@rebuy/rebuy 3.28.1 → 3.29.1

package/dist/server/index.cjs

@@ -3224,9 +3224,13 @@ var buildPriceContent = () => ({
   content: [
     {
       content: [
-        /** Legacy renders the price in the checkout's brand color (`<Text appearance="accent">`). */
+        /**
+         * Regular text color, not legacy's `<Text appearance="accent">`: the checkout's web components
+         * can't render app text in the accent color, and `accent`'s nearest tint shows default blue on
+         * most stores (REB-24049).
+         */
         {
-          marks: [{ attrs: { color: "accent", fontSize: "base" }, type: "textStyle" }],
+          marks: [{ attrs: { color: "base", fontSize: "base" }, type: "textStyle" }],
           text: "{{variantPrice}}",
           type: "text"
         },
@@ -3778,7 +3782,7 @@ var convertOfferToV2 = ({ id, name, settings }) => {
 var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(transform(convertNumericObjects(deepCamelCase(raw))));
 
 // src/transforms/postPurchase/convertMessagePreview.ts
-var import_zod33 = require("zod");
+var import_zod36 = require("zod");
 
 // src/transforms/postPurchase/convertCalloutBlock.ts
 var import_zod31 = require("zod");
@@ -4001,6 +4005,150 @@ var convertCalloutBlock = (raw, report) => {
   return sections.length ? [CABLayoutSection.parse({ alignment: { horizontal }, frame: "callout", sections })] : [];
 };
 
+// src/transforms/postPurchase/convertImageFrame.ts
+var import_zod32 = require("zod");
+
+// src/transforms/postPurchase/sizeImageSource.ts
+var sizeImageSource = (source, size) => {
+  const extension = source.split(".").pop();
+  for (const previous of ["small", "medium", "large", "original", "master"]) {
+    source = source.replace(`_${previous}.${extension}`, `.${extension}`);
+  }
+  return source.replace(`.${extension}`, `${size === void 0 ? "" : `_${size}`}.${extension}`);
+};
+
+// src/transforms/postPurchase/convertImageFrame.ts
+var Source = import_zod32.z.url().default("https://cdn.shopify.com/s/files/1/0605/0555/5177/files/placeholder.jpg?v=1657762972");
+var DEFAULT_IMAGE_SIZE = 20;
+var convertImageFrame = (raw) => {
+  const parsed = ImageBlock.shape.settings.options[0].safeParse(raw);
+  if (!parsed.success) return null;
+  const settings = parsed.data;
+  const source = sizeImageSource(Source.parse(settings.image || void 0));
+  const withAlt = CABImageSection.safeParse({ altText: settings.alt, source });
+  const image = withAlt.success ? withAlt.data : CABImageSection.parse({ source });
+  const size = settings.imageSize > 0 ? settings.imageSize : DEFAULT_IMAGE_SIZE;
+  return CABLayoutSection.parse({
+    alignment: { horizontal: "center" },
+    direction: "grid",
+    grid: { columns: size <= 1 ? ["100%"] : [size] },
+    sections: [image],
+    width: size <= 1 ? size * 100 : 100
+  });
+};
+
+// src/transforms/postPurchase/convertImageBlock.ts
+var dropMalformedAlt = (raw) => {
+  if (typeof raw !== "object" || raw === null) return raw;
+  const { settings, ...rest } = raw;
+  if (typeof settings !== "object" || settings === null || Array.isArray(settings)) return raw;
+  const { alt, ...restSettings } = settings;
+  if (typeof alt === "string" || alt === void 0) return raw;
+  return { ...rest, settings: restSettings };
+};
+var convertImageBlock = (raw, report) => {
+  const block = ImageBlock.safeParse(dropMalformedAlt(raw));
+  const image = block.success ? convertImageFrame(block.data.settings) : null;
+  if (!image) {
+    report?.({ detail: "Unreadable post-purchase image", kind: "section" });
+    return [];
+  }
+  return [
+    CABLayoutSection.parse({
+      alignment: { horizontal: "center" },
+      frame: "offer-content",
+      sections: [image],
+      spacing: "none"
+    })
+  ];
+};
+
+// src/transforms/postPurchase/convertImageContentBlock.ts
+var import_zod34 = require("zod");
+
+// src/transforms/postPurchase/convertImageContentText.ts
+var fields2 = ["superTitle", "title", "description"];
+var convertImageContentText = (settings, report) => {
+  const horizontal = { center: "center", leading: "start", trailing: "end" }[settings.horizontalAlignment];
+  const sections = fields2.flatMap((field) => {
+    const omit = () => {
+      report?.({ detail: `Unreadable post-purchase image-content field: ${field}`, kind: "section" });
