@easy-cookie/posthog 0.1.2 → 0.1.4

package/dist/index.cjs

@@ -30,6 +30,33 @@ function connectPostHog(posthog, api, options = {}) {
   const category = options.category ?? "measurement";
   const granted = () => options.service ? api.isServiceGranted(options.service) : api.isGranted(category);
   let last = null;
+  let remoteConfig;
+  if (options.sessionReplay && typeof posthog._onRemoteConfig === "function") {
+    const original = posthog._onRemoteConfig.bind(posthog);
+    posthog._onRemoteConfig = (config) => {
+      remoteConfig = config;
+      original(config);
+    };
+  }
+  const fetchRemoteConfig = async () => {
+    try {
+      const token = posthog.config?.token;
+      const url = token && posthog.requestRouter?.endpointFor?.("assets", `/array/${token}/config`);
+      if (!url) return void 0;
+      const res = await fetch(url);
+      return res.ok ? await res.json() : void 0;
+    } catch {
+      return void 0;
+    }
+  };
+  const restartReplay = async () => {
+    try {
+      const config = remoteConfig ?? await fetchRemoteConfig();
+      if (config && "sessionRecording" in config) posthog.sessionRecording?.onRemoteConfig?.(config);
+      posthog.startSessionRecording?.();
+    } catch {
+    }
+  };
   const status = () => {
     const explicit = posthog.get_explicit_consent_status?.();
     if (explicit === "granted") return "in";
@@ -44,7 +71,7 @@ function connectPostHog(posthog, api, options = {}) {
     if (!api.get()) {
       if (options.beforeChoice === "cookieless") {
         if (last !== "out") {
-          if (status() !== "out") posthog.opt_out_capturing();
+          if (status() !== "out" || last === null) posthog.opt_out_capturing();
           last = "out";
         }
       } else if (status() === "in") {
@@ -54,15 +81,19 @@ function connectPostHog(posthog, api, options = {}) {
     }
     if (granted()) {
       if (last !== "in") {
+        const fromCookieless = status() === "out";
         if (status() !== "in") posthog.opt_in_capturing({ captureEventName: false });
-        if (options.sessionReplay) posthog.startSessionRecording?.();
+        if (options.sessionReplay) {
+          if (fromCookieless) void restartReplay();
+          else posthog.startSessionRecording?.();
+        }
         last = "in";
       }
       const id = options.identify?.();
       if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);
     } else if (last !== "out") {
       if (options.sessionReplay) posthog.stopSessionRecording?.();
-      if (status() !== "out") posthog.opt_out_capturing();
+      if (status() !== "out" || last === null) posthog.opt_out_capturing();
       last = "out";
     }
   };

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { EasyCookieApi, EasyCookieEvent } from '@easy-cookie/core/shared';\n\n/**\n * The few posthog-js methods the adapter uses. Typed loosely on purpose, so\n * `posthog-js` stays an optional peer dependency and any compatible client works.\n */\nexport interface PostHogLike {\n  opt_in_capturing(options?: { captureEventName?: string | null | false; [key: string]: unknown }): void;\n  opt_out_capturing(): void;\n  has_opted_in_capturing?(): boolean;\n  has_opted_out_capturing?(): boolean;\n  clear_opt_in_out_capturing?(): void;\n  /** posthog-js ≥ 1.2xx: 'granted' | 'denied' | 'pending' (reliable with cookieless_mode). */\n  get_explicit_consent_status?(): string;\n  startSessionRecording?(...args: unknown[]): void;\n  stopSessionRecording?(): void;\n  identify?(distinctId?: string, ...rest: unknown[]): void;\n  get_distinct_id?(): string;\n}\n\n/** Minimal shape of a PostHog event passed to `before_send`. */\nexport interface PostHogEventLike {\n  event: string;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- matches posthog-js `Properties`\n  properties?: Record<string, any>;\n}\n\nexport interface ConnectPostHogOptions {\n  /** Category that allows PostHog cookies/profiles. Default `measurement`. */\n  category?: string;\n  /** Service id: when set, the service's own consent decides instead of the category. */\n  service?: string;\n  /**\n   * Return the logged-in user id (or undefined). Called after opt-in, so the\n   * identified person profile is created only with consent.\n   */\n  identify?: () => string | undefined | null;\n  /**\n   * Before the visitor's first choice:\n   * - `'pending'` (default): capture nothing. A stale opt-in left in storage by an\n   *   earlier setup is cleared, so nothing is captured with cookies.\n   * - `'cookieless'`: count visits without cookies (same as after a rejection).\n   *   Only if your privacy policy covers cookieless measurement without consent.\n   */\n  beforeChoice?: 'pending' | 'cookieless';\n  /** Start session recording on opt-in and stop it on opt-out. Default false. */\n  sessionReplay?: boolean;\n}\n\n/**\n * Keep PostHog's capture state in sync with the visitor's consent, without reloads.\n *\n * PostHog must be initialised by the host with `cookieless_mode: 'on_reject'`\n * (see {@link posthogInitOptions}): before a choice it captures nothing (or counts\n * cookieless with `beforeChoice: 'cookieless'`), after a\n * rejection it keeps counting anonymously with no cookies or storage, and after\n * an acceptance it switches to normal cookie-based capture.\n *\n * On `replay`, `consent` and `change` the adapter calls `opt_in_capturing()` or\n * `opt_out_capturing()`. Returns an unsubscribe function.\n */\nexport function connectPostHog(posthog: PostHogLike, api: EasyCookieApi, options: ConnectPostHogOptions = {}): () => void {\n  const category = options.category ?? 'measurement';\n  const granted = () => (options.service ? api.isServiceGranted(options.service) : api.isGranted(category));\n  let last: 'in' | 'out' | null = null;\n\n  // With cookieless_mode, has_opted_out_capturing() is already true while consent\n  // is pending, so prefer the explicit consent status when the client has it.\n  const status = (): 'in' | 'out' | 'pending' => {\n    const explicit = posthog.get_explicit_consent_status?.();\n    if (explicit === 'granted') return 'in';\n    if (explicit === 'denied') return 'out';\n    if (explicit === 'pending') return 'pending';\n    if (posthog.has_opted_in_capturing?.()) return 'in';\n    if (posthog.has_opted_out_capturing?.()) return 'out';\n    return 'pending';\n  };\n\n  const apply = () => {\n    // Until run() has read the stored choice, \"no choice\" is not known yet:\n    // acting now could opt out (and reset) a returning visitor who accepted.