@sonordev/site-kit 8.5.0 → 8.5.2

package/dist/runtime/index.js

@@ -1,8 +1,8 @@
 import '../chunk-B7T2SFUF.js';
 export { readAnalyticsIdentity } from '../chunk-5ROTTMBL.js';
 import '../chunk-5TM3WPCI.js';
-export { sonorFetch } from '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+export { sonorFetch } from '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 export { DEFAULT_SONOR_API_URL, getClientApiConfig, readPublishedApiConfig } from '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/client.js

@@ -1,10 +1,10 @@
 'use client';
-export { SitemapSync } from '../chunk-AM7O5C4L.js';
+export { SitemapSync } from '../chunk-EQHGPB3J.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-DLM4FFNH.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/index.js

@@ -2,7 +2,7 @@ export { ManagedNoScripts, ManagedScripts } from '../chunk-MVLMXC44.js';
 import { pickManagedLlmSchemaForJsonLd } from '../chunk-NZ4RXN3G.js';
 import { withoutSchemaPlaceholders } from '../chunk-VWWITFWM.js';
 import { safeJsonLd } from '../chunk-4KZ6W3ZH.js';
-export { SitemapSync } from '../chunk-AM7O5C4L.js';
+export { SitemapSync } from '../chunk-EQHGPB3J.js';
 import { getManagedMetadata, mergeAlternates } from '../chunk-URJN75ZG.js';
 export { generateSitemap, getABVariant, getManagedMetadata, getManagedMetadataWithAB, getRedirect, getRobotsDirective, isIndexable } from '../chunk-URJN75ZG.js';
 import { getSchemaMarkups, getSEOPageData, getEntityEnhancedSchema, getFAQData, getInternalLinks, pruneSchemaTypes } from '../chunk-Y35BWW2C.js';
@@ -18,10 +18,10 @@ import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-DLM4FFNH.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';
 import { Suspense } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';

package/dist/seo/llms.js

@@ -1,10 +1,10 @@
-export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-ZS4XW2PJ.js';
-export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-PO2TRJPY.js';
+export { createLLMsFullTxtHandler, createLLMsTxtHandler, formatSourcedFactsSection, llmsResponseHeaders } from '../chunk-OFQ3BU52.js';
+export { buildAiDiscoveryHeaders, wantsLlmsDiscoveryLink } from '../chunk-MTDVV5P3.js';
 export { AI_RETRIEVAL_CRAWLERS, AI_TRAINING_CRAWLERS, buildAiCrawlerRules, createRobotsTxtHandler } from '../chunk-QLTDFUJ7.js';
-export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-RVMN4QB7.js';
+export { LEGACY_PUBLICATION_PATH, SEO_REVALIDATION_MAX_BODY_BYTES, SEO_REVALIDATION_MAX_ITEMS, createLlmsRevalidateHandler, createSeoRevalidationHandler, parseSeoRevalidationPayload } from '../chunk-GTVOB5RN.js';
 export { AEOBlock, AEOCitedContent, AEOClaim, AEOComparison, AEODefinition, AEOEntity, AEOProvenanceList, AEOStep, AEOSteps, AEOSummary, DEFAULT_SPEAKABLE_SELECTORS, SpeakableSchema, createSpeakableSchema, getSpeakableSelectorsForPage } from '../chunk-PSAG45YF.js';
 import '../chunk-XTRZGXB2.js';
-export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-E2TI6JFT.js';
+export { AGENT_ACCESS_HEADING, appendAgentAccessSection, describesMcp, detectMcpServer, formatAgentAccessSection, generateLLMsFullTxt, generateLLMsTxt, writeLLMsTxtToPublic } from '../chunk-URZTBPZO.js';
 export { getBusinessInfo, getFAQItems, getLLMsData, getOptimizedLLMsTxt, getPageSummaries, getServices } from '../chunk-XA7Q2VQA.js';
 import '../chunk-5D7ZISUP.js';
 import '../chunk-4K735O3J.js';
@@ -16,5 +16,5 @@ import '../chunk-YVKRYQRG.js';
 import '../chunk-FESKKJAS.js';
 import '../chunk-A4CC4ZG3.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/seo/register-sitemap-cli.js

