@onabl/contracts 0.1.0

package/README.md

@@ -0,0 +1 @@
+# `contracts`

package/dist/common.d.ts

@@ -0,0 +1,13 @@
+import { z } from "zod";
+export declare const PaginationQuerySchema: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+}, z.core.$strip>;
+export declare const SearchPaginationQuerySchema: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    search: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PaginationQuery = z.infer<typeof PaginationQuerySchema>;
+export type SearchPaginationQuery = z.infer<typeof SearchPaginationQuerySchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;iBAEtC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/common.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SearchPaginationQuerySchema = exports.PaginationQuerySchema = void 0;
+const zod_1 = require("zod");
+exports.PaginationQuerySchema = zod_1.z.object({
+    limit: zod_1.z.coerce.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.coerce.number().int().min(0).optional().default(0),
+});
+exports.SearchPaginationQuerySchema = exports.PaginationQuerySchema.extend({
+    search: zod_1.z.string().optional(),
+});

package/dist/contacts.d.ts

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export declare const UpdateContactNotesSchema: z.ZodObject<{
+    notes: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export declare const ContactFilterQuerySchema: z.ZodObject<{
+    search: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+}, z.core.$strip>;
+export type UpdateContactNotes = z.infer<typeof UpdateContactNotesSchema>;
+export type ContactFilterQuery = z.infer<typeof ContactFilterQuerySchema>;
+//# sourceMappingURL=contacts.d.ts.map

package/dist/contacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contacts.d.ts","sourceRoot":"","sources":["../src/contacts.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/contacts.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContactFilterQuerySchema = exports.UpdateContactNotesSchema = void 0;
+// packages/contracts/src/contacts.ts
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+exports.UpdateContactNotesSchema = zod_1.z.object({
+    notes: (0, sanitize_js_1.safeText)(zod_1.z.string().max(2000)),
+});
+exports.ContactFilterQuerySchema = zod_1.z.object({
+    search: zod_1.z.string().optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.coerce.number().int().min(0).optional().default(0),
+});

package/dist/discount-codes.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const CreateDiscountCodeSchema: z.ZodObject<{
+    code: z.ZodString;
+    type: z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>;
+    value: z.ZodNumber;
+    usageLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    active: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    formId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const UpdateDiscountCodeSchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    value: z.ZodOptional<z.ZodNumber>;
+    usageLimit: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>;
+    expiresAt: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>>;
+    active: z.ZodOptional<z.ZodDefault<z.ZodOptional<z.ZodBoolean>>>;
+    formId: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+}, z.core.$strip>;
+export type CreateDiscountCode = z.infer<typeof CreateDiscountCodeSchema>;
+export type UpdateDiscountCode = z.infer<typeof UpdateDiscountCodeSchema>;
+//# sourceMappingURL=discount-codes.d.ts.map

package/dist/discount-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discount-codes.d.ts","sourceRoot":"","sources":["../src/discount-codes.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAmBtB,eAAO,MAAM,wBAAwB;;;;;;;;;;;iBAA6D,CAAC;AAEnG,eAAO,MAAM,wBAAwB;;;;;;;;;;iBAA0F,CAAC;AAEhI,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/discount-codes.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateDiscountCodeSchema = exports.CreateDiscountCodeSchema = void 0;
+// packages/contracts/src/discount-codes.ts
+const zod_1 = require("zod");
+const DiscountCodeShape = zod_1.z.object({
+    code: zod_1.z
+        .string()
+        .min(3)
+        .max(50)
+        .regex(/^[A-Z0-9_-]+$/, "Code must be uppercase letters, numbers, hyphens and underscores only"),
+    type: zod_1.z.enum(["PERCENT", "FIXED"]),
+    value: zod_1.z.number().positive(),
+    usageLimit: zod_1.z.number().int().positive().nullable().optional(),
+    expiresAt: zod_1.z.iso.datetime().nullable().optional(),
+    active: zod_1.z.boolean().optional().default(true),
+    formId: zod_1.z.string().uuid().nullable().optional(),
+});
+const percentWithinRange = (d) => d.type !== "PERCENT" || d.value === undefined || d.value <= 100;
+const percentError = { message: "A percentage discount cannot exceed 100%", path: ["value"] };
+exports.CreateDiscountCodeSchema = DiscountCodeShape.refine(percentWithinRange, percentError);
+exports.UpdateDiscountCodeSchema = DiscountCodeShape.partial().omit({ code: true }).refine(percentWithinRange, percentError);

package/dist/email-templates.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const EmailTemplateTypeSchema: z.ZodEnum<{
+    QUOTE_READY: "QUOTE_READY";
+    QUOTE_REVISED: "QUOTE_REVISED";
+    QUOTE_WITHDRAWN: "QUOTE_WITHDRAWN";
+    QUOTE_RECOVERY: "QUOTE_RECOVERY";
+    INVOICE_READY: "INVOICE_READY";
+}>;
+export type EmailTemplateType = z.infer<typeof EmailTemplateTypeSchema>;
+export declare const UpsertEmailTemplateSchema: z.ZodObject<{
+    subject: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    body: z.ZodString;
+    active: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export type UpsertEmailTemplateDto = z.infer<typeof UpsertEmailTemplateSchema>;
+export declare const PreviewEmailTemplateSchema: z.ZodObject<{
+    subject: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    body: z.ZodString;
+}, z.core.$strip>;
+export type PreviewEmailTemplateDto = z.infer<typeof PreviewEmailTemplateSchema>;
+//# sourceMappingURL=email-templates.d.ts.map

package/dist/email-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-templates.d.ts","sourceRoot":"","sources":["../src/email-templates.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,uBAAuB;;;;;;EAAiG,CAAC;AAEtI,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQxE,eAAO,MAAM,yBAAyB;;;;iBAA0B,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,eAAO,MAAM,0BAA0B;;;iBAA+C,CAAC;AACvF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/email-templates.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PreviewEmailTemplateSchema = exports.UpsertEmailTemplateSchema = exports.EmailTemplateTypeSchema = void 0;
+// packages/contracts/src/email-templates.ts
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+exports.EmailTemplateTypeSchema = zod_1.z.enum(["QUOTE_READY", "QUOTE_REVISED", "QUOTE_WITHDRAWN", "QUOTE_RECOVERY", "INVOICE_READY"]);
+const EmailTemplateBaseSchema = zod_1.z.object({
+    subject: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(200)),
+    body: zod_1.z.string().min(1).max(10000), // sanitized server-side, not in the schema
+    active: zod_1.z.boolean().optional().default(true),
+});
+exports.UpsertEmailTemplateSchema = EmailTemplateBaseSchema;
+exports.PreviewEmailTemplateSchema = EmailTemplateBaseSchema.omit({ active: true });

