@sonordev/site-kit 8.8.1 → 8.10.0

package/dist/{chunk-NFGAXWCN.js → chunk-J4R7MHV2.js}

@@ -1,13 +1,16 @@
 'use client';
+import { setFirstPartyIdentityScope } from './chunk-KQKUXIUD.js';
 import { SITE_EDIT_PARAM } from './chunk-6G43IRWR.js';
-import { publishSiteCredential } from './chunk-OPUY4RS6.js';
-import { FleetHeartbeat } from './chunk-HN7GVGWC.js';
+import { publishSiteCredential } from './chunk-2LBKIE2K.js';
+import { ResonanceRuntime } from './chunk-3RBOES2C.js';
+import { FleetHeartbeat } from './chunk-Q2OE32TH.js';
 import { useDeferredActivation } from './chunk-YC7ELZS3.js';
 import { resolveSiteHost } from './chunk-FESKKJAS.js';
-import { getOrCreateVisitorId, getOrCreateSessionId } from './chunk-IPQKQEWI.js';
-import { announceFrameReady, isPrivatePreview, isCrossOriginFrame } from './chunk-ZQSCMYZO.js';
-import { SignalBridge } from './chunk-SHAUX2MQ.js';
-import React, { useState, useRef, useCallback, useEffect, Suspense } from 'react';
+import { getOrCreateVisitorId, getOrCreateSessionId } from './chunk-JT7GHHMV.js';
+import { resolveAnalyticsTarget, announceFrameReady, isPrivatePreview, isCrossOriginFrame } from './chunk-7643MCD2.js';
+import { SignalBridge } from './chunk-533ZSRJF.js';
+import { primeMeasurementPolicy, subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot, analyticsPurposePermitted } from './chunk-FRY6PBT6.js';
+import React, { useSyncExternalStore, useState, useEffect, useRef, useCallback, Suspense } from 'react';
 import dynamic from 'next/dynamic';
 import { jsx, Fragment, jsxs } from 'react/jsx-runtime';
 
@@ -33,23 +36,23 @@ function startEditBridge() {
   };
 }
 var LazyAnalyticsProvider = dynamic(
-  () => import('./AnalyticsProvider-7SBJ27SI.js').then((m) => ({ default: m.AnalyticsProvider })),
+  () => import('./AnalyticsProvider-JWS7BLFY.js').then((m) => ({ default: m.AnalyticsProvider })),
   { ssr: false }
 );
 var LazySiteChat = dynamic(
-  () => import('./SiteChat-XMKHBSEK.js').then((m) => ({ default: m.SiteChat })),
+  () => import('./SiteChat-3FQYMHCP.js').then((m) => ({ default: m.SiteChat })),
   { ssr: false }
 );
 var LazySitePopups = dynamic(
-  () => import('./SitePopups-VU2C3Z6B.js').then((m) => ({ default: m.SitePopups })),
+  () => import('./SitePopups-V7MCNSGE.js').then((m) => ({ default: m.SitePopups })),
   { ssr: false }
 );
 var LazySiteDesignReporter = dynamic(
-  () => import('./SiteDesignReporter-BRH7ORQS.js').then((m) => ({ default: m.SiteDesignReporter })),
+  () => import('./SiteDesignReporter-HGTX4FX2.js').then((m) => ({ default: m.SiteDesignReporter })),
   { ssr: false }
 );
 var LazySitemapSync = dynamic(
-  () => import('./SitemapSync-C4H3HF3L.js').then((m) => ({ default: m.SitemapSync })),
+  () => import('./SitemapSync-OAJ7SIET.js').then((m) => ({ default: m.SitemapSync })),
   { ssr: false }
 );
 function SiteKitClientProviders({
@@ -68,14 +71,28 @@ function SiteKitClientProviders({
   defer = true,
   debug = false
 }) {
+  primeMeasurementPolicy();
   const modulesReady = useDeferredActivation(defer);
   const analyticsConfig = typeof analytics === "object" ? analytics : {};
   const site = resolveSiteHost(analyticsConfig.site);
   publishSiteCredential({ apiKey, apiUrl, site, debug });
   const designConfig = design === false ? false : typeof design === "object" ? design : {};
   if (typeof window !== "undefined") window.__SITE_KIT_DESIGN__ = designConfig;
-  const [visitorId] = useState(() => getOrCreateVisitorId());
-  const [sessionId] = useState(() => getOrCreateSessionId());
+  const policy = useSyncExternalStore(subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot);
+  const [visitorId, setVisitorId] = useState("");
+  const [sessionId, setSessionId] = useState("");
+  useEffect(() => {
+    setFirstPartyIdentityScope(projectId, site);
+  }, [projectId, site]);
+  useEffect(() => {
+    if (!(modulesReady || signal) || !analyticsPurposePermitted() || !resolveAnalyticsTarget({ apiKey, apiUrl, allowInFrame: analyticsConfig.allowInFrame, allowLocalhost: analyticsConfig.allowLocalhost })) {
+      setVisitorId("");
+      setSessionId("");
+      return;
+    }
+    setVisitorId(getOrCreateVisitorId());
+    setSessionId(getOrCreateSessionId());
+  }, [modulesReady, signal, apiKey, apiUrl, policy.collectionEpoch, analyticsConfig.allowInFrame, analyticsConfig.allowLocalhost]);
   const pageMetadataRef = useRef(null);
   const onPageMetadata = useCallback((metadata) => {
     pageMetadataRef.current = metadata;
@@ -84,6 +101,7 @@ function SiteKitClientProviders({
   useEffect(() => startEditBridge(), []);
   const siblings = [];
   if (isPrivatePreview()) return /* @__PURE__ */ jsx(Fragment, { children });
+  siblings.push(/* @__PURE__ */ jsx(Suspense, { fallback: null, children: /* @__PURE__ */ jsx(ResonanceRuntime, { site, apiUrl, apiKey }) }, "sk-resonance"));
   if (signal) {
     const signalConfig = typeof signal === "object" ? signal : {};
     siblings.push(

