@sonordev/site-kit 7.2.0 → 7.4.0

package/dist/mcp/WebMcpTools.d.ts

@@ -29,11 +29,12 @@ export interface WebMcpToolsProps {
     /** MCP endpoint on this origin (default `/api/mcp`). */
     endpoint?: string;
     /**
-     * Wait for the page to go quiet before registering (default true).
+     * Wait for the page to go quiet before registering (default false).
      *
-     * Registration is not user-visible and must never compete with hydration.
-     * An agent arriving at the page polls or listens for `toolchange`, so a
-     * couple of hundred milliseconds costs nothing; a blocked LCP costs a lot.
+     * Supported browsers discover tools as soon as this component mounts, so
+     * an agent need not wait for window load, idle, or a human interaction.
+     * Pass true to retain load + idle activation. Unsupported browsers never
+     * fetch a catalog or register tools, regardless of this setting.
      */
     defer?: boolean;
     /**

package/dist/mcp/client.js

@@ -6,21 +6,28 @@ import { useEffect } from 'react';
 function getModelContext() {
   if (typeof window === "undefined") return null;
   const doc = document;
-  if (doc.modelContext) return doc.modelContext;
   const nav = navigator;
-  return nav.modelContext ?? null;
+  for (const context of [doc.modelContext, nav.modelContext]) {
+    if (typeof context?.registerTool === "function" || typeof context?.provideContext === "function") {
+      return context;
+    }
+  }
+  return null;
 }
 function isWebMcpAvailable() {
   return getModelContext() !== null;
 }
+var EMPTY_TOOLS = [];
+var EMPTY_LOCAL_TOOLS = [];
 function WebMcpTools({
-  tools = [],
-  localTools = [],
+  tools = EMPTY_TOOLS,
+  localTools = EMPTY_LOCAL_TOOLS,
   endpoint = "/api/mcp",
-  defer = true,
+  defer = false,
   discover = true
 }) {
-  const ready = useDeferredActivation(defer);
+  const deferredReady = useDeferredActivation(defer);
+  const ready = !defer || deferredReady;
   useEffect(() => {
     if (!ready) return;
     const modelContext = getModelContext();
@@ -113,7 +120,7 @@ function WebMcpTools({
           await modelContext.provideContext({ tools: definitions });
         }
       } catch (error) {
-        if (process.env.NODE_ENV !== "production") {
+        if (!controller.signal.aborted && process.env.NODE_ENV !== "production") {
           console.warn("[site-kit/mcp] WebMCP registration failed:", error);
         }
       }

package/dist/mcp/discovery.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Experimental domain discovery from the MCP Server Cards discovery draft.
+ * The catalog points at the existing card; it never copies tools or identity
+ * metadata whose authoritative source is the server/card itself.
+ *
+ * @see https://github.com/modelcontextprotocol/ext-server-card/blob/main/docs/discovery.md
+ */
+import type { McpServerInfo } from './types';
+import { MCP_SERVER_CARD_MEDIA_TYPE } from './serverCard';
+export declare const MCP_AI_CATALOG_PATH = "/.well-known/ai-catalog.json";
+export declare const MCP_AI_CATALOG_MEDIA_TYPE = "application/ai-catalog+json";
+export interface McpAiCatalog {
+    specVersion: '1.0';
+    entries: {
+        identifier: string;
+        type: typeof MCP_SERVER_CARD_MEDIA_TYPE;
+        url: string;
+    }[];
+}
+export interface BuildMcpAiCatalogOptions {
+    /** Reuse the server identity; `io.example/weather` becomes `mcp:weather`. */
+    info: Pick<McpServerInfo, 'name'>;
+    /** Explicit public site origin. Never inferred from an untrusted Host header. */
+    baseUrl: string;
+    /** Origin-relative card path, e.g. `/api/mcp/server-card`. */
+    serverCardPath: string;
+}
+/** Build the small, experimental catalog without duplicating the server card. */
+export declare function buildMcpAiCatalog(options: BuildMcpAiCatalogOptions): McpAiCatalog;
+export interface McpAiCatalogHandlerOptions extends BuildMcpAiCatalogOptions {
+    /** Seconds for `Cache-Control: public, max-age=…` (default 3600). */
+    maxAge?: number;
+}
+export interface McpDiscoveryRouteHandlers {
+    GET: (request?: Request) => Promise<Response>;
+    OPTIONS: () => Promise<Response>;
+}
+/**
+ * Serve the experimental catalog at `MCP_AI_CATALOG_PATH`. This static-safe
+ * handler leaves conditional ETag requests to the host/CDN, like llms.txt and
+ * the default card handler; it never reads incoming request headers.
