@burdenoff/website-sdk 2026.720.2 → 2026.720.3

package/dist/components/social-links.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/product/product-provider.tsx","../../src/components/social-links.tsx"],"names":["createContext","useContext","jsx"],"mappings":";;;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACZO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAUxB,YAAY,MAAA,EAA4B;AATxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAKpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAS,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW;AAAA,OAC1C,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,cACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,SACF;AAAA,MACF;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,wBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN;AAAA,YACE,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA;AAAA,YAClD,UAAA,EAAY,EAAE,IAAA,EAAM,eAAA;AAAgB;AACtC;AACF,OACF;AAAA,IACF;AAAA,EACF;AACF,CAAA;AAtHE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AC7Bf,cAAmC,IAAI;ACqI7D,IAAM,iBAAiBA,aAAAA,CAAmC;AAAA,EACxD,OAAA,EAAS,IAAA;AAAA,EACT,OAAA,EAAS,IAAA;AAAA,EACT,KAAA,EAAO,IAAA;AAAA,EACP,WAAA,EAAa,KAAA;AAAA,EACb,SAAS,MAAM;AAAA,EAAC;AAClB,CAAC,CAAA;AA4GM,SAAS,UAAA,GAAkC;AAChD,EAAA,OAAOC,WAAW,cAAc,CAAA;AAClC;ACtJA,SAAS,WAAA,CAAY,EAAE,SAAA,EAAU,EAA2B;AAC1D,EAAA,uBACEC,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,KAAA;AAAA,MACL,OAAA,EAAQ,WAAA;AAAA,MACR,IAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAM,4BAAA;AAAA,MACN,SAAA;AAAA,MACA,aAAA,EAAY,MAAA;AAAA,MAEZ,QAAA,kBAAAA,GAAAA,CAAC,MAAA,EAAA,EAAK,CAAA,EAAE,kjCAAA,EAAmjC;AAAA;AAAA,GAC7jC;AAEJ;AAEA,SAAS,aAAA,CAAc,EAAE,SAAA,EAAU,EAA2B;AAC5D,EAAA,uBACEA,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,KAAA;AAAA,MACL,OAAA,EAAQ,WAAA;AAAA,MACR,IAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAM,4BAAA;AAAA,MACN,SAAA;AAAA,MACA,aAAA,EAAY,MAAA;AAAA,MAEZ,QAAA,kBAAAA,GAAAA,CAAC,MAAA,EAAA,EAAK,CAAA,EAAE,kxBAAA,EAAmxB;AAAA;AAAA,GAC7xB;AAEJ;AAWA,IAAM,SAAA,GAAiD;AAAA,EACrD,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,OAAO,aAAA,EAAe,OAAA,EAAS,CAAC,GAAG,CAAA,EAAE;AAAA,EAC/D,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,UAAA,EAAW;AAAA,EAC9C,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAO,QAAA,EAAS;AAAA,EACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,UAAA,EAAW;AAAA,EAC9C,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAAA,EAC3C,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,OAAO,WAAA,EAAY;AAAA,EACjD,OAAA,EAAS,EAAE,IAAA,EAAM,WAAA,EAAa,OAAO,SAAA,EAAU;AAAA,EAC/C,SAAA,EAAW,EAAE,IAAA,EAAM,aAAA,EAAe,OAAO,WAAA;AAC3C,CAAA;AAMA,IAAM,mBAAmD,MAAM;AAC7D,EAAA,MAAM,MAAsC,EAAC;AAC7C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,GAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAG5C;AACH,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,GAAA;AACX,IAAA,KAAA,MAAW,KAAA,IAAS,GAAA,CAAI,OAAA,IAAW,EAAC,EAAG;AACrC,MAAA,GAAA,CAAI,KAAK,CAAA,GAAI,GAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT,CAAA,GAAG;AAEH,IAAM,kBAAA,GACJ,+DAAA;AASF,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAE3B,EAAA,IAAI,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,OAAO,0BAAA,CAA2B,KAAK,OAAO,CAAA;AAChD;AAMO,SAAS,WAAA,CAAY;AAAA,EAC1B,KAAA,EAAO,SAAA;AAAA,EACP,KAAA,EAAO,SAAA;AAAA,EACP,SAAA,EAAW,aAAA;AAAA,EACX,SAAA;AAAA,EACA,aAAA,GAAgB,SAAA;AAAA,EAChB,aAAA,GAAgB,kBAAA;AAAA,EAChB,SAAA,GAAY;AACd,CAAA,EAAqB;AACnB,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,UAAA,EAAW;AAG/B,EAAA,MAAM,KAAA,GAAiC,SAAA,IACrC,OAAA,EAAS,WAAA,IACT,EAAC;AAIH,EAAA,MAAM,KAAA,GACJ,SAAA,KAAc,MAAA,GAAY,SAAA,GAAa,SAAS,YAAA,IAAgB,IAAA;AAOlE,EAAA,MAAM,QAAA,uBAAe,GAAA,EAA4B;AACjD,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,GAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACjD,IAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACrC,IAAA,IAAI,CAAC,SAAA,CAAU,GAAG,CAAA,EAAG;AACrB,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,MAAA,CAAO,WAAA,EAAa,CAAA;AACrD,IAAA,IAAI,CAAC,QAAA,EAAU;AACf,IAAA,QAAA,CAAS,GAAA,CAAI,UAAU,GAAG,CAAA;AAAA,EAC5B;AAKA,EAAA,MAAM,gBAAA,GAAqC,aAAA,GACvC,aAAA,CAAc,MAAA,CAAO,CAAC,CAAA,KAAM,QAAA,CAAS,GAAA,CAAI,CAAC,CAAC,CAAA,GAC3C,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAE9B,EAAA,MAAM,aAAa,SAAA,IAAa,CAAC,CAAC,KAAA,KAAU,CAAC,CAAC,KAAA;AAI9C,EAAA,IAAI,gBAAA,CAAiB,MAAA,KAAW,CAAA,IAAK,CAAC,WAAW,OAAO,IAAA;AAExD,EAAA,uBACE,IAAA,CAAC,SAAI,SAAA,EACF,QAAA,EAAA;AAAA,IAAA,gBAAA,CAAiB,GAAA,CAAI,CAAC,QAAA,KAAa;AAClC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,UAAU,QAAQ,CAAA;AAC1C,MAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AACjC,MAAA,uBACEA,GAAAA;AAAA,QAAC,GAAA;AAAA,QAAA;AAAA,UAEC,IAAA,EAAM,GAAA;AAAA,UACN,MAAA,EAAO,QAAA;AAAA,UACP,GAAA,EAAI,qBAAA;AAAA,UACJ,YAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,aAAA;AAAA,UAEX,QAAA,kBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,aAAA,EAAe;AAAA,SAAA;AAAA,QAP3B;AAAA,OAQP;AAAA,IAEJ,CAAC,CAAA;AAAA,IACA,6BACCA,GAAAA;AAAA,MAAC,GAAA;AAAA,MAAA;AAAA,QAEC,IAAA,EAAM,UAAU,KAAK,CAAA,CAAA;AAAA,QACrB,YAAA,EAAW,OAAA;AAAA,QACX,SAAA,EAAW,aAAA;AAAA,QAEX,QAAA,kBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,aAAA,EAAe;AAAA,OAAA;AAAA,MAL5B;AAAA;AAMN,GAAA,EAEJ,CAAA;AAEJ","file":"social-links.mjs","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    return this.request<T>(mutation, variables);\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          errors: [\n            {\n              message: `HTTP ${response.status}: ${response.statusText}`,\n              extensions: { code: `HTTP_${response.status}` },\n            },\n          ],\n        };\n      }\n\n      return (await response.json()) as GraphQLResponse<T>;\n    } catch (error) {\n      console.error(\n        \"[WebSDK] Network error\",\n        error instanceof Error ? error.message : \"unknown error\",\n      );\n      return {\n        errors: [\n          {\n            message: error instanceof Error ? error.message : \"Network error\",\n            extensions: { code: \"NETWORK_ERROR\" },\n          },\n        ],\n      };\n    }\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * Product Provider\n *\n * React context and hooks for accessing product metadata from the global tenant service.\n * Fetches product info (name, logo, SEO, contact, reCAPTCHA key, etc.) on mount\n * and provides it to all child components.\n */\n\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useState,\n  useLayoutEffect,\n  useCallback,\n  useMemo,\n} from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface ProductData {\n  id: string;\n  name: string;\n  slug: string;\n  description?: string | null;\n  status: string;\n  logoUrl?: string | null;\n  website?: string | null;\n  appUrl?: string | null;\n  docsUrl?: string | null;\n  contactEmail?: string | null;\n  supportEmail?: string | null;\n  contactPhone?: string | null;\n  contactAddress?: string | null;\n  seoTitle?: string | null;\n  seoDescription?: string | null;\n  seoKeywords?: string | null;\n  ogImage?: string | null;\n  socialLinks?: Record<string, string> | null;\n  /**\n   * Resource links for the website footer \"Resources\" column\n   * (JSON: { docs, community, careers, team, companies, ... }).\n   * Same shape as socialLinks. Free-form keys; the ResourceLinks\n   * component renders known keys and silently ignores the rest.\n   * Backed by Product.resourceLinks on the backend (global-tenant-svc).\n   */\n  resourceLinks?: Record<string, string> | null;\n  recaptchaSiteKey?: string | null;\n  rybbitSiteId?: string | null;\n  notificationEmail?: string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface ProductProviderProps {\n  /** Child components */\n  children: ReactNode;\n  /** Optional fallback product data (used while loading) */\n  fallback?: Partial<ProductData>;\n}\n\n// ============================================================================\n// GraphQL Query\n// ============================================================================\n\n/**\n * Body of fields requested for every product fetch — shared by the primary\n * query and the legacy-backend fallback below. Kept as a string fragment\n * (not a real GraphQL `fragment` block) so we can append/strip\n * `resourceLinks` without touching anything else.\n */\nconst PRODUCT_FIELDS_BASE = `\n      id\n      name\n      slug\n      description\n      status\n      logoUrl\n      website\n      appUrl\n      docsUrl\n      contactEmail\n      supportEmail\n      contactPhone\n      contactAddress\n      seoTitle\n      seoDescription\n      seoKeywords\n      ogImage\n      socialLinks\n      recaptchaSiteKey\n      rybbitSiteId\n      notificationEmail\n      metadata\n`;\n\n/**\n * Primary query — includes the recently-added `resourceLinks` field.\n * Backends that have run the corresponding `global-tenant-svc` migration\n * (PR #64) expose this field; older ones don't, in which case\n * GraphQL validation rejects the whole query with\n * `Cannot query field \"resourceLinks\" on type \"PublicProduct\"`. The fetch\n * helper detects that specific error and transparently retries the\n * fallback below, so the SDK works on both pre- and post-migration\n * deployments without consumer-side gating.\n */\nconst PUBLIC_PRODUCT_QUERY = `\n  query PublicProduct($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n      resourceLinks\n    }\n  }\n`;\n\n/**\n * Fallback query for older backend deployments. Identical to the primary\n * minus `resourceLinks`. Consumers see `product.resourceLinks === undefined`\n * and any consumer (e.g. `<ResourceLinks/>`) falls through to prop / default\n * resolution paths.\n */\nconst PUBLIC_PRODUCT_QUERY_FALLBACK = `\n  query PublicProductFallback($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n    }\n  }\n`;\n\n// ============================================================================\n// Context\n// ============================================================================\n\ninterface ProductContextValue {\n  product: ProductData | null;\n  loading: boolean;\n  error: string | null;\n  hasProvider: boolean;\n  refetch: () => void;\n}\n\nconst ProductContext = createContext<ProductContextValue>({\n  product: null,\n  loading: true,\n  error: null,\n  hasProvider: false,\n  refetch: () => {},\n});\n\n// ============================================================================\n// Provider\n// ============================================================================\n\n/**\n * ProductProvider fetches and provides product metadata to child components.\n * Uses the product slug from WebSDKConfig to fetch from the public API.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={sdkConfig}>\n *   <ProductProvider>\n *     <App />\n *   </ProductProvider>\n * </WebSDKProvider>\n * ```\n */\nexport function ProductProvider({ children, fallback }: ProductProviderProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const [product, setProduct] = useState<ProductData | null>(\n    fallback ? (fallback as ProductData) : null,\n  );\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const fetchProduct = useCallback(async () => {\n    if (!config.productSlug) {\n      setLoading(false);\n      return;\n    }\n\n    setLoading(true);\n    setError(null);\n\n    try {\n      let result = await client.query<{ publicProduct: ProductData | null }>(\n        PUBLIC_PRODUCT_QUERY,\n        { slug: config.productSlug },\n      );\n\n      // Backwards-compat fallback: if the backend's `publicProduct` schema\n      // doesn't yet expose `resourceLinks` (deployed before\n      // `global-tenant-svc` PR #64), the primary query fails validation\n      // with a \"Cannot query field …\" error and `result.data` is null.\n      // Retry the fallback query that omits `resourceLinks`; consumers\n      // gracefully see `product.resourceLinks === undefined` and fall\n      // through their own resolution paths.\n      const schemaMissingResourceLinks = result.errors?.some((e) =>\n        /Cannot query field [\"']?resourceLinks[\"']?/i.test(e?.message ?? \"\"),\n      );\n      if (schemaMissingResourceLinks) {\n        result = await client.query<{ publicProduct: ProductData | null }>(\n          PUBLIC_PRODUCT_QUERY_FALLBACK,\n          { slug: config.productSlug },\n        );\n      }\n\n      if (result.errors?.length) {\n        setError(result.errors[0]?.message ?? \"Unknown error\");\n      } else if (result.data?.publicProduct) {\n        setProduct(result.data.publicProduct);\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to fetch product\");\n    } finally {\n      setLoading(false);\n    }\n  }, [client, config.productSlug]);\n\n  // Use useLayoutEffect for earliest possible fetch after commit (before paint).\n  // Runs when slug or client changes. Client-side query cache + dedup ensures\n  // no duplicate network requests even if React StrictMode fires this twice.\n  useLayoutEffect(() => {\n    fetchProduct();\n  }, [fetchProduct]);\n\n  const value = useMemo(\n    () => ({\n      product,\n      loading,\n      error,\n      hasProvider: true,\n      refetch: fetchProduct,\n    }),\n    [product, loading, error, fetchProduct],\n  );\n\n  return (\n    <ProductContext.Provider value={value}>{children}</ProductContext.Provider>\n  );\n}\n\n// ============================================================================\n// Hooks\n// ============================================================================\n\n/**\n * Hook to access the current product data.\n *\n * @example\n * ```tsx\n * const { product, loading } = useProduct();\n * if (loading) return <Loading />;\n * return <h1>{product?.name}</h1>;\n * ```\n */\nexport function useProduct(): ProductContextValue {\n  return useContext(ProductContext);\n}\n\n/**\n * Hook to get product-specific configuration.\n * Merges SDK config with fetched product data.\n * Useful for getting reCAPTCHA keys, analytics IDs, etc.\n *\n * @example\n * ```tsx\n * const { recaptchaSiteKey, rybbitSiteId } = useProductConfig();\n * ```\n */\nexport function useProductConfig(): {\n  recaptchaSiteKey: string | null;\n  rybbitSiteId: string | null;\n  contactEmail: string | null;\n  supportEmail: string | null;\n  notificationEmail: string | null;\n  productName: string | null;\n  logoUrl: string | null;\n} {\n  const { product } = useProduct();\n  const config = useWebSDKConfig();\n\n  return {\n    // Prefer product-level config, fall back to SDK config\n    recaptchaSiteKey:\n      product?.recaptchaSiteKey ?? config.recaptchaSiteKey ?? null,\n    rybbitSiteId: product?.rybbitSiteId ?? config.rybbitSiteId ?? null,\n    contactEmail: product?.contactEmail ?? null,\n    supportEmail: product?.supportEmail ?? null,\n    notificationEmail:\n      product?.notificationEmail ?? product?.contactEmail ?? null,\n    productName: product?.name ?? null,\n    logoUrl: product?.logoUrl ?? null,\n  };\n}\n","\"use client\";\n\n/**\n * SocialLinks Component\n *\n * Renders a row of social-media icons sourced from the **product CMS**.\n * The `socialLinks` field on `Product` (and `PublicProduct`) is a free-form\n * JSON record: `{ twitter, github, linkedin, facebook, youtube, instagram,\n * discord, pinterest, … }`. The admin sets per-product URLs in\n * `microfe-product → Products → <product>`; this component reads them via\n * `useProduct()` and renders icons for the platforms we know how to map.\n *\n * Unknown keys are **silently ignored** — the schema accepts any string key\n * so new platforms can be wired in admin without an SDK change, but they\n * won't render until this map grows.\n *\n * Why a component instead of inlining in each product website's Footer\n *\n * - Single source of truth for the platform → icon mapping.\n * - One swap to add a new platform (e.g. Threads, Bluesky) across all 5\n *   product websites.\n * - Eliminates the drift today between hard-coded URLs and CMS values\n *   (e.g. vibecontrols-website Footer had `twitter.com/vibecontrols`\n *   hard-coded while CMS had `twitter.com/burdenoff`).