@sonordev/site-kit 7.1.1 → 7.2.0

package/README.md

@@ -1,6 +1,6 @@
 # @sonordev/site-kit
 
-All-in-one integration kit for [Sonor](https://sonor.io)-powered Next.js sites. One package, one env var, every module: SEO, Analytics, Forms, Articles, Commerce, Engage, GEO/AEO, Booking, Reputation, A/B Testing, and more — all managed from the Sonor dashboard at [app.sonor.io](https://app.sonor.io).
+All-in-one integration kit for [Sonor](https://sonor.io)-powered Next.js sites. One package, one env var, every module: SEO, Analytics, Forms, Articles, Commerce, Website chat, Popups, GEO/AEO, Booking, Reputation, A/B Testing, and more — all managed from the Sonor dashboard at [app.sonor.io](https://app.sonor.io).
 
 ## Install
 
@@ -53,7 +53,7 @@ export default function RootLayout({ children }: { children: React.ReactNode })
 }
 ```
 
-`SiteKitLayout` is an RSC-compatible async Server Component that auto-composes: analytics tracking, Engage widgets, favicons, and managed scripts. No client-side provider wrapping needed: client modules mount as deferred siblings after `{children}`, so the page stays server-rendered. Props and module options: [src/layout/README.md](src/layout/README.md).
+`SiteKitLayout` is an RSC-compatible async Server Component that auto-composes: analytics tracking, website chat, popups, favicons, and managed scripts. No client-side provider wrapping needed: client modules mount as deferred siblings after `{children}`, so the page stays server-rendered. Props and module options: [src/layout/README.md](src/layout/README.md).
 
 **Proxy (optional but recommended):**
 
@@ -112,8 +112,8 @@ Every module has its own README in `src/<module>/README.md` with full API docs,
 
 | Module | Import | Purpose | Docs |
 |--------|--------|---------|------|
-| **Website chat** | `@sonordev/site-kit/chat` | The chat launcher and Echo (Sonor → Messages) | [README](src/engage/README.md) |
-| **Popups & Banners** | `@sonordev/site-kit/website/popups` | Popups, banners and toasts from Sonor → Website, drawn in the site's own design | [contract](src/website/contract.ts) |
+| **Website chat** | `@sonordev/site-kit/chat` | The chat launcher and Echo (Sonor → Messages) | [README](src/chat/README.md) |
+| **Popups & Banners** | `@sonordev/site-kit/website/popups` | Popups, banners and toasts from Sonor → Website, drawn in the site's own design | [README](src/website/README.md) |
 | **Forms** | `@sonordev/site-kit/forms` | Managed forms with CRM routing, multi-step, validation | [README](src/forms/README.md) |
 | **Signal** | `@sonordev/site-kit/signal` | A/B experiments, behavior tracking, real-time config | [README](src/signal/README.md) |
 
@@ -149,7 +149,7 @@ Three tiers as three subpaths — a site only installs and ships what it imports
 |--------|--------|---------|------|
 | **CTA bar** | `@sonordev/site-kit/website/cta-bar` | `<CtaBar>` + `<CtaBarAction>`: the floating glass mobile CTA bar. Hides over its form and while typing, compacts on scroll, lifts the Echo launcher, emits `cta_click`. Server component. | [README](src/cta-bar/README.md) |
 
-Echo's launcher and chat window use the same glass recipe; see [Engage](src/engage/README.md#liquid-glass-610).
+Echo's launcher and chat window use the same glass recipe; see [Website chat](src/chat/README.md#liquid-glass-610).
