@wildo-ai/saas-website 1.1.5 → 1.1.6

package/dist/esm/core/contexts/WebsiteRuntimeContext.d.ts

@@ -1,7 +1,8 @@
 import React, { type ComponentType, type ReactNode } from 'react';
-import type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';
+import type { AvailableLanguage, PublicPricingCatalog } from '@wildo-ai/saas-models/public-runtime';
 import type { WebsiteDesignTokens } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';
 import type { FrontendWebsiteProviderRegistry } from '../external-providers/frontend-provider-registry.website';
+import type { WebsiteProviderComponentRegistry } from '../external-providers/provider-component-registry.website';
 import type { WebsiteLabelKey } from '../../schemas/label-keys/website-label-key.schemas';
 import type { WebsiteNavigationConfig } from '../../schemas/manifests/website-root-config.shared.schemas';
 import type { LabelPack } from '../../schemas/validators/label-pack.validator';
@@ -9,10 +10,10 @@ import type { LabelPack } from '../../schemas/validators/label-pack.validator';
  * @wildo_source:part:start saas.website.runtime.context facet:layer:core facet:family:website
  *
  * `WebsiteRuntimeContext` — site-wide runtime state for the marketing
- * surface. Created **once per page render** by the host adapter
- * (Phase 5 `WebsitePageBridge.astro` reads `WebsiteRootConfig` and the
- * resolved label pack from disk and calls
- * `<WebsiteRuntimeContextProvider value={…}>` around the page tree).
+ * surface. Created **once per page render** by the host adapter: the
+ * page's `.astro` frontmatter loads the site context and the resolved label
+ * pack, and its bridge island (`createWebsitePageBridgeIsland`) calls
+ * `<WebsiteRuntimeContextProvider value={…}>` around the page tree.
  *
  * **Why "runtime" and not "config"**: the values here are the
  * locale-resolved subset of `WebsiteRootConfig` — only the active
@@ -149,6 +150,14 @@ export interface WebsiteRuntimeContextValue {
      * catalog for analytics / captcha / browser-monitoring slices.
      */
     frontendProviderRegistry?: FrontendWebsiteProviderRegistry;
+    /**
+     * Components the live providers contribute, keyed `capability:providerRef` (#1703) — the same
+     * registry the application builds, from the same `components` declaration. Built by the page bridge
+     * once per island from `frontendProviderRegistry`; read through `useWebsiteProviderComponent` and
+     * rendered by `WebsiteProviderComponent`. Optional for the same reason as the registry above: a
+     * provider-free site, or a test runtime, has none, and every slot then renders nothing.
+     */
+    providerComponentRegistry?: WebsiteProviderComponentRegistry;
     /**
      * Replaces the framework's visitor consent panel (#534). Reads `useWebsiteConsent()`; see
      * `WebsiteConsentBanner` for the three properties a replacement must keep. Absent uses the default.
@@ -170,6 +179,17 @@ export interface WebsiteRuntimeContextValue {
      * silently failing to submit.
      */
     apiOrigin?: string;
+    /**
+     * The application's public pricing catalogue (#1835), derived at build time from the billing
+     * catalogue the backend sells from — so a pricing section states the prices the application
+     * actually charges instead of a hand copy of them. Node-loaded
+     * (`loadWebsitePricingCatalog` on `/config-loader`) and carried as an island prop for the
+     * reason `appOrigin` above is. Read it with `useWebsitePricingCatalog()`.
+     *
+     * Optional because only pricing pages need it; a section that reads it on a page that did not
+     * pass it fails loudly rather than rendering no plans.
+     */
+    pricingCatalog?: PublicPricingCatalog;
 }
 /**
  * Bare React context. Default `null` — `useWebsiteRuntime()` throws

package/dist/esm/core/contexts/WebsiteRuntimeContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteRuntimeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAEjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAChH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;;;;OAKG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,UAAU,EAAE,uBAAuB,CAAC;IACpC;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,+BAA+B,CAAC;IAC3D;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAC3B,CAAC;AAEzD,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GACT,EAAE,kCAAkC,GAAG,SAAS,CAMhD;yBATe,6BAA6B;;;AAW7C,0DAA0D"}
+{"version":3,"file":"WebsiteRuntimeContext.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAiB,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAEjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAEpG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0DAA0D,CAAC;AAChH,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2DAA2D,CAAC;AAClH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,EAAE,iBAAiB,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;;;;OAKG;IACH,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;;OAMG;IACH,UAAU,EAAE,uBAAuB,CAAC;IACpC;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,+BAA+B,CAAC;IAC3D;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,gCAAgC,CAAC;IAC7D;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAC3B,CAAC;AAEzD,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GACT,EAAE,kCAAkC,GAAG,SAAS,CAMhD;yBATe,6BAA6B;;;AAW7C,0DAA0D"}

