@burdenoff/website-sdk 0.0.0-dev

package/dist/components/resource-links.d.mts

@@ -0,0 +1,28 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+type Resource = "docs" | "community" | "careers" | "team" | "companies";
+interface ResourceLinksProps {
+    /**
+     * Per-resource URL overrides. `undefined` falls through to CMS/default
+     * resolution; explicit `null` suppresses the link entirely.
+     */
+    links?: Partial<Record<Resource, string | null>>;
+    /**
+     * Allowlist + ORDER of resources to render. Default: canonical order
+     * (docs, community, careers, team, companies). Pass a subset/reorder to
+     * customise the column on a per-site basis.
+     */
+    resources?: readonly Resource[];
+    /** Per-link label overrides. Falls back to canonical English labels. */
+    labels?: Partial<Record<Resource, string>>;
+    /** Outer container className. Default: `"space-y-2"` (vertical list). */
+    className?: string;
+    /**
+     * Per-link className. Default matches the muted-foreground / hover-foreground
+     * style used by the other Footer columns.
+     */
+    itemClassName?: string;
+}
+declare function ResourceLinks({ links: linksProp, resources, labels, className, itemClassName, }: ResourceLinksProps): react_jsx_runtime.JSX.Element | null;
+
+export { type Resource, ResourceLinks, type ResourceLinksProps };

package/dist/components/resource-links.d.ts

@@ -0,0 +1,28 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+type Resource = "docs" | "community" | "careers" | "team" | "companies";
+interface ResourceLinksProps {
+    /**
+     * Per-resource URL overrides. `undefined` falls through to CMS/default
+     * resolution; explicit `null` suppresses the link entirely.
+     */
+    links?: Partial<Record<Resource, string | null>>;
+    /**
+     * Allowlist + ORDER of resources to render. Default: canonical order
+     * (docs, community, careers, team, companies). Pass a subset/reorder to
+     * customise the column on a per-site basis.
+     */
+    resources?: readonly Resource[];
+    /** Per-link label overrides. Falls back to canonical English labels. */
+    labels?: Partial<Record<Resource, string>>;
+    /** Outer container className. Default: `"space-y-2"` (vertical list). */
+    className?: string;
+    /**
+     * Per-link className. Default matches the muted-foreground / hover-foreground
+     * style used by the other Footer columns.
+     */
+    itemClassName?: string;
+}
+declare function ResourceLinks({ links: linksProp, resources, labels, className, itemClassName, }: ResourceLinksProps): react_jsx_runtime.JSX.Element | null;
+
+export { type Resource, ResourceLinks, type ResourceLinksProps };

package/dist/components/resource-links.js

@@ -0,0 +1,229 @@
+'use strict';
+
+var react = require('react');
+var jsxRuntime = require('react/jsx-runtime');
+
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/client/security.ts
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+var RESERVED_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "cookie",
+  "x-actor-id",
+  "x-actor-type",
+  "x-consent-granted-by",
+  "x-consent-scope",
+  "x-consent-granted-at",
+  "x-consent-expires-at"
+]);
+function validateGatewayUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Gateway URL must be a valid absolute URL");
+  }
+  if (url.protocol === "https:") {
+    return url.toString();
+  }
+  if (url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname.toLowerCase())) {
+    return url.toString();
+  }
+  throw new Error("Gateway URL must use HTTPS unless it targets localhost");
+}
+function sanitizeHeaders(headers) {
+  if (!headers) return void 0;
+  return Object.fromEntries(
+    Object.entries(headers).filter(
+      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase())
+    )
+  );
+}
+
+// src/client/graphql-client.ts
+var _WebSDKClient = class _WebSDKClient {
+  constructor(config) {
+    __publicField(this, "config");
+    __publicField(this, "queryCache", /* @__PURE__ */ new Map());
+    __publicField(this, "inflight", /* @__PURE__ */ new Map());
+    this.config = {
+      ...config,
+      gatewayUrl: validateGatewayUrl(config.gatewayUrl),
+      headers: sanitizeHeaders(config.headers)
+    };
+  }
+  getConfig() {
+    return this.config;
+  }
+  /**
+   * Execute a GraphQL query (with deduplication and caching)
+   */
+  async query(query, variables) {
+    const cacheKey = JSON.stringify({ query, variables });
+    const cached = this.queryCache.get(cacheKey);
+    if (cached) {
+      if (Date.now() - cached.ts < _WebSDKClient.CACHE_TTL) {
+        return cached.data;
+      }
+      this.queryCache.delete(cacheKey);
+    }
+    const existing = this.inflight.get(cacheKey);
+    if (existing) {
+      return existing;
+    }
+    const promise = this.request(query, variables).then((result) => {
+      if (result.data && !result.errors?.length) {
+        if (this.queryCache.size >= _WebSDKClient.MAX_CACHE_ENTRIES) {
+          const oldestEntry = this.queryCache.keys().next().value;
+          if (oldestEntry) {
+            this.queryCache.delete(oldestEntry);
+          }
+        }
+        this.queryCache.set(cacheKey, { data: result, ts: Date.now() });
+      }
+      return result;
+    }).finally(() => {
+      this.inflight.delete(cacheKey);
+    });
+    this.inflight.set(cacheKey, promise);
+    return promise;
+  }
+  /**
+   * Execute a GraphQL mutation
+   */
+  async mutate(mutation, variables) {
+    return this.request(mutation, variables);
+  }
+  async request(query, variables) {
+    try {
+      const response = await fetch(this.config.gatewayUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-product-id": this.config.productId,
+          ...this.config.headers
+        },
+        body: JSON.stringify({ query, variables })
+      });
+      if (!response.ok) {
+        console.error(
+          "[WebSDK] GraphQL request failed",
+          response.status,
+          response.statusText
+        );
+        return {
+          errors: [
+            {
+              message: `HTTP ${response.status}: ${response.statusText}`,
+              extensions: { code: `HTTP_${response.status}` }
+            }
+          ]
+        };
+      }
+      return await response.json();
+    } catch (error) {
+      console.error(
+        "[WebSDK] Network error",
+        error instanceof Error ? error.message : "unknown error"
+      );
+      return {
+        errors: [
+          {
+            message: error instanceof Error ? error.message : "Network error",
+            extensions: { code: "NETWORK_ERROR" }
+          }
+        ]
+      };
+    }
+  }
+};
+__publicField(_WebSDKClient, "CACHE_TTL", 5 * 60 * 1e3);
+// 5 minutes
+__publicField(_WebSDKClient, "MAX_CACHE_ENTRIES", 100);
+react.createContext(null);
+var ProductContext = react.createContext({
+  product: null,
+  loading: true,
+  error: null,
+  hasProvider: false,
+  refetch: () => {
+  }
+});
+function useProduct() {
+  return react.useContext(ProductContext);
+}
+var DEFAULT_LABELS = {
+  docs: "Docs",
+  community: "Community",
+  careers: "Careers",
+  team: "Team",
+  companies: "Sister Companies"
+};
+var BURDENOFF_GROUP_DEFAULTS = {
+  docs: null,
+  // per-product → read from `Product.docsUrl`
+  community: null,
+  // per-product → caller supplies via prop until CMS field exists
+  careers: "https://burdenoff.com/careers",
+  team: "https://burdenoff.com/team",
+  companies: "https://burdenoff.com/companies"
+};
+var DEFAULT_ORDER = [
+  "docs",
+  "community",
+  "careers",
+  "team",
+  "companies"
+];
+var DEFAULT_ITEM_CLASS = "text-sm text-muted-foreground hover:text-foreground transition-colors";
+function isSafeUrl(value) {
+  const trimmed = value.trim();
+  if (/^[/?#]/.test(trimmed)) return true;
+  return /^(https?:|mailto:|tel:)/i.test(trimmed);
+}
+function ResourceLinks({
+  links: linksProp,
+  resources = DEFAULT_ORDER,
+  labels = {},
+  className = "space-y-2",
+  itemClassName = DEFAULT_ITEM_CLASS
+}) {
+  const { product } = useProduct();
+  function resolve(resource) {
+    if (linksProp && resource in linksProp) {
+      const override = linksProp[resource];
+      if (override === void 0) ; else {
+        return override;
+      }
+    }
+    const fromCms = product?.resourceLinks?.[resource];
+    if (typeof fromCms === "string" && fromCms.length > 0) {
+      return fromCms;
+    }
+    if (resource === "docs" && product?.docsUrl) {
+      return product.docsUrl;
+    }
+    return BURDENOFF_GROUP_DEFAULTS[resource];
+  }
+  const items = resources.map((r) => ({ resource: r, url: resolve(r) })).filter(
+    (x) => !!x.url && isSafeUrl(x.url)
+  );
+  if (items.length === 0) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx("ul", { className, children: items.map(({ resource, url }) => /* @__PURE__ */ jsxRuntime.jsx("li", { children: /* @__PURE__ */ jsxRuntime.jsx(
+    "a",
+    {
+      href: url,
+      target: "_blank",
+      rel: "noopener noreferrer",
+      className: itemClassName,
+      children: labels[resource] ?? DEFAULT_LABELS[resource]
+    }
+  ) }, resource)) });
+}
+
+exports.ResourceLinks = ResourceLinks;
+//# sourceMappingURL=resource-links.js.map
+//# sourceMappingURL=resource-links.js.map

package/dist/components/resource-links.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/product/product-provider.tsx","../../src/components/resource-links.tsx"],"names":["createContext","useContext","jsx"],"mappings":";;;;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACZO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAUxB,YAAY,MAAA,EAA4B;AATxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAKpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAS,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW;AAAA,OAC1C,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,cACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,SACF;AAAA,MACF;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,wBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN;AAAA,YACE,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA;AAAA,YAClD,UAAA,EAAY,EAAE,IAAA,EAAM,eAAA;AAAgB;AACtC;AACF,OACF;AAAA,IACF;AAAA,EACF;AACF,CAAA;AAtHE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AC7BfA,oBAAmC,IAAI;ACqI7D,IAAM,iBAAiBA,mBAAAA,CAAmC;AAAA,EACxD,OAAA,EAAS,IAAA;AAAA,EACT,OAAA,EAAS,IAAA;AAAA,EACT,KAAA,EAAO,IAAA;AAAA,EACP,WAAA,EAAa,KAAA;AAAA,EACb,SAAS,MAAM;AAAA,EAAC;AAClB,CAAC,CAAA;AA4GM,SAAS,UAAA,GAAkC;AAChD,EAAA,OAAOC,iBAAW,cAAc,CAAA;AAClC;AC7LA,IAAM,cAAA,GAA2C;AAAA,EAC/C,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW,WAAA;AAAA,EACX,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW;AACb,CAAA;AAMA,IAAM,wBAAA,GAA4D;AAAA,EAChE,IAAA,EAAM,IAAA;AAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA;AAAA,EACX,OAAA,EAAS,+BAAA;AAAA,EACT,IAAA,EAAM,4BAAA;AAAA,EACN,SAAA,EAAW;AACb,CAAA;AAEA,IAAM,aAAA,GAAqC;AAAA,EACzC,MAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAM,kBAAA,GACJ,uEAAA;AASF,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,OAAO,0BAAA,CAA2B,KAAK,OAAO,CAAA;AAChD;AAMO,SAAS,aAAA,CAAc;AAAA,EAC5B,KAAA,EAAO,SAAA;AAAA,EACP,SAAA,GAAY,aAAA;AAAA,EACZ,SAAS,EAAC;AAAA,EACV,SAAA,GAAY,WAAA;AAAA,EACZ,aAAA,GAAgB;AAClB,CAAA,EAAuB;AACrB,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,UAAA,EAAW;AAsB/B,EAAA,SAAS,QAAQ,QAAA,EAAmC;AAClD,IAAA,IAAI,SAAA,IAAa,YAAY,SAAA,EAAW;AACtC,MAAA,MAAM,QAAA,GAAW,UAAU,QAAQ,CAAA;AAEnC,MAAA,IAAI,aAAa,MAAA,EAAW,CAE5B,MAAO;AACL,QAAA,OAAO,QAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,OAAA,EAAS,aAAA,GAAgB,QAAQ,CAAA;AACjD,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,OAAO,OAAA;AAAA,IACT;AACA,IAAA,IAAI,QAAA,KAAa,MAAA,IAAU,OAAA,EAAS,OAAA,EAAS;AAC3C,MAAA,OAAO,OAAA,CAAQ,OAAA;AAAA,IACjB;AACA,IAAA,OAAO,yBAAyB,QAAQ,CAAA;AAAA,EAC1C;AAEA,EAAA,MAAM,KAAA,GAAQ,SAAA,CACX,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,QAAA,EAAU,CAAA,EAAG,GAAA,EAAK,OAAA,CAAQ,CAAC,CAAA,GAAI,CAAA,CAC7C,MAAA;AAAA,IACC,CAAC,MACC,CAAC,CAAC,EAAE,GAAA,IAAO,SAAA,CAAU,EAAE,GAAG;AAAA,GAC9B;AAEF,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAE/B,EAAA,uBACEC,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EACD,gBAAM,GAAA,CAAI,CAAC,EAAE,QAAA,EAAU,GAAA,EAAI,qBAC1BA,cAAAA,CAAC,QACC,QAAA,kBAAAA,cAAAA;AAAA,IAAC,GAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAO,QAAA;AAAA,MACP,GAAA,EAAI,qBAAA;AAAA,MACJ,SAAA,EAAW,aAAA;AAAA,MAEV,QAAA,EAAA,MAAA,CAAO,QAAQ,CAAA,IAAK,cAAA,CAAe,QAAQ;AAAA;AAAA,GAC9C,EAAA,EARO,QAST,CACD,CAAA,EACH,CAAA;AAEJ","file":"resource-links.js","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    return this.request<T>(mutation, variables);\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          errors: [\n            {\n              message: `HTTP ${response.status}: ${response.statusText}`,\n              extensions: { code: `HTTP_${response.status}` },\n            },\n          ],\n        };\n      }\n\n      return (await response.json()) as GraphQLResponse<T>;\n    } catch (error) {\n      console.error(\n        \"[WebSDK] Network error\",\n        error instanceof Error ? error.message : \"unknown error\",\n      );\n      return {\n        errors: [\n          {\n            message: error instanceof Error ? error.message : \"Network error\",\n            extensions: { code: \"NETWORK_ERROR\" },\n          },\n        ],\n      };\n    }\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * Product Provider\n *\n * React context and hooks for accessing product metadata from the global tenant service.\n * Fetches product info (name, logo, SEO, contact, reCAPTCHA key, etc.) on mount\n * and provides it to all child components.\n */\n\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useState,\n  useLayoutEffect,\n  useCallback,\n  useMemo,\n} from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface ProductData {\n  id: string;\n  name: string;\n  slug: string;\n  description?: string | null;\n  status: string;\n  logoUrl?: string | null;\n  website?: string | null;\n  appUrl?: string | null;\n  docsUrl?: string | null;\n  contactEmail?: string | null;\n  supportEmail?: string | null;\n  contactPhone?: string | null;\n  contactAddress?: string | null;\n  seoTitle?: string | null;\n  seoDescription?: string | null;\n  seoKeywords?: string | null;\n  ogImage?: string | null;\n  socialLinks?: Record<string, string> | null;\n  /**\n   * Resource links for the website footer \"Resources\" column\n   * (JSON: { docs, community, careers, team, companies, ... }).\n   * Same shape as socialLinks. Free-form keys; the ResourceLinks\n   * component renders known keys and silently ignores the rest.\n   * Backed by Product.resourceLinks on the backend (global-tenant-svc).\n   */\n  resourceLinks?: Record<string, string> | null;\n  recaptchaSiteKey?: string | null;\n  rybbitSiteId?: string | null;\n  notificationEmail?: string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface ProductProviderProps {\n  /** Child components */\n  children: ReactNode;\n  /** Optional fallback product data (used while loading) */\n  fallback?: Partial<ProductData>;\n}\n\n// ============================================================================\n// GraphQL Query\n// ============================================================================\n\n/**\n * Body of fields requested for every product fetch — shared by the primary\n * query and the legacy-backend fallback below. Kept as a string fragment\n * (not a real GraphQL `fragment` block) so we can append/strip\n * `resourceLinks` without touching anything else.\n */\nconst PRODUCT_FIELDS_BASE = `\n      id\n      name\n      slug\n      description\n      status\n      logoUrl\n      website\n      appUrl\n      docsUrl\n      contactEmail\n      supportEmail\n      contactPhone\n      contactAddress\n      seoTitle\n      seoDescription\n      seoKeywords\n      ogImage\n      socialLinks\n      recaptchaSiteKey\n      rybbitSiteId\n      notificationEmail\n      metadata\n`;\n\n/**\n * Primary query — includes the recently-added `resourceLinks` field.\n * Backends that have run the corresponding `global-tenant-svc` migration\n * (PR #64) expose this field; older ones don't, in which case\n * GraphQL validation rejects the whole query with\n * `Cannot query field \"resourceLinks\" on type \"PublicProduct\"`. The fetch\n * helper detects that specific error and transparently retries the\n * fallback below, so the SDK works on both pre- and post-migration\n * deployments without consumer-side gating.\n */\nconst PUBLIC_PRODUCT_QUERY = `\n  query PublicProduct($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n      resourceLinks\n    }\n  }\n`;\n\n/**\n * Fallback query for older backend deployments. Identical to the primary\n * minus `resourceLinks`. Consumers see `product.resourceLinks === undefined`\n * and any consumer (e.g. `<ResourceLinks/>`) falls through to prop / default\n * resolution paths.\n */\nconst PUBLIC_PRODUCT_QUERY_FALLBACK = `\n  query PublicProductFallback($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n    }\n  }\n`;\n\n// ============================================================================\n// Context\n// ============================================================================\n\ninterface ProductContextValue {\n  product: ProductData | null;\n  loading: boolean;\n  error: string | null;\n  hasProvider: boolean;\n  refetch: () => void;\n}\n\nconst ProductContext = createContext<ProductContextValue>({\n  product: null,\n  loading: true,\n  error: null,\n  hasProvider: false,\n  refetch: () => {},\n});\n\n// ============================================================================\n// Provider\n// ============================================================================\n\n/**\n * ProductProvider fetches and provides product metadata to child components.\n * Uses the product slug from WebSDKConfig to fetch from the public API.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={sdkConfig}>\n *   <ProductProvider>\n *     <App />\n *   </ProductProvider>\n * </WebSDKProvider>\n * ```\n */\nexport function ProductProvider({ children, fallback }: ProductProviderProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const [product, setProduct] = useState<ProductData | null>(\n    fallback ? (fallback as ProductData) : null,\n  );\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const fetchProduct = useCallback(async () => {\n    if (!config.productSlug) {\n      setLoading(false);\n      return;\n    }\n\n    setLoading(true);\n    setError(null);\n\n    try {\n      let result = await client.query<{ publicProduct: ProductData | null }>(\n        PUBLIC_PRODUCT_QUERY,\n        { slug: config.productSlug },\n      );\n\n      // Backwards-compat fallback: if the backend's `publicProduct` schema\n      // doesn't yet expose `resourceLinks` (deployed before\n      // `global-tenant-svc` PR #64), the primary query fails validation\n      // with a \"Cannot query field …\" error and `result.data` is null.\n      // Retry the fallback query that omits `resourceLinks`; consumers\n      // gracefully see `product.resourceLinks === undefined` and fall\n      // through their own resolution paths.\n      const schemaMissingResourceLinks = result.errors?.some((e) =>\n        /Cannot query field [\"']?resourceLinks[\"']?/i.test(e?.message ?? \"\"),\n      );\n      if (schemaMissingResourceLinks) {\n        result = await client.query<{ publicProduct: ProductData | null }>(\n          PUBLIC_PRODUCT_QUERY_FALLBACK,\n          { slug: config.productSlug },\n        );\n      }\n\n      if (result.errors?.length) {\n        setError(result.errors[0]?.message ?? \"Unknown error\");\n      } else if (result.data?.publicProduct) {\n        setProduct(result.data.publicProduct);\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to fetch product\");\n    } finally {\n      setLoading(false);\n    }\n  }, [client, config.productSlug]);\n\n  // Use useLayoutEffect for earliest possible fetch after commit (before paint).\n  // Runs when slug or client changes. Client-side query cache + dedup ensures\n  // no duplicate network requests even if React StrictMode fires this twice.\n  useLayoutEffect(() => {\n    fetchProduct();\n  }, [fetchProduct]);\n\n  const value = useMemo(\n    () => ({\n      product,\n      loading,\n      error,\n      hasProvider: true,\n      refetch: fetchProduct,\n    }),\n    [product, loading, error, fetchProduct],\n  );\n\n  return (\n    <ProductContext.Provider value={value}>{children}</ProductContext.Provider>\n  );\n}\n\n// ============================================================================\n// Hooks\n// ============================================================================\n\n/**\n * Hook to access the current product data.\n *\n * @example\n * ```tsx\n * const { product, loading } = useProduct();\n * if (loading) return <Loading />;\n * return <h1>{product?.name}</h1>;\n * ```\n */\nexport function useProduct(): ProductContextValue {\n  return useContext(ProductContext);\n}\n\n/**\n * Hook to get product-specific configuration.\n * Merges SDK config with fetched product data.\n * Useful for getting reCAPTCHA keys, analytics IDs, etc.\n *\n * @example\n * ```tsx\n * const { recaptchaSiteKey, rybbitSiteId } = useProductConfig();\n * ```\n */\nexport function useProductConfig(): {\n  recaptchaSiteKey: string | null;\n  rybbitSiteId: string | null;\n  contactEmail: string | null;\n  supportEmail: string | null;\n  notificationEmail: string | null;\n  productName: string | null;\n  logoUrl: string | null;\n} {\n  const { product } = useProduct();\n  const config = useWebSDKConfig();\n\n  return {\n    // Prefer product-level config, fall back to SDK config\n    recaptchaSiteKey:\n      product?.recaptchaSiteKey ?? config.recaptchaSiteKey ?? null,\n    rybbitSiteId: product?.rybbitSiteId ?? config.rybbitSiteId ?? null,\n    contactEmail: product?.contactEmail ?? null,\n    supportEmail: product?.supportEmail ?? null,\n    notificationEmail:\n      product?.notificationEmail ?? product?.contactEmail ?? null,\n    productName: product?.name ?? null,\n    logoUrl: product?.logoUrl ?? null,\n  };\n}\n","\"use client\";\n\n/**\n * ResourceLinks Component\n *\n * Renders the Footer \"Resources\" column. Hybrid data sourcing — uses the\n * product CMS where a field already exists, prop overrides where CMS doesn't\n * (yet) have a column, and Burdenoff-group-wide defaults for resources that\n * are constant across every product website.\n *\n * | Resource     | Default source                                  | Notes |\n * | ------------ | ----------------------------------------------- | ----- |\n * | `docs`       | `useProduct().product.docsUrl` (existing field) | Per-product; admin can change in `microfe-product → Products → <product>` |\n * | `community`  | (none — pass via `links` prop)                  | Per-product; needs `Product.communityUrl` in backend to become CMS-managed |\n * | `careers`    | `https://burdenoff.com/careers` (group default) | Burdenoff-wide constant; overridable |\n * | `team`       | `https://burdenoff.com/team` (group default)    | Burdenoff-wide constant; overridable |\n * | `companies`  | `https://burdenoff.com/companies` (group default)| Burdenoff-wide constant; overridable |\n *\n * Future-compat: if the CMS grows a `Product.resourceLinks` JSON field\n * mirroring `socialLinks`, the resolver below switches to read it as the\n * first preference — no consumer-side change.\n *\n * @example\n * ```tsx\n * import { ResourceLinks } from '@burdenoff/website-sdk'\n *\n * // Minimal — pass the one resource without a CMS source today\n * <ResourceLinks links={{ community: 'https://support.vibecontrols.com' }} />\n *\n * // Suppress an item (e.g. hide Sister Companies for a standalone product)\n * <ResourceLinks links={{ companies: null }} />\n *\n * // Restrict + reorder\n * <ResourceLinks resources={['docs', 'community']} />\n * ```\n */\n\nimport { useProduct } from \"../product/product-provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type Resource = \"docs\" | \"community\" | \"careers\" | \"team\" | \"companies\";\n\nexport interface ResourceLinksProps {\n  /**\n   * Per-resource URL overrides. `undefined` falls through to CMS/default\n   * resolution; explicit `null` suppresses the link entirely.\n   */\n  links?: Partial<Record<Resource, string | null>>;\n  /**\n   * Allowlist + ORDER of resources to render. Default: canonical order\n   * (docs, community, careers, team, companies). Pass a subset/reorder to\n   * customise the column on a per-site basis.\n   */\n  resources?: readonly Resource[];\n  /** Per-link label overrides. Falls back to canonical English labels. */\n  labels?: Partial<Record<Resource, string>>;\n  /** Outer container className. Default: `\"space-y-2\"` (vertical list). */\n  className?: string;\n  /**\n   * Per-link className. Default matches the muted-foreground / hover-foreground\n   * style used by the other Footer columns.\n   */\n  itemClassName?: string;\n}\n\n// ============================================================================\n// Defaults\n// ============================================================================\n\nconst DEFAULT_LABELS: Record<Resource, string> = {\n  docs: \"Docs\",\n  community: \"Community\",\n  careers: \"Careers\",\n  team: \"Team\",\n  companies: \"Sister Companies\",\n};\n\n/**\n * Burdenoff-group-wide URLs — same across every product website by default.\n * `null` means \"no group default; must be supplied per-site or via CMS\".\n */\nconst BURDENOFF_GROUP_DEFAULTS: Record<Resource, string | null> = {\n  docs: null, // per-product → read from `Product.docsUrl`\n  community: null, // per-product → caller supplies via prop until CMS field exists\n  careers: \"https://burdenoff.com/careers\",\n  team: \"https://burdenoff.com/team\",\n  companies: \"https://burdenoff.com/companies\",\n};\n\nconst DEFAULT_ORDER: readonly Resource[] = [\n  \"docs\",\n  \"community\",\n  \"careers\",\n  \"team\",\n  \"companies\",\n];\n\nconst DEFAULT_ITEM_CLASS =\n  \"text-sm text-muted-foreground hover:text-foreground transition-colors\";\n\n/**\n * Defense-in-depth XSS guard for any URL flowing into a rendered `href`.\n * Only http(s), mailto, tel, and relative URLs pass through. `javascript:`,\n * `data:`, `vbscript:`, etc. are rejected. The CMS is admin-only, but\n * treating the URL as untrusted is cheap and consistent with the wider\n * Burdenoff posture.\n */\nfunction isSafeUrl(value: string): boolean {\n  const trimmed = value.trim();\n  if (/^[/?#]/.test(trimmed)) return true;\n  return /^(https?:|mailto:|tel:)/i.test(trimmed);\n}\n\n// ============================================================================\n// Component\n// ============================================================================\n\nexport function ResourceLinks({\n  links: linksProp,\n  resources = DEFAULT_ORDER,\n  labels = {},\n  className = \"space-y-2\",\n  itemClassName = DEFAULT_ITEM_CLASS,\n}: ResourceLinksProps) {\n  const { product } = useProduct();\n\n  /**\n   * Resolve a resource's URL. Precedence:\n   *   1. Explicit prop — caller wins.\n   *      • `string` → use it\n   *      • `null`   → suppress (force-omit even if CMS / defaults exist)\n   *      • `undefined` value (the key exists in `links` but is undefined)\n   *                → treat as \"fall through to CMS / defaults\" (same as\n   *                if the key wasn't in `links` at all)\n   *   2. `product.resourceLinks[resource]` — CMS-managed JSON record on\n   *      `Product`; the canonical source once an admin has set values\n   *      via microfe-product → Products → <product> → Resource Links.\n   *   3. CMS field for resources that have a dedicated column\n   *      (`docs` → `product.docsUrl`) — kept as a fallback for legacy\n   *      products that only have the older single-field set.\n   *   4. Burdenoff group-wide default.\n   *   5. `null` → omit the link.\n   *\n   * URLs returned by any path go through `isSafeUrl()` downstream; bad\n   * schemes are dropped during the render pass.\n   */\n  function resolve(resource: Resource): string | null {\n    if (linksProp && resource in linksProp) {\n      const override = linksProp[resource];\n      // `undefined` → fall through; `null` (explicit) → suppress\n      if (override === undefined) {\n        // continue to CMS / defaults below\n      } else {\n        return override;\n      }\n    }\n    const fromCms = product?.resourceLinks?.[resource];\n    if (typeof fromCms === \"string\" && fromCms.length > 0) {\n      return fromCms;\n    }\n    if (resource === \"docs\" && product?.docsUrl) {\n      return product.docsUrl;\n    }\n    return BURDENOFF_GROUP_DEFAULTS[resource];\n  }\n\n  const items = resources\n    .map((r) => ({ resource: r, url: resolve(r) }))\n    .filter(\n      (x): x is { resource: Resource; url: string } =>\n        !!x.url && isSafeUrl(x.url),\n    );\n\n  if (items.length === 0) return null;\n\n  return (\n    <ul className={className}>\n      {items.map(({ resource, url }) => (\n        <li key={resource}>\n          <a\n            href={url}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            className={itemClassName}\n          >\n            {labels[resource] ?? DEFAULT_LABELS[resource]}\n          </a>\n        </li>\n      ))}\n    </ul>\n  );\n}\n"]}

package/dist/components/resource-links.mjs

@@ -0,0 +1,227 @@
+import { createContext, useContext } from 'react';
+import { jsx } from 'react/jsx-runtime';
+
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/client/security.ts
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+var RESERVED_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "cookie",
+  "x-actor-id",
+  "x-actor-type",
+  "x-consent-granted-by",
+  "x-consent-scope",
+  "x-consent-granted-at",
+  "x-consent-expires-at"
+]);
+function validateGatewayUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Gateway URL must be a valid absolute URL");
+  }
+  if (url.protocol === "https:") {
+    return url.toString();
+  }
+  if (url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname.toLowerCase())) {
+    return url.toString();
+  }
+  throw new Error("Gateway URL must use HTTPS unless it targets localhost");
+}
+function sanitizeHeaders(headers) {
+  if (!headers) return void 0;
+  return Object.fromEntries(
+    Object.entries(headers).filter(
+      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase())
+    )
+  );
+}
+
+// src/client/graphql-client.ts
+var _WebSDKClient = class _WebSDKClient {
+  constructor(config) {
+    __publicField(this, "config");
+    __publicField(this, "queryCache", /* @__PURE__ */ new Map());
+    __publicField(this, "inflight", /* @__PURE__ */ new Map());
+    this.config = {
+      ...config,
+      gatewayUrl: validateGatewayUrl(config.gatewayUrl),
+      headers: sanitizeHeaders(config.headers)
+    };
+  }
+  getConfig() {
+    return this.config;
+  }
+  /**
+   * Execute a GraphQL query (with deduplication and caching)
+   */
+  async query(query, variables) {
+    const cacheKey = JSON.stringify({ query, variables });
+    const cached = this.queryCache.get(cacheKey);
+    if (cached) {
+      if (Date.now() - cached.ts < _WebSDKClient.CACHE_TTL) {
+        return cached.data;
+      }
+      this.queryCache.delete(cacheKey);
+    }
+    const existing = this.inflight.get(cacheKey);
+    if (existing) {
+      return existing;
+    }
+    const promise = this.request(query, variables).then((result) => {
+      if (result.data && !result.errors?.length) {
+        if (this.queryCache.size >= _WebSDKClient.MAX_CACHE_ENTRIES) {
+          const oldestEntry = this.queryCache.keys().next().value;
+          if (oldestEntry) {
+            this.queryCache.delete(oldestEntry);
+          }
+        }
+        this.queryCache.set(cacheKey, { data: result, ts: Date.now() });
+      }
+      return result;
+    }).finally(() => {
+      this.inflight.delete(cacheKey);
+    });
+    this.inflight.set(cacheKey, promise);
+    return promise;
+  }
+  /**
+   * Execute a GraphQL mutation
+   */
+  async mutate(mutation, variables) {
+    return this.request(mutation, variables);
+  }
+  async request(query, variables) {
+    try {
+      const response = await fetch(this.config.gatewayUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-product-id": this.config.productId,
+          ...this.config.headers
+        },
+        body: JSON.stringify({ query, variables })
+      });
+      if (!response.ok) {
+        console.error(
+          "[WebSDK] GraphQL request failed",
+          response.status,
+          response.statusText
+        );
+        return {
+          errors: [
+            {
+              message: `HTTP ${response.status}: ${response.statusText}`,
+              extensions: { code: `HTTP_${response.status}` }
+            }
+          ]
+        };
+      }
+      return await response.json();
+    } catch (error) {
+      console.error(
+        "[WebSDK] Network error",
+        error instanceof Error ? error.message : "unknown error"
+      );
+      return {
+        errors: [
+          {
+            message: error instanceof Error ? error.message : "Network error",
+            extensions: { code: "NETWORK_ERROR" }
+          }
+        ]
+      };
+    }
+  }
+};
+__publicField(_WebSDKClient, "CACHE_TTL", 5 * 60 * 1e3);
+// 5 minutes
+__publicField(_WebSDKClient, "MAX_CACHE_ENTRIES", 100);
+createContext(null);
+var ProductContext = createContext({
+  product: null,
+  loading: true,
+  error: null,
+  hasProvider: false,
+  refetch: () => {
+  }
+});
+function useProduct() {
+  return useContext(ProductContext);
+}
+var DEFAULT_LABELS = {
+  docs: "Docs",
+  community: "Community",
+  careers: "Careers",
+  team: "Team",
+  companies: "Sister Companies"
+};
+var BURDENOFF_GROUP_DEFAULTS = {
+  docs: null,
+  // per-product → read from `Product.docsUrl`
+  community: null,
+  // per-product → caller supplies via prop until CMS field exists
+  careers: "https://burdenoff.com/careers",
+  team: "https://burdenoff.com/team",
+  companies: "https://burdenoff.com/companies"
+};
+var DEFAULT_ORDER = [
+  "docs",
+  "community",
+  "careers",
+  "team",
+  "companies"
+];
+var DEFAULT_ITEM_CLASS = "text-sm text-muted-foreground hover:text-foreground transition-colors";
+function isSafeUrl(value) {
+  const trimmed = value.trim();
+  if (/^[/?#]/.test(trimmed)) return true;
+  return /^(https?:|mailto:|tel:)/i.test(trimmed);
+}
+function ResourceLinks({
+  links: linksProp,
+  resources = DEFAULT_ORDER,
+  labels = {},
+  className = "space-y-2",
+  itemClassName = DEFAULT_ITEM_CLASS
+}) {
+  const { product } = useProduct();
+  function resolve(resource) {
+    if (linksProp && resource in linksProp) {
+      const override = linksProp[resource];
+      if (override === void 0) ; else {
+        return override;
+      }
+    }
+    const fromCms = product?.resourceLinks?.[resource];
+    if (typeof fromCms === "string" && fromCms.length > 0) {
+      return fromCms;
+    }
+    if (resource === "docs" && product?.docsUrl) {
+      return product.docsUrl;
+    }
+    return BURDENOFF_GROUP_DEFAULTS[resource];
+  }
+  const items = resources.map((r) => ({ resource: r, url: resolve(r) })).filter(
+    (x) => !!x.url && isSafeUrl(x.url)
+  );
+  if (items.length === 0) return null;
+  return /* @__PURE__ */ jsx("ul", { className, children: items.map(({ resource, url }) => /* @__PURE__ */ jsx("li", { children: /* @__PURE__ */ jsx(
+    "a",
+    {
+      href: url,
+      target: "_blank",
+      rel: "noopener noreferrer",
+      className: itemClassName,
+      children: labels[resource] ?? DEFAULT_LABELS[resource]
+    }
+  ) }, resource)) });
+}
+
+export { ResourceLinks };
+//# sourceMappingURL=resource-links.mjs.map
+//# sourceMappingURL=resource-links.mjs.map

package/dist/components/resource-links.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/product/product-provider.tsx","../../src/components/resource-links.tsx"],"names":["createContext","useContext","jsx"],"mappings":";;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACZO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAUxB,YAAY,MAAA,EAA4B;AATxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAKpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAS,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW;AAAA,OAC1C,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,cACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,SACF;AAAA,MACF;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,wBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN;AAAA,YACE,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA;AAAA,YAClD,UAAA,EAAY,EAAE,IAAA,EAAM,eAAA;AAAgB;AACtC;AACF,OACF;AAAA,IACF;AAAA,EACF;AACF,CAAA;AAtHE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AC7Bf,cAAmC,IAAI;ACqI7D,IAAM,iBAAiBA,aAAAA,CAAmC;AAAA,EACxD,OAAA,EAAS,IAAA;AAAA,EACT,OAAA,EAAS,IAAA;AAAA,EACT,KAAA,EAAO,IAAA;AAAA,EACP,WAAA,EAAa,KAAA;AAAA,EACb,SAAS,MAAM;AAAA,EAAC;AAClB,CAAC,CAAA;AA4GM,SAAS,UAAA,GAAkC;AAChD,EAAA,OAAOC,WAAW,cAAc,CAAA;AAClC;AC7LA,IAAM,cAAA,GAA2C;AAAA,EAC/C,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW,WAAA;AAAA,EACX,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW;AACb,CAAA;AAMA,IAAM,wBAAA,GAA4D;AAAA,EAChE,IAAA,EAAM,IAAA;AAAA;AAAA,EACN,SAAA,EAAW,IAAA;AAAA;AAAA,EACX,OAAA,EAAS,+BAAA;AAAA,EACT,IAAA,EAAM,4BAAA;AAAA,EACN,SAAA,EAAW;AACb,CAAA;AAEA,IAAM,aAAA,GAAqC;AAAA,EACzC,MAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAM,kBAAA,GACJ,uEAAA;AASF,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,OAAO,0BAAA,CAA2B,KAAK,OAAO,CAAA;AAChD;AAMO,SAAS,aAAA,CAAc;AAAA,EAC5B,KAAA,EAAO,SAAA;AAAA,EACP,SAAA,GAAY,aAAA;AAAA,EACZ,SAAS,EAAC;AAAA,EACV,SAAA,GAAY,WAAA;AAAA,EACZ,aAAA,GAAgB;AAClB,CAAA,EAAuB;AACrB,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,UAAA,EAAW;AAsB/B,EAAA,SAAS,QAAQ,QAAA,EAAmC;AAClD,IAAA,IAAI,SAAA,IAAa,YAAY,SAAA,EAAW;AACtC,MAAA,MAAM,QAAA,GAAW,UAAU,QAAQ,CAAA;AAEnC,MAAA,IAAI,aAAa,MAAA,EAAW,CAE5B,MAAO;AACL,QAAA,OAAO,QAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,OAAA,EAAS,aAAA,GAAgB,QAAQ,CAAA;AACjD,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,SAAS,CAAA,EAAG;AACrD,MAAA,OAAO,OAAA;AAAA,IACT;AACA,IAAA,IAAI,QAAA,KAAa,MAAA,IAAU,OAAA,EAAS,OAAA,EAAS;AAC3C,MAAA,OAAO,OAAA,CAAQ,OAAA;AAAA,IACjB;AACA,IAAA,OAAO,yBAAyB,QAAQ,CAAA;AAAA,EAC1C;AAEA,EAAA,MAAM,KAAA,GAAQ,SAAA,CACX,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,QAAA,EAAU,CAAA,EAAG,GAAA,EAAK,OAAA,CAAQ,CAAC,CAAA,GAAI,CAAA,CAC7C,MAAA;AAAA,IACC,CAAC,MACC,CAAC,CAAC,EAAE,GAAA,IAAO,SAAA,CAAU,EAAE,GAAG;AAAA,GAC9B;AAEF,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAE/B,EAAA,uBACEC,GAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EACD,gBAAM,GAAA,CAAI,CAAC,EAAE,QAAA,EAAU,GAAA,EAAI,qBAC1BA,GAAAA,CAAC,QACC,QAAA,kBAAAA,GAAAA;AAAA,IAAC,GAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAO,QAAA;AAAA,MACP,GAAA,EAAI,qBAAA;AAAA,MACJ,SAAA,EAAW,aAAA;AAAA,MAEV,QAAA,EAAA,MAAA,CAAO,QAAQ,CAAA,IAAK,cAAA,CAAe,QAAQ;AAAA;AAAA,GAC9C,EAAA,EARO,QAST,CACD,CAAA,EACH,CAAA;AAEJ","file":"resource-links.mjs","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    return this.request<T>(mutation, variables);\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          errors: [\n            {\n              message: `HTTP ${response.status}: ${response.statusText}`,\n              extensions: { code: `HTTP_${response.status}` },\n            },\n          ],\n        };\n      }\n\n      return (await response.json()) as GraphQLResponse<T>;\n    } catch (error) {\n      console.error(\n        \"[WebSDK] Network error\",\n        error instanceof Error ? error.message : \"unknown error\",\n      );\n      return {\n        errors: [\n          {\n            message: error instanceof Error ? error.message : \"Network error\",\n            extensions: { code: \"NETWORK_ERROR\" },\n          },\n        ],\n      };\n    }\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * Product Provider\n *\n * React context and hooks for accessing product metadata from the global tenant service.\n * Fetches product info (name, logo, SEO, contact, reCAPTCHA key, etc.) on mount\n * and provides it to all child components.\n */\n\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useState,\n  useLayoutEffect,\n  useCallback,\n  useMemo,\n} from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface ProductData {\n  id: string;\n  name: string;\n  slug: string;\n  description?: string | null;\n  status: string;\n  logoUrl?: string | null;\n  website?: string | null;\n  appUrl?: string | null;\n  docsUrl?: string | null;\n  contactEmail?: string | null;\n  supportEmail?: string | null;\n  contactPhone?: string | null;\n  contactAddress?: string | null;\n  seoTitle?: string | null;\n  seoDescription?: string | null;\n  seoKeywords?: string | null;\n  ogImage?: string | null;\n  socialLinks?: Record<string, string> | null;\n  /**\n   * Resource links for the website footer \"Resources\" column\n   * (JSON: { docs, community, careers, team, companies, ... }).\n   * Same shape as socialLinks. Free-form keys; the ResourceLinks\n   * component renders known keys and silently ignores the rest.\n   * Backed by Product.resourceLinks on the backend (global-tenant-svc).\n   */\n  resourceLinks?: Record<string, string> | null;\n  recaptchaSiteKey?: string | null;\n  rybbitSiteId?: string | null;\n  notificationEmail?: string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface ProductProviderProps {\n  /** Child components */\n  children: ReactNode;\n  /** Optional fallback product data (used while loading) */\n  fallback?: Partial<ProductData>;\n}\n\n// ============================================================================\n// GraphQL Query\n// ============================================================================\n\n/**\n * Body of fields requested for every product fetch — shared by the primary\n * query and the legacy-backend fallback below. Kept as a string fragment\n * (not a real GraphQL `fragment` block) so we can append/strip\n * `resourceLinks` without touching anything else.\n */\nconst PRODUCT_FIELDS_BASE = `\n      id\n      name\n      slug\n      description\n      status\n      logoUrl\n      website\n      appUrl\n      docsUrl\n      contactEmail\n      supportEmail\n      contactPhone\n      contactAddress\n      seoTitle\n      seoDescription\n      seoKeywords\n      ogImage\n      socialLinks\n      recaptchaSiteKey\n      rybbitSiteId\n      notificationEmail\n      metadata\n`;\n\n/**\n * Primary query — includes the recently-added `resourceLinks` field.\n * Backends that have run the corresponding `global-tenant-svc` migration\n * (PR #64) expose this field; older ones don't, in which case\n * GraphQL validation rejects the whole query with\n * `Cannot query field \"resourceLinks\" on type \"PublicProduct\"`. The fetch\n * helper detects that specific error and transparently retries the\n * fallback below, so the SDK works on both pre- and post-migration\n * deployments without consumer-side gating.\n */\nconst PUBLIC_PRODUCT_QUERY = `\n  query PublicProduct($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n      resourceLinks\n    }\n  }\n`;\n\n/**\n * Fallback query for older backend deployments. Identical to the primary\n * minus `resourceLinks`. Consumers see `product.resourceLinks === undefined`\n * and any consumer (e.g. `<ResourceLinks/>`) falls through to prop / default\n * resolution paths.\n */\nconst PUBLIC_PRODUCT_QUERY_FALLBACK = `\n  query PublicProductFallback($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n    }\n  }\n`;\n\n// ============================================================================\n// Context\n// ============================================================================\n\ninterface ProductContextValue {\n  product: ProductData | null;\n  loading: boolean;\n  error: string | null;\n  hasProvider: boolean;\n  refetch: () => void;\n}\n\nconst ProductContext = createContext<ProductContextValue>({\n  product: null,\n  loading: true,\n  error: null,\n  hasProvider: false,\n  refetch: () => {},\n});\n\n// ============================================================================\n// Provider\n// ============================================================================\n\n/**\n * ProductProvider fetches and provides product metadata to child components.\n * Uses the product slug from WebSDKConfig to fetch from the public API.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={sdkConfig}>\n *   <ProductProvider>\n *     <App />\n *   </ProductProvider>\n * </WebSDKProvider>\n * ```\n */\nexport function ProductProvider({ children, fallback }: ProductProviderProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const [product, setProduct] = useState<ProductData | null>(\n    fallback ? (fallback as ProductData) : null,\n  );\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const fetchProduct = useCallback(async () => {\n    if (!config.productSlug) {\n      setLoading(false);\n      return;\n    }\n\n    setLoading(true);\n    setError(null);\n\n    try {\n      let result = await client.query<{ publicProduct: ProductData | null }>(\n        PUBLIC_PRODUCT_QUERY,\n        { slug: config.productSlug },\n      );\n\n      // Backwards-compat fallback: if the backend's `publicProduct` schema\n      // doesn't yet expose `resourceLinks` (deployed before\n      // `global-tenant-svc` PR #64), the primary query fails validation\n      // with a \"Cannot query field …\" error and `result.data` is null.\n      // Retry the fallback query that omits `resourceLinks`; consumers\n      // gracefully see `product.resourceLinks === undefined` and fall\n      // through their own resolution paths.\n      const schemaMissingResourceLinks = result.errors?.some((e) =>\n        /Cannot query field [\"']?resourceLinks[\"']?/i.test(e?.message ?? \"\"),\n      );\n      if (schemaMissingResourceLinks) {\n        result = await client.query<{ publicProduct: ProductData | null }>(\n          PUBLIC_PRODUCT_QUERY_FALLBACK,\n          { slug: config.productSlug },\n        );\n      }\n\n      if (result.errors?.length) {\n        setError(result.errors[0]?.message ?? \"Unknown error\");\n      } else if (result.data?.publicProduct) {\n        setProduct(result.data.publicProduct);\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to fetch product\");\n    } finally {\n      setLoading(false);\n    }\n  }, [client, config.productSlug]);\n\n  // Use useLayoutEffect for earliest possible fetch after commit (before paint).\n  // Runs when slug or client changes. Client-side query cache + dedup ensures\n  // no duplicate network requests even if React StrictMode fires this twice.\n  useLayoutEffect(() => {\n    fetchProduct();\n  }, [fetchProduct]);\n\n  const value = useMemo(\n    () => ({\n      product,\n      loading,\n      error,\n      hasProvider: true,\n      refetch: fetchProduct,\n    }),\n    [product, loading, error, fetchProduct],\n  );\n\n  return (\n    <ProductContext.Provider value={value}>{children}</ProductContext.Provider>\n  );\n}\n\n// ============================================================================\n// Hooks\n// ============================================================================\n\n/**\n * Hook to access the current product data.\n *\n * @example\n * ```tsx\n * const { product, loading } = useProduct();\n * if (loading) return <Loading />;\n * return <h1>{product?.name}</h1>;\n * ```\n */\nexport function useProduct(): ProductContextValue {\n  return useContext(ProductContext);\n}\n\n/**\n * Hook to get product-specific configuration.\n * Merges SDK config with fetched product data.\n * Useful for getting reCAPTCHA keys, analytics IDs, etc.\n *\n * @example\n * ```tsx\n * const { recaptchaSiteKey, rybbitSiteId } = useProductConfig();\n * ```\n */\nexport function useProductConfig(): {\n  recaptchaSiteKey: string | null;\n  rybbitSiteId: string | null;\n  contactEmail: string | null;\n  supportEmail: string | null;\n  notificationEmail: string | null;\n  productName: string | null;\n  logoUrl: string | null;\n} {\n  const { product } = useProduct();\n  const config = useWebSDKConfig();\n\n  return {\n    // Prefer product-level config, fall back to SDK config\n    recaptchaSiteKey:\n      product?.recaptchaSiteKey ?? config.recaptchaSiteKey ?? null,\n    rybbitSiteId: product?.rybbitSiteId ?? config.rybbitSiteId ?? null,\n    contactEmail: product?.contactEmail ?? null,\n    supportEmail: product?.supportEmail ?? null,\n    notificationEmail:\n      product?.notificationEmail ?? product?.contactEmail ?? null,\n    productName: product?.name ?? null,\n    logoUrl: product?.logoUrl ?? null,\n  };\n}\n","\"use client\";\n\n/**\n * ResourceLinks Component\n *\n * Renders the Footer \"Resources\" column. Hybrid data sourcing — uses the\n * product CMS where a field already exists, prop overrides where CMS doesn't\n * (yet) have a column, and Burdenoff-group-wide defaults for resources that\n * are constant across every product website.\n *\n * | Resource     | Default source                                  | Notes |\n * | ------------ | ----------------------------------------------- | ----- |\n * | `docs`       | `useProduct().product.docsUrl` (existing field) | Per-product; admin can change in `microfe-product → Products → <product>` |\n * | `community`  | (none — pass via `links` prop)                  | Per-product; needs `Product.communityUrl` in backend to become CMS-managed |\n * | `careers`    | `https://burdenoff.com/careers` (group default) | Burdenoff-wide constant; overridable |\n * | `team`       | `https://burdenoff.com/team` (group default)    | Burdenoff-wide constant; overridable |\n * | `companies`  | `https://burdenoff.com/companies` (group default)| Burdenoff-wide constant; overridable |\n *\n * Future-compat: if the CMS grows a `Product.resourceLinks` JSON field\n * mirroring `socialLinks`, the resolver below switches to read it as the\n * first preference — no consumer-side change.\n *\n * @example\n * ```tsx\n * import { ResourceLinks } from '@burdenoff/website-sdk'\n *\n * // Minimal — pass the one resource without a CMS source today\n * <ResourceLinks links={{ community: 'https://support.vibecontrols.com' }} />\n *\n * // Suppress an item (e.g. hide Sister Companies for a standalone product)\n * <ResourceLinks links={{ companies: null }} />\n *\n * // Restrict + reorder\n * <ResourceLinks resources={['docs', 'community']} />\n * ```\n */\n\nimport { useProduct } from \"../product/product-provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type Resource = \"docs\" | \"community\" | \"careers\" | \"team\" | \"companies\";\n\nexport interface ResourceLinksProps {\n  /**\n   * Per-resource URL overrides. `undefined` falls through to CMS/default\n   * resolution; explicit `null` suppresses the link entirely.\n   */\n  links?: Partial<Record<Resource, string | null>>;\n  /**\n   * Allowlist + ORDER of resources to render. Default: canonical order\n   * (docs, community, careers, team, companies). Pass a subset/reorder to\n   * customise the column on a per-site basis.\n   */\n  resources?: readonly Resource[];\n  /** Per-link label overrides. Falls back to canonical English labels. */\n  labels?: Partial<Record<Resource, string>>;\n  /** Outer container className. Default: `\"space-y-2\"` (vertical list). */\n  className?: string;\n  /**\n   * Per-link className. Default matches the muted-foreground / hover-foreground\n   * style used by the other Footer columns.\n   */\n  itemClassName?: string;\n}\n\n// ============================================================================\n// Defaults\n// ============================================================================\n\nconst DEFAULT_LABELS: Record<Resource, string> = {\n  docs: \"Docs\",\n  community: \"Community\",\n  careers: \"Careers\",\n  team: \"Team\",\n  companies: \"Sister Companies\",\n};\n\n/**\n * Burdenoff-group-wide URLs — same across every product website by default.\n * `null` means \"no group default; must be supplied per-site or via CMS\".\n */\nconst BURDENOFF_GROUP_DEFAULTS: Record<Resource, string | null> = {\n  docs: null, // per-product → read from `Product.docsUrl`\n  community: null, // per-product → caller supplies via prop until CMS field exists\n  careers: \"https://burdenoff.com/careers\",\n  team: \"https://burdenoff.com/team\",\n  companies: \"https://burdenoff.com/companies\",\n};\n\nconst DEFAULT_ORDER: readonly Resource[] = [\n  \"docs\",\n  \"community\",\n  \"careers\",\n  \"team\",\n  \"companies\",\n];\n\nconst DEFAULT_ITEM_CLASS =\n  \"text-sm text-muted-foreground hover:text-foreground transition-colors\";\n\n/**\n * Defense-in-depth XSS guard for any URL flowing into a rendered `href`.\n * Only http(s), mailto, tel, and relative URLs pass through. `javascript:`,\n * `data:`, `vbscript:`, etc. are rejected. The CMS is admin-only, but\n * treating the URL as untrusted is cheap and consistent with the wider\n * Burdenoff posture.\n */\nfunction isSafeUrl(value: string): boolean {\n  const trimmed = value.trim();\n  if (/^[/?#]/.test(trimmed)) return true;\n  return /^(https?:|mailto:|tel:)/i.test(trimmed);\n}\n\n// ============================================================================\n// Component\n// ============================================================================\n\nexport function ResourceLinks({\n  links: linksProp,\n  resources = DEFAULT_ORDER,\n  labels = {},\n  className = \"space-y-2\",\n  itemClassName = DEFAULT_ITEM_CLASS,\n}: ResourceLinksProps) {\n  const { product } = useProduct();\n\n  /**\n   * Resolve a resource's URL. Precedence:\n   *   1. Explicit prop — caller wins.\n   *      • `string` → use it\n   *      • `null`   → suppress (force-omit even if CMS / defaults exist)\n   *      • `undefined` value (the key exists in `links` but is undefined)\n   *                → treat as \"fall through to CMS / defaults\" (same as\n   *                if the key wasn't in `links` at all)\n   *   2. `product.resourceLinks[resource]` — CMS-managed JSON record on\n   *      `Product`; the canonical source once an admin has set values\n   *      via microfe-product → Products → <product> → Resource Links.\n   *   3. CMS field for resources that have a dedicated column\n   *      (`docs` → `product.docsUrl`) — kept as a fallback for legacy\n   *      products that only have the older single-field set.\n   *   4. Burdenoff group-wide default.\n   *   5. `null` → omit the link.\n   *\n   * URLs returned by any path go through `isSafeUrl()` downstream; bad\n   * schemes are dropped during the render pass.\n   */\n  function resolve(resource: Resource): string | null {\n    if (linksProp && resource in linksProp) {\n      const override = linksProp[resource];\n      // `undefined` → fall through; `null` (explicit) → suppress\n      if (override === undefined) {\n        // continue to CMS / defaults below\n      } else {\n        return override;\n      }\n    }\n    const fromCms = product?.resourceLinks?.[resource];\n    if (typeof fromCms === \"string\" && fromCms.length > 0) {\n      return fromCms;\n    }\n    if (resource === \"docs\" && product?.docsUrl) {\n      return product.docsUrl;\n    }\n    return BURDENOFF_GROUP_DEFAULTS[resource];\n  }\n\n  const items = resources\n    .map((r) => ({ resource: r, url: resolve(r) }))\n    .filter(\n      (x): x is { resource: Resource; url: string } =>\n        !!x.url && isSafeUrl(x.url),\n    );\n\n  if (items.length === 0) return null;\n\n  return (\n    <ul className={className}>\n      {items.map(({ resource, url }) => (\n        <li key={resource}>\n          <a\n            href={url}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            className={itemClassName}\n          >\n            {labels[resource] ?? DEFAULT_LABELS[resource]}\n          </a>\n        </li>\n      ))}\n    </ul>\n  );\n}\n"]}