@c15t/react 3.0.0-alpha.9 → 3.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@c15t/react",
-	"version": "3.0.0-alpha.9",
+	"version": "3.0.0",
 	"description": "React cookie banner, consent manager, preference center, and headless CMP components with IAB TCF and Consent Mode support.",
 	"keywords": [
 		"ccpa",
@@ -67,6 +67,11 @@
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
 		},
+		"./modes": {
+			"types": "./dist-types/modes.d.ts",
+			"import": "./dist/modes.js",
+			"default": "./dist/modes.js"
+		},
 		"./provider": {
 			"types": "./dist-types/provider.d.ts",
 			"import": "./dist/provider.js",
@@ -82,6 +87,11 @@
 			"import": "./dist/draft.js",
 			"default": "./dist/draft.js"
 		},
+		"./theme": {
+			"types": "./dist-types/index-parts/theme.d.ts",
+			"import": "./dist/index-parts/theme.js",
+			"default": "./dist/index-parts/theme.js"
+		},
 		"./module-hooks": {
 			"types": "./dist-types/module-hooks.d.ts",
 			"import": "./dist/module-hooks.js",
@@ -254,16 +264,16 @@
 		"test:watch": "bun prebuild && vitest"
 	},
 	"dependencies": {
-		"@c15t/core": "3.0.0-alpha.9",
-		"@c15t/dev-tools": "3.0.0-alpha.9",
-		"@c15t/iab": "3.0.0-alpha.9",
-		"@c15t/schema": "3.0.0-alpha.7",
-		"@c15t/translations": "3.0.0-alpha.6",
-		"@c15t/ui": "3.0.0-alpha.9",
+		"@c15t/core": "3.0.0",
+		"@c15t/dev-tools": "3.0.0",
+		"@c15t/iab": "3.0.0",
+		"@c15t/schema": "3.0.0",
+		"@c15t/translations": "3.0.0",
+		"@c15t/ui": "3.0.0",
 		"@types/google.maps": "3.65.3"
 	},
 	"devDependencies": {
-		"@c15t/backend": "3.0.0-alpha.9",
+		"@c15t/backend": "3.0.0",
 		"@c15t/conformance": "0.0.1",
 		"@c15t/typescript-config": "0.0.1",
 		"@c15t/vitest-config": "1.0.0",

package/docs/upgrade-v3.md

@@ -1,429 +0,0 @@
----
-title: Migrate to v3
-description: Upgrade from c15t v2 to v3. Pick the guide for the v2 package you
-  use (@c15t/nextjs, @c15t/react or the c15t store), rename @c15t/scripts, keep
-  visitors' choices, and upgrade a self-hosted backend and the Node.js SDK.
-group: reference
----
-
-## Hand the upgrade to a coding agent
-
-**Upgrade this app to c15t v3**
-
-Paste into Claude Code, Codex, Cursor or another coding agent at the root of your app.
-
-```prompt
-Upgrade this app from c15t v2 to c15t v3.
-
-1. Check `package.json` for c15t packages. `@c15t/nextjs` means Next.js, `@c15t/react` without it means React, and `c15t` alone means the JavaScript store.
-2. Read the matching guide before you change anything: <https://c15t.com/docs/frameworks/next/upgrade-v3.md>, <https://c15t.com/docs/frameworks/react/upgrade-v3.md> or <https://c15t.com/docs/frameworks/javascript/upgrade-v3.md>. Follow it in order and do not guess v3 APIs from memory.
-3. If the app also runs its own c15t backend with `@c15t/backend`, read <https://c15t.com/docs/upgrade-v3.md> and upgrade the backend in the same change. Start with `npx @c15t/cli@alpha codemods backend-config-to-v3 node-sdk-to-v3 --dry-run --json`, then run it without `--dry-run`.
-4. Keep the existing backend URL.
-5. Run the typecheck and build when you finish.
-
-List the files you changed, anything you could not migrate, and how you checked that vendor requests still wait for consent.
