npm - @reblu/site-client - Versions diffs - 5.9.0 → 5.10.0 - Mend

@reblu/site-client 5.9.0 → 5.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,11 @@
 # @reblu/site-client
+## 5.10.0
+### Minor Changes
+- de8aabc: REB-1006: `shop.checkEmail(body, options?)` and `academy.enrollmentRequest(body, options?)` accept the same `{ visitorIp, headers }` options as the other writes. `visitorIp` is sent as `x-reblu-visitor-ip`, which base-api now uses as the key for these routes' per-IP limits (and for login, magic link and password reset behind `createProxyRoute`). Without it, base-api throttles all of the SITE's visitors in one shared tenant-level bucket. Without options the request is unchanged.
 ## 5.9.0
 ### Minor Changes

package/README.md CHANGED Viewed

@@ -287,7 +287,14 @@ await client.contactForm.submit(payload, {
 })
 ```
-Without `visitorIp` base-api applies only the per-tenant limit. Extra
+`shop.checkEmail` and `academy.enrollmentRequest` take the same `options`
+(REB-1006): base-api keys their per-IP limits on `x-reblu-visitor-ip` too.
+Without `visitorIp` base-api applies only the per-tenant limit to the public
+writes; on `shop.checkEmail`, `academy.enrollmentRequest` and the auth routes
+(login, magic link, password reset) it instead throttles every visitor of the
+SITE in **one shared tenant-level bucket** — those limits fail closed, so a
+missing header degrades your visitors, never the guard. Extra
 `headers` can never set `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`,
 `X-Reblu-Api-Version` or `Content-Type`. The incoming `x-forwarded-for` is
 only as trustworthy as the platform in front of the SITE (Vercel sets it). For

package/dist/index.cjs CHANGED Viewed

@@ -221,12 +221,21 @@ function makeAcademyNamespace(ctx) {
      * was new (a request row was created) or already known (a sign-in link was
      * sent and NO request row exists). Never present the returned message as
      * confirmation that a request was recorded — it is not one.
+     *
+     * Server-side, pass `options.visitorIp` (from the incoming request, see
+     * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it
+     * and, without it, throttles every visitor of the SITE in one shared
+     * tenant-level bucket (REB-1006).
      */
-    enrollmentRequest: (body) => request(ctx, "/api/site/academy/enrollment-requests", {
-      method: "POST",
-      body: JSON.stringify(body),
-      cachePolicy: { revalidate: false }
-    })
+    enrollmentRequest: (body, options) => {
+      const headers = extraHeaders(options);
+      return request(ctx, "/api/site/academy/enrollment-requests", {
+        method: "POST",
+        body: JSON.stringify(body),
+        cachePolicy: { revalidate: false },
+        ...headers ? { headers } : {}
+      });
+    }
   };
 }
@@ -439,8 +448,18 @@ function makeShopNamespace(ctx) {
      * branch UI on `exists`; the checkout always offers «Iniciar sesión o
      * continuar como invitado» and the server links the order to an existing
      * account after payment. Removed in the next major.
+     *
+     * Server-side, pass `options.visitorIp` (from the incoming request, see
+     * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it
+     * and, without it, throttles every visitor of the SITE in one shared
+     * tenant-level bucket (REB-1006).
      */
-    checkEmail: (body) => requestMutation(ctx, "/api/site/shop/check-email", body),
+    checkEmail: (body, options) => requestMutation(
+      ctx,
+      "/api/site/shop/check-email",
+      body,
+      options
+    ),
     /**
      * Look up a confirmed (or still-pending) order by its Stripe Checkout
      * session id — the order-confirmation flow (REB-829). `GET`, so it goes

package/dist/index.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,aACP,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AC3IO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.cjs","sourcesContent":["/*\n Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns when to cache (a per-call\n * `RebluCachePolicy`); the adapter owns how (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n /\n\nexport interface RebluCachePolicy {\n /\n Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n * → never cache (always fetch fresh).\n /\n revalidate?: number \| false\n}\n\nexport interface RebluCacheAdapter {\n /* Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. /\n resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/\n Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n /\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n constructor(private readonly defaultRevalidate: number \| false = false) {}\n\n resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n const revalidate = policy.revalidate ?? this.defaultRevalidate\n return revalidate === false \|\| revalidate === 0\n ? { cache: 'no-store' }\n : { cache: 'force-cache' }\n }\n}\n","/\n Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n \n `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n /\n\n/* The only Checkout redirect host trusted by default. /\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/\n True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n /\nexport function isSafeCheckoutRedirectUrl(\n url: string,\n allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n let parsed: URL\n try {\n parsed = new URL(url)\n } catch {\n return false\n }\n return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/\n Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n /\nexport class UnsafeCheckoutRedirectError extends Error {\n constructor(\n public readonly url: string,\n public readonly allowedHosts: readonly string[],\n ) {\n super(\n `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n `(allowed hosts: ${allowedHosts.join(', ')})`,\n )\n this.name = 'UnsafeCheckoutRedirectError'\n }\n}\n","/* A value that can be serialized into a query string. /\nexport type QueryValue = string \| number \| boolean \| undefined \| null\n\n/\n Append a query string to `base`, dropping `undefined`/`null` values.\n \n Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n /\nexport function buildUrl(\n base: string,\n params?: Record<string, QueryValue \| QueryValue[]>,\n): string {\n if (!params) return base\n const pairs: [string, string][] = []\n for (const [key, value] of Object.entries(params)) {\n const values = Array.isArray(value) ? value : [value]\n for (const v of values) {\n if (v === undefined \|\| v === null) continue\n pairs.push([key, String(v)])\n }\n }\n if (pairs.length === 0) return base\n const qs = new URLSearchParams(pairs).toString()\n return `${base}?${qs}`\n}\n","/\n The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n /\nexport interface ApiErrorDetails {\n fieldErrors?: Record<string, string[]>\n formErrors?: string[]\n /\n REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n /\n productIds?: string[]\n /* REB-842: optional request-field identifier for checkout validation errors. /\n field?: string\n}\n\n/\n The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n /\nexport interface ApiErrorBody {\n error: string\n details?: ApiErrorDetails\n /\n REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n * `error`/`message` keeps working unchanged. `string` rather than\n * `ShopErrorCode` here because `ApiError` is a generic transport error used\n * by every `/api/site/` domain, not just shop.\n /\n code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/*\n Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] \| undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n /\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n if (typeof value !== 'object' \|\| value === null) return false\n const details = value as {\n fieldErrors?: unknown\n formErrors?: unknown\n productIds?: unknown\n field?: unknown\n }\n\n if (details.fieldErrors !== undefined) {\n if (\n typeof details.fieldErrors !== 'object' \|\|\n details.fieldErrors === null \|\|\n Array.isArray(details.fieldErrors)\n ) {\n return false\n }\n for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n }\n }\n\n if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n if ('field' in details && typeof details.field !== 'string') return false\n\n return true\n}\n\n/\n `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n /\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n if (typeof value !== 'object' \|\| value === null) return false\n const body = value as { error?: unknown; details?: unknown; code?: unknown }\n if (typeof body.error !== 'string') return false\n if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n // REB-836: `code` must be a string when present — same all-or-nothing\n // reading as `details` above (an unrecognised shape makes the whole body\n // unrecognised, never silently dropped).\n if (body.code !== undefined && typeof body.code !== 'string') return false\n return true\n}\n\n/\n Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n /\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody \| undefined {\n if (!rawBody) return undefined\n try {\n const parsed: unknown = JSON.parse(rawBody)\n return isApiErrorBody(parsed) ? parsed : undefined\n } catch {\n return undefined\n }\n}\n\n/\n Typed transport error for the Reblu SITE API.\n \n Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n /\nexport class ApiError extends Error {\n /\n The parsed response body, when it was JSON shaped like `{ error, details? }`\n * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n * instead of regex-stripping this error's `message`.\n /\n public readonly body: ApiErrorBody \| undefined\n\n constructor(\n public readonly status: number,\n public readonly path: string,\n message: string,\n ) {\n super(`API ${status} @ ${path}: ${message}`)\n this.name = 'ApiError'\n this.body = parseApiErrorBody(message)\n }\n}\n\n/* One page a slug could mean (REB-867) — `null` = the uncategorised page. /\nexport interface PageSlugCandidate {\n categorySlug: string \| null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n try {\n const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n if (!Array.isArray(parsed.candidates)) return []\n return parsed.candidates.flatMap((c: unknown) => {\n const slug = (c as { categorySlug?: unknown } \| null)?.categorySlug\n return typeof slug === 'string' \|\| slug === null ? [{ categorySlug: slug }] : []\n })\n } catch {\n return []\n }\n}\n\n/\n REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n /\nexport class AmbiguousPageSlugError extends ApiError {\n public readonly candidates: PageSlugCandidate[]\n\n constructor(source: ApiError, rawBody: string) {\n super(source.status, source.path, rawBody)\n this.name = 'AmbiguousPageSlugError'\n this.candidates = parseCandidates(rawBody)\n }\n}\n\n/* The raw body an `ApiError` was built from (its message minus the prefix). /\nexport function apiErrorRawBody(error: ApiError): string {\n const prefix = `API ${error.status} @ ${error.path}: `\n return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/\n Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n /\nexport interface RebluClientContext {\n baseUrl: string\n apiKey: string\n apiVersion: string\n cache: RebluCacheAdapter\n timeoutMs: number\n fetch: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth). Defaults to\n * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n /\n checkoutRedirectHosts: readonly string[]\n}\n\n/* Per-call request options. `cachePolicy` is interpreted by the cache adapter. /\nexport interface RequestOptions {\n method?: string\n body?: string\n headers?: Record<string, string>\n cachePolicy?: RebluCachePolicy\n}\n\n/\n Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n /\nexport async function request<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const url = ctx.baseUrl + path\n const controller = new AbortController()\n const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n try {\n const res = await ctx.fetch(url, {\n method: opts.method ?? 'GET',\n body: opts.body,\n signal: controller.signal,\n headers: {\n 'X-Reblu-Api-Key': ctx.apiKey,\n 'X-Reblu-Api-Version': ctx.apiVersion,\n 'Content-Type': 'application/json',\n ...opts.headers,\n },\n ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n })\n\n if (!res.ok) {\n throw new ApiError(res.status, path, await res.text())\n }\n return (await res.json()) as T\n } finally {\n clearTimeout(timer)\n }\n}\n\n/* Fetch a single resource and unwrap the `{ data: T }` envelope. /\nexport async function requestOne<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const body = await request<{ data: T }>(ctx, path, opts)\n return body.data\n}\n\n/* Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). /\nexport async function requestList<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<ListResult<T>> {\n const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n return { data: body.data, meta: body.meta }\n}\n\n/\n Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n /\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/\n Per-call options for a write (REB-1005).\n \n - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n * as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n * Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n * egress IP. Read it from the INCOMING request with\n * {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n * `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n * or `Content-Type`.\n /\nexport interface RebluMutationOptions {\n visitorIp?: string\n headers?: Record<string, string>\n}\n\n/* The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. /\nexport function visitorIpFromHeaders(headers: {\n get(name: string): string \| null\n}): string \| undefined {\n return (\n headers.get('x-forwarded-for')?.split(',')[0]?.trim() \|\|\n headers.get('x-real-ip')?.trim() \|\|\n undefined\n )\n}\n\n/* Headers the SDK owns on every request — an extra header never sets or overrides these. /\nconst RESERVED_HEADERS = new Set([\n 'x-reblu-api-key',\n 'x-reblu-api-version',\n 'content-type',\n VISITOR_IP_HEADER,\n])\n\nfunction extraHeaders(\n options: RebluMutationOptions \| undefined,\n): Record<string, string> \| undefined {\n if (!options?.headers && !options?.visitorIp) return undefined\n const safe: Record<string, string> = {}\n for (const [name, value] of Object.entries(options.headers ?? {})) {\n if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n }\n const visitorIp = options.visitorIp?.trim()\n if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n return safe\n}\n\n/\n POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/` write route, which answers with `apiOk`/`{ data }`.\n /\nexport async function requestMutation<Req, Res>(\n ctx: RebluClientContext,\n path: string,\n body: Req,\n options?: RebluMutationOptions,\n): Promise<Res> {\n const headers = extraHeaders(options)\n const envelope = await request<{ data: Res }>(ctx, path, {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n return envelope.data\n}\n","import type {\n AcademyCategoryPublic,\n AcademyCourseDetail,\n AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n ListResult,\n} from '../types'\n\n/*\n Academy domain — the public course catalogue (`GET /api/site/academy/`,\n REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n \n `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n /\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n return {\n /* Published courses, filtered + paginated. `meta` carries the pagination. /\n courses: (\n params?: AcademyCourseListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<AcademyCourseSummary>> =>\n requestList<AcademyCourseSummary>(\n ctx,\n buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n /* A single published course by slug, with its modules, lessons and CTA gate. /\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n cachePolicy: cache,\n }),\n\n /* Active course categories backing the catalog filter. Not paginated. /\n categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n cachePolicy: cache,\n }),\n\n /\n Submit an anonymous enrollment request for a course.\n \n The reply is UNIFORM by design: the caller cannot tell whether the email\n * was new (a request row was created) or already known (a sign-in link was\n * sent and NO request row exists). Never present the returned message as\n * confirmation that a request was recorded — it is not one.\n /\n enrollmentRequest: (\n body: AcademyEnrollmentRequestInput,\n ): Promise<AcademyEnrollmentRequestResult> =>\n request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/analytics` — the tenant's analytics provider configuration. /\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n }\n}\n","import type {\n BlogCategoryWithCount,\n BlogPostDetail,\n BlogPostListItem,\n BlogPostPreview,\n BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/* Blog domain — `GET /api/site/blog/`. /\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n return {\n list: (\n params?: BlogListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(\n ctx,\n buildUrl('/api/site/blog', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n /** Draft preview — never cached (unpublished content). /\n preview: (id: string): Promise<BlogPostPreview> =>\n requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/config` — the tenant's public site configuration. /\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Config> =>\n requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n /\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a contact form. Returns the created lead acknowledgement.\n * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n * per-IP limit (REB-1005) applies to the real visitor.\n /\n submit: (\n body: ContactFormInput,\n options?: RebluMutationOptions,\n ): Promise<ContactFormSubmission> =>\n requestMutation<ContactFormInput, ContactFormSubmission>(\n ctx,\n '/api/site/contact-form',\n body,\n options,\n ),\n }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/\n `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n \n `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n /\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n return {\n list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n \n base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n /\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a data-subject request. Returns its acknowledgement with the 72h\n * deadline. Server-side, pass `options.visitorIp` (from the incoming\n * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n * (REB-1005) sees the real visitor.\n /\n submit: (\n body: DataRequestInput,\n options?: RebluMutationOptions,\n ): Promise<DataRequestSubmission> =>\n requestMutation<DataRequestInput, DataRequestSubmission>(\n ctx,\n '/api/site/data-requests',\n body,\n options,\n ),\n }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/\n Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n /\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n return {\n /* Create a lead. Returns the created lead acknowledgement. /\n create: (body: LeadInput): Promise<LeadSubmission> =>\n requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). /\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Legal> =>\n requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/\n REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n * - `category: '<categorySlug>'` → the page with that slug in that category;\n * - `category: null` → the UNCATEGORISED page with that slug;\n * - omitted → the unique page with that slug; throws\n * `AmbiguousPageSlugError` when it exists in more than one category.\n /\nexport interface PageBySlugOptions {\n category?: string \| null\n cache?: RebluCachePolicy\n}\n\n/\n The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n /\n/* REB-869 — options for `pages.featured`. /\nexport interface FeaturedPagesOptions {\n /\n How many pages at most: an integer >= 1. Default 3. Values above the\n * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n * fractional, NaN) throws a `RangeError` before any request is made.\n /\n limit?: number\n /\n When the category has nothing featured, return its first `limit` pages in\n * normal order instead of `[]`. Default `true`, so a teaser is never empty\n * just because nobody picked pages yet.