@rebuy/rebuy 3.60.1 → 3.60.3

package/dist/cab/hasOwnKey.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Whether `key` is an OWN key of `object`, never an inherited `Object.prototype` one (`constructor`,
+ * `toString`, `__proto__`) — what `Object.hasOwn` answers, without needing it. `Object.hasOwn` is ES2022:
+ * Safari/iOS before 15.4 and Chromium before 93 lack it, those buyers still load every renderer that bundles
+ * `./cab`, and esbuild's `es2020` target rewrites syntax only, so the call shipped as-is and threw on the first
+ * section render (REB-24990). Read off `Object.prototype` so an own `hasOwnProperty` key cannot shadow it.
+ */
+export declare const hasOwnKey: (object: object, key: PropertyKey) => boolean;

package/dist/cab/index.cjs

@@ -45,6 +45,9 @@ var asLayout = (section) => ({
   visibility: void 0
 });
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/schema/widgets/checkout-and-beyond/regex.ts
 var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
 var DYNAMIC_TOKEN_ANYWHERE_REGEX = /\{\{\s*[A-Za-z0-9_]+\s*\}\}/;
@@ -54,9 +57,9 @@ var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
 var TOKEN_REGEX = /{{1,2}\s*([^{}\s]+)\s*}{1,2}/g;
 var toCamelCase = (key) => key.replace(/_([a-z0-9])/g, (_, char) => char.toUpperCase());
 var resolveKey = (key, variables) => {
-  if (Object.hasOwn(variables, key)) return key;
+  if (hasOwnKey(variables, key)) return key;
   const camel = toCamelCase(key);
-  if (Object.hasOwn(variables, camel)) return camel;
+  if (hasOwnKey(variables, camel)) return camel;
   const lower = camel.toLowerCase();
   return Object.keys(variables).find((name) => name.toLowerCase() === lower);
 };
@@ -70,8 +73,8 @@ var interpolateAndSanitize = (input, variables) => (input ?? "").replace(TOKEN_R
 var FALLBACK_LANGUAGE = "en";
 var selectLanguage = (content, language) => {
   if (!content) return void 0;
-  if (language && Object.hasOwn(content, language)) return content[language];
-  if (Object.hasOwn(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
+  if (language && hasOwnKey(content, language)) return content[language];
+  if (hasOwnKey(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
   return Object.values(content)[0];
 };
 

package/dist/cab/index.mjs

@@ -7,6 +7,9 @@ var asLayout = (section) => ({
   visibility: void 0
 });
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/schema/widgets/checkout-and-beyond/regex.ts
 var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
 var DYNAMIC_TOKEN_ANYWHERE_REGEX = /\{\{\s*[A-Za-z0-9_]+\s*\}\}/;
@@ -16,9 +19,9 @@ var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
 var TOKEN_REGEX = /{{1,2}\s*([^{}\s]+)\s*}{1,2}/g;
 var toCamelCase = (key) => key.replace(/_([a-z0-9])/g, (_, char) => char.toUpperCase());
 var resolveKey = (key, variables) => {
-  if (Object.hasOwn(variables, key)) return key;
+  if (hasOwnKey(variables, key)) return key;
   const camel = toCamelCase(key);
-  if (Object.hasOwn(variables, camel)) return camel;
+  if (hasOwnKey(variables, camel)) return camel;
   const lower = camel.toLowerCase();
   return Object.keys(variables).find((name) => name.toLowerCase() === lower);
 };
@@ -32,8 +35,8 @@ var interpolateAndSanitize = (input, variables) => (input ?? "").replace(TOKEN_R
 var FALLBACK_LANGUAGE = "en";
 var selectLanguage = (content, language) => {
   if (!content) return void 0;
-  if (language && Object.hasOwn(content, language)) return content[language];
-  if (Object.hasOwn(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
+  if (language && hasOwnKey(content, language)) return content[language];
+  if (hasOwnKey(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
   return Object.values(content)[0];
 };
 

package/dist/cab/selectLanguage.d.ts

@@ -1,7 +1,7 @@
 /**
  * Fallback chain: requested language, then 'en', then first available value.
  *
- * `Object.hasOwn`, never `in` — `in` would resolve an inherited `Object.prototype` key (`constructor`,
+ * Own keys only (`hasOwnKey`), never `in` — `in` would resolve an inherited `Object.prototype` key (`constructor`,
  * `toString`) as if it were a translation. Far less reachable than in `interpolateAndSanitize`, since a
  * language code is not merchant-authored, but the two must agree on what counts as present.
  */

package/dist/index.cjs

@@ -1212,8 +1212,13 @@ var import_zod2 = require("zod");
 // src/schema/driftedMarkets.ts
 var DRIFTED_MARKETS = Object.freeze({ enabled: false });
 
