@rebuy/rebuy 3.7.0 → 3.8.0

package/dist/index.cjs

@@ -2519,7 +2519,13 @@ var import_zod23 = require("zod");
 var CABMonetizeSection = import_zod23.z.object({
   ...CABVariableFields,
   name: import_zod23.z.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: import_zod23.z.array(import_zod23.z.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: import_zod23.z.string().optional(),
   sectionId: import_zod23.z.uuid().default(() => (0, import_uuid9.v7)()),
   sectionType: import_zod23.z.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/index.mjs

@@ -2238,7 +2238,13 @@ import { z as z23 } from "zod";
 var CABMonetizeSection = z23.object({
   ...CABVariableFields,
   name: z23.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: z23.array(z23.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: z23.string().optional(),
   sectionId: z23.uuid().default(() => uuidv78()),
   sectionType: z23.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/schema/checkout-and-beyond/index.cjs

@@ -1088,7 +1088,13 @@ var import_zod13 = require("zod");
 var CABMonetizeSection = import_zod13.z.object({
   ...CABVariableFields,
   name: import_zod13.z.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: import_zod13.z.array(import_zod13.z.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: import_zod13.z.string().optional(),
   sectionId: import_zod13.z.uuid().default(() => (0, import_uuid8.v7)()),
   sectionType: import_zod13.z.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/schema/checkout-and-beyond/index.mjs

@@ -896,7 +896,13 @@ import { z as z13 } from "zod";
 var CABMonetizeSection = z13.object({
   ...CABVariableFields,
   name: z13.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: z13.array(z13.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: z13.string().optional(),
   sectionId: z13.uuid().default(() => uuidv78()),
   sectionType: z13.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/schema/widget-data.cjs

@@ -934,7 +934,13 @@ var import_zod16 = require("zod");
 var CABMonetizeSection = import_zod16.z.object({
   ...CABVariableFields,
   name: import_zod16.z.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: import_zod16.z.array(import_zod16.z.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: import_zod16.z.string().optional(),
   sectionId: import_zod16.z.uuid().default(() => (0, import_uuid8.v7)()),
   sectionType: import_zod16.z.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/schema/widget-data.mjs

@@ -909,7 +909,13 @@ import { z as z16 } from "zod";
 var CABMonetizeSection = z16.object({
   ...CABVariableFields,
   name: z16.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: z16.array(z16.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: z16.string().optional(),
   sectionId: z16.uuid().default(() => uuidv78()),
   sectionType: z16.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/schema/widgets/checkout-and-beyond/monetize.d.ts

@@ -1,7 +1,9 @@
 import { z } from 'zod';
-import { type SectionDetails } from './shared';
+import { CABSection, type SectionDetails } from './shared';
+import { CABVariableFields } from './variables';
 export declare const CABMonetizeSection: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
+    offers: z.ZodOptional<z.ZodArray<z.ZodLazy<z.ZodType<CABSection, unknown, z.core.$ZodTypeInternals<CABSection, unknown>>>>>;
     privacyPolicyUrl: z.ZodOptional<z.ZodString>;
     sectionId: z.ZodDefault<z.ZodUUID>;
     sectionType: z.ZodDefault<z.ZodLiteral<"monetize">>;
@@ -154,5 +156,14 @@ export declare const CABMonetizeSection: z.ZodObject<{
         visibleWhen: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
-export type CABMonetizeSection = z.infer<typeof CABMonetizeSection>;
+/** Twin of the schema above — `offers` makes this a recursive node (see recursiveTwins.test.ts). */
+export type CABMonetizeSection = CABVariableFields & {
+    name?: string;
+    offers?: CABSection[];
+    privacyPolicyUrl?: string;
+    sectionId: string;
+    sectionType: 'monetize';
+    subVertical?: string;
+    vertical?: string;
+};
 export type CABMonetizeSectionProps = CABMonetizeSection & SectionDetails;

package/dist/server/index.cjs

@@ -1478,7 +1478,13 @@ var import_zod20 = require("zod");
 var CABMonetizeSection = import_zod20.z.object({
   ...CABVariableFields,
   name: import_zod20.z.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: import_zod20.z.array(import_zod20.z.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: import_zod20.z.string().optional(),
   sectionId: import_zod20.z.uuid().default(() => (0, import_uuid8.v7)()),
   sectionType: import_zod20.z.literal(SectionType.monetize).default(SectionType.monetize),
@@ -3843,184 +3849,6 @@ var fetchDataSourceResults = async (input, ctx) => {
   };
 };
 