 
 ---
 
@@ -167,7 +167,8 @@ SiteKitLayout (RSC server component)
 │
 ├── Client-side (childless siblings after {children}, deferred to idle):
 │   ├── AnalyticsProvider      (page views, scroll depth, Web Vitals)
-│   ├── EngageWidget           (popups, nudges, chat)
+│   ├── SitePopups             (popups, banners, toasts)
+│   ├── SiteChat               (website chat: Echo)
 │   ├── SignalBridge           (A/B experiments, opt-in, not deferred)
 │   ├── SitemapSync            (browser sitemap fallback, opt-in)
 │   └── FleetHeartbeat         (kit version + modules, once per session)
@@ -209,7 +210,7 @@ import { OfferingCard, ProductPage, EventCalendar } from '@sonordev/site-kit/com
 import { BookingWidget } from '@sonordev/site-kit/sync'
 
 // Website chat, and popups (SiteKitLayout mounts both; its `chat` and `popups` props turn them off)
-import { ChatWidget } from '@sonordev/site-kit/chat'
+import { SiteChat, ChatWidget } from '@sonordev/site-kit/chat'
 import { SitePopups, PopupBlocks } from '@sonordev/site-kit/website/popups'
 
 // Signal (A/B)
@@ -322,7 +323,7 @@ import type { SiteKitLayoutProps } from '@sonordev/site-kit/layout'
 `@sonordev/site-kit` is the client bridge between Next.js marketing sites and the Sonor platform. All persistent data (forms, articles, SEO config, analytics) lives in Sonor — site-kit fetches, renders, and tracks.
 
 - **Server components** (SEO, Articles, Images): Import directly, RSC-compatible, no provider needed
-- **Client modules** (Analytics, Engage, Signal): Lazy-loaded via `SiteKitLayout`, tree-shaken
+- **Client modules** (Analytics, chat, popups, Signal): Lazy-loaded via `SiteKitLayout`, tree-shaken
 - **Build-time** (Sitemap, llms.txt): Run during `next build`, sync to Sonor
 - **Middleware** (Redirects, Security, AI Discovery): Runs on every request edge
 

package/agent-manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@sonordev/site-kit",
-  "version": "7.1.1",
+  "version": "7.2.0",
   "description": "Machine-readable manifest for coding agents integrating a site with Sonor. See AGENTS.md (shipped) and docs/SITE-KIT-AGENT-NATIVE.md.",
   "env": {
     "required": [
@@ -139,7 +139,8 @@
       "name": "engage",
       "import": "@sonordev/site-kit/engage",
       "side": "client",
-      "purpose": "Popups, nudges, banners, chat widget configured in Sonor.",
+      "purpose": "Deprecated alias, kept through 7.x: Engage was retired in Sonor. Re-exports ./chat (ChatWidget, chat types) and ./website/popups under the old names; EngageWidget draws SiteChat and SitePopups.",
+      "caution": "Import ./chat or ./website/popups instead, or let SiteKitLayout mount both (its chat and popups props). DesignRenderer (Engage Studio) is gone; popups render from blocks.",
       "stability": "deprecated",
       "movedTo": [
         "@sonordev/site-kit/chat",
@@ -387,13 +388,13 @@
       "name": "chat",
       "import": "@sonordev/site-kit/chat",
       "side": "client",
-      "purpose": "Website chat (Sonor → Messages): ChatWidget, the launcher and Echo. SiteKitLayout mounts it (its `chat` prop); import it to place it yourself."
+      "purpose": "Website chat (Sonor → Messages): SiteChat (idle-deferred launcher, gated like analytics), ChatWidget and Echo. SiteKitLayout mounts it (its `chat` prop); import it to place it yourself."
     },
     {
       "name": "website/popups",
       "import": "@sonordev/site-kit/website/popups",
       "side": "client",
-      "purpose": "Website → Popups & Banners: SitePopups shows the popups published for this site, drawn in its own design; PopupBlocks renders one from its blocks. SiteKitLayout mounts it (its `popups` prop)."
+      "purpose": "Website → Popups & Banners: SitePopups shows the popups, banners and toasts published for the site (only those with blocks), waiting while a visitor is mid-form; PopupBlocks draws one. SiteKitLayout mounts it (its `popups` prop)."
