@burdenoff/website-sdk 2026.824.2 → 2026.828.1

package/dist/utils/index.d.mts

@@ -18,4 +18,52 @@ import { ClassValue } from 'clsx';
  */
 declare function cn(...inputs: ClassValue[]): string;
 
-export { cn };
+/**
+ * reCAPTCHA v3 (invisible, score-based) loader and token minter.
+ *
+ * Deliberately dependency-free: the SDK already ships the `react-google-recaptcha`
+ * peer for the **v2 checkbox** used by `ContactPage`, and the two widgets cannot
+ * share a script tag — v3 needs `?render=<siteKey>` on the URL, v2 must not have
+ * it. This module injects its own v3 script and leaves the v2 integration alone.
+ *
+ * The Explore chat turns v3 on purely from the backend catalog
+ * (`exploreCatalog.captchaRequired && recaptchaSiteKey`), so nothing is loaded
+ * and no third-party request is made on sites where captcha is off.
+ */
+/** The slice of the `grecaptcha` global this module uses. */
+interface RecaptchaV3 {
+    /** Runs the callback once the API is fully initialised. */
+    ready(callback: () => void): void;
+    /** Mints a single-use token for `action`. */
+    execute(siteKey: string, options: {
+        action: string;
+    }): Promise<string>;
+}
+declare global {
+    interface Window {
+        grecaptcha?: RecaptchaV3;
+    }
+}
+/** Default action name reported to reCAPTCHA for Explore chat submissions. */
+declare const EXPLORE_RECAPTCHA_ACTION = "explore_chat";
+/**
+ * Load the reCAPTCHA v3 script for `siteKey` and resolve once `grecaptcha` is
+ * ready to mint tokens.
+ *
+ * - Injects the script at most once per site key (subsequent calls reuse the
+ *   same promise).
+ * - Adopts an already-present script tag (e.g. injected by the host site)
+ *   rather than adding a second one.
+ * - Rejects rather than hanging when the script fails to load, so the caller
+ *   can decide whether to submit without a token or surface an error.
+ */
+declare function loadRecaptchaV3(siteKey: string): Promise<RecaptchaV3>;
+/**
+ * Mint a single-use reCAPTCHA v3 token, loading the script on first use.
+ *
+ * Tokens are valid for ~2 minutes and are consumed by one verification, so
+ * this must be called per submission — never cached.
+ */
+declare function getRecaptchaV3Token(siteKey: string, action?: string): Promise<string>;
+
+export { EXPLORE_RECAPTCHA_ACTION, type RecaptchaV3, cn, getRecaptchaV3Token, loadRecaptchaV3 };

package/dist/utils/index.d.ts

@@ -18,4 +18,52 @@ import { ClassValue } from 'clsx';
  */
 declare function cn(...inputs: ClassValue[]): string;
 
-export { cn };
+/**
+ * reCAPTCHA v3 (invisible, score-based) loader and token minter.
+ *
+ * Deliberately dependency-free: the SDK already ships the `react-google-recaptcha`
+ * peer for the **v2 checkbox** used by `ContactPage`, and the two widgets cannot
+ * share a script tag — v3 needs `?render=<siteKey>` on the URL, v2 must not have
+ * it. This module injects its own v3 script and leaves the v2 integration alone.
+ *
+ * The Explore chat turns v3 on purely from the backend catalog
+ * (`exploreCatalog.captchaRequired && recaptchaSiteKey`), so nothing is loaded
+ * and no third-party request is made on sites where captcha is off.
+ */
+/** The slice of the `grecaptcha` global this module uses. */
+interface RecaptchaV3 {
+    /** Runs the callback once the API is fully initialised. */
+    ready(callback: () => void): void;
+    /** Mints a single-use token for `action`. */
+    execute(siteKey: string, options: {
+        action: string;
+    }): Promise<string>;
+}
+declare global {
+    interface Window {
+        grecaptcha?: RecaptchaV3;
+    }
+}
+/** Default action name reported to reCAPTCHA for Explore chat submissions. */
+declare const EXPLORE_RECAPTCHA_ACTION = "explore_chat";
+/**
+ * Load the reCAPTCHA v3 script for `siteKey` and resolve once `grecaptcha` is
+ * ready to mint tokens.
