@sonordev/site-kit 6.5.0 → 7.0.1

package/dist/chunk-Y2CP5J6Q.js

@@ -1,116 +0,0 @@
-'use strict';
-
-var fs2 = require('fs');
-var path = require('path');
-
-function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
-
-var fs2__default = /*#__PURE__*/_interopDefault(fs2);
-var path__default = /*#__PURE__*/_interopDefault(path);
-
-// src/sitemap/discover.ts
-var NEXT_APP_DIRS = ["app", path__default.default.join("src", "app")];
-var NEXT_SOURCE_EXTENSIONS = ["tsx", "ts", "jsx", "js"];
-var NEXT_PROXY_FILES = ["proxy.ts", "proxy.js", "src/proxy.ts", "src/proxy.js"];
-var NEXT_MIDDLEWARE_FILES = ["middleware.ts", "middleware.js", "src/middleware.ts", "src/middleware.js"];
-var NEXT_CONFIG_FILES = ["next.config.js", "next.config.mjs", "next.config.ts", "next.config.mts"];
-function safeExists(p) {
-  try {
-    return fs2__default.default.existsSync(p);
-  } catch {
-    return false;
-  }
-}
-function findConventionFile(dir, basename) {
-  for (const ext of NEXT_SOURCE_EXTENSIONS) {
-    const file = path__default.default.join(dir, `${basename}.${ext}`);
-    if (safeExists(file)) return file;
-  }
-  return null;
-}
-function hasPageFile(dir) {
-  return findConventionFile(dir, "page") !== null;
-}
-function findRootLayout(cwd) {
-  for (const rel of NEXT_APP_DIRS) {
-    const found = findConventionFile(path__default.default.join(cwd, rel), "layout");
-    if (found) return found;
-  }
-  return null;
-}
-function findNextConfig(cwd) {
-  return NEXT_CONFIG_FILES.find((rel) => safeExists(path__default.default.join(cwd, rel))) ?? null;
-}
-function findProxyFiles(cwd) {
-  return [...NEXT_PROXY_FILES, ...NEXT_MIDDLEWARE_FILES].filter((rel) => safeExists(path__default.default.join(cwd, rel)));
-}
-
-// src/sitemap/discover.ts
-var SITEMAP_ROUTE_EXTENSIONS = ["ts", "tsx", "js", "jsx", "mjs"];
-function findAppDirForDiscovery(cwd = process.cwd()) {
-  for (const candidate of NEXT_APP_DIRS) {
-    const abs = path__default.default.join(cwd, candidate);
-    if (fs2__default.default.existsSync(abs)) return abs;
-  }
-  return null;
-}
-function findSitemapRoute(cwd = process.cwd()) {
-  for (const dir of NEXT_APP_DIRS) {
-    for (const ext of SITEMAP_ROUTE_EXTENSIONS) {
-      const rel = path__default.default.join(dir, `sitemap.${ext}`);
-      if (fs2__default.default.existsSync(path__default.default.join(cwd, rel))) return rel;
-    }
-  }
-  return null;
-}
-function discoverNextJsRoutes(appDir, basePath = "") {
-  const entries = [];
-  const items = fs2__default.default.readdirSync(appDir, { withFileTypes: true });
-  for (const item of items) {
-    if (item.name.startsWith("_") || item.name.startsWith(".")) continue;
-    if (item.name === "api") continue;
-    if (item.name === "node_modules") continue;
-    const itemPath = path__default.default.join(appDir, item.name);
-    if (item.isDirectory()) {
-      const hasPage = hasPageFile(itemPath);
-      const isRouteGroup = item.name.startsWith("(") && item.name.endsWith(")");
-      const isDynamic = item.name.startsWith("[") && item.name.endsWith("]");
-      let routePath = basePath;
-      if (!isRouteGroup && !isDynamic) {
-        routePath = `${basePath}/${item.name}`;
-      }
-      if (hasPage && !isDynamic) {
-        const priority = routePath === "" ? 1 : 0.8;
-        entries.push({ path: routePath || "/", priority });
-      }
-      if (!isDynamic) {
-        const subEntries = discoverNextJsRoutes(
-          itemPath,
-          isRouteGroup ? basePath : routePath
-        );
-        entries.push(...subEntries);
-      }
-    }
-  }
-  if (basePath === "") {
-    if (hasPageFile(appDir)) {
-      entries.unshift({ path: "/", priority: 1 });
-    }
-  }
-  return entries;
-}
-
-exports.NEXT_APP_DIRS = NEXT_APP_DIRS;
-exports.NEXT_MIDDLEWARE_FILES = NEXT_MIDDLEWARE_FILES;
-exports.NEXT_PROXY_FILES = NEXT_PROXY_FILES;
-exports.NEXT_SOURCE_EXTENSIONS = NEXT_SOURCE_EXTENSIONS;
-exports.discoverNextJsRoutes = discoverNextJsRoutes;
-exports.findAppDirForDiscovery = findAppDirForDiscovery;
-exports.findConventionFile = findConventionFile;
-exports.findNextConfig = findNextConfig;
-exports.findProxyFiles = findProxyFiles;
-exports.findRootLayout = findRootLayout;
-exports.findSitemapRoute = findSitemapRoute;
-exports.hasPageFile = hasPageFile;
-//# sourceMappingURL=chunk-Y2CP5J6Q.js.map
-//# sourceMappingURL=chunk-Y2CP5J6Q.js.map

