@aranova/tracking-next 0.23.1 → 0.24.0

package/dist/calendar-server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/calendar-server.ts","../../tracking-core/src/phone.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/http/errors.ts","../../tracking-core/src/resources/http/request.ts","../../tracking-core/src/resources/calendar/transport.ts","../../tracking-core/src/resources/calendar/write-client.ts","../../tracking-core/src/resources/calendar/route-handler.ts"],"sourcesContent":["import \"server-only\";\n\n// Booking writes with a SECRET key — `@aranova/tracking-next/calendar-server`.\n// The `server-only` import above is the guard: a client component importing\n// this fails the build instead of shipping the key to a browser.\nexport * from \"../../tracking-core/src/calendar-server-public\";\n","// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getRegisteredCapabilities } from \"./capabilities\";\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Ceiling on the exponential backoff between failed delivery attempts.\n */\nexport const MAX_RETRY_BACKOFF_MS = 60_000;\n\n/**\n * Cap on events held in the durable retry buffer. Oldest batches are dropped\n * first once this is exceeded — an unbounded buffer would eventually blow the\n * localStorage quota and take the whole SDK down with it.\n */\nexport const MAX_BUFFERED_EVENTS = 200;\n\n/**\n * localStorage key prefix for the durable retry buffer. Versioned so a future\n * shape change can't be misread as the current one.\n */\nexport const RETRY_BUFFER_KEY_PREFIX = \"aranova_tracking_pending_v1\";\n\n/**\n * What to do with a batch after an attempted delivery.\n *\n * `retry` covers the transport failing and the server saying \"later\" (408, 429,\n * 5xx). `drop` covers a permanent rejection — a 422 from a malformed payload\n * will never succeed, and retrying it forever would wedge every batch behind it.\n */\ntype DeliveryOutcome = \"ok\" | \"retry\" | \"drop\";\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n    // Rebuilt per flush (this runs inside the payload builder), so a client\n    // constructed later on a deeper route still gets reported.\n    capabilities: getRegisteredCapabilities(),\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<DeliveryOutcome> {\n  // No fetch at all (a non-browser runtime): there is nothing to retry against,\n  // and scheduling one would spin a timer forever. Give up on the batch.\n  if (typeof fetch !== \"function\") return \"drop\";\n  try {\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n    if (response.ok) return \"ok\";\n    if (response.status === 408 || response.status === 429 || response.status >= 500) {\n      return \"retry\";\n    }\n    // 401/403/422 and friends: the payload or the key is wrong, and will still\n    // be wrong in 30 seconds.\n    return \"drop\";\n  } catch {\n    // Network-level failure (offline, DNS, CORS preflight, aborted). Never\n    // throws to the host site; the batch stays buffered for the next attempt.\n    return \"retry\";\n  }\n}\n\n/**\n * A batch awaiting delivery. Each one carries its OWN session snapshot: a batch\n * can outlive the session that produced it (buffered across a reload), and\n * re-sending it under whatever session is current would silently misattribute\n * those events.\n */\ninterface PendingBatch {\n  session: TrackingSessionUpsertPayload;\n  events: QueuedEvent[];\n}\n\nfunction retryBufferKey(apiKey: string, endpoint: string): string {\n  return `${RETRY_BUFFER_KEY_PREFIX}:${apiKey}:${endpoint}`;\n}\n\nfunction readPendingBatches(key: string): PendingBatch[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(key);\n    if (!raw) return [];\n    const parsed: unknown = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(\n      (entry): entry is PendingBatch =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        \"session\" in entry &&\n        Array.isArray((entry as PendingBatch).events),\n    );\n  } catch {\n    // Storage blocked, or a corrupt/foreign value — start clean rather than\n    // letting a bad read break the host site.\n    return [];\n  }\n}\n\n/**\n * Mirror the buffer to storage unconditionally.\n *\n * Deliberately no read-back verification: under partitioned storage a write can\n * succeed for this document and still not be visible to a verifying read, so a\n * verify-gate false-negatives exactly where durability matters most.\n */\nfunction writePendingBatches(key: string, batches: PendingBatch[]): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    if (batches.length === 0) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, JSON.stringify(batches));\n  } catch {\n    // Quota exceeded or storage blocked — in-memory retry still works.\n  }\n}\n\n/** Drop the oldest batches until the buffer is back under the event cap. */\nfunction trimToBufferCap(batches: PendingBatch[]): PendingBatch[] {\n  let total = batches.reduce((sum, batch) => sum + batch.events.length, 0);\n  const trimmed = batches.slice();\n  while (total > MAX_BUFFERED_EVENTS && trimmed.length > 1) {\n    const dropped = trimmed.shift();\n    total -= dropped ? dropped.events.length : 0;\n  }\n  return trimmed;\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  // Batches that have been handed to the network at least once and not yet\n  // acknowledged. Mirrored to localStorage so a reload — or a deploy window that\n  // 5xxs every request — costs latency instead of data.\n  const bufferKey = retryBufferKey(config.apiKey, endpointBase);\n  let pending: PendingBatch[] = readPendingBatches(bufferKey);\n  // Flushes are serialized through one chain. Batches are no longer removed from\n  // the buffer before the response arrives, so two overlapping flushes would\n  // send the same batch twice. Chaining (rather than a \"busy\" flag that returns\n  // early) keeps `await flush()` meaning \"flushed\" for the caller.\n  let flushChain: Promise<void> = Promise.resolve();\n  let retryAttempt = 0;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  // Anything left buffered by a previous page load goes out on the normal\n  // debounce, ahead of whatever this page produces.\n  if (pending.length > 0) {\n    scheduleFlush();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(delayMs: number = flushIntervalMs): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, delayMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  /** Move everything currently queued into the durable buffer. */\n  function bufferQueued(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    pending = trimToBufferCap([...pending, { session: buildSessionPayload(), events }]);\n    writePendingBatches(bufferKey, pending);\n  }\n\n  /**\n   * Drain the durable buffer, oldest batch first.\n   *\n   * A batch leaves the buffer only on `ok` (acknowledged) or `drop` (permanently\n   * rejected). Anything else keeps it, so a 5xx window costs latency, not data.\n   *\n   * Delivery is at-least-once: with no event-level idempotency key on the wire,\n   * a response lost after the server committed will re-send that batch. That\n   * window is far narrower than the \"every 5xx is permanent loss\" it replaces —\n   * closing it needs a client-generated event id plus a backend uniqueness\n   * constraint, which is a schema change and its own release.\n   */\n  function flush(): Promise<void> {\n    // `.catch` keeps one unexpected throw from poisoning every later flush.\n    flushChain = flushChain.then(runFlush).catch(() => {});\n    return flushChain;\n  }\n\n  async function runFlush(): Promise<void> {\n    if (destroyed) return;\n    clearScheduledFlush();\n    bufferQueued();\n    if (pending.length === 0) return;\n\n    try {\n      while (pending.length > 0) {\n        const batch = pending[0]!;\n        const body: IngestRequestBody = { session: batch.session, events: batch.events };\n        // keepalive=false: this runs on a live page, where a plain fetch\n        // completes normally and its failure is observable. The unload path\n        // (flushOnUnload) passes true instead — pagehide tears the document down\n        // and aborts a plain fetch mid-flight, while keepalive hands the request\n        // to the browser to finish after teardown.\n        const outcome = await postWithFetch(\n          eventsUrl,\n          JSON.stringify(body),\n          config.apiKey,\n          identityHeaders,\n          false,\n        );\n        if (outcome === \"retry\") {\n          retryAttempt += 1;\n          // Exponential from the normal flush interval, capped. Scheduling\n          // happens after `flushing` is cleared, below.\n          return;\n        }\n        pending = pending.slice(1);\n        writePendingBatches(bufferKey, pending);\n        retryAttempt = 0;\n      }\n    } finally {\n      if (pending.length > 0) {\n        const backoff = Math.min(flushIntervalMs * 2 ** retryAttempt, MAX_RETRY_BACKOFF_MS);\n        scheduleFlush(backoff);\n      } else if (queue.length > 0) {\n        // `bufferQueued` takes at most HARD_MAX_BATCH per pass, so a burst\n        // larger than one batch still has events waiting.\n        scheduleFlush();\n      }\n    }\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  /**\n   * Last-gasp send on pagehide/visibilitychange.\n   *\n   * The keepalive request outlives the document, so its outcome can never be\n   * observed. The batch it carries is therefore removed from the buffer\n   * optimistically: keeping it would re-send on the next page load every time\n   * the send actually worked, which is almost always. Any batch behind it stays\n   * buffered and is retried on the next load.\n   */\n  function flushOnUnload(): void {\n    bufferQueued();\n    clearScheduledFlush();\n    if (pending.length === 0) return;\n\n    const batch = pending[0]!;\n    pending = pending.slice(1);\n    writePendingBatches(bufferKey, pending);\n\n    const body: IngestRequestBody = { session: batch.session, events: batch.events };\n    void postWithFetch(eventsUrl, JSON.stringify(body), config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Thrown on a non-2xx from any awaited Aranova API call.\n *\n * Lives here rather than inside one resource because more than one resource\n * needs it, and a duplicate class would be a genuine hazard: a name star-exported\n * from two modules is silently dropped unless both resolve to the same binding.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every awaited (non fire-and-forget) API helper. */\nexport interface ApiTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /** Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`. */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: ApiTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request. Unlike the event queue, this surfaces failures: any\n * non-2xx rejects with an {@link AranovaApiError}. Returns `undefined` for 204.\n */\nexport async function apiRequest<T>(\n  config: ApiTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n  extraHeaders?: Record<string, string>,\n): Promise<T> {\n  const headers = { ...identityHeaders(config), ...extraHeaders };\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { ApiTransportConfig } from \"../http/request\";\nimport { apiRequest } from \"../http/request\";\n\nexport type CalendarTransportConfig = ApiTransportConfig;\n\n/** Prefixes `/calendar` so callers pass resource-relative paths. */\nexport async function calendarRequest<T>(\n  config: CalendarTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  return apiRequest<T>(config, method, `/calendar${path}`, body);\n}\n","import type {\n  Booking,\n  BookingCancelInput,\n  BookingCreateInput,\n  BookingRescheduleInput,\n} from \"./schema\";\nimport type { CalendarTransportConfig } from \"./transport\";\nimport { calendarRequest } from \"./transport\";\n\n/**\n * Booking writes. Requires a SECRET key, so this only ever runs server-side.\n *\n * Reached from a browser through the site's own route handler\n * (`createCalendarRoutes`), never directly — which is the entire point of the\n * read/write split.\n */\nexport interface CalendarWriteClient<TCalendarKey extends string = string> {\n  create(input: BookingCreateInput & { calendar_key: TCalendarKey }): Promise<Booking>;\n  reschedule(bookingId: string, patch: BookingRescheduleInput): Promise<Booking>;\n  cancel(bookingId: string, patch?: BookingCancelInput): Promise<Booking>;\n}\n\nexport interface CalendarWriteClientConfig extends CalendarTransportConfig {\n  businessId?: string;\n}\n\nfunction withBusiness(config: CalendarWriteClientConfig, path: string): string {\n  if (!config.businessId) return path;\n  const separator = path.includes(\"?\") ? \"&\" : \"?\";\n  return `${path}${separator}business_id=${encodeURIComponent(config.businessId)}`;\n}\n\nexport function createCalendarWriteClient<TCalendarKey extends string = string>(\n  config: CalendarWriteClientConfig,\n): CalendarWriteClient<TCalendarKey> {\n  return {\n    async create(input) {\n      return calendarRequest<Booking>(config, \"POST\", withBusiness(config, \"/bookings\"), input);\n    },\n    async reschedule(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"PATCH\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch,\n      );\n    },\n    async cancel(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"DELETE\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch ?? {},\n      );\n    },\n  };\n}\n","import { AranovaApiError } from \"../http/errors\";\nimport type { CalendarWriteClientConfig } from \"./write-client\";\nimport { createCalendarWriteClient } from \"./write-client\";\n\n/**\n * A drop-in booking endpoint for a client site's own server.