@sonordev/site-kit 8.8.0 → 8.9.0

package/dist/shared/measurement-store.d.ts

@@ -0,0 +1,34 @@
+/** Single page-wide consent state, shared by direct readers and the policy facade. No I/O. */
+import type { ResonanceMeasurementConfig, ResonanceConsentResponse } from "../contracts/resonance.js";
+export declare const MEASUREMENT_PURPOSES: readonly ['analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization'];
+export type MeasurementPurpose = typeof MEASUREMENT_PURPOSES[number];
+export type PurposeChoice = 'unknown' | 'granted' | 'denied' | 'withdrawn';
+export type PurposeChoices = Record<MeasurementPurpose, PurposeChoice>;
+export declare const unknownChoices: () => PurposeChoices;
+export interface MeasurementPolicyState {
+    version: number;
+    collectionEpoch: number;
+    analyticsChoiceEpoch: number;
+    policy: 'legacy_unconfigured' | 'resolving' | 'configured';
+    config: ResonanceMeasurementConfig | null;
+    analyticsRequired: boolean;
+    choices: PurposeChoices;
+    cmpValid: boolean;
+    preferencePending: boolean;
+    proof: ResonanceConsentResponse | null;
+    identityScope: string | null;
+}
+export declare const initialMeasurementPolicy: MeasurementPolicyState;
+interface MeasurementStore {
+    current: MeasurementPolicyState;
+    primed: boolean;
+    lastObservedAnalyticsChoice: PurposeChoice;
+    listeners: Set<() => void>;
+}
+export declare const measurementStore: MeasurementStore;
+/** Prime the first browser runtime render before any child identity effects. No I/O or notifications. */
+export declare function primeMeasurementPolicy(): void;
+export declare const measurementPolicySnapshot: () => MeasurementPolicyState;
+export declare const serverMeasurementPolicySnapshot: () => MeasurementPolicyState;
+export declare const subscribeMeasurementPolicy: (listener: () => void) => (() => void);
+export {};

package/dist/shared/measurement-writer.d.ts

@@ -0,0 +1,6 @@
+import type { MeasurementPolicyState } from "./measurement-store.js";
+export declare function updateMeasurementPolicy(patch: Partial<Omit<MeasurementPolicyState, 'version'>>): void;
+/** Used by the server-resolved layout only for first-party identity namespacing, never ad authority. */
+export declare function setFirstPartyIdentityScope(projectId: string | undefined, site: string): void;
+/** A reset never implies a grant; used at scope teardown and in isolated harnesses. */
+export declare function resetMeasurementPolicy(): void;

package/dist/shared/publishCredential.d.ts

@@ -18,7 +18,7 @@
  * Client-safe: no `server-only` guard, SSR-safe (every write is window-gated).
  * The minting half is server-only and lives in `../server/mint-site-token`.
  */
-import { resolveSiteHost } from '../sites/resolve';
+import { resolveSiteHost } from "../sites/resolve.js";
 /**
  * Re-exported so the client-side callers below and every existing importer keep
  * a single name for this. The implementation lives in `../sites/resolve` — the

package/dist/shared/reporting-gate.d.ts

@@ -5,6 +5,8 @@
  */
 /** A server-rendered marker keeps private drafts out of every reporting path. */
 export declare function isPrivatePreview(): boolean;
+/** Single source of truth for "this is a local browser host"; the gate and the Meta loader both ask it. */
+export declare function isLocalHostname(raw: string): boolean;
 /** Resolved destination for an analytics send. */
 export interface AnalyticsTarget {
     apiUrl: string;
@@ -30,7 +32,7 @@ export interface AnalyticsGateOptions {
     /** Emit the one-time diagnostic when a send is suppressed. */
     debug?: boolean;
 }
-export { isCrossOriginFrame, isFramed, isTopFrameSameOrigin } from './frame';
+export { isCrossOriginFrame, isFramed, isTopFrameSameOrigin } from "./frame.js";
 /** Test seam — resets the once-per-document log latch. */
 export declare function __resetSendGate(): void;
 /**