\n /\n fallback?: boolean\n cache?: RebluCachePolicy\n}\n\n/* The server caps a featured list at 3 (REB-869). /\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy \| PageBySlugOptions): value is PageBySlugOptions {\n return 'category' in value \|\| 'cache' in value\n}\n\n/* Dynamic pages domain — `GET /api/site/pages/`. /\nexport function makePagesNamespace(ctx: RebluClientContext) {\n const namespace = {\n list: (\n params?: PagesListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<PageListItem>> =>\n requestList<PageListItem>(\n ctx,\n // REB-63: `type` can now be a single PageType or an array (repeated\n // `?type=` params) — widen the cast alongside `PagesListParams`.\n buildUrl('/api/site/pages', params as Record<string, QueryValue \| QueryValue[]> \| undefined),\n { cachePolicy: cache },\n ),\n\n /*\n A published page by slug. The second argument is either a cache policy\n * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n /\n bySlug: async (\n slug: string,\n cacheOrOptions?: RebluCachePolicy \| PageBySlugOptions,\n ): Promise<PageDetail> => {\n const options: PageBySlugOptions =\n cacheOrOptions && isBySlugOptions(cacheOrOptions)\n ? cacheOrOptions\n : { cache: cacheOrOptions }\n const path =\n options.category === undefined\n ? `/api/site/pages/${slug}`\n : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n try {\n return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n } catch (error) {\n if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n }\n throw error\n }\n },\n\n /\n REB-869 — the pages to show in a category teaser: the category's\n * featured pages in the tenant's order; when none are featured (and\n * `fallback` is not `false`), the first `limit` pages of the category in\n * normal order. Returns the items only (no pagination applies).\n /\n featured: async (\n category: string,\n { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n ): Promise<PageListItem[]> => {\n if (!Number.isInteger(requested) \|\| requested < 1) {\n throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n }\n const limit = Math.min(requested, FEATURED_PAGES_MAX)\n const featured = await namespace.list({ category, featured: true }, cache)\n if (featured.data.length > 0 \|\| !fallback) return featured.data.slice(0, limit)\n const first = await namespace.list({ category, pageSize: limit }, cache)\n return first.data.slice(0, limit)\n },\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n }\n return namespace\n}\n","import type {\n ShopApplyDiscountInput,\n ShopCartValidation,\n ShopCategory,\n ShopCheckEmailInput,\n ShopCheckoutInput,\n ShopCheckoutSession,\n ShopConfig,\n ShopDiscountApplication,\n ShopEmailCheck,\n ShopFacets,\n ShopOrder,\n ShopProductDetail,\n ShopProductListItem,\n ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/\n Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n /\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue \| QueryValue[]> {\n if (!params) return {}\n const { taxonomy, attr, ...scalars } = params\n const out: Record<string, QueryValue \| QueryValue[]> = { ...scalars }\n if (taxonomy) {\n for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n }\n if (attr) {\n for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n }\n return out\n}\n\n/\n Shop domain — READ surface (`GET /api/site/shop/`) plus the mutation flow\n (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n /\nexport function makeShopNamespace(ctx: RebluClientContext) {\n return {\n products: (\n params?: ShopProductsParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<ShopProductListItem>> =>\n requestList<ShopProductListItem>(\n ctx,\n buildUrl('/api/site/shop/products', flattenShopParams(params)),\n { cachePolicy: cache },\n ),\n\n /* Available facets (brand/attributes/price/on-sale) for the given filters. /\n facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n cachePolicy: cache,\n }),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n /\n Start a hosted checkout session. Returns the Stripe URL + session id.\n \n REB-836 (defence in depth): every SITE hands `url` straight to\n * `window.location.assign`, so this validates it is `https:` on an\n * allowed host (`ctx.checkoutRedirectHosts`, default\n * `checkout.stripe.com`) BEFORE returning — throwing\n * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n * that could redirect a buyer's browser off Stripe's domain.\n /\n checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n ctx,\n '/api/site/shop/checkout',\n body,\n )\n if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n }\n return session\n },\n\n /* Validate a cart against live product/stock/price state before checkout. /\n validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n requestMutation<ShopValidateCartInput, ShopCartValidation>(\n ctx,\n '/api/site/shop/validate-cart',\n body,\n ),\n\n /* Validate a discount code against the current cart subtotal. /\n applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n ctx,\n '/api/site/shop/apply-discount',\n body,\n ),\n\n /\n @deprecated REB-834 — the endpoint no longer reveals whether an account\n * exists: it always resolves `{ exists: false }`. Do not call it and never\n * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n * continuar como invitado» and the server links the order to an existing\n * account after payment. Removed in the next major.\n /\n checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n /\n Look up a confirmed (or still-pending) order by its Stripe Checkout\n * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n * through `requestOne` like every other read, not `requestMutation`.\n /\n order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n cachePolicy: cache,\n }),\n }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/* Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). /\nexport interface TrustBadgeListParams {\n /* Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. /\n type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams \| RebluCachePolicy): value is RebluCachePolicy {\n return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/\n `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n /\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n function list(\n params: TrustBadgeListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>>\n function list(\n paramsOrCache?: TrustBadgeListParams \| RebluCachePolicy,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>> {\n // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams \| undefined)\n return requestList<TrustBadge>(\n ctx,\n buildUrl('/api/site/trust-badges', { type: params?.type }),\n { cachePolicy: legacyCache ?? cache },\n )\n }\n return { list }\n}\n","/\n `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n \n The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n /\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/* Parity with demo-site's upstream timeout (client.ts:36). /\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n /* Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. /\n baseUrl: string\n /* Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. /\n apiKey: string\n /* Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. /\n apiVersion?: string\n /* Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). /\n cache?: RebluCacheAdapter\n /* Per-request hard timeout in ms. Defaults to `8000`. /\n timeoutMs?: number\n /* Injectable `fetch` — for tests, custom runtimes, or instrumentation. /\n fetch?: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n * a Stripe CLI mock host) — never to widen production trust.\n /\n checkoutRedirectHosts?: string[]\n}\n\n/\n Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n /\nexport function createRebluClient(config: RebluClientConfig) {\n // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n const ctx: RebluClientContext = {\n baseUrl: config.baseUrl,\n apiKey: config.apiKey,\n apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n cache: config.cache ?? new PlainCacheAdapter(),\n timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n fetch: boundFetch,\n checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n }\n\n return {\n config: makeConfigNamespace(ctx),\n analytics: makeAnalyticsNamespace(ctx),\n legal: makeLegalNamespace(ctx),\n trustBadges: makeTrustBadgesNamespace(ctx),\n ctas: makeCtasNamespace(ctx),\n blog: makeBlogNamespace(ctx),\n pages: makePagesNamespace(ctx),\n shop: makeShopNamespace(ctx),\n academy: makeAcademyNamespace(ctx),\n contactForm: makeContactFormNamespace(ctx),\n leads: makeLeadsNamespace(ctx),\n dataRequests: makeDataRequestsNamespace(ctx),\n }\n}\n\n/* The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n isSafeCheckoutRedirectUrl,\n UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n ListResult,\n BlogListParams,\n PagesListParams,\n ShopProductsParams,\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}
1	+ {"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";;;AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAOM,SAAS,aACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;ACzIO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAeH,iBAAA,EAAmB,CACjB,IAAA,EACA,OAAA,KAC4C;AAC5C,MAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,MAAA,OAAO,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,QAC3F,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,QACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,QACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,OAC9B,CAAA;AAAA,IACH;AAAA,GACF;AACF;;;AClFO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;AClFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcF,UAAA,EAAY,CACV,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,4BAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;AC5IA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.cjs","sourcesContent":["/*\n Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns when to cache (a per-call\n * `RebluCachePolicy`); the adapter owns how (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n /\n\nexport interface RebluCachePolicy {\n /\n Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n * → never cache (always fetch fresh).\n /\n revalidate?: number \| false\n}\n\nexport interface RebluCacheAdapter {\n /* Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. /\n resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/\n Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n /\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n constructor(private readonly defaultRevalidate: number \| false = false) {}\n\n resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n const revalidate = policy.revalidate ?? this.defaultRevalidate\n return revalidate === false \|\| revalidate === 0\n ? { cache: 'no-store' }\n : { cache: 'force-cache' }\n }\n}\n","/\n Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n \n `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n /\n\n/* The only Checkout redirect host trusted by default. /\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/\n True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n /\nexport function isSafeCheckoutRedirectUrl(\n url: string,\n allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n let parsed: URL\n try {\n parsed = new URL(url)\n } catch {\n return false\n }\n return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/\n Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n /\nexport class UnsafeCheckoutRedirectError extends Error {\n constructor(\n public readonly url: string,\n public readonly allowedHosts: readonly string[],\n ) {\n super(\n `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n `(allowed hosts: ${allowedHosts.join(', ')})`,\n )\n this.name = 'UnsafeCheckoutRedirectError'\n }\n}\n","/* A value that can be serialized into a query string. /\nexport type QueryValue = string \| number \| boolean \| undefined \| null\n\n/\n Append a query string to `base`, dropping `undefined`/`null` values.\n \n Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n /\nexport function buildUrl(\n base: string,\n params?: Record<string, QueryValue \| QueryValue[]>,\n): string {\n if (!params) return base\n const pairs: [string, string][] = []\n for (const [key, value] of Object.entries(params)) {\n const values = Array.isArray(value) ? value : [value]\n for (const v of values) {\n if (v === undefined \|\| v === null) continue\n pairs.push([key, String(v)])\n }\n }\n if (pairs.length === 0) return base\n const qs = new URLSearchParams(pairs).toString()\n return `${base}?${qs}`\n}\n","/\n The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n /\nexport interface ApiErrorDetails {\n fieldErrors?: Record<string, string[]>\n formErrors?: string[]\n /\n REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n /\n productIds?: string[]\n /* REB-842: optional request-field identifier for checkout validation errors. /\n field?: string\n}\n\n/\n The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n /\nexport interface ApiErrorBody {\n error: string\n details?: ApiErrorDetails\n /\n REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n * `error`/`message` keeps working unchanged. `string` rather than\n * `ShopErrorCode` here because `ApiError` is a generic transport error used\n * by every `/api/site/` domain, not just shop.\n /\n code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/*\n Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] \| undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n /\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n if (typeof value !== 'object' \|\| value === null) return false\n const details = value as {\n fieldErrors?: unknown\n formErrors?: unknown\n productIds?: unknown\n field?: unknown\n }\n\n if (details.fieldErrors !== undefined) {\n if (\n typeof details.fieldErrors !== 'object' \|\|\n details.fieldErrors === null \|\|\n Array.isArray(details.fieldErrors)\n ) {\n return false\n }\n for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n }\n }\n\n if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n if ('field' in details && typeof details.field !== 'string') return false\n\n return true\n}\n\n/\n `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n /\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n if (typeof value !== 'object' \|\| value === null) return false\n const body = value as { error?: unknown; details?: unknown; code?: unknown }\n if (typeof body.error !== 'string') return false\n if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n // REB-836: `code` must be a string when present — same all-or-nothing\n // reading as `details` above (an unrecognised shape makes the whole body\n // unrecognised, never silently dropped).\n if (body.code !== undefined && typeof body.code !== 'string') return false\n return true\n}\n\n/\n Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n /\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody \| undefined {\n if (!rawBody) return undefined\n try {\n const parsed: unknown = JSON.parse(rawBody)\n return isApiErrorBody(parsed) ? parsed : undefined\n } catch {\n return undefined\n }\n}\n\n/\n Typed transport error for the Reblu SITE API.\n \n Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n /\nexport class ApiError extends Error {\n /\n The parsed response body, when it was JSON shaped like `{ error, details? }`\n * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n * instead of regex-stripping this error's `message`.\n /\n public readonly body: ApiErrorBody \| undefined\n\n constructor(\n public readonly status: number,\n public readonly path: string,\n message: string,\n ) {\n super(`API ${status} @ ${path}: ${message}`)\n this.name = 'ApiError'\n this.body = parseApiErrorBody(message)\n }\n}\n\n/* One page a slug could mean (REB-867) — `null` = the uncategorised page. /\nexport interface PageSlugCandidate {\n categorySlug: string \| null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n try {\n const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n if (!Array.isArray(parsed.candidates)) return []\n return parsed.candidates.flatMap((c: unknown) => {\n const slug = (c as { categorySlug?: unknown } \| null)?.categorySlug\n return typeof slug === 'string' \|\| slug === null ? [{ categorySlug: slug }] : []\n })\n } catch {\n return []\n }\n}\n\n/\n REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n /\nexport class AmbiguousPageSlugError extends ApiError {\n public readonly candidates: PageSlugCandidate[]\n\n constructor(source: ApiError, rawBody: string) {\n super(source.status, source.path, rawBody)\n this.name = 'AmbiguousPageSlugError'\n this.candidates = parseCandidates(rawBody)\n }\n}\n\n/* The raw body an `ApiError` was built from (its message minus the prefix). /\nexport function apiErrorRawBody(error: ApiError): string {\n const prefix = `API ${error.status} @ ${error.path}: `\n return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/\n Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n /\nexport interface RebluClientContext {\n baseUrl: string\n apiKey: string\n apiVersion: string\n cache: RebluCacheAdapter\n timeoutMs: number\n fetch: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth). Defaults to\n * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n /\n checkoutRedirectHosts: readonly string[]\n}\n\n/* Per-call request options. `cachePolicy` is interpreted by the cache adapter. /\nexport interface RequestOptions {\n method?: string\n body?: string\n headers?: Record<string, string>\n cachePolicy?: RebluCachePolicy\n}\n\n/\n Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n /\nexport async function request<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const url = ctx.baseUrl + path\n const controller = new AbortController()\n const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n try {\n const res = await ctx.fetch(url, {\n method: opts.method ?? 'GET',\n body: opts.body,\n signal: controller.signal,\n headers: {\n 'X-Reblu-Api-Key': ctx.apiKey,\n 'X-Reblu-Api-Version': ctx.apiVersion,\n 'Content-Type': 'application/json',\n ...opts.headers,\n },\n ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n })\n\n if (!res.ok) {\n throw new ApiError(res.status, path, await res.text())\n }\n return (await res.json()) as T\n } finally {\n clearTimeout(timer)\n }\n}\n\n/* Fetch a single resource and unwrap the `{ data: T }` envelope. /\nexport async function requestOne<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const body = await request<{ data: T }>(ctx, path, opts)\n return body.data\n}\n\n/* Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). /\nexport async function requestList<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<ListResult<T>> {\n const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n return { data: body.data, meta: body.meta }\n}\n\n/\n Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n /\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/\n Per-call options for a write (REB-1005).\n \n - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n * as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n * Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n * egress IP. Read it from the INCOMING request with\n * {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n * `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n * or `Content-Type`.\n /\nexport interface RebluMutationOptions {\n visitorIp?: string\n headers?: Record<string, string>\n}\n\n/* The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. /\nexport function visitorIpFromHeaders(headers: {\n get(name: string): string \| null\n}): string \| undefined {\n return (\n headers.get('x-forwarded-for')?.split(',')[0]?.trim() \|\|\n headers.get('x-real-ip')?.trim() \|\|\n undefined\n )\n}\n\n/* Headers the SDK owns on every request — an extra header never sets or overrides these. /\nconst RESERVED_HEADERS = new Set([\n 'x-reblu-api-key',\n 'x-reblu-api-version',\n 'content-type',\n VISITOR_IP_HEADER,\n])\n\n/\n The extra headers a write sends for `options`: caller headers minus the\n * reserved ones, plus `x-reblu-visitor-ip` from `visitorIp`. Shared by\n * {@link requestMutation} and the writes that cannot use it (academy).\n /\nexport function extraHeaders(\n options: RebluMutationOptions \| undefined,\n): Record<string, string> \| undefined {\n if (!options?.headers && !options?.visitorIp) return undefined\n const safe: Record<string, string> = {}\n for (const [name, value] of Object.entries(options.headers ?? {})) {\n if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n }\n const visitorIp = options.visitorIp?.trim()\n if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n return safe\n}\n\n/\n POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/` write route, which answers with `apiOk`/`{ data }`.