@wildo-ai/saas-website 1.1.2 → 1.1.4

package/dist/esm/astro/website-page-head.renderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"website-page-head.renderer.js","sourceRoot":"","sources":["../../../../src/astro/website-page-head.renderer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAKjF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAkE7E,MAAM,UAAU,yBAAyB,CAAC,IAAsC;IAC9E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;IAElD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,QAA6B,CAAC;IACtE,MAAM,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC,cAAmC,CAAC;IAClF,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,eAAe;YACzE,uBAAuB,QAAQ,gBAAgB,QAAQ,CAAC,GAAwB,MAAM;YACtF,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,eAAe;YACzE,6BAA6B,cAAc,gBAAgB,QAAQ,CAAC,GAAwB,MAAM;YAClG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACzF,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAExC;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA8B,CAAC;IAC1D,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,CAAC;IAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;IAClD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAExC;;;;;;OAMG;IACH,SAAS,gBAAgB,CAAC,SAA4B;QACpD,MAAM,IAAI,GAAG,uBAAuB,CAAC;YACnC,MAAM,EAAE,SAAS;YACjB,aAAa;YACb,SAAS;SACV,CAAC,CAAC;QACH,OAAO,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,CAChB,mCAAmC,mBAAmB,CAAC,SAAS,CAAC,WAAW,mBAAmB,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CACtI,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,IAAI,CAChB,oDAAoD,mBAAmB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,MAAM,CAC/G,CAAC;IAEF;;;;;OAKG;IACH,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACpD,YAAY,CAAC,IAAI,CACf,sCAAsC,WAAW,MAAM,EACvD,uCAAuC,WAAW,MAAM,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF;;;;;;;;;;;;OAYG;IACH,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,gBAAgB;YAAE,SAAS;QAC7C,sBAAsB,CAAC,IAAI,CACzB,iDAAiD,mBAAmB,CAAC,SAAS,CAAC,MAAM,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAE3D;;;;;;;;;;;;;OAaG;IACH,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,QAAQ,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,UAAU,SAAS,UAAU;QAC7B,qCAAqC,eAAe,MAAM;QAC1D,+BAA+B,aAAa,MAAM;QAClD,sCAAsC,SAAS,MAAM;QACrD,4CAA4C,eAAe,MAAM;QACjE,+CAA+C;QAC/C,oCAAoC,aAAa,MAAM;QACvD,0CAA0C,YAAY,MAAM;QAC5D,uCAAuC,YAAY,MAAM;QACzD,GAAG,sBAAsB;QACzB,GAAG,YAAY;QACf,sCAAsC,eAAe,MAAM;QAC3D,uCAAuC,SAAS,MAAM;QACtD,6CAA6C,eAAe,MAAM;QAClE,GAAG,aAAa;QAChB,GAAG,aAAa;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA2B;IACtE,MAAM,KAAK,GAAa,CAAC,SAAS,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwB,EAAE,CAAC;QACpF,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAwB,EAAE,CAAC;gBACxF,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,KAAK,UAAU,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG","sourcesContent":["import type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n\nimport { buildLocalizedRoutePath } from '../core/routing/internal-routing.utils';\nimport type { WebsiteDesignTokens } from '../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { WebsitePageManifest } from '../schemas/manifests/website-page-manifest.shared.schemas';\nimport type { LabelPack } from '../schemas/validators/label-pack.validator';\n\nimport { escapeHtmlAttribute, escapeHtmlText } from './internal/html-escape';\nimport type { WebsiteSiteContext } from './website-site-context';\n\n/**\n * @wildo_source:part:start saas.website.astro.head-renderer facet:layer:astro facet:family:website\n *\n * Head-block renderers — pure string builders the consumer's per-page\n * `.astro` file injects via `<Fragment set:html={...}/>` /\n * `<style set:html={...}></style>`. Two functions:\n *\n *   - `renderWebsitePageHeadHtml(opts)` — emits the complete SEO\n *     `<head>` block: `<title>`, meta description, full Open Graph\n *     card (`og:title` / `og:description` / `og:type` / `og:url` /\n *     `og:site_name` / `og:locale` / `og:locale:alternate` / optional\n *     `og:image`), Twitter card mirrors, `<link rel=\"canonical\">`,\n *     and one `<link rel=\"alternate\" hreflang>` per declared locale\n *     (plus an `x-default` for Google's i18n discoverability). Every\n *     URL is ABSOLUTE (composed from `websiteConfig.publicOrigin` +\n *     the page's `routePath`) — relative hreflang/canonical\n *     annotations are not honored consistently across crawlers\n *     (Phase 6 audit findings H-B / H-C / M-A).\n *   - `renderWebsiteDesignTokensCss(tokens)` — flattens the design-token\n *     bundle into `--website-*` custom properties scoped to `:root`.\n *     Server-static — zero island JS.\n *\n * **Why pure string builders** (rather than React components or Astro\n * components):\n *\n *   1. **Avoids the `.astro` distribution problem.** A `.astro` shell\n *      cannot be re-exported from a TS subpath barrel and `tsc` does\n *      not copy `.astro` files to `dist/`. Pure TS sidesteps both.\n *   2. **Avoids the React-island boundary.** Rendering head content\n *      via React would require either (a) a server-only React subtree\n *      (extra moving part) or (b) hydrating the `<head>` on the client\n *      (waste of bundle size for static-build content).\n *   3. **Vitest-friendly.** Pure functions returning strings are\n *      trivially asserted against without an Astro test harness.\n *\n * **HTML escaping**: every consumer-supplied string (title,\n * description, OG image URL, hreflang values) is escaped with\n * `escapeHtmlAttribute` / `escapeHtmlText` before interpolation into\n * the emitted markup. Marketing copy frequently contains characters\n * (quotes, ampersands, the rare `<`) that would break the surrounding\n * tag if interpolated raw — escaping is non-negotiable for a public\n * surface.\n *\n * **Failure modes** — `renderWebsitePageHeadHtml` throws when:\n *   - `manifest.metaLabelKeys.titleKey` is absent from the pack\n *   - `manifest.metaLabelKeys.descriptionKey` is absent from the pack\n * Both throw with the locale + key + actionable next step (`Run\n * \\`wildo website audit\\` or add the entry to <pack-path>.json`).\n */\n\nexport interface RenderWebsitePageHeadHtmlOptions {\n  manifest: WebsitePageManifest;\n  /**\n   * Composed `WebsiteSiteContext` — the renderer reads\n   * `websiteConfig.{defaultLocale, locales, publicOrigin}` for the\n   * URL/locale surface and `rootConfig.seo.{siteName, defaultOgImageUrl}`\n   * for the SEO branding fallback.\n   */\n  siteContext: WebsiteSiteContext;\n  locale: AvailableLanguage;\n  labelPack: LabelPack;\n}\n\nexport function renderWebsitePageHeadHtml(opts: RenderWebsitePageHeadHtmlOptions): string {\n  const { manifest, siteContext, locale, labelPack } = opts;\n  const { rootConfig, websiteConfig } = siteContext;\n\n  const titleKey = manifest.metaLabelKeys.titleKey as unknown as string;\n  const descriptionKey = manifest.metaLabelKeys.descriptionKey as unknown as string;\n  const title = labelPack[titleKey];\n  const description = labelPack[descriptionKey];\n\n  if (title === undefined) {\n    throw new Error(\n      `[renderWebsitePageHeadHtml] Label pack for locale \"${locale}\" is missing ` +\n        `the page title key \"${titleKey}\" (page ref=\"${manifest.ref as unknown as string}\"). ` +\n        `Run \\`wildo website audit\\` or add the entry to your <locale>.json pack.`,\n    );\n  }\n  if (description === undefined) {\n    throw new Error(\n      `[renderWebsitePageHeadHtml] Label pack for locale \"${locale}\" is missing ` +\n        `the page description key \"${descriptionKey}\" (page ref=\"${manifest.ref as unknown as string}\"). ` +\n        `Run \\`wildo website audit\\` or add the entry to your <locale>.json pack.`,\n    );\n  }\n\n  /**\n   * OG image precedence: per-page `manifest.metaLabelKeys.ogImageUrl`\n   * wins; falls back to the site-level `seo.defaultOgImageUrl` so\n   * marketing pages without a hero image still produce a richer\n   * social-card (Phase 6 audit fix M-A). When neither is present,\n   * the Twitter card kind degrades to the smaller `summary` and the\n   * `og:image` / `twitter:image` lines are omitted entirely.\n   */\n  const ogImageUrl = manifest.metaLabelKeys.ogImageUrl ?? rootConfig.seo.defaultOgImageUrl;\n  const titleAttr = escapeHtmlAttribute(title);\n  const descriptionAttr = escapeHtmlAttribute(description);\n  const titleText = escapeHtmlText(title);\n\n  /**\n   * Absolute URL builder. `prefixDefaultLocale: false` means the\n   * default locale lives at the locale-neutral path; every other\n   * locale sits under `/<locale>/<routePath>`. `x-default` always\n   * resolves to the default-locale path.\n   *\n   * Every URL emitted here is FULLY-QUALIFIED (composed against\n   * `websiteConfig.publicOrigin`) — Google's hreflang spec requires\n   * absolute URLs, and `<link rel=\"canonical\">` relies on absolute\n   * URLs to survive cross-host fetches (preview deployments, CDN\n   * edges). See `WildoMarketingWebsiteConfigSchema.publicOrigin`\n   * JSDoc for the full rationale (incl. trailing-slash rejection).\n   */\n  const routePath = manifest.routePath as unknown as string;\n  const siteOrigin = websiteConfig.publicOrigin;\n  const defaultLocale = websiteConfig.defaultLocale;\n  const currentLocaleStr = String(locale);\n\n  /**\n   * Compose the absolute URL for `(locale, routePath)` by delegating\n   * the locale-prefix decision to the shared `buildLocalizedRoutePath`\n   * helper — same routing rule that powers `WebsiteInternalLink`. This\n   * guarantees that hreflang/canonical URLs and the chrome's internal\n   * links can never disagree about how a locale is prefixed.\n   */\n  function buildAbsoluteUrl(forLocale: AvailableLanguage): string {\n    const path = buildLocalizedRoutePath({\n      locale: forLocale,\n      defaultLocale,\n      routePath,\n    });\n    return `${siteOrigin}${path}`;\n  }\n\n  const canonicalUrl = buildAbsoluteUrl(locale);\n\n  const hreflangLines: string[] = [];\n  for (const entry of websiteConfig.locales) {\n    const localeStr = String(entry.locale);\n    hreflangLines.push(\n      `<link rel=\"alternate\" hreflang=\"${escapeHtmlAttribute(localeStr)}\" href=\"${escapeHtmlAttribute(buildAbsoluteUrl(entry.locale))}\" />`,\n    );\n  }\n  hreflangLines.push(\n    `<link rel=\"alternate\" hreflang=\"x-default\" href=\"${escapeHtmlAttribute(buildAbsoluteUrl(defaultLocale))}\" />`,\n  );\n\n  /**\n   * `og:image` + `twitter:image` are emitted only when an image URL\n   * is available (page-level override OR site-level fallback).\n   * Twitter card type also flips between `summary` (no image) and\n   * `summary_large_image` (image present).\n   */\n  const ogImageLines: string[] = [];\n  if (ogImageUrl !== undefined) {\n    const ogImageAttr = escapeHtmlAttribute(ogImageUrl);\n    ogImageLines.push(\n      `<meta property=\"og:image\" content=\"${ogImageAttr}\" />`,\n      `<meta name=\"twitter:image\" content=\"${ogImageAttr}\" />`,\n    );\n  }\n  const twitterCardKind = ogImageUrl !== undefined ? 'summary_large_image' : 'summary';\n\n  /**\n   * `og:locale:alternate` — one per non-current declared locale. Open\n   * Graph spec: the `og:locale` field carries the page's primary\n   * locale; alternates declare the other locales the page is\n   * available in. Emitted in declaration order.\n   *\n   * Locale format: we emit the bare language code (`en`, `fr`) per\n   * the AvailableLanguage atom shape. Open Graph technically\n   * recommends `language_TERRITORY` (e.g. `en_US`), but Facebook /\n   * LinkedIn / Slack accept the bare language code in practice. The\n   * future fix when the platform grows territory-tagged locales is to\n   * map at this site (no consumer change required).\n   */\n  const ogLocaleAlternateLines: string[] = [];\n  for (const entry of websiteConfig.locales) {\n    const localeStr = String(entry.locale);\n    if (localeStr === currentLocaleStr) continue;\n    ogLocaleAlternateLines.push(\n      `<meta property=\"og:locale:alternate\" content=\"${escapeHtmlAttribute(localeStr)}\" />`,\n    );\n  }\n\n  const siteNameAttr = escapeHtmlAttribute(rootConfig.seo.siteName);\n  const canonicalAttr = escapeHtmlAttribute(canonicalUrl);\n  const ogLocaleAttr = escapeHtmlAttribute(currentLocaleStr);\n\n  /**\n   * AI-training opt-out (D-AG3) — `<meta name=\"robots\" content=\"noai, noimageai\">`\n   * is emitted ONLY when the page manifest opts in via\n   * `seo.noaiOptOut: true`. Default is OPT-IN to AI training (the\n   * marketing-site default). This emission pairs with the sibling\n   * `_headers` entry produced by `renderWebsitePageNoaiHeaders()`\n   * for crawlers that don't honor in-document meta.\n   *\n   * Format: `noai` (block AI training on text) and `noimageai`\n   * (block AI training on images) are the two robots directives the\n   * major AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.)\n   * recognise. Emitting them as a single comma-separated `content`\n   * value is the canonical robots-meta shape.\n   */\n  const noaiMetaLines: string[] = [];\n  if (manifest.seo?.noaiOptOut === true) {\n    noaiMetaLines.push(`<meta name=\"robots\" content=\"noai, noimageai\" />`);\n  }\n\n  return [\n    `<title>${titleText}</title>`,\n    `<meta name=\"description\" content=\"${descriptionAttr}\" />`,\n    `<link rel=\"canonical\" href=\"${canonicalAttr}\" />`,\n    `<meta property=\"og:title\" content=\"${titleAttr}\" />`,\n    `<meta property=\"og:description\" content=\"${descriptionAttr}\" />`,\n    `<meta property=\"og:type\" content=\"website\" />`,\n    `<meta property=\"og:url\" content=\"${canonicalAttr}\" />`,\n    `<meta property=\"og:site_name\" content=\"${siteNameAttr}\" />`,\n    `<meta property=\"og:locale\" content=\"${ogLocaleAttr}\" />`,\n    ...ogLocaleAlternateLines,\n    ...ogImageLines,\n    `<meta name=\"twitter:card\" content=\"${twitterCardKind}\" />`,\n    `<meta name=\"twitter:title\" content=\"${titleAttr}\" />`,\n    `<meta name=\"twitter:description\" content=\"${descriptionAttr}\" />`,\n    ...noaiMetaLines,\n    ...hreflangLines,\n  ].join('\\n');\n}\n\n/**\n * Flatten `WebsiteDesignTokens` to a `:root { … }` block of CSS custom\n * properties. Naming convention: `--website-<group>-<token>` for nested\n * groups (`colors.primary` → `--website-colors-primary`); top-level\n * string-valued tokens (none today, future-proofed) emit as\n * `--website-<token>`.\n *\n * **Why scoped to `:root`** rather than `<WebsitePageLayout>`'s root\n * div: marketing pages frequently embed third-party widgets (live-chat,\n * analytics overlays) that paint outside the React tree. Scoping\n * tokens to `:root` makes them visible to those widgets too. The\n * design-token surface is small enough that the cost of a broader\n * scope (token-name collisions with consumer-authored `:root` rules)\n * is bounded by the `--website-` prefix.\n */\nexport function renderWebsiteDesignTokensCss(tokens: WebsiteDesignTokens): string {\n  const lines: string[] = [':root {'];\n  for (const [groupName, groupValue] of Object.entries(tokens) as [string, unknown][]) {\n    if (groupValue !== null && typeof groupValue === 'object' && !Array.isArray(groupValue)) {\n      for (const [tokenName, tokenValue] of Object.entries(groupValue) as [string, unknown][]) {\n        if (typeof tokenValue === 'string') {\n          lines.push(`  --website-${groupName}-${tokenName}: ${tokenValue};`);\n        }\n      }\n    } else if (typeof groupValue === 'string') {\n      lines.push(`  --website-${groupName}: ${groupValue};`);\n    }\n  }\n  lines.push('}');\n  return lines.join('\\n');\n}\n\n/**\n * @wildo_source:part:end saas.website.astro.head-renderer\n *\n * HTML escape helpers moved to `./internal/html-escape.ts` (Phase 7)\n * so the new `blog-post-head.renderer.ts` sibling can share the same\n * escape contract instead of redefining it. See that module's preamble\n * for the framework-mindset rationale (one escape contract per engine,\n * not one per renderer).\n */\n"]}
