@reblu/site-client 5.6.0 → 5.8.0

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @reblu/site-client
 
+## 5.8.0
+
+### Minor Changes
+
+- cc4e14e: REB-980: `client.dataRequests.submit(body)` posts a GDPR data-subject request to `POST /api/site/data-requests` (cache bypassed) and returns `{ id, requestedAt, slaDueAt }`. The request lands in the tenant's nexus queue with source `PUBLIC_FORM`. Rejections throw `ApiError` with the upstream status: `400` validation, `422` captcha, `429` rate limit. Server-side only — the API key is a secret.
+- 2273e3c: `trustBadges.list({ type })` filters the tenant's trust badges by type (REB-996), with an optional trailing cache policy. The previous `list(cache?)` call shape keeps working. The endpoint now only returns badges that are active and inside their optional validity window set in nexus.
+
+## 5.7.0
+
+### Minor Changes
+
+- 614e826: Shop checkout: full-invoice opt-in and the buyer's identifier (REB-73).
+
+  `ShopCheckoutInput` gains the optional `wantsFullInvoice` flag, and
+  `ShopBillingInput` the optional `billingIdType` (`NIF` for a Spanish
+  NIF/NIE/CIF; `02` EU VAT id, `03` passport, `04` ID document of the country
+  of residence, `05` residence certificate, `06` other document) and
+  `billingIdCountry` (ISO 3166-1 alpha-2, required for `02`–`06`). A full
+  invoice needs the identifier, the billing name and a billing address; without
+  the identifier the invoice is simplified.
+
+  `ShopErrorCode` gains two checkout codes, both answered before any payment:
+  `BILLING_DATA_REQUIRED` (HTTP 422, `details.field: 'billing'`) when the
+  opt-in, or a total over the tenant's simplified-invoice cap, comes without
+  those three; and `INVOICING_NOT_READY` (HTTP 503) when the shop cannot issue
+  invoices yet. Existing clients that send only `billing.billingNif` keep
+  working: its type is derived from the billing address country.
+
+- 614e826: Shop checkout: no full-invoice opt-in on a shop that issues no invoices (REB-73).
+  - `ShopErrorCode` gains `FULL_INVOICE_UNAVAILABLE` (HTTP 422,
+    `details.field: 'wantsFullInvoice'`): `wantsFullInvoice: true` sent to a shop
+    whose invoicing is off (`ShopConfig.simplifiedInvoiceCapCents` is `null`) is
+    refused before any payment instead of succeeding without an invoice. Clients
+    that never send the opt-in are unaffected. The union is additive: a SITE
+    with an exhaustive `switch` over `ShopErrorCode` (or a
+    `Record<ShopErrorCode, …>`) must add the new member when it upgrades.
+  - `@reblu/site-blocks`: new `shopIssuesInvoices(config)`; `FullInvoiceFields`
+    takes `issuesInvoices` (default `true`) and renders nothing when it is
+    `false`, and `toCheckoutInvoiceFields(value, overCap, issuesInvoices)`
+    returns no opt-in and no billing block then. Default Spanish copy for the
+    new code in `getShopErrorMessage`.
+
+- 614e826: Shop: the order's invoice and the simplified-invoice cap (REB-73).
+  - `ShopOrder` gains the optional `invoice: { number, url } | null`
+    (`ShopOrderInvoice`): once the sale invoice is issued, its number and the
+    shop's authenticated client-portal route that serves it — never a signed
+    URL, so the link does not expire; the buyer signs in to open it.
+  - `ShopConfig` gains `simplifiedInvoiceCapCents` (cents, never above the legal
+    300000; `null` while the shop issues no invoices): above it, checkout needs
+    the buyer's identifier, name and billing address.
+  - `@reblu/site-blocks`: new drop-in `OrderInvoiceLink`, which
+    `OrderConfirmation` now renders under a confirmed order (labels
+    `invoiceLinkLabel`/`invoiceSignInHint`), and default Spanish copy for the
+    `BILLING_DATA_REQUIRED`/`INVOICING_NOT_READY` checkout codes in
+    `getShopErrorMessage`.
+
 ## 5.6.0
 
 ### Minor Changes

package/README.md

@@ -138,10 +138,11 @@ resource; list methods return `{ data, meta? }` (pagination metadata preserved).
 | `config`      | `get()`                                                                                                                                                                                   |
 | `analytics`   | `get()`                                                                                                                                                                                   |
 | `legal`       | `get()`                                                                                                                                                                                   |
-| `trustBadges` | `list()`                                                                                                                                                                                  |
+| `trustBadges` | `list(params?)` — `{ type? }`; only active badges inside their validity window                                                                                                            |
 | `ctas`        | `list(slot)`                                                                                                                                                                              |
 | `blog`        | `list(params?)`, `bySlug(slug)`, `related(slug)`, `categories()`, `slugs()`, `preview(id)`                                                                                                |
 | `pages`       | `list(params?)`, `bySlug(slug)`, `featured(category, opts?)`, `slugs()`                                                                                                                   |
+| `dataRequests` | `submit(body)` (write)                                                                                                                                                                   |
 | `shop`        | `products(params?)`, `facets(params?)`, `bySlug(slug)`, `categories()`, `config()`, `checkout(body)`, `validateCart(body)`, `applyDiscount(body)`, `checkEmail(body)`, `order(sessionId)` |
 