\n /\nexport async function requestMutation<Req, Res>(\n ctx: RebluClientContext,\n path: string,\n body: Req,\n options?: RebluMutationOptions,\n): Promise<Res> {\n const headers = extraHeaders(options)\n const envelope = await request<{ data: Res }>(ctx, path, {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n return envelope.data\n}\n","import type {\n AcademyCategoryPublic,\n AcademyCourseDetail,\n AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport {\n extraHeaders,\n request,\n requestList,\n requestOne,\n type RebluClientContext,\n type RebluMutationOptions,\n} from '../client'\nimport type {\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n ListResult,\n} from '../types'\n\n/*\n Academy domain — the public course catalogue (`GET /api/site/academy/`,\n REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n \n `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n /\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n return {\n /* Published courses, filtered + paginated. `meta` carries the pagination. /\n courses: (\n params?: AcademyCourseListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<AcademyCourseSummary>> =>\n requestList<AcademyCourseSummary>(\n ctx,\n buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n /* A single published course by slug, with its modules, lessons and CTA gate. /\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n cachePolicy: cache,\n }),\n\n /* Active course categories backing the catalog filter. Not paginated. /\n categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n cachePolicy: cache,\n }),\n\n /\n Submit an anonymous enrollment request for a course.\n \n The reply is UNIFORM by design: the caller cannot tell whether the email\n * was new (a request row was created) or already known (a sign-in link was\n * sent and NO request row exists). Never present the returned message as\n * confirmation that a request was recorded — it is not one.\n \n Server-side, pass `options.visitorIp` (from the incoming request, see\n * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it\n * and, without it, throttles every visitor of the SITE in one shared\n * tenant-level bucket (REB-1006).\n /\n enrollmentRequest: (\n body: AcademyEnrollmentRequestInput,\n options?: RebluMutationOptions,\n ): Promise<AcademyEnrollmentRequestResult> => {\n const headers = extraHeaders(options)\n return request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n },\n }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/analytics` — the tenant's analytics provider configuration. /\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n }\n}\n","import type {\n BlogCategoryWithCount,\n BlogPostDetail,\n BlogPostListItem,\n BlogPostPreview,\n BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/* Blog domain — `GET /api/site/blog/`. /\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n return {\n list: (\n params?: BlogListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(\n ctx,\n buildUrl('/api/site/blog', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n /** Draft preview — never cached (unpublished content). /\n preview: (id: string): Promise<BlogPostPreview> =>\n requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/config` — the tenant's public site configuration. /\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Config> =>\n requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n /\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a contact form. Returns the created lead acknowledgement.\n * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n * per-IP limit (REB-1005) applies to the real visitor.\n /\n submit: (\n body: ContactFormInput,\n options?: RebluMutationOptions,\n ): Promise<ContactFormSubmission> =>\n requestMutation<ContactFormInput, ContactFormSubmission>(\n ctx,\n '/api/site/contact-form',\n body,\n options,\n ),\n }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/\n `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n \n `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n /\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n return {\n list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n \n base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n /\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a data-subject request. Returns its acknowledgement with the 72h\n * deadline. Server-side, pass `options.visitorIp` (from the incoming\n * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n * (REB-1005) sees the real visitor.\n /\n submit: (\n body: DataRequestInput,\n options?: RebluMutationOptions,\n ): Promise<DataRequestSubmission> =>\n requestMutation<DataRequestInput, DataRequestSubmission>(\n ctx,\n '/api/site/data-requests',\n body,\n options,\n ),\n }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/\n Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n /\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n return {\n /* Create a lead. Returns the created lead acknowledgement. /\n create: (body: LeadInput): Promise<LeadSubmission> =>\n requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). /\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Legal> =>\n requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/\n REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n * - `category: '<categorySlug>'` → the page with that slug in that category;\n * - `category: null` → the UNCATEGORISED page with that slug;\n * - omitted → the unique page with that slug; throws\n * `AmbiguousPageSlugError` when it exists in more than one category.\n /\nexport interface PageBySlugOptions {\n category?: string \| null\n cache?: RebluCachePolicy\n}\n\n/\n The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n /\n/* REB-869 — options for `pages.featured`. /\nexport interface FeaturedPagesOptions {\n /\n How many pages at most: an integer >= 1. Default 3. Values above the\n * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n * fractional, NaN) throws a `RangeError` before any request is made.\n /\n limit?: number\n /\n When the category has nothing featured, return its first `limit` pages in\n * normal order instead of `[]`. Default `true`, so a teaser is never empty\n * just because nobody picked pages yet.\n /\n fallback?: boolean\n cache?: RebluCachePolicy\n}\n\n/* The server caps a featured list at 3 (REB-869). /\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy \| PageBySlugOptions): value is PageBySlugOptions {\n return 'category' in value \|\| 'cache' in value\n}\n\n/* Dynamic pages domain — `GET /api/site/pages/`. /\nexport function makePagesNamespace(ctx: RebluClientContext) {\n const namespace = {\n list: (\n params?: PagesListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<PageListItem>> =>\n requestList<PageListItem>(\n ctx,\n // REB-63: `type` can now be a single PageType or an array (repeated\n // `?type=` params) — widen the cast alongside `PagesListParams`.\n buildUrl('/api/site/pages', params as Record<string, QueryValue \| QueryValue[]> \| undefined),\n { cachePolicy: cache },\n ),\n\n /*\n A published page by slug. The second argument is either a cache policy\n * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n /\n bySlug: async (\n slug: string,\n cacheOrOptions?: RebluCachePolicy \| PageBySlugOptions,\n ): Promise<PageDetail> => {\n const options: PageBySlugOptions =\n cacheOrOptions && isBySlugOptions(cacheOrOptions)\n ? cacheOrOptions\n : { cache: cacheOrOptions }\n const path =\n options.category === undefined\n ? `/api/site/pages/${slug}`\n : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n try {\n return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n } catch (error) {\n if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n }\n throw error\n }\n },\n\n /\n REB-869 — the pages to show in a category teaser: the category's\n * featured pages in the tenant's order; when none are featured (and\n * `fallback` is not `false`), the first `limit` pages of the category in\n * normal order. Returns the items only (no pagination applies).\n /\n featured: async (\n category: string,\n { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n ): Promise<PageListItem[]> => {\n if (!Number.isInteger(requested) \|\| requested < 1) {\n throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n }\n const limit = Math.min(requested, FEATURED_PAGES_MAX)\n const featured = await namespace.list({ category, featured: true }, cache)\n if (featured.data.length > 0 \|\| !fallback) return featured.data.slice(0, limit)\n const first = await namespace.list({ category, pageSize: limit }, cache)\n return first.data.slice(0, limit)\n },\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n }\n return namespace\n}\n","import type {\n ShopApplyDiscountInput,\n ShopCartValidation,\n ShopCategory,\n ShopCheckEmailInput,\n ShopCheckoutInput,\n ShopCheckoutSession,\n ShopConfig,\n ShopDiscountApplication,\n ShopEmailCheck,\n ShopFacets,\n ShopOrder,\n ShopProductDetail,\n ShopProductListItem,\n ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport {\n requestList,\n requestMutation,\n requestOne,\n type RebluClientContext,\n type RebluMutationOptions,\n} from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/\n Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n /\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue \| QueryValue[]> {\n if (!params) return {}\n const { taxonomy, attr, ...scalars } = params\n const out: Record<string, QueryValue \| QueryValue[]> = { ...scalars }\n if (taxonomy) {\n for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n }\n if (attr) {\n for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n }\n return out\n}\n\n/\n Shop domain — READ surface (`GET /api/site/shop/`) plus the mutation flow\n (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n /\nexport function makeShopNamespace(ctx: RebluClientContext) {\n return {\n products: (\n params?: ShopProductsParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<ShopProductListItem>> =>\n requestList<ShopProductListItem>(\n ctx,\n buildUrl('/api/site/shop/products', flattenShopParams(params)),\n { cachePolicy: cache },\n ),\n\n /* Available facets (brand/attributes/price/on-sale) for the given filters. /\n facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n cachePolicy: cache,\n }),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n /\n Start a hosted checkout session. Returns the Stripe URL + session id.\n \n REB-836 (defence in depth): every SITE hands `url` straight to\n * `window.location.assign`, so this validates it is `https:` on an\n * allowed host (`ctx.checkoutRedirectHosts`, default\n * `checkout.stripe.com`) BEFORE returning — throwing\n * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n * that could redirect a buyer's browser off Stripe's domain.\n /\n checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n ctx,\n '/api/site/shop/checkout',\n body,\n )\n if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n }\n return session\n },\n\n /* Validate a cart against live product/stock/price state before checkout. /\n validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n requestMutation<ShopValidateCartInput, ShopCartValidation>(\n ctx,\n '/api/site/shop/validate-cart',\n body,\n ),\n\n /* Validate a discount code against the current cart subtotal. /\n applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n ctx,\n '/api/site/shop/apply-discount',\n body,\n ),\n\n /\n @deprecated REB-834 — the endpoint no longer reveals whether an account\n * exists: it always resolves `{ exists: false }`. Do not call it and never\n * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n * continuar como invitado» and the server links the order to an existing\n * account after payment. Removed in the next major.\n \n Server-side, pass `options.visitorIp` (from the incoming request, see\n * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it\n * and, without it, throttles every visitor of the SITE in one shared\n * tenant-level bucket (REB-1006).\n /\n checkEmail: (\n body: ShopCheckEmailInput,\n options?: RebluMutationOptions,\n ): Promise<ShopEmailCheck> =>\n requestMutation<ShopCheckEmailInput, ShopEmailCheck>(\n ctx,\n '/api/site/shop/check-email',\n body,\n options,\n ),\n\n /\n Look up a confirmed (or still-pending) order by its Stripe Checkout\n * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n * through `requestOne` like every other read, not `requestMutation`.\n /\n order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n cachePolicy: cache,\n }),\n }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/* Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). /\nexport interface TrustBadgeListParams {\n /* Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. /\n type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams \| RebluCachePolicy): value is RebluCachePolicy {\n return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/\n `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n /\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n function list(\n params: TrustBadgeListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>>\n function list(\n paramsOrCache?: TrustBadgeListParams \| RebluCachePolicy,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>> {\n // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams \| undefined)\n return requestList<TrustBadge>(\n ctx,\n buildUrl('/api/site/trust-badges', { type: params?.type }),\n { cachePolicy: legacyCache ?? cache },\n )\n }\n return { list }\n}\n","/\n `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n \n The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n /\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/* Parity with demo-site's upstream timeout (client.ts:36). /\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n /* Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. /\n baseUrl: string\n /* Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. /\n apiKey: string\n /* Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. /\n apiVersion?: string\n /* Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). /\n cache?: RebluCacheAdapter\n /* Per-request hard timeout in ms. Defaults to `8000`. /\n timeoutMs?: number\n /* Injectable `fetch` — for tests, custom runtimes, or instrumentation. /\n fetch?: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n * a Stripe CLI mock host) — never to widen production trust.\n /\n checkoutRedirectHosts?: string[]\n}\n\n/\n Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n /\nexport function createRebluClient(config: RebluClientConfig) {\n // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n const ctx: RebluClientContext = {\n baseUrl: config.baseUrl,\n apiKey: config.apiKey,\n apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n cache: config.cache ?? new PlainCacheAdapter(),\n timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n fetch: boundFetch,\n checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n }\n\n return {\n config: makeConfigNamespace(ctx),\n analytics: makeAnalyticsNamespace(ctx),\n legal: makeLegalNamespace(ctx),\n trustBadges: makeTrustBadgesNamespace(ctx),\n ctas: makeCtasNamespace(ctx),\n blog: makeBlogNamespace(ctx),\n pages: makePagesNamespace(ctx),\n shop: makeShopNamespace(ctx),\n academy: makeAcademyNamespace(ctx),\n contactForm: makeContactFormNamespace(ctx),\n leads: makeLeadsNamespace(ctx),\n dataRequests: makeDataRequestsNamespace(ctx),\n }\n}\n\n/* The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n isSafeCheckoutRedirectUrl,\n UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n ListResult,\n BlogListParams,\n PagesListParams,\n ShopProductsParams,\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}

package/dist/index.d.cts CHANGED Viewed

@@ -391,14 +391,14 @@ declare function createRebluClient(config: RebluClientConfig): {
         checkout: (body: _reblu_site_contracts.ShopCheckoutInput) => Promise<_reblu_site_contracts.ShopCheckoutSession>;
         validateCart: (body: _reblu_site_contracts.ShopValidateCartInput) => Promise<_reblu_site_contracts.ShopCartValidation>;
         applyDiscount: (body: _reblu_site_contracts.ShopApplyDiscountInput) => Promise<_reblu_site_contracts.ShopDiscountApplication>;
-        checkEmail: (body: _reblu_site_contracts.ShopCheckEmailInput) => Promise<_reblu_site_contracts.ShopEmailCheck>;
+        checkEmail: (body: _reblu_site_contracts.ShopCheckEmailInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ShopEmailCheck>;
         order: (sessionId: string, cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.ShopOrder>;
     };
     academy: {
         courses: (params?: AcademyCourseListParams, cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.AcademyCourseSummary>>;
         bySlug: (slug: string, cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.AcademyCourseDetail>;
         categories: (cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.AcademyCategoryPublic>>;
-        enrollmentRequest: (body: AcademyEnrollmentRequestInput) => Promise<AcademyEnrollmentRequestResult>;
+        enrollmentRequest: (body: AcademyEnrollmentRequestInput, options?: RebluMutationOptions) => Promise<AcademyEnrollmentRequestResult>;
     };
     contactForm: {
         submit: (body: _reblu_site_contracts.ContactFormInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ContactFormSubmission>;

package/dist/index.d.ts CHANGED Viewed

@@ -391,14 +391,14 @@ declare function createRebluClient(config: RebluClientConfig): {
         checkout: (body: _reblu_site_contracts.ShopCheckoutInput) => Promise<_reblu_site_contracts.ShopCheckoutSession>;
         validateCart: (body: _reblu_site_contracts.ShopValidateCartInput) => Promise<_reblu_site_contracts.ShopCartValidation>;
         applyDiscount: (body: _reblu_site_contracts.ShopApplyDiscountInput) => Promise<_reblu_site_contracts.ShopDiscountApplication>;
-        checkEmail: (body: _reblu_site_contracts.ShopCheckEmailInput) => Promise<_reblu_site_contracts.ShopEmailCheck>;
+        checkEmail: (body: _reblu_site_contracts.ShopCheckEmailInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ShopEmailCheck>;
         order: (sessionId: string, cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.ShopOrder>;
     };
     academy: {
         courses: (params?: AcademyCourseListParams, cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.AcademyCourseSummary>>;
         bySlug: (slug: string, cache?: RebluCachePolicy) => Promise<_reblu_site_contracts.AcademyCourseDetail>;
         categories: (cache?: RebluCachePolicy) => Promise<ListResult<_reblu_site_contracts.AcademyCategoryPublic>>;
-        enrollmentRequest: (body: AcademyEnrollmentRequestInput) => Promise<AcademyEnrollmentRequestResult>;
+        enrollmentRequest: (body: AcademyEnrollmentRequestInput, options?: RebluMutationOptions) => Promise<AcademyEnrollmentRequestResult>;
     };
     contactForm: {
         submit: (body: _reblu_site_contracts.ContactFormInput, options?: RebluMutationOptions) => Promise<_reblu_site_contracts.ContactFormSubmission>;

package/dist/index.js CHANGED Viewed

@@ -219,12 +219,21 @@ function makeAcademyNamespace(ctx) {
      * was new (a request row was created) or already known (a sign-in link was
      * sent and NO request row exists). Never present the returned message as
      * confirmation that a request was recorded — it is not one.
+     *
+     * Server-side, pass `options.visitorIp` (from the incoming request, see
+     * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it
+     * and, without it, throttles every visitor of the SITE in one shared
+     * tenant-level bucket (REB-1006).
      */
-    enrollmentRequest: (body) => request(ctx, "/api/site/academy/enrollment-requests", {
-      method: "POST",
-      body: JSON.stringify(body),
-      cachePolicy: { revalidate: false }
-    })
+    enrollmentRequest: (body, options) => {
+      const headers = extraHeaders(options);
+      return request(ctx, "/api/site/academy/enrollment-requests", {
+        method: "POST",
+        body: JSON.stringify(body),
+        cachePolicy: { revalidate: false },
+        ...headers ? { headers } : {}
+      });
+    }
   };
 }
@@ -437,8 +446,18 @@ function makeShopNamespace(ctx) {
      * branch UI on `exists`; the checkout always offers «Iniciar sesión o
      * continuar como invitado» and the server links the order to an existing
      * account after payment. Removed in the next major.
+     *
+     * Server-side, pass `options.visitorIp` (from the incoming request, see
+     * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it
+     * and, without it, throttles every visitor of the SITE in one shared
+     * tenant-level bucket (REB-1006).
