bitsnap-react 1.15.0 → 1.17.0

package/dist/chunk-VNYHJT6V.mjs

@@ -0,0 +1,2 @@
+function l(t,e){return e.toLowerCase().startsWith("en")?t.en:t.pl}function u(t,e){let n={...t};if(e!=null)for(let[c,i]of Object.entries(e))i!=null&&(n[c]=i);return n}function s(t,e,n){return u(l(t,e),n)}function p(t,e){return t[e]??e}var y={en:{cart:"Cart",emptyCart:"Your cart is empty.",total:"Total:",delivery:"+ delivery",chooseCountry:"Choose a country",nextStep:"Next step",unavailableProducts:"Not all products are available.",checkoutFailed:"Something went wrong. Please try again later.",noPaymentGateway:"This shop doesn't accept online payments yet. Try again later or contact the seller.",gatewayNotConfigured:"Payments in this shop are not set up correctly. Try again later or contact the seller.",shippingNotConfigured:"Delivery in this shop is not configured yet. Try again later or contact the seller.",mixedRecurring:"Subscriptions and one-time products cannot be paid for together. Pay for them in separate orders.",currencyUnsupported:"The shop doesn't accept payments in this currency. Contact the seller.",priceChanged:"The product price has changed. Refresh the page to see the current price.",close:"Close cart",remove:"Remove",quantity:"Quantity",increaseQuantity:"Increase quantity",decreaseQuantity:"Decrease quantity",openCart:"Open cart",cartItemsCount:"Items in cart",lowestPrice30Days:"Lowest price in the last 30 days:",noPriceHistory:"No price data for the last 30 days",redirectFailed:"Could not redirect to the payment. Please try again later.",subscriptionUnsupported:"Subscriptions cannot be added to the cart yet.",searchCountry:"Find a country",noCountriesFound:"No countries found",countryRequired:"Choose a country to continue.",paymentForCart:"Cart payment",coupon:"Coupon",extrasCalculatedNext:"Discounts, shipping and taxes are calculated at the next step",loadFailed:"Could not load your cart.",retry:"Try again",paymentMethodLegend:"How would you like to pay?",paymentMethodOnline:"Pay online",paymentMethodOnlineDescription:"Card, BLIK code or instant bank payment. You pay right away.",paymentMethodManualTransfer:"Bank transfer",paymentMethodManualBlik:"BLIK \u2013 transfer to a phone number",paymentMethodManualBoth:"Bank transfer or BLIK to a phone number",paymentMethodManualDescription:"You pay in your bank's app. We show the payment details after you place the order, and the order waits for your payment.",paymentMethodManualBlikNote:"This is not a BLIK code payment \u2013 you do not enter a 6\u2011digit code.",paymentMethodCod:"Cash on delivery",paymentMethodCodDescription:"You pay the courier in cash or by card when you receive the parcel.",paymentMethodCodUnavailable:"Cash on delivery is not available for this order. Choose another way to pay."},pl:{cart:"Koszyk",emptyCart:"Brak produkt\xF3w w koszyku.",total:"Suma:",delivery:"+ dostawa",chooseCountry:"Wybierz kraj",nextStep:"Nast\u0119pny krok",unavailableProducts:"Nie wszystkie produkty s\u0105 dost\u0119pne w magazynie.",checkoutFailed:"Co\u015B posz\u0142o nie tak. Spr\xF3buj ponownie p\xF3\u017Aniej.",noPaymentGateway:"Ten sklep nie przyjmuje jeszcze p\u0142atno\u015Bci online. Spr\xF3buj ponownie p\xF3\u017Aniej lub skontaktuj si\u0119 ze sprzedawc\u0105.",gatewayNotConfigured:"P\u0142atno\u015Bci w tym sklepie nie s\u0105 poprawnie skonfigurowane. Spr\xF3buj ponownie p\xF3\u017Aniej lub skontaktuj si\u0119 ze sprzedawc\u0105.",shippingNotConfigured:"Dostawa w tym sklepie nie jest jeszcze skonfigurowana. Spr\xF3buj ponownie p\xF3\u017Aniej lub skontaktuj si\u0119 ze sprzedawc\u0105.",mixedRecurring:"Subskrypcji i produkt\xF3w jednorazowych nie mo\u017Cna op\u0142aci\u0107 razem. Op\u0142a\u0107 je w osobnych zam\xF3wieniach.",currencyUnsupported:"Sklep nie przyjmuje p\u0142atno\u015Bci w tej walucie. Skontaktuj si\u0119 ze sprzedawc\u0105.",priceChanged:"Cena produktu si\u0119 zmieni\u0142a. Od\u015Bwie\u017C stron\u0119, aby zobaczy\u0107 aktualn\u0105 cen\u0119.",close:"Zamknij koszyk",remove:"Usu\u0144",quantity:"Ilo\u015B\u0107",increaseQuantity:"Zwi\u0119ksz ilo\u015B\u0107",decreaseQuantity:"Zmniejsz ilo\u015B\u0107",openCart:"Otw\xF3rz koszyk",cartItemsCount:"Produkt\xF3w w koszyku",lowestPrice30Days:"Najni\u017Csza cena z 30 dni:",noPriceHistory:"Brak danych o cenie z ostatnich 30 dni",redirectFailed:"Nie uda\u0142o si\u0119 przekierowa\u0107 do p\u0142atno\u015Bci. Spr\xF3buj ponownie p\xF3\u017Aniej.",subscriptionUnsupported:"Subskrypcji nie mo\u017Cna jeszcze doda\u0107 do koszyka.",searchCountry:"Znajd\u017A kraj",noCountriesFound:"Nie znaleziono kraj\xF3w",countryRequired:"Wybierz kraj, aby przej\u015B\u0107 dalej.",paymentForCart:"P\u0142atno\u015B\u0107 za koszyk",coupon:"Kupon",extrasCalculatedNext:"Rabaty, dostawa i podatki w nast\u0119pnym kroku",loadFailed:"Nie uda\u0142o si\u0119 wczyta\u0107 koszyka.",retry:"Spr\xF3buj ponownie",paymentMethodLegend:"Jak chcesz zap\u0142aci\u0107?",paymentMethodOnline:"Zap\u0142a\u0107 online",paymentMethodOnlineDescription:"Karta, kod BLIK lub szybki przelew. P\u0142acisz od razu.",paymentMethodManualTransfer:"Przelew bankowy",paymentMethodManualBlik:"BLIK \u2013 przelew na telefon",paymentMethodManualBoth:"Przelew lub BLIK na telefon",paymentMethodManualDescription:"Zap\u0142acisz w aplikacji swojego banku. Dane do p\u0142atno\u015Bci poka\u017Cemy po z\u0142o\u017Ceniu zam\xF3wienia, a zam\xF3wienie poczeka na Twoj\u0105 wp\u0142at\u0119.",paymentMethodManualBlikNote:"To nie jest p\u0142atno\u015B\u0107 kodem BLIK \u2013 nie wpisujesz 6\u2011cyfrowego kodu.",paymentMethodCod:"P\u0142atno\u015B\u0107 przy odbiorze",paymentMethodCodDescription:"Zap\u0142acisz kurierowi got\xF3wk\u0105 lub kart\u0105, gdy odbierzesz przesy\u0142k\u0119.",paymentMethodCodUnavailable:"P\u0142atno\u015B\u0107 przy odbiorze nie jest dost\u0119pna dla tego zam\xF3wienia. Wybierz inn\u0105 form\u0119 p\u0142atno\u015Bci."}};function d(t,e){return s(y,t,e)}function m(t,e,n){return p(d(e,n),t)}var o="pl-PL",r="bitsnap-locale",a;function w(t){let e=t?.trim();a=e?e.toLowerCase()==="en"?"en-US":e.toLowerCase()==="pl"?o:e:void 0,typeof localStorage<"u"&&(a==null?localStorage.removeItem(r):localStorage.setItem(r,a))}function C(){return a??(typeof localStorage<"u"?localStorage.getItem(r)??o:o)}export{l as a,s as b,m as c,o as d,w as e,C as f};
+//# sourceMappingURL=chunk-VNYHJT6V.mjs.map

package/dist/chunk-VNYHJT6V.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/texts.ts","../src/components/checkout/texts.ts","../src/components/checkout/locale.ts"],"sourcesContent":["/**\n * Shared text machinery: typed string tables per locale, the locale fallback\n * and a merge with caller overrides. Each module (checkout, later returns)\n * supplies its own key type and default tables.\n */\n\n/** Strings of one locale, keyed by text key. */\nexport type TextTable<Key extends string> = Record<Key, string>;\n\n/** Default tables for the supported locales. */\nexport type LocaleTables<Key extends string> = {\n  en: TextTable<Key>;\n  pl: TextTable<Key>;\n};\n\n/**\n * Picks the table for a locale. Any locale starting with `en` (case\n * insensitive, so `en`, `en-US`, `EN-gb`) gets English; everything else,\n * including unknown locales, gets the Polish default.\n */\nexport function pickLocaleTable<Key extends string>(\n  tables: LocaleTables<Key>,\n  locale: string,\n): TextTable<Key> {\n  return locale.toLowerCase().startsWith(\"en\") ? tables.en : tables.pl;\n}\n\n/**\n * Merges caller overrides over a table. Overrides apply regardless of the\n * locale; `undefined`/`null` entries are ignored so the default stays.\n */\nexport function mergeTexts<Key extends string>(\n  table: TextTable<Key>,\n  overrides?: Partial<TextTable<Key>>,\n): TextTable<Key> {\n  const result: Record<string, string> = { ...table };\n\n  if (overrides != null) {\n    for (const [key, value] of Object.entries<string | undefined>(overrides)) {\n      if (value != null) {\n        result[key] = value;\n      }\n    }\n  }\n\n  return result as TextTable<Key>;\n}\n\n/** Locale table merged with the caller overrides. */\nexport function resolveTexts<Key extends string>(\n  tables: LocaleTables<Key>,\n  locale: string,\n  overrides?: Partial<TextTable<Key>>,\n): TextTable<Key> {\n  return mergeTexts(pickLocaleTable(tables, locale), overrides);\n}\n\n/** Looks up a single text. Unknown keys return the key itself. */\nexport function lookupText<Key extends string>(\n  texts: TextTable<Key>,\n  key: Key,\n): string {\n  return (texts as Record<string, string | undefined>)[key] ?? key;\n}\n","import {\n  lookupText,\n  resolveTexts,\n  type LocaleTables,\n} from \"@/src/lib/texts\";\n\n/**\n * Every string the checkout renders. Pass a partial object through the\n * `texts` prop of `BitsnapCheckout` to override any of them, whatever the\n * locale.\n */\nexport type CheckoutTexts = {\n  /** Drawer title. */\n  cart: string;\n  /** Shown when the cart has no products. */\n  emptyCart: string;\n  /** Label next to the total price. */\n  total: string;\n  /** Delivery note next to the total price. */\n  delivery: string;\n  /** Country selector placeholder. */\n  chooseCountry: string;\n  /** Checkout button label. */\n  nextStep: string;\n  /** Error shown when some products are out of stock. */\n  unavailableProducts: string;\n  /** Error shown when the checkout fails and the server gave no reason. */\n  checkoutFailed: string;\n  /** Error shown when the shop has no payment gateway connected. */\n  noPaymentGateway: string;\n  /** Error shown when the payment gateway of the shop is not set up. */\n  gatewayNotConfigured: string;\n  /** Error shown when delivery of the shop is not set up. */\n  shippingNotConfigured: string;\n  /** Error shown when the cart mixes subscriptions with one-time products. */\n  mixedRecurring: string;\n  /** Error shown when the cart currency cannot be paid in. */\n  currencyUnsupported: string;\n  /** Error shown when a price changed after the product was added. */\n  priceChanged: string;\n  /** Accessible name of the close button of the drawer. */\n  close: string;\n  /** Remove button of a cart line (also read together with the product name). */\n  remove: string;\n  /** Accessible name of the quantity control and its input. */\n  quantity: string;\n  /** Accessible name of the \"+\" quantity button. */\n  increaseQuantity: string;\n  /** Accessible name of the \"-\" quantity button. */\n  decreaseQuantity: string;\n  /** Accessible name of the cart button when it only shows an icon. */\n  openCart: string;\n  /** Hidden label of the number of products badge; the number is appended after a colon. */\n  cartItemsCount: string;\n  /** Label before the lowest price of the last 30 days; the price is appended. */\n  lowestPrice30Days: string;\n  /** Shown instead of the lowest price when the price has no history. */\n  noPriceHistory: string;\n  /** Error shown when redirecting to the payment failed. */\n  redirectFailed: string;\n  /** Error shown when a subscription is added to the cart. */\n  subscriptionUnsupported: string;\n  /** Country search placeholder. */\n  searchCountry: string;\n  /** Shown when the country search has no match. */\n  noCountriesFound: string;\n  /** Hint under the checkout button when no country is chosen. */\n  countryRequired: string;\n  /** Title of the Apple Pay and Google Pay sheet total. */\n  paymentForCart: string;\n  /** Coupon label in the Google Pay sheet; the code is appended. */\n  coupon: string;\n  /** Note under the cart total. */\n  extrasCalculatedNext: string;\n  /** Error shown when the products of the cart could not be loaded. */\n  loadFailed: string;\n  /** Button that loads the cart again. */\n  retry: string;\n  /** Heading of the payment method choice (shown only when the shop offers paying by hand). */\n  paymentMethodLegend: string;\n  /** Option that pays through the shop's online gateway. */\n  paymentMethodOnline: string;\n  /** Hint under the online option. */\n  paymentMethodOnlineDescription: string;\n  /** Manual option when the seller takes bank transfers only. */\n  paymentMethodManualTransfer: string;\n  /** Manual option when the seller takes BLIK transfers to a phone number only. */\n  paymentMethodManualBlik: string;\n  /** Manual option when the seller takes both. */\n  paymentMethodManualBoth: string;\n  /** What paying by hand means: the details come after the order is placed. */\n  paymentMethodManualDescription: string;\n  /** Shown with a selected manual option that includes BLIK to a phone number. */\n  paymentMethodManualBlikNote: string;\n  /** Cash on delivery option. */\n  paymentMethodCod: string;\n  /** Hint under the cash on delivery option. */\n  paymentMethodCodDescription: string;\n  /** Error shown when the shop refused cash on delivery for the order. */\n  paymentMethodCodUnavailable: string;\n};\n\nexport type CheckoutTextKey = keyof CheckoutTexts;\n\nexport const CHECKOUT_TEXT_TABLES: LocaleTables<CheckoutTextKey> = {\n  en: {\n    cart: \"Cart\",\n    emptyCart: \"Your cart is empty.\",\n    total: \"Total:\",\n    delivery: \"+ delivery\",\n    chooseCountry: \"Choose a country\",\n    nextStep: \"Next step\",\n    unavailableProducts: \"Not all products are available.\",\n    checkoutFailed: \"Something went wrong. Please try again later.\",\n    noPaymentGateway:\n      \"This shop doesn't accept online payments yet. Try again later or contact the seller.\",\n    gatewayNotConfigured:\n      \"Payments in this shop are not set up correctly. Try again later or contact the seller.\",\n    shippingNotConfigured:\n      \"Delivery in this shop is not configured yet. Try again later or contact the seller.\",\n    mixedRecurring:\n      \"Subscriptions and one-time products cannot be paid for together. Pay for them in separate orders.\",\n    currencyUnsupported:\n      \"The shop doesn't accept payments in this currency. Contact the seller.\",\n    priceChanged: \"The product price has changed. Refresh the page to see the current price.\",\n    close: \"Close cart\",\n    remove: \"Remove\",\n    quantity: \"Quantity\",\n    increaseQuantity: \"Increase quantity\",\n    decreaseQuantity: \"Decrease quantity\",\n    openCart: \"Open cart\",\n    cartItemsCount: \"Items in cart\",\n    lowestPrice30Days: \"Lowest price in the last 30 days:\",\n    noPriceHistory: \"No price data for the last 30 days\",\n    redirectFailed: \"Could not redirect to the payment. Please try again later.\",\n    subscriptionUnsupported: \"Subscriptions cannot be added to the cart yet.\",\n    searchCountry: \"Find a country\",\n    noCountriesFound: \"No countries found\",\n    countryRequired: \"Choose a country to continue.\",\n    paymentForCart: \"Cart payment\",\n    coupon: \"Coupon\",\n    extrasCalculatedNext:\n      \"Discounts, shipping and taxes are calculated at the next step\",\n    loadFailed: \"Could not load your cart.\",\n    retry: \"Try again\",\n    paymentMethodLegend: \"How would you like to pay?\",\n    paymentMethodOnline: \"Pay online\",\n    paymentMethodOnlineDescription:\n      \"Card, BLIK code or instant bank payment. You pay right away.\",\n    paymentMethodManualTransfer: \"Bank transfer\",\n    paymentMethodManualBlik: \"BLIK – transfer to a phone number\",\n    paymentMethodManualBoth: \"Bank transfer or BLIK to a phone number\",\n    paymentMethodManualDescription:\n      \"You pay in your bank's app. We show the payment details after you place the order, and the order waits for your payment.\",\n    paymentMethodManualBlikNote:\n      \"This is not a BLIK code payment – you do not enter a 6‑digit code.\",\n    paymentMethodCod: \"Cash on delivery\",\n    paymentMethodCodDescription:\n      \"You pay the courier in cash or by card when you receive the parcel.\",\n    paymentMethodCodUnavailable:\n      \"Cash on delivery is not available for this order. Choose another way to pay.\",\n  },\n  pl: {\n    cart: \"Koszyk\",\n    emptyCart: \"Brak produktów w koszyku.\",\n    total: \"Suma:\",\n    delivery: \"+ dostawa\",\n    chooseCountry: \"Wybierz kraj\",\n    nextStep: \"Następny krok\",\n    unavailableProducts: \"Nie wszystkie produkty są dostępne w magazynie.\",\n    checkoutFailed: \"Coś poszło nie tak. Spróbuj ponownie później.\",\n    noPaymentGateway:\n      \"Ten sklep nie przyjmuje jeszcze płatności online. Spróbuj ponownie później lub skontaktuj się ze sprzedawcą.\",\n    gatewayNotConfigured:\n      \"Płatności w tym sklepie nie są poprawnie skonfigurowane. Spróbuj ponownie później lub skontaktuj się ze sprzedawcą.\",\n    shippingNotConfigured:\n      \"Dostawa w tym sklepie nie jest jeszcze skonfigurowana. Spróbuj ponownie później lub skontaktuj się ze sprzedawcą.\",\n    mixedRecurring:\n      \"Subskrypcji i produktów jednorazowych nie można opłacić razem. Opłać je w osobnych zamówieniach.\",\n    currencyUnsupported:\n      \"Sklep nie przyjmuje płatności w tej walucie. Skontaktuj się ze sprzedawcą.\",\n    priceChanged: \"Cena produktu się zmieniła. Odśwież stronę, aby zobaczyć aktualną cenę.\",\n    close: \"Zamknij koszyk\",\n    remove: \"Usuń\",\n    quantity: \"Ilość\",\n    increaseQuantity: \"Zwiększ ilość\",\n    decreaseQuantity: \"Zmniejsz ilość\",\n    openCart: \"Otwórz koszyk\",\n    cartItemsCount: \"Produktów w koszyku\",\n    lowestPrice30Days: \"Najniższa cena z 30 dni:\",\n    noPriceHistory: \"Brak danych o cenie z ostatnich 30 dni\",\n    redirectFailed:\n      \"Nie udało się przekierować do płatności. Spróbuj ponownie później.\",\n    subscriptionUnsupported: \"Subskrypcji nie można jeszcze dodać do koszyka.\",\n    searchCountry: \"Znajdź kraj\",\n    noCountriesFound: \"Nie znaleziono krajów\",\n    countryRequired: \"Wybierz kraj, aby przejść dalej.\",\n    paymentForCart: \"Płatność za koszyk\",\n    coupon: \"Kupon\",\n    extrasCalculatedNext: \"Rabaty, dostawa i podatki w następnym kroku\",\n    loadFailed: \"Nie udało się wczytać koszyka.\",\n    retry: \"Spróbuj ponownie\",\n    paymentMethodLegend: \"Jak chcesz zapłacić?\",\n    paymentMethodOnline: \"Zapłać online\",\n    paymentMethodOnlineDescription:\n      \"Karta, kod BLIK lub szybki przelew. Płacisz od razu.\",\n    paymentMethodManualTransfer: \"Przelew bankowy\",\n    paymentMethodManualBlik: \"BLIK – przelew na telefon\",\n    paymentMethodManualBoth: \"Przelew lub BLIK na telefon\",\n    paymentMethodManualDescription:\n      \"Zapłacisz w aplikacji swojego banku. Dane do płatności pokażemy po złożeniu zamówienia, a zamówienie poczeka na Twoją wpłatę.\",\n    paymentMethodManualBlikNote:\n      \"To nie jest płatność kodem BLIK – nie wpisujesz 6‑cyfrowego kodu.\",\n    paymentMethodCod: \"Płatność przy odbiorze\",\n    paymentMethodCodDescription:\n      \"Zapłacisz kurierowi gotówką lub kartą, gdy odbierzesz przesyłkę.\",\n    paymentMethodCodUnavailable:\n      \"Płatność przy odbiorze nie jest dostępna dla tego zamówienia. Wybierz inną formę płatności.\",\n  },\n};\n\n/** Default texts for a locale merged with the caller overrides. */\nexport function resolveCheckoutTexts(\n  locale: string,\n  overrides?: Partial<CheckoutTexts>,\n): CheckoutTexts {\n  return resolveTexts(CHECKOUT_TEXT_TABLES, locale, overrides);\n}\n\nexport function getCheckoutText(\n  key: CheckoutTextKey,\n  locale: string,\n  overrides?: Partial<CheckoutTexts>,\n): string {\n  return lookupText(resolveCheckoutTexts(locale, overrides), key);\n}\n","import { pickLocaleTable } from \"@/src/lib/texts\";\nimport { CHECKOUT_TEXT_TABLES } from \"./texts\";\n\nexport const DEFAULT_LOCALE = \"pl-PL\" as const;\nconst localeStorageKey = \"bitsnap-locale\";\n\nlet activeLocale: string | undefined;\n\nexport function setLocale(locale?: string): void {\n  const value = locale?.trim();\n  activeLocale = value\n    ? value.toLowerCase() === \"en\"\n      ? \"en-US\"\n      : value.toLowerCase() === \"pl\"\n        ? DEFAULT_LOCALE\n        : value\n    : undefined;\n  if (typeof localStorage !== \"undefined\") {\n    if (activeLocale == null) {\n      localStorage.removeItem(localeStorageKey);\n    } else {\n      localStorage.setItem(localeStorageKey, activeLocale);\n    }\n  }\n}\n\nexport function getLocale(): string {\n  if (activeLocale != null) {\n    return activeLocale;\n  }\n  if (typeof localStorage !== \"undefined\") {\n    return localStorage.getItem(localeStorageKey) ?? DEFAULT_LOCALE;\n  }\n  return DEFAULT_LOCALE;\n}\n\nexport function translate(key: string, locale: string = getLocale()): string {\n  return (\n    (pickLocaleTable(CHECKOUT_TEXT_TABLES, locale) as Record<string, string>)[\n      key\n    ] ?? key\n  );\n}\n"],"mappings":"AAoBO,SAASA,EACdC,EACAC,EACgB,CAChB,OAAOA,EAAO,YAAY,EAAE,WAAW,IAAI,EAAID,EAAO,GAAKA,EAAO,EACpE,CAMO,SAASE,EACdC,EACAC,EACgB,CAChB,IAAMC,EAAiC,CAAE,GAAGF,CAAM,EAElD,GAAIC,GAAa,KACf,OAAW,CAACE,EAAKC,CAAK,IAAK,OAAO,QAA4BH,CAAS,EACjEG,GAAS,OACXF,EAAOC,CAAG,EAAIC,GAKpB,OAAOF,CACT,CAGO,SAASG,EACdR,EACAC,EACAG,EACgB,CAChB,OAAOF,EAAWH,EAAgBC,EAAQC,CAAM,EAAGG,CAAS,CAC9D,CAGO,SAASK,EACdC,EACAJ,EACQ,CACR,OAAQI,EAA6CJ,CAAG,GAAKA,CAC/D,CCyCO,IAAMK,EAAsD,CACjE,GAAI,CACF,KAAM,OACN,UAAW,sBACX,MAAO,SACP,SAAU,aACV,cAAe,mBACf,SAAU,YACV,oBAAqB,kCACrB,eAAgB,gDAChB,iBACE,uFACF,qBACE,yFACF,sBACE,sFACF,eACE,oGACF,oBACE,yEACF,aAAc,4EACd,MAAO,aACP,OAAQ,SACR,SAAU,WACV,iBAAkB,oBAClB,iBAAkB,oBAClB,SAAU,YACV,eAAgB,gBAChB,kBAAmB,oCACnB,eAAgB,qCAChB,eAAgB,6DAChB,wBAAyB,iDACzB,cAAe,iBACf,iBAAkB,qBAClB,gBAAiB,gCACjB,eAAgB,eAChB,OAAQ,SACR,qBACE,gEACF,WAAY,4BACZ,MAAO,YACP,oBAAqB,6BACrB,oBAAqB,aACrB,+BACE,+DACF,4BAA6B,gBAC7B,wBAAyB,yCACzB,wBAAyB,0CACzB,+BACE,2HACF,4BACE,+EACF,iBAAkB,mBAClB,4BACE,sEACF,4BACE,8EACJ,EACA,GAAI,CACF,KAAM,SACN,UAAW,+BACX,MAAO,QACP,SAAU,YACV,cAAe,eACf,SAAU,qBACV,oBAAqB,4DACrB,eAAgB,qEAChB,iBACE,8IACF,qBACE,0JACF,sBACE,yIACF,eACE,kIACF,oBACE,iGACF,aAAc,kHACd,MAAO,iBACP,OAAQ,YACR,SAAU,kBACV,iBAAkB,+BAClB,iBAAkB,2BAClB,SAAU,mBACV,eAAgB,yBAChB,kBAAmB,gCACnB,eAAgB,yCAChB,eACE,yGACF,wBAAyB,4DACzB,cAAe,mBACf,iBAAkB,2BAClB,gBAAiB,6CACjB,eAAgB,oCAChB,OAAQ,QACR,qBAAsB,mDACtB,WAAY,gDACZ,MAAO,sBACP,oBAAqB,iCACrB,oBAAqB,0BACrB,+BACE,4DACF,4BAA6B,kBAC7B,wBAAyB,iCACzB,wBAAyB,8BACzB,+BACE,mLACF,4BACE,6FACF,iBAAkB,wCAClB,4BACE,+FACF,4BACE,wIACJ,CACF,EAGO,SAASC,EACdC,EACAC,EACe,CACf,OAAOC,EAAaJ,EAAsBE,EAAQC,CAAS,CAC7D,CAEO,SAASE,EACdC,EACAJ,EACAC,EACQ,CACR,OAAOI,EAAWN,EAAqBC,EAAQC,CAAS,EAAGG,CAAG,CAChE,CCxOO,IAAME,EAAiB,QACxBC,EAAmB,iBAErBC,EAEG,SAASC,EAAUC,EAAuB,CAC/C,IAAMC,EAAQD,GAAQ,KAAK,EAC3BF,EAAeG,EACXA,EAAM,YAAY,IAAM,KACtB,QACAA,EAAM,YAAY,IAAM,KACtBL,EACAK,EACJ,OACA,OAAO,aAAiB,MACtBH,GAAgB,KAClB,aAAa,WAAWD,CAAgB,EAExC,aAAa,QAAQA,EAAkBC,CAAY,EAGzD,CAEO,SAASI,GAAoB,CAClC,OAAIJ,IAGA,OAAO,aAAiB,IACnB,aAAa,QAAQD,CAAgB,GAAKD,EAE5CA,EACT","names":["pickLocaleTable","tables","locale","mergeTexts","table","overrides","result","key","value","resolveTexts","lookupText","texts","CHECKOUT_TEXT_TABLES","resolveCheckoutTexts","locale","overrides","resolveTexts","getCheckoutText","key","lookupText","DEFAULT_LOCALE","localeStorageKey","activeLocale","setLocale","locale","value","getLocale"]}

package/dist/chunk-W3RGQYPD.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/analytics/contract.ts"],"names":["LIMITS","STREAMS","ENVS","SOURCES","CHANNELS","PAGE_TYPES","SOURCES_FOR_STREAM","MONEY","STOREFRONT_EVENT_SPEC","APP_EVENT_SPEC","TX","SUB","BUSINESS_EVENT_SPEC","EVENT_SPEC","EVENT_NAMES","STREAM_FOR_EVENT","stream","name","isEventName","CONSENT_COOKIE_MAX_AGE_SECONDS","CONSENT_SHOWN_ACTION","normalizeProjectKey","key","bare","CLIENT_RE","parseClientHeader","value","m","MAX_QUERY_VALUE","cleanValue","v","max","t","sanitizePath","pathname","joined","seg"],"mappings":"AAiBO,qrBAAMA,CAAAA,CAAS,CAEpB,cAAA,CAAgB,EAAA,CAEhB,YAAA,CAAc,KAAA,CAEd,aAAA,CAAe,IAAA,CACf,aAAA,CAAe,GAAA,CACf,YAAA,CAAc,EAAA,CACd,IAAA,CAAM,GAAA,CACN,IAAA,CAAM,GAAA,CACN,YAAA,CAAc,GAAA,CACd,GAAA,CAAK,GAAA,CACL,OAAA,CAAS,EAAA,CACT,EAAA,CAAI,EAAA,CACJ,GAAA,CAAK,EAAA,CACL,MAAA,CAAQ,EAAA,CACR,MAAA,CAAQ,EAAA,CACR,SAAA,CAAW,EAAA,CAEX,QAAA,CAAU,KACZ,CAAA,CAMaC,CAAAA,CAAU,CACrB,mBAAA,CACA,YAAA,CACA,iBACF,CAAA,CAGaC,CAAAA,CAAO,CAAC,MAAA,CAAQ,MAAM,CAAA,CAGtBC,CAAAA,CAAU,CACrB,YAAA,CACA,WAAA,CACA,QAAA,CACA,QAAA,CACA,WACF,CAAA,CAGaC,CAAAA,CAAW,CACtB,QAAA,CACA,eAAA,CACA,OAAA,CACA,KAAA,CACA,OACF,CAAA,CAGaC,CAAAA,CAAa,CACxB,MAAA,CACA,SAAA,CACA,SAAA,CACA,MAAA,CACA,UAAA,CACA,SAAA,CACA,OAAA,CACA,QAAA,CACA,aAAA,CACA,OAAA,CACA,SAAA,CACA,KAAA,CACA,OACF,CAAA,CAOO,IAAMC,CAAAA,CAAwD,CACnE,iBAAA,CAAmB,CAAC,YAAA,CAAc,WAAA,CAAa,QAAQ,CAAA,CACvD,UAAA,CAAY,CAAC,WAAW,CAAA,CACxB,eAAA,CAAiB,CAAC,QAAQ,CAC5B,CAAA,CAYMC,CAAAA,CAAQ,CAAE,WAAA,CAAa,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAG7CC,CAAAA,CAAwB,CACnC,SAAA,CAAW,CAAE,OAAA,CAAS,SAAU,CAAA,CAChC,mBAAA,CAAqB,CAAE,OAAA,CAAS,SAAA,CAAW,UAAA,CAAY,QAAS,CAAA,CAChE,kBAAA,CAAoB,CAClB,OAAA,CAAS,SAAA,CACT,WAAA,CAAa,UAAA,CACb,SAAA,CAAW,UACb,CAAA,CACA,eAAA,CAAiB,CAAE,OAAA,CAAS,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC3D,YAAA,CAAc,CACZ,WAAA,CAAa,QAAA,CACb,QAAA,CAAU,QAAA,CACV,YAAA,CAAc,qCAChB,CAAA,CACA,gBAAA,CAAkB,CAAC,CAAA,CACnB,WAAA,CAAa,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGD,CAAM,CAAA,CACvC,gBAAA,CAAkB,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC5C,WAAA,CAAa,CAAE,UAAA,CAAY,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC9C,gBAAA,CAAkB,CAChB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,GAAGA,CACL,CAAA,CACA,uBAAA,CAAyB,CACvB,IAAA,CAAM,wCACR,CAAA,CACA,yBAAA,CAA2B,CAAE,KAAA,CAAO,QAAA,CAAU,IAAA,CAAM,QAAS,CAAA,CAC7D,cAAA,CAAgB,CAAE,SAAA,CAAW,QAAS,CAAA,CACtC,eAAA,CAAiB,CAAE,SAAA,CAAW,SAAA,CAAW,MAAA,CAAQ,QAAS,CAAA,CAC1D,wBAAA,CAA0B,CAAE,MAAA,CAAQ,QAAS,CAAA,CAC7C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CAC/D,iBAAA,CAAmB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACzD,iBAAA,CAAmB,CAAC,CAAA,CACpB,gBAAA,CAAkB,CAAE,OAAA,CAAS,0BAA2B,CAAA,CACxD,gBAAA,CAAkB,CAChB,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,OAAA,CAAS,kCAAA,CACT,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAC,CAAA,CACtB,WAAA,CAAa,CAAC,CAAA,CACd,kBAAA,CAAoB,CAAC,CAAA,CACrB,cAAA,CAAgB,CAAC,CAAA,CACjB,cAAA,CAAgB,CAAC,CAAA,CACjB,gBAAA,CAAkB,CAAE,WAAA,CAAa,QAAA,CAAU,UAAA,CAAY,QAAS,CAAA,CAChE,aAAA,CAAe,CAAE,SAAA,CAAW,QAAS,CAAA,CACrC,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,gBAAA,CAAkB,CAChB,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,SAAA,CAAW,QACb,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,YAAA,CAAc,iCAChB,CAAA,CACA,YAAA,CAAc,CACZ,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,MAAA,CAAQ,QACV,CAAA,CAEA,eAAA,CAAiB,CACf,UAAA,CAAY,QAAA,CACZ,MAAA,CAAQ,4CAAA,CACR,SAAA,CAAW,SAAA,CACX,SAAA,CAAW,SAAA,CACX,WAAA,CAAa,SAAA,CACb,cAAA,CAAgB,QAClB,CAAA,CAKA,aAAA,CAAe,CACb,cAAA,CAAgB,QAClB,CACF,CAAA,CAGaE,CAAAA,CAAiB,CAC5B,aAAA,CAAe,CAAE,KAAA,CAAO,QAAA,CAAU,cAAA,CAAgB,SAAU,CAAA,CAC5D,aAAA,CAAe,CAAE,YAAA,CAAc,QAAA,CAAU,IAAA,CAAM,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAC5E,eAAA,CAAiB,CACf,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,iBAAA,CAAmB,CACjB,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,qBAAA,CAAuB,CAAE,IAAA,CAAM,QAAS,CAAA,CACxC,wBAAA,CAA0B,CAAE,IAAA,CAAM,QAAS,CAAA,CAC3C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAC9D,yBAAA,CAA2B,