@sonordev/site-kit 5.3.0 → 5.3.2

package/dist/chunk-R5F2JQVX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/proxy/securityHeaders.ts"],"names":[],"mappings":";AAmCO,IAAM,uBAAA,GAA0B;AAAA,EACrC,QAAA;AAAA,EACA,oBAAA;AAAA,EACA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF;AAiCO,SAAS,qBACd,MAAA,EACwB;AACxB,EAAA,IAAI,MAAA,KAAW,KAAA,EAAO,OAAO,EAAC;AAE9B,EAAA,MAAM,CAAA,GACJ,OAAO,MAAA,KAAW,QAAA,GAAW,SAAS,EAAC;AAEzC,EAAA,MAAM,UAAkC,EAAC;AAGzC,EAAA,IAAI,CAAA,CAAE,uBAAuB,KAAA,EAAO;AAClC,IAAA,OAAA,CAAQ,wBAAwB,CAAA,GAAI,IAAA;AAAA,EACtC;AAUA,EAAA,MAAM,cAAA,GACJ,CAAA,CAAE,cAAA,KAAmB,KAAA,GACjB,IAAA,GACA,CAAA,CAAE,cAAA,IAAkB,CAAA,CAAE,cAAA,CAAe,MAAA,GAAS,CAAA,GAC5C,CAAA,CAAE,cAAA,GACF,uBAAA;AAER,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAA,CAAQ,yBAAyB,CAAA,GAC/B,CAAA,gBAAA,EAAmB,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAE7C,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,OAAA,CAAQ,iBAAiB,IAAI,CAAA,CAAE,YAAA;AAAA,IACjC;AAAA,EACF,CAAA,MAAA,IAAW,CAAA,CAAE,YAAA,KAAiB,KAAA,EAAO;AACnC,IAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,CAAA,CAAE,YAAA,IAAgB,MAAA;AAAA,EACjD;AAGA,EAAA,IAAI,CAAA,CAAE,uBAAuB,KAAA,EAAO;AAClC,IAAA,OAAA,CAAQ,wBAAwB,CAAA,GAAI,SAAA;AAAA,EACtC;AAGA,EAAA,IAAI,CAAA,CAAE,kBAAkB,KAAA,EAAO;AAC7B,IAAA,OAAA,CAAQ,kBAAkB,CAAA,GAAI,eAAA;AAAA,EAChC;AAGA,EAAA,OAAA,CAAQ,iBAAiB,CAAA,GACvB,CAAA,CAAE,cAAA,IAAkB,iCAAA;AAGtB,EAAA,OAAA,CAAQ,oBAAoB,CAAA,GAC1B,CAAA,CAAE,iBAAA,IAAqB,0CAAA;AAGzB,EAAA,IAAI,EAAE,aAAA,EAAe;AACnB,IAAA,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,CAAA,CAAE,aAAa,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,OAAA;AACT","file":"chunk-R5F2JQVX.mjs","sourcesContent":["/**\n * Default security headers applied by site-kit middleware.\n *\n * These match industry best practices and are the same headers\n * recommended by Next.js documentation. All are opt-out.\n */\n\n/**\n * Single source of truth for who may frame a site-kit site.\n *\n * Upforge showcases live client work inside iframes on its portfolio /\n * area pages, so every managed marketing site has to be embeddable from\n * the Upforge showcase origins. `X-Frame-Options` cannot express an\n * allowlist (`ALLOW-FROM` is dead and ignored by every current browser),\n * so the CSP `frame-ancestors` directive is the only way to say \"these\n * origins and nobody else\". Everything not listed here is still blocked.\n *\n * upforgelabs.com is a SEPARATE APEX DOMAIN, not a subdomain of\n * upforge.io, so `https://*.upforge.io` does not cover it and never did.\n * Labs case studies embed three live client frames each; without this\n * entry every one of them is refused with ERR_BLOCKED_BY_RESPONSE.\n *\n * upforgeapps.com is deliberately NOT here. It is a third Upforge apex,\n * but it only *links* to case studies (`upforge.io/work/<slug>`, see its\n * `lib/proof.ts`) and frames no client site anywhere. An origin earns a\n * place on this list by embedding, not by belonging to Upforge; adding a\n * non-embedder would hand out framing rights nothing needs. Re-check that\n * before adding it.\n *\n * Do NOT re-fork this list into individual sites' proxy/middleware/\n * next.config/netlify.toml/_headers — a fork is a copy that stops\n * tracking this one, which is exactly how upforgelabs.com came to be\n * missing from ten sites' allowlists at once. Add origins HERE and let\n * the fleet inherit them on its next deploy.\n */\nexport const DEFAULT_FRAME_ANCESTORS = [\n  \"'self'\",\n  'https://upforge.io',\n  'https://*.upforge.io',\n  'https://upforgelabs.com',\n  'https://*.upforgelabs.com',\n]\n\nexport interface SecurityHeadersConfig {\n  /** X-Frame-Options value. false to disable. Default: omitted when\n   * `frameAncestors` is active (the two conflict), otherwise 'DENY'. */\n  frameOptions?: 'DENY' | 'SAMEORIGIN' | false\n  /**\n   * Origins allowed to frame this site, emitted as a CSP `frame-ancestors`\n   * directive. Defaults to {@link DEFAULT_FRAME_ANCESTORS} ('self' + upforge.io)\n   * so Upforge can showcase the site. Pass an array to extend/replace, or\n   * `false` to opt out entirely and fall back to X-Frame-Options.\n   *\n   * Ignored if a `Content-Security-Policy` is supplied via `customHeaders` —\n   * that CSP wins, and must carry its own frame-ancestors directive.\n   */\n  frameAncestors?: string[] | false\n  /** X-Content-Type-Options: nosniff. Default: true */\n  contentTypeOptions?: boolean\n  /** X-XSS-Protection header. Default: true */\n  xssProtection?: boolean\n  /** Referrer-Policy value. Default: 'strict-origin-when-cross-origin' */\n  referrerPolicy?: string\n  /** Permissions-Policy value. Default restricts camera, microphone, geolocation */\n  permissionsPolicy?: string\n  /** X-DNS-Prefetch-Control. Default: true (on) */\n  dnsPrefetchControl?: boolean\n  /** Additional custom headers */\n  customHeaders?: Record<string, string>\n}\n\n/**\n * Build a flat Record of header name → value from the config.