@sonordev/site-kit 7.2.0 → 7.3.0

package/dist/mcp/index.js

@@ -2,6 +2,7 @@ import { MCP_SUPPORTED_PROTOCOL_VERSIONS, dispatch, errorOutcome, JSONRPC_INVALI
 export { JSONRPC_METHOD_NOT_FOUND, MCP_ERROR_HEADER_MISMATCH, MCP_ERROR_UNSUPPORTED_PROTOCOL_VERSION, MCP_PROTOCOL_VERSIONS_LEGACY, MCP_PROTOCOL_VERSION_MODERN, MCP_SUPPORTED_PROTOCOL_VERSIONS, META_CLIENT_INFO, META_PROTOCOL_VERSION, META_SERVER_INFO, dispatch, isSupportedVersion, toToolDescriptor, toToolResult, toolErrorResult, validateArgs } from '../chunk-FYAB6CXS.js';
 export { declarativeToolField, declarativeToolForm } from '../chunk-HW7B43E5.js';
 import '../chunk-PKBMQBKP.js';
+import { createHash } from 'crypto';
 
 // src/mcp/types.ts
 function defineMcpTool(tool) {
@@ -10,6 +11,7 @@ function defineMcpTool(tool) {
 
 // src/mcp/serverCard.ts
 var MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
+var MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
 var MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 var MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";
 var SITE_KIT_CARD_META_KEY = "io.sonor.site-kit/tools";
@@ -70,6 +72,60 @@ function validateMcpServerCard(card) {
   }
   return problems;
 }
+var MCP_AI_CATALOG_PATH = "/.well-known/ai-catalog.json";
+var MCP_AI_CATALOG_MEDIA_TYPE = "application/ai-catalog+json";
+function buildMcpAiCatalog(options) {
+  const base = new URL(options.baseUrl);
+  if (!["http:", "https:"].includes(base.protocol) || base.username || base.password || base.search || base.hash || base.pathname !== "/") {
+    throw new Error("baseUrl must be an explicit HTTP(S) origin without credentials, query or fragment");
+  }
+  const name = /^[^/\s]+\/([^/\s]+)$/.exec(options.info.name)?.[1];
+  if (!name) {
+    throw new Error('info.name must have a namespace and server name, e.g. "io.example/weather"');
+  }
+  const path = options.serverCardPath;
+  if (!path || path.startsWith("//") || path.includes("\\") || /^[a-z][a-z\d+.-]*:/i.test(path)) {
+    throw new Error("serverCardPath must be an origin-relative path");
+  }
+  const cardUrl = new URL(path.startsWith("/") ? path : `/${path}`, base);
+  if (cardUrl.hash) throw new Error("serverCardPath must not include a fragment");
+  return {
+    specVersion: "1.0",
+    entries: [{
+      identifier: `urn:air:${base.hostname}:mcp:${encodeURIComponent(name)}`,
+      type: MCP_SERVER_CARD_MEDIA_TYPE,
+      url: cardUrl.href
+    }]
+  };
+}
+function createMcpAiCatalogHandler(options) {
+  return createMcpDiscoveryHandlers(buildMcpAiCatalog(options), {
+    mediaType: MCP_AI_CATALOG_MEDIA_TYPE,
+    maxAge: options.maxAge
+  });
+}
+function createMcpDiscoveryHandlers(document, options) {
+  const body = `${JSON.stringify(document, null, 2)}
+`;
+  const etag = `W/"${createHash("sha256").update(body).digest("base64url")}"`;
+  const maxAge = options.maxAge ?? 3600;
+  if (!Number.isSafeInteger(maxAge) || maxAge < 0) {
+    throw new Error("maxAge must be a non-negative integer");
+  }
+  const headers = {
+    "Content-Type": options.mediaType,
+    "Cache-Control": `public, max-age=${maxAge}`,
+    ETag: etag,
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Methods": "GET, OPTIONS",
+    "Access-Control-Allow-Headers": "Accept, Content-Type, If-None-Match",
+    "Access-Control-Expose-Headers": "ETag"
+  };
+  return {
+    GET: async () => new Response(body, { status: 200, headers }),
+    OPTIONS: async () => new Response(null, { status: 204, headers })
+  };
+}
 
