@reblu/site-client 5.8.0 → 5.9.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @reblu/site-client
 
+## 5.9.0
+
+### Minor Changes
+
+- af425de: REB-1005: `dataRequests.submit(body, options?)` and `contactForm.submit(body, options?)` accept `{ visitorIp, headers }`. `visitorIp` is sent as `x-reblu-visitor-ip`, the header base-api keys its per-visitor limit on (forwarding `x-forwarded-for` does not work on Vercel: the SITE→base-api hop gets it overwritten with the SITE's egress IP). New helper `visitorIpFromHeaders(headers)` reads it from the incoming request; new exports `VISITOR_IP_HEADER` and type `RebluMutationOptions`. Extra `headers` can never set `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version` or `Content-Type`; without options the request is unchanged. README: cache policy of `trustBadges.list()` (an expired badge stays visible until the call revalidates, REB-1002).
+
 ## 5.8.0
 
 ### Minor Changes

package/README.md

@@ -142,12 +142,29 @@ resource; list methods return `{ data, meta? }` (pagination metadata preserved).
 | `ctas`        | `list(slot)`                                                                                                                                                                              |
 | `blog`        | `list(params?)`, `bySlug(slug)`, `related(slug)`, `categories()`, `slugs()`, `preview(id)`                                                                                                |
 | `pages`       | `list(params?)`, `bySlug(slug)`, `featured(category, opts?)`, `slugs()`                                                                                                                   |
-| `dataRequests` | `submit(body)` (write)                                                                                                                                                                   |
+| `dataRequests` | `submit(body, options?)` (write)                                                                                                                                                         |
 | `shop`        | `products(params?)`, `facets(params?)`, `bySlug(slug)`, `categories()`, `config()`, `checkout(body)`, `validateCart(body)`, `applyDiscount(body)`, `checkEmail(body)`, `order(sessionId)` |
 
 Every method accepts an optional trailing `RebluCachePolicy` (`{ revalidate }`) to
 override caching per call. `blog.preview` is always uncached (draft content).
 
+#### Trust badges and the cache (REB-1002)
+
+`trustBadges.list()` only returns badges that are switched on **and** inside
+their validity window **at the moment base-api answers**. A cached answer keeps
+showing what was public when it was fetched: a badge that expires, or that an
+editor switches off in nexus, stays on the SITE until that call revalidates.
+So the badge's lifetime on the SITE is its validity window **plus up to one
+revalidation period**. Pick the period accordingly — with
+`NextCacheAdapter`, e.g. hourly:
+
+```ts
+const { data: badges } = await client.trustBadges.list({}, { revalidate: 3600 })
+```
+
+`{ revalidate: false }` (or `0`) fetches on every request when a badge must
+disappear the moment its window closes.
+
 `pages.bySlug(slug)` returns a `PageDetail` whose `blocks[]` mirror their
 parent section's `heading`/`backgroundColor`/`cta`, with embed blocks
 (`doctor_embed`/`specialty_embed`) additionally carrying a server-resolved
@@ -249,6 +266,34 @@ Rejections throw `ApiError` with the upstream `status`: `400` validation, `422`
 captcha, `429` rate limit. Call it server-side only (the API key is a secret) —
 for the drop-in form see `DataRequestForm` in `@reblu/site-blocks/client`.
 
+#### Forwarding the visitor's identity (REB-1005)
+
+base-api limits public writes (`dataRequests.submit`, `contactForm.submit`) per
+**visitor IP** as well as per tenant. Called from a SITE's server (Route
+Handler, Server Action), the request carries the SITE server's identity — and
+on Vercel the outgoing `x-forwarded-for` is **overwritten** with the SITE
+function's egress IP, so forwarding it does not help. Pass the visitor IP
+explicitly; it travels as `x-reblu-visitor-ip`, which base-api trusts only
+behind a valid API key:
+
+```ts
+import { headers } from 'next/headers'
+import { visitorIpFromHeaders } from '@reblu/site-client'
+
+const h = await headers()
+await client.contactForm.submit(payload, {
+  visitorIp: visitorIpFromHeaders(h), // first x-forwarded-for entry, else x-real-ip
+  headers: { 'user-agent': h.get('user-agent') ?? '' },
+})
+```
+
+Without `visitorIp` base-api applies only the per-tenant limit. Extra
+`headers` can never set `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`,
+`X-Reblu-Api-Version` or `Content-Type`. The incoming `x-forwarded-for` is
+only as trustworthy as the platform in front of the SITE (Vercel sets it). For
+the data-request route, `createDataRequestRoute()` in
+`@reblu/site-next/route-handlers` already does all of this.
+
 ## Versioning
 
 Published under semver (`0.x` while the surface evolves). The contract version is

package/dist/index.cjs

@@ -166,11 +166,33 @@ async function requestList(ctx, path, opts) {
   const body = await request(ctx, path, opts);
   return { data: body.data, meta: body.meta };
 }
-async function requestMutation(ctx, path, body) {
+var VISITOR_IP_HEADER = "x-reblu-visitor-ip";
+function visitorIpFromHeaders(headers) {
+  return headers.get("x-forwarded-for")?.split(",")[0]?.trim() || headers.get("x-real-ip")?.trim() || void 0;
+}
+var RESERVED_HEADERS = /* @__PURE__ */ new Set([
+  "x-reblu-api-key",
+  "x-reblu-api-version",
+  "content-type",
+  VISITOR_IP_HEADER
+]);
+function extraHeaders(options) {
+  if (!options?.headers && !options?.visitorIp) return void 0;
+  const safe = {};
+  for (const [name, value] of Object.entries(options.headers ?? {})) {
+    if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value;
+  }
+  const visitorIp = options.visitorIp?.trim();
+  if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp;
+  return safe;
+}
+async function requestMutation(ctx, path, body, options) {
+  const headers = extraHeaders(options);
   const envelope = await request(ctx, path, {
     method: "POST",
     body: JSON.stringify(body),
-    cachePolicy: { revalidate: false }
+    cachePolicy: { revalidate: false },
+    ...headers ? { headers } : {}
   });
   return envelope.data;
 }
@@ -244,8 +266,18 @@ function makeConfigNamespace(ctx) {
 // src/domains/contact-form.ts
 function makeContactFormNamespace(ctx) {
   return {
-    /** Submit a contact form. Returns the created lead acknowledgement. */
-    submit: (body) => requestMutation(ctx, "/api/site/contact-form", body)
+    /**
+     * Submit a contact form. Returns the created lead acknowledgement.
+     * Server-side (a Server Action / Route Handler), pass `options.visitorIp`
+     * (from the incoming request, see `visitorIpFromHeaders`) so base-api's
+     * per-IP limit (REB-1005) applies to the real visitor.
+     */
+    submit: (body, options) => requestMutation(
+      ctx,
+      "/api/site/contact-form",
+      body,
+      options
+    )
   };
 }
 