+{"version":3,"file":"website-page-head.renderer.js","sourceRoot":"","sources":["../../../src/astro/website-page-head.renderer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAKjF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAkE7E,MAAM,UAAU,yBAAyB,CAAC,IAAsC;IAC9E,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;IAElD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,QAA6B,CAAC;IACtE,MAAM,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC,cAAmC,CAAC;IAClF,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,eAAe;YACzE,uBAAuB,QAAQ,gBAAgB,QAAQ,CAAC,GAAwB,MAAM;YACtF,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,eAAe;YACzE,6BAA6B,cAAc,gBAAgB,QAAQ,CAAC,GAAwB,MAAM;YAClG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACzF,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAExC;;;;;;;;;;;;OAYG;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA8B,CAAC;IAC1D,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,CAAC;IAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;IAClD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAExC;;;;;;OAMG;IACH,SAAS,gBAAgB,CAAC,SAA4B;QACpD,MAAM,IAAI,GAAG,uBAAuB,CAAC;YACnC,MAAM,EAAE,SAAS;YACjB,aAAa;YACb,SAAS;SACV,CAAC,CAAC;QACH,OAAO,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,CAChB,mCAAmC,mBAAmB,CAAC,SAAS,CAAC,WAAW,mBAAmB,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CACtI,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,IAAI,CAChB,oDAAoD,mBAAmB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,MAAM,CAC/G,CAAC;IAEF;;;;;OAKG;IACH,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACpD,YAAY,CAAC,IAAI,CACf,sCAAsC,WAAW,MAAM,EACvD,uCAAuC,WAAW,MAAM,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF;;;;;;;;;;;;OAYG;IACH,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,gBAAgB;YAAE,SAAS;QAC7C,sBAAsB,CAAC,IAAI,CACzB,iDAAiD,mBAAmB,CAAC,SAAS,CAAC,MAAM,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAE3D;;;;;;;;;;;;;;OAcG;IACH,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IACD;;;;;;;;OAQG;IACH,IAAI,QAAQ,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QACtC,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD;;;OAGG;IACH,MAAM,aAAa,GAAa,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,CAAC,gCAAgC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,UAAU,SAAS,UAAU;QAC7B,qCAAqC,eAAe,MAAM;QAC1D,+BAA+B,aAAa,MAAM;QAClD,sCAAsC,SAAS,MAAM;QACrD,4CAA4C,eAAe,MAAM;QACjE,+CAA+C;QAC/C,oCAAoC,aAAa,MAAM;QACvD,0CAA0C,YAAY,MAAM;QAC5D,uCAAuC,YAAY,MAAM;QACzD,GAAG,sBAAsB;QACzB,GAAG,YAAY;QACf,sCAAsC,eAAe,MAAM;QAC3D,uCAAuC,SAAS,MAAM;QACtD,6CAA6C,eAAe,MAAM;QAClE,GAAG,aAAa;QAChB,GAAG,aAAa;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA2B;IACtE,MAAM,KAAK,GAAa,CAAC,SAAS,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwB,EAAE,CAAC;QACpF,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAwB,EAAE,CAAC;gBACxF,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,KAAK,UAAU,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG","sourcesContent":["import type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n\nimport { buildLocalizedRoutePath } from '../core/routing/internal-routing.utils';\nimport type { WebsiteDesignTokens } from '../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { WebsitePageManifest } from '../schemas/manifests/website-page-manifest.shared.schemas';\nimport type { LabelPack } from '../schemas/validators/label-pack.validator';\n\nimport { escapeHtmlAttribute, escapeHtmlText } from './internal/html-escape';\nimport type { WebsiteSiteContext } from './website-site-context';\n\n/**\n * @wildo_source:part:start saas.website.astro.head-renderer facet:layer:astro facet:family:website\n *\n * Head-block renderers — pure string builders the consumer's per-page\n * `.astro` file injects via `<Fragment set:html={...}/>` /\n * `<style set:html={...}></style>`. Two functions:\n *\n *   - `renderWebsitePageHeadHtml(opts)` — emits the complete SEO\n *     `<head>` block: `<title>`, meta description, full Open Graph\n *     card (`og:title` / `og:description` / `og:type` / `og:url` /\n *     `og:site_name` / `og:locale` / `og:locale:alternate` / optional\n *     `og:image`), Twitter card mirrors, `<link rel=\"canonical\">`,\n *     and one `<link rel=\"alternate\" hreflang>` per declared locale\n *     (plus an `x-default` for Google's i18n discoverability). Every\n *     URL is ABSOLUTE (composed from `websiteConfig.publicOrigin` +\n *     the page's `routePath`) — relative hreflang/canonical\n *     annotations are not honored consistently across crawlers\n *     (Phase 6 audit findings H-B / H-C / M-A).\n *   - `renderWebsiteDesignTokensCss(tokens)` — flattens the design-token\n *     bundle into `--website-*` custom properties scoped to `:root`.\n *     Server-static — zero island JS.\n *\n * **Why pure string builders** (rather than React components or Astro\n * components):\n *\n *   1. **Avoids the `.astro` distribution problem.** A `.astro` shell\n *      cannot be re-exported from a TS subpath barrel and `tsc` does\n *      not copy `.astro` files to `dist/`. Pure TS sidesteps both.\n *   2. **Avoids the React-island boundary.** Rendering head content\n *      via React would require either (a) a server-only React subtree\n *      (extra moving part) or (b) hydrating the `<head>` on the client\n *      (waste of bundle size for static-build content).\n *   3. **Vitest-friendly.** Pure functions returning strings are\n *      trivially asserted against without an Astro test harness.\n *\n * **HTML escaping**: every consumer-supplied string (title,\n * description, OG image URL, hreflang values) is escaped with\n * `escapeHtmlAttribute` / `escapeHtmlText` before interpolation into\n * the emitted markup. Marketing copy frequently contains characters\n * (quotes, ampersands, the rare `<`) that would break the surrounding\n * tag if interpolated raw — escaping is non-negotiable for a public\n * surface.\n *\n * **Failure modes** — `renderWebsitePageHeadHtml` throws when:\n *   - `manifest.metaLabelKeys.titleKey` is absent from the pack\n *   - `manifest.metaLabelKeys.descriptionKey` is absent from the pack\n * Both throw with the locale + key + actionable next step (`Run\n * \\`wildo website audit\\` or add the entry to <pack-path>.json`).\n */\n\nexport interface RenderWebsitePageHeadHtmlOptions {\n  manifest: WebsitePageManifest;\n  /**\n   * Composed `WebsiteSiteContext` — the renderer reads\n   * `websiteConfig.{defaultLocale, locales, publicOrigin}` for the\n   * URL/locale surface and `rootConfig.seo.{siteName, defaultOgImageUrl}`\n   * for the SEO branding fallback.\n   */\n  siteContext: WebsiteSiteContext;\n  locale: AvailableLanguage;\n  labelPack: LabelPack;\n}\n\nexport function renderWebsitePageHeadHtml(opts: RenderWebsitePageHeadHtmlOptions): string {\n  const { manifest, siteContext, locale, labelPack } = opts;\n  const { rootConfig, websiteConfig } = siteContext;\n\n  const titleKey = manifest.metaLabelKeys.titleKey as unknown as string;\n  const descriptionKey = manifest.metaLabelKeys.descriptionKey as unknown as string;\n  const title = labelPack[titleKey];\n  const description = labelPack[descriptionKey];\n\n  if (title === undefined) {\n    throw new Error(\n      `[renderWebsitePageHeadHtml] Label pack for locale \"${locale}\" is missing ` +\n        `the page title key \"${titleKey}\" (page ref=\"${manifest.ref as unknown as string}\"). ` +\n        `Run \\`wildo website audit\\` or add the entry to your <locale>.json pack.`,\n    );\n  }\n  if (description === undefined) {\n    throw new Error(\n      `[renderWebsitePageHeadHtml] Label pack for locale \"${locale}\" is missing ` +\n        `the page description key \"${descriptionKey}\" (page ref=\"${manifest.ref as unknown as string}\"). ` +\n        `Run \\`wildo website audit\\` or add the entry to your <locale>.json pack.`,\n    );\n  }\n\n  /**\n   * OG image precedence: per-page `manifest.metaLabelKeys.ogImageUrl`\n   * wins; falls back to the site-level `seo.defaultOgImageUrl` so\n   * marketing pages without a hero image still produce a richer\n   * social-card (Phase 6 audit fix M-A). When neither is present,\n   * the Twitter card kind degrades to the smaller `summary` and the\n   * `og:image` / `twitter:image` lines are omitted entirely.\n   */\n  const ogImageUrl = manifest.metaLabelKeys.ogImageUrl ?? rootConfig.seo.defaultOgImageUrl;\n  const titleAttr = escapeHtmlAttribute(title);\n  const descriptionAttr = escapeHtmlAttribute(description);\n  const titleText = escapeHtmlText(title);\n\n  /**\n   * Absolute URL builder. `prefixDefaultLocale: false` means the\n   * default locale lives at the locale-neutral path; every other\n   * locale sits under `/<locale>/<routePath>`. `x-default` always\n   * resolves to the default-locale path.\n   *\n   * Every URL emitted here is FULLY-QUALIFIED (composed against\n   * `websiteConfig.publicOrigin`) — Google's hreflang spec requires\n   * absolute URLs, and `<link rel=\"canonical\">` relies on absolute\n   * URLs to survive cross-host fetches (preview deployments, CDN\n   * edges). See `WildoMarketingWebsiteConfigSchema.publicOrigin`\n   * JSDoc for the full rationale (incl. trailing-slash rejection).\n   */\n  const routePath = manifest.routePath as unknown as string;\n  const siteOrigin = websiteConfig.publicOrigin;\n  const defaultLocale = websiteConfig.defaultLocale;\n  const currentLocaleStr = String(locale);\n\n  /**\n   * Compose the absolute URL for `(locale, routePath)` by delegating\n   * the locale-prefix decision to the shared `buildLocalizedRoutePath`\n   * helper — same routing rule that powers `WebsiteInternalLink`. This\n   * guarantees that hreflang/canonical URLs and the chrome's internal\n   * links can never disagree about how a locale is prefixed.\n   */\n  function buildAbsoluteUrl(forLocale: AvailableLanguage): string {\n    const path = buildLocalizedRoutePath({\n      locale: forLocale,\n      defaultLocale,\n      routePath,\n    });\n    return `${siteOrigin}${path}`;\n  }\n\n  const canonicalUrl = buildAbsoluteUrl(locale);\n\n  const hreflangLines: string[] = [];\n  for (const entry of websiteConfig.locales) {\n    const localeStr = String(entry.locale);\n    hreflangLines.push(\n      `<link rel=\"alternate\" hreflang=\"${escapeHtmlAttribute(localeStr)}\" href=\"${escapeHtmlAttribute(buildAbsoluteUrl(entry.locale))}\" />`,\n    );\n  }\n  hreflangLines.push(\n    `<link rel=\"alternate\" hreflang=\"x-default\" href=\"${escapeHtmlAttribute(buildAbsoluteUrl(defaultLocale))}\" />`,\n  );\n\n  /**\n   * `og:image` + `twitter:image` are emitted only when an image URL\n   * is available (page-level override OR site-level fallback).\n   * Twitter card type also flips between `summary` (no image) and\n   * `summary_large_image` (image present).\n   */\n  const ogImageLines: string[] = [];\n  if (ogImageUrl !== undefined) {\n    const ogImageAttr = escapeHtmlAttribute(ogImageUrl);\n    ogImageLines.push(\n      `<meta property=\"og:image\" content=\"${ogImageAttr}\" />`,\n      `<meta name=\"twitter:image\" content=\"${ogImageAttr}\" />`,\n    );\n  }\n  const twitterCardKind = ogImageUrl !== undefined ? 'summary_large_image' : 'summary';\n\n  /**\n   * `og:locale:alternate` — one per non-current declared locale. Open\n   * Graph spec: the `og:locale` field carries the page's primary\n   * locale; alternates declare the other locales the page is\n   * available in. Emitted in declaration order.\n   *\n   * Locale format: we emit the bare language code (`en`, `fr`) per\n   * the AvailableLanguage atom shape. Open Graph technically\n   * recommends `language_TERRITORY` (e.g. `en_US`), but Facebook /\n   * LinkedIn / Slack accept the bare language code in practice. The\n   * future fix when the platform grows territory-tagged locales is to\n   * map at this site (no consumer change required).\n   */\n  const ogLocaleAlternateLines: string[] = [];\n  for (const entry of websiteConfig.locales) {\n    const localeStr = String(entry.locale);\n    if (localeStr === currentLocaleStr) continue;\n    ogLocaleAlternateLines.push(\n      `<meta property=\"og:locale:alternate\" content=\"${escapeHtmlAttribute(localeStr)}\" />`,\n    );\n  }\n\n  const siteNameAttr = escapeHtmlAttribute(rootConfig.seo.siteName);\n  const canonicalAttr = escapeHtmlAttribute(canonicalUrl);\n  const ogLocaleAttr = escapeHtmlAttribute(currentLocaleStr);\n\n  /**\n   * SITE-WIDE `noindex` (#494) — the directive that actually keeps a site out of search.\n   *\n   * `robots.txt` `Disallow` governs CRAWLING, not INDEXING: a disallowed URL can still be listed, as a\n   * bare URL with no snippet, if anything links to it. Only this directive de-indexes. Until 2026-09-08\n   * a site declared `noindex` emitted the `Disallow` and NOT this, so it was closed to well-behaved\n   * crawlers and still indexable — the weaker half of the pair.\n   *\n   * The two are also mutually defeating, which is why `renderRobotsTxt` no longer emits `Disallow: /`\n   * for this policy: a crawler barred from fetching the page never reads the directive telling it not\n   * to index. To stay out of search you must let the crawler IN and tell it no.\n   *\n   * `noindex` only — not `noindex, nofollow`. `nofollow` additionally suppresses link discovery, which\n   * is a broader claim than \"keep this out of the index\" and is not what the policy declares.\n   */\n  const robotsDirectives: string[] = [];\n  if (rootConfig.seo.robots?.policy === 'noindex') {\n    robotsDirectives.push('noindex');\n  }\n  /**\n   * AI-training opt-out (D-AG3) — emitted ONLY when the page manifest opts in via\n   * `seo.noaiOptOut: true`. Default is OPT-IN to AI training (the marketing-site default). This\n   * emission pairs with the sibling `_headers` entry produced by `renderWebsitePageNoaiHeaders()`\n   * for crawlers that don't honor in-document meta.\n   *\n   * `noai` (block AI training on text) and `noimageai` (block AI training on images) are the two\n   * directives the major AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.) recognise.\n   */\n  if (manifest.seo?.noaiOptOut === true) {\n    robotsDirectives.push('noai', 'noimageai');\n  }\n  /*\n   * ONE `<meta name=\"robots\">`, carrying every directive comma-separated — the canonical shape. Two\n   * separate robots meta tags are legal and are read inconsistently; merging avoids the question.\n   */\n  const noaiMetaLines: string[] = robotsDirectives.length > 0\n    ? [`<meta name=\"robots\" content=\"${robotsDirectives.join(', ')}\" />`]\n    : [];\n\n  return [\n    `<title>${titleText}</title>`,\n    `<meta name=\"description\" content=\"${descriptionAttr}\" />`,\n    `<link rel=\"canonical\" href=\"${canonicalAttr}\" />`,\n    `<meta property=\"og:title\" content=\"${titleAttr}\" />`,\n    `<meta property=\"og:description\" content=\"${descriptionAttr}\" />`,\n    `<meta property=\"og:type\" content=\"website\" />`,\n    `<meta property=\"og:url\" content=\"${canonicalAttr}\" />`,\n    `<meta property=\"og:site_name\" content=\"${siteNameAttr}\" />`,\n    `<meta property=\"og:locale\" content=\"${ogLocaleAttr}\" />`,\n    ...ogLocaleAlternateLines,\n    ...ogImageLines,\n    `<meta name=\"twitter:card\" content=\"${twitterCardKind}\" />`,\n    `<meta name=\"twitter:title\" content=\"${titleAttr}\" />`,\n    `<meta name=\"twitter:description\" content=\"${descriptionAttr}\" />`,\n    ...noaiMetaLines,\n    ...hreflangLines,\n  ].join('\\n');\n}\n\n/**\n * Flatten `WebsiteDesignTokens` to a `:root { … }` block of CSS custom\n * properties. Naming convention: `--website-<group>-<token>` for nested\n * groups (`colors.primary` → `--website-colors-primary`); top-level\n * string-valued tokens (none today, future-proofed) emit as\n * `--website-<token>`.\n *\n * **Why scoped to `:root`** rather than `<WebsitePageLayout>`'s root\n * div: marketing pages frequently embed third-party widgets (live-chat,\n * analytics overlays) that paint outside the React tree. Scoping\n * tokens to `:root` makes them visible to those widgets too. The\n * design-token surface is small enough that the cost of a broader\n * scope (token-name collisions with consumer-authored `:root` rules)\n * is bounded by the `--website-` prefix.\n */\nexport function renderWebsiteDesignTokensCss(tokens: WebsiteDesignTokens): string {\n  const lines: string[] = [':root {'];\n  for (const [groupName, groupValue] of Object.entries(tokens) as [string, unknown][]) {\n    if (groupValue !== null && typeof groupValue === 'object' && !Array.isArray(groupValue)) {\n      for (const [tokenName, tokenValue] of Object.entries(groupValue) as [string, unknown][]) {\n        if (typeof tokenValue === 'string') {\n          lines.push(`  --website-${groupName}-${tokenName}: ${tokenValue};`);\n        }\n      }\n    } else if (typeof groupValue === 'string') {\n      lines.push(`  --website-${groupName}: ${groupValue};`);\n    }\n  }\n  lines.push('}');\n  return lines.join('\\n');\n}\n\n/**\n * @wildo_source:part:end saas.website.astro.head-renderer\n *\n * HTML escape helpers moved to `./internal/html-escape.ts` (Phase 7)\n * so the new `blog-post-head.renderer.ts` sibling can share the same\n * escape contract instead of redefining it. See that module's preamble\n * for the framework-mindset rationale (one escape contract per engine,\n * not one per renderer).\n */\n"]}