package/dist/chunk-Y2CP5J6Q.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/next-files.ts","../src/sitemap/discover.ts"],"names":["path","fs"],"mappings":";;;;;;;;;;;AAiBO,IAAM,gBAAgB,CAAC,KAAA,EAAOA,sBAAK,IAAA,CAAK,KAAA,EAAO,KAAK,CAAC;AAMrD,IAAM,sBAAA,GAAyB,CAAC,KAAA,EAAO,IAAA,EAAM,OAAO,IAAI;AAMxD,IAAM,gBAAA,GAAmB,CAAC,UAAA,EAAY,UAAA,EAAY,gBAAgB,cAAc;AAGhF,IAAM,qBAAA,GAAwB,CAAC,eAAA,EAAiB,eAAA,EAAiB,qBAAqB,mBAAmB;AAMzG,IAAM,iBAAA,GAAoB,CAAC,gBAAA,EAAkB,iBAAA,EAAmB,kBAAkB,iBAAiB,CAAA;AAE1G,SAAS,WAAW,CAAA,EAAoB;AACtC,EAAA,IAAI;AACF,IAAA,OAAOC,oBAAA,CAAG,WAAW,CAAC,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,SAAS,kBAAA,CAAmB,KAAa,QAAA,EAAiC;AAC/E,EAAA,KAAA,MAAW,OAAO,sBAAA,EAAwB;AACxC,IAAA,MAAM,IAAA,GAAOD,sBAAK,IAAA,CAAK,GAAA,EAAK,GAAG,QAAQ,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AAChD,IAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,IAAA;AAAA,EAC/B;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,YAAY,GAAA,EAAsB;AAChD,EAAA,OAAO,kBAAA,CAAmB,GAAA,EAAK,MAAM,CAAA,KAAM,IAAA;AAC7C;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,IAAA,MAAM,QAAQ,kBAAA,CAAmBA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,GAAG,QAAQ,CAAA;AAC9D,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,eAAe,GAAA,EAA4B;AACzD,EAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,KAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA,IAAK,IAAA;AAC3E;AAGO,SAAS,eAAe,GAAA,EAAuB;AACpD,EAAA,OAAO,CAAC,GAAG,gBAAA,EAAkB,GAAG,qBAAqB,CAAA,CAAE,MAAA,CAAO,CAAA,GAAA,KAAO,UAAA,CAAWA,qBAAA,CAAK,IAAA,CAAK,GAAA,EAAK,GAAG,CAAC,CAAC,CAAA;AACtG;;;AC9CA,IAAM,2BAA2B,CAAC,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAM1D,SAAS,sBAAA,CAAuB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AACjF,EAAA,KAAA,MAAW,aAAa,aAAA,EAAoB;AAC1C,IAAA,MAAM,GAAA,GAAMA,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACpC,IAAA,IAAIC,oBAAAA,CAAG,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,GAAA;AAAA,EACjC;AACA,EAAA,OAAO,IAAA;AACT;AAYO,SAAS,gBAAA,CAAiB,GAAA,GAAc,OAAA,CAAQ,GAAA,EAAI,EAAkB;AAC3E,EAAA,KAAA,MAAW,OAAO,aAAA,EAAoB;AACpC,IAAA,KAAA,MAAW,OAAO,wBAAA,EAA0B;AAC1C,MAAA,MAAM,MAAMD,qBAAAA,CAAK,IAAA,CAAK,GAAA,EAAK,CAAA,QAAA,EAAW,GAAG,CAAA,CAAE,CAAA;AAC3C,MAAA,IAAIC,oBAAAA,CAAG,WAAWD,qBAAAA,CAAK,IAAA,CAAK,KAAK,GAAG,CAAC,GAAG,OAAO,GAAA;AAAA,IACjD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AASO,SAAS,oBAAA,CACd,MAAA,EACA,QAAA,GAAmB,EAAA,EACwB;AAC3C,EAAA,MAAM,UAAqD,EAAC;AAE5D,EAAA,MAAM,QAAQC,oBAAAA,CAAG,WAAA,CAAY,QAAQ,EAAE,aAAA,EAAe,MAAM,CAAA;AAE5D,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,IAAA,CAAK,KAAK,UAAA,CAAW,GAAG,KAAK,IAAA,CAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAC5D,IAAA,IAAI,IAAA,CAAK,SAAS,KAAA,EAAO;AACzB,IAAA,IAAI,IAAA,CAAK,SAAS,cAAA,EAAgB;AAElC,IAAA,MAAM,QAAA,GAAWD,qBAAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,KAAK,IAAI,CAAA;AAE5C,IAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,MAAA,MAAM,OAAA,GAAU,YAAY,QAAQ,CAAA;AAEpC,MAAA,MAAM,YAAA,GAAe,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AACxE,MAAA,MAAM,SAAA,GAAY,KAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA;AAErE,MAAA,IAAI,SAAA,GAAY,QAAA;AAChB,MAAA,IAAI,CAAC,YAAA,IAAgB,CAAC,SAAA,EAAW;AAC/B,QAAA,SAAA,GAAY,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,MACtC;AAEA,MAAA,IAAI,OAAA,IAAW,CAAC,SAAA,EAAW;AACzB,QAAA,MAAM,QAAA,GAAW,SAAA,KAAc,EAAA,GAAK,CAAA,GAAM,GAAA;AAC1C,QAAA,OAAA,CAAQ,KAAK,EAAE,IAAA,EAAM,SAAA,IAAa,GAAA,EAAK,UAAU,CAAA;AAAA,MACnD;AAEA,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,UAAA,GAAa,oBAAA;AAAA,UACjB,QAAA;AAAA,UACA,eAAe,QAAA,GAAW;AAAA,SAC5B;AACA,QAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,UAAU,CAAA;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,aAAa,EAAA,EAAI;AACnB,IAAA,IAAI,WAAA,CAAY,MAAM,CAAA,EAAG;AACvB,MAAA,OAAA,CAAQ,QAAQ,EAAE,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,GAAK,CAAA;AAAA,IAC9C;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT","file":"chunk-Y2CP5J6Q.js","sourcesContent":["/**\n * @sonordev/site-kit — where a Next.js project keeps its convention files.\n *\n * SINGLE SOURCE OF TRUTH for \"find the root layout / a page / the proxy\". Each\n * CLI check used to carry its own candidate list, and the lists drifted: the OG\n * wiring rule only looked for `app/layout.tsx`, so `doctor` told a site whose\n * root layout is `app/layout.jsx` (heinrich-law-nextjs, 2026-09-14) that it had\n * no layout at all. `geo` knew about `.jsx` but not `src/app`, and none of them\n * knew about `proxy.ts`. Route every lookup through here; never re-fork a list.\n *\n * Node-only (fs/path): never import from browser or client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n\n/** App-directory candidates, in Next's resolution order (`app/` wins over `src/app/`). */\nexport const NEXT_APP_DIRS = ['app', path.join('src', 'app')]\n\n/**\n * Extensions Next resolves for convention files (`layout`, `page`, `route`,\n * `opengraph-image`) under the default `pageExtensions`.\n */\nexport const NEXT_SOURCE_EXTENSIONS = ['tsx', 'ts', 'jsx', 'js']\n\n/**\n * Next 16 Proxy files. The proxy lives at the project root, or in `src/` when\n * the app directory does, beside `src/app`.\n */\nexport const NEXT_PROXY_FILES = ['proxy.ts', 'proxy.js', 'src/proxy.ts', 'src/proxy.js']\n\n/** The pre-16 name for the same file. Still builds; deprecated. */\nexport const NEXT_MIDDLEWARE_FILES = ['middleware.ts', 'middleware.js', 'src/middleware.ts', 'src/middleware.js']\n\n/**\n * next.config candidates in Next's own resolution order (`CONFIG_FILES` in\n * next/dist/shared/lib/constants). Next reads the first one present.\n */\nexport const NEXT_CONFIG_FILES = ['next.config.js', 'next.config.mjs', 'next.config.ts', 'next.config.mts']\n\nfunction safeExists(p: string): boolean {\n  try {\n    return fs.existsSync(p)\n  } catch {\n    return false\n  }\n}\n\n/** `dir/<basename>.<ext>` for the first extension that exists, or null. */\nexport function findConventionFile(dir: string, basename: string): string | null {\n  for (const ext of NEXT_SOURCE_EXTENSIONS) {\n    const file = path.join(dir, `${basename}.${ext}`)\n    if (safeExists(file)) return file\n  }\n  return null\n}\n\n/** True when `dir` holds a `page.{tsx,ts,jsx,js}`. */\nexport function hasPageFile(dir: string): boolean {\n  return findConventionFile(dir, 'page') !== null\n}\n\n/** Absolute path of the root layout (`app/layout.*`, then `src/app/layout.*`), or null. */\nexport function findRootLayout(cwd: string): string | null {\n  for (const rel of NEXT_APP_DIRS) {\n    const found = findConventionFile(path.join(cwd, rel), 'layout')\n    if (found) return found\n  }\n  return null\n}\n\n/** Project-relative path of the next.config Next will read, or null. */\nexport function findNextConfig(cwd: string): string | null {\n  return NEXT_CONFIG_FILES.find(rel => safeExists(path.join(cwd, rel))) ?? null\n}\n\n/** Project-relative paths of every proxy and middleware file present, proxy first. */\nexport function findProxyFiles(cwd: string): string[] {\n  return [...NEXT_PROXY_FILES, ...NEXT_MIDDLEWARE_FILES].filter(rel => safeExists(path.join(cwd, rel)))\n}\n","/**\n * @sonordev/site-kit — Node-only filesystem discovery for the sitemap CLI\n *\n * Single source of truth for the build-time filesystem scan used by\n * `registerLocalSitemap` (both the standalone CLI impl and the server routing\n * helper used to keep their own byte-drifting copies of `discoverNextJsRoutes`).\n *\n * Plus `findSitemapRoute` — the guard that makes `--auto-discover` safe to leave\n * in any site's `postbuild`.\n *\n * IMPORTANT — why a filesystem scan must never drive a `full-replace`:\n * a scan of `app/` can only see STATIC route segments. It structurally cannot\n * enumerate the params of a dynamic route (`/work/[slug]`, `/article/[cat]/[id]`),\n * and it ignores the app's sitemap `exclude` config. So the route set it\n * produces is always a strict, incomplete SUBSET of the real page set. Feeding\n * that incomplete set to a `full-replace` sync tells the API to DELETE every\n * page that isn't in it — i.e. every dynamic page, plus anything the app\n * intentionally excluded. When a site also has an `app/sitemap.{ts,js}` (which\n * `createSitemap` syncs as an authoritative full-replace), the two syncs delete\n * and recreate each other's rows on every build (the sitemap-oscillation bug),\n * destroying managed metadata, Signal optimizations, LLM schemas, and GSC\n * history on real pages. Hence: auto-discover is additive by default, and skips\n * entirely when a sitemap route already exists.\n *\n * Node built-ins (`fs`/`path`) only — never import this from browser/client code.\n */\n\nimport fs from 'fs'\nimport path from 'path'\n// App-dir order and page extensions are shared with the OG/doctor/geo checks.\nimport { NEXT_APP_DIRS as APP_DIR_CANDIDATES, hasPageFile } from '../shared/next-files'\n\n/** Extensions a Next.js `sitemap` route file can use. */\nconst SITEMAP_ROUTE_EXTENSIONS = ['ts', 'tsx', 'js', 'jsx', 'mjs']\n\n/**\n * Return the app directory (absolute path) that exists under `cwd`, or null.\n * Prefers `app/`, then `src/app/`.\n */\nexport function findAppDirForDiscovery(cwd: string = process.cwd()): string | null {\n  for (const candidate of APP_DIR_CANDIDATES) {\n    const abs = path.join(cwd, candidate)\n    if (fs.existsSync(abs)) return abs\n  }\n  return null\n}\n\n/**\n * Detect a Next.js `sitemap` route file (`app/sitemap.{ts,tsx,js,jsx,mjs}` or\n * `src/app/sitemap.*`). Returns the project-relative path if found, else null.\n *\n * Presence of this file means the framework already emits `/sitemap.xml` — the\n * authoritative page set — and site-kit's runtime `SitemapSync` syncs that real\n * sitemap (dynamic routes and all) additively. In that world an `--auto-discover`\n * filesystem scan is both inferior and dangerous (see the module header), so the\n * CLI skips.\n */\nexport function findSitemapRoute(cwd: string = process.cwd()): string | null {\n  for (const dir of APP_DIR_CANDIDATES) {\n    for (const ext of SITEMAP_ROUTE_EXTENSIONS) {\n      const rel = path.join(dir, `sitemap.${ext}`)\n      if (fs.existsSync(path.join(cwd, rel))) return rel\n    }\n  }\n  return null\n}\n\n/**\n * Recursively discover STATIC Next.js routes from an app directory.\n *\n * Intentionally skips dynamic segments (`[slug]`) — they can't be enumerated\n * from disk — which is exactly why the result is incomplete and must only ever\n * drive an additive sync. Route groups `(marketing)` are folded out of the URL.\n */\nexport function discoverNextJsRoutes(\n  appDir: string,\n  basePath: string = '',\n): Array<{ path: string; priority: number }> {\n  const entries: Array<{ path: string; priority: number }> = []\n\n  const items = fs.readdirSync(appDir, { withFileTypes: true })\n\n  for (const item of items) {\n    if (item.name.startsWith('_') || item.name.startsWith('.')) continue\n    if (item.name === 'api') continue\n    if (item.name === 'node_modules') continue\n\n    const itemPath = path.join(appDir, item.name)\n\n    if (item.isDirectory()) {\n      const hasPage = hasPageFile(itemPath)\n\n      const isRouteGroup = item.name.startsWith('(') && item.name.endsWith(')')\n      const isDynamic = item.name.startsWith('[') && item.name.endsWith(']')\n\n      let routePath = basePath\n      if (!isRouteGroup && !isDynamic) {\n        routePath = `${basePath}/${item.name}`\n      }\n\n      if (hasPage && !isDynamic) {\n        const priority = routePath === '' ? 1.0 : 0.8\n        entries.push({ path: routePath || '/', priority })\n      }\n\n      if (!isDynamic) {\n        const subEntries = discoverNextJsRoutes(\n          itemPath,\n          isRouteGroup ? basePath : routePath,\n        )\n        entries.push(...subEntries)\n      }\n    }\n  }\n\n  if (basePath === '') {\n    if (hasPageFile(appDir)) {\n      entries.unshift({ path: '/', priority: 1.0 })\n    }\n  }\n\n  return entries\n}\n"]}

