@c15t/react 3.0.0-alpha.9 → 3.0.0

package/dist-types/components/prompt/atoms/early-tap-script.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Keeps a banner tap made before hydration.
+ *
+ * A server-rendered banner shows long before React attaches its handlers.
+ * The inline script records an accept, reject, dismiss or customize tap in
+ * that gap and hides the banner. Once this component mounts, the banner's
+ * own handlers work: it stops the script and records the tap when the
+ * runtime has started. See `@c15t/core/surface-actions`.
+ *
+ * The script is in the server HTML. A banner that hydrates keeps it, inert
+ * once claimed, so hydration changes nothing in the markup. A banner React
+ * renders in the browser has its handlers at once, and a script it inserts
+ * would never run, so there it renders nothing.
+ *
+ * @internal
+ */
+export declare const EarlyTapScript: () => import("react").JSX.Element | null;

package/dist-types/components/prompt/index.d.ts

@@ -62,7 +62,7 @@ export interface ConsentBannerCompoundComponent extends FC<ConsentBannerProps> {
  * ```tsx
  * <ConsentProvider
  *   options={{
- *     mode: hosted({ url: '/api/c15t' }),
+ *     mode: hosted({ backendURL: '/api/c15t' }),
  *     i18n: {
  *       locale: 'en',
  *       messages: {

package/dist-types/components/shared/surface-styles.d.ts

@@ -2,9 +2,33 @@
 export interface SurfaceStyleSheet {
     /** Dedupes the stylesheet: a page renders each `id` once. */
     id: string;
-    /** The stylesheet text. */
+    /** The stylesheet text. Empty for a deferred sheet. */
     css: string;
+    /**
+     * Loads the text of a deferred sheet. A browser bundle gets one in place
+     * of `css` when the framework already put the sheet in the server HTML,
+     * as the Next.js adapter does, so the text ships once.
+     */
+    load?: () => Promise<string>;
 }
+/**
+ * Starts loading the deferred sheets the page does not hold yet. Safe to
+ * call often: each sheet loads once, and the next call retries a failed
+ * load.
+ *
+ * @internal
+ */
+export declare const preloadSurfaceSheets: (sheets: readonly SurfaceStyleSheet[]) => Promise<void>;
+/**
+ * Whether a surface can show: its deferred sheets are in the page or
+ * loaded. Starts loading the missing ones after mount, so a surface that
+ * renders later, like a banner waiting on the browser's consent fetch,
+ * finds them ready. Hydration reads `true`: the server rendered the sheets
+ * it rendered the surface with.
+ *
+ * @internal
+ */
+export declare const useSurfaceSheetsReady: (sheets: readonly SurfaceStyleSheet[], noStyle?: boolean) => boolean;
 /**
  * Renders the stylesheets a stock surface needs as `<style>` elements.
  *
@@ -33,4 +57,4 @@ export interface SurfaceStyleSheet {
 export declare const SurfaceStyles: ({ sheets, noStyle, }: {
     sheets: readonly SurfaceStyleSheet[];
     noStyle?: boolean;
-}) => import("react").JSX.Element[] | null;
+}) => (import("react").JSX.Element | null)[] | null;

package/dist-types/consent-gate.d.ts

@@ -1 +1 @@
-export * from './components/consent-gate/index.js';
+export { ConsentGate, ConsentGateButton, type ConsentGateCompoundComponent, type ConsentGateProps, ConsentGateRoot, ConsentGateTitle, Frame, FrameButton, type FrameCompoundComponent, type FrameProps, FrameRoot, FrameTitle, } from './components/consent-gate/index.js';

package/dist-types/context/index.d.ts

@@ -1,3 +1,3 @@
-export * from '../context.js';
-export * from './consent-tracking-context.js';
-export * from './theme-context.js';
+export { HydrationSnapshotContext, KernelContext, type ProviderServices, ProviderServicesContext, StreamedPrefetchContext, } from '../context.js';
+export { ConsentTrackingContext, type ConsentTrackingValue, toSaveUISource, useConsentTracking, } from './consent-tracking-context.js';
+export { GlobalThemeContext, LocalThemeContext, type ThemeContextValue, } from './theme-context.js';

package/dist-types/context.d.ts

@@ -14,6 +14,8 @@ export interface ProviderServices {
     clearRecords: () => void;
     getPresentation: () => ConsentPresentation | undefined;
     getConsentCategories: () => readonly AllConsentNames[];
+    /** Whether the runtime has started: records hydrated, prefetch adopted. */
+    isStarted: () => boolean;
     /**
      * Store a language override and load its copy: init runs again on the
      * provider's own kernel while it is enabled, and a borrowed runtime

package/dist-types/gpp.d.ts

@@ -18,7 +18,7 @@ export type ConsentGPPProps = RuntimeGPPOptions;
  * ```tsx
  * import { ConsentGPP } from '@c15t/react/gpp';
  *
- * <ConsentProvider options={{ mode: hosted({ url }) }}>
+ * <ConsentProvider options={{ mode: hosted({ backendURL }) }}>
  *   <ConsentGPP usFallback="none" />
  *   <App />
  * </ConsentProvider>

