@sonordev/site-kit 5.8.3 → 6.0.0

package/dist/{chunk-WINDP776.mjs → chunk-XSBKR3VF.mjs}

@@ -1,9 +1,9 @@
 'use client';
-import { sanitizeFleetVersion, buildFleetHeartbeatPayload } from './chunk-ZPLN537Q.mjs';
+import { sanitizeFleetVersion, buildFleetHeartbeatPayload } from './chunk-4WCA2HM6.mjs';
 import { useDeferredActivation } from './chunk-ZVBLXXNJ.mjs';
 import { resolveAnalyticsTarget } from './chunk-A6UYV475.mjs';
-import { sonorFetch } from './chunk-4C5CZJIN.mjs';
-import { SITE_KIT_VERSION } from './chunk-5FETEH3Y.mjs';
+import { sonorFetch } from './chunk-2YSB4FIC.mjs';
+import { SITE_KIT_VERSION } from './chunk-2KRAY5NC.mjs';
 import { useRef, useEffect } from 'react';
 
 // src/fleet/heartbeat.ts
@@ -97,5 +97,5 @@ function FleetHeartbeat({
 }
 
 export { FLEET_HEARTBEAT_PATH, FleetHeartbeat, detectNextVersion, sendFleetHeartbeat };
-//# sourceMappingURL=chunk-WINDP776.mjs.map
-//# sourceMappingURL=chunk-WINDP776.mjs.map
+//# sourceMappingURL=chunk-XSBKR3VF.mjs.map
+//# sourceMappingURL=chunk-XSBKR3VF.mjs.map

