@reblu/site-contracts 1.29.0 → 1.30.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @reblu/site-contracts
 
+## 1.30.0
+
+### Minor Changes
+
+- 25a6af3: Published legal document versions (REB-1285). Additive only: every existing field keeps its type and meaning.
+  - `Legal.documentVersions` (optional): names the published version (`{ id, version, publishedAt }`, or `null` when never published) of `privacyPolicy`, `cookiePolicy`, `legalNotice` and `withdrawalPolicy`. Absent from older servers and from a tenant whose migration is pending.
+  - When `documentVersions` is present, each of those four text fields in `Legal` is the current published version, or `null` before the first «Publicar versión»: a draft saved in nexus is never served. The migration copies every saved text into its version 1, so a SITE shows the same text before and after. Terms keep `termsVersion` (REB-1198).
+
+- 93143eb: Reviews (REB-1272). `@reblu/site-contracts` exports the `Review` and `ReviewSource` types of `GET /api/site/reviews`. `@reblu/site-client` adds `client.reviews.list({ pageId?, limit? }, cache?)`: the tenant's published reviews in the order set in nexus, optionally only one page's (404 without the tenant's `reviews` module). `@reblu/site-blocks` adds `Reviews`, a Server Component drop-in: a responsive grid with an accessible star rating, the author, the date, the text and a «Ver en <fuente>» link to the original (new tab, `rel="noopener nofollow"`), plus an optional tenant `notice` above or below the grid. Every existing export and namespace is unchanged.
+
 ## 1.29.0
 
 ### Minor Changes

package/README.md

@@ -236,6 +236,15 @@ const deadline = (ack: DataRequestSubmission) => ack.slaDueAt
 The list is base-api's `dataRequestTypeSchema`: a compile-time check and a unit
 test fail the build if the two ever disagree.
 
+### Reviews (REB-1272)
+
+`Review` is one published review from `GET /api/site/reviews`: `authorName`,
+`rating` (1–5), `text` (`null` for a star-only review), `reviewDate`
+(`YYYY-MM-DD`), `source` (`ReviewSource`: `GOOGLE`, `DOCTORALIA`,
+`TRIPADVISOR`, `TRUSTPILOT`, `FACEBOOK`, `TOP_DOCTORS`, `YELP`, `OTHER`),
+`sourceName` (the name a visitor reads, never `null`) and `sourceUrl` (the
+`https://` link to the original). It carries nothing that is not displayed.
+
 ### Guest course checkout (REB-1264)
 
 `AcademyCheckoutRequest` is the body of `POST /api/site/academy/checkout`

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.cjs","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n  // REB-1265..1268 — `data` of the additive content blocks, for the\n  // `@reblu/site-blocks` drop-in components that render them.\n  BeforeAfterData,\n  ChipsData,\n  IconCardsData,\n  // REB-1267 — the curated icon names of `icon_cards` (no uploads).\n  CardIcon,\n  ImageTextData,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n  // REB-1264 — guest course checkout (`POST /api/site/academy/checkout`): a\n  // course that needs no validation is bought in one step and the account is\n  // created after payment. The body, its full-invoice block, the Stripe\n  // session answer and the stable error codes.\n  AcademyCheckoutRequest,\n  AcademyCheckoutBilling,\n  AcademyCheckoutSession,\n  AcademyCheckoutErrorCode,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type {\n  WithdrawalRequestInput,\n  WithdrawalRequestSubmission,\n} from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.cjs","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n  // REB-1265..1268 — `data` of the additive content blocks, for the\n  // `@reblu/site-blocks` drop-in components that render them.\n  BeforeAfterData,\n  ChipsData,\n  IconCardsData,\n  // REB-1267 — the curated icon names of `icon_cards` (no uploads).\n  CardIcon,\n  ImageTextData,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n  // REB-1264 — guest course checkout (`POST /api/site/academy/checkout`): a\n  // course that needs no validation is bought in one step and the account is\n  // created after payment. The body, its full-invoice block, the Stripe\n  // session answer and the stable error codes.\n  AcademyCheckoutRequest,\n  AcademyCheckoutBilling,\n  AcademyCheckoutSession,\n  AcademyCheckoutErrorCode,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type { WithdrawalRequestInput, WithdrawalRequestSubmission } from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// Reviews (REB-1272) — published, verifiable reviews (`/api/site/reviews`).\nexport type { Review, ReviewSource } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}

package/dist/index.d.cts

@@ -128,7 +128,7 @@ export type LeadTouch = {    utm?: {        source?: string | undefined;
 
 export type LegacyPageType = "SERVICE" | "CUSTOM"
 
