@rebuy/rebuy 2.34.0-rc.3 → 2.35.0

package/dist/index.js

@@ -42,6 +42,7 @@ __export(src_exports, {
   CABDiscountSection: () => CABDiscountSection,
   CABExperiment: () => CABExperiment,
   CABImageSection: () => CABImageSection,
+  CABImageSectionFields: () => CABImageSectionFields,
   CABIntegrations: () => CABIntegrations,
   CABLayoutSection: () => CABLayoutSection,
   CABMonetizeSection: () => CABMonetizeSection,
@@ -1830,13 +1831,82 @@ var import_zod27 = require("zod");
 
 // src/schema/widgets/checkout-and-beyond/banner.ts
 var import_zod11 = require("zod");
+
+// src/schema/widgets/checkout-and-beyond/utils.ts
+var import_es_toolkit2 = require("es-toolkit");
+var import_compat = require("es-toolkit/compat");
+
+// src/schema/widgets/checkout-and-beyond/regex.ts
+var ARRAY_INDEX_STRING = /^(0|[1-9]\d*)$/;
+var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
+var HEX_COLOR_REGEX = /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/;
+var ROOT_RELATIVE_PATH_REGEX = /^\/(?!\/)/;
+var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
+
+// src/schema/widgets/checkout-and-beyond/utils.ts
+var isHTML = (html = "") => {
+  if (typeof window !== "undefined") {
+    const parser = new DOMParser();
+    const doc = parser.parseFromString(html, "text/html");
+    const hasHTML = (nodeList) => Array.from(nodeList).some((node) => node.nodeType === 1);
+    return hasHTML(doc.body.childNodes) || hasHTML(doc.head.childNodes);
+  }
+  return html.search(HTML_TAGS_REGEX) !== -1;
+};
+var hasHTMLInDoc = (doc) => doc.content.some(({ content = [] }) => content.some(({ text }) => isHTML(text)));
+var checkForHTML = (input) => !((0, import_compat.isString)(input) && isHTML(input) || (0, import_es_toolkit2.isPlainObject)(input) && hasHTMLInDoc(input));
+var NO_HTML = { message: "HTML is not supported" };
+var isBannerType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.banner;
+var isButtonType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.button;
+var isCarouselType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.carousel;
+var isCartLineType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.cartLine;
+var isDataSourceType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.dataSource;
+var isDiscountType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.discount;
+var isImageType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.image;
+var isLayoutType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.layout;
+var isMonetizeType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.monetize;
+var isOffersType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.offers;
+var isOverlayType = (section) => isLayoutType(section) && (0, import_compat.get)(section, "buttonField") === ButtonField.overlayContent;
+var isProductType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.product;
+var isProductsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.products;
+var isProgressBarType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.progressBar;
+var isQuantityType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.quantity;
+var isReviewsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.reviews;
+var isTextType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.text;
+var isVariantsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.variants;
+var hasOnlyNumericKeys = (input) => !!(0, import_compat.size)(input) && (0, import_compat.every)(input, (_, key) => ARRAY_INDEX_STRING.test(key) && Number.isSafeInteger(Number(key)));
+var numericObjectToArray = (input) => (0, import_compat.toPairs)(input).sort(([a], [b]) => Number(a) - Number(b)).map(([_, value]) => value);
+var convertNumericObjects = (input) => {
+  if ((0, import_compat.isArray)(input)) return (0, import_compat.map)(input, convertNumericObjects);
+  if ((0, import_es_toolkit2.isPlainObject)(input)) {
+    const obj = input;
+    return hasOnlyNumericKeys(obj) ? (0, import_compat.map)(numericObjectToArray(obj), convertNumericObjects) : (0, import_es_toolkit2.mapValues)(obj, convertNumericObjects);
+  }
+  return input;
+};
+
+// src/schema/widgets/checkout-and-beyond/banner.ts
 var CABBannerSection = import_zod11.z.lazy(
   () => CABLayoutSection.omit({ sectionType: true }).extend({
     buttonField: import_zod11.z.enum(buttonFields).optional(),
     color: import_zod11.z.enum(bannerColors).default("info"),
     dismissible: import_zod11.z.boolean().default(true),
-    /** The `s-banner` heading — localized content (a buyer can see a merchant-composed banner). Absent ⇒ no heading. */
-    heading: import_zod11.z.record(import_zod11.z.string(), import_zod11.z.string()).optional(),
+    /**
+     * The `s-banner` heading — localized content (a buyer can see a merchant-composed banner). Absent OR
+     * blank ⇒ no heading; the renderer emits no heading slot for `''` rather than an empty one.