     },
     {
       "name": "website/images",
@@ -732,6 +733,13 @@
       "fix": "Remove the runtime export, then `npx sonor-setup codemod --write` moves the file to proxy.ts.",
       "check": "middleware.netlify"
     },
+    {
+      "id": "proxy.misplaced",
+      "symptom": "The build passes, but the site sends no security headers and runs no Sonor-managed redirects.",
+      "cause": "The proxy file sits where Next never reads it. Next reads proxy.ts (and the deprecated middleware.ts) only from the directory that holds the app: the project root, or src/ when the app is src/app. A proxy.ts at the root of a src/app site is ignored without a warning. sonor-setup 7.1.1's codemod renamed middleware.ts in place, which left it at the root on src/app sites.",
+      "fix": "Run `npx sonor-setup codemod --write` (7.1.2 or later): it moves the proxy beside the app and fixes its relative imports. It never overwrites, so when a proxy exists in both places it reports both and you keep the right one by hand. Rebuild and re-run doctor.",
+      "check": "middleware.netlify"
+    },
     {
       "id": "sitemap.trailing-slash",
       "symptom": "Every sitemap URL except / 308-redirects to the same path with a trailing slash; the sitemap disagrees with the canonicals.",

package/dist/{AnalyticsProvider-3MI5RCTL.js → AnalyticsProvider-SLFFBRPE.js}

@@ -1,11 +1,11 @@
-export { AnalyticsProvider, useAnalytics, useAnalyticsOptional, useTrackEvent } from './chunk-7FWA3I6A.js';
+export { AnalyticsProvider, useAnalytics, useAnalyticsOptional, useTrackEvent } from './chunk-JWTQS5F5.js';
 import './chunk-LCDVPAMR.js';
 import './chunk-24QZEO3Q.js';
 import './chunk-L2V5PUFN.js';
 import './chunk-GJWI74ZZ.js';
 import './chunk-43OCZ3JA.js';
 import './chunk-EKBEOXTH.js';
-import './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';

package/dist/{ArticleViewTracker-CMBSJR3N.js → ArticleViewTracker-TM5AMGN2.js}

@@ -3,9 +3,9 @@ import { useDeferredActivation } from './chunk-YC7ELZS3.js';
 import { withSiteBody } from './chunk-MJP63SSS.js';
 import './chunk-FESKKJAS.js';
 import './chunk-A4CC4ZG3.js';
-import { sonorFetch } from './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import { sonorFetch } from './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';
 import { useEffect } from 'react';
 

package/dist/{BlocksPopup-X3OAAK2L.js → BlocksPopup-YJNJIVPO.js}

@@ -1,13 +1,13 @@
 'use client';
-import { getSiteDesignTokens } from './chunk-ODADQM6Z.js';
-import { DEFAULT_POPUP_TOKENS, PopupBlocks } from './chunk-JSZN6LDZ.js';
+import { getSiteDesignTokens } from './chunk-JJ3DELUL.js';
+import { DEFAULT_POPUP_TOKENS, PopupBlocks } from './chunk-BF7TZYC3.js';
 import { normalizePopupBlocks, toHexColor, readableOn } from './chunk-IHG36STL.js';
 import './chunk-S22FSH7C.js';
 import './chunk-43OCZ3JA.js';
 import './chunk-EKBEOXTH.js';
-import './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';
 import { useState } from 'react';
 import { jsx } from 'react/jsx-runtime';

package/dist/ChatWidget-XKOSH66S.js

@@ -0,0 +1,17 @@
+export { ChatWidget, EchoChat, isChatEnabled } from './chunk-64DKGVEI.js';
+import './chunk-6T6CQVNL.js';
+import './chunk-JE4A5S4F.js';
+import './chunk-27FISYK4.js';
+import './chunk-FR6BYFPC.js';
+import './chunk-Q6E4OPGG.js';
+import './chunk-C2FZBUSS.js';
