@sonordev/site-kit 7.1.2 → 7.2.0

package/dist/shared/mid-form.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @sonordev/site-kit shared: is the visitor in the middle of a form?
+ *
+ * SINGLE SOURCE OF TRUTH for whether something may open over the page right
+ * now. SitePopups asks before any popup or toast opens on its own (whatever
+ * the trigger: immediate, delay, scroll or exit intent) and waits while the
+ * answer is yes.
+ * Don't write a second check; extend this one.
+ *
+ * Why it matters: a modal popup takes focus and hides the rest of the page
+ * from assistive technology while it's open. Opening one mid-form throws a
+ * person out of the field they're typing in, and an agent browser filling the
+ * form for someone (they act on the accessibility tree) loses every field it
+ * was about to fill.
+ *
+ * Mid-form means any of:
+ * - focus is on a field (input, textarea, select) that belongs to a form, or
+ *   inside a frame in a form (a payment provider's card field);
+ * - a form has a field the visitor filled: a value that isn't empty and isn't
+ *   the one the page rendered with, or one they typed into (watchFormInput);
+ * - a site-kit form is carrying what the visitor typed into its server-rendered
+ *   shell before it upgraded (FormEnhancer marks its wrapper
+ *   `data-sk-carried`; the upgraded fields are new elements nobody typed into
+ *   yet, and React keeps their default equal to their value);
+ * - a site-kit form is sending (`data-sk-state="submitting"`).
+ *
+ * Fields a visitor doesn't fill don't count: hidden inputs, buttons, fields
+ * nobody can see or reach (inert or aria-hidden), and site-kit's trap field.
+ */
+/**
+ * Remember which fields the visitor types into from here on. React keeps a
+ * controlled field's default value equal to its current value, so comparing
+ * the two can't see what someone typed into one; the input event can.
+ * Idempotent: one pair of capture listeners per document, kept for the page's
+ * life. SitePopups starts it when it mounts.
+ */
+export declare function watchFormInput(doc?: Document): void;
+/** Whether the visitor is in the middle of a form (see the module comment for what counts). */
+export declare function isVisitorMidForm(doc?: Document): boolean;
+export interface MidFormWaitOptions {
+    doc?: Document;
+    /** How long after focus leaves a field to look again. Default 1500ms. */
+    settleMs?: number;
+    /** How often to look again while waiting. Default 5000ms. */
+    pollMs?: number;
+}
+/**
+ * Run `open` now if the visitor isn't mid-form, otherwise as soon as they
+ * aren't: a moment after focus leaves a field, or on the next poll (a form
+ * that sent and cleared, or went away). Never gives up on its own; the
+ * returned function cancels the wait. `open` runs at most once.
+ */
+export declare function whenNotMidForm(open: () => void, options?: MidFormWaitOptions): () => void;

package/dist/shared/reporting-gate.d.ts

@@ -1,6 +1,6 @@
 /**
  * Single source of truth for client reporting eligibility and credentials.
- * Analytics, fleet, SitemapSync and Engage all resolve through this gate.
+ * Analytics, fleet, SitemapSync, chat and popups all resolve through this gate.
  * Kept separate from transport wrappers so non-analytics modules stay lean.
  */
 /** Resolved destination for an analytics send. */

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "7.1.2";
+export declare const SITE_KIT_VERSION = "7.2.0";

package/dist/shared/visual-viewport-gap.d.ts

@@ -15,7 +15,7 @@
  *   bottom: calc(24px + env(safe-area-inset-bottom, 0px) + var(--sk-vv-layout-gap, 0px));
  *
  * The Echo launcher and chat popup already include it (see
- * engage/launcher-placement.ts), so mounting the tracker is all a site needs
+ * chat/launcher-placement.ts), so mounting the tracker is all a site needs
  * for those; the property is also there for the site's own fixed UI.
  *
  * Opt-in on purpose. The gap also grows to the keyboard's height while a

package/dist/signal/index.js

@@ -1,6 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-PHYMNUJU.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-PHYMNUJU.js';
+import { useSignalExperiment, useSignalEvent } from '../chunk-S54ECQGY.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-S54ECQGY.js';
 import '../chunk-PKBMQBKP.js';
 import React, { useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/signal/types.d.ts

