create-brainerce-store 1.63.0 → 1.65.0

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "create-brainerce-store",
-      version: "1.63.0",
+      version: "1.65.0",
       description: "Scaffold a production-ready e-commerce storefront connected to Brainerce",
       bin: {
         "create-brainerce-store": "dist/index.js"
@@ -195,7 +195,18 @@ var BRAINERCE_RUNTIME_DEPS = Object.freeze({
   // 1.55 adds initTracking() + trackMarketingEvent(). The scaffolded layout
   // calls initTracking() and the product/checkout/confirmation pages call
   // trackMarketingEvent(), so an older SDK fails type-check at scaffold time.
-  brainerce: "^1.55.0",
+  // 1.56 adds getProductSitemapEntries()/getSitemapProducts() — the scaffolded
+  // app/sitemap.ts calls the helper (fixes the silent 100-product sitemap
+  // truncation) — plus resolveSlugRedirect(), which the scaffolded product and
+  // blog not-found paths call to 301 renamed slugs, and StoreInfo.seo gains
+  // googleSiteVerification, which the scaffolded root layout renders as a
+  // meta tag. Older SDKs fail type-check at scaffold time.
+  // 1.57 adds automatic traffic attribution (brainerce_attr capture,
+  // auto-attached at setCheckoutCustomer/setShippingAddress) — powers the
+  // dashboard's "orders from ChatGPT/Google/…" reporting. No template code
+  // depends on it (fully automatic), but scaffolds should ship the SDK that
+  // actually reports attribution.
+  brainerce: "^1.57.0",
   "isomorphic-dompurify": "^3.8.0"
 });
 
@@ -465,6 +476,7 @@ async function scaffold(options) {
   const messagesRoot = findMessagesDir(__dirname);
   const targetMessages = import_path.default.join(targetDir, "messages");
   await import_fs_extra.default.ensureDir(targetMessages);
+  const safeLanguage = isValidLocale(options.language) ? options.language : "en";
   if (isMultiLocale) {
     for (const locale of supportedLocales) {
       const srcFile = import_path.default.join(messagesRoot, `${locale}.json`);
@@ -474,12 +486,12 @@ async function scaffold(options) {
     }
     const defaultFile = import_path.default.join(targetMessages, `${defaultLocale}.json`);
     if (!await import_fs_extra.default.pathExists(defaultFile)) {
-      await import_fs_extra.default.copy(import_path.default.join(messagesRoot, `${options.language}.json`), defaultFile);
+      await import_fs_extra.default.copy(import_path.default.join(messagesRoot, `${safeLanguage}.json`), defaultFile);
     }
   } else {
     await import_fs_extra.default.copy(
-      import_path.default.join(messagesRoot, `${options.language}.json`),
-      import_path.default.join(targetMessages, `${options.language}.json`)
+      import_path.default.join(messagesRoot, `${safeLanguage}.json`),
+      import_path.default.join(targetMessages, `${safeLanguage}.json`)
     );
   }
   if (designName && designDir && !options.canvas) {
@@ -508,12 +520,26 @@ async function scaffold(options) {
     const appDir = import_path.default.join(targetDir, "src", "app");
     const localeDir = import_path.default.join(appDir, "[locale]");
     await import_fs_extra.default.ensureDir(localeDir);
-    const keepInAppRoot = /* @__PURE__ */ new Set(["globals.css", "robots.ts", "sitemap.ts", "api", ".well-known"]);
+    const keepInAppRoot = /* @__PURE__ */ new Set([
+      "globals.css",
+      "robots.ts",
+      "sitemap.ts",
+      "api",
+      ".well-known",
+      "llms.txt",
+      "indexnow-key.txt",
+      "agents.md",
+      "opengraph-image.tsx"
+    ]);
     const appEntries = await import_fs_extra.default.readdir(appDir, { withFileTypes: true });
     for (const entry of appEntries) {
       if (keepInAppRoot.has(entry.name) || entry.name === "[locale]") continue;
       await import_fs_extra.default.move(import_path.default.join(appDir, entry.name), import_path.default.join(localeDir, entry.name));
     }
+    const nestedRss = import_path.default.join(localeDir, "blog", "rss.xml");
+    if (await import_fs_extra.default.pathExists(nestedRss)) {
+      await import_fs_extra.default.move(nestedRss, import_path.default.join(appDir, "blog", "rss.xml"));
+    }
   }
 }
 function deepMerge(base, patch) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-brainerce-store",
-  "version": "1.63.0",
+  "version": "1.65.0",
   "description": "Scaffold a production-ready e-commerce storefront connected to Brainerce",
   "bin": {
     "create-brainerce-store": "dist/index.js"

