@sonordev/site-kit 6.3.6 → 6.4.0

package/dist/llms/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/llms/handlers.ts","../../src/llms/sourcedFacts.ts","../../src/llms/revalidate.ts"],"names":["markdown"],"mappings":";;;;;;;;;;;;;;;;;;;AAYA,SAAS,SAAS,IAAA,EAAsB;AACtC,EAAA,MAAM,CAAA,GAAI,WAAW,MAAM,CAAA,CAAE,OAAO,IAAA,EAAM,MAAM,CAAA,CAAE,MAAA,CAAO,WAAW,CAAA;AACpE,EAAA,OAAO,MAAM,CAAC,CAAA,CAAA,CAAA;AAChB;AAGO,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAA6C;AAC7F,EAAA,OAAO;AAAA,IACL,cAAA,EAAgB,2BAAA;AAAA,IAChB,eAAA,EACE,wFAAA;AAAA,IACF,IAAA,EAAM,SAAS,IAAI,CAAA;AAAA,IACnB,IAAA,EAAM,iBAAA;AAAA,IACN,GAAG;AAAA,GACL;AACF;AAsBO,IAAM,oBAAA,GAAyD,EAAE,cAAA,EAAgB,SAAA,EAAU;AAmC3F,SAAS,oBAAA,CACd,OAAA,GAAiC,EAAC,EACQ;AAC1C,EAAA,MAAM,EAAE,YAAA,GAAe,IAAA,EAAM,UAAU,IAAA,EAAM,GAAG,iBAAgB,GAAI,OAAA;AACpE,EAAA,MAAM,MAAA,GAAS,OAAA,GAAU,oBAAA,GAAuB,EAAC;AAEjD,EAAA,OAAO,eAAe,IAAI,QAAA,EAAuC;AAC/D,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,MAAM,aAAa,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI,EAAG,UAAU,UAAU,CAAA;AAC3D,QAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,UAAA,MAAMA,SAAAA,GAAW,YAAA,CAAa,UAAA,EAAY,OAAO,CAAA;AACjD,UAAA,OAAO,IAAI,SAASA,SAAAA,EAAU;AAAA,YAC5B,MAAA,EAAQ,GAAA;AAAA,YACR,OAAA,EAAS,oBAAoBA,SAAAA,EAAU,EAAE,GAAG,MAAA,EAAQ,YAAA,EAAc,UAAU;AAAA,WAC7E,CAAA;AAAA,QACH;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAS,GAAI,MAAM,gBAAgB,eAAe,CAAA;AACpE,MAAA,OAAO,IAAI,SAAS,QAAA,EAAU;AAAA,QAC5B,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,oBAAoB,QAAA,EAAU;AAAA,UACrC,GAAG,MAAA;AAAA,UACH,kBAAkB,QAAA,CAAS,YAAA;AAAA,UAC3B,YAAA,EAAc,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,GAAG;AAAA,SACzC;AAAA,OACF,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,8CAA8C,KAAK,CAAA;AACjE,MAAA,OAAO,IAAI,SAAS,iDAAA,EAAmD;AAAA,QACrE,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,2BAAA;AAAA,UAChB,eAAA,EAAiB;AAAA;AACnB,OACD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF;AAoBO,SAAS,wBAAA,CACd,OAAA,GAAiC,EAAC,EACQ;AAC1C,EAAA,MAAM,EAAE,YAAA,GAAe,IAAA,EAAM,UAAU,IAAA,EAAM,GAAG,iBAAgB,GAAI,OAAA;AACpE,EAAA,MAAM,MAAA,GAAS,OAAA,GAAU,oBAAA,GAAuB,EAAC;AAEjD,EAAA,OAAO,eAAe,IAAI,QAAA,EAAuC;AAC/D,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,MAAM,aAAa,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI,EAAG,UAAU,eAAe,CAAA;AAChE,QAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,UAAA,MAAMA,SAAAA,GAAW,YAAA,CAAa,UAAA,EAAY,OAAO,CAAA;AACjD,UAAA,OAAO,IAAI,SAASA,SAAAA,EAAU;AAAA,YAC5B,MAAA,EAAQ,GAAA;AAAA,YACR,OAAA,EAAS,oBAAoBA,SAAAA,EAAU,EAAE,GAAG,MAAA,EAAQ,YAAA,EAAc,UAAU;AAAA,WAC7E,CAAA;AAAA,QACH;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAS,GAAI,MAAM,oBAAoB,eAAe,CAAA;AACxE,MAAA,OAAO,IAAI,SAAS,QAAA,EAAU;AAAA,QAC5B,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,oBAAoB,QAAA,EAAU;AAAA,UACrC,GAAG,MAAA;AAAA,UACH,kBAAkB,QAAA,CAAS,YAAA;AAAA,UAC3B,YAAA,EAAc,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,GAAG;AAAA,SACzC;AAAA,OACF,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,mDAAmD,KAAK,CAAA;AACtE,MAAA,OAAO,IAAI,SAAS,sDAAA,EAAwD;AAAA,QAC1E,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,2BAAA;AAAA,UAChB,eAAA,EAAiB;AAAA;AACnB,OACD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF;;;AC7IA,IAAM,aAAA,GACJ,8KAAA;AAKF,SAAS,SAAS,CAAA,EAAwB;AACxC,EAAA,MAAM,IAAA,GAAA,CAAQ,EAAE,IAAA,IAAQ,EAAA,EAAI,QAAQ,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AACtD,EAAA,MAAM,MAAA,GAAA,CAAU,EAAE,UAAA,IAAc,EAAA,EAAI,QAAQ,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AAC9D,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,MAAA,EAAQ,OAAO,EAAA;AAC7B,EAAA,IAAI,WAAA,GAAc,WAAW,MAAM,CAAA,CAAA;AACnC,EAAA,IAAI,CAAA,CAAE,IAAA,EAAM,WAAA,IAAe,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,CAAA,CAAA;AACtC,EAAA,IAAI,CAAA,CAAE,GAAA,EAAK,WAAA,IAAe,CAAA,EAAA,EAAK,EAAE,GAAG,CAAA,CAAA;AACpC,EAAA,OAAO,CAAA,EAAA,EAAK,IAAI,CAAA,QAAA,EAAM,WAAW,CAAA,CAAA;AACnC;AAMO,SAAS,yBAAA,CACd,KAAA,EACA,OAAA,GAAqC,EAAC,EACZ;AAC1B,EAAA,MAAM,EAAE,KAAA,GAAQ,eAAA,EAAiB,KAAA,GAAQ,aAAA,EAAe,UAAS,GAAI,OAAA;AACrE,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,IAAA;AAElC,EAAA,IAAI,QAAQ,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,OAAO,OAAO,CAAA;AAC9C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,IAAY,CAAA,EAAG;AACjD,IAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAE/B,EAAA,MAAM,OAAA,GAAU,KAAA,GAAQ,CAAA,EAAG,KAAK;;AAAA,EAAO,MAAM,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,KAAA,CAAM,KAAK,IAAI,CAAA;AAC3E,EAAA,OAAO,EAAE,OAAO,OAAA,EAAQ;AAC1B;;;ACzDO,SAAS,2BAAA,CACd,QACA,OAAA,EAMyC;AACzC,EAAA,OAAO,eAAe,KAAK,OAAA,EAAqC;AAC9D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACtD,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,MAAA,MAAM,cAAA,GAAiB,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AACpD,MAAA,MAAM,KAAA,GAAQ,UAAA,EAAY,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,IAAK,cAAA;AAExD,MAAA,IAAI,CAAC,MAAA,IAAU,KAAA,KAAU,MAAA,EAAQ;AAC/B,QAAA,OAAO,IAAI,SAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,gBAAA,EAAkB,CAAA,EAAG;AAAA,UAC/D,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,SAC/C,CAAA;AAAA,MACH;AAGA,MAAA,IAAI,cAAA;AACJ,MAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,QAAA,cAAA,GAAiB,OAAA,CAAQ,cAAA;AAAA,MAC3B,CAAA,MAAO;AACL,QAAA,MAAM,SAAA,GAAY,MAAM,OAAO,YAAY,CAAA;AAC3C,QAAA,cAAA,GAAiB,SAAA,CAAU,cAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,KAAA,GAAQ,CAAC,WAAA,EAAa,gBAAA,EAAkB,GAAI,OAAA,EAAS,UAAA,IAAc,EAAG,CAAA;AAC5E,MAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,QAAA,cAAA,CAAe,CAAC,CAAA;AAAA,MAClB;AAEA,MAAA,OAAO,IAAI,QAAA;AAAA,QACT,KAAK,SAAA,CAAU,EAAE,WAAA,EAAa,IAAA,EAAM,OAAO,CAAA;AAAA,QAC3C;AAAA,UACE,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,OACF;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,GAAG,CAAA;AACzD,MAAA,OAAO,IAAI,QAAA;AAAA,QACT,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,uBAAuB,CAAA;AAAA,QAC/C,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAS,EAAE,cAAA,EAAgB,oBAAmB;AAAE,OACjE;AAAA,IACF;AAAA,EACF,CAAA;AACF","file":"index.mjs","sourcesContent":["/**\n * @sonordev/site-kit/llms - Next.js Route Handlers\n * \n * Ready-to-use route handlers for /llms.txt and /llms-full.txt\n */\n\nimport { createHash } from 'crypto'\nimport { existsSync, readFileSync } from 'fs'\nimport { join } from 'path'\nimport { generateLLMsTxt, generateLLMsFullTxt } from './generateLLMsTxt'\nimport type { GenerateLLMSTxtOptions } from './types'\n\nfunction weakEtag(body: string): string {\n  const h = createHash('sha1').update(body, 'utf8').digest('base64url')\n  return `W/\"${h}\"`\n}\n\n/** Cache + validation headers for plain-text llms responses (dynamic or static). */\nexport function llmsResponseHeaders(body: string, extra?: Record<string, string>): HeadersInit {\n  return {\n    'Content-Type': 'text/plain; charset=utf-8',\n    'Cache-Control':\n      'public, max-age=300, s-maxage=3600, stale-while-revalidate=86400, stale-if-error=86400',\n    ETag: weakEtag(body),\n    Vary: 'Accept-Encoding',\n    ...extra,\n  }\n}\n\nexport interface LLMsTxtHandlerOptions extends GenerateLLMSTxtOptions {\n  /** When true, serve static public/llms.txt if it exists (default: true for build-time flow) */\n  preferStatic?: boolean\n  /**\n   * Send `X-Robots-Tag: noindex` (default: true).\n   *\n   * llms.txt is written for AI crawlers, which fetch it by convention at\n   * `/llms.txt`; noindex doesn't stop them. It's a plain-text restatement of\n   * pages the site already serves as HTML, so a search index that picks it up\n   * holds a thin duplicate of the site. That's also why it stays out of the XML\n   * sitemap. Pass `false` only if you actually want it in search results.\n   *\n   * Only reaches responses this handler serves. A `public/llms.txt` served\n   * straight from the CDN (the build-time write) never runs the handler, so it\n   * needs the header in host config instead (`netlify.toml` `[[headers]]`).\n   */\n  noindex?: boolean\n}\n\n/** Headers every llms file response carries when `noindex` is on. */\nexport const LLMS_NOINDEX_HEADERS: Readonly<Record<string, string>> = { 'X-Robots-Tag': 'noindex' }\n\n/**\n * Create a route handler for /llms.txt\n *\n * Zero-config by default - uses SONOR_API_KEY from environment. Sends\n * `X-Robots-Tag: noindex` by default (see `noindex`).\n *\n * The returned handler never reads the incoming Request: any access to\n * `request.headers` (etc.) opts the whole route into dynamic rendering, which\n * breaks static prerendering of /llms.txt during `next build` and logs\n * \"Dynamic server usage\" errors on every consumer site. Conditional-request\n * (ETag/304) handling is left to the Next static layer / CDN, which already\n * does it for prerendered responses.