+ *
+ * - Injects the script at most once per site key (subsequent calls reuse the
+ *   same promise).
+ * - Adopts an already-present script tag (e.g. injected by the host site)
+ *   rather than adding a second one.
+ * - Rejects rather than hanging when the script fails to load, so the caller
+ *   can decide whether to submit without a token or surface an error.
+ */
+declare function loadRecaptchaV3(siteKey: string): Promise<RecaptchaV3>;
+/**
+ * Mint a single-use reCAPTCHA v3 token, loading the script on first use.
+ *
+ * Tokens are valid for ~2 minutes and are consumed by one verification, so
+ * this must be called per submission — never cached.
+ */
+declare function getRecaptchaV3Token(siteKey: string, action?: string): Promise<string>;
+
+export { EXPLORE_RECAPTCHA_ACTION, type RecaptchaV3, cn, getRecaptchaV3Token, loadRecaptchaV3 };

package/dist/utils/index.js

@@ -7,6 +7,76 @@ function cn(...inputs) {
   return tailwindMerge.twMerge(clsx.clsx(inputs));
 }
 
+// src/utils/recaptcha-v3.ts
+var SCRIPT_ID = "boff-recaptcha-v3";
+var SCRIPT_SRC = "https://www.google.com/recaptcha/api.js?render=";
+var EXPLORE_RECAPTCHA_ACTION = "explore_chat";
+var loaders = /* @__PURE__ */ new Map();
+function isBrowser() {
+  return typeof window !== "undefined" && typeof document !== "undefined";
+}
+function loadRecaptchaV3(siteKey) {
+  if (!siteKey) {
+    return Promise.reject(new Error("reCAPTCHA site key is required"));
+  }
+  if (!isBrowser()) {
+    return Promise.reject(
+      new Error("reCAPTCHA v3 can only be loaded in a browser")
+    );
+  }
+  const existing = loaders.get(siteKey);
+  if (existing) return existing;
+  const promise = new Promise((resolve, reject) => {
+    const ready = () => {
+      const api = window.grecaptcha;
+      if (!api) {
+        reject(new Error("reCAPTCHA loaded but grecaptcha is unavailable"));
+        return;
+      }
+      api.ready(() => resolve(api));
+    };
+    if (window.grecaptcha) {
+      ready();
+      return;
+    }
+    const scriptId = `${SCRIPT_ID}-${siteKey}`;
+    const found = document.getElementById(scriptId);
+    if (found) {
+      found.addEventListener("load", ready, { once: true });
+      found.addEventListener(
+        "error",
+        () => reject(new Error("Failed to load reCAPTCHA v3")),
+        { once: true }
+      );
+      return;
+    }
+    const script = document.createElement("script");
+    script.id = scriptId;
+    script.src = `${SCRIPT_SRC}${encodeURIComponent(siteKey)}`;
+    script.async = true;
+    script.defer = true;
+    script.addEventListener("load", ready, { once: true });
+    script.addEventListener(
+      "error",
+      () => {
+        loaders.delete(siteKey);
+        reject(new Error("Failed to load reCAPTCHA v3"));
+      },
+      { once: true }
+    );
+    document.head.appendChild(script);
+  });
+  loaders.set(siteKey, promise);
+  return promise;
+}
+async function getRecaptchaV3Token(siteKey, action = EXPLORE_RECAPTCHA_ACTION) {
+  const api = await loadRecaptchaV3(siteKey);
+  return api.execute(siteKey, { action });
+}
+
+exports.EXPLORE_RECAPTCHA_ACTION = EXPLORE_RECAPTCHA_ACTION;
 exports.cn = cn;
+exports.getRecaptchaV3Token = getRecaptchaV3Token;
+exports.loadRecaptchaV3 = loadRecaptchaV3;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/cn.ts"],"names":["twMerge","clsx"],"mappings":";;;;;AAmBO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAOA,qBAAA,CAAQC,SAAA,CAAK,MAAM,CAAC,CAAA;AAC7B","file":"index.js","sourcesContent":["/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n"]}
