@sonordev/site-kit 6.5.0 → 7.0.1

package/dist/chunk-OY3PDIB3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/fleet/heartbeat.ts","../src/fleet/FleetHeartbeat.tsx"],"names":["sanitizeFleetVersion","resolveAnalyticsTarget","buildFleetHeartbeatPayload","SITE_KIT_VERSION","sonorFetch","useDeferredActivation","useRef","useEffect"],"mappings":";;;;;;;;;;AAwBO,IAAM,oBAAA,GAAuB;AA4B7B,SAAS,iBAAA,GAAmC;AACjD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,CAAA,GAAI,MAAA;AAIV,EAAA,OAAOA,sCAAqB,CAAA,CAAE,yBAAA,IAA6B,CAAA,CAAE,IAAA,EAAM,WAAW,IAAI,CAAA;AACpF;AAOA,eAAsB,mBAAmB,IAAA,EAAmD;AAC1F,EAAA,MAAM,EAAE,MAAA,EAAQ,MAAA,EAAO,GAAI,IAAA;AAC3B,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,KAAA;AAC/B,EAAA,MAAM,MAAA,GAASC,wCAAuB,IAAI,CAAA;AAC1C,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AAEpB,EAAA,MAAM,UAAiCC,2CAAA,CAA2B;AAAA,IAChE,UAAA,EAAY,KAAK,UAAA,IAAcC,iCAAA;AAAA,IAC/B,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,QAAQ,IAAA,CAAK;AAAA,GACd,CAAA;AAED,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,MAAMC,2BAAA;AAAA,MAChB,CAAA,EAAG,OAAO,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAE,CAAC,GAAG,oBAAoB,CAAA,CAAA;AAAA,MAC1D;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC9B;AAAA,MACA,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA;AAAE,KACtC;AACA,IAAA,IAAI,KAAK,KAAA,EAAO;AAEd,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAM,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,EAAA,EAAK,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAA,IAAK,MAAM,CAAA,CAAA;AAAA,OACvG;AAAA,IACF;AACA,IAAA,OAAO,GAAA,CAAI,EAAA;AAAA,EACb,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,6CAA6C,GAAG,CAAA;AAC7E,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AC3EA,IAAM,iBAAA,GAAoB,cAAA;AAuBnB,SAAS,cAAA,CAAe;AAAA,EAC7B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,IAAA;AAAA,EACA,OAAA;AAAA,EACA,WAAA;AAAA,EACA,KAAA,GAAQ,IAAA;AAAA,EACR,cAAA,GAAiB,IAAA;AAAA,EACjB,KAAA,GAAQ,KAAA;AAAA,EACR,YAAA,GAAe,KAAA;AAAA,EACf,cAAA,GAAiB;AACnB,CAAA,EAAwB;AACtB,EAAA,MAAM,KAAA,GAAQC,uCAAsB,KAAK,CAAA;AACzC,EAAA,MAAM,OAAA,GAAUC,aAAO,KAAK,CAAA;AAE5B,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,KAAA,IAAS,OAAA,CAAQ,OAAA,EAAS;AAC/B,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEnC,IAAA,MAAM,CAAA,GAAI,MAAA;AAKV,IAAA,MAAM,MAAA,GAASN,wCAAuB,EAAE,MAAA,EAAQ,QAAQ,YAAA,EAAc,cAAA,EAAgB,OAAO,CAAA;AAC7F,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,KAAI,GAAI,MAAA;AAErC,IAAA,MAAM,eAAe,IAAA,IAAQ,CAAA,CAAE,iBAAA,IAAqB,MAAA,CAAO,SAAS,IAAA,IAAQ,EAAA;AAK5E,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,MAAM,KAAA,GAAQ,CAAA,EAAGE,iCAAgB,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AACjD,MAAA,IAAI;AACF,QAAA,IAAI,cAAA,CAAe,OAAA,CAAQ,iBAAiB,CAAA,KAAM,KAAA,EAAO;AACvD,UAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,UAAA;AAAA,QACF;AACA,QAAA,cAAA,CAAe,OAAA,CAAQ,mBAAmB,KAAK,CAAA;AAAA,MACjD,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAEA,IAAA,OAAA,CAAQ,OAAA,GAAU,IAAA;AAClB,IAAA,KAAK,kBAAA,CAAmB;AAAA,MACtB,MAAA,EAAQ,GAAA;AAAA,MACR,MAAA,EAAQ,GAAA;AAAA,MACR,IAAA,EAAM,YAAA;AAAA,MACN,OAAA;AAAA,MACA,WAAA,EAAa,eAAe,iBAAA,EAAkB;AAAA,MAC9C,MAAA,EAAQ,QAAA;AAAA,MACR,YAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,KAAA,EAAO,YAAA,EAAc,cAAc,CAAC,CAAA;AAE3G,EAAA,OAAO,IAAA;AACT","file":"chunk-OY3PDIB3.js","sourcesContent":["/**\n * @sonordev/site-kit/fleet — heartbeat sender (single source of truth for the POST)\n *\n * One place that turns fleet inputs into a validated payload and ships it to\n * `/api/public/fleet/heartbeat`. Used by BOTH the client component\n * (FleetHeartbeat) and any build-time caller, so the send path never forks.