package/dist-types/iab-dialog-deferred.d.ts

@@ -0,0 +1,36 @@
+import type { IABConsentDialogCompoundComponent } from './components/iab-panel/index.js';
+/**
+ * The IAB TCF preference centre: purposes, stacks, special features and
+ * per-vendor consent and legitimate-interest controls.
+ *
+ * @remarks
+ * The component code loads on demand. It downloads in the browser's first
+ * idle period after the page's `load` event while the IAB banner is shown,
+ * on hover or focus of the banner's Customize button or partners link, or
+ * when the dialog opens, whichever comes first. `preloadDialog: 'intent'` in
+ * the provider options skips the idle load. `open={true}` or `showTrigger`
+ * loads it on mount under a model `models` lists; under another model,
+ * `showTrigger` loads only the trigger.
+ *
+ * The compound parts (`IABConsentDialog.Root`, `.Card`, `.Header`, `.Tabs`,
+ * `.TabButton`, `.Content`, `.Footer`, `.Overlay`, `.FeatureItem`,
+ * `.PurposeItem`, `.StackItem`, `.VendorList`) load the same module when
+ * they render.
+ *
+ * @example
+ * ```tsx
+ * <IABProvider cmpId={28}>
+ *   <IABConsentBanner />
+ *   <IABConsentDialog />
+ * </IABProvider>
+ * ```
+ *
+ * @public
+ */
+export declare const IABConsentDialog: IABConsentDialogCompoundComponent;
+/**
+ * Reset the warming state shared by mounted dialogs between tests.
+ *
+ * @internal
+ */
+export declare const resetIABDialogWarmingForTests: () => void;

package/dist-types/iab.d.ts

@@ -12,7 +12,7 @@
  * import { IABProvider, IABConsentBanner, IABConsentDialog } from '@c15t/react/iab';
  *
  * <ConsentProvider
- *   options={{ mode: hosted({ url: '/api/c15t' }) }}
+ *   options={{ mode: hosted({ backendURL: '/api/c15t' }) }}
  * >
  *   <IABProvider cmpId={28}>
  *     <IABConsentBanner />
@@ -24,7 +24,8 @@
  * @packageDocumentation
  */
 export { IABConsentBanner, type IABConsentBannerProps, } from './components/iab-prompt/index.js';
-export { IABConsentDialog, type IABConsentDialogProps, } from './components/iab-panel/index.js';
+export type { IABConsentDialogProps } from './components/iab-panel/index.js';
+export { IABConsentDialog } from './iab-dialog-deferred.js';
 export { type HeadlessIABBannerAction, type HeadlessIABBannerState, type HeadlessIABDialogAction, type HeadlessIABDialogState, type HeadlessIABPreferenceTab, type UseHeadlessIABConsentUIResult, useHeadlessIABConsentUI, } from './hooks/use-headless-iab-consent-ui.js';
 export { IABProvider } from './iab-context.js';
 export type { IABProviderProps } from './iab-context.js';