\n *\n * The browser posts here, on the site's own origin; this forwards with the\n * secret key, which never enters a bundle. Deliberately NOT a passthrough proxy\n * — only the three booking verbs exist, and there is no GET, because reads go\n * straight from the browser with the public key and must not burn a serverless\n * invocation.\n */\nexport interface CalendarRoutesConfig extends Omit<CalendarWriteClientConfig, \"apiKey\"> {\n  /**\n   * An `aranv_sk_…` key. Named `secretKey` rather than `apiKey` on purpose:\n   * this handler exists so the key stays server-side, and a field called\n   * `apiKey` invites someone to paste the public one in and never notice.\n   */\n  secretKey: string;\n  /**\n   * Optional per-request gate — return a string to reject with 403. Use it for\n   * a bot check or the site's own rules.\n   */\n  authorize?: (request: Request) => Promise<string | null> | string | null;\n}\n\ntype Handler = (request: Request, context?: unknown) => Promise<Response>;\n\nfunction json(body: unknown, status: number): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction errorResponse(error: unknown): Response {\n  if (error instanceof AranovaApiError) {\n    return json({ detail: error.message, code: error.code }, error.status);\n  }\n  return json({ detail: \"Booking failed\" }, 502);\n}\n\n/** Last path segment, used as the booking id on reschedule/cancel. */\nfunction bookingIdFrom(request: Request): string | null {\n  const segments = new URL(request.url).pathname.split(\"/\").filter(Boolean);\n  // Index arithmetic, not `Array#at`: the packages' TS lib target predates it.\n  const last = segments.length > 0 ? segments[segments.length - 1] : undefined;\n  return last && last !== \"bookings\" ? decodeURIComponent(last) : null;\n}\n\nexport function createCalendarRoutes(config: CalendarRoutesConfig): {\n  POST: Handler;\n  PATCH: Handler;\n  DELETE: Handler;\n} {\n  const { secretKey, authorize, ...transport } = config;\n  const client = createCalendarWriteClient({ ...transport, apiKey: secretKey });\n\n  const guarded =\n    (run: (request: Request) => Promise<Response>): Handler =>\n    async (request: Request) => {\n      if (authorize) {\n        const rejection = await authorize(request);\n        if (rejection) return json({ detail: rejection }, 403);\n      }\n      try {\n        return await run(request);\n      } catch (error) {\n        return errorResponse(error);\n      }\n    };\n\n  return {\n    POST: guarded(async (request) => {\n      const body = (await request.json()) as Parameters<typeof client.create>[0];\n      return json(await client.create(body), 201);\n    }),\n    PATCH: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = (await request.json()) as Parameters<typeof client.reschedule>[1];\n      return json(await client.reschedule(bookingId, body), 200);\n    }),\n    DELETE: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = await request.json().catch(() => ({}) as Parameters<typeof client.cancel>[1]);\n      return json(await client.cancel(bookingId, body), 200);\n    }),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAO;;;ACIP,+BAAwE;;;ACJxE,iBAAkB;AASX,IAAM,yBAAyB,aACnC,OAAO;AAAA,EACN,MAAM,aACH,OAAO;AAAA,IACN,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,aAAE,OAAO;AAAA,IACf,QAAQ,aAAE,OAAO;AAAA,IACjB,MAAM,aAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,aACP,OAAO;AAAA,IACN,GAAG,aAAE,OAAO;AAAA,IACZ,GAAG,aAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,aAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACkDlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;AC7E/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACGA,SAAS,gBAAgB,QAAoD;AAC3E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAMA,eAAsB,WACpB,QACA,QACA,MACA,MACA,cACY;AACZ,QAAM,UAAU,EAAE,GAAG,gBAAgB,MAAM,GAAG,GAAG,aAAa;AAC9D,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACvEA,eAAsB,gBACpB,QACA,QACA,MACA,MACY;AACZ,SAAO,WAAc,QAAQ,QAAQ,YAAY,IAAI,IAAI,IAAI;AAC/D;;;ACaA,SAAS,aAAa,QAAmC,MAAsB;AAC7E,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,QAAM,YAAY,KAAK,SAAS,GAAG,IAAI,MAAM;AAC7C,SAAO,GAAG,IAAI,GAAG,SAAS,eAAe,mBAAmB,OAAO,UAAU,CAAC;AAChF;AAEO,SAAS,0BACd,QACmC;AACnC,SAAO;AAAA,IACL,MAAM,OAAO,OAAO;AAClB,aAAO,gBAAyB,QAAQ,QAAQ,aAAa,QAAQ,WAAW,GAAG,KAAK;AAAA,IAC1F;AAAA,IACA,MAAM,WAAW,WAAW,OAAO;AACjC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,OAAO;AAC7B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE,SAAS,CAAC;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;;;AC3BA,SAAS,KAAK,MAAe,QAA0B;AACrD,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,cAAc,OAA0B;AAC/C,MAAI,iBAAiB,iBAAiB;AACpC,WAAO,KAAK,EAAE,QAAQ,MAAM,SAAS,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM;AAAA,EACvE;AACA,SAAO,KAAK,EAAE,QAAQ,iBAAiB,GAAG,GAAG;AAC/C;AAGA,SAAS,cAAc,SAAiC;AACtD,QAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAExE,QAAM,OAAO,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,CAAC,IAAI;AACnE,SAAO,QAAQ,SAAS,aAAa,mBAAmB,IAAI,IAAI;AAClE;AAEO,SAAS,qBAAqB,QAInC;AACA,QAAM,EAAE,WAAW,WAAW,GAAG,UAAU,IAAI;AAC/C,QAAM,SAAS,0BAA0B,EAAE,GAAG,WAAW,QAAQ,UAAU,CAAC;AAE5E,QAAM,UACJ,CAAC,QACD,OAAO,YAAqB;AAC1B,QAAI,WAAW;AACb,YAAM,YAAY,MAAM,UAAU,OAAO;AACzC,UAAI,UAAW,QAAO,KAAK,EAAE,QAAQ,UAAU,GAAG,GAAG;AAAA,IACvD;AACA,QAAI;AACF,aAAO,MAAM,IAAI,OAAO;AAAA,IAC1B,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAEF,SAAO;AAAA,IACL,MAAM,QAAQ,OAAO,YAAY;AAC/B,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,GAAG;AAAA,IAC5C,CAAC;AAAA,IACD,OAAO,QAAQ,OAAO,YAAY;AAChC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,WAAW,WAAW,IAAI,GAAG,GAAG;AAAA,IAC3D,CAAC;AAAA,IACD,QAAQ,QAAQ,OAAO,YAAY;AACjC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAyC;AACzF,aAAO,KAAK,MAAM,OAAO,OAAO,WAAW,IAAI,GAAG,GAAG;AAAA,IACvD,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../src/calendar-server.ts","../../tracking-core/src/phone.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/http/errors.ts","../../tracking-core/src/resources/http/request.ts","../../tracking-core/src/resources/calendar/transport.ts","../../tracking-core/src/resources/calendar/write-client.ts","../../tracking-core/src/resources/calendar/route-handler.ts"],"sourcesContent":["import \"server-only\";\n\n// Booking writes with a SECRET key — `@aranova/tracking-next/calendar-server`.\n// The `server-only` import above is the guard: a client component importing\n// this fails the build instead of shipping the key to a browser.\nexport * from \"../../tracking-core/src/calendar-server-public\";\n","// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getRegisteredCapabilities } from \"./capabilities\";\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Ceiling on the exponential backoff between failed delivery attempts.\n */\nexport const MAX_RETRY_BACKOFF_MS = 60_000;\n\n/**\n * Cap on events held in the durable retry buffer. Oldest batches are dropped\n * first once this is exceeded — an unbounded buffer would eventually blow the\n * localStorage quota and take the whole SDK down with it.\n */\nexport const MAX_BUFFERED_EVENTS = 200;\n\n/**\n * localStorage key prefix for the durable retry buffer. Versioned so a future\n * shape change can't be misread as the current one.\n */\nexport const RETRY_BUFFER_KEY_PREFIX = \"aranova_tracking_pending_v1\";\n\n/**\n * What to do with a batch after an attempted delivery.\n *\n * `retry` covers the transport failing and the server saying \"later\" (408, 429,\n * 5xx). `drop` covers a permanent rejection — a 422 from a malformed payload\n * will never succeed, and retrying it forever would wedge every batch behind it.\n */\ntype DeliveryOutcome = \"ok\" | \"retry\" | \"drop\";\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n    // Rebuilt per flush (this runs inside the payload builder), so a client\n    // constructed later on a deeper route still gets reported.\n    capabilities: getRegisteredCapabilities(),\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<DeliveryOutcome> {\n  // No fetch at all (a non-browser runtime): there is nothing to retry against,\n  // and scheduling one would spin a timer forever. Give up on the batch.\n  if (typeof fetch !== \"function\") return \"drop\";\n  try {\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n    if (response.ok) return \"ok\";\n    if (response.status === 408 || response.status === 429 || response.status >= 500) {\n      return \"retry\";\n    }\n    // 401/403/422 and friends: the payload or the key is wrong, and will still\n    // be wrong in 30 seconds.\n    return \"drop\";\n  } catch {\n    // Network-level failure (offline, DNS, CORS preflight, aborted). Never\n    // throws to the host site; the batch stays buffered for the next attempt.\n    return \"retry\";\n  }\n}\n\n/**\n * A batch awaiting delivery. Each one carries its OWN session snapshot: a batch\n * can outlive the session that produced it (buffered across a reload), and\n * re-sending it under whatever session is current would silently misattribute\n * those events.\n */\ninterface PendingBatch {\n  session: TrackingSessionUpsertPayload;\n  events: QueuedEvent[];\n}\n\nfunction retryBufferKey(apiKey: string, endpoint: string): string {\n  return `${RETRY_BUFFER_KEY_PREFIX}:${apiKey}:${endpoint}`;\n}\n\nfunction readPendingBatches(key: string): PendingBatch[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(key);\n    if (!raw) return [];\n    const parsed: unknown = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(\n      (entry): entry is PendingBatch =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        \"session\" in entry &&\n        Array.isArray((entry as PendingBatch).events),\n    );\n  } catch {\n    // Storage blocked, or a corrupt/foreign value — start clean rather than\n    // letting a bad read break the host site.\n    return [];\n  }\n}\n\n/**\n * Mirror the buffer to storage unconditionally.\n *\n * Deliberately no read-back verification: under partitioned storage a write can\n * succeed for this document and still not be visible to a verifying read, so a\n * verify-gate false-negatives exactly where durability matters most.\n */\nfunction writePendingBatches(key: string, batches: PendingBatch[]): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    if (batches.length === 0) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, JSON.stringify(batches));\n  } catch {\n    // Quota exceeded or storage blocked — in-memory retry still works.\n  }\n}\n\n/** Drop the oldest batches until the buffer is back under the event cap. */\nfunction trimToBufferCap(batches: PendingBatch[]): PendingBatch[] {\n  let total = batches.reduce((sum, batch) => sum + batch.events.length, 0);\n  const trimmed = batches.slice();\n  while (total > MAX_BUFFERED_EVENTS && trimmed.length > 1) {\n    const dropped = trimmed.shift();\n    total -= dropped ? dropped.events.length : 0;\n  }\n  return trimmed;\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  // Batches that have been handed to the network at least once and not yet\n  // acknowledged. Mirrored to localStorage so a reload — or a deploy window that\n  // 5xxs every request — costs latency instead of data.\n  const bufferKey = retryBufferKey(config.apiKey, endpointBase);\n  let pending: PendingBatch[] = readPendingBatches(bufferKey);\n  // Flushes are serialized through one chain. Batches are no longer removed from\n  // the buffer before the response arrives, so two overlapping flushes would\n  // send the same batch twice. Chaining (rather than a \"busy\" flag that returns\n  // early) keeps `await flush()` meaning \"flushed\" for the caller.\n  let flushChain: Promise<void> = Promise.resolve();\n  let retryAttempt = 0;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  // Anything left buffered by a previous page load goes out on the normal\n  // debounce, ahead of whatever this page produces.\n  if (pending.length > 0) {\n    scheduleFlush();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      ylpcid: params.ylpcid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(delayMs: number = flushIntervalMs): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, delayMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  /** Move everything currently queued into the durable buffer. */\n  function bufferQueued(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    pending = trimToBufferCap([...pending, { session: buildSessionPayload(), events }]);\n    writePendingBatches(bufferKey, pending);\n  }\n\n  /**\n   * Drain the durable buffer, oldest batch first.\n   *\n   * A batch leaves the buffer only on `ok` (acknowledged) or `drop` (permanently\n   * rejected). Anything else keeps it, so a 5xx window costs latency, not data.\n   *\n   * Delivery is at-least-once: with no event-level idempotency key on the wire,\n   * a response lost after the server committed will re-send that batch. That\n   * window is far narrower than the \"every 5xx is permanent loss\" it replaces —\n   * closing it needs a client-generated event id plus a backend uniqueness\n   * constraint, which is a schema change and its own release.\n   */\n  function flush(): Promise<void> {\n    // `.catch` keeps one unexpected throw from poisoning every later flush.\n    flushChain = flushChain.then(runFlush).catch(() => {});\n    return flushChain;\n  }\n\n  async function runFlush(): Promise<void> {\n    if (destroyed) return;\n    clearScheduledFlush();\n    bufferQueued();\n    if (pending.length === 0) return;\n\n    try {\n      while (pending.length > 0) {\n        const batch = pending[0]!;\n        const body: IngestRequestBody = { session: batch.session, events: batch.events };\n        // keepalive=false: this runs on a live page, where a plain fetch\n        // completes normally and its failure is observable. The unload path\n        // (flushOnUnload) passes true instead — pagehide tears the document down\n        // and aborts a plain fetch mid-flight, while keepalive hands the request\n        // to the browser to finish after teardown.