@sonordev/site-kit 7.0.2 → 7.1.0

package/dist/contracts/site-edit.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Edit on page: the messages between a site and the Sonor dashboard.
+ *
+ * The dashboard frames the live site with `?sonor_edit=1`. site-kit sees that
+ * it's framed by Sonor, finds the managed copy on the page and outlines it;
+ * a click selects a slot, and the dashboard edits it with the person's own
+ * Sonor session. Nothing on the site writes anything: it reports what's where
+ * and shows a draft in place, and the dashboard does the rest. So the site
+ * needs no login, no secret and no cookie.
+ *
+ * site-kit's overlay (`slots/edit`) and the dashboard's visual editor both
+ * read this file. Pure: no DOM, no network.
+ */
+import { type SlotContentType, type SlotValue } from './slot-content';
+export { SITE_EDIT_PARAM } from './site-edit-param';
+/** Protocol version, sent in `ready` so the dashboard can tell an old overlay. */
+export declare const SITE_EDIT_VERSION = 1;
+/** The dashboard's production origin. */
+export declare const SONOR_APP_ORIGIN = "https://app.sonor.io";
+/**
+ * Origins allowed to drive the overlay: the dashboard, and localhost for
+ * development. A localhost frame is the person's own machine; the overlay
+ * never exposes anything the framed page doesn't already show.
+ */
+export declare function isSonorAppOrigin(origin: string): boolean;
+/** What the dashboard asks the overlay to find: a slot as it's live now. */
+export interface EditableSlot {
+    /** The slot's row id in Sonor. */
+    key: string;
+    /** The slot id in code, e.g. `home-hero-headline`. */
+    id: string;
+    type: SlotContentType;
+    /** What the page shows now: the published content, else the site's fallback. */
+    content: string | null;
+    value?: SlotValue | null;
+}
+/** Dashboard → site. */
+export type SonorToSiteMessage = {
+    type: 'sonor-edit:slots';
+    slots: EditableSlot[];
+} | {
+    type: 'sonor-edit:select';
+    key: string | null;
+} | {
+    type: 'sonor-edit:preview';
+    key: string;
+    content?: string | null;
+    value?: SlotValue | null;
+} | {
+    type: 'sonor-edit:reload';
+};
+/** Site → dashboard. */
+export type SiteToSonorMessage = {
+    type: 'sonor-edit:ready';
+    version: number;
+    path: string;
+    title: string;
+} | {
+    type: 'sonor-edit:found';
+    path: string;
+    found: string[];
+} | {
+    type: 'sonor-edit:select';
+    key: string;
+};
+/** A message from the dashboard, or null for anything else (other scripts post messages too). */
+export declare function parseSonorToSiteMessage(data: unknown): SonorToSiteMessage | null;
+/** A message from the site, or null for anything else. */
+export declare function parseSiteToSonorMessage(data: unknown): SiteToSonorMessage | null;
+/** Collapse whitespace the way a browser lays text out. */
+export declare function normalizeEditText(text: string): string;
+/**
+ * The visible text the overlay looks for to find a slot on the page: the
+ * text itself, the first paragraph of rich text, a link's label, a list's
+ * item titles. Empty strings are dropped.
+ */
+export declare function slotNeedles(slot: EditableSlot): string[];