package/templates/nextjs/base/src/app/agents.md/route.ts

@@ -0,0 +1,87 @@
+/**
+ * agents.md — GET /agents.md
+ *
+ * The canonical AI-agent discovery file (the convention Shopify made standard
+ * in 2026): a machine-readable guide telling shopping agents and AI assistants
+ * what this site sells, where its machine surfaces live, and how a purchase
+ * works. /llms.txt mirrors the same information in the older convention —
+ * keep the two consistent.
+ */
+import { getServerClient } from '@/core/lib/brainerce';
+
+export const revalidate = 3600;
+
+interface CategoryNodeLike {
+  name: string;
+  slug?: string | null;
+  children?: CategoryNodeLike[];
+}
+
+export async function GET() {
+  const baseUrl = process.env.NEXT_PUBLIC_SITE_URL || 'https://example.com';
+  // Machine-readable product feed served by the Brainerce API per channel —
+  // the same artifact Google/Microsoft/Perplexity ingest; agents can read the
+  // whole catalog in one structured fetch instead of crawling page by page.
+  const apiUrl = (process.env.BRAINERCE_API_URL || 'https://api.brainerce.com').replace(/\/+$/, '');
+  const channelId =
+    process.env.NEXT_PUBLIC_BRAINERCE_SALES_CHANNEL_ID ||
+    process.env.NEXT_PUBLIC_BRAINERCE_CONNECTION_ID ||
+    '';
+  const client = getServerClient();
+
+  const [info, categoriesRes] = await Promise.all([
+    client.getStoreInfo().catch(() => null),
+    client.getCategories().catch(() => null),
+  ]);
+
+  const topCategories: CategoryNodeLike[] = (
+    (categoriesRes?.categories as CategoryNodeLike[] | undefined) ?? []
+  ).filter((c) => c.slug);
+
+  const lines: string[] = [
+    `# ${info?.name ?? 'Store'} — guide for AI agents`,
+    '',
+    ...(info?.metaDescription ? [`> ${info.metaDescription}`, ''] : []),
+    'This is an e-commerce storefront. Product data, prices, and availability',
+    'are rendered server-side into every page (no JavaScript execution needed)',
+    'and marked up with schema.org Product / Offer / BreadcrumbList JSON-LD.',
+    '',
+    '## Machine-readable surfaces',
+    '',
+    `- Sitemap: ${baseUrl}/sitemap.xml (products, categories, articles, pages)`,
+    `- AI summary: ${baseUrl}/llms.txt`,
+    `- Blog RSS: ${baseUrl}/blog/rss.xml`,
+    ...(channelId
+      ? [
+          `- Product feed (Google Shopping XML): ${apiUrl}/api/feeds/${channelId}/google-shopping.xml`,
+          `- Product feed (JSONL): ${apiUrl}/api/feeds/${channelId}/openai-products.jsonl`,
+          `- MCP endpoint (catalog tools, stateless JSON-RPC): ${apiUrl}/api/mcp/storefront/${channelId}`,
+          '  Tools: search_products, get_product, list_categories, get_store_info. Read-only;',
+          '  to buy, send the shopper to the product `url` — checkout happens on this site.',
+        ]
+      : []),
+    `- IndexNow key: ${baseUrl}/indexnow-key.txt`,
+    '',
+    '## Key pages',
+    '',
+    `- [All products](${baseUrl}/products) — full catalog, filterable`,
+    ...topCategories
+      .slice(0, 20)
+      .map((c) => `- [${c.name}](${baseUrl}/category/${c.slug}) — category page`),
+    `- [Blog](${baseUrl}/blog) — guides and articles`,
+    `- [FAQ](${baseUrl}/faq)`,
+    `- [Contact](${baseUrl}/contact)`,
+    '',
+    '## Buying',
+    '',
+    `- Currency: ${info?.currency ?? 'see product pages'}`,
+    '- Checkout happens on this site (cart → checkout). Carts and checkout',
+    '  are session-based; agents should hand the shopper the product URL.',
+    ...(info?.contactEmail ? ['', `## Contact`, '', `- Email: ${info.contactEmail}`] : []),
+    '',
+  ];
+
+  return new Response(lines.join('\n'), {
+    headers: { 'Content-Type': 'text/markdown; charset=utf-8' },
+  });
+}

