@stack-mode/site-manager-kit 1.44.0 → 1.44.1

package/src/floor-plans.ts

@@ -1,45 +1,45 @@
-import { formatMoney } from "./money";
-import type { Availability, FloorPlan } from "./types";
-
-/**
- * What a plan card should say about availability. Follows the site's setting in Site Manager: the count only when
- * the site chose to show it. Falls back to availableCount for Site Manager versions without `availability`.
- */
-export function availabilityText(plan: Pick<FloorPlan, "availability" | "availableCount">, labels: { available?: string; none?: string; unknown?: string } = {}): string | null {
-  const a: Availability = plan.availability ?? (plan.availableCount === null ? { status: "unknown", count: null } : { status: plan.availableCount > 0 ? "available" : "none", count: null });
-  if (a.status === "unknown") return labels.unknown ?? null;
-  if (a.status === "none") return labels.none ?? "Join the waitlist";
-  if (a.count !== null) return `${a.count} available`;
-  return labels.available ?? "Available now";
-}
-
-/** "$2,207.12 effective with 6 weeks free" style copy for a plan with a running concession, or null. */
-export function effectiveRentText(plan: Pick<FloorPlan, "concession">): string | null {
-  const c = plan.concession;
-  if (!c) return null;
-  return `${formatMoney(c.effectiveRent, { cents: true })} effective`;
-}
-
-export type ComparisonRow = { label: string; values: (string | null)[] };
-
-/**
- * Rows for a side by side table of plans: the facts every plan has, then one row per feature any plan lists, marked
- * "Yes" or left empty. Values are display text; null means the plan doesn't say.
- */
-export function comparisonRows(plans: FloorPlan[]): ComparisonRow[] {
-  const sqft = (p: FloorPlan) => (p.sqftMin === null ? null : p.sqftMax && p.sqftMax !== p.sqftMin ? `${p.sqftMin.toLocaleString("en-US")} to ${p.sqftMax.toLocaleString("en-US")}` : p.sqftMin.toLocaleString("en-US"));
-  const layouts = { flat: "Single level", townhome: "Townhome", loft: "Loft", penthouse: "Penthouse" } as const;
-  const rows: ComparisonRow[] = [
-    { label: "Bedrooms", values: plans.map((p) => (p.beds === 0 ? "Studio" : String(p.beds))) },
-    { label: "Bathrooms", values: plans.map((p) => p.baths.replace(/\.0$/, "")) },
-    { label: "Square feet", values: plans.map(sqft) },
-    { label: "Starting at", values: plans.map((p) => formatMoney(p.startingRent)) },
-    { label: "With special", values: plans.map((p) => effectiveRentText(p)) },
-    { label: "Layout", values: plans.map((p) => (p.layout ? layouts[p.layout] : null)) },
-    { label: "Levels", values: plans.map((p) => (p.levels ? String(p.levels) : null)) },
-    { label: "Availability", values: plans.map((p) => availabilityText(p)) },
-  ].filter((r) => r.values.some((v) => v !== null));
-  const features: string[] = [];
-  for (const p of plans) for (const f of p.features ?? []) if (!features.includes(f)) features.push(f);
-  return [...rows, ...features.map((f) => ({ label: f, values: plans.map((p) => ((p.features ?? []).includes(f) ? "Yes" : null)) }))];
-}
+import { formatMoney } from "./money";
+import type { Availability, FloorPlan } from "./types";
+
+/**
+ * What a plan card should say about availability. Follows the site's setting in Site Manager: the count only when
+ * the site chose to show it. Falls back to availableCount for Site Manager versions without `availability`.
+ */
+export function availabilityText(plan: Pick<FloorPlan, "availability" | "availableCount">, labels: { available?: string; none?: string; unknown?: string } = {}): string | null {
+  const a: Availability = plan.availability ?? (plan.availableCount === null ? { status: "unknown", count: null } : { status: plan.availableCount > 0 ? "available" : "none", count: null });
+  if (a.status === "unknown") return labels.unknown ?? null;
+  if (a.status === "none") return labels.none ?? "Join the waitlist";
+  if (a.count !== null) return `${a.count} available`;
+  return labels.available ?? "Available now";
+}
+
+/** "$2,207.12 effective with 6 weeks free" style copy for a plan with a running concession, or null. */
+export function effectiveRentText(plan: Pick<FloorPlan, "concession">): string | null {
+  const c = plan.concession;
+  if (!c) return null;
+  return `${formatMoney(c.effectiveRent, { cents: true })} effective`;
+}
+
+export type ComparisonRow = { label: string; values: (string | null)[] };
+
+/**
+ * Rows for a side by side table of plans: the facts every plan has, then one row per feature any plan lists, marked
+ * "Yes" or left empty. Values are display text; null means the plan doesn't say.
+ */
+export function comparisonRows(plans: FloorPlan[]): ComparisonRow[] {
+  const sqft = (p: FloorPlan) => (p.sqftMin === null ? null : p.sqftMax && p.sqftMax !== p.sqftMin ? `${p.sqftMin.toLocaleString("en-US")} to ${p.sqftMax.toLocaleString("en-US")}` : p.sqftMin.toLocaleString("en-US"));
+  const layouts = { flat: "Single level", townhome: "Townhome", loft: "Loft", penthouse: "Penthouse" } as const;
+  const rows: ComparisonRow[] = [
+    { label: "Bedrooms", values: plans.map((p) => (p.beds === 0 ? "Studio" : String(p.beds))) },
+    { label: "Bathrooms", values: plans.map((p) => p.baths.replace(/\.0$/, "")) },
+    { label: "Square feet", values: plans.map(sqft) },
+    { label: "Starting at", values: plans.map((p) => formatMoney(p.startingRent)) },
+    { label: "With special", values: plans.map((p) => effectiveRentText(p)) },
+    { label: "Layout", values: plans.map((p) => (p.layout ? layouts[p.layout] : null)) },
+    { label: "Levels", values: plans.map((p) => (p.levels ? String(p.levels) : null)) },
+    { label: "Availability", values: plans.map((p) => availabilityText(p)) },
+  ].filter((r) => r.values.some((v) => v !== null));
+  const features: string[] = [];
+  for (const p of plans) for (const f of p.features ?? []) if (!features.includes(f)) features.push(f);
+  return [...rows, ...features.map((f) => ({ label: f, values: plans.map((p) => ((p.features ?? []).includes(f) ? "Yes" : null)) }))];
+}