@@ -8,7 +8,7 @@ export interface SignalConfig {
     version: string;
     /** Whether Signal is enabled for this project */
     enabled: boolean;
-    /** Engage element overrides */
+    /** Popup overrides (the key keeps the retired Engage module's name) */
     engage?: {
         popups?: Record<string, EngageOverride>;
         nudges?: Record<string, EngageOverride>;

package/dist/sitemap/index.js

@@ -1,11 +1,11 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-JBE46QJZ.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-R46IQIGK.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QEDHRBAT.js';
-import '../chunk-GLHQ3LRO.js';
+import '../chunk-QL6XNPSD.js';
+import '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
 import '../chunk-VX5CMNMM.js';
-import '../chunk-4Y5FWDPM.js';
+import '../chunk-NZ4RXN3G.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-ZEGVKVD5.js';
 import '../chunk-YVKRYQRG.js';

package/dist/{socket-loader-R24ZSRSQ.js → socket-loader-CGIPEG74.js}

@@ -1,6 +1,6 @@
 import './chunk-PKBMQBKP.js';
 
-// src/engage/socket-loader.ts
+// src/chat/socket-loader.ts
 async function createSocket(url, opts) {
   const { io } = await import(
     /* webpackChunkName: "socket-io" */

package/dist/sync/index.js

@@ -1,6 +1,6 @@
-export { BookingWidget } from '../chunk-JTU2GOM4.js';
-export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-M3YEPKP7.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+export { BookingWidget } from '../chunk-GGORNBSC.js';
+export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-BKY2ZNM7.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';

package/dist/types.d.ts

@@ -14,6 +14,8 @@ export interface ProjectScoped {
 }
 export * from './seo/types';
 export * from './analytics/types';
-export * from './engage/types';
+export * from './chat/types';
+export * from './website/popup-types';
+export type { EngageAnalytics, EngageConfig, EngageElement, TargetingRules, TriggerConfig, WidgetConfig, WidgetType } from './engage/types';
 export * from './forms/types';
 export * from './articles/types';

package/dist/{web-vitals.attribution-GD6LGLVF.js → web-vitals.attribution-N2PCCF4Q.js}

@@ -1,6 +1,6 @@
 import { __publicField } from './chunk-PKBMQBKP.js';
 
-// ../../../../../../../../Volumes/Uptrade Media/GitHub/Sonor/site-kit/node_modules/.pnpm/web-vitals@6.1.0/node_modules/web-vitals/dist/web-vitals.attribution.js
+// node_modules/.pnpm/web-vitals@6.1.0/node_modules/web-vitals/dist/web-vitals.attribution.js
 var t = class {
   constructor() {
     __publicField(this, "t");

package/dist/website/BlocksPopup.d.ts

@@ -3,7 +3,7 @@
  *
  * The site side of a blocks popup: re-checks the blocks, measures the site's
  * design once when the popup opens, and hands both to PopupBlocks.
- * EngageWidget loads this with a dynamic import, so the renderer, the
+ * SitePopups loads this with a dynamic import, so the renderer, the
  * contract and the design measurement download only when a blocks popup is
  * actually about to show (most page loads have none).
  */

package/dist/website/PopupBlocks.d.ts

@@ -3,7 +3,7 @@
  *
  * Draws a popup from its blocks (heading, formatted text, image, button,
  * divider) in the site's own design. SINGLE renderer for both places a popup
- * appears: on the site (EngageWidget, fed the measured tokens) and in Sonor's
+ * appears: on the site (SitePopups, fed the measured tokens) and in Sonor's
  * builder preview (fed the tokens the site reported). React only, no Next
  * imports, so the dashboard can import it as-is.
  *
@@ -18,7 +18,10 @@
  * Accessibility: a centred popup is a modal dialog (labelled by its heading,
  * focus moves in and is kept there, Escape and the overlay close it, focus
  * goes back where it was). A bar is a labelled region, a slide-in a
- * non-modal dialog; both close on Escape. Text HTML is re-sanitized on render.
+ * non-modal dialog; both close on Escape. The focus and Escape behavior is
+ * usePopupDialog (../shared/dialog), so the builder's copy needs that file
+ * beside it. Text HTML is re-sanitized on
+ * render.
  */
 import React from 'react';
 import { type PopupBlock, type SiteDesignTokens } from './contract';