package/templates/nextjs/base/src/app/blog/[slug]/page.tsx.ejs

@@ -10,12 +10,12 @@
  */
 import * as React from 'react';
 import type { Metadata } from 'next';
-import { notFound } from 'next/navigation';
+import { notFound, permanentRedirect } from 'next/navigation';
 import Link from 'next/link';
 import { CdnImage as Image } from '@/ui/shared/cdn-image';
 import { ArticleJsonLd } from '@/components/seo/article-json-ld';
 
-import { getServerClient } from '@/core/lib/brainerce';
+import { getServerClient, fetchStoreInfo } from '@/core/lib/brainerce';
 import { sanitizeHtml } from '@/core/lib/sanitize';
 import { decodeSlug } from '@/core/lib/utils';
 
@@ -29,11 +29,39 @@ type PageProps = {
 export async function generateMetadata({ params }: PageProps): Promise<Metadata> {
   const { locale, slug: rawSlug } = await params;
   const slug = decodeSlug(rawSlug);
-  const post = await getServerClient(locale).blog.getPost(slug).catch(() => null);
+  const [post, storeInfo] = await Promise.all([
+    getServerClient(locale).blog.getPost(slug).catch(() => null),
+    fetchStoreInfo(locale),
+  ]);
   if (!post) return { title: slug };
+
+  // Canonical + hreflang. Blog URLs use the same slug across locales (only
+  // the locale prefix changes) — the same convention getBlogSitemapEntries
+  // emits, so the alternates always match real, crawlable URLs.
+  const supportedLocales = storeInfo?.i18n?.supportedLocales ?? [];
+  const defaultLoc = storeInfo?.i18n?.defaultLocale ?? storeInfo?.language ?? '';
+  const canonicalPath =
+    locale && locale !== defaultLoc ? `/${locale}/blog/${post.slug}` : `/blog/${post.slug}`;
+  const hreflangLanguages =
+    supportedLocales.length > 1
+      ? Object.fromEntries([
+          ...supportedLocales.map((loc) => [
+            loc,
+            loc === defaultLoc
+              ? `${SITE_URL}/blog/${post.slug}`
+              : `${SITE_URL}/${loc}/blog/${post.slug}`,
+          ]),
+          ['x-default', `${SITE_URL}/blog/${post.slug}`],
+        ])
+      : undefined;
+
   return {
     title: post.seoTitle ?? post.title,
     description: post.seoDescription ?? post.excerpt,
+    alternates: {
+      canonical: canonicalPath,
+      ...(hreflangLanguages ? { languages: hreflangLanguages } : {}),
+    },
     openGraph: {
       title: post.seoTitle ?? post.title,
       description: post.seoDescription ?? post.excerpt ?? undefined,
@@ -57,7 +85,18 @@ export default async function BlogPostPage({ params }: PageProps) {
     client.blog.getPost(slug).catch(() => null),
     client.getStoreInfo().catch(() => null),
   ]);
-  if (!post) notFound();
+  if (!post) {
+    // The slug may have been renamed — 301 to the current slug so the old
+    // URL keeps its ranking; genuine unknowns fall through to the 404 page.
+    // Default locale stays unprefixed (matches the sitemap/hreflang convention).
+    const redirect = await client.resolveSlugRedirect('blog', slug);
+    if (redirect) {
+      const defaultLoc = storeInfo?.i18n?.defaultLocale ?? storeInfo?.language ?? '';
+      const prefix = locale && locale !== defaultLoc ? `/${locale}` : '';
+      permanentRedirect(`${prefix}/blog/${redirect.currentSlug}`);
+    }
+    notFound();
+  }
 
