@sonordev/site-kit 6.5.0 → 7.0.1

package/dist/portfolio/contract.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/portfolio/contract.ts"],"names":[],"mappings":";;;;AA8BO,IAAM,0BAAA,GAA6B;AAS1C,IAAM,aAAA,GAAgB,aAAA;AAGf,SAAS,gBAAgB,GAAA,EAAsC;AACpE,EAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,CAAI,KAAA,IAAS,EAAE,CAAA;AAC3C;AAQO,SAAS,eAAkC,IAAA,EAAgB;AAChE,EAAA,MAAM,QAAA,GAAW,KAAK,MAAA,CAAO,CAAC,MAAM,CAAC,eAAA,CAAgB,CAAC,CAAC,CAAA;AACvD,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,eAAe,CAAA;AAC9C,EAAA,IAAI,UAAA,CAAW,MAAA,IAAU,CAAA,EAAG,OAAO,IAAA;AAEnC,EAAA,MAAM,UAAA,GAAa,UAAA,CAAW,MAAA,IAAU,CAAA,IAAK,UAAA,CAAW,MAAM,CAAC,CAAA,KAAM,CAAA,CAAE,KAAA,KAAU,GAAG,CAAA;AACpF,EAAA,MAAM,UAAa,UAAA,GACf;AAAA,IACE,GAAG,WAAW,CAAC,CAAA;AAAA,IACf,KAAA,EAAO,8BAAA;AAAA,IACP,WAAA,EAAa;AAAA,GACf,GACC,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA,KAAM,cAAA,CAAe,IAAA,CAAK,CAAA,CAAE,KAAK,CAAC,CAAA,IAAK,UAAA,CAAW,CAAC,CAAA;AAEzE,EAAA,OAAO,CAAC,GAAG,QAAA,EAAU,OAAO,CAAA;AAC9B;AAMO,IAAM,yBAAA,GAA4B;AAAA,EACvC,OAAA,EAAS,yCAAA;AAAA,EACT,GAAA,EAAK,gDAAA;AAAA,EACL,KAAA,EAAO,SAAA;AAAA,EACP,WAAA,EAAa,0EAAA;AAAA,EACb,IAAA,EAAM,QAAA;AAAA,EACN,QAAA,EAAU,CAAC,OAAA,EAAS,OAAO,CAAA;AAAA,EAC3B,UAAA,EAAY;AAAA,IACV,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,IACxB,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,IACxB,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,IAC9B,QAAQ,EAAE,IAAA,EAAM,CAAC,UAAA,EAAY,UAAA,EAAY,WAAW,CAAA,EAAE;AAAA,IACtD,UAAA,EAAY;AAAA,MACV,IAAA,EAAM,QAAA;AAAA,MACN,QAAA,EAAU,CAAC,MAAA,EAAQ,cAAA,EAAgB,MAAM,CAAA;AAAA,MACzC,UAAA,EAAY;AAAA,QACV,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,WAAW,CAAA,EAAE;AAAA,QACrC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,QACvB,YAAA,EAAc,EAAE,IAAA,EAAM,QAAA,EAAU,WAAW,CAAA,EAAE;AAAA,QAC7C,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,wBAAA;AAAyB;AAC5D;AACF,GACF;AAAA;AAAA,EAEA,EAAA,EAAI,EAAE,UAAA,EAAY,EAAE,MAAA,EAAQ,EAAE,KAAA,EAAO,UAAA,EAAW,EAAE,EAAG,QAAA,EAAU,CAAC,QAAQ,CAAA,EAAE;AAAA,EAC1E,IAAA,EAAM,EAAE,QAAA,EAAU,CAAC,YAAY,CAAA,EAAE;AAAA,EACjC,oBAAA,EAAsB;AACxB;AAwBO,IAAM,cAAA,GAAiB,CAAC,UAAA,EAAY,UAAA,EAAY,WAAW;AAqBlE,IAAM,UAAA,GAAa,qBAAA;AACnB,IAAM,MAAA,GAAS;AAAA,EACb,SAAA;AAAA,EAAW,UAAA;AAAA,EAAY,OAAA;AAAA,EAAS,OAAA;AAAA,EAAS,KAAA;AAAA,EAAO,MAAA;AAAA,EAChD,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,WAAA;AAAA,EAAa,SAAA;AAAA,EAAW,UAAA;AAAA,EAAY;AACxD,CAAA;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAa,cAAA,CAAqC,SAAS,KAAK,CAAA;AAC1F;AAQO,SAAS,oBAAoB,MAAA,EAAsC;AACxE,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,MAAA,KAAW,MAAM,OAAO,IAAA;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,MAAA,CAAO,MAAM,CAAA,SAAU,CAAA,sBAAA,EAAyB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC7F,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,UAAA,EAAY,OAAO,IAAA;AACzC,EAAA,MAAM,KAAK,MAAA,CAAO,UAAA;AAClB,EAAA,IAAI,CAAC,EAAA,IAAM,OAAO,EAAA,KAAO,QAAA,EAAU;AACjC,IAAA,OAAO,gFAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,GAAG,IAAA,KAAS,QAAA,IAAY,CAAC,EAAA,CAAG,IAAA,CAAK,IAAA,EAAK,EAAG,OAAO,6BAAA;AAC3D,EAAA,IAAI,OAAO,GAAG,YAAA,KAAiB,QAAA,IAAY,CAAC,EAAA,CAAG,YAAA,CAAa,MAAK,EAAG;AAClE,IAAA,OAAO,qCAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,EAAA,CAAG,IAAA,KAAS,QAAA,IAAY,CAAC,WAAW,IAAA,CAAK,EAAA,CAAG,IAAI,CAAA,IAAK,OAAO,KAAA,CAAM,IAAA,CAAK,MAAM,EAAA,CAAG,IAAI,CAAC,CAAA,EAAG;AACjG,IAAA,OAAO,gDAAA;AAAA,EACT;AACA,EAAA,IAAI,GAAG,IAAA,KAAS,MAAA,IAAa,OAAO,EAAA,CAAG,IAAA,KAAS,UAAU,OAAO,8BAAA;AACjE,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,iBAAiB,MAAA,EAAgC;AAC/D,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,UAAA,EAAY,OAAO,IAAA;AACzC,EAAA,OAAO,MAAA,CAAO,MAAA,KAAW,UAAA,IAAc,mBAAA,CAAoB,MAAM,CAAA,KAAM,IAAA;AACzE;AAGO,SAAS,kBAAkB,MAAA,EAAgC;AAChE,EAAA,IAAI,MAAA,KAAW,YAAY,OAAO,UAAA;AAClC,EAAA,IAAI,MAAA,KAAW,YAAY,OAAO,iBAAA;AAClC,EAAA,IAAI,MAAA,KAAW,aAAa,OAAO,WAAA;AACnC,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,kBAAkB,EAAA,EAA+B;AAC/D,EAAA,MAAM,CAAC,IAAA,EAAM,KAAA,EAAO,GAAG,CAAA,GAAI,EAAA,CAAG,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,GAAQ,CAAC,IAAI,CAAA,EAAG,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA,EAAA,EAAK,IAAI,KAAK,EAAA,CAAG,IAAA;AAC7E,EAAA,OAAO,CAAC,eAAe,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA,CAAA,EAAI,GAAG,IAAA,EAAM,IAAA,IAAQ,EAAA,CAAG,YAAA,CAAa,MAAK,EAAG,IAAI,EACnF,MAAA,CAAO,OAAO,CAAA,CACd,IAAA,CAAK,IAAI,CAAA;AACd;AAGO,SAAS,iBAAiB,EAAA,EAAqD;AACpF,EAAA,OAAO,CAAA,IAAA,EAAO,EAAA,CAAG,YAAA,CAAa,IAAA,EAAM,CAAA,CAAA;AACtC;AAUO,SAAS,oBAAA,CACd,QAAA,EACA,IAAA,EACA,KAAA,EACK;AACL,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,KAAc,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA,IAAK,EAAE,CAAA,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY;AAC3E,EAAA,MAAM,QAAA,GAAA,CAAY,YAAY,EAAC,EAAG,OAAO,CAAC,CAAA,KAAM,CAAA,EAAG,MAAA,KAAW,UAAU,CAAA;AACxE,EAAA,MAAM,QAAQ,IAAI,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,IAAI,CAAC,CAAA;AACxC,EAAA,MAAM,aAAa,IAAA,IAAQ,EAAC,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,IAAK,CAAA,CAAE,MAAA,KAAW,cAAc,CAAC,KAAA,CAAM,IAAI,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AAChG,EAAA,OAAO,CAAC,GAAG,QAAA,EAAU,GAAG,SAAS,CAAA;AACnC","file":"contract.mjs","sourcesContent":["/**\n * @sonordev/site-kit/portfolio/contract — portfolio proof display policy (v1)\n *\n * Single source of truth for the Lighthouse-KPI collapse policy shared by the\n * content side (signal-api generation) and the render side (agency-site-kit\n * display). Same pattern as the other site-kit contracts:\n *  - agency-site-kit imports these directly (it already depends on site-kit)\n *    from `src/portfolio/curate-proof.ts`, which keeps the render-only\n *    primitives that bind to its section types.\n *  - signal-api keeps a byte-identical inline mirror\n *    (`src/modules/skills/portfolio/portfolio-kpi-policy.util.ts`) guarded by\n *    the shared drift-test vectors in `contract.test.ts`.\n *\n * Why it exists: generated case studies arrived with four \"100/100 Lighthouse X\"\n * KPIs repeated across hero, results cards, and a Performance section. One\n * differentiator repeated a dozen times stops differentiating — collapse the\n * per-category Lighthouse tiles to at most one summary, business outcomes first.\n *\n * It is also the single source of truth for METRIC PROVENANCE (below): the\n * three sources a portfolio number can have, what a client-reported number\n * must carry, and which numbers may headline. sonor-api and signal-api keep\n * byte-identical mirrors of those functions too, guarded by the same vectors.\n */\n\n// The live-frame handshake a case study's device frames listen for: defined\n// with the frame rules in shared/frame.ts, re-exported here because the\n// portfolio renderers are the ones listening.\nexport { FRAME_READY_MESSAGE, isFrameReadyMessage, type FrameReadyMessage } from '../shared/frame'\n\n/** Bump on breaking changes to the collapse policy. */\nexport const PORTFOLIO_CONTRACT_VERSION = 1 as const\n\n/** Minimal KPI shape the policy reads — callers pass their own richer tiles. */\nexport interface KpiLike {\n  label: string\n  value: number\n  description?: string\n}\n\nconst LIGHTHOUSE_RE = /lighthouse/i\n\n/** True when a KPI tile is a per-category Lighthouse score. */\nexport function isLighthouseKpi(kpi: Pick<KpiLike, 'label'>): boolean {\n  return LIGHTHOUSE_RE.test(kpi.label || '')\n}\n\n/**\n * Collapse per-category Lighthouse KPIs to at most one summary tile, business\n * outcomes first. When every category is present at 100 the summary says so;\n * otherwise the Performance category (the one buyers know) represents the set.\n * Fewer than two Lighthouse tiles → returned unchanged.\n */\nexport function curateHeroKpis<T extends KpiLike>(kpis: T[]): T[] {\n  const business = kpis.filter((k) => !isLighthouseKpi(k))\n  const lighthouse = kpis.filter(isLighthouseKpi)\n  if (lighthouse.length <= 1) return kpis\n\n  const allPerfect = lighthouse.length >= 4 && lighthouse.every((k) => k.value === 100)\n  const summary: T = allPerfect\n    ? {\n        ...lighthouse[0],\n        label: 'Lighthouse, all 4 categories',\n        description: 'Perfect scores across performance, SEO, accessibility, and best practices.',\n      }\n    : (lighthouse.find((k) => /performance/i.test(k.label)) ?? lighthouse[0])\n\n  return [...business, summary]\n}\n\n/**\n * Agent-native contract: JSON Schema for the minimal KPI shape, so services and\n * agents can validate tiles before applying the collapse policy.\n */\nexport const PORTFOLIO_KPI_JSON_SCHEMA = {\n  $schema: 'http://json-schema.org/draft-07/schema#',\n  $id: 'https://sonor.io/schemas/portfolio-kpi.v1.json',\n  title: 'KpiLike',\n  description: 'The subset of a portfolio KPI tile the Lighthouse-collapse policy reads.',\n  type: 'object',\n  required: ['label', 'value'],\n  properties: {\n    label: { type: 'string' },\n    value: { type: 'number' },\n    description: { type: 'string' },\n    source: { enum: ['measured', 'reported', 'estimated'] },\n    reportedBy: {\n      type: 'object',\n      required: ['name', 'organization', 'date'],\n      properties: {\n        name: { type: 'string', minLength: 1 },\n        role: { type: 'string' },\n        organization: { type: 'string', minLength: 1 },\n        date: { type: 'string', pattern: '^\\\\d{4}-\\\\d{2}-\\\\d{2}$' },\n      },\n    },\n  },\n  // A reported number is only valid with someone named behind it.\n  if: { properties: { source: { const: 'reported' } }, required: ['source'] },\n  then: { required: ['reportedBy'] },\n  additionalProperties: true,\n} as const\n\n// ─── Metric provenance ──────────────────────────────────────────────────────\n//\n// Where a published portfolio number came from. The three sources are not\n// grades of confidence, they're three different claims, and no surface may\n// let one pass as another:\n//\n//  - measured:  we measured it (Lighthouse, analytics, a count anyone can\n//               re-run against the live site).\n//  - reported:  the client told us, and a named person at the client stands\n//               behind it. Revenue, headcount and signed work can only ever\n//               be this, because we can't see a client's books. It always\n//               carries `reportedBy`, and every surface that shows it says\n//               whose number it is.\n//  - estimated: a reasonable projection. It never headlines anything.\n//\n// Proof is the strongest thing a case study has, and the client's own numbers\n// are usually the strongest proof. Before 'reported' existed they had nowhere\n// honest to go: tagging True Power Systems' \"$1M in signed work from web\n// leads\" as measured would have been false, and as estimated both false and\n// buried (2026-09-25).\n\n/** Every source a portfolio number can have. */\nexport const METRIC_SOURCES = ['measured', 'reported', 'estimated'] as const\nexport type MetricSource = (typeof METRIC_SOURCES)[number]\n\n/** Who stands behind a client-reported number. */\nexport interface MetricAttribution {\n  /** The person, e.g. \"Scott Mann\". */\n  name: string\n  /** Their title, e.g. \"Director of Business Development\". */\n  role?: string\n  /** Where they work: almost always the client, e.g. \"True Power Systems\". */\n  organization: string\n  /** The day they reported it, YYYY-MM-DD. */\n  date: string\n}\n\n/** The provenance fields a portfolio number (a KPI tile, a results card) carries. */\nexport interface SourcedMetric {\n  source?: string | null\n  reportedBy?: unknown\n}\n\nconst ISO_DAY_RE = /^\\d{4}-\\d{2}-\\d{2}$/\nconst MONTHS = [\n  'January', 'February', 'March', 'April', 'May', 'June',\n  'July', 'August', 'September', 'October', 'November', 'December',\n]\n\nexport function isMetricSource(value: unknown): value is MetricSource {\n  return typeof value === 'string' && (METRIC_SOURCES as readonly string[]).includes(value)\n}\n\n/**\n * What's wrong with a number's provenance, or null when nothing is. A missing\n * source is legacy data and passes (displays show it unlabelled, and it can't\n * headline); an unknown source, or a reported number nobody is named behind,\n * does not.\n */\nexport function metricSourceProblem(metric: SourcedMetric): string | null {\n  if (metric.source === undefined || metric.source === null) return null\n  if (!isMetricSource(metric.source)) return `source must be one of ${METRIC_SOURCES.join(', ')}`\n  if (metric.source !== 'reported') return null\n  const by = metric.reportedBy as Partial<MetricAttribution> | null | undefined\n  if (!by || typeof by !== 'object') {\n    return 'a reported number needs reportedBy: who reported it, where they work, and when'\n  }\n  if (typeof by.name !== 'string' || !by.name.trim()) return 'reportedBy.name is required'\n  if (typeof by.organization !== 'string' || !by.organization.trim()) {\n    return 'reportedBy.organization is required'\n  }\n  if (typeof by.date !== 'string' || !ISO_DAY_RE.test(by.date) || Number.isNaN(Date.parse(by.date))) {\n    return 'reportedBy.date must be a real day, YYYY-MM-DD'\n  }\n  if (by.role !== undefined && typeof by.role !== 'string') return 'reportedBy.role must be text'\n  return null\n}\n\n/**\n * May this number lead: a hero tile, a gallery card, a carousel, a social\n * post? Measured, or reported with someone named behind it. Never an\n * estimate, and never an unlabelled legacy number.\n */\nexport function isHeadlineMetric(metric: SourcedMetric): boolean {\n  if (metric.source === 'measured') return true\n  return metric.source === 'reported' && metricSourceProblem(metric) === null\n}\n\n/** The badge a display shows, or null for a missing or unknown source (show nothing rather than guess). */\nexport function metricSourceLabel(source: unknown): string | null {\n  if (source === 'measured') return 'Measured'\n  if (source === 'reported') return 'Client-reported'\n  if (source === 'estimated') return 'Estimated'\n  return null\n}\n\n/**\n * The full credit: \"Reported by Scott Mann, Director of Business Development,\n * True Power Systems, September 25, 2026\". The date is read as a plain day,\n * never through a time zone, so it can't slip to the day before.\n */\nexport function formatAttribution(by: MetricAttribution): string {\n  const [year, month, day] = by.date.split('-').map(Number)\n  const when = MONTHS[month - 1] ? `${MONTHS[month - 1]} ${day}, ${year}` : by.date\n  return [`Reported by ${by.name.trim()}`, by.role?.trim(), by.organization.trim(), when]\n    .filter(Boolean)\n    .join(', ')\n}\n\n/** The credit for a tight space (a card, a carousel tile): \"per True Power Systems\". */\nexport function shortAttribution(by: Pick<MetricAttribution, 'organization'>): string {\n  return `per ${by.organization.trim()}`\n}\n\n/**\n * Carry a person's reported numbers through a regeneration. The generator can\n * only write measured or estimated numbers (it can't see a client's books, and\n * any 'reported' tag it writes is dropped here), so without this a rewrite of\n * the hero or the results would silently erase what a client told us.\n * Reported entries from `previous` lead, in their order; `next` fills in\n * behind them, minus anything sharing a key with a reported entry.\n */\nexport function carryReportedMetrics<T extends SourcedMetric>(\n  previous: readonly T[] | null | undefined,\n  next: readonly T[] | null | undefined,\n  keyOf: (metric: T) => string,\n): T[] {\n  const norm = (metric: T) => String(keyOf(metric) ?? '').trim().toLowerCase()\n  const reported = (previous ?? []).filter((m) => m?.source === 'reported')\n  const taken = new Set(reported.map(norm))\n  const generated = (next ?? []).filter((m) => m && m.source !== 'reported' && !taken.has(norm(m)))\n  return [...reported, ...generated]\n}\n"]}