-export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;}
+export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;    documentVersions?: {        privacyPolicy: {            id: string;            version: number;            publishedAt: string;        } | null;        cookiePolicy: {            id: string;            version: number;            publishedAt: string;        } | null;        legalNotice: {            id: string;            version: number;            publishedAt: string;        } | null;        withdrawalPolicy: {            id: string;            version: number;            publishedAt: string;        } | null;    } | undefined;}
 
 export type LegalTermsVersion = {    id: string;    version: number;    publishedAt: string;    content: string;    contentHash: string;}
 
@@ -180,6 +180,10 @@ export type ProfessionalSummary = {    role: string | null;    fields?: {
 
 export type ResolvedEmbed = {    slug: string;    title: string;    excerpt: string | null;    coverImageUrl: string | null;    role: string | null;    pageType?: "custom" | "service" | "treatments" | "specialties" | "team" | "generic" | undefined;    category?: {        name: string;        slug: string;    } | null | undefined;}
 
+export type Review = {    id: string;    authorName: string;    rating: number;    text: string | null;    reviewDate: string;    source: "OTHER" | "GOOGLE" | "DOCTORALIA" | "TRIPADVISOR" | "TRUSTPILOT" | "FACEBOOK" | "TOP_DOCTORS" | "YELP";    sourceName: string;    sourceUrl: string;}
+
+export type ReviewSource = "OTHER" | "GOOGLE" | "DOCTORALIA" | "TRIPADVISOR" | "TRUSTPILOT" | "FACEBOOK" | "TOP_DOCTORS" | "YELP"
+
 export type SectionLayout = "TEXT" | "TEXT_IMAGE" | "IMAGE_TEXT" | "IMAGE_FULL" | "FEATURE_LIST" | "GALLERY" | "CTA_BLOCK"
 
 export type Seo = {    title: string;}

package/dist/index.d.ts

@@ -128,7 +128,7 @@ export type LeadTouch = {    utm?: {        source?: string | undefined;
 
 export type LegacyPageType = "SERVICE" | "CUSTOM"
 
-export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;}
+export type Legal = {    privacyPolicy: string | null;    termsAndConditions: string | null;    cookiePolicy: string | null;    termsVersion?: {        id: string;        version: number;        publishedAt: string;    } | null | undefined;    legalNotice?: string | null | undefined;    withdrawalPolicy?: string | null | undefined;    documentVersions?: {        privacyPolicy: {            id: string;            version: number;            publishedAt: string;        } | null;        cookiePolicy: {            id: string;            version: number;            publishedAt: string;        } | null;        legalNotice: {            id: string;            version: number;            publishedAt: string;        } | null;        withdrawalPolicy: {            id: string;            version: number;            publishedAt: string;        } | null;    } | undefined;}
 
 export type LegalTermsVersion = {    id: string;    version: number;    publishedAt: string;    content: string;    contentHash: string;}
 
@@ -180,6 +180,10 @@ export type ProfessionalSummary = {    role: string | null;    fields?: {
 
 export type ResolvedEmbed = {    slug: string;    title: string;    excerpt: string | null;    coverImageUrl: string | null;    role: string | null;    pageType?: "custom" | "service" | "treatments" | "specialties" | "team" | "generic" | undefined;    category?: {        name: string;        slug: string;    } | null | undefined;}
 