package/dist/chunk-YBKALLBH.js

@@ -1,46 +0,0 @@
-'use strict';
-
-var crypto = require('crypto');
-
-// src/slots/contract.ts
-var SLOTS_CONTRACT_VERSION = 1;
-var SLOT_CONTENT_TYPES = ["text"];
-var SLOT_CONTENT_MAX_LENGTH = 1e4;
-var SLOT_ID_PATTERN = /^[a-z0-9][a-z0-9-_.:]{0,127}$/;
-function isValidSlotId(id) {
-  return SLOT_ID_PATTERN.test(id);
-}
-function slotSigningPayload(content) {
-  return `sonor-slot.v${SLOTS_CONTRACT_VERSION}
-${content.slot_id}
-${content.type}
-${content.content}`;
-}
-function signSlotContent(content, apiKey) {
-  return crypto.createHmac("sha256", apiKey).update(slotSigningPayload(content), "utf8").digest("hex");
-}
-function verifySlotContent(content, apiKey) {
-  if (!content || typeof content !== "object") return false;
-  const c = content;
-  if (typeof c.slot_id !== "string" || !isValidSlotId(c.slot_id) || typeof c.content !== "string" || c.content.length === 0 || c.content.length > SLOT_CONTENT_MAX_LENGTH || typeof c.signature !== "string" || !SLOT_CONTENT_TYPES.includes(c.type)) {
-    return false;
-  }
-  const expected = signSlotContent(
-    { slot_id: c.slot_id, type: c.type, content: c.content },
-    apiKey
-  );
-  const a = Buffer.from(expected, "utf8");
-  const b = Buffer.from(c.signature, "utf8");
-  return a.length === b.length && crypto.timingSafeEqual(a, b);
-}
-
-exports.SLOTS_CONTRACT_VERSION = SLOTS_CONTRACT_VERSION;
-exports.SLOT_CONTENT_MAX_LENGTH = SLOT_CONTENT_MAX_LENGTH;
-exports.SLOT_CONTENT_TYPES = SLOT_CONTENT_TYPES;
-exports.SLOT_ID_PATTERN = SLOT_ID_PATTERN;
-exports.isValidSlotId = isValidSlotId;
-exports.signSlotContent = signSlotContent;
-exports.slotSigningPayload = slotSigningPayload;
-exports.verifySlotContent = verifySlotContent;
-//# sourceMappingURL=chunk-YBKALLBH.js.map
-//# sourceMappingURL=chunk-YBKALLBH.js.map

package/dist/chunk-YBKALLBH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/slots/contract.ts"],"names":["createHmac","timingSafeEqual"],"mappings":";;;;;AAgBO,IAAM,sBAAA,GAAyB;AAS/B,IAAM,kBAAA,GAAiD,CAAC,MAAM;AAG9D,IAAM,uBAAA,GAA0B;AAGhC,IAAM,eAAA,GAAkB;AA6CxB,SAAS,cAAc,EAAA,EAAqB;AACjD,EAAA,OAAO,eAAA,CAAgB,KAAK,EAAE,CAAA;AAChC;AAMO,SAAS,mBACd,OAAA,EACQ;AACR,EAAA,OAAO,eAAe,sBAAsB;AAAA,EAAK,QAAQ,OAAO;AAAA,EAAK,QAAQ,IAAI;AAAA,EAAK,QAAQ,OAAO,CAAA,CAAA;AACvG;AAMO,SAAS,eAAA,CACd,SACA,MAAA,EACQ;AACR,EAAA,OAAOA,iBAAA,CAAW,QAAA,EAAU,MAAM,CAAA,CAAE,MAAA,CAAO,kBAAA,CAAmB,OAAO,CAAA,EAAG,MAAM,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AAC9F;AAOO,SAAS,iBAAA,CAAkB,SAAkB,MAAA,EAAwC;AAC1F,EAAA,IAAI,CAAC,OAAA,IAAW,OAAO,OAAA,KAAY,UAAU,OAAO,KAAA;AACpD,EAAA,MAAM,CAAA,GAAI,OAAA;AACV,EAAA,IACE,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,IACrB,CAAC,aAAA,CAAc,CAAA,CAAE,OAAO,CAAA,IACxB,OAAO,CAAA,CAAE,OAAA,KAAY,YACrB,CAAA,CAAE,OAAA,CAAQ,MAAA,KAAW,CAAA,IACrB,CAAA,CAAE,OAAA,CAAQ,MAAA,GAAS,uBAAA,IACnB,OAAO,CAAA,CAAE,SAAA,KAAc,QAAA,IACvB,CAAC,kBAAA,CAAmB,QAAA,CAAS,CAAA,CAAE,IAAuB,CAAA,EACtD;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAW,eAAA;AAAA,IACf,EAAE,SAAS,CAAA,CAAE,OAAA,EAAS,MAAM,CAAA,CAAE,IAAA,EAAyB,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ;AAAA,IAC1E;AAAA,GACF;AACA,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,MAAM,CAAA;AACtC,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,WAAW,MAAM,CAAA;AACzC,EAAA,OAAO,EAAE,MAAA,KAAW,CAAA,CAAE,MAAA,IAAUC,sBAAA,CAAgB,GAAG,CAAC,CAAA;AACtD","file":"chunk-YBKALLBH.js","sourcesContent":["/**\n * @sonordev/site-kit/slots/contract — Managed Slots wire contract (v1)\n *\n * Single source of truth for the slot payload shape and content signing,\n * shared by site-kit (verify side) and sonor-api (sign side) — same pattern\n * as `@sonordev/site-kit/llms/contract`.\n *\n * Security model: every SlotContent is HMAC-signed with the project API key.\n * site-kit verifies before rendering and falls back to the developer's static\n * content on any mismatch, so platform-originated content carries provenance\n * end to end. See docs/SITE-KIT-3.0-SPEC-SLOTS.md.\n */\n\nimport { createHmac, timingSafeEqual } from 'crypto'\n\n/** Bump on breaking payload changes. */\nexport const SLOTS_CONTRACT_VERSION = 1\n\n/**\n * v1 supports plain text only — rendered as React text (escaped), never\n * dangerouslySetInnerHTML. 'markdown' / 'rich' are reserved for a future\n * contract version behind a real sanitizer decision.\n */\nexport type SlotContentType = 'text'\n\nexport const SLOT_CONTENT_TYPES: readonly SlotContentType[] = ['text'] as const\n\n/** Hard cap on managed content length; longer payloads are rejected → fallback. */\nexport const SLOT_CONTENT_MAX_LENGTH = 10_000\n\n/** Slot ids: lowercase, page-scoped by convention, e.g. \"home-hero-headline\". */\nexport const SLOT_ID_PATTERN = /^[a-z0-9][a-z0-9-_.:]{0,127}$/\n\nexport interface SlotContent {\n  slot_id: string\n  type: SlotContentType\n  /** The managed text. Rendered escaped — never as HTML. */\n  content: string\n  /** Forward-compat: experiment/personalization variant that produced this content. */\n  variant_id?: string | null\n  experiment_id?: string | null\n  /** ISO timestamp of the last content change. */\n  updated_at?: string | null\n  /** Hex HMAC-SHA256 over the canonical payload, keyed with the project API key. */\n  signature: string\n}\n\nexport interface SlotResolveRequestEntry {\n  id: string\n  /**\n   * The developer's current static text for this slot (when statically\n   * extractable). Stored as `fallback_text` on registration so the dashboard\n   * editor shows the live copy instead of a bare slot id. Never rendered by\n   * the API anywhere — display + drafting context only.\n   */\n  fallback?: string\n  /**\n   * The route this slot renders on (e.g. \"/\" or \"/pricing\"). A static literal,\n   * never derived from the request — it feeds the Copy Evidence Loop's\n   * slot↔page mapping so Signal can judge the slot against its page's metrics.\n   */\n  page?: string\n}\n\nexport interface SlotsResolveRequest {\n  contract_version: number\n  slots: SlotResolveRequestEntry[]\n  /** Multi-site sub-dimension: normalized lowercase host (see CLAUDE.md \"site\" convention). */\n  site?: string\n}\n\nexport interface SlotsResolveResponse {\n  contract_version: number\n  slots: Record<string, SlotContent | null>\n}\n\nexport function isValidSlotId(id: string): boolean {\n  return SLOT_ID_PATTERN.test(id)\n}\n\n/**\n * Canonical string both sides sign/verify. Exported separately from the HMAC\n * helpers so an edge-runtime resolver can reproduce it with WebCrypto.\n */\nexport function slotSigningPayload(\n  content: Pick<SlotContent, 'slot_id' | 'type' | 'content'>,\n): string {\n  return `sonor-slot.v${SLOTS_CONTRACT_VERSION}\\n${content.slot_id}\\n${content.type}\\n${content.content}`\n}\n\n/**\n * Sign slot content with the project API key (sonor-api side).\n * Returns the hex HMAC-SHA256 signature.\n */\nexport function signSlotContent(\n  content: Pick<SlotContent, 'slot_id' | 'type' | 'content'>,\n  apiKey: string,\n): string {\n  return createHmac('sha256', apiKey).update(slotSigningPayload(content), 'utf8').digest('hex')\n}\n\n/**\n * Verify a slot payload's shape + signature (site-kit side).\n * Returns true only when the payload is well-formed, within limits, and the\n * signature matches the project API key. Constant-time comparison.\n */\nexport function verifySlotContent(content: unknown, apiKey: string): content is SlotContent {\n  if (!content || typeof content !== 'object') return false\n  const c = content as Partial<SlotContent>\n  if (\n    typeof c.slot_id !== 'string' ||\n    !isValidSlotId(c.slot_id) ||\n    typeof c.content !== 'string' ||\n    c.content.length === 0 ||\n    c.content.length > SLOT_CONTENT_MAX_LENGTH ||\n    typeof c.signature !== 'string' ||\n    !SLOT_CONTENT_TYPES.includes(c.type as SlotContentType)\n  ) {\n    return false\n  }\n  const expected = signSlotContent(\n    { slot_id: c.slot_id, type: c.type as SlotContentType, content: c.content },\n    apiKey,\n  )\n  const a = Buffer.from(expected, 'utf8')\n  const b = Buffer.from(c.signature, 'utf8')\n  return a.length === b.length && timingSafeEqual(a, b)\n}\n"]}

package/dist/chunk-YMZNEDFP.js

@@ -1,39 +0,0 @@
-'use strict';
-
-var crypto = require('crypto');
-
-// src/shared/request-guards.ts
-function secretsMatch(supplied, expected) {
-  if (!expected || !supplied) return false;
-  const a = Buffer.from(supplied);
-  const b = Buffer.from(expected);
-  return a.length === b.length && crypto.timingSafeEqual(a, b);
-}
-async function readCappedBody(request, maxBytes) {
-  const reader = request.body?.getReader();
-  if (!reader) return new Uint8Array(0);
-  const chunks = [];
-  let size = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > maxBytes) {
-      await reader.cancel();
-      return null;
-    }
-    chunks.push(value);
-  }
-  const body = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    body.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return body;
-}
-
-exports.readCappedBody = readCappedBody;
-exports.secretsMatch = secretsMatch;
-//# sourceMappingURL=chunk-YMZNEDFP.js.map
-//# sourceMappingURL=chunk-YMZNEDFP.js.map