\n        const outcome = await postWithFetch(\n          eventsUrl,\n          JSON.stringify(body),\n          config.apiKey,\n          identityHeaders,\n          false,\n        );\n        if (outcome === \"retry\") {\n          retryAttempt += 1;\n          // Exponential from the normal flush interval, capped. Scheduling\n          // happens after `flushing` is cleared, below.\n          return;\n        }\n        pending = pending.slice(1);\n        writePendingBatches(bufferKey, pending);\n        retryAttempt = 0;\n      }\n    } finally {\n      if (pending.length > 0) {\n        const backoff = Math.min(flushIntervalMs * 2 ** retryAttempt, MAX_RETRY_BACKOFF_MS);\n        scheduleFlush(backoff);\n      } else if (queue.length > 0) {\n        // `bufferQueued` takes at most HARD_MAX_BATCH per pass, so a burst\n        // larger than one batch still has events waiting.\n        scheduleFlush();\n      }\n    }\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  /**\n   * Last-gasp send on pagehide/visibilitychange.\n   *\n   * The keepalive request outlives the document, so its outcome can never be\n   * observed. The batch it carries is therefore removed from the buffer\n   * optimistically: keeping it would re-send on the next page load every time\n   * the send actually worked, which is almost always. Any batch behind it stays\n   * buffered and is retried on the next load.\n   */\n  function flushOnUnload(): void {\n    bufferQueued();\n    clearScheduledFlush();\n    if (pending.length === 0) return;\n\n    const batch = pending[0]!;\n    pending = pending.slice(1);\n    writePendingBatches(bufferKey, pending);\n\n    const body: IngestRequestBody = { session: batch.session, events: batch.events };\n    void postWithFetch(eventsUrl, JSON.stringify(body), config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Thrown on a non-2xx from any awaited Aranova API call.\n *\n * Lives here rather than inside one resource because more than one resource\n * needs it, and a duplicate class would be a genuine hazard: a name star-exported\n * from two modules is silently dropped unless both resolve to the same binding.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every awaited (non fire-and-forget) API helper. */\nexport interface ApiTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /** Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`. */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: ApiTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request. Unlike the event queue, this surfaces failures: any\n * non-2xx rejects with an {@link AranovaApiError}. Returns `undefined` for 204.\n */\nexport async function apiRequest<T>(\n  config: ApiTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n  extraHeaders?: Record<string, string>,\n): Promise<T> {\n  const headers = { ...identityHeaders(config), ...extraHeaders };\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { ApiTransportConfig } from \"../http/request\";\nimport { apiRequest } from \"../http/request\";\n\nexport type CalendarTransportConfig = ApiTransportConfig;\n\n/** Prefixes `/calendar` so callers pass resource-relative paths. */\nexport async function calendarRequest<T>(\n  config: CalendarTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  return apiRequest<T>(config, method, `/calendar${path}`, body);\n}\n","import type {\n  Booking,\n  BookingCancelInput,\n  BookingCreateInput,\n  BookingRescheduleInput,\n} from \"./schema\";\nimport type { CalendarTransportConfig } from \"./transport\";\nimport { calendarRequest } from \"./transport\";\n\n/**\n * Booking writes. Requires a SECRET key, so this only ever runs server-side.\n *\n * Reached from a browser through the site's own route handler\n * (`createCalendarRoutes`), never directly — which is the entire point of the\n * read/write split.\n */\nexport interface CalendarWriteClient<TCalendarKey extends string = string> {\n  create(input: BookingCreateInput & { calendar_key: TCalendarKey }): Promise<Booking>;\n  reschedule(bookingId: string, patch: BookingRescheduleInput): Promise<Booking>;\n  cancel(bookingId: string, patch?: BookingCancelInput): Promise<Booking>;\n}\n\nexport interface CalendarWriteClientConfig extends CalendarTransportConfig {\n  businessId?: string;\n}\n\nfunction withBusiness(config: CalendarWriteClientConfig, path: string): string {\n  if (!config.businessId) return path;\n  const separator = path.includes(\"?\") ? \"&\" : \"?\";\n  return `${path}${separator}business_id=${encodeURIComponent(config.businessId)}`;\n}\n\nexport function createCalendarWriteClient<TCalendarKey extends string = string>(\n  config: CalendarWriteClientConfig,\n): CalendarWriteClient<TCalendarKey> {\n  return {\n    async create(input) {\n      return calendarRequest<Booking>(config, \"POST\", withBusiness(config, \"/bookings\"), input);\n    },\n    async reschedule(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"PATCH\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch,\n      );\n    },\n    async cancel(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"DELETE\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch ?? {},\n      );\n    },\n  };\n}\n","import { AranovaApiError } from \"../http/errors\";\nimport type { CalendarWriteClientConfig } from \"./write-client\";\nimport { createCalendarWriteClient } from \"./write-client\";\n\n/**\n * A drop-in booking endpoint for a client site's own server.\n *\n * The browser posts here, on the site's own origin; this forwards with the\n * secret key, which never enters a bundle. Deliberately NOT a passthrough proxy\n * — only the three booking verbs exist, and there is no GET, because reads go\n * straight from the browser with the public key and must not burn a serverless\n * invocation.\n */\nexport interface CalendarRoutesConfig extends Omit<CalendarWriteClientConfig, \"apiKey\"> {\n  /**\n   * An `aranv_sk_…` key. Named `secretKey` rather than `apiKey` on purpose:\n   * this handler exists so the key stays server-side, and a field called\n   * `apiKey` invites someone to paste the public one in and never notice.\n   */\n  secretKey: string;\n  /**\n   * Optional per-request gate — return a string to reject with 403. Use it for\n   * a bot check or the site's own rules.\n   */\n  authorize?: (request: Request) => Promise<string | null> | string | null;\n}\n\ntype Handler = (request: Request, context?: unknown) => Promise<Response>;\n\nfunction json(body: unknown, status: number): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction errorResponse(error: unknown): Response {\n  if (error instanceof AranovaApiError) {\n    return json({ detail: error.message, code: error.code }, error.status);\n  }\n  return json({ detail: \"Booking failed\" }, 502);\n}\n\n/** Last path segment, used as the booking id on reschedule/cancel. */\nfunction bookingIdFrom(request: Request): string | null {\n  const segments = new URL(request.url).pathname.split(\"/\").filter(Boolean);\n  // Index arithmetic, not `Array#at`: the packages' TS lib target predates it.\n  const last = segments.length > 0 ? segments[segments.length - 1] : undefined;\n  return last && last !== \"bookings\" ? decodeURIComponent(last) : null;\n}\n\nexport function createCalendarRoutes(config: CalendarRoutesConfig): {\n  POST: Handler;\n  PATCH: Handler;\n  DELETE: Handler;\n} {\n  const { secretKey, authorize, ...transport } = config;\n  const client = createCalendarWriteClient({ ...transport, apiKey: secretKey });\n\n  const guarded =\n    (run: (request: Request) => Promise<Response>): Handler =>\n    async (request: Request) => {\n      if (authorize) {\n        const rejection = await authorize(request);\n        if (rejection) return json({ detail: rejection }, 403);\n      }\n      try {\n        return await run(request);\n      } catch (error) {\n        return errorResponse(error);\n      }\n    };\n\n  return {\n    POST: guarded(async (request) => {\n      const body = (await request.json()) as Parameters<typeof client.create>[0];\n      return json(await client.create(body), 201);\n    }),\n    PATCH: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = (await request.json()) as Parameters<typeof client.reschedule>[1];\n      return json(await client.reschedule(bookingId, body), 200);\n    }),\n    DELETE: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = await request.json().catch(() => ({}) as Parameters<typeof client.cancel>[1]);\n      return json(await client.cancel(bookingId, body), 200);\n    }),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAO;;;ACIP,+BAAwE;;;ACJxE,iBAAkB;AASX,IAAM,yBAAyB,aACnC,OAAO;AAAA,EACN,MAAM,aACH,OAAO;AAAA,IACN,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,aAAE,OAAO;AAAA,IACf,QAAQ,aAAE,OAAO;AAAA,IACjB,MAAM,aAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,aACP,OAAO;AAAA,IACN,GAAG,aAAE,OAAO;AAAA,IACZ,GAAG,aAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,aAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACkDlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;AC7E/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACGA,SAAS,gBAAgB,QAAoD;AAC3E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAMA,eAAsB,WACpB,QACA,QACA,MACA,MACA,cACY;AACZ,QAAM,UAAU,EAAE,GAAG,gBAAgB,MAAM,GAAG,GAAG,aAAa;AAC9D,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACvEA,eAAsB,gBACpB,QACA,QACA,MACA,MACY;AACZ,SAAO,WAAc,QAAQ,QAAQ,YAAY,IAAI,IAAI,IAAI;AAC/D;;;ACaA,SAAS,aAAa,QAAmC,MAAsB;AAC7E,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,QAAM,YAAY,KAAK,SAAS,GAAG,IAAI,MAAM;AAC7C,SAAO,GAAG,IAAI,GAAG,SAAS,eAAe,mBAAmB,OAAO,UAAU,CAAC;AAChF;AAEO,SAAS,0BACd,QACmC;AACnC,SAAO;AAAA,IACL,MAAM,OAAO,OAAO;AAClB,aAAO,gBAAyB,QAAQ,QAAQ,aAAa,QAAQ,WAAW,GAAG,KAAK;AAAA,IAC1F;AAAA,IACA,MAAM,WAAW,WAAW,OAAO;AACjC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,OAAO;AAC7B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE,SAAS,CAAC;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;;;AC3BA,SAAS,KAAK,MAAe,QAA0B;AACrD,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,cAAc,OAA0B;AAC/C,MAAI,iBAAiB,iBAAiB;AACpC,WAAO,KAAK,EAAE,QAAQ,MAAM,SAAS,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM;AAAA,EACvE;AACA,SAAO,KAAK,EAAE,QAAQ,iBAAiB,GAAG,GAAG;AAC/C;AAGA,SAAS,cAAc,SAAiC;AACtD,QAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAExE,QAAM,OAAO,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,CAAC,IAAI;AACnE,SAAO,QAAQ,SAAS,aAAa,mBAAmB,IAAI,IAAI;AAClE;AAEO,SAAS,qBAAqB,QAInC;AACA,QAAM,EAAE,WAAW,WAAW,GAAG,UAAU,IAAI;AAC/C,QAAM,SAAS,0BAA0B,EAAE,GAAG,WAAW,QAAQ,UAAU,CAAC;AAE5E,QAAM,UACJ,CAAC,QACD,OAAO,YAAqB;AAC1B,QAAI,WAAW;AACb,YAAM,YAAY,MAAM,UAAU,OAAO;AACzC,UAAI,UAAW,QAAO,KAAK,EAAE,QAAQ,UAAU,GAAG,GAAG;AAAA,IACvD;AACA,QAAI;AACF,aAAO,MAAM,IAAI,OAAO;AAAA,IAC1B,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAEF,SAAO;AAAA,IACL,MAAM,QAAQ,OAAO,YAAY;AAC/B,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,GAAG;AAAA,IAC5C,CAAC;AAAA,IACD,OAAO,QAAQ,OAAO,YAAY;AAChC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,WAAW,WAAW,IAAI,GAAG,GAAG;AAAA,IAC3D,CAAC;AAAA,IACD,QAAQ,QAAQ,OAAO,YAAY;AACjC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAyC;AACzF,aAAO,KAAK,MAAM,OAAO,OAAO,WAAW,IAAI,GAAG,GAAG;AAAA,IACvD,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/calendar-server.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/calendar-server.ts","../../tracking-core/src/phone.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/http/errors.ts","../../tracking-core/src/resources/http/request.ts","../../tracking-core/src/resources/calendar/transport.ts","../../tracking-core/src/resources/calendar/write-client.ts","../../tracking-core/src/resources/calendar/route-handler.ts"],"sourcesContent":["import \"server-only\";\n\n// Booking writes with a SECRET key — `@aranova/tracking-next/calendar-server`.\n// The `server-only` import above is the guard: a client component importing\n// this fails the build instead of shipping the key to a browser.\nexport * from \"../../tracking-core/src/calendar-server-public\";\n","// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getRegisteredCapabilities } from \"./capabilities\";\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Ceiling on the exponential backoff between failed delivery attempts.\n */\nexport const MAX_RETRY_BACKOFF_MS = 60_000;\n\n/**\n * Cap on events held in the durable retry buffer. Oldest batches are dropped\n * first once this is exceeded — an unbounded buffer would eventually blow the\n * localStorage quota and take the whole SDK down with it.\n */\nexport const MAX_BUFFERED_EVENTS = 200;\n\n/**\n * localStorage key prefix for the durable retry buffer. Versioned so a future\n * shape change can't be misread as the current one.\n */\nexport const RETRY_BUFFER_KEY_PREFIX = \"aranova_tracking_pending_v1\";\n\n/**\n * What to do with a batch after an attempted delivery.\n *\n * `retry` covers the transport failing and the server saying \"later\" (408, 429,\n * 5xx). `drop` covers a permanent rejection — a 422 from a malformed payload\n * will never succeed, and retrying it forever would wedge every batch behind it.\n */\ntype DeliveryOutcome = \"ok\" | \"retry\" | \"drop\";\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n    // Rebuilt per flush (this runs inside the payload builder), so a client\n    // constructed later on a deeper route still gets reported.