package/dist/{chunk-WINDP776.mjs.map → chunk-XSBKR3VF.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/fleet/heartbeat.ts","../src/fleet/FleetHeartbeat.tsx"],"names":[],"mappings":";;;;;;;;AAwBO,IAAM,oBAAA,GAAuB;AA4B7B,SAAS,iBAAA,GAAmC;AACjD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,OAAO,qBAAqB,CAAA,CAAE,yBAAA,IAA6B,CAAA,CAAE,IAAA,EAAM,WAAW,IAAI,CAAA;AACpF;AAOA,eAAsB,mBAAmB,IAAA,EAAmD;AAC1F,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,IAAA;AAC3B,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,KAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,uBAAuB,IAAI,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AAEpB,EAAA,MAAM,UAAiC,0BAAA,CAA2B;AAAA,IAChE,UAAA,EAAY,KAAK,UAAA,IAAc,gBAAA;AAAA,IAC/B,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAQ,IAAA,CAAK;AAAA,GACd,CAAA;AAED,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,MAAM,UAAA;AAAA,MAChB,CAAA,EAAG,OAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAE,CAAC,GAAG,oBAAoB,CAAA,CAAA;AAAA,MAC1D;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC9B;AAAA,MACA,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA;AAAE,KACtC;AACA,IAAA,IAAI,KAAK,KAAA,EAAO;AAEd,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,EAAA,EAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,IAAK,MAAM,CAAA,CAAA;AAAA,OACvG;AAAA,IACF;AACA,IAAA,OAAO,GAAA,CAAI,EAAA;AAAA,EACb,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,6CAA6C,GAAG,CAAA;AAC7E,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AC3EA,IAAM,iBAAA,GAAoB,cAAA;AAuBnB,SAAS,cAAA,CAAe;AAAA,EAC7B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,IAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,KAAA,GAAQ,IAAA;AAAA,EACR,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,YAAA,GAAe,KAAA;AAAA,EACf,cAAA,GAAiB;AACnB,CAAA,EAAwB;AACtB,EAAA,MAAM,KAAA,GAAQ,sBAAsB,KAAK,CAAA;AACzC,EAAA,MAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAE5B,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAA,IAAS,OAAA,CAAQ,OAAA,EAAS;AAC/B,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEnC,IAAA,MAAM,CAAA,GAAI,MAAA;AAKV,IAAA,MAAM,MAAA,GAAS,uBAAuB,EAAE,MAAA,EAAQ,QAAQ,YAAA,EAAc,cAAA,EAAgB,OAAO,CAAA;AAC7F,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,KAAI,GAAI,MAAA;AAErC,IAAA,MAAM,eAAe,IAAA,IAAQ,CAAA,CAAE,iBAAA,IAAqB,MAAA,CAAO,SAAS,IAAA,IAAQ,EAAA;AAK5E,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,gBAAgB,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AACjD,MAAA,IAAI;AACF,QAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,iBAAiB,CAAA,KAAM,KAAA,EAAO;AACvD,UAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,UAAA;AAAA,QACF;AACA,QAAA,cAAA,CAAe,OAAA,CAAQ,mBAAmB,KAAK,CAAA;AAAA,MACjD,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,IAAA,KAAK,kBAAA,CAAmB;AAAA,MACtB,MAAA,EAAQ,GAAA;AAAA,MACR,MAAA,EAAQ,GAAA;AAAA,MACR,IAAA,EAAM,YAAA;AAAA,MACN,OAAA;AAAA,MACA,WAAA,EAAa,eAAe,iBAAA,EAAkB;AAAA,MAC9C,MAAA,EAAQ,QAAA;AAAA,MACR,YAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,KAAA,EAAO,YAAA,EAAc,cAAc,CAAC,CAAA;AAE3G,EAAA,OAAO,IAAA;AACT","file":"chunk-WINDP776.mjs","sourcesContent":["/**\n * @sonordev/site-kit/fleet — heartbeat sender (single source of truth for the POST)\n *\n * One place that turns fleet inputs into a validated payload and ships it to\n * `/api/public/fleet/heartbeat`. Used by BOTH the client component\n * (FleetHeartbeat) and any build-time caller, so the send path never forks.\n *\n * It routes through the shared analytics send gate and `sonorFetch`, which stamps\n * the x-sitekit-version header, attaches x-api-key, and honors the auth\n * circuit breaker — a site on a stale/canceled key will not spam the API.\n */\n\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport { sonorFetch } from '../shared/sonorFetch'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport {\n  buildFleetHeartbeatPayload,\n  sanitizeFleetVersion,\n  type FleetHeartbeatPayload,\n  type FleetHeartbeatSource,\n  type FleetModule,\n} from './contract'\n\n/** Canonical ingest path — resolved against the site's Sonor API origin. */\nexport const FLEET_HEARTBEAT_PATH = '/api/public/fleet/heartbeat'\n\nexport interface SendFleetHeartbeatOptions extends AnalyticsGateOptions {\n  /** Sonor API origin (e.g. https://api.sonor.io). Trailing slash tolerated. */\n  apiUrl: string\n  /** Project API key — scopes the request; the project is resolved server-side. */\n  apiKey: string\n  /** Client-observable active modules (validated/deduped by the contract). */\n  modules?: FleetModule[] | string[]\n  /** Normalized host for the multi-site sub-dimension (server re-normalizes). */\n  site?: string | null\n  /** Installed Next.js version, if the caller can resolve it. */\n  nextVersion?: string | null\n  /** 'client' (runtime boot) or 'build' (CI). Default 'client'. */\n  source?: FleetHeartbeatSource\n  /** Override the reported kit version. Defaults to the runtime SITE_KIT_VERSION. */\n  kitVersion?: string\n  /** Log one info line with the result. Never logs at error level. */\n  debug?: boolean\n}\n\n/**\n * Best-effort runtime detection of the host Next.js version. Unreliable by\n * design — Next does not expose its version consistently across app/pages\n * router — so it returns null unless a site injects `__SITE_KIT_NEXT_VERSION__`\n * or `window.next.version` is present. Build-time callers should pass\n * `nextVersion` explicitly (resolvable from `next/package.json`).\n */\nexport function detectNextVersion(): string | null {\n  if (typeof window === 'undefined') return null\n  const w = window as unknown as {\n    __SITE_KIT_NEXT_VERSION__?: string\n    next?: { version?: string }\n  }\n  return sanitizeFleetVersion(w.__SITE_KIT_NEXT_VERSION__ ?? w.next?.version ?? null)\n}\n\n/**\n * Fire one heartbeat. Fire-and-forget by contract: it never throws — a\n * telemetry POST must never break a visitor's page or a site's build. Returns\n * true only when the POST was accepted (2xx).\n */\nexport async function sendFleetHeartbeat(opts: SendFleetHeartbeatOptions): Promise<boolean> {\n  const { apiUrl, apiKey } = opts\n  if (!apiUrl || !apiKey) return false\n  const target = resolveAnalyticsTarget(opts)\n  if (!target) return false\n\n  const payload: FleetHeartbeatPayload = buildFleetHeartbeatPayload({\n    kitVersion: opts.kitVersion || SITE_KIT_VERSION,\n    nextVersion: opts.nextVersion,\n    modules: opts.modules,\n    site: opts.site,\n    source: opts.source,\n  })\n\n  try {\n    const res = await sonorFetch(\n      `${target.apiUrl.replace(/\\/$/, '')}${FLEET_HEARTBEAT_PATH}`,\n      {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify(payload),\n      },\n      { apiKey: target.apiKey, retries: 0 },\n    )\n    if (opts.debug) {\n      // info, never error: a visitor's console must stay clean (Lighthouse).\n      console.info(\n        `[Sonor fleet] heartbeat ${res.status} v${payload.kit_version} [${payload.modules.join(',') || 'none'}]`,\n      )\n    }\n    return res.ok\n  } catch (err) {\n    if (opts.debug) console.info('[Sonor fleet] heartbeat skipped (network)', err)\n    return false\n  }\n}\n","/**\n * @sonordev/site-kit/fleet — FleetHeartbeat\n *\n * A childless, effect-only client component that reports this site's build\n * fingerprint (kit version, Next.js version, active modules, host) to Sonor\n * exactly once per browser session. It exists so the platform can answer\n * \"which version / modules / key state is each site running\" without shelling\n * into every client repo.\n *\n * It is mounted as a deferred, CHILDLESS SIBLING — never a wrapper — by\n * SiteKitClientProviders, behind the same idle/first-interaction gate as\n * Analytics and Engage, so it never enters the critical hydration path (see\n * CLAUDE.md \"the page must server-render\"). It renders null and carries no\n * visitor data.\n */\n\n'use client'\n\nimport { useEffect, useRef } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport { detectNextVersion, sendFleetHeartbeat } from './heartbeat'\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport type { FleetModule } from './contract'\n\n/** Session guard key — one heartbeat per session, re-sent when version/host changes. */\nconst SESSION_GUARD_KEY = '_sk_fleet_hb'\n\nexport interface FleetHeartbeatProps extends AnalyticsGateOptions {\n  /** Sonor API origin. Falls back to `window.__SITE_KIT_API_URL__` then api.sonor.io. */\n  apiUrl?: string\n  /** Project API key. Falls back to `window.__SITE_KIT_API_KEY__`. */\n  apiKey?: string\n  /** Host for the multi-site sub-dimension. Falls back to `__SITE_KIT_SITE__` then location.host. */\n  site?: string | null\n  /** Client-observable active modules (SiteKitClientProviders passes the enabled set). */\n  modules?: FleetModule[]\n  /** Installed Next.js version if known; otherwise best-effort runtime detection. */\n  nextVersion?: string | null\n  /**\n   * Self-defer to idle / first interaction. Default true so standalone use is\n   * safe. SiteKitClientProviders already gates the mount and passes false.\n   */\n  defer?: boolean\n  /** Send at most once per browser session per (version, host). Default true. */\n  oncePerSession?: boolean\n  debug?: boolean\n}\n\nexport function FleetHeartbeat({\n  apiUrl,\n  apiKey,\n  site,\n  modules,\n  nextVersion,\n  defer = true,\n  oncePerSession = true,\n  debug = false,\n  allowInFrame = false,\n  allowLocalhost = false,\n}: FleetHeartbeatProps) {\n  const ready = useDeferredActivation(defer)\n  const sentRef = useRef(false)\n\n  useEffect(() => {\n    if (!ready || sentRef.current) return\n    if (typeof window === 'undefined') return\n\n    const w = window as unknown as {\n      __SITE_KIT_API_URL__?: string\n      __SITE_KIT_API_KEY__?: string\n      __SITE_KIT_SITE__?: string\n    }\n    const target = resolveAnalyticsTarget({ apiUrl, apiKey, allowInFrame, allowLocalhost, debug })\n    if (!target) return // Gate before stamping session storage.\n    const { apiUrl: url, apiKey: key } = target\n\n    const resolvedSite = site ?? w.__SITE_KIT_SITE__ ?? window.location.host ?? ''\n\n    // Once-per-session-per-(version,host): keeps heartbeat volume to one POST\n    // per visitor session while still re-reporting after an upgrade or on a\n    // different sub-site. Storage-disabled browsers simply send once per load.\n    if (oncePerSession) {\n      const stamp = `${SITE_KIT_VERSION}:${resolvedSite}`\n      try {\n        if (sessionStorage.getItem(SESSION_GUARD_KEY) === stamp) {\n          sentRef.current = true\n          return\n        }\n        sessionStorage.setItem(SESSION_GUARD_KEY, stamp)\n      } catch {\n        /* storage unavailable — fall through and send this load */\n      }\n    }\n\n    sentRef.current = true\n    void sendFleetHeartbeat({\n      apiUrl: url,\n      apiKey: key,\n      site: resolvedSite,\n      modules,\n      nextVersion: nextVersion ?? detectNextVersion(),\n      source: 'client',\n      allowInFrame,\n      allowLocalhost,\n      debug,\n    })\n  }, [ready, apiUrl, apiKey, site, modules, nextVersion, oncePerSession, debug, allowInFrame, allowLocalhost])\n\n  return null\n}\n"]}