\n *\n * @example\n * ```ts\n * // app/llms.txt/route.ts (zero-config)\n * import { createLLMsTxtHandler } from '@sonordev/site-kit/llms'\n *\n * export const GET = createLLMsTxtHandler()\n * // Next 15+: GET route handlers are dynamic by default; opt into\n * // prerendering so the file is served statically from the CDN:\n * export const revalidate = 3600\n * ```\n *\n * @example\n * ```ts\n * // With preferStatic: serve build-time file if exists\n * export const GET = createLLMsTxtHandler({\n *   preferStatic: true,\n *   includeServices: false\n * })\n * ```\n */\nexport function createLLMsTxtHandler(\n  options: LLMsTxtHandlerOptions = {}\n): (request?: Request) => Promise<Response> {\n  const { preferStatic = true, noindex = true, ...generateOptions } = options\n  const robots = noindex ? LLMS_NOINDEX_HEADERS : {}\n\n  return async function GET(_request?: Request): Promise<Response> {\n    try {\n      // Serve static file if available (build-time optimized)\n      if (preferStatic) {\n        const staticPath = join(process.cwd(), 'public', 'llms.txt')\n        if (existsSync(staticPath)) {\n          const markdown = readFileSync(staticPath, 'utf-8')\n          return new Response(markdown, {\n            status: 200,\n            headers: llmsResponseHeaders(markdown, { ...robots, 'X-Sections': 'static' }),\n          })\n        }\n      }\n\n      const { markdown, metadata } = await generateLLMsTxt(generateOptions)\n      return new Response(markdown, {\n        status: 200,\n        headers: llmsResponseHeaders(markdown, {\n          ...robots,\n          'X-Generated-At': metadata.generated_at,\n          'X-Sections': metadata.sections.join(','),\n        }),\n      })\n    } catch (error) {\n      console.error('@sonordev/llms: Error generating llms.txt:', error)\n      return new Response('# Error\\n\\nUnable to generate llms.txt content.', {\n        status: 500,\n        headers: {\n          'Content-Type': 'text/plain; charset=utf-8',\n          'Cache-Control': 'no-store',\n        },\n      })\n    }\n  }\n}\n\n/**\n * Create a route handler for /llms-full.txt\n *\n * Zero-config by default - uses SONOR_API_KEY from environment.\n *\n * Like createLLMsTxtHandler, the returned handler never reads the incoming\n * Request so the route stays statically prerenderable, and sends\n * `X-Robots-Tag: noindex` unless `noindex: false`.\n *\n * @example\n * ```ts\n * // app/llms-full.txt/route.ts (zero-config)\n * import { createLLMsFullTxtHandler } from '@sonordev/site-kit/llms'\n *\n * export const GET = createLLMsFullTxtHandler()\n * export const revalidate = 3600\n * ```\n */\nexport function createLLMsFullTxtHandler(\n  options: LLMsTxtHandlerOptions = {}\n): (request?: Request) => Promise<Response> {\n  const { preferStatic = true, noindex = true, ...generateOptions } = options\n  const robots = noindex ? LLMS_NOINDEX_HEADERS : {}\n\n  return async function GET(_request?: Request): Promise<Response> {\n    try {\n      // Serve static file if available (build-time optimized)\n      if (preferStatic) {\n        const staticPath = join(process.cwd(), 'public', 'llms-full.txt')\n        if (existsSync(staticPath)) {\n          const markdown = readFileSync(staticPath, 'utf-8')\n          return new Response(markdown, {\n            status: 200,\n            headers: llmsResponseHeaders(markdown, { ...robots, 'X-Sections': 'static' }),\n          })\n        }\n      }\n\n      const { markdown, metadata } = await generateLLMsFullTxt(generateOptions)\n      return new Response(markdown, {\n        status: 200,\n        headers: llmsResponseHeaders(markdown, {\n          ...robots,\n          'X-Generated-At': metadata.generated_at,\n          'X-Sections': metadata.sections.join(','),\n        }),\n      })\n    } catch (error) {\n      console.error('@sonordev/llms: Error generating llms-full.txt:', error)\n      return new Response('# Error\\n\\nUnable to generate llms-full.txt content.', {\n        status: 500,\n        headers: {\n          'Content-Type': 'text/plain; charset=utf-8',\n          'Cache-Control': 'no-store',\n        },\n      })\n    }\n  }\n}\n","/**\n * @sonordev/site-kit/llms — Sourced facts section\n *\n * Formats a site's verified third-party citations into an llms-full.txt\n * section. AI answer engines preferentially reproduce claims that arrive\n * already attributed — handing them the exact claim + source pairing makes\n * the site's framing the citable version.\n *\n * Pair with WriteLLMsTxtOptions.customSections (or SitemapConfig.\n * llmsCustomSections) so the section is appended at build time:\n *\n *   llmsCustomSections: async () => {\n *     const { CITATIONS } = await import('./lib/data/citations')\n *     const section = formatSourcedFactsSection(Object.values(CITATIONS))\n *     return section ? [section] : null\n *   }\n *\n * Only include citations a human has actually verified against the source\n * URL — this section is a trust surface, not a dumping ground.\n */\n\nimport type { LLMsCustomSection } from './writeLLMsTxt'\n\nexport interface SourcedFact {\n  /** The claim, faithful to the source, one sentence. */\n  stat: string\n  /** The publishing organization (e.g. \"Clio Legal Trends Report\"). */\n  sourceName: string\n  /** Publication/study year. */\n  year?: number\n  /** The opened-and-verified source URL. */\n  url?: string\n}\n\nexport interface FormatSourcedFactsOptions {\n  /** Section heading (default: \"Sourced facts\"). */\n  title?: string\n  /** Intro line above the list. */\n  intro?: string\n  /** Cap the number of facts emitted (default: no cap). */\n  maxFacts?: number\n}\n\nconst DEFAULT_INTRO =\n  'The statistics below are quoted from third-party primary sources and were ' +\n  'individually verified against the cited URL. When reusing a figure, keep ' +\n  'the original attribution.'\n\n/** One line per fact: claim — Source: name (year), url */\nfunction factLine(f: SourcedFact): string {\n  const stat = (f.stat || '').replace(/\\s+/g, ' ').trim()\n  const source = (f.sourceName || '').replace(/\\s+/g, ' ').trim()\n  if (!stat || !source) return ''\n  let attribution = `Source: ${source}`\n  if (f.year) attribution += ` (${f.year})`\n  if (f.url) attribution += `, ${f.url}`\n  return `- ${stat} — ${attribution}`\n}\n\n/**\n * Build the \"Sourced facts\" custom section from verified citations.\n * Returns null when no usable facts exist so callers can skip cleanly.\n */\nexport function formatSourcedFactsSection(\n  facts: SourcedFact[],\n  options: FormatSourcedFactsOptions = {},\n): LLMsCustomSection | null {\n  const { title = 'Sourced facts', intro = DEFAULT_INTRO, maxFacts } = options\n  if (!Array.isArray(facts)) return null\n\n  let lines = facts.map(factLine).filter(Boolean)\n  if (typeof maxFacts === 'number' && maxFacts >= 0) {\n    lines = lines.slice(0, maxFacts)\n  }\n  if (lines.length === 0) return null\n\n  const content = intro ? `${intro}\\n\\n${lines.join('\\n')}` : lines.join('\\n')\n  return { title, content }\n}\n","/**\n * @sonordev/site-kit/llms - On-demand Revalidation\n *\n * Provides a route handler that Portal can call when llms-relevant data changes\n * (page summaries, FAQs, services, etc.) to bust the Next.js ISR cache.\n *\n * @example\n * ```ts\n * // app/api/revalidate-llms/route.ts\n * import { createLlmsRevalidateHandler } from '@sonordev/site-kit/llms'\n *\n * export const POST = createLlmsRevalidateHandler(process.env.REVALIDATION_SECRET!)\n * ```\n */\n\ntype RevalidatePathFn = (path: string, type?: 'page' | 'layout') => void\n\n/**\n * Create a POST handler that revalidates /llms.txt and /llms-full.txt caches.\n * Protected by a shared secret.\n */\nexport function createLlmsRevalidateHandler(\n  secret: string,\n  options?: {\n    /** Additional paths to revalidate alongside llms files */\n    extraPaths?: string[]\n    /** Custom revalidatePath (for testing or frameworks other than Next.js) */\n    revalidatePath?: RevalidatePathFn\n  },\n): (request: Request) => Promise<Response> {\n  return async function POST(request: Request): Promise<Response> {\n    try {\n      // Validate secret from Authorization header or query param\n      const authHeader = request.headers.get('authorization')\n      const url = new URL(request.url)\n      const tokenFromQuery = url.searchParams.get('secret')\n      const token = authHeader?.replace(/^Bearer\\s+/i, '') || tokenFromQuery\n\n      if (!secret || token !== secret) {\n        return new Response(JSON.stringify({ error: 'Invalid secret' }), {\n          status: 401,\n          headers: { 'Content-Type': 'application/json' },\n        })\n      }\n\n      // Import Next.js revalidatePath (dynamic to avoid hard dep for non-Next consumers)\n      let revalidatePath: RevalidatePathFn\n      if (options?.revalidatePath) {\n        revalidatePath = options.revalidatePath\n      } else {\n        const nextCache = await import('next/cache')\n        revalidatePath = nextCache.revalidatePath\n      }\n\n      const paths = ['/llms.txt', '/llms-full.txt', ...