\n    capabilities: getRegisteredCapabilities(),\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<DeliveryOutcome> {\n  // No fetch at all (a non-browser runtime): there is nothing to retry against,\n  // and scheduling one would spin a timer forever. Give up on the batch.\n  if (typeof fetch !== \"function\") return \"drop\";\n  try {\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n    if (response.ok) return \"ok\";\n    if (response.status === 408 || response.status === 429 || response.status >= 500) {\n      return \"retry\";\n    }\n    // 401/403/422 and friends: the payload or the key is wrong, and will still\n    // be wrong in 30 seconds.\n    return \"drop\";\n  } catch {\n    // Network-level failure (offline, DNS, CORS preflight, aborted). Never\n    // throws to the host site; the batch stays buffered for the next attempt.\n    return \"retry\";\n  }\n}\n\n/**\n * A batch awaiting delivery. Each one carries its OWN session snapshot: a batch\n * can outlive the session that produced it (buffered across a reload), and\n * re-sending it under whatever session is current would silently misattribute\n * those events.\n */\ninterface PendingBatch {\n  session: TrackingSessionUpsertPayload;\n  events: QueuedEvent[];\n}\n\nfunction retryBufferKey(apiKey: string, endpoint: string): string {\n  return `${RETRY_BUFFER_KEY_PREFIX}:${apiKey}:${endpoint}`;\n}\n\nfunction readPendingBatches(key: string): PendingBatch[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(key);\n    if (!raw) return [];\n    const parsed: unknown = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(\n      (entry): entry is PendingBatch =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        \"session\" in entry &&\n        Array.isArray((entry as PendingBatch).events),\n    );\n  } catch {\n    // Storage blocked, or a corrupt/foreign value — start clean rather than\n    // letting a bad read break the host site.\n    return [];\n  }\n}\n\n/**\n * Mirror the buffer to storage unconditionally.\n *\n * Deliberately no read-back verification: under partitioned storage a write can\n * succeed for this document and still not be visible to a verifying read, so a\n * verify-gate false-negatives exactly where durability matters most.\n */\nfunction writePendingBatches(key: string, batches: PendingBatch[]): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    if (batches.length === 0) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, JSON.stringify(batches));\n  } catch {\n    // Quota exceeded or storage blocked — in-memory retry still works.\n  }\n}\n\n/** Drop the oldest batches until the buffer is back under the event cap. */\nfunction trimToBufferCap(batches: PendingBatch[]): PendingBatch[] {\n  let total = batches.reduce((sum, batch) => sum + batch.events.length, 0);\n  const trimmed = batches.slice();\n  while (total > MAX_BUFFERED_EVENTS && trimmed.length > 1) {\n    const dropped = trimmed.shift();\n    total -= dropped ? dropped.events.length : 0;\n  }\n  return trimmed;\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  // Batches that have been handed to the network at least once and not yet\n  // acknowledged. Mirrored to localStorage so a reload — or a deploy window that\n  // 5xxs every request — costs latency instead of data.\n  const bufferKey = retryBufferKey(config.apiKey, endpointBase);\n  let pending: PendingBatch[] = readPendingBatches(bufferKey);\n  // Flushes are serialized through one chain. Batches are no longer removed from\n  // the buffer before the response arrives, so two overlapping flushes would\n  // send the same batch twice. Chaining (rather than a \"busy\" flag that returns\n  // early) keeps `await flush()` meaning \"flushed\" for the caller.\n  let flushChain: Promise<void> = Promise.resolve();\n  let retryAttempt = 0;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  // Anything left buffered by a previous page load goes out on the normal\n  // debounce, ahead of whatever this page produces.\n  if (pending.length > 0) {\n    scheduleFlush();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(delayMs: number = flushIntervalMs): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, delayMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  /** Move everything currently queued into the durable buffer. */\n  function bufferQueued(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    pending = trimToBufferCap([...pending, { session: buildSessionPayload(), events }]);\n    writePendingBatches(bufferKey, pending);\n  }\n\n  /**\n   * Drain the durable buffer, oldest batch first.\n   *\n   * A batch leaves the buffer only on `ok` (acknowledged) or `drop` (permanently\n   * rejected). Anything else keeps it, so a 5xx window costs latency, not data.\n   *\n   * Delivery is at-least-once: with no event-level idempotency key on the wire,\n   * a response lost after the server committed will re-send that batch. That\n   * window is far narrower than the \"every 5xx is permanent loss\" it replaces —\n   * closing it needs a client-generated event id plus a backend uniqueness\n   * constraint, which is a schema change and its own release.\n   */\n  function flush(): Promise<void> {\n    // `.catch` keeps one unexpected throw from poisoning every later flush.\n    flushChain = flushChain.then(runFlush).catch(() => {});\n    return flushChain;\n  }\n\n  async function runFlush(): Promise<void> {\n    if (destroyed) return;\n    clearScheduledFlush();\n    bufferQueued();\n    if (pending.length === 0) return;\n\n    try {\n      while (pending.length > 0) {\n        const batch = pending[0]!;\n        const body: IngestRequestBody = { session: batch.session, events: batch.events };\n        // keepalive=false: this runs on a live page, where a plain fetch\n        // completes normally and its failure is observable. The unload path\n        // (flushOnUnload) passes true instead — pagehide tears the document down\n        // and aborts a plain fetch mid-flight, while keepalive hands the request\n        // to the browser to finish after teardown.\n        const outcome = await postWithFetch(\n          eventsUrl,\n          JSON.stringify(body),\n          config.apiKey,\n          identityHeaders,\n          false,\n        );\n        if (outcome === \"retry\") {\n          retryAttempt += 1;\n          // Exponential from the normal flush interval, capped. Scheduling\n          // happens after `flushing` is cleared, below.\n          return;\n        }\n        pending = pending.slice(1);\n        writePendingBatches(bufferKey, pending);\n        retryAttempt = 0;\n      }\n    } finally {\n      if (pending.length > 0) {\n        const backoff = Math.min(flushIntervalMs * 2 ** retryAttempt, MAX_RETRY_BACKOFF_MS);\n        scheduleFlush(backoff);\n      } else if (queue.length > 0) {\n        // `bufferQueued` takes at most HARD_MAX_BATCH per pass, so a burst\n        // larger than one batch still has events waiting.\n        scheduleFlush();\n      }\n    }\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  /**\n   * Last-gasp send on pagehide/visibilitychange.\n   *\n   * The keepalive request outlives the document, so its outcome can never be\n   * observed. The batch it carries is therefore removed from the buffer\n   * optimistically: keeping it would re-send on the next page load every time\n   * the send actually worked, which is almost always. Any batch behind it stays\n   * buffered and is retried on the next load.\n   */\n  function flushOnUnload(): void {\n    bufferQueued();\n    clearScheduledFlush();\n    if (pending.length === 0) return;\n\n    const batch = pending[0]!;\n    pending = pending.slice(1);\n    writePendingBatches(bufferKey, pending);\n\n    const body: IngestRequestBody = { session: batch.session, events: batch.events };\n    void postWithFetch(eventsUrl, JSON.stringify(body), config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Thrown on a non-2xx from any awaited Aranova API call.\n *\n * Lives here rather than inside one resource because more than one resource\n * needs it, and a duplicate class would be a genuine hazard: a name star-exported\n * from two modules is silently dropped unless both resolve to the same binding.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every awaited (non fire-and-forget) API helper. */\nexport interface ApiTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /** Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`. */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: ApiTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request. Unlike the event queue, this surfaces failures: any\n * non-2xx rejects with an {@link AranovaApiError}. Returns `undefined` for 204.\n */\nexport async function apiRequest<T>(\n  config: ApiTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n  extraHeaders?: Record<string, string>,\n): Promise<T> {\n  const headers = { ...identityHeaders(config), ...extraHeaders };\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { ApiTransportConfig } from \"../http/request\";\nimport { apiRequest } from \"../http/request\";\n\nexport type CalendarTransportConfig = ApiTransportConfig;\n\n/** Prefixes `/calendar` so callers pass resource-relative paths. */\nexport async function calendarRequest<T>(\n  config: CalendarTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  return apiRequest<T>(config, method, `/calendar${path}`, body);\n}\n","import type {\n  Booking,\n  BookingCancelInput,\n  BookingCreateInput,\n  BookingRescheduleInput,\n} from \"./schema\";\nimport type { CalendarTransportConfig } from \"./transport\";\nimport { calendarRequest } from \"./transport\";\n\n/**\n * Booking writes. Requires a SECRET key, so this only ever runs server-side.\n *\n * Reached from a browser through the site's own route handler\n * (`createCalendarRoutes`), never directly — which is the entire point of the\n * read/write split.\n */\nexport interface CalendarWriteClient<TCalendarKey extends string = string> {\n  create(input: BookingCreateInput & { calendar_key: TCalendarKey }): Promise<Booking>;\n  reschedule(bookingId: string, patch: BookingRescheduleInput): Promise<Booking>;\n  cancel(bookingId: string, patch?: BookingCancelInput): Promise<Booking>;\n}\n\nexport interface CalendarWriteClientConfig extends CalendarTransportConfig {\n  businessId?: string;\n}\n\nfunction withBusiness(config: CalendarWriteClientConfig, path: string): string {\n  if (!config.businessId) return path;\n  const separator = path.includes(\"?\") ? \"&\" : \"?\";\n  return `${path}${separator}business_id=${encodeURIComponent(config.businessId)}`;\n}\n\nexport function createCalendarWriteClient<TCalendarKey extends string = string>(\n  config: CalendarWriteClientConfig,\n): CalendarWriteClient<TCalendarKey> {\n  return {\n    async create(input) {\n      return calendarRequest<Booking>(config, \"POST\", withBusiness(config, \"/bookings\"), input);\n    },\n    async reschedule(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"PATCH\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch,\n      );\n    },\n    async cancel(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"DELETE\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch ?? {},\n      );\n    },\n  };\n}\n","import { AranovaApiError } from \"../http/errors\";\nimport type { CalendarWriteClientConfig } from \"./write-client\";\nimport { createCalendarWriteClient } from \"./write-client\";\n\n/**\n * A drop-in booking endpoint for a client site's own server.\n *\n * The browser posts here, on the site's own origin; this forwards with the\n * secret key, which never enters a bundle. Deliberately NOT a passthrough proxy\n * — only the three booking verbs exist, and there is no GET, because reads go\n * straight from the browser with the public key and must not burn a serverless\n * invocation.\n */\nexport interface CalendarRoutesConfig extends Omit<CalendarWriteClientConfig, \"apiKey\"> {\n  /**\n   * An `aranv_sk_…` key. Named `secretKey` rather than `apiKey` on purpose:\n   * this handler exists so the key stays server-side, and a field called\n   * `apiKey` invites someone to paste the public one in and never notice.\n   */\n  secretKey: string;\n  /**\n   * Optional per-request gate — return a string to reject with 403. Use it for\n   * a bot check or the site's own rules.\n   */\n  authorize?: (request: Request) => Promise<string | null> | string | null;\n}\n\ntype Handler = (request: Request, context?: unknown) => Promise<Response>;\n\nfunction json(body: unknown, status: number): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction errorResponse(error: unknown): Response {\n  if (error instanceof AranovaApiError) {\n    return json({ detail: error.message, code: error.code }, error.status);\n  }\n  return json({ detail: \"Booking failed\" }, 502);\n}\n\n/** Last path segment, used as the booking id on reschedule/cancel. */\nfunction bookingIdFrom(request: Request): string | null {\n  const segments = new URL(request.url).pathname.split(\"/\").filter(Boolean);\n  // Index arithmetic, not `Array#at`: the packages' TS lib target predates it.\n  const last = segments.length > 0 ? segments[segments.length - 1] : undefined;\n  return last && last !