package/dist/esm/core/contexts/WebsiteRuntimeContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebsiteRuntimeContext.js","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAsC,MAAM,OAAO,CAAC;AAiLjF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,aAAa,CAAoC,IAAI,CAAC,CAAC;AAOzD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GAC2B;IACnC,OAAO,CACL,KAAC,qBAAqB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACzC,QAAQ,GACsB,CAClC,CAAC;AACJ,CAAC;AACD,6BAA6B,CAAC,WAAW,GAAG,+BAA+B,CAAC","sourcesContent":["import React, { createContext, type ComponentType, type ReactNode } from 'react';\n\nimport type { AvailableLanguage } from '@wildo-ai/saas-models/public-runtime';\n\nimport type { WebsiteDesignTokens } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { FrontendWebsiteProviderRegistry } from '../external-providers/frontend-provider-registry.website';\nimport type { WebsiteLabelKey } from '../../schemas/label-keys/website-label-key.schemas';\nimport type { WebsiteNavigationConfig } from '../../schemas/manifests/website-root-config.shared.schemas';\nimport type { LabelPack } from '../../schemas/validators/label-pack.validator';\n\n/**\n * @wildo_source:part:start saas.website.runtime.context facet:layer:core facet:family:website\n *\n * `WebsiteRuntimeContext` — site-wide runtime state for the marketing\n * surface. Created **once per page render** by the host adapter\n * (Phase 5 `WebsitePageBridge.astro` reads `WebsiteRootConfig` and the\n * resolved label pack from disk and calls\n * `<WebsiteRuntimeContextProvider value={…}>` around the page tree).\n *\n * **Why \"runtime\" and not \"config\"**: the values here are the\n * locale-resolved subset of `WebsiteRootConfig` — only the active\n * locale's label pack travels with the React tree (the other locales\n * live in their own per-locale static builds). A `*Config` name would\n * suggest the full multi-locale surface is in scope.\n *\n * **Three pieces of state**:\n *\n * - `locale` — the currently-rendering locale. Sections that need\n *   locale-aware formatting (number/date in marketing copy is rare\n *   but legitimate) read it via `useWebsiteRuntime()`.\n * - `labelPack` — the locale-resolved flat key→string map, validated\n *   against the manifest by `validateLabelPackAgainstManifest` at\n *   build start. Consumed by `useWebsiteLabel` and\n *   `useWebsiteLabelByKey`.\n * - `designTokens` — the `WebsiteDesignTokens` from\n *   `WebsiteRootConfig.designTokens`. Consumed by\n *   `useWebsiteDesignTokens` and by the Phase 5 CSS emitter that\n *   materializes them as `--website-*` custom properties on the\n *   `<WebsitePageLayout>` root.\n * - `navigation` — the `WebsiteNavigationConfig` from\n *   `WebsiteRootConfig.navigation`. Carried in the runtime context\n *   (rather than as a separate `WebsiteNavigationContext`) because\n *   `<WebsitePageLayout>` already reads runtime state and\n *   header/footer slots are inseparable from \"the site is rendering\n *   right now\". A second context for two component refs would split\n *   the host-adapter's wiring surface without buying isolation.\n * - `frontendProviderRegistry` — optional website-facing public provider\n *   registry hydrated from the materialized provider artifact for the\n *   concrete `STATIC_WEBSITE` service. This keeps analytics / captcha /\n *   browser-monitoring integrations on the same frontend-provider\n *   contract the SaaS app now uses, instead of inventing a website-only\n *   metadata seam.\n *\n * **Why the hook lives in a separate file**: React Fast Refresh only\n * preserves state for a module whose every export is a component, so\n * a module mixing components with plain functions loses its HMR\n * boundary. This file holds the two things that must be identical\n * objects at runtime — the context and the provider component that\n * writes it — while `useWebsiteRuntime` sits alone in\n * `useWebsiteRuntime.ts`. A section author editing a component that\n * merely READS the runtime therefore never remounts the provider.\n *\n * Until 2026-09-09 this paragraph described a different arrangement:\n * that only the bare context was kept here and the provider lived in\n * a file of its own. No such file has ever existed — the provider is\n * exported below — and splitting it out would be the wrong shape\n * anyway, since `useContext` matches on object identity.\n * prose-referent-waiver: the retired file name is quoted only to retire it.\n * The claim named `WebsiteRuntimeContextProvider.tsx`.\n */\nexport interface WebsiteRuntimeContextValue {\n  /**\n   * The currently-rendering locale. Marketing-site routing emits one\n   * static build per locale (D8), so this value is constant per build\n   * — never re-renders mid-session.\n   */\n  locale: AvailableLanguage;\n  /**\n   * The site's default locale (mirrors `WebsiteRootConfig.defaultLocale`).\n   * Carried in the runtime context so client-tier components — namely\n   * `WebsiteInternalLink` (Phase 6 fix H-β) — can compute the correct\n   * locale-prefixed pathname (`/pricing` on the EN site,\n   * `/fr/pricing` on the FR site) without re-importing the root\n   * config. Plumbing it through the runtime keeps the routing rule\n   * a framework-internal concern: section authors NEVER hand-prefix\n   * paths.\n   */\n  defaultLocale: AvailableLanguage;\n  /**\n   * Origin of the application this marketing site sends visitors INTO — the\n   * marketing → product handoff target, authored once as\n   * `WildoMarketingWebsiteConfig.appOrigin` (#493).\n   *\n   * Carried here for exactly the reason `defaultLocale` above is: a\n   * `wildo.website.config.ts` is Node-loaded and therefore invisible to a\n   * client island, so before this a site resolved the app origin a SECOND\n   * time from a public build-time environment variable it could read in the\n   * browser — one host authored twice, in two files, with no mechanical link\n   * between the copies. That is how a marketing site comes to point at the\n   * wrong environment: a defect nobody notices until a customer follows the\n   * link.\n   *\n   * Threading it through the runtime keeps the handoff a framework-internal\n   * concern, the same way threading `defaultLocale` kept locale-prefixing one:\n   * section authors never hand-assemble the product URL, and there is one\n   * place to change it.\n   */\n  appOrigin?: string;\n  /**\n   * Flat `Record<string, string>` label pack for the active locale.\n   * Lookup keys MUST be fully-composed `website.<page>.<section>.<slot>`\n   * strings; consumers that hold leaf paths use `useWebsiteLabel(leaf)`\n   * which composes the full key against the page+section context.\n   */\n  labelPack: LabelPack;\n  /**\n   * Design-token bundle for the active site. Same object referenced\n   * by `WebsiteRootConfig.designTokens`; passed by reference (not\n   * cloned) so token-aware components can rely on referential\n   * stability across renders.\n   */\n  designTokens: WebsiteDesignTokens;\n  /**\n   * Site-wide navigation slot bindings (header / footer components).\n   * Same object referenced by `WebsiteRootConfig.navigation`. Read\n   * by `<WebsitePageLayout>` to render the chrome around each page's\n   * `<main>` content; per-page `header` / `footer` props on\n   * `<WebsitePageLayout>` override these defaults.\n   */\n  navigation: WebsiteNavigationConfig;\n  /**\n   * Fully-composed label key the framework reads to render the\n   * \"Skip to main content\" affordance as the FIRST focusable element\n   * on every page (Phase 6 third audit fix M-α). Mirrors\n   * `WebsiteRootConfig.skipToMainContentLabelKey`. Carried in the\n   * runtime context (NOT re-derived from the root config inside\n   * `WebsitePageLayout`) for two reasons:\n   *   - The layout is a client-tier React component; it cannot import\n   *     the consumer's `WEBSITE_ROOT_CONFIG` symbol without dragging\n   *     server-only code (manifest registry, page components) into\n   *     the client bundle.\n   *   - Threading the key through the runtime keeps the layout's\n   *     contract symmetric with how every other localized text on the\n   *     page is sourced (label pack + key), so the skip link is\n   *     translated automatically without any per-locale branching.\n   */\n  skipToMainContentLabelKey: WebsiteLabelKey;\n  /**\n   * Website-facing public providers for the active static website\n   * service. Optional so older tests and provider-free sites can omit\n   * it, but when present it is the canonical frontend-safe provider\n   * catalog for analytics / captcha / browser-monitoring slices.\n   */\n  frontendProviderRegistry?: FrontendWebsiteProviderRegistry;\n  /**\n   * Replaces the framework's visitor consent panel (#534). Reads `useWebsiteConsent()`; see\n   * `WebsiteConsentBanner` for the three properties a replacement must keep. Absent uses the default.\n   * Closed over by the bridge rather than passed as an island prop, like `navigation`, because a\n   * component cannot cross Astro's serialization boundary.\n   */\n  consentBannerComponent?: ComponentType;\n  /**\n   * Backend API origin (WITHOUT a trailing slash) that anonymous-capture\n   * sections POST to when constructing a `WebsiteAnonymousSessionClient`\n   * (lead / draft-note forms). Sourced from\n   * `WildoMarketingWebsiteConfig.apiOrigin` and passed as a\n   * JSON-serializable island prop (the `.astro` page resolves the\n   * per-environment value and forwards it).\n   *\n   * Optional because only pages that host an anonymous-capture section\n   * need it — brochure pages omit it. A capture section that reads\n   * `undefined` here surfaces a loud misconfiguration rather than\n   * silently failing to submit.\n   */\n  apiOrigin?: string;\n}\n\n/**\n * Bare React context. Default `null` — `useWebsiteRuntime()` throws\n * with a clear error message when invoked outside of\n * `<WebsiteRuntimeContextProvider>`. The defensive throw is preferred\n * over a silent default value so a missing provider is detected at\n * the first hook call rather than at render time when a missing\n * label silently renders as the key string.\n */\nexport const WebsiteRuntimeContext: React.Context<WebsiteRuntimeContextValue | null> =\n  createContext<WebsiteRuntimeContextValue | null>(null);\n\nexport interface WebsiteRuntimeContextProviderProps {\n  value: WebsiteRuntimeContextValue;\n  children: ReactNode;\n}\n\n/**\n * Provider component. Authored as a thin wrapper so consumers do NOT\n * have to import `WebsiteRuntimeContext.Provider` directly — the\n * provider component carries the documented authoring API and is the\n * Fast-Refresh-stable surface section authors compose against.\n */\nexport function WebsiteRuntimeContextProvider({\n  value,\n  children,\n}: WebsiteRuntimeContextProviderProps): ReactNode {\n  return (\n    <WebsiteRuntimeContext.Provider value={value}>\n      {children}\n    </WebsiteRuntimeContext.Provider>\n  );\n}\nWebsiteRuntimeContextProvider.displayName = 'WebsiteRuntimeContextProvider';\n/** @wildo_source:part:end saas.website.runtime.context */\n"]}
+{"version":3,"file":"WebsiteRuntimeContext.js","sourceRoot":"","sources":["../../../../../src/core/contexts/WebsiteRuntimeContext.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,aAAa,EAAsC,MAAM,OAAO,CAAC;AAqMjF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,aAAa,CAAoC,IAAI,CAAC,CAAC;AAOzD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,GAC2B;IACnC,OAAO,CACL,KAAC,qBAAqB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACzC,QAAQ,GACsB,CAClC,CAAC;AACJ,CAAC;AACD,6BAA6B,CAAC,WAAW,GAAG,+BAA+B,CAAC","sourcesContent":["import React, { createContext, type ComponentType, type ReactNode } from 'react';\n\nimport type { AvailableLanguage, PublicPricingCatalog } from '@wildo-ai/saas-models/public-runtime';\n\nimport type { WebsiteDesignTokens } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport type { FrontendWebsiteProviderRegistry } from '../external-providers/frontend-provider-registry.website';\nimport type { WebsiteProviderComponentRegistry } from '../external-providers/provider-component-registry.website';\nimport type { WebsiteLabelKey } from '../../schemas/label-keys/website-label-key.schemas';\nimport type { WebsiteNavigationConfig } from '../../schemas/manifests/website-root-config.shared.schemas';\nimport type { LabelPack } from '../../schemas/validators/label-pack.validator';\n\n/**\n * @wildo_source:part:start saas.website.runtime.context facet:layer:core facet:family:website\n *\n * `WebsiteRuntimeContext` — site-wide runtime state for the marketing\n * surface. Created **once per page render** by the host adapter: the\n * page's `.astro` frontmatter loads the site context and the resolved label\n * pack, and its bridge island (`createWebsitePageBridgeIsland`) calls\n * `<WebsiteRuntimeContextProvider value={…}>` around the page tree.\n *\n * **Why \"runtime\" and not \"config\"**: the values here are the\n * locale-resolved subset of `WebsiteRootConfig` — only the active\n * locale's label pack travels with the React tree (the other locales\n * live in their own per-locale static builds). A `*Config` name would\n * suggest the full multi-locale surface is in scope.\n *\n * **Three pieces of state**:\n *\n * - `locale` — the currently-rendering locale. Sections that need\n *   locale-aware formatting (number/date in marketing copy is rare\n *   but legitimate) read it via `useWebsiteRuntime()`.\n * - `labelPack` — the locale-resolved flat key→string map, validated\n *   against the manifest by `validateLabelPackAgainstManifest` at\n *   build start. Consumed by `useWebsiteLabel` and\n *   `useWebsiteLabelByKey`.\n * - `designTokens` — the `WebsiteDesignTokens` from\n *   `WebsiteRootConfig.designTokens`. Consumed by\n *   `useWebsiteDesignTokens` and by the Phase 5 CSS emitter that\n *   materializes them as `--website-*` custom properties on the\n *   `<WebsitePageLayout>` root.\n * - `navigation` — the `WebsiteNavigationConfig` from\n *   `WebsiteRootConfig.navigation`. Carried in the runtime context\n *   (rather than as a separate `WebsiteNavigationContext`) because\n *   `<WebsitePageLayout>` already reads runtime state and\n *   header/footer slots are inseparable from \"the site is rendering\n *   right now\". A second context for two component refs would split\n *   the host-adapter's wiring surface without buying isolation.\n * - `frontendProviderRegistry` — optional website-facing public provider\n *   registry hydrated from the materialized provider artifact for the\n *   concrete `STATIC_WEBSITE` service. This keeps analytics / captcha /\n *   browser-monitoring integrations on the same frontend-provider\n *   contract the SaaS app now uses, instead of inventing a website-only\n *   metadata seam.\n *\n * **Why the hook lives in a separate file**: React Fast Refresh only\n * preserves state for a module whose every export is a component, so\n * a module mixing components with plain functions loses its HMR\n * boundary. This file holds the two things that must be identical\n * objects at runtime — the context and the provider component that\n * writes it — while `useWebsiteRuntime` sits alone in\n * `useWebsiteRuntime.ts`. A section author editing a component that\n * merely READS the runtime therefore never remounts the provider.\n *\n * Until 2026-09-09 this paragraph described a different arrangement:\n * that only the bare context was kept here and the provider lived in\n * a file of its own. No such file has ever existed — the provider is\n * exported below — and splitting it out would be the wrong shape\n * anyway, since `useContext` matches on object identity.\n * prose-referent-waiver: the retired file name is quoted only to retire it.\n * The claim named `WebsiteRuntimeContextProvider.tsx`.\n */\nexport interface WebsiteRuntimeContextValue {\n  /**\n   * The currently-rendering locale. Marketing-site routing emits one\n   * static build per locale (D8), so this value is constant per build\n   * — never re-renders mid-session.\n   */\n  locale: AvailableLanguage;\n  /**\n   * The site's default locale (mirrors `WebsiteRootConfig.defaultLocale`).\n   * Carried in the runtime context so client-tier components — namely\n   * `WebsiteInternalLink` (Phase 6 fix H-β) — can compute the correct\n   * locale-prefixed pathname (`/pricing` on the EN site,\n   * `/fr/pricing` on the FR site) without re-importing the root\n   * config. Plumbing it through the runtime keeps the routing rule\n   * a framework-internal concern: section authors NEVER hand-prefix\n   * paths.\n   */\n  defaultLocale: AvailableLanguage;\n  /**\n   * Origin of the application this marketing site sends visitors INTO — the\n   * marketing → product handoff target, authored once as\n   * `WildoMarketingWebsiteConfig.appOrigin` (#493).\n   *\n   * Carried here for exactly the reason `defaultLocale` above is: a\n   * `wildo.website.config.ts` is Node-loaded and therefore invisible to a\n   * client island, so before this a site resolved the app origin a SECOND\n   * time from a public build-time environment variable it could read in the\n   * browser — one host authored twice, in two files, with no mechanical link\n   * between the copies. That is how a marketing site comes to point at the\n   * wrong environment: a defect nobody notices until a customer follows the\n   * link.\n   *\n   * Threading it through the runtime keeps the handoff a framework-internal\n   * concern, the same way threading `defaultLocale` kept locale-prefixing one:\n   * section authors never hand-assemble the product URL, and there is one\n   * place to change it.\n   */\n  appOrigin?: string;\n  /**\n   * Flat `Record<string, string>` label pack for the active locale.\n   * Lookup keys MUST be fully-composed `website.<page>.<section>.<slot>`\n   * strings; consumers that hold leaf paths use `useWebsiteLabel(leaf)`\n   * which composes the full key against the page+section context.\n   */\n  labelPack: LabelPack;\n  /**\n   * Design-token bundle for the active site. Same object referenced\n   * by `WebsiteRootConfig.designTokens`; passed by reference (not\n   * cloned) so token-aware components can rely on referential\n   * stability across renders.\n   */\n  designTokens: WebsiteDesignTokens;\n  /**\n   * Site-wide navigation slot bindings (header / footer components).\n   * Same object referenced by `WebsiteRootConfig.navigation`. Read\n   * by `<WebsitePageLayout>` to render the chrome around each page's\n   * `<main>` content; per-page `header` / `footer` props on\n   * `<WebsitePageLayout>` override these defaults.\n   */\n  navigation: WebsiteNavigationConfig;\n  /**\n   * Fully-composed label key the framework reads to render the\n   * \"Skip to main content\" affordance as the FIRST focusable element\n   * on every page (Phase 6 third audit fix M-α). Mirrors\n   * `WebsiteRootConfig.skipToMainContentLabelKey`. Carried in the\n   * runtime context (NOT re-derived from the root config inside\n   * `WebsitePageLayout`) for two reasons:\n   *   - The layout is a client-tier React component; it cannot import\n   *     the consumer's `WEBSITE_ROOT_CONFIG` symbol without dragging\n   *     server-only code (manifest registry, page components) into\n   *     the client bundle.\n   *   - Threading the key through the runtime keeps the layout's\n   *     contract symmetric with how every other localized text on the\n   *     page is sourced (label pack + key), so the skip link is\n   *     translated automatically without any per-locale branching.\n   */\n  skipToMainContentLabelKey: WebsiteLabelKey;\n  /**\n   * Website-facing public providers for the active static website\n   * service. Optional so older tests and provider-free sites can omit\n   * it, but when present it is the canonical frontend-safe provider\n   * catalog for analytics / captcha / browser-monitoring slices.\n   */\n  frontendProviderRegistry?: FrontendWebsiteProviderRegistry;\n  /**\n   * Components the live providers contribute, keyed `capability:providerRef` (#1703) — the same\n   * registry the application builds, from the same `components` declaration. Built by the page bridge\n   * once per island from `frontendProviderRegistry`; read through `useWebsiteProviderComponent` and\n   * rendered by `WebsiteProviderComponent`. Optional for the same reason as the registry above: a\n   * provider-free site, or a test runtime, has none, and every slot then renders nothing.\n   */\n  providerComponentRegistry?: WebsiteProviderComponentRegistry;\n  /**\n   * Replaces the framework's visitor consent panel (#534). Reads `useWebsiteConsent()`; see\n   * `WebsiteConsentBanner` for the three properties a replacement must keep. Absent uses the default.\n   * Closed over by the bridge rather than passed as an island prop, like `navigation`, because a\n   * component cannot cross Astro's serialization boundary.\n   */\n  consentBannerComponent?: ComponentType;\n  /**\n   * Backend API origin (WITHOUT a trailing slash) that anonymous-capture\n   * sections POST to when constructing a `WebsiteAnonymousSessionClient`\n   * (lead / draft-note forms). Sourced from\n   * `WildoMarketingWebsiteConfig.apiOrigin` and passed as a\n   * JSON-serializable island prop (the `.astro` page resolves the\n   * per-environment value and forwards it).\n   *\n   * Optional because only pages that host an anonymous-capture section\n   * need it — brochure pages omit it. A capture section that reads\n   * `undefined` here surfaces a loud misconfiguration rather than\n   * silently failing to submit.\n   */\n  apiOrigin?: string;\n  /**\n   * The application's public pricing catalogue (#1835), derived at build time from the billing\n   * catalogue the backend sells from — so a pricing section states the prices the application\n   * actually charges instead of a hand copy of them. Node-loaded\n   * (`loadWebsitePricingCatalog` on `/config-loader`) and carried as an island prop for the\n   * reason `appOrigin` above is. Read it with `useWebsitePricingCatalog()`.\n   *\n   * Optional because only pricing pages need it; a section that reads it on a page that did not\n   * pass it fails loudly rather than rendering no plans.\n   */\n  pricingCatalog?: PublicPricingCatalog;\n}\n\n/**\n * Bare React context. Default `null` — `useWebsiteRuntime()` throws\n * with a clear error message when invoked outside of\n * `<WebsiteRuntimeContextProvider>`. The defensive throw is preferred\n * over a silent default value so a missing provider is detected at\n * the first hook call rather than at render time when a missing\n * label silently renders as the key string.\n */\nexport const WebsiteRuntimeContext: React.Context<WebsiteRuntimeContextValue | null> =\n  createContext<WebsiteRuntimeContextValue | null>(null);\n\nexport interface WebsiteRuntimeContextProviderProps {\n  value: WebsiteRuntimeContextValue;\n  children: ReactNode;\n}\n\n/**\n * Provider component. Authored as a thin wrapper so consumers do NOT\n * have to import `WebsiteRuntimeContext.Provider` directly — the\n * provider component carries the documented authoring API and is the\n * Fast-Refresh-stable surface section authors compose against.\n */\nexport function WebsiteRuntimeContextProvider({\n  value,\n  children,\n}: WebsiteRuntimeContextProviderProps): ReactNode {\n  return (\n    <WebsiteRuntimeContext.Provider value={value}>\n      {children}\n    </WebsiteRuntimeContext.Provider>\n  );\n}\nWebsiteRuntimeContextProvider.displayName = 'WebsiteRuntimeContextProvider';\n/** @wildo_source:part:end saas.website.runtime.context */\n"]}

