<?php
// Normally included by claim.php / product.php after they've already set the
// response code. Guard against direct requests (e.g. bots probing the file
// directly), which would otherwise skip bootstrap.php's autoloader and fatal
// on the KeyLair\Settings reference below.
if (!class_exists('KeyLair\\Settings')) {
    require __DIR__ . '/bootstrap.php';
}
// Kept deliberately generic — never reveals whether a token format was valid,
// just missing/expired, to avoid helping token guessing.
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Link not found</title>
<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@600&family=Inter:wght@400;500&display=swap" rel="stylesheet">
<link rel="stylesheet" href="/assets/css/tokens.css">
<?= \KeyLair\Settings::faviconTag() ?>
<style>
  body{background:var(--bg-void); color:var(--text-primary); font-family:var(--font-body); min-height:100vh; display:flex; align-items:center; justify-content:center; text-align:center; padding:24px;}
  h1{font-family:var(--font-display); font-size:22px; margin:0 0 10px;}
  p{color:var(--text-muted); font-size:14px; max-width:360px; margin:0 auto;}
</style>
</head>
<body>
  <div>
    <h1>This link isn't available</h1>
    <p>It may have expired, been disabled, or the address may be incorrect. Contact whoever sent you this link if you think that's a mistake.</p>
  </div>
</body>
</html>