-// src/server/salvageSections.ts
-var import_uuid14 = require("uuid");
-var STUB_SECTION_TYPE = "unknown";
-var knownSectionTypes = new Set(sectionTypes);
-var hasSectionsArray = (raw) => typeof raw === "object" && raw !== null && Array.isArray(raw.sections);
-var stubSection = (raw, report) => {
-  const record = typeof raw === "object" && raw !== null ? raw : {};
-  const original = record.sectionType;
-  const rawId = record.sectionId;
-  report?.({
-    detail: `invalid section (${typeof original === "string" ? original : "no sectionType"})`,
-    kind: "section"
-  });
-  return {
-    sectionId: typeof rawId === "string" && rawId ? rawId : (0, import_uuid14.v7)(),
-    sectionType: typeof original === "string" && !knownSectionTypes.has(original) ? original : STUB_SECTION_TYPE
-  };
-};
-var salvageSection = (raw, report) => {
-  const parsed = CABSection.safeParse(raw);
-  if (parsed.success) return parsed.data;
-  if (hasSectionsArray(raw)) {
-    const shell = CABSection.safeParse({ ...raw, sections: [] });
-    if (shell.success)
-      return { ...shell.data, sections: raw.sections.map((child) => salvageSection(child, report)) };
-  }
-  return stubSection(raw, report);
-};
-var salvageRootSection = (raw, report) => {
-  const shell = CABRootSection.safeParse(hasSectionsArray(raw) ? { ...raw, sections: [] } : raw);
-  if (!shell.success) return CABRootSection.parse(raw);
-  const sections = hasSectionsArray(raw) ? raw.sections.map((child) => salvageSection(child, report)) : [];
-  return { ...shell.data, sections };
-};
-
-// src/server/widgetSettings.ts
-var isMissingUpstreamPayload = isEmptyObject;
-var dispatchWidgetTransform = (id, normalized, report) => {
-  if (isCABRootSection(normalized)) return salvageRootSection(normalizeTextContent(normalized), report);
-  if (isContentBlockV1(normalized)) return convertContentBlockToV2({ id, settings: normalized });
-  if (isLineItemEditorV1(normalized)) return convertLineItemEditorToV2({ id, settings: normalized });
-  if (isMonetizeV1(normalized)) return convertMonetizeToV2({ id, settings: normalized });
-  if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
-  return normalized;
-};
-var fetchProgressBarContext = async (shop, ctx) => {
-  const config = await fetchUserConfig({ shop }, ctx).catch(() => void 0);
-  if (!config) return {};
-  if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
-    ctx.reportDrift?.({
-      detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",
-      kind: "shopConfig"
-    });
-  }
-  const entitled = config.shop.billingVersion !== "v6" || config.shop.activePackages.some((pkg) => pkg.shortName === "cart-merchandising" && pkg.isActive);
-  return {
-    bars: entitled ? extractSmartCartBars(config.smartCart) : [],
-    progressColor: await fetchThemeColor(config.shop.shopId, ctx)
-  };
-};
-var fetchThemeColor = async (shopId, ctx) => {
-  if (!shopId) return void 0;
-  try {
-    const theme = await ctx.fetchUpstream(`/admin/api/v1/shop/theme/${shopId}`, {}, { host: ctx.host });
-    const color = theme.theme?.settings?.buttonBackground;
-    return typeof color === "string" && color ? color : void 0;
-  } catch {
-    return void 0;
-  }
-};
-var colorlessProgressBars = (section) => {
-  const own = section.sectionType === SectionType.progressBar && section.progressColor === void 0;
-  const nested = (section.sections ?? []).flatMap((child) => colorlessProgressBars(child));
-  return own ? [section, ...nested] : nested;
-};
-var fetchAndConvert = async (id, input, ctx) => {
-  const params = { id: String(id), shop: input.shop };
-  if (input.cacheKey != null) params.cache_key = String(input.cacheKey);
-  if (input.key) params.key = input.key;
-  let upstream;
-  try {
-    upstream = await ctx.fetchUpstream("/api/v1/widgets/settings", params, { host: ctx.host });
-  } catch (err) {
-    if (err instanceof UpstreamError && [400, 404, 410].includes(err.status)) {
-      throw new NotFoundError(`Widget not found: ${id}`);
-    }
-    throw err;
-  }
-  const data = unwrapData(upstream);
-  if (isMissingUpstreamPayload(data)) throw new NotFoundError(`Widget not found: ${id}`);
-  const normalized = convertNumericObjects(deepCamelCase(data));
-  if (isProgressBarV1(normalized) && normalized.barSettings.barType === "smart-cart") {
-    const { bars, progressColor } = await fetchProgressBarContext(input.shop, ctx);
-    return convertSmartCartProgressBarToV2({ bars: bars ?? [], id, progressColor, settings: normalized });
-  }
-  if (isConvertibleProgressBarV1(normalized)) {
-    const { progressColor } = await fetchProgressBarContext(input.shop, ctx);
-    return convertProgressBarToV2({ id, progressColor, settings: normalized });
-  }
-  const converted = dispatchWidgetTransform(id, normalized, ctx.reportDrift);
-  const colorless = isCABRootSection(normalized) ? colorlessProgressBars(converted) : [];
-  if (colorless.length > 0) {
-    const { progressColor: color } = await fetchProgressBarContext(input.shop, ctx);
-    if (color) for (const bar of colorless) bar.progressColor = color;
-  }
-  return converted;
-};
-var resolveWidgetExperiment = async (input, ctx) => {
-  if (!input.visitorId) return void 0;
-  try {
-    const { shop } = await fetchUserConfig({ shop: input.shop }, ctx);
-    return resolveExperiment(shop.activeExperiments, input.id, input.visitorId);
-  } catch {
-    return void 0;
-  }
-};
-var isCABTree = (result) => result.version === 2;
-var convertWidgetSettings = async (input, ctx) => {
-  const experiment = await resolveWidgetExperiment(input, ctx);
-  const result = await fetchAndConvert(experiment?.elementId ?? input.id, input, ctx);
-  return experiment && isCABTree(result) ? { ...result, experiment } : result;
-};
-
-// src/server/giftValidation.ts
-var resolveDataSourcePath = async (widgetId, shop, ctx) => {
-  const raw = await ctx.fetchUpstream("/api/v1/widgets/settings", { id: String(widgetId), shop }, { host: ctx.host });
-  const data = raw && typeof raw === "object" && "data" in raw ? raw.data : raw;
-  const endpoint = deepCamelCase(data)?.endpoint;
-  return typeof endpoint === "string" && endpoint ? endpoint : void 0;
-};
-var groupByWidget = (gifts) => {
-  const byWidget = /* @__PURE__ */ new Map();
-  for (const gift of gifts) {
-    byWidget.set(gift.widgetId, [...byWidget.get(gift.widgetId) ?? [], gift]);
-  }
-  return byWidget;
-};
-var validateGifts = async (input, ctx) => {
-  const perWidget = await Promise.all(
-    [...groupByWidget(input.gifts)].map(async ([widgetId, gifts]) => {
-      const discountLost = gifts.filter(hasLostDiscount).map((gift) => gift.lineId);
-      try {
-        const dataSourcePath = await resolveDataSourcePath(widgetId, input.shop, ctx);
-        if (!dataSourcePath) return discountLost;
-        const { metadata } = await fetchDataSourceResults(
-          {
-            cart: input.cart,
-            /** Market context threads through so a market-gated gift rule answers for the buyer's market — as engine params, inheriting the shop's markets-toggle gate (REB-21688). */
-            country: input.country,
-            customerId: input.customerId,
-            dataSourcePath,
-            /** The gift being validated is in the cart — input filtering would erase it from the answer. */
-            filterInputs: "no",
-            language: input.language,
-            /**
-             * `limit: 0` fetches NO products — only the rule verdict is needed. Safe because the engine
-             * derives `matchedRules` from rule-config evaluation, not from fetched results (traced through
-             * `api.php`), so the metadata is complete at limit 0. Don't raise it to "fix" a non-bug.
-             */
-            limit: 0,
-            shop: input.shop,
-            visitorId: input.visitorId
-          },
-          ctx
-        );
-        const meta = metadata ?? void 0;
-        if (!isDefinitiveRuleAnswer(meta) || hasUnsupportedRuleTypes(meta)) return discountLost;
-        const validIds = getValidGwpProductIds(meta.matchedRules);
-        if (validIds.size === 0 && !isConfirmedRuleMiss(meta)) return discountLost;
-        return gifts.filter((gift) => shouldRemoveGift(gift, validIds)).map((gift) => gift.lineId);
-      } catch {
-        return discountLost;
-      }
-    })
-  );
-  return { remove: perWidget.flat() };
-};
-
 // src/server/adsEngine.ts
 var import_zod28 = require("zod");
 var SUPPLY_KEY = { production: "AQF5RKLR", staging: "Z56LQ7PS" };
@@ -4067,6 +3895,7 @@ var buildAdsParams = (input, publisherKey, supplyKey, testing, userAgent, ipAddr
     testing: String(testing),
     transaction_total: String(input.transactionTotal ?? input.cart.subtotal),
     ...items.length > 0 && { transaction_items: JSON.stringify(items) },
+    ...input.clientRequestId && { client_request_id: input.clientRequestId },
     ...input.country && { country_code: input.country },
     ...input.currency && { currency_code: input.currency },
     ...input.customerEmail && { customer_email: input.customerEmail },
@@ -4250,6 +4079,216 @@ var fetchMonetizeOffers = async (input, ctx) => {
   return { offers };
 };
 