\n *\n * It routes through the shared analytics send gate and `sonorFetch`, which stamps\n * the x-sitekit-version header, attaches x-api-key, and honors the auth\n * circuit breaker — a site on a stale/canceled key will not spam the API.\n */\n\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport { sonorFetch } from '../shared/sonorFetch'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport {\n  buildFleetHeartbeatPayload,\n  sanitizeFleetVersion,\n  type FleetHeartbeatPayload,\n  type FleetHeartbeatSource,\n  type FleetModule,\n} from './contract'\n\n/** Canonical ingest path — resolved against the site's Sonor API origin. */\nexport const FLEET_HEARTBEAT_PATH = '/api/public/fleet/heartbeat'\n\nexport interface SendFleetHeartbeatOptions extends AnalyticsGateOptions {\n  /** Sonor API origin (e.g. https://api.sonor.io). Trailing slash tolerated. */\n  apiUrl: string\n  /** Project API key — scopes the request; the project is resolved server-side. */\n  apiKey: string\n  /** Client-observable active modules (validated/deduped by the contract). */\n  modules?: FleetModule[] | string[]\n  /** Normalized host for the multi-site sub-dimension (server re-normalizes). */\n  site?: string | null\n  /** Installed Next.js version, if the caller can resolve it. */\n  nextVersion?: string | null\n  /** 'client' (runtime boot) or 'build' (CI). Default 'client'. */\n  source?: FleetHeartbeatSource\n  /** Override the reported kit version. Defaults to the runtime SITE_KIT_VERSION. */\n  kitVersion?: string\n  /** Log one info line with the result. Never logs at error level. */\n  debug?: boolean\n}\n\n/**\n * Best-effort runtime detection of the host Next.js version. Unreliable by\n * design — Next does not expose its version consistently across app/pages\n * router — so it returns null unless a site injects `__SITE_KIT_NEXT_VERSION__`\n * or `window.next.version` is present. Build-time callers should pass\n * `nextVersion` explicitly (resolvable from `next/package.json`).\n */\nexport function detectNextVersion(): string | null {\n  if (typeof window === 'undefined') return null\n  const w = window as unknown as {\n    __SITE_KIT_NEXT_VERSION__?: string\n    next?: { version?: string }\n  }\n  return sanitizeFleetVersion(w.__SITE_KIT_NEXT_VERSION__ ?? w.next?.version ?? null)\n}\n\n/**\n * Fire one heartbeat. Fire-and-forget by contract: it never throws — a\n * telemetry POST must never break a visitor's page or a site's build. Returns\n * true only when the POST was accepted (2xx).\n */\nexport async function sendFleetHeartbeat(opts: SendFleetHeartbeatOptions): Promise<boolean> {\n  const { apiUrl, apiKey } = opts\n  if (!apiUrl || !apiKey) return false\n  const target = resolveAnalyticsTarget(opts)\n  if (!target) return false\n\n  const payload: FleetHeartbeatPayload = buildFleetHeartbeatPayload({\n    kitVersion: opts.kitVersion || SITE_KIT_VERSION,\n    nextVersion: opts.nextVersion,\n    modules: opts.modules,\n    site: opts.site,\n    source: opts.source,\n  })\n\n  try {\n    const res = await sonorFetch(\n      `${target.apiUrl.replace(/\\/$/, '')}${FLEET_HEARTBEAT_PATH}`,\n      {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify(payload),\n      },\n      { apiKey: target.apiKey, retries: 0 },\n    )\n    if (opts.debug) {\n      // info, never error: a visitor's console must stay clean (Lighthouse).