@sonordev/site-kit 7.1.2 → 7.3.0

package/dist/mcp/index.js

@@ -1,6 +1,8 @@
 import { MCP_SUPPORTED_PROTOCOL_VERSIONS, dispatch, errorOutcome, JSONRPC_INVALID_REQUEST, META_CLIENT_INFO, JSONRPC_PARSE_ERROR, MCP_PROTOCOL_VERSION_MODERN } from '../chunk-FYAB6CXS.js';
 export { JSONRPC_METHOD_NOT_FOUND, MCP_ERROR_HEADER_MISMATCH, MCP_ERROR_UNSUPPORTED_PROTOCOL_VERSION, MCP_PROTOCOL_VERSIONS_LEGACY, MCP_PROTOCOL_VERSION_MODERN, MCP_SUPPORTED_PROTOCOL_VERSIONS, META_CLIENT_INFO, META_PROTOCOL_VERSION, META_SERVER_INFO, dispatch, isSupportedVersion, toToolDescriptor, toToolResult, toolErrorResult, validateArgs } from '../chunk-FYAB6CXS.js';
+export { declarativeToolField, declarativeToolForm } from '../chunk-HW7B43E5.js';
 import '../chunk-PKBMQBKP.js';
+import { createHash } from 'crypto';
 
 // src/mcp/types.ts
 function defineMcpTool(tool) {
@@ -9,6 +11,7 @@ function defineMcpTool(tool) {
 
 // src/mcp/serverCard.ts
 var MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
+var MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
 var MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 var MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";
 var SITE_KIT_CARD_META_KEY = "io.sonor.site-kit/tools";
@@ -69,6 +72,60 @@ function validateMcpServerCard(card) {
   }
   return problems;
 }
+var MCP_AI_CATALOG_PATH = "/.well-known/ai-catalog.json";
+var MCP_AI_CATALOG_MEDIA_TYPE = "application/ai-catalog+json";
+function buildMcpAiCatalog(options) {
+  const base = new URL(options.baseUrl);
+  if (!["http:", "https:"].includes(base.protocol) || base.username || base.password || base.search || base.hash || base.pathname !== "/") {
+    throw new Error("baseUrl must be an explicit HTTP(S) origin without credentials, query or fragment");
+  }
+  const name = /^[^/\s]+\/([^/\s]+)$/.exec(options.info.name)?.[1];
+  if (!name) {
+    throw new Error('info.name must have a namespace and server name, e.g. "io.example/weather"');
+  }
+  const path = options.serverCardPath;
+  if (!path || path.startsWith("//") || path.includes("\\") || /^[a-z][a-z\d+.-]*:/i.test(path)) {
+    throw new Error("serverCardPath must be an origin-relative path");
+  }
+  const cardUrl = new URL(path.startsWith("/") ? path : `/${path}`, base);
+  if (cardUrl.hash) throw new Error("serverCardPath must not include a fragment");
+  return {
+    specVersion: "1.0",
+    entries: [{
+      identifier: `urn:air:${base.hostname}:mcp:${encodeURIComponent(name)}`,
+      type: MCP_SERVER_CARD_MEDIA_TYPE,
+      url: cardUrl.href
+    }]
+  };
+}
+function createMcpAiCatalogHandler(options) {
+  return createMcpDiscoveryHandlers(buildMcpAiCatalog(options), {
+    mediaType: MCP_AI_CATALOG_MEDIA_TYPE,
+    maxAge: options.maxAge
+  });
+}
+function createMcpDiscoveryHandlers(document, options) {
+  const body = `${JSON.stringify(document, null, 2)}
+`;
+  const etag = `W/"${createHash("sha256").update(body).digest("base64url")}"`;
+  const maxAge = options.maxAge ?? 3600;
+  if (!Number.isSafeInteger(maxAge) || maxAge < 0) {
+    throw new Error("maxAge must be a non-negative integer");
+  }
+  const headers = {
+    "Content-Type": options.mediaType,
+    "Cache-Control": `public, max-age=${maxAge}`,
+    ETag: etag,
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Methods": "GET, OPTIONS",
+    "Access-Control-Allow-Headers": "Accept, Content-Type, If-None-Match",
+    "Access-Control-Expose-Headers": "ETag"
+  };
+  return {
+    GET: async () => new Response(body, { status: 200, headers }),
+    OPTIONS: async () => new Response(null, { status: 204, headers })
+  };
+}
 