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
 // src/schema/smartCart.ts
 var import_zod = require("zod");
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = import_zod.z.looseObject({
   handle: import_zod.z.string().optional(),
   id: import_zod.z.coerce.number().optional(),
@@ -1267,7 +1272,11 @@ var SmartCartTier = import_zod.z.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: import_zod.z.preprocess((value) => value == null ? void 0 : value, import_zod.z.coerce.number().optional()),
-  presentmentCurrencies: import_zod.z.looseObject({ enabled: import_zod.z.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: import_zod.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod.z.looseObject({ enabled: import_zod.z.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: import_zod.z.boolean().optional(),
   productAmountReachedLabelText: import_zod.z.string().optional(),
   productAmountRemainingLabel: import_zod.z.boolean().optional(),
@@ -1320,16 +1329,35 @@ var SmartCartBar = import_zod.z.looseObject({
   freeShippingOnSubscription: import_zod.z.boolean().optional(),
   geolocationEnabled: import_zod.z.boolean().optional(),
   id: import_zod.z.string().optional(),
-  language: import_zod.z.looseObject({
-    freeShippingReached: import_zod.z.string().optional(),
-    freeShippingRemaining: import_zod.z.string().optional(),
-    giftAreaTitle: import_zod.z.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: import_zod.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod.z.looseObject({
+      freeShippingReached: import_zod.z.string().optional(),
+      freeShippingRemaining: import_zod.z.string().optional(),
+      giftAreaTitle: import_zod.z.string().optional()
+    }).optional()
+  ),
   name: import_zod.z.string().optional(),
   tiers: import_zod.z.array(SmartCartTier).optional()
 });
 var SmartCartComponent = import_zod.z.looseObject({
-  settings: import_zod.z.looseObject({ bars: import_zod.z.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: import_zod.z.preprocess(phpEmptyMapAsAbsent, import_zod.z.looseObject({ bars: import_zod.z.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: import_zod.z.string().optional()
 });
 var SmartCartConfig = import_zod.z.looseObject({
@@ -1432,7 +1460,7 @@ var CabShopConfig = import_zod2.z.object({
 });
 var CabUserConfig = import_zod2.z.object({
   shop: CabShopConfig,
-  smartCart: SmartCartConfig.nullish().catch(void 0)
+  smartCart: SmartCartConfig.nullish().catch(DRIFTED_SMART_CART)
 });
 
 // src/schema/metadata.ts

package/dist/index.mjs

@@ -730,8 +730,13 @@ import { z as z2 } from "zod";
 // src/schema/driftedMarkets.ts
 var DRIFTED_MARKETS = Object.freeze({ enabled: false });
 
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
 // src/schema/smartCart.ts
 import { z } from "zod";
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = z.looseObject({
   handle: z.string().optional(),
   id: z.coerce.number().optional(),
@@ -785,7 +790,11 @@ var SmartCartTier = z.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: z.preprocess((value) => value == null ? void 0 : value, z.coerce.number().optional()),
-  presentmentCurrencies: z.looseObject({ enabled: z.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: z.preprocess(
+    phpEmptyMapAsAbsent,
+    z.looseObject({ enabled: z.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: z.boolean().optional(),
   productAmountReachedLabelText: z.string().optional(),
   productAmountRemainingLabel: z.boolean().optional(),
@@ -838,16 +847,35 @@ var SmartCartBar = z.looseObject({
   freeShippingOnSubscription: z.boolean().optional(),
   geolocationEnabled: z.boolean().optional(),
   id: z.string().optional(),
-  language: z.looseObject({
-    freeShippingReached: z.string().optional(),
-    freeShippingRemaining: z.string().optional(),
-    giftAreaTitle: z.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: z.preprocess(
+    phpEmptyMapAsAbsent,
+    z.looseObject({
+      freeShippingReached: z.string().optional(),
+      freeShippingRemaining: z.string().optional(),
+      giftAreaTitle: z.string().optional()
+    }).optional()
+  ),
   name: z.string().optional(),
   tiers: z.array(SmartCartTier).optional()
 });
 var SmartCartComponent = z.looseObject({
-  settings: z.looseObject({ bars: z.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: z.preprocess(phpEmptyMapAsAbsent, z.looseObject({ bars: z.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: z.string().optional()
 });
 var SmartCartConfig = z.looseObject({
@@ -950,7 +978,7 @@ var CabShopConfig = z2.object({
 });
 var CabUserConfig = z2.object({
   shop: CabShopConfig,
-  smartCart: SmartCartConfig.nullish().catch(void 0)
+  smartCart: SmartCartConfig.nullish().catch(DRIFTED_SMART_CART)
 });
 