+{"version":3,"sources":["../src/fleet/heartbeat.ts","../src/fleet/FleetHeartbeat.tsx"],"names":[],"mappings":";;;;;;;;AAwBO,IAAM,oBAAA,GAAuB;AA4B7B,SAAS,iBAAA,GAAmC;AACjD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,OAAO,qBAAqB,CAAA,CAAE,yBAAA,IAA6B,CAAA,CAAE,IAAA,EAAM,WAAW,IAAI,CAAA;AACpF;AAOA,eAAsB,mBAAmB,IAAA,EAAmD;AAC1F,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,IAAA;AAC3B,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,KAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,uBAAuB,IAAI,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AAEpB,EAAA,MAAM,UAAiC,0BAAA,CAA2B;AAAA,IAChE,UAAA,EAAY,KAAK,UAAA,IAAc,gBAAA;AAAA,IAC/B,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAQ,IAAA,CAAK;AAAA,GACd,CAAA;AAED,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,MAAM,UAAA;AAAA,MAChB,CAAA,EAAG,OAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAE,CAAC,GAAG,oBAAoB,CAAA,CAAA;AAAA,MAC1D;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC9B;AAAA,MACA,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA;AAAE,KACtC;AACA,IAAA,IAAI,KAAK,KAAA,EAAO;AAEd,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,EAAA,EAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,IAAK,MAAM,CAAA,CAAA;AAAA,OACvG;AAAA,IACF;AACA,IAAA,OAAO,GAAA,CAAI,EAAA;AAAA,EACb,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,6CAA6C,GAAG,CAAA;AAC7E,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AC3EA,IAAM,iBAAA,GAAoB,cAAA;AAuBnB,SAAS,cAAA,CAAe;AAAA,EAC7B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,IAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,KAAA,GAAQ,IAAA;AAAA,EACR,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,YAAA,GAAe,KAAA;AAAA,EACf,cAAA,GAAiB;AACnB,CAAA,EAAwB;AACtB,EAAA,MAAM,KAAA,GAAQ,sBAAsB,KAAK,CAAA;AACzC,EAAA,MAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAE5B,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAA,IAAS,OAAA,CAAQ,OAAA,EAAS;AAC/B,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEnC,IAAA,MAAM,CAAA,GAAI,MAAA;AAKV,IAAA,MAAM,MAAA,GAAS,uBAAuB,EAAE,MAAA,EAAQ,QAAQ,YAAA,EAAc,cAAA,EAAgB,OAAO,CAAA;AAC7F,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,KAAI,GAAI,MAAA;AAErC,IAAA,MAAM,eAAe,IAAA,IAAQ,CAAA,CAAE,iBAAA,IAAqB,MAAA,CAAO,SAAS,IAAA,IAAQ,EAAA;AAK5E,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,gBAAgB,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AACjD,MAAA,IAAI;AACF,QAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,iBAAiB,CAAA,KAAM,KAAA,EAAO;AACvD,UAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,UAAA;AAAA,QACF;AACA,QAAA,cAAA,CAAe,OAAA,CAAQ,mBAAmB,KAAK,CAAA;AAAA,MACjD,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,IAAA,KAAK,kBAAA,CAAmB;AAAA,MACtB,MAAA,EAAQ,GAAA;AAAA,MACR,MAAA,EAAQ,GAAA;AAAA,MACR,IAAA,EAAM,YAAA;AAAA,MACN,OAAA;AAAA,MACA,WAAA,EAAa,eAAe,iBAAA,EAAkB;AAAA,MAC9C,MAAA,EAAQ,QAAA;AAAA,MACR,YAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,KAAA,EAAO,YAAA,EAAc,cAAc,CAAC,CAAA;AAE3G,EAAA,OAAO,IAAA;AACT","file":"chunk-XSBKR3VF.mjs","sourcesContent":["/**\n * @sonordev/site-kit/fleet — heartbeat sender (single source of truth for the POST)\n *\n * One place that turns fleet inputs into a validated payload and ships it to\n * `/api/public/fleet/heartbeat`. Used by BOTH the client component\n * (FleetHeartbeat) and any build-time caller, so the send path never forks.\n *\n * It routes through the shared analytics send gate and `sonorFetch`, which stamps\n * the x-sitekit-version header, attaches x-api-key, and honors the auth\n * circuit breaker — a site on a stale/canceled key will not spam the API.\n */\n\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport { sonorFetch } from '../shared/sonorFetch'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport {\n  buildFleetHeartbeatPayload,\n  sanitizeFleetVersion,\n  type FleetHeartbeatPayload,\n  type FleetHeartbeatSource,\n  type FleetModule,\n} from './contract'\n\n/** Canonical ingest path — resolved against the site's Sonor API origin. */\nexport const FLEET_HEARTBEAT_PATH = '/api/public/fleet/heartbeat'\n\nexport interface SendFleetHeartbeatOptions extends AnalyticsGateOptions {\n  /** Sonor API origin (e.g. https://api.sonor.io). Trailing slash tolerated. */\n  apiUrl: string\n  /** Project API key — scopes the request; the project is resolved server-side. */\n  apiKey: string\n  /** Client-observable active modules (validated/deduped by the contract). */\n  modules?: FleetModule[] | string[]\n  /** Normalized host for the multi-site sub-dimension (server re-normalizes). */\n  site?: string | null\n  /** Installed Next.js version, if the caller can resolve it. */\n  nextVersion?: string | null\n  /** 'client' (runtime boot) or 'build' (CI). Default 'client'. */\n  source?: FleetHeartbeatSource\n  /** Override the reported kit version. Defaults to the runtime SITE_KIT_VERSION. */\n  kitVersion?: string\n  /** Log one info line with the result. Never logs at error level. */\n  debug?: boolean\n}\n\n/**\n * Best-effort runtime detection of the host Next.js version. Unreliable by\n * design — Next does not expose its version consistently across app/pages\n * router — so it returns null unless a site injects `__SITE_KIT_NEXT_VERSION__`\n * or `window.next.version` is present. Build-time callers should pass\n * `nextVersion` explicitly (resolvable from `next/package.json`).\n */\nexport function detectNextVersion(): string | null {\n  if (typeof window === 'undefined') return null\n  const w = window as unknown as {\n    __SITE_KIT_NEXT_VERSION__?: string\n    next?: { version?: string }\n  }\n  return sanitizeFleetVersion(w.__SITE_KIT_NEXT_VERSION__ ?? w.next?.version ?? null)\n}\n\n/**\n * Fire one heartbeat. Fire-and-forget by contract: it never throws — a\n * telemetry POST must never break a visitor's page or a site's build. Returns\n * true only when the POST was accepted (2xx).\n */\nexport async function sendFleetHeartbeat(opts: SendFleetHeartbeatOptions): Promise<boolean> {\n  const { apiUrl, apiKey } = opts\n  if (!apiUrl || !apiKey) return false\n  const target = resolveAnalyticsTarget(opts)\n  if (!target) return false\n\n  const payload: FleetHeartbeatPayload = buildFleetHeartbeatPayload({\n    kitVersion: opts.kitVersion || SITE_KIT_VERSION,\n    nextVersion: opts.nextVersion,\n    modules: opts.modules,\n    site: opts.site,\n    source: opts.source,\n  })\n\n  try {\n    const res = await sonorFetch(\n      `${target.apiUrl.replace(/\\/$/, '')}${FLEET_HEARTBEAT_PATH}`,\n      {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify(payload),\n      },\n      { apiKey: target.apiKey, retries: 0 },\n    )\n    if (opts.debug) {\n      // info, never error: a visitor's console must stay clean (Lighthouse).\n      console.info(\n        `[Sonor fleet] heartbeat ${res.status} v${payload.kit_version} [${payload.modules.join(',') || 'none'}]`,\n      )\n    }\n    return res.ok\n  } catch (err) {\n    if (opts.debug) console.info('[Sonor fleet] heartbeat skipped (network)', err)\n    return false\n  }\n}\n","/**\n * @sonordev/site-kit/fleet — FleetHeartbeat\n *\n * A childless, effect-only client component that reports this site's build\n * fingerprint (kit version, Next.js version, active modules, host) to Sonor\n * exactly once per browser session. It exists so the platform can answer\n * \"which version / modules / key state is each site running\" without shelling\n * into every client repo.\n *\n * It is mounted as a deferred, CHILDLESS SIBLING — never a wrapper — by\n * SiteKitClientProviders, behind the same idle/first-interaction gate as\n * Analytics and Engage, so it never enters the critical hydration path (see\n * CLAUDE.md \"the page must server-render\"). It renders null and carries no\n * visitor data.\n */\n\n'use client'\n\nimport { useEffect, useRef } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport { detectNextVersion, sendFleetHeartbeat } from './heartbeat'\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport type { FleetModule } from './contract'\n\n/** Session guard key — one heartbeat per session, re-sent when version/host changes. */\nconst SESSION_GUARD_KEY = '_sk_fleet_hb'\n\nexport interface FleetHeartbeatProps extends AnalyticsGateOptions {\n  /** Sonor API origin. Falls back to `window.__SITE_KIT_API_URL__` then api.sonor.io. */\n  apiUrl?: string\n  /** Project API key. Falls back to `window.__SITE_KIT_API_KEY__`. */\n  apiKey?: string\n  /** Host for the multi-site sub-dimension. Falls back to `__SITE_KIT_SITE__` then location.host. */\n  site?: string | null\n  /** Client-observable active modules (SiteKitClientProviders passes the enabled set). */\n  modules?: FleetModule[]\n  /** Installed Next.js version if known; otherwise best-effort runtime detection. */\n  nextVersion?: string | null\n  /**\n   * Self-defer to idle / first interaction. Default true so standalone use is\n   * safe. SiteKitClientProviders already gates the mount and passes false.\n   */\n  defer?: boolean\n  /** Send at most once per browser session per (version, host). Default true. */\n  oncePerSession?: boolean\n  debug?: boolean\n}\n\nexport function FleetHeartbeat({\n  apiUrl,\n  apiKey,\n  site,\n  modules,\n  nextVersion,\n  defer = true,\n  oncePerSession = true,\n  debug = false,\n  allowInFrame = false,\n  allowLocalhost = false,\n}: FleetHeartbeatProps) {\n  const ready = useDeferredActivation(defer)\n  const sentRef = useRef(false)\n\n  useEffect(() => {\n    if (!ready || sentRef.current) return\n    if (typeof window === 'undefined') return\n\n    const w = window as unknown as {\n      __SITE_KIT_API_URL__?: string\n      __SITE_KIT_API_KEY__?: string\n      __SITE_KIT_SITE__?: string\n    }\n    const target = resolveAnalyticsTarget({ apiUrl, apiKey, allowInFrame, allowLocalhost, debug })\n    if (!target) return // Gate before stamping session storage.\n    const { apiUrl: url, apiKey: key } = target\n\n    const resolvedSite = site ?? w.__SITE_KIT_SITE__ ?? window.location.host ?? ''\n\n    // Once-per-session-per-(version,host): keeps heartbeat volume to one POST\n    // per visitor session while still re-reporting after an upgrade or on a\n    // different sub-site. Storage-disabled browsers simply send once per load.\n    if (oncePerSession) {\n      const stamp = `${SITE_KIT_VERSION}:${resolvedSite}`\n      try {\n        if (sessionStorage.getItem(SESSION_GUARD_KEY) === stamp) {\n          sentRef.current = true\n          return\n        }\n        sessionStorage.setItem(SESSION_GUARD_KEY, stamp)\n      } catch {\n        /* storage unavailable — fall through and send this load */\n      }\n    }\n\n    sentRef.current = true\n    void sendFleetHeartbeat({\n      apiUrl: url,\n      apiKey: key,\n      site: resolvedSite,\n      modules,\n      nextVersion: nextVersion ?? detectNextVersion(),\n      source: 'client',\n      allowInFrame,\n      allowLocalhost,\n      debug,\n    })\n  }, [ready, apiUrl, apiKey, site, modules, nextVersion, oncePerSession, debug, allowInFrame, allowLocalhost])\n\n  return null\n}\n"]}