\n    if (!api.getConfig()) return;\n    if (!api.get()) {\n      if (options.beforeChoice === 'cookieless') {\n        if (last !== 'out') {\n          if (status() !== 'out') posthog.opt_out_capturing();\n          last = 'out';\n        }\n      } else if (status() === 'in') {\n        // Pending: an opt-in stored by a previous banner must not keep capturing.\n        posthog.clear_opt_in_out_capturing?.();\n      }\n      return;\n    }\n    if (granted()) {\n      if (last !== 'in') {\n        // No `$opt_in` event: the consent itself is recorded by easy-cookie.\n        if (status() !== 'in') posthog.opt_in_capturing({ captureEventName: false });\n        if (options.sessionReplay) posthog.startSessionRecording?.();\n        last = 'in';\n      }\n      const id = options.identify?.();\n      if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);\n    } else if (last !== 'out') {\n      if (options.sessionReplay) posthog.stopSessionRecording?.();\n      if (status() !== 'out') posthog.opt_out_capturing();\n      last = 'out';\n    }\n  };\n\n  const events: EasyCookieEvent[] = ['ready', 'replay', 'consent', 'change'];\n  const unsubs = events.map((ev) => api.on(ev, apply));\n  // The stored choice may have been replayed before we subscribed.\n  apply();\n  return () => unsubs.forEach((u) => u());\n}\n\n/** Events dropped by {@link consentBeforeSend} while consent is missing. */\nexport const NON_ESSENTIAL_EVENTS: readonly string[] = [\n  '$autocapture',\n  '$rageclick',\n  '$dead_click',\n  '$exception',\n  '$web_vitals',\n  '$$heatmap',\n  '$heatmap',\n];\n\nexport interface ConsentBeforeSendOptions {\n  /** Category checked by the default `isGranted`. Default `measurement`. */\n  category?: string;\n  /**\n   * Consent check. Defaults to the runtime when `api` is given, otherwise to the\n   * state published by the head script (`window.__easyCookieHead.granted`).\n   */\n  isGranted?: () => boolean;\n  api?: Pick<EasyCookieApi, 'isGranted'> | null;\n  /** Event names to drop without consent. Default {@link NON_ESSENTIAL_EVENTS}. */\n  drop?: readonly string[];\n}\n\nfunction headGranted(category: string): boolean {\n  const head = (globalThis as { __easyCookieHead?: { granted?: string[]; valid?: boolean } }).__easyCookieHead;\n  return !!head?.valid && !!head.granted?.includes(category);\n}\n\n/**\n * `before_send` filter: without consent, drop autocapture, exceptions, web vitals\n * and heatmap events, so cookieless mode only sends the essentials (pageviews,\n * explicit captures). Pass it as `before_send` or use {@link posthogInitOptions}.\n */\nexport function consentBeforeSend(options: ConsentBeforeSendOptions = {}) {\n  const category = options.category ?? 'measurement';\n  const drop = new Set(options.drop ?? NON_ESSENTIAL_EVENTS);\n  const isGranted =\n    options.isGranted ?? (() => (options.api ? options.api.isGranted(category) : headGranted(category)));\n  return <T extends PostHogEventLike | null>(event: T): T | null => {\n    if (!event) return event;\n    if (drop.has(event.event) && !isGranted()) return null;\n    return event;\n  };\n}\n\nexport interface PostHogInitOptions {\n  cookieless_mode: 'on_reject';\n  persistence: 'localStorage+cookie';\n  person_profiles: 'identified_only';\n  before_send: ReturnType<typeof consentBeforeSend>;\n  [key: string]: unknown;\n}\n\n/**\n * Recommended `posthog.init()` options for easy-cookie:\n * - `cookieless_mode: 'on_reject'` (requires \"Cookieless server hash mode\" enabled\n *   in the PostHog project settings);\n * - `persistence: 'localStorage+cookie'` (only used after opt-in);\n * - `person_profiles: 'identified_only'`;\n * - a consent-aware `before_send` filter.\n *\n * Spread your own options after it: `posthog.init(key, { ...posthogInitOptions(), api_host })`.\n */\nexport function posthogInitOptions(options: ConsentBeforeSendOptions = {}): PostHogInitOptions {\n  return {\n    cookieless_mode: 'on_reject',\n    persistence: 'localStorage+cookie',\n    person_profiles: 'identified_only',\n    before_send: consentBeforeSend(options),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6DO,SAAS,eAAe,SAAsB,KAAoB,UAAiC,CAAC,GAAe;AACxH,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,MAAO,QAAQ,UAAU,IAAI,iBAAiB,QAAQ,OAAO,IAAI,IAAI,UAAU,QAAQ;AACvG,MAAI,OAA4B;AAIhC,QAAM,SAAS,MAAgC;AAC7C,UAAM,WAAW,QAAQ,8BAA8B;AACvD,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,QAAQ,yBAAyB,EAAG,QAAO;AAC/C,QAAI,QAAQ,0BAA0B,EAAG,QAAO;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM;AAGlB,QAAI,CAAC,IAAI,UAAU,EAAG;AACtB,QAAI,CAAC,IAAI,IAAI,GAAG;AACd,UAAI,QAAQ,iBAAiB,cAAc;AACzC,YAAI,SAAS,OAAO;AAClB,cAAI,OAAO,MAAM,MAAO,SAAQ,kBAAkB;AAClD,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,OAAO,MAAM,MAAM;AAE5B,gBAAQ,6BAA6B;AAAA,MACvC;AACA;AAAA,IACF;AACA,QAAI,QAAQ,GAAG;AACb,UAAI,SAAS,MAAM;AAEjB,YAAI,OAAO,MAAM,KAAM,SAAQ,iBAAiB,EAAE,kBAAkB,MAAM,CAAC;AAC3E,YAAI,QAAQ,cAAe,SAAQ,wBAAwB;AAC3D,eAAO;AAAA,MACT;AACA,YAAM,KAAK,QAAQ,WAAW;AAC9B,UAAI,MAAM,QAAQ,YAAY,QAAQ,kBAAkB,MAAM,GAAI,SAAQ,SAAS,EAAE;AAAA,IACvF,WAAW,SAAS,OAAO;AACzB,UAAI,QAAQ,cAAe,SAAQ,uBAAuB;AAC1D,UAAI,OAAO,MAAM,MAAO,SAAQ,kBAAkB;AAClD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAA4B,CAAC,SAAS,UAAU,WAAW,QAAQ;AACzE,QAAM,SAAS,OAAO,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC;AAEnD,QAAM;AACN,SAAO,MAAM,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AACxC;AAGO,IAAM,uBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeA,SAAS,YAAY,UAA2B;AAC9C,QAAM,OAAQ,WAA8E;AAC5F,SAAO,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ;AAC3D;AAOO,SAAS,kBAAkB,UAAoC,CAAC,GAAG;AACxE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,oBAAoB;AACzD,QAAM,YACJ,QAAQ,cAAc,MAAO,QAAQ,MAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,YAAY,QAAQ;AACnG,SAAO,CAAoC,UAAuB;AAChE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,UAAU,EAAG,QAAO;AAClD,WAAO;AAAA,EACT;AACF;AAoBO,SAAS,mBAAmB,UAAoC,CAAC,GAAuB;AAC7F,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa,kBAAkB,OAAO;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { EasyCookieApi, EasyCookieEvent } from '@easy-cookie/core/shared';\n\n/**\n * The few posthog-js methods the adapter uses. Typed loosely on purpose, so\n * `posthog-js` stays an optional peer dependency and any compatible client works.\n */\nexport interface PostHogLike {\n  opt_in_capturing(options?: { captureEventName?: string | null | false; [key: string]: unknown }): void;\n  opt_out_capturing(): void;\n  has_opted_in_capturing?(): boolean;\n  has_opted_out_capturing?(): boolean;\n  clear_opt_in_out_capturing?