@sonordev/site-kit 7.0.1 → 7.1.0

package/dist/slots/ManagedList.d.ts

@@ -0,0 +1,30 @@
+import * as React from 'react';
+import { type SlotListItem } from './contract';
+import type { SlotResolveOptions } from './server-api';
+export interface ManagedListProps extends Omit<SlotResolveOptions, 'fallback' | 'type' | 'fallbackValue'> {
+    /** Stable slot id, e.g. "home-services" or "gallery". */
+    id: string;
+    /** The static items: `{ title?, body?, href?, image?: { src, alt, width?, height? } }`. */
+    items: SlotListItem[];
+    /** Draw the items. Called with the managed items, or `items` when nothing's managed. */
+    children: (items: SlotListItem[]) => React.ReactNode;
+}
+/**
+ * ManagedList — a list the owner edits in Sonor: services, team, FAQs, a
+ * gallery. You keep the markup; Sonor manages the items. Each item has an
+ * optional title, plain-text body, link and image (https only).
+ *
+ * Server component, fallback-first and signature-verified like ManagedSlot.
+ *
+ * @example
+ * ```tsx
+ * <ManagedList id="home-services" items={SERVICES}>
+ *   {(items) => (
+ *     <ul className="grid">
+ *       {items.map((s) => <li key={s.title}><a href={s.href}>{s.title}</a><p>{s.body}</p></li>)}
+ *     </ul>
+ *   )}
+ * </ManagedList>
+ * ```
+ */
+export declare function ManagedList({ id, items, children, site, revalidate, page, }: ManagedListProps): Promise<React.ReactElement>;

package/dist/slots/ManagedRichText.d.ts

@@ -0,0 +1,31 @@
+import * as React from 'react';
+import type { SlotResolveOptions } from './server-api';
+export interface ManagedRichTextProps extends Omit<SlotResolveOptions, 'fallback' | 'type' | 'fallbackValue'> {
+    /** Stable slot id, lowercase, page-scoped by convention (e.g. "about-intro"). */
+    id: string;
+    /**
+     * The static content. A string is read as the rich-text subset (so the
+     * fallback and the managed copy render the same way); JSX renders as is.
+     */
+    children: React.ReactNode;
+}
+/**
+ * ManagedRichText — a Sonor-managed block of formatted copy: paragraphs,
+ * line breaks, bold, italic, links and lists. Renders a fragment of `<p>`,
+ * `<ul>`/`<ol>`, `<strong>`, `<em>`, `<a>` and `<br>`; wrap it in your own
+ * element for styling.
+ *
+ * Server component, fallback-first and signature-verified like ManagedSlot.
+ * Managed content is parsed by the contract's rich-text parser and rendered
+ * as elements, never as HTML.
+ *
+ * @example
+ * ```tsx
+ * <div className="prose">
+ *   <ManagedRichText id="about-intro" page="/about">
+ *     {`We've built homes in **Cincinnati** since 1998.\n\n- Custom builds\n- Remodels`}
+ *   </ManagedRichText>
+ * </div>
+ * ```
+ */
+export declare function ManagedRichText({ id, children, site, revalidate, page, }: ManagedRichTextProps): Promise<React.ReactElement>;

package/dist/slots/contract.js

@@ -1,2 +1,3 @@
-export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, isValidSlotId, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-SS636UDN.js';
+export { SLOTS_CONTRACT_VERSION, SUPPORTED_SLOTS_CONTRACT_VERSIONS, canonicalJson, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-VCJYLYJV.js';
+export { SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_FIELD_MAX_LENGTH, SLOT_HREF_MAX_LENGTH, SLOT_ID_PATTERN, SLOT_LIST_MAX_ITEMS, SLOT_V1_CONTENT_TYPES, isSafeSlotHref, isSafeSlotImageSrc, isSlotContentType, isValidSlotId, normalizeSlotValue, parseSlotRichText, slotListPlainText } from '../chunk-LPH5FANE.js';
 import '../chunk-PKBMQBKP.js';