package/dist/contracts/slot-content.d.ts

@@ -0,0 +1,111 @@
+/**
+ * @sonordev/contracts/slot-content — what a managed slot may contain.
+ *
+ * The pure half of the slots contract: content types, value validation
+ * (normalizeSlotValue), safe links, and the rich-text subset parser. No
+ * crypto, so the dashboard can import it in the browser to validate and
+ * preview exactly what sonor-api will accept and site-kit will render.
+ * `@sonordev/contracts/slots` re-exports all of it next to the signing.
+ */
+/**
+ * - `text`: plain text, rendered escaped.
+ * - `rich`: the restricted markdown subset parseSlotRichText understands,
+ *   rendered to elements, never HTML.
+ * - `link`: `{ label, href }`.
+ * - `list`: `{ items: [{ title?, body?, href?, image? }] }`.
+ */
+export type SlotContentType = 'text' | 'rich' | 'link' | 'list';
+export declare const SLOT_CONTENT_TYPES: readonly SlotContentType[];
+/** What a v1 client can render. */
+export declare const SLOT_V1_CONTENT_TYPES: readonly SlotContentType[];
+/** Hard cap on managed content length; longer payloads are rejected → fallback. */
+export declare const SLOT_CONTENT_MAX_LENGTH = 10000;
+/** Caps for structured values. */
+export declare const SLOT_LIST_MAX_ITEMS = 50;
+export declare const SLOT_FIELD_MAX_LENGTH = 2000;
+export declare const SLOT_HREF_MAX_LENGTH = 2048;
+/** Slot ids: lowercase, page-scoped by convention, e.g. "home-hero-headline". */
+export declare const SLOT_ID_PATTERN: RegExp;
+export interface SlotLinkValue {
+    label: string;
+    href: string;
+}
+export interface SlotListImage {
+    /** https only. */
+    src: string;
+    alt: string;
+    width?: number;
+    height?: number;
+}
+export interface SlotListItem {
+    title?: string;
+    /** Plain text. */
+    body?: string;
+    href?: string;
+    image?: SlotListImage;
+}
+export interface SlotListValue {
+    items: SlotListItem[];
+}
+/** The structured value for `link` and `list`; `text` and `rich` carry none. */
+export type SlotValue = SlotLinkValue | SlotListValue;
+export declare function isValidSlotId(id: string): boolean;
+export declare function isSlotContentType(type: unknown): type is SlotContentType;
+/** Links a slot may carry: https, http, mailto, tel, #anchor, or a root-relative path. */
+export declare function isSafeSlotHref(href: unknown): href is string;
+/** Images a list item may carry: https only. */
+export declare function isSafeSlotImageSrc(src: unknown): src is string;
+export type SlotValueResult = {
+    ok: true;
+    content: string;
+    value: SlotValue | null;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Validate and normalize what an editor (or Signal) submits for a slot of
+ * `type`, returning the canonical `content` + `value` to store and sign.
+ * The single rule for "what a valid slot of this type is": sonor-api runs it
+ * on every write and verifySlotContent re-runs it on every read.
+ */
+export declare function normalizeSlotValue(type: SlotContentType, input: {
+    content?: unknown;
+    value?: unknown;
+}): SlotValueResult;
+/** The plain-text rendering of a list: its titles (or bodies, or alts), one per line. */
+export declare function slotListPlainText(items: SlotListItem[]): string;
+export type SlotRichInline = {
+    t: 'text';
+    v: string;
+} | {
+    t: 'strong';
+    c: SlotRichInline[];
+} | {
+    t: 'em';
+    c: SlotRichInline[];
+} | {
+    t: 'link';
+    href: string;
+    c: SlotRichInline[];
+} | {
+    t: 'br';
+};
+export type SlotRichBlock = {
+    t: 'p';
+    c: SlotRichInline[];
+} | {
+    t: 'ul';
+    items: SlotRichInline[][];
+} | {
+    t: 'ol';
+    items: SlotRichInline[][];
+};
+/**
+ * Parse the rich-text subset into a tiny AST: paragraphs (blank-line
+ * separated; single newlines become line breaks), `-`/`*` and `1.` lists,
+ * `**bold**`, `*italic*` / `_italic_`, and `[text](href)` with a safe href.
+ * Anything else is literal text. No HTML, ever: a renderer maps these nodes
+ * to elements, so there's nothing to sanitize.
+ */
+export declare function parseSlotRichText(markdown: string): SlotRichBlock[];

