@sonordev/site-kit 6.4.0 → 6.5.0

package/dist/layout/client.js

@@ -1,27 +1,28 @@
 'use client';
 'use strict';
 
-var chunkEWDWLY74_js = require('../chunk-EWDWLY74.js');
-require('../chunk-CUZ3I6CO.js');
-require('../chunk-HSLPN3QK.js');
+var chunkQCS7NWMA_js = require('../chunk-QCS7NWMA.js');
+require('../chunk-U577ITSA.js');
+require('../chunk-OY3PDIB3.js');
 require('../chunk-7THQ4UW3.js');
 require('../chunk-HGNSJXWT.js');
-require('../chunk-VDEQVXNV.js');
+require('../chunk-G2KGHIAP.js');
 require('../chunk-UZKXOZHR.js');
 require('../chunk-SWIKKSKL.js');
 require('../chunk-RC4WWQXR.js');
 require('../chunk-VJMPIRSD.js');
-require('../chunk-5RNAUYWE.js');
-require('../chunk-C7J4XLBN.js');
-require('../chunk-U5NFIHLY.js');
-require('../chunk-CIB3RHNZ.js');
+require('../chunk-NH2P27MA.js');
+require('../chunk-JCDX37BY.js');
+require('../chunk-IO65ROAO.js');
+require('../chunk-PIPGH7GA.js');
+require('../chunk-PURI56RE.js');
 require('../chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "SiteKitClientProviders", {
   enumerable: true,
-  get: function () { return chunkEWDWLY74_js.SiteKitClientProviders; }
+  get: function () { return chunkQCS7NWMA_js.SiteKitClientProviders; }
 });
 //# sourceMappingURL=client.js.map
 //# sourceMappingURL=client.js.map

package/dist/layout/client.mjs

@@ -1,18 +1,19 @@
 'use client';
-export { SiteKitClientProviders } from '../chunk-USQPRLSG.mjs';
-import '../chunk-QOKMH2TD.mjs';
-import '../chunk-BI7DH42Z.mjs';
+export { SiteKitClientProviders } from '../chunk-FPVYKSXE.mjs';
+import '../chunk-VA2O5OSV.mjs';
+import '../chunk-MDQLON5R.mjs';
 import '../chunk-4WCA2HM6.mjs';
 import '../chunk-ZVBLXXNJ.mjs';
-import '../chunk-GSU6VTCZ.mjs';
+import '../chunk-A2HL22BO.mjs';
 import '../chunk-KZVSB5WE.mjs';
 import '../chunk-ZN4HBK5C.mjs';
 import '../chunk-ZZQAGCSI.mjs';
 import '../chunk-6EDVCUAG.mjs';
-import '../chunk-A6UYV475.mjs';
-import '../chunk-5T3J24K4.mjs';
-import '../chunk-YRKWJCML.mjs';
-import '../chunk-K3PVUXKB.mjs';
+import '../chunk-CABEVWKJ.mjs';
+import '../chunk-MXJOKOFK.mjs';
+import '../chunk-3BLKKF67.mjs';
+import '../chunk-PGYOBEPL.mjs';
+import '../chunk-GIGUDKLS.mjs';
 import '../chunk-BEXTDHO4.mjs';
 //# sourceMappingURL=client.mjs.map
 //# sourceMappingURL=client.mjs.map

package/dist/layout/index.js

@@ -1,13 +1,13 @@
 'use strict';
 
-var chunkEWDWLY74_js = require('../chunk-EWDWLY74.js');
-require('../chunk-CUZ3I6CO.js');
-require('../chunk-HSLPN3QK.js');
+var chunkQCS7NWMA_js = require('../chunk-QCS7NWMA.js');
+require('../chunk-U577ITSA.js');
+require('../chunk-OY3PDIB3.js');
 require('../chunk-7THQ4UW3.js');
 require('../chunk-HGNSJXWT.js');
 var chunkGCPPXUAI_js = require('../chunk-GCPPXUAI.js');
-require('../chunk-VDEQVXNV.js');
-var chunkKZBDH5A3_js = require('../chunk-KZBDH5A3.js');
+require('../chunk-G2KGHIAP.js');
+var chunk34XL7TVH_js = require('../chunk-34XL7TVH.js');
 require('../chunk-LVGSOW2F.js');
 var chunkDV2LJYFD_js = require('../chunk-DV2LJYFD.js');
 var chunkO5GHP7UO_js = require('../chunk-O5GHP7UO.js');
@@ -15,10 +15,11 @@ require('../chunk-UZKXOZHR.js');
 require('../chunk-SWIKKSKL.js');
 require('../chunk-RC4WWQXR.js');
 require('../chunk-VJMPIRSD.js');
-require('../chunk-5RNAUYWE.js');
-require('../chunk-C7J4XLBN.js');
-require('../chunk-U5NFIHLY.js');
-require('../chunk-CIB3RHNZ.js');
+require('../chunk-NH2P27MA.js');
+require('../chunk-JCDX37BY.js');
+require('../chunk-IO65ROAO.js');
+require('../chunk-PIPGH7GA.js');
+require('../chunk-PURI56RE.js');
 require('../chunk-SNAQBZPT.js');
 var jsxRuntime = require('react/jsx-runtime');
 
@@ -72,7 +73,7 @@ async function SiteKitLayout({
     );
   }
   const apiOrigin = chunkO5GHP7UO_js.resolveApiOrigin(resolvedApiUrl);
-  const clientCredential = await chunkKZBDH5A3_js.resolveClientCredential(resolvedApiKey, resolvedApiUrl);
+  const clientCredential = await chunk34XL7TVH_js.resolveClientCredential(resolvedApiKey, resolvedApiUrl);
   return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     /* @__PURE__ */ jsxRuntime.jsx("link", { rel: "preconnect", href: apiOrigin, crossOrigin: "anonymous" }),
     /* @__PURE__ */ jsxRuntime.jsx("link", { rel: "dns-prefetch", href: apiOrigin }),
@@ -80,7 +81,7 @@ async function SiteKitLayout({
     managedScripts && /* @__PURE__ */ jsxRuntime.jsx(chunkDV2LJYFD_js.ManagedScripts, { position: "head" }),
     speculation && /* @__PURE__ */ jsxRuntime.jsx(SpeculationRules, { ...typeof speculation === "object" ? speculation : {} }),
     /* @__PURE__ */ jsxRuntime.jsxs(
-      chunkEWDWLY74_js.SiteKitClientProviders,
+      chunkQCS7NWMA_js.SiteKitClientProviders,
       {
         apiKey: clientCredential,
         apiUrl: resolvedApiUrl,

