@sonordev/site-kit 6.4.0 → 7.0.0

package/dist/chunk-YU7QZ3PP.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/og/config.ts","../src/og/contrast.ts"],"names":[],"mappings":";AA0IO,SAAS,aAAa,MAAA,EAAoC;AAC/D,EAAA,OAAO,MAAA;AACT;AAEO,IAAM,QAAA,GAAW;AACjB,IAAM,SAAA,GAAY;AAWlB,IAAM,YAAA,GAAe;AACrB,IAAM,YAAA,GAAe;AAOrB,IAAM,cAAA,GAAiB;;;AC1I9B,IAAM,QAAA,GAAW,CAAA;AAGV,SAAS,cAAc,KAAA,EAAgD;AAC5E,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,EAAK,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACzC,EAAA,IAAI,CAAC,0CAAA,CAA2C,IAAA,CAAK,GAAG,GAAG,OAAO,IAAA;AAClE,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,MAAA,KAAW,CAAA,GAAI,IAAI,OAAA,CAAQ,IAAA,EAAM,CAAA,CAAA,KAAK,CAAA,GAAI,CAAC,CAAA,GAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA;AAC9E,EAAA,OAAO,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9D;AAEA,SAAS,SAAA,CAAU,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,EAAqC;AAC9D,EAAA,MAAM,OAAA,GAAU,CAAC,CAAA,KAAc;AAC7B,IAAA,MAAM,IAAI,CAAA,GAAI,GAAA;AACd,IAAA,OAAO,KAAK,OAAA,GAAU,CAAA,GAAI,KAAA,GAAA,CAAA,CAAU,CAAA,GAAI,SAAS,KAAA,KAAU,GAAA;AAAA,EAC7D,CAAA;AACA,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA,GAAS,QAAQ,CAAC,CAAA,GAAI,MAAA,GAAS,OAAA,CAAQ,CAAC,CAAA;AACvE;AAGO,SAAS,aAAA,CAAc,GAAW,CAAA,EAA0B;AACjE,EAAA,MAAM,EAAA,GAAK,cAAc,CAAC,CAAA;AAC1B,EAAA,MAAM,EAAA,GAAK,cAAc,CAAC,CAAA;AAC1B,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,EAAA,EAAI,OAAO,IAAA;AACvB,EAAA,MAAM,CAAC,EAAA,EAAI,EAAE,CAAA,GAAI,CAAC,UAAU,EAAE,CAAA,EAAG,SAAA,CAAU,EAAE,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,IAAI,CAAC,CAAA;AACpE,EAAA,OAAA,CAAQ,EAAA,GAAK,SAAS,EAAA,GAAK,IAAA,CAAA;AAC7B;AAYO,SAAS,aAAa,KAAA,EAAyB;AACpD,EAAA,IAAI,KAAA,CAAM,OAAA,EAAS,OAAO,KAAA,CAAM,OAAA;AAChC,EAAA,MAAM,UAAA,GAAa,CAAC,KAAA,CAAM,OAAA,EAAS,MAAM,EAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAmB,CAAC,CAAC,CAAC,CAAA;AACvF,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,CAAA,KAAA,MAAU,EAAE,KAAA,EAAO,KAAA,EAAO,aAAA,CAAc,KAAA,EAAO,KAAA,CAAM,MAAM,CAAA,EAAE,CAAE,CAAA;AAC7F,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,KAAA,KAAU,IAAA,IAAQ,CAAA,CAAE,KAAA,IAAS,QAAQ,CAAA;AACxE,EAAA,IAAI,OAAA,SAAgB,OAAA,CAAQ,KAAA;AAC5B,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,MAAA,CAAO,CAAA,CAAA,KAAK,EAAE,KAAA,KAAU,IAAI,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,GAAS,EAAE,KAAM,CAAA;AAG1F,EAAA,OAAO,UAAA,CAAW,CAAC,CAAA,EAAG,KAAA,IAAS,WAAW,CAAC,CAAA;AAC7C","file":"chunk-YU7QZ3PP.mjs","sourcesContent":["/**\n * @sonordev/site-kit/og — OG card config contract.\n *\n * THE SITE OWNS THE THEME. Sonor stores one brand_primary/secondary per\n * project; real sites have full palettes (Ludlow: red, ink, cream, scrim —\n * four tokens where Sonor stores two). So the card's colors, fonts, and\n * layout come from a repo-owned og.config.ts, typically importing the same\n * constants the site itself uses. Sonor brand data is only the zero-config\n * seed used by `sonor-setup og` when no og.config.ts exists.\n *\n * Rendering is BUILD-TIME via headless Chrome (`sonor-setup og`), writing a\n * static public/og.png: full real CSS (no Satori subset), Google Fonts load\n * in the template (no font vendoring), zero runtime cost — the right shape\n * for a force-static fleet. Per-entity runtime cards are a future tier.\n */\n\nexport interface OgTheme {\n  /** Page background behind everything. */\n  bg: string\n  /** Primary text color. */\n  text: string\n  /** Accent (kicker, bar). */\n  accent: string\n  /** Plate/surface color behind the logo. */\n  surface: string\n  /** Muted text (subtitle). Defaults derived from `text` when omitted. */\n  muted?: string\n  /**\n   * Bottom-bar text, set on `accent`. Defaults to the first of `surface`,\n   * `bg`, `text` that reaches WCAG AA for large text (3:1) against the\n   * accent (see og/contrast.ts).\n   */\n  barText?: string\n}\n\nexport interface OgFont {\n  /** Google Fonts family name, e.g. 'Barlow Condensed'. */\n  family: string\n  weights?: number[]\n}\n\nexport interface OgBackground {\n  /** Path under public/, e.g. '/hero-frost.avif'. */\n  image: string\n  /** CSS blur radius in px. */\n  blur?: number\n  /** Overlay color, e.g. 'rgba(17,17,16,.68)'. */\n  scrim?: string\n}\n\nexport interface OgPhoto {\n  /** Path under public/ ('/team.jpg') or an absolute https URL. */\n  src: string\n  /** Pane width in px (default 430). */\n  width?: number\n  /** Corner radius in px (default 24). */\n  radius?: number\n}\n\nexport interface OgContent {\n  /** Small all-caps line above the title. */\n  kicker?: string\n  /** The big line. `\\n` for a manual break. Keep it short — previews truncate. */\n  title: string\n  /** One supporting line. */\n  subtitle?: string\n  /** Handwritten-style accent line (rendered in the last configured font). */\n  hand?: string\n  /** Bottom bar segments, e.g. ['Give an hour', 'ludlowpto.org']. */\n  bar?: string[]\n}\n\n/**\n * A per-route entry in `cards`. Layered over the derived card, so it only\n * states what differs — including inside `content`: a route can override just\n * the subtitle and keep the title Sonor derived. The runtime always merged\n * field by field; this type used to demand a full OgContent, which forced\n * casts in every site that used the documented pattern.\n */\nexport type OgCardOverride = Partial<Omit<OgCardConfig, 'cards' | 'content'>> & {\n  content?: Partial<OgContent>\n}\n\nexport interface OgCardConfig {\n  theme: OgTheme\n  /** First font = display face, second (optional) = hand/accent face. */\n  fonts?: OgFont[]\n  /** Path under public/ to the logo shown on the plate, e.g. '/logo-mark.svg'. */\n  logo?: string\n  background?: OgBackground\n  /**\n   * 'plate-left': logo plate left, copy right (the Ludlow layout).\n   * 'centered': stacked, logo above title.\n   * 'banner': no plate, full-bleed copy.\n   * 'split': copy left, content photo right — for cards that show the page's\n   *   own imagery (a project photo, a product, the storefront).