package/dist/proxy/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAA;AACrB,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAA;AAO1B,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAA;IACf,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IACpC,6CAA6C;IAC7C,eAAe,CAAC,EAAE,OAAO,GAAG,qBAAqB,CAAA;IACjD;;;;OAIG;IACH,aAAa,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAA;IAC3C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,cAAc,CAAA;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,CACP,OAAO,EAAE,WAAW,KACjB,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAA;IACjE;;;OAGG;IACH,KAAK,CAAC,EAAE,CACN,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,YAAY,KACnB,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,kBAAkB,aAe1C,WAAW,KACnB,OAAO,CAAC,YAAY,CAAC,CA+FzB;AAWD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;IACzB,OAAO;CAGR,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,oBAAc,CAAA;AAE3C,4CAA4C;AAC5C,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAA"}

package/dist/proxy/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/proxy/segment.ts","../../src/proxy/index.ts"],"names":["buildSecurityHeaders","buildAiDiscoveryHeaders","handleManagedRedirects","SK_PATH_HEADER","NextResponse","wantsLlmsDiscoveryLink","uuid"],"mappings":";;;;;;;;;;;;;;AAyBA,IAAM,YAAA,GAAe,CAAC,KAAA,EAAO,KAAA,EAAO,QAAQ,YAAA,EAAc,aAAA,EAAe,SAAA,EAAW,KAAA,EAAO,QAAQ,CAAA;AACnG,IAAM,cAAA,GAAiB,CAAC,QAAA,EAAU,cAAA,EAAgB,gBAAgB,IAAI,CAAA;AACtE,IAAM,YAAA,GAAe;AAAA,EACnB,WAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,YAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AACA,IAAM,YAAA,GAAe,CAAC,SAAA,EAAW,OAAA,EAAS,eAAe,QAAA,EAAU,SAAA,EAAW,QAAA,EAAU,QAAA,EAAU,SAAS,CAAA;AAMpG,SAAS,qBAAA,CACd,SACA,IAAA,EACgB;AAChB,EAAA,MAAM,MAAA,GAAS,QAAQ,OAAA,CAAQ,YAAA;AAC/B,EAAA,MAAM,MAAA,GAAA,CAAU,OAAO,GAAA,CAAI,YAAY,KAAK,EAAA,EAAI,WAAA,GAAc,IAAA,EAAK;AACnE,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAE1C,EAAA,IAAI,MAAA,GAAwB,QAAA;AAE5B,EAAA,IAAI,YAAA,CAAa,QAAA,CAAS,MAAM,CAAA,EAAG;AACjC,IAAA,MAAA,GAAS,MAAA;AAAA,EACX,CAAA,MAAA,IAAW,cAAA,CAAe,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1C,IAAA,MAAA,GAAS,QAAA;AAAA,EACX,CAAA,MAAA,IAAW,WAAW,SAAA,EAAW;AAC/B,IAAA,MAAA,GAAS,SAAA;AAAA,EACX,CAAA,MAAA,IAAW,WAAW,UAAA,EAAY;AAChC,IAAA,MAAA,GAAS,UAAA;AAAA,EACX,CAAA,MAAA,IAAW,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,IAAK,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA,IAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG;AAElF,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA,EAAG,MAAA,GAAS,MAAA;AAAA,SAAA,IACzB,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,MAAA,GAAS,QAAA;AAAA,SACnC,MAAA,GAAS,UAAA;AAAA,EAChB,CAAA,MAAO;AAEL,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,IAAK,EAAA;AAC9C,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,KAAK,WAAA,EAAY;AAC3C,QAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,WAAA,EAAY;AAClD,QAAA,IAAI,IAAA,IAAQ,SAAS,QAAA,EAAU;AAC7B,UAAA,IAAI,YAAA,CAAa,KAAK,CAAC,CAAA,KAAM,KAAK,QAAA,CAAS,CAAC,CAAC,CAAA,EAAG,MAAA,GAAS,SAAA;AAAA,eAAA,IAChD,YAAA,CAAa,KAAK,CAAC,CAAA,KAAM,KAAK,QAAA,CAAS,CAAC,CAAC,CAAA,EAAG,MAAA,GAAS,QAAA;AAAA,eACzD,MAAA,GAAS,UAAA;AAAA,QAChB;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,IAAA,CAAK,gBAAA,GAAmB,WAAA,GAAc,KAAA;AAAA,IACnD,MAAA;AAAA,IACA,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;AAOO,SAAS,cAAc,GAAA,EAA6B;AACzD,EAAA,MAAM,QAAA,GAAA,CAAY,GAAA,CAAI,QAAA,IAAY,EAAA,EAAI,OAAA,CAAQ,mBAAmB,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChF,EAAA,OAAO,GAAG,GAAA,CAAI,WAAW,IAAI,GAAA,CAAI,MAAM,IAAI,QAAQ,CAAA,CAAA;AACrD;AAGO,SAAS,cAAc,KAAA,EAAyD;AACrF,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,CAAC,WAAA,EAAa,MAAA,EAAQ,QAAQ,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AACvD,EAAA,IAAI,WAAA,KAAgB,KAAA,IAAS,WAAA,KAAgB,WAAA,EAAa,OAAO,IAAA;AACjE,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,MAAA,EAAS,CAAC,MAAA,EAAQ,SAAA,EAAW,QAAA,EAAU,UAAA,EAAY,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,GAAS,QAAA;AAAA,IACzF,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;;;ACqCO,SAAS,YAAY,MAAA,EAA6B;AACvD,EAAA,MAAM,eAAA,GAAkBA,qCAAA;AAAA,IACtB,MAAA,EAAQ;AAAA,GACV;AAGA,EAAA,MAAM,gBAAA,GACJ,MAAA,EAAQ,aAAA,GACJC,wCAAA,CAAwB;AAAA,IACtB,OAAA,EAAS,OAAO,aAAA,CAAc,OAAA;AAAA,IAC9B,QAAA,EAAU,OAAO,aAAA,CAAc;AAAA,GAChC,IACD,EAAC;AAEP,EAAA,OAAO,eAAe,MACpB,OAAA,EACuB;AAEvB,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,MAAM,aAAA,GAAgB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACjD,MAAA,IAAI,aAAA,EAAe;AAEjB,QAAA,YAAA,CAAa,eAAe,eAAe,CAAA;AAC3C,QAAA,OAAO,aAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,EAAQ,cAAc,KAAA,EAAO;AAC/B,MAAA,MAAM,iBACJ,OAAO,MAAA,EAAQ,cAAc,QAAA,GACzB,MAAA,CAAO,YACP,EAAC;AAEP,MAAA,MAAM,WAAW,MAAMC,uCAAA;AAAA,QACrB,OAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,QAAA,EAAU;AAEZ,QAAA,YAAA,CAAa,UAAU,eAAe,CAAA;AACtC,QAAA,OAAO,QAAA;AAAA,MACT;AAAA,IACF;AAMA,IAAA,MAAM,cAAA,GAAiB,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAClD,IAAA,cAAA,CAAe,GAAA;AAAA,MACbC,+BAAA;AAAA,MACA,OAAA,CAAQ,OAAA,CAAQ,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ;AAAA,KAC7C;AACA,IAAA,IAAI,QAAA,GAAWC,oBAAa,IAAA,CAAK,EAAE,SAAS,EAAE,OAAA,EAAS,cAAA,EAAe,EAAG,CAAA;AAGzE,IAAA,YAAA,CAAa,UAAU,eAAe,CAAA;AAKtC,IAAA,IACE,OAAO,IAAA,CAAK,gBAAgB,CAAA,CAAE,MAAA,GAAS,KACvCC,uCAAA,CAAuB;AAAA,MACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ,QAAA;AAAA,MAC1B,MAAA,EAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAAA,MACpC,GAAA,EAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK;AAAA,KAC/B,CAAA,EACD;AACA,MAAA,YAAA,CAAa,UAAU,gBAAgB,CAAA;AAAA,IACzC;AAKA,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,QACJ,OAAO,MAAA,CAAO,aAAa,QAAA,GAAW,MAAA,CAAO,WAAW,EAAC;AAC3D,MAAA,MAAM,mBAAmB,CAAC,CAAC,QAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG,KAAA;AAC3D,MAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,QAAA,MAAM,UAAA,GAAa,MAAM,gBAAA,IAAoB,GAAA;AAC7C,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAWC,qBAAA,EAAK,EAAG;AAAA,UACtC,MAAA,EAAQ,UAAA,GAAa,EAAA,GAAK,EAAA,GAAK,EAAA;AAAA,UAC/B,IAAA,EAAM,GAAA;AAAA,UACN,QAAA,EAAU,KAAA;AAAA,UACV,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AACA,MAAA,IAAI,KAAA,CAAM,YAAY,KAAA,EAAO;AAC3B,QAAA,MAAM,OAAA,GAAU,aAAA;AAAA,UACd,qBAAA,CAAsB,OAAA,EAAS,EAAE,gBAAA,EAAkB;AAAA,SACrD;AACA,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,OAAA,EAAS;AAAA;AAAA,UAEvC,QAAQ,EAAA,GAAK,EAAA;AAAA,UACb,IAAA,EAAM,GAAA;AAAA,UACN,QAAA,EAAU,KAAA;AAAA,UACV,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AAAA,IACF;AAGA,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,QAAA,GAAW,MAAM,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,QAAQ,CAAA;AAAA,IACjD;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAA;AACF;AAEA,SAAS,YAAA,CACP,UACA,OAAA,EACM;AACN,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACjC;AACF;AAUO,IAAM,cAAA,GAAiB;AAAA,EAC5B,OAAA,EAAS;AAAA,IACP;AAAA;AAEJ;AASO,IAAM,gBAAA,GAAmB","file":"index.js","sourcesContent":["/**\n * @sonordev/site-kit/proxy — visitor segment resolution (the \"one edge pass\").\n *\n * Pure, edge-runtime-safe helpers that classify a request into a coarse visitor\n * segment (new-vs-returning + marketing source + campaign) from the URL's UTM\n * params and the referrer. The middleware writes the result to the `_sk_seg`\n * cookie so server-rendered slots / personalization can vary by segment WITHOUT\n * each one re-parsing the request. Resolved once, at the edge.\n *\n * Kept side-effect-free (no NextResponse, no cookie writes) so it is trivially\n * unit-testable and reusable.\n */\nimport type { NextRequest } from 'next/server'\n\nexport type SegmentSource = 'paid' | 'organic' | 'social' | 'referral' | 'direct'\n\nexport interface VisitorSegment {\n  /** `new` on the first visit (no prior `_sk_vid` cookie), else `returning`. */\n  visitorType: 'new' | 'returning'\n  /** Marketing source bucket derived from UTM medium/source, then referrer. */\n  source: SegmentSource\n  /** `utm_campaign`, if present (sanitized when encoded). */\n  campaign: string | null\n}\n\nconst PAID_MEDIUMS = ['cpc', 'ppc', 'paid', 'paidsearch', 'paid-search', 'display', 'cpm', 'banner']\nconst SOCIAL_MEDIUMS = ['social', 'social-media', 'social_media', 'sm']\nconst SOCIAL_HOSTS = [\n  'facebook.',\n  'instagram.',\n  'linkedin.',\n  't.co',\n  'twitter.',\n  'x.com',\n  'pinterest.',\n  'tiktok.',\n  'youtube.',\n  'reddit.',\n]\nconst SEARCH_HOSTS = ['google.', 'bing.', 'duckduckgo.', 'yahoo.', 'ecosia.', 'brave.', 'baidu.', 'yandex.']\n\n/**\n * Classify `request` into a {@link VisitorSegment}. UTM params win over the\n * referrer; a same-host referrer is ignored (internal navigation, not a source).\n */\nexport function resolveVisitorSegment(\n  request: NextRequest,\n  opts: { hadVisitorCookie: boolean },\n): VisitorSegment {\n  const params = request.nextUrl.searchParams\n  const medium = (params.get('utm_medium') || '').toLowerCase().trim()\n  const campaign = params.get('utm_campaign')\n\n  let source: SegmentSource = 'direct'\n\n  if (PAID_MEDIUMS.includes(medium)) {\n    source = 'paid'\n  } else if (SOCIAL_MEDIUMS.includes(medium)) {\n    source = 'social'\n  } else if (medium === 'organic') {\n    source = 'organic'\n  } else if (medium === 'referral') {\n    source = 'referral'\n  } else if (params.get('utm_source') || params.get('gclid') || params.get('fbclid')) {\n    // A tagged link with a non-standard medium: gclid => paid Google, fbclid => social.\n    if (params.get('gclid')) source = 'paid'\n    else if (params.get('fbclid')) source = 'social'\n    else source = 'referral'\n  } else {\n    // No campaign tagging — fall back to the referrer host.\n    const ref = request.headers.get('referer') || ''\n    if (ref) {\n      try {\n        const host = new URL(ref).host.toLowerCase()\n        const selfHost = request.nextUrl.host.toLowerCase()\n        if (host && host !== selfHost) {\n          if (SEARCH_HOSTS.some((h) => host.includes(h))) source = 'organic'\n          else if (SOCIAL_HOSTS.some((h) => host.includes(h))) source = 'social'\n          else source = 'referral'\n        }\n      } catch {\n        /* malformed referer — stays 'direct' */\n      }\n    }\n  }\n\n  return {\n    visitorType: opts.hadVisitorCookie ? 'returning' : 'new',\n    source,\n    campaign: campaign || null,\n  }\n}\n\n/**\n * Compact, cookie-safe encoding: `\"<visitorType>|<source>|<campaign>\"`, e.g.\n * `\"new|paid|spring_sale\"`. Campaign is sanitized to `[A-Za-z0-9_-]` and capped.\n * Decode with {@link decodeSegment}.\n */\nexport function encodeSegment(seg: VisitorSegment): string {\n  const campaign = (seg.campaign || '').replace(/[^a-zA-Z0-9_-]/g, '').slice(0, 40)\n  return `${seg.visitorType}|${seg.source}|${campaign}`\n}\n\n/** Parse a `_sk_seg` cookie value produced by {@link encodeSegment}. */\nexport function decodeSegment(value: string | undefined | null): VisitorSegment | null {\n  if (!value) return null\n  const [visitorType, source, campaign] = value.split('|')\n  if (visitorType !