package/dist/website/SitePopups.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @sonordev/site-kit/website/popups - SitePopups: the popups, banners and
+ * toasts published for this site (Sonor → Website → Popups & Banners).
+ *
+ * Each shows where and when Sonor says (pages, devices, trigger, frequency,
+ * schedule), drawn from its blocks in the site's own design by PopupBlocks.
+ * SiteKitLayout mounts it for you (its `popups` prop); mount it yourself only
+ * on a site without SiteKitLayout. A project with nothing published costs one
+ * request and draws nothing. The renderer downloads when a popup first opens.
+ */
+import React from 'react';
+import { type AnalyticsGateOptions } from '../shared/reporting-gate';
+export interface SitePopupsProps extends AnalyticsGateOptions {
+    apiUrl?: string;
+    apiKey?: string;
+    /** The layer popups, banners and toasts stack on. Default: 9999. */
+    zIndex?: number;
+    debug?: boolean;
+}
+/**
+ * Same gate as analytics (frames, localhost, a key to send with): a popup in
+ * a case study's device frame is shown to the agency's visitor, not this
+ * site's, and its impressions would count against this site.
+ */
+export declare function SitePopups(props: SitePopupsProps): React.JSX.Element | null;

package/dist/website/images.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-ILU5I6RW.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-JMLK6MH7.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/index.js

@@ -1,13 +1,13 @@
 'use client';
-export { SiteDesignReporter } from '../chunk-Q4W23JYM.js';
-export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-PGMVL4AB.js';
-export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-JSZN6LDZ.js';
+export { SiteDesignReporter } from '../chunk-5YCEMV2L.js';
+export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-JJ3DELUL.js';
+export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/popup-rules.d.ts

@@ -0,0 +1,46 @@
+/**
+ * @sonordev/site-kit/website/popups - the rules SitePopups applies to the
+ * popups, banners and toasts published for a site, as pure functions (the
+ * package's tests have no DOM).
+ */
+import type { SitePopup } from './popup-types';
+import type { PopupPlacement } from './PopupBlocks';
+/** Exact path, or a prefix ending in `*`. The grammar Sonor stores page patterns in. */
+export declare function matchPath(pathname: string, pattern: string): boolean;
+export type DeviceType = 'desktop' | 'mobile' | 'tablet';
+export declare function deviceFromUserAgent(ua: string): DeviceType;
+/**
+ * The storage key that remembers a visitor saw (closed or clicked) a popup.
+ * The `_engage_` prefix predates the Website module; renaming it would show
+ * every "once" popup to visitors who already closed it.
+ */
+export declare function seenKey(popupId: string): string;
+interface SeenStore {
+    local: Pick<Storage, 'getItem'> | null;
+    session: Pick<Storage, 'getItem'> | null;
+}
+/** Whether a popup's targeting and frequency cap allow it on this page, for this visitor. */
+export declare function isEligible(popup: SitePopup, pathname: string, device: DeviceType, store: SeenStore, now?: number): boolean;
+/**
+ * What a popup draws as: centred over a dimmed page, a bar along an edge, or
+ * a slide-in (a toast) in a corner. Its `layout` says what it actually is;
+ * `type` describes it for older kits. Undefined for a popup without blocks:
+ * that's Sonor's Engage Studio `design_json`, which this kit doesn't draw.
+ * Single source of truth for which popups SitePopups draws, the
+ * one-popup-at-a-time rule and the form wait.
+ */
+export declare function popupPlacement(popup: SitePopup): PopupPlacement | undefined;
+/**
+ * Whether a popup waits until the visitor isn't mid-form before it opens on
+ * its own (shared/mid-form). Popups and toasts do. Banners don't: they
+ * neither take focus nor hide the page.
+ */
+export declare function waitsForForms(popup: SitePopup): boolean;
+/**
+ * The active list after `id` asks to show. A popup (the kind centred over a
+ * dimmed page) waits while another is open, so two never stack; banners and
+ * toasts show alongside. Popups arrive from Sonor highest priority first, so
+ * the first popup to trigger is the one that wins a tie.
+ */
+export declare function activatePopup(active: string[], id: string, popups: SitePopup[]): string[];
+export {};