 // src/mcp/handlers.ts
 var MCP_REQUEST_HEADERS = [
@@ -256,22 +312,10 @@ function createMcpHandler(options) {
   return { POST, GET: methodNotAllowed, DELETE: methodNotAllowed, OPTIONS };
 }
 function createMcpServerCardHandler(options) {
-  const card = buildMcpServerCard(options);
-  const body = `${JSON.stringify(card, null, 2)}
-`;
-  const maxAge = options.maxAge ?? 3600;
-  const headers = {
-    "Content-Type": "application/json",
-    "Cache-Control": `public, max-age=${maxAge}`,
-    // The card is a discovery document — it is meant to be fetched by anyone.
-    "Access-Control-Allow-Origin": "*",
-    "Access-Control-Allow-Methods": "GET, OPTIONS",
-    "Access-Control-Allow-Headers": "Content-Type"
-  };
-  return {
-    GET: async () => new Response(body, { status: 200, headers }),
-    OPTIONS: async () => new Response(null, { status: 204, headers })
-  };
+  return createMcpDiscoveryHandlers(buildMcpServerCard(options), {
+    mediaType: options.contentType ?? "application/json",
+    maxAge: options.maxAge
+  });
 }
 
-export { MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpServerCard, createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };
+export { MCP_AI_CATALOG_MEDIA_TYPE, MCP_AI_CATALOG_PATH, MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_MEDIA_TYPE, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpAiCatalog, buildMcpServerCard, createMcpAiCatalogHandler, createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };

package/dist/mcp/serverCard.d.ts

@@ -11,16 +11,15 @@
  * with enough identity attached that a human reviewing the connection knows
  * what they're approving.
  *
- * ── The two paths ─────────────────────────────────────────────────────────
- * SEP-1649 originally proposed `/.well-known/mcp.json`. The ratified SEP-2127
- * moved to `/.well-known/mcp-server-card`. Plenty of deployed crawlers and
- * validators still probe the old path, and serving one JSON document from two
- * URLs costs nothing, so `createMcpServerCardHandler` is mounted at both.
- * `mcp-server-card` is the canonical one; `mcp.json` is compatibility.
+ * The existing well-known paths stay available for compatibility. The newer
+ * experimental discovery draft uses a domain AI Catalog pointing to a card
+ * URL, with `<streamable-http-url>/server-card` as its recommended location.
+ * Hosts can mount the same card handler there without changing the old URLs.
  */
 import type { McpServerIcon, McpServerInfo, SiteKitMcpTool } from './types';
 export declare const MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
-/** Canonical well-known path (SEP-2127). */
+export declare const MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
+/** Existing site-kit well-known path; retained for backward compatibility. */
 export declare const MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 /** Superseded SEP-1649 path, still widely probed. */
 export declare const MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";

package/dist/mcp/sonor.js

@@ -1,10 +1,10 @@
 import { toolErrorResult } from '../chunk-FYAB6CXS.js';
 import { fetchReviews, fetchReviewStats } from '../chunk-EDYHROQ7.js';
 import { getOfferings } from '../chunk-G3NHWMP5.js';
-import { fetchBookingTypes, fetchAvailability } from '../chunk-BKY2ZNM7.js';
+import { fetchBookingTypes, fetchAvailability } from '../chunk-2ECWEUHP.js';
 import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-6U3VLV2C.js';
-import { getFormConfig } from '../chunk-5V2V5C3Y.js';
-import '../chunk-OWZ7ATLZ.js';
+import { getFormConfig } from '../chunk-XLSQTTUE.js';
+import '../chunk-MVR4FY5R.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-ZTLMPUO6.js';
 import '../chunk-DXO6SBMD.js';
@@ -25,9 +25,9 @@ import '../chunk-C2FZBUSS.js';
 import '../chunk-5SQK3D53.js';
 import '../chunk-HW7B43E5.js';
 import '../chunk-NJCTQH2P.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import { SITE_KIT_VERSION } from '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import { SITE_KIT_VERSION } from '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 import 'server-only';
 import { after } from 'next/server.js';