 // src/mcp/handlers.ts
 var MCP_REQUEST_HEADERS = [
@@ -255,35 +312,10 @@ function createMcpHandler(options) {
   return { POST, GET: methodNotAllowed, DELETE: methodNotAllowed, OPTIONS };
 }
 function createMcpServerCardHandler(options) {
-  const card = buildMcpServerCard(options);
-  const body = `${JSON.stringify(card, null, 2)}
-`;
-  const maxAge = options.maxAge ?? 3600;
-  const headers = {
-    "Content-Type": "application/json",
-    "Cache-Control": `public, max-age=${maxAge}`,
-    // The card is a discovery document — it is meant to be fetched by anyone.
-    "Access-Control-Allow-Origin": "*",
-    "Access-Control-Allow-Methods": "GET, OPTIONS",
-    "Access-Control-Allow-Headers": "Content-Type"
-  };
-  return {
-    GET: async () => new Response(body, { status: 200, headers }),
-    OPTIONS: async () => new Response(null, { status: 204, headers })
-  };
-}
-
-// src/mcp/declarative.ts
-function declarativeToolForm(options) {
-  const attributes = {
-    toolname: options.name,
-    tooldescription: options.description
-  };
-  if (options.autoSubmit) attributes.toolautosubmit = "";
-  return attributes;
-}
-function declarativeToolField(description) {
-  return { toolparamdescription: description };
+  return createMcpDiscoveryHandlers(buildMcpServerCard(options), {
+    mediaType: options.contentType ?? "application/json",
+    maxAge: options.maxAge
+  });
 }
 
-export { MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpServerCard, createMcpHandler, createMcpServerCardHandler, declarativeToolField, declarativeToolForm, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };
+export { MCP_AI_CATALOG_MEDIA_TYPE, MCP_AI_CATALOG_PATH, MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_MEDIA_TYPE, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpAiCatalog, buildMcpServerCard, createMcpAiCatalogHandler, createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };

package/dist/mcp/serverCard.d.ts

@@ -11,16 +11,15 @@
  * with enough identity attached that a human reviewing the connection knows
  * what they're approving.
  *
- * ── The two paths ─────────────────────────────────────────────────────────
- * SEP-1649 originally proposed `/.well-known/mcp.json`. The ratified SEP-2127
- * moved to `/.well-known/mcp-server-card`. Plenty of deployed crawlers and
- * validators still probe the old path, and serving one JSON document from two
- * URLs costs nothing, so `createMcpServerCardHandler` is mounted at both.
- * `mcp-server-card` is the canonical one; `mcp.json` is compatibility.
+ * The existing well-known paths stay available for compatibility. The newer
+ * experimental discovery draft uses a domain AI Catalog pointing to a card
+ * URL, with `<streamable-http-url>/server-card` as its recommended location.
+ * Hosts can mount the same card handler there without changing the old URLs.
  */
 import type { McpServerIcon, McpServerInfo, SiteKitMcpTool } from './types';
 export declare const MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
-/** Canonical well-known path (SEP-2127). */
+export declare const MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
+/** Existing site-kit well-known path; retained for backward compatibility. */
 export declare const MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 /** Superseded SEP-1649 path, still widely probed. */
 export declare const MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";