== 'new' && visitorType !== 'returning') return null\n  return {\n    visitorType,\n    source: (['paid', 'organic', 'social', 'referral', 'direct'].includes(source) ? source : 'direct') as SegmentSource,\n    campaign: campaign || null,\n  }\n}\n","/**\n * @sonordev/site-kit/proxy\n *\n * Composable Next.js Proxy factory (Next 16's replacement for middleware).\n * Also served on the deprecated `/middleware` subpath. Handles:\n * - Security headers (CSP frame-ancestors, nosniff, referrer/permissions\n *   policy — deliberately NO X-Frame-Options; see securityHeaders.ts)\n * - Portal-managed redirects (rule list cached in memory, see the\n *   `redirects` option below)\n * - Stamps `x-sk-path` on the request (read by the deprecated not-found\n *   resolver; kept so sites still using it don't break)\n * - Optional before/after hooks for custom logic\n *\n * @example\n * ```ts\n * // proxy.ts — entire file\n * import { createProxy } from '@sonordev/site-kit/proxy'\n *\n * export default createProxy()\n *\n * // Inlined on purpose: Next statically parses `config.matcher` at build\n * // time and REJECTS an imported value (Turbopack build error). Keep in\n * // sync with siteKitMatcher below.\n * export const config = {\n *   matcher: [\n *     '/((?!_next/static|_next/image|favicon\\\\.ico|.*\\\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)',\n *   ],\n * }\n * ```\n *\n * Next 16 notes: `middleware.ts` is deprecated (codemod:\n * `npx @next/codemod@canary middleware-to-proxy .`), Proxy defaults to the\n * Node.js runtime, and the `runtime` config option is unavailable in proxy\n * files — setting it throws at build time.\n *\n * @example With custom hooks:\n * ```ts\n * export default createProxy({\n *   before: (req) => {\n *     // Custom auth check, etc.\n *   },\n * })\n * ```\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport {\n  handleManagedRedirects,\n  SK_PATH_HEADER,\n  type RedirectConfig,\n} from '../redirects'\nimport {\n  buildSecurityHeaders,\n  type SecurityHeadersConfig,\n} from './securityHeaders'\nimport { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../llms/discovery-headers'\nimport { resolveVisitorSegment, encodeSegment } from './segment'\n// Single source of truth for v4 UUIDs — Web Crypto in the edge runtime, with a\n// non-throwing fallback everywhere else. Do NOT re-fork ID generation here.\nimport { uuid } from '../shared/uuid'\n\nexport type { SecurityHeadersConfig } from './securityHeaders'\nexport { DEFAULT_FRAME_ANCESTORS } from './securityHeaders'\nexport {\n  resolveVisitorSegment,\n  encodeSegment,\n  decodeSegment,\n  type VisitorSegment,\n  type SegmentSource,\n} from './segment'\n\nexport interface IdentityConfig {\n  /**\n   * Also resolve + persist a coarse visitor segment (new-vs-returning + source\n   * + campaign) into the `_sk_seg` cookie, for segment-aware slots /\n   * personalization. Default: true (when identity is enabled).\n   */\n  segment?: boolean\n  /** Days the `_sk_vid` visitor cookie persists. Default: 730 (~2 years). */\n  cookieMaxAgeDays?: number\n}\n\nexport interface LlmsDiscoveryConfig {\n  /** Canonical site origin, e.g. `https://example.com` */\n  siteUrl: string\n  /** Path to llms.txt (default `/llms.txt`) */\n  llmsPath?: string\n}\n\nexport interface SiteKitProxyConfig {\n  /**\n   * Portal-managed redirects, checked before each page render. Default: true,\n   * and the recommended setting.\n   *\n   * The rule list is cached in memory for `cacheSeconds` (default 300) per\n   * instance, and a fetch is bounded at 300ms with a 30s failure cooldown,\n   * so page loads rarely wait on it. Set `false` only on a site that uses no\n   * Sonor-managed redirects.\n   *\n   * Don't move redirects into app/not-found.tsx with\n   * `resolveManagedRedirect()`. Next renders the root not-found boundary\n   * inside every page, and the resolver's headers() call opts every route\n   * into dynamic rendering (verified on a Next 16 build: every ○ route became\n   * ƒ). That resolver is deprecated.\n   */\n  redirects?: boolean | RedirectConfig\n  /** Enable security headers. Default: true */\n  securityHeaders?: boolean | SecurityHeadersConfig\n  /**\n   * Opt-in: inject `Link: <...>; rel=\"describedby\"` header on HTML responses\n   * pointing to /llms.txt for AI crawler discovery (RFC 8288).\n   * Preferred over visible footer links.\n   */\n  llmsDiscovery?: LlmsDiscoveryConfig | false\n  /**\n   * Opt-in EDGE IDENTITY pass. When enabled, the middleware ensures a\n   * first-party `_sk_vid` visitor cookie exists (server-authoritative id) and\n   * resolves the visitor segment into `_sk_seg`, so server-rendered slots and\n   * personalization can read identity + segment without re-parsing the request.\n   * Purely additive — it only writes cookies, never changes the rendered HTML,\n   * so it is LCP/static-safe. Default: OFF (sites opt in for 3.0 personalization).\n   *\n   * NOTE: to make these the SAME id the client uses, the shared identity helper\n   * must read `_sk_vid` cookie-first (a follow-on change validated with a live\n   * preview); until then the cookie is the server-side mirror.\n   */\n  identity?: boolean | IdentityConfig\n  /**\n   * Hook that runs BEFORE redirect check.\n   * Return a NextResponse to short-circuit, or undefined to continue.\n   */\n  before?: (\n    request: NextRequest,\n  ) => NextResponse | undefined | Promise<NextResponse | undefined>\n  /**\n   * Hook that runs AFTER all processing.\n   * Receives the response that will be sent — mutate headers, etc.\n   */\n  after?: (\n    request: NextRequest,\n    response: NextResponse,\n  ) => NextResponse | Promise<NextResponse>\n}\n\n/**\n * Create a fully-featured Next.js Proxy function.\n *\n * With zero config this handles redirects + security headers automatically.\n * Export it from `proxy.ts` at the project root (or `src/`).\n */\nexport function createProxy(config?: SiteKitProxyConfig) {\n  const securityHeaders = buildSecurityHeaders(\n    config?.securityHeaders,\n  )\n\n  // Pre-compute discovery headers (static per middleware instance)\n  const discoveryHeaders: Record<string, string> =\n    config?.llmsDiscovery\n      ? buildAiDiscoveryHeaders({\n          siteUrl: config.llmsDiscovery.siteUrl,\n          llmsPath: config.llmsDiscovery.llmsPath,\n        })\n      : {}\n\n  return async function proxy(\n    request: NextRequest,\n  ): Promise<NextResponse> {\n    // 1. Run user's 'before' hook\n    if (config?.before) {\n      const earlyResponse = await config.before(request)\n      if (earlyResponse) {\n        // Apply security headers even to early responses\n        applyHeaders(earlyResponse, securityHeaders)\n        return earlyResponse\n      }\n    }\n\n    // 2. Check Portal-managed redirects (unless disabled)\n    if (config?.redirects !== false) {\n      const redirectConfig: RedirectConfig =\n        typeof config?.redirects === 'object'\n          ? config.redirects\n          : {}\n\n      const redirect = await handleManagedRedirects(\n        request,\n        redirectConfig,\n      )\n      if (redirect) {\n        // Redirects get security headers too\n        applyHeaders(redirect, securityHeaders)\n        return redirect\n      }\n    }\n\n    // 3. Build the pass-through response. Stamp the requested\n    // pathname+search onto the REQUEST for the deprecated not-found\n    // resolver, so sites still calling it keep working.\n    // Pure header write — no fetch, static-safe.\n    const requestHeaders = new Headers(request.headers)\n    requestHeaders.set(\n      SK_PATH_HEADER,\n      request.nextUrl.pathname + request.nextUrl.search,\n    )\n    let response = NextResponse.next({ request: { headers: requestHeaders } })\n\n    // 4. Apply security headers\n    applyHeaders(response, securityHeaders)\n\n    // 5. Apply the AI discovery Link header to anything that could be a page.\n    // A request with no Accept header counts: that's how curl and many\n    // crawlers ask, and they're who the header is for.\n    if (\n      Object.keys(discoveryHeaders).length > 0 &&\n      wantsLlmsDiscoveryLink({\n        method: request.method,\n        pathname: request.nextUrl.pathname,\n        accept: request.headers.get('accept'),\n        rsc: request.headers.get('rsc'),\n      })\n    ) {\n      applyHeaders(response, discoveryHeaders)\n    }\n\n    // 5b. Edge identity pass (opt-in). Ensure a first-party `_sk_vid` visitor\n    // cookie exists and resolve the visitor segment into `_sk_seg`. Additive:\n    // only writes cookies, never changes the rendered HTML (LCP/static-safe).\n    if (config?.identity) {\n      const idCfg: IdentityConfig =\n        typeof config.identity === 'object' ? config.identity : {}\n      const hadVisitorCookie = !!request.cookies.get('_sk_vid')?.value\n      if (!hadVisitorCookie) {\n        const maxAgeDays = idCfg.cookieMaxAgeDays ?? 730\n        response.cookies.set('_sk_vid', uuid(), {\n          maxAge: maxAgeDays * 24 * 60 * 60,\n          path: '/',\n          sameSite: 'lax',\n          secure: true,\n        })\n      }\n      if (idCfg.segment !== false) {\n        const segment = encodeSegment(\n          resolveVisitorSegment(request, { hadVisitorCookie }),\n        )\n        response.cookies.set('_sk_seg', segment, {\n          // Session-ish: a fresh campaign / source on a later visit re-segments.\n          maxAge: 30 * 60,\n          path: '/',\n          sameSite: 'lax',\n          secure: true,\n        })\n      }\n    }\n\n    // 6. Run user's 'after' hook\n    if (config?.after) {\n      response = await config.after(request, response)\n    }\n\n    return response\n  }\n}\n\nfunction applyHeaders(\n  response: NextResponse,\n  headers: Record<string, string>,\n): void {\n  for (const [key, value] of Object.entries(headers)) {\n    response.headers.set(key, value)\n  }\n}\n\n/**\n * REFERENCE VALUE ONLY — copy the array into your proxy.ts, do not export it.\n *\n * `export const config = siteKitMatcher` is a BUILD ERROR on Next 16:\n * `config.matcher` must be statically analyzable and Turbopack rejects any\n * imported value. This constant exists so the canonical pattern lives in one\n * place (the scaffold, docs, and tests read it) — inline its contents.\n */\nexport const siteKitMatcher = {\n  matcher: [\n    '/((?!_next/static|_next/image|favicon\\\\.ico|.*\\\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)',\n  ],\n}\n\n/**\n * @deprecated Use `createProxy`. Next 16 renamed the `middleware` file\n * convention to `proxy` (`npx @next/codemod@canary middleware-to-proxy .`);\n * the old name still builds but warns, and the factory is named for the file\n * it is exported from. Kept indefinitely — 100+ fleet sites import it — but\n * new code should say `createProxy` from `@sonordev/site-kit/proxy`.\n */\nexport const createMiddleware = createProxy\n\n/** @deprecated Use `SiteKitProxyConfig`. */\nexport type SiteKitMiddlewareConfig = SiteKitProxyConfig\n"]}