+export type Review = {    id: string;    authorName: string;    rating: number;    text: string | null;    reviewDate: string;    source: "OTHER" | "GOOGLE" | "DOCTORALIA" | "TRIPADVISOR" | "TRUSTPILOT" | "FACEBOOK" | "TOP_DOCTORS" | "YELP";    sourceName: string;    sourceUrl: string;}
+
+export type ReviewSource = "OTHER" | "GOOGLE" | "DOCTORALIA" | "TRIPADVISOR" | "TRUSTPILOT" | "FACEBOOK" | "TOP_DOCTORS" | "YELP"
+
 export type SectionLayout = "TEXT" | "TEXT_IMAGE" | "IMAGE_TEXT" | "IMAGE_FULL" | "FEATURE_LIST" | "GALLERY" | "CTA_BLOCK"
 
 export type Seo = {    title: string;}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.js","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n  // REB-1265..1268 — `data` of the additive content blocks, for the\n  // `@reblu/site-blocks` drop-in components that render them.\n  BeforeAfterData,\n  ChipsData,\n  IconCardsData,\n  // REB-1267 — the curated icon names of `icon_cards` (no uploads).\n  CardIcon,\n  ImageTextData,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n  // REB-1264 — guest course checkout (`POST /api/site/academy/checkout`): a\n  // course that needs no validation is bought in one step and the account is\n  // created after payment. The body, its full-invoice block, the Stripe\n  // session answer and the stable error codes.\n  AcademyCheckoutRequest,\n  AcademyCheckoutBilling,\n  AcademyCheckoutSession,\n  AcademyCheckoutErrorCode,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type {\n  WithdrawalRequestInput,\n  WithdrawalRequestSubmission,\n} from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AAkFO,IAAM,kBAAA,GAAqB,OAAO,MAAA,CAAO;AAAA,EAC9C,QAAA;AAAA,EACA,eAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAU","file":"index.js","sourcesContent":["/**\n * `@reblu/site-contracts` — public, dependency-free TypeScript types for the\n * Reblu SITE API (REB-414 / design doc §2).\n *\n * These types are the SDK-facing view of every `/api/site/*` response. They are\n * re-derived (`z.infer`) from the hand-authored response schemas that live in\n * base-api (`apps/base-api/src/lib/contracts/*.contract.ts`) and imported here\n * through the build-time-only `@reblu/base-api-contracts` type alias.\n *\n * Guarantees (enforced by the leakage guard tests):\n *   - Everything below is `export type` — the import is erased at build time, so\n *     NO Zod and NO Prisma reaches a consumer's runtime or `node_modules` graph.\n *     The one exception is `DATA_REQUEST_TYPES` (REB-1005): a plain, import-free\n *     array literal, the package's only runtime value.\n *   - The published `.d.ts` is flattened and self-contained: the alias and\n *     `z.infer` do not survive into the emitted declarations.\n *   - Never re-exports an internal / Prisma-generated type — only the public\n *     output DTOs base-api explicitly publishes.\n *\n * When base-api adds a new public contract type, add it to the matching group\n * below. The explicit list (over `export type *`) keeps the public surface a\n * reviewed, intentional decision and avoids leaking internal `*Schema` names.\n */\n\n// Envelope / pagination\nexport type { PaginationMeta } from '@reblu/base-api-contracts'\n\n// Analytics + shared contact-form mode\nexport type { Analytics, ContactFormMode } from '@reblu/base-api-contracts'\n\n// REB-845 — the tenant-editable cookie banner copy shape, standalone (not just\n// nested in `Analytics`), so `@reblu/site-next`'s `cookieBannerToConsentTexts`\n// can type its input against the real contract instead of a hand-rolled copy.