package/dist/contracts/slots.d.ts

@@ -1,33 +1,37 @@
 /**
- * @sonordev/contracts/slots — Managed Slots wire contract (v1)
+ * @sonordev/contracts/slots — Managed Slots wire contract (v2)
  *
- * Single source of truth for the slot payload shape and content signing,
- * shared by site-kit (verify side) and sonor-api (sign side). Node only: it
- * signs with `crypto`.
+ * Single source of truth for the slot payload shape, value validation, the
+ * rich-text subset, and content signing, shared by site-kit (verify + render),
+ * sonor-api (validate + sign) and the dashboard (preview). Node only: it signs
+ * with `crypto`.
  *
  * Security model: every SlotContent is HMAC-signed with the project API key.
  * site-kit verifies before rendering and falls back to the developer's static
  * content on any mismatch, so platform-originated content carries provenance
- * end to end. See docs/SITE-KIT-3.0-SPEC-SLOTS.md.
- */
-/** Bump on breaking payload changes. */
-export declare const SLOTS_CONTRACT_VERSION = 1;
-/**
- * v1 supports plain text only — rendered as React text (escaped), never
- * dangerouslySetInnerHTML. 'markdown' / 'rich' are reserved for a future
- * contract version behind a real sanitizer decision.
+ * end to end. See docs/SITE-KIT-3.0-SPEC-SLOTS.md and docs/WEBSITE-CMS.md.
+ *
+ * v1 (site-kit ≤ 7.0) is plain text only. v2 adds rich text, links and lists,
+ * and signs the structured value too. sonor-api serves both: a v1 request gets
+ * text slots signed the v1 way and null for everything else.
  */
-export type SlotContentType = 'text';
-export declare const SLOT_CONTENT_TYPES: readonly SlotContentType[];
-/** Hard cap on managed content length; longer payloads are rejected → fallback. */
-export declare const SLOT_CONTENT_MAX_LENGTH = 10000;
-/** Slot ids: lowercase, page-scoped by convention, e.g. "home-hero-headline". */
-export declare const SLOT_ID_PATTERN: RegExp;
+import { type SlotContentType, type SlotValue } from './slot-content';
+export * from './slot-content';
+/** The version this package speaks. Bump on breaking payload changes. */
+export declare const SLOTS_CONTRACT_VERSION = 2;
+/** Versions sonor-api still serves. */
+export declare const SUPPORTED_SLOTS_CONTRACT_VERSIONS: readonly number[];
 export interface SlotContent {
     slot_id: string;
     type: SlotContentType;
-    /** The managed text. Rendered escaped — never as HTML. */
+    /**
+     * Always a non-empty plain-text rendering: the text (text), the markdown
+     * (rich), the label (link), the item titles (list). Rendered escaped for
+     * `text`; the Copy Evidence Loop and Signal read it for every type.
+     */
     content: string;
+    /** Structured value for `link` / `list` (v2). */
+    value?: SlotValue | null;
     /** Forward-compat: experiment/personalization variant that produced this content. */
     variant_id?: string | null;
     experiment_id?: string | null;
@@ -38,6 +42,8 @@ export interface SlotContent {
 }
 export interface SlotResolveRequestEntry {
     id: string;
+    /** v2: what the site renders this slot as. Absent = 'text' (v1). */
+    type?: SlotContentType;
     /**
      * The developer's current static text for this slot (when statically
      * extractable). Stored as `fallback_text` on registration so the dashboard
@@ -45,6 +51,8 @@ export interface SlotResolveRequestEntry {
      * the API anywhere — display + drafting context only.
      */
     fallback?: string;
+    /** v2: the structured fallback (a link or list the site ships), for the editor. */
+    fallback_value?: SlotValue;
     /**
      * The route this slot renders on (e.g. "/" or "/pricing"). A static literal,
      * never derived from the request — it feeds the Copy Evidence Loop's
@@ -62,20 +70,26 @@ export interface SlotsResolveResponse {
     contract_version: number;
     slots: Record<string, SlotContent | null>;
 }
-export declare function isValidSlotId(id: string): boolean;
+/** JSON with object keys sorted at every level, so both sides sign the same bytes. */
+export declare function canonicalJson(value: unknown): string;
+type Signable = Pick<SlotContent, 'slot_id' | 'type' | 'content'> & {
+    value?: SlotValue | null;
+};
 /**
  * Canonical string both sides sign/verify. Exported separately from the HMAC
  * helpers so an edge-runtime resolver can reproduce it with WebCrypto.
+ * `version` 1 is the pre-v2 text-only form, kept byte-for-byte so sites on
+ * older site-kit keep verifying.
  */
-export declare function slotSigningPayload(content: Pick<SlotContent, 'slot_id' | 'type' | 'content'>): string;
+export declare function slotSigningPayload(content: Signable, version?: number): string;
 /**
  * Sign slot content with the project API key (sonor-api side).
  * Returns the hex HMAC-SHA256 signature.
  */
-export declare function signSlotContent(content: Pick<SlotContent, 'slot_id' | 'type' | 'content'>, apiKey: string): string;
+export declare function signSlotContent(content: Signable, apiKey: string, version?: number): string;
 /**
  * Verify a slot payload's shape + signature (site-kit side).
- * Returns true only when the payload is well-formed, within limits, and the
- * signature matches the project API key. Constant-time comparison.
+ * Returns true only when the payload is well-formed for its type, within
+ * limits, and the signature matches the project API key. Constant-time.
  */
-export declare function verifySlotContent(content: unknown, apiKey: string): content is SlotContent;
+export declare function verifySlotContent(content: unknown, apiKey: string, version?: number): content is SlotContent;