@@ -259,11 +291,17 @@ function makeCtasNamespace(ctx) {
 // src/domains/data-requests.ts
 function makeDataRequestsNamespace(ctx) {
   return {
-    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */
-    submit: (body) => requestMutation(
+    /**
+     * Submit a data-subject request. Returns its acknowledgement with the 72h
+     * deadline. Server-side, pass `options.visitorIp` (from the incoming
+     * request, see `visitorIpFromHeaders`) so base-api's per-IP limit
+     * (REB-1005) sees the real visitor.
+     */
+    submit: (body, options) => requestMutation(
       ctx,
       "/api/site/data-requests",
-      body
+      body,
+      options
     )
   };
 }
@@ -466,7 +504,9 @@ exports.ApiError = ApiError;
 exports.DEFAULT_CHECKOUT_REDIRECT_HOSTS = DEFAULT_CHECKOUT_REDIRECT_HOSTS;
 exports.PlainCacheAdapter = PlainCacheAdapter;
 exports.UnsafeCheckoutRedirectError = UnsafeCheckoutRedirectError;
+exports.VISITOR_IP_HEADER = VISITOR_IP_HEADER;
 exports.createRebluClient = createRebluClient;
 exports.isSafeCheckoutRedirectUrl = isSafeCheckoutRedirectUrl;
+exports.visitorIpFromHeaders = visitorIpFromHeaders;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA,IAEL,MAAA,EAAQ,CAAC,IAAA,KACP,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACfO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant;\n * a rejection surfaces as an `ApiError` carrying the upstream `status`\n * (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */\n    submit: (body: DataRequestInput): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,aACP,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AC3IO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.cjs","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n */\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/**\n * Per-call options for a write (REB-1005).\n *\n * - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n *   as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n *   Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n *   egress IP. Read it from the INCOMING request with\n *   {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n *   `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n *   or `Content-Type`.\n */\nexport interface RebluMutationOptions {\n  visitorIp?: string\n  headers?: Record<string, string>\n}\n\n/** The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. */\nexport function visitorIpFromHeaders(headers: {\n  get(name: string): string | null\n}): string | undefined {\n  return (\n    headers.get('x-forwarded-for')?.split(',')[0]?.trim() ||\n    headers.get('x-real-ip')?.trim() ||\n    undefined\n  )\n}\n\n/** Headers the SDK owns on every request — an extra header never sets or overrides these. */\nconst RESERVED_HEADERS = new Set([\n  'x-reblu-api-key',\n  'x-reblu-api-version',\n  'content-type',\n  VISITOR_IP_HEADER,\n])\n\nfunction extraHeaders(\n  options: RebluMutationOptions | undefined,\n): Record<string, string> | undefined {\n  if (!options?.headers && !options?.visitorIp) return undefined\n  const safe: Record<string, string> = {}\n  for (const [name, value] of Object.entries(options.headers ?? {})) {\n    if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n  }\n  const visitorIp = options.visitorIp?.trim()\n  if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n  return safe\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n  options?: RebluMutationOptions,\n): Promise<Res> {\n  const headers = extraHeaders(options)\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n    ...(headers ? { headers } : {}),\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /**\n     * Submit a contact form. Returns the created lead acknowledgement.\n     * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n     * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n     * per-IP limit (REB-1005) applies to the real visitor.\n     */\n    submit: (\n      body: ContactFormInput,\n      options?: RebluMutationOptions,\n    ): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(\n        ctx,\n        '/api/site/contact-form',\n        body,\n        options,\n      ),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /**\n     * Submit a data-subject request. Returns its acknowledgement with the 72h\n     * deadline. Server-side, pass `options.visitorIp` (from the incoming\n     * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n     * (REB-1005) sees the real visitor.\n     */\n    submit: (\n      body: DataRequestInput,\n      options?: RebluMutationOptions,\n    ): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n        options,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}

package/dist/index.d.cts

@@ -1,6 +1,35 @@
 import * as _reblu_site_contracts from '@reblu/site-contracts';
 import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort, TrustBadgeType } from '@reblu/site-contracts';
 
+/**
+ * Cache adapter — the seam that severs the SDK from any framework's caching
+ * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call
+ * `RebluCachePolicy`); the adapter owns *how* (the framework-specific
+ * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic
+ * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`
+ * that returns `{ next: { revalidate } }`.
+ */
+interface RebluCachePolicy {
+    /**
+     * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`
+     * → never cache (always fetch fresh).
+     */
+    revalidate?: number | false;
+}
+interface RebluCacheAdapter {
+    /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */
+    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+}
+/**
+ * Default adapter — plain `fetch` cache semantics that work in Node, edge,
+ * browser and tests. No `next`, no `server-only`.
+ */
+declare class PlainCacheAdapter implements RebluCacheAdapter {
+    private readonly defaultRevalidate;
+    constructor(defaultRevalidate?: number | false);
+    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+}
+
 /**
  * The shape every list method returns. Unlike demo-site's old bare-array return,
  * the SDK surfaces `meta` so pagination is never silently dropped (design doc
@@ -118,33 +147,31 @@ interface AcademyEnrollmentRequestResult {
 }
 