package/dist/website/popup-types.d.ts

@@ -0,0 +1,113 @@
+/**
+ * @sonordev/site-kit/website/popups: what a published popup looks like.
+ *
+ * Sonor → Website → Popups & Banners. The API serves them from
+ * `GET /engage/widget/elements` (its route keeps the retired module's name).
+ */
+import type { PopupBlock } from './contract';
+/** What Sonor says a popup is. A blocks popup's `layout` says where it actually sits. */
+export type SitePopupType = 'popup' | 'nudge' | 'bar' | 'chat' | 'slide-in';
+/** A popup, banner or toast published for this site (Sonor → Website → Popups & Banners). */
+export interface SitePopup {
+    id: string;
+    project_id: string;
+    name: string;
+    type: SitePopupType;
+    config: SitePopupConfig;
+    targeting: SitePopupTargeting;
+    trigger: SitePopupTrigger;
+    is_active: boolean;
+    priority: number;
+    created_at: string;
+    updated_at: string;
+    /**
+     * The popup as blocks, drawn in the site's own design by PopupBlocks. A
+     * popup without blocks isn't drawn: Sonor's older `design_json` (Engage
+     * Studio) is for site-kits before 7.2.0, and is ignored here.
+     */
+    blocks?: PopupBlock[];
+    /**
+     * Where a blocks popup sits. `type`/`config` describe it for older kits
+     * (which can't pin a bar to the bottom); this says what it actually is.
+     */
+    layout?: {
+        placement: 'popup' | 'bar' | 'slide-in';
+        edge?: 'top' | 'bottom';
+        corner?: 'bottom-left' | 'bottom-right' | 'top-left' | 'top-right';
+        /** The popup's own accent, over the site's. */
+        accent?: string;
+    };
+    status?: 'draft' | 'published' | 'archived' | 'paused';
+}
+export interface SitePopupConfig {
+    /** Visual style */
+    theme?: 'light' | 'dark' | 'custom';
+    position?: 'center' | 'top' | 'bottom' | 'left' | 'right' | 'bottom-left' | 'bottom-right' | 'top-left' | 'top-right';
+    /** Content */
+    title?: string;
+    message?: string;
+    imageUrl?: string;
+    /** CTA */
+    ctaText?: string;
+    ctaUrl?: string;
+    ctaAction?: 'link' | 'close' | 'form' | 'chat';
+    /** Form (if ctaAction is 'form') */
+    formId?: string;
+    /** Styling */
+    backgroundColor?: string;
+    textColor?: string;
+    ctaBackgroundColor?: string;
+    ctaTextColor?: string;
+    borderRadius?: number;
+    /** Behavior */
+    closable?: boolean;
+    showOverlay?: boolean;
+    overlayOpacity?: number;
+}
+export interface SitePopupTargeting {
+    /** Page targeting */
+    pages?: {
+        include?: string[];
+        exclude?: string[];
+    };
+    /** Device targeting */
+    devices?: ('desktop' | 'mobile' | 'tablet')[];
+    /** Visitor targeting */
+    visitor?: {
+        type?: 'new' | 'returning' | 'all';
+        minSessions?: number;
+        maxSessions?: number;
+    };
+    /** Source targeting */
+    source?: {
+        utm_source?: string[];
+        utm_medium?: string[];
+        utm_campaign?: string[];
+        referrer?: string[];
+    };
+    /** Time targeting */
+    schedule?: {
+        startDate?: string;
+        endDate?: string;
+        daysOfWeek?: number[];
+        startTime?: string;
+        endTime?: string;
+        timezone?: string;
+    };
+}
+export interface SitePopupTrigger {
+    type: 'immediate' | 'delay' | 'scroll' | 'exit-intent' | 'click' | 'custom';
+    /** Delay in seconds (for 'delay' type) */
+    delay?: number;
+    /** Scroll percentage (for 'scroll' type) */
+    scrollPercentage?: number;
+    /** CSS selector (for 'click' type) */
+    clickSelector?: string;
+    /** Custom event name (for 'custom' type) */
+    customEvent?: string;
+    /** Frequency capping */
+    frequency?: {
+        type: 'always' | 'once' | 'once-per-session' | 'every-n-days';
+        days?: number;
+    };
+}