package/dist/engage/index.js

@@ -1,10 +1,10 @@
 'use client';
-export { ChatWidget } from '../chunk-LJZ3SUET.js';
+export { ChatWidget } from '../chunk-DUAO4Q75.js';
 import '../chunk-JE4A5S4F.js';
-export { DesignRenderer, EngageWidget } from '../chunk-T4SY3FMN.js';
+export { DesignRenderer, EngageWidget } from '../chunk-ZIMFQWGJ.js';
 import '../chunk-NDF4A5JM.js';
 import '../chunk-6T6CQVNL.js';
-import '../chunk-ZSLRAMCK.js';
+import '../chunk-XD3ZQET6.js';
 import '../chunk-AQSNPZY4.js';
 import '../chunk-5SQK3D53.js';
 import '../chunk-NJCTQH2P.js';
@@ -14,9 +14,9 @@ import '../chunk-L2V5PUFN.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 
 // src/engage/echo-config.ts

package/dist/fleet/index.js

@@ -1,10 +1,10 @@
 'use client';
-export { FLEET_HEARTBEAT_PATH, FleetHeartbeat, detectNextVersion, sendFleetHeartbeat } from '../chunk-K5WZX776.js';
+export { FLEET_HEARTBEAT_PATH, FleetHeartbeat, detectNextVersion, sendFleetHeartbeat } from '../chunk-XNVSCQ2O.js';
 export { FLEET_CONTRACT_VERSION, FLEET_MODULES, FLEET_MODULES_MAX, FLEET_SITE_MAX_LENGTH, FLEET_VERSION_MAX_LENGTH, FLEET_VERSION_PATTERN, buildFleetHeartbeatPayload, isFleetModule, normalizeFleetModules, normalizeFleetSite, sanitizeFleetVersion } from '../chunk-ZTZQPYP6.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/forms/index.js

@@ -1,21 +1,21 @@
 'use client';
-export { FormClient, ManagedForm } from '../chunk-P72ZJRSX.js';
-import '../chunk-SWP36NCB.js';
-export { DatePicker } from '../chunk-SOD2F6C2.js';
 export { FormCelebration } from '../chunk-YGGDU6C3.js';
-export { FormEnhancer } from '../chunk-42OXY4JV.js';
+export { FormClient, ManagedForm } from '../chunk-EIULXXUJ.js';
+import '../chunk-YLSEB32F.js';
+export { DatePicker } from '../chunk-SOD2F6C2.js';
+export { FormEnhancer } from '../chunk-FLR3EMK6.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-DXO6SBMD.js';
 export { FormField as FormFieldComponent } from '../chunk-QPEEKFCA.js';
-export { useForm, useFormTracking } from '../chunk-ZSLRAMCK.js';
+export { useForm, useFormTracking } from '../chunk-XD3ZQET6.js';
 import '../chunk-AQSNPZY4.js';
 export { DEFAULT_FORM_SUCCESS_MESSAGE } from '../chunk-5SQK3D53.js';
 import '../chunk-NJCTQH2P.js';
 import '../chunk-L2V5PUFN.js';
 import '../chunk-GJWI74ZZ.js';
-import { sonorFetch } from '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import { sonorFetch } from '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 
 // src/forms/formsApi.ts