package/dist/slots/edit/locate.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Find managed copy on a rendered page by what it says.
+ *
+ * The slot components render plain text: no wrapper element, no attribute,
+ * so a site's markup and CSS are exactly what it wrote (a marker element would
+ * shift `:first-child`, `h2 + p` and Tailwind's `space-y-*` for every visitor
+ * to serve one editor). The edit overlay finds each slot the way a person
+ * would, by its visible text, using the needles from `slotNeedles`.
+ */
+import { type EditableSlot } from '../../contracts/site-edit';
+export interface LocatedSlot {
+    key: string;
+    /** The element to outline and click. */
+    element: HTMLElement;
+    /** For a text slot rendered as one text node: the node, so a preview can swap just it. */
+    textNode?: Text;
+}
+/**
+ * The deepest unclaimed element whose whole visible text is `needle`: first a
+ * single text node, then an element whose text is split across inline tags
+ * (`Fast <em>and</em> local`).
+ */
+export declare function findByText(root: Element, needle: string, claimed: Set<Element>): {
+    element: HTMLElement;
+    textNode?: Text;
+} | null;
+/** Locate one slot, or null when its text isn't on this page. */
+export declare function locateSlot(root: Element, slot: EditableSlot, claimed: Set<Element>): LocatedSlot | null;
+/** Locate every slot on the page; each element belongs to at most one slot. */
+export declare function locateSlots(root: Element, slots: EditableSlot[]): LocatedSlot[];

package/dist/slots/edit/overlay.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The edit overlay: what a site shows inside Sonor's "Edit on page".
+ *
+ * Loaded only when the page is framed cross-origin with `?sonor_edit`
+ * (`shared/edit-bridge.ts`), and it only acts for the Sonor dashboard
+ * (`isSonorAppOrigin`). It outlines the managed copy it can find, reports a
+ * click as a selection, shows a draft in place, and reloads on request. It
+ * never writes anything: the dashboard saves with the person's own session.
+ *
+ * Plain DOM, no React, so it adds nothing to a visitor's bundle; the bridge
+ * imports it on demand.
+ */
+/** The dashboard's origin, from the browser's own record of who framed us. */
+export declare function framingOrigin(win: Window): string | null;
+/** The same URL with the edit parameter, so the overlay starts again after a navigation. */
+export declare function withEditParam(href: string, base: string): string | null;
+/** Start the overlay. Returns a function that removes every trace of it. */
+export declare function startEditOverlay(win?: Window): () => void;

package/dist/slots/index.d.ts

@@ -1,14 +1,22 @@
 /**
- * @sonordev/site-kit/slots — Managed Slots (3.0 spine, Pillar 1)
+ * @sonordev/site-kit/website/slots — Managed Slots (3.0 spine, Pillar 1)
  *
- * Named, Sonor-managed text regions inside developer-owned markup.
+ * Named, Sonor-managed copy inside developer-owned markup: text, rich text,
+ * links and lists (the Website CMS; docs/WEBSITE-CMS.md).
  * Static-safe, fallback-first, signature-verified.
  * See docs/SITE-KIT-3.0-SPEC-SLOTS.md.
  */
 export { ManagedSlot, default } from './ManagedSlot';
 export type { ManagedSlotProps } from './ManagedSlot';
+export { ManagedRichText } from './ManagedRichText';
+export type { ManagedRichTextProps } from './ManagedRichText';
+export { ManagedLink } from './ManagedLink';
+export type { ManagedLinkProps } from './ManagedLink';
+export { ManagedList } from './ManagedList';
+export type { ManagedListProps } from './ManagedList';
+export { renderSlotRichText } from './rich';
 export { getSlot, resolveSlots } from './server-api';
 export type { SlotResolveOptions } from './server-api';
 export { createSlotsRevalidateHandler, SLOTS_CACHE_TAG } from './revalidate';
-export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, isValidSlotId, slotSigningPayload, signSlotContent, verifySlotContent, } from './contract';
-export type { SlotContent, SlotContentType, SlotsResolveRequest, SlotsResolveResponse, } from './contract';
+export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, SLOT_LIST_MAX_ITEMS, isSafeSlotHref, isValidSlotId, normalizeSlotValue, parseSlotRichText, slotSigningPayload, signSlotContent, verifySlotContent, } from './contract';
+export type { SlotContent, SlotContentType, SlotLinkValue, SlotListImage, SlotListItem, SlotListValue, SlotRichBlock, SlotRichInline, SlotValue, SlotsResolveRequest, SlotsResolveResponse, } from './contract';