package/src/form-guard.tsx

@@ -1,37 +1,37 @@
-import { connection } from "next/server";
-import { Suspense } from "react";
-import { AttributionFields } from "./attribution";
-import { issueFormToken } from "./form-token";
-
-export const HONEYPOT_FIELD = "bp_hp";
-export const TOKEN_FIELD = "bp_ts";
-
-/**
- * Put inside every form that uses submitForm or formAction. It adds the signed render time and a hidden honeypot
- * field that people never see but form-filling bots do. A server component: the token is signed on the server, for
- * each visit, because a token signed once at build time would make every form on a static page "too old" a day
- * later. The token sits in its own Suspense boundary, so with Cache Components the rest of the page stays static and
- * only the token is filled in per request. It also carries where the visitor first came from (AttributionFields),
- * when the layout has <SiteAttribution />.
- */
-export function FormGuard() {
-  return (
-    <>
-      <Suspense fallback={null}>
-        <FormToken />
-      </Suspense>
-      <AttributionFields />
-      <div aria-hidden="true" style={{ position: "absolute", left: "-10000px", width: 1, height: 1, overflow: "hidden" }}>
-        <label>
-          Leave this empty
-          <input type="text" name={HONEYPOT_FIELD} tabIndex={-1} autoComplete="off" defaultValue="" />
-        </label>
-      </div>
-    </>
-  );
-}
-
-async function FormToken() {
-  await connection();
-  return <input type="hidden" name={TOKEN_FIELD} value={issueFormToken()} />;
-}
+import { connection } from "next/server";
+import { Suspense } from "react";
+import { AttributionFields } from "./attribution";
+import { issueFormToken } from "./form-token";
+
+export const HONEYPOT_FIELD = "bp_hp";
+export const TOKEN_FIELD = "bp_ts";
+
+/**
+ * Put inside every form that uses submitForm or formAction. It adds the signed render time and a hidden honeypot
+ * field that people never see but form-filling bots do. A server component: the token is signed on the server, for
+ * each visit, because a token signed once at build time would make every form on a static page "too old" a day
+ * later. The token sits in its own Suspense boundary, so with Cache Components the rest of the page stays static and
+ * only the token is filled in per request. It also carries where the visitor first came from (AttributionFields),
+ * when the layout has <SiteAttribution />.
+ */
+export function FormGuard() {
+  return (
+    <>
+      <Suspense fallback={null}>
+        <FormToken />
+      </Suspense>
+      <AttributionFields />
+      <div aria-hidden="true" style={{ position: "absolute", left: "-10000px", width: 1, height: 1, overflow: "hidden" }}>
+        <label>
+          Leave this empty
+          <input type="text" name={HONEYPOT_FIELD} tabIndex={-1} autoComplete="off" defaultValue="" />
+        </label>
+      </div>
+    </>
+  );
+}
+
+async function FormToken() {
+  await connection();
+  return <input type="hidden" name={TOKEN_FIELD} value={issueFormToken()} />;
+}