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAChE,sBAAA,CAAwB,CACtB,OAAA,CAAS,QAAA,CACT,IAAA,CAAM,SAAA,CACN,UAAA,CAAY,SACd,CAAA,CACA,sBAAA,CAAwB,CAAC,CAAA,CACzB,uBAAA,CAAyB,CAAC,CAAA,CAC1B,qBAAA,CAAuB,CAAE,UAAA,CAAY,SAAU,CAAA,CAC/C,eAAA,CAAiB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC3C,iBAAA,CAAmB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC7C,6BAAA,CAA+B,CAAE,OAAA,CAAS,QAAS,CAAA,CACnD,eAAA,CAAiB,CAAE,OAAA,CAAS,QAAS,CAAA,CACrC,YAAA,CAAc,CAAE,GAAA,CAAK,QAAS,CAAA,CAC9B,oBAAA,CAAsB,CAAE,GAAA,CAAK,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACxD,eAAA,CAAiB,CAAE,MAAA,CAAQ,QAAA,CAAU,MAAA,CAAQ,SAAU,CAAA,CACvD,gBAAA,CAAkB,CAAE,YAAA,CAAc,QAAS,CAAA,CAC3C,WAAA,CAAa,CAAE,IAAA,CAAM,QAAA,CAAU,KAAA,CAAO,QAAS,CAAA,CAC/C,WAAA,CAAa,CAAE,KAAA,CAAO,SAAU,CAAA,CAChC,iBAAA,CAAmB,CAAE,KAAA,CAAO,SAAU,CAAA,CACtC,cAAA,CAAgB,CAAE,IAAA,CAAM,QAAS,CACnC,CAAA,CAEMC,CAAAA,CAAK,CACT,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CACMC,CAAAA,CAAM,CACV,eAAA,CAAiB,SAAA,CACjB,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CAMaC,CAAAA,CAAsB,CAEjC,mBAAA,CAAqBF,CAAAA,CACrB,mBAAA,CAAqBA,CAAAA,CACrB,mBAAA,CAAqB,CAAE,GAAGA,CAAAA,CAAI,UAAA,CAAY,SAAU,CAAA,CACpD,mBAAA,CAAqBA,CAAAA,CACrB,kBAAA,CAAoBA,CAAAA,CACpB,oBAAA,CAAsBC,CAAAA,CACtB,mBAAA,CAAqBA,CAAAA,CACrB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,wBAAA,CAA0BA,CAAAA,CAC1B,0BAAA,CAA4B,CAAE,GAAGA,CAAAA,CAAK,UAAA,CAAY,SAAU,CAAA,CAC5D,qBAAA,CAAuBA,CAAAA,CACvB,qBAAA,CAAuBA,CAAAA,CACvB,wBAAA,CAA0B,CAAC,CAAA,CAC3B,cAAA,CAAgB,CAAC,CAAA,CACjB,aAAA,CAAe,CAAE,WAAA,CAAa,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC7D,sBAAA,CAAwB,CAAC,CAAA,CACzB,qBAAA,CAAuB,CAAC,CAAA,CACxB,yBAAA,CAA2B,CACzB,UAAA,CAAY,QAAA,CACZ,gBAAA,CAAkB,QAAA,CAClB,QAAA,CAAU,QACZ,CAAA,CAEA,wBAAA,CAA0B,CACxB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,OAAA,CAAS,SAAA,CACT,GAAGJ,CACL,CAAA,CACA,UAAA,CAAY,CACV,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,UAAA,CAAY,SAAA,CAEZ,WAAA,CAAa,SAAA,CAEb,KAAA,CAAO,aAAA,CACP,GAAGA,CACL,CAAA,CACA,aAAA,CAAe,CACb,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,GAAGA,CACL,CAAA,CACA,gBAAA,CAAkB,CAAE,UAAA,CAAY,QAAA,CAAU,WAAA,CAAa,SAAU,CAAA,CACjE,wBAAA,CAA0B,CACxB,aAAA,CAAe,QAAA,CACf,MAAA,CAAQ,QAAA,CACR,OAAA,CAAS,SACX,CAAA,CACA,iBAAA,CAAmB,CAAE,MAAA,CAAQ,QAAA,CAAU,QAAA,CAAU,SAAU,CAAA,CAC3D,mBAAA,CAAqB,CACnB,MAAA,CAAQ,QAAA,CACR,QAAA,CAAU,SAAA,CACV,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAE,IAAA,CAAM,SAAU,CAAA,CACvC,qBAAA,CAAuB,CAAC,CAAA,CACxB,WAAA,CAAa,CAEX,QAAA,CAAU,QAAA,CAEV,MAAA,CAAQ,SAAA,CACR,MAAA,CAAQ,QAAA,CACR,cAAA,CAAgB,oCAAA,CAEhB,WAAA,CAAa,QACf,CACF,CAAA,CAQO,IAAMM,CAAAA,CAAa,CACxB,GAAGL,CAAAA,CACH,GAAGC,CAAAA,CACH,GAAGG,CACL,CAAA,CAOaE,CAAAA,CAAc,CACzB,iBAAA,CAAmB,MAAA,CAAO,IAAA,CAAKN,CAAqB,CAAA,CACpD,UAAA,CAAY,MAAA,CAAO,IAAA,CAAKC,CAAc,CAAA,CACtC,eAAA,CAAiB,MAAA,CAAO,IAAA,CAAKG,CAAmB,CAClD,CAAA,CAEaG,CAAAA,CAA8C,MAAA,CAAO,WAAA,CAChEd,CAAAA,CAAQ,OAAA,CAASe,CAAAA,EACdF,CAAAA,CAAYE,CAAM,CAAA,CAAe,GAAA,CAAKC,CAAAA,EAAS,CAACA,CAAAA,CAAMD,CAAM,CAAU,CACzE,CACF,CAAA,CAGO,SAASE,CAAAA,CAAYD,CAAAA,CAAkC,CAC5D,OAAO,OAAOA,CAAAA,EAAS,QAAA,EAAY,MAAA,CAAO,MAAA,CAAOF,CAAAA,CAAkBE,CAAI,CACzE,CAwLO,IAAME,EAAAA,CAAiC,GAAA,CAAM,EAAA,CAAK,EAAA,CAAK,EAAA,CASvD,IAAMC,EAAAA,CAAuB,OAAA,CAoF7B,SAASC,EAAAA,CAAoBC,CAAAA,CAA4B,CAC9D,IAAMC,CAAAA,CAAOD,CAAAA,CAAI,UAAA,CAAW,KAAK,CAAA,CAAIA,CAAAA,CAAI,KAAA,CAAM,CAAC,CAAA,CAAIA,CAAAA,CACpD,MAAO,qBAAA,CAAsB,IAAA,CAAKC,CAAI,CAAA,CAAIA,CAAAA,CAAO,IACnD,CAMA,IAAMC,CAAAA,CAAY,uEAAA,CAGX,SAASC,CAAAA,CACdC,CAAAA,CAC6C,CAC7C,EAAA,CAAI,CAACA,CAAAA,EAASA,CAAAA,CAAM,MAAA,CAAS1B,CAAAA,CAAO,GAAA,CAAK,OAAO,IAAA,CAChD,IAAM2B,CAAAA,CAAIH,CAAAA,CAAU,IAAA,CAAKE,CAAK,CAAA,CAC9B,OAAOC,CAAAA,CAAI,CAAE,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAA,CAAG,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAE,CAAA,CAAI,IAChD,CAMA,IAAMC,CAAAA,CAAkB5B,CAAAA,CAAO,GAAA,CAOxB,SAAS6B,CAAAA,CAAWC,CAAAA,CAA8BC,CAAAA,CAA4B,CACnF,EAAA,CAAID,CAAAA,EAAK,IAAA,CAAM,OAAO,IAAA,CACtB,IAAME,CAAAA,CAAIF,CAAAA,CAAE,IAAA,CAAK,CAAA,CAEjB,OAAIE,CAAAA,CAAE,MAAA,GAAW,CAAA,EAAKA,CAAAA,CAAE,QAAA,CAAS,GAAG,CAAA,CAAU,IAAA,CACvCA,CAAAA,CAAE,KAAA,CAAM,CAAA,CAAGD,CAAG,CACvB,CAOO,SAASE,CAAAA,CAAaC,CAAAA,CAA0B,CAMrD,IAAMC,CAAAA,CALWD,CAAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAKE,CAAAA,EACpCA,CAAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAKA,CAAAA,CAAI,QAAA,CAAS,KAAK,CAAA,CAAU,QAAA,CACjD,sBAAA,CAAuB,IAAA,CAAKA,CAAG,CAAA,CAAU,QAAA,CACtCA,CACR,CAAA,CACuB,IAAA,CAAK,GAAG,CAAA,EAAK,GAAA,CACrC,MAAA,CAAQD,CAAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAIA,CAAAA,CAAS,CAAA,CAAA,EAAIA,CAAM,CAAA,CAAA","file":"/private/tmp/bsr-src/dist/chunk-W3RGQYPD.js","sourcesContent":["/**\n * Bitsnap merchant analytics: the wire contract.\n *\n * SOURCE OF TRUTH: instapay `apps/collector/src/contract.ts` (prose version:\n * `docs/merchant-analytics-contract.md`). This file is a verbatim copy of it\n * (everything below the next comment block). Do not edit it here: change\n * instapay's file and copy it over. `computeVisitorId` and\n * `computeConsentedVisitorId` are pure but need the server secret; they are\n * server-only: the browser never calls them, so bundlers drop them.\n */\n\nexport const SCHEMA_VERSION = 1;\n\n// ---------------------------------------------------------------------------\n// Limits\n// ---------------------------------------------------------------------------\n\nexport const LIMITS = {\n  /** Events in one POST /e. */\n  maxBatchEvents: 50,\n  /** Body of one POST /e or /consent, in bytes. */\n  maxBodyBytes: 64 * 1024,\n  /** `JSON.stringify(props)` of one event, in UTF-16 code units. */\n  maxPropsChars: 4096,\n  maxPropString: 200,\n  maxPropArray: 50,\n  host: 253,\n  path: 512,\n  referrerHost: 253,\n  utm: 100,\n  refCode: 64,\n  id: 64,\n  sdk: 64,\n  pageId: 32,\n  region: 64,\n  osBrowser: 32,\n  /** Collector replaces a client `ts` farther than this from `received_at`. */\n  tsSkewMs: 24 * 60 * 60 * 1000,\n} as const;\n\n// ---------------------------------------------------------------------------\n// Enumerations\n// ---------------------------------------------------------------------------\n\nexport const STREAMS = [\n  \"storefront_events\",\n  \"app_events\",\n  \"business_events\",\n] as const;\nexport type Stream = (typeof STREAMS)[number];\n\nexport const ENVS = [\"live\", \"test\"] as const;\nexport type Env = (typeof ENVS)[number];\n\nexport const SOURCES = [\n  \"storefront\",\n  \"sdk_react\",\n  \"script\",\n  \"server\",\n  \"dashboard\",\n] as const;\nexport type Source = (typeof SOURCES)[number];\n\nexport const CHANNELS = [\n  \"hosted\",\n  \"custom_domain\",\n  \"embed\",\n  \"api\",\n  \"panel\",\n] as const;\nexport type Channel = (typeof CHANNELS)[number];\n\nexport const PAGE_TYPES = [\n  \"shop\",\n  \"catalog\",\n  \"product\",\n  \"cart\",\n  \"checkout\",\n  \"payment\",\n  \"panel\",\n  \"course\",\n  \"custom_page\",\n  \"order\",\n  \"returns\",\n  \"app\",\n  \"other\",\n] as const;\nexport type PageType = (typeof PAGE_TYPES)[number];\n\nexport const DEVICE_TYPES = [\"desktop\", \"mobile\", \"tablet\", \"other\"] as const;\nexport type DeviceType = (typeof DEVICE_TYPES)[number];\n\n/** Sources a browser may claim, per stream. `business_events` is server-only. */\nexport const SOURCES_FOR_STREAM: Record<Stream, readonly Source[]> = {\n  storefront_events: [\"storefront\", \"sdk_react\", \"script\"],\n  app_events: [\"dashboard\"],\n  business_events: [\"server\"],\n};\n\n// ---------------------------------------------------------------------------\n// Event catalogue\n//\n// Each prop is `<type>[?]`: type is `string`, `number`, `boolean`, `string[]`,\n// `number[]` or `enum:a|b|c`; a trailing `?` makes the prop optional.\n// Money is always integer minor units (`*_minor`, grosze/cents) + `currency`\n// (ISO 4217, upper case). `product_id`, `variant_id` and `order_ref` live in\n// the envelope, never in props. Strings never hold PII (see the prose doc).\n// ---------------------------------------------------------------------------\n\nconst MONEY = { value_minor: \"number\", currency: \"string\" } as const;\n\n/** Browser events from hosted pages (H), bitsnap-react (R) and the script (S). */\nexport const STOREFRONT_EVENT_SPEC = {\n  page_view: { landing: \"boolean\" },\n  product_list_viewed: { list_id: \"string?\", item_count: \"number\" },\n  product_impression: {\n    list_id: \"string?\",\n    product_ids: \"string[]\",\n    positions: \"number[]\",\n  },\n  product_clicked: { list_id: \"string?\", position: \"number?\" },\n  product_view: {\n    price_minor: \"number\",\n    currency: \"string\",\n    availability: \"enum:in_stock|out_of_stock|preorder\",\n  },\n  variant_selected: {},\n  add_to_cart: { qty: \"number\", ...MONEY },\n  remove_from_cart: { qty: \"number\", ...MONEY },\n  cart_opened: { item_count: \"number\", ...MONEY },\n  checkout_started: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    ...MONEY,\n  },\n  checkout_step_completed: {\n    step: \"enum:contact|delivery|invoice|consents\",\n  },\n  checkout_validation_error: { field: \"string\", rule: \"string\" },\n  coupon_applied: { coupon_id: \"string\" },\n  coupon_rejected: { coupon_id: \"string?\", reason: \"string\" },\n  delivery_method_selected: { method: \"string\" },\n  payment_method_selected: { gateway: \"string\", method: \"string\" },\n  payment_submitted: { gateway: \"string\", method: \"string\" },\n  apple_pay_clicked: {},\n  apple_pay_result: { outcome: \"enum:success|fail|cancel\" },\n  payment_returned: {\n    gateway: \"string\",\n    method: \"string?\",\n    outcome: \"enum:success|fail|cancel|pending\",\n    error_code: \"string?\",\n  },\n  availability_signup: {},\n  panel_login: {},\n  panel_order_viewed: {},\n  panel_download: {},\n  return_started: {},\n  return_submitted: { reason_code: \"string\", item_count: \"number\" },\n  course_opened: { course_id: \"string\" },\n  lesson_started: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  lesson_completed: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  video_progress: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 25, 50, 75 or 100. */\n    milestone: \"number\",\n  },\n  test_submitted: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    score_bucket: \"enum:0-24|25-49|50-74|75-99|100\",\n  },\n  lesson_rated: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 1..5. */\n    rating: \"number\",\n  },\n  /** Written by the collector's POST /consent, never sent to POST /e. */\n  consent_updated: {\n    consent_id: \"string\",\n    action: \"enum:accept_all|reject_all|custom|withdraw\",\n    analytics: \"boolean\",\n    marketing: \"boolean\",\n    preferences: \"boolean\",\n    banner_version: \"number\",\n  },\n  /**\n   * Written by the collector's POST /consent (action `shown`), never sent to\n   * POST /e. A banner impression: no consent id, no choice, no visitor.\n   */\n  consent_shown: {\n    banner_version: \"number\",\n  },\n} as const;\n\n/** Merchant behaviour in /app, sent through the same tracker core. */\nexport const APP_EVENT_SPEC = {\n  app_page_view: { route: \"string\", previous_route: \"string?\" },\n  insight_shown: { insight_type: \"string\", rank: \"number\", category: \"string\" },\n  insight_clicked: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  insight_dismissed: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  checklist_step_viewed: { step: \"string\" },\n  checklist_step_completed: { step: \"string\" },\n  gateway_connect_started: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_completed: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_failed: {\n    gateway: \"string\",\n    step: \"string?\",\n    error_code: \"string?\",\n  },\n  domain_connect_started: {},\n  domain_connect_verified: {},\n  domain_connect_failed: { error_code: \"string?\" },\n  product_created: { product_type: \"string?\" },\n  product_published: { product_type: \"string?\" },\n  product_editor_section_opened: { section: \"string\" },\n  feature_enabled: { feature: \"string\" },\n  stats_viewed: { tab: \"string\" },\n  stats_filter_changed: { tab: \"string\", filter: \"string\" },\n  report_exported: { report: \"string\", format: \"string?\" },\n  search_performed: { result_count: \"number\" },\n  error_shown: { code: \"string\", route: \"string\" },\n  help_opened: { topic: \"string?\" },\n  ai_assistant_used: { topic: \"string?\" },\n  member_invited: { role: \"string\" },\n} as const;\n\nconst TX = {\n  gateway: \"string?\",\n  method: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\nconst SUB = {\n  subscription_id: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\n\n/**\n * Emitted by instapay only. The lower-cased `EventType` of\n * server/event-system/event.list.ts maps 1:1 to the first group.\n */\nexport const BUSINESS_EVENT_SPEC = {\n  // Mirror of the event bus (EventType.X -> x.toLowerCase()).\n  transaction_created: TX,\n  transaction_success: TX,\n  transaction_failure: { ...TX, error_code: \"string?\" },\n  transaction_expired: TX,\n  transaction_charge: TX,\n  subscription_created: SUB,\n  subscription_paused: SUB,\n  subscription_resumed: SUB,\n  subscription_updated: SUB,\n  subscription_deleted: SUB,\n  subscription_charge_paid: SUB,\n  subscription_charge_failed: { ...SUB, error_code: \"string?\" },\n  subscription_past_due: SUB,\n  subscription_canceled: SUB,\n  access_expires_in_3_days: {},\n  access_expired: {},\n  cart_recovery: { value_minor: \"number?\", currency: \"string?\" },\n  testimonial_email_send: {},\n  testimonial_fulfilled: {},\n  partner_commission_earned: {\n    partner_id: \"string\",\n    commission_minor: \"number\",\n    currency: \"string\",\n  },\n  // Added by the analytics work.\n  checkout_session_created: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    gateway: \"string?\",\n    ...MONEY,\n  },\n  order_paid: {\n    gateway: \"string\",\n    method: \"string?\",\n    item_count: \"number?\",\n    /** UTC date (`YYYY-MM-DD`) the envelope `visitor_id` was computed for. */\n    visitor_day: \"string?\",\n    /** Every line of the order (public hashed product ids), at most 50. */\n    items: \"line_items?\",\n    ...MONEY,\n  },\n  refund_issued: {\n    gateway: \"string?\",\n    reason: \"string?\",\n    ...MONEY,\n  },\n  return_requested: { item_count: \"number\", reason_code: \"string?\" },\n  automation_run_completed: {\n    automation_id: \"string\",\n    status: \"string\",\n    trigger: \"string?\",\n  },\n  notification_sent: { medium: \"string\", template: \"string?\" },\n  notification_failed: {\n    medium: \"string\",\n    template: \"string?\",\n    error_code: \"string?\",\n  },\n  recovery_email_sent: { step: \"number?\" },\n  recovery_link_clicked: {},\n  api_request: {\n    /** Route template without ids or query, e.g. `/api/rpc/public.v1.PublicApiService/ListProducts`. */\n    endpoint: \"string\",\n    /** `X-Bitsnap-Client` value, absent when the caller sent none. */\n    client: \"string?\",\n    status: \"number\",\n    latency_bucket: \"enum:lt_50|lt_200|lt_1000|gte_1000\",\n    /** 1 for errors, <1 for sampled successes; rollups divide counts by it. */\n    sample_rate: \"number\",\n  },\n} as const;\n\nexport const EVENT_SPEC_BY_STREAM = {\n  storefront_events: STOREFRONT_EVENT_SPEC,\n  app_events: APP_EVENT_SPEC,\n  business_events: BUSINESS_EVENT_SPEC,\n} as const;\n\nexport const EVENT_SPEC = {\n  ...STOREFRONT_EVENT_SPEC,\n  ...APP_EVENT_SPEC,\n  ...BUSINESS_EVENT_SPEC,\n} as const;\n\nexport type StorefrontEventName = keyof typeof STOREFRONT_EVENT_SPEC;\nexport type AppEventName = keyof typeof APP_EVENT_SPEC;\nexport type BusinessEventName = keyof typeof BUSINESS_EVENT_SPEC;\nexport type EventName = StorefrontEventName | AppEventName | BusinessEventName;\n\nexport const EVENT_NAMES = {\n  storefront_events: Object.keys(STOREFRONT_EVENT_SPEC) as StorefrontEventName[],\n  app_events: Object.keys(APP_EVENT_SPEC) as AppEventName[],\n  business_events: Object.keys(BUSINESS_EVENT_SPEC) as BusinessEventName[],\n} as const;\n\nexport const STREAM_FOR_EVENT: Record<EventName, Stream> = Object.fromEntries(\n  STREAMS.flatMap((stream) =>\n    (EVENT_NAMES[stream] as string[]).map((name) => [name, stream] as const),\n  ),\n) as Record<EventName, Stream>;\n\n/** True for a catalogue event name; own keys only (`constructor`, `toString` are not events). */\nexport function isEventName(name: unknown): name is EventName {\n  return typeof name === \"string\" && Object.hasOwn(STREAM_FOR_EVENT, name);\n}\n\n// -- props types, derived from the spec ------------------------------------\n\ntype PropPrimitives = {\n  string: string;\n  number: number;\n  boolean: boolean;\n  \"string[]\": string[];\n  \"number[]\": number[];\n  line_items: Array<{ product_id: string; qty: number; value_minor: number }>;\n};\ntype SplitEnum<S extends string> = S extends `${infer H}|${infer R}`\n  ? H | SplitEnum<R>\n  : S;\ntype StripOpt<S extends string> = S extends `${infer B}?` ? B : S;\ntype ResolveProp<S extends string> =\n  StripOpt<S> extends `enum:${infer E}`\n    ? SplitEnum<E>\n    : StripOpt<S> extends keyof PropPrimitives\n      ? PropPrimitives[StripOpt<S>]\n      : never;\ntype PropsFromSpec<S extends Record<string, string>> = {\n  [K in keyof S as S[K] extends `${string}?` ? never : K]: ResolveProp<S[K]>;\n} & {\n  [K in keyof S as S[K] extends `${string}?` ? K : never]?: ResolveProp<S[K]>;\n};\n\nexport type EventProps<E extends EventName> = PropsFromSpec<\n  (typeof EVENT_SPEC)[E]\n>;\n\n// ---------------------------------------------------------------------------\n// Envelope\n// ---------------------------------------------------------------------------\n\n/** Fields the emitter fills in. Everything else is derived by the collector. */\nexport interface ClientEvent<E extends EventName = EventName> {\n  /** UUIDv7, generated by the emitter. Dedupe key. */\n  event_id: string;\n  event: E;\n  /** Client clock, unix ms. */\n  ts: number;\n  schema_version: typeof SCHEMA_VERSION;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  /** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. */\n  sdk?: string | null;\n  /** Random per page load, in memory only. */\n  page_id?: string | null;\n  page_type?: PageType | null;\n  host?: string | null;\n  /** Path without query string and fragment, already run through `sanitizePath`. */\n  path?: string | null;\n  referrer_host?: string | null;\n  utm_source?: string | null;\n  utm_medium?: string | null;\n  utm_campaign?: string | null;\n  utm_content?: string | null;\n  utm_term?: string | null;\n  ref_code?: string | null;\n  product_id?: string | null;\n  variant_id?: string | null;\n  order_ref?: string | null;\n  /** Object on the wire; the collector stores `JSON.stringify(props)`. */\n  props: EventProps<E>;\n  /**\n   * Only honoured for `source: \"dashboard\"`: the hashed Clerk user id computed\n   * by instapay and handed to the dashboard tracker. Ignored for every other\n   * source (the collector computes `visitor_id` itself).\n   */\n  visitor_id?: string | null;\n  /**\n   * The value of the first-party `bs_vid_<projectKey>` cookie (`CLIENT_ID_RE`), sent only\n   * while analytics consent is granted. The collector turns it into a stable\n   * `consentedVisitorId` and never stores it.\n   */\n  client_id?: string | null;\n}\n\n/** One row as stored in Basin (all three streams share this shape). */\nexport interface StoredEvent {\n  event_id: string;\n  event: EventName;\n  /** Unix ms, client clock after `clampTs`. */\n  ts: number;\n  /** Unix ms, collector clock. */\n  received_at: number;\n  schema_version: number;\n  /** Numeric database id. Resolved by the collector, never taken from the client. */\n  project_id: number;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  sdk: string | null;\n  visitor_id: string | null;\n  page_id: string | null;\n  page_type: PageType | null;\n  host: string | null;\n  path: string | null;\n  referrer_host: string | null;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  ref_code: string | null;\n  country: string | null;\n  region: string | null;\n  device_type: DeviceType | null;\n  os: string | null;\n  browser: string | null;\n  product_id: string | null;\n  variant_id: string | null;\n  order_ref: string | null;\n  /** `JSON.stringify` of the props object. */\n  props: string;\n}\n\n/** POST /e body. */\nexport interface IngestBody {\n  /** Project key, see `normalizeProjectKey`. */\n  k: string;\n  events: ClientEvent[];\n}\n\n// ---------------------------------------------------------------------------\n// Consent shapes\n// ---------------------------------------------------------------------------\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\nexport type ConsentTextKey = (typeof CONSENT_TEXT_KEYS)[number];\nexport type ConsentTexts = Record<ConsentTextKey, string>;\n\nexport type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\nexport type ConsentChoice = Record<ConsentCategory, boolean>;\n\nexport type ConsentConfig = {\n  version: number;\n  theme: \"auto\" | \"light\" | \"dark\";\n  accentColor?: string;\n  position: \"bottom\" | \"bottom-left\" | \"bottom-right\";\n  privacyPolicyUrl?: string;\n  categories: { analytics: boolean; marketing: boolean; preferences: boolean };\n  services: Array<{\n    name: string;\n    category: \"analytics\" | \"marketing\" | \"preferences\";\n    cookies?: string[];\n  }>;\n  texts?: Partial<Record<\"pl\" | \"en\", Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** Value of the consent cookie, JSON then base64url. */\nexport interface ConsentCookie {\n  v: 1;\n  /** Random consent id (also sent to POST /consent). */\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Banner version (`ConsentConfig.version`) the visitor answered. */\n  bv: number;\n  c: ConsentChoice;\n}\n\nexport const CONSENT_COOKIE_NAME = \"bitsnap_consent\";\nexport const CONSENT_COOKIE_MAX_AGE_SECONDS = 365 * 24 * 60 * 60;\nexport const CONSENT_ACTIONS = [\n  \"accept_all\",\n  \"reject_all\",\n  \"custom\",\n  \"withdraw\",\n] as const;\nexport type ConsentAction = (typeof CONSENT_ACTIONS)[number];\n/** POST /consent `action` of a banner impression (not a choice, not in `CONSENT_ACTIONS`). */\nexport const CONSENT_SHOWN_ACTION = \"shown\";\n\n/** POST /consent body of a choice (`CONSENT_ACTIONS`). */\nexport interface ConsentLogBody {\n  k: string;\n  /** Same random id as `ConsentCookie.id`. 16 to 64 chars of `[A-Za-z0-9_-]`. */\n  consent_id: string;\n  action: ConsentAction;\n  c: ConsentChoice;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/**\n * POST /consent body of a banner impression: the banner opened by itself\n * because the visitor has no valid choice. Once per page load; no consent id\n * and no choice.\n */\nexport interface ConsentShownBody {\n  k: string;\n  action: typeof CONSENT_SHOWN_ACTION;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/** Any POST /consent body; discriminate on `action`. */\nexport type ConsentBody = ConsentLogBody | ConsentShownBody;\n\n/** `bitsnap_consent`, or `bitsnap_consent_<projectKey>` for `data-scope=\"project\"`. */\nexport function consentCookieName(scope: \"site\" | \"project\", projectKey?: string): string {\n  if (scope === \"project\") {\n    if (!projectKey) throw new Error(\"projectKey required for project scope\");\n    return `${CONSENT_COOKIE_NAME}_${normalizeProjectKey(projectKey)}`;\n  }\n  return CONSENT_COOKIE_NAME;\n}\n\n/**\n * Decodes the value of a consent cookie (§11.3). Null when it is not base64url\n * JSON of the documented shape (`v` 1 and a boolean per category).\n */\nexport function parseConsentCookie(value: string | null | undefined): ConsentCookie | null {\n  if (!value || !/^[A-Za-z0-9_-]+$/.test(value)) return null;\n  try {\n    const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const bin = atob(padded + \"=\".repeat((4 - (padded.length % 4)) % 4));\n    const json: unknown = JSON.parse(\n      new TextDecoder().decode(Uint8Array.from(bin, (ch) => ch.charCodeAt(0))),\n    );\n    if (!isRecord(json) || json.v !== 1) return null;\n    const c = json.c;\n    if (!isRecord(c)) return null;\n    if (\n      typeof c.analytics !== \"boolean\" ||\n      typeof c.marketing !== \"boolean\" ||\n      typeof c.preferences !== \"boolean\"\n    ) {\n      return null;\n    }\n    return json as unknown as ConsentCookie;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Project key\n// ---------------------------------------------------------------------------\n\n/**\n * The project key is the existing public hashed project id\n * (`hashId(projectId)` in apps/bitsnap/queries/hashids.ts, the `projectID`\n * of bitsnap-react). A leading `pk_` is accepted and dropped so the\n * documented `pk_…` snippets work too. Returns null when it is not a plausible\n * key (hashids default alphabet).\n */\nexport function normalizeProjectKey(key: string): string | null {\n  const bare = key.startsWith(\"pk_\") ? key.slice(3) : key;\n  return /^[A-Za-z0-9]{1,32}$/.test(bare) ? bare : null;\n}\n\n// ---------------------------------------------------------------------------\n// X-Bitsnap-Client\n// ---------------------------------------------------------------------------\n\nconst CLIENT_RE = /^([a-z][a-z0-9-]{0,39})@(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.+-]{1,20})?)$/;\n\n/** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. Also the shape of `sdk`. */\nexport function parseClientHeader(\n  value: string | null | undefined,\n): { package: string; version: string } | null {\n  if (!value || value.length > LIMITS.sdk) return null;\n  const m = CLIENT_RE.exec(value);\n  return m ? { package: m[1], version: m[2] } : null;\n}\n\n// ---------------------------------------------------------------------------\n// URL stripping\n// ---------------------------------------------------------------------------\n\nconst MAX_QUERY_VALUE = LIMITS.utm;\n\n/**\n * Campaign/ref value: trimmed, capped, null when empty or when it holds an \"@\"\n * (someone put an email in a tag). The collector runs every client-supplied\n * `utm_*` and `ref_code` through it again.\n */\nexport function cleanValue(v: string | null | undefined, max: number): string | null {\n  if (v == null) return null;\n  const t = v.trim();\n  // An \"@\" means someone put an email in a campaign tag: drop the value.\n  if (t.length === 0 || t.includes(\"@\")) return null;\n  return t.slice(0, max);\n}\n\n/**\n * Path sanitiser: no query, no fragment, capped. Opaque segments (24+ chars of\n * `[A-Za-z0-9_-]`, i.e. tokens in order/panel links) become `:token` and\n * segments containing `@` become `:email`.\n */\nexport function sanitizePath(pathname: string): string {\n  const segments = pathname.split(\"/\").map((seg) => {\n    if (seg.includes(\"@\") || seg.includes(\"%40\")) return \":email\";\n    if (/^[A-Za-z0-9_-]{24,}$/.test(seg)) return \":token\";\n    return seg;\n  });\n  const joined = segments.join(\"/\") || \"/\";\n  return (joined.startsWith(\"/\") ? joined : `/${joined}`).slice(0, LIMITS.path);\n}\n\nexport interface UrlParts {\n  host: string;\n  /** Sanitised path, no query. */\n  path: string;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  /** The `ref` query parameter. */\n  ref_code: string | null;\n}\n\n/**\n * Parses a URL and keeps only what may leave the browser: host, sanitised path\n * and the `utm_*` and `ref` query parameters. Returns null for non-http(s) or\n * unparseable input. `base` resolves relative URLs.