package/dist/follow-up.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+export declare const CreateFollowUpRuleSchema: z.ZodObject<{
+    daysAfterSubmittedNoView: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    daysAfterViewedNoDecision: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    daysBeforeExpiry: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    templateSubject: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    templateBody: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    active: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const UpdateFollowUpRuleSchema: z.ZodObject<{
+    daysAfterSubmittedNoView: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>;
+    daysAfterViewedNoDecision: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>;
+    daysBeforeExpiry: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodNumber>>>;
+    templateSubject: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    templateBody: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    active: z.ZodOptional<z.ZodDefault<z.ZodOptional<z.ZodBoolean>>>;
+}, z.core.$strip>;
+export declare const PreviewFollowUpRuleSchema: z.ZodObject<{
+    templateSubject: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    templateBody: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type CreateFollowUpRuleDto = z.infer<typeof CreateFollowUpRuleSchema>;
+export type UpdateFollowUpRuleDto = z.infer<typeof UpdateFollowUpRuleSchema>;
+export type PreviewFollowUpRuleDto = z.infer<typeof PreviewFollowUpRuleSchema>;
+//# sourceMappingURL=follow-up.d.ts.map

package/dist/follow-up.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"follow-up.d.ts","sourceRoot":"","sources":["../src/follow-up.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,wBAAwB;;;;;;;iBAEnC,CAAC;AAGH,eAAO,MAAM,wBAAwB;;;;;;;iBAAmC,CAAC;AAEzE,eAAO,MAAM,yBAAyB;;;iBAA2E,CAAC;AAElH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC7E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/follow-up.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PreviewFollowUpRuleSchema = exports.UpdateFollowUpRuleSchema = exports.CreateFollowUpRuleSchema = void 0;
+// packages/contracts/src/follow-up.ts
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+const FollowUpRuleBaseSchema = zod_1.z.object({
+    daysAfterSubmittedNoView: zod_1.z.number().int().positive().nullable().optional(),
+    daysAfterViewedNoDecision: zod_1.z.number().int().positive().nullable().optional(),
+    daysBeforeExpiry: zod_1.z.number().int().positive().nullable().optional(),
+    templateSubject: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(200)),
+    templateBody: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(5000)),
+    active: zod_1.z.boolean().optional().default(true),
+});
+exports.CreateFollowUpRuleSchema = FollowUpRuleBaseSchema.refine((data) => data.daysAfterSubmittedNoView !== undefined || data.daysAfterViewedNoDecision !== undefined || data.daysBeforeExpiry !== undefined, {
+    message: "At least one trigger type must be set",
+});
+// Partial is applied to the base schema before refinement
+exports.UpdateFollowUpRuleSchema = FollowUpRuleBaseSchema.partial();
+exports.PreviewFollowUpRuleSchema = FollowUpRuleBaseSchema.pick({ templateSubject: true, templateBody: true });

package/dist/forms.d.ts

@@ -0,0 +1,75 @@
+import { z } from "zod";
+import type { FormConfig } from "@onabl/types/config";
+export declare const FormConfigMetaSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    currency: z.ZodString;
+    currencySymbol: z.ZodString;
+    footerNote: z.ZodString;
+    quoteValidDays: z.ZodNumber;
+    declineReasons: z.ZodArray<z.ZodString>;
+}, z.core.$loose>;
+export declare const FormConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<"1.0">;
+    meta: z.ZodObject<{
+        name: z.ZodString;
+        slug: z.ZodString;
+        currency: z.ZodString;
+        currencySymbol: z.ZodString;
+        footerNote: z.ZodString;
+        quoteValidDays: z.ZodNumber;
+        declineReasons: z.ZodArray<z.ZodString>;
+    }, z.core.$loose>;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    fields: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        key: z.ZodString;
+        type: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$loose>>;
+    rules: z.ZodObject<{
+        phase1: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodString;
+            label: z.ZodString;
+            showOnQuote: z.ZodBoolean;
+        }, z.core.$loose>>;
+        phase2: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodString;
+            label: z.ZodString;
+            showOnQuote: z.ZodBoolean;
+        }, z.core.$loose>>;
+        phase3: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodString;
+            label: z.ZodString;
+            showOnQuote: z.ZodBoolean;
+        }, z.core.$loose>>;
+    }, z.core.$strip>;
+    tokens: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$loose>;
+export declare const CreateFormSchema: z.ZodObject<{
+    name: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    slug: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const UpdateFormConfigSchema: z.ZodObject<{
+    config: z.ZodOptional<z.ZodCustom<FormConfig, FormConfig>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        DRAFT: "DRAFT";
+        ACTIVE: "ACTIVE";
+        ARCHIVED: "ARCHIVED";
+    }>>;
+    autoInvoice: z.ZodOptional<z.ZodBoolean>;
+    depositPercent: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    depositDueDays: z.ZodOptional<z.ZodNumber>;
+    balanceDueDays: z.ZodOptional<z.ZodNumber>;
+    websiteBaseUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type CreateForm = z.infer<typeof CreateFormSchema>;
+export type UpdateFormConfig = z.infer<typeof UpdateFormConfigSchema>;
+//# sourceMappingURL=forms.d.ts.map