package/dist/layout/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/layout/SpeculationRules.tsx","../../src/layout/SiteKitLayout.tsx"],"names":["jsx","resolveApiOrigin","resolveClientCredential","jsxs","Fragment","ManagedFavicon","ManagedScripts","SiteKitClientProviders"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6BO,SAAS,iBAAiB,EAAE,IAAA,GAAO,aAAa,OAAA,GAAU,IAAG,EAA0B;AAC5F,EAAA,MAAM,KAAA,GAAQ;AAAA,IACZ,CAAC,IAAI,GAAG;AAAA,MACN;AAAA,QACE,MAAA,EAAQ,UAAA;AAAA,QACR,KAAA,EAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,EAAE,cAAc,IAAA,EAAK;AAAA,YACrB,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,OAAA,MAAY,EAAE,KAAK,EAAE,YAAA,EAAc,OAAA,EAAQ,EAAE,CAAE;AAAA;AAChE,SACF;AAAA,QACA,SAAA,EAAW;AAAA;AACb;AACF,GACF;AAEA,EAAA,uBACEA,cAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,kBAAA;AAAA,MACL,yBAAyB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAE;AAAA,GAC3D;AAEJ;ACsEA,eAAsB,aAAA,CAAc;AAAA,EAClC,QAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA,GAAY,IAAA;AAAA,EACZ,MAAA,GAAS,IAAA;AAAA,EACT,MAAA,GAAS,KAAA;AAAA,EACT,WAAA,GAAc,KAAA;AAAA,EACd,KAAA,GAAQ,IAAA;AAAA,EACR,KAAA,GAAQ,IAAA;AAAA,EACR,OAAA,GAAU,IAAA;AAAA,EACV,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,qBAAA,GAAwB,KAAA;AAAA,EACxB,WAAA,GAAc;AAChB,CAAA,EAAuB;AAErB,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,EAAA;AACF,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,sBAAA;AAEF,EAAA,IAAI,CAAC,kBAAkB,KAAA,EAAO;AAC5B,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAYC,kCAAiB,cAAc,CAAA;AAKjD,EAAA,MAAM,gBAAA,GAAmB,MAAMC,wCAAA,CAAwB,cAAA,EAAgB,cAAc,CAAA;AAErF,EAAA,uBACEC,eAAA,CAAAC,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAJ,eAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAa,IAAA,EAAM,SAAA,EAAW,aAAY,WAAA,EAAY,CAAA;AAAA,oBAChEA,cAAAA,CAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAA,EAAe,MAAM,SAAA,EAAW,CAAA;AAAA,IAEzC,2BAAWA,cAAAA,CAACK,mCAAe,MAAA,EAAQ,cAAA,EAAgB,QAAQ,cAAA,EAAgB,CAAA;AAAA,IAC3E,cAAA,oBAAkBL,cAAAA,CAACM,+BAAA,EAAA,EAAe,UAAS,MAAA,EAAO,CAAA;AAAA,IAClD,WAAA,oBACCN,cAAAA,CAAC,gBAAA,EAAA,EAAkB,GAAI,OAAO,WAAA,KAAgB,QAAA,GAAW,WAAA,GAAc,EAAC,EAAI,CAAA;AAAA,oBAK9EG,eAAA;AAAA,MAACI,uCAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,cAAA;AAAA,QACR,SAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QAEC,QAAA,EAAA;AAAA,UAAA,QAAA;AAAA,UACA,qBAAA,mBACCP,cAAAA,CAAC,QAAA,EAAA,EAAO,WAAU,SAAA,EAAU,aAAA,EAAY,MAAA,EACtC,QAAA,kBAAAA,eAAC,GAAA,EAAA,EAAE,IAAA,EAAK,WAAA,EAAY,QAAA,EAAA,UAAA,EAAQ,GAC9B,CAAA,GACE;AAAA;AAAA;AAAA,KACN;AAAA,IAGC,cAAA,oBAAkBA,cAAAA,CAACM,+BAAA,EAAA,EAAe,UAAS,UAAA,EAAW;AAAA,GAAA,EACzD,CAAA;AAEJ","file":"index.js","sourcesContent":["/**\n * SpeculationRules — declarative near-instant navigation for static sites.\n *\n * Emits a `<script type=\"speculationrules\">` telling supporting browsers\n * (Chromium 121+) to prerender same-origin links as the user shows intent\n * (moderate eagerness = hover/mousedown). Non-supporting browsers ignore the\n * tag entirely; there is no JS, no polyfill, no runtime cost — pure\n * progressive enhancement, ideal for the force-static fleet.\n *\n * Server component: renders during SSR, ships as static HTML.\n *\n * Excluded by default: URLs with a query string (often personalized) and\n * obvious non-page paths. Keep exclusions tight — prerendering a page that\n * sets cookies or fires analytics on load double-fires them only if the\n * analytics module ignores prerendering; site-kit analytics defers to\n * post-activation, and Chrome delays most side effects until activation.\n */\n\ninterface SpeculationRulesProps {\n  /**\n   * 'prerender' (default) renders the next page fully in the background;\n   * 'prefetch' only fetches the document. Prefetch is the conservative\n   * fallback if a site sees issues with prerender.\n   */\n  mode?: 'prerender' | 'prefetch'\n  /** Additional URL patterns to exclude (speculation rules URL pattern syntax). */\n  exclude?: string[]\n}\n\nexport function SpeculationRules({ mode = 'prerender', exclude = [] }: SpeculationRulesProps) {\n  const rules = {\n    [mode]: [\n      {\n        source: 'document' as const,\n        where: {\n          and: [\n            { href_matches: '/*' },\n            { not: { href_matches: '/*\\\\?*' } },\n            { not: { href_matches: '/api/*' } },\n            ...exclude.map(pattern => ({ not: { href_matches: pattern } })),\n          ],\n        },\n        eagerness: 'moderate' as const,\n      },\n    ],\n  }\n\n  return (\n    <script\n      type=\"speculationrules\"\n      dangerouslySetInnerHTML={{ __html: JSON.stringify(rules) }}\n    />\n  )\n}\n","/**\n * @sonordev/site-kit/layout — SiteKitLayout\n *\n * The master layout component. A single RSC that auto-composes every\n * site-kit feature your layout needs:\n *\n * Server-side (RSC):\n *   - ManagedFavicon (link tags from Portal logo)\n *   - ManagedScripts position=\"head\" (tracking pixels, analytics tags)\n *   - ManagedScripts position=\"body-end\"\n *\n * Client-side (island):\n *   - AnalyticsProvider (page views, scroll depth, heatmap, web vitals)\n *   - EngageWidget (popups, nudges, chat)\n *   - SignalBridge (A/B experiments, behavior tracking)\n *   - SitemapSync (keeps Portal seo_pages in sync)\n *\n * @example\n * ```tsx\n * // app/layout.tsx\n * import { SiteKitLayout } from '@sonordev/site-kit/layout'\n *\n * export default function RootLayout({ children }) {\n *   return (\n *     <html lang=\"en\">\n *       <body>\n *         <SiteKitLayout>\n *           <Header />\n *           <main>{children}</main>\n *           <Footer />\n *         </SiteKitLayout>\n *       </body>\n *     </html>\n *   )\n * }\n * ```\n *\n * @example Opt out of specific features:\n * ```tsx\n * <SiteKitLayout engage={false} signal={false}>\n *   {children}\n * </SiteKitLayout>\n * ```\n */\n\nimport * as React from 'react'\nimport { ManagedFavicon } from '../images/ManagedFavicon'\nimport { ManagedScripts } from '../seo/ManagedScripts'\nimport { resolveApiOrigin } from '../server/server-fetch'\nimport { resolveClientCredential } from '../server/mint-site-token'\nimport { SiteKitClientProviders } from './SiteKitClientProviders'\nimport { SpeculationRules } from './SpeculationRules'\nimport type { AnalyticsConfig, EngageConfig, SignalConfig } from './types'\n\nexport interface SiteKitLayoutProps {\n  children: React.ReactNode\n\n  /** Portal API key. Defaults to SONOR_API_KEY env var. */\n  apiKey?: string\n  /** Portal API URL. Defaults to env or https://api.sonor.io */\n  apiUrl?: string\n  /** Project ID (for Engage chat room routing). Auto-resolved if not provided. */\n  projectId?: string\n\n  /** Analytics tracking. true (default) | false | config object */\n  analytics?: boolean | AnalyticsConfig\n  /** Engage widgets (popups, chat). true (default) | false | config object */\n  engage?: boolean | EngageConfig\n  /** Signal AI (experiments, behavior). false (default) | true | config object */\n  signal?: boolean | SignalConfig\n  /**\n   * Runtime SitemapSync from the visitor's browser. **Default: false.**\n   *\n   * Sitemap registration is a build-time and server-side job. Build-time\n   * `createSitemap` is canonical, and sonor-api's nightly reconciler fetches\n   * each host's /sitemap.xml itself, so nothing here needs a visitor.\n   *\n   * This defaulted to true, and because its throttle lives in sessionStorage\n   * and its content hash in localStorage, every first-time visitor, incognito\n   * tab and crawler missed both guards and re-POSTed the entire sitemap:\n   * upforge.io took ~140 full syncs in a day, queencityriverboats.com ~76.\n   * That coupled sitemap traffic to VISITOR COUNT rather than to content\n   * changes — exactly backwards — and made every reader pay for platform\n   * bookkeeping in bandwidth, XML parsing and an API round-trip.\n   *\n   * Set true only to re-enable the legacy browser fallback for a site whose\n   * build-time registration cannot be made to work.\n   */\n  sitemapSync?: boolean\n  /**\n   * Fleet heartbeat — reports this site's kit version + active modules to Sonor\n   * once per session so the platform can track version drift. Default: true.\n   * Deferred like Analytics; never in the hydration path.\n   */\n  fleet?: boolean\n  /**\n   * Defer client modules (Analytics, Engage, SitemapSync) until window load +\n   * idle or the first user interaction, keeping their JS and mount work out of\n   * the critical hydration path. Default: true. Pass false to restore legacy\n   * eager mounting. SignalBridge is never deferred.\n   */\n  defer?: boolean\n  /** ManagedFavicon in <head>. Default: true */\n  favicon?: boolean\n  /** ManagedScripts (head + body-end). Default: true */\n  managedScripts?: boolean\n\n  /** Debug mode — logs to console. Default: false */\n  debug?: boolean\n  /**\n   * When true, append a screen-reader-only link to `/llms.txt` after main content.\n   * Default false — prefer `buildAiDiscoveryHeaders()` for discovery.\n   */\n  showLlmsTxtFooterLink?: boolean\n  /**\n   * Emit a Speculation Rules script prerendering same-origin links on intent\n   * (Chromium 121+; other browsers ignore it). Zero JS, static-safe. Default\n   * false — opt in per site, or pass { mode: 'prefetch' } for the\n   * conservative variant.\n   */\n  speculation?: boolean | { mode?: 'prerender' | 'prefetch'; exclude?: string[] }\n}\n\nexport async function SiteKitLayout({\n  children,\n  apiKey,\n  apiUrl,\n  projectId,\n  analytics = true,\n  engage = true,\n  signal = false,\n  sitemapSync = false,\n  fleet = true,\n  defer = true,\n  favicon = true,\n  managedScripts = true,\n  debug = false,\n  showLlmsTxtFooterLink = false,\n  speculation = false,\n}: SiteKitLayoutProps) {\n  // Resolve API config from env (server-side, safe)\n  const resolvedApiKey =\n    apiKey ??\n    process.env.SONOR_API_KEY ??\n    ''\n  const resolvedApiUrl =\n    apiUrl ??\n    process.env.SONOR_API_URL ??\n    'https://api.sonor.io'\n\n  if (!resolvedApiKey && debug) {\n    console.warn(\n      '[SiteKitLayout] No API key found. Set SONOR_API_KEY.',\n    )\n  }\n\n  const apiOrigin = resolveApiOrigin(resolvedApiUrl)\n\n  // Mint a short-lived client token so the raw key never reaches the browser.\n  // Falls back to the raw key if minting is unavailable (older API / transient\n  // outage) — the build never breaks. The client refreshes the token as needed.\n  const clientCredential = await resolveClientCredential(resolvedApiKey, resolvedApiUrl)\n\n  return (\n    <>\n      <link rel=\"preconnect\" href={apiOrigin} crossOrigin=\"anonymous\" />\n      <link rel=\"dns-prefetch\" href={apiOrigin} />\n      {/* Server-rendered head components */}\n      {favicon && <ManagedFavicon apiKey={resolvedApiKey} apiUrl={resolvedApiUrl} />}\n      {managedScripts && <ManagedScripts position=\"head\" />}\n      {speculation && (\n        <SpeculationRules {...(typeof speculation === 'object' ? speculation : {})} />\n      )}\n\n      {/* Client-side providers island — receives the minted token (or raw-key\n          fallback), never the raw key when minting succeeds. */}\n      <SiteKitClientProviders\n        apiKey={clientCredential}\n        apiUrl={resolvedApiUrl}\n        projectId={projectId}\n        analytics={analytics}\n        engage={engage}\n        signal={signal}\n        sitemapSync={sitemapSync}\n        fleet={fleet}\n        defer={defer}\n        debug={debug}\n      >\n        {children}\n        {showLlmsTxtFooterLink ? (\n          <footer className=\"sr-only\" aria-hidden=\"true\">\n            <a href=\"/llms.txt\">llms.txt</a>\n          </footer>\n        ) : null}\n      </SiteKitClientProviders>\n\n      {/* Server-rendered body-end scripts */}\n      {managedScripts && <ManagedScripts position=\"body-end\" />}\n    </>\n  )\n}\n"]}