+      return [];
+    };
+    const value = ImageContentBlock.shape.settings.shape[field].safeParse(settings[field]);
+    if (!value.success) return omit();
+    const text2 = value.data;
+    if (text2 === null || text2 === "") return [];
+    const content = typeof text2 === "string" ? {
+      content: [
+        {
+          attrs: { textAlign: horizontal },
+          content: [styledTextRun(text2, field !== "description", settings[`${field}Size`])]
+        }
+      ]
+    } : text2;
+    const section = CABTextSection.safeParse({ content: { en: content } });
+    return section.success ? [section.data] : omit();
+  });
+  return CABLayoutSection.parse({ alignment: { horizontal }, sections });
+};
+
+// src/transforms/postPurchase/imageContentSettings.ts
+var import_zod33 = require("zod");
+var ImageContentSettings = ImageContentBlock.shape.settings.pick({
+  descriptionSize: true,
+  horizontalAlignment: true,
+  superTitleSize: true,
+  swapContent: true,
+  titleSize: true
+}).extend({
+  alt: import_zod33.z.unknown().optional(),
+  description: import_zod33.z.unknown().optional(),
+  image: import_zod33.z.unknown().optional(),
+  imagePlacement: ImageContentBlock.shape.settings.shape.imagePlacement.unwrap().nullable(),
+  imageSize: ImageContentBlock.shape.settings.shape.imageSize.pipe(import_zod33.z.number().positive()),
+  superTitle: import_zod33.z.unknown().optional(),
+  title: import_zod33.z.unknown().optional()
+});
+
+// src/transforms/postPurchase/convertImageContentBlock.ts
+var Shell2 = import_zod34.z.object({ settings: ImageContentSettings, type: import_zod34.z.literal("image_content") });
+var PROPORTIONAL_BREAK_AT = 500;
+var convertImageContentBlock = (raw, report) => {
+  const shell = Shell2.safeParse(raw);
+  if (!shell.success) {
+    report?.({ detail: "Unreadable post-purchase image-content block", kind: "section" });
+    return [];
+  }
+  const settings = shell.data.settings;
+  const alt = typeof settings.alt === "string" ? settings.alt : void 0;
+  if (settings.alt !== void 0 && alt === void 0) {
+    report?.({ detail: "Unreadable post-purchase image-content alt text", kind: "section" });
+  }
+  const image = convertImageFrame({ alt, image: settings.image, imageSize: settings.imageSize });
+  if (!image) report?.({ detail: "Unreadable post-purchase image-content image", kind: "section" });
+  const text2 = convertImageContentText(settings, report);
+  const textFrame = CABLayoutSection.parse({ direction: "grid", grid: { columns: ["100%"] }, sections: [text2] });
+  const placement = settings.imagePlacement ?? (settings.swapContent ? "right" : "left");
+  const imageFirst = placement === "left" || placement === "top";
+  const sections = imageFirst ? [image, textFrame] : [textFrame, image];
+  const ordered = sections.filter((section) => section !== null);
+  const inner = placement === "left" || placement === "right" ? CABLayoutSection.parse({
+    sections: ordered,
+    spacing: "loose",
+    wrapping: {
+      breakAt: settings.imageSize <= 1 ? PROPORTIONAL_BREAK_AT : settings.imageSize,
+      maxPerLine: 2
+    }
+  }) : CABLayoutSection.parse({
+    direction: "grid",
+    grid: { columns: ["100%"] },
+    sections: [CABLayoutSection.parse({ sections: ordered })],
+    width: 95
+  });
+  return [CABLayoutSection.parse({ frame: "offer-content", sections: [inner], spacing: "none" })];
+};
+
 // src/transforms/postPurchase/convertPayButtonBlock.ts
 var convertPayButtonBlock = (raw, report) => {
   const omit = () => {
@@ -4029,6 +4177,60 @@ var convertPayButtonBlock = (raw, report) => {
   ];
 };
 
+// src/transforms/postPurchase/convertProductInformation.ts
+var convertProductInformation = (raw, report) => {
+  const block = ProductInformationBlock.safeParse(raw);
+  if (!block.success) {
+    report?.({ detail: "Unreadable post-purchase product information", kind: "section" });
+    return [];
+  }
+  return [
+    CABOffersSection.parse({
+      direction: "grid",
+      sections: [
+        CABLayoutSection.parse({
+          alignment: { horizontal: "center" },
+          sections: [
+            CABLayoutSection.parse({
+              alignment: { horizontal: "center" },
+              direction: "grid",
