@sonordev/site-kit 6.5.0 → 7.0.0

package/dist/chunk-JSXLTZUP.mjs

@@ -1,255 +0,0 @@
-import { getSEOPageData, ensureMetadata, getABTest, recordABImpression, getRedirectData, getRobotsData, getSitemapEntries } from './chunk-NE6QGHFT.mjs';
-import { titleProblem, descriptionProblem } from './chunk-MLVHVKFT.mjs';
-import { resolveSiteHost } from './chunk-KZVSB5WE.mjs';
-
-// src/seo/getManagedMetadata.ts
-async function getManagedMetadata(options) {
-  const { path, fallback = {}, overrides = {}, favicon: faviconMode = "metadata" } = options;
-  const omitIcons = faviconMode === "component";
-  const result = await getSEOPageData(path);
-  const pageData = result?.page;
-  const projectData = result?.project;
-  if (!pageData) {
-    const fallbackMeta = {
-      ...fallback,
-      ...overrides,
-      _managed: false,
-      _source: "fallback"
-    };
-    if (!omitIcons && projectData?.logo_url) {
-      fallbackMeta.icons = {
-        icon: projectData.logo_url,
-        apple: projectData.logo_url
-      };
-    }
-    return fallbackMeta;
-  }
-  const metadata = {
-    _managed: true,
-    _source: "database"
-  };
-  if (!omitIcons && projectData?.logo_url) {
-    metadata.icons = {
-      icon: projectData.logo_url,
-      apple: projectData.logo_url
-    };
-  }
-  if (!pageData.managed_title && !pageData.managed_meta_description && !pageData.managed_description) {
-    ensureMetadata(path).catch(() => {
-    });
-  }
-  const identity = {
-    brand: projectData?.brand ?? projectData?.title ?? null,
-    hosts: [resolveSiteHost(), pageData.site, projectData?.domain, projectData?.site_url]
-  };
-  const rejected = {};
-  const rawTitle = pageData.managed_title;
-  const titleIssue = rawTitle ? titleProblem(rawTitle, identity, { path }) : null;
-  if (titleIssue) rejected.title = titleIssue;
-  const managedTitle = rawTitle && !titleIssue ? rawTitle : void 0;
-  const rawDescription = pageData.managed_meta_description || pageData.managed_description;
-  const descriptionIssue = rawDescription ? descriptionProblem(rawDescription, identity) : null;
-  if (descriptionIssue) rejected.description = descriptionIssue;
-  const managedDescription = rawDescription && !descriptionIssue ? rawDescription : void 0;
-  if (titleIssue || descriptionIssue) metadata._rejected = rejected;
-  if (managedTitle) {
-    metadata.title = managedTitle;
-  } else if (fallback.title) {
-    metadata.title = fallback.title;
-  }
-  if (managedDescription) {
-    metadata.description = managedDescription;
-  } else if (fallback.description) {
-    metadata.description = fallback.description;
-  }
-  if (pageData.managed_keywords?.length) {
-    metadata.keywords = pageData.managed_keywords;
-  } else if (fallback.keywords) {
-    metadata.keywords = fallback.keywords;
-  }
-  if (pageData.managed_robots) {
-    metadata.robots = pageData.managed_robots;
-  }
-  if (pageData.managed_canonical) {
-    metadata.alternates = {
-      ...metadata.alternates,
-      canonical: pageData.managed_canonical
-    };
-  }
-  const langAlts = pageData.language_alternates;
-  if (langAlts && typeof langAlts === "object" && !Array.isArray(langAlts)) {
-    metadata.alternates = {
-      ...metadata.alternates,
-      languages: langAlts
-    };
-  }
-  const managedOgTitle = pageData.managed_og_title && !titleProblem(pageData.managed_og_title, identity, { path }) ? pageData.managed_og_title : void 0;
-  const managedOgDescription = pageData.managed_og_description && !descriptionProblem(pageData.managed_og_description, identity) ? pageData.managed_og_description : void 0;
-  const ogTitle = managedOgTitle || managedTitle;
-  const ogDescription = managedOgDescription || managedDescription;
-  const ogImage = pageData.managed_og_image;
-  if (ogTitle || ogDescription || ogImage) {
-    metadata.openGraph = {
-      ...ogTitle && { title: ogTitle },
-      ...ogDescription && { description: ogDescription },
-      ...ogImage && { images: [{ url: ogImage }] }
-    };
-  }
-  if (ogTitle || ogDescription || ogImage) {
-    metadata.twitter = {
-      card: "summary_large_image",
-      ...ogTitle && { title: ogTitle },
-      ...ogDescription && { description: ogDescription },
-      ...ogImage && { images: [ogImage] }
-    };
-  }
-  return {
-    ...metadata,
-    ...overrides,
-    _managed: true,
-    _source: "database"
-  };
-}
-async function getABVariant(options) {
-  const { path, field, sessionId } = options;
-  const test = await getABTest(path, field);
-  if (!test) {
-    return null;
-  }
-  let variant;
-  if (sessionId) {
-    const hash = sessionId.split("").reduce((acc, char) => {
-      return (acc << 5) - acc + char.charCodeAt(0);
-    }, 0);
-    variant = Math.abs(hash) % 100 < test.traffic_split * 100 ? "a" : "b";
-  } else {
-    variant = Math.random() < test.traffic_split ? "a" : "b";
-  }
-  recordABImpression(test.id, variant, sessionId).catch(() => {
-  });
-  return {
-    testId: test.id,
-    variant,
-    value: variant === "a" ? test.variant_a : test.variant_b
-  };
-}
-async function getManagedMetadataWithAB(options) {
-  const { sessionId, ...metadataOptions } = options;
-  const metadata = await getManagedMetadata(metadataOptions);
-  const titleTest = await getABVariant({
-    path: options.path,
-    field: "title",
-    sessionId
-  });
-  if (titleTest) {
-    metadata.title = titleTest.value;
-  }
-  const descTest = await getABVariant({
-    path: options.path,
-    field: "description",
-    sessionId
-  });
-  if (descTest) {
-    metadata.description = descTest.value;
-  }
-  return metadata;
-}
-
-// src/seo/routing.ts
-async function getRedirect(options) {
-  const { path } = options;
-  const redirect = await getRedirectData(path);
-  if (!redirect) {
-    return null;
-  }
-  if (redirect.expires_at && new Date(redirect.expires_at) < /* @__PURE__ */ new Date()) {
-    return null;
-  }
-  const destination = redirect.destination_url || redirect.destination_path;
-  const isExternal = destination.startsWith("http://") || destination.startsWith("https://");
-  return {
-    destination,
-    statusCode: redirect.status_code,
-    isExternal
-  };
-}
-function parseRobotsString(robots) {
-  const directive = {
-    index: true,
-    follow: true
-  };
-  const parts = robots.toLowerCase().split(",").map((p) => p.trim());
-  for (const part of parts) {
-    if (part === "noindex") directive.index = false;
-    if (part === "nofollow") directive.follow = false;
-    if (part === "noarchive") directive.noarchive = true;
-    if (part === "nosnippet") directive.nosnippet = true;
-    if (part === "noimageindex") directive.noimageindex = true;
-    if (part.startsWith("max-snippet:")) {
-      directive.max_snippet = parseInt(part.split(":")[1], 10);
-    }
-    if (part.startsWith("max-image-preview:")) {
-      const value = part.split(":")[1];
-      directive.max_image_preview = value;
-    }
-    if (part.startsWith("max-video-preview:")) {
-      directive.max_video_preview = parseInt(part.split(":")[1], 10);
-    }
-  }
-  return directive;
-}
-async function getRobotsDirective(options) {
-  const { path } = options;
-  const robotsString = await getRobotsData(path);
-  if (!robotsString) {
-    return { index: true, follow: true };
-  }
-  return parseRobotsString(robotsString);
-}
-async function generateSitemap(options) {
-  const { baseUrl, publishedOnly = true } = options;
-  const pages = await getSitemapEntries({ publishedOnly });
-  const normalizedBase = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-  return pages.map((page) => ({
-    path: page.path,
-    url: `${normalizedBase}${page.path}`,
-    lastmod: page.lastmod,
-    changefreq: page.changefreq || "weekly",
-    priority: page.priority ?? 0.5
-  }));
-}
-async function registerLocalSitemap(options) {
-  const { registerSitemap } = await import('./server-api-7F5P6CSH.mjs');
-  let entries = options.entries || [];
-  if (options.autoDiscover && entries.length === 0) {
-    try {
-      const { discoverNextJsRoutes, findAppDirForDiscovery } = await import('./discover-QGA6QFSR.mjs');
-      const appDir = findAppDirForDiscovery();
-      if (appDir) {
-        entries = discoverNextJsRoutes(appDir);
-        console.log(`[Sonor] Auto-discovered ${entries.length} routes from app directory`);
-      }
-    } catch (error) {
-      console.error("[Sonor] Auto-discovery failed:", error);
-    }
-  }
-  if (entries.length === 0) {
-    console.warn("[Sonor] No sitemap entries to register");
-    return { success: true, created: 0, updated: 0 };
-  }
-  const mode = options.mode ?? "additive";
-  console.log(`[Sonor] Registering ${entries.length} sitemap entries (${mode})...`);
-  const result = await registerSitemap(entries, { mode, site: options.site });
-  if (result.success) {
-    console.log(`[Sonor] Sitemap registered: ${result.created} new, ${result.updated} updated`);
-  }
-  return result;
-}
-async function isIndexable(projectId, path) {
-  const directive = await getRobotsDirective({ path });
-  return directive.index;
-}
-
-export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable, registerLocalSitemap };
-//# sourceMappingURL=chunk-JSXLTZUP.mjs.map
-//# sourceMappingURL=chunk-JSXLTZUP.mjs.map