+ */
+export declare function createMcpAiCatalogHandler(options: McpAiCatalogHandlerOptions): McpDiscoveryRouteHandlers;
+/** Shared public response policy for catalogs and cards; not an auth surface. */
+export declare function createMcpDiscoveryHandlers(document: unknown, options: {
+    mediaType: string;
+    maxAge?: number;
+}): McpDiscoveryRouteHandlers;

package/dist/mcp/handlers.d.ts

@@ -14,7 +14,8 @@
  */
 import { MCP_SUPPORTED_PROTOCOL_VERSIONS, type DispatchOutcome, type JsonRpcRequest, type McpServerDefinition } from './protocol';
 import type { McpToolCallRecord } from './types';
-import { type BuildMcpServerCardOptions } from './serverCard';
+import { type BuildMcpServerCardOptions, MCP_SERVER_CARD_MEDIA_TYPE } from './serverCard';
+import { type McpDiscoveryRouteHandlers } from './discovery';
 /**
  * Undo the spec's Base64 sentinel wrapper: `=?base64?{b64}?=`.
  * Values that aren't wrapped come back untouched.
@@ -74,18 +75,23 @@ export declare function createMcpHandler(options: McpHandlerOptions): McpRouteHa
 export interface McpServerCardHandlerOptions extends BuildMcpServerCardOptions {
     /** Seconds for `Cache-Control: public, max-age=…` (default 3600). */
     maxAge?: number;
+    /**
+     * Use the draft media type for a new canonical card URL. Existing routes
+     * default to application/json for compatibility. Both remain static-safe.
+     */
+    contentType?: 'application/json' | typeof MCP_SERVER_CARD_MEDIA_TYPE;
 }
-export interface McpServerCardRouteHandlers {
-    GET: () => Promise<Response>;
-    OPTIONS: () => Promise<Response>;
+export interface McpServerCardRouteHandlers extends McpDiscoveryRouteHandlers {
 }
 /**
- * Serve the SEP-2127 server card. Mount at BOTH well-known paths.
+ * Serve the server card. Keep both existing well-known paths available; the
+ * experimental AI Catalog can also point to an alias under the MCP endpoint.
  *
- * The handler never reads the incoming Request, so the route stays statically
+ * The handler never reads Request, so the route stays statically
  * prerenderable — the same constraint the llms.txt handlers document, and for
  * the same reason: touching `request.headers` opts the route into dynamic
- * rendering and it stops being served from the CDN.
+ * rendering. ETag validation is left to the host/CDN. Canonical card routes
+ * can use `contentType: MCP_SERVER_CARD_MEDIA_TYPE`; legacy aliases keep JSON.
  *
  * @example
  * ```ts

package/dist/mcp/index.d.ts

@@ -8,8 +8,8 @@
  *
  *   1. Remote MCP endpoint — `createMcpHandler`. Streamable HTTP, dual-era
  *      (2026-07-28 modern + the `initialize` handshake older clients speak).
- *   2. Discovery — `createMcpServerCardHandler`, the SEP-2127 card served at
- *      `/.well-known/mcp-server-card` and `/.well-known/mcp.json`.
+ *   2. Discovery — `createMcpAiCatalogHandler` (experimental draft) points to
+ *      `createMcpServerCardHandler`; existing well-known card URLs still work.
  *   3. In-page WebMCP — `<WebMcpTools>` (imperative) and
  *      `declarativeToolForm` (declarative), for browser-driving agents.