(): void;\n  /** posthog-js ≥ 1.2xx: 'granted' | 'denied' | 'pending' (reliable with cookieless_mode). */\n  get_explicit_consent_status?(): string;\n  startSessionRecording?(...args: unknown[]): void;\n  stopSessionRecording?(): void;\n  // posthog-js internals, used only to restart session replay after a cookieless → opt-in switch.\n  _onRemoteConfig?(config: Record<string, unknown>): void;\n  sessionRecording?: { onRemoteConfig?(config: Record<string, unknown>): void } | null;\n  config?: { token?: string };\n  requestRouter?: { endpointFor?(target: string, path: string): string };\n  identify?(distinctId?: string, ...rest: unknown[]): void;\n  get_distinct_id?(): string;\n}\n\n/** Minimal shape of a PostHog event passed to `before_send`. */\nexport interface PostHogEventLike {\n  event: string;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- matches posthog-js `Properties`\n  properties?: Record<string, any>;\n}\n\nexport interface ConnectPostHogOptions {\n  /** Category that allows PostHog cookies/profiles. Default `measurement`. */\n  category?: string;\n  /** Service id: when set, the service's own consent decides instead of the category. */\n  service?: string;\n  /**\n   * Return the logged-in user id (or undefined). Called after opt-in, so the\n   * identified person profile is created only with consent.\n   */\n  identify?: () => string | undefined | null;\n  /**\n   * Before the visitor's first choice:\n   * - `'pending'` (default): capture nothing. A stale opt-in left in storage by an\n   *   earlier setup is cleared, so nothing is captured with cookies.\n   * - `'cookieless'`: count visits without cookies (same as after a rejection).\n   *   Only if your privacy policy covers cookieless measurement without consent.\n   */\n  beforeChoice?: 'pending' | 'cookieless';\n  /** Start session recording on opt-in and stop it on opt-out. Default false. */\n  sessionReplay?: boolean;\n}\n\n/**\n * Keep PostHog's capture state in sync with the visitor's consent, without reloads.\n *\n * PostHog must be initialised by the host with `cookieless_mode: 'on_reject'`\n * (see {@link posthogInitOptions}): before a choice it captures nothing (or counts\n * cookieless with `beforeChoice: 'cookieless'`), after a\n * rejection it keeps counting anonymously with no cookies or storage, and after\n * an acceptance it switches to normal cookie-based capture.\n *\n * On `replay`, `consent` and `change` the adapter calls `opt_in_capturing()` or\n * `opt_out_capturing()`. Returns an unsubscribe function.\n */\nexport function connectPostHog(posthog: PostHogLike, api: EasyCookieApi, options: ConnectPostHogOptions = {}): () => void {\n  const category = options.category ?? 'measurement';\n  const granted = () => (options.service ? api.isServiceGranted(options.service) : api.isGranted(category));\n  let last: 'in' | 'out' | null = null;\n\n  // Session replay after a cookieless → opt-in switch. posthog-js resets the instance\n  // and creates a new recorder that waits for the remote config, which it only\n  // fetches once per page load (and which the cookieless instance never stored).\n  // Keep the config posthog-js receives, or fetch it again, and hand it to the new\n  // recorder. Every call is guarded: with a different posthog-js the replay simply\n  // starts on the next page load, as before.\n  let remoteConfig: Record<string, unknown> | undefined;\n  if (options.sessionReplay && typeof posthog._onRemoteConfig === 'function') {\n    const original = posthog._onRemoteConfig.bind(posthog);\n    posthog._onRemoteConfig = (config) => {\n      remoteConfig = config;\n      original(config);\n    };\n  }\n  const fetchRemoteConfig = async (): Promise<Record<string, unknown> | undefined> => {\n    try {\n      const token = posthog.config?.token;\n      const url = token && posthog.requestRouter?.endpointFor?.('assets', `/array/${token}/config`);\n      if (!url) return undefined;\n      const res = await fetch(url);\n      return res.ok ? ((await res.json()) as Record<string, unknown>) : undefined;\n    } catch {\n      return undefined;\n    }\n  };\n  const restartReplay = async () => {\n    try {\n      const config = remoteConfig ?? (await fetchRemoteConfig());\n      if (config && 'sessionRecording' in config) posthog.sessionRecording?.onRemoteConfig?.(config);\n      posthog.startSessionRecording?.();\n    } catch {\n      /* replay starts on the next page load */\n    }\n  };\n\n  // With cookieless_mode, has_opted_out_capturing() is already true while consent\n  // is pending, so prefer the explicit consent status when the client has it.\n  const status = (): 'in' | 'out' | 'pending' => {\n    const explicit = posthog.get_explicit_consent_status?.();\n    if (explicit === 'granted') return 'in';\n    if (explicit === 'denied') return 'out';\n    if (explicit === 'pending') return 'pending';\n    if (posthog.has_opted_in_capturing?.()) return 'in';\n    if (posthog.has_opted_out_capturing?.()) return 'out';\n    return 'pending';\n  };\n\n  const apply = () => {\n    // Until run() has read the stored choice, \"no choice\" is not known yet:\n    // acting now could opt out (and reset) a returning visitor who accepted.\n    if (!api.getConfig()) return;\n    if (!api.get()) {\n      if (options.beforeChoice === 'cookieless') {\n        if (last !== 'out') {\n          // Also when already out: on a full page load posthog-js sends the first\n          // cookieless $pageview only from opt_out_capturing() (no reset when not opted in).\n          if (status() !== 'out' || last === null) posthog.opt_out_capturing();\n          last = 'out';\n        }\n      } else if (status() === 'in') {\n        // Pending: an opt-in stored by a previous banner must not keep capturing.\n        posthog.clear_opt_in_out_capturing?.();\n      }\n      return;\n    }\n    if (granted()) {\n      if (last !== 'in') {\n        // No `$opt_in` event: the consent itself is recorded by easy-cookie.\n        const fromCookieless = status() === 'out';\n        if (status() !== 'in') posthog.opt_in_capturing({ captureEventName: false });\n        if (options.sessionReplay) {\n          if (fromCookieless) void restartReplay();\n          else posthog.startSessionRecording?.();\n        }\n        last = 'in';\n      }\n      const id = options.identify?.();\n      if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);\n    } else if (last !== 'out') {\n      if (options.sessionReplay) posthog.stopSessionRecording?.();\n      if (status() !