package/dist/forms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../src/forms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,qBAAqB,CAAC;AA4BpD,eAAO,MAAM,oBAAoB;;;;;;;;iBAUjB,CAAC;AAEjB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAab,CAAC;AAEjB,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;iBAWjC,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/forms.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateFormConfigSchema = exports.CreateFormSchema = exports.FormConfigSchema = exports.FormConfigMetaSchema = void 0;
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+const slugRegex = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+// Shape-level validation only — enough to catch a malformed field/rule (not an
+// object, missing the identifiers the engine and editor key off of) without
+// hand-duplicating every rule variant from @onabl/types as a strict Zod union,
+// which would risk rejecting legitimately stored configs this schema hasn't
+// been proven against.
+const FormFieldSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    key: zod_1.z.string(),
+    type: zod_1.z.string(),
+    label: zod_1.z.string(),
+})
+    .passthrough();
+const PricingRuleSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    type: zod_1.z.string(),
+    label: zod_1.z.string(),
+    showOnQuote: zod_1.z.boolean(),
+})
+    .passthrough();
+exports.FormConfigMetaSchema = zod_1.z
+    .object({
+    name: zod_1.z.string(),
+    slug: zod_1.z.string(),
+    currency: zod_1.z.string(),
+    currencySymbol: zod_1.z.string(),
+    footerNote: zod_1.z.string(),
+    quoteValidDays: zod_1.z.number(),
+    declineReasons: zod_1.z.array(zod_1.z.string()),
+})
+    .passthrough();
+exports.FormConfigSchema = zod_1.z
+    .object({
+    version: zod_1.z.literal("1.0"),
+    meta: exports.FormConfigMetaSchema,
+    steps: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), label: zod_1.z.string(), title: zod_1.z.string().optional() })),
+    fields: zod_1.z.array(FormFieldSchema),
+    rules: zod_1.z.object({
+        phase1: zod_1.z.array(PricingRuleSchema),
+        phase2: zod_1.z.array(PricingRuleSchema),
+        phase3: zod_1.z.array(PricingRuleSchema),
+    }),
+    tokens: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.number(), zod_1.z.string()])),
+})
+    .passthrough();
+exports.CreateFormSchema = zod_1.z.object({
+    name: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(100)),
+    slug: zod_1.z.string().min(3).max(60).regex(slugRegex, "Slug must be lowercase letters, numbers and hyphens only").optional(),
+});
+exports.UpdateFormConfigSchema = zod_1.z.object({
+    config: zod_1.z.custom().optional(),
+    status: zod_1.z.enum(["DRAFT", "ACTIVE", "ARCHIVED"]).optional(),
+    autoInvoice: zod_1.z.boolean().optional(),
+    depositPercent: zod_1.z.number().int().min(1).max(99).nullable().optional(),
+    depositDueDays: zod_1.z.number().int().min(1).max(365).optional(),
+    balanceDueDays: zod_1.z.number().int().min(1).max(365).optional(),
+    // When set, customer quote/invoice emails link to this domain (client.com/quote/:uuid,
+    // client.com/invoice/:uuid) instead of Onabl's hosted pages. Pass null to clear back to
+    // Onabl-hosted, matching the depositPercent nullable-clear pattern above.
+    websiteBaseUrl: zod_1.z.string().url().nullable().optional(),
+});

package/dist/invites.d.ts

@@ -0,0 +1,24 @@
+import { z } from "zod";
+export declare const CreateTeamInviteSchema: z.ZodObject<{
+    email: z.ZodString;
+    role: z.ZodDefault<z.ZodEnum<{
+        OWNER: "OWNER";
+        ADMIN: "ADMIN";
+        MEMBER: "MEMBER";
+    }>>;
+}, z.core.$strip>;
+export declare const AcceptTeamInviteSchema: z.ZodObject<{
+    token: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const ChangeMemberRoleSchema: z.ZodObject<{
+    role: z.ZodEnum<{
+        OWNER: "OWNER";
+        ADMIN: "ADMIN";
+        MEMBER: "MEMBER";
+    }>;
+}, z.core.$strip>;
+export type CreateTeamInvite = z.infer<typeof CreateTeamInviteSchema>;
+export type AcceptTeamInvite = z.infer<typeof AcceptTeamInviteSchema>;
+export type ChangeMemberRole = z.infer<typeof ChangeMemberRoleSchema>;
+//# sourceMappingURL=invites.d.ts.map

package/dist/invites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.d.ts","sourceRoot":"","sources":["../src/invites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,sBAAsB;;;;;;;iBAGjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;iBAEjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/invites.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangeMemberRoleSchema = exports.AcceptTeamInviteSchema = exports.CreateTeamInviteSchema = void 0;
+const zod_1 = require("zod");
+exports.CreateTeamInviteSchema = zod_1.z.object({
+    email: zod_1.z.string().email(),
+    role: zod_1.z.enum(["OWNER", "ADMIN", "MEMBER"]).default("MEMBER"),
+});
+exports.AcceptTeamInviteSchema = zod_1.z.object({
+    token: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1).max(120),
+});
+exports.ChangeMemberRoleSchema = zod_1.z.object({
+    role: zod_1.z.enum(["OWNER", "ADMIN", "MEMBER"]),
+});