package/dist/mcp/sonor.js

@@ -1,30 +1,33 @@
 import { toolErrorResult } from '../chunk-FYAB6CXS.js';
 import { fetchReviews, fetchReviewStats } from '../chunk-EDYHROQ7.js';
 import { getOfferings } from '../chunk-G3NHWMP5.js';
-import { fetchBookingTypes, fetchAvailability } from '../chunk-M3YEPKP7.js';
-import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-GLHQ3LRO.js';
-import { getFormConfig } from '../chunk-V3PUVBME.js';
-import '../chunk-VLARKWZU.js';
+import { fetchBookingTypes, fetchAvailability } from '../chunk-2ECWEUHP.js';
+import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-6U3VLV2C.js';
+import { getFormConfig } from '../chunk-XLSQTTUE.js';
+import '../chunk-MVR4FY5R.js';
 import '../chunk-YC7ELZS3.js';
-import '../chunk-CIG5UL2S.js';
+import '../chunk-ZTLMPUO6.js';
 import '../chunk-DXO6SBMD.js';
-import '../chunk-LUXVWITO.js';
-import { getAllArticles, getArticle } from '../chunk-TXBAOEKG.js';
+import '../chunk-4NTBQNHA.js';
+import { getAllArticles, getArticle } from '../chunk-PKGN32AU.js';
 import '../chunk-Y3INC4QJ.js';
 import '../chunk-QXMIKDOL.js';
 import '../chunk-WMVK77ND.js';
 import { resolveFetch } from '../chunk-VX5CMNMM.js';
-import '../chunk-4Y5FWDPM.js';
+import '../chunk-NZ4RXN3G.js';
+import '../chunk-VWWITFWM.js';
 import '../chunk-MJP63SSS.js';
 import { resolveServerApiConfig } from '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
 import { resolveSiteHost } from '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
+import '../chunk-C2FZBUSS.js';
 import '../chunk-5SQK3D53.js';
+import '../chunk-HW7B43E5.js';
 import '../chunk-NJCTQH2P.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import { SITE_KIT_VERSION } from '../chunk-AH5Q262S.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import { SITE_KIT_VERSION } from '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 import 'server-only';
 import { after } from 'next/server.js';

package/dist/revalidate/index.js

@@ -1,7 +1,7 @@
-import { createSeoRevalidationHandler } from '../chunk-VGH4MDTU.js';
+import { createSeoRevalidationHandler } from '../chunk-NI2XNEMR.js';
 import '../chunk-XTRZGXB2.js';
 export { SITE_CACHE_TAGS, SITE_REVALIDATE_PATH, isSiteRevalidatePong } from '../chunk-RYVDGXC2.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 
 // src/revalidate/index.ts

package/dist/seo/client.js

@@ -1,9 +1,9 @@
 'use client';
-export { SitemapSync } from '../chunk-UXOGCKL6.js';
+export { SitemapSync } from '../chunk-T4DLETKR.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/index.js

@@ -1,7 +1,8 @@
 export { ManagedNoScripts, ManagedScripts } from '../chunk-MVLMXC44.js';
-import { pickManagedLlmSchemaForJsonLd } from '../chunk-4Y5FWDPM.js';
+import { pickManagedLlmSchemaForJsonLd } from '../chunk-NZ4RXN3G.js';
 import { safeJsonLd } from '../chunk-4KZ6W3ZH.js';
-export { SitemapSync } from '../chunk-UXOGCKL6.js';
+import { withoutSchemaPlaceholders } from '../chunk-VWWITFWM.js';
+export { SitemapSync } from '../chunk-T4DLETKR.js';
 import { getManagedMetadata } from '../chunk-4YTYGG2C.js';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-4YTYGG2C.js';
 import { getContentBlock, getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, getEntities, pruneSchemaTypes } from '../chunk-662ILEZ6.js';
@@ -17,9 +18,9 @@ import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 import { Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
@@ -73,10 +74,10 @@ async function ManagedSchemaAsync({
   const page = pageData?.page;
   const siteUrl = pageData?.project?.site_url || "";
   const deny = new Set(excludeTypes ?? []);
-  const fromSonor = (values) => values.map((v) => pruneSchemaTypes(v, deny)).filter((v) => v !== null);
+  const fromSonor = (values) => values.map((v) => withoutPlaceholders(pruneSchemaTypes(v, deny))).filter(isSchemaObject);
   const allSchemas = [
     ...fromSonor(entitySchemas),
-    ...schemas.map((s) => s.schema_json),
+    ...schemas.map((s) => withoutPlaceholders(s.schema_json)).filter(isSchemaObject),
     // Include auto-generated schema from Signal meta optimization
     ...fromSonor(page?.managed_schema ? [page.managed_schema] : []),
     ...additionalSchemas
@@ -127,7 +128,7 @@ async function LLMSchemaAsync({
 }) {
   const { page: pageData, project } = await getSEOPageData(path);
   const raw = pageData?.managed_llm_schema;
-  const picked = pickManagedLlmSchemaForJsonLd(raw);
+  const picked = withoutPlaceholders(pickManagedLlmSchemaForJsonLd(raw));
   if (!picked) {
     return null;
   }
@@ -183,6 +184,12 @@ function createSpeakableWebPageSchema(type, name, url, speakable) {
     speakable: speakableSpec
   };
 }
+function withoutPlaceholders(value) {
+  return withoutSchemaPlaceholders(value).value;
+}
+function isSchemaObject(value) {
+  return value !== null && typeof value === "object";
+}
 function schemaNodeHasType(node, type) {
   if (!node || typeof node !== "object") return false;
   const t = node["@type"];