+{"version":3,"sources":["../../src/layout/SpeculationRules.tsx","../../src/layout/SiteKitLayout.tsx"],"names":["jsx","resolveApiOrigin","resolveClientCredential","jsxs","Fragment","ManagedFavicon","ManagedScripts","SiteKitClientProviders"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA6BO,SAAS,iBAAiB,EAAE,IAAA,GAAO,aAAa,OAAA,GAAU,IAAG,EAA0B;AAC5F,EAAA,MAAM,KAAA,GAAQ;AAAA,IACZ,CAAC,IAAI,GAAG;AAAA,MACN;AAAA,QACE,MAAA,EAAQ,UAAA;AAAA,QACR,KAAA,EAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,EAAE,cAAc,IAAA,EAAK;AAAA,YACrB,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,OAAA,MAAY,EAAE,KAAK,EAAE,YAAA,EAAc,OAAA,EAAQ,EAAE,CAAE;AAAA;AAChE,SACF;AAAA,QACA,SAAA,EAAW;AAAA;AACb;AACF,GACF;AAEA,EAAA,uBACEA,cAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,kBAAA;AAAA,MACL,yBAAyB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAE;AAAA,GAC3D;AAEJ;ACsEA,eAAsB,aAAA,CAAc;AAAA,EAClC,QAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA,GAAY,IAAA;AAAA,EACZ,MAAA,GAAS,IAAA;AAAA,EACT,MAAA,GAAS,KAAA;AAAA,EACT,WAAA,GAAc,KAAA;AAAA,EACd,KAAA,GAAQ,IAAA;AAAA,EACR,KAAA,GAAQ,IAAA;AAAA,EACR,OAAA,GAAU,IAAA;AAAA,EACV,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,qBAAA,GAAwB,KAAA;AAAA,EACxB,WAAA,GAAc;AAChB,CAAA,EAAuB;AAErB,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,EAAA;AACF,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,sBAAA;AAEF,EAAA,IAAI,CAAC,kBAAkB,KAAA,EAAO;AAC5B,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAYC,kCAAiB,cAAc,CAAA;AAKjD,EAAA,MAAM,gBAAA,GAAmB,MAAMC,wCAAA,CAAwB,cAAA,EAAgB,cAAc,CAAA;AAErF,EAAA,uBACEC,eAAA,CAAAC,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAJ,eAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAa,IAAA,EAAM,SAAA,EAAW,aAAY,WAAA,EAAY,CAAA;AAAA,oBAChEA,cAAAA,CAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAA,EAAe,MAAM,SAAA,EAAW,CAAA;AAAA,IAEzC,2BAAWA,cAAAA,CAACK,mCAAe,MAAA,EAAQ,cAAA,EAAgB,QAAQ,cAAA,EAAgB,CAAA;AAAA,IAC3E,cAAA,oBAAkBL,cAAAA,CAACM,+BAAA,EAAA,EAAe,UAAS,MAAA,EAAO,CAAA;AAAA,IAClD,WAAA,oBACCN,cAAAA,CAAC,gBAAA,EAAA,EAAkB,GAAI,OAAO,WAAA,KAAgB,QAAA,GAAW,WAAA,GAAc,EAAC,EAAI,CAAA;AAAA,oBAK9EG,eAAA;AAAA,MAACI,uCAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,cAAA;AAAA,QACR,SAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QAEC,QAAA,EAAA;AAAA,UAAA,QAAA;AAAA,UACA,qBAAA,mBACCP,cAAAA,CAAC,QAAA,EAAA,EAAO,WAAU,SAAA,EAAU,aAAA,EAAY,MAAA,EACtC,QAAA,kBAAAA,eAAC,GAAA,EAAA,EAAE,IAAA,EAAK,WAAA,EAAY,QAAA,EAAA,UAAA,EAAQ,GAC9B,CAAA,GACE;AAAA;AAAA;AAAA,KACN;AAAA,IAGC,cAAA,oBAAkBA,cAAAA,CAACM,+BAAA,EAAA,EAAe,UAAS,UAAA,EAAW;AAAA,GAAA,EACzD,CAAA;AAEJ","file":"index.js","sourcesContent":["/**\n * SpeculationRules — declarative near-instant navigation for static sites.\n *\n * Emits a `<script type=\"speculationrules\">` telling supporting browsers\n * (Chromium 121+) to prerender same-origin links as the user shows intent\n * (moderate eagerness = hover/mousedown). Non-supporting browsers ignore the\n * tag entirely; there is no JS, no polyfill, no runtime cost — pure\n * progressive enhancement, ideal for the force-static fleet.\n *\n * Server component: renders during SSR, ships as static HTML.\n *\n * Excluded by default: URLs with a query string (often personalized) and\n * obvious non-page paths. Keep exclusions tight — prerendering a page that\n * sets cookies or fires analytics on load double-fires them only if the\n * analytics module ignores prerendering; site-kit analytics defers to\n * post-activation, and Chrome delays most side effects until activation.\n */\n\ninterface SpeculationRulesProps {\n  /**\n   * 'prerender' (default) renders the next page fully in the background;\n   * 'prefetch' only fetches the document. Prefetch is the conservative\n   * fallback if a site sees issues with prerender.\n   */\n  mode?: 'prerender' | 'prefetch'\n  /** Additional URL patterns to exclude (speculation rules URL pattern syntax). */\n  exclude?: string[]\n}\n\nexport function SpeculationRules({ mode = 'prerender', exclude = [] }: SpeculationRulesProps) {\n  const rules = {\n    [mode]: [\n      {\n        source: 'document' as const,\n        where: {\n          and: [\n            { href_matches: '/*' },\n            { not: { href_matches: '/*\\\\?*' } },\n            { not: { href_matches: '/api/*' } },\n            ...exclude.map(pattern => ({ not: { href_matches: pattern } })),\n          ],\n        },\n        eagerness: 'moderate' as const,\n      },\n    ],\n  }\n\n  return (\n    <script\n      type=\"speculationrules\"\n      dangerouslySetInnerHTML={{ __html: JSON.stringify(rules) }}\n    />\n  )\n}\n","/**\n * @sonordev/site-kit/layout — SiteKitLayout\n *\n * The master layout component. A single RSC that auto-composes every\n * site-kit feature your layout needs:\n *\n * Server-side (RSC):\n *   - ManagedFavicon (link tags from Portal logo)\n *   - ManagedScripts position=\"head\" (tracking pixels, analytics tags)\n *   - ManagedScripts position=\"body-end\"\n *\n * Client-side (island):\n *   - AnalyticsProvider (page views, scroll depth, heatmap, web vitals)\n *   - EngageWidget (popups, nudges, chat)\n *   - SignalBridge (A/B experiments, behavior tracking)\n *   - SitemapSync (keeps Portal seo_pages in sync)\n *\n * @example\n * ```tsx\n * // app/layout.tsx\n * import { SiteKitLayout } from '@sonordev/site-kit/layout'\n *\n * export default function RootLayout({ children }) {\n *   return (\n *     <html lang=\"en\">\n *       <body>\n *         <SiteKitLayout>\n *           <Header />\n *           <main>{children}</main>\n *           <Footer />\n *         </SiteKitLayout>\n *       </body>\n *     </html>\n *   )\n * }\n * ```\n *\n * @example Opt out of specific features:\n * ```tsx\n * <SiteKitLayout engage={false} signal={false}>\n *   {children}\n * </SiteKitLayout>\n * ```\n */\n\nimport * as React from 'react'\nimport { ManagedFavicon } from '../images/ManagedFavicon'\nimport { ManagedScripts } from '../seo/ManagedScripts'\nimport { resolveApiOrigin } from '../server/server-fetch'\nimport { resolveClientCredential } from '../server/mint-site-token'\nimport { SiteKitClientProviders } from './SiteKitClientProviders'\nimport { SpeculationRules } from './SpeculationRules'\nimport type { AnalyticsConfig, EngageConfig, SignalConfig } from './types'\n\nexport interface SiteKitLayoutProps {\n  children: React.ReactNode\n\n  /** Portal API key. Defaults to SONOR_API_KEY env var. */\n  apiKey?: string\n  /** Portal API URL. Defaults to env or https://api.sonor.io */\n  apiUrl?: string\n  /** Project ID (for Engage chat room routing). Auto-resolved if not provided. */\n  projectId?: string\n\n  /** Analytics tracking. true (default) | false | config object */\n  analytics?: boolean | AnalyticsConfig\n  /** Engage widgets (popups, chat). true (default) | false | config object */\n  engage?: boolean | EngageConfig\n  /** Signal AI (experiments, behavior). false (default) | true | config object */\n  signal?: boolean | SignalConfig\n  /**\n   * Runtime SitemapSync from the visitor's browser. **Default: false.**\n   *\n   * Sitemap registration is a build-time and server-side job. Build-time\n   * `createSitemap` is canonical, and sonor-api's nightly reconciler fetches\n   * each host's /sitemap.xml itself, so nothing here needs a visitor.\n   *\n   * This defaulted to true, and because its throttle lives in sessionStorage\n   * and its content hash in localStorage, every first-time visitor, incognito\n   * tab and crawler missed both guards and re-POSTed the entire sitemap:\n   * upforge.io took ~140 full syncs in a day, queencityriverboats.com ~76.\n   * That coupled sitemap traffic to VISITOR COUNT rather than to content\n   * changes — exactly backwards — and made every reader pay for platform\n   * bookkeeping in bandwidth, XML parsing and an API round-trip.\n   *\n   * Set true only to re-enable the legacy browser fallback for a site whose\n   * build-time registration cannot be made to work.\n   */\n  sitemapSync?: boolean\n  /**\n   * Fleet heartbeat — reports this site's kit version + active modules to Sonor\n   * once per session so the platform can track version drift. Default: true.\n   * Deferred like Analytics; never in the hydration path.\n   */\n  fleet?: boolean\n  /**\n   * Defer client modules (Analytics, Engage, SitemapSync) until window load +\n   * idle or the first user interaction, keeping their JS and mount work out of\n   * the critical hydration path. Default: true. Pass false to restore legacy\n   * eager mounting. SignalBridge is never deferred.\n   */\n  defer?: boolean\n  /** ManagedFavicon in <head>. Default: true */\n  favicon?: boolean\n  /** ManagedScripts (head + body-end). Default: true */\n  managedScripts?: boolean\n\n  /** Debug mode — logs to console. Default: false */\n  debug?: boolean\n  /**\n   * When true, append a screen-reader-only link to `/llms.txt` after main content.\n   * Default false — prefer `buildAiDiscoveryHeaders()` for discovery.\n   */\n  showLlmsTxtFooterLink?: boolean\n  /**\n   * Emit a Speculation Rules script prerendering same-origin links on intent\n   * (Chromium 121+; other browsers ignore it). Zero JS, static-safe. Default\n   * false — opt in per site, or pass { mode: 'prefetch' } for the\n   * conservative variant.\n   */\n  speculation?: boolean | { mode?: 'prerender' | 'prefetch'; exclude?: string[] }\n}\n\nexport async function SiteKitLayout({\n  children,\n  apiKey,\n  apiUrl,\n  projectId,\n  analytics = true,\n  engage = true,\n  signal = false,\n  sitemapSync = false,\n  fleet = true,\n  defer = true,\n  favicon = true,\n  managedScripts = true,\n  debug = false,\n  showLlmsTxtFooterLink = false,\n  speculation = false,\n}: SiteKitLayoutProps) {\n  // Resolve API config from env (server-side, safe)\n  const resolvedApiKey =\n    apiKey ??\n    process.env.SONOR_API_KEY ??\n    ''\n  const resolvedApiUrl =\n    apiUrl ??\n    process.env.SONOR_API_URL ??\n    'https://api.sonor.io'\n\n  if (!resolvedApiKey && debug) {\n    console.warn(\n      '[SiteKitLayout] No API key found. Set SONOR_API_KEY.',\n    )\n  }\n\n  const apiOrigin = resolveApiOrigin(resolvedApiUrl)\n\n  // Mint a short-lived client token so the raw key never reaches the browser.\n  // Falls back to the raw key if minting is unavailable (older API / transient\n  // outage) — the build never breaks. The client refreshes the token as needed.\n  const clientCredential = await resolveClientCredential(resolvedApiKey, resolvedApiUrl)\n\n  return (\n    <>\n      <link rel=\"preconnect\" href={apiOrigin} crossOrigin=\"anonymous\" />\n      <link rel=\"dns-prefetch\" href={apiOrigin} />\n      {/* Server-rendered head components */}\n      {favicon && <ManagedFavicon apiKey={resolvedApiKey} apiUrl={resolvedApiUrl} />}\n      {managedScripts && <ManagedScripts position=\"head\" />}\n      {speculation && (\n        <SpeculationRules {...(typeof speculation === 'object' ? speculation : {})} />\n      )}\n\n      {/* Client-side providers island — receives the minted token (or raw-key\n          fallback), never the raw key when minting succeeds. */}\n      <SiteKitClientProviders\n        apiKey={clientCredential}\n        apiUrl={resolvedApiUrl}\n        projectId={projectId}\n        analytics={analytics}\n        engage={engage}\n        signal={signal}\n        sitemapSync={sitemapSync}\n        fleet={fleet}\n        defer={defer}\n        debug={debug}\n      >\n        {children}\n        {showLlmsTxtFooterLink ? (\n          <footer className=\"sr-only\" aria-hidden=\"true\">\n            <a href=\"/llms.txt\">llms.txt</a>\n          </footer>\n        ) : null}\n      </SiteKitClientProviders>\n\n      {/* Server-rendered body-end scripts */}\n      {managedScripts && <ManagedScripts position=\"body-end\" />}\n    </>\n  )\n}\n"]}