package/dist/chunk-JT7GHHMV.js

@@ -0,0 +1,56 @@
+'use client';
+import { uuid } from './chunk-GJWI74ZZ.js';
+import { identityStorageKeys, memoryIdentity } from './chunk-5IVD6G77.js';
+import { analyticsPurposePermitted, subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot } from './chunk-FRY6PBT6.js';
+import { useSyncExternalStore, useState, useEffect } from 'react';
+
+function getOrCreateVisitorId() {
+  var _a;
+  if (typeof window === "undefined" || !analyticsPurposePermitted()) return "";
+  const keys = identityStorageKeys();
+  let stored = null;
+  try {
+    stored = window.localStorage.getItem(keys.visitor);
+    const visitorId = stored || uuid();
+    window.localStorage.setItem(keys.visitor, visitorId);
+    return visitorId;
+  } catch {
+    return (_a = memoryIdentity).visitorId || (_a.visitorId = stored || uuid());
+  }
+}
+function getOrCreateSessionId(timeoutMinutes = 30) {
+  var _a;
+  if (typeof window === "undefined" || !analyticsPurposePermitted()) return "";
+  const keys = identityStorageKeys();
+  const now = Date.now();
+  const timeoutMs = timeoutMinutes * 60 * 1e3;
+  let existingSession = null;
+  try {
+    existingSession = window.sessionStorage.getItem(keys.session);
+    const lastActivity = window.sessionStorage.getItem(keys.time);
+    if (existingSession && lastActivity) {
+      const elapsed = now - parseInt(lastActivity, 10);
+      if (elapsed < timeoutMs) {
+        window.sessionStorage.setItem(keys.time, now.toString());
+        window.sessionStorage.setItem(keys.session, existingSession);
+        return existingSession;
+      }
+    }
+    const newSession = uuid();
+    window.sessionStorage.setItem(keys.session, newSession);
+    window.sessionStorage.setItem(keys.time, now.toString());
+    return newSession;
+  } catch {
+    return (_a = memoryIdentity).sessionId || (_a.sessionId = existingSession || uuid());
+  }
+}
+function useSiteKitIdentity() {
+  const policy = useSyncExternalStore(subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot);
+  const [identity, setIdentity] = useState({ visitorId: "", sessionId: "" });
+  useEffect(() => {
+    setIdentity({ visitorId: getOrCreateVisitorId(), sessionId: getOrCreateSessionId() });
+  }, [policy.collectionEpoch]);
+  return analyticsPurposePermitted() ? identity : { visitorId: "", sessionId: "" };
+}
+
+export { getOrCreateSessionId, getOrCreateVisitorId, useSiteKitIdentity };