package/src/form-types.ts

@@ -1,13 +1,13 @@
-export type SubmitResult =
-  | { ok: true; id: string; successMessage: string }
-  | { ok: false; error: "invalid"; fields: Record<string, string> }
-  // A booking form's time was taken by someone else a moment ago: show the open times again.
-  | { ok: false; error: "slot_taken"; fields: Record<string, string> }
-  | { ok: false; error: "rejected" | "too_fast" | "rate_limited" | "unavailable" };
-
-/** A booking form's chosen time: the `start` of one of getBookingSlots' slots. (Not in forms.ts: a "use server" file
- * can only export async functions.) */
-export const SLOT_FIELD = "bp_slot";
-
-/** Why the website's own checks thought a submission was spam. */
-export type SpamReason = "honeypot" | "too_fast" | "bot";
+export type SubmitResult =
+  | { ok: true; id: string; successMessage: string }
+  | { ok: false; error: "invalid"; fields: Record<string, string> }
+  // A booking form's time was taken by someone else a moment ago: show the open times again.
+  | { ok: false; error: "slot_taken"; fields: Record<string, string> }
+  | { ok: false; error: "rejected" | "too_fast" | "rate_limited" | "unavailable" };
+
+/** A booking form's chosen time: the `start` of one of getBookingSlots' slots. (Not in forms.ts: a "use server" file
+ * can only export async functions.) */
+export const SLOT_FIELD = "bp_slot";
+
+/** Why the website's own checks thought a submission was spam. */
+export type SpamReason = "honeypot" | "too_fast" | "bot";