package/dist-types/index-parts/consent-gate.d.ts

@@ -4,4 +4,4 @@
  * (esbuild) does not treat every module the index names as part of an app
  * that imports one hook: only the groups it uses are live.
  */
-export { ConsentGate, Frame } from '../components/consent-gate/index.js';
+export { ConsentGate } from '../components/consent-gate/index.js';

package/dist-types/index-parts/core.d.ts

@@ -4,5 +4,4 @@
  * (esbuild) does not treat every module the index names as part of an app
  * that imports one hook: only the groups it uses are live.
  */
-export { createConsentKernel, custom, hosted, policyRulePresets, } from '@c15t/core';
-export { offline } from '../transports/offline.js';
+export { createConsentKernel, custom } from '@c15t/core';

package/dist-types/index-parts/frame.d.ts

@@ -0,0 +1,7 @@
+/**
+ * One group of `@c15t/react`'s public exports. The package index re-exports
+ * each group with `export *`, so a bundler that splits code by reachability
+ * (esbuild) does not treat every module the index names as part of an app
+ * that imports one hook: only the groups it uses are live.
+ */
+export { Frame } from '../components/consent-gate/frame.js';

package/dist-types/index-parts/hosted.d.ts

@@ -0,0 +1,7 @@
+/**
+ * One group of `@c15t/react`'s public exports. The package index re-exports
+ * each group with `export *`, so a bundler that splits code by reachability
+ * (esbuild) does not treat every module the index names as part of an app
+ * that imports one hook: only the groups it uses are live.
+ */
+export { hosted } from '@c15t/core';

package/dist-types/index-parts/offline.d.ts

@@ -0,0 +1,7 @@
+/**
+ * One group of `@c15t/react`'s public exports. The package index re-exports
+ * each group with `export *`, so a bundler that splits code by reachability
+ * (esbuild) does not treat every module the index names as part of an app
+ * that imports one hook: only the groups it uses are live.
+ */
+export { offline } from '../transports/offline.js';

package/dist-types/index-parts/presets.d.ts

@@ -0,0 +1,7 @@
+/**
+ * One group of `@c15t/react`'s public exports. The package index re-exports
+ * each group with `export *`, so a bundler that splits code by reachability
+ * (esbuild) does not treat every module the index names as part of an app
+ * that imports one hook: only the groups it uses are live.
+ */
+export { policyRulePresets } from '@c15t/core';

package/dist-types/index.d.ts

@@ -11,7 +11,7 @@
  *
  *   function App({ children }) {
  *     return (
- *       <ConsentProvider options={{ mode: hosted({ url: '/api/c15t' }) }}>
+ *       <ConsentProvider options={{ mode: hosted({ backendURL: '/api/c15t' }) }}>
  *         {children}
  *       </ConsentProvider>
  *     );
@@ -48,11 +48,15 @@ export type { ConsentBannerCompoundComponent } from './components/prompt/index.j
 export type { ReactUIOptions } from './types/manager.js';
 export type { ConsentPresentation, PromptPresentation, PreferencesPresentation, PresentationAction, PromptPosition, PromptVariant, ResolvedConsentPresentation, } from '@c15t/core';
 export * from './index-parts/core.js';
+export * from './index-parts/hosted.js';
+export * from './index-parts/offline.js';
+export * from './index-parts/presets.js';
 export * from './index-parts/consent-dialog.js';
 export * from './index-parts/consent-banner.js';
 export * from './index-parts/consent-dialog-link.js';
 export * from './index-parts/consent-dialog-trigger.js';
 export * from './index-parts/consent-gate.js';
+export * from './index-parts/frame.js';
 export * from './index-parts/draft.js';
 export * from './index-parts/translations.js';
 export * from './index-parts/module-hooks.js';