-```
-
-## What changes in v3
-
-* One package, `c15t`, replaces `@c15t/nextjs`, `@c15t/react` and the v2
-  `c15t` store. Import from its subpaths: `c15t/next`, `c15t/react`, and `c15t`
-  for the headless engine.
-* The vendor helpers move from `@c15t/scripts` to `@c15t/integrations`, with
-  the same subpaths and helper names.
-* `ConsentManagerProvider` becomes `ConsentProvider` in React. Next.js apps
-  that resolve consent on the server use `ConsentRoot`.
-* `mode` and `backendURL` become one transport, `hosted({ url })` or
-  `offline()`.
-* Policy packs become policy rules. You set them in your Inth project, in a
-  self-hosted backend's `manifest.policyRules`, or in `offline({ policyRules })`.
-* `useConsentManager()` is gone. Each field has its own hook, and a codemod
-  rewrites most calls.
-* Callbacks have new names, and each reports either a recorded choice or a
-  permission change.
-* `theme` tokens no longer generate CSS on their own. Render `ConsentTheme` or
-  add `generateThemeCSS()` output to your stylesheet.
-* IAB moves from the `iab` provider option to an `IABProvider` component in
-  React and Next.js.
-* Every package ships ESM only. `require()` of a c15t package no longer
-  resolves.
-* Visitors' existing choices keep working. v3 reads the v2 cookie.
-* A self-hosted backend takes `database` instead of `adapter`, and needs a
-  schema migration.
-* `@c15t/node-sdk` has a new client, `createC15tClient()`. Its methods return
-  results instead of throwing, and it reads no environment variables.
-
-## Pick your guide
-
-Each guide covers one v2 package from start to finish.
-
-| You use in v2                                         | Follow                                                               |
-| ----------------------------------------------------- | -------------------------------------------------------------------- |
-| `@c15t/nextjs`                                        | [Next.js](https://c15t.com/docs/frameworks/next/upgrade-v3)          |
-| `@c15t/react`                                         | [React](./frameworks/react/upgrade-v3.md)                            |
-| `c15t`, with `getOrCreateConsentRuntime` or the store | [JavaScript](https://c15t.com/docs/frameworks/javascript/upgrade-v3) |
-
-v3 also adds TanStack Start, Nuxt, Vue, Astro, Svelte, SvelteKit and a script
-tag. If you want to move to one of them, start with its quickstart from
-[Choose your setup](./concepts/choose-your-setup.md).
-
-If you run your own c15t backend, upgrade it in the same release as the
-clients, following [Upgrade a self-hosted backend](#upgrade-a-self-hosted-backend).
-Server code that calls the API with `@c15t/node-sdk` follows
-[Update the Node.js SDK](#update-the-nodejs-sdk).
-
-The sections below apply to every app.
-
-## Rename the integrations dependency
-
-v3 renames `@c15t/scripts` to `@c15t/integrations`. Remove `@c15t/scripts`
-from your dependencies and install `@c15t/integrations` from the `alpha`
-dist-tag:
-
-| Package manager | Command                                |
-| :-------------- | :------------------------------------- |
-| npm             | `npm install @c15t/integrations@alpha` |
-| pnpm            | `pnpm add @c15t/integrations@alpha`    |
-| yarn            | `yarn add @c15t/integrations@alpha`    |
-| bun             | `bun add @c15t/integrations@alpha`     |
-
-Replace the package name in each import. Vendor subpaths and helper names stay
-the same.
-
-Before, in v2:
-
-```ts
-import { googleTagManager } from '@c15t/scripts/google-tag-manager';
-import { posthog } from '@c15t/scripts/posthog';
-```
-
-After:
-
-```ts
-import { googleTagManager } from '@c15t/integrations/google-tag-manager';
-import { posthog } from '@c15t/integrations/posthog';
-```
-
-The `scripts` configuration option and the `Script` type keep their names.