package/dist/public-api.d.ts

@@ -0,0 +1,296 @@
+import { z } from "zod";
+import type { Condition } from "@onabl/types/config";
+export declare const PublicFormFieldSchema: z.ZodObject<{
+    id: z.ZodString;
+    key: z.ZodString;
+    type: z.ZodEnum<{
+        number: "number";
+        date: "date";
+        text: "text";
+        radio: "radio";
+        select: "select";
+        toggle: "toggle";
+        multicheck: "multicheck";
+        hidden: "hidden";
+    }>;
+    label: z.ZodString;
+    stepId: z.ZodNullable<z.ZodString>;
+    required: z.ZodBoolean;
+    defaultValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    placeholder: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    min: z.ZodOptional<z.ZodNumber>;
+    max: z.ZodOptional<z.ZodNumber>;
+    options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>;
+    condition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+    scopeCondition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+}, z.core.$loose>;
+export declare const PublicFormConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<"1.0">;
+    meta: z.ZodObject<{
+        name: z.ZodString;
+        slug: z.ZodString;
+        currency: z.ZodString;
+        currencySymbol: z.ZodString;
+        footerNote: z.ZodString;
+        quoteValidDays: z.ZodNumber;
+        declineReasons: z.ZodArray<z.ZodString>;
+        intro: z.ZodOptional<z.ZodObject<{
+            headline: z.ZodString;
+            body: z.ZodOptional<z.ZodString>;
+            ctaLabel: z.ZodOptional<z.ZodString>;
+            backgroundImageUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+    fields: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        key: z.ZodString;
+        type: z.ZodEnum<{
+            number: "number";
+            date: "date";
+            text: "text";
+            radio: "radio";
+            select: "select";
+            toggle: "toggle";
+            multicheck: "multicheck";
+            hidden: "hidden";
+        }>;
+        label: z.ZodString;
+        stepId: z.ZodNullable<z.ZodString>;
+        required: z.ZodBoolean;
+        defaultValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        placeholder: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        min: z.ZodOptional<z.ZodNumber>;
+        max: z.ZodOptional<z.ZodNumber>;
+        options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            value: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>>;
+        condition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+        scopeCondition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export declare const PublicFormSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    currency: z.ZodString;
+    currencySymbol: z.ZodString;
+    footerNote: z.ZodString;
+    quoteValidDays: z.ZodNumber;
+    declineReasons: z.ZodArray<z.ZodString>;
+    hasActiveDiscountCodes: z.ZodBoolean;
+    brandPrimaryColor: z.ZodNullable<z.ZodString>;
+    brandSecondaryColor: z.ZodNullable<z.ZodString>;
+    brandAccentColor: z.ZodNullable<z.ZodString>;
+    brandBackgroundColor: z.ZodNullable<z.ZodString>;
+    brandTextColor: z.ZodNullable<z.ZodString>;
+    logoUrl: z.ZodNullable<z.ZodString>;
+    introBgUrl: z.ZodNullable<z.ZodString>;
+    businessName: z.ZodString;
+    customerConsentText: z.ZodNullable<z.ZodString>;
+    privacyPolicyUrl: z.ZodNullable<z.ZodString>;
+    config: z.ZodObject<{
+        version: z.ZodLiteral<"1.0">;
+        meta: z.ZodObject<{
+            name: z.ZodString;
+            slug: z.ZodString;
+            currency: z.ZodString;
+            currencySymbol: z.ZodString;
+            footerNote: z.ZodString;
+            quoteValidDays: z.ZodNumber;
+            declineReasons: z.ZodArray<z.ZodString>;
+            intro: z.ZodOptional<z.ZodObject<{
+                headline: z.ZodString;
+                body: z.ZodOptional<z.ZodString>;
+                ctaLabel: z.ZodOptional<z.ZodString>;
+                backgroundImageUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>>;
+        }, z.core.$loose>;
+        steps: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>;
+        fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            key: z.ZodString;
+            type: z.ZodEnum<{
+                number: "number";
+                date: "date";
+                text: "text";
+                radio: "radio";
+                select: "select";
+                toggle: "toggle";
+                multicheck: "multicheck";
+                hidden: "hidden";
+            }>;
+            label: z.ZodString;
+            stepId: z.ZodNullable<z.ZodString>;
+            required: z.ZodBoolean;
+            defaultValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            placeholder: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            min: z.ZodOptional<z.ZodNumber>;
+            max: z.ZodOptional<z.ZodNumber>;
+            options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                value: z.ZodString;
+                label: z.ZodString;
+                description: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>>>;
+            condition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+            scopeCondition: z.ZodOptional<z.ZodCustom<Condition, Condition>>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>;
+}, z.core.$loose>;
+export declare const ValidateCodeResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    valid: z.ZodLiteral<false>;
+    error: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    valid: z.ZodLiteral<true>;
+    label: z.ZodString;
+}, z.core.$strip>]>;
+export declare const SubmissionCreateResponseSchema: z.ZodObject<{
+    uuid: z.ZodString;
+    reference: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>;
+export declare const QuoteSchema: z.ZodObject<{
+    uuid: z.ZodString;
+    reference: z.ZodString;
+    status: z.ZodString;
+    lineItems: z.ZodArray<z.ZodObject<{}, z.core.$loose>>;
+    phase1Total: z.ZodString;
+    phase2Total: z.ZodString;
+    finalTotal: z.ZodString;
+    codeDiscountLabel: z.ZodNullable<z.ZodString>;
+    codeDiscountType: z.ZodNullable<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    codeDiscountValue: z.ZodNullable<z.ZodString>;
+    manualDiscountType: z.ZodNullable<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    manualDiscountValue: z.ZodNullable<z.ZodString>;
+    totalAfterDiscount: z.ZodString;
+    validUntil: z.ZodString;
+    viewedAt: z.ZodNullable<z.ZodString>;
+    acceptedAt: z.ZodNullable<z.ZodString>;
+    declinedAt: z.ZodNullable<z.ZodString>;
+    declineReason: z.ZodNullable<z.ZodString>;
+    declineNote: z.ZodNullable<z.ZodString>;
+    withdrawnAt: z.ZodNullable<z.ZodString>;
+    withdrawNote: z.ZodNullable<z.ZodString>;
+    overrideTotal: z.ZodNullable<z.ZodString>;
+    revisedLineItems: z.ZodNullable<z.ZodArray<z.ZodObject<{}, z.core.$loose>>>;
+    revisedTotal: z.ZodNullable<z.ZodString>;
+    tenantNote: z.ZodNullable<z.ZodString>;
+    revisionSentAt: z.ZodNullable<z.ZodString>;
+    formName: z.ZodString;
+    tenantName: z.ZodString;
+    logoUrl: z.ZodNullable<z.ZodString>;
+    currency: z.ZodString;
+    currencySymbol: z.ZodString;
+    footerNote: z.ZodOptional<z.ZodString>;
+    declineReasons: z.ZodArray<z.ZodString>;
+    displayGroups: z.ZodArray<z.ZodObject<{}, z.core.$loose>>;
+    scopeLabel: z.ZodNullable<z.ZodString>;
+    projectDescription: z.ZodNullable<z.ZodString>;
+    contact: z.ZodNullable<z.ZodObject<{
+        name: z.ZodNullable<z.ZodString>;
+        email: z.ZodString;
+    }, z.core.$strip>>;
+    isPreview: z.ZodBoolean;
+}, z.core.$loose>;
+export declare const QuoteAcceptResponseSchema: z.ZodObject<{
+    accepted: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export declare const QuoteDeclineResponseSchema: z.ZodObject<{
+    declined: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export declare const InvoiceSchema: z.ZodObject<{
+    uuid: z.ZodString;
+    invoiceNumber: z.ZodString;
+    totalAmount: z.ZodString;
+    dueDate: z.ZodString;
+    issueDate: z.ZodString;
+    paidAt: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+        UNPAID: "UNPAID";
+        POP_UPLOADED: "POP_UPLOADED";
+        PAID: "PAID";
+    }>;
+    depositPercent: z.ZodNullable<z.ZodNumber>;
+    depositAmount: z.ZodNullable<z.ZodString>;
+    balanceAmount: z.ZodNullable<z.ZodString>;
+    depositDueDate: z.ZodNullable<z.ZodString>;
+    depositPaidAt: z.ZodNullable<z.ZodString>;
+    depositPopUploadedAt: z.ZodNullable<z.ZodString>;
+    balanceDueDate: z.ZodNullable<z.ZodString>;
+    popUploadedAt: z.ZodNullable<z.ZodString>;
+    lineItems: z.ZodArray<z.ZodObject<{}, z.core.$loose>>;
+    codeDiscountLabel: z.ZodNullable<z.ZodString>;
+    codeDiscountType: z.ZodNullable<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    codeDiscountValue: z.ZodNullable<z.ZodString>;
+    codeDiscountAmount: z.ZodOptional<z.ZodString>;
+    manualDiscountType: z.ZodNullable<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    manualDiscountValue: z.ZodNullable<z.ZodString>;
+    manualDiscountAmount: z.ZodOptional<z.ZodString>;
+    finalTotal: z.ZodString;
+    tenantName: z.ZodString;
+    registrationNumber: z.ZodNullable<z.ZodString>;
+    vatNumber: z.ZodNullable<z.ZodString>;
+    bankingDetails: z.ZodNullable<z.ZodString>;
+    logoUrl: z.ZodNullable<z.ZodString>;
+    invoicePaymentTermDays: z.ZodNumber;
+    formName: z.ZodString;
+    quoteReference: z.ZodString;
+    quoteUuid: z.ZodString;
+    currencySymbol: z.ZodString;
+    currency: z.ZodString;
+    displayGroups: z.ZodArray<z.ZodObject<{}, z.core.$loose>>;
+    customerName: z.ZodNullable<z.ZodString>;
+    customerEmail: z.ZodNullable<z.ZodString>;
+    scopeLabel: z.ZodNullable<z.ZodString>;
+    projectDescription: z.ZodNullable<z.ZodString>;
+    isPreview: z.ZodBoolean;
+}, z.core.$loose>;
+export declare const PopUrlUpdateResponseSchema: z.ZodObject<{
+    saved: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export declare const PresignResponseSchema: z.ZodObject<{
+    presignedUrl: z.ZodString;
+    key: z.ZodString;
+    publicUrl: z.ZodString;
+    expiresIn: z.ZodNumber;
+}, z.core.$strip>;
+export type PublicFormField = z.infer<typeof PublicFormFieldSchema>;
+export type PublicFormConfig = z.infer<typeof PublicFormConfigSchema>;
+export type PublicForm = z.infer<typeof PublicFormSchema>;
+export type ValidateCodeResponse = z.infer<typeof ValidateCodeResponseSchema>;
+export type SubmissionCreateResponse = z.infer<typeof SubmissionCreateResponseSchema>;
+export type Quote = z.infer<typeof QuoteSchema>;
+export type QuoteAcceptResponse = z.infer<typeof QuoteAcceptResponseSchema>;
+export type QuoteDeclineResponse = z.infer<typeof QuoteDeclineResponseSchema>;
+export type Invoice = z.infer<typeof InvoiceSchema>;
+export type PopUrlUpdateResponse = z.infer<typeof PopUrlUpdateResponseSchema>;
+export type PresignResponse = z.infer<typeof PresignResponseSchema>;
+//# sourceMappingURL=public-api.d.ts.map