package/dist/revalidate/index.js

@@ -1,7 +1,7 @@
-import { createSeoRevalidationHandler } from '../chunk-VHKEF5ZB.js';
+import { createSeoRevalidationHandler } from '../chunk-NI2XNEMR.js';
 import '../chunk-XTRZGXB2.js';
 export { SITE_CACHE_TAGS, SITE_REVALIDATE_PATH, isSiteRevalidatePong } from '../chunk-RYVDGXC2.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 
 // src/revalidate/index.ts

package/dist/seo/client.js

@@ -1,9 +1,9 @@
 'use client';
-export { SitemapSync } from '../chunk-GEXT7BTE.js';
+export { SitemapSync } from '../chunk-T4DLETKR.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/index.js

@@ -2,7 +2,7 @@ export { ManagedNoScripts, ManagedScripts } from '../chunk-MVLMXC44.js';
 import { pickManagedLlmSchemaForJsonLd } from '../chunk-NZ4RXN3G.js';
 import { safeJsonLd } from '../chunk-4KZ6W3ZH.js';
 import { withoutSchemaPlaceholders } from '../chunk-VWWITFWM.js';
-export { SitemapSync } from '../chunk-GEXT7BTE.js';
+export { SitemapSync } from '../chunk-T4DLETKR.js';
 import { getManagedMetadata } from '../chunk-4YTYGG2C.js';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-4YTYGG2C.js';
 import { getContentBlock, getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, getEntities, pruneSchemaTypes } from '../chunk-662ILEZ6.js';
@@ -18,9 +18,9 @@ import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';
 import { Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';

package/dist/seo/llms.js

@@ -1,10 +1,10 @@
-export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-BC4Y3S3D.js';
+export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-WDQB4OXY.js';
 export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-PO2TRJPY.js';
 export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler } from '../chunk-QLTDFUJ7.js';
-export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-VHKEF5ZB.js';
+export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-NI2XNEMR.js';
 import '../chunk-XTRZGXB2.js';
 export { AEOBlock, AEOCitedContent, AEOClaim, AEOComparison, AEODefinition, AEOEntity, AEOProvenanceList, AEOStep, AEOSteps, AEOSummary, DEFAULT_SPEAKABLE_SELECTORS, SpeakableSchema, createSpeakableSchema, getSpeakableSelectorsForPage } from '../chunk-PSAG45YF.js';
-export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-QL6XNPSD.js';
+export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-Z65DHMTW.js';
 export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
@@ -15,5 +15,5 @@ import '../chunk-MJP63SSS.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/register-sitemap-cli.js

@@ -458,7 +458,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-OV24LQVL.js');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-2NQVDGYI.js');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/seo/sitemap.js

@@ -1,6 +1,6 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-R46IQIGK.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-Y6LP36UW.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QL6XNPSD.js';
+import '../chunk-Z65DHMTW.js';
 import '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';

package/dist/server/index.js

@@ -1,6 +1,6 @@
-export { resolveClientCredential } from '../chunk-RPZ7OQGD.js';
+export { resolveClientCredential } from '../chunk-DNPNYWVL.js';
 import '../chunk-VX5CMNMM.js';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "7.2.0";
+export declare const SITE_KIT_VERSION = "7.3.0";

package/dist/signal/index.js

@@ -1,6 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-S54ECQGY.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-S54ECQGY.js';
+import { useSignalExperiment, useSignalEvent } from '../chunk-CYUFBKJQ.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-CYUFBKJQ.js';
 import '../chunk-PKBMQBKP.js';
 import React, { useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/sitemap/index.js