package/dist/website/popups.d.ts

@@ -7,11 +7,7 @@
  * import it to place it yourself. `PopupBlocks` is the renderer, for drawing
  * one popup from its blocks.
  */
-import React from 'react';
-import { EngageWidget } from '../engage/EngageWidget';
-export type SitePopupsProps = Omit<React.ComponentProps<typeof EngageWidget>, 'chatEnabled'>;
-/** The site's published popups, banners and toasts. No chat launcher (that's `./chat`). */
-export declare function SitePopups(props: SitePopupsProps): React.JSX.Element;
+export { SitePopups, type SitePopupsProps } from './SitePopups';
 export { PopupBlocks, DEFAULT_POPUP_TOKENS, type PopupBlocksProps, type PopupPlacement } from './PopupBlocks';
-export type { EngageElement as SitePopup } from '../engage/types';
+export type { SitePopup, SitePopupConfig, SitePopupTargeting, SitePopupTrigger, SitePopupType, } from './popup-types';
 export type { PopupBlock, SiteDesignTokens } from './contract';

package/dist/website/popups.js

@@ -1,22 +1,14 @@
 'use client';
-export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-JSZN6LDZ.js';
+export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
-import { EngageWidget } from '../chunk-YCJT4JJG.js';
-import '../chunk-NDF4A5JM.js';
-import '../chunk-6T6CQVNL.js';
+export { SitePopups } from '../chunk-EJVQJCG5.js';
+import '../chunk-27FISYK4.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-24QZEO3Q.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-D6ZC7XKZ.js';
+import '../chunk-K4ZHAURD.js';
+import '../chunk-F24FNCTK.js';
 import '../chunk-PKBMQBKP.js';
-import { jsx } from 'react/jsx-runtime';
-
-function SitePopups(props) {
-  return /* @__PURE__ */ jsx(EngageWidget, { ...props, chatEnabled: false });
-}
-
-export { SitePopups };

package/dist/{writeLLMsTxt-G3JBNBC5.js → writeLLMsTxt-OV24LQVL.js}

@@ -1,9 +1,9 @@
-export { writeLLMsTxtToPublic } from './chunk-QEDHRBAT.js';
-import './chunk-GLHQ3LRO.js';
+export { writeLLMsTxtToPublic } from './chunk-QL6XNPSD.js';
+import './chunk-6U3VLV2C.js';
 import './chunk-L5UOHS6E.js';
 import './chunk-WMVK77ND.js';
 import './chunk-VX5CMNMM.js';
-import './chunk-4Y5FWDPM.js';
+import './chunk-NZ4RXN3G.js';
 import './chunk-MJP63SSS.js';
 import './chunk-YVKRYQRG.js';
 import './chunk-FESKKJAS.js';

package/docs/MIGRATING-TO-7.md

@@ -20,6 +20,13 @@ idempotent: running it twice changes nothing the second time. It works from
 any 2.x-6.x site: copies of sites on 4.2, 5.8 and 6.5 were migrated with it
 and built.
 