== 'out' || last === null) posthog.opt_out_capturing();\n      last = 'out';\n    }\n  };\n\n  const events: EasyCookieEvent[] = ['ready', 'replay', 'consent', 'change'];\n  const unsubs = events.map((ev) => api.on(ev, apply));\n  // The stored choice may have been replayed before we subscribed.\n  apply();\n  return () => unsubs.forEach((u) => u());\n}\n\n/** Events dropped by {@link consentBeforeSend} while consent is missing. */\nexport const NON_ESSENTIAL_EVENTS: readonly string[] = [\n  '$autocapture',\n  '$rageclick',\n  '$dead_click',\n  '$exception',\n  '$web_vitals',\n  '$$heatmap',\n  '$heatmap',\n];\n\nexport interface ConsentBeforeSendOptions {\n  /** Category checked by the default `isGranted`. Default `measurement`. */\n  category?: string;\n  /**\n   * Consent check. Defaults to the runtime when `api` is given, otherwise to the\n   * state published by the head script (`window.__easyCookieHead.granted`).\n   */\n  isGranted?: () => boolean;\n  api?: Pick<EasyCookieApi, 'isGranted'> | null;\n  /** Event names to drop without consent. Default {@link NON_ESSENTIAL_EVENTS}. */\n  drop?: readonly string[];\n}\n\nfunction headGranted(category: string): boolean {\n  const head = (globalThis as { __easyCookieHead?: { granted?: string[]; valid?: boolean } }).__easyCookieHead;\n  return !!head?.valid && !!head.granted?.includes(category);\n}\n\n/**\n * `before_send` filter: without consent, drop autocapture, exceptions, web vitals\n * and heatmap events, so cookieless mode only sends the essentials (pageviews,\n * explicit captures). Pass it as `before_send` or use {@link posthogInitOptions}.\n */\nexport function consentBeforeSend(options: ConsentBeforeSendOptions = {}) {\n  const category = options.category ?? 'measurement';\n  const drop = new Set(options.drop ?? NON_ESSENTIAL_EVENTS);\n  const isGranted =\n    options.isGranted ?? (() => (options.api ? options.api.isGranted(category) : headGranted(category)));\n  return <T extends PostHogEventLike | null>(event: T): T | null => {\n    if (!event) return event;\n    if (drop.has(event.event) && !isGranted()) return null;\n    return event;\n  };\n}\n\nexport interface PostHogInitOptions {\n  cookieless_mode: 'on_reject';\n  persistence: 'localStorage+cookie';\n  person_profiles: 'identified_only';\n  before_send: ReturnType<typeof consentBeforeSend>;\n  [key: string]: unknown;\n}\n\n/**\n * Recommended `posthog.init()` options for easy-cookie:\n * - `cookieless_mode: 'on_reject'` (requires \"Cookieless server hash mode\" enabled\n *   in the PostHog project settings);\n * - `persistence: 'localStorage+cookie'` (only used after opt-in);\n * - `person_profiles: 'identified_only'`;\n * - a consent-aware `before_send` filter.\n *\n * Spread your own options after it: `posthog.init(key, { ...posthogInitOptions(), api_host })`.\n */\nexport function posthogInitOptions(options: ConsentBeforeSendOptions = {}): PostHogInitOptions {\n  return {\n    cookieless_mode: 'on_reject',\n    persistence: 'localStorage+cookie',\n    person_profiles: 'identified_only',\n    before_send: consentBeforeSend(options),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkEO,SAAS,eAAe,SAAsB,KAAoB,UAAiC,CAAC,GAAe;AACxH,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,MAAO,QAAQ,UAAU,IAAI,iBAAiB,QAAQ,OAAO,IAAI,IAAI,UAAU,QAAQ;AACvG,MAAI,OAA4B;AAQhC,MAAI;AACJ,MAAI,QAAQ,iBAAiB,OAAO,QAAQ,oBAAoB,YAAY;AAC1E,UAAM,WAAW,QAAQ,gBAAgB,KAAK,OAAO;AACrD,YAAQ,kBAAkB,CAAC,WAAW;AACpC,qBAAe;AACf,eAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,oBAAoB,YAA0D;AAClF,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ;AAC9B,YAAM,MAAM,SAAS,QAAQ,eAAe,cAAc,UAAU,UAAU,KAAK,SAAS;AAC5F,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,MAAM,MAAM,MAAM,GAAG;AAC3B,aAAO,IAAI,KAAO,MAAM,IAAI,KAAK,IAAiC;AAAA,IACpE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,gBAAgB,YAAY;AAChC,QAAI;AACF,YAAM,SAAS,gBAAiB,MAAM,kBAAkB;AACxD,UAAI,UAAU,sBAAsB,OAAQ,SAAQ,kBAAkB,iBAAiB,MAAM;AAC7F,cAAQ,wBAAwB;AAAA,IAClC,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,QAAM,SAAS,MAAgC;AAC7C,UAAM,WAAW,QAAQ,8BAA8B;AACvD,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,QAAQ,yBAAyB,EAAG,QAAO;AAC/C,QAAI,QAAQ,0BAA0B,EAAG,QAAO;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM;AAGlB,QAAI,CAAC,IAAI,UAAU,EAAG;AACtB,QAAI,CAAC,IAAI,IAAI,GAAG;AACd,UAAI,QAAQ,iBAAiB,cAAc;AACzC,YAAI,SAAS,OAAO;AAGlB,cAAI,OAAO,MAAM,SAAS,SAAS,KAAM,SAAQ,kBAAkB;AACnE,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,OAAO,MAAM,MAAM;AAE5B,gBAAQ,6BAA6B;AAAA,MACvC;AACA;AAAA,IACF;AACA,QAAI,QAAQ,GAAG;AACb,UAAI,SAAS,MAAM;AAEjB,cAAM,iBAAiB,OAAO,MAAM;AACpC,YAAI,OAAO,MAAM,KAAM,SAAQ,iBAAiB,EAAE,kBAAkB,MAAM,CAAC;AAC3E,YAAI,QAAQ,eAAe;AACzB,cAAI,eAAgB,MAAK,cAAc;AAAA,cAClC,SAAQ,wBAAwB;AAAA,QACvC;AACA,eAAO;AAAA,MACT;AACA,YAAM,KAAK,QAAQ,WAAW;AAC9B,UAAI,MAAM,QAAQ,YAAY,QAAQ,kBAAkB,MAAM,GAAI,SAAQ,SAAS,EAAE;AAAA,IACvF,WAAW,SAAS,OAAO;AACzB,UAAI,QAAQ,cAAe,SAAQ,uBAAuB;AAC1D,UAAI,OAAO,MAAM,SAAS,SAAS,KAAM,SAAQ,kBAAkB;AACnE,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAA4B,CAAC,SAAS,UAAU,WAAW,QAAQ;AACzE,QAAM,SAAS,OAAO,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC;AAEnD,QAAM;AACN,SAAO,MAAM,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AACxC;AAGO,IAAM,uBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeA,SAAS,YAAY,UAA2B;AAC9C,QAAM,OAAQ,WAA8E;AAC5F,SAAO,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ;AAC3D;AAOO,SAAS,kBAAkB,UAAoC,CAAC,GAAG;AACxE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,oBAAoB;AACzD,QAAM,YACJ,QAAQ,cAAc,MAAO,QAAQ,MAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,YAAY,QAAQ;AACnG,SAAO,CAAoC,UAAuB;AAChE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,UAAU,EAAG,QAAO;AAClD,WAAO;AAAA,EACT;AACF;AAoBO,SAAS,mBAAmB,UAAoC,CAAC,GAAuB;AAC7F,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa,kBAAkB,OAAO;AAAA,EACxC;AACF;","names":[]}

package/dist/index.d.cts

@@ -17,6 +17,16 @@ interface PostHogLike {
     get_explicit_consent_status?(): string;
     startSessionRecording?(...args: unknown[]): void;
     stopSessionRecording?(): void;
+    _onRemoteConfig?(config: Record<string, unknown>): void;
+    sessionRecording?: {
+        onRemoteConfig?(config: Record<string, unknown>): void;
+    } | null;
+    config?: {
+        token?: string;
+    };
+    requestRouter?: {
+        endpointFor?(target: string, path: string): string;
+    };
     identify?(distinctId?: string, ...rest: unknown[]): void;
     get_distinct_id?(): string;
 }

package/dist/index.d.ts

@@ -17,6 +17,16 @@ interface PostHogLike {
     get_explicit_consent_status?(): string;
     startSessionRecording?(...args: unknown[]): void;
