@sonordev/site-kit 8.8.1 → 8.9.0

package/dist/{chunk-2WM4TNDF.js → chunk-QXAJPB6O.js}

@@ -1,4 +1,4 @@
-import { generateLLMsTxt, generateLLMsFullTxt, appendAgentAccessSection } from './chunk-KG5IEV7I.js';
+import { generateLLMsTxt, generateLLMsFullTxt, appendAgentAccessSection } from './chunk-QLJ2SC3T.js';
 import { createHash } from 'crypto';
 import { existsSync, readFileSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-2WDWQI7K.js → chunk-RYR6N4X4.js}

@@ -1,7 +1,7 @@
 import { SLOTS_CONTRACT_VERSION, verifySlotContent, canonicalJson } from './chunk-VCJYLYJV.js';
 import { isValidSlotId, SLOT_CONTENT_MAX_LENGTH, parseSlotRichText, normalizeSlotValue } from './chunk-LPH5FANE.js';
 import { SITE_CACHE_TAGS } from './chunk-HY7ZEU2C.js';
-import { resolveServerApiConfig } from './chunk-C7TLGL3R.js';
+import { resolveServerApiConfig } from './chunk-7VMA3KCN.js';
 import 'server-only';
 import * as React from 'react';
 import { cache } from 'react';

package/dist/{chunk-G7BRCSV6.js → chunk-S33CUULL.js}

@@ -1,6 +1,6 @@
 'use client';
-import { countStageViews, countStageQuestions, useFieldControls } from './chunk-GQN4BGK6.js';
-import { useFormLoadedAt, useFormTracking, submitForm, useRecaptchaWarmup, useForm } from './chunk-IWNJCRXW.js';
+import { countStageViews, countStageQuestions, useFieldControls } from './chunk-OUD4RTBD.js';
+import { useFormLoadedAt, useFormTracking, submitForm, useRecaptchaWarmup, useForm } from './chunk-UG53ZW7S.js';
 import { readAgentSubmit, formToolAttributes } from './chunk-Q6E4OPGG.js';
 import { isFieldVisible, validateField, isFieldComplete, isDisplayOnly, unseenControlValues } from './chunk-C2FZBUSS.js';
 import { HoneypotField } from './chunk-DXO6SBMD.js';
@@ -63,7 +63,7 @@ function FormClient({
       return;
     }
     let cancelled = false;
-    const load = resolvedExperience === "stage" ? import('./FormStage-4T5PJR5K.js').then((m) => m.FormStage) : import('./FormSpotlight-NQPQFZS7.js').then((m) => m.FormSpotlight);
+    const load = resolvedExperience === "stage" ? import('./FormStage-VAHRVOIZ.js').then((m) => m.FormStage) : import('./FormSpotlight-MAXDW3TK.js').then((m) => m.FormSpotlight);
     load.then((Component) => {
       if (!cancelled) setExperience(() => Component);
     }).catch((err) => {

package/dist/{chunk-YRQS7VAH.js → chunk-S63QY5XW.js}

@@ -1,6 +1,6 @@
-import { FormEnhancer } from './chunk-SLFYTELD.js';
+import { FormEnhancer } from './chunk-J4LJE4NB.js';
 import { StaticForm } from './chunk-VPZJ7ZTL.js';
-import { serverApiFetch } from './chunk-C7TLGL3R.js';
+import { serverApiFetch } from './chunk-7VMA3KCN.js';
 import { jsx } from 'react/jsx-runtime';
 