\n *\n * @example\n * ```tsx\n * import { SocialLinks } from '@burdenoff/website-sdk'\n *\n * // Auto-derives from useProduct().product.socialLinks\n * <SocialLinks />\n *\n * // Or pass explicitly\n * <SocialLinks\n *   links={{ twitter: 'https://twitter.com/example', github: 'https://github.com/example' }}\n *   email=\"contact@example.com\"\n * />\n *\n * // Restrict + reorder\n * <SocialLinks platforms={['github', 'twitter', 'linkedin']} />\n * ```\n */\n\nimport { type ComponentType } from \"react\";\n\nimport {\n  Facebook,\n  Github,\n  Instagram,\n  Linkedin,\n  Mail,\n  Twitter,\n  Youtube,\n} from \"lucide-react\";\n\nimport { useProduct } from \"../product/product-provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Platform keys the component knows how to render. Extends as we add icons.\n * Note: this is intentionally a small allowlist; the CMS JSON schema is\n * open-ended and the component silently skips unknown keys.\n */\nexport type SocialPlatform =\n  | \"twitter\"\n  | \"linkedin\"\n  | \"github\"\n  | \"facebook\"\n  | \"youtube\"\n  | \"instagram\"\n  | \"discord\"\n  | \"pinterest\";\n\nexport interface SocialLinksProps {\n  /**\n   * Map of platform → URL. If unset, reads from `useProduct().product.socialLinks`.\n   * Useful for passing static config when there's no `<ProductProvider>` upstream.\n   */\n  links?: Record<string, string> | null;\n  /**\n   * Contact email — renders a Mail icon linking to `mailto:…`. If unset,\n   * reads from `useProduct().product.contactEmail`. Pass `null` to suppress.\n   */\n  email?: string | null;\n  /**\n   * Allowlist + ORDER of platforms to render. Defaults to the natural CMS\n   * order (whatever the JSON returns). Use this to pin a stable visual order\n   * across products that may have different platform sets.\n   */\n  platforms?: readonly SocialPlatform[];\n  /** Whether to render the Mail icon for `email`. Default: `true` when an email is available. */\n  showEmail?: boolean;\n  /** Tailwind class controlling icon size. Default: `\"h-5 w-5\"`. */\n  iconClassName?: string;\n  /** Tailwind class for each `<a>` wrapping link. Defaults to a muted-foreground / hover-foreground transition. */\n  itemClassName?: string;\n  /** Tailwind class for the outer container. Default: `\"flex space-x-4\"`. */\n  className?: string;\n}\n\n// ============================================================================\n// Platform → icon map\n// ============================================================================\n\n/**\n * Custom inline SVG for platforms not covered by lucide-react.\n * Stays minimal — single-path icons keep bundle size tight.\n */\nfunction DiscordIcon({ className }: { className?: string }) {\n  return (\n    <svg\n      role=\"img\"\n      viewBox=\"0 0 24 24\"\n      fill=\"currentColor\"\n      xmlns=\"http://www.w3.org/2000/svg\"\n      className={className}\n      aria-hidden=\"true\"\n    >\n      <path d=\"M20.317 4.369A19.79 19.79 0 0 0 16.558 3a.075.075 0 0 0-.079.037c-.34.6-.717 1.382-.98 1.99a18.27 18.27 0 0 0-5.998 0 12.51 12.51 0 0 0-.99-1.99.077.077 0 0 0-.079-.037 19.74 19.74 0 0 0-3.76 1.369.07.07 0 0 0-.032.028C.533 8.045-.32 11.6.099 15.114a.082.082 0 0 0 .031.056 19.9 19.9 0 0 0 5.993 3.03.078.078 0 0 0 .084-.027 14.09 14.09 0 0 0 1.226-1.994.076.076 0 0 0-.041-.105 13.1 13.1 0 0 1-1.872-.892.077.077 0 0 1-.008-.128c.126-.094.252-.192.372-.291a.074.074 0 0 1 .078-.01c3.927 1.793 8.18 1.793 12.061 0a.074.074 0 0 1 .079.009c.12.099.246.198.372.292a.077.077 0 0 1-.006.127 12.3 12.3 0 0 1-1.873.892.077.077 0 0 0-.041.106c.36.698.772 1.362 1.225 1.993a.076.076 0 0 0 .084.028 19.84 19.84 0 0 0 6.002-3.03.077.077 0 0 0 .032-.055c.5-4.063-.838-7.587-3.549-10.717a.061.061 0 0 0-.031-.028zM8.02 13.001c-1.182 0-2.157-1.085-2.157-2.419 0-1.333.956-2.418 2.157-2.418 1.21 0 2.176 1.094 2.157 2.418 0 1.334-.956 2.419-2.157 2.419zm7.974 0c-1.182 0-2.157-1.085-2.157-2.419 0-1.333.956-2.418 2.157-2.418 1.21 0 2.176 1.094 2.157 2.418 0 1.334-.946 2.419-2.157 2.419z\" />\n    </svg>\n  );\n}\n\nfunction PinterestIcon({ className }: { className?: string }) {\n  return (\n    <svg\n      role=\"img\"\n      viewBox=\"0 0 24 24\"\n      fill=\"currentColor\"\n      xmlns=\"http://www.w3.org/2000/svg\"\n      className={className}\n      aria-hidden=\"true\"\n    >\n      <path d=\"M12.017 0C5.396 0 .029 5.367.029 11.987c0 5.079 3.158 9.417 7.618 11.162-.105-.949-.199-2.403.041-3.439.219-.937 1.406-5.957 1.406-5.957s-.359-.72-.359-1.781c0-1.663.967-2.911 2.168-2.911 1.024 0 1.518.769 1.518 1.688 0 1.029-.653 2.567-.992 3.992-.285 1.193.6 2.165 1.775 2.165 2.128 0 3.768-2.245 3.768-5.487 0-2.861-2.063-4.869-5.008-4.869-3.41 0-5.409 2.562-5.409 5.199 0 1.033.394 2.143.889 2.741.099.12.112.225.085.345-.09.375-.293 1.199-.334 1.363-.053.225-.172.271-.401.165-1.495-.69-2.433-2.878-2.433-4.646 0-3.776 2.748-7.252 7.92-7.252 4.158 0 7.392 2.967 7.392 6.923 0 4.135-2.607 7.462-6.233 7.462-1.214 0-2.357-.629-2.75-1.378l-.748 2.853c-.271 1.043-1.002 2.35-1.492 3.146C9.57 23.812 10.763 24 12.017 24c6.624 0 11.99-5.367 11.99-11.987C24.007 5.367 18.641 0 12.017 0z\" />\n    </svg>\n  );\n}\n\ninterface PlatformDef {\n  /** lucide-react component or custom SVG component */\n  Icon: ComponentType<{ className?: string }>;\n  /** Accessible label for the link */\n  label: string;\n  /** Optional alias keys that should also resolve to this platform */\n  aliases?: readonly string[];\n}\n\nconst PLATFORMS: Record<SocialPlatform, PlatformDef> = {\n  twitter: { Icon: Twitter, label: \"Twitter / X\", aliases: [\"x\"] },\n  linkedin: { Icon: Linkedin, label: \"LinkedIn\" },\n  github: { Icon: Github, label: \"GitHub\" },\n  facebook: { Icon: Facebook, label: \"Facebook\" },\n  youtube: { Icon: Youtube, label: \"YouTube\" },\n  instagram: { Icon: Instagram, label: \"Instagram\" },\n  discord: { Icon: DiscordIcon, label: \"Discord\" },\n  pinterest: { Icon: PinterestIcon, label: \"Pinterest\" },\n};\n\n/**\n * Build a `key → SocialPlatform` lookup so aliases (e.g. `\"x\"` → `\"twitter\"`)\n * resolve in O(1). Memoised at module scope; never recomputed.\n */\nconst KEY_TO_PLATFORM: Record<string, SocialPlatform> = (() => {\n  const map: Record<string, SocialPlatform> = {};\n  for (const [key, def] of Object.entries(PLATFORMS) as [\n    SocialPlatform,\n    PlatformDef,\n  ][]) {\n    map[key] = key;\n    for (const alias of def.aliases ?? []) {\n      map[alias] = key;\n    }\n  }\n  return map;\n})();\n\nconst DEFAULT_ITEM_CLASS =\n  \"text-muted-foreground hover:text-foreground transition-colors\";\n\n/**\n * Defense-in-depth XSS guard. Only http(s), mailto, and tel URLs are allowed\n * through to a rendered `href`; anything else (notably `javascript:`,\n * `data:`, `vbscript:`) is rejected and the link is silently skipped. Inputs\n * are admin-controlled today, but treating the URL field as untrusted is\n * cheap and matches the wider Burdenoff posture.\n */\nfunction isSafeUrl(value: string): boolean {\n  const trimmed = value.trim();\n  // Relative URLs (no scheme) are safe — browser treats them as same-origin.\n  if (/^[/?#]/.test(trimmed)) return true;\n  return /^(https?:|mailto:|tel:)/i.test(trimmed);\n}\n\n// ============================================================================\n// Component\n// ============================================================================\n\nexport function SocialLinks({\n  links: linksProp,\n  email: emailProp,\n  platforms: platformAllow,\n  showEmail,\n  iconClassName = \"h-5 w-5\",\n  itemClassName = DEFAULT_ITEM_CLASS,\n  className = \"flex space-x-4\",\n}: SocialLinksProps) {\n  const { product } = useProduct();\n\n  // Source of truth: prop > product CMS > empty.\n  const links: Record<string, string> = (linksProp ??\n    product?.socialLinks ??\n    {}) as Record<string, string>;\n  // `emailProp === undefined` → fall back to CMS. Explicit `null` from the\n  // caller means \"suppress the mail icon entirely\" — don't fall back. This\n  // matches the documented prop contract.\n  const email: string | null =\n    emailProp !== undefined ? emailProp : (product?.contactEmail ?? null);\n\n  // Normalise CMS keys → canonical platform names, dedupe, preserve URL.\n  // Last-writer-wins on duplicate platforms (alias + canonical both set).\n  // Rejects `javascript:`/`data:`/`vbscript:` URLs as a defense-in-depth XSS\n  // guard — a compromised admin CMS could otherwise inject an active script\n  // into the `href`. Only http(s), mailto, and tel schemes are allowed.\n  const resolved = new Map<SocialPlatform, string>();\n  for (const [rawKey, url] of Object.entries(links)) {\n    if (!url || typeof url !== \"string\") continue;\n    if (!isSafeUrl(url)) continue;\n    const platform = KEY_TO_PLATFORM[rawKey.toLowerCase()];\n    if (!platform) continue; // unknown platform key — silently skip\n    resolved.set(platform, url);\n  }\n\n  // Optional allowlist + ordering. When provided, only render listed\n  // platforms, and in that order. Otherwise render in insertion order\n  // (which mirrors the JSON object key order from the CMS).\n  const orderedPlatforms: SocialPlatform[] = platformAllow\n    ? platformAllow.filter((p) => resolved.has(p))\n    : Array.from(resolved.keys());\n\n  const wantEmail = (showEmail ?? !!email) && !!email;\n\n  // Render nothing at all when no links and no email — caller can render an\n  // empty parent without an extra falsy-guard.\n  if (orderedPlatforms.length === 0 && !wantEmail) return null;\n\n  return (\n    <div className={className}>\n      {orderedPlatforms.map((platform) => {\n        const { Icon, label } = PLATFORMS[platform];\n        const url = resolved.get(platform)!;\n        return (\n          <a\n            key={platform}\n            href={url}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            aria-label={label}\n            className={itemClassName}\n          >\n            <Icon className={iconClassName} />\n          </a>\n        );\n      })}\n      {wantEmail && (\n        <a\n          key=\"email\"\n          href={`mailto:${email}`}\n          aria-label=\"Email\"\n          className={itemClassName}\n        >\n          <Mail className={iconClassName} />\n        </a>\n      )}\n    </div>\n  );\n}\n"]}
+{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/product/product-provider.tsx","../../src/components/social-links.tsx"],"names":["createContext","useContext","jsx"],"mappings":";;;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACAO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAaxB,YAAY,MAAA,EAA4B;AAZxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAQpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAG7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAA,EAAW,KAAK,CAAA;AAAA,EACnD;AAAA;AAAA,EAGA,OAAe,kBAAkB,MAAA,EAAyB;AACxD,IAAA,OAAO,WAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAQ,MAAA,IAAU,OAAO,MAAA,GAAS,GAAA;AAAA,EACxE;AAAA,EAEA,OAAe,MAAM,EAAA,EAA2B;AAC9C,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EACA,SAAA,EAC0D;AAC1D,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAC5D,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAAA,QACzC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,MAAA,EAAQ;AAAA,cACN;AAAA,gBACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,gBACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,WACF;AAAA,UACA,SAAA,EAAW,aAAA,CAAa,iBAAA,CAAkB,QAAA,CAAS,MAAM;AAAA,SAC3D;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,GAAA,EAAM,MAAM,QAAA,CAAS,IAAA,EAAK;AAAA,QAC1B,SAAA,EAAW;AAAA,OACb;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,UACJ,KAAA,YAAiB,KAAA,KAChB,MAAM,IAAA,KAAS,YAAA,IAAgB,WAAW,MAAA,CAAO,OAAA,CAAA;AACpD,MAAA,MAAM,OAAA,GAAU,UACZ,CAAA,wBAAA,EAA2B,SAAS,OACpC,KAAA,YAAiB,KAAA,GACf,MAAM,OAAA,GACN,eAAA;AACN,MAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,OAAO,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,GAAA,EAAK;AAAA,UACH,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,OAAA;AAAA,cACA,UAAA,EAAY,EAAE,IAAA,EAAM,OAAA,GAAU,YAAY,eAAA;AAAgB;AAC5D;AACF,SACF;AAAA;AAAA;AAAA,QAGA,SAAA,EAAW;AAAA,OACb;AAAA,IACF,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EACA,QAAQ,IAAA,EACqB;AAC7B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,aAAA,CAAa,kBAAA;AACxD,IAAA,MAAM,aAAa,KAAA,GACd,IAAA,CAAK,MAAA,CAAO,UAAA,IAAc,cAAa,mBAAA,GACxC,CAAA;AAEJ,IAAA,IAAI,IAAA;AACJ,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,IAAK,UAAA,EAAY,CAAA,EAAA,EAAK;AACpC,MAAA,MAAM,EAAE,GAAA,EAAK,SAAA,EAAU,GAAI,MAAM,IAAA,CAAK,OAAA;AAAA,QACpC,KAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,SAAA,IAAa,CAAA,KAAM,UAAA,EAAY,OAAO,GAAA;AAC3C,MAAA,IAAA,GAAO,GAAA;AAEP,MAAA,MAAM,aAAA,CAAa,KAAA;AAAA,QACjB,cAAa,mBAAA,IAAuB,CAAA,GAAI,CAAA,CAAA,GAAK,IAAA,CAAK,QAAO,GAAI;AAAA,OAC/D;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;AA1LE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AACnC,aAAA,CATW,eASI,oBAAA,EAAqB,IAAA,CAAA;AACpC,aAAA,CAVW,eAUI,qBAAA,EAAsB,CAAA,CAAA;AACrC,aAAA,CAXW,eAWI,qBAAA,EAAsB,GAAA,CAAA;AC5CjB,cAAmC,IAAI;ACqI7D,IAAM,iBAAiBA,aAAAA,CAAmC;AAAA,EACxD,OAAA,EAAS,IAAA;AAAA,EACT,OAAA,EAAS,IAAA;AAAA,EACT,KAAA,EAAO,IAAA;AAAA,EACP,WAAA,EAAa,KAAA;AAAA,EACb,SAAS,MAAM;AAAA,EAAC;AAClB,CAAC,CAAA;AA4GM,SAAS,UAAA,GAAkC;AAChD,EAAA,OAAOC,WAAW,cAAc,CAAA;AAClC;ACtJA,SAAS,WAAA,CAAY,EAAE,SAAA,EAAU,EAA2B;AAC1D,EAAA,uBACEC,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,KAAA;AAAA,MACL,OAAA,EAAQ,WAAA;AAAA,MACR,IAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAM,4BAAA;AAAA,MACN,SAAA;AAAA,MACA,aAAA,EAAY,MAAA;AAAA,MAEZ,QAAA,kBAAAA,GAAAA,CAAC,MAAA,EAAA,EAAK,CAAA,EAAE,kjCAAA,EAAmjC;AAAA;AAAA,GAC7jC;AAEJ;AAEA,SAAS,aAAA,CAAc,EAAE,SAAA,EAAU,EAA2B;AAC5D,EAAA,uBACEA,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,KAAA;AAAA,MACL,OAAA,EAAQ,WAAA;AAAA,MACR,IAAA,EAAK,cAAA;AAAA,MACL,KAAA,EAAM,4BAAA;AAAA,MACN,SAAA;AAAA,MACA,aAAA,EAAY,MAAA;AAAA,MAEZ,QAAA,kBAAAA,GAAAA,CAAC,MAAA,EAAA,EAAK,CAAA,EAAE,kxBAAA,EAAmxB;AAAA;AAAA,GAC7xB;AAEJ;AAWA,IAAM,SAAA,GAAiD;AAAA,EACrD,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,OAAO,aAAA,EAAe,OAAA,EAAS,CAAC,GAAG,CAAA,EAAE;AAAA,EAC/D,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,UAAA,EAAW;AAAA,EAC9C,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAQ,OAAO,QAAA,EAAS;AAAA,EACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,UAAA,EAAW;AAAA,EAC9C,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAAA,EAC3C,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,OAAO,WAAA,EAAY;AAAA,EACjD,OAAA,EAAS,EAAE,IAAA,EAAM,WAAA,EAAa,OAAO,SAAA,EAAU;AAAA,EAC/C,SAAA,EAAW,EAAE,IAAA,EAAM,aAAA,EAAe,OAAO,WAAA;AAC3C,CAAA;AAMA,IAAM,mBAAmD,MAAM;AAC7D,EAAA,MAAM,MAAsC,EAAC;AAC7C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,GAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAG5C;AACH,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,GAAA;AACX,IAAA,KAAA,MAAW,KAAA,IAAS,GAAA,CAAI,OAAA,IAAW,EAAC,EAAG;AACrC,MAAA,GAAA,CAAI,KAAK,CAAA,GAAI,GAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT,CAAA,GAAG;AAEH,IAAM,kBAAA,GACJ,+DAAA;AASF,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAE3B,EAAA,IAAI,QAAA,CAAS,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,OAAO,0BAAA,CAA2B,KAAK,OAAO,CAAA;AAChD;AAMO,SAAS,WAAA,CAAY;AAAA,EAC1B,KAAA,EAAO,SAAA;AAAA,EACP,KAAA,EAAO,SAAA;AAAA,EACP,SAAA,EAAW,aAAA;AAAA,EACX,SAAA;AAAA,EACA,aAAA,GAAgB,SAAA;AAAA,EAChB,aAAA,GAAgB,kBAAA;AAAA,EAChB,SAAA,GAAY;AACd,CAAA,EAAqB;AACnB,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,UAAA,EAAW;AAG/B,EAAA,MAAM,KAAA,GAAiC,SAAA,IACrC,OAAA,EAAS,WAAA,IACT,EAAC;AAIH,EAAA,MAAM,KAAA,GACJ,SAAA,KAAc,MAAA,GAAY,SAAA,GAAa,SAAS,YAAA,IAAgB,IAAA;AAOlE,EAAA,MAAM,QAAA,uBAAe,GAAA,EAA4B;AACjD,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,GAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACjD,IAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACrC,IAAA,IAAI,CAAC,SAAA,CAAU,GAAG,CAAA,EAAG;AACrB,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,MAAA,CAAO,WAAA,EAAa,CAAA;AACrD,IAAA,IAAI,CAAC,QAAA,EAAU;AACf,IAAA,QAAA,CAAS,GAAA,CAAI,UAAU,GAAG,CAAA;AAAA,EAC5B;AAKA,EAAA,MAAM,gBAAA,GAAqC,aAAA,GACvC,aAAA,CAAc,MAAA,CAAO,CAAC,CAAA,KAAM,QAAA,CAAS,GAAA,CAAI,CAAC,CAAC,CAAA,GAC3C,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAE9B,EAAA,MAAM,aAAa,SAAA,IAAa,CAAC,CAAC,KAAA,KAAU,CAAC,CAAC,KAAA;AAI9C,EAAA,IAAI,gBAAA,CAAiB,MAAA,KAAW,CAAA,IAAK,CAAC,WAAW,OAAO,IAAA;AAExD,EAAA,uBACE,IAAA,CAAC,SAAI,SAAA,EACF,QAAA,EAAA;AAAA,IAAA,gBAAA,CAAiB,GAAA,CAAI,CAAC,QAAA,KAAa;AAClC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,UAAU,QAAQ,CAAA;AAC1C,MAAA,MAAM,GAAA,GAAM,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AACjC,MAAA,uBACEA,GAAAA;AAAA,QAAC,GAAA;AAAA,QAAA;AAAA,UAEC,IAAA,EAAM,GAAA;AAAA,UACN,MAAA,EAAO,QAAA;AAAA,UACP,GAAA,EAAI,qBAAA;AAAA,UACJ,YAAA,EAAY,KAAA;AAAA,UACZ,SAAA,EAAW,aAAA;AAAA,UAEX,QAAA,kBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,aAAA,EAAe;AAAA,SAAA;AAAA,QAP3B;AAAA,OAQP;AAAA,IAEJ,CAAC,CAAA;AAAA,IACA,6BACCA,GAAAA;AAAA,MAAC,GAAA;AAAA,MAAA;AAAA,QAEC,IAAA,EAAM,UAAU,KAAK,CAAA,CAAA;AAAA,QACrB,YAAA,EAAW,OAAA;AAAA,QACX,SAAA,EAAW,aAAA;AAAA,QAEX,QAAA,kBAAAA,GAAAA,CAAC,IAAA,EAAA,EAAK,SAAA,EAAW,aAAA,EAAe;AAAA,OAAA;AAAA,MAL5B;AAAA;AAMN,GAAA,EAEJ,CAAA;AAEJ","file":"social-links.mjs","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n  /**\n   * Per-request timeout in ms. Kept below the gateway's operation timeout so a\n   * stalled request surfaces as an error the UI can render, instead of leaving\n   * a page stuck on loading skeletons forever. Default 12000.