package/dist/proxy/index.mjs

@@ -1,170 +0,0 @@
-import { buildSecurityHeaders } from '../chunk-R5F2JQVX.mjs';
-export { DEFAULT_FRAME_ANCESTORS } from '../chunk-R5F2JQVX.mjs';
-import { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-DA7IANFG.mjs';
-import { handleManagedRedirects, SK_PATH_HEADER } from '../chunk-UO6KTHBQ.mjs';
-import '../chunk-B22WSN4L.mjs';
-import '../chunk-AS2HUIDW.mjs';
-import '../chunk-KZVSB5WE.mjs';
-import '../chunk-ZN4HBK5C.mjs';
-import { uuid } from '../chunk-6EDVCUAG.mjs';
-import '../chunk-BEXTDHO4.mjs';
-import { NextResponse } from 'next/server';
-
-// src/proxy/segment.ts
-var PAID_MEDIUMS = ["cpc", "ppc", "paid", "paidsearch", "paid-search", "display", "cpm", "banner"];
-var SOCIAL_MEDIUMS = ["social", "social-media", "social_media", "sm"];
-var SOCIAL_HOSTS = [
-  "facebook.",
-  "instagram.",
-  "linkedin.",
-  "t.co",
-  "twitter.",
-  "x.com",
-  "pinterest.",
-  "tiktok.",
-  "youtube.",
-  "reddit."
-];
-var SEARCH_HOSTS = ["google.", "bing.", "duckduckgo.", "yahoo.", "ecosia.", "brave.", "baidu.", "yandex."];
-function resolveVisitorSegment(request, opts) {
-  const params = request.nextUrl.searchParams;
-  const medium = (params.get("utm_medium") || "").toLowerCase().trim();
-  const campaign = params.get("utm_campaign");
-  let source = "direct";
-  if (PAID_MEDIUMS.includes(medium)) {
-    source = "paid";
-  } else if (SOCIAL_MEDIUMS.includes(medium)) {
-    source = "social";
-  } else if (medium === "organic") {
-    source = "organic";
-  } else if (medium === "referral") {
-    source = "referral";
-  } else if (params.get("utm_source") || params.get("gclid") || params.get("fbclid")) {
-    if (params.get("gclid")) source = "paid";
-    else if (params.get("fbclid")) source = "social";
-    else source = "referral";
-  } else {
-    const ref = request.headers.get("referer") || "";
-    if (ref) {
-      try {
-        const host = new URL(ref).host.toLowerCase();
-        const selfHost = request.nextUrl.host.toLowerCase();
-        if (host && host !== selfHost) {
-          if (SEARCH_HOSTS.some((h) => host.includes(h))) source = "organic";
-          else if (SOCIAL_HOSTS.some((h) => host.includes(h))) source = "social";
-          else source = "referral";
-        }
-      } catch {
-      }
-    }
-  }
-  return {
-    visitorType: opts.hadVisitorCookie ? "returning" : "new",
-    source,
-    campaign: campaign || null
-  };
-}
-function encodeSegment(seg) {
-  const campaign = (seg.campaign || "").replace(/[^a-zA-Z0-9_-]/g, "").slice(0, 40);
-  return `${seg.visitorType}|${seg.source}|${campaign}`;
-}
-function decodeSegment(value) {
-  if (!value) return null;
-  const [visitorType, source, campaign] = value.split("|");
-  if (visitorType !== "new" && visitorType !== "returning") return null;
-  return {
-    visitorType,
-    source: ["paid", "organic", "social", "referral", "direct"].includes(source) ? source : "direct",
-    campaign: campaign || null
-  };
-}
-
-// src/proxy/index.ts
-function createProxy(config) {
-  const securityHeaders = buildSecurityHeaders(
-    config?.securityHeaders
-  );
-  const discoveryHeaders = config?.llmsDiscovery ? buildAiDiscoveryHeaders({
-    siteUrl: config.llmsDiscovery.siteUrl,
-    llmsPath: config.llmsDiscovery.llmsPath
-  }) : {};
-  return async function proxy(request) {
-    if (config?.before) {
-      const earlyResponse = await config.before(request);
-      if (earlyResponse) {
-        applyHeaders(earlyResponse, securityHeaders);
-        return earlyResponse;
-      }
-    }
-    if (config?.redirects !== false) {
-      const redirectConfig = typeof config?.redirects === "object" ? config.redirects : {};
-      const redirect = await handleManagedRedirects(
-        request,
-        redirectConfig
-      );
-      if (redirect) {
-        applyHeaders(redirect, securityHeaders);
-        return redirect;
-      }
-    }
-    const requestHeaders = new Headers(request.headers);
-    requestHeaders.set(
-      SK_PATH_HEADER,
-      request.nextUrl.pathname + request.nextUrl.search
-    );
-    let response = NextResponse.next({ request: { headers: requestHeaders } });
-    applyHeaders(response, securityHeaders);
-    if (Object.keys(discoveryHeaders).length > 0 && wantsLlmsDiscoveryLink({
-      method: request.method,
-      pathname: request.nextUrl.pathname,
-      accept: request.headers.get("accept"),
-      rsc: request.headers.get("rsc")
-    })) {
-      applyHeaders(response, discoveryHeaders);
-    }
-    if (config?.identity) {
-      const idCfg = typeof config.identity === "object" ? config.identity : {};
-      const hadVisitorCookie = !!request.cookies.get("_sk_vid")?.value;
-      if (!hadVisitorCookie) {
-        const maxAgeDays = idCfg.cookieMaxAgeDays ?? 730;
-        response.cookies.set("_sk_vid", uuid(), {
-          maxAge: maxAgeDays * 24 * 60 * 60,
-          path: "/",
-          sameSite: "lax",
-          secure: true
-        });
-      }
-      if (idCfg.segment !== false) {
-        const segment = encodeSegment(
-          resolveVisitorSegment(request, { hadVisitorCookie })
-        );
-        response.cookies.set("_sk_seg", segment, {
-          // Session-ish: a fresh campaign / source on a later visit re-segments.
-          maxAge: 30 * 60,
-          path: "/",
-          sameSite: "lax",
-          secure: true
-        });
-      }
-    }
-    if (config?.after) {
-      response = await config.after(request, response);
-    }
-    return response;
-  };
-}
-function applyHeaders(response, headers) {
-  for (const [key, value] of Object.entries(headers)) {
-    response.headers.set(key, value);
-  }
-}
-var siteKitMatcher = {
-  matcher: [
-    "/((?!_next/static|_next/image|favicon\\.ico|.*\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)"
-  ]
-};
-var createMiddleware = createProxy;
-
-export { createMiddleware, createProxy, decodeSegment, encodeSegment, resolveVisitorSegment, siteKitMatcher };
-//# sourceMappingURL=index.mjs.map
-//# sourceMappingURL=index.mjs.map