 Every method accepts an optional trailing `RebluCachePolicy` (`{ revalidate }`) to
@@ -162,7 +163,10 @@ import { AmbiguousPageSlugError } from '@reblu/site-client'
 
 await client.pages.bySlug('micropigmentacion', { category: 'tratamientos' })
 await client.pages.bySlug('contacto', { category: null }) // the uncategorised page
-await client.pages.bySlug('micropigmentacion', { category: 'tratamientos', cache: { revalidate: 60 } })
+await client.pages.bySlug('micropigmentacion', {
+  category: 'tratamientos',
+  cache: { revalidate: 60 },
+})
 
 try {
   await client.pages.bySlug('micropigmentacion') // no category
@@ -224,6 +228,27 @@ oracle on the tenant's customer list — and now always resolves
 checkout always offers «Iniciar sesión o continuar como invitado», and the
 server links a guest's order to an existing account after payment.
 
+#### GDPR data-subject requests (REB-980)
+
+`dataRequests.submit(body)` posts the public rights form (`POST
+/api/site/data-requests`). The request lands in the tenant's nexus queue with
+source `PUBLIC_FORM` and its 72h clock running; the acknowledgement carries the
+deadline:
+
+```ts
+const ack = await client.dataRequests.submit({
+  requestType: 'ACCESS', // DataRequestType
+  email: 'ada@example.com',
+  name: 'Ada', // optional
+  details: '…', // optional
+  captcha: token, // reCAPTCHA v3 — required
+}) // → { id, requestedAt, slaDueAt }
+```
+
+Rejections throw `ApiError` with the upstream `status`: `400` validation, `422`
+captcha, `429` rate limit. Call it server-side only (the API key is a secret) —
+for the drop-in form see `DataRequestForm` in `@reblu/site-blocks/client`.
+
 ## Versioning
 
 Published under semver (`0.x` while the surface evolves). The contract version is

package/dist/index.cjs

@@ -256,6 +256,18 @@ function makeCtasNamespace(ctx) {
   };
 }
 
+// src/domains/data-requests.ts
+function makeDataRequestsNamespace(ctx) {
+  return {
+    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */
+    submit: (body) => requestMutation(
+      ctx,
+      "/api/site/data-requests",
+      body
+    )
+  };
+}
+
 // src/domains/leads.ts
 function makeLeadsNamespace(ctx) {
   return {
@@ -403,10 +415,20 @@ function makeShopNamespace(ctx) {
 }
 
 // src/domains/trust-badges.ts
+function isCachePolicy(value) {
+  return Object.prototype.hasOwnProperty.call(value, "revalidate");
+}
 function makeTrustBadgesNamespace(ctx) {
-  return {
-    list: (cache) => requestList(ctx, "/api/site/trust-badges", { cachePolicy: cache })
-  };
+  function list(paramsOrCache, cache) {
+    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : void 0;
+    const params = legacyCache ? void 0 : paramsOrCache;
+    return requestList(
+      ctx,
+      buildUrl("/api/site/trust-badges", { type: params?.type }),
+      { cachePolicy: legacyCache ?? cache }
+    );
+  }
+  return { list };
 }
 
 // src/index.ts
@@ -434,7 +456,8 @@ function createRebluClient(config) {
     shop: makeShopNamespace(ctx),
     academy: makeAcademyNamespace(ctx),
     contactForm: makeContactFormNamespace(ctx),
-    leads: makeLeadsNamespace(ctx)
+    leads: makeLeadsNamespace(ctx),
+    dataRequests: makeDataRequestsNamespace(ctx)
   };
 }
 

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;AC/HO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACcA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA,IAEL,MAAA,EAAQ,CAAC,IAAA,KACP,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACfO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant;\n * a rejection surfaces as an `ApiError` carrying the upstream `status`\n * (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */\n    submit: (body: DataRequestInput): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import * as _reblu_site_contracts from '@reblu/site-contracts';
-import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort } from '@reblu/site-contracts';
+import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort, TrustBadgeType } from '@reblu/site-contracts';
 
 /**
  * The shape every list method returns. Unlike demo-site's old bare-array return,
@@ -257,6 +257,12 @@ interface FeaturedPagesOptions {
     cache?: RebluCachePolicy;
 }
 