+// src/server/salvageSections.ts
+var import_uuid14 = require("uuid");
+var STUB_SECTION_TYPE = "unknown";
+var knownSectionTypes = new Set(sectionTypes);
+var hasSectionsArray = (raw) => typeof raw === "object" && raw !== null && Array.isArray(raw.sections);
+var stubSection = (raw, report) => {
+  const record = typeof raw === "object" && raw !== null ? raw : {};
+  const original = record.sectionType;
+  const rawId = record.sectionId;
+  report?.({
+    detail: `invalid section (${typeof original === "string" ? original : "no sectionType"})`,
+    kind: "section"
+  });
+  return {
+    sectionId: typeof rawId === "string" && rawId ? rawId : (0, import_uuid14.v7)(),
+    sectionType: typeof original === "string" && !knownSectionTypes.has(original) ? original : STUB_SECTION_TYPE
+  };
+};
+var salvageSection = (raw, report) => {
+  const parsed = CABSection.safeParse(raw);
+  if (parsed.success) return parsed.data;
+  if (hasSectionsArray(raw)) {
+    const shell = CABSection.safeParse({ ...raw, sections: [] });
+    if (shell.success)
+      return { ...shell.data, sections: raw.sections.map((child) => salvageSection(child, report)) };
+  }
+  return stubSection(raw, report);
+};
+var salvageRootSection = (raw, report) => {
+  const shell = CABRootSection.safeParse(hasSectionsArray(raw) ? { ...raw, sections: [] } : raw);
+  if (!shell.success) return CABRootSection.parse(raw);
+  const sections = hasSectionsArray(raw) ? raw.sections.map((child) => salvageSection(child, report)) : [];
+  return { ...shell.data, sections };
+};
+
+// src/server/widgetSettings.ts
+var isMissingUpstreamPayload = isEmptyObject;
+var dispatchWidgetTransform = (id, normalized, report) => {
+  if (isCABRootSection(normalized)) return salvageRootSection(normalizeTextContent(normalized), report);
+  if (isContentBlockV1(normalized)) return convertContentBlockToV2({ id, settings: normalized });
+  if (isLineItemEditorV1(normalized)) return convertLineItemEditorToV2({ id, settings: normalized });
+  if (isMonetizeV1(normalized)) return convertMonetizeToV2({ id, settings: normalized });
+  if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
+  return normalized;
+};
+var fetchProgressBarContext = async (shop, ctx) => {
+  const config = await fetchUserConfig({ shop }, ctx).catch(() => void 0);
+  if (!config) return {};
+  if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
+    ctx.reportDrift?.({
+      detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",
+      kind: "shopConfig"
+    });
+  }
+  const entitled = config.shop.billingVersion !== "v6" || config.shop.activePackages.some((pkg) => pkg.shortName === "cart-merchandising" && pkg.isActive);
+  return {
+    bars: entitled ? extractSmartCartBars(config.smartCart) : [],
+    progressColor: await fetchThemeColor(config.shop.shopId, ctx)
+  };
+};
+var fetchThemeColor = async (shopId, ctx) => {
+  if (!shopId) return void 0;
+  try {
+    const theme = await ctx.fetchUpstream(`/admin/api/v1/shop/theme/${shopId}`, {}, { host: ctx.host });
+    const color = theme.theme?.settings?.buttonBackground;
+    return typeof color === "string" && color ? color : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var colorlessProgressBars = (section) => {
+  const own = section.sectionType === SectionType.progressBar && section.progressColor === void 0;
+  const nested = (section.sections ?? []).flatMap((child) => colorlessProgressBars(child));
+  return own ? [section, ...nested] : nested;
+};
+var isCABTree = (result) => result.version === 2;
+var findMonetizeMarker = (section) => {
+  if (section.sectionType === SectionType.monetize && section.offers === void 0) return section;
+  if (!Array.isArray(section.sections)) return void 0;
+  for (const child of section.sections) {
+    const found = findMonetizeMarker(child);
+    if (found) return found;
+  }
+  return void 0;
+};
+var hydrateMonetizeMarkers = async (converted, input, ctx) => {
+  if (!input.monetize || !isCABTree(converted)) return;
+  const first = findMonetizeMarker(converted);
+  if (!first) return;
+  try {
+    const { offers } = await fetchMonetizeOffers(
+      {
+        ...input.monetize,
+        privacyPolicyUrl: first.privacyPolicyUrl,
+        shop: input.shop,
+        visitorId: input.monetize.visitorId || input.visitorId
+      },
+      ctx
+    );
+    first.offers = offers;
+  } catch (err) {
+    ctx.reportDrift?.({
+      detail: `inline hydration failed: ${err instanceof Error ? err.message : String(err)}`,
+      kind: "monetizeOffer"
+    });
+  }
+};
+var fetchAndConvert = async (id, input, ctx) => {
+  const params = { id: String(id), shop: input.shop };
+  if (input.cacheKey != null) params.cache_key = String(input.cacheKey);
+  if (input.key) params.key = input.key;
+  let upstream;
+  try {
+    upstream = await ctx.fetchUpstream("/api/v1/widgets/settings", params, { host: ctx.host });
+  } catch (err) {
+    if (err instanceof UpstreamError && [400, 404, 410].includes(err.status)) {
+      throw new NotFoundError(`Widget not found: ${id}`);
+    }
+    throw err;
+  }
+  const data = unwrapData(upstream);
+  if (isMissingUpstreamPayload(data)) throw new NotFoundError(`Widget not found: ${id}`);
+  const normalized = convertNumericObjects(deepCamelCase(data));
+  if (isProgressBarV1(normalized) && normalized.barSettings.barType === "smart-cart") {
+    const { bars, progressColor } = await fetchProgressBarContext(input.shop, ctx);
+    return convertSmartCartProgressBarToV2({ bars: bars ?? [], id, progressColor, settings: normalized });
+  }
+  if (isConvertibleProgressBarV1(normalized)) {
+    const { progressColor } = await fetchProgressBarContext(input.shop, ctx);
+    return convertProgressBarToV2({ id, progressColor, settings: normalized });
+  }
+  const converted = dispatchWidgetTransform(id, normalized, ctx.reportDrift);
+  const colorless = isCABRootSection(normalized) ? colorlessProgressBars(converted) : [];
+  if (colorless.length > 0) {
+    const { progressColor: color } = await fetchProgressBarContext(input.shop, ctx);
+    if (color) for (const bar of colorless) bar.progressColor = color;
+  }
+  return converted;
+};