package/dist/chunk-YMZNEDFP.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/request-guards.ts"],"names":["timingSafeEqual"],"mappings":";;;;;AAoBO,SAAS,YAAA,CAAa,UAAqC,QAAA,EAA8C;AAC9G,EAAA,IAAI,CAAC,QAAA,IAAY,CAAC,QAAA,EAAU,OAAO,KAAA;AACnC,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,OAAO,EAAE,MAAA,KAAW,CAAA,CAAE,MAAA,IAAUA,sBAAA,CAAgB,GAAG,CAAC,CAAA;AACtD;AASA,eAAsB,cAAA,CAAe,SAAkB,QAAA,EAA2D;AAChH,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAM,SAAA,EAAU;AACvC,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,IAAI,WAAW,CAAC,CAAA;AACpC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAA,IAAQ,KAAA,CAAM,UAAA;AACd,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AACA,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,IAAI,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,MAAM,CAAA;AACtB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT","file":"chunk-YMZNEDFP.js","sourcesContent":["/**\n * @sonordev/site-kit shared - Request guards for secret-bearing route handlers\n *\n * Node only (`crypto`). Single source of truth for the two checks every\n * webhook-style handler in the kit needs, so no module grows its own copy:\n *\n * - `secretsMatch`: constant-time secret comparison. Used by\n *   `createLlmsRevalidateHandler` and `createSeoRevalidationHandler`.\n * - `readCappedBody`: read a request body without buffering past a cap. Used\n *   by `createSeoRevalidationHandler` (16 KB) and the MCP transport relay\n *   (64 KB).\n */\n\nimport { timingSafeEqual } from 'crypto'\n\n/**\n * Constant-time equality for a supplied secret against the expected one.\n * An empty expected secret never matches, so a misconfigured site (no env\n * var) refuses everything instead of accepting an empty token.\n */\nexport function secretsMatch(supplied: string | null | undefined, expected: string | null | undefined): boolean {\n  if (!expected || !supplied) return false\n  const a = Buffer.from(supplied)\n  const b = Buffer.from(expected)\n  return a.length === b.length && timingSafeEqual(a, b)\n}\n\n/**\n * Read a request body, giving up at the first chunk past `maxBytes`.\n *\n * Returns the bytes, or `null` when the body is larger than the cap (the\n * stream is cancelled, so nothing past the cap is held in memory). A request\n * with no body returns an empty array.\n */\nexport async function readCappedBody(request: Request, maxBytes: number): Promise<Uint8Array<ArrayBuffer> | null> {\n  const reader = request.body?.getReader()\n  if (!reader) return new Uint8Array(0)\n  const chunks: Uint8Array[] = []\n  let size = 0\n  for (;;) {\n    const { done, value } = await reader.read()\n    if (done) break\n    size += value.byteLength\n    if (size > maxBytes) {\n      await reader.cancel()\n      return null\n    }\n    chunks.push(value)\n  }\n  const body = new Uint8Array(size)\n  let offset = 0\n  for (const chunk of chunks) {\n    body.set(chunk, offset)\n    offset += chunk.byteLength\n  }\n  return body\n}\n"]}

package/dist/chunk-YPGUV6BT.mjs

@@ -1,30 +0,0 @@
-import { resolveSiteHost } from './chunk-KZVSB5WE.mjs';
-import { normalizeSiteHost } from './chunk-ZN4HBK5C.mjs';
-
-// src/seo/register-sitemap-request.ts
-function resolveSyncSite(explicit) {
-  const host = normalizeSiteHost(explicit) || resolveSiteHost();
-  return host === "example.com" ? "" : host;
-}
-function registerSitemapBody(req) {
-  const body = { entries: req.entries, mode: req.mode };
-  const site = normalizeSiteHost(req.site);
-  if (site) body.site = site;
-  if (req.optimizeMeta !== void 0) body.optimize_meta = req.optimizeMeta;
-  if (req.awaitMeta !== void 0) body.await_meta = req.awaitMeta;
-  return body;
-}
-function postRegisterSitemap(req) {
-  return fetch(`${req.apiUrl}/api/public/seo/register-sitemap`, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "x-api-key": req.apiKey
-    },
-    body: JSON.stringify(registerSitemapBody(req))
-  });
-}
-
-export { postRegisterSitemap, resolveSyncSite };
-//# sourceMappingURL=chunk-YPGUV6BT.mjs.map
-//# sourceMappingURL=chunk-YPGUV6BT.mjs.map

package/dist/chunk-YPGUV6BT.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/seo/register-sitemap-request.ts"],"names":[],"mappings":";;;;AAmCO,SAAS,gBAAgB,QAAA,EAA2B;AACzD,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,QAAQ,CAAA,IAAK,eAAA,EAAgB;AAC5D,EAAA,OAAO,IAAA,KAAS,gBAAgB,EAAA,GAAK,IAAA;AACvC;AAGO,SAAS,oBAAoB,GAAA,EAAiF;AACnH,EAAA,MAAM,OAAgC,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAA,EAAM,IAAI,IAAA,EAAK;AAC7E,EAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,GAAA,CAAI,IAAI,CAAA;AACvC,EAAA,IAAI,IAAA,OAAW,IAAA,GAAO,IAAA;AACtB,EAAA,IAAI,GAAA,CAAI,YAAA,KAAiB,MAAA,EAAW,IAAA,CAAK,gBAAgB,GAAA,CAAI,YAAA;AAC7D,EAAA,IAAI,GAAA,CAAI,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,aAAa,GAAA,CAAI,SAAA;AACvD,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,oBAAoB,GAAA,EAAgD;AAClF,EAAA,OAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,gCAAA,CAAA,EAAoC;AAAA,IAC5D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAa,GAAA,CAAI;AAAA,KACnB;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,mBAAA,CAAoB,GAAG,CAAC;AAAA,GAC9C,CAAA;AACH","file":"chunk-YPGUV6BT.mjs","sourcesContent":["/**\n * @sonordev/site-kit/seo — the one POST to /api/public/seo/register-sitemap.\n *\n * SINGLE SOURCE OF TRUTH for the request body, used by createSitemap's\n * build-time sync (`syncSitemapToPortal`), the `sonor-register-sitemap` CLI\n * and `registerSitemap` / `registerLocalSitemap` on `seo/server`. There were\n * three hand-built bodies, and only createSitemap's carried `site`: on a\n * multi-site project the CLI and the seo/server helpers synced every page as\n * unattributed instead of this host's (found 2026-09-15). `site` is part of\n * seo_pages identity, so a missing one is a different page, not a no-op.\n *\n * A leaf: no `server-only`, no Node built-ins, so the plain-Node CLI can use\n * it as well as Next server code.\n */\n\nimport { resolveSiteHost } from '../sites/resolve'\nimport { normalizeSiteHost } from '../sites/normalize'\n\nexport interface RegisterSitemapRequest {\n  apiUrl: string\n  apiKey: string\n  entries: unknown[]\n  mode: 'additive' | 'full-replace'\n  /** Sub-site host, already resolved. Empty or undefined leaves `site` off. */\n  site?: string\n  optimizeMeta?: boolean\n  awaitMeta?: boolean\n}\n\n/**\n * The host a sync is tagged with: an explicit `site`, else\n * NEXT_PUBLIC_SITE_URL's. Empty when neither resolves (a single-site project\n * doesn't need one). `example.com` is the kit's placeholder origin and never a\n * real host, so it's never sent, same as createSitemap.\n */\nexport function resolveSyncSite(explicit?: string): string {\n  const host = normalizeSiteHost(explicit) || resolveSiteHost()\n  return host === 'example.com' ? '' : host\n}\n\n/** The request body. Exported for tests. */\nexport function registerSitemapBody(req: Omit<RegisterSitemapRequest, 'apiUrl' | 'apiKey'>): Record<string, unknown> {\n  const body: Record<string, unknown> = { entries: req.entries, mode: req.mode }\n  const site = normalizeSiteHost(req.site)\n  if (site) body.site = site\n  if (req.optimizeMeta !== undefined) body.optimize_meta = req.optimizeMeta\n  if (req.awaitMeta !== undefined) body.await_meta = req.awaitMeta\n  return body\n}\n\n/** POST the entries. Callers keep their own response and error handling. */\nexport function postRegisterSitemap(req: RegisterSitemapRequest): Promise<Response> {\n  return fetch(`${req.apiUrl}/api/public/seo/register-sitemap`, {\n    method: 'POST',\n    headers: {\n      'Content-Type': 'application/json',\n      'x-api-key': req.apiKey,\n    },\n    body: JSON.stringify(registerSitemapBody(req)),\n  })\n}\n"]}

package/dist/chunk-YU7QZ3PP.mjs

@@ -1,45 +0,0 @@
-// src/og/config.ts
-function defineOgCard(config) {
-  return config;
-}
-var OG_WIDTH = 1200;
-var OG_HEIGHT = 630;
-var TITLE_MAX_PX = 104;
-var TITLE_MIN_PX = 56;
-var OG_REPORT_ATTR = "data-og-report";
-
-// src/og/contrast.ts
-var AA_LARGE = 3;
-function parseHexColor(color) {
-  const hex = color.trim().replace(/^#/, "");
-  if (!/^([0-9a-f]{3}|[0-9a-f]{6}|[0-9a-f]{8})$/i.test(hex)) return null;
-  const full = hex.length === 3 ? hex.replace(/./g, (c) => c + c) : hex.slice(0, 6);
-  return [0, 2, 4].map((i) => parseInt(full.slice(i, i + 2), 16));
-}
-function luminance([r, g, b]) {
-  const channel = (v) => {
-    const s = v / 255;
-    return s <= 0.03928 ? s / 12.92 : ((s + 0.055) / 1.055) ** 2.4;
-  };
-  return 0.2126 * channel(r) + 0.7152 * channel(g) + 0.0722 * channel(b);
-}
-function contrastRatio(a, b) {
-  const ca = parseHexColor(a);
-  const cb = parseHexColor(b);
-  if (!ca || !cb) return null;
-  const [hi, lo] = [luminance(ca), luminance(cb)].sort((x, y) => y - x);
-  return (hi + 0.05) / (lo + 0.05);
-}
-function barTextColor(theme) {
-  if (theme.barText) return theme.barText;
-  const candidates = [theme.surface, theme.bg, theme.text].filter((c) => !!c);
-  const scored = candidates.map((color) => ({ color, ratio: contrastRatio(color, theme.accent) }));
-  const passing = scored.find((s) => s.ratio !== null && s.ratio >= AA_LARGE);
-  if (passing) return passing.color;
-  const measurable = scored.filter((s) => s.ratio !== null).sort((a, b) => b.ratio - a.ratio);
-  return measurable[0]?.color ?? candidates[0];
-}
-
-export { OG_HEIGHT, OG_REPORT_ATTR, OG_WIDTH, TITLE_MAX_PX, TITLE_MIN_PX, barTextColor, defineOgCard };
-//# sourceMappingURL=chunk-YU7QZ3PP.mjs.map
-//# sourceMappingURL=chunk-YU7QZ3PP.mjs.map