package/dist/chunk-KMNHNCVG.js

@@ -0,0 +1,20 @@
+import { measurementStore } from './chunk-FRY6PBT6.js';
+
+// src/shared/measurement-proof.ts
+function currentSubjectProof(now = Date.now()) {
+  const { proof, config, cmpValid } = measurementStore.current;
+  if (!proof || !config || !config.enabled || !cmpValid || Date.parse(config.expiresAt) <= now || Date.parse(proof.expiresAt) <= now) return null;
+  const first = proof.receipts[0];
+  return first.projectId === config.projectId && first.site === config.site && first.configRevision === config.configRevision && first.policyRevision === config.policyRevision ? proof : null;
+}
+function advertisingPurposesPermitted(now = Date.now()) {
+  const proof = currentSubjectProof(now);
+  if (!proof || !measurementStore.current.config) return false;
+  const needed = /* @__PURE__ */ new Set(["ad_storage", "ad_user_data", "ad_personalization", ...measurementStore.current.config.consentPolicy.requiredPurposes]);
+  return [...needed].every((p) => measurementStore.current.choices[p] === "granted" && proof.receipts.some((r) => r.purpose === p && r.state === "granted" && r.consentRevision === proof.currentConsentRevision));
+}
+function experimentMeasurementPermitted(now = Date.now()) {
+  return !!currentSubjectProof(now) && measurementStore.current.choices.analytics_storage === "granted";
+}
+
+export { advertisingPurposesPermitted, currentSubjectProof, experimentMeasurementPermitted };

package/dist/chunk-KQKUXIUD.js

@@ -0,0 +1,25 @@
+import { measurementStore, analyticsPurposePermitted } from './chunk-FRY6PBT6.js';
+
+// src/shared/measurement-writer.ts
+var listeners = measurementStore.listeners;
+function updateMeasurementPolicy(patch) {
+  const before = analyticsPurposePermitted(), oldScope = measurementStore.current.identityScope;
+  measurementStore.current = { ...measurementStore.current, ...patch, version: measurementStore.current.version + 1 };
+  if (patch.choices && patch.cmpValid !== false && patch.choices.analytics_storage !== measurementStore.lastObservedAnalyticsChoice) {
+    measurementStore.lastObservedAnalyticsChoice = patch.choices.analytics_storage;
+    measurementStore.current = { ...measurementStore.current, analyticsChoiceEpoch: measurementStore.current.analyticsChoiceEpoch + 1 };
+  }
+  if (before !== analyticsPurposePermitted() || oldScope !== measurementStore.current.identityScope) measurementStore.current = { ...measurementStore.current, collectionEpoch: measurementStore.current.collectionEpoch + 1 };
+  for (const listener of listeners) {
+    try {
+      listener();
+    } catch {
+    }
+  }
+}
+function setFirstPartyIdentityScope(projectId, site) {
+  const next = measurementStore.current.config ? `${measurementStore.current.config.projectId}:${measurementStore.current.config.site}:${measurementStore.current.config.configRevision}` : projectId && site ? `${projectId}:${site}:legacy` : null;
+  if (next !== measurementStore.current.identityScope) updateMeasurementPolicy({ identityScope: next });
+}
+
+export { setFirstPartyIdentityScope, updateMeasurementPolicy };

package/dist/chunk-MDBXGN6W.js

@@ -0,0 +1,13 @@
+import { currentSubjectProof, advertisingPurposesPermitted, experimentMeasurementPermitted } from './chunk-KMNHNCVG.js';
+import { resonanceControllerState } from './chunk-MOACHHOJ.js';
+import { measurementPolicySnapshot } from './chunk-FRY6PBT6.js';
+
+// src/resonance/form-context.ts
+function currentResonanceFormContext(projectId, site) {
+  const config = measurementPolicySnapshot().config;
+  const proof = currentSubjectProof();
+  if (!config || config.projectId !== projectId || config.site !== site || !proof || !advertisingPurposesPermitted() && !experimentMeasurementPermitted()) return null;
+  return { subjectProof: proof.subjectProof, exposureId: resonanceControllerState.controller?.formExposureId() ?? null };
+}
+
+export { currentResonanceFormContext };

