@c15t/react 3.0.0-alpha.6 → 3.0.0-alpha.8

package/docs/frameworks/react/rendering.md

@@ -25,6 +25,9 @@ explains the difference in general terms.
 
 ## Bundle the manifest during Vite builds
 
+The [quickstart](./quickstart.md) and `examples/react` in
+the c15t repository use this setup.
+
 The build fetches your public policy once and bundles it, so the server never
 fetches it at runtime.
 
@@ -43,8 +46,8 @@ export default {
 
 Vite writes `src/c15t-manifest.ts` before compiling, including at development
 startup. Keep the generated file out of Git. Install `@c15t/browser@alpha` for
-its browser manifest transport. In the quickstart's `src/consent.tsx`, replace
-the `hosted()` mode with this factory:
+its browser manifest transport. In `src/consent.tsx`, create the provider's
+mode with `manifest()` instead of `hosted()`:
 
 ```tsx title="src/consent.tsx"
 import { manifest } from '@c15t/browser/headless';
@@ -77,19 +80,21 @@ The snapshot is fixed at build time:
 * Consent choices still go to the backend.
 
 Run `vite build` or `vite dev` before a standalone `tsc`, `vue-tsc` or
-`svelte-check`; the generated file doesn't exist on a fresh checkout.
+`svelte-check`; the generated file doesn't exist on a fresh checkout. Both
+commands fetch the manifest when they start, so both need the backend.
+`vite preview` serves the last build without fetching.
 
-For policy updates without a rebuild, keep the original `hosted()` factory
-and omit the build plugin. That setup resolves policy through the backend
-`/init` on each page load.
+For policy updates without a rebuild, use `hosted({ url })` from `c15t/react`
+as the mode and omit the build plugin. That setup resolves policy through the
+backend `/init` on each page load.
 
 ## Client-rendered apps
 
 The recommended [quickstart](./quickstart.md) bundles the
 manifest and resolves it in the browser. See [build-time manifests](#bundle-the-manifest-during-vite-builds).
 
-For policy updates without rebuilding, keep `hosted({ url })`. That runtime
-path works as follows:
+For policy updates without rebuilding, use `hosted({ url })` from
+`c15t/react` as the mode. That runtime path works as follows:
 
 1. The page loads with no consent state. Every optional category is denied.
 2. `ConsentProvider` requests `GET /init` from your backend URL while it first
@@ -182,7 +187,12 @@ With `hosted({ url })`, the browser calls two backend endpoints:
 | `GET {url}/init`      | Once per page load, to resolve the policy  |
 | `POST {url}/subjects` | When the visitor accepts, rejects or saves |
 
-Both go to the backend's origin, so it must list your site as a trusted origin.
+With a bundled manifest, `manifest({ backendURL })` sends the same
+`/subjects` request, and requests `/init` only when the policy depends on a
+country or region the browser does not know.
+
+These requests go to the backend's origin, so it must list your site as a
+trusted origin.
 [Data fetching](../../concepts/data-fetching.md) compares this with proxies and
 custom transports.
 

package/docs/frameworks/react/scripts.md

@@ -28,20 +28,25 @@ export const scripts = [
 The provider in `src/consent.tsx` receives them:
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>

package/docs/frameworks/react/troubleshooting.md

@@ -5,25 +5,40 @@ description: Fix a missing banner, early vendor requests, unstyled components
 group: frameworks
 ---
 
-## The /init request goes to your-project.inth.app
+## Why does the build fail to download the manifest?
 
-**Check.** In DevTools Network, the `GET` request to `/init` goes to
-`your-project.inth.app` and fails.
+**Check.** `vite build` or `vite dev` stops before compiling, with an error
+from `consentManifest` that starts with `@c15t/core/build:`.
 
-**Fix.** Replace the placeholder URL in `hosted({ url })` in `src/consent.tsx`
-with the backend URL from your Inth project, exactly as Inth shows it, then
-rebuild.
+| Error                                                    | Cause                                                                                                                           | Fix                                                                                  |
+| -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
+| `build-time manifests require an absolute upstream URL.` | `backendURL` is empty or relative, such as `/api/c15t`                                                                          | Pass the absolute backend URL from your Inth project                                 |
+| `build-time manifests require an http(s) upstream URL.`  | `backendURL` uses another protocol                                                                                              | Use the `https://` URL Inth shows                                                    |
+| `/manifest responded 404`                                | The URL is not your project's backend, such as the `https://your-project.inth.app` placeholder or a URL missing its path prefix | Copy the backend URL exactly as Inth shows it, or set `VITE_C15T_BACKEND_URL`        |
+| `/manifest returned an invalid consent manifest.`        | The URL answered with something other than a consent manifest, such as an HTML page                                             | Point `backendURL` at the backend itself, not your site or a dashboard page          |
+| `fetch failed`                                           | The build cannot reach the backend                                                                                              | Build where the backend is reachable. A failed download never reuses an old snapshot |
+
+## Why can't TypeScript find ./c15t-manifest?
+
+**Check.** `tsc`, `vue-tsc` or your editor reports that it cannot find the
+module `./c15t-manifest`, on a fresh checkout or in CI.
+
+**Fix.** `consentManifest` writes `src/c15t-manifest.ts` when `vite build` or
+`vite dev` starts, and the file is not in Git. Run one of them before the type
+check. In CI, run the build first, or cache the generated file with the build
+output.
 
 ## There is no banner
 
 **Check.** In DevTools Network, find the `GET` request to `/init` on your
-backend URL.
-
-| What you see                    | Cause                                                                                  | Fix                                                                                                           |
-| ------------------------------- | -------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
-| No `/init` request              | `ConsentProvider` is not mounted, or an error stopped `src/consent.tsx` from rendering | Check the console for errors and render one provider at the app root, as in the [quickstart](./quickstart.md) |