package/dist/esm/astro/website-page-runtime.helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"website-page-runtime.helper.d.ts","sourceRoot":"","sources":["../../../../src/astro/website-page-runtime.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2DAA2D,CAAC;AACrG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAI5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,gFAAgF;IAChF,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,yEAAyE;IACzE,WAAW,EAAE,kBAAkB,CAAC;IAChC,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;OAQG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC,qEAAqE;IACrE,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,6BAA6B,GAClC,kBAAkB,CAqCpB;AA+BD,+DAA+D"}
+{"version":3,"file":"website-page-runtime.helper.d.ts","sourceRoot":"","sources":["../../../src/astro/website-page-runtime.helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2DAA2D,CAAC;AACrG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAI5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,gFAAgF;IAChF,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,yEAAyE;IACzE,WAAW,EAAE,kBAAkB,CAAC;IAChC,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;OAQG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC,qEAAqE;IACrE,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,6BAA6B,GAClC,kBAAkB,CAqCpB;AA+BD,+DAA+D"}

package/dist/esm/astro/website-site-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"website-site-context.d.ts","sourceRoot":"","sources":["../../../../src/astro/website-site-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AACjG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAEvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,CAMpB;AACD,6DAA6D"}
+{"version":3,"file":"website-site-context.d.ts","sourceRoot":"","sources":["../../../src/astro/website-site-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AACjG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAEvC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,kBAAkB,GACxB,kBAAkB,CAMpB;AACD,6DAA6D"}

package/dist/esm/astro-island.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"astro-island.d.ts","sourceRoot":"","sources":["../../../src/astro-island.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAOH,cAAc,wBAAwB,CAAC;AACvC;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"astro-island.d.ts","sourceRoot":"","sources":["../../src/astro-island.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAOH,cAAc,wBAAwB,CAAC;AACvC;;;;;;;;;;;;;;GAcG"}

package/dist/esm/astro.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"astro.d.ts","sourceRoot":"","sources":["../../../src/astro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C;;;;;;;;;;;GAWG;AACH,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD;;;;;;;;GAQG;AACH,cAAc,iCAAiC,CAAC;AAChD;;;;;;;;GAQG;AACH,cAAc,yBAAyB,CAAC;AACxC;;;;;;;;;;;;;;;;;;GAkBG;AACH,cAAc,0BAA0B,CAAC;AACzC;;;;;;;;;;GAUG;AACH,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC;;;;;;;;GAQG;AACH,cAAc,kEAAkE,CAAC"}
+{"version":3,"file":"astro.d.ts","sourceRoot":"","sources":["../../src/astro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C;;;;;;;;;;;GAWG;AACH,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD;;;;;;;;GAQG;AACH,cAAc,iCAAiC,CAAC;AAChD;;;;;;;;GAQG;AACH,cAAc,yBAAyB,CAAC;AACxC;;;;;;;;;;;;;;;;;;GAkBG;AACH,cAAc,0BAA0B,CAAC;AACzC;;;;;;;;;;GAUG;AACH,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC;;;;;;;;GAQG;AACH,cAAc,kEAAkE,CAAC"}

package/dist/esm/companion-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC"}
+{"version":3,"file":"companion-exports.d.ts","sourceRoot":"","sources":["../../src/companion-exports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,oDAAoD,CAAC;AACnE,cAAc,8DAA8D,CAAC;AAC7E,cAAc,8DAA8D,CAAC;AAC7E,cAAc,0DAA0D,CAAC;AACzE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qDAAqD,CAAC;AACpE,cAAc,2CAA2C,CAAC"}

package/dist/esm/components/low-level/WebsiteInternalButton.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteInternalButton.d.ts","sourceRoot":"","sources":["../../../../../src/components/low-level/WebsiteInternalButton.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAOlE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AAmBzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,EACpC,SAAS,EACT,OAAO,EACP,IAAI,EACJ,SAAS,EACT,KAAK,EACL,EAAE,EACF,SAAS,EACT,QAAQ,GACT,EAAE,0BAA0B,GAAG,SAAS,CA+CxC;yBAxDe,qBAAqB;;;AA0DrC,qEAAqE"}
+{"version":3,"file":"WebsiteInternalButton.d.ts","sourceRoot":"","sources":["../../../../src/components/low-level/WebsiteInternalButton.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAOlE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AAmBzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,EACpC,SAAS,EACT,OAAO,EACP,IAAI,EACJ,SAAS,EACT,KAAK,EACL,EAAE,EACF,SAAS,EACT,QAAQ,GACT,EAAE,0BAA0B,GAAG,SAAS,CA+CxC;yBAxDe,qBAAqB;;;AA0DrC,qEAAqE"}

package/dist/esm/components/low-level/WebsiteInternalLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteInternalLink.d.ts","sourceRoot":"","sources":["../../../../../src/components/low-level/WebsiteInternalLink.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AASlE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAqCD,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,SAAS,EACT,KAAK,EACL,EAAE,EACF,SAAS,EACT,QAAQ,GACT,EAAE,wBAAwB,GAAG,SAAS,CA8CtC;yBArDe,mBAAmB;;;AAuDnC,mEAAmE"}
+{"version":3,"file":"WebsiteInternalLink.d.ts","sourceRoot":"","sources":["../../../../src/components/low-level/WebsiteInternalLink.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AASlE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAqCD,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,SAAS,EACT,KAAK,EACL,EAAE,EACF,SAAS,EACT,QAAQ,GACT,EAAE,wBAAwB,GAAG,SAAS,CA8CtC;yBArDe,mBAAmB;;;AAuDnC,mEAAmE"}

package/dist/esm/config/define-website-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-website-config.d.ts","sourceRoot":"","sources":["../../../../src/config/define-website-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gCAAgC,GACvC,2BAA2B,CAI7B"}
+{"version":3,"file":"define-website-config.d.ts","sourceRoot":"","sources":["../../../src/config/define-website-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gCAAgC,GACvC,2BAA2B,CAI7B"}

package/dist/esm/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC"}

package/dist/esm/config/load-website-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-website-config.d.ts","sourceRoot":"","sources":["../../../../src/config/load-website-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,oCAAoC,4BAA4B,CAAC;AAkB9E;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,2BAA2B,GAClC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,2BAA2B,CAAC,CA4DtC"}
+{"version":3,"file":"load-website-config.d.ts","sourceRoot":"","sources":["../../../src/config/load-website-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,oCAAoC,4BAA4B,CAAC;AAkB9E;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,2BAA2B,GAClC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,2BAA2B,CAAC,CA4DtC"}

package/dist/esm/config/wildo-website-config.schemas.d.ts

@@ -16,11 +16,18 @@
  *     `<link rel="canonical">`, `og:url`, hreflang `href` URLs and
  *     the structured-data `mainEntityOfPage`. The previous
  *     `WebsiteRootConfig.seo.siteOrigin` was deleted.
- *   - `appOrigin` — has NO runtime consumer today. The
- *     marketing → app handoff link surface that will read it does
- *     not exist yet. Authored eagerly so the link-surface PR is a
- *     single framework-owned move; until then the field is exercised
- *     only by the schema parser.
+ *   - `appOrigin` — the marketing → app handoff target, read at runtime
+ *     since #493. A `wildo.website.config.ts` is Node-loaded and so
+ *     invisible to a client island, which is why this value reaches the
+ *     browser the way `apiOrigin` does: the `.astro` page forwards it to
+ *     its bridge island, which puts it on `WebsiteRuntimeContext.appOrigin`
+ *     for the CTA to read.
+ *
+ *     It previously had NO runtime consumer, and a site resolved the app
+ *     origin a SECOND time from a public build-time environment variable —
+ *     one host authored twice with no mechanical link, and a silent
+ *     fallback to localhost when the variable was unset. That is how a
+ *     marketing site comes to point at the wrong environment.
  *   - `csp?` — read by the website-local `sync-nginx-csp` build step,
  *     which merges the app-static posture with `infra.csp?.<serviceKey>`,
  *     emits the generated artifact consumed by Astro pages, and rewrites

package/dist/esm/config/wildo-website-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-website-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;kBASpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,iCAAiC;IAE1C;;;;;;;;;;OAUG;;IASH;;;;;;;;;;;;;;OAcG;;IAGH;;;;;;;;;;;;;;;;;;;;;;OAsBG;;IAWH;;;;;OAKG;;;;;;;;IAGH;;;;;;;;;OASG;;IAGH;;;;;;;;;OASG;;;;;kBAqDH,CAAC;AACL,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AACjG,wDAAwD"}
+{"version":3,"file":"wildo-website-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsHG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB;;;kBASpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,iCAAiC;IAE1C;;;;;;;;;;OAUG;;IASH;;;;;;;;;;;;;;OAcG;;IAGH;;;;;;;;;;;;;;;;;;;;;;OAsBG;;IAWH;;;;;OAKG;;;;;;;;IAGH;;;;;;;;;OASG;;IAGH;;;;;;;;;OASG;;;;;kBAqDH,CAAC;AACL,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AACjG,wDAAwD"}

package/dist/esm/config/wildo-website-config.schemas.js

@@ -16,11 +16,18 @@
  *     `<link rel="canonical">`, `og:url`, hreflang `href` URLs and
  *     the structured-data `mainEntityOfPage`. The previous
  *     `WebsiteRootConfig.seo.siteOrigin` was deleted.
- *   - `appOrigin` — has NO runtime consumer today. The
- *     marketing → app handoff link surface that will read it does
- *     not exist yet. Authored eagerly so the link-surface PR is a
- *     single framework-owned move; until then the field is exercised
- *     only by the schema parser.
+ *   - `appOrigin` — the marketing → app handoff target, read at runtime
+ *     since #493. A `wildo.website.config.ts` is Node-loaded and so
+ *     invisible to a client island, which is why this value reaches the
+ *     browser the way `apiOrigin` does: the `.astro` page forwards it to
+ *     its bridge island, which puts it on `WebsiteRuntimeContext.appOrigin`
+ *     for the CTA to read.
+ *
+ *     It previously had NO runtime consumer, and a site resolved the app
+ *     origin a SECOND time from a public build-time environment variable —
+ *     one host authored twice with no mechanical link, and a silent
+ *     fallback to localhost when the variable was unset. That is how a
+ *     marketing site comes to point at the wrong environment.
  *   - `csp?` — read by the website-local `sync-nginx-csp` build step,
  *     which merges the app-static posture with `infra.csp?.<serviceKey>`,
  *     emits the generated artifact consumed by Astro pages, and rewrites