package/dist/chunk-YU7QZ3PP.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/og/config.ts","../src/og/contrast.ts"],"names":[],"mappings":";AA0IO,SAAS,aAAa,MAAA,EAAoC;AAC/D,EAAA,OAAO,MAAA;AACT;AAEO,IAAM,QAAA,GAAW;AACjB,IAAM,SAAA,GAAY;AAWlB,IAAM,YAAA,GAAe;AACrB,IAAM,YAAA,GAAe;AAOrB,IAAM,cAAA,GAAiB;;;AC1I9B,IAAM,QAAA,GAAW,CAAA;AAGV,SAAS,cAAc,KAAA,EAAgD;AAC5E,EAAA,MAAM,MAAM,KAAA,CAAM,IAAA,EAAK,CAAE,OAAA,CAAQ,MAAM,EAAE,CAAA;AACzC,EAAA,IAAI,CAAC,0CAAA,CAA2C,IAAA,CAAK,GAAG,GAAG,OAAO,IAAA;AAClE,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,MAAA,KAAW,CAAA,GAAI,IAAI,OAAA,CAAQ,IAAA,EAAM,CAAA,CAAA,KAAK,CAAA,GAAI,CAAC,CAAA,GAAI,GAAA,CAAI,KAAA,CAAM,GAAG,CAAC,CAAA;AAC9E,EAAA,OAAO,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,EAAE,GAAA,CAAI,CAAA,CAAA,KAAK,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAC,CAAA;AAC9D;AAEA,SAAS,SAAA,CAAU,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,EAAqC;AAC9D,EAAA,MAAM,OAAA,GAAU,CAAC,CAAA,KAAc;AAC7B,IAAA,MAAM,IAAI,CAAA,GAAI,GAAA;AACd,IAAA,OAAO,KAAK,OAAA,GAAU,CAAA,GAAI,KAAA,GAAA,CAAA,CAAU,CAAA,GAAI,SAAS,KAAA,KAAU,GAAA;AAAA,EAC7D,CAAA;AACA,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA,GAAS,QAAQ,CAAC,CAAA,GAAI,MAAA,GAAS,OAAA,CAAQ,CAAC,CAAA;AACvE;AAGO,SAAS,aAAA,CAAc,GAAW,CAAA,EAA0B;AACjE,EAAA,MAAM,EAAA,GAAK,cAAc,CAAC,CAAA;AAC1B,EAAA,MAAM,EAAA,GAAK,cAAc,CAAC,CAAA;AAC1B,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,EAAA,EAAI,OAAO,IAAA;AACvB,EAAA,MAAM,CAAC,EAAA,EAAI,EAAE,CAAA,GAAI,CAAC,UAAU,EAAE,CAAA,EAAG,SAAA,CAAU,EAAE,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,IAAI,CAAC,CAAA;AACpE,EAAA,OAAA,CAAQ,EAAA,GAAK,SAAS,EAAA,GAAK,IAAA,CAAA;AAC7B;AAYO,SAAS,aAAa,KAAA,EAAyB;AACpD,EAAA,IAAI,KAAA,CAAM,OAAA,EAAS,OAAO,KAAA,CAAM,OAAA;AAChC,EAAA,MAAM,UAAA,GAAa,CAAC,KAAA,CAAM,OAAA,EAAS,MAAM,EAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAmB,CAAC,CAAC,CAAC,CAAA;AACvF,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,GAAA,CAAI,CAAA,KAAA,MAAU,EAAE,KAAA,EAAO,KAAA,EAAO,aAAA,CAAc,KAAA,EAAO,KAAA,CAAM,MAAM,CAAA,EAAE,CAAE,CAAA;AAC7F,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,KAAA,KAAU,IAAA,IAAQ,CAAA,CAAE,KAAA,IAAS,QAAQ,CAAA;AACxE,EAAA,IAAI,OAAA,SAAgB,OAAA,CAAQ,KAAA;AAC5B,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,MAAA,CAAO,CAAA,CAAA,KAAK,EAAE,KAAA,KAAU,IAAI,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,GAAS,EAAE,KAAM,CAAA;AAG1F,EAAA,OAAO,UAAA,CAAW,CAAC,CAAA,EAAG,KAAA,IAAS,WAAW,CAAC,CAAA;AAC7C","file":"chunk-YU7QZ3PP.mjs","sourcesContent":["/**\n * @sonordev/site-kit/og — OG card config contract.\n *\n * THE SITE OWNS THE THEME. Sonor stores one brand_primary/secondary per\n * project; real sites have full palettes (Ludlow: red, ink, cream, scrim —\n * four tokens where Sonor stores two). So the card's colors, fonts, and\n * layout come from a repo-owned og.config.ts, typically importing the same\n * constants the site itself uses. Sonor brand data is only the zero-config\n * seed used by `sonor-setup og` when no og.config.ts exists.\n *\n * Rendering is BUILD-TIME via headless Chrome (`sonor-setup og`), writing a\n * static public/og.png: full real CSS (no Satori subset), Google Fonts load\n * in the template (no font vendoring), zero runtime cost — the right shape\n * for a force-static fleet. Per-entity runtime cards are a future tier.\n */\n\nexport interface OgTheme {\n  /** Page background behind everything. */\n  bg: string\n  /** Primary text color. */\n  text: string\n  /** Accent (kicker, bar). */\n  accent: string\n  /** Plate/surface color behind the logo. */\n  surface: string\n  /** Muted text (subtitle). Defaults derived from `text` when omitted. */\n  muted?: string\n  /**\n   * Bottom-bar text, set on `accent`. Defaults to the first of `surface`,\n   * `bg`, `text` that reaches WCAG AA for large text (3:1) against the\n   * accent (see og/contrast.ts).\n   */\n  barText?: string\n}\n\nexport interface OgFont {\n  /** Google Fonts family name, e.g. 'Barlow Condensed'. */\n  family: string\n  weights?: number[]\n}\n\nexport interface OgBackground {\n  /** Path under public/, e.g. '/hero-frost.avif'. */\n  image: string\n  /** CSS blur radius in px. */\n  blur?: number\n  /** Overlay color, e.g. 'rgba(17,17,16,.68)'. */\n  scrim?: string\n}\n\nexport interface OgPhoto {\n  /** Path under public/ ('/team.jpg') or an absolute https URL. */\n  src: string\n  /** Pane width in px (default 430). */\n  width?: number\n  /** Corner radius in px (default 24). */\n  radius?: number\n}\n\nexport interface OgContent {\n  /** Small all-caps line above the title. */\n  kicker?: string\n  /** The big line. `\\n` for a manual break. Keep it short — previews truncate. */\n  title: string\n  /** One supporting line. */\n  subtitle?: string\n  /** Handwritten-style accent line (rendered in the last configured font). */\n  hand?: string\n  /** Bottom bar segments, e.g. ['Give an hour', 'ludlowpto.org']. */\n  bar?: string[]\n}\n\n/**\n * A per-route entry in `cards`. Layered over the derived card, so it only\n * states what differs — including inside `content`: a route can override just\n * the subtitle and keep the title Sonor derived. The runtime always merged\n * field by field; this type used to demand a full OgContent, which forced\n * casts in every site that used the documented pattern.\n */\nexport type OgCardOverride = Partial<Omit<OgCardConfig, 'cards' | 'content'>> & {\n  content?: Partial<OgContent>\n}\n\nexport interface OgCardConfig {\n  theme: OgTheme\n  /** First font = display face, second (optional) = hand/accent face. */\n  fonts?: OgFont[]\n  /** Path under public/ to the logo shown on the plate, e.g. '/logo-mark.svg'. */\n  logo?: string\n  background?: OgBackground\n  /**\n   * 'plate-left': logo plate left, copy right (the Ludlow layout).\n   * 'centered': stacked, logo above title.\n   * 'banner': no plate, full-bleed copy.\n   * 'split': copy left, content photo right — for cards that show the page's\n   *   own imagery (a project photo, a product, the storefront).\n   */\n  layout?: 'plate-left' | 'centered' | 'banner' | 'split'\n  /** Content photo for the 'split' layout (also rendered in 'plate-left' when set, replacing the plate). */\n  photo?: OgPhoto\n  content: OgContent\n  /**\n   * Per-page overrides, keyed by route path (`/services/garage`) or its slug\n   * (`services-garage`). Every static route already gets its own card built\n   * from its managed title and description; this is for the handful worth\n   * writing by hand — a campaign landing page, the flagship service.\n   *\n   * A dynamic route is keyed by its pattern, one `*` per dynamic level:\n   * `/services/*` for `[slug]`, plus another star for each nested `[param]`\n   * (slug form `services-any`, `services-any-any`). Nested patterns are worth\n   * writing by hand — they all derive from the same static ancestor otherwise.\n   * `sonor-setup og` warns about any key that matches no route.\n   *\n   * Each entry is layered over the site card, so it only states what differs.\n   * Build-time only: never rendered as part of a card.\n   */\n  cards?: Record<string, OgCardOverride>\n  /**\n   * MIDDLE escape hatch: keep the loader/renderer/verifier pipeline but\n   * produce your own document. Receives the config and the same helpers the\n   * stock template uses (esc, fontLink). Root-relative src attributes are\n   * still rewritten to public/ files automatically.\n   */\n  template?: (config: OgCardConfig, helpers: OgTemplateHelpers) => string\n  /** FULL escape hatch: raw HTML replaces everything, no helpers. */\n  html?: string\n}\n\nexport interface OgTemplateHelpers {\n  /** HTML-escape user text. */\n  esc: (s: string) => string\n  /** <link> tag loading the config's Google Fonts. */\n  fontLink: string\n  width: number\n  height: number\n}\n\n/** Identity helper for typed configs: `export default defineOgCard({...})`. */\nexport function defineOgCard(config: OgCardConfig): OgCardConfig {\n  return config\n}\n\nexport const OG_WIDTH = 1200\nexport const OG_HEIGHT = 630\n\n/**\n * Title type scale. The card opens at TITLE_MAX and the in-page fitter steps\n * down until the copy column fits, stopping at TITLE_MIN.\n *\n * The floor is a legibility floor, not a layout one: below ~56px the headline\n * stops reading at the ~300px thumbnail width platforms actually show. A card\n * that would need to go under it is a card whose copy is too long, so the\n * renderer reports that rather than shrinking into mush.\n */\nexport const TITLE_MAX_PX = 104\nexport const TITLE_MIN_PX = 56\n\n/**\n * The attribute the in-page fitter writes its findings to, read back by\n * `sonor-setup og` via Chrome's --dump-dom. Shared so the template and the CLI\n * cannot drift on the name.\n */\nexport const OG_REPORT_ATTR = 'data-og-report'\n\n/** What the in-page fitter reports back about a rendered card. */\nexport interface OgRenderReport {\n  /** Did everything land inside the frame, at or above the legibility floor? */\n  fits: boolean\n  /** Final title size after fitting. Below TITLE_MAX means the copy ran long. */\n  titlePx: number\n  /** Human-readable problems, each naming the element and the overflow. */\n  issues: string[]\n}\n","/**\n * @sonordev/site-kit/og — text color for the card's bottom bar.\n *\n * SINGLE SOURCE OF TRUTH for \"what color is the bar text\", shared by the\n * build-time template (template.ts) and the runtime card (route.tsx). The two\n * disagreed: the template set the bar in `theme.surface`, the runtime card in\n * `theme.text`, and on a site whose text and accent are both strong colors the\n * runtime bar came out unreadable (navy on crimson on watsonhac.com, ink on\n * green on reinhart). Both sites dropped the bar rather than ship it.\n *\n * `theme.barText` always wins. Otherwise the first candidate that reaches\n * WCAG AA for large text against the accent is used, in the order the\n * template always preferred (surface, then bg, then text), so every card\n * that already read well keeps its color. Failing that, the highest-contrast\n * candidate.\n *\n * Pure: no DOM, no Node built-ins.\n */\n\n/**\n * WCAG AA for LARGE text: the bar is bold and 30px or more on both cards,\n * well past the 18.66px-bold line. 4.5:1 (normal text) would flip readable\n * fleet bars like abbeyglenapts.com's white on orange (3.3:1) for no gain.\n */\nconst AA_LARGE = 3\n\n/** `#abc`, `#aabbcc`, `#aabbccdd` → [r, g, b] in 0-255, or null for anything else. */\nexport function parseHexColor(color: string): [number, number, number] | null {\n  const hex = color.trim().replace(/^#/, '')\n  if (!/^([0-9a-f]{3}|[0-9a-f]{6}|[0-9a-f]{8})$/i.test(hex)) return null\n  const full = hex.length === 3 ? hex.replace(/./g, c => c + c) : hex.slice(0, 6)\n  return [0, 2, 4].map(i => parseInt(full.slice(i, i + 2), 16)) as [number, number, number]\n}\n\nfunction luminance([r, g, b]: [number, number, number]): number {\n  const channel = (v: number) => {\n    const s = v / 255\n    return s <= 0.03928 ? s / 12.92 : ((s + 0.055) / 1.055) ** 2.4\n  }\n  return 0.2126 * channel(r) + 0.7152 * channel(g) + 0.0722 * channel(b)\n}\n\n/** WCAG contrast ratio of two hex colors, or null when either isn't hex. */\nexport function contrastRatio(a: string, b: string): number | null {\n  const ca = parseHexColor(a)\n  const cb = parseHexColor(b)\n  if (!ca || !cb) return null\n  const [hi, lo] = [luminance(ca), luminance(cb)].sort((x, y) => y - x)\n  return (hi + 0.05) / (lo + 0.05)\n}\n\nexport interface BarTheme {\n  bg: string\n  text: string\n  accent: string\n  surface?: string\n  /** Explicit bar text color. Always wins. */\n  barText?: string\n}\n\n/** The color to set the bottom bar's text in, on `theme.accent`. */\nexport function barTextColor(theme: BarTheme): string {\n  if (theme.barText) return theme.barText\n  const candidates = [theme.surface, theme.bg, theme.text].filter((c): c is string => !!c)\n  const scored = candidates.map(color => ({ color, ratio: contrastRatio(color, theme.accent) }))\n  const passing = scored.find(s => s.ratio !== null && s.ratio >= AA_LARGE)\n  if (passing) return passing.color\n  const measurable = scored.filter(s => s.ratio !== null).sort((a, b) => b.ratio! - a.ratio!)\n  // Non-hex colors (rgb(), names) can't be scored; keep the template's old\n  // choice for them rather than guess.\n  return measurable[0]?.color ?? candidates[0]\n}\n"]}