package/dist/{chunk-IWNJCRXW.js → chunk-MIKVCYGX.js}

@@ -1,14 +1,20 @@
 'use client';
 import { readAgentSubmit, formToolAttributes } from './chunk-Q6E4OPGG.js';
-import { readAnalyticsIdentity } from './chunk-5ROTTMBL.js';
+import { currentResonanceFormContext } from './chunk-MDBXGN6W.js';
+import { readAnalyticsIdentity } from './chunk-PVY7X5UR.js';
 import { isFieldVisible, validateField, isFieldComplete, unseenControlValues } from './chunk-C2FZBUSS.js';
 import { normalizeFormConfig, DEFAULT_FORM_SUCCESS_MESSAGE } from './chunk-TYSIAWC3.js';
 import { DEFAULT_HONEYPOT_FIELD } from './chunk-NJCTQH2P.js';
 import { onPageLeave } from './chunk-L2V5PUFN.js';
+import { resolveAnalyticsTarget, analyticsSend, analyticsBeacon } from './chunk-ACZ5JNSL.js';
+import { RESONANCE_SUBJECT_HEADER } from './chunk-NHDRA4Y5.js';
 import { uuid } from './chunk-GJWI74ZZ.js';
-import { sonorFetch, sonorBeacon } from './chunk-FLOJUMFR.js';
-import { readPublishedApiConfig, getClientApiConfig } from './chunk-W7OPEMGJ.js';
-import { useRef, useCallback, useEffect, useState, useMemo } from 'react';
+import { sameSite } from './chunk-NZOJHERI.js';
+import { sonorFetch } from './chunk-Z4XJOVQX.js';
+import { readPublishedApiConfig, getClientApiConfig, readPublishedSite } from './chunk-W7OPEMGJ.js';
+import { normalizeSiteHost } from './chunk-A4CC4ZG3.js';
+import { subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot, analyticsPurposePermitted } from './chunk-FRY6PBT6.js';
+import { useSyncExternalStore, useCallback, useRef, useEffect, useState, useMemo } from 'react';
 