     stopSessionRecording?(): void;
+    _onRemoteConfig?(config: Record<string, unknown>): void;
+    sessionRecording?: {
+        onRemoteConfig?(config: Record<string, unknown>): void;
+    } | null;
+    config?: {
+        token?: string;
+    };
+    requestRouter?: {
+        endpointFor?(target: string, path: string): string;
+    };
     identify?(distinctId?: string, ...rest: unknown[]): void;
     get_distinct_id?(): string;
 }

package/dist/index.js

@@ -3,6 +3,33 @@ function connectPostHog(posthog, api, options = {}) {
   const category = options.category ?? "measurement";
   const granted = () => options.service ? api.isServiceGranted(options.service) : api.isGranted(category);
   let last = null;
+  let remoteConfig;
+  if (options.sessionReplay && typeof posthog._onRemoteConfig === "function") {
+    const original = posthog._onRemoteConfig.bind(posthog);
+    posthog._onRemoteConfig = (config) => {
+      remoteConfig = config;
+      original(config);
+    };
+  }
+  const fetchRemoteConfig = async () => {
+    try {
+      const token = posthog.config?.token;
+      const url = token && posthog.requestRouter?.endpointFor?.("assets", `/array/${token}/config`);
+      if (!url) return void 0;
+      const res = await fetch(url);
+      return res.ok ? await res.json() : void 0;
+    } catch {
+      return void 0;
+    }
+  };
+  const restartReplay = async () => {
+    try {
+      const config = remoteConfig ?? await fetchRemoteConfig();
+      if (config && "sessionRecording" in config) posthog.sessionRecording?.onRemoteConfig?.(config);
+      posthog.startSessionRecording?.();
+    } catch {
+    }
+  };
   const status = () => {
     const explicit = posthog.get_explicit_consent_status?.();
     if (explicit === "granted") return "in";
@@ -17,7 +44,7 @@ function connectPostHog(posthog, api, options = {}) {
     if (!api.get()) {
       if (options.beforeChoice === "cookieless") {
         if (last !== "out") {
-          if (status() !== "out") posthog.opt_out_capturing();
+          if (status() !== "out" || last === null) posthog.opt_out_capturing();
           last = "out";
         }
       } else if (status() === "in") {
@@ -27,15 +54,19 @@ function connectPostHog(posthog, api, options = {}) {
     }
     if (granted()) {
       if (last !== "in") {
+        const fromCookieless = status() === "out";
         if (status() !== "in") posthog.opt_in_capturing({ captureEventName: false });
-        if (options.sessionReplay) posthog.startSessionRecording?.();
+        if (options.sessionReplay) {
+          if (fromCookieless) void restartReplay();
+          else posthog.startSessionRecording?.();
+        }
         last = "in";
       }
       const id = options.identify?.();
       if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);
     } else if (last !== "out") {
       if (options.sessionReplay) posthog.stopSessionRecording?.();
-      if (status() !== "out") posthog.opt_out_capturing();
+      if (status() !== "out" || last === null) posthog.opt_out_capturing();
       last = "out";
     }
   };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { EasyCookieApi, EasyCookieEvent } from '@easy-cookie/core/shared';\n\n/**\n * The few posthog-js methods the adapter uses. Typed loosely on purpose, so\n * `posthog-js` stays an optional peer dependency and any compatible client works.\n */\nexport interface PostHogLike {\n  opt_in_capturing(options?: { captureEventName?: string | null | false; [key: string]: unknown }): void;\n  opt_out_capturing(): void;\n  has_opted_in_capturing?(): boolean;\n  has_opted_out_capturing?(): boolean;\n  clear_opt_in_out_capturing?(): void;\n  /** posthog-js ≥ 1.2xx: 'granted' | 'denied' | 'pending' (reliable with cookieless_mode). */\n  get_explicit_consent_status?(): string;\n  startSessionRecording?(...args: unknown[]): void;\n  stopSessionRecording?(): void;\n  identify?(distinctId?: string, ...rest: unknown[]): void;\n  get_distinct_id?(): string;\n}\n\n/** Minimal shape of a PostHog event passed to `before_send`. */\nexport interface PostHogEventLike {\n  event: string;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- matches posthog-js `Properties`\n  properties?: Record<string, any>;\n}\n\nexport interface ConnectPostHogOptions {\n  /** Category that allows PostHog cookies/profiles. Default `measurement`. */\n  category?: string;\n  /** Service id: when set, the service's own consent decides instead of the category. */\n  service?: string;\n  /**\n   * Return the logged-in user id (or undefined). Called after opt-in, so the\n   * identified person profile is created only with consent.\n   */\n  identify?: () => string | undefined | null;\n  /**\n   * Before the visitor's first choice:\n   * - `'pending'` (default): capture nothing. A stale opt-in left in storage by an\n   *   earlier setup is cleared, so nothing is captured with cookies.\n   * - `'cookieless'`: count visits without cookies (same as after a rejection).\n   *   Only if your privacy policy covers cookieless measurement without consent.\n   */\n  beforeChoice?: 'pending' | 'cookieless';\n  /** Start session recording on opt-in and stop it on opt-out. Default false. */\n  sessionReplay?: boolean;\n}\n\n/**\n * Keep PostHog's capture state in sync with the visitor's consent, without reloads.\n *\n * PostHog must be initialised by the host with `cookieless_mode: 'on_reject'`\n * (see {@link posthogInitOptions}): before a choice it captures nothing (or counts\n * cookieless with `beforeChoice: 'cookieless'`), after a\n * rejection it keeps counting anonymously with no cookies or storage, and after\n * an acceptance it switches to normal cookie-based capture.\n *\n * On `replay`, `consent` and `change` the adapter calls `opt_in_capturing()` or\n * `opt_out_capturing()`. Returns an unsubscribe function.\n */\nexport function connectPostHog(posthog: PostHogLike, api: EasyCookieApi, options: ConnectPostHogOptions = {}): () => void {\n  const category = options.category ?? 'measurement';\n  const granted = () => (options.service ? api.isServiceGranted(options.service) : api.isGranted(category));\n  let last: 'in' | 'out' | null = null;\n\n  // With cookieless_mode, has_opted_out_capturing() is already true while consent\n  // is pending, so prefer the explicit consent status when the client has it.\n  const status = (): 'in' | 'out' | 'pending' => {\n    const explicit = posthog.get_explicit_consent_status?.();\n    if (explicit === 'granted') return 'in';\n    if (explicit === 'denied') return 'out';\n    if (explicit === 'pending') return 'pending';\n    if (posthog.has_opted_in_capturing?.