\n   */\n  layout?: 'plate-left' | 'centered' | 'banner' | 'split'\n  /** Content photo for the 'split' layout (also rendered in 'plate-left' when set, replacing the plate). */\n  photo?: OgPhoto\n  content: OgContent\n  /**\n   * Per-page overrides, keyed by route path (`/services/garage`) or its slug\n   * (`services-garage`). Every static route already gets its own card built\n   * from its managed title and description; this is for the handful worth\n   * writing by hand — a campaign landing page, the flagship service.\n   *\n   * A dynamic route is keyed by its pattern, one `*` per dynamic level:\n   * `/services/*` for `[slug]`, plus another star for each nested `[param]`\n   * (slug form `services-any`, `services-any-any`). Nested patterns are worth\n   * writing by hand — they all derive from the same static ancestor otherwise.\n   * `sonor-setup og` warns about any key that matches no route.\n   *\n   * Each entry is layered over the site card, so it only states what differs.\n   * Build-time only: never rendered as part of a card.\n   */\n  cards?: Record<string, OgCardOverride>\n  /**\n   * MIDDLE escape hatch: keep the loader/renderer/verifier pipeline but\n   * produce your own document. Receives the config and the same helpers the\n   * stock template uses (esc, fontLink). Root-relative src attributes are\n   * still rewritten to public/ files automatically.\n   */\n  template?: (config: OgCardConfig, helpers: OgTemplateHelpers) => string\n  /** FULL escape hatch: raw HTML replaces everything, no helpers. */\n  html?: string\n}\n\nexport interface OgTemplateHelpers {\n  /** HTML-escape user text. */\n  esc: (s: string) => string\n  /** <link> tag loading the config's Google Fonts. */\n  fontLink: string\n  width: number\n  height: number\n}\n\n/** Identity helper for typed configs: `export default defineOgCard({...})`. */\nexport function defineOgCard(config: OgCardConfig): OgCardConfig {\n  return config\n}\n\nexport const OG_WIDTH = 1200\nexport const OG_HEIGHT = 630\n\n/**\n * Title type scale. The card opens at TITLE_MAX and the in-page fitter steps\n * down until the copy column fits, stopping at TITLE_MIN.\n *\n * The floor is a legibility floor, not a layout one: below ~56px the headline\n * stops reading at the ~300px thumbnail width platforms actually show. A card\n * that would need to go under it is a card whose copy is too long, so the\n * renderer reports that rather than shrinking into mush.\n */\nexport const TITLE_MAX_PX = 104\nexport const TITLE_MIN_PX = 56\n\n/**\n * The attribute the in-page fitter writes its findings to, read back by\n * `sonor-setup og` via Chrome's --dump-dom. Shared so the template and the CLI\n * cannot drift on the name.\n */\nexport const OG_REPORT_ATTR = 'data-og-report'\n\n/** What the in-page fitter reports back about a rendered card. */\nexport interface OgRenderReport {\n  /** Did everything land inside the frame, at or above the legibility floor? */\n  fits: boolean\n  /** Final title size after fitting. Below TITLE_MAX means the copy ran long. */\n  titlePx: number\n  /** Human-readable problems, each naming the element and the overflow. */\n  issues: string[]\n}\n","/**\n * @sonordev/site-kit/og — text color for the card's bottom bar.\n *\n * SINGLE SOURCE OF TRUTH for \"what color is the bar text\", shared by the\n * build-time template (template.ts) and the runtime card (route.tsx). The two\n * disagreed: the template set the bar in `theme.surface`, the runtime card in\n * `theme.text`, and on a site whose text and accent are both strong colors the\n * runtime bar came out unreadable (navy on crimson on watsonhac.com, ink on\n * green on reinhart). Both sites dropped the bar rather than ship it.\n *\n * `theme.barText` always wins. Otherwise the first candidate that reaches\n * WCAG AA for large text against the accent is used, in the order the\n * template always preferred (surface, then bg, then text), so every card\n * that already read well keeps its color. Failing that, the highest-contrast\n * candidate.\n *\n * Pure: no DOM, no Node built-ins.\n */\n\n/**\n * WCAG AA for LARGE text: the bar is bold and 30px or more on both cards,\n * well past the 18.66px-bold line. 4.5:1 (normal text) would flip readable\n * fleet bars like abbeyglenapts.com's white on orange (3.3:1) for no gain.\n */\nconst AA_LARGE = 3\n\n/** `#abc`, `#aabbcc`, `#aabbccdd` → [r, g, b] in 0-255, or null for anything else. */\nexport function parseHexColor(color: string): [number, number, number] | null {\n  const hex = color.trim().replace(/^#/, '')\n  if (!/^([0-9a-f]{3}|[0-9a-f]{6}|[0-9a-f]{8})$/i.test(hex)) return null\n  const full = hex.length === 3 ? hex.replace(/./g, c => c + c) : hex.slice(0, 6)\n  return [0, 2, 4].map(i => parseInt(full.slice(i, i + 2), 16)) as [number, number, number]\n}\n\nfunction luminance([r, g, b]: [number, number, number]): number {\n  const channel = (v: number) => {\n    const s = v / 255\n    return s <= 0.03928 ? s / 12.92 : ((s + 0.055) / 1.055) ** 2.4\n  }\n  return 0.2126 * channel(r) + 0.7152 * channel(g) + 0.0722 * channel(b)\n}\n\n/** WCAG contrast ratio of two hex colors, or null when either isn't hex. */\nexport function contrastRatio(a: string, b: string): number | null {\n  const ca = parseHexColor(a)\n  const cb = parseHexColor(b)\n  if (!ca || !cb) return null\n  const [hi, lo] = [luminance(ca), luminance(cb)].sort((x, y) => y - x)\n  return (hi + 0.05) / (lo + 0.05)\n}\n\nexport interface BarTheme {\n  bg: string\n  text: string\n  accent: string\n  surface?: string\n  /** Explicit bar text color. Always wins. */\n  barText?: string\n}\n\n/** The color to set the bottom bar's text in, on `theme.accent`. */\nexport function barTextColor(theme: BarTheme): string {\n  if (theme.barText) return theme.barText\n  const candidates = [theme.surface, theme.bg, theme.text].filter((c): c is string => !!c)\n  const scored = candidates.map(color => ({ color, ratio: contrastRatio(color, theme.accent) }))\n  const passing = scored.find(s => s.ratio !== null && s.ratio >= AA_LARGE)\n  if (passing) return passing.color\n  const measurable = scored.filter(s => s.ratio !== null).sort((a, b) => b.ratio! - a.ratio!)\n  // Non-hex colors (rgb(), names) can't be scored; keep the template's old\n  // choice for them rather than guess.\n  return measurable[0]?.color ?? candidates[0]\n}\n"]}

