@reblu/site-client 5.2.0 → 5.3.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @reblu/site-client
 
+## 5.3.1
+
+### Patch Changes
+
+- c40434a: Add a distributable controlled phone input and E.164 normalization. Preserve and validate the additive checkout `details.field` in typed API errors so CheckoutForm can mark the rejected phone while retaining generic error fallback.
+
+## 5.3.0
+
+### Minor Changes
+
+- 21feec3: REB-836 — checkout hardening: Stripe redirect-origin check + stable checkout error codes.
+  - `@reblu/site-contracts`: re-exports the new `ShopErrorCode` type (type-only, `z.infer` from base-api's `shopErrorCodeSchema`, no Zod reaches the published `.d.ts`) — nine values: `STOCK_CHANGED`, `PRICE_CHANGED`, `PRODUCT_UNAVAILABLE`, `DISCOUNT_INVALID`, `SHIPPING_UNAVAILABLE`, `INVALID_INPUT`, `STORE_DISABLED`, `PAYMENT_PROVIDER_ERROR`, and `INTERNAL_ERROR` (added in a native-review follow-up to distinguish an unexpected, non-Stripe failure — reported as HTTP 500 — from a Stripe failure, reported as 400 or, for a transient/5xx Stripe error, 503). This is the shop write endpoints' (`checkout`/`validateCart`/`applyDiscount`) new optional error-body `code` field.
+  - `@reblu/site-client`: (1) `shop.checkout()` now validates the returned Stripe Checkout URL is `https:` on an allowed host (default `checkout.stripe.com`, injectable via the new `RebluClientConfig.checkoutRedirectHosts`) before ever returning it, throwing the new `UnsafeCheckoutRedirectError` otherwise — exported alongside `isSafeCheckoutRedirectUrl` and `DEFAULT_CHECKOUT_REDIRECT_HOSTS`. (2) `ApiError.body` (`ApiErrorBody`/`ApiErrorDetails`) gains the optional `code` and `details.productIds` fields.
+  - `@reblu/site-next`: (1) `createShopCheckoutRoute` re-checks the Checkout URL server-side before responding to the browser (502 `unsafe_redirect` when it fails the check) — new `ShopCheckoutRouteOptions.allowedRedirectHosts`/`unsafeRedirectMessage`. (2) Native-review follow-up: that same route now strips `content-encoding`/`content-length`/`transfer-encoding` from its re-serialized response instead of forwarding them from the upstream proxy response, fixing a "browser tries to gunzip already-decoded JSON" failure mode.
+  - `@reblu/site-blocks`: adds `DEFAULT_SHOP_ERROR_MESSAGES` (a default Spanish message per `ShopErrorCode`, including `INTERNAL_ERROR`'s "Ha ocurrido un error inesperado. Inténtalo de nuevo en unos minutos.") and `getShopErrorMessage(code, overrides?, fallback?)`, which a SITE can override per code without restating the others.
+
+  All new fields/exports are additive and optional (REB-788) — a SITE that ignores `code`/`checkoutRedirectHosts` keeps working unchanged. The base-api side of this change (the `ShopErrorCode` schema itself, `checkout.service.ts`'s Stripe-vs-internal error classification, and `apiError()`'s options-object signature) is unpublished — it ships with the next base-api deploy, not through these changesets.
+
 ## 5.2.0
 