+/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */
+interface TrustBadgeListParams {
+    /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */
+    type?: TrustBadgeType;
+}
+
 /**
  * Stripe Checkout redirect-origin guard (REB-836, defence in depth).
  *
@@ -327,7 +333,10 @@ declare function createRebluClient(config: RebluClientConfig): {
         get: (cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.Legal>;
     };
     trustBadges: {
-        list: (cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+        list: {
+            (cache?: RebluCachePolicy): Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+            (params: TrustBadgeListParams, cache?: RebluCachePolicy): Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+        };
     };
     ctas: {
         list: (slot: string, cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.Cta>>;
@@ -370,8 +379,11 @@ declare function createRebluClient(config: RebluClientConfig): {
     leads: {
         create: (body: _reblu_site_contracts.LeadInput) => Promise<_reblu_site_contracts.LeadSubmission>;
     };
+    dataRequests: {
+        submit: (body: _reblu_site_contracts.DataRequestInput) => Promise<_reblu_site_contracts.DataRequestSubmission>;
+    };
 };
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _reblu_site_contracts from '@reblu/site-contracts';
-import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort } from '@reblu/site-contracts';
+import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort, TrustBadgeType } from '@reblu/site-contracts';
 
 /**
  * The shape every list method returns. Unlike demo-site's old bare-array return,
@@ -257,6 +257,12 @@ interface FeaturedPagesOptions {
     cache?: RebluCachePolicy;
 }
 
+/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */
+interface TrustBadgeListParams {
+    /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */
+    type?: TrustBadgeType;
+}
+
 /**
  * Stripe Checkout redirect-origin guard (REB-836, defence in depth).
  *
@@ -327,7 +333,10 @@ declare function createRebluClient(config: RebluClientConfig): {
         get: (cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.Legal>;
     };
     trustBadges: {
-        list: (cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+        list: {
+            (cache?: RebluCachePolicy): Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+            (params: TrustBadgeListParams, cache?: RebluCachePolicy): Promise<ListResult<_reblu_site_contracts.TrustBadge>>;
+        };
     };
     ctas: {
         list: (slot: string, cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.Cta>>;
@@ -370,8 +379,11 @@ declare function createRebluClient(config: RebluClientConfig): {
     leads: {
         create: (body: _reblu_site_contracts.LeadInput) => Promise<_reblu_site_contracts.LeadSubmission>;
     };
+    dataRequests: {
+        submit: (body: _reblu_site_contracts.DataRequestInput) => Promise<_reblu_site_contracts.DataRequestSubmission>;
+    };
 };
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };

package/dist/index.js

@@ -254,6 +254,18 @@ function makeCtasNamespace(ctx) {
   };
 }
 
+// src/domains/data-requests.ts
+function makeDataRequestsNamespace(ctx) {
+  return {
+    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */
+    submit: (body) => requestMutation(
+      ctx,
+      "/api/site/data-requests",
+      body
+    )
+  };
+}
+
 // src/domains/leads.ts
 function makeLeadsNamespace(ctx) {
   return {
@@ -401,10 +413,20 @@ function makeShopNamespace(ctx) {
 }
 
 // src/domains/trust-badges.ts
+function isCachePolicy(value) {
+  return Object.prototype.hasOwnProperty.call(value, "revalidate");
+}
 function makeTrustBadgesNamespace(ctx) {
-  return {
-    list: (cache) => requestList(ctx, "/api/site/trust-badges", { cachePolicy: cache })
-  };
+  function list(paramsOrCache, cache) {
+    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : void 0;
+    const params = legacyCache ? void 0 : paramsOrCache;
+    return requestList(
+      ctx,
+      buildUrl("/api/site/trust-badges", { type: params?.type }),
+      { cachePolicy: legacyCache ?? cache }
+    );
+  }
+  return { list };
 }
 
 // src/index.ts
@@ -432,7 +454,8 @@ function createRebluClient(config) {
     shop: makeShopNamespace(ctx),
     academy: makeAcademyNamespace(ctx),
     contactForm: makeContactFormNamespace(ctx),
-    leads: makeLeadsNamespace(ctx)
+    leads: makeLeadsNamespace(ctx),
+    dataRequests: makeDataRequestsNamespace(ctx)
   };
 }
 

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACXO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;AC/HO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,KAAA,KACL,WAAA,CAAwB,KAAK,wBAAA,EAA0B,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACjF;AACF;;;ACcA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG;AAAA,GAC/B;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** `GET /api/site/trust-badges` — the tenant's trust badges (no pagination). */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  return {\n    list: (cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>> =>\n      requestList<TrustBadge>(ctx, '/api/site/trust-badges', { cachePolicy: cache }),\n  }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA,IAEL,MAAA,EAAQ,CAAC,IAAA,KACP,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACfO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant;\n * a rejection surfaces as an `ApiError` carrying the upstream `status`\n * (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */\n    submit: (body: DataRequestInput): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-client",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "description": "Framework-agnostic HTTP client for the Reblu SITE API — dependency-free, injectable cache adapter, typed by @reblu/site-contracts.",
   "license": "Apache-2.0",
   "author": "Reblu — Adolfo Unturbe",
@@ -47,7 +47,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@reblu/site-contracts": "^1.14.0"
+    "@reblu/site-contracts": "^1.16.0"
   },
   "devDependencies": {
     "@size-limit/preset-small-lib": "^11.1.6",
@@ -58,7 +58,7 @@
     "typescript": "^5.8.3",
     "vitest": "^4.0.15",
     "@reblu/config": "0.0.1",
-    "@reblu/site-contracts": "^1.14.0"
+    "@reblu/site-contracts": "^1.16.0"
   },
   "size-limit": [
     {