== \"bookings\" ? decodeURIComponent(last) : null;\n}\n\nexport function createCalendarRoutes(config: CalendarRoutesConfig): {\n  POST: Handler;\n  PATCH: Handler;\n  DELETE: Handler;\n} {\n  const { secretKey, authorize, ...transport } = config;\n  const client = createCalendarWriteClient({ ...transport, apiKey: secretKey });\n\n  const guarded =\n    (run: (request: Request) => Promise<Response>): Handler =>\n    async (request: Request) => {\n      if (authorize) {\n        const rejection = await authorize(request);\n        if (rejection) return json({ detail: rejection }, 403);\n      }\n      try {\n        return await run(request);\n      } catch (error) {\n        return errorResponse(error);\n      }\n    };\n\n  return {\n    POST: guarded(async (request) => {\n      const body = (await request.json()) as Parameters<typeof client.create>[0];\n      return json(await client.create(body), 201);\n    }),\n    PATCH: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = (await request.json()) as Parameters<typeof client.reschedule>[1];\n      return json(await client.reschedule(bookingId, body), 200);\n    }),\n    DELETE: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = await request.json().catch(() => ({}) as Parameters<typeof client.cancel>[1]);\n      return json(await client.cancel(bookingId, body), 200);\n    }),\n  };\n}\n"],"mappings":";AAAA,OAAO;;;ACIP,SAAS,WAAW,kCAAoD;;;ACJxE,SAAS,SAAS;AASX,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,EACP,OAAO;AAAA,IACN,GAAG,EAAE,OAAO;AAAA,IACZ,GAAG,EAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACkDlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;AC7E/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACGA,SAAS,gBAAgB,QAAoD;AAC3E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAMA,eAAsB,WACpB,QACA,QACA,MACA,MACA,cACY;AACZ,QAAM,UAAU,EAAE,GAAG,gBAAgB,MAAM,GAAG,GAAG,aAAa;AAC9D,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACvEA,eAAsB,gBACpB,QACA,QACA,MACA,MACY;AACZ,SAAO,WAAc,QAAQ,QAAQ,YAAY,IAAI,IAAI,IAAI;AAC/D;;;ACaA,SAAS,aAAa,QAAmC,MAAsB;AAC7E,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,QAAM,YAAY,KAAK,SAAS,GAAG,IAAI,MAAM;AAC7C,SAAO,GAAG,IAAI,GAAG,SAAS,eAAe,mBAAmB,OAAO,UAAU,CAAC;AAChF;AAEO,SAAS,0BACd,QACmC;AACnC,SAAO;AAAA,IACL,MAAM,OAAO,OAAO;AAClB,aAAO,gBAAyB,QAAQ,QAAQ,aAAa,QAAQ,WAAW,GAAG,KAAK;AAAA,IAC1F;AAAA,IACA,MAAM,WAAW,WAAW,OAAO;AACjC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,OAAO;AAC7B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE,SAAS,CAAC;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;;;AC3BA,SAAS,KAAK,MAAe,QAA0B;AACrD,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,cAAc,OAA0B;AAC/C,MAAI,iBAAiB,iBAAiB;AACpC,WAAO,KAAK,EAAE,QAAQ,MAAM,SAAS,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM;AAAA,EACvE;AACA,SAAO,KAAK,EAAE,QAAQ,iBAAiB,GAAG,GAAG;AAC/C;AAGA,SAAS,cAAc,SAAiC;AACtD,QAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAExE,QAAM,OAAO,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,CAAC,IAAI;AACnE,SAAO,QAAQ,SAAS,aAAa,mBAAmB,IAAI,IAAI;AAClE;AAEO,SAAS,qBAAqB,QAInC;AACA,QAAM,EAAE,WAAW,WAAW,GAAG,UAAU,IAAI;AAC/C,QAAM,SAAS,0BAA0B,EAAE,GAAG,WAAW,QAAQ,UAAU,CAAC;AAE5E,QAAM,UACJ,CAAC,QACD,OAAO,YAAqB;AAC1B,QAAI,WAAW;AACb,YAAM,YAAY,MAAM,UAAU,OAAO;AACzC,UAAI,UAAW,QAAO,KAAK,EAAE,QAAQ,UAAU,GAAG,GAAG;AAAA,IACvD;AACA,QAAI;AACF,aAAO,MAAM,IAAI,OAAO;AAAA,IAC1B,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAEF,SAAO;AAAA,IACL,MAAM,QAAQ,OAAO,YAAY;AAC/B,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,GAAG;AAAA,IAC5C,CAAC;AAAA,IACD,OAAO,QAAQ,OAAO,YAAY;AAChC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,WAAW,WAAW,IAAI,GAAG,GAAG;AAAA,IAC3D,CAAC;AAAA,IACD,QAAQ,QAAQ,OAAO,YAAY;AACjC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAyC;AACzF,aAAO,KAAK,MAAM,OAAO,OAAO,WAAW,IAAI,GAAG,GAAG;AAAA,IACvD,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../src/calendar-server.ts","../../tracking-core/src/phone.ts","../../tracking-core/src/events/page-view.ts","../../tracking-core/src/session.ts","../../tracking-core/src/ingest.ts","../../tracking-core/src/resources/http/errors.ts","../../tracking-core/src/resources/http/request.ts","../../tracking-core/src/resources/calendar/transport.ts","../../tracking-core/src/resources/calendar/write-client.ts","../../tracking-core/src/resources/calendar/route-handler.ts"],"sourcesContent":["import \"server-only\";\n\n// Booking writes with a SECRET key — `@aranova/tracking-next/calendar-server`.\n// The `server-only` import above is the guard: a client component importing\n// this fails the build instead of shipping the key to a browser.\nexport * from \"../../tracking-core/src/calendar-server-public\";\n","// Framework-agnostic phone-number utilities — isomorphic (browser + Node/RSC),\n// zero React. Bundled `libphonenumber-js` (standard metadata) so clients add no\n// dependency. The transmitted value is ALWAYS E.164; display is the only knob.\n\nimport { AsYouType, parsePhoneNumberFromString, type CountryCode } from \"libphonenumber-js\";\n\nexport type { CountryCode };\n\n/**\n * How a phone number is shown in the UI. The transmitted value is always E.164\n * and is deliberately NOT part of this — only the display format is configurable.\n * A function form covers the long tail (`(parsed) => string`).\n */\nexport type PhoneDisplayFormat =\n  | \"national\"\n  | \"international\"\n  | \"e164\"\n  | ((parsed: ParsedPhone) => string);\n\nexport interface ParsedPhone {\n  /** E.164 (`\"+14165550199\"`) or `null` when the input isn't a valid number. This is what gets transmitted. */\n  e164: string | null;\n  /** National display form (`\"(416) 555-0199\"`); empty string when unparseable. */\n  national: string;\n  /** International display form (`\"+1 416 555 0199\"`); empty string when unparseable. */\n  international: string;\n  /** ISO-3166 country resolved by libphonenumber, or `null`. */\n  country: CountryCode | null;\n  isValid: boolean;\n}\n\n/** Region assumed for numbers typed without a country code. */\nexport const DEFAULT_PHONE_COUNTRY: CountryCode = \"CA\";\n\n/** Parse a raw/display string into every representation at once (one parse → display + wire never drift). */\nexport function parsePhone(raw: string, country?: CountryCode): ParsedPhone {\n  const region = country ?? DEFAULT_PHONE_COUNTRY;\n  const parsed = parsePhoneNumberFromString(raw ?? \"\", region);\n  if (!parsed) {\n    return { e164: null, national: \"\", international: \"\", country: region, isValid: false };\n  }\n  const isValid = parsed.isValid();\n  return {\n    // E.164 is only surfaced for a *valid* number — a possible-but-invalid input\n    // (e.g. too few digits) still parses but must not be transmitted.\n    e164: isValid ? parsed.number : null,\n    national: parsed.formatNational(),\n    international: parsed.formatInternational(),\n    country: parsed.country ?? region,\n    isValid,\n  };\n}\n\n/** Normalize any raw/display value to E.164, or `null` if it isn't a valid number. */\nexport function toE164(raw: string, country?: CountryCode): string | null {\n  return parsePhone(raw, country).e164;\n}\n\n/** Format a value for display. Defaults to `'national'`. Never affects the wire value. */\nexport function formatPhone(\n  value: string,\n  format: PhoneDisplayFormat = \"national\",\n  country?: CountryCode,\n): string {\n  const parsed = parsePhone(value, country);\n  if (typeof format === \"function\") return format(parsed);\n  switch (format) {\n    case \"international\":\n      return parsed.international || value;\n    case \"e164\":\n      return parsed.e164 ?? value;\n    case \"national\":\n    default:\n      return parsed.national || value;\n  }\n}\n\n/** Live, incremental formatting for an `<input>` as the user types (`AsYouType`). */\nexport function formatPhoneAsTyped(raw: string, country?: CountryCode): string {\n  return new AsYouType(country ?? DEFAULT_PHONE_COUNTRY).input(raw ?? \"\");\n}\n","import { z } from \"zod\";\n\n/**\n * Metadata for the automatic `page_view` event.\n *\n * The SDK emits this on initial load, SPA route changes, and bfcache restores.\n * Consumers do not call `trackEvent('page_view', ...)`; registering\n * `automatic: { page_view: {} }` enables the SDK-owned trigger.\n */\nexport const pageViewMetadataSchema = z\n  .object({\n    page: z\n      .object({\n        title: z.string().nullable(),\n        path: z.string(),\n        search: z.string(),\n        hash: z.string(),\n      })\n      .strict(),\n    referrer: z.string().nullable(),\n    // `.nullable().optional()` — absent (undefined) OR explicit null OR a\n    // real viewport object. Mirrors Pydantic's `_Viewport | None = None`\n    // on the backend side so the drift test stays clean.\n    viewport: z\n      .object({\n        w: z.number(),\n        h: z.number(),\n      })\n      .strict()\n      .nullable()\n      .optional(),\n  })\n  .strict();\n\nexport type PageViewMetadata = z.infer<typeof pageViewMetadataSchema>;\n\n/**\n * Registration config for automatic `page_view`.\n *\n * `page_view` is required in every trigger registry and currently has no\n * options. Use `{ page_view: {} }`.\n */\nexport const pageViewConfigSchema = z.object({}).strict();\nexport type PageViewConfig = z.infer<typeof pageViewConfigSchema>;\n","// Visitor + session identity for the tracking SDK.\n//\n// Visitor: persistent localStorage UUID, never expires until the user clears\n// browser storage. Used for cross-session correlation.\n//\n// Session: rolling 30-minute idle window. Regenerated when more than\n// SESSION_IDLE_MS has passed since the last event. Matches the behavior of\n// GA4, PostHog, Mixpanel, etc., so analytics is comparable.\n\nimport { clearLandingRecord } from \"./landing\";\n\n/**\n * localStorage key for the persistent visitor id.\n */\nexport const VISITOR_STORAGE_KEY = \"aranova_tracking_visitor\";\n\n/**\n * localStorage key for the rolling session id state.\n */\nexport const SESSION_STORAGE_KEY = \"aranova_tracking_session\";\n\n/**\n * Idle window before a new session id is created.\n */\nexport const SESSION_IDLE_MS = 30 * 60 * 1000;\n\n/**\n * Serialized session state stored in localStorage.\n */\nexport interface StoredSession {\n  /** Client-generated session UUID. */\n  id: string;\n  /** Unix timestamp in milliseconds for the most recent event/session touch. */\n  last_event_at: number;\n}\n\nfunction safeUuid(): string {\n  if (typeof crypto !== \"undefined\" && typeof crypto.randomUUID === \"function\")\n    return crypto.randomUUID();\n  // Fallback for ancient browsers — not cryptographically perfect but unique enough.\n  return `${Date.now().toString(16)}-${Math.random().toString(16).slice(2)}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction readLocalStorage(key: string): string | null {\n  try {\n    return window.localStorage.getItem(key);\n  } catch {\n    return null;\n  }\n}\n\nfunction writeLocalStorage(key: string, value: string): void {\n  try {\n    window.localStorage.setItem(key, value);\n  } catch {\n    // Storage may be denied (private mode, blocked cookies, quota). Caller is\n    // responsible for degrading gracefully.\n  }\n}\n\n/**\n * Return the persistent visitor id for this browser profile.\n *\n * Creates and stores a new id when one does not already exist. During SSR,\n * returns an ephemeral id because browser storage is unavailable.\n */\nexport function getVisitorId(): string {\n  if (typeof window === \"undefined\") return safeUuid();\n\n  const existing = readLocalStorage(VISITOR_STORAGE_KEY);\n  if (existing && existing.length > 0) return existing;\n\n  const fresh = safeUuid();\n  writeLocalStorage(VISITOR_STORAGE_KEY, fresh);\n  return fresh;\n}\n\n/**\n * Result from `getOrRotateSessionId()`.\n */\nexport interface SessionIdResult {\n  /** Current session id. */\n  id: string;\n  /** Whether this call created a new session. */\n  isNew: boolean;\n}\n\n/**\n * Return the current session id, rotating it after the idle window expires.\n *\n * Also refreshes `last_event_at` for active sessions.\n */\nexport function getOrRotateSessionId(now: number = Date.now()): SessionIdResult {\n  if (typeof window === \"undefined\") return { id: safeUuid(), isNew: true };\n\n  const raw = readLocalStorage(SESSION_STORAGE_KEY);\n  if (raw) {\n    try {\n      const parsed = JSON.parse(raw) as Partial<StoredSession>;\n      if (typeof parsed.id === \"string\" && typeof parsed.last_event_at === \"number\") {\n        if (now - parsed.last_event_at <= SESSION_IDLE_MS) {\n          const refreshed: StoredSession = { id: parsed.id, last_event_at: now };\n          writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(refreshed));\n          return { id: parsed.id, isNew: false };\n        }\n      }\n    } catch {\n      // Fall through to a fresh session.\n    }\n  }\n\n  const fresh: StoredSession = { id: safeUuid(), last_event_at: now };\n  writeLocalStorage(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n  return { id: fresh.id, isNew: true };\n}\n\n/**\n * Clear visitor and session identity from localStorage, including the\n * session-scoped landing record (a landing must never outlive its session).\n *\n * Intended for tests, debugging, and explicit user reset flows.\n */\nexport function resetTrackingIdentity(): void {\n  clearLandingRecord();\n  if (typeof window === \"undefined\") return;\n  try {\n    window.localStorage.removeItem(VISITOR_STORAGE_KEY);\n    window.localStorage.removeItem(SESSION_STORAGE_KEY);\n  } catch {\n    // ignored\n  }\n}\n","// Tracking ingest client. Queues events, debounce-flushes them to the\n// /tracking/events endpoint, and degrades silently on errors so a broken\n// network never breaks the host site.