package/dist/shared/site-token-claims.d.ts

@@ -0,0 +1,18 @@
+/** Canonical pure token claim helpers; no state, storage or requests. */
+export declare const SITE_TOKEN_PREFIX = "st1.";
+export declare function isSiteToken(credential?: string | null): boolean;
+interface DecodedClaims {
+    pid?: string;
+    iat?: number;
+    exp?: number;
+}
+/** Decode the (non-secret) token payload. Returns null if not a token / malformed. */
+export declare function decodeSiteTokenClaims(token?: string | null): DecodedClaims | null;
+/**
+ * Stable id for the auth circuit breaker. Tokens rotate, so keying the breaker
+ * by the raw value would reset it every refresh — key by the project id encoded
+ * in the token instead. Raw keys use a safe prefix.
+ */
+export declare function credentialBreakerId(credential?: string | null): string;
+export declare function tokenExp(token: string | null): number;
+export {};

package/dist/shared/site-token-configuration.d.ts

@@ -0,0 +1,9 @@
+export declare function storeToken(token: string): void;
+/**
+ * Configure the manager from the layout-injected values. Adopts a fresher token
+ * from sessionStorage if a prior page in this session already refreshed.
+ */
+export declare function configureSiteCredential(opts: {
+    credential?: string;
+    apiUrl?: string;
+}): void;

package/dist/shared/site-token-refresh.d.ts

@@ -0,0 +1,7 @@
+/** Refresh now (deduped). Returns the new token, or null on failure. */
+export declare function refreshSiteToken(): Promise<string | null>;
+/**
+ * The credential to put on the next request. In token mode, refreshes a stale
+ * seed first. In raw-key mode, returns the seed unchanged (legacy passthrough).
+ */
+export declare function getFreshCredential(seed?: string): Promise<string | undefined>;

package/dist/shared/site-token-state.d.ts

@@ -0,0 +1,23 @@
+/** Existing page-wide token state and synchronous read-only access. */
+interface TokenState {
+    /** The credential injected by the layout (token or raw key). */
+    seed: string | undefined;
+    /** Whether we're in token mode (seed is a token). */
+    isToken: boolean;
+    /** Base API URL for the refresh endpoint. */
+    apiUrl: string;
+    /** The freshest known token (>= seed). Null in raw-key mode. */
+    token: string | null;
+    /** In-flight refresh, deduped. */
+    refreshing: Promise<string | null> | null;
+}
+export declare const siteTokenState: TokenState;
+/** Whether the given credential is being managed as a token. */
+export declare function isTokenMode(): boolean;
+/**
+ * Best-known credential WITHOUT refreshing — for synchronous unload paths
+ * (sonorBeacon) that can't await. In token mode returns the freshest token held;
+ * in raw-key mode returns the seed.
+ */
+export declare function currentCredential(seed?: string): string | undefined;
+export {};

package/dist/shared/siteToken.d.ts

@@ -1,39 +1,5 @@
-export declare const SITE_TOKEN_PREFIX = "st1.";
-export declare function isSiteToken(credential?: string | null): boolean;
-interface DecodedClaims {
-    pid?: string;
-    iat?: number;
-    exp?: number;
-}
-/** Decode the (non-secret) token payload. Returns null if not a token / malformed. */
-export declare function decodeSiteTokenClaims(token?: string | null): DecodedClaims | null;
-/**
- * Stable id for the auth circuit breaker. Tokens rotate, so keying the breaker
- * by the raw value would reset it every refresh — key by the project id encoded
- * in the token instead. Raw keys use a safe prefix.
- */
-export declare function credentialBreakerId(credential?: string | null): string;
-/**
- * Configure the manager from the layout-injected values. Adopts a fresher token
- * from sessionStorage if a prior page in this session already refreshed.
- */
-export declare function configureSiteCredential(opts: {
-    credential?: string;
-    apiUrl?: string;
-}): void;
-/** Refresh now (deduped). Returns the new token, or null on failure. */
-export declare function refreshSiteToken(): Promise<string | null>;
-/**
- * The credential to put on the next request. In token mode, refreshes a stale
- * seed first. In raw-key mode, returns the seed unchanged (legacy passthrough).
- */
-export declare function getFreshCredential(seed?: string): Promise<string | undefined>;
-/** Whether the given credential is being managed as a token. */
-export declare function isTokenMode(): boolean;
-/**
- * Best-known credential WITHOUT refreshing — for synchronous unload paths
- * (sonorBeacon) that can't await. In token mode returns the freshest token held;
- * in raw-key mode returns the seed.
- */
-export declare function currentCredential(seed?: string): string | undefined;
-export {};
+/** Compatibility facade; state, claims, configuration and refresh each retain one owner. */
+export { SITE_TOKEN_PREFIX, isSiteToken, decodeSiteTokenClaims, credentialBreakerId } from "./site-token-claims.js";
+export { configureSiteCredential } from "./site-token-configuration.js";
+export { isTokenMode, currentCredential } from "./site-token-state.js";
+export { refreshSiteToken, getFreshCredential } from "./site-token-refresh.js";

