@reblu/site-contracts 1.25.0 → 1.27.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @reblu/site-contracts
 
+## 1.27.0
+
+### Minor Changes
+
+- 143cef1: `AcademyCourseDetail` carries the course's delivery modality and the consent box checkout asks for (REB-1240). `deliveryModality` is `DIGITAL_CONTENT`, `TRAINING_SERVICE`, `IN_PERSON`, `WEBINAR` or `null` when not chosen. `withdrawalConsent` is `{ kind, text, version }` with the tenant's current wording, or `null` for no box. `kind` is `DIGITAL_CONTENT_WAIVER` for the digital-content waiver or `SERVICE_START_REQUEST` for the express request to start a training service, which does not waive the withdrawal right. `withdrawalWaiverRequired` is now `true` only for the waiver. Both new fields are optional, so existing SITEs keep working.
+
+## 1.26.0
+
+### Minor Changes
+
+- 05b1106: «Aviso legal» and «Desistimiento y devoluciones» pages, written by the tenant in nexus (REB-1201).
+  - `@reblu/site-contracts`: `Legal` gains optional `legalNotice` and `withdrawalPolicy` (Markdown or `null`). Absent from older servers.
+  - `@reblu/site-client`: `client.legal.get()` returns both documents.
+  - `@reblu/site-blocks`: new `LegalDocument` drop-in for any legal page: the SITE's title as the only `<h1>`, the tenant's Markdown sanitised below it, and the SITE's `fallback` when the page is not written yet. It never invents legal copy.
+
+- 21b7413: Withdrawal form: a buyer communicates a withdrawal from the SITE (REB-1201).
+  - `@reblu/site-contracts`: new `WithdrawalRequestInput` and `WithdrawalRequestSubmission` types for `POST /api/site/withdrawal-requests`.
+  - `@reblu/site-client`: new `client.withdrawalRequests.submit(body, options?)`, returning `{ id, receivedAt, acknowledgementSent }`.
+  - `@reblu/site-blocks`: new `WithdrawalRequestForm` drop-in in `./client` (order number, optional name, email, items, optional reason). It decides nothing about whether the right applies; when no acknowledgement email could be sent, its receipt lists what the buyer communicated.
+
 ## 1.25.0
 
 ### Minor Changes

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.cjs","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.cjs","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type {\n  WithdrawalRequestInput,\n  WithdrawalRequestSubmission,\n} from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}

package/dist/index.d.cts

@@ -10,7 +10,7 @@ export type AcademyCategoryPublic = {    id: string;    name: string;    slug: s
 
 export type AcademyConfigPublic = {    catalogFilters: {        category: boolean;        instructor: boolean;        price: boolean;    };}
 