 ### Minor Changes

package/README.md

@@ -67,7 +67,10 @@ interface ApiErrorBody {
   details?: {
     fieldErrors?: Record<string, string[]> // per-field messages, e.g. details.fieldErrors.phone
     formErrors?: string[] // form-level messages not tied to one field
+    productIds?: string[] // affected products for shop errors
+    field?: string // rejected request field, e.g. customerPhone
   }
+  code?: string // optional machine-readable shop error code
 }
 ```
 
@@ -75,11 +78,43 @@ This matches what `/api/site/contact-form` and `/api/site/leads` actually send o
 a 400/422 (zod's `.flatten()` under the hood). `body` is `undefined` whenever the
 response was not JSON shaped like this — e.g. an edge proxy's HTML error page on
 a 502 — parsing is defensive and never throws while constructing the error.
+An optional `details.field` must be a string; an invalid type makes the whole
+`body` unrecognised, just as malformed `fieldErrors`, `formErrors` or
+`productIds` do. Unknown field names are preserved as strings; the UI decides
+whether it owns that field.
+
+For checkout, pass **`ApiError.body`**, not `ApiError.message` (which includes
+the transport prefix), to the presentational `@reblu/site-blocks` form:
+
+```tsx
+import { useState } from 'react'
+import { ApiError, type ApiErrorBody } from '@reblu/site-client'
+import { CheckoutForm } from '@reblu/site-blocks'
+
+// Inside the SITE's checkout component (client, payload and checkoutProps in scope):
+const [checkoutError, setCheckoutError] = useState<ApiErrorBody | null>(null)
+
+try {
+  await client.shop.checkout(payload)
+} catch (error) {
+  if (error instanceof ApiError) {
+    // An unparseable body still gets the form's generic fallback message.
+    setCheckoutError(error.body ?? { error: 'Checkout failed' })
+  }
+}
+
+;<CheckoutForm {...checkoutProps} checkoutError={checkoutError} />
+```
+
+Only `INVALID_INPUT` with `details.field === 'customerPhone'` marks the phone;
+other or missing details keep the generic error path. Reset the error on edit or
+retry in the consuming SITE. The SITE must adopt this code separately; the SDK
+does not alter an existing checkout page by itself.
 
 ### Caching — the injectable adapter
 
-The client owns *when* to cache (a per-call policy); a `RebluCacheAdapter` owns
-*how* (framework-specific `fetch` options). The default `PlainCacheAdapter` uses
+The client owns _when_ to cache (a per-call policy); a `RebluCacheAdapter` owns
+_how_ (framework-specific `fetch` options). The default `PlainCacheAdapter` uses
 plain `fetch` cache semantics and works in Node, edge, browser and tests:
 
 ```ts
@@ -98,29 +133,25 @@ injected.
 Read endpoints for all nine SITE domains. Single-resource methods return the bare
 resource; list methods return `{ data, meta? }` (pagination metadata preserved).
 
-| Namespace | Methods |
-| --- | --- |
-| `config` | `get()` |
-| `analytics` | `get()` |
-| `legal` | `get()` |
-| `trustBadges` | `list()` |
-| `ctas` | `list(slot)` |
-| `blog` | `list(params?)`, `bySlug(slug)`, `related(slug)`, `categories()`, `slugs()`, `preview(id)` |
-| `pages` | `list(params?)`, `bySlug(slug)`, `slugs()` |
-| `shop` | `products(params?)`, `bySlug(slug)`, `categories()`, `config()` |
+| Namespace     | Methods                                                                                                                                                                                   |
+| ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `config`      | `get()`                                                                                                                                                                                   |
+| `analytics`   | `get()`                                                                                                                                                                                   |
+| `legal`       | `get()`                                                                                                                                                                                   |
+| `trustBadges` | `list()`                                                                                                                                                                                  |
+| `ctas`        | `list(slot)`                                                                                                                                                                              |
+| `blog`        | `list(params?)`, `bySlug(slug)`, `related(slug)`, `categories()`, `slugs()`, `preview(id)`                                                                                                |
+| `pages`       | `list(params?)`, `bySlug(slug)`, `slugs()`                                                                                                                                                |
+| `shop`        | `products(params?)`, `facets(params?)`, `bySlug(slug)`, `categories()`, `config()`, `checkout(body)`, `validateCart(body)`, `applyDiscount(body)`, `checkEmail(body)`, `order(sessionId)` |
 
 Every method accepts an optional trailing `RebluCachePolicy` (`{ revalidate }`) to
 override caching per call. `blog.preview` is always uncached (draft content).
 