+It leaves nothing in the project but the change. Since sonor-setup 7.1.2 the
+originals of the files it writes go to a folder in your OS temp directory
+(it prints where, and git has them too), not `.bak` files beside them, and
+it never creates or edits `.env.example`: `.env.local` is the one env file.
+An old fallback such as `process.env.SONOR_API_KEY || process.env.UPTRADE_API_KEY`
+becomes `process.env.SONOR_API_KEY`.
+
 Requirements: Next 16 and Node 20.19+ or 22.12+
 (Netlify's default is 22).
 
@@ -68,12 +75,17 @@ New homes, each the same module as before:
 
 - Website: `./website/{popups,images,slots,cms,landing,cta-bar}`
 - SEO: `./seo/{sitemap,robots,indexnow,redirects,og,og/route,llms,llms/client,llms/contract,meta/contract,pages/contract}`
-- Website chat: `./chat` (out of `./engage`)
+- Website chat: `./chat`, and popups: `./website/popups` (both out of
+  `./engage`, which Sonor retired with the Engage module)
 
 **The old paths keep working through 7.x** and are removed in 8.0. The
-codemod moves them anyway, so a touched site is done in one pass.
-`SiteKitLayout` gains `chat` and `popups` props; `engage` is an alias
-(`engage={false}` still turns both off).
+codemod moves them anyway, so a touched site is done in one pass: chat
+imports go to `./chat`, popup types to `./website/popups` under their new
+names (`EngageElement` is `SitePopup`). It flags `EngageWidget`, which draws
+both and which `SiteKitLayout` already mounts. `SiteKitLayout` gains `chat`
+and `popups` props; `engage` is an alias (`engage={false}` still turns both
+off). Since 7.2.0, popups render only from blocks: one made in Engage Studio
+isn't drawn, so make it again in Sonor (Website → Popups & Banners).
 
 ### 4. ESM only, Next 16 only
 
@@ -85,10 +97,22 @@ site-side script that `require()`s site-kit on an older Node would break.
 The `next` peer is `^16`. Next 16 renamed `middleware.ts` to `proxy.ts`, and
 **the codemod moves it**: the file, a named `middleware` export (to `proxy`),
 and `createMiddleware` from `@sonordev/site-kit/middleware` (to `createProxy`
-from `/proxy`). The old names work through 7.x. It won't move a file that
-sets `runtime` (a proxy file can't; the build throws), and says so: remove
-the export, check the logic still runs on your host, rerun. It never moves
-onto an existing `proxy.ts`. `npx sonor-setup next16` runs just this part.
+from `/proxy`). The old names work through 7.x.
+
+**The proxy goes beside the app directory.** Next reads it from the project
+root, or from `src/` when the app is `src/app`, and silently ignores one
+anywhere else: the build passes, but the site sends no security headers and
+runs no managed redirects. So on a `src/app` site the codemod writes
+`src/proxy.ts`, with the file's relative imports re-pointed. Before
+sonor-setup 7.1.2 it renamed the file in place, which left a root `proxy.ts`
+on those sites; rerunning the codemod moves it, and `npx sonor-setup doctor`
+warns about any proxy Next doesn't read.
+
+It won't move a file that sets `runtime` (a proxy file can't; the build
+throws), and says so: remove the export, check the logic still runs on your
+host, rerun. It never moves onto a proxy Next already runs: with one in each
+place, it reports both and changes neither. `npx sonor-setup next16` runs
+just this part.
 
 ### 5. Removed (nothing used them)
 
@@ -119,7 +143,7 @@ Still accepted and ignored until 8.0, because sites pass them:
   `.env.local`, `.env.production`, `.env`. It used to let `.env.local` beat
   the host.
 