package/dist/public-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-api.d.ts","sourceRoot":"","sources":["../src/public-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,EAAC,SAAS,EAAY,MAAM,qBAAqB,CAAC;AAkC9D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBlB,CAAC;AAEjB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0BnB,CAAC;AAEjB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBb,CAAC;AAIjB,eAAO,MAAM,0BAA0B;;;;;;mBAA2H,CAAC;AAInK,eAAO,MAAM,8BAA8B;;;;iBAIzC,CAAC;AAIH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8CR,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;iBAAwC,CAAC;AAC/E,eAAO,MAAM,0BAA0B;;iBAAwC,CAAC;AAIhF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8CV,CAAC;AAEjB,eAAO,MAAM,0BAA0B;;iBAAqC,CAAC;AAI7E,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAIH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAChD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/public-api.js

@@ -0,0 +1,212 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PresignResponseSchema = exports.PopUrlUpdateResponseSchema = exports.InvoiceSchema = exports.QuoteDeclineResponseSchema = exports.QuoteAcceptResponseSchema = exports.QuoteSchema = exports.SubmissionCreateResponseSchema = exports.ValidateCodeResponseSchema = exports.PublicFormSchema = exports.PublicFormConfigSchema = exports.PublicFormFieldSchema = void 0;
+const zod_1 = require("zod");
+const FieldTypeSchema = zod_1.z.enum(["number", "text", "radio", "select", "toggle", "multicheck", "hidden", "date"]);
+/**
+ * Response schemas for onabl's public-facing API — the routes reachable via
+ * ApiKeyGuard or RequireCustomerToken, i.e. what an external integrator (the
+ * SDK, a hand-built client, visualcreme) actually calls.
+ *
+ * These are the "2026-09-01" baseline shapes, hand-verified against the live
+ * service code — see docs/API-BASELINE-2026-09-01.md, which is the source of
+ * truth this file mirrors. A future response-version delta (§14.2.3) adds a
+ * new schema here rather than editing these in place.
+ *
+ * Loosely typed with `.passthrough()` where the underlying shape is already
+ * validated elsewhere (line items, display groups, form field conditions) —
+ * matching this package's existing convention in forms.ts, not a new one.
+ */
+// ─── Shared sub-shapes ──────────────────────────────────────────────────────
+// Typed as the real @onabl/types Condition (not derived from the shape below)
+// so downstream code — @onabl/js's form-state.ts in particular — can pass a
+// parsed field.condition straight into @onabl/engine's evaluateCondition()
+// without a cast. Validated loosely at runtime (any object shape passes);
+// this only needs to be right by construction, since the API already built
+// it from a real Condition server-side.
+const ConditionSchema = zod_1.z.custom((val) => typeof val === "object" && val !== null);
+const LineItemSchema = zod_1.z.object({}).passthrough();
+const DisplayGroupSchema = zod_1.z.object({}).passthrough();
+// ─── GET /forms/q/:handle(/:slug) ───────────────────────────────────────────
+exports.PublicFormFieldSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    key: zod_1.z.string(),
+    type: FieldTypeSchema,
+    label: zod_1.z.string(),
+    stepId: zod_1.z.string().nullable(),
+    required: zod_1.z.boolean(),
+    defaultValue: zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null()]),
+    placeholder: zod_1.z.string().optional(),
+    description: zod_1.z.string().optional(),
+    min: zod_1.z.number().optional(),
+    max: zod_1.z.number().optional(),
+    options: zod_1.z.array(zod_1.z.object({ value: zod_1.z.string(), label: zod_1.z.string(), description: zod_1.z.string().optional() }).passthrough()).optional(),
+    condition: ConditionSchema.optional(),
+    scopeCondition: ConditionSchema.optional(),
+})
+    .passthrough();
+exports.PublicFormConfigSchema = zod_1.z
+    .object({
+    version: zod_1.z.literal("1.0"),
+    meta: zod_1.z
+        .object({
+        name: zod_1.z.string(),
+        slug: zod_1.z.string(),
+        currency: zod_1.z.string(),
+        currencySymbol: zod_1.z.string(),
+        footerNote: zod_1.z.string(),
+        quoteValidDays: zod_1.z.number(),
+        declineReasons: zod_1.z.array(zod_1.z.string()),
+        intro: zod_1.z
+            .object({
+            headline: zod_1.z.string(),
+            body: zod_1.z.string().optional(),
+            ctaLabel: zod_1.z.string().optional(),
+            backgroundImageUrl: zod_1.z.string().optional(),
+        })
+            .passthrough()
+            .optional(),
+    })
+        .passthrough(),
+    steps: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), label: zod_1.z.string(), title: zod_1.z.string().optional() }).passthrough()),
+    fields: zod_1.z.array(exports.PublicFormFieldSchema),
+})
+    .passthrough();
+exports.PublicFormSchema = zod_1.z
+    .object({
+    name: zod_1.z.string(),
+    slug: zod_1.z.string(),
+    currency: zod_1.z.string(),
+    currencySymbol: zod_1.z.string(),
+    footerNote: zod_1.z.string(),
+    quoteValidDays: zod_1.z.number(),
+    declineReasons: zod_1.z.array(zod_1.z.string()),
+    hasActiveDiscountCodes: zod_1.z.boolean(),
+    brandPrimaryColor: zod_1.z.string().nullable(),
+    brandSecondaryColor: zod_1.z.string().nullable(),
+    brandAccentColor: zod_1.z.string().nullable(),
+    brandBackgroundColor: zod_1.z.string().nullable(),
+    brandTextColor: zod_1.z.string().nullable(),
+    logoUrl: zod_1.z.string().nullable(),
+    introBgUrl: zod_1.z.string().nullable(),
+    businessName: zod_1.z.string(),
+    customerConsentText: zod_1.z.string().nullable(),
+    privacyPolicyUrl: zod_1.z.string().nullable(),