\n   */\n  timeoutMs?: number;\n  /**\n   * Extra attempts for transient failures (timeout / network / 5xx / 429) on\n   * QUERIES ONLY. Mutations are never retried — a retried contact-form or\n   * waitlist submit would double-submit. Default 1 (2 attempts total).\n   */\n  maxRetries?: number;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n  private static DEFAULT_TIMEOUT_MS = 12_000;\n  private static DEFAULT_MAX_RETRIES = 1;\n  private static RETRY_BASE_DELAY_MS = 400;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    // retry=false: a retried mutation could double-submit (contact form,\n    // waitlist signup, order). Only the timeout applies here.\n    return this.request<T>(mutation, variables, false);\n  }\n\n  /** HTTP statuses worth another attempt — transient server/edge conditions. */\n  private static isRetriableStatus(status: number): boolean {\n    return status === 429 || status === 408 || (status >= 500 && status < 600);\n  }\n\n  private static sleep(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n\n  /**\n   * Perform the HTTP call with a hard timeout. Every outcome resolves to a\n   * GraphQLResponse — callers never hang, so a UI's `loading` state always\n   * settles into data or a renderable error.\n   */\n  private async attempt<T>(\n    query: string,\n    variables: Record<string, unknown> | undefined,\n    timeoutMs: number,\n  ): Promise<{ res: GraphQLResponse<T>; retriable: boolean }> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), timeoutMs);\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          res: {\n            errors: [\n              {\n                message: `HTTP ${response.status}: ${response.statusText}`,\n                extensions: { code: `HTTP_${response.status}` },\n              },\n            ],\n          },\n          retriable: WebSDKClient.isRetriableStatus(response.status),\n        };\n      }\n\n      return {\n        res: (await response.json()) as GraphQLResponse<T>,\n        retriable: false,\n      };\n    } catch (error) {\n      const aborted =\n        error instanceof Error &&\n        (error.name === \"AbortError\" || controller.signal.aborted);\n      const message = aborted\n        ? `Request timed out after ${timeoutMs}ms`\n        : error instanceof Error\n          ? error.message\n          : \"Network error\";\n      console.error(\"[WebSDK] Network error\", message);\n      return {\n        res: {\n          errors: [\n            {\n              message,\n              extensions: { code: aborted ? \"TIMEOUT\" : \"NETWORK_ERROR\" },\n            },\n          ],\n        },\n        // Transport-level failures are worth one more try; a genuine outage\n        // just fails twice quickly and still renders an error state.\n        retriable: true,\n      };\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n    retry = true,\n  ): Promise<GraphQLResponse<T>> {\n    const timeoutMs = this.config.timeoutMs ?? WebSDKClient.DEFAULT_TIMEOUT_MS;\n    const maxRetries = retry\n      ? (this.config.maxRetries ?? WebSDKClient.DEFAULT_MAX_RETRIES)\n      : 0;\n\n    let last: GraphQLResponse<T> | undefined;\n    for (let i = 0; i <= maxRetries; i++) {\n      const { res, retriable } = await this.attempt<T>(\n        query,\n        variables,\n        timeoutMs,\n      );\n      if (!retriable || i === maxRetries) return res;\n      last = res;\n      // Small backoff with jitter so a burst of clients doesn't retry in lockstep.\n      await WebSDKClient.sleep(\n        WebSDKClient.RETRY_BASE_DELAY_MS * (i + 1) + Math.random() * 200,\n      );\n    }\n    return last as GraphQLResponse<T>;\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * Product Provider\n *\n * React context and hooks for accessing product metadata from the global tenant service.\n * Fetches product info (name, logo, SEO, contact, reCAPTCHA key, etc.) on mount\n * and provides it to all child components.\n */\n\"use client\";\n\nimport {\n  createContext,\n  useContext,\n  useState,\n  useLayoutEffect,\n  useCallback,\n  useMemo,\n} from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface ProductData {\n  id: string;\n  name: string;\n  slug: string;\n  description?: string | null;\n  status: string;\n  logoUrl?: string | null;\n  website?: string | null;\n  appUrl?: string | null;\n  docsUrl?: string | null;\n  contactEmail?: string | null;\n  supportEmail?: string | null;\n  contactPhone?: string | null;\n  contactAddress?: string | null;\n  seoTitle?: string | null;\n  seoDescription?: string | null;\n  seoKeywords?: string | null;\n  ogImage?: string | null;\n  socialLinks?: Record<string, string> | null;\n  /**\n   * Resource links for the website footer \"Resources\" column\n   * (JSON: { docs, community, careers, team, companies, ... }).\n   * Same shape as socialLinks. Free-form keys; the ResourceLinks\n   * component renders known keys and silently ignores the rest.\n   * Backed by Product.resourceLinks on the backend (global-tenant-svc).\n   */\n  resourceLinks?: Record<string, string> | null;\n  recaptchaSiteKey?: string | null;\n  rybbitSiteId?: string | null;\n  notificationEmail?: string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface ProductProviderProps {\n  /** Child components */\n  children: ReactNode;\n  /** Optional fallback product data (used while loading) */\n  fallback?: Partial<ProductData>;\n}\n\n// ============================================================================\n// GraphQL Query\n// ============================================================================\n\n/**\n * Body of fields requested for every product fetch — shared by the primary\n * query and the legacy-backend fallback below. Kept as a string fragment\n * (not a real GraphQL `fragment` block) so we can append/strip\n * `resourceLinks` without touching anything else.\n */\nconst PRODUCT_FIELDS_BASE = `\n      id\n      name\n      slug\n      description\n      status\n      logoUrl\n      website\n      appUrl\n      docsUrl\n      contactEmail\n      supportEmail\n      contactPhone\n      contactAddress\n      seoTitle\n      seoDescription\n      seoKeywords\n      ogImage\n      socialLinks\n      recaptchaSiteKey\n      rybbitSiteId\n      notificationEmail\n      metadata\n`;\n\n/**\n * Primary query — includes the recently-added `resourceLinks` field.\n * Backends that have run the corresponding `global-tenant-svc` migration\n * (PR #64) expose this field; older ones don't, in which case\n * GraphQL validation rejects the whole query with\n * `Cannot query field \"resourceLinks\" on type \"PublicProduct\"`. The fetch\n * helper detects that specific error and transparently retries the\n * fallback below, so the SDK works on both pre- and post-migration\n * deployments without consumer-side gating.\n */\nconst PUBLIC_PRODUCT_QUERY = `\n  query PublicProduct($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n      resourceLinks\n    }\n  }\n`;\n\n/**\n * Fallback query for older backend deployments. Identical to the primary\n * minus `resourceLinks`. Consumers see `product.resourceLinks === undefined`\n * and any consumer (e.g. `<ResourceLinks/>`) falls through to prop / default\n * resolution paths.\n */\nconst PUBLIC_PRODUCT_QUERY_FALLBACK = `\n  query PublicProductFallback($slug: String!) {\n    publicProduct(slug: $slug) {\n      ${PRODUCT_FIELDS_BASE}\n    }\n  }\n`;\n\n// ============================================================================\n// Context\n// ============================================================================\n\ninterface ProductContextValue {\n  product: ProductData | null;\n  loading: boolean;\n  error: string | null;\n  hasProvider: boolean;\n  refetch: () => void;\n}\n\nconst ProductContext = createContext<ProductContextValue>({\n  product: null,\n  loading: true,\n  error: null,\n  hasProvider: false,\n  refetch: () => {},\n});\n\n// ============================================================================\n// Provider\n// ============================================================================\n\n/**\n * ProductProvider fetches and provides product metadata to child components.\n * Uses the product slug from WebSDKConfig to fetch from the public API.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={sdkConfig}>\n *   <ProductProvider>\n *     <App />\n *   </ProductProvider>\n * </WebSDKProvider>\n * ```\n */\nexport function ProductProvider({ children, fallback }: ProductProviderProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const [product, setProduct] = useState<ProductData | null>(\n    fallback ? (fallback as ProductData) : null,\n  );\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<string | null>(null);\n  const fetchProduct = useCallback(async () => {\n    if (!config.productSlug) {\n      setLoading(false);\n      return;\n    }\n\n    setLoading(true);\n    setError(null);\n\n    try {\n      let result = await client.query<{ publicProduct: ProductData | null }>(\n        PUBLIC_PRODUCT_QUERY,\n        { slug: config.productSlug },\n      );\n\n      // Backwards-compat fallback: if the backend's `publicProduct` schema\n      // doesn't yet expose `resourceLinks` (deployed before\n      // `global-tenant-svc` PR #64), the primary query fails validation\n      // with a \"Cannot query field …\" error and `result.data` is null.\n      // Retry the fallback query that omits `resourceLinks`; consumers\n      // gracefully see `product.resourceLinks === undefined` and fall\n      // through their own resolution paths.\n      const schemaMissingResourceLinks = result.errors?.some((e) =>\n        /Cannot query field [\"']?resourceLinks[\"']?/i.test(e?.message ?? \"\"),\n      );\n      if (schemaMissingResourceLinks) {\n        result = await client.query<{ publicProduct: ProductData | null }>(\n          PUBLIC_PRODUCT_QUERY_FALLBACK,\n          { slug: config.productSlug },\n        );\n      }\n\n      if (result.errors?.length) {\n        setError(result.errors[0]?.message ?? \"Unknown error\");\n      } else if (result.data?.publicProduct) {\n        setProduct(result.data.publicProduct);\n      }\n    } catch (err) {\n      setError(err instanceof Error ? err.message : \"Failed to fetch product\");\n    } finally {\n      setLoading(false);\n    }\n  }, [client, config.productSlug]);\n\n  // Use useLayoutEffect for earliest possible fetch after commit (before paint).\n  // Runs when slug or client changes. Client-side query cache + dedup ensures\n  // no duplicate network requests even if React StrictMode fires this twice.\n  useLayoutEffect(() => {\n    fetchProduct();\n  }, [fetchProduct]);\n\n  const value = useMemo(\n    () => ({\n      product,\n      loading,\n      error,\n      hasProvider: true,\n      refetch: fetchProduct,\n    }),\n    [product, loading, error, fetchProduct],\n  );\n\n  return (\n    <ProductContext.Provider value={value}>{children}</ProductContext.Provider>\n  );\n}\n\n// ============================================================================\n// Hooks\n// ============================================================================\n\n/**\n * Hook to access the current product data.\n *\n * @example\n * ```tsx\n * const { product, loading } = useProduct();\n * if (loading) return <Loading />;\n * return <h1>{product?.name}</h1>;\n * ```\n */\nexport function useProduct(): ProductContextValue {\n  return useContext(ProductContext);\n}\n\n/**\n * Hook to get product-specific configuration.\n * Merges SDK config with fetched product data.\n * Useful for getting reCAPTCHA keys, analytics IDs, etc.\n *\n * @example\n * ```tsx\n * const { recaptchaSiteKey, rybbitSiteId } = useProductConfig();\n * ```\n */\nexport function useProductConfig(): {\n  recaptchaSiteKey: string | null;\n  rybbitSiteId: string | null;\n  contactEmail: string | null;\n  supportEmail: string | null;\n  notificationEmail: string | null;\n  productName: string | null;\n  logoUrl: string | null;\n} {\n  const { product } = useProduct();\n  const config = useWebSDKConfig();\n\n  return {\n    // Prefer product-level config, fall back to SDK config\n    recaptchaSiteKey:\n      product?.recaptchaSiteKey ?? config.recaptchaSiteKey ?? null,\n    rybbitSiteId: product?.rybbitSiteId ?? config.rybbitSiteId ?? null,\n    contactEmail: product?.contactEmail ?? null,\n    supportEmail: product?.supportEmail ?? null,\n    notificationEmail:\n      product?.notificationEmail ?? product?.contactEmail ?? null,\n    productName: product?.name ?? null,\n    logoUrl: product?.logoUrl ?? null,\n  };\n}\n","\"use client\";\n\n/**\n * SocialLinks Component\n *\n * Renders a row of social-media icons sourced from the **product CMS**.\n * The `socialLinks` field on `Product` (and `PublicProduct`) is a free-form\n * JSON record: `{ twitter, github, linkedin, facebook, youtube, instagram,\n * discord, pinterest, … }`. The admin sets per-product URLs in\n * `microfe-product → Products → <product>`; this component reads them via\n * `useProduct()` and renders icons for the platforms we know how to map.\n *\n * Unknown keys are **silently ignored** — the schema accepts any string key\n * so new platforms can be wired in admin without an SDK change, but they\n * won't render until this map grows.\n *\n * Why a component instead of inlining in each product website's Footer\n *\n * - Single source of truth for the platform → icon mapping.\n * - One swap to add a new platform (e.g. Threads, Bluesky) across all 5\n *   product websites.\n * - Eliminates the drift today between hard-coded URLs and CMS values\n *   (e.g. vibecontrols-website Footer had `twitter.com/vibecontrols`\n *   hard-coded while CMS had `twitter.com/burdenoff`).\n *\n * @example\n * ```tsx\n * import { SocialLinks } from '@burdenoff/website-sdk'\n *\n * // Auto-derives from useProduct().product.socialLinks\n * <SocialLinks />\n *\n * // Or pass explicitly\n * <SocialLinks\n *   links={{ twitter: 'https://twitter.com/example', github: 'https://github.com/example' }}\n *   email=\"contact@example.com\"\n * />\n *\n * // Restrict + reorder\n * <SocialLinks platforms={['github', 'twitter', 'linkedin']} />\n * ```\n */\n\nimport { type ComponentType } from \"react\";\n\nimport {\n  Facebook,\n  Github,\n  Instagram,\n  Linkedin,\n  Mail,\n  Twitter,\n  Youtube,\n} from \"lucide-react\";\n\nimport { useProduct } from \"../product/product-provider\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Platform keys the component knows how to render. Extends as we add icons.\n * Note: this is intentionally a small allowlist; the CMS JSON schema is\n * open-ended and the component silently skips unknown keys.\n */\nexport type SocialPlatform =\n  | \"twitter\"\n  | \"linkedin\"\n  | \"github\"\n  | \"facebook\"\n  | \"youtube\"\n  | \"instagram\"\n  | \"discord\"\n  | \"pinterest\";\n\nexport interface SocialLinksProps {\n  /**\n   * Map of platform → URL. If unset, reads from `useProduct().product.socialLinks`.\n   * Useful for passing static config when there's no `<ProductProvider>` upstream.\n   */\n  links?: Record<string, string> | null;\n  /**\n   * Contact email — renders a Mail icon linking to `mailto:…`. If unset,\n   * reads from `useProduct().product.contactEmail`. Pass `null` to suppress.\n   */\n  email?: string | null;\n  /**\n   * Allowlist + ORDER of platforms to render. Defaults to the natural CMS\n   * order (whatever the JSON returns). Use this to pin a stable visual order\n   * across products that may have different platform sets.