@rebuy/rebuy 3.21.0 → 3.22.0

package/dist/server/adsEngine.d.ts

@@ -6,13 +6,17 @@ import { type MonetizeInput, type ServerContext } from '../server/shared';
  * built (impression/decline/click) — the composer wires them onto the card verbatim.
  */
 export declare const AdsEngineOffer: z.ZodObject<{
+    callout: z.ZodCatch<z.ZodString>;
     click_url: z.ZodString;
     cta: z.ZodString;
     decline_cta: z.ZodCatch<z.ZodString>;
     decline_url: z.ZodString;
     description: z.ZodString;
+    disclaimer: z.ZodCatch<z.ZodString>;
+    extended_disclaimer: z.ZodCatch<z.ZodString>;
     headline: z.ZodString;
     id: z.ZodString;
+    image_alt: z.ZodCatch<z.ZodString>;
     image_url: z.ZodOptional<z.ZodString>;
     view_url: z.ZodString;
 }, z.core.$strip>;

package/dist/server/index.cjs

@@ -4184,14 +4184,22 @@ var transactionItems = (input) => (input.transactionItems?.map(({ id, priceCents
   type
 })) ?? input.cart.items.map(({ productId, quantity }) => ({ id: productId, quantity }))).slice(0, MAX_TRANSACTION_ITEMS);
 var AdsEngineOffer = import_zod28.z.object({
+  /** Pill-style value prop ("Get $45 Cashback"). Carried through the parse; the card does not render it yet (REB-24429 — pill design pending). */
+  callout: import_zod28.z.string().catch(""),
   click_url: import_zod28.z.string(),
   cta: import_zod28.z.string(),
   /** `omitempty` on the ad server — a bid without it must not fail the parse and drop the whole batch (composeOffer falls back to 'No Thanks'). */
   decline_cta: import_zod28.z.string().catch(""),
   decline_url: import_zod28.z.string(),
   description: import_zod28.z.string(),
+  /** Short legal disclosure (FDIC / auto-renewal / FTC-affiliation lines). Rendered subdued under the CTAs. */
+  disclaimer: import_zod28.z.string().catch(""),
+  /** Long legal text behind the disclosure toggle in the composed card (REB-24429). */
+  extended_disclaimer: import_zod28.z.string().catch(""),
   headline: import_zod28.z.string(),
   id: import_zod28.z.string(),
+  /** Advertiser-supplied image alt; the composed card falls back to the stripped headline when empty. */
+  image_alt: import_zod28.z.string().catch(""),
   image_url: import_zod28.z.string().optional(),
   view_url: import_zod28.z.string()
 });
@@ -4208,6 +4216,15 @@ var isTestingRequest = (input, isProduction) => !isProduction || !!input.testing
 var buildAdsParams = (input, publisherKey, supplyKey, testing, userAgent, ipAddress) => {
   const items = transactionItems(input);
   return {
+    /**
+     * The engine converts text fields to the requested format before responding (Fluent's source
+     * format is html). `html` makes that conversion a no-op, so the canonical HTML→Tiptap pipeline
+     * receives the DSP's original markup — the default (markdown) would hand it `**bold**` and
+     * `[link](url)` syntax the pipeline renders literally. Contract verified against ad-server
+     * PR #349: the engine lowercases/trims the value, `html` is the accepted spelling, and an
+     * unrecognized value falls through unconverted rather than erroring.
+     */
+    format: "html",
     limit: String(OFFER_LIMIT),
     placement: input.placement,
     publisher_key: publisherKey,
@@ -4255,6 +4272,14 @@ var fetchAdsEngineOffers = async (input, ctx, prefetched) => {
   return { offers: AdsEngineResponse.parse(upstream).offers, storeName };
 };
 