\n */\nexport function parseUrl(url: string, base?: string): UrlParts | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const q = u.searchParams;\n  return {\n    host: u.hostname.toLowerCase().slice(0, LIMITS.host),\n    path: sanitizePath(u.pathname),\n    utm_source: cleanValue(q.get(\"utm_source\"), MAX_QUERY_VALUE),\n    utm_medium: cleanValue(q.get(\"utm_medium\"), MAX_QUERY_VALUE),\n    utm_campaign: cleanValue(q.get(\"utm_campaign\"), MAX_QUERY_VALUE),\n    utm_content: cleanValue(q.get(\"utm_content\"), MAX_QUERY_VALUE),\n    utm_term: cleanValue(q.get(\"utm_term\"), MAX_QUERY_VALUE),\n    ref_code: cleanValue(q.get(\"ref\"), LIMITS.refCode),\n  };\n}\n\n/**\n * Returns the URL with userinfo, fragment and every query parameter removed\n * except `utm_*` and `ref`. Null when `url` is not a usable http(s) URL.\n */\nexport function stripUrl(url: string, base?: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const keep = new URLSearchParams();\n  for (const [key, value] of u.searchParams) {\n    if (key !== \"ref\" && !key.startsWith(\"utm_\")) continue;\n    const cleaned = cleanValue(value, MAX_QUERY_VALUE);\n    if (cleaned != null) keep.append(key, cleaned);\n  }\n  const qs = keep.toString();\n  return `${u.protocol}//${u.host}${sanitizePath(u.pathname)}${qs ? `?${qs}` : \"\"}`;\n}\n\nconst HOSTNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;\n\n/** A plain DNS hostname (lower-cased), or null: no scheme, port, path, userinfo or \"@\". */\nexport function cleanHostname(\n  v: string | null | undefined,\n  max: number = LIMITS.referrerHost,\n): string | null {\n  if (typeof v !== \"string\") return null;\n  const h = v.trim().toLowerCase();\n  return h.length > 0 && h.length <= max && HOSTNAME_RE.test(h) ? h : null;\n}\n\n/** Public hashed ids (`product_id`, `variant_id`, `order_ref`): URL-safe, at most `LIMITS.id`. */\nexport const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nexport function cleanId(v: string | null | undefined): string | null {\n  return typeof v === \"string\" && ID_RE.test(v) ? v : null;\n}\n\n/** Host of a referrer URL, or null (also null for non-http(s) referrers). */\nexport function referrerHost(referrer: string | null | undefined): string | null {\n  if (!referrer) return null;\n  try {\n    const u = new URL(referrer);\n    if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n    return u.hostname.toLowerCase().slice(0, LIMITS.referrerHost);\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Bot rule\n// ---------------------------------------------------------------------------\n\nconst BOT_UA =\n  /bot\\b|crawl|spider|slurp|facebookexternalhit|bingpreview|headless|phantomjs|lighthouse|pagespeed|gtmetrix|pingdom|uptime|statuscake|monitor|preview|scrapy|curl\\/|wget|python-|go-http-client|java\\/|okhttp|axios|node-fetch|undici|libwww|httpclient|aiohttp|postman|insomnia/i;\n\n/** True when the User-Agent is empty or looks automated. Such events are dropped. */\nexport function isBotUserAgent(ua: string | null | undefined): boolean {\n  if (!ua || ua.trim().length === 0) return true;\n  return BOT_UA.test(ua);\n}\n\n// ---------------------------------------------------------------------------\n// visitor_id\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(\n  key: Uint8Array,\n  message: string,\n): Promise<Uint8Array> {\n  const cryptoKey = await crypto.subtle.importKey(\n    \"raw\",\n    key,\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return new Uint8Array(\n    await crypto.subtle.sign(\"HMAC\", cryptoKey, encoder.encode(message)),\n  );\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** `YYYY-MM-DD` of a unix-ms timestamp in UTC. */\nexport function utcDate(ms: number): string {\n  return new Date(ms).toISOString().slice(0, 10);\n}\n\n/**\n * IP as hashed: lower-case; IPv4 unchanged; IPv4-mapped IPv6 (`::ffff:1.2.3.4`\n * or `::ffff:102:304`) becomes plain IPv4; any other IPv6, including one with\n * an embedded dotted quad (`64:ff9b::1.2.3.4`), is cut to its /64 (first four\n * hextets, canonical form `a:b:c:d::`). Both the Worker and the instapay\n * server MUST call this on the client IP before `computeVisitorId`.\n */\nexport function normalizeIp(ip: string): string {\n  let s = ip.trim().toLowerCase();\n  const zone = s.indexOf(\"%\");\n  if (zone >= 0) s = s.slice(0, zone);\n  if (!s.includes(\":\")) return s; // plain IPv4 (or not an IP at all)\n\n  // Embedded dotted quad in the last 32 bits: turn it into two hextets.\n  const quad = /^(.*:)(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(s);\n  if (quad) {\n    const o = [quad[2], quad[3], quad[4], quad[5]].map(Number);\n    if (o.some((n) => n > 255)) return s;\n    const hex = (hi: number, lo: number) => (hi * 256 + lo).toString(16);\n    s = `${quad[1]}${hex(o[0], o[1])}:${hex(o[2], o[3])}`;\n  }\n\n  const [head, tail] = s.split(\"::\");\n  const headParts = head ? head.split(\":\") : [];\n  const tailParts = tail !== undefined && tail !== \"\" ? tail.split(\":\") : [];\n  const fill =\n    tail === undefined ? 0 : Math.max(0, 8 - headParts.length - tailParts.length);\n  const groups = [...headParts, ...Array<string>(fill).fill(\"0\"), ...tailParts];\n  if (groups.length !== 8) return s;\n  const h = groups.map((g) => Number.parseInt(g, 16) || 0);\n\n  // ::ffff:a.b.c.d in hex form.\n  if (h.slice(0, 5).every((x) => x === 0) && h[5] === 0xffff) {\n    return `${h[6] >> 8}.${h[6] & 255}.${h[7] >> 8}.${h[7] & 255}`;\n  }\n  return `${h\n    .slice(0, 4)\n    .map((g) => g.toString(16))\n    .join(\":\")}::`;\n}\n\n/**\n * Cookieless visitor id, identical in the Worker and the instapay server.\n *\n *   day_secret = HMAC-SHA256(key = utf8(masterSecret), msg = utf8(\"YYYY-MM-DD\"))   // 32 raw bytes\n *   visitor_id = base64url(HMAC-SHA256(key = day_secret, msg = utf8(ip + \"\\n\" + ua + \"\\n\" + projectId))).slice(0, 22)\n *\n * `dateUtc` is the UTC date of the request; `ip` is `normalizeIp(<client IP>)`;\n * `ua` is the raw `User-Agent` request header; `projectId` is the decimal\n * numeric project id.\n */\nexport async function computeVisitorId(\n  masterSecret: string,\n  dateUtc: string,\n  ip: string,\n  ua: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(dateUtc)) {\n    throw new Error(`dateUtc must be YYYY-MM-DD, got ${dateUtc}`);\n  }\n  const daySecret = await hmacSha256(encoder.encode(masterSecret), dateUtc);\n  const mac = await hmacSha256(daySecret, `${ip}\\n${ua}\\n${projectId}`);\n  return base64url(mac).slice(0, 22);\n}\n\n/**\n * The `bs_vid_<projectKey>` cookie name. `projectKey` is the bare public key\n * (like `consentCookieName`): consent is per project, so is the client id.\n */\nexport function clientIdCookieName(projectKey: string): string {\n  return `bs_vid_${projectKey}`;\n}\n\n/** Value of the `bs_vid_<projectKey>` cookie: 16 random bytes, base64url without padding. */\nexport const CLIENT_ID_RE = /^[A-Za-z0-9_-]{22}$/;\n\n/**\n * Stable visitor id of a browser that granted analytics consent (contract §6).\n *\n *   consented_visitor_id = \"p_\" + base64url(HMAC-SHA256(key = utf8(masterSecret),\n *                                  msg = utf8(\"client\\n\" + clientId + \"\\n\" + projectId))).slice(0, 22)\n *\n * 24 characters; daily ids are 22, so `isConsentedVisitorId` tells them apart.\n * `clientId` is the `bs_vid_<projectKey>` cookie value and is never stored.\n */\nexport async function computeConsentedVisitorId(\n  masterSecret: string,\n  clientId: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!CLIENT_ID_RE.test(clientId)) {\n    throw new Error(\"clientId must be 22 base64url characters\");\n  }\n  const mac = await hmacSha256(\n    encoder.encode(masterSecret),\n    `client\\n${clientId}\\n${projectId}`,\n  );\n  return `p_${base64url(mac).slice(0, 22)}`;\n}\n\n/** Whether `visitorId` came from `computeConsentedVisitorId` (not a daily id). */\nexport function isConsentedVisitorId(visitorId: string): boolean {\n  return visitorId.length === 24 && visitorId.startsWith(\"p_\");\n}\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nexport type ValidationResult = { ok: true } | { ok: false; reason: string };\n\nconst UUID_V7 =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\nconst PAGE_ID_RE = /^[A-Za-z0-9_-]{8,32}$/;\n/** A letter TLD is required: `bitsnap-react@1.9.0` and `v@1.2` are not addresses. */\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+\\.[A-Za-z]{2,}\\b/;\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction nullableString(\n  e: Record<string, unknown>,\n  key: string,\n  max: number,\n): string | null {\n  const v = e[key];\n  if (v === undefined || v === null) return null;\n  if (typeof v !== \"string\") return `bad_${key}`;\n  return v.length > max ? `too_long_${key}` : null;\n}\n\nfunction checkPropValue(spec: string, value: unknown): boolean {\n  const optional = spec.endsWith(\"?\");\n  const type = optional ? spec.slice(0, -1) : spec;\n  if (type.startsWith(\"enum:\")) {\n    return typeof value === \"string\" && type.slice(5).split(\"|\").includes(value);\n  }\n  switch (type) {\n    case \"string\":\n      return typeof value === \"string\" && value.length <= LIMITS.maxPropString;\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value);\n    case \"boolean\":\n      return typeof value === \"boolean\";\n    case \"string[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"string\" && x.length <= LIMITS.maxPropString)\n      );\n    case \"number[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"number\" && Number.isFinite(x))\n      );\n    case \"line_items\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every(\n          (x) =>\n            isRecord(x) &&\n            typeof x.product_id === \"string\" &&\n            ID_RE.test(x.product_id) &&\n            isNonNegativeSafeInteger(x.qty) &&\n            isNonNegativeSafeInteger(x.value_minor),\n        )\n      );\n    default:\n      return false;\n  }\n}\n\nfunction isNonNegativeSafeInteger(value: unknown): boolean {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\n/** True when `value` looks like an email address (also exported for the collector's re-checks). */\nexport function looksLikeEmail(value: string): boolean {\n  // A well-formed `<package>@<version>` client id is never an address.\n  if (parseClientHeader(value) !== null) return false;\n  return EMAIL_LIKE.test(value);\n}\n\nfunction hasEmailLike(value: unknown): boolean {\n  if (typeof value === \"string\") return looksLikeEmail(value);\n  if (Array.isArray(value)) return value.some(hasEmailLike);\n  if (isRecord(value)) return Object.values(value).some(hasEmailLike);\n  return false;\n}\n\n/**\n * Validates `props` against the catalogue and returns a copy without keys the\n * catalogue does not know (forward compatibility: a newer SDK adding an\n * optional prop must not get its events dropped by an older collector).\n * Fails on missing required props, wrong types, bad enum values, oversize\n * props and string values that look like an email address.\n */\nexport function sanitizeProps(\n  event: string,\n  props: unknown,\n): { ok: true; props: Record<string, unknown> } | { ok: false; reason: string } {\n  if (!isEventName(event)) return { ok: false, reason: \"unknown_event\" };\n  const spec = (EVENT_SPEC as Record<string, Record<string, string>>)[event];\n  if (!spec) return { ok: false, reason: \"unknown_event\" };\n  if (!isRecord(props)) return { ok: false, reason: \"bad_props\" };\n  const out: Record<string, unknown> = {};\n  for (const [key, type] of Object.entries(spec)) {\n    const value = props[key];\n    if (value === undefined || value === null) {\n      if (!type.endsWith(\"?\")) return { ok: false, reason: `props_missing_${key}` };\n      continue;\n    }\n    if (!checkPropValue(type, value)) return { ok: false, reason: `props_bad_${key}` };\n    if (hasEmailLike(value)) return { ok: false, reason: `props_pii_${key}` };\n    out[key] =\n      type.startsWith(\"line_items\") && Array.isArray(value)\n        ? value.map((x) => ({ product_id: x.product_id, qty: x.qty, value_minor: x.value_minor }))\n        : value;\n  }\n  if (JSON.stringify(out).length > LIMITS.maxPropsChars) {\n    return { ok: false, reason: \"props_too_large\" };\n  }\n  return { ok: true, props: out };\n}\n\nexport interface ValidateOptions {\n  /**\n   * Who sent it. `browser` (default) is POST /e: the event must belong to\n   * `storefront_events` or `app_events`, `consent_updated` and `consent_shown`\n   * are refused (only POST /consent writes them) and `source` must fit the\n   * stream. `server` is the instapay emitter: any stream, `source` must fit the\n   * stream.\n   */\n  from?: \"browser\" | \"server\";\n}\n\n/**\n * Validates the emitter-controlled part of an event: names, types, enums,\n * lengths, the event/source/stream pairing and `props`. It does not check\n * that `ts` is plausible (use `clampTs`), origins or project keys.\n */\nexport function validateEnvelope(\n  e: unknown,\n  options: ValidateOptions = {},\n): ValidationResult {\n  const from = options.from ?? \"browser\";\n  const fail = (reason: string): ValidationResult => ({ ok: false, reason });\n  if (!isRecord(e)) return fail(\"not_object\");\n\n  if (typeof e.event_id !== \"string\" || !UUID_V7.test(e.event_id)) {\n    return fail(\"bad_event_id\");\n  }\n  if (!isEventName(e.event)) return fail(\"unknown_event\");\n  const stream = STREAM_FOR_EVENT[e.event as EventName];\n  if (from === \"browser\") {\n    if (stream === \"business_events\") return fail(\"server_only_event\");\n    if (e.event === \"consent_updated\" || e.event === \"consent_shown\") {\n      return fail(\"consent_via_consent_endpoint\");\n    }\n  }\n  if (\n    typeof e.ts !== \"number\" ||\n    !Number.isInteger(e.ts) ||\n    e.ts <= 0 ||\n    e.ts > 4e12\n  ) {\n    return fail(\"bad_ts\");\n  }\n  if (e.schema_version !== SCHEMA_VERSION) return fail(\"bad_schema_version\");\n  if (!ENVS.includes(e.env as Env)) return fail(\"bad_env\");\n  if (!SOURCES.includes(e.source as Source)) return fail(\"bad_source\");\n  if (!SOURCES_FOR_STREAM[stream].includes(e.source as Source)) {\n    return fail(\"source_not_allowed_for_event\");\n  }\n  if (!CHANNELS.includes(e.channel as Channel)) return fail(\"bad_channel\");\n\n  if (e.sdk != null) {\n    if (typeof e.sdk !== \"string\" || parseClientHeader(e.sdk) === null) {\n      return fail(\"bad_sdk\");\n    }\n  }\n  if (e.page_id != null) {\n    if (typeof e.page_id !== \"string\" || !PAGE_ID_RE.test(e.page_id)) {\n      return fail(\"bad_page_id\");\n    }\n  }\n  if (e.page_type != null && !PAGE_TYPES.includes(e.page_type as PageType)) {\n    return fail(\"bad_page_type\");\n  }\n  if (from === \"browser\") {\n    if (typeof e.host !== \"string\" || e.host.length === 0) return fail(\"bad_host\");\n    if (typeof e.path !== \"string\" || !e.path.startsWith(\"/\")) return fail(\"bad_path\");\n  }\n  if (typeof e.path === \"string\" && e.path.includes(\"?\")) return fail(\"path_has_query\");\n  if (typeof e.path === \"string\" && e.path.includes(\"#\")) return fail(\"path_has_fragment\");\n\n  const lengths: Array<[string, number]> = [\n    [\"host\", LIMITS.host],\n    [\"path\", LIMITS.path],\n    [\"referrer_host\", LIMITS.referrerHost],\n    [\"utm_source\", LIMITS.utm],\n    [\"utm_medium\", LIMITS.utm],\n    [\"utm_campaign\", LIMITS.utm],\n    [\"utm_content\", LIMITS.utm],\n    [\"utm_term\", LIMITS.utm],\n    [\"ref_code\", LIMITS.refCode],\n    [\"product_id\", LIMITS.id],\n    [\"variant_id\", LIMITS.id],\n    [\"order_ref\", LIMITS.id],\n  ];\n  for (const [key, max] of lengths) {\n    const problem = nullableString(e, key, max);\n    if (problem) return fail(problem);\n  }\n  if (e.visitor_id != null) {\n    if (typeof e.visitor_id !== \"string\" || !/^[A-Za-z0-9_-]{22}$/.test(e.visitor_id)) {\n      return fail(\"bad_visitor_id\");\n    }\n  }\n  if (e.client_id != null) {\n    if (typeof e.client_id !== \"string\" || !CLIENT_ID_RE.test(e.client_id)) {\n      return fail(\"bad_client_id\");\n    }\n  }\n\n  const props = sanitizeProps(e.event, e.props);\n  if (!props.ok) return fail(props.reason);\n  return { ok: true };\n}\n\n/** Client `ts` as stored: replaced by `receivedAt` when more than 24 h away from it. */\nexport function clampTs(ts: number, receivedAt: number): number {\n  return Math.abs(ts - receivedAt) > LIMITS.tsSkewMs ? receivedAt : ts;\n}\n"]}
+{"version":3,"sources":["../src/analytics/contract.ts"],"names":["LIMITS","STREAMS","ENVS","SOURCES","CHANNELS","PAGE_TYPES","SOURCES_FOR_STREAM","MONEY","STOREFRONT_EVENT_SPEC","APP_EVENT_SPEC","TX","SUB","BUSINESS_EVENT_SPEC","EVENT_SPEC","EVENT_NAMES","STREAM_FOR_EVENT","stream","name","isEventName","CONSENT_COOKIE_MAX_AGE_SECONDS","CONSENT_SHOWN_ACTION","normalizeProjectKey","key","bare","CLIENT_RE","parseClientHeader","value","m","MAX_QUERY_VALUE","cleanValue","v","max","t","sanitizePath","pathname","joined","seg"],"mappings":"AAiBO,qrBAAMA,CAAAA,CAAS,CAEpB,cAAA,CAAgB,EAAA,CAEhB,YAAA,CAAc,KAAA,CAEd,aAAA,CAAe,IAAA,CACf,aAAA,CAAe,GAAA,CACf,YAAA,CAAc,EAAA,CACd,IAAA,CAAM,GAAA,CACN,IAAA,CAAM,GAAA,CACN,YAAA,CAAc,GAAA,CACd,GAAA,CAAK,GAAA,CACL,OAAA,CAAS,EAAA,CACT,EAAA,CAAI,EAAA,CACJ,GAAA,CAAK,EAAA,CACL,MAAA,CAAQ,EAAA,CACR,MAAA,CAAQ,EAAA,CACR,SAAA,CAAW,EAAA,CAEX,QAAA,CAAU,KACZ,CAAA,CAMaC,CAAAA,CAAU,CACrB,mBAAA,CACA,YAAA,CACA,iBACF,CAAA,CAGaC,CAAAA,CAAO,CAAC,MAAA,CAAQ,MAAM,CAAA,CAGtBC,CAAAA,CAAU,CACrB,YAAA,CACA,WAAA,CACA,QAAA,CACA,QAAA,CACA,WACF,CAAA,CAGaC,CAAAA,CAAW,CACtB,QAAA,CACA,eAAA,CACA,OAAA,CACA,KAAA,CACA,OACF,CAAA,CAGaC,CAAAA,CAAa,CACxB,MAAA,CACA,SAAA,CACA,SAAA,CACA,MAAA,CACA,UAAA,CACA,SAAA,CACA,OAAA,CACA,QAAA,CACA,aAAA,CACA,OAAA,CACA,SAAA,CACA,KAAA,CACA,OACF,CAAA,CAOO,IAAMC,CAAAA,CAAwD,CACnE,iBAAA,CAAmB,CAAC,YAAA,CAAc,WAAA,CAAa,QAAQ,CAAA,CACvD,UAAA,CAAY,CAAC,WAAW,CAAA,CACxB,eAAA,CAAiB,CAAC,QAAQ,CAC5B,CAAA,CAYMC,CAAAA,CAAQ,CAAE,WAAA,CAAa,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAG7CC,CAAAA,CAAwB,CACnC,SAAA,CAAW,CAAE,OAAA,CAAS,SAAU,CAAA,CAChC,mBAAA,CAAqB,CAAE,OAAA,CAAS,SAAA,CAAW,UAAA,CAAY,QAAS,CAAA,CAChE,kBAAA,CAAoB,CAClB,OAAA,CAAS,SAAA,CACT,WAAA,CAAa,UAAA,CACb,SAAA,CAAW,UACb,CAAA,CACA,eAAA,CAAiB,CAAE,OAAA,CAAS,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC3D,YAAA,CAAc,CACZ,WAAA,CAAa,QAAA,CACb,QAAA,CAAU,QAAA,CACV,YAAA,CAAc,qCAChB,CAAA,CACA,gBAAA,CAAkB,CAAC,CAAA,CACnB,WAAA,CAAa,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGD,CAAM,CAAA,CACvC,gBAAA,CAAkB,CAAE,GAAA,CAAK,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC5C,WAAA,CAAa,CAAE,UAAA,CAAY,QAAA,CAAU,GAAGA,CAAM,CAAA,CAC9C,gBAAA,CAAkB,CAChB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,GAAGA,CACL,CAAA,CACA,uBAAA,CAAyB,CACvB,IAAA,CAAM,wCACR,CAAA,CACA,yBAAA,CAA2B,CAAE,KAAA,CAAO,QAAA,CAAU,IAAA,CAAM,QAAS,CAAA,CAC7D,cAAA,CAAgB,CAAE,SAAA,CAAW,QAAS,CAAA,CACtC,eAAA,CAAiB,CAAE,SAAA,CAAW,SAAA,CAAW,MAAA,CAAQ,QAAS,CAAA,CAC1D,wBAAA,CAA0B,CAAE,MAAA,CAAQ,QAAS,CAAA,CAC7C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CAC/D,iBAAA,CAAmB,CAAE,OAAA,CAAS,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACzD,iBAAA,CAAmB,CAAC,CAAA,CACpB,gBAAA,CAAkB,CAAE,OAAA,CAAS,0BAA2B,CAAA,CACxD,gBAAA,CAAkB,CAChB,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,OAAA,CAAS,kCAAA,CACT,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAC,CAAA,CACtB,WAAA,CAAa,CAAC,CAAA,CACd,kBAAA,CAAoB,CAAC,CAAA,CACrB,cAAA,CAAgB,CAAC,CAAA,CACjB,cAAA,CAAgB,CAAC,CAAA,CACjB,gBAAA,CAAkB,CAAE,WAAA,CAAa,QAAA,CAAU,UAAA,CAAY,QAAS,CAAA,CAChE,aAAA,CAAe,CAAE,SAAA,CAAW,QAAS,CAAA,CACrC,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,gBAAA,CAAkB,CAChB,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,QAAA,CAAU,QACZ,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,SAAA,CAAW,QACb,CAAA,CACA,cAAA,CAAgB,CACd,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CACX,YAAA,CAAc,iCAChB,CAAA,CACA,YAAA,CAAc,CACZ,SAAA,CAAW,QAAA,CACX,SAAA,CAAW,QAAA,CAEX,MAAA,CAAQ,QACV,CAAA,CAEA,eAAA,CAAiB,CACf,UAAA,CAAY,QAAA,CACZ,MAAA,CAAQ,4CAAA,CACR,SAAA,CAAW,SAAA,CACX,SAAA,CAAW,SAAA,CACX,WAAA,CAAa,SAAA,CACb,cAAA,CAAgB,QAClB,CAAA,CAKA,aAAA,CAAe,CACb,cAAA,CAAgB,QAClB,CACF,CAAA,CAGaE,CAAAA,CAAiB,CAC5B,aAAA,CAAe,CAAE,KAAA,CAAO,QAAA,CAAU,cAAA,CAAgB,SAAU,CAAA,CAC5D,aAAA,CAAe,CAAE,YAAA,CAAc,QAAA,CAAU,IAAA,CAAM,QAAA,CAAU,QAAA,CAAU,QAAS,CAAA,CAC5E,eAAA,CAAiB,CACf,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,iBAAA,CAAmB,CACjB,YAAA,CAAc,QAAA,CACd,IAAA,CAAM,QAAA,CACN,QAAA,CAAU,QACZ,CAAA,CACA,qBAAA,CAAuB,CAAE,IAAA,CAAM,QAAS,CAAA,CACxC,wBAAA,CAA0B,CAAE,IAAA,CAAM,QAAS,CAAA,CAC3C,uBAAA,CAAyB,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAC9D,yBAAA,CAA2B,CAAE,OAAA,CAAS,QAAA,CAAU,IAAA,CAAM,SAAU,CAAA,CAChE,sBAAA,CAAwB,CACtB,OAAA,CAAS,QAAA,CACT,IAAA,CAAM,SAAA,CACN,UAAA,CAAY,SACd,CAAA,CACA,sBAAA,CAAwB,CAAC,CAAA,CACzB,uBAAA,CAAyB,CAAC,CAAA,CAC1B,qBAAA,CAAuB,CAAE,UAAA,CAAY,SAAU,CAAA,CAC/C,eAAA,CAAiB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC3C,iBAAA,CAAmB,CAAE,YAAA,CAAc,SAAU,CAAA,CAC7C,6BAAA,CAA+B,CAAE,OAAA,CAAS,QAAS,CAAA,CACnD,eAAA,CAAiB,CAAE,OAAA,CAAS,QAAS,CAAA,CACrC,YAAA,CAAc,CAAE,GAAA,CAAK,QAAS,CAAA,CAC9B,oBAAA,CAAsB,CAAE,GAAA,CAAK,QAAA,CAAU,MAAA,CAAQ,QAAS,CAAA,CACxD,eAAA,CAAiB,CAAE,MAAA,CAAQ,QAAA,CAAU,MAAA,CAAQ,SAAU,CAAA,CACvD,gBAAA,CAAkB,CAAE,YAAA,CAAc,QAAS,CAAA,CAC3C,WAAA,CAAa,CAAE,IAAA,CAAM,QAAA,CAAU,KAAA,CAAO,QAAS,CAAA,CAC/C,WAAA,CAAa,CAAE,KAAA,CAAO,SAAU,CAAA,CAChC,iBAAA,CAAmB,CAAE,KAAA,CAAO,SAAU,CAAA,CACtC,cAAA,CAAgB,CAAE,IAAA,CAAM,QAAS,CACnC,CAAA,CAEMC,CAAAA,CAAK,CACT,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CACMC,CAAAA,CAAM,CACV,eAAA,CAAiB,SAAA,CACjB,WAAA,CAAa,SAAA,CACb,QAAA,CAAU,SACZ,CAAA,CAMaC,CAAAA,CAAsB,CAEjC,mBAAA,CAAqBF,CAAAA,CACrB,mBAAA,CAAqBA,CAAAA,CACrB,mBAAA,CAAqB,CAAE,GAAGA,CAAAA,CAAI,UAAA,CAAY,SAAU,CAAA,CACpD,mBAAA,CAAqBA,CAAAA,CACrB,kBAAA,CAAoBA,CAAAA,CACpB,oBAAA,CAAsBC,CAAAA,CACtB,mBAAA,CAAqBA,CAAAA,CACrB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,oBAAA,CAAsBA,CAAAA,CACtB,wBAAA,CAA0BA,CAAAA,CAC1B,0BAAA,CAA4B,CAAE,GAAGA,CAAAA,CAAK,UAAA,CAAY,SAAU,CAAA,CAC5D,qBAAA,CAAuBA,CAAAA,CACvB,qBAAA,CAAuBA,CAAAA,CACvB,wBAAA,CAA0B,CAAC,CAAA,CAC3B,cAAA,CAAgB,CAAC,CAAA,CACjB,aAAA,CAAe,CAAE,WAAA,CAAa,SAAA,CAAW,QAAA,CAAU,SAAU,CAAA,CAC7D,sBAAA,CAAwB,CAAC,CAAA,CACzB,qBAAA,CAAuB,CAAC,CAAA,CACxB,yBAAA,CAA2B,CACzB,UAAA,CAAY,QAAA,CACZ,gBAAA,CAAkB,QAAA,CAClB,QAAA,CAAU,QACZ,CAAA,CAEA,wBAAA,CAA0B,CACxB,UAAA,CAAY,QAAA,CACZ,aAAA,CAAe,uBAAA,CACf,OAAA,CAAS,SAAA,CACT,GAAGJ,CACL,CAAA,CACA,UAAA,CAAY,CACV,OAAA,CAAS,QAAA,CACT,MAAA,CAAQ,SAAA,CACR,UAAA,CAAY,SAAA,CAEZ,WAAA,CAAa,SAAA,CAEb,KAAA,CAAO,aAAA,CACP,GAAGA,CACL,CAAA,CACA,aAAA,CAAe,CACb,OAAA,CAAS,SAAA,CACT,MAAA,CAAQ,SAAA,CACR,GAAGA,CACL,CAAA,CACA,gBAAA,CAAkB,CAAE,UAAA,CAAY,QAAA,CAAU,WAAA,CAAa,SAAU,CAAA,CACjE,wBAAA,CAA0B,CACxB,aAAA,CAAe,QAAA,CACf,MAAA,CAAQ,QAAA,CACR,OAAA,CAAS,SACX,CAAA,CACA,iBAAA,CAAmB,CAAE,MAAA,CAAQ,QAAA,CAAU,QAAA,CAAU,SAAU,CAAA,CAC3D,mBAAA,CAAqB,CACnB,MAAA,CAAQ,QAAA,CACR,QAAA,CAAU,SAAA,CACV,UAAA,CAAY,SACd,CAAA,CACA,mBAAA,CAAqB,CAAE,IAAA,CAAM,SAAU,CAAA,CACvC,qBAAA,CAAuB,CAAC,CAAA,CACxB,WAAA,CAAa,CAEX,QAAA,CAAU,QAAA,CAEV,MAAA,CAAQ,SAAA,CACR,MAAA,CAAQ,QAAA,CACR,cAAA,CAAgB,oCAAA,CAEhB,WAAA,CAAa,QACf,CACF,CAAA,CAQO,IAAMM,CAAAA,CAAa,CACxB,GAAGL,CAAAA,CACH,GAAGC,CAAAA,CACH,GAAGG,CACL,CAAA,CAOaE,CAAAA,CAAc,CACzB,iBAAA,CAAmB,MAAA,CAAO,IAAA,CAAKN,CAAqB,CAAA,CACpD,UAAA,CAAY,MAAA,CAAO,IAAA,CAAKC,CAAc,CAAA,CACtC,eAAA,CAAiB,MAAA,CAAO,IAAA,CAAKG,CAAmB,CAClD,CAAA,CAEaG,CAAAA,CAA8C,MAAA,CAAO,WAAA,CAChEd,CAAAA,CAAQ,OAAA,CAASe,CAAAA,EACdF,CAAAA,CAAYE,CAAM,CAAA,CAAe,GAAA,CAAKC,CAAAA,EAAS,CAACA,CAAAA,CAAMD,CAAM,CAAU,CACzE,CACF,CAAA,CAGO,SAASE,CAAAA,CAAYD,CAAAA,CAAkC,CAC5D,OAAO,OAAOA,CAAAA,EAAS,QAAA,EAAY,MAAA,CAAO,MAAA,CAAOF,CAAAA,CAAkBE,CAAI,CACzE,CAwLO,IAAME,EAAAA,CAAiC,GAAA,CAAM,EAAA,CAAK,EAAA,CAAK,EAAA,CASvD,IAAMC,EAAAA,CAAuB,OAAA,CAoF7B,SAASC,EAAAA,CAAoBC,CAAAA,CAA4B,CAC9D,IAAMC,CAAAA,CAAOD,CAAAA,CAAI,UAAA,CAAW,KAAK,CAAA,CAAIA,CAAAA,CAAI,KAAA,CAAM,CAAC,CAAA,CAAIA,CAAAA,CACpD,MAAO,qBAAA,CAAsB,IAAA,CAAKC,CAAI,CAAA,CAAIA,CAAAA,CAAO,IACnD,CAMA,IAAMC,CAAAA,CAAY,uEAAA,CAGX,SAASC,CAAAA,CACdC,CAAAA,CAC6C,CAC7C,EAAA,CAAI,CAACA,CAAAA,EAASA,CAAAA,CAAM,MAAA,CAAS1B,CAAAA,CAAO,GAAA,CAAK,OAAO,IAAA,CAChD,IAAM2B,CAAAA,CAAIH,CAAAA,CAAU,IAAA,CAAKE,CAAK,CAAA,CAC9B,OAAOC,CAAAA,CAAI,CAAE,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAA,CAAG,OAAA,CAASA,CAAAA,CAAE,CAAC,CAAE,CAAA,CAAI,IAChD,CAMA,IAAMC,CAAAA,CAAkB5B,CAAAA,CAAO,GAAA,CAOxB,SAAS6B,CAAAA,CAAWC,CAAAA,CAA8BC,CAAAA,CAA4B,CACnF,EAAA,CAAID,CAAAA,EAAK,IAAA,CAAM,OAAO,IAAA,CACtB,IAAME,CAAAA,CAAIF,CAAAA,CAAE,IAAA,CAAK,CAAA,CAEjB,OAAIE,CAAAA,CAAE,MAAA,GAAW,CAAA,EAAKA,CAAAA,CAAE,QAAA,CAAS,GAAG,CAAA,CAAU,IAAA,CACvCA,CAAAA,CAAE,KAAA,CAAM,CAAA,CAAGD,CAAG,CACvB,CAOO,SAASE,CAAAA,CAAaC,CAAAA,CAA0B,CAMrD,IAAMC,CAAAA,CALWD,CAAAA,CAAS,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAKE,CAAAA,EACpCA,CAAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAKA,CAAAA,CAAI,QAAA,CAAS,KAAK,CAAA,CAAU,QAAA,CACjD,sBAAA,CAAuB,IAAA,CAAKA,CAAG,CAAA,CAAU,QAAA,CACtCA,CACR,CAAA,CACuB,IAAA,CAAK,GAAG,CAAA,EAAK,GAAA,CACrC,MAAA,CAAQD,CAAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAIA,CAAAA,CAAS,CAAA,CAAA,EAAIA,CAAM,CAAA,CAAA","file":"/home/emems/web/bitsnap/bitsnap/bitsnap-react/dist/chunk-W3RGQYPD.js","sourcesContent":["/**\n * Bitsnap merchant analytics: the wire contract.\n *\n * SOURCE OF TRUTH: instapay `apps/collector/src/contract.ts` (prose version:\n * `docs/merchant-analytics-contract.md`). This file is a verbatim copy of it\n * (everything below the next comment block). Do not edit it here: change\n * instapay's file and copy it over. `computeVisitorId` and\n * `computeConsentedVisitorId` are pure but need the server secret; they are\n * server-only: the browser never calls them, so bundlers drop them.