\n */\nexport function buildSecurityHeaders(\n  config?: SecurityHeadersConfig | boolean,\n): Record<string, string> {\n  if (config === false) return {}\n\n  const c: SecurityHeadersConfig =\n    typeof config === 'object' ? config : {}\n\n  const headers: Record<string, string> = {}\n\n  // X-DNS-Prefetch-Control\n  if (c.dnsPrefetchControl !== false) {\n    headers['X-DNS-Prefetch-Control'] = 'on'\n  }\n\n  // Framing policy — CSP frame-ancestors is the allowlist mechanism;\n  // X-Frame-Options is only a fallback for the opted-out case.\n  //\n  // These two headers MUST NOT both be emitted: X-Frame-Options has no\n  // allowlist form, so a stray `DENY`/`SAMEORIGIN` alongside a permissive\n  // frame-ancestors is honoured by some browsers and silently re-blocks the\n  // embed. So when frame-ancestors is active we drop XFO unless the site\n  // explicitly asked for a value.\n  const frameAncestors =\n    c.frameAncestors === false\n      ? null\n      : c.frameAncestors && c.frameAncestors.length > 0\n        ? c.frameAncestors\n        : DEFAULT_FRAME_ANCESTORS\n\n  if (frameAncestors) {\n    headers['Content-Security-Policy'] =\n      `frame-ancestors ${frameAncestors.join(' ')}`\n    // Only honour an explicitly-requested XFO value here.\n    if (c.frameOptions) {\n      headers['X-Frame-Options'] = c.frameOptions\n    }\n  } else if (c.frameOptions !== false) {\n    headers['X-Frame-Options'] = c.frameOptions || 'DENY'\n  }\n\n  // X-Content-Type-Options\n  if (c.contentTypeOptions !== false) {\n    headers['X-Content-Type-Options'] = 'nosniff'\n  }\n\n  // X-XSS-Protection\n  if (c.xssProtection !== false) {\n    headers['X-XSS-Protection'] = '1; mode=block'\n  }\n\n  // Referrer-Policy\n  headers['Referrer-Policy'] =\n    c.referrerPolicy || 'strict-origin-when-cross-origin'\n\n  // Permissions-Policy\n  headers['Permissions-Policy'] =\n    c.permissionsPolicy || 'camera=(), microphone=(), geolocation=()'\n\n  // Custom headers\n  if (c.customHeaders) {\n    Object.assign(headers, c.customHeaders)\n  }\n\n  return headers\n}\n"]}

package/dist/{chunk-26JXNW7B.mjs → chunk-RO55G3OA.mjs}

@@ -64,5 +64,5 @@ function ContactTracking({ debug = false }) {
 }
 
 export { ContactTracking, useContactTracking };
-//# sourceMappingURL=chunk-26JXNW7B.mjs.map
-//# sourceMappingURL=chunk-26JXNW7B.mjs.map
+//# sourceMappingURL=chunk-RO55G3OA.mjs.map
+//# sourceMappingURL=chunk-RO55G3OA.mjs.map

package/dist/{chunk-26JXNW7B.mjs.map → chunk-RO55G3OA.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/analytics/useContactTracking.ts"],"names":[],"mappings":";;;AAoDO,SAAS,kBAAA,CAAmB,OAAA,GAAqC,EAAC,EAA0B;AACjG,EAAA,MAAM,EAAE,SAAA,GAAY,IAAA,EAAM,KAAA,GAAQ,OAAM,GAAI,OAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,CAAC,WAAA,EAAqB,QAAA,KAAuC;AAC/F,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,WAAW,CAAA;AAE9D,IAAA,eAAA,CAAgB;AAAA,MACd,IAAA,EAAM,YAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,WAAA,EAAa,WAAA,CAAY,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAAA;AAAA,QAC1C,SAAA,EAAW,WAAA;AAAA,QACX,GAAG;AAAA;AACL,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAEV,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,CAAC,KAAA,EAAe,QAAA,KAAuC;AACzF,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,KAAK,CAAA;AAExD,IAAA,eAAA,CAAgB;AAAA,MACd,IAAA,EAAM,aAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,KAAA;AAAA,QACA,GAAG;AAAA;AACL,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAGV,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,SAAA,IAAa,OAAO,QAAA,KAAa,WAAA,EAAa;AAEnD,IAAA,MAAM,WAAA,GAAc,CAAC,CAAA,KAAkB;AACrC,MAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,MAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AACjC,MAAA,IAAI,CAAC,MAAA,EAAQ;AAEb,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AACvC,MAAA,IAAI,CAAC,IAAA,EAAM;AAEX,MAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,QAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,EAAE,IAAA,EAAK;AAC5C,QAAA,eAAA,CAAgB,KAAA,EAAO;AAAA,UACrB,QAAA,EAAU,MAAA,CAAO,WAAA,EAAa,IAAA,EAAK;AAAA,UACnC,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH,CAAA,MAAA,IAAW,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA,EAAG;AACrC,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,CAAE,IAAA,EAAK;AAC7D,QAAA,eAAA,CAAgB,KAAA,EAAO;AAAA,UACrB,QAAA,EAAU,MAAA,CAAO,WAAA,EAAa,IAAA,EAAK;AAAA,UACnC,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AAAA,IACF,CAAA;AAEA,IAAA,QAAA,CAAS,iBAAiB,OAAA,EAAS,WAAA,EAAa,EAAE,OAAA,EAAS,MAAM,CAAA;AAEjE,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,CAAS,oBAAoB,OAAA,EAAS,WAAA,EAAa,EAAE,OAAA,EAAS,MAAM,CAAA;AAAA,IACtE,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,eAAA,EAAiB,eAAe,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACL,eAAA;AAAA,IACA;AAAA,GACF;AACF;AAWO,SAAS,eAAA,CAAgB,EAAE,KAAA,GAAQ,KAAA,EAAM,EAAwB;AACtE,EAAA,kBAAA,CAAmB,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,CAAA;AAC7C,EAAA,OAAO,IAAA;AACT","file":"chunk-26JXNW7B.mjs","sourcesContent":["/**\n * @sonordev/site-kit/analytics - Contact Tracking Hook\n * \n * Tracks phone calls and email clicks as conversions.