+    config: exports.PublicFormConfigSchema,
+})
+    .passthrough();
+// ─── GET /forms/q/:handle/:slug/validate-code ───────────────────────────────
+exports.ValidateCodeResponseSchema = zod_1.z.union([zod_1.z.object({ valid: zod_1.z.literal(false), error: zod_1.z.string() }), zod_1.z.object({ valid: zod_1.z.literal(true), label: zod_1.z.string() })]);
+// ─── POST /submissions/q/:handle(/:slug) ────────────────────────────────────
+exports.SubmissionCreateResponseSchema = zod_1.z.object({
+    uuid: zod_1.z.string(),
+    reference: zod_1.z.string(),
+    token: zod_1.z.string(),
+});
+// ─── GET /quotes/:uuid ───────────────────────────────────────────────────────
+exports.QuoteSchema = zod_1.z
+    .object({
+    uuid: zod_1.z.string(),
+    reference: zod_1.z.string(),
+    status: zod_1.z.string(),
+    lineItems: zod_1.z.array(LineItemSchema),
+    phase1Total: zod_1.z.string(),
+    phase2Total: zod_1.z.string(),
+    finalTotal: zod_1.z.string(),
+    codeDiscountLabel: zod_1.z.string().nullable(),
+    codeDiscountType: zod_1.z.enum(["PERCENT", "FIXED"]).nullable(),
+    codeDiscountValue: zod_1.z.string().nullable(),
+    manualDiscountType: zod_1.z.enum(["PERCENT", "FIXED"]).nullable(),
+    manualDiscountValue: zod_1.z.string().nullable(),
+    totalAfterDiscount: zod_1.z.string(),
+    validUntil: zod_1.z.string(),
+    viewedAt: zod_1.z.string().nullable(),
+    acceptedAt: zod_1.z.string().nullable(),
+    declinedAt: zod_1.z.string().nullable(),
+    declineReason: zod_1.z.string().nullable(),
+    declineNote: zod_1.z.string().nullable(),
+    withdrawnAt: zod_1.z.string().nullable(),
+    withdrawNote: zod_1.z.string().nullable(),
+    overrideTotal: zod_1.z.string().nullable(),
+    // Read via `(quote as any)` server-side as of the 2026-09-01 baseline —
+    // the Prisma client is ahead of/behind a migration. First candidates for
+    // a version delta if that gets fixed. See docs/API-BASELINE-2026-09-01.md.
+    revisedLineItems: zod_1.z.array(LineItemSchema).nullable(),
+    revisedTotal: zod_1.z.string().nullable(),
+    tenantNote: zod_1.z.string().nullable(),
+    revisionSentAt: zod_1.z.string().nullable(),
+    formName: zod_1.z.string(),
+    tenantName: zod_1.z.string(),
+    logoUrl: zod_1.z.string().nullable(),
+    currency: zod_1.z.string(),
+    currencySymbol: zod_1.z.string(),
+    footerNote: zod_1.z.string().optional(),
+    declineReasons: zod_1.z.array(zod_1.z.string()),
+    displayGroups: zod_1.z.array(DisplayGroupSchema),
+    scopeLabel: zod_1.z.string().nullable(),
+    projectDescription: zod_1.z.string().nullable(),
+    contact: zod_1.z.object({ name: zod_1.z.string().nullable(), email: zod_1.z.string() }).nullable(),
+    // Appended by the controller, not the service — easy to miss if types are
+    // extracted from the service layer alone. See baseline doc.
+    isPreview: zod_1.z.boolean(),
+})
+    .passthrough();
+exports.QuoteAcceptResponseSchema = zod_1.z.object({ accepted: zod_1.z.literal(true) });
+exports.QuoteDeclineResponseSchema = zod_1.z.object({ declined: zod_1.z.literal(true) });
+// ─── GET /invoices/:uuid ─────────────────────────────────────────────────────
+exports.InvoiceSchema = zod_1.z
+    .object({
+    uuid: zod_1.z.string(),
+    invoiceNumber: zod_1.z.string(),
+    totalAmount: zod_1.z.string(),
+    dueDate: zod_1.z.string(),
+    issueDate: zod_1.z.string(),
+    paidAt: zod_1.z.string().nullable(),
+    status: zod_1.z.enum(["UNPAID", "POP_UPLOADED", "PAID"]),
+    depositPercent: zod_1.z.number().nullable(),
+    depositAmount: zod_1.z.string().nullable(),
+    balanceAmount: zod_1.z.string().nullable(),
+    depositDueDate: zod_1.z.string().nullable(),
+    depositPaidAt: zod_1.z.string().nullable(),
+    depositPopUploadedAt: zod_1.z.string().nullable(),
+    balanceDueDate: zod_1.z.string().nullable(),
+    popUploadedAt: zod_1.z.string().nullable(),
+    lineItems: zod_1.z.array(LineItemSchema),
+    codeDiscountLabel: zod_1.z.string().nullable(),
+    codeDiscountType: zod_1.z.enum(["PERCENT", "FIXED"]).nullable(),
+    codeDiscountValue: zod_1.z.string().nullable(),
+    // Computed server-side, not stored — undefined (not null) when the
+    // corresponding discount type isn't set. See baseline doc.
+    codeDiscountAmount: zod_1.z.string().optional(),
+    manualDiscountType: zod_1.z.enum(["PERCENT", "FIXED"]).nullable(),
+    manualDiscountValue: zod_1.z.string().nullable(),
+    manualDiscountAmount: zod_1.z.string().optional(),
+    finalTotal: zod_1.z.string(),
+    tenantName: zod_1.z.string(),
+    registrationNumber: zod_1.z.string().nullable(),
+    vatNumber: zod_1.z.string().nullable(),
+    bankingDetails: zod_1.z.string().nullable(),
+    logoUrl: zod_1.z.string().nullable(),
+    invoicePaymentTermDays: zod_1.z.number(),
+    formName: zod_1.z.string(),
+    quoteReference: zod_1.z.string(),
+    quoteUuid: zod_1.z.string(),
+    currencySymbol: zod_1.z.string(),
+    currency: zod_1.z.string(),
+    displayGroups: zod_1.z.array(DisplayGroupSchema),
+    customerName: zod_1.z.string().nullable(),
+    customerEmail: zod_1.z.string().nullable(),
+    scopeLabel: zod_1.z.string().nullable(),
+    projectDescription: zod_1.z.string().nullable(),
+    isPreview: zod_1.z.boolean(),
+})
+    .passthrough();
+exports.PopUrlUpdateResponseSchema = zod_1.z.object({ saved: zod_1.z.literal(true) });
+// ─── POST /storage/presign/public ───────────────────────────────────────────
+exports.PresignResponseSchema = zod_1.z.object({
+    presignedUrl: zod_1.z.string(),
+    key: zod_1.z.string(),
+    publicUrl: zod_1.z.string(),
+    expiresIn: zod_1.z.number(),
+});