package/dist/proxy/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/proxy/segment.ts","../../src/proxy/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAyBA,IAAM,YAAA,GAAe,CAAC,KAAA,EAAO,KAAA,EAAO,QAAQ,YAAA,EAAc,aAAA,EAAe,SAAA,EAAW,KAAA,EAAO,QAAQ,CAAA;AACnG,IAAM,cAAA,GAAiB,CAAC,QAAA,EAAU,cAAA,EAAgB,gBAAgB,IAAI,CAAA;AACtE,IAAM,YAAA,GAAe;AAAA,EACnB,WAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,YAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AACA,IAAM,YAAA,GAAe,CAAC,SAAA,EAAW,OAAA,EAAS,eAAe,QAAA,EAAU,SAAA,EAAW,QAAA,EAAU,QAAA,EAAU,SAAS,CAAA;AAMpG,SAAS,qBAAA,CACd,SACA,IAAA,EACgB;AAChB,EAAA,MAAM,MAAA,GAAS,QAAQ,OAAA,CAAQ,YAAA;AAC/B,EAAA,MAAM,MAAA,GAAA,CAAU,OAAO,GAAA,CAAI,YAAY,KAAK,EAAA,EAAI,WAAA,GAAc,IAAA,EAAK;AACnE,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA;AAE1C,EAAA,IAAI,MAAA,GAAwB,QAAA;AAE5B,EAAA,IAAI,YAAA,CAAa,QAAA,CAAS,MAAM,CAAA,EAAG;AACjC,IAAA,MAAA,GAAS,MAAA;AAAA,EACX,CAAA,MAAA,IAAW,cAAA,CAAe,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1C,IAAA,MAAA,GAAS,QAAA;AAAA,EACX,CAAA,MAAA,IAAW,WAAW,SAAA,EAAW;AAC/B,IAAA,MAAA,GAAS,SAAA;AAAA,EACX,CAAA,MAAA,IAAW,WAAW,UAAA,EAAY;AAChC,IAAA,MAAA,GAAS,UAAA;AAAA,EACX,CAAA,MAAA,IAAW,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,IAAK,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA,IAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG;AAElF,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA,EAAG,MAAA,GAAS,MAAA;AAAA,SAAA,IACzB,MAAA,CAAO,GAAA,CAAI,QAAQ,CAAA,EAAG,MAAA,GAAS,QAAA;AAAA,SACnC,MAAA,GAAS,UAAA;AAAA,EAChB,CAAA,MAAO;AAEL,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,IAAK,EAAA;AAC9C,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,KAAK,WAAA,EAAY;AAC3C,QAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,WAAA,EAAY;AAClD,QAAA,IAAI,IAAA,IAAQ,SAAS,QAAA,EAAU;AAC7B,UAAA,IAAI,YAAA,CAAa,KAAK,CAAC,CAAA,KAAM,KAAK,QAAA,CAAS,CAAC,CAAC,CAAA,EAAG,MAAA,GAAS,SAAA;AAAA,eAAA,IAChD,YAAA,CAAa,KAAK,CAAC,CAAA,KAAM,KAAK,QAAA,CAAS,CAAC,CAAC,CAAA,EAAG,MAAA,GAAS,QAAA;AAAA,eACzD,MAAA,GAAS,UAAA;AAAA,QAChB;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,IAAA,CAAK,gBAAA,GAAmB,WAAA,GAAc,KAAA;AAAA,IACnD,MAAA;AAAA,IACA,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;AAOO,SAAS,cAAc,GAAA,EAA6B;AACzD,EAAA,MAAM,QAAA,GAAA,CAAY,GAAA,CAAI,QAAA,IAAY,EAAA,EAAI,OAAA,CAAQ,mBAAmB,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAChF,EAAA,OAAO,GAAG,GAAA,CAAI,WAAW,IAAI,GAAA,CAAI,MAAM,IAAI,QAAQ,CAAA,CAAA;AACrD;AAGO,SAAS,cAAc,KAAA,EAAyD;AACrF,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,CAAC,WAAA,EAAa,MAAA,EAAQ,QAAQ,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AACvD,EAAA,IAAI,WAAA,KAAgB,KAAA,IAAS,WAAA,KAAgB,WAAA,EAAa,OAAO,IAAA;AACjE,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,MAAA,EAAS,CAAC,MAAA,EAAQ,SAAA,EAAW,QAAA,EAAU,UAAA,EAAY,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,GAAS,QAAA;AAAA,IACzF,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;;;ACqCO,SAAS,YAAY,MAAA,EAA6B;AACvD,EAAA,MAAM,eAAA,GAAkB,oBAAA;AAAA,IACtB,MAAA,EAAQ;AAAA,GACV;AAGA,EAAA,MAAM,gBAAA,GACJ,MAAA,EAAQ,aAAA,GACJ,uBAAA,CAAwB;AAAA,IACtB,OAAA,EAAS,OAAO,aAAA,CAAc,OAAA;AAAA,IAC9B,QAAA,EAAU,OAAO,aAAA,CAAc;AAAA,GAChC,IACD,EAAC;AAEP,EAAA,OAAO,eAAe,MACpB,OAAA,EACuB;AAEvB,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,MAAM,aAAA,GAAgB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACjD,MAAA,IAAI,aAAA,EAAe;AAEjB,QAAA,YAAA,CAAa,eAAe,eAAe,CAAA;AAC3C,QAAA,OAAO,aAAA;AAAA,MACT;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,EAAQ,cAAc,KAAA,EAAO;AAC/B,MAAA,MAAM,iBACJ,OAAO,MAAA,EAAQ,cAAc,QAAA,GACzB,MAAA,CAAO,YACP,EAAC;AAEP,MAAA,MAAM,WAAW,MAAM,sBAAA;AAAA,QACrB,OAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,QAAA,EAAU;AAEZ,QAAA,YAAA,CAAa,UAAU,eAAe,CAAA;AACtC,QAAA,OAAO,QAAA;AAAA,MACT;AAAA,IACF;AAMA,IAAA,MAAM,cAAA,GAAiB,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAClD,IAAA,cAAA,CAAe,GAAA;AAAA,MACb,cAAA;AAAA,MACA,OAAA,CAAQ,OAAA,CAAQ,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ;AAAA,KAC7C;AACA,IAAA,IAAI,QAAA,GAAW,aAAa,IAAA,CAAK,EAAE,SAAS,EAAE,OAAA,EAAS,cAAA,EAAe,EAAG,CAAA;AAGzE,IAAA,YAAA,CAAa,UAAU,eAAe,CAAA;AAKtC,IAAA,IACE,OAAO,IAAA,CAAK,gBAAgB,CAAA,CAAE,MAAA,GAAS,KACvC,sBAAA,CAAuB;AAAA,MACrB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ,QAAA;AAAA,MAC1B,MAAA,EAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAAA,MACpC,GAAA,EAAK,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK;AAAA,KAC/B,CAAA,EACD;AACA,MAAA,YAAA,CAAa,UAAU,gBAAgB,CAAA;AAAA,IACzC;AAKA,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,QACJ,OAAO,MAAA,CAAO,aAAa,QAAA,GAAW,MAAA,CAAO,WAAW,EAAC;AAC3D,MAAA,MAAM,mBAAmB,CAAC,CAAC,QAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG,KAAA;AAC3D,MAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,QAAA,MAAM,UAAA,GAAa,MAAM,gBAAA,IAAoB,GAAA;AAC7C,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,IAAA,EAAK,EAAG;AAAA,UACtC,MAAA,EAAQ,UAAA,GAAa,EAAA,GAAK,EAAA,GAAK,EAAA;AAAA,UAC/B,IAAA,EAAM,GAAA;AAAA,UACN,QAAA,EAAU,KAAA;AAAA,UACV,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AACA,MAAA,IAAI,KAAA,CAAM,YAAY,KAAA,EAAO;AAC3B,QAAA,MAAM,OAAA,GAAU,aAAA;AAAA,UACd,qBAAA,CAAsB,OAAA,EAAS,EAAE,gBAAA,EAAkB;AAAA,SACrD;AACA,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,OAAA,EAAS;AAAA;AAAA,UAEvC,QAAQ,EAAA,GAAK,EAAA;AAAA,UACb,IAAA,EAAM,GAAA;AAAA,UACN,QAAA,EAAU,KAAA;AAAA,UACV,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AAAA,IACF;AAGA,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,QAAA,GAAW,MAAM,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,QAAQ,CAAA;AAAA,IACjD;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAA;AACF;AAEA,SAAS,YAAA,CACP,UACA,OAAA,EACM;AACN,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EACjC;AACF;AAUO,IAAM,cAAA,GAAiB;AAAA,EAC5B,OAAA,EAAS;AAAA,IACP;AAAA;AAEJ;AASO,IAAM,gBAAA,GAAmB","file":"index.mjs","sourcesContent":["/**\n * @sonordev/site-kit/proxy — visitor segment resolution (the \"one edge pass\").\n *\n * Pure, edge-runtime-safe helpers that classify a request into a coarse visitor\n * segment (new-vs-returning + marketing source + campaign) from the URL's UTM\n * params and the referrer. The middleware writes the result to the `_sk_seg`\n * cookie so server-rendered slots / personalization can vary by segment WITHOUT\n * each one re-parsing the request. Resolved once, at the edge.\n *\n * Kept side-effect-free (no NextResponse, no cookie writes) so it is trivially\n * unit-testable and reusable.\n */\nimport type { NextRequest } from 'next/server'\n\nexport type SegmentSource = 'paid' | 'organic' | 'social' | 'referral' | 'direct'\n\nexport interface VisitorSegment {\n  /** `new` on the first visit (no prior `_sk_vid` cookie), else `returning`. */\n  visitorType: 'new' | 'returning'\n  /** Marketing source bucket derived from UTM medium/source, then referrer. */\n  source: SegmentSource\n  /** `utm_campaign`, if present (sanitized when encoded). */\n  campaign: string | null\n}\n\nconst PAID_MEDIUMS = ['cpc', 'ppc', 'paid', 'paidsearch', 'paid-search', 'display', 'cpm', 'banner']\nconst SOCIAL_MEDIUMS = ['social', 'social-media', 'social_media', 'sm']\nconst SOCIAL_HOSTS = [\n  'facebook.',\n  'instagram.',\n  'linkedin.',\n  't.co',\n  'twitter.',\n  'x.com',\n  'pinterest.',\n  'tiktok.',\n  'youtube.',\n  'reddit.',\n]\nconst SEARCH_HOSTS = ['google.', 'bing.', 'duckduckgo.', 'yahoo.', 'ecosia.', 'brave.', 'baidu.', 'yandex.']\n\n/**\n * Classify `request` into a {@link VisitorSegment}. UTM params win over the\n * referrer; a same-host referrer is ignored (internal navigation, not a source).\n */\nexport function resolveVisitorSegment(\n  request: NextRequest,\n  opts: { hadVisitorCookie: boolean },\n): VisitorSegment {\n  const params = request.nextUrl.searchParams\n  const medium = (params.get('utm_medium') || '').toLowerCase().trim()\n  const campaign = params.get('utm_campaign')\n\n  let source: SegmentSource = 'direct'\n\n  if (PAID_MEDIUMS.includes(medium)) {\n    source = 'paid'\n  } else if (SOCIAL_MEDIUMS.includes(medium)) {\n    source = 'social'\n  } else if (medium === 'organic') {\n    source = 'organic'\n  } else if (medium === 'referral') {\n    source = 'referral'\n  } else if (params.get('utm_source') || params.get('gclid') || params.get('fbclid')) {\n    // A tagged link with a non-standard medium: gclid => paid Google, fbclid => social.\n    if (params.get('gclid')) source = 'paid'\n    else if (params.get('fbclid')) source = 'social'\n    else source = 'referral'\n  } else {\n    // No campaign tagging — fall back to the referrer host.\n    const ref = request.headers.get('referer') || ''\n    if (ref) {\n      try {\n        const host = new URL(ref).host.toLowerCase()\n        const selfHost = request.nextUrl.host.toLowerCase()\n        if (host && host !== selfHost) {\n          if (SEARCH_HOSTS.some((h) => host.includes(h))) source = 'organic'\n          else if (SOCIAL_HOSTS.some((h) => host.includes(h))) source = 'social'\n          else source = 'referral'\n        }\n      } catch {\n        /* malformed referer — stays 'direct' */\n      }\n    }\n  }\n\n  return {\n    visitorType: opts.hadVisitorCookie ? 'returning' : 'new',\n    source,\n    campaign: campaign || null,\n  }\n}\n\n/**\n * Compact, cookie-safe encoding: `\"<visitorType>|<source>|<campaign>\"`, e.g.\n * `\"new|paid|spring_sale\"`. Campaign is sanitized to `[A-Za-z0-9_-]` and capped.\n * Decode with {@link decodeSegment}.\n */\nexport function encodeSegment(seg: VisitorSegment): string {\n  const campaign = (seg.campaign || '').replace(/[^a-zA-Z0-9_-]/g, '').slice(0, 40)\n  return `${seg.visitorType}|${seg.source}|${campaign}`\n}\n\n/** Parse a `_sk_seg` cookie value produced by {@link encodeSegment}. */\nexport function decodeSegment(value: string | undefined | null): VisitorSegment | null {\n  if (!value) return null\n  const [visitorType, source, campaign] = value.split('|')\n  if (visitorType !== 'new' && visitorType !== 'returning') return null\n  return {\n    visitorType,\n    source: (['paid', 'organic', 'social', 'referral', 'direct'].includes(source) ? source : 'direct') as SegmentSource,\n    campaign: campaign || null,\n  }\n}\n","/**\n * @sonordev/site-kit/proxy\n *\n * Composable Next.js Proxy factory (Next 16's replacement for middleware).\n * Also served on the deprecated `/middleware` subpath. Handles:\n * - Security headers (CSP frame-ancestors, nosniff, referrer/permissions\n *   policy — deliberately NO X-Frame-Options; see securityHeaders.ts)\n * - Portal-managed redirects (rule list cached in memory, see the\n *   `redirects` option below)\n * - Stamps `x-sk-path` on the request (read by the deprecated not-found\n *   resolver; kept so sites still using it don't break)\n * - Optional before/after hooks for custom logic\n *\n * @example\n * ```ts\n * // proxy.ts — entire file\n * import { createProxy } from '@sonordev/site-kit/proxy'\n *\n * export default createProxy()\n *\n * // Inlined on purpose: Next statically parses `config.matcher` at build\n * // time and REJECTS an imported value (Turbopack build error). Keep in\n * // sync with siteKitMatcher below.\n * export const config = {\n *   matcher: [\n *     '/((?!_next/static|_next/image|favicon\\\\.ico|.*\\\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)',\n *   ],\n * }\n * ```\n *\n * Next 16 notes: `middleware.ts` is deprecated (codemod:\n * `npx @next/codemod@canary middleware-to-proxy .`), Proxy defaults to the\n * Node.js runtime, and the `runtime` config option is unavailable in proxy\n * files — setting it throws at build time.\n *\n * @example With custom hooks:\n * ```ts\n * export default createProxy({\n *   before: (req) => {\n *     // Custom auth check, etc.\n *   },\n * })\n * ```\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport {\n  handleManagedRedirects,\n  SK_PATH_HEADER,\n  type RedirectConfig,\n} from '../redirects'\nimport {\n  buildSecurityHeaders,\n  type SecurityHeadersConfig,\n} from './securityHeaders'\nimport { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../llms/discovery-headers'\nimport { resolveVisitorSegment, encodeSegment } from './segment'\n// Single source of truth for v4 UUIDs — Web Crypto in the edge runtime, with a\n// non-throwing fallback everywhere else. Do NOT re-fork ID generation here.\nimport { uuid } from '../shared/uuid'\n\nexport type { SecurityHeadersConfig } from './securityHeaders'\nexport { DEFAULT_FRAME_ANCESTORS } from './securityHeaders'\nexport {\n  resolveVisitorSegment,\n  encodeSegment,\n  decodeSegment,\n  type VisitorSegment,\n  type SegmentSource,\n} from './segment'\n\nexport interface IdentityConfig {\n  /**\n   * Also resolve + persist a coarse visitor segment (new-vs-returning + source\n   * + campaign) into the `_sk_seg` cookie, for segment-aware slots /\n   * personalization. Default: true (when identity is enabled).\n   */\n  segment?: boolean\n  /** Days the `_sk_vid` visitor cookie persists. Default: 730 (~2 years). */\n  cookieMaxAgeDays?: number\n}\n\nexport interface LlmsDiscoveryConfig {\n  /** Canonical site origin, e.g. `https://example.com` */\n  siteUrl: string\n  /** Path to llms.txt (default `/llms.txt`) */\n  llmsPath?: string\n}\n\nexport interface SiteKitProxyConfig {\n  /**\n   * Portal-managed redirects, checked before each page render. Default: true,\n   * and the recommended setting.\n   *\n   * The rule list is cached in memory for `cacheSeconds` (default 300) per\n   * instance, and a fetch is bounded at 300ms with a 30s failure cooldown,\n   * so page loads rarely wait on it. Set `false` only on a site that uses no\n   * Sonor-managed redirects.\n   *\n   * Don't move redirects into app/not-found.tsx with\n   * `resolveManagedRedirect()`. Next renders the root not-found boundary\n   * inside every page, and the resolver's headers() call opts every route\n   * into dynamic rendering (verified on a Next 16 build: every ○ route became\n   * ƒ). That resolver is deprecated.\n   */\n  redirects?: boolean | RedirectConfig\n  /** Enable security headers. Default: true */\n  securityHeaders?: boolean | SecurityHeadersConfig\n  /**\n   * Opt-in: inject `Link: <...>; rel=\"describedby\"` header on HTML responses\n   * pointing to /llms.txt for AI crawler discovery (RFC 8288).\n   * Preferred over visible footer links.\n   */\n  llmsDiscovery?: LlmsDiscoveryConfig | false\n  /**\n   * Opt-in EDGE IDENTITY pass. When enabled, the middleware ensures a\n   * first-party `_sk_vid` visitor cookie exists (server-authoritative id) and\n   * resolves the visitor segment into `_sk_seg`, so server-rendered slots and\n   * personalization can read identity + segment without re-parsing the request.\n   * Purely additive — it only writes cookies, never changes the rendered HTML,\n   * so it is LCP/static-safe. Default: OFF (sites opt in for 3.0 personalization).\n   *\n   * NOTE: to make these the SAME id the client uses, the shared identity helper\n   * must read `_sk_vid` cookie-first (a follow-on change validated with a live\n   * preview); until then the cookie is the server-side mirror.\n   */\n  identity?: boolean | IdentityConfig\n  /**\n   * Hook that runs BEFORE redirect check.\n   * Return a NextResponse to short-circuit, or undefined to continue.\n   */\n  before?: (\n    request: NextRequest,\n  ) => NextResponse | undefined | Promise<NextResponse | undefined>\n  /**\n   * Hook that runs AFTER all processing.\n   * Receives the response that will be sent — mutate headers, etc.\n   */\n  after?: (\n    request: NextRequest,\n    response: NextResponse,\n  ) => NextResponse | Promise<NextResponse>\n}\n\n/**\n * Create a fully-featured Next.js Proxy function.\n *\n * With zero config this handles redirects + security headers automatically.\n * Export it from `proxy.ts` at the project root (or `src/`).\n */\nexport function createProxy(config?: SiteKitProxyConfig) {\n  const securityHeaders = buildSecurityHeaders(\n    config?.securityHeaders,\n  )\n\n  // Pre-compute discovery headers (static per middleware instance)\n  const discoveryHeaders: Record<string, string> =\n    config?.llmsDiscovery\n      ? buildAiDiscoveryHeaders({\n          siteUrl: config.llmsDiscovery.siteUrl,\n          llmsPath: config.llmsDiscovery.llmsPath,\n        })\n      : {}\n\n  return async function proxy(\n    request: NextRequest,\n  ): Promise<NextResponse> {\n    // 1. Run user's 'before' hook\n    if (config?.before) {\n      const earlyResponse = await config.before(request)\n      if (earlyResponse) {\n        // Apply security headers even to early responses\n        applyHeaders(earlyResponse, securityHeaders)\n        return earlyResponse\n      }\n    }\n\n    // 2. Check Portal-managed redirects (unless disabled)\n    if (config?.redirects !== false) {\n      const redirectConfig: RedirectConfig =\n        typeof config?.redirects === 'object'\n          ? config.redirects\n          : {}\n\n      const redirect = await handleManagedRedirects(\n        request,\n        redirectConfig,\n      )\n      if (redirect) {\n        // Redirects get security headers too\n        applyHeaders(redirect, securityHeaders)\n        return redirect\n      }\n    }\n\n    // 3. Build the pass-through response. Stamp the requested\n    // pathname+search onto the REQUEST for the deprecated not-found\n    // resolver, so sites still calling it keep working.\n    // Pure header write — no fetch, static-safe.\n    const requestHeaders = new Headers(request.headers)\n    requestHeaders.set(\n      SK_PATH_HEADER,\n      request.nextUrl.pathname + request.nextUrl.search,\n    )\n    let response = NextResponse.next({ request: { headers: requestHeaders } })\n\n    // 4. Apply security headers\n    applyHeaders(response, securityHeaders)\n\n    // 5. Apply the AI discovery Link header to anything that could be a page.\n    // A request with no Accept header counts: that's how curl and many\n    // crawlers ask, and they're who the header is for.\n    if (\n      Object.keys(discoveryHeaders).length > 0 &&\n      wantsLlmsDiscoveryLink({\n        method: request.method,\n        pathname: request.nextUrl.pathname,\n        accept: request.headers.get('accept'),\n        rsc: request.headers.get('rsc'),\n      })\n    ) {\n      applyHeaders(response, discoveryHeaders)\n    }\n\n    // 5b. Edge identity pass (opt-in). Ensure a first-party `_sk_vid` visitor\n    // cookie exists and resolve the visitor segment into `_sk_seg`. Additive:\n    // only writes cookies, never changes the rendered HTML (LCP/static-safe).\n    if (config?.identity) {\n      const idCfg: IdentityConfig =\n        typeof config.identity === 'object' ? config.identity : {}\n      const hadVisitorCookie = !!request.cookies.get('_sk_vid')?.value\n      if (!hadVisitorCookie) {\n        const maxAgeDays = idCfg.cookieMaxAgeDays ?? 730\n        response.cookies.set('_sk_vid', uuid(), {\n          maxAge: maxAgeDays * 24 * 60 * 60,\n          path: '/',\n          sameSite: 'lax',\n          secure: true,\n        })\n      }\n      if (idCfg.segment !== false) {\n        const segment = encodeSegment(\n          resolveVisitorSegment(request, { hadVisitorCookie }),\n        )\n        response.cookies.set('_sk_seg', segment, {\n          // Session-ish: a fresh campaign / source on a later visit re-segments.\n          maxAge: 30 * 60,\n          path: '/',\n          sameSite: 'lax',\n          secure: true,\n        })\n      }\n    }\n\n    // 6. Run user's 'after' hook\n    if (config?.after) {\n      response = await config.after(request, response)\n    }\n\n    return response\n  }\n}\n\nfunction applyHeaders(\n  response: NextResponse,\n  headers: Record<string, string>,\n): void {\n  for (const [key, value] of Object.entries(headers)) {\n    response.headers.set(key, value)\n  }\n}\n\n/**\n * REFERENCE VALUE ONLY — copy the array into your proxy.ts, do not export it.\n *\n * `export const config = siteKitMatcher` is a BUILD ERROR on Next 16:\n * `config.matcher` must be statically analyzable and Turbopack rejects any\n * imported value. This constant exists so the canonical pattern lives in one\n * place (the scaffold, docs, and tests read it) — inline its contents.\n */\nexport const siteKitMatcher = {\n  matcher: [\n    '/((?!_next/static|_next/image|favicon\\\\.ico|.*\\\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)',\n  ],\n}\n\n/**\n * @deprecated Use `createProxy`. Next 16 renamed the `middleware` file\n * convention to `proxy` (`npx @next/codemod@canary middleware-to-proxy .`);\n * the old name still builds but warns, and the factory is named for the file\n * it is exported from. Kept indefinitely — 100+ fleet sites import it — but\n * new code should say `createProxy` from `@sonordev/site-kit/proxy`.\n */\nexport const createMiddleware = createProxy\n\n/** @deprecated Use `SiteKitProxyConfig`. */\nexport type SiteKitMiddlewareConfig = SiteKitProxyConfig\n"]}