package/dist-types/modes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `@c15t/react/modes` — the single-page app modes, defaulting to what the
+ * build integration downloaded.
+ *
+ * `manifest()` and `hosted()` here read `@c15t/core/generated`, which
+ * `consentManifest()` from `c15t/build` fills with the policy snapshot and
+ * the backend URL. `c15t/react` exports these in place of the plain
+ * `hosted()` from `@c15t/react`.
+ *
+ * The package index does not import this module. Server-framework packages
+ * re-export the index, and their browser bundles must not import
+ * `@c15t/core/generated`: Next.js fails the build when they do.
+ *
+ * @example
+ * ```tsx
+ * import { ConsentProvider, manifest } from 'c15t/react';
+ *
+ * <ConsentProvider options={{ mode: manifest() }}>{children}</ConsentProvider>;
+ * ```
+ */
+export { hosted } from './transports/hosted.js';
+export type { HostedOptions } from './transports/hosted.js';
+export { manifest } from './transports/manifest.js';
+export type { BrowserManifestModeFactory, ManifestModeOptions, } from './transports/manifest.js';
+export { offline } from './transports/offline.js';
+export type { OfflineModeOptions } from './transports/offline.js';

package/dist-types/panel-link.d.ts

@@ -1 +1 @@
-export * from './components/panel-link/index.js';
+export { ConsentDialogLink, type ConsentDialogLinkProps, } from './components/panel-link/index.js';

package/dist-types/panel-trigger.d.ts

@@ -1 +1 @@
-export * from './components/panel-trigger/index.js';
+export { ConsentDialogTrigger, type ConsentDialogTriggerCompound, type ConsentDialogTriggerProps, ConsentDialogTriggerToolbar, type ConsentDialogTriggerToolbarAction, type ConsentDialogTriggerToolbarPreferences, type ConsentDialogTriggerToolbarProps, type CornerPosition, TriggerButton, type TriggerButtonProps, TriggerIcon, type TriggerIconProps, type TriggerIconType, type TriggerOrientation, TriggerRoot, type TriggerRootProps, type TriggerSize, TriggerText, type TriggerTextProps, type TriggerVisibility, type UseDraggableOptions, type UseDraggableReturn, useDraggable, useTriggerContext, } from './components/panel-trigger/index.js';