-| `/init` fails with a CORS error | Your site's origin is not trusted                                                      | Add the exact origin, including port in development, to the trusted origins in your Inth project              |
-| `/init` returns 200             | The policy for this visitor asks for no banner, or a stored choice is still valid      | Inspect the active policy with the component below, or clear site data                                        |
+backend URL. With the bundled manifest, the browser makes no request before
+the banner unless the policy depends on a country or region it does not know.
+
+| What you see                    | Cause                                                                                                                         | Fix                                                                                                                                                               |
+| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| No request and no banner        | `ConsentProvider` is not mounted, an error stopped `src/consent.tsx` from rendering, or the bundled policy asks for no banner | Check the console for errors, render one provider at the app root as in the [quickstart](./quickstart.md), and inspect the active policy with the component below |
+| `/init` fails with a CORS error | Your site's origin is not trusted                                                                                             | Add the exact origin, including port in development, to the trusted origins in your Inth project                                                                  |
+| `/init` returns 200             | The policy for this visitor asks for no banner, or a stored choice is still valid                                             | Inspect the active policy with the component below, or clear site data                                                                                            |
 
 A policy with `prompt: 'none'` shows no banner by design, and so does a
 returning visitor with a valid stored choice. [Policies](../../concepts/policies.md)

package/docs/guides/banner-experiments.md

@@ -258,7 +258,7 @@ import { resolveConsent } from 'c15t/next/server';
 import { Suspense } from 'react';
 import type { ReactNode } from 'react';
 
-import { consentConfig } from '@/c15t.config';
+import { consentOptions } from '@/c15t.server';
 import { ExperimentConsent } from '@/components/experiment-consent';
 import { bannerExperiment } from '@/lib/experiment';
 import { bannerExperimentFlag } from '@/lib/flags';
@@ -268,7 +268,7 @@ import '@/styles/globals.css';
 const ResolvedConsent = async ({ children }: { children: ReactNode }) => {
 	const arm = await bannerExperimentFlag();
 	const state = await resolveConsent({
-		config: consentConfig,
+		...consentOptions,
 		// `off` keeps this visitor out of the experiment.
 		experiment: arm === 'off' ? undefined : { ...bannerExperiment, arm },
 	});

package/docs/upgrade-v3.md

@@ -381,7 +381,7 @@ if (result.ok) {
 | `createSubject(input)`                                                                    | `subjects.create(input)`. `givenAt` also takes a `Date`.                                                                                                                |
 | `patchSubject(id, input)`, `subjects.patch(id, input)`                                    | `subjects.identify(id, { externalId, identityProvider })`                                                                                                               |
 | `listSubjects({ externalId })`, `subjects.list({ externalId })`                           | `subjects.list({ externalId })`, on a client with `apiKey`                                                                                                              |
-| `checkConsent(query)`, `consent.check({ externalId, type: 'a,b' })`                       | `consents.check({ externalId, types: ['a', 'b'] })`                                                                                                                     |
+| `checkConsent(query)`, `consent.check({ externalId, type: 'a,b' })`                       | `consents.check({ externalId, types: ['a', 'b'] })`, on a client with `apiKey`                                                                                          |
 | `ResponseContext` with `data: T \|null`                                                   | `{ ok: true, data } \|{ ok: false, error }`. Check `ok` first.                                                                                                          |
 | `unwrap()`, `expect()` on the response                                                    | `unwrap(result)`, imported from `@c15t/node-sdk`                                                                                                                        |
 | `unwrapOr()`, `map()` on the response                                                     | Check `result.ok`                                                                                                                                                       |
@@ -399,6 +399,10 @@ if (result.ok) {
 responses, such as `givenAt` and `createdAt`, are now `Date` objects rather
 than strings.
 
+`consents.check` and `subjects.list` count only verified links. Links made by
+v2 don't count until you relink them with `subjects.identify` on a keyed
+client, or [with an identity token](https://c15t.com/docs/self-host/api/node-sdk#verify-a-link-made-in-the-browser) on the user's next sign-in.
+
 The `node-sdk-to-v3` codemod renames the factory, client options, methods,
 types and errors in files that create a client. It turns `type` strings into
 `types` arrays, and leaves a `TODO(c15t v3)` comment at each call, because

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@c15t/react",
-	"version": "3.0.0-alpha.6",
+	"version": "3.0.0-alpha.8",
 	"description": "React cookie banner, consent manager, preference center, and headless CMP components with IAB TCF and Consent Mode support.",
 	"keywords": [
 		"ccpa",
@@ -254,16 +254,16 @@
 		"test:watch": "bun prebuild && vitest"
 	},
 	"dependencies": {
-		"@c15t/core": "3.0.0-alpha.6",
-		"@c15t/dev-tools": "3.0.0-alpha.6",
-		"@c15t/iab": "3.0.0-alpha.6",
-		"@c15t/schema": "3.0.0-alpha.5",
+		"@c15t/core": "3.0.0-alpha.8",
+		"@c15t/dev-tools": "3.0.0-alpha.8",
+		"@c15t/iab": "3.0.0-alpha.8",
+		"@c15t/schema": "3.0.0-alpha.7",
 		"@c15t/translations": "3.0.0-alpha.6",
-		"@c15t/ui": "3.0.0-alpha.6",
+		"@c15t/ui": "3.0.0-alpha.8",
 		"@types/google.maps": "3.65.3"
 	},
 	"devDependencies": {
-		"@c15t/backend": "3.0.0-alpha.6",
+		"@c15t/backend": "3.0.0-alpha.8",
 		"@c15t/conformance": "0.0.1",
 		"@c15t/typescript-config": "0.0.1",
 		"@c15t/vitest-config": "1.0.0",