+{"version":3,"sources":["../../src/utils/cn.ts","../../src/utils/recaptcha-v3.ts"],"names":["twMerge","clsx"],"mappings":";;;;;AAmBO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAOA,qBAAA,CAAQC,SAAA,CAAK,MAAM,CAAC,CAAA;AAC7B;;;ACMA,IAAM,SAAA,GAAY,mBAAA;AAClB,IAAM,UAAA,GAAa,iDAAA;AAGZ,IAAM,wBAAA,GAA2B;AAOxC,IAAM,OAAA,uBAAc,GAAA,EAAkC;AAEtD,SAAS,SAAA,GAAqB;AAC5B,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,QAAA,KAAa,WAAA;AAC9D;AAaO,SAAS,gBAAgB,OAAA,EAAuC;AACrE,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AAAA,EACnE;AACA,EAAA,IAAI,CAAC,WAAU,EAAG;AAChB,IAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,MACb,IAAI,MAAM,8CAA8C;AAAA,KAC1D;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACpC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAqB,CAAC,SAAS,MAAA,KAAW;AAC5D,IAAA,MAAM,QAAQ,MAAM;AAClB,MAAA,MAAM,MAAM,MAAA,CAAO,UAAA;AACnB,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,gDAAgD,CAAC,CAAA;AAClE,QAAA;AAAA,MACF;AAGA,MAAA,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,IAC9B,CAAA;AAGA,IAAA,IAAI,OAAO,UAAA,EAAY;AACrB,MAAA,KAAA,EAAM;AACN,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AACxC,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA;AAC9C,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,CAAM,iBAAiB,MAAA,EAAQ,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACpD,MAAA,KAAA,CAAM,gBAAA;AAAA,QACJ,OAAA;AAAA,QACA,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAAA,QACrD,EAAE,MAAM,IAAA;AAAK,OACf;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,EAAA,GAAK,QAAA;AACZ,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,UAAU,CAAA,EAAG,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AACxD,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,iBAAiB,MAAA,EAAQ,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACrD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,OAAA;AAAA,MACA,MAAM;AAGJ,QAAA,OAAA,CAAQ,OAAO,OAAO,CAAA;AACtB,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AACA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC,CAAC,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,SAAS,OAAO,CAAA;AAC5B,EAAA,OAAO,OAAA;AACT;AAQA,eAAsB,mBAAA,CACpB,OAAA,EACA,MAAA,GAAiB,wBAAA,EACA;AACjB,EAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,OAAO,CAAA;AACzC,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAE,QAAQ,CAAA;AACxC","file":"index.js","sourcesContent":["/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n","/**\n * reCAPTCHA v3 (invisible, score-based) loader and token minter.\n *\n * Deliberately dependency-free: the SDK already ships the `react-google-recaptcha`\n * peer for the **v2 checkbox** used by `ContactPage`, and the two widgets cannot\n * share a script tag — v3 needs `?render=<siteKey>` on the URL, v2 must not have\n * it. This module injects its own v3 script and leaves the v2 integration alone.\n *\n * The Explore chat turns v3 on purely from the backend catalog\n * (`exploreCatalog.captchaRequired && recaptchaSiteKey`), so nothing is loaded\n * and no third-party request is made on sites where captcha is off.\n */\n\n/** The slice of the `grecaptcha` global this module uses. */\nexport interface RecaptchaV3 {\n  /** Runs the callback once the API is fully initialised. */\n  ready(callback: () => void): void;\n  /** Mints a single-use token for `action`. */\n  execute(siteKey: string, options: { action: string }): Promise<string>;\n}\n\ndeclare global {\n  interface Window {\n    grecaptcha?: RecaptchaV3;\n  }\n}\n\nconst SCRIPT_ID = \"boff-recaptcha-v3\";\nconst SCRIPT_SRC = \"https://www.google.com/recaptcha/api.js?render=\";\n\n/** Default action name reported to reCAPTCHA for Explore chat submissions. */\nexport const EXPLORE_RECAPTCHA_ACTION = \"explore_chat\";\n\n/**\n * One in-flight/settled promise per site key. Guarantees the script tag is\n * injected at most once even when several components mount at the same time,\n * and lets later callers await the same load instead of racing it.