@reblu/site-blocks 0.26.0 → 0.28.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @reblu/site-blocks
 
+## 0.28.0
+
+### Minor Changes
+
+- 275adaf: REB-1201: `ArbitrationBadge` drop-in renders the tenant's consumer-arbitration distinctive in the footer — logo at `h-16`, `alt` with the adhesion number («… N.º de adhesión CA00000»), the number as visible text, optional link in a new window. `TrustBadges` knows the new type (heading «Arbitraje de consumo») but leaves it out of its default groups, so a footer with both never shows it twice; opt in with `types`. Any badge with an adhesion number gets it in its `alt`.
+
+### Patch Changes
+
+- Updated dependencies [275adaf]
+  - @reblu/site-contracts@1.28.0
+
+## 0.27.0
+
+### Minor Changes
+
+- 3f76060: `CoursePurchaseTerms` shows the consent box that the course's modality calls for (REB-1240). It reads `AcademyCourseDetail.withdrawalConsent`:
+  - Digital content: the withdrawal waiver. It keeps `data-slot="course-purchase-terms-withdrawal-waiver"`, as in REB-1199.
+  - A training service: the express request to start, which does not say the withdrawal right is lost. It uses the new `data-slot="course-purchase-terms-service-start-request"`.
+  - A course in person or by webinar: no box.
+
+  Both items carry `data-kind`. Against an API that predates `withdrawalConsent`, the block still reads `withdrawalWaiverRequired`.
+
+  **Visible change:** each box is now followed by the tenant's exact text, «Texto de la casilla: «…»». Replace it, or hide it with an empty node, through the new `consentText` label. `serviceStartRequest` is also a new label.
+
+### Patch Changes
+
+- Updated dependencies [143cef1]
+  - @reblu/site-contracts@1.27.0
+
 ## 0.26.0
 
 ### Minor Changes

package/README.md

@@ -25,7 +25,7 @@ colour on the red background. See `docs/theming/theming.md`.
 | `sanitizeHtml`                                                                                                | `.`        | Sanitises an HTML string before `dangerouslySetInnerHTML` — the **HTML boundary**. See "Security boundaries" below.          |
 | `MarkdownRenderer`                                                                                            | `.`        | Canonical Blog renderer: `marked` → **hast-util-sanitize** (XSS) → component map, with a YouTube-domain allowlist. RSC-safe. |
 | `CourseDescription`                                                                                           | `.`        | Drop-in for the rich-text course `description` (`client.academy.bySlug()`). Server Component. See "Rich-text descriptions".  |
-| `CoursePurchaseTerms`, `DEFAULT_COURSE_PURCHASE_TERMS_LABELS`                                                 | `.`        | What the buyer sees before paying: withdrawal waiver, access duration, refund guarantee. Server Component. See "Course purchase terms". |
+| `CoursePurchaseTerms`, `DEFAULT_COURSE_PURCHASE_TERMS_LABELS`                                                 | `.`        | What the buyer sees before paying: consent box by course modality, access duration, refund guarantee. Server Component. See "Course purchase terms". |
 | `LessonPreview`, `DEFAULT_LESSON_PREVIEW_LABELS`                                                              | `.`        | A public free-preview lesson: hosted video player + sanitised body (`getLessonPreview()`). Server Component. See "Free-preview lesson".  |
 | `Treatment`, `ParentPage`, `ProfileCard`, `ProductCard`                                                       | `.`        | Presentational organisms over the SITE API contracts. RSC-safe. `Specialty`: deprecated alias, see below.                    |
 | `ProfessionalFields`                                                                                          | `.`        | The tenant's own professional fields (`professional.fields`) on a team card or profile. RSC-safe. See below.                 |
@@ -35,6 +35,7 @@ colour on the red background. See `docs/theming/theming.md`.
 | `PageBlocks`, `FaqAccordion`                                                                                  | `.`        | Registry-block renderer (`PageDetail.blocks`) and native `<details>` FAQ. Server Components. See "Page blocks" below.        |
 | `ProductTrustItems`, `DEFAULT_TRUST_ICONS`                                                                    | `.`        | Store-wide trust messages from `ShopConfig.productTrustItems`. Server Component. See "Product trust items" below.            |
 | `TrustBadges`, `DEFAULT_TRUST_BADGE_HEADINGS`                                                                 | `.`        | The tenant's trust badges from `client.trustBadges.list()`, grouped by type. Server Component. See "Trust badges" below.     |
+| `ArbitrationBadge`                                                                                            | `.`        | The consumer-arbitration distinctive with its adhesion number, for the footer. Server Component. See "Consumer arbitration badge" below. |
 | `buildFaqPageJsonLd`, `collectFaqItems`                                                                       | `./seo`    | schema.org `FAQPage` structured data. Directive-free (also on `.`). See "Page blocks" below.                                 |
 | `useCollection`                                                                                               | `./client` | Headless filterable/sortable/paginated collection hook (facets, category, tag, search). Serves both page and blog indexes.   |
 | `Collection`                                                                                                  | `./client` | Token-driven presentational grid over `useCollection`.                                                                       |
@@ -755,7 +756,11 @@ export async function Footer() {
 - `types` picks which groups render and in what order, e.g. only the funding
   logos: `<TrustBadges badges={badges} types={['SUBVENTION']} />`. To fetch
   only one type, `client.trustBadges.list({ type: 'SUBVENTION' })`.
-- A logo is an `<img>` with `alt` = badge name, rendered only when its URL is
+- `CONSUMER_ARBITRATION` is not in the default groups — render it with
+  `ArbitrationBadge` (below). Opt in with `types` to group it here; its heading
+  is «Arbitraje de consumo».
+- A logo is an `<img>` with `alt` = badge name (plus «N.º de adhesión …» when
+  the badge has an adhesion number), rendered only when its URL is
   http(s) or root-relative (`/logos/x.svg`); any other scheme (`javascript:`,
   `data:`, `//host`) is dropped and the badge shows its name as text, like a
   badge without a logo. A badge `url` (http/https only) opens in a new window
@@ -781,6 +786,46 @@ export async function Footer() {
   `listClassName` and `logoClassName` are layout/sizing slots and still merge
   with `cn`.
 