package/dist/esm/core/contexts/useWebsiteRuntime.d.ts

@@ -1,3 +1,4 @@
+import type { PublicPricingCatalog } from '@wildo-ai/saas-models/public-runtime';
 import { type WebsiteRuntimeContextValue } from './WebsiteRuntimeContext';
 /**
  * @wildo_source:part:start saas.website.use-runtime.hook facet:layer:core facet:family:website
@@ -16,4 +17,21 @@ import { type WebsiteRuntimeContextValue } from './WebsiteRuntimeContext';
  */
 export declare function useWebsiteRuntime(): WebsiteRuntimeContextValue;
 /** @wildo_source:part:end saas.website.use-runtime.hook */
+/**
+ * @wildo_source:part:start saas.website.use-pricing-catalog.hook facet:layer:core facet:family:website facet:audience:app-developer
+ *
+ * `useWebsitePricingCatalog()` — the application's public pricing catalogue, for a pricing section.
+ *
+ * The plans, their prices, which one is recommended, how much of each price may be stated, and which
+ * are announced but not yet on sale — all derived at build time from the billing catalogue the
+ * backend sells from. A pricing section renders from THIS and never keeps its own copy of a price:
+ * a copy is a price that will disagree with the one the application charges.
+ *
+ * Throws when the page did not pass the catalogue to its bridge island: a pricing section with no
+ * plans would silently state that the application sells nothing. The page's `.astro` frontmatter
+ * loads it with `loadWebsitePricingCatalog()` from `@wildo-ai/saas-website/config-loader` and passes
+ * it as the island's `pricingCatalog` prop.
+ */
+export declare function useWebsitePricingCatalog(): PublicPricingCatalog;
+/** @wildo_source:part:end saas.website.use-pricing-catalog.hook */
 //# sourceMappingURL=useWebsiteRuntime.d.ts.map