+              grid: { columns: [250] },
+              sections: [
+                CABImageSection.parse({ altText: "{{productTitle}}", source: "{{productImage}}" })
+              ],
+              width: 90
+            })
+          ]
+        }),
+        CABLayoutSection.parse({
+          sections: [
+            CABTextSection.parse({
+              content: {
+                en: {
+                  content: [
+                    {
+                      content: [
+                        {
+                          marks: [{ attrs: { fontSize: "heading" }, type: "textStyle" }],
+                          text: "{{productTitle}}"
+                        }
+                      ]
+                    }
+                  ]
+                }
+              }
+            }),
+            CABReviewsSection.parse({}),
+            CABTextSection.parse({ content: { en: "{{productDescription}}" } })
+          ]
+        })
+      ],
+      spacing: "extraLoose",
+      wrapping: { breakAt: 500, maxPerLine: block.data.hideProductImage ? 1 : 2 }
+    })
+  ];
+};
+
 // src/transforms/postPurchase/convertSeparatorBlock.ts
 var convertSeparatorBlock = (raw, report) => {
   if (!SeparatorBlock.safeParse(raw).success) {
@@ -4039,29 +4241,29 @@ var convertSeparatorBlock = (raw, report) => {
 };
 
 // src/transforms/postPurchase/convertTextBlock.ts
-var import_zod32 = require("zod");
-var fields2 = ["superTitle", "title", "description"];
+var import_zod35 = require("zod");
+var fields3 = ["superTitle", "title", "description"];
 var styles = {
   description: [{ attrs: { color: "base", fontSize: "small" }, type: "textStyle" }],
   superTitle: [{ attrs: { color: "subdued", fontSize: "small" }, type: "textStyle" }],
   title: [{ type: "bold" }, { attrs: { color: "base", fontSize: "large" }, type: "textStyle" }]
 };
 var settingsSchema = TextBlock.shape.settings;
-var Shell2 = import_zod32.z.object({
+var Shell3 = import_zod35.z.object({
   settings: settingsSchema.pick({ horizontalAlignment: true }).extend({
-    description: import_zod32.z.unknown().optional(),
-    superTitle: import_zod32.z.unknown().optional(),
-    title: import_zod32.z.unknown().optional()
+    description: import_zod35.z.unknown().optional(),
+    superTitle: import_zod35.z.unknown().optional(),
+    title: import_zod35.z.unknown().optional()
   }),
-  type: import_zod32.z.literal("text")
+  type: import_zod35.z.literal("text")
 });
 var convertTextBlock = (raw, report) => {
-  const shell = Shell2.safeParse(raw);
+  const shell = Shell3.safeParse(raw);
   if (!shell.success) {
     report?.({ detail: "Unreadable post-purchase text block", kind: "section" });
     return [];
   }
-  const values = fields2.map((field) => ({
+  const values = fields3.map((field) => ({
     field,
     result: settingsSchema.shape[field].safeParse(shell.data.settings[field])
   }));
@@ -4125,14 +4327,17 @@ var convertTimerBlock = (raw, report) => {
 };
 
 // src/transforms/postPurchase/convertMessagePreview.ts
-var MessageWidget = import_zod33.z.object({
-  blocks: import_zod33.z.array(import_zod33.z.unknown()).min(1),
-  type: import_zod33.z.literal(WidgetType.shopify_post_purchase_extension)
+var MessageWidget = import_zod36.z.object({
+  blocks: import_zod36.z.array(import_zod36.z.unknown()).min(1),
+  type: import_zod36.z.literal(WidgetType.shopify_post_purchase_extension)
 });
-var BlockType2 = import_zod33.z.object({ type: import_zod33.z.string() });
+var BlockType2 = import_zod36.z.object({ type: import_zod36.z.string() });
 var converters = {
   callout_banner: convertCalloutBlock,
+  image: convertImageBlock,
+  image_content: convertImageContentBlock,
   pay_button: convertPayButtonBlock,
+  product_information: convertProductInformation,
   separator: convertSeparatorBlock,
   text: convertTextBlock,
   timer: convertTimerBlock
@@ -4674,7 +4879,7 @@ var fetchDataSourceResults = async (input, ctx) => {
 };
 
 // src/server/adsEngine.ts
-var import_zod34 = require("zod");
+var import_zod37 = require("zod");
 var SUPPLY_KEY = { production: "AQF5RKLR", staging: "Z56LQ7PS" };
 var OFFER_LIMIT = 4;
 var SUPPORTED_COUNTRIES = /* @__PURE__ */ new Set(["US", "CA"]);
@@ -4687,28 +4892,28 @@ var transactionItems = (input) => (input.transactionItems?.map(({ id, priceCents
