@replohq/sdk 2.18.3 → 2.20.0

package/consent/usercentrics-consent.js

@@ -0,0 +1,96 @@
+import * as v from "valibot";
+const usercentricsDetailsSchema = v.object({
+  consent: v.optional(v.object({ type: v.optional(v.string()) })),
+  services: v.record(
+    v.string(),
+    v.object({
+      name: v.string(),
+      essential: v.optional(v.boolean()),
+      consent: v.object({ given: v.boolean() })
+    })
+  )
+});
+const usercentricsBaseInfoSchema = v.array(
+  v.object({
+    name: v.string(),
+    isEssential: v.optional(v.boolean()),
+    consent: v.object({
+      status: v.boolean(),
+      history: v.optional(v.array(v.object({ type: v.optional(v.string()) })))
+    })
+  })
+);
+function usercentricsCategories(services) {
+  const optionalServices = services.filter((service) => !service.essential);
+  const acceptedAll = optionalServices.length > 0 && optionalServices.every((service) => service.given);
+  return {
+    necessary: true,
+    analytics: acceptedAll,
+    marketing: acceptedAll,
+    preferences: acceptedAll,
+    sale_of_data: acceptedAll
+  };
+}
+async function readUsercentricsServices() {
+  if (window.__ucCmp?.getConsentDetails) {
+    const details = v.safeParse(
+      usercentricsDetailsSchema,
+      await window.__ucCmp.getConsentDetails()
+    );
+    if (!details.success) {
+      console.warn("[Replo] Unreadable Usercentrics consent details");
+      return null;
+    }
+    return {
+      services: Object.values(details.output.services).map((service) => ({
+        name: service.name,
+        given: service.consent.given,
+        essential: service.essential === true
+      })),
+      isExplicit: details.output.consent?.type === "EXPLICIT"
+    };
+  }
+  const rawBaseInfo = window.UC_UI?.getServicesBaseInfo?.();
+  if (rawBaseInfo === void 0) {
+    return null;
+  }
+  const baseInfo = v.safeParse(usercentricsBaseInfoSchema, rawBaseInfo);
+  if (!baseInfo.success) {
+    console.warn("[Replo] Unreadable Usercentrics service info");
+    return null;
+  }
+  return {
+    services: baseInfo.output.map((service) => ({
+      name: service.name,
+      given: service.consent.status,
+      essential: service.isEssential === true
+    })),
+    isExplicit: baseInfo.output.some((service) => {
+      return service.consent.history?.at(-1)?.type === "explicit";
+    })
+  };
+}
+async function readUsercentricsChange(previous) {
+  const answer = await readUsercentricsServices();
+  if (!answer) {
+    return null;
+  }
+  const categories = usercentricsCategories(answer.services);
+  const grantedUsercentricsServices = answer.services.filter((service) => service.given).map((service) => service.name).sort();
+  const isUnchanged = categories.analytics === previous.categories.analytics && grantedUsercentricsServices.join() === previous.grantedUsercentricsServices.join();
+  const isDecided = answer.isExplicit || answer.services.some((service) => service.given && !service.essential);
+  if (isUnchanged && (previous.decidedAt !== null || !isDecided)) {
+    return null;
+  }
+  return {
+    categories,
+    decidedAt: isDecided ? Date.now() : null,
+    grantedUsercentricsServices,
+    hasDowngrade: previous.grantedUsercentricsServices.some((name) => {
+      return !grantedUsercentricsServices.includes(name);
+    })
+  };
+}
+export {
+  readUsercentricsChange
+};

package/consent/window-api.js

@@ -30,7 +30,7 @@ const api = {
   saleOfDataAllowed: () => isAllowed("sale_of_data"),
   shouldShowBanner: () => {
     const state = consentStore.getSnapshot();
-    if (state.cmp === "cookiebot" || state.cmp === "external") {
+    if (state.cmp && state.cmp !== "replo") {
       return false;
     }
     return state.mode !== "off" && state.decidedAt === null;

package/lib/buildMetadata.js

@@ -1,7 +1,7 @@
 export const BUILD_METADATA = {
   "packageName": "@replohq/sdk",
-  "version": "2.18.3",
+  "version": "2.20.0",
   "branch": "HEAD",
-  "commit": "00c3d9662c0d5daa0cfd0ef03bb3b182e0cc0652",
-  "builtAt": "2026-11-03T23:49:23.685Z"
+  "commit": "20365c00f7144702c4a7438ac5d907dc97b5b62a",
+  "builtAt": "2026-11-06T20:15:11.914Z"
 };