  *
@@ -20,8 +20,10 @@ export type { JsonSchemaNode, JsonSchemaObject, McpContent, McpTextContent, McpR
 export { defineMcpTool } from './types';
 export { MCP_PROTOCOL_VERSION_MODERN, MCP_PROTOCOL_VERSIONS_LEGACY, MCP_SUPPORTED_PROTOCOL_VERSIONS, META_PROTOCOL_VERSION, META_CLIENT_INFO, META_SERVER_INFO, MCP_ERROR_HEADER_MISMATCH, MCP_ERROR_UNSUPPORTED_PROTOCOL_VERSION, JSONRPC_METHOD_NOT_FOUND, dispatch, toToolResult, toolErrorResult, toToolDescriptor, validateArgs, isSupportedVersion, } from './protocol';
 export type { JsonRpcRequest, JsonRpcResponse, JsonRpcError, DispatchOutcome, DispatchOptions, McpServerDefinition, McpToolDescriptor, } from './protocol';
-export { buildMcpServerCard, validateMcpServerCard, MCP_SERVER_CARD_SCHEMA, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_LEGACY_PATH, SITE_KIT_CARD_META_KEY, } from './serverCard';
+export { buildMcpServerCard, validateMcpServerCard, MCP_SERVER_CARD_SCHEMA, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_MEDIA_TYPE, SITE_KIT_CARD_META_KEY, } from './serverCard';
 export type { McpServerCard, McpRemote, BuildMcpServerCardOptions, } from './serverCard';
+export { buildMcpAiCatalog, createMcpAiCatalogHandler, MCP_AI_CATALOG_PATH, MCP_AI_CATALOG_MEDIA_TYPE, } from './discovery';
+export type { McpAiCatalog, BuildMcpAiCatalogOptions, McpAiCatalogHandlerOptions, McpDiscoveryRouteHandlers, } from './discovery';
 export { createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, toolCallRecord, WEBMCP_SURFACE_HEADER, } from './handlers';
 export type { McpHandlerOptions, McpRouteHandlers, McpServerCardHandlerOptions, McpServerCardRouteHandlers, } from './handlers';
 export { declarativeToolForm, declarativeToolField } from './declarative';

package/dist/mcp/index.js

@@ -2,6 +2,7 @@ import { MCP_SUPPORTED_PROTOCOL_VERSIONS, dispatch, errorOutcome, JSONRPC_INVALI
 export { JSONRPC_METHOD_NOT_FOUND, MCP_ERROR_HEADER_MISMATCH, MCP_ERROR_UNSUPPORTED_PROTOCOL_VERSION, MCP_PROTOCOL_VERSIONS_LEGACY, MCP_PROTOCOL_VERSION_MODERN, MCP_SUPPORTED_PROTOCOL_VERSIONS, META_CLIENT_INFO, META_PROTOCOL_VERSION, META_SERVER_INFO, dispatch, isSupportedVersion, toToolDescriptor, toToolResult, toolErrorResult, validateArgs } from '../chunk-FYAB6CXS.js';
 export { declarativeToolField, declarativeToolForm } from '../chunk-HW7B43E5.js';
 import '../chunk-PKBMQBKP.js';
+import { createHash } from 'crypto';
 
 // src/mcp/types.ts
 function defineMcpTool(tool) {
@@ -10,6 +11,7 @@ function defineMcpTool(tool) {
 
 // src/mcp/serverCard.ts
 var MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
+var MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
 var MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 var MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";
 var SITE_KIT_CARD_META_KEY = "io.sonor.site-kit/tools";
@@ -70,6 +72,60 @@ function validateMcpServerCard(card) {
   }
   return problems;
 }
+var MCP_AI_CATALOG_PATH = "/.well-known/ai-catalog.json";
+var MCP_AI_CATALOG_MEDIA_TYPE = "application/ai-catalog+json";
+function buildMcpAiCatalog(options) {
+  const base = new URL(options.baseUrl);
+  if (!["http:", "https:"].includes(base.protocol) || base.username || base.password || base.search || base.hash || base.pathname !== "/") {
+    throw new Error("baseUrl must be an explicit HTTP(S) origin without credentials, query or fragment");
+  }
+  const name = /^[^/\s]+\/([^/\s]+)$/.exec(options.info.name)?.[1];
+  if (!name) {