package/dist/slots/index.js

@@ -1,5 +1,7 @@
-export { ManagedSlot, SLOTS_CACHE_TAG, createSlotsRevalidateHandler, ManagedSlot_default as default, getSlot, resolveSlots } from '../chunk-KPAZG65P.js';
-export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, isValidSlotId, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-SS636UDN.js';
+export { ManagedLink, ManagedList, ManagedRichText, ManagedSlot, SLOTS_CACHE_TAG, createSlotsRevalidateHandler, ManagedSlot_default as default, getSlot, renderSlotRichText, resolveSlots } from '../chunk-CGWUXUYZ.js';
+export { SLOTS_CONTRACT_VERSION, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-VCJYLYJV.js';
+export { SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, SLOT_LIST_MAX_ITEMS, isSafeSlotHref, isValidSlotId, normalizeSlotValue, parseSlotRichText } from '../chunk-LPH5FANE.js';
+import '../chunk-RYVDGXC2.js';
 import '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
 import '../chunk-PKBMQBKP.js';

package/dist/slots/revalidate.d.ts

@@ -1,20 +1,25 @@
 /**
- * @sonordev/site-kit/slots — On-demand Revalidation
+ * @sonordev/site-kit/website/slots — On-demand Revalidation
  *
  * Sonor calls this when slot content changes (owner edit or approved Signal
  * proposal) so the change is live in seconds instead of at the next ISR
  * window. Mirrors the llms revalidation handler pattern.
  *
+ * Sonor sends slot edits to the site's one revalidation route
+ * (`@sonordev/site-kit/revalidate`), which expires this tag too. Use this
+ * handler only for a separate slots-only route.
+ *
  * @example
  * ```ts
  * // app/api/revalidate-slots/route.ts
- * import { createSlotsRevalidateHandler } from '@sonordev/site-kit/slots'
+ * import { createSlotsRevalidateHandler } from '@sonordev/site-kit/website/slots'
  *
  * export const POST = createSlotsRevalidateHandler(process.env.REVALIDATION_SECRET!)
  * ```
  */
 type RevalidateTagFn = (tag: string) => void;
-export declare const SLOTS_CACHE_TAG = "sonor-slots";
+/** The tag every slot fetch carries (SITE_CACHE_TAGS.slots, @sonordev/contracts/site-cache). */
+export declare const SLOTS_CACHE_TAG: "sonor-slots";
 /**
  * Create a POST handler that busts the slots data cache.
  * Protected by a shared secret. (POST handlers are never statically

package/dist/slots/rich.d.ts

@@ -0,0 +1,7 @@
+import * as React from 'react';
+/**
+ * Render the rich-text subset (see parseSlotRichText in the slots contract)
+ * as React elements. There's no HTML path: every node maps to one element,
+ * and text is React text, so managed rich content can't inject markup.
+ */
+export declare function renderSlotRichText(markdown: string): React.ReactNode;