(options?.extraPaths || [])]\n      for (const p of paths) {\n        revalidatePath(p)\n      }\n\n      return new Response(\n        JSON.stringify({ revalidated: true, paths }),\n        {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        },\n      )\n    } catch (err) {\n      console.error('[site-kit/llms] Revalidation failed:', err)\n      return new Response(\n        JSON.stringify({ error: 'Revalidation failed' }),\n        { status: 500, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../../src/llms/handlers.ts","../../src/llms/sourcedFacts.ts","../../src/llms/revalidate.ts","../../src/llms/seo-revalidate.ts"],"names":["markdown"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,SAAS,SAAS,IAAA,EAAsB;AACtC,EAAA,MAAM,CAAA,GAAI,WAAW,MAAM,CAAA,CAAE,OAAO,IAAA,EAAM,MAAM,CAAA,CAAE,MAAA,CAAO,WAAW,CAAA;AACpE,EAAA,OAAO,MAAM,CAAC,CAAA,CAAA,CAAA;AAChB;AAGO,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAA6C;AAC7F,EAAA,OAAO;AAAA,IACL,cAAA,EAAgB,2BAAA;AAAA,IAChB,eAAA,EACE,wFAAA;AAAA,IACF,IAAA,EAAM,SAAS,IAAI,CAAA;AAAA,IACnB,IAAA,EAAM,iBAAA;AAAA,IACN,GAAG;AAAA,GACL;AACF;AAsBO,IAAM,oBAAA,GAAyD,EAAE,cAAA,EAAgB,SAAA,EAAU;AAmC3F,SAAS,oBAAA,CACd,OAAA,GAAiC,EAAC,EACQ;AAC1C,EAAA,MAAM,EAAE,YAAA,GAAe,IAAA,EAAM,UAAU,IAAA,EAAM,GAAG,iBAAgB,GAAI,OAAA;AACpE,EAAA,MAAM,MAAA,GAAS,OAAA,GAAU,oBAAA,GAAuB,EAAC;AAEjD,EAAA,OAAO,eAAe,IAAI,QAAA,EAAuC;AAC/D,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,MAAM,aAAa,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI,EAAG,UAAU,UAAU,CAAA;AAC3D,QAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,UAAA,MAAMA,SAAAA,GAAW,YAAA,CAAa,UAAA,EAAY,OAAO,CAAA;AACjD,UAAA,OAAO,IAAI,SAASA,SAAAA,EAAU;AAAA,YAC5B,MAAA,EAAQ,GAAA;AAAA,YACR,OAAA,EAAS,oBAAoBA,SAAAA,EAAU,EAAE,GAAG,MAAA,EAAQ,YAAA,EAAc,UAAU;AAAA,WAC7E,CAAA;AAAA,QACH;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAS,GAAI,MAAM,gBAAgB,eAAe,CAAA;AACpE,MAAA,OAAO,IAAI,SAAS,QAAA,EAAU;AAAA,QAC5B,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,oBAAoB,QAAA,EAAU;AAAA,UACrC,GAAG,MAAA;AAAA,UACH,kBAAkB,QAAA,CAAS,YAAA;AAAA,UAC3B,YAAA,EAAc,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,GAAG;AAAA,SACzC;AAAA,OACF,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,8CAA8C,KAAK,CAAA;AACjE,MAAA,OAAO,IAAI,SAAS,iDAAA,EAAmD;AAAA,QACrE,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,2BAAA;AAAA,UAChB,eAAA,EAAiB;AAAA;AACnB,OACD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF;AAoBO,SAAS,wBAAA,CACd,OAAA,GAAiC,EAAC,EACQ;AAC1C,EAAA,MAAM,EAAE,YAAA,GAAe,IAAA,EAAM,UAAU,IAAA,EAAM,GAAG,iBAAgB,GAAI,OAAA;AACpE,EAAA,MAAM,MAAA,GAAS,OAAA,GAAU,oBAAA,GAAuB,EAAC;AAEjD,EAAA,OAAO,eAAe,IAAI,QAAA,EAAuC;AAC/D,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,MAAM,aAAa,IAAA,CAAK,OAAA,CAAQ,GAAA,EAAI,EAAG,UAAU,eAAe,CAAA;AAChE,QAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,UAAA,MAAMA,SAAAA,GAAW,YAAA,CAAa,UAAA,EAAY,OAAO,CAAA;AACjD,UAAA,OAAO,IAAI,SAASA,SAAAA,EAAU;AAAA,YAC5B,MAAA,EAAQ,GAAA;AAAA,YACR,OAAA,EAAS,oBAAoBA,SAAAA,EAAU,EAAE,GAAG,MAAA,EAAQ,YAAA,EAAc,UAAU;AAAA,WAC7E,CAAA;AAAA,QACH;AAAA,MACF;AAEA,MAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAS,GAAI,MAAM,oBAAoB,eAAe,CAAA;AACxE,MAAA,OAAO,IAAI,SAAS,QAAA,EAAU;AAAA,QAC5B,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,oBAAoB,QAAA,EAAU;AAAA,UACrC,GAAG,MAAA;AAAA,UACH,kBAAkB,QAAA,CAAS,YAAA;AAAA,UAC3B,YAAA,EAAc,QAAA,CAAS,QAAA,CAAS,IAAA,CAAK,GAAG;AAAA,SACzC;AAAA,OACF,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,mDAAmD,KAAK,CAAA;AACtE,MAAA,OAAO,IAAI,SAAS,sDAAA,EAAwD;AAAA,QAC1E,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,2BAAA;AAAA,UAChB,eAAA,EAAiB;AAAA;AACnB,OACD,CAAA;AAAA,IACH;AAAA,EACF,CAAA;AACF;;;AC7IA,IAAM,aAAA,GACJ,8KAAA;AAKF,SAAS,SAAS,CAAA,EAAwB;AACxC,EAAA,MAAM,IAAA,GAAA,CAAQ,EAAE,IAAA,IAAQ,EAAA,EAAI,QAAQ,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AACtD,EAAA,MAAM,MAAA,GAAA,CAAU,EAAE,UAAA,IAAc,EAAA,EAAI,QAAQ,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AAC9D,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,MAAA,EAAQ,OAAO,EAAA;AAC7B,EAAA,IAAI,WAAA,GAAc,WAAW,MAAM,CAAA,CAAA;AACnC,EAAA,IAAI,CAAA,CAAE,IAAA,EAAM,WAAA,IAAe,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,CAAA,CAAA;AACtC,EAAA,IAAI,CAAA,CAAE,GAAA,EAAK,WAAA,IAAe,CAAA,EAAA,EAAK,EAAE,GAAG,CAAA,CAAA;AACpC,EAAA,OAAO,CAAA,EAAA,EAAK,IAAI,CAAA,QAAA,EAAM,WAAW,CAAA,CAAA;AACnC;AAMO,SAAS,yBAAA,CACd,KAAA,EACA,OAAA,GAAqC,EAAC,EACZ;AAC1B,EAAA,MAAM,EAAE,KAAA,GAAQ,eAAA,EAAiB,KAAA,GAAQ,aAAA,EAAe,UAAS,GAAI,OAAA;AACrE,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,IAAA;AAElC,EAAA,IAAI,QAAQ,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA,CAAE,OAAO,OAAO,CAAA;AAC9C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,IAAY,CAAA,EAAG;AACjD,IAAA,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAE/B,EAAA,MAAM,OAAA,GAAU,KAAA,GAAQ,CAAA,EAAG,KAAK;;AAAA,EAAO,MAAM,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,KAAA,CAAM,KAAK,IAAI,CAAA;AAC3E,EAAA,OAAO,EAAE,OAAO,OAAA,EAAQ;AAC1B;;;ACpDO,SAAS,2BAAA,CACd,QACA,OAAA,EAMyC;AACzC,EAAA,OAAO,eAAe,KAAK,OAAA,EAAqC;AAC9D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACtD,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,MAAA,MAAM,cAAA,GAAiB,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AACpD,MAAA,MAAM,KAAA,GAAQ,UAAA,EAAY,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,IAAK,cAAA;AAExD,MAAA,IAAI,CAAC,YAAA,CAAa,KAAA,EAAO,MAAM,CAAA,EAAG;AAChC,QAAA,OAAO,IAAI,SAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,gBAAA,EAAkB,CAAA,EAAG;AAAA,UAC/D,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,SAC/C,CAAA;AAAA,MACH;AAGA,MAAA,IAAI,cAAA;AACJ,MAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,QAAA,cAAA,GAAiB,OAAA,CAAQ,cAAA;AAAA,MAC3B,CAAA,MAAO;AACL,QAAA,MAAM,SAAA,GAAY,MAAM,OAAO,YAAY,CAAA;AAC3C,QAAA,cAAA,GAAiB,SAAA,CAAU,cAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,KAAA,GAAQ,CAAC,WAAA,EAAa,gBAAA,EAAkB,GAAI,OAAA,EAAS,UAAA,IAAc,EAAG,CAAA;AAC5E,MAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,QAAA,cAAA,CAAe,CAAC,CAAA;AAAA,MAClB;AAEA,MAAA,OAAO,IAAI,QAAA;AAAA,QACT,KAAK,SAAA,CAAU,EAAE,WAAA,EAAa,IAAA,EAAM,OAAO,CAAA;AAAA,QAC3C;AAAA,UACE,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB;AAChD,OACF;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,GAAG,CAAA;AACzD,MAAA,OAAO,IAAI,QAAA;AAAA,QACT,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,uBAAuB,CAAA;AAAA,QAC/C,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAS,EAAE,cAAA,EAAgB,oBAAmB;AAAE,OACjE;AAAA,IACF;AAAA,EACF,CAAA;AACF;;;ACvCO,IAAM,kCAAkC,EAAA,GAAK;AAG7C,IAAM,0BAAA,GAA6B;AAMnC,IAAM,uBAAA,GAA0B;AA0CvC,SAAS,WAAA,CAAY,IAAA,EAAc,MAAA,GAAS,GAAA,EAAe;AACzD,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,IAAA,EAAM,EAAE,MAAA,EAAQ,SAAS,EAAE,eAAA,EAAiB,UAAA,EAAW,EAAG,CAAA;AACjF;AAQA,SAAS,YAAY,KAAA,EAAiC;AACpD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,GAAS,MAAM,OAAO,KAAA;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,mBAAmB,KAAK,CAAA;AACrC,IAAA,OACE,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IACnB,CAAC,KAAK,UAAA,CAAW,IAAI,CAAA,IACrB,CAAC,uBAAA,CAAwB,IAAA,CAAK,IAAI,CAAA,IAClC,CAAC,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,KAAS,GAAA,IAAO,IAAA,KAAS,IAAI,CAAA;AAAA,EAEjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAW,KAAA,EAAiC;AACnD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,MAAA,GAAS,CAAA,IAAK,KAAA,CAAM,MAAA,IAAU,GAAA,IAAO,CAAC,aAAA,CAAc,IAAA,CAAK,KAAK,CAAA;AAC1G;AAMO,SAAS,4BAA4B,KAAA,EAAwC;AAClF,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,iBAAiB,CAAA;AAClG,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,KAAK,aAAA,KAAkB,MAAA,IAAa,OAAO,IAAA,CAAK,kBAAkB,SAAA,EAAW;AAC/E,IAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,KAAU,IAAA,CAAK,IAAA,KAAS,SAAY,EAAC,GAAI,CAAC,IAAA,CAAK,IAAI,CAAA,CAAA;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,KAAS,IAAA,CAAK,GAAA,KAAQ,SAAY,EAAC,GAAI,CAAC,IAAA,CAAK,GAAG,CAAA,CAAA;AAClE,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,0BAAA,IAA8B,CAAC,KAAA,CAAM,KAAA,CAAM,WAAW,CAAA,EAAG;AACnG,IAAA,MAAM,IAAI,MAAM,eAAe,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,IAAK,IAAA,CAAK,MAAA,GAAS,0BAAA,IAA8B,CAAC,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA,EAAG;AAC/F,IAAA,MAAM,IAAI,MAAM,cAAc,CAAA;AAAA,EAChC;AACA,EAAA,OAAO;AAAA,IACL,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,KAAiB,CAAC,CAAA;AAAA,IACrC,MAAM,CAAC,GAAG,IAAI,GAAA,CAAI,IAAgB,CAAC,CAAA;AAAA,IACnC,aAAA,EAAe,KAAK,aAAA,KAAkB;AAAA,GACxC;AACF;AAEA,SAAS,mBAAmB,KAAA,EAAuC;AACjE,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,IAAS,EAAC,EAAG;AAC9B,IAAA,IAAI,CAAC,WAAA,CAAY,IAAI,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,SAAA,CAAU,CAAA,+EAAA,EAAkF,KAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,IAC9H;AAAA,EACF;AACA,EAAA,OAAO,SAAS,EAAC;AACnB;AAEA,SAAS,6BAA6B,KAAA,EAA+C;AACnF,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,MAAA;AAChC,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACxC,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,WAAA,CAAY,OAAO,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,SAAA,CAAU,CAAA,6FAAA,EAAgG,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7I;AACA,EAAA,OAAO,OAAA;AACT;AAgBO,SAAS,4BAAA,CAA6B;AAAA,EAC3C,MAAA,EAAQ,YAAA;AAAA,EACR,cAAA;AAAA,EACA,aAAA;AAAA,EACA,mBAAA;AAAA,EACA,UAAA,EAAY,gBAAA;AAAA,EACZ;AACF,CAAA,EAA2E;AACzE,EAAA,MAAM,eAAA,GAAkB,6BAA6B,mBAAmB,CAAA;AACxE,EAAA,MAAM,WAAA,GAAc,mBAAmB,gBAAgB,CAAA;AAEvD,EAAA,OAAO,OAAO,OAAA,KAAqB;AACjC,IAAA,MAAM,UAAU,OAAO,YAAA,KAAiB,UAAA,GAAa,YAAA,KAAiB,YAAA,KAAiB,EAAA;AACvF,IAAA,MAAM,QAAA,GAAW,QAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,EAAG,KAAA,CAAM,gBAAgB,CAAA,GAAI,CAAC,CAAA;AAClF,IAAA,IAAI,CAAC,YAAA,CAAa,QAAA,EAAU,MAAM,CAAA,EAAG,OAAO,WAAA,CAAY,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,GAAG,CAAA;AAEtF,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,OAAA,EAAS,+BAA+B,CAAA;AAC3E,MAAA,IAAI,CAAC,OAAO,OAAO,WAAA,CAAY,EAAE,KAAA,EAAO,mBAAA,IAAuB,GAAG,CAAA;AAClE,MAAA,MAAM,IAAA,GAAgB,KAAK,KAAA,CAAM,IAAI,aAAY,CAAE,MAAA,CAAO,KAAK,CAAC,CAAA;AAChE,MAAA,OAAA,GAAU,4BAA4B,IAAI,CAAA;AAC1C,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