\n\nimport { getRegisteredCapabilities } from \"./capabilities\";\nimport { getConsentChoice, getConsentState } from \"./consent\";\nimport { resetPageViewState } from \"./page-view\";\nimport type { PhoneConfig } from \"./phone-field\";\nimport { captureFbc, getFbcCookie, getFbpCookie } from \"./fbq\";\nimport {\n  captureTrackingParamsFromLocation,\n  createEmptyTrackingParams,\n  getCookieValueFromDocument,\n  getTrackingParamsFromCookieReader,\n  mergeTrackingParams,\n} from \"./tracking\";\nimport type { TriggerRegistryConfig } from \"./events/registry\";\nimport { buildHeartbeatMetadata } from \"./heartbeat\";\nimport { buildLandingPayloadFields, getOrCaptureLandingParams } from \"./landing\";\nimport { getOrRotateSessionId, getVisitorId } from \"./session\";\nimport { stashUserDataFromFormFields } from \"./user-data\";\nimport type {\n  TrackingClientContext,\n  TrackingEnvironment,\n  TrackingInstallSurface,\n  TrackingParams,\n  TrackingSessionUpsertPayload,\n} from \"./types\";\n\n/**\n * Default debounce window before queued events are flushed.\n */\nexport const DEFAULT_FLUSH_INTERVAL_MS = 2000;\n\n/**\n * Default queue size that triggers an immediate flush.\n */\nexport const DEFAULT_MAX_QUEUE_SIZE = 10;\n\n/**\n * Hard server-side maximum event count per request body.\n */\nexport const HARD_MAX_BATCH = 50;\n\n/**\n * Ceiling on the exponential backoff between failed delivery attempts.\n */\nexport const MAX_RETRY_BACKOFF_MS = 60_000;\n\n/**\n * Cap on events held in the durable retry buffer. Oldest batches are dropped\n * first once this is exceeded — an unbounded buffer would eventually blow the\n * localStorage quota and take the whole SDK down with it.\n */\nexport const MAX_BUFFERED_EVENTS = 200;\n\n/**\n * localStorage key prefix for the durable retry buffer. Versioned so a future\n * shape change can't be misread as the current one.\n */\nexport const RETRY_BUFFER_KEY_PREFIX = \"aranova_tracking_pending_v1\";\n\n/**\n * What to do with a batch after an attempted delivery.\n *\n * `retry` covers the transport failing and the server saying \"later\" (408, 429,\n * 5xx). `drop` covers a permanent rejection — a 422 from a malformed payload\n * will never succeed, and retrying it forever would wedge every batch behind it.\n */\ntype DeliveryOutcome = \"ok\" | \"retry\" | \"drop\";\n\n/**\n * Header used to authenticate public tracking ingest requests.\n */\nexport const API_KEY_HEADER = \"X-Aranova-Api-Key\";\n\n/**\n * Identity headers stamped on every ingest request. Duplicate fields already\n * present in `session.context` but survive body-parse failures so the backend\n * can attribute 422s to the offending SDK install.\n */\nexport const SDK_VERSION_HEADER = \"X-Aranova-Sdk-Version\";\nexport const SDK_PACKAGE_HEADER = \"X-Aranova-Sdk-Package\";\nexport const SDK_SURFACE_HEADER = \"X-Aranova-Sdk-Surface\";\nexport const SDK_ENVIRONMENT_HEADER = \"X-Aranova-Sdk-Environment\";\n\n/**\n * Configuration for the low-level ingest client.\n *\n * Framework packages usually create this for you through `createTracking()`.\n */\nexport interface TrackingClientConfig {\n  /** Public tracking API key issued for the business. */\n  apiKey: string;\n  /** Tracking endpoint base URL, usually ending in `/tracking`. */\n  endpoint: string;\n  /** SDK surface creating this client. */\n  surface: TrackingInstallSurface;\n  /** Package version reported in session context and heartbeat metadata. */\n  sdkVersion?: string;\n  /** Package name reported in session context and heartbeat metadata. */\n  packageName?: string;\n  /** Trigger registry so the heartbeat can report registered events. */\n  triggers?: TriggerRegistryConfig;\n  /** Override the default 2s debounce window. */\n  flushIntervalMs?: number;\n  /** Override the default 10-event batch trigger. */\n  maxQueueSize?: number;\n  /** Deployment environment label reported in session context. */\n  environment?: TrackingEnvironment;\n  /** All active gtag IDs, keyed by label. Included in session context. */\n  activeGtagIds?: Record<string, string>;\n  /** When true, swallow nothing — useful for tests. */\n  debug?: boolean;\n  /** Phone-field config, carried for parity; the React hook reads it via context. */\n  phone?: PhoneConfig;\n}\n\n/**\n * Input accepted by the low-level stringly-typed client.\n *\n * Prefer the typed `trackEvent(eventName, metadata)` facade exposed by\n * `useTracking()` in React/Next integrations.\n */\nexport interface TrackEventInput {\n  /** Event name to enqueue. */\n  eventType: string;\n  /** URL associated with the event. Defaults to the current page URL. */\n  pageUrl?: string | null;\n  /** Event-specific metadata. */\n  metadata?: Record<string, unknown> | null;\n  /** Timestamp override. Defaults to queue time. */\n  occurredAt?: Date | string | null;\n}\n\ninterface QueuedEvent {\n  event_type: string;\n  page_url: string | null;\n  metadata: Record<string, unknown> | null;\n  occurred_at: string | null;\n}\n\n/**\n * Low-level tracking client responsible for queueing and flushing events.\n */\nexport interface TrackingClient {\n  /** Enqueue an event for batched delivery. */\n  trackEvent: (input: TrackEventInput) => void;\n  /** Flush queued events immediately (fetch, non-keepalive). */\n  flush: () => Promise<void>;\n  /**\n   * Flush queued events through the keepalive transport so the request\n   * survives document unload. Use from `pagehide`/`visibilitychange:hidden`\n   * handlers — a plain `flush()` there is aborted by the browser on unload.\n   */\n  flushBeacon: () => void;\n  /** Return the current rolling session id. */\n  getSessionId: () => string;\n  /** Return the persistent visitor id. */\n  getVisitorId: () => string;\n  /** Remove timers/listeners and prevent future flushes. */\n  destroy: () => void;\n}\n\ninterface IngestRequestBody {\n  session: TrackingSessionUpsertPayload;\n  events: Array<{\n    event_type: string;\n    page_url: string | null;\n    metadata: Record<string, unknown> | null;\n    occurred_at: string | null;\n  }>;\n}\n\nfunction buildContext(\n  surface: TrackingInstallSurface,\n  sdkVersion: string | null,\n  packageName: string | null,\n  environment: TrackingEnvironment,\n  activeGtagIds: Record<string, string> | null,\n): TrackingClientContext {\n  return {\n    surface,\n    sdk_version: sdkVersion,\n    package_name: packageName,\n    site_origin: typeof window === \"undefined\" ? null : window.location.origin,\n    page_title: typeof document === \"undefined\" ? null : document.title || null,\n    referrer: typeof document === \"undefined\" ? null : document.referrer || null,\n    environment,\n    active_gtag_ids: activeGtagIds,\n    // Rebuilt per flush (this runs inside the payload builder), so a client\n    // constructed later on a deeper route still gets reported.\n    capabilities: getRegisteredCapabilities(),\n  };\n}\n\nfunction readTrackingParams(): TrackingParams {\n  if (typeof window === \"undefined\") return createEmptyTrackingParams();\n  // Capture from URL on every read so the first event in a session reflects the\n  // landing-page params even if the cookie helper hasn't run yet.\n  try {\n    captureTrackingParamsFromLocation();\n  } catch {\n    // ignore\n  }\n  return getTrackingParamsFromCookieReader(getCookieValueFromDocument);\n}\n\nfunction consentSnapshot(): Record<string, unknown> | null {\n  try {\n    // Effective consent + provenance so the dashboard can tell default-granted\n    // (opt-out model, no interaction) apart from an explicit choice.\n    const choice = getConsentChoice();\n    return {\n      state: choice.state,\n      source: choice.source,\n      updated_at: choice.updatedAt,\n      expires_at: choice.expiresAt,\n    };\n  } catch {\n    return null;\n  }\n}\n\ninterface IdentityHeaders {\n  sdkVersion: string;\n  packageName: string;\n  surface: string;\n  environment: string;\n}\n\nasync function postWithFetch(\n  url: string,\n  body: string,\n  apiKey: string,\n  identity: IdentityHeaders,\n  keepalive: boolean,\n): Promise<DeliveryOutcome> {\n  // No fetch at all (a non-browser runtime): there is nothing to retry against,\n  // and scheduling one would spin a timer forever. Give up on the batch.\n  if (typeof fetch !== \"function\") return \"drop\";\n  try {\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        [API_KEY_HEADER]: apiKey,\n        [SDK_VERSION_HEADER]: identity.sdkVersion,\n        [SDK_PACKAGE_HEADER]: identity.packageName,\n        [SDK_SURFACE_HEADER]: identity.surface,\n        [SDK_ENVIRONMENT_HEADER]: identity.environment,\n      },\n      body,\n      keepalive,\n      // CORS is open on the tracking endpoint; never send cookies.\n      credentials: \"omit\",\n      mode: \"cors\",\n    });\n    if (response.ok) return \"ok\";\n    if (response.status === 408 || response.status === 429 || response.status >= 500) {\n      return \"retry\";\n    }\n    // 401/403/422 and friends: the payload or the key is wrong, and will still\n    // be wrong in 30 seconds.\n    return \"drop\";\n  } catch {\n    // Network-level failure (offline, DNS, CORS preflight, aborted). Never\n    // throws to the host site; the batch stays buffered for the next attempt.\n    return \"retry\";\n  }\n}\n\n/**\n * A batch awaiting delivery. Each one carries its OWN session snapshot: a batch\n * can outlive the session that produced it (buffered across a reload), and\n * re-sending it under whatever session is current would silently misattribute\n * those events.\n */\ninterface PendingBatch {\n  session: TrackingSessionUpsertPayload;\n  events: QueuedEvent[];\n}\n\nfunction retryBufferKey(apiKey: string, endpoint: string): string {\n  return `${RETRY_BUFFER_KEY_PREFIX}:${apiKey}:${endpoint}`;\n}\n\nfunction readPendingBatches(key: string): PendingBatch[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(key);\n    if (!raw) return [];\n    const parsed: unknown = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(\n      (entry): entry is PendingBatch =>\n        typeof entry === \"object\" &&\n        entry !== null &&\n        \"session\" in entry &&\n        Array.isArray((entry as PendingBatch).events),\n    );\n  } catch {\n    // Storage blocked, or a corrupt/foreign value — start clean rather than\n    // letting a bad read break the host site.\n    return [];\n  }\n}\n\n/**\n * Mirror the buffer to storage unconditionally.\n *\n * Deliberately no read-back verification: under partitioned storage a write can\n * succeed for this document and still not be visible to a verifying read, so a\n * verify-gate false-negatives exactly where durability matters most.\n */\nfunction writePendingBatches(key: string, batches: PendingBatch[]): void {\n  if (typeof window === \"undefined\") return;\n  try {\n    if (batches.length === 0) window.localStorage.removeItem(key);\n    else window.localStorage.setItem(key, JSON.stringify(batches));\n  } catch {\n    // Quota exceeded or storage blocked — in-memory retry still works.\n  }\n}\n\n/** Drop the oldest batches until the buffer is back under the event cap. */\nfunction trimToBufferCap(batches: PendingBatch[]): PendingBatch[] {\n  let total = batches.reduce((sum, batch) => sum + batch.events.length, 0);\n  const trimmed = batches.slice();\n  while (total > MAX_BUFFERED_EVENTS && trimmed.length > 1) {\n    const dropped = trimmed.shift();\n    total -= dropped ? dropped.events.length : 0;\n  }\n  return trimmed;\n}\n\nlet globalClient: TrackingClient | null = null;\nlet globalClientKey: string | null = null;\n\nfunction clientConfigKey(config: TrackingClientConfig): string {\n  return `${config.apiKey}@${config.endpoint}#${config.surface}`;\n}\n\n/**\n * Return a page-level singleton tracking client. Creating the client anew on\n * every component mount is wrong — React StrictMode double-mounts dev-only,\n * and destroying+recreating the client between the cleanup and re-run strips\n * away the pushState patch that SPA auto page view relies on. A singleton\n * survives all of that: the client lives for the entire page, and providers\n * just attach/detach auto page view against it.\n *\n * If `apiKey` / `endpoint` / `surface` change between calls, the previous\n * singleton is destroyed and a new one replaces it. This covers hot-config\n * changes without leaking state.\n */\nexport function getOrCreateTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const key = clientConfigKey(config);\n  if (globalClient !== null && globalClientKey === key) {\n    return globalClient;\n  }\n  if (globalClient !== null) {\n    globalClient.destroy();\n  }\n  globalClient = createTrackingClient(config);\n  globalClientKey = key;\n  return globalClient;\n}\n\n// Global/delegated captures (document/window listeners: page_exit, scroll_depth,\n// time_on_site, form_start, cta_click, phone_click, bfcache restore) must attach ONCE\n// per page-singleton client — NOT once per React provider mount. A page can mount several\n// <TrackingProvider>s (a supported island pattern: a global provider for page-level\n// triggers plus per-component providers so `useSearchParams()` doesn't opt the whole tree\n// out of static rendering). Since the client is a singleton but each provider runs its own\n// attach effect, N mounts would stack N document listeners and every interaction would emit\n// its event N times. We ref-count attaches against the singleton client's identity: the\n// first mount attaches, later mounts are no-ops, and the last unmount detaches.\ninterface ClientCaptureEntry {\n  detach: () => void;\n  refCount: number;\n}\nconst clientCaptureRegistry = new WeakMap<TrackingClient, ClientCaptureEntry>();\n\n/**\n * Attach a set of global/delegated captures against a singleton `client` exactly once,\n * ref-counted across provider mounts. `build` performs the actual `document`/`window`\n * listener attachment and returns a single detacher for all of them; it runs only on the\n * first mount for a given client. The returned release decrements the ref-count and runs\n * `build`'s detacher when the last holder releases. Release is idempotent — React\n * StrictMode invokes an effect's cleanup twice in dev, and a double release must not\n * double-decrement.