 async function ServerForm({

package/dist/{chunk-GXWM5KNS.js → chunk-SO6RSRUP.js}

@@ -1,10 +1,10 @@
 'use client';
-import { registerAnalyticsDispatcher } from './chunk-LCDVPAMR.js';
-import { getOrCreateVisitorId, getOrCreateSessionId } from './chunk-IPQKQEWI.js';
+import { registerAnalyticsDispatcher } from './chunk-AG2RDHYZ.js';
+import { getOrCreateVisitorId, getOrCreateSessionId } from './chunk-JT7GHHMV.js';
 import { onPageLeave } from './chunk-L2V5PUFN.js';
-import { resolveAnalyticsTarget } from './chunk-ZQSCMYZO.js';
-import { sonorFetch, sonorBeacon } from './chunk-FLOJUMFR.js';
-import { createContext, useRef, useEffect, useState, useMemo, useCallback, useContext } from 'react';
+import { resolveAnalyticsTarget, analyticsSend, analyticsBeacon } from './chunk-PMXQPO5Q.js';
+import { subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot } from './chunk-FRY6PBT6.js';
+import { createContext, useRef, useSyncExternalStore, useEffect, useState, useMemo, useCallback, useContext } from 'react';
 import { usePathname } from 'next/navigation';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
@@ -73,33 +73,6 @@ function getMeasurementContext(options = {}) {
     connectionType: connection?.effectiveType || connection?.type || void 0
   };
 }
-
-// src/analytics/send-gate.ts
-async function analyticsSend(path, body, options = {}) {
-  const target = resolveAnalyticsTarget(options);
-  if (!target) return null;
-  try {
-    return await sonorFetch(
-      `${target.apiUrl}${path}`,
-      {
-        method: options.method || "POST",
-        headers: { "Content-Type": "application/json" },
-        ...options.keepalive ? { keepalive: true } : {},
-        ...body === void 0 ? {} : { body: JSON.stringify(body) }
-      },
-      { apiKey: target.apiKey, retries: options.retries ?? 0 }
-    );
-  } catch {
-    return null;
-  }
-}
-function analyticsBeacon(path, body, options = {}) {
-  const target = resolveAnalyticsTarget(options);
-  if (!target) return;
-  sonorBeacon(`${target.apiUrl}${path}`, body, target.apiKey);
-}
-
-// src/analytics/WebVitals.tsx
 function pathForMetric(metric, fallback) {
   const url = metric.navigationURL;
   if (url) {
@@ -165,15 +138,19 @@ function WebVitals({
   const landingPathRef = useRef(pathname || "/");
   const propsRef = useRef({ propApiUrl, propApiKey, propSite, allowInFrame, allowLocalhost, debug, visitorId, sessionId, sessionTimeout });
   propsRef.current = { propApiUrl, propApiKey, propSite, allowInFrame, allowLocalhost, debug, visitorId, sessionId, sessionTimeout };
+  const policy = useSyncExternalStore(subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot);
   useEffect(() => {
+    const epoch = policy.collectionEpoch;
+    const permitted = () => epoch === measurementPolicySnapshot().collectionEpoch && !!resolveAnalyticsTarget({ apiUrl: propApiUrl, apiKey: propApiKey, allowInFrame, allowLocalhost, debug });
+    if (!permitted()) return;
     let cancelled = false;
     let teardown;
     import('./web-vitals.attribution-N2PCCF4Q.js').then(({ onCLS, onLCP, onTTFB, onINP, onFCP }) => {
-      if (cancelled) return;
+      if (cancelled || !permitted()) return;
       const { propApiUrl: propApiUrl2, propApiKey: propApiKey2, propSite: propSite2, allowInFrame: allowInFrame2, allowLocalhost: allowLocalhost2, debug: debug2, visitorId: visitorId2, sessionId: sessionId2, sessionTimeout: sessionTimeout2 } = propsRef.current;
       const sent = /* @__PURE__ */ new Map();
       const report = (metric, viaBeacon = false) => {
-        if (!resolveAnalyticsTarget({ apiUrl: propApiUrl2, apiKey: propApiKey2, allowInFrame: allowInFrame2, allowLocalhost: allowLocalhost2, debug: debug2 })) return;
+        if (cancelled || !permitted()) return;
         if (sent.get(metric.id) === metric.value) return;
         sent.set(metric.id, metric.value);
         const site = propSite2 || (typeof window !== "undefined" ? window.__SITE_KIT_SITE__ || window.location.host : "");
@@ -202,6 +179,7 @@ function WebVitals({
       const opts = { reportSoftNavs: true };
       const pending = [];
       const collect = (metric) => {
+        if (cancelled || !permitted()) return;
         pending.push(metric);
         report(metric);
       };
@@ -225,7 +203,7 @@ function WebVitals({
       cancelled = true;
       teardown?.();
     };
-  }, []);
+  }, [policy.collectionEpoch]);
   return null;
 }
 