   title,
   type
 })) ?? input.cart.items.map(({ productId, quantity }) => ({ id: productId, quantity }))).slice(0, MAX_TRANSACTION_ITEMS);
-var AdsEngineOffer = import_zod34.z.object({
+var AdsEngineOffer = import_zod37.z.object({
   /** Pill-style value prop ("Get $45 Cashback"). Carried through the parse; the card does not render it yet (REB-24429 — pill design pending). */
-  callout: import_zod34.z.string().catch(""),
-  click_url: import_zod34.z.string(),
-  cta: import_zod34.z.string(),
+  callout: import_zod37.z.string().catch(""),
+  click_url: import_zod37.z.string(),
+  cta: import_zod37.z.string(),
   /** `omitempty` on the ad server — a bid without it must not fail the parse and drop the whole batch (composeOffer falls back to 'No Thanks'). */
-  decline_cta: import_zod34.z.string().catch(""),
-  decline_url: import_zod34.z.string(),
-  description: import_zod34.z.string(),
+  decline_cta: import_zod37.z.string().catch(""),
+  decline_url: import_zod37.z.string(),
+  description: import_zod37.z.string(),
   /** Short legal disclosure (FDIC / auto-renewal / FTC-affiliation lines). Rendered subdued under the CTAs. */
-  disclaimer: import_zod34.z.string().catch(""),
+  disclaimer: import_zod37.z.string().catch(""),
   /** Long legal text behind the disclosure toggle in the composed card (REB-24429). */
-  extended_disclaimer: import_zod34.z.string().catch(""),
-  headline: import_zod34.z.string(),
-  id: import_zod34.z.string(),
+  extended_disclaimer: import_zod37.z.string().catch(""),
+  headline: import_zod37.z.string(),
+  id: import_zod37.z.string(),
   /** Advertiser-supplied image alt; the composed card falls back to the stripped headline when empty. */
-  image_alt: import_zod34.z.string().catch(""),
-  image_url: import_zod34.z.string().optional(),
-  view_url: import_zod34.z.string()
+  image_alt: import_zod37.z.string().catch(""),
+  image_url: import_zod37.z.string().optional(),
+  view_url: import_zod37.z.string()
 });
-var AdsEngineResponse = import_zod34.z.object({
-  offers: import_zod34.z.array(import_zod34.z.unknown()).default([]).transform(
+var AdsEngineResponse = import_zod37.z.object({
+  offers: import_zod37.z.array(import_zod37.z.unknown()).default([]).transform(
     (offers) => offers.flatMap((offer) => {
       const result = AdsEngineOffer.safeParse(offer);
       return result.success ? [result.data] : [];
@@ -4720,8 +4925,8 @@ var AdsEngineResponse = import_zod34.z.object({
    * offers-testing fixture on a test store forces it, REB-24467). Both optional: an older engine or a
    * non-JSON body must not fail the parse and drop the offers.
    */
-  request_id: import_zod34.z.string().optional().catch(void 0),
-  testing: import_zod34.z.boolean().optional().catch(void 0)
+  request_id: import_zod37.z.string().optional().catch(void 0),
+  testing: import_zod37.z.boolean().optional().catch(void 0)
 });
 var adsHost = (host) => `offers.${host}`;
 var isTestingRequest = (input, isProduction) => !isProduction || !!input.testing || input.customerEmail?.toLowerCase() === TEST_CUSTOMER_EMAIL;
@@ -5151,13 +5356,13 @@ var convertWidgetSettings = async (input, ctx) => {
 };
 
 // src/server/giftWidgets.ts
-var import_zod35 = require("zod");
-var SettingsNumber = import_zod35.z.union([
-  import_zod35.z.number(),
-  import_zod35.z.string().trim().regex(/^-?\d+(\.\d+)?$/)
-]).pipe(import_zod35.z.coerce.number());
-var SgwpMilestoneSchema = import_zod35.z.object({
-  selectable_product_quantity: SettingsNumber.pipe(import_zod35.z.number().int().nonnegative()),
+var import_zod38 = require("zod");
+var SettingsNumber = import_zod38.z.union([
+  import_zod38.z.number(),
+  import_zod38.z.string().trim().regex(/^-?\d+(\.\d+)?$/)
+]).pipe(import_zod38.z.coerce.number());
+var SgwpMilestoneSchema = import_zod38.z.object({
+  selectable_product_quantity: SettingsNumber.pipe(import_zod38.z.number().int().nonnegative()),
   unlock_price: SettingsNumber
 });
 var fetchGiftWidgetSettings = async (widgetId, shop, ctx) => unwrapData(await ctx.fetchUpstream("/api/v1/widgets/settings", { id: String(widgetId), shop }, { host: ctx.host }));
@@ -5168,7 +5373,7 @@ var readDataSourcePath = (settings) => {
 var readMilestones = (settings, report) => {