\n      console.info(\n        `[Sonor fleet] heartbeat ${res.status} v${payload.kit_version} [${payload.modules.join(',') || 'none'}]`,\n      )\n    }\n    return res.ok\n  } catch (err) {\n    if (opts.debug) console.info('[Sonor fleet] heartbeat skipped (network)', err)\n    return false\n  }\n}\n","/**\n * @sonordev/site-kit/fleet — FleetHeartbeat\n *\n * A childless, effect-only client component that reports this site's build\n * fingerprint (kit version, Next.js version, active modules, host) to Sonor\n * exactly once per browser session. It exists so the platform can answer\n * \"which version / modules / key state is each site running\" without shelling\n * into every client repo.\n *\n * It is mounted as a deferred, CHILDLESS SIBLING — never a wrapper — by\n * SiteKitClientProviders, behind the same idle/first-interaction gate as\n * Analytics and Engage, so it never enters the critical hydration path (see\n * CLAUDE.md \"the page must server-render\"). It renders null and carries no\n * visitor data.\n */\n\n'use client'\n\nimport { useEffect, useRef } from 'react'\nimport { useDeferredActivation } from '../shared/defer'\nimport { SITE_KIT_VERSION } from '../shared/version'\nimport { detectNextVersion, sendFleetHeartbeat } from './heartbeat'\nimport { resolveAnalyticsTarget, type AnalyticsGateOptions } from '../shared/reporting-gate'\nimport type { FleetModule } from './contract'\n\n/** Session guard key — one heartbeat per session, re-sent when version/host changes. */\nconst SESSION_GUARD_KEY = '_sk_fleet_hb'\n\nexport interface FleetHeartbeatProps extends AnalyticsGateOptions {\n  /** Sonor API origin. Falls back to `window.__SITE_KIT_API_URL__` then api.sonor.io. */\n  apiUrl?: string\n  /** Project API key. Falls back to `window.__SITE_KIT_API_KEY__`. */\n  apiKey?: string\n  /** Host for the multi-site sub-dimension. Falls back to `__SITE_KIT_SITE__` then location.host. */\n  site?: string | null\n  /** Client-observable active modules (SiteKitClientProviders passes the enabled set). */\n  modules?: FleetModule[]\n  /** Installed Next.js version if known; otherwise best-effort runtime detection. */\n  nextVersion?: string | null\n  /**\n   * Self-defer to idle / first interaction. Default true so standalone use is\n   * safe. SiteKitClientProviders already gates the mount and passes false.\n   */\n  defer?: boolean\n  /** Send at most once per browser session per (version, host). Default true. */\n  oncePerSession?: boolean\n  debug?: boolean\n}\n\nexport function FleetHeartbeat({\n  apiUrl,\n  apiKey,\n  site,\n  modules,\n  nextVersion,\n  defer = true,\n  oncePerSession = true,\n  debug = false,\n  allowInFrame = false,\n  allowLocalhost = false,\n}: FleetHeartbeatProps) {\n  const ready = useDeferredActivation(defer)\n  const sentRef = useRef(false)\n\n  useEffect(() => {\n    if (!ready || sentRef.current) return\n    if (typeof window === 'undefined') return\n\n    const w = window as unknown as {\n      __SITE_KIT_API_URL__?: string\n      __SITE_KIT_API_KEY__?: string\n      __SITE_KIT_SITE__?: string\n    }\n    const target = resolveAnalyticsTarget({ apiUrl, apiKey, allowInFrame, allowLocalhost, debug })\n    if (!target) return // Gate before stamping session storage.\n    const { apiUrl: url, apiKey: key } = target\n\n    const resolvedSite = site ?? w.__SITE_KIT_SITE__ ?? window.location.host ?? ''\n\n    // Once-per-session-per-(version,host): keeps heartbeat volume to one POST\n    // per visitor session while still re-reporting after an upgrade or on a\n    // different sub-site. Storage-disabled browsers simply send once per load.