+var resolveWidgetExperiment = async (input, ctx) => {
+  if (!input.visitorId) return void 0;
+  try {
+    const { shop } = await fetchUserConfig({ shop: input.shop }, ctx);
+    return resolveExperiment(shop.activeExperiments, input.id, input.visitorId);
+  } catch {
+    return void 0;
+  }
+};
+var convertWidgetSettings = async (input, ctx) => {
+  const experiment = await resolveWidgetExperiment(input, ctx);
+  const result = await fetchAndConvert(experiment?.elementId ?? input.id, input, ctx);
+  await hydrateMonetizeMarkers(result, input, ctx);
+  return experiment && isCABTree(result) ? { ...result, experiment } : result;
+};
+
+// src/server/giftValidation.ts
+var resolveDataSourcePath = async (widgetId, shop, ctx) => {
+  const raw = await ctx.fetchUpstream("/api/v1/widgets/settings", { id: String(widgetId), shop }, { host: ctx.host });
+  const data = raw && typeof raw === "object" && "data" in raw ? raw.data : raw;
+  const endpoint = deepCamelCase(data)?.endpoint;
+  return typeof endpoint === "string" && endpoint ? endpoint : void 0;
+};
+var groupByWidget = (gifts) => {
+  const byWidget = /* @__PURE__ */ new Map();
+  for (const gift of gifts) {
+    byWidget.set(gift.widgetId, [...byWidget.get(gift.widgetId) ?? [], gift]);
+  }
+  return byWidget;
+};
+var validateGifts = async (input, ctx) => {
+  const perWidget = await Promise.all(
+    [...groupByWidget(input.gifts)].map(async ([widgetId, gifts]) => {
+      const discountLost = gifts.filter(hasLostDiscount).map((gift) => gift.lineId);
+      try {
+        const dataSourcePath = await resolveDataSourcePath(widgetId, input.shop, ctx);
+        if (!dataSourcePath) return discountLost;
+        const { metadata } = await fetchDataSourceResults(
+          {
+            cart: input.cart,
+            /** Market context threads through so a market-gated gift rule answers for the buyer's market — as engine params, inheriting the shop's markets-toggle gate (REB-21688). */
+            country: input.country,
+            customerId: input.customerId,
+            dataSourcePath,
+            /** The gift being validated is in the cart — input filtering would erase it from the answer. */
+            filterInputs: "no",
+            language: input.language,
+            /**
+             * `limit: 0` fetches NO products — only the rule verdict is needed. Safe because the engine
+             * derives `matchedRules` from rule-config evaluation, not from fetched results (traced through
+             * `api.php`), so the metadata is complete at limit 0. Don't raise it to "fix" a non-bug.
+             */
+            limit: 0,
+            shop: input.shop,
+            visitorId: input.visitorId
+          },
+          ctx
+        );
+        const meta = metadata ?? void 0;
+        if (!isDefinitiveRuleAnswer(meta) || hasUnsupportedRuleTypes(meta)) return discountLost;
+        const validIds = getValidGwpProductIds(meta.matchedRules);
+        if (validIds.size === 0 && !isConfirmedRuleMiss(meta)) return discountLost;
+        return gifts.filter((gift) => shouldRemoveGift(gift, validIds)).map((gift) => gift.lineId);
+      } catch {
+        return discountLost;
+      }
+    })
+  );
+  return { remove: perWidget.flat() };
+};
+
 // src/server/analytics.ts
 var import_es_toolkit7 = require("es-toolkit");
 var EXPERIMENT_TYPE_MAP = {
@@ -4421,14 +4460,6 @@ var CartInputSchema = import_zod29.z.object({
   /** Presentment subtotal in cents. */
   subtotal: import_zod29.z.number()
 });
-var WidgetSettingsInputSchema = import_zod29.z.object({
-  cacheKey: import_zod29.z.number().optional(),
-  id: import_zod29.z.number(),
-  key: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  shop: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  /** Stable per-buyer id; when present, enables sticky server-side A/B variant selection. */
-  visitorId: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
-});
 var UserConfigInputSchema = import_zod29.z.object({ shop: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX) });
 var DataSourceInputSchema = import_zod29.z.object({
   cart: CartInputSchema,
@@ -4511,6 +4542,8 @@ var MonetizeTransactionItemSchema = import_zod29.z.object({
 });
 var MonetizeInputSchema = import_zod29.z.object({
   cart: CartInputSchema,
+  /** Client-minted render-beacon correlation id; forwarded to the ads engine as `client_request_id`. */
+  clientRequestId: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   country: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   currency: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Ads-targeting identity/geo/locale fields (React parity); folded into the engine query verbatim. */
@@ -4540,6 +4573,22 @@ var MonetizeInputSchema = import_zod29.z.object({
   visitorId: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   zipCode: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
+var WidgetSettingsInputSchema = import_zod29.z.object({
+  cacheKey: import_zod29.z.number().optional(),
+  id: import_zod29.z.number(),
+  key: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  /**
+   * Monetize context for inline hydration: when present AND the widget converts to a Monetize marker,
+   * the server fetches/composes the offer cards inside this same request (no second `/cab/monetize`
+   * round trip). Presence doubles as the capability signal — an absent block keeps the legacy marker
+   * flow, so old/new client×server pairs need no lockstep deploy. `shop` rides the outer input;
+   * `privacyPolicyUrl` comes from the widget settings server-side (more authoritative than a relay).
+   */
+  monetize: MonetizeInputSchema.omit({ privacyPolicyUrl: true, shop: true }).optional(),
+  shop: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  /** Stable per-buyer id; when present, enables sticky server-side A/B variant selection. */
+  visitorId: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+});
 var AnalyticsEventInputSchema = import_zod29.z.object({
   name: import_zod29.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
   properties: import_zod29.z.record(import_zod29.z.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), import_zod29.z.unknown()).optional(),