package/dist/esm/config/wildo-website-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"wildo-website-config.schemas.js","sourceRoot":"","sources":["../../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACjC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,cAAc,EACd,iFAAiF,CAClF;CACJ,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,YAAY,CAAC;IACZ;;;;;;;;;;OAUG;IACH,YAAY,EAAE,CAAC;SACZ,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,2EAA2E;YAC3E,iFAAiF;KACpF,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;IAElB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,EAAE,CAAC;SACT,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,6EAA6E;YAC7E,8EAA8E;YAC9E,kBAAkB;KACrB,CAAC;SACD,QAAQ,EAAE;IAEb;;;;;OAKG;IACH,GAAG,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAEpC;;;;;;;;;OASG;IACH,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAExC;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,kBAAkB,MAAM,CAAC,aAAa,iCAAiC;gBACvE,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;gBACvE,sDAAsD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,gBAAgB,KAAK,CAAC,IAAI,0BAA0B,QAAQ,QAAQ;oBACpE,IAAI,KAAK,CAAC,MAAM,qDAAqD;aACxE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,6DAA6D;IAC7D,kEAAkE;IAClE,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,WAAW,KAAK,CAAC,MAAM,+BAA+B,YAAY,IAAI;oBACtE,QAAQ,KAAK,CAAC,IAAI,2CAA2C;aAChE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,wDAAwD","sourcesContent":["/**\n * @wildo_source:part:start engine.saas-website.config facet:layer:engine facet:family:marketing-website\n *\n * Per-service marketing-website configuration block, authored in\n * the website service folder as `wildo.website.config.ts`.\n *\n * # What this file's loaded value is used for TODAY\n *\n * This schema is the single source of truth for the marketing-site routing\n * and origin surface. Every consumer reads here:\n *\n *   - `defaultLocale` + `locales` — read by `buildAstroI18nConfig(...)`,\n *     `assertLabelPacksValid(...)`, `loadWebsitePageRuntime(...)` and\n *     `renderWebsitePageHeadHtml(...)` via the shared `WebsiteSiteContext`.\n *   - `publicOrigin` — read by the head renderer to compose absolute\n *     `<link rel=\"canonical\">`, `og:url`, hreflang `href` URLs and\n *     the structured-data `mainEntityOfPage`. The previous\n *     `WebsiteRootConfig.seo.siteOrigin` was deleted.\n *   - `appOrigin` — has NO runtime consumer today. The\n *     marketing → app handoff link surface that will read it does\n *     not exist yet. Authored eagerly so the link-surface PR is a\n *     single framework-owned move; until then the field is exercised\n *     only by the schema parser.\n *   - `csp?` — read by the website-local `sync-nginx-csp` build step,\n *     which merges the app-static posture with `infra.csp?.<serviceKey>`,\n *     emits the generated artifact consumed by Astro pages, and rewrites\n *     the checked-in nginx marker file used by the website Docker image.\n *\n * Future companion subprocesses that introspect the marketing\n * surface (locale-coverage audits, label-pack validation against\n * authored locales, SEO-link sanity checks) will also read here —\n * none exist today.\n *\n * # Why this is per-service website configuration\n *\n * Co-locating the schema with the engine package that owns its semantics\n * keeps three concerns separate from application-root service declarations:\n *\n *   1. **Right reuse axis.** Marketing-site content (locales, SEO origins,\n *      future label-pack overrides, marketing-only CTAs) is conceptually\n *      different from saas-app-level service declarations (`path`,\n *      `serviceName`, `frontendType`, `sessionStorage`). The marketing\n *      config travels with the website service folder, NOT with the\n *      SaaS app root. Two unrelated lifecycles, two different review\n *      audiences.\n *   2. **Engine boundary.** `platform-config-lib` no longer needs to\n *      depend on `@wildo-ai/presets-components-models` (the home of\n *      `AvailableLanguage`) just to type the marketing-site locale\n *      enum. Adding a new website primitive (a new SEO field, a new\n *      locale-pack id) belongs with the website package and its public\n *      configuration contract.\n *   3. **Disambiguator hazard.** The previous root-level\n *      `marketingWebsite?` block silently assumed \"one STATIC_WEBSITE\n *      service per SaaS app\" — but nothing in the schema enforced it.\n *      Two STATIC_WEBSITE services would have silently shared one\n *      config block with no obvious \"which one wins?\" answer. The\n *      application configuration rejects more than one STATIC_WEBSITE (and\n *      TECH_DOC) service, so the per-service config-file lookup is\n *      deterministic by construction.\n *\n * # Schema decisions encoded here\n *\n * - `z.strictObject` so authoring an unknown key surfaces as a parse\n *   error at `defineWebsiteConfig` time instead of being silently\n *   dropped (same posture as `WildoSaasConfigSchema` and\n *   `WildoTechnicalDocConfigSchema`).\n *\n * - **No `enabled` field.** The gate is \"is there a `wildo.website.config.ts`\n *   in a `frontendType: STATIC_WEBSITE` service folder?\" — file\n *   presence under a STATIC_WEBSITE service IS the enable signal.\n *   The Astro build / dev companion / future audit CLI requires the\n *   file when it walks a STATIC_WEBSITE service folder, so a\n *   half-authored config simply cannot exist (the loader fails\n *   closed). Removing the boolean closes a foot-gun: an authored\n *   `enabled: false` block was previously a silent way to keep the\n *   config \"warm\" without shipping anything, and consumers had to\n *   remember to read the flag in addition to the file presence — a\n *   future read-the-config / forget-the-flag bug waiting to happen.\n *   A separate `services.<key>.enabled` pattern (orthogonal to\n *   marketing-website) is the right place for any \"temporarily\n *   disable this service\" story (deferred — see DASHBOARD).\n *\n * - URL fields are `z.url()` (Zod 4 native validator) so we get\n *   protocol + host parsing for free, matching the rest of the\n *   codebase.\n *\n * - `csp?` is typed against `WildoCspConfigSchema` from\n *   `@wildo-ai/platform-config-lib`, mirroring the docs service's\n *   `wildo.tech-doc.config.ts` contract. The parsed value is consumed by\n *   the shared `resolveCspPolicy()` / `emitCspArtifacts()` generator flow.\n *\n * - `defaultLocale ∈ locales` cross-check via `.superRefine` —\n *   keeping `defaultLocale` as a top-level field is product-explicit\n *   (\"which locale URL is the canonical one\") and decouples it from\n *   list ordering. Locale-path uniqueness AND locale-value\n *   uniqueness are also enforced — duplicate paths would silently\n *   overwrite each other in the Astro build and corrupt the sitemap;\n *   duplicate locales would produce duplicate hreflang entries.\n *\n * - Locale primitive is `AvailableLanguage`. The schema imports it\n *   from `@wildo-ai/presets-components-models/public-runtime` (the\n *   side-effect-free public-runtime seam), but **consumers authoring\n *   `wildo.website.config.ts` must import it from\n *   `@wildo-ai/saas-models/public-runtime`**. Both paths produce identical\n *   values; saas-models simply re-exports the presets atom. Picking\n *   one path consistently across consumer files prevents drift in\n *   docs / examples / search results. Values authored in\n *   `wildo.website.config.ts` are the lowercase BCP-47 strings\n *   (`'en'`, `'fr'`), NOT the UPPERCASE TS enum member names\n *   (`EN`, `FR`). `z.enum(AvailableLanguage)` parses against the\n *   enum VALUES, which is what we want.\n */\n\nimport { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';\nimport { z } from 'zod';\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Per-locale configuration. Each authored locale gets one entry.\n *\n * `path` is the locale URL prefix segment (e.g. `'en'`, `'fr'`) — the\n * Astro builder maps `/en/...` and `/fr/...` paths via this value. We\n * do NOT auto-derive `path` from the locale string because some\n * deployments may want a flat root for the default locale (`/...`\n * instead of `/en/...`); keeping it explicit per locale leaves that\n * door open without a config-shape change.\n */\nexport const WebsiteLocaleConfigSchema = z.strictObject({\n  locale: z.enum(AvailableLanguage),\n  path: z\n    .string()\n    .min(1)\n    .regex(\n      /^[a-z0-9-]+$/,\n      'locale path must be lowercase alphanumeric with hyphens (becomes a URL segment)',\n    ),\n});\nexport type WebsiteLocaleConfig = z.infer<typeof WebsiteLocaleConfigSchema>;\n\n/**\n * Per-service marketing-website configuration block.\n *\n * Authored as `export default defineWebsiteConfig({...})` in\n * `<website-service-root>/wildo.website.config.ts`. The Astro\n * build loads this file once at bootstrap via jiti and composes\n * a `WebsiteSiteContext`; helpers consume that composed context rather than\n * this raw value.\n *\n * @example\n * ```ts\n * import { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n * import { defineWebsiteConfig } from '@wildo-ai/saas-website';\n *\n * export default defineWebsiteConfig({\n *   publicOrigin: 'https://example.com',\n *   appOrigin: 'https://app.example.com',\n *   defaultLocale: AvailableLanguage.EN,\n *   locales: [\n *     { locale: AvailableLanguage.EN, path: 'en' },\n *     { locale: AvailableLanguage.FR, path: 'fr' },\n *   ],\n *   csp: { enabled: true, reportOnly: true },\n * });\n * ```\n */\nexport const WildoMarketingWebsiteConfigSchema = z\n  .strictObject({\n    /**\n     * Public origin of the marketing site (apex / www) — canonical\n     * input the Astro head renderer emits as absolute URLs\n     * (`<link rel=\"canonical\">`, `og:url`, hreflang `href`,\n     * sitemap base, structured-data `mainEntityOfPage`).\n     *\n     * MUST NOT end with `/` — the head renderer composes\n     * `${publicOrigin}${routePath}` and a trailing slash would emit\n     * `https://example.com//`. Surface the constraint loudly here\n     * rather than silently corrupting URLs at build time.\n     */\n    publicOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.publicOrigin must NOT end with \"/\" (the head ' +\n          'renderer concatenates publicOrigin + routePath; trailing slash would emit \"//\")',\n      }),\n\n    /**\n     * Origin of the SaaS application the marketing site links into\n     * (signup / login / pricing → checkout).\n     *\n     * **Today**: NO runtime consumer. The cross-origin handoff\n     * surface that will read it does not exist yet. Authored\n     * eagerly so the link-surface PR is a single framework-owned move\n     * — until then the field is exercised only by the schema\n     * parser.\n     *\n     * Distinct from the general `WildoSaasConfig.services.<name>`\n     * URL surface because the marketing site is a separate Astro\n     * project that does not load the full SaaS app graph at build\n     * time.\n     */\n    appOrigin: z.url(),\n\n    /**\n     * Backend API origin the marketing site POSTs to for anonymous\n     * captures (lead / draft-note forms) — e.g.\n     * `https://api.example.com`. Threaded through\n     * `WebsiteRuntimeContext.apiOrigin` into the React island that\n     * constructs the `WebsiteAnonymousSessionClient`.\n     *\n     * OPTIONAL because a pure brochure site with no capture forms never\n     * talks to an API — only sites that host an anonymous-capture\n     * section need it. When such a section renders without a resolved\n     * `apiOrigin`, the section surfaces a loud misconfiguration rather\n     * than silently POSTing nowhere.\n     *\n     * MUST NOT end with `/` — the anon client composes\n     * `${apiOrigin}${MAIN_API_BASE_PATH}${path}` and a trailing slash\n     * would emit a doubled `//` in the request URL. (The client also\n     * defensively strips trailing slashes, but the refine surfaces the\n     * mistake at authoring time.)\n     *\n     * Distinct from `appOrigin` (the human-facing app the marketing CTAs\n     * link into) and `publicOrigin` (the marketing site's own canonical\n     * origin): this is the machine-to-machine API host.\n     */\n    apiOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.apiOrigin must NOT end with \"/\" (the anonymous ' +\n          'client concatenates apiOrigin + MAIN_API_BASE_PATH + path; a trailing slash ' +\n          'would emit \"//\")',\n      })\n      .optional(),\n\n    /**\n     * Optional Content-Security-Policy override for the marketing site.\n     * Consumed by the website-local `sync-nginx-csp` step, which emits\n     * the generated artifact for Astro page injection and rewrites the\n     * website nginx marker file from the same resolved output.\n     */\n    csp: WildoCspConfigSchema.optional(),\n\n    /**\n     * Default locale the marketing site serves for unmatched URLs\n     * and as the canonical hreflang signal. Must appear in\n     * `locales` below (cross-check enforced by the schema-level\n     * `.superRefine`).\n     *\n     * Read by `buildAstroI18nConfig(...)` (drives Astro's own\n     * `i18n.defaultLocale`) and by the head renderer (drives\n     * `<html lang=\"...\">`, `og:locale`, hreflang `x-default`).\n     */\n    defaultLocale: z.enum(AvailableLanguage),\n\n    /**\n     * Ordered list of locales the marketing site builds. Order is\n     * preserved (used by the language switcher rendering and by\n     * the sitemap emitter — when the sitemap surface lands).\n     *\n     * Read by `buildAstroI18nConfig(...)` (Astro `i18n.locales`),\n     * by `assertLabelPacksValid(...)` (one label pack per locale),\n     * by `loadWebsitePageRuntime(...)` (per-page locale resolution),\n     * and by the head renderer (hreflang alternates).\n     */\n    locales: z.array(WebsiteLocaleConfigSchema).min(1),\n  })\n  .superRefine((config, ctx) => {\n    const declaredLocales = new Set(config.locales.map((entry) => entry.locale));\n    if (!declaredLocales.has(config.defaultLocale)) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['defaultLocale'],\n        message:\n          `defaultLocale '${config.defaultLocale}' is not declared in 'locales' ` +\n          `(declared: [${[...declaredLocales].join(', ')}]). The default locale ` +\n          `must be one of the locales the site actually builds.`,\n      });\n    }\n\n    // Locale-path uniqueness: two entries collapsing to the same URL\n    // segment would silently overwrite each other in the Astro build\n    // and corrupt the sitemap. Fail closed at parse time.\n    const pathOwners = new Map<string, AvailableLanguage>();\n    for (const entry of config.locales) {\n      const previous = pathOwners.get(entry.path);\n      if (previous !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale path '${entry.path}' is declared by both '${previous}' and ` +\n            `'${entry.locale}'. Each locale must have a unique URL path segment.`,\n        });\n        continue;\n      }\n      pathOwners.set(entry.path, entry.locale);\n    }\n\n    // Locale-value uniqueness: same locale appearing twice would\n    // produce duplicate hreflang entries and ambiguous default-locale\n    // resolution.\n    const localeOwners = new Map<AvailableLanguage, string>();\n    for (const entry of config.locales) {\n      const previousPath = localeOwners.get(entry.locale);\n      if (previousPath !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale '${entry.locale}' is declared twice (paths '${previousPath}' ` +\n            `and '${entry.path}'). Each locale must appear at most once.`,\n        });\n        continue;\n      }\n      localeOwners.set(entry.locale, entry.path);\n    }\n  });\nexport type WildoMarketingWebsiteConfig = z.infer<typeof WildoMarketingWebsiteConfigSchema>;\nexport type WildoMarketingWebsiteConfigInput = z.input<typeof WildoMarketingWebsiteConfigSchema>;\n/** @wildo_source:part:end engine.saas-website.config */\n"]}