   const isHe = locale === 'he';
   const dir = isHe ? 'rtl' : 'ltr';
@@ -158,6 +197,7 @@ export async function generateMetadata({ params }: PageProps): Promise<Metadata>
   return {
     title: post.seoTitle ?? post.title,
     description: post.seoDescription ?? post.excerpt,
+    alternates: { canonical: `/blog/${post.slug}` },
     openGraph: {
       title: post.seoTitle ?? post.title,
       description: post.seoDescription ?? post.excerpt ?? undefined,
@@ -181,7 +221,13 @@ export default async function BlogPostPage({ params }: PageProps) {
     client.blog.getPost(slug).catch(() => null),
     client.getStoreInfo().catch(() => null),
   ]);
-  if (!post) notFound();
+  if (!post) {
+    // The slug may have been renamed — 301 to the current slug so the old
+    // URL keeps its ranking; genuine unknowns fall through to the 404 page.
+    const redirect = await client.resolveSlugRedirect('blog', slug);
+    if (redirect) permanentRedirect(`/blog/${redirect.currentSlug}`);
+    notFound();
+  }
 
   const articleUrl = `${SITE_URL}/blog/${post.slug}`;
 

package/templates/nextjs/base/src/app/blog/rss.xml/route.ts

@@ -0,0 +1,70 @@
+/**
+ * Blog RSS feed — GET /blog/rss.xml
+ *
+ * Syndication for the store's articles (many of them auto-published by the
+ * SEO Autopilot): feed readers, newsletter tools, and aggregators can follow
+ * the blog without polling HTML. The root layout advertises it via
+ * <link rel="alternate" type="application/rss+xml">.
+ *
+ * NOTE (multi-locale scaffolds): the URL contains a dot, so the locale
+ * middleware never rewrites it, and a copy nested under [locale]/blog/ would
+ * 404. The scaffolder moves this route back to the app ROOT
+ * (app/blog/rss.xml) after the [locale] move — the literal `blog` segment
+ * wins over `[locale]` for /blog/rss.xml, while /he/blog/... keeps matching
+ * the locale tree. See scaffold.ts.
+ */
+import { getServerClient } from '@/core/lib/brainerce';
+
+export const revalidate = 3600;
+
+function esc(value: string): string {
+  return value
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;');
+}
+
+export async function GET() {
+  const baseUrl = process.env.NEXT_PUBLIC_SITE_URL || 'https://example.com';
+  const client = getServerClient();
+
+  const [info, posts] = await Promise.all([
+    client.getStoreInfo().catch(() => null),
+    client.blog.getPosts({ limit: 50 }).catch(() => null),
+  ]);
+
+  const items = (posts?.data ?? [])
+    .map((post) => {
+      const url = `${baseUrl}/blog/${post.slug}`;
+      const description = post.seoDescription ?? post.excerpt ?? '';
+      const pubDate = post.publishedAt ? new Date(post.publishedAt).toUTCString() : undefined;
+      return [
+        '    <item>',
+        `      <title>${esc(post.title)}</title>`,
+        `      <link>${esc(url)}</link>`,
+        `      <guid isPermaLink="true">${esc(url)}</guid>`,
+        ...(pubDate ? [`      <pubDate>${pubDate}</pubDate>`] : []),
+        ...(description ? [`      <description>${esc(description)}</description>`] : []),
+        '    </item>',
+      ].join('\n');
+    })
+    .join('\n');
+
+  const xml = [
+    '<?xml version="1.0" encoding="UTF-8"?>',
+    '<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">',
+    '  <channel>',
+    `    <title>${esc(info?.name ?? 'Blog')}</title>`,
+    `    <link>${esc(`${baseUrl}/blog`)}</link>`,
+    `    <description>${esc(info?.metaDescription ?? `${info?.name ?? 'Store'} blog`)}</description>`,
+    `    <atom:link href="${esc(`${baseUrl}/blog/rss.xml`)}" rel="self" type="application/rss+xml"/>`,
+    items,
+    '  </channel>',
+    '</rss>',
+  ].join('\n');
+
+  return new Response(xml, {
+    headers: { 'Content-Type': 'application/rss+xml; charset=utf-8' },
+  });
+}