package/dist/{chunk-SEP5D4MI.js → chunk-Y2CP5J6Q.js}

@@ -112,5 +112,5 @@ exports.findProxyFiles = findProxyFiles;
 exports.findRootLayout = findRootLayout;
 exports.findSitemapRoute = findSitemapRoute;
 exports.hasPageFile = hasPageFile;
-//# sourceMappingURL=chunk-SEP5D4MI.js.map
-//# sourceMappingURL=chunk-SEP5D4MI.js.map
+//# sourceMappingURL=chunk-Y2CP5J6Q.js.map
+//# sourceMappingURL=chunk-Y2CP5J6Q.js.map

package/dist/{chunk-SEP5D4MI.js.map → chunk-Y2CP5J6Q.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/next-files.ts","../src/sitemap/discover.ts"],"names":["path","fs"],"mappings":";;;;;;;;;;;AAiBO,IAAM,gBAAgB,CAAC,KAAA,EAAOA,sBAAK,IAAA,CAAK,KAAA,EAAO,KAAK,CAAC;AAMrD,IAAM,sBAAA,GAAyB,CAAC,KAAA,EAAO,IAAA,EAAM,OAAO,IAAI;AAMxD,IAAM,gBAAA,GAAmB,CAAC,UAAA,EAAY,UAAA,EAAY,gBAAgB,cAAc;AAGhF,IAAM,qBAAA,GAAwB,CAAC,eAAA,EAAiB,eAAA,EAAiB,qBAAqB,mBAAmB;AAMzG,IAAM,iBAAA,GAAoB,CAAC,gBAAA,EAAkB,iBAAA,EAAmB,kBAAkB,iBAAiB,CAAA;AAE1G,SAAS,WAAW,CAAA,EAAoB;AACtC,EAAA,IAAI;AACF,IAAA,OAAOC,oBAAA,CAAG,WAAW,CAAC,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,SAAS,kBAAA,CAAmB,KAAa,QAAA,EAAiC;AAC/E,EAAA,KAAA,MAAW,OAAO,sBAAA,EAAwB;AACxC,IAAA,MAAM,IAAA,GAAOD,sBAAK,IAAA,CAAK,GAAA,EAAK,GAAG,QAAQ,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AAChD,IAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,IAAA;AAAA,EAC/B;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,YAAY,GAAA,EAAsB;AAChD,EAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,MAAM,CAAA,KAAM,IAAA;AAC7C;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,IAAA,MAAM,QAAQ,kBAAA,CAAmBA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,GAAG,QAAQ,CAAA;AAC9D,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA,IAAK,IAAA;AAC3E;AAGO,SAAS,eAAe,GAAA,EAAuB;AACpD,EAAA,OAAO,CAAC,GAAG,gBAAA,EAAkB,GAAG,qBAAqB,CAAA,CAAE,MAAA,CAAO,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,IAAA,CAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA;AACtG;;;AC9CA,IAAM,2BAA2B,CAAC,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAM1D,SAAS,sBAAA,CAAuB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AACjF,EAAA,KAAA,MAAW,aAAa,aAAA,EAAoB;AAC1C,IAAA,MAAM,GAAA,GAAMA,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACpC,IAAA,IAAIC,oBAAAA,CAAG,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,GAAA;AAAA,EACjC;AACA,EAAA,OAAO,IAAA;AACT;AAYO,SAAS,gBAAA,CAAiB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AAC3E,EAAA,KAAA,MAAW,OAAO,aAAA,EAAoB;AACpC,IAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,MAAA,MAAM,MAAMD,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,CAAA,QAAA,EAAW,GAAG,CAAA,CAAE,CAAA;AAC3C,MAAA,IAAIC,oBAAAA,CAAG,WAAWD,qBAAAA,CAAK,IAAA,CAAK,KAAK,GAAG,CAAC,GAAG,OAAO,GAAA;AAAA,IACjD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,oBAAA,CACd,MAAA,EACA,QAAA,GAAmB,EAAA,EACwB;AAC3C,EAAA,MAAM,UAAqD,EAAC;AAE5D,EAAA,MAAM,QAAQC,oBAAAA,CAAG,WAAA,CAAY,QAAQ,EAAE,aAAA,EAAe,MAAM,CAAA;AAE5D,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,KAAK,UAAA,CAAW,GAAG,KAAK,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5D,IAAA,IAAI,IAAA,CAAK,SAAS,KAAA,EAAO;AACzB,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAElC,IAAA,MAAM,QAAA,GAAWD,qBAAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,IAAI,CAAA;AAE5C,IAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,MAAA,MAAM,OAAA,GAAU,YAAY,QAAQ,CAAA;AAEpC,MAAA,MAAM,YAAA,GAAe,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AACxE,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAErE,MAAA,IAAI,SAAA,GAAY,QAAA;AAChB,MAAA,IAAI,CAAC,YAAA,IAAgB,CAAC,SAAA,EAAW;AAC/B,QAAA,SAAA,GAAY,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,MACtC;AAEA,MAAA,IAAI,OAAA,IAAW,CAAC,SAAA,EAAW;AACzB,QAAA,MAAM,QAAA,GAAW,SAAA,KAAc,EAAA,GAAK,CAAA,GAAM,GAAA;AAC1C,QAAA,OAAA,CAAQ,KAAK,EAAE,IAAA,EAAM,SAAA,IAAa,GAAA,EAAK,UAAU,CAAA;AAAA,MACnD;AAEA,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,UAAA,GAAa,oBAAA;AAAA,UACjB,QAAA;AAAA,UACA,eAAe,QAAA,GAAW;AAAA,SAC5B;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,IAAI,WAAA,CAAY,MAAM,CAAA,EAAG;AACvB,MAAA,OAAA,CAAQ,QAAQ,EAAE,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,GAAK,CAAA;AAAA,IAC9C;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT","file":"chunk-SEP5D4MI.js","sourcesContent":["/**\n * @sonordev/site-kit — where a Next.js project keeps its convention files.\n *\n * SINGLE SOURCE OF TRUTH for \"find the root layout / a page / the proxy\". Each\n * CLI check used to carry its own candidate list, and the lists drifted: the OG\n * wiring rule only looked for `app/layout.tsx`, so `doctor` told a site whose\n * root layout is `app/layout.jsx` (heinrich-law-nextjs, 2026-09-14) that it had\n * no layout at all. `geo` knew about `.jsx` but not `src/app`, and none of them\n * knew about `proxy.ts`. Route every lookup through here; never re-fork a list.\n *\n * Node-only (fs/path): never import from browser or client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n\n/** App-directory candidates, in Next's resolution order (`app/` wins over `src/app/`). */\nexport const NEXT_APP_DIRS = ['app', path.join('src', 'app')]\n\n/**\n * Extensions Next resolves for convention files (`layout`, `page`, `route`,\n * `opengraph-image`) under the default `pageExtensions`.\n */\nexport const NEXT_SOURCE_EXTENSIONS = ['tsx', 'ts', 'jsx', 'js']\n\n/**\n * Next 16 Proxy files. The proxy lives at the project root, or in `src/` when\n * the app directory does, beside `src/app`.\n */\nexport const NEXT_PROXY_FILES = ['proxy.ts', 'proxy.js', 'src/proxy.ts', 'src/proxy.js']\n\n/** The pre-16 name for the same file. Still builds; deprecated. */\nexport const NEXT_MIDDLEWARE_FILES = ['middleware.ts', 'middleware.js', 'src/middleware.ts', 'src/middleware.js']\n\n/**\n * next.config candidates in Next's own resolution order (`CONFIG_FILES` in\n * next/dist/shared/lib/constants). Next reads the first one present.\n */\nexport const NEXT_CONFIG_FILES = ['next.config.js', 'next.config.mjs', 'next.config.ts', 'next.config.mts']\n\nfunction safeExists(p: string): boolean {\n  try {\n    return fs.existsSync(p)\n  } catch {\n    return false\n  }\n}\n\n/** `dir/<basename>.<ext>` for the first extension that exists, or null. */\nexport function findConventionFile(dir: string, basename: string): string | null {\n  for (const ext of NEXT_SOURCE_EXTENSIONS) {\n    const file = path.join(dir, `${basename}.${ext}`)\n    if (safeExists(file)) return file\n  }\n  return null\n}\n\n/** True when `dir` holds a `page.{tsx,ts,jsx,js}`. */\nexport function hasPageFile(dir: string): boolean {\n  return findConventionFile(dir, 'page') !== null\n}\n\n/** Absolute path of the root layout (`app/layout.*`, then `src/app/layout.*`), or null. */\nexport function findRootLayout(cwd: string): string | null {\n  for (const rel of NEXT_APP_DIRS) {\n    const found = findConventionFile(path.join(cwd, rel), 'layout')\n    if (found) return found\n  }\n  return null\n}\n\n/** Project-relative path of the next.config Next will read, or null. */\nexport function findNextConfig(cwd: string): string | null {\n  return NEXT_CONFIG_FILES.find(rel => safeExists(path.join(cwd, rel))) ?? null\n}\n\n/** Project-relative paths of every proxy and middleware file present, proxy first. */\nexport function findProxyFiles(cwd: string): string[] {\n  return [...NEXT_PROXY_FILES, ...NEXT_MIDDLEWARE_FILES].filter(rel => safeExists(path.join(cwd, rel)))\n}\n","/**\n * @sonordev/site-kit — Node-only filesystem discovery for the sitemap CLI\n *\n * Single source of truth for the build-time filesystem scan used by\n * `registerLocalSitemap` (both the standalone CLI impl and the server routing\n * helper used to keep their own byte-drifting copies of `discoverNextJsRoutes`).\n *\n * Plus `findSitemapRoute` — the guard that makes `--auto-discover` safe to leave\n * in any site's `postbuild`.\n *\n * IMPORTANT — why a filesystem scan must never drive a `full-replace`:\n * a scan of `app/` can only see STATIC route segments. It structurally cannot\n * enumerate the params of a dynamic route (`/work/[slug]`, `/blog/[cat]/[id]`),\n * and it ignores the app's sitemap `exclude` config. So the route set it\n * produces is always a strict, incomplete SUBSET of the real page set. Feeding\n * that incomplete set to a `full-replace` sync tells the API to DELETE every\n * page that isn't in it — i.e. every dynamic page, plus anything the app\n * intentionally excluded. When a site also has an `app/sitemap.{ts,js}` (which\n * `createSitemap` syncs as an authoritative full-replace), the two syncs delete\n * and recreate each other's rows on every build (the sitemap-oscillation bug),\n * destroying managed metadata, Signal optimizations, LLM schemas, and GSC\n * history on real pages. Hence: auto-discover is additive by default, and skips\n * entirely when a sitemap route already exists.\n *\n * Node built-ins (`fs`/`path`) only — never import this from browser/client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n// App-dir order and page extensions are shared with the OG/doctor/geo checks.\nimport { NEXT_APP_DIRS as APP_DIR_CANDIDATES, hasPageFile } from '../shared/next-files'\n\n/** Extensions a Next.js `sitemap` route file can use. */\nconst SITEMAP_ROUTE_EXTENSIONS = ['ts', 'tsx', 'js', 'jsx', 'mjs']\n\n/**\n * Return the app directory (absolute path) that exists under `cwd`, or null.\n * Prefers `app/`, then `src/app/`.\n */\nexport function findAppDirForDiscovery(cwd: string = process.cwd()): string | null {\n  for (const candidate of APP_DIR_CANDIDATES) {\n    const abs = path.join(cwd, candidate)\n    if (fs.existsSync(abs)) return abs\n  }\n  return null\n}\n\n/**\n * Detect a Next.js `sitemap` route file (`app/sitemap.{ts,tsx,js,jsx,mjs}` or\n * `src/app/sitemap.*`). Returns the project-relative path if found, else null.\n *\n * Presence of this file means the framework already emits `/sitemap.xml` — the\n * authoritative page set — and site-kit's runtime `SitemapSync` syncs that real\n * sitemap (dynamic routes and all) additively. In that world an `--auto-discover`\n * filesystem scan is both inferior and dangerous (see the module header), so the\n * CLI skips.\n */\nexport function findSitemapRoute(cwd: string = process.cwd()): string | null {\n  for (const dir of APP_DIR_CANDIDATES) {\n    for (const ext of SITEMAP_ROUTE_EXTENSIONS) {\n      const rel = path.join(dir, `sitemap.${ext}`)\n      if (fs.existsSync(path.join(cwd, rel))) return rel\n    }\n  }\n  return null\n}\n\n/**\n * Recursively discover STATIC Next.js routes from an app directory.\n *\n * Intentionally skips dynamic segments (`[slug]`) — they can't be enumerated\n * from disk — which is exactly why the result is incomplete and must only ever\n * drive an additive sync. Route groups `(marketing)` are folded out of the URL.\n */\nexport function discoverNextJsRoutes(\n  appDir: string,\n  basePath: string = '',\n): Array<{ path: string; priority: number }> {\n  const entries: Array<{ path: string; priority: number }> = []\n\n  const items = fs.readdirSync(appDir, { withFileTypes: true })\n\n  for (const item of items) {\n    if (item.name.startsWith('_') || item.name.startsWith('.')) continue\n    if (item.name === 'api') continue\n    if (item.name === 'node_modules') continue\n\n    const itemPath = path.join(appDir, item.name)\n\n    if (item.isDirectory()) {\n      const hasPage = hasPageFile(itemPath)\n\n      const isRouteGroup = item.name.startsWith('(') && item.name.endsWith(')')\n      const isDynamic = item.name.startsWith('[') && item.name.endsWith(']')\n\n      let routePath = basePath\n      if (!isRouteGroup && !isDynamic) {\n        routePath = `${basePath}/${item.name}`\n      }\n\n      if (hasPage && !isDynamic) {\n        const priority = routePath === '' ? 1.0 : 0.8\n        entries.push({ path: routePath || '/', priority })\n      }\n\n      if (!isDynamic) {\n        const subEntries = discoverNextJsRoutes(\n          itemPath,\n          isRouteGroup ? basePath : routePath,\n        )\n        entries.push(...subEntries)\n      }\n    }\n  }\n\n  if (basePath === '') {\n    if (hasPageFile(appDir)) {\n      entries.unshift({ path: '/', priority: 1.0 })\n    }\n  }\n\n  return entries\n}\n"]}