   const raw = settings && typeof settings === "object" ? settings.milestones : void 0;
   if (raw == null) return [];
-  const parsed = import_zod35.z.array(SgwpMilestoneSchema).safeParse(raw);
+  const parsed = import_zod38.z.array(SgwpMilestoneSchema).safeParse(raw);
   if (parsed.success) return parsed.data;
   report?.({
     detail: [
@@ -5417,7 +5622,7 @@ var postAnalyticsEvents = async (input, ctx) => {
 };
 
 // src/server/requestSchemas.ts
-var import_zod36 = require("zod");
+var import_zod39 = require("zod");
 var REQUEST_BOUNDS = {
   /** Cart-level attributes per cart. */
   CART_ATTRIBUTES_MAX: 100,
@@ -5448,42 +5653,42 @@ var REQUEST_BOUNDS = {
   /** Rich ads transaction lines — the engine's ads contract. */
   TRANSACTION_ITEMS_MAX: 50
 };
-var KeyValue = import_zod36.z.object({
-  key: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
-  value: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_VALUE_MAX).optional()
+var KeyValue = import_zod39.z.object({
+  key: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
+  value: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_VALUE_MAX).optional()
 });
-var CartLineInputSchema = import_zod36.z.object({
-  productId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  properties: import_zod36.z.array(KeyValue).max(REQUEST_BOUNDS.LINE_PROPERTIES_MAX).optional(),
-  quantity: import_zod36.z.number(),
-  subscriptionId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  variantId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX)
+var CartLineInputSchema = import_zod39.z.object({
+  productId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  properties: import_zod39.z.array(KeyValue).max(REQUEST_BOUNDS.LINE_PROPERTIES_MAX).optional(),
+  quantity: import_zod39.z.number(),
+  subscriptionId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  variantId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX)
 });
-var CartInputSchema = import_zod36.z.object({
-  attributes: import_zod36.z.array(KeyValue).max(REQUEST_BOUNDS.CART_ATTRIBUTES_MAX).optional(),
+var CartInputSchema = import_zod39.z.object({
+  attributes: import_zod39.z.array(KeyValue).max(REQUEST_BOUNDS.CART_ATTRIBUTES_MAX).optional(),
   /**
    * Presentment-per-shop-currency FX rate (buyer price ÷ shop price, e.g. `1.35` for a USD shop
    * selling in CAD). Money rule thresholds are authored in SHOP currency, so the engine subtotal is
    * divided by this before evaluation. Omit (or send 1) when the cart is already in the shop's currency.
    */
-  currencyRate: import_zod36.z.number().optional(),
+  currencyRate: import_zod39.z.number().optional(),
   /** Applied discount codes; the engine evaluates `discount_code` rules against them (sent as `[{code}]`). */
-  discountCodes: import_zod36.z.array(import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX)).max(REQUEST_BOUNDS.DISCOUNT_CODES_MAX).optional(),
+  discountCodes: import_zod39.z.array(import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX)).max(REQUEST_BOUNDS.DISCOUNT_CODES_MAX).optional(),
   /** Presentment cents of cart-level discount allocations, subtracted from `subtotal` for the engine. */
-  discountTotal: import_zod36.z.number().optional(),
-  items: import_zod36.z.array(CartLineInputSchema).max(REQUEST_BOUNDS.CART_ITEMS_MAX),
+  discountTotal: import_zod39.z.number().optional(),
+  items: import_zod39.z.array(CartLineInputSchema).max(REQUEST_BOUNDS.CART_ITEMS_MAX),
   /** Presentment subtotal in cents. */
-  subtotal: import_zod36.z.number()
+  subtotal: import_zod39.z.number()
 });
-var UserConfigInputSchema = import_zod36.z.object({ shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX) });
-var DataSourceInputSchema = import_zod36.z.object({
+var UserConfigInputSchema = import_zod39.z.object({ shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX) });
+var DataSourceInputSchema = import_zod39.z.object({
   cart: CartInputSchema,
   /**
    * Numeric Shopify company-location id when the buyer is a B2B session (`buyerIdentity.purchasingCompany`).
    * Present ⇒ the orchestrator filters results by the location's catalog via admin-api (REB-23713); the
    * client's country-context market check is bypassed for B2B (it false-negatives B2B-catalog products).