package/templates/nextjs/base/src/app/category/[slug]/page.tsx

@@ -1,106 +1,132 @@
-import type { Metadata } from 'next';
-import { notFound } from 'next/navigation';
-import type { Product } from 'brainerce';
-import { getServerClient } from '@/core/lib/brainerce';
-import { buildMetaDescription } from '@/core/lib/seo';
-import { sanitizeHtml } from '@/core/lib/sanitize';
-import { decodeSlug } from '@/core/lib/utils';
-import { CategoryJsonLd } from '@/components/seo/category-json-ld';
-import { Breadcrumbs } from '@/components/seo/breadcrumbs';
-import { ProductGrid } from '@/ui/product/product-grid';
-
-type Props = {
-  params: Promise<{ slug: string; locale?: string }>;
-};
-
-/**
- * Category (collection) landing page — the highest-leverage organic-SEO
- * surface: it ranks for broad "research intent" queries ("running shoes")
- * that individual product pages never capture. Merchant-authored copy (from
- * the dashboard SEO hub) renders BELOW the grid so products stay above the
- * fold, and CollectionPage + BreadcrumbList structured data feeds rich
- * results + AI answers. Products come from getProducts, so this page is one
- * metadata read + one listing read.
- */
-export async function generateMetadata({ params }: Props): Promise<Metadata> {
-  const { slug: rawSlug, locale } = await params;
-  const slug = decodeSlug(rawSlug);
-  try {
-    const category = await getServerClient(locale).getCategoryBySlug(slug);
-    const description =
-      category.metaDescription || buildMetaDescription(category.description) || category.name;
-    const canonicalSlug = category.slug || slug;
-    const canonicalPath = locale
-      ? `/${locale}/category/${canonicalSlug}`
-      : `/category/${canonicalSlug}`;
-    return {
-      title: category.name,
-      description,
-      alternates: { canonical: canonicalPath },
-      openGraph: {
-        title: category.name,
-        description,
-        type: 'website',
-        images: category.image ? [{ url: category.image, alt: category.name }] : [],
-      },
-      twitter: {
-        card: 'summary_large_image',
-        title: category.name,
-        description,
-        images: category.image ? [category.image] : [],
-      },
-    };
-  } catch {
-    return { title: 'Category not found' };
-  }
-}
-
-export default async function CategoryPage({ params }: Props) {
-  const { slug: rawSlug, locale } = await params;
-  const slug = decodeSlug(rawSlug);
-  const client = getServerClient(locale);
-
-  const category = await client.getCategoryBySlug(slug).catch(() => null);
-  if (!category) notFound();
-
-  // The listing endpoint owns pagination/FX/publish gating — reuse it rather
-  // than duplicating a product query here.
-  const { data: products } = await client
-    .getProducts({ categories: [category.id], limit: 48 })
-    .catch(() => ({ data: [] as Product[] }));
-
-  const baseUrl = process.env.NEXT_PUBLIC_SITE_URL || '';
-  const url = `${baseUrl}/category/${category.slug || slug}`;
-  const localePrefix = locale ? `/${locale}` : '';
-  const breadcrumbItems = [
-    { name: 'Home', href: `${localePrefix}/` },
-    ...category.breadcrumb
-      .filter((ancestor) => ancestor.slug)
-      .map((ancestor) => ({
-        name: ancestor.name,
-        href: `${localePrefix}/category/${ancestor.slug}`,
-      })),
-    { name: category.name },
-  ];
-
-  return (
-    <>
-      <CategoryJsonLd category={category} url={url} />
-      <div className="container mx-auto px-4 py-8">
-        <Breadcrumbs items={breadcrumbItems} />
-        <header className="mb-6">
-          <h1 className="text-3xl font-bold tracking-tight">{category.name}</h1>
-        </header>
-
-        <ProductGrid products={products} />
-
-        {category.description ? (
-          <div
-            className="prose prose-neutral dark:prose-invert mt-12 max-w-none border-t pt-8"
-            dangerouslySetInnerHTML={{ __html: sanitizeHtml(category.description) }}
-          />
-        ) : null}
-      </div>
-    </>
-  );
-}
+import type { Metadata } from 'next';
+import { notFound } from 'next/navigation';
+import type { Product } from 'brainerce';
+import { getServerClient, fetchStoreInfo } from '@/core/lib/brainerce';
+import { buildMetaDescription } from '@/core/lib/seo';
+import { sanitizeHtml } from '@/core/lib/sanitize';
+import { decodeSlug } from '@/core/lib/utils';
+import { CategoryJsonLd } from '@/components/seo/category-json-ld';
+import { Breadcrumbs } from '@/components/seo/breadcrumbs';