package/dist/server/index.mjs

@@ -1430,7 +1430,13 @@ import { z as z20 } from "zod";
 var CABMonetizeSection = z20.object({
   ...CABVariableFields,
   name: z20.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: z20.array(z20.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: z20.string().optional(),
   sectionId: z20.uuid().default(() => uuidv78()),
   sectionType: z20.literal(SectionType.monetize).default(SectionType.monetize),
@@ -3795,184 +3801,6 @@ var fetchDataSourceResults = async (input, ctx) => {
   };
 };
 
-// src/server/salvageSections.ts
-import { v7 as uuidv713 } from "uuid";
-var STUB_SECTION_TYPE = "unknown";
-var knownSectionTypes = new Set(sectionTypes);
-var hasSectionsArray = (raw) => typeof raw === "object" && raw !== null && Array.isArray(raw.sections);
-var stubSection = (raw, report) => {
-  const record = typeof raw === "object" && raw !== null ? raw : {};
-  const original = record.sectionType;
-  const rawId = record.sectionId;
-  report?.({
-    detail: `invalid section (${typeof original === "string" ? original : "no sectionType"})`,
-    kind: "section"
-  });
-  return {
-    sectionId: typeof rawId === "string" && rawId ? rawId : uuidv713(),
-    sectionType: typeof original === "string" && !knownSectionTypes.has(original) ? original : STUB_SECTION_TYPE
-  };
-};
-var salvageSection = (raw, report) => {
-  const parsed = CABSection.safeParse(raw);
-  if (parsed.success) return parsed.data;
-  if (hasSectionsArray(raw)) {
-    const shell = CABSection.safeParse({ ...raw, sections: [] });
-    if (shell.success)
-      return { ...shell.data, sections: raw.sections.map((child) => salvageSection(child, report)) };
-  }
-  return stubSection(raw, report);
-};
-var salvageRootSection = (raw, report) => {
-  const shell = CABRootSection.safeParse(hasSectionsArray(raw) ? { ...raw, sections: [] } : raw);
-  if (!shell.success) return CABRootSection.parse(raw);
-  const sections = hasSectionsArray(raw) ? raw.sections.map((child) => salvageSection(child, report)) : [];
-  return { ...shell.data, sections };
-};
-
-// src/server/widgetSettings.ts
-var isMissingUpstreamPayload = isEmptyObject;
-var dispatchWidgetTransform = (id, normalized, report) => {
-  if (isCABRootSection(normalized)) return salvageRootSection(normalizeTextContent(normalized), report);
-  if (isContentBlockV1(normalized)) return convertContentBlockToV2({ id, settings: normalized });
-  if (isLineItemEditorV1(normalized)) return convertLineItemEditorToV2({ id, settings: normalized });
-  if (isMonetizeV1(normalized)) return convertMonetizeToV2({ id, settings: normalized });
-  if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
-  return normalized;
-};
-var fetchProgressBarContext = async (shop, ctx) => {
-  const config = await fetchUserConfig({ shop }, ctx).catch(() => void 0);
-  if (!config) return {};
-  if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
-    ctx.reportDrift?.({
-      detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",
-      kind: "shopConfig"
-    });
-  }
-  const entitled = config.shop.billingVersion !== "v6" || config.shop.activePackages.some((pkg) => pkg.shortName === "cart-merchandising" && pkg.isActive);
-  return {
-    bars: entitled ? extractSmartCartBars(config.smartCart) : [],
-    progressColor: await fetchThemeColor(config.shop.shopId, ctx)
-  };
-};
-var fetchThemeColor = async (shopId, ctx) => {
-  if (!shopId) return void 0;
-  try {
-    const theme = await ctx.fetchUpstream(`/admin/api/v1/shop/theme/${shopId}`, {}, { host: ctx.host });
-    const color = theme.theme?.settings?.buttonBackground;
-    return typeof color === "string" && color ? color : void 0;
-  } catch {
-    return void 0;
-  }
-};
-var colorlessProgressBars = (section) => {
-  const own = section.sectionType === SectionType.progressBar && section.progressColor === void 0;
-  const nested = (section.sections ?? []).flatMap((child) => colorlessProgressBars(child));
-  return own ? [section, ...nested] : nested;
-};
-var fetchAndConvert = async (id, input, ctx) => {
-  const params = { id: String(id), shop: input.shop };
-  if (input.cacheKey != null) params.cache_key = String(input.cacheKey);
-  if (input.key) params.key = input.key;
-  let upstream;
-  try {
-    upstream = await ctx.fetchUpstream("/api/v1/widgets/settings", params, { host: ctx.host });
-  } catch (err) {
-    if (err instanceof UpstreamError && [400, 404, 410].includes(err.status)) {
-      throw new NotFoundError(`Widget not found: ${id}`);
-    }
-    throw err;
-  }
-  const data = unwrapData(upstream);
-  if (isMissingUpstreamPayload(data)) throw new NotFoundError(`Widget not found: ${id}`);
-  const normalized = convertNumericObjects(deepCamelCase(data));
-  if (isProgressBarV1(normalized) && normalized.barSettings.barType === "smart-cart") {
-    const { bars, progressColor } = await fetchProgressBarContext(input.shop, ctx);
-    return convertSmartCartProgressBarToV2({ bars: bars ?? [], id, progressColor, settings: normalized });
-  }
-  if (isConvertibleProgressBarV1(normalized)) {
-    const { progressColor } = await fetchProgressBarContext(input.shop, ctx);
-    return convertProgressBarToV2({ id, progressColor, settings: normalized });
-  }
-  const converted = dispatchWidgetTransform(id, normalized, ctx.reportDrift);
-  const colorless = isCABRootSection(normalized) ? colorlessProgressBars(converted) : [];
-  if (colorless.length > 0) {
-    const { progressColor: color } = await fetchProgressBarContext(input.shop, ctx);
-    if (color) for (const bar of colorless) bar.progressColor = color;
-  }
-  return converted;
-};
-var resolveWidgetExperiment = async (input, ctx) => {
-  if (!input.visitorId) return void 0;
-  try {
-    const { shop } = await fetchUserConfig({ shop: input.shop }, ctx);
-    return resolveExperiment(shop.activeExperiments, input.id, input.visitorId);
-  } catch {
-    return void 0;
-  }
-};
-var isCABTree = (result) => result.version === 2;
-var convertWidgetSettings = async (input, ctx) => {
-  const experiment = await resolveWidgetExperiment(input, ctx);
-  const result = await fetchAndConvert(experiment?.elementId ?? input.id, input, ctx);
-  return experiment && isCABTree(result) ? { ...result, experiment } : result;
-};
-
-// src/server/giftValidation.ts
-var resolveDataSourcePath = async (widgetId, shop, ctx) => {
-  const raw = await ctx.fetchUpstream("/api/v1/widgets/settings", { id: String(widgetId), shop }, { host: ctx.host });
-  const data = raw && typeof raw === "object" && "data" in raw ? raw.data : raw;
-  const endpoint = deepCamelCase(data)?.endpoint;
-  return typeof endpoint === "string" && endpoint ? endpoint : void 0;
-};
-var groupByWidget = (gifts) => {
-  const byWidget = /* @__PURE__ */ new Map();
-  for (const gift of gifts) {
-    byWidget.set(gift.widgetId, [...byWidget.get(gift.widgetId) ?? [], gift]);
-  }
-  return byWidget;
-};
-var validateGifts = async (input, ctx) => {
-  const perWidget = await Promise.all(
-    [...groupByWidget(input.gifts)].map(async ([widgetId, gifts]) => {
-      const discountLost = gifts.filter(hasLostDiscount).map((gift) => gift.lineId);
-      try {
-        const dataSourcePath = await resolveDataSourcePath(widgetId, input.shop, ctx);
-        if (!dataSourcePath) return discountLost;
-        const { metadata } = await fetchDataSourceResults(
-          {
-            cart: input.cart,
-            /** Market context threads through so a market-gated gift rule answers for the buyer's market — as engine params, inheriting the shop's markets-toggle gate (REB-21688). */
-            country: input.country,
-            customerId: input.customerId,
-            dataSourcePath,
-            /** The gift being validated is in the cart — input filtering would erase it from the answer. */
-            filterInputs: "no",
-            language: input.language,
-            /**
-             * `limit: 0` fetches NO products — only the rule verdict is needed. Safe because the engine
-             * derives `matchedRules` from rule-config evaluation, not from fetched results (traced through
-             * `api.php`), so the metadata is complete at limit 0. Don't raise it to "fix" a non-bug.
-             */
-            limit: 0,
-            shop: input.shop,
-            visitorId: input.visitorId
-          },
-          ctx
-        );
-        const meta = metadata ?? void 0;
-        if (!isDefinitiveRuleAnswer(meta) || hasUnsupportedRuleTypes(meta)) return discountLost;
-        const validIds = getValidGwpProductIds(meta.matchedRules);
-        if (validIds.size === 0 && !isConfirmedRuleMiss(meta)) return discountLost;
-        return gifts.filter((gift) => shouldRemoveGift(gift, validIds)).map((gift) => gift.lineId);
-      } catch {
-        return discountLost;
-      }
-    })
-  );
-  return { remove: perWidget.flat() };
-};
-
 // src/server/adsEngine.ts
 import { z as z28 } from "zod";
 var SUPPLY_KEY = { production: "AQF5RKLR", staging: "Z56LQ7PS" };
@@ -4019,6 +3847,7 @@ var buildAdsParams = (input, publisherKey, supplyKey, testing, userAgent, ipAddr
     testing: String(testing),
     transaction_total: String(input.transactionTotal ?? input.cart.subtotal),
     ...items.length > 0 && { transaction_items: JSON.stringify(items) },
+    ...input.clientRequestId && { client_request_id: input.clientRequestId },
     ...input.country && { country_code: input.country },
     ...input.currency && { currency_code: input.currency },
     ...input.customerEmail && { customer_email: input.customerEmail },
@@ -4202,6 +4031,216 @@ var fetchMonetizeOffers = async (input, ctx) => {
   return { offers };
 };
 