package/dist/seo/llms/contract.js

@@ -1,2 +1,2 @@
-export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, isEmittableReviewNode, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag } from '../../chunk-4Y5FWDPM.js';
+export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, clipAtWordBoundary, isEmittableReviewNode, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag } from '../../chunk-NZ4RXN3G.js';
 import '../../chunk-PKBMQBKP.js';

package/dist/seo/llms.js

@@ -1,19 +1,19 @@
-export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-WWSHFRDL.js';
+export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-WDQB4OXY.js';
 export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-PO2TRJPY.js';
 export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler } from '../chunk-QLTDFUJ7.js';
-export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-VGH4MDTU.js';
+export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-NI2XNEMR.js';
 import '../chunk-XTRZGXB2.js';
 export { AEOBlock, AEOCitedContent, AEOClaim, AEOComparison, AEODefinition, AEOEntity, AEOProvenanceList, AEOStep, AEOSteps, AEOSummary, DEFAULT_SPEAKABLE_SELECTORS, SpeakableSchema, createSpeakableSchema, getSpeakableSelectorsForPage } from '../chunk-PSAG45YF.js';
-export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-QEDHRBAT.js';
-export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-GLHQ3LRO.js';
+export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-Z65DHMTW.js';
+export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
 import '../chunk-VX5CMNMM.js';
-export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag } from '../chunk-4Y5FWDPM.js';
+export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag } from '../chunk-NZ4RXN3G.js';
 import '../chunk-4KZ6W3ZH.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/register-sitemap-cli.js

@@ -458,7 +458,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-G3JBNBC5.js');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-2NQVDGYI.js');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/seo/sitemap.js

@@ -1,11 +1,11 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-JBE46QJZ.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-Y6LP36UW.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QEDHRBAT.js';
-import '../chunk-GLHQ3LRO.js';
+import '../chunk-Z65DHMTW.js';
+import '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
 import '../chunk-VX5CMNMM.js';
-import '../chunk-4Y5FWDPM.js';
+import '../chunk-NZ4RXN3G.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-ZEGVKVD5.js';
 import '../chunk-YVKRYQRG.js';