package/src/forms.ts

@@ -1,76 +1,76 @@
-"use server";
-
-import { createHash } from "node:crypto";
-import { headers } from "next/headers";
-import { bpRaw } from "./client";
-import { checkFormToken } from "./form-token";
-import { ATTRIBUTION_FIELD_NAMES, attributionFrom } from "./attribution-fields";
-import { SLOT_FIELD, type SpamReason, type SubmitResult } from "./form-types";
-
-const GUARD_FIELDS = new Set(["bp_hp", "bp_ts"]);
-
-async function isBot(): Promise<boolean> {
-  try {
-    const { checkBotId } = await import("botid/server");
-    const r = await checkBotId();
-    return r.isBot && !r.isVerifiedBot;
-  } catch {
-    // BotID isn't set up on this site. The honeypot and time check still apply.
-    return false;
-  }
-}
-
-export type SubmitOptions = {
-  /**
-   * The site checked how long the form was open itself (its own signed timer), or the send has no form at all (a
-   * remembered visitor's one-click download), so there's no FormGuard timer to check. The honeypot (when sent) and
-   * BotID still apply. Use only after the site's own checks; anything else should render FormGuard.
-   */
-  timedBySite?: boolean;
-};
-
-/**
- * Sends one form to Site Manager from the site's server. Checks BotID, the honeypot and the 3-second render
- * time first, hashes the visitor's IP (Site Manager never sees it), then forwards the fields.
- *
- * It returns the result, so use it from server code, or use formAction with useActionState in a client form.
- */
-export async function submitForm(formKey: string, formData: FormData, opts: SubmitOptions = {}): Promise<SubmitResult> {
-  // Spam checks: a filled honeypot, a form sent too fast (or with a missing or stale timer), or BotID. Suspected
-  // spam still goes to Site Manager, marked, for its spam folder (where a real person caught by mistake can be
-  // rescued), and the visitor sees the usual thank-you, so bots learn nothing.
-  const token = opts.timedBySite ? { ok: true as const } : checkFormToken(String(formData.get("bp_ts") ?? ""));
-  const spam: SpamReason | null = String(formData.get("bp_hp") ?? "").trim() !== "" ? "honeypot" : !token.ok ? (token.reason === "too_fast" ? "too_fast" : "bot") : (await isBot()) ? "bot" : null;
-
-  const h = await headers();
-  const ip = h.get("x-real-ip") ?? h.get("x-forwarded-for")?.split(",")[0]?.trim() ?? "";
-  const data: Record<string, string> = {};
-  for (const [k, v] of formData.entries()) {
-    if (GUARD_FIELDS.has(k) || ATTRIBUTION_FIELD_NAMES.has(k) || k === SLOT_FIELD || k.startsWith("$ACTION") || typeof v !== "string") continue;
-    data[k] = v;
-  }
-
-  const { status, json } = await bpRaw(`/forms/${encodeURIComponent(formKey)}/submit`, {
-    data,
-    pageUrl: h.get("referer") ?? undefined,
-    ipHash: ip ? createHash("sha256").update(ip).digest("hex") : undefined,
-    userAgent: h.get("user-agent")?.slice(0, 500) ?? undefined,
-    attribution: attributionFrom(formData),
-    slot: typeof formData.get(SLOT_FIELD) === "string" && formData.get(SLOT_FIELD) ? String(formData.get(SLOT_FIELD)) : undefined,
-    // A Site Manager from before the spam folder ignores `spam` but still refuses a filled honeypot, so spam is
-    // never delivered as a lead there either.
-    ...(spam ? { spam, hp: `kit:${spam}` } : {}),
-  });
-  const body = json as { data?: { id: string; successMessage: string }; error?: { code: string; fields?: Record<string, string> } } | null;
-  if (spam) return { ok: true, id: body?.data?.id ?? "", successMessage: body?.data?.successMessage ?? "Thanks! We'll be in touch soon." };
-  if (status === 201 && body?.data) return { ok: true, id: body.data.id, successMessage: body.data.successMessage };
-  if (status === 422) return { ok: false, error: "invalid", fields: body?.error?.fields ?? {} };
-  if (status === 409) return { ok: false, error: "slot_taken", fields: body?.error?.fields ?? {} };
-  if (status === 429) return { ok: false, error: "rate_limited" };
-  return { ok: false, error: "unavailable" };
-}
-
-/** The same, shaped for React's useActionState: `useActionState(formAction.bind(null, "inquiry"), null)`. */
-export async function formAction(formKey: string, _prev: SubmitResult | null, formData: FormData): Promise<SubmitResult> {
-  return submitForm(formKey, formData);
-}
+"use server";
+
+import { createHash } from "node:crypto";
+import { headers } from "next/headers";
+import { bpRaw } from "./client";
+import { checkFormToken } from "./form-token";
+import { ATTRIBUTION_FIELD_NAMES, attributionFrom } from "./attribution-fields";
+import { SLOT_FIELD, type SpamReason, type SubmitResult } from "./form-types";
+
+const GUARD_FIELDS = new Set(["bp_hp", "bp_ts"]);
+
+async function isBot(): Promise<boolean> {
+  try {
+    const { checkBotId } = await import("botid/server");
+    const r = await checkBotId();
+    return r.isBot && !r.isVerifiedBot;
+  } catch {
+    // BotID isn't set up on this site. The honeypot and time check still apply.
+    return false;
+  }
+}
+
+export type SubmitOptions = {
+  /**
+   * The site checked how long the form was open itself (its own signed timer), or the send has no form at all (a
+   * remembered visitor's one-click download), so there's no FormGuard timer to check. The honeypot (when sent) and
+   * BotID still apply. Use only after the site's own checks; anything else should render FormGuard.
+   */
+  timedBySite?: boolean;
+};
+
+/**
+ * Sends one form to Site Manager from the site's server. Checks BotID, the honeypot and the 3-second render
+ * time first, hashes the visitor's IP (Site Manager never sees it), then forwards the fields.
+ *
+ * It returns the result, so use it from server code, or use formAction with useActionState in a client form.
+ */
+export async function submitForm(formKey: string, formData: FormData, opts: SubmitOptions = {}): Promise<SubmitResult> {
+  // Spam checks: a filled honeypot, a form sent too fast (or with a missing or stale timer), or BotID. Suspected
+  // spam still goes to Site Manager, marked, for its spam folder (where a real person caught by mistake can be
+  // rescued), and the visitor sees the usual thank-you, so bots learn nothing.
+  const token = opts.timedBySite ? { ok: true as const } : checkFormToken(String(formData.get("bp_ts") ?? ""));
+  const spam: SpamReason | null = String(formData.get("bp_hp") ?? "").trim() !== "" ? "honeypot" : !token.ok ? (token.reason === "too_fast" ? "too_fast" : "bot") : (await isBot()) ? "bot" : null;
+
+  const h = await headers();
+  const ip = h.get("x-real-ip") ?? h.get("x-forwarded-for")?.split(",")[0]?.trim() ?? "";
+  const data: Record<string, string> = {};
+  for (const [k, v] of formData.entries()) {
+    if (GUARD_FIELDS.has(k) || ATTRIBUTION_FIELD_NAMES.has(k) || k === SLOT_FIELD || k.startsWith("$ACTION") || typeof v !== "string") continue;
+    data[k] = v;
+  }
+
+  const { status, json } = await bpRaw(`/forms/${encodeURIComponent(formKey)}/submit`, {
+    data,
+    pageUrl: h.get("referer") ?? undefined,
+    ipHash: ip ? createHash("sha256").update(ip).digest("hex") : undefined,
+    userAgent: h.get("user-agent")?.slice(0, 500) ?? undefined,
+    attribution: attributionFrom(formData),
+    slot: typeof formData.get(SLOT_FIELD) === "string" && formData.get(SLOT_FIELD) ? String(formData.get(SLOT_FIELD)) : undefined,
+    // A Site Manager from before the spam folder ignores `spam` but still refuses a filled honeypot, so spam is
+    // never delivered as a lead there either.
+    ...(spam ? { spam, hp: `kit:${spam}` } : {}),
+  });
+  const body = json as { data?: { id: string; successMessage: string }; error?: { code: string; fields?: Record<string, string> } } | null;
+  if (spam) return { ok: true, id: body?.data?.id ?? "", successMessage: body?.data?.successMessage ?? "Thanks! We'll be in touch soon." };
+  if (status === 201 && body?.data) return { ok: true, id: body.data.id, successMessage: body.data.successMessage };
+  if (status === 422) return { ok: false, error: "invalid", fields: body?.error?.fields ?? {} };
+  if (status === 409) return { ok: false, error: "slot_taken", fields: body?.error?.fields ?? {} };
+  if (status === 429) return { ok: false, error: "rate_limited" };
+  return { ok: false, error: "unavailable" };
+}
+
+/** The same, shaped for React's useActionState: `useActionState(formAction.bind(null, "inquiry"), null)`. */
+export async function formAction(formKey: string, _prev: SubmitResult | null, formData: FormData): Promise<SubmitResult> {
+  return submitForm(formKey, formData);
+}