+## Consumer arbitration badge — `ArbitrationBadge` (REB-1201)
+
+A tenant adhered to the consumer arbitration system shows the official
+distinctive in the footer, visible and accessible, with its adhesion number. In
+nexus › Trust badges create a badge of type «Arbitraje de consumo» with the
+official logo, the «Número de adhesión» (required for that type) and an
+optional link. The API serves it like any other badge, with `adhesionNumber`.
+
+```tsx
+import { ArbitrationBadge, TrustBadges } from '@reblu/site-blocks'
+
+export async function Footer() {
+  const { data: badges } = await client.trustBadges.list().catch(() => ({ data: [] }))
+  return (
+    <footer>
+      {/* … */}
+      <TrustBadges badges={badges} headingLevel={2} />
+      <ArbitrationBadge badges={badges} />
+    </footer>
+  )
+}
+```
+
+- Feed it the whole list: only `CONSUMER_ARBITRATION` badges render, and
+  `TrustBadges` leaves that type out by default, so it never shows twice. To
+  fetch only it, `client.trustBadges.list({ type: 'CONSUMER_ARBITRATION' })`.
+- The logo is an `<img>` at `h-16` (not a tiny icon) with `alt` = «{name}.
+  N.º de adhesión {number}». The number is also shown as visible text under the
+  logo, `aria-hidden` there because the `alt` already says it. Without a usable
+  logo (same http(s)/root-relative rule as `TrustBadges`) the name and number
+  are plain text.
+- `numberLabel` changes «N.º de adhesión» (alt and caption); `showNumber={false}`
+  drops the visible caption, the `alt` keeps the number.
+- A http(s) `url` opens in a new window with `rel="noopener noreferrer"` and a
+  visually hidden `newWindowLabel`.
+- Nothing renders without a named consumer-arbitration badge.
+- Styling hooks: `className` (the `<ul>`), `logoClassName` (merged with
+  `h-16 w-auto object-contain`, e.g. `brightness-0 invert` on a dark footer),
+  `numberClassName`.
+
 ## `ParentPage` (formerly `Specialty`)
 
 `ParentPage` renders a page that groups other pages: the hero and content
@@ -1128,11 +1173,16 @@ export default async function Page({ params }) {
   `lesson-preview-badge`, `lesson-preview-duration`, `lesson-preview-player`,
   `lesson-preview-content`.
 
-## Course purchase terms — `CoursePurchaseTerms` (REB-1199)
+## Course purchase terms — `CoursePurchaseTerms` (REB-1199, REB-1240)
 
 What a buyer must see before paying for a course, from `client.academy.bySlug()`:
 
-- **Withdrawal waiver** (`withdrawalWaiverRequired`): checkout asks for a separate box in which the buyer requests immediate access and waives the 14-day withdrawal right.
+- **Consent box** (`withdrawalConsent`, REB-1240): which box checkout asks for, as set by the course's modality (`deliveryModality`), followed by the tenant's exact text:
+  - `DIGITAL_CONTENT_WAIVER`, for digital content: the buyer requests immediate access and waives the 14-day withdrawal right (`labels.withdrawalWaiver`);
+  - `SERVICE_START_REQUEST`, for a training service: the buyer expressly asks for the training to start within the 14 days. It does not say the right is lost (`labels.serviceStartRequest`);
+  - `null`, for example in person or webinar: nothing is shown.
+
+  Against an API that predates `withdrawalConsent`, the block falls back to `withdrawalWaiverRequired` (waiver line only).
 - **Access duration** (`accessDurationMonths`): months of access after enrolment. `null` means no end date, and nothing is shown.
 - **Refund guarantee** (`refundGuarantee`): the course's terms. `null` means none, and nothing is shown.
 
@@ -1150,11 +1200,15 @@ const course = await client.academy.bySlug(slug)
   course={course}
   labels={{
     withdrawalWaiver: 'Immediate access: you waive the 14-day withdrawal right.',
+    serviceStartRequest: 'You ask the training to start within the 14-day withdrawal period.',
+    consentText: (text) => ` Box text: “${text}”`,
     accessDuration: (months) => `Access for ${months} months.`,
   }}
 />
 ```
 
+The waiver item keeps `data-slot='course-purchase-terms-withdrawal-waiver'` (as in REB-1199); the express request to start uses `data-slot='course-purchase-terms-service-start-request'`. Both carry `data-kind` with the kind.
+
 ## Page blocks
 
 `PageBlocks` renders a page's registry blocks (`PageDetail.blocks` from