      */
-    checkEmail: (body) => requestMutation(ctx, "/api/site/shop/check-email", body),
+    checkEmail: (body, options) => requestMutation(
+      ctx,
+      "/api/site/shop/check-email",
+      body,
+      options
+    ),
     /**
      * Look up a confirmed (or still-pending) order by its Stripe Checkout
      * session id — the order-confirmation flow (REB-829). `GET`, so it goes

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,aACP,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;AC3IO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUH,iBAAA,EAAmB,CACjB,IAAA,KAEA,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,MACpF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;AClEO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;ACxFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASF,YAAY,CAAC,IAAA,KACX,eAAA,CAAqD,GAAA,EAAK,8BAA8B,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO9F,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;ACzHA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.js","sourcesContent":["/*\n Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns when to cache (a per-call\n * `RebluCachePolicy`); the adapter owns how (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n /\n\nexport interface RebluCachePolicy {\n /\n Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n * → never cache (always fetch fresh).\n /\n revalidate?: number \| false\n}\n\nexport interface RebluCacheAdapter {\n /* Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. /\n resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/\n Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n /\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n constructor(private readonly defaultRevalidate: number \| false = false) {}\n\n resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n const revalidate = policy.revalidate ?? this.defaultRevalidate\n return revalidate === false \|\| revalidate === 0\n ? { cache: 'no-store' }\n : { cache: 'force-cache' }\n }\n}\n","/\n Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n \n `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n /\n\n/* The only Checkout redirect host trusted by default. /\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/\n True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n /\nexport function isSafeCheckoutRedirectUrl(\n url: string,\n allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n let parsed: URL\n try {\n parsed = new URL(url)\n } catch {\n return false\n }\n return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/\n Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n /\nexport class UnsafeCheckoutRedirectError extends Error {\n constructor(\n public readonly url: string,\n public readonly allowedHosts: readonly string[],\n ) {\n super(\n `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n `(allowed hosts: ${allowedHosts.join(', ')})`,\n )\n this.name = 'UnsafeCheckoutRedirectError'\n }\n}\n","/* A value that can be serialized into a query string. /\nexport type QueryValue = string \| number \| boolean \| undefined \| null\n\n/\n Append a query string to `base`, dropping `undefined`/`null` values.\n \n Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n /\nexport function buildUrl(\n base: string,\n params?: Record<string, QueryValue \| QueryValue[]>,\n): string {\n if (!params) return base\n const pairs: [string, string][] = []\n for (const [key, value] of Object.entries(params)) {\n const values = Array.isArray(value) ? value : [value]\n for (const v of values) {\n if (v === undefined \|\| v === null) continue\n pairs.push([key, String(v)])\n }\n }\n if (pairs.length === 0) return base\n const qs = new URLSearchParams(pairs).toString()\n return `${base}?${qs}`\n}\n","/\n The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n /\nexport interface ApiErrorDetails {\n fieldErrors?: Record<string, string[]>\n formErrors?: string[]\n /\n REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n /\n productIds?: string[]\n /* REB-842: optional request-field identifier for checkout validation errors. /\n field?: string\n}\n\n/\n The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n /\nexport interface ApiErrorBody {\n error: string\n details?: ApiErrorDetails\n /\n REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n * `error`/`message` keeps working unchanged. `string` rather than\n * `ShopErrorCode` here because `ApiError` is a generic transport error used\n * by every `/api/site/` domain, not just shop.\n /\n code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/*\n Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] \| undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n /\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n if (typeof value !== 'object' \|\| value === null) return false\n const details = value as {\n fieldErrors?: unknown\n formErrors?: unknown\n productIds?: unknown\n field?: unknown\n }\n\n if (details.fieldErrors !== undefined) {\n if (\n typeof details.fieldErrors !== 'object' \|\|\n details.fieldErrors === null \|\|\n Array.isArray(details.fieldErrors)\n ) {\n return false\n }\n for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n }\n }\n\n if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n if ('field' in details && typeof details.field !== 'string') return false\n\n return true\n}\n\n/\n `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n /\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n if (typeof value !== 'object' \|\| value === null) return false\n const body = value as { error?: unknown; details?: unknown; code?: unknown }\n if (typeof body.error !== 'string') return false\n if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n // REB-836: `code` must be a string when present — same all-or-nothing\n // reading as `details` above (an unrecognised shape makes the whole body\n // unrecognised, never silently dropped).\n if (body.code !== undefined && typeof body.code !== 'string') return false\n return true\n}\n\n/\n Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n /\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody \| undefined {\n if (!rawBody) return undefined\n try {\n const parsed: unknown = JSON.parse(rawBody)\n return isApiErrorBody(parsed) ? parsed : undefined\n } catch {\n return undefined\n }\n}\n\n/\n Typed transport error for the Reblu SITE API.\n \n Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n /\nexport class ApiError extends Error {\n /\n The parsed response body, when it was JSON shaped like `{ error, details? }`\n * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n * instead of regex-stripping this error's `message`.\n /\n public readonly body: ApiErrorBody \| undefined\n\n constructor(\n public readonly status: number,\n public readonly path: string,\n message: string,\n ) {\n super(`API ${status} @ ${path}: ${message}`)\n this.name = 'ApiError'\n this.body = parseApiErrorBody(message)\n }\n}\n\n/* One page a slug could mean (REB-867) — `null` = the uncategorised page. /\nexport interface PageSlugCandidate {\n categorySlug: string \| null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n try {\n const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n if (!Array.isArray(parsed.candidates)) return []\n return parsed.candidates.flatMap((c: unknown) => {\n const slug = (c as { categorySlug?: unknown } \| null)?.categorySlug\n return typeof slug === 'string' \|\| slug === null ? [{ categorySlug: slug }] : []\n })\n } catch {\n return []\n }\n}\n\n/\n REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n /\nexport class AmbiguousPageSlugError extends ApiError {\n public readonly candidates: PageSlugCandidate[]\n\n constructor(source: ApiError, rawBody: string) {\n super(source.status, source.path, rawBody)\n this.name = 'AmbiguousPageSlugError'\n this.candidates = parseCandidates(rawBody)\n }\n}\n\n/* The raw body an `ApiError` was built from (its message minus the prefix). /\nexport function apiErrorRawBody(error: ApiError): string {\n const prefix = `API ${error.status} @ ${error.path}: `\n return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/\n Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n /\nexport interface RebluClientContext {\n baseUrl: string\n apiKey: string\n apiVersion: string\n cache: RebluCacheAdapter\n timeoutMs: number\n fetch: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth). Defaults to\n * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n /\n checkoutRedirectHosts: readonly string[]\n}\n\n/* Per-call request options. `cachePolicy` is interpreted by the cache adapter. /\nexport interface RequestOptions {\n method?: string\n body?: string\n headers?: Record<string, string>\n cachePolicy?: RebluCachePolicy\n}\n\n/\n Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n /\nexport async function request<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const url = ctx.baseUrl + path\n const controller = new AbortController()\n const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n try {\n const res = await ctx.fetch(url, {\n method: opts.method ?? 'GET',\n body: opts.body,\n signal: controller.signal,\n headers: {\n 'X-Reblu-Api-Key': ctx.apiKey,\n 'X-Reblu-Api-Version': ctx.apiVersion,\n 'Content-Type': 'application/json',\n ...opts.headers,\n },\n ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n })\n\n if (!res.ok) {\n throw new ApiError(res.status, path, await res.text())\n }\n return (await res.json()) as T\n } finally {\n clearTimeout(timer)\n }\n}\n\n/* Fetch a single resource and unwrap the `{ data: T }` envelope. /\nexport async function requestOne<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const body = await request<{ data: T }>(ctx, path, opts)\n return body.data\n}\n\n/* Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). /\nexport async function requestList<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<ListResult<T>> {\n const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n return { data: body.data, meta: body.meta }\n}\n\n/\n Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n /\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/\n Per-call options for a write (REB-1005).\n \n - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n * as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n * Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n * egress IP. Read it from the INCOMING request with\n * {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n * `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n * or `Content-Type`.\n /\nexport interface RebluMutationOptions {\n visitorIp?: string\n headers?: Record<string, string>\n}\n\n/* The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. /\nexport function visitorIpFromHeaders(headers: {\n get(name: string): string \| null\n}): string \| undefined {\n return (\n headers.get('x-forwarded-for')?.split(',')[0]?.trim() \|\|\n headers.get('x-real-ip')?.trim() \|\|\n undefined\n )\n}\n\n/* Headers the SDK owns on every request — an extra header never sets or overrides these. /\nconst RESERVED_HEADERS = new Set([\n 'x-reblu-api-key',\n 'x-reblu-api-version',\n 'content-type',\n VISITOR_IP_HEADER,\n])\n\nfunction extraHeaders(\n options: RebluMutationOptions \| undefined,\n): Record<string, string> \| undefined {\n if (!options?.headers && !options?.visitorIp) return undefined\n const safe: Record<string, string> = {}\n for (const [name, value] of Object.entries(options.headers ?? {})) {\n if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n }\n const visitorIp = options.visitorIp?.trim()\n if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n return safe\n}\n\n/\n POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/` write route, which answers with `apiOk`/`{ data }`.\n /\nexport async function requestMutation<Req, Res>(\n ctx: RebluClientContext,\n path: string,\n body: Req,\n options?: RebluMutationOptions,\n): Promise<Res> {\n const headers = extraHeaders(options)\n const envelope = await request<{ data: Res }>(ctx, path, {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n return envelope.data\n}\n","import type {\n AcademyCategoryPublic,\n AcademyCourseDetail,\n AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { request, requestList, requestOne, type RebluClientContext } from '../client'\nimport type {\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n ListResult,\n} from '../types'\n\n/*\n Academy domain — the public course catalogue (`GET /api/site/academy/`,\n REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n \n `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n /\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n return {\n /* Published courses, filtered + paginated. `meta` carries the pagination. /\n courses: (\n params?: AcademyCourseListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<AcademyCourseSummary>> =>\n requestList<AcademyCourseSummary>(\n ctx,\n buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n /* A single published course by slug, with its modules, lessons and CTA gate. /\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n cachePolicy: cache,\n }),\n\n /* Active course categories backing the catalog filter. Not paginated. /\n categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n cachePolicy: cache,\n }),\n\n /\n Submit an anonymous enrollment request for a course.\n \n The reply is UNIFORM by design: the caller cannot tell whether the email\n * was new (a request row was created) or already known (a sign-in link was\n * sent and NO request row exists). Never present the returned message as\n * confirmation that a request was recorded — it is not one.\n /\n enrollmentRequest: (\n body: AcademyEnrollmentRequestInput,\n ): Promise<AcademyEnrollmentRequestResult> =>\n request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/analytics` — the tenant's analytics provider configuration. /\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n }\n}\n","import type {\n BlogCategoryWithCount,\n BlogPostDetail,\n BlogPostListItem,\n BlogPostPreview,\n BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/* Blog domain — `GET /api/site/blog/`. /\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n return {\n list: (\n params?: BlogListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(\n ctx,\n buildUrl('/api/site/blog', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n /** Draft preview — never cached (unpublished content). /\n preview: (id: string): Promise<BlogPostPreview> =>\n requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/config` — the tenant's public site configuration. /\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Config> =>\n requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n /\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a contact form. Returns the created lead acknowledgement.\n * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n * per-IP limit (REB-1005) applies to the real visitor.\n /\n submit: (\n body: ContactFormInput,\n options?: RebluMutationOptions,\n ): Promise<ContactFormSubmission> =>\n requestMutation<ContactFormInput, ContactFormSubmission>(\n ctx,\n '/api/site/contact-form',\n body,\n options,\n ),\n }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/\n `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n \n `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n /\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n return {\n list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n \n base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n /\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a data-subject request. Returns its acknowledgement with the 72h\n * deadline. Server-side, pass `options.visitorIp` (from the incoming\n * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n * (REB-1005) sees the real visitor.\n /\n submit: (\n body: DataRequestInput,\n options?: RebluMutationOptions,\n ): Promise<DataRequestSubmission> =>\n requestMutation<DataRequestInput, DataRequestSubmission>(\n ctx,\n '/api/site/data-requests',\n body,\n options,\n ),\n }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/\n Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n /\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n return {\n /* Create a lead. Returns the created lead acknowledgement. /\n create: (body: LeadInput): Promise<LeadSubmission> =>\n requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). /\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Legal> =>\n requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/\n REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n * - `category: '<categorySlug>'` → the page with that slug in that category;\n * - `category: null` → the UNCATEGORISED page with that slug;\n * - omitted → the unique page with that slug; throws\n * `AmbiguousPageSlugError` when it exists in more than one category.\n /\nexport interface PageBySlugOptions {\n category?: string \| null\n cache?: RebluCachePolicy\n}\n\n/\n The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n /\n/* REB-869 — options for `pages.featured`. /\nexport interface FeaturedPagesOptions {\n /\n How many pages at most: an integer >= 1. Default 3. Values above the\n * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n * fractional, NaN) throws a `RangeError` before any request is made.