package/dist/sanitize.d.ts

@@ -0,0 +1,3 @@
+import { z } from "zod";
+export declare const safeText: (base: z.ZodString) => z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,QAAQ,GAAI,MAAM,CAAC,CAAC,SAAS,2DAC6E,CAAC"}

package/dist/sanitize.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeText = void 0;
+// Strips HTML/XML tags from user-supplied text before it is stored.
+// Applied to fields that are rendered in emails or PDFs.
+const safeText = (base) => base.trim().transform((s) => s.replace(/<[^>]*>/g, "").replace(/&(?:lt|gt|amp|quot|apos|#\d+|#x[\da-fA-F]+);/gi, ""));
+exports.safeText = safeText;

package/dist/submissions.d.ts

@@ -0,0 +1,77 @@
+import { z } from "zod";
+export declare const SubmissionPayloadSchema: z.ZodObject<{
+    answers: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+    discountCode: z.ZodOptional<z.ZodString>;
+    consentGiven: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const ManualDiscountSchema: z.ZodObject<{
+    type: z.ZodNullable<z.ZodEnum<{
+        PERCENT: "PERCENT";
+        FIXED: "FIXED";
+    }>>;
+    value: z.ZodNullable<z.ZodNumber>;
+    note: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strip>;
+export declare const OverrideSchema: z.ZodObject<{
+    total: z.ZodNumber;
+    note: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export declare const WithdrawSchema: z.ZodObject<{
+    note: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export declare const DeclineQuoteSchema: z.ZodObject<{
+    declineReason: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    declineNote: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strip>;
+export declare const AnalyticsPeriodQuerySchema: z.ZodObject<{
+    period: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        "7d": "7d";
+        "30d": "30d";
+        "90d": "90d";
+        all: "all";
+    }>>>;
+}, z.core.$strip>;
+export declare const SendRevisionSchema: z.ZodObject<{
+    revisedLineItems: z.ZodArray<z.ZodObject<{
+        label: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        amount: z.ZodNumber;
+        showOnQuote: z.ZodBoolean;
+    }, z.core.$strip>>;
+    tenantNote: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strip>;
+export declare const SendMessageSchema: z.ZodObject<{
+    body: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export declare const SubmissionFilterQuerySchema: z.ZodObject<{
+    formId: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        SUBMITTED: "SUBMITTED";
+        VIEWED: "VIEWED";
+        ACCEPTED: "ACCEPTED";
+        DECLINED: "DECLINED";
+        IN_RECOVERY: "IN_RECOVERY";
+        REVIVED: "REVIVED";
+        EXPIRED: "EXPIRED";
+        WITHDRAWN: "WITHDRAWN";
+    }>>;
+    source: z.ZodOptional<z.ZodEnum<{
+        CLIENT: "CLIENT";
+        TENANT: "TENANT";
+    }>>;
+    search: z.ZodOptional<z.ZodString>;
+    from: z.ZodOptional<z.ZodString>;
+    to: z.ZodOptional<z.ZodString>;
+    attention: z.ZodOptional<z.ZodCoercedBoolean<unknown>>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+}, z.core.$strip>;
+export type DeclineQuote = z.infer<typeof DeclineQuoteSchema>;
+export type SubmissionPayload = z.infer<typeof SubmissionPayloadSchema>;
+export type ManualDiscount = z.infer<typeof ManualDiscountSchema>;
+export type Override = z.infer<typeof OverrideSchema>;
+export type Withdraw = z.infer<typeof WithdrawSchema>;
+export type AnalyticsPeriodQuery = z.infer<typeof AnalyticsPeriodQuerySchema>;
+export type SubmissionFilterQuery = z.infer<typeof SubmissionFilterQuerySchema>;
+export type SendRevision = z.infer<typeof SendRevisionSchema>;
+export type SendMessage = z.infer<typeof SendMessageSchema>;
+//# sourceMappingURL=submissions.d.ts.map