+    throw new Error('info.name must have a namespace and server name, e.g. "io.example/weather"');
+  }
+  const path = options.serverCardPath;
+  if (!path || path.startsWith("//") || path.includes("\\") || /^[a-z][a-z\d+.-]*:/i.test(path)) {
+    throw new Error("serverCardPath must be an origin-relative path");
+  }
+  const cardUrl = new URL(path.startsWith("/") ? path : `/${path}`, base);
+  if (cardUrl.hash) throw new Error("serverCardPath must not include a fragment");
+  return {
+    specVersion: "1.0",
+    entries: [{
+      identifier: `urn:air:${base.hostname}:mcp:${encodeURIComponent(name)}`,
+      type: MCP_SERVER_CARD_MEDIA_TYPE,
+      url: cardUrl.href
+    }]
+  };
+}
+function createMcpAiCatalogHandler(options) {
+  return createMcpDiscoveryHandlers(buildMcpAiCatalog(options), {
+    mediaType: MCP_AI_CATALOG_MEDIA_TYPE,
+    maxAge: options.maxAge
+  });
+}
+function createMcpDiscoveryHandlers(document, options) {
+  const body = `${JSON.stringify(document, null, 2)}
+`;
+  const etag = `W/"${createHash("sha256").update(body).digest("base64url")}"`;
+  const maxAge = options.maxAge ?? 3600;
+  if (!Number.isSafeInteger(maxAge) || maxAge < 0) {
+    throw new Error("maxAge must be a non-negative integer");
+  }
+  const headers = {
+    "Content-Type": options.mediaType,
+    "Cache-Control": `public, max-age=${maxAge}`,
+    ETag: etag,
+    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Methods": "GET, OPTIONS",
+    "Access-Control-Allow-Headers": "Accept, Content-Type, If-None-Match",
+    "Access-Control-Expose-Headers": "ETag"
+  };
+  return {
+    GET: async () => new Response(body, { status: 200, headers }),
+    OPTIONS: async () => new Response(null, { status: 204, headers })
+  };
+}
 
 // src/mcp/handlers.ts
 var MCP_REQUEST_HEADERS = [
@@ -256,22 +312,10 @@ function createMcpHandler(options) {
   return { POST, GET: methodNotAllowed, DELETE: methodNotAllowed, OPTIONS };
 }
 function createMcpServerCardHandler(options) {
-  const card = buildMcpServerCard(options);
-  const body = `${JSON.stringify(card, null, 2)}
-`;
-  const maxAge = options.maxAge ?? 3600;
-  const headers = {
-    "Content-Type": "application/json",
-    "Cache-Control": `public, max-age=${maxAge}`,
-    // The card is a discovery document — it is meant to be fetched by anyone.
-    "Access-Control-Allow-Origin": "*",
-    "Access-Control-Allow-Methods": "GET, OPTIONS",
-    "Access-Control-Allow-Headers": "Content-Type"
-  };
-  return {
-    GET: async () => new Response(body, { status: 200, headers }),
-    OPTIONS: async () => new Response(null, { status: 204, headers })
-  };
+  return createMcpDiscoveryHandlers(buildMcpServerCard(options), {
+    mediaType: options.contentType ?? "application/json",
+    maxAge: options.maxAge
+  });
 }
 
-export { MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpServerCard, createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };
+export { MCP_AI_CATALOG_MEDIA_TYPE, MCP_AI_CATALOG_PATH, MCP_SERVER_CARD_LEGACY_PATH, MCP_SERVER_CARD_MEDIA_TYPE, MCP_SERVER_CARD_PATH, MCP_SERVER_CARD_SCHEMA, SITE_KIT_CARD_META_KEY, WEBMCP_SURFACE_HEADER, buildMcpAiCatalog, buildMcpServerCard, createMcpAiCatalogHandler, createMcpHandler, createMcpServerCardHandler, decodeHeaderValue, defineMcpTool, toolCallRecord, validateMcpServerCard };

package/dist/mcp/serverCard.d.ts

@@ -11,16 +11,15 @@
  * with enough identity attached that a human reviewing the connection knows
  * what they're approving.