package/dist/esm/core/contexts/useWebsiteRuntime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useWebsiteRuntime.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/useWebsiteRuntime.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,IAAI,0BAA0B,CAU9D;AACD,2DAA2D"}
+{"version":3,"file":"useWebsiteRuntime.d.ts","sourceRoot":"","sources":["../../../../../src/core/contexts/useWebsiteRuntime.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,IAAI,0BAA0B,CAW9D;AACD,2DAA2D;AAE3D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,oBAAoB,CAU/D;AACD,mEAAmE"}

package/dist/esm/core/contexts/useWebsiteRuntime.js

@@ -19,10 +19,36 @@ export function useWebsiteRuntime() {
     const value = useContext(WebsiteRuntimeContext);
     if (value === null) {
         throw new Error('[useWebsiteRuntime] must be called inside <WebsiteRuntimeContextProvider>. ' +
-            'In Astro pages this is provided by `WebsitePageBridge.astro` — make sure ' +
-            'your page imports the bridge instead of rendering React components directly.');
+            'In Astro pages this is provided by the page\'s bridge island (`createWebsitePageBridgeIsland` ' +
+            'from @wildo-ai/saas-website/astro-island) — make sure the page renders its bridge instead of ' +
+            'rendering React components directly.');
     }
     return value;
 }
 /** @wildo_source:part:end saas.website.use-runtime.hook */
+/**
+ * @wildo_source:part:start saas.website.use-pricing-catalog.hook facet:layer:core facet:family:website facet:audience:app-developer
+ *
+ * `useWebsitePricingCatalog()` — the application's public pricing catalogue, for a pricing section.
+ *
+ * The plans, their prices, which one is recommended, how much of each price may be stated, and which
+ * are announced but not yet on sale — all derived at build time from the billing catalogue the
+ * backend sells from. A pricing section renders from THIS and never keeps its own copy of a price:
+ * a copy is a price that will disagree with the one the application charges.
+ *
+ * Throws when the page did not pass the catalogue to its bridge island: a pricing section with no
+ * plans would silently state that the application sells nothing. The page's `.astro` frontmatter
+ * loads it with `loadWebsitePricingCatalog()` from `@wildo-ai/saas-website/config-loader` and passes
+ * it as the island's `pricingCatalog` prop.
+ */
+export function useWebsitePricingCatalog() {
+    const { pricingCatalog } = useWebsiteRuntime();
+    if (pricingCatalog === undefined) {
+        throw new Error('[useWebsitePricingCatalog] this page did not pass a pricing catalogue to its bridge island. In the page\'s '
+            + '`.astro` frontmatter, load it with `await loadWebsitePricingCatalog()` (the @wildo-ai/saas-website/config-loader '
+            + 'subpath) and pass `pricingCatalog={pricingCatalog}` to the island.');
+    }
+    return pricingCatalog;
+}
+/** @wildo_source:part:end saas.website.use-pricing-catalog.hook */
 //# sourceMappingURL=useWebsiteRuntime.js.map

package/dist/esm/core/contexts/useWebsiteRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"useWebsiteRuntime.js","sourceRoot":"","sources":["../../../../../src/core/contexts/useWebsiteRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnC,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,2EAA2E;YAC3E,8EAA8E,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,2DAA2D","sourcesContent":["import { useContext } from 'react';\n\nimport {\n  WebsiteRuntimeContext,\n  type WebsiteRuntimeContextValue,\n} from './WebsiteRuntimeContext';\n\n/**\n * @wildo_source:part:start saas.website.use-runtime.hook facet:layer:core facet:family:website\n *\n * `useWebsiteRuntime()` — read access to the\n * `WebsiteRuntimeContextValue`. Throws if invoked outside of a\n * `<WebsiteRuntimeContextProvider>` so a missing host adapter is\n * detected at the first hook call (fail-loud).\n *\n * Section authors usually do NOT call this directly — prefer the\n * higher-level hooks (`useWebsiteLabel`, `useWebsiteLabelByKey`,\n * `useWebsiteDesignTokens`) which expose only the slice they need.\n * Direct access is reserved for layout primitives and locale-aware\n * formatters that legitimately need the active locale or the raw\n * label pack.\n */\nexport function useWebsiteRuntime(): WebsiteRuntimeContextValue {\n  const value = useContext(WebsiteRuntimeContext);\n  if (value === null) {\n    throw new Error(\n      '[useWebsiteRuntime] must be called inside <WebsiteRuntimeContextProvider>. ' +\n        'In Astro pages this is provided by `WebsitePageBridge.astro` — make sure ' +\n        'your page imports the bridge instead of rendering React components directly.',\n    );\n  }\n  return value;\n}\n/** @wildo_source:part:end saas.website.use-runtime.hook */\n"]}
+{"version":3,"file":"useWebsiteRuntime.js","sourceRoot":"","sources":["../../../../../src/core/contexts/useWebsiteRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAInC,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,gGAAgG;YAChG,+FAA+F;YAC/F,sCAAsC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,2DAA2D;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC/C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,6GAA6G;cACzG,mHAAmH;cACnH,oEAAoE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AACD,mEAAmE","sourcesContent":["import { useContext } from 'react';\n\nimport type { PublicPricingCatalog } from '@wildo-ai/saas-models/public-runtime';\n\nimport {\n  WebsiteRuntimeContext,\n  type WebsiteRuntimeContextValue,\n} from './WebsiteRuntimeContext';\n\n/**\n * @wildo_source:part:start saas.website.use-runtime.hook facet:layer:core facet:family:website\n *\n * `useWebsiteRuntime()` — read access to the\n * `WebsiteRuntimeContextValue`. Throws if invoked outside of a\n * `<WebsiteRuntimeContextProvider>` so a missing host adapter is\n * detected at the first hook call (fail-loud).\n *\n * Section authors usually do NOT call this directly — prefer the\n * higher-level hooks (`useWebsiteLabel`, `useWebsiteLabelByKey`,\n * `useWebsiteDesignTokens`) which expose only the slice they need.\n * Direct access is reserved for layout primitives and locale-aware\n * formatters that legitimately need the active locale or the raw\n * label pack.\n */\nexport function useWebsiteRuntime(): WebsiteRuntimeContextValue {\n  const value = useContext(WebsiteRuntimeContext);\n  if (value === null) {\n    throw new Error(\n      '[useWebsiteRuntime] must be called inside <WebsiteRuntimeContextProvider>. ' +\n        'In Astro pages this is provided by the page\\'s bridge island (`createWebsitePageBridgeIsland` ' +\n        'from @wildo-ai/saas-website/astro-island) — make sure the page renders its bridge instead of ' +\n        'rendering React components directly.',\n    );\n  }\n  return value;\n}\n/** @wildo_source:part:end saas.website.use-runtime.hook */\n\n/**\n * @wildo_source:part:start saas.website.use-pricing-catalog.hook facet:layer:core facet:family:website facet:audience:app-developer\n *\n * `useWebsitePricingCatalog()` — the application's public pricing catalogue, for a pricing section.\n *\n * The plans, their prices, which one is recommended, how much of each price may be stated, and which\n * are announced but not yet on sale — all derived at build time from the billing catalogue the\n * backend sells from. A pricing section renders from THIS and never keeps its own copy of a price:\n * a copy is a price that will disagree with the one the application charges.\n *\n * Throws when the page did not pass the catalogue to its bridge island: a pricing section with no\n * plans would silently state that the application sells nothing. The page's `.astro` frontmatter\n * loads it with `loadWebsitePricingCatalog()` from `@wildo-ai/saas-website/config-loader` and passes\n * it as the island's `pricingCatalog` prop.\n */\nexport function useWebsitePricingCatalog(): PublicPricingCatalog {\n  const { pricingCatalog } = useWebsiteRuntime();\n  if (pricingCatalog === undefined) {\n    throw new Error(\n      '[useWebsitePricingCatalog] this page did not pass a pricing catalogue to its bridge island. In the page\\'s '\n        + '`.astro` frontmatter, load it with `await loadWebsitePricingCatalog()` (the @wildo-ai/saas-website/config-loader '\n        + 'subpath) and pass `pricingCatalog={pricingCatalog}` to the island.',\n    );\n  }\n  return pricingCatalog;\n}\n/** @wildo_source:part:end saas.website.use-pricing-catalog.hook */\n"]}