+// src/server/salvageSections.ts
+import { v7 as uuidv713 } from "uuid";
+var STUB_SECTION_TYPE = "unknown";
+var knownSectionTypes = new Set(sectionTypes);
+var hasSectionsArray = (raw) => typeof raw === "object" && raw !== null && Array.isArray(raw.sections);
+var stubSection = (raw, report) => {
+  const record = typeof raw === "object" && raw !== null ? raw : {};
+  const original = record.sectionType;
+  const rawId = record.sectionId;
+  report?.({
+    detail: `invalid section (${typeof original === "string" ? original : "no sectionType"})`,
+    kind: "section"
+  });
+  return {
+    sectionId: typeof rawId === "string" && rawId ? rawId : uuidv713(),
+    sectionType: typeof original === "string" && !knownSectionTypes.has(original) ? original : STUB_SECTION_TYPE
+  };
+};
+var salvageSection = (raw, report) => {
+  const parsed = CABSection.safeParse(raw);
+  if (parsed.success) return parsed.data;
+  if (hasSectionsArray(raw)) {
+    const shell = CABSection.safeParse({ ...raw, sections: [] });
+    if (shell.success)
+      return { ...shell.data, sections: raw.sections.map((child) => salvageSection(child, report)) };
+  }
+  return stubSection(raw, report);
+};
+var salvageRootSection = (raw, report) => {
+  const shell = CABRootSection.safeParse(hasSectionsArray(raw) ? { ...raw, sections: [] } : raw);
+  if (!shell.success) return CABRootSection.parse(raw);
+  const sections = hasSectionsArray(raw) ? raw.sections.map((child) => salvageSection(child, report)) : [];
+  return { ...shell.data, sections };
+};
+
+// src/server/widgetSettings.ts
+var isMissingUpstreamPayload = isEmptyObject;
+var dispatchWidgetTransform = (id, normalized, report) => {
+  if (isCABRootSection(normalized)) return salvageRootSection(normalizeTextContent(normalized), report);
+  if (isContentBlockV1(normalized)) return convertContentBlockToV2({ id, settings: normalized });
+  if (isLineItemEditorV1(normalized)) return convertLineItemEditorToV2({ id, settings: normalized });
+  if (isMonetizeV1(normalized)) return convertMonetizeToV2({ id, settings: normalized });
+  if (isOfferV1(normalized)) return convertOfferToV2({ id, name: normalized.name, settings: normalized });
+  return normalized;
+};
+var fetchProgressBarContext = async (shop, ctx) => {
+  const config = await fetchUserConfig({ shop }, ctx).catch(() => void 0);
+  if (!config) return {};
+  if (config.shop.billingVersion === "v6" && config.shop.activePackages.some((pkg) => pkg.shortName === "")) {
+    ctx.reportDrift?.({
+      detail: "shop config active package entry inerted (drifted shape) \u2014 smart-cart entitlement may misgate",
+      kind: "shopConfig"
+    });
+  }
+  const entitled = config.shop.billingVersion !== "v6" || config.shop.activePackages.some((pkg) => pkg.shortName === "cart-merchandising" && pkg.isActive);
+  return {
+    bars: entitled ? extractSmartCartBars(config.smartCart) : [],
+    progressColor: await fetchThemeColor(config.shop.shopId, ctx)
+  };
+};
+var fetchThemeColor = async (shopId, ctx) => {
+  if (!shopId) return void 0;
+  try {
+    const theme = await ctx.fetchUpstream(`/admin/api/v1/shop/theme/${shopId}`, {}, { host: ctx.host });
+    const color = theme.theme?.settings?.buttonBackground;
+    return typeof color === "string" && color ? color : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var colorlessProgressBars = (section) => {
+  const own = section.sectionType === SectionType.progressBar && section.progressColor === void 0;
+  const nested = (section.sections ?? []).flatMap((child) => colorlessProgressBars(child));
+  return own ? [section, ...nested] : nested;
+};
+var isCABTree = (result) => result.version === 2;
+var findMonetizeMarker = (section) => {
+  if (section.sectionType === SectionType.monetize && section.offers === void 0) return section;
+  if (!Array.isArray(section.sections)) return void 0;
+  for (const child of section.sections) {
+    const found = findMonetizeMarker(child);
+    if (found) return found;
+  }
+  return void 0;
+};
+var hydrateMonetizeMarkers = async (converted, input, ctx) => {
+  if (!input.monetize || !isCABTree(converted)) return;
+  const first = findMonetizeMarker(converted);
+  if (!first) return;
+  try {
+    const { offers } = await fetchMonetizeOffers(
+      {
+        ...input.monetize,
+        privacyPolicyUrl: first.privacyPolicyUrl,
+        shop: input.shop,
+        visitorId: input.monetize.visitorId || input.visitorId
+      },
+      ctx
+    );
+    first.offers = offers;
+  } catch (err) {
+    ctx.reportDrift?.({
+      detail: `inline hydration failed: ${err instanceof Error ? err.message : String(err)}`,
+      kind: "monetizeOffer"
+    });
+  }
+};
+var fetchAndConvert = async (id, input, ctx) => {
+  const params = { id: String(id), shop: input.shop };
+  if (input.cacheKey != null) params.cache_key = String(input.cacheKey);
+  if (input.key) params.key = input.key;
+  let upstream;
+  try {
+    upstream = await ctx.fetchUpstream("/api/v1/widgets/settings", params, { host: ctx.host });
+  } catch (err) {
+    if (err instanceof UpstreamError && [400, 404, 410].includes(err.status)) {
+      throw new NotFoundError(`Widget not found: ${id}`);
+    }
+    throw err;
+  }
+  const data = unwrapData(upstream);
+  if (isMissingUpstreamPayload(data)) throw new NotFoundError(`Widget not found: ${id}`);
+  const normalized = convertNumericObjects(deepCamelCase(data));
+  if (isProgressBarV1(normalized) && normalized.barSettings.barType === "smart-cart") {
+    const { bars, progressColor } = await fetchProgressBarContext(input.shop, ctx);
+    return convertSmartCartProgressBarToV2({ bars: bars ?? [], id, progressColor, settings: normalized });
+  }
+  if (isConvertibleProgressBarV1(normalized)) {
+    const { progressColor } = await fetchProgressBarContext(input.shop, ctx);
+    return convertProgressBarToV2({ id, progressColor, settings: normalized });
+  }
+  const converted = dispatchWidgetTransform(id, normalized, ctx.reportDrift);
+  const colorless = isCABRootSection(normalized) ? colorlessProgressBars(converted) : [];
+  if (colorless.length > 0) {
+    const { progressColor: color } = await fetchProgressBarContext(input.shop, ctx);