@@ -458,7 +458,7 @@ async function registerLocalSitemap(options) {
   }
   if (options.writeLlms && result.success) {
     try {
-      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-CH4GGLQ3.js');
+      const { writeLLMsTxtToPublic } = await import('../writeLLMsTxt-BAK5XMRR.js');
       const written = await writeLLMsTxtToPublic({
         // Resolved here too: the sync's own `site` is scoped to the branch that
         // posts, and this runs on the skip path as well.

package/dist/seo/sitemap.js

@@ -1,5 +1,5 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-FBAHUETP.js';
-import '../chunk-E2TI6JFT.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-IXA7ZB6U.js';
+import '../chunk-URZTBPZO.js';
 import '../chunk-XA7Q2VQA.js';
 import '../chunk-Z22QVHT4.js';
 import '../chunk-5D7ZISUP.js';

package/dist/server/index.js

@@ -1,8 +1,8 @@
 import '../chunk-34ZYJTQR.js';
-export { resolveClientCredential } from '../chunk-2VVC2HHY.js';
+export { resolveClientCredential } from '../chunk-T6U6J3QK.js';
 import '../chunk-UAYAJPEP.js';
 export { SITE_CACHE_TAGS } from '../chunk-6KU7STM3.js';
 export { isNextControlFlow, requireServerApiConfig, resolveApiOrigin, resolveServerApiConfig, serverApiFetch } from '../chunk-C7TLGL3R.js';
 import '../chunk-MH2DSGC6.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "8.5.0";
+export declare const SITE_KIT_VERSION = "8.5.2";

package/dist/signal/index.js

@@ -1,6 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-XVCUCZIF.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-XVCUCZIF.js';
+import { useSignalExperiment, useSignalEvent } from '../chunk-YW3LNSBM.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-YW3LNSBM.js';
 import '../chunk-PKBMQBKP.js';
 import React, { useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/sitemap/index.js

@@ -1,5 +1,5 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-FBAHUETP.js';
-import '../chunk-E2TI6JFT.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-IXA7ZB6U.js';
+import '../chunk-URZTBPZO.js';
 import '../chunk-XA7Q2VQA.js';
 import '../chunk-Z22QVHT4.js';
 import '../chunk-5D7ZISUP.js';

package/dist/sync/api.d.ts

@@ -50,6 +50,9 @@ export declare function createBooking(bookingData: {
     timezone?: string;
     holdId?: string;
     sessionId?: string;
+    /** Analytics identity, distinct from the booking hold's sessionId. */
+    visitorId?: string;
+    analyticsSessionId?: string;
     sourceUrl?: string;
 }, apiUrl?: string, apiKey?: string): Promise<BookingResult>;
 /**

package/dist/sync/index.js

@@ -1,7 +1,9 @@
-export { BookingWidget } from '../chunk-NAU56CSZ.js';
-export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-VLDFUSTX.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+export { BookingWidget } from '../chunk-I4LMZNBN.js';
+export { createBooking, createSlotHold, detectTimezone, fetchAvailability, fetchAvailableDates, fetchBookingTypeDetails, fetchBookingTypes, formatDate, formatDuration, formatTime, prepareMeeting, releaseSlotHold } from '../chunk-5BRHTBPO.js';
+import '../chunk-5ROTTMBL.js';
+import '../chunk-5TM3WPCI.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/images.js

@@ -1,6 +1,6 @@
-export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-H64ZZ76J.js';
+export { ManagedImage, assignImageToSlot, clearImageSlot, fetchManagedImage, fetchManagedImages, listImageFiles, uploadImage } from '../chunk-Q4Y3WIHE.js';
 export { ManagedFavicon, getManagedFaviconUrl } from '../chunk-GW7GSBO7.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/index.js

@@ -1,14 +1,14 @@
 'use client';
-export { SiteDesignReporter } from '../chunk-APTUCAXU.js';
-export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-RA3N2VKJ.js';
+export { SiteDesignReporter } from '../chunk-A7RZQI6H.js';
+export { SITE_DESIGN_PATH, cleanFontStack, colorToHex, getSiteDesignTokens, measureSiteDesign, readDeclaredDesign, sendSiteDesign } from '../chunk-7HRYSLY2.js';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
 import '../chunk-YC7ELZS3.js';
 import '../chunk-S22FSH7C.js';
 import '../chunk-DLM4FFNH.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/website/popups.js