package/dist/shared/sonor-auth-state.d.ts

@@ -0,0 +1,3 @@
+/** True when a previous 401/403 has paused this credential (browser only). */
+export declare function isAuthPaused(credential?: string): boolean;
+export declare function tripBreaker(credential?: string): void;

package/dist/shared/sonor-beacon.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Fire-and-forget telemetry that survives page unload.
+ *
+ * Uses fetch({ keepalive: true }) so auth travels in headers. Falls back to
+ * navigator.sendBeacon (no auth headers possible — the server may reject it,
+ * but we never put the key in the URL) only when keepalive fetch is missing.
+ *
+ * Cannot await a refresh at unload time, so it sends the freshest token already
+ * held (currentCredential) rather than the possibly-stale seed the caller passed.
+ */
+export declare function sonorBeacon(url: string, payload: unknown, apiKey?: string): void;
+/** Internal telemetry seam. Public sonorBeacon keeps its existing signature. */
+export declare function sonorBeaconWithContext(url: string, payload: unknown, apiKey: string | undefined, contextHeaders: Record<string, string>): void;

package/dist/shared/sonor-fetch-runtime.d.ts

@@ -0,0 +1,2 @@
+import type { SonorFetchOptions } from "./sonor-fetch.js";
+export declare function executeSonorFetch(url: string, init?: RequestInit, options?: SonorFetchOptions): Promise<Response>;

package/dist/shared/sonor-fetch.d.ts

@@ -0,0 +1,7 @@
+/** Async public dispatch shell; permission is checked on both sides of deferred loading. */
+import type { FetchRetryOptions } from './fetchWithRetry.js';
+export interface SonorFetchOptions extends FetchRetryOptions {
+    /** Project credential, resolved through the existing token owner. */
+    apiKey?: string;
+}
+export declare function sonorFetch(url: string, init?: RequestInit, options?: SonorFetchOptions): Promise<Response>;

package/dist/shared/sonorFetch.d.ts

@@ -1,49 +1,4 @@
-/**
- * @sonordev/site-kit shared - Canonical client transport
- *
- * Single source of truth for how site-kit talks to Sonor from the browser.
- * Every client-side module (analytics, forms, engage, maps, images,
- * SitemapSync) routes through here instead of bare fetch(), and so do the kits
- * that build on site-kit (commerce-kit), through `@sonordev/site-kit/runtime`.
- * That gives the whole kit family, in one place:
- *
- *  - per-attempt timeout + retry with backoff (via fetchWithRetry) — a hung
- *    request left to the browser's own network timeout logs a console error
- *    (net::ERR_TIMED_OUT) that fails Lighthouse best-practices
- *  - the x-sitekit-version header on every request, so the platform can see
- *    which kit version each site actually runs from live traffic
- *  - CREDENTIAL LIFECYCLE: sites on 3.2+ ship a short-lived minted token instead
- *    of the raw key. This transport resolves the freshest token (refreshing a
- *    stale seed transparently), and on a 401/403 for a token it refreshes once
- *    and retries before giving up. A raw key (2.x kit, or the mint-failed
- *    fallback) is a pure passthrough — legacy behavior is unchanged.
- *  - an auth circuit breaker: after a 401/403 the credential is paused for a few
- *    minutes and ONE friendly console.info is emitted — a site on a stale or
- *    canceled key must not spam the API or the visitor's console. Keyed by the
- *    project (from the token) so it survives token rotation.
- *  - sonorBeacon for unload-time telemetry that keeps the credential in headers;
- *    navigator.sendBeacon can't set headers and forced the key into the URL,
- *    where server and CDN access logs capture it
- *
- * Non-idempotent endpoints (checkout, payment intents, uploads) must pass
- * { retries: 0 } — they still get the timeout, but never an automatic retry.
- */
-import { type FetchRetryOptions } from './fetchWithRetry';
-export interface SonorFetchOptions extends FetchRetryOptions {
-    /** Project credential — the minted token (3.2+) or raw key. Sent as x-api-key. */
-    apiKey?: string;
-}
-/** True when a previous 401/403 has paused this credential (browser only). */
-export declare function isAuthPaused(credential?: string): boolean;
-export declare function sonorFetch(url: string, init?: RequestInit, options?: SonorFetchOptions): Promise<Response>;
-/**
- * Fire-and-forget telemetry that survives page unload.
- *
- * Uses fetch({ keepalive: true }) so auth travels in headers. Falls back to
- * navigator.sendBeacon (no auth headers possible — the server may reject it,
- * but we never put the key in the URL) only when keepalive fetch is missing.
- *
- * Cannot await a refresh at unload time, so it sends the freshest token already
- * held (currentCredential) rather than the possibly-stale seed the caller passed.
- */
-export declare function sonorBeacon(url: string, payload: unknown, apiKey?: string): void;
+/** Compatibility facade; fetch execution, synchronous breaker and unload behavior keep their canonical owners. */
+export { sonorFetch, type SonorFetchOptions } from "./sonor-fetch.js";
+export { isAuthPaused } from "./sonor-auth-state.js";
+export { sonorBeacon, sonorBeaconWithContext } from "./sonor-beacon.js";