package/dist-types/provider.d.ts

@@ -75,7 +75,7 @@ export interface ConsentProviderOptions extends ConsentControlOptions, Pick<Reac
      * ```tsx
      * import { ConsentProvider, hosted, offline } from '@c15t/react';
      *
-     * <ConsentProvider options={{ mode: hosted({ url: '/api/c15t' }) }}>
+     * <ConsentProvider options={{ mode: hosted({ backendURL: '/api/c15t' }) }}>
      *   {children}
      * </ConsentProvider>
      *
@@ -119,7 +119,7 @@ export interface ConsentProviderOptions extends ConsentControlOptions, Pick<Reac
      * // app/layout.tsx — stays synchronous, so the shell prerenders.
      * const config = resolveConsent({ backendURL });
      * return (
-     *   <ConsentProvider options={{ mode: hosted({ url }), prefetch: config }}>
+     *   <ConsentProvider options={{ mode: hosted({ backendURL }), prefetch: config }}>
      *     {children}
      *   </ConsentProvider>
      * );
@@ -279,7 +279,7 @@ export type ConsentProviderProps = OwnedRuntimeProviderProps | ExternalRuntimePr
  * ```tsx
  * import { createConsentRuntime } from '@c15t/core/runtime';
  *
- * const runtime = createConsentRuntime({ mode: hosted({ url: '/api/c15t' }) });
+ * const runtime = createConsentRuntime({ mode: hosted({ backendURL: '/api/c15t' }) });
  * runtime.start();
  *
  * <ConsentProvider runtime={runtime} options={{ theme }}>

package/dist-types/transports/hosted.d.ts

@@ -0,0 +1,36 @@
+import type { HostedModeFactory, HostedModeOptions } from '@c15t/core';
+/** Options for {@link hosted}. `backendURL` defaults to the build's. */
+export type HostedOptions = Omit<HostedModeOptions, 'backendURL'> & {
+    /**
+     * Backend URL, relative (`/api/c15t`) or absolute. Defaults to the URL
+     * `consentManifest()` from `c15t/build` read from
+     * `VITE_C15T_BACKEND_URL` or `VITE_INTH_PROJECT_URL`.
+     */
+    backendURL?: string;
+};
+/**
+ * Build a hosted factory, taking the backend URL from the build when the
+ * options name none.
+ *
+ * @param options - The page's options.
+ * @param buildBackendURL - The backend URL the build read, if any.
+ * @returns A hosted transport factory.
+ * @throws {Error} When neither names a backend URL.
+ * @internal
+ */
+export declare const hostedWithBuild: (options: HostedOptions, buildBackendURL: string | undefined) => HostedModeFactory;
+/**
+ * Ask the backend's `/init` for every visitor's policy.
+ *
+ * @param options - Backend URL, init headers and request overrides.
+ * @returns A transport factory for the provider's `mode`, carrying its
+ * options.
+ * @throws {Error} When no backend URL is passed and the build set none.
+ * @example
+ * ```tsx
+ * import { ConsentProvider, hosted } from 'c15t/react';
+ *
+ * <ConsentProvider options={{ mode: hosted() }}>{children}</ConsentProvider>;
+ * ```
+ */
+export declare const hosted: (options?: HostedOptions) => HostedModeFactory;

package/dist-types/transports/manifest.d.ts

@@ -0,0 +1,48 @@
+import type { BrowserManifestModeFactory, BrowserManifestOptions } from '@c15t/core/transports/manifest-browser';
+/**
+ * Manifest mode for the React provider: core's browser resolver, with the
+ * policy and backend URL the build integration downloaded as defaults.
+ */
+import type { ConsentManifest } from '@c15t/schema/types';
+/** What a build integration downloaded, as `@c15t/core/generated` exports it. */
+export interface BuildOutput {
+    backendURL?: string;
+    snapshot?: ConsentManifest;
+}
+/**
+ * Fill the options the page left out from the build: the backend URL that
+ * saves go to, and the snapshot unless the page passed one, a
+ * `manifestURL`, or `source: 'runtime'`.
+ *
+ * @param options - The page's options.
+ * @param build - What the build downloaded.
+ * @returns The options `manifest()` resolves with.
+ * @internal
+ */
+export declare const withBuildDefaults: (options: BrowserManifestOptions, build: BuildOutput) => BrowserManifestOptions;
+/**
+ * Resolve the policy in the browser from the backend's consent manifest.
+ *
+ * Without options it uses what `consentManifest()` from `c15t/build`
+ * downloaded: the snapshot and the backend URL from
+ * `VITE_C15T_BACKEND_URL` or `VITE_INTH_PROJECT_URL`, both served as
+ * `c15t/generated`. Without a
+ * snapshot, such as in dev after a failed fetch, it fetches
+ * `${backendURL}/manifest` at runtime. Saves go to the backend either way.
+ * With `manifestURL` or `source: 'runtime'`, also pass `source: 'runtime'`
+ * to `consentManifest()`, so the build downloads no snapshot.
+ *
+ * @param options - Overrides: your own `snapshot`, `source: 'runtime'`, a
+ * `manifestURL`, a `backendURL`, or the visitor's location as `inputs`.
+ * @returns A transport factory for the provider's `mode`, carrying its