\n */\nconst loaders = new Map<string, Promise<RecaptchaV3>>();\n\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\n\n/**\n * Load the reCAPTCHA v3 script for `siteKey` and resolve once `grecaptcha` is\n * ready to mint tokens.\n *\n * - Injects the script at most once per site key (subsequent calls reuse the\n *   same promise).\n * - Adopts an already-present script tag (e.g. injected by the host site)\n *   rather than adding a second one.\n * - Rejects rather than hanging when the script fails to load, so the caller\n *   can decide whether to submit without a token or surface an error.\n */\nexport function loadRecaptchaV3(siteKey: string): Promise<RecaptchaV3> {\n  if (!siteKey) {\n    return Promise.reject(new Error(\"reCAPTCHA site key is required\"));\n  }\n  if (!isBrowser()) {\n    return Promise.reject(\n      new Error(\"reCAPTCHA v3 can only be loaded in a browser\"),\n    );\n  }\n\n  const existing = loaders.get(siteKey);\n  if (existing) return existing;\n\n  const promise = new Promise<RecaptchaV3>((resolve, reject) => {\n    const ready = () => {\n      const api = window.grecaptcha;\n      if (!api) {\n        reject(new Error(\"reCAPTCHA loaded but grecaptcha is unavailable\"));\n        return;\n      }\n      // `ready` queues until the API has finished initialising internally;\n      // calling `execute` before that throws.\n      api.ready(() => resolve(api));\n    };\n\n    // Already loaded by this module, another SDK instance, or the host site.\n    if (window.grecaptcha) {\n      ready();\n      return;\n    }\n\n    const scriptId = `${SCRIPT_ID}-${siteKey}`;\n    const found = document.getElementById(scriptId);\n    if (found) {\n      found.addEventListener(\"load\", ready, { once: true });\n      found.addEventListener(\n        \"error\",\n        () => reject(new Error(\"Failed to load reCAPTCHA v3\")),\n        { once: true },\n      );\n      return;\n    }\n\n    const script = document.createElement(\"script\");\n    script.id = scriptId;\n    script.src = `${SCRIPT_SRC}${encodeURIComponent(siteKey)}`;\n    script.async = true;\n    script.defer = true;\n    script.addEventListener(\"load\", ready, { once: true });\n    script.addEventListener(\n      \"error\",\n      () => {\n        // Drop the memo so a later attempt can retry a transient CDN failure\n        // instead of being stuck with a permanently rejected promise.\n        loaders.delete(siteKey);\n        reject(new Error(\"Failed to load reCAPTCHA v3\"));\n      },\n      { once: true },\n    );\n    document.head.appendChild(script);\n  });\n\n  loaders.set(siteKey, promise);\n  return promise;\n}\n\n/**\n * Mint a single-use reCAPTCHA v3 token, loading the script on first use.\n *\n * Tokens are valid for ~2 minutes and are consumed by one verification, so\n * this must be called per submission — never cached.\n */\nexport async function getRecaptchaV3Token(\n  siteKey: string,\n  action: string = EXPLORE_RECAPTCHA_ACTION,\n): Promise<string> {\n  const api = await loadRecaptchaV3(siteKey);\n  return api.execute(siteKey, { action });\n}\n"]}