+import { ProductGrid } from '@/ui/product/product-grid';
+
+type Props = {
+  params: Promise<{ slug: string; locale?: string }>;
+};
+
+/**
+ * Category (collection) landing page — the highest-leverage organic-SEO
+ * surface: it ranks for broad "research intent" queries ("running shoes")
+ * that individual product pages never capture. Merchant-authored copy (from
+ * the dashboard SEO hub) renders BELOW the grid so products stay above the
+ * fold, and CollectionPage + BreadcrumbList structured data feeds rich
+ * results + AI answers. Products come from getProducts, so this page is one
+ * metadata read + one listing read.
+ */
+export async function generateMetadata({ params }: Props): Promise<Metadata> {
+  const { slug: rawSlug, locale } = await params;
+  const slug = decodeSlug(rawSlug);
+  try {
+    const [category, storeInfo] = await Promise.all([
+      getServerClient(locale).getCategoryBySlug(slug),
+      fetchStoreInfo(locale),
+    ]);
+    const description =
+      category.metaDescription || buildMetaDescription(category.description) || category.name;
+    const canonicalSlug = category.slug || slug;
+    const canonicalPath = locale
+      ? `/${locale}/category/${canonicalSlug}`
+      : `/category/${canonicalSlug}`;
+
+    // hreflang: category URLs use the same slug across locales (only the
+    // locale prefix changes) — the same convention getCategorySitemapEntries
+    // emits, so the alternates always match real, crawlable URLs.
+    const supportedLocales = storeInfo?.i18n?.supportedLocales ?? [];
+    const defaultLoc = storeInfo?.i18n?.defaultLocale ?? storeInfo?.language ?? '';
+    const baseUrl = process.env.NEXT_PUBLIC_SITE_URL || '';
+    const hreflangLanguages =
+      supportedLocales.length > 1
+        ? Object.fromEntries([
+            ...supportedLocales.map((loc) => [
+              loc,
+              loc === defaultLoc
+                ? `${baseUrl}/category/${canonicalSlug}`
+                : `${baseUrl}/${loc}/category/${canonicalSlug}`,
+            ]),
+            ['x-default', `${baseUrl}/category/${canonicalSlug}`],
+          ])
+        : undefined;
+
+    return {
+      title: category.name,
+      description,
+      alternates: {
+        canonical: canonicalPath,
+        ...(hreflangLanguages ? { languages: hreflangLanguages } : {}),
+      },
+      openGraph: {
+        title: category.name,
+        description,
+        type: 'website',
+        images: category.image ? [{ url: category.image, alt: category.name }] : [],
+      },
+      twitter: {
+        card: 'summary_large_image',
+        title: category.name,
+        description,
+        images: category.image ? [category.image] : [],
+      },
+    };
+  } catch {
+    return { title: 'Category not found' };
+  }
+}
+
+export default async function CategoryPage({ params }: Props) {
+  const { slug: rawSlug, locale } = await params;
+  const slug = decodeSlug(rawSlug);
+  const client = getServerClient(locale);
+
+  const category = await client.getCategoryBySlug(slug).catch(() => null);
+  if (!category) notFound();
+
+  // The listing endpoint owns pagination/FX/publish gating — reuse it rather
+  // than duplicating a product query here.
+  const { data: products } = await client
+    .getProducts({ categories: [category.id], limit: 48 })
+    .catch(() => ({ data: [] as Product[] }));
+
+  const baseUrl = process.env.NEXT_PUBLIC_SITE_URL || '';
+  const url = `${baseUrl}/category/${category.slug || slug}`;
+  const localePrefix = locale ? `/${locale}` : '';
+  const breadcrumbItems = [
+    { name: 'Home', href: `${localePrefix}/` },
+    ...category.breadcrumb
+      .filter((ancestor) => ancestor.slug)
+      .map((ancestor) => ({
+        name: ancestor.name,
+        href: `${localePrefix}/category/${ancestor.slug}`,
+      })),
+    { name: category.name },
+  ];
+
+  return (
+    <>
+      <CategoryJsonLd category={category} url={url} />
+      <div className="container mx-auto px-4 py-8">
+        <Breadcrumbs items={breadcrumbItems} />
+        <header className="mb-6">
+          <h1 className="text-3xl font-bold tracking-tight">{category.name}</h1>
+        </header>
+
+        <ProductGrid products={products} />
+
+        {category.description ? (
+          <div
+            className="prose prose-neutral dark:prose-invert mt-12 max-w-none border-t pt-8"
+            dangerouslySetInnerHTML={{ __html: sanitizeHtml(category.description) }}
+          />
+        ) : null}
+      </div>
+    </>
+  );
+}