-### Write endpoints (deferred)
+### Write endpoints
 
-The mutation surface — contact-form submit, shop checkout / validate-cart /
-apply-discount / check-email, and lead capture — is **not yet included**. Those
-endpoints have no request/response contracts in `@reblu/site-contracts` yet;
-adding them to the SDK requires a contracts extension first, so they are tracked
-as a follow-up. See
-[`docs/architecture/site-sdk-distribution-design.md`](../../docs/architecture/site-sdk-distribution-design.md)
-(§3, D4).
+`shop.checkout`, `shop.validateCart`, `shop.applyDiscount` and
+`shop.checkEmail` send typed `@reblu/site-contracts` request bodies without
+caching. Checkout error handling uses `ApiError.body` as shown above.
 
 ## Versioning
 

package/dist/index.cjs

@@ -12,6 +12,30 @@ var PlainCacheAdapter = class {
   }
 };
 
+// src/checkout-redirect.ts
+var DEFAULT_CHECKOUT_REDIRECT_HOSTS = ["checkout.stripe.com"];
+function isSafeCheckoutRedirectUrl(url, allowedHosts = DEFAULT_CHECKOUT_REDIRECT_HOSTS) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return false;
+  }
+  return parsed.protocol === "https:" && allowedHosts.includes(parsed.hostname);
+}
+var UnsafeCheckoutRedirectError = class extends Error {
+  constructor(url, allowedHosts) {
+    super(
+      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} (allowed hosts: ${allowedHosts.join(", ")})`
+    );
+    this.url = url;
+    this.allowedHosts = allowedHosts;
+    this.name = "UnsafeCheckoutRedirectError";
+  }
+  url;
+  allowedHosts;
+};
+
 // src/build-url.ts
 function buildUrl(base, params) {
   if (!params) return base;
@@ -44,6 +68,8 @@ function isApiErrorDetails(value) {
     }
   }
   if (details.formErrors !== void 0 && !isStringArray(details.formErrors)) return false;
+  if (details.productIds !== void 0 && !isStringArray(details.productIds)) return false;
+  if ("field" in details && typeof details.field !== "string") return false;
   return true;
 }
 function isApiErrorBody(value) {
@@ -51,6 +77,7 @@ function isApiErrorBody(value) {
   const body = value;
   if (typeof body.error !== "string") return false;
   if (body.details !== void 0 && !isApiErrorDetails(body.details)) return false;
+  if (body.code !== void 0 && typeof body.code !== "string") return false;
   return true;
 }
 function parseApiErrorBody(rawBody) {
@@ -263,8 +290,27 @@ function makeShopNamespace(ctx) {
     categories: (cache) => requestList(ctx, "/api/site/shop/categories", { cachePolicy: cache }),
     config: (cache) => requestOne(ctx, "/api/site/shop/config", { cachePolicy: cache }),
     // ── Mutations (REB-438) ──────────────────────────────────────────────────
-    /** Start a hosted checkout session. Returns the Stripe URL + session id. */
-    checkout: (body) => requestMutation(ctx, "/api/site/shop/checkout", body),
+    /**
+     * Start a hosted checkout session. Returns the Stripe URL + session id.
+     *
+     * REB-836 (defence in depth): every SITE hands `url` straight to
+     * `window.location.assign`, so this validates it is `https:` on an
+     * allowed host (`ctx.checkoutRedirectHosts`, default
+     * `checkout.stripe.com`) BEFORE returning — throwing
+     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL
+     * that could redirect a buyer's browser off Stripe's domain.
+     */
+    checkout: async (body) => {
+      const session = await requestMutation(
+        ctx,
+        "/api/site/shop/checkout",
+        body
+      );
+      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {
+        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts);
+      }
+      return session;
+    },
     /** Validate a cart against live product/stock/price state before checkout. */
     validateCart: (body) => requestMutation(
       ctx,
@@ -308,7 +354,8 @@ function createRebluClient(config) {
     apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,
     cache: config.cache ?? new PlainCacheAdapter(),
     timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,
-    fetch: boundFetch
+    fetch: boundFetch,
+    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS
   };
   return {
     config: makeConfigNamespace(ctx),
@@ -326,7 +373,10 @@ function createRebluClient(config) {
 }
 