-export type AcademyCourseDetail = {    id: string;    slug: string;    title: string;    shortDescription: string | null;    coverUrl: string | null;    priceCents: number;    accessMode: "IMMEDIATE" | "DRIP" | "COHORT";    category: {        id: string;        name: string;        slug: string;        sortOrder: number;    } | null;    description: string | null;    modules: {        id: string;        title: string;        description: string | null;        lessons: {            id: string;            slug: string;            title: string;            isFreePreview: boolean;            durationSeconds: number | null;            hasVideo: boolean;        }[];    }[];    instructors: {        id: string;        firstName: string | null;        lastName: string | null;        avatarUrl: string | null;    }[];    salesEnabled: boolean;    requiresValidation: boolean;    validationFieldLabel: string | null;    validationFields: {        key: string;        label: string;        required: boolean;        maxLength?: number | undefined;    }[];    metaTitle?: string | null | undefined;    seo?: {        title: string;    } | undefined;    withdrawalWaiverRequired?: boolean | undefined;    accessDurationMonths?: number | null | undefined;    refundGuarantee?: {        basis: "LESSONS_OPENED" | "LESSONS_COMPLETED";        thresholdPercent: number | null;        windowDays: number | null;    } | null | undefined;}
+export type AcademyCourseDetail = {    id: string;    slug: string;    title: string;    shortDescription: string | null;    coverUrl: string | null;    priceCents: number;    accessMode: "IMMEDIATE" | "DRIP" | "COHORT";    category: {        id: string;        name: string;        slug: string;        sortOrder: number;    } | null;    description: string | null;    modules: {        id: string;        title: string;        description: string | null;        lessons: {            id: string;            slug: string;            title: string;            isFreePreview: boolean;            durationSeconds: number | null;            hasVideo: boolean;        }[];    }[];    instructors: {        id: string;        firstName: string | null;        lastName: string | null;        avatarUrl: string | null;    }[];    salesEnabled: boolean;    requiresValidation: boolean;    validationFieldLabel: string | null;    validationFields: {        key: string;        label: string;        required: boolean;        maxLength?: number | undefined;    }[];    metaTitle?: string | null | undefined;    seo?: {        title: string;    } | undefined;    withdrawalWaiverRequired?: boolean | undefined;    accessDurationMonths?: number | null | undefined;    deliveryModality?: "DIGITAL_CONTENT" | "TRAINING_SERVICE" | "IN_PERSON" | "WEBINAR" | null | undefined;    withdrawalConsent?: {        kind: "DIGITAL_CONTENT_WAIVER" | "SERVICE_START_REQUEST";        text: string;        version: string;    } | null | undefined;    refundGuarantee?: {        basis: "LESSONS_OPENED" | "LESSONS_COMPLETED";        thresholdPercent: number | null;        windowDays: number | null;    } | null | undefined;}
 
 export type AcademyCourseListQuery = {    page?: number | undefined;    limit?: number | undefined;    q?: string | undefined;    sort?: "price_asc" | "price_desc" | "newest" | undefined;    category?: string | undefined;    instructor?: string | undefined;    free?: boolean | undefined;    priceMin?: number | undefined;    priceMax?: number | undefined;}
 
@@ -110,7 +110,7 @@ export type LeadTouch = {    utm?: {        source?: string | undefined;
 
 export type LegacyPageType = "SERVICE" | "CUSTOM"
 
-export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;}
+export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;}
 
 export type LegalTermsVersion = {    id: string;    version: number;    publishedAt: string;    content: string;    contentHash: string;}
 
@@ -280,6 +280,10 @@ export type TrustBadge = {    id: string;    name: string;    logoUrl: string |
 
 export type TrustBadgeType = "PARTNER" | "INSURANCE" | "SUBVENTION" | "CERTIFICATION" | "AWARD"
 
+export type WithdrawalRequestInput = {    orderReference: string;    email: string;    items: string;    captcha: string;    name?: string | undefined;    reason?: string | undefined;}
+
+export type WithdrawalRequestSubmission = {    id: string;    receivedAt: string;    acknowledgementSent: boolean;}
+
 /**
  * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.
  * The ONE runtime value this package ships: server code (a SITE's Route

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export type AcademyCategoryPublic = {    id: string;    name: string;    slug: s
 
 export type AcademyConfigPublic = {    catalogFilters: {        category: boolean;        instructor: boolean;        price: boolean;    };}
 