\n    if (oncePerSession) {\n      const stamp = `${SITE_KIT_VERSION}:${resolvedSite}`\n      try {\n        if (sessionStorage.getItem(SESSION_GUARD_KEY) === stamp) {\n          sentRef.current = true\n          return\n        }\n        sessionStorage.setItem(SESSION_GUARD_KEY, stamp)\n      } catch {\n        /* storage unavailable — fall through and send this load */\n      }\n    }\n\n    sentRef.current = true\n    void sendFleetHeartbeat({\n      apiUrl: url,\n      apiKey: key,\n      site: resolvedSite,\n      modules,\n      nextVersion: nextVersion ?? detectNextVersion(),\n      source: 'client',\n      allowInFrame,\n      allowLocalhost,\n      debug,\n    })\n  }, [ready, apiUrl, apiKey, site, modules, nextVersion, oncePerSession, debug, allowInFrame, allowLocalhost])\n\n  return null\n}\n"]}

package/dist/chunk-P4Y75QSU.js

@@ -1,19 +0,0 @@
-'use strict';
-
-// src/shared/page-leave.ts
-function onPageLeave(onLeave, win = window, doc = document) {
-  const handleVisibilityChange = () => {
-    if (doc.visibilityState === "hidden") onLeave();
-  };
-  const handlePageHide = () => onLeave();
-  doc.addEventListener("visibilitychange", handleVisibilityChange);
-  win.addEventListener("pagehide", handlePageHide);
-  return () => {
-    doc.removeEventListener("visibilitychange", handleVisibilityChange);
-    win.removeEventListener("pagehide", handlePageHide);
-  };
-}
-
-exports.onPageLeave = onPageLeave;
-//# sourceMappingURL=chunk-P4Y75QSU.js.map
-//# sourceMappingURL=chunk-P4Y75QSU.js.map

package/dist/chunk-P4Y75QSU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/page-leave.ts"],"names":[],"mappings":";;;AAwBO,SAAS,WAAA,CACd,OAAA,EACA,GAAA,GAAsB,MAAA,EACtB,MAAqE,QAAA,EACzD;AACZ,EAAA,MAAM,yBAAyB,MAAM;AACnC,IAAA,IAAI,GAAA,CAAI,eAAA,KAAoB,QAAA,EAAU,OAAA,EAAQ;AAAA,EAChD,CAAA;AACA,EAAA,MAAM,cAAA,GAAiB,MAAM,OAAA,EAAQ;AAErC,EAAA,GAAA,CAAI,gBAAA,CAAiB,oBAAoB,sBAAsB,CAAA;AAC/D,EAAA,GAAA,CAAI,gBAAA,CAAiB,YAAY,cAAc,CAAA;AAE/C,EAAA,OAAO,MAAM;AACX,IAAA,GAAA,CAAI,mBAAA,CAAoB,oBAAoB,sBAAsB,CAAA;AAClE,IAAA,GAAA,CAAI,mBAAA,CAAoB,YAAY,cAAc,CAAA;AAAA,EACpD,CAAA;AACF","file":"chunk-P4Y75QSU.js","sourcesContent":["/**\n * @sonordev/site-kit - page-leave signal\n *\n * SINGLE SOURCE OF TRUTH for \"the visitor may be gone, send what you have\".\n * Used by form abandonment, Signal's behavior flush and scroll-depth reporting.\n * Do NOT hand-roll another pagehide/visibilitychange pair.\n *\n * Two events, because neither covers every leave on its own:\n * - `visibilitychange` to hidden: tab switch, app switch, screen lock, and the\n *   last thing a mobile browser reliably fires before it discards a\n *   backgrounded tab (it often never fires pagehide for those).\n * - `pagehide`: full navigation or close, including Safari versions that skip\n *   visibilitychange on navigation.\n *\n * Never `beforeunload`: iOS Safari doesn't fire it, and Firefox won't put a\n * page that listens for it in the back/forward cache.\n *\n * One leave usually fires both events, and a hidden tab can come back, so\n * `onLeave` can run several times per page. It must be idempotent.\n */\n\ntype ListenerTarget = Pick<EventTarget, 'addEventListener' | 'removeEventListener'>\n\n/** Call `onLeave` whenever the page is hidden or unloaded. Returns the cleanup. */\nexport function onPageLeave(\n  onLeave: () => void,\n  win: ListenerTarget = window,\n  doc: ListenerTarget & { visibilityState: DocumentVisibilityState } = document,\n): () => void {\n  const handleVisibilityChange = () => {\n    if (doc.visibilityState === 'hidden') onLeave()\n  }\n  const handlePageHide = () => onLeave()\n\n  doc.addEventListener('visibilitychange', handleVisibilityChange)\n  win.addEventListener('pagehide', handlePageHide)\n\n  return () => {\n    doc.removeEventListener('visibilitychange', handleVisibilityChange)\n    win.removeEventListener('pagehide', handlePageHide)\n  }\n}\n"]}

