@rebuy/rebuy 3.37.0 → 3.38.0

package/dist/server/adsEngine.d.ts

@@ -19,6 +19,7 @@ export declare const AdsEngineOffer: z.ZodObject<{
     id: z.ZodString;
     image_alt: z.ZodCatch<z.ZodString>;
     image_url: z.ZodOptional<z.ZodString>;
+    privacy_url: z.ZodCatch<z.ZodOptional<z.ZodString>>;
     view_url: z.ZodString;
 }, z.core.$strip>;
 export type AdsEngineOffer = z.infer<typeof AdsEngineOffer>;

package/dist/server/index.cjs

@@ -4929,6 +4929,8 @@ var AdsEngineOffer = import_zod37.z.object({
   /** Advertiser-supplied image alt; the composed card falls back to the stripped headline when empty. */
   image_alt: import_zod37.z.string().catch(""),
   image_url: import_zod37.z.string().optional(),
+  /** The serving network's own privacy page (Falcon, REB-24744); the card prefers it over the widget setting. A bad value drops only this field, never the offer. */
+  privacy_url: import_zod37.z.string().optional().catch(void 0),
   view_url: import_zod37.z.string()
 });
 var AdsEngineResponse = import_zod37.z.object({
@@ -5098,6 +5100,10 @@ var headerSections = (input, storeName) => [
   },
   text(input.orderName ? `Order ${input.orderName} Confirmed` : "Order Confirmed")
 ];
+var privacyHref = (offer, input) => {
+  const href = [offer.privacy_url, input.privacyPolicyUrl].find((url) => url && isValidHref(url));
+  return href ? { href } : {};
+};
 var SHOW_EXTENDED = "showExtendedDisclaimer";
 var LEGAL_STYLE = { defaultTextStyle: { color: TextColorName.subdued, fontSize: "extraSmall" } };
 var legalCopy = (raw, visibleWhen) => ({
@@ -5197,9 +5203,11 @@ var composeOfferCard = (offer, input, storeName) => {
          * rejection here would silently drop the whole batch), and `isValidHref` also blocks the
          * `javascript:`-style schemes that `z.url()` alone would let through. It accepts strictly less
          * than the TiptapText href union (same token/root-relative regexes + a scheme allowlist), so a
-         * gated href can never fail the parse.
+         * gated href can never fail the parse. A network-supplied `privacy_url` (REB-24744) goes through
+         * the same gate but only counts toward showing the footer when it passes: an unsafe network URL
+         * must never add a link-less "Privacy Policy" to a card that had no footer before.
          */
-        ...input.privacyPolicyUrl ? [
+        ...offer.privacy_url && isValidHref(offer.privacy_url) || input.privacyPolicyUrl ? [
           {
             alignment: { horizontal: HorizontalAlignment.end, vertical: VerticalAlignment.top },
             sections: [
@@ -5207,7 +5215,7 @@ var composeOfferCard = (offer, input, storeName) => {
                 align: "end",
                 color: TextColorName.subdued,
                 fontSize: "extraSmall",
-                ...isValidHref(input.privacyPolicyUrl) && { href: input.privacyPolicyUrl }
+                ...privacyHref(offer, input)
               })
             ],
             sectionType: SectionType.layout

package/dist/server/index.mjs

@@ -4859,6 +4859,8 @@ var AdsEngineOffer = z37.object({
   /** Advertiser-supplied image alt; the composed card falls back to the stripped headline when empty. */
   image_alt: z37.string().catch(""),
   image_url: z37.string().optional(),
+  /** The serving network's own privacy page (Falcon, REB-24744); the card prefers it over the widget setting. A bad value drops only this field, never the offer. */
+  privacy_url: z37.string().optional().catch(void 0),
   view_url: z37.string()
 });
 var AdsEngineResponse = z37.object({
@@ -5028,6 +5030,10 @@ var headerSections = (input, storeName) => [
   },
   text(input.orderName ? `Order ${input.orderName} Confirmed` : "Order Confirmed")
 ];
+var privacyHref = (offer, input) => {
+  const href = [offer.privacy_url, input.privacyPolicyUrl].find((url) => url && isValidHref(url));
+  return href ? { href } : {};
+};
 var SHOW_EXTENDED = "showExtendedDisclaimer";
 var LEGAL_STYLE = { defaultTextStyle: { color: TextColorName.subdued, fontSize: "extraSmall" } };
 var legalCopy = (raw, visibleWhen) => ({
@@ -5127,9 +5133,11 @@ var composeOfferCard = (offer, input, storeName) => {
          * rejection here would silently drop the whole batch), and `isValidHref` also blocks the
          * `javascript:`-style schemes that `z.url()` alone would let through. It accepts strictly less
          * than the TiptapText href union (same token/root-relative regexes + a scheme allowlist), so a
-         * gated href can never fail the parse.
+         * gated href can never fail the parse. A network-supplied `privacy_url` (REB-24744) goes through
+         * the same gate but only counts toward showing the footer when it passes: an unsafe network URL
+         * must never add a link-less "Privacy Policy" to a card that had no footer before.
          */
-        ...input.privacyPolicyUrl ? [
+        ...offer.privacy_url && isValidHref(offer.privacy_url) || input.privacyPolicyUrl ? [
           {
             alignment: { horizontal: HorizontalAlignment.end, vertical: VerticalAlignment.top },
             sections: [
@@ -5137,7 +5145,7 @@ var composeOfferCard = (offer, input, storeName) => {
                 align: "end",
                 color: TextColorName.subdued,
                 fontSize: "extraSmall",
-                ...isValidHref(input.privacyPolicyUrl) && { href: input.privacyPolicyUrl }
+                ...privacyHref(offer, input)
               })
             ],
             sectionType: SectionType.layout

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rebuy/rebuy",
-    "version": "3.37.0",
+    "version": "3.38.0",
     "description": "Shared zod schemas, legacy-to-CAB widget transforms, and server orchestrators for Rebuy's Shopify consumers (rebuy-api, admin-nextjs, rebuy-shopify-extensions)",
     "license": "MIT",
     "author": "Rebuy, Inc.",