package/dist/utils/index.mjs

@@ -5,6 +5,73 @@ function cn(...inputs) {
   return twMerge(clsx(inputs));
 }
 
-export { cn };
+// src/utils/recaptcha-v3.ts
+var SCRIPT_ID = "boff-recaptcha-v3";
+var SCRIPT_SRC = "https://www.google.com/recaptcha/api.js?render=";
+var EXPLORE_RECAPTCHA_ACTION = "explore_chat";
+var loaders = /* @__PURE__ */ new Map();
+function isBrowser() {
+  return typeof window !== "undefined" && typeof document !== "undefined";
+}
+function loadRecaptchaV3(siteKey) {
+  if (!siteKey) {
+    return Promise.reject(new Error("reCAPTCHA site key is required"));
+  }
+  if (!isBrowser()) {
+    return Promise.reject(
+      new Error("reCAPTCHA v3 can only be loaded in a browser")
+    );
+  }
+  const existing = loaders.get(siteKey);
+  if (existing) return existing;
+  const promise = new Promise((resolve, reject) => {
+    const ready = () => {
+      const api = window.grecaptcha;
+      if (!api) {
+        reject(new Error("reCAPTCHA loaded but grecaptcha is unavailable"));
+        return;
+      }
+      api.ready(() => resolve(api));
+    };
+    if (window.grecaptcha) {
+      ready();
+      return;
+    }
+    const scriptId = `${SCRIPT_ID}-${siteKey}`;
+    const found = document.getElementById(scriptId);
+    if (found) {
+      found.addEventListener("load", ready, { once: true });
+      found.addEventListener(
+        "error",
+        () => reject(new Error("Failed to load reCAPTCHA v3")),
+        { once: true }
+      );
+      return;
+    }
+    const script = document.createElement("script");
+    script.id = scriptId;
+    script.src = `${SCRIPT_SRC}${encodeURIComponent(siteKey)}`;
+    script.async = true;
+    script.defer = true;
+    script.addEventListener("load", ready, { once: true });
+    script.addEventListener(
+      "error",
+      () => {
+        loaders.delete(siteKey);
+        reject(new Error("Failed to load reCAPTCHA v3"));
+      },
+      { once: true }
+    );
+    document.head.appendChild(script);
+  });
+  loaders.set(siteKey, promise);
+  return promise;
+}
+async function getRecaptchaV3Token(siteKey, action = EXPLORE_RECAPTCHA_ACTION) {
+  const api = await loadRecaptchaV3(siteKey);
+  return api.execute(siteKey, { action });
+}
+
+export { EXPLORE_RECAPTCHA_ACTION, cn, getRecaptchaV3Token, loadRecaptchaV3 };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/utils/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/cn.ts"],"names":[],"mappings":";;;AAmBO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAC,CAAA;AAC7B","file":"index.mjs","sourcesContent":["/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n"]}
+{"version":3,"sources":["../../src/utils/cn.ts","../../src/utils/recaptcha-v3.ts"],"names":[],"mappings":";;;AAmBO,SAAS,MAAM,MAAA,EAA8B;AAClD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAC,CAAA;AAC7B;;;ACMA,IAAM,SAAA,GAAY,mBAAA;AAClB,IAAM,UAAA,GAAa,iDAAA;AAGZ,IAAM,wBAAA,GAA2B;AAOxC,IAAM,OAAA,uBAAc,GAAA,EAAkC;AAEtD,SAAS,SAAA,GAAqB;AAC5B,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,QAAA,KAAa,WAAA;AAC9D;AAaO,SAAS,gBAAgB,OAAA,EAAuC;AACrE,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AAAA,EACnE;AACA,EAAA,IAAI,CAAC,WAAU,EAAG;AAChB,IAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,MACb,IAAI,MAAM,8CAA8C;AAAA,KAC1D;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACpC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAqB,CAAC,SAAS,MAAA,KAAW;AAC5D,IAAA,MAAM,QAAQ,MAAM;AAClB,MAAA,MAAM,MAAM,MAAA,CAAO,UAAA;AACnB,MAAA,IAAI,CAAC,GAAA,EAAK;AACR,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