 // src/forms/field-interactions.ts
 var MAX_TRACKED_FIELDS = 100;
@@ -171,6 +177,9 @@ function useFormTracking({
   debug = false,
   isFieldComplete: isFieldComplete2
 }) {
+  const policy = useSyncExternalStore(subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot);
+  const epoch = policy.collectionEpoch;
+  const permitted = useCallback(() => measurementPolicySnapshot().collectionEpoch === epoch && !!resolveAnalyticsTarget(), [epoch]);
   const sessionRef = useRef(null);
   const sessionIdRef = useRef("");
   const startTimeRef = useRef(0);
@@ -186,11 +195,17 @@ function useFormTracking({
     return session.fields.snapshot((slug) => check ? check(slug) : false, now);
   }, []);
   useEffect(() => {
-    if (!enabled) return;
+    if (!enabled || !permitted()) return;
     if (!formId) {
       if (debug) console.warn("[Forms] Tracking skipped: formId is empty");
       return;
     }
+    const registryKey = `${formId}:${measurementPolicySnapshot().identityScope ?? "legacy"}:${policy.analyticsChoiceEpoch}`;
+    analyticsIdRef.current = null;
+    sessionIdRef.current = "";
+    stepTimesRef.current = {};
+    currentStepRef.current = 1;
+    maxStepRef.current = 1;
     const startTracking = async (sessionId) => {
       const { apiUrl, apiKey } = readPublishedApiConfig();
       if (!apiUrl || !apiKey) {
@@ -198,19 +213,12 @@ function useFormTracking({
         return null;
       }
       try {
-        const response = await sonorFetch(
-          `${apiUrl}/api/public/forms/analytics/start`,
-          {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({
-              formId,
-              sessionId,
-              deviceType: getDeviceType()
-            })
-          },
-          { apiKey, retries: 0 }
-        );
+        const response = await analyticsSend("/api/public/forms/analytics/start", {
+          formId,
+          sessionId,
+          deviceType: getDeviceType()
+        }, { apiUrl, apiKey, measurementEpoch: epoch });
+        if (!response || !permitted()) return null;
         if (!response.ok) {
           throw new Error(`HTTP ${response.status}: ${response.statusText}`);
         }
@@ -222,24 +230,24 @@ function useFormTracking({
         return null;
       }
     };
-    const session = acquireTrackingSession(formId, startTracking);
+    const session = acquireTrackingSession(registryKey, startTracking);
     sessionRef.current = session;
     sessionIdRef.current = session.sessionId;
     startTimeRef.current = session.startedAt;
     stepStartTimeRef.current = Date.now();
     let joined = true;
     void session.analyticsId.then((id) => {
-      if (joined) analyticsIdRef.current = id;
+      if (joined && permitted()) analyticsIdRef.current = id;
     });
     const reportAbandon = (analyticsId) => {
-      if (!analyticsId) return;
+      if (!analyticsId || !permitted()) return;
       const { apiUrl, apiKey } = readPublishedApiConfig();
       if (!apiUrl || !apiKey) return;
       if (!claimAbandon(session)) return;
       const now = Date.now();
       stepTimesRef.current[currentStepRef.current] = Math.floor((now - stepStartTimeRef.current) / 1e3);
-      sonorBeacon(
-        `${apiUrl}/api/public/forms/analytics/abandon`,
+      analyticsBeacon(
+        "/api/public/forms/analytics/abandon",
         {
           analyticsId,
           step: currentStepRef.current,
@@ -249,7 +257,7 @@ function useFormTracking({
           fieldInteractions: fieldReport(session, now),
           abandonmentField: session.fields.lastField
         },
-        apiKey
+        { apiUrl, apiKey, measurementEpoch: epoch }
       );
       if (debug) console.log("[Forms] Abandonment tracked:", session.fields.lastField);
     };
@@ -260,33 +268,37 @@ function useFormTracking({
     return () => {
       joined = false;
       stopLeaveListener();
-      releaseTrackingSession(formId, session);
+      releaseTrackingSession(registryKey, session);
+      analyticsIdRef.current = null;
+      sessionIdRef.current = "";
       sessionRef.current = null;
     };
-  }, [formId, enabled, debug, fieldReport]);
+  }, [formId, enabled, debug, fieldReport, permitted, epoch]);
   const resolveAnalyticsId = useCallback(async () => {
+    if (!permitted()) return null;
     if (analyticsIdRef.current) return analyticsIdRef.current;
     const session = sessionRef.current;
     if (!session) return null;
     const id = await session.analyticsId;
+    if (!permitted()) return null;
     if (id) analyticsIdRef.current = id;
     return id;
-  }, []);
+  }, [permitted]);
   const trackFieldFocus = useCallback((slug) => {
     const session = sessionRef.current;
-    if (!session || session.completed) return;
+    if (!permitted() || !session || session.completed) return;