package/dist/layout/index.mjs

@@ -1,11 +1,11 @@
-import { SiteKitClientProviders } from '../chunk-USQPRLSG.mjs';
-import '../chunk-QOKMH2TD.mjs';
-import '../chunk-BI7DH42Z.mjs';
+import { SiteKitClientProviders } from '../chunk-FPVYKSXE.mjs';
+import '../chunk-VA2O5OSV.mjs';
+import '../chunk-MDQLON5R.mjs';
 import '../chunk-4WCA2HM6.mjs';
 import '../chunk-ZVBLXXNJ.mjs';
 import { ManagedFavicon } from '../chunk-CU6OGBKK.mjs';
-import '../chunk-GSU6VTCZ.mjs';
-import { resolveClientCredential } from '../chunk-ZEBOOUBP.mjs';
+import '../chunk-A2HL22BO.mjs';
+import { resolveClientCredential } from '../chunk-B6QPCAEG.mjs';
 import '../chunk-BQP6JIE2.mjs';
 import { ManagedScripts } from '../chunk-6PJTLBRR.mjs';
 import { resolveApiOrigin } from '../chunk-6XNEGG5B.mjs';
@@ -13,10 +13,11 @@ import '../chunk-KZVSB5WE.mjs';
 import '../chunk-ZN4HBK5C.mjs';
 import '../chunk-ZZQAGCSI.mjs';
 import '../chunk-6EDVCUAG.mjs';
-import '../chunk-A6UYV475.mjs';
-import '../chunk-5T3J24K4.mjs';
-import '../chunk-YRKWJCML.mjs';
-import '../chunk-K3PVUXKB.mjs';
+import '../chunk-CABEVWKJ.mjs';
+import '../chunk-MXJOKOFK.mjs';
+import '../chunk-3BLKKF67.mjs';
+import '../chunk-PGYOBEPL.mjs';
+import '../chunk-GIGUDKLS.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 