,gDAAgD,CAAC,CAAA;AAClE,QAAA;AAAA,MACF;AAGA,MAAA,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,IAC9B,CAAA;AAGA,IAAA,IAAI,OAAO,UAAA,EAAY;AACrB,MAAA,KAAA,EAAM;AACN,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,QAAA,GAAW,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AACxC,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA;AAC9C,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,KAAA,CAAM,iBAAiB,MAAA,EAAQ,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACpD,MAAA,KAAA,CAAM,gBAAA;AAAA,QACJ,OAAA;AAAA,QACA,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAAA,QACrD,EAAE,MAAM,IAAA;AAAK,OACf;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,EAAA,GAAK,QAAA;AACZ,IAAA,MAAA,CAAO,MAAM,CAAA,EAAG,UAAU,CAAA,EAAG,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AACxD,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,iBAAiB,MAAA,EAAQ,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACrD,IAAA,MAAA,CAAO,gBAAA;AAAA,MACL,OAAA;AAAA,MACA,MAAM;AAGJ,QAAA,OAAA,CAAQ,OAAO,OAAO,CAAA;AACtB,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,EAAE,MAAM,IAAA;AAAK,KACf;AACA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC,CAAC,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,SAAS,OAAO,CAAA;AAC5B,EAAA,OAAO,OAAA;AACT;AAQA,eAAsB,mBAAA,CACpB,OAAA,EACA,MAAA,GAAiB,wBAAA,EACA;AACjB,EAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,OAAO,CAAA;AACzC,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,EAAE,QAAQ,CAAA;AACxC","file":"index.mjs","sourcesContent":["/**\n * Utility function to merge Tailwind CSS classes\n * Combines clsx and tailwind-merge for optimal class handling\n */\n\nimport { type ClassValue, clsx } from \"clsx\";\nimport { twMerge } from \"tailwind-merge\";\n\n/**\n * Merge multiple class names intelligently\n * - Handles conditional classes via clsx\n * - Deduplicates and resolves Tailwind conflicts via tailwind-merge\n *\n * @example\n * ```ts\n * cn('px-4 py-2', 'bg-blue-500', { 'text-white': isActive })\n * // => 'px-4 py-2 bg-blue-500 text-white' (if isActive is true)\n * ```\n */\nexport function cn(...inputs: ClassValue[]): string {\n  return twMerge(clsx(inputs));\n}\n","/**\n * reCAPTCHA v3 (invisible, score-based) loader and token minter.\n *\n * Deliberately dependency-free: the SDK already ships the `react-google-recaptcha`\n * peer for the **v2 checkbox** used by `ContactPage`, and the two widgets cannot\n * share a script tag — v3 needs `?render=<siteKey>` on the URL, v2 must not have\n * it. This module injects its own v3 script and leaves the v2 integration alone.\n *\n * The Explore chat turns v3 on purely from the backend catalog\n * (`exploreCatalog.captchaRequired && recaptchaSiteKey`), so nothing is loaded\n * and no third-party request is made on sites where captcha is off.\n */\n\n/** The slice of the `grecaptcha` global this module uses. */\nexport interface RecaptchaV3 {\n  /** Runs the callback once the API is fully initialised. */\n  ready(callback: () => void): void;\n  /** Mints a single-use token for `action`. */\n  execute(siteKey: string, options: { action: string }): Promise<string>;\n}\n\ndeclare global {\n  interface Window {\n    grecaptcha?: RecaptchaV3;\n  }\n}\n\nconst SCRIPT_ID = \"boff-recaptcha-v3\";\nconst SCRIPT_SRC = \"https://www.google.com/recaptcha/api.js?render=\";\n\n/** Default action name reported to reCAPTCHA for Explore chat submissions. */\nexport const EXPLORE_RECAPTCHA_ACTION = \"explore_chat\";\n\n/**\n * One in-flight/settled promise per site key. Guarantees the script tag is\n * injected at most once even when several components mount at the same time,\n * and lets later callers await the same load instead of racing it.