package/dist/chunk-JSXLTZUP.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/seo/getManagedMetadata.ts","../src/seo/routing.ts"],"names":[],"mappings":";;;;;AA6BA,eAAsB,mBACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,IAAA,EAAM,QAAA,GAAW,EAAC,EAAG,SAAA,GAAY,EAAC,EAAG,OAAA,EAAS,WAAA,GAAc,UAAA,EAAW,GAAI,OAAA;AACnF,EAAA,MAAM,YAAY,WAAA,KAAgB,WAAA;AAElC,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,IAAI,CAAA;AACxC,EAAA,MAAM,WAAW,MAAA,EAAQ,IAAA;AACzB,EAAA,MAAM,cAAc,MAAA,EAAQ,OAAA;AAG5B,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,MAAM,YAAA,GAAsC;AAAA,MAC1C,GAAG,QAAA;AAAA,MACH,GAAG,SAAA;AAAA,MACH,QAAA,EAAU,KAAA;AAAA,MACV,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,IAAI,CAAC,SAAA,IAAa,WAAA,EAAa,QAAA,EAAU;AACvC,MAAA,YAAA,CAAa,KAAA,GAAQ;AAAA,QACnB,MAAM,WAAA,CAAY,QAAA;AAAA,QAClB,OAAO,WAAA,CAAY;AAAA,OACrB;AAAA,IACF;AAEA,IAAA,OAAO,YAAA;AAAA,EACT;AAGA,EAAA,MAAM,QAAA,GAAkC;AAAA,IACtC,QAAA,EAAU,IAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AAEA,EAAA,IAAI,CAAC,SAAA,IAAa,WAAA,EAAa,QAAA,EAAU;AACvC,IAAA,QAAA,CAAS,KAAA,GAAQ;AAAA,MACf,MAAM,WAAA,CAAY,QAAA;AAAA,MAClB,OAAO,WAAA,CAAY;AAAA,KACrB;AAAA,EACF;AAKA,EAAA,IAAI,CAAC,SAAS,aAAA,IAAiB,CAAC,SAAS,wBAAA,IAA4B,CAAC,SAAS,mBAAA,EAAqB;AAClG,IAAA,cAAA,CAAe,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACrC;AAKA,EAAA,MAAM,QAAA,GAAyB;AAAA,IAC7B,KAAA,EAAO,WAAA,EAAa,KAAA,IAAS,WAAA,EAAa,KAAA,IAAS,IAAA;AAAA,IACnD,KAAA,EAAO,CAAC,eAAA,EAAgB,EAAG,SAAS,IAAA,EAAM,WAAA,EAAa,MAAA,EAAQ,WAAA,EAAa,QAAQ;AAAA,GACtF;AACA,EAAA,MAAM,WAA4D,EAAC;AACnE,EAAA,MAAM,WAAW,QAAA,CAAS,aAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,WAAW,YAAA,CAAa,QAAA,EAAU,UAAU,EAAE,IAAA,EAAM,CAAA,GAAI,IAAA;AAC3E,EAAA,IAAI,UAAA,WAAqB,KAAA,GAAQ,UAAA;AACjC,EAAA,MAAM,YAAA,GAAe,QAAA,IAAY,CAAC,UAAA,GAAa,QAAA,GAAW,MAAA;AAE1D,EAAA,MAAM,cAAA,GAAiB,QAAA,CAAS,wBAAA,IAA4B,QAAA,CAAS,mBAAA;AACrE,EAAA,MAAM,gBAAA,GAAmB,cAAA,GAAiB,kBAAA,CAAmB,cAAA,EAAgB,QAAQ,CAAA,GAAI,IAAA;AACzF,EAAA,IAAI,gBAAA,WAA2B,WAAA,GAAc,gBAAA;AAC7C,EAAA,MAAM,kBAAA,GAAqB,cAAA,IAAkB,CAAC,gBAAA,GAAmB,cAAA,GAAiB,MAAA;AAElF,EAAA,IAAI,UAAA,IAAc,gBAAA,EAAkB,QAAA,CAAS,SAAA,GAAY,QAAA;AAGzD,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,QAAA,CAAS,KAAA,GAAQ,YAAA;AAAA,EACnB,CAAA,MAAA,IAAW,SAAS,KAAA,EAAO;AACzB,IAAA,QAAA,CAAS,QAAQ,QAAA,CAAS,KAAA;AAAA,EAC5B;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,QAAA,CAAS,WAAA,GAAc,kBAAA;AAAA,EACzB,CAAA,MAAA,IAAW,SAAS,WAAA,EAAa;AAC/B,IAAA,QAAA,CAAS,cAAc,QAAA,CAAS,WAAA;AAAA,EAClC;AAGA,EAAA,IAAI,QAAA,CAAS,kBAAkB,MAAA,EAAQ;AACrC,IAAA,QAAA,CAAS,WAAW,QAAA,CAAS,gBAAA;AAAA,EAC/B,CAAA,MAAA,IAAW,SAAS,QAAA,EAAU;AAC5B,IAAA,QAAA,CAAS,WAAW,QAAA,CAAS,QAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,IAAA,QAAA,CAAS,SAAS,QAAA,CAAS,cAAA;AAAA,EAC7B;AAGA,EAAA,IAAI,SAAS,iBAAA,EAAmB;AAC9B,IAAA,QAAA,CAAS,UAAA,GAAa;AAAA,MACpB,GAAG,QAAA,CAAS,UAAA;AAAA,MACZ,WAAW,QAAA,CAAS;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,WAAW,QAAA,CAAS,mBAAA;AAC1B,EAAA,IAAI,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,EAAG;AACxE,IAAA,QAAA,CAAS,UAAA,GAAa;AAAA,MACpB,GAAG,QAAA,CAAS,UAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACb;AAAA,EACF;AAIA,EAAA,MAAM,cAAA,GACJ,QAAA,CAAS,gBAAA,IAAoB,CAAC,YAAA,CAAa,QAAA,CAAS,gBAAA,EAAkB,QAAA,EAAU,EAAE,IAAA,EAAM,CAAA,GACpF,SAAS,gBAAA,GACT,MAAA;AACN,EAAA,MAAM,oBAAA,GACJ,QAAA,CAAS,sBAAA,IAA0B,CAAC,kBAAA,CAAmB,SAAS,sBAAA,EAAwB,QAAQ,CAAA,GAC5F,QAAA,CAAS,sBAAA,GACT,MAAA;AACN,EAAA,MAAM,UAAU,cAAA,IAAkB,YAAA;AAClC,EAAA,MAAM,gBAAgB,oBAAA,IAAwB,kBAAA;AAC9C,EAAA,MAAM,UAAU,QAAA,CAAS,gBAAA;AAEzB,EAAA,IAAI,OAAA,IAAW,iBAAiB,OAAA,EAAS;AACvC,IAAA,QAAA,CAAS,SAAA,GAAY;AAAA,MACnB,GAAI,OAAA,IAAW,EAAE,KAAA,EAAO,OAAA,EAAQ;AAAA,MAChC,GAAI,aAAA,IAAiB,EAAE,WAAA,EAAa,aAAA,EAAc;AAAA,MAClD,GAAI,WAAW,EAAE,MAAA,EAAQ,CAAC,EAAE,GAAA,EAAK,OAAA,EAAS,CAAA;AAAE,KAC9C;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,IAAW,iBAAiB,OAAA,EAAS;AACvC,IAAA,QAAA,CAAS,OAAA,GAAU;AAAA,MACjB,IAAA,EAAM,qBAAA;AAAA,MACN,GAAI,OAAA,IAAW,EAAE,KAAA,EAAO,OAAA,EAAQ;AAAA,MAChC,GAAI,aAAA,IAAiB,EAAE,WAAA,EAAa,aAAA,EAAc;AAAA,MAClD,GAAI,OAAA,IAAW,EAAE,MAAA,EAAQ,CAAC,OAAO,CAAA;AAAE,KACrC;AAAA,EACF;AAGA,EAAA,OAAO;AAAA,IACL,GAAG,QAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH,QAAA,EAAU,IAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AACF;AAkBA,eAAsB,aACpB,OAAA,EAC8B;AAC9B,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,SAAA,EAAU,GAAI,OAAA;AAEnC,EAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAExC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,OAAA;AAEJ,EAAA,IAAI,SAAA,EAAW;AAEb,IAAA,MAAM,IAAA,GAAO,UAAU,KAAA,CAAM,EAAE,EAAE,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS;AACrD,MAAA,OAAA,CAAS,GAAA,IAAO,CAAA,IAAK,GAAA,GAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAAA,IAC/C,GAAG,CAAC,CAAA;AACJ,IAAA,OAAA,GAAW,IAAA,CAAK,IAAI,IAAI,CAAA,GAAI,MAAQ,IAAA,CAAK,aAAA,GAAgB,MAAO,GAAA,GAAM,GAAA;AAAA,EACxE,CAAA,MAAO;AAEL,IAAA,OAAA,GAAU,IAAA,CAAK,MAAA,EAAO,GAAI,IAAA,CAAK,gBAAgB,GAAA,GAAM,GAAA;AAAA,EACvD;AAGA,EAAA,kBAAA,CAAmB,KAAK,EAAA,EAAI,OAAA,EAAS,SAAS,CAAA,CAAE,MAAM,MAAM;AAAA,EAE5D,CAAC,CAAA;AAED,EAAA,OAAO;AAAA,IACL,QAAQ,IAAA,CAAK,EAAA;AAAA,IACb,OAAA;AAAA,IACA,KAAA,EAAO,OAAA,KAAY,GAAA,GAAM,IAAA,CAAK,YAAY,IAAA,CAAK;AAAA,GACjD;AACF;AAOA,eAAsB,yBACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,SAAA,EAAW,GAAG,eAAA,EAAgB,GAAI,OAAA;AAG1C,EAAA,MAAM,QAAA,GAAW,MAAM,kBAAA,CAAmB,eAAe,CAAA;AAGzD,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa;AAAA,IACnC,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,KAAA,EAAO,OAAA;AAAA,IACP;AAAA,GACD,CAAA;AAED,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,QAAA,CAAS,QAAQ,SAAA,CAAU,KAAA;AAAA,EAC7B;AAGA,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa;AAAA,IAClC,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,KAAA,EAAO,aAAA;AAAA,IACP;AAAA,GACD,CAAA;AAED,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,QAAA,CAAS,cAAc,QAAA,CAAS,KAAA;AAAA,EAClC;AAEA,EAAA,OAAO,QAAA;AACT;;;AClPA,eAAsB,YACpB,OAAA,EACgC;AAChC,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,IAAI,CAAA;AAE3C,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,QAAA,CAAS,cAAc,IAAI,IAAA,CAAK,SAAS,UAAU,CAAA,mBAAI,IAAI,IAAA,EAAK,EAAG;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,MAAM,WAAA,GAAc,QAAA,CAAS,eAAA,IAAmB,QAAA,CAAS,gBAAA;AACzD,EAAA,MAAM,aAAa,WAAA,CAAY,UAAA,CAAW,SAAS,CAAA,IAAK,WAAA,CAAY,WAAW,UAAU,CAAA;AAEzF,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,YAAY,QAAA,CAAS,WAAA;AAAA,IACrB;AAAA,GACF;AACF;AAKA,SAAS,kBAAkB,MAAA,EAAiC;AAC1D,EAAA,MAAM,SAAA,GAA6B;AAAA,IACjC,KAAA,EAAO,IAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,WAAA,EAAY,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,EAAM,CAAA;AAE/D,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,KAAS,SAAA,EAAW,SAAA,CAAU,KAAA,GAAQ,KAAA;AAC1C,IAAA,IAAI,IAAA,KAAS,UAAA,EAAY,SAAA,CAAU,MAAA,GAAS,KAAA;AAC5C,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,SAAA,CAAU,SAAA,GAAY,IAAA;AAChD,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,SAAA,CAAU,SAAA,GAAY,IAAA;AAChD,IAAA,IAAI,IAAA,KAAS,cAAA,EAAgB,SAAA,CAAU,YAAA,GAAe,IAAA;AACtD,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,cAAc,CAAA,EAAG;AACnC,MAAA,SAAA,CAAU,WAAA,GAAc,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,EAAE,CAAA;AAAA,IACzD;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC/B,MAAA,SAAA,CAAU,iBAAA,GAAoB,KAAA;AAAA,IAChC;AACA,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,SAAA,CAAU,iBAAA,GAAoB,SAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,EAAE,CAAA;AAAA,IAC/D;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAcA,eAAsB,mBACpB,OAAA,EAC0B;AAC1B,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,MAAM,YAAA,GAAe,MAAM,aAAA,CAAc,IAAI,CAAA;AAE7C,EAAA,IAAI,CAAC,YAAA,EAAc;AAEjB,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAK;AAAA,EACrC;AAEA,EAAA,OAAO,kBAAkB,YAAY,CAAA;AACvC;AAgBA,eAAsB,gBACpB,OAAA,EACyB;AACzB,EAAA,MAAM,EAAE,OAAA,EAAS,aAAA,GAAgB,IAAA,EAAK,GAAI,OAAA;AAE1C,EAAA,MAAM,KAAA,GAAQ,MAAM,iBAAA,CAAkB,EAAE,eAAe,CAAA;AAEvD,EAAA,MAAM,cAAA,GAAiB,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAEtE,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,MAAsF;AAAA,IACtG,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,GAAA,EAAK,CAAA,EAAG,cAAc,CAAA,EAAG,KAAK,IAAI,CAAA,CAAA;AAAA,IAClC,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,UAAA,EAAa,KAAK,UAAA,IAAc,QAAA;AAAA,IAChC,QAAA,EAAU,KAAK,QAAA,IAAY;AAAA,GAC7B,CAAE,CAAA;AACJ;AA4BA,eAAsB,qBAAqB,OAAA,EA2BxC;AACD,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,2BAAc,CAAA;AAEvD,EAAA,IAAI,OAAA,GAAU,OAAA,CAAQ,OAAA,IAAW,EAAC;AAMlC,EAAA,IAAI,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,oBAAA,EAAsB,sBAAA,EAAuB,GAAI,MAAM,OAAO,yBAAqB,CAAA;AAC3F,MAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAA,GAAU,qBAAqB,MAAM,CAAA;AACrC,QAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,wBAAA,EAA2B,OAAA,CAAQ,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAAA,MACnF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,kCAAkC,KAAK,CAAA;AAAA,IACvD;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,KAAK,wCAAwC,CAAA;AACrD,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,CAAA,EAAG,SAAS,CAAA,EAAE;AAAA,EACjD;AASA,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,UAAA;AAE7B,EAAA,OAAA,CAAQ,IAAI,CAAA,oBAAA,EAAuB,OAAA,CAAQ,MAAM,CAAA,kBAAA,EAAqB,IAAI,CAAA,IAAA,CAAM,CAAA;AAChF,EAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAgB,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAE1E,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,IAAI,CAAA,4BAAA,EAA+B,MAAA,CAAO,OAAO,CAAA,MAAA,EAAS,MAAA,CAAO,OAAO,CAAA,QAAA,CAAU,CAAA;AAAA,EAC5F;AAEA,EAAA,OAAO,MAAA;AACT;AAOA,eAAsB,WAAA,CACpB,WACA,IAAA,EACkB;AAClB,EAAA,MAAM,YAAY,MAAM,kBAAA,CAAmB,EAAa,MAAM,CAAA;AAC9D,EAAA,OAAO,SAAA,CAAU,KAAA;AACnB","file":"chunk-JSXLTZUP.mjs","sourcesContent":["import type { Metadata } from 'next'\nimport { getSEOPageData, getABTest, recordABImpression, ensureMetadata } from './server-api'\nimport { descriptionProblem, titleProblem, type MetaIdentity } from '../seo-meta/contract'\nimport { resolveSiteHost } from '../sites/resolve'\nimport type { \n  GetManagedMetadataOptions, \n  ManagedMetadataResult,\n  GetABVariantOptions,\n  ABTestResult \n} from './types'\n\n/**\n * Get managed metadata for a page\n * \n * Use in generateMetadata() to fetch Portal-managed SEO data\n * \n * @example\n * ```tsx\n * export async function generateMetadata({ params }) {\n *   return getManagedMetadata({\n *     path: `/services/${params.slug}`,\n *     fallback: {\n *       title: 'Our Services',\n *       description: 'Learn about our services'\n *     }\n *   })\n * }\n * ```\n */\nexport async function getManagedMetadata(\n  options: GetManagedMetadataOptions\n): Promise<ManagedMetadataResult> {\n  const { path, fallback = {}, overrides = {}, favicon: faviconMode = 'metadata' } = options\n  const omitIcons = faviconMode === 'component'\n\n  const result = await getSEOPageData(path)\n  const pageData = result?.page\n  const projectData = result?.project\n\n  // If no managed data, return fallback (still include favicon from project if available, unless using component)\n  if (!pageData) {\n    const fallbackMeta: ManagedMetadataResult = {\n      ...fallback,\n      ...overrides,\n      _managed: false,\n      _source: 'fallback',\n    } as ManagedMetadataResult\n\n    if (!omitIcons && projectData?.logo_url) {\n      fallbackMeta.icons = {\n        icon: projectData.logo_url,\n        apple: projectData.logo_url,\n      }\n    }\n\n    return fallbackMeta\n  }\n\n  // Build metadata from managed values, falling back to provided fallbacks\n  const metadata: ManagedMetadataResult = {\n    _managed: true,\n    _source: 'database',\n  }\n\n  if (!omitIcons && projectData?.logo_url) {\n    metadata.icons = {\n      icon: projectData.logo_url,\n      apple: projectData.logo_url,\n    }\n  }\n\n  // Signal fallback — when page exists but both title & description are empty,\n  // trigger Signal AI to generate them (fire-and-forget so it never blocks TTFB;\n  // the generated data will be available on the next request)\n  if (!pageData.managed_title && !pageData.managed_meta_description && !pageData.managed_description) {\n    ensureMetadata(path).catch(() => {})\n  }\n\n  // Quality gate (seo-meta/contract): a managed value that names the domain,\n  // was hard-cut mid-word, ends on a separator, or respells the brand never\n  // ships. The page's own fallback does, so no site needs its own guard.