package/dist/shared/version.d.ts

@@ -7,4 +7,4 @@
  * it matches package.json at publish time, and version.test.ts asserts it in
  * dev, so it can't silently drift.
  */
-export declare const SITE_KIT_VERSION = "8.8.0";
+export declare const SITE_KIT_VERSION = "8.9.0";

package/dist/signal/ReviewedSignalExperiment.d.ts

@@ -0,0 +1,9 @@
+import React from 'react';
+import type { SignalExperimentProps } from "./SignalExperiment.js";
+type ReviewedProps = SignalExperimentProps & {
+    reviewedContext: NonNullable<SignalExperimentProps['reviewedContext']>;
+};
+/** Private reviewed-copy boundary. Existing Signal owns assignment; the existing
+ * controller owns occurrences, retries and accepted form receipt references. */
+export default function ReviewedSignalExperiment({ experimentId, variants, fallback, trackImpression, reviewedContext, children }: ReviewedProps): React.JSX.Element;
+export {};

package/dist/signal/SignalBridge.d.ts

@@ -19,8 +19,8 @@
  * possible, so it starts loading on hydration.
  */
 import React from 'react';
-import type { SignalConfig, SignalBridgeProps, SignalEvent, SignalOutcome, ExperimentAssignment } from './types';
-export { useSignal } from './store';
+import type { SignalConfig, SignalBridgeProps, ExperimentAssignment } from "./types.js";
+export { useSignal } from "./store.js";
 export declare function SignalBridge({ enabled, realtime, experiments, behaviorTracking, visitorId: externalVisitorId, sessionId: externalSessionId, pageMetadataRef, children, }: SignalBridgeProps): React.JSX.Element;
 /**
  * Hook to access Signal config
@@ -29,12 +29,12 @@ export declare function useSignalConfig(): SignalConfig | null;
 /**
  * Hook for tracking events
  */
-export declare function useSignalEvent(): (event: Partial<SignalEvent>) => void;
+export declare function useSignalEvent(): (event: Partial<import("./types.js").SignalEvent>) => void;
 /**
  * Hook for tracking outcomes/conversions
  */
 export declare function useSignalOutcome(): {
-    trackOutcome: (outcome: SignalOutcome) => void;
+    trackOutcome: (outcome: import("./types.js").SignalOutcome) => void;
 };
 /**
  * Hook for experiment assignment

package/dist/signal/SignalCore.d.ts

@@ -8,7 +8,7 @@
  * off the critical hydration chunk. It reports state up to the shell via
  * `onState` and registers its imperative API via `onRegister`.
  */
-import type { SignalConfig, SignalEvent, SignalOutcome, ExperimentAssignment } from './types';
+import type { SignalConfig, SignalEvent, SignalOutcome, ExperimentAssignment } from "./types.js";
 export interface SignalCoreApi {
     trackEvent: (event: Partial<SignalEvent>) => void;
     trackOutcome: (outcome: SignalOutcome) => void;
@@ -16,6 +16,7 @@ export interface SignalCoreApi {
     refreshConfig: () => Promise<void>;
 }
 export interface SignalCoreState {
+    assignmentRevision: number;
     config: SignalConfig | null;
     loading: boolean;
     error: Error | null;