package/dist/chunk-YVJASVVK.js

@@ -1,97 +0,0 @@
-'use client';
-'use strict';
-
-var react = require('react');
-var jsxRuntime = require('react/jsx-runtime');
-
-// src/forms/FormCelebration.tsx
-var STYLE_ID = "sk-celebration-css";
-var CSS = `
-@keyframes sk-cel-pop { 0% { transform: scale(.4); opacity: 0 } 70% { transform: scale(1.08) } 100% { transform: scale(1); opacity: 1 } }
-@keyframes sk-cel-draw { to { stroke-dashoffset: 0 } }
-@keyframes sk-cel-rise { from { transform: translateY(10px); opacity: 0 } to { transform: translateY(0); opacity: 1 } }
-@keyframes sk-cel-burst {
-  0% { transform: rotate(var(--sk-cel-a)) translateY(0) scale(1); opacity: 0 }
-  12% { opacity: 1 }
-  100% { transform: rotate(var(--sk-cel-a)) translateY(calc(var(--sk-cel-d) * -1)) scale(.2); opacity: 0 }
-}
-.sk-cel { text-align: center; padding: 1.5rem 0; }
-.sk-cel-stage { position: relative; width: 92px; height: 92px; margin: 0 auto 1.1rem; }
-/* Disc/particles mix toward currentColor so they stay visible on sections
-   painted with the brand color itself (same contrast guarantee as delight.tsx). */
-.sk-cel-disc {
-  width: 92px; height: 92px; border-radius: 50%;
-  background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor);
-  display: flex; align-items: center; justify-content: center;
-  animation: sk-cel-pop .45s cubic-bezier(.22,1.4,.36,1) both;
-}
-.sk-cel-check { stroke-dasharray: 26; stroke-dashoffset: 26; animation: sk-cel-draw .35s ease-out .28s forwards; }
-.sk-cel-p {
-  position: absolute; top: 50%; left: 50%; width: 7px; height: 7px; margin: -3.5px;
-  border-radius: 50%; background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor); opacity: 0; pointer-events: none;
-  animation: sk-cel-burst .7s ease-out .3s both;
-}
-.sk-cel-p:nth-child(even) { width: 5px; height: 5px; border-radius: 1px; background: color-mix(in srgb, var(--sk-primary, #2563eb) 40%, currentColor); }
-.sk-cel-msg { animation: sk-cel-rise .4s ease-out .35s both; font-size: 1.15rem; line-height: 1.6; }
-@media (prefers-reduced-motion: reduce) {
-  .sk-cel-disc, .sk-cel-msg { animation: none }
-  .sk-cel-check { animation: none; stroke-dashoffset: 0 }
-  .sk-cel-p { display: none }
-}
-`;
-var PARTICLES = Array.from({ length: 12 }, (_, i) => ({
-  angle: i * 30,
-  distance: 46 + i % 3 * 14
-}));
-function FormCelebration({ message, className }) {
-  react.useEffect(() => {
-    try {
-      if (!window.matchMedia("(prefers-reduced-motion: reduce)").matches) {
-        navigator.vibrate?.(15);
-      }
-    } catch {
-    }
-  }, []);
-  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className, "data-sk-part": "celebration", children: [
-    /* @__PURE__ */ jsxRuntime.jsx("style", { id: STYLE_ID, dangerouslySetInnerHTML: { __html: CSS } }),
-    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sk-cel", children: [
-      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sk-cel-stage", "aria-hidden": "true", "data-sk-part": "celebration-stage", children: [
-        PARTICLES.map((p, i) => /* @__PURE__ */ jsxRuntime.jsx(
-          "span",
-          {
-            className: "sk-cel-p",
-            "data-sk-part": "celebration-particle",
-            style: { ["--sk-cel-a"]: `${p.angle}deg`, ["--sk-cel-d"]: `${p.distance}px` }
-          },
-          i
-        )),
-        /* @__PURE__ */ jsxRuntime.jsx("div", { className: "sk-cel-disc", "data-sk-part": "celebration-disc", children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "44", height: "44", viewBox: "0 0 24 24", fill: "none", children: /* @__PURE__ */ jsxRuntime.jsx(
-          "path",
-          {
-            className: "sk-cel-check",
-            d: "M5 12.5l4.2 4.3L19 7",
-            stroke: "var(--sk-form-success-check, #fff)",
-            strokeWidth: "2.6",
-            strokeLinecap: "round",
-            strokeLinejoin: "round"
-          }
-        ) }) })
-      ] }),
-      /* @__PURE__ */ jsxRuntime.jsx(
-        "p",
-        {
-          className: "sk-cel-msg",
-          "data-sk-part": "celebration-message",
-          role: "status",
-          "aria-live": "polite",
-          style: { margin: 0, color: "var(--sk-form-success-text, inherit)" },
-          children: message
-        }
-      )
-    ] })
-  ] });
-}
-
-exports.FormCelebration = FormCelebration;
-//# sourceMappingURL=chunk-YVJASVVK.js.map
-//# sourceMappingURL=chunk-YVJASVVK.js.map