     if (session.fields.focus(slug)) noteActivity(session);
-  }, []);
+  }, [permitted]);
   const trackFieldBlur = useCallback((slug) => {
-    sessionRef.current?.fields.blur(slug);
-  }, []);
+    if (permitted()) sessionRef.current?.fields.blur(slug);
+  }, [permitted]);
   const trackFieldChange = useCallback((slug) => {
     const session = sessionRef.current;
-    if (!session || session.completed) return;
+    if (!permitted() || !session || session.completed) return;
     if (session.fields.change(slug)) noteActivity(session);
-  }, []);
+  }, [permitted]);
   const trackStepChange = useCallback(async (step) => {
-    if (!enabled) return;
+    if (!enabled || !permitted()) return;
     const { apiUrl, apiKey } = readPublishedApiConfig();
     if (!apiUrl || !apiKey) {
       if (debug) console.error("[Forms] Missing API URL or API key");
@@ -301,23 +313,16 @@ function useFormTracking({
     const session = sessionRef.current;
     if (session) noteActivity(session);
     const analyticsId = await resolveAnalyticsId();
-    if (!analyticsId) return;
+    if (!analyticsId || !permitted()) return;
     try {
-      const response = await sonorFetch(
-        `${apiUrl}/api/public/forms/analytics/step`,
-        {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({
-            analyticsId,
-            step,
-            maxStep: maxStepRef.current,
-            stepTimes: stepTimesRef.current,
-            ...session ? { fieldInteractions: fieldReport(session, Date.now()) } : {}
-          })
-        },
-        { apiKey, retries: 0 }
-      );
+      const response = await analyticsSend("/api/public/forms/analytics/step", {
+        analyticsId,
+        step,
+        maxStep: maxStepRef.current,
+        stepTimes: stepTimesRef.current,
+        ...session ? { fieldInteractions: fieldReport(session, Date.now()) } : {}
+      }, { apiUrl, apiKey, measurementEpoch: epoch });
+      if (!response || !permitted()) return;
       if (!response.ok) {
         throw new Error(`HTTP ${response.status}: ${response.statusText}`);
       }
@@ -325,9 +330,9 @@ function useFormTracking({
     } catch (error) {
       if (debug) console.error("[Forms] Error updating step:", error);
     }
-  }, [enabled, debug, resolveAnalyticsId, fieldReport]);
+  }, [enabled, debug, resolveAnalyticsId, fieldReport, permitted, epoch]);
   const trackComplete = useCallback(async () => {
-    if (!enabled) return;
+    if (!enabled || !permitted()) return;
     const session = sessionRef.current;
     if (session) markCompleted(session);
     const { apiUrl, apiKey } = readPublishedApiConfig();
@@ -340,28 +345,16 @@ function useFormTracking({
     stepTimesRef.current[currentStepRef.current] = finalStepTime;
     const fieldInteractions = session ? fieldReport(session, now) : void 0;
     const analyticsId = await resolveAnalyticsId();
-    if (!analyticsId) return;
+    if (!analyticsId || !permitted()) return;
     try {
-      const response = await sonorFetch(
-        `${apiUrl}/api/public/forms/analytics/complete`,
-        {
-          method: "POST",
-          // A form with a redirect_url navigates away right after submit, which
-          // cancels an ordinary in-flight fetch. And since completion now
-          // suppresses the abandon beacon, losing this would leave the row
-          // neither completed nor abandoned.
-          keepalive: true,
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({
-            analyticsId,
-            totalSteps,
-            stepTimes: stepTimesRef.current,
-            totalTimeSeconds: Math.floor((now - startTimeRef.current) / 1e3),
-            ...fieldInteractions ? { fieldInteractions } : {}
-          })
-        },
-        { apiKey, retries: 0 }
-      );
+      const response = await analyticsSend("/api/public/forms/analytics/complete", {
+        analyticsId,
+        totalSteps,
+        stepTimes: stepTimesRef.current,
+        totalTimeSeconds: Math.floor((now - startTimeRef.current) / 1e3),
+        ...fieldInteractions ? { fieldInteractions } : {}
+      }, { apiUrl, apiKey, measurementEpoch: epoch, keepalive: true });
+      if (!response || !permitted()) return;
       if (!response.ok) {
         throw new Error(`HTTP ${response.status}: ${response.statusText}`);
       }
@@ -369,14 +362,14 @@ function useFormTracking({
     } catch (error) {
       if (debug) console.error("[Forms] Error completing tracking:", error);
     }
-  }, [enabled, totalSteps, debug, resolveAnalyticsId, fieldReport]);
+  }, [enabled, totalSteps, debug, resolveAnalyticsId, fieldReport, permitted, epoch]);
   return {
     trackStepChange,
     trackComplete,
     trackFieldFocus,
     trackFieldBlur,
     trackFieldChange,
-    sessionId: sessionIdRef.current
+    sessionId: permitted() ? sessionIdRef.current : ""