 // src/schema/metadata.ts

package/dist/schema/cabShopConfig.d.ts

@@ -59,6 +59,11 @@ export type CabShopConfig = z.infer<typeof CabShopConfig>;
  * The lean `/api/v1/user/config` projection `fetchUserConfig` parses. `smartFlows` (schema-required on
  * the full `UserConfig` but read by no CAB path) is dropped; `smartCart` keeps its `.catch()`
  * safety bar so a smart-cart shape drift can never fail apiKey resolution.
+ *
+ * The catch lands on the {@link DRIFTED_SMART_CART} identity sentinel (no components ⇒ no bars), not
+ * `undefined`, so the server's progress-bar resolution can tell a drifted config from a shop with no smart
+ * cart (`null`/absent stay `null`/`undefined`) and emit a `shopConfig` drift (REB-25139: this catch used to
+ * drop every progress bar for the shop silently).
  */
 export declare const CabUserConfig: z.ZodObject<{
     shop: z.ZodObject<{
@@ -95,7 +100,7 @@ export declare const CabUserConfig: z.ZodObject<{
     }, z.core.$strip>;
     smartCart: z.ZodCatch<z.ZodOptional<z.ZodNullable<z.ZodObject<{
         components: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            settings: z.ZodOptional<z.ZodObject<{
+            settings: z.ZodCatch<z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                 bars: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     countryCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     excludeDiscountInSubtotal: z.ZodOptional<z.ZodBoolean>;
@@ -105,11 +110,11 @@ export declare const CabUserConfig: z.ZodObject<{
                     freeShippingOnSubscription: z.ZodOptional<z.ZodBoolean>;
                     geolocationEnabled: z.ZodOptional<z.ZodBoolean>;
                     id: z.ZodOptional<z.ZodString>;
-                    language: z.ZodOptional<z.ZodObject<{
+                    language: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                         freeShippingReached: z.ZodOptional<z.ZodString>;
                         freeShippingRemaining: z.ZodOptional<z.ZodString>;
                         giftAreaTitle: z.ZodOptional<z.ZodString>;
-                    }, z.core.$loose>>;
+                    }, z.core.$loose>>>;
                     name: z.ZodOptional<z.ZodString>;
                     tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         allProducts: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -141,9 +146,9 @@ export declare const CabUserConfig: z.ZodObject<{
                         filterOosVariants: z.ZodOptional<z.ZodBoolean>;
                         id: z.ZodOptional<z.ZodString>;
                         minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-                        presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+                        presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                             enabled: z.ZodOptional<z.ZodBoolean>;
-                        }, z.core.$loose>>;
+                        }, z.core.$loose>>>;
                         productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
                         productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
                         productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -161,7 +166,7 @@ export declare const CabUserConfig: z.ZodObject<{
                         unlockConditionType: z.ZodOptional<z.ZodString>;
                     }, z.core.$loose>>>;
                 }, z.core.$loose>>>;
-            }, z.core.$loose>>;
+            }, z.core.$loose>>>>;
             type: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>>>;
     }, z.core.$loose>>>>;

package/dist/schema/driftedSmartCart.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Identity sentinels for the smart-cart salvages (REB-25139), on the {@link file://./driftedMarkets.ts} pattern:
+ * the schema's `.catch` returns one of THESE frozen objects, and the server's progress-bar resolution detects the
+ * drift by reference and emits a `shopConfig` drift. Both read as "no bars" to every consumer — `settings: {}`
+ * carries no `bars`, a config `{}` carries no `components` — so a consumer that never checks identity degrades
+ * exactly as it would on a missing field.
+ *
+ * Deliberately NOT re-exported from `src/schema/index.ts` for the same reason as `DRIFTED_MARKETS`: identity only
+ * holds within one bundle, and the comparison lives in `./server` (`server/widgetSettings.ts`), where the
+ * `CabUserConfig` parse that produced the value also runs.
+ */
+/** A smart-cart component whose `settings` failed to parse: dropped to no settings, its siblings kept. */
+export declare const DRIFTED_SMART_CART_SETTINGS: Readonly<{}>;
+/** A smart-cart config that failed to parse as a whole (e.g. a non-array `components`): no components. */
+export declare const DRIFTED_SMART_CART: Readonly<{}>;