+{"version":3,"file":"wildo-website-config.schemas.js","sourceRoot":"","sources":["../../../src/config/wildo-website-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsHG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oDAAoD,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACjC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,cAAc,EACd,iFAAiF,CAClF;CACJ,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,YAAY,CAAC;IACZ;;;;;;;;;;OAUG;IACH,YAAY,EAAE,CAAC;SACZ,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,2EAA2E;YAC3E,iFAAiF;KACpF,CAAC;IAEJ;;;;;;;;;;;;;;OAcG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE;IAElB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,EAAE,CAAC;SACT,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACvC,KAAK,EACH,6EAA6E;YAC7E,8EAA8E;YAC9E,kBAAkB;KACrB,CAAC;SACD,QAAQ,EAAE;IAEb;;;;;OAKG;IACH,GAAG,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAEpC;;;;;;;;;OASG;IACH,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAExC;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,kBAAkB,MAAM,CAAC,aAAa,iCAAiC;gBACvE,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;gBACvE,sDAAsD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,gBAAgB,KAAK,CAAC,IAAI,0BAA0B,QAAQ,QAAQ;oBACpE,IAAI,KAAK,CAAC,MAAM,qDAAqD;aACxE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,6DAA6D;IAC7D,kEAAkE;IAClE,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EACL,WAAW,KAAK,CAAC,MAAM,+BAA+B,YAAY,IAAI;oBACtE,QAAQ,KAAK,CAAC,IAAI,2CAA2C;aAChE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,wDAAwD","sourcesContent":["/**\n * @wildo_source:part:start engine.saas-website.config facet:layer:engine facet:family:marketing-website\n *\n * Per-service marketing-website configuration block, authored in\n * the website service folder as `wildo.website.config.ts`.\n *\n * # What this file's loaded value is used for TODAY\n *\n * This schema is the single source of truth for the marketing-site routing\n * and origin surface. Every consumer reads here:\n *\n *   - `defaultLocale` + `locales` — read by `buildAstroI18nConfig(...)`,\n *     `assertLabelPacksValid(...)`, `loadWebsitePageRuntime(...)` and\n *     `renderWebsitePageHeadHtml(...)` via the shared `WebsiteSiteContext`.\n *   - `publicOrigin` — read by the head renderer to compose absolute\n *     `<link rel=\"canonical\">`, `og:url`, hreflang `href` URLs and\n *     the structured-data `mainEntityOfPage`. The previous\n *     `WebsiteRootConfig.seo.siteOrigin` was deleted.\n *   - `appOrigin` — the marketing → app handoff target, read at runtime\n *     since #493. A `wildo.website.config.ts` is Node-loaded and so\n *     invisible to a client island, which is why this value reaches the\n *     browser the way `apiOrigin` does: the `.astro` page forwards it to\n *     its bridge island, which puts it on `WebsiteRuntimeContext.appOrigin`\n *     for the CTA to read.\n *\n *     It previously had NO runtime consumer, and a site resolved the app\n *     origin a SECOND time from a public build-time environment variable —\n *     one host authored twice with no mechanical link, and a silent\n *     fallback to localhost when the variable was unset. That is how a\n *     marketing site comes to point at the wrong environment.\n *   - `csp?` — read by the website-local `sync-nginx-csp` build step,\n *     which merges the app-static posture with `infra.csp?.<serviceKey>`,\n *     emits the generated artifact consumed by Astro pages, and rewrites\n *     the checked-in nginx marker file used by the website Docker image.\n *\n * Future companion subprocesses that introspect the marketing\n * surface (locale-coverage audits, label-pack validation against\n * authored locales, SEO-link sanity checks) will also read here —\n * none exist today.\n *\n * # Why this is per-service website configuration\n *\n * Co-locating the schema with the engine package that owns its semantics\n * keeps three concerns separate from application-root service declarations:\n *\n *   1. **Right reuse axis.** Marketing-site content (locales, SEO origins,\n *      future label-pack overrides, marketing-only CTAs) is conceptually\n *      different from saas-app-level service declarations (`path`,\n *      `serviceName`, `frontendType`, `sessionStorage`). The marketing\n *      config travels with the website service folder, NOT with the\n *      SaaS app root. Two unrelated lifecycles, two different review\n *      audiences.\n *   2. **Engine boundary.** `platform-config-lib` no longer needs to\n *      depend on `@wildo-ai/presets-components-models` (the home of\n *      `AvailableLanguage`) just to type the marketing-site locale\n *      enum. Adding a new website primitive (a new SEO field, a new\n *      locale-pack id) belongs with the website package and its public\n *      configuration contract.\n *   3. **Disambiguator hazard.** The previous root-level\n *      `marketingWebsite?` block silently assumed \"one STATIC_WEBSITE\n *      service per SaaS app\" — but nothing in the schema enforced it.\n *      Two STATIC_WEBSITE services would have silently shared one\n *      config block with no obvious \"which one wins?\" answer. The\n *      application configuration rejects more than one STATIC_WEBSITE (and\n *      TECH_DOC) service, so the per-service config-file lookup is\n *      deterministic by construction.\n *\n * # Schema decisions encoded here\n *\n * - `z.strictObject` so authoring an unknown key surfaces as a parse\n *   error at `defineWebsiteConfig` time instead of being silently\n *   dropped (same posture as `WildoSaasConfigSchema` and\n *   `WildoTechnicalDocConfigSchema`).\n *\n * - **No `enabled` field.** The gate is \"is there a `wildo.website.config.ts`\n *   in a `frontendType: STATIC_WEBSITE` service folder?\" — file\n *   presence under a STATIC_WEBSITE service IS the enable signal.\n *   The Astro build / dev companion / future audit CLI requires the\n *   file when it walks a STATIC_WEBSITE service folder, so a\n *   half-authored config simply cannot exist (the loader fails\n *   closed). Removing the boolean closes a foot-gun: an authored\n *   `enabled: false` block was previously a silent way to keep the\n *   config \"warm\" without shipping anything, and consumers had to\n *   remember to read the flag in addition to the file presence — a\n *   future read-the-config / forget-the-flag bug waiting to happen.\n *   A separate `services.<key>.enabled` pattern (orthogonal to\n *   marketing-website) is the right place for any \"temporarily\n *   disable this service\" story (deferred — see DASHBOARD).\n *\n * - URL fields are `z.url()` (Zod 4 native validator) so we get\n *   protocol + host parsing for free, matching the rest of the\n *   codebase.\n *\n * - `csp?` is typed against `WildoCspConfigSchema` from\n *   `@wildo-ai/platform-config-lib`, mirroring the docs service's\n *   `wildo.tech-doc.config.ts` contract. The parsed value is consumed by\n *   the shared `resolveCspPolicy()` / `emitCspArtifacts()` generator flow.\n *\n * - `defaultLocale ∈ locales` cross-check via `.superRefine` —\n *   keeping `defaultLocale` as a top-level field is product-explicit\n *   (\"which locale URL is the canonical one\") and decouples it from\n *   list ordering. Locale-path uniqueness AND locale-value\n *   uniqueness are also enforced — duplicate paths would silently\n *   overwrite each other in the Astro build and corrupt the sitemap;\n *   duplicate locales would produce duplicate hreflang entries.\n *\n * - Locale primitive is `AvailableLanguage`. The schema imports it\n *   from `@wildo-ai/presets-components-models/public-runtime` (the\n *   side-effect-free public-runtime seam), but **consumers authoring\n *   `wildo.website.config.ts` must import it from\n *   `@wildo-ai/saas-models/public-runtime`**. Both paths produce identical\n *   values; saas-models simply re-exports the presets atom. Picking\n *   one path consistently across consumer files prevents drift in\n *   docs / examples / search results. Values authored in\n *   `wildo.website.config.ts` are the lowercase BCP-47 strings\n *   (`'en'`, `'fr'`), NOT the UPPERCASE TS enum member names\n *   (`EN`, `FR`). `z.enum(AvailableLanguage)` parses against the\n *   enum VALUES, which is what we want.\n */\n\nimport { WildoCspConfigSchema } from '@wildo-ai/platform-config-lib';\nimport { z } from 'zod';\nimport { AvailableLanguage } from '@wildo-ai/presets-components-models/public-runtime';\n\n/**\n * Per-locale configuration. Each authored locale gets one entry.\n *\n * `path` is the locale URL prefix segment (e.g. `'en'`, `'fr'`) — the\n * Astro builder maps `/en/...` and `/fr/...` paths via this value. We\n * do NOT auto-derive `path` from the locale string because some\n * deployments may want a flat root for the default locale (`/...`\n * instead of `/en/...`); keeping it explicit per locale leaves that\n * door open without a config-shape change.\n */\nexport const WebsiteLocaleConfigSchema = z.strictObject({\n  locale: z.enum(AvailableLanguage),\n  path: z\n    .string()\n    .min(1)\n    .regex(\n      /^[a-z0-9-]+$/,\n      'locale path must be lowercase alphanumeric with hyphens (becomes a URL segment)',\n    ),\n});\nexport type WebsiteLocaleConfig = z.infer<typeof WebsiteLocaleConfigSchema>;\n\n/**\n * Per-service marketing-website configuration block.\n *\n * Authored as `export default defineWebsiteConfig({...})` in\n * `<website-service-root>/wildo.website.config.ts`. The Astro\n * build loads this file once at bootstrap via jiti and composes\n * a `WebsiteSiteContext`; helpers consume that composed context rather than\n * this raw value.\n *\n * @example\n * ```ts\n * import { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n * import { defineWebsiteConfig } from '@wildo-ai/saas-website';\n *\n * export default defineWebsiteConfig({\n *   publicOrigin: 'https://example.com',\n *   appOrigin: 'https://app.example.com',\n *   defaultLocale: AvailableLanguage.EN,\n *   locales: [\n *     { locale: AvailableLanguage.EN, path: 'en' },\n *     { locale: AvailableLanguage.FR, path: 'fr' },\n *   ],\n *   csp: { enabled: true, reportOnly: true },\n * });\n * ```\n */\nexport const WildoMarketingWebsiteConfigSchema = z\n  .strictObject({\n    /**\n     * Public origin of the marketing site (apex / www) — canonical\n     * input the Astro head renderer emits as absolute URLs\n     * (`<link rel=\"canonical\">`, `og:url`, hreflang `href`,\n     * sitemap base, structured-data `mainEntityOfPage`).\n     *\n     * MUST NOT end with `/` — the head renderer composes\n     * `${publicOrigin}${routePath}` and a trailing slash would emit\n     * `https://example.com//`. Surface the constraint loudly here\n     * rather than silently corrupting URLs at build time.\n     */\n    publicOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.publicOrigin must NOT end with \"/\" (the head ' +\n          'renderer concatenates publicOrigin + routePath; trailing slash would emit \"//\")',\n      }),\n\n    /**\n     * Origin of the SaaS application the marketing site links into\n     * (signup / login / pricing → checkout).\n     *\n     * **Today**: NO runtime consumer. The cross-origin handoff\n     * surface that will read it does not exist yet. Authored\n     * eagerly so the link-surface PR is a single framework-owned move\n     * — until then the field is exercised only by the schema\n     * parser.\n     *\n     * Distinct from the general `WildoSaasConfig.services.<name>`\n     * URL surface because the marketing site is a separate Astro\n     * project that does not load the full SaaS app graph at build\n     * time.\n     */\n    appOrigin: z.url(),\n\n    /**\n     * Backend API origin the marketing site POSTs to for anonymous\n     * captures (lead / draft-note forms) — e.g.\n     * `https://api.example.com`. Threaded through\n     * `WebsiteRuntimeContext.apiOrigin` into the React island that\n     * constructs the `WebsiteAnonymousSessionClient`.\n     *\n     * OPTIONAL because a pure brochure site with no capture forms never\n     * talks to an API — only sites that host an anonymous-capture\n     * section need it. When such a section renders without a resolved\n     * `apiOrigin`, the section surfaces a loud misconfiguration rather\n     * than silently POSTing nowhere.\n     *\n     * MUST NOT end with `/` — the anon client composes\n     * `${apiOrigin}${MAIN_API_BASE_PATH}${path}` and a trailing slash\n     * would emit a doubled `//` in the request URL. (The client also\n     * defensively strips trailing slashes, but the refine surfaces the\n     * mistake at authoring time.)\n     *\n     * Distinct from `appOrigin` (the human-facing app the marketing CTAs\n     * link into) and `publicOrigin` (the marketing site's own canonical\n     * origin): this is the machine-to-machine API host.\n     */\n    apiOrigin: z\n      .url()\n      .refine((value) => !value.endsWith('/'), {\n        error:\n          'WildoMarketingWebsiteConfig.apiOrigin must NOT end with \"/\" (the anonymous ' +\n          'client concatenates apiOrigin + MAIN_API_BASE_PATH + path; a trailing slash ' +\n          'would emit \"//\")',\n      })\n      .optional(),\n\n    /**\n     * Optional Content-Security-Policy override for the marketing site.\n     * Consumed by the website-local `sync-nginx-csp` step, which emits\n     * the generated artifact for Astro page injection and rewrites the\n     * website nginx marker file from the same resolved output.\n     */\n    csp: WildoCspConfigSchema.optional(),\n\n    /**\n     * Default locale the marketing site serves for unmatched URLs\n     * and as the canonical hreflang signal. Must appear in\n     * `locales` below (cross-check enforced by the schema-level\n     * `.superRefine`).\n     *\n     * Read by `buildAstroI18nConfig(...)` (drives Astro's own\n     * `i18n.defaultLocale`) and by the head renderer (drives\n     * `<html lang=\"...\">`, `og:locale`, hreflang `x-default`).\n     */\n    defaultLocale: z.enum(AvailableLanguage),\n\n    /**\n     * Ordered list of locales the marketing site builds. Order is\n     * preserved (used by the language switcher rendering and by\n     * the sitemap emitter — when the sitemap surface lands).\n     *\n     * Read by `buildAstroI18nConfig(...)` (Astro `i18n.locales`),\n     * by `assertLabelPacksValid(...)` (one label pack per locale),\n     * by `loadWebsitePageRuntime(...)` (per-page locale resolution),\n     * and by the head renderer (hreflang alternates).\n     */\n    locales: z.array(WebsiteLocaleConfigSchema).min(1),\n  })\n  .superRefine((config, ctx) => {\n    const declaredLocales = new Set(config.locales.map((entry) => entry.locale));\n    if (!declaredLocales.has(config.defaultLocale)) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['defaultLocale'],\n        message:\n          `defaultLocale '${config.defaultLocale}' is not declared in 'locales' ` +\n          `(declared: [${[...declaredLocales].join(', ')}]). The default locale ` +\n          `must be one of the locales the site actually builds.`,\n      });\n    }\n\n    // Locale-path uniqueness: two entries collapsing to the same URL\n    // segment would silently overwrite each other in the Astro build\n    // and corrupt the sitemap. Fail closed at parse time.\n    const pathOwners = new Map<string, AvailableLanguage>();\n    for (const entry of config.locales) {\n      const previous = pathOwners.get(entry.path);\n      if (previous !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale path '${entry.path}' is declared by both '${previous}' and ` +\n            `'${entry.locale}'. Each locale must have a unique URL path segment.`,\n        });\n        continue;\n      }\n      pathOwners.set(entry.path, entry.locale);\n    }\n\n    // Locale-value uniqueness: same locale appearing twice would\n    // produce duplicate hreflang entries and ambiguous default-locale\n    // resolution.\n    const localeOwners = new Map<AvailableLanguage, string>();\n    for (const entry of config.locales) {\n      const previousPath = localeOwners.get(entry.locale);\n      if (previousPath !== undefined) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['locales'],\n          message:\n            `Locale '${entry.locale}' is declared twice (paths '${previousPath}' ` +\n            `and '${entry.path}'). Each locale must appear at most once.`,\n        });\n        continue;\n      }\n      localeOwners.set(entry.locale, entry.path);\n    }\n  });\nexport type WildoMarketingWebsiteConfig = z.infer<typeof WildoMarketingWebsiteConfigSchema>;\nexport type WildoMarketingWebsiteConfigInput = z.input<typeof WildoMarketingWebsiteConfigSchema>;\n/** @wildo_source:part:end engine.saas-website.config */\n"]}