 /**
- * Cache adapter — the seam that severs the SDK from any framework's caching
- * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call
- * `RebluCachePolicy`); the adapter owns *how* (the framework-specific
- * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic
- * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`
- * that returns `{ next: { revalidate } }`.
+ * Header carrying the visitor IP from a SITE server to base-api (REB-1005).
+ * base-api keys its per-visitor limit on public writes on it, and trusts it
+ * only behind a valid API key.
  */
-interface RebluCachePolicy {
-    /**
-     * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`
-     * → never cache (always fetch fresh).
-     */
-    revalidate?: number | false;
-}
-interface RebluCacheAdapter {
-    /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */
-    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
-}
+declare const VISITOR_IP_HEADER = "x-reblu-visitor-ip";
 /**
- * Default adapter — plain `fetch` cache semantics that work in Node, edge,
- * browser and tests. No `next`, no `server-only`.
+ * Per-call options for a write (REB-1005).
+ *
+ * - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent
+ *   as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on
+ *   Vercel the SITE→base-api hop gets it overwritten with the SITE function's
+ *   egress IP. Read it from the INCOMING request with
+ *   {@link visitorIpFromHeaders}.
+ * - `headers` — other extra headers (e.g. `user-agent`). They can never set
+ *   `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`
+ *   or `Content-Type`.
  */
-declare class PlainCacheAdapter implements RebluCacheAdapter {
-    private readonly defaultRevalidate;
-    constructor(defaultRevalidate?: number | false);
-    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+interface RebluMutationOptions {
+    visitorIp?: string;
+    headers?: Record<string, string>;
 }
+/** The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. */
+declare function visitorIpFromHeaders(headers: {
+    get(name: string): string | null;
+}): string | undefined;
 
 /**
  * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a
@@ -374,16 +401,16 @@ declare function createRebluClient(config: RebluClientConfig): {
         enrollmentRequest: (body: AcademyEnrollmentRequestInput) => Promise<AcademyEnrollmentRequestResult>;
     };
     contactForm: {
-        submit: (body: _reblu_site_contracts.ContactFormInput) => Promise<_reblu_site_contracts.ContactFormSubmission>;
+        submit: (body: _reblu_site_contracts.ContactFormInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ContactFormSubmission>;
     };
     leads: {
         create: (body: _reblu_site_contracts.LeadInput) => Promise<_reblu_site_contracts.LeadSubmission>;
     };
     dataRequests: {
-        submit: (body: _reblu_site_contracts.DataRequestInput) => Promise<_reblu_site_contracts.DataRequestSubmission>;
+        submit: (body: _reblu_site_contracts.DataRequestInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.DataRequestSubmission>;
     };
 };
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type RebluMutationOptions, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, VISITOR_IP_HEADER, createRebluClient, isSafeCheckoutRedirectUrl, visitorIpFromHeaders };

package/dist/index.d.ts

@@ -1,6 +1,35 @@
 import * as _reblu_site_contracts from '@reblu/site-contracts';
 import { AcademyCourseSort, PaginationMeta, PageType, PagesListSort, ShopSort, TrustBadgeType } from '@reblu/site-contracts';
 
+/**
+ * Cache adapter — the seam that severs the SDK from any framework's caching
+ * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call
+ * `RebluCachePolicy`); the adapter owns *how* (the framework-specific
+ * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic
+ * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`
+ * that returns `{ next: { revalidate } }`.
+ */
+interface RebluCachePolicy {
+    /**
+     * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`
+     * → never cache (always fetch fresh).
+     */
+    revalidate?: number | false;
+}
+interface RebluCacheAdapter {
+    /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */
+    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+}
+/**
+ * Default adapter — plain `fetch` cache semantics that work in Node, edge,
+ * browser and tests. No `next`, no `server-only`.
+ */
+declare class PlainCacheAdapter implements RebluCacheAdapter {
+    private readonly defaultRevalidate;
+    constructor(defaultRevalidate?: number | false);
+    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+}
+
 /**
  * The shape every list method returns. Unlike demo-site's old bare-array return,
  * the SDK surfaces `meta` so pagination is never silently dropped (design doc
@@ -118,33 +147,31 @@ interface AcademyEnrollmentRequestResult {
 }
 
 /**
- * Cache adapter — the seam that severs the SDK from any framework's caching
- * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call
- * `RebluCachePolicy`); the adapter owns *how* (the framework-specific
- * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic
- * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`
- * that returns `{ next: { revalidate } }`.
+ * Header carrying the visitor IP from a SITE server to base-api (REB-1005).
+ * base-api keys its per-visitor limit on public writes on it, and trusts it
+ * only behind a valid API key.
  */
-interface RebluCachePolicy {
-    /**
-     * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`
-     * → never cache (always fetch fresh).
-     */
-    revalidate?: number | false;
-}
-interface RebluCacheAdapter {
-    /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */
-    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
-}
+declare const VISITOR_IP_HEADER = "x-reblu-visitor-ip";
 /**
- * Default adapter — plain `fetch` cache semantics that work in Node, edge,
- * browser and tests. No `next`, no `server-only`.
+ * Per-call options for a write (REB-1005).
+ *
+ * - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent
+ *   as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on
+ *   Vercel the SITE→base-api hop gets it overwritten with the SITE function's
+ *   egress IP. Read it from the INCOMING request with
+ *   {@link visitorIpFromHeaders}.
+ * - `headers` — other extra headers (e.g. `user-agent`). They can never set
+ *   `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`
+ *   or `Content-Type`.
  */
-declare class PlainCacheAdapter implements RebluCacheAdapter {
-    private readonly defaultRevalidate;
-    constructor(defaultRevalidate?: number | false);
-    resolveRequestInit(policy: RebluCachePolicy): RequestInit;
+interface RebluMutationOptions {
+    visitorIp?: string;
+    headers?: Record<string, string>;
 }
+/** The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. */
+declare function visitorIpFromHeaders(headers: {
+    get(name: string): string | null;
+}): string | undefined;
 