\n */\nconst loaders = new Map<string, Promise<RecaptchaV3>>();\n\nfunction isBrowser(): boolean {\n  return typeof window !== \"undefined\" && typeof document !== \"undefined\";\n}\n\n/**\n * Load the reCAPTCHA v3 script for `siteKey` and resolve once `grecaptcha` is\n * ready to mint tokens.\n *\n * - Injects the script at most once per site key (subsequent calls reuse the\n *   same promise).\n * - Adopts an already-present script tag (e.g. injected by the host site)\n *   rather than adding a second one.\n * - Rejects rather than hanging when the script fails to load, so the caller\n *   can decide whether to submit without a token or surface an error.\n */\nexport function loadRecaptchaV3(siteKey: string): Promise<RecaptchaV3> {\n  if (!siteKey) {\n    return Promise.reject(new Error(\"reCAPTCHA site key is required\"));\n  }\n  if (!isBrowser()) {\n    return Promise.reject(\n      new Error(\"reCAPTCHA v3 can only be loaded in a browser\"),\n    );\n  }\n\n  const existing = loaders.get(siteKey);\n  if (existing) return existing;\n\n  const promise = new Promise<RecaptchaV3>((resolve, reject) => {\n    const ready = () => {\n      const api = window.grecaptcha;\n      if (!api) {\n        reject(new Error(\"reCAPTCHA loaded but grecaptcha is unavailable\"));\n        return;\n      }\n      // `ready` queues until the API has finished initialising internally;\n      // calling `execute` before that throws.\n      api.ready(() => resolve(api));\n    };\n\n    // Already loaded by this module, another SDK instance, or the host site.\n    if (window.grecaptcha) {\n      ready();\n      return;\n    }\n\n    const scriptId = `${SCRIPT_ID}-${siteKey}`;\n    const found = document.getElementById(scriptId);\n    if (found) {\n      found.addEventListener(\"load\", ready, { once: true });\n      found.addEventListener(\n        \"error\",\n        () => reject(new Error(\"Failed to load reCAPTCHA v3\")),\n        { once: true },\n      );\n      return;\n    }\n\n    const script = document.createElement(\"script\");\n    script.id = scriptId;\n    script.src = `${SCRIPT_SRC}${encodeURIComponent(siteKey)}`;\n    script.async = true;\n    script.defer = true;\n    script.addEventListener(\"load\", ready, { once: true });\n    script.addEventListener(\n      \"error\",\n      () => {\n        // Drop the memo so a later attempt can retry a transient CDN failure\n        // instead of being stuck with a permanently rejected promise.\n        loaders.delete(siteKey);\n        reject(new Error(\"Failed to load reCAPTCHA v3\"));\n      },\n      { once: true },\n    );\n    document.head.appendChild(script);\n  });\n\n  loaders.set(siteKey, promise);\n  return promise;\n}\n\n/**\n * Mint a single-use reCAPTCHA v3 token, loading the script on first use.\n *\n * Tokens are valid for ~2 minutes and are consumed by one verification, so\n * this must be called per submission — never cached.\n */\nexport async function getRecaptchaV3Token(\n  siteKey: string,\n  action: string = EXPLORE_RECAPTCHA_ACTION,\n): Promise<string> {\n  const api = await loadRecaptchaV3(siteKey);\n  return api.execute(siteKey, { action });\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/website-sdk",
-  "version": "2026.824.2",
+  "version": "2026.828.1",
   "description": "Shared SDK for Burdenoff product websites - reusable React components, utilities, and configurations",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -41,6 +41,11 @@