+     *
+     * Merchant-composed buyer-facing plain text, so it rejects HTML at the boundary the same way
+     * `CABImageSection.altText` and `CABTextSection.content` do (the unchecked localized records elsewhere —
+     * `progressBar`'s gift labels, `reviews`' plurals — are converter/constant-sourced, not merchant input).
+     *
+     * The refinement is a last-resort ASSERTION, not the normalization boundary: `normalizeTextContent` only
+     * rewrites `sectionType: 'text'` nodes' `content`, so nothing strips markup or canonicalizes `{token}`
+     * here. A producer must strip upstream the way `composeOffer` does for `altText`. Get it wrong and
+     * `salvageSections` stubs the whole banner (children included) with a drift report — degraded, reported,
+     * not a 500. Nothing emits `heading` yet; the first converter that maps merchant banner copy into it
+     * either strips first or teaches `normalizeTextContent` to strip this field.
+     */
+    heading: import_zod11.z.record(import_zod11.z.string(), import_zod11.z.string().refine(checkForHTML, NO_HTML)).optional(),
     sectionType: import_zod11.z.literal(SectionType.banner).default(SectionType.banner)
   })
 );
@@ -1933,62 +2003,15 @@ var IconSize = freezeEnum(iconSizes);
 var iconTones = ["auto", "critical", "custom", "info", "neutral", "success", "warning"];
 var IconTone = freezeEnum(iconTones);
 
-// src/schema/widgets/checkout-and-beyond/regex.ts
-var ARRAY_INDEX_STRING = /^(0|[1-9]\d*)$/;
-var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
-var HEX_COLOR_REGEX = /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/;
-var ROOT_RELATIVE_PATH_REGEX = /^\/(?!\/)/;
-var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
-
-// src/schema/widgets/checkout-and-beyond/utils.ts
-var import_es_toolkit2 = require("es-toolkit");
-var import_compat = require("es-toolkit/compat");
-var isHTML = (html = "") => {
-  if (typeof window !== "undefined") {
-    const parser = new DOMParser();
-    const doc = parser.parseFromString(html, "text/html");
-    const hasHTML = (nodeList) => Array.from(nodeList).some((node) => node.nodeType === 1);
-    return hasHTML(doc.body.childNodes) || hasHTML(doc.head.childNodes);
-  }
-  return html.search(HTML_TAGS_REGEX) !== -1;
-};
-var hasHTMLInDoc = (doc) => doc.content.some(({ content = [] }) => content.some(({ text }) => isHTML(text)));
-var checkForHTML = (input) => !((0, import_compat.isString)(input) && isHTML(input) || (0, import_es_toolkit2.isPlainObject)(input) && hasHTMLInDoc(input));
-var NO_HTML = { message: "HTML is not supported" };
-var isBannerType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.banner;
-var isButtonType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.button;
-var isCarouselType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.carousel;
-var isCartLineType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.cartLine;
-var isDataSourceType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.dataSource;
-var isDiscountType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.discount;
-var isImageType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.image;
-var isLayoutType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.layout;
-var isMonetizeType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.monetize;
-var isOffersType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.offers;
-var isOverlayType = (section) => isLayoutType(section) && (0, import_compat.get)(section, "buttonField") === ButtonField.overlayContent;
-var isProductType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.product;
-var isProductsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.products;
-var isProgressBarType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.progressBar;
-var isQuantityType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.quantity;
-var isReviewsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.reviews;
-var isTextType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.text;
-var isVariantsType = (section) => (0, import_compat.get)(section, "sectionType") === SectionType.variants;
-var hasOnlyNumericKeys = (input) => !!(0, import_compat.size)(input) && (0, import_compat.every)(input, (_, key) => ARRAY_INDEX_STRING.test(key) && Number.isSafeInteger(Number(key)));