package/dist/chunk-YVJASVVK.js

@@ -1,97 +0,0 @@
-'use client';
-'use strict';
-
-var react = require('react');
-var jsxRuntime = require('react/jsx-runtime');
-
-// src/forms/FormCelebration.tsx
-var STYLE_ID = "sk-celebration-css";
-var CSS = `
-@keyframes sk-cel-pop { 0% { transform: scale(.4); opacity: 0 } 70% { transform: scale(1.08) } 100% { transform: scale(1); opacity: 1 } }
-@keyframes sk-cel-draw { to { stroke-dashoffset: 0 } }
-@keyframes sk-cel-rise { from { transform: translateY(10px); opacity: 0 } to { transform: translateY(0); opacity: 1 } }
-@keyframes sk-cel-burst {
-  0% { transform: rotate(var(--sk-cel-a)) translateY(0) scale(1); opacity: 0 }
-  12% { opacity: 1 }
-  100% { transform: rotate(var(--sk-cel-a)) translateY(calc(var(--sk-cel-d) * -1)) scale(.2); opacity: 0 }
-}
-.sk-cel { text-align: center; padding: 1.5rem 0; }
-.sk-cel-stage { position: relative; width: 92px; height: 92px; margin: 0 auto 1.1rem; }
-/* Disc/particles mix toward currentColor so they stay visible on sections
-   painted with the brand color itself (same contrast guarantee as delight.tsx). */
-.sk-cel-disc {
-  width: 92px; height: 92px; border-radius: 50%;
-  background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor);
-  display: flex; align-items: center; justify-content: center;
-  animation: sk-cel-pop .45s cubic-bezier(.22,1.4,.36,1) both;
-}
-.sk-cel-check { stroke-dasharray: 26; stroke-dashoffset: 26; animation: sk-cel-draw .35s ease-out .28s forwards; }
-.sk-cel-p {
-  position: absolute; top: 50%; left: 50%; width: 7px; height: 7px; margin: -3.5px;
-  border-radius: 50%; background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor); opacity: 0; pointer-events: none;
-  animation: sk-cel-burst .7s ease-out .3s both;
-}
-.sk-cel-p:nth-child(even) { width: 5px; height: 5px; border-radius: 1px; background: color-mix(in srgb, var(--sk-primary, #2563eb) 40%, currentColor); }
-.sk-cel-msg { animation: sk-cel-rise .4s ease-out .35s both; font-size: 1.15rem; line-height: 1.6; }
-@media (prefers-reduced-motion: reduce) {
-  .sk-cel-disc, .sk-cel-msg { animation: none }
-  .sk-cel-check { animation: none; stroke-dashoffset: 0 }
-  .sk-cel-p { display: none }
-}
-`;
-var PARTICLES = Array.from({ length: 12 }, (_, i) => ({
-  angle: i * 30,
-  distance: 46 + i % 3 * 14
-}));
-function FormCelebration({ message, className }) {
-  react.useEffect(() => {
-    try {
-      if (!window.matchMedia("(prefers-reduced-motion: reduce)").matches) {
-        navigator.vibrate?.(15);
-      }
-    } catch {
-    }
-  }, []);
-  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className, "data-sk-part": "celebration", children: [
-    /* @__PURE__ */ jsxRuntime.jsx("style", { id: STYLE_ID, dangerouslySetInnerHTML: { __html: CSS } }),
-    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sk-cel", children: [
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sk-cel-stage", "aria-hidden": "true", "data-sk-part": "celebration-stage", children: [
-        PARTICLES.map((p, i) => /* @__PURE__ */ jsxRuntime.jsx(
-          "span",
-          {
-            className: "sk-cel-p",
-            "data-sk-part": "celebration-particle",
-            style: { ["--sk-cel-a"]: `${p.angle}deg`, ["--sk-cel-d"]: `${p.distance}px` }
-          },
-          i
-        )),
-        /* @__PURE__ */ jsxRuntime.jsx("div", { className: "sk-cel-disc", "data-sk-part": "celebration-disc", children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "44", height: "44", viewBox: "0 0 24 24", fill: "none", children: /* @__PURE__ */ jsxRuntime.jsx(
-          "path",
-          {
-            className: "sk-cel-check",
-            d: "M5 12.5l4.2 4.3L19 7",
-            stroke: "var(--sk-form-success-check, #fff)",
-            strokeWidth: "2.6",
-            strokeLinecap: "round",
-            strokeLinejoin: "round"
-          }
-        ) }) })
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        "p",
-        {
-          className: "sk-cel-msg",
-          "data-sk-part": "celebration-message",
-          role: "status",
-          "aria-live": "polite",
-          style: { margin: 0, color: "var(--sk-form-success-text, inherit)" },
-          children: message
-        }
-      )
-    ] })
-  ] });
-}
-
-exports.FormCelebration = FormCelebration;
-//# sourceMappingURL=chunk-YVJASVVK.js.map
-//# sourceMappingURL=chunk-YVJASVVK.js.map

package/dist/chunk-YVJASVVK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/forms/FormCelebration.tsx"],"names":["useEffect","jsxs","jsx"],"mappings":";;;;;;AAyBA,IAAM,QAAA,GAAW,oBAAA;AAEjB,IAAM,GAAA,GAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAmCZ,IAAM,SAAA,GAAY,MAAM,IAAA,CAAK,EAAE,QAAQ,EAAA,EAAG,EAAG,CAAC,CAAA,EAAG,CAAA,MAAO;AAAA,EACtD,OAAO,CAAA,GAAI,EAAA;AAAA,EACX,QAAA,EAAU,EAAA,GAAM,CAAA,GAAI,CAAA,GAAK;AAC3B,CAAA,CAAE,CAAA;AAOK,SAAS,eAAA,CAAgB,EAAE,OAAA,EAAS,SAAA,EAAU,EAAyB;AAG5E,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,MAAA,CAAO,UAAA,CAAW,kCAAkC,EAAE,OAAA,EAAS;AAClE,QAAA,SAAA,CAAU,UAAU,EAAE,CAAA;AAAA,MACxB;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAsB,cAAA,EAAa,aAAA,EACtC,QAAA,EAAA;AAAA,oBAAAC,cAAA,CAAC,WAAM,EAAA,EAAI,QAAA,EAAU,yBAAyB,EAAE,MAAA,EAAQ,KAAI,EAAG,CAAA;AAAA,oBAC/DD,eAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,QAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,eAAA,CAAC,SAAI,SAAA,EAAU,cAAA,EAAe,aAAA,EAAY,MAAA,EAAO,gBAAa,mBAAA,EAC3D,QAAA,EAAA;AAAA,QAAA,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,qBACjBC,cAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YAEC,SAAA,EAAU,UAAA;AAAA,YACV,cAAA,EAAa,sBAAA;AAAA,YACb,KAAA,EAAO,EAAE,CAAC,YAAsB,GAAG,CAAA,EAAG,CAAA,CAAE,KAAK,CAAA,GAAA,CAAA,EAAO,CAAC,YAAsB,GAAG,CAAA,EAAG,CAAA,CAAE,QAAQ,CAAA,EAAA,CAAA;AAAK,WAAA;AAAA,UAH3F;AAAA,SAKR,CAAA;AAAA,wBACDA,cAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,aAAA,EAAc,gBAAa,kBAAA,EACxC,QAAA,kBAAAA,cAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAM,MAAK,MAAA,EAAO,IAAA,EAAK,OAAA,EAAQ,WAAA,EAAY,MAAK,MAAA,EACnD,QAAA,kBAAAA,cAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,cAAA;AAAA,YACV,CAAA,EAAE,sBAAA;AAAA,YACF,MAAA,EAAO,oCAAA;AAAA,YACP,WAAA,EAAY,KAAA;AAAA,YACZ,aAAA,EAAc,OAAA;AAAA,YACd,cAAA,EAAe;AAAA;AAAA,WAEnB,CAAA,EACF;AAAA,OAAA,EACF,CAAA;AAAA,sBACAA,cAAA;AAAA,QAAC,GAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,YAAA;AAAA,UACV,cAAA,EAAa,qBAAA;AAAA,UACb,IAAA,EAAK,QAAA;AAAA,UACL,WAAA,EAAU,QAAA;AAAA,UACV,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,OAAO,sCAAA,EAAuC;AAAA,UAEjE,QAAA,EAAA;AAAA;AAAA;AACH,KAAA,EACF;AAAA,GAAA,EACF,CAAA;AAEJ","file":"chunk-YVJASVVK.js","sourcesContent":["'use client'\n\n/**\n * FormCelebration — the payoff moment.\n *\n * Forms are the whole point of a marketing site: they capture the lead.\n * The success state should feel like something HAPPENED — closer to a\n * payment-confirmed screen than a printed receipt. This renders:\n *\n *   1. a brand-colored disc that springs in\n *   2. an SVG check that DRAWS itself (stroke-dashoffset)\n *   3. a one-shot radial burst of particles in the brand color\n *   4. the success message rising in underneath\n *\n * Constraints honored:\n * - Zero dependencies; one injected <style> tag (deduped by id).\n * - Brand-driven: everything derives from --sk-primary, so it matches the\n *   site automatically. data-sk-part hooks on every element for overrides.\n * - prefers-reduced-motion: static check + message, no burst, no springs.\n * - a11y: the live region is the message, not the fireworks; particles are\n *   aria-hidden and pure CSS (no timers, no cleanup, GC-free).\n */\n\nimport React, { useEffect } from 'react'\n\nconst STYLE_ID = 'sk-celebration-css'\n\nconst CSS = `\n@keyframes sk-cel-pop { 0% { transform: scale(.4); opacity: 0 } 70% { transform: scale(1.08) } 100% { transform: scale(1); opacity: 1 } }\n@keyframes sk-cel-draw { to { stroke-dashoffset: 0 } }\n@keyframes sk-cel-rise { from { transform: translateY(10px); opacity: 0 } to { transform: translateY(0); opacity: 1 } }\n@keyframes sk-cel-burst {\n  0% { transform: rotate(var(--sk-cel-a)) translateY(0) scale(1); opacity: 0 }\n  12% { opacity: 1 }\n  100% { transform: rotate(var(--sk-cel-a)) translateY(calc(var(--sk-cel-d) * -1)) scale(.2); opacity: 0 }\n}\n.sk-cel { text-align: center; padding: 1.5rem 0; }\n.sk-cel-stage { position: relative; width: 92px; height: 92px; margin: 0 auto 1.1rem; }\n/* Disc/particles mix toward currentColor so they stay visible on sections\n   painted with the brand color itself (same contrast guarantee as delight.tsx). */\n.sk-cel-disc {\n  width: 92px; height: 92px; border-radius: 50%;\n  background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor);\n  display: flex; align-items: center; justify-content: center;\n  animation: sk-cel-pop .45s cubic-bezier(.22,1.4,.36,1) both;\n}\n.sk-cel-check { stroke-dasharray: 26; stroke-dashoffset: 26; animation: sk-cel-draw .35s ease-out .28s forwards; }\n.sk-cel-p {\n  position: absolute; top: 50%; left: 50%; width: 7px; height: 7px; margin: -3.5px;\n  border-radius: 50%; background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor); opacity: 0; pointer-events: none;\n  animation: sk-cel-burst .7s ease-out .3s both;\n}\n.sk-cel-p:nth-child(even) { width: 5px; height: 5px; border-radius: 1px; background: color-mix(in srgb, var(--sk-primary, #2563eb) 40%, currentColor); }\n.sk-cel-msg { animation: sk-cel-rise .4s ease-out .35s both; font-size: 1.15rem; line-height: 1.6; }\n@media (prefers-reduced-motion: reduce) {\n  .sk-cel-disc, .sk-cel-msg { animation: none }\n  .sk-cel-check { animation: none; stroke-dashoffset: 0 }\n  .sk-cel-p { display: none }\n}\n`\n\n/** 12 particles: evenly fanned angles, staggered distances. Deterministic — no Math.random (SSR/hydration-safe). */\nconst PARTICLES = Array.from({ length: 12 }, (_, i) => ({\n  angle: i * 30,\n  distance: 46 + (i % 3) * 14,\n}))\n\nexport interface FormCelebrationProps {\n  message: string\n  className?: string\n}\n\nexport function FormCelebration({ message, className }: FormCelebrationProps) {\n  // One soft haptic tick on mobile — the \"you got paid\" buzz. Gated behind\n  // reduced-motion as the closest thing to a reduced-haptics preference.\n  useEffect(() => {\n    try {\n      if (!window.matchMedia('(prefers-reduced-motion: reduce)').matches) {\n        navigator.vibrate?.(15)\n      }\n    } catch {\n      // vibration is a bonus, never a failure\n    }\n  }, [])\n\n  return (\n    <div className={className} data-sk-part=\"celebration\">\n      <style id={STYLE_ID} dangerouslySetInnerHTML={{ __html: CSS }} />\n      <div className=\"sk-cel\">\n        <div className=\"sk-cel-stage\" aria-hidden=\"true\" data-sk-part=\"celebration-stage\">\n          {PARTICLES.map((p, i) => (\n            <span\n              key={i}\n              className=\"sk-cel-p\"\n              data-sk-part=\"celebration-particle\"\n              style={{ ['--sk-cel-a' as string]: `${p.angle}deg`, ['--sk-cel-d' as string]: `${p.distance}px` }}\n            />\n          ))}\n          <div className=\"sk-cel-disc\" data-sk-part=\"celebration-disc\">\n            <svg width=\"44\" height=\"44\" viewBox=\"0 0 24 24\" fill=\"none\">\n              <path\n                className=\"sk-cel-check\"\n                d=\"M5 12.5l4.2 4.3L19 7\"\n                stroke=\"var(--sk-form-success-check, #fff)\"\n                strokeWidth=\"2.6\"\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n              />\n            </svg>\n          </div>\n        </div>\n        <p\n          className=\"sk-cel-msg\"\n          data-sk-part=\"celebration-message\"\n          role=\"status\"\n          aria-live=\"polite\"\n          style={{ margin: 0, color: 'var(--sk-form-success-text, inherit)' }}\n        >\n          {message}\n        </p>\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/chunk-YZJ22HUQ.js