 exports.ApiError = ApiError;
+exports.DEFAULT_CHECKOUT_REDIRECT_HOSTS = DEFAULT_CHECKOUT_REDIRECT_HOSTS;
 exports.PlainCacheAdapter = PlainCacheAdapter;
+exports.UnsafeCheckoutRedirectError = UnsafeCheckoutRedirectError;
 exports.createRebluClient = createRebluClient;
+exports.isSafeCheckoutRedirectUrl = isSafeCheckoutRedirectUrl;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACxBO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACDA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAEhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IAAI,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAAY,OAAA,CAAQ,WAAA,KAAgB,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjH,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAEnF,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAC3E,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;;;ACnFA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;ACzEO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACHO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAAuB,GAAA,EAAK,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE/E,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACF;;;ACDA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA,IAK7E,UAAU,CAAC,IAAA,KACT,eAAA,CAAwD,GAAA,EAAK,2BAA2B,IAAI,CAAA;AAAA;AAAA,IAG9F,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACtGO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACaA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AAsBpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as { fieldErrors?: unknown; formErrors?: unknown }\n\n  if (details.fieldErrors !== undefined) {\n    if (typeof details.fieldErrors !== 'object' || details.fieldErrors === null || Array.isArray(details.fieldErrors)) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, PagesListParams } from '../types'\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<PageDetail> =>\n      requestOne<PageDetail>(ctx, `/api/site/pages/${slug}`, { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, check-email) added in\n * REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /** Start a hosted checkout session. Returns the Stripe URL + session id. */\n    checkout: (body: ShopCheckoutInput): Promise<ShopCheckoutSession> =>\n      requestMutation<ShopCheckoutInput, ShopCheckoutSession>(ctx, '/api/site/shop/checkout', body),\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /** Check whether a customer with the given email already exists. */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails } from './errors'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;;;AC7GA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACHO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAAuB,GAAA,EAAK,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE/E,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACF;;;ACAA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACcA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, PagesListParams } from '../types'\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<PageDetail> =>\n      requestOne<PageDetail>(ctx, `/api/site/pages/${slug}`, { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, check-email) added in\n * REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /** Check whether a customer with the given email already exists. */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails } from './errors'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}

package/dist/index.d.cts

@@ -153,6 +153,13 @@ declare class PlainCacheAdapter implements RebluCacheAdapter {
 interface ApiErrorDetails {
     fieldErrors?: Record<string, string[]>;
     formErrors?: string[];
+    /**
+     * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /
+     * `PRICE_CHANGED` error — see `ApiErrorBody.code`.
+     */
+    productIds?: string[];
+    /** REB-842: optional request-field identifier for checkout validation errors. */
+    field?: string;
 }
 /**
  * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`
@@ -162,6 +169,15 @@ interface ApiErrorDetails {
 interface ApiErrorBody {
     error: string;
     details?: ApiErrorDetails;
+    /**
+     * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from
+     * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write
+     * endpoints may set — additive and OPTIONAL, so a consumer that only reads
+     * `error`/`message` keeps working unchanged. `string` rather than
+     * `ShopErrorCode` here because `ApiError` is a generic transport error used
+     * by every `/api/site/*` domain, not just shop.
+     */
+    code?: string;
 }
 /**
  * Typed transport error for the Reblu SITE API.
@@ -184,6 +200,39 @@ declare class ApiError extends Error {
     constructor(status: number, path: string, message: string);
 }
 