package/dist/server/index.js

@@ -1,6 +1,6 @@
-export { resolveClientCredential } from '../chunk-6WIQCXOO.js';
+export { resolveClientCredential } from '../chunk-DNPNYWVL.js';
 import '../chunk-VX5CMNMM.js';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/shared/dialog.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @sonordev/site-kit shared: how a popup behaves as a dialog.
+ *
+ * SINGLE SOURCE OF TRUTH for popup focus and Escape. PopupBlocks (Website →
+ * Popups & Banners) calls usePopupDialog. Don't hand-roll another keydown
+ * listener or focus trap.
+ *
+ * - Escape closes, whatever the placement.
+ * - A modal popup takes focus when it opens (the dialog element itself, so a
+ *   screen reader announces its name first; Tab then reaches its controls),
+ *   keeps Tab inside, and hands focus back to where it was when it closes.
+ * - A non-modal one (a bar, a slide-in) leaves focus where it is.
+ *
+ * React only: no Next imports and no other site-kit imports, because Sonor's
+ * popup builder renders PopupBlocks too, from a copy of these files.
+ */
+import { type RefObject } from 'react';
+export interface PopupDialogOptions {
+    /** False for a render that isn't live on the page (the builder preview). Default true. */
+    enabled?: boolean;
+    /** Takes focus, keeps Tab inside and returns focus on close. */
+    modal: boolean;
+    /** Escape calls it. */
+    onClose?: () => void;
+}
+/** Dialog behavior for the popup whose panel (the role="dialog" element) is `panelRef`. */
+export declare function usePopupDialog(panelRef: RefObject<HTMLElement | null>, { enabled, modal, onClose }: PopupDialogOptions): void;

package/dist/shared/identity.d.ts

@@ -2,7 +2,7 @@
  * @sonordev/site-kit/shared — Unified Identity Management
  *
  * Single source of truth for visitor and session IDs across
- * Analytics, Signal, and Engage modules.
+ * Analytics, Signal, chat and popups.
  *
  * Storage keys:
  *   localStorage:    _sk_vid   (visitor ID, persists ~forever)

package/dist/shared/layers.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The layer a site's widgets stack on when the site sets nothing: popups,
+ * banners and toasts (SitePopups) and the chat launcher (SiteChat), with the
+ * chat window one below. Single source of truth for that default; the
+ * layout's `chat.zIndex` (or the deprecated `engage.zIndex`) overrides it.
+ */
+export declare const DEFAULT_WIDGET_Z_INDEX = 9999;

package/dist/shared/mid-form.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @sonordev/site-kit shared: is the visitor in the middle of a form?
+ *
+ * SINGLE SOURCE OF TRUTH for whether something may open over the page right
+ * now. SitePopups asks before any popup or toast opens on its own (whatever
+ * the trigger: immediate, delay, scroll or exit intent) and waits while the
+ * answer is yes.
+ * Don't write a second check; extend this one.
+ *
+ * Why it matters: a modal popup takes focus and hides the rest of the page
+ * from assistive technology while it's open. Opening one mid-form throws a
+ * person out of the field they're typing in, and an agent browser filling the
+ * form for someone (they act on the accessibility tree) loses every field it
+ * was about to fill.
+ *
+ * Mid-form means any of:
+ * - focus is on a field (input, textarea, select) that belongs to a form, or
+ *   inside a frame in a form (a payment provider's card field);
+ * - a form has a field the visitor filled: a value that isn't empty and isn't
+ *   the one the page rendered with, or one they typed into (watchFormInput);
+ * - a site-kit form is carrying what the visitor typed into its server-rendered
+ *   shell before it upgraded (FormEnhancer marks its wrapper
+ *   `data-sk-carried`; the upgraded fields are new elements nobody typed into
+ *   yet, and React keeps their default equal to their value);
+ * - a site-kit form is sending (`data-sk-state="submitting"`).
+ *
+ * Fields a visitor doesn't fill don't count: hidden inputs, buttons, fields
+ * nobody can see or reach (inert or aria-hidden), and site-kit's trap field.
+ */
+/**
+ * Remember which fields the visitor types into from here on. React keeps a
+ * controlled field's default value equal to its current value, so comparing
+ * the two can't see what someone typed into one; the input event can.
+ * Idempotent: one pair of capture listeners per document, kept for the page's
+ * life. SitePopups starts it when it mounts.
+ */
+export declare function watchFormInput(doc?: Document): void;
+/** Whether the visitor is in the middle of a form (see the module comment for what counts). */
+export declare function isVisitorMidForm(doc?: Document): boolean;
+export interface MidFormWaitOptions {
+    doc?: Document;
+    /** How long after focus leaves a field to look again. Default 1500ms. */
+    settleMs?: number;
+    /** How often to look again while waiting. Default 5000ms. */
+    pollMs?: number;
+}
+/**
+ * Run `open` now if the visitor isn't mid-form, otherwise as soon as they
+ * aren't: a moment after focus leaves a field, or on the next poll (a form
+ * that sent and cleared, or went away). Never gives up on its own; the
+ * returned function cancels the wait. `open` runs at most once.
+ */
+export declare function whenNotMidForm(open: () => void, options?: MidFormWaitOptions): () => void;