package/dist/chunk-YVJASVVK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/forms/FormCelebration.tsx"],"names":["useEffect","jsxs","jsx"],"mappings":";;;;;;AAyBA,IAAM,QAAA,GAAW,oBAAA;AAEjB,IAAM,GAAA,GAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAmCZ,IAAM,SAAA,GAAY,MAAM,IAAA,CAAK,EAAE,QAAQ,EAAA,EAAG,EAAG,CAAC,CAAA,EAAG,CAAA,MAAO;AAAA,EACtD,OAAO,CAAA,GAAI,EAAA;AAAA,EACX,QAAA,EAAU,EAAA,GAAM,CAAA,GAAI,CAAA,GAAK;AAC3B,CAAA,CAAE,CAAA;AAOK,SAAS,eAAA,CAAgB,EAAE,OAAA,EAAS,SAAA,EAAU,EAAyB;AAG5E,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,MAAA,CAAO,UAAA,CAAW,kCAAkC,EAAE,OAAA,EAAS;AAClE,QAAA,SAAA,CAAU,UAAU,EAAE,CAAA;AAAA,MACxB;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,uBACEC,eAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAsB,cAAA,EAAa,aAAA,EACtC,QAAA,EAAA;AAAA,oBAAAC,cAAA,CAAC,WAAM,EAAA,EAAI,QAAA,EAAU,yBAAyB,EAAE,MAAA,EAAQ,KAAI,EAAG,CAAA;AAAA,oBAC/DD,eAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,QAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,eAAA,CAAC,SAAI,SAAA,EAAU,cAAA,EAAe,aAAA,EAAY,MAAA,EAAO,gBAAa,mBAAA,EAC3D,QAAA,EAAA;AAAA,QAAA,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,qBACjBC,cAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YAEC,SAAA,EAAU,UAAA;AAAA,YACV,cAAA,EAAa,sBAAA;AAAA,YACb,KAAA,EAAO,EAAE,CAAC,YAAsB,GAAG,CAAA,EAAG,CAAA,CAAE,KAAK,CAAA,GAAA,CAAA,EAAO,CAAC,YAAsB,GAAG,CAAA,EAAG,CAAA,CAAE,QAAQ,CAAA,EAAA,CAAA;AAAK,WAAA;AAAA,UAH3F;AAAA,SAKR,CAAA;AAAA,wBACDA,cAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,aAAA,EAAc,gBAAa,kBAAA,EACxC,QAAA,kBAAAA,cAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAM,MAAK,MAAA,EAAO,IAAA,EAAK,OAAA,EAAQ,WAAA,EAAY,MAAK,MAAA,EACnD,QAAA,kBAAAA,cAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,cAAA;AAAA,YACV,CAAA,EAAE,sBAAA;AAAA,YACF,MAAA,EAAO,oCAAA;AAAA,YACP,WAAA,EAAY,KAAA;AAAA,YACZ,aAAA,EAAc,OAAA;AAAA,YACd,cAAA,EAAe;AAAA;AAAA,WAEnB,CAAA,EACF;AAAA,OAAA,EACF,CAAA;AAAA,sBACAA,cAAA;AAAA,QAAC,GAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,YAAA;AAAA,UACV,cAAA,EAAa,qBAAA;AAAA,UACb,IAAA,EAAK,QAAA;AAAA,UACL,WAAA,EAAU,QAAA;AAAA,UACV,KAAA,EAAO,EAAE,MAAA,EAAQ,CAAA,EAAG,OAAO,sCAAA,EAAuC;AAAA,UAEjE,QAAA,EAAA;AAAA;AAAA;AACH,KAAA,EACF;AAAA,GAAA,EACF,CAAA;AAEJ","file":"chunk-YVJASVVK.js","sourcesContent":["'use client'\n\n/**\n * FormCelebration — the payoff moment.\n *\n * Forms are the whole point of a marketing site: they capture the lead.\n * The success state should feel like something HAPPENED — closer to a\n * payment-confirmed screen than a printed receipt. This renders:\n *\n *   1. a brand-colored disc that springs in\n *   2. an SVG check that DRAWS itself (stroke-dashoffset)\n *   3. a one-shot radial burst of particles in the brand color\n *   4. the success message rising in underneath\n *\n * Constraints honored:\n * - Zero dependencies; one injected <style> tag (deduped by id).\n * - Brand-driven: everything derives from --sk-primary, so it matches the\n *   site automatically. data-sk-part hooks on every element for overrides.\n * - prefers-reduced-motion: static check + message, no burst, no springs.\n * - a11y: the live region is the message, not the fireworks; particles are\n *   aria-hidden and pure CSS (no timers, no cleanup, GC-free).\n */\n\nimport React, { useEffect } from 'react'\n\nconst STYLE_ID = 'sk-celebration-css'\n\nconst CSS = `\n@keyframes sk-cel-pop { 0% { transform: scale(.4); opacity: 0 } 70% { transform: scale(1.08) } 100% { transform: scale(1); opacity: 1 } }\n@keyframes sk-cel-draw { to { stroke-dashoffset: 0 } }\n@keyframes sk-cel-rise { from { transform: translateY(10px); opacity: 0 } to { transform: translateY(0); opacity: 1 } }\n@keyframes sk-cel-burst {\n  0% { transform: rotate(var(--sk-cel-a)) translateY(0) scale(1); opacity: 0 }\n  12% { opacity: 1 }\n  100% { transform: rotate(var(--sk-cel-a)) translateY(calc(var(--sk-cel-d) * -1)) scale(.2); opacity: 0 }\n}\n.sk-cel { text-align: center; padding: 1.5rem 0; }\n.sk-cel-stage { position: relative; width: 92px; height: 92px; margin: 0 auto 1.1rem; }\n/* Disc/particles mix toward currentColor so they stay visible on sections\n   painted with the brand color itself (same contrast guarantee as delight.tsx). */\n.sk-cel-disc {\n  width: 92px; height: 92px; border-radius: 50%;\n  background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor);\n  display: flex; align-items: center; justify-content: center;\n  animation: sk-cel-pop .45s cubic-bezier(.22,1.4,.36,1) both;\n}\n.sk-cel-check { stroke-dasharray: 26; stroke-dashoffset: 26; animation: sk-cel-draw .35s ease-out .28s forwards; }\n.sk-cel-p {\n  position: absolute; top: 50%; left: 50%; width: 7px; height: 7px; margin: -3.5px;\n  border-radius: 50%; background: color-mix(in srgb, var(--sk-primary, #2563eb) 72%, currentColor); opacity: 0; pointer-events: none;\n  animation: sk-cel-burst .7s ease-out .3s both;\n}\n.sk-cel-p:nth-child(even) { width: 5px; height: 5px; border-radius: 1px; background: color-mix(in srgb, var(--sk-primary, #2563eb) 40%, currentColor); }\n.sk-cel-msg { animation: sk-cel-rise .4s ease-out .35s both; font-size: 1.15rem; line-height: 1.6; }\n@media (prefers-reduced-motion: reduce) {\n  .sk-cel-disc, .sk-cel-msg { animation: none }\n  .sk-cel-check { animation: none; stroke-dashoffset: 0 }\n  .sk-cel-p { display: none }\n}\n`\n\n/** 12 particles: evenly fanned angles, staggered distances. Deterministic — no Math.random (SSR/hydration-safe). */\nconst PARTICLES = Array.from({ length: 12 }, (_, i) => ({\n  angle: i * 30,\n  distance: 46 + (i % 3) * 14,\n}))\n\nexport interface FormCelebrationProps {\n  message: string\n  className?: string\n}\n\nexport function FormCelebration({ message, className }: FormCelebrationProps) {\n  // One soft haptic tick on mobile — the \"you got paid\" buzz. Gated behind\n  // reduced-motion as the closest thing to a reduced-haptics preference.\n  useEffect(() => {\n    try {\n      if (!window.matchMedia('(prefers-reduced-motion: reduce)').matches) {\n        navigator.vibrate?.(15)\n      }\n    } catch {\n      // vibration is a bonus, never a failure\n    }\n  }, [])\n\n  return (\n    <div className={className} data-sk-part=\"celebration\">\n      <style id={STYLE_ID} dangerouslySetInnerHTML={{ __html: CSS }} />\n      <div className=\"sk-cel\">\n        <div className=\"sk-cel-stage\" aria-hidden=\"true\" data-sk-part=\"celebration-stage\">\n          {PARTICLES.map((p, i) => (\n            <span\n              key={i}\n              className=\"sk-cel-p\"\n              data-sk-part=\"celebration-particle\"\n              style={{ ['--sk-cel-a' as string]: `${p.angle}deg`, ['--sk-cel-d' as string]: `${p.distance}px` }}\n            />\n          ))}\n          <div className=\"sk-cel-disc\" data-sk-part=\"celebration-disc\">\n            <svg width=\"44\" height=\"44\" viewBox=\"0 0 24 24\" fill=\"none\">\n              <path\n                className=\"sk-cel-check\"\n                d=\"M5 12.5l4.2 4.3L19 7\"\n                stroke=\"var(--sk-form-success-check, #fff)\"\n                strokeWidth=\"2.6\"\n                strokeLinecap=\"round\"\n                strokeLinejoin=\"round\"\n              />\n            </svg>\n          </div>\n        </div>\n        <p\n          className=\"sk-cel-msg\"\n          data-sk-part=\"celebration-message\"\n          role=\"status\"\n          aria-live=\"polite\"\n          style={{ margin: 0, color: 'var(--sk-form-success-text, inherit)' }}\n        >\n          {message}\n        </p>\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/chunk-YZJ22HUQ.js