package/dist/signal/SignalExperiment.d.ts

@@ -2,10 +2,10 @@
  * @sonordev/site-kit/signal - SignalExperiment
  *
  * A/B test component that renders different variants based on Signal assignment.
- * Uses Thompson Sampling (Bayesian bandit) for optimization.
+ * Uses the assignment selected by the existing server experiment service.
  */
 import React from 'react';
-interface SignalExperimentProps {
+export interface SignalExperimentProps {
     /** Unique experiment ID */
     experimentId: string;
     /** Variants to test - keys are variant names, values are React nodes */
@@ -14,6 +14,15 @@ interface SignalExperimentProps {
     fallback?: React.ReactNode;
     /** Track impression automatically */
     trackImpression?: boolean;
+    /** Reviewed bounded nodes only; native owners authenticate the content and
+     * original publication. Existing native version identity fences local cleanup. */
+    reviewedContext?: {
+        site: string;
+        pagePath: string;
+        pageVersionId: string;
+        experimentRevision: number;
+        controlVariantKey: string;
+    };
     /** Children function for more control */
     children?: (props: {
         variant: string;
@@ -39,7 +48,7 @@ interface SignalExperimentProps {
  *   )}
  * </SignalExperiment>
  */
-export declare function SignalExperiment({ experimentId, variants, fallback, trackImpression, children, }: SignalExperimentProps): React.JSX.Element;
+export declare function SignalExperiment(props: SignalExperimentProps): React.JSX.Element;
 /**
  * Hook for conditional experiment logic
  *
@@ -51,7 +60,7 @@ export declare function SignalExperiment({ experimentId, variants, fallback, tra
  *   : <NewPricing showAnnual={variant === 'annual_first'} />
  */
 export declare function useExperimentVariant(experimentId: string): {
-    assignment: import("./types").ExperimentAssignment | null;
+    assignment: import("./types.js").ExperimentAssignment | null;
     variant: string | null;
     isControl: boolean;
 };
@@ -83,4 +92,3 @@ export declare function ExperimentConversion({ experimentId, outcomeType, value,
 }): React.ReactElement<{
     onClick?: (e: React.MouseEvent) => void;
 }, string | React.JSXElementConstructor<any>>;
-export {};

package/dist/signal/index.d.ts

@@ -4,6 +4,6 @@
  * Enable autonomous optimization, A/B testing, and real-time configuration
  * updates powered by Signal AI.
  */
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalOutcome, useSignalExperiment, } from './SignalBridge';
-export { SignalExperiment, useExperimentVariant, ExperimentConversion, } from './SignalExperiment';
-export * from './types';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalOutcome, useSignalExperiment, } from "./SignalBridge.js";
+export { SignalExperiment, useExperimentVariant, ExperimentConversion, } from "./SignalExperiment.js";
+export * from "./types.js";