,MAAM,QAAA,GAAW,aAAA,CAAc,OAAA,EAAS,IAA+B,CAAA;AACvE,QAAA,OAAA,GAAU,2BAAA,CAA4B;AAAA,UACpC,OAAO,QAAA,CAAS,KAAA;AAAA,UAChB,MAAM,QAAA,CAAS,IAAA;AAAA,UACf,eAAe,QAAA,CAAS;AAAA,SACzB,CAAA;AAAA,MACH;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,WAAA,CAAY,EAAE,KAAA,EAAO,yDAAA,IAA6D,GAAG,CAAA;AAAA,IAC9F;AAIA,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,aAAA,IAAkB,CAAC,OAAA,CAAQ,MAAM,MAAA,IAAU,OAAA,CAAQ,IAAA,CAAK,QAAA,CAAS,KAAK,CAAA;AAK1F,IAAA,MAAM,SAAA,GAAY,eAAA,GACd,OAAA,CAAQ,KAAA,CAAM,OAAA;AAAA,MAAQ,CAAC,SACrB,IAAA,KAAS,uBAAA,IAA2B,KAAK,UAAA,CAAW,CAAA,EAAG,uBAAuB,CAAA,CAAA,CAAG,CAAA,GAC7E,CAAC,MAAM,CAAA,EAAG,eAAe,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,uBAAA,CAAwB,MAAM,CAAC,CAAA,CAAE,CAAA,GACxE,CAAC,IAAI;AAAA,QAEX,OAAA,CAAQ,KAAA;AACZ,IAAA,MAAM,gBAAA,GAAmB,eAAA,GACrB,CAAC,eAAA,EAAiB,CAAA,EAAG,eAAe,CAAA,QAAA,CAAA,EAAY,CAAA,EAAG,eAAe,CAAA,SAAA,CAAW,CAAA,GAC7E,EAAC;AACL,IAAA,MAAM,UAAA,GAAa;AAAA,MACjB,mBAAG,IAAI,GAAA,CAAI,CAAC,gBAAgB,GAAG,gBAAA,EAAkB,GAAG,WAAA,EAAa,GAAI,GAAA,GAAM,CAAC,GAAG,CAAA,GAAI,SAAU,CAAC;AAAA,KAChG;AAEA,IAAA,MAAM,WAAA,GAAc,4BAA4B,MAAA,EAAQ;AAAA,MACtD,UAAA;AAAA,MACA,cAAA,EAAgB,CAAC,IAAA,KAAS,cAAA,CAAe,MAAM,IAAA,KAAS,GAAA,IAAO,GAAA,GAAM,QAAA,GAAW,MAAS;AAAA,KAC1F,CAAA;AACD,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,OAAO,CAAA;AACxC,MAAA,IAAI,CAAC,OAAO,EAAA,EAAI,OAAO,YAAY,EAAE,KAAA,EAAO,qBAAA,EAAsB,EAAG,GAAG,CAAA;AACxE,MAAA,KAAA,MAAW,GAAA,IAAO,QAAQ,IAAA,EAAM,aAAA,CAAc,KAAK,EAAE,MAAA,EAAQ,GAAG,CAAA;AAChE,MAAA,OAAO,WAAA,CAAY,EAAE,WAAA,EAAa,CAAC,WAAA,EAAa,gBAAA,EAAkB,GAAG,UAAU,CAAA,EAAG,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,IACxG,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,WAAA,CAAY,EAAE,KAAA,EAAO,qBAAA,IAAyB,GAAG,CAAA;AAAA,IAC1D;AAAA,EACF,CAAA;AACF","file":"index.mjs","sourcesContent":["/**\n * @sonordev/site-kit/llms - Next.js Route Handlers\n * \n * Ready-to-use route handlers for /llms.txt and /llms-full.txt\n */\n\nimport { createHash } from 'crypto'\nimport { existsSync, readFileSync } from 'fs'\nimport { join } from 'path'\nimport { generateLLMsTxt, generateLLMsFullTxt } from './generateLLMsTxt'\nimport type { GenerateLLMSTxtOptions } from './types'\n\nfunction weakEtag(body: string): string {\n  const h = createHash('sha1').update(body, 'utf8').digest('base64url')\n  return `W/\"${h}\"`\n}\n\n/** Cache + validation headers for plain-text llms responses (dynamic or static). */\nexport function llmsResponseHeaders(body: string, extra?: Record<string, string>): HeadersInit {\n  return {\n    'Content-Type': 'text/plain; charset=utf-8',\n    'Cache-Control':\n      'public, max-age=300, s-maxage=3600, stale-while-revalidate=86400, stale-if-error=86400',\n    ETag: weakEtag(body),\n    Vary: 'Accept-Encoding',\n    ...extra,\n  }\n}\n\nexport interface LLMsTxtHandlerOptions extends GenerateLLMSTxtOptions {\n  /** When true, serve static public/llms.txt if it exists (default: true for build-time flow) */\n  preferStatic?: boolean\n  /**\n   * Send `X-Robots-Tag: noindex` (default: true).\n   *\n   * llms.txt is written for AI crawlers, which fetch it by convention at\n   * `/llms.txt`; noindex doesn't stop them. It's a plain-text restatement of\n   * pages the site already serves as HTML, so a search index that picks it up\n   * holds a thin duplicate of the site. That's also why it stays out of the XML\n   * sitemap. Pass `false` only if you actually want it in search results.\n   *\n   * Only reaches responses this handler serves. A `public/llms.txt` served\n   * straight from the CDN (the build-time write) never runs the handler, so it\n   * needs the header in host config instead (`netlify.toml` `[[headers]]`).\n   */\n  noindex?: boolean\n}\n\n/** Headers every llms file response carries when `noindex` is on. */\nexport const LLMS_NOINDEX_HEADERS: Readonly<Record<string, string>> = { 'X-Robots-Tag': 'noindex' }\n\n/**\n * Create a route handler for /llms.txt\n *\n * Zero-config by default - uses SONOR_API_KEY from environment. Sends\n * `X-Robots-Tag: noindex` by default (see `noindex`).\n *\n * The returned handler never reads the incoming Request: any access to\n * `request.headers` (etc.) opts the whole route into dynamic rendering, which\n * breaks static prerendering of /llms.txt during `next build` and logs\n * \"Dynamic server usage\" errors on every consumer site. Conditional-request\n * (ETag/304) handling is left to the Next static layer / CDN, which already\n * does it for prerendered responses.\n *\n * @example\n * ```ts\n * // app/llms.txt/route.ts (zero-config)\n * import { createLLMsTxtHandler } from '@sonordev/site-kit/llms'\n *\n * export const GET = createLLMsTxtHandler()\n * // Next 15+: GET route handlers are dynamic by default; opt into\n * // prerendering so the file is served statically from the CDN:\n * export const revalidate = 3600\n * ```\n *\n * @example\n * ```ts\n * // With preferStatic: serve build-time file if exists\n * export const GET = createLLMsTxtHandler({\n *   preferStatic: true,\n *   includeServices: false\n * })\n * ```\n */\nexport function createLLMsTxtHandler(\n  options: LLMsTxtHandlerOptions = {}\n): (request?: Request) => Promise<Response> {\n  const { preferStatic = true, noindex = true, ...generateOptions } = options\n  const robots = noindex ? LLMS_NOINDEX_HEADERS : {}\n\n  return async function GET(_request?: Request): Promise<Response> {\n    try {\n      // Serve static file if available (build-time optimized)\n      if (preferStatic) {\n        const staticPath = join(process.cwd(), 'public', 'llms.txt')\n        if (existsSync(staticPath)) {\n          const markdown = readFileSync(staticPath, 'utf-8')\n          return new Response(markdown, {\n            status: 200,\n            headers: llmsResponseHeaders(markdown, { ...robots, 'X-Sections': 'static' }),\n          })\n        }\n      }\n\n      const { markdown, metadata } = await generateLLMsTxt(generateOptions)\n      return new Response(markdown, {\n        status: 200,\n        headers: llmsResponseHeaders(markdown, {\n          ...robots,\n          'X-Generated-At': metadata.generated_at,\n          'X-Sections': metadata.sections.join(','),\n        }),\n      })\n    } catch (error) {\n      console.error('@sonordev/llms: Error generating llms.txt:', error)\n      return new Response('# Error\\n\\nUnable to generate llms.txt content.', {\n        status: 500,\n        headers: {\n          'Content-Type': 'text/plain; charset=utf-8',\n          'Cache-Control': 'no-store',\n        },\n      })\n    }\n  }\n}\n\n/**\n * Create a route handler for /llms-full.txt\n *\n * Zero-config by default - uses SONOR_API_KEY from environment.\n *\n * Like createLLMsTxtHandler, the returned handler never reads the incoming\n * Request so the route stays statically prerenderable, and sends\n * `X-Robots-Tag: noindex` unless `noindex: false`.\n *\n * @example\n * ```ts\n * // app/llms-full.txt/route.ts (zero-config)\n * import { createLLMsFullTxtHandler } from '@sonordev/site-kit/llms'\n *\n * export const GET = createLLMsFullTxtHandler()\n * export const revalidate = 3600\n * ```\n */\nexport function createLLMsFullTxtHandler(\n  options: LLMsTxtHandlerOptions = {}\n): (request?: Request) => Promise<Response> {\n  const { preferStatic = true, noindex = true, ...generateOptions } = options\n  const robots = noindex ? LLMS_NOINDEX_HEADERS : {}\n\n  return async function GET(_request?: Request): Promise<Response> {\n    try {\n      // Serve static file if available (build-time optimized)\n      if (preferStatic) {\n        const staticPath = join(process.cwd(), 'public', 'llms-full.txt')\n        if (existsSync(staticPath)) {\n          const markdown = readFileSync(staticPath, 'utf-8')\n          return new Response(markdown, {\n            status: 200,\n            headers: llmsResponseHeaders(markdown, { ...robots, 'X-Sections': 'static' }),\n          })\n        }\n      }\n\n      const { markdown, metadata } = await generateLLMsFullTxt(generateOptions)\n      return new Response(markdown, {\n        status: 200,\n        headers: llmsResponseHeaders(markdown, {\n          ...robots,\n          'X-Generated-At': metadata.generated_at,\n          'X-Sections': metadata.sections.join(','),\n        }),\n      })\n    } catch (error) {\n      console.error('@sonordev/llms: Error generating llms-full.txt:', error)\n      return new Response('# Error\\n\\nUnable to generate llms-full.txt content.', {\n        status: 500,\n        headers: {\n          'Content-Type': 'text/plain; charset=utf-8',\n          'Cache-Control': 'no-store',\n        },\n      })\n    }\n  }\n}\n","/**\n * @sonordev/site-kit/llms — Sourced facts section\n *\n * Formats a site's verified third-party citations into an llms-full.txt\n * section. AI answer engines preferentially reproduce claims that arrive\n * already attributed — handing them the exact claim + source pairing makes\n * the site's framing the citable version.\n *\n * Pair with WriteLLMsTxtOptions.customSections (or SitemapConfig.