package/dist/slots/server-api.d.ts

@@ -1,5 +1,5 @@
 /**
- * @sonordev/site-kit/slots — Server-Only Resolution
+ * @sonordev/site-kit/website/slots — Server-Only Resolution
  *
  * SECURITY: uses the private SONOR_API_KEY. Import only in server code
  * (RSC, route handlers, server actions).
@@ -12,7 +12,7 @@
  * - Signed: unsigned/tampered payloads are dropped with a warning.
  */
 import 'server-only';
-import { type SlotContent } from './contract';
+import { type SlotContent, type SlotContentType, type SlotValue } from './contract';
 export interface SlotResolveOptions {
     /** Multi-site sub-dimension: normalized lowercase host. */
     site?: string;
@@ -29,6 +29,10 @@ export interface SlotResolveOptions {
      * the Copy Evidence Loop's slot↔page mapping.
      */
     page?: string;
+    /** What this slot renders as (default 'text'). The component sets it. */
+    type?: SlotContentType;
+    /** The structured fallback (link or list), reported so the editor starts from it. */
+    fallbackValue?: SlotValue;
 }
 /** Resolve one slot. Null on any failure → caller renders fallback. */
 export declare function getSlot(id: string, options?: SlotResolveOptions): Promise<SlotContent | null>;

package/dist/sync/index.js

@@ -1,6 +1,6 @@
-export { BookingWidget } from '../chunk-FYBZ5SNP.js';
-export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-MV2MBTC3.js';
-import '../chunk-EGOD74PP.js';
-import '../chunk-3KUUH2YP.js';
-import '../chunk-QGHSMJKW.js';
+export { BookingWidget } from '../chunk-3G2SE2J4.js';
+export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-7QTMMHUO.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/images.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-P5J7VMQ3.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-GWUKQ26F.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-EGOD74PP.js';
-import '../chunk-3KUUH2YP.js';
-import '../chunk-QGHSMJKW.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/index.js

@@ -1,13 +1,13 @@
 'use client';
-export { SiteDesignReporter } from '../chunk-P4GRY6QP.js';
-export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-FL4EPUWA.js';
+export { SiteDesignReporter } from '../chunk-GIAOPEN6.js';
+export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-W2CL2DB3.js';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-JSZN6LDZ.js';
 import '../chunk-IHG36STL.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-EGOD74PP.js';
-import '../chunk-3KUUH2YP.js';
-import '../chunk-QGHSMJKW.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/popups.js

@@ -1,7 +1,7 @@
 'use client';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-JSZN6LDZ.js';
 import '../chunk-IHG36STL.js';
-import { EngageWidget } from '../chunk-5SEM2V4A.js';
+import { EngageWidget } from '../chunk-ZIMFQWGJ.js';
 import '../chunk-NDF4A5JM.js';
 import '../chunk-6T6CQVNL.js';
 import '../chunk-S22FSH7C.js';
@@ -9,9 +9,9 @@ import '../chunk-24QZEO3Q.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-EGOD74PP.js';
-import '../chunk-3KUUH2YP.js';
-import '../chunk-QGHSMJKW.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 import { jsx } from 'react/jsx-runtime';
 

package/dist/website/slots/contract.js

@@ -1,2 +1,3 @@
-export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, isValidSlotId, signSlotContent, slotSigningPayload, verifySlotContent } from '../../chunk-SS636UDN.js';
+export { SLOTS_CONTRACT_VERSION, SUPPORTED_SLOTS_CONTRACT_VERSIONS, canonicalJson, signSlotContent, slotSigningPayload, verifySlotContent } from '../../chunk-VCJYLYJV.js';
+export { SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_FIELD_MAX_LENGTH, SLOT_HREF_MAX_LENGTH, SLOT_ID_PATTERN, SLOT_LIST_MAX_ITEMS, SLOT_V1_CONTENT_TYPES, isSafeSlotHref, isSafeSlotImageSrc, isSlotContentType, isValidSlotId, normalizeSlotValue, parseSlotRichText, slotListPlainText } from '../../chunk-LPH5FANE.js';
 import '../../chunk-PKBMQBKP.js';