\n   */\n  platforms?: readonly SocialPlatform[];\n  /** Whether to render the Mail icon for `email`. Default: `true` when an email is available. */\n  showEmail?: boolean;\n  /** Tailwind class controlling icon size. Default: `\"h-5 w-5\"`. */\n  iconClassName?: string;\n  /** Tailwind class for each `<a>` wrapping link. Defaults to a muted-foreground / hover-foreground transition. */\n  itemClassName?: string;\n  /** Tailwind class for the outer container. Default: `\"flex space-x-4\"`. */\n  className?: string;\n}\n\n// ============================================================================\n// Platform → icon map\n// ============================================================================\n\n/**\n * Custom inline SVG for platforms not covered by lucide-react.\n * Stays minimal — single-path icons keep bundle size tight.\n */\nfunction DiscordIcon({ className }: { className?: string }) {\n  return (\n    <svg\n      role=\"img\"\n      viewBox=\"0 0 24 24\"\n      fill=\"currentColor\"\n      xmlns=\"http://www.w3.org/2000/svg\"\n      className={className}\n      aria-hidden=\"true\"\n    >\n      <path d=\"M20.317 4.369A19.79 19.79 0 0 0 16.558 3a.075.075 0 0 0-.079.037c-.34.6-.717 1.382-.98 1.99a18.27 18.27 0 0 0-5.998 0 12.51 12.51 0 0 0-.99-1.99.077.077 0 0 0-.079-.037 19.74 19.74 0 0 0-3.76 1.369.07.07 0 0 0-.032.028C.533 8.045-.32 11.6.099 15.114a.082.082 0 0 0 .031.056 19.9 19.9 0 0 0 5.993 3.03.078.078 0 0 0 .084-.027 14.09 14.09 0 0 0 1.226-1.994.076.076 0 0 0-.041-.105 13.1 13.1 0 0 1-1.872-.892.077.077 0 0 1-.008-.128c.126-.094.252-.192.372-.291a.074.074 0 0 1 .078-.01c3.927 1.793 8.18 1.793 12.061 0a.074.074 0 0 1 .079.009c.12.099.246.198.372.292a.077.077 0 0 1-.006.127 12.3 12.3 0 0 1-1.873.892.077.077 0 0 0-.041.106c.36.698.772 1.362 1.225 1.993a.076.076 0 0 0 .084.028 19.84 19.84 0 0 0 6.002-3.03.077.077 0 0 0 .032-.055c.5-4.063-.838-7.587-3.549-10.717a.061.061 0 0 0-.031-.028zM8.02 13.001c-1.182 0-2.157-1.085-2.157-2.419 0-1.333.956-2.418 2.157-2.418 1.21 0 2.176 1.094 2.157 2.418 0 1.334-.956 2.419-2.157 2.419zm7.974 0c-1.182 0-2.157-1.085-2.157-2.419 0-1.333.956-2.418 2.157-2.418 1.21 0 2.176 1.094 2.157 2.418 0 1.334-.946 2.419-2.157 2.419z\" />\n    </svg>\n  );\n}\n\nfunction PinterestIcon({ className }: { className?: string }) {\n  return (\n    <svg\n      role=\"img\"\n      viewBox=\"0 0 24 24\"\n      fill=\"currentColor\"\n      xmlns=\"http://www.w3.org/2000/svg\"\n      className={className}\n      aria-hidden=\"true\"\n    >\n      <path d=\"M12.017 0C5.396 0 .029 5.367.029 11.987c0 5.079 3.158 9.417 7.618 11.162-.105-.949-.199-2.403.041-3.439.219-.937 1.406-5.957 1.406-5.957s-.359-.72-.359-1.781c0-1.663.967-2.911 2.168-2.911 1.024 0 1.518.769 1.518 1.688 0 1.029-.653 2.567-.992 3.992-.285 1.193.6 2.165 1.775 2.165 2.128 0 3.768-2.245 3.768-5.487 0-2.861-2.063-4.869-5.008-4.869-3.41 0-5.409 2.562-5.409 5.199 0 1.033.394 2.143.889 2.741.099.12.112.225.085.345-.09.375-.293 1.199-.334 1.363-.053.225-.172.271-.401.165-1.495-.69-2.433-2.878-2.433-4.646 0-3.776 2.748-7.252 7.92-7.252 4.158 0 7.392 2.967 7.392 6.923 0 4.135-2.607 7.462-6.233 7.462-1.214 0-2.357-.629-2.75-1.378l-.748 2.853c-.271 1.043-1.002 2.35-1.492 3.146C9.57 23.812 10.763 24 12.017 24c6.624 0 11.99-5.367 11.99-11.987C24.007 5.367 18.641 0 12.017 0z\" />\n    </svg>\n  );\n}\n\ninterface PlatformDef {\n  /** lucide-react component or custom SVG component */\n  Icon: ComponentType<{ className?: string }>;\n  /** Accessible label for the link */\n  label: string;\n  /** Optional alias keys that should also resolve to this platform */\n  aliases?: readonly string[];\n}\n\nconst PLATFORMS: Record<SocialPlatform, PlatformDef> = {\n  twitter: { Icon: Twitter, label: \"Twitter / X\", aliases: [\"x\"] },\n  linkedin: { Icon: Linkedin, label: \"LinkedIn\" },\n  github: { Icon: Github, label: \"GitHub\" },\n  facebook: { Icon: Facebook, label: \"Facebook\" },\n  youtube: { Icon: Youtube, label: \"YouTube\" },\n  instagram: { Icon: Instagram, label: \"Instagram\" },\n  discord: { Icon: DiscordIcon, label: \"Discord\" },\n  pinterest: { Icon: PinterestIcon, label: \"Pinterest\" },\n};\n\n/**\n * Build a `key → SocialPlatform` lookup so aliases (e.g. `\"x\"` → `\"twitter\"`)\n * resolve in O(1). Memoised at module scope; never recomputed.\n */\nconst KEY_TO_PLATFORM: Record<string, SocialPlatform> = (() => {\n  const map: Record<string, SocialPlatform> = {};\n  for (const [key, def] of Object.entries(PLATFORMS) as [\n    SocialPlatform,\n    PlatformDef,\n  ][]) {\n    map[key] = key;\n    for (const alias of def.aliases ?? []) {\n      map[alias] = key;\n    }\n  }\n  return map;\n})();\n\nconst DEFAULT_ITEM_CLASS =\n  \"text-muted-foreground hover:text-foreground transition-colors\";\n\n/**\n * Defense-in-depth XSS guard. Only http(s), mailto, and tel URLs are allowed\n * through to a rendered `href`; anything else (notably `javascript:`,\n * `data:`, `vbscript:`) is rejected and the link is silently skipped. Inputs\n * are admin-controlled today, but treating the URL field as untrusted is\n * cheap and matches the wider Burdenoff posture.\n */\nfunction isSafeUrl(value: string): boolean {\n  const trimmed = value.trim();\n  // Relative URLs (no scheme) are safe — browser treats them as same-origin.\n  if (/^[/?#]/.test(trimmed)) return true;\n  return /^(https?:|mailto:|tel:)/i.test(trimmed);\n}\n\n// ============================================================================\n// Component\n// ============================================================================\n\nexport function SocialLinks({\n  links: linksProp,\n  email: emailProp,\n  platforms: platformAllow,\n  showEmail,\n  iconClassName = \"h-5 w-5\",\n  itemClassName = DEFAULT_ITEM_CLASS,\n  className = \"flex space-x-4\",\n}: SocialLinksProps) {\n  const { product } = useProduct();\n\n  // Source of truth: prop > product CMS > empty.\n  const links: Record<string, string> = (linksProp ??\n    product?.socialLinks ??\n    {}) as Record<string, string>;\n  // `emailProp === undefined` → fall back to CMS. Explicit `null` from the\n  // caller means \"suppress the mail icon entirely\" — don't fall back. This\n  // matches the documented prop contract.\n  const email: string | null =\n    emailProp !== undefined ? emailProp : (product?.contactEmail ?? null);\n\n  // Normalise CMS keys → canonical platform names, dedupe, preserve URL.\n  // Last-writer-wins on duplicate platforms (alias + canonical both set).\n  // Rejects `javascript:`/`data:`/`vbscript:` URLs as a defense-in-depth XSS\n  // guard — a compromised admin CMS could otherwise inject an active script\n  // into the `href`. Only http(s), mailto, and tel schemes are allowed.\n  const resolved = new Map<SocialPlatform, string>();\n  for (const [rawKey, url] of Object.entries(links)) {\n    if (!url || typeof url !== \"string\") continue;\n    if (!isSafeUrl(url)) continue;\n    const platform = KEY_TO_PLATFORM[rawKey.toLowerCase()];\n    if (!platform) continue; // unknown platform key — silently skip\n    resolved.set(platform, url);\n  }\n\n  // Optional allowlist + ordering. When provided, only render listed\n  // platforms, and in that order. Otherwise render in insertion order\n  // (which mirrors the JSON object key order from the CMS).\n  const orderedPlatforms: SocialPlatform[] = platformAllow\n    ? platformAllow.filter((p) => resolved.has(p))\n    : Array.from(resolved.keys());\n\n  const wantEmail = (showEmail ?? !!email) && !!email;\n\n  // Render nothing at all when no links and no email — caller can render an\n  // empty parent without an extra falsy-guard.\n  if (orderedPlatforms.length === 0 && !wantEmail) return null;\n\n  return (\n    <div className={className}>\n      {orderedPlatforms.map((platform) => {\n        const { Icon, label } = PLATFORMS[platform];\n        const url = resolved.get(platform)!;\n        return (\n          <a\n            key={platform}\n            href={url}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            aria-label={label}\n            className={itemClassName}\n          >\n            <Icon className={iconClassName} />\n          </a>\n        );\n      })}\n      {wantEmail && (\n        <a\n          key=\"email\"\n          href={`mailto:${email}`}\n          aria-label=\"Email\"\n          className={itemClassName}\n        >\n          <Mail className={iconClassName} />\n        </a>\n      )}\n    </div>\n  );\n}\n"]}

package/dist/components/unsubscribe.js

@@ -121,9 +121,23 @@ var _WebSDKClient = class _WebSDKClient {
    * Execute a GraphQL mutation
    */
   async mutate(mutation, variables) {
-    return this.request(mutation, variables);
+    return this.request(mutation, variables, false);
   }
-  async request(query, variables) {
+  /** HTTP statuses worth another attempt — transient server/edge conditions. */
+  static isRetriableStatus(status) {
+    return status === 429 || status === 408 || status >= 500 && status < 600;
+  }
+  static sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+  }
+  /**
+   * Perform the HTTP call with a hard timeout. Every outcome resolves to a
+   * GraphQLResponse — callers never hang, so a UI's `loading` state always
+   * settles into data or a renderable error.
+   */
+  async attempt(query, variables, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
       const response = await fetch(this.config.gatewayUrl, {
         method: "POST",
@@ -132,7 +146,8 @@ var _WebSDKClient = class _WebSDKClient {
           "x-product-id": this.config.productId,
           ...this.config.headers
         },
-        body: JSON.stringify({ query, variables })
+        body: JSON.stringify({ query, variables }),
+        signal: controller.signal
       });
       if (!response.ok) {
         console.error(
@@ -141,34 +156,67 @@ var _WebSDKClient = class _WebSDKClient {
           response.statusText
         );
         return {
-          errors: [
-            {
-              message: `HTTP ${response.status}: ${response.statusText}`,
-              extensions: { code: `HTTP_${response.status}` }
-            }
-          ]
+          res: {
+            errors: [
+              {
+                message: `HTTP ${response.status}: ${response.statusText}`,
+                extensions: { code: `HTTP_${response.status}` }
+              }
+            ]
+          },
+          retriable: _WebSDKClient.isRetriableStatus(response.status)
         };
       }
-      return await response.json();
+      return {
+        res: await response.json(),
+        retriable: false
+      };
     } catch (error) {
-      console.error(
-        "[WebSDK] Network error",
-        error instanceof Error ? error.message : "unknown error"
-      );
+      const aborted = error instanceof Error && (error.name === "AbortError" || controller.signal.aborted);
+      const message = aborted ? `Request timed out after ${timeoutMs}ms` : error instanceof Error ? error.message : "Network error";
+      console.error("[WebSDK] Network error", message);
       return {
-        errors: [
-          {
-            message: error instanceof Error ? error.message : "Network error",
-            extensions: { code: "NETWORK_ERROR" }
-          }
-        ]
+        res: {
+          errors: [
+            {
+              message,
+              extensions: { code: aborted ? "TIMEOUT" : "NETWORK_ERROR" }
+            }
+          ]
+        },
+        // Transport-level failures are worth one more try; a genuine outage
+        // just fails twice quickly and still renders an error state.
+        retriable: true
       };
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  async request(query, variables, retry = true) {
+    const timeoutMs = this.config.timeoutMs ?? _WebSDKClient.DEFAULT_TIMEOUT_MS;
+    const maxRetries = retry ? this.config.maxRetries ?? _WebSDKClient.DEFAULT_MAX_RETRIES : 0;
+    let last;
+    for (let i = 0; i <= maxRetries; i++) {
+      const { res, retriable } = await this.attempt(
+        query,
+        variables,
+        timeoutMs
+      );
+      if (!retriable || i === maxRetries) return res;
+      last = res;
+      await _WebSDKClient.sleep(
+        _WebSDKClient.RETRY_BASE_DELAY_MS * (i + 1) + Math.random() * 200
+      );
     }
+    return last;
   }
 };
 __publicField(_WebSDKClient, "CACHE_TTL", 5 * 60 * 1e3);
 // 5 minutes
 __publicField(_WebSDKClient, "MAX_CACHE_ENTRIES", 100);
+__publicField(_WebSDKClient, "DEFAULT_TIMEOUT_MS", 12e3);
+__publicField(_WebSDKClient, "DEFAULT_MAX_RETRIES", 1);
+__publicField(_WebSDKClient, "RETRY_BASE_DELAY_MS", 400);
 var WebSDKContext = React.createContext(null);
 function useWebSDK() {
   const client = React.useContext(WebSDKContext);

package/dist/components/unsubscribe.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/seo/page-head.tsx","../../src/utils/cn.ts","../../src/ui/button.tsx","../../src/components/unsubscribe.tsx"],"names":["createContext","useContext","Helmet","jsx","twMerge","clsx","cva","React","Slot","useState","useEffect","toast","jsxs"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACZO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAUxB,YAAY,MAAA,EAA4B;AATxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAKpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAS,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW;AAAA,OAC1C,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,cACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,SACF;AAAA,MACF;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,wBAAA;AAAA,QACA,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN;AAAA,YACE,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA;AAAA,YAClD,UAAA,EAAY,EAAE,IAAA,EAAM,eAAA;AAAgB;AACtC;AACF,OACF;AAAA,IACF;AAAA,EACF;AACF,CAAA;AAtHE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AC7BrC,IAAM,aAAA,GAAgBA,oBAAmC,IAAI,CAAA;AAyCtD,SAAS,SAAA,GAA0B;AACxC,EAAA,MAAM,MAAA,GAASC,iBAAW,aAAa,CAAA;AACvC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,EAClE;AACA,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,eAAA,GAAsC;AACpD,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,OAAO,SAAA,EAAU;AAC1B;ACLO,SAAS,QAAA,CAAS;AAAA,EACvB,KAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA,GAAS,8EAAA;AAAA,EACT,MAAA,GAAS,OAAA;AAAA,EACT,aAAA;AAAA,EACA,UAAA,GAAa,SAAA;AAAA,EACb,cAAA;AAAA,EACA;AACF,CAAA,EAAkB;AAChB,EAAA,MAAM,SAAA,GACJ,WAAA,IAAe,CAAC,KAAA,CAAM,QAAA,CAAS,WAAW,CAAA,GACtC,CAAA,EAAG,KAAK,CAAA,GAAA,EAAM,WAAW,CAAA,CAAA,GACzB,KAAA;AAEN,EAAA,MAAM,eACJ,KAAA,IAAS,CAAC,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA,IAAK,GAAA,GAClC,CAAA,EAAG,GAAA,CAAI,QAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,EAAG,KAAK,CAAA,CAAA,GACjC,KAAA;AAGN,EAAA,MAAM,mBAAA,GAAsD,cAAA,GACxD,KAAA,CAAM,OAAA,CAAQ,cAAc,IAC1B,cAAA,GACA,CAAC,cAAc,CAAA,GACjB,EAAC;AAEL,EAAA,uCACGC,uBAAA,EAAA,EAEC,QAAA,EAAA;AAAA,oBAAAC,cAAAA,CAAC,WAAO,QAAA,EAAA,SAAA,EAAU,CAAA;AAAA,oBAClBA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,OAAA,EAAQ,SAAS,SAAA,EAAW,CAAA;AAAA,IACtC,+BAAeA,cAAAA,CAAC,UAAK,IAAA,EAAK,aAAA,EAAc,SAAS,WAAA,EAAa,CAAA;AAAA,IAC9D,4BAAYA,cAAAA,CAAC,UAAK,IAAA,EAAK,UAAA,EAAW,SAAS,QAAA,EAAU,CAAA;AAAA,oBACtDA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,QAAA,EAAS,SAAQ,wCAAA,EAAyC,CAAA;AAAA,oBACrEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,QAAA,EAAS,SAAS,MAAA,EAAQ,CAAA;AAAA,IAGpC,uBAAOA,cAAAA,CAAC,UAAK,GAAA,EAAI,WAAA,EAAY,MAAM,GAAA,EAAK,CAAA;AAAA,IAGxC,2BAAWA,cAAAA,CAAC,UAAK,GAAA,EAAI,MAAA,EAAO,MAAM,OAAA,EAAS,CAAA;AAAA,oBAG5CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,SAAA,EAAU,SAAQ,SAAA,EAAU,CAAA;AAAA,oBAC3CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,UAAA,EAAW,SAAS,SAAA,EAAW,CAAA;AAAA,IAC7C,+BAAeA,cAAAA,CAAC,UAAK,QAAA,EAAS,gBAAA,EAAiB,SAAS,WAAA,EAAa,CAAA;AAAA,IACrE,gCAAgBA,cAAAA,CAAC,UAAK,QAAA,EAAS,UAAA,EAAW,SAAS,YAAA,EAAc,CAAA;AAAA,IACjE,uBAAOA,cAAAA,CAAC,UAAK,QAAA,EAAS,QAAA,EAAS,SAAS,GAAA,EAAK,CAAA;AAAA,oBAC9CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,WAAA,EAAY,SAAS,MAAA,EAAQ,CAAA;AAAA,IAC3C,+BAAeA,cAAAA,CAAC,UAAK,QAAA,EAAS,cAAA,EAAe,SAAS,WAAA,EAAa,CAAA;AAAA,oBAGpEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,cAAA,EAAe,SAAQ,qBAAA,EAAsB,CAAA;AAAA,oBACxDA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,eAAA,EAAgB,SAAS,SAAA,EAAW,CAAA;AAAA,IAC9C,+BAAeA,cAAAA,CAAC,UAAK,IAAA,EAAK,qBAAA,EAAsB,SAAS,WAAA,EAAa,CAAA;AAAA,IACtE,gCAAgBA,cAAAA,CAAC,UAAK,IAAA,EAAK,eAAA,EAAgB,SAAS,YAAA,EAAc,CAAA;AAAA,IAClE,iCAAiBA,cAAAA,CAAC,UAAK,IAAA,EAAK,iBAAA,EAAkB,SAAS,aAAA,EAAe,CAAA;AAAA,oBAGvEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,aAAA,EAAc,SAAS,UAAA,