-
-Two helper behaviors change. A helper that needs an ID, such as `metaPixel`,
-`googleTagManager` or `posthog`, now throws when the ID is empty or only
-whitespace, where v2 loaded a broken script. And if your code reads
-`@c15t/integrations/registry`, an entry's `consentCategory` can now be a
-compound condition such as `{ and: ['marketing', 'measurement'] }`, not only a
-category name.
-
-`@c15t/scripts` stays available as a deprecated compatibility package for all
-of v3. It re-exports the implementation and types of `@c15t/integrations`, so
-you can migrate imports separately from the rest of the upgrade. Compatibility
-ends in v4; versions already published stay on npm.
-
-To preview the import changes in JavaScript and TypeScript files:
-
-```bash
-npx @c15t/cli@alpha codemods scripts-to-integrations --dry-run --json
-```
-
-Review the output, then run it again without `--dry-run`. The codemod runs
-only when you name it. It does not change `package.json`, lockfiles, or
-imports inside `.vue`, `.svelte` or `.astro` files; update those by hand, then
-reinstall dependencies and build the app.
-
-## Replace `useConsentManager()`
-
-`useConsentManager()` returned the whole consent state, so every component
-that called it re-rendered on every change. v3 has one hook per field. Run the
-codemod first:
-
-```bash
-npx @c15t/cli@alpha codemods use-consent-manager-to-hooks --dry-run --json
-```
-
-Review the proposed files, then run it again without `--dry-run`. For this v2
-component:
-
-```tsx title="Before (v2): components/accept-button.tsx"
-import { useConsentManager } from '@c15t/react';
-
-export function AcceptButton() {
-	const { activeUI, has, saveConsents } = useConsentManager();
-	if (activeUI !== 'banner' || has('marketing')) return null;
-	return (
-		<button type="button" onClick={() => void saveConsents('all')}>
-			Accept
-		</button>
-	);
-}
-```
-
-the codemod writes:
-
-```tsx title="After (v3): components/accept-button.tsx"
-import { useActiveUI, useConsent } from '@c15t/react';
-import { useHeadlessConsentUI } from '@c15t/react/headless';
-
-export function AcceptButton() {
-	const activeUI = useActiveUI() ?? 'none';
-	const hasMarketing = useConsent('marketing');
-	const { saveCustomPreferences: saveConsents } = useHeadlessConsentUI();
-	if (activeUI !== 'banner' || hasMarketing) return null;
-	return (
-		<button type="button" onClick={() => void saveConsents('all')}>
-			Accept
-		</button>
-	);
-}
-```
-
-The codemod keeps the entry you imported from. Change `@c15t/react` to
-`c15t/react` afterwards if you moved to the umbrella package. Fields it cannot
-rewrite stay on a `useConsentManager()` call under a `TODO(c15t v3)` comment,
-which fails the build until you replace them. The table lists the v2 fields
-components read. The other fields held provider configuration, such as
-`legalLinks`, `scripts` and `storageConfig`, or store internals; set
-configuration through `ConsentProvider` props.
-Import hooks from `c15t/react`, `c15t/next` or `c15t/tanstack-start`, and
-`useHeadlessConsentUI` from the matching `/headless` entry.