+import './chunk-5SQK3D53.js';
+import './chunk-HW7B43E5.js';
+import './chunk-NJCTQH2P.js';
+import './chunk-S22FSH7C.js';
+import './chunk-L2V5PUFN.js';
+import './chunk-GJWI74ZZ.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
+import './chunk-PKBMQBKP.js';

package/dist/{FileField-QRSEGO6D.js → FileField-CI4UL5SH.js}

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import { sonorFetch } from './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';
 import React from 'react';
 import { jsxs, Fragment, jsx } from 'react/jsx-runtime';

package/dist/{FormSpotlight-XKV7VTN4.js → FormSpotlight-F2AAEGBN.js}

@@ -1,8 +1,11 @@
 'use client';
 import { StageStyles, SummaryTick } from './chunk-J4FSB4OG.js';
-import { stageFirstName, useFieldControls, stageViews, stageEstimate, AUTO_ADVANCE_TYPES } from './chunk-JC7KXNNM.js';
-import { FormField } from './chunk-QPEEKFCA.js';
-import { isEmptyValue, isDisplayOnly } from './chunk-AQSNPZY4.js';
+import { stageFirstName, useFieldControls, stageViews, stageEstimate, AUTO_ADVANCE_TYPES } from './chunk-D5DCBD4Y.js';
+import { FormField } from './chunk-4NTBQNHA.js';
+import { readAgentSubmit, formToolAttributes } from './chunk-Q6E4OPGG.js';
+import { isEmptyValue, unseenControlValues, isDisplayOnly } from './chunk-C2FZBUSS.js';
+import './chunk-HW7B43E5.js';
+import { DEFAULT_HONEYPOT_FIELD } from './chunk-NJCTQH2P.js';
 import './chunk-PKBMQBKP.js';
 import { useMemo, useCallback, useState, useRef, useEffect } from 'react';
 import { jsx, jsxs } from 'react/jsx-runtime';
@@ -527,11 +530,21 @@ function FormSpotlight({
   const handleSubmit = useCallback(
     (e) => {
       e.preventDefault();
-      if (isSubmitting) return;
+      const agent = readAgentSubmit(e.nativeEvent);
+      if (isSubmitting) {
+        agent.respond(Promise.resolve({ status: "busy" }));
+        return;
+      }
       clearAutoTimer();
-      void submit();
+      const domFills = unseenControlValues(
+        e.currentTarget,
+        config.fields,
+        config.honeypot_field || DEFAULT_HONEYPOT_FIELD,
+        values
+      );
+      agent.respond(submit({ agentInvoked: agent.invoked, domFills }));
     },
-    [isSubmitting, submit, clearAutoTimer]
+    [isSubmitting, submit, clearAutoTimer, config, values]
   );
   useEffect(() => {
     const offender = questions.find((q) => errors[q.slug]);
@@ -560,6 +573,7 @@ function FormSpotlight({
       ref: formRef,
       className: `sk-form sk-spot ${live ? "sk-spot--live " : ""}${className || ""}`,
       "data-sk-part": "spotlight",
+      ...formToolAttributes(config),
       "data-sk-state": isSubmitting ? "submitting" : "idle",
       "data-sk-ready": ready && momentum.total > 0 ? "true" : void 0,
       onSubmit: handleSubmit,

package/dist/{FormStage-C3YGYAUZ.js → FormStage-BI5R5CNC.js}

@@ -1,8 +1,11 @@
 'use client';
 import { StageStyles, SummaryTick } from './chunk-J4FSB4OG.js';
-import { useFieldControls, stageViews, stageFirstName, stageEstimate, formatAnswer, AUTO_ADVANCE_TYPES } from './chunk-JC7KXNNM.js';
-import { FormField } from './chunk-QPEEKFCA.js';
-import { isEmptyValue } from './chunk-AQSNPZY4.js';
+import { useFieldControls, stageViews, stageFirstName, stageEstimate, formatAnswer, AUTO_ADVANCE_TYPES } from './chunk-D5DCBD4Y.js';
+import { FormField } from './chunk-4NTBQNHA.js';