package/dist/chunk-PENNTSJE.mjs

@@ -1,99 +0,0 @@
-// src/llms/contract.ts
-var LLM_GEO_CONTRACT_VERSION = 1;
-var LLMS_PUBLIC_SUMMARY_MAX_LENGTH = 400;
-var LLMS_DISCLAIMER_MAX_LENGTH = 280;
-var MANAGED_LLM_SCHEMA_KNOWN_KEYS = /* @__PURE__ */ new Set([
-  "@context",
-  "@type",
-  "name",
-  "description",
-  "url",
-  "keywords",
-  "audience",
-  "about",
-  "mainEntity",
-  "isPartOf",
-  "speakable",
-  "additionalType"
-]);
-function sanitizeLlmsPublicSummary(raw) {
-  if (raw === null || raw === void 0) return null;
-  if (typeof raw !== "string") return null;
-  let s = raw.trim().replace(/\s+/g, " ");
-  s = s.replace(/[\[\]\r\n]/g, " ").replace(/\s+/g, " ").trim();
-  if (s.length > LLMS_PUBLIC_SUMMARY_MAX_LENGTH) {
-    s = `${s.slice(0, LLMS_PUBLIC_SUMMARY_MAX_LENGTH - 1).trimEnd()}\u2026`;
-  }
-  if (/\b[\w.%+-]+@[\w.-]+\.[A-Za-z]{2,}\b/.test(s)) return null;
-  if (/\b\+?\d[\d\s().-]{8,}\b/.test(s)) return null;
-  if (s.length < 8) return null;
-  return s;
-}
-function sanitizeLlmsDisclaimerLine(raw) {
-  if (raw === null || raw === void 0) return null;
-  if (typeof raw !== "string") return null;
-  let s = raw.trim().replace(/\s+/g, " ");
-  s = s.replace(/[\[\]\r\n]/g, " ").replace(/\s+/g, " ").trim();
-  if (s.length > LLMS_DISCLAIMER_MAX_LENGTH) {
-    s = `${s.slice(0, LLMS_DISCLAIMER_MAX_LENGTH - 1).trimEnd()}\u2026`;
-  }
-  if (/\b[\w.%+-]+@[\w.-]+\.[A-Za-z]{2,}\b/.test(s)) return null;
-  if (/\b\+?\d[\d\s().-]{8,}\b/.test(s)) return null;
-  if (s.length < 3) return null;
-  return s;
-}
-function sanitizePrimaryLanguageTag(raw) {
-  if (raw === null || raw === void 0) return null;
-  if (typeof raw !== "string") return null;
-  const s = raw.trim();
-  if (!/^[\w-]{2,20}$/.test(s)) return null;
-  return s;
-}
-function isEmittableReviewNode(node) {
-  const author = node.author;
-  if (typeof author === "string") return author.trim().length > 0;
-  if (Array.isArray(author)) {
-    return author.some((a) => isEmittableReviewNode({ author: a }));
-  }
-  if (author && typeof author === "object") {
-    const name = author.name;
-    return typeof name === "string" && name.trim().length > 0;
-  }
-  return false;
-}
-var DROP = /* @__PURE__ */ Symbol("drop-invalid-review");
-function stripInvalidReviewNodes(value) {
-  if (Array.isArray(value)) {
-    return value.map((v) => stripInvalidReviewNodes(v)).filter((v) => v !== DROP);
-  }
-  if (value && typeof value === "object") {
-    const src = value;
-    if (src["@type"] === "Review" && !isEmittableReviewNode(src)) return DROP;
-    const out = {};
-    for (const key of Object.keys(src)) {
-      const child = stripInvalidReviewNodes(src[key]);
-      if (child === DROP) continue;
-      out[key] = child;
-    }
-    return out;
-  }
-  return value;
-}
-function pickManagedLlmSchemaForJsonLd(schema) {
-  if (!schema || typeof schema !== "object") return null;
-  const out = {};
-  const omitFromJsonLd = /* @__PURE__ */ new Set(["llms_public_summary"]);