   };
 }
 function getDeviceType() {
@@ -576,51 +569,65 @@ async function submitForm({
     throw new Error("Verification could not be completed. Please try again.");
   }
   const honeypotFieldName = config.honeypot_field || DEFAULT_HONEYPOT_FIELD;
-  const utm = getUTMParams();
-  const ga4 = readGa4Identity();
-  const identity = readAnalyticsIdentity();
-  const payload = {
-    formId: config.id,
-    form_id: config.id,
-    data: {
-      ...values,
-      ...config.honeypot_enabled ? { [honeypotFieldName]: honeypotValue } : {}
-    },
-    metadata: {
-      pageUrl: typeof window !== "undefined" ? window.location.href : null,
-      referrer: typeof document !== "undefined" ? document.referrer || null : null,
-      userAgent: typeof navigator !== "undefined" ? navigator.userAgent : null,
-      sessionId: identity.sessionId,
-      // Anonymous visitor id (_sk_vid) — the same id Analytics/Signal stamp on
-      // page views, so the Sonor side can bind this lead to its browsing session
-      // (page -> lead attribution). Sent on every submission; null pre-hydration.
-      visitorId: identity.visitorId,
-      recaptchaToken: recaptchaToken || void 0,
-      utmSource: utm.utm_source,
-      utmMedium: utm.utm_medium,
-      utmCampaign: utm.utm_campaign,
-      utmTerm: utm.utm_term,
-      utmContent: utm.utm_content,
-      ...ga4,
-      // Sub-site host — preserved on form_submissions for lead attribution
-      // across multi-site projects. Resolved by SiteKitClientProviders.
-      site: typeof window !== "undefined" ? window.__SITE_KIT_SITE__ || window.location.host : void 0,
-      _formLoadedAt: formLoadedAt,
-      ...agentInvoked ? { agentInvoked: true } : {}
+  const formData = {
+    ...values,
+    ...config.honeypot_enabled ? { [honeypotFieldName]: honeypotValue } : {}
+  };
+  const prepareAttempt = (attempt) => {
+    const policy = measurementPolicySnapshot();
+    const site = readPublishedSite() || (typeof window !== "undefined" ? window.location.hostname : "");
+    const matchingScope = !policy.config || policy.config.projectId === config.project_id && policy.config.site === site;
+    const analytics = analyticsPurposePermitted() && matchingScope;
+    const utm = analytics ? getUTMParams() : {};
+    let ga4 = {};
+    if (analytics) {
+      try {
+        ga4 = readGa4Identity();
+      } catch {
+      }
     }
+    const identity = analytics ? readAnalyticsIdentity() : { visitorId: null, sessionId: null };
+    const sameOrigin = getClientApiConfig().apiUrl === apiUrl;
+    const actualSite = typeof window !== "undefined" && sameSite(normalizeSiteHost(window.location.host), site);
+    const context = sameOrigin && actualSite ? currentResonanceFormContext(config.project_id, site) : null;
+    const headers = new Headers(attempt.headers);
+    headers.delete(RESONANCE_SUBJECT_HEADER);
+    if (context) headers.set(RESONANCE_SUBJECT_HEADER, context.subjectProof);
+    const payload = {
+      formId: config.id,
+      form_id: config.id,
+      data: formData,
+      metadata: {
+        pageUrl: typeof window !== "undefined" ? analytics ? window.location.href : window.location.origin + window.location.pathname : null,
+        referrer: analytics && typeof document !== "undefined" ? document.referrer || null : null,
+        userAgent: typeof navigator !== "undefined" ? navigator.userAgent : null,
+        sessionId: identity.sessionId,
+        visitorId: identity.visitorId,
+        recaptchaToken: recaptchaToken || void 0,
+        utmSource: utm.utm_source ?? null,
+        utmMedium: utm.utm_medium ?? null,
+        utmCampaign: utm.utm_campaign ?? null,
+        utmTerm: utm.utm_term ?? null,
+        utmContent: utm.utm_content ?? null,
+        ...ga4,
+        site: site || void 0,
+        _formLoadedAt: formLoadedAt,
+        ...agentInvoked ? { agentInvoked: true } : {},
+        ...context?.exposureId ? { resonanceExposureId: context.exposureId } : {}
+      }
+    };
+    return { ...attempt, headers, body: JSON.stringify(payload) };
   };
-  const response = await sonorFetch(
-    `${apiUrl}/api/public/forms/submit`,
-    {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${apiKey}`
-      },
-      body: JSON.stringify(payload)
-    },
-    { retries: 2, timeoutMs: 2e4 }
-  );
+  const initialRequest = prepareAttempt({
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` }
+  });
+  const response = await sonorFetch(`${apiUrl}/api/public/forms/submit`, initialRequest, {
+    apiKey,
+    retries: 2,
+    timeoutMs: 2e4,
+    prepareAttempt
+  });
   const data = await response.json().catch(() => null);
   if (!response.ok) {
     const msg = (data?.message ?? data?.error ?? (response.statusText || `HTTP ${response.status}`)).toString().trim();