+import { readAgentSubmit, formToolAttributes } from './chunk-Q6E4OPGG.js';
+import { isEmptyValue, unseenControlValues } from './chunk-C2FZBUSS.js';
+import './chunk-HW7B43E5.js';
+import { DEFAULT_HONEYPOT_FIELD } from './chunk-NJCTQH2P.js';
 import './chunk-PKBMQBKP.js';
 import { useState, useRef, useMemo, useEffect, useCallback } from 'react';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
@@ -205,11 +208,27 @@ function FormStage({
   const handleSubmit = useCallback(
     (e) => {
       e.preventDefault();
-      if (isSubmitting) return;
-      if (activeIndex !== REST) advance();
-      else void submit();
+      const agent = readAgentSubmit(e.nativeEvent);
+      if (isSubmitting) {
+        agent.respond(Promise.resolve({ status: "busy" }));
+        return;
+      }
+      if (activeIndex !== REST) {
+        advance();
+        agent.respond(
+          Promise.resolve({ status: "next_step", step: activeIndex + 2, totalSteps: views.length })
+        );
+        return;
+      }
+      const domFills = unseenControlValues(
+        e.currentTarget,
+        config.fields,
+        config.honeypot_field || DEFAULT_HONEYPOT_FIELD,
+        values
+      );
+      agent.respond(submit({ agentInvoked: agent.invoked, domFills }));
     },
-    [activeIndex, isSubmitting, advance, submit]
+    [activeIndex, isSubmitting, advance, submit, config, values, views.length]
   );
   const handleFinaleSubmit = useCallback(() => {
     hasInteractedRef.current = true;
@@ -230,6 +249,7 @@ function FormStage({
       ref: formRef,
       className: `sk-form sk-stage ${className || ""}`,
       "data-sk-part": "stage",
+      ...formToolAttributes(config),
       "data-sk-state": isSubmitting ? "submitting" : "idle",
       "data-sk-ready": activeIndex === REST && ready && total > 0 ? "true" : void 0,
       onSubmit: handleSubmit,

package/dist/ManagedForm-G6COGHXL.js

@@ -0,0 +1,16 @@
+export { ManagedForm } from './chunk-IAM3D3RL.js';
+import './chunk-D5DCBD4Y.js';
+import './chunk-DXO6SBMD.js';
+import './chunk-4NTBQNHA.js';
+import './chunk-FR6BYFPC.js';
+import './chunk-Q6E4OPGG.js';
+import './chunk-C2FZBUSS.js';
+import './chunk-5SQK3D53.js';
+import './chunk-HW7B43E5.js';
+import './chunk-NJCTQH2P.js';
+import './chunk-L2V5PUFN.js';
+import './chunk-GJWI74ZZ.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
+import './chunk-PKBMQBKP.js';

package/dist/{ManagedNewsletterForm-LPIKGJF4.js → ManagedNewsletterForm-BO3WCGXX.js}

@@ -1,14 +1,16 @@
 import { NewsletterShell } from './chunk-SC4MZGWZ.js';
 import './chunk-GYF2ULVO.js';
-import { useForm } from './chunk-NEKEH4CK.js';
-import './chunk-AQSNPZY4.js';
+import { useForm } from './chunk-FR6BYFPC.js';
+import './chunk-Q6E4OPGG.js';
+import './chunk-C2FZBUSS.js';
 import './chunk-5SQK3D53.js';
+import './chunk-HW7B43E5.js';
 import './chunk-NJCTQH2P.js';
 import './chunk-L2V5PUFN.js';
 import './chunk-GJWI74ZZ.js';
-import './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';
 import { jsx } from 'react/jsx-runtime';
 

package/dist/{SignalCore-ICXXZBYI.js → SignalCore-ZA6WHKBR.js}

@@ -2,9 +2,9 @@
 import { getOrCreateVisitorId, getOrCreateSessionId } from './chunk-24QZEO3Q.js';
 import { onPageLeave } from './chunk-L2V5PUFN.js';
 import './chunk-GJWI74ZZ.js';
-import { sonorFetch } from './chunk-PXZ7LAOY.js';