EAAY,CAAA;AAAA,IAG7C,oBAAoB,GAAA,CAAI,CAAC,IAAA,EAAM,KAAA,qBAC9BA,cAAAA,CAAC,QAAA,EAAA,EAA2B,IAAA,EAAK,qBAAA,EAC9B,eAAK,SAAA,CAAU,IAAI,KADT,CAAA,GAAA,EAAM,KAAK,EAExB,CACD,CAAA;AAAA,IAGA,cAAA,EAAgB,GAAA,CAAI,CAAC,IAAA,EAAM,0BAC1BA,cAAAA;AAAA,MAAC,MAAA;AAAA,MAAA;AAAA,QAEE,GAAI,KAAK,IAAA,GAAO,EAAE,MAAM,IAAA,CAAK,IAAA,KAAS,EAAC;AAAA,QACvC,GAAI,KAAK,QAAA,GAAW,EAAE,UAAU,IAAA,CAAK,QAAA,KAAa,EAAC;AAAA,QACpD,SAAS,IAAA,CAAK;AAAA,OAAA;AAAA,MAHT,QAAQ,KAAK,CAAA;AAAA,KAKrB;AAAA,GAAA,EACH,CAAA;AAEJ;ACjIO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAOC,qBAAA,CAAQC,SAAA,CAAK,MAAM,CAAC,CAAA;AAC7B;ACdA,IAAM,cAAA,GAAiBC,0BAAA;AAAA,EACrB,uSAAA;AAAA,EACA;AAAA,IACE,QAAA,EAAU;AAAA,MACR,OAAA,EAAS;AAAA,QACP,OAAA,EACE,+DAAA;AAAA,QACF,WAAA,EACE,8EAAA;AAAA,QACF,OAAA,EACE,0FAAA;AAAA,QACF,SAAA,EACE,wEAAA;AAAA,QACF,KAAA,EAAO,8CAAA;AAAA,QACP,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAA,EAAS,eAAA;AAAA,QACT,EAAA,EAAI,6BAAA;AAAA,QACJ,EAAA,EAAI,sBAAA;AAAA,QACJ,IAAA,EAAM;AAAA;AACR,KACF;AAAA,IACA,eAAA,EAAiB;AAAA,MACf,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ,CAAA;AASA,IAAM,MAAA,GAAeC,gBAAA,CAAA,UAAA;AAAA,EACnB,CAAC,EAAE,SAAA,EAAW,OAAA,EAAS,IAAA,EAAM,UAAU,KAAA,EAAO,GAAG,KAAA,EAAM,EAAG,GAAA,KAAQ;AAChE,IAAA,MAAM,IAAA,GAAO,UAAUC,cAAA,GAAO,QAAA;AAC9B,IAAA,uBACEL,cAAAA;AAAA,MAAC,IAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAW,GAAG,cAAA,CAAe,EAAE,SAAS,IAAA,EAAM,SAAA,EAAW,CAAC,CAAA;AAAA,QAC1D,GAAA;AAAA,QACC,GAAG;AAAA;AAAA,KACN;AAAA,EAEJ;AACF,CAAA;AACA,MAAA,CAAO,WAAA,GAAc,QAAA;AC1CrB,IAAM,oBAAA;AAAA;AAAA,EAAqC;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAgCpC,SAAS,eAAA,CAAgB;AAAA,EAC9B,WAAA;AAAA,EACA,SAAA,GAAY,EAAA;AAAA,EACZ,QAAA,GAAW,6BAAA;AAAA,EACX,cAAA,GAAiB,kDAAA;AAAA,EACjB,cAAA;AAAA,EACA,cAAA,GAAiB,8DAAA;AAAA,EACjB,YAAA,GAAe;AACjB,CAAA,EAAyB;AACvB,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,SAAS,eAAA,EAAgB;AAC/B,EAAA,MAAM,WAAA,GAAc,eAAe,MAAA,CAAO,SAAA;AAE1C,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIM,eAA2B,SAAS,CAAA;AAC9D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIA,eAAiB,cAAc,CAAA;AAErE,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,MAAA,CAAO,SAAS,MAAM,CAAA;AACzD,IAAA,MAAM,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAC5B,IAAA,IAAI,CAAA,EAAG;AACL,MAAA,QAAA,CAAS,CAAC,CAAA;AACV,MAAA,QAAA,CAAS,YAAY,CAAA;AAAA,IACvB,CAAA,MAAO;AACL,MAAA,QAAA,CAAS,SAAS,CAAA;AAAA,IACpB;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,oBAAoB,YAAY;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,IAAA,QAAA,CAAS,YAAY,CAAA;AAErB,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,OAEzB,oBAAA,EAAsB,EAAE,OAAO,CAAA;AAElC,MAAA,IAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzB,QAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,CAAC,GAAG,OAAA,IAAW,YAAA;AAC5C,QAAA,MAAM,IAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,CAAC,GACzB,UAAA,EAAY,IAAA;AAEhB,QAAA,IAAI,SAAS,sBAAA,EAAwB;AACnC,UAAAC,YAAA,CAAM,KAAK,oDAAoD,CAAA;AAC/D,UAAA,cAAA,CAAe,qDAAqD,CAAA;AACpE,UAAA,QAAA,CAAS,SAAS,CAAA;AAClB,UAAA;AAAA,QACF,CAAA,MAAA,IAAW,SAAS,2BAAA,EAA6B;AAC/C,UAAA,QAAA;AAAA,YACE;AAAA,WACF;AAAA,QACF,CAAA,MAAA,IAAW,SAAS,2BAAA,EAA6B;AAC/C,UAAA,QAAA,CAAS,SAAS,CAAA;AAClB,UAAA;AAAA,QACF,CAAA,MAAO;AACL,UAAA,QAAA,CAAS,MAAM,CAAA;AAAA,QACjB;AACA,QAAA,QAAA,CAAS,OAAO,CAAA;AAChB,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,MAAA,CAAO,MAAM,wBAAA,EAA0B;AACzC,QAAA,cAAA,CAAe,cAAc,CAAA;AAC7B,QAAA,QAAA,CAAS,SAAS,CAAA;AAClB,QAAAA,YAAA,CAAM,QAAQ,2BAA2B,CAAA;AAAA,MAC3C,CAAA,MAAO;AACL,QAAA,QAAA,CAAS,YAAY,CAAA;AACrB,QAAA,QAAA,CAAS,OAAO,CAAA;AAAA,MAClB;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,CAAS,YAAY,CAAA;AACrB,MAAA,QAAA,CAAS,OAAO,CAAA;AAAA,IAClB;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACL,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS,MAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,OAAA,EAAS;AAAA,OACX;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAT,cAAAA,CAAC,QAAA,EAAA,EAAS,KAAA,EAAO,QAAA,EAAU,aAAa,cAAA,EAAgB,CAAA;AAAA,wBAExDS,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAEZ,QAAA,EAAA;AAAA,UAAA,KAAA,KAAU,SAAA,oBACTA,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,eAAA,EACb,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wCAAA,EAAyC,CAAA;AAAA,4BACxDA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mCAAA,EAAoC;AAAA,WAAA,EACrD,CAAA;AAAA,UAID,KAAA,KAAU,YAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,6BAAA,EAExD,CAAA;AAAA,4BACAS,eAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,4BAAA,EAA6B,QAAA,EAAA;AAAA,cAAA,4CAAA;AAAA,cACG,WAAA;AAAA,cAAa,GAAA;AAAA,cAAI;AAAA,aAAA,EAE9D,CAAA;AAAA,4BACAA,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,gDAAA,EACb,QAAA,EAAA;AAAA,8BAAAT,cAAAA;AAAA,gBAAC,MAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,iBAAA;AAAA,kBACT,OAAA,EAAQ,aAAA;AAAA,kBACR,SAAA,EAAU,MAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA,eAED;AAAA,cACC,kCACCA,cAAAA;AAAA,gBAAC,MAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAQ,SAAA;AAAA,kBACR,SAAS,MAAM;AACb,oBAAA,MAAA,CAAO,SAAS,IAAA,GAAO,cAAA;AAAA,kBACzB,CAAA;AAAA,kBACA,SAAA,EAAU,MAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA;AAED,aAAA,EAEJ;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,YAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+EAAA,EACb,QAAA,kBAAAS,eAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBAER,QAAA,EAAA;AAAA,kCAAAT,cAAAA;AAAA,oBAAC,QAAA;AAAA,oBAAA;AAAA,sBACC,SAAA,EAAU,YAAA;AAAA,sBACV,EAAA,EAAG,IAAA;AAAA,sBACH,EAAA,EAAG,IAAA;AAAA,sBACH,CAAA,EAAE,IAAA;AAAA,sBACF,MAAA,EAAO,cAAA;AAAA,sBACP,WAAA,EAAY;AAAA;AAAA,mBACd;AAAA,kCACAA,cAAAA;AAAA,oBAAC,MAAA;AAAA,oBAAA;AAAA,sBACC,SAAA,EAAU,YAAA;AAAA,sBACV,IAAA,EAAK,cAAA;AAAA,sBACL,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,kBAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,yBAAwB,QAAA,EAAA,4CAAA,EAErC;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,SAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,2BAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,8BAA8B,QAAA,EAAA,WAAA,EAAY,CAAA;AAAA,YACtD,cAAA,oBACCS,eAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,+BAAA,EAAgC,QAAA,EAAA;AAAA,cAAA,oBAAA;AAAA,cACxB,GAAA;AAAA,8BACnBT,cAAAA;AAAA,gBAAC,GAAA;AAAA,gBAAA;AAAA,kBACC,IAAA,EAAM,cAAA;AAAA,kBACN,SAAA,EAAU,2CAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA;AAED,aAAA,EACF;AAAA,WAAA,EAEJ,CAAA;AAAA,UAID,KAAA,KAAU,OAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,wCAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,oBAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,8BAA8B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,4BACjDA,cAAAA,CAAC,MAAA,EAAA,EAAO,OAAA,EAAS,MAAM,SAAS,YAAY,CAAA,EAAG,OAAA,EAAQ,SAAA,EAAU,QAAA,EAAA,WAAA,EAEjE;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,SAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,uBAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,0BAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,yBAAwB,QAAA,EAAA,0HAAA,EAGrC;AAAA,WAAA,EACF;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ","file":"unsubscribe.js","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    return this.request<T>(mutation, variables);\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          errors: [\n            {\n              message: `HTTP ${response.status}: ${response.statusText}`,\n              extensions: { code: `HTTP_${response.status}` },\n            },\n          ],\n        };\n      }\n\n      return (await response.json()) as GraphQLResponse<T>;\n    } catch (error) {\n      console.error(\n        \"[WebSDK] Network error\",\n        error instanceof Error ? error.message : \"unknown error\",\n      );\n      return {\n        errors: [\n          {\n            message: error instanceof Error ? error.message : \"Network error\",\n            extensions: { code: \"NETWORK_ERROR\" },\n          },\n        ],\n      };\n    }\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * PageHead Component\n * Manages dynamic meta tags for SEO optimization on a per-page basis.\n * Supports JSON-LD structured data, Open Graph, Twitter Cards, favicons, and robots directives.\n *\n * @example\n * ```tsx\n * <PageHead\n *   title=\"About Us\"\n *   description=\"Learn about our mission and team\"\n *   productName=\"MyProduct\"\n *   keywords=\"about, team, mission\"\n *   image=\"/og-about.png\"\n *   url=\"https://myproduct.com/about\"\n *   favicon=\"/favicon.ico\"\n *   robots=\"index, follow\"\n *   locale=\"en_US\"\n *   twitterHandle=\"@burdenoff\"\n *   themeColor=\"#1a1a2e\"\n *   structuredData={{\n *     \"@context\": \"https://schema.org\",\n *     \"@type\": \"WebPage\",\n *     name: \"About Us\",\n *   }}\n * />\n * ```\n */\n\nimport { Helmet } from \"react-helmet-async\";\n\nexport interface PageHeadProps {\n  /** Page title */\n  title: string;\n  /** Meta description */\n  description?: string;\n  /** Product/brand name (appended to title) */\n  productName?: string;\n  /** SEO keywords */\n  keywords?: string;\n  /** Open Graph image URL */\n  image?: string;\n  /** Page canonical URL */\n  url?: string;\n  /** Favicon URL */\n  favicon?: string;\n  /** Robots directive (e.g., \"index, follow\") */\n  robots?: string;\n  /** Open Graph locale (e.g., \"en_US\") */\n  locale?: string;\n  /** Twitter handle (e.g., \"@burdenoff\") */\n  twitterHandle?: string;\n  /** Theme color for mobile browsers */\n  themeColor?: string;\n  /** JSON-LD structured data objects */\n  structuredData?: Record<string, unknown> | Array<Record<string, unknown>>;\n  /** Additional meta tags */\n  additionalMeta?: Array<{\n    name?: string;\n    property?: string;\n    content: string;\n  }>;\n}\n\nexport function PageHead({\n  title,\n  description,\n  productName,\n  keywords,\n  image,\n  url,\n  favicon,\n  robots = \"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\",\n  locale = \"en_US\",\n  twitterHandle,\n  themeColor = \"#000000\",\n  structuredData,\n  additionalMeta,\n}: PageHeadProps) {\n  const fullTitle =\n    productName && !title.includes(productName)\n      ? `${title} | ${productName}`\n      : title;\n\n  const fullImageUrl =\n    image && !image.startsWith(\"http\") && url\n      ? `${url.replace(/\\/$/, \"\")}${image}`\n      : image;\n\n  // Normalize structured data to an array\n  const structuredDataItems: Array<Record<string, unknown>> = structuredData\n    ? Array.isArray(structuredData)\n      ? structuredData\n      : [structuredData]\n    : [];\n\n  return (\n    <Helmet>\n      {/* Primary Meta Tags */}\n      <title>{fullTitle}</title>\n      <meta name=\"title\" content={fullTitle} />\n      {description && <meta name=\"description\" content={description} />}\n      {keywords && <meta name=\"keywords\" content={keywords} />}\n      <meta name=\"author\" content=\"Burdenoff Consultancy Services Pvt Ltd\" />\n      <meta name=\"robots\" content={robots} />\n\n      {/* Canonical URL */}\n      {url && <link rel=\"canonical\" href={url} />}\n\n      {/* Favicon */}\n      {favicon && <link rel=\"icon\" href={favicon} />}\n\n      {/* Open Graph / Facebook */}\n      <meta property=\"og:type\" content=\"website\" />\n      <meta property=\"og:title\" content={fullTitle} />\n      {description && <meta property=\"og:description\" content={description} />}\n      {fullImageUrl && <meta property=\"og:image\" content={fullImageUrl} />}\n      {url && <meta property=\"og:url\" content={url} />}\n      <meta property=\"og:locale\" content={locale} />\n      {productName && <meta property=\"og:site_name\" content={productName} />}\n\n      {/* Twitter Card */}\n      <meta name=\"twitter:card\" content=\"summary_large_image\" />\n      <meta name=\"twitter:title\" content={fullTitle} />\n      {description && <meta name=\"twitter:description\" content={description} />}\n      {fullImageUrl && <meta name=\"twitter:image\" content={fullImageUrl} />}\n      {twitterHandle && <meta name=\"twitter:creator\" content={twitterHandle} />}\n\n      {/* Theme Color */}\n      <meta name=\"theme-color\" content={themeColor} />\n\n      {/* JSON-LD Structured Data */}\n      {structuredDataItems.map((data, index) => (\n        <script key={`ld-${index}`} type=\"application/ld+json\">\n          {JSON.stringify(data)}\n        </script>\n      ))}\n\n      {/* Additional Meta Tags */}\n      {additionalMeta?.map((meta, index) => (\n        <meta\n          key={`meta-${index}`}\n          {...(meta.name ? { name: meta.name } : {})}\n          {...(meta.property ? { property: meta.property } : {})}\n          content={meta.content}\n        />\n      ))}\n    </Helmet>\n  );\n}\n","/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n","import * as React from \"react\";\n\nimport { Slot } from \"@radix-ui/react-slot\";\nimport { cva, type VariantProps } from \"class-variance-authority\";\n\nimport { cn } from \"../utils/cn\";\n\nconst buttonVariants = cva(\n  \"inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:size-4 [&_svg]:shrink-0\",\n  {\n    variants: {\n      variant: {\n        default:\n          \"bg-primary text-primary-foreground shadow hover:bg-primary/90\",\n        destructive:\n          \"bg-destructive text-destructive-foreground shadow-sm hover:bg-destructive/90\",\n        outline:\n          \"border border-input bg-background shadow-sm hover:bg-accent hover:text-accent-foreground\",\n        secondary:\n          \"bg-secondary text-secondary-foreground shadow-sm hover:bg-secondary/80\",\n        ghost: \"hover:bg-accent hover:text-accent-foreground\",\n        link: \"text-primary underline-offset-4 hover:underline\",\n      },\n      size: {\n        default: \"h-9 px-4 py-2\",\n        sm: \"h-8 rounded-md px-3 text-xs\",\n        lg: \"h-10 rounded-md px-8\",\n        icon: \"h-9 w-9\",\n      },\n    },\n    defaultVariants: {\n      variant: \"default\",\n      size: \"default\",\n    },\n  },\n);\n\nexport interface ButtonProps\n  extends\n    React.ButtonHTMLAttributes<HTMLButtonElement>,\n    VariantProps<typeof buttonVariants> {\n  asChild?: boolean;\n}\n\nconst Button = React.forwardRef<HTMLButtonElement, ButtonProps>(\n  ({ className, variant, size, asChild = false, ...props }, ref) => {\n    const Comp = asChild ? Slot : \"button\";\n    return (\n      <Comp\n        className={cn(buttonVariants({ variant, size, className }))}\n        ref={ref}\n        {...props}\n      />\n    );\n  },\n);\nButton.displayName = \"Button\";\n\nexport { Button, buttonVariants };\n","\"use client\";\n\nimport { useState, useEffect } from \"react\";\n\nimport { toast } from \"sonner\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\nimport { PageHead } from \"../seo/page-head\";\nimport { Button } from \"../ui/button\";\n\n// ============================================================================\n// GRAPHQL MUTATION\n// ============================================================================\n\nconst UNSUBSCRIBE_MUTATION = /* GraphQL */ `\n  mutation PublicUnsubscribeByToken($token: String!) {\n    publicUnsubscribeByToken(token: $token)\n  }\n`;\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface UnsubscribePageProps {\n  productName?: string;\n  className?: string;\n  seoTitle?: string;\n  seoDescription?: string;\n  resubscribeUrl?: string;\n  successMessage?: string;\n  errorMessage?: string;\n}\n\ntype UnsubscribeState =\n  | \"loading\"\n  | \"confirming\"\n  | \"processing\"\n  | \"success\"\n  | \"error\"\n  | \"invalid\";\n\n// ============================================================================\n// COMPONENT\n// ============================================================================\n\nexport function UnsubscribePage({\n  productName,\n  className = \"\",\n  seoTitle = \"Unsubscribe from Newsletter\",\n  seoDescription = \"Manage your newsletter subscription preferences.\",\n  resubscribeUrl,\n  successMessage = \"You have been successfully unsubscribed from our newsletter.\",\n  errorMessage = \"Something went wrong. Please try again or contact support.