+    if (color) for (const bar of colorless) bar.progressColor = color;
+  }
+  return converted;
+};
+var resolveWidgetExperiment = async (input, ctx) => {
+  if (!input.visitorId) return void 0;
+  try {
+    const { shop } = await fetchUserConfig({ shop: input.shop }, ctx);
+    return resolveExperiment(shop.activeExperiments, input.id, input.visitorId);
+  } catch {
+    return void 0;
+  }
+};
+var convertWidgetSettings = async (input, ctx) => {
+  const experiment = await resolveWidgetExperiment(input, ctx);
+  const result = await fetchAndConvert(experiment?.elementId ?? input.id, input, ctx);
+  await hydrateMonetizeMarkers(result, input, ctx);
+  return experiment && isCABTree(result) ? { ...result, experiment } : result;
+};
+
+// src/server/giftValidation.ts
+var resolveDataSourcePath = async (widgetId, shop, ctx) => {
+  const raw = await ctx.fetchUpstream("/api/v1/widgets/settings", { id: String(widgetId), shop }, { host: ctx.host });
+  const data = raw && typeof raw === "object" && "data" in raw ? raw.data : raw;
+  const endpoint = deepCamelCase(data)?.endpoint;
+  return typeof endpoint === "string" && endpoint ? endpoint : void 0;
+};
+var groupByWidget = (gifts) => {
+  const byWidget = /* @__PURE__ */ new Map();
+  for (const gift of gifts) {
+    byWidget.set(gift.widgetId, [...byWidget.get(gift.widgetId) ?? [], gift]);
+  }
+  return byWidget;
+};
+var validateGifts = async (input, ctx) => {
+  const perWidget = await Promise.all(
+    [...groupByWidget(input.gifts)].map(async ([widgetId, gifts]) => {
+      const discountLost = gifts.filter(hasLostDiscount).map((gift) => gift.lineId);
+      try {
+        const dataSourcePath = await resolveDataSourcePath(widgetId, input.shop, ctx);
+        if (!dataSourcePath) return discountLost;
+        const { metadata } = await fetchDataSourceResults(
+          {
+            cart: input.cart,
+            /** Market context threads through so a market-gated gift rule answers for the buyer's market — as engine params, inheriting the shop's markets-toggle gate (REB-21688). */
+            country: input.country,
+            customerId: input.customerId,
+            dataSourcePath,
+            /** The gift being validated is in the cart — input filtering would erase it from the answer. */
+            filterInputs: "no",
+            language: input.language,
+            /**
+             * `limit: 0` fetches NO products — only the rule verdict is needed. Safe because the engine
+             * derives `matchedRules` from rule-config evaluation, not from fetched results (traced through
+             * `api.php`), so the metadata is complete at limit 0. Don't raise it to "fix" a non-bug.
+             */
+            limit: 0,
+            shop: input.shop,
+            visitorId: input.visitorId
+          },
+          ctx
+        );
+        const meta = metadata ?? void 0;
+        if (!isDefinitiveRuleAnswer(meta) || hasUnsupportedRuleTypes(meta)) return discountLost;
+        const validIds = getValidGwpProductIds(meta.matchedRules);
+        if (validIds.size === 0 && !isConfirmedRuleMiss(meta)) return discountLost;
+        return gifts.filter((gift) => shouldRemoveGift(gift, validIds)).map((gift) => gift.lineId);
+      } catch {
+        return discountLost;
+      }
+    })
+  );
+  return { remove: perWidget.flat() };
+};
+
 // src/server/analytics.ts
 import { chunk } from "es-toolkit";
 var EXPERIMENT_TYPE_MAP = {
@@ -4373,14 +4412,6 @@ var CartInputSchema = z29.object({
   /** Presentment subtotal in cents. */
   subtotal: z29.number()
 });
-var WidgetSettingsInputSchema = z29.object({
-  cacheKey: z29.number().optional(),
-  id: z29.number(),
-  key: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
-  shop: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
-  /** Stable per-buyer id; when present, enables sticky server-side A/B variant selection. */
-  visitorId: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
-});
 var UserConfigInputSchema = z29.object({ shop: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX) });
 var DataSourceInputSchema = z29.object({
   cart: CartInputSchema,
@@ -4463,6 +4494,8 @@ var MonetizeTransactionItemSchema = z29.object({
 });
 var MonetizeInputSchema = z29.object({
   cart: CartInputSchema,
+  /** Client-minted render-beacon correlation id; forwarded to the ads engine as `client_request_id`. */
+  clientRequestId: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   country: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   currency: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   /** Ads-targeting identity/geo/locale fields (React parity); folded into the engine query verbatim. */
@@ -4492,6 +4525,22 @@ var MonetizeInputSchema = z29.object({
   visitorId: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
   zipCode: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
 });
+var WidgetSettingsInputSchema = z29.object({
+  cacheKey: z29.number().optional(),
+  id: z29.number(),
+  key: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional(),
+  /**
+   * Monetize context for inline hydration: when present AND the widget converts to a Monetize marker,
+   * the server fetches/composes the offer cards inside this same request (no second `/cab/monetize`
+   * round trip). Presence doubles as the capability signal — an absent block keeps the legacy marker
+   * flow, so old/new client×server pairs need no lockstep deploy. `shop` rides the outer input;
+   * `privacyPolicyUrl` comes from the widget settings server-side (more authoritative than a relay).
+   */
+  monetize: MonetizeInputSchema.omit({ privacyPolicyUrl: true, shop: true }).optional(),
+  shop: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX),
+  /** Stable per-buyer id; when present, enables sticky server-side A/B variant selection. */
+  visitorId: z29.string().max(REQUEST_BOUNDS.STRING_ID_MAX).optional()
+});
 var AnalyticsEventInputSchema = z29.object({
   name: z29.string().max(REQUEST_BOUNDS.STRING_KEY_MAX),
   properties: z29.record(z29.string().max(REQUEST_BOUNDS.STRING_KEY_MAX), z29.unknown()).optional(),

