n  return token\n}\n\nexport function formatAnswer(value: unknown): string | null {\n  if (isEmptyValue(value)) return null\n  if (Array.isArray(value)) return value.map(String).join(', ')\n  if (typeof value === 'boolean') return value ? 'Yes' : 'No'\n  return String(value)\n}\n\n/** Single-select types where picking an answer advances after a lock-in beat. */\nexport const AUTO_ADVANCE_TYPES = ['radio', 'select', 'rating']\n"]}