-## Optional, and new in 7.0
+## Optional, and new in 7.x
 
 - **Cache Components.** `cacheComponents: true` in next.config works with
   site-kit now (it failed every page through 6.x). Remove route segment
@@ -134,6 +158,14 @@ Still accepted and ignored until 8.0, because sites pass them:
   `onToolCall: reportToolCallsToSonor()` to its `createMcpHandler`.
 - **`@sonordev/contracts`** is for the APIs and the dashboard; sites keep
   importing `@sonordev/site-kit/*/contract`, which is the same code.
+- **Live updates (7.1).** `npx sonor-setup scaffold` writes the route Sonor
+  calls when content changes, `app/api/seo-revalidate/route.ts`, and
+  `npx sonor-setup doctor` checks for it. A site with articles gets
+  `createRevalidateRoute({ publicationBasePath: '/insights' })` with its own
+  path, read from the app directory (a dynamic page that renders site-kit
+  articles, or a `[slug]` route under a folder like `/blog` or `/news`).
+  When more than one folder looks like the publication, it writes the
+  one-line route and lists them.
 
 ## Kits built on site-kit
 

package/docs.json

@@ -38,7 +38,8 @@
       "title": "Engagement",
       "pages": [
         { "slug": "forms", "title": "Forms", "file": "src/forms/README.md" },
-        { "slug": "chat", "title": "Website chat", "file": "src/engage/README.md" },
+        { "slug": "chat", "title": "Website chat", "file": "src/chat/README.md" },
+        { "slug": "popups", "title": "Popups and banners", "file": "src/website/README.md" },
         { "slug": "cta-bar", "title": "CTA bar", "file": "src/cta-bar/README.md" },
         { "slug": "signal", "title": "Signal (A/B)", "file": "src/signal/README.md" }
       ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonordev/site-kit",
-  "version": "7.1.2",
+  "version": "7.2.0",
   "type": "module",
   "packageManager": "pnpm@11.5.3",
   "description": "Complete client-side integration kit for Sonor - SEO, Analytics, Engage, Forms, Blog",
@@ -461,7 +461,7 @@
     "gsap": "^3.15.0",
     "happy-dom": "^20.14.5",
     "inquirer": "^14.0.2",
-    "next": "16.3.6",
+    "next": "16.3.8",
     "open": "11.0.0",
     "ora": "^9.4.1",
     "playwright": "^1.62.1",

package/src/analytics/README.md

@@ -212,7 +212,7 @@ with `analytics.site` or `NEXT_PUBLIC_SITE_URL` set to a production domain.
 `localhost`, its subdomains, `127.0.0.1`, `[::1]`, and `0.0.0.0` report nothing
 by default: page views, events, conversions, sessions, vitals, scroll and
 heatmap data, fleet heartbeats, and client-side sitemap registrations all use
-`resolveAnalyticsTarget`. Engage doesn't mount its widgets or chat transport.
+`resolveAnalyticsTarget`. Website chat and popups don't mount at all.
 Public hosts and same-origin frames on public hosts still report normally.
 
 For intentional local reporting:
@@ -222,7 +222,7 @@ For intentional local reporting:
 ```
 
 The layout passes this option to AnalyticsProvider, WebVitals, FleetHeartbeat,
-SitemapSync and EngageWidget. Standalone components and `sendFleetHeartbeat`
+SitemapSync, SiteChat and SitePopups. Standalone components and `sendFleetHeartbeat`
 accept it too; standalone `trackEvent`/`trackConversion` use their mounted
 AnalyticsProvider's options. A local cross-origin frame needs **both** opt-ins.
 Neither option bypasses authentication. No environment variable or global

package/src/articles/README.md

@@ -47,7 +47,10 @@ const href = createPublicationRoutes(routing).post({ slug: 'build-first', catego
 provide `postPath: post => '/articles/' + encodeURIComponent(post.slug)`.
 Callbacks return local paths; generated metadata, feeds, and sitemaps separately
 honor a valid `canonical_url`. The same routes apply to Atom and generated
-breadcrumb/cluster schemas. Supplied `schema`/`schema_json` objects stay intact.
+breadcrumb/cluster schemas. Supplied `schema`/`schema_json` objects stay intact, apart
+from template placeholders (an `Organization` named "Example", `example.com` URLs,
+`{post.title}`), which `generateAllArticleSchemas` drops. When nothing real is left,
+it generates the article's schema from its own fields instead.
 
 For custom layouts, `resolveArticleArtwork(post, 'article')` prefers
 `editorial_image`, preserving an empty decorative `editorial_image_alt`.