 /**
  * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a
@@ -374,16 +401,16 @@ declare function createRebluClient(config: RebluClientConfig): {
         enrollmentRequest: (body: AcademyEnrollmentRequestInput) => Promise<AcademyEnrollmentRequestResult>;
     };
     contactForm: {
-        submit: (body: _reblu_site_contracts.ContactFormInput) => Promise<_reblu_site_contracts.ContactFormSubmission>;
+        submit: (body: _reblu_site_contracts.ContactFormInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ContactFormSubmission>;
     };
     leads: {
         create: (body: _reblu_site_contracts.LeadInput) => Promise<_reblu_site_contracts.LeadSubmission>;
     };
     dataRequests: {
-        submit: (body: _reblu_site_contracts.DataRequestInput) => Promise<_reblu_site_contracts.DataRequestSubmission>;
+        submit: (body: _reblu_site_contracts.DataRequestInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.DataRequestSubmission>;
     };
 };
 /** The assembled client returned by {@link createRebluClient}. */
 type RebluClient = ReturnType<typeof createRebluClient>;
 
-export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
+export { type AcademyCourseListParams, type AcademyEnrollmentRequestInput, type AcademyEnrollmentRequestResult, AmbiguousPageSlugError, ApiError, type ApiErrorBody, type ApiErrorDetails, type BlogListParams, DEFAULT_CHECKOUT_REDIRECT_HOSTS, type FeaturedPagesOptions, type ListResult, type PageBySlugOptions, type PageSlugCandidate, type PagesListParams, PlainCacheAdapter, type RebluCacheAdapter, type RebluCachePolicy, type RebluClient, type RebluClientConfig, type RebluMutationOptions, type ShopProductsParams, type TrustBadgeListParams, UnsafeCheckoutRedirectError, VISITOR_IP_HEADER, createRebluClient, isSafeCheckoutRedirectUrl, visitorIpFromHeaders };

package/dist/index.js

@@ -164,11 +164,33 @@ async function requestList(ctx, path, opts) {
   const body = await request(ctx, path, opts);
   return { data: body.data, meta: body.meta };
 }
-async function requestMutation(ctx, path, body) {
+var VISITOR_IP_HEADER = "x-reblu-visitor-ip";
+function visitorIpFromHeaders(headers) {
+  return headers.get("x-forwarded-for")?.split(",")[0]?.trim() || headers.get("x-real-ip")?.trim() || void 0;
+}
+var RESERVED_HEADERS = /* @__PURE__ */ new Set([
+  "x-reblu-api-key",
+  "x-reblu-api-version",
+  "content-type",
+  VISITOR_IP_HEADER
+]);
+function extraHeaders(options) {
+  if (!options?.headers && !options?.visitorIp) return void 0;
+  const safe = {};
+  for (const [name, value] of Object.entries(options.headers ?? {})) {
+    if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value;
+  }
+  const visitorIp = options.visitorIp?.trim();
+  if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp;
+  return safe;
+}
+async function requestMutation(ctx, path, body, options) {
+  const headers = extraHeaders(options);
   const envelope = await request(ctx, path, {
     method: "POST",
     body: JSON.stringify(body),
-    cachePolicy: { revalidate: false }
+    cachePolicy: { revalidate: false },
+    ...headers ? { headers } : {}
   });
   return envelope.data;
 }
@@ -242,8 +264,18 @@ function makeConfigNamespace(ctx) {
 // src/domains/contact-form.ts
 function makeContactFormNamespace(ctx) {
   return {
-    /** Submit a contact form. Returns the created lead acknowledgement. */
-    submit: (body) => requestMutation(ctx, "/api/site/contact-form", body)
+    /**
+     * Submit a contact form. Returns the created lead acknowledgement.
+     * Server-side (a Server Action / Route Handler), pass `options.visitorIp`
+     * (from the incoming request, see `visitorIpFromHeaders`) so base-api's
+     * per-IP limit (REB-1005) applies to the real visitor.
+     */
+    submit: (body, options) => requestMutation(
+      ctx,
+      "/api/site/contact-form",
+      body,
+      options
+    )
   };
 }
 
@@ -257,11 +289,17 @@ function makeCtasNamespace(ctx) {
 // src/domains/data-requests.ts
 function makeDataRequestsNamespace(ctx) {
   return {
-    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */
-    submit: (body) => requestMutation(
+    /**
+     * Submit a data-subject request. Returns its acknowledgement with the 72h
+     * deadline. Server-side, pass `options.visitorIp` (from the incoming
+     * request, see `visitorIpFromHeaders`) so base-api's per-IP limit
+     * (REB-1005) sees the real visitor.
+     */
+    submit: (body, options) => requestMutation(
       ctx,
       "/api/site/data-requests",
-      body
+      body,
+      options
     )
   };
 }
@@ -459,6 +497,6 @@ function createRebluClient(config) {
   };
 }
 