\n /\n limit?: number\n /\n When the category has nothing featured, return its first `limit` pages in\n * normal order instead of `[]`. Default `true`, so a teaser is never empty\n * just because nobody picked pages yet.\n /\n fallback?: boolean\n cache?: RebluCachePolicy\n}\n\n/* The server caps a featured list at 3 (REB-869). /\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy \| PageBySlugOptions): value is PageBySlugOptions {\n return 'category' in value \|\| 'cache' in value\n}\n\n/* Dynamic pages domain — `GET /api/site/pages/`. /\nexport function makePagesNamespace(ctx: RebluClientContext) {\n const namespace = {\n list: (\n params?: PagesListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<PageListItem>> =>\n requestList<PageListItem>(\n ctx,\n // REB-63: `type` can now be a single PageType or an array (repeated\n // `?type=` params) — widen the cast alongside `PagesListParams`.\n buildUrl('/api/site/pages', params as Record<string, QueryValue \| QueryValue[]> \| undefined),\n { cachePolicy: cache },\n ),\n\n /*\n A published page by slug. The second argument is either a cache policy\n * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n /\n bySlug: async (\n slug: string,\n cacheOrOptions?: RebluCachePolicy \| PageBySlugOptions,\n ): Promise<PageDetail> => {\n const options: PageBySlugOptions =\n cacheOrOptions && isBySlugOptions(cacheOrOptions)\n ? cacheOrOptions\n : { cache: cacheOrOptions }\n const path =\n options.category === undefined\n ? `/api/site/pages/${slug}`\n : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n try {\n return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n } catch (error) {\n if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n }\n throw error\n }\n },\n\n /\n REB-869 — the pages to show in a category teaser: the category's\n * featured pages in the tenant's order; when none are featured (and\n * `fallback` is not `false`), the first `limit` pages of the category in\n * normal order. Returns the items only (no pagination applies).\n /\n featured: async (\n category: string,\n { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n ): Promise<PageListItem[]> => {\n if (!Number.isInteger(requested) \|\| requested < 1) {\n throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n }\n const limit = Math.min(requested, FEATURED_PAGES_MAX)\n const featured = await namespace.list({ category, featured: true }, cache)\n if (featured.data.length > 0 \|\| !fallback) return featured.data.slice(0, limit)\n const first = await namespace.list({ category, pageSize: limit }, cache)\n return first.data.slice(0, limit)\n },\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n }\n return namespace\n}\n","import type {\n ShopApplyDiscountInput,\n ShopCartValidation,\n ShopCategory,\n ShopCheckEmailInput,\n ShopCheckoutInput,\n ShopCheckoutSession,\n ShopConfig,\n ShopDiscountApplication,\n ShopEmailCheck,\n ShopFacets,\n ShopOrder,\n ShopProductDetail,\n ShopProductListItem,\n ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestMutation, requestOne, type RebluClientContext } from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/\n Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n /\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue \| QueryValue[]> {\n if (!params) return {}\n const { taxonomy, attr, ...scalars } = params\n const out: Record<string, QueryValue \| QueryValue[]> = { ...scalars }\n if (taxonomy) {\n for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n }\n if (attr) {\n for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n }\n return out\n}\n\n/\n Shop domain — READ surface (`GET /api/site/shop/`) plus the mutation flow\n (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n /\nexport function makeShopNamespace(ctx: RebluClientContext) {\n return {\n products: (\n params?: ShopProductsParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<ShopProductListItem>> =>\n requestList<ShopProductListItem>(\n ctx,\n buildUrl('/api/site/shop/products', flattenShopParams(params)),\n { cachePolicy: cache },\n ),\n\n /* Available facets (brand/attributes/price/on-sale) for the given filters. /\n facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n cachePolicy: cache,\n }),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n /\n Start a hosted checkout session. Returns the Stripe URL + session id.\n \n REB-836 (defence in depth): every SITE hands `url` straight to\n * `window.location.assign`, so this validates it is `https:` on an\n * allowed host (`ctx.checkoutRedirectHosts`, default\n * `checkout.stripe.com`) BEFORE returning — throwing\n * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n * that could redirect a buyer's browser off Stripe's domain.\n /\n checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n ctx,\n '/api/site/shop/checkout',\n body,\n )\n if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n }\n return session\n },\n\n /* Validate a cart against live product/stock/price state before checkout. /\n validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n requestMutation<ShopValidateCartInput, ShopCartValidation>(\n ctx,\n '/api/site/shop/validate-cart',\n body,\n ),\n\n /* Validate a discount code against the current cart subtotal. /\n applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n ctx,\n '/api/site/shop/apply-discount',\n body,\n ),\n\n /\n @deprecated REB-834 — the endpoint no longer reveals whether an account\n * exists: it always resolves `{ exists: false }`. Do not call it and never\n * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n * continuar como invitado» and the server links the order to an existing\n * account after payment. Removed in the next major.\n /\n checkEmail: (body: ShopCheckEmailInput): Promise<ShopEmailCheck> =>\n requestMutation<ShopCheckEmailInput, ShopEmailCheck>(ctx, '/api/site/shop/check-email', body),\n\n /\n Look up a confirmed (or still-pending) order by its Stripe Checkout\n * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n * through `requestOne` like every other read, not `requestMutation`.\n /\n order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n cachePolicy: cache,\n }),\n }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/* Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). /\nexport interface TrustBadgeListParams {\n /* Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. /\n type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams \| RebluCachePolicy): value is RebluCachePolicy {\n return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/\n `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n /\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n function list(\n params: TrustBadgeListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>>\n function list(\n paramsOrCache?: TrustBadgeListParams \| RebluCachePolicy,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>> {\n // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams \| undefined)\n return requestList<TrustBadge>(\n ctx,\n buildUrl('/api/site/trust-badges', { type: params?.type }),\n { cachePolicy: legacyCache ?? cache },\n )\n }\n return { list }\n}\n","/\n `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n \n The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n /\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/* Parity with demo-site's upstream timeout (client.ts:36). /\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n /* Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. /\n baseUrl: string\n /* Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. /\n apiKey: string\n /* Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. /\n apiVersion?: string\n /* Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). /\n cache?: RebluCacheAdapter\n /* Per-request hard timeout in ms. Defaults to `8000`. /\n timeoutMs?: number\n /* Injectable `fetch` — for tests, custom runtimes, or instrumentation. /\n fetch?: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n * a Stripe CLI mock host) — never to widen production trust.\n /\n checkoutRedirectHosts?: string[]\n}\n\n/\n Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n /\nexport function createRebluClient(config: RebluClientConfig) {\n // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n const ctx: RebluClientContext = {\n baseUrl: config.baseUrl,\n apiKey: config.apiKey,\n apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n cache: config.cache ?? new PlainCacheAdapter(),\n timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n fetch: boundFetch,\n checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n }\n\n return {\n config: makeConfigNamespace(ctx),\n analytics: makeAnalyticsNamespace(ctx),\n legal: makeLegalNamespace(ctx),\n trustBadges: makeTrustBadgesNamespace(ctx),\n ctas: makeCtasNamespace(ctx),\n blog: makeBlogNamespace(ctx),\n pages: makePagesNamespace(ctx),\n shop: makeShopNamespace(ctx),\n academy: makeAcademyNamespace(ctx),\n contactForm: makeContactFormNamespace(ctx),\n leads: makeLeadsNamespace(ctx),\n dataRequests: makeDataRequestsNamespace(ctx),\n }\n}\n\n/* The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n isSafeCheckoutRedirectUrl,\n UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n ListResult,\n BlogListParams,\n PagesListParams,\n ShopProductsParams,\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}
1	+ {"version":3,"sources":["../src/cache.ts","../src/checkout-redirect.ts","../src/build-url.ts","../src/errors.ts","../src/client.ts","../src/domains/academy.ts","../src/domains/analytics.ts","../src/domains/blog.ts","../src/domains/config.ts","../src/domains/contact-form.ts","../src/domains/ctas.ts","../src/domains/data-requests.ts","../src/domains/leads.ts","../src/domains/legal.ts","../src/domains/pages.ts","../src/domains/shop.ts","../src/domains/trust-badges.ts","../src/index.ts"],"names":[],"mappings":";AA0BO,IAAM,oBAAN,MAAqD;AAAA,EAC1D,WAAA,CAA6B,oBAAoC,KAAA,EAAO;AAA3C,IAAA,IAAA,CAAA,iBAAA,GAAA,iBAAA;AAAA,EAA4C;AAAA,EAA5C,iBAAA;AAAA,EAE7B,mBAAmB,MAAA,EAAuC;AACxD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAc,IAAA,CAAK,iBAAA;AAC7C,IAAA,OAAO,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,CAAA,GAC1C,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,KAAA,EAAO,aAAA,EAAc;AAAA,EAC7B;AACF;;;ACnBO,IAAM,+BAAA,GAAqD,CAAC,qBAAqB;AAOjF,SAAS,yBAAA,CACd,GAAA,EACA,YAAA,GAAkC,+BAAA,EACzB;AACT,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAO,QAAA,KAAa,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,OAAO,QAAQ,CAAA;AAC9E;AAOO,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,CACkB,KACA,YAAA,EAChB;AACA,IAAA,KAAA;AAAA,MACE,CAAA,2DAAA,EAA8D,KAAK,SAAA,CAAU,GAAG,CAAC,CAAA,iBAAA,EAC5D,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9C;AANgB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAMhB,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AAAA,EARkB,GAAA;AAAA,EACA,YAAA;AAQpB;;;ACzCO,SAAS,QAAA,CACd,MACA,MAAA,EACQ;AACR,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,QAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACjD,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,GAAQ,CAAC,KAAK,CAAA;AACpD,IAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,MAAA,IAAI,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,IAAA,EAAM;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,GAAA,EAAK,MAAA,CAAO,CAAC,CAAC,CAAC,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AAC/C,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACtB;;;ACeA,SAAS,cAAc,KAAA,EAAmC;AACxD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,MAAM,CAAC,IAAA,KAAS,OAAO,IAAA,KAAS,QAAQ,CAAA;AAC/E;AAUA,SAAS,kBAAkB,KAAA,EAA0C;AACnE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,OAAA,GAAU,KAAA;AAOhB,EAAA,IAAI,OAAA,CAAQ,gBAAgB,MAAA,EAAW;AACrC,IAAA,IACE,OAAO,OAAA,CAAQ,WAAA,KAAgB,QAAA,IAC/B,OAAA,CAAQ,WAAA,KAAgB,IAAA,IACxB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,WAAsC,CAAA,EAAG;AACtF,MAAA,IAAI,eAAe,MAAA,IAAa,CAAC,aAAA,CAAc,UAAU,GAAG,OAAO,KAAA;AAAA,IACrE;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AAGnF,EAAA,IAAI,OAAA,CAAQ,eAAe,MAAA,IAAa,CAAC,cAAc,OAAA,CAAQ,UAAU,GAAG,OAAO,KAAA;AACnF,EAAA,IAAI,WAAW,OAAA,IAAW,OAAO,OAAA,CAAQ,KAAA,KAAU,UAAU,OAAO,KAAA;AAEpE,EAAA,OAAO,IAAA;AACT;AAYA,SAAS,eAAe,KAAA,EAAuC;AAC7D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,KAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA;AACb,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,YAAY,MAAA,IAAa,CAAC,kBAAkB,IAAA,CAAK,OAAO,GAAG,OAAO,KAAA;AAI3E,EAAA,IAAI,KAAK,IAAA,KAAS,MAAA,IAAa,OAAO,IAAA,CAAK,IAAA,KAAS,UAAU,OAAO,KAAA;AACrE,EAAA,OAAO,IAAA;AACT;AAQA,SAAS,kBAAkB,OAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AAC1C,IAAA,OAAO,cAAA,CAAe,MAAM,CAAA,GAAI,MAAA,GAAS,KAAA,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAUO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EASlC,WAAA,CACkB,MAAA,EACA,IAAA,EAChB,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,EAAA,EAAK,OAAO,CAAA,CAAE,CAAA;AAJ3B,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAIhB,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAkB,OAAO,CAAA;AAAA,EACvC;AAAA,EAPkB,MAAA;AAAA,EACA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAJF,IAAA;AAWlB;AAOA,SAAS,gBAAgB,OAAA,EAAsC;AAC7D,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA;AACjC,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,UAAU,CAAA,SAAU,EAAC;AAC/C,IAAA,OAAO,MAAA,CAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,KAAe;AAC/C,MAAA,MAAM,OAAQ,CAAA,EAAyC,YAAA;AACvD,MAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,GAAO,CAAC,EAAE,YAAA,EAAc,IAAA,EAAM,CAAA,GAAI,EAAC;AAAA,IACjF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AASO,IAAM,sBAAA,GAAN,cAAqC,QAAA,CAAS;AAAA,EACnC,UAAA;AAAA,EAEhB,WAAA,CAAY,QAAkB,OAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,EAAM,OAAO,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,OAAO,CAAA;AAAA,EAC3C;AACF;AAGO,SAAS,gBAAgB,KAAA,EAAyB;AACvD,EAAA,MAAM,SAAS,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,GAAA,EAAM,MAAM,IAAI,CAAA,EAAA,CAAA;AAClD,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,KAAA,CAAM,OAAA;AACvF;;;ACtJA,eAAsB,OAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,GAAU,IAAA;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,IAAI,SAAS,CAAA;AAEhE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK;AAAA,MAC/B,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,OAAA,EAAS;AAAA,QACP,mBAAmB,GAAA,CAAI,MAAA;AAAA,QACvB,uBAAuB,GAAA,CAAI,UAAA;AAAA,QAC3B,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,IAAA,CAAK;AAAA,OACV;AAAA,MACA,GAAG,GAAA,CAAI,KAAA,CAAM,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAE;AAAA,KACvD,CAAA;AAED,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,SAAS,GAAA,CAAI,MAAA,EAAQ,MAAM,MAAM,GAAA,CAAI,MAAM,CAAA;AAAA,IACvD;AACA,IAAA,OAAQ,MAAM,IAAI,IAAA,EAAK;AAAA,EACzB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACY;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAqB,GAAA,EAAK,MAAM,IAAI,CAAA;AACvD,EAAA,OAAO,IAAA,CAAK,IAAA;AACd;AAGA,eAAsB,WAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAA8C,GAAA,EAAK,MAAM,IAAI,CAAA;AAChF,EAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAC5C;AAOO,IAAM,iBAAA,GAAoB;AAoB1B,SAAS,qBAAqB,OAAA,EAEd;AACrB,EAAA,OACE,QAAQ,GAAA,CAAI,iBAAiB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,MAC/C,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG,MAAK,IAC/B,MAAA;AAEJ;AAGA,IAAM,gBAAA,uBAAuB,GAAA,CAAI;AAAA,EAC/B,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAC,CAAA;AAOM,SAAS,aACd,OAAA,EACoC;AACpC,EAAA,IAAI,CAAC,OAAA,EAAS,OAAA,IAAW,CAAC,OAAA,EAAS,WAAW,OAAO,MAAA;AACrD,EAAA,MAAM,OAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQ,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,EAAG;AACjE,IAAA,IAAI,CAAC,iBAAiB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,GAAI,KAAA;AAAA,EAC9D;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,SAAA,EAAW,IAAA,CAAK,iBAAiB,CAAA,GAAI,SAAA;AACzC,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,eAAA,CACpB,GAAA,EACA,IAAA,EACA,IAAA,EACA,OAAA,EACc;AACd,EAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAuB,GAAA,EAAK,IAAA,EAAM;AAAA,IACvD,MAAA,EAAQ,MAAA;AAAA,IACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,IACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,GAC9B,CAAA;AACD,EAAA,OAAO,QAAA,CAAS,IAAA;AAClB;;;ACzIO,SAAS,qBAAqB,GAAA,EAAyB;AAC5D,EAAA,OAAO;AAAA;AAAA,IAEL,OAAA,EAAS,CACP,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,6BAA6B,MAAgD,CAAA;AAAA,MACtF,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,WAAgC,GAAA,EAAK,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,EAAI;AAAA,MACxE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA,IAGH,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,8BAAA,EAAgC;AAAA,MACtE,WAAA,EAAa;AAAA,KACd,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAeH,iBAAA,EAAmB,CACjB,IAAA,EACA,OAAA,KAC4C;AAC5C,MAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,MAAA,OAAO,OAAA,CAAwC,KAAK,uCAAA,EAAyC;AAAA,QAC3F,MAAA,EAAQ,MAAA;AAAA,QACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