package/dist/signal/index.js

@@ -1,75 +1,6 @@
 'use client';
-import { useSignalExperiment, useSignalEvent } from '../chunk-SHAUX2MQ.js';
-export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-SHAUX2MQ.js';
+export { ExperimentConversion, SignalExperiment, useExperimentVariant } from '../chunk-F3RKFGRW.js';
+export { SignalBridge, useSignal, useSignalConfig, useSignalEvent, useSignalExperiment, useSignalOutcome } from '../chunk-HJD6KXKH.js';
+import '../chunk-MOACHHOJ.js';
+import '../chunk-FRY6PBT6.js';
 import '../chunk-PKBMQBKP.js';
-import React, { useEffect } from 'react';
-import { jsx, Fragment } from 'react/jsx-runtime';
-
-function SignalExperiment({
-  experimentId,
-  variants,
-  fallback,
-  trackImpression = true,
-  children
-}) {
-  const { assignment, variant, isControl } = useSignalExperiment(experimentId);
-  const trackEvent = useSignalEvent();
-  useEffect(() => {
-    if (trackImpression && variant) {
-      trackEvent({
-        event_type: "experiment",
-        event_name: "impression",
-        event_data: {
-          experiment_id: experimentId,
-          variant_key: variant
-        }
-      });
-    }
-  }, [experimentId, variant, trackImpression, trackEvent]);
-  if (children) {
-    return /* @__PURE__ */ jsx(Fragment, { children: children({ variant: variant || "control", isControl }) });
-  }
-  const selectedVariant = variant || "control";
-  const content = variants[selectedVariant];
-  if (content !== void 0) {
-    return /* @__PURE__ */ jsx(Fragment, { children: content });
-  }
-  if (fallback) {
-    return /* @__PURE__ */ jsx(Fragment, { children: fallback });
-  }
-  return /* @__PURE__ */ jsx(Fragment, { children: variants.control || null });
-}
-function useExperimentVariant(experimentId) {
-  return useSignalExperiment(experimentId);
-}
-function ExperimentConversion({
-  experimentId,
-  outcomeType = "click",
-  value,
-  children
-}) {
-  const trackEvent = useSignalEvent();
-  const { variant } = useSignalExperiment(experimentId);
-  const handleInteraction = () => {
-    trackEvent({
-      event_type: "experiment",
-      event_name: "conversion",
-      event_data: {
-        experiment_id: experimentId,
-        variant_key: variant,
-        outcome_type: outcomeType,
-        value
-      }
-    });
-  };
-  return React.cloneElement(children, {
-    onClick: (e) => {
-      handleInteraction();
-      if (children.props.onClick) {
-        children.props.onClick(e);
-      }
-    }
-  });
-}
-
-export { ExperimentConversion, SignalExperiment, useExperimentVariant };

package/dist/signal/store.d.ts

@@ -1,10 +1,13 @@
-import type { SignalContextValue } from './types';
-/** Bridge-side: publish the live API (called whenever its value changes). */
+import type { SignalCoreApi, SignalCoreState } from "./SignalCore.js";
+import type { SignalContextValue } from "./types.js";
+/** Stable methods survive pre-mount, pre-core and state publications without copying a queue. */
+export declare const signalQueueApi: SignalCoreApi;
+/** Core registration drains once, checking current permission/epoch before each queued item. */
+export declare function registerSignalCore(api: SignalCoreApi | null): void;
+/** State publication does not drain a second queue or replay registration. */
 export declare function publishSignal(value: SignalContextValue): void;
-/** Bridge-side: reset on unmount so a remount starts clean (tests, HMR). */
+/** Existing core effect publishes UI state directly; assignment revisions still notify subscribers. */
+export declare function publishSignalCoreState(state: SignalCoreState): void;
 export declare function resetSignal(): void;
-/**
- * Access Signal (experiments, behavioral events) from anywhere in the tree.
- * No provider required — see module docs for pre-mount buffering semantics.
- */
+/** Available before a bridge mounts; content and hooks never wait for the core chunk. */
 export declare function useSignal(): SignalContextValue;

package/dist/signal/types.d.ts

@@ -131,6 +131,10 @@ export interface ExperimentVariant {
     description?: string;
 }
 export interface ExperimentAssignment {
+    /** Server-issued managed witness; absent on legacy assignments. */
+    assignment_id?: string;
+    experiment_revision?: number;
+    site?: string;
     /** Experiment ID */
     experiment_id: string;
     /** Assigned variant key */