package/dist/layout/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/layout/SpeculationRules.tsx","../../src/layout/SiteKitLayout.tsx"],"names":["jsx"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA6BO,SAAS,iBAAiB,EAAE,IAAA,GAAO,aAAa,OAAA,GAAU,IAAG,EAA0B;AAC5F,EAAA,MAAM,KAAA,GAAQ;AAAA,IACZ,CAAC,IAAI,GAAG;AAAA,MACN;AAAA,QACE,MAAA,EAAQ,UAAA;AAAA,QACR,KAAA,EAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,EAAE,cAAc,IAAA,EAAK;AAAA,YACrB,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,OAAA,MAAY,EAAE,KAAK,EAAE,YAAA,EAAc,OAAA,EAAQ,EAAE,CAAE;AAAA;AAChE,SACF;AAAA,QACA,SAAA,EAAW;AAAA;AACb;AACF,GACF;AAEA,EAAA,uBACE,GAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,kBAAA;AAAA,MACL,yBAAyB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAE;AAAA,GAC3D;AAEJ;ACsEA,eAAsB,aAAA,CAAc;AAAA,EAClC,QAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA,GAAY,IAAA;AAAA,EACZ,MAAA,GAAS,IAAA;AAAA,EACT,MAAA,GAAS,KAAA;AAAA,EACT,WAAA,GAAc,KAAA;AAAA,EACd,KAAA,GAAQ,IAAA;AAAA,EACR,KAAA,GAAQ,IAAA;AAAA,EACR,OAAA,GAAU,IAAA;AAAA,EACV,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,qBAAA,GAAwB,KAAA;AAAA,EACxB,WAAA,GAAc;AAChB,CAAA,EAAuB;AAErB,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,EAAA;AACF,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,sBAAA;AAEF,EAAA,IAAI,CAAC,kBAAkB,KAAA,EAAO;AAC5B,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,iBAAiB,cAAc,CAAA;AAKjD,EAAA,MAAM,gBAAA,GAAmB,MAAM,uBAAA,CAAwB,cAAA,EAAgB,cAAc,CAAA;AAErF,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAA,IAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAa,IAAA,EAAM,SAAA,EAAW,aAAY,WAAA,EAAY,CAAA;AAAA,oBAChEA,GAAAA,CAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAA,EAAe,MAAM,SAAA,EAAW,CAAA;AAAA,IAEzC,2BAAWA,GAAAA,CAAC,kBAAe,MAAA,EAAQ,cAAA,EAAgB,QAAQ,cAAA,EAAgB,CAAA;AAAA,IAC3E,cAAA,oBAAkBA,GAAAA,CAAC,cAAA,EAAA,EAAe,UAAS,MAAA,EAAO,CAAA;AAAA,IAClD,WAAA,oBACCA,GAAAA,CAAC,gBAAA,EAAA,EAAkB,GAAI,OAAO,WAAA,KAAgB,QAAA,GAAW,WAAA,GAAc,EAAC,EAAI,CAAA;AAAA,oBAK9E,IAAA;AAAA,MAAC,sBAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,cAAA;AAAA,QACR,SAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QAEC,QAAA,EAAA;AAAA,UAAA,QAAA;AAAA,UACA,qBAAA,mBACCA,GAAAA,CAAC,QAAA,EAAA,EAAO,WAAU,SAAA,EAAU,aAAA,EAAY,MAAA,EACtC,QAAA,kBAAAA,IAAC,GAAA,EAAA,EAAE,IAAA,EAAK,WAAA,EAAY,QAAA,EAAA,UAAA,EAAQ,GAC9B,CAAA,GACE;AAAA;AAAA;AAAA,KACN;AAAA,IAGC,cAAA,oBAAkBA,GAAAA,CAAC,cAAA,EAAA,EAAe,UAAS,UAAA,EAAW;AAAA,GAAA,EACzD,CAAA;AAEJ","file":"index.mjs","sourcesContent":["/**\n * SpeculationRules — declarative near-instant navigation for static sites.\n *\n * Emits a `<script type=\"speculationrules\">` telling supporting browsers\n * (Chromium 121+) to prerender same-origin links as the user shows intent\n * (moderate eagerness = hover/mousedown). Non-supporting browsers ignore the\n * tag entirely; there is no JS, no polyfill, no runtime cost — pure\n * progressive enhancement, ideal for the force-static fleet.\n *\n * Server component: renders during SSR, ships as static HTML.\n *\n * Excluded by default: URLs with a query string (often personalized) and\n * obvious non-page paths. Keep exclusions tight — prerendering a page that\n * sets cookies or fires analytics on load double-fires them only if the\n * analytics module ignores prerendering; site-kit analytics defers to\n * post-activation, and Chrome delays most side effects until activation.\n */\n\ninterface SpeculationRulesProps {\n  /**\n   * 'prerender' (default) renders the next page fully in the background;\n   * 'prefetch' only fetches the document. Prefetch is the conservative\n   * fallback if a site sees issues with prerender.\n   */\n  mode?: 'prerender' | 'prefetch'\n  /** Additional URL patterns to exclude (speculation rules URL pattern syntax). */\n  exclude?: string[]\n}\n\nexport function SpeculationRules({ mode = 'prerender', exclude = [] }: SpeculationRulesProps) {\n  const rules = {\n    [mode]: [\n      {\n        source: 'document' as const,\n        where: {\n          and: [\n            { href_matches: '/*' },\n            { not: { href_matches: '/*\\\\?*' } },\n            { not: { href_matches: '/api/*' } },\n            ...exclude.map(pattern => ({ not: { href_matches: pattern } })),\n          ],\n        },\n        eagerness: 'moderate' as const,\n      },\n    ],\n  }\n\n  return (\n    <script\n      type=\"speculationrules\"\n      dangerouslySetInnerHTML={{ __html: JSON.stringify(rules) }}\n    />\n  )\n}\n","/**\n * @sonordev/site-kit/layout — SiteKitLayout\n *\n * The master layout component. A single RSC that auto-composes every\n * site-kit feature your layout needs:\n *\n * Server-side (RSC):\n *   - ManagedFavicon (link tags from Portal logo)\n *   - ManagedScripts position=\"head\" (tracking pixels, analytics tags)\n *   - ManagedScripts position=\"body-end\"\n *\n * Client-side (island):\n *   - AnalyticsProvider (page views, scroll depth, heatmap, web vitals)\n *   - EngageWidget (popups, nudges, chat)\n *   - SignalBridge (A/B experiments, behavior tracking)\n *   - SitemapSync (keeps Portal seo_pages in sync)\n *\n * @example\n * ```tsx\n * // app/layout.tsx\n * import { SiteKitLayout } from '@sonordev/site-kit/layout'\n *\n * export default function RootLayout({ children }) {\n *   return (\n *     <html lang=\"en\">\n *       <body>\n *         <SiteKitLayout>\n *           <Header />\n *           <main>{children}</main>\n *           <Footer />\n *         </SiteKitLayout>\n *       </body>\n *     </html>\n *   )\n * }\n * ```\n *\n * @example Opt out of specific features:\n * ```tsx\n * <SiteKitLayout engage={false} signal={false}>\n *   {children}\n * </SiteKitLayout>\n * ```\n */\n\nimport * as React from 'react'\nimport { ManagedFavicon } from '../images/ManagedFavicon'\nimport { ManagedScripts } from '../seo/ManagedScripts'\nimport { resolveApiOrigin } from '../server/server-fetch'\nimport { resolveClientCredential } from '../server/mint-site-token'\nimport { SiteKitClientProviders } from './SiteKitClientProviders'\nimport { SpeculationRules } from './SpeculationRules'\nimport type { AnalyticsConfig, EngageConfig, SignalConfig } from './types'\n\nexport interface SiteKitLayoutProps {\n  children: React.ReactNode\n\n  /** Portal API key. Defaults to SONOR_API_KEY env var. */\n  apiKey?: string\n  /** Portal API URL. Defaults to env or https://api.sonor.io */\n  apiUrl?: string\n  /** Project ID (for Engage chat room routing). Auto-resolved if not provided. */\n  projectId?: string\n\n  /** Analytics tracking. true (default) | false | config object */\n  analytics?: boolean | AnalyticsConfig\n  /** Engage widgets (popups, chat). true (default) | false | config object */\n  engage?: boolean | EngageConfig\n  /** Signal AI (experiments, behavior). false (default) | true | config object */\n  signal?: boolean | SignalConfig\n  /**\n   * Runtime SitemapSync from the visitor's browser. **Default: false.**\n   *\n   * Sitemap registration is a build-time and server-side job. Build-time\n   * `createSitemap` is canonical, and sonor-api's nightly reconciler fetches\n   * each host's /sitemap.xml itself, so nothing here needs a visitor.\n   *\n   * This defaulted to true, and because its throttle lives in sessionStorage\n   * and its content hash in localStorage, every first-time visitor, incognito\n   * tab and crawler missed both guards and re-POSTed the entire sitemap:\n   * upforge.io took ~140 full syncs in a day, queencityriverboats.com ~76.\n   * That coupled sitemap traffic to VISITOR COUNT rather than to content\n   * changes — exactly backwards — and made every reader pay for platform\n   * bookkeeping in bandwidth, XML parsing and an API round-trip.\n   *\n   * Set true only to re-enable the legacy browser fallback for a site whose\n   * build-time registration cannot be made to work.\n   */\n  sitemapSync?: boolean\n  /**\n   * Fleet heartbeat — reports this site's kit version + active modules to Sonor\n   * once per session so the platform can track version drift. Default: true.\n   * Deferred like Analytics; never in the hydration path.\n   */\n  fleet?: boolean\n  /**\n   * Defer client modules (Analytics, Engage, SitemapSync) until window load +\n   * idle or the first user interaction, keeping their JS and mount work out of\n   * the critical hydration path. Default: true. Pass false to restore legacy\n   * eager mounting. SignalBridge is never deferred.\n   */\n  defer?: boolean\n  /** ManagedFavicon in <head>. Default: true */\n  favicon?: boolean\n  /** ManagedScripts (head + body-end). Default: true */\n  managedScripts?: boolean\n\n  /** Debug mode — logs to console. Default: false */\n  debug?: boolean\n  /**\n   * When true, append a screen-reader-only link to `/llms.txt` after main content.\n   * Default false — prefer `buildAiDiscoveryHeaders()` for discovery.\n   */\n  showLlmsTxtFooterLink?: boolean\n  /**\n   * Emit a Speculation Rules script prerendering same-origin links on intent\n   * (Chromium 121+; other browsers ignore it). Zero JS, static-safe. Default\n   * false — opt in per site, or pass { mode: 'prefetch' } for the\n   * conservative variant.\n   */\n  speculation?: boolean | { mode?: 'prerender' | 'prefetch'; exclude?: string[] }\n}\n\nexport async function SiteKitLayout({\n  children,\n  apiKey,\n  apiUrl,\n  projectId,\n  analytics = true,\n  engage = true,\n  signal = false,\n  sitemapSync = false,\n  fleet = true,\n  defer = true,\n  favicon = true,\n  managedScripts = true,\n  debug = false,\n  showLlmsTxtFooterLink = false,\n  speculation = false,\n}: SiteKitLayoutProps) {\n  // Resolve API config from env (server-side, safe)\n  const resolvedApiKey =\n    apiKey ??\n    process.env.SONOR_API_KEY ??\n    ''\n  const resolvedApiUrl =\n    apiUrl ??\n    process.env.SONOR_API_URL ??\n    'https://api.sonor.io'\n\n  if (!resolvedApiKey && debug) {\n    console.warn(\n      '[SiteKitLayout] No API key found. Set SONOR_API_KEY.',\n    )\n  }\n\n  const apiOrigin = resolveApiOrigin(resolvedApiUrl)\n\n  // Mint a short-lived client token so the raw key never reaches the browser.\n  // Falls back to the raw key if minting is unavailable (older API / transient\n  // outage) — the build never breaks. The client refreshes the token as needed.\n  const clientCredential = await resolveClientCredential(resolvedApiKey, resolvedApiUrl)\n\n  return (\n    <>\n      <link rel=\"preconnect\" href={apiOrigin} crossOrigin=\"anonymous\" />\n      <link rel=\"dns-prefetch\" href={apiOrigin} />\n      {/* Server-rendered head components */}\n      {favicon && <ManagedFavicon apiKey={resolvedApiKey} apiUrl={resolvedApiUrl} />}\n      {managedScripts && <ManagedScripts position=\"head\" />}\n      {speculation && (\n        <SpeculationRules {...(typeof speculation === 'object' ? speculation : {})} />\n      )}\n\n      {/* Client-side providers island — receives the minted token (or raw-key\n          fallback), never the raw key when minting succeeds. */}\n      <SiteKitClientProviders\n        apiKey={clientCredential}\n        apiUrl={resolvedApiUrl}\n        projectId={projectId}\n        analytics={analytics}\n        engage={engage}\n        signal={signal}\n        sitemapSync={sitemapSync}\n        fleet={fleet}\n        defer={defer}\n        debug={debug}\n      >\n        {children}\n        {showLlmsTxtFooterLink ? (\n          <footer className=\"sr-only\" aria-hidden=\"true\">\n            <a href=\"/llms.txt\">llms.txt</a>\n          </footer>\n        ) : null}\n      </SiteKitClientProviders>\n\n      {/* Server-rendered body-end scripts */}\n      {managedScripts && <ManagedScripts position=\"body-end\" />}\n    </>\n  )\n}\n"]}