,QACzB,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,QACjC,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY;AAAC,OAC9B,CAAA;AAAA,IACH;AAAA,GACF;AACF;;;AClFO,SAAS,uBAAuB,GAAA,EAAyB;AAC9D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAsB,KAAK,qBAAA,EAAuB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC5E;AACF;;;ACGO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,kBAAkB,MAAgD,CAAA;AAAA,MAC3E,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA,IAEF,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA2B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAElF,OAAA,EAAS,CAAC,IAAA,EAAc,KAAA,KACtB,WAAA,CAA8B,GAAA,EAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,QAAA,CAAA,EAAY,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAAmC,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE7F,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,sBAAA,EAAwB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA,IAG3E,SAAS,CAAC,EAAA,KACR,WAA4B,GAAA,EAAK,CAAA,uBAAA,EAA0B,EAAE,CAAA,CAAA,EAAI;AAAA,MAC/D,WAAA,EAAa,EAAE,UAAA,EAAY,KAAA;AAAM,KAClC;AAAA,GACL;AACF;;;ACtCO,SAAS,oBAAoB,GAAA,EAAyB;AAC3D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAmB,KAAK,kBAAA,EAAoB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACtE;AACF;;;ACFO,SAAS,yBAAyB,GAAA,EAAyB;AAChE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,wBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACbO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,IAAA,EAAc,KAAA,KACnB,YAAiB,GAAA,EAAK,QAAA,CAAS,gBAAA,EAAkB,EAAE,MAAM,CAAA,EAAG,EAAE,WAAA,EAAa,OAAO;AAAA,GACtF;AACF;;;ACNO,SAAS,0BAA0B,GAAA,EAAyB;AACjE,EAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOL,MAAA,EAAQ,CACN,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF;;;ACxBO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA;AAAA,IAEL,QAAQ,CAAC,IAAA,KACP,eAAA,CAA2C,GAAA,EAAK,mBAAmB,IAAI;AAAA,GAC3E;AACF;;;ACTO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,KAAA,KACJ,UAAA,CAAkB,KAAK,iBAAA,EAAmB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GACpE;AACF;;;ACkCA,IAAM,kBAAA,GAAqB,CAAA;AAE3B,SAAS,gBAAgB,KAAA,EAAyE;AAChG,EAAA,OAAO,UAAA,IAAc,SAAS,OAAA,IAAW,KAAA;AAC3C;AAGO,SAAS,mBAAmB,GAAA,EAAyB;AAC1D,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,IAAA,EAAM,CACJ,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA,MAGA,QAAA,CAAS,mBAAmB,MAA+D,CAAA;AAAA,MAC3F,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF,MAAA,EAAQ,OACN,IAAA,EACA,cAAA,KACwB;AACxB,MAAA,MAAM,OAAA,GACJ,kBAAkB,eAAA,CAAgB,cAAc,IAC5C,cAAA,GACA,EAAE,OAAO,cAAA,EAAe;AAC9B,MAAA,MAAM,OACJ,OAAA,CAAQ,QAAA,KAAa,MAAA,GACjB,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAA,GACvB,QAAA,CAAS,CAAA,gBAAA,EAAmB,IAAI,IAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,IAAY,IAAI,CAAA;AAC9E,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,WAAuB,GAAA,EAAK,IAAA,EAAM,EAAE,WAAA,EAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MAC/E,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,YAAY,KAAA,CAAM,MAAA,KAAW,OAAO,KAAA,CAAM,IAAA,EAAM,SAAS,gBAAA,EAAkB;AAC9F,UAAA,MAAM,IAAI,sBAAA,CAAuB,KAAA,EAAO,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,QAChE;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQA,QAAA,EAAU,OACR,QAAA,EACA,EAAE,KAAA,EAAO,SAAA,GAAY,kBAAA,EAAoB,QAAA,GAAW,IAAA,EAAM,KAAA,EAAM,GAA0B,EAAC,KAC/D;AAC5B,MAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA,IAAK,YAAY,CAAA,EAAG;AACjD,QAAA,MAAM,IAAI,UAAA,CAAW,CAAA,mDAAA,EAAsD,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,MACzF;AACA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,kBAAkB,CAAA;AACpD,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,EAAG,KAAK,CAAA;AACzE,MAAA,IAAI,QAAA,CAAS,IAAA,CAAK,MAAA,GAAS,CAAA,IAAK,CAAC,QAAA,EAAU,OAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC9E,MAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,CAAK,EAAE,QAAA,EAAU,QAAA,EAAU,KAAA,EAAM,EAAG,KAAK,CAAA;AACvE,MAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAAA,IAClC,CAAA;AAAA,IAEA,KAAA,EAAO,CAAC,KAAA,KACN,WAAA,CAAsB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO;AAAA,GAC9E;AACA,EAAA,OAAO,SAAA;AACT;;;AClFA,SAAS,kBAAkB,MAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,EAAC;AACrB,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,GAAG,SAAQ,GAAI,MAAA;AACvC,EAAA,MAAM,GAAA,GAAiD,EAAE,GAAG,OAAA,EAAQ;AACpE,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,GAAA,CAAI,CAAA,SAAA,EAAY,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACjF;AACA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,EAAG,GAAA,CAAI,CAAA,KAAA,EAAQ,GAAG,CAAA,CAAA,CAAG,CAAA,GAAI,KAAA;AAAA,EACzE;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,kBAAkB,GAAA,EAAyB;AACzD,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,CACR,MAAA,EACA,KAAA,KAEA,WAAA;AAAA,MACE,GAAA;AAAA,MACA,QAAA,CAAS,yBAAA,EAA2B,iBAAA,CAAkB,MAAM,CAAC,CAAA;AAAA,MAC7D,EAAE,aAAa,KAAA;AAAM,KACvB;AAAA;AAAA,IAGF,MAAA,EAAQ,CAAC,MAAA,EAA6B,KAAA,KACpC,UAAA,CAAuB,GAAA,EAAK,QAAA,CAAS,uBAAA,EAAyB,iBAAA,CAAkB,MAAM,CAAC,CAAA,EAAG;AAAA,MACxF,WAAA,EAAa;AAAA,KACd,CAAA;AAAA,IAEH,MAAA,EAAQ,CAAC,IAAA,EAAc,KAAA,KACrB,UAAA,CAA8B,GAAA,EAAK,CAAA,wBAAA,EAA2B,IAAI,CAAA,CAAA,EAAI,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAE9F,UAAA,EAAY,CAAC,KAAA,KACX,WAAA,CAA0B,KAAK,2BAAA,EAA6B,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA,IAEpF,MAAA,EAAQ,CAAC,KAAA,KACP,UAAA,CAAuB,KAAK,uBAAA,EAAyB,EAAE,WAAA,EAAa,KAAA,EAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc7E,QAAA,EAAU,OAAO,IAAA,KAA0D;AACzE,MAAA,MAAM,UAAU,MAAM,eAAA;AAAA,QACpB,GAAA;AAAA,QACA,yBAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,IAAI,CAAC,yBAAA,CAA0B,OAAA,CAAQ,GAAA,EAAK,GAAA,CAAI,qBAAqB,CAAA,EAAG;AACtE,QAAA,MAAM,IAAI,2BAAA,CAA4B,OAAA,CAAQ,GAAA,EAAK,IAAI,qBAAqB,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,YAAA,EAAc,CAAC,IAAA,KACb,eAAA;AAAA,MACE,GAAA;AAAA,MACA,8BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA,IAGF,aAAA,EAAe,CAAC,IAAA,KACd,eAAA;AAAA,MACE,GAAA;AAAA,MACA,+BAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcF,UAAA,EAAY,CACV,IAAA,EACA,OAAA,KAEA,eAAA;AAAA,MACE,GAAA;AAAA,MACA,4BAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF,KAAA,EAAO,CAAC,SAAA,EAAmB,KAAA,KACzB,UAAA,CAAsB,KAAK,CAAA,qBAAA,EAAwB,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAA,EAAI;AAAA,MAClF,WAAA,EAAa;AAAA,KACd;AAAA,GACL;AACF;;;AC5IA,SAAS,cAAc,KAAA,EAA2E;AAChG,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,OAAO,YAAY,CAAA;AACjE;AAOO,SAAS,yBAAyB,GAAA,EAAyB;AAMhE,EAAA,SAAS,IAAA,CACP,eACA,KAAA,EACiC;AAEjC,IAAA,MAAM,WAAA,GAAc,aAAA,IAAiB,aAAA,CAAc,aAAa,IAAI,aAAA,GAAgB,MAAA;AACpF,IAAA,MAAM,MAAA,GAAS,cAAc,MAAA,GAAa,aAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,MACL,GAAA;AAAA,MACA,SAAS,wBAAA,EAA0B,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzD,EAAE,WAAA,EAAa,WAAA,IAAe,KAAA;AAAM,KACtC;AAAA,EACF;AACA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;ACfA,IAAM,mBAAA,GAAsB,GAAA;AAE5B,IAAM,kBAAA,GAAqB,GAAA;AA6BpB,SAAS,kBAAkB,MAAA,EAA2B;AAG3D,EAAA,MAAM,UAAA,GAA2B,OAAO,KAAA,KAAU,CAAC,OAAO,IAAA,KAAS,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA;AAEpF,EAAA,MAAM,GAAA,GAA0B;AAAA,IAC9B,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,UAAA,EAAY,OAAO,UAAA,IAAc,mBAAA;AAAA,IACjC,KAAA,EAAO,MAAA,CAAO,KAAA,IAAS,IAAI,iBAAA,EAAkB;AAAA,IAC7C,SAAA,EAAW,OAAO,SAAA,IAAa,kBAAA;AAAA,IAC/B,KAAA,EAAO,UAAA;AAAA,IACP,qBAAA,EAAuB,OAAO,qBAAA,IAAyB;AAAA,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,oBAAoB,GAAG,CAAA;AAAA,IAC/B,SAAA,EAAW,uBAAuB,GAAG,CAAA;AAAA,IACrC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,IAAA,EAAM,kBAAkB,GAAG,CAAA;AAAA,IAC3B,OAAA,EAAS,qBAAqB,GAAG,CAAA;AAAA,IACjC,WAAA,EAAa,yBAAyB,GAAG,CAAA;AAAA,IACzC,KAAA,EAAO,mBAAmB,GAAG,CAAA;AAAA,IAC7B,YAAA,EAAc,0BAA0B,GAAG;AAAA,GAC7C;AACF","file":"index.js","sourcesContent":["/*\n Cache adapter — the seam that severs the SDK from any framework's caching\n * model (design doc D4 / §3.2). The client owns when to cache (a per-call\n * `RebluCachePolicy`); the adapter owns how (the framework-specific\n * `RequestInit` fields). `@reblu/site-client` ships the framework-agnostic\n * `PlainCacheAdapter`; `@reblu/site-next` (REB-418) supplies a `NextCacheAdapter`\n * that returns `{ next: { revalidate } }`.\n /\n\nexport interface RebluCachePolicy {\n /\n Seconds to revalidate. `undefined` → use the adapter's default; `0`/`false`\n * → never cache (always fetch fresh).\n /\n revalidate?: number \| false\n}\n\nexport interface RebluCacheAdapter {\n /* Map a per-call cache policy to framework-specific `fetch` `RequestInit` fields. /\n resolveRequestInit(policy: RebluCachePolicy): RequestInit\n}\n\n/\n Default adapter — plain `fetch` cache semantics that work in Node, edge,\n * browser and tests. No `next`, no `server-only`.\n /\nexport class PlainCacheAdapter implements RebluCacheAdapter {\n constructor(private readonly defaultRevalidate: number \| false = false) {}\n\n resolveRequestInit(policy: RebluCachePolicy): RequestInit {\n const revalidate = policy.revalidate ?? this.defaultRevalidate\n return revalidate === false \|\| revalidate === 0\n ? { cache: 'no-store' }\n : { cache: 'force-cache' }\n }\n}\n","/\n Stripe Checkout redirect-origin guard (REB-836, defence in depth).\n \n `shop.checkout()` returns a URL every SITE immediately hands to\n * `window.location.assign(url)`. Nothing upstream of this SDK validated it\n * before REB-836 — a compromised/misconfigured base-api, a tampered\n * response, or a MITM proxy could have sent a buyer's browser anywhere.\n * `isSafeCheckoutRedirectUrl` is the shared predicate `domains/shop.ts` uses\n * to refuse an unsafe URL before ever returning it to the caller; a SITE's\n * `@reblu/site-next` Route Handler re-checks the SAME property server-side\n * (`packages/site-next/src/shop/checkout-redirect.ts`, kept as an\n * independent copy — see that file's docblock for why it isn't a shared\n * import). Update both together if Stripe ever changes its Checkout host.\n /\n\n/* The only Checkout redirect host trusted by default. /\nexport const DEFAULT_CHECKOUT_REDIRECT_HOSTS: readonly string[] = ['checkout.stripe.com']\n\n/\n True only when `url` parses as an absolute URL, uses `https:`, and its\n * hostname is in `allowedHosts` (default: {@link DEFAULT_CHECKOUT_REDIRECT_HOSTS}).\n * Never throws — an unparsable `url` is simply unsafe.\n /\nexport function isSafeCheckoutRedirectUrl(\n url: string,\n allowedHosts: readonly string[] = DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n): boolean {\n let parsed: URL\n try {\n parsed = new URL(url)\n } catch {\n return false\n }\n return parsed.protocol === 'https:' && allowedHosts.includes(parsed.hostname)\n}\n\n/\n Thrown by `shop.checkout()` when base-api's Checkout URL fails\n * {@link isSafeCheckoutRedirectUrl} — the SDK never hands an unsafe URL back\n * to a caller that would otherwise `window.location.assign` it.\n /\nexport class UnsafeCheckoutRedirectError extends Error {\n constructor(\n public readonly url: string,\n public readonly allowedHosts: readonly string[],\n ) {\n super(\n `Refusing to return an unsafe Stripe Checkout redirect URL: ${JSON.stringify(url)} ` +\n `(allowed hosts: ${allowedHosts.join(', ')})`,\n )\n this.name = 'UnsafeCheckoutRedirectError'\n }\n}\n","/* A value that can be serialized into a query string. /\nexport type QueryValue = string \| number \| boolean \| undefined \| null\n\n/\n Append a query string to `base`, dropping `undefined`/`null` values.\n \n Single definition for the whole client (design doc §3.1 dedupes the two copies\n * that lived in demo-site's `client.ts` and `index.ts`). Falsy-but-meaningful\n * values (`0`, `false`, `''`) are preserved; only `undefined`/`null` are omitted.\n * Array values (REB-475 faceted `attr[key]`) emit one repeated param per element.\n /\nexport function buildUrl(\n base: string,\n params?: Record<string, QueryValue \| QueryValue[]>,\n): string {\n if (!params) return base\n const pairs: [string, string][] = []\n for (const [key, value] of Object.entries(params)) {\n const values = Array.isArray(value) ? value : [value]\n for (const v of values) {\n if (v === undefined \|\| v === null) continue\n pairs.push([key, String(v)])\n }\n }\n if (pairs.length === 0) return base\n const qs = new URLSearchParams(pairs).toString()\n return `${base}?${qs}`\n}\n","/\n The `details` shape `/api/site/contact-form` and `/api/site/leads` attach on a\n * 400/422, straight from zod's `.flatten()` (see\n * `details: parsed.error.flatten()` in\n * `apps/base-api/src/lib/server/services/contact-form.service.ts:114` and\n * `apiError('Validation error', 422, parsed.error.flatten())` in\n * `apps/base-api/src/app/api/site/leads/route.ts:40`). `fieldErrors` is what a\n * SITE actually needs — REB-659's `details.fieldErrors.phone` — `formErrors` is\n * kept alongside it because `.flatten()` always emits both and dropping it would\n * silently discard form-level (non-field) messages.\n /\nexport interface ApiErrorDetails {\n fieldErrors?: Record<string, string[]>\n formErrors?: string[]\n /\n REB-836: the affected product ids on a shop checkout `STOCK_CHANGED` /\n * `PRICE_CHANGED` error — see `ApiErrorBody.code`.\n /\n productIds?: string[]\n /* REB-842: optional request-field identifier for checkout validation errors. /\n field?: string\n}\n\n/\n The parsed shape of a non-2xx SITE API response body: `{ error, details? }`\n * (see `apiError()` in `apps/base-api/src/lib/api/response.ts:33` — the general\n * shape both routes above build on).\n /\nexport interface ApiErrorBody {\n error: string\n details?: ApiErrorDetails\n /\n REB-836: stable, machine-readable error code (e.g. `ShopErrorCode` from\n * `@reblu/site-contracts`) the checkout/validate-cart/apply-discount write\n * endpoints may set — additive and OPTIONAL, so a consumer that only reads\n * `error`/`message` keeps working unchanged. `string` rather than\n * `ShopErrorCode` here because `ApiError` is a generic transport error used\n * by every `/api/site/` domain, not just shop.\n /\n code?: string\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n return Array.isArray(value) && value.every((item) => typeof item === 'string')\n}\n\n/*\n Validates `ApiErrorDetails` deeply — `fieldErrors` must be a record whose\n * values are `string[] \| undefined`, `formErrors` (if present) must be\n * `string[]`, and `field` (if present) must be a string. Without this, a body like\n * `{ fieldErrors: { phone: \"abc\" } }` passed the old shallow check, so\n * `body.details?.fieldErrors?.phone?.[0]` silently returned the character\n * `\"a\"` instead of a validation message (REB-764 review finding).\n /\nfunction isApiErrorDetails(value: unknown): value is ApiErrorDetails {\n if (typeof value !== 'object' \|\| value === null) return false\n const details = value as {\n fieldErrors?: unknown\n formErrors?: unknown\n productIds?: unknown\n field?: unknown\n }\n\n if (details.fieldErrors !== undefined) {\n if (\n typeof details.fieldErrors !== 'object' \|\|\n details.fieldErrors === null \|\|\n Array.isArray(details.fieldErrors)\n ) {\n return false\n }\n for (const fieldValue of Object.values(details.fieldErrors as Record<string, unknown>)) {\n if (fieldValue !== undefined && !isStringArray(fieldValue)) return false\n }\n }\n\n if (details.formErrors !== undefined && !isStringArray(details.formErrors)) return false\n\n // REB-836: STOCK_CHANGED/PRICE_CHANGED carry the affected product ids here.\n if (details.productIds !== undefined && !isStringArray(details.productIds)) return false\n if ('field' in details && typeof details.field !== 'string') return false\n\n return true\n}\n\n/\n `details`, when present, must match `ApiErrorDetails` deeply — an\n * unrecognised `details` shape makes the whole body unrecognised (`body`\n * stays `undefined`), the stricter reading consistent with\n * `parseApiErrorBody`'s existing all-or-nothing semantics: a body is either\n * shaped like `ApiErrorBody` or it isn't. Silently dropping a malformed\n * `details` instead would let a consumer treat a schema-drifted or corrupted\n * response as merely detail-less, hiding the mismatch rather than surfacing\n * it as \"unparseable\" (REB-764 review finding).\n /\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n if (typeof value !== 'object' \|\| value === null) return false\n const body = value as { error?: unknown; details?: unknown; code?: unknown }\n if (typeof body.error !== 'string') return false\n if (body.details !== undefined && !isApiErrorDetails(body.details)) return false\n // REB-836: `code` must be a string when present — same all-or-nothing\n // reading as `details` above (an unrecognised shape makes the whole body\n // unrecognised, never silently dropped).\n if (body.code !== undefined && typeof body.code !== 'string') return false\n return true\n}\n\n/\n Parses `rawBody` (the exact text `message` is built from) into a typed\n * `ApiErrorBody`, or `undefined` when it is not JSON, or JSON that does not\n * match the expected shape — an edge proxy 502 returns HTML, and this must\n * never throw while constructing the error it is reporting.