  *
- * ── The two paths ─────────────────────────────────────────────────────────
- * SEP-1649 originally proposed `/.well-known/mcp.json`. The ratified SEP-2127
- * moved to `/.well-known/mcp-server-card`. Plenty of deployed crawlers and
- * validators still probe the old path, and serving one JSON document from two
- * URLs costs nothing, so `createMcpServerCardHandler` is mounted at both.
- * `mcp-server-card` is the canonical one; `mcp.json` is compatibility.
+ * The existing well-known paths stay available for compatibility. The newer
+ * experimental discovery draft uses a domain AI Catalog pointing to a card
+ * URL, with `<streamable-http-url>/server-card` as its recommended location.
+ * Hosts can mount the same card handler there without changing the old URLs.
  */
 import type { McpServerIcon, McpServerInfo, SiteKitMcpTool } from './types';
 export declare const MCP_SERVER_CARD_SCHEMA = "https://static.modelcontextprotocol.io/schemas/v1/server-card.schema.json";
-/** Canonical well-known path (SEP-2127). */
+export declare const MCP_SERVER_CARD_MEDIA_TYPE = "application/mcp-server-card+json";
+/** Existing site-kit well-known path; retained for backward compatibility. */
 export declare const MCP_SERVER_CARD_PATH = "/.well-known/mcp-server-card";
 /** Superseded SEP-1649 path, still widely probed. */
 export declare const MCP_SERVER_CARD_LEGACY_PATH = "/.well-known/mcp.json";

package/dist/mcp/sonor.js

@@ -1,10 +1,10 @@
 import { toolErrorResult } from '../chunk-FYAB6CXS.js';
 import { fetchReviews, fetchReviewStats } from '../chunk-EDYHROQ7.js';
 import { getOfferings } from '../chunk-G3NHWMP5.js';
-import { fetchBookingTypes, fetchAvailability } from '../chunk-BKY2ZNM7.js';
-import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-6U3VLV2C.js';
-import { getFormConfig } from '../chunk-5V2V5C3Y.js';
-import '../chunk-OWZ7ATLZ.js';
+import { fetchBookingTypes, fetchAvailability } from '../chunk-MHGAZ3LL.js';
+import { getLLMsData, getServices, getFAQItems, getPageSummaries } from '../chunk-4BHRA7TI.js';
+import { getFormConfig } from '../chunk-FUQTV5O6.js';
+import '../chunk-PF64OEXC.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-ZTLMPUO6.js';
 import '../chunk-DXO6SBMD.js';
@@ -13,7 +13,7 @@ import { getAllArticles, getArticle } from '../chunk-PKGN32AU.js';
 import '../chunk-Y3INC4QJ.js';
 import '../chunk-QXMIKDOL.js';
 import '../chunk-WMVK77ND.js';
-import { resolveFetch } from '../chunk-VX5CMNMM.js';
+import { resolveFetch } from '../chunk-UAYAJPEP.js';
 import '../chunk-NZ4RXN3G.js';
 import '../chunk-VWWITFWM.js';
 import '../chunk-MJP63SSS.js';
@@ -25,9 +25,9 @@ import '../chunk-C2FZBUSS.js';
 import '../chunk-5SQK3D53.js';
 import '../chunk-HW7B43E5.js';
 import '../chunk-NJCTQH2P.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import { SITE_KIT_VERSION } from '../chunk-F24FNCTK.js';
+import '../chunk-3E3PPSNR.js';
+import '../chunk-GK7TV7EK.js';
+import { SITE_KIT_VERSION } from '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';
 import 'server-only';
 import { after } from 'next/server.js';

package/dist/reputation/TestimonialSection.d.ts

@@ -8,4 +8,4 @@
  */
 import React from 'react';
 import type { TestimonialSectionProps } from './types';
-export declare function TestimonialSection({ title, subtitle, autoplay, autoplayInterval, showRating, maxReviews, featuredOnly, service, className, }: TestimonialSectionProps): React.JSX.Element | null;
+export declare function TestimonialSection({ title, subtitle, autoplay, autoplayInterval, showRating, showPhoto, maxReviews, featuredOnly, service, className, }: TestimonialSectionProps): React.JSX.Element | null;

package/dist/reputation/VisualReviewCard.d.ts

@@ -0,0 +1,6 @@
+import React from 'react';
+import type { VisualReviewCardProps, VisualReviewGalleryProps } from './types';