       "import": "./dist/product/index.mjs",
       "require": "./dist/product/index.js"
     },
+    "./hooks": {
+      "types": "./dist/hooks/index.d.ts",
+      "import": "./dist/hooks/index.mjs",
+      "require": "./dist/hooks/index.js"
+    },
     "./utils": {
       "types": "./dist/utils/index.d.ts",
       "import": "./dist/utils/index.mjs",
@@ -112,49 +117,49 @@
     "zod": ">=3.0.0"
   },
   "dependencies": {
-    "isomorphic-dompurify": "^2.20.0",
+    "isomorphic-dompurify": "^2.36.0",
     "react-markdown": "^10.1.0",
     "rehype-sanitize": "^6.0.0",
     "remark-gfm": "^4.0.1"
   },
   "devDependencies": {
-    "@eslint/js": "^9.39.1",
-    "@hookform/resolvers": "^5.2.2",
-    "@radix-ui/react-dropdown-menu": "^2.1.20",
-    "@radix-ui/react-label": "^2.0.2",
-    "@radix-ui/react-slot": "^1.0.2",
+    "@eslint/js": "^9.39.5",
+    "@hookform/resolvers": "^5.9.1",
+    "@radix-ui/react-dropdown-menu": "^2.1.24",
+    "@radix-ui/react-label": "^2.1.15",
+    "@radix-ui/react-slot": "^1.3.3",
     "@testing-library/react": "^16.3.2",
-    "@types/node": "^22.10.2",
-    "@types/react": "^18.3.12",
-    "@types/react-dom": "^18.3.1",
+    "@types/node": "^22.20.1",
+    "@types/react": "^18.3.31",
+    "@types/react-dom": "^18.3.7",
     "@types/react-google-recaptcha": "^2.1.9",
-    "@typescript-eslint/eslint-plugin": "^8.18.1",
-    "@typescript-eslint/parser": "^8.18.1",
-    "@vitest/coverage-v8": "^4.0.2",
+    "@typescript-eslint/eslint-plugin": "^8.68.0",
+    "@typescript-eslint/parser": "^8.68.0",
+    "@vitest/coverage-v8": "^4.1.11",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "eslint": "^9.17.0",
+    "eslint": "^9.39.5",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-import-resolver-typescript": "^4.4.4",
+    "eslint-import-resolver-typescript": "^4.4.5",
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-react": "^7.37.5",
-    "eslint-plugin-react-hooks": "^5.0.0",
+    "eslint-plugin-react-hooks": "^5.2.0",
     "globals": "^16.5.0",
-    "jsdom": "^24.0.0",
+    "jsdom": "^24.1.3",
     "lucide-react": "^0.462.0",
-    "prettier": "^3.6.2",
+    "prettier": "^3.9.6",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-google-recaptcha": "^3.1.0",
     "react-helmet-async": "^2.0.5",
-    "react-hook-form": "^7.59.0",
-    "sonner": "^2.0.5",
-    "tailwind-merge": "^3.3.1",
-    "tsup": "^8.3.5",
-    "typescript": "^5.7.2",
-    "typescript-eslint": "^8.48.0",
-    "vitest": "^4.0.2",
-    "zod": "^3.25.67"
+    "react-hook-form": "^7.86.0",
+    "sonner": "^2.0.8",
+    "tailwind-merge": "^3.6.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.68.0",
+    "vitest": "^4.1.11",
+    "zod": "^3.25.76"
   },
   "engines": {
     "node": ">=18.0.0",
@@ -163,18 +168,23 @@
   "overrides": {
     "lodash": ">=4.17.21",
     "lodash-es": ">=4.17.21",
-    "dompurify": ">=3.3.4",
+    "dompurify": "3.4.14",
     "fast-xml-parser": ">=4.5.5",
     "@xmldom/xmldom": ">=0.8.12",
     "swiper": ">=12.1.2",
-    "brace-expansion": "1.1.13",
+    "brace-expansion": "1.1.18",
     "follow-redirects": ">=1.15.12",
     "smol-toml": ">=1.6.1",
     "axios": ">=1.15.0",
     "flatted": ">=3.4.1",
     "yaml": ">=2.8.3",
-    "picomatch": ">=2.3.2",
+    "picomatch": "4.0.7",
     "immutable": ">=3.8.3",
-    "minimatch": "3.1.3"
+    "minimatch": "3.1.4",
+    "nanoid": "3.3.18",
+    "postcss": "8.5.26",
+    "undici": "7.29.0",
+    "vite": "7.3.5",
+    "esbuild": "0.28.1"
   }
 }