+{"version":3,"sources":["../src/shared/next-files.ts","../src/sitemap/discover.ts"],"names":["path","fs"],"mappings":";;;;;;;;;;;AAiBO,IAAM,gBAAgB,CAAC,KAAA,EAAOA,sBAAK,IAAA,CAAK,KAAA,EAAO,KAAK,CAAC;AAMrD,IAAM,sBAAA,GAAyB,CAAC,KAAA,EAAO,IAAA,EAAM,OAAO,IAAI;AAMxD,IAAM,gBAAA,GAAmB,CAAC,UAAA,EAAY,UAAA,EAAY,gBAAgB,cAAc;AAGhF,IAAM,qBAAA,GAAwB,CAAC,eAAA,EAAiB,eAAA,EAAiB,qBAAqB,mBAAmB;AAMzG,IAAM,iBAAA,GAAoB,CAAC,gBAAA,EAAkB,iBAAA,EAAmB,kBAAkB,iBAAiB,CAAA;AAE1G,SAAS,WAAW,CAAA,EAAoB;AACtC,EAAA,IAAI;AACF,IAAA,OAAOC,oBAAA,CAAG,WAAW,CAAC,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,SAAS,kBAAA,CAAmB,KAAa,QAAA,EAAiC;AAC/E,EAAA,KAAA,MAAW,OAAO,sBAAA,EAAwB;AACxC,IAAA,MAAM,IAAA,GAAOD,sBAAK,IAAA,CAAK,GAAA,EAAK,GAAG,QAAQ,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AAChD,IAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,IAAA;AAAA,EAC/B;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,YAAY,GAAA,EAAsB;AAChD,EAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,MAAM,CAAA,KAAM,IAAA;AAC7C;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,IAAA,MAAM,QAAQ,kBAAA,CAAmBA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,GAAG,QAAQ,CAAA;AAC9D,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA,IAAK,IAAA;AAC3E;AAGO,SAAS,eAAe,GAAA,EAAuB;AACpD,EAAA,OAAO,CAAC,GAAG,gBAAA,EAAkB,GAAG,qBAAqB,CAAA,CAAE,MAAA,CAAO,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,IAAA,CAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA;AACtG;;;AC9CA,IAAM,2BAA2B,CAAC,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAM1D,SAAS,sBAAA,CAAuB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AACjF,EAAA,KAAA,MAAW,aAAa,aAAA,EAAoB;AAC1C,IAAA,MAAM,GAAA,GAAMA,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACpC,IAAA,IAAIC,oBAAAA,CAAG,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,GAAA;AAAA,EACjC;AACA,EAAA,OAAO,IAAA;AACT;AAYO,SAAS,gBAAA,CAAiB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AAC3E,EAAA,KAAA,MAAW,OAAO,aAAA,EAAoB;AACpC,IAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,MAAA,MAAM,MAAMD,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,CAAA,QAAA,EAAW,GAAG,CAAA,CAAE,CAAA;AAC3C,MAAA,IAAIC,oBAAAA,CAAG,WAAWD,qBAAAA,CAAK,IAAA,CAAK,KAAK,GAAG,CAAC,GAAG,OAAO,GAAA;AAAA,IACjD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,oBAAA,CACd,MAAA,EACA,QAAA,GAAmB,EAAA,EACwB;AAC3C,EAAA,MAAM,UAAqD,EAAC;AAE5D,EAAA,MAAM,QAAQC,oBAAAA,CAAG,WAAA,CAAY,QAAQ,EAAE,aAAA,EAAe,MAAM,CAAA;AAE5D,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,KAAK,UAAA,CAAW,GAAG,KAAK,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5D,IAAA,IAAI,IAAA,CAAK,SAAS,KAAA,EAAO;AACzB,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAElC,IAAA,MAAM,QAAA,GAAWD,qBAAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,IAAI,CAAA;AAE5C,IAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,MAAA,MAAM,OAAA,GAAU,YAAY,QAAQ,CAAA;AAEpC,MAAA,MAAM,YAAA,GAAe,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AACxE,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAErE,MAAA,IAAI,SAAA,GAAY,QAAA;AAChB,MAAA,IAAI,CAAC,YAAA,IAAgB,CAAC,SAAA,EAAW;AAC/B,QAAA,SAAA,GAAY,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,MACtC;AAEA,MAAA,IAAI,OAAA,IAAW,CAAC,SAAA,EAAW;AACzB,QAAA,MAAM,QAAA,GAAW,SAAA,KAAc,EAAA,GAAK,CAAA,GAAM,GAAA;AAC1C,QAAA,OAAA,CAAQ,KAAK,EAAE,IAAA,EAAM,SAAA,IAAa,GAAA,EAAK,UAAU,CAAA;AAAA,MACnD;AAEA,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,UAAA,GAAa,oBAAA;AAAA,UACjB,QAAA;AAAA,UACA,eAAe,QAAA,GAAW;AAAA,SAC5B;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,IAAI,WAAA,CAAY,MAAM,CAAA,EAAG;AACvB,MAAA,OAAA,CAAQ,QAAQ,EAAE,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,GAAK,CAAA;AAAA,IAC9C;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT","file":"chunk-Y2CP5J6Q.js","sourcesContent":["/**\n * @sonordev/site-kit — where a Next.js project keeps its convention files.\n *\n * SINGLE SOURCE OF TRUTH for \"find the root layout / a page / the proxy\". Each\n * CLI check used to carry its own candidate list, and the lists drifted: the OG\n * wiring rule only looked for `app/layout.tsx`, so `doctor` told a site whose\n * root layout is `app/layout.jsx` (heinrich-law-nextjs, 2026-09-14) that it had\n * no layout at all. `geo` knew about `.jsx` but not `src/app`, and none of them\n * knew about `proxy.ts`. Route every lookup through here; never re-fork a list.\n *\n * Node-only (fs/path): never import from browser or client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n\n/** App-directory candidates, in Next's resolution order (`app/` wins over `src/app/`). */\nexport const NEXT_APP_DIRS = ['app', path.join('src', 'app')]\n\n/**\n * Extensions Next resolves for convention files (`layout`, `page`, `route`,\n * `opengraph-image`) under the default `pageExtensions`.\n */\nexport const NEXT_SOURCE_EXTENSIONS = ['tsx', 'ts', 'jsx', 'js']\n\n/**\n * Next 16 Proxy files. The proxy lives at the project root, or in `src/` when\n * the app directory does, beside `src/app`.\n */\nexport const NEXT_PROXY_FILES = ['proxy.ts', 'proxy.js', 'src/proxy.ts', 'src/proxy.js']\n\n/** The pre-16 name for the same file. Still builds; deprecated. */\nexport const NEXT_MIDDLEWARE_FILES = ['middleware.ts', 'middleware.js', 'src/middleware.ts', 'src/middleware.js']\n\n/**\n * next.config candidates in Next's own resolution order (`CONFIG_FILES` in\n * next/dist/shared/lib/constants). Next reads the first one present.\n */\nexport const NEXT_CONFIG_FILES = ['next.config.js', 'next.config.mjs', 'next.config.ts', 'next.config.mts']\n\nfunction safeExists(p: string): boolean {\n  try {\n    return fs.existsSync(p)\n  } catch {\n    return false\n  }\n}\n\n/** `dir/<basename>.<ext>` for the first extension that exists, or null. */\nexport function findConventionFile(dir: string, basename: string): string | null {\n  for (const ext of NEXT_SOURCE_EXTENSIONS) {\n    const file = path.join(dir, `${basename}.${ext}`)\n    if (safeExists(file)) return file\n  }\n  return null\n}\n\n/** True when `dir` holds a `page.{tsx,ts,jsx,js}`. */\nexport function hasPageFile(dir: string): boolean {\n  return findConventionFile(dir, 'page') !== null\n}\n\n/** Absolute path of the root layout (`app/layout.*`, then `src/app/layout.*`), or null. */\nexport function findRootLayout(cwd: string): string | null {\n  for (const rel of NEXT_APP_DIRS) {\n    const found = findConventionFile(path.join(cwd, rel), 'layout')\n    if (found) return found\n  }\n  return null\n}\n\n/** Project-relative path of the next.config Next will read, or null. */\nexport function findNextConfig(cwd: string): string | null {\n  return NEXT_CONFIG_FILES.find(rel => safeExists(path.join(cwd, rel))) ?? null\n}\n\n/** Project-relative paths of every proxy and middleware file present, proxy first. */\nexport function findProxyFiles(cwd: string): string[] {\n  return [...NEXT_PROXY_FILES, ...NEXT_MIDDLEWARE_FILES].filter(rel => safeExists(path.join(cwd, rel)))\n}\n","/**\n * @sonordev/site-kit — Node-only filesystem discovery for the sitemap CLI\n *\n * Single source of truth for the build-time filesystem scan used by\n * `registerLocalSitemap` (both the standalone CLI impl and the server routing\n * helper used to keep their own byte-drifting copies of `discoverNextJsRoutes`).\n *\n * Plus `findSitemapRoute` — the guard that makes `--auto-discover` safe to leave\n * in any site's `postbuild`.\n *\n * IMPORTANT — why a filesystem scan must never drive a `full-replace`:\n * a scan of `app/` can only see STATIC route segments. It structurally cannot\n * enumerate the params of a dynamic route (`/work/[slug]`, `/article/[cat]/[id]`),\n * and it ignores the app's sitemap `exclude` config. So the route set it\n * produces is always a strict, incomplete SUBSET of the real page set. Feeding\n * that incomplete set to a `full-replace` sync tells the API to DELETE every\n * page that isn't in it — i.e. every dynamic page, plus anything the app\n * intentionally excluded. When a site also has an `app/sitemap.{ts,js}` (which\n * `createSitemap` syncs as an authoritative full-replace), the two syncs delete\n * and recreate each other's rows on every build (the sitemap-oscillation bug),\n * destroying managed metadata, Signal optimizations, LLM schemas, and GSC\n * history on real pages. Hence: auto-discover is additive by default, and skips\n * entirely when a sitemap route already exists.\n *\n * Node built-ins (`fs`/`path`) only — never import this from browser/client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n// App-dir order and page extensions are shared with the OG/doctor/geo checks.\nimport { NEXT_APP_DIRS as APP_DIR_CANDIDATES, hasPageFile } from '../shared/next-files'\n\n/** Extensions a Next.js `sitemap` route file can use. */\nconst SITEMAP_ROUTE_EXTENSIONS = ['ts', 'tsx', 'js', 'jsx', 'mjs']\n\n/**\n * Return the app directory (absolute path) that exists under `cwd`, or null.\n * Prefers `app/`, then `src/app/`.\n */\nexport function findAppDirForDiscovery(cwd: string = process.cwd()): string | null {\n  for (const candidate of APP_DIR_CANDIDATES) {\n    const abs = path.join(cwd, candidate)\n    if (fs.existsSync(abs)) return abs\n  }\n  return null\n}\n\n/**\n * Detect a Next.js `sitemap` route file (`app/sitemap.{ts,tsx,js,jsx,mjs}` or\n * `src/app/sitemap.*`). Returns the project-relative path if found, else null.\n *\n * Presence of this file means the framework already emits `/sitemap.xml` — the\n * authoritative page set — and site-kit's runtime `SitemapSync` syncs that real\n * sitemap (dynamic routes and all) additively. In that world an `--auto-discover`\n * filesystem scan is both inferior and dangerous (see the module header), so the\n * CLI skips.\n */\nexport function findSitemapRoute(cwd: string = process.cwd()): string | null {\n  for (const dir of APP_DIR_CANDIDATES) {\n    for (const ext of SITEMAP_ROUTE_EXTENSIONS) {\n      const rel = path.join(dir, `sitemap.${ext}`)\n      if (fs.existsSync(path.join(cwd, rel))) return rel\n    }\n  }\n  return null\n}\n\n/**\n * Recursively discover STATIC Next.js routes from an app directory.\n *\n * Intentionally skips dynamic segments (`[slug]`) — they can't be enumerated\n * from disk — which is exactly why the result is incomplete and must only ever\n * drive an additive sync. Route groups `(marketing)` are folded out of the URL.\n */\nexport function discoverNextJsRoutes(\n  appDir: string,\n  basePath: string = '',\n): Array<{ path: string; priority: number }> {\n  const entries: Array<{ path: string; priority: number }> = []\n\n  const items = fs.readdirSync(appDir, { withFileTypes: true })\n\n  for (const item of items) {\n    if (item.name.startsWith('_') || item.name.startsWith('.')) continue\n    if (item.name === 'api') continue\n    if (item.name === 'node_modules') continue\n\n    const itemPath = path.join(appDir, item.name)\n\n    if (item.isDirectory()) {\n      const hasPage = hasPageFile(itemPath)\n\n      const isRouteGroup = item.name.startsWith('(') && item.name.endsWith(')')\n      const isDynamic = item.name.startsWith('[') && item.name.endsWith(']')\n\n      let routePath = basePath\n      if (!isRouteGroup && !isDynamic) {\n        routePath = `${basePath}/${item.name}`\n      }\n\n      if (hasPage && !isDynamic) {\n        const priority = routePath === '' ? 1.0 : 0.8\n        entries.push({ path: routePath || '/', priority })\n      }\n\n      if (!isDynamic) {\n        const subEntries = discoverNextJsRoutes(\n          itemPath,\n          isRouteGroup ? basePath : routePath,\n        )\n        entries.push(...subEntries)\n      }\n    }\n  }\n\n  if (basePath === '') {\n    if (hasPageFile(appDir)) {\n      entries.unshift({ path: '/', priority: 1.0 })\n    }\n  }\n\n  return entries\n}\n"]}