@@ -1,29 +0,0 @@
-'use strict';
-
-// src/motion/failsafe.ts
-var scrolled = false;
-var armed = false;
-function arm() {
-  if (armed || typeof window === "undefined") return;
-  armed = true;
-  window.addEventListener(
-    "scroll",
-    () => {
-      scrolled = true;
-    },
-    { passive: true, once: true }
-  );
-}
-function onNoScroll(fn, ms = 2500) {
-  if (typeof window === "undefined") return () => {
-  };
-  arm();
-  const t = setTimeout(() => {
-    if (!scrolled) fn();
-  }, ms);
-  return () => clearTimeout(t);
-}
-
-exports.onNoScroll = onNoScroll;
-//# sourceMappingURL=chunk-YZJ22HUQ.js.map
-//# sourceMappingURL=chunk-YZJ22HUQ.js.map

package/dist/chunk-YZJ22HUQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/motion/failsafe.ts"],"names":[],"mappings":";;;AAeA,IAAI,QAAA,GAAW,KAAA;AACf,IAAI,KAAA,GAAQ,KAAA;AAEZ,SAAS,GAAA,GAAM;AACb,EAAA,IAAI,KAAA,IAAS,OAAO,MAAA,KAAW,WAAA,EAAa;AAC5C,EAAA,KAAA,GAAQ,IAAA;AACR,EAAA,MAAA,CAAO,gBAAA;AAAA,IACL,QAAA;AAAA,IACA,MAAM;AACJ,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,IACA,EAAE,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,IAAA;AAAK,GAC9B;AACF;AAMO,SAAS,UAAA,CAAW,EAAA,EAAgB,EAAA,GAAK,IAAA,EAAkB;AAChE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAM;AAAA,EAAC,CAAA;AACjD,EAAA,GAAA,EAAI;AACJ,EAAA,MAAM,CAAA,GAAI,WAAW,MAAM;AACzB,IAAA,IAAI,CAAC,UAAU,EAAA,EAAG;AAAA,EACpB,GAAG,EAAE,CAAA;AACL,EAAA,OAAO,MAAM,aAAa,CAAC,CAAA;AAC7B","file":"chunk-YZJ22HUQ.js","sourcesContent":["/**\n * Renderer failsafe for scroll-entrance reveals.\n *\n * Headless renderers — Google's Web Rendering Service included — execute\n * JavaScript but never scroll, so a scroll-triggered reveal would leave\n * below-the-fold content transparent in the rendered snapshot that gets\n * indexed. (Measured at ~85 transparent elements on one page before this\n * guard existed.) If the visitor hasn't scrolled shortly after a reveal\n * arms, we assume nobody is going to and show the content. Real visitors\n * scroll well inside the window, so animations are unaffected.\n *\n * Single source of truth for every reveal system in the kit. Ported from\n * upforge.io's lib/reveal-failsafe.\n */\n\nlet scrolled = false\nlet armed = false\n\nfunction arm() {\n  if (armed || typeof window === 'undefined') return\n  armed = true\n  window.addEventListener(\n    'scroll',\n    () => {\n      scrolled = true\n    },\n    { passive: true, once: true },\n  )\n}\n\n/**\n * Run `fn` after `ms` milliseconds unless the visitor scrolls first.\n * Returns a cancel function for effect cleanups.\n */\nexport function onNoScroll(fn: () => void, ms = 2500): () => void {\n  if (typeof window === 'undefined') return () => {}\n  arm()\n  const t = setTimeout(() => {\n    if (!scrolled) fn()\n  }, ms)\n  return () => clearTimeout(t)\n}\n"]}