@@ -1,6 +1,6 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-R46IQIGK.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-Y6LP36UW.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QL6XNPSD.js';
+import '../chunk-Z65DHMTW.js';
 import '../chunk-6U3VLV2C.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';

package/dist/sync/index.js

@@ -1,6 +1,6 @@
-export { BookingWidget } from '../chunk-GGORNBSC.js';
-export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-BKY2ZNM7.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+export { BookingWidget } from '../chunk-L7U23XI2.js';
+export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-2ECWEUHP.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/images.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-JMLK6MH7.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-ZHS2XFLV.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/index.js

@@ -1,13 +1,13 @@
 'use client';
-export { SiteDesignReporter } from '../chunk-5YCEMV2L.js';
-export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-JJ3DELUL.js';
+export { SiteDesignReporter } from '../chunk-MRQ2U4LZ.js';
+export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-I2YX3HVD.js';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/popups.js

@@ -1,14 +1,14 @@
 'use client';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
-export { SitePopups } from '../chunk-EJVQJCG5.js';
+export { SitePopups } from '../chunk-YJLS6JBI.js';
 import '../chunk-27FISYK4.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-24QZEO3Q.js';
 import '../chunk-GJWI74ZZ.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-BEBR4OJD.js';
+import '../chunk-WGG6GTKW.js';
+import '../chunk-56KNHB4U.js';
 import '../chunk-PKBMQBKP.js';

package/dist/{writeLLMsTxt-OV24LQVL.js → writeLLMsTxt-2NQVDGYI.js}

@@ -1,4 +1,4 @@
-export { writeLLMsTxtToPublic } from './chunk-QL6XNPSD.js';
+export { writeLLMsTxtToPublic } from './chunk-Z65DHMTW.js';
 import './chunk-6U3VLV2C.js';
 import './chunk-L5UOHS6E.js';
 import './chunk-WMVK77ND.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonordev/site-kit",
-  "version": "7.2.0",
+  "version": "7.3.0",
   "type": "module",
   "packageManager": "pnpm@11.5.3",
   "description": "Complete client-side integration kit for Sonor - SEO, Analytics, Engage, Forms, Blog",

package/src/forms/README.md

@@ -242,8 +242,8 @@ nothing to configure.
 - **Agent-sent leads are tagged.** When the browser reports that an agent
   pressed submit (`SubmitEvent.agentInvoked`), the submission carries that
   flag and the lead is tagged in Sonor, so you can see how those leads compare
-  over time. It's the browser's word, so it never changes how a submission is
-  checked. The agent is handed the outcome of its submit (`respondWith`).
+  over time, and Sonor's spam screening takes it into account. The agent is
+  handed the outcome of its submit (`respondWith`).
 - **Nothing typed before the form loads is lost.** `ServerForm` renders the
   form in the page HTML and loads the interactive version at idle. Since
   7.2.0, typing into the server-rendered form starts that upgrade at once and

package/src/llms/README.md

@@ -229,6 +229,75 @@ with `optimizedLLMsTxt: false` in `createSitemap`, so one writer owns the file.
 Reads behind this write always bypass Next's Data Cache — hosts persist it
 between builds, and a cached read is how a site shipped a months-old llms.txt.
 