\n  const identity: MetaIdentity = {\n    brand: projectData?.brand ?? projectData?.title ?? null,\n    hosts: [resolveSiteHost(), pageData.site, projectData?.domain, projectData?.site_url],\n  }\n  const rejected: NonNullable<ManagedMetadataResult['_rejected']> = {}\n  const rawTitle = pageData.managed_title\n  const titleIssue = rawTitle ? titleProblem(rawTitle, identity, { path }) : null\n  if (titleIssue) rejected.title = titleIssue\n  const managedTitle = rawTitle && !titleIssue ? rawTitle : undefined\n\n  const rawDescription = pageData.managed_meta_description || pageData.managed_description\n  const descriptionIssue = rawDescription ? descriptionProblem(rawDescription, identity) : null\n  if (descriptionIssue) rejected.description = descriptionIssue\n  const managedDescription = rawDescription && !descriptionIssue ? rawDescription : undefined\n\n  if (titleIssue || descriptionIssue) metadata._rejected = rejected\n\n  // Title\n  if (managedTitle) {\n    metadata.title = managedTitle\n  } else if (fallback.title) {\n    metadata.title = fallback.title\n  }\n\n  // Description\n  if (managedDescription) {\n    metadata.description = managedDescription\n  } else if (fallback.description) {\n    metadata.description = fallback.description\n  }\n\n  // Keywords\n  if (pageData.managed_keywords?.length) {\n    metadata.keywords = pageData.managed_keywords\n  } else if (fallback.keywords) {\n    metadata.keywords = fallback.keywords\n  }\n\n  // Robots\n  if (pageData.managed_robots) {\n    metadata.robots = pageData.managed_robots\n  }\n\n  // Canonical\n  if (pageData.managed_canonical) {\n    metadata.alternates = {\n      ...metadata.alternates,\n      canonical: pageData.managed_canonical,\n    }\n  }\n\n  // Optional hreflang map from Portal (expansion / multilingual sites)\n  const langAlts = pageData.language_alternates\n  if (langAlts && typeof langAlts === 'object' && !Array.isArray(langAlts)) {\n    metadata.alternates = {\n      ...metadata.alternates,\n      languages: langAlts as Record<string, string>,\n    }\n  }\n\n  // Open Graph — the same gate, so a rejected title can't still ship in\n  // every share preview through og:title / twitter:title.\n  const managedOgTitle =\n    pageData.managed_og_title && !titleProblem(pageData.managed_og_title, identity, { path })\n      ? pageData.managed_og_title\n      : undefined\n  const managedOgDescription =\n    pageData.managed_og_description && !descriptionProblem(pageData.managed_og_description, identity)\n      ? pageData.managed_og_description\n      : undefined\n  const ogTitle = managedOgTitle || managedTitle\n  const ogDescription = managedOgDescription || managedDescription\n  const ogImage = pageData.managed_og_image\n\n  if (ogTitle || ogDescription || ogImage) {\n    metadata.openGraph = {\n      ...(ogTitle && { title: ogTitle }),\n      ...(ogDescription && { description: ogDescription }),\n      ...(ogImage && { images: [{ url: ogImage }] }),\n    }\n  }\n\n  // Twitter (use OG values as fallback)\n  if (ogTitle || ogDescription || ogImage) {\n    metadata.twitter = {\n      card: 'summary_large_image',\n      ...(ogTitle && { title: ogTitle }),\n      ...(ogDescription && { description: ogDescription }),\n      ...(ogImage && { images: [ogImage] }),\n    }\n  }\n\n  // Apply overrides last\n  return {\n    ...metadata,\n    ...overrides,\n    _managed: true,\n    _source: 'database',\n  }\n}\n\n/**\n * Get A/B test variant for a field\n * \n * @example\n * ```tsx\n * const variant = await getABVariant({\n *   path: '/pricing',\n *   field: 'title',\n *   sessionId: cookies().get('session_id')?.value\n * })\n * \n * if (variant) {\n *   // Use variant.value instead of default\n * }\n * ```\n */\nexport async function getABVariant(\n  options: GetABVariantOptions\n): Promise<ABTestResult | null> {\n  const { path, field, sessionId } = options\n\n  const test = await getABTest(path, field)\n\n  if (!test) {\n    return null\n  }\n\n  // Determine variant based on session ID or random\n  let variant: 'a' | 'b'\n  \n  if (sessionId) {\n    // Consistent variant for same session\n    const hash = sessionId.split('').reduce((acc, char) => {\n      return ((acc << 5) - acc) + char.charCodeAt(0)\n    }, 0)\n    variant = (Math.abs(hash) % 100) < (test.traffic_split * 100) ? 'a' : 'b'\n  } else {\n    // Random variant\n    variant = Math.random() < test.traffic_split ? 'a' : 'b'\n  }\n\n  // Record impression (fire and forget)\n  recordABImpression(test.id, variant, sessionId).catch(() => {\n    // Silently fail - don't block rendering\n  })\n\n  return {\n    testId: test.id,\n    variant,\n    value: variant === 'a' ? test.variant_a : test.variant_b,\n  }\n}\n\n/**\n * Get managed metadata with A/B test support\n * \n * Automatically applies running A/B test variants to metadata\n */\nexport async function getManagedMetadataWithAB(\n  options: GetManagedMetadataOptions & { sessionId?: string }\n): Promise<ManagedMetadataResult> {\n  const { sessionId, ...metadataOptions } = options\n  \n  // Get base metadata\n  const metadata = await getManagedMetadata(metadataOptions)\n\n  // Check for title A/B test\n  const titleTest = await getABVariant({\n    path: options.path,\n    field: 'title',\n    sessionId,\n  })\n\n  if (titleTest) {\n    metadata.title = titleTest.value\n  }\n\n  // Check for description A/B test\n  const descTest = await getABVariant({\n    path: options.path,\n    field: 'description',\n    sessionId,\n  })\n\n  if (descTest) {\n    metadata.description = descTest.value\n  }\n\n  return metadata\n}\n","import { getRedirectData, getRobotsData, getSitemapEntries } from './server-api'\nimport type { \n  GetRedirectOptions, \n  RedirectResult, \n  GetRobotsOptions, \n  RobotsDirective,\n  GetSitemapEntriesOptions,\n  SitemapEntry \n} from './types'\n\n/**\n * Get redirect for a path if one exists\n * \n * Use in Next.js middleware to handle managed redirects\n * \n * @example\n * ```tsx\n * // proxy.ts\n * import { getRedirect } from '@sonordev/site-kit/seo'\n * \n * export default async function proxy(request) {\n *   const redirect = await getRedirect({ path: request.nextUrl.pathname })\n *   \n *   if (redirect) {\n *     return NextResponse.redirect(redirect.destination, redirect.statusCode)\n *   }\n * }\n * ```\n */\nexport async function getRedirect(\n  options: GetRedirectOptions\n): Promise<RedirectResult | null> {\n  const { path } = options\n\n  const redirect = await getRedirectData(path)\n\n  if (!redirect) {\n    return null\n  }\n\n  // Check if expired\n  if (redirect.expires_at && new Date(redirect.expires_at) < new Date()) {\n    return null\n  }\n\n  // Determine destination\n  const destination = redirect.destination_url || redirect.destination_path\n  const isExternal = destination.startsWith('http://') || destination.startsWith('https://')\n\n  return {\n    destination,\n    statusCode: redirect.status_code,\n    isExternal,\n  }\n}\n\n/**\n * Parse robots directive string into structured object\n */\nfunction parseRobotsString(robots: string): RobotsDirective {\n  const directive: RobotsDirective = {\n    index: true,\n    follow: true,\n  }\n\n  const parts = robots.toLowerCase().split(',').map(p => p.trim())\n\n  for (const part of parts) {\n    if (part === 'noindex') directive.index = false\n    if (part === 'nofollow') directive.follow = false\n    if (part === 'noarchive') directive.noarchive = true\n    if (part === 'nosnippet') directive.nosnippet = true\n    if (part === 'noimageindex') directive.noimageindex = true\n    if (part.startsWith('max-snippet:')) {\n      directive.max_snippet = parseInt(part.split(':')[1], 10)\n    }\n    if (part.startsWith('max-image-preview:')) {\n      const value = part.split(':')[1] as 'none' | 'standard' | 'large'\n      directive.max_image_preview = value\n    }\n    if (part.startsWith('max-video-preview:')) {\n      directive.max_video_preview = parseInt(part.split(':')[1], 10)\n    }\n  }\n\n  return directive\n}\n\n/**\n * Get robots directive for a page\n * \n * @example\n * ```tsx\n * const robots = await getRobotsDirective({ path: '/private-page' })\n * \n * if (!robots.index) {\n *   // Page should not be indexed\n * }\n * ```\n */\nexport async function getRobotsDirective(\n  options: GetRobotsOptions\n): Promise<RobotsDirective> {\n  const { path } = options\n\n  const robotsString = await getRobotsData(path)\n\n  if (!robotsString) {\n    // Default: index and follow\n    return { index: true, follow: true }\n  }\n\n  return parseRobotsString(robotsString)\n}\n\n/**\n * Get the project's managed page list as sitemap entries\n *\n * Returns `{ path, url, lastmod, changefreq, priority }`, which is NOT Next's\n * `MetadataRoute.Sitemap` shape (`lastModified` / `changeFrequency`). For\n * app/sitemap.ts prefer `createSitemap` from `@sonordev/site-kit/sitemap`.\n *\n * @example\n * ```tsx\n * import { generateSitemap } from '@sonordev/site-kit/seo'\n *\n * const entries = await generateSitemap({ baseUrl: 'https://example.com' })\n * ```\n */\nexport async function generateSitemap(\n  options: GetSitemapEntriesOptions\n): Promise<SitemapEntry[]> {\n  const { baseUrl, publishedOnly = true } = options\n\n  const pages = await getSitemapEntries({ publishedOnly })\n\n  const normalizedBase = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n\n  return pages.map((page: { path: string; lastmod?: string; changefreq?: string; priority?: number }) => ({\n    path: page.path,\n    url: `${normalizedBase}${page.path}`,\n    lastmod: page.lastmod,\n    changefreq: (page.changefreq || 'weekly') as SitemapEntry['changefreq'],\n    priority: page.priority ?? 0.5,\n  }))\n}\n\n/**\n * Register local sitemap entries with Sonor\n * \n * Call this at build time to sync your local routes to seo_pages.\n * This ensures analytics only tracks real pages.\n * \n * After registration, Signal AI will generate optimized meta titles\n * and descriptions for pages that don't have managed meta yet.\n * \n * @example\n * ```ts\n * // scripts/register-sitemap.ts\n * import { registerLocalSitemap } from '@sonordev/site-kit/seo/server'\n *\n * // Option 1: Provide entries directly\n * await registerLocalSitemap({\n *   entries: [\n *     { path: '/', title: 'Home', priority: 1.0 },\n *     { path: '/about', title: 'About Us', priority: 0.8 },\n *   ]\n * })\n *\n * // Option 2: Auto-discover from Next.js app directory\n * await registerLocalSitemap({ autoDiscover: true })\n * ```\n */\nexport async function registerLocalSitemap(options: {\n  entries?: Array<{\n    path: string\n    title?: string\n    priority?: number\n    changefreq?: 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never'\n  }>\n  autoDiscover?: boolean\n  /** Trigger Signal AI to generate optimized meta titles/descriptions (default: true) */\n  optimize_meta?: boolean\n  /**\n   * Sync mode. Defaults to 'additive' for explicit entries (a partial list must\n   * never delete the rest of the site's pages) and 'full-replace' for\n   * autoDiscover (which enumerates the complete route set).\n   */\n  mode?: 'additive' | 'full-replace'\n  /** Sub-site host on a multi-site project. Defaults to NEXT_PUBLIC_SITE_URL's host. */\n  site?: string\n}): Promise<{\n  success: boolean\n  created: number\n  updated: number\n  removed?: number\n  meta_optimization?: {\n    triggered: boolean\n    pages_queued: number\n  } | null\n}> {\n  const { registerSitemap } = await import('./server-api')\n\n  let entries = options.entries || []\n\n  // Auto-discover from the Next.js app directory if requested. Lazy-import the\n  // fs-backed discovery module so `fs` never enters this file's STATIC graph —\n  // getRedirect/isIndexable below are imported by edge middleware, which has no\n  // fs. Discovery only runs at build time, in Node, so a dynamic import is fine.\n  if (options.autoDiscover && entries.length === 0) {\n    try {\n      const { discoverNextJsRoutes, findAppDirForDiscovery } = await import('../sitemap/discover')\n      const appDir = findAppDirForDiscovery()\n      if (appDir) {\n        entries = discoverNextJsRoutes(appDir)\n        console.log(`[Sonor] Auto-discovered ${entries.length} routes from app directory`)\n      }\n    } catch (error) {\n      console.error('[Sonor] Auto-discovery failed:', error)\n    }\n  }\n\n  if (entries.length === 0) {\n    console.warn('[Sonor] No sitemap entries to register')\n    return { success: true, created: 0, updated: 0 }\n  }\n\n  // A route set discovered from the filesystem is structurally incomplete (it\n  // can't enumerate dynamic routes and ignores sitemap excludes), and an\n  // explicit entry list is often partial — either way a full-replace would\n  // silently delete real pages. Default everything to additive; a caller that\n  // truly holds the complete page set opts in with mode: 'full-replace'. The\n  // recommended `sonor-register-sitemap` postbuild additionally self-skips when\n  // an app/sitemap route already owns the sync.\n  const mode = options.mode ?? 'additive'\n\n  console.log(`[Sonor] Registering ${entries.length} sitemap entries (${mode})...`)\n  const result = await registerSitemap(entries, { mode, site: options.site })\n  \n  if (result.success) {\n    console.log(`[Sonor] Sitemap registered: ${result.created} new, ${result.updated} updated`)\n  }\n  \n  return result\n}\n\n/**\n * Check if a path should be indexed\n * \n * Quick helper to check indexability without full directive parsing\n */\nexport async function isIndexable(\n  projectId: string,\n  path: string\n): Promise<boolean> {\n  const directive = await getRobotsDirective({ projectId, path })\n  return directive.index\n}\n"]}