-export { AmbiguousPageSlugError, ApiError, DEFAULT_CHECKOUT_REDIRECT_HOSTS, PlainCacheAdapter, UnsafeCheckoutRedirectError, createRebluClient, isSafeCheckoutRedirectUrl };
+export { AmbiguousPageSlugError, ApiError, DEFAULT_CHECKOUT_REDIRECT_HOSTS, PlainCacheAdapter, UnsafeCheckoutRedirectError, VISITOR_IP_HEADER, createRebluClient, isSafeCheckoutRedirectUrl, visitorIpFromHeaders };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,GAClC,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AChFO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAAyD,GAAA,EAAK,0BAA0B,IAAI;AAAA,GAChG;AACF;;;ACAO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA,IAEL,MAAA,EAAQ,CAAC,IAAA,KACP,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACfO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n): Promise<Res> {\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a contact form. Returns the created lead acknowledgement. */\n    submit: (body: ContactFormInput): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(ctx, '/api/site/contact-form', body),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant;\n * a rejection surfaces as an `ApiError` carrying the upstream `status`\n * (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Submit a data-subject request. Returns its acknowledgement with the 72h deadline. */\n    submit: (body: DataRequestInput): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\n"]}
+{"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,aACP,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AC3IO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.js","sourcesContent":["/**\n * Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns *when* to cache (a per-call\n * `RebluCachePolicy`); the adapter owns *how* (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n */\n\nexport interface RebluCachePolicy {\n  /**\n   * Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n   * → never cache (always fetch fresh).\n   */\n  revalidate?: number | false\n}\n\nexport interface RebluCacheAdapter {\n  /** Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. */\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/**\n * Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n */\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n  constructor(private readonly defaultRevalidate: number | false = false) {}\n\n  resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n    const revalidate = policy.revalidate ?? this.defaultRevalidate\n    return revalidate === false || revalidate === 0\n      ? { cache: 'no-store' }\n      : { cache: 'force-cache' }\n  }\n}\n","/**\n * Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n *\n * `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n */\n\n/** The only Checkout redirect host trusted by default. */\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/**\n * True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n */\nexport function isSafeCheckoutRedirectUrl(\n  url: string,\n  allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n  let parsed: URL\n  try {\n    parsed = new URL(url)\n  } catch {\n    return false\n  }\n  return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/**\n * Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n */\nexport class UnsafeCheckoutRedirectError extends Error {\n  constructor(\n    public readonly url: string,\n    public readonly allowedHosts: readonly string[],\n  ) {\n    super(\n      `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n        `(allowed hosts: ${allowedHosts.join(', ')})`,\n    )\n    this.name = 'UnsafeCheckoutRedirectError'\n  }\n}\n","/** A value that can be serialized into a query string. */\nexport type QueryValue = string | number | boolean | undefined | null\n\n/**\n * Append a query string to `base`, dropping `undefined`/`null` values.\n *\n * Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n */\nexport function buildUrl(\n  base: string,\n  params?: Record<string, QueryValue | QueryValue[]>,\n): string {\n  if (!params) return base\n  const pairs: [string, string][] = []\n  for (const [key, value] of Object.entries(params)) {\n    const values = Array.isArray(value) ? value : [value]\n    for (const v of values) {\n      if (v === undefined || v === null) continue\n      pairs.push([key, String(v)])\n    }\n  }\n  if (pairs.length === 0) return base\n  const qs = new URLSearchParams(pairs).toString()\n  return `${base}?${qs}`\n}\n","/**\n * The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n */\nexport interface ApiErrorDetails {\n  fieldErrors?: Record<string, string[]>\n  formErrors?: string[]\n  /**\n   * REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n   * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n   */\n  productIds?: string[]\n  /** REB-842: optional request-field identifier for checkout validation errors. */\n  field?: string\n}\n\n/**\n * The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n */\nexport interface ApiErrorBody {\n  error: string\n  details?: ApiErrorDetails\n  /**\n   * REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n   * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n   * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n   * `error`/`message` keeps working unchanged. `string` rather than\n   * `ShopErrorCode` here because `ApiError` is a generic transport error used\n   * by every `/api/site/*` domain, not just shop.\n   */\n  code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/**\n * Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] | undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n */\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n  if (typeof value !== 'object' || value === null) return false\n  const details = value as {\n    fieldErrors?: unknown\n    formErrors?: unknown\n    productIds?: unknown\n    field?: unknown\n  }\n\n  if (details.fieldErrors !== undefined) {\n    if (\n      typeof details.fieldErrors !== 'object' ||\n      details.fieldErrors === null ||\n      Array.isArray(details.fieldErrors)\n    ) {\n      return false\n    }\n    for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n      if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n    }\n  }\n\n  if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n  // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n  if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n  if ('field' in details && typeof details.field !== 'string') return false\n\n  return true\n}\n\n/**\n * `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n */\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const body = value as { error?: unknown; details?: unknown; code?: unknown }\n  if (typeof body.error !== 'string') return false\n  if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n  // REB-836: `code` must be a string when present — same all-or-nothing\n  // reading as `details` above (an unrecognised shape makes the whole body\n  // unrecognised, never silently dropped).\n  if (body.code !== undefined && typeof body.code !== 'string') return false\n  return true\n}\n\n/**\n * Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n */\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody | undefined {\n  if (!rawBody) return undefined\n  try {\n    const parsed: unknown = JSON.parse(rawBody)\n    return isApiErrorBody(parsed) ? parsed : undefined\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Typed transport error for the Reblu SITE API.\n *\n * Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n */\nexport class ApiError extends Error {\n  /**\n   * The parsed response body, when it was JSON shaped like `{ error, details? }`\n   * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n   * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n   * instead of regex-stripping this error's `message`.