+#### Agent discovery for a custom MCP server
+
+A custom server stays opt-in. Share the same `mcp` options between the
+build-time writer and both route handlers so the short and full files point
+at the same tools. This adds links to an existing server; it doesn't create
+the endpoint, card, or catalog.
+
+```ts
+// lib/agent-access.ts
+import type { AgentAccessOptions } from '@sonordev/site-kit/seo/llms'
+
+export const agentAccess: AgentAccessOptions = {
+  endpoint: '/api/mcp',
+  card: '/api/mcp/server-card',
+  catalog: '/.well-known/ai-catalog.json', // omit unless this document is served
+  position: 'after-intro',
+}
+```
+
+```ts
+// The site's build-time writer
+import { writeLLMsTxtToPublic } from '@sonordev/site-kit/seo/llms'
+import { agentAccess } from '../lib/agent-access'
+
+await writeLLMsTxtToPublic({
+  full: true,
+  site: 'example.com',
+  mcp: agentAccess,
+})
+```
+
+```ts
+// app/llms.txt/route.ts
+import { createLLMsTxtHandler } from '@sonordev/site-kit/seo/llms'
+import { agentAccess } from '@/lib/agent-access'
+
+export const GET = createLLMsTxtHandler({
+  baseUrl: 'https://example.com',
+  mcp: agentAccess,
+})
+```
+
+```ts
+// app/llms-full.txt/route.ts — use the same options
+import { createLLMsFullTxtHandler } from '@sonordev/site-kit/seo/llms'
+import { agentAccess } from '@/lib/agent-access'
+
+export const GET = createLLMsFullTxtHandler({
+  baseUrl: 'https://example.com',
+  mcp: agentAccess,
+})
+```
+
+`after-intro` preserves the title and introduction and puts Agent access
+before the first content section. `end` places it at the end. Existing
+markdown that already contains Agent access or a recognized server-card link
+is preserved, so update a site's existing discovery section directly when
+its URLs change. The optional catalog is an experimental discovery document,
+not a requirement for using the MCP endpoint.
+
+The writer applies these options to both files, whether Sonor generated the
+content or local data supplied it. It resolves the origin from
+`NEXT_PUBLIC_SITE_URL`, falling back to the `site` host. The handlers apply
+explicit options even when serving an older file through `preferStatic`;
+they use `baseUrl` or the configured site URL and never read the incoming
+request. A CDN serving `public/llms.txt` directly still needs the build-time
+writer to update that file. `mcp: false` disables automatic insertion; it
+doesn't remove a site's existing discovery text.
+
 ### Step 5: On-Demand Revalidation (optional)
 
 When Sonor data changes (page summaries, FAQs, etc.), bust the ISR cache instantly instead of waiting for `s-maxage` to expire:

package/src/mcp/README.md

@@ -9,7 +9,7 @@ definitions:
 | Surface | Who uses it | Entry point |
 |---|---|---|
 | Remote MCP endpoint (Streamable HTTP) | Off-browser agents — Claude, Cursor, any MCP client | `createMcpHandler` |
-| MCP Server Card (SEP-2127) | Crawlers and clients discovering the endpoint | `createMcpServerCardHandler` |
+| Server card and experimental AI catalog | Crawlers and clients discovering the endpoint | `createMcpServerCardHandler`, `createMcpAiCatalogHandler` |
 | In-page WebMCP | Browser-driving agents | `<WebMcpTools>`, `declarativeToolForm` |
 
 One definition feeding all three is the point. The alternative — a tool list for
@@ -163,22 +163,45 @@ export const { POST, GET, DELETE, OPTIONS } = createMcpHandler({
 export const dynamic = 'force-dynamic'
 ```
 
-### 3. Mount the card at BOTH well-known paths
+### 3. Mount the card and optional experimental catalog
+
+The [ext-server-card discovery draft](https://github.com/modelcontextprotocol/ext-server-card/blob/main/docs/discovery.md)
+is experimental. It recommends the card beside the endpoint at
+`<streamable-http-url>/server-card` and a domain catalog at
+`/.well-known/ai-catalog.json`. With the default endpoint, use
+`/api/mcp/server-card` as the site's canonical card URL:
 
 ```ts
-// app/.well-known/mcp-server-card/route.ts   ← canonical (SEP-2127)
-// app/.well-known/mcp.json/route.ts          ← superseded SEP-1649, still probed
-import { createMcpServerCardHandler } from '@sonordev/site-kit/mcp'
+// app/api/mcp/server-card/route.ts
+import { createMcpServerCardHandler, MCP_SERVER_CARD_MEDIA_TYPE } from '@sonordev/site-kit/mcp'
 import { mcpServer } from '@/lib/mcp/server'
 