\n * llmsCustomSections) so the section is appended at build time:\n *\n *   llmsCustomSections: async () => {\n *     const { CITATIONS } = await import('./lib/data/citations')\n *     const section = formatSourcedFactsSection(Object.values(CITATIONS))\n *     return section ? [section] : null\n *   }\n *\n * Only include citations a human has actually verified against the source\n * URL — this section is a trust surface, not a dumping ground.\n */\n\nimport type { LLMsCustomSection } from './writeLLMsTxt'\n\nexport interface SourcedFact {\n  /** The claim, faithful to the source, one sentence. */\n  stat: string\n  /** The publishing organization (e.g. \"Clio Legal Trends Report\"). */\n  sourceName: string\n  /** Publication/study year. */\n  year?: number\n  /** The opened-and-verified source URL. */\n  url?: string\n}\n\nexport interface FormatSourcedFactsOptions {\n  /** Section heading (default: \"Sourced facts\"). */\n  title?: string\n  /** Intro line above the list. */\n  intro?: string\n  /** Cap the number of facts emitted (default: no cap). */\n  maxFacts?: number\n}\n\nconst DEFAULT_INTRO =\n  'The statistics below are quoted from third-party primary sources and were ' +\n  'individually verified against the cited URL. When reusing a figure, keep ' +\n  'the original attribution.'\n\n/** One line per fact: claim — Source: name (year), url */\nfunction factLine(f: SourcedFact): string {\n  const stat = (f.stat || '').replace(/\\s+/g, ' ').trim()\n  const source = (f.sourceName || '').replace(/\\s+/g, ' ').trim()\n  if (!stat || !source) return ''\n  let attribution = `Source: ${source}`\n  if (f.year) attribution += ` (${f.year})`\n  if (f.url) attribution += `, ${f.url}`\n  return `- ${stat} — ${attribution}`\n}\n\n/**\n * Build the \"Sourced facts\" custom section from verified citations.\n * Returns null when no usable facts exist so callers can skip cleanly.\n */\nexport function formatSourcedFactsSection(\n  facts: SourcedFact[],\n  options: FormatSourcedFactsOptions = {},\n): LLMsCustomSection | null {\n  const { title = 'Sourced facts', intro = DEFAULT_INTRO, maxFacts } = options\n  if (!Array.isArray(facts)) return null\n\n  let lines = facts.map(factLine).filter(Boolean)\n  if (typeof maxFacts === 'number' && maxFacts >= 0) {\n    lines = lines.slice(0, maxFacts)\n  }\n  if (lines.length === 0) return null\n\n  const content = intro ? `${intro}\\n\\n${lines.join('\\n')}` : lines.join('\\n')\n  return { title, content }\n}\n","/**\n * @sonordev/site-kit/llms - On-demand Revalidation\n *\n * Provides a route handler that Portal can call when llms-relevant data changes\n * (page summaries, FAQs, services, etc.) to bust the Next.js ISR cache.\n *\n * @example\n * ```ts\n * // app/api/revalidate-llms/route.ts\n * import { createLlmsRevalidateHandler } from '@sonordev/site-kit/llms'\n *\n * export const POST = createLlmsRevalidateHandler(process.env.REVALIDATION_SECRET!)\n * ```\n *\n * For Sonor's SEO webhook (page paths, cache tags, the sitemap), use\n * `createSeoRevalidationHandler` (./seo-revalidate), which wraps this.\n */\n\nimport { secretsMatch } from '../shared/request-guards'\n\ntype RevalidatePathFn = (path: string, type?: 'page' | 'layout') => void\n\n/**\n * Create a POST handler that revalidates /llms.txt and /llms-full.txt caches.\n * Protected by a shared secret.\n */\nexport function createLlmsRevalidateHandler(\n  secret: string,\n  options?: {\n    /** Additional paths to revalidate alongside llms files */\n    extraPaths?: string[]\n    /** Custom revalidatePath (for testing or frameworks other than Next.js) */\n    revalidatePath?: RevalidatePathFn\n  },\n): (request: Request) => Promise<Response> {\n  return async function POST(request: Request): Promise<Response> {\n    try {\n      // Validate secret from Authorization header or query param\n      const authHeader = request.headers.get('authorization')\n      const url = new URL(request.url)\n      const tokenFromQuery = url.searchParams.get('secret')\n      const token = authHeader?.replace(/^Bearer\\s+/i, '') || tokenFromQuery\n\n      if (!secretsMatch(token, secret)) {\n        return new Response(JSON.stringify({ error: 'Invalid secret' }), {\n          status: 401,\n          headers: { 'Content-Type': 'application/json' },\n        })\n      }\n\n      // Import Next.js revalidatePath (dynamic to avoid hard dep for non-Next consumers)\n      let revalidatePath: RevalidatePathFn\n      if (options?.revalidatePath) {\n        revalidatePath = options.revalidatePath\n      } else {\n        const nextCache = await import('next/cache')\n        revalidatePath = nextCache.revalidatePath\n      }\n\n      const paths = ['/llms.txt', '/llms-full.txt', ...(options?.extraPaths || [])]\n      for (const p of paths) {\n        revalidatePath(p)\n      }\n\n      return new Response(\n        JSON.stringify({ revalidated: true, paths }),\n        {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        },\n      )\n    } catch (err) {\n      console.error('[site-kit/llms] Revalidation failed:', err)\n      return new Response(\n        JSON.stringify({ error: 'Revalidation failed' }),\n        { status: 500, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n  }\n}\n","/**\n * @sonordev/site-kit/llms - Sonor's SEO revalidation webhook\n *\n * When a title, description or schema changes in Sonor (a dashboard edit or an\n * approved SEO ledger action), Sonor POSTs the affected paths and cache tags to\n * the site, authenticated with the project key. This handler regenerates those\n * pages, the sitemap and both llms files without a rebuild.\n *\n * Single source of truth for the fleet's `/api/seo-revalidate` handler. It\n * replaced per-site copies in heinrich-law-nextjs and wirsch-law-nextjs\n * (`lib/seo-revalidation.ts`), and agency-site-kit's portfolio\n * `createRevalidateHandler` is built on it (`extraPaths` + `extendPayload`);\n * don't fork it back into a site or package.\n *\n * @example\n * ```ts\n * // app/api/seo-revalidate/route.ts\n * import { revalidatePath, revalidateTag } from 'next/cache'\n * import { createSeoRevalidationHandler } from '@sonordev/site-kit/llms'\n *\n * export const runtime = 'nodejs'\n *\n * export async function POST(request: Request) {\n *   return createSeoRevalidationHandler({\n *     secret: process.env.SONOR_API_KEY || '',\n *     revalidatePath,\n *     revalidateTag,\n *     publicationBasePath: '/insights', // only for sites with a publication\n *   })(request)\n * }\n * ```\n *\n * Contract (POST, `Authorization: Bearer <SONOR_API_KEY>`, JSON):\n * `{ paths?: string[], path?: string, tags?: string[], tag?: string, revalidateAll?: boolean }`\n */\n\nimport { createLlmsRevalidateHandler } from './revalidate'\nimport { readCappedBody, secretsMatch } from '../shared/request-guards'\n\n/** Largest webhook body accepted, in bytes. Sonor's payloads are a few hundred. */\nexport const SEO_REVALIDATION_MAX_BODY_BYTES = 16 * 1024\n\n/** Most paths or tags one webhook call may name. */\nexport const SEO_REVALIDATION_MAX_ITEMS = 100\n\n/**\n * The prefix Sonor projects configured before publication routing still send\n * article URLs under. See `publicationBasePath`.\n */\nexport const LEGACY_PUBLICATION_PATH = '/blog'\n\nexport interface SeoRevalidationHandlerOptions {\n  /**\n   * The project key Sonor signs the webhook with (`SONOR_API_KEY`), or a\n   * getter read on every call. Empty or missing refuses every call.\n   */\n  secret: string | (() => string | undefined)\n  /** Next's `revalidatePath` from `next/cache`. */\n  revalidatePath: (path: string, type?: 'page' | 'layout') => void\n  /** Next's `revalidateTag` from `next/cache`. Called with `{ expire: 0 }` so tagged fetches expire now. */\n  revalidateTag: (tag: string, profile: { expire: number }) => void\n  /**\n   * Where the site's publication (articles) lives, e.g. `/insights`. Set it\n   * only when the site has one. The publication index and its RSS/Atom feeds\n   * are then refreshed on every call, and legacy `/blog/...` paths Sonor sends\n   * are refreshed at both the alias and the matching URL under this root.\n   */\n  publicationBasePath?: string\n  /**\n   * Local paths regenerated on every call, next to `/sitemap.xml` (e.g. a\n   * portfolio hub like `/work`). Validated like payload paths.\n   */\n  extraPaths?: string[]\n  /**\n   * Extend the validated payload from fields of the raw body this handler\n   * doesn't read. agency-site-kit maps portfolio `slug`/`slugs` to detail\n   * paths and names a default tag this way. The result is validated again,\n   * so an extension can't widen what a caller may revalidate; a throw is a 400.\n   */\n  extendPayload?: (payload: SeoRevalidationPayload, body: Record<string, unknown>) => SeoRevalidationPayload\n}\n\nexport interface SeoRevalidationPayload {\n  /** Local paths to regenerate, deduped. */\n  paths: string[]\n  /** Cache tags to expire, deduped. */\n  tags: string[]\n  /** Regenerate everything (the root layout). */\n  revalidateAll: boolean\n}\n\nfunction noStoreJson(body: object, status = 200): Response {\n  return Response.json(body, { status, headers: { 'Cache-Control': 'no-store' } })\n}\n\n/**\n * A same-site path Next can revalidate: rooted, not protocol-relative, no\n * query, fragment, dynamic-segment brackets, whitespace, colon or dot segments,\n * even after percent-decoding. Anything else could point revalidation at\n * another origin or a route pattern.