@@ -1,17 +1,17 @@
 'use client';
-export { SitePopups } from '../chunk-62AGFUP7.js';
+export { SitePopups } from '../chunk-24NM64IV.js';
 import '../chunk-27FISYK4.js';
 export { DEFAULT_POPUP_TOKENS, PopupBlocks } from '../chunk-BF7TZYC3.js';
 import '../chunk-IHG36STL.js';
 import '../chunk-5ROTTMBL.js';
 import '../chunk-S22FSH7C.js';
-import '../chunk-ZKADJNR2.js';
-import '../chunk-5TM3WPCI.js';
+import '../chunk-IPQKQEWI.js';
 import '../chunk-GJWI74ZZ.js';
+import '../chunk-5TM3WPCI.js';
 import '../chunk-DLM4FFNH.js';
 import '../chunk-EKBEOXTH.js';
-import '../chunk-D6K32TQM.js';
-import '../chunk-G5USOD3Z.js';
+import '../chunk-GDQKDL3E.js';
+import '../chunk-OEA7U4HJ.js';
 import '../chunk-W7OPEMGJ.js';
-import '../chunk-2TPHS7KZ.js';
+import '../chunk-CFSIGEUW.js';
 import '../chunk-PKBMQBKP.js';

package/dist/{writeLLMsTxt-CH4GGLQ3.js → writeLLMsTxt-BAK5XMRR.js}

@@ -1,4 +1,4 @@
-export { writeLLMsTxtToPublic } from './chunk-E2TI6JFT.js';
+export { writeLLMsTxtToPublic } from './chunk-URZTBPZO.js';
 import './chunk-XA7Q2VQA.js';
 import './chunk-5D7ZISUP.js';
 import './chunk-4K735O3J.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonordev/site-kit",
-  "version": "8.5.0",
+  "version": "8.5.2",
   "type": "module",
   "packageManager": "pnpm@11.5.3",
   "description": "Sonor's Next.js foundation: SEO, analytics, forms, chat, booking, AI visibility and agent tools. Add @sonordev/press-kit for publications or @sonordev/commerce-kit for selling. Legacy article imports remain compatible in 8.x.",