\n /\nfunction parseApiErrorBody(rawBody: string): ApiErrorBody \| undefined {\n if (!rawBody) return undefined\n try {\n const parsed: unknown = JSON.parse(rawBody)\n return isApiErrorBody(parsed) ? parsed : undefined\n } catch {\n return undefined\n }\n}\n\n/\n Typed transport error for the Reblu SITE API.\n \n Every non-2xx response throws an `ApiError` (never a bare `fetch` rejection),\n * so consumers can `catch (e) { if (e instanceof ApiError) … }` and fall back\n * gracefully (e.g. render an empty section) — the one behavioural contract the\n * SITE relies on. Moved verbatim from demo-site's `client.ts` (design doc §3.4).\n /\nexport class ApiError extends Error {\n /\n The parsed response body, when it was JSON shaped like `{ error, details? }`\n * (REB-764). `undefined` when the body was not JSON or didn't match — parsing\n * is defensive and never throws. Read `body.details?.fieldErrors?.phone`\n * instead of regex-stripping this error's `message`.\n /\n public readonly body: ApiErrorBody \| undefined\n\n constructor(\n public readonly status: number,\n public readonly path: string,\n message: string,\n ) {\n super(`API ${status} @ ${path}: ${message}`)\n this.name = 'ApiError'\n this.body = parseApiErrorBody(message)\n }\n}\n\n/* One page a slug could mean (REB-867) — `null` = the uncategorised page. /\nexport interface PageSlugCandidate {\n categorySlug: string \| null\n}\n\nfunction parseCandidates(rawBody: string): PageSlugCandidate[] {\n try {\n const parsed = JSON.parse(rawBody) as { candidates?: unknown }\n if (!Array.isArray(parsed.candidates)) return []\n return parsed.candidates.flatMap((c: unknown) => {\n const slug = (c as { categorySlug?: unknown } \| null)?.categorySlug\n return typeof slug === 'string' \|\| slug === null ? [{ categorySlug: slug }] : []\n })\n } catch {\n return []\n }\n}\n\n/\n REB-867 — `GET /api/site/pages/[slug]` answered 409 `ambiguous_slug`: page\n * slugs are unique PER CATEGORY and this one exists in more than one, so the\n * server refused to pick. Retry with `pages.bySlug(slug, { category })` using\n * one of `candidates`. Extends `ApiError`, so an existing\n * `catch (e) { if (e instanceof ApiError) … }` keeps handling it.\n /\nexport class AmbiguousPageSlugError extends ApiError {\n public readonly candidates: PageSlugCandidate[]\n\n constructor(source: ApiError, rawBody: string) {\n super(source.status, source.path, rawBody)\n this.name = 'AmbiguousPageSlugError'\n this.candidates = parseCandidates(rawBody)\n }\n}\n\n/* The raw body an `ApiError` was built from (its message minus the prefix). /\nexport function apiErrorRawBody(error: ApiError): string {\n const prefix = `API ${error.status} @ ${error.path}: `\n return error.message.startsWith(prefix) ? error.message.slice(prefix.length) : error.message\n}\n","import type { PaginationMeta } from '@reblu/site-contracts'\nimport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nimport { ApiError } from './errors'\nimport type { ListResult } from './types'\n\n/\n Resolved, immutable client context threaded into every domain namespace. Built\n * once by `createRebluClient` from the consumer's config — the SDK never reads\n * `process.env`, so the consumer owns `baseUrl`/`apiKey` (design doc §3.3).\n /\nexport interface RebluClientContext {\n baseUrl: string\n apiKey: string\n apiVersion: string\n cache: RebluCacheAdapter\n timeoutMs: number\n fetch: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth). Defaults to\n * `DEFAULT_CHECKOUT_REDIRECT_HOSTS` (`['checkout.stripe.com']`) — tests\n * inject a different value via `RebluClientConfig.checkoutRedirectHosts`.\n /\n checkoutRedirectHosts: readonly string[]\n}\n\n/* Per-call request options. `cachePolicy` is interpreted by the cache adapter. /\nexport interface RequestOptions {\n method?: string\n body?: string\n headers?: Record<string, string>\n cachePolicy?: RebluCachePolicy\n}\n\n/\n Core transport (design doc §3.4). Injects the auth + contract-version headers,\n * merges the adapter's cache `RequestInit`, enforces a hard timeout via\n * `AbortController`, throws a typed `ApiError` on non-2xx, and returns the parsed\n * JSON body verbatim (envelope unwrapping is the caller's concern).\n /\nexport async function request<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const url = ctx.baseUrl + path\n const controller = new AbortController()\n const timer = setTimeout(() => controller.abort(), ctx.timeoutMs)\n\n try {\n const res = await ctx.fetch(url, {\n method: opts.method ?? 'GET',\n body: opts.body,\n signal: controller.signal,\n headers: {\n 'X-Reblu-Api-Key': ctx.apiKey,\n 'X-Reblu-Api-Version': ctx.apiVersion,\n 'Content-Type': 'application/json',\n ...opts.headers,\n },\n ...ctx.cache.resolveRequestInit(opts.cachePolicy ?? {}),\n })\n\n if (!res.ok) {\n throw new ApiError(res.status, path, await res.text())\n }\n return (await res.json()) as T\n } finally {\n clearTimeout(timer)\n }\n}\n\n/* Fetch a single resource and unwrap the `{ data: T }` envelope. /\nexport async function requestOne<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<T> {\n const body = await request<{ data: T }>(ctx, path, opts)\n return body.data\n}\n\n/* Fetch a list resource, returning the `{ data, meta }` envelope (meta preserved). /\nexport async function requestList<T>(\n ctx: RebluClientContext,\n path: string,\n opts: RequestOptions,\n): Promise<ListResult<T>> {\n const body = await request<{ data: T[]; meta?: PaginationMeta }>(ctx, path, opts)\n return { data: body.data, meta: body.meta }\n}\n\n/\n Header carrying the visitor IP from a SITE server to base-api (REB-1005).\n * base-api keys its per-visitor limit on public writes on it, and trusts it\n * only behind a valid API key.\n /\nexport const VISITOR_IP_HEADER = 'x-reblu-visitor-ip'\n\n/\n Per-call options for a write (REB-1005).\n \n - `visitorIp` — the visitor's IP when a SITE calls the SDK server-side, sent\n * as `x-reblu-visitor-ip`. Do NOT rely on forwarding `x-forwarded-for`: on\n * Vercel the SITE→base-api hop gets it overwritten with the SITE function's\n * egress IP. Read it from the INCOMING request with\n * {@link visitorIpFromHeaders}.\n * - `headers` — other extra headers (e.g. `user-agent`). They can never set\n * `x-reblu-visitor-ip` nor replace `X-Reblu-Api-Key`, `X-Reblu-Api-Version`\n * or `Content-Type`.\n /\nexport interface RebluMutationOptions {\n visitorIp?: string\n headers?: Record<string, string>\n}\n\n/* The visitor IP of an incoming request: first `x-forwarded-for` entry, else `x-real-ip`. /\nexport function visitorIpFromHeaders(headers: {\n get(name: string): string \| null\n}): string \| undefined {\n return (\n headers.get('x-forwarded-for')?.split(',')[0]?.trim() \|\|\n headers.get('x-real-ip')?.trim() \|\|\n undefined\n )\n}\n\n/* Headers the SDK owns on every request — an extra header never sets or overrides these. /\nconst RESERVED_HEADERS = new Set([\n 'x-reblu-api-key',\n 'x-reblu-api-version',\n 'content-type',\n VISITOR_IP_HEADER,\n])\n\n/\n The extra headers a write sends for `options`: caller headers minus the\n * reserved ones, plus `x-reblu-visitor-ip` from `visitorIp`. Shared by\n * {@link requestMutation} and the writes that cannot use it (academy).\n /\nexport function extraHeaders(\n options: RebluMutationOptions \| undefined,\n): Record<string, string> \| undefined {\n if (!options?.headers && !options?.visitorIp) return undefined\n const safe: Record<string, string> = {}\n for (const [name, value] of Object.entries(options.headers ?? {})) {\n if (!RESERVED_HEADERS.has(name.toLowerCase())) safe[name] = value\n }\n const visitorIp = options.visitorIp?.trim()\n if (visitorIp) safe[VISITOR_IP_HEADER] = visitorIp\n return safe\n}\n\n/\n POST a mutation: serialize `body` to JSON, force a cache bypass (`revalidate:\n * false` → `no-store` regardless of the injected adapter, since a mutation must\n * never be served from cache), then unwrap the `{ data: T }` envelope. Mirrors\n * every `/api/site/` write route, which answers with `apiOk`/`{ data }`.\n /\nexport async function requestMutation<Req, Res>(\n ctx: RebluClientContext,\n path: string,\n body: Req,\n options?: RebluMutationOptions,\n): Promise<Res> {\n const headers = extraHeaders(options)\n const envelope = await request<{ data: Res }>(ctx, path, {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n return envelope.data\n}\n","import type {\n AcademyCategoryPublic,\n AcademyCourseDetail,\n AcademyCourseSummary,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport {\n extraHeaders,\n request,\n requestList,\n requestOne,\n type RebluClientContext,\n type RebluMutationOptions,\n} from '../client'\nimport type {\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n ListResult,\n} from '../types'\n\n/*\n Academy domain — the public course catalogue (`GET /api/site/academy/`,\n REB-528 / REB-534) plus the anonymous enrollment request (REB-496). The reads\n * are published-filtered server-side, so nothing here needs an entitlement\n * notion; the one write is unauthenticated by design.\n \n `enrollmentRequest` drops to the raw `request()` transport rather than\n * `requestMutation` (REB-584). The route answers with a BARE `{ message }`, not\n * the `{ data }` envelope every other write uses, so `requestMutation` would\n * unwrap a missing `.data` and hand the caller `undefined`. Normalizing the\n * route's envelope instead was rejected: its response shape is load-bearing\n * anti-enumeration behaviour, and changing it would ripple into base-api tests\n * for no gain on the SITE side.\n /\nexport function makeAcademyNamespace(ctx: RebluClientContext) {\n return {\n /* Published courses, filtered + paginated. `meta` carries the pagination. /\n courses: (\n params?: AcademyCourseListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<AcademyCourseSummary>> =>\n requestList<AcademyCourseSummary>(\n ctx,\n buildUrl('/api/site/academy/courses', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n /* A single published course by slug, with its modules, lessons and CTA gate. /\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<AcademyCourseDetail> =>\n requestOne<AcademyCourseDetail>(ctx, `/api/site/academy/courses/${slug}`, {\n cachePolicy: cache,\n }),\n\n /* Active course categories backing the catalog filter. Not paginated. /\n categories: (cache?: RebluCachePolicy): Promise<ListResult<AcademyCategoryPublic>> =>\n requestList<AcademyCategoryPublic>(ctx, '/api/site/academy/categories', {\n cachePolicy: cache,\n }),\n\n /\n Submit an anonymous enrollment request for a course.\n \n The reply is UNIFORM by design: the caller cannot tell whether the email\n * was new (a request row was created) or already known (a sign-in link was\n * sent and NO request row exists). Never present the returned message as\n * confirmation that a request was recorded — it is not one.\n \n Server-side, pass `options.visitorIp` (from the incoming request, see\n * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it\n * and, without it, throttles every visitor of the SITE in one shared\n * tenant-level bucket (REB-1006).\n /\n enrollmentRequest: (\n body: AcademyEnrollmentRequestInput,\n options?: RebluMutationOptions,\n ): Promise<AcademyEnrollmentRequestResult> => {\n const headers = extraHeaders(options)\n return request<AcademyEnrollmentRequestResult>(ctx, '/api/site/academy/enrollment-requests', {\n method: 'POST',\n body: JSON.stringify(body),\n cachePolicy: { revalidate: false },\n ...(headers ? { headers } : {}),\n })\n },\n }\n}\n","import type { Analytics } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/analytics` — the tenant's analytics provider configuration. /\nexport function makeAnalyticsNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Analytics> =>\n requestOne<Analytics>(ctx, '/api/site/analytics', { cachePolicy: cache }),\n }\n}\n","import type {\n BlogCategoryWithCount,\n BlogPostDetail,\n BlogPostListItem,\n BlogPostPreview,\n BlogSlug,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport type { BlogListParams, ListResult } from '../types'\n\n/* Blog domain — `GET /api/site/blog/`. /\nexport function makeBlogNamespace(ctx: RebluClientContext) {\n return {\n list: (\n params?: BlogListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(\n ctx,\n buildUrl('/api/site/blog', params as Record<string, QueryValue> \| undefined),\n { cachePolicy: cache },\n ),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<BlogPostDetail> =>\n requestOne<BlogPostDetail>(ctx, `/api/site/blog/${slug}`, { cachePolicy: cache }),\n\n related: (slug: string, cache?: RebluCachePolicy): Promise<ListResult<BlogPostListItem>> =>\n requestList<BlogPostListItem>(ctx, `/api/site/blog/${slug}/related`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<BlogCategoryWithCount>> =>\n requestList<BlogCategoryWithCount>(ctx, '/api/site/blog/categories', { cachePolicy: cache }),\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<BlogSlug>> =>\n requestList<BlogSlug>(ctx, '/api/site/blog/slugs', { cachePolicy: cache }),\n\n /** Draft preview — never cached (unpublished content). /\n preview: (id: string): Promise<BlogPostPreview> =>\n requestOne<BlogPostPreview>(ctx, `/api/site/blog/preview/${id}`, {\n cachePolicy: { revalidate: false },\n }),\n }\n}\n","import type { Config } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/config` — the tenant's public site configuration. /\nexport function makeConfigNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Config> =>\n requestOne<Config>(ctx, '/api/site/config', { cachePolicy: cache }),\n }\n}\n","import type { ContactFormInput, ContactFormSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n Contact form domain — WRITE only (`POST /api/site/contact-form`, REB-438).\n * Posts a body typed by `@reblu/site-contracts` and bypasses the cache; returns\n * the created lead's id + creation timestamp.\n /\nexport function makeContactFormNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a contact form. Returns the created lead acknowledgement.\n * Server-side (a Server Action / Route Handler), pass `options.visitorIp`\n * (from the incoming request, see `visitorIpFromHeaders`) so base-api's\n * per-IP limit (REB-1005) applies to the real visitor.\n /\n submit: (\n body: ContactFormInput,\n options?: RebluMutationOptions,\n ): Promise<ContactFormSubmission> =>\n requestMutation<ContactFormInput, ContactFormSubmission>(\n ctx,\n '/api/site/contact-form',\n body,\n options,\n ),\n }\n}\n","import type { Cta } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/\n `GET /api/site/ctas?slot=…` — editable CTAs for a given slot.\n \n `slot` is typed as `string` on purpose: the slot enum lives in base-api's\n * `validations/` (not the response contracts), so `@reblu/site-contracts` does\n * not export it. Keeping it a `string` avoids duplicating (and drifting from)\n * the server-owned enum. The server validates the slot.\n /\nexport function makeCtasNamespace(ctx: RebluClientContext) {\n return {\n list: (slot: string, cache?: RebluCachePolicy): Promise<ListResult<Cta>> =>\n requestList<Cta>(ctx, buildUrl('/api/site/ctas', { slot }), { cachePolicy: cache }),\n }\n}\n","import type { DataRequestInput, DataRequestSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext, type RebluMutationOptions } from '../client'\n\n/\n GDPR data-subject requests domain — WRITE only (`POST /api/site/data-requests`,\n * REB-77 endpoint / REB-980 SDK). Posts the public rights-form body typed by\n * `@reblu/site-contracts`, bypasses the cache, and returns the request id, when\n * it was received and the 72h deadline (`slaDueAt`) it is now held to.\n \n base-api requires a reCAPTCHA v3 token (`captcha`) and rate-limits per tenant\n * and per visitor IP (REB-1005); a rejection surfaces as an `ApiError` carrying\n * the upstream `status` (400 validation, 422 captcha, 429 rate limit).\n /\nexport function makeDataRequestsNamespace(ctx: RebluClientContext) {\n return {\n /\n Submit a data-subject request. Returns its acknowledgement with the 72h\n * deadline. Server-side, pass `options.visitorIp` (from the incoming\n * request, see `visitorIpFromHeaders`) so base-api's per-IP limit\n * (REB-1005) sees the real visitor.\n /\n submit: (\n body: DataRequestInput,\n options?: RebluMutationOptions,\n ): Promise<DataRequestSubmission> =>\n requestMutation<DataRequestInput, DataRequestSubmission>(\n ctx,\n '/api/site/data-requests',\n body,\n options,\n ),\n }\n}\n","import type { LeadInput, LeadSubmission } from '@reblu/site-contracts'\nimport { requestMutation, type RebluClientContext } from '../client'\n\n/\n Leads domain — WRITE only (`POST /api/site/leads`, REB-438). The generic\n * lead-ingestion endpoint: posts a body typed by `@reblu/site-contracts`,\n * bypasses the cache, and returns the created lead's id + creation timestamp.