package/dist/shared/reporting-gate.d.ts

@@ -1,6 +1,6 @@
 /**
  * Single source of truth for client reporting eligibility and credentials.
- * Analytics, fleet, SitemapSync and Engage all resolve through this gate.
+ * Analytics, fleet, SitemapSync, chat and popups all resolve through this gate.
  * Kept separate from transport wrappers so non-analytics modules stay lean.
  */
 /** Resolved destination for an analytics send. */

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "7.1.2";
+export declare const SITE_KIT_VERSION = "7.3.0";

package/dist/shared/visual-viewport-gap.d.ts

@@ -15,7 +15,7 @@
  *   bottom: calc(24px + env(safe-area-inset-bottom, 0px) + var(--sk-vv-layout-gap, 0px));
  *
  * The Echo launcher and chat popup already include it (see
- * engage/launcher-placement.ts), so mounting the tracker is all a site needs
+ * chat/launcher-placement.ts), so mounting the tracker is all a site needs
  * for those; the property is also there for the site's own fixed UI.
  *
  * Opt-in on purpose. The gap also grows to the keyboard's height while a

package/dist/signal/index.js

@@ -1,6 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-PHYMNUJU.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-PHYMNUJU.js';
+import { useSignalExperiment, useSignalEvent } from '../chunk-CYUFBKJQ.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-CYUFBKJQ.js';
 import '../chunk-PKBMQBKP.js';
 import React, { useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/signal/types.d.ts

@@ -8,7 +8,7 @@ export interface SignalConfig {
     version: string;
     /** Whether Signal is enabled for this project */
     enabled: boolean;
-    /** Engage element overrides */
+    /** Popup overrides (the key keeps the retired Engage module's name) */
     engage?: {
         popups?: Record<string, EngageOverride>;
         nudges?: Record<string, EngageOverride>;

package/dist/sitemap/index.js

@@ -1,11 +1,11 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-JBE46QJZ.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-Y6LP36UW.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QEDHRBAT.js';
-import '../chunk-GLHQ3LRO.js';
+import '../chunk-Z65DHMTW.js';
+import '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
 import '../chunk-VX5CMNMM.js';
-import '../chunk-4Y5FWDPM.js';
+import '../chunk-NZ4RXN3G.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-ZEGVKVD5.js';
 import '../chunk-YVKRYQRG.js';

package/dist/{socket-loader-R24ZSRSQ.js → socket-loader-CGIPEG74.js}

@@ -1,6 +1,6 @@
 import './chunk-PKBMQBKP.js';
 
-// src/engage/socket-loader.ts
+// src/chat/socket-loader.ts
 async function createSocket(url, opts) {
   const { io } = await import(
     /* webpackChunkName: "socket-io" */

package/dist/sync/index.js

@@ -1,6 +1,6 @@
-export { BookingWidget } from '../chunk-JTU2GOM4.js';
-export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-M3YEPKP7.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+export { BookingWidget } from '../chunk-L7U23XI2.js';
+export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-2ECWEUHP.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/types.d.ts