package/src/glossary.ts

@@ -1,19 +1,19 @@
-import type { GlossaryTerm } from "./types";
-
-type Json = Record<string, unknown>;
-
-/**
- * schema.org `DefinedTerm` structured data for a term's own page, in the glossary named `setName` at `setUrl`.
- * Render it with `jsonLdScript`.
- */
-export function definedTermJsonLd(t: Pick<GlossaryTerm, "term" | "shortDefinition" | "url" | "alsoKnownAs">, set: { setName: string; setUrl?: string | null }): Json {
-  return {
-    "@context": "https://schema.org",
-    "@type": "DefinedTerm",
-    name: t.term,
-    description: t.shortDefinition,
-    ...(t.url ? { url: t.url } : {}),
-    ...(t.alsoKnownAs.length ? { alternateName: t.alsoKnownAs } : {}),
-    inDefinedTermSet: { "@type": "DefinedTermSet", name: set.setName, ...(set.setUrl ? { url: set.setUrl } : {}) },
-  };
-}
+import type { GlossaryTerm } from "./types";
+
+type Json = Record<string, unknown>;
+
+/**
+ * schema.org `DefinedTerm` structured data for a term's own page, in the glossary named `setName` at `setUrl`.
+ * Render it with `jsonLdScript`.
+ */
+export function definedTermJsonLd(t: Pick<GlossaryTerm, "term" | "shortDefinition" | "url" | "alsoKnownAs">, set: { setName: string; setUrl?: string | null }): Json {
+  return {
+    "@context": "https://schema.org",
+    "@type": "DefinedTerm",
+    name: t.term,
+    description: t.shortDefinition,
+    ...(t.url ? { url: t.url } : {}),
+    ...(t.alsoKnownAs.length ? { alternateName: t.alsoKnownAs } : {}),
+    inDefinedTermSet: { "@type": "DefinedTermSet", name: set.setName, ...(set.setUrl ? { url: set.setUrl } : {}) },
+  };
+}