@@ -1,29 +0,0 @@
-'use strict';
-
-// src/motion/failsafe.ts
-var scrolled = false;
-var armed = false;
-function arm() {
-  if (armed || typeof window === "undefined") return;
-  armed = true;
-  window.addEventListener(
-    "scroll",
-    () => {
-      scrolled = true;
-    },
-    { passive: true, once: true }
-  );
-}
-function onNoScroll(fn, ms = 2500) {
-  if (typeof window === "undefined") return () => {
-  };
-  arm();
-  const t = setTimeout(() => {
-    if (!scrolled) fn();
-  }, ms);
-  return () => clearTimeout(t);
-}
-
-exports.onNoScroll = onNoScroll;
-//# sourceMappingURL=chunk-YZJ22HUQ.js.map
-//# sourceMappingURL=chunk-YZJ22HUQ.js.map

package/dist/chunk-YZJ22HUQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/motion/failsafe.ts"],"names":[],"mappings":";;;AAeA,IAAI,QAAA,GAAW,KAAA;AACf,IAAI,KAAA,GAAQ,KAAA;AAEZ,SAAS,GAAA,GAAM;AACb,EAAA,IAAI,KAAA,IAAS,OAAO,MAAA,KAAW,WAAA,EAAa;AAC5C,EAAA,KAAA,GAAQ,IAAA;AACR,EAAA,MAAA,CAAO,gBAAA;AAAA,IACL,QAAA;AAAA,IACA,MAAM;AACJ,MAAA,QAAA,GAAW,IAAA;AAAA,IACb,CAAA;AAAA,IACA,EAAE,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,IAAA;AAAK,GAC9B;AACF;AAMO,SAAS,UAAA,CAAW,EAAA,EAAgB,EAAA,GAAK,IAAA,EAAkB;AAChE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAM;AAAA,EAAC,CAAA;AACjD,EAAA,GAAA,EAAI;AACJ,EAAA,MAAM,CAAA,GAAI,WAAW,MAAM;AACzB,IAAA,IAAI,CAAC,UAAU,EAAA,EAAG;AAAA,EACpB,GAAG,EAAE,CAAA;AACL,EAAA,OAAO,MAAM,aAAa,CAAC,CAAA;AAC7B","file":"chunk-YZJ22HUQ.js","sourcesContent":["/**\n * Renderer failsafe for scroll-entrance reveals.\n *\n * Headless renderers — Google's Web Rendering Service included — execute\n * JavaScript but never scroll, so a scroll-triggered reveal would leave\n * below-the-fold content transparent in the rendered snapshot that gets\n * indexed. (Measured at ~85 transparent elements on one page before this\n * guard existed.) If the visitor hasn't scrolled shortly after a reveal\n * arms, we assume nobody is going to and show the content. Real visitors\n * scroll well inside the window, so animations are unaffected.\n *\n * Single source of truth for every reveal system in the kit. Ported from\n * upforge.io's lib/reveal-failsafe.\n */\n\nlet scrolled = false\nlet armed = false\n\nfunction arm() {\n  if (armed || typeof window === 'undefined') return\n  armed = true\n  window.addEventListener(\n    'scroll',\n    () => {\n      scrolled = true\n    },\n    { passive: true, once: true },\n  )\n}\n\n/**\n * Run `fn` after `ms` milliseconds unless the visitor scrolls first.\n * Returns a cancel function for effect cleanups.\n */\nexport function onNoScroll(fn: () => void, ms = 2500): () => void {\n  if (typeof window === 'undefined') return () => {}\n  arm()\n  const t = setTimeout(() => {\n    if (!scrolled) fn()\n  }, ms)\n  return () => clearTimeout(t)\n}\n"]}

package/dist/chunk-Z2URIOKG.mjs

@@ -1,36 +0,0 @@
-import { timingSafeEqual } from 'crypto';
-
-// src/shared/request-guards.ts
-function secretsMatch(supplied, expected) {
-  if (!expected || !supplied) return false;
-  const a = Buffer.from(supplied);
-  const b = Buffer.from(expected);
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-async function readCappedBody(request, maxBytes) {
-  const reader = request.body?.getReader();
-  if (!reader) return new Uint8Array(0);
-  const chunks = [];
-  let size = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > maxBytes) {
-      await reader.cancel();
-      return null;
-    }
-    chunks.push(value);
-  }
-  const body = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    body.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return body;
-}
-
-export { readCappedBody, secretsMatch };
-//# sourceMappingURL=chunk-Z2URIOKG.mjs.map
-//# sourceMappingURL=chunk-Z2URIOKG.mjs.map

package/dist/chunk-Z2URIOKG.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/request-guards.ts"],"names":[],"mappings":";;;AAoBO,SAAS,YAAA,CAAa,UAAqC,QAAA,EAA8C;AAC9G,EAAA,IAAI,CAAC,QAAA,IAAY,CAAC,QAAA,EAAU,OAAO,KAAA;AACnC,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAC9B,EAAA,OAAO,EAAE,MAAA,KAAW,CAAA,CAAE,MAAA,IAAU,eAAA,CAAgB,GAAG,CAAC,CAAA;AACtD;AASA,eAAsB,cAAA,CAAe,SAAkB,QAAA,EAA2D;AAChH,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAM,SAAA,EAAU;AACvC,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,IAAI,WAAW,CAAC,CAAA;AACpC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAA,IAAQ,KAAA,CAAM,UAAA;AACd,IAAA,IAAI,OAAO,QAAA,EAAU;AACnB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AACA,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,IAAI,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,MAAM,CAAA;AACtB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT","file":"chunk-Z2URIOKG.mjs","sourcesContent":["/**\n * @sonordev/site-kit shared - Request guards for secret-bearing route handlers\n *\n * Node only (`crypto`). Single source of truth for the two checks every\n * webhook-style handler in the kit needs, so no module grows its own copy:\n *\n * - `secretsMatch`: constant-time secret comparison. Used by\n *   `createLlmsRevalidateHandler` and `createSeoRevalidationHandler`.\n * - `readCappedBody`: read a request body without buffering past a cap. Used\n *   by `createSeoRevalidationHandler` (16 KB) and the MCP transport relay\n *   (64 KB).\n */\n\nimport { timingSafeEqual } from 'crypto'\n\n/**\n * Constant-time equality for a supplied secret against the expected one.\n * An empty expected secret never matches, so a misconfigured site (no env\n * var) refuses everything instead of accepting an empty token.\n */\nexport function secretsMatch(supplied: string | null | undefined, expected: string | null | undefined): boolean {\n  if (!expected || !supplied) return false\n  const a = Buffer.from(supplied)\n  const b = Buffer.from(expected)\n  return a.length === b.length && timingSafeEqual(a, b)\n}\n\n/**\n * Read a request body, giving up at the first chunk past `maxBytes`.\n *\n * Returns the bytes, or `null` when the body is larger than the cap (the\n * stream is cancelled, so nothing past the cap is held in memory). A request\n * with no body returns an empty array.\n */\nexport async function readCappedBody(request: Request, maxBytes: number): Promise<Uint8Array<ArrayBuffer> | null> {\n  const reader = request.body?.getReader()\n  if (!reader) return new Uint8Array(0)\n  const chunks: Uint8Array[] = []\n  let size = 0\n  for (;;) {\n    const { done, value } = await reader.read()\n    if (done) break\n    size += value.byteLength\n    if (size > maxBytes) {\n      await reader.cancel()\n      return null\n    }\n    chunks.push(value)\n  }\n  const body = new Uint8Array(size)\n  let offset = 0\n  for (const chunk of chunks) {\n    body.set(chunk, offset)\n    offset += chunk.byteLength\n  }\n  return body\n}\n"]}

package/dist/chunk-ZN4HBK5C.mjs

@@ -1,17 +0,0 @@
-// src/sites/normalize.ts
-function normalizeSiteHost(site) {
-  if (!site || typeof site !== "string") return null;
-  let s = site.trim().toLowerCase();
-  if (!s) return null;
-  s = s.replace(/^https?:\/\//, "");
-  const slash = s.indexOf("/");
-  if (slash >= 0) s = s.slice(0, slash);
-  const colon = s.indexOf(":");
-  if (colon >= 0) s = s.slice(0, colon);
-  s = s.replace(/\.+$/, "");
-  return s || null;
-}
-
-export { normalizeSiteHost };
-//# sourceMappingURL=chunk-ZN4HBK5C.mjs.map
-//# sourceMappingURL=chunk-ZN4HBK5C.mjs.map

package/dist/chunk-ZN4HBK5C.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sites/normalize.ts"],"names":[],"mappings":";AAmCO,SAAS,kBAAkB,IAAA,EAAqC;AACrE,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,UAAU,OAAO,IAAA;AAC9C,EAAA,IAAI,CAAA,GAAI,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAChC,EAAA,IAAI,CAAC,GAAG,OAAO,IAAA;AAEf,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA;AAEhC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAEpC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,SAAS,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AAIpC,EAAA,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACxB,EAAA,OAAO,CAAA,IAAK,IAAA;AACd","file":"chunk-ZN4HBK5C.mjs","sourcesContent":["/**\n * @sonordev/site-kit/sites — normalizeSiteHost (leaf module)\n *\n * Deliberately its own file, not part of `./contract`, so browser code can pull\n * in the normalizer WITHOUT the rest of the contract surface.\n *\n * `publishCredential` (which every client entry that publishes a credential\n * imports) needs exactly this one function. When it lived in `./contract`, the\n * bundler emitted that whole module as one shared chunk — `SITE_HOST_JSON_SCHEMA`,\n * `SITE_HOST_CONTRACT_VERSION`, `stripWww`, `sameSite`, `hostFromUrl`,\n * `isNormalizedSiteHost` and all — into `client`, `layout/client` and every\n * other entry that touched it. That was ~750B gzipped of agent-facing contract\n * metadata shipped to browsers for a 14-line string normalizer, and it is what\n * pushed those entries over their bundle budgets.\n *\n * `./contract` re-exports this, so the public `@sonordev/site-kit/sites/contract`\n * surface and the cross-repo drift tests are unchanged. Keep the implementation\n * HERE — the Nest APIs mirror this exact logic (sonor-api\n * `src/common/utils/site-host.ts`, signal-api `src/shared/utils/seo-page-pick.util.ts`).\n *\n * Pure string logic only (no Node built-ins) so it is safe in the browser.\n */\n\n/**\n * normalizeSiteHost — canonical normalizer for a sub-site host value before it\n * is persisted or used as a filter.\n *\n *   `https://OhioPowerStudies.com:3000/path` → `ohiopowerstudies.com`\n *\n * Lowercases, strips protocol, keeps host only (drops path + query), strips\n * port (rollups span dev/prod) and the FQDN root dot. Returns null for\n * empty/non-string input.\n * Note: `www.` is intentionally preserved here — use `sameSite`/`stripWww`\n * for www-insensitive equality.\n */\nexport function normalizeSiteHost(site?: string | null): string | null {\n  if (!site || typeof site !== 'string') return null\n  let s = site.trim().toLowerCase()\n  if (!s) return null\n  // Strip protocol if present\n  s = s.replace(/^https?:\\/\\//, '')\n  // Keep host only — drop everything from first slash onward\n  const slash = s.indexOf('/')\n  if (slash >= 0) s = s.slice(0, slash)\n  // Strip port (rollups span dev/prod)\n  const colon = s.indexOf(':')\n  if (colon >= 0) s = s.slice(0, colon)\n  // Strip the FQDN root dot — \"spademade.com.\" is the same host as\n  // \"spademade.com\". Because `site` is part of seo_pages identity, leaving the\n  // dot on spells one site as two and mints a full duplicate page set.\n  s = s.replace(/\\.+$/, '')\n  return s || null\n}\n"]}