package/src/layout/README.md

@@ -40,7 +40,8 @@ interface SiteKitLayoutProps {
   favicon?: boolean                       // Default: true
   managedScripts?: boolean                // Default: true
   debug?: boolean                         // Default: false
-  showLlmsTxtFooterLink?: boolean         // Default: false (prefer middleware discovery headers)
+  llmsDiscovery?: AiDiscoveryHeadersOptions | false // Default: false; static HTML links
+  showLlmsTxtFooterLink?: boolean         // Default: false (prefer llmsDiscovery)
   speculation?: boolean | { mode?: 'prerender' | 'prefetch'; exclude?: string[] } // Default: false
 }
 ```
@@ -67,3 +68,34 @@ Since 4.0.0 none of these wrap your page. `{children}` renders first and every m
 ## Note
 
 `SiteKitProvider` was **removed in 4.0.0**. It wrapped the whole tree client-side, which broke RSC. Migrate an older layout with `npx sonor-setup codemod --only provider-to-layout --write`.
+
+## AI discovery without changing preload headers
+
+```tsx
+<SiteKitLayout llmsDiscovery={{ siteUrl: 'https://example.com', mcpServerCard: true }}>
+  {children}
+</SiteKitLayout>
+```
+
+This emits server-rendered `<link rel="describedby">` for `/llms.txt` and an optional
+`<link rel="service-desc">` for the public MCP server card. React places them in
+`<head>`. No client JavaScript, request reads, extra fetches, or changes to Next's
+font and stylesheet preload headers are needed.
+
+For a separate public layout, import `AiDiscoveryLinks` from
+`@sonordev/site-kit/layout` and render it with the same props. Both forms accept
+`AiDiscoveryHeadersOptions`: `siteUrl`, optional `llmsPath`, `mcpServerCard`
+(`true` or a custom URL/path), `languageAlternates`, and `includeTypeParameter`.
+They share URL construction and alternate filtering with `buildAiDiscoveryHeaders`.
+
+Remove `llmsDiscovery` from `createProxy` and `llmsTxtDiscoveryLink` from
+`withSiteKitConfig` when moving to HTML discovery. Those HTTP options remain
+compatible but are deprecated: host adapters can replace Next's preload `Link`
+header with the discovery value. Appending at the proxy cannot reliably merge
+headers generated later by the framework.
+
+Layout-level discovery links name only the configured **public resources**, even
+on private child routes; they don't include the current URL, preview token, or
+article content. Private preview cache, indexing, and reporting rules stay in
+place. If private pages must contain no discovery tags at all, render
+`AiDiscoveryLinks` in a public route-group layout instead of the root layout.

package/src/llms/README.md

@@ -18,7 +18,7 @@ site-kit (npm: @sonordev/site-kit/llms)
 ├─ generateLLMsTxt()       ← builds markdown from Sonor data
 ├─ createLLMsTxtHandler()  ← zero-config Next.js route handler
 ├─ buildAiDiscoveryHeaders() ← Link header for crawler discovery
-├─ createProxy({ llmsDiscovery }) ← sends the Link header from proxy.ts
+├─ AiDiscoveryLinks (layout entry) ← static public-resource links in <head>
 ├─ buildAiCrawlerRules() / createRobotsTxtHandler() ← robots.txt for AI crawlers
 ├─ writeLLMsTxtToPublic()  ← build-time static file generation
 ├─ createLlmsRevalidateHandler() ← on-demand ISR cache bust
@@ -30,7 +30,7 @@ site-kit (npm: @sonordev/site-kit/llms)
 Next.js Site
 ├─ /llms.txt         ← route handler (dynamic or static)
 ├─ /llms-full.txt    ← extended version (more pages/FAQ)
-├─ Link header       ← rel="describedby" on all HTML responses
+├─ HTML links        ← rel="describedby" for public AI resources
 ├─ robots.txt        ← allows AI crawlers to access /llms.txt
 └─ JSON-LD in <head> ← managed_llm_schema per page
 ```
@@ -75,67 +75,45 @@ Both handlers:
 - Never read the incoming `Request`, so the route prerenders statically (○) instead of
   bailing out with a "Dynamic server usage" error during `next build`
 
-### Step 2: Discovery header (required)
+### Step 2: Discovery links (required)
 
-**Proxy (recommended)**
+**HTML discovery (recommended)**
 
-```ts
-// proxy.ts
-import { createProxy } from '@sonordev/site-kit/proxy'
-
-export default createProxy({
-  llmsDiscovery: { siteUrl: 'https://example.com' },
-})
+```tsx
+// app/layout.tsx
+import { SiteKitLayout } from '@sonordev/site-kit/layout'
 