\n * Use this hook to automatically track tel: and mailto: links,\n * or manually track contact interactions.\n */\n\n'use client'\n\nimport { useCallback, useEffect } from 'react'\n// Deliberately the standalone dispatch bridge, NOT useAnalytics().\n//\n// SiteKitLayout mounts AnalyticsProvider as a childless deferred SIBLING of\n// the page tree (wrapping children in a dynamic ssr:false provider de-opts the\n// whole route to client rendering - see SiteKitClientProviders). That means no\n// component a site can actually place is ever inside the provider, so the hook\n// form threw \"useAnalytics must be used within an AnalyticsProvider\" and this\n// component could not be used with the documented layout at all.\n//\n// dispatch queues until the deferred provider registers itself, so calls made\n// before analytics is ready still land.\nimport { trackConversion } from './dispatch'\n\nexport interface UseContactTrackingOptions {\n  /** Automatically track all tel: and mailto: links (default: true) */\n  autoTrack?: boolean\n  /** Debug mode - logs events to console */\n  debug?: boolean\n}\n\nexport interface ContactTrackingReturn {\n  /** Manually track a phone call click */\n  trackPhoneClick: (phoneNumber: string, metadata?: Record<string, unknown>) => void\n  /** Manually track an email click */\n  trackEmailClick: (email: string, metadata?: Record<string, unknown>) => void\n}\n\n/**\n * Hook for tracking phone and email contact interactions as conversions.\n * \n * @example\n * ```tsx\n * // Auto-track all tel: and mailto: links\n * useContactTracking()\n * \n * // Manual tracking\n * const { trackPhoneClick, trackEmailClick } = useContactTracking()\n * trackPhoneClick('513-555-1234')\n * trackEmailClick('hello@example.com')\n * ```\n */\nexport function useContactTracking(options: UseContactTrackingOptions = {}): ContactTrackingReturn {\n  const { autoTrack = true, debug = false } = options\n\n  const trackPhoneClick = useCallback((phoneNumber: string, metadata?: Record<string, unknown>) => {\n    if (debug) console.log('[Analytics] Phone click:', phoneNumber)\n    \n    trackConversion({\n      type: 'phone_call',\n      metadata: {\n        phoneNumber: phoneNumber.replace(/\\D/g, ''), // Normalize to digits\n        rawNumber: phoneNumber,\n        ...metadata,\n      },\n    })\n  }, [debug])\n  \n  const trackEmailClick = useCallback((email: string, metadata?: Record<string, unknown>) => {\n    if (debug) console.log('[Analytics] Email click:', email)\n    \n    trackConversion({\n      type: 'email_click',\n      metadata: {\n        email,\n        ...metadata,\n      },\n    })\n  }, [debug])\n  \n  // Auto-track tel: and mailto: links\n  useEffect(() => {\n    if (!autoTrack || typeof document === 'undefined') return\n    \n    const handleClick = (e: MouseEvent) => {\n      const target = e.target as HTMLElement\n      const anchor = target.closest('a')\n      if (!anchor) return\n      \n      const href = anchor.getAttribute('href')\n      if (!href) return\n      \n      if (href.startsWith('tel:')) {\n        const phone = href.replace('tel:', '').trim()\n        trackPhoneClick(phone, {\n          linkText: anchor.textContent?.trim(),\n          source: 'auto',\n        })\n      } else if (href.startsWith('mailto:')) {\n        const email = href.replace('mailto:', '').split('?')[0].trim()\n        trackEmailClick(email, {\n          linkText: anchor.textContent?.trim(),\n          source: 'auto',\n        })\n      }\n    }\n    \n    document.addEventListener('click', handleClick, { capture: true })\n    \n    return () => {\n      document.removeEventListener('click', handleClick, { capture: true })\n    }\n  }, [autoTrack, trackPhoneClick, trackEmailClick])\n  \n  return {\n    trackPhoneClick,\n    trackEmailClick,\n  }\n}\n\n/**\n * Component wrapper for contact tracking\n * Simply include this component to auto-track all tel: and mailto: links\n * \n * @example\n * ```tsx\n * <ContactTracking />\n * ```\n */\nexport function ContactTracking({ debug = false }: { debug?: boolean }) {\n  useContactTracking({ autoTrack: true, debug })\n  return null\n}\n"]}
+{"version":3,"sources":["../src/analytics/useContactTracking.ts"],"names":[],"mappings":";;;AAoDO,SAAS,kBAAA,CAAmB,OAAA,GAAqC,EAAC,EAA0B;AACjG,EAAA,MAAM,EAAE,SAAA,GAAY,IAAA,EAAM,KAAA,GAAQ,OAAM,GAAI,OAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,CAAC,WAAA,EAAqB,QAAA,KAAuC;AAC/F,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,WAAW,CAAA;AAE9D,IAAA,eAAA,CAAgB;AAAA,MACd,IAAA,EAAM,YAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,WAAA,EAAa,WAAA,CAAY,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAAA;AAAA,QAC1C,SAAA,EAAW,WAAA;AAAA,QACX,GAAG;AAAA;AACL,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAEV,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,CAAC,KAAA,EAAe,QAAA,KAAuC;AACzF,IAAA,IAAI,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