-  for (const key of Object.keys(schema)) {
-    if (omitFromJsonLd.has(key)) continue;
-    if (MANAGED_LLM_SCHEMA_KNOWN_KEYS.has(key)) {
-      const value = stripInvalidReviewNodes(schema[key]);
-      if (value === DROP) continue;
-      out[key] = value;
-    }
-  }
-  return Object.keys(out).length ? out : null;
-}
-
-export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag };
-//# sourceMappingURL=chunk-PENNTSJE.mjs.map
-//# sourceMappingURL=chunk-PENNTSJE.mjs.map

package/dist/chunk-PENNTSJE.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/llms/contract.ts"],"names":[],"mappings":";AAUO,IAAM,wBAAA,GAA2B;AAGjC,IAAM,8BAAA,GAAiC;AAGvC,IAAM,0BAAA,GAA6B;AAMnC,IAAM,6BAAA,uBAAoC,GAAA,CAAI;AAAA,EACnD,UAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,aAAA;AAAA,EACA,KAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAC;AAgBM,SAAS,0BAA0B,GAAA,EAA6B;AACrE,EAAA,IAAI,GAAA,KAAQ,IAAA,IAAQ,GAAA,KAAQ,MAAA,EAAW,OAAO,IAAA;AAC9C,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AACpC,EAAA,IAAI,IAAI,GAAA,CAAI,IAAA,EAAK,CAAE,OAAA,CAAQ,QAAQ,GAAG,CAAA;AAEtC,EAAA,CAAA,GAAI,CAAA,CAAE,QAAQ,aAAA,EAAe,GAAG,EAAE,OAAA,CAAQ,MAAA,EAAQ,GAAG,CAAA,CAAE,IAAA,EAAK;AAC5D,EAAA,IAAI,CAAA,CAAE,SAAS,8BAAA,EAAgC;AAC7C,IAAA,CAAA,GAAI,CAAA,EAAG,EAAE,KAAA,CAAM,CAAA,EAAG,iCAAiC,CAAC,CAAA,CAAE,SAAS,CAAA,MAAA,CAAA;AAAA,EACjE;AAEA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAC1D,EAAA,IAAI,yBAAA,CAA0B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,CAAE,MAAA,GAAS,CAAA,EAAG,OAAO,IAAA;AACzB,EAAA,OAAO,CAAA;AACT;AAKO,SAAS,2BAA2B,GAAA,EAA6B;AACtE,EAAA,IAAI,GAAA,KAAQ,IAAA,IAAQ,GAAA,KAAQ,MAAA,EAAW,OAAO,IAAA;AAC9C,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AACpC,EAAA,IAAI,IAAI,GAAA,CAAI,IAAA,EAAK,CAAE,OAAA,CAAQ,QAAQ,GAAG,CAAA;AACtC,EAAA,CAAA,GAAI,CAAA,CAAE,QAAQ,aAAA,EAAe,GAAG,EAAE,OAAA,CAAQ,MAAA,EAAQ,GAAG,CAAA,CAAE,IAAA,EAAK;AAC5D,EAAA,IAAI,CAAA,CAAE,SAAS,0BAAA,EAA4B;AACzC,IAAA,CAAA,GAAI,CAAA,EAAG,EAAE,KAAA,CAAM,CAAA,EAAG,6BAA6B,CAAC,CAAA,CAAE,SAAS,CAAA,MAAA,CAAA;AAAA,EAC7D;AACA,EAAA,IAAI,qCAAA,CAAsC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAC1D,EAAA,IAAI,yBAAA,CAA0B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,CAAE,MAAA,GAAS,CAAA,EAAG,OAAO,IAAA;AACzB,EAAA,OAAO,CAAA;AACT;AAGO,SAAS,2BAA2B,GAAA,EAA6B;AACtE,EAAA,IAAI,GAAA,KAAQ,IAAA,IAAQ,GAAA,KAAQ,MAAA,EAAW,OAAO,IAAA;AAC9C,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AACpC,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,EAAK;AACnB,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,CAAC,GAAG,OAAO,IAAA;AACrC,EAAA,OAAO,CAAA;AACT;AAaA,SAAS,sBAAsB,IAAA,EAAwC;AACrE,EAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,SAAiB,MAAA,CAAO,IAAA,GAAO,MAAA,GAAS,CAAA;AAC9D,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,IAAA,OAAO,MAAA,CAAO,KAAK,CAAC,CAAA,KAAM,sBAAsB,EAAE,MAAA,EAAQ,CAAA,EAAG,CAAC,CAAA;AAAA,EAChE;AACA,EAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACxC,IAAA,MAAM,OAAQ,MAAA,CAAmC,IAAA;AACjD,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,GAAO,MAAA,GAAS,CAAA;AAAA,EAC1D;AACA,EAAA,OAAO,KAAA;AACT;AAQA,IAAM,IAAA,0BAAc,qBAAqB,CAAA;AAEzC,SAAS,wBAAwB,KAAA,EAAuC;AACtE,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,KAAA,CACJ,GAAA,CAAI,CAAC,CAAA,KAAM,uBAAA,CAAwB,CAAC,CAAC,CAAA,CACrC,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,IAAI,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACtC,IAAA,MAAM,GAAA,GAAM,KAAA;AACZ,IAAA,IAAI,GAAA,CAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAC,qBAAA,CAAsB,GAAG,GAAG,OAAO,IAAA;AACrE,