package/dist/chunk-Z2URIOKG.mjs

@@ -1,36 +0,0 @@
-import { timingSafeEqual } from 'crypto';
-
-// src/shared/request-guards.ts
-function secretsMatch(supplied, expected) {
-  if (!expected || !supplied) return false;
-  const a = Buffer.from(supplied);
-  const b = Buffer.from(expected);
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-async function readCappedBody(request, maxBytes) {
-  const reader = request.body?.getReader();
-  if (!reader) return new Uint8Array(0);
-  const chunks = [];
-  let size = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > maxBytes) {
-      await reader.cancel();
-      return null;
-    }
-    chunks.push(value);
-  }
-  const body = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    body.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return body;
-}
-
-export { readCappedBody, secretsMatch };
-//# sourceMappingURL=chunk-Z2URIOKG.mjs.map
-//# sourceMappingURL=chunk-Z2URIOKG.mjs.map

package/dist/chunk-Z2URIOKG.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/request-guards.ts"],"names":[],"mappings":";;;AAoBO,SAAS,YAAA,CAAa,UAAqC,QAAA,EAA8C;AAC9G,EAAA,IAAI,CAAC,QAAA,IAAY,CAAC,QAAA,EAAU,OAAO,KAAA;AACnC,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,OAAO,EAAE,MAAA,KAAW,CAAA,CAAE,MAAA,IAAU,eAAA,CAAgB,GAAG,CAAC,CAAA;AACtD;AASA,eAAsB,cAAA,CAAe,SAAkB,QAAA,EAA2D;AAChH,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAM,SAAA,EAAU;AACvC,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,IAAI,WAAW,CAAC,CAAA;AACpC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAA,IAAQ,KAAA,CAAM,UAAA;AACd,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AACA,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,IAAI,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,MAAM,CAAA;AACtB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT","file":"chunk-Z2URIOKG.mjs","sourcesContent":["/**\n * @sonordev/site-kit shared - Request guards for secret-bearing route handlers\n *\n * Node only (`crypto`). Single source of truth for the two checks every\n * webhook-style handler in the kit needs, so no module grows its own copy:\n *\n * - `secretsMatch`: constant-time secret comparison. Used by\n *   `createLlmsRevalidateHandler` and `createSeoRevalidationHandler`.\n * - `readCappedBody`: read a request body without buffering past a cap. Used\n *   by `createSeoRevalidationHandler` (16 KB) and the MCP transport relay\n *   (64 KB).\n */\n\nimport { timingSafeEqual } from 'crypto'\n\n/**\n * Constant-time equality for a supplied secret against the expected one.\n * An empty expected secret never matches, so a misconfigured site (no env\n * var) refuses everything instead of accepting an empty token.\n */\nexport function secretsMatch(supplied: string | null | undefined, expected: string | null | undefined): boolean {\n  if (!expected || !supplied) return false\n  const a = Buffer.from(supplied)\n  const b = Buffer.from(expected)\n  return a.length === b.length && timingSafeEqual(a, b)\n}\n\n/**\n * Read a request body, giving up at the first chunk past `maxBytes`.\n *\n * Returns the bytes, or `null` when the body is larger than the cap (the\n * stream is cancelled, so nothing past the cap is held in memory). A request\n * with no body returns an empty array.\n */\nexport async function readCappedBody(request: Request, maxBytes: number): Promise<Uint8Array<ArrayBuffer> | null> {\n  const reader = request.body?.getReader()\n  if (!reader) return new Uint8Array(0)\n  const chunks: Uint8Array[] = []\n  let size = 0\n  for (;;) {\n    const { done, value } = await reader.read()\n    if (done) break\n    size += value.byteLength\n    if (size > maxBytes) {\n      await reader.cancel()\n      return null\n    }\n    chunks.push(value)\n  }\n  const body = new Uint8Array(size)\n  let offset = 0\n  for (const chunk of chunks) {\n    body.set(chunk, offset)\n    offset += chunk.byteLength\n  }\n  return body\n}\n"]}

package/dist/chunk-ZEBOOUBP.mjs

@@ -1,128 +0,0 @@
-import { resolveFetch } from './chunk-BQP6JIE2.mjs';
-import { SITE_KIT_VERSION } from './chunk-K3PVUXKB.mjs';
-import 'server-only';
-
-var MINT_PATH = "/api/public/site-token";
-var MINT_TIMEOUT_MS = 4e3;
-var SITE_TOKEN_PREFIX = "st1.";
-var MINT_MAX_ATTEMPTS = 4;
-var MINT_BACKOFF_BASE_MS = 500;
-var MINT_BACKOFF_CAP_MS = 8e3;
-var cache = /* @__PURE__ */ new Map();
-var inflight = /* @__PURE__ */ new Map();
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-function retryDelayMs(res, attempt) {
-  const header = res?.headers?.get?.("retry-after");
-  if (header) {
-    const seconds = Number(header);
-    const ms = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(header) - Date.now();
-    if (Number.isFinite(ms) && ms > 0) return Math.min(ms, MINT_BACKOFF_CAP_MS);
-  }
-  return Math.min(MINT_BACKOFF_BASE_MS * 2 ** attempt, MINT_BACKOFF_CAP_MS);
-}
-var isRetryableStatus = (status) => status === 429 || status >= 500;
-function rawFallbackAllowed() {
-  return typeof process !== "undefined" && process.env?.SONOR_SITE_TOKEN_FALLBACK === "raw";
-}
-function failClosed(reason, rawKey, now) {
-  if (rawFallbackAllowed()) {
-    console.warn(
-      `[SiteKitLayout] Token mint failed (${reason}) and SONOR_SITE_TOKEN_FALLBACK=raw is set; injecting the RAW API KEY into page HTML. The key is publicly readable wherever this page is served \u2014 unset the escape hatch once the mint is healthy.`
-    );
-    cache.set(rawKey, { credential: rawKey, expiresAt: now + 6e4 });
-    return rawKey;
-  }
-  throw new Error(
-    `site-kit: could not mint a site token (${reason}). Refusing to publish the raw SONOR_API_KEY in page HTML, so this build fails instead. Check that the mint endpoint is reachable and the key is valid, then rebuild. To ship anyway \u2014 which publishes the project secret in public HTML \u2014 set SONOR_SITE_TOKEN_FALLBACK=raw.`
-  );
-}
-function isFrameworkSignal(err) {
-  if (!err || typeof err !== "object") return false;
-  const e = err;
-  if (e.digest === "DYNAMIC_SERVER_USAGE") return true;
-  if (e.code === "NEXT_STATIC_GEN_BAILOUT") return true;
-  if (typeof e.digest === "string" && e.digest.startsWith("NEXT_")) return true;
-  if (e.$$typeof === /* @__PURE__ */ Symbol.for("react.postpone")) return true;
-  return false;
-}
-async function resolveClientCredential(rawKey, apiUrl) {
-  if (!rawKey) return "";
-  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey;
-  const cached = cache.get(rawKey);
-  if (cached && cached.expiresAt > Date.now()) return cached.credential;
-  const pending = inflight.get(rawKey);
-  if (pending) return pending;
-  const request = mintWithRetry(rawKey, apiUrl);
-  inflight.set(rawKey, request);
-  try {
-    return await request;
-  } finally {
-    inflight.delete(rawKey);
-  }
-}
-async function mintWithRetry(rawKey, apiUrl) {
-  const base = (apiUrl || "https://api.sonor.io").replace(/\/+$/, "");
-  let lastReason = "unknown error";
-  for (let attempt = 0; attempt < MINT_MAX_ATTEMPTS; attempt++) {
-    let res = null;
-    try {
-      const { fn: fetchFn, unpatched } = resolveFetch();
-      res = await fetchFn(`${base}${MINT_PATH}`, {
-        method: "POST",
-        headers: {
-          "content-type": "application/json",
-          "x-api-key": rawKey,
-          "x-sitekit-version": SITE_KIT_VERSION
-        },
-        // Only meaningful on the fallback path, where a future Next stopped
-        // exposing `_nextOriginalFetch` and we're back on the patched fetch.
-        // `revalidate: false` is the one setting that neither bails out of static
-        // generation nor downgrades the route to ISR; a Data Cache entry is the
-        // lesser evil versus shipping the raw key again.
-        ...unpatched ? {} : { next: { revalidate: false } },
-        signal: typeof AbortSignal !== "undefined" && AbortSignal.timeout ? AbortSignal.timeout(MINT_TIMEOUT_MS) : void 0
-      });
-    } catch (err) {
-      if (isFrameworkSignal(err)) throw err;
-      lastReason = err instanceof Error ? err.message : "network error";
-      if (attempt < MINT_MAX_ATTEMPTS - 1) {
-        await sleep(retryDelayMs(null, attempt));
-        continue;
-      }
-      break;
-    }
-    if (res.ok) {
-      const data = await res.json().catch(() => null);
-      const token = data?.token;
-      const expiresIn = typeof data?.expiresIn === "number" ? data.expiresIn : 3600;
-      if (typeof token === "string" && token.startsWith(SITE_TOKEN_PREFIX)) {
-        cache.set(rawKey, {
-          credential: token,
-          expiresAt: Date.now() + Math.min(expiresIn * 1e3 / 2, 30 * 6e4)
-        });
-        return token;
-      }
-      lastReason = "mint returned no usable token";
-      break;
-    }
-    if (res.status === 404) {
-      cache.set(rawKey, { credential: rawKey, expiresAt: Date.now() + 6e4 });
-      return rawKey;
-    }
-    lastReason = `HTTP ${res.status}`;
-    if (isRetryableStatus(res.status) && attempt < MINT_MAX_ATTEMPTS - 1) {
-      const delay = retryDelayMs(res, attempt);
-      console.warn(
-        `[SiteKitLayout] Token mint returned ${res.status}; retrying in ${Math.round(delay)}ms (attempt ${attempt + 2}/${MINT_MAX_ATTEMPTS}).`
-      );
-      await sleep(delay);
-      continue;
-    }
-    break;
-  }
-  return failClosed(lastReason, rawKey, Date.now());
-}
-
-export { resolveClientCredential };
-//# sourceMappingURL=chunk-ZEBOOUBP.mjs.map
-//# sourceMappingURL=chunk-ZEBOOUBP.mjs.map