\n */\n\nexport const SCHEMA_VERSION = 1;\n\n// ---------------------------------------------------------------------------\n// Limits\n// ---------------------------------------------------------------------------\n\nexport const LIMITS = {\n  /** Events in one POST /e. */\n  maxBatchEvents: 50,\n  /** Body of one POST /e or /consent, in bytes. */\n  maxBodyBytes: 64 * 1024,\n  /** `JSON.stringify(props)` of one event, in UTF-16 code units. */\n  maxPropsChars: 4096,\n  maxPropString: 200,\n  maxPropArray: 50,\n  host: 253,\n  path: 512,\n  referrerHost: 253,\n  utm: 100,\n  refCode: 64,\n  id: 64,\n  sdk: 64,\n  pageId: 32,\n  region: 64,\n  osBrowser: 32,\n  /** Collector replaces a client `ts` farther than this from `received_at`. */\n  tsSkewMs: 24 * 60 * 60 * 1000,\n} as const;\n\n// ---------------------------------------------------------------------------\n// Enumerations\n// ---------------------------------------------------------------------------\n\nexport const STREAMS = [\n  \"storefront_events\",\n  \"app_events\",\n  \"business_events\",\n] as const;\nexport type Stream = (typeof STREAMS)[number];\n\nexport const ENVS = [\"live\", \"test\"] as const;\nexport type Env = (typeof ENVS)[number];\n\nexport const SOURCES = [\n  \"storefront\",\n  \"sdk_react\",\n  \"script\",\n  \"server\",\n  \"dashboard\",\n] as const;\nexport type Source = (typeof SOURCES)[number];\n\nexport const CHANNELS = [\n  \"hosted\",\n  \"custom_domain\",\n  \"embed\",\n  \"api\",\n  \"panel\",\n] as const;\nexport type Channel = (typeof CHANNELS)[number];\n\nexport const PAGE_TYPES = [\n  \"shop\",\n  \"catalog\",\n  \"product\",\n  \"cart\",\n  \"checkout\",\n  \"payment\",\n  \"panel\",\n  \"course\",\n  \"custom_page\",\n  \"order\",\n  \"returns\",\n  \"app\",\n  \"other\",\n] as const;\nexport type PageType = (typeof PAGE_TYPES)[number];\n\nexport const DEVICE_TYPES = [\"desktop\", \"mobile\", \"tablet\", \"other\"] as const;\nexport type DeviceType = (typeof DEVICE_TYPES)[number];\n\n/** Sources a browser may claim, per stream. `business_events` is server-only. */\nexport const SOURCES_FOR_STREAM: Record<Stream, readonly Source[]> = {\n  storefront_events: [\"storefront\", \"sdk_react\", \"script\"],\n  app_events: [\"dashboard\"],\n  business_events: [\"server\"],\n};\n\n// ---------------------------------------------------------------------------\n// Event catalogue\n//\n// Each prop is `<type>[?]`: type is `string`, `number`, `boolean`, `string[]`,\n// `number[]` or `enum:a|b|c`; a trailing `?` makes the prop optional.\n// Money is always integer minor units (`*_minor`, grosze/cents) + `currency`\n// (ISO 4217, upper case). `product_id`, `variant_id` and `order_ref` live in\n// the envelope, never in props. Strings never hold PII (see the prose doc).\n// ---------------------------------------------------------------------------\n\nconst MONEY = { value_minor: \"number\", currency: \"string\" } as const;\n\n/** Browser events from hosted pages (H), bitsnap-react (R) and the script (S). */\nexport const STOREFRONT_EVENT_SPEC = {\n  page_view: { landing: \"boolean\" },\n  product_list_viewed: { list_id: \"string?\", item_count: \"number\" },\n  product_impression: {\n    list_id: \"string?\",\n    product_ids: \"string[]\",\n    positions: \"number[]\",\n  },\n  product_clicked: { list_id: \"string?\", position: \"number?\" },\n  product_view: {\n    price_minor: \"number\",\n    currency: \"string\",\n    availability: \"enum:in_stock|out_of_stock|preorder\",\n  },\n  variant_selected: {},\n  add_to_cart: { qty: \"number\", ...MONEY },\n  remove_from_cart: { qty: \"number\", ...MONEY },\n  cart_opened: { item_count: \"number\", ...MONEY },\n  checkout_started: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    ...MONEY,\n  },\n  checkout_step_completed: {\n    step: \"enum:contact|delivery|invoice|consents\",\n  },\n  checkout_validation_error: { field: \"string\", rule: \"string\" },\n  coupon_applied: { coupon_id: \"string\" },\n  coupon_rejected: { coupon_id: \"string?\", reason: \"string\" },\n  delivery_method_selected: { method: \"string\" },\n  payment_method_selected: { gateway: \"string\", method: \"string\" },\n  payment_submitted: { gateway: \"string\", method: \"string\" },\n  apple_pay_clicked: {},\n  apple_pay_result: { outcome: \"enum:success|fail|cancel\" },\n  payment_returned: {\n    gateway: \"string\",\n    method: \"string?\",\n    outcome: \"enum:success|fail|cancel|pending\",\n    error_code: \"string?\",\n  },\n  availability_signup: {},\n  panel_login: {},\n  panel_order_viewed: {},\n  panel_download: {},\n  return_started: {},\n  return_submitted: { reason_code: \"string\", item_count: \"number\" },\n  course_opened: { course_id: \"string\" },\n  lesson_started: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  lesson_completed: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    position: \"number\",\n  },\n  video_progress: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 25, 50, 75 or 100. */\n    milestone: \"number\",\n  },\n  test_submitted: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    score_bucket: \"enum:0-24|25-49|50-74|75-99|100\",\n  },\n  lesson_rated: {\n    course_id: \"string\",\n    lesson_id: \"string\",\n    /** 1..5. */\n    rating: \"number\",\n  },\n  /** Written by the collector's POST /consent, never sent to POST /e. */\n  consent_updated: {\n    consent_id: \"string\",\n    action: \"enum:accept_all|reject_all|custom|withdraw\",\n    analytics: \"boolean\",\n    marketing: \"boolean\",\n    preferences: \"boolean\",\n    banner_version: \"number\",\n  },\n  /**\n   * Written by the collector's POST /consent (action `shown`), never sent to\n   * POST /e. A banner impression: no consent id, no choice, no visitor.\n   */\n  consent_shown: {\n    banner_version: \"number\",\n  },\n} as const;\n\n/** Merchant behaviour in /app, sent through the same tracker core. */\nexport const APP_EVENT_SPEC = {\n  app_page_view: { route: \"string\", previous_route: \"string?\" },\n  insight_shown: { insight_type: \"string\", rank: \"number\", category: \"string\" },\n  insight_clicked: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  insight_dismissed: {\n    insight_type: \"string\",\n    rank: \"number\",\n    category: \"string\",\n  },\n  checklist_step_viewed: { step: \"string\" },\n  checklist_step_completed: { step: \"string\" },\n  gateway_connect_started: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_completed: { gateway: \"string\", step: \"string?\" },\n  gateway_connect_failed: {\n    gateway: \"string\",\n    step: \"string?\",\n    error_code: \"string?\",\n  },\n  domain_connect_started: {},\n  domain_connect_verified: {},\n  domain_connect_failed: { error_code: \"string?\" },\n  product_created: { product_type: \"string?\" },\n  product_published: { product_type: \"string?\" },\n  product_editor_section_opened: { section: \"string\" },\n  feature_enabled: { feature: \"string\" },\n  stats_viewed: { tab: \"string\" },\n  stats_filter_changed: { tab: \"string\", filter: \"string\" },\n  report_exported: { report: \"string\", format: \"string?\" },\n  search_performed: { result_count: \"number\" },\n  error_shown: { code: \"string\", route: \"string\" },\n  help_opened: { topic: \"string?\" },\n  ai_assistant_used: { topic: \"string?\" },\n  member_invited: { role: \"string\" },\n} as const;\n\nconst TX = {\n  gateway: \"string?\",\n  method: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\nconst SUB = {\n  subscription_id: \"string?\",\n  value_minor: \"number?\",\n  currency: \"string?\",\n} as const;\n\n/**\n * Emitted by instapay only. The lower-cased `EventType` of\n * server/event-system/event.list.ts maps 1:1 to the first group.\n */\nexport const BUSINESS_EVENT_SPEC = {\n  // Mirror of the event bus (EventType.X -> x.toLowerCase()).\n  transaction_created: TX,\n  transaction_success: TX,\n  transaction_failure: { ...TX, error_code: \"string?\" },\n  transaction_expired: TX,\n  transaction_charge: TX,\n  subscription_created: SUB,\n  subscription_paused: SUB,\n  subscription_resumed: SUB,\n  subscription_updated: SUB,\n  subscription_deleted: SUB,\n  subscription_charge_paid: SUB,\n  subscription_charge_failed: { ...SUB, error_code: \"string?\" },\n  subscription_past_due: SUB,\n  subscription_canceled: SUB,\n  access_expires_in_3_days: {},\n  access_expired: {},\n  cart_recovery: { value_minor: \"number?\", currency: \"string?\" },\n  testimonial_email_send: {},\n  testimonial_fulfilled: {},\n  partner_commission_earned: {\n    partner_id: \"string\",\n    commission_minor: \"number\",\n    currency: \"string\",\n  },\n  // Added by the analytics work.\n  checkout_session_created: {\n    item_count: \"number\",\n    checkout_type: \"enum:single|cart|link\",\n    gateway: \"string?\",\n    ...MONEY,\n  },\n  order_paid: {\n    gateway: \"string\",\n    method: \"string?\",\n    item_count: \"number?\",\n    /** UTC date (`YYYY-MM-DD`) the envelope `visitor_id` was computed for. */\n    visitor_day: \"string?\",\n    /** Every line of the order (public hashed product ids), at most 50. */\n    items: \"line_items?\",\n    ...MONEY,\n  },\n  refund_issued: {\n    gateway: \"string?\",\n    reason: \"string?\",\n    ...MONEY,\n  },\n  return_requested: { item_count: \"number\", reason_code: \"string?\" },\n  automation_run_completed: {\n    automation_id: \"string\",\n    status: \"string\",\n    trigger: \"string?\",\n  },\n  notification_sent: { medium: \"string\", template: \"string?\" },\n  notification_failed: {\n    medium: \"string\",\n    template: \"string?\",\n    error_code: \"string?\",\n  },\n  recovery_email_sent: { step: \"number?\" },\n  recovery_link_clicked: {},\n  api_request: {\n    /** Route template without ids or query, e.g. `/api/rpc/public.v1.PublicApiService/ListProducts`. */\n    endpoint: \"string\",\n    /** `X-Bitsnap-Client` value, absent when the caller sent none. */\n    client: \"string?\",\n    status: \"number\",\n    latency_bucket: \"enum:lt_50|lt_200|lt_1000|gte_1000\",\n    /** 1 for errors, <1 for sampled successes; rollups divide counts by it. */\n    sample_rate: \"number\",\n  },\n} as const;\n\nexport const EVENT_SPEC_BY_STREAM = {\n  storefront_events: STOREFRONT_EVENT_SPEC,\n  app_events: APP_EVENT_SPEC,\n  business_events: BUSINESS_EVENT_SPEC,\n} as const;\n\nexport const EVENT_SPEC = {\n  ...STOREFRONT_EVENT_SPEC,\n  ...APP_EVENT_SPEC,\n  ...BUSINESS_EVENT_SPEC,\n} as const;\n\nexport type StorefrontEventName = keyof typeof STOREFRONT_EVENT_SPEC;\nexport type AppEventName = keyof typeof APP_EVENT_SPEC;\nexport type BusinessEventName = keyof typeof BUSINESS_EVENT_SPEC;\nexport type EventName = StorefrontEventName | AppEventName | BusinessEventName;\n\nexport const EVENT_NAMES = {\n  storefront_events: Object.keys(STOREFRONT_EVENT_SPEC) as StorefrontEventName[],\n  app_events: Object.keys(APP_EVENT_SPEC) as AppEventName[],\n  business_events: Object.keys(BUSINESS_EVENT_SPEC) as BusinessEventName[],\n} as const;\n\nexport const STREAM_FOR_EVENT: Record<EventName, Stream> = Object.fromEntries(\n  STREAMS.flatMap((stream) =>\n    (EVENT_NAMES[stream] as string[]).map((name) => [name, stream] as const),\n  ),\n) as Record<EventName, Stream>;\n\n/** True for a catalogue event name; own keys only (`constructor`, `toString` are not events). */\nexport function isEventName(name: unknown): name is EventName {\n  return typeof name === \"string\" && Object.hasOwn(STREAM_FOR_EVENT, name);\n}\n\n// -- props types, derived from the spec ------------------------------------\n\ntype PropPrimitives = {\n  string: string;\n  number: number;\n  boolean: boolean;\n  \"string[]\": string[];\n  \"number[]\": number[];\n  line_items: Array<{ product_id: string; qty: number; value_minor: number }>;\n};\ntype SplitEnum<S extends string> = S extends `${infer H}|${infer R}`\n  ? H | SplitEnum<R>\n  : S;\ntype StripOpt<S extends string> = S extends `${infer B}?` ? B : S;\ntype ResolveProp<S extends string> =\n  StripOpt<S> extends `enum:${infer E}`\n    ? SplitEnum<E>\n    : StripOpt<S> extends keyof PropPrimitives\n      ? PropPrimitives[StripOpt<S>]\n      : never;\ntype PropsFromSpec<S extends Record<string, string>> = {\n  [K in keyof S as S[K] extends `${string}?` ? never : K]: ResolveProp<S[K]>;\n} & {\n  [K in keyof S as S[K] extends `${string}?` ? K : never]?: ResolveProp<S[K]>;\n};\n\nexport type EventProps<E extends EventName> = PropsFromSpec<\n  (typeof EVENT_SPEC)[E]\n>;\n\n// ---------------------------------------------------------------------------\n// Envelope\n// ---------------------------------------------------------------------------\n\n/** Fields the emitter fills in. Everything else is derived by the collector. */\nexport interface ClientEvent<E extends EventName = EventName> {\n  /** UUIDv7, generated by the emitter. Dedupe key. */\n  event_id: string;\n  event: E;\n  /** Client clock, unix ms. */\n  ts: number;\n  schema_version: typeof SCHEMA_VERSION;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  /** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. */\n  sdk?: string | null;\n  /** Random per page load, in memory only. */\n  page_id?: string | null;\n  page_type?: PageType | null;\n  host?: string | null;\n  /** Path without query string and fragment, already run through `sanitizePath`. */\n  path?: string | null;\n  referrer_host?: string | null;\n  utm_source?: string | null;\n  utm_medium?: string | null;\n  utm_campaign?: string | null;\n  utm_content?: string | null;\n  utm_term?: string | null;\n  ref_code?: string | null;\n  product_id?: string | null;\n  variant_id?: string | null;\n  order_ref?: string | null;\n  /** Object on the wire; the collector stores `JSON.stringify(props)`. */\n  props: EventProps<E>;\n  /**\n   * Only honoured for `source: \"dashboard\"`: the hashed Clerk user id computed\n   * by instapay and handed to the dashboard tracker. Ignored for every other\n   * source (the collector computes `visitor_id` itself).\n   */\n  visitor_id?: string | null;\n  /**\n   * The value of the first-party `bs_vid_<projectKey>` cookie (`CLIENT_ID_RE`), sent only\n   * while analytics consent is granted. The collector turns it into a stable\n   * `consentedVisitorId` and never stores it.\n   */\n  client_id?: string | null;\n}\n\n/** One row as stored in Basin (all three streams share this shape). */\nexport interface StoredEvent {\n  event_id: string;\n  event: EventName;\n  /** Unix ms, client clock after `clampTs`. */\n  ts: number;\n  /** Unix ms, collector clock. */\n  received_at: number;\n  schema_version: number;\n  /** Numeric database id. Resolved by the collector, never taken from the client. */\n  project_id: number;\n  env: Env;\n  source: Source;\n  channel: Channel;\n  sdk: string | null;\n  visitor_id: string | null;\n  page_id: string | null;\n  page_type: PageType | null;\n  host: string | null;\n  path: string | null;\n  referrer_host: string | null;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  ref_code: string | null;\n  country: string | null;\n  region: string | null;\n  device_type: DeviceType | null;\n  os: string | null;\n  browser: string | null;\n  product_id: string | null;\n  variant_id: string | null;\n  order_ref: string | null;\n  /** `JSON.stringify` of the props object. */\n  props: string;\n}\n\n/** POST /e body. */\nexport interface IngestBody {\n  /** Project key, see `normalizeProjectKey`. */\n  k: string;\n  events: ClientEvent[];\n}\n\n// ---------------------------------------------------------------------------\n// Consent shapes\n// ---------------------------------------------------------------------------\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\nexport type ConsentTextKey = (typeof CONSENT_TEXT_KEYS)[number];\nexport type ConsentTexts = Record<ConsentTextKey, string>;\n\nexport type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\nexport type ConsentChoice = Record<ConsentCategory, boolean>;\n\nexport type ConsentConfig = {\n  version: number;\n  theme: \"auto\" | \"light\" | \"dark\";\n  accentColor?: string;\n  position: \"bottom\" | \"bottom-left\" | \"bottom-right\";\n  privacyPolicyUrl?: string;\n  categories: { analytics: boolean; marketing: boolean; preferences: boolean };\n  services: Array<{\n    name: string;\n    category: \"analytics\" | \"marketing\" | \"preferences\";\n    cookies?: string[];\n  }>;\n  texts?: Partial<Record<\"pl\" | \"en\", Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** Value of the consent cookie, JSON then base64url. */\nexport interface ConsentCookie {\n  v: 1;\n  /** Random consent id (also sent to POST /consent). */\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Banner version (`ConsentConfig.version`) the visitor answered. */\n  bv: number;\n  c: ConsentChoice;\n}\n\nexport const CONSENT_COOKIE_NAME = \"bitsnap_consent\";\nexport const CONSENT_COOKIE_MAX_AGE_SECONDS = 365 * 24 * 60 * 60;\nexport const CONSENT_ACTIONS = [\n  \"accept_all\",\n  \"reject_all\",\n  \"custom\",\n  \"withdraw\",\n] as const;\nexport type ConsentAction = (typeof CONSENT_ACTIONS)[number];\n/** POST /consent `action` of a banner impression (not a choice, not in `CONSENT_ACTIONS`). */\nexport const CONSENT_SHOWN_ACTION = \"shown\";\n\n/** POST /consent body of a choice (`CONSENT_ACTIONS`). */\nexport interface ConsentLogBody {\n  k: string;\n  /** Same random id as `ConsentCookie.id`. 16 to 64 chars of `[A-Za-z0-9_-]`. */\n  consent_id: string;\n  action: ConsentAction;\n  c: ConsentChoice;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/**\n * POST /consent body of a banner impression: the banner opened by itself\n * because the visitor has no valid choice. Once per page load; no consent id\n * and no choice.\n */\nexport interface ConsentShownBody {\n  k: string;\n  action: typeof CONSENT_SHOWN_ACTION;\n  /** Banner version. */\n  bv: number;\n  /** Hostname the banner ran on. Collector overwrites it with the Origin host. */\n  host: string;\n  /** Unix SECONDS (like the cookie), not ms. */\n  ts: number;\n}\n\n/** Any POST /consent body; discriminate on `action`. */\nexport type ConsentBody = ConsentLogBody | ConsentShownBody;\n\n/** `bitsnap_consent`, or `bitsnap_consent_<projectKey>` for `data-scope=\"project\"`. */\nexport function consentCookieName(scope: \"site\" | \"project\", projectKey?: string): string {\n  if (scope === \"project\") {\n    if (!projectKey) throw new Error(\"projectKey required for project scope\");\n    return `${CONSENT_COOKIE_NAME}_${normalizeProjectKey(projectKey)}`;\n  }\n  return CONSENT_COOKIE_NAME;\n}\n\n/**\n * Decodes the value of a consent cookie (§11.3). Null when it is not base64url\n * JSON of the documented shape (`v` 1 and a boolean per category).\n */\nexport function parseConsentCookie(value: string | null | undefined): ConsentCookie | null {\n  if (!value || !/^[A-Za-z0-9_-]+$/.test(value)) return null;\n  try {\n    const padded = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const bin = atob(padded + \"=\".repeat((4 - (padded.length % 4)) % 4));\n    const json: unknown = JSON.parse(\n      new TextDecoder().decode(Uint8Array.from(bin, (ch) => ch.charCodeAt(0))),\n    );\n    if (!isRecord(json) || json.v !== 1) return null;\n    const c = json.c;\n    if (!isRecord(c)) return null;\n    if (\n      typeof c.analytics !== \"boolean\" ||\n      typeof c.marketing !== \"boolean\" ||\n      typeof c.preferences !== \"boolean\"\n    ) {\n      return null;\n    }\n    return json as unknown as ConsentCookie;\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Project key\n// ---------------------------------------------------------------------------\n\n/**\n * The project key is the existing public hashed project id\n * (`hashId(projectId)` in apps/bitsnap/queries/hashids.ts, the `projectID`\n * of bitsnap-react). A leading `pk_` is accepted and dropped so the\n * documented `pk_…` snippets work too. Returns null when it is not a plausible\n * key (hashids default alphabet).\n */\nexport function normalizeProjectKey(key: string): string | null {\n  const bare = key.startsWith(\"pk_\") ? key.slice(3) : key;\n  return /^[A-Za-z0-9]{1,32}$/.test(bare) ? bare : null;\n}\n\n// ---------------------------------------------------------------------------\n// X-Bitsnap-Client\n// ---------------------------------------------------------------------------\n\nconst CLIENT_RE = /^([a-z][a-z0-9-]{0,39})@(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.+-]{1,20})?)$/;\n\n/** `<package>@<version>`, e.g. `bitsnap-react@1.9.0`. Also the shape of `sdk`. */\nexport function parseClientHeader(\n  value: string | null | undefined,\n): { package: string; version: string } | null {\n  if (!value || value.length > LIMITS.sdk) return null;\n  const m = CLIENT_RE.exec(value);\n  return m ? { package: m[1], version: m[2] } : null;\n}\n\n// ---------------------------------------------------------------------------\n// URL stripping\n// ---------------------------------------------------------------------------\n\nconst MAX_QUERY_VALUE = LIMITS.utm;\n\n/**\n * Campaign/ref value: trimmed, capped, null when empty or when it holds an \"@\"\n * (someone put an email in a tag). The collector runs every client-supplied\n * `utm_*` and `ref_code` through it again.\n */\nexport function cleanValue(v: string | null | undefined, max: number): string | null {\n  if (v == null) return null;\n  const t = v.trim();\n  // An \"@\" means someone put an email in a campaign tag: drop the value.\n  if (t.length === 0 || t.includes(\"@\")) return null;\n  return t.slice(0, max);\n}\n\n/**\n * Path sanitiser: no query, no fragment, capped. Opaque segments (24+ chars of\n * `[A-Za-z0-9_-]`, i.e. tokens in order/panel links) become `:token` and\n * segments containing `@` become `:email`.\n */\nexport function sanitizePath(pathname: string): string {\n  const segments = pathname.split(\"/\").map((seg) => {\n    if (seg.includes(\"@\") || seg.includes(\"%40\")) return \":email\";\n    if (/^[A-Za-z0-9_-]{24,}$/.test(seg)) return \":token\";\n    return seg;\n  });\n  const joined = segments.join(\"/\") || \"/\";\n  return (joined.startsWith(\"/\") ? joined : `/${joined}`).slice(0, LIMITS.path);\n}\n\nexport interface UrlParts {\n  host: string;\n  /** Sanitised path, no query. */\n  path: string;\n  utm_source: string | null;\n  utm_medium: string | null;\n  utm_campaign: string | null;\n  utm_content: string | null;\n  utm_term: string | null;\n  /** The `ref` query parameter. */\n  ref_code: string | null;\n}\n\n/**\n * Parses a URL and keeps only what may leave the browser: host, sanitised path\n * and the `utm_*` and `ref` query parameters. Returns null for non-http(s) or\n * unparseable input. `base` resolves relative URLs.\n */\nexport function parseUrl(url: string, base?: string): UrlParts | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const q = u.searchParams;\n  return {\n    host: u.hostname.toLowerCase().slice(0, LIMITS.host),\n    path: sanitizePath(u.pathname),\n    utm_source: cleanValue(q.get(\"utm_source\"), MAX_QUERY_VALUE),\n    utm_medium: cleanValue(q.get(\"utm_medium\"), MAX_QUERY_VALUE),\n    utm_campaign: cleanValue(q.get(\"utm_campaign\"), MAX_QUERY_VALUE),\n    utm_content: cleanValue(q.get(\"utm_content\"), MAX_QUERY_VALUE),\n    utm_term: cleanValue(q.get(\"utm_term\"), MAX_QUERY_VALUE),\n    ref_code: cleanValue(q.get(\"ref\"), LIMITS.refCode),\n  };\n}\n\n/**\n * Returns the URL with userinfo, fragment and every query parameter removed\n * except `utm_*` and `ref`. Null when `url` is not a usable http(s) URL.\n */\nexport function stripUrl(url: string, base?: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url, base);\n  } catch {\n    return null;\n  }\n  if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n  const keep = new URLSearchParams();\n  for (const [key, value] of u.searchParams) {\n    if (key !== \"ref\" && !key.startsWith(\"utm_\")) continue;\n    const cleaned = cleanValue(value, MAX_QUERY_VALUE);\n    if (cleaned != null) keep.append(key, cleaned);\n  }\n  const qs = keep.toString();\n  return `${u.protocol}//${u.host}${sanitizePath(u.pathname)}${qs ? `?${qs}` : \"\"}`;\n}\n\nconst HOSTNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;\n\n/** A plain DNS hostname (lower-cased), or null: no scheme, port, path, userinfo or \"@\". */\nexport function cleanHostname(\n  v: string | null | undefined,\n  max: number = LIMITS.referrerHost,\n): string | null {\n  if (typeof v !== \"string\") return null;\n  const h = v.trim().toLowerCase();\n  return h.length > 0 && h.length <= max && HOSTNAME_RE.test(h) ? h : null;\n}\n\n/** Public hashed ids (`product_id`, `variant_id`, `order_ref`): URL-safe, at most `LIMITS.id`. */\nexport const ID_RE = /^[A-Za-z0-9_-]{1,64}$/;\n\nexport function cleanId(v: string | null | undefined): string | null {\n  return typeof v === \"string\" && ID_RE.test(v) ? v : null;\n}\n\n/** Host of a referrer URL, or null (also null for non-http(s) referrers). */\nexport function referrerHost(referrer: string | null | undefined): string | null {\n  if (!referrer) return null;\n  try {\n    const u = new URL(referrer);\n    if (u.protocol !== \"https:\" && u.protocol !== \"http:\") return null;\n    return u.hostname.toLowerCase().slice(0, LIMITS.referrerHost);\n  } catch {\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Bot rule\n// ---------------------------------------------------------------------------\n\nconst BOT_UA =\n  /bot\\b|crawl|spider|slurp|facebookexternalhit|bingpreview|headless|phantomjs|lighthouse|pagespeed|gtmetrix|pingdom|uptime|statuscake|monitor|preview|scrapy|curl\\/|wget|python-|go-http-client|java\\/|okhttp|axios|node-fetch|undici|libwww|httpclient|aiohttp|postman|insomnia/i;\n\n/** True when the User-Agent is empty or looks automated. Such events are dropped. */\nexport function isBotUserAgent(ua: string | null | undefined): boolean {\n  if (!ua || ua.trim().length === 0) return true;\n  return BOT_UA.test(ua);\n}\n\n// ---------------------------------------------------------------------------\n// visitor_id\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256(\n  key: Uint8Array,\n  message: string,\n): Promise<Uint8Array> {\n  const cryptoKey = await crypto.subtle.importKey(\n    \"raw\",\n    key,\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  return new Uint8Array(\n    await crypto.subtle.sign(\"HMAC\", cryptoKey, encoder.encode(message)),\n  );\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  return btoa(bin).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** `YYYY-MM-DD` of a unix-ms timestamp in UTC. */\nexport function utcDate(ms: number): string {\n  return new Date(ms).toISOString().slice(0, 10);\n}\n\n/**\n * IP as hashed: lower-case; IPv4 unchanged; IPv4-mapped IPv6 (`::ffff:1.2.3.4`\n * or `::ffff:102:304`) becomes plain IPv4; any other IPv6, including one with\n * an embedded dotted quad (`64:ff9b::1.2.3.4`), is cut to its /64 (first four\n * hextets, canonical form `a:b:c:d::`). Both the Worker and the instapay\n * server MUST call this on the client IP before `computeVisitorId`.\n */\nexport function normalizeIp(ip: string): string {\n  let s = ip.trim().toLowerCase();\n  const zone = s.indexOf(\"%\");\n  if (zone >= 0) s = s.slice(0, zone);\n  if (!s.includes(\":\")) return s; // plain IPv4 (or not an IP at all)\n\n  // Embedded dotted quad in the last 32 bits: turn it into two hextets.\n  const quad = /^(.*:)(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(s);\n  if (quad) {\n    const o = [quad[2], quad[3], quad[4], quad[5]].map(Number);\n    if (o.some((n) => n > 255)) return s;\n    const hex = (hi: number, lo: number) => (hi * 256 + lo).toString(16);\n    s = `${quad[1]}${hex(o[0], o[1])}:${hex(o[2], o[3])}`;\n  }\n\n  const [head, tail] = s.split(\"::\");\n  const headParts = head ? head.split(\":\") : [];\n  const tailParts = tail !== undefined && tail !== \"\" ? tail.split(\":\") : [];\n  const fill =\n    tail === undefined ? 0 : Math.max(0, 8 - headParts.length - tailParts.length);\n  const groups = [...headParts, ...Array<string>(fill).fill(\"0\"), ...tailParts];\n  if (groups.length !== 8) return s;\n  const h = groups.map((g) => Number.parseInt(g, 16) || 0);\n\n  // ::ffff:a.b.c.d in hex form.