\n   */\n  public readonly body: ApiErrorBody | undefined\n\n  constructor(\n    public readonly status: number,\n    public readonly path: string,\n    message: string,\n  ) {\n    super(`API ${status} @ ${path}: ${message}`)\n    this.name = 'ApiError'\n    this.body = parseApiErrorBody(message)\n  }\n}\n\n/** One page a slug could mean (REB-867) — `null` = the uncategorised page. */\nexport interface PageSlugCandidate {\n  categorySlug: string | null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n  try {\n    const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n    if (!Array.isArray(parsed.candidates)) return []\n    return parsed.candidates.flatMap((c: unknown) => {\n      const slug = (c as { categorySlug?: unknown } | null)?.categorySlug\n      return typeof slug === 'string' || slug === null ? [{ categorySlug: slug }] : []\n    })\n  } catch {\n    return []\n  }\n}\n\n/**\n * REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n */\nexport class AmbiguousPageSlugError extends ApiError {\n  public readonly candidates: PageSlugCandidate[]\n\n  constructor(source: ApiError, rawBody: string) {\n    super(source.status, source.path, rawBody)\n    this.name = 'AmbiguousPageSlugError'\n    this.candidates = parseCandidates(rawBody)\n  }\n}\n\n/** The raw body an `ApiError` was built from (its message minus the prefix). */\nexport function apiErrorRawBody(error: ApiError): string {\n  const prefix = `API ${error.status} @ ${error.path}: `\n  return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/**\n * Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n */\nexport interface RebluClientContext {\n  baseUrl: string\n  apiKey: string\n  apiVersion: string\n  cache: RebluCacheAdapter\n  timeoutMs: number\n  fetch: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth). Defaults to\n   * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n   * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n   */\n  checkoutRedirectHosts: readonly string[]\n}\n\n/** Per-call request options. `cachePolicy` is interpreted by the cache adapter. */\nexport interface RequestOptions {\n  method?: string\n  body?: string\n  headers?: Record<string, string>\n  cachePolicy?: RebluCachePolicy\n}\n\n/**\n * Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n */\nexport async function request<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const url = ctx.baseUrl + path\n  const controller = new AbortController()\n  const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n  try {\n    const res = await ctx.fetch(url, {\n      method: opts.method ?? 'GET',\n      body: opts.body,\n      signal: controller.signal,\n      headers: {\n        'X-Reblu-Api-Key': ctx.apiKey,\n        'X-Reblu-Api-Version': ctx.apiVersion,\n        'Content-Type': 'application/json',\n        ...opts.headers,\n      },\n      ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n    })\n\n    if (!res.ok) {\n      throw new ApiError(res.status, path, await res.text())\n    }\n    return (await res.json()) as T\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** Fetch a single resource and unwrap the `{ data: T }` envelope. */\nexport async function requestOne<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<T> {\n  const body = await request<{ data: T }>(ctx, path, opts)\n  return body.data\n}\n\n/** Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). */\nexport async function requestList<T>(\n  ctx: RebluClientContext,\n  path: string,\n  opts: RequestOptions,\n): Promise<ListResult<T>> {\n  const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n  return { data: body.data, meta: body.meta }\n}\n\n/**\n * Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n */\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/**\n * Per-call options for a write (REB-1005).\n *\n * - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n *   as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n *   Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n *   egress IP. Read it from the INCOMING request with\n *   {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n *   `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n *   or `Content-Type`.\n */\nexport interface RebluMutationOptions {\n  visitorIp?: string\n  headers?: Record<string, string>\n}\n\n/** The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. */\nexport function visitorIpFromHeaders(headers: {\n  get(name: string): string | null\n}): string | undefined {\n  return (\n    headers.get('x-forwarded-for')?.split(',')[0]?.trim() ||\n    headers.get('x-real-ip')?.trim() ||\n    undefined\n  )\n}\n\n/** Headers the SDK owns on every request — an extra header never sets or overrides these. */\nconst RESERVED_HEADERS = new Set([\n  'x-reblu-api-key',\n  'x-reblu-api-version',\n  'content-type',\n  VISITOR_IP_HEADER,\n])\n\nfunction extraHeaders(\n  options: RebluMutationOptions | undefined,\n): Record<string, string> | undefined {\n  if (!options?.headers && !options?.visitorIp) return undefined\n  const safe: Record<string, string> = {}\n  for (const [name, value] of Object.entries(options.headers ?? {})) {\n    if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n  }\n  const visitorIp = options.visitorIp?.trim()\n  if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n  return safe\n}\n\n/**\n * POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/*` write route, which answers with `apiOk`/`{ data }`.\n */\nexport async function requestMutation<Req, Res>(\n  ctx: RebluClientContext,\n  path: string,\n  body: Req,\n  options?: RebluMutationOptions,\n): Promise<Res> {\n  const headers = extraHeaders(options)\n  const envelope = await request<{ data: Res }>(ctx, path, {\n    method: 'POST',\n    body: JSON.stringify(body),\n    cachePolicy: { revalidate: false },\n    ...(headers ? { headers } : {}),\n  })\n  return envelope.data\n}\n","import type {\n  AcademyCategoryPublic,\n  AcademyCourseDetail,\n  AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n  ListResult,\n} from '../types'\n\n/**\n * Academy domain — the public course catalogue (`GET /api/site/academy/*`,\n * REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n *\n * `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n */\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n  return {\n    /** Published courses, filtered + paginated. `meta` carries the pagination. */\n    courses: (\n      params?: AcademyCourseListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<AcademyCourseSummary>> =>\n      requestList<AcademyCourseSummary>(\n        ctx,\n        buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /** A single published course by slug, with its modules, lessons and CTA gate. */\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n      requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n        cachePolicy: cache,\n      }),\n\n    /** Active course categories backing the catalog filter. Not paginated. */\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n      requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n        cachePolicy: cache,\n      }),\n\n    /**\n     * Submit an anonymous enrollment request for a course.\n     *\n     * The reply is UNIFORM by design: the caller cannot tell whether the email\n     * was new (a request row was created) or already known (a sign-in link was\n     * sent and NO request row exists). Never present the returned message as\n     * confirmation that a request was recorded — it is not one.\n     */\n    enrollmentRequest: (\n      body: AcademyEnrollmentRequestInput,\n    ): Promise<AcademyEnrollmentRequestResult> =>\n      request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n        method: 'POST',\n        body: JSON.stringify(body),\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/analytics` — the tenant's analytics provider configuration. */\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n      requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n  }\n}\n","import type {\n  BlogCategoryWithCount,\n  BlogPostDetail,\n  BlogPostListItem,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/** Blog domain — `GET /api/site/blog/*`. */\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n  return {\n    list: (\n      params?: BlogListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(\n        ctx,\n        buildUrl('/api/site/blog', params as Record<string, QueryValue> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n      requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n    related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n      requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n      requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n      requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n    /** Draft preview — never cached (unpublished content). */\n    preview: (id: string): Promise<BlogPostPreview> =>\n      requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n        cachePolicy: { revalidate: false },\n      }),\n  }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/config` — the tenant's public site configuration. */\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Config> =>\n      requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n  }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/**\n * Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n */\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n  return {\n    /**\n     * Submit a contact form. Returns the created lead acknowledgement.