+ * options.
+ * @throws {Error} When no snapshot, manifest URL or backend URL is known.
+ * @example
+ * ```tsx
+ * import { ConsentProvider, manifest } from 'c15t/react';
+ *
+ * <ConsentProvider options={{ mode: manifest() }}>{children}</ConsentProvider>;
+ * ```
+ */
+export declare const manifest: (options?: BrowserManifestOptions) => BrowserManifestModeFactory;
+export type { BrowserManifestModeFactory, BrowserManifestOptions as ManifestModeOptions, } from '@c15t/core/transports/manifest-browser';

package/dist-types/version.d.ts

@@ -1 +1 @@
-export declare const version = "3.0.0-alpha.9";
+export declare const version = "3.0.0";

package/docs/README.md

@@ -6,7 +6,7 @@ These docs ship inside the package so coding agents can read them offline. Open
 
 ## Using these docs
 
-These docs describe c15t v3. Find your app's row in Choose your setup, then follow that framework guide from start to finish; it names the files to create and the backend URL to use. Install c15t packages with the @alpha dist-tag, because npm latest is still v2. A visible banner does not prove anything: check that vendor requests wait for consent, that rejection survives a reload, and that preferences can be reopened.
+These docs describe c15t v3. Find your app's row in Choose your setup, then follow that framework guide from start to finish; it names the files to create and the backend URL to use. A visible banner does not prove anything: check that vendor requests wait for consent, that rejection survives a reload, and that preferences can be reopened.
 
 ## Start here
 
@@ -15,7 +15,7 @@ These docs describe c15t v3. Find your app's row in Choose your setup, then foll
 - [How consent works](./concepts/how-consent-works.md): What c15t decides on each page load, the difference between a permission and a recorded choice, and what happens when a visitor saves.
 - [Customize the interface](./customization/overview.md): Change c15t's consent banner and dialog one step at a time, from a prop to your own markup, and find where each step lives in your framework.
 - [Verify consent](./guides/verify-consent.md): Check in a production build that vendor requests wait for consent, rejection survives a reload, preferences reopen and privacy signals apply.
-- [Migrate to v3](./upgrade-v3.md): Upgrade from c15t v2 to v3. Pick the guide for the v2 package you use (@c15t/nextjs, @c15t/react or the c15t store), rename @c15t/scripts, keep visitors' choices, and upgrade a self-hosted backend and the Node.js SDK.
+- [Upgrade a React app from v2](./frameworks/react/upgrade-v3.md): Upgrade a React app from c15t v2 (@c15t/react) to v3. Covers packages, ConsentProvider and transports, the useConsentManager codemod, callbacks, policies, styles, IAB and stored consent.
 
 ## More documentation
 
@@ -58,12 +58,13 @@ These docs describe c15t v3. Find your app's row in Choose your setup, then foll
 - [Consent state reference](./concepts/consent-state.md): How c15t saves choices, gates IAB vendors, hydrates server records and keeps browser tabs and storage in step.
 - [Data fetching](./concepts/data-fetching.md): Choose the recommended build-time policy snapshot or runtime manifest fetching, backend /init, browser resolution or offline rules, and understand where consent choices are saved.
 - [How consent works](./concepts/how-consent-works.md): What c15t decides on each page load, the difference between a permission and a recorded choice, and what happens when a visitor saves.
+- [Consent modes](./concepts/modes.md): Reference for manifest(), hosted() and offline() in every c15t framework package, where each one resolves the visitor's policy, what it adds to first-load JavaScript, the build-time manifest fetch and its failure policy, and the backend URL variable each framework reads.
 - [Policies](./concepts/policies.md): How policy models, prompts and scope decide what c15t asks visitors, where to change the rules, and why a banner may not appear.
 
 ## Guides
 
 - [Banner experiments](./guides/banner-experiments.md): Run A/B tests on consent banner presentation with any feature-flag provider or built-in weighted assignment, and attribute every impression and choice to its arm.
-- [Troubleshooting](./guides/troubleshooting.md): Fix a missing banner, analytics that load before consent, choices lost on reload, CORS errors, hydration differences and failed static builds in c15t v3.
+- [Troubleshooting](./guides/troubleshooting.md): Fix a missing banner, analytics that load before consent, choices lost on reload, CORS errors, hydration differences, failed manifest downloads, mode errors and failed static builds in c15t v3.