+{"version":3,"sources":["../../src/layout/SpeculationRules.tsx","../../src/layout/SiteKitLayout.tsx"],"names":["jsx"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BO,SAAS,iBAAiB,EAAE,IAAA,GAAO,aAAa,OAAA,GAAU,IAAG,EAA0B;AAC5F,EAAA,MAAM,KAAA,GAAQ;AAAA,IACZ,CAAC,IAAI,GAAG;AAAA,MACN;AAAA,QACE,MAAA,EAAQ,UAAA;AAAA,QACR,KAAA,EAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,EAAE,cAAc,IAAA,EAAK;AAAA,YACrB,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,EAAE,GAAA,EAAK,EAAE,YAAA,EAAc,UAAS,EAAE;AAAA,YAClC,GAAG,OAAA,CAAQ,GAAA,CAAI,CAAA,OAAA,MAAY,EAAE,KAAK,EAAE,YAAA,EAAc,OAAA,EAAQ,EAAE,CAAE;AAAA;AAChE,SACF;AAAA,QACA,SAAA,EAAW;AAAA;AACb;AACF,GACF;AAEA,EAAA,uBACE,GAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,kBAAA;AAAA,MACL,yBAAyB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAE;AAAA,GAC3D;AAEJ;ACsEA,eAAsB,aAAA,CAAc;AAAA,EAClC,QAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA,GAAY,IAAA;AAAA,EACZ,MAAA,GAAS,IAAA;AAAA,EACT,MAAA,GAAS,KAAA;AAAA,EACT,WAAA,GAAc,KAAA;AAAA,EACd,KAAA,GAAQ,IAAA;AAAA,EACR,KAAA,GAAQ,IAAA;AAAA,EACR,OAAA,GAAU,IAAA;AAAA,EACV,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,qBAAA,GAAwB,KAAA;AAAA,EACxB,WAAA,GAAc;AAChB,CAAA,EAAuB;AAErB,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,EAAA;AACF,EAAA,MAAM,cAAA,GACJ,MAAA,IACA,OAAA,CAAQ,GAAA,CAAI,aAAA,IACZ,sBAAA;AAEF,EAAA,IAAI,CAAC,kBAAkB,KAAA,EAAO;AAC5B,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,iBAAiB,cAAc,CAAA;AAKjD,EAAA,MAAM,gBAAA,GAAmB,MAAM,uBAAA,CAAwB,cAAA,EAAgB,cAAc,CAAA;AAErF,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAAA,IAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAa,IAAA,EAAM,SAAA,EAAW,aAAY,WAAA,EAAY,CAAA;AAAA,oBAChEA,GAAAA,CAAC,MAAA,EAAA,EAAK,GAAA,EAAI,cAAA,EAAe,MAAM,SAAA,EAAW,CAAA;AAAA,IAEzC,2BAAWA,GAAAA,CAAC,kBAAe,MAAA,EAAQ,cAAA,EAAgB,QAAQ,cAAA,EAAgB,CAAA;AAAA,IAC3E,cAAA,oBAAkBA,GAAAA,CAAC,cAAA,EAAA,EAAe,UAAS,MAAA,EAAO,CAAA;AAAA,IAClD,WAAA,oBACCA,GAAAA,CAAC,gBAAA,EAAA,EAAkB,GAAI,OAAO,WAAA,KAAgB,QAAA,GAAW,WAAA,GAAc,EAAC,EAAI,CAAA;AAAA,oBAK9E,IAAA;AAAA,MAAC,sBAAA;AAAA,MAAA;AAAA,QACC,MAAA,EAAQ,gBAAA;AAAA,QACR,MAAA,EAAQ,cAAA;AAAA,QACR,SAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA;AAAA,QACA,MAAA;AAAA,QACA,WAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QAEC,QAAA,EAAA;AAAA,UAAA,QAAA;AAAA,UACA,qBAAA,mBACCA,GAAAA,CAAC,QAAA,EAAA,EAAO,WAAU,SAAA,EAAU,aAAA,EAAY,MAAA,EACtC,QAAA,kBAAAA,IAAC,GAAA,EAAA,EAAE,IAAA,EAAK,WAAA,EAAY,QAAA,EAAA,UAAA,EAAQ,GAC9B,CAAA,GACE;AAAA;AAAA;AAAA,KACN;AAAA,IAGC,cAAA,oBAAkBA,GAAAA,CAAC,cAAA,EAAA,EAAe,UAAS,UAAA,EAAW;AAAA,GAAA,EACzD,CAAA;AAEJ","file":"index.mjs","sourcesContent":["/**\n * SpeculationRules — declarative near-instant navigation for static sites.\n *\n * Emits a `<script type=\"speculationrules\">` telling supporting browsers\n * (Chromium 121+) to prerender same-origin links as the user shows intent\n * (moderate eagerness = hover/mousedown). Non-supporting browsers ignore the\n * tag entirely; there is no JS, no polyfill, no runtime cost — pure\n * progressive enhancement, ideal for the force-static fleet.\n *\n * Server component: renders during SSR, ships as static HTML.\n *\n * Excluded by default: URLs with a query string (often personalized) and\n * obvious non-page paths. Keep exclusions tight — prerendering a page that\n * sets cookies or fires analytics on load double-fires them only if the\n * analytics module ignores prerendering; site-kit analytics defers to\n * post-activation, and Chrome delays most side effects until activation.\n */\n\ninterface SpeculationRulesProps {\n  /**\n   * 'prerender' (default) renders the next page fully in the background;\n   * 'prefetch' only fetches the document. Prefetch is the conservative\n   * fallback if a site sees issues with prerender.\n   */\n  mode?: 'prerender' | 'prefetch'\n  /** Additional URL patterns to exclude (speculation rules URL pattern syntax). */\n  exclude?: string[]\n}\n\nexport function SpeculationRules({ mode = 'prerender', exclude = [] }: SpeculationRulesProps) {\n  const rules = {\n    [mode]: [\n      {\n        source: 'document' as const,\n        where: {\n          and: [\n            { href_matches: '/*' },\n            { not: { href_matches: '/*\\\\?*' } },\n            { not: { href_matches: '/api/*' } },\n            ...exclude.map(pattern => ({ not: { href_matches: pattern } })),\n          ],\n        },\n        eagerness: 'moderate' as const,\n      },\n    ],\n  }\n\n  return (\n    <script\n      type=\"speculationrules\"\n      dangerouslySetInnerHTML={{ __html: JSON.stringify(rules) }}\n    />\n  )\n}\n","/**\n * @sonordev/site-kit/layout — SiteKitLayout\n *\n * The master layout component. A single RSC that auto-composes every\n * site-kit feature your layout needs:\n *\n * Server-side (RSC):\n *   - ManagedFavicon (link tags from Portal logo)\n *   - ManagedScripts position=\"head\" (tracking pixels, analytics tags)\n *   - ManagedScripts position=\"body-end\"\n *\n * Client-side (island):\n *   - AnalyticsProvider (page views, scroll depth, heatmap, web vitals)\n *   - EngageWidget (popups, nudges, chat)\n *   - SignalBridge (A/B experiments, behavior tracking)\n *   - SitemapSync (keeps Portal seo_pages in sync)\n *\n * @example\n * ```tsx\n * // app/layout.tsx\n * import { SiteKitLayout } from '@sonordev/site-kit/layout'\n *\n * export default function RootLayout({ children }) {\n *   return (\n *     <html lang=\"en\">\n *       <body>\n *         <SiteKitLayout>\n *           <Header />\n *           <main>{children}</main>\n *           <Footer />\n *         </SiteKitLayout>\n *       </body>\n *     </html>\n *   )\n * }\n * ```\n *\n * @example Opt out of specific features:\n * ```tsx\n * <SiteKitLayout engage={false} signal={false}>\n *   {children}\n * </SiteKitLayout>\n * ```\n */\n\nimport * as React from 'react'\nimport { ManagedFavicon } from '../images/ManagedFavicon'\nimport { ManagedScripts } from '../seo/ManagedScripts'\nimport { resolveApiOrigin } from '../server/server-fetch'\nimport { resolveClientCredential } from '../server/mint-site-token'\nimport { SiteKitClientProviders } from './SiteKitClientProviders'\nimport { SpeculationRules } from './SpeculationRules'\nimport type { AnalyticsConfig, EngageConfig, SignalConfig } from './types'\n\nexport interface SiteKitLayoutProps {\n  children: React.ReactNode\n\n  /** Portal API key. Defaults to SONOR_API_KEY env var. */\n  apiKey?: string\n  /** Portal API URL. Defaults to env or https://api.sonor.io */\n  apiUrl?: string\n  /** Project ID (for Engage chat room routing). Auto-resolved if not provided. */\n  projectId?: string\n\n  /** Analytics tracking. true (default) | false | config object */\n  analytics?: boolean | AnalyticsConfig\n  /** Engage widgets (popups, chat). true (default) | false | config object */\n  engage?: boolean | EngageConfig\n  /** Signal AI (experiments, behavior). false (default) | true | config object */\n  signal?: boolean | SignalConfig\n  /**\n   * Runtime SitemapSync from the visitor's browser. **Default: false.**\n   *\n   * Sitemap registration is a build-time and server-side job. Build-time\n   * `createSitemap` is canonical, and sonor-api's nightly reconciler fetches\n   * each host's /sitemap.xml itself, so nothing here needs a visitor.\n   *\n   * This defaulted to true, and because its throttle lives in sessionStorage\n   * and its content hash in localStorage, every first-time visitor, incognito\n   * tab and crawler missed both guards and re-POSTed the entire sitemap:\n   * upforge.io took ~140 full syncs in a day, queencityriverboats.com ~76.\n   * That coupled sitemap traffic to VISITOR COUNT rather than to content\n   * changes — exactly backwards — and made every reader pay for platform\n   * bookkeeping in bandwidth, XML parsing and an API round-trip.\n   *\n   * Set true only to re-enable the legacy browser fallback for a site whose\n   * build-time registration cannot be made to work.\n   */\n  sitemapSync?: boolean\n  /**\n   * Fleet heartbeat — reports this site's kit version + active modules to Sonor\n   * once per session so the platform can track version drift. Default: true.\n   * Deferred like Analytics; never in the hydration path.\n   */\n  fleet?: boolean\n  /**\n   * Defer client modules (Analytics, Engage, SitemapSync) until window load +\n   * idle or the first user interaction, keeping their JS and mount work out of\n   * the critical hydration path. Default: true. Pass false to restore legacy\n   * eager mounting. SignalBridge is never deferred.\n   */\n  defer?: boolean\n  /** ManagedFavicon in <head>. Default: true */\n  favicon?: boolean\n  /** ManagedScripts (head + body-end). Default: true */\n  managedScripts?: boolean\n\n  /** Debug mode — logs to console. Default: false */\n  debug?: boolean\n  /**\n   * When true, append a screen-reader-only link to `/llms.txt` after main content.\n   * Default false — prefer `buildAiDiscoveryHeaders()` for discovery.\n   */\n  showLlmsTxtFooterLink?: boolean\n  /**\n   * Emit a Speculation Rules script prerendering same-origin links on intent\n   * (Chromium 121+; other browsers ignore it). Zero JS, static-safe. Default\n   * false — opt in per site, or pass { mode: 'prefetch' } for the\n   * conservative variant.\n   */\n  speculation?: boolean | { mode?: 'prerender' | 'prefetch'; exclude?: string[] }\n}\n\nexport async function SiteKitLayout({\n  children,\n  apiKey,\n  apiUrl,\n  projectId,\n  analytics = true,\n  engage = true,\n  signal = false,\n  sitemapSync = false,\n  fleet = true,\n  defer = true,\n  favicon = true,\n  managedScripts = true,\n  debug = false,\n  showLlmsTxtFooterLink = false,\n  speculation = false,\n}: SiteKitLayoutProps) {\n  // Resolve API config from env (server-side, safe)\n  const resolvedApiKey =\n    apiKey ??\n    process.env.SONOR_API_KEY ??\n    ''\n  const resolvedApiUrl =\n    apiUrl ??\n    process.env.SONOR_API_URL ??\n    'https://api.sonor.io'\n\n  if (!resolvedApiKey && debug) {\n    console.warn(\n      '[SiteKitLayout] No API key found. Set SONOR_API_KEY.',\n    )\n  }\n\n  const apiOrigin = resolveApiOrigin(resolvedApiUrl)\n\n  // Mint a short-lived client token so the raw key never reaches the browser.\n  // Falls back to the raw key if minting is unavailable (older API / transient\n  // outage) — the build never breaks. The client refreshes the token as needed.\n  const clientCredential = await resolveClientCredential(resolvedApiKey, resolvedApiUrl)\n\n  return (\n    <>\n      <link rel=\"preconnect\" href={apiOrigin} crossOrigin=\"anonymous\" />\n      <link rel=\"dns-prefetch\" href={apiOrigin} />\n      {/* Server-rendered head components */}\n      {favicon && <ManagedFavicon apiKey={resolvedApiKey} apiUrl={resolvedApiUrl} />}\n      {managedScripts && <ManagedScripts position=\"head\" />}\n      {speculation && (\n        <SpeculationRules {...(typeof speculation === 'object' ? speculation : {})} />\n      )}\n\n      {/* Client-side providers island — receives the minted token (or raw-key\n          fallback), never the raw key when minting succeeds. */}\n      <SiteKitClientProviders\n        apiKey={clientCredential}\n        apiUrl={resolvedApiUrl}\n        projectId={projectId}\n        analytics={analytics}\n        engage={engage}\n        signal={signal}\n        sitemapSync={sitemapSync}\n        fleet={fleet}\n        defer={defer}\n        debug={debug}\n      >\n        {children}\n        {showLlmsTxtFooterLink ? (\n          <footer className=\"sr-only\" aria-hidden=\"true\">\n            <a href=\"/llms.txt\">llms.txt</a>\n          </footer>\n        ) : null}\n      </SiteKitClientProviders>\n\n      {/* Server-rendered body-end scripts */}\n      {managedScripts && <ManagedScripts position=\"body-end\" />}\n    </>\n  )\n}\n"]}