package/dist/proxy/securityHeaders.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityHeaders.d.ts","sourceRoot":"","sources":["../../src/proxy/securityHeaders.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,uBAAuB,UAMnC,CAAA;AAED,MAAM,WAAW,qBAAqB;IACpC;0EACsE;IACtE,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAAA;IAC5C;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACjC,qDAAqD;IACrD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iDAAiD;IACjD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,gCAAgC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACvC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,CAAC,EAAE,qBAAqB,GAAG,OAAO,GACvC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+DxB"}

package/dist/proxy/segment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"segment.d.ts","sourceRoot":"","sources":["../../src/proxy/segment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEjF,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,WAAW,EAAE,KAAK,GAAG,WAAW,CAAA;IAChC,6EAA6E;IAC7E,MAAM,EAAE,aAAa,CAAA;IACrB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAkBD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;IAAE,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAClC,cAAc,CA2ChB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAGzD;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI,CASrF"}

package/dist/redirects/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/redirects/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;IAC5C,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAoBD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cAAc,CAAA;AAezC;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAmExF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EAAE,GACpB,YAAY,GAAG,SAAS,CAO1B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAiCnC;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAarH;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC;IACjF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;CACnB,CAAC,CAAC,CAUF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/redirects/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/redirects/index.mjs

@@ -1,8 +0,0 @@
-export { SK_PATH_HEADER, clearRedirectCache, fetchRedirectRules, findRedirectMatch, generateNextRedirects, handleManagedRedirects, trackRedirectHit } from '../chunk-UO6KTHBQ.mjs';
-import '../chunk-B22WSN4L.mjs';
-import '../chunk-AS2HUIDW.mjs';
-import '../chunk-KZVSB5WE.mjs';
-import '../chunk-ZN4HBK5C.mjs';
-import '../chunk-BEXTDHO4.mjs';
-//# sourceMappingURL=index.mjs.map
-//# sourceMappingURL=index.mjs.map

package/dist/redirects/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/redirects/not-found.d.ts