package/src/health-route.ts

@@ -1,34 +1,34 @@
-import { SIGNATURE_HEADER, verify } from "./signature";
-import { KIT_VERSION } from "./version";
-
-async function botIdInstalled(): Promise<boolean> {
-  try {
-    await import("botid/server");
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/** The deployment serving this site (Vercel sets these), so Site Manager can tell a new deploy happened. */
-function deployId(): string | null {
-  return process.env.VERCEL_DEPLOYMENT_ID?.trim() || process.env.VERCEL_GIT_COMMIT_SHA?.trim() || null;
-}
-
-/**
- * Site Manager calls this to show Form protection and Site connection in its System Status. Put in
- * app/api/blueprint/health/route.ts:
- *
- *   export { GET } from "site-manager-kit/health-route";
- *
- * Signed with the revalidate secret over an empty body. Unsigned requests get a 401. `deployId` changing tells Site
- * Manager the site was deployed, so it runs its wiring check the same day.
- */
-export async function GET(req: Request): Promise<Response> {
-  const check = verify(process.env.BLUEPRINT_REVALIDATE_SECRET, req.headers.get(SIGNATURE_HEADER), "");
-  if (!check.ok) return Response.json({ error: check.reason }, { status: 401 });
-  return Response.json(
-    { kitVersion: KIT_VERSION, botId: await botIdInstalled(), formSecret: !!process.env.BLUEPRINT_FORM_SECRET?.trim(), revalidate: true, deployId: deployId() },
-    { headers: { "cache-control": "no-store" } },
-  );
-}
+import { SIGNATURE_HEADER, verify } from "./signature";
+import { KIT_VERSION } from "./version";
+
+async function botIdInstalled(): Promise<boolean> {
+  try {
+    await import("botid/server");
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/** The deployment serving this site (Vercel sets these), so Site Manager can tell a new deploy happened. */
+function deployId(): string | null {
+  return process.env.VERCEL_DEPLOYMENT_ID?.trim() || process.env.VERCEL_GIT_COMMIT_SHA?.trim() || null;
+}
+
+/**
+ * Site Manager calls this to show Form protection and Site connection in its System Status. Put in
+ * app/api/blueprint/health/route.ts:
+ *
+ *   export { GET } from "site-manager-kit/health-route";
+ *
+ * Signed with the revalidate secret over an empty body. Unsigned requests get a 401. `deployId` changing tells Site
+ * Manager the site was deployed, so it runs its wiring check the same day.
+ */
+export async function GET(req: Request): Promise<Response> {
+  const check = verify(process.env.BLUEPRINT_REVALIDATE_SECRET, req.headers.get(SIGNATURE_HEADER), "");
+  if (!check.ok) return Response.json({ error: check.reason }, { status: 401 });
+  return Response.json(
+    { kitVersion: KIT_VERSION, botId: await botIdInstalled(), formSecret: !!process.env.BLUEPRINT_FORM_SECRET?.trim(), revalidate: true, deployId: deployId() },
+    { headers: { "cache-control": "no-store" } },
+  );
+}