package/dist/esm/core/external-providers/WebsiteProviderComponent.d.ts

@@ -0,0 +1,57 @@
+import { type ReactNode } from 'react';
+import type { ConsentPurpose, ProviderCapability } from '@wildo-ai/saas-models/public-runtime';
+/**
+ * @wildo_source:part:start saas.website.provider-component.slot facet:layer:core facet:family:website
+ *
+ * `<WebsiteProviderComponent>` — places ONE provider's component on a website page (#1703): an
+ * address lookup on a contact form, a vendor widget on a marketing page. The component comes from the
+ * provider's own `components[capability]` declaration, the same one the application reads, through
+ * the website's provider-component registry.
+ *
+ * What it guarantees, so a page does not have to:
+ *
+ * - **Nothing of the vendor reaches the static HTML.** The component loads from an effect, which never
+ *   runs during the Astro server render, and the registry itself refuses to load where there is no
+ *   browser document. The server renders only the reserved box.
+ * - **No layout shift.** `reservedMinHeight` applies to the box in EVERY state — the server
+ *   placeholder, loading, the refusals and the loaded component — so the page does not jump when the
+ *   component arrives. Set it to the component's rendered height.
+ * - **The vendor's scripts load with the component**, not on every page: the layout injects at startup
+ *   only the scripts of providers that contribute no component.
+ * - **Consent before download.** A provider resting on a purpose the visitor has not granted downloads
+ *   nothing; the box states that the feature is off, names the purposes it rests on, and offers the
+ *   consent panel (`openSettings`). Granting there loads the component in place.
+ * - **Announced, and operable by keyboard.** The box holds a `role="status"` live region from the first
+ *   render, so a refusal is announced when it appears; the consent button sits outside it, so it is not
+ *   read out as part of the message, and is a real button.
+ * - **A failure says so.** A component that could not load renders the site's `unavailable` wording,
+ *   never a blank. A provider that offers no component here (left off in this environment) renders the
+ *   empty box, since there is nothing to retry.
+ *
+ * The words come from the site's label pack: `website.chrome.provider-component.consent-required` and
+ * `.unavailable` are framework-owned keys every pack must carry, and the purpose names and the button
+ * reuse the consent panel's keys. Pass `renderConsentRequired` to word the refusal in the page's own
+ * chrome instead; it receives the missing purposes and the action that opens the panel, and then owns
+ * its own announcement.
+ *
+ * It does not choose a provider. Pass the ref the page chose — `useWebsiteProviderComponentChoices`
+ * lists the candidates — or `undefined` while nothing is chosen.
+ */
+export interface WebsiteProviderComponentProps<TProps extends object> {
+    /** The capability the component fills, e.g. `FRONTEND_ADDRESS_LOOKUP`. */
+    capability: ProviderCapability;
+    /** The provider the page chose, or `undefined` while nothing is chosen. */
+    providerRef: string | undefined;
+    /** The props the loaded component receives — the capability's slot contract. */
+    componentProps: TProps;
+    /** CSS length reserved for the box in every state, so the page does not shift when the component loads. */
+    reservedMinHeight?: string;
+    /** Replaces the default consent-required state. */
+    renderConsentRequired?: (input: {
+        missingPurposes: readonly ConsentPurpose[];
+        openConsentSettings: () => void;
+    }) => ReactNode;
+}
+export declare function WebsiteProviderComponent<TProps extends object>({ capability, providerRef, componentProps, reservedMinHeight, renderConsentRequired, }: WebsiteProviderComponentProps<TProps>): ReactNode;
+/** @wildo_source:part:end saas.website.provider-component.slot */
+//# sourceMappingURL=WebsiteProviderComponent.d.ts.map

package/dist/esm/core/external-providers/WebsiteProviderComponent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebsiteProviderComponent.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/WebsiteProviderComponent.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AA6D/F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,WAAW,6BAA6B,CAAC,MAAM,SAAS,MAAM;IAClE,0EAA0E;IAC1E,UAAU,EAAE,kBAAkB,CAAC;IAC/B,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,2GAA2G;IAC3G,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;QAAC,mBAAmB,EAAE,MAAM,IAAI,CAAA;KAAE,KAAK,SAAS,CAAC;CAC/H;AAED,wBAAgB,wBAAwB,CAAC,MAAM,SAAS,MAAM,EAAE,EAC9D,UAAU,EACV,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,qBAAqB,GACtB,EAAE,6BAA6B,CAAC,MAAM,CAAC,GAAG,SAAS,CAgCnD;AACD,kEAAkE"}

package/dist/esm/core/external-providers/WebsiteProviderComponent.js

@@ -0,0 +1,56 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/website';
+import { websiteDesignTokenCssVar } from '../../schemas/design-tokens/website-design-tokens.shared.schemas.js';
+import { WebsiteConsentLabelSlot, websiteConsentLabelKey, websiteConsentPurposeLabelKey, } from '../../schemas/label-keys/website-consent-label-keys.schemas.js';
+import { WebsiteProviderComponentLabelSlot, websiteProviderComponentLabelKey, } from '../../schemas/label-keys/website-provider-component-label-keys.schemas.js';
+import { useWebsiteConsent } from '../consent/useWebsiteConsent.js';
+import { useWebsiteLabelByKey } from '../hooks/useWebsiteLabel.js';
+import { useWebsiteProviderComponent } from './useWebsiteProviderComponent.js';
+const STATE_STYLE = {
+    display: 'flex',
+    flexDirection: 'column',
+    gap: '0.5rem',
+    padding: '0.75rem',
+    border: `1px solid ${websiteDesignTokenCssVar('colors', 'border', '#ccc')}`,
+    borderRadius: websiteDesignTokenCssVar('radii', 'md', '0.375rem'),
+};
+const BUTTON_STYLE = {
+    alignSelf: 'flex-start',
+    padding: '0.5rem 1rem',
+    borderRadius: websiteDesignTokenCssVar('radii', 'md', '0.375rem'),
+    border: `1px solid ${websiteDesignTokenCssVar('colors', 'border', '#ccc')}`,
+    background: websiteDesignTokenCssVar('colors', 'background', '#fff'),
+    color: websiteDesignTokenCssVar('colors', 'foreground', '#000'),
+    cursor: 'pointer',
+};
+function PurposeName({ purpose }) {
+    return _jsx("li", { "data-website-provider-component-purpose": purpose, children: useWebsiteLabelByKey(websiteConsentPurposeLabelKey(purpose)) });
+}
+/**
+ * The words announced for a refusal. Rendered INTO the always-present live region, so a screen reader
+ * announces the change when it happens; a region inserted already filled is often not announced at all.
+ */
+function RefusalStatement({ status, missingPurposes }) {
+    const consentRequired = useWebsiteLabelByKey(websiteProviderComponentLabelKey(WebsiteProviderComponentLabelSlot.CONSENT_REQUIRED));
+    const unavailable = useWebsiteLabelByKey(websiteProviderComponentLabelKey(WebsiteProviderComponentLabelSlot.UNAVAILABLE));
+    if (status === ProviderComponentStatus.UNAVAILABLE)
+        return _jsx("p", { style: { margin: 0 }, children: unavailable });
+    return (_jsxs(_Fragment, { children: [_jsx("p", { style: { margin: 0 }, children: consentRequired }), _jsx("ul", { style: { margin: 0 }, children: missingPurposes.map((purpose) => _jsx(PurposeName, { purpose: purpose }, purpose)) })] }));
+}
+function ManageConsentButton({ onClick }) {
+    return _jsx("button", { type: "button", style: BUTTON_STYLE, onClick: onClick, children: useWebsiteLabelByKey(websiteConsentLabelKey(WebsiteConsentLabelSlot.MANAGE)) });
+}
+export function WebsiteProviderComponent({ capability, providerRef, componentProps, reservedMinHeight, renderConsentRequired, }) {
+    const consent = useWebsiteConsent();
+    const { status, Component, missingConsentPurposes } = useWebsiteProviderComponent(capability, providerRef);
+    const isReady = status === ProviderComponentStatus.READY && Component !== null;
+    const isConsentRequired = status === ProviderComponentStatus.CONSENT_REQUIRED;
+    const isUnavailable = status === ProviderComponentStatus.UNAVAILABLE;
+    const useDefaultRefusal = isUnavailable || (isConsentRequired && renderConsentRequired === undefined);
+    // The registry cannot know a capability's props; the page states them through `componentProps`.
+    const Loaded = isReady ? Component : null;
+    return (_jsxs("div", { "data-website-provider-component": capability, "data-website-provider-component-state": status, "aria-busy": status === ProviderComponentStatus.LOADING ? true : undefined, style: reservedMinHeight !== undefined ? { minHeight: reservedMinHeight } : undefined, children: [Loaded !== null ? _jsx(Loaded, { ...componentProps }) : null, isConsentRequired && renderConsentRequired !== undefined
+                ? renderConsentRequired({ missingPurposes: missingConsentPurposes, openConsentSettings: consent.openSettings })
+                : null, Loaded === null ? (_jsxs("div", { style: useDefaultRefusal ? STATE_STYLE : undefined, children: [_jsx("div", { role: "status", children: useDefaultRefusal ? _jsx(RefusalStatement, { status: status, missingPurposes: missingConsentPurposes }) : null }), isConsentRequired && renderConsentRequired === undefined ? _jsx(ManageConsentButton, { onClick: consent.openSettings }) : null] })) : null] }));
+}
+//# sourceMappingURL=WebsiteProviderComponent.js.map