\n /\nexport function makeLeadsNamespace(ctx: RebluClientContext) {\n return {\n /* Create a lead. Returns the created lead acknowledgement. /\n create: (body: LeadInput): Promise<LeadSubmission> =>\n requestMutation<LeadInput, LeadSubmission>(ctx, '/api/site/leads', body),\n }\n}\n","import type { Legal } from '@reblu/site-contracts'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestOne, type RebluClientContext } from '../client'\n\n/* `GET /api/site/legal` — the tenant's legal content (privacy, terms, cookies). /\nexport function makeLegalNamespace(ctx: RebluClientContext) {\n return {\n get: (cache?: RebluCachePolicy): Promise<Legal> =>\n requestOne<Legal>(ctx, '/api/site/legal', { cachePolicy: cache }),\n }\n}\n","import type { PageDetail, PageListItem, PageSlug } from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, requestOne, type RebluClientContext } from '../client'\nimport { AmbiguousPageSlugError, ApiError, apiErrorRawBody } from '../errors'\nimport type { ListResult, PagesListParams } from '../types'\n\n/\n REB-867 — options for `pages.bySlug`. Page slugs are unique PER CATEGORY:\n * - `category: '<categorySlug>'` → the page with that slug in that category;\n * - `category: null` → the UNCATEGORISED page with that slug;\n * - omitted → the unique page with that slug; throws\n * `AmbiguousPageSlugError` when it exists in more than one category.\n /\nexport interface PageBySlugOptions {\n category?: string \| null\n cache?: RebluCachePolicy\n}\n\n/\n The two second-argument shapes share no key: a `RebluCachePolicy` only ever\n * has `revalidate`, `PageBySlugOptions` only `category`/`cache`. So the\n * presence of `category` or `cache` (even `category: undefined`) selects the\n * options form; anything else — including `{}` — is a cache policy, exactly as\n * before REB-867.\n /\n/* REB-869 — options for `pages.featured`. /\nexport interface FeaturedPagesOptions {\n /\n How many pages at most: an integer >= 1. Default 3. Values above the\n * server's cap (3) are clamped to 3; anything else invalid (0, negative,\n * fractional, NaN) throws a `RangeError` before any request is made.\n /\n limit?: number\n /\n When the category has nothing featured, return its first `limit` pages in\n * normal order instead of `[]`. Default `true`, so a teaser is never empty\n * just because nobody picked pages yet.\n /\n fallback?: boolean\n cache?: RebluCachePolicy\n}\n\n/* The server caps a featured list at 3 (REB-869). /\nconst FEATURED_PAGES_MAX = 3\n\nfunction isBySlugOptions(value: RebluCachePolicy \| PageBySlugOptions): value is PageBySlugOptions {\n return 'category' in value \|\| 'cache' in value\n}\n\n/* Dynamic pages domain — `GET /api/site/pages/`. /\nexport function makePagesNamespace(ctx: RebluClientContext) {\n const namespace = {\n list: (\n params?: PagesListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<PageListItem>> =>\n requestList<PageListItem>(\n ctx,\n // REB-63: `type` can now be a single PageType or an array (repeated\n // `?type=` params) — widen the cast alongside `PagesListParams`.\n buildUrl('/api/site/pages', params as Record<string, QueryValue \| QueryValue[]> \| undefined),\n { cachePolicy: cache },\n ),\n\n /*\n A published page by slug. The second argument is either a cache policy\n * (backward-compatible) or {@link PageBySlugOptions} (REB-867).\n /\n bySlug: async (\n slug: string,\n cacheOrOptions?: RebluCachePolicy \| PageBySlugOptions,\n ): Promise<PageDetail> => {\n const options: PageBySlugOptions =\n cacheOrOptions && isBySlugOptions(cacheOrOptions)\n ? cacheOrOptions\n : { cache: cacheOrOptions }\n const path =\n options.category === undefined\n ? `/api/site/pages/${slug}`\n : buildUrl(`/api/site/pages/${slug}`, { category: options.category ?? '' })\n try {\n return await requestOne<PageDetail>(ctx, path, { cachePolicy: options.cache })\n } catch (error) {\n if (error instanceof ApiError && error.status === 409 && error.body?.code === 'ambiguous_slug') {\n throw new AmbiguousPageSlugError(error, apiErrorRawBody(error))\n }\n throw error\n }\n },\n\n /\n REB-869 — the pages to show in a category teaser: the category's\n * featured pages in the tenant's order; when none are featured (and\n * `fallback` is not `false`), the first `limit` pages of the category in\n * normal order. Returns the items only (no pagination applies).\n /\n featured: async (\n category: string,\n { limit: requested = FEATURED_PAGES_MAX, fallback = true, cache }: FeaturedPagesOptions = {},\n ): Promise<PageListItem[]> => {\n if (!Number.isInteger(requested) \|\| requested < 1) {\n throw new RangeError(`pages.featured: limit must be an integer >= 1 (got ${requested})`)\n }\n const limit = Math.min(requested, FEATURED_PAGES_MAX)\n const featured = await namespace.list({ category, featured: true }, cache)\n if (featured.data.length > 0 \|\| !fallback) return featured.data.slice(0, limit)\n const first = await namespace.list({ category, pageSize: limit }, cache)\n return first.data.slice(0, limit)\n },\n\n slugs: (cache?: RebluCachePolicy): Promise<ListResult<PageSlug>> =>\n requestList<PageSlug>(ctx, '/api/site/pages/slugs', { cachePolicy: cache }),\n }\n return namespace\n}\n","import type {\n ShopApplyDiscountInput,\n ShopCartValidation,\n ShopCategory,\n ShopCheckEmailInput,\n ShopCheckoutInput,\n ShopCheckoutSession,\n ShopConfig,\n ShopDiscountApplication,\n ShopEmailCheck,\n ShopFacets,\n ShopOrder,\n ShopProductDetail,\n ShopProductListItem,\n ShopValidateCartInput,\n} from '@reblu/site-contracts'\nimport { buildUrl, type QueryValue } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport {\n requestList,\n requestMutation,\n requestOne,\n type RebluClientContext,\n type RebluMutationOptions,\n} from '../client'\nimport { isSafeCheckoutRedirectUrl, UnsafeCheckoutRedirectError } from '../checkout-redirect'\nimport type { ListResult, ShopProductsParams } from '../types'\n\n/\n Flatten `ShopProductsParams` into a query record: scalars pass through; the\n * `taxonomy`/`attr` maps become repeatable `taxonomy[key]`/`attr[key]` params.\n * Array attr values repeat the same bracket key.\n /\nfunction flattenShopParams(params?: ShopProductsParams): Record<string, QueryValue \| QueryValue[]> {\n if (!params) return {}\n const { taxonomy, attr, ...scalars } = params\n const out: Record<string, QueryValue \| QueryValue[]> = { ...scalars }\n if (taxonomy) {\n for (const [key, value] of Object.entries(taxonomy)) out[`taxonomy[${key}]`] = value\n }\n if (attr) {\n for (const [key, value] of Object.entries(attr)) out[`attr[${key}]`] = value\n }\n return out\n}\n\n/\n Shop domain — READ surface (`GET /api/site/shop/`) plus the mutation flow\n (`POST` checkout, validate-cart, apply-discount, and the deprecated\n * check-email) added in REB-438. Every write posts a body typed by `@reblu/site-contracts` and bypasses\n * the cache. Request/response DTOs live in the contracts package (zero Zod).\n /\nexport function makeShopNamespace(ctx: RebluClientContext) {\n return {\n products: (\n params?: ShopProductsParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<ShopProductListItem>> =>\n requestList<ShopProductListItem>(\n ctx,\n buildUrl('/api/site/shop/products', flattenShopParams(params)),\n { cachePolicy: cache },\n ),\n\n /* Available facets (brand/attributes/price/on-sale) for the given filters. /\n facets: (params?: ShopProductsParams, cache?: RebluCachePolicy): Promise<ShopFacets> =>\n requestOne<ShopFacets>(ctx, buildUrl('/api/site/shop/facets', flattenShopParams(params)), {\n cachePolicy: cache,\n }),\n\n bySlug: (slug: string, cache?: RebluCachePolicy): Promise<ShopProductDetail> =>\n requestOne<ShopProductDetail>(ctx, `/api/site/shop/products/${slug}`, { cachePolicy: cache }),\n\n categories: (cache?: RebluCachePolicy): Promise<ListResult<ShopCategory>> =>\n requestList<ShopCategory>(ctx, '/api/site/shop/categories', { cachePolicy: cache }),\n\n config: (cache?: RebluCachePolicy): Promise<ShopConfig> =>\n requestOne<ShopConfig>(ctx, '/api/site/shop/config', { cachePolicy: cache }),\n\n // ── Mutations (REB-438) ──────────────────────────────────────────────────\n\n /\n Start a hosted checkout session. Returns the Stripe URL + session id.\n \n REB-836 (defence in depth): every SITE hands `url` straight to\n * `window.location.assign`, so this validates it is `https:` on an\n * allowed host (`ctx.checkoutRedirectHosts`, default\n * `checkout.stripe.com`) BEFORE returning — throwing\n * {@link UnsafeCheckoutRedirectError} instead of ever handing back a URL\n * that could redirect a buyer's browser off Stripe's domain.\n /\n checkout: async (body: ShopCheckoutInput): Promise<ShopCheckoutSession> => {\n const session = await requestMutation<ShopCheckoutInput, ShopCheckoutSession>(\n ctx,\n '/api/site/shop/checkout',\n body,\n )\n if (!isSafeCheckoutRedirectUrl(session.url, ctx.checkoutRedirectHosts)) {\n throw new UnsafeCheckoutRedirectError(session.url, ctx.checkoutRedirectHosts)\n }\n return session\n },\n\n /* Validate a cart against live product/stock/price state before checkout. /\n validateCart: (body: ShopValidateCartInput): Promise<ShopCartValidation> =>\n requestMutation<ShopValidateCartInput, ShopCartValidation>(\n ctx,\n '/api/site/shop/validate-cart',\n body,\n ),\n\n /* Validate a discount code against the current cart subtotal. /\n applyDiscount: (body: ShopApplyDiscountInput): Promise<ShopDiscountApplication> =>\n requestMutation<ShopApplyDiscountInput, ShopDiscountApplication>(\n ctx,\n '/api/site/shop/apply-discount',\n body,\n ),\n\n /\n @deprecated REB-834 — the endpoint no longer reveals whether an account\n * exists: it always resolves `{ exists: false }`. Do not call it and never\n * branch UI on `exists`; the checkout always offers «Iniciar sesión o\n * continuar como invitado» and the server links the order to an existing\n * account after payment. Removed in the next major.\n \n Server-side, pass `options.visitorIp` (from the incoming request, see\n * `visitorIpFromHeaders`): base-api keys this route's per-IP limit on it\n * and, without it, throttles every visitor of the SITE in one shared\n * tenant-level bucket (REB-1006).\n /\n checkEmail: (\n body: ShopCheckEmailInput,\n options?: RebluMutationOptions,\n ): Promise<ShopEmailCheck> =>\n requestMutation<ShopCheckEmailInput, ShopEmailCheck>(\n ctx,\n '/api/site/shop/check-email',\n body,\n options,\n ),\n\n /\n Look up a confirmed (or still-pending) order by its Stripe Checkout\n * session id — the order-confirmation flow (REB-829). `GET`, so it goes\n * through `requestOne` like every other read, not `requestMutation`.\n /\n order: (sessionId: string, cache?: RebluCachePolicy): Promise<ShopOrder> =>\n requestOne<ShopOrder>(ctx, `/api/site/shop/order/${encodeURIComponent(sessionId)}`, {\n cachePolicy: cache,\n }),\n }\n}\n","import type { TrustBadge, TrustBadgeType } from '@reblu/site-contracts'\nimport { buildUrl } from '../build-url'\nimport type { RebluCachePolicy } from '../cache'\nimport { requestList, type RebluClientContext } from '../client'\nimport type { ListResult } from '../types'\n\n/* Filters for {@link makeTrustBadgesNamespace}'s `list` (REB-996). /\nexport interface TrustBadgeListParams {\n /* Only badges of this type (e.g. `'SUBVENTION'`). Omit for every type. /\n type?: TrustBadgeType\n}\n\nfunction isCachePolicy(value: TrustBadgeListParams \| RebluCachePolicy): value is RebluCachePolicy {\n return Object.prototype.hasOwnProperty.call(value, 'revalidate')\n}\n\n/\n `GET /api/site/trust-badges` — the tenant's PUBLIC trust badges (no\n * pagination): active in nexus and inside their optional validity window, so\n * expiring or switching one off needs no SITE change.\n /\nexport function makeTrustBadgesNamespace(ctx: RebluClientContext) {\n function list(cache?: RebluCachePolicy): Promise<ListResult<TrustBadge>>\n function list(\n params: TrustBadgeListParams,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>>\n function list(\n paramsOrCache?: TrustBadgeListParams \| RebluCachePolicy,\n cache?: RebluCachePolicy,\n ): Promise<ListResult<TrustBadge>> {\n // `list(cache)` is the pre-REB-996 call shape — kept so this stays a minor.\n const legacyCache = paramsOrCache && isCachePolicy(paramsOrCache) ? paramsOrCache : undefined\n const params = legacyCache ? undefined : (paramsOrCache as TrustBadgeListParams \| undefined)\n return requestList<TrustBadge>(\n ctx,\n buildUrl('/api/site/trust-badges', { type: params?.type }),\n { cachePolicy: legacyCache ?? cache },\n )\n }\n return { list }\n}\n","/\n `@reblu/site-client` — framework-agnostic HTTP client for the Reblu SITE API\n * (REB-415 / design doc §3).\n \n The consumer owns the environment: `baseUrl`/`apiKey` are passed in, never read\n * from `process.env`. Caching is delegated to an injectable `RebluCacheAdapter`\n * (default `PlainCacheAdapter`), which severs any coupling to a specific\n * framework's cache model — `@reblu/site-next` supplies the ISR-aware adapter.\n * Response DTOs are typed by the peer, type-only `@reblu/site-contracts`.\n /\nimport { PlainCacheAdapter, type RebluCacheAdapter } from './cache'\nimport type { RebluClientContext } from './client'\nimport { DEFAULT_CHECKOUT_REDIRECT_HOSTS } from './checkout-redirect'\nimport { makeAcademyNamespace } from './domains/academy'\nimport { makeAnalyticsNamespace } from './domains/analytics'\nimport { makeBlogNamespace } from './domains/blog'\nimport { makeConfigNamespace } from './domains/config'\nimport { makeContactFormNamespace } from './domains/contact-form'\nimport { makeCtasNamespace } from './domains/ctas'\nimport { makeDataRequestsNamespace } from './domains/data-requests'\nimport { makeLeadsNamespace } from './domains/leads'\nimport { makeLegalNamespace } from './domains/legal'\nimport { makePagesNamespace } from './domains/pages'\nimport { makeShopNamespace } from './domains/shop'\nimport { makeTrustBadgesNamespace } from './domains/trust-badges'\n\nconst DEFAULT_API_VERSION = '1'\n/* Parity with demo-site's upstream timeout (client.ts:36). /\nconst DEFAULT_TIMEOUT_MS = 8000\n\nexport interface RebluClientConfig {\n /* Absolute origin of the Reblu SITE API, e.g. `https://api.reblu.app`. /\n baseUrl: string\n /* Tenant SITE API key (`rbl_…`), sent as `X-Reblu-Api-Key`. /\n apiKey: string\n /* Contract version sent as `X-Reblu-Api-Version`. Defaults to `'1'`. /\n apiVersion?: string\n /* Cache strategy. Defaults to `new PlainCacheAdapter()` (no-store). /\n cache?: RebluCacheAdapter\n /* Per-request hard timeout in ms. Defaults to `8000`. /\n timeoutMs?: number\n /* Injectable `fetch` — for tests, custom runtimes, or instrumentation. /\n fetch?: typeof fetch\n /\n Allowed hosts for the Stripe Checkout URL `shop.checkout()` returns\n * (REB-836, defence in depth — see `./checkout-redirect`). Defaults to\n * `['checkout.stripe.com']`. Override only to point at a test double (e.g.\n * a Stripe CLI mock host) — never to widen production trust.\n /\n checkoutRedirectHosts?: string[]\n}\n\n/\n Build a Reblu SITE API client. Each domain is a small namespace of bound\n * methods assembled from a separate module, so a consumer importing only a\n * couple of domains can tree-shake the rest.\n /\nexport function createRebluClient(config: RebluClientConfig) {\n // Wrap global fetch so calling `ctx.fetch()` never loses its `this` binding\n // (browsers throw \"Illegal invocation\" for an unbound `window.fetch`).\n const boundFetch: typeof fetch = config.fetch ?? ((input, init) => fetch(input, init))\n\n const ctx: RebluClientContext = {\n baseUrl: config.baseUrl,\n apiKey: config.apiKey,\n apiVersion: config.apiVersion ?? DEFAULT_API_VERSION,\n cache: config.cache ?? new PlainCacheAdapter(),\n timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n fetch: boundFetch,\n checkoutRedirectHosts: config.checkoutRedirectHosts ?? DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n }\n\n return {\n config: makeConfigNamespace(ctx),\n analytics: makeAnalyticsNamespace(ctx),\n legal: makeLegalNamespace(ctx),\n trustBadges: makeTrustBadgesNamespace(ctx),\n ctas: makeCtasNamespace(ctx),\n blog: makeBlogNamespace(ctx),\n pages: makePagesNamespace(ctx),\n shop: makeShopNamespace(ctx),\n academy: makeAcademyNamespace(ctx),\n contactForm: makeContactFormNamespace(ctx),\n leads: makeLeadsNamespace(ctx),\n dataRequests: makeDataRequestsNamespace(ctx),\n }\n}\n\n/* The assembled client returned by {@link createRebluClient}. */\nexport type RebluClient = ReturnType<typeof createRebluClient>\n\nexport { ApiError, AmbiguousPageSlugError } from './errors'\nexport type { ApiErrorBody, ApiErrorDetails, PageSlugCandidate } from './errors'\nexport type { PageBySlugOptions, FeaturedPagesOptions } from './domains/pages'\nexport type { TrustBadgeListParams } from './domains/trust-badges'\nexport {\n DEFAULT_CHECKOUT_REDIRECT_HOSTS,\n isSafeCheckoutRedirectUrl,\n UnsafeCheckoutRedirectError,\n} from './checkout-redirect'\nexport { PlainCacheAdapter } from './cache'\nexport type { RebluCacheAdapter, RebluCachePolicy } from './cache'\nexport type {\n ListResult,\n BlogListParams,\n PagesListParams,\n ShopProductsParams,\n AcademyCourseListParams,\n AcademyEnrollmentRequestInput,\n AcademyEnrollmentRequestResult,\n} from './types'\nexport { VISITOR_IP_HEADER, visitorIpFromHeaders, type RebluMutationOptions } from './client'\n"]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-client",
-  "version": "5.9.0",
+  "version": "5.10.0",
   "description": "Framework-agnostic HTTP client for the Reblu SITE API — dependency-free, injectable cache adapter, typed by @reblu/site-contracts.",
   "license": "Apache-2.0",
   "author": "Reblu — Adolfo Unturbe",