 export const { GET, OPTIONS } = createMcpServerCardHandler({
   info: mcpServer.info,
   tools: mcpServer.tools,
   baseUrl: 'https://example.com',
+  contentType: MCP_SERVER_CARD_MEDIA_TYPE, // application/mcp-server-card+json
+})
+```
+
+```ts
+// app/.well-known/ai-catalog.json/route.ts
+import { createMcpAiCatalogHandler } from '@sonordev/site-kit/mcp'
+import { mcpServer } from '@/lib/mcp/server'
+
+export const { GET, OPTIONS } = createMcpAiCatalogHandler({
+  info: mcpServer.info,
+  baseUrl: 'https://example.com',
+  serverCardPath: '/api/mcp/server-card',
 })
-export const revalidate = 3600
 ```
 
+The catalog returns `application/ai-catalog+json`. Both handlers use explicit
+configuration and stay statically renderable without reading request data.
+Keep existing `/.well-known/mcp-server-card` and `/.well-known/mcp.json`
+aliases for clients that already use them. The card handler's default remains
+`application/json`; set the vendor content type explicitly on the new path.
+
 ### 4. Register in-page (optional, for browser agents)
 
 ```tsx
@@ -188,10 +211,17 @@ export const revalidate = 3600
 ```
 
 Pass no tool list. The component checks for WebMCP support first and only then
-fetches `tools/list` from the endpoint — so an ordinary visitor does no work
-and the page carries no extra bytes, while an agent gets the same catalog the
-endpoint serves. Handing it descriptors from a server component instead would
-put the whole catalog in every page's RSC payload.
+fetches `tools/list` from the endpoint. In a supported browser it starts when
+the component mounts, without waiting for window load, an idle period, or a
+human interaction. A browser without WebMCP makes no discovery request and
+receives no catalog. Handing it descriptors from a server component instead
+would put the whole catalog in every page's RSC payload.
+
+`defer={true}` preserves the optional load + idle activation. Ordinary parent
+renders keep the current registration; unmounting aborts discovery, remote
+calls, and registrations that support the registration signal. If passing
+`tools` or `localTools` explicitly, keep their arrays stable until the tools
+change.
 
 ### 5. Rate-limit the public endpoint (Netlify)
 
@@ -268,8 +298,8 @@ is not re-exported from `@sonordev/site-kit/mcp`, which stays runtime-neutral.
 
 ### The card does not list tools — on purpose
 
-SEP-2127 deliberately omits primitives from the card: what a server exposes can
-vary with auth state and flags, so the authoritative list is whatever
+The card's discovery shape omits primitives: what a server exposes can
+vary with auth state and configuration, so the authoritative list is whatever
 `tools/list` returns at call time. A card that inlined tools would be a second
 source of truth that goes stale silently.
 
@@ -279,11 +309,15 @@ point and requires a reverse-DNS prefix, so the hint rides along without
 pretending to be standard — useful for crawlers that index the card and never
 connect.
 
-### Two well-known paths
+### Experimental discovery and compatibility paths
 
-SEP-1649 proposed `/.well-known/mcp.json`; the ratified SEP-2127 moved to
-`/.well-known/mcp-server-card`. Deployed validators still probe the old path.
-Serving one document from two URLs costs nothing, so mount both.
+Site-kit keeps `/.well-known/mcp-server-card` and `/.well-known/mcp.json`
+for compatibility with existing integrations. The experimental
+ext-server-card draft adds domain discovery through
+`/.well-known/ai-catalog.json`, which links to the recommended endpoint-local
+card at `/api/mcp/server-card`. These draft conventions aren't a guarantee
+that every agent discovers or uses them. Keep the endpoint and existing card
+URLs working while adding the catalog.
 
 ### Dual-era protocol support
 

package/dist/SitemapSync-RJTEBINX.js

@@ -1,8 +0,0 @@
-export { SitemapSync } from './chunk-GEXT7BTE.js';
-import './chunk-YVKRYQRG.js';
-import './chunk-43OCZ3JA.js';
-import './chunk-EKBEOXTH.js';
-import './chunk-D6ZC7XKZ.js';
-import './chunk-K4ZHAURD.js';
-import './chunk-F24FNCTK.js';
-import './chunk-PKBMQBKP.js';