package/dist/esm/core/external-providers/WebsiteProviderComponent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebsiteProviderComponent.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/WebsiteProviderComponent.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAGvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AAC5G,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EACL,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,MAAM,WAAW,GAAwB;IACvC,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,QAAQ;IACvB,GAAG,EAAE,QAAQ;IACb,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,aAAa,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;IAC3E,YAAY,EAAE,wBAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC;CAClE,CAAC;AAEF,MAAM,YAAY,GAAwB;IACxC,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,aAAa;IACtB,YAAY,EAAE,wBAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC;IACjE,MAAM,EAAE,aAAa,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;IAC3E,UAAU,EAAE,wBAAwB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC;IACpE,KAAK,EAAE,wBAAwB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC;IAC/D,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF,SAAS,WAAW,CAAC,EAAE,OAAO,EAA+B;IAC3D,OAAO,wDAA6C,OAAO,YAAG,oBAAoB,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,GAAM,CAAC;AACnI,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAmF;IACpI,MAAM,eAAe,GAAG,oBAAoB,CAAC,gCAAgC,CAAC,iCAAiC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnI,MAAM,WAAW,GAAG,oBAAoB,CAAC,gCAAgC,CAAC,iCAAiC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1H,IAAI,MAAM,KAAK,uBAAuB,CAAC,WAAW;QAAE,OAAO,YAAG,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,YAAG,WAAW,GAAK,CAAC;IACtG,OAAO,CACL,8BACE,YAAG,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,YAAG,eAAe,GAAK,EAC9C,aAAI,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,YACrB,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAC,WAAW,IAAe,OAAO,EAAE,OAAO,IAAzB,OAAO,CAAsB,CAAC,GAC/E,IACJ,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAE,OAAO,EAA2B;IAC/D,OAAO,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,YAAG,oBAAoB,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAU,CAAC;AAC9J,CAAC;AAoDD,MAAM,UAAU,wBAAwB,CAAwB,EAC9D,UAAU,EACV,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,qBAAqB,GACiB;IACtC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,GAAG,2BAA2B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAE3G,MAAM,OAAO,GAAG,MAAM,KAAK,uBAAuB,CAAC,KAAK,IAAI,SAAS,KAAK,IAAI,CAAC;IAC/E,MAAM,iBAAiB,GAAG,MAAM,KAAK,uBAAuB,CAAC,gBAAgB,CAAC;IAC9E,MAAM,aAAa,GAAG,MAAM,KAAK,uBAAuB,CAAC,WAAW,CAAC;IACrE,MAAM,iBAAiB,GAAG,aAAa,IAAI,CAAC,iBAAiB,IAAI,qBAAqB,KAAK,SAAS,CAAC,CAAC;IACtG,gGAAgG;IAChG,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,SAAoD,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,OAAO,CACL,kDACmC,UAAU,2CACJ,MAAM,eAClC,MAAM,KAAK,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EACxE,KAAK,EAAE,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,aAEpF,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAC,MAAM,OAAK,cAAc,GAAI,CAAC,CAAC,CAAC,IAAI,EACvD,iBAAiB,IAAI,qBAAqB,KAAK,SAAS;gBACvD,CAAC,CAAC,qBAAqB,CAAC,EAAE,eAAe,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC/G,CAAC,CAAC,IAAI,EACP,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CACjB,eAAK,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,aACrD,cAAK,IAAI,EAAC,QAAQ,YACf,iBAAiB,CAAC,CAAC,CAAC,KAAC,gBAAgB,IAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,sBAAsB,GAAI,CAAC,CAAC,CAAC,IAAI,GACrG,EACL,iBAAiB,IAAI,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAC,mBAAmB,IAAC,OAAO,EAAE,OAAO,CAAC,YAAY,GAAI,CAAC,CAAC,CAAC,IAAI,IACrH,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC","sourcesContent":["import React, { type ReactNode } from 'react';\nimport { ProviderComponentStatus } from '@wildo-ai/external-connectors-public/website';\nimport type { ConsentPurpose, ProviderCapability } from '@wildo-ai/saas-models/public-runtime';\n\nimport { websiteDesignTokenCssVar } from '../../schemas/design-tokens/website-design-tokens.shared.schemas';\nimport {\n  WebsiteConsentLabelSlot,\n  websiteConsentLabelKey,\n  websiteConsentPurposeLabelKey,\n} from '../../schemas/label-keys/website-consent-label-keys.schemas';\nimport {\n  WebsiteProviderComponentLabelSlot,\n  websiteProviderComponentLabelKey,\n} from '../../schemas/label-keys/website-provider-component-label-keys.schemas';\nimport { useWebsiteConsent } from '../consent/useWebsiteConsent';\nimport { useWebsiteLabelByKey } from '../hooks/useWebsiteLabel';\nimport { useWebsiteProviderComponent } from './useWebsiteProviderComponent';\n\nconst STATE_STYLE: React.CSSProperties = {\n  display: 'flex',\n  flexDirection: 'column',\n  gap: '0.5rem',\n  padding: '0.75rem',\n  border: `1px solid ${websiteDesignTokenCssVar('colors', 'border', '#ccc')}`,\n  borderRadius: websiteDesignTokenCssVar('radii', 'md', '0.375rem'),\n};\n\nconst BUTTON_STYLE: React.CSSProperties = {\n  alignSelf: 'flex-start',\n  padding: '0.5rem 1rem',\n  borderRadius: websiteDesignTokenCssVar('radii', 'md', '0.375rem'),\n  border: `1px solid ${websiteDesignTokenCssVar('colors', 'border', '#ccc')}`,\n  background: websiteDesignTokenCssVar('colors', 'background', '#fff'),\n  color: websiteDesignTokenCssVar('colors', 'foreground', '#000'),\n  cursor: 'pointer',\n};\n\nfunction PurposeName({ purpose }: { purpose: ConsentPurpose }): ReactNode {\n  return <li data-website-provider-component-purpose={purpose}>{useWebsiteLabelByKey(websiteConsentPurposeLabelKey(purpose))}</li>;\n}\n\n/**\n * The words announced for a refusal. Rendered INTO the always-present live region, so a screen reader\n * announces the change when it happens; a region inserted already filled is often not announced at all.\n */\nfunction RefusalStatement({ status, missingPurposes }: { status: ProviderComponentStatus; missingPurposes: readonly ConsentPurpose[] }): ReactNode {\n  const consentRequired = useWebsiteLabelByKey(websiteProviderComponentLabelKey(WebsiteProviderComponentLabelSlot.CONSENT_REQUIRED));\n  const unavailable = useWebsiteLabelByKey(websiteProviderComponentLabelKey(WebsiteProviderComponentLabelSlot.UNAVAILABLE));\n  if (status === ProviderComponentStatus.UNAVAILABLE) return <p style={{ margin: 0 }}>{unavailable}</p>;\n  return (\n    <>\n      <p style={{ margin: 0 }}>{consentRequired}</p>\n      <ul style={{ margin: 0 }}>\n        {missingPurposes.map((purpose) => <PurposeName key={purpose} purpose={purpose} />)}\n      </ul>\n    </>\n  );\n}\n\nfunction ManageConsentButton({ onClick }: { onClick: () => void }): ReactNode {\n  return <button type=\"button\" style={BUTTON_STYLE} onClick={onClick}>{useWebsiteLabelByKey(websiteConsentLabelKey(WebsiteConsentLabelSlot.MANAGE))}</button>;\n}\n\n/**\n * @wildo_source:part:start saas.website.provider-component.slot facet:layer:core facet:family:website\n *\n * `<WebsiteProviderComponent>` — places ONE provider's component on a website page (#1703): an\n * address lookup on a contact form, a vendor widget on a marketing page. The component comes from the\n * provider's own `components[capability]` declaration, the same one the application reads, through\n * the website's provider-component registry.\n *\n * What it guarantees, so a page does not have to:\n *\n * - **Nothing of the vendor reaches the static HTML.** The component loads from an effect, which never\n *   runs during the Astro server render, and the registry itself refuses to load where there is no\n *   browser document. The server renders only the reserved box.\n * - **No layout shift.** `reservedMinHeight` applies to the box in EVERY state — the server\n *   placeholder, loading, the refusals and the loaded component — so the page does not jump when the\n *   component arrives. Set it to the component's rendered height.\n * - **The vendor's scripts load with the component**, not on every page: the layout injects at startup\n *   only the scripts of providers that contribute no component.\n * - **Consent before download.** A provider resting on a purpose the visitor has not granted downloads\n *   nothing; the box states that the feature is off, names the purposes it rests on, and offers the\n *   consent panel (`openSettings`). Granting there loads the component in place.\n * - **Announced, and operable by keyboard.** The box holds a `role=\"status\"` live region from the first\n *   render, so a refusal is announced when it appears; the consent button sits outside it, so it is not\n *   read out as part of the message, and is a real button.\n * - **A failure says so.** A component that could not load renders the site's `unavailable` wording,\n *   never a blank. A provider that offers no component here (left off in this environment) renders the\n *   empty box, since there is nothing to retry.\n *\n * The words come from the site's label pack: `website.chrome.provider-component.consent-required` and\n * `.unavailable` are framework-owned keys every pack must carry, and the purpose names and the button\n * reuse the consent panel's keys. Pass `renderConsentRequired` to word the refusal in the page's own\n * chrome instead; it receives the missing purposes and the action that opens the panel, and then owns\n * its own announcement.\n *\n * It does not choose a provider. Pass the ref the page chose — `useWebsiteProviderComponentChoices`\n * lists the candidates — or `undefined` while nothing is chosen.\n */\nexport interface WebsiteProviderComponentProps<TProps extends object> {\n  /** The capability the component fills, e.g. `FRONTEND_ADDRESS_LOOKUP`. */\n  capability: ProviderCapability;\n  /** The provider the page chose, or `undefined` while nothing is chosen. */\n  providerRef: string | undefined;\n  /** The props the loaded component receives — the capability's slot contract. */\n  componentProps: TProps;\n  /** CSS length reserved for the box in every state, so the page does not shift when the component loads. */\n  reservedMinHeight?: string;\n  /** Replaces the default consent-required state. */\n  renderConsentRequired?: (input: { missingPurposes: readonly ConsentPurpose[]; openConsentSettings: () => void }) => ReactNode;\n}\n\nexport function WebsiteProviderComponent<TProps extends object>({\n  capability,\n  providerRef,\n  componentProps,\n  reservedMinHeight,\n  renderConsentRequired,\n}: WebsiteProviderComponentProps<TProps>): ReactNode {\n  const consent = useWebsiteConsent();\n  const { status, Component, missingConsentPurposes } = useWebsiteProviderComponent(capability, providerRef);\n\n  const isReady = status === ProviderComponentStatus.READY && Component !== null;\n  const isConsentRequired = status === ProviderComponentStatus.CONSENT_REQUIRED;\n  const isUnavailable = status === ProviderComponentStatus.UNAVAILABLE;\n  const useDefaultRefusal = isUnavailable || (isConsentRequired && renderConsentRequired === undefined);\n  // The registry cannot know a capability's props; the page states them through `componentProps`.\n  const Loaded = isReady ? (Component as unknown as React.ComponentType<TProps>) : null;\n\n  return (\n    <div\n      data-website-provider-component={capability}\n      data-website-provider-component-state={status}\n      aria-busy={status === ProviderComponentStatus.LOADING ? true : undefined}\n      style={reservedMinHeight !== undefined ? { minHeight: reservedMinHeight } : undefined}\n    >\n      {Loaded !== null ? <Loaded {...componentProps} /> : null}\n      {isConsentRequired && renderConsentRequired !== undefined\n        ? renderConsentRequired({ missingPurposes: missingConsentPurposes, openConsentSettings: consent.openSettings })\n        : null}\n      {Loaded === null ? (\n        <div style={useDefaultRefusal ? STATE_STYLE : undefined}>\n          <div role=\"status\">\n            {useDefaultRefusal ? <RefusalStatement status={status} missingPurposes={missingConsentPurposes} /> : null}\n          </div>\n          {isConsentRequired && renderConsentRequired === undefined ? <ManageConsentButton onClick={consent.openSettings} /> : null}\n        </div>\n      ) : null}\n    </div>\n  );\n}\n/** @wildo_source:part:end saas.website.provider-component.slot */\n"]}