\n */\nfunction isLocalPath(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length > 1024) return false\n  try {\n    const path = decodeURIComponent(value)\n    return (\n      path.startsWith('/') &&\n      !path.startsWith('//') &&\n      !/[\\\\\\s?#[\\]:\\x00-\\x1f]/.test(path) &&\n      !path.split('/').some((part) => part === '.' || part === '..')\n    )\n  } catch {\n    return false\n  }\n}\n\nfunction isCacheTag(value: unknown): value is string {\n  return typeof value === 'string' && value.length > 0 && value.length <= 256 && !/[\\x00-\\x1f]/.test(value)\n}\n\n/**\n * Validate a webhook body. Throws on anything malformed, so a bad payload is\n * refused whole rather than half-applied.\n */\nexport function parseSeoRevalidationPayload(value: unknown): SeoRevalidationPayload {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('Invalid payload')\n  const body = value as Record<string, unknown>\n  if (body.revalidateAll !== undefined && typeof body.revalidateAll !== 'boolean') {\n    throw new Error('Invalid revalidateAll')\n  }\n  const paths = body.paths ?? (body.path === undefined ? [] : [body.path])\n  const tags = body.tags ?? (body.tag === undefined ? [] : [body.tag])\n  if (!Array.isArray(paths) || paths.length > SEO_REVALIDATION_MAX_ITEMS || !paths.every(isLocalPath)) {\n    throw new Error('Invalid paths')\n  }\n  if (!Array.isArray(tags) || tags.length > SEO_REVALIDATION_MAX_ITEMS || !tags.every(isCacheTag)) {\n    throw new Error('Invalid tags')\n  }\n  return {\n    paths: [...new Set(paths as string[])],\n    tags: [...new Set(tags as string[])],\n    revalidateAll: body.revalidateAll === true,\n  }\n}\n\nfunction validateExtraPaths(paths: string[] | undefined): string[] {\n  for (const path of paths ?? []) {\n    if (!isLocalPath(path)) {\n      throw new TypeError(`createSeoRevalidationHandler: extraPaths must be local paths like \"/work\", got ${JSON.stringify(path)}`)\n    }\n  }\n  return paths ?? []\n}\n\nfunction normalizePublicationBasePath(value: string | undefined): string | undefined {\n  if (value === undefined) return undefined\n  const trimmed = value.replace(/\\/+$/, '')\n  if (!trimmed || !isLocalPath(trimmed)) {\n    throw new TypeError(`createSeoRevalidationHandler: publicationBasePath must be a local path like \"/insights\", got ${JSON.stringify(value)}`)\n  }\n  return trimmed\n}\n\n/**\n * Create the POST handler for Sonor's SEO revalidation webhook.\n *\n * - 401 unless `Authorization: Bearer <secret>` matches (constant time). The\n *   `?secret=` query form `createLlmsRevalidateHandler` accepts is not\n *   honoured here: keys don't belong in URLs.\n * - 413 past 16 KB, 400 on any path or tag that fails validation. Nothing is\n *   revalidated in either case.\n * - Otherwise regenerates the named pages (or the root layout for a full or\n *   tag-only `seo` refresh), `/sitemap.xml`, `/llms.txt`, `/llms-full.txt`,\n *   `extraPaths` and, with `publicationBasePath`, the publication index and\n *   feeds; then expires the named cache tags. `extendPayload` runs before any\n *   of that, and its result is validated like the body.\n */\nexport function createSeoRevalidationHandler({\n  secret: secretOption,\n  revalidatePath,\n  revalidateTag,\n  publicationBasePath,\n  extraPaths: extraPathsOption,\n  extendPayload,\n}: SeoRevalidationHandlerOptions): (request: Request) => Promise<Response> {\n  const publicationRoot = normalizePublicationBasePath(publicationBasePath)\n  const alwaysPaths = validateExtraPaths(extraPathsOption)\n\n  return async (request: Request) => {\n    const secret = (typeof secretOption === 'function' ? secretOption() : secretOption) ?? ''\n    const supplied = request.headers.get('authorization')?.match(/^Bearer (.+)$/i)?.[1]\n    if (!secretsMatch(supplied, secret)) return noStoreJson({ error: 'Unauthorized' }, 401)\n\n    let payload: SeoRevalidationPayload\n    try {\n      const bytes = await readCappedBody(request, SEO_REVALIDATION_MAX_BODY_BYTES)\n      if (!bytes) return noStoreJson({ error: 'Payload too large' }, 413)\n      const body: unknown = JSON.parse(new TextDecoder().decode(bytes))\n      payload = parseSeoRevalidationPayload(body)\n      if (extendPayload) {\n        const extended = extendPayload(payload, body as Record<string, unknown>)\n        payload = parseSeoRevalidationPayload({\n          paths: extended.paths,\n          tags: extended.tags,\n          revalidateAll: extended.revalidateAll,\n        })\n      }\n    } catch {\n      return noStoreJson({ error: 'Provide valid local paths, cache tags or revalidateAll.' }, 400)\n    }\n\n    // SEO's older fetches have no tags. A tag-only SEO refresh needs the root\n    // layout too; path-specific updates stay scoped to the supplied pages.\n    const all = payload.revalidateAll || (!payload.paths.length && payload.tags.includes('seo'))\n    // Sonor projects configured before publication routing can send /blog\n    // URLs. Refresh the alias (the site's legacy redirect) and its destination\n    // under the publication root, including old slugs when an editor renames\n    // or unpublishes a post.\n    const pagePaths = publicationRoot\n      ? payload.paths.flatMap((path) =>\n          path === LEGACY_PUBLICATION_PATH || path.startsWith(`${LEGACY_PUBLICATION_PATH}/`)\n            ? [path, `${publicationRoot}${path.slice(LEGACY_PUBLICATION_PATH.length)}`]\n            : [path],\n        )\n      : payload.paths\n    const publicationPaths = publicationRoot\n      ? [publicationRoot, `${publicationRoot}/rss.xml`, `${publicationRoot}/feed.xml`]\n      : []\n    const extraPaths = [\n      ...new Set(['/sitemap.xml', ...publicationPaths, ...alwaysPaths, ...(all ? ['/'] : pagePaths)]),\n    ]\n\n    const llmsHandler = createLlmsRevalidateHandler(secret, {\n      extraPaths,\n      revalidatePath: (path) => revalidatePath(path, path === '/' && all ? 'layout' : undefined),\n    })\n    try {\n      const result = await llmsHandler(request)\n      if (!result.ok) return noStoreJson({ error: 'Revalidation failed' }, 500)\n      for (const tag of payload.tags) revalidateTag(tag, { expire: 0 })\n      return noStoreJson({ revalidated: ['/llms.txt', '/llms-full.txt', ...extraPaths], tags: payload.tags })\n    } catch {\n      return noStoreJson({ error: 'Revalidation failed' }, 500)\n    }\n  }\n}\n"]}

package/dist/llms/revalidate.d.ts

@@ -11,6 +11,9 @@
  *
  * export const POST = createLlmsRevalidateHandler(process.env.REVALIDATION_SECRET!)
  * ```
+ *
+ * For Sonor's SEO webhook (page paths, cache tags, the sitemap), use
+ * `createSeoRevalidationHandler` (./seo-revalidate), which wraps this.
  */
 type RevalidatePathFn = (path: string, type?: 'page' | 'layout') => void;
 /**

package/dist/llms/revalidate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,KAAK,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;AAExE;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GACA,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6CzC"}
+{"version":3,"file":"revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,KAAK,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;AAExE;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IACR,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,gBAAgB,CAAA;CAClC,GACA,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6CzC"}

package/dist/llms/seo-revalidate.d.ts

@@ -0,0 +1,105 @@
+/**
+ * @sonordev/site-kit/llms - Sonor's SEO revalidation webhook
+ *
+ * When a title, description or schema changes in Sonor (a dashboard edit or an
+ * approved SEO ledger action), Sonor POSTs the affected paths and cache tags to
+ * the site, authenticated with the project key. This handler regenerates those
+ * pages, the sitemap and both llms files without a rebuild.
+ *
+ * Single source of truth for the fleet's `/api/seo-revalidate` handler. It
+ * replaced per-site copies in heinrich-law-nextjs and wirsch-law-nextjs
+ * (`lib/seo-revalidation.ts`), and agency-site-kit's portfolio
+ * `createRevalidateHandler` is built on it (`extraPaths` + `extendPayload`);
+ * don't fork it back into a site or package.
+ *
+ * @example
+ * ```ts
+ * // app/api/seo-revalidate/route.ts
+ * import { revalidatePath, revalidateTag } from 'next/cache'
+ * import { createSeoRevalidationHandler } from '@sonordev/site-kit/llms'
+ *
+ * export const runtime = 'nodejs'
+ *
+ * export async function POST(request: Request) {
+ *   return createSeoRevalidationHandler({
+ *     secret: process.env.SONOR_API_KEY || '',
+ *     revalidatePath,
+ *     revalidateTag,
+ *     publicationBasePath: '/insights', // only for sites with a publication
+ *   })(request)
+ * }
+ * ```
+ *
+ * Contract (POST, `Authorization: Bearer <SONOR_API_KEY>`, JSON):
+ * `{ paths?: string[], path?: string, tags?: string[], tag?: string, revalidateAll?: boolean }`
+ */
+/** Largest webhook body accepted, in bytes. Sonor's payloads are a few hundred. */
+export declare const SEO_REVALIDATION_MAX_BODY_BYTES: number;
+/** Most paths or tags one webhook call may name. */
+export declare const SEO_REVALIDATION_MAX_ITEMS = 100;
+/**
+ * The prefix Sonor projects configured before publication routing still send
+ * article URLs under. See `publicationBasePath`.