package/dist/{chunk-VVBMWV4O.js → chunk-YGDQVZEL.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkH5NBFNND_js = require('./chunk-H5NBFNND.js');
-var chunkCZEIHFLW_js = require('./chunk-CZEIHFLW.js');
+var chunkUZKXOZHR_js = require('./chunk-UZKXOZHR.js');
+var chunkTCZHRSWY_js = require('./chunk-TCZHRSWY.js');
 
 // src/shared/publishCredential.ts
 function publishSiteCredential({
@@ -12,14 +12,14 @@ function publishSiteCredential({
   mapsBrowserKey
 }) {
   if (typeof window === "undefined") return;
-  chunkCZEIHFLW_js.configureSiteCredential({ credential: apiKey, apiUrl });
+  chunkTCZHRSWY_js.configureSiteCredential({ credential: apiKey, apiUrl });
   window.__SITE_KIT_API_URL__ = apiUrl;
-  window.__SITE_KIT_API_KEY__ = chunkCZEIHFLW_js.currentCredential(apiKey);
+  window.__SITE_KIT_API_KEY__ = chunkTCZHRSWY_js.currentCredential(apiKey);
   window.__SITE_KIT_DEBUG__ = debug;
-  window.__SITE_KIT_SITE__ = site ?? chunkH5NBFNND_js.resolveSiteHost();
+  window.__SITE_KIT_SITE__ = site ?? chunkUZKXOZHR_js.resolveSiteHost();
   if (mapsBrowserKey) window.__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey;
 }
 
 exports.publishSiteCredential = publishSiteCredential;
-//# sourceMappingURL=chunk-VVBMWV4O.js.map
-//# sourceMappingURL=chunk-VVBMWV4O.js.map
+//# sourceMappingURL=chunk-YGDQVZEL.js.map
+//# sourceMappingURL=chunk-YGDQVZEL.js.map

package/dist/{chunk-VVBMWV4O.js.map → chunk-YGDQVZEL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":["configureSiteCredential","currentCredential","resolveSiteHost"],"mappings":";;;;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAAA,wCAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuBC,kCAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQC,gCAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-VVBMWV4O.js","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}
+{"version":3,"sources":["../src/shared/publishCredential.ts"],"names":["configureSiteCredential","currentCredential","resolveSiteHost"],"mappings":";;;;;;AAkEO,SAAS,qBAAA,CAAsB;AAAA,EACpC,MAAA;AAAA,EACA,MAAA,GAAS,sBAAA;AAAA,EACT,IAAA;AAAA,EACA,KAAA,GAAQ,KAAA;AAAA,EACR;AACF,CAAA,EAAuC;AACrC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAKnC,EAAAA,wCAAA,CAAwB,EAAE,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAQ,CAAA;AACrD,EAAC,OAAe,oBAAA,GAAuB,MAAA;AACvC,EAAC,MAAA,CAAe,oBAAA,GAAuBC,kCAAA,CAAkB,MAAM,CAAA;AAC/D,EAAC,OAAe,kBAAA,GAAqB,KAAA;AACrC,EAAC,MAAA,CAAe,iBAAA,GAAoB,IAAA,IAAQC,gCAAA,EAAgB;AAG7D,EAAA,IAAI,cAAA,EAAiB,MAAA,CAAe,uBAAA,GAA0B,cAAA;AAChE","file":"chunk-YGDQVZEL.js","sourcesContent":["/**\n * @sonordev/site-kit shared — Client credential + window-global publishing\n *\n * SINGLE SOURCE OF TRUTH for seeding the browser-side token manager and the\n * `window.__SITE_KIT_*` globals that every client module reads. Used by:\n *\n *   - `SiteKitClientProviders` (core `SiteKitLayout`)\n *   - `SiteKitCredential` (`@sonordev/site-kit/client`) — the public component\n *     for layouts that are NOT core `SiteKitLayout`, e.g.\n *     `@sonordev/agency-site-kit`'s `AgencySiteKitLayout`.\n *\n * Do not re-fork this. Before it existed, agency sites hand-rolled their own\n * \"set the globals on mount\" component (upforge's `UptradeSiteKitInit`), and\n * because those copies had no access to the token manager they published the\n * RAW `sonor_` key into the client bundle — the exact exposure the mint exists\n * to prevent. Any layout that puts a credential on `window` goes through here.\n *\n * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).\n * The minting half is server-only and lives in `../server/mint-site-token`.\n */\n// Leaf modules, NOT '../sites/contract' — see sites/normalize.ts. Importing the\n// full contract here shipped its JSON schema to every browser that loads a\n// credential-publishing entry.\nimport { resolveSiteHost } from '../sites/resolve'\nimport { configureSiteCredential, currentCredential } from './siteToken'\n\n/**\n * Re-exported so the client-side callers below and every existing importer keep\n * a single name for this. The implementation lives in `../sites/resolve` — the\n * ONE resolver shared by the browser (this file) and the build-time sitemap /\n * llms.txt path, so both tag the same host.\n */\nexport { resolveSiteHost }\n\nexport interface PublishSiteCredentialOptions {\n  /**\n   * The credential the layout minted server-side. In 3.2+ this is a short-lived\n   * `st1.` token that `sonorFetch` refreshes transparently. A raw `sonor_` key\n   * still works (2.x kit, or the mint-failed fallback) but should never be\n   * routed here from a client component — it would ship the secret to the\n   * browser.\n   */\n  apiKey?: string\n  apiUrl?: string\n  /** Pre-resolved sub-site host. Omit to resolve via `resolveSiteHost`. */\n  site?: string\n  debug?: boolean\n  /**\n   * Referrer-restricted Google Maps BROWSER key for client map components.\n   * Resolved server-side by SiteKitLayout (NEXT_PUBLIC_GOOGLE_MAPS_API_KEY /\n   * GOOGLE_MAPS_BROWSER_KEY) because maps/api.ts runs client-side, where a bare\n   * process.env read is dead code unless the app's bundler happens to inline it.\n   * Never route a server secret here.\n   */\n  mapsBrowserKey?: string\n}\n\n/**\n * Seed the token manager and publish the `window.__SITE_KIT_*` globals.\n *\n * Called during RENDER, not in an effect: client modules read these globals in\n * their own mount effects, and effects run child-first, so an effect-based\n * publish would land after the modules that need it.\n *\n * No-op on the server.\n */\nexport function publishSiteCredential({\n  apiKey,\n  apiUrl = 'https://api.sonor.io',\n  site,\n  debug = false,\n  mapsBrowserKey,\n}: PublishSiteCredentialOptions): void {\n  if (typeof window === 'undefined') return\n\n  // Seed the client token manager. The window global is set to the freshest\n  // token held — a prior page this session may already have refreshed past the\n  // seed the layout injected. In raw-key mode this is a passthrough.\n  configureSiteCredential({ credential: apiKey, apiUrl })\n  ;(window as any).__SITE_KIT_API_URL__ = apiUrl\n  ;(window as any).__SITE_KIT_API_KEY__ = currentCredential(apiKey)\n  ;(window as any).__SITE_KIT_DEBUG__ = debug\n  ;(window as any).__SITE_KIT_SITE__ = site ?? resolveSiteHost()\n  // maps/api.ts falls back to this global when the Sonor platform hasn't\n  // provisioned a browser key. Don't clobber a value another layout already set.\n  if (mapsBrowserKey) (window as any).__GOOGLE_MAPS_API_KEY__ = mapsBrowserKey\n}\n"]}

package/dist/{chunk-KV7XXLJV.mjs → chunk-YPGUV6BT.mjs}

@@ -1,4 +1,4 @@
-import { resolveSiteHost } from './chunk-JLVCWC6A.mjs';
+import { resolveSiteHost } from './chunk-KZVSB5WE.mjs';
 import { normalizeSiteHost } from './chunk-ZN4HBK5C.mjs';
 
 // src/seo/register-sitemap-request.ts
@@ -26,5 +26,5 @@ function postRegisterSitemap(req) {
 }
 
 export { postRegisterSitemap, resolveSyncSite };
-//# sourceMappingURL=chunk-KV7XXLJV.mjs.map
-//# sourceMappingURL=chunk-KV7XXLJV.mjs.map
+//# sourceMappingURL=chunk-YPGUV6BT.mjs.map
+//# sourceMappingURL=chunk-YPGUV6BT.mjs.map