package/dist/server/requestSchemas.d.ts

@@ -79,14 +79,6 @@ export declare const CartInputSchema: z.ZodObject<{
     }, z.core.$strip>>;
     subtotal: z.ZodNumber;
 }, z.core.$strip>;
-/** Input for `convertWidgetSettings`. */
-export declare const WidgetSettingsInputSchema: z.ZodObject<{
-    cacheKey: z.ZodOptional<z.ZodNumber>;
-    id: z.ZodNumber;
-    key: z.ZodOptional<z.ZodString>;
-    shop: z.ZodString;
-    visitorId: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
 /** Input for `fetchUserConfig`. */
 export declare const UserConfigInputSchema: z.ZodObject<{
     shop: z.ZodString;
@@ -208,6 +200,7 @@ export declare const MonetizeInputSchema: z.ZodObject<{
         }, z.core.$strip>>;
         subtotal: z.ZodNumber;
     }, z.core.$strip>;
+    clientRequestId: z.ZodOptional<z.ZodString>;
     country: z.ZodOptional<z.ZodString>;
     currency: z.ZodOptional<z.ZodString>;
     customerEmail: z.ZodOptional<z.ZodString>;
@@ -238,6 +231,64 @@ export declare const MonetizeInputSchema: z.ZodObject<{
     visitorId: z.ZodOptional<z.ZodString>;
     zipCode: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** Input for `convertWidgetSettings`. */
+export declare const WidgetSettingsInputSchema: z.ZodObject<{
+    cacheKey: z.ZodOptional<z.ZodNumber>;
+    id: z.ZodNumber;
+    key: z.ZodOptional<z.ZodString>;
+    monetize: z.ZodOptional<z.ZodObject<{
+        language: z.ZodOptional<z.ZodString>;
+        currency: z.ZodOptional<z.ZodString>;
+        cart: z.ZodObject<{
+            attributes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            currencyRate: z.ZodOptional<z.ZodNumber>;
+            discountCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            discountTotal: z.ZodOptional<z.ZodNumber>;
+            items: z.ZodArray<z.ZodObject<{
+                productId: z.ZodString;
+                properties: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>>;
+                quantity: z.ZodNumber;
+                subscriptionId: z.ZodOptional<z.ZodString>;
+                variantId: z.ZodString;
+            }, z.core.$strip>>;
+            subtotal: z.ZodNumber;
+        }, z.core.$strip>;
+        country: z.ZodOptional<z.ZodString>;
+        customerId: z.ZodOptional<z.ZodString>;
+        visitorId: z.ZodOptional<z.ZodString>;
+        clientRequestId: z.ZodOptional<z.ZodString>;
+        customerEmail: z.ZodOptional<z.ZodString>;
+        customerFirstName: z.ZodOptional<z.ZodString>;
+        customerLastName: z.ZodOptional<z.ZodString>;
+        orderName: z.ZodOptional<z.ZodString>;
+        placement: z.ZodEnum<{
+            customer_account: "customer_account";
+            order_status: "order_status";
+            thank_you_page: "thank_you_page";
+        }>;
+        sessionId: z.ZodOptional<z.ZodString>;
+        testing: z.ZodOptional<z.ZodBoolean>;
+        timezone: z.ZodOptional<z.ZodString>;
+        transactionId: z.ZodOptional<z.ZodString>;
+        transactionItems: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            priceCents: z.ZodNumber;
+            quantity: z.ZodNumber;
+            title: z.ZodString;
+            type: z.ZodString;
+        }, z.core.$strip>>>;
+        transactionTotal: z.ZodOptional<z.ZodNumber>;
+        zipCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    shop: z.ZodString;
+    visitorId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /**
  * A generic analytics event from the extension; the server maps `name` → the engine's noun/verb/subject.
  * `properties` VALUES stay unbounded (`z.unknown`): the analytics rail is lenient-parsed (an over-limit

package/dist/transforms/index.cjs

@@ -929,7 +929,13 @@ var import_zod14 = require("zod");
 var CABMonetizeSection = import_zod14.z.object({
   ...CABVariableFields,
   name: import_zod14.z.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: import_zod14.z.array(import_zod14.z.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: import_zod14.z.string().optional(),
   sectionId: import_zod14.z.uuid().default(() => (0, import_uuid8.v7)()),
   sectionType: import_zod14.z.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/transforms/index.mjs

@@ -872,7 +872,13 @@ import { z as z14 } from "zod";
 var CABMonetizeSection = z14.object({
   ...CABVariableFields,
   name: z14.string().optional(),
-  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); the client relays it to `/cab/monetize`. */
+  /**
+   * Server-hydrated offer cards (inline hydration): when `/cab/sections` was asked with a `monetize`
+   * context block, the composed cards ride the marker itself — `[]` means "hydrated, no fill" (render
+   * nothing, skip the fetch); ABSENT means "not hydrated" (the client fetches via `/cab/monetize`).
+   */
+  offers: z14.array(z14.lazy(() => CABSection)).optional(),
+  /** Privacy Policy footer href (the widget's `privacy_policy_url` setting); read server-side for hydration, relayed by the client only on the legacy `/cab/monetize` fallback. */
   privacyPolicyUrl: z14.string().optional(),
   sectionId: z14.uuid().default(() => uuidv78()),
   sectionType: z14.literal(SectionType.monetize).default(SectionType.monetize),

package/dist/transforms/monetizeV1/convertMonetizeToV2.d.ts

@@ -3,8 +3,9 @@ import { type V1MonetizeConvertInput } from '../../transforms/monetizeV1/types';
 /**
  * Translate a v1 Monetize (standalone `ui_extension_ad`) widget into a `CABRootSection`: a stub root
  * holding one `monetize` marker section. The marker carries the widget's only real config — the Privacy
- * Policy href and the ads-taxonomy `vertical`/`subVertical` ids; the live offer cards are composed by
- * `POST /cab/monetize` when the client mounts the marker, so no ad content is converted here. The root
+ * Policy href and the ads-taxonomy `vertical`/`subVertical` ids; no ad content is converted here — the
+ * live offer cards are hydrated onto the marker by `convertWidgetSettings` when the request carries a
+ * `monetize` context block, else composed by `POST /cab/monetize` when the client mounts it. The root
  * keeps `type: ui_extension_ad` (the type is the widget's identity, not the converter's), and the
  * marker's `visibility` stays unset: React always mounts Monetize on its target surfaces, so the
  * converted tree must not invent a gate.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rebuy/rebuy",
-    "version": "3.7.0",
+    "version": "3.8.0",
     "description": "Shared zod schemas, legacy-to-CAB widget transforms, and server orchestrators for Rebuy's Shopify consumers (rebuy-api, admin-nextjs, rebuy-shopify-extensions)",
     "license": "MIT",
     "author": "Rebuy, Inc.",