package/dist/schema/smartCart.d.ts

@@ -69,9 +69,9 @@ export declare const SmartCartTier: z.ZodObject<{
     filterOosVariants: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodOptional<z.ZodString>;
     minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-    presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+    presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$loose>>;
+    }, z.core.$loose>>>;
     productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
     productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
     productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -102,11 +102,11 @@ export declare const SmartCartBar: z.ZodObject<{
     freeShippingOnSubscription: z.ZodOptional<z.ZodBoolean>;
     geolocationEnabled: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodOptional<z.ZodString>;
-    language: z.ZodOptional<z.ZodObject<{
+    language: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
         freeShippingReached: z.ZodOptional<z.ZodString>;
         freeShippingRemaining: z.ZodOptional<z.ZodString>;
         giftAreaTitle: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>;
+    }, z.core.$loose>>>;
     name: z.ZodOptional<z.ZodString>;
     tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         allProducts: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -138,9 +138,9 @@ export declare const SmartCartBar: z.ZodObject<{
         filterOosVariants: z.ZodOptional<z.ZodBoolean>;
         id: z.ZodOptional<z.ZodString>;
         minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-        presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+        presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$loose>>;
+        }, z.core.$loose>>>;
         productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
         productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
         productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -160,7 +160,7 @@ export declare const SmartCartBar: z.ZodObject<{
 }, z.core.$loose>;
 /** A smart-cart layout component; only `type === 'tiered_progress_bar'` carries the bars we render. */
 export declare const SmartCartComponent: z.ZodObject<{
-    settings: z.ZodOptional<z.ZodObject<{
+    settings: z.ZodCatch<z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
         bars: z.ZodOptional<z.ZodArray<z.ZodObject<{
             countryCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             excludeDiscountInSubtotal: z.ZodOptional<z.ZodBoolean>;
@@ -170,11 +170,11 @@ export declare const SmartCartComponent: z.ZodObject<{
             freeShippingOnSubscription: z.ZodOptional<z.ZodBoolean>;
             geolocationEnabled: z.ZodOptional<z.ZodBoolean>;
             id: z.ZodOptional<z.ZodString>;
-            language: z.ZodOptional<z.ZodObject<{
+            language: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                 freeShippingReached: z.ZodOptional<z.ZodString>;
                 freeShippingRemaining: z.ZodOptional<z.ZodString>;
                 giftAreaTitle: z.ZodOptional<z.ZodString>;
-            }, z.core.$loose>>;
+            }, z.core.$loose>>>;
             name: z.ZodOptional<z.ZodString>;
             tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 allProducts: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -206,9 +206,9 @@ export declare const SmartCartComponent: z.ZodObject<{
                 filterOosVariants: z.ZodOptional<z.ZodBoolean>;
                 id: z.ZodOptional<z.ZodString>;
                 minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-                presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+                presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                     enabled: z.ZodOptional<z.ZodBoolean>;
-                }, z.core.$loose>>;
+                }, z.core.$loose>>>;
                 productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
                 productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
                 productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -226,7 +226,7 @@ export declare const SmartCartComponent: z.ZodObject<{
                 unlockConditionType: z.ZodOptional<z.ZodString>;
             }, z.core.$loose>>>;
         }, z.core.$loose>>>;
-    }, z.core.$loose>>;
+    }, z.core.$loose>>>>;
     type: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
 /**
@@ -234,12 +234,12 @@ export declare const SmartCartComponent: z.ZodObject<{
  * `tiered_progress_bar` component(s) and their bars/tiers. The rest of the onsite
  * smart-cart config (buy-more-save-more, custom templates/CSS, callbacks) is out of
  * scope — `looseObject` preserves-but-ignores it. Parsed under `UserConfig.smartCart`
- * with `.catch(undefined)` so a shape drift here can NEVER break apiKey resolution for
- * offers / monetize / analytics / gift validation.
+ * (`.catch(undefined)`) and `CabUserConfig.smartCart` (`.catch` to a drift sentinel) so a shape
+ * drift here can NEVER break apiKey resolution for offers / monetize / analytics / gift validation.
  */
 export declare const SmartCartConfig: z.ZodObject<{
     components: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        settings: z.ZodOptional<z.ZodObject<{
+        settings: z.ZodCatch<z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
             bars: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 countryCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 excludeDiscountInSubtotal: z.ZodOptional<z.ZodBoolean>;
@@ -249,11 +249,11 @@ export declare const SmartCartConfig: z.ZodObject<{
                 freeShippingOnSubscription: z.ZodOptional<z.ZodBoolean>;
                 geolocationEnabled: z.ZodOptional<z.ZodBoolean>;
                 id: z.ZodOptional<z.ZodString>;
-                language: z.ZodOptional<z.ZodObject<{
+                language: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                     freeShippingReached: z.ZodOptional<z.ZodString>;
                     freeShippingRemaining: z.ZodOptional<z.ZodString>;
                     giftAreaTitle: z.ZodOptional<z.ZodString>;
-                }, z.core.$loose>>;
+                }, z.core.$loose>>>;
                 name: z.ZodOptional<z.ZodString>;
                 tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     allProducts: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -285,9 +285,9 @@ export declare const SmartCartConfig: z.ZodObject<{
                     filterOosVariants: z.ZodOptional<z.ZodBoolean>;
                     id: z.ZodOptional<z.ZodString>;
                     minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-                    presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+                    presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                         enabled: z.ZodOptional<z.ZodBoolean>;
-                    }, z.core.$loose>>;
+                    }, z.core.$loose>>>;
                     productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
                     productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
                     productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -305,7 +305,7 @@ export declare const SmartCartConfig: z.ZodObject<{
                     unlockConditionType: z.ZodOptional<z.ZodString>;
                 }, z.core.$loose>>>;
             }, z.core.$loose>>>;
-        }, z.core.$loose>>;
+        }, z.core.$loose>>>>;
         type: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>>>;
 }, z.core.$loose>;