package/dist/chunk-ZEBOOUBP.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/mint-site-token.ts"],"names":[],"mappings":";;;;AAgDA,IAAM,SAAA,GAAY,wBAAA;AAClB,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,iBAAA,GAAoB,MAAA;AAO1B,IAAM,iBAAA,GAAoB,CAAA;AAC1B,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,mBAAA,GAAsB,GAAA;AAM5B,IAAM,KAAA,uBAAY,GAAA,EAAwB;AAO1C,IAAM,QAAA,uBAAe,GAAA,EAA6B;AAElD,IAAM,KAAA,GAAQ,CAAC,EAAA,KAAe,IAAI,OAAA,CAAc,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,EAAE,CAAC,CAAA;AAOxE,SAAS,YAAA,CAAa,KAAsB,OAAA,EAAyB;AACnE,EAAA,MAAM,MAAA,GAAS,GAAA,EAAK,OAAA,EAAS,GAAA,GAAM,aAAa,CAAA;AAChD,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,OAAA,GAAU,OAAO,MAAM,CAAA;AAC7B,IAAA,MAAM,EAAA,GAAK,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,GAC9B,OAAA,GAAU,GAAA,GACV,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI;AAClC,IAAA,IAAI,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,GAAK,GAAG,OAAO,IAAA,CAAK,GAAA,CAAI,EAAA,EAAI,mBAAmB,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,oBAAA,GAAuB,CAAA,IAAK,SAAS,mBAAmB,CAAA;AAC1E;AAGA,IAAM,iBAAA,GAAoB,CAAC,MAAA,KAAmB,MAAA,KAAW,OAAO,MAAA,IAAU,GAAA;AAM1E,SAAS,kBAAA,GAA8B;AACrC,EAAA,OACE,OAAO,OAAA,KAAY,WAAA,IACnB,OAAA,CAAQ,KAAK,yBAAA,KAA8B,KAAA;AAE/C;AAEA,SAAS,UAAA,CAAW,MAAA,EAAgB,MAAA,EAAgB,GAAA,EAAqB;AACvE,EAAA,IAAI,oBAAmB,EAAG;AACxB,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,sCAAsC,MAAM,CAAA,uMAAA;AAAA,KAG9C;AACA,IAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,EAAE,UAAA,EAAY,QAAQ,SAAA,EAAW,GAAA,GAAM,KAAQ,CAAA;AACjE,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR,0CAA0C,MAAM,CAAA,uRAAA;AAAA,GAIlD;AACF;AAsBO,SAAS,kBAAkB,GAAA,EAAuB;AACvD,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AAC5C,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,sBAAA,EAAwB,OAAO,IAAA;AAChD,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,yBAAA,EAA2B,OAAO,IAAA;AACjD,EAAA,IAAI,OAAO,EAAE,MAAA,KAAW,QAAA,IAAY,EAAE,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG,OAAO,IAAA;AACzE,EAAA,IAAI,EAAE,QAAA,qBAAa,MAAA,CAAO,GAAA,CAAI,gBAAgB,GAAG,OAAO,IAAA;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,eAAsB,uBAAA,CACpB,QACA,MAAA,EACiB;AACjB,EAAA,IAAI,CAAC,QAAQ,OAAO,EAAA;AAEpB,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,iBAAiB,CAAA,EAAG,OAAO,MAAA;AAEjD,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AAC/B,EAAA,IAAI,UAAU,MAAA,CAAO,SAAA,GAAY,KAAK,GAAA,EAAI,SAAU,MAAA,CAAO,UAAA;AAG3D,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACnC,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,OAAA,GAAU,aAAA,CAAc,MAAA,EAAQ,MAAM,CAAA;AAC5C,EAAA,QAAA,CAAS,GAAA,CAAI,QAAQ,OAAO,CAAA;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAA;AAAA,EACf,CAAA,SAAE;AACA,IAAA,QAAA,CAAS,OAAO,MAAM,CAAA;AAAA,EACxB;AACF;AAEA,eAAe,aAAA,CAAc,QAAgB,MAAA,EAAiC;AAC5E,EAAA,MAAM,IAAA,GAAA,CAAQ,MAAA,IAAU,sBAAA,EAAwB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAClE,EAAA,IAAI,UAAA,GAAa,eAAA;AAEjB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,iBAAA,EAAmB,OAAA,EAAA,EAAW;AAC5D,IAAA,IAAI,GAAA,GAAuB,IAAA;AAC3B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,EAAA,EAAI,OAAA,EAAS,SAAA,KAAc,YAAA,EAAa;AAChD,MAAA,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI;AAAA,QACzC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,WAAA,EAAa,MAAA;AAAA,UACb,mBAAA,EAAqB;AAAA,SACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,GAAI,YAAY,EAAC,GAAK,EAAE,IAAA,EAAM,EAAE,UAAA,EAAY,KAAA,EAAM,EAAE;AAAA,QACpD,MAAA,EACE,OAAO,WAAA,KAAgB,WAAA,IAAe,YAAY,OAAA,GAC9C,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA,GACnC,KAAA;AAAA,OACP,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,iBAAA,CAAkB,GAAG,CAAA,EAAG,MAAM,GAAA;AAClC,MAAA,UAAA,GAAa,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,eAAA;AAClD,MAAA,IAAI,OAAA,GAAU,oBAAoB,CAAA,EAAG;AACnC,QAAA,MAAM,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,OAAO,CAAC,CAAA;AACvC,QAAA;AAAA,MACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,OAAY,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,MAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AACpB,MAAA,MAAM,YAAY,OAAO,IAAA,EAAM,SAAA,KAAc,QAAA,GAAW,KAAK,SAAA,GAAY,IAAA;AACzE,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,UAAA,CAAW,iBAAiB,CAAA,EAAG;AACpE,QAAA,KAAA,CAAM,IAAI,MAAA,EAAQ;AAAA,UAChB,UAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,IAAK,SAAA,GAAY,GAAA,GAAQ,CAAA,EAAG,EAAA,GAAK,GAAM;AAAA,SACrE,CAAA;AACD,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,UAAA,GAAa,+BAAA;AACb,MAAA;AAAA,IACF;AAKA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AACtB,MAAA,KAAA,CAAM,GAAA,CAAI,MAAA,EAAQ,EAAE,UAAA,EAAY,MAAA,EAAQ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,EAAQ,CAAA;AACxE,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,UAAA,GAAa,CAAA,KAAA,EAAQ,IAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,IAAI,kBAAkB,GAAA,CAAI,MAAM,CAAA,IAAK,OAAA,GAAU,oBAAoB,CAAA,EAAG;AACpE,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,EAAK,OAAO,CAAA;AACvC,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,oCAAA,EAAuC,GAAA,CAAI,MAAM,CAAA,cAAA,EAAiB,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA,YAAA,EACrE,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,iBAAiB,CAAA,EAAA;AAAA,OAChD;AACA,MAAA,MAAM,MAAM,KAAK,CAAA;AACjB,MAAA;AAAA,IACF;AACA,IAAA;AAAA,EACF;AAEA,EAAA,OAAO,UAAA,CAAW,UAAA,EAAY,MAAA,EAAQ,IAAA,CAAK,KAAK,CAAA;AAClD","file":"chunk-ZEBOOUBP.mjs","sourcesContent":["/**\n * @sonordev/site-kit/server — Client-token minting (server-only)\n *\n * SiteKitLayout holds the raw `SONOR_API_KEY` server-side but must NOT ship it to\n * the browser. This mints a short-lived, project-scoped token (server-to-server,\n * authenticated with the raw key, no browser Origin so it passes domain-binding)\n * and returns THAT for the layout to inject instead.\n *\n * `import 'server-only'` makes importing this into a client bundle a hard build\n * error — the raw key stays on the server.\n *\n * FAILS CLOSED. If minting genuinely fails, this throws and the build fails —\n * it does NOT publish the raw key. A failed deploy is loud and recoverable; a\n * leaked project secret in public HTML is neither. The only paths that still\n * return the raw key are a 404 (an older API that predates the endpoint, an\n * expected state during rollout) and the explicit `SONOR_SITE_TOKEN_FALLBACK=raw`\n * escape hatch, for when shipping beats being blocked.\n *\n * That posture is not academic. Through 3.5.0 a throttled mint (HTTP 429)\n * returned the raw key AND cached it for 60s, so every page rendered in that\n * window shipped the secret: one real build came out with 180 of 272 prerendered\n * pages carrying it. The build \"succeeded\" and nothing downstream noticed.\n * Rate limiting is transient by definition — the fix is to wait and retry, not\n * to downgrade to publishing the key.\n *\n * Two things keep the request count low enough that throttling is rare:\n *  - a module-level memo, so a worker mints once and every page reuses the seed;\n *  - an in-flight map, because that memo is only populated AFTER the await. Next\n *    renders pages concurrently, so without coalescing the first N concurrent\n *    renders in a process all miss the cache and all fire a request — a\n *    stampede per worker, multiplied by one worker per core. That is how a\n *    single site exhausted a 60/min budget.\n *\n * SEED FRESHNESS: a static page's seed carries `iat` = build time, and the API\n * refuses to refresh a seed older than SITE_TOKEN_MAX_REFRESH_AGE_SECONDS\n * (sonor-api common/site-auth/site-token.util.ts — currently 400 days, raised\n * from 30 alongside this fix). A site not rebuilt within that window serves a\n * seed the client cannot refresh, and its forms/analytics/engage start failing\n * for new visitors. Keep that limit comfortably longer than the fleet's\n * realistic redeploy gap; marketing sites routinely go many months untouched.\n */\nimport 'server-only'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport { resolveFetch } from '../shared/fresh-fetch'\n\n// Re-exported for this module's unit tests; the helper lives in shared/fresh-fetch.