-export type AcademyCourseDetail = {    id: string;    slug: string;    title: string;    shortDescription: string | null;    coverUrl: string | null;    priceCents: number;    accessMode: "IMMEDIATE" | "DRIP" | "COHORT";    category: {        id: string;        name: string;        slug: string;        sortOrder: number;    } | null;    description: string | null;    modules: {        id: string;        title: string;        description: string | null;        lessons: {            id: string;            slug: string;            title: string;            isFreePreview: boolean;            durationSeconds: number | null;            hasVideo: boolean;        }[];    }[];    instructors: {        id: string;        firstName: string | null;        lastName: string | null;        avatarUrl: string | null;    }[];    salesEnabled: boolean;    requiresValidation: boolean;    validationFieldLabel: string | null;    validationFields: {        key: string;        label: string;        required: boolean;        maxLength?: number | undefined;    }[];    metaTitle?: string | null | undefined;    seo?: {        title: string;    } | undefined;    withdrawalWaiverRequired?: boolean | undefined;    accessDurationMonths?: number | null | undefined;    refundGuarantee?: {        basis: "LESSONS_OPENED" | "LESSONS_COMPLETED";        thresholdPercent: number | null;        windowDays: number | null;    } | null | undefined;}
+export type AcademyCourseDetail = {    id: string;    slug: string;    title: string;    shortDescription: string | null;    coverUrl: string | null;    priceCents: number;    accessMode: "IMMEDIATE" | "DRIP" | "COHORT";    category: {        id: string;        name: string;        slug: string;        sortOrder: number;    } | null;    description: string | null;    modules: {        id: string;        title: string;        description: string | null;        lessons: {            id: string;            slug: string;            title: string;            isFreePreview: boolean;            durationSeconds: number | null;            hasVideo: boolean;        }[];    }[];    instructors: {        id: string;        firstName: string | null;        lastName: string | null;        avatarUrl: string | null;    }[];    salesEnabled: boolean;    requiresValidation: boolean;    validationFieldLabel: string | null;    validationFields: {        key: string;        label: string;        required: boolean;        maxLength?: number | undefined;    }[];    metaTitle?: string | null | undefined;    seo?: {        title: string;    } | undefined;    withdrawalWaiverRequired?: boolean | undefined;    accessDurationMonths?: number | null | undefined;    deliveryModality?: "DIGITAL_CONTENT" | "TRAINING_SERVICE" | "IN_PERSON" | "WEBINAR" | null | undefined;    withdrawalConsent?: {        kind: "DIGITAL_CONTENT_WAIVER" | "SERVICE_START_REQUEST";        text: string;        version: string;    } | null | undefined;    refundGuarantee?: {        basis: "LESSONS_OPENED" | "LESSONS_COMPLETED";        thresholdPercent: number | null;        windowDays: number | null;    } | null | undefined;}
 
 export type AcademyCourseListQuery = {    page?: number | undefined;    limit?: number | undefined;    q?: string | undefined;    sort?: "price_asc" | "price_desc" | "newest" | undefined;    category?: string | undefined;    instructor?: string | undefined;    free?: boolean | undefined;    priceMin?: number | undefined;    priceMax?: number | undefined;}
 
@@ -110,7 +110,7 @@ export type LeadTouch = {    utm?: {        source?: string | undefined;
 
 export type LegacyPageType = "SERVICE" | "CUSTOM"
 
-export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;}
+export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;}
 
 export type LegalTermsVersion = {    id: string;    version: number;    publishedAt: string;    content: string;    contentHash: string;}
 
@@ -280,6 +280,10 @@ export type TrustBadge = {    id: string;    name: string;    logoUrl: string |
 
 export type TrustBadgeType = "PARTNER" | "INSURANCE" | "SUBVENTION" | "CERTIFICATION" | "AWARD"
 
+export type WithdrawalRequestInput = {    orderReference: string;    email: string;    items: string;    captcha: string;    name?: string | undefined;    reason?: string | undefined;}
+
+export type WithdrawalRequestSubmission = {    id: string;    receivedAt: string;    acknowledgementSent: boolean;}
+
 /**
  * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.
  * The ONE runtime value this package ships: server code (a SITE's Route

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.js","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.js","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type {\n  WithdrawalRequestInput,\n  WithdrawalRequestSubmission,\n} from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-contracts",
-  "version": "1.25.0",
+  "version": "1.27.0",
   "private": false,
   "description": "Public, dependency-free TypeScript types for the Reblu SITE API (no Zod, no Prisma at runtime; one runtime value: DATA_REQUEST_TYPES).",
   "license": "Apache-2.0",