package/templates/nextjs/base/src/app/contact/layout.tsx.ejs

@@ -0,0 +1,14 @@
+import type { Metadata } from 'next';
+
+// The contact page itself is a client component (the form is dashboard-
+// driven), so its metadata lives here. Indexable on purpose — a crawlable
+// contact page is a store-trust signal for both Google and AI assistants.
+export const metadata: Metadata = {
+  title: <%- language === 'he' ? "'צור קשר'" : "'Contact'" %>,
+  description: <%- language === 'he' ? "'יצירת קשר עם החנות — שאלות, הזמנות ושירות לקוחות.'" : "'Get in touch with the store — questions, orders, and support.'" %>,
+  alternates: { canonical: '/contact' },
+};
+
+export default function ContactLayout({ children }: { children: React.ReactNode }) {
+  return children;
+}

package/templates/nextjs/base/src/app/layout.tsx.ejs

@@ -91,6 +91,16 @@ export default async function RootLayout({
               .replace(/&/g, '\\u0026'),
           }}
         />
+        {/* Google Search Console verification — token set by the merchant in
+            the dashboard (channel settings → Google site verification). Also
+            what the Merchant Center website claim checks for. Renders nothing
+            until a token is configured. */}
+        {storeInfo?.seo?.googleSiteVerification ? (
+          <meta name="google-site-verification" content={storeInfo.seo.googleSiteVerification} />
+        ) : null}
+        {/* RSS autodiscovery — feed readers and aggregators find the blog feed
+            from any page. The route itself lives at /blog/rss.xml. */}
+        <link rel="alternate" type="application/rss+xml" title="Blog" href="/blog/rss.xml" />
         {/* Brainerce cookieless traffic analytics — auto-tracks pageviews +
             SPA route changes. Cookieless (no consent banner needed); the
             merchant can toggle it per sales channel in the dashboard. */}
@@ -203,6 +213,16 @@ export default async function RootLayout({
               .replace(/&/g, '\\u0026'),
           }}
         />
+        {/* Google Search Console verification — token set by the merchant in
+            the dashboard (channel settings → Google site verification). Also
+            what the Merchant Center website claim checks for. Renders nothing
+            until a token is configured. */}
+        {storeInfo?.seo?.googleSiteVerification ? (
+          <meta name="google-site-verification" content={storeInfo.seo.googleSiteVerification} />
+        ) : null}
+        {/* RSS autodiscovery — feed readers and aggregators find the blog feed
+            from any page. The route itself lives at /blog/rss.xml. */}
+        <link rel="alternate" type="application/rss+xml" title="Blog" href="/blog/rss.xml" />
         {/* Brainerce cookieless traffic analytics — auto-tracks pageviews +
             SPA route changes. Cookieless (no consent banner needed); the
             merchant can toggle it per sales channel in the dashboard. */}