-// Inlined: an imported `config.matcher` is a build error. See the proxy README.
-export const config = {
-  matcher: [
-    '/((?!_next/static|_next/image|favicon\\.ico|.*\\.(?:ico|png|jpg|jpeg|gif|webp|svg|woff2?)$).*)',
-  ],
-}
+<SiteKitLayout llmsDiscovery={{ siteUrl: 'https://example.com', mcpServerCard: true }}>
+  {children}
+</SiteKitLayout>
 ```
 
-This adds `Link: <https://example.com/llms.txt>; rel="describedby"; type="text/markdown"`
-to every request that could be for a page: GET or HEAD, with an Accept header
-that allows HTML or no Accept header at all. Requests with no Accept header
-count because that's how curl and many crawlers and AI fetchers ask, and
-they're who the header is for (they used to be skipped). Skipped:
-file-like paths (`/llms.txt`, `/sitemap.xml`), `/api/` routes, Accept headers
-that name only non-HTML types, and Next's RSC navigation requests. The rule is
-`wantsLlmsDiscoveryLink`, exported from `@sonordev/site-kit/llms`.
-
-**No proxy? next.config**
-
-```ts
-// next.config.ts
-import { withSiteKitConfig } from '@sonordev/site-kit/config'
-
-export default withSiteKitConfig({ llmsTxtDiscoveryLink: true })
-```
+This renders public-resource links in the HTML head without changing Next's
+resource preload headers. You can also render `AiDiscoveryLinks` from the same
+entry in a public layout. See [layout discovery](../layout/README.md#ai-discovery-without-changing-preload-headers)
+for options and private-route semantics.
 
-This sends the same header from next.config `headers()`, on every route. It
-reads the origin from `NEXT_PUBLIC_SITE_URL`. If you also set
-`nextConfig.headers`, yours replaces the helper's, so merge
-`buildAiDiscoveryHeaders({ siteUrl })` into it yourself.
+**HTTP compatibility**
 
-**Not from the root layout.** Older versions of this README showed
-`export async function headers()` in `app/layout.tsx`. That isn't a Next API:
-`headers()` is a next.config option, and exported from a layout it's an
-ordinary function nobody calls, so it sends nothing. `sonor-setup geo` fails a
-site wired that way and says so. Move it to the proxy.
+`buildAiDiscoveryHeaders` remains available where you control the final response
+and can merge all `Link` values. Proxy `llmsDiscovery` and next.config
+`llmsTxtDiscoveryLink` still work, but are deprecated: some host adapters replace
+Next's font/style preload headers when either option sets `Link`. Remove that
+configuration when moving to HTML discovery; changing `set` to `append` in the
+proxy doesn't merge headers generated downstream.
 
-`buildAiDiscoveryHeaders` builds the header value for either place, including
-multilingual alternates:
+Both renderers use the same options, including multilingual alternates:
 
-```ts
-buildAiDiscoveryHeaders({
-  siteUrl: 'https://example.com',
-  languageAlternates: [
-    { hreflang: 'fr', href: 'https://example.com/fr/llms.txt' },
-  ],
-})
+```tsx
+<AiDiscoveryLinks
+  siteUrl="https://example.com"
+  languageAlternates={[{ hreflang: 'fr', href: 'https://example.com/fr/llms.txt' }]}
+/>
 ```
 
+A layout export named `headers()` isn't a Next API and sends no headers. Render
+the links instead; `sonor-setup geo` recognizes both supported discovery forms.
+
 ### Step 3: robots.txt (required)
 
 Name the AI crawlers explicitly with the kit's curated lists rather than a
@@ -726,7 +704,8 @@ import {
   createLLMsTxtHandler, createLLMsFullTxtHandler, llmsResponseHeaders,
 } from '@sonordev/site-kit/llms'
 
-// Discovery
+// Discovery: HTML for Next layouts, HTTP for controlled response merging
+import { AiDiscoveryLinks } from '@sonordev/site-kit/layout'
 import { buildAiDiscoveryHeaders } from '@sonordev/site-kit/llms'
 
 // API data fetchers (React cache()-wrapped)

package/src/mcp/README.md

@@ -136,8 +136,9 @@ tool keeps failing.
 
 **Discovery.** llms.txt gains an "Agent access" section pointing at the
 endpoint and card (automatic in the build-time file once `/api/mcp` exists),
-and `createProxy({ llmsDiscovery: { siteUrl, mcpServerCard: true } })` adds
-`Link: <.../.well-known/mcp-server-card>; rel="service-desc"`.
+and `SiteKitLayout llmsDiscovery={{ siteUrl, mcpServerCard: true }}` adds an HTML
+`<link rel="service-desc">` to `/.well-known/mcp-server-card`, preserving Next's
+resource preload headers. `AiDiscoveryLinks` from the layout entry works on its own too.
 