\n  if (h.slice(0, 5).every((x) => x === 0) && h[5] === 0xffff) {\n    return `${h[6] >> 8}.${h[6] & 255}.${h[7] >> 8}.${h[7] & 255}`;\n  }\n  return `${h\n    .slice(0, 4)\n    .map((g) => g.toString(16))\n    .join(\":\")}::`;\n}\n\n/**\n * Cookieless visitor id, identical in the Worker and the instapay server.\n *\n *   day_secret = HMAC-SHA256(key = utf8(masterSecret), msg = utf8(\"YYYY-MM-DD\"))   // 32 raw bytes\n *   visitor_id = base64url(HMAC-SHA256(key = day_secret, msg = utf8(ip + \"\\n\" + ua + \"\\n\" + projectId))).slice(0, 22)\n *\n * `dateUtc` is the UTC date of the request; `ip` is `normalizeIp(<client IP>)`;\n * `ua` is the raw `User-Agent` request header; `projectId` is the decimal\n * numeric project id.\n */\nexport async function computeVisitorId(\n  masterSecret: string,\n  dateUtc: string,\n  ip: string,\n  ua: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(dateUtc)) {\n    throw new Error(`dateUtc must be YYYY-MM-DD, got ${dateUtc}`);\n  }\n  const daySecret = await hmacSha256(encoder.encode(masterSecret), dateUtc);\n  const mac = await hmacSha256(daySecret, `${ip}\\n${ua}\\n${projectId}`);\n  return base64url(mac).slice(0, 22);\n}\n\n/**\n * The `bs_vid_<projectKey>` cookie name. `projectKey` is the bare public key\n * (like `consentCookieName`): consent is per project, so is the client id.\n */\nexport function clientIdCookieName(projectKey: string): string {\n  return `bs_vid_${projectKey}`;\n}\n\n/** Value of the `bs_vid_<projectKey>` cookie: 16 random bytes, base64url without padding. */\nexport const CLIENT_ID_RE = /^[A-Za-z0-9_-]{22}$/;\n\n/**\n * Stable visitor id of a browser that granted analytics consent (contract §6).\n *\n *   consented_visitor_id = \"p_\" + base64url(HMAC-SHA256(key = utf8(masterSecret),\n *                                  msg = utf8(\"client\\n\" + clientId + \"\\n\" + projectId))).slice(0, 22)\n *\n * 24 characters; daily ids are 22, so `isConsentedVisitorId` tells them apart.\n * `clientId` is the `bs_vid_<projectKey>` cookie value and is never stored.\n */\nexport async function computeConsentedVisitorId(\n  masterSecret: string,\n  clientId: string,\n  projectId: number | string,\n): Promise<string> {\n  if (!CLIENT_ID_RE.test(clientId)) {\n    throw new Error(\"clientId must be 22 base64url characters\");\n  }\n  const mac = await hmacSha256(\n    encoder.encode(masterSecret),\n    `client\\n${clientId}\\n${projectId}`,\n  );\n  return `p_${base64url(mac).slice(0, 22)}`;\n}\n\n/** Whether `visitorId` came from `computeConsentedVisitorId` (not a daily id). */\nexport function isConsentedVisitorId(visitorId: string): boolean {\n  return visitorId.length === 24 && visitorId.startsWith(\"p_\");\n}\n\n// ---------------------------------------------------------------------------\n// Validation\n// ---------------------------------------------------------------------------\n\nexport type ValidationResult = { ok: true } | { ok: false; reason: string };\n\nconst UUID_V7 =\n  /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\nconst PAGE_ID_RE = /^[A-Za-z0-9_-]{8,32}$/;\n/** A letter TLD is required: `bitsnap-react@1.9.0` and `v@1.2` are not addresses. */\nconst EMAIL_LIKE = /[^\\s@]+@[^\\s@]+\\.[A-Za-z]{2,}\\b/;\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null && !Array.isArray(v);\n}\n\nfunction nullableString(\n  e: Record<string, unknown>,\n  key: string,\n  max: number,\n): string | null {\n  const v = e[key];\n  if (v === undefined || v === null) return null;\n  if (typeof v !== \"string\") return `bad_${key}`;\n  return v.length > max ? `too_long_${key}` : null;\n}\n\nfunction checkPropValue(spec: string, value: unknown): boolean {\n  const optional = spec.endsWith(\"?\");\n  const type = optional ? spec.slice(0, -1) : spec;\n  if (type.startsWith(\"enum:\")) {\n    return typeof value === \"string\" && type.slice(5).split(\"|\").includes(value);\n  }\n  switch (type) {\n    case \"string\":\n      return typeof value === \"string\" && value.length <= LIMITS.maxPropString;\n    case \"number\":\n      return typeof value === \"number\" && Number.isFinite(value);\n    case \"boolean\":\n      return typeof value === \"boolean\";\n    case \"string[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"string\" && x.length <= LIMITS.maxPropString)\n      );\n    case \"number[]\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every((x) => typeof x === \"number\" && Number.isFinite(x))\n      );\n    case \"line_items\":\n      return (\n        Array.isArray(value) &&\n        value.length <= LIMITS.maxPropArray &&\n        value.every(\n          (x) =>\n            isRecord(x) &&\n            typeof x.product_id === \"string\" &&\n            ID_RE.test(x.product_id) &&\n            isNonNegativeSafeInteger(x.qty) &&\n            isNonNegativeSafeInteger(x.value_minor),\n        )\n      );\n    default:\n      return false;\n  }\n}\n\nfunction isNonNegativeSafeInteger(value: unknown): boolean {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value >= 0;\n}\n\n/** True when `value` looks like an email address (also exported for the collector's re-checks). */\nexport function looksLikeEmail(value: string): boolean {\n  // A well-formed `<package>@<version>` client id is never an address.\n  if (parseClientHeader(value) !== null) return false;\n  return EMAIL_LIKE.test(value);\n}\n\nfunction hasEmailLike(value: unknown): boolean {\n  if (typeof value === \"string\") return looksLikeEmail(value);\n  if (Array.isArray(value)) return value.some(hasEmailLike);\n  if (isRecord(value)) return Object.values(value).some(hasEmailLike);\n  return false;\n}\n\n/**\n * Validates `props` against the catalogue and returns a copy without keys the\n * catalogue does not know (forward compatibility: a newer SDK adding an\n * optional prop must not get its events dropped by an older collector).\n * Fails on missing required props, wrong types, bad enum values, oversize\n * props and string values that look like an email address.\n */\nexport function sanitizeProps(\n  event: string,\n  props: unknown,\n): { ok: true; props: Record<string, unknown> } | { ok: false; reason: string } {\n  if (!isEventName(event)) return { ok: false, reason: \"unknown_event\" };\n  const spec = (EVENT_SPEC as Record<string, Record<string, string>>)[event];\n  if (!spec) return { ok: false, reason: \"unknown_event\" };\n  if (!isRecord(props)) return { ok: false, reason: \"bad_props\" };\n  const out: Record<string, unknown> = {};\n  for (const [key, type] of Object.entries(spec)) {\n    const value = props[key];\n    if (value === undefined || value === null) {\n      if (!type.endsWith(\"?\")) return { ok: false, reason: `props_missing_${key}` };\n      continue;\n    }\n    if (!checkPropValue(type, value)) return { ok: false, reason: `props_bad_${key}` };\n    if (hasEmailLike(value)) return { ok: false, reason: `props_pii_${key}` };\n    out[key] =\n      type.startsWith(\"line_items\") && Array.isArray(value)\n        ? value.map((x) => ({ product_id: x.product_id, qty: x.qty, value_minor: x.value_minor }))\n        : value;\n  }\n  if (JSON.stringify(out).length > LIMITS.maxPropsChars) {\n    return { ok: false, reason: \"props_too_large\" };\n  }\n  return { ok: true, props: out };\n}\n\nexport interface ValidateOptions {\n  /**\n   * Who sent it. `browser` (default) is POST /e: the event must belong to\n   * `storefront_events` or `app_events`, `consent_updated` and `consent_shown`\n   * are refused (only POST /consent writes them) and `source` must fit the\n   * stream. `server` is the instapay emitter: any stream, `source` must fit the\n   * stream.\n   */\n  from?: \"browser\" | \"server\";\n}\n\n/**\n * Validates the emitter-controlled part of an event: names, types, enums,\n * lengths, the event/source/stream pairing and `props`. It does not check\n * that `ts` is plausible (use `clampTs`), origins or project keys.\n */\nexport function validateEnvelope(\n  e: unknown,\n  options: ValidateOptions = {},\n): ValidationResult {\n  const from = options.from ?? \"browser\";\n  const fail = (reason: string): ValidationResult => ({ ok: false, reason });\n  if (!isRecord(e)) return fail(\"not_object\");\n\n  if (typeof e.event_id !== \"string\" || !UUID_V7.test(e.event_id)) {\n    return fail(\"bad_event_id\");\n  }\n  if (!isEventName(e.event)) return fail(\"unknown_event\");\n  const stream = STREAM_FOR_EVENT[e.event as EventName];\n  if (from === \"browser\") {\n    if (stream === \"business_events\") return fail(\"server_only_event\");\n    if (e.event === \"consent_updated\" || e.event === \"consent_shown\") {\n      return fail(\"consent_via_consent_endpoint\");\n    }\n  }\n  if (\n    typeof e.ts !== \"number\" ||\n    !Number.isInteger(e.ts) ||\n    e.ts <= 0 ||\n    e.ts > 4e12\n  ) {\n    return fail(\"bad_ts\");\n  }\n  if (e.schema_version !== SCHEMA_VERSION) return fail(\"bad_schema_version\");\n  if (!ENVS.includes(e.env as Env)) return fail(\"bad_env\");\n  if (!SOURCES.includes(e.source as Source)) return fail(\"bad_source\");\n  if (!SOURCES_FOR_STREAM[stream].includes(e.source as Source)) {\n    return fail(\"source_not_allowed_for_event\");\n  }\n  if (!CHANNELS.includes(e.channel as Channel)) return fail(\"bad_channel\");\n\n  if (e.sdk != null) {\n    if (typeof e.sdk !== \"string\" || parseClientHeader(e.sdk) === null) {\n      return fail(\"bad_sdk\");\n    }\n  }\n  if (e.page_id != null) {\n    if (typeof e.page_id !== \"string\" || !PAGE_ID_RE.test(e.page_id)) {\n      return fail(\"bad_page_id\");\n    }\n  }\n  if (e.page_type != null && !PAGE_TYPES.includes(e.page_type as PageType)) {\n    return fail(\"bad_page_type\");\n  }\n  if (from === \"browser\") {\n    if (typeof e.host !== \"string\" || e.host.length === 0) return fail(\"bad_host\");\n    if (typeof e.path !== \"string\" || !e.path.startsWith(\"/\")) return fail(\"bad_path\");\n  }\n  if (typeof e.path === \"string\" && e.path.includes(\"?\")) return fail(\"path_has_query\");\n  if (typeof e.path === \"string\" && e.path.includes(\"#\")) return fail(\"path_has_fragment\");\n\n  const lengths: Array<[string, number]> = [\n    [\"host\", LIMITS.host],\n    [\"path\", LIMITS.path],\n    [\"referrer_host\", LIMITS.referrerHost],\n    [\"utm_source\", LIMITS.utm],\n    [\"utm_medium\", LIMITS.utm],\n    [\"utm_campaign\", LIMITS.utm],\n    [\"utm_content\", LIMITS.utm],\n    [\"utm_term\", LIMITS.utm],\n    [\"ref_code\", LIMITS.refCode],\n    [\"product_id\", LIMITS.id],\n    [\"variant_id\", LIMITS.id],\n    [\"order_ref\", LIMITS.id],\n  ];\n  for (const [key, max] of lengths) {\n    const problem = nullableString(e, key, max);\n    if (problem) return fail(problem);\n  }\n  if (e.visitor_id != null) {\n    if (typeof e.visitor_id !== \"string\" || !/^[A-Za-z0-9_-]{22}$/.test(e.visitor_id)) {\n      return fail(\"bad_visitor_id\");\n    }\n  }\n  if (e.client_id != null) {\n    if (typeof e.client_id !== \"string\" || !CLIENT_ID_RE.test(e.client_id)) {\n      return fail(\"bad_client_id\");\n    }\n  }\n\n  const props = sanitizeProps(e.event, e.props);\n  if (!props.ok) return fail(props.reason);\n  return { ok: true };\n}\n\n/** Client `ts` as stored: replaced by `receivedAt` when more than 24 h away from it. */\nexport function clampTs(ts: number, receivedAt: number): number {\n  return Math.abs(ts - receivedAt) > LIMITS.tsSkewMs ? receivedAt : ts;\n}\n"]}

package/dist/chunk-X3LVYIJR.mjs

@@ -0,0 +1,2 @@
+import{a as s}from"./chunk-2UDAB2C5.mjs";var r="X-Bitsnap-Client",o=`bitsnap-react@${s}`,i="bs_client",l={[r]:o},m=t=>e=>(e.header.set(r,o),t(e));function _(t){let e=t.indexOf("#"),n=e===-1?t:t.slice(0,e),c=e===-1?"":t.slice(e),p=n.includes("?")?/[?&]$/.test(n)?"":"&":"?";return`${n}${p}${i}=${encodeURIComponent(o)}${c}`}var a="https://bitsnap.pl",E=a;function H(t){console.log("setCustomHost",t),E=t}export{l as a,m as b,_ as c,a as d,E as e,H as f};
+//# sourceMappingURL=chunk-X3LVYIJR.mjs.map

package/dist/chunk-X3LVYIJR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/client-header.ts","../src/components/checkout/constants.ts"],"sourcesContent":["import type { Interceptor } from \"@connectrpc/connect\";\nimport { SDK_VERSION } from \"../version\";\n\nexport const CLIENT_HEADER_NAME = \"X-Bitsnap-Client\";\nexport const CLIENT_HEADER_VALUE = `bitsnap-react@${SDK_VERSION}`;\n\nexport const CLIENT_QUERY_PARAM = \"bs_client\";\n\n/**\n * Spread into the `headers` of a fetch that already triggers a CORS preflight\n * (JSON POST, Connect RPC). Never use it on a simple cross-origin GET: the\n * custom header would force a preflight that older servers and merchant\n * proxies do not allow. Use `withClientParam` there.\n */\nexport const clientHeaders: Record<string, string> = {\n  [CLIENT_HEADER_NAME]: CLIENT_HEADER_VALUE,\n};\n\n/** Connect interceptor adding the client header to every RPC. */\nexport const clientHeaderInterceptor: Interceptor = (next) => (req) => {\n  req.header.set(CLIENT_HEADER_NAME, CLIENT_HEADER_VALUE);\n  return next(req);\n};\n\n/** Adds `bs_client=<pkg>@<ver>` to a URL, for simple GETs that must stay preflight-free. */\nexport function withClientParam(url: string): string {\n  const hash = url.indexOf(\"#\");\n  const base = hash === -1 ? url : url.slice(0, hash);\n  const fragment = hash === -1 ? \"\" : url.slice(hash);\n  const separator = base.includes(\"?\") ? (/[?&]$/.test(base) ? \"\" : \"&\") : \"?\";\n  return `${base}${separator}${CLIENT_QUERY_PARAM}=${encodeURIComponent(CLIENT_HEADER_VALUE)}${fragment}`;\n}\n","export const DEFAULT_HOST = \"https://bitsnap.pl\";\nexport let HOST = DEFAULT_HOST;\n\nexport function setCustomHost(host: string) {\n  console.log(\"setCustomHost\", host);\n  HOST = host;\n}\n"],"mappings":"yCAGO,IAAMA,EAAqB,mBACrBC,EAAsB,iBAAiBC,CAAW,GAElDC,EAAqB,YAQrBC,EAAwC,CACnD,CAACJ,CAAkB,EAAGC,CACxB,EAGaI,EAAwCC,GAAUC,IAC7DA,EAAI,OAAO,IAAIP,EAAoBC,CAAmB,EAC/CK,EAAKC,CAAG,GAIV,SAASC,EAAgBC,EAAqB,CACnD,IAAMC,EAAOD,EAAI,QAAQ,GAAG,EACtBE,EAAOD,IAAS,GAAKD,EAAMA,EAAI,MAAM,EAAGC,CAAI,EAC5CE,EAAWF,IAAS,GAAK,GAAKD,EAAI,MAAMC,CAAI,EAC5CG,EAAYF,EAAK,SAAS,GAAG,EAAK,QAAQ,KAAKA,CAAI,EAAI,GAAK,IAAO,IACzE,MAAO,GAAGA,CAAI,GAAGE,CAAS,GAAGV,CAAkB,IAAI,mBAAmBF,CAAmB,CAAC,GAAGW,CAAQ,EACvG,CC/BO,IAAME,EAAe,qBACjBC,EAAOD,EAEX,SAASE,EAAcC,EAAc,CAC1C,QAAQ,IAAI,gBAAiBA,CAAI,EACjCF,EAAOE,CACT","names":["CLIENT_HEADER_NAME","CLIENT_HEADER_VALUE","SDK_VERSION","CLIENT_QUERY_PARAM","clientHeaders","clientHeaderInterceptor","next","req","withClientParam","url","hash","base","fragment","separator","DEFAULT_HOST","HOST","setCustomHost","host"]}

package/dist/consent.js.map

@@ -1 +1 @@
-{"version":3,"sources":["/private/tmp/bsr-src/dist/consent.js","../src/consent/react.tsx","../src/consent/core/types.ts","../src/consent/core/activate.ts","../src/consent/core/config.ts","../src/consent/core/styles.ts","../src/consent/core/ui.ts"],"names":["CONSENT_CATEGORIES","SCRIPT_SELECTOR","FRAME_SELECTOR","allowed","c","category","settled","script","resolve","run","doc","placeholder","name","value","external","loaded","activateScripts","activated","gate","loading","inline","frame","src","DEFAULT_API_HOST","DEFAULT_COLLECT_HOST","defaultConfig","THEMES","POSITIONS","HEX_COLOR","safeColor","safeUrl","url","cleanServices","services","item","cookie","mergeConfig","layers","result","layer","accent","privacy","fetchRemoteConfig","apiHost","key","timeoutMs","controller","timer","response"],"mappings":"AAAA,uuBAAwG,+BAA4B,8BCA1E,ICU7CA,CAAAA,CAAiD,CAC5D,WAAA,CACA,WAAA,CACA,aACF,CAAA,CCZA,IAAMC,EAAAA,CAAkB,4EAAA,CAClBC,EAAAA,CAAiB,wCAAA,CAEjBC,EAAAA,CAAU,CAACC,CAAAA,CAAmBC,CAAAA,CAAAA,EACjCL,CAAAA,CAAyC,QAAA,kBAASK,CAAAA,SAAY,IAAE,CAAA,EACjED,CAAAA,CAAEC,CAAgC,CAAA,CAGpC,SAASC,EAAAA,CAAQC,CAAAA,CAA0C,CACzD,OAAO,IAAI,OAAA,CAASC,CAAAA,EAAY,CAC9BD,CAAAA,CAAO,gBAAA,CAAiB,MAAA,CAAQ,CAAA,CAAA,EAAMC,CAAAA,CAAQ,CAAA,CAAG,CAAE,IAAA,CAAM,CAAA,CAAK,CAAC,CAAA,CAC/DD,CAAAA,CAAO,gBAAA,CAAiB,OAAA,CAAS,CAAA,CAAA,EAAMC,CAAAA,CAAQ,CAAA,CAAG,CAAE,IAAA,CAAM,CAAA,CAAK,CAAC,CAClE,CAAC,CACH,CAGA,SAASC,EAAAA,CAAIC,CAAAA,CAAeC,CAAAA,CAA2D,CACrF,IAAMJ,CAAAA,CAASG,CAAAA,CAAI,aAAA,CAAc,QAAQ,CAAA,CACzC,GAAA,CAAA,GAAW,CAAE,IAAA,CAAAE,CAAAA,CAAM,KAAA,CAAAC,CAAM,CAAA,GAAK,KAAA,CAAM,IAAA,CAAKF,CAAAA,CAAY,UAAU,CAAA,CACzDC,CAAAA,GAAS,MAAA,EAAUA,CAAAA,GAAS,qBAAA,EAAA,CAC5BA,CAAAA,GAAS,WAAA,CAEPC,CAAAA,GAAU,QAAA,EAAUN,CAAAA,CAAO,YAAA,CAAa,MAAA,CAAQ,QAAQ,CAAA,CACnDK,CAAAA,GAAS,UAAA,CAAYL,CAAAA,CAAO,YAAA,CAAa,KAAA,CAAOM,CAAK,CAAA,CAC3DN,CAAAA,CAAO,YAAA,CAAaK,CAAAA,CAAMC,CAAK,CAAA,CAAA,CAElCF,CAAAA,CAAY,KAAA,EAAA,CAAOJ,CAAAA,CAAO,KAAA,CAAQI,CAAAA,CAAY,KAAA,CAAA,CAClD,IAAMG,CAAAA,CAAWP,CAAAA,CAAO,YAAA,CAAa,KAAK,CAAA,CACtCO,CAAAA,CAEGH,CAAAA,CAAY,YAAA,CAAa,OAAO,CAAA,EAAA,CAAGJ,CAAAA,CAAO,KAAA,CAAQ,CAAA,CAAA,CAAA,CAEvDA,CAAAA,CAAO,IAAA,CAAOI,CAAAA,CAAY,IAAA,CAE5B,IAAMI,CAAAA,CAASD,CAAAA,CAAWR,EAAAA,CAAQC,CAAM,CAAA,CAAI,KAAA,CAAA,CAC5C,uBAAAI,CAAAA,qBAAY,UAAA,6BAAY,YAAA,mBAAaJ,CAAAA,CAAQI,CAAW,GAAA,CACjDI,CACT,CAUO,SAASC,EAAAA,CAAgBN,CAAAA,CAAeN,CAAAA,CAA2B,CACxE,IAAIa,CAAAA,CAAY,CAAA,CAChB,GAAI,CAEF,IAAIC,CAAAA,CAA6B,IAAA,CAE7BC,CAAAA,CAA2B,CAAC,CAAA,CAChCT,CAAAA,CAAI,gBAAA,CAAoCT,EAAe,CAAA,CAAE,OAAA,CAASU,CAAAA,EAAgB,CAChF,EAAA,CAAI,CAACR,EAAAA,CAAQC,CAAAA,CAAGO,CAAAA,CAAY,YAAA,CAAa,sBAAsB,CAAC,CAAA,CAAG,MAAA,CACnEM,CAAAA,EAAAA,CACA,IAAMG,CAAAA,CAAS,CAACT,CAAAA,CAAY,YAAA,CAAa,UAAU,CAAA,EAAK,CAACA,CAAAA,CAAY,YAAA,CAAa,KAAK,CAAA,CACvF,EAAA,CAAIO,CAAAA,EAASE,CAAAA,EAAUD,CAAAA,CAAQ,MAAA,CAAS,CAAA,CAAI,CAE1CR,CAAAA,CAAY,YAAA,CAAa,qBAAA,CAAuB,EAAE,CAAA,CAClDO,CAAAA,CAAAA,kBAAQA,CAAAA,SAAQ,OAAA,CAAQ,GAAA,CAAIC,CAAO,CAAA,CAAE,IAAA,CAAK,CAAA,CAAA,EAAM,CAAC,CAAC,GAAA,CAAA,CAAG,IAAA,CAAK,CAAA,CAAA,EAAM,CAC9D,GAAI,CACF,OAAOV,EAAAA,CAAIC,CAAAA,CAAKC,CAAW,CAC7B,CAAA,UAAQ,CAER,CACF,CAAC,CAAA,CACDQ,CAAAA,CAAU,CAAC,CAAA,CACX,MACF,CACA,IAAMJ,CAAAA,CAASN,EAAAA,CAAIC,CAAAA,CAAKC,CAAW,CAAA,CAC/BI,CAAAA,EAAQI,CAAAA,CAAQ,IAAA,CAAKJ,CAAM,CACjC,CAAC,CAAA,CACDL,CAAAA,CAAI,gBAAA,CAAoCR,EAAc,CAAA,CAAE,OAAA,CAASmB,CAAAA,EAAU,CACzE,EAAA,CAAI,CAAClB,EAAAA,CAAQC,CAAAA,CAAGiB,CAAAA,CAAM,YAAA,CAAa,sBAAsB,CAAC,CAAA,CAAG,MAAA,CAC7D,IAAMC,CAAAA,CAAMD,CAAAA,CAAM,YAAA,CAAa,UAAU,CAAA,CACrCC,CAAAA,EAAOD,CAAAA,CAAM,YAAA,CAAa,KAAK,CAAA,GAAMC,CAAAA,EAAAA,CACvCD,CAAAA,CAAM,YAAA,CAAa,KAAA,CAAOC,CAAG,CAAA,CAC7BD,CAAAA,CAAM,eAAA,CAAgB,UAAU,CAAA,CAChCJ,CAAAA,EAAAA,CAEJ,CAAC,CACH,CAAA,UAAQ,CAER,CACA,OAAOA,CACT,CClFO,IAAMM,EAAAA,CAAmB,oBAAA,CACnBC,EAAAA,CAAuB,4BAAA,CAE7B,SAASC,EAAAA,CAAAA,CAA+B,CAC7C,MAAO,CACL,OAAA,CAAS,CAAA,CACT,KAAA,CAAO,MAAA,CACP,QAAA,CAAU,QAAA,CACV,UAAA,CAAY,CAAE,SAAA,CAAW,CAAA,CAAA,CAAM,SAAA,CAAW,CAAA,CAAA,CAAM,WAAA,CAAa,CAAA,CAAM,CAAA,CACnE,QAAA,CAAU,CAAC,CAAA,CACX,SAAA,CAAW,CAAA,CACb,CACF,CAEA,IAAMC,EAAAA,CAAS,CAAC,MAAA,CAAQ,OAAA,CAAS,MAAM,CAAA,CACjCC,EAAAA,CAAY,CAAC,QAAA,CAAU,aAAA,CAAe,cAAc,CAAA,CAEpDC,EAAAA,CAAY,iCAAA,CAEX,SAASC,EAAAA,CAAUhB,CAAAA,CAAoC,CAC5D,OAAO,OAAOA,CAAAA,EAAU,QAAA,EAAYe,EAAAA,CAAU,IAAA,CAAKf,CAAAA,CAAM,IAAA,CAAK,CAAC,CAAA,CAC3DA,CAAAA,CAAM,IAAA,CAAK,CAAA,CACX,KAAA,CACN,CAGO,SAASiB,EAAAA,CAAQjB,CAAAA,CAAoC,CAC1D,EAAA,CAAI,OAAOA,CAAAA,EAAU,QAAA,CAAU,MAAA,CAC/B,IAAMkB,CAAAA,CAAMlB,CAAAA,CAAM,IAAA,CAAK,CAAA,CACvB,MAAO,iCAAA,CAAkC,IAAA,CAAKkB,CAAG,CAAA,CAAIA,CAAAA,CAAM,KAAA,CAC7D,CAEA,SAASC,EAAAA,CAAcnB,CAAAA,CAAkC,CACvD,EAAA,CAAI,CAAC,KAAA,CAAM,OAAA,CAAQA,CAAK,CAAA,CAAG,MAAO,CAAC,CAAA,CACnC,IAAMoB,CAAAA,CAA6B,CAAC,CAAA,CACpC,GAAA,CAAA,IAAWC,EAAAA,GAAQrB,CAAAA,CAEfqB,CAAAA,EACA,OAAOA,CAAAA,CAAK,IAAA,EAAS,QAAA,EACpBlC,CAAAA,CAAyC,QAAA,CAASkC,CAAAA,CAAK,QAAQ,CAAA,EAEhED,CAAAA,CAAS,IAAA,CAAK,CACZ,IAAA,CAAMC,CAAAA,CAAK,IAAA,CACX,QAAA,CAAUA,CAAAA,CAAK,QAAA,CACf,OAAA,CAAS,KAAA,CAAM,OAAA,CAAQA,CAAAA,CAAK,OAAO,CAAA,CAC/BA,CAAAA,CAAK,OAAA,CAAQ,MAAA,CAAQC,CAAAA,EAAoB,OAAOA,CAAAA,EAAW,QAAQ,CAAA,CACnE,KAAA,CACN,CAAC,CAAA,CAGL,OAAOF,CACT,CAGO,SAASG,CAAAA,CAAAA,GACXC,CAAAA,CACY,CACf,IAAMC,CAAAA,CAASb,EAAAA,CAAc,CAAA,CAC7B,GAAA,CAAA,IAAWc,EAAAA,GAASF,CAAAA,CAAQ,CAC1B,EAAA,CAAI,CAACE,CAAAA,EAAS,OAAOA,CAAAA,EAAU,QAAA,CAAU,QAAA,CACrC,OAAOA,CAAAA,CAAM,OAAA,EAAY,QAAA,EAAYA,CAAAA,CAAM,OAAA,EAAW,CAAA,EAAA,CACxDD,CAAAA,CAAO,OAAA,CAAU,IAAA,CAAK,KAAA,CAAMC,CAAAA,CAAM,OAAO,CAAA,CAAA,CAEvCb,EAAAA,CAAO,QAAA,CAASa,CAAAA,CAAM,KAAe,CAAA,EAAA,CAAGD,CAAAA,CAAO,KAAA,CAAQC,CAAAA,CAAM,KAAA,CAAA,CAC7DZ,EAAAA,CAAU,QAAA,CAASY,CAAAA,CAAM,QAAkB,CAAA,EAAA,CAAGD,CAAAA,CAAO,QAAA,CAAWC,CAAAA,CAAM,QAAA,CAAA,CAC1E,IAAMC,CAAAA,CAASX,EAAAA,CAAUU,CAAAA,CAAM,WAAW,CAAA,CACtCC,CAAAA,EAAAA,CAAQF,CAAAA,CAAO,WAAA,CAAcE,CAAAA,CAAAA,CACjC,IAAMC,CAAAA,CAAUX,EAAAA,CAAQS,CAAAA,CAAM,gBAAgB,CAAA,CAE9C,EAAA,CADIE,CAAAA,EAAAA,CAASH,CAAAA,CAAO,gBAAA,CAAmBG,CAAAA,CAAAA,CACnCF,CAAAA,CAAM,UAAA,EAAc,OAAOA,CAAAA,CAAM,UAAA,EAAe,QAAA,CAClD,GAAA,CAAA,IAAWlC,EAAAA,GAAYL,CAAAA,CACjB,OAAOuC,CAAAA,CAAM,UAAA,CAAWlC,CAAQ,CAAA,EAAM,SAAA,EAAA,CACxCiC,CAAAA,CAAO,UAAA,CAAWjC,CAAQ,CAAA,CAAIkC,CAAAA,CAAM,UAAA,CAAWlC,CAAQ,CAAA,CAAA,CAIzDkC,CAAAA,CAAM,QAAA,GAAa,KAAA,CAAA,EAAA,CAAWD,CAAAA,CAAO,QAAA,CAAWN,EAAAA,CAAcO,CAAAA,CAAM,QAAQ,CAAA,CAAA,CAC5EA,CAAAA,CAAM,KAAA,EAAS,OAAOA,CAAAA,CAAM,KAAA,EAAU,QAAA,EAAA,CAAUD,CAAAA,CAAO,KAAA,CAAQC,CAAAA,CAAM,KAAA,CAC3E,CACA,OAAOD,CACT,CAmBA,MAAA,SAAsBI,EAAAA,CACpBC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CAAY,GAAA,CACyB,CACrC,EAAA,CAAI,OAAO,KAAA,EAAU,UAAA,CAAY,OAAO,IAAA,CACxC,IAAMC,CAAAA,CAAa,OAAO,eAAA,EAAoB,UAAA,CAAa,IAAI,eAAA,CAAoB,KAAA,CAAA,CAC7EC,CAAAA,CAAQ,UAAA,CAAW,CAAA,CAAA,kBAAMD,CAAAA,6BAAY,KAAA,mBAAM,GAAA,CAAGD,CAAS,CAAA,CAC7D,GAAI,CACF,IAAMG,CAAAA,CAAW,MAAM,KAAA,CACrB,CAAA,EAAA;ACvFgB;AAAA;AAAA;AAIK,MAAA;AACgB,uBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;ACoLrB","file":"/private/tmp/bsr-src/dist/consent.js","sourcesContent":[null,"import { useCallback, useRef, useSyncExternalStore } from \"react\";\nimport { useIsomorphicLayoutEffect } from \"../lib/isomorphic-layout-effect\";\nimport { createConsent } from \"./core/controller\";\nimport type {\n  BitsnapConsentApi,\n  ConsentChoices,\n  ConsentConfig,\n  ConsentOptions,\n  ConsentState,\n} from \"./core/types\";\n\ndeclare global {\n  interface Window {\n    BitsnapConsent?: BitsnapConsentApi;\n  }\n}\n\nexport type BitsnapConsentProps = {\n  /** Public project key: loads the project's banner config and logs choices. */\n  projectKey?: string;\n  theme?: ConsentOptions[\"theme\"];\n  locale?: ConsentOptions[\"locale\"];\n  position?: ConsentOptions[\"position\"];\n  privacyPolicyUrl?: string;\n  /** `project` keeps the consent cookie per project key. */\n  scope?: ConsentOptions[\"scope\"];\n  apiHost?: string;\n  collectHost?: string;\n  /** Local config, merged over the project config. */\n  config?: Partial<ConsentConfig>;\n  reloadOnWithdraw?: boolean;\n  /** Google Consent Mode v2: `auto` (default) is on when `gtag` or `dataLayer` already exist. */\n  gcm?: ConsentOptions[\"gcm\"];\n  /** Categories offered when no remote config is loaded. */\n  categories?: ConsentOptions[\"categories\"];\n  /** Dashboard preview: shows the banner from the local options only; touches no cookie. */\n  preview?: boolean;\n  /** Replaces the banner title. */\n  title?: string;\n  /** Replaces the banner description. */\n  description?: string;\n};\n\n/** Mounts Bitsnap Consent on the page. Renders nothing itself (the banner lives in a Shadow DOM). */\nexport function BitsnapConsent(props: BitsnapConsentProps): null {\n  const {\n    projectKey, theme, locale, position, privacyPolicyUrl, scope, apiHost, collectHost, reloadOnWithdraw,\n    gcm, preview, title, description,\n  } = props;\n  const configKey = JSON.stringify(props.config ?? null);\n  const configRef = useRef(props.config);\n  configRef.current = props.config;\n  const categoriesKey = JSON.stringify(props.categories ?? null);\n  const categoriesRef = useRef(props.categories);\n  categoriesRef.current = props.categories;\n\n  // A layout effect: the page's passive effects (first events, tracker) must find the API already there.\n  useIsomorphicLayoutEffect(() => {\n    // A banner from the script tag or another instance already runs on this page.\n    if (window.BitsnapConsent) return;\n    const api = createConsent({\n      projectKey,\n      theme,\n      locale,\n      position,\n      privacyPolicyUrl,\n      scope,\n      apiHost,\n      collectHost,\n      reloadOnWithdraw,\n      gcm,\n      preview,\n      title,\n      description,\n      categories: categoriesRef.current,\n      config: configRef.current,\n    });\n    window.BitsnapConsent = api;\n    return () => {\n      api.destroy();\n      if (window.BitsnapConsent === api) delete window.BitsnapConsent;\n    };\n  }, [\n    projectKey, theme, locale, position, privacyPolicyUrl, scope, apiHost, collectHost, reloadOnWithdraw,\n    gcm, preview, title, description, categoriesKey, configKey,\n  ]);\n\n  return null;\n}\n\nlet lastKey = \"null\";\nlet lastState: ConsentState | null = null;\n\nfunction getSnapshot(): ConsentState | null {\n  const current = typeof window === \"undefined\" ? null : (window.BitsnapConsent?.get() ?? null);\n  const key = JSON.stringify(current);\n  if (key !== lastKey) {\n    lastKey = key;\n    lastState = current;\n  }\n  return lastState;\n}\n\nfunction subscribe(onChange: () => void): () => void {\n  window.addEventListener(\"bitsnap:consent\", onChange);\n  window.addEventListener(\"bitsnap:consent:ready\", onChange);\n  return () => {\n    window.removeEventListener(\"bitsnap:consent\", onChange);\n    window.removeEventListener(\"bitsnap:consent:ready\", onChange);\n  };\n}\n\nexport type UseConsent = {\n  /** The stored choice, or `null` while there is none (or on the server). */\n  consent: ConsentState | null;\n  /** `true` once the visitor has made a choice that is still valid. */\n  decided: boolean;\n  open: () => void;\n  accept: (categories?: Partial<ConsentChoices>) => void;\n  acceptAll: () => void;\n  rejectAll: () => void;\n  reset: () => void;\n};\n\n/** Current consent state of the page, kept up to date as the visitor chooses. */\nexport function useConsent(): UseConsent {\n  const consent = useSyncExternalStore(subscribe, getSnapshot, () => null);\n  const open = useCallback(() => window.BitsnapConsent?.open(), []);\n  const accept = useCallback((categories?: Partial<ConsentChoices>) => window.BitsnapConsent?.accept(categories), []);\n  const acceptAll = useCallback(() => window.BitsnapConsent?.acceptAll(), []);\n  const rejectAll = useCallback(() => window.BitsnapConsent?.rejectAll(), []);\n  const reset = useCallback(() => window.BitsnapConsent?.reset(), []);\n  return { consent, decided: consent !