-
-| v2 field                                                      | v3 replacement                                                                                                  |
-| ------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
-| `activeUI`                                                    | `useActiveUI()`. It returns `null` until c15t picks a surface, where v2 returned `'none'`.                      |
-| `setActiveUI(ui)`                                             | `useSetActiveUI()`                                                                                              |
-| `has(category)`                                               | `useConsent(category)`, one call per category at the top of the component                                       |
-| `consents`                                                    | `useConsents()`                                                                                                 |
-| `saveConsents('all')`                                         | `useHeadlessConsentUI().saveCustomPreferences('all')`                                                           |
-| `saveConsents('necessary')`                                   | `useHeadlessConsentUI().saveCustomPreferences('none')`                                                          |
-| `saveConsents('custom')`                                      | `useConsentDraft().save()`, or `useHeadlessConsentUI().saveCustomPreferences()` inside a `ConsentDraftProvider` |
-| `selectedConsents`                                            | `useConsentDraft().values`                                                                                      |
-| `setSelectedConsent(name, value)`                             | `useConsentDraft().set(name, value)`                                                                            |
-| `setConsent(name, value)`                                     | `useSaveConsents()`, called with `{ [name]: value }`                                                            |
-| `consentInfo`                                                 | `useExplicitChoice()`                                                                                           |
-| `hasConsented()`                                              | `useExplicitChoice() !== null`                                                                                  |
-| `consentCategories`, `consentTypes`, `getDisplayedConsents()` | `useConsentDraft().displayedCategories`, with labels from `useTranslations().consentTypes`                      |
-| `policyCategories`                                            | `usePolicyCategories()`. The v2 list started with `'necessary'`; this one does not.                             |
-| `policyScopeMode`                                             | `usePolicyScopeMode()`                                                                                          |
-| `policyBanner`                                                | `usePromptPresentation()`                                                                                       |
-| `policyDialog`                                                | `usePreferencesPresentation()`                                                                                  |
-| `model`                                                       | `useModel()`. It returns `null` while no policy matches, where v2 returned `'opt-in'`.                          |
-| `branding`                                                    | `useBranding()`. It returns `null` when unset, where v2 returned `'c15t'`.                                      |
-| `iab`                                                         | `useIABSnapshot()`                                                                                              |
-| `locationInfo`                                                | `useLocation()`                                                                                                 |
-| `overrides`, `setOverrides()`                                 | `useOverrides()`, `useSetOverrides()`                                                                           |
-| `setLanguage()`                                               | `useSetLanguage()`                                                                                              |
-| `user`, `identifyUser()`                                      | `useUser()`, `useIdentify()`                                                                                    |
-| `translationConfig`                                           | `useTranslations()` for the active strings                                                                      |
-| `subscribeToConsentChanges(listener)`                         | `useSubscribeToConsentChanges()`, or the `onPermissionsChanged` callback                                        |
-| `updateConsentCategories(categories)`                         | `useRegisterConsentCategories()`                                                                                |
-| `manager`                                                     | Nothing. Use the hooks above.                                                                                   |
-
-`saveCustomPreferences()` saves the way the stock buttons do. It closes the
-banner or dialog after a successful save. `useSaveConsents()` calls the engine
-directly and does not close anything.
-
-In v2, `useConsentManager()` kept one draft per component. In v3,
-`useConsentDraft()` and `useHeadlessConsentUI()` share a draft only inside a
-`ConsentDraftProvider`. Without one, `saveCustomPreferences()` saves a fresh
-draft and ignores what `useConsentDraft().set()` staged, even in the same
-component. Save with `useConsentDraft().save()`, or render the code that stages
-and the code that saves inside one `ConsentDraftProvider`. `ConsentWidget`
-already includes one. The codemod
-adds a `TODO(c15t v3)` comment where this applies.
-
-## Keep visitors' existing choices
-
-v3 uses the same `c15t` cookie and storage key as v2 and reads v2 records. It
-does not rewrite them on page load; the next accept, reject or save writes a
-v3 record.
-
-A v2 denial keeps restricting its category. A v2 grant keeps applying until
-the policy's validity period runs out, and then c15t asks again. If the rule
-comes from a preset and the v2 record noted the policy it was made under, c15t
-also asks again when that policy has changed. Under custom rules, a v2 grant
-applies until it expires. Do not copy permissions into new
-records yourself; c15t decides which v2 choices still count.
-
-## Choose the HTML bundle
-
-For HTML script tags, `c15t.js` is now the hosted bundle. Keep that filename
-for Inth or a self-hosted backend and supply `data-backend-url`, a queued
-`backendURL`, or a hosted factory. Loading it without a backend no longer
-starts offline mode.