package/src/index.ts

@@ -1,36 +1,36 @@
-// Server-side helpers for a Next.js site that reads its content from Site Manager.
-// Route handlers, the form action and the form guard have their own entry points:
-//   site-manager-kit/revalidate-route, site-manager-kit/health-route, site-manager-kit/forms, site-manager-kit/waitlist,
-//   site-manager-kit/form-guard, site-manager-kit/redirects, site-manager-kit/preview-route, site-manager-kit/rss-route,
-//   site-manager-kit/visual, site-manager-kit/copy-keys-route, site-manager-kit/chat-route. A site's src/copy-keys.ts uses site-manager-kit/copy-keys.
-//   next.config.ts uses
-//   site-manager-kit/config, and the root layout site-manager-kit/analytics, site-manager-kit/attribution and
-//   site-manager-kit/preview-banner, site-manager-kit/visual-editing and site-manager-kit/chat.
-
-export { bp, bpWithMeta, BlueprintError, siteId, tagsFor } from "./client";
-export * from "./data";
-export { blogPostingJsonLd, buildRss, getBlogCategories, getBlogCategory, getBlogFeed, getBlogTags, getPost, getPosts } from "./blog";
-export { buildMetadata, defaultMetadata, pageMetadata, titleWithSuffix, TITLE_CHAR_LIMIT } from "./metadata";
-export { buildSitemap, sitemap } from "./sitemap";
-export { buildRobots, robots } from "./robots";
-export { buildRedirectMap, handleRedirect, matchRedirect, normalizePath } from "./redirects";
-export { formatMoney } from "./money";
-export { availabilityText, comparisonRows, effectiveRentText, type ComparisonRow } from "./floor-plans";
-export { bathsText, hoaText, listingAddress, listingPrice, lotText } from "./listings";
-export { estimatePayment } from "./payment";
-export { serviceJsonLd } from "./services";
-export { leaseTermsText, pickupText } from "./residents";
-export { faqJsonLd, jsonLdScript } from "./faq";
-export { absoluteUrl, breadcrumbJsonLd, breadcrumbsFor, businessJsonLd, eventJsonLd, floorPlanJsonLd, listingJsonLd, openingHours, placeMapUrl, plainText, StructuredData } from "./structured-data";
-export { definedTermJsonLd } from "./glossary";
-export { announcementsLiveAt } from "./announcements";
-export { fileSizeText } from "./downloads";
-export { imageProps } from "./image";
-export { sign, verify, SIGNATURE_HEADER } from "./signature";
-export { SLOT_FIELD, type SubmitResult } from "./form-types";
-export { readWaitlistForm, waitlistChoices, WAITLIST_FIELDS, type WaitlistInput } from "./waitlist-form";
-export { formatUsPhone, maskPhoneInput, normalizeUsPhone, phoneDigits } from "./phone";
-export { attributionFrom, firstTouch, ATTRIBUTION_FIELDS } from "./attribution-fields";
-export type * from "./types";
-export { parseChatLines, type ChatConfig, type ChatEvent, type ChatSlots } from "./chat-types";
-export { KIT_VERSION } from "./version";
+// Server-side helpers for a Next.js site that reads its content from Site Manager.
+// Route handlers, the form action and the form guard have their own entry points:
+//   site-manager-kit/revalidate-route, site-manager-kit/health-route, site-manager-kit/forms, site-manager-kit/waitlist,
+//   site-manager-kit/form-guard, site-manager-kit/redirects, site-manager-kit/preview-route, site-manager-kit/rss-route,
+//   site-manager-kit/visual, site-manager-kit/copy-keys-route, site-manager-kit/chat-route. A site's src/copy-keys.ts uses site-manager-kit/copy-keys.
+//   next.config.ts uses
+//   site-manager-kit/config, and the root layout site-manager-kit/analytics, site-manager-kit/attribution and
+//   site-manager-kit/preview-banner, site-manager-kit/visual-editing and site-manager-kit/chat.
+
+export { bp, bpWithMeta, BlueprintError, siteId, tagsFor } from "./client";
+export * from "./data";
+export { blogPostingJsonLd, buildRss, getBlogCategories, getBlogCategory, getBlogFeed, getBlogTags, getPost, getPosts } from "./blog";
+export { buildMetadata, defaultMetadata, pageMetadata, titleWithSuffix, TITLE_CHAR_LIMIT } from "./metadata";
+export { buildSitemap, sitemap } from "./sitemap";
+export { buildRobots, robots } from "./robots";
+export { buildRedirectMap, handleRedirect, matchRedirect, normalizePath } from "./redirects";
+export { formatMoney } from "./money";
+export { availabilityText, comparisonRows, effectiveRentText, type ComparisonRow } from "./floor-plans";
+export { bathsText, hoaText, listingAddress, listingPrice, lotText } from "./listings";
+export { estimatePayment } from "./payment";
+export { serviceJsonLd } from "./services";
+export { leaseTermsText, pickupText } from "./residents";
+export { faqJsonLd, jsonLdScript } from "./faq";
+export { absoluteUrl, breadcrumbJsonLd, breadcrumbsFor, businessJsonLd, eventJsonLd, floorPlanJsonLd, listingJsonLd, openingHours, placeMapUrl, plainText, StructuredData } from "./structured-data";
+export { definedTermJsonLd } from "./glossary";
+export { announcementsLiveAt } from "./announcements";
+export { fileSizeText } from "./downloads";
+export { imageProps } from "./image";
+export { sign, verify, SIGNATURE_HEADER } from "./signature";
+export { SLOT_FIELD, type SubmitResult } from "./form-types";
+export { readWaitlistForm, waitlistChoices, WAITLIST_FIELDS, type WaitlistInput } from "./waitlist-form";
+export { formatUsPhone, maskPhoneInput, normalizeUsPhone, phoneDigits } from "./phone";
+export { attributionFrom, firstTouch, ATTRIBUTION_FIELDS } from "./attribution-fields";
+export type * from "./types";
+export { parseChatLines, type ChatConfig, type ChatEvent, type ChatSlots } from "./chat-types";
+export { KIT_VERSION } from "./version";