package/dist/chunk-JX3PO2MH.js

@@ -1,53 +0,0 @@
-'use strict';
-
-var chunkO5GHP7UO_js = require('./chunk-O5GHP7UO.js');
-var react = require('react');
-require('server-only');
-
-var CMS_LOG_PREFIX = "@sonordev/site-kit/cms";
-function secureApiPost(endpoint, body = {}) {
-  return chunkO5GHP7UO_js.serverApiFetch(endpoint, {
-    method: "POST",
-    body,
-    revalidate: 60,
-    requireKey: true,
-    retry: true,
-    logPrefix: CMS_LOG_PREFIX
-  });
-}
-var getCmsPage = react.cache(
-  async (path) => {
-    const result = await secureApiPost("/api/public/cms/page", { path });
-    if (!result?.found || !result.page) return null;
-    return result.page;
-  }
-);
-var getCmsSection = react.cache(
-  async (sectionId) => {
-    const result = await secureApiPost("/api/public/cms/section", { sectionId });
-    if (!result?.found || !result.section) return null;
-    return result.section;
-  }
-);
-var getCmsPageMetadata = react.cache(
-  async (path) => {
-    const page = await getCmsPage(path);
-    if (!page) return null;
-    const seo = page.seo || {};
-    return {
-      title: seo.title || page.title,
-      description: seo.description,
-      robots: seo.noindex ? { index: false } : void 0,
-      openGraph: {
-        title: seo.title || page.title,
-        description: seo.description
-      }
-    };
-  }
-);
-
-exports.getCmsPage = getCmsPage;
-exports.getCmsPageMetadata = getCmsPageMetadata;
-exports.getCmsSection = getCmsSection;
-//# sourceMappingURL=chunk-JX3PO2MH.js.map
-//# sourceMappingURL=chunk-JX3PO2MH.js.map