== null, open, accept, acceptAll, rejectAll, reset };\n}\n","export type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\n\nexport type ConsentChoices = Record<ConsentCategory, boolean>;\n\nexport type ConsentTheme = \"auto\" | \"light\" | \"dark\";\n\nexport type ConsentPosition = \"bottom\" | \"bottom-left\" | \"bottom-right\";\n\nexport type ConsentLocale = \"pl\" | \"en\";\n\nexport const CONSENT_CATEGORIES: readonly ConsentCategory[] = [\n  \"analytics\",\n  \"marketing\",\n  \"preferences\",\n];\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\n\nexport type ConsentTexts = Record<(typeof CONSENT_TEXT_KEYS)[number], string>;\n\nexport type ConsentService = {\n  name: string;\n  category: ConsentCategory;\n  /** Cookies to delete (best effort) when the category is withdrawn. A trailing `*` matches a prefix. */\n  cookies?: string[];\n};\n\nexport type ConsentConfig = {\n  /** Banner version. A stored choice with a lower `bv` makes the banner ask again. */\n  version: number;\n  theme: ConsentTheme;\n  accentColor?: string;\n  position: ConsentPosition;\n  privacyPolicyUrl?: string;\n  categories: ConsentChoices;\n  services: ConsentService[];\n  texts?: Partial<Record<ConsentLocale, Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** What the consent cookie holds, and what `get()` returns. */\nexport type ConsentState = {\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Version of the banner the choice was made on. */\n  bv: number;\n  c: ConsentChoices;\n};\n\nexport type ConsentAction =\n  | \"accept_all\"\n  | \"reject_all\"\n  | \"custom\"\n  | \"withdraw\";\n\n/** `detail` of `bitsnap:consent` and the argument of `on('change')`. */\nexport type ConsentChangeDetail = ConsentState & {\n  /** `reset` when the visitor's stored choice was cleared (`get()` is `null` then). */\n  action: ConsentAction | \"reset\";\n};\n\nexport type ConsentOptions = {\n  /** Public project key. Enables the remote config and the consent log. */\n  projectKey?: string;\n  theme?: ConsentTheme;\n  locale?: \"auto\" | ConsentLocale;\n  position?: ConsentPosition;\n  privacyPolicyUrl?: string;\n  /** `project` keeps one cookie per project key (`bitsnap_consent_<key>`). */\n  scope?: \"global\" | \"project\";\n  apiHost?: string;\n  collectHost?: string;\n  /** Google Consent Mode v2. `auto` is on when `gtag` or `dataLayer` already exist. */\n  gcm?: \"auto\" | \"on\" | \"off\";\n  /** Local overrides, merged over the defaults and the remote config. */\n  config?: Partial<ConsentConfig>;\n  /** Categories used when no remote config is loaded. */\n  categories?: Partial<ConsentChoices>;\n  reloadOnWithdraw?: boolean;\n  /**\n   * Dashboard preview: shows the banner at once from the local options, never\n   * reads or writes the cookie, loads no remote config, sends no consent log,\n   * and the buttons only close the banner.\n   */\n  preview?: boolean;\n  /** Replaces the banner title (current locale, non-empty values only). */\n  title?: string;\n  /** Replaces the banner description (current locale, non-empty values only). */\n  description?: string;\n};\n\nexport type BitsnapConsentApi = {\n  /**\n   * Whose choice this banner holds: `project` keeps one cookie per project key\n   * (`bitsnap_consent_<key>`), `global` the site-wide `bitsnap_consent`.\n   */\n  readonly scope: \"global\" | \"project\";\n  /** The bare public project key the banner was started with, if any (`pk_` stripped). */\n  readonly projectKey: string | null;\n  get(): ConsentState | null;\n  /**\n   * `true` when the visitor refused `category`, also in a choice made on an older banner\n   * version (which `get()` no longer returns) that they have not answered again yet.\n   */\n  denied(category: ConsentCategory): boolean;\n  on(event: \"change\", fn: (detail: ConsentChangeDetail) => void): () => void;\n  open(): void;\n  close(): void;\n  accept(categories?: Partial<ConsentChoices>): void;\n  acceptAll(): void;\n  rejectAll(): void;\n  reset(): void;\n  /** Resolves with the stored choice (or `null`) once config and stored choice are applied. */\n  ready: Promise<ConsentState | null>;\n  destroy(): void;\n};\n","import { CONSENT_CATEGORIES, type ConsentChoices } from \"./types\";\n\nconst SCRIPT_SELECTOR = 'script[type=\"text/plain\"][data-bitsnap-consent]:not([data-bitsnap-queued])';\nconst FRAME_SELECTOR = \"iframe[data-bitsnap-consent][data-src]\";\n\nconst allowed = (c: ConsentChoices, category: string | null): boolean =>\n  (CONSENT_CATEGORIES as readonly string[]).includes(category ?? \"\") &&\n  c[category as keyof ConsentChoices];\n\n/** Settles when the script has loaded or failed: a broken script must not block the ones after it. */\nfunction settled(script: HTMLScriptElement): Promise<void> {\n  return new Promise((resolve) => {\n    script.addEventListener(\"load\", () => resolve(), { once: true });\n    script.addEventListener(\"error\", () => resolve(), { once: true });\n  });\n}\n\n/** Swaps the placeholder for a live script; resolves once an external one has loaded. */\nfunction run(doc: Document, placeholder: HTMLScriptElement): Promise<void> | undefined {\n  const script = doc.createElement(\"script\");\n  for (const { name, value } of Array.from(placeholder.attributes)) {\n    if (name === \"type\" || name === \"data-bitsnap-queued\") continue;\n    if (name === \"data-type\") {\n      // The embed writes the original `type=\"module\"` here, as `type` itself is `text/plain`.\n      if (value === \"module\") script.setAttribute(\"type\", \"module\");\n    } else if (name === \"data-src\") script.setAttribute(\"src\", value);\n    else script.setAttribute(name, value);\n  }\n  if (placeholder.nonce) script.nonce = placeholder.nonce;\n  const external = script.hasAttribute(\"src\");\n  if (external) {\n    // Dynamic scripts are async by default; keep the order of the page.\n    if (!placeholder.hasAttribute(\"async\")) script.async = false;\n  } else {\n    script.text = placeholder.text;\n  }\n  const loaded = external ? settled(script) : undefined;\n  placeholder.parentNode?.replaceChild(script, placeholder);\n  return loaded;\n}\n\n/**\n * Turns the consented placeholders into live elements:\n * `<script type=\"text/plain\" data-bitsnap-consent=\"marketing\" [data-src] [data-type=\"module\"]>` becomes\n * a real script (attributes copied, `type` dropped or restored from `data-type`, `data-src` -> `src`),\n * and `<iframe data-src>` gets its `src`.\n * Placeholders run in document order: an inline script waits for the external scripts before it\n * (`<script src=lib.js>` then `<script>Lib.init()</script>`), external ones only follow each other.\n */\nexport function activateScripts(doc: Document, c: ConsentChoices): number {\n  let activated = 0;\n  try {\n    /** Set once a placeholder had to wait: everything after it queues behind it. */\n    let gate: Promise<void> | null = null;\n    /** External scripts inserted since the last inline one. */\n    let loading: Promise<void>[] = [];\n    doc.querySelectorAll<HTMLScriptElement>(SCRIPT_SELECTOR).forEach((placeholder) => {\n      if (!allowed(c, placeholder.getAttribute(\"data-bitsnap-consent\"))) return;\n      activated++;\n      const inline = !placeholder.hasAttribute(\"data-src\") && !placeholder.hasAttribute(\"src\");\n      if (gate || (inline && loading.length > 0)) {\n        // Marked so that another call (a later choice) does not queue it again.\n        placeholder.setAttribute(\"data-bitsnap-queued\", \"\");\n        gate = (gate ?? Promise.all(loading).then(() => {})).then(() => {\n          try {\n            return run(doc, placeholder);\n          } catch {\n            // never throw into the host page\n          }\n        });\n        loading = [];\n        return;\n      }\n      const loaded = run(doc, placeholder);\n      if (loaded) loading.push(loaded);\n    });\n    doc.querySelectorAll<HTMLIFrameElement>(FRAME_SELECTOR).forEach((frame) => {\n      if (!allowed(c, frame.getAttribute(\"data-bitsnap-consent\"))) return;\n      const src = frame.getAttribute(\"data-src\");\n      if (src && frame.getAttribute(\"src\") !== src) {\n        frame.setAttribute(\"src\", src);\n        frame.removeAttribute(\"data-src\");\n        activated++;\n      }\n    });\n  } catch {\n    // never throw into the host page\n  }\n  return activated;\n}\n","import {\n  CONSENT_CATEGORIES,\n  type ConsentChoices,\n  type ConsentConfig,\n  type ConsentService,\n} from \"./types\";\n\nexport const DEFAULT_API_HOST = \"https://bitsnap.pl\";\nexport const DEFAULT_COLLECT_HOST = \"https://collect.bitsnap.pl\";\n\nexport function defaultConfig(): ConsentConfig {\n  return {\n    version: 1,\n    theme: \"auto\",\n    position: \"bottom\",\n    categories: { analytics: true, marketing: true, preferences: false },\n    services: [],\n    poweredBy: true,\n  };\n}\n\nconst THEMES = [\"auto\", \"light\", \"dark\"];\nconst POSITIONS = [\"bottom\", \"bottom-left\", \"bottom-right\"];\n\nconst HEX_COLOR = /^#(?:[0-9a-f]{3}|[0-9a-f]{6})$/i;\n\nexport function safeColor(value: unknown): string | undefined {\n  return typeof value === \"string\" && HEX_COLOR.test(value.trim())\n    ? value.trim()\n    : undefined;\n}\n\n/** Only http(s) and relative URLs may end up in the banner. */\nexport function safeUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const url = value.trim();\n  return /^(?:https?:\\/\\/|\\/(?!\\/)|#|\\?)/i.test(url) ? url : undefined;\n}\n\nfunction cleanServices(value: unknown): ConsentService[] {\n  if (!Array.isArray(value)) return [];\n  const services: ConsentService[] = [];\n  for (const item of value) {\n    if (\n      item &&\n      typeof item.name === \"string\" &&\n      (CONSENT_CATEGORIES as readonly string[]).includes(item.category)\n    ) {\n      services.push({\n        name: item.name,\n        category: item.category,\n        cookies: Array.isArray(item.cookies)\n          ? item.cookies.filter((cookie: unknown) => typeof cookie === \"string\")\n          : undefined,\n      });\n    }\n  }\n  return services;\n}\n\n/** Layers partial configs (later wins) over the defaults, dropping invalid values. */\nexport function mergeConfig(\n  ...layers: (Partial<ConsentConfig> | null | undefined)[]\n): ConsentConfig {\n  const result = defaultConfig();\n  for (const layer of layers) {\n    if (!layer || typeof layer !== \"object\") continue;\n    if (typeof layer.version === \"number\" && layer.version >= 0) {\n      result.version = Math.floor(layer.version);\n    }\n    if (THEMES.includes(layer.theme as string)) result.theme = layer.theme!;\n    if (POSITIONS.includes(layer.position as string)) result.position = layer.position!;\n    const accent = safeColor(layer.accentColor);\n    if (accent) result.accentColor = accent;\n    const privacy = safeUrl(layer.privacyPolicyUrl);\n    if (privacy) result.privacyPolicyUrl = privacy;\n    if (layer.categories && typeof layer.categories === \"object\") {\n      for (const category of CONSENT_CATEGORIES) {\n        if (typeof layer.categories[category] === \"boolean\") {\n          result.categories[category] = layer.categories[category];\n        }\n      }\n    }\n    if (layer.services !== undefined) result.services = cleanServices(layer.services);\n    if (layer.texts && typeof layer.texts === \"object\") result.texts = layer.texts;\n  }\n  return result;\n}\n\nexport function parseCategoryList(value: string | null | undefined): ConsentChoices {\n  const wanted = (value ?? \"\").split(\",\").map((item) => item.trim());\n  return {\n    analytics: wanted.includes(\"analytics\"),\n    marketing: wanted.includes(\"marketing\"),\n    preferences: wanted.includes(\"preferences\"),\n  };\n}\n\n/** What `GET /api/consent/config` answers: whether the banner is on, and its config. */\nexport type RemoteConsentConfig = {\n  /** `false` when the project turned the banner off: nothing is shown, stored choices still apply. */\n  enabled: boolean;\n  config: Partial<ConsentConfig> | null;\n};\n\n/** Loads the project's banner config. Resolves to `null` on any failure or after the timeout. */\nexport async function fetchRemoteConfig(\n  apiHost: string,\n  key: string,\n  timeoutMs = 3000,\n): Promise<RemoteConsentConfig | null> {\n  if (typeof fetch !== \"function\") return null;\n  const controller = typeof AbortController === \"function\" ? new AbortController() : undefined;\n  const timer = setTimeout(() => controller?.abort(), timeoutMs);\n  try {\n    const response = await fetch(\n      `${apiHost.replace(/\\/+$/, \"\")}/api/consent/config?key=${encodeURIComponent(key)}`,\n      { signal: controller?.signal, credentials: \"omit\" },\n    );\n    if (!response.ok) return null;\n    const body = await response.json();\n    if (!body || typeof body !== \"object\") return null;\n    const config = body.config && typeof body.config === \"object\" ? body.config : null;\n    const enabled = body.enabled !== false;\n    return config || !enabled ? { enabled, config } : null;\n  } catch {\n    return null;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/** Colors of both themes. Every text/background pair is checked against WCAG AA in the tests. */\nexport const PALETTE = {\n  light: {\n    bg: \"#ffffff\",\n    fg: \"#14171c\",\n    muted: \"#495260\",\n    border: \"#c9ced6\",\n    off: \"#6b7280\",\n    thumb: \"#ffffff\",\n    accent: \"#1d4ed8\",\n    onAccent: \"#ffffff\",\n    link: \"#1d4ed8\",\n  },\n  dark: {\n    bg: \"#171a20\",\n    fg: \"#f1f3f6\",\n    muted: \"#b7beca\",\n    border: \"#3a404b\",\n    off: \"#8b93a1\",\n    thumb: \"#171a20\",\n    accent: \"#8ab4ff\",\n    onAccent: \"#0b1220\",\n    link: \"#9dc0ff\",\n  },\n} as const;\n\nconst vars = (p: (typeof PALETTE)[\"light\"]) =>\n  `--bg:${p.bg};--fg:${p.fg};--muted:${p.muted};--border:${p.border};--off:${p.off};--thumb:${p.thumb};--accent:${p.accent};--on-accent:${p.onAccent};--link:${p.link};--focus:${p.accent}`;\n\nexport const STYLES = `\n:host{all:initial}\n*{box-sizing:border-box}\n[hidden]{display:none!important}\n.root{${vars(PALETTE.light)};position:fixed;inset:0;pointer-events:none;z-index:2147483000;font:14px/1.5 system-ui,-apple-system,\"Segoe UI\",Roboto,\"Helvetica Neue\",Arial,sans-serif;color:var(--fg);-webkit-text-size-adjust:100%}\n.root[data-theme=dark]{${vars(PALETTE.dark)};color-scheme:dark}\nbutton,input{font:inherit;color:inherit}\n.banner,.overlay{pointer-events:auto}\n@supports (color:color-mix(in srgb,red 50%,blue)){::selection{background:color-mix(in srgb,var(--accent) 24%,transparent)}}\n.banner{position:absolute;background:var(--bg);color:var(--fg);max-height:92vh;overflow:auto;outline:none}\n.banner.enter{animation:in .22s ease-out}\n.banner.closing{animation:out .2s ease-in forwards;pointer-events:none}\n.bottom{left:0;right:0;bottom:0;border-top:1px solid var(--border);box-shadow:0 -8px 28px rgba(15,23,42,.08);padding:20px 24px calc(20px + env(safe-area-inset-bottom,0px))}\n.root[data-theme=dark] .bottom{box-shadow:0 -8px 28px rgba(0,0,0,.4)}\n.bottom .inner{display:grid;grid-template-columns:minmax(min(100%,42ch),1fr) auto;grid-template-areas:\"text actions\" \"foot actions\";gap:4px 40px;align-items:center;max-width:1120px;margin:0 auto}\n.bottom .text{max-width:68ch}\n.bottom .btn,.bottom .link-btn{flex:0 0 auto}\n.card{bottom:16px;width:min(400px,calc(100vw - 32px));border:1px solid var(--border);border-radius:14px;padding:20px;box-shadow:0 12px 32px rgba(15,23,42,.14)}\n.root[data-theme=dark] .card{box-shadow:0 12px 32px rgba(0,0,0,.45)}\n.bottom-left{left:16px}\n.bottom-right{right:16px}\n.card .inner{display:flex;flex-direction:column;gap:16px}\n.text{grid-area:text}\n.actions{grid-area:actions;display:flex;flex-wrap:wrap;gap:8px;align-items:center;justify-content:flex-end}\n.card .actions{justify-content:stretch}\n.foot{grid-area:foot}\n.title{overflow-wrap:anywhere;font-size:17px;font-weight:650;line-height:1.35;letter-spacing:-.01em;text-wrap:balance;margin:0 0 6px}\n.desc{overflow-wrap:anywhere;margin:0;color:var(--muted);line-height:1.55;text-wrap:pretty}\n.desc a{color:var(--link);text-decoration:underline;text-underline-offset:3px}\n.btn,.link-btn{min-height:38px;padding:0 16px;border-radius:8px;font-size:13.5px;font-weight:600;cursor:pointer;white-space:nowrap;transition:background-color .12s ease-out,filter .12s ease-out,border-color .12s ease-out}\n.btn{border:2px solid var(--accent);background:var(--accent);color:var(--on-accent);flex:1 1 150px}\n.btn:hover{filter:brightness(.93)}\n.btn:active{filter:brightness(.87)}\n.link-btn{border:1px solid var(--off);background:transparent;color:var(--fg);text-decoration:none}\n.link-btn:hover{border-color:var(--fg)}\n@supports (color:color-mix(in srgb,red 50%,blue)){.link-btn:hover{background:color-mix(in srgb,var(--fg) 9%,transparent)}.link-btn:active{background:color-mix(in srgb,var(--fg) 14%,transparent)}}\n.card .link-btn{flex:1 1 100%}\nbutton:focus-visible,a:focus-visible,.dialog:focus-visible{outline:2px solid var(--focus);outline-offset:2px}\n.foot{font-size:12px;color:var(--muted);padding-top:8px}\n.foot a{color:var(--muted);text-decoration:none;display:inline-flex;align-items:center;gap:5px;vertical-align:middle}\n.foot a:hover{text-decoration:underline}\n.foot b{color:var(--fg);font-weight:700;letter-spacing:-.01em}\n.foot svg{display:block}\n.overlay{position:absolute;inset:0;background:rgba(10,12,16,.58);display:flex;align-items:center;justify-content:center;padding:16px}\n.overlay.enter{animation:fade .2s ease-out}\n.overlay.closing{animation:fadeout .2s ease-in forwards;pointer-events:none}\n.dialog{background:var(--bg);color:var(--fg);width:100%;max-width:560px;max-height:min(92vh,760px);display:flex;flex-direction:column;border-radius:16px;box-shadow:0 16px 48px rgba(0,0,0,.35);outline:none}\n.dialog.enter{animation:in .22s ease-out}\n.d-head{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:16px 8px 8px 24px}\n.d-head .title{margin:0;font-size:18px}\n.x{width:44px;height:44px;border:0;border-radius:10px;background:none;cursor:pointer;display:flex;align-items:center;justify-content:center;flex:none}\n.x:hover{background:var(--border)}\n.d-body{overflow:auto;padding:0 24px 8px;flex:1}\n.cat{border-top:1px solid var(--border);padding:10px 0 14px}\n.row{display:flex;align-items:center;justify-content:space-between;gap:12px}\n.cat-title{font-weight:600;font-size:15px}\n.always{font-size:12px;color:var(--muted);margin-right:4px}\n.cat p{margin:0;color:var(--muted)}\n.cat .svc{margin-top:6px;font-size:13px}\n.cat .svc b{font-weight:600;color:var(--fg)}\n.switch{position:relative;width:52px;height:44px;display:flex;align-items:center;justify-content:flex-end;flex:none}\n.switch input{position:absolute;inset:0;width:100%;height:100%;margin:0;opacity:0;cursor:pointer}\n.switch input:disabled{cursor:default}\n.track{width:44px;height:24px;border-radius:12px;background:var(--off);position:relative;transition:background .15s}\n.track::after{content:\"\";position:absolute;top:3px;left:3px;width:18px;height:18px;border-radius:50%;background:var(--thumb);transition:transform .15s}\ninput:checked+.track{background:var(--accent)}\ninput:checked+.track::after{transform:translateX(20px);background:var(--on-accent)}\ninput:disabled+.track{opacity:.6}\ninput:focus-visible+.track{outline:2px solid var(--focus);outline-offset:2px}\n.d-foot{display:flex;flex-direction:column;gap:8px;padding:12px 24px 16px;border-top:1px solid var(--border)}\n.d-foot .actions{justify-content:stretch}\n@keyframes in{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:none}}\n@keyframes fade{from{opacity:0}to{opacity:1}}\n@keyframes out{from{opacity:1;transform:none}to{opacity:0;transform:translateY(12px)}}\n@keyframes fadeout{from{opacity:1}to{opacity:0}}\n@media(max-width:960px){\n.bottom .inner{grid-template-columns:minmax(0,1fr);grid-template-areas:\"text\" \"actions\" \"foot\";gap:14px}\n.bottom .actions{justify-content:flex-start}\n}\n@media(max-width:640px){\n.bottom{padding:16px 16px calc(16px + env(safe-area-inset-bottom,0px))}\n.bottom .inner{gap:12px}\n.bottom .actions{justify-content:stretch}\n.bottom .btn{flex:1 1 130px}\n.bottom .link-btn{flex:1 1 100%}\n.card{left:8px;right:8px;bottom:8px;width:auto}\n.overlay{align-items:flex-end;padding:0}\n.dialog{max-width:none;border-radius:16px 16px 0 0;max-height:92vh}\n.d-head{padding-left:16px}\n.d-body{padding:0 16px 8px}\n.d-foot{padding:12px 16px calc(16px + env(safe-area-inset-bottom,0px))}\n.btn{flex-basis:130px}\n.btn,.link-btn{padding:0 12px;min-height:40px}\n}\n@media(prefers-reduced-motion:reduce){*,*::before,*::after{animation:none!important;transition:none!important}}\n`.replace(/\\n/g, \"\");\n","import { contrastRatio, onColor } from \"./contrast\";\nimport { UI_LABELS } from \"./texts\";\nimport { PALETTE, STYLES } from \"./styles\";\nimport {\n  CONSENT_CATEGORIES,\n  type ConsentCategory,\n  type ConsentChoices,\n  type ConsentConfig,\n  type ConsentLocale,\n  type ConsentTexts,\n} from \"./types\";\n\nexport type UIOptions = {\n  doc: Document;\n  config: ConsentConfig;\n  texts: ConsentTexts;\n  locale: ConsentLocale;\n  /** Current choice, used to preset the toggles. */\n  getChoices(): ConsentChoices | null;\n  /** Whether a valid choice exists, i.e. closing the settings must not bring back the banner. */\n  hasChoice(): boolean;\n  onAcceptAll(): void;\n  onRejectAll(): void;\n  onSave(choices: ConsentChoices): void;\n};\n\nexport type ConsentUI = {\n  /** `focus` moves keyboard focus into the banner; leave it off when the banner opens on page load. */\n  showBanner(focus?: boolean): void;\n  showSettings(): void;\n  hide(): void;\n  destroy(): void;\n};\n\nconst WORDMARK =\n  '<svg width=\"14\" height=\"14\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><rect width=\"16\" height=\"16\" rx=\"4\" fill=\"currentColor\" style=\"color:var(--fg)\"/><circle cx=\"8\" cy=\"8\" r=\"3\" fill=\"var(--bg)\"/></svg>';\n\nconst CLOSE_ICON =\n  '<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 3l10 10M13 3L3 13\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" fill=\"none\"/></svg>';\n\nconst FOCUSABLE = \"button:not([disabled]),input:not([disabled]),a[href]\";\n\n/**\n * How long the exit animation runs. The banner and the settings layer fade\n * out before they disappear, so the page does not blink.\n */\nexport const EXIT_ANIMATION_MS = 200;\n\n/** A running exit animation: the node, its listener and its fallback timer. */\ntype Exit = {\n  node: HTMLElement;\n  listener: (event: Event) => void;\n  timer: number | undefined;\n};\n\nexport function createUI(options: UIOptions): ConsentUI {\n  const { doc, config, texts, locale } = options;\n  const labels = UI_LABELS[locale];\n  let host: HTMLElement | null = null;\n  let shadow: ShadowRoot | null = null;\n  let root: HTMLElement;\n  let banner: HTMLElement;\n  let overlay: HTMLElement;\n  let dialog: HTMLElement;\n  let settingsButton: HTMLElement;\n  let layer: \"none\" | \"banner\" | \"settings\" = \"none\";\n  let opener: HTMLElement | null = null;\n  let media: MediaQueryList | null = null;\n  const toggles = new Map<ConsentCategory, HTMLInputElement>();\n  /** The exit animations running right now; at most one per node. */\n  const exits: Exit[] = [];\n\n  function el<K extends keyof HTMLElementTagNameMap>(\n    tag: K,\n    props: Record<string, string> = {},\n    ...children: (Node | string)[]\n  ): HTMLElementTagNameMap[K] {\n    const node = doc.createElement(tag);\n    for (const key of Object.keys(props)) {\n      if (key === \"class\") node.className = props[key];\n      else node.setAttribute(key, props[key]);\n    }\n    for (const child of children) node.append(child);\n    return node;\n  }\n\n  function button(cls: string, text: string, onClick: () => void) {\n    const node = el(\"button\", { type: \"button\", class: cls }, text);\n    node.addEventListener(\"click\", onClick);\n    return node;\n  }\n\n  function powered(): HTMLElement {\n    const link = el(\"a\", {\n      href: `https://bitsnap.pl/?utm_source=consent_banner&utm_medium=referral&utm_content=${encodeURIComponent(doc.location?.hostname ?? \"\")}`,\n      target: \"_blank\",\n      rel: \"noopener\",\n    });\n    link.append(texts.poweredBy + \" \");\n    link.insertAdjacentHTML(\"beforeend\", WORDMARK);\n    link.append(el(\"b\", {}, \"bitsnap\"));\n    return el(\"div\", { class: \"foot\" }, link);\n  }\n\n  function description(): HTMLElement {\n    const node = el(\"p\", { class: \"desc\", id: \"d\" }, texts.description);\n    if (config.privacyPolicyUrl) {\n      node.append(\n        \" \",\n        el(\n          \"a\",\n          { href: config.privacyPolicyUrl, target: \"_blank\", rel: \"noopener\" },\n          labels.privacy,\n        ),\n      );\n    }\n    return node;\n  }\n\n  function buildBanner() {\n    settingsButton = button(\"link-btn\", texts.settings, () => showSettings());\n    banner = el(\n      \"div\",\n      {\n        class: `banner ${config.position === \"bottom\" ? \"bottom\" : `card ${config.position}`}`,\n        // Not modal: the page stays usable, so it is a live region, not a dialog.\n        role: \"region\",\n        \"aria-live\": \"polite\",\n        \"aria-labelledby\": \"t\",\n        \"aria-describedby\": \"d\",\n        tabindex: \"-1\",\n      },\n      el(\n        \"div\",\n        { class: \"inner\" },\n        el(\"div\", { class: \"text\" }, el(\"div\", { class: \"title\", id: \"t\" }, texts.title), description()),\n        el(\n          \"div\",\n          { class: \"actions\" },\n          button(\"btn\", texts.acceptAll, options.onAcceptAll),\n          button(\"btn\", texts.rejectAll, options.onRejectAll),\n          settingsButton,\n        ),\n        powered(),\n      ),\n    );\n  }\n\n  function category(id: ConsentCategory | \"necessary\"): HTMLElement {\n    const services = config.services.filter((service) => service.category === id);\n    const input = el(\"input\", { type: \"checkbox\", role: \"switch\", \"aria-labelledby\": `l-${id}`, \"aria-describedby\": `p-${id}` });\n    if (id === \"necessary\") {\n      input.checked = true;\n      input.disabled = true;\n    } else {\n      toggles.set(id, input);\n    }\n    const node = el(\n      \"div\",\n      { class: \"cat\" },\n      el(\n        \"div\",\n        { class: \"row\" },\n        el(\"span\", { class: \"cat-title\", id: `l-${id}` }, texts[`${id}Title` as keyof ConsentTexts]),\n        el(\n          \"span\",\n          { style: \"display:flex;align-items:center\" },\n          ...