\",\n}: UnsubscribePageProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const displayName = productName ?? config.productId;\n\n  const [state, setState] = useState<UnsubscribeState>(\"loading\");\n  const [error, setError] = useState<string>(\"\");\n  const [token, setToken] = useState<string>(\"\");\n  const [successCopy, setSuccessCopy] = useState<string>(successMessage);\n\n  useEffect(() => {\n    const params = new URLSearchParams(window.location.search);\n    const t = params.get(\"token\");\n    if (t) {\n      setToken(t);\n      setState(\"confirming\");\n    } else {\n      setState(\"invalid\");\n    }\n  }, []);\n\n  const handleUnsubscribe = async () => {\n    if (!token) return;\n\n    setState(\"processing\");\n\n    try {\n      const result = await client.mutate<{\n        publicUnsubscribeByToken: boolean;\n      }>(UNSUBSCRIBE_MUTATION, { token });\n\n      if (result.errors?.length) {\n        const errMsg = result.errors[0]?.message ?? errorMessage;\n        const code = (result.errors[0] as { extensions?: { code?: string } })\n          ?.extensions?.code;\n\n        if (code === \"ALREADY_UNSUBSCRIBED\") {\n          toast.info(\"You are already unsubscribed from this newsletter.\");\n          setSuccessCopy(\"You were already unsubscribed from this newsletter.\");\n          setState(\"success\");\n          return;\n        } else if (code === \"UNSUBSCRIBE_TOKEN_EXPIRED\") {\n          setError(\n            \"This unsubscribe link has expired. Please contact support.\",\n          );\n        } else if (code === \"INVALID_UNSUBSCRIBE_TOKEN\") {\n          setState(\"invalid\");\n          return;\n        } else {\n          setError(errMsg);\n        }\n        setState(\"error\");\n        return;\n      }\n\n      if (result.data?.publicUnsubscribeByToken) {\n        setSuccessCopy(successMessage);\n        setState(\"success\");\n        toast.success(\"Successfully unsubscribed\");\n      } else {\n        setError(errorMessage);\n        setState(\"error\");\n      }\n    } catch {\n      setError(errorMessage);\n      setState(\"error\");\n    }\n  };\n\n  return (\n    <div\n      className={className}\n      style={{\n        minHeight: \"60vh\",\n        display: \"flex\",\n        alignItems: \"center\",\n        justifyContent: \"center\",\n        padding: \"6rem 1rem 4rem\",\n      }}\n    >\n      <PageHead title={seoTitle} description={seoDescription} />\n\n      <div className=\"max-w-md w-full text-center\">\n        {/* Loading */}\n        {state === \"loading\" && (\n          <div className=\"animate-pulse\">\n            <div className=\"h-8 w-48 bg-muted rounded mx-auto mb-4\" />\n            <div className=\"h-4 w-64 bg-muted rounded mx-auto\" />\n          </div>\n        )}\n\n        {/* Confirm */}\n        {state === \"confirming\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-amber-100 dark:bg-amber-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-amber-600 dark:text-amber-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L4.082 16.5c-.77.833.192 2.5 1.732 2.5z\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribe from Newsletter\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">\n              Are you sure you want to unsubscribe from {displayName}{\" \"}\n              newsletter? You will no longer receive updates and news from us.\n            </p>\n            <div className=\"flex flex-col sm:flex-row gap-3 justify-center\">\n              <Button\n                onClick={handleUnsubscribe}\n                variant=\"destructive\"\n                className=\"px-8\"\n              >\n                Yes, Unsubscribe\n              </Button>\n              {resubscribeUrl && (\n                <Button\n                  variant=\"outline\"\n                  onClick={() => {\n                    window.location.href = resubscribeUrl;\n                  }}\n                  className=\"px-8\"\n                >\n                  Cancel\n                </Button>\n              )}\n            </div>\n          </div>\n        )}\n\n        {/* Processing */}\n        {state === \"processing\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-muted flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-muted-foreground animate-spin\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n              >\n                <circle\n                  className=\"opacity-25\"\n                  cx=\"12\"\n                  cy=\"12\"\n                  r=\"10\"\n                  stroke=\"currentColor\"\n                  strokeWidth=\"4\"\n                />\n                <path\n                  className=\"opacity-75\"\n                  fill=\"currentColor\"\n                  d=\"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribing...\n            </h1>\n            <p className=\"text-muted-foreground\">\n              Please wait while we process your request.\n            </p>\n          </div>\n        )}\n\n        {/* Success */}\n        {state === \"success\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-green-100 dark:bg-green-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-green-600 dark:text-green-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M5 13l4 4L19 7\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Successfully Unsubscribed\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">{successCopy}</p>\n            {resubscribeUrl && (\n              <p className=\"text-sm text-muted-foreground\">\n                Changed your mind?{\" \"}\n                <a\n                  href={resubscribeUrl}\n                  className=\"text-primary underline hover:no-underline\"\n                >\n                  Resubscribe\n                </a>\n              </p>\n            )}\n          </div>\n        )}\n\n        {/* Error */}\n        {state === \"error\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-red-100 dark:bg-red-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-red-600 dark:text-red-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M6 18L18 6M6 6l12 12\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribe Failed\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">{error}</p>\n            <Button onClick={() => setState(\"confirming\")} variant=\"outline\">\n              Try Again\n            </Button>\n          </div>\n        )}\n\n        {/* Invalid / No Token */}\n        {state === \"invalid\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-gray-100 dark:bg-gray-800 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-gray-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Invalid Unsubscribe Link\n            </h1>\n            <p className=\"text-muted-foreground\">\n              This unsubscribe link is invalid or missing. If you want to\n              unsubscribe, please use the link from your newsletter email.\n            </p>\n          </div>\n        )}\n      </div>\n    </div>\n  );\n}\n"]}
+{"version":3,"sources":["../../src/client/security.ts","../../src/client/graphql-client.ts","../../src/client/provider.tsx","../../src/seo/page-head.tsx","../../src/utils/cn.ts","../../src/ui/button.tsx","../../src/components/unsubscribe.tsx"],"names":["createContext","useContext","Helmet","jsx","twMerge","clsx","cva","React","Slot","useState","useEffect","toast","jsxs"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAM,iCAAiB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAChE,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,eAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,sBAAA;AAAA,EACA,iBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,IAAI,GAAA;AAEJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,IACE,GAAA,CAAI,aAAa,OAAA,IACjB,cAAA,CAAe,IAAI,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,CAAA,EAC7C;AACA,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB;AAEA,EAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAC1E;AAEO,SAAS,gBACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AAErB,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,MACtB,CAAC,CAAC,GAAG,CAAA,KAAM,CAAC,gBAAA,CAAiB,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AAAA;AACpD,GACF;AACF;;;ACAO,IAAM,aAAA,GAAN,MAAM,aAAA,CAAa;AAAA,EAaxB,YAAY,MAAA,EAA4B;AAZxC,IAAA,aAAA,CAAA,IAAA,EAAQ,QAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,YAAA,sBAAiB,GAAA,EAGvB,CAAA;AACF,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAA,sBAAe,GAAA,EAA+C,CAAA;AAQpE,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,UAAA,EAAY,kBAAA,CAAmB,MAAA,CAAO,UAAU,CAAA;AAAA,MAChD,OAAA,EAAS,eAAA,CAAgB,MAAA,CAAO,OAAO;AAAA,KACzC;AAAA,EACF;AAAA,EAEA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,KAAA,EACA,SAAA,EAC6B;AAC7B,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAGpD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAK,GAAA,EAAI,GAAI,MAAA,CAAO,EAAA,GAAK,cAAa,SAAA,EAAW;AACnD,QAAA,OAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AACA,MAAA,IAAA,CAAK,UAAA,CAAW,OAAO,QAAQ,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA;AAC3C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAW,KAAA,EAAO,SAAS,CAAA,CAC7C,IAAA,CAAK,CAAC,MAAA,KAAW;AAEhB,MAAA,IAAI,MAAA,CAAO,IAAA,IAAQ,CAAC,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzC,QAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,IAAQ,aAAA,CAAa,iBAAA,EAAmB;AAC1D,UAAA,MAAM,cAAc,IAAA,CAAK,UAAA,CAAW,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAClD,UAAA,IAAI,WAAA,EAAa;AACf,YAAA,IAAA,CAAK,UAAA,CAAW,OAAO,WAAW,CAAA;AAAA,UACpC;AAAA,QACF;AACA,QAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,QAAA,EAAU,EAAE,IAAA,EAAM,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IAC/B,CAAC,CAAA;AAEH,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,OAAO,CAAA;AACnC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACJ,QAAA,EACA,SAAA,EAC6B;AAG7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,SAAA,EAAW,KAAK,CAAA;AAAA,EACnD;AAAA;AAAA,EAGA,OAAe,kBAAkB,MAAA,EAAyB;AACxD,IAAA,OAAO,WAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAQ,MAAA,IAAU,OAAO,MAAA,GAAS,GAAA;AAAA,EACxE;AAAA,EAEA,OAAe,MAAM,EAAA,EAA2B;AAC9C,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EACA,SAAA,EAC0D;AAC1D,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAC5D,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,OAAO,UAAA,EAAY;AAAA,QACnD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,kBAAA;AAAA,UAChB,cAAA,EAAgB,KAAK,MAAA,CAAO,SAAA;AAAA,UAC5B,GAAG,KAAK,MAAA,CAAO;AAAA,SACjB;AAAA,QACA,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW,CAAA;AAAA,QACzC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,iCAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,QAAA,CAAS;AAAA,SACX;AACA,QAAA,OAAO;AAAA,UACL,GAAA,EAAK;AAAA,YACH,MAAA,EAAQ;AAAA,cACN;AAAA,gBACE,SAAS,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,SAAS,UAAU,CAAA,CAAA;AAAA,gBACxD,YAAY,EAAE,IAAA,EAAM,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAG;AAChD;AACF,WACF;AAAA,UACA,SAAA,EAAW,aAAA,CAAa,iBAAA,CAAkB,QAAA,CAAS,MAAM;AAAA,SAC3D;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,GAAA,EAAM,MAAM,QAAA,CAAS,IAAA,EAAK;AAAA,QAC1B,SAAA,EAAW;AAAA,OACb;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,UACJ,KAAA,YAAiB,KAAA,KAChB,MAAM,IAAA,KAAS,YAAA,IAAgB,WAAW,MAAA,CAAO,OAAA,CAAA;AACpD,MAAA,MAAM,OAAA,GAAU,UACZ,CAAA,wBAAA,EAA2B,SAAS,OACpC,KAAA,YAAiB,KAAA,GACf,MAAM,OAAA,GACN,eAAA;AACN,MAAA,OAAA,CAAQ,KAAA,CAAM,0BAA0B,OAAO,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,GAAA,EAAK;AAAA,UACH,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,OAAA;AAAA,cACA,UAAA,EAAY,EAAE,IAAA,EAAM,OAAA,GAAU,YAAY,eAAA;AAAgB;AAC5D;AACF,SACF;AAAA;AAAA;AAAA,QAGA,SAAA,EAAW;AAAA,OACb;AAAA,IACF,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAc,OAAA,CACZ,KAAA,EACA,SAAA,EACA,QAAQ,IAAA,EACqB;AAC7B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,aAAA,CAAa,kBAAA;AACxD,IAAA,MAAM,aAAa,KAAA,GACd,IAAA,CAAK,MAAA,CAAO,UAAA,IAAc,cAAa,mBAAA,GACxC,CAAA;AAEJ,IAAA,IAAI,IAAA;AACJ,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,IAAK,UAAA,EAAY,CAAA,EAAA,EAAK;AACpC,MAAA,MAAM,EAAE,GAAA,EAAK,SAAA,EAAU,GAAI,MAAM,IAAA,CAAK,OAAA;AAAA,QACpC,KAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,SAAA,IAAa,CAAA,KAAM,UAAA,EAAY,OAAO,GAAA;AAC3C,MAAA,IAAA,GAAO,GAAA;AAEP,MAAA,MAAM,aAAA,CAAa,KAAA;AAAA,QACjB,cAAa,mBAAA,IAAuB,CAAA,GAAI,CAAA,CAAA,GAAK,IAAA,CAAK,QAAO,GAAI;AAAA,OAC/D;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;AA1LE,aAAA,CAPW,aAAA,EAOI,WAAA,EAAY,CAAA,GAAI,EAAA,GAAK,GAAA,CAAA;AAAA;AACpC,aAAA,CARW,eAQI,mBAAA,EAAoB,GAAA,CAAA;AACnC,aAAA,CATW,eASI,oBAAA,EAAqB,IAAA,CAAA;AACpC,aAAA,CAVW,eAUI,qBAAA,EAAsB,CAAA,CAAA;AACrC,aAAA,CAXW,eAWI,qBAAA,EAAsB,GAAA,CAAA;AC5CvC,IAAM,aAAA,GAAgBA,oBAAmC,IAAI,CAAA;AAyCtD,SAAS,SAAA,GAA0B;AACxC,EAAA,MAAM,MAAA,GAASC,iBAAW,aAAa,CAAA;AACvC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,EAClE;AACA,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,eAAA,GAAsC;AACpD,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,OAAO,OAAO,SAAA,EAAU;AAC1B;ACLO,SAAS,QAAA,CAAS;AAAA,EACvB,KAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA,GAAS,8EAAA;AAAA,EACT,MAAA,GAAS,OAAA;AAAA,EACT,aAAA;AAAA,EACA,UAAA,GAAa,SAAA;AAAA,EACb,cAAA;AAAA,EACA;AACF,CAAA,EAAkB;AAChB,EAAA,MAAM,SAAA,GACJ,WAAA,IAAe,CAAC,KAAA,CAAM,QAAA,CAAS,WAAW,CAAA,GACtC,CAAA,EAAG,KAAK,CAAA,GAAA,EAAM,WAAW,CAAA,CAAA,GACzB,KAAA;AAEN,EAAA,MAAM,eACJ,KAAA,IAAS,CAAC,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA,IAAK,GAAA,GAClC,CAAA,EAAG,GAAA,CAAI,QAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,EAAG,KAAK,CAAA,CAAA,GACjC,KAAA;AAGN,EAAA,MAAM,mBAAA,GAAsD,cAAA,GACxD,KAAA,CAAM,OAAA,CAAQ,cAAc,IAC1B,cAAA,GACA,CAAC,cAAc,CAAA,GACjB,EAAC;AAEL,EAAA,uCACGC,uBAAA,EAAA,EAEC,QAAA,EAAA;AAAA,oBAAAC,cAAAA,CAAC,WAAO,QAAA,EAAA,SAAA,EAAU,CAAA;AAAA,oBAClBA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,OAAA,EAAQ,SAAS,SAAA,EAAW,CAAA;AAAA,IACtC,+BAAeA,cAAAA,CAAC,UAAK,IAAA,EAAK,aAAA,EAAc,SAAS,WAAA,EAAa,CAAA;AAAA,IAC9D,4BAAYA,cAAAA,CAAC,UAAK,IAAA,EAAK,UAAA,EAAW,SAAS,QAAA,EAAU,CAAA;AAAA,oBACtDA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,QAAA,EAAS,SAAQ,wCAAA,EAAyC,CAAA;AAAA,oBACrEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,QAAA,EAAS,SAAS,MAAA,EAAQ,CAAA;AAAA,IAGpC,uBAAOA,cAAAA,CAAC,UAAK,GAAA,EAAI,WAAA,EAAY,MAAM,GAAA,EAAK,CAAA;AAAA,IAGxC,2BAAWA,cAAAA,CAAC,UAAK,GAAA,EAAI,MAAA,EAAO,MAAM,OAAA,EAAS,CAAA;AAAA,oBAG5CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,SAAA,EAAU,SAAQ,SAAA,EAAU,CAAA;AAAA,oBAC3CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,UAAA,EAAW,SAAS,SAAA,EAAW,CAAA;AAAA,IAC7C,+BAAeA,cAAAA,CAAC,UAAK,QAAA,EAAS,gBAAA,EAAiB,SAAS,WAAA,EAAa,CAAA;AAAA,IACrE,gCAAgBA,cAAAA,CAAC,UAAK,QAAA,EAAS,UAAA,EAAW,SAAS,YAAA,EAAc,CAAA;AAAA,IACjE,uBAAOA,cAAAA,CAAC,UAAK,QAAA,EAAS,QAAA,EAAS,SAAS,GAAA,EAAK,CAAA;AAAA,oBAC9CA,cAAAA,CAAC,MAAA,EAAA,EAAK,QAAA,EAAS,WAAA,EAAY,SAAS,MAAA,EAAQ,CAAA;AAAA,IAC3C,+BAAeA,cAAAA,CAAC,UAAK,QAAA,EAAS,cAAA,EAAe,SAAS,WAAA,EAAa,CAAA;AAAA,oBAGpEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,cAAA,EAAe,SAAQ,qBAAA,EAAsB,CAAA;AAAA,oBACxDA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,eAAA,EAAgB,SAAS,SAAA,EAAW,CAAA;AAAA,IAC9C,+BAAeA,cAAAA,CAAC,UAAK,IAAA,EAAK,qBAAA,EAAsB,SAAS,WAAA,EAAa,CAAA;AAAA,IACtE,gCAAgBA,cAAAA,CAAC,UAAK,IAAA,EAAK,eAAA,EAAgB,SAAS,YAAA,EAAc,CAAA;AAAA,IAClE,iCAAiBA,cAAAA,CAAC,UAAK,IAAA,EAAK,iBAAA,EAAkB,SAAS,aAAA,EAAe,CAAA;AAAA,oBAGvEA,cAAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,aAAA,EAAc,SAAS,UAAA,EAAY,CAAA;AAAA,IAG7C,oBAAoB,GAAA,CAAI,CAAC,IAAA,EAAM,KAAA,qBAC9BA,cAAAA,CAAC,QAAA,EAAA,EAA2B,IAAA,EAAK,qBAAA,EAC9B,eAAK,SAAA,CAAU,IAAI,KADT,CAAA,GAAA,EAAM,KAAK,EAExB,CACD,CAAA;AAAA,IAGA,cAAA,EAAgB,GAAA,CAAI,CAAC,IAAA,EAAM,0BAC1BA,cAAAA;AAAA,MAAC,MAAA;AAAA,MAAA;AAAA,QAEE,GAAI,KAAK,IAAA,GAAO,EAAE,MAAM,IAAA,CAAK,IAAA,KAAS,EAAC;AAAA,QACvC,GAAI,KAAK,QAAA,GAAW,EAAE,UAAU,IAAA,CAAK,QAAA,KAAa,EAAC;AAAA,QACpD,SAAS,IAAA,CAAK;AAAA,OAAA;AAAA,MAHT,QAAQ,KAAK,CAAA;AAAA,KAKrB;AAAA,GAAA,EACH,CAAA;AAEJ;ACjIO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAOC,qBAAA,CAAQC,SAAA,CAAK,MAAM,CAAC,CAAA;AAC7B;ACdA,IAAM,cAAA,GAAiBC,0BAAA;AAAA,EACrB,uSAAA;AAAA,EACA;AAAA,IACE,QAAA,EAAU;AAAA,MACR,OAAA,EAAS;AAAA,QACP,OAAA,EACE,+DAAA;AAAA,QACF,WAAA,EACE,8EAAA;AAAA,QACF,OAAA,EACE,0FAAA;AAAA,QACF,SAAA,EACE,wEAAA;AAAA,QACF,KAAA,EAAO,8CAAA;AAAA,QACP,IAAA,EAAM;AAAA,OACR;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAA,EAAS,eAAA;AAAA,QACT,EAAA,EAAI,6BAAA;AAAA,QACJ,EAAA,EAAI,sBAAA;AAAA,QACJ,IAAA,EAAM;AAAA;AACR,KACF;AAAA,IACA,eAAA,EAAiB;AAAA,MACf,OAAA,EAAS,SAAA;AAAA,MACT,IAAA,EAAM;AAAA;AACR;AAEJ,CAAA;AASA,IAAM,MAAA,GAAeC,gBAAA,CAAA,UAAA;AAAA,EACnB,CAAC,EAAE,SAAA,EAAW,OAAA,EAAS,IAAA,EAAM,UAAU,KAAA,EAAO,GAAG,KAAA,EAAM,EAAG,GAAA,KAAQ;AAChE,IAAA,MAAM,IAAA,GAAO,UAAUC,cAAA,GAAO,QAAA;AAC9B,IAAA,uBACEL,cAAAA;AAAA,MAAC,IAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAW,GAAG,cAAA,CAAe,EAAE,SAAS,IAAA,EAAM,SAAA,EAAW,CAAC,CAAA;AAAA,QAC1D,GAAA;AAAA,QACC,GAAG;AAAA;AAAA,KACN;AAAA,EAEJ;AACF,CAAA;AACA,MAAA,CAAO,WAAA,GAAc,QAAA;AC1CrB,IAAM,oBAAA;AAAA;AAAA,EAAqC;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAgCpC,SAAS,eAAA,CAAgB;AAAA,EAC9B,WAAA;AAAA,EACA,SAAA,GAAY,EAAA;AAAA,EACZ,QAAA,GAAW,6BAAA;AAAA,EACX,cAAA,GAAiB,kDAAA;AAAA,EACjB,cAAA;AAAA,EACA,cAAA,GAAiB,8DAAA;AAAA,EACjB,YAAA,GAAe;AACjB,CAAA,EAAyB;AACvB,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,SAAS,eAAA,EAAgB;AAC/B,EAAA,MAAM,WAAA,GAAc,eAAe,MAAA,CAAO,SAAA;AAE1C,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIM,eAA2B,SAAS,CAAA;AAC9D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,eAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAIA,eAAiB,cAAc,CAAA;AAErE,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,MAAA,CAAO,SAAS,MAAM,CAAA;AACzD,IAAA,MAAM,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAC5B,IAAA,IAAI,CAAA,EAAG;AACL,MAAA,QAAA,CAAS,CAAC,CAAA;AACV,MAAA,QAAA,CAAS,YAAY,CAAA;AAAA,IACvB,CAAA,MAAO;AACL,MAAA,QAAA,CAAS,SAAS,CAAA;AAAA,IACpB;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,oBAAoB,YAAY;AACpC,IAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,IAAA,QAAA,CAAS,YAAY,CAAA;AAErB,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,OAEzB,oBAAA,EAAsB,EAAE,OAAO,CAAA;AAElC,MAAA,IAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ;AACzB,QAAA,MAAM,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,CAAC,GAAG,OAAA,IAAW,YAAA;AAC5C,QAAA,MAAM,IAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,CAAC,GACzB,UAAA,EAAY,IAAA;AAEhB,QAAA,IAAI,SAAS,sBAAA,EAAwB;AACnC,UAAAC,YAAA,CAAM,KAAK,oDAAoD,CAAA;AAC/D,UAAA,cAAA,CAAe,qDAAqD,CAAA;AACpE,UAAA,QAAA,CAAS,SAAS,CAAA;AAClB,UAAA;AAAA,QACF,CAAA,MAAA,IAAW,SAAS,2BAAA,EAA6B;AAC/C,UAAA,QAAA;AAAA,YACE;AAAA,WACF;AAAA,QACF,CAAA,MAAA,IAAW,SAAS,2BAAA,EAA6B;AAC/C,UAAA,QAAA,CAAS,SAAS,CAAA;AAClB,UAAA;AAAA,QACF,CAAA,MAAO;AACL,UAAA,QAAA,CAAS,MAAM,CAAA;AAAA,QACjB;AACA,QAAA,QAAA,CAAS,OAAO,CAAA;AAChB,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,MAAA,CAAO,MAAM,wBAAA,EAA0B;AACzC,QAAA,cAAA,CAAe,cAAc,CAAA;AAC7B,QAAA,QAAA,CAAS,SAAS,CAAA;AAClB,QAAAA,YAAA,CAAM,QAAQ,2BAA2B,CAAA;AAAA,MAC3C,CAAA,MAAO;AACL,QAAA,QAAA,CAAS,YAAY,CAAA;AACrB,QAAA,QAAA,CAAS,OAAO,CAAA;AAAA,MAClB;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,CAAS,YAAY,CAAA;AACrB,MAAA,QAAA,CAAS,OAAO,CAAA;AAAA,IAClB;AAAA,EACF,CAAA;AAEA,EAAA,uBACEC,eAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA;AAAA,MACA,KAAA,EAAO;AAAA,QACL,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS,MAAA;AAAA,QACT,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,OAAA,EAAS;AAAA,OACX;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAT,cAAAA,CAAC,QAAA,EAAA,EAAS,KAAA,EAAO,QAAA,EAAU,aAAa,cAAA,EAAgB,CAAA;AAAA,wBAExDS,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6BAAA,EAEZ,QAAA,EAAA;AAAA,UAAA,KAAA,KAAU,SAAA,oBACTA,eAAAA,CAAC,KAAA,EAAA,EAAI,WAAU,eAAA,EACb,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wCAAA,EAAyC,CAAA;AAAA,4BACxDA,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mCAAA,EAAoC;AAAA,WAAA,EACrD,CAAA;AAAA,UAID,KAAA,KAAU,YAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,6BAAA,EAExD,CAAA;AAAA,4BACAS,eAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,4BAAA,EAA6B,QAAA,EAAA;AAAA,cAAA,4CAAA;AAAA,cACG,WAAA;AAAA,cAAa,GAAA;AAAA,cAAI;AAAA,aAAA,EAE9D,CAAA;AAAA,4BACAA,eAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,gDAAA,EACb,QAAA,EAAA;AAAA,8BAAAT,cAAAA;AAAA,gBAAC,MAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAS,iBAAA;AAAA,kBACT,OAAA,EAAQ,aAAA;AAAA,kBACR,SAAA,EAAU,MAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA,eAED;AAAA,cACC,kCACCA,cAAAA;AAAA,gBAAC,MAAA;AAAA,gBAAA;AAAA,kBACC,OAAA,EAAQ,SAAA;AAAA,kBACR,SAAS,MAAM;AACb,oBAAA,MAAA,CAAO,SAAS,IAAA,GAAO,cAAA;AAAA,kBACzB,CAAA;AAAA,kBACA,SAAA,EAAU,MAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA;AAED,aAAA,EAEJ;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,YAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,+EAAA,EACb,QAAA,kBAAAS,eAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBAER,QAAA,EAAA;AAAA,kCAAAT,cAAAA;AAAA,oBAAC,QAAA;AAAA,oBAAA;AAAA,sBACC,SAAA,EAAU,YAAA;AAAA,sBACV,EAAA,EAAG,IAAA;AAAA,sBACH,EAAA,EAAG,IAAA;AAAA,sBACH,CAAA,EAAE,IAAA;AAAA,sBACF,MAAA,EAAO,cAAA;AAAA,sBACP,WAAA,EAAY;AAAA;AAAA,mBACd;AAAA,kCACAA,cAAAA;AAAA,oBAAC,MAAA;AAAA,oBAAA;AAAA,sBACC,SAAA,EAAU,YAAA;AAAA,sBACV,IAAA,EAAK,cAAA;AAAA,sBACL,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,kBAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,yBAAwB,QAAA,EAAA,4CAAA,EAErC;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,SAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,4CAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,2BAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,8BAA8B,QAAA,EAAA,WAAA,EAAY,CAAA;AAAA,YACtD,cAAA,oBACCS,eAAAA,CAAC,GAAA,EAAA,EAAE,WAAU,+BAAA,EAAgC,QAAA,EAAA;AAAA,cAAA,oBAAA;AAAA,cACxB,GAAA;AAAA,8BACnBT,cAAAA;AAAA,gBAAC,GAAA;AAAA,gBAAA;AAAA,kBACC,IAAA,EAAM,cAAA;AAAA,kBACN,SAAA,EAAU,2CAAA;AAAA,kBACX,QAAA,EAAA;AAAA;AAAA;AAED,aAAA,EACF;AAAA,WAAA,EAEJ,CAAA;AAAA,UAID,KAAA,KAAU,OAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,oGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,wCAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,oBAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,8BAA8B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,4BACjDA,cAAAA,CAAC,MAAA,EAAA,EAAO,OAAA,EAAS,MAAM,SAAS,YAAY,CAAA,EAAG,OAAA,EAAQ,SAAA,EAAU,QAAA,EAAA,WAAA,EAEjE;AAAA,WAAA,EACF,CAAA;AAAA,UAID,KAAA,KAAU,SAAA,oBACTS,eAAAA,CAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,4BAAAT,cAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mGAAA,EACb,QAAA,kBAAAA,cAAAA;AAAA,cAAC,KAAA;AAAA,cAAA;AAAA,gBACC,SAAA,EAAU,uBAAA;AAAA,gBACV,IAAA,EAAK,MAAA;AAAA,gBACL,OAAA,EAAQ,WAAA;AAAA,gBACR,MAAA,EAAO,cAAA;AAAA,gBACP,WAAA,EAAa,CAAA;AAAA,gBAEb,QAAA,kBAAAA,cAAAA;AAAA,kBAAC,MAAA;AAAA,kBAAA;AAAA,oBACC,aAAA,EAAc,OAAA;AAAA,oBACd,cAAA,EAAe,OAAA;AAAA,oBACf,CAAA,EAAE;AAAA;AAAA;AACJ;AAAA,aACF,EACF,CAAA;AAAA,4BACAA,cAAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,2CAA0C,QAAA,EAAA,0BAAA,EAExD,CAAA;AAAA,4BACAA,cAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,yBAAwB,QAAA,EAAA,0HAAA,EAGrC;AAAA,WAAA,EACF;AAAA,SAAA,EAEJ;AAAA;AAAA;AAAA,GACF;AAEJ","file":"unsubscribe.js","sourcesContent":["const LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\nconst RESERVED_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"x-actor-id\",\n  \"x-actor-type\",\n  \"x-consent-granted-by\",\n  \"x-consent-scope\",\n  \"x-consent-granted-at\",\n  \"x-consent-expires-at\",\n]);\n\nexport function validateGatewayUrl(value: string): string {\n  let url: URL;\n\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Gateway URL must be a valid absolute URL\");\n  }\n\n  if (url.protocol === \"https:\") {\n    return url.toString();\n  }\n\n  if (\n    url.protocol === \"http:\" &&\n    LOOPBACK_HOSTS.has(url.hostname.toLowerCase())\n  ) {\n    return url.toString();\n  }\n\n  throw new Error(\"Gateway URL must use HTTPS unless it targets localhost\");\n}\n\nexport function sanitizeHeaders(\n  headers?: Record<string, string>,\n): Record<string, string> | undefined {\n  if (!headers) return undefined;\n\n  return Object.fromEntries(\n    Object.entries(headers).filter(\n      ([key]) => !RESERVED_HEADERS.has(key.toLowerCase()),\n    ),\n  );\n}\n","/**\n * Lightweight GraphQL client for the Burdenoff Web SDK.\n * Uses native fetch - zero external dependencies.\n * All calls are unauthenticated (public gateway operations only).\n */\n\nimport { sanitizeHeaders, validateGatewayUrl } from \"./security\";\n\nexport interface WebSDKClientConfig {\n  /** Global public gateway URL (e.g. \"https://api.burdenoff.com/global/graphql\") */\n  gatewayUrl: string;\n  /** Platform product ID for scoping operations */\n  productId: string;\n  /** Product slug (used for public product queries) */\n  productSlug?: string;\n  /** reCAPTCHA site key (if not fetched from product config) */\n  recaptchaSiteKey?: string;\n  /** Rybbit analytics site ID */\n  rybbitSiteId?: string;\n  /** Custom headers to include in all requests */\n  headers?: Record<string, string>;\n  /**\n   * Per-request timeout in ms. Kept below the gateway's operation timeout so a\n   * stalled request surfaces as an error the UI can render, instead of leaving\n   * a page stuck on loading skeletons forever. Default 12000.\n   */\n  timeoutMs?: number;\n  /**\n   * Extra attempts for transient failures (timeout / network / 5xx / 429) on\n   * QUERIES ONLY. Mutations are never retried — a retried contact-form or\n   * waitlist submit would double-submit. Default 1 (2 attempts total).\n   */\n  maxRetries?: number;\n}\n\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data?: T;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: Array<string | number>;\n    extensions?: Record<string, unknown>;\n  }>;\n}\n\nexport class WebSDKClient {\n  private config: WebSDKClientConfig;\n  private queryCache = new Map<\n    string,\n    { data: GraphQLResponse<unknown>; ts: number }\n  >();\n  private inflight = new Map<string, Promise<GraphQLResponse<unknown>>>();\n  private static CACHE_TTL = 5 * 60 * 1000; // 5 minutes\n  private static MAX_CACHE_ENTRIES = 100;\n  private static DEFAULT_TIMEOUT_MS = 12_000;\n  private static DEFAULT_MAX_RETRIES = 1;\n  private static RETRY_BASE_DELAY_MS = 400;\n\n  constructor(config: WebSDKClientConfig) {\n    this.config = {\n      ...config,\n      gatewayUrl: validateGatewayUrl(config.gatewayUrl),\n      headers: sanitizeHeaders(config.headers),\n    };\n  }\n\n  getConfig(): WebSDKClientConfig {\n    return this.config;\n  }\n\n  /**\n   * Execute a GraphQL query (with deduplication and caching)\n   */\n  async query<T = Record<string, unknown>>(\n    query: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    const cacheKey = JSON.stringify({ query, variables });\n\n    // Return cached response if still valid, evict if expired\n    const cached = this.queryCache.get(cacheKey);\n    if (cached) {\n      if (Date.now() - cached.ts < WebSDKClient.CACHE_TTL) {\n        return cached.data as GraphQLResponse<T>;\n      }\n      this.queryCache.delete(cacheKey);\n    }\n\n    // Deduplicate: if same query is already in-flight, reuse the promise\n    const existing = this.inflight.get(cacheKey);\n    if (existing) {\n      return existing as Promise<GraphQLResponse<T>>;\n    }\n\n    const promise = this.request<T>(query, variables)\n      .then((result) => {\n        // Cache successful responses only\n        if (result.data && !result.errors?.length) {\n          if (this.queryCache.size >= WebSDKClient.MAX_CACHE_ENTRIES) {\n            const oldestEntry = this.queryCache.keys().next().value;\n            if (oldestEntry) {\n              this.queryCache.delete(oldestEntry);\n            }\n          }\n          this.queryCache.set(cacheKey, { data: result, ts: Date.now() });\n        }\n        return result;\n      })\n      .finally(() => {\n        this.inflight.delete(cacheKey);\n      });\n\n    this.inflight.set(cacheKey, promise);\n    return promise;\n  }\n\n  /**\n   * Execute a GraphQL mutation\n   */\n  async mutate<T = Record<string, unknown>>(\n    mutation: string,\n    variables?: Record<string, unknown>,\n  ): Promise<GraphQLResponse<T>> {\n    // retry=false: a retried mutation could double-submit (contact form,\n    // waitlist signup, order). Only the timeout applies here.\n    return this.request<T>(mutation, variables, false);\n  }\n\n  /** HTTP statuses worth another attempt — transient server/edge conditions. */\n  private static isRetriableStatus(status: number): boolean {\n    return status === 429 || status === 408 || (status >= 500 && status < 600);\n  }\n\n  private static sleep(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n\n  /**\n   * Perform the HTTP call with a hard timeout. Every outcome resolves to a\n   * GraphQLResponse — callers never hang, so a UI's `loading` state always\n   * settles into data or a renderable error.\n   */\n  private async attempt<T>(\n    query: string,\n    variables: Record<string, unknown> | undefined,\n    timeoutMs: number,\n  ): Promise<{ res: GraphQLResponse<T>; retriable: boolean }> {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), timeoutMs);\n    try {\n      const response = await fetch(this.config.gatewayUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"x-product-id\": this.config.productId,\n          ...this.config.headers,\n        },\n        body: JSON.stringify({ query, variables }),\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        console.error(\n          \"[WebSDK] GraphQL request failed\",\n          response.status,\n          response.statusText,\n        );\n        return {\n          res: {\n            errors: [\n              {\n                message: `HTTP ${response.status}: ${response.statusText}`,\n                extensions: { code: `HTTP_${response.status}` },\n              },\n            ],\n          },\n          retriable: WebSDKClient.isRetriableStatus(response.status),\n        };\n      }\n\n      return {\n        res: (await response.json()) as GraphQLResponse<T>,\n        retriable: false,\n      };\n    } catch (error) {\n      const aborted =\n        error instanceof Error &&\n        (error.name === \"AbortError\" || controller.signal.aborted);\n      const message = aborted\n        ? `Request timed out after ${timeoutMs}ms`\n        : error instanceof Error\n          ? error.message\n          : \"Network error\";\n      console.error(\"[WebSDK] Network error\", message);\n      return {\n        res: {\n          errors: [\n            {\n              message,\n              extensions: { code: aborted ? \"TIMEOUT\" : \"NETWORK_ERROR\" },\n            },\n          ],\n        },\n        // Transport-level failures are worth one more try; a genuine outage\n        // just fails twice quickly and still renders an error state.\n        retriable: true,\n      };\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n\n  private async request<T>(\n    query: string,\n    variables?: Record<string, unknown>,\n    retry = true,\n  ): Promise<GraphQLResponse<T>> {\n    const timeoutMs = this.config.timeoutMs ?? WebSDKClient.DEFAULT_TIMEOUT_MS;\n    const maxRetries = retry\n      ? (this.config.maxRetries ?? WebSDKClient.DEFAULT_MAX_RETRIES)\n      : 0;\n\n    let last: GraphQLResponse<T> | undefined;\n    for (let i = 0; i <= maxRetries; i++) {\n      const { res, retriable } = await this.attempt<T>(\n        query,\n        variables,\n        timeoutMs,\n      );\n      if (!retriable || i === maxRetries) return res;\n      last = res;\n      // Small backoff with jitter so a burst of clients doesn't retry in lockstep.\n      await WebSDKClient.sleep(\n        WebSDKClient.RETRY_BASE_DELAY_MS * (i + 1) + Math.random() * 200,\n      );\n    }\n    return last as GraphQLResponse<T>;\n  }\n}\n","/**\n * React context provider for the Web SDK client.\n * Wraps the application with WebSDKClient configuration.\n */\n\"use client\";\n\nimport { createContext, useContext, useMemo } from \"react\";\nimport type { ReactNode } from \"react\";\n\nimport { resolveGatewayUrl } from \"./gateway-resolver\";\nimport { WebSDKClient, type WebSDKClientConfig } from \"./graphql-client\";\n\nconst WebSDKContext = createContext<WebSDKClient | null>(null);\n\nexport interface WebSDKProviderProps {\n  /** SDK client configuration */\n  config: WebSDKClientConfig;\n  /** Child components */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the WebSDKClient available to all child components.\n *\n * @example\n * ```tsx\n * <WebSDKProvider config={{\n *   gatewayUrl: \"https://api.burdenoff.com/global/graphql\",\n *   productId: \"your-product-id\",\n *   productSlug: \"your-product\",\n * }}>\n *   <App />\n * </WebSDKProvider>\n * ```\n */\nexport function WebSDKProvider({ config, children }: WebSDKProviderProps) {\n  const client = useMemo(() => {\n    const resolvedConfig = {\n      ...config,\n      gatewayUrl: resolveGatewayUrl(config.gatewayUrl),\n    };\n    return new WebSDKClient(resolvedConfig);\n  }, [config]);\n\n  return (\n    <WebSDKContext.Provider value={client}>{children}</WebSDKContext.Provider>\n  );\n}\n\n/**\n * Hook to access the WebSDKClient instance.\n * Must be used within a WebSDKProvider.