()) return 'in';\n    if (posthog.has_opted_out_capturing?.()) return 'out';\n    return 'pending';\n  };\n\n  const apply = () => {\n    // Until run() has read the stored choice, \"no choice\" is not known yet:\n    // acting now could opt out (and reset) a returning visitor who accepted.\n    if (!api.getConfig()) return;\n    if (!api.get()) {\n      if (options.beforeChoice === 'cookieless') {\n        if (last !== 'out') {\n          if (status() !== 'out') posthog.opt_out_capturing();\n          last = 'out';\n        }\n      } else if (status() === 'in') {\n        // Pending: an opt-in stored by a previous banner must not keep capturing.\n        posthog.clear_opt_in_out_capturing?.();\n      }\n      return;\n    }\n    if (granted()) {\n      if (last !== 'in') {\n        // No `$opt_in` event: the consent itself is recorded by easy-cookie.\n        if (status() !== 'in') posthog.opt_in_capturing({ captureEventName: false });\n        if (options.sessionReplay) posthog.startSessionRecording?.();\n        last = 'in';\n      }\n      const id = options.identify?.();\n      if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);\n    } else if (last !== 'out') {\n      if (options.sessionReplay) posthog.stopSessionRecording?.();\n      if (status() !== 'out') posthog.opt_out_capturing();\n      last = 'out';\n    }\n  };\n\n  const events: EasyCookieEvent[] = ['ready', 'replay', 'consent', 'change'];\n  const unsubs = events.map((ev) => api.on(ev, apply));\n  // The stored choice may have been replayed before we subscribed.\n  apply();\n  return () => unsubs.forEach((u) => u());\n}\n\n/** Events dropped by {@link consentBeforeSend} while consent is missing. */\nexport const NON_ESSENTIAL_EVENTS: readonly string[] = [\n  '$autocapture',\n  '$rageclick',\n  '$dead_click',\n  '$exception',\n  '$web_vitals',\n  '$$heatmap',\n  '$heatmap',\n];\n\nexport interface ConsentBeforeSendOptions {\n  /** Category checked by the default `isGranted`. Default `measurement`. */\n  category?: string;\n  /**\n   * Consent check. Defaults to the runtime when `api` is given, otherwise to the\n   * state published by the head script (`window.__easyCookieHead.granted`).\n   */\n  isGranted?: () => boolean;\n  api?: Pick<EasyCookieApi, 'isGranted'> | null;\n  /** Event names to drop without consent. Default {@link NON_ESSENTIAL_EVENTS}. */\n  drop?: readonly string[];\n}\n\nfunction headGranted(category: string): boolean {\n  const head = (globalThis as { __easyCookieHead?: { granted?: string[]; valid?: boolean } }).__easyCookieHead;\n  return !!head?.valid && !!head.granted?.includes(category);\n}\n\n/**\n * `before_send` filter: without consent, drop autocapture, exceptions, web vitals\n * and heatmap events, so cookieless mode only sends the essentials (pageviews,\n * explicit captures). Pass it as `before_send` or use {@link posthogInitOptions}.\n */\nexport function consentBeforeSend(options: ConsentBeforeSendOptions = {}) {\n  const category = options.category ?? 'measurement';\n  const drop = new Set(options.drop ?? NON_ESSENTIAL_EVENTS);\n  const isGranted =\n    options.isGranted ?? (() => (options.api ? options.api.isGranted(category) : headGranted(category)));\n  return <T extends PostHogEventLike | null>(event: T): T | null => {\n    if (!event) return event;\n    if (drop.has(event.event) && !isGranted()) return null;\n    return event;\n  };\n}\n\nexport interface PostHogInitOptions {\n  cookieless_mode: 'on_reject';\n  persistence: 'localStorage+cookie';\n  person_profiles: 'identified_only';\n  before_send: ReturnType<typeof consentBeforeSend>;\n  [key: string]: unknown;\n}\n\n/**\n * Recommended `posthog.init()` options for easy-cookie:\n * - `cookieless_mode: 'on_reject'` (requires \"Cookieless server hash mode\" enabled\n *   in the PostHog project settings);\n * - `persistence: 'localStorage+cookie'` (only used after opt-in);\n * - `person_profiles: 'identified_only'`;\n * - a consent-aware `before_send` filter.\n *\n * Spread your own options after it: `posthog.init(key, { ...posthogInitOptions(), api_host })`.\n */\nexport function posthogInitOptions(options: ConsentBeforeSendOptions = {}): PostHogInitOptions {\n  return {\n    cookieless_mode: 'on_reject',\n    persistence: 'localStorage+cookie',\n    person_profiles: 'identified_only',\n    before_send: consentBeforeSend(options),\n  };\n}\n"],"mappings":";AA6DO,SAAS,eAAe,SAAsB,KAAoB,UAAiC,CAAC,GAAe;AACxH,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,MAAO,QAAQ,UAAU,IAAI,iBAAiB,QAAQ,OAAO,IAAI,IAAI,UAAU,QAAQ;AACvG,MAAI,OAA4B;AAIhC,QAAM,SAAS,MAAgC;AAC7C,UAAM,WAAW,QAAQ,8BAA8B;AACvD,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,QAAQ,yBAAyB,EAAG,QAAO;AAC/C,QAAI,QAAQ,0BAA0B,EAAG,QAAO;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM;AAGlB,QAAI,CAAC,IAAI,UAAU,EAAG;AACtB,QAAI,CAAC,IAAI,IAAI,GAAG;AACd,UAAI,QAAQ,iBAAiB,cAAc;AACzC,YAAI,SAAS,OAAO;AAClB,cAAI,OAAO,MAAM,MAAO,SAAQ,kBAAkB;AAClD,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,OAAO,MAAM,MAAM;AAE5B,gBAAQ,6BAA6B;AAAA,MACvC;AACA;AAAA,IACF;AACA,QAAI,QAAQ,GAAG;AACb,UAAI,SAAS,MAAM;AAEjB,YAAI,OAAO,MAAM,KAAM,SAAQ,iBAAiB,EAAE,kBAAkB,MAAM,CAAC;AAC3E,YAAI,QAAQ,cAAe,SAAQ,wBAAwB;AAC3D,eAAO;AAAA,MACT;AACA,YAAM,KAAK,QAAQ,WAAW;AAC9B,UAAI,MAAM,QAAQ,YAAY,QAAQ,kBAAkB,MAAM,GAAI,SAAQ,SAAS,EAAE;AAAA,IACvF,WAAW,SAAS,OAAO;AACzB,UAAI,QAAQ,cAAe,SAAQ,uBAAuB;AAC1D,UAAI,OAAO,MAAM,MAAO,SAAQ,kBAAkB;AAClD,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAA4B,CAAC,SAAS,UAAU,WAAW,QAAQ;AACzE,QAAM,SAAS,OAAO,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC;AAEnD,QAAM;AACN,SAAO,MAAM,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AACxC;AAGO,IAAM,uBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeA,SAAS,YAAY,UAA2B;AAC9C,QAAM,OAAQ,WAA8E;AAC5F,SAAO,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ;AAC3D;AAOO,SAAS,kBAAkB,UAAoC,CAAC,GAAG;AACxE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,oBAAoB;AACzD,QAAM,YACJ,QAAQ,cAAc,MAAO,QAAQ,MAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,YAAY,QAAQ;AACnG,SAAO,CAAoC,UAAuB;AAChE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,UAAU,EAAG,QAAO;AAClD,WAAO;AAAA,EACT;AACF;AAoBO,SAAS,mBAAmB,UAAoC,CAAC,GAAuB;AAC7F,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa,kBAAkB,OAAO;AAAA,EACxC;AACF;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { EasyCookieApi, EasyCookieEvent } from '@easy-cookie/core/shared';\n\n/**\n * The few posthog-js methods the adapter uses. Typed loosely on purpose, so\n * `posthog-js` stays an optional peer dependency and any compatible client works.