(id === \"necessary\" ? [el(\"span\", { class: \"always\" }, labels.always)] : []),\n          el(\"label\", { class: \"switch\" }, input, el(\"span\", { class: \"track\" })),\n        ),\n      ),\n      el(\"p\", { id: `p-${id}` }, texts[`${id}Description` as keyof ConsentTexts]),\n    );\n    if (services.length > 0) {\n      node.append(\n        el(\"p\", { class: \"svc\" }, el(\"b\", {}, `${labels.services}: `), services.map((s) => s.name).join(\", \")),\n      );\n    }\n    return node;\n  }\n\n  function buildSettings() {\n    const close = el(\"button\", { type: \"button\", class: \"x\", \"aria-label\": texts.close });\n    close.insertAdjacentHTML(\"beforeend\", CLOSE_ICON);\n    close.addEventListener(\"click\", () => closeSettings());\n    const body = el(\"div\", { class: \"d-body\" }, category(\"necessary\"));\n    for (const id of CONSENT_CATEGORIES) {\n      if (config.categories[id]) body.append(category(id));\n    }\n    dialog = el(\n      \"div\",\n      { class: \"dialog\", role: \"dialog\", \"aria-modal\": \"true\", \"aria-labelledby\": \"st\", tabindex: \"-1\" },\n      el(\"div\", { class: \"d-head\" }, el(\"div\", { class: \"title\", id: \"st\" }, texts.settings), close),\n      body,\n      el(\n        \"div\",\n        { class: \"d-foot\" },\n        el(\n          \"div\",\n          { class: \"actions\" },\n          button(\"btn\", texts.save, () => options.onSave(readToggles())),\n          button(\"btn\", texts.acceptAll, options.onAcceptAll),\n          button(\"btn\", texts.rejectAll, options.onRejectAll),\n        ),\n        powered(),\n      ),\n    );\n    overlay = el(\"div\", { class: \"overlay\" }, dialog);\n    overlay.addEventListener(\"mousedown\", (event) => {\n      if (event.target === overlay) closeSettings();\n    });\n  }\n\n  function readToggles(): ConsentChoices {\n    const choices = { analytics: false, marketing: false, preferences: false };\n    toggles.forEach((input, key) => (choices[key] = input.checked));\n    return choices;\n  }\n\n  function applyTheme() {\n    const dark = config.theme === \"dark\" || (config.theme === \"auto\" && !!media?.matches);\n    root.setAttribute(\"data-theme\", dark ? \"dark\" : \"light\");\n    applyAccent(dark);\n  }\n\n  /** A custom accent that is too faint on the dark background gives way to the dark theme's own. */\n  function applyAccent(dark: boolean) {\n    const accent = config.accentColor;\n    if (!accent) return;\n    if (dark && contrastRatio(accent, PALETTE.dark.bg) < 3) {\n      for (const name of [\"--accent\", \"--focus\", \"--on-accent\"]) root.style.removeProperty(name);\n      return;\n    }\n    root.style.setProperty(\"--accent\", accent);\n    root.style.setProperty(\"--focus\", accent);\n    root.style.setProperty(\"--on-accent\", onColor(accent));\n  }\n\n  function ensure() {\n    if (host) return;\n    host = el(\"div\", { id: \"bitsnap-consent\", \"data-bitsnap-consent-host\": \"\" });\n    shadow = host.attachShadow({ mode: \"open\" });\n    shadow.append(el(\"style\", {}, STYLES));\n    root = el(\"div\", { class: \"root\", lang: locale });\n    buildBanner();\n    buildSettings();\n    banner.hidden = true;\n    overlay.hidden = true;\n    root.append(banner, overlay);\n    shadow.append(root);\n    if (typeof doc.defaultView?.matchMedia === \"function\") {\n      media = doc.defaultView.matchMedia(\"(prefers-color-scheme: dark)\");\n      media.addEventListener?.(\"change\", applyTheme);\n    }\n    applyTheme();\n    doc.body.append(host);\n  }\n\n  function focusables(): HTMLElement[] {\n    return Array.from(dialog.querySelectorAll<HTMLElement>(FOCUSABLE));\n  }\n\n  /** Whether the visitor asked for less motion: the layers then come and go at once. */\n  function reducedMotion(): boolean {\n    try {\n      return doc.defaultView?.matchMedia?.(\"(prefers-reduced-motion: reduce)\").matches === true;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Stops a running exit animation; the node stays where it is. */\n  function stopExit(node: HTMLElement) {\n    const index = exits.findIndex((exit) => exit.node === node);\n    if (index === -1) return;\n    const [exit] = exits.splice(index, 1);\n    exit.node.removeEventListener(\"animationend\", exit.listener);\n    if (exit.timer !== undefined) doc.defaultView?.clearTimeout(exit.timer);\n    exit.node.classList.remove(\"closing\");\n  }\n\n  /** Hides the node at once, without an animation. */\n  function hideNow(node: HTMLElement) {\n    stopExit(node);\n    node.hidden = true;\n  }\n\n  /**\n   * Fades the node out and hides it when the animation ends. The timer is the\n   * fallback for a browser that sends no event (a hidden tab, a reduced\n   * motion setting): the layer always disappears.\n   */\n  function exitTo(node: HTMLElement) {\n    stopExit(node);\n    if (node.hidden) return;\n    if (reducedMotion()) {\n      node.hidden = true;\n      return;\n    }\n    node.classList.add(\"closing\");\n    const listener = (event: Event) => {\n      // Another animation of a child ends first; only our own counts.\n      if (event.target !== node) return;\n      finish();\n    };\n    const timer = doc.defaultView?.setTimeout(finish, EXIT_ANIMATION_MS + 120);\n    function finish() {\n      stopExit(node);\n      node.hidden = true;\n    }\n    node.addEventListener(\"animationend\", listener);\n    exits.push({ node, listener, timer });\n  }\n\n  /** Shows the node and plays the entrance animation again. */\n  function enter(node: HTMLElement) {\n    stopExit(node);\n    node.hidden = false;\n    // The class has to leave and come back, or the animation does not restart.\n    node.classList.remove(\"enter\");\n    void node.offsetWidth;\n    node.classList.add(\"enter\");\n  }\n\n  function onKeydown(event: KeyboardEvent) {\n    if (layer !== \"settings\") return;\n    if (event.key === \"Escape\") {\n      event.preventDefault();\n      closeSettings();\n      return;\n    }\n    if (event.key !== \"Tab\") return;\n    const items = focusables();\n    if (items.length === 0) return;\n    const active = shadow?.activeElement as HTMLElement | null;\n    const first = items[0];\n    const last = items[items.length - 1];\n    const outside = !active || !dialog.contains(active);\n    if (event.shiftKey && (outside || active === first || active === dialog)) {\n      event.preventDefault();\n      last.focus();\n    } else if (!event.shiftKey && (outside || active === last)) {\n      event.preventDefault();\n      first.focus();\n    }\n  }\n\n  function showBanner(focus = false) {\n    try {\n      ensure();\n      layer = \"banner\";\n      doc.removeEventListener(\"keydown\", onKeydown, true);\n      hideNow(overlay);\n      enter(banner);\n      if (focus) banner.focus({ preventScroll: true });\n    } catch {\n      // never throw into the host page\n    }\n  }\n\n  function showSettings() {\n    try {\n      ensure();\n      if (layer !== \"settings\") {\n        const active = doc.activeElement as HTMLElement | null;\n        opener = active && active !== host && active !== doc.body ? active : null;\n      }\n      const current = options.getChoices();\n      toggles.forEach((input, key) => (input.checked = !!current?.[key]));\n      layer = \"settings\";\n      hideNow(banner);\n      enter(overlay);\n      enter(dialog);\n      doc.addEventListener(\"keydown\", onKeydown, true);\n      dialog.focus({ preventScroll: true });\n    } catch {\n      // never throw into the host page\n    }\n  }\n\n  function closeSettings() {\n    if (layer !== \"settings\") return;\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    exitTo(overlay);\n    if (options.hasChoice()) {\n      layer = \"none\";\n      opener?.focus?.({ preventScroll: true });\n    } else {\n      layer = \"banner\";\n      enter(banner);\n      settingsButton.focus({ preventScroll: true });\n    }\n  }\n\n  function hide() {\n    if (!host) return;\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    const wasSettings = layer === \"settings\";\n    layer = \"none\";\n    exitTo(banner);\n    exitTo(overlay);\n    if (wasSettings) opener?.focus?.({ preventScroll: true });\n  }\n\n  function destroy() {\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    media?.removeEventListener?.(\"change\", applyTheme);\n    while (exits.length > 0) stopExit(exits[0]!.node);\n    host?.remove();\n    host = null;\n    shadow = null;\n    layer = \"none\";\n  }\n\n  return { showBanner, showSettings, hide, destroy };\n}\n"]}
+{"version":3,"sources":["/home/emems/web/bitsnap/bitsnap/bitsnap-react/dist/consent.js","../src/consent/react.tsx","../src/consent/core/types.ts","../src/consent/core/activate.ts","../src/consent/core/config.ts","../src/consent/core/styles.ts","../src/consent/core/ui.ts"],"names":["CONSENT_CATEGORIES","SCRIPT_SELECTOR","FRAME_SELECTOR","allowed","c","category","settled","script","resolve","run","doc","placeholder","name","value","external","loaded","activateScripts","activated","gate","loading","inline","frame","src","DEFAULT_API_HOST","DEFAULT_COLLECT_HOST","defaultConfig","THEMES","POSITIONS","HEX_COLOR","safeColor","safeUrl","url","cleanServices","services","item","cookie","mergeConfig","layers","result","layer","accent","privacy","fetchRemoteConfig","apiHost","key","timeoutMs","controller","timer","response"],"mappings":"AAAA,uuBAAwG,+BAA4B,8BCA1E,ICU7CA,CAAAA,CAAiD,CAC5D,WAAA,CACA,WAAA,CACA,aACF,CAAA,CCZA,IAAMC,EAAAA,CAAkB,4EAAA,CAClBC,EAAAA,CAAiB,wCAAA,CAEjBC,EAAAA,CAAU,CAACC,CAAAA,CAAmBC,CAAAA,CAAAA,EACjCL,CAAAA,CAAyC,QAAA,kBAASK,CAAAA,SAAY,IAAE,CAAA,EACjED,CAAAA,CAAEC,CAAgC,CAAA,CAGpC,SAASC,EAAAA,CAAQC,CAAAA,CAA0C,CACzD,OAAO,IAAI,OAAA,CAASC,CAAAA,EAAY,CAC9BD,CAAAA,CAAO,gBAAA,CAAiB,MAAA,CAAQ,CAAA,CAAA,EAAMC,CAAAA,CAAQ,CAAA,CAAG,CAAE,IAAA,CAAM,CAAA,CAAK,CAAC,CAAA,CAC/DD,CAAAA,CAAO,gBAAA,CAAiB,OAAA,CAAS,CAAA,CAAA,EAAMC,CAAAA,CAAQ,CAAA,CAAG,CAAE,IAAA,CAAM,CAAA,CAAK,CAAC,CAClE,CAAC,CACH,CAGA,SAASC,EAAAA,CAAIC,CAAAA,CAAeC,CAAAA,CAA2D,CACrF,IAAMJ,CAAAA,CAASG,CAAAA,CAAI,aAAA,CAAc,QAAQ,CAAA,CACzC,GAAA,CAAA,GAAW,CAAE,IAAA,CAAAE,CAAAA,CAAM,KAAA,CAAAC,CAAM,CAAA,GAAK,KAAA,CAAM,IAAA,CAAKF,CAAAA,CAAY,UAAU,CAAA,CACzDC,CAAAA,GAAS,MAAA,EAAUA,CAAAA,GAAS,qBAAA,EAAA,CAC5BA,CAAAA,GAAS,WAAA,CAEPC,CAAAA,GAAU,QAAA,EAAUN,CAAAA,CAAO,YAAA,CAAa,MAAA,CAAQ,QAAQ,CAAA,CACnDK,CAAAA,GAAS,UAAA,CAAYL,CAAAA,CAAO,YAAA,CAAa,KAAA,CAAOM,CAAK,CAAA,CAC3DN,CAAAA,CAAO,YAAA,CAAaK,CAAAA,CAAMC,CAAK,CAAA,CAAA,CAElCF,CAAAA,CAAY,KAAA,EAAA,CAAOJ,CAAAA,CAAO,KAAA,CAAQI,CAAAA,CAAY,KAAA,CAAA,CAClD,IAAMG,CAAAA,CAAWP,CAAAA,CAAO,YAAA,CAAa,KAAK,CAAA,CACtCO,CAAAA,CAEGH,CAAAA,CAAY,YAAA,CAAa,OAAO,CAAA,EAAA,CAAGJ,CAAAA,CAAO,KAAA,CAAQ,CAAA,CAAA,CAAA,CAEvDA,CAAAA,CAAO,IAAA,CAAOI,CAAAA,CAAY,IAAA,CAE5B,IAAMI,CAAAA,CAASD,CAAAA,CAAWR,EAAAA,CAAQC,CAAM,CAAA,CAAI,KAAA,CAAA,CAC5C,uBAAAI,CAAAA,qBAAY,UAAA,6BAAY,YAAA,mBAAaJ,CAAAA,CAAQI,CAAW,GAAA,CACjDI,CACT,CAUO,SAASC,EAAAA,CAAgBN,CAAAA,CAAeN,CAAAA,CAA2B,CACxE,IAAIa,CAAAA,CAAY,CAAA,CAChB,GAAI,CAEF,IAAIC,CAAAA,CAA6B,IAAA,CAE7BC,CAAAA,CAA2B,CAAC,CAAA,CAChCT,CAAAA,CAAI,gBAAA,CAAoCT,EAAe,CAAA,CAAE,OAAA,CAASU,CAAAA,EAAgB,CAChF,EAAA,CAAI,CAACR,EAAAA,CAAQC,CAAAA,CAAGO,CAAAA,CAAY,YAAA,CAAa,sBAAsB,CAAC,CAAA,CAAG,MAAA,CACnEM,CAAAA,EAAAA,CACA,IAAMG,CAAAA,CAAS,CAACT,CAAAA,CAAY,YAAA,CAAa,UAAU,CAAA,EAAK,CAACA,CAAAA,CAAY,YAAA,CAAa,KAAK,CAAA,CACvF,EAAA,CAAIO,CAAAA,EAASE,CAAAA,EAAUD,CAAAA,CAAQ,MAAA,CAAS,CAAA,CAAI,CAE1CR,CAAAA,CAAY,YAAA,CAAa,qBAAA,CAAuB,EAAE,CAAA,CAClDO,CAAAA,CAAAA,kBAAQA,CAAAA,SAAQ,OAAA,CAAQ,GAAA,CAAIC,CAAO,CAAA,CAAE,IAAA,CAAK,CAAA,CAAA,EAAM,CAAC,CAAC,GAAA,CAAA,CAAG,IAAA,CAAK,CAAA,CAAA,EAAM,CAC9D,GAAI,CACF,OAAOV,EAAAA,CAAIC,CAAAA,CAAKC,CAAW,CAC7B,CAAA,UAAQ,CAER,CACF,CAAC,CAAA,CACDQ,CAAAA,CAAU,CAAC,CAAA,CACX,MACF,CACA,IAAMJ,CAAAA,CAASN,EAAAA,CAAIC,CAAAA,CAAKC,CAAW,CAAA,CAC/BI,CAAAA,EAAQI,CAAAA,CAAQ,IAAA,CAAKJ,CAAM,CACjC,CAAC,CAAA,CACDL,CAAAA,CAAI,gBAAA,CAAoCR,EAAc,CAAA,CAAE,OAAA,CAASmB,CAAAA,EAAU,CACzE,EAAA,CAAI,CAAClB,EAAAA,CAAQC,CAAAA,CAAGiB,CAAAA,CAAM,YAAA,CAAa,sBAAsB,CAAC,CAAA,CAAG,MAAA,CAC7D,IAAMC,CAAAA,CAAMD,CAAAA,CAAM,YAAA,CAAa,UAAU,CAAA,CACrCC,CAAAA,EAAOD,CAAAA,CAAM,YAAA,CAAa,KAAK,CAAA,GAAMC,CAAAA,EAAAA,CACvCD,CAAAA,CAAM,YAAA,CAAa,KAAA,CAAOC,CAAG,CAAA,CAC7BD,CAAAA,CAAM,eAAA,CAAgB,UAAU,CAAA,CAChCJ,CAAAA,EAAAA,CAEJ,CAAC,CACH,CAAA,UAAQ,CAER,CACA,OAAOA,CACT,CClFO,IAAMM,EAAAA,CAAmB,oBAAA,CACnBC,EAAAA,CAAuB,4BAAA,CAE7B,SAASC,EAAAA,CAAAA,CAA+B,CAC7C,MAAO,CACL,OAAA,CAAS,CAAA,CACT,KAAA,CAAO,MAAA,CACP,QAAA,CAAU,QAAA,CACV,UAAA,CAAY,CAAE,SAAA,CAAW,CAAA,CAAA,CAAM,SAAA,CAAW,CAAA,CAAA,CAAM,WAAA,CAAa,CAAA,CAAM,CAAA,CACnE,QAAA,CAAU,CAAC,CAAA,CACX,SAAA,CAAW,CAAA,CACb,CACF,CAEA,IAAMC,EAAAA,CAAS,CAAC,MAAA,CAAQ,OAAA,CAAS,MAAM,CAAA,CACjCC,EAAAA,CAAY,CAAC,QAAA,CAAU,aAAA,CAAe,cAAc,CAAA,CAEpDC,EAAAA,CAAY,iCAAA,CAEX,SAASC,EAAAA,CAAUhB,CAAAA,CAAoC,CAC5D,OAAO,OAAOA,CAAAA,EAAU,QAAA,EAAYe,EAAAA,CAAU,IAAA,CAAKf,CAAAA,CAAM,IAAA,CAAK,CAAC,CAAA,CAC3DA,CAAAA,CAAM,IAAA,CAAK,CAAA,CACX,KAAA,CACN,CAGO,SAASiB,EAAAA,CAAQjB,CAAAA,CAAoC,CAC1D,EAAA,CAAI,OAAOA,CAAAA,EAAU,QAAA,CAAU,MAAA,CAC/B,IAAMkB,CAAAA,CAAMlB,CAAAA,CAAM,IAAA,CAAK,CAAA,CACvB,MAAO,iCAAA,CAAkC,IAAA,CAAKkB,CAAG,CAAA,CAAIA,CAAAA,CAAM,KAAA,CAC7D,CAEA,SAASC,EAAAA,CAAcnB,CAAAA,CAAkC,CACvD,EAAA,CAAI,CAAC,KAAA,CAAM,OAAA,CAAQA,CAAK,CAAA,CAAG,MAAO,CAAC,CAAA,CACnC,IAAMoB,CAAAA,CAA6B,CAAC,CAAA,CACpC,GAAA,CAAA,IAAWC,EAAAA,GAAQrB,CAAAA,CAEfqB,CAAAA,EACA,OAAOA,CAAAA,CAAK,IAAA,EAAS,QAAA,EACpBlC,CAAAA,CAAyC,QAAA,CAASkC,CAAAA,CAAK,QAAQ,CAAA,EAEhED,CAAAA,CAAS,IAAA,CAAK,CACZ,IAAA,CAAMC,CAAAA,CAAK,IAAA,CACX,QAAA,CAAUA,CAAAA,CAAK,QAAA,CACf,OAAA,CAAS,KAAA,CAAM,OAAA,CAAQA,CAAAA,CAAK,OAAO,CAAA,CAC/BA,CAAAA,CAAK,OAAA,CAAQ,MAAA,CAAQC,CAAAA,EAAoB,OAAOA,CAAAA,EAAW,QAAQ,CAAA,CACnE,KAAA,CACN,CAAC,CAAA,CAGL,OAAOF,CACT,CAGO,SAASG,CAAAA,CAAAA,GACXC,CAAAA,CACY,CACf,IAAMC,CAAAA,CAASb,EAAAA,CAAc,CAAA,CAC7B,GAAA,CAAA,IAAWc,EAAAA,GAASF,CAAAA,CAAQ,CAC1B,EAAA,CAAI,CAACE,CAAAA,EAAS,OAAOA,CAAAA,EAAU,QAAA,CAAU,QAAA,CACrC,OAAOA,CAAAA,CAAM,OAAA,EAAY,QAAA,EAAYA,CAAAA,CAAM,OAAA,EAAW,CAAA,EAAA,CACxDD,CAAAA,CAAO,OAAA,CAAU,IAAA,CAAK,KAAA,CAAMC,CAAAA,CAAM,OAAO,CAAA,CAAA,CAEvCb,EAAAA,CAAO,QAAA,CAASa,CAAAA,CAAM,KAAe,CAAA,EAAA,CAAGD,CAAAA,CAAO,KAAA,CAAQC,CAAAA,CAAM,KAAA,CAAA,CAC7DZ,EAAAA,CAAU,QAAA,CAASY,CAAAA,CAAM,QAAkB,CAAA,EAAA,CAAGD,CAAAA,CAAO,QAAA,CAAWC,CAAAA,CAAM,QAAA,CAAA,CAC1E,IAAMC,CAAAA,CAASX,EAAAA,CAAUU,CAAAA,CAAM,WAAW,CAAA,CACtCC,CAAAA,EAAAA,CAAQF,CAAAA,CAAO,WAAA,CAAcE,CAAAA,CAAAA,CACjC,IAAMC,CAAAA,CAAUX,EAAAA,CAAQS,CAAAA,CAAM,gBAAgB,CAAA,CAE9C,EAAA,CADIE,CAAAA,EAAAA,CAASH,CAAAA,CAAO,gBAAA,CAAmBG,CAAAA,CAAAA,CACnCF,CAAAA,CAAM,UAAA,EAAc,OAAOA,CAAAA,CAAM,UAAA,EAAe,QAAA,CAClD,GAAA,CAAA,IAAWlC,EAAAA,GAAYL,CAAAA,CACjB,OAAOuC,CAAAA,CAAM,UAAA,CAAWlC,CAAQ,CAAA,EAAM,SAAA,EAAA,CACxCiC,CAAAA,CAAO,UAAA,CAAWjC,CAAQ,CAAA,CAAIkC,CAAAA,CAAM,UAAA,CAAWlC,CAAQ,CAAA,CAAA,CAIzDkC,CAAAA,CAAM,QAAA,GAAa,KAAA,CAAA,EAAA,CAAWD,CAAAA,CAAO,QAAA,CAAWN,EAAAA,CAAcO,CAAAA,CAAM,QAAQ,CAAA,CAAA,CAC5EA,CAAAA,CAAM,KAAA,EAAS,OAAOA,CAAAA,CAAM,KAAA,EAAU,QAAA,EAAA,CAAUD,CAAAA,CAAO,KAAA,CAAQC,CAAAA,CAAM,KAAA,CAC3E,CACA,OAAOD,CACT,CAmBA,MAAA,SAAsBI,EAAAA,CACpBC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CAAY,GAAA,CACyB,CACrC,EAAA,CAAI,OAAO,KAAA,EAAU,UAAA,CAAY,OAAO,IAAA,CACxC,IAAMC,CAAAA,CAAa,OAAO,eAAA,EAAoB,UAAA,CAAa,IAAI,eAAA,CAAoB,KAAA,CAAA,CAC7EC,CAAAA,CAAQ,UAAA,CAAW,CAAA,CAAA,kBAAMD,CAAAA,6BAAY,KAAA,mBAAM,GAAA,CAAGD,CAAS,CAAA,CAC7D,GAAI,CACF,IAAMG,CAAAA,CAAW,MAAM,KAAA,CACrB,CAAA,EAAA;ACvFgB;AAAA;AAAA;AAIK,MAAA;AACgB,uBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;ACoLrB","file":"/home/emems/web/bitsnap/bitsnap/bitsnap-react/dist/consent.js","sourcesContent":[null,"import { useCallback, useRef, useSyncExternalStore } from \"react\";\nimport { useIsomorphicLayoutEffect } from \"../lib/isomorphic-layout-effect\";\nimport { createConsent } from \"./core/controller\";\nimport type {\n  BitsnapConsentApi,\n  ConsentChoices,\n  ConsentConfig,\n  ConsentOptions,\n  ConsentState,\n} from \"./core/types\";\n\ndeclare global {\n  interface Window {\n    BitsnapConsent?: BitsnapConsentApi;\n  }\n}\n\nexport type BitsnapConsentProps = {\n  /** Public project key: loads the project's banner config and logs choices. */\n  projectKey?: string;\n  theme?: ConsentOptions[\"theme\"];\n  locale?: ConsentOptions[\"locale\"];\n  position?: ConsentOptions[\"position\"];\n  privacyPolicyUrl?: string;\n  /** `project` keeps the consent cookie per project key. */\n  scope?: ConsentOptions[\"scope\"];\n  apiHost?: string;\n  collectHost?: string;\n  /** Local config, merged over the project config. */\n  config?: Partial<ConsentConfig>;\n  reloadOnWithdraw?: boolean;\n  /** Google Consent Mode v2: `auto` (default) is on when `gtag` or `dataLayer` already exist. */\n  gcm?: ConsentOptions[\"gcm\"];\n  /** Categories offered when no remote config is loaded. */\n  categories?: ConsentOptions[\"categories\"];\n  /** Dashboard preview: shows the banner from the local options only; touches no cookie. */\n  preview?: boolean;\n  /** Replaces the banner title. */\n  title?: string;\n  /** Replaces the banner description. */\n  description?: string;\n};\n\n/** Mounts Bitsnap Consent on the page. Renders nothing itself (the banner lives in a Shadow DOM). */\nexport function BitsnapConsent(props: BitsnapConsentProps): null {\n  const {\n    projectKey, theme, locale, position, privacyPolicyUrl, scope, apiHost, collectHost, reloadOnWithdraw,\n    gcm, preview, title, description,\n  } = props;\n  const configKey = JSON.stringify(props.config ?? null);\n  const configRef = useRef(props.config);\n  configRef.current = props.config;\n  const categoriesKey = JSON.stringify(props.categories ?? null);\n  const categoriesRef = useRef(props.categories);\n  categoriesRef.current = props.categories;\n\n  // A layout effect: the page's passive effects (first events, tracker) must find the API already there.\n  useIsomorphicLayoutEffect(() => {\n    // A banner from the script tag or another instance already runs on this page.\n    if (window.BitsnapConsent) return;\n    const api = createConsent({\n      projectKey,\n      theme,\n      locale,\n      position,\n      privacyPolicyUrl,\n      scope,\n      apiHost,\n      collectHost,\n      reloadOnWithdraw,\n      gcm,\n      preview,\n      title,\n      description,\n      categories: categoriesRef.current,\n      config: configRef.current,\n    });\n    window.BitsnapConsent = api;\n    return () => {\n      api.destroy();\n      if (window.BitsnapConsent === api) delete window.BitsnapConsent;\n    };\n  }, [\n    projectKey, theme, locale, position, privacyPolicyUrl, scope, apiHost, collectHost, reloadOnWithdraw,\n    gcm, preview, title, description, categoriesKey, configKey,\n  ]);\n\n  return null;\n}\n\nlet lastKey = \"null\";\nlet lastState: ConsentState | null = null;\n\nfunction getSnapshot(): ConsentState | null {\n  const current = typeof window === \"undefined\" ? null : (window.BitsnapConsent?.get() ?? null);\n  const key = JSON.stringify(current);\n  if (key !== lastKey) {\n    lastKey = key;\n    lastState = current;\n  }\n  return lastState;\n}\n\nfunction subscribe(onChange: () => void): () => void {\n  window.addEventListener(\"bitsnap:consent\", onChange);\n  window.addEventListener(\"bitsnap:consent:ready\", onChange);\n  return () => {\n    window.removeEventListener(\"bitsnap:consent\", onChange);\n    window.removeEventListener(\"bitsnap:consent:ready\", onChange);\n  };\n}\n\nexport type UseConsent = {\n  /** The stored choice, or `null` while there is none (or on the server). */\n  consent: ConsentState | null;\n  /** `true` once the visitor has made a choice that is still valid. */\n  decided: boolean;\n  open: () => void;\n  accept: (categories?: Partial<ConsentChoices>) => void;\n  acceptAll: () => void;\n  rejectAll: () => void;\n  reset: () => void;\n};\n\n/** Current consent state of the page, kept up to date as the visitor chooses. */\nexport function useConsent(): UseConsent {\n  const consent = useSyncExternalStore(subscribe, getSnapshot, () => null);\n  const open = useCallback(() => window.BitsnapConsent?.open(), []);\n  const accept = useCallback((categories?: Partial<ConsentChoices>) => window.BitsnapConsent?.accept(categories), []);\n  const acceptAll = useCallback(() => window.BitsnapConsent?.acceptAll(), []);\n  const rejectAll = useCallback(() => window.BitsnapConsent?.rejectAll(), []);\n  const reset = useCallback(() => window.BitsnapConsent?.reset(), []);\n  return { consent, decided: consent !== null, open, accept, acceptAll, rejectAll, reset };\n}\n","export type ConsentCategory = \"analytics\" | \"marketing\" | \"preferences\";\n\nexport type ConsentChoices = Record<ConsentCategory, boolean>;\n\nexport type ConsentTheme = \"auto\" | \"light\" | \"dark\";\n\nexport type ConsentPosition = \"bottom\" | \"bottom-left\" | \"bottom-right\";\n\nexport type ConsentLocale = \"pl\" | \"en\";\n\nexport const CONSENT_CATEGORIES: readonly ConsentCategory[] = [\n  \"analytics\",\n  \"marketing\",\n  \"preferences\",\n];\n\nexport const CONSENT_TEXT_KEYS = [\n  \"title\",\n  \"description\",\n  \"acceptAll\",\n  \"rejectAll\",\n  \"settings\",\n  \"save\",\n  \"close\",\n  \"necessaryTitle\",\n  \"necessaryDescription\",\n  \"analyticsTitle\",\n  \"analyticsDescription\",\n  \"marketingTitle\",\n  \"marketingDescription\",\n  \"preferencesTitle\",\n  \"preferencesDescription\",\n  \"poweredBy\",\n] as const;\n\nexport type ConsentTexts = Record<(typeof CONSENT_TEXT_KEYS)[number], string>;\n\nexport type ConsentService = {\n  name: string;\n  category: ConsentCategory;\n  /** Cookies to delete (best effort) when the category is withdrawn. A trailing `*` matches a prefix. */\n  cookies?: string[];\n};\n\nexport type ConsentConfig = {\n  /** Banner version. A stored choice with a lower `bv` makes the banner ask again. */\n  version: number;\n  theme: ConsentTheme;\n  accentColor?: string;\n  position: ConsentPosition;\n  privacyPolicyUrl?: string;\n  categories: ConsentChoices;\n  services: ConsentService[];\n  texts?: Partial<Record<ConsentLocale, Partial<ConsentTexts>>>;\n  poweredBy: true;\n};\n\n/** What the consent cookie holds, and what `get()` returns. */\nexport type ConsentState = {\n  id: string;\n  /** Unix seconds. */\n  ts: number;\n  /** Version of the banner the choice was made on. */\n  bv: number;\n  c: ConsentChoices;\n};\n\nexport type ConsentAction =\n  | \"accept_all\"\n  | \"reject_all\"\n  | \"custom\"\n  | \"withdraw\";\n\n/** `detail` of `bitsnap:consent` and the argument of `on('change')`. */\nexport type ConsentChangeDetail = ConsentState & {\n  /** `reset` when the visitor's stored choice was cleared (`get()` is `null` then). */\n  action: ConsentAction | \"reset\";\n};\n\nexport type ConsentOptions = {\n  /** Public project key. Enables the remote config and the consent log. */\n  projectKey?: string;\n  theme?: ConsentTheme;\n  locale?: \"auto\" | ConsentLocale;\n  position?: ConsentPosition;\n  privacyPolicyUrl?: string;\n  /** `project` keeps one cookie per project key (`bitsnap_consent_<key>`). */\n  scope?: \"global\" | \"project\";\n  apiHost?: string;\n  collectHost?: string;\n  /** Google Consent Mode v2. `auto` is on when `gtag` or `dataLayer` already exist. */\n  gcm?: \"auto\" | \"on\" | \"off\";\n  /** Local overrides, merged over the defaults and the remote config. */\n  config?: Partial<ConsentConfig>;\n  /** Categories used when no remote config is loaded. */\n  categories?: Partial<ConsentChoices>;\n  reloadOnWithdraw?: boolean;\n  /**\n   * Dashboard preview: shows the banner at once from the local options, never\n   * reads or writes the cookie, loads no remote config, sends no consent log,\n   * and the buttons only close the banner.\n   */\n  preview?: boolean;\n  /** Replaces the banner title (current locale, non-empty values only). */\n  title?: string;\n  /** Replaces the banner description (current locale, non-empty values only). */\n  description?: string;\n};\n\nexport type BitsnapConsentApi = {\n  /**\n   * Whose choice this banner holds: `project` keeps one cookie per project key\n   * (`bitsnap_consent_<key>`), `global` the site-wide `bitsnap_consent`.\n   */\n  readonly scope: \"global\" | \"project\";\n  /** The bare public project key the banner was started with, if any (`pk_` stripped). */\n  readonly projectKey: string | null;\n  get(): ConsentState | null;\n  /**\n   * `true` when the visitor refused `category`, also in a choice made on an older banner\n   * version (which `get()` no longer returns) that they have not answered again yet.\n   */\n  denied(category: ConsentCategory): boolean;\n  on(event: \"change\", fn: (detail: ConsentChangeDetail) => void): () => void;\n  open(): void;\n  close(): void;\n  accept(categories?: Partial<ConsentChoices>): void;\n  acceptAll(): void;\n  rejectAll(): void;\n  reset(): void;\n  /** Resolves with the stored choice (or `null`) once config and stored choice are applied. */\n  ready: Promise<ConsentState | null>;\n  destroy(): void;\n};\n","import { CONSENT_CATEGORIES, type ConsentChoices } from \"./types\";\n\nconst SCRIPT_SELECTOR = 'script[type=\"text/plain\"][data-bitsnap-consent]:not([data-bitsnap-queued])';\nconst FRAME_SELECTOR = \"iframe[data-bitsnap-consent][data-src]\";\n\nconst allowed = (c: ConsentChoices, category: string | null): boolean =>\n  (CONSENT_CATEGORIES as readonly string[]).includes(category ?? \"\") &&\n  c[category as keyof ConsentChoices];\n\n/** Settles when the script has loaded or failed: a broken script must not block the ones after it. */\nfunction settled(script: HTMLScriptElement): Promise<void> {\n  return new Promise((resolve) => {\n    script.addEventListener(\"load\", () => resolve(), { once: true });\n    script.addEventListener(\"error\", () => resolve(), { once: true });\n  });\n}\n\n/** Swaps the placeholder for a live script; resolves once an external one has loaded. */\nfunction run(doc: Document, placeholder: HTMLScriptElement): Promise<void> | undefined {\n  const script = doc.createElement(\"script\");\n  for (const { name, value } of Array.from(placeholder.attributes)) {\n    if (name === \"type\" || name === \"data-bitsnap-queued\") continue;\n    if (name === \"data-type\") {\n      // The embed writes the original `type=\"module\"` here, as `type` itself is `text/plain`.\n      if (value === \"module\") script.setAttribute(\"type\", \"module\");\n    } else if (name === \"data-src\") script.setAttribute(\"src\", value);\n    else script.setAttribute(name, value);\n  }\n  if (placeholder.nonce) script.nonce = placeholder.nonce;\n  const external = script.hasAttribute(\"src\");\n  if (external) {\n    // Dynamic scripts are async by default; keep the order of the page.\n    if (!placeholder.hasAttribute(\"async\")) script.async = false;\n  } else {\n    script.text = placeholder.text;\n  }\n  const loaded = external ? settled(script) : undefined;\n  placeholder.parentNode?.replaceChild(script, placeholder);\n  return loaded;\n}\n\n/**\n * Turns the consented placeholders into live elements:\n * `<script type=\"text/plain\" data-bitsnap-consent=\"marketing\" [data-src] [data-type=\"module\"]>` becomes\n * a real script (attributes copied, `type` dropped or restored from `data-type`, `data-src` -> `src`),\n * and `<iframe data-src>` gets its `src`.\n * Placeholders run in document order: an inline script waits for the external scripts before it\n * (`<script src=lib.js>` then `<script>Lib.init()</script>`), external ones only follow each other.\n */\nexport function activateScripts(doc: Document, c: ConsentChoices): number {\n  let activated = 0;\n  try {\n    /** Set once a placeholder had to wait: everything after it queues behind it. */\n    let gate: Promise<void> | null = null;\n    /** External scripts inserted since the last inline one. */\n    let loading: Promise<void>[] = [];\n    doc.querySelectorAll<HTMLScriptElement>(SCRIPT_SELECTOR).forEach((placeholder) => {\n      if (!allowed(c, placeholder.getAttribute(\"data-bitsnap-consent\"))) return;\n      activated++;\n      const inline = !placeholder.hasAttribute(\"data-src\") && !placeholder.hasAttribute(\"src\");\n      if (gate || (inline && loading.length > 0)) {\n        // Marked so that another call (a later choice) does not queue it again.\n        placeholder.setAttribute(\"data-bitsnap-queued\", \"\");\n        gate = (gate ?? Promise.all(loading).then(() => {})).then(() => {\n          try {\n            return run(doc, placeholder);\n          } catch {\n            // never throw into the host page\n          }\n        });\n        loading = [];\n        return;\n      }\n      const loaded = run(doc, placeholder);\n      if (loaded) loading.push(loaded);\n    });\n    doc.querySelectorAll<HTMLIFrameElement>(FRAME_SELECTOR).forEach((frame) => {\n      if (!allowed(c, frame.getAttribute(\"data-bitsnap-consent\"))) return;\n      const src = frame.getAttribute(\"data-src\");\n      if (src && frame.getAttribute(\"src\") !