package/dist/chunk-JX3PO2MH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cms/server-api.ts"],"names":["serverApiFetch","cache"],"mappings":";;;;;;AAyBA,IAAM,cAAA,GAAiB,wBAAA;AAQvB,SAAS,aAAA,CACP,QAAA,EACA,IAAA,GAAgC,EAAC,EACd;AACnB,EAAA,OAAOA,gCAAkB,QAAA,EAAU;AAAA,IACjC,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA;AAAA,IACA,UAAA,EAAY,EAAA;AAAA,IACZ,UAAA,EAAY,IAAA;AAAA,IACZ,KAAA,EAAO,IAAA;AAAA,IACP,SAAA,EAAW;AAAA,GACZ,CAAA;AACH;AAWO,IAAM,UAAA,GAAaC,WAAA;AAAA,EACxB,OAAO,IAAA,KAA8C;AACnD,IAAA,MAAM,SAAS,MAAM,aAAA,CAGlB,sBAAA,EAAwB,EAAE,MAAM,CAAA;AAEnC,IAAA,IAAI,CAAC,MAAA,EAAQ,KAAA,IAAS,CAAC,MAAA,CAAO,MAAM,OAAO,IAAA;AAC3C,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AACF;AAMO,IAAM,aAAA,GAAgBA,WAAA;AAAA,EAC3B,OAAO,SAAA,KAAsD;AAC3D,IAAA,MAAM,SAAS,MAAM,aAAA,CAGlB,yBAAA,EAA2B,EAAE,WAAW,CAAA;AAE3C,IAAA,IAAI,CAAC,MAAA,EAAQ,KAAA,IAAS,CAAC,MAAA,CAAO,SAAS,OAAO,IAAA;AAC9C,IAAA,OAAO,MAAA,CAAO,OAAA;AAAA,EAChB;AACF;AAgBO,IAAM,kBAAA,GAAqBA,WAAA;AAAA,EAChC,OACE,IAAA,KAMW;AACX,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,IAAI,CAAA;AAClC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,MAAM,GAAA,GAAkB,IAAA,CAAK,GAAA,IAAO,EAAC;AAErC,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,KAAA;AAAA,MACzB,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,QAAQ,GAAA,CAAI,OAAA,GAAU,EAAE,KAAA,EAAO,OAAM,GAAI,MAAA;AAAA,MACzC,SAAA,EAAW;AAAA,QACT,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,CAAK,KAAA;AAAA,QACzB,aAAa,GAAA,CAAI;AAAA;AACnB,KACF;AAAA,EACF;AACF","file":"chunk-JX3PO2MH.js","sourcesContent":["/**\n * @sonordev/site-kit/cms - Server-Only API Functions\n *\n * Fetches CMS page/section data from Portal API.\n * Uses the same secure API pattern as seo/server-api.ts — both delegate config\n * resolution + fetch/retry to the shared server-fetch primitive (single source\n * of truth — see ../server/server-fetch).\n */\n\n// React.cache is available in React 19+ / Next.js RSC.\n//\n// This MUST be a static ESM import, matching seo/api.ts, seo/server-api.ts,\n// llms/api.ts and slots/server-api.ts. A `require('react')` here compiled to\n// tsup's `__require` interop shim in the .mjs build, and Turbopack rejects that\n// at module evaluation with \"dynamic usage of require is not supported\" —\n// which broke the build of every site importing `@sonordev/site-kit/cms`.\nimport { cache } from 'react'\nimport 'server-only'\nimport { serverApiFetch } from '../server/server-fetch'\nimport type { CmsPageData, CmsSectionData, CmsPageSeo } from './types'\n\n// ============================================\n// Server-Only API\n// ============================================\n\nconst CMS_LOG_PREFIX = '@sonordev/site-kit/cms'\n\n/**\n * POST to the Portal public CMS API. Thin wrapper over the shared `serverApiFetch`\n * so config resolution (via requireServerApiConfig — throws if no API key is set)\n * and retry/backoff live in one place (see ../server/server-fetch). 60s revalidate:\n * CMS content changes more often than the 24h-default SEO metadata.\n */\nfunction secureApiPost<T>(\n  endpoint: string,\n  body: Record<string, unknown> = {},\n): Promise<T | null> {\n  return serverApiFetch<T>(endpoint, {\n    method: 'POST',\n    body,\n    revalidate: 60,\n    requireKey: true,\n    retry: true,\n    logPrefix: CMS_LOG_PREFIX,\n  })\n}\n\n// ============================================\n// Cached Data Fetchers\n// ============================================\n\n/**\n * Fetch a published CMS page by path — cached per request.\n * Returns the full page with all sections and their Portable Text content.\n * @server-only\n */\nexport const getCmsPage = cache(\n  async (path: string): Promise<CmsPageData | null> => {\n    const result = await secureApiPost<{\n      found: boolean\n      page: CmsPageData | null\n    }>('/api/public/cms/page', { path })\n\n    if (!result?.found || !result.page) return null\n    return result.page\n  },\n)\n\n/**\n * Fetch a single published CMS section by ID — cached per request.\n * @server-only\n */\nexport const getCmsSection = cache(\n  async (sectionId: string): Promise<CmsSectionData | null> => {\n    const result = await secureApiPost<{\n      found: boolean\n      section: CmsSectionData | null\n    }>('/api/public/cms/section', { sectionId })\n\n    if (!result?.found || !result.section) return null\n    return result.section\n  },\n)\n\n/**\n * Fetch CMS page and return Next.js Metadata object.\n * Use in generateMetadata() for CMS-managed pages.\n *\n * @example\n * ```ts\n * import { getCmsPageMetadata } from '@sonordev/site-kit/cms/server'\n *\n * export async function generateMetadata({ params }) {\n *   return getCmsPageMetadata(`/${params.slug}`)\n * }\n * ```\n * @server-only\n */\nexport const getCmsPageMetadata = cache(\n  async (\n    path: string,\n  ): Promise<{\n    title?: string\n    description?: string\n    robots?: { index: boolean }\n    openGraph?: { title?: string; description?: string }\n  } | null> => {\n    const page = await getCmsPage(path)\n    if (!page) return null\n\n    const seo: CmsPageSeo = page.seo || {}\n\n    return {\n      title: seo.title || page.title,\n      description: seo.description,\n      robots: seo.noindex ? { index: false } : undefined,\n      openGraph: {\n        title: seo.title || page.title,\n        description: seo.description,\n      },\n    }\n  },\n)\n"]}

package/dist/chunk-KHPJ3CEL.js

@@ -1,72 +0,0 @@
-'use strict';
-
-// src/forms/contract.ts
-var FORMS_HONEYPOT_CONTRACT_VERSION = 1;
-var DEFAULT_HONEYPOT_FIELD = "_sk_hp_url";
-var GENERIC_HONEYPOT_FIELDS = Object.freeze([
-  DEFAULT_HONEYPOT_FIELD,
-  "website",
-  "_hp_field",
-  "bot-field",
-  "bot_field"
-]);
-function resolveHoneypotFieldNames(opts) {
-  const names = /* @__PURE__ */ new Set();
-  if (!opts.enabled) return names;
-  const real = new Set(opts.realFieldSlugs ?? []);
-  for (const generic of GENERIC_HONEYPOT_FIELDS) {
-    if (!real.has(generic)) names.add(generic);
-  }
-  if (opts.formHoneypotField) names.add(opts.formHoneypotField);
-  return names;
-}
-function isTrapFilled(value) {
-  if (value == null) return false;
-  if (typeof value === "string") return value.trim() !== "";
-  if (typeof value === "boolean") return value;
-  if (typeof value === "number") return Number.isFinite(value) && value !== 0;
-  if (Array.isArray(value)) return value.length > 0;
-  return true;
-}
-function findTrippedTrap(data, fieldNames) {
-  for (const field of fieldNames) {
-    const value = data?.[field];
-    if (!isTrapFilled(value)) continue;
-    if (Array.isArray(value)) return { field, valueType: "array", length: value.length };
-    const valueType = typeof value;
-    return {
-      field,
-      valueType: valueType === "string" ? "string" : valueType,
-      length: typeof value === "string" ? value.length : null
-    };
-  }
-  return null;
-}
-function isHoneypotTriggered(data, fieldNames) {
-  return findTrippedTrap(data, fieldNames) !== null;
-}
-var HONEYPOT_CONFIG_JSON_SCHEMA = {
-  $schema: "http://json-schema.org/draft-07/schema#",
-  $id: "https://sonor.io/schemas/honeypot-config.v1.json",
-  title: "HoneypotConfig",
-  description: "The honeypot slice of a public managed-form config.",
-  type: "object",
-  properties: {
-    honeypot_enabled: { type: "boolean" },
-    honeypot_field: {
-      description: `Trap field name; defaults to "${DEFAULT_HONEYPOT_FIELD}" when unset.`,
-      type: "string"
-    }
-  },
-  additionalProperties: true
-};
-
-exports.DEFAULT_HONEYPOT_FIELD = DEFAULT_HONEYPOT_FIELD;
-exports.FORMS_HONEYPOT_CONTRACT_VERSION = FORMS_HONEYPOT_CONTRACT_VERSION;
-exports.GENERIC_HONEYPOT_FIELDS = GENERIC_HONEYPOT_FIELDS;
-exports.HONEYPOT_CONFIG_JSON_SCHEMA = HONEYPOT_CONFIG_JSON_SCHEMA;
-exports.findTrippedTrap = findTrippedTrap;
-exports.isHoneypotTriggered = isHoneypotTriggered;
-exports.resolveHoneypotFieldNames = resolveHoneypotFieldNames;
-//# sourceMappingURL=chunk-KHPJ3CEL.js.map
-//# sourceMappingURL=chunk-KHPJ3CEL.js.map