\nexport { resolveFetch }\n\nconst MINT_PATH = '/api/public/site-token'\nconst MINT_TIMEOUT_MS = 4_000\nconst SITE_TOKEN_PREFIX = 'st1.'\n\n/**\n * Retry budget for transient failures (429 / 5xx / network). Rate limiting is\n * measured per minute, so a few seconds of backoff clears it; the whole ladder\n * costs at most ~20s once per build worker, and only when something is wrong.\n */\nconst MINT_MAX_ATTEMPTS = 4\nconst MINT_BACKOFF_BASE_MS = 500\nconst MINT_BACKOFF_CAP_MS = 8_000\n\ninterface CacheEntry {\n  credential: string\n  expiresAt: number\n}\nconst cache = new Map<string, CacheEntry>()\n\n/**\n * Requests already in flight, keyed by raw key. The `cache` above is only\n * written after the response lands, so concurrent renders would otherwise each\n * start their own mint. See the module header.\n */\nconst inflight = new Map<string, Promise<string>>()\n\nconst sleep = (ms: number) => new Promise<void>((r) => setTimeout(r, ms))\n\n/**\n * Honour `Retry-After` when the server sends it (delta-seconds or HTTP date),\n * otherwise exponential backoff. Capped so a misconfigured server cannot stall\n * a build indefinitely.\n */\nfunction retryDelayMs(res: Response | null, attempt: number): number {\n  const header = res?.headers?.get?.('retry-after')\n  if (header) {\n    const seconds = Number(header)\n    const ms = Number.isFinite(seconds)\n      ? seconds * 1000\n      : Date.parse(header) - Date.now()\n    if (Number.isFinite(ms) && ms > 0) return Math.min(ms, MINT_BACKOFF_CAP_MS)\n  }\n  return Math.min(MINT_BACKOFF_BASE_MS * 2 ** attempt, MINT_BACKOFF_CAP_MS)\n}\n\n/** 429 and 5xx are transient; waiting is the correct response to both. */\nconst isRetryableStatus = (status: number) => status === 429 || status >= 500\n\n/**\n * The escape hatch, for when a broken mint must not block a release. Opt-in and\n * loud: it re-enables publishing the project secret in page HTML.\n */\nfunction rawFallbackAllowed(): boolean {\n  return (\n    typeof process !== 'undefined' &&\n    process.env?.SONOR_SITE_TOKEN_FALLBACK === 'raw'\n  )\n}\n\nfunction failClosed(reason: string, rawKey: string, now: number): string {\n  if (rawFallbackAllowed()) {\n    console.warn(\n      `[SiteKitLayout] Token mint failed (${reason}) and SONOR_SITE_TOKEN_FALLBACK=raw is set; ` +\n        'injecting the RAW API KEY into page HTML. The key is publicly readable wherever ' +\n        'this page is served — unset the escape hatch once the mint is healthy.',\n    )\n    cache.set(rawKey, { credential: rawKey, expiresAt: now + 60_000 })\n    return rawKey\n  }\n  throw new Error(\n    `site-kit: could not mint a site token (${reason}). Refusing to publish the raw ` +\n      'SONOR_API_KEY in page HTML, so this build fails instead. Check that the mint ' +\n      'endpoint is reachable and the key is valid, then rebuild. To ship anyway — ' +\n      'which publishes the project secret in public HTML — set SONOR_SITE_TOKEN_FALLBACK=raw.',\n  )\n}\n\n/*\n * The mint uses Next's saved original fetch (resolveFetch, shared/fresh-fetch.ts,\n * which documents why). A credential is not page data: `cache: 'no-store'` would\n * bail a static route before the request goes out (verified on Next 16.2.9: the\n * mint endpoint received zero requests for a static build, and every page\n * shipped the raw key), and a Data Cache entry would let a fresh deploy re-bake a\n * months-old seed. The module-level memo above is the only cache we want: one\n * mint per build process, and a build-fresh seed on every deploy.\n */\n\n/**\n * Next signals \"this render must go dynamic\" by THROWING (DynamicServerError,\n * static-gen bailout, redirect/notFound digests, React's postpone). Those are\n * the framework's control flow, not a mint failure. Swallowing one makes Next\n * believe the render succeeded statically — which is precisely how the raw key\n * ended up stranded in prerendered HTML with no error anywhere. Let them\n * propagate; only real network/HTTP failures fall back to the raw key.\n *\n * @internal Exported for unit tests; not part of the package's public API.\n */\nexport function isFrameworkSignal(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false\n  const e = err as { digest?: unknown; code?: unknown; $$typeof?: unknown }\n  if (e.digest === 'DYNAMIC_SERVER_USAGE') return true\n  if (e.code === 'NEXT_STATIC_GEN_BAILOUT') return true\n  if (typeof e.digest === 'string' && e.digest.startsWith('NEXT_')) return true\n  if (e.$$typeof === Symbol.for('react.postpone')) return true\n  return false\n}\n\nexport async function resolveClientCredential(\n  rawKey: string,\n  apiUrl: string,\n): Promise<string> {\n  if (!rawKey) return ''\n  // Env should hold a raw key; if it already looks like a token, pass it through.\n  if (rawKey.startsWith(SITE_TOKEN_PREFIX)) return rawKey\n\n  const cached = cache.get(rawKey)\n  if (cached && cached.expiresAt > Date.now()) return cached.credential\n\n  // Collapse concurrent renders onto one request rather than a stampede.\n  const pending = inflight.get(rawKey)\n  if (pending) return pending\n\n  const request = mintWithRetry(rawKey, apiUrl)\n  inflight.set(rawKey, request)\n  try {\n    return await request\n  } finally {\n    inflight.delete(rawKey)\n  }\n}\n\nasync function mintWithRetry(rawKey: string, apiUrl: string): Promise<string> {\n  const base = (apiUrl || 'https://api.sonor.io').replace(/\\/+$/, '')\n  let lastReason = 'unknown error'\n\n  for (let attempt = 0; attempt < MINT_MAX_ATTEMPTS; attempt++) {\n    let res: Response | null = null\n    try {\n      const { fn: fetchFn, unpatched } = resolveFetch()\n      res = await fetchFn(`${base}${MINT_PATH}`, {\n        method: 'POST',\n        headers: {\n          'content-type': 'application/json',\n          'x-api-key': rawKey,\n          'x-sitekit-version': SITE_KIT_VERSION,\n        },\n        // Only meaningful on the fallback path, where a future Next stopped\n        // exposing `_nextOriginalFetch` and we're back on the patched fetch.\n        // `revalidate: false` is the one setting that neither bails out of static\n        // generation nor downgrades the route to ISR; a Data Cache entry is the\n        // lesser evil versus shipping the raw key again.\n        ...(unpatched ? {} : ({ next: { revalidate: false } } as RequestInit)),\n        signal:\n          typeof AbortSignal !== 'undefined' && AbortSignal.timeout\n            ? AbortSignal.timeout(MINT_TIMEOUT_MS)\n            : undefined,\n      })\n    } catch (err) {\n      // Never swallow the framework's own control flow — see isFrameworkSignal.\n      if (isFrameworkSignal(err)) throw err\n      lastReason = err instanceof Error ? err.message : 'network error'\n      if (attempt < MINT_MAX_ATTEMPTS - 1) {\n        await sleep(retryDelayMs(null, attempt))\n        continue\n      }\n      break\n    }\n\n    if (res.ok) {\n      const data: any = await res.json().catch(() => null)\n      const token = data?.token\n      const expiresIn = typeof data?.expiresIn === 'number' ? data.expiresIn : 3600\n      if (typeof token === 'string' && token.startsWith(SITE_TOKEN_PREFIX)) {\n        cache.set(rawKey, {\n          credential: token,\n          expiresAt: Date.now() + Math.min((expiresIn * 1000) / 2, 30 * 60_000),\n        })\n        return token\n      }\n      lastReason = 'mint returned no usable token'\n      break\n    }\n\n    // 404 = an API older than the endpoint. Expected during rollout, and the raw\n    // key is exactly what such an API still expects, so this stays a fallback\n    // rather than a build failure.\n    if (res.status === 404) {\n      cache.set(rawKey, { credential: rawKey, expiresAt: Date.now() + 60_000 })\n      return rawKey\n    }\n\n    lastReason = `HTTP ${res.status}`\n    if (isRetryableStatus(res.status) && attempt < MINT_MAX_ATTEMPTS - 1) {\n      const delay = retryDelayMs(res, attempt)\n      console.warn(\n        `[SiteKitLayout] Token mint returned ${res.status}; retrying in ${Math.round(delay)}ms ` +\n          `(attempt ${attempt + 2}/${MINT_MAX_ATTEMPTS}).`,\n      )\n      await sleep(delay)\n      continue\n    }\n    break\n  }\n\n  return failClosed(lastReason, rawKey, Date.now())\n}\n"]}