+/** Static, server-renderable photo and review card. Review quotes are rendered verbatim. */
+export declare function VisualReviewCard(props: VisualReviewCardProps): React.JSX.Element;
+/** Responsive server-renderable gallery; reviews without photos keep their quote card. */
+export declare function VisualReviewGallery({ reviews, title, subtitle, showRating, className }: VisualReviewGalleryProps): React.JSX.Element | null;

package/dist/reputation/index.d.ts

@@ -4,5 +4,6 @@
  * Display client reviews and testimonials on your website
  */
 export { TestimonialSection } from './TestimonialSection';
+export { VisualReviewCard, VisualReviewGallery } from './VisualReviewCard';
 export { fetchReviews, fetchReviewStats } from './api';
-export type { Review, ReviewStats, TestimonialSectionProps } from './types';
+export type { Review, ReviewPhoto, ReviewStats, TestimonialSectionProps, VisualReviewCardProps, VisualReviewGalleryProps } from './types';

package/dist/reputation/index.js

@@ -1,4 +1,6 @@
-export { TestimonialSection } from '../chunk-BR4ZKUHH.js';
+export { TestimonialSection } from '../chunk-7HPZSWS4.js';
+export { VisualReviewCard, VisualReviewGallery } from '../chunk-OD2ULW5Z.js';
+import '../chunk-CAT235HY.js';
 export { fetchReviewStats, fetchReviews } from '../chunk-EDYHROQ7.js';
 import '../chunk-MH2DSGC6.js';
 import '../chunk-PKBMQBKP.js';

package/dist/reputation/review-photo.d.ts

@@ -0,0 +1,2 @@
+/** Public review photos must be ordinary HTTPS images, never inline or script URLs. */
+export declare function reviewPhotoUrl(value: unknown): string | undefined;

package/dist/reputation/server.d.ts

@@ -1,9 +1,10 @@
 /**
- * @sonordev/site-kit/reputation/server - Server-safe API functions
+ * @sonordev/site-kit/reputation/server - Server-safe review feed and visual cards
  *
  * Use this entry point from React Server Components or any server-side context.
  * Importing from `./reputation` (which includes TestimonialSection) pulls in a
  * client-tainted bundle that can't be called from RSC.
  */
 export { fetchReviews, fetchReviewStats } from './api';
-export type { Review, ReviewStats, TestimonialSectionProps } from './types';
+export { VisualReviewCard, VisualReviewGallery } from './VisualReviewCard';
+export type { Review, ReviewPhoto, ReviewStats, TestimonialSectionProps, VisualReviewCardProps, VisualReviewGalleryProps } from './types';

package/dist/reputation/server.js

@@ -1,3 +1,5 @@
+export { VisualReviewCard, VisualReviewGallery } from '../chunk-OD2ULW5Z.js';
+import '../chunk-CAT235HY.js';
 export { fetchReviewStats, fetchReviews } from '../chunk-EDYHROQ7.js';
 import '../chunk-MH2DSGC6.js';
 import '../chunk-PKBMQBKP.js';

package/dist/reputation/types.d.ts

@@ -8,11 +8,31 @@ export interface Review {
     role?: string;
     rating: number;
     image?: string;
+    /** A business-supplied work/property photo. `image` remains the reviewer avatar. */
+    photo?: ReviewPhoto | null;
     date?: string;
     platform?: string;
     isFeatured?: boolean;
     serviceTags?: string[];
 }
+export interface ReviewPhoto {
+    fileId: string;
+    url: string;
+    altText: string;
+    caption: string;
+}
+export interface VisualReviewCardProps {
+    review: Review;
+    showRating?: boolean;
+    className?: string;
+}
+export interface VisualReviewGalleryProps {
+    reviews: Review[];
+    title?: string;
+    subtitle?: string;
+    showRating?: boolean;
+    className?: string;
+}
 export interface ReviewStats {
     total_reviews: number;
     average_rating: number;
@@ -30,6 +50,8 @@ export interface TestimonialSectionProps {
     autoplay?: boolean;
     autoplayInterval?: number;
     showRating?: boolean;
+    /** Show attached business photos above the quote. Defaults to true. */
+    showPhoto?: boolean;