-import { getFreshCredential, isSiteToken } from './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import { sonorFetch } from './chunk-D6ZC7XKZ.js';
+import { getFreshCredential, isSiteToken } from './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';
 import { useState, useRef, useEffect, useCallback } from 'react';
 

package/dist/SiteChat-YJADDTKG.js

@@ -0,0 +1,5 @@
+export { SiteChat } from './chunk-NV72HZ4W.js';
+import './chunk-27FISYK4.js';
+import './chunk-43OCZ3JA.js';
+import './chunk-EKBEOXTH.js';
+import './chunk-PKBMQBKP.js';

package/dist/{SiteDesignReporter-A7MS2CIP.js → SiteDesignReporter-5YAW36AQ.js}

@@ -1,11 +1,11 @@
-export { SiteDesignReporter } from './chunk-ICFRH2ED.js';
-import './chunk-ODADQM6Z.js';
+export { SiteDesignReporter } from './chunk-5YCEMV2L.js';
+import './chunk-JJ3DELUL.js';
 import './chunk-IHG36STL.js';
 import './chunk-YC7ELZS3.js';
 import './chunk-S22FSH7C.js';
 import './chunk-43OCZ3JA.js';
 import './chunk-EKBEOXTH.js';
-import './chunk-PXZ7LAOY.js';
-import './chunk-OUNRFXDC.js';
-import './chunk-6OL23QYD.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
 import './chunk-PKBMQBKP.js';

package/dist/SitePopups-ST5PMKZE.js

@@ -0,0 +1,10 @@
+export { SitePopups } from './chunk-EJVQJCG5.js';
+import './chunk-27FISYK4.js';
+import './chunk-24QZEO3Q.js';
+import './chunk-GJWI74ZZ.js';
+import './chunk-43OCZ3JA.js';
+import './chunk-EKBEOXTH.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
+import './chunk-PKBMQBKP.js';

package/dist/SitemapSync-RJTEBINX.js

@@ -0,0 +1,8 @@
+export { SitemapSync } from './chunk-GEXT7BTE.js';
+import './chunk-YVKRYQRG.js';
+import './chunk-43OCZ3JA.js';
+import './chunk-EKBEOXTH.js';
+import './chunk-D6ZC7XKZ.js';
+import './chunk-K4ZHAURD.js';
+import './chunk-F24FNCTK.js';
+import './chunk-PKBMQBKP.js';

package/dist/SitemapSync.d.ts

@@ -1,5 +1,5 @@
 /**
- * SitemapSync - Automatically sync sitemap.xml to Portal API
+ * SitemapSync - Automatically sync sitemap.xml to Sonor API
  *
  * Client-only component. Lives at package root so the main entry does not
  * pull in seo/ (and server-only code). For use in SiteKitLayout and

package/dist/_client/booking-widget.js

@@ -1,7 +1,7 @@
 'use client';
-export { BookingWidget, BookingWidget_default as default } from '../chunk-ZAWANWUS.js';
-import '../chunk-EFPS56JA.js';
-import '../chunk-PXZ7LAOY.js';
-import '../chunk-OUNRFXDC.js';
-import '../chunk-6OL23QYD.js';
+export { BookingWidget, BookingWidget_default as default } from '../chunk-GGORNBSC.js';
+import '../chunk-BKY2ZNM7.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';

package/dist/_client/testimonial-section.d.ts

@@ -2,7 +2,7 @@
  * @sonordev/site-kit/reputation - Testimonial Section
  *
  * Displays client reviews in a rotating carousel
- * Fetches published reviews from Portal API public endpoint
+ * Fetches published reviews from Sonor API public endpoint
  *
  * Minimal styling - let site CSS control appearance
  */

package/dist/affiliates/api.d.ts

@@ -2,7 +2,7 @@
  * @sonordev/site-kit/affiliates - Affiliates API
  *
  * API functions for fetching affiliate data for client sites.
- * All data goes through Portal API with API key auth - never Supabase directly.
+ * All data goes through Sonor API with API key auth - never Supabase directly.