package/loaders/integration-loader-schemas.d.ts

@@ -210,6 +210,7 @@ export declare const rebuyRecommendationsOutputSchema: z.ZodObject<{
                 previewUrl: z.ZodNullable<z.ZodString>;
             }, z.core.$strip>], "kind">>>;
         }, z.core.$strip>>>;
+        externalCheckoutUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const smileEarningRuleSchema: z.ZodObject<{

package/loaders/loader-schemas.d.ts

@@ -389,6 +389,7 @@ export declare const productSchema: z.ZodObject<{
             previewUrl: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>], "kind">>>;
     }, z.core.$strip>>>;
+    externalCheckoutUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type Product = z.infer<typeof productSchema>;
 export declare const okendoReviewMediaSchema: z.ZodObject<{
@@ -640,6 +641,7 @@ export declare const fullProductSchema: z.ZodObject<{
             previewUrl: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>], "kind">>>;
     }, z.core.$strip>>;
+    externalCheckoutUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export declare const fullCollectionSchema: z.ZodObject<{
     id: z.ZodString;
@@ -834,6 +836,7 @@ export declare const paginatedProductsSchema: z.ZodObject<{
                 previewUrl: z.ZodNullable<z.ZodString>;
             }, z.core.$strip>], "kind">>>;
         }, z.core.$strip>>>;
+        externalCheckoutUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     pageInfo: z.ZodObject<{
         hasNextPage: z.ZodBoolean;

package/loaders/loader-schemas.js

@@ -145,7 +145,8 @@ const productSchema = z.object({
   tags: z.array(z.string()).optional(),
   sellingPlanGroups: z.array(sellingPlanGroupSchema).optional(),
   requiresSellingPlan: z.boolean().optional(),
-  metafields: z.array(metafieldSchema).optional()
+  metafields: z.array(metafieldSchema).optional(),
+  externalCheckoutUrl: z.string().nullish()
 });
 const okendoReviewMediaSchema = z.object({
   type: z.string().describe('Okendo media type, e.g. "image" or "video"'),
@@ -216,7 +217,8 @@ const fullProductSchema = z.object({
   tags: z.array(z.string()),
   sellingPlanGroups: z.array(sellingPlanGroupSchema),
   requiresSellingPlan: productSchema.shape.requiresSellingPlan,
-  metafields: z.array(metafieldSchema)
+  metafields: z.array(metafieldSchema),
+  externalCheckoutUrl: productSchema.shape.externalCheckoutUrl
 });
 const fullCollectionSchema = z.object({
   id: z.string(),

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@replohq/sdk",
-  "version": "2.18.3",
+  "version": "2.20.0",
   "reploBuild": {
     "packageName": "@replohq/sdk",
-    "version": "2.18.3",
+    "version": "2.20.0",
     "branch": "HEAD",
-    "commit": "00c3d9662c0d5daa0cfd0ef03bb3b182e0cc0652",
-    "builtAt": "2026-11-03T23:49:23.685Z"
+    "commit": "20365c00f7144702c4a7438ac5d907dc97b5b62a",
+    "builtAt": "2026-11-06T20:15:11.914Z"
   },
   "description": "Replo SDK — cart, analytics, and data loaders for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",

package/providers/canopy-client-config.d.ts

@@ -1,3 +1,4 @@
+import type { CheckoutProvider } from "../lib/integration-utils";
 import React from "react";
 /**
  * What browser code needs to call canopy-api directly. Resolved from the worker
@@ -7,6 +8,7 @@ import React from "react";
 export type CanopyClientConfig = {
     canopyApiBaseUrl: string;
     projectId: string;
+    checkoutProvider: CheckoutProvider;
 };
 export declare function CanopyClientConfigProvider({ config, children, }: React.PropsWithChildren<{
     config: CanopyClientConfig | null;

package/providers/replo-provider.js

@@ -19,7 +19,8 @@ async function ReploProvider({
     checkoutProvider = env.CHECKOUT_PROVIDER ?? "none";
     canopyClientConfig = {
       canopyApiBaseUrl: buildBaseUrl(env.CANOPY_API_HOST),
-      projectId: env.PROJECT_ID
+      projectId: env.PROJECT_ID,
+      checkoutProvider
     };
   } catch {
     checkoutProvider = "none";