package/dist/{chunk-KV7XXLJV.mjs.map → chunk-YPGUV6BT.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/seo/register-sitemap-request.ts"],"names":[],"mappings":";;;;AAmCO,SAAS,gBAAgB,QAAA,EAA2B;AACzD,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,eAAA,EAAgB;AAC5D,EAAA,OAAO,IAAA,KAAS,gBAAgB,EAAA,GAAK,IAAA;AACvC;AAGO,SAAS,oBAAoB,GAAA,EAAiF;AACnH,EAAA,MAAM,OAAgC,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAA,EAAM,IAAI,IAAA,EAAK;AAC7E,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,GAAA,CAAI,IAAI,CAAA;AACvC,EAAA,IAAI,IAAA,OAAW,IAAA,GAAO,IAAA;AACtB,EAAA,IAAI,GAAA,CAAI,YAAA,KAAiB,MAAA,EAAW,IAAA,CAAK,gBAAgB,GAAA,CAAI,YAAA;AAC7D,EAAA,IAAI,GAAA,CAAI,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,aAAa,GAAA,CAAI,SAAA;AACvD,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,oBAAoB,GAAA,EAAgD;AAClF,EAAA,OAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,gCAAA,CAAA,EAAoC;AAAA,IAC5D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAa,GAAA,CAAI;AAAA,KACnB;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,mBAAA,CAAoB,GAAG,CAAC;AAAA,GAC9C,CAAA;AACH","file":"chunk-KV7XXLJV.mjs","sourcesContent":["/**\n * @sonordev/site-kit/seo — the one POST to /api/public/seo/register-sitemap.\n *\n * SINGLE SOURCE OF TRUTH for the request body, used by createSitemap's\n * build-time sync (`syncSitemapToPortal`), the `sonor-register-sitemap` CLI\n * and `registerSitemap` / `registerLocalSitemap` on `seo/server`. There were\n * three hand-built bodies, and only createSitemap's carried `site`: on a\n * multi-site project the CLI and the seo/server helpers synced every page as\n * unattributed instead of this host's (found 2026-09-15). `site` is part of\n * seo_pages identity, so a missing one is a different page, not a no-op.\n *\n * A leaf: no `server-only`, no Node built-ins, so the plain-Node CLI can use\n * it as well as Next server code.\n */\n\nimport { resolveSiteHost } from '../sites/resolve'\nimport { normalizeSiteHost } from '../sites/normalize'\n\nexport interface RegisterSitemapRequest {\n  apiUrl: string\n  apiKey: string\n  entries: unknown[]\n  mode: 'additive' | 'full-replace'\n  /** Sub-site host, already resolved. Empty or undefined leaves `site` off. */\n  site?: string\n  optimizeMeta?: boolean\n  awaitMeta?: boolean\n}\n\n/**\n * The host a sync is tagged with: an explicit `site`, else\n * NEXT_PUBLIC_SITE_URL's. Empty when neither resolves (a single-site project\n * doesn't need one). `example.com` is the kit's placeholder origin and never a\n * real host, so it's never sent, same as createSitemap.\n */\nexport function resolveSyncSite(explicit?: string): string {\n  const host = normalizeSiteHost(explicit) || resolveSiteHost()\n  return host === 'example.com' ? '' : host\n}\n\n/** The request body. Exported for tests. */\nexport function registerSitemapBody(req: Omit<RegisterSitemapRequest, 'apiUrl' | 'apiKey'>): Record<string, unknown> {\n  const body: Record<string, unknown> = { entries: req.entries, mode: req.mode }\n  const site = normalizeSiteHost(req.site)\n  if (site) body.site = site\n  if (req.optimizeMeta !== undefined) body.optimize_meta = req.optimizeMeta\n  if (req.awaitMeta !== undefined) body.await_meta = req.awaitMeta\n  return body\n}\n\n/** POST the entries. Callers keep their own response and error handling. */\nexport function postRegisterSitemap(req: RegisterSitemapRequest): Promise<Response> {\n  return fetch(`${req.apiUrl}/api/public/seo/register-sitemap`, {\n    method: 'POST',\n    headers: {\n      'Content-Type': 'application/json',\n      'x-api-key': req.apiKey,\n    },\n    body: JSON.stringify(registerSitemapBody(req)),\n  })\n}\n"]}
+{"version":3,"sources":["../src/seo/register-sitemap-request.ts"],"names":[],"mappings":";;;;AAmCO,SAAS,gBAAgB,QAAA,EAA2B;AACzD,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,eAAA,EAAgB;AAC5D,EAAA,OAAO,IAAA,KAAS,gBAAgB,EAAA,GAAK,IAAA;AACvC;AAGO,SAAS,oBAAoB,GAAA,EAAiF;AACnH,EAAA,MAAM,OAAgC,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAA,EAAM,IAAI,IAAA,EAAK;AAC7E,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,GAAA,CAAI,IAAI,CAAA;AACvC,EAAA,IAAI,IAAA,OAAW,IAAA,GAAO,IAAA;AACtB,EAAA,IAAI,GAAA,CAAI,YAAA,KAAiB,MAAA,EAAW,IAAA,CAAK,gBAAgB,GAAA,CAAI,YAAA;AAC7D,EAAA,IAAI,GAAA,CAAI,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,aAAa,GAAA,CAAI,SAAA;AACvD,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,oBAAoB,GAAA,EAAgD;AAClF,EAAA,OAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,gCAAA,CAAA,EAAoC;AAAA,IAC5D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAa,GAAA,CAAI;AAAA,KACnB;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,mBAAA,CAAoB,GAAG,CAAC;AAAA,GAC9C,CAAA;AACH","file":"chunk-YPGUV6BT.mjs","sourcesContent":["/**\n * @sonordev/site-kit/seo — the one POST to /api/public/seo/register-sitemap.\n *\n * SINGLE SOURCE OF TRUTH for the request body, used by createSitemap's\n * build-time sync (`syncSitemapToPortal`), the `sonor-register-sitemap` CLI\n * and `registerSitemap` / `registerLocalSitemap` on `seo/server`. There were\n * three hand-built bodies, and only createSitemap's carried `site`: on a\n * multi-site project the CLI and the seo/server helpers synced every page as\n * unattributed instead of this host's (found 2026-09-15). `site` is part of\n * seo_pages identity, so a missing one is a different page, not a no-op.\n *\n * A leaf: no `server-only`, no Node built-ins, so the plain-Node CLI can use\n * it as well as Next server code.\n */\n\nimport { resolveSiteHost } from '../sites/resolve'\nimport { normalizeSiteHost } from '../sites/normalize'\n\nexport interface RegisterSitemapRequest {\n  apiUrl: string\n  apiKey: string\n  entries: unknown[]\n  mode: 'additive' | 'full-replace'\n  /** Sub-site host, already resolved. Empty or undefined leaves `site` off. */\n  site?: string\n  optimizeMeta?: boolean\n  awaitMeta?: boolean\n}\n\n/**\n * The host a sync is tagged with: an explicit `site`, else\n * NEXT_PUBLIC_SITE_URL's. Empty when neither resolves (a single-site project\n * doesn't need one). `example.com` is the kit's placeholder origin and never a\n * real host, so it's never sent, same as createSitemap.\n */\nexport function resolveSyncSite(explicit?: string): string {\n  const host = normalizeSiteHost(explicit) || resolveSiteHost()\n  return host === 'example.com' ? '' : host\n}\n\n/** The request body. Exported for tests. */\nexport function registerSitemapBody(req: Omit<RegisterSitemapRequest, 'apiUrl' | 'apiKey'>): Record<string, unknown> {\n  const body: Record<string, unknown> = { entries: req.entries, mode: req.mode }\n  const site = normalizeSiteHost(req.site)\n  if (site) body.site = site\n  if (req.optimizeMeta !== undefined) body.optimize_meta = req.optimizeMeta\n  if (req.awaitMeta !== undefined) body.await_meta = req.awaitMeta\n  return body\n}\n\n/** POST the entries. Callers keep their own response and error handling. */\nexport function postRegisterSitemap(req: RegisterSitemapRequest): Promise<Response> {\n  return fetch(`${req.apiUrl}/api/public/seo/register-sitemap`, {\n    method: 'POST',\n    headers: {\n      'Content-Type': 'application/json',\n      'x-api-key': req.apiKey,\n    },\n    body: JSON.stringify(registerSitemapBody(req)),\n  })\n}\n"]}

package/dist/chunk-YRCR7WY3.js

@@ -0,0 +1,65 @@
+'use strict';
+
+var chunkZR43XFUM_js = require('./chunk-ZR43XFUM.js');
+
+// src/articles/artwork.ts
+function resolveArticleArtwork(post, placement = "card") {
+  const editorial = placement === "article" && !!post.editorial_image;
+  const src = (editorial ? post.editorial_image : post.featured_image) || void 0;
+  const alt = editorial ? post.editorial_image_alt ?? "" : post.featured_image_alt ?? post.title ?? "";
+  let composed = false;
+  if (src) {
+    try {
+      composed = /\/Blog\/Cards\//i.test(new URL(src, "https://site-kit.invalid").pathname);
+    } catch {
+    }
+  }
+  return { src, alt, composed };
+}
+function articleArtworkImageStyle(artwork) {
+  return artwork.composed ? { display: "block", height: "auto", maxHeight: "none", objectFit: "contain", transform: "none" } : void 0;
+}
+
+// src/articles/author-schema.ts
+function generateAuthorSchema(author, options = {}) {
+  const { siteUrl = "", siteName } = options;
+  const sameAs = [...author.same_as || []];
+  if (author.linkedin_url) sameAs.push(author.linkedin_url);
+  if (author.twitter_url) sameAs.push(author.twitter_url);
+  if (author.website_url) sameAs.push(author.website_url);
+  if (author.social_links?.twitter) sameAs.push(`https://twitter.com/${author.social_links.twitter}`);
+  if (author.social_links?.linkedin) sameAs.push(author.social_links.linkedin);
+  if (author.social_links?.github) sameAs.push(`https://github.com/${author.social_links.github}`);
+  const uniqueSameAs = [...new Set(sameAs.filter(Boolean))];
+  const schema = {
+    "@context": "https://schema.org",
+    "@type": "Person",
+    name: author.name,
+    url: author.author_page_url || chunkZR43XFUM_js.resolvePublicationUrl(chunkZR43XFUM_js.createPublicationRoutes(options).author(author.slug), siteUrl)
+  };
+  if (author.title) schema.jobTitle = author.title;
+  if (author.company || siteName) {
+    schema.worksFor = {
+      "@type": "Organization",
+      name: author.company || siteName,
+      ...siteUrl ? { url: siteUrl } : {}
+    };
+  }
+  if (author.bio || author.short_bio) schema.description = author.short_bio || author.bio;
+  if (author.avatar_url) schema.image = author.avatar_url;
+  if (uniqueSameAs.length > 0) schema.sameAs = uniqueSameAs;
+  if (author.knows_about && author.knows_about.length > 0) schema.knowsAbout = author.knows_about;
+  if (author.credentials && author.credentials.length > 0) {
+    schema.hasCredential = author.credentials.map((c) => ({
+      "@type": "EducationalOccupationalCredential",
+      credentialCategory: c
+    }));
+  }
+  return schema;
+}
+
+exports.articleArtworkImageStyle = articleArtworkImageStyle;
+exports.generateAuthorSchema = generateAuthorSchema;
+exports.resolveArticleArtwork = resolveArticleArtwork;
+//# sourceMappingURL=chunk-YRCR7WY3.js.map
+//# sourceMappingURL=chunk-YRCR7WY3.js.map