 - [Verify consent](./guides/verify-consent.md): Check in a production build that vendor requests wait for consent, rejection survives a reload, preferences reopen and privacy signals apply.
 
 ## Customization
@@ -93,8 +94,8 @@ These docs describe c15t v3. Find your app's row in Choose your setup, then foll
 - [Fathom Analytics](./integrations/fathom-analytics.md): Load Fathom Analytics only after measurement consent with the c15t fathomAnalytics helper, set its SPA mode, and check it in DevTools.
 - [Front Chat](./integrations/front-chat.md): Load the Front Chat widget only after functionality consent with the c15t frontChat helper, forward CSP nonces, clear the session on revocation and check it in DevTools.
 - [Google Maps](./integrations/google-maps.md): Gate a Google Maps iframe embed with c15t v3 so the map loads only after the visitor allows its consent category, in Next.js, TanStack Start, React, Nuxt, Vue, Astro, Svelte, SvelteKit, HTML or JavaScript.
-- [Google Tag](./integrations/google-tag.md): Load gtag.js for Google Analytics or Google Ads with c15t Consent Mode v2 signals, and verify the consent commands in DevTools.
-- [Google Tag Manager](./integrations/google-tag-manager.md): Load a Google Tag Manager container with c15t Consent Mode v2 signals, configure consent checks inside the container, and verify both in DevTools.
+- [Google Tag](./integrations/google-tag.md): Load gtag.js for Google Analytics or Google Ads before or after consent with c15t Consent Mode v2 signals, and verify the consent commands in DevTools.
+- [Google Tag Manager](./integrations/google-tag-manager.md): Load a Google Tag Manager container before or after consent with c15t Consent Mode v2 signals, configure consent checks inside the container, and verify both in DevTools.
 - [Heap](./integrations/heap.md): Load the Heap config script and heap.js only after measurement consent with the c15t heap helper, and check it in DevTools.
 - [Hightouch](./integrations/hightouch.md): Load the Hightouch Events browser SDK only after measurement consent with the c15t hightouch helper, and check page events in DevTools.
 - [Hotjar](./integrations/hotjar.md): Load Hotjar only after measurement consent with the c15t hotjar helper, and check its loader and recordings in DevTools.
@@ -124,9 +125,6 @@ These docs describe c15t v3. Find your app's row in Choose your setup, then foll
 - [TikTok Pixel](./integrations/tiktok-pixel.md): Load the TikTok Pixel only after marketing consent with the c15t tiktokPixel helper, guard ttq event calls, and check it in DevTools.
 - [Umami Analytics](./integrations/umami-analytics.md): Load the Umami Analytics tracker only after measurement consent with the c15t umamiAnalytics helper, point it at a self-hosted instance, and check it in DevTools.
 - [Vercel Analytics](./integrations/vercel-analytics.md): Load the Vercel Web Analytics script only after measurement consent with the c15t vercelAnalytics helper, choose the debug script, and check it in DevTools.
+- [Vercel Speed Insights](./integrations/vercel-speed-insights.md): Load the Vercel Speed Insights collector only after measurement consent with the c15t vercelSpeedInsights helper, drop Web Vitals reports on revocation, and check it in DevTools.
 - [X Pixel](./integrations/x-pixel.md): Load the X Pixel only after marketing consent with the c15t xPixel helper, guard twq conversion events, and check it in DevTools.
 - [YouTube](./integrations/youtube.md): Gate YouTube embeds with c15t v3 in Next.js, TanStack Start, React, Nuxt, Vue, Astro, Svelte, SvelteKit or JavaScript.
-
-## Reference
-
-- [Migrate to v3](./upgrade-v3.md): Upgrade from c15t v2 to v3. Pick the guide for the v2 package you use (@c15t/nextjs, @c15t/react or the c15t store), rename @c15t/scripts, keep visitors' choices, and upgrade a self-hosted backend and the Node.js SDK.

package/docs/concepts/choose-your-setup.md

@@ -76,10 +76,15 @@ public policy manifest, never a response that contains a visitor's consent.
 ## How the server gets the policy
 
 Use a build-time manifest as the default for supported production builds.
-Next.js, TanStack Start, Nuxt server output, Astro server output and SvelteKit
-can resolve requests from the deployment's snapshot. Vite apps can bundle it
-for browser resolution too; location-based policies may still need a location
-request. The framework quickstarts show the build hook and snapshot wiring.
+`manifest()` is the default mode in Next.js, TanStack Start, Nuxt, Astro and
+SvelteKit, so their servers resolve requests from the deployment's snapshot.
+React, Vue and Svelte single-page apps have no server, so their quickstarts
+use `hosted()`: the backend reads each visitor's location from the `/init`