    */
-  companyLocationId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  companyLocationId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /**
    * Buyer's market country (ISO 3166-1 alpha-2) — forwarded to the engine as the `country_code` PARAM
    * when the shop's markets toggle is on (REB-21688; the sink was the `X-Country-Code` header under
@@ -5492,16 +5697,16 @@ var DataSourceInputSchema = import_zod36.z.object({
    * uppercase (the wire value is forwarded verbatim as the param) so a case-sensitive engine lookup
    * can't silently miss a lowercase code — `adsEngine.ts` uppercases for the same reason.
    */
-  country: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z]{2}$/, "must be an ISO 3166-1 alpha-2 country code (e.g. CA)").transform((value) => value.toUpperCase()).optional(),
-  customerId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  dataSourcePath: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
+  country: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z]{2}$/, "must be an ISO 3166-1 alpha-2 country code (e.g. CA)").transform((value) => value.toUpperCase()).optional(),
+  customerId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  dataSourcePath: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
   /**
    * Engine `filter_inputs` override: `'no'` keeps in-cart (input) products in the results/rule
    * outputs — gift validation sends it so a gift's own product can appear in its answer. Omitted = the
    * engine's default filtering.
    */
-  filterInputs: import_zod36.z.enum(["no", "yes"]).optional(),
-  integrations: import_zod36.z.record(import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), import_zod36.z.boolean()).refine((record) => Object.keys(record).length <= REQUEST_BOUNDS.INTEGRATION_KEYS_MAX, {
+  filterInputs: import_zod39.z.enum(["no", "yes"]).optional(),
+  integrations: import_zod39.z.record(import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), import_zod39.z.boolean()).refine((record) => Object.keys(record).length <= REQUEST_BOUNDS.INTEGRATION_KEYS_MAX, {
     message: `Too many integration keys (max ${REQUEST_BOUNDS.INTEGRATION_KEYS_MAX})`
   }).optional(),
   /**
@@ -5514,31 +5719,31 @@ var DataSourceInputSchema = import_zod36.z.object({
    * request header) fails the regex. Callers should send the buyer's resolved locale (e.g. Shopify
    * checkout's `localization.language.isoCode`), not the request header verbatim.
    */
-  language: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z0-9-]+$/, "must be a single BCP-47 tag (e.g. fr-CA), not a q-value list").optional(),
-  limit: import_zod36.z.number().max(REQUEST_BOUNDS.LIMIT_MAX),
-  productType: import_zod36.z.enum(["both", "one-time", "subscription"]).optional(),
-  shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  visitorId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+  language: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z0-9-]+$/, "must be a single BCP-47 tag (e.g. fr-CA), not a q-value list").optional(),
+  limit: import_zod39.z.number().max(REQUEST_BOUNDS.LIMIT_MAX),
+  productType: import_zod39.z.enum(["both", "one-time", "subscription"]).optional(),
+  shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  visitorId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
-var GiftInputSchema = import_zod36.z.object({
-  cost: import_zod36.z.number(),
-  discounted: import_zod36.z.boolean(),
+var GiftInputSchema = import_zod39.z.object({
+  cost: import_zod39.z.number(),
+  discounted: import_zod39.z.boolean(),
   /**
    * Which gift attribution the line carries (REB-24363). Defaults to `gwp` because a client that predates
    * the field only ever sent GWP lines — without the default an older extension's request would 422.
    */
-  kind: import_zod36.z.enum(GIFT_KINDS).default("gwp"),
-  lineId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  productId: import_zod36.z.number(),
+  kind: import_zod39.z.enum(GIFT_KINDS).default("gwp"),
+  lineId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  productId: import_zod39.z.number(),
   /**
    * The line's unit count (REB-24363) — the selectable-GWP verdict trims surplus units against milestone
    * capacity. The second deliberate default: a client predating the field sent only GWP lines, whose
    * verdict is whole-line, so a missing quantity reads as one unit rather than 422ing the older request.
    */
-  quantity: import_zod36.z.number().int().min(1).default(1),
-  widgetId: import_zod36.z.number()
+  quantity: import_zod39.z.number().int().min(1).default(1),
+  widgetId: import_zod39.z.number()
 });
-var GiftValidationInputSchema = import_zod36.z.object({
+var GiftValidationInputSchema = import_zod39.z.object({
   cart: CartInputSchema,
   /**
    * Buyer's market country — threaded into the per-widget data-source evaluations, which forward it to
@@ -5547,25 +5752,25 @@ var GiftValidationInputSchema = import_zod36.z.object({
    * turns markets off); regex-bound and uppercase-normalized for the same reasons as
    * `DataSourceInputSchema`'s `country`.