,KAAK,CAAA;AAExD,IAAA,eAAA,CAAgB;AAAA,MACd,IAAA,EAAM,aAAA;AAAA,MACN,QAAA,EAAU;AAAA,QACR,KAAA;AAAA,QACA,GAAG;AAAA;AACL,KACD,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAGV,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,SAAA,IAAa,OAAO,QAAA,KAAa,WAAA,EAAa;AAEnD,IAAA,MAAM,WAAA,GAAc,CAAC,CAAA,KAAkB;AACrC,MAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,MAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AACjC,MAAA,IAAI,CAAC,MAAA,EAAQ;AAEb,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,YAAA,CAAa,MAAM,CAAA;AACvC,MAAA,IAAI,CAAC,IAAA,EAAM;AAEX,MAAA,IAAI,IAAA,CAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,QAAA,MAAM,QAAQ,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,EAAE,IAAA,EAAK;AAC5C,QAAA,eAAA,CAAgB,KAAA,EAAO;AAAA,UACrB,QAAA,EAAU,MAAA,CAAO,WAAA,EAAa,IAAA,EAAK;AAAA,UACnC,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH,CAAA,MAAA,IAAW,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA,EAAG;AACrC,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,CAAE,IAAA,EAAK;AAC7D,QAAA,eAAA,CAAgB,KAAA,EAAO;AAAA,UACrB,QAAA,EAAU,MAAA,CAAO,WAAA,EAAa,IAAA,EAAK;AAAA,UACnC,MAAA,EAAQ;AAAA,SACT,CAAA;AAAA,MACH;AAAA,IACF,CAAA;AAEA,IAAA,QAAA,CAAS,iBAAiB,OAAA,EAAS,WAAA,EAAa,EAAE,OAAA,EAAS,MAAM,CAAA;AAEjE,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,CAAS,oBAAoB,OAAA,EAAS,WAAA,EAAa,EAAE,OAAA,EAAS,MAAM,CAAA;AAAA,IACtE,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,eAAA,EAAiB,eAAe,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACL,eAAA;AAAA,IACA;AAAA,GACF;AACF;AAWO,SAAS,eAAA,CAAgB,EAAE,KAAA,GAAQ,KAAA,EAAM,EAAwB;AACtE,EAAA,kBAAA,CAAmB,EAAE,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,CAAA;AAC7C,EAAA,OAAO,IAAA;AACT","file":"chunk-RO55G3OA.mjs","sourcesContent":["/**\n * @sonordev/site-kit/analytics - Contact Tracking Hook\n * \n * Tracks phone calls and email clicks as conversions.\n * Use this hook to automatically track tel: and mailto: links,\n * or manually track contact interactions.\n */\n\n'use client'\n\nimport { useCallback, useEffect } from 'react'\n// Deliberately the standalone dispatch bridge, NOT useAnalytics().\n//\n// SiteKitLayout mounts AnalyticsProvider as a childless deferred SIBLING of\n// the page tree (wrapping children in a dynamic ssr:false provider de-opts the\n// whole route to client rendering - see SiteKitClientProviders). That means no\n// component a site can actually place is ever inside the provider, so the hook\n// form threw \"useAnalytics must be used within an AnalyticsProvider\" and this\n// component could not be used with the documented layout at all.\n//\n// dispatch queues until the deferred provider registers itself, so calls made\n// before analytics is ready still land.\nimport { trackConversion } from './dispatch'\n\nexport interface UseContactTrackingOptions {\n  /** Automatically track all tel: and mailto: links (default: true) */\n  autoTrack?: boolean\n  /** Debug mode - logs events to console */\n  debug?: boolean\n}\n\nexport interface ContactTrackingReturn {\n  /** Manually track a phone call click */\n  trackPhoneClick: (phoneNumber: string, metadata?: Record<string, unknown>) => void\n  /** Manually track an email click */\n  trackEmailClick: (email: string, metadata?: Record<string, unknown>) => void\n}\n\n/**\n * Hook for tracking phone and email contact interactions as conversions.\n * \n * @example\n * ```tsx\n * // Auto-track all tel: and mailto: links\n * useContactTracking()\n * \n * // Manual tracking\n * const { trackPhoneClick, trackEmailClick } = useContactTracking()\n * trackPhoneClick('513-555-1234')\n * trackEmailClick('hello@example.com')\n * ```\n */\nexport function useContactTracking(options: UseContactTrackingOptions = {}): ContactTrackingReturn {\n  const { autoTrack = true, debug = false } = options\n\n  const trackPhoneClick = useCallback((phoneNumber: string, metadata?: Record<string, unknown>) => {\n    if (debug) console.log('[Analytics] Phone click:', phoneNumber)\n    \n    trackConversion({\n      type: 'phone_call',\n      metadata: {\n        phoneNumber: phoneNumber.replace(/\\D/g, ''), // Normalize to digits\n        rawNumber: phoneNumber,\n        ...metadata,\n      },\n    })\n  }, [debug])\n  \n  const trackEmailClick = useCallback((email: string, metadata?: Record<string, unknown>) => {\n    if (debug) console.log('[Analytics] Email click:', email)\n    \n    trackConversion({\n      type: 'email_click',\n      metadata: {\n        email,\n        ...metadata,\n      },\n    })\n  }, [debug])\n  \n  // Auto-track tel: and mailto: links\n  useEffect(() => {\n    if (!autoTrack || typeof document === 'undefined') return\n    \n    const handleClick = (e: MouseEvent) => {\n      const target = e.target as HTMLElement\n      const anchor = target.closest('a')\n      if (!anchor) return\n      \n      const href = anchor.getAttribute('href')\n      if (!href) return\n      \n      if (href.startsWith('tel:')) {\n        const phone = href.replace('tel:', '').trim()\n        trackPhoneClick(phone, {\n          linkText: anchor.textContent?.trim(),\n          source: 'auto',\n        })\n      } else if (href.startsWith('mailto:')) {\n        const email = href.replace('mailto:', '').split('?')