@consenti/ui 0.4.0 → 0.5.0

package/dist/react.d.cts

@@ -622,6 +622,7 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
     private initializing;
     private profile;
     private resolvedBase;
+    private profilePatches;
     /** cookieId → Category lookup, rebuilt whenever `profile` changes. Avoids rescanning categories on every consent action. */
     private categoryIndex;
     /** Watchers created by the declarative `data-consenti-*` DOM scan — destroyed alongside the widget since they have no other owner. */
@@ -677,6 +678,14 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
      * cookies per compliance group (built-in or custom) without authoring a separate profile for
      * each one. Applied before `profileOverride`, which still always wins as the final catch-all. */
     private applyComplianceGroupOverride;
+    /**
+     * Applied in order: compliance-group override → `config.profileOverride` → each `setProfile()`
+     * patch. The `setProfile()` patches are kept as a list and replayed, not folded into one
+     * object, because folding runs `deepMerge` patch-onto-patch, which consumes `null`/`'*': null`
+     * delete markers before they ever reach the profile they were meant to delete from.
+     */
+    private applyProfileOverrides;
+    private warnIfAcceptOnly;
     /**
      * Whether `window.__tcfapi`/`window.__gpp` should stay uninstalled because the corresponding
      * server-side registration (`compliance.tcf`/`compliance.gpp`) is unconfirmed (cmpId/cmpVersion

package/dist/react.d.ts

@@ -622,6 +622,7 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
     private initializing;
     private profile;
     private resolvedBase;
+    private profilePatches;
     /** cookieId → Category lookup, rebuilt whenever `profile` changes. Avoids rescanning categories on every consent action. */
     private categoryIndex;
     /** Watchers created by the declarative `data-consenti-*` DOM scan — destroyed alongside the widget since they have no other owner. */
@@ -677,6 +678,14 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
      * cookies per compliance group (built-in or custom) without authoring a separate profile for
      * each one. Applied before `profileOverride`, which still always wins as the final catch-all. */
     private applyComplianceGroupOverride;
+    /**
+     * Applied in order: compliance-group override → `config.profileOverride` → each `setProfile()`
+     * patch. The `setProfile()` patches are kept as a list and replayed, not folded into one
+     * object, because folding runs `deepMerge` patch-onto-patch, which consumes `null`/`'*': null`
+     * delete markers before they ever reach the profile they were meant to delete from.
+     */
+    private applyProfileOverrides;
+    private warnIfAcceptOnly;
     /**
      * Whether `window.__tcfapi`/`window.__gpp` should stay uninstalled because the corresponding
      * server-side registration (`compliance.tcf`/`compliance.gpp`) is unconfirmed (cmpId/cmpVersion

package/dist/vue.d.cts

@@ -624,6 +624,7 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
     private initializing;
     private profile;
     private resolvedBase;
+    private profilePatches;
     /** cookieId → Category lookup, rebuilt whenever `profile` changes. Avoids rescanning categories on every consent action. */
     private categoryIndex;
     /** Watchers created by the declarative `data-consenti-*` DOM scan — destroyed alongside the widget since they have no other owner. */
@@ -679,6 +680,14 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
      * cookies per compliance group (built-in or custom) without authoring a separate profile for
      * each one. Applied before `profileOverride`, which still always wins as the final catch-all. */
     private applyComplianceGroupOverride;
+    /**
+     * Applied in order: compliance-group override → `config.profileOverride` → each `setProfile()`
+     * patch. The `setProfile()` patches are kept as a list and replayed, not folded into one
+     * object, because folding runs `deepMerge` patch-onto-patch, which consumes `null`/`'*': null`
+     * delete markers before they ever reach the profile they were meant to delete from.
+     */
+    private applyProfileOverrides;
+    private warnIfAcceptOnly;
     /**
      * Whether `window.__tcfapi`/`window.__gpp` should stay uninstalled because the corresponding
      * server-side registration (`compliance.tcf`/`compliance.gpp`) is unconfirmed (cmpId/cmpVersion

package/dist/vue.d.ts

@@ -624,6 +624,7 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
     private initializing;
     private profile;
     private resolvedBase;
+    private profilePatches;
     /** cookieId → Category lookup, rebuilt whenever `profile` changes. Avoids rescanning categories on every consent action. */
     private categoryIndex;
     /** Watchers created by the declarative `data-consenti-*` DOM scan — destroyed alongside the widget since they have no other owner. */
@@ -679,6 +680,14 @@ declare class ConsentiSetup implements ConsentiWidgetAPI {
      * cookies per compliance group (built-in or custom) without authoring a separate profile for
      * each one. Applied before `profileOverride`, which still always wins as the final catch-all. */
     private applyComplianceGroupOverride;
+    /**
+     * Applied in order: compliance-group override → `config.profileOverride` → each `setProfile()`
+     * patch. The `setProfile()` patches are kept as a list and replayed, not folded into one
+     * object, because folding runs `deepMerge` patch-onto-patch, which consumes `null`/`'*': null`
+     * delete markers before they ever reach the profile they were meant to delete from.
+     */
+    private applyProfileOverrides;
+    private warnIfAcceptOnly;
     /**
      * Whether `window.__tcfapi`/`window.__gpp` should stay uninstalled because the corresponding
      * server-side registration (`compliance.tcf`/`compliance.gpp`) is unconfirmed (cmpId/cmpVersion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@consenti/ui",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "GDPR-style cookie consent widget — zero required runtime dependencies",
   "license": "Apache-2.0",
   "author": {
@@ -81,14 +81,14 @@
   "devDependencies": {
     "@consenti/types": "*",
     "@consenti/utils": "*",
-    "@types/node": "^26.1.1",
-    "@types/react": "^19.0.0",
+    "@types/node": "^26.1.2",
+    "@types/react": "^19.2.18",
     "sass": "^1.102.0",
     "tsup": "^8.5.0",
     "tsx": "^4.23.0",
     "typescript": "^6.0.3",
     "vite": "^8.2.0",
-    "vue": "^3.5.40"
+    "vue": "^3.5.41"
   },
   "peerDependencies": {
     "react": ">=18.0.0",