\nexport type { CookieBanner } from '@reblu/base-api-contracts'\n\n// Site config\nexport type {\n  Config,\n  ConfigAddress,\n  ConfigFiscal,\n  ConfigFiscalRegistry,\n  ConfigSocial,\n  ConfigTaxIdKind,\n  // REB-826 — typed opening hours.\n  ConfigOpeningHours,\n  ConfigOpeningHoursRange,\n  ConfigOpeningHoursDay,\n} from '@reblu/base-api-contracts'\n\n// REB-871 — the resolved `seo` block on every detail response (pages, blog\n// posts, shop products, academy courses). `seo.title` is the FINAL page title.\nexport type { Seo } from '@reblu/base-api-contracts'\n\n// Contact form\nexport type { ContactFormSubmission, ContactFormInput } from '@reblu/base-api-contracts'\n// REB-1078 — the raw lead-origin touches a SITE sends in `metadata.attribution`\n// (contact form and `/api/site/leads`); base-api classifies the channel.\nexport type { LeadAttribution, LeadTouch } from '@reblu/base-api-contracts'\n\n// Leads\nexport type { LeadInput, LeadSubmission } from '@reblu/base-api-contracts'\n\n// GDPR data-subject requests (REB-77 endpoint, REB-980 SDK) — the public\n// `/derechos-rgpd` form body and its 72h acknowledgement.\nexport type {\n  DataRequestInput,\n  DataRequestSubmission,\n  DataRequestType,\n} from '@reblu/base-api-contracts'\nimport type { DataRequestType } from '@reblu/base-api-contracts'\n\n/**\n * REB-1005 — every GDPR right a data subject can exercise, in base-api's order.\n * The ONE runtime value this package ships: server code (a SITE's Route\n * Handler, `@reblu/site-next`'s `createDataRequestRoute`) needs the list too,\n * and `@reblu/site-blocks` re-exports it as before.\n *\n * Single source: base-api's `dataRequestTypeSchema`. `satisfies` rejects a\n * member base-api does not know, `MissingDataRequestType` below rejects one it\n * knows and this list lacks, and `tests/unit/data-request-types.test.ts` pins\n * the order. Plain array literal, no import — the runtime stays dependency-free.\n */\nexport const DATA_REQUEST_TYPES = Object.freeze([\n  'ACCESS',\n  'RECTIFICATION',\n  'ERASURE',\n  'OBJECTION',\n  'PORTABILITY',\n  'RESTRICTION',\n  'AUTOMATED_DECISION',\n  'INFORMATION',\n] as const) satisfies readonly DataRequestType[]\n\n/** Compile error when base-api adds a right this list does not carry. */\ntype AssertNoneMissing<T extends never> = T\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\ntype MissingDataRequestType = AssertNoneMissing<\n  Exclude<DataRequestType, (typeof DATA_REQUEST_TYPES)[number]>\n>\n\n// Blog\nexport type {\n  BlogAuthor,\n  BlogAuthorDetail,\n  BlogCategory,\n  BlogCategoryWithCount,\n  BlogTag,\n  BlogPostListItem,\n  BlogPostDetail,\n  BlogPostPreview,\n  BlogSlug,\n} from '@reblu/base-api-contracts'\n\n// Pages\nexport type {\n  // The flexible pageType (service|custom|treatments|specialties|team|generic)\n  // — REB-63: this is what `pages.list`'s `type` filter actually validates\n  // against server-side (`pagesListParamsSchema`), not `LegacyPageType`.\n  PageType,\n  // Legacy DB page type (SERVICE|CUSTOM) — the `type`/`category` fields still\n  // carried on each `PageListItem`/`PageDetail` for backward compat during the\n  // REB-75 dual-read window. NOT the `pages.list` filter's value space anymore.\n  LegacyPageType,\n  PageContentMode,\n  SectionLayout,\n  PageCategoryRef,\n  PageListItem,\n  PageSectionImage,\n  PageSection,\n  PageDetail,\n  PageSlug,\n  // REB-63: `pages.list`'s sort param — same reasoning as AcademyCourseSort\n  // below (a typo is a compile error instead of a silent no-op fallback).\n  PagesListSort,\n  // REB-869 — `pages.list`'s query, incl. `featured` (with `category`: that\n  // category's featured pages, max 3, in their stored order).