\n */\nexport function attachClientCapturesOnce(\n  client: TrackingClient,\n  build: () => () => void,\n): () => void {\n  let entry = clientCaptureRegistry.get(client);\n  if (entry === undefined) {\n    entry = { detach: build(), refCount: 0 };\n    clientCaptureRegistry.set(client, entry);\n  }\n  entry.refCount += 1;\n\n  let released = false;\n  return () => {\n    if (released) return;\n    released = true;\n    const current = clientCaptureRegistry.get(client);\n    if (current === undefined) return;\n    current.refCount -= 1;\n    if (current.refCount <= 0) {\n      current.detach();\n      clientCaptureRegistry.delete(client);\n    }\n  };\n}\n\n/**\n * Tear down the singleton if any. Primarily an escape hatch for tests where\n * each test should see a fresh client; production code rarely needs this.\n * Also clears the in-session SPA referrer so the next test starts with a\n * fresh referrer chain.\n */\nexport function resetGlobalTrackingClient(): void {\n  if (globalClient !== null) {\n    // Force-detach any captures still attached to this client so their document/window\n    // listeners can't leak into the next test even if a provider didn't unmount.\n    const entry = clientCaptureRegistry.get(globalClient);\n    if (entry !== undefined) {\n      entry.detach();\n      clientCaptureRegistry.delete(globalClient);\n    }\n    globalClient.destroy();\n  }\n  globalClient = null;\n  globalClientKey = null;\n  resetPageViewState();\n}\n\n/**\n * Create a low-level ingest client.\n *\n * The client queues events, debounces network flushes, sends an SDK heartbeat\n * once per new session, and swallows network errors so analytics never break\n * the host site.\n */\nexport function createTrackingClient(config: TrackingClientConfig): TrackingClient {\n  const flushIntervalMs = config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;\n  const maxQueueSize = Math.min(config.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE, HARD_MAX_BATCH);\n  const sdkVersion = config.sdkVersion ?? null;\n  const packageName = config.packageName ?? null;\n  // Default to 'production' so the wire payload always carries a valid enum\n  // value. Sending null would fail the backend's strict enum validation.\n  const environment: TrackingEnvironment = config.environment ?? \"production\";\n  const activeGtagIds = config.activeGtagIds ?? null;\n  const endpointBase = config.endpoint.replace(/\\/$/, \"\");\n  const eventsUrl = `${endpointBase}/events`;\n  const identityHeaders: IdentityHeaders = {\n    sdkVersion: sdkVersion ?? \"\",\n    packageName: packageName ?? \"\",\n    surface: config.surface,\n    environment,\n  };\n\n  let queue: QueuedEvent[] = [];\n  let flushTimer: ReturnType<typeof setTimeout> | null = null;\n  // Batches that have been handed to the network at least once and not yet\n  // acknowledged. Mirrored to localStorage so a reload — or a deploy window that\n  // 5xxs every request — costs latency instead of data.\n  const bufferKey = retryBufferKey(config.apiKey, endpointBase);\n  let pending: PendingBatch[] = readPendingBatches(bufferKey);\n  // Flushes are serialized through one chain. Batches are no longer removed from\n  // the buffer before the response arrives, so two overlapping flushes would\n  // send the same batch twice. Chaining (rather than a \"busy\" flag that returns\n  // early) keeps `await flush()` meaning \"flushed\" for the caller.\n  let flushChain: Promise<void> = Promise.resolve();\n  let retryAttempt = 0;\n  let firstPage: string | null = null;\n  // Attribution captured synchronously at client creation (before any SPA router\n  // can strip the query string). Merged into every session payload as a fallback\n  // so a blocked-cookie webview or a stripped URL still attributes.\n  let initialParams = createEmptyTrackingParams();\n  let destroyed = false;\n\n  // Initialize identity early so the first POST has stable values.\n  const visitorId = getVisitorId();\n  const initialSession = getOrRotateSessionId();\n  let sessionId = initialSession.id;\n\n  if (typeof window !== \"undefined\") {\n    firstPage = window.location.href;\n    try {\n      initialParams = captureTrackingParamsFromLocation();\n    } catch {\n      // ignore — never break the host site\n    }\n    // Pin this session's LANDING params now, before any SPA router strips the\n    // query string (reuses the stored record when the session already has one).\n    getOrCaptureLandingParams(sessionId);\n    try {\n      captureFbc();\n    } catch {\n      // ignore\n    }\n  }\n\n  // Queue an sdk_heartbeat event at the start of every new session.\n  function enqueueHeartbeat(): void {\n    const metadata = buildHeartbeatMetadata(\n      config.surface,\n      sdkVersion,\n      packageName,\n      config.triggers ?? null,\n      activeGtagIds,\n    );\n    queue.push({\n      event_type: \"sdk_heartbeat\",\n      page_url: typeof window === \"undefined\" ? null : window.location.href,\n      metadata: metadata as unknown as Record<string, unknown>,\n      occurred_at: new Date().toISOString(),\n    });\n  }\n\n  if (initialSession.isNew) {\n    enqueueHeartbeat();\n  }\n\n  // Anything left buffered by a previous page load goes out on the normal\n  // debounce, ahead of whatever this page produces.\n  if (pending.length > 0) {\n    scheduleFlush();\n  }\n\n  function buildSessionPayload(): TrackingSessionUpsertPayload {\n    const rotated = getOrRotateSessionId();\n    if (rotated.isNew && rotated.id !== sessionId) {\n      // Session rotated mid-page (idle > 30min then user returned).\n      enqueueHeartbeat();\n    }\n    sessionId = rotated.id;\n    // Prefer the live cookie/localStorage read; fall back to the init-time\n    // snapshot (covers a webview that blocked the cookie AND a router that\n    // already stripped the landing URL by flush time).\n    const params = mergeTrackingParams(readTrackingParams(), initialParams);\n    const context = buildContext(\n      config.surface,\n      sdkVersion,\n      packageName,\n      environment,\n      activeGtagIds,\n    );\n    return {\n      session_id: sessionId,\n      visitor_id: visitorId,\n      gclid: params.gclid,\n      wbraid: params.wbraid,\n      gbraid: params.gbraid,\n      ylpcid: params.ylpcid,\n      fbclid: params.fbclid,\n      fbc: getFbcCookie(),\n      fbp: getFbpCookie(),\n      utm_source: params.utm_source,\n      utm_medium: params.utm_medium,\n      utm_campaign: params.utm_campaign,\n      utm_term: params.utm_term,\n      utm_content: params.utm_content,\n      // Landing params for the CURRENT session id — captured on the spot when\n      // the session just rotated (the current URL is the rotated session's\n      // landing), reused from the stored record otherwise. Keys are omitted\n      // entirely when the landing isn't observable (SSR).\n      ...buildLandingPayloadFields(sessionId),\n      first_page: firstPage,\n      consent_state: consentSnapshot(),\n      context,\n    };\n  }\n\n  function scheduleFlush(delayMs: number = flushIntervalMs): void {\n    if (flushTimer !== null || destroyed) return;\n    flushTimer = setTimeout(() => {\n      flushTimer = null;\n      void flush();\n    }, delayMs);\n  }\n\n  function clearScheduledFlush(): void {\n    if (flushTimer !== null) {\n      clearTimeout(flushTimer);\n      flushTimer = null;\n    }\n  }\n\n  /** Move everything currently queued into the durable buffer. */\n  function bufferQueued(): void {\n    if (queue.length === 0) return;\n    const events = queue.slice(0, HARD_MAX_BATCH);\n    queue = queue.slice(events.length);\n    pending = trimToBufferCap([...pending, { session: buildSessionPayload(), events }]);\n    writePendingBatches(bufferKey, pending);\n  }\n\n  /**\n   * Drain the durable buffer, oldest batch first.\n   *\n   * A batch leaves the buffer only on `ok` (acknowledged) or `drop` (permanently\n   * rejected). Anything else keeps it, so a 5xx window costs latency, not data.\n   *\n   * Delivery is at-least-once: with no event-level idempotency key on the wire,\n   * a response lost after the server committed will re-send that batch. That\n   * window is far narrower than the \"every 5xx is permanent loss\" it replaces —\n   * closing it needs a client-generated event id plus a backend uniqueness\n   * constraint, which is a schema change and its own release.\n   */\n  function flush(): Promise<void> {\n    // `.catch` keeps one unexpected throw from poisoning every later flush.\n    flushChain = flushChain.then(runFlush).catch(() => {});\n    return flushChain;\n  }\n\n  async function runFlush(): Promise<void> {\n    if (destroyed) return;\n    clearScheduledFlush();\n    bufferQueued();\n    if (pending.length === 0) return;\n\n    try {\n      while (pending.length > 0) {\n        const batch = pending[0]!;\n        const body: IngestRequestBody = { session: batch.session, events: batch.events };\n        // keepalive=false: this runs on a live page, where a plain fetch\n        // completes normally and its failure is observable. The unload path\n        // (flushOnUnload) passes true instead — pagehide tears the document down\n        // and aborts a plain fetch mid-flight, while keepalive hands the request\n        // to the browser to finish after teardown.\n        const outcome = await postWithFetch(\n          eventsUrl,\n          JSON.stringify(body),\n          config.apiKey,\n          identityHeaders,\n          false,\n        );\n        if (outcome === \"retry\") {\n          retryAttempt += 1;\n          // Exponential from the normal flush interval, capped. Scheduling\n          // happens after `flushing` is cleared, below.\n          return;\n        }\n        pending = pending.slice(1);\n        writePendingBatches(bufferKey, pending);\n        retryAttempt = 0;\n      }\n    } finally {\n      if (pending.length > 0) {\n        const backoff = Math.min(flushIntervalMs * 2 ** retryAttempt, MAX_RETRY_BACKOFF_MS);\n        scheduleFlush(backoff);\n      } else if (queue.length > 0) {\n        // `bufferQueued` takes at most HARD_MAX_BATCH per pass, so a burst\n        // larger than one batch still has events waiting.\n        scheduleFlush();\n      }\n    }\n  }\n\n  function trackEvent(input: TrackEventInput): void {\n    if (destroyed) return;\n    if (!input || typeof input.eventType !== \"string\" || input.eventType.length === 0) return;\n\n    // Enhanced conversions: a form submit is the one moment the visitor's own\n    // email/phone pass through the SDK — stash them (memory only) so the\n    // conversion that fires next carries user_data. NOT done for phone_click:\n    // its metadata holds the BUSINESS's number, not the visitor's. An explicit\n    // consent decline also skips the stash entirely — egress is already gated,\n    // but a decliner's identifiers shouldn't sit in page memory either.\n    if (input.eventType === \"form_submit\" && getConsentState() !== \"denied\") {\n      try {\n        const fields = (input.metadata as { form?: { fields?: unknown } } | null)?.form?.fields;\n        if (fields) stashUserDataFromFormFields(fields, config.phone?.defaultCountry);\n      } catch {\n        // user-data capture must never break ingest\n      }\n    }\n\n    const occurredAt =\n      input.occurredAt instanceof Date\n        ? input.occurredAt.toISOString()\n        : typeof input.occurredAt === \"string\"\n          ? input.occurredAt\n          : new Date().toISOString();\n\n    queue.push({\n      event_type: input.eventType,\n      page_url: input.pageUrl ?? (typeof window === \"undefined\" ? null : window.location.href),\n      metadata: input.metadata ?? null,\n      occurred_at: occurredAt,\n    });\n\n    if (queue.length >= maxQueueSize) {\n      void flush();\n    } else {\n      scheduleFlush();\n    }\n  }\n\n  /**\n   * Last-gasp send on pagehide/visibilitychange.\n   *\n   * The keepalive request outlives the document, so its outcome can never be\n   * observed. The batch it carries is therefore removed from the buffer\n   * optimistically: keeping it would re-send on the next page load every time\n   * the send actually worked, which is almost always. Any batch behind it stays\n   * buffered and is retried on the next load.\n   */\n  function flushOnUnload(): void {\n    bufferQueued();\n    clearScheduledFlush();\n    if (pending.length === 0) return;\n\n    const batch = pending[0]!;\n    pending = pending.slice(1);\n    writePendingBatches(bufferKey, pending);\n\n    const body: IngestRequestBody = { session: batch.session, events: batch.events };\n    void postWithFetch(eventsUrl, JSON.stringify(body), config.apiKey, identityHeaders, true);\n  }\n\n  if (typeof window !== \"undefined\") {\n    window.addEventListener(\"pagehide\", flushOnUnload);\n    window.addEventListener(\"visibilitychange\", () => {\n      if (document.visibilityState === \"hidden\") flushOnUnload();\n    });\n  }\n\n  return {\n    trackEvent,\n    flush,\n    flushBeacon: flushOnUnload,\n    getSessionId: () => sessionId,\n    getVisitorId: () => visitorId,\n    destroy: () => {\n      destroyed = true;\n      // Fire any pending events through the keepalive path before tearing\n      // down. Critical for React StrictMode in dev, where the provider's\n      // first mount is immediately unmounted and its 2s debounce would\n      // otherwise drop the initial page_view on the floor. Uses fetch\n      // keepalive so the request survives the component tearing down.