package/dist/submissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submissions.d.ts","sourceRoot":"","sources":["../src/submissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;iBAS7B,CAAC;AAEL,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;iBAErC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;iBAS7B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;iBAUtC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/submissions.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubmissionFilterQuerySchema = exports.SendMessageSchema = exports.SendRevisionSchema = exports.AnalyticsPeriodQuerySchema = exports.DeclineQuoteSchema = exports.WithdrawSchema = exports.OverrideSchema = exports.ManualDiscountSchema = exports.SubmissionPayloadSchema = void 0;
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+exports.SubmissionPayloadSchema = zod_1.z.object({
+    answers: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.array(zod_1.z.string())])),
+    discountCode: zod_1.z.string().optional(),
+    consentGiven: zod_1.z.boolean().optional().default(false),
+});
+exports.ManualDiscountSchema = zod_1.z
+    .object({
+    type: zod_1.z.enum(["PERCENT", "FIXED"]).nullable(),
+    value: zod_1.z.number().positive().nullable(),
+    note: (0, sanitize_js_1.safeText)(zod_1.z.string().max(500)).optional(),
+})
+    .refine((d) => d.type !== "PERCENT" || d.value === null || d.value <= 100, {
+    message: "A percentage discount cannot exceed 100%",
+    path: ["value"],
+});
+exports.OverrideSchema = zod_1.z.object({
+    total: zod_1.z.number().positive(),
+    note: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(500)),
+});
+exports.WithdrawSchema = zod_1.z.object({
+    note: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(500)),
+});
+exports.DeclineQuoteSchema = zod_1.z.object({
+    declineReason: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1)),
+    declineNote: (0, sanitize_js_1.safeText)(zod_1.z.string().max(500)).optional(),
+});
+exports.AnalyticsPeriodQuerySchema = zod_1.z.object({
+    period: zod_1.z.enum(["7d", "30d", "90d", "all"]).optional().default("30d"),
+});
+exports.SendRevisionSchema = zod_1.z.object({
+    revisedLineItems: zod_1.z.array(zod_1.z.object({
+        label: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1)),
+        amount: zod_1.z.number().nonnegative(),
+        showOnQuote: zod_1.z.boolean(),
+    })),
+    tenantNote: (0, sanitize_js_1.safeText)(zod_1.z.string().max(1000)).optional(),
+});
+exports.SendMessageSchema = zod_1.z.object({
+    body: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(2000)),
+});
+exports.SubmissionFilterQuerySchema = zod_1.z.object({
+    formId: zod_1.z.string().optional(),
+    status: zod_1.z.enum(["SUBMITTED", "VIEWED", "ACCEPTED", "DECLINED", "IN_RECOVERY", "REVIVED", "EXPIRED", "WITHDRAWN"]).optional(),
+    source: zod_1.z.enum(["CLIENT", "TENANT"]).optional(),
+    search: zod_1.z.string().optional(),
+    from: zod_1.z.string().optional(),
+    to: zod_1.z.string().optional(),
+    attention: zod_1.z.coerce.boolean().optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(100).optional().default(50),
+    offset: zod_1.z.coerce.number().int().min(0).optional().default(0),
+});

package/dist/tenants.d.ts

@@ -0,0 +1,33 @@
+import { z } from "zod";
+export declare const UpdateSettingsSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    businessName: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    registrationNumber: z.ZodOptional<z.ZodString>;
+    vatNumber: z.ZodOptional<z.ZodString>;
+    invoicePaymentTermDays: z.ZodOptional<z.ZodNumber>;
+    bankingDetails: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    invoiceFooterNote: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    quoteValidDays: z.ZodOptional<z.ZodNumber>;
+    quoteFooterNote: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    quoteDisclaimer: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    invoiceDisclaimer: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    customerConsentText: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    privacyPolicyUrl: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    quoteViewUrl: z.ZodUnion<[z.ZodOptional<z.ZodString>, z.ZodLiteral<"">]>;
+    logoUrl: z.ZodOptional<z.ZodString>;
+    brandPrimaryColor: z.ZodOptional<z.ZodString>;
+    brandSecondaryColor: z.ZodOptional<z.ZodString>;
+    brandAccentColor: z.ZodOptional<z.ZodString>;
+    brandBackgroundColor: z.ZodOptional<z.ZodString>;
+    brandTextColor: z.ZodOptional<z.ZodString>;
+    industry: z.ZodOptional<z.ZodString>;
+    currency: z.ZodOptional<z.ZodString>;
+    currencySymbol: z.ZodOptional<z.ZodString>;
+    numberingPrefix: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdateSettings = z.infer<typeof UpdateSettingsSchema>;
+export declare const UpdateDefaultFormSchema: z.ZodObject<{
+    formId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type UpdateDefaultForm = z.infer<typeof UpdateDefaultFormSchema>;
+//# sourceMappingURL=tenants.d.ts.map

package/dist/tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../src/tenants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;iBAElC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/tenants.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateDefaultFormSchema = exports.UpdateSettingsSchema = void 0;
+const zod_1 = require("zod");
+const sanitize_js_1 = require("./sanitize.js");
+exports.UpdateSettingsSchema = zod_1.z.object({
+    name: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(100)).optional(),
+    businessName: (0, sanitize_js_1.safeText)(zod_1.z.string().min(1).max(100)).optional(),
+    registrationNumber: zod_1.z.string().trim().max(50).optional(),
+    vatNumber: zod_1.z.string().trim().max(50).optional(),
+    invoicePaymentTermDays: zod_1.z.number().int().positive().optional(),
+    bankingDetails: (0, sanitize_js_1.safeText)(zod_1.z.string().max(500)).optional(),
+    invoiceFooterNote: (0, sanitize_js_1.safeText)(zod_1.z.string().max(1000)).optional(),
+    quoteValidDays: zod_1.z.number().int().min(1).max(365).optional(),
+    quoteFooterNote: (0, sanitize_js_1.safeText)(zod_1.z.string().max(1000)).optional(),
+    quoteDisclaimer: (0, sanitize_js_1.safeText)(zod_1.z.string().max(3000)).optional(),
+    invoiceDisclaimer: (0, sanitize_js_1.safeText)(zod_1.z.string().max(3000)).optional(),
+    customerConsentText: (0, sanitize_js_1.safeText)(zod_1.z.string().max(500)).optional(),
+    privacyPolicyUrl: zod_1.z.string().url().max(500).optional().or(zod_1.z.literal("")),
+    quoteViewUrl: zod_1.z.string().url().max(500).optional().or(zod_1.z.literal("")),
+    logoUrl: zod_1.z.string().optional(),
+    brandPrimaryColor: zod_1.z.string().optional(),
+    brandSecondaryColor: zod_1.z.string().optional(),
+    brandAccentColor: zod_1.z.string().optional(),
+    brandBackgroundColor: zod_1.z.string().optional(),
+    brandTextColor: zod_1.z.string().optional(),
+    industry: zod_1.z.string().trim().max(100).optional(),
+    currency: zod_1.z.string().length(3).optional(),
+    currencySymbol: zod_1.z.string().trim().min(1).max(4).optional(),
+    numberingPrefix: zod_1.z.string().trim().min(2).max(5).optional(),
+});
+exports.UpdateDefaultFormSchema = zod_1.z.object({
+    formId: zod_1.z.string().uuid().nullable(),
+});

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@onabl/contracts",
+  "version": "0.1.0",
+  "description": "Zod request/response validation schemas for onabl's public API — the SDK's typed contract with the API.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://gitlab.com/visualcreme-studios/onabl.git",
+    "directory": "packages/contracts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    "./*": {
+      "import": "./dist/*.js",
+      "require": "./dist/*.js",
+      "types": "./dist/*.d.ts"
+    }
+  },
+  "devDependencies": {
+    "eslint": "latest",
+    "@onabl/eslint-config": "0.0.1",
+    "@onabl/typescript-config": "0.0.1"
+  },
+  "dependencies": {
+    "@onabl/types": "0.1.0"
+  },
+  "peerDependencies": {
+    "zod": "^4"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "lint": "eslint src"
+  }
+}