\n  PagesListQuery,\n  // REB-75 D-D — the typed block registry on `PageDetail.blocks[]`.\n  BlockType,\n  Block,\n  // REB-849 — each block mirrors its parent section's heading/backgroundColor/\n  // cta; REB-851 phase 1 — doctor_embed/specialty_embed blocks additionally\n  // carry `resolved` (present only on those two block types).\n  PageBlock,\n  BlockCta,\n  ResolvedEmbed,\n  // REB-867 — slugs are unique per category: the embed reference shape\n  // (`pageId`/`categorySlug`) and the 409 body of an ambiguous `GET /pages/[slug]`.\n  EmbedReferenceData,\n  PageAmbiguousSlugError,\n  // REB-1265..1268 — `data` of the additive content blocks, for the\n  // `@reblu/site-blocks` drop-in components that render them.\n  BeforeAfterData,\n  ChipsData,\n  IconCardsData,\n  // REB-1267 — the curated icon names of `icon_cards` (no uploads).\n  CardIcon,\n  ImageTextData,\n} from '@reblu/base-api-contracts'\n\n// Professional profile (REB-63) — pageType='team' only. Sector-agnostic\n// structured CV, same platform-shape/tenant-content split as CustomFieldDefinition.\n// REB-1099: `ProfessionalField` — a tenant-defined field (e.g. a registration\n// number) on the card (`ProfessionalSummary.fields`) and profile.\nexport type {\n  ProfessionalField,\n  ProfessionalSummary,\n  ProfessionalProfile,\n  ProfessionalCv,\n  ProfessionalCvEntry,\n  ProfessionalLanguage,\n  ProfessionalLanguageLevel,\n  ProfessionalSocialLink,\n  ProfessionalSocialPlatform,\n} from '@reblu/base-api-contracts'\n\n// Custom-field registry (REB-475 / REB-75) — entity-agnostic, shared with pages/team\nexport type {\n  CustomFieldValueType,\n  CustomFieldEntityType,\n  CustomFieldOption,\n  CustomFieldDefinition,\n} from '@reblu/base-api-contracts'\n\n// Shop\nexport type {\n  TaxType,\n  ProductType,\n  ShopConfig,\n  // Store-wide product trust items (REB-858)\n  ShopProductTrustIcon,\n  ShopProductTrustItem,\n  ShopTaxRateRef,\n  ShopProductImage,\n  ShopProductVideo,\n  ShopProductCategoryRef,\n  ShopInventoryRef,\n  ShopCategory,\n  ShopProductListItem,\n  ShopProductVariant,\n  ShopBundleComponent,\n  ShopRelatedProduct,\n  ShopProductDetail,\n  // Taxonomy + attributes + facets (REB-474/475)\n  ShopTaxonomyTermRef,\n  ShopProductAttributes,\n  // Per-axis selection mode (REB-809/REB-801)\n  ShopTaxonomySelectionMode,\n  ShopSort,\n  ShopProductListParams,\n  ShopFacets,\n  // Write inputs (REB-438)\n  ShopCartItemInput,\n  ShopAddressInput,\n  ShopBillingInput,\n  ShopCheckoutInput,\n  ShopValidateCartInput,\n  ShopApplyDiscountInput,\n  // Write responses (REB-438)\n  ShopCheckoutSession,\n  ShopCartValidationError,\n  ShopCartValidationItem,\n  ShopCartValidation,\n  ShopDiscountApplication,\n  // Automatic staff discount, additive on the write responses (REB-1131)\n  ShopStaffAutoDiscount,\n  // Order lookup (REB-829)\n  ShopOrderItem,\n  ShopOrder,\n  // The order's invoice reference (REB-73)\n  ShopOrderInvoice,\n  // Stable, machine-readable write-endpoint error codes (REB-836)\n  ShopErrorCode,\n  // Single-step checkout (REB-1197 / REB-1198): delivery rules, pickup\n  // points, resolved checkout copy, the terms version to accept, the\n  // delivery choice and the pre-payment quote.\n  ShopPickupLocation,\n  ShopCheckoutDeliveryConfig,\n  ShopCheckoutCopy,\n  ShopTermsVersionRef,\n  ShopFulfillmentInput,\n  ShopQuoteInput,\n  ShopQuoteLine,\n  ShopQuote,\n} from '@reblu/base-api-contracts'\n\n// REB-834 — `POST /api/site/shop/check-email` is deprecated: it was an\n// account-enumeration oracle and now always answers `{ exists: false }`.\n// Kept (a minor may only deprecate); removed in the next major.