+/**
+ * Stripe Checkout redirect-origin guard (REB-836, defence in depth).
+ *
+ * `shop.checkout()` returns a URL every SITE immediately hands to
+ * `window.location.assign(url)`. Nothing upstream of this SDK validated it
+ * before REB-836 — a compromised/misconfigured base-api, a tampered
+ * response, or a MITM proxy could have sent a buyer's browser anywhere.
+ * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses
+ * to refuse an unsafe URL before ever returning it to the caller; a SITE's
+ * `@reblu/site-next` Route Handler re-checks the SAME property server-side
+ * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an
+ * independent copy — see that file's docblock for why it isn't a shared
+ * import). Update both together if Stripe ever changes its Checkout host.
+ */
+/** The only Checkout redirect host trusted by default. */
+declare const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[];
+/**
+ * True only when `url` parses as an absolute URL, uses `https:`, and its
+ * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).
+ * Never throws — an unparsable `url` is simply unsafe.
+ */
+declare function isSafeCheckoutRedirectUrl(url: string, allowedHosts?: readonly string[]): boolean;
+/**
+ * Thrown by `shop.checkout()` when base-api's Checkout URL fails
+ * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back
+ * to a caller that would otherwise `window.location.assign` it.
+ */
+declare class UnsafeCheckoutRedirectError extends Error {
+    readonly url: string;
+    readonly allowedHosts: readonly string[];
+    constructor(url: string, allowedHosts: readonly string[]);
+}
+
 interface RebluClientConfig {
     /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */
     baseUrl: string;
@@ -197,6 +246,13 @@ interface RebluClientConfig {
     timeoutMs?: number;
     /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */
     fetch?: typeof fetch;
+    /**
+     * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns
+     * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to
+     * `['checkout.stripe.com']`. Override only to point at a test double (e.g.
+     * a Stripe CLI mock host) — never to widen production trust.
+     */
+    checkoutRedirectHosts?: string[];
 }
 /**
  * Build a Reblu SITE API client. Each domain is a small namespace of bound
@@ -260,4 +316,4 @@ declare function createRebluClient(config: RebluClientConfig): {
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, type ListResult, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, createRebluClient };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type ListResult, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };

package/dist/index.d.ts

@@ -153,6 +153,13 @@ declare class PlainCacheAdapter implements RebluCacheAdapter {
 interface ApiErrorDetails {
     fieldErrors?: Record<string, string[]>;
     formErrors?: string[];
+    /**
+     * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /
+     * `PRICE_CHANGED` error — see `ApiErrorBody.code`.
+     */
+    productIds?: string[];
+    /** REB-842: optional request-field identifier for checkout validation errors. */
+    field?: string;
 }
 /**
  * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`
@@ -162,6 +169,15 @@ interface ApiErrorDetails {
 interface ApiErrorBody {
     error: string;
     details?: ApiErrorDetails;
+    /**
+     * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from
+     * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write
+     * endpoints may set — additive and OPTIONAL, so a consumer that only reads
+     * `error`/`message` keeps working unchanged. `string` rather than
+     * `ShopErrorCode` here because `ApiError` is a generic transport error used
+     * by every `/api/site/*` domain, not just shop.
+     */
+    code?: string;
 }
 /**
  * Typed transport error for the Reblu SITE API.
@@ -184,6 +200,39 @@ declare class ApiError extends Error {
     constructor(status: number, path: string, message: string);
 }
 