+request. They can bundle the manifest for browser resolution too, but a
+regional policy still needs `/init` on a first visit unless the page knows
+the location. The framework quickstarts show the build
+integration. [Consent modes](./modes.md) lists every mode, its
+options and the backend URL variable each framework reads.
 
 The build fetches your public policy once and bundles it, so the server never
 fetches it at runtime.
@@ -88,19 +93,49 @@ The snapshot is fixed at build time:
 
 * Rebuild after changing policies, translations or vendors. If your CI caches
   build output, force a fresh build.
-* The build must reach the backend. A failed fetch stops Next.js, TanStack
-  Start, SvelteKit and Vite builds. By default, Astro and Nuxt log a warning
-  instead and fetch the policy at runtime.
 * Consent choices still go to the backend.
 
+The build reads the backend URL from your public backend URL variable when
+the config doesn't pass one: `NEXT_PUBLIC_C15T_BACKEND_URL` in Next.js,
+`NUXT_PUBLIC_C15T_BACKEND_URL` in Nuxt, `PUBLIC_C15T_BACKEND_URL` in Astro,
+Svelte and SvelteKit, and `VITE_C15T_BACKEND_URL` in TanStack Start and other
+Vite apps. Each also reads the matching Inth variable, such as
+`NEXT_PUBLIC_INTH_PROJECT_URL`, when the c15t one is unset. See
+[set the backend URL](./modes.md#set-the-backend-url).
+
+The fetch waits at most 10 seconds. When it fails, or no backend URL is set,
+every framework does the same thing:
+
+| Command                                                                   | Default when the fetch fails                             |
+| ------------------------------------------------------------------------- | -------------------------------------------------------- |
+| Production build: `next build`, `vite build`, `nuxt build`, `astro build` | The build stops with an error.                           |
+| Dev: `next dev`, `vite dev`, `nuxt dev`, `astro dev`                      | A warning, and the server fetches the policy at runtime. |
+
+Set `onBuildError` to use one behaviour for both. `'fail'` stops dev too.
+`'runtime'` lets a production build finish, and the server fetches the policy
+at runtime. The `C15T_ON_BUILD_ERROR` environment variable overrides the
+option, so you can deploy during a backend outage without a code change:
+
+```sh
+C15T_ON_BUILD_ERROR=runtime npm run build
+```
+
+Turborepo's strict environment mode hides undeclared variables from tasks, so
+list `C15T_ON_BUILD_ERROR` in the build task's `passThroughEnv` there.
+
+The build skips the fetch, without an error, when it can't use a snapshot,
+for example when the backend URL is relative. With `onBuildError: 'fail'`, a
+relative URL stops the build. [Consent modes](./modes.md#what-happens-when-the-download-fails)
+lists every case.
+
 For deployments that need policy updates without a rebuild, choose a runtime
 path:
 
-* **Cached manifest**.
+* **Cached manifest**, `manifest({ source: 'runtime' })`.
   Your server downloads the project's public policy file, caches it, and
   resolves each visitor locally. Consent saves still go to the backend.
-* **`/init`**. Each visit asks the backend to resolve the visitor. Simpler, but
-  every page load makes a request to the backend.
+* **`/init`**, `hosted()`. Each visit asks the backend to resolve the visitor.
+  Simpler, but every page load makes a request to the backend.
 
 [Data fetching](./data-fetching.md) compares them in detail,
 including proxies and custom transports.

package/docs/concepts/consent-categories.md

@@ -81,4 +81,4 @@ client render. Set
 
 Use effective permissions to gate work and explicit choices to inspect what the
 visitor confirmed. Read [how consent works](./how-consent-works.md#a-permission-is-not-a-recorded-choice) for that
-distinction and [migration](../upgrade-v3.md) for v3 policy configuration.
+distinction and [policies](./policies.md) for v3 policy configuration.

package/docs/concepts/consent-state.md

@@ -130,8 +130,11 @@ Forward that configuration intact. Copying an allowed category into a receipt
 would invent a grant and lose its original confirmation time.
 
 Valid v2 records can be read without a startup rewrite. The next explicit action
-writes the v3 format. See [migration](../upgrade-v3.md) for expiry, partial saves,
-custom transports and backend contract changes.
+writes the v3 format. The upgrade guides for
+[Next.js](https://c15t.com/docs/frameworks/next/upgrade-v3#keep-visitors-existing-choices),
+[React](../frameworks/react/upgrade-v3.md#keep-visitors-existing-choices) and
+[JavaScript](https://c15t.com/docs/frameworks/javascript/upgrade-v3#keep-visitors-existing-choices)
+cover how v3 treats v2 records.
 
 ## Keep open tabs in step