package/dist/website/slots.js

@@ -1,5 +1,7 @@
-export { ManagedSlot, SLOTS_CACHE_TAG, createSlotsRevalidateHandler, ManagedSlot_default as default, getSlot, resolveSlots } from '../chunk-KPAZG65P.js';
-export { SLOTS_CONTRACT_VERSION, SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, isValidSlotId, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-SS636UDN.js';
+export { ManagedLink, ManagedList, ManagedRichText, ManagedSlot, SLOTS_CACHE_TAG, createSlotsRevalidateHandler, ManagedSlot_default as default, getSlot, renderSlotRichText, resolveSlots } from '../chunk-CGWUXUYZ.js';
+export { SLOTS_CONTRACT_VERSION, signSlotContent, slotSigningPayload, verifySlotContent } from '../chunk-VCJYLYJV.js';
+export { SLOT_CONTENT_MAX_LENGTH, SLOT_CONTENT_TYPES, SLOT_ID_PATTERN, SLOT_LIST_MAX_ITEMS, isSafeSlotHref, isValidSlotId, normalizeSlotValue, parseSlotRichText } from '../chunk-LPH5FANE.js';
+import '../chunk-RYVDGXC2.js';
 import '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
 import '../chunk-PKBMQBKP.js';

package/dist/{writeLLMsTxt-UMHKGNRR.js → writeLLMsTxt-QR23OQUE.js}

@@ -1,4 +1,4 @@
-export { writeLLMsTxtToPublic } from './chunk-SSUQKA7L.js';
+export { writeLLMsTxtToPublic } from './chunk-J4D6ZXRW.js';
 import './chunk-GLHQ3LRO.js';
 import './chunk-L5UOHS6E.js';
 import './chunk-WMVK77ND.js';