  */
 import type { AffiliateWithOffers, FetchAffiliatesOptions } from './types';
 /**

package/dist/affiliates/index.js

@@ -1,7 +1,7 @@
 'use client';
-import { sonorFetch } from '../chunk-PXZ7LAOY.js';
-import '../chunk-OUNRFXDC.js';
-import '../chunk-6OL23QYD.js';
+import { sonorFetch } from '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';
 import { useState, useEffect } from 'react';
 import { jsx, jsxs } from 'react/jsx-runtime';

package/dist/analytics/AnalyticsProvider.d.ts

@@ -27,7 +27,7 @@ interface AnalyticsProviderProps {
     /** Callback invoked with page metadata after each page view (used by Signal bridge) */
     onPageMetadata?: (metadata: Record<string, unknown>) => void;
     /**
-     * Sub-site identifier (e.g. `ohiopowerstudies.com`). Every event tagged with
+     * Sub-site identifier (e.g. `ohio.example.com`). Every event tagged with
      * this string so a single Sonor project can host many sites and the
      * dashboard can filter / roll up per site. Normally passed in by
      * SiteKitClientProviders; if omitted, falls back to

package/dist/analytics/index.js

@@ -1,13 +1,13 @@
 'use client';
 export { ContactTracking, useContactTracking } from '../chunk-P5GB6NEO.js';
-export { AnalyticsProvider, WebVitals, useAnalytics, useAnalyticsOptional, useTrackEvent } from '../chunk-7FWA3I6A.js';
+export { AnalyticsProvider, WebVitals, useAnalytics, useAnalyticsOptional, useTrackEvent } from '../chunk-JWTQS5F5.js';
 export { trackConversion, trackEvent } from '../chunk-LCDVPAMR.js';
 import '../chunk-24QZEO3Q.js';
 import '../chunk-L2V5PUFN.js';
 import '../chunk-GJWI74ZZ.js';
 export { isCrossOriginFrame, isFramed, isTopFrameSameOrigin } from '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-PXZ7LAOY.js';
-import '../chunk-OUNRFXDC.js';
-import '../chunk-6OL23QYD.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';

package/dist/analytics/send-gate.d.ts

@@ -9,10 +9,10 @@
  * {@link analyticsBeacon}. Do NOT call sonorFetch/sonorBeacon directly from
  * this module, and do not re-fork the credential resolution below; the
  * eight hand-rolled copies this replaced are exactly how a rule gets fixed
- * in one place and left broken in seven (see CLAUDE.md, "Code Hygiene").
+ * in one place and left broken in seven.
  * `send-gate.test.ts` fails the build if a new direct call appears.
  *
- * Fleet, client SitemapSync and Engage also consult this gate. Local browser
+ * Fleet, client SitemapSync, chat and popups also consult this gate. Local browser
  * hosts are blocked regardless of configured production site identity. Node
  * build callers retain their existing behavior.
  *
@@ -26,33 +26,20 @@
  *
  * 2. IS THERE A CREDENTIAL? Unchanged behavior — no key, no send.
  *
- * ─── Why this landed on 2026-09-08, and what was measured ──────────────────
+ * ─── Why ─────────────────────────────────────────────────────────────────
  *
- * Upforge case studies embed each client's whole production site in three
- * eager iframes per study (agency-site-kit `DeviceTrifolio`), and
- * `securityHeaders`' DEFAULT_FRAME_ANCESTORS has allowed https://upforge.io
- * to frame every managed site since it was introduced. DeviceTrifolio's own
- * doc comment reasons that nobody is affected because its cross-origin load
- * detection can never succeed, so the screenshot overlay never fades. That is
- * true of the PIXELS and false of the JAVASCRIPT: the overlay is an opacity
- * layer over a live frame, so the embedded site loads, hydrates and runs its
- * analytics whether or not it is ever revealed.
- *
- * Measured in the Sonor analytics table before this change (2026-09-08), the
- * signature is unmistakable — from `analytics_page_views`, three views of `/`
- * sharing ONE session_id and ONE visitor_id, milliseconds apart, with
- * referrer `https://upforge.io/`:
- *
- *   abbeyglenapts.com   20:02:13.852 / .900 / .921   (48ms, 21ms apart)
- *   goldenmilenky.com   04:12:23.840 / .868 / 24.624
- *   queencityriverboats 22:12:33.609 / .690 / .784
+ * Agency case studies embed a client's whole production site in desktop,
+ * tablet and mobile iframes, and `securityHeaders`' DEFAULT_FRAME_ANCESTORS
+ * lets them. A screenshot overlay on those frames hides the PIXELS, not the
+ * JAVASCRIPT: the overlay is an opacity layer over a live frame, so the
+ * embedded site loads, hydrates and runs its analytics whether or not it is
+ * ever revealed.
  *
+ * The signature is unmistakable: three views of `/` sharing ONE session_id
+ * and ONE visitor_id, milliseconds apart, with the portfolio as referrer.