package/dist/esm/core/external-providers/provider-component-registry.website.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The website's provider-component registry (#1703): the SAME registry the application builds, from
+ * the SAME `components` declaration, over the website's live provider modules.
+ *
+ * A provider declares its components once, on its frontend module. Before this, the website facet
+ * type accepted `components` and nothing on the website read it, so a contact form could not host an
+ * address lookup (#561) and a marketing page could not host any provider component at all. The
+ * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`
+ * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and
+ * this file only feeds it the website's two inputs:
+ *
+ *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this
+ *     website service contributes no component);
+ *   - the loaders the site's facet library contributes for components an engine provider module
+ *     declares but cannot import (the module lives in a renderer-free package), handed in through the
+ *     page bridge's `providerComponentLoaders` rather than through module-level state, because the
+ *     bridge is the website's one construction site and can carry it explicitly.
+ *
+ * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from
+ * an effect — never during the Astro server render.
+ */
+import { type ComponentType } from 'react';
+import { type ProviderComponentDiagnostic, type ProviderComponentLoaderContribution, type ProviderComponentRegistry } from '@wildo-ai/external-connectors-public/website';
+import type { FrontendProvidersBlock } from '@wildo-ai/saas-models/public-runtime';
+import { type FrontendWebsiteProviderRegistry, type GeneratedWebsiteProviderModules } from './frontend-provider-registry.website';
+/** A component type the website's registry hands back once loaded. */
+export type WebsiteProviderComponentType = ComponentType<never>;
+/** The website's provider-component registry: the shared registry, holding React components. */
+export type WebsiteProviderComponentRegistry = ProviderComponentRegistry<WebsiteProviderComponentType>;
+export interface CreateWebsiteProviderComponentRegistryInput {
+    /** The hydrated website provider registry; absent on a site with no providers. */
+    readonly providerRegistry: FrontendWebsiteProviderRegistry | undefined;
+    /** Loaders the site's facet library contributes for engine-declared components. */
+    readonly providerComponentLoaders?: Iterable<ProviderComponentLoaderContribution>;
+    /**
+     * Where a registration or load problem is reported. Defaults to `console.warn`: the website runtime
+     * has no logger service, and a provider component that cannot be offered is a developer-facing fact
+     * that must not be silent.
+     */
+    readonly onDiagnostic?: (diagnostic: ProviderComponentDiagnostic) => void;
+}
+/** Builds the website's provider-component registry from its live provider modules. */
+export declare function createWebsiteProviderComponentRegistry(input: CreateWebsiteProviderComponentRegistryInput): WebsiteProviderComponentRegistry;
+/** What a page bridge builds once per island: the hydrated provider registry and its component registry. */
+export interface WebsiteProviderRegistries {
+    readonly frontendProviderRegistry: FrontendWebsiteProviderRegistry;
+    readonly providerComponentRegistry: WebsiteProviderComponentRegistry;
+}
+/**
+ * Builds both registries for a page bridge, MEMOISED on their inputs.
+ *
+ * Memoised because the component registry caches each loaded component: a registry rebuilt on every
+ * render would forget what it loaded, hand every slot a new registry identity, and make each slot's
+ * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed
+ * for the island's life) and two module-load-time bridge dependencies, so in practice this builds
+ * once per island.
+ */
+export declare function useWebsiteProviderRegistries(input: {
+    readonly frontendProviders: FrontendProvidersBlock | undefined;
+    readonly frontendProviderModules: GeneratedWebsiteProviderModules | undefined;
+    readonly providerComponentLoaders: Iterable<ProviderComponentLoaderContribution> | undefined;
+}): WebsiteProviderRegistries;
+//# sourceMappingURL=provider-component-registry.website.d.ts.map

package/dist/esm/core/external-providers/provider-component-registry.website.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-component-registry.website.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-component-registry.website.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAW,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAIL,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC/B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF,OAAO,EAEL,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACrC,MAAM,sCAAsC,CAAC;AAE9C,sEAAsE;AACtE,MAAM,MAAM,4BAA4B,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AAEhE,gGAAgG;AAChG,MAAM,MAAM,gCAAgC,GAAG,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;AAEvG,MAAM,WAAW,2CAA2C;IAC1D,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvE,mFAAmF;IACnF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAClF;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,2BAA2B,KAAK,IAAI,CAAC;CAC3E;AAWD,uFAAuF;AACvF,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,2CAA2C,GACjD,gCAAgC,CAOlC;AAED,4GAA4G;AAC5G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,wBAAwB,EAAE,+BAA+B,CAAC;IACnE,QAAQ,CAAC,yBAAyB,EAAE,gCAAgC,CAAC;CACtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,iBAAiB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,EAAE,+BAA+B,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAC9F,GAAG,yBAAyB,CAe5B"}

package/dist/esm/core/external-providers/provider-component-registry.website.js

@@ -0,0 +1,68 @@
+/**
+ * The website's provider-component registry (#1703): the SAME registry the application builds, from
+ * the SAME `components` declaration, over the website's live provider modules.
+ *
+ * A provider declares its components once, on its frontend module. Before this, the website facet
+ * type accepted `components` and nothing on the website read it, so a contact form could not host an
+ * address lookup (#561) and a marketing page could not host any provider component at all. The
+ * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`
+ * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and
+ * this file only feeds it the website's two inputs:
+ *
+ *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this
+ *     website service contributes no component);
+ *   - the loaders the site's facet library contributes for components an engine provider module
+ *     declares but cannot import (the module lives in a renderer-free package), handed in through the
+ *     page bridge's `providerComponentLoaders` rather than through module-level state, because the
+ *     bridge is the website's one construction site and can carry it explicitly.
+ *
+ * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from
+ * an effect — never during the Astro server render.
+ */
+import { useMemo } from 'react';
+import { collectProviderComponentRegistrations, createProviderComponentRegistry, indexProviderComponentLoaderContributions, } from '@wildo-ai/external-connectors-public/website';
+import { createFrontendWebsiteProviderRegistry, } from './frontend-provider-registry.website.js';
+function warnProviderComponentDiagnostic(diagnostic) {
+    // Reported in the BROWSER only. The registry is built during the server render or prerender too, once per
+    // page, and a declaration nothing can load would otherwise fill the build log with one warning per page
+    // for a fact the first page already stated. The browser is where somebody can see and act on it.
+    if (typeof document === 'undefined')
+        return;
+    // eslint-disable-next-line no-console
+    console.warn(`[wildo-provider-component] ${diagnostic.kind}: ${diagnostic.message}`);
+}
+/** Builds the website's provider-component registry from its live provider modules. */
+export function createWebsiteProviderComponentRegistry(input) {
+    const onDiagnostic = input.onDiagnostic ?? warnProviderComponentDiagnostic;
+    const registrations = collectProviderComponentRegistrations(input.providerRegistry?.modules.values() ?? [], {
+        contributedLoaders: indexProviderComponentLoaderContributions(input.providerComponentLoaders),
+        onDiagnostic,
+    });
+    return createProviderComponentRegistry({ registrations, onDiagnostic });
+}
+/**
+ * Builds both registries for a page bridge, MEMOISED on their inputs.
+ *
+ * Memoised because the component registry caches each loaded component: a registry rebuilt on every
+ * render would forget what it loaded, hand every slot a new registry identity, and make each slot's
+ * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed
+ * for the island's life) and two module-load-time bridge dependencies, so in practice this builds
+ * once per island.
+ */
+export function useWebsiteProviderRegistries(input) {
+    const { frontendProviders, frontendProviderModules, providerComponentLoaders } = input;
+    return useMemo(() => {
+        const frontendProviderRegistry = createFrontendWebsiteProviderRegistry({
+            entries: frontendProviders,
+            modules: frontendProviderModules,
+        });
+        return {
+            frontendProviderRegistry,
+            providerComponentRegistry: createWebsiteProviderComponentRegistry({
+                providerRegistry: frontendProviderRegistry,
+                ...(providerComponentLoaders !== undefined ? { providerComponentLoaders } : {}),
+            }),
+        };
+    }, [frontendProviders, frontendProviderModules, providerComponentLoaders]);
+}
+//# sourceMappingURL=provider-component-registry.website.js.map