@@ -1,31 +0,0 @@
-/**
- * @sonordev/site-kit/redirects/not-found — managed redirects at the 404 boundary.
- *
- * DEPRECATED: DON'T USE THIS IN app/not-found.tsx. Next renders the root
- * not-found boundary inside every page's tree, so this resolver's headers()
- * call opts EVERY route into dynamic rendering. On a Next 16 build
- * (nkylawfirm.com, 2026-09-14) every static route turned dynamic, and
- * reverting only not-found.jsx put them back. Skipping the lookup at build
- * time doesn't help: the 404 page would then be prerendered static and the
- * redirects would never run.
- *
- * Use `createProxy({ redirects: true })` instead (the default). The proxy
- * caches the rule list in memory for five minutes, so page loads rarely wait
- * on it.
- *
- * Kept exported so sites that already call it keep building. It logs a
- * one-time warning per process.
- */
-import { type RedirectConfig } from './index';
-export interface ResolvedRedirect {
-    /** Destination path/URL with the original query string carried over. */
-    destination: string;
-    /** True for 301/308 rules — pair with next/navigation's permanentRedirect. */
-    permanent: boolean;
-}
-/**
- * @deprecated Makes every page dynamic when called from a not-found boundary.
- * Use `createProxy({ redirects: true })`. See the module comment.
- */
-export declare function resolveManagedRedirect(config?: RedirectConfig): Promise<ResolvedRedirect | null>;
-//# sourceMappingURL=not-found.d.ts.map

package/dist/redirects/not-found.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"not-found.d.ts","sourceRoot":"","sources":["../../src/redirects/not-found.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAA;CACnB;AAWD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,GAAE,cAAmB,GAC1B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA4ClC"}

package/dist/redirects/not-found.js

@@ -1,47 +0,0 @@
-'use strict';
-
-var chunk4BEGKFMN_js = require('../chunk-4BEGKFMN.js');
-require('../chunk-JP5WGL75.js');
-require('../chunk-BBBJHYPH.js');
-require('../chunk-UZKXOZHR.js');
-require('../chunk-SWIKKSKL.js');
-require('../chunk-SNAQBZPT.js');
-var headers = require('next/headers');
-
-var warned = false;
-async function resolveManagedRedirect(config = {}) {
-  if (!warned) {
-    warned = true;
-    console.warn(
-      "[site-kit] resolveManagedRedirect() is deprecated: called from a not-found boundary it makes every page dynamic. Remove it and use createProxy({ redirects: true }) in proxy.ts."
-    );
-  }
-  let raw;
-  try {
-    const h = await headers.headers();
-    raw = h.get(chunk4BEGKFMN_js.SK_PATH_HEADER);
-  } catch {
-    return null;
-  }
-  if (!raw || !raw.startsWith("/")) return null;
-  const queryIndex = raw.indexOf("?");
-  const pathname = queryIndex === -1 ? raw : raw.slice(0, queryIndex);
-  const search = queryIndex === -1 ? "" : raw.slice(queryIndex + 1);
-  if (pathname.startsWith("/_next") || pathname.startsWith("/api") || pathname.includes(".")) {
-    return null;
-  }
-  const rules = await chunk4BEGKFMN_js.fetchRedirectRules(config);
-  const match = chunk4BEGKFMN_js.findRedirectMatch(pathname, rules);
-  if (!match) return null;
-  chunk4BEGKFMN_js.trackRedirectHit(config, match.from_path, config.domain).catch(() => {
-  });
-  const destination = search ? `${match.to_path}${match.to_path.includes("?") ? "&" : "?"}${search}` : match.to_path;
-  return {
-    destination,
-    permanent: match.redirect_type === "301" || match.redirect_type === "308"
-  };
-}
-
-exports.resolveManagedRedirect = resolveManagedRedirect;
-//# sourceMappingURL=not-found.js.map
-//# sourceMappingURL=not-found.js.map

package/dist/redirects/not-found.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/redirects/not-found.ts"],"names":["headers","SK_PATH_HEADER","fetchRedirectRules","findRedirectMatch","trackRedirectHit"],"mappings":";;;;;;;;;;AA0CA,IAAI,MAAA,GAAS,KAAA;AAMb,eAAsB,sBAAA,CACpB,MAAA,GAAyB,EAAC,EACQ;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAA,GAAS,IAAA;AACT,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KAEF;AAAA,EACF;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,CAAA,GAAI,MAAMA,eAAA,EAAQ;AACxB,IAAA,GAAA,GAAM,CAAA,CAAE,IAAIC,+BAAc,CAAA;AAAA,EAC5B,CAAA,CAAA,MAAQ;AAGN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,IAAI,UAAA,CAAW,GAAG,GAAG,OAAO,IAAA;AAEzC,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAClC,EAAA,MAAM,WAAW,UAAA,KAAe,EAAA,GAAK,MAAM,GAAA,CAAI,KAAA,CAAM,GAAG,UAAU,CAAA;AAClE,EAAA,MAAM,SAAS,UAAA,KAAe,EAAA,GAAK,KAAK,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAIhE,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,QAAQ,CAAA,IAAK,QAAA,CAAS,UAAA,CAAW,MAAM,CAAA,IAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AAC1F,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAMC,mCAAA,CAAmB,MAAM,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQC,kCAAA,CAAkB,QAAA,EAAU,KAAK,CAAA;AAC/C,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAGnB,EAAAC,iCAAA,CAAiB,QAAQ,KAAA,CAAM,SAAA,EAAW,OAAO,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAEvE,EAAA,MAAM,cAAc,MAAA,GAChB,CAAA,EAAG,KAAA,CAAM,OAAO,GAAG,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,GAAG,IAAI,GAAA,GAAM,GAAG,CAAA,EAAG,MAAM,KACnE,KAAA,CAAM,OAAA;AAEV,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,SAAA,EAAW,KAAA,CAAM,aAAA,KAAkB,KAAA,IAAS,MAAM,aAAA,KAAkB;AAAA,GACtE;AACF","file":"not-found.js","sourcesContent":["/**\n * @sonordev/site-kit/redirects/not-found — managed redirects at the 404 boundary.\n *\n * DEPRECATED: DON'T USE THIS IN app/not-found.tsx. Next renders the root\n * not-found boundary inside every page's tree, so this resolver's headers()\n * call opts EVERY route into dynamic rendering. On a Next 16 build\n * (nkylawfirm.com, 2026-09-14) every static route turned dynamic, and\n * reverting only not-found.jsx put them back. Skipping the lookup at build\n * time doesn't help: the 404 page would then be prerendered static and the\n * redirects would never run.\n *\n * Use `createProxy({ redirects: true })` instead (the default). The proxy\n * caches the rule list in memory for five minutes, so page loads rarely wait\n * on it.\n *\n * Kept exported so sites that already call it keep building. It logs a\n * one-time warning per process.\n */\n\nimport { headers } from 'next/headers'\nimport {\n  fetchRedirectRules,\n  findRedirectMatch,\n  trackRedirectHit,\n  SK_PATH_HEADER,\n  type RedirectConfig,\n} from './index'\n\nexport interface ResolvedRedirect {\n  /** Destination path/URL with the original query string carried over. */\n  destination: string\n  /** True for 301/308 rules — pair with next/navigation's permanentRedirect. */\n  permanent: boolean\n}\n\n/**\n * Resolve a managed redirect for the URL that just 404ed.\n *\n * Returns null when the path is unknown (proxy not installed), no rule\n * matches, or Portal can't be reached inside the timeout — a 404 page must\n * never hang on us, so the default budget is the shared 300ms.\n */\nlet warned = false\n\n/**\n * @deprecated Makes every page dynamic when called from a not-found boundary.\n * Use `createProxy({ redirects: true })`. See the module comment.\n */\nexport async function resolveManagedRedirect(\n  config: RedirectConfig = {},\n): Promise<ResolvedRedirect | null> {\n  if (!warned) {\n    warned = true\n    console.warn(\n      '[site-kit] resolveManagedRedirect() is deprecated: called from a not-found boundary it makes every page dynamic. ' +\n        'Remove it and use createProxy({ redirects: true }) in proxy.ts.',\n    )\n  }\n  let raw: string | null\n  try {\n    const h = await headers()\n    raw = h.get(SK_PATH_HEADER)\n  } catch {\n    // Called outside a request scope (e.g. build-time prerender of the 404\n    // shell). Nothing to resolve.\n    return null\n  }\n  if (!raw || !raw.startsWith('/')) return null\n\n  const queryIndex = raw.indexOf('?')\n  const pathname = queryIndex === -1 ? raw : raw.slice(0, queryIndex)\n  const search = queryIndex === -1 ? '' : raw.slice(queryIndex + 1)\n\n  // Same skip set as the proxy-mode handler: these can 404 but are never\n  // redirect targets, so don't spend the fetch on them.\n  if (pathname.startsWith('/_next') || pathname.startsWith('/api') || pathname.includes('.')) {\n    return null\n  }\n\n  const rules = await fetchRedirectRules(config)\n  const match = findRedirectMatch(pathname, rules)\n  if (!match) return null\n\n  // Fire and forget — analytics must never delay the redirect.\n  trackRedirectHit(config, match.from_path, config.domain).catch(() => {})\n\n  const destination = search\n    ? `${match.to_path}${match.to_path.includes('?') ? '&' : '?'}${search}`\n    : match.to_path\n\n  return {\n    destination,\n    permanent: match.redirect_type === '301' || match.redirect_type === '308',\n  }\n}\n"]}

package/dist/redirects/not-found.mjs

@@ -1,45 +0,0 @@
-import { SK_PATH_HEADER, fetchRedirectRules, findRedirectMatch, trackRedirectHit } from '../chunk-UO6KTHBQ.mjs';
-import '../chunk-B22WSN4L.mjs';
-import '../chunk-AS2HUIDW.mjs';
-import '../chunk-KZVSB5WE.mjs';
-import '../chunk-ZN4HBK5C.mjs';
-import '../chunk-BEXTDHO4.mjs';
-import { headers } from 'next/headers';
-
-var warned = false;
-async function resolveManagedRedirect(config = {}) {
-  if (!warned) {
-    warned = true;
-    console.warn(
-      "[site-kit] resolveManagedRedirect() is deprecated: called from a not-found boundary it makes every page dynamic. Remove it and use createProxy({ redirects: true }) in proxy.ts."
-    );
-  }
-  let raw;
-  try {
-    const h = await headers();
-    raw = h.get(SK_PATH_HEADER);
-  } catch {
-    return null;
-  }
-  if (!raw || !raw.startsWith("/")) return null;
-  const queryIndex = raw.indexOf("?");
-  const pathname = queryIndex === -1 ? raw : raw.slice(0, queryIndex);
-  const search = queryIndex === -1 ? "" : raw.slice(queryIndex + 1);
-  if (pathname.startsWith("/_next") || pathname.startsWith("/api") || pathname.includes(".")) {
-    return null;
-  }
-  const rules = await fetchRedirectRules(config);
-  const match = findRedirectMatch(pathname, rules);
-  if (!match) return null;
-  trackRedirectHit(config, match.from_path, config.domain).catch(() => {
-  });
-  const destination = search ? `${match.to_path}${match.to_path.includes("?") ? "&" : "?"}${search}` : match.to_path;
-  return {
-    destination,
-    permanent: match.redirect_type === "301" || match.redirect_type === "308"
-  };
-}
-
-export { resolveManagedRedirect };
-//# sourceMappingURL=not-found.mjs.map
-//# sourceMappingURL=not-found.mjs.map

package/dist/redirects/not-found.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/redirects/not-found.ts"],"names":[],"mappings":";;;;;;;;AA0CA,IAAI,MAAA,GAAS,KAAA;AAMb,eAAsB,sBAAA,CACpB,MAAA,GAAyB,EAAC,EACQ;AAClC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAA,GAAS,IAAA;AACT,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KAEF;AAAA,EACF;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,CAAA,GAAI,MAAM,OAAA,EAAQ;AACxB,IAAA,GAAA,GAAM,CAAA,CAAE,IAAI,cAAc,CAAA;AAAA,EAC5B,CAAA,CAAA,MAAQ;AAGN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,IAAI,UAAA,CAAW,GAAG,GAAG,OAAO,IAAA;AAEzC,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAClC,EAAA,MAAM,WAAW,UAAA,KAAe,EAAA,GAAK,MAAM,GAAA,CAAI,KAAA,CAAM,GAAG,UAAU,CAAA;AAClE,EAAA,MAAM,SAAS,UAAA,KAAe,EAAA,GAAK,KAAK,GAAA,CAAI,KAAA,CAAM,aAAa,CAAC,CAAA;AAIhE,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,QAAQ,CAAA,IAAK,QAAA,CAAS,UAAA,CAAW,MAAM,CAAA,IAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AAC1F,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,kBAAA,CAAmB,MAAM,CAAA;AAC7C,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,QAAA,EAAU,KAAK,CAAA;AAC/C,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAGnB,EAAA,gBAAA,CAAiB,QAAQ,KAAA,CAAM,SAAA,EAAW,OAAO,MAAM,CAAA,CAAE,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAEvE,EAAA,MAAM,cAAc,MAAA,GAChB,CAAA,EAAG,KAAA,CAAM,OAAO,GAAG,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,GAAG,IAAI,GAAA,GAAM,GAAG,CAAA,EAAG,MAAM,KACnE,KAAA,CAAM,OAAA;AAEV,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,SAAA,EAAW,KAAA,CAAM,aAAA,KAAkB,KAAA,IAAS,MAAM,aAAA,KAAkB;AAAA,GACtE;AACF","file":"not-found.mjs","sourcesContent":["/**\n * @sonordev/site-kit/redirects/not-found — managed redirects at the 404 boundary.\n *\n * DEPRECATED: DON'T USE THIS IN app/not-found.tsx. Next renders the root\n * not-found boundary inside every page's tree, so this resolver's headers()\n * call opts EVERY route into dynamic rendering. On a Next 16 build\n * (nkylawfirm.com, 2026-09-14) every static route turned dynamic, and\n * reverting only not-found.jsx put them back. Skipping the lookup at build\n * time doesn't help: the 404 page would then be prerendered static and the\n * redirects would never run.\n *\n * Use `createProxy({ redirects: true })` instead (the default). The proxy\n * caches the rule list in memory for five minutes, so page loads rarely wait\n * on it.\n *\n * Kept exported so sites that already call it keep building. It logs a\n * one-time warning per process.\n */\n\nimport { headers } from 'next/headers'\nimport {\n  fetchRedirectRules,\n  findRedirectMatch,\n  trackRedirectHit,\n  SK_PATH_HEADER,\n  type RedirectConfig,\n} from './index'\n\nexport interface ResolvedRedirect {\n  /** Destination path/URL with the original query string carried over. */\n  destination: string\n  /** True for 301/308 rules — pair with next/navigation's permanentRedirect. */\n  permanent: boolean\n}\n\n/**\n * Resolve a managed redirect for the URL that just 404ed.\n *\n * Returns null when the path is unknown (proxy not installed), no rule\n * matches, or Portal can't be reached inside the timeout — a 404 page must\n * never hang on us, so the default budget is the shared 300ms.\n */\nlet warned = false\n\n/**\n * @deprecated Makes every page dynamic when called from a not-found boundary.\n * Use `createProxy({ redirects: true })`. See the module comment.\n */\nexport async function resolveManagedRedirect(\n  config: RedirectConfig = {},\n): Promise<ResolvedRedirect | null> {\n  if (!warned) {\n    warned = true\n    console.warn(\n      '[site-kit] resolveManagedRedirect() is deprecated: called from a not-found boundary it makes every page dynamic. ' +\n        'Remove it and use createProxy({ redirects: true }) in proxy.ts.',\n    )\n  }\n  let raw: string | null\n  try {\n    const h = await headers()\n    raw = h.get(SK_PATH_HEADER)\n  } catch {\n    // Called outside a request scope (e.g. build-time prerender of the 404\n    // shell). Nothing to resolve.\n    return null\n  }\n  if (!raw || !raw.startsWith('/')) return null\n\n  const queryIndex = raw.indexOf('?')\n  const pathname = queryIndex === -1 ? raw : raw.slice(0, queryIndex)\n  const search = queryIndex === -1 ? '' : raw.slice(queryIndex + 1)\n\n  // Same skip set as the proxy-mode handler: these can 404 but are never\n  // redirect targets, so don't spend the fetch on them.\n  if (pathname.startsWith('/_next') || pathname.startsWith('/api') || pathname.includes('.')) {\n    return null\n  }\n\n  const rules = await fetchRedirectRules(config)\n  const match = findRedirectMatch(pathname, rules)\n  if (!match) return null\n\n  // Fire and forget — analytics must never delay the redirect.\n  trackRedirectHit(config, match.from_path, config.domain).catch(() => {})\n\n  const destination = search\n    ? `${match.to_path}${match.to_path.includes('?') ? '&' : '?'}${search}`\n    : match.to_path\n\n  return {\n    destination,\n    permanent: match.redirect_type === '301' || match.redirect_type === '308',\n  }\n}\n"]}

package/dist/reputation/TestimonialSection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"TestimonialSection.d.ts","sourceRoot":"","sources":["../../src/reputation/TestimonialSection.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAA2C,MAAM,OAAO,CAAA;AAE/D,OAAO,KAAK,EAAU,uBAAuB,EAAE,MAAM,SAAS,CAAA;AAE9D,wBAAgB,kBAAkB,CAAC,EACjC,KAAK,EACL,QAAQ,EACR,QAAe,EACf,gBAAuB,EACvB,UAAiB,EACjB,UAAU,EACV,YAAoB,EACpB,OAAO,EACP,SAAc,GACf,EAAE,uBAAuB,4BAsPzB"}

package/dist/reputation/api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/reputation/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAElD,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AA0CD,wBAAsB,YAAY,CAChC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC,CA4CnB;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAsBpE"}

package/dist/reputation/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reputation/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAA;AACtD,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAA"}

package/dist/reputation/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/reputation/index.mjs

@@ -1,5 +0,0 @@
-export { TestimonialSection } from '../chunk-VIGRGMWR.mjs';
-export { fetchReviewStats, fetchReviews } from '../chunk-MU7DTEUF.mjs';
-import '../chunk-BEXTDHO4.mjs';
-//# sourceMappingURL=index.mjs.map
-//# sourceMappingURL=index.mjs.map

package/dist/reputation/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/reputation/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/reputation/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAA;AACtD,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAA"}

package/dist/reputation/server.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"server.js"}

package/dist/reputation/server.mjs

@@ -1,4 +0,0 @@
-export { fetchReviewStats, fetchReviews } from '../chunk-MU7DTEUF.mjs';
-import '../chunk-BEXTDHO4.mjs';
-//# sourceMappingURL=server.mjs.map
-//# sourceMappingURL=server.mjs.map

package/dist/reputation/server.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"server.mjs"}

package/dist/reputation/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/reputation/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE;QACZ,CAAC,EAAE,MAAM,CAAA;QACT,CAAC,EAAE,MAAM,CAAA;QACT,CAAC,EAAE,MAAM,CAAA;QACT,CAAC,EAAE,MAAM,CAAA;QACT,CAAC,EAAE,MAAM,CAAA;KACV,CAAA;CACF;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB"}

package/dist/robots/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/robots/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAKtD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAE7G,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AA8BD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkBrF"}

package/dist/robots/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/robots/index.ts"],"names":["stripNextInternals","getSiteConfig"],"mappings":";;;;;;;AAqDA,SAAS,mBAAA,CAAoB,SAAiB,MAAA,EAAgC;AAC5E,EAAA,MAAM,QAAkB,EAAC;AAEzB,EAAA,IAAI,MAAA,CAAO,aAAA,EAAe,IAAA,EAAK,EAAG;AAChC,IAAA,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,aAAA,CAAc,IAAA,EAAM,CAAA;AAAA,EACxC,CAAA,MAAO;AACL,IAAA,KAAA,CAAM,KAAK,eAAe,CAAA;AAC1B,IAAA,KAAA,CAAM,KAAK,UAAU,CAAA;AACrB,IAAA,MAAM,QAAA,GAAWA,mCAAA,CAAmB,MAAA,CAAO,QAAQ,KAAK,EAAC;AACzD,IAAA,KAAA,MAAW,CAAA,IAAK,MAAM,OAAA,CAAQ,QAAQ,IAAI,QAAA,GAAW,CAAC,QAAQ,CAAA,EAAG;AAC/D,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,UAAA,EAAa,CAAC,CAAA,CAAE,CAAA;AAAA,IAC7B;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,WAAA,GAAc,OAAO,WAAA,IAAe,cAAA;AAC1C,EAAA,MAAM,UAAA,GAAa,CAAA,EAAG,IAAI,CAAA,EAAG,WAAA,CAAY,UAAA,CAAW,GAAG,CAAA,GAAI,EAAA,GAAK,GAAG,CAAA,EAAG,WAAW,CAAA,CAAA;AACjF,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,SAAA,EAAY,UAAU,CAAA,CAAE,CAAA;AAEnC,EAAA,OAAO,IAAI,QAAA,CAAS,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,EAAG;AAAA,IACpC,MAAA,EAAQ,GAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,2BAAA;AAAA,MAChB,eAAA,EAAiB;AAAA;AACnB,GACD,CAAA;AACH;AAMO,SAAS,aAAa,MAAA,EAA0D;AACrF,EAAA,OAAO,SAAS,MAAA,GAAuC;AACrD,IAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAO,mBAAA,CAAoB,SAAS,MAAM,CAAA;AAAA,IAC5C;AACA,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAW,OAAO,YAAY,WAAA,IAAe,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA,CAAI,aAAA,CAAA;AAC9F,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,IAAI,SAAS,4BAAA,EAA8B;AAAA,QAChD,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,2BAAA;AAA4B,OACxD,CAAA;AAAA,IACH;AACA,IAAA,OAAOC,8BAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS;AACrE,MAAA,MAAM,GAAA,GAAM,MAAM,QAAA,IAAY,qBAAA;AAC9B,MAAA,OAAO,mBAAA,CAAoB,KAAK,MAAM,CAAA;AAAA,IACxC,CAAC,CAAA;AAAA,EACH,CAAA;AACF","file":"index.js","sourcesContent":["/**\n * @sonordev/site-kit/robots - robots.txt Generator\n *\n * Generates robots.txt with Sitemap directive.\n * baseUrl can be omitted when apiKey is set (resolved from Portal project-info).\n *\n * @example\n * // app/robots.txt/route.ts (API key only)\n * import { createRobots } from '@sonordev/site-kit/robots'\n * export const GET = createRobots({ apiKey: process.env.SONOR_API_KEY })\n *\n * @example\n * // With explicit baseUrl\n * export const GET = createRobots({\n *   baseUrl: process.env.NEXT_PUBLIC_SITE_URL || 'https://example.com',\n *   disallow: ['/admin'],\n * })\n */\n\nimport { getSiteConfig } from '../site-config'\nimport { stripNextInternals } from './next-internals'\n\nexport { isNextInternalsPath } from './next-internals'\n\n// The AI crawler helpers live in `llms/aiRobots` (and are exported from\n// `@sonordev/site-kit/llms`). Re-exported here because `/robots` is where a\n// robots.txt author looks for them. One implementation; never copy the lists.\nexport {\n  AI_RETRIEVAL_CRAWLERS,\n  AI_TRAINING_CRAWLERS,\n  buildAiCrawlerRules,\n  formatContentSignals,\n  createRobotsTxtHandler,\n} from '../llms/aiRobots'\nexport type { AiCrawlerRulesOptions, ContentSignalsOptions, RobotsTxtHandlerOptions } from '../llms/aiRobots'\n\nexport interface RobotsConfig {\n  /** Base URL of the site (optional when apiKey is set; then resolved from Portal) */\n  baseUrl?: string\n  /** Project API key; when set and baseUrl is not, baseUrl is resolved from Portal */\n  apiKey?: string\n  apiUrl?: string\n  /** Path to sitemap (default: /sitemap.xml) */\n  sitemapPath?: string\n  /** Pre-built robots content from Portal (overrides default when provided) */\n  managedRobots?: string | null\n  /**\n   * Paths to disallow (e.g. ['/admin', '/api']). `/_next` paths are dropped:\n   * Googlebot needs them to render pages and index images.\n   */\n  disallow?: string[]\n}\n\nfunction buildRobotsResponse(baseUrl: string, config: RobotsConfig): Response {\n  const lines: string[] = []\n\n  if (config.managedRobots?.trim()) {\n    lines.push(config.managedRobots.trim())\n  } else {\n    lines.push('User-agent: *')\n    lines.push('Allow: /')\n    const disallow = stripNextInternals(config.disallow) ?? []\n    for (const p of Array.isArray(disallow) ? disallow : [disallow]) {\n      lines.push(`Disallow: ${p}`)\n    }\n  }\n\n  const base = baseUrl.replace(/\\/$/, '')\n  const sitemapPath = config.sitemapPath ?? '/sitemap.xml'\n  const sitemapUrl = `${base}${sitemapPath.startsWith('/') ? '' : '/'}${sitemapPath}`\n  lines.push(`Sitemap: ${sitemapUrl}`)\n\n  return new Response(lines.join('\\n'), {\n    status: 200,\n    headers: {\n      'Content-Type': 'text/plain; charset=utf-8',\n      'Cache-Control': 'public, max-age=86400, s-maxage=86400',\n    },\n  })\n}\n\n/**\n * Create a robots.txt handler that returns a Response or Promise<Response>.\n * Use as GET handler for app/robots.txt/route.ts. When baseUrl is omitted, pass apiKey to resolve from Portal.\n */\nexport function createRobots(config: RobotsConfig): () => Response | Promise<Response> {\n  return function robots(): Response | Promise<Response> {\n    const baseUrl = config.baseUrl\n    if (baseUrl) {\n      return buildRobotsResponse(baseUrl, config)\n    }\n    const apiKey = config.apiKey ?? (typeof process !== 'undefined' && process.env && process.env.SONOR_API_KEY)\n    if (!apiKey) {\n      return new Response('User-agent: *\\nDisallow: /', {\n        status: 200,\n        headers: { 'Content-Type': 'text/plain; charset=utf-8' },\n      })\n    }\n    return getSiteConfig({ apiKey, apiUrl: config.apiUrl }).then((site) => {\n      const url = site?.site_url ?? 'https://example.com'\n      return buildRobotsResponse(url, config)\n    })\n  }\n}\n"]}