\n     * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n     * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n     * per-IP limit (REB-1005) applies to the real visitor.\n     */\n    submit: (\n      body: ContactFormInput,\n      options?: RebluMutationOptions,\n    ): Promise<ContactFormSubmission> =>\n      requestMutation<ContactFormInput, ContactFormSubmission>(\n        ctx,\n        '/api/site/contact-form',\n        body,\n        options,\n      ),\n  }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/**\n * `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n *\n * `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n */\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n  return {\n    list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n      requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n  }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/**\n * GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n *\n * base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n */\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n  return {\n    /**\n     * Submit a data-subject request. Returns its acknowledgement with the 72h\n     * deadline. Server-side, pass `options.visitorIp` (from the incoming\n     * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n     * (REB-1005) sees the real visitor.\n     */\n    submit: (\n      body: DataRequestInput,\n      options?: RebluMutationOptions,\n    ): Promise<DataRequestSubmission> =>\n      requestMutation<DataRequestInput, DataRequestSubmission>(\n        ctx,\n        '/api/site/data-requests',\n        body,\n        options,\n      ),\n  }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/**\n * Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n */\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n  return {\n    /** Create a lead. Returns the created lead acknowledgement. */\n    create: (body: LeadInput): Promise<LeadSubmission> =>\n      requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n  }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/** `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). */\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n  return {\n    get: (cache?: RebluCachePolicy): Promise<Legal> =>\n      requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n  }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/**\n * REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n *   - `category: '<categorySlug>'` → the page with that slug in that category;\n *   - `category: null` → the UNCATEGORISED page with that slug;\n *   - omitted → the unique page with that slug; throws\n *     `AmbiguousPageSlugError` when it exists in more than one category.\n */\nexport interface PageBySlugOptions {\n  category?: string | null\n  cache?: RebluCachePolicy\n}\n\n/**\n * The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n */\n/** REB-869 — options for `pages.featured`. */\nexport interface FeaturedPagesOptions {\n  /**\n   * How many pages at most: an integer >= 1. Default 3. Values above the\n   * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n   * fractional, NaN) throws a `RangeError` before any request is made.\n   */\n  limit?: number\n  /**\n   * When the category has nothing featured, return its first `limit` pages in\n   * normal order instead of `[]`. Default `true`, so a teaser is never empty\n   * just because nobody picked pages yet.\n   */\n  fallback?: boolean\n  cache?: RebluCachePolicy\n}\n\n/** The server caps a featured list at 3 (REB-869). */\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy | PageBySlugOptions): value is PageBySlugOptions {\n  return 'category' in value || 'cache' in value\n}\n\n/** Dynamic pages domain — `GET /api/site/pages/*`. */\nexport function makePagesNamespace(ctx: RebluClientContext) {\n  const namespace = {\n    list: (\n      params?: PagesListParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<PageListItem>> =>\n      requestList<PageListItem>(\n        ctx,\n        // REB-63: `type` can now be a single PageType or an array (repeated\n        // `?type=` params) — widen the cast alongside `PagesListParams`.\n        buildUrl('/api/site/pages', params as Record<string, QueryValue | QueryValue[]> | undefined),\n        { cachePolicy: cache },\n      ),\n\n    /**\n     * A published page by slug. The second argument is either a cache policy\n     * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n     */\n    bySlug: async (\n      slug: string,\n      cacheOrOptions?: RebluCachePolicy | PageBySlugOptions,\n    ): Promise<PageDetail> => {\n      const options: PageBySlugOptions =\n        cacheOrOptions && isBySlugOptions(cacheOrOptions)\n          ? cacheOrOptions\n          : { cache: cacheOrOptions }\n      const path =\n        options.category === undefined\n          ? `/api/site/pages/${slug}`\n          : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n      try {\n        return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n      } catch (error) {\n        if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n          throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n        }\n        throw error\n      }\n    },\n\n    /**\n     * REB-869 — the pages to show in a category teaser: the category's\n     * featured pages in the tenant's order; when none are featured (and\n     * `fallback` is not `false`), the first `limit` pages of the category in\n     * normal order. Returns the items only (no pagination applies).\n     */\n    featured: async (\n      category: string,\n      { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n    ): Promise<PageListItem[]> => {\n      if (!Number.isInteger(requested) || requested < 1) {\n        throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n      }\n      const limit = Math.min(requested, FEATURED_PAGES_MAX)\n      const featured = await namespace.list({ category, featured: true }, cache)\n      if (featured.data.length > 0 || !fallback) return featured.data.slice(0, limit)\n      const first = await namespace.list({ category, pageSize: limit }, cache)\n      return first.data.slice(0, limit)\n    },\n\n    slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n      requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n  }\n  return namespace\n}\n","import type {\n  ShopApplyDiscountInput,\n  ShopCartValidation,\n  ShopCategory,\n  ShopCheckEmailInput,\n  ShopCheckoutInput,\n  ShopCheckoutSession,\n  ShopConfig,\n  ShopDiscountApplication,\n  ShopEmailCheck,\n  ShopFacets,\n  ShopOrder,\n  ShopProductDetail,\n  ShopProductListItem,\n  ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/**\n * Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n */\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue | QueryValue[]> {\n  if (!params) return {}\n  const { taxonomy, attr, ...scalars } = params\n  const out: Record<string, QueryValue | QueryValue[]> = { ...scalars }\n  if (taxonomy) {\n    for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n  }\n  if (attr) {\n    for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n  }\n  return out\n}\n\n/**\n * Shop domain — READ surface (`GET /api/site/shop/*`) plus the mutation flow\n * (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n */\nexport function makeShopNamespace(ctx: RebluClientContext) {\n  return {\n    products: (\n      params?: ShopProductsParams,\n      cache?: RebluCachePolicy,\n    ): Promise<ListResult<ShopProductListItem>> =>\n      requestList<ShopProductListItem>(\n        ctx,\n        buildUrl('/api/site/shop/products', flattenShopParams(params)),\n        { cachePolicy: cache },\n      ),\n\n    /** Available facets (brand/attributes/price/on-sale) for the given filters. */\n    facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n      requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n        cachePolicy: cache,\n      }),\n\n    bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n      requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n    categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n      requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n    config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n      requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n    // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n    /**\n     * Start a hosted checkout session. Returns the Stripe URL + session id.\n     *\n     * REB-836 (defence in depth): every SITE hands `url` straight to\n     * `window.location.assign`, so this validates it is `https:` on an\n     * allowed host (`ctx.checkoutRedirectHosts`, default\n     * `checkout.stripe.com`) BEFORE returning — throwing\n     * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n     * that could redirect a buyer's browser off Stripe's domain.\n     */\n    checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n      const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n        ctx,\n        '/api/site/shop/checkout',\n        body,\n      )\n      if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n        throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n      }\n      return session\n    },\n\n    /** Validate a cart against live product/stock/price state before checkout. */\n    validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n      requestMutation<ShopValidateCartInput, ShopCartValidation>(\n        ctx,\n        '/api/site/shop/validate-cart',\n        body,\n      ),\n\n    /** Validate a discount code against the current cart subtotal. */\n    applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n      requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n        ctx,\n        '/api/site/shop/apply-discount',\n        body,\n      ),\n\n    /**\n     * @deprecated REB-834 — the endpoint no longer reveals whether an account\n     * exists: it always resolves `{ exists: false }`. Do not call it and never\n     * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n     * continuar como invitado» and the server links the order to an existing\n     * account after payment. Removed in the next major.\n     */\n    checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n      requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n    /**\n     * Look up a confirmed (or still-pending) order by its Stripe Checkout\n     * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n     * through `requestOne` like every other read, not `requestMutation`.\n     */\n    order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n      requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n        cachePolicy: cache,\n      }),\n  }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/** Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). */\nexport interface TrustBadgeListParams {\n  /** Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. */\n  type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams | RebluCachePolicy): value is RebluCachePolicy {\n  return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/**\n * `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n */\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n  function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n  function list(\n    params: TrustBadgeListParams,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>>\n  function list(\n    paramsOrCache?: TrustBadgeListParams | RebluCachePolicy,\n    cache?: RebluCachePolicy,\n  ): Promise<ListResult<TrustBadge>> {\n    // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n    const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n    const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams | undefined)\n    return requestList<TrustBadge>(\n      ctx,\n      buildUrl('/api/site/trust-badges', { type: params?.type }),\n      { cachePolicy: legacyCache ?? cache },\n    )\n  }\n  return { list }\n}\n","/**\n * `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n *\n * The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n */\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/** Parity with demo-site's upstream timeout (client.ts:36). */\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n  /** Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. */\n  baseUrl: string\n  /** Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. */\n  apiKey: string\n  /** Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. */\n  apiVersion?: string\n  /** Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). */\n  cache?: RebluCacheAdapter\n  /** Per-request hard timeout in ms. Defaults to `8000`. */\n  timeoutMs?: number\n  /** Injectable `fetch` — for tests, custom runtimes, or instrumentation. */\n  fetch?: typeof fetch\n  /**\n   * Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n   * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n   * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n   * a Stripe CLI mock host) — never to widen production trust.\n   */\n  checkoutRedirectHosts?: string[]\n}\n\n/**\n * Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n */\nexport function createRebluClient(config: RebluClientConfig) {\n  // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n  // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n  const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n  const ctx: RebluClientContext = {\n    baseUrl: config.baseUrl,\n    apiKey: config.apiKey,\n    apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n    cache: config.cache ?? new PlainCacheAdapter(),\n    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n    fetch: boundFetch,\n    checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  }\n\n  return {\n    config: makeConfigNamespace(ctx),\n    analytics: makeAnalyticsNamespace(ctx),\n    legal: makeLegalNamespace(ctx),\n    trustBadges: makeTrustBadgesNamespace(ctx),\n    ctas: makeCtasNamespace(ctx),\n    blog: makeBlogNamespace(ctx),\n    pages: makePagesNamespace(ctx),\n    shop: makeShopNamespace(ctx),\n    academy: makeAcademyNamespace(ctx),\n    contactForm: makeContactFormNamespace(ctx),\n    leads: makeLeadsNamespace(ctx),\n    dataRequests: makeDataRequestsNamespace(ctx),\n  }\n}\n\n/** The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n  DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n  isSafeCheckoutRedirectUrl,\n  UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n  ListResult,\n  BlogListParams,\n  PagesListParams,\n  ShopProductsParams,\n  AcademyCourseListParams,\n  AcademyEnrollmentRequestInput,\n  AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-client",
-  "version": "5.8.0",
+  "version": "5.9.0",
   "description": "Framework-agnostic HTTP client for the Reblu SITE API — dependency-free, injectable cache adapter, typed by @reblu/site-contracts.",
   "license": "Apache-2.0",
   "author": "Reblu — Adolfo Unturbe",
@@ -47,7 +47,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@reblu/site-contracts": "^1.16.0"
+    "@reblu/site-contracts": "^1.17.0"
   },
   "devDependencies": {
     "@size-limit/preset-small-lib": "^11.1.6",
@@ -58,7 +58,7 @@
     "typescript": "^5.8.3",
     "vitest": "^4.0.15",
     "@reblu/config": "0.0.1",
-    "@reblu/site-contracts": "^1.16.0"
+    "@reblu/site-contracts": "^1.17.0"
   },
   "size-limit": [
     {