package/docs/MIGRATING-TO-7.md

@@ -0,0 +1,146 @@
+# Moving a site to site-kit 7
+
+site-kit 7 is organised the way Sonor's dashboard is: one entry per module.
+Most sites need no changes at all. Move a site when you next touch it
+("touch a site, update its deps"); nothing forces it before then, because a
+site's `^6` range never picks up 7.
+
+## The short version
+
+```bash
+pnpm add @sonordev/site-kit@^7
+npx sonor-setup codemod --check      # lists what needs moving (writes nothing)
+npx sonor-setup codemod --write      # moves it
+pnpm build                           # a bump you didn't build is a guess
+```
+
+Run the codemod in each app or workspace package that imports site-kit (in a
+monorepo, inside each workspace package too). It's
+idempotent: running it twice changes nothing the second time. It works from
+any 2.x-6.x site: copies of sites on 4.2, 5.8 and 6.5 were migrated with it
+and built.
+
+Requirements: Next 16 (every fleet site is on it) and Node 20.19+ or 22.12+
+(Netlify's default is 22).
+
+## What changed, and what the codemod does about it
+
+### 1. The root entry is types-only
+
+`@sonordev/site-kit` exports types and `SITE_KIT_VERSION`, nothing that runs.
+A stray root import used to be able to pull commerce, signal or redirect code
+into a page's bundle.
+
+| Was | Now |
+|---|---|
+| `import { BookingWidget } from '@sonordev/site-kit'` | `@sonordev/site-kit/sync` |
+| `import { AffiliatesWidget, useAffiliates } from '@sonordev/site-kit'` | `@sonordev/site-kit/affiliates` (new entry) |
+| commerce components and fetchers | `@sonordev/site-kit/commerce` |
+| `ManagedImage` and the image helpers | `@sonordev/site-kit/website/images` |
+| `SignalBridge`, experiments, `useSignal*` | `@sonordev/site-kit/signal` |
+| `TestimonialSection`, `fetchReviews` | `@sonordev/site-kit/reputation` |
+| `handleManagedRedirects` and friends | `@sonordev/site-kit/seo/redirects` |
+| `LandingPage`, `landingPageMetadata` | `@sonordev/site-kit/website/landing` |
+| `formatBookingTime`, `formatBookingDate` | `formatTime`, `formatDate` from `@sonordev/site-kit/sync` |
+
+**The codemod rewrites these imports**, including the two renamed ones, and
+keeps type imports on the root. It flags, rather than rewrites, a namespace
+import (`import * as SK`), a `require`, or a re-export from the root. The full
+list is `src/shared/module-map.json` (`rootRuntime`).
+
+Across our own sites on 2026-09-26 this touched three repos: one for
+`affiliates`, two for `BookingWidget`.
+
+### 2. The setup CLI is its own package: `sonor-setup`
+
+The CLI (init, scaffold, codemods, OG cards, GEO wiring, verify) was 3 MB of
+every site's install and forced a site-kit release for every setup-only fix.
+It's now [`sonor-setup`](../packages/sonor-setup).
+
+- **`npx sonor-setup …` keeps working unchanged:** npx fetches the package.
+- **A site whose package.json scripts run `sonor-setup`** (wirsch-law's OG
+  step, `sonor-setup og`) needs it as a dev dependency. The codemod adds
+  `"sonor-setup": "^7.0.0"` for you.
+- **`sonor-register-sitemap` stays in site-kit**, since 11 sites run it from
+  their postbuild. Nothing to change.
+- The `site-kit` bin alias for the CLI is gone (no site used it).
+
+### 3. One entry per Sonor module (old paths still work)
+
+New homes, each the same module as before:
+
+- Website: `./website/{popups,images,slots,cms,landing,cta-bar}`
+- SEO: `./seo/{sitemap,robots,indexnow,redirects,og,og/route,llms,llms/client,llms/contract,meta/contract,pages/contract}`
+- Website chat: `./chat` (out of `./engage`)
+
+**The old paths keep working through 7.x** and are removed in 8.0. The
+codemod moves them anyway, so a touched site is done in one pass.