     maxReviews?: number;
     featuredOnly?: boolean;
     service?: string;

package/dist/revalidate/index.js

@@ -1,7 +1,7 @@
-import { createSeoRevalidationHandler } from '../chunk-VHKEF5ZB.js';
+import { createSeoRevalidationHandler } from '../chunk-XA2BNW5M.js';
 import '../chunk-XTRZGXB2.js';
 export { SITE_CACHE_TAGS, SITE_REVALIDATE_PATH, isSiteRevalidatePong } from '../chunk-RYVDGXC2.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';
 
 // src/revalidate/index.ts

package/dist/seo/client.js

@@ -1,9 +1,9 @@
 'use client';
-export { SitemapSync } from '../chunk-GEXT7BTE.js';
+export { SitemapSync } from '../chunk-D2RGEWHS.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-3E3PPSNR.js';
+import '../chunk-GK7TV7EK.js';
+import '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/index.js

@@ -2,7 +2,7 @@ export { ManagedNoScripts, ManagedScripts } from '../chunk-MVLMXC44.js';
 import { pickManagedLlmSchemaForJsonLd } from '../chunk-NZ4RXN3G.js';
 import { safeJsonLd } from '../chunk-4KZ6W3ZH.js';
 import { withoutSchemaPlaceholders } from '../chunk-VWWITFWM.js';
-export { SitemapSync } from '../chunk-GEXT7BTE.js';
+export { SitemapSync } from '../chunk-D2RGEWHS.js';
 import { getManagedMetadata } from '../chunk-4YTYGG2C.js';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-4YTYGG2C.js';
 import { getContentBlock, getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, getEntities, pruneSchemaTypes } from '../chunk-662ILEZ6.js';
@@ -18,9 +18,9 @@ import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-43OCZ3JA.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6ZC7XKZ.js';
-import '../chunk-K4ZHAURD.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-3E3PPSNR.js';
+import '../chunk-GK7TV7EK.js';
+import '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';
 import { Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';

package/dist/seo/llms.js

@@ -1,19 +1,19 @@
-export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-BC4Y3S3D.js';
+export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-5O62CER4.js';
 export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-PO2TRJPY.js';
 export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler } from '../chunk-QLTDFUJ7.js';
-export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-VHKEF5ZB.js';
+export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-XA2BNW5M.js';
 import '../chunk-XTRZGXB2.js';
 export { AEOBlock, AEOCitedContent, AEOClaim, AEOComparison, AEODefinition, AEOEntity, AEOProvenanceList, AEOStep, AEOSteps, AEOSummary, DEFAULT_SPEAKABLE_SELECTORS, SpeakableSchema, createSpeakableSchema, getSpeakableSelectorsForPage } from '../chunk-PSAG45YF.js';
-export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-QL6XNPSD.js';
-export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-6U3VLV2C.js';
+export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-ZTLU3BSW.js';
+export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-4BHRA7TI.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
-import '../chunk-VX5CMNMM.js';
+import '../chunk-UAYAJPEP.js';
 export { LLMS_DISCLAIMER_MAX_LENGTH, LLMS_PUBLIC_SUMMARY_MAX_LENGTH, LLM_GEO_CONTRACT_VERSION, MANAGED_LLM_SCHEMA_KNOWN_KEYS, pickManagedLlmSchemaForJsonLd, sanitizeLlmsDisclaimerLine, sanitizeLlmsPublicSummary, sanitizePrimaryLanguageTag } from '../chunk-NZ4RXN3G.js';
 import '../chunk-4KZ6W3ZH.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/register-sitemap-cli.js

@@ -458,7 +458,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-OV24LQVL.js');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-OL4KQERZ.js');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/seo/sitemap.js