+// src/transforms/htmlToPlainText.ts
+var paragraphText = (paragraph) => paragraph.content.map((run) => run.text).join("");
+var FORCE_PARSER = { defaultTextStyle: {} };
+var withoutTagShapes = (text2) => isHTML(text2) ? text2.replace(/[<>]/g, "") : text2;
+var htmlToPlainText = (html) => withoutTagShapes(
+  normalizeTextValue(html, FORCE_PARSER).content.map((paragraph) => paragraphText(paragraph).trim()).filter((line) => line !== "").join("\n")
+);
+
 // src/server/composeOffer.ts
 var ACCEPT_FALLBACK = "Accept";
 var DECLINE_FALLBACK = "No Thanks";
@@ -4264,8 +4289,19 @@ var label = (text2) => ({
   sectionType: SectionType.text
 });
 var text = (content) => ({ content: { en: content }, sectionType: SectionType.text });
+var AS_DOC = { defaultTextStyle: {} };
+var safeTextValue = (raw, options) => {
+  const converted = normalizeTextValue(raw, options);
+  return checkForHTML(converted) ? converted : normalizeTextValue(htmlToPlainText(raw), options);
+};
+var baseText = (raw) => ({ content: { en: safeTextValue(raw, AS_DOC) }, sectionType: SectionType.text });
+var dspLabel = (raw, fallback) => ({
+  buttonField: ButtonField.buttonLabel,
+  content: { en: htmlToPlainText(raw) === "" ? fallback : safeTextValue(raw, AS_DOC) },
+  sectionType: SectionType.text
+});
 var smallText = (raw) => ({
-  content: { en: normalizeTextValue(raw, { defaultTextStyle: { fontSize: "small" } }) },
+  content: { en: safeTextValue(raw, { defaultTextStyle: { fontSize: "small" } }) },
   sectionType: SectionType.text
 });
 var styled = (value, { align, bold, color, fontSize, href }) => ({
@@ -4308,9 +4344,43 @@ var headerSections = (input, storeName) => [
   },
   text(input.orderName ? `Order ${input.orderName} Confirmed` : "Order Confirmed")
 ];
+var SHOW_EXTENDED = "showExtendedDisclaimer";
+var LEGAL_STYLE = { defaultTextStyle: { color: TextColorName.subdued, fontSize: "extraSmall" } };
+var legalCopy = (raw, visibleWhen) => ({
+  content: { en: safeTextValue(raw, LEGAL_STYLE) },
+  sectionType: SectionType.text,
+  ...visibleWhen !== void 0 && { visibility: { variable: SHOW_EXTENDED, visibleWhen } }
+});
+var disclosureToggle = (text2, visibleWhen) => ({
+  buttonStyle: ButtonStyle.plain,
+  sections: [label(text2)],
+  sectionType: SectionType.button,
+  variableEffects: [{ effect: "toggle", variable: SHOW_EXTENDED }],
+  visibility: { variable: SHOW_EXTENDED, visibleWhen }
+});
+var disclaimerSections = (offer) => {
+  const hasShort = htmlToPlainText(offer.disclaimer) !== "";
+  const hasExtended = htmlToPlainText(offer.extended_disclaimer) !== "";
+  if (!hasExtended) return hasShort ? [legalCopy(offer.disclaimer)] : [];
+  return [
+    {
+      direction: Direction.rows,
+      sections: [
+        ...hasShort ? [legalCopy(offer.disclaimer)] : [],
+        legalCopy(offer.extended_disclaimer, true),
+        /** With no short line above it, "See more..." has no referent — the toggle names the disclaimer itself. */
+        disclosureToggle(hasShort ? "See more for details..." : "See disclaimer", false),
+        disclosureToggle(hasShort ? "See less" : "Hide disclaimer", true)
+      ],
+      sectionType: SectionType.layout,
+      spacing: Spacing.none,
+      variables: [{ defaultValue: false, name: SHOW_EXTENDED }]
+    }
+  ];
+};
 var composeOfferCard = (offer, input, storeName) => {
   const copy = {
-    sections: [text(offer.headline), smallText(offer.description)],
+    sections: [baseText(offer.headline), smallText(offer.description)],
     sectionType: SectionType.layout,
     spacing: Spacing.tight
   };
@@ -4327,8 +4397,8 @@ var composeOfferCard = (offer, input, storeName) => {
           sections: [
             copy,
             {
-              /** Image alt must be PLAIN — a DSP headline like `Get <b>50%</b> off` would trip the image NO_HTML refine and bleed fill; the visible `text(offer.headline)` still gets the HTML→Tiptap pipeline. */
-              altText: offer.headline.replace(/<[^>]*>/g, ""),
+              /** Image alt must be PLAIN — a DSP headline like `Get <b>50%</b> off` would trip the image NO_HTML refine and bleed fill; the advertiser's own `image_alt` wins over the headline fallback, both single-lined through {@link htmlToPlainText}. */
+              altText: htmlToPlainText(offer.image_alt).replace(/\n+/g, " ") || htmlToPlainText(offer.headline).replace(/\n+/g, " "),
               sectionType: SectionType.image,
               source: offer.image_url
             }
@@ -4344,7 +4414,7 @@ var composeOfferCard = (offer, input, storeName) => {
               action: ButtonAction.acceptOffer,
               buttonStyle: ButtonStyle.primary,
               sections: [
-                label(offer.cta || ACCEPT_FALLBACK),
+                dspLabel(offer.cta, ACCEPT_FALLBACK),
                 {
                   buttonField: ButtonField.destinationUrl,
                   content: { en: offer.click_url },
@@ -4356,13 +4426,14 @@ var composeOfferCard = (offer, input, storeName) => {
             {
               action: ButtonAction.declineOffer,
               buttonStyle: ButtonStyle.secondary,
-              sections: [label(offer.decline_cta || DECLINE_FALLBACK)],
+              sections: [dspLabel(offer.decline_cta, DECLINE_FALLBACK)],
               sectionType: SectionType.button,
               trackingUrl: offer.decline_url
             }
           ],
           sectionType: SectionType.layout
         },
+        ...disclaimerSections(offer),
         /**
          * Ad-unit Privacy Policy footer (compliance). Its own end-aligned layout packs a fit-content
          * paragraph right; the paragraph's own `textAlign: end` covers the full-width case — together