package/dist/forms/server.js

@@ -1,5 +1,5 @@
-export { ServerForm, getFormConfig } from '../chunk-P2GIIQH5.js';
-import '../chunk-42OXY4JV.js';
+export { ServerForm, getFormConfig } from '../chunk-PLUP2KN5.js';
+import '../chunk-FLR3EMK6.js';
 import '../chunk-YC7ELZS3.js';
 export { StaticForm } from '../chunk-OPRBF7VE.js';
 import '../chunk-DXO6SBMD.js';

package/dist/images/index.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-O52CH273.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-GWUKQ26F.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/index.js

@@ -1,2 +1,2 @@
-export { SITE_KIT_VERSION } from './chunk-B6RZ2NRH.js';
+export { SITE_KIT_VERSION } from './chunk-4JQQDCMO.js';
 import './chunk-PKBMQBKP.js';

package/dist/layout/client.js

@@ -1,9 +1,10 @@
 'use client';
-export { SiteKitClientProviders } from '../chunk-7JIKGKWD.js';
-import '../chunk-56JNI463.js';
-import '../chunk-K5WZX776.js';
+export { SiteKitClientProviders } from '../chunk-3XPJKZ6D.js';
+import '../chunk-6G43IRWR.js';
+import '../chunk-L2DJD5Y4.js';
+import '../chunk-XNVSCQ2O.js';
 import '../chunk-ZTZQPYP6.js';
-import '../chunk-SAUTJMK6.js';
+import '../chunk-HVH37YPX.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
@@ -11,7 +12,7 @@ import '../chunk-24QZEO3Q.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/layout/index.js

@@ -1,11 +1,12 @@
-import { SiteKitClientProviders } from '../chunk-7JIKGKWD.js';
-import '../chunk-56JNI463.js';
-import '../chunk-K5WZX776.js';
+import { SiteKitClientProviders } from '../chunk-3XPJKZ6D.js';
+import '../chunk-6G43IRWR.js';
+import '../chunk-L2DJD5Y4.js';
+import '../chunk-XNVSCQ2O.js';
 import '../chunk-ZTZQPYP6.js';
 import { ManagedFavicon } from '../chunk-GW7GSBO7.js';
-import '../chunk-SAUTJMK6.js';
+import '../chunk-HVH37YPX.js';
 import '../chunk-YC7ELZS3.js';
-import { resolveClientCredential } from '../chunk-BEL7YFMC.js';
+import { resolveClientCredential } from '../chunk-F42R35NV.js';
 import '../chunk-VX5CMNMM.js';
 import { ManagedScripts } from '../chunk-MVLMXC44.js';
 import { resolveApiOrigin } from '../chunk-X6F6SO4S.js';
@@ -16,9 +17,9 @@ import '../chunk-24QZEO3Q.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 

package/dist/llms/index.js

@@ -1,9 +1,10 @@
-export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLLMsFullTxtHandler, createLLMsTxtHandler, createLlmsRevalidateHandler, createSeoRevalidationHandler, formatSourcedFactsSection, llmsResponseHeaders, parseSeoRevalidationPayload } from '../chunk-LVESVYCE.js';
+export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-ZETJTCMV.js';
 export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-PO2TRJPY.js';
 export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler } from '../chunk-QLTDFUJ7.js';
+export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-7MHHWZKC.js';
 import '../chunk-XTRZGXB2.js';
 export { AEOBlock, AEOCitedContent, AEOClaim, AEOComparison, AEODefinition, AEOEntity, AEOProvenanceList, AEOStep, AEOSteps, AEOSummary, DEFAULT_SPEAKABLE_SELECTORS, SpeakableSchema, createSpeakableSchema, getSpeakableSelectorsForPage } from '../chunk-PSAG45YF.js';
-export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-SSUQKA7L.js';
+export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-J4D6ZXRW.js';
 export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-GLHQ3LRO.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
@@ -14,4 +15,5 @@ import '../chunk-MJP63SSS.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';