@@ -656,21 +634,26 @@ function AnalyticsProvider({
   allowLocalhost = false
 }) {
   const pathname = usePathname();
+  const policy = useSyncExternalStore(subscribeMeasurementPolicy, measurementPolicySnapshot, serverMeasurementPolicySnapshot);
   const [queryString, setQueryString] = useState("");
+  const navigationRef = useRef({ path: pathname, serial: 0 });
+  if (navigationRef.current.path !== pathname) navigationRef.current = { path: pathname, serial: navigationRef.current.serial + 1 };
+  const currentNavigationKey = `${propSite ?? ""}:${policy.identityScope ?? "legacy"}:${navigationRef.current.serial}`;
+  const lastReportedNavigationRef = useRef("");
   const site = propSite || (typeof window !== "undefined" ? window.__SITE_KIT_SITE__ || window.location.host : "");
   const gate = useMemo(
-    () => ({ apiUrl: propApiUrl, apiKey: propApiKey, allowInFrame, allowLocalhost, debug }),
-    [propApiUrl, propApiKey, allowInFrame, allowLocalhost, debug]
+    () => ({ apiUrl: propApiUrl, apiKey: propApiKey, allowInFrame, allowLocalhost, debug, measurementEpoch: policy.collectionEpoch }),
+    [propApiUrl, propApiKey, allowInFrame, allowLocalhost, debug, policy.collectionEpoch]
   );
   useEffect(() => {
-    if (typeof window === "undefined") return;
+    if (typeof window === "undefined" || !resolveAnalyticsTarget(gate)) return;
     setQueryString(window.location.search);
     const handlePopState = () => {
       setQueryString(window.location.search);
     };
     window.addEventListener("popstate", handlePopState);
     return () => window.removeEventListener("popstate", handlePopState);
-  }, [pathname]);
+  }, [pathname, gate]);
   const visitorIdRef = useRef("");
   const sessionIdRef = useRef("");
   const lastPathRef = useRef("");
@@ -680,9 +663,15 @@ function AnalyticsProvider({
   const pageEnterTimeRef = useRef(0);
   const currentScrollDepthRef = useRef(0);
   useEffect(() => {
+    if (!resolveAnalyticsTarget(gate)) {
+      visitorIdRef.current = "";
+      sessionIdRef.current = "";
+      lastPathRef.current = "";
+      return;
+    }
     visitorIdRef.current = externalVisitorId || getOrCreateVisitorId();
     sessionIdRef.current = externalSessionId || getOrCreateSessionId(sessionTimeout);
-  }, [sessionTimeout, externalVisitorId, externalSessionId]);
+  }, [sessionTimeout, externalVisitorId, externalSessionId, gate]);
   useEffect(() => {
     if (!validateAgainstSitemap) {
       if (debug) console.log("[Analytics] Page validation disabled");
@@ -724,11 +713,12 @@ function AnalyticsProvider({
     fetchValidPages();
   }, [gate, validateAgainstSitemap, debug]);
   useEffect(() => {
-    if (!trackPageViews) return;
+    if (!trackPageViews || !resolveAnalyticsTarget(gate)) return;
     if (!pathname) return;
     const normalizedPath = pathname === "/" ? "/" : pathname.replace(/\/+$/, "");
     if (excludePaths.some((p) => normalizedPath.startsWith(p))) return;
-    if (normalizedPath === lastPathRef.current) return;
+    if (currentNavigationKey === lastReportedNavigationRef.current) return;
+    lastReportedNavigationRef.current = currentNavigationKey;
     lastPathRef.current = normalizedPath;
     const trackPageView = async () => {
       if (!resolveAnalyticsTarget(gate)) {
@@ -738,8 +728,9 @@ function AnalyticsProvider({
       const utmParams = getUTMParams();
       const pageTitle = document.title;
       const pageMetadata = await collectPageMetadata(
-        () => lastPathRef.current !== normalizedPath
+        () => lastPathRef.current !== normalizedPath || !resolveAnalyticsTarget(gate)
       );
+      if (!resolveAnalyticsTarget(gate)) return;
       if (onPageMetadata) {
         onPageMetadata(pageMetadata);
       }
@@ -794,7 +785,7 @@ function AnalyticsProvider({
       }
     };
     scheduleIdleTask(() => trackPageView());
-  }, [pathname, queryString, gate, trackPageViews, excludePaths, debug, validateAgainstSitemap]);
+  }, [pathname, queryString, gate, trackPageViews, excludePaths, debug, validateAgainstSitemap, currentNavigationKey]);
   useEffect(() => {
     if (!trackJourneys) return;
     if (!pathname) return;
@@ -959,6 +950,7 @@ function AnalyticsProvider({
     if (typeof window === "undefined") return;
     if (!resolveAnalyticsTarget(gate)) return;
     const handleClick = async (e) => {
+      if (!resolveAnalyticsTarget(gate)) return;
       const target = e.target;
       if (!target) return;
       const docHeight = document.documentElement.scrollHeight;
@@ -1016,7 +1008,9 @@ function AnalyticsProvider({
     return () => document.removeEventListener("click", click);
   }, [gate, site, pathname]);
   const trackEvent = useCallback((options) => {
+    if (!resolveAnalyticsTarget(gate)) return;
     const doTrack = async () => {
+      if (!resolveAnalyticsTarget(gate)) return;
       const event = {
         sessionId: sessionIdRef.current,
         visitorId: visitorIdRef.current,
@@ -1040,6 +1034,7 @@ function AnalyticsProvider({
   }, [gate, site, pathname, debug]);
   const trackConversion = useCallback((options) => {
     const doTrack = async () => {
+      if (!resolveAnalyticsTarget(gate)) return;
       const conversion = {
         sessionId: sessionIdRef.current,
         visitorId: visitorIdRef.current,
@@ -1073,7 +1068,7 @@ function AnalyticsProvider({
     visitorId: visitorIdRef.current
   }), [trackEvent, trackConversion]);
   return /* @__PURE__ */ jsxs(AnalyticsContext.Provider, { value: contextValue, children: [
-    trackWebVitals && /* @__PURE__ */ jsx(
+    trackWebVitals && !!resolveAnalyticsTarget(gate) && /* @__PURE__ */ jsx(
       WebVitals,
       {
         apiUrl: propApiUrl,