-
-If an earlier v3 script tag used local policy rules, switch its URL to
-`c15t.offline.js`. For manifest mode, custom transports or a page that selects
-its mode at runtime, use the root ES module `@c15t/browser`, which still
-accepts every mode. The headless script supports those modes with your own
-UI, and the IAB script supports them for IAB policies. The self-hosted
-backend's `/c15t.js` route now resolves policies through `/init`; its headless
-and IAB routes still preload the manifest. See the
-[script file reference](https://c15t.com/docs/frameworks/html/attributes-and-api#script-files).
-
-## Upgrade a self-hosted backend
-
-Deploy the v3 backend and the v3 clients in the same release. A v3 client
-cannot read a v2 backend's `/init` response. Policy resolution fails, optional
-categories stay denied and no banner appears.
-
-1. Install `@c15t/backend@alpha` and the SQL driver for your database.
-2. Replace `adapter` with `database` in your config. The Drizzle, Prisma,
-   TypeORM and Kysely adapters are gone; point `database` at the same SQL
-   database instead. MongoDB has no migration path.
-3. Move `policyPacks`, `branding`, `customTranslations`, `i18n` and `appName`
-   under `manifest`, and rename `policyPacks` to `policyRules`. Split `iab`
-   between `manifest.iab` and `gvl`, as the table below shows.
-4. Back up the database, then plan and apply the schema migration:
-
-```bash
-npx @c15t/cli@alpha self-host migrate --config ./c15t-backend.config.ts --plan
-npx @c15t/cli@alpha self-host migrate --config ./c15t-backend.config.ts --apply
-```
-
-The migrator recognizes the v2 schema, adopts it, and adds the v3 tables and
-columns. Apply it before the v3 backend serves traffic: v3 records policy
-decisions without the v2 `jurisdiction` label, which the migration makes
-nullable. [Database setup](https://c15t.com/docs/self-host/guides/database-setup#upgrade-a-v2-backend)
-covers the details, and the [backend quickstart](https://c15t.com/docs/self-host/quickstart)
-shows a complete v3 config and route.
-
-The `backend-config-to-v3` codemod does step 3 for the keys that move as they
-are, and leaves a `TODO(c15t v3)` comment on `adapter`, `iab`,
-`disableGeoLocation` and the other options in the table below:
-
-```bash
-npx @c15t/cli@alpha codemods backend-config-to-v3 policy-packs-to-policy-rules --dry-run --json
-```
-
-Preset calls such as `policyRulePresets.europeOptIn()` need no other change.
-A hand-written v2 pack uses `consent` and `ui` keys, which v3 rules replace
-with flat keys such as `model` and `prompt`. See
-[policy configuration](https://c15t.com/docs/self-host/guides/policy-packs).
-
-The v3 backend stores timestamps in UTC. Convert rows that a v2 backend wrote
-in another time zone before you deploy. Database setup lists the checks.
-
-Other backend options and entries change too:
-
-| v2                                                                                                          | v3                                                                                                                                                                  |
-| ----------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `tablePrefix`                                                                                               | Removed. The migrator refuses a database with prefixed c15t tables, so rename them first. On PostgreSQL, `database.schema` keeps c15t's tables in their own schema. |
-| `iab.vendorIds`, `iab.endpoint`, `cache.adapter`                                                            | `gvl: { vendorIds, endpoint, cache }`                                                                                                                               |
-| `iab.enabled`, `iab.cmpId`, `iab.customVendors`                                                             | `manifest.iab`                                                                                                                                                      |
-| `logger`, `telemetry`                                                                                       | `observability`, passed to `c15tInstance()`                                                                                                                         |
-| `background`, `iab.bundled`                                                                                 | Removed                                                                                                                                                             |
-| `openapi.docsPath`, `openapi.options`, `openapi.customUiTemplate` and the `/docs` page                      | Removed. The spec is still at `/spec.json`.                                                                                                                         |
-| `policySnapshot.onValidationFailure`                                                                        | Removed                                                                                                                                                             |
-| `GET /` as an alias of `/status`                                                                            | Removed. Call `/status`.                                                                                                                                            |
-| `@c15t/backend/define-config`, `/router`, `/types`, `/db/schema`, `/db/adapters/*`, `/db/migrator`, `/edge` | Removed. Import `defineConfig`, `createMigrator` and `policyRulePresets` from `@c15t/backend`.                                                                      |
-
-### Remove `disableGeoLocation`
-
-v3 removes the top-level `disableGeoLocation` option. Policy rules decide by
-country and region. To show every visitor the same banner, configure one rule
-with `match: { isDefault: true }`. It applies wherever the visitor is, so the
-browser can resolve it without asking the backend for a location.