+/**
+ * Stripe Checkout redirect-origin guard (REB-836, defence in depth).
+ *
+ * `shop.checkout()` returns a URL every SITE immediately hands to
+ * `window.location.assign(url)`. Nothing upstream of this SDK validated it
+ * before REB-836 — a compromised/misconfigured base-api, a tampered
+ * response, or a MITM proxy could have sent a buyer's browser anywhere.
+ * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses
+ * to refuse an unsafe URL before ever returning it to the caller; a SITE's
+ * `@reblu/site-next` Route Handler re-checks the SAME property server-side
+ * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an
+ * independent copy — see that file's docblock for why it isn't a shared
+ * import). Update both together if Stripe ever changes its Checkout host.
+ */
+/** The only Checkout redirect host trusted by default. */
+declare const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[];
+/**
+ * True only when `url` parses as an absolute URL, uses `https:`, and its
+ * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).
+ * Never throws — an unparsable `url` is simply unsafe.
+ */
+declare function isSafeCheckoutRedirectUrl(url: string, allowedHosts?: readonly string[]): boolean;
+/**
+ * Thrown by `shop.checkout()` when base-api's Checkout URL fails
+ * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back
+ * to a caller that would otherwise `window.location.assign` it.
+ */
+declare class UnsafeCheckoutRedirectError extends Error {
+    readonly url: string;
+    readonly allowedHosts: readonly string[];
+    constructor(url: string, allowedHosts: readonly string[]);
+}
+
 interface RebluClientConfig {
     /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */
     baseUrl: string;
@@ -197,6 +246,13 @@ interface RebluClientConfig {
     timeoutMs?: number;
     /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */
     fetch?: typeof fetch;
+    /**
+     * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns
+     * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to
+     * `['checkout.stripe.com']`. Override only to point at a test double (e.g.
+     * a Stripe CLI mock host) — never to widen production trust.
+     */
+    checkoutRedirectHosts?: string[];
 }
 /**
  * Build a Reblu SITE API client. Each domain is a small namespace of bound
@@ -260,4 +316,4 @@ declare function createRebluClient(config: RebluClientConfig): {
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, type ListResult, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, createRebluClient };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type ListResult, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };

package/dist/index.js

@@ -10,6 +10,30 @@ var PlainCacheAdapter = class {
   }
 };
 
+// src/checkout-redirect.ts
+var DEFAULT_CHECKOUT_REDIRECT_HOSTS = ["checkout.stripe.com"];
+function isSafeCheckoutRedirectUrl(url, allowedHosts = DEFAULT_CHECKOUT_REDIRECT_HOSTS) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return false;
+  }
+  return parsed.protocol === "https:" && allowedHosts.includes(parsed.hostname);
+}
+var UnsafeCheckoutRedirectError = class extends Error {
+  constructor(url, allowedHosts) {
+    super(
+      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} (allowed hosts: ${allowedHosts.join(", ")})`
+    );
+    this.url = url;
+    this.allowedHosts = allowedHosts;
+    this.name = "UnsafeCheckoutRedirectError";
+  }
+  url;
+  allowedHosts;
+};
+
 // src/build-url.ts
 function buildUrl(base, params) {
   if (!params) return base;
@@ -42,6 +66,8 @@ function isApiErrorDetails(value) {
     }
   }
   if (details.formErrors !== void 0 && !isStringArray(details.formErrors)) return false;
+  if (details.productIds !== void 0 && !isStringArray(details.productIds)) return false;
+  if ("field" in details && typeof details.field !== "string") return false;
   return true;
 }
 function isApiErrorBody(value) {
@@ -49,6 +75,7 @@ function isApiErrorBody(value) {
   const body = value;
   if (typeof body.error !== "string") return false;
   if (body.details !== void 0 && !isApiErrorDetails(body.details)) return false;
+  if (body.code !== void 0 && typeof body.code !== "string") return false;
   return true;
 }
 function parseApiErrorBody(rawBody) {
@@ -261,8 +288,27 @@ function makeShopNamespace(ctx) {
     categories: (cache) => requestList(ctx, "/api/site/shop/categories", { cachePolicy: cache }),
     config: (cache) => requestOne(ctx, "/api/site/shop/config", { cachePolicy: cache }),
     // ── Mutations (REB-438) ──────────────────────────────────────────────────
-    /** Start a hosted checkout session. Returns the Stripe URL + session id. */
-    checkout: (body) => requestMutation(ctx, "/api/site/shop/checkout", body),
+    /**
+     * Start a hosted checkout session. Returns the Stripe URL + session id.
+     *
+     * REB-836 (defence in depth): every SITE hands `url` straight to
+     * `window.location.assign`, so this validates it is `https:` on an
+     * allowed host (`ctx.checkoutRedirectHosts`, default
+     * `checkout.stripe.com`) BEFORE returning — throwing
+     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL
+     * that could redirect a buyer's browser off Stripe's domain.
+     */
+    checkout: async (body) => {
+      const session = await requestMutation(
+        ctx,
+        "/api/site/shop/checkout",
+        body
+      );
+      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {
+        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts);
+      }
+      return session;
+    },
     /** Validate a cart against live product/stock/price state before checkout. */
     validateCart: (body) => requestMutation(
       ctx,
@@ -306,7 +352,8 @@ function createRebluClient(config) {
     apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,
     cache: config.cache ?? new PlainCacheAdapter(),
     timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,
-    fetch: boundFetch
+    fetch: boundFetch,
+    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS
   };
   return {
     config: makeConfigNamespace(ctx),
@@ -323,6 +370,6 @@ function createRebluClient(config) {
   };
 }
 