package/dist/chunk-ZN4HBK5C.mjs

@@ -1,17 +0,0 @@
-// src/sites/normalize.ts
-function normalizeSiteHost(site) {
-  if (!site || typeof site !== "string") return null;
-  let s = site.trim().toLowerCase();
-  if (!s) return null;
-  s = s.replace(/^https?:\/\//, "");
-  const slash = s.indexOf("/");
-  if (slash >= 0) s = s.slice(0, slash);
-  const colon = s.indexOf(":");
-  if (colon >= 0) s = s.slice(0, colon);
-  s = s.replace(/\.+$/, "");
-  return s || null;
-}
-
-export { normalizeSiteHost };
-//# sourceMappingURL=chunk-ZN4HBK5C.mjs.map
-//# sourceMappingURL=chunk-ZN4HBK5C.mjs.map

package/dist/chunk-ZN4HBK5C.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sites/normalize.ts"],"names":[],"mappings":";AAmCO,SAAS,kBAAkB,IAAA,EAAqC;AACrE,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,UAAU,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAChC,EAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AAEf,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA;AAEhC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAEpC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAIpC,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACxB,EAAA,OAAO,CAAA,IAAK,IAAA;AACd","file":"chunk-ZN4HBK5C.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites — normalizeSiteHost (leaf module)\n *\n * Deliberately its own file, not part of `./contract`, so browser code can pull\n * in the normalizer WITHOUT the rest of the contract surface.\n *\n * `publishCredential` (which every client entry that publishes a credential\n * imports) needs exactly this one function. When it lived in `./contract`, the\n * bundler emitted that whole module as one shared chunk — `SITE_HOST_JSON_SCHEMA`,\n * `SITE_HOST_CONTRACT_VERSION`, `stripWww`, `sameSite`, `hostFromUrl`,\n * `isNormalizedSiteHost` and all — into `client`, `layout/client` and every\n * other entry that touched it. That was ~750B gzipped of agent-facing contract\n * metadata shipped to browsers for a 14-line string normalizer, and it is what\n * pushed those entries over their bundle budgets.\n *\n * `./contract` re-exports this, so the public `@sonordev/site-kit/sites/contract`\n * surface and the cross-repo drift tests are unchanged. Keep the implementation\n * HERE — the Nest APIs mirror this exact logic (sonor-api\n * `src/common/utils/site-host.ts`, signal-api `src/shared/utils/seo-page-pick.util.ts`).\n *\n * Pure string logic only (no Node built-ins) so it is safe in the browser.\n */\n\n/**\n * normalizeSiteHost — canonical normalizer for a sub-site host value before it\n * is persisted or used as a filter.\n *\n *   `https://OhioPowerStudies.com:3000/path` → `ohiopowerstudies.com`\n *\n * Lowercases, strips protocol, keeps host only (drops path + query), strips\n * port (rollups span dev/prod) and the FQDN root dot. Returns null for\n * empty/non-string input.\n * Note: `www.` is intentionally preserved here — use `sameSite`/`stripWww`\n * for www-insensitive equality.\n */\nexport function normalizeSiteHost(site?: string | null): string | null {\n  if (!site || typeof site !== 'string') return null\n  let s = site.trim().toLowerCase()\n  if (!s) return null\n  // Strip protocol if present\n  s = s.replace(/^https?:\\/\\//, '')\n  // Keep host only — drop everything from first slash onward\n  const slash = s.indexOf('/')\n  if (slash >= 0) s = s.slice(0, slash)\n  // Strip port (rollups span dev/prod)\n  const colon = s.indexOf(':')\n  if (colon >= 0) s = s.slice(0, colon)\n  // Strip the FQDN root dot — \"spademade.com.\" is the same host as\n  // \"spademade.com\". Because `site` is part of seo_pages identity, leaving the\n  // dot on spells one site as two and mints a full duplicate page set.\n  s = s.replace(/\\.+$/, '')\n  return s || null\n}\n"]}