  * Three loads of one page inside 70 milliseconds is not a person; it is the
- * desktop + tablet + mobile frames of one trifolio, sharing storage because
- * they share the embedded site's origin. 23 client sites carried this traffic
- * on the day of the fix, the oldest from 2026-06-11. The widening of
- * frame-ancestors to upforgelabs.com (upforge-nextjs 0c12be5) does not start
- * this problem — it multiplies one that was already live.
+ * three frames of one case study, sharing storage because they share the
+ * embedded site's origin.
  *
  * ─── Same-origin frames are ALLOWED, deliberately ──────────────────────────
  *

package/dist/articles/Article.d.ts

@@ -62,7 +62,7 @@ export interface ArticleServerProps {
     unstyled?: boolean;
     siteUrl?: string;
     /**
-     * Sub-site host for multi-site projects (e.g. `bd-charlotte.com`). Scopes
+     * Sub-site host for multi-site projects (e.g. `charlotte.example.com`). Scopes
      * the post, related-posts and view-count calls to that host. Omit to resolve
      * from NEXT_PUBLIC_SITE_URL. Separate from `siteUrl`, which only decides
      * which links in the body open in a new tab.

package/dist/articles/ArticleList.d.ts

@@ -57,7 +57,7 @@ export interface ArticleListServerProps {
     orderBy?: 'published_at' | 'title' | 'view_count';
     order?: 'asc' | 'desc';
     /**
-     * Sub-site host for multi-site projects (e.g. `bd-charlotte.com`): the list
+     * Sub-site host for multi-site projects (e.g. `charlotte.example.com`): the list
      * shows that host's posts plus project-wide ones. Omit to resolve from
      * NEXT_PUBLIC_SITE_URL.
      */

package/dist/articles/ClusterLandingPage.d.ts

@@ -7,7 +7,7 @@
  * - Pillar article (featured, large card)
  * - Support articles (grid, categorized by article_type or funnel_stage)
  *
- * Server component — fetches cluster data from Portal API.
+ * Server component — fetches cluster data from Sonor API.
  * Ships with `.sk-cluster-landing-*` scoped styles.
  */
 import React from 'react';
@@ -24,7 +24,7 @@ export interface ClusterLandingPageProps {
     /**
      * Include each article's own category segment in its URL:
      * {basePath}/{category}/{slug}. Enable on sites whose article routes are
-     * category-segmented (e.g. upforge.io /insights/{category}/{slug}) —
+     * category-segmented (e.g. /insights/{category}/{slug}) —
      * without it, links point at {basePath}/{slug} and 404 on such sites.
      */
     categoryInPath?: boolean;

package/dist/articles/PublicationLayout.d.ts

@@ -8,7 +8,7 @@ import React from 'react';
 import { PublicationSidebarProps } from './PublicationSidebar';
 import type { PublicationRoutingOptions } from './routes';
 export interface PublicationLayoutProps {
-    /** Portal API URL */
+    /** Sonor API URL */
     apiUrl?: string;
     /** Project API key */
     apiKey?: string;

package/dist/articles/PublicationSidebar.d.ts

@@ -7,7 +7,7 @@
 import React from 'react';
 import { type PublicationRoutingOptions } from './routes';
 export interface PublicationSidebarProps {
-    /** Portal API URL */
+    /** Sonor API URL */
     apiUrl?: string;
     /** Project API key */
     apiKey?: string;

package/dist/articles/RelatedPosts.d.ts

@@ -1,7 +1,7 @@
 /**
  * @sonordev/site-kit/articles - Related articles component
  *
- * Fetches and displays related articles via Portal API
+ * Fetches and displays related articles via Sonor API
  */
 import React from 'react';
 import type { Article } from './types';

package/dist/articles/author-schema.d.ts

@@ -20,7 +20,7 @@
  *   (Google's profile-page markup for author pages).
  * - The `Person` carries one `@id` everywhere it appears (`authorEntityId`):
  *   the row's `entity_id` when the person has a cross-site identity (e.g.
- *   https://ramseydeal.com/#person), else `<author profile URL>#person`.
+ *   https://example.com/#person), else `<author profile URL>#person`.
  * - Article bylines (`generateArticleAuthorNode`) reference that same `@id`,
  *   so an article, its author page and the person's own site describe one
  *   person, which is what a Knowledge Panel is built from.