+ */
+export declare const LEGACY_PUBLICATION_PATH = "/blog";
+export interface SeoRevalidationHandlerOptions {
+    /**
+     * The project key Sonor signs the webhook with (`SONOR_API_KEY`), or a
+     * getter read on every call. Empty or missing refuses every call.
+     */
+    secret: string | (() => string | undefined);
+    /** Next's `revalidatePath` from `next/cache`. */
+    revalidatePath: (path: string, type?: 'page' | 'layout') => void;
+    /** Next's `revalidateTag` from `next/cache`. Called with `{ expire: 0 }` so tagged fetches expire now. */
+    revalidateTag: (tag: string, profile: {
+        expire: number;
+    }) => void;
+    /**
+     * Where the site's publication (articles) lives, e.g. `/insights`. Set it
+     * only when the site has one. The publication index and its RSS/Atom feeds
+     * are then refreshed on every call, and legacy `/blog/...` paths Sonor sends
+     * are refreshed at both the alias and the matching URL under this root.
+     */
+    publicationBasePath?: string;
+    /**
+     * Local paths regenerated on every call, next to `/sitemap.xml` (e.g. a
+     * portfolio hub like `/work`). Validated like payload paths.
+     */
+    extraPaths?: string[];
+    /**
+     * Extend the validated payload from fields of the raw body this handler
+     * doesn't read. agency-site-kit maps portfolio `slug`/`slugs` to detail
+     * paths and names a default tag this way. The result is validated again,
+     * so an extension can't widen what a caller may revalidate; a throw is a 400.
+     */
+    extendPayload?: (payload: SeoRevalidationPayload, body: Record<string, unknown>) => SeoRevalidationPayload;
+}
+export interface SeoRevalidationPayload {
+    /** Local paths to regenerate, deduped. */
+    paths: string[];
+    /** Cache tags to expire, deduped. */
+    tags: string[];
+    /** Regenerate everything (the root layout). */
+    revalidateAll: boolean;
+}
+/**
+ * Validate a webhook body. Throws on anything malformed, so a bad payload is
+ * refused whole rather than half-applied.
+ */
+export declare function parseSeoRevalidationPayload(value: unknown): SeoRevalidationPayload;
+/**
+ * Create the POST handler for Sonor's SEO revalidation webhook.
+ *
+ * - 401 unless `Authorization: Bearer <secret>` matches (constant time). The
+ *   `?secret=` query form `createLlmsRevalidateHandler` accepts is not
+ *   honoured here: keys don't belong in URLs.
+ * - 413 past 16 KB, 400 on any path or tag that fails validation. Nothing is
+ *   revalidated in either case.
+ * - Otherwise regenerates the named pages (or the root layout for a full or
+ *   tag-only `seo` refresh), `/sitemap.xml`, `/llms.txt`, `/llms-full.txt`,
+ *   `extraPaths` and, with `publicationBasePath`, the publication index and
+ *   feeds; then expires the named cache tags. `extendPayload` runs before any
+ *   of that, and its result is validated like the body.
+ */
+export declare function createSeoRevalidationHandler({ secret: secretOption, revalidatePath, revalidateTag, publicationBasePath, extraPaths: extraPathsOption, extendPayload, }: SeoRevalidationHandlerOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=seo-revalidate.d.ts.map

package/dist/llms/seo-revalidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-revalidate.d.ts","sourceRoot":"","sources":["../../src/llms/seo-revalidate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAKH,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,QAAY,CAAA;AAExD,oDAAoD;AACpD,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAA;AAE9C,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3C,iDAAiD;IACjD,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;IAChE,0GAA0G;IAC1G,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IACjE;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,sBAAsB,CAAA;CAC3G;AAED,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,qCAAqC;IACrC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAA;CACvB;AA+BD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAmBlF;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAAC,EAC3C,MAAM,EAAE,YAAY,EACpB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,UAAU,EAAE,gBAAgB,EAC5B,aAAa,GACd,EAAE,6BAA6B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6DzE"}

package/dist/maps/index.js

@@ -1,9 +1,9 @@
 'use client';
 'use strict';
 
-var chunkJ4C3JAJF_js = require('../chunk-J4C3JAJF.js');
-require('../chunk-TE3YNZVH.js');
-require('../chunk-6SBRD5KT.js');
+var chunkC7J4XLBN_js = require('../chunk-C7J4XLBN.js');
+require('../chunk-U5NFIHLY.js');
+require('../chunk-CIB3RHNZ.js');
 require('../chunk-SNAQBZPT.js');
 var react = require('react');
 var reactGoogleMaps = require('@vis.gl/react-google-maps');
@@ -141,7 +141,7 @@ async function fetchMapsConfig() {
   const { apiUrl, apiKey } = getApiConfig();
   if (apiKey) {
     try {
-      const res = await chunkJ4C3JAJF_js.sonorFetch(
+      const res = await chunkC7J4XLBN_js.sonorFetch(
         `${apiUrl}/api/public/maps/config`,
         { headers: { "Content-Type": "application/json" } },
         { apiKey }
@@ -181,7 +181,7 @@ async function fetchNearbyPlaces(params) {
     });
     if (params.radius) searchParams.set("radius", String(params.radius));
     if (params.limit) searchParams.set("limit", String(params.limit));
-    const res = await chunkJ4C3JAJF_js.sonorFetch(
+    const res = await chunkC7J4XLBN_js.sonorFetch(
       `${apiUrl}/api/public/maps/nearby-places?${searchParams}`,
       { headers: { "Content-Type": "application/json" } },
       { apiKey }

package/dist/maps/index.mjs

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from '../chunk-BJKA3XRS.mjs';
-import '../chunk-CXYGKK4U.mjs';
-import '../chunk-3V6DIQI7.mjs';
+import { sonorFetch } from '../chunk-5T3J24K4.mjs';
+import '../chunk-YRKWJCML.mjs';
+import '../chunk-K3PVUXKB.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { useState, useCallback, useEffect } from 'react';
 import { APIProvider, Map as Map$1, AdvancedMarker, Pin, InfoWindow } from '@vis.gl/react-google-maps';

package/dist/mcp/transport.d.ts

@@ -0,0 +1,166 @@
+/**
+ * @sonordev/site-kit/mcp/transport — the rate-limited public MCP relay
+ *
+ * Netlify rate-limits a native function (declarative `config.rateLimit`), never
+ * a Next.js route handler. So a public MCP endpoint on Netlify takes this path:
+ *
+ *   agent ─► /api/mcp            netlify/functions/mcp.mjs, rate-limited
+ *              │                 createNetlifyMcpRelay: signs the request
+ *              │                 (HMAC-SHA256 of MCP_TRANSPORT_SECRET over a label)
+ *              ▼
+ *            https://<deploy-id>--<site>.netlify.app/api/mcp-internal
+ *              │                 createMcpInternalRoute: 403 unless signed,
+ *              ▼                 then dispatches to the /api/mcp handlers
+ *            app/api/mcp/route.ts  protectMcpHandlers(createMcpHandler(...))
+ *
+ * In production the function owns /api/mcp, and the Next route behind it
+ * refuses unsigned calls too, so no request reaches a tool without passing
+ * the rate limit. The relay targets the deploy permalink, so a request is
+ * answered by the same immutable deploy that received it, and the base URL
+ * comes from the platform (`context`), never from a client header.
+ *
+ * Single source of truth for the relay. It replaced per-site copies in
+ * upforge-nextjs and wirsch-law-nextjs (`lib/mcp/transport-auth.ts`, the
+ * `protect()` wrapper, the `/api/mcp-internal` relay and the function body);
+ * don't fork it back into a site.
+ *
+ * Node only (`crypto`), and deliberately not re-exported from the
+ * `@sonordev/site-kit/mcp` barrel so that barrel stays runtime-neutral.
+ * Nothing here imports `server-only`: the Netlify function runs in plain Node,
+ * where `server-only` throws on import.
+ *
+ * Setup: `MCP_TRANSPORT_SECRET` (`openssl rand -hex 32`) in every deploy
+ * context, Functions scope. See the module README for the three files.
+ */
+/** Env var holding the relay's HMAC key. */
+export declare const MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+/** Default request header carrying the signature (and the response marker). */
+export declare const DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+/** Default HMAC message. Changing it invalidates every signature at once. */
+export declare const DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+/** Path of the signed Next route the function relays to. */
+export declare const MCP_INTERNAL_PATH = "/api/mcp-internal";
+/** Value of the marker header on every relayed response. Release checks assert it. */
+export declare const MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+/** Largest POST body the relay forwards (tool arguments), in bytes. */
+export declare const MCP_RELAY_MAX_BODY_BYTES: number;
+/** Upstream timeout. Under Netlify's 60 s synchronous function limit, so the 502 is ours. */
+export declare const MCP_RELAY_TIMEOUT_MS = 55000;
+/** Methods the MCP wire uses. Anything else gets a 405. */
+export declare const MCP_RELAY_METHODS: readonly ['GET', 'POST', 'OPTIONS', 'DELETE'];
+export interface McpTransportOptions {
+    /**
+     * Request header that carries the signature. The relay also stamps it on
+     * responses with {@link MCP_RELAY_MARKER}. Must match between the function
+     * and the Next routes. Default {@link DEFAULT_MCP_TRANSPORT_HEADER}.
+     */
+    header?: string;
+    /**
+     * HMAC message. Must match between the function and the Next routes.
+     * Default {@link DEFAULT_MCP_TRANSPORT_LABEL}.
+     */
+    label?: string;
+    /**
+     * The HMAC key, or a getter for it. Default: `MCP_TRANSPORT_SECRET`, read on
+     * every request (`Netlify.env` when present, else `process.env`).
+     */
+    secret?: string | (() => string | undefined);
+}
+export type McpRouteHandler = (request: Request) => Response | Promise<Response>;
+/** The four method handlers an MCP route exports (what `createMcpHandler` returns). */
+export interface McpRouteHandlerSet {
+    GET: McpRouteHandler;
+    POST: McpRouteHandler;
+    DELETE: McpRouteHandler;
+    OPTIONS: McpRouteHandler;
+}
+export interface ProtectMcpHandlersOptions extends McpTransportOptions {
+    /**
+     * Refuse unsigned requests. Default: `NODE_ENV === 'production'`, read per
+     * request, so `next dev` still answers a local MCP client directly.
+     */
+    enforce?: boolean | (() => boolean);
+}
+export interface NetlifyMcpRelayOptions extends McpTransportOptions {
+    /** The signed Next route, on the same deploy. Default {@link MCP_INTERNAL_PATH}. */
+    internalPath?: string;
+    /** Error text for the 502 when the upstream fails or times out. */
+    timeoutMessage?: string;
+}
+/** The parts of Netlify's function `context` the relay reads. */
+export interface NetlifyRelayContext {
+    deploy?: {
+        id?: string;
+    };
+    site?: {
+        name?: string;
+        url?: string;
+    };
+}
+/** The signature a relayed request carries: hex HMAC-SHA256 of `label` under `secret`. */
+export declare function signMcpTransport(secret: string, label?: string): string;
+/**
+ * True when the request came through the rate-limited relay: its transport
+ * header holds the HMAC of `label` under `MCP_TRANSPORT_SECRET`, compared in
+ * constant time. False when the secret is unset.