== src) {\n        frame.setAttribute(\"src\", src);\n        frame.removeAttribute(\"data-src\");\n        activated++;\n      }\n    });\n  } catch {\n    // never throw into the host page\n  }\n  return activated;\n}\n","import {\n  CONSENT_CATEGORIES,\n  type ConsentChoices,\n  type ConsentConfig,\n  type ConsentService,\n} from \"./types\";\n\nexport const DEFAULT_API_HOST = \"https://bitsnap.pl\";\nexport const DEFAULT_COLLECT_HOST = \"https://collect.bitsnap.pl\";\n\nexport function defaultConfig(): ConsentConfig {\n  return {\n    version: 1,\n    theme: \"auto\",\n    position: \"bottom\",\n    categories: { analytics: true, marketing: true, preferences: false },\n    services: [],\n    poweredBy: true,\n  };\n}\n\nconst THEMES = [\"auto\", \"light\", \"dark\"];\nconst POSITIONS = [\"bottom\", \"bottom-left\", \"bottom-right\"];\n\nconst HEX_COLOR = /^#(?:[0-9a-f]{3}|[0-9a-f]{6})$/i;\n\nexport function safeColor(value: unknown): string | undefined {\n  return typeof value === \"string\" && HEX_COLOR.test(value.trim())\n    ? value.trim()\n    : undefined;\n}\n\n/** Only http(s) and relative URLs may end up in the banner. */\nexport function safeUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const url = value.trim();\n  return /^(?:https?:\\/\\/|\\/(?!\\/)|#|\\?)/i.test(url) ? url : undefined;\n}\n\nfunction cleanServices(value: unknown): ConsentService[] {\n  if (!Array.isArray(value)) return [];\n  const services: ConsentService[] = [];\n  for (const item of value) {\n    if (\n      item &&\n      typeof item.name === \"string\" &&\n      (CONSENT_CATEGORIES as readonly string[]).includes(item.category)\n    ) {\n      services.push({\n        name: item.name,\n        category: item.category,\n        cookies: Array.isArray(item.cookies)\n          ? item.cookies.filter((cookie: unknown) => typeof cookie === \"string\")\n          : undefined,\n      });\n    }\n  }\n  return services;\n}\n\n/** Layers partial configs (later wins) over the defaults, dropping invalid values. */\nexport function mergeConfig(\n  ...layers: (Partial<ConsentConfig> | null | undefined)[]\n): ConsentConfig {\n  const result = defaultConfig();\n  for (const layer of layers) {\n    if (!layer || typeof layer !== \"object\") continue;\n    if (typeof layer.version === \"number\" && layer.version >= 0) {\n      result.version = Math.floor(layer.version);\n    }\n    if (THEMES.includes(layer.theme as string)) result.theme = layer.theme!;\n    if (POSITIONS.includes(layer.position as string)) result.position = layer.position!;\n    const accent = safeColor(layer.accentColor);\n    if (accent) result.accentColor = accent;\n    const privacy = safeUrl(layer.privacyPolicyUrl);\n    if (privacy) result.privacyPolicyUrl = privacy;\n    if (layer.categories && typeof layer.categories === \"object\") {\n      for (const category of CONSENT_CATEGORIES) {\n        if (typeof layer.categories[category] === \"boolean\") {\n          result.categories[category] = layer.categories[category];\n        }\n      }\n    }\n    if (layer.services !== undefined) result.services = cleanServices(layer.services);\n    if (layer.texts && typeof layer.texts === \"object\") result.texts = layer.texts;\n  }\n  return result;\n}\n\nexport function parseCategoryList(value: string | null | undefined): ConsentChoices {\n  const wanted = (value ?? \"\").split(\",\").map((item) => item.trim());\n  return {\n    analytics: wanted.includes(\"analytics\"),\n    marketing: wanted.includes(\"marketing\"),\n    preferences: wanted.includes(\"preferences\"),\n  };\n}\n\n/** What `GET /api/consent/config` answers: whether the banner is on, and its config. */\nexport type RemoteConsentConfig = {\n  /** `false` when the project turned the banner off: nothing is shown, stored choices still apply. */\n  enabled: boolean;\n  config: Partial<ConsentConfig> | null;\n};\n\n/** Loads the project's banner config. Resolves to `null` on any failure or after the timeout. */\nexport async function fetchRemoteConfig(\n  apiHost: string,\n  key: string,\n  timeoutMs = 3000,\n): Promise<RemoteConsentConfig | null> {\n  if (typeof fetch !== \"function\") return null;\n  const controller = typeof AbortController === \"function\" ? new AbortController() : undefined;\n  const timer = setTimeout(() => controller?.abort(), timeoutMs);\n  try {\n    const response = await fetch(\n      `${apiHost.replace(/\\/+$/, \"\")}/api/consent/config?key=${encodeURIComponent(key)}`,\n      { signal: controller?.signal, credentials: \"omit\" },\n    );\n    if (!response.ok) return null;\n    const body = await response.json();\n    if (!body || typeof body !== \"object\") return null;\n    const config = body.config && typeof body.config === \"object\" ? body.config : null;\n    const enabled = body.enabled !== false;\n    return config || !enabled ? { enabled, config } : null;\n  } catch {\n    return null;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/** Colors of both themes. Every text/background pair is checked against WCAG AA in the tests. */\nexport const PALETTE = {\n  light: {\n    bg: \"#ffffff\",\n    fg: \"#14171c\",\n    muted: \"#495260\",\n    border: \"#c9ced6\",\n    off: \"#6b7280\",\n    thumb: \"#ffffff\",\n    accent: \"#1d4ed8\",\n    onAccent: \"#ffffff\",\n    link: \"#1d4ed8\",\n  },\n  dark: {\n    bg: \"#171a20\",\n    fg: \"#f1f3f6\",\n    muted: \"#b7beca\",\n    border: \"#3a404b\",\n    off: \"#8b93a1\",\n    thumb: \"#171a20\",\n    accent: \"#8ab4ff\",\n    onAccent: \"#0b1220\",\n    link: \"#9dc0ff\",\n  },\n} as const;\n\nconst vars = (p: (typeof PALETTE)[\"light\"]) =>\n  `--bg:${p.bg};--fg:${p.fg};--muted:${p.muted};--border:${p.border};--off:${p.off};--thumb:${p.thumb};--accent:${p.accent};--on-accent:${p.onAccent};--link:${p.link};--focus:${p.accent}`;\n\nexport const STYLES = `\n:host{all:initial}\n*{box-sizing:border-box}\n[hidden]{display:none!important}\n.root{${vars(PALETTE.light)};position:fixed;inset:0;pointer-events:none;z-index:2147483000;font:14px/1.5 system-ui,-apple-system,\"Segoe UI\",Roboto,\"Helvetica Neue\",Arial,sans-serif;color:var(--fg);-webkit-text-size-adjust:100%}\n.root[data-theme=dark]{${vars(PALETTE.dark)};color-scheme:dark}\nbutton,input{font:inherit;color:inherit}\n.banner,.overlay{pointer-events:auto}\n@supports (color:color-mix(in srgb,red 50%,blue)){::selection{background:color-mix(in srgb,var(--accent) 24%,transparent)}}\n.banner{position:absolute;background:var(--bg);color:var(--fg);max-height:92vh;overflow:auto;outline:none}\n.banner.enter{animation:in .22s ease-out}\n.banner.closing{animation:out .2s ease-in forwards;pointer-events:none}\n.bottom{left:0;right:0;bottom:0;border-top:1px solid var(--border);box-shadow:0 -8px 28px rgba(15,23,42,.08);padding:20px 24px calc(20px + env(safe-area-inset-bottom,0px))}\n.root[data-theme=dark] .bottom{box-shadow:0 -8px 28px rgba(0,0,0,.4)}\n.bottom .inner{display:grid;grid-template-columns:minmax(min(100%,42ch),1fr) auto;grid-template-areas:\"text actions\" \"foot actions\";gap:4px 40px;align-items:center;max-width:1120px;margin:0 auto}\n.bottom .text{max-width:68ch}\n.bottom .btn,.bottom .link-btn{flex:0 0 auto}\n.card{bottom:16px;width:min(400px,calc(100vw - 32px));border:1px solid var(--border);border-radius:14px;padding:20px;box-shadow:0 12px 32px rgba(15,23,42,.14)}\n.root[data-theme=dark] .card{box-shadow:0 12px 32px rgba(0,0,0,.45)}\n.bottom-left{left:16px}\n.bottom-right{right:16px}\n.card .inner{display:flex;flex-direction:column;gap:16px}\n.text{grid-area:text}\n.actions{grid-area:actions;display:flex;flex-wrap:wrap;gap:8px;align-items:center;justify-content:flex-end}\n.card .actions{justify-content:stretch}\n.foot{grid-area:foot}\n.title{overflow-wrap:anywhere;font-size:17px;font-weight:650;line-height:1.35;letter-spacing:-.01em;text-wrap:balance;margin:0 0 6px}\n.desc{overflow-wrap:anywhere;margin:0;color:var(--muted);line-height:1.55;text-wrap:pretty}\n.desc a{color:var(--link);text-decoration:underline;text-underline-offset:3px}\n.btn,.link-btn{min-height:38px;padding:0 16px;border-radius:8px;font-size:13.5px;font-weight:600;cursor:pointer;white-space:nowrap;transition:background-color .12s ease-out,filter .12s ease-out,border-color .12s ease-out}\n.btn{border:2px solid var(--accent);background:var(--accent);color:var(--on-accent);flex:1 1 150px}\n.btn:hover{filter:brightness(.93)}\n.btn:active{filter:brightness(.87)}\n.link-btn{border:1px solid var(--off);background:transparent;color:var(--fg);text-decoration:none}\n.link-btn:hover{border-color:var(--fg)}\n@supports (color:color-mix(in srgb,red 50%,blue)){.link-btn:hover{background:color-mix(in srgb,var(--fg) 9%,transparent)}.link-btn:active{background:color-mix(in srgb,var(--fg) 14%,transparent)}}\n.card .link-btn{flex:1 1 100%}\nbutton:focus-visible,a:focus-visible,.dialog:focus-visible{outline:2px solid var(--focus);outline-offset:2px}\n.foot{font-size:12px;color:var(--muted);padding-top:8px}\n.foot a{color:var(--muted);text-decoration:none;display:inline-flex;align-items:center;gap:5px;vertical-align:middle}\n.foot a:hover{text-decoration:underline}\n.foot b{color:var(--fg);font-weight:700;letter-spacing:-.01em}\n.foot svg{display:block}\n.overlay{position:absolute;inset:0;background:rgba(10,12,16,.58);display:flex;align-items:center;justify-content:center;padding:16px}\n.overlay.enter{animation:fade .2s ease-out}\n.overlay.closing{animation:fadeout .2s ease-in forwards;pointer-events:none}\n.dialog{background:var(--bg);color:var(--fg);width:100%;max-width:560px;max-height:min(92vh,760px);display:flex;flex-direction:column;border-radius:16px;box-shadow:0 16px 48px rgba(0,0,0,.35);outline:none}\n.dialog.enter{animation:in .22s ease-out}\n.d-head{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:16px 8px 8px 24px}\n.d-head .title{margin:0;font-size:18px}\n.x{width:44px;height:44px;border:0;border-radius:10px;background:none;cursor:pointer;display:flex;align-items:center;justify-content:center;flex:none}\n.x:hover{background:var(--border)}\n.d-body{overflow:auto;padding:0 24px 8px;flex:1}\n.cat{border-top:1px solid var(--border);padding:10px 0 14px}\n.row{display:flex;align-items:center;justify-content:space-between;gap:12px}\n.cat-title{font-weight:600;font-size:15px}\n.always{font-size:12px;color:var(--muted);margin-right:4px}\n.cat p{margin:0;color:var(--muted)}\n.cat .svc{margin-top:6px;font-size:13px}\n.cat .svc b{font-weight:600;color:var(--fg)}\n.switch{position:relative;width:52px;height:44px;display:flex;align-items:center;justify-content:flex-end;flex:none}\n.switch input{position:absolute;inset:0;width:100%;height:100%;margin:0;opacity:0;cursor:pointer}\n.switch input:disabled{cursor:default}\n.track{width:44px;height:24px;border-radius:12px;background:var(--off);position:relative;transition:background .15s}\n.track::after{content:\"\";position:absolute;top:3px;left:3px;width:18px;height:18px;border-radius:50%;background:var(--thumb);transition:transform .15s}\ninput:checked+.track{background:var(--accent)}\ninput:checked+.track::after{transform:translateX(20px);background:var(--on-accent)}\ninput:disabled+.track{opacity:.6}\ninput:focus-visible+.track{outline:2px solid var(--focus);outline-offset:2px}\n.d-foot{display:flex;flex-direction:column;gap:8px;padding:12px 24px 16px;border-top:1px solid var(--border)}\n.d-foot .actions{justify-content:stretch}\n@keyframes in{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:none}}\n@keyframes fade{from{opacity:0}to{opacity:1}}\n@keyframes out{from{opacity:1;transform:none}to{opacity:0;transform:translateY(12px)}}\n@keyframes fadeout{from{opacity:1}to{opacity:0}}\n@media(max-width:960px){\n.bottom .inner{grid-template-columns:minmax(0,1fr);grid-template-areas:\"text\" \"actions\" \"foot\";gap:14px}\n.bottom .actions{justify-content:flex-start}\n}\n@media(max-width:640px){\n.bottom{padding:16px 16px calc(16px + env(safe-area-inset-bottom,0px))}\n.bottom .inner{gap:12px}\n.bottom .actions{justify-content:stretch}\n.bottom .btn{flex:1 1 130px}\n.bottom .link-btn{flex:1 1 100%}\n.card{left:8px;right:8px;bottom:8px;width:auto}\n.overlay{align-items:flex-end;padding:0}\n.dialog{max-width:none;border-radius:16px 16px 0 0;max-height:92vh}\n.d-head{padding-left:16px}\n.d-body{padding:0 16px 8px}\n.d-foot{padding:12px 16px calc(16px + env(safe-area-inset-bottom,0px))}\n.btn{flex-basis:130px}\n.btn,.link-btn{padding:0 12px;min-height:40px}\n}\n@media(prefers-reduced-motion:reduce){*,*::before,*::after{animation:none!important;transition:none!important}}\n`.replace(/\\n/g, \"\");\n","import { contrastRatio, onColor } from \"./contrast\";\nimport { UI_LABELS } from \"./texts\";\nimport { PALETTE, STYLES } from \"./styles\";\nimport {\n  CONSENT_CATEGORIES,\n  type ConsentCategory,\n  type ConsentChoices,\n  type ConsentConfig,\n  type ConsentLocale,\n  type ConsentTexts,\n} from \"./types\";\n\nexport type UIOptions = {\n  doc: Document;\n  config: ConsentConfig;\n  texts: ConsentTexts;\n  locale: ConsentLocale;\n  /** Current choice, used to preset the toggles. */\n  getChoices(): ConsentChoices | null;\n  /** Whether a valid choice exists, i.e. closing the settings must not bring back the banner. */\n  hasChoice(): boolean;\n  onAcceptAll(): void;\n  onRejectAll(): void;\n  onSave(choices: ConsentChoices): void;\n};\n\nexport type ConsentUI = {\n  /** `focus` moves keyboard focus into the banner; leave it off when the banner opens on page load. */\n  showBanner(focus?: boolean): void;\n  showSettings(): void;\n  hide(): void;\n  destroy(): void;\n};\n\nconst WORDMARK =\n  '<svg width=\"14\" height=\"14\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><rect width=\"16\" height=\"16\" rx=\"4\" fill=\"currentColor\" style=\"color:var(--fg)\"/><circle cx=\"8\" cy=\"8\" r=\"3\" fill=\"var(--bg)\"/></svg>';\n\nconst CLOSE_ICON =\n  '<svg width=\"16\" height=\"16\" viewBox=\"0 0 16 16\" aria-hidden=\"true\"><path d=\"M3 3l10 10M13 3L3 13\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" fill=\"none\"/></svg>';\n\nconst FOCUSABLE = \"button:not([disabled]),input:not([disabled]),a[href]\";\n\n/**\n * How long the exit animation runs. The banner and the settings layer fade\n * out before they disappear, so the page does not blink.\n */\nexport const EXIT_ANIMATION_MS = 200;\n\n/** A running exit animation: the node, its listener and its fallback timer. */\ntype Exit = {\n  node: HTMLElement;\n  listener: (event: Event) => void;\n  timer: number | undefined;\n};\n\nexport function createUI(options: UIOptions): ConsentUI {\n  const { doc, config, texts, locale } = options;\n  const labels = UI_LABELS[locale];\n  let host: HTMLElement | null = null;\n  let shadow: ShadowRoot | null = null;\n  let root: HTMLElement;\n  let banner: HTMLElement;\n  let overlay: HTMLElement;\n  let dialog: HTMLElement;\n  let settingsButton: HTMLElement;\n  let layer: \"none\" | \"banner\" | \"settings\" = \"none\";\n  let opener: HTMLElement | null = null;\n  let media: MediaQueryList | null = null;\n  const toggles = new Map<ConsentCategory, HTMLInputElement>();\n  /** The exit animations running right now; at most one per node. */\n  const exits: Exit[] = [];\n\n  function el<K extends keyof HTMLElementTagNameMap>(\n    tag: K,\n    props: Record<string, string> = {},\n    ...children: (Node | string)[]\n  ): HTMLElementTagNameMap[K] {\n    const node = doc.createElement(tag);\n    for (const key of Object.keys(props)) {\n      if (key === \"class\") node.className = props[key];\n      else node.setAttribute(key, props[key]);\n    }\n    for (const child of children) node.append(child);\n    return node;\n  }\n\n  function button(cls: string, text: string, onClick: () => void) {\n    const node = el(\"button\", { type: \"button\", class: cls }, text);\n    node.addEventListener(\"click\", onClick);\n    return node;\n  }\n\n  function powered(): HTMLElement {\n    const link = el(\"a\", {\n      href: `https://bitsnap.pl/?utm_source=consent_banner&utm_medium=referral&utm_content=${encodeURIComponent(doc.location?.hostname ?? \"\")}`,\n      target: \"_blank\",\n      rel: \"noopener\",\n    });\n    link.append(texts.poweredBy + \" \");\n    link.insertAdjacentHTML(\"beforeend\", WORDMARK);\n    link.append(el(\"b\", {}, \"bitsnap\"));\n    return el(\"div\", { class: \"foot\" }, link);\n  }\n\n  function description(): HTMLElement {\n    const node = el(\"p\", { class: \"desc\", id: \"d\" }, texts.description);\n    if (config.privacyPolicyUrl) {\n      node.append(\n        \" \",\n        el(\n          \"a\",\n          { href: config.privacyPolicyUrl, target: \"_blank\", rel: \"noopener\" },\n          labels.privacy,\n        ),\n      );\n    }\n    return node;\n  }\n\n  function buildBanner() {\n    settingsButton = button(\"link-btn\", texts.settings, () => showSettings());\n    banner = el(\n      \"div\",\n      {\n        class: `banner ${config.position === \"bottom\" ? \"bottom\" : `card ${config.position}`}`,\n        // Not modal: the page stays usable, so it is a live region, not a dialog.\n        role: \"region\",\n        \"aria-live\": \"polite\",\n        \"aria-labelledby\": \"t\",\n        \"aria-describedby\": \"d\",\n        tabindex: \"-1\",\n      },\n      el(\n        \"div\",\n        { class: \"inner\" },\n        el(\"div\", { class: \"text\" }, el(\"div\", { class: \"title\", id: \"t\" }, texts.title), description()),\n        el(\n          \"div\",\n          { class: \"actions\" },\n          button(\"btn\", texts.acceptAll, options.onAcceptAll),\n          button(\"btn\", texts.rejectAll, options.onRejectAll),\n          settingsButton,\n        ),\n        powered(),\n      ),\n    );\n  }\n\n  function category(id: ConsentCategory | \"necessary\"): HTMLElement {\n    const services = config.services.filter((service) => service.category === id);\n    const input = el(\"input\", { type: \"checkbox\", role: \"switch\", \"aria-labelledby\": `l-${id}`, \"aria-describedby\": `p-${id}` });\n    if (id === \"necessary\") {\n      input.checked = true;\n      input.disabled = true;\n    } else {\n      toggles.set(id, input);\n    }\n    const node = el(\n      \"div\",\n      { class: \"cat\" },\n      el(\n        \"div\",\n        { class: \"row\" },\n        el(\"span\", { class: \"cat-title\", id: `l-${id}` }, texts[`${id}Title` as keyof ConsentTexts]),\n        el(\n          \"span\",\n          { style: \"display:flex;align-items:center\" },\n          ...(id === \"necessary\" ? [el(\"span\", { class: \"always\" }, labels.always)] : []),\n          el(\"label\", { class: \"switch\" }, input, el(\"span\", { class: \"track\" })),\n        ),\n      ),\n      el(\"p\", { id: `p-${id}` }, texts[`${id}Description` as keyof ConsentTexts]),\n    );\n    if (services.length > 0) {\n      node.append(\n        el(\"p\", { class: \"svc\" }, el(\"b\", {}, `${labels.services}: `), services.map((s) => s.name).join(\", \")),\n      );\n    }\n    return node;\n  }\n\n  function buildSettings() {\n    const close = el(\"button\", { type: \"button\", class: \"x\", \"aria-label\": texts.close });\n    close.insertAdjacentHTML(\"beforeend\", CLOSE_ICON);\n    close.addEventListener(\"click\", () => closeSettings());\n    const body = el(\"div\", { class: \"d-body\" }, category(\"necessary\"));\n    for (const id of CONSENT_CATEGORIES) {\n      if (config.categories[id]) body.append(category(id));\n    }\n    dialog = el(\n      \"div\",\n      { class: \"dialog\", role: \"dialog\", \"aria-modal\": \"true\", \"aria-labelledby\": \"st\", tabindex: \"-1\" },\n      el(\"div\", { class: \"d-head\" }, el(\"div\", { class: \"title\", id: \"st\" }, texts.settings), close),\n      body,\n      el(\n        \"div\",\n        { class: \"d-foot\" },\n        el(\n          \"div\",\n          { class: \"actions\" },\n          button(\"btn\", texts.save, () => options.onSave(readToggles())),\n          button(\"btn\", texts.acceptAll, options.onAcceptAll),\n          button(\"btn\", texts.rejectAll, options.onRejectAll),\n        ),\n        powered(),\n      ),\n    );\n    overlay = el(\"div\", { class: \"overlay\" }, dialog);\n    overlay.addEventListener(\"mousedown\", (event) => {\n      if (event.target === overlay) closeSettings();\n    });\n  }\n\n  function readToggles(): ConsentChoices {\n    const choices = { analytics: false, marketing: false, preferences: false };\n    toggles.forEach((input, key) => (choices[key] = input.checked));\n    return choices;\n  }\n\n  function applyTheme() {\n    const dark = config.theme === \"dark\" || (config.theme === \"auto\" && !!media?.matches);\n    root.setAttribute(\"data-theme\", dark ? \"dark\" : \"light\");\n    applyAccent(dark);\n  }\n\n  /** A custom accent that is too faint on the dark background gives way to the dark theme's own. */\n  function applyAccent(dark: boolean) {\n    const accent = config.accentColor;\n    if (!accent) return;\n    if (dark && contrastRatio(accent, PALETTE.dark.bg) < 3) {\n      for (const name of [\"--accent\", \"--focus\", \"--on-accent\"]) root.style.removeProperty(name);\n      return;\n    }\n    root.style.setProperty(\"--accent\", accent);\n    root.style.setProperty(\"--focus\", accent);\n    root.style.setProperty(\"--on-accent\", onColor(accent));\n  }\n\n  function ensure() {\n    if (host) return;\n    host = el(\"div\", { id: \"bitsnap-consent\", \"data-bitsnap-consent-host\": \"\" });\n    shadow = host.attachShadow({ mode: \"open\" });\n    shadow.append(el(\"style\", {}, STYLES));\n    root = el(\"div\", { class: \"root\", lang: locale });\n    buildBanner();\n    buildSettings();\n    banner.hidden = true;\n    overlay.hidden = true;\n    root.append(banner, overlay);\n    shadow.append(root);\n    if (typeof doc.defaultView?.matchMedia === \"function\") {\n      media = doc.defaultView.matchMedia(\"(prefers-color-scheme: dark)\");\n      media.addEventListener?.(\"change\", applyTheme);\n    }\n    applyTheme();\n    doc.body.append(host);\n  }\n\n  function focusables(): HTMLElement[] {\n    return Array.from(dialog.querySelectorAll<HTMLElement>(FOCUSABLE));\n  }\n\n  /** Whether the visitor asked for less motion: the layers then come and go at once. */\n  function reducedMotion(): boolean {\n    try {\n      return doc.defaultView?.matchMedia?.(\"(prefers-reduced-motion: reduce)\").matches === true;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Stops a running exit animation; the node stays where it is. */\n  function stopExit(node: HTMLElement) {\n    const index = exits.findIndex((exit) => exit.node === node);\n    if (index === -1) return;\n    const [exit] = exits.splice(index, 1);\n    exit.node.removeEventListener(\"animationend\", exit.listener);\n    if (exit.timer !== undefined) doc.defaultView?.clearTimeout(exit.timer);\n    exit.node.classList.remove(\"closing\");\n  }\n\n  /** Hides the node at once, without an animation. */\n  function hideNow(node: HTMLElement) {\n    stopExit(node);\n    node.hidden = true;\n  }\n\n  /**\n   * Fades the node out and hides it when the animation ends. The timer is the\n   * fallback for a browser that sends no event (a hidden tab, a reduced\n   * motion setting): the layer always disappears.\n   */\n  function exitTo(node: HTMLElement) {\n    stopExit(node);\n    if (node.hidden) return;\n    if (reducedMotion()) {\n      node.hidden = true;\n      return;\n    }\n    node.classList.add(\"closing\");\n    const listener = (event: Event) => {\n      // Another animation of a child ends first; only our own counts.\n      if (event.target !== node) return;\n      finish();\n    };\n    const timer = doc.defaultView?.setTimeout(finish, EXIT_ANIMATION_MS + 120);\n    function finish() {\n      stopExit(node);\n      node.hidden = true;\n    }\n    node.addEventListener(\"animationend\", listener);\n    exits.push({ node, listener, timer });\n  }\n\n  /** Shows the node and plays the entrance animation again. */\n  function enter(node: HTMLElement) {\n    stopExit(node);\n    node.hidden = false;\n    // The class has to leave and come back, or the animation does not restart.\n    node.classList.remove(\"enter\");\n    void node.offsetWidth;\n    node.classList.add(\"enter\");\n  }\n\n  function onKeydown(event: KeyboardEvent) {\n    if (layer !== \"settings\") return;\n    if (event.key === \"Escape\") {\n      event.preventDefault();\n      closeSettings();\n      return;\n    }\n    if (event.key !== \"Tab\") return;\n    const items = focusables();\n    if (items.length === 0) return;\n    const active = shadow?.activeElement as HTMLElement | null;\n    const first = items[0];\n    const last = items[items.length - 1];\n    const outside = !active || !dialog.contains(active);\n    if (event.shiftKey && (outside || active === first || active === dialog)) {\n      event.preventDefault();\n      last.focus();\n    } else if (!event.shiftKey && (outside || active === last)) {\n      event.preventDefault();\n      first.focus();\n    }\n  }\n\n  function showBanner(focus = false) {\n    try {\n      ensure();\n      layer = \"banner\";\n      doc.removeEventListener(\"keydown\", onKeydown, true);\n      hideNow(overlay);\n      enter(banner);\n      if (focus) banner.focus({ preventScroll: true });\n    } catch {\n      // never throw into the host page\n    }\n  }\n\n  function showSettings() {\n    try {\n      ensure();\n      if (layer !== \"settings\") {\n        const active = doc.activeElement as HTMLElement | null;\n        opener = active && active !== host && active !== doc.body ? active : null;\n      }\n      const current = options.getChoices();\n      toggles.forEach((input, key) => (input.checked = !!current?.[key]));\n      layer = \"settings\";\n      hideNow(banner);\n      enter(overlay);\n      enter(dialog);\n      doc.addEventListener(\"keydown\", onKeydown, true);\n      dialog.focus({ preventScroll: true });\n    } catch {\n      // never throw into the host page\n    }\n  }\n\n  function closeSettings() {\n    if (layer !== \"settings\") return;\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    exitTo(overlay);\n    if (options.hasChoice()) {\n      layer = \"none\";\n      opener?.focus?.({ preventScroll: true });\n    } else {\n      layer = \"banner\";\n      enter(banner);\n      settingsButton.focus({ preventScroll: true });\n    }\n  }\n\n  function hide() {\n    if (!host) return;\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    const wasSettings = layer === \"settings\";\n    layer = \"none\";\n    exitTo(banner);\n    exitTo(overlay);\n    if (wasSettings) opener?.focus?.({ preventScroll: true });\n  }\n\n  function destroy() {\n    doc.removeEventListener(\"keydown\", onKeydown, true);\n    media?.removeEventListener?.(\"change\", applyTheme);\n    while (exits.length > 0) stopExit(exits[0]!.node);\n    host?.remove();\n    host = null;\n    shadow = null;\n    layer = \"none\";\n  }\n\n  return { showBanner, showSettings, hide, destroy };\n}\n"]}