package/dist/chunk-YRCR7WY3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/articles/artwork.ts","../src/articles/author-schema.ts"],"names":["resolvePublicationUrl","createPublicationRoutes"],"mappings":";;;;;AAYO,SAAS,qBAAA,CAAsB,IAAA,EAAqB,SAAA,GAAgC,MAAA,EAAwB;AACjH,EAAA,MAAM,SAAA,GAAY,SAAA,KAAc,SAAA,IAAa,CAAC,CAAC,IAAA,CAAK,eAAA;AACpD,EAAA,MAAM,GAAA,GAAA,CAAO,SAAA,GAAY,IAAA,CAAK,eAAA,GAAkB,KAAK,cAAA,KAAmB,MAAA;AACxE,EAAA,MAAM,GAAA,GAAM,YACR,IAAA,CAAK,mBAAA,IAAuB,KAC5B,IAAA,CAAK,kBAAA,IAAsB,KAAK,KAAA,IAAS,EAAA;AAC7C,EAAA,IAAI,QAAA,GAAW,KAAA;AACf,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,IAAI;AAGF,MAAA,QAAA,GAAW,mBAAmB,IAAA,CAAK,IAAI,IAAI,GAAA,EAAK,0BAA0B,EAAE,QAAQ,CAAA;AAAA,IACtF,CAAA,CAAA,MAAQ;AAAA,IAAqE;AAAA,EAC/E;AACA,EAAA,OAAO,EAAE,GAAA,EAAK,GAAA,EAAK,QAAA,EAAS;AAC9B;AAGO,SAAS,yBAAyB,OAAA,EAAoD;AAC3F,EAAA,OAAO,OAAA,CAAQ,QAAA,GACX,EAAE,OAAA,EAAS,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,QAAO,GAC/F,MAAA;AACN;;;ACVO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAA+E,EAAC,EACxE;AACR,EAAA,MAAM,EAAE,OAAA,GAAU,EAAA,EAAI,QAAA,EAAS,GAAI,OAAA;AAEnC,EAAA,MAAM,SAAmB,CAAC,GAAI,MAAA,CAAO,OAAA,IAAW,EAAG,CAAA;AACnD,EAAA,IAAI,MAAA,CAAO,YAAA,EAAc,MAAA,CAAO,IAAA,CAAK,OAAO,YAAY,CAAA;AACxD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AACtD,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,EAAS,MAAA,CAAO,KAAK,CAAA,oBAAA,EAAuB,MAAA,CAAO,YAAA,CAAa,OAAO,CAAA,CAAE,CAAA;AAClG,EAAA,IAAI,OAAO,YAAA,EAAc,QAAA,SAAiB,IAAA,CAAK,MAAA,CAAO,aAAa,QAAQ,CAAA;AAC3E,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,EAAQ,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA,CAAE,CAAA;AAG/F,EAAA,MAAM,YAAA,GAAe,CAAC,GAAG,IAAI,IAAI,MAAA,CAAO,MAAA,CAAO,OAAO,CAAC,CAAC,CAAA;AAExD,EAAA,MAAM,MAAA,GAA8B;AAAA,IAClC,UAAA,EAAY,oBAAA;AAAA,IACZ,OAAA,EAAS,QAAA;AAAA,IACT,MAAM,MAAA,CAAO,IAAA;AAAA,IACb,GAAA,EAAK,MAAA,CAAO,eAAA,IAAmBA,sCAAA,CAAsBC,wCAAA,CAAwB,OAAO,CAAA,CAAE,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,EAAG,OAAO;AAAA,GACpH;AAEA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,QAAA,GAAW,MAAA,CAAO,KAAA;AAC3C,EAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAA,CAAO,QAAA,GAAW;AAAA,MAChB,OAAA,EAAS,cAAA;AAAA,MACT,IAAA,EAAM,OAAO,OAAA,IAAW,QAAA;AAAA,MACxB,GAAI,OAAA,GAAU,EAAE,GAAA,EAAK,OAAA,KAAY;AAAC,KACpC;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,OAAO,MAAA,CAAO,SAAA,SAAkB,WAAA,GAAc,MAAA,CAAO,aAAa,MAAA,CAAO,GAAA;AACpF,EAAA,IAAI,MAAA,CAAO,UAAA,EAAY,MAAA,CAAO,KAAA,GAAQ,MAAA,CAAO,UAAA;AAC7C,EAAA,IAAI,YAAA,CAAa,MAAA,GAAS,CAAA,EAAG,MAAA,CAAO,MAAA,GAAS,YAAA;AAC7C,EAAA,IAAI,MAAA,CAAO,eAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG,MAAA,CAAO,aAAa,MAAA,CAAO,WAAA;AACpF,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,WAAA,CAAY,SAAS,CAAA,EAAG;AACvD,IAAA,MAAA,CAAO,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACpD,OAAA,EAAS,mCAAA;AAAA,MACT,kBAAA,EAAoB;AAAA,KACtB,CAAE,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACT","file":"chunk-YRCR7WY3.js","sourcesContent":["import type { CSSProperties } from 'react'\nimport type { Article } from './types'\n\nexport interface ArticleArtwork {\n  src: string | undefined\n  alt: string\n  composed: boolean\n}\n\ntype ArtworkSource = Pick<Article, 'title' | 'featured_image' | 'featured_image_alt' | 'editorial_image' | 'editorial_image_alt'>\n\n/** Single source of truth for article artwork versus complete promotional cards. */\nexport function resolveArticleArtwork(post: ArtworkSource, placement: 'article' | 'card' = 'card'): ArticleArtwork {\n  const editorial = placement === 'article' && !!post.editorial_image\n  const src = (editorial ? post.editorial_image : post.featured_image) || undefined\n  const alt = editorial\n    ? post.editorial_image_alt ?? ''\n    : post.featured_image_alt ?? post.title ?? ''\n  let composed = false\n  if (src) {\n    try {\n      // Inspect the path, not a query string that happens to mention a card.\n      // `Blog/Cards/` is the storage folder Sonor writes cards to (a path, not a name).\n      composed = /\\/Blog\\/Cards\\//i.test(new URL(src, 'https://site-kit.invalid').pathname)\n    } catch { /* An unrecognized source retains the normal photograph layout. */ }\n  }\n  return { src, alt, composed }\n}\n\n/** Preserve generated text and graphics across every stock card surface. */\nexport function articleArtworkImageStyle(artwork: ArticleArtwork): CSSProperties | undefined {\n  return artwork.composed\n    ? { display: 'block', height: 'auto', maxHeight: 'none', objectFit: 'contain', transform: 'none' }\n    : undefined\n}\n","/**\n * @sonordev/site-kit/articles — Author JSON-LD (pure)\n *\n * Split out of `./server-core` on purpose. `generateAuthorSchema` is a pure\n * function — it maps a `ArticleAuthor` to a Person schema object and touches no\n * env, no config, and no network. It only ever lived in `server-core` because\n * the other author helpers there (`getAuthorBySlug`, `getAuthorPosts`) do fetch.\n *\n * `AuthorPage` is exported from the client-stamped `@sonordev/site-kit/articles`\n * barrel (see `./index.ts`), so importing this one function from `server-core`\n * dragged that whole server module — its `x-api-key` fetches included — into\n * the browser bundle. Keeping the pure half here means `AuthorPage` can stay in\n * the barrel without pulling a single line of server code with it.\n *\n * Anything added here must stay pure. If it needs an API key or a fetch, it\n * belongs in `./server-core`, not in this file.\n */\n\nimport type { ArticleAuthor } from './types'\nimport { createPublicationRoutes, resolvePublicationUrl, type PublicationRoutingOptions } from './routes'\n\n/**\n * Generate Person JSON-LD schema for an author page\n */\nexport function generateAuthorSchema(\n  author: ArticleAuthor,\n  options: PublicationRoutingOptions & { siteUrl?: string; siteName?: string } = {}\n): object {\n  const { siteUrl = '', siteName } = options\n\n  const sameAs: string[] = [...(author.same_as || [])]\n  if (author.linkedin_url) sameAs.push(author.linkedin_url)\n  if (author.twitter_url) sameAs.push(author.twitter_url)\n  if (author.website_url) sameAs.push(author.website_url)\n  if (author.social_links?.twitter) sameAs.push(`https://twitter.com/${author.social_links.twitter}`)\n  if (author.social_links?.linkedin) sameAs.push(author.social_links.linkedin)\n  if (author.social_links?.github) sameAs.push(`https://github.com/${author.social_links.github}`)\n\n  // Deduplicate\n  const uniqueSameAs = [...new Set(sameAs.filter(Boolean))]\n\n  const schema: Record<string, any> = {\n    '@context': 'https://schema.org',\n    '@type': 'Person',\n    name: author.name,\n    url: author.author_page_url || resolvePublicationUrl(createPublicationRoutes(options).author(author.slug), siteUrl),\n  }\n\n  if (author.title) schema.jobTitle = author.title\n  if (author.company || siteName) {\n    schema.worksFor = {\n      '@type': 'Organization',\n      name: author.company || siteName,\n      ...(siteUrl ? { url: siteUrl } : {}),\n    }\n  }\n  if (author.bio || author.short_bio) schema.description = author.short_bio || author.bio\n  if (author.avatar_url) schema.image = author.avatar_url\n  if (uniqueSameAs.length > 0) schema.sameAs = uniqueSameAs\n  if (author.knows_about && author.knows_about.length > 0) schema.knowsAbout = author.knows_about\n  if (author.credentials && author.credentials.length > 0) {\n    schema.hasCredential = author.credentials.map((c) => ({\n      '@type': 'EducationalOccupationalCredential',\n      credentialCategory: c,\n    }))\n  }\n\n  return schema\n}\n"]}

package/dist/{chunk-F2KW4OJF.mjs → chunk-YWLBQ3L5.mjs}

@@ -2,7 +2,7 @@
 import { DEFAULT_ENGAGE_Z_INDEX } from './chunk-4U5NCKQY.mjs';
 import { getOrCreateVisitorId } from './chunk-ZZQAGCSI.mjs';
 import { resolveAnalyticsTarget } from './chunk-A6UYV475.mjs';
-import { sonorFetch } from './chunk-4C5CZJIN.mjs';
+import { sonorFetch } from './chunk-2YSB4FIC.mjs';
 import React, { useState, useEffect, useCallback, useRef, createElement } from 'react';
 import ReactDOM from 'react-dom';
 import dynamic from 'next/dynamic';
@@ -269,7 +269,7 @@ function DesignRenderer({
   )) });
 }
 var LazyChatWidget = dynamic(
-  () => import('./ChatWidget-G3KOUDX5.mjs').then((m) => ({ default: m.ChatWidget })),
+  () => import('./ChatWidget-6626OPXO.mjs').then((m) => ({ default: m.ChatWidget })),
   { ssr: false }
 );
 function EngageWidget(props) {
@@ -718,5 +718,5 @@ function getDeviceType() {
 }
 
 export { DesignRenderer, EngageWidget };
-//# sourceMappingURL=chunk-F2KW4OJF.mjs.map
-//# sourceMappingURL=chunk-F2KW4OJF.mjs.map
+//# sourceMappingURL=chunk-YWLBQ3L5.mjs.map
+//# sourceMappingURL=chunk-YWLBQ3L5.mjs.map