package/dist/esm/config-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../../src/config-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc,8BAA8B,CAAC"}
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/config-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc,8BAA8B,CAAC"}

package/dist/esm/core/anonymous-session/InboundContactForm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InboundContactForm.d.ts","sourceRoot":"","sources":["../../../../../src/core/anonymous-session/InboundContactForm.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAExF,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD,MAAM,WAAW,uBAAuB;IACtC,yFAAyF;IACzF,MAAM,EAAE,6BAA6B,CAAC;IACtC,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAUD,wBAAgB,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,uBAAuB,GAAG,KAAK,CAAC,YAAY,CA6F/G"}
+{"version":3,"file":"InboundContactForm.d.ts","sourceRoot":"","sources":["../../../../src/core/anonymous-session/InboundContactForm.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAyC,MAAM,OAAO,CAAC;AAE9D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAExF,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD,MAAM,WAAW,uBAAuB;IACtC,yFAAyF;IACzF,MAAM,EAAE,6BAA6B,CAAC;IACtC,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAUD,wBAAgB,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,uBAAuB,GAAG,KAAK,CAAC,YAAY,CA6F/G"}

package/dist/esm/core/anonymous-session/inbound-contact-form.schema.d.ts

@@ -10,11 +10,11 @@
  * server-set fields: `_id`, `anonymousUserId`, `userId`, `emailUserMatch`, timestamps).
  *
  * Mirrors the non-excluded, non-backend-only CREATE inputs of `InboundContact`
- * (`email` required; `firstName` / `lastName` / `phone` optional), plus TWO distinct
- * privacy signal: an OPTIONAL marketing opt-in (mapped to the
- * `privacy.dataProcessingConsent` tier). A governed notice, contract or consent
- * interaction must use the separate exact-release receipt contract; this DTO cannot
- * manufacture legal evidence from a checkbox and client timestamp.
+ * (`email` required; `firstName` / `lastName` / `phone` optional), plus ONE privacy
+ * signal: an OPTIONAL marketing opt-in (mapped to the `privacy.dataProcessingConsent`
+ * tier). There is no second, required agreement field: a governed notice, contract or
+ * consent interaction must use the separate exact-release receipt contract, because this
+ * DTO cannot manufacture legal evidence from a checkbox and a client timestamp.
  * `relatedUserId` is intentionally absent — it is `.excludeFromCreate()` on the
  * resource (sales/admin-only, never client-authored).
  */

package/dist/esm/core/anonymous-session/inbound-contact-form.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-contact-form.schema.d.ts","sourceRoot":"","sources":["../../../../../src/core/anonymous-session/inbound-contact-form.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAYnC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYvG"}
+{"version":3,"file":"inbound-contact-form.schema.d.ts","sourceRoot":"","sources":["../../../../src/core/anonymous-session/inbound-contact-form.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAanC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYvG"}

package/dist/esm/core/anonymous-session/inbound-contact-form.schema.js

@@ -10,11 +10,11 @@
  * server-set fields: `_id`, `anonymousUserId`, `userId`, `emailUserMatch`, timestamps).
  *
  * Mirrors the non-excluded, non-backend-only CREATE inputs of `InboundContact`
- * (`email` required; `firstName` / `lastName` / `phone` optional), plus TWO distinct
- * privacy signal: an OPTIONAL marketing opt-in (mapped to the
- * `privacy.dataProcessingConsent` tier). A governed notice, contract or consent
- * interaction must use the separate exact-release receipt contract; this DTO cannot
- * manufacture legal evidence from a checkbox and client timestamp.
+ * (`email` required; `firstName` / `lastName` / `phone` optional), plus ONE privacy
+ * signal: an OPTIONAL marketing opt-in (mapped to the `privacy.dataProcessingConsent`
+ * tier). There is no second, required agreement field: a governed notice, contract or
+ * consent interaction must use the separate exact-release receipt contract, because this
+ * DTO cannot manufacture legal evidence from a checkbox and a client timestamp.
  * `relatedUserId` is intentionally absent — it is `.excludeFromCreate()` on the
  * resource (sales/admin-only, never client-authored).
  */
@@ -33,7 +33,8 @@ export const InboundContactFormSchema = z.object({
     phone: z.string().trim().max(64).optional(),
     /**
      * OPTIONAL marketing opt-in — maps into the resource's `privacy.dataProcessingConsent`
-     * tier ('marketing' vs the BASIC default). Independent of the required agreement above.
+     * tier ('marketing' vs the BASIC default). It is the only privacy field on this form,
+     * and it gates nothing: an unchecked box still submits, at the BASIC tier.
      */
     marketingConsent: z.boolean().default(false),
 });

package/dist/esm/core/anonymous-session/inbound-contact-form.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-contact-form.schema.js","sourceRoot":"","sources":["../../../../../src/core/anonymous-session/inbound-contact-form.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,mFAAmF;IACnF,+EAA+E;IAC/E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;OAGG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC7C,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAgC;IAC5E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACxC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE;YACP,2EAA2E;YAC3E,4BAA4B;YAC5B,qBAAqB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;SACvE;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Inbound-contact form input schema (website-local, bundle-safe).\n *\n * Deliberately a SEPARATE plain-Zod schema, NOT `InboundContactSchema` from\n * `@wildo-ai/saas-models`: that schema is decorator-bound (`.isPrimaryKey()`,\n * `.excludeFromCreate()`, `.isBackendOnly()`, …), so importing it would boot the\n * decorator framework into the browser bundle — forbidden by bundle discipline. The\n * website only needs to validate the handful of client-authored CREATE fields; the\n * backend is the authority on the full contract (it re-validates + injects the\n * server-set fields: `_id`, `anonymousUserId`, `userId`, `emailUserMatch`, timestamps).\n *\n * Mirrors the non-excluded, non-backend-only CREATE inputs of `InboundContact`\n * (`email` required; `firstName` / `lastName` / `phone` optional), plus TWO distinct\n * privacy signal: an OPTIONAL marketing opt-in (mapped to the\n * `privacy.dataProcessingConsent` tier). A governed notice, contract or consent\n * interaction must use the separate exact-release receipt contract; this DTO cannot\n * manufacture legal evidence from a checkbox and client timestamp.\n * `relatedUserId` is intentionally absent — it is `.excludeFromCreate()` on the\n * resource (sales/admin-only, never client-authored).\n */\n\nimport { z } from \"zod\";\n\n/**\n * The wire payload POSTed to `/api/v1/inbound-contacts`. `privacy` matches the\n * resource's `InboundContactPrivacySchema` shape (a nested consent object) so the\n * backend accepts it verbatim.\n */\nexport const InboundContactFormSchema = z.object({\n  // Zod 4: top-level `z.email()` (not the deprecated `z.string().email()`), matching\n  // the resource schema. An empty string fails it, so it also covers \"required\".\n  email: z.email(\"Enter a valid email address\"),\n  firstName: z.string().trim().max(200).optional(),\n  lastName: z.string().trim().max(200).optional(),\n  phone: z.string().trim().max(64).optional(),\n  /**\n   * OPTIONAL marketing opt-in — maps into the resource's `privacy.dataProcessingConsent`\n   * tier ('marketing' vs the BASIC default). Independent of the required agreement above.\n   */\n  marketingConsent: z.boolean().default(false),\n});\n\nexport type InboundContactFormValues = z.infer<typeof InboundContactFormSchema>;\n\n/**\n * Build the exact JSON body the backend CREATE expects from validated form values.\n * Keeps the `privacy` nesting + the consent enum mapping in ONE place so the form\n * component stays declarative.\n */\nexport function buildInboundContactCreateBody(values: InboundContactFormValues): Record<string, unknown> {\n  return {\n    email: values.email.trim().toLowerCase(),\n    ...(values.firstName ? { firstName: values.firstName } : {}),\n    ...(values.lastName ? { lastName: values.lastName } : {}),\n    ...(values.phone ? { phone: values.phone } : {}),\n    privacy: {\n      // OPTIONAL marketing tier: 'marketing' when the visitor opted in, else the\n      // resource's BASIC default.\n      dataProcessingConsent: values.marketingConsent ? \"marketing\" : \"basic\",\n    },\n  };\n}\n"]}
+{"version":3,"file":"inbound-contact-form.schema.js","sourceRoot":"","sources":["../../../../src/core/anonymous-session/inbound-contact-form.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,mFAAmF;IACnF,+EAA+E;IAC/E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC7C,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAgC;IAC5E,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACxC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE;YACP,2EAA2E;YAC3E,4BAA4B;YAC5B,qBAAqB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;SACvE;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Inbound-contact form input schema (website-local, bundle-safe).\n *\n * Deliberately a SEPARATE plain-Zod schema, NOT `InboundContactSchema` from\n * `@wildo-ai/saas-models`: that schema is decorator-bound (`.isPrimaryKey()`,\n * `.excludeFromCreate()`, `.isBackendOnly()`, …), so importing it would boot the\n * decorator framework into the browser bundle — forbidden by bundle discipline. The\n * website only needs to validate the handful of client-authored CREATE fields; the\n * backend is the authority on the full contract (it re-validates + injects the\n * server-set fields: `_id`, `anonymousUserId`, `userId`, `emailUserMatch`, timestamps).\n *\n * Mirrors the non-excluded, non-backend-only CREATE inputs of `InboundContact`\n * (`email` required; `firstName` / `lastName` / `phone` optional), plus ONE privacy\n * signal: an OPTIONAL marketing opt-in (mapped to the `privacy.dataProcessingConsent`\n * tier). There is no second, required agreement field: a governed notice, contract or\n * consent interaction must use the separate exact-release receipt contract, because this\n * DTO cannot manufacture legal evidence from a checkbox and a client timestamp.\n * `relatedUserId` is intentionally absent — it is `.excludeFromCreate()` on the\n * resource (sales/admin-only, never client-authored).\n */\n\nimport { z } from \"zod\";\n\n/**\n * The wire payload POSTed to `/api/v1/inbound-contacts`. `privacy` matches the\n * resource's `InboundContactPrivacySchema` shape (a nested consent object) so the\n * backend accepts it verbatim.\n */\nexport const InboundContactFormSchema = z.object({\n  // Zod 4: top-level `z.email()` (not the deprecated `z.string().email()`), matching\n  // the resource schema. An empty string fails it, so it also covers \"required\".\n  email: z.email(\"Enter a valid email address\"),\n  firstName: z.string().trim().max(200).optional(),\n  lastName: z.string().trim().max(200).optional(),\n  phone: z.string().trim().max(64).optional(),\n  /**\n   * OPTIONAL marketing opt-in — maps into the resource's `privacy.dataProcessingConsent`\n   * tier ('marketing' vs the BASIC default). It is the only privacy field on this form,\n   * and it gates nothing: an unchecked box still submits, at the BASIC tier.\n   */\n  marketingConsent: z.boolean().default(false),\n});\n\nexport type InboundContactFormValues = z.infer<typeof InboundContactFormSchema>;\n\n/**\n * Build the exact JSON body the backend CREATE expects from validated form values.\n * Keeps the `privacy` nesting + the consent enum mapping in ONE place so the form\n * component stays declarative.\n */\nexport function buildInboundContactCreateBody(values: InboundContactFormValues): Record<string, unknown> {\n  return {\n    email: values.email.trim().toLowerCase(),\n    ...(values.firstName ? { firstName: values.firstName } : {}),\n    ...(values.lastName ? { lastName: values.lastName } : {}),\n    ...(values.phone ? { phone: values.phone } : {}),\n    privacy: {\n      // OPTIONAL marketing tier: 'marketing' when the visitor opted in, else the\n      // resource's BASIC default.\n      dataProcessingConsent: values.marketingConsent ? \"marketing\" : \"basic\",\n    },\n  };\n}\n"]}

package/dist/esm/core/anonymous-session/website-anonymous-session-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"website-anonymous-session-client.d.ts","sourceRoot":"","sources":["../../../../../src/core/anonymous-session/website-anonymous-session-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAeH,MAAM,WAAW,oCAAoC;IACnD,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,iEAAiE;AACjE,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,MAAM;gBADhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM;CAKnC;AAED,qBAAa,6BAA6B;IACxC,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;gBAEjC,OAAO,EAAE,oCAAoC;IAMzD,8FAA8F;IAC9F,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAInC;;;;;;;;;;;;OAYG;IACH,yBAAyB,IAAI,MAAM;IAMnC,6EAA6E;IAC7E,eAAe,IAAI,OAAO;IAI1B;;;;;;OAMG;IACG,aAAa,CAAC,SAAS,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBzF,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,OAAO;CAYhB"}
+{"version":3,"file":"website-anonymous-session-client.d.ts","sourceRoot":"","sources":["../../../../src/core/anonymous-session/website-anonymous-session-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAeH,MAAM,WAAW,oCAAoC;IACnD,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,iEAAiE;AACjE,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,MAAM;gBADhB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM;CAKnC;AAED,qBAAa,6BAA6B;IACxC,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;gBAEjC,OAAO,EAAE,oCAAoC;IAMzD,8FAA8F;IAC9F,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAInC;;;;;;;;;;;;OAYG;IACH,yBAAyB,IAAI,MAAM;IAMnC,6EAA6E;IAC7E,eAAe,IAAI,OAAO;IAI1B;;;;;;OAMG;IACG,aAAa,CAAC,SAAS,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAoBzF,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,OAAO;CAYhB"}