package/dist/schema/user-config.cjs

@@ -111,6 +111,13 @@ var ShopConfig = import_zod.z.object({
 
 // src/schema/smartCart.ts
 var import_zod2 = require("zod");
+
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
+// src/schema/smartCart.ts
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = import_zod2.z.looseObject({
   handle: import_zod2.z.string().optional(),
   id: import_zod2.z.coerce.number().optional(),
@@ -164,7 +171,11 @@ var SmartCartTier = import_zod2.z.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: import_zod2.z.preprocess((value) => value == null ? void 0 : value, import_zod2.z.coerce.number().optional()),
-  presentmentCurrencies: import_zod2.z.looseObject({ enabled: import_zod2.z.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: import_zod2.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod2.z.looseObject({ enabled: import_zod2.z.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: import_zod2.z.boolean().optional(),
   productAmountReachedLabelText: import_zod2.z.string().optional(),
   productAmountRemainingLabel: import_zod2.z.boolean().optional(),
@@ -217,16 +228,35 @@ var SmartCartBar = import_zod2.z.looseObject({
   freeShippingOnSubscription: import_zod2.z.boolean().optional(),
   geolocationEnabled: import_zod2.z.boolean().optional(),
   id: import_zod2.z.string().optional(),
-  language: import_zod2.z.looseObject({
-    freeShippingReached: import_zod2.z.string().optional(),
-    freeShippingRemaining: import_zod2.z.string().optional(),
-    giftAreaTitle: import_zod2.z.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: import_zod2.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod2.z.looseObject({
+      freeShippingReached: import_zod2.z.string().optional(),
+      freeShippingRemaining: import_zod2.z.string().optional(),
+      giftAreaTitle: import_zod2.z.string().optional()
+    }).optional()
+  ),
   name: import_zod2.z.string().optional(),
   tiers: import_zod2.z.array(SmartCartTier).optional()
 });
 var SmartCartComponent = import_zod2.z.looseObject({
-  settings: import_zod2.z.looseObject({ bars: import_zod2.z.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: import_zod2.z.preprocess(phpEmptyMapAsAbsent, import_zod2.z.looseObject({ bars: import_zod2.z.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: import_zod2.z.string().optional()
 });
 var SmartCartConfig = import_zod2.z.looseObject({

package/dist/schema/user-config.mjs

@@ -87,6 +87,13 @@ var ShopConfig = z.object({
 
 // src/schema/smartCart.ts
 import { z as z2 } from "zod";
+
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
+// src/schema/smartCart.ts
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = z2.looseObject({
   handle: z2.string().optional(),
   id: z2.coerce.number().optional(),
@@ -140,7 +147,11 @@ var SmartCartTier = z2.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: z2.preprocess((value) => value == null ? void 0 : value, z2.coerce.number().optional()),
-  presentmentCurrencies: z2.looseObject({ enabled: z2.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: z2.preprocess(
+    phpEmptyMapAsAbsent,
+    z2.looseObject({ enabled: z2.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: z2.boolean().optional(),
   productAmountReachedLabelText: z2.string().optional(),
   productAmountRemainingLabel: z2.boolean().optional(),
@@ -193,16 +204,35 @@ var SmartCartBar = z2.looseObject({
   freeShippingOnSubscription: z2.boolean().optional(),
   geolocationEnabled: z2.boolean().optional(),
   id: z2.string().optional(),
-  language: z2.looseObject({
-    freeShippingReached: z2.string().optional(),
-    freeShippingRemaining: z2.string().optional(),
-    giftAreaTitle: z2.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: z2.preprocess(
+    phpEmptyMapAsAbsent,
+    z2.looseObject({
+      freeShippingReached: z2.string().optional(),
+      freeShippingRemaining: z2.string().optional(),
+      giftAreaTitle: z2.string().optional()
+    }).optional()
+  ),
   name: z2.string().optional(),
   tiers: z2.array(SmartCartTier).optional()
 });
 var SmartCartComponent = z2.looseObject({
-  settings: z2.looseObject({ bars: z2.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: z2.preprocess(phpEmptyMapAsAbsent, z2.looseObject({ bars: z2.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: z2.string().optional()
 });
 var SmartCartConfig = z2.looseObject({