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,MAAA,MAAM,KAAA,GAAQ,uBAAA,CAAwB,GAAA,CAAI,GAAG,CAAC,CAAA;AAC9C,MAAA,IAAI,UAAU,IAAA,EAAM;AACpB,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,IACb;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,8BACd,MAAA,EACgC;AAChC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,MAAM,cAAA,mBAAiB,IAAI,GAAA,CAAI,CAAC,qBAAqB,CAAC,CAAA;AACtD,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,EAAG;AACrC,IAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC7B,IAAA,IAAI,6BAAA,CAA8B,GAAA,CAAI,GAAG,CAAA,EAAG;AAC1C,MAAA,MAAM,KAAA,GAAQ,uBAAA,CAAwB,MAAA,CAAO,GAAG,CAAC,CAAA;AACjD,MAAA,IAAI,UAAU,IAAA,EAAM;AACpB,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,IACb;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,SAAS,GAAA,GAAM,IAAA;AACzC","file":"chunk-PENNTSJE.mjs","sourcesContent":["/**\n * GEO / AEO contract — shared shape for Sonor API, Signal API, and site-kit.\n * Bump LLM_GEO_CONTRACT_VERSION when making breaking changes to public payloads.\n *\n * Server code (Nest) should import from `@sonordev/site-kit/llms/contract` only.\n *\n * @see LLM_GEO_CONTRACT.md in this folder\n */\n\n/** Increment when public LLMs payload shape changes incompatibly. */\nexport const LLM_GEO_CONTRACT_VERSION = 1 as const\n\n/** Max length for llms_public_summary (plain text, single line in llms.txt link notes). */\nexport const LLMS_PUBLIC_SUMMARY_MAX_LENGTH = 400\n\n/** Max length for optional llms.txt blockquote disclaimer line. */\nexport const LLMS_DISCLAIMER_MAX_LENGTH = 280\n\n/**\n * Optional keys we allow inside managed_llm_schema JSON from Portal.\n * Values outside this set should not be relied on by consumers; strip unknown keys when emitting JSON-LD.\n */\nexport const MANAGED_LLM_SCHEMA_KNOWN_KEYS = new Set([\n  '@context',\n  '@type',\n  'name',\n  'description',\n  'url',\n  'keywords',\n  'audience',\n  'about',\n  'mainEntity',\n  'isPartOf',\n  'speakable',\n  'additionalType',\n])\n\nexport interface LLMsPayloadMeta {\n  /** Contract version for this payload (matches LLM_GEO_CONTRACT_VERSION when current). */\n  contract_version: number\n  /** ISO 8601 — best-effort freshness for the project’s SEO data. */\n  last_updated?: string | null\n  /** BCP 47 tag for primary public content (e.g. from project settings). */\n  primary_language?: string | null\n  /** Optional single-line, public-safe note in the llms.txt blockquote (e.g. scope / not legal advice). */\n  llms_disclaimer?: string | null\n}\n\n/**\n * Public-safe summary for llms.txt `[title](url): notes` — never CRM-only or internal copy.\n */\nexport function sanitizeLlmsPublicSummary(raw: unknown): string | null {\n  if (raw === null || raw === undefined) return null\n  if (typeof raw !== 'string') return null\n  let s = raw.trim().replace(/\\s+/g, ' ')\n  // Avoid breaking markdown list lines / JSON-LD leakage\n  s = s.replace(/[\\[\\]\\r\\n]/g, ' ').replace(/\\s+/g, ' ').trim()\n  if (s.length > LLMS_PUBLIC_SUMMARY_MAX_LENGTH) {\n    s = `${s.slice(0, LLMS_PUBLIC_SUMMARY_MAX_LENGTH - 1).trimEnd()}…`\n  }\n  // Drop obvious email / tel patterns (PII guardrail — not exhaustive)\n  if (/\\b[\\w.%+-]+@[\\w.-]+\\.[A-Za-z]{2,}\\b/.test(s)) return null\n  if (/\\b\\+?\\d[\\d\\s().-]{8,}\\b/.test(s)) return null\n  if (s.length < 8) return null\n  return s\n}\n\n/**\n * Single line for llms.txt blockquote disclaimer — shorter min length than link notes.\n */\nexport function sanitizeLlmsDisclaimerLine(raw: unknown): string | null {\n  if (raw === null || raw === undefined) return null\n  if (typeof raw !