<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <!-- Build: 2025-11-03 -->

    <!-- Security Headers - CSP Refined -->
    <!-- Note: 'unsafe-inline' removed from script-src, kept for style-src due to React/Tailwind inline styles -->
    <!-- TODO: Implement nonce-based CSP for style-src when inline styles are fully refactored -->
    <meta http-equiv="Content-Security-Policy" content="
      default-src 'self';
      script-src 'self' https://www.googletagmanager.com https://esm.sh https://*.supabase.co https://static.cloudflareinsights.com;
      style-src 'self' 'unsafe-inline';
      img-src 'self' data: https: blob:;
      font-src 'self' data:;
      connect-src 'self' https://*.supabase.co https://*.agentbio.net https://www.google-analytics.com https://api.stripe.com https://raw.githack.com https://raw.githubusercontent.com wss://*.supabase.co wss://*.agentbio.net https://cloudflareinsights.com;
      frame-src 'self' https://js.stripe.com;
      media-src 'self' blob:;
      worker-src 'self' blob:;
      manifest-src 'self';
      form-action 'self';
      base-uri 'self';
      upgrade-insecure-requests;
    ">
    <meta http-equiv="X-Content-Type-Options" content="nosniff">
    <meta http-equiv="X-Frame-Options" content="SAMEORIGIN">
    <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin">
    <meta http-equiv="Permissions-Policy" content="geolocation=(), microphone=(), camera=()">

    <!-- Preconnect to critical origins for faster resource loading -->
    <link rel="preconnect" href="https://images.unsplash.com" crossorigin>
    <link rel="preconnect" href="https://www.googletagmanager.com" crossorigin>
    <link rel="preconnect" href="https://www.google-analytics.com" crossorigin>

    <!-- DNS prefetch for third-party domains (Core Web Vitals optimization) -->
    <link rel="dns-prefetch" href="https://images.unsplash.com">
    <link rel="dns-prefetch" href="https://fonts.googleapis.com">
    <link rel="dns-prefetch" href="https://fonts.gstatic.com">
    <link rel="dns-prefetch" href="https://www.googletagmanager.com">
    <link rel="dns-prefetch" href="https://www.google-analytics.com">
    <link rel="dns-prefetch" href="https://static.cloudflareinsights.com">

    <!-- Preconnect for Supabase (critical for app functionality) -->
    <link rel="preconnect" href="https://supabase.co" crossorigin>

    <!-- Preload critical assets for faster LCP (Largest Contentful Paint) -->
    <link rel="preload" as="image" href="/Cover.png" fetchpriority="high" type="image/png">
    <link rel="preload" as="image" href="/Icon.png" fetchpriority="high" type="image/png">

    <!-- Prefetch likely next pages for faster navigation -->
    <link rel="prefetch" href="/auth/login" as="document">
    <link rel="prefetch" href="/auth/register" as="document">

    <!-- Google Analytics - Deferred loading via external script (CSP compliant) -->
    <script src="/scripts/analytics.js" defer></script>

    <link rel="icon" type="image/png" href="/Icon.png" />
    <link rel="apple-touch-icon" href="/Icon.png" />
    <link rel="manifest" href="/manifest.json" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes, viewport-fit=cover" />
    <meta name="description" content="Purpose-built link-in-bio for real estate agents. Showcase properties, capture leads, and book appointments from Instagram. Start converting followers into clients today." />
    <meta name="theme-color" content="#0ea5e9" />
    <meta name="mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="default" />

    <!-- Open Graph / Facebook -->
    <meta property="og:type" content="website" />
    <meta property="og:url" content="https://agentbio.net/" />
    <meta property="og:title" content="Real Estate Agent Bio Page Builder | Turn Instagram Followers into Leads – AgentBio" />
    <meta property="og:description" content="Purpose-built link-in-bio for real estate agents. Showcase properties, capture leads, and book appointments from Instagram. Start converting followers into clients today." />
    <meta property="og:image" content="https://agentbio.net/Cover.png" />

    <!-- Twitter -->
    <meta property="twitter:card" content="summary_large_image" />
    <meta property="twitter:url" content="https://agentbio.net/" />
    <meta property="twitter:title" content="Real Estate Agent Bio Page Builder | Turn Instagram Followers into Leads – AgentBio" />
    <meta property="twitter:description" content="Purpose-built link-in-bio for real estate agents. Showcase properties, capture leads, and book appointments from Instagram. Start converting followers into clients today." />
    <meta property="twitter:image" content="https://agentbio.net/Cover.png" />

    <title>Real Estate Agent Bio Page Builder | Turn Instagram Followers into Leads – AgentBio</title>
    <script type="module" crossorigin src="/assets/index-L7VuHffJ.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-hQWbvLKX.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>