\n      if (queue.length > 0) {\n        flushOnUnload();\n      }\n      clearScheduledFlush();\n      queue = [];\n      if (typeof window !== \"undefined\") {\n        window.removeEventListener(\"pagehide\", flushOnUnload);\n      }\n    },\n  };\n}\n","/**\n * Thrown on a non-2xx from any awaited Aranova API call.\n *\n * Lives here rather than inside one resource because more than one resource\n * needs it, and a duplicate class would be a genuine hazard: a name star-exported\n * from two modules is silently dropped unless both resolve to the same binding.\n */\nexport class AranovaApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly requestId: string | undefined;\n\n  constructor(message: string, options: { status: number; code?: string; requestId?: string }) {\n    super(message);\n    this.name = \"AranovaApiError\";\n    this.status = options.status;\n    this.code = options.code;\n    this.requestId = options.requestId;\n  }\n}\n","import {\n  API_KEY_HEADER,\n  SDK_ENVIRONMENT_HEADER,\n  SDK_PACKAGE_HEADER,\n  SDK_SURFACE_HEADER,\n  SDK_VERSION_HEADER,\n} from \"../../ingest\";\nimport { AranovaApiError } from \"./errors\";\n\n/** Shared config for every awaited (non fire-and-forget) API helper. */\nexport interface ApiTransportConfig {\n  /** Public (`aranv_pk_…`) or secret (`aranv_sk_…`) API key. */\n  apiKey: string;\n  /** Base tracking endpoint, e.g. `https://aranovainternal-production.up.railway.app/tracking`. */\n  endpoint: string;\n  /** Optional SDK identity headers (mirrors the event ingest client). */\n  sdkVersion?: string;\n  packageName?: string;\n  surface?: string;\n  environment?: string;\n}\n\nfunction identityHeaders(config: ApiTransportConfig): Record<string, string> {\n  const headers: Record<string, string> = { [API_KEY_HEADER]: config.apiKey };\n  if (config.sdkVersion) headers[SDK_VERSION_HEADER] = config.sdkVersion;\n  if (config.packageName) headers[SDK_PACKAGE_HEADER] = config.packageName;\n  if (config.surface) headers[SDK_SURFACE_HEADER] = config.surface;\n  if (config.environment) headers[SDK_ENVIRONMENT_HEADER] = config.environment;\n  return headers;\n}\n\nfunction joinUrl(endpoint: string, path: string): string {\n  return `${endpoint.replace(/\\/$/, \"\")}${path}`;\n}\n\n/**\n * Single awaited request. Unlike the event queue, this surfaces failures: any\n * non-2xx rejects with an {@link AranovaApiError}. Returns `undefined` for 204.\n */\nexport async function apiRequest<T>(\n  config: ApiTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n  extraHeaders?: Record<string, string>,\n): Promise<T> {\n  const headers = { ...identityHeaders(config), ...extraHeaders };\n  if (body !== undefined) headers[\"Content-Type\"] = \"application/json\";\n\n  const response = await fetch(joinUrl(config.endpoint, path), {\n    method,\n    headers,\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (!response.ok) {\n    let detail: string | undefined;\n    let code: string | undefined;\n    try {\n      const parsed: unknown = await response.json();\n      if (parsed && typeof parsed === \"object\") {\n        const record = parsed as Record<string, unknown>;\n        if (typeof record.detail === \"string\") detail = record.detail;\n        if (typeof record.code === \"string\") code = record.code;\n      }\n    } catch {\n      // non-JSON error body — fall back to status text\n    }\n    throw new AranovaApiError(detail ?? response.statusText ?? \"Request failed\", {\n      status: response.status,\n      code,\n      requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    });\n  }\n\n  if (response.status === 204) return undefined as T;\n  return (await response.json()) as T;\n}\n","import type { ApiTransportConfig } from \"../http/request\";\nimport { apiRequest } from \"../http/request\";\n\nexport type CalendarTransportConfig = ApiTransportConfig;\n\n/** Prefixes `/calendar` so callers pass resource-relative paths. */\nexport async function calendarRequest<T>(\n  config: CalendarTransportConfig,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T> {\n  return apiRequest<T>(config, method, `/calendar${path}`, body);\n}\n","import type {\n  Booking,\n  BookingCancelInput,\n  BookingCreateInput,\n  BookingRescheduleInput,\n} from \"./schema\";\nimport type { CalendarTransportConfig } from \"./transport\";\nimport { calendarRequest } from \"./transport\";\n\n/**\n * Booking writes. Requires a SECRET key, so this only ever runs server-side.\n *\n * Reached from a browser through the site's own route handler\n * (`createCalendarRoutes`), never directly — which is the entire point of the\n * read/write split.\n */\nexport interface CalendarWriteClient<TCalendarKey extends string = string> {\n  create(input: BookingCreateInput & { calendar_key: TCalendarKey }): Promise<Booking>;\n  reschedule(bookingId: string, patch: BookingRescheduleInput): Promise<Booking>;\n  cancel(bookingId: string, patch?: BookingCancelInput): Promise<Booking>;\n}\n\nexport interface CalendarWriteClientConfig extends CalendarTransportConfig {\n  businessId?: string;\n}\n\nfunction withBusiness(config: CalendarWriteClientConfig, path: string): string {\n  if (!config.businessId) return path;\n  const separator = path.includes(\"?\") ? \"&\" : \"?\";\n  return `${path}${separator}business_id=${encodeURIComponent(config.businessId)}`;\n}\n\nexport function createCalendarWriteClient<TCalendarKey extends string = string>(\n  config: CalendarWriteClientConfig,\n): CalendarWriteClient<TCalendarKey> {\n  return {\n    async create(input) {\n      return calendarRequest<Booking>(config, \"POST\", withBusiness(config, \"/bookings\"), input);\n    },\n    async reschedule(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"PATCH\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch,\n      );\n    },\n    async cancel(bookingId, patch) {\n      return calendarRequest<Booking>(\n        config,\n        \"DELETE\",\n        withBusiness(config, `/bookings/${encodeURIComponent(bookingId)}`),\n        patch ?? {},\n      );\n    },\n  };\n}\n","import { AranovaApiError } from \"../http/errors\";\nimport type { CalendarWriteClientConfig } from \"./write-client\";\nimport { createCalendarWriteClient } from \"./write-client\";\n\n/**\n * A drop-in booking endpoint for a client site's own server.\n *\n * The browser posts here, on the site's own origin; this forwards with the\n * secret key, which never enters a bundle. Deliberately NOT a passthrough proxy\n * — only the three booking verbs exist, and there is no GET, because reads go\n * straight from the browser with the public key and must not burn a serverless\n * invocation.\n */\nexport interface CalendarRoutesConfig extends Omit<CalendarWriteClientConfig, \"apiKey\"> {\n  /**\n   * An `aranv_sk_…` key. Named `secretKey` rather than `apiKey` on purpose:\n   * this handler exists so the key stays server-side, and a field called\n   * `apiKey` invites someone to paste the public one in and never notice.\n   */\n  secretKey: string;\n  /**\n   * Optional per-request gate — return a string to reject with 403. Use it for\n   * a bot check or the site's own rules.\n   */\n  authorize?: (request: Request) => Promise<string | null> | string | null;\n}\n\ntype Handler = (request: Request, context?: unknown) => Promise<Response>;\n\nfunction json(body: unknown, status: number): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction errorResponse(error: unknown): Response {\n  if (error instanceof AranovaApiError) {\n    return json({ detail: error.message, code: error.code }, error.status);\n  }\n  return json({ detail: \"Booking failed\" }, 502);\n}\n\n/** Last path segment, used as the booking id on reschedule/cancel. */\nfunction bookingIdFrom(request: Request): string | null {\n  const segments = new URL(request.url).pathname.split(\"/\").filter(Boolean);\n  // Index arithmetic, not `Array#at`: the packages' TS lib target predates it.\n  const last = segments.length > 0 ? segments[segments.length - 1] : undefined;\n  return last && last !== \"bookings\" ? decodeURIComponent(last) : null;\n}\n\nexport function createCalendarRoutes(config: CalendarRoutesConfig): {\n  POST: Handler;\n  PATCH: Handler;\n  DELETE: Handler;\n} {\n  const { secretKey, authorize, ...transport } = config;\n  const client = createCalendarWriteClient({ ...transport, apiKey: secretKey });\n\n  const guarded =\n    (run: (request: Request) => Promise<Response>): Handler =>\n    async (request: Request) => {\n      if (authorize) {\n        const rejection = await authorize(request);\n        if (rejection) return json({ detail: rejection }, 403);\n      }\n      try {\n        return await run(request);\n      } catch (error) {\n        return errorResponse(error);\n      }\n    };\n\n  return {\n    POST: guarded(async (request) => {\n      const body = (await request.json()) as Parameters<typeof client.create>[0];\n      return json(await client.create(body), 201);\n    }),\n    PATCH: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = (await request.json()) as Parameters<typeof client.reschedule>[1];\n      return json(await client.reschedule(bookingId, body), 200);\n    }),\n    DELETE: guarded(async (request) => {\n      const bookingId = bookingIdFrom(request);\n      if (!bookingId) return json({ detail: \"booking id is required\" }, 400);\n      const body = await request.json().catch(() => ({}) as Parameters<typeof client.cancel>[1]);\n      return json(await client.cancel(bookingId, body), 200);\n    }),\n  };\n}\n"],"mappings":";AAAA,OAAO;;;ACIP,SAAS,WAAW,kCAAoD;;;ACJxE,SAAS,SAAS;AASX,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,OAAO;AAAA,EACjB,CAAC,EACA,OAAO;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI9B,UAAU,EACP,OAAO;AAAA,IACN,GAAG,EAAE,OAAO;AAAA,IACZ,GAAG,EAAE,OAAO;AAAA,EACd,CAAC,EACA,OAAO,EACP,SAAS,EACT,SAAS;AACd,CAAC,EACA,OAAO;AAUH,IAAM,uBAAuB,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO;;;AClBjD,IAAM,kBAAkB,KAAK,KAAK;;;ACkDlC,IAAM,iBAAiB;AAOvB,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;;;AC7E/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAKzC,YAAY,SAAiB,SAAgE;AAC3F,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS,QAAQ;AACtB,SAAK,OAAO,QAAQ;AACpB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACF;;;ACGA,SAAS,gBAAgB,QAAoD;AAC3E,QAAM,UAAkC,EAAE,CAAC,cAAc,GAAG,OAAO,OAAO;AAC1E,MAAI,OAAO,WAAY,SAAQ,kBAAkB,IAAI,OAAO;AAC5D,MAAI,OAAO,YAAa,SAAQ,kBAAkB,IAAI,OAAO;AAC7D,MAAI,OAAO,QAAS,SAAQ,kBAAkB,IAAI,OAAO;AACzD,MAAI,OAAO,YAAa,SAAQ,sBAAsB,IAAI,OAAO;AACjE,SAAO;AACT;AAEA,SAAS,QAAQ,UAAkB,MAAsB;AACvD,SAAO,GAAG,SAAS,QAAQ,OAAO,EAAE,CAAC,GAAG,IAAI;AAC9C;AAMA,eAAsB,WACpB,QACA,QACA,MACA,MACA,cACY;AACZ,QAAM,UAAU,EAAE,GAAG,gBAAgB,MAAM,GAAG,GAAG,aAAa;AAC9D,MAAI,SAAS,OAAW,SAAQ,cAAc,IAAI;AAElD,QAAM,WAAW,MAAM,MAAM,QAAQ,OAAO,UAAU,IAAI,GAAG;AAAA,IAC3D;AAAA,IACA;AAAA,IACA,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAC5D,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,YAAM,SAAkB,MAAM,SAAS,KAAK;AAC5C,UAAI,UAAU,OAAO,WAAW,UAAU;AACxC,cAAM,SAAS;AACf,YAAI,OAAO,OAAO,WAAW,SAAU,UAAS,OAAO;AACvD,YAAI,OAAO,OAAO,SAAS,SAAU,QAAO,OAAO;AAAA,MACrD;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,UAAU,SAAS,cAAc,kBAAkB;AAAA,MAC3E,QAAQ,SAAS;AAAA,MACjB;AAAA,MACA,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK;AAAA,IACrD,CAAC;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,SAAQ,MAAM,SAAS,KAAK;AAC9B;;;ACvEA,eAAsB,gBACpB,QACA,QACA,MACA,MACY;AACZ,SAAO,WAAc,QAAQ,QAAQ,YAAY,IAAI,IAAI,IAAI;AAC/D;;;ACaA,SAAS,aAAa,QAAmC,MAAsB;AAC7E,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,QAAM,YAAY,KAAK,SAAS,GAAG,IAAI,MAAM;AAC7C,SAAO,GAAG,IAAI,GAAG,SAAS,eAAe,mBAAmB,OAAO,UAAU,CAAC;AAChF;AAEO,SAAS,0BACd,QACmC;AACnC,SAAO;AAAA,IACL,MAAM,OAAO,OAAO;AAClB,aAAO,gBAAyB,QAAQ,QAAQ,aAAa,QAAQ,WAAW,GAAG,KAAK;AAAA,IAC1F;AAAA,IACA,MAAM,WAAW,WAAW,OAAO;AACjC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,OAAO;AAC7B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,QAAQ,aAAa,mBAAmB,SAAS,CAAC,EAAE;AAAA,QACjE,SAAS,CAAC;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;;;AC3BA,SAAS,KAAK,MAAe,QAA0B;AACrD,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEA,SAAS,cAAc,OAA0B;AAC/C,MAAI,iBAAiB,iBAAiB;AACpC,WAAO,KAAK,EAAE,QAAQ,MAAM,SAAS,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM;AAAA,EACvE;AACA,SAAO,KAAK,EAAE,QAAQ,iBAAiB,GAAG,GAAG;AAC/C;AAGA,SAAS,cAAc,SAAiC;AACtD,QAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAExE,QAAM,OAAO,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,CAAC,IAAI;AACnE,SAAO,QAAQ,SAAS,aAAa,mBAAmB,IAAI,IAAI;AAClE;AAEO,SAAS,qBAAqB,QAInC;AACA,QAAM,EAAE,WAAW,WAAW,GAAG,UAAU,IAAI;AAC/C,QAAM,SAAS,0BAA0B,EAAE,GAAG,WAAW,QAAQ,UAAU,CAAC;AAE5E,QAAM,UACJ,CAAC,QACD,OAAO,YAAqB;AAC1B,QAAI,WAAW;AACb,YAAM,YAAY,MAAM,UAAU,OAAO;AACzC,UAAI,UAAW,QAAO,KAAK,EAAE,QAAQ,UAAU,GAAG,GAAG;AAAA,IACvD;AACA,QAAI;AACF,aAAO,MAAM,IAAI,OAAO;AAAA,IAC1B,SAAS,OAAO;AACd,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF;AAEF,SAAO;AAAA,IACL,MAAM,QAAQ,OAAO,YAAY;AAC/B,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,GAAG;AAAA,IAC5C,CAAC;AAAA,IACD,OAAO,QAAQ,OAAO,YAAY;AAChC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAQ,MAAM,QAAQ,KAAK;AACjC,aAAO,KAAK,MAAM,OAAO,WAAW,WAAW,IAAI,GAAG,GAAG;AAAA,IAC3D,CAAC;AAAA,IACD,QAAQ,QAAQ,OAAO,YAAY;AACjC,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,UAAW,QAAO,KAAK,EAAE,QAAQ,yBAAyB,GAAG,GAAG;AACrE,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAyC;AACzF,aAAO,KAAK,MAAM,OAAO,OAAO,WAAW,IAAI,GAAG,GAAG;AAAA,IACvD,CAAC;AAAA,EACH;AACF;","names":[]}