package/dist/server/index.mjs

@@ -4133,14 +4133,22 @@ var transactionItems = (input) => (input.transactionItems?.map(({ id, priceCents
   type
 })) ?? input.cart.items.map(({ productId, quantity }) => ({ id: productId, quantity }))).slice(0, MAX_TRANSACTION_ITEMS);
 var AdsEngineOffer = z28.object({
+  /** Pill-style value prop ("Get $45 Cashback"). Carried through the parse; the card does not render it yet (REB-24429 — pill design pending). */
+  callout: z28.string().catch(""),
   click_url: z28.string(),
   cta: z28.string(),
   /** `omitempty` on the ad server — a bid without it must not fail the parse and drop the whole batch (composeOffer falls back to 'No Thanks'). */
   decline_cta: z28.string().catch(""),
   decline_url: z28.string(),
   description: z28.string(),
+  /** Short legal disclosure (FDIC / auto-renewal / FTC-affiliation lines). Rendered subdued under the CTAs. */
+  disclaimer: z28.string().catch(""),
+  /** Long legal text behind the disclosure toggle in the composed card (REB-24429). */
+  extended_disclaimer: z28.string().catch(""),
   headline: z28.string(),
   id: z28.string(),
+  /** Advertiser-supplied image alt; the composed card falls back to the stripped headline when empty. */
+  image_alt: z28.string().catch(""),
   image_url: z28.string().optional(),
   view_url: z28.string()
 });
@@ -4157,6 +4165,15 @@ var isTestingRequest = (input, isProduction) => !isProduction || !!input.testing
 var buildAdsParams = (input, publisherKey, supplyKey, testing, userAgent, ipAddress) => {
   const items = transactionItems(input);
   return {
+    /**
+     * The engine converts text fields to the requested format before responding (Fluent's source
+     * format is html). `html` makes that conversion a no-op, so the canonical HTML→Tiptap pipeline
+     * receives the DSP's original markup — the default (markdown) would hand it `**bold**` and
+     * `[link](url)` syntax the pipeline renders literally. Contract verified against ad-server
+     * PR #349: the engine lowercases/trims the value, `html` is the accepted spelling, and an
+     * unrecognized value falls through unconverted rather than erroring.
+     */
+    format: "html",
     limit: String(OFFER_LIMIT),
     placement: input.placement,
     publisher_key: publisherKey,
@@ -4204,6 +4221,14 @@ var fetchAdsEngineOffers = async (input, ctx, prefetched) => {
   return { offers: AdsEngineResponse.parse(upstream).offers, storeName };
 };
 