@@ -14,6 +14,8 @@ export interface ProjectScoped {
 }
 export * from './seo/types';
 export * from './analytics/types';
-export * from './engage/types';
+export * from './chat/types';
+export * from './website/popup-types';
+export type { EngageAnalytics, EngageConfig, EngageElement, TargetingRules, TriggerConfig, WidgetConfig, WidgetType } from './engage/types';
 export * from './forms/types';
 export * from './articles/types';

package/dist/{web-vitals.attribution-GD6LGLVF.js → web-vitals.attribution-N2PCCF4Q.js}

@@ -1,6 +1,6 @@
 import { __publicField } from './chunk-PKBMQBKP.js';
 
-// ../../../../../../../../Volumes/Uptrade Media/GitHub/Sonor/site-kit/node_modules/.pnpm/web-vitals@6.1.0/node_modules/web-vitals/dist/web-vitals.attribution.js
+// node_modules/.pnpm/web-vitals@6.1.0/node_modules/web-vitals/dist/web-vitals.attribution.js
 var t = class {
   constructor() {
     __publicField(this, "t");

package/dist/website/BlocksPopup.d.ts

@@ -3,7 +3,7 @@
  *
  * The site side of a blocks popup: re-checks the blocks, measures the site's
  * design once when the popup opens, and hands both to PopupBlocks.
- * EngageWidget loads this with a dynamic import, so the renderer, the
+ * SitePopups loads this with a dynamic import, so the renderer, the
  * contract and the design measurement download only when a blocks popup is
  * actually about to show (most page loads have none).
  */

package/dist/website/PopupBlocks.d.ts

@@ -3,7 +3,7 @@
  *
  * Draws a popup from its blocks (heading, formatted text, image, button,
  * divider) in the site's own design. SINGLE renderer for both places a popup
- * appears: on the site (EngageWidget, fed the measured tokens) and in Sonor's
+ * appears: on the site (SitePopups, fed the measured tokens) and in Sonor's
  * builder preview (fed the tokens the site reported). React only, no Next
  * imports, so the dashboard can import it as-is.
  *
@@ -18,7 +18,10 @@
  * Accessibility: a centred popup is a modal dialog (labelled by its heading,
  * focus moves in and is kept there, Escape and the overlay close it, focus
  * goes back where it was). A bar is a labelled region, a slide-in a
- * non-modal dialog; both close on Escape. Text HTML is re-sanitized on render.
+ * non-modal dialog; both close on Escape. The focus and Escape behavior is
+ * usePopupDialog (../shared/dialog), so the builder's copy needs that file
+ * beside it. Text HTML is re-sanitized on
+ * render.
  */
 import React from 'react';
 import { type PopupBlock, type SiteDesignTokens } from './contract';

package/dist/website/SitePopups.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @sonordev/site-kit/website/popups - SitePopups: the popups, banners and
+ * toasts published for this site (Sonor → Website → Popups & Banners).
+ *
+ * Each shows where and when Sonor says (pages, devices, trigger, frequency,
+ * schedule), drawn from its blocks in the site's own design by PopupBlocks.
+ * SiteKitLayout mounts it for you (its `popups` prop); mount it yourself only
+ * on a site without SiteKitLayout. A project with nothing published costs one
+ * request and draws nothing. The renderer downloads when a popup first opens.
+ */
+import React from 'react';
+import { type AnalyticsGateOptions } from '../shared/reporting-gate';
+export interface SitePopupsProps extends AnalyticsGateOptions {
+    apiUrl?: string;
+    apiKey?: string;
+    /** The layer popups, banners and toasts stack on. Default: 9999. */
+    zIndex?: number;
+    debug?: boolean;
+}
+/**
+ * Same gate as analytics (frames, localhost, a key to send with): a popup in
+ * a case study's device frame is shown to the agency's visitor, not this
+ * site's, and its impressions would count against this site.
+ */
+export declare function SitePopups(props: SitePopupsProps): React.JSX.Element | null;

package/dist/website/images.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-ILU5I6RW.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-ZHS2XFLV.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-3SDOQUUF.js';
-import '../chunk-VDF5DFWT.js';
-import '../chunk-AH5Q262S.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';