[0].trim()\n        trackEmailClick(email, {\n          linkText: anchor.textContent?.trim(),\n          source: 'auto',\n        })\n      }\n    }\n    \n    document.addEventListener('click', handleClick, { capture: true })\n    \n    return () => {\n      document.removeEventListener('click', handleClick, { capture: true })\n    }\n  }, [autoTrack, trackPhoneClick, trackEmailClick])\n  \n  return {\n    trackPhoneClick,\n    trackEmailClick,\n  }\n}\n\n/**\n * Component wrapper for contact tracking\n * Simply include this component to auto-track all tel: and mailto: links\n * \n * @example\n * ```tsx\n * <ContactTracking />\n * ```\n */\nexport function ContactTracking({ debug = false }: { debug?: boolean }) {\n  useContactTracking({ autoTrack: true, debug })\n  return null\n}\n"]}

package/dist/{chunk-LCRWCOPI.mjs → chunk-TS3N3LGZ.mjs}

@@ -1,6 +1,6 @@
-import { HoneypotField, NativeFallbackFields, nativeFormProps } from './chunk-DXFZA34N.mjs';
-import { FormField } from './chunk-LB7LHVWI.mjs';
-import { normalizeFormConfig } from './chunk-ITV76G3L.mjs';
+import { HoneypotField, NativeFallbackFields, nativeFormProps } from './chunk-HDQTZAGE.mjs';
+import { FormField } from './chunk-H7274TKR.mjs';
+import { normalizeFormConfig } from './chunk-XW5KNCWJ.mjs';
 import { DEFAULT_HONEYPOT_FIELD } from './chunk-TMVKRQGJ.mjs';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
@@ -40,5 +40,5 @@ function StaticForm({ config: raw, className, nativeReturnTo }) {
 }
 
 export { StaticForm };
-//# sourceMappingURL=chunk-LCRWCOPI.mjs.map
-//# sourceMappingURL=chunk-LCRWCOPI.mjs.map
+//# sourceMappingURL=chunk-TS3N3LGZ.mjs.map
+//# sourceMappingURL=chunk-TS3N3LGZ.mjs.map

package/dist/{chunk-LCRWCOPI.mjs.map → chunk-TS3N3LGZ.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/forms/StaticForm.tsx"],"names":[],"mappings":";;;;;;AA6DA,SAAS,oBAAoB,MAAA,EAA2B;AACtD,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,IAAU,EAAC;AAC9B,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,OAAO,GAAA;AAGlC,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA,EAAG,EAAA;AACvC,EAAA,OAAO,GAAA,CAAI,OAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,OAAA,IAAW,CAAA,CAAE,OAAA,KAAY,WAAW,CAAA;AAClE;AAEO,SAAS,WAAW,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,gBAAe,EAAoB;AACtF,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,MAAA,GAAS,oBAAoB,GAAU,CAAA;AAC7C,EAAA,MAAM,MAAA,GAAS,oBAAoB,MAAM,CAAA;AACzC,EAAA,MAAM,iBAAA,GAAoB,OAAO,cAAA,IAAkB,sBAAA;AAEnD,EAAA,uBACE,IAAA;AAAA,IAAC,MAAA;AAAA,IAAA;AAAA,MAGC,eAAA,EAAc,MAAA;AAAA,MACd,eAAA,EAAc,OAAA;AAAA,MACd,SAAA,EAAW,CAAA,QAAA,EAAW,SAAA,IAAa,EAAE,CAAA,CAAA;AAAA,MACpC,GAAG,gBAAgB,MAAM,CAAA;AAAA,MAE1B,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,eAAA,EACb,QAAA,kBAAA,GAAA,CAAC,KAAA,EAAA,EAAI,WAAU,iBAAA,EACZ,QAAA,EAAA,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,qBACX,GAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YAEC,SAAA,EAAW,CAAA,+CAAA,EAAkD,KAAA,CAAM,KAAA,IAAS,MAAM,CAAA,CAAA;AAAA,YAGlF,8BAAC,SAAA,EAAA,EAAU,KAAA,EAAc,KAAA,EAAO,KAAA,CAAM,iBAAiB,EAAA,EAAI;AAAA,WAAA;AAAA,UAJtD,KAAA,CAAM,MAAM,KAAA,CAAM;AAAA,SAM1B,GACH,CAAA,EACF,CAAA;AAAA,4BAEC,KAAA,EAAA,EAAI,SAAA,EAAU,oBAAmB,KAAA,EAAO,EAAE,gBAAgB,UAAA,EAAW,EACpE,QAAA,kBAAA,GAAA,CAAC,QAAA,EAAA,EAAO,MAAK,QAAA,EAAS,SAAA,EAAU,qCAC7B,QAAA,EAAA,MAAA,CAAO,kBAAA,IAAsB,UAChC,CAAA,EACF,CAAA;AAAA,QAIC,MAAA,CAAO,gBAAA,oBAAoB,GAAA,CAAC,aAAA,EAAA,EAAc,MAAM,iBAAA,EAAmB,CAAA;AAAA,wBAGpE,GAAA,CAAC,oBAAA,EAAA,EAAqB,MAAA,EAAgB,QAAA,EAAU,cAAA,EAAgB;AAAA;AAAA;AAAA,GAClE;AAEJ","file":"chunk-LCRWCOPI.mjs","sourcesContent":["/**\n * StaticForm — a complete, submittable managed form with ZERO client JavaScript.\n *\n * No `'use client'`. This renders in a Server Component, and what it emits is\n * a real `<form>`: every field, the honeypot, the signed native token, and a\n * submit button. With JavaScript disabled, off, or still downloading, the\n * browser performs an ordinary form-encoded POST to\n * `/api/public/forms/submit-native`, sonor-api runs the honeypot +\n * render-timestamp + quarantine stack, and the lead lands. 4.0.1 built that\n * endpoint; this is what finally puts it under every form by default.\n *\n * ── Why this exists ─────────────────────────────────────────────────────\n *\n * ManagedForm was a client component for historical reasons that no longer\n * hold: it used to fetch its own config (getFormConfig removed that) and it\n * could only submit via JSON (the native endpoint removed that). Nobody moved\n * the boundary afterward, so every site that rendered a form paid for the\n * whole forms runtime — validation, spotlight, celebration, momentum — as an\n * INITIAL script, on the LCP-critical path.