\n */\nexport interface PostHogLike {\n  opt_in_capturing(options?: { captureEventName?: string | null | false; [key: string]: unknown }): void;\n  opt_out_capturing(): void;\n  has_opted_in_capturing?(): boolean;\n  has_opted_out_capturing?(): boolean;\n  clear_opt_in_out_capturing?(): void;\n  /** posthog-js ≥ 1.2xx: 'granted' | 'denied' | 'pending' (reliable with cookieless_mode). */\n  get_explicit_consent_status?(): string;\n  startSessionRecording?(...args: unknown[]): void;\n  stopSessionRecording?(): void;\n  // posthog-js internals, used only to restart session replay after a cookieless → opt-in switch.\n  _onRemoteConfig?(config: Record<string, unknown>): void;\n  sessionRecording?: { onRemoteConfig?(config: Record<string, unknown>): void } | null;\n  config?: { token?: string };\n  requestRouter?: { endpointFor?(target: string, path: string): string };\n  identify?(distinctId?: string, ...rest: unknown[]): void;\n  get_distinct_id?(): string;\n}\n\n/** Minimal shape of a PostHog event passed to `before_send`. */\nexport interface PostHogEventLike {\n  event: string;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- matches posthog-js `Properties`\n  properties?: Record<string, any>;\n}\n\nexport interface ConnectPostHogOptions {\n  /** Category that allows PostHog cookies/profiles. Default `measurement`. */\n  category?: string;\n  /** Service id: when set, the service's own consent decides instead of the category. */\n  service?: string;\n  /**\n   * Return the logged-in user id (or undefined). Called after opt-in, so the\n   * identified person profile is created only with consent.\n   */\n  identify?: () => string | undefined | null;\n  /**\n   * Before the visitor's first choice:\n   * - `'pending'` (default): capture nothing. A stale opt-in left in storage by an\n   *   earlier setup is cleared, so nothing is captured with cookies.\n   * - `'cookieless'`: count visits without cookies (same as after a rejection).\n   *   Only if your privacy policy covers cookieless measurement without consent.\n   */\n  beforeChoice?: 'pending' | 'cookieless';\n  /** Start session recording on opt-in and stop it on opt-out. Default false. */\n  sessionReplay?: boolean;\n}\n\n/**\n * Keep PostHog's capture state in sync with the visitor's consent, without reloads.\n *\n * PostHog must be initialised by the host with `cookieless_mode: 'on_reject'`\n * (see {@link posthogInitOptions}): before a choice it captures nothing (or counts\n * cookieless with `beforeChoice: 'cookieless'`), after a\n * rejection it keeps counting anonymously with no cookies or storage, and after\n * an acceptance it switches to normal cookie-based capture.\n *\n * On `replay`, `consent` and `change` the adapter calls `opt_in_capturing()` or\n * `opt_out_capturing()`. Returns an unsubscribe function.\n */\nexport function connectPostHog(posthog: PostHogLike, api: EasyCookieApi, options: ConnectPostHogOptions = {}): () => void {\n  const category = options.category ?? 'measurement';\n  const granted = () => (options.service ? api.isServiceGranted(options.service) : api.isGranted(category));\n  let last: 'in' | 'out' | null = null;\n\n  // Session replay after a cookieless → opt-in switch. posthog-js resets the instance\n  // and creates a new recorder that waits for the remote config, which it only\n  // fetches once per page load (and which the cookieless instance never stored).\n  // Keep the config posthog-js receives, or fetch it again, and hand it to the new\n  // recorder. Every call is guarded: with a different posthog-js the replay simply\n  // starts on the next page load, as before.\n  let remoteConfig: Record<string, unknown> | undefined;\n  if (options.sessionReplay && typeof posthog._onRemoteConfig === 'function') {\n    const original = posthog._onRemoteConfig.bind(posthog);\n    posthog._onRemoteConfig = (config) => {\n      remoteConfig = config;\n      original(config);\n    };\n  }\n  const fetchRemoteConfig = async (): Promise<Record<string, unknown> | undefined> => {\n    try {\n      const token = posthog.config?.token;\n      const url = token && posthog.requestRouter?.endpointFor?.('assets', `/array/${token}/config`);\n      if (!url) return undefined;\n      const res = await fetch(url);\n      return res.ok ? ((await res.json()) as Record<string, unknown>) : undefined;\n    } catch {\n      return undefined;\n    }\n  };\n  const restartReplay = async () => {\n    try {\n      const config = remoteConfig ?? (await fetchRemoteConfig());\n      if (config && 'sessionRecording' in config) posthog.sessionRecording?.onRemoteConfig?.(config);\n      posthog.startSessionRecording?.();\n    } catch {\n      /* replay starts on the next page load */\n    }\n  };\n\n  // With cookieless_mode, has_opted_out_capturing() is already true while consent\n  // is pending, so prefer the explicit consent status when the client has it.\n  const status = (): 'in' | 'out' | 'pending' => {\n    const explicit = posthog.get_explicit_consent_status?.();\n    if (explicit === 'granted') return 'in';\n    if (explicit === 'denied') return 'out';\n    if (explicit === 'pending') return 'pending';\n    if (posthog.has_opted_in_capturing?.()) return 'in';\n    if (posthog.has_opted_out_capturing?.()) return 'out';\n    return 'pending';\n  };\n\n  const apply = () => {\n    // Until run() has read the stored choice, \"no choice\" is not known yet:\n    // acting now could opt out (and reset) a returning visitor who accepted.\n    if (!api.getConfig()) return;\n    if (!api.get()) {\n      if (options.beforeChoice === 'cookieless') {\n        if (last !== 'out') {\n          // Also when already out: on a full page load posthog-js sends the first\n          // cookieless $pageview only from opt_out_capturing() (no reset when not opted in).\n          if (status() !== 'out' || last === null) posthog.opt_out_capturing();\n          last = 'out';\n        }\n      } else if (status() === 'in') {\n        // Pending: an opt-in stored by a previous banner must not keep capturing.\n        posthog.clear_opt_in_out_capturing?.();\n      }\n      return;\n    }\n    if (granted()) {\n      if (last !== 'in') {\n        // No `$opt_in` event: the consent itself is recorded by easy-cookie.\n        const fromCookieless = status() === 'out';\n        if (status() !== 'in') posthog.opt_in_capturing({ captureEventName: false });\n        if (options.sessionReplay) {\n          if (fromCookieless) void restartReplay();\n          else posthog.startSessionRecording?.