package/dist/esm/core/contexts/WebsitePageContext.d.ts

@@ -15,9 +15,10 @@ import type { WebsitePageRef } from '../../schemas/refs/page-ref.schemas';
  * MDX-driven blog index aggregating post excerpts, etc.) without
  * lying about which page each subtree belongs to.
  *
- * **Why a separate file from the hook**: same Fast-Refresh rationale
- * as `WebsiteRuntimeContext` — split provider/context/hook to keep
- * HMR boundaries small.
+ * **Why the hook lives in a separate file**: same Fast-Refresh
+ * rationale as `WebsiteRuntimeContext` — the context and its provider
+ * component stay together here (`useContext` matches on object
+ * identity), and only the hook is split out, into `useWebsitePage.ts`.
  */
 export interface WebsitePageContextValue {
     /**

package/dist/esm/core/contexts/WebsitePageContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WebsitePageContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsitePageContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CACxB,CAAC;AAEtD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,uBAAuB,CAAC;IAC/B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,0BAA0B,CAAC,EACzC,KAAK,EACL,QAAQ,GACT,EAAE,+BAA+B,GAAG,SAAS,CAM7C;yBATe,0BAA0B;;;AAW1C,uDAAuD"}
+{"version":3,"file":"WebsitePageContext.d.ts","sourceRoot":"","sources":["../../../../src/core/contexts/WebsitePageContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CACxB,CAAC;AAEtD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,uBAAuB,CAAC;IAC/B,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,0BAA0B,CAAC,EACzC,KAAK,EACL,QAAQ,GACT,EAAE,+BAA+B,GAAG,SAAS,CAM7C;yBATe,0BAA0B;;;AAW1C,uDAAuD"}

package/dist/esm/core/contexts/WebsitePageContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebsitePageContext.js","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsitePageContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAkB,MAAM,OAAO,CAAC;AAgC7D,MAAM,CAAC,MAAM,kBAAkB,GAC7B,aAAa,CAAiC,IAAI,CAAC,CAAC;AAOtD,MAAM,UAAU,0BAA0B,CAAC,EACzC,KAAK,EACL,QAAQ,GACwB;IAChC,OAAO,CACL,KAAC,kBAAkB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACtC,QAAQ,GACmB,CAC/B,CAAC;AACJ,CAAC;AACD,0BAA0B,CAAC,WAAW,GAAG,4BAA4B,CAAC","sourcesContent":["import React, { createContext, type ReactNode } from 'react';\n\nimport type { WebsitePageRef } from '../../schemas/refs/page-ref.schemas';\n\n/**\n * @wildo_source:part:start saas.website.page.context facet:layer:core facet:family:website\n *\n * `WebsitePageContext` — identity of the page currently rendering.\n * Provided by `<WebsitePageLayout pageRef=\"…\">` exactly once per\n * page render and consumed by `useWebsiteLabel(leaf)` to compose the\n * full label key (`website.{pageRef}.{sectionRef}.{leaf}`).\n *\n * **Why an isolated context (not merged into runtime)**: the runtime\n * context is set at the host-adapter boundary and is constant per\n * build; the page context is set per page route. Splitting them\n * lets a single host adapter render multiple pages (preview tooling,\n * MDX-driven blog index aggregating post excerpts, etc.) without\n * lying about which page each subtree belongs to.\n *\n * **Why a separate file from the hook**: same Fast-Refresh rationale\n * as `WebsiteRuntimeContext` — split provider/context/hook to keep\n * HMR boundaries small.\n */\nexport interface WebsitePageContextValue {\n  /**\n   * The validated `WebsitePageRef` of the page currently rendering.\n   * MUST match a `WebsitePageManifest.pageRef` registered in the\n   * site's `WebsiteRootConfig`.\n   */\n  pageRef: WebsitePageRef;\n}\n\nexport const WebsitePageContext: React.Context<WebsitePageContextValue | null> =\n  createContext<WebsitePageContextValue | null>(null);\n\nexport interface WebsitePageContextProviderProps {\n  value: WebsitePageContextValue;\n  children: ReactNode;\n}\n\nexport function WebsitePageContextProvider({\n  value,\n  children,\n}: WebsitePageContextProviderProps): ReactNode {\n  return (\n    <WebsitePageContext.Provider value={value}>\n      {children}\n    </WebsitePageContext.Provider>\n  );\n}\nWebsitePageContextProvider.displayName = 'WebsitePageContextProvider';\n/** @wildo_source:part:end saas.website.page.context */\n"]}
+{"version":3,"file":"WebsitePageContext.js","sourceRoot":"","sources":["../../../../src/core/contexts/WebsitePageContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAkB,MAAM,OAAO,CAAC;AAiC7D,MAAM,CAAC,MAAM,kBAAkB,GAC7B,aAAa,CAAiC,IAAI,CAAC,CAAC;AAOtD,MAAM,UAAU,0BAA0B,CAAC,EACzC,KAAK,EACL,QAAQ,GACwB;IAChC,OAAO,CACL,KAAC,kBAAkB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACtC,QAAQ,GACmB,CAC/B,CAAC;AACJ,CAAC;AACD,0BAA0B,CAAC,WAAW,GAAG,4BAA4B,CAAC","sourcesContent":["import React, { createContext, type ReactNode } from 'react';\n\nimport type { WebsitePageRef } from '../../schemas/refs/page-ref.schemas';\n\n/**\n * @wildo_source:part:start saas.website.page.context facet:layer:core facet:family:website\n *\n * `WebsitePageContext` — identity of the page currently rendering.\n * Provided by `<WebsitePageLayout pageRef=\"…\">` exactly once per\n * page render and consumed by `useWebsiteLabel(leaf)` to compose the\n * full label key (`website.{pageRef}.{sectionRef}.{leaf}`).\n *\n * **Why an isolated context (not merged into runtime)**: the runtime\n * context is set at the host-adapter boundary and is constant per\n * build; the page context is set per page route. Splitting them\n * lets a single host adapter render multiple pages (preview tooling,\n * MDX-driven blog index aggregating post excerpts, etc.) without\n * lying about which page each subtree belongs to.\n *\n * **Why the hook lives in a separate file**: same Fast-Refresh\n * rationale as `WebsiteRuntimeContext` — the context and its provider\n * component stay together here (`useContext` matches on object\n * identity), and only the hook is split out, into `useWebsitePage.ts`.\n */\nexport interface WebsitePageContextValue {\n  /**\n   * The validated `WebsitePageRef` of the page currently rendering.\n   * MUST match a `WebsitePageManifest.pageRef` registered in the\n   * site's `WebsiteRootConfig`.\n   */\n  pageRef: WebsitePageRef;\n}\n\nexport const WebsitePageContext: React.Context<WebsitePageContextValue | null> =\n  createContext<WebsitePageContextValue | null>(null);\n\nexport interface WebsitePageContextProviderProps {\n  value: WebsitePageContextValue;\n  children: ReactNode;\n}\n\nexport function WebsitePageContextProvider({\n  value,\n  children,\n}: WebsitePageContextProviderProps): ReactNode {\n  return (\n    <WebsitePageContext.Provider value={value}>\n      {children}\n    </WebsitePageContext.Provider>\n  );\n}\nWebsitePageContextProvider.displayName = 'WebsitePageContextProvider';\n/** @wildo_source:part:end saas.website.page.context */\n"]}

package/dist/esm/core/contexts/WebsiteRuntimeContext.d.ts

@@ -48,13 +48,22 @@ import type { LabelPack } from '../../schemas/validators/label-pack.validator';
  *   contract the SaaS app now uses, instead of inventing a website-only
  *   metadata seam.
  *
- * **Why a separate file from the hook + provider**: split for React
- * Fast Refresh — when a `.tsx` exports both a React component and a
- * React Context object, edits to either one invalidate the entire
- * module's HMR boundary. Keeping the bare context here, the hook in
- * `useWebsiteRuntime.ts`, and the provider component in
- * `WebsiteRuntimeContextProvider.tsx` makes section authors edit
- * components without retriggering the runtime context's identity.
+ * **Why the hook lives in a separate file**: React Fast Refresh only
+ * preserves state for a module whose every export is a component, so
+ * a module mixing components with plain functions loses its HMR
+ * boundary. This file holds the two things that must be identical
+ * objects at runtime — the context and the provider component that
+ * writes it — while `useWebsiteRuntime` sits alone in
+ * `useWebsiteRuntime.ts`. A section author editing a component that
+ * merely READS the runtime therefore never remounts the provider.
+ *
+ * Until 2026-09-09 this paragraph described a different arrangement:
+ * that only the bare context was kept here and the provider lived in
+ * a file of its own. No such file has ever existed — the provider is
+ * exported below — and splitting it out would be the wrong shape
+ * anyway, since `useContext` matches on object identity.
+ * prose-referent-waiver: the retired file name is quoted only to retire it.
+ * The claim named `WebsiteRuntimeContextProvider.tsx`.
  */
 export interface WebsiteRuntimeContextValue {
     /**
@@ -74,6 +83,26 @@ export interface WebsiteRuntimeContextValue {
      * paths.
      */
     defaultLocale: AvailableLanguage;
+    /**
+     * Origin of the application this marketing site sends visitors INTO — the
+     * marketing → product handoff target, authored once as
+     * `WildoMarketingWebsiteConfig.appOrigin` (#493).
+     *
+     * Carried here for exactly the reason `defaultLocale` above is: a
+     * `wildo.website.config.ts` is Node-loaded and therefore invisible to a
+     * client island, so before this a site resolved the app origin a SECOND
+     * time from a public build-time environment variable it could read in the
+     * browser — one host authored twice, in two files, with no mechanical link
+     * between the copies. That is how a marketing site comes to point at the
+     * wrong environment: a defect nobody notices until a customer follows the
+     * link.
+     *
+     * Threading it through the runtime keeps the handoff a framework-internal
+     * concern, the same way threading `defaultLocale` kept locale-prefixing one:
+     * section authors never hand-assemble the product URL, and there is one
+     * place to change it.
+     */
+    appOrigin?: string;
     /**
      * Flat `Record<string, string>` label pack for the active locale.
      * Lookup keys MUST be fully-composed `website.<page>.<section>.<slot>`

package/dist/esm/core/contexts/WebsiteRuntimeContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteRuntimeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAChH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;;;;OAKG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,UAAU,EAAE,uBAAuB,CAAC;IACpC;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,+BAA+B,CAAC;IAC3D;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAC3B,CAAC;AAEzD,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GACT,EAAE,kCAAkC,GAAG,SAAS,CAMhD;yBATe,6BAA6B;;;AAW7C,0DAA0D"}
+{"version":3,"file":"WebsiteRuntimeContext.d.ts","sourceRoot":"","sources":["../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAChH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;;;;OAKG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,UAAU,EAAE,uBAAuB,CAAC;IACpC;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,+BAA+B,CAAC;IAC3D;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAC3B,CAAC;AAEzD,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GACT,EAAE,kCAAkC,GAAG,SAAS,CAMhD;yBATe,6BAA6B;;;AAW7C,0DAA0D"}