\n *\n * Measured on upforge.io's homepage: 48 KB of form code in the initial chunk\n * set cost 6 Lighthouse points (88 -> 82, LCP 3.8s -> 4.7s). Deferring the\n * client component recovered the score but deleted the form from the HTML,\n * taking the no-JS floor and crawlable fields with it. Neither half was\n * acceptable; a server-rendered form is what makes both true at once.\n *\n * Pair it with <FormEnhancer> to upgrade this markup at idle. Alone, it is\n * still a working form — that is the point. Never make this file `'use\n * client'`, and never import a hook into it.\n */\n\nimport React from 'react'\nimport { DEFAULT_HONEYPOT_FIELD } from './contract'\nimport { FormField } from './FormField'\nimport { HoneypotField } from './HoneypotField'\nimport { nativeFormProps, NativeFallbackFields } from './native-fallback'\nimport { normalizeFormConfig } from './normalize-config'\nimport type { ManagedFormConfig } from './types'\n\nexport interface StaticFormProps {\n  /**\n   * RAW /api/public/forms/config payload from `getFormConfig`, or an\n   * already-normalized config. Normalized here through the SAME function the\n   * client fetch uses, so the shell and the enhancement cannot disagree about\n   * field order, step count, or success copy.\n   */\n  config: Record<string, unknown> | ManagedFormConfig | null | undefined\n  className?: string\n  /**\n   * Absolute URL the no-JS 303 should return to (usually the page hosting the\n   * form). Without it the API falls back to the Referer origin — right site,\n   * wrong page.\n   */\n  nativeReturnTo?: string\n}\n\n/**\n * Fields the static shell can render meaningfully. Conditional logic is a\n * runtime concern (it depends on values the visitor has not entered yet), so\n * a conditional field renders here and the enhancement takes over hiding it.\n */\nfunction visibleStaticFields(config: ManagedFormConfig) {\n  const all = config.fields || []\n  if (!config.is_multi_step) return all\n  // Multi-step is JS-only navigation and is excluded from native POST, so the\n  // shell shows step one as a preview of what the form asks for.\n  const firstStepId = config.steps?.[0]?.id\n  return all.filter((f) => !f.step_id || f.step_id === firstStepId)\n}\n\nexport function StaticForm({ config: raw, className, nativeReturnTo }: StaticFormProps) {\n  if (!raw) return null\n  const config = normalizeFormConfig(raw as any)\n  const fields = visibleStaticFields(config)\n  const honeypotFieldName = config.honeypot_field || DEFAULT_HONEYPOT_FIELD\n\n  return (\n    <form\n      // Matches FormClient's classic branch attribute-for-attribute so the\n      // enhancement swap is invisible. Change one, change the other.\n      data-sk-state=\"idle\"\n      data-sk-mount=\"shell\"\n      className={`sk-form ${className || ''}`}\n      {...nativeFormProps(config)}\n    >\n      <div className=\"sk-form__step\">\n        <div className=\"sk-form__fields\">\n          {fields.map((field) => (\n            <div\n              key={field.id || field.slug}\n              className={`sk-form__field-wrapper sk-form__field-wrapper--${field.width || 'full'}`}\n            >\n              {/* No onChange — FormField renders native uncontrolled controls. */}\n              <FormField field={field} value={field.default_value ?? ''} />\n            </div>\n          ))}\n        </div>\n      </div>\n\n      <div className=\"sk-form__actions\" style={{ justifyContent: 'flex-end' }}>\n        <button type=\"submit\" className=\"sk-form__btn sk-form__btn--submit\">\n          {config.submit_button_text || 'Submit'}\n        </button>\n      </div>\n\n      {/* Same trap the hydrated form uses; no state needed because the value\n          is read and stripped server-side. */}\n      {config.honeypot_enabled && <HoneypotField name={honeypotFieldName} />}\n\n      {/* _sk_token auth + _sk_return destination for the native POST. */}\n      <NativeFallbackFields config={config} returnTo={nativeReturnTo} />\n    </form>\n  )\n}\n"]}
+{"version":3,"sources":["../src/forms/StaticForm.tsx"],"names":[],"mappings":";;;;;;AA6DA,SAAS,oBAAoB,MAAA,EAA2B;AACtD,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,IAAU,EAAC;AAC9B,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,OAAO,GAAA;AAGlC,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,GAAQ,CAAC,CAAA,EAAG,EAAA;AACvC,EAAA,OAAO,GAAA,CAAI,OAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,OAAA,IAAW,CAAA,CAAE,OAAA,KAAY,WAAW,CAAA;AAClE;AAEO,SAAS,WAAW,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,gBAAe,EAAoB;AACtF,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,MAAM,MAAA,GAAS,oBAAoB,GAAU,CAAA;AAC7C,EAAA,MAAM,MAAA,GAAS,oBAAoB,MAAM,CAAA;AACzC,EAAA,MAAM,iBAAA,GAAoB,OAAO,cAAA,IAAkB,sBAAA;AAEnD,EAAA,uBACE,IAAA;AAAA,IAAC,MAAA;AAAA,IAAA;AAAA,MAGC,eAAA,EAAc,MAAA;AAAA,MACd,eAAA,EAAc,OAAA;AAAA,MACd,SAAA,EAAW,CAAA,QAAA,EAAW,SAAA,IAAa,EAAE,CAAA,CAAA;AAAA,MACpC,GAAG,gBAAgB,MAAM,CAAA;AAAA,MAE1B,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,eAAA,EACb,QAAA,kBAAA,GAAA,CAAC,KAAA,EAAA,EAAI,WAAU,iBAAA,EACZ,QAAA,EAAA,