+`SiteKitLayout` gains `chat` and `popups` props; `engage` is an alias
+(`engage={false}` still turns both off).
+
+### 4. ESM only, Next 16 only
+
+site-kit ships ES modules alone (`"type": "module"`). Next, Turbopack and the
+kits don't notice. Node 20.19+/22.12+ can `require()` it too, so a
+`next.config.ts` that imports `@sonordev/site-kit/config` keeps working. A
+site-side script that `require()`s site-kit on an older Node would break; none
+in the fleet does.
+
+The `next` peer is `^16`. Next 16 renamed `middleware.ts` to `proxy.ts`, and
+**the codemod moves it**: the file, a named `middleware` export (to `proxy`),
+and `createMiddleware` from `@sonordev/site-kit/middleware` (to `createProxy`
+from `/proxy`). The old names work through 7.x. It won't move a file that
+sets `runtime` (a proxy file can't; the build throws), and says so: remove
+the export, check the logic still runs on your host, rerun. It never moves
+onto an existing `proxy.ts`. `npx sonor-setup next16` runs just this part.
+
+### 5. Removed (no site in the fleet used them)
+
+- `@sonordev/site-kit/search` and `/search/contract`
+- `@sonordev/site-kit/redirects/not-found` (`resolveManagedRedirect`), and
+  with it the `x-sk-path` request header the proxy stamped for it and the
+  `SK_PATH_HEADER` export. Managed redirects run in the proxy.
+- The postinstall GEO bootstrap (`SITE_KIT_AUTO_GEO=1`). Run
+  `npx sonor-setup geo` instead. site-kit no longer runs anything at install.
+- `@sonordev/site-kit/setup` (an empty stub since 2.0), `LocationPageContent`
+  and `getLocationSection` (they sent a `project_id`), `identifyTopicClusters`
+  (use `getTopicCluster`), `formatContentSignals`, and the `SiteKitConfig`
+  type (not `withSiteKitConfig`, which stays).
+- Source maps. The package no longer ships `.map` files (7.3 of 6.x's 11 MB).
+
+Still accepted and ignored until 8.0, because sites pass them:
+`contentSignals` on `createRobotsTxtHandler`, `nativeReturnTo` on forms, and
+`<ManagedScripts />`.
+
+### 6. Behavior worth knowing
+
+- **react-markdown is no longer installed with site-kit.** The chat widget
+  renders markdown with `marked`, already a dependency. A site that imports
+  `react-markdown` itself without listing it (it only worked because npm
+  hoisted site-kit's copy) must add it.
+- **`sonor-register-sitemap` reads .env files the way Next does**: a variable
+  the host set wins over every file, then `.env.production.local`,
+  `.env.local`, `.env.production`, `.env`. It used to let `.env.local` beat
+  the host.
+
+## Optional, and new in 7.0
+
+- **Cache Components.** `cacheComponents: true` in next.config works with
+  site-kit now (it failed every page through 6.x). Remove route segment
+  configs (`dynamic`, `revalidate`) when you turn it on; Next rejects them.
+- **Agent tools.** `npx sonor-setup mcp` gives the site an MCP endpoint with
+  the built-in Sonor tools (business profile, services, FAQ, pages, articles,
+  reviews; inquiries, availability and offerings when you ask), the server
+  card, and on Netlify the rate-limited relay. Sonor's AI Visibility tab then
+  shows which agents used them. A site that already runs its own MCP server
+  (upforge.io and the other hand-written ones) is left exactly as it is:
+  nothing in 7.0 turns anything on for it. To have Sonor see its calls, add
+  `onToolCall: reportToolCallsToSonor()` to its `createMcpHandler`.
+- **`@sonordev/contracts`** is for the APIs and the dashboard; sites keep
+  importing `@sonordev/site-kit/*/contract`, which is the same code.
+
+## Kits built on site-kit
+
+agency-site-kit and re-site-kit import only entries 7 keeps unchanged
+(`/client`, `/server`, `/llms`, `/forms`, `/mcp`, `/portfolio/contract`),
+so their `>=` peer ranges already accept 7.