package/dist/chunk-KHPJ3CEL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/forms/contract.ts"],"names":[],"mappings":";;;AAkBO,IAAM,+BAAA,GAAkC;AAOxC,IAAM,sBAAA,GAAyB;AAO/B,IAAM,uBAAA,GAA6C,OAAO,MAAA,CAAO;AAAA,EACtE,sBAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,0BAA0B,IAAA,EAI1B;AACd,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,IAAI,CAAC,IAAA,CAAK,OAAA,EAAS,OAAO,KAAA;AAC1B,EAAA,MAAM,OAAO,IAAI,GAAA,CAAI,IAAA,CAAK,cAAA,IAAkB,EAAE,CAAA;AAC9C,EAAA,KAAA,MAAW,WAAW,uBAAA,EAAyB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,EAAG,KAAA,CAAM,IAAI,OAAO,CAAA;AAAA,EAC3C;AACA,EAAA,IAAI,IAAA,CAAK,iBAAA,EAAmB,KAAA,CAAM,GAAA,CAAI,KAAK,iBAAiB,CAAA;AAC5D,EAAA,OAAO,KAAA;AACT;AA0BA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA,CAAM,MAAK,KAAM,EAAA;AACvD,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,QAAA,CAAS,KAAK,KAAK,KAAA,KAAU,CAAA;AAC1E,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,OAAO,IAAA;AACT;AAUO,SAAS,eAAA,CACd,MACA,UAAA,EACoB;AACpB,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAC1B,IAAA,IAAI,CAAC,YAAA,CAAa,KAAK,CAAA,EAAG;AAC1B,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAO;AACnF,IAAA,MAAM,YAAY,OAAO,KAAA;AACzB,IAAA,OAAO;AAAA,MACL,KAAA;AAAA,MACA,SAAA,EAAW,SAAA,KAAc,QAAA,GAAW,QAAA,GAAW,SAAA;AAAA,MAC/C,MAAA,EAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,MAAM,MAAA,GAAS;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,mBAAA,CACd,MACA,UAAA,EACS;AACT,EAAA,OAAO,eAAA,CAAgB,IAAA,EAAM,UAAU,CAAA,KAAM,IAAA;AAC/C;AAMO,IAAM,2BAAA,GAA8B;AAAA,EACzC,OAAA,EAAS,yCAAA;AAAA,EACT,GAAA,EAAK,kDAAA;AAAA,EACL,KAAA,EAAO,gBAAA;AAAA,EACP,WAAA,EAAa,qDAAA;AAAA,EACb,IAAA,EAAM,QAAA;AAAA,EACN,UAAA,EAAY;AAAA,IACV,gBAAA,EAAkB,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,cAAA,EAAgB;AAAA,MACd,WAAA,EAAa,iCAAiC,sBAAsB,CAAA,aAAA,CAAA;AAAA,MACpE,IAAA,EAAM;AAAA;AACR,GACF;AAAA,EACA,oBAAA,EAAsB;AACxB","file":"chunk-KHPJ3CEL.js","sourcesContent":["/**\n * @sonordev/site-kit/forms/contract — managed-form honeypot policy (v1)\n *\n * Single source of truth for the honeypot trap-field naming + server-side\n * detection policy, shared by the client (site-kit emits the trap field) and\n * the server (sonor-api names the trap in the form config it returns AND\n * detects hits on intake). Same pattern as the other site-kit contracts:\n * sonor-api keeps a byte-identical inline mirror\n * (`src/modules/forms/honeypot-contract.ts`) guarded by the shared drift-test\n * vectors in `contract.test.ts`.\n *\n * The default field name (`_sk_hp_url`) is deliberately obscure: a common name\n * like \"website\" collides with real form fields and flags genuine submissions\n * as spam, so generic names are only trusted when they DON'T match a real\n * field of the form (see `resolveHoneypotFieldNames`).\n */\n\n/** Bump on breaking changes to the honeypot policy. */\nexport const FORMS_HONEYPOT_CONTRACT_VERSION = 1 as const\n\n/**\n * Default honeypot field name emitted by site-kit and used by the server as the\n * fallback trap name when a form has no explicitly configured `honeypot_field`.\n * Deliberately obscure to avoid colliding with real form fields.\n */\nexport const DEFAULT_HONEYPOT_FIELD = '_sk_hp_url'\n\n/**\n * Generic trap names the server also watches on intake — the canonical default\n * plus legacy names still emitted by older deployed forms. Each is only trusted\n * when it doesn't collide with a real configured field of the form.\n */\nexport const GENERIC_HONEYPOT_FIELDS: readonly string[] = Object.freeze([\n  DEFAULT_HONEYPOT_FIELD,\n  'website',\n  '_hp_field',\n  'bot-field',\n  'bot_field',\n])\n\n/**\n * Build the set of field names the server treats as honeypot traps for one form.\n * Generic names that collide with a real field slug are dropped (or every real\n * lead using that field would be flagged); the form's dedicated\n * `honeypot_field` is always honored. Returns an empty set when disabled.\n */\nexport function resolveHoneypotFieldNames(opts: {\n  enabled: boolean\n  formHoneypotField?: string | null\n  realFieldSlugs?: Iterable<string>\n}): Set<string> {\n  const names = new Set<string>()\n  if (!opts.enabled) return names\n  const real = new Set(opts.realFieldSlugs ?? [])\n  for (const generic of GENERIC_HONEYPOT_FIELDS) {\n    if (!real.has(generic)) names.add(generic)\n  }\n  if (opts.formHoneypotField) names.add(opts.formHoneypotField)\n  return names\n}\n\n/**\n * What a tripped trap looked like. Deliberately carries NO value — an\n * autofilled trap can hold the visitor's real name, URL, or email, and this\n * rides along into stored spam analysis. The field name is the diagnostic that\n * matters; type and length are enough to tell autofill from a bot.\n */\nexport interface HoneypotHit {\n  /** Which trap fired. Several are watched per form; only this one tripped. */\n  field: string\n  valueType: 'string' | 'number' | 'boolean' | 'object' | 'array'\n  /** Character length for strings, element count for arrays, else null. */\n  length: number | null\n}\n\n/**\n * Is this trap value a genuine fill?\n *\n * Absent, empty, and whitespace values are obviously not. Neither are the\n * \"unset\" primitives — `false` from an unchecked box and `0` from an untouched\n * number input serialize on every honest submission, and treating them as bot\n * evidence flags real people while catching nothing (a bot that fills a trap\n * fills it with something). Anything else counts: a bot spraying a form with\n * strings, structures, or numbers is exactly what the trap is for.\n */\nfunction isTrapFilled(value: unknown): boolean {\n  if (value == null) return false\n  if (typeof value === 'string') return value.trim() !== ''\n  if (typeof value === 'boolean') return value\n  if (typeof value === 'number') return Number.isFinite(value) && value !== 0\n  if (Array.isArray(value)) return value.length > 0\n  return true\n}\n\n/**\n * The first watched trap this submission actually filled, or null.\n *\n * Returns the NAME, not a boolean, because \"honeypot fired\" alone is\n * unfalsifiable after the fact: the trap values are stripped before storage, so\n * a bare flag left no way to tell a bot from a browser autofilling a hidden\n * field. Callers stamp the name into the spam reasons.\n */\nexport function findTrippedTrap(\n  data: Record<string, unknown> | null | undefined,\n  fieldNames: Iterable<string>,\n): HoneypotHit | null {\n  for (const field of fieldNames) {\n    const value = data?.[field]\n    if (!isTrapFilled(value)) continue\n    if (Array.isArray(value)) return { field, valueType: 'array', length: value.length }\n    const valueType = typeof value as HoneypotHit['valueType']\n    return {\n      field,\n      valueType: valueType === 'string' ? 'string' : valueType,\n      length: typeof value === 'string' ? value.length : null,\n    }\n  }\n  return null\n}\n\n/**\n * True when any watched trap field carries a real value — the marker of an\n * automated submission (real users never see or fill the trap).\n * Thin view over {@link findTrippedTrap}; one detection rule, two shapes.\n */\nexport function isHoneypotTriggered(\n  data: Record<string, unknown> | null | undefined,\n  fieldNames: Iterable<string>,\n): boolean {\n  return findTrippedTrap(data, fieldNames) !== null\n}\n\n/**\n * Agent-native contract: JSON Schema for the honeypot slice of the public form\n * config, so services and agents can validate it mechanically.\n */\nexport const HONEYPOT_CONFIG_JSON_SCHEMA = {\n  $schema: 'http://json-schema.org/draft-07/schema#',\n  $id: 'https://sonor.io/schemas/honeypot-config.v1.json',\n  title: 'HoneypotConfig',\n  description: 'The honeypot slice of a public managed-form config.',\n  type: 'object',\n  properties: {\n    honeypot_enabled: { type: 'boolean' },\n    honeypot_field: {\n      description: `Trap field name; defaults to \"${DEFAULT_HONEYPOT_FIELD}\" when unset.`,\n      type: 'string',\n    },\n  },\n  additionalProperties: true,\n} as const\n"]}

package/dist/chunk-KP5BFPGT.js

@@ -1,44 +0,0 @@
-'use strict';
-
-// src/proxy/securityHeaders.ts
-var DEFAULT_FRAME_ANCESTORS = [
-  "'self'",
-  "https://upforge.io",
-  "https://*.upforge.io",
-  "https://upforgelabs.com",
-  "https://*.upforgelabs.com"
-];
-function buildSecurityHeaders(config) {
-  if (config === false) return {};
-  const c = typeof config === "object" ? config : {};
-  const headers = {};
-  if (c.dnsPrefetchControl !== false) {
-    headers["X-DNS-Prefetch-Control"] = "on";
-  }
-  const frameAncestors = c.frameAncestors === false ? null : c.frameAncestors && c.frameAncestors.length > 0 ? c.frameAncestors : DEFAULT_FRAME_ANCESTORS;
-  if (frameAncestors) {
-    headers["Content-Security-Policy"] = `frame-ancestors ${frameAncestors.join(" ")}`;
-    if (c.frameOptions) {
-      headers["X-Frame-Options"] = c.frameOptions;
-    }
-  } else if (c.frameOptions !== false) {
-    headers["X-Frame-Options"] = c.frameOptions || "DENY";
-  }
-  if (c.contentTypeOptions !== false) {
-    headers["X-Content-Type-Options"] = "nosniff";
-  }
-  if (c.xssProtection !== false) {
-    headers["X-XSS-Protection"] = "1; mode=block";
-  }
-  headers["Referrer-Policy"] = c.referrerPolicy || "strict-origin-when-cross-origin";
-  headers["Permissions-Policy"] = c.permissionsPolicy || "camera=(), microphone=(), geolocation=()";
-  if (c.customHeaders) {
-    Object.assign(headers, c.customHeaders);
-  }
-  return headers;
-}
-
-exports.DEFAULT_FRAME_ANCESTORS = DEFAULT_FRAME_ANCESTORS;
-exports.buildSecurityHeaders = buildSecurityHeaders;
-//# sourceMappingURL=chunk-KP5BFPGT.js.map
-//# sourceMappingURL=chunk-KP5BFPGT.js.map