package/dist/schema/userConfig.d.ts

@@ -80,7 +80,7 @@ export declare const UserConfig: z.ZodObject<{
     }, z.core.$strip>;
     smartCart: z.ZodCatch<z.ZodOptional<z.ZodNullable<z.ZodObject<{
         components: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            settings: z.ZodOptional<z.ZodObject<{
+            settings: z.ZodCatch<z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                 bars: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     countryCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     excludeDiscountInSubtotal: z.ZodOptional<z.ZodBoolean>;
@@ -90,11 +90,11 @@ export declare const UserConfig: z.ZodObject<{
                     freeShippingOnSubscription: z.ZodOptional<z.ZodBoolean>;
                     geolocationEnabled: z.ZodOptional<z.ZodBoolean>;
                     id: z.ZodOptional<z.ZodString>;
-                    language: z.ZodOptional<z.ZodObject<{
+                    language: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                         freeShippingReached: z.ZodOptional<z.ZodString>;
                         freeShippingRemaining: z.ZodOptional<z.ZodString>;
                         giftAreaTitle: z.ZodOptional<z.ZodString>;
-                    }, z.core.$loose>>;
+                    }, z.core.$loose>>>;
                     name: z.ZodOptional<z.ZodString>;
                     tiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         allProducts: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -126,9 +126,9 @@ export declare const UserConfig: z.ZodObject<{
                         filterOosVariants: z.ZodOptional<z.ZodBoolean>;
                         id: z.ZodOptional<z.ZodString>;
                         minimum: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
-                        presentmentCurrencies: z.ZodOptional<z.ZodObject<{
+                        presentmentCurrencies: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
                             enabled: z.ZodOptional<z.ZodBoolean>;
-                        }, z.core.$loose>>;
+                        }, z.core.$loose>>>;
                         productAmountReachedLabel: z.ZodOptional<z.ZodBoolean>;
                         productAmountReachedLabelText: z.ZodOptional<z.ZodString>;
                         productAmountRemainingLabel: z.ZodOptional<z.ZodBoolean>;
@@ -146,7 +146,7 @@ export declare const UserConfig: z.ZodObject<{
                         unlockConditionType: z.ZodOptional<z.ZodString>;
                     }, z.core.$loose>>>;
                 }, z.core.$loose>>>;
-            }, z.core.$loose>>;
+            }, z.core.$loose>>>>;
             type: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>>>;
     }, z.core.$loose>>>>;

package/dist/server/index.cjs

@@ -1560,8 +1560,13 @@ var import_zod20 = require("zod");
 // src/schema/driftedMarkets.ts
 var DRIFTED_MARKETS = Object.freeze({ enabled: false });
 
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
 // src/schema/smartCart.ts
 var import_zod19 = require("zod");
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = import_zod19.z.looseObject({
   handle: import_zod19.z.string().optional(),
   id: import_zod19.z.coerce.number().optional(),
@@ -1615,7 +1620,11 @@ var SmartCartTier = import_zod19.z.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: import_zod19.z.preprocess((value) => value == null ? void 0 : value, import_zod19.z.coerce.number().optional()),
-  presentmentCurrencies: import_zod19.z.looseObject({ enabled: import_zod19.z.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: import_zod19.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod19.z.looseObject({ enabled: import_zod19.z.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: import_zod19.z.boolean().optional(),
   productAmountReachedLabelText: import_zod19.z.string().optional(),
   productAmountRemainingLabel: import_zod19.z.boolean().optional(),
@@ -1668,16 +1677,35 @@ var SmartCartBar = import_zod19.z.looseObject({
   freeShippingOnSubscription: import_zod19.z.boolean().optional(),
   geolocationEnabled: import_zod19.z.boolean().optional(),
   id: import_zod19.z.string().optional(),
-  language: import_zod19.z.looseObject({
-    freeShippingReached: import_zod19.z.string().optional(),
-    freeShippingRemaining: import_zod19.z.string().optional(),
-    giftAreaTitle: import_zod19.z.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: import_zod19.z.preprocess(
+    phpEmptyMapAsAbsent,
+    import_zod19.z.looseObject({
+      freeShippingReached: import_zod19.z.string().optional(),
+      freeShippingRemaining: import_zod19.z.string().optional(),
+      giftAreaTitle: import_zod19.z.string().optional()
+    }).optional()
+  ),
   name: import_zod19.z.string().optional(),
   tiers: import_zod19.z.array(SmartCartTier).optional()
 });
 var SmartCartComponent = import_zod19.z.looseObject({
-  settings: import_zod19.z.looseObject({ bars: import_zod19.z.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: import_zod19.z.preprocess(phpEmptyMapAsAbsent, import_zod19.z.looseObject({ bars: import_zod19.z.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: import_zod19.z.string().optional()
 });
 var SmartCartConfig = import_zod19.z.looseObject({
@@ -1780,7 +1808,7 @@ var CabShopConfig = import_zod20.z.object({
 });
 var CabUserConfig = import_zod20.z.object({
   shop: CabShopConfig,
-  smartCart: SmartCartConfig.nullish().catch(void 0)
+  smartCart: SmartCartConfig.nullish().catch(DRIFTED_SMART_CART)
 });
 