package/dist/esm/core/contexts/WebsiteRuntimeContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteRuntimeContext.js","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAkB,MAAM,OAAO,CAAC;AA6I7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,aAAa,CAAoC,IAAI,CAAC,CAAC;AAOzD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GAC2B;IACnC,OAAO,CACL,KAAC,qBAAqB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACzC,QAAQ,GACsB,CAClC,CAAC;AACJ,CAAC;AACD,6BAA6B,CAAC,WAAW,GAAG,+BAA+B,CAAC","sourcesContent":["import React, { createContext, type ReactNode } from 'react';\n\nimport type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n\nimport type { WebsiteDesignTokens } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { FrontendWebsiteProviderRegistry } from '../external-providers/frontend-provider-registry.website';\nimport type { WebsiteLabelKey } from '../../schemas/label-keys/website-label-key.schemas';\nimport type { WebsiteNavigationConfig } from '../../schemas/manifests/website-root-config.shared.schemas';\nimport type { LabelPack } from '../../schemas/validators/label-pack.validator';\n\n/**\n * @wildo_source:part:start saas.website.runtime.context facet:layer:core facet:family:website\n *\n * `WebsiteRuntimeContext` — site-wide runtime state for the marketing\n * surface. Created **once per page render** by the host adapter\n * (Phase 5 `WebsitePageBridge.astro` reads `WebsiteRootConfig` and the\n * resolved label pack from disk and calls\n * `<WebsiteRuntimeContextProvider value={…}>` around the page tree).\n *\n * **Why \"runtime\" and not \"config\"**: the values here are the\n * locale-resolved subset of `WebsiteRootConfig` — only the active\n * locale's label pack travels with the React tree (the other locales\n * live in their own per-locale static builds). A `*Config` name would\n * suggest the full multi-locale surface is in scope.\n *\n * **Three pieces of state**:\n *\n * - `locale` — the currently-rendering locale. Sections that need\n *   locale-aware formatting (number/date in marketing copy is rare\n *   but legitimate) read it via `useWebsiteRuntime()`.\n * - `labelPack` — the locale-resolved flat key→string map, validated\n *   against the manifest by `validateLabelPackAgainstManifest` at\n *   build start. Consumed by `useWebsiteLabel` and\n *   `useWebsiteLabelByKey`.\n * - `designTokens` — the `WebsiteDesignTokens` from\n *   `WebsiteRootConfig.designTokens`. Consumed by\n *   `useWebsiteDesignTokens` and by the Phase 5 CSS emitter that\n *   materializes them as `--website-*` custom properties on the\n *   `<WebsitePageLayout>` root.\n * - `navigation` — the `WebsiteNavigationConfig` from\n *   `WebsiteRootConfig.navigation`. Carried in the runtime context\n *   (rather than as a separate `WebsiteNavigationContext`) because\n *   `<WebsitePageLayout>` already reads runtime state and\n *   header/footer slots are inseparable from \"the site is rendering\n *   right now\". A second context for two component refs would split\n *   the host-adapter's wiring surface without buying isolation.\n * - `frontendProviderRegistry` — optional website-facing public provider\n *   registry hydrated from the materialized provider artifact for the\n *   concrete `STATIC_WEBSITE` service. This keeps analytics / captcha /\n *   browser-monitoring integrations on the same frontend-provider\n *   contract the SaaS app now uses, instead of inventing a website-only\n *   metadata seam.\n *\n * **Why a separate file from the hook + provider**: split for React\n * Fast Refresh — when a `.tsx` exports both a React component and a\n * React Context object, edits to either one invalidate the entire\n * module's HMR boundary. Keeping the bare context here, the hook in\n * `useWebsiteRuntime.ts`, and the provider component in\n * `WebsiteRuntimeContextProvider.tsx` makes section authors edit\n * components without retriggering the runtime context's identity.\n */\nexport interface WebsiteRuntimeContextValue {\n  /**\n   * The currently-rendering locale. Marketing-site routing emits one\n   * static build per locale (D8), so this value is constant per build\n   * — never re-renders mid-session.\n   */\n  locale: AvailableLanguage;\n  /**\n   * The site's default locale (mirrors `WebsiteRootConfig.defaultLocale`).\n   * Carried in the runtime context so client-tier components — namely\n   * `WebsiteInternalLink` (Phase 6 fix H-β) — can compute the correct\n   * locale-prefixed pathname (`/pricing` on the EN site,\n   * `/fr/pricing` on the FR site) without re-importing the root\n   * config. Plumbing it through the runtime keeps the routing rule\n   * a framework-internal concern: section authors NEVER hand-prefix\n   * paths.\n   */\n  defaultLocale: AvailableLanguage;\n  /**\n   * Flat `Record<string, string>` label pack for the active locale.\n   * Lookup keys MUST be fully-composed `website.<page>.<section>.<slot>`\n   * strings; consumers that hold leaf paths use `useWebsiteLabel(leaf)`\n   * which composes the full key against the page+section context.\n   */\n  labelPack: LabelPack;\n  /**\n   * Design-token bundle for the active site. Same object referenced\n   * by `WebsiteRootConfig.designTokens`; passed by reference (not\n   * cloned) so token-aware components can rely on referential\n   * stability across renders.\n   */\n  designTokens: WebsiteDesignTokens;\n  /**\n   * Site-wide navigation slot bindings (header / footer components).\n   * Same object referenced by `WebsiteRootConfig.navigation`. Read\n   * by `<WebsitePageLayout>` to render the chrome around each page's\n   * `<main>` content; per-page `header` / `footer` props on\n   * `<WebsitePageLayout>` override these defaults.\n   */\n  navigation: WebsiteNavigationConfig;\n  /**\n   * Fully-composed label key the framework reads to render the\n   * \"Skip to main content\" affordance as the FIRST focusable element\n   * on every page (Phase 6 third audit fix M-α). Mirrors\n   * `WebsiteRootConfig.skipToMainContentLabelKey`. Carried in the\n   * runtime context (NOT re-derived from the root config inside\n   * `WebsitePageLayout`) for two reasons:\n   *   - The layout is a client-tier React component; it cannot import\n   *     the consumer's `WEBSITE_ROOT_CONFIG` symbol without dragging\n   *     server-only code (manifest registry, page components) into\n   *     the client bundle.\n   *   - Threading the key through the runtime keeps the layout's\n   *     contract symmetric with how every other localized text on the\n   *     page is sourced (label pack + key), so the skip link is\n   *     translated automatically without any per-locale branching.\n   */\n  skipToMainContentLabelKey: WebsiteLabelKey;\n  /**\n   * Website-facing public providers for the active static website\n   * service. Optional so older tests and provider-free sites can omit\n   * it, but when present it is the canonical frontend-safe provider\n   * catalog for analytics / captcha / browser-monitoring slices.\n   */\n  frontendProviderRegistry?: FrontendWebsiteProviderRegistry;\n  /**\n   * Backend API origin (WITHOUT a trailing slash) that anonymous-capture\n   * sections POST to when constructing a `WebsiteAnonymousSessionClient`\n   * (lead / draft-note forms). Sourced from\n   * `WildoMarketingWebsiteConfig.apiOrigin` and passed as a\n   * JSON-serializable island prop (the `.astro` page resolves the\n   * per-environment value and forwards it).\n   *\n   * Optional because only pages that host an anonymous-capture section\n   * need it — brochure pages omit it. A capture section that reads\n   * `undefined` here surfaces a loud misconfiguration rather than\n   * silently failing to submit.\n   */\n  apiOrigin?: string;\n}\n\n/**\n * Bare React context. Default `null` — `useWebsiteRuntime()` throws\n * with a clear error message when invoked outside of\n * `<WebsiteRuntimeContextProvider>`. The defensive throw is preferred\n * over a silent default value so a missing provider is detected at\n * the first hook call rather than at render time when a missing\n * label silently renders as the key string.\n */\nexport const WebsiteRuntimeContext: React.Context<WebsiteRuntimeContextValue | null> =\n  createContext<WebsiteRuntimeContextValue | null>(null);\n\nexport interface WebsiteRuntimeContextProviderProps {\n  value: WebsiteRuntimeContextValue;\n  children: ReactNode;\n}\n\n/**\n * Provider component. Authored as a thin wrapper so consumers do NOT\n * have to import `WebsiteRuntimeContext.Provider` directly — the\n * provider component carries the documented authoring API and is the\n * Fast-Refresh-stable surface section authors compose against.\n */\nexport function WebsiteRuntimeContextProvider({\n  value,\n  children,\n}: WebsiteRuntimeContextProviderProps): ReactNode {\n  return (\n    <WebsiteRuntimeContext.Provider value={value}>\n      {children}\n    </WebsiteRuntimeContext.Provider>\n  );\n}\nWebsiteRuntimeContextProvider.displayName = 'WebsiteRuntimeContextProvider';\n/** @wildo_source:part:end saas.website.runtime.context */\n"]}
+{"version":3,"file":"WebsiteRuntimeContext.js","sourceRoot":"","sources":["../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAkB,MAAM,OAAO,CAAC;AA0K7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,aAAa,CAAoC,IAAI,CAAC,CAAC;AAOzD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GAC2B;IACnC,OAAO,CACL,KAAC,qBAAqB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACzC,QAAQ,GACsB,CAClC,CAAC;AACJ,CAAC;AACD,6BAA6B,CAAC,WAAW,GAAG,+BAA+B,CAAC","sourcesContent":["import React, { createContext, type ReactNode } from 'react';\n\nimport type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n\nimport type { WebsiteDesignTokens } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { FrontendWebsiteProviderRegistry } from '../external-providers/frontend-provider-registry.website';\nimport type { WebsiteLabelKey } from '../../schemas/label-keys/website-label-key.schemas';\nimport type { WebsiteNavigationConfig } from '../../schemas/manifests/website-root-config.shared.schemas';\nimport type { LabelPack } from '../../schemas/validators/label-pack.validator';\n\n/**\n * @wildo_source:part:start saas.website.runtime.context facet:layer:core facet:family:website\n *\n * `WebsiteRuntimeContext` — site-wide runtime state for the marketing\n * surface. Created **once per page render** by the host adapter\n * (Phase 5 `WebsitePageBridge.astro` reads `WebsiteRootConfig` and the\n * resolved label pack from disk and calls\n * `<WebsiteRuntimeContextProvider value={…}>` around the page tree).\n *\n * **Why \"runtime\" and not \"config\"**: the values here are the\n * locale-resolved subset of `WebsiteRootConfig` — only the active\n * locale's label pack travels with the React tree (the other locales\n * live in their own per-locale static builds). A `*Config` name would\n * suggest the full multi-locale surface is in scope.\n *\n * **Three pieces of state**:\n *\n * - `locale` — the currently-rendering locale. Sections that need\n *   locale-aware formatting (number/date in marketing copy is rare\n *   but legitimate) read it via `useWebsiteRuntime()`.\n * - `labelPack` — the locale-resolved flat key→string map, validated\n *   against the manifest by `validateLabelPackAgainstManifest` at\n *   build start. Consumed by `useWebsiteLabel` and\n *   `useWebsiteLabelByKey`.\n * - `designTokens` — the `WebsiteDesignTokens` from\n *   `WebsiteRootConfig.designTokens`. Consumed by\n *   `useWebsiteDesignTokens` and by the Phase 5 CSS emitter that\n *   materializes them as `--website-*` custom properties on the\n *   `<WebsitePageLayout>` root.\n * - `navigation` — the `WebsiteNavigationConfig` from\n *   `WebsiteRootConfig.navigation`. Carried in the runtime context\n *   (rather than as a separate `WebsiteNavigationContext`) because\n *   `<WebsitePageLayout>` already reads runtime state and\n *   header/footer slots are inseparable from \"the site is rendering\n *   right now\". A second context for two component refs would split\n *   the host-adapter's wiring surface without buying isolation.\n * - `frontendProviderRegistry` — optional website-facing public provider\n *   registry hydrated from the materialized provider artifact for the\n *   concrete `STATIC_WEBSITE` service. This keeps analytics / captcha /\n *   browser-monitoring integrations on the same frontend-provider\n *   contract the SaaS app now uses, instead of inventing a website-only\n *   metadata seam.\n *\n * **Why the hook lives in a separate file**: React Fast Refresh only\n * preserves state for a module whose every export is a component, so\n * a module mixing components with plain functions loses its HMR\n * boundary. This file holds the two things that must be identical\n * objects at runtime — the context and the provider component that\n * writes it — while `useWebsiteRuntime` sits alone in\n * `useWebsiteRuntime.ts`. A section author editing a component that\n * merely READS the runtime therefore never remounts the provider.\n *\n * Until 2026-09-09 this paragraph described a different arrangement:\n * that only the bare context was kept here and the provider lived in\n * a file of its own. No such file has ever existed — the provider is\n * exported below — and splitting it out would be the wrong shape\n * anyway, since `useContext` matches on object identity.\n * prose-referent-waiver: the retired file name is quoted only to retire it.\n * The claim named `WebsiteRuntimeContextProvider.tsx`.\n */\nexport interface WebsiteRuntimeContextValue {\n  /**\n   * The currently-rendering locale. Marketing-site routing emits one\n   * static build per locale (D8), so this value is constant per build\n   * — never re-renders mid-session.\n   */\n  locale: AvailableLanguage;\n  /**\n   * The site's default locale (mirrors `WebsiteRootConfig.defaultLocale`).\n   * Carried in the runtime context so client-tier components — namely\n   * `WebsiteInternalLink` (Phase 6 fix H-β) — can compute the correct\n   * locale-prefixed pathname (`/pricing` on the EN site,\n   * `/fr/pricing` on the FR site) without re-importing the root\n   * config. Plumbing it through the runtime keeps the routing rule\n   * a framework-internal concern: section authors NEVER hand-prefix\n   * paths.\n   */\n  defaultLocale: AvailableLanguage;\n  /**\n   * Origin of the application this marketing site sends visitors INTO — the\n   * marketing → product handoff target, authored once as\n   * `WildoMarketingWebsiteConfig.appOrigin` (#493).\n   *\n   * Carried here for exactly the reason `defaultLocale` above is: a\n   * `wildo.website.config.ts` is Node-loaded and therefore invisible to a\n   * client island, so before this a site resolved the app origin a SECOND\n   * time from a public build-time environment variable it could read in the\n   * browser — one host authored twice, in two files, with no mechanical link\n   * between the copies. That is how a marketing site comes to point at the\n   * wrong environment: a defect nobody notices until a customer follows the\n   * link.\n   *\n   * Threading it through the runtime keeps the handoff a framework-internal\n   * concern, the same way threading `defaultLocale` kept locale-prefixing one:\n   * section authors never hand-assemble the product URL, and there is one\n   * place to change it.\n   */\n  appOrigin?: string;\n  /**\n   * Flat `Record<string, string>` label pack for the active locale.\n   * Lookup keys MUST be fully-composed `website.<page>.<section>.<slot>`\n   * strings; consumers that hold leaf paths use `useWebsiteLabel(leaf)`\n   * which composes the full key against the page+section context.\n   */\n  labelPack: LabelPack;\n  /**\n   * Design-token bundle for the active site. Same object referenced\n   * by `WebsiteRootConfig.designTokens`; passed by reference (not\n   * cloned) so token-aware components can rely on referential\n   * stability across renders.\n   */\n  designTokens: WebsiteDesignTokens;\n  /**\n   * Site-wide navigation slot bindings (header / footer components).\n   * Same object referenced by `WebsiteRootConfig.navigation`. Read\n   * by `<WebsitePageLayout>` to render the chrome around each page's\n   * `<main>` content; per-page `header` / `footer` props on\n   * `<WebsitePageLayout>` override these defaults.\n   */\n  navigation: WebsiteNavigationConfig;\n  /**\n   * Fully-composed label key the framework reads to render the\n   * \"Skip to main content\" affordance as the FIRST focusable element\n   * on every page (Phase 6 third audit fix M-α). Mirrors\n   * `WebsiteRootConfig.skipToMainContentLabelKey`. Carried in the\n   * runtime context (NOT re-derived from the root config inside\n   * `WebsitePageLayout`) for two reasons:\n   *   - The layout is a client-tier React component; it cannot import\n   *     the consumer's `WEBSITE_ROOT_CONFIG` symbol without dragging\n   *     server-only code (manifest registry, page components) into\n   *     the client bundle.\n   *   - Threading the key through the runtime keeps the layout's\n   *     contract symmetric with how every other localized text on the\n   *     page is sourced (label pack + key), so the skip link is\n   *     translated automatically without any per-locale branching.\n   */\n  skipToMainContentLabelKey: WebsiteLabelKey;\n  /**\n   * Website-facing public providers for the active static website\n   * service. Optional so older tests and provider-free sites can omit\n   * it, but when present it is the canonical frontend-safe provider\n   * catalog for analytics / captcha / browser-monitoring slices.\n   */\n  frontendProviderRegistry?: FrontendWebsiteProviderRegistry;\n  /**\n   * Backend API origin (WITHOUT a trailing slash) that anonymous-capture\n   * sections POST to when constructing a `WebsiteAnonymousSessionClient`\n   * (lead / draft-note forms). Sourced from\n   * `WildoMarketingWebsiteConfig.apiOrigin` and passed as a\n   * JSON-serializable island prop (the `.astro` page resolves the\n   * per-environment value and forwards it).\n   *\n   * Optional because only pages that host an anonymous-capture section\n   * need it — brochure pages omit it. A capture section that reads\n   * `undefined` here surfaces a loud misconfiguration rather than\n   * silently failing to submit.\n   */\n  apiOrigin?: string;\n}\n\n/**\n * Bare React context. Default `null` — `useWebsiteRuntime()` throws\n * with a clear error message when invoked outside of\n * `<WebsiteRuntimeContextProvider>`. The defensive throw is preferred\n * over a silent default value so a missing provider is detected at\n * the first hook call rather than at render time when a missing\n * label silently renders as the key string.\n */\nexport const WebsiteRuntimeContext: React.Context<WebsiteRuntimeContextValue | null> =\n  createContext<WebsiteRuntimeContextValue | null>(null);\n\nexport interface WebsiteRuntimeContextProviderProps {\n  value: WebsiteRuntimeContextValue;\n  children: ReactNode;\n}\n\n/**\n * Provider component. Authored as a thin wrapper so consumers do NOT\n * have to import `WebsiteRuntimeContext.Provider` directly — the\n * provider component carries the documented authoring API and is the\n * Fast-Refresh-stable surface section authors compose against.\n */\nexport function WebsiteRuntimeContextProvider({\n  value,\n  children,\n}: WebsiteRuntimeContextProviderProps): ReactNode {\n  return (\n    <WebsiteRuntimeContext.Provider value={value}>\n      {children}\n    </WebsiteRuntimeContext.Provider>\n  );\n}\nWebsiteRuntimeContextProvider.displayName = 'WebsiteRuntimeContextProvider';\n/** @wildo_source:part:end saas.website.runtime.context */\n"]}

package/dist/esm/core/contexts/WebsiteSectionContext.d.ts

@@ -17,8 +17,9 @@ import type { WebsiteSectionRef } from '../../schemas/refs/section-ref.schemas';
  * both saves consumers from having to thread the manifest just to
  * map a ref back to its category.
  *
- * **Why a separate file from the hook**: same Fast-Refresh rationale
- * as the runtime + page contexts.
+ * **Why the hook lives in a separate file**: same Fast-Refresh
+ * rationale as the runtime + page contexts — context and provider
+ * together here, the hook alone in `useWebsiteSection.ts`.
  */
 export interface WebsiteSectionContextValue {
     /**