package/dist/llms/seo-revalidate.d.ts

@@ -31,7 +31,13 @@
  * ```
  *
  * Contract (POST, `Authorization: Bearer <SONOR_API_KEY>`, JSON):
- * `{ paths?: string[], path?: string, tags?: string[], tag?: string, revalidateAll?: boolean }`
+ * `{ paths?: string[], path?: string, tags?: string[], tag?: string, revalidateAll?: boolean, ping?: boolean }`
+ * (`SiteRevalidatePayload` in `@sonordev/contracts/site-cache`). `ping: true`
+ * regenerates nothing and answers `{ ok: true, ping: true, version }`, so Sonor
+ * can tell the route is installed and the key matches.
+ *
+ * Most sites don't call this directly: `@sonordev/site-kit/revalidate` is this
+ * handler preconfigured, so the route file is one line.
  */
 /** Largest webhook body accepted, in bytes. Sonor's payloads are a few hundred. */
 export declare const SEO_REVALIDATION_MAX_BODY_BYTES: number;
@@ -90,6 +96,7 @@ export declare function parseSeoRevalidationPayload(value: unknown): SeoRevalida
 /**
  * Create the POST handler for Sonor's SEO revalidation webhook.
  *
+ * - `{ ping: true }` (after the auth check) answers a pong and regenerates nothing.
  * - 401 unless `Authorization: Bearer <secret>` matches (constant time). The
  *   `?secret=` query form `createLlmsRevalidateHandler` accepts is not
  *   honoured here: keys don't belong in URLs.

package/dist/maps/index.js

@@ -1,8 +1,8 @@
 'use client';
 import { monotonicMs } from '../chunk-MH2DSGC6.js';
-import { sonorFetch } from '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import '../chunk-B6RZ2NRH.js';
+import { sonorFetch } from '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 import { useState, useCallback, useEffect } from 'react';
 import { APIProvider, Map as Map$1, AdvancedMarker, Pin, InfoWindow } from '@vis.gl/react-google-maps';

package/dist/mcp/sonor.js

@@ -1,10 +1,10 @@
 import { toolErrorResult } from '../chunk-FYAB6CXS.js';
 import { fetchReviews, fetchReviewStats } from '../chunk-EDYHROQ7.js';
 import { getOfferings } from '../chunk-G3NHWMP5.js';
-import { fetchBookingTypes, fetchAvailability } from '../chunk-5FBY2ZIH.js';
+import { fetchBookingTypes, fetchAvailability } from '../chunk-7QTMMHUO.js';
 import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-GLHQ3LRO.js';
-import { getFormConfig } from '../chunk-P2GIIQH5.js';
-import '../chunk-42OXY4JV.js';
+import { getFormConfig } from '../chunk-PLUP2KN5.js';
+import '../chunk-FLR3EMK6.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-OPRBF7VE.js';
 import '../chunk-DXO6SBMD.js';
@@ -22,9 +22,9 @@ import { resolveSiteHost } from '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-5SQK3D53.js';
 import '../chunk-NJCTQH2P.js';
-import '../chunk-RU2RMTGT.js';
-import '../chunk-OIETJKIL.js';
-import { SITE_KIT_VERSION } from '../chunk-B6RZ2NRH.js';
+import '../chunk-U35H2JIQ.js';
+import '../chunk-EVFZ7KEW.js';
+import { SITE_KIT_VERSION } from '../chunk-4JQQDCMO.js';
 import '../chunk-PKBMQBKP.js';
 import 'server-only';
 import { after } from 'next/server.js';