@shoppexio/storefront 1.0.101 → 1.0.102

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.0.102
+
+- The checkout URL carries the buyer's cookie banner answer in its hash (`#shoppex_consent=…`, PR #3938), so the full hosted checkout page sends the shop's Purchase tags under the same consent. The hash never reaches a server; without an answer on a shop with the banner on, the checkout sends no tags.
+
 ## 1.0.101
 
 - Supplier sourcing is retired (PR #3825): `Product.supplier_backed` and `ProductVariant.supplier_backed` are gone, and `orderable` no longer turns an empty local stock into unlimited stock. Stock helpers read local units only; `orderable` stays the buy/sold-out gate.

package/dist/index.cjs

@@ -2789,6 +2789,16 @@ function isSafeHttpsRedirectTemplateUrl(url2) {
   }
 }
 
+// ../contracts/src/storefront-consent-choice.ts
+var COOKIE_CONSENT_VERSION = 1;
+var COOKIE_CONSENT_COOKIE = "shoppex_consent";
+var COOKIE_CONSENT_CHECKOUT_HASH_KEY = "shoppex_consent";
+var COOKIE_CONSENT_VALUE = new RegExp(`^v${COOKIE_CONSENT_VERSION}\\.f([01])\\.a([01])\\.m([01])$`);
+function parseCookieConsentValue(value) {
+  const match = value ? COOKIE_CONSENT_VALUE.exec(value) : null;
+  return match ? { functional: match[1] === "1", analytics: match[2] === "1", marketing: match[3] === "1" } : null;
+}
+
 // ../sdk/src/modules/checkout.ts
 var CheckoutCreateError = class _CheckoutCreateError extends Error {
   constructor(message, options = {}) {
@@ -2953,10 +2963,16 @@ function buildCheckoutUrlFromInvoiceId(checkoutBaseUrl, invoiceId) {
     return null;
   }
 }
+function readStorefrontConsentValue() {
+  if (typeof document === "undefined" || typeof document.cookie !== "string") return null;
+  const value = document.cookie.split(";").map((part) => part.trim()).find((part) => part.startsWith(`${COOKIE_CONSENT_COOKIE}=`))?.slice(COOKIE_CONSENT_COOKIE.length + 1);
+  return parseCookieConsentValue(value) ? value : null;
+}
 function appendCheckoutUrlOptions(checkoutUrl, options) {
   const normalizedEmail = normalizeEmail(options.email);
   const normalizedLocale = typeof options.locale === "string" ? options.locale.trim() : "";
-  if (!normalizedEmail && !normalizedLocale) {
+  const consent = readStorefrontConsentValue();
+  if (!normalizedEmail && !normalizedLocale && !consent) {
     return checkoutUrl;
   }
   try {
@@ -2964,9 +2980,10 @@ function appendCheckoutUrlOptions(checkoutUrl, options) {
     if (normalizedLocale) {
       parsedCheckoutUrl.searchParams.set("locale", normalizedLocale);
     }
-    if (normalizedEmail) {
+    if (normalizedEmail || consent) {
       const hashParams = new URLSearchParams(parsedCheckoutUrl.hash.startsWith("#") ? parsedCheckoutUrl.hash.slice(1) : parsedCheckoutUrl.hash);
-      hashParams.set(CHECKOUT_PREFILL_EMAIL_HASH_KEY, normalizedEmail);
+      if (normalizedEmail) hashParams.set(CHECKOUT_PREFILL_EMAIL_HASH_KEY, normalizedEmail);
+      if (consent) hashParams.set(COOKIE_CONSENT_CHECKOUT_HASH_KEY, consent);
       parsedCheckoutUrl.hash = hashParams.toString();
     }
     return parsedCheckoutUrl.toString();