package/dist/chunk-KP5BFPGT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/proxy/securityHeaders.ts"],"names":[],"mappings":";;;AAmCO,IAAM,uBAAA,GAA0B;AAAA,EACrC,QAAA;AAAA,EACA,oBAAA;AAAA,EACA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF;AAiCO,SAAS,qBACd,MAAA,EACwB;AACxB,EAAA,IAAI,MAAA,KAAW,KAAA,EAAO,OAAO,EAAC;AAE9B,EAAA,MAAM,CAAA,GACJ,OAAO,MAAA,KAAW,QAAA,GAAW,SAAS,EAAC;AAEzC,EAAA,MAAM,UAAkC,EAAC;AAGzC,EAAA,IAAI,CAAA,CAAE,uBAAuB,KAAA,EAAO;AAClC,IAAA,OAAA,CAAQ,wBAAwB,CAAA,GAAI,IAAA;AAAA,EACtC;AAUA,EAAA,MAAM,cAAA,GACJ,CAAA,CAAE,cAAA,KAAmB,KAAA,GACjB,IAAA,GACA,CAAA,CAAE,cAAA,IAAkB,CAAA,CAAE,cAAA,CAAe,MAAA,GAAS,CAAA,GAC5C,CAAA,CAAE,cAAA,GACF,uBAAA;AAER,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAA,CAAQ,yBAAyB,CAAA,GAC/B,CAAA,gBAAA,EAAmB,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAE7C,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,OAAA,CAAQ,iBAAiB,IAAI,CAAA,CAAE,YAAA;AAAA,IACjC;AAAA,EACF,CAAA,MAAA,IAAW,CAAA,CAAE,YAAA,KAAiB,KAAA,EAAO;AACnC,IAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,CAAA,CAAE,YAAA,IAAgB,MAAA;AAAA,EACjD;AAGA,EAAA,IAAI,CAAA,CAAE,uBAAuB,KAAA,EAAO;AAClC,IAAA,OAAA,CAAQ,wBAAwB,CAAA,GAAI,SAAA;AAAA,EACtC;AAGA,EAAA,IAAI,CAAA,CAAE,kBAAkB,KAAA,EAAO;AAC7B,IAAA,OAAA,CAAQ,kBAAkB,CAAA,GAAI,eAAA;AAAA,EAChC;AAGA,EAAA,OAAA,CAAQ,iBAAiB,CAAA,GACvB,CAAA,CAAE,cAAA,IAAkB,iCAAA;AAGtB,EAAA,OAAA,CAAQ,oBAAoB,CAAA,GAC1B,CAAA,CAAE,iBAAA,IAAqB,0CAAA;AAGzB,EAAA,IAAI,EAAE,aAAA,EAAe;AACnB,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,CAAA,CAAE,aAAa,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,OAAA;AACT","file":"chunk-KP5BFPGT.js","sourcesContent":["/**\n * Default security headers applied by site-kit middleware.\n *\n * These match industry best practices and are the same headers\n * recommended by Next.js documentation. All are opt-out.\n */\n\n/**\n * Single source of truth for who may frame a site-kit site.\n *\n * Upforge showcases live client work inside iframes on its portfolio /\n * area pages, so every managed marketing site has to be embeddable from\n * the Upforge showcase origins. `X-Frame-Options` cannot express an\n * allowlist (`ALLOW-FROM` is dead and ignored by every current browser),\n * so the CSP `frame-ancestors` directive is the only way to say \"these\n * origins and nobody else\". Everything not listed here is still blocked.\n *\n * upforgelabs.com is a SEPARATE APEX DOMAIN, not a subdomain of\n * upforge.io, so `https://*.upforge.io` does not cover it and never did.\n * Labs case studies embed three live client frames each; without this\n * entry every one of them is refused with ERR_BLOCKED_BY_RESPONSE.\n *\n * upforgeapps.com is deliberately NOT here. It is a third Upforge apex,\n * but it only *links* to case studies (`upforge.io/work/<slug>`, see its\n * `lib/proof.ts`) and frames no client site anywhere. An origin earns a\n * place on this list by embedding, not by belonging to Upforge; adding a\n * non-embedder would hand out framing rights nothing needs. Re-check that\n * before adding it.\n *\n * Do NOT re-fork this list into individual sites' proxy/middleware/\n * next.config/netlify.toml/_headers — a fork is a copy that stops\n * tracking this one, which is exactly how upforgelabs.com came to be\n * missing from ten sites' allowlists at once. Add origins HERE and let\n * the fleet inherit them on its next deploy.\n */\nexport const DEFAULT_FRAME_ANCESTORS = [\n  \"'self'\",\n  'https://upforge.io',\n  'https://*.upforge.io',\n  'https://upforgelabs.com',\n  'https://*.upforgelabs.com',\n]\n\nexport interface SecurityHeadersConfig {\n  /** X-Frame-Options value. false to disable. Default: omitted when\n   * `frameAncestors` is active (the two conflict), otherwise 'DENY'. */\n  frameOptions?: 'DENY' | 'SAMEORIGIN' | false\n  /**\n   * Origins allowed to frame this site, emitted as a CSP `frame-ancestors`\n   * directive. Defaults to {@link DEFAULT_FRAME_ANCESTORS} ('self' + upforge.io)\n   * so Upforge can showcase the site. Pass an array to extend/replace, or\n   * `false` to opt out entirely and fall back to X-Frame-Options.\n   *\n   * Ignored if a `Content-Security-Policy` is supplied via `customHeaders` —\n   * that CSP wins, and must carry its own frame-ancestors directive.\n   */\n  frameAncestors?: string[] | false\n  /** X-Content-Type-Options: nosniff. Default: true */\n  contentTypeOptions?: boolean\n  /** X-XSS-Protection header. Default: true */\n  xssProtection?: boolean\n  /** Referrer-Policy value. Default: 'strict-origin-when-cross-origin' */\n  referrerPolicy?: string\n  /** Permissions-Policy value. Default restricts camera, microphone, geolocation */\n  permissionsPolicy?: string\n  /** X-DNS-Prefetch-Control. Default: true (on) */\n  dnsPrefetchControl?: boolean\n  /** Additional custom headers */\n  customHeaders?: Record<string, string>\n}\n\n/**\n * Build a flat Record of header name → value from the config.\n */\nexport function buildSecurityHeaders(\n  config?: SecurityHeadersConfig | boolean,\n): Record<string, string> {\n  if (config === false) return {}\n\n  const c: SecurityHeadersConfig =\n    typeof config === 'object' ? config : {}\n\n  const headers: Record<string, string> = {}\n\n  // X-DNS-Prefetch-Control\n  if (c.dnsPrefetchControl !== false) {\n    headers['X-DNS-Prefetch-Control'] = 'on'\n  }\n\n  // Framing policy — CSP frame-ancestors is the allowlist mechanism;\n  // X-Frame-Options is only a fallback for the opted-out case.\n  //\n  // These two headers MUST NOT both be emitted: X-Frame-Options has no\n  // allowlist form, so a stray `DENY`/`SAMEORIGIN` alongside a permissive\n  // frame-ancestors is honoured by some browsers and silently re-blocks the\n  // embed. So when frame-ancestors is active we drop XFO unless the site\n  // explicitly asked for a value.\n  const frameAncestors =\n    c.frameAncestors === false\n      ? null\n      : c.frameAncestors && c.frameAncestors.length > 0\n        ? c.frameAncestors\n        : DEFAULT_FRAME_ANCESTORS\n\n  if (frameAncestors) {\n    headers['Content-Security-Policy'] =\n      `frame-ancestors ${frameAncestors.join(' ')}`\n    // Only honour an explicitly-requested XFO value here.\n    if (c.frameOptions) {\n      headers['X-Frame-Options'] = c.frameOptions\n    }\n  } else if (c.frameOptions !== false) {\n    headers['X-Frame-Options'] = c.frameOptions || 'DENY'\n  }\n\n  // X-Content-Type-Options\n  if (c.contentTypeOptions !== false) {\n    headers['X-Content-Type-Options'] = 'nosniff'\n  }\n\n  // X-XSS-Protection\n  if (c.xssProtection !== false) {\n    headers['X-XSS-Protection'] = '1; mode=block'\n  }\n\n  // Referrer-Policy\n  headers['Referrer-Policy'] =\n    c.referrerPolicy || 'strict-origin-when-cross-origin'\n\n  // Permissions-Policy\n  headers['Permissions-Policy'] =\n    c.permissionsPolicy || 'camera=(), microphone=(), geolocation=()'\n\n  // Custom headers\n  if (c.customHeaders) {\n    Object.assign(headers, c.customHeaders)\n  }\n\n  return headers\n}\n"]}

package/dist/chunk-KR7ATPAN.js

@@ -1,52 +0,0 @@
-'use strict';
-
-// src/articles/processArticleHtml.ts
-function linkClassificationHost(siteUrl) {
-  try {
-    const base = siteUrl.startsWith("http") ? siteUrl : `https://${siteUrl}`;
-    const u = new URL(base);
-    return u.hostname.replace(/^www\./i, "").toLowerCase();
-  } catch {
-    return "";
-  }
-}
-var normalizeSiteHost = linkClassificationHost;
-function resolvePublicationSiteUrl(explicit) {
-  const fromProp = explicit?.trim();
-  if (fromProp) return fromProp;
-  const next = process.env.NEXT_PUBLIC_SITE_URL?.trim();
-  if (next) return next;
-  const site = process.env.SITE_URL?.trim();
-  if (site) return site;
-  const vercel = process.env.VERCEL_URL?.trim();
-  if (vercel) return vercel.startsWith("http") ? vercel : `https://${vercel}`;
-  return "";
-}
-function addExternalLinkTargets(html, siteUrl) {
-  if (!html || !siteUrl) return html;
-  const siteHost = linkClassificationHost(siteUrl);
-  if (!siteHost) return html;
-  return html.replace(/<a\b([^>]*)>/gi, (_full, attrs) => {
-    const hrefMatch = attrs.match(/\bhref\s*=\s*(["'])([^"']*)\1/i);
-    if (!hrefMatch) return `<a${attrs}>`;
-    const href = hrefMatch[2].trim();
-    if (!/^https?:\/\//i.test(href)) return `<a${attrs}>`;
-    try {
-      const url = new URL(href);
-      const linkHost = url.hostname.replace(/^www\./i, "").toLowerCase();
-      if (linkHost === siteHost) return `<a${attrs}>`;
-      if (/\btarget\s*=/i.test(attrs)) return `<a${attrs}>`;
-      const trimmed = attrs.trim();
-      return `<a ${trimmed} target="_blank" rel="noopener noreferrer">`;
-    } catch {
-      return `<a${attrs}>`;
-    }
-  });
-}
-
-exports.addExternalLinkTargets = addExternalLinkTargets;
-exports.linkClassificationHost = linkClassificationHost;
-exports.normalizeSiteHost = normalizeSiteHost;
-exports.resolvePublicationSiteUrl = resolvePublicationSiteUrl;
-//# sourceMappingURL=chunk-KR7ATPAN.js.map
-//# sourceMappingURL=chunk-KR7ATPAN.js.map