+// src/transforms/htmlToPlainText.ts
+var paragraphText = (paragraph) => paragraph.content.map((run) => run.text).join("");
+var FORCE_PARSER = { defaultTextStyle: {} };
+var withoutTagShapes = (text2) => isHTML(text2) ? text2.replace(/[<>]/g, "") : text2;
+var htmlToPlainText = (html) => withoutTagShapes(
+  normalizeTextValue(html, FORCE_PARSER).content.map((paragraph) => paragraphText(paragraph).trim()).filter((line) => line !== "").join("\n")
+);
+
 // src/server/composeOffer.ts
 var ACCEPT_FALLBACK = "Accept";
 var DECLINE_FALLBACK = "No Thanks";
@@ -4213,8 +4238,19 @@ var label = (text2) => ({
   sectionType: SectionType.text
 });
 var text = (content) => ({ content: { en: content }, sectionType: SectionType.text });
+var AS_DOC = { defaultTextStyle: {} };
+var safeTextValue = (raw, options) => {
+  const converted = normalizeTextValue(raw, options);
+  return checkForHTML(converted) ? converted : normalizeTextValue(htmlToPlainText(raw), options);
+};
+var baseText = (raw) => ({ content: { en: safeTextValue(raw, AS_DOC) }, sectionType: SectionType.text });
+var dspLabel = (raw, fallback) => ({
+  buttonField: ButtonField.buttonLabel,
+  content: { en: htmlToPlainText(raw) === "" ? fallback : safeTextValue(raw, AS_DOC) },
+  sectionType: SectionType.text
+});
 var smallText = (raw) => ({
-  content: { en: normalizeTextValue(raw, { defaultTextStyle: { fontSize: "small" } }) },
+  content: { en: safeTextValue(raw, { defaultTextStyle: { fontSize: "small" } }) },
   sectionType: SectionType.text
 });
 var styled = (value, { align, bold, color, fontSize, href }) => ({
@@ -4257,9 +4293,43 @@ var headerSections = (input, storeName) => [
   },
   text(input.orderName ? `Order ${input.orderName} Confirmed` : "Order Confirmed")
 ];
+var SHOW_EXTENDED = "showExtendedDisclaimer";
+var LEGAL_STYLE = { defaultTextStyle: { color: TextColorName.subdued, fontSize: "extraSmall" } };
+var legalCopy = (raw, visibleWhen) => ({
+  content: { en: safeTextValue(raw, LEGAL_STYLE) },
+  sectionType: SectionType.text,
+  ...visibleWhen !== void 0 && { visibility: { variable: SHOW_EXTENDED, visibleWhen } }
+});
+var disclosureToggle = (text2, visibleWhen) => ({
+  buttonStyle: ButtonStyle.plain,
+  sections: [label(text2)],
+  sectionType: SectionType.button,
+  variableEffects: [{ effect: "toggle", variable: SHOW_EXTENDED }],
+  visibility: { variable: SHOW_EXTENDED, visibleWhen }
+});
+var disclaimerSections = (offer) => {
+  const hasShort = htmlToPlainText(offer.disclaimer) !== "";
+  const hasExtended = htmlToPlainText(offer.extended_disclaimer) !== "";
+  if (!hasExtended) return hasShort ? [legalCopy(offer.disclaimer)] : [];
+  return [
+    {
+      direction: Direction.rows,
+      sections: [
+        ...hasShort ? [legalCopy(offer.disclaimer)] : [],
+        legalCopy(offer.extended_disclaimer, true),
+        /** With no short line above it, "See more..." has no referent — the toggle names the disclaimer itself. */
+        disclosureToggle(hasShort ? "See more for details..." : "See disclaimer", false),
+        disclosureToggle(hasShort ? "See less" : "Hide disclaimer", true)
+      ],
+      sectionType: SectionType.layout,
+      spacing: Spacing.none,
+      variables: [{ defaultValue: false, name: SHOW_EXTENDED }]
+    }
+  ];
+};
 var composeOfferCard = (offer, input, storeName) => {
   const copy = {
-    sections: [text(offer.headline), smallText(offer.description)],