();\n        }\n        last = 'in';\n      }\n      const id = options.identify?.();\n      if (id && posthog.identify && posthog.get_distinct_id?.() !== id) posthog.identify(id);\n    } else if (last !== 'out') {\n      if (options.sessionReplay) posthog.stopSessionRecording?.();\n      if (status() !== 'out' || last === null) posthog.opt_out_capturing();\n      last = 'out';\n    }\n  };\n\n  const events: EasyCookieEvent[] = ['ready', 'replay', 'consent', 'change'];\n  const unsubs = events.map((ev) => api.on(ev, apply));\n  // The stored choice may have been replayed before we subscribed.\n  apply();\n  return () => unsubs.forEach((u) => u());\n}\n\n/** Events dropped by {@link consentBeforeSend} while consent is missing. */\nexport const NON_ESSENTIAL_EVENTS: readonly string[] = [\n  '$autocapture',\n  '$rageclick',\n  '$dead_click',\n  '$exception',\n  '$web_vitals',\n  '$$heatmap',\n  '$heatmap',\n];\n\nexport interface ConsentBeforeSendOptions {\n  /** Category checked by the default `isGranted`. Default `measurement`. */\n  category?: string;\n  /**\n   * Consent check. Defaults to the runtime when `api` is given, otherwise to the\n   * state published by the head script (`window.__easyCookieHead.granted`).\n   */\n  isGranted?: () => boolean;\n  api?: Pick<EasyCookieApi, 'isGranted'> | null;\n  /** Event names to drop without consent. Default {@link NON_ESSENTIAL_EVENTS}. */\n  drop?: readonly string[];\n}\n\nfunction headGranted(category: string): boolean {\n  const head = (globalThis as { __easyCookieHead?: { granted?: string[]; valid?: boolean } }).__easyCookieHead;\n  return !!head?.valid && !!head.granted?.includes(category);\n}\n\n/**\n * `before_send` filter: without consent, drop autocapture, exceptions, web vitals\n * and heatmap events, so cookieless mode only sends the essentials (pageviews,\n * explicit captures). Pass it as `before_send` or use {@link posthogInitOptions}.\n */\nexport function consentBeforeSend(options: ConsentBeforeSendOptions = {}) {\n  const category = options.category ?? 'measurement';\n  const drop = new Set(options.drop ?? NON_ESSENTIAL_EVENTS);\n  const isGranted =\n    options.isGranted ?? (() => (options.api ? options.api.isGranted(category) : headGranted(category)));\n  return <T extends PostHogEventLike | null>(event: T): T | null => {\n    if (!event) return event;\n    if (drop.has(event.event) && !isGranted()) return null;\n    return event;\n  };\n}\n\nexport interface PostHogInitOptions {\n  cookieless_mode: 'on_reject';\n  persistence: 'localStorage+cookie';\n  person_profiles: 'identified_only';\n  before_send: ReturnType<typeof consentBeforeSend>;\n  [key: string]: unknown;\n}\n\n/**\n * Recommended `posthog.init()` options for easy-cookie:\n * - `cookieless_mode: 'on_reject'` (requires \"Cookieless server hash mode\" enabled\n *   in the PostHog project settings);\n * - `persistence: 'localStorage+cookie'` (only used after opt-in);\n * - `person_profiles: 'identified_only'`;\n * - a consent-aware `before_send` filter.\n *\n * Spread your own options after it: `posthog.init(key, { ...posthogInitOptions(), api_host })`.\n */\nexport function posthogInitOptions(options: ConsentBeforeSendOptions = {}): PostHogInitOptions {\n  return {\n    cookieless_mode: 'on_reject',\n    persistence: 'localStorage+cookie',\n    person_profiles: 'identified_only',\n    before_send: consentBeforeSend(options),\n  };\n}\n"],"mappings":";AAkEO,SAAS,eAAe,SAAsB,KAAoB,UAAiC,CAAC,GAAe;AACxH,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,MAAO,QAAQ,UAAU,IAAI,iBAAiB,QAAQ,OAAO,IAAI,IAAI,UAAU,QAAQ;AACvG,MAAI,OAA4B;AAQhC,MAAI;AACJ,MAAI,QAAQ,iBAAiB,OAAO,QAAQ,oBAAoB,YAAY;AAC1E,UAAM,WAAW,QAAQ,gBAAgB,KAAK,OAAO;AACrD,YAAQ,kBAAkB,CAAC,WAAW;AACpC,qBAAe;AACf,eAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACA,QAAM,oBAAoB,YAA0D;AAClF,QAAI;AACF,YAAM,QAAQ,QAAQ,QAAQ;AAC9B,YAAM,MAAM,SAAS,QAAQ,eAAe,cAAc,UAAU,UAAU,KAAK,SAAS;AAC5F,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,MAAM,MAAM,MAAM,GAAG;AAC3B,aAAO,IAAI,KAAO,MAAM,IAAI,KAAK,IAAiC;AAAA,IACpE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,gBAAgB,YAAY;AAChC,QAAI;AACF,YAAM,SAAS,gBAAiB,MAAM,kBAAkB;AACxD,UAAI,UAAU,sBAAsB,OAAQ,SAAQ,kBAAkB,iBAAiB,MAAM;AAC7F,cAAQ,wBAAwB;AAAA,IAClC,QAAQ;AAAA,IAER;AAAA,EACF;AAIA,QAAM,SAAS,MAAgC;AAC7C,UAAM,WAAW,QAAQ,8BAA8B;AACvD,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,aAAa,UAAW,QAAO;AACnC,QAAI,QAAQ,yBAAyB,EAAG,QAAO;AAC/C,QAAI,QAAQ,0BAA0B,EAAG,QAAO;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM;AAGlB,QAAI,CAAC,IAAI,UAAU,EAAG;AACtB,QAAI,CAAC,IAAI,IAAI,GAAG;AACd,UAAI,QAAQ,iBAAiB,cAAc;AACzC,YAAI,SAAS,OAAO;AAGlB,cAAI,OAAO,MAAM,SAAS,SAAS,KAAM,SAAQ,kBAAkB;AACnE,iBAAO;AAAA,QACT;AAAA,MACF,WAAW,OAAO,MAAM,MAAM;AAE5B,gBAAQ,6BAA6B;AAAA,MACvC;AACA;AAAA,IACF;AACA,QAAI,QAAQ,GAAG;AACb,UAAI,SAAS,MAAM;AAEjB,cAAM,iBAAiB,OAAO,MAAM;AACpC,YAAI,OAAO,MAAM,KAAM,SAAQ,iBAAiB,EAAE,kBAAkB,MAAM,CAAC;AAC3E,YAAI,QAAQ,eAAe;AACzB,cAAI,eAAgB,MAAK,cAAc;AAAA,cAClC,SAAQ,wBAAwB;AAAA,QACvC;AACA,eAAO;AAAA,MACT;AACA,YAAM,KAAK,QAAQ,WAAW;AAC9B,UAAI,MAAM,QAAQ,YAAY,QAAQ,kBAAkB,MAAM,GAAI,SAAQ,SAAS,EAAE;AAAA,IACvF,WAAW,SAAS,OAAO;AACzB,UAAI,QAAQ,cAAe,SAAQ,uBAAuB;AAC1D,UAAI,OAAO,MAAM,SAAS,SAAS,KAAM,SAAQ,kBAAkB;AACnE,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAA4B,CAAC,SAAS,UAAU,WAAW,QAAQ;AACzE,QAAM,SAAS,OAAO,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC;AAEnD,QAAM;AACN,SAAO,MAAM,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AACxC;AAGO,IAAM,uBAA0C;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAeA,SAAS,YAAY,UAA2B;AAC9C,QAAM,OAAQ,WAA8E;AAC5F,SAAO,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ;AAC3D;AAOO,SAAS,kBAAkB,UAAoC,CAAC,GAAG;AACxE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,oBAAoB;AACzD,QAAM,YACJ,QAAQ,cAAc,MAAO,QAAQ,MAAM,QAAQ,IAAI,UAAU,QAAQ,IAAI,YAAY,QAAQ;AACnG,SAAO,CAAoC,UAAuB;AAChE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,UAAU,EAAG,QAAO;AAClD,WAAO;AAAA,EACT;AACF;AAoBO,SAAS,mBAAmB,UAAoC,CAAC,GAAuB;AAC7F,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,iBAAiB;AAAA,IACjB,aAAa,kBAAkB,OAAO;AAAA,EACxC;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easy-cookie/posthog",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "PostHog adapter for easy-cookie: cookieless on_reject mode and opt-in/out synced with consent.",
   "license": "MIT",
   "repository": {
@@ -28,7 +28,7 @@
     "dist"
   ],
   "dependencies": {
-    "@easy-cookie/core": "^0.1.2"
+    "@easy-cookie/core": "^0.1.4"
   },
   "peerDependencies": {
     "posthog-js": ">=1.200.0"