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,qBACX,GAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YAEC,SAAA,EAAW,CAAA,+CAAA,EAAkD,KAAA,CAAM,KAAA,IAAS,MAAM,CAAA,CAAA;AAAA,YAGlF,8BAAC,SAAA,EAAA,EAAU,KAAA,EAAc,KAAA,EAAO,KAAA,CAAM,iBAAiB,EAAA,EAAI;AAAA,WAAA;AAAA,UAJtD,KAAA,CAAM,MAAM,KAAA,CAAM;AAAA,SAM1B,GACH,CAAA,EACF,CAAA;AAAA,4BAEC,KAAA,EAAA,EAAI,SAAA,EAAU,oBAAmB,KAAA,EAAO,EAAE,gBAAgB,UAAA,EAAW,EACpE,QAAA,kBAAA,GAAA,CAAC,QAAA,EAAA,EAAO,MAAK,QAAA,EAAS,SAAA,EAAU,qCAC7B,QAAA,EAAA,MAAA,CAAO,kBAAA,IAAsB,UAChC,CAAA,EACF,CAAA;AAAA,QAIC,MAAA,CAAO,gBAAA,oBAAoB,GAAA,CAAC,aAAA,EAAA,EAAc,MAAM,iBAAA,EAAmB,CAAA;AAAA,wBAGpE,GAAA,CAAC,oBAAA,EAAA,EAAqB,MAAA,EAAgB,QAAA,EAAU,cAAA,EAAgB;AAAA;AAAA;AAAA,GAClE;AAEJ","file":"chunk-TS3N3LGZ.mjs","sourcesContent":["/**\n * StaticForm — a complete, submittable managed form with ZERO client JavaScript.\n *\n * No `'use client'`. This renders in a Server Component, and what it emits is\n * a real `<form>`: every field, the honeypot, the signed native token, and a\n * submit button. With JavaScript disabled, off, or still downloading, the\n * browser performs an ordinary form-encoded POST to\n * `/api/public/forms/submit-native`, sonor-api runs the honeypot +\n * render-timestamp + quarantine stack, and the lead lands. 4.0.1 built that\n * endpoint; this is what finally puts it under every form by default.\n *\n * ── Why this exists ─────────────────────────────────────────────────────\n *\n * ManagedForm was a client component for historical reasons that no longer\n * hold: it used to fetch its own config (getFormConfig removed that) and it\n * could only submit via JSON (the native endpoint removed that). Nobody moved\n * the boundary afterward, so every site that rendered a form paid for the\n * whole forms runtime — validation, spotlight, celebration, momentum — as an\n * INITIAL script, on the LCP-critical path.\n *\n * Measured on upforge.io's homepage: 48 KB of form code in the initial chunk\n * set cost 6 Lighthouse points (88 -> 82, LCP 3.8s -> 4.7s). Deferring the\n * client component recovered the score but deleted the form from the HTML,\n * taking the no-JS floor and crawlable fields with it. Neither half was\n * acceptable; a server-rendered form is what makes both true at once.\n *\n * Pair it with <FormEnhancer> to upgrade this markup at idle. Alone, it is\n * still a working form — that is the point. Never make this file `'use\n * client'`, and never import a hook into it.\n */\n\nimport React from 'react'\nimport { DEFAULT_HONEYPOT_FIELD } from './contract'\nimport { FormField } from './FormField'\nimport { HoneypotField } from './HoneypotField'\nimport { nativeFormProps, NativeFallbackFields } from './native-fallback'\nimport { normalizeFormConfig } from './normalize-config'\nimport type { ManagedFormConfig } from './types'\n\nexport interface StaticFormProps {\n  /**\n   * RAW /api/public/forms/config payload from `getFormConfig`, or an\n   * already-normalized config. Normalized here through the SAME function the\n   * client fetch uses, so the shell and the enhancement cannot disagree about\n   * field order, step count, or success copy.\n   */\n  config: Record<string, unknown> | ManagedFormConfig | null | undefined\n  className?: string\n  /**\n   * Absolute URL the no-JS 303 should return to (usually the page hosting the\n   * form). Without it the API falls back to the Referer origin — right site,\n   * wrong page.\n   */\n  nativeReturnTo?: string\n}\n\n/**\n * Fields the static shell can render meaningfully. Conditional logic is a\n * runtime concern (it depends on values the visitor has not entered yet), so\n * a conditional field renders here and the enhancement takes over hiding it.\n */\nfunction visibleStaticFields(config: ManagedFormConfig) {\n  const all = config.fields || []\n  if (!config.is_multi_step) return all\n  // Multi-step is JS-only navigation and is excluded from native POST, so the\n  // shell shows step one as a preview of what the form asks for.\n  const firstStepId = config.steps?.[0]?.id\n  return all.filter((f) => !f.step_id || f.step_id === firstStepId)\n}\n\nexport function StaticForm({ config: raw, className, nativeReturnTo }: StaticFormProps) {\n  if (!raw) return null\n  const config = normalizeFormConfig(raw as any)\n  const fields = visibleStaticFields(config)\n  const honeypotFieldName = config.honeypot_field || DEFAULT_HONEYPOT_FIELD\n\n  return (\n    <form\n      // Matches FormClient's classic branch attribute-for-attribute so the\n      // enhancement swap is invisible. Change one, change the other.