 // src/schema/widgets/checkout-and-beyond/image.ts
@@ -4500,6 +4528,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 var import_zod47 = require("zod");
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/transforms/postPurchase/convertCalloutBlock.ts
 var import_zod41 = require("zod");
 
@@ -5128,7 +5159,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",
@@ -6092,9 +6123,26 @@ var dispatchWidgetTransform = (id, normalized, report) => {
   if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
   return normalized;
 };
+var reportSmartCartDrift = (shop, smartCart, ctx) => {
+  if (smartCart === DRIFTED_SMART_CART) {
+    ctx.reportDrift?.({
+      detail: `smart cart config unreadable (drifted shape) \u2014 every progress bar dropped for ${shop}`,
+      kind: "shopConfig"
+    });
+    return;
+  }
+  const drifted = (smartCart?.components ?? []).filter((entry) => entry.settings === DRIFTED_SMART_CART_SETTINGS);
+  if (drifted.length) {
+    ctx.reportDrift?.({
+      detail: `smart cart component settings unreadable (drifted shape) \u2014 dropped for ${drifted.map((entry) => entry.type ?? "untyped").join(", ")} on ${shop}`,
+      kind: "shopConfig"
+    });
+  }
+};
 var fetchProgressBarContext = async (shop, ctx, prefetched) => {
   const config = prefetched === void 0 ? await fetchUserConfig({ shop }, ctx).catch(() => void 0) : prefetched;
   if (!config) return {};
+  reportSmartCartDrift(shop, config.smartCart, ctx);
   if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
     ctx.reportDrift?.({
       detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",

package/dist/server/index.mjs

@@ -1487,8 +1487,13 @@ import { z as z20 } from "zod";
 // src/schema/driftedMarkets.ts
 var DRIFTED_MARKETS = Object.freeze({ enabled: false });
 