package/dist/{chunk-GQN4BGK6.js → chunk-MKU5ZORB.js}

@@ -1,38 +1,9 @@
 'use client';
 import { isEmptyValue, isDisplayOnly } from './chunk-C2FZBUSS.js';
-import { useMemo, useState, useEffect } from 'react';
+import { useState, useEffect } from 'react';
 
 var NO_CONTROLS = {};
-function useFieldControls(fields) {
-  const needsDate = useMemo(
-    () => (fields ?? []).some((f) => f.field_type === "date" || f.field_type === "datetime"),
-    [fields]
-  );
-  const needsFile = useMemo(
-    () => (fields ?? []).some((f) => f.field_type === "file"),
-    [fields]
-  );
-  const [controls, setControls] = useState(NO_CONTROLS);
-  useEffect(() => {
-    let cancelled = false;
-    if (needsDate) {
-      import('./DatePicker-JEBV6WYJ.js').then((m) => {
-        if (!cancelled) setControls((prev) => ({ ...prev, Date: m.DatePicker }));
-      }).catch(() => {
-      });
-    }
-    if (needsFile) {
-      import('./FileField-MJ3RCNFJ.js').then((m) => {
-        if (!cancelled) setControls((prev) => ({ ...prev, File: m.FileField }));
-      }).catch(() => {
-      });
-    }
-    return () => {
-      cancelled = true;
-    };
-  }, [needsDate, needsFile]);
-  return controls;
-}
+function useFieldControls(o=[],l){const n=!!l;let t=!1,f=!1;for(const{field_type:e}of o)(e==="date"||e==="datetime")&&(t=!0),e==="file"&&(f=!0);const[s,i]=useState(NO_CONTROLS);return useEffect(()=>{let e=!1;return(t||f||n)&&import("./controls-KLG6VQLO.js").then(({default:r})=>{e||r([t,f,n],(c,u)=>{e||i(a=>({...a,[c]:u}))})}).catch(()=>{}),()=>{e=!0}},[t,f,n]),l?{...s,address:l}:s}
 
 // src/forms/experience-plan.ts
 function stageQuestions(config) {

package/dist/chunk-MOACHHOJ.js

@@ -0,0 +1,20 @@
+// src/resonance/controller-registry.ts
+var makeStore = () => ({ controller: null, blockers: [], registrationConflict: false });
+var resonanceControllerState = typeof window === "undefined" ? makeStore() : window.__SONOR_RESONANCE_RUNTIME_V1__ ?? (window.__SONOR_RESONANCE_RUNTIME_V1__ = makeStore());
+function recordRenderedResonanceExposure(exposure, context) {
+  try {
+    const controller = resonanceControllerState.controller;
+    const pending = context ? controller?.renderedExposure(exposure, context) : controller?.renderedExposure(exposure);
+    if (!pending) return false;
+    void pending.catch(() => {
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function releaseRenderedResonanceExposure(exposure) {
+  resonanceControllerState.controller?.releaseRenderedExposure(exposure);
+}
+
+export { recordRenderedResonanceExposure, releaseRenderedResonanceExposure, resonanceControllerState };

package/dist/{chunk-M5JIHQ42.js → chunk-NBNDH2J6.js}

@@ -1,7 +1,7 @@
 import { trackedFreshFetch } from './chunk-UAYAJPEP.js';
-import { isNextControlFlow } from './chunk-C7TLGL3R.js';
+import { isNextControlFlow } from './chunk-7VMA3KCN.js';
 import { monotonicMs } from './chunk-MH2DSGC6.js';
-import { SITE_KIT_VERSION } from './chunk-F6WLHVMQ.js';
+import { SITE_KIT_VERSION } from './chunk-D4R3FQED.js';
 import 'server-only';
 
 var MINT_PATH = "/api/public/site-token";