\n      data-sk-state=\"idle\"\n      data-sk-mount=\"shell\"\n      className={`sk-form ${className || ''}`}\n      {...nativeFormProps(config)}\n    >\n      <div className=\"sk-form__step\">\n        <div className=\"sk-form__fields\">\n          {fields.map((field) => (\n            <div\n              key={field.id || field.slug}\n              className={`sk-form__field-wrapper sk-form__field-wrapper--${field.width || 'full'}`}\n            >\n              {/* No onChange — FormField renders native uncontrolled controls. */}\n              <FormField field={field} value={field.default_value ?? ''} />\n            </div>\n          ))}\n        </div>\n      </div>\n\n      <div className=\"sk-form__actions\" style={{ justifyContent: 'flex-end' }}>\n        <button type=\"submit\" className=\"sk-form__btn sk-form__btn--submit\">\n          {config.submit_button_text || 'Submit'}\n        </button>\n      </div>\n\n      {/* Same trap the hydrated form uses; no state needed because the value\n          is read and stripped server-side. */}\n      {config.honeypot_enabled && <HoneypotField name={honeypotFieldName} />}\n\n      {/* _sk_token auth + _sk_return destination for the native POST. */}\n      <NativeFallbackFields config={config} returnTo={nativeReturnTo} />\n    </form>\n  )\n}\n"]}

package/dist/{chunk-6ABEAO2K.js → chunk-W23TMUKB.js}

@@ -1,7 +1,7 @@
 'use client';
 'use strict';
 
-var chunkRMLRZOVE_js = require('./chunk-RMLRZOVE.js');
+var chunk6AZTRTCG_js = require('./chunk-6AZTRTCG.js');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
@@ -22,7 +22,7 @@ async function fetchBookingTypes(orgSlug, apiUrl, apiKey) {
   const url = apiUrl || cfg.apiUrl;
   const key = apiKey || cfg.apiKey;
   const endpoint = key ? `${url}/sync/widget/types` : `${url}/sync/public/${orgSlug}/types`;
-  const response = await chunkRMLRZOVE_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
+  const response = await chunk6AZTRTCG_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
   if (!response.ok) {
     const msg = await response.json().catch(() => ({ message: response.statusText }));
     const detail = msg && typeof msg.message === "string" ? msg.message : response.statusText;
@@ -36,7 +36,7 @@ async function fetchBookingTypeDetails(typeSlug, orgSlug, apiUrl, apiKey) {
   const url = apiUrl || cfg.apiUrl;
   const key = apiKey || cfg.apiKey;
   const endpoint = key ? `${url}/sync/widget/types/${typeSlug}` : `${url}/sync/public/${orgSlug}/types/${typeSlug}`;
-  const response = await chunkRMLRZOVE_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
+  const response = await chunk6AZTRTCG_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
   if (!response.ok) {
     const msg = await response.json().catch(() => ({ message: response.statusText }));
     const detail = msg && typeof msg.message === "string" ? msg.message : response.statusText;
@@ -52,7 +52,7 @@ async function fetchAvailability(typeSlug, date, orgSlug, apiUrl, apiKey, timezo
   if (timezone) params.append("timezone", timezone);
   if (hostId) params.append("hostId", hostId);
   const endpoint = key ? `${url}/sync/widget/availability/${typeSlug}?${params}` : `${url}/sync/public/${orgSlug}/availability/${typeSlug}?${params}`;
-  const response = await chunkRMLRZOVE_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
+  const response = await chunk6AZTRTCG_js.sonorFetch(endpoint, { headers: buildHeaders() }, { apiKey: key, retries: 0 });
   if (!response.ok) {
     const msg = await response.json().catch(() => ({ message: response.statusText }));
     let detail = msg && typeof msg.message === "string" ? String(msg.message).trim() : (response.statusText || "").trim();
@@ -75,7 +75,7 @@ async function createSlotHold(holdData, apiUrl, apiKey) {
   const url = apiUrl || cfg.apiUrl;
   const key = apiKey || cfg.apiKey;
   const endpoint = key ? `${url}/sync/widget/hold` : `${url}/sync/public/hold`;
-  const response = await chunkRMLRZOVE_js.sonorFetch(endpoint, {
+  const response = await chunk6AZTRTCG_js.sonorFetch(endpoint, {
     method: "POST",
     headers: buildHeaders(true),
     body: JSON.stringify(holdData)
@@ -90,7 +90,7 @@ async function releaseSlotHold(holdId, apiUrl, apiKey) {
   const url = apiUrl || cfg.apiUrl;
   const key = apiKey || cfg.apiKey;
   const endpoint = key ? `${url}/sync/widget/hold/${holdId}` : `${url}/sync/public/hold/${holdId}`;
-  await chunkRMLRZOVE_js.sonorFetch(endpoint, {
+  await chunk6AZTRTCG_js.sonorFetch(endpoint, {
     method: "DELETE",
     headers: buildHeaders()
   }, { apiKey: key, retries: 0 });
@@ -100,7 +100,7 @@ async function createBooking(bookingData, apiUrl, apiKey) {
   const url = apiUrl || cfg.apiUrl;
   const key = apiKey || cfg.apiKey;
   const endpoint = key ? `${url}/sync/widget/booking` : `${url}/sync/public/booking`;
-  const response = await chunkRMLRZOVE_js.sonorFetch(endpoint, {
+  const response = await chunk6AZTRTCG_js.sonorFetch(endpoint, {
     method: "POST",
     headers: buildHeaders(true),
     body: JSON.stringify(bookingData)
@@ -1100,5 +1100,5 @@ exports.formatDate = formatDate;
 exports.formatDuration = formatDuration;
 exports.formatTime = formatTime;
 exports.releaseSlotHold = releaseSlotHold;
-//# sourceMappingURL=chunk-6ABEAO2K.js.map
-//# sourceMappingURL=chunk-6ABEAO2K.js.map
+//# sourceMappingURL=chunk-W23TMUKB.js.map
+//# sourceMappingURL=chunk-W23TMUKB.js.map