package/dist/chunk-KR7ATPAN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/articles/processArticleHtml.ts"],"names":[],"mappings":";;;AAgBO,SAAS,uBAAuB,OAAA,EAAyB;AAC9D,EAAA,IAAI;AACF,IAAA,MAAM,OAAO,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,OAAA,GAAU,WAAW,OAAO,CAAA,CAAA;AACtE,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,IAAI,CAAA;AACtB,IAAA,OAAO,EAAE,QAAA,CAAS,OAAA,CAAQ,SAAA,EAAW,EAAE,EAAE,WAAA,EAAY;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAA;AAAA,EACT;AACF;AAQO,IAAM,iBAAA,GAAoB;AAM1B,SAAS,0BAA0B,QAAA,EAA2B;AACnE,EAAA,MAAM,QAAA,GAAW,UAAU,IAAA,EAAK;AAChC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,oBAAA,EAAsB,IAAA,EAAK;AACpD,EAAA,IAAI,MAAM,OAAO,IAAA;AACjB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,QAAA,EAAU,IAAA,EAAK;AACxC,EAAA,IAAI,MAAM,OAAO,IAAA;AACjB,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,UAAA,EAAY,IAAA,EAAK;AAC5C,EAAA,IAAI,MAAA,SAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA,GAAI,MAAA,GAAS,WAAW,MAAM,CAAA,CAAA;AACzE,EAAA,OAAO,EAAA;AACT;AAOO,SAAS,sBAAA,CAAuB,MAAc,OAAA,EAAyB;AAC5E,EAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,OAAA,EAAS,OAAO,IAAA;AAC9B,EAAA,MAAM,QAAA,GAAW,uBAAuB,OAAO,CAAA;AAC/C,EAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,gBAAA,EAAkB,CAAC,OAAO,KAAA,KAAkB;AAC9D,IAAA,MAAM,SAAA,GAAY,KAAA,CAAM,KAAA,CAAM,gCAAgC,CAAA;AAC9D,IAAA,IAAI,CAAC,SAAA,EAAW,OAAO,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA,CAAA;AACjC,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA,EAAK;AAC/B,IAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,KAAK,KAAK,CAAA,CAAA,CAAA;AAElD,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAI,CAAA;AACxB,MAAA,MAAM,WAAW,GAAA,CAAI,QAAA,CAAS,QAAQ,SAAA,EAAW,EAAE,EAAE,WAAA,EAAY;AACjE,MAAA,IAAI,QAAA,KAAa,QAAA,EAAU,OAAO,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA,CAAA;AAC5C,MAAA,IAAI,gBAAgB,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,KAAK,KAAK,CAAA,CAAA,CAAA;AAClD,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,MAAA,OAAO,MAAM,OAAO,CAAA,2CAAA,CAAA;AAAA,IACtB,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAK,KAAK,CAAA,CAAA,CAAA;AAAA,IACnB;AAAA,EACF,CAAC,CAAA;AACH","file":"chunk-KR7ATPAN.js","sourcesContent":["/**\n * Post-process Portal/article HTML for safe, consistent link behavior.\n * Server-safe string transforms only (no DOM).\n */\n\n/**\n * The host `addExternalLinkTargets` compares links against to decide whether a\n * link is internal (same tab) or external (`target=\"_blank\"`). Lowercased,\n * leading `www.` stripped, so `www.example.com` and `example.com` count as the\n * same site; returns '' for anything unparseable.\n *\n * NOT the multi-site host normalizer. That is `normalizeSiteHost` in\n * `sites/normalize`, which keeps `www.` because `www.example.com` and\n * `example.com` can be different sub-sites of one Sonor project. This used to\n * share that name, so the two were easy to swap by accident.\n */\nexport function linkClassificationHost(siteUrl: string): string {\n  try {\n    const base = siteUrl.startsWith('http') ? siteUrl : `https://${siteUrl}`\n    const u = new URL(base)\n    return u.hostname.replace(/^www\\./i, '').toLowerCase()\n  } catch {\n    return ''\n  }\n}\n\n/**\n * @deprecated Renamed to {@link linkClassificationHost} (same behavior: strips\n * `www.`). It shared a name with the multi-site `normalizeSiteHost` from\n * `sites/normalize`, which keeps `www.`. Kept so existing imports from\n * `@sonordev/site-kit/articles` still work.\n */\nexport const normalizeSiteHost = linkClassificationHost\n\n/**\n * Resolve canonical site URL for link classification.\n * Pass `explicit` from props when env vars are not set (e.g. non-Vercel hosts).\n */\nexport function resolvePublicationSiteUrl(explicit?: string): string {\n  const fromProp = explicit?.trim()\n  if (fromProp) return fromProp\n  const next = process.env.NEXT_PUBLIC_SITE_URL?.trim()\n  if (next) return next\n  const site = process.env.SITE_URL?.trim()\n  if (site) return site\n  const vercel = process.env.VERCEL_URL?.trim()\n  if (vercel) return vercel.startsWith('http') ? vercel : `https://${vercel}`\n  return ''\n}\n\n/**\n * Add `target=\"_blank\"` and `rel=\"noopener noreferrer\"` to external http(s) links.\n * Same registrable host (with or without `www`) is treated as internal.\n * Skips anchors that already set `target`.\n */\nexport function addExternalLinkTargets(html: string, siteUrl: string): string {\n  if (!html || !siteUrl) return html\n  const siteHost = linkClassificationHost(siteUrl)\n  if (!siteHost) return html\n\n  return html.replace(/<a\\b([^>]*)>/gi, (_full, attrs: string) => {\n    const hrefMatch = attrs.match(/\\bhref\\s*=\\s*([\"'])([^\"']*)\\1/i)\n    if (!hrefMatch) return `<a${attrs}>`\n    const href = hrefMatch[2].trim()\n    if (!/^https?:\\/\\//i.test(href)) return `<a${attrs}>`\n\n    try {\n      const url = new URL(href)\n      const linkHost = url.hostname.replace(/^www\\./i, '').toLowerCase()\n      if (linkHost === siteHost) return `<a${attrs}>`\n      if (/\\btarget\\s*=/i.test(attrs)) return `<a${attrs}>`\n      const trimmed = attrs.trim()\n      return `<a ${trimmed} target=\"_blank\" rel=\"noopener noreferrer\">`\n    } catch {\n      return `<a${attrs}>`\n    }\n  })\n}\n"]}

package/dist/chunk-KZVSB5WE.mjs

@@ -1,21 +0,0 @@
-import { normalizeSiteHost } from './chunk-ZN4HBK5C.mjs';
-
-// src/sites/resolve.ts
-function resolveSiteHost(explicitSite) {
-  const envSiteUrl = typeof process !== "undefined" ? process.env.NEXT_PUBLIC_SITE_URL : void 0;
-  let resolved = explicitSite ?? "";
-  if (!resolved && envSiteUrl) {
-    try {
-      resolved = new URL(envSiteUrl).host;
-    } catch {
-    }
-  }
-  if (!resolved && typeof window !== "undefined") {
-    resolved = window.location.host;
-  }
-  return normalizeSiteHost(resolved) ?? "";
-}
-
-export { resolveSiteHost };
-//# sourceMappingURL=chunk-KZVSB5WE.mjs.map
-//# sourceMappingURL=chunk-KZVSB5WE.mjs.map

package/dist/chunk-KZVSB5WE.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sites/resolve.ts"],"names":[],"mappings":";;;AAkCO,SAAS,gBAAgB,YAAA,EAA+B;AAC7D,EAAA,MAAM,aACJ,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,IAAI,oBAAA,GAAuB,MAAA;AAEtE,EAAA,IAAI,WAAW,YAAA,IAAgB,EAAA;AAC/B,EAAA,IAAI,CAAC,YAAY,UAAA,EAAY;AAC3B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,IAAI,GAAA,CAAI,UAAU,CAAA,CAAE,IAAA;AAAA,IACjC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,IAAY,OAAO,MAAA,KAAW,WAAA,EAAa;AAC9C,IAAA,QAAA,GAAW,OAAO,QAAA,CAAS,IAAA;AAAA,EAC7B;AACA,EAAA,OAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,EAAA;AACxC","file":"chunk-KZVSB5WE.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites — resolveSiteHost (leaf module)\n *\n * SINGLE SOURCE OF TRUTH for \"which sub-site am I?\" — the multi-site `site`\n * dimension that lets one Sonor project host many domains (bd-aec.com plus 48\n * sibling domains; truepowersystems.com plus 16 state microsites).\n *\n * Precedence, per the platform site contract:\n *   explicit `site` > NEXT_PUBLIC_SITE_URL host > window.location.host\n *\n * Deliberately usable on BOTH sides. The browser half seeds\n * `window.__SITE_KIT_SITE__` (see `shared/publishCredential`); the build half\n * tags the sitemap sync, the llms.txt reads and every article read (see\n * `sitemap/index`, `llms/writeLLMsTxt`, and `./site-param`, which appends the\n * host to API requests) so a build describes only its OWN host. Server-side the\n * `window` branch simply never fires, which leaves the NEXT_PUBLIC_SITE_URL\n * host — the right source at build time.\n *\n * Do not re-fork this. Before it existed the build path sent no `site` at all,\n * so every site in a 49-domain network read whichever sibling's seo_pages row\n * the database happened to hand back for a shared path like `/` — bd-aec.com\n * shipped soqwriters.com's homepage copy in its llms.txt.\n *\n * Its own file, not `./contract`, for the same bundle reason as\n * `./normalize`: browser entries import this without dragging the contract's\n * JSON schema along.\n */\nimport { normalizeSiteHost } from './normalize'\n\n/**\n * Resolve the sub-site host. Always returns a string (possibly empty), already\n * normalized with the shared contract (lowercase host, no protocol/path/port)\n * so it matches exactly what the Sonor API stores.\n */\nexport function resolveSiteHost(explicitSite?: string): string {\n  const envSiteUrl =\n    typeof process !== 'undefined' ? process.env.NEXT_PUBLIC_SITE_URL : undefined\n\n  let resolved = explicitSite ?? ''\n  if (!resolved && envSiteUrl) {\n    try {\n      resolved = new URL(envSiteUrl).host\n    } catch {\n      /* malformed URL — fall through to client-side host */\n    }\n  }\n  if (!resolved && typeof window !== 'undefined') {\n    resolved = window.location.host\n  }\n  return normalizeSiteHost(resolved) ?? ''\n}\n"]}