-
-To test one region's rule from anywhere, set the country in the client's
-`overrides`, for example `overrides: { country: 'US' }`. See
-[runtime options](https://c15t.com/docs/frameworks/javascript/api/runtime).
-
-### Stop reading `jurisdiction`
-
-`/init` responses, session reports and `sessions.onReport` no longer carry a
-`jurisdiction` label such as `GDPR`. Read the matched policy from
-`policyResolution` instead, or the report's `policy`, `country` and `region`.
-The backend still accepts `jurisdiction` in a v2 client's save request and
-ignores it.
-
-## Update the Node.js SDK
-
-Install `@c15t/node-sdk@alpha`. The v2 client is gone: create one with
-`createC15tClient()` and pass the backend URL and API key yourself.
-
-| Package manager | Command                            |
-| :-------------- | :--------------------------------- |
-| npm             | `npm install @c15t/node-sdk@alpha` |
-| pnpm            | `pnpm add @c15t/node-sdk@alpha`    |
-| yarn            | `yarn add @c15t/node-sdk@alpha`    |
-| bun             | `bun add @c15t/node-sdk@alpha`     |
-
-```ts
-import { createC15tClient } from '@c15t/node-sdk';
-
-const apiKey = process.env.C15T_API_KEY;
-if (!apiKey) throw new Error('Set C15T_API_KEY');
-
-const c15t = createC15tClient({
-	baseUrl: 'https://app.example.com/api/c15t',
-	apiKey,
-});
-
-const result = await c15t.consents.check({
-	externalId: 'user_123',
-	types: ['privacy_policy', 'marketing_communications'],
-});
-if (result.ok) {
-	console.log(result.data.results.privacy_policy.hasConsent);
-}
-```
-
-| v2                                                                                        | v3                                                                                                                                                                      |
-| ----------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `c15tClient(options)`, `new C15TClient(options)`                                          | `createC15tClient(options)`                                                                                                                                             |
-| `C15T_API_URL`, `C15T_API_TOKEN` read from the environment                                | Not read. Pass `baseUrl` and `apiKey`.                                                                                                                                  |
-| `token`                                                                                   | `apiKey`                                                                                                                                                                |
-| `prefix`                                                                                  | Part of `baseUrl`. v2 replaced the base URL's path with `prefix`, so use the origin plus the prefix, such as `https://app.example.com/api/c15t`.                        |
-| `timeout`                                                                                 | `timeoutMs`, per attempt. The default drops from 30 to 10 seconds.                                                                                                      |
-| `retryConfig`                                                                             | `retry: { maxRetries, initialDelayMs, maxDelayMs }`, or `false`. `backoffFactor`, `retryableStatusCodes`, `nonRetryableStatusCodes` and `retryOnNetworkError` are gone. |
-| `debug`, `C15T_DEBUG`                                                                     | `onEvent`                                                                                                                                                               |
-| `client.meta.status()`, `client.status()`                                                 | `c15t.status()`                                                                                                                                                         |
-| `client.meta.init(options)`, `client.init(options)`                                       | `c15t.init({ language, country, region, gpc }, options)`. Per-call options move to the second argument.                                                                 |
-| `getSubject(id, { type: 'a,b' })`, `subjects.get(id, { type: 'a,b' })`                    | `subjects.get(id, { types: ['a', 'b'] })`                                                                                                                               |
-| `createSubject(input)`                                                                    | `subjects.create(input)`. `givenAt` also takes a `Date`.                                                                                                                |
-| `patchSubject(id, input)`, `subjects.patch(id, input)`                                    | `subjects.identify(id, { externalId, identityProvider })`                                                                                                               |