 ### A custom MCP server is left alone
 
@@ -151,7 +152,7 @@ hands off:
 | `npx sonor-setup mcp` | writes the wiring (skips files that exist) | **writes nothing**, not even missing files, and says what's opt-in (`--force` replaces it, knowingly) |
 | llms.txt "Agent access" section | added at build | **not added** (`writeLLMsTxtToPublic({ mcp: true })` opts in) |
 | Tool-call reporting to Sonor | `onToolCall: reportToolCallsToSonor()` | the same line, if you want it; nothing without it |
-| Proxy `service-desc` link | `llmsDiscovery.mcpServerCard: true` | the same, opt-in |
+| HTML `service-desc` link | `SiteKitLayout` with `llmsDiscovery.mcpServerCard: true` | the same, opt-in |
 | Mixing in built-in tools | n/a | `tools: [...sonorMcpTools({ businessName, exclude }), ...yourTools]` |
 
 "Built-in" means the site's `/api/mcp` server comes from `sonorMcpServer` or

package/src/proxy/README.md

@@ -1,6 +1,6 @@
 # Proxy — `@sonordev/site-kit/proxy`
 
-Composable Next.js Proxy factory. Zero-config redirects + security headers. Opt-in AI discovery headers.
+Composable Next.js Proxy factory. Zero-config redirects + security headers. Legacy opt-in AI discovery headers remain supported.
 
 Next 16 renamed the `middleware` file convention to `proxy`. This module is
 also served on `@sonordev/site-kit/middleware`, with `createMiddleware` as an
@@ -30,13 +30,20 @@ With options:
 ```ts
 export default createProxy({
   securityHeaders: { frameAncestors: ["'self'", 'https://partner.example.com'] },
-  llmsDiscovery: { siteUrl: 'https://example.com' },
   before: (req) => {
     // Custom auth check, geolocation, etc.
   },
 })
 ```
 
+## AI discovery
+
+Use `SiteKitLayout llmsDiscovery={{ siteUrl }}` or `AiDiscoveryLinks` from
+`@sonordev/site-kit/layout`. They render HTML links while leaving Next's font and
+stylesheet preload headers intact. The proxy's `llmsDiscovery` option remains
+compatible but is deprecated: host adapters can replace downstream `Link`
+headers, even if a proxy uses `append`. Remove the proxy option when migrating.
+
 ## The matcher must be inlined
 
 **`export const config = siteKitMatcher` is a build error.** Next statically
@@ -74,7 +81,7 @@ Two Next 16 traps to know:
 interface SiteKitProxyConfig {
   redirects?: boolean | RedirectConfig               // Sonor-managed redirects (default: true)
   securityHeaders?: boolean | SecurityHeadersConfig  // Security headers (default: true)
-  llmsDiscovery?: LlmsDiscoveryConfig | false        // AI crawler discovery header
+  llmsDiscovery?: LlmsDiscoveryConfig | false        // Deprecated; use layout HTML discovery
   identity?: boolean | IdentityConfig                // Opt-in edge identity pass
 
   before?: (req: NextRequest) => NextResponse | undefined | Promise<NextResponse | undefined>

package/src/sync/README.md

@@ -112,6 +112,14 @@ Each booking gives the guest one calendar invitation, and `invitation` says who
 
 APIs older than the field don't send it; treat a missing `invitation` like `'sonor'`. `calendarLinks` is still sent for every booking so older widgets keep working. If you build your own success screen with `createBooking`, check `invitation` before you render `calendarLinks`.
 
+`createBooking` attaches the browser's existing analytics `visitorId` and
+`analyticsSessionId` automatically, including for custom booking screens. Sonor
+links that journey to the contact resolved from the accepted booking. These IDs
+are separate from `sessionId`, which owns a slot hold; don't replace a hold's
+session with the analytics session. With analytics disabled, no tracking IDs or
+visits are invented. Custom callers can pass their existing analytics IDs
+explicitly. The contact identity is resolved by Sonor, never supplied by the browser.
+
 ## Features
 
 - Automatic timezone detection

package/dist/{chunk-ZKADJNR2.js → chunk-IPQKQEWI.js}

@@ -1,6 +1,6 @@
 'use client';
-import { VISITOR_ID_KEY, memoryIdentity, SESSION_ID_KEY, SESSION_TIME_KEY } from './chunk-5TM3WPCI.js';
 import { uuid } from './chunk-GJWI74ZZ.js';
+import { VISITOR_ID_KEY, memoryIdentity, SESSION_ID_KEY, SESSION_TIME_KEY } from './chunk-5TM3WPCI.js';
 import { useState } from 'react';
 
 function getOrCreateVisitorId() {