-var numericObjectToArray = (input) => (0, import_compat.toPairs)(input).sort(([a], [b]) => Number(a) - Number(b)).map(([_, value]) => value);
-var convertNumericObjects = (input) => {
-  if ((0, import_compat.isArray)(input)) return (0, import_compat.map)(input, convertNumericObjects);
-  if ((0, import_es_toolkit2.isPlainObject)(input)) {
-    const obj = input;
-    return hasOnlyNumericKeys(obj) ? (0, import_compat.map)(numericObjectToArray(obj), convertNumericObjects) : (0, import_es_toolkit2.mapValues)(obj, convertNumericObjects);
-  }
-  return input;
-};
-
 // src/schema/widgets/checkout-and-beyond/image.ts
-var CABImageSection = import_zod12.z.object({
+var CABImageSectionFields = import_zod12.z.object({
   altText: import_zod12.z.string().refine(checkForHTML, NO_HTML).default(""),
-  /** Image width÷height (e.g. `46` for the progress-bar fill); `null` renders at natural size. Any ratio — never limited to 1. */
-  aspectRatio: import_zod12.z.number().nullable().default(null),
+  /**
+   * Image width÷height (e.g. `46` for the progress-bar fill); `null` renders at natural size. Any POSITIVE
+   * ratio — never limited to 1, but never `0`/negative either: a renderer dividing by it would get `Infinity`,
+   * and CSS `aspect-ratio` drops a negative value and silently reverts to natural size.
+   */
+  aspectRatio: import_zod12.z.number().positive().nullable().default(null),
   border: import_zod12.z.lazy(() => CABBorder),
   buttonField: import_zod12.z.enum(buttonFields).optional(),
   /**
@@ -1997,10 +2020,17 @@ var CABImageSection = import_zod12.z.object({
    * implementation — they were never significant to rendering (`icons`, plural, is NOT deprecated, just one of
    * those inert legacy tags); `icon` is the first value that means anything.
    *
-   * INVARIANT (not schema-encoded — `CABImageSection` is a discriminated-union member, so it can't carry a
-   * `.refine`): `category: 'icon'` ⇔ `source` is an icon name; any other category ⇒ `source` is a URL/token.
-   * The renderer enforces it by branching on `category`, and icon-mode sources are client-assembled from known
-   * `iconNames` constants (never merchant/server data), so a mismatched pairing can't arise in practice.
+   * INVARIANT, encoded by the `.superRefine` below (a refined object IS a valid `z.discriminatedUnion` member
+   * in zod 4 — see `CABTextSection`): `category: 'icon'` ⇒ `source` is an icon name or `''` (icon not yet
+   * chosen); any other category ⇒ `source` is NOT a bare icon name, so it stays a URL/token/`''`.
+   *
+   * Encoded rather than left to the renderer because `source` is ONE union with no category gate, so widening
+   * it with `iconNames` also widened what a STORED payload may contain: 14 of the names are plain English
+   * words (`image`, `x`, `search`, `note`, `order`, `globe`, …), and a legacy `source: 'image'` used to fail
+   * parse — which `salvageSections` turns into a null-rendering stub PLUS a drift report. Ungated it would
+   * instead parse and reach the renderer as `<img src="image">`: a broken image, silently, where the old
+   * behavior degraded gracefully and told us about it. The client-assembled half of the invariant was never
+   * the risky half.
    */
   category: import_zod12.z.enum(["gallery", "icon", "icons", "payment-methods", "secure-checkout"]).nullable().default(null),
   /** `icon`-mode only: the `s-icon` `size`; `null` ⇒ the component default (`base`). Ignored by image treatments. */
@@ -2018,10 +2048,31 @@ var CABImageSection = import_zod12.z.object({
   rule: CABRule.optional(),
   sectionId: import_zod12.z.uuid().default(() => (0, import_uuid.v7)()),
   sectionType: import_zod12.z.literal(SectionType.image).default(SectionType.image),
-  /** A URL / dynamic token for an image, an empty default, or an icon NAME when `category: 'icon'`. */
+  /**
+   * An image URL or dynamic token, an empty default, or — when `category: 'icon'` — an icon NAME. Icon mode
+   * takes a name or `''` only, NOT a token: no renderer resolves a token to an icon today, so accepting one
+   * would promise a capability that doesn't exist. Widen the refine's carve-out to `DYNAMIC_TOKEN_REGEX` when a
+   * server-chosen tier icon actually needs it.