-| `listSubjects({ externalId })`, `subjects.list({ externalId })`                           | `subjects.list({ externalId })`, on a client with `apiKey`                                                                                                              |
-| `checkConsent(query)`, `consent.check({ externalId, type: 'a,b' })`                       | `consents.check({ externalId, types: ['a', 'b'] })`, on a client with `apiKey`                                                                                          |
-| `ResponseContext` with `data: T \|null`                                                   | `{ ok: true, data } \|{ ok: false, error }`. Check `ok` first.                                                                                                          |
-| `unwrap()`, `expect()` on the response                                                    | `unwrap(result)`, imported from `@c15t/node-sdk`                                                                                                                        |
-| `unwrapOr()`, `map()` on the response                                                     | Check `result.ok`                                                                                                                                                       |
-| `throw: true`                                                                             | `unwrap(result)`                                                                                                                                                        |
-| `onSuccess`, `onError`                                                                    | Check `result.ok` after the call                                                                                                                                        |
-| `C15TError`, `isC15TError()`                                                              | `C15tError`, `isC15tError(error, ...codes)`                                                                                                                             |
-| `C15TClient`, `C15TClientOptions`, `RetryConfig`, `FetchOptions`, `ResponseContext` types | `C15tClient`, `C15tClientOptions`, `C15tRetryOptions`, `C15tCallOptions`, `C15tResult`                                                                                  |
-| Per-call `timeout`, `retryConfig`                                                         | `timeoutMs`, `retry`                                                                                                                                                    |
-| Per-call `body`, `query`, `method`                                                        | Removed. Pass the body and query as the method's arguments.                                                                                                             |
-| `$fetch`, `fetcher`, `resolveUrl`, `createResponseContext`                                | Removed. Pass a custom `fetch` to `createC15tClient` if you need one.                                                                                                   |
-| `createMockClient`, `createMockResponse`, `createMockErrorResponse`                       | `createMockC15tClient`, `ok`, `err` from `@c15t/node-sdk/testing`                                                                                                       |
-
-`patchSubject` returned `{ success, subject }`. `subjects.identify` returns
-`{ subject }`, and `subject.identityProvider` is always set. Dates in
-responses, such as `givenAt` and `createdAt`, are now `Date` objects rather
-than strings.
-
-`consents.check` and `subjects.list` count only verified links. Links made by
-v2 don't count until you relink them with `subjects.identify` on a keyed
-client, or [with an identity token](https://c15t.com/docs/self-host/api/node-sdk#verify-a-link-made-in-the-browser) on the user's next sign-in.
-
-The `node-sdk-to-v3` codemod renames the factory, client options, methods,
-types and errors in files that create a client. It turns `type` strings into
-`types` arrays, and leaves a `TODO(c15t v3)` comment at each call, because
-results are now `{ ok, data }` or `{ ok, error }`. It renames per-call
-`timeout` and `retryConfig` too. It also marks `prefix`, `debug`, per-call
-`throw`, `onSuccess`, `onError`, `body`, `query` and `method`, and a client
-built from environment variables:
-
-```bash
-npx @c15t/cli@alpha codemods node-sdk-to-v3 --dry-run --json
-```
-
-The new client also adds `manifest()`, `legalDocuments.publish()` and
-`experiments.summary()`. The last two need a client with `apiKey`. See the
-[Node.js SDK reference](https://c15t.com/docs/self-host/api/node-sdk).
-
-## Update the CLI
-
-* Run `c15t login` again. The CLI signs in through Inth now and no longer
-  reads sessions saved by v2.
-* `c15t setup` no longer writes `.env.local` or `.env.example` and no longer
-  accepts `--env`. It writes the backend URL into the files it generates.
-* `c15t setup` no longer detects Remix or Gatsby. Pick a guide from
-  [Choose your setup](./concepts/choose-your-setup.md) for those apps.