== 'string') return null\n  let s = raw.trim().replace(/\\s+/g, ' ')\n  s = s.replace(/[\\[\\]\\r\\n]/g, ' ').replace(/\\s+/g, ' ').trim()\n  if (s.length > LLMS_DISCLAIMER_MAX_LENGTH) {\n    s = `${s.slice(0, LLMS_DISCLAIMER_MAX_LENGTH - 1).trimEnd()}…`\n  }\n  if (/\\b[\\w.%+-]+@[\\w.-]+\\.[A-Za-z]{2,}\\b/.test(s)) return null\n  if (/\\b\\+?\\d[\\d\\s().-]{8,}\\b/.test(s)) return null\n  if (s.length < 3) return null\n  return s\n}\n\n/** Normalize BCP 47 tag for display (no quotes). */\nexport function sanitizePrimaryLanguageTag(raw: unknown): string | null {\n  if (raw === null || raw === undefined) return null\n  if (typeof raw !== 'string') return null\n  const s = raw.trim()\n  if (!/^[\\w-]{2,20}$/.test(s)) return null\n  return s\n}\n\n/**\n * Google requires `author` on every Review node and treats its absence as a\n * CRITICAL error that suppresses review rich results for the whole page.\n * Generated schema has shipped Review nodes carrying only `reviewBody` and\n * `itemReviewed` — editorial prose about a client, not an attributed review —\n * so they are invalid markup AND self-serving-review-policy risk.\n *\n * Single source of truth for \"is this Review node safe to emit as JSON-LD\".\n * An author must resolve to a non-empty name; a bare `{\"@type\":\"Review\"}` and\n * `author: {}` both fail.\n */\nfunction isEmittableReviewNode(node: Record<string, unknown>): boolean {\n  const author = node.author\n  if (typeof author === 'string') return author.trim().length > 0\n  if (Array.isArray(author)) {\n    return author.some((a) => isEmittableReviewNode({ author: a }))\n  }\n  if (author && typeof author === 'object') {\n    const name = (author as Record<string, unknown>).name\n    return typeof name === 'string' && name.trim().length > 0\n  }\n  return false\n}\n\n/**\n * Recursively drop Review nodes that cannot be emitted (see above), wherever\n * they sit: array entry, object-valued key, or the value handed in. Returns\n * DROP for a node the caller must remove; everything else is passed through\n * structurally unchanged.\n */\nconst DROP = Symbol('drop-invalid-review')\n\nfunction stripInvalidReviewNodes(value: unknown): unknown | typeof DROP {\n  if (Array.isArray(value)) {\n    return value\n      .map((v) => stripInvalidReviewNodes(v))\n      .filter((v) => v !== DROP)\n  }\n  if (value && typeof value === 'object') {\n    const src = value as Record<string, unknown>\n    if (src['@type'] === 'Review' && !isEmittableReviewNode(src)) return DROP\n    const out: Record<string, unknown> = {}\n    for (const key of Object.keys(src)) {\n      const child = stripInvalidReviewNodes(src[key])\n      if (child === DROP) continue\n      out[key] = child\n    }\n    return out\n  }\n  return value\n}\n\n/** Pick JSON-LD-safe subset of managed_llm_schema for script injection. */\nexport function pickManagedLlmSchemaForJsonLd(\n  schema: Record<string, unknown> | null | undefined,\n): Record<string, unknown> | null {\n  if (!schema || typeof schema !== 'object') return null\n  const out: Record<string, unknown> = {}\n  const omitFromJsonLd = new Set(['llms_public_summary'])\n  for (const key of Object.keys(schema)) {\n    if (omitFromJsonLd.has(key)) continue\n    if (MANAGED_LLM_SCHEMA_KNOWN_KEYS.has(key)) {\n      const value = stripInvalidReviewNodes(schema[key])\n      if (value === DROP) continue\n      out[key] = value\n    }\n  }\n  return Object.keys(out).length ? out : null\n}\n"]}