package/src/indexnow.ts

@@ -1,40 +1,40 @@
-import { NextResponse, type NextRequest } from "next/server";
-import { bp } from "./client";
-
-// IndexNow: Site Manager tells search engines (Bing and others; not Google) when pages change, and they check the
-// site serves the same key at /{key}.txt. The key comes from Site Manager, kept in memory for an hour.
-
-const TTL_MS = 60 * 60_000;
-let cache: { at: number; key: string | null } | null = null;
-
-/** The IndexNow key Site Manager uses for this site, or null when IndexNow isn't set up. */
-export async function indexNowKey(): Promise<string | null> {
-  if (cache && Date.now() - cache.at < TTL_MS) return cache.key;
-  try {
-    const r = await bp<{ key: string | null }>("/indexnow", { cache: "no-store" });
-    cache = { at: Date.now(), key: r?.key ?? null };
-  } catch {
-    // Site Manager unreachable: don't remember the failure, try again next time.
-    return null;
-  }
-  return cache.key;
-}
-
-/** Clears the remembered key (tests, or after Site Manager's key changes). */
-export function resetIndexNowKey() {
-  cache = null;
-}
-
-const KEY_FILE = /^\/([A-Za-z0-9-]{8,128})\.txt$/;
-
-/**
- * For `src/proxy.ts`: answers `/{key}.txt` with the key when it matches Site Manager's, or undefined to carry on.
- * Any other .txt address passes through untouched.
- */
-export async function handleIndexNow(request: NextRequest): Promise<NextResponse | undefined> {
-  const m = KEY_FILE.exec(request.nextUrl.pathname);
-  if (!m) return undefined;
-  const key = await indexNowKey();
-  if (!key || key !== m[1]) return undefined;
-  return new NextResponse(key, { headers: { "content-type": "text/plain; charset=utf-8", "cache-control": "public, max-age=3600" } });
-}
+import { NextResponse, type NextRequest } from "next/server";
+import { bp } from "./client";
+
+// IndexNow: Site Manager tells search engines (Bing and others; not Google) when pages change, and they check the
+// site serves the same key at /{key}.txt. The key comes from Site Manager, kept in memory for an hour.
+
+const TTL_MS = 60 * 60_000;
+let cache: { at: number; key: string | null } | null = null;
+
+/** The IndexNow key Site Manager uses for this site, or null when IndexNow isn't set up. */
+export async function indexNowKey(): Promise<string | null> {
+  if (cache && Date.now() - cache.at < TTL_MS) return cache.key;
+  try {
+    const r = await bp<{ key: string | null }>("/indexnow", { cache: "no-store" });
+    cache = { at: Date.now(), key: r?.key ?? null };
+  } catch {
+    // Site Manager unreachable: don't remember the failure, try again next time.
+    return null;
+  }
+  return cache.key;
+}
+
+/** Clears the remembered key (tests, or after Site Manager's key changes). */
+export function resetIndexNowKey() {
+  cache = null;
+}
+
+const KEY_FILE = /^\/([A-Za-z0-9-]{8,128})\.txt$/;
+
+/**
+ * For `src/proxy.ts`: answers `/{key}.txt` with the key when it matches Site Manager's, or undefined to carry on.
+ * Any other .txt address passes through untouched.
+ */
+export async function handleIndexNow(request: NextRequest): Promise<NextResponse | undefined> {
+  const m = KEY_FILE.exec(request.nextUrl.pathname);
+  if (!m) return undefined;
+  const key = await indexNowKey();
+  if (!key || key !== m[1]) return undefined;
+  return new NextResponse(key, { headers: { "content-type": "text/plain; charset=utf-8", "cache-control": "public, max-age=3600" } });
+}