-export { ApiError, PlainCacheAdapter, createRebluClient };
+export { ApiError, DEFAULT_CHECKOUT_REDIRECT_HOSTS, PlainCacheAdapter, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACxBO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACDA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAEhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IAAI,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAAY,OAAA,CAAQ,WAAA,KAAgB,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EAAG;AACjH,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAEnF,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAC3E,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;;;ACnFA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;ACzEO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACHO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAAuB,GAAA,EAAK,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE/E,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACF;;;ACDA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA,IAK7E,UAAU,CAAC,IAAA,KACT,eAAA,CAAwD,GAAA,EAAK,2BAA2B,IAAI,CAAA;AAAA;AAAA,IAG9F,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACtGO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACaA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AAsBpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as { fieldErrors?: unknown; formErrors?: unknown }\n\n  if (details.fieldErrors !== undefined) {\n    if (typeof details.fieldErrors !== 'object' || details.fieldErrors === null || Array.isArray(details.fieldErrors)) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, PagesListParams } from '../types'\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<PageDetail> =>\n      requestOne<PageDetail>(ctx, `/api/site/pages/${slug}`, { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, check-email) added in\n * REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /** Start a hosted checkout session. Returns the Stripe URL + session id. */\n    checkout: (body: ShopCheckoutInput): Promise<ShopCheckoutSession> =>\n      requestMutation<ShopCheckoutInput, ShopCheckoutSession>(ctx, '/api/site/shop/checkout', body),\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /** Check whether a customer with the given email already exists. */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails } from './errors'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;;;AC7GA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACHO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAAuB,GAAA,EAAK,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE/E,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACF;;;ACAA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACcA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { ListResult, PagesListParams } from '../types'\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<PageDetail> =>\n      requestOne<PageDetail>(ctx, `/api/site/pages/${slug}`, { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, check-email) added in\n * REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /** Check whether a customer with the given email already exists. */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails } from './errors'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-client",
-  "version": "5.2.0",
+  "version": "5.3.1",
   "description": "Framework-agnostic HTTP client for the Reblu SITE API — dependency-free, injectable cache adapter, typed by @reblu/site-contracts.",
   "license": "Apache-2.0",
   "author": "Reblu — Adolfo Unturbe",
@@ -47,7 +47,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@reblu/site-contracts": "^1.5.0"
+    "@reblu/site-contracts": "^1.6.0"
   },
   "devDependencies": {
     "@size-limit/preset-small-lib": "^11.1.6",
@@ -58,7 +58,7 @@
     "typescript": "^5.8.3",
     "vitest": "^4.0.15",
     "@reblu/config": "0.0.1",
-    "@reblu/site-contracts": "^1.5.0"
+    "@reblu/site-contracts": "^1.6.0"
   },
   "size-limit": [
     {