package/dist/sitemap/index.d.ts

@@ -20,9 +20,9 @@
  * })
  * ```
  */
-import type { PublicationRoutingOptions } from '../articles/routes';
-import { type PageType } from './shared';
-export type { PageType } from './shared';
+import type { PublicationRoutingOptions } from "../articles/routes.js";
+import { type PageType } from "./shared.js";
+export type { PageType } from "./shared.js";
 export interface SitemapEntry {
     url: string;
     lastModified?: Date | string;
@@ -140,7 +140,7 @@ export interface SitemapConfig {
      */
     llmsAgentAccess?: boolean;
     /** When Sonor returns empty services, use this to supply local site data for llms.txt */
-    getLocalData?: () => Promise<import('../llms/types').LLMsDataResponse | null>;
+    getLocalData?: () => Promise<import("../llms/types.js").LLMsDataResponse | null>;
     /** Pass-through to GET /api/public/llms/txt?publicSummaryOnly=true and local llms fallback */
     llmsPublicSummaryOnly?: boolean;
     /**
@@ -149,7 +149,7 @@ export interface SitemapConfig {
      * to publish the site's verified citation registry as a "Sourced facts"
      * section AI answer engines can quote with attribution.
      */
-    llmsCustomSections?: import('../llms/writeLLMsTxt').WriteLLMsTxtOptions['customSections'];
+    llmsCustomSections?: import("../llms/writeLLMsTxt.js").WriteLLMsTxtOptions['customSections'];
     /** Use Signal AI visibility scores to compute page priority (40% visibility + 30% depth + 30% base) */
     intelligentPriority?: boolean;
     /**

package/dist/sitemap/index.js

@@ -1,5 +1,5 @@
-export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-IDC5CVBR.js';
-import '../chunk-KG5IEV7I.js';
+export { createSitemap, getPortfolioPaths, syncSitemapToPortal } from '../chunk-YVEYO3OD.js';
+import '../chunk-QLJ2SC3T.js';
 import '../chunk-EK7P62DT.js';
 import '../chunk-Z22QVHT4.js';
 import '../chunk-7DYMM6SS.js';
@@ -13,6 +13,6 @@ import '../chunk-ZEGVKVD5.js';
 import '../chunk-YVKRYQRG.js';
 import '../chunk-DIKNRN34.js';
 import '../chunk-FESKKJAS.js';
-import '../chunk-A4CC4ZG3.js';
 import '../chunk-W7OPEMGJ.js';
+import '../chunk-A4CC4ZG3.js';
 import '../chunk-PKBMQBKP.js';

package/dist/sites/contract.d.ts

@@ -1 +1 @@
-export * from '../contracts/sites';
+export * from "../contracts/sites.js";

package/dist/sites/normalize.d.ts

@@ -1 +1 @@
-export * from '../contracts/sites-normalize';
+export * from "../contracts/sites-normalize.js";

package/dist/slots/ManagedLink.d.ts

@@ -1,6 +1,6 @@
 import * as React from 'react';
-import { type SlotLinkValue } from './contract';
-import type { SlotResolveOptions } from './server-api';
+import { type SlotLinkValue } from "./contract.js";
+import type { SlotResolveOptions } from "./server-api.js";
 export interface ManagedLinkProps extends Omit<SlotResolveOptions, 'fallback' | 'type' | 'fallbackValue'> {
     /** Stable slot id, e.g. "home-hero-cta". */
     id: string;

package/dist/slots/ManagedList.d.ts

@@ -1,6 +1,6 @@
 import * as React from 'react';
-import { type SlotListItem } from './contract';
-import type { SlotResolveOptions } from './server-api';
+import { type SlotListItem } from "./contract.js";
+import type { SlotResolveOptions } from "./server-api.js";
 export interface ManagedListProps extends Omit<SlotResolveOptions, 'fallback' | 'type' | 'fallbackValue'> {
     /** Stable slot id, e.g. "home-services" or "gallery". */
     id: string;

package/dist/slots/ManagedRichText.d.ts

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import type { SlotResolveOptions } from './server-api';
+import type { SlotResolveOptions } from "./server-api.js";
 export interface ManagedRichTextProps extends Omit<SlotResolveOptions, 'fallback' | 'type' | 'fallbackValue'> {
     /** Stable slot id, lowercase, page-scoped by convention (e.g. "about-intro"). */
     id: string;

package/dist/slots/ManagedSlot.d.ts

@@ -1,5 +1,5 @@
 import * as React from 'react';
-import type { SlotResolveOptions } from './server-api';
+import type { SlotResolveOptions } from "./server-api.js";
 export interface ManagedSlotProps extends Omit<SlotResolveOptions, 'fallback'> {
     /** Stable slot id, lowercase, page-scoped by convention (e.g. "home-hero-headline"). */
     id: string;

package/dist/slots/contract.d.ts

@@ -1 +1 @@
-export * from '../contracts/slots';
+export * from "../contracts/slots.js";

package/dist/slots/edit/locate.d.ts

@@ -7,7 +7,7 @@
  * to serve one editor). The edit overlay finds each slot the way a person
  * would, by its visible text, using the needles from `slotNeedles`.
  */
-import { type EditableSlot } from '../../contracts/site-edit';
+import { type EditableSlot } from "../../contracts/site-edit.js";
 export interface LocatedSlot {
     key: string;
     /** The element to outline and click. */