@rebuy/rebuy 3.60.2 → 3.60.3

package/dist/cab/hasOwnKey.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Whether `key` is an OWN key of `object`, never an inherited `Object.prototype` one (`constructor`,
+ * `toString`, `__proto__`) — what `Object.hasOwn` answers, without needing it. `Object.hasOwn` is ES2022:
+ * Safari/iOS before 15.4 and Chromium before 93 lack it, those buyers still load every renderer that bundles
+ * `./cab`, and esbuild's `es2020` target rewrites syntax only, so the call shipped as-is and threw on the first
+ * section render (REB-24990). Read off `Object.prototype` so an own `hasOwnProperty` key cannot shadow it.
+ */
+export declare const hasOwnKey: (object: object, key: PropertyKey) => boolean;

package/dist/cab/index.cjs

@@ -45,6 +45,9 @@ var asLayout = (section) => ({
   visibility: void 0
 });
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/schema/widgets/checkout-and-beyond/regex.ts
 var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
 var DYNAMIC_TOKEN_ANYWHERE_REGEX = /\{\{\s*[A-Za-z0-9_]+\s*\}\}/;
@@ -54,9 +57,9 @@ var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
 var TOKEN_REGEX = /{{1,2}\s*([^{}\s]+)\s*}{1,2}/g;
 var toCamelCase = (key) => key.replace(/_([a-z0-9])/g, (_, char) => char.toUpperCase());
 var resolveKey = (key, variables) => {
-  if (Object.hasOwn(variables, key)) return key;
+  if (hasOwnKey(variables, key)) return key;
   const camel = toCamelCase(key);
-  if (Object.hasOwn(variables, camel)) return camel;
+  if (hasOwnKey(variables, camel)) return camel;
   const lower = camel.toLowerCase();
   return Object.keys(variables).find((name) => name.toLowerCase() === lower);
 };
@@ -70,8 +73,8 @@ var interpolateAndSanitize = (input, variables) => (input ?? "").replace(TOKEN_R
 var FALLBACK_LANGUAGE = "en";
 var selectLanguage = (content, language) => {
   if (!content) return void 0;
-  if (language && Object.hasOwn(content, language)) return content[language];
-  if (Object.hasOwn(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
+  if (language && hasOwnKey(content, language)) return content[language];
+  if (hasOwnKey(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
   return Object.values(content)[0];
 };
 

package/dist/cab/index.mjs

@@ -7,6 +7,9 @@ var asLayout = (section) => ({
   visibility: void 0
 });
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/schema/widgets/checkout-and-beyond/regex.ts
 var DYNAMIC_TOKEN_REGEX = /^\{\{\s*[A-Za-z]+\s*\}\}$/;
 var DYNAMIC_TOKEN_ANYWHERE_REGEX = /\{\{\s*[A-Za-z0-9_]+\s*\}\}/;
@@ -16,9 +19,9 @@ var HTML_TAGS_REGEX = /<\/?[a-zA-Z][^>]*>/g;
 var TOKEN_REGEX = /{{1,2}\s*([^{}\s]+)\s*}{1,2}/g;
 var toCamelCase = (key) => key.replace(/_([a-z0-9])/g, (_, char) => char.toUpperCase());
 var resolveKey = (key, variables) => {
-  if (Object.hasOwn(variables, key)) return key;
+  if (hasOwnKey(variables, key)) return key;
   const camel = toCamelCase(key);
-  if (Object.hasOwn(variables, camel)) return camel;
+  if (hasOwnKey(variables, camel)) return camel;
   const lower = camel.toLowerCase();
   return Object.keys(variables).find((name) => name.toLowerCase() === lower);
 };
@@ -32,8 +35,8 @@ var interpolateAndSanitize = (input, variables) => (input ?? "").replace(TOKEN_R
 var FALLBACK_LANGUAGE = "en";
 var selectLanguage = (content, language) => {
   if (!content) return void 0;
-  if (language && Object.hasOwn(content, language)) return content[language];
-  if (Object.hasOwn(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
+  if (language && hasOwnKey(content, language)) return content[language];
+  if (hasOwnKey(content, FALLBACK_LANGUAGE)) return content[FALLBACK_LANGUAGE];
   return Object.values(content)[0];
 };
 

package/dist/cab/selectLanguage.d.ts

@@ -1,7 +1,7 @@
 /**
  * Fallback chain: requested language, then 'en', then first available value.
  *
- * `Object.hasOwn`, never `in` — `in` would resolve an inherited `Object.prototype` key (`constructor`,
+ * Own keys only (`hasOwnKey`), never `in` — `in` would resolve an inherited `Object.prototype` key (`constructor`,
  * `toString`) as if it were a translation. Far less reachable than in `interpolateAndSanitize`, since a
  * language code is not merchant-authored, but the two must agree on what counts as present.
  */

package/dist/server/index.cjs

@@ -4528,6 +4528,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 var import_zod47 = require("zod");
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/transforms/postPurchase/convertCalloutBlock.ts
 var import_zod41 = require("zod");
 
@@ -5156,7 +5159,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/dist/server/index.mjs

@@ -4455,6 +4455,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 import { z as z47 } from "zod";
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/transforms/postPurchase/convertCalloutBlock.ts
 import { z as z41 } from "zod";
 
@@ -5083,7 +5086,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/dist/transforms/index.cjs

@@ -3717,6 +3717,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 var import_zod34 = require("zod");
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/server/shared.ts
 var NotFoundError = class extends Error {
   constructor(message) {
@@ -4706,7 +4709,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/dist/transforms/index.mjs

@@ -3656,6 +3656,9 @@ var parseShielded = (schema, raw, transform = (input) => input) => schema.parse(
 // src/transforms/postPurchase/convertMessagePreview.ts
 import { z as z34 } from "zod";
 
+// src/cab/hasOwnKey.ts
+var hasOwnKey = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+
 // src/server/shared.ts
 var NotFoundError = class extends Error {
   constructor(message) {
@@ -4645,7 +4648,7 @@ var convertMessagePreview = (id, settings, report) => {
     sections: parsed.data.blocks.flatMap((block) => {
       const type = BlockType2.safeParse(block);
       const kind = type.success ? type.data.type : void 0;
-      const convert2 = kind && Object.hasOwn(converters, kind) ? converters[kind] : void 0;
+      const convert2 = kind && hasOwnKey(converters, kind) ? converters[kind] : void 0;
       if (convert2) return convert2(block, report, settings);
       report?.({
         detail: kind ? `Unsupported post-purchase block type: ${kind}` : "Unreadable post-purchase block: missing type",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rebuy/rebuy",
-    "version": "3.60.2",
+    "version": "3.60.3",
     "description": "Shared zod schemas, legacy-to-CAB widget transforms, and server orchestrators for Rebuy's Shopify consumers (rebuy-api, admin-nextjs, rebuy-shopify-extensions)",
     "license": "MIT",
     "author": "Rebuy, Inc.",