package/docs.json

@@ -0,0 +1,69 @@
+{
+  "$comment": "What sonor.dev renders for this package, in nav order. sonor.dev reads this file from the published tarball (latest on npm), so a release IS the docs deploy: add a page here and ship it in package.json `files`. scripts/verify-docs.cjs fails the publish if a listed file is missing from the pack.",
+  "schemaVersion": 1,
+  "title": "site-kit",
+  "summary": "One package, one env var, every Sonor module on a Next.js site: SEO, analytics, forms, articles, commerce, chat, AI visibility, agent tools and motion.",
+  "groups": [
+    {
+      "title": "Start here",
+      "pages": [
+        { "slug": "", "title": "Overview", "file": "README.md" },
+        { "slug": "migrating-to-7", "title": "Migrating to 7", "file": "docs/MIGRATING-TO-7.md" },
+        { "slug": "agents", "title": "For coding agents", "file": "AGENTS.md" }
+      ]
+    },
+    {
+      "title": "Core",
+      "pages": [
+        { "slug": "layout", "title": "Layout", "file": "src/layout/README.md" },
+        { "slug": "live-updates", "title": "Live updates", "file": "src/revalidate/README.md" },
+        { "slug": "seo", "title": "SEO", "file": "src/seo/README.md" },
+        { "slug": "analytics", "title": "Analytics", "file": "src/analytics/README.md" },
+        { "slug": "sitemap", "title": "Sitemap", "file": "src/sitemap/README.md" },
+        { "slug": "proxy", "title": "Proxy", "file": "src/proxy/README.md" },
+        { "slug": "redirects", "title": "Redirects", "file": "src/redirects/README.md" },
+        { "slug": "og", "title": "OG cards", "file": "src/og/README.md" }
+      ]
+    },
+    {
+      "title": "Content",
+      "pages": [
+        { "slug": "copy", "title": "Managed copy", "file": "src/slots/README.md" },
+        { "slug": "articles", "title": "Articles", "file": "src/articles/README.md" },
+        { "slug": "images", "title": "Images", "file": "src/images/README.md" },
+        { "slug": "reputation", "title": "Reputation", "file": "src/reputation/README.md" }
+      ]
+    },
+    {
+      "title": "Engagement",
+      "pages": [
+        { "slug": "forms", "title": "Forms", "file": "src/forms/README.md" },
+        { "slug": "chat", "title": "Website chat", "file": "src/engage/README.md" },
+        { "slug": "cta-bar", "title": "CTA bar", "file": "src/cta-bar/README.md" },
+        { "slug": "signal", "title": "Signal (A/B)", "file": "src/signal/README.md" }
+      ]
+    },
+    {
+      "title": "Commerce",
+      "pages": [
+        { "slug": "commerce", "title": "Commerce", "file": "src/commerce/README.md" },
+        { "slug": "booking", "title": "Booking", "file": "src/sync/README.md" }
+      ]
+    },
+    {
+      "title": "AI visibility",
+      "pages": [
+        { "slug": "llms", "title": "llms.txt and AEO", "file": "src/llms/README.md" },
+        { "slug": "mcp", "title": "MCP and agent tools", "file": "src/mcp/README.md" }
+      ]
+    },
+    {
+      "title": "More",
+      "pages": [
+        { "slug": "motion", "title": "Motion", "file": "src/motion/README.md" },
+        { "slug": "admin-auth", "title": "Sign in with Sonor", "file": "src/admin-auth/README.md" }
+      ]
+    }
+  ],
+  "changelog": { "file": "CHANGELOG.md", "since": "7.0.0" }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonordev/site-kit",
-  "version": "7.0.1",
+  "version": "7.1.0",
   "type": "module",
   "packageManager": "pnpm@11.5.3",
   "description": "Complete client-side integration kit for Sonor - SEO, Analytics, Engage, Forms, Blog",
@@ -155,6 +155,10 @@
       "types": "./dist/slots/contract.d.ts",
       "default": "./dist/slots/contract.js"
     },
+    "./revalidate": {
+      "types": "./dist/revalidate/index.d.ts",
+      "default": "./dist/revalidate/index.js"
+    },
     "./sites/contract": {
       "types": "./dist/sites/contract.d.ts",
       "default": "./dist/sites/contract.js"
@@ -367,7 +371,11 @@
     "README.md",
     "AGENTS.md",
     "agent-manifest.json",
-    "skills"
+    "skills",
+    "docs.json",
+    "CHANGELOG.md",
+    "docs/MIGRATING-TO-7.md",
+    "src/*/README.md"
   ],
   "scripts": {
     "build": "NODE_OPTIONS=--max-old-space-size=8192 tsup && pnpm build:types && node scripts/gen-agent-manifest.cjs",
@@ -387,8 +395,9 @@
     "typecheck": "tsc --noEmit",
     "typecheck:setup": "tsc --noEmit -p packages/sonor-setup/tsconfig.json",
     "version": "node scripts/sync-version.cjs && node scripts/gen-agent-manifest.cjs && git add src/shared/version.ts agent-manifest.json",
-    "prepublishOnly": "rm -rf dist && NODE_OPTIONS=--max-old-space-size=8192 tsup && pnpm build:types && node scripts/gen-agent-manifest.cjs && node scripts/verify-dts.cjs && node scripts/prepublish-integration.cjs && node scripts/audit-as-consumer.cjs",
-    "build:types": "tsc -p tsconfig.build.json --emitDeclarationOnly --noEmit false && node scripts/alias-dts.cjs"
+    "prepublishOnly": "rm -rf dist && NODE_OPTIONS=--max-old-space-size=8192 tsup && pnpm build:types && node scripts/gen-agent-manifest.cjs && node scripts/verify-dts.cjs && node scripts/prepublish-integration.cjs && node scripts/audit-as-consumer.cjs && node scripts/verify-docs.cjs",
+    "build:types": "tsc -p tsconfig.build.json --emitDeclarationOnly --noEmit false && node scripts/alias-dts.cjs",
+    "verify:docs": "node scripts/verify-docs.cjs"
   },
   "peerDependencies": {
     "@portabletext/react": "^8.0.0",
@@ -450,6 +459,7 @@
     "commander": "^15.0.0",
     "glob": "^13.0.6",
     "gsap": "^3.15.0",
+    "happy-dom": "^20.14.5",
     "inquirer": "^14.0.2",
     "next": "16.3.6",
     "open": "11.0.0",