    */
-  country: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z]{2}$/, "must be an ISO 3166-1 alpha-2 country code (e.g. CA)").transform((value) => value.toUpperCase()).optional(),
-  customerId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  gifts: import_zod36.z.array(GiftInputSchema).max(REQUEST_BOUNDS.GIFTS_MAX),
+  country: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z]{2}$/, "must be an ISO 3166-1 alpha-2 country code (e.g. CA)").transform((value) => value.toUpperCase()).optional(),
+  customerId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  gifts: import_zod39.z.array(GiftInputSchema).max(REQUEST_BOUNDS.GIFTS_MAX),
   /**
    * Buyer's checkout language — threaded into the per-widget data-source evaluations, which normalize
    * and forward it as the engine `locale` param under the same markets-toggle gate (REB-21688). MUST be
    * a single BCP-47 tag, for the same reason as `DataSourceInputSchema`'s `language` above.
    */
-  language: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z0-9-]+$/, "must be a single BCP-47 tag (e.g. fr-CA), not a q-value list").optional(),
-  shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  visitorId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+  language: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).regex(/^[A-Za-z0-9-]+$/, "must be a single BCP-47 tag (e.g. fr-CA), not a q-value list").optional(),
+  shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  visitorId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
-var GiftAdjustmentSchema = import_zod36.z.object({
-  lineId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  quantity: import_zod36.z.number().int().nonnegative()
+var GiftAdjustmentSchema = import_zod39.z.object({
+  lineId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  quantity: import_zod39.z.number().int().nonnegative()
 });
-var GiftValidationResponseSchema = import_zod36.z.object({
-  adjust: import_zod36.z.array(GiftAdjustmentSchema).max(REQUEST_BOUNDS.GIFTS_MAX).default([]),
-  remove: import_zod36.z.array(import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX)).max(REQUEST_BOUNDS.GIFTS_MAX).refine(
+var GiftValidationResponseSchema = import_zod39.z.object({
+  adjust: import_zod39.z.array(GiftAdjustmentSchema).max(REQUEST_BOUNDS.GIFTS_MAX).default([]),
+  remove: import_zod39.z.array(import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX)).max(REQUEST_BOUNDS.GIFTS_MAX).refine(
     (remove) => new Set(remove).size === remove.length,
     "a line id may appear at most once in `remove`"
   )
@@ -5576,47 +5781,47 @@ var GiftValidationResponseSchema = import_zod36.z.object({
   ({ adjust }) => new Set(adjust.map(({ lineId }) => lineId)).size === adjust.length,
   "a line id may appear at most once in `adjust`"
 );
-var MonetizeTransactionItemSchema = import_zod36.z.object({
-  id: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  priceCents: import_zod36.z.number(),
-  quantity: import_zod36.z.number(),
-  title: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX),
-  type: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX)
+var MonetizeTransactionItemSchema = import_zod39.z.object({
+  id: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  priceCents: import_zod39.z.number(),
+  quantity: import_zod39.z.number(),
+  title: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX),
+  type: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX)
 });
-var MonetizeInputSchema = import_zod36.z.object({
+var MonetizeInputSchema = import_zod39.z.object({
   cart: CartInputSchema,
   /** Client-minted render-beacon correlation id; forwarded to the ads engine as `client_request_id`. */
-  clientRequestId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  country: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  currency: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  clientRequestId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  country: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  currency: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Ads-targeting identity/geo/locale fields (React parity); folded into the engine query verbatim. */
-  customerEmail: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
-  customerFirstName: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
-  customerId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  customerLastName: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
-  language: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  customerEmail: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
+  customerFirstName: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
+  customerId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  customerLastName: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
+  language: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Buyer-facing order name (e.g. `#1001`) for the server-composed "Order … Confirmed" chrome line. */
-  orderName: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
+  orderName: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_TEXT_MAX).optional(),
   /** Ads surface label, forwarded verbatim; `customer_account` is measured/floored as its own surface (the account-area order list). */
-  placement: import_zod36.z.enum(["customer_account", "order_status", "thank_you_page"]),
+  placement: import_zod39.z.enum(["customer_account", "order_status", "thank_you_page"]),
   /** Privacy Policy footer href — the Monetize widget's `privacy_policy_url` setting (React parity). */
-  privacyPolicyUrl: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_URL_MAX).optional(),
+  privacyPolicyUrl: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_URL_MAX).optional(),
   /** 30-min rolling session id (React parity); used for the ads `session_id`, else the visitor id. */