package/dist/esm/core/external-providers/provider-component-registry.website.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-component-registry.website.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/provider-component-registry.website.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAsB,MAAM,OAAO,CAAC;AACpD,OAAO,EACL,qCAAqC,EACrC,+BAA+B,EAC/B,yCAAyC,GAI1C,MAAM,8CAA8C,CAAC;AAItD,OAAO,EACL,qCAAqC,GAGtC,MAAM,sCAAsC,CAAC;AAqB9C,SAAS,+BAA+B,CAAC,UAAuC;IAC9E,0GAA0G;IAC1G,wGAAwG;IACxG,iGAAiG;IACjG,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IAC5C,sCAAsC;IACtC,OAAO,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sCAAsC,CACpD,KAAkD;IAElD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,+BAA+B,CAAC;IAC3E,MAAM,aAAa,GAAG,qCAAqC,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QAC1G,kBAAkB,EAAE,yCAAyC,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAC7F,YAAY;KACb,CAAC,CAAC;IACH,OAAO,+BAA+B,CAA+B,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IACvF,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,wBAAwB,GAAG,qCAAqC,CAAC;YACrE,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,OAAO;YACL,wBAAwB;YACxB,yBAAyB,EAAE,sCAAsC,CAAC;gBAChE,gBAAgB,EAAE,wBAAwB;gBAC1C,GAAG,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC;SACH,CAAC;IACJ,CAAC,EAAE,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The website's provider-component registry (#1703): the SAME registry the application builds, from\n * the SAME `components` declaration, over the website's live provider modules.\n *\n * A provider declares its components once, on its frontend module. Before this, the website facet\n * type accepted `components` and nothing on the website read it, so a contact form could not host an\n * address lookup (#561) and a marketing page could not host any provider component at all. The\n * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`\n * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and\n * this file only feeds it the website's two inputs:\n *\n *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this\n *     website service contributes no component);\n *   - the loaders the site's facet library contributes for components an engine provider module\n *     declares but cannot import (the module lives in a renderer-free package), handed in through the\n *     page bridge's `providerComponentLoaders` rather than through module-level state, because the\n *     bridge is the website's one construction site and can carry it explicitly.\n *\n * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from\n * an effect — never during the Astro server render.\n */\n\nimport { useMemo, type ComponentType } from 'react';\nimport {\n  collectProviderComponentRegistrations,\n  createProviderComponentRegistry,\n  indexProviderComponentLoaderContributions,\n  type ProviderComponentDiagnostic,\n  type ProviderComponentLoaderContribution,\n  type ProviderComponentRegistry,\n} from '@wildo-ai/external-connectors-public/website';\n\nimport type { FrontendProvidersBlock } from '@wildo-ai/saas-models/public-runtime';\n\nimport {\n  createFrontendWebsiteProviderRegistry,\n  type FrontendWebsiteProviderRegistry,\n  type GeneratedWebsiteProviderModules,\n} from './frontend-provider-registry.website';\n\n/** A component type the website's registry hands back once loaded. */\nexport type WebsiteProviderComponentType = ComponentType<never>;\n\n/** The website's provider-component registry: the shared registry, holding React components. */\nexport type WebsiteProviderComponentRegistry = ProviderComponentRegistry<WebsiteProviderComponentType>;\n\nexport interface CreateWebsiteProviderComponentRegistryInput {\n  /** The hydrated website provider registry; absent on a site with no providers. */\n  readonly providerRegistry: FrontendWebsiteProviderRegistry | undefined;\n  /** Loaders the site's facet library contributes for engine-declared components. */\n  readonly providerComponentLoaders?: Iterable<ProviderComponentLoaderContribution>;\n  /**\n   * Where a registration or load problem is reported. Defaults to `console.warn`: the website runtime\n   * has no logger service, and a provider component that cannot be offered is a developer-facing fact\n   * that must not be silent.\n   */\n  readonly onDiagnostic?: (diagnostic: ProviderComponentDiagnostic) => void;\n}\n\nfunction warnProviderComponentDiagnostic(diagnostic: ProviderComponentDiagnostic): void {\n  // Reported in the BROWSER only. The registry is built during the server render or prerender too, once per\n  // page, and a declaration nothing can load would otherwise fill the build log with one warning per page\n  // for a fact the first page already stated. The browser is where somebody can see and act on it.\n  if (typeof document === 'undefined') return;\n  // eslint-disable-next-line no-console\n  console.warn(`[wildo-provider-component] ${diagnostic.kind}: ${diagnostic.message}`);\n}\n\n/** Builds the website's provider-component registry from its live provider modules. */\nexport function createWebsiteProviderComponentRegistry(\n  input: CreateWebsiteProviderComponentRegistryInput,\n): WebsiteProviderComponentRegistry {\n  const onDiagnostic = input.onDiagnostic ?? warnProviderComponentDiagnostic;\n  const registrations = collectProviderComponentRegistrations(input.providerRegistry?.modules.values() ?? [], {\n    contributedLoaders: indexProviderComponentLoaderContributions(input.providerComponentLoaders),\n    onDiagnostic,\n  });\n  return createProviderComponentRegistry<WebsiteProviderComponentType>({ registrations, onDiagnostic });\n}\n\n/** What a page bridge builds once per island: the hydrated provider registry and its component registry. */\nexport interface WebsiteProviderRegistries {\n  readonly frontendProviderRegistry: FrontendWebsiteProviderRegistry;\n  readonly providerComponentRegistry: WebsiteProviderComponentRegistry;\n}\n\n/**\n * Builds both registries for a page bridge, MEMOISED on their inputs.\n *\n * Memoised because the component registry caches each loaded component: a registry rebuilt on every\n * render would forget what it loaded, hand every slot a new registry identity, and make each slot's\n * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed\n * for the island's life) and two module-load-time bridge dependencies, so in practice this builds\n * once per island.\n */\nexport function useWebsiteProviderRegistries(input: {\n  readonly frontendProviders: FrontendProvidersBlock | undefined;\n  readonly frontendProviderModules: GeneratedWebsiteProviderModules | undefined;\n  readonly providerComponentLoaders: Iterable<ProviderComponentLoaderContribution> | undefined;\n}): WebsiteProviderRegistries {\n  const { frontendProviders, frontendProviderModules, providerComponentLoaders } = input;\n  return useMemo(() => {\n    const frontendProviderRegistry = createFrontendWebsiteProviderRegistry({\n      entries: frontendProviders,\n      modules: frontendProviderModules,\n    });\n    return {\n      frontendProviderRegistry,\n      providerComponentRegistry: createWebsiteProviderComponentRegistry({\n        providerRegistry: frontendProviderRegistry,\n        ...(providerComponentLoaders !== undefined ? { providerComponentLoaders } : {}),\n      }),\n    };\n  }, [frontendProviders, frontendProviderModules, providerComponentLoaders]);\n}\n"]}

package/dist/esm/core/external-providers/useWebsiteProviderComponent.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Reading provider-contributed components on the website (#1703) — the website's counterpart of the
+ * application's `useProviderComponentChoices` / `useProviderComponent`, over the same registry and
+ * the same status vocabulary (`ProviderComponentStatus`).
+ *
+ * Two differences from the application, both about WHO answers:
+ *
+ *   - the consent grant is the VISITOR's decision from `WebsiteConsentContext`, not a signed-in
+ *     person's stored preference;
+ *   - nothing starts before that decision has been read from storage (`isResolved`). The server render
+ *     and the first client render read no storage, and asking the registry then would report a
+ *     consent-required state to a visitor who already agreed, flashing the refusal on every page.
+ *
+ * Neither hook picks a provider: when several providers offer a component for one capability,
+ * choosing is the page's job.
+ */
+import { type ProviderComponentLoadState } from '@wildo-ai/external-connectors-public/website';
+import type { ProviderCapability } from '@wildo-ai/saas-models/public-runtime';
+import type { WebsiteProviderComponentType } from './provider-component-registry.website';
+/** What `useWebsiteProviderComponent` returns: the shared load state, holding a React component. */
+export type WebsiteProviderComponentState = ProviderComponentLoadState<WebsiteProviderComponentType>;
+/**
+ * The providers that are BOTH live for this website service and carry a component for this
+ * capability, in the order the service declared them. Synchronous, so a page can render its choice
+ * on the first frame.
+ */
+export declare function useWebsiteProviderComponentChoices(capability: ProviderCapability): ReadonlyArray<string>;
+/**
+ * Loads one provider's component for a capability, once the visitor's consent decision is known.
+ *
+ * Pass `undefined` for the ref while nothing is chosen. The load runs in an effect, so it never runs
+ * during the Astro server render; `CONSENT_REQUIRED` means nothing of the provider was downloaded,
+ * and granting the missing purposes through the consent panel loads it without a re-mount.
+ */
+export declare function useWebsiteProviderComponent(capability: ProviderCapability, providerRef: string | undefined): WebsiteProviderComponentState;
+//# sourceMappingURL=useWebsiteProviderComponent.d.ts.map

package/dist/esm/core/external-providers/useWebsiteProviderComponent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWebsiteProviderComponent.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/useWebsiteProviderComponent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAI/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAE1F,oGAAoG;AACpG,MAAM,MAAM,6BAA6B,GAAG,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;AAErG;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,CAGxG;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,kBAAkB,EAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,6BAA6B,CAuB/B"}