package/dist/layout/types.d.ts

@@ -46,6 +46,12 @@ export interface AnalyticsConfig {
  */
 export interface EngageConfig extends ChatLauncherPlacement {
     chatEnabled?: boolean;
+    /**
+     * Show popups and the chat launcher even when this page is framed by
+     * another origin (a case study's device frame). Off by default, like
+     * analytics' allowInFrame.
+     */
+    allowInFrame?: boolean;
 }
 export interface SignalConfig {
     realtime?: boolean;

package/dist/layout/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/layout/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE5D,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,qBAAqB;IACzD,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/layout/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE5D,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,mEAAmE;IACnE,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,qBAAqB;IACzD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B"}

package/dist/{lib-6GWWPDJR.js → lib-6HOOMENJ.js}

@@ -1,28 +1,28 @@
 'use strict';
 
-var chunkXXSSUCJB_js = require('./chunk-XXSSUCJB.js');
+var chunkI7AZC5ZQ_js = require('./chunk-I7AZC5ZQ.js');
 require('./chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "getColumn", {
   enumerable: true,
-  get: function () { return chunkXXSSUCJB_js.getColumn; }
+  get: function () { return chunkI7AZC5ZQ_js.getColumn; }
 });
 Object.defineProperty(exports, "getLine", {
   enumerable: true,
-  get: function () { return chunkXXSSUCJB_js.getLine; }
+  get: function () { return chunkI7AZC5ZQ_js.getLine; }
 });
 Object.defineProperty(exports, "parse", {
   enumerable: true,
-  get: function () { return chunkXXSSUCJB_js.parse; }
+  get: function () { return chunkI7AZC5ZQ_js.parse; }
 });
 Object.defineProperty(exports, "parseExpression", {
   enumerable: true,
-  get: function () { return chunkXXSSUCJB_js.parseExpression; }
+  get: function () { return chunkI7AZC5ZQ_js.parseExpression; }
 });
 Object.defineProperty(exports, "tokTypes", {
   enumerable: true,
-  get: function () { return chunkXXSSUCJB_js.tokTypes; }
+  get: function () { return chunkI7AZC5ZQ_js.tokTypes; }
 });
-//# sourceMappingURL=lib-6GWWPDJR.js.map
+//# sourceMappingURL=lib-6HOOMENJ.js.map

package/dist/{lib-WFB5RLEQ.js → lib-BGAWCSUH.js}

@@ -2,30 +2,30 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var chunkATPQ6264_js = require('./chunk-ATPQ6264.js');
-require('./chunk-XXSSUCJB.js');
+var chunkJS75ORH7_js = require('./chunk-JS75ORH7.js');
+require('./chunk-I7AZC5ZQ.js');
 require('./chunk-SNAQBZPT.js');
 
 
 
 Object.defineProperty(exports, "Hub", {
   enumerable: true,
-  get: function () { return chunkATPQ6264_js.Hub; }
+  get: function () { return chunkJS75ORH7_js.Hub; }
 });
 Object.defineProperty(exports, "NodePath", {
   enumerable: true,
-  get: function () { return chunkATPQ6264_js.NodePath_Final; }
+  get: function () { return chunkJS75ORH7_js.NodePath_Final; }
 });
 Object.defineProperty(exports, "Scope", {
   enumerable: true,
-  get: function () { return chunkATPQ6264_js.Scope; }
+  get: function () { return chunkJS75ORH7_js.Scope; }
 });
 Object.defineProperty(exports, "default", {
   enumerable: true,
-  get: function () { return chunkATPQ6264_js.traverse; }
+  get: function () { return chunkJS75ORH7_js.traverse; }
 });
 Object.defineProperty(exports, "visitors", {
   enumerable: true,
-  get: function () { return chunkATPQ6264_js.visitors; }
+  get: function () { return chunkJS75ORH7_js.visitors; }
 });
-//# sourceMappingURL=lib-WFB5RLEQ.js.map
+//# sourceMappingURL=lib-BGAWCSUH.js.map

package/dist/{lib-N5PD6JNJ.mjs → lib-R7IQ4ZHE.mjs}

@@ -1,3 +1,3 @@
-export { getColumn, getLine, parse, parseExpression, tokTypes } from './chunk-TIFVAASU.mjs';
+export { getColumn, getLine, parse, parseExpression, tokTypes } from './chunk-5YA6SI4Z.mjs';
 import './chunk-BEXTDHO4.mjs';
-//# sourceMappingURL=lib-N5PD6JNJ.mjs.map
+//# sourceMappingURL=lib-R7IQ4ZHE.mjs.map

package/dist/lib-RSDMEKDQ.mjs

@@ -0,0 +1,4 @@
+export { Hub, NodePath_Final as NodePath, Scope, traverse as default, visitors } from './chunk-JOYMIGR2.mjs';
+import './chunk-5YA6SI4Z.mjs';
+import './chunk-BEXTDHO4.mjs';
+//# sourceMappingURL=lib-RSDMEKDQ.mjs.map

package/dist/maps/index.js

@@ -1,9 +1,9 @@
 'use client';
 'use strict';
 