+// src/schema/driftedSmartCart.ts
+var DRIFTED_SMART_CART_SETTINGS = Object.freeze({});
+var DRIFTED_SMART_CART = Object.freeze({});
+
 // src/schema/smartCart.ts
 import { z as z19 } from "zod";
+var phpEmptyMapAsAbsent = (value) => Array.isArray(value) && value.length === 0 ? void 0 : value;
 var SmartCartTierProduct = z19.looseObject({
   handle: z19.string().optional(),
   id: z19.coerce.number().optional(),
@@ -1542,7 +1547,11 @@ var SmartCartTier = z19.looseObject({
    * `'50' → 50` and keeps the tier (a numeric-string minimum is a valid threshold, not a data defect).
    */
   minimum: z19.preprocess((value) => value == null ? void 0 : value, z19.coerce.number().optional()),
-  presentmentCurrencies: z19.looseObject({ enabled: z19.boolean().optional() }).optional(),
+  /** An empty map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed tier. */
+  presentmentCurrencies: z19.preprocess(
+    phpEmptyMapAsAbsent,
+    z19.looseObject({ enabled: z19.boolean().optional() }).optional()
+  ),
   productAmountReachedLabel: z19.boolean().optional(),
   productAmountReachedLabelText: z19.string().optional(),
   productAmountRemainingLabel: z19.boolean().optional(),
@@ -1595,16 +1604,35 @@ var SmartCartBar = z19.looseObject({
   freeShippingOnSubscription: z19.boolean().optional(),
   geolocationEnabled: z19.boolean().optional(),
   id: z19.string().optional(),
-  language: z19.looseObject({
-    freeShippingReached: z19.string().optional(),
-    freeShippingRemaining: z19.string().optional(),
-    giftAreaTitle: z19.string().optional()
-  }).optional(),
+  /** An empty `language` map arrives as PHP's `[]` (see {@link phpEmptyMapAsAbsent}) — absent, not a failed bar. */
+  language: z19.preprocess(
+    phpEmptyMapAsAbsent,
+    z19.looseObject({
+      freeShippingReached: z19.string().optional(),
+      freeShippingRemaining: z19.string().optional(),
+      giftAreaTitle: z19.string().optional()
+    }).optional()
+  ),
   name: z19.string().optional(),
   tiers: z19.array(SmartCartTier).optional()
 });
 var SmartCartComponent = z19.looseObject({
-  settings: z19.looseObject({ bars: z19.array(SmartCartBar).optional() }).optional(),
+  /**
+   * Every component in the layout is parsed, not just the progress bar, so this field is the blast-radius
+   * boundary (REB-25139): before it caught, b.box's `cart_items` component arriving as `settings: []` failed
+   * the component, the `components` array and the whole config — and `CabUserConfig`'s config-level catch
+   * then silently dropped every progress bar for the shop. Now:
+   *
+   * - PHP's empty-map `[]` reads as absent ({@link phpEmptyMapAsAbsent}) — normal engine vocabulary, no drift.
+   * - Any other unreadable settings (a string, a non-empty array, a bar that fails its schema) `.catch` to the
+   * {@link DRIFTED_SMART_CART_SETTINGS} identity sentinel: that component loses its settings (no bars),
+   * its siblings — and the progress bar, when it is a sibling — still parse, and the server's progress-bar
+   * resolution emits a `shopConfig` drift on seeing the sentinel.
+   *
+   * Bars are not salvaged per element: the only reader takes the first progress-bar component's bars as a
+   * set (one per geo segment), and a drifted bar now costs that component's bars WITH a drift, not the cart.
+   */
+  settings: z19.preprocess(phpEmptyMapAsAbsent, z19.looseObject({ bars: z19.array(SmartCartBar).optional() }).optional()).catch(DRIFTED_SMART_CART_SETTINGS),
   type: z19.string().optional()
 });
 var SmartCartConfig = z19.looseObject({
@@ -1707,7 +1735,7 @@ var CabShopConfig = z20.object({
 });
 var CabUserConfig = z20.object({
   shop: CabShopConfig,
-  smartCart: SmartCartConfig.nullish().catch(void 0)
+  smartCart: SmartCartConfig.nullish().catch(DRIFTED_SMART_CART)
 });
 
 // src/schema/widgets/checkout-and-beyond/image.ts
@@ -4427,6 +4455,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 import { z as z47 } from "zod";
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/transforms/postPurchase/convertCalloutBlock.ts
 import { z as z41 } from "zod";
 
@@ -5055,7 +5086,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",
@@ -6019,9 +6050,26 @@ var dispatchWidgetTransform = (id, normalized, report) => {
   if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
   return normalized;
 };
+var reportSmartCartDrift = (shop, smartCart, ctx) => {
+  if (smartCart === DRIFTED_SMART_CART) {
+    ctx.reportDrift?.({
+      detail: `smart cart config unreadable (drifted shape) \u2014 every progress bar dropped for ${shop}`,
+      kind: "shopConfig"
+    });
+    return;
+  }
+  const drifted = (smartCart?.components ?? []).filter((entry) => entry.settings === DRIFTED_SMART_CART_SETTINGS);
+  if (drifted.length) {
+    ctx.reportDrift?.({
+      detail: `smart cart component settings unreadable (drifted shape) \u2014 dropped for ${drifted.map((entry) => entry.type ?? "untyped").join(", ")} on ${shop}`,
+      kind: "shopConfig"
+    });
+  }
+};
 var fetchProgressBarContext = async (shop, ctx, prefetched) => {
   const config = prefetched === void 0 ? await fetchUserConfig({ shop }, ctx).catch(() => void 0) : prefetched;
   if (!config) return {};
+  reportSmartCartDrift(shop, config.smartCart, ctx);
   if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
     ctx.reportDrift?.({
       detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",

package/dist/transforms/index.cjs

@@ -3717,6 +3717,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 var import_zod34 = require("zod");
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/server/shared.ts
 var NotFoundError = class extends Error {
   constructor(message) {
@@ -4706,7 +4709,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/dist/transforms/index.mjs

@@ -3656,6 +3656,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 import { z as z34 } from "zod";
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/server/shared.ts
 var NotFoundError = class extends Error {
   constructor(message) {
@@ -4645,7 +4648,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rebuy/rebuy",
-    "version": "3.60.1",
+    "version": "3.60.3",
     "description": "Shared zod schemas, legacy-to-CAB widget transforms, and server orchestrators for Rebuy's Shopify consumers (rebuy-api, admin-nextjs, rebuy-shopify-extensions)",
     "license": "MIT",
     "author": "Rebuy, Inc.",