\n */\nexport function useWebSDK(): WebSDKClient {\n  const client = useContext(WebSDKContext);\n  if (!client) {\n    throw new Error(\"useWebSDK must be used within a WebSDKProvider\");\n  }\n  return client;\n}\n\n/**\n * Hook to access the SDK configuration.\n * Useful for components that need config values like productId, recaptchaSiteKey, etc.\n */\nexport function useWebSDKConfig(): WebSDKClientConfig {\n  const client = useWebSDK();\n  return client.getConfig();\n}\n","/**\n * PageHead Component\n * Manages dynamic meta tags for SEO optimization on a per-page basis.\n * Supports JSON-LD structured data, Open Graph, Twitter Cards, favicons, and robots directives.\n *\n * @example\n * ```tsx\n * <PageHead\n *   title=\"About Us\"\n *   description=\"Learn about our mission and team\"\n *   productName=\"MyProduct\"\n *   keywords=\"about, team, mission\"\n *   image=\"/og-about.png\"\n *   url=\"https://myproduct.com/about\"\n *   favicon=\"/favicon.ico\"\n *   robots=\"index, follow\"\n *   locale=\"en_US\"\n *   twitterHandle=\"@burdenoff\"\n *   themeColor=\"#1a1a2e\"\n *   structuredData={{\n *     \"@context\": \"https://schema.org\",\n *     \"@type\": \"WebPage\",\n *     name: \"About Us\",\n *   }}\n * />\n * ```\n */\n\nimport { Helmet } from \"react-helmet-async\";\n\nexport interface PageHeadProps {\n  /** Page title */\n  title: string;\n  /** Meta description */\n  description?: string;\n  /** Product/brand name (appended to title) */\n  productName?: string;\n  /** SEO keywords */\n  keywords?: string;\n  /** Open Graph image URL */\n  image?: string;\n  /** Page canonical URL */\n  url?: string;\n  /** Favicon URL */\n  favicon?: string;\n  /** Robots directive (e.g., \"index, follow\") */\n  robots?: string;\n  /** Open Graph locale (e.g., \"en_US\") */\n  locale?: string;\n  /** Twitter handle (e.g., \"@burdenoff\") */\n  twitterHandle?: string;\n  /** Theme color for mobile browsers */\n  themeColor?: string;\n  /** JSON-LD structured data objects */\n  structuredData?: Record<string, unknown> | Array<Record<string, unknown>>;\n  /** Additional meta tags */\n  additionalMeta?: Array<{\n    name?: string;\n    property?: string;\n    content: string;\n  }>;\n}\n\nexport function PageHead({\n  title,\n  description,\n  productName,\n  keywords,\n  image,\n  url,\n  favicon,\n  robots = \"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\",\n  locale = \"en_US\",\n  twitterHandle,\n  themeColor = \"#000000\",\n  structuredData,\n  additionalMeta,\n}: PageHeadProps) {\n  const fullTitle =\n    productName && !title.includes(productName)\n      ? `${title} | ${productName}`\n      : title;\n\n  const fullImageUrl =\n    image && !image.startsWith(\"http\") && url\n      ? `${url.replace(/\\/$/, \"\")}${image}`\n      : image;\n\n  // Normalize structured data to an array\n  const structuredDataItems: Array<Record<string, unknown>> = structuredData\n    ? Array.isArray(structuredData)\n      ? structuredData\n      : [structuredData]\n    : [];\n\n  return (\n    <Helmet>\n      {/* Primary Meta Tags */}\n      <title>{fullTitle}</title>\n      <meta name=\"title\" content={fullTitle} />\n      {description && <meta name=\"description\" content={description} />}\n      {keywords && <meta name=\"keywords\" content={keywords} />}\n      <meta name=\"author\" content=\"Burdenoff Consultancy Services Pvt Ltd\" />\n      <meta name=\"robots\" content={robots} />\n\n      {/* Canonical URL */}\n      {url && <link rel=\"canonical\" href={url} />}\n\n      {/* Favicon */}\n      {favicon && <link rel=\"icon\" href={favicon} />}\n\n      {/* Open Graph / Facebook */}\n      <meta property=\"og:type\" content=\"website\" />\n      <meta property=\"og:title\" content={fullTitle} />\n      {description && <meta property=\"og:description\" content={description} />}\n      {fullImageUrl && <meta property=\"og:image\" content={fullImageUrl} />}\n      {url && <meta property=\"og:url\" content={url} />}\n      <meta property=\"og:locale\" content={locale} />\n      {productName && <meta property=\"og:site_name\" content={productName} />}\n\n      {/* Twitter Card */}\n      <meta name=\"twitter:card\" content=\"summary_large_image\" />\n      <meta name=\"twitter:title\" content={fullTitle} />\n      {description && <meta name=\"twitter:description\" content={description} />}\n      {fullImageUrl && <meta name=\"twitter:image\" content={fullImageUrl} />}\n      {twitterHandle && <meta name=\"twitter:creator\" content={twitterHandle} />}\n\n      {/* Theme Color */}\n      <meta name=\"theme-color\" content={themeColor} />\n\n      {/* JSON-LD Structured Data */}\n      {structuredDataItems.map((data, index) => (\n        <script key={`ld-${index}`} type=\"application/ld+json\">\n          {JSON.stringify(data)}\n        </script>\n      ))}\n\n      {/* Additional Meta Tags */}\n      {additionalMeta?.map((meta, index) => (\n        <meta\n          key={`meta-${index}`}\n          {...(meta.name ? { name: meta.name } : {})}\n          {...(meta.property ? { property: meta.property } : {})}\n          content={meta.content}\n        />\n      ))}\n    </Helmet>\n  );\n}\n","/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n","import * as React from \"react\";\n\nimport { Slot } from \"@radix-ui/react-slot\";\nimport { cva, type VariantProps } from \"class-variance-authority\";\n\nimport { cn } from \"../utils/cn\";\n\nconst buttonVariants = cva(\n  \"inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:size-4 [&_svg]:shrink-0\",\n  {\n    variants: {\n      variant: {\n        default:\n          \"bg-primary text-primary-foreground shadow hover:bg-primary/90\",\n        destructive:\n          \"bg-destructive text-destructive-foreground shadow-sm hover:bg-destructive/90\",\n        outline:\n          \"border border-input bg-background shadow-sm hover:bg-accent hover:text-accent-foreground\",\n        secondary:\n          \"bg-secondary text-secondary-foreground shadow-sm hover:bg-secondary/80\",\n        ghost: \"hover:bg-accent hover:text-accent-foreground\",\n        link: \"text-primary underline-offset-4 hover:underline\",\n      },\n      size: {\n        default: \"h-9 px-4 py-2\",\n        sm: \"h-8 rounded-md px-3 text-xs\",\n        lg: \"h-10 rounded-md px-8\",\n        icon: \"h-9 w-9\",\n      },\n    },\n    defaultVariants: {\n      variant: \"default\",\n      size: \"default\",\n    },\n  },\n);\n\nexport interface ButtonProps\n  extends\n    React.ButtonHTMLAttributes<HTMLButtonElement>,\n    VariantProps<typeof buttonVariants> {\n  asChild?: boolean;\n}\n\nconst Button = React.forwardRef<HTMLButtonElement, ButtonProps>(\n  ({ className, variant, size, asChild = false, ...props }, ref) => {\n    const Comp = asChild ? Slot : \"button\";\n    return (\n      <Comp\n        className={cn(buttonVariants({ variant, size, className }))}\n        ref={ref}\n        {...props}\n      />\n    );\n  },\n);\nButton.displayName = \"Button\";\n\nexport { Button, buttonVariants };\n","\"use client\";\n\nimport { useState, useEffect } from \"react\";\n\nimport { toast } from \"sonner\";\n\nimport { useWebSDK, useWebSDKConfig } from \"../client/provider\";\nimport { PageHead } from \"../seo/page-head\";\nimport { Button } from \"../ui/button\";\n\n// ============================================================================\n// GRAPHQL MUTATION\n// ============================================================================\n\nconst UNSUBSCRIBE_MUTATION = /* GraphQL */ `\n  mutation PublicUnsubscribeByToken($token: String!) {\n    publicUnsubscribeByToken(token: $token)\n  }\n`;\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface UnsubscribePageProps {\n  productName?: string;\n  className?: string;\n  seoTitle?: string;\n  seoDescription?: string;\n  resubscribeUrl?: string;\n  successMessage?: string;\n  errorMessage?: string;\n}\n\ntype UnsubscribeState =\n  | \"loading\"\n  | \"confirming\"\n  | \"processing\"\n  | \"success\"\n  | \"error\"\n  | \"invalid\";\n\n// ============================================================================\n// COMPONENT\n// ============================================================================\n\nexport function UnsubscribePage({\n  productName,\n  className = \"\",\n  seoTitle = \"Unsubscribe from Newsletter\",\n  seoDescription = \"Manage your newsletter subscription preferences.\",\n  resubscribeUrl,\n  successMessage = \"You have been successfully unsubscribed from our newsletter.\",\n  errorMessage = \"Something went wrong. Please try again or contact support.\",\n}: UnsubscribePageProps) {\n  const client = useWebSDK();\n  const config = useWebSDKConfig();\n  const displayName = productName ?? config.productId;\n\n  const [state, setState] = useState<UnsubscribeState>(\"loading\");\n  const [error, setError] = useState<string>(\"\");\n  const [token, setToken] = useState<string>(\"\");\n  const [successCopy, setSuccessCopy] = useState<string>(successMessage);\n\n  useEffect(() => {\n    const params = new URLSearchParams(window.location.search);\n    const t = params.get(\"token\");\n    if (t) {\n      setToken(t);\n      setState(\"confirming\");\n    } else {\n      setState(\"invalid\");\n    }\n  }, []);\n\n  const handleUnsubscribe = async () => {\n    if (!token) return;\n\n    setState(\"processing\");\n\n    try {\n      const result = await client.mutate<{\n        publicUnsubscribeByToken: boolean;\n      }>(UNSUBSCRIBE_MUTATION, { token });\n\n      if (result.errors?.length) {\n        const errMsg = result.errors[0]?.message ?? errorMessage;\n        const code = (result.errors[0] as { extensions?: { code?: string } })\n          ?.extensions?.code;\n\n        if (code === \"ALREADY_UNSUBSCRIBED\") {\n          toast.info(\"You are already unsubscribed from this newsletter.\");\n          setSuccessCopy(\"You were already unsubscribed from this newsletter.\");\n          setState(\"success\");\n          return;\n        } else if (code === \"UNSUBSCRIBE_TOKEN_EXPIRED\") {\n          setError(\n            \"This unsubscribe link has expired. Please contact support.\",\n          );\n        } else if (code === \"INVALID_UNSUBSCRIBE_TOKEN\") {\n          setState(\"invalid\");\n          return;\n        } else {\n          setError(errMsg);\n        }\n        setState(\"error\");\n        return;\n      }\n\n      if (result.data?.publicUnsubscribeByToken) {\n        setSuccessCopy(successMessage);\n        setState(\"success\");\n        toast.success(\"Successfully unsubscribed\");\n      } else {\n        setError(errorMessage);\n        setState(\"error\");\n      }\n    } catch {\n      setError(errorMessage);\n      setState(\"error\");\n    }\n  };\n\n  return (\n    <div\n      className={className}\n      style={{\n        minHeight: \"60vh\",\n        display: \"flex\",\n        alignItems: \"center\",\n        justifyContent: \"center\",\n        padding: \"6rem 1rem 4rem\",\n      }}\n    >\n      <PageHead title={seoTitle} description={seoDescription} />\n\n      <div className=\"max-w-md w-full text-center\">\n        {/* Loading */}\n        {state === \"loading\" && (\n          <div className=\"animate-pulse\">\n            <div className=\"h-8 w-48 bg-muted rounded mx-auto mb-4\" />\n            <div className=\"h-4 w-64 bg-muted rounded mx-auto\" />\n          </div>\n        )}\n\n        {/* Confirm */}\n        {state === \"confirming\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-amber-100 dark:bg-amber-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-amber-600 dark:text-amber-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L4.082 16.5c-.77.833.192 2.5 1.732 2.5z\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribe from Newsletter\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">\n              Are you sure you want to unsubscribe from {displayName}{\" \"}\n              newsletter? You will no longer receive updates and news from us.\n            </p>\n            <div className=\"flex flex-col sm:flex-row gap-3 justify-center\">\n              <Button\n                onClick={handleUnsubscribe}\n                variant=\"destructive\"\n                className=\"px-8\"\n              >\n                Yes, Unsubscribe\n              </Button>\n              {resubscribeUrl && (\n                <Button\n                  variant=\"outline\"\n                  onClick={() => {\n                    window.location.href = resubscribeUrl;\n                  }}\n                  className=\"px-8\"\n                >\n                  Cancel\n                </Button>\n              )}\n            </div>\n          </div>\n        )}\n\n        {/* Processing */}\n        {state === \"processing\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-muted flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-muted-foreground animate-spin\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n              >\n                <circle\n                  className=\"opacity-25\"\n                  cx=\"12\"\n                  cy=\"12\"\n                  r=\"10\"\n                  stroke=\"currentColor\"\n                  strokeWidth=\"4\"\n                />\n                <path\n                  className=\"opacity-75\"\n                  fill=\"currentColor\"\n                  d=\"M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribing...\n            </h1>\n            <p className=\"text-muted-foreground\">\n              Please wait while we process your request.\n            </p>\n          </div>\n        )}\n\n        {/* Success */}\n        {state === \"success\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-green-100 dark:bg-green-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-green-600 dark:text-green-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M5 13l4 4L19 7\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Successfully Unsubscribed\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">{successCopy}</p>\n            {resubscribeUrl && (\n              <p className=\"text-sm text-muted-foreground\">\n                Changed your mind?{\" \"}\n                <a\n                  href={resubscribeUrl}\n                  className=\"text-primary underline hover:no-underline\"\n                >\n                  Resubscribe\n                </a>\n              </p>\n            )}\n          </div>\n        )}\n\n        {/* Error */}\n        {state === \"error\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-red-100 dark:bg-red-900/30 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-red-600 dark:text-red-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M6 18L18 6M6 6l12 12\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Unsubscribe Failed\n            </h1>\n            <p className=\"text-muted-foreground mb-8\">{error}</p>\n            <Button onClick={() => setState(\"confirming\")} variant=\"outline\">\n              Try Again\n            </Button>\n          </div>\n        )}\n\n        {/* Invalid / No Token */}\n        {state === \"invalid\" && (\n          <div>\n            <div className=\"w-16 h-16 mx-auto mb-6 rounded-full bg-gray-100 dark:bg-gray-800 flex items-center justify-center\">\n              <svg\n                className=\"w-8 h-8 text-gray-400\"\n                fill=\"none\"\n                viewBox=\"0 0 24 24\"\n                stroke=\"currentColor\"\n                strokeWidth={2}\n              >\n                <path\n                  strokeLinecap=\"round\"\n                  strokeLinejoin=\"round\"\n                  d=\"M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.543-7a9.97 9.97 0 011.563-3.029m5.858.908a3 3 0 114.243 4.243M9.878 9.878l4.242 4.242M9.88 9.88l-3.29-3.29m7.532 7.532l3.29 3.29M3 3l3.59 3.59m0 0A9.953 9.953 0 0112 5c4.478 0 8.268 2.943 9.543 7a10.025 10.025 0 01-4.132 5.411m0 0L21 21\"\n                />\n              </svg>\n            </div>\n            <h1 className=\"text-2xl font-bold text-foreground mb-3\">\n              Invalid Unsubscribe Link\n            </h1>\n            <p className=\"text-muted-foreground\">\n              This unsubscribe link is invalid or missing. If you want to\n              unsubscribe, please use the link from your newsletter email.\n            </p>\n          </div>\n        )}\n      </div>\n    </div>\n  );\n}\n"]}