package/dist/{chunk-ODOV76VW.js → chunk-STIVFCWM.js}

@@ -1,6 +1,6 @@
 import { withSiteBody } from './chunk-MJP63SSS.js';
 import { SITE_CACHE_TAGS } from './chunk-HY7ZEU2C.js';
-import { serverApiFetch, requireServerApiConfig } from './chunk-C7TLGL3R.js';
+import { serverApiFetch, requireServerApiConfig } from './chunk-7VMA3KCN.js';
 import { postRegisterSitemap, resolveSyncSite } from './chunk-DIKNRN34.js';
 import { cache } from 'react';
 import 'server-only';

package/dist/{chunk-SVHPILS3.js → chunk-T4A5J6SJ.js}

@@ -1,5 +1,5 @@
 'use client';
-import { sonorFetch } from './chunk-FLOJUMFR.js';
+import { sonorFetch } from './chunk-VXCUXHZO.js';
 import { useState, useCallback, useEffect } from 'react';
 import { jsx, Fragment, jsxs } from 'react/jsx-runtime';
 

package/dist/chunk-TPHOIE4I.js

@@ -0,0 +1,73 @@
+import { siteTokenState } from './chunk-D4M5K6JN.js';
+
+// src/shared/site-token-claims.ts
+var SITE_TOKEN_PREFIX = "st1.";
+function isSiteToken(credential) {
+  return typeof credential === "string" && credential.startsWith(SITE_TOKEN_PREFIX);
+}
+function decodeSiteTokenClaims(token) {
+  if (!isSiteToken(token)) return null;
+  const seg = token.split(".")[1];
+  if (!seg) return null;
+  try {
+    const b64 = seg.replace(/-/g, "+").replace(/_/g, "/");
+    const json = typeof atob === "function" ? atob(b64) : Buffer.from(seg, "base64url").toString("utf8");
+    const claims = JSON.parse(json);
+    return typeof claims === "object" && claims ? claims : null;
+  } catch {
+    return null;
+  }
+}
+function credentialBreakerId(credential) {
+  if (!credential) return "(anonymous)";
+  const claims = decodeSiteTokenClaims(credential);
+  if (claims?.pid) return `pid:${claims.pid}`;
+  return credential.slice(0, 16);
+}
+function tokenExp(token) {
+  const claims = decodeSiteTokenClaims(token);
+  return typeof claims?.exp === "number" ? claims.exp * 1e3 : 0;
+}
+
+// src/shared/site-token-configuration.ts
+var STORAGE_KEY = "__sonor_site_token__";
+function readStoredToken() {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.sessionStorage.getItem(STORAGE_KEY);
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    return typeof parsed?.token === "string" ? parsed.token : null;
+  } catch {
+    return null;
+  }
+}
+function storeToken(token) {
+  if (typeof window === "undefined") return;
+  try {
+    window.sessionStorage.setItem(STORAGE_KEY, JSON.stringify({ token }));
+  } catch {
+  }
+  try {
+    ;
+    window.__SITE_KIT_API_KEY__ = token;
+  } catch {
+  }
+}
+function configureSiteCredential(opts) {
+  siteTokenState.seed = opts.credential;
+  siteTokenState.isToken = isSiteToken(opts.credential);
+  if (opts.apiUrl) siteTokenState.apiUrl = opts.apiUrl.replace(/\/+$/, "");
+  if (!siteTokenState.isToken) {
+    siteTokenState.token = null;
+    return;
+  }
+  const prior = siteTokenState.token;
+  let best = opts.credential ?? null;
+  const stored = readStoredToken();
+  if (stored && tokenExp(stored) > tokenExp(best)) best = stored;
+  if (prior && tokenExp(prior) > tokenExp(best)) best = prior;
+  siteTokenState.token = best;
+}
+
+export { configureSiteCredential, credentialBreakerId, isSiteToken, storeToken, tokenExp };