+   */
   source: import_zod12.z.union([import_zod12.z.url(), import_zod12.z.literal(""), import_zod12.z.string().regex(DYNAMIC_TOKEN_REGEX), import_zod12.z.enum(iconNames)]).default(""),
   width: import_zod12.z.number().default(100)
 });
+var iconNameSet = new Set(iconNames);
+var isIconName = (source) => iconNameSet.has(source);
+var CABImageSection = CABImageSectionFields.superRefine(({ category, source }, ctx) => {
+  if (category === "icon" && source !== "" && !isIconName(source))
+    ctx.addIssue({
+      code: "custom",
+      message: "icon-mode source must be an icon name",
+      path: ["source"]
+    });
+  if (category !== "icon" && isIconName(source))
+    ctx.addIssue({
+      code: "custom",
+      message: "source must be a URL or dynamic token unless category is `icon`",
+      path: ["source"]
+    });
+});
 
 // src/schema/widgets/checkout-and-beyond/text.ts
 var import_compat2 = require("es-toolkit/compat");
@@ -2142,12 +2193,20 @@ var CABButtonSection = import_zod14.z.object({
   sections: import_zod14.z.union([import_zod14.z.array(CABButtonContent), import_zod14.z.strictObject({}).transform(() => [])]).default(() => []),
   sectionType: import_zod14.z.literal(SectionType.button).default(SectionType.button),
   /**
-   * The smart-cart tier this button acts on (`addGift`/`removeGift`): scopes the click to one tier's gift,
-   * the same way {@link CABTextSection} carries a `tier`. The client resolves the tier's gift (productId) from
-   * the progress-bar context by this `tierId` — the button node stays data, no bespoke per-tier wiring. Absent
-   * on non-gift buttons (offer add/remove, navigation, links).
+   * The smart-cart tier this button acts on (`addGift`/`removeGift`): scopes the click to one tier's gift. The
+   * client resolves the tier's gift (productId) from the progress-bar context by this `tierId` — the button node
+   * stays data, no bespoke per-tier wiring. Absent on non-gift buttons (offer add/remove, navigation, links).
+   *
+   * Deliberately NOT `CABTextTier` (the shape `CABTextSection.tier` uses): a gift button acts on a tier the bar
+   * already resolved, so it needs the id and nothing else. Reusing the text tier would make `threshold`
+   * required, leave `tierId` optional, and DEFAULT `tierType` to `'shipping'` — a schema-supplied wrong answer
+   * on a gift button. Unknown keys are stripped, so a client spreading a whole tier in still parses.
+   *
+   * `.min(1)` because an empty id IS the silently-id-less state this shape exists to prevent: the client's
+   * lookup finds no tier and the click resolves to nothing. Safe to bound — the field is new, so there are no
+   * stored payloads to grandfather, and the producer is client code, not a merchant form.
    */
-  tier: CABTextTier.optional(),
+  tier: import_zod14.z.object({ tierId: import_zod14.z.string().min(1) }).optional(),
   /** Fire-and-forget pixel POSTed when the button is clicked (e.g. a Monetize decline). */
   trackingUrl: import_zod14.z.string().optional()
 });
@@ -2446,7 +2505,9 @@ var CABProgressTier = import_zod23.z.object({
    * type default — 'Free Shipping' or '{n}% Discount'. A PRODUCT tier gets NO converter label: its name is
    * the gift PRODUCT title, which the converter can't supply (config carries only product IDs), so the
    * client resolves it (authoritative Shopify title, React parity) with its own localized generic fallback.
-   * Localized content; absent ⇒ no label under the tier's icon. Plain text — a compact icon+label.
+   * Localized content; absent OR blank ⇒ no label under the tier's icon (the converter's `toTierMeta` already
+   * turns a blank label into an absent key, and a client-authored blank means the same thing — the renderer
+   * emits no caption slot rather than an empty one). Plain text — a compact icon+label.
    */
   label: import_zod23.z.record(import_zod23.z.string(), import_zod23.z.string()).optional(),
   /**