\nexport type {\n  /**\n   * @deprecated REB-834 — `POST /api/site/shop/check-email` no longer reveals\n   * whether an account exists. Do not call it; removed in the next major.\n   */\n  ShopCheckEmailInput,\n  /**\n   * @deprecated REB-834 — `exists` is always `false`. Never branch UI on it:\n   * the checkout always offers «Iniciar sesión o continuar como invitado» and\n   * the server links the order to an existing account after payment. Removed\n   * in the next major.\n   */\n  ShopEmailCheck,\n} from '@reblu/base-api-contracts'\n\n// Academy (REB-507) — public course catalogue. `AcademyCourseSort` is the query\n// contract for the `sort` param, so the SDK can type it as a union instead of a\n// bare string (an unknown key is silently ignored server-side).\nexport type {\n  AcademyCourseSort,\n  // REB-547 — the documented catalogue query: q, sort, category, instructor\n  // (a user id from `GET /api/site/academy/instructors`), free and the price\n  // range in integer cents.\n  AcademyCourseListQuery,\n  AcademyCategoryPublic,\n  AcademyLessonPublic,\n  AcademyModulePublic,\n  AcademyInstructorPublic,\n  AcademyCourseSummary,\n  AcademyCourseDetail,\n  // REB-83 — tenant-configurable validation fields (drives the enrollment CTA form).\n  AcademyValidationFieldPublic,\n  // REB-1135 — a free-preview lesson, viewable by the public\n  // (`GET /api/site/academy/courses/{slug}/lessons/{lessonSlug}`).\n  AcademyLessonPreview,\n  AcademyLessonPreviewVideo,\n  // REB-1234 — tenant academy settings for the SITE\n  // (`GET /api/site/academy/config`): which catalogue filters are switched on.\n  AcademyConfigPublic,\n  AcademyCatalogFiltersPublic,\n  // REB-1264 — guest course checkout (`POST /api/site/academy/checkout`): a\n  // course that needs no validation is bought in one step and the account is\n  // created after payment. The body, its full-invoice block, the Stripe\n  // session answer and the stable error codes.\n  AcademyCheckoutRequest,\n  AcademyCheckoutBilling,\n  AcademyCheckoutSession,\n  AcademyCheckoutErrorCode,\n} from '@reblu/base-api-contracts'\n\n// Legal\nexport type { Legal, LegalTermsVersion } from '@reblu/base-api-contracts'\n// REB-1201 — the withdrawal form (`POST /api/site/withdrawal-requests`).\nexport type { WithdrawalRequestInput, WithdrawalRequestSubmission } from '@reblu/base-api-contracts'\n\n// CTAs\nexport type { Cta } from '@reblu/base-api-contracts'\n\n// Trust badges\nexport type { TrustBadge, TrustBadgeType } from '@reblu/base-api-contracts'\n\n// Reviews (REB-1272) — published, verifiable reviews (`/api/site/reviews`).\nexport type { Review, ReviewSource } from '@reblu/base-api-contracts'\n\n// SITE capability manifest (`/.well-known/reblu-site.json`) — REB-777.\n// Direction note (see `site-manifest.contract.ts` in base-api): this is the\n// one contract group a SITE produces and base-api consumes, the opposite of\n// every group above. The TYPE still flows through this same alias so the\n// SDK and nexus never describe two different shapes for it; the real Zod\n// validation stays in base-api only — this package never gains a Zod\n// runtime dependency.\nexport type {\n  SiteManifest,\n  SiteManifestSurfaceValue,\n  SiteCapabilitySurfaceKey,\n} from '@reblu/base-api-contracts'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reblu/site-contracts",
-  "version": "1.29.0",
+  "version": "1.30.0",
   "private": false,
   "description": "Public, dependency-free TypeScript types for the Reblu SITE API (no Zod, no Prisma at runtime; one runtime value: DATA_REQUEST_TYPES).",
   "license": "Apache-2.0",