+ */
+export declare function hasMcpTransportAuthorization(request: Request, options?: McpTransportOptions): boolean;
+/**
+ * Wrap the `/api/mcp` handlers so, in production, they answer only relayed
+ * (signed) requests. The public path is the function's; this closes the Next
+ * handler behind it so nothing can skip the rate limit.
+ *
+ * @example
+ * ```ts
+ * // app/api/mcp/route.ts
+ * export const { POST, GET, DELETE, OPTIONS } = protectMcpHandlers(
+ *   createMcpHandler({ server: mcpServer, baseUrl: SITE_URL, allowedOrigins: '*' }),
+ * )
+ * ```
+ */
+export declare function protectMcpHandlers(handlers: McpRouteHandlerSet, options?: ProtectMcpHandlersOptions): McpRouteHandlerSet;
+/**
+ * Handlers for `/api/mcp-internal`, the relay's target. 403 without a valid
+ * signature in every environment, then dispatch by method to the `/api/mcp`
+ * handlers.
+ *
+ * @example
+ * ```ts
+ * // app/api/mcp-internal/route.ts
+ * import * as mcp from '../mcp/route'
+ * export const { POST, GET, DELETE, OPTIONS } = createMcpInternalRoute(mcp)
+ * ```
+ */
+export declare function createMcpInternalRoute(handlers: McpRouteHandlerSet, options?: McpTransportOptions): McpRouteHandlerSet;
+/**
+ * The default export for `netlify/functions/mcp.mjs`. Signs the request and
+ * relays it to {@link MCP_INTERNAL_PATH} on the same deploy.
+ *
+ * - 503 when `MCP_TRANSPORT_SECRET` is unset; 405 for methods MCP doesn't use.
+ * - Strips `host` and `content-length`, overwrites any client-sent transport
+ *   header with the real signature.
+ * - POST bodies over 64 KB get a 413 and are never forwarded.
+ * - `redirect: 'error'` and a 55 s timeout; any upstream failure is a 502.
+ * - Responses drop the encoding/length headers fetch already undid, and gain
+ *   `Cache-Control: no-store` plus the transport header set to
+ *   {@link MCP_RELAY_MARKER}.
+ *
+ * The function file must still declare its own literal `config`: Netlify
+ * reads `path` and `rateLimit` statically from that file, so they can't come
+ * from an import.
+ *
+ * @example
+ * ```js
+ * // netlify/functions/mcp.mjs
+ * import { createNetlifyMcpRelay } from '@sonordev/site-kit/mcp/transport'
+ *
+ * export default createNetlifyMcpRelay()
+ *
+ * export const config = {
+ *   path: '/api/mcp',
+ *   rateLimit: { windowSize: 60, windowLimit: 60, aggregateBy: ['ip', 'domain'] },
+ * }
+ * ```
+ */
+export declare function createNetlifyMcpRelay(options?: NetlifyMcpRelayOptions): (request: Request, context: NetlifyRelayContext) => Promise<Response>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/mcp/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/mcp/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AASH,4CAA4C;AAC5C,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAE9D,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,yBAAyB,CAAA;AAElE,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,0BAA0B,CAAA;AAElE,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,sBAAsB,CAAA;AAEpD,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,4BAA4B,CAAA;AAEzD,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,QAAY,CAAA;AAEjD,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAA;AAM9E,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAA;CAC7C;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,eAAe,CAAA;IACpB,IAAI,EAAE,eAAe,CAAA;IACrB,MAAM,EAAE,eAAe,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvC;AA6BD,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAoC,GAAG,MAAM,CAEpG;AAUD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAEzG;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAgBpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAkBpB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmDvE"}

package/dist/mcp/transport.js

@@ -0,0 +1,137 @@
+'use strict';
+
+var chunkYMZNEDFP_js = require('../chunk-YMZNEDFP.js');
+require('../chunk-SNAQBZPT.js');
+var crypto = require('crypto');
+
+var MCP_TRANSPORT_SECRET_ENV = "MCP_TRANSPORT_SECRET";
+var DEFAULT_MCP_TRANSPORT_HEADER = "x-site-mcp-transport";
+var DEFAULT_MCP_TRANSPORT_LABEL = "site-mcp-transport-v1";
+var MCP_INTERNAL_PATH = "/api/mcp-internal";
+var MCP_RELAY_MARKER = "netlify-rate-limited-v1";
+var MCP_RELAY_MAX_BODY_BYTES = 64 * 1024;
+var MCP_RELAY_TIMEOUT_MS = 55e3;
+var MCP_RELAY_METHODS = ["GET", "POST", "OPTIONS", "DELETE"];
+function resolveTransport(options = {}) {
+  const header = (options.header ?? DEFAULT_MCP_TRANSPORT_HEADER).toLowerCase();
+  const label = options.label ?? DEFAULT_MCP_TRANSPORT_LABEL;
+  if (!/^[a-z0-9-]+$/.test(header)) {
+    throw new TypeError(`@sonordev/site-kit/mcp/transport: invalid header name ${JSON.stringify(options.header)}`);
+  }
+  if (!label) throw new TypeError("@sonordev/site-kit/mcp/transport: label must not be empty");
+  return { header, label, secret: options.secret };
+}
+function readSecret(secret) {
+  if (typeof secret === "function") return secret();
+  if (secret !== void 0) return secret;
+  const netlify = globalThis.Netlify;
+  return netlify?.env?.get(MCP_TRANSPORT_SECRET_ENV) || process.env[MCP_TRANSPORT_SECRET_ENV];
+}
+function signMcpTransport(secret, label = DEFAULT_MCP_TRANSPORT_LABEL) {
+  return crypto.createHmac("sha256", secret).update(label).digest("hex");
+}
+function verify(request, transport) {
+  const key = readSecret(transport.secret);
+  const supplied = request.headers.get(transport.header) || "";
+  if (!key || !/^[a-f0-9]{64}$/.test(supplied)) return false;
+  const expected = crypto.createHmac("sha256", key).update(transport.label).digest();
+  return crypto.timingSafeEqual(expected, Buffer.from(supplied, "hex"));
+}
+function hasMcpTransportAuthorization(request, options = {}) {
+  return verify(request, resolveTransport(options));
+}
+function isEnforced(enforce) {
+  if (typeof enforce === "function") return enforce();
+  if (enforce !== void 0) return enforce;
+  return process.env.NODE_ENV === "production";
+}
+function protectMcpHandlers(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const protect = (handler) => (request) => {
+    if (isEnforced(options.enforce) && !verify(request, transport)) {
+      return Response.json({ error: "Use the public MCP endpoint" }, { status: 403 });
+    }
+    return handler(request);
+  };
+  return {
+    GET: protect(handlers.GET),
+    POST: protect(handlers.POST),
+    DELETE: protect(handlers.DELETE),
+    OPTIONS: protect(handlers.OPTIONS)
+  };
+}
+function createMcpInternalRoute(handlers, options = {}) {
+  const transport = resolveTransport(options);
+  const relay = (request) => {
+    if (!verify(request, transport)) return Response.json({ error: "Forbidden" }, { status: 403 });
+    switch (request.method) {
+      case "GET":
+        return handlers.GET(request);
+      case "POST":
+        return handlers.POST(request);
+      case "DELETE":
+        return handlers.DELETE(request);
+      case "OPTIONS":
+        return handlers.OPTIONS(request);
+      default:
+        return new Response(null, { status: 405 });
+    }
+  };
+  return { GET: relay, POST: relay, DELETE: relay, OPTIONS: relay };
+}
+function createNetlifyMcpRelay(options = {}) {
+  const transport = resolveTransport(options);
+  const internalPath = options.internalPath ?? MCP_INTERNAL_PATH;
+  const timeoutMessage = options.timeoutMessage ?? "MCP request timed out. Try again.";
+  const unavailable = () => Response.json({ error: "MCP is temporarily unavailable" }, { status: 503 });
+  return async function relayMcp(request, context) {
+    const key = readSecret(transport.secret);
+    if (!key) return unavailable();
+    if (!MCP_RELAY_METHODS.includes(request.method)) return new Response(null, { status: 405 });
+    const base = context?.deploy?.id && context.site?.name ? `https://${context.deploy.id}--${context.site.name}.netlify.app` : context?.site?.url;
+    if (!base) return unavailable();
+    const target = new URL(internalPath, base);
+    const headers = new Headers(request.headers);
+    headers.delete("host");
+    headers.delete("content-length");
+    headers.set(transport.header, signMcpTransport(key, transport.label));
+    let body;
+    if (request.method === "POST") {
+      const bytes = await chunkYMZNEDFP_js.readCappedBody(request, MCP_RELAY_MAX_BODY_BYTES);
+      if (!bytes) return Response.json({ error: "Tool arguments are too large" }, { status: 413 });
+      body = bytes;
+    }
+    try {
+      const response = await fetch(target, {
+        method: request.method,
+        headers,
+        body,
+        redirect: "error",
+        signal: AbortSignal.timeout(MCP_RELAY_TIMEOUT_MS)
+      });
+      const outgoing = new Headers(response.headers);
+      for (const name of ["content-encoding", "content-length", "transfer-encoding"]) outgoing.delete(name);
+      outgoing.set("Cache-Control", "no-store");
+      outgoing.set(transport.header, MCP_RELAY_MARKER);
+      return new Response(response.body, { status: response.status, headers: outgoing });
+    } catch {
+      return Response.json({ error: timeoutMessage }, { status: 502 });
+    }
+  };
+}
+
+exports.DEFAULT_MCP_TRANSPORT_HEADER = DEFAULT_MCP_TRANSPORT_HEADER;
+exports.DEFAULT_MCP_TRANSPORT_LABEL = DEFAULT_MCP_TRANSPORT_LABEL;
+exports.MCP_INTERNAL_PATH = MCP_INTERNAL_PATH;
+exports.MCP_RELAY_MARKER = MCP_RELAY_MARKER;
+exports.MCP_RELAY_MAX_BODY_BYTES = MCP_RELAY_MAX_BODY_BYTES;
+exports.MCP_RELAY_METHODS = MCP_RELAY_METHODS;
+exports.MCP_RELAY_TIMEOUT_MS = MCP_RELAY_TIMEOUT_MS;
+exports.MCP_TRANSPORT_SECRET_ENV = MCP_TRANSPORT_SECRET_ENV;
+exports.createMcpInternalRoute = createMcpInternalRoute;
+exports.createNetlifyMcpRelay = createNetlifyMcpRelay;
+exports.hasMcpTransportAuthorization = hasMcpTransportAuthorization;
+exports.protectMcpHandlers = protectMcpHandlers;
+exports.signMcpTransport = signMcpTransport;
+//# sourceMappingURL=transport.js.map
+//# sourceMappingURL=transport.js.map