-var chunkC7J4XLBN_js = require('../chunk-C7J4XLBN.js');
-require('../chunk-U5NFIHLY.js');
-require('../chunk-CIB3RHNZ.js');
+var chunkIO65ROAO_js = require('../chunk-IO65ROAO.js');
+require('../chunk-PIPGH7GA.js');
+require('../chunk-PURI56RE.js');
 require('../chunk-SNAQBZPT.js');
 var react = require('react');
 var reactGoogleMaps = require('@vis.gl/react-google-maps');
@@ -141,7 +141,7 @@ async function fetchMapsConfig() {
   const { apiUrl, apiKey } = getApiConfig();
   if (apiKey) {
     try {
-      const res = await chunkC7J4XLBN_js.sonorFetch(
+      const res = await chunkIO65ROAO_js.sonorFetch(
         `${apiUrl}/api/public/maps/config`,
         { headers: { "Content-Type": "application/json" } },
         { apiKey }
@@ -181,7 +181,7 @@ async function fetchNearbyPlaces(params) {
     });
     if (params.radius) searchParams.set("radius", String(params.radius));
     if (params.limit) searchParams.set("limit", String(params.limit));
-    const res = await chunkC7J4XLBN_js.sonorFetch(
+    const res = await chunkIO65ROAO_js.sonorFetch(
       `${apiUrl}/api/public/maps/nearby-places?${searchParams}`,
       { headers: { "Content-Type": "application/json" } },
       { apiKey }

package/dist/maps/index.mjs

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from '../chunk-5T3J24K4.mjs';
-import '../chunk-YRKWJCML.mjs';
-import '../chunk-K3PVUXKB.mjs';
+import { sonorFetch } from '../chunk-3BLKKF67.mjs';
+import '../chunk-PGYOBEPL.mjs';
+import '../chunk-GIGUDKLS.mjs';
 import '../chunk-BEXTDHO4.mjs';
 import { useState, useCallback, useEffect } from 'react';
 import { APIProvider, Map as Map$1, AdvancedMarker, Pin, InfoWindow } from '@vis.gl/react-google-maps';

package/dist/portfolio/contract.d.ts

@@ -15,7 +15,13 @@
  * KPIs repeated across hero, results cards, and a Performance section. One
  * differentiator repeated a dozen times stops differentiating — collapse the
  * per-category Lighthouse tiles to at most one summary, business outcomes first.
+ *
+ * It is also the single source of truth for METRIC PROVENANCE (below): the
+ * three sources a portfolio number can have, what a client-reported number
+ * must carry, and which numbers may headline. sonor-api and signal-api keep
+ * byte-identical mirrors of those functions too, guarded by the same vectors.
  */
+export { FRAME_READY_MESSAGE, isFrameReadyMessage, type FrameReadyMessage } from '../shared/frame';
 /** Bump on breaking changes to the collapse policy. */
 export declare const PORTFOLIO_CONTRACT_VERSION: 1;
 /** Minimal KPI shape the policy reads — callers pass their own richer tiles. */
@@ -54,7 +60,94 @@ export declare const PORTFOLIO_KPI_JSON_SCHEMA: {
         readonly description: {
             readonly type: 'string';
         };
+        readonly source: {
+            readonly enum: readonly ['measured', 'reported', 'estimated'];
+        };
+        readonly reportedBy: {
+            readonly type: 'object';
+            readonly required: readonly ['name', 'organization', 'date'];
+            readonly properties: {
+                readonly name: {
+                    readonly type: 'string';
+                    readonly minLength: 1;
+                };
+                readonly role: {
+                    readonly type: 'string';
+                };
+                readonly organization: {
+                    readonly type: 'string';
+                    readonly minLength: 1;
+                };
+                readonly date: {
+                    readonly type: 'string';
+                    readonly pattern: '^\\d{4}-\\d{2}-\\d{2}$';
+                };
+            };
+        };
+    };
+    readonly if: {
+        readonly properties: {
+            readonly source: {
+                readonly const: 'reported';
+            };
+        };
+        readonly required: readonly ['source'];
+    };
+    readonly then: {
+        readonly required: readonly ['reportedBy'];
     };
     readonly additionalProperties: true;
 };
+/** Every source a portfolio number can have. */
+export declare const METRIC_SOURCES: readonly ['measured', 'reported', 'estimated'];
+export type MetricSource = (typeof METRIC_SOURCES)[number];
+/** Who stands behind a client-reported number. */
+export interface MetricAttribution {
+    /** The person, e.g. "Scott Mann". */
+    name: string;
+    /** Their title, e.g. "Director of Business Development". */
+    role?: string;
+    /** Where they work: almost always the client, e.g. "True Power Systems". */
+    organization: string;
+    /** The day they reported it, YYYY-MM-DD. */
+    date: string;
+}
+/** The provenance fields a portfolio number (a KPI tile, a results card) carries. */
+export interface SourcedMetric {
+    source?: string | null;
+    reportedBy?: unknown;
+}
+export declare function isMetricSource(value: unknown): value is MetricSource;
+/**
+ * What's wrong with a number's provenance, or null when nothing is. A missing
+ * source is legacy data and passes (displays show it unlabelled, and it can't
+ * headline); an unknown source, or a reported number nobody is named behind,
+ * does not.
+ */
+export declare function metricSourceProblem(metric: SourcedMetric): string | null;
+/**
+ * May this number lead: a hero tile, a gallery card, a carousel, a social
+ * post? Measured, or reported with someone named behind it. Never an
+ * estimate, and never an unlabelled legacy number.
+ */
+export declare function isHeadlineMetric(metric: SourcedMetric): boolean;
+/** The badge a display shows, or null for a missing or unknown source (show nothing rather than guess). */
+export declare function metricSourceLabel(source: unknown): string | null;
+/**
+ * The full credit: "Reported by Scott Mann, Director of Business Development,
+ * True Power Systems, September 25, 2026". The date is read as a plain day,
+ * never through a time zone, so it can't slip to the day before.
+ */
+export declare function formatAttribution(by: MetricAttribution): string;
+/** The credit for a tight space (a card, a carousel tile): "per True Power Systems". */
+export declare function shortAttribution(by: Pick<MetricAttribution, 'organization'>): string;
+/**
+ * Carry a person's reported numbers through a regeneration. The generator can
+ * only write measured or estimated numbers (it can't see a client's books, and
+ * any 'reported' tag it writes is dropped here), so without this a rewrite of
+ * the hero or the results would silently erase what a client told us.
+ * Reported entries from `previous` lead, in their order; `next` fills in
+ * behind them, minus anything sharing a key with a reported entry.
+ */
+export declare function carryReportedMetrics<T extends SourcedMetric>(previous: readonly T[] | null | undefined, next: readonly T[] | null | undefined, keyOf: (metric: T) => string): T[];
 //# sourceMappingURL=contract.d.ts.map

package/dist/portfolio/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/portfolio/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAA;AAEpD,gFAAgF;AAChF,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAID,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,OAAO,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAehE;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB;aACpC,OAAO,EAAE,yCAAyC;aAClD,GAAG,EAAE,gDAAgD;aACrD,KAAK,EAAE,SAAS;aAChB,WAAW,EAAE,0EAA0E;aACvF,IAAI,EAAE,QAAQ;aACd,QAAQ,YAAG,OAAO,EAAE,OAAO;aAC3B,UAAU;iBACR,KAAK;qBAAI,IAAI,EAAE,QAAQ;;iBACvB,KAAK;qBAAI,IAAI,EAAE,QAAQ;;iBACvB,WAAW;qBAAI,IAAI,EAAE,QAAQ;;;aAE/B,oBAAoB;CACZ,CAAA"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/portfolio/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAElG,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAA;AAEpD,gFAAgF;AAChF,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAID,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,OAAO,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAehE;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB;aACpC,OAAO,EAAE,yCAAyC;aAClD,GAAG,EAAE,gDAAgD;aACrD,KAAK,EAAE,SAAS;aAChB,WAAW,EAAE,0EAA0E;aACvF,IAAI,EAAE,QAAQ;aACd,QAAQ,YAAG,OAAO,EAAE,OAAO;aAC3B,UAAU;iBACR,KAAK;qBAAI,IAAI,EAAE,QAAQ;;iBACvB,KAAK;qBAAI,IAAI,EAAE,QAAQ;;iBACvB,WAAW;qBAAI,IAAI,EAAE,QAAQ;;iBAC7B,MAAM;qBAAI,IAAI,YAAG,UAAU,EAAE,UAAU,EAAE,WAAW;;iBACpD,UAAU;qBACR,IAAI,EAAE,QAAQ;qBACd,QAAQ,YAAG,MAAM,EAAE,cAAc,EAAE,MAAM;qBACzC,UAAU;yBACR,IAAI;6BAAI,IAAI,EAAE,QAAQ;6BAAE,SAAS,EAAE,CAAC;;yBACpC,IAAI;6BAAI,IAAI,EAAE,QAAQ;;yBACtB,YAAY;6BAAI,IAAI,EAAE,QAAQ;6BAAE,SAAS,EAAE,CAAC;;yBAC5C,IAAI;6BAAI,IAAI,EAAE,QAAQ;6BAAE,OAAO,EAAE,wBAAwB;;;;;aAK/D,EAAE;iBAAI,UAAU;qBAAI,MAAM;yBAAI,KAAK,EAAE,UAAU;;;iBAAM,QAAQ,YAAG,QAAQ;;aACxE,IAAI;iBAAI,QAAQ,YAAG,YAAY;;aAC/B,oBAAoB;CACZ,CAAA;AAuBV,gDAAgD;AAChD,eAAO,MAAM,cAAc,YAAI,UAAU,EAAE,UAAU,EAAE,WAAW,CAAU,CAAA;AAC5E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAA;IACpB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAA;CACb;AAED,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAQD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAiBxE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAG/D;AAED,2GAA2G;AAC3G,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAKhE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,GAAG,MAAM,CAM/D;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,MAAM,CAEpF;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,aAAa,EAC1D,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,EACzC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,GAAG,SAAS,EACrC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,GAC3B,CAAC,EAAE,CAML"}