-  sessionId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  sessionId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
   /** Editor/QA indicator; OR-ed into the ads-engine `testing` flag so it stays out of billing/reporting. */
-  testing: import_zod36.z.boolean().optional(),
-  timezone: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  testing: import_zod39.z.boolean().optional(),
+  timezone: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Decorated (numeric) order id → the ads `transaction_id`. */
-  transactionId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  transactionId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Rich per-line ads items; capped at the engine's ads contract. Preferred over `cart.items`. */
-  transactionItems: import_zod36.z.array(MonetizeTransactionItemSchema).max(REQUEST_BOUNDS.TRANSACTION_ITEMS_MAX).optional(),
+  transactionItems: import_zod39.z.array(MonetizeTransactionItemSchema).max(REQUEST_BOUNDS.TRANSACTION_ITEMS_MAX).optional(),
   /** Order total in presentment cents (React prefers total over subtotal); else `cart.subtotal`. */
-  transactionTotal: import_zod36.z.number().optional(),
-  visitorId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  zipCode: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+  transactionTotal: import_zod39.z.number().optional(),
+  visitorId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  zipCode: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
-var WidgetSettingsInputSchema = import_zod36.z.object({
+var WidgetSettingsInputSchema = import_zod39.z.object({
   /**
    * Same domain as `CabShopConfig.cacheKey`, for the same reason: this side WINS the orchestrator's
    * `input.cacheKey ?? config.shop.cacheKey` (and an explicit value skips the config read entirely), so
@@ -5624,9 +5829,9 @@ var WidgetSettingsInputSchema = import_zod36.z.object({
    * and pin the edge copy permanently stale. `.catch(undefined)` because a bogus buster should degrade
    * the read to un-busted, never 400 a widget render.
    */
-  cacheKey: import_zod36.z.number().int().positive().optional().catch(void 0),
-  id: import_zod36.z.number(),
-  key: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  cacheKey: import_zod39.z.number().int().positive().optional().catch(void 0),
+  id: import_zod39.z.number(),
+  key: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /**
    * Monetize context for inline hydration: when present AND the widget converts to a Monetize marker,
    * the server fetches/composes the offer cards inside this same request (no second `/cab/monetize`
@@ -5635,34 +5840,34 @@ var WidgetSettingsInputSchema = import_zod36.z.object({
    * `privacyPolicyUrl` comes from the widget settings server-side (more authoritative than a relay).
    */
   monetize: MonetizeInputSchema.omit({ privacyPolicyUrl: true, shop: true }).optional(),
-  shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
   /** Stable per-buyer id; when present, enables sticky server-side A/B variant selection. */
-  visitorId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+  visitorId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
-var AnalyticsEventInputSchema = import_zod36.z.object({
-  name: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
-  properties: import_zod36.z.record(import_zod36.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), import_zod36.z.unknown()).optional(),
-  sentAt: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+var AnalyticsEventInputSchema = import_zod39.z.object({
+  name: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
+  properties: import_zod39.z.record(import_zod39.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), import_zod39.z.unknown()).optional(),
+  sentAt: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
-var AnalyticsSegmentsInputSchema = import_zod36.z.object({
-  device: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0),
-  source: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0),
-  visitor: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0)
+var AnalyticsSegmentsInputSchema = import_zod39.z.object({
+  device: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0),
+  source: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0),
+  visitor: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional().catch(void 0)
 });
-var AnalyticsInputSchema = import_zod36.z.object({
+var AnalyticsInputSchema = import_zod39.z.object({
   /** Rebuy cart token (the `r_cart_token` cart attribute), when available — primary aggregation key. */
-  cartToken: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  cartToken: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Shopify checkout token, when available — drives cart/checkout aggregation downstream. */
-  checkoutToken: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  events: import_zod36.z.array(AnalyticsEventInputSchema).max(REQUEST_BOUNDS.EVENTS_MAX),
+  checkoutToken: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  events: import_zod39.z.array(AnalyticsEventInputSchema).max(REQUEST_BOUNDS.EVENTS_MAX),
   /**
    * Request-scoped like the tokens: one visitor's segments apply to every event in the batch. The container
    * degrades too (`null` is a realistic wire artifact of `attributes ? {…} : null`), so the degrade rule is
    * total: nothing about `segments` can cost the envelope.
    */
   segments: AnalyticsSegmentsInputSchema.optional().catch(void 0),
-  shop: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  visitorId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  shop: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  visitorId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
   /** The widget id (smartBlockId) the events belong to. */
-  widgetId: import_zod36.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+  widgetId: import_zod39.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });