@nodii/onboarding 0.0.1 → 0.1.0-dev.0

package/dist/chunk-AW7W3HAC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/submit/errors.ts","../src/submit/http.ts"],"names":[],"mappings":";AAwBO,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EACzB,IAAA;AAAA,EACA,UAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,UAAA,GAA4B,IAAA,EAC5B;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAAA,EACpB;AACF;AAEO,IAAM,2BAAA,GAAN,cAA0C,eAAA,CAAgB;AAAA,EAC/D,YAAY,OAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,sBAAA;AAAA,MACA,OAAA,IACE,kGAAA;AAAA,MACF;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AACF;AAUO,IAAM,uBAAA,GAAN,cAAsC,eAAA,CAAgB;AAAA,EAC3D,WAAA,CAAY,UAAA,GAAa,GAAA,EAAK,OAAA,EAAkB;AAC9C,IAAA,KAAA;AAAA,MACE,UAAA;AAAA,MACA,OAAA,IACE,qDAAqD,UAAU,CAAA,EAAA,CAAA;AAAA,MACjE;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEO,IAAM,wBAAA,GAAN,cAAuC,eAAA,CAAgB;AAAA,EAC5C,iBAAA;AAAA,EAEhB,WAAA,CAAY,oBAAmC,IAAA,EAAM;AACnD,IAAA,KAAA;AAAA,MACE,cAAA;AAAA,MACA,iBAAA,KAAsB,IAAA,GAClB,CAAA,0BAAA,EAA6B,iBAAiB,CAAA,EAAA,CAAA,GAC9C,4CAAA;AAAA,MACJ;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AACZ,IAAA,IAAA,CAAK,iBAAA,GAAoB,iBAAA;AAAA,EAC3B;AACF;AASO,IAAM,wBAAA,GAAN,cAAuC,eAAA,CAAgB;AAAA,EAC5C,kBAAA;AAAA,EAEhB,YAAY,kBAAA,EAA4B;AACtC,IAAA,KAAA;AAAA,MACE,YAAA;AAAA,MACA,sDAAsD,kBAAkB,CAAA,gCAAA,CAAA;AAAA,MACxE;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AACZ,IAAA,IAAA,CAAK,kBAAA,GAAqB,kBAAA;AAAA,EAC5B;AACF;AAEO,IAAM,qBAAA,GAAN,cAAoC,eAAA,CAAgB;AAAA,EACzD,WAAA,CAAY,YAAoB,OAAA,EAAkB;AAChD,IAAA,KAAA;AAAA,MACE,cAAA;AAAA,MACA,OAAA,IAAW,iBAAiB,UAAU,CAAA,+BAAA,CAAA;AAAA,MACtC;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AAAA,EACd;AACF;AAEO,IAAM,sBAAA,GAAN,cAAqC,eAAA,CAAgB;AAAA,EAC1D,YAAY,KAAA,EAAiB;AAC3B,IAAA,KAAA;AAAA,MACE,eAAA;AAAA,MACA,2DAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,IACf;AAAA,EACF;AACF;AAEO,IAAM,yBAAA,GAAN,cAAwC,eAAA,CAAgB;AAAA,EAC7D,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,kBAAA,EAAoB,SAAS,GAAG,CAAA;AACtC,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAQO,IAAM,0BAAA,GAAN,cAAyC,eAAA,CAAgB;AAAA,EAC9D,YAAY,MAAA,EAAgB;AAC1B,IAAA,KAAA;AAAA,MACE,cAAA;AAAA,MACA,kEAAkE,MAAM,CAAA,CAAA;AAAA,MACxE;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,4BAAA;AAAA,EACd;AACF;;;AChJO,IAAM,0BAAA,GAA6B;AAe1C,eAAsB,gBAAA,CACpB,GAAA,EACA,OAAA,GAA+B,EAAC,EACb;AACnB,EAAA,MAAM;AAAA,IACJ,SAAA,GAAY,0BAAA;AAAA,IACZ,YAAY,UAAA,CAAW,KAAA;AAAA,IACvB,MAAA,EAAQ,YAAA;AAAA,IACR,GAAG;AAAA,GACL,GAAI,OAAA;AAEJ,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,IAAA,UAAA,CAAW,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,SAAS,IAAI,CAAC,CAAA;AAAA,EACtE,GAAG,SAAS,CAAA;AAGZ,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI,aAAa,OAAA,EAAS;AACxB,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,UAAA,CAAW,KAAA,CAAM,aAAa,MAAM,CAAA;AAAA,IACtC,CAAA,MAAO;AACL,MAAA,YAAA,CAAa,gBAAA;AAAA,QACX,OAAA;AAAA,QACA,MAAM,UAAA,CAAW,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAAA,QAC1C,EAAE,MAAM,IAAA;AAAK,OACf;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,UAAU,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,EACpE,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAQO,SAAS,WAAA,CACd,EAAA,EACA,SAAA,EACA,SAAA,EACY;AACZ,EAAA,OAAO,IAAI,OAAA,CAAW,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,MAAA,CAAO,WAAW,CAAA;AAAA,IACpB,GAAG,SAAS,CAAA;AACZ,IAAA,EAAA,CAAG,IAAA;AAAA,MACD,CAAC,CAAA,KAAM;AACL,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,OAAA,CAAQ,CAAC,CAAA;AAAA,MACX,CAAA;AAAA,MACA,CAAC,GAAA,KAAQ;AACP,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,YAAA,CAAa,KAAK,CAAA;AAClB,QAAA,MAAA,CAAO,GAAG,CAAA;AAAA,MACZ;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH","file":"chunk-AW7W3HAC.js","sourcesContent":["/**\n * Error taxonomy for the onboarding submit client.\n *\n * Maps HTTP status codes and server error bodies to typed errors:\n *   403 bot_challenge_failed  → OnboardingBotChallengeError\n *   409 spec_stale (SUBMIT)   → OnboardingSpecStaleError  (submit endpoint only,\n *                               body { error:true, code:\"spec_stale\",\n *                               currentSpecVersion })\n *   409 (other / LEADS)       → OnboardingConflictError    (generic conflict)\n *   429                       → OnboardingRateLimitError\n *   5xx                       → OnboardingServerError (retryable)\n *   network / timeout         → OnboardingNetworkError\n */\n\nexport type OnboardingErrorKind =\n  | \"bot_challenge_failed\"\n  | \"spec_stale\"\n  | \"spec_invalid\"\n  | \"conflict\"\n  | \"rate_limited\"\n  | \"server_error\"\n  | \"network_error\"\n  | \"validation_error\";\n\nexport class OnboardingError extends Error {\n  public readonly kind: OnboardingErrorKind;\n  public readonly statusCode: number | null;\n\n  constructor(\n    kind: OnboardingErrorKind,\n    message: string,\n    statusCode: number | null = null,\n  ) {\n    super(message);\n    this.name = \"OnboardingError\";\n    this.kind = kind;\n    this.statusCode = statusCode;\n  }\n}\n\nexport class OnboardingBotChallengeError extends OnboardingError {\n  constructor(message?: string) {\n    super(\n      \"bot_challenge_failed\",\n      message ??\n        \"Bot challenge verification failed (403 bot_challenge_failed). Refresh the CAPTCHA and try again.\",\n      403,\n    );\n    this.name = \"OnboardingBotChallengeError\";\n  }\n}\n\n/**\n * A 409 that is NOT spec_stale. On the /leads path there is no spec_stale\n * concept (the payload carries no specVersion); on /submit, a 409 that\n * lacks `code:\"spec_stale\"` also lands here. Distinct from\n * OnboardingSpecStaleError so headless consumers switching on `kind` get the\n * correct diagnosis (a generic conflict, e.g. a D538 same-key concurrent\n * race) rather than a \"form has been updated, refresh\" recovery message.\n */\nexport class OnboardingConflictError extends OnboardingError {\n  constructor(statusCode = 409, message?: string) {\n    super(\n      \"conflict\",\n      message ??\n        `Request conflicted with the current server state (${statusCode}).`,\n      statusCode,\n    );\n    this.name = \"OnboardingConflictError\";\n  }\n}\n\nexport class OnboardingRateLimitError extends OnboardingError {\n  public readonly retryAfterSeconds: number | null;\n\n  constructor(retryAfterSeconds: number | null = null) {\n    super(\n      \"rate_limited\",\n      retryAfterSeconds !== null\n        ? `Rate limited. Retry after ${retryAfterSeconds}s.`\n        : \"Rate limited. Please wait before retrying.\",\n      429,\n    );\n    this.name = \"OnboardingRateLimitError\";\n    this.retryAfterSeconds = retryAfterSeconds;\n  }\n}\n\n/**\n * A /submit 409 whose body carries `code:\"spec_stale\"` (D540 reject-stale).\n * The PINNED body shape (confirmed against the crm intake) is exactly:\n *   { error: true, code: \"spec_stale\", currentSpecVersion: string }\n * The version is read ONLY from `currentSpecVersion` — no field hedging.\n * Submit-endpoint only; /leads 409s are OnboardingConflictError.\n */\nexport class OnboardingSpecStaleError extends OnboardingError {\n  public readonly currentSpecVersion: string;\n\n  constructor(currentSpecVersion: string) {\n    super(\n      \"spec_stale\",\n      `The onboarding form has been updated (new version: ${currentSpecVersion}). Please refresh and try again.`,\n      409,\n    );\n    this.name = \"OnboardingSpecStaleError\";\n    this.currentSpecVersion = currentSpecVersion;\n  }\n}\n\nexport class OnboardingServerError extends OnboardingError {\n  constructor(statusCode: number, message?: string) {\n    super(\n      \"server_error\",\n      message ?? `Server error (${statusCode}). The request will be retried.`,\n      statusCode,\n    );\n    this.name = \"OnboardingServerError\";\n  }\n}\n\nexport class OnboardingNetworkError extends OnboardingError {\n  constructor(cause?: unknown) {\n    super(\n      \"network_error\",\n      \"Network error — check your connection and try again.\",\n      null,\n    );\n    this.name = \"OnboardingNetworkError\";\n    if (cause instanceof Error) {\n      this.cause = cause;\n    }\n  }\n}\n\nexport class OnboardingValidationError extends OnboardingError {\n  constructor(message: string) {\n    super(\"validation_error\", message, 422);\n    this.name = \"OnboardingValidationError\";\n  }\n}\n\n/**\n * The spec endpoint returned a body that does not conform to the LOCKED\n * D540 §1 response shape. This is a server-side contract violation — the\n * SDK refuses to render a form from a malformed spec (a half-parsed spec\n * could silently drop required fields).\n */\nexport class OnboardingSpecInvalidError extends OnboardingError {\n  constructor(detail: string) {\n    super(\n      \"spec_invalid\",\n      `The onboarding spec response does not match the D540 contract: ${detail}`,\n      null,\n    );\n    this.name = \"OnboardingSpecInvalidError\";\n  }\n}\n","/**\n * Shared HTTP helper: fetch bounded by a timeout via AbortController.\n *\n * Every SDK wire call (spec fetch, leads submit, signup submit) MUST be\n * bounded — the widgets flip to a disabled/\"Sending…\"/\"Loading…\" state\n * BEFORE the await, so an intake that accepts the connection and then stalls\n * would otherwise hang the UI forever. On timeout the fetch is aborted and a\n * typed OnboardingNetworkError is raised by the caller (which maps abort/\n * network failures uniformly).\n */\n\n/** Default per-request timeout. Generous enough for a slow-but-alive intake. */\nexport const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;\n\nexport interface TimeoutFetchOptions extends RequestInit {\n  /** Per-request timeout in ms. Default DEFAULT_REQUEST_TIMEOUT_MS. */\n  timeoutMs?: number;\n  /** The fetch implementation to use (defaults to globalThis.fetch). */\n  fetchImpl?: typeof globalThis.fetch;\n}\n\n/**\n * fetch() with a hard timeout. Aborts the request when the deadline elapses;\n * the resulting AbortError propagates to the caller (who wraps it as an\n * OnboardingNetworkError). A caller-supplied `signal` is respected too — if\n * either the caller aborts OR the timeout fires, the request is aborted.\n */\nexport async function fetchWithTimeout(\n  url: string,\n  options: TimeoutFetchOptions = {},\n): Promise<Response> {\n  const {\n    timeoutMs = DEFAULT_REQUEST_TIMEOUT_MS,\n    fetchImpl = globalThis.fetch,\n    signal: callerSignal,\n    ...init\n  } = options;\n\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(new Error(`request timed out after ${timeoutMs}ms`));\n  }, timeoutMs);\n\n  // Forward a caller abort into our controller.\n  if (callerSignal) {\n    if (callerSignal.aborted) {\n      clearTimeout(timer);\n      controller.abort(callerSignal.reason);\n    } else {\n      callerSignal.addEventListener(\n        \"abort\",\n        () => controller.abort(callerSignal.reason),\n        { once: true },\n      );\n    }\n  }\n\n  try {\n    return await fetchImpl(url, { ...init, signal: controller.signal });\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Run a promise with a timeout. On timeout, rejects with `onTimeout()`'s\n * error. Used to bound calls that don't take an AbortSignal (grecaptcha\n * .execute()). The underlying op is NOT cancelled (grecaptcha has no abort),\n * but the caller no longer waits on it — the widget re-enables.\n */\nexport function withTimeout<T>(\n  op: Promise<T>,\n  timeoutMs: number,\n  onTimeout: () => Error,\n): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    let settled = false;\n    const timer = setTimeout(() => {\n      if (settled) return;\n      settled = true;\n      reject(onTimeout());\n    }, timeoutMs);\n    op.then(\n      (v) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        resolve(v);\n      },\n      (err) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        reject(err);\n      },\n    );\n  });\n}\n"]}

package/dist/chunk-BIFANV7M.js

@@ -0,0 +1,22 @@
+import { z } from 'zod/v3';
+
+// src/form/schema.ts
+var contactFormSchema = z.object({
+  name: z.string().min(1, "Name is required").max(200, "Name must be 200 characters or fewer"),
+  email: z.string().email("A valid email address is required"),
+  phone: z.string().optional(),
+  message: z.string().max(4e3, "Message must be 4000 characters or fewer").optional()
+});
+var leadsWireSchema = contactFormSchema.extend({
+  botToken: z.string().min(1, "botToken is required")
+}).strict();
+function validateContactForm(values) {
+  return contactFormSchema.safeParse(values);
+}
+function validateLeadsPayload(payload) {
+  return leadsWireSchema.safeParse(payload);
+}
+
+export { contactFormSchema, leadsWireSchema, validateContactForm, validateLeadsPayload };
+//# sourceMappingURL=chunk-BIFANV7M.js.map
+//# sourceMappingURL=chunk-BIFANV7M.js.map

package/dist/chunk-BIFANV7M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/form/schema.ts"],"names":[],"mappings":";;;AAyBO,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACxC,IAAA,EAAM,CAAA,CACH,MAAA,EAAO,CACP,GAAA,CAAI,GAAG,kBAAkB,CAAA,CACzB,GAAA,CAAI,GAAA,EAAK,sCAAsC,CAAA;AAAA,EAClD,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,mCAAmC,CAAA;AAAA,EAC3D,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,OAAA,EAAS,EACN,MAAA,EAAO,CACP,IAAI,GAAA,EAAM,0CAA0C,EACpD,QAAA;AACL,CAAC;AAYM,IAAM,eAAA,GAAkB,kBAC5B,MAAA,CAAO;AAAA,EACN,UAAU,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,sBAAsB;AACpD,CAAC,EACA,MAAA;AAQI,SAAS,oBAAoB,MAAA,EAAiB;AACnD,EAAA,OAAO,iBAAA,CAAkB,UAAU,MAAM,CAAA;AAC3C;AAQO,SAAS,qBAAqB,OAAA,EAAkB;AACrD,EAAA,OAAO,eAAA,CAAgB,UAAU,OAAO,CAAA;AAC1C","file":"chunk-BIFANV7M.js","sourcesContent":["/**\n * Contact-form Zod schema — mirrors the LOCKED hub REST contract exactly:\n *   POST /api/v1/public/onboarding/leads\n *   Schema: PublicOnboardingLeadsRequest (hub id 8686dd33)\n *\n * Constraints (per hub JSON Schema):\n *   name     — string, 1-200 chars, required\n *   email    — email format, required\n *   phone    — string, optional (no server-side constraint beyond string)\n *   message  — string, ≤4000 chars, optional\n *   botToken — string, required (reCAPTCHA token, D537)\n *\n *   additionalProperties: false\n *\n * The schema intentionally does NOT include botToken in the public-facing\n * ContactFormValues type — that field is injected by the submit client right\n * before the POST (the widget/form never exposes it to the user).\n */\n\nimport { z } from \"zod/v3\";\n\n/**\n * The user-visible contact form fields. Validated client-side for UX.\n * Server re-validates authoritatively (D540 §2).\n */\nexport const contactFormSchema = z.object({\n  name: z\n    .string()\n    .min(1, \"Name is required\")\n    .max(200, \"Name must be 200 characters or fewer\"),\n  email: z.string().email(\"A valid email address is required\"),\n  phone: z.string().optional(),\n  message: z\n    .string()\n    .max(4000, \"Message must be 4000 characters or fewer\")\n    .optional(),\n});\n\nexport type ContactFormValues = z.infer<typeof contactFormSchema>;\n\n/**\n * The full wire payload — contactFormSchema + botToken.\n *\n * STRICT mode: unknown keys are REJECTED (not stripped), mirroring the\n * server's `additionalProperties: false`. `submitLead` runs every outgoing\n * payload through this schema before the POST — an extra key never reaches\n * the wire; it fails fast client-side with OnboardingValidationError.\n */\nexport const leadsWireSchema = contactFormSchema\n  .extend({\n    botToken: z.string().min(1, \"botToken is required\"),\n  })\n  .strict();\n\nexport type LeadsWirePayload = z.infer<typeof leadsWireSchema>;\n\n/**\n * Validate user-visible form values (no botToken required here).\n * Returns a Zod SafeParseReturnType (inferred).\n */\nexport function validateContactForm(values: unknown) {\n  return contactFormSchema.safeParse(values);\n}\n\n/**\n * Validate the full wire payload (including botToken) before submission.\n * STRICT: unknown keys are rejected, matching additionalProperties:false.\n * This is the exact validation `submitLead` applies on the wire path.\n * Returns a Zod SafeParseReturnType (inferred).\n */\nexport function validateLeadsPayload(payload: unknown) {\n  return leadsWireSchema.safeParse(payload);\n}\n"]}

package/dist/chunk-BQCTDU5V.js

@@ -0,0 +1,327 @@
+import { validateLeadsPayload } from './chunk-BIFANV7M.js';
+import { DEFAULT_REQUEST_TIMEOUT_MS, OnboardingValidationError, fetchWithTimeout, OnboardingNetworkError, OnboardingBotChallengeError, OnboardingConflictError, OnboardingRateLimitError, OnboardingServerError, OnboardingSpecStaleError } from './chunk-AW7W3HAC.js';
+import { z } from 'zod/v3';
+
+// src/submit/client.ts
+var LEADS_PATH = "/api/v1/public/onboarding/leads";
+var MAX_ATTEMPTS = 3;
+var RETRY_DELAYS_MS = [1e3, 2e3];
+async function resolveBotTokenGuarded(source) {
+  try {
+    return await resolveBotToken(source);
+  } catch (err) {
+    throw new OnboardingBotChallengeError(
+      err instanceof Error ? `Could not obtain a bot-challenge token: ${err.message}` : "Could not obtain a bot-challenge token."
+    );
+  }
+}
+async function resolveBotToken(source) {
+  return typeof source === "function" ? source() : source;
+}
+function generateIdempotencyKey() {
+  return globalThis.crypto.randomUUID();
+}
+function buildUrl(baseUrl, path) {
+  const base = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
+  return `${base}${path}`;
+}
+function parseRetryAfter(response) {
+  const header = response.headers.get("retry-after");
+  if (!header) return null;
+  const seconds = Number.parseInt(header, 10);
+  return Number.isNaN(seconds) ? null : seconds;
+}
+async function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function computePayloadFingerprint(values) {
+  const canonical = JSON.stringify([
+    values.name,
+    values.email,
+    values.phone ?? null,
+    values.message ?? null
+  ]);
+  let hash = 2166136261;
+  for (let i = 0; i < canonical.length; i++) {
+    hash ^= canonical.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+async function parseSuccessBody(response) {
+  let text;
+  try {
+    text = await response.text();
+  } catch {
+    return { accepted: true };
+  }
+  if (text.trim() === "") {
+    return { accepted: true };
+  }
+  let json;
+  try {
+    json = JSON.parse(text);
+  } catch {
+    return { accepted: true };
+  }
+  if (typeof json === "object" && json !== null && json.accepted === true) {
+    return { accepted: true };
+  }
+  throw new OnboardingServerError(
+    response.status,
+    `Success status ${response.status} but response body did not confirm acceptance.`
+  );
+}
+async function submitLead(values, options) {
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+  const url = buildUrl(options.baseUrl, LEADS_PATH);
+  const base = { ...values };
+  if (base["phone"] === "" || base["phone"] === void 0) {
+    delete base["phone"];
+  }
+  if (base["message"] === "" || base["message"] === void 0) {
+    delete base["message"];
+  }
+  const headers = {
+    "Content-Type": "application/json",
+    "Idempotency-Key": options.idempotencyKey
+  };
+  let lastError = null;
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+    options.onAttempt?.(attempt);
+    const botToken = await resolveBotTokenGuarded(options.botToken);
+    const parsed = validateLeadsPayload({ ...base, botToken });
+    if (!parsed.success) {
+      const detail = parsed.error.issues.map((i) => `${i.path.join(".") || "(payload)"}: ${i.message}`).join("; ");
+      throw new OnboardingValidationError(
+        `Payload failed wire-schema validation: ${detail}`
+      );
+    }
+    const body = JSON.stringify(parsed.data);
+    let response;
+    try {
+      response = await fetchWithTimeout(url, {
+        method: "POST",
+        headers,
+        body,
+        timeoutMs,
+        fetchImpl
+      });
+    } catch (err) {
+      lastError = new OnboardingNetworkError(err);
+      const delay = RETRY_DELAYS_MS[attempt - 1];
+      if (attempt < MAX_ATTEMPTS && delay !== void 0) {
+        await sleep(delay);
+        continue;
+      }
+      throw lastError;
+    }
+    if (response.status === 200 || response.status === 202) {
+      return parseSuccessBody(response);
+    }
+    if (response.status === 403) {
+      throw new OnboardingBotChallengeError();
+    }
+    if (response.status === 409) {
+      throw new OnboardingConflictError(409);
+    }
+    if (response.status === 429) {
+      const retryAfter = parseRetryAfter(response);
+      throw new OnboardingRateLimitError(retryAfter);
+    }
+    if (response.status === 422) {
+      throw new OnboardingValidationError(
+        "Server rejected the submission (422). Please check your inputs."
+      );
+    }
+    if (response.status >= 500) {
+      lastError = new OnboardingServerError(response.status);
+      const delay = RETRY_DELAYS_MS[attempt - 1];
+      if (attempt < MAX_ATTEMPTS && delay !== void 0) {
+        await sleep(delay);
+        continue;
+      }
+      throw lastError;
+    }
+    throw new OnboardingServerError(
+      response.status,
+      `Unexpected response status ${response.status}`
+    );
+  }
+  throw lastError ?? new OnboardingNetworkError();
+}
+var SUBMIT_PATH = "/api/v1/public/onboarding/submit";
+var MAX_ATTEMPTS2 = 3;
+var RETRY_DELAYS_MS2 = [1e3, 2e3];
+var signupWireSchema = z.object({
+  specVersion: z.string().min(1, "specVersion is required"),
+  answers: z.record(z.unknown()),
+  selectedServices: z.array(z.string()).optional(),
+  botToken: z.string().min(1, "botToken is required"),
+  consent: z.object({
+    tosAccepted: z.literal(true, {
+      errorMap: () => ({ message: "Terms of Service must be accepted" })
+    }),
+    privacyAccepted: z.literal(true, {
+      errorMap: () => ({ message: "Privacy Policy must be accepted" })
+    })
+  }).strict(),
+  credentials: z.object({
+    email: z.string().email("A valid account email is required"),
+    password: z.string().min(12, "Password must be at least 12 characters").max(256, "Password must be at most 256 characters")
+  }).strict()
+}).strict();
+function computeSignupFingerprint(body) {
+  const canonical = JSON.stringify([
+    body.specVersion,
+    // Sort answer keys for stability regardless of insertion order.
+    Object.keys(body.answers).sort().map((k) => [k, body.answers[k]]),
+    [...body.selectedServices ?? []].sort(),
+    body.credentials.email,
+    body.credentials.password,
+    body.consent.tosAccepted,
+    body.consent.privacyAccepted
+  ]);
+  let hash = 2166136261;
+  for (let i = 0; i < canonical.length; i++) {
+    hash ^= canonical.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function buildUrl2(baseUrl, path) {
+  const base = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
+  return `${base}${path}`;
+}
+function parseRetryAfter2(response) {
+  const header = response.headers.get("retry-after");
+  if (!header) return null;
+  const seconds = Number.parseInt(header, 10);
+  return Number.isNaN(seconds) ? null : seconds;
+}
+async function sleep2(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var TERMINAL_STAGES = [
+  "prospect",
+  "inactive",
+  "active"
+];
+async function parseSubmitSuccess(response) {
+  let json;
+  try {
+    json = await response.json();
+  } catch {
+    throw new OnboardingServerError(
+      response.status,
+      `Success status ${response.status} but the submit response body was not JSON \u2014 terminalStage is unknown.`
+    );
+  }
+  if (typeof json === "object" && json !== null && json.accepted === true) {
+    const stage = json.terminalStage;
+    if (typeof stage === "string" && TERMINAL_STAGES.includes(stage)) {
+      const verificationEmailSent = json.verificationEmailSent;
+      return {
+        accepted: true,
+        terminalStage: stage,
+        ...typeof verificationEmailSent === "boolean" ? { verificationEmailSent } : {}
+      };
+    }
+  }
+  throw new OnboardingServerError(
+    response.status,
+    `Success status ${response.status} but the submit response did not carry {accepted:true, terminalStage}.`
+  );
+}
+async function submitSignup(body, options) {
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+  const url = buildUrl2(options.baseUrl, SUBMIT_PATH);
+  const base = { ...body };
+  if (base["selectedServices"] === void 0) {
+    delete base["selectedServices"];
+  }
+  const headers = {
+    "Content-Type": "application/json",
+    "Idempotency-Key": options.idempotencyKey
+  };
+  let lastError = null;
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS2; attempt++) {
+    options.onAttempt?.(attempt);
+    const botToken = await resolveBotTokenGuarded(options.botToken);
+    const parsed = signupWireSchema.safeParse({ ...base, botToken });
+    if (!parsed.success) {
+      const detail = parsed.error.issues.map((i) => `${i.path.join(".") || "(payload)"}: ${i.message}`).join("; ");
+      throw new OnboardingValidationError(
+        `Signup payload failed wire-schema validation: ${detail}`
+      );
+    }
+    const wireBody = JSON.stringify(parsed.data);
+    let response;
+    try {
+      response = await fetchWithTimeout(url, {
+        method: "POST",
+        headers,
+        body: wireBody,
+        timeoutMs,
+        fetchImpl
+      });
+    } catch (err) {
+      lastError = new OnboardingNetworkError(err);
+      const delay = RETRY_DELAYS_MS2[attempt - 1];
+      if (attempt < MAX_ATTEMPTS2 && delay !== void 0) {
+        await sleep2(delay);
+        continue;
+      }
+      throw lastError;
+    }
+    if (response.status === 200 || response.status === 202) {
+      return parseSubmitSuccess(response);
+    }
+    if (response.status === 403) {
+      throw new OnboardingBotChallengeError();
+    }
+    if (response.status === 409) {
+      let code;
+      let currentSpecVersion = "unknown";
+      try {
+        const body409 = await response.json();
+        code = body409["code"];
+        const v = body409["currentSpecVersion"];
+        if (typeof v === "string" && v !== "") currentSpecVersion = v;
+      } catch {
+      }
+      if (code === "spec_stale") {
+        throw new OnboardingSpecStaleError(currentSpecVersion);
+      }
+      throw new OnboardingConflictError(409);
+    }
+    if (response.status === 429) {
+      throw new OnboardingRateLimitError(parseRetryAfter2(response));
+    }
+    if (response.status === 422) {
+      throw new OnboardingValidationError(
+        "The server rejected the submission (422). Please review your inputs."
+      );
+    }
+    if (response.status >= 500) {
+      lastError = new OnboardingServerError(response.status);
+      const delay = RETRY_DELAYS_MS2[attempt - 1];
+      if (attempt < MAX_ATTEMPTS2 && delay !== void 0) {
+        await sleep2(delay);
+        continue;
+      }
+      throw lastError;
+    }
+    throw new OnboardingServerError(
+      response.status,
+      `Unexpected response status ${response.status}`
+    );
+  }
+  throw lastError ?? new OnboardingNetworkError();
+}
+
+export { computePayloadFingerprint, computeSignupFingerprint, generateIdempotencyKey, resolveBotToken, signupWireSchema, submitLead, submitSignup };
+//# sourceMappingURL=chunk-BQCTDU5V.js.map
+//# sourceMappingURL=chunk-BQCTDU5V.js.map

package/dist/chunk-BQCTDU5V.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/submit/client.ts","../src/submit/signup-client.ts"],"names":["MAX_ATTEMPTS","RETRY_DELAYS_MS","buildUrl","parseRetryAfter","sleep"],"mappings":";;;;;AAmCA,IAAM,UAAA,GAAa,iCAAA;AACnB,IAAM,YAAA,GAAe,CAAA;AACrB,IAAM,eAAA,GAAkB,CAAC,GAAA,EAAM,GAAI,CAAA;AASnC,eAAsB,uBACpB,MAAA,EACiB;AACjB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,gBAAgB,MAAM,CAAA;AAAA,EACrC,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,2BAAA;AAAA,MACR,GAAA,YAAe,KAAA,GACX,CAAA,wCAAA,EAA2C,GAAA,CAAI,OAAO,CAAA,CAAA,GACtD;AAAA,KACN;AAAA,EACF;AACF;AAYA,eAAsB,gBAAgB,MAAA,EAAyC;AAC7E,EAAA,OAAO,OAAO,MAAA,KAAW,UAAA,GAAa,MAAA,EAAO,GAAI,MAAA;AACnD;AAoCO,SAAS,sBAAA,GAAiC;AAE/C,EAAA,OAAO,UAAA,CAAW,OAAO,UAAA,EAAW;AACtC;AAEA,SAAS,QAAA,CAAS,SAAiB,IAAA,EAAsB;AACvD,EAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA;AACvB;AAEA,SAAS,gBAAgB,QAAA,EAAmC;AAC1D,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ,EAAE,CAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,GAAI,IAAA,GAAO,OAAA;AACxC;AAEA,eAAe,MAAM,EAAA,EAA2B;AAC9C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAgBO,SAAS,0BAA0B,MAAA,EAAmC;AAC3E,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,CAAU;AAAA,IAC/B,MAAA,CAAO,IAAA;AAAA,IACP,MAAA,CAAO,KAAA;AAAA,IACP,OAAO,KAAA,IAAS,IAAA;AAAA,IAChB,OAAO,OAAA,IAAW;AAAA,GACnB,CAAA;AACD,EAAA,IAAI,IAAA,GAAO,UAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,CAAU,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,IAAA,IAAQ,SAAA,CAAU,WAAW,CAAC,CAAA;AAC9B,IAAA,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAU,CAAA;AAAA,EACnC;AACA,EAAA,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClD;AAgBA,eAAe,iBACb,QAAA,EAC4B;AAC5B,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,EAC1B;AACA,EAAA,IAAI,IAAA,CAAK,IAAA,EAAK,KAAM,EAAA,EAAI;AACtB,IAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,EAC1B;AACA,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,EAC1B;AACA,EAAA,IACE,OAAO,IAAA,KAAS,QAAA,IAChB,SAAS,IAAA,IACR,IAAA,CAAgC,aAAa,IAAA,EAC9C;AACA,IAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,EAC1B;AACA,EAAA,MAAM,IAAI,qBAAA;AAAA,IACR,QAAA,CAAS,MAAA;AAAA,IACT,CAAA,eAAA,EAAkB,SAAS,MAAM,CAAA,8CAAA;AAAA,GACnC;AACF;AA2BA,eAAsB,UAAA,CACpB,QACA,OAAA,EAC4B;AAC5B,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC9C,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,0BAAA;AACvC,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,OAAA,EAAS,UAAU,CAAA;AAKhD,EAAA,MAAM,IAAA,GAAgC,EAAE,GAAG,MAAA,EAAO;AAClD,EAAA,IAAI,KAAK,OAAO,CAAA,KAAM,MAAM,IAAA,CAAK,OAAO,MAAM,MAAA,EAAW;AACvD,IAAA,OAAO,KAAK,OAAO,CAAA;AAAA,EACrB;AACA,EAAA,IAAI,KAAK,SAAS,CAAA,KAAM,MAAM,IAAA,CAAK,SAAS,MAAM,MAAA,EAAW;AAC3D,IAAA,OAAO,KAAK,SAAS,CAAA;AAAA,EACvB;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,mBAAmB,OAAA,CAAQ;AAAA,GAC7B;AAEA,EAAA,IAAI,SAAA,GAAqB,IAAA;AAEzB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,YAAA,EAAc,OAAA,EAAA,EAAW;AACxD,IAAA,OAAA,CAAQ,YAAY,OAAO,CAAA;AAK3B,IAAA,MAAM,QAAA,GAAW,MAAM,sBAAA,CAAuB,OAAA,CAAQ,QAAQ,CAAA;AAI9D,IAAA,MAAM,SAAS,oBAAA,CAAqB,EAAE,GAAG,IAAA,EAAM,UAAU,CAAA;AACzD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,MAAA,GAAS,OAAO,KAAA,CAAM,MAAA,CACzB,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAA,IAAK,WAAW,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA,CAC7D,KAAK,IAAI,CAAA;AACZ,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,0CAA0C,MAAM,CAAA;AAAA,OAClD;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAEvC,IAAA,IAAI,QAAA;AAEJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,iBAAiB,GAAA,EAAK;AAAA,QACrC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AAEZ,MAAA,SAAA,GAAY,IAAI,uBAAuB,GAAG,CAAA;AAC1C,MAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,OAAA,GAAU,CAAC,CAAA;AACzC,MAAA,IAAI,OAAA,GAAU,YAAA,IAAgB,KAAA,KAAU,MAAA,EAAW;AACjD,QAAA,MAAM,MAAM,KAAK,CAAA;AACjB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAGA,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK;AACtD,MAAA,OAAO,iBAAiB,QAAQ,CAAA;AAAA,IAClC;AAGA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,2BAAA,EAA4B;AAAA,IACxC;AAOA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,wBAAwB,GAAG,CAAA;AAAA,IACvC;AAGA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,UAAA,GAAa,gBAAgB,QAAQ,CAAA;AAC3C,MAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,IAC/C;AAGA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAGA,IAAA,IAAI,QAAA,CAAS,UAAU,GAAA,EAAK;AAC1B,MAAA,SAAA,GAAY,IAAI,qBAAA,CAAsB,QAAA,CAAS,MAAM,CAAA;AACrD,MAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,OAAA,GAAU,CAAC,CAAA;AACzC,MAAA,IAAI,OAAA,GAAU,YAAA,IAAgB,KAAA,KAAU,MAAA,EAAW;AACjD,QAAA,MAAM,MAAM,KAAK,CAAA;AACjB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAGA,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,QAAA,CAAS,MAAA;AAAA,MACT,CAAA,2BAAA,EAA8B,SAAS,MAAM,CAAA;AAAA,KAC/C;AAAA,EACF;AAGA,EAAA,MAAM,SAAA,IAAa,IAAI,sBAAA,EAAuB;AAChD;ACxTA,IAAM,WAAA,GAAc,kCAAA;AACpB,IAAMA,aAAAA,GAAe,CAAA;AACrB,IAAMC,gBAAAA,GAAkB,CAAC,GAAA,EAAM,GAAI,CAAA;AAO5B,IAAM,gBAAA,GAAmB,EAC7B,MAAA,CAAO;AAAA,EACN,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,yBAAyB,CAAA;AAAA,EACxD,OAAA,EAAS,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,SAAS,CAAA;AAAA,EAC7B,kBAAkB,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EAC/C,UAAU,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,sBAAsB,CAAA;AAAA,EAClD,OAAA,EAAS,EACN,MAAA,CAAO;AAAA,IACN,WAAA,EAAa,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM;AAAA,MAC3B,QAAA,EAAU,OAAO,EAAE,OAAA,EAAS,mCAAA,EAAoC;AAAA,KACjE,CAAA;AAAA,IACD,eAAA,EAAiB,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM;AAAA,MAC/B,QAAA,EAAU,OAAO,EAAE,OAAA,EAAS,iCAAA,EAAkC;AAAA,KAC/D;AAAA,GACF,EACA,MAAA,EAAO;AAAA,EACV,WAAA,EAAa,EACV,MAAA,CAAO;AAAA,IACN,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,mCAAmC,CAAA;AAAA,IAC3D,QAAA,EAAU,CAAA,CACP,MAAA,EAAO,CACP,GAAA,CAAI,IAAI,yCAAyC,CAAA,CACjD,GAAA,CAAI,GAAA,EAAK,yCAAyC;AAAA,GACtD,EACA,MAAA;AACL,CAAC,EACA,MAAA;AA+CI,SAAS,yBAAyB,IAAA,EAAgC;AACvE,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,CAAU;AAAA,IAC/B,IAAA,CAAK,WAAA;AAAA;AAAA,IAEL,OAAO,IAAA,CAAK,IAAA,CAAK,OAAO,CAAA,CACrB,MAAK,CACL,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,CAAC,CAAC,CAAC,CAAA;AAAA,IAClC,CAAC,GAAI,IAAA,CAAK,oBAAoB,EAAG,EAAE,IAAA,EAAK;AAAA,IACxC,KAAK,WAAA,CAAY,KAAA;AAAA,IACjB,KAAK,WAAA,CAAY,QAAA;AAAA,IACjB,KAAK,OAAA,CAAQ,WAAA;AAAA,IACb,KAAK,OAAA,CAAQ;AAAA,GACd,CAAA;AACD,EAAA,IAAI,IAAA,GAAO,UAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,SAAA,CAAU,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,IAAA,IAAQ,SAAA,CAAU,WAAW,CAAC,CAAA;AAC9B,IAAA,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAU,CAAA;AAAA,EACnC;AACA,EAAA,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClD;AAEA,SAASC,SAAAA,CAAS,SAAiB,IAAA,EAAsB;AACvD,EAAA,MAAM,IAAA,GAAO,QAAQ,QAAA,CAAS,GAAG,IAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,OAAA;AAC5D,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA;AACvB;AAEA,SAASC,iBAAgB,QAAA,EAAmC;AAC1D,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ,EAAE,CAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,GAAI,IAAA,GAAO,OAAA;AACxC;AAEA,eAAeC,OAAM,EAAA,EAA2B;AAC9C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAEA,IAAM,eAAA,GAA4C;AAAA,EAChD,UAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAA;AAGA,eAAe,mBACb,QAAA,EAC6B;AAC7B,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,QAAA,CAAS,MAAA;AAAA,MACT,CAAA,eAAA,EAAkB,SAAS,MAAM,CAAA,2EAAA;AAAA,KACnC;AAAA,EACF;AACA,EAAA,IACE,OAAO,IAAA,KAAS,QAAA,IAChB,SAAS,IAAA,IACR,IAAA,CAAgC,aAAa,IAAA,EAC9C;AACA,IAAA,MAAM,QAAS,IAAA,CAAqC,aAAA;AACpD,IAAA,IACE,OAAO,KAAA,KAAU,QAAA,IAChB,eAAA,CAAsC,QAAA,CAAS,KAAK,CAAA,EACrD;AACA,MAAA,MAAM,wBACJ,IAAA,CACA,qBAAA;AACF,MAAA,OAAO;AAAA,QACL,QAAA,EAAU,IAAA;AAAA,QACV,aAAA,EAAe,KAAA;AAAA,QACf,GAAI,OAAO,qBAAA,KAA0B,YACjC,EAAE,qBAAA,KACF;AAAC,OACP;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,IAAI,qBAAA;AAAA,IACR,QAAA,CAAS,MAAA;AAAA,IACT,CAAA,eAAA,EAAkB,SAAS,MAAM,CAAA,sEAAA;AAAA,GACnC;AACF;AAiBA,eAAsB,YAAA,CACpB,MACA,OAAA,EAC6B;AAC7B,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC9C,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,0BAAA;AACvC,EAAA,MAAM,GAAA,GAAMF,SAAAA,CAAS,OAAA,CAAQ,OAAA,EAAS,WAAW,CAAA;AAIjD,EAAA,MAAM,IAAA,GAAgC,EAAE,GAAG,IAAA,EAAK;AAChD,EAAA,IAAI,IAAA,CAAK,kBAAkB,CAAA,KAAM,MAAA,EAAW;AAC1C,IAAA,OAAO,KAAK,kBAAkB,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,mBAAmB,OAAA,CAAQ;AAAA,GAC7B;AAEA,EAAA,IAAI,SAAA,GAAqB,IAAA;AAEzB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAWF,aAAAA,EAAc,OAAA,EAAA,EAAW;AACxD,IAAA,OAAA,CAAQ,YAAY,OAAO,CAAA;AAI3B,IAAA,MAAM,QAAA,GAAW,MAAM,sBAAA,CAAuB,OAAA,CAAQ,QAAQ,CAAA;AAC9D,IAAA,MAAM,SAAS,gBAAA,CAAiB,SAAA,CAAU,EAAE,GAAG,IAAA,EAAM,UAAU,CAAA;AAC/D,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,MAAA,GAAS,OAAO,KAAA,CAAM,MAAA,CACzB,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAA,IAAK,WAAW,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA,CAC7D,KAAK,IAAI,CAAA;AACZ,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,iDAAiD,MAAM,CAAA;AAAA,OACzD;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAE3C,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,iBAAiB,GAAA,EAAK;AAAA,QACrC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,QAAA;AAAA,QACN,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,SAAA,GAAY,IAAI,uBAAuB,GAAG,CAAA;AAC1C,MAAA,MAAM,KAAA,GAAQC,gBAAAA,CAAgB,OAAA,GAAU,CAAC,CAAA;AACzC,MAAA,IAAI,OAAA,GAAUD,aAAAA,IAAgB,KAAA,KAAU,MAAA,EAAW;AACjD,QAAA,MAAMI,OAAM,KAAK,CAAA;AACjB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK;AACtD,MAAA,OAAO,mBAAmB,QAAQ,CAAA;AAAA,IACpC;AAEA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,2BAAA,EAA4B;AAAA,IACxC;AAOA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,kBAAA,GAAqB,SAAA;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,QAAA,IAAA,GAAO,QAAQ,MAAM,CAAA;AACrB,QAAA,MAAM,CAAA,GAAI,QAAQ,oBAAoB,CAAA;AACtC,QAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,IAAI,kBAAA,GAAqB,CAAA;AAAA,MAC9D,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,IAAI,SAAS,YAAA,EAAc;AACzB,QAAA,MAAM,IAAI,yBAAyB,kBAAkB,CAAA;AAAA,MACvD;AACA,MAAA,MAAM,IAAI,wBAAwB,GAAG,CAAA;AAAA,IACvC;AAEA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,wBAAA,CAAyBD,gBAAAA,CAAgB,QAAQ,CAAC,CAAA;AAAA,IAC9D;AAEA,IAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,QAAA,CAAS,UAAU,GAAA,EAAK;AAC1B,MAAA,SAAA,GAAY,IAAI,qBAAA,CAAsB,QAAA,CAAS,MAAM,CAAA;AACrD,MAAA,MAAM,KAAA,GAAQF,gBAAAA,CAAgB,OAAA,GAAU,CAAC,CAAA;AACzC,MAAA,IAAI,OAAA,GAAUD,aAAAA,IAAgB,KAAA,KAAU,MAAA,EAAW;AACjD,QAAA,MAAMI,OAAM,KAAK,CAAA;AACjB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA;AAAA,IACR;AAEA,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,QAAA,CAAS,MAAA;AAAA,MACT,CAAA,2BAAA,EAA8B,SAAS,MAAM,CAAA;AAAA,KAC/C;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,IAAa,IAAI,sBAAA,EAAuB;AAChD","file":"chunk-BQCTDU5V.js","sourcesContent":["/**\n * Submit client for POST /api/v1/public/onboarding/leads.\n *\n * Contract per D540 + hub REST interface 8686dd33:\n *   - Idempotency-Key header REQUIRED (uuid v4, generated ONCE per logical\n *     submission, REUSED on retries — same key = exactly-once delivery).\n *   - Outgoing payload validated through leadsWireSchema (STRICT — unknown\n *     keys rejected, matching additionalProperties:false) BEFORE any fetch.\n *   - botToken in request body (D537).\n *   - Response: { accepted: true } on 200/202 (empty/non-JSON 2xx body is\n *     treated as acceptance; a JSON body that does not confirm acceptance\n *     throws OnboardingServerError — see parseSuccessBody).\n *   - 403 bot_challenge_failed  → throw OnboardingBotChallengeError (no retry)\n *   - 409 spec_stale (D540)     → throw OnboardingSpecStaleError (no retry)\n *   - 422                       → throw OnboardingValidationError (no retry)\n *   - 429                       → throw OnboardingRateLimitError (no auto-retry)\n *   - 5xx                       → retry with SAME idempotency key, capped backoff\n *   - network error             → retry with SAME idempotency key, capped backoff\n *\n * Max retries: 3 attempts total (1 initial + 2 retries).\n * Backoff: 1s, 2s (capped at 2 retries).\n */\n\nimport { validateLeadsPayload } from \"../form/schema.js\";\nimport type { ContactFormValues } from \"../form/schema.js\";\nimport {\n  OnboardingBotChallengeError,\n  OnboardingConflictError,\n  OnboardingNetworkError,\n  OnboardingRateLimitError,\n  OnboardingServerError,\n  OnboardingValidationError,\n} from \"./errors.js\";\nimport { DEFAULT_REQUEST_TIMEOUT_MS, fetchWithTimeout } from \"./http.js\";\n\nconst LEADS_PATH = \"/api/v1/public/onboarding/leads\";\nconst MAX_ATTEMPTS = 3;\nconst RETRY_DELAYS_MS = [1000, 2000] as const;\n\n/**\n * Resolve a bot token inside the retry loop, mapping ANY provider failure to\n * a typed OnboardingBotChallengeError. The provider is usually\n * executeRecaptcha, which throws a RecaptchaError if reCAPTCHA is unreachable\n * — that raw error must NOT escape submitLead/submitSignup (the @throws\n * contract is Onboarding* only) and must not silently burn the retry budget.\n */\nexport async function resolveBotTokenGuarded(\n  source: BotTokenSource,\n): Promise<string> {\n  try {\n    return await resolveBotToken(source);\n  } catch (err) {\n    throw new OnboardingBotChallengeError(\n      err instanceof Error\n        ? `Could not obtain a bot-challenge token: ${err.message}`\n        : \"Could not obtain a bot-challenge token.\",\n    );\n  }\n}\n\n/**\n * A bot token, or a provider that mints a FRESH one per attempt.\n *\n * reCAPTCHA tokens are SINGLE-USE — the server consumes them at siteverify.\n * If a 5xx happens AFTER the token was consumed, resending the same token on\n * retry gets 403. Pass a provider function to mint a fresh token per attempt;\n * a bare string is back-compat but the caller then OWNS that risk.\n */\nexport type BotTokenSource = string | (() => string | Promise<string>);\n\nexport async function resolveBotToken(source: BotTokenSource): Promise<string> {\n  return typeof source === \"function\" ? source() : source;\n}\n\nexport interface LeadsSubmitOptions {\n  baseUrl: string;\n  /**\n   * reCAPTCHA token (D537), or a provider called ONCE PER ATTEMPT to mint a\n   * fresh token (recommended — tokens are single-use; a fixed string on a\n   * retried request risks 403 after the first attempt consumed it).\n   */\n  botToken: BotTokenSource;\n  /**\n   * Stable idempotency key for this submission. Generate ONCE with\n   * `generateIdempotencyKey()` and pass the same key for retries.\n   * The server chains this key through to D538 for exactly-once delivery.\n   */\n  idempotencyKey: string;\n  /** Optional custom fetch implementation (defaults to global fetch). */\n  fetch?: typeof globalThis.fetch;\n  /**\n   * Per-attempt request timeout in ms (default 15s). A stalled intake aborts\n   * with OnboardingNetworkError so the widget re-enables instead of hanging.\n   */\n  timeoutMs?: number;\n  /** Optional onAttempt callback for observability (attempt number, 1-based). */\n  onAttempt?: (attempt: number) => void;\n}\n\nexport interface LeadsSubmitResult {\n  accepted: true;\n}\n\n/**\n * Generate a stable idempotency key for one logical submission.\n * Uses the Web Crypto API (available in all modern browsers + Bun/Node >= 19).\n * Call ONCE per user submission, pass the SAME key on retries.\n */\nexport function generateIdempotencyKey(): string {\n  // crypto.randomUUID() is available in all modern browsers, Bun, and Node >= 14.17\n  return globalThis.crypto.randomUUID();\n}\n\nfunction buildUrl(baseUrl: string, path: string): string {\n  const base = baseUrl.endsWith(\"/\") ? baseUrl.slice(0, -1) : baseUrl;\n  return `${base}${path}`;\n}\n\nfunction parseRetryAfter(response: Response): number | null {\n  const header = response.headers.get(\"retry-after\");\n  if (!header) return null;\n  const seconds = Number.parseInt(header, 10);\n  return Number.isNaN(seconds) ? null : seconds;\n}\n\nasync function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Compute a stable fingerprint of the outgoing lead payload, EXCLUDING\n * botToken (which is fresh per attempt by design).\n *\n * The widget uses this to decide whether a resubmission is a RETRY of the\n * same logical submission (same fingerprint → reuse the Idempotency-Key)\n * or a NEW logical submission (fingerprint changed because the user edited\n * fields → mint a NEW key). This mirrors the server's D538 payload-match\n * guard: same key + different payload is INVALID_ARGUMENT server-side.\n *\n * FNV-1a 32-bit over a stable JSON serialization of [name, email, phone,\n * message]. Collision risk is irrelevant here — a collision only means an\n * unnecessary key reuse across two submissions from the same browser tab.\n */\nexport function computePayloadFingerprint(values: ContactFormValues): string {\n  const canonical = JSON.stringify([\n    values.name,\n    values.email,\n    values.phone ?? null,\n    values.message ?? null,\n  ]);\n  let hash = 0x811c9dc5;\n  for (let i = 0; i < canonical.length; i++) {\n    hash ^= canonical.charCodeAt(i);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, \"0\");\n}\n\n/**\n * Parse a success-status (200/202) response body.\n *\n * Documented behavior (one rule, tested):\n * - EMPTY body or NON-JSON body → treated as acceptance. The locked\n *   contract response is `{accepted:true}` and the status is already\n *   2xx; load balancers / CDNs occasionally strip or replace bodies on\n *   202, and a 2xx from the intake IS the acceptance signal.\n * - A PARSEABLE JSON body that is not `{accepted: true}` (e.g.\n *   `{accepted:false}` or an unrelated shape) → OnboardingServerError.\n *   A server-signaled soft-rejection on a success status must NOT be\n *   masked as success. Not auto-retried (the status was 2xx; the server\n *   state is ambiguous — the caller decides).\n */\nasync function parseSuccessBody(\n  response: Response,\n): Promise<LeadsSubmitResult> {\n  let text: string;\n  try {\n    text = await response.text();\n  } catch {\n    // Unreadable body on a 2xx — acceptance per the rule above.\n    return { accepted: true };\n  }\n  if (text.trim() === \"\") {\n    return { accepted: true };\n  }\n  let json: unknown;\n  try {\n    json = JSON.parse(text);\n  } catch {\n    // Non-JSON body on a 2xx (LB/CDN interstitial) — acceptance.\n    return { accepted: true };\n  }\n  if (\n    typeof json === \"object\" &&\n    json !== null &&\n    (json as { accepted?: unknown }).accepted === true\n  ) {\n    return { accepted: true };\n  }\n  throw new OnboardingServerError(\n    response.status,\n    `Success status ${response.status} but response body did not confirm acceptance.`,\n  );\n}\n\n/**\n * Submit a contact-form lead to the onboarding intake.\n *\n * The outgoing payload is validated through leadsWireSchema in STRICT mode\n * before any network I/O — unknown keys are rejected client-side, exactly\n * mirroring the server's additionalProperties:false.\n *\n * Handles retry semantics: 5xx and network errors are retried up to\n * MAX_ATTEMPTS total, always with the SAME idempotencyKey to guarantee\n * exactly-once server-side processing (D538 idempotency chain).\n *\n * 403, 409, 422 and 429 are NOT retried — caller handles them.\n *\n * @throws {OnboardingValidationError} if the payload fails the strict wire\n *   schema (unknown keys, constraint violations) — thrown BEFORE any fetch\n * @throws {OnboardingBotChallengeError} on 403, or if the bot-token provider\n *   throws (reCAPTCHA unreachable) on any attempt\n * @throws {OnboardingConflictError} on 409 (leads has no spec_stale concept)\n * @throws {OnboardingRateLimitError} on 429\n * @throws {OnboardingServerError} on 5xx after all retries exhausted, or on\n *   a 2xx whose JSON body does not confirm acceptance\n * @throws {OnboardingNetworkError} on network failure OR timeout after all\n *   retries exhausted\n * @throws {OnboardingValidationError} on 422 (server-side re-validation)\n */\nexport async function submitLead(\n  values: ContactFormValues,\n  options: LeadsSubmitOptions,\n): Promise<LeadsSubmitResult> {\n  const fetchImpl = options.fetch ?? globalThis.fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;\n  const url = buildUrl(options.baseUrl, LEADS_PATH);\n\n  // Normalize non-token fields once (empty optionals → omitted). The token\n  // is attached PER ATTEMPT below so a retry can carry a FRESH single-use\n  // token; the body is therefore serialized inside the loop.\n  const base: Record<string, unknown> = { ...values };\n  if (base[\"phone\"] === \"\" || base[\"phone\"] === undefined) {\n    delete base[\"phone\"];\n  }\n  if (base[\"message\"] === \"\" || base[\"message\"] === undefined) {\n    delete base[\"message\"];\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    \"Idempotency-Key\": options.idempotencyKey,\n  };\n\n  let lastError: unknown = null;\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    options.onAttempt?.(attempt);\n\n    // Mint a fresh token per attempt (single-use tokens; see BotTokenSource).\n    // Guarded: a provider failure (reCAPTCHA down) becomes a typed\n    // OnboardingBotChallengeError, never a raw RecaptchaError escaping.\n    const botToken = await resolveBotTokenGuarded(options.botToken);\n\n    // Strict wire-schema validation BEFORE the network I/O of THIS attempt.\n    // Extra keys are REJECTED (additionalProperties:false), not stripped.\n    const parsed = validateLeadsPayload({ ...base, botToken });\n    if (!parsed.success) {\n      const detail = parsed.error.issues\n        .map((i) => `${i.path.join(\".\") || \"(payload)\"}: ${i.message}`)\n        .join(\"; \");\n      throw new OnboardingValidationError(\n        `Payload failed wire-schema validation: ${detail}`,\n      );\n    }\n    const body = JSON.stringify(parsed.data);\n\n    let response: Response;\n\n    try {\n      response = await fetchWithTimeout(url, {\n        method: \"POST\",\n        headers,\n        body,\n        timeoutMs,\n        fetchImpl,\n      });\n    } catch (err) {\n      // Timeout (abort) and network failures are both retryable transient.\n      lastError = new OnboardingNetworkError(err);\n      const delay = RETRY_DELAYS_MS[attempt - 1];\n      if (attempt < MAX_ATTEMPTS && delay !== undefined) {\n        await sleep(delay);\n        continue;\n      }\n      throw lastError;\n    }\n\n    // 200/202 → success (body parse guarded; see parseSuccessBody)\n    if (response.status === 200 || response.status === 202) {\n      return parseSuccessBody(response);\n    }\n\n    // 403 → bot challenge failed — NOT retryable\n    if (response.status === 403) {\n      throw new OnboardingBotChallengeError();\n    }\n\n    // 409 on /leads is NOT spec_stale (the leads payload has no specVersion;\n    // spec_stale is a /submit-only concept per D540). A leads 409 is a\n    // generic conflict (e.g. a D538 same-key concurrent-processing race) —\n    // surface OnboardingConflictError so headless consumers switching on\n    // `kind` get the right diagnosis, not a \"form has been updated\" message.\n    if (response.status === 409) {\n      throw new OnboardingConflictError(409);\n    }\n\n    // 429 → rate limited — NOT auto-retried (caller decides when to retry)\n    if (response.status === 429) {\n      const retryAfter = parseRetryAfter(response);\n      throw new OnboardingRateLimitError(retryAfter);\n    }\n\n    // 422 → validation error (client-side should have caught this)\n    if (response.status === 422) {\n      throw new OnboardingValidationError(\n        \"Server rejected the submission (422). Please check your inputs.\",\n      );\n    }\n\n    // 5xx → retryable server error\n    if (response.status >= 500) {\n      lastError = new OnboardingServerError(response.status);\n      const delay = RETRY_DELAYS_MS[attempt - 1];\n      if (attempt < MAX_ATTEMPTS && delay !== undefined) {\n        await sleep(delay);\n        continue;\n      }\n      throw lastError;\n    }\n\n    // Any other unexpected status\n    throw new OnboardingServerError(\n      response.status,\n      `Unexpected response status ${response.status}`,\n    );\n  }\n\n  // Should not be reachable; guard for type safety\n  throw lastError ?? new OnboardingNetworkError();\n}\n","/**\n * Submit client for POST /api/v1/public/onboarding/submit (D540 §2).\n *\n * Contract per the LOCKED hub REST interface (PublicOnboardingSubmitRequest):\n *   - Body: { specVersion, answers, selectedServices?, botToken,\n *             consent:{tosAccepted:true, privacyAccepted:true},\n *             credentials:{email, password(12-256)} }\n *     additionalProperties: false — validated STRICTLY client-side before\n *     any fetch (unknown keys are rejected, not stripped).\n *   - Idempotency-Key header REQUIRED (same D538 discipline as leads:\n *     stable across retries of the SAME payload; the widget mints a new\n *     key when the payload fingerprint changes).\n *   - specVersion policy is reject-stale: 409 → OnboardingSpecStaleError\n *     carrying the server's current version. The CALLER refetches the spec\n *     and surfaces re-validation to the user — NEVER silent auto-resubmit.\n *   - Response: { accepted:true, terminalStage, verificationEmailSent? }.\n *\n * Success-body rule for /submit (DIFFERENT from /leads, deliberately):\n * the response carries REQUIRED routing data (terminalStage decides what\n * the UI shows next), so a 2xx with an empty/unparseable/garbage body is\n * an OnboardingServerError — the SDK will not fabricate a terminal stage.\n * (/leads tolerates body-less 2xx because its only signal IS the status.)\n */\n\nimport { z } from \"zod/v3\";\nimport type { TerminalStage } from \"../spec/model.js\";\nimport {\n  OnboardingBotChallengeError,\n  OnboardingConflictError,\n  OnboardingNetworkError,\n  OnboardingRateLimitError,\n  OnboardingServerError,\n  OnboardingSpecStaleError,\n  OnboardingValidationError,\n} from \"./errors.js\";\nimport { type BotTokenSource, resolveBotTokenGuarded } from \"./client.js\";\nimport { DEFAULT_REQUEST_TIMEOUT_MS, fetchWithTimeout } from \"./http.js\";\n\nconst SUBMIT_PATH = \"/api/v1/public/onboarding/submit\";\nconst MAX_ATTEMPTS = 3;\nconst RETRY_DELAYS_MS = [1000, 2000] as const;\n\n/**\n * STRICT wire schema — mirrors PublicOnboardingSubmitRequest exactly\n * (additionalProperties: false; consent booleans are const-true; password\n * length 12-256 per the locked schema).\n */\nexport const signupWireSchema = z\n  .object({\n    specVersion: z.string().min(1, \"specVersion is required\"),\n    answers: z.record(z.unknown()),\n    selectedServices: z.array(z.string()).optional(),\n    botToken: z.string().min(1, \"botToken is required\"),\n    consent: z\n      .object({\n        tosAccepted: z.literal(true, {\n          errorMap: () => ({ message: \"Terms of Service must be accepted\" }),\n        }),\n        privacyAccepted: z.literal(true, {\n          errorMap: () => ({ message: \"Privacy Policy must be accepted\" }),\n        }),\n      })\n      .strict(),\n    credentials: z\n      .object({\n        email: z.string().email(\"A valid account email is required\"),\n        password: z\n          .string()\n          .min(12, \"Password must be at least 12 characters\")\n          .max(256, \"Password must be at most 256 characters\"),\n      })\n      .strict(),\n  })\n  .strict();\n\nexport type SignupWirePayload = z.infer<typeof signupWireSchema>;\n\n/** The payload the caller assembles (botToken attached by the transport). */\nexport interface SignupSubmitBody {\n  specVersion: string;\n  answers: Record<string, unknown>;\n  selectedServices?: string[];\n  consent: { tosAccepted: true; privacyAccepted: true };\n  credentials: { email: string; password: string };\n}\n\nexport interface SignupSubmitOptions {\n  baseUrl: string;\n  /**\n   * reCAPTCHA token (D537), or a provider called ONCE PER ATTEMPT to mint a\n   * fresh token. Tokens are single-use (consumed at siteverify), so a fixed\n   * string on a retried request risks 403 after the first attempt consumed\n   * it — pass a provider for retry-safe recovery.\n   */\n  botToken: BotTokenSource;\n  /** Stable idempotency key — same discipline as submitLead. */\n  idempotencyKey: string;\n  fetch?: typeof globalThis.fetch;\n  /**\n   * Per-attempt request timeout in ms (default 15s). A stalled intake aborts\n   * with OnboardingNetworkError so the widget re-enables instead of hanging.\n   */\n  timeoutMs?: number;\n  onAttempt?: (attempt: number) => void;\n}\n\nexport interface SignupSubmitResult {\n  accepted: true;\n  /** Stage the existing engine landed the applicant at (D540 §2). */\n  terminalStage: TerminalStage;\n  verificationEmailSent?: boolean;\n}\n\n/**\n * Stable fingerprint of a signup submission, EXCLUDING botToken (fresh per\n * attempt by design). Same role as computePayloadFingerprint for leads:\n * same fingerprint ⇒ retry (reuse the Idempotency-Key); changed\n * fingerprint ⇒ new logical submission (mint a new key) — mirroring the\n * server's D538 payload-match guard.\n */\nexport function computeSignupFingerprint(body: SignupSubmitBody): string {\n  const canonical = JSON.stringify([\n    body.specVersion,\n    // Sort answer keys for stability regardless of insertion order.\n    Object.keys(body.answers)\n      .sort()\n      .map((k) => [k, body.answers[k]]),\n    [...(body.selectedServices ?? [])].sort(),\n    body.credentials.email,\n    body.credentials.password,\n    body.consent.tosAccepted,\n    body.consent.privacyAccepted,\n  ]);\n  let hash = 0x811c9dc5;\n  for (let i = 0; i < canonical.length; i++) {\n    hash ^= canonical.charCodeAt(i);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, \"0\");\n}\n\nfunction buildUrl(baseUrl: string, path: string): string {\n  const base = baseUrl.endsWith(\"/\") ? baseUrl.slice(0, -1) : baseUrl;\n  return `${base}${path}`;\n}\n\nfunction parseRetryAfter(response: Response): number | null {\n  const header = response.headers.get(\"retry-after\");\n  if (!header) return null;\n  const seconds = Number.parseInt(header, 10);\n  return Number.isNaN(seconds) ? null : seconds;\n}\n\nasync function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nconst TERMINAL_STAGES: readonly TerminalStage[] = [\n  \"prospect\",\n  \"inactive\",\n  \"active\",\n];\n\n/** Parse the REQUIRED submit response shape; anything else → ServerError. */\nasync function parseSubmitSuccess(\n  response: Response,\n): Promise<SignupSubmitResult> {\n  let json: unknown;\n  try {\n    json = await response.json();\n  } catch {\n    throw new OnboardingServerError(\n      response.status,\n      `Success status ${response.status} but the submit response body was not JSON — terminalStage is unknown.`,\n    );\n  }\n  if (\n    typeof json === \"object\" &&\n    json !== null &&\n    (json as { accepted?: unknown }).accepted === true\n  ) {\n    const stage = (json as { terminalStage?: unknown }).terminalStage;\n    if (\n      typeof stage === \"string\" &&\n      (TERMINAL_STAGES as readonly string[]).includes(stage)\n    ) {\n      const verificationEmailSent = (\n        json as { verificationEmailSent?: unknown }\n      ).verificationEmailSent;\n      return {\n        accepted: true,\n        terminalStage: stage as TerminalStage,\n        ...(typeof verificationEmailSent === \"boolean\"\n          ? { verificationEmailSent }\n          : {}),\n      };\n    }\n  }\n  throw new OnboardingServerError(\n    response.status,\n    `Success status ${response.status} but the submit response did not carry {accepted:true, terminalStage}.`,\n  );\n}\n\n/**\n * Submit a full signup to the onboarding intake.\n *\n * @throws {OnboardingValidationError} strict wire-schema failure — BEFORE any fetch\n * @throws {OnboardingBotChallengeError} on 403, or if the bot-token provider\n *   throws (reCAPTCHA unreachable) on any attempt\n * @throws {OnboardingSpecStaleError} on 409 with code:\"spec_stale\" (caller\n *   refetches spec); carries the server's currentSpecVersion\n * @throws {OnboardingConflictError} on a 409 that is NOT spec_stale\n * @throws {OnboardingRateLimitError} on 429\n * @throws {OnboardingValidationError} on 422 (server re-validation)\n * @throws {OnboardingServerError} on 5xx after retries, or a 2xx without\n *   the required {accepted:true, terminalStage} body\n * @throws {OnboardingNetworkError} on network failure OR timeout after retries\n */\nexport async function submitSignup(\n  body: SignupSubmitBody,\n  options: SignupSubmitOptions,\n): Promise<SignupSubmitResult> {\n  const fetchImpl = options.fetch ?? globalThis.fetch;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;\n  const url = buildUrl(options.baseUrl, SUBMIT_PATH);\n\n  // Non-token fields normalized once; token attached PER ATTEMPT (single-use)\n  // so a retry carries a fresh token — the body is serialized inside the loop.\n  const base: Record<string, unknown> = { ...body };\n  if (base[\"selectedServices\"] === undefined) {\n    delete base[\"selectedServices\"];\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    \"Idempotency-Key\": options.idempotencyKey,\n  };\n\n  let lastError: unknown = null;\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    options.onAttempt?.(attempt);\n\n    // Guarded: a token-provider failure (reCAPTCHA unreachable on a retry)\n    // becomes a typed OnboardingBotChallengeError, never a raw RecaptchaError.\n    const botToken = await resolveBotTokenGuarded(options.botToken);\n    const parsed = signupWireSchema.safeParse({ ...base, botToken });\n    if (!parsed.success) {\n      const detail = parsed.error.issues\n        .map((i) => `${i.path.join(\".\") || \"(payload)\"}: ${i.message}`)\n        .join(\"; \");\n      throw new OnboardingValidationError(\n        `Signup payload failed wire-schema validation: ${detail}`,\n      );\n    }\n    const wireBody = JSON.stringify(parsed.data);\n\n    let response: Response;\n    try {\n      response = await fetchWithTimeout(url, {\n        method: \"POST\",\n        headers,\n        body: wireBody,\n        timeoutMs,\n        fetchImpl,\n      });\n    } catch (err) {\n      lastError = new OnboardingNetworkError(err);\n      const delay = RETRY_DELAYS_MS[attempt - 1];\n      if (attempt < MAX_ATTEMPTS && delay !== undefined) {\n        await sleep(delay);\n        continue;\n      }\n      throw lastError;\n    }\n\n    if (response.status === 200 || response.status === 202) {\n      return parseSubmitSuccess(response);\n    }\n\n    if (response.status === 403) {\n      throw new OnboardingBotChallengeError();\n    }\n\n    // 409 — the PINNED spec_stale body is exactly\n    //   { error: true, code: \"spec_stale\", currentSpecVersion: string }\n    // (confirmed against the crm intake). ONLY a 409 carrying\n    // code:\"spec_stale\" maps to OnboardingSpecStaleError; any other 409 is a\n    // generic conflict. Read ONLY currentSpecVersion — no field hedging.\n    if (response.status === 409) {\n      let code: unknown;\n      let currentSpecVersion = \"unknown\";\n      try {\n        const body409 = (await response.json()) as Record<string, unknown>;\n        code = body409[\"code\"];\n        const v = body409[\"currentSpecVersion\"];\n        if (typeof v === \"string\" && v !== \"\") currentSpecVersion = v;\n      } catch {\n        // keep defaults; a body-less 409 is treated as a generic conflict\n      }\n      if (code === \"spec_stale\") {\n        throw new OnboardingSpecStaleError(currentSpecVersion);\n      }\n      throw new OnboardingConflictError(409);\n    }\n\n    if (response.status === 429) {\n      throw new OnboardingRateLimitError(parseRetryAfter(response));\n    }\n\n    if (response.status === 422) {\n      throw new OnboardingValidationError(\n        \"The server rejected the submission (422). Please review your inputs.\",\n      );\n    }\n\n    if (response.status >= 500) {\n      lastError = new OnboardingServerError(response.status);\n      const delay = RETRY_DELAYS_MS[attempt - 1];\n      if (attempt < MAX_ATTEMPTS && delay !== undefined) {\n        await sleep(delay);\n        continue;\n      }\n      throw lastError;\n    }\n\n    throw new OnboardingServerError(\n      response.status,\n      `Unexpected response status ${response.status}`,\n    );\n  }\n\n  throw lastError ?? new OnboardingNetworkError();\n}\n"]}

package/dist/chunk-JFIONONR.js

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=chunk-JFIONONR.js.map
+//# sourceMappingURL=chunk-JFIONONR.js.map

package/dist/chunk-JFIONONR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-JFIONONR.js"}