@@ -1,10 +1,10 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-R46IQIGK.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-4DJMJ4V5.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QL6XNPSD.js';
-import '../chunk-6U3VLV2C.js';
+import '../chunk-ZTLU3BSW.js';
+import '../chunk-4BHRA7TI.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
-import '../chunk-VX5CMNMM.js';
+import '../chunk-UAYAJPEP.js';
 import '../chunk-NZ4RXN3G.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-ZEGVKVD5.js';

package/dist/server/index.js

@@ -1,6 +1,6 @@
-export { resolveClientCredential } from '../chunk-RPZ7OQGD.js';
-import '../chunk-VX5CMNMM.js';
+export { resolveClientCredential } from '../chunk-IE5SSOCN.js';
+import '../chunk-UAYAJPEP.js';
 export { requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-X6F6SO4S.js';
 import '../chunk-MH2DSGC6.js';
-import '../chunk-F24FNCTK.js';
+import '../chunk-KHQ5GD6T.js';
 import '../chunk-PKBMQBKP.js';

package/dist/server/mint-site-token.d.ts

@@ -39,8 +39,7 @@
  * realistic redeploy gap; marketing sites routinely go many months untouched.
  */
 import 'server-only';
-import { resolveFetch } from '../shared/fresh-fetch';
-export { resolveFetch };
+export { resolveFetch } from '../shared/fresh-fetch';
 /**
  * Next signals "this render must go dynamic" by THROWING (DynamicServerError,
  * static-gen bailout, redirect/notFound digests, React's postpone). Those are

package/dist/shared/fresh-fetch.d.ts

@@ -2,9 +2,9 @@
  * @sonordev/site-kit shared - Fetch outside Next's Data Cache
  *
  * Single source of truth for requests that must not touch Next's Data Cache
- * and must not change how the calling route renders. Used by the build-time
- * writers (public/llms.txt, the sitemap's Sonor reads) and the site credential
- * mint (server/mint-site-token.ts). Don't re-fork this into a module.
+ * and must not change how the calling route renders. Used by build-time
+ * writers and the site credential mint. The mint uses trackedFreshFetch so
+ * Cache Components can await it without an uncached prerender bailout.
  *
  * Next.js monkey-patches `globalThis.fetch` so every call joins its Data Cache
  * and static-generation tracking. That's wrong for these requests, and the
@@ -38,6 +38,12 @@ export declare function resolveFetch(): {
     unpatched: boolean;
 };
 export declare const FRESH_FETCH_NONCE_HEADER = "x-sitekit-build-nonce";
+/**
+ * A fresh request that Next can await during a Cache Components prerender.
+ * A unique cache key per request prevents reuse after a credential expires or
+ * across deploys. The caller owns memoization and concurrent-request deduping.
+ */
+export declare function trackedFreshFetch(input: string | URL, init?: RequestInit): Promise<Response>;
 /**
  * Fetch that never reads a response cached by an earlier build.
  *

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "7.2.0";
+export declare const SITE_KIT_VERSION = "7.4.0";

package/dist/signal/index.js

@@ -1,6 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-S54ECQGY.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-S54ECQGY.js';
+import { useSignalExperiment, useSignalEvent } from '../chunk-AH4AXO4P.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-AH4AXO4P.js';
 import '../chunk-PKBMQBKP.js';
 import React, { useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/sitemap/index.js

@@ -1,10 +1,10 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-R46IQIGK.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-4DJMJ4V5.js';
 import '../chunk-Z22QVHT4.js';
-import '../chunk-QL6XNPSD.js';
-import '../chunk-6U3VLV2C.js';
+import '../chunk-ZTLU3BSW.js';
+import '../chunk-4BHRA7TI.js';
 import '../chunk-L5UOHS6E.js';
 import '../chunk-WMVK77ND.js';
-import '../chunk-VX5CMNMM.js';
+import '../chunk-UAYAJPEP.js';
 import '../chunk-NZ4RXN3G.js';
 import '../chunk-MJP63SSS.js';
 import '../chunk-ZEGVKVD5.js';