+    sections: [baseText(offer.headline), smallText(offer.description)],
     sectionType: SectionType.layout,
     spacing: Spacing.tight
   };
@@ -4276,8 +4346,8 @@ var composeOfferCard = (offer, input, storeName) => {
           sections: [
             copy,
             {
-              /** Image alt must be PLAIN — a DSP headline like `Get <b>50%</b> off` would trip the image NO_HTML refine and bleed fill; the visible `text(offer.headline)` still gets the HTML→Tiptap pipeline. */
-              altText: offer.headline.replace(/<[^>]*>/g, ""),
+              /** Image alt must be PLAIN — a DSP headline like `Get <b>50%</b> off` would trip the image NO_HTML refine and bleed fill; the advertiser's own `image_alt` wins over the headline fallback, both single-lined through {@link htmlToPlainText}. */
+              altText: htmlToPlainText(offer.image_alt).replace(/\n+/g, " ") || htmlToPlainText(offer.headline).replace(/\n+/g, " "),
               sectionType: SectionType.image,
               source: offer.image_url
             }
@@ -4293,7 +4363,7 @@ var composeOfferCard = (offer, input, storeName) => {
               action: ButtonAction.acceptOffer,
               buttonStyle: ButtonStyle.primary,
               sections: [
-                label(offer.cta || ACCEPT_FALLBACK),
+                dspLabel(offer.cta, ACCEPT_FALLBACK),
                 {
                   buttonField: ButtonField.destinationUrl,
                   content: { en: offer.click_url },
@@ -4305,13 +4375,14 @@ var composeOfferCard = (offer, input, storeName) => {
             {
               action: ButtonAction.declineOffer,
               buttonStyle: ButtonStyle.secondary,
-              sections: [label(offer.decline_cta || DECLINE_FALLBACK)],
+              sections: [dspLabel(offer.decline_cta, DECLINE_FALLBACK)],
               sectionType: SectionType.button,
               trackingUrl: offer.decline_url
             }
           ],
           sectionType: SectionType.layout
         },
+        ...disclaimerSections(offer),
         /**
          * Ad-unit Privacy Policy footer (compliance). Its own end-aligned layout packs a fit-content
          * paragraph right; the paragraph's own `textAlign: end` covers the full-width case — together

package/dist/transforms/htmlToPlainText.d.ts

@@ -0,0 +1,10 @@
+/**
+ * HTML → display plain text for ad copy that must ship as a bare string (image alt, the compose
+ * gates on legal copy). Derived FROM the canonical pipeline rather than a parallel strip:
+ * {@link normalizeTextValue} converts exactly as the in-card text sections do (entities decoded
+ * NO_HTML-safe, comments and script/style bodies dropped, block tags and `<br>`/`<hr>` flushing
+ * paragraphs), and the doc's paragraphs flatten to newline-joined lines. By construction this
+ * cannot drift from what the card renders, and the single-pass parser has none of the
+ * malformed-nesting or adversarial-input hazards a regex strip must defend against.
+ */
+export declare const htmlToPlainText: (html: string) => string;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rebuy/rebuy",
-    "version": "3.21.0",
+    "version": "3.22.0",
     "description": "Shared zod schemas, legacy-to-CAB widget transforms, and server orchestrators for Rebuy's Shopify consumers (rebuy-api, admin-nextjs, rebuy-shopify-extensions)",
     "license": "MIT",
     "author": "Rebuy, Inc.",