@wix/web5-core 1.63.15 → 1.63.17

package/dist/cjs/privacy/consentGate.js

@@ -0,0 +1,275 @@
+"use strict";
+
+exports.__esModule = true;
+exports.unlockOnUserAction = exports.transmit = exports.subscribeToConsent = exports.setConsentBufferLimit = exports.resetConsentGateForTests = exports.mayTransmit = exports.mayPersistIdentity = exports.isUserEngaged = exports.installConsentProvider = exports.getInstalledProviderName = exports.getGateView = exports.getConsentSnapshot = exports.getConsentGateStats = void 0;
+var _types = require("./types");
+/**
+ * The consent gate — DL #218.
+ *
+ * Every BI, telemetry and analytics emitter in web5 goes through `transmit()`
+ * instead of calling its transport directly. The gate exists because the
+ * consent signal resolves *after* the events that need it: Shopify's consent
+ * API is not on the page by default and has to be requested, and the fedops
+ * app-load pair fires inside that window. A boolean checked at each call site
+ * can only ever drop an event that is already in flight; the gate can hold it.
+ *
+ * Two independent unlocks, and they do not compose as a plain "either/or":
+ *
+ *   | consent   | engaged | result                          |
+ *   |-----------|---------|---------------------------------|
+ *   | granted   | either  | transmit                        |
+ *   | unknown   | no      | hold in the buffer              |
+ *   | unknown   | yes     | transmit, and flush what's held |
+ *   | denied    | yes     | still nothing                   |
+ *
+ * Denied outranks engaged. A visitor who refused analytics in the banner does
+ * not re-enable tracking by typing a question.
+ */
+
+/** Held events are dropped past this many — a runaway emitter must not become a leak. */
+const DEFAULT_BUFFER_LIMIT = 50;
+
+/**
+ * One prefix for the whole consent trail, so `[w5-consent]` in the console
+ * filter shows the full story: which CMP was found, what it answered, and for
+ * every event whether it was sent, held, dropped or replayed.
+ */
+const LOG_PREFIX = '[w5-consent]';
+const log = (...args) => {
+  try {
+    console.log(LOG_PREFIX, ...args);
+  } catch {
+    // A console that throws must never break a send.
+  }
+};
+const describe = s => `analytics=${s.analytics} performance=${s.performance} marketing=${s.marketing}`;
+let snapshot = _types.UNKNOWN_CONSENT;
+let engaged = false;
+let provider = null;
+let unsubscribeProvider = null;
+let buffer = [];
+let bufferLimit = DEFAULT_BUFFER_LIMIT;
+let droppedFromOverflow = 0;
+const listeners = new Set();
+
+/**
+ * Cached so `getGateView` is referentially stable between changes —
+ * `useSyncExternalStore` re-renders forever if the snapshot is a fresh object
+ * on every read.
+ */
+let view = Object.freeze({
+  consent: _types.UNKNOWN_CONSENT,
+  engaged: false
+});
+const rebuildView = () => {
+  view = Object.freeze({
+    consent: snapshot,
+    engaged
+  });
+};
+const notify = () => {
+  for (const listener of listeners) {
+    try {
+      listener();
+    } catch {
+      // A subscriber that throws must not stop the others, or stop a flush.
+    }
+  }
+};
+
+/**
+ * Whether an event for `purpose` may go on the wire right now.
+ *
+ * `necessary` is always allowed. For everything else: explicit consent wins in
+ * both directions, and engagement resolves only the `unknown` case.
+ */
+const mayTransmit = purpose => {
+  if (purpose === 'necessary') {
+    return true;
+  }
+  const state = snapshot[purpose];
+  if (state === 'denied') {
+    return false;
+  }
+  if (state === 'granted') {
+    return true;
+  }
+  return engaged;
+};
+
+/**
+ * Release everything the gate is holding that is now allowed, and drop
+ * everything that is now refused. Anything still `unknown` stays held.
+ *
+ * Order is preserved among released events, but a flush necessarily emits them
+ * later than they were raised — a held app-load event reaches the wire after
+ * the prompt that unlocked it. Anything reading these as a timeline has to
+ * know that.
+ */
+exports.mayTransmit = mayTransmit;
+const settleBuffer = () => {
+  if (buffer.length === 0) {
+    return;
+  }
+  const stillHeld = [];
+  const releasing = [];
+  for (const held of buffer) {
+    if (mayTransmit(held.purpose)) {
+      releasing.push(held);
+    } else if (snapshot[held.purpose] === 'denied') {
+      // dropped on the floor, deliberately and permanently
+    } else {
+      stillHeld.push(held);
+    }
+  }
+  const dropped = buffer.length - stillHeld.length - releasing.length;
+  buffer = stillHeld;
+  if (releasing.length || dropped) {
+    log(`settle — releasing ${releasing.length}` + (dropped ? `, dropping ${dropped} (refused)` : '') + (stillHeld.length ? `, still holding ${stillHeld.length}` : ''));
+  }
+  for (const held of releasing) {
+    try {
+      log(`  ↳ REPLAY ${held.label} (${held.purpose})`);
+      held.send();
+    } catch {
+      // A failed send must not strand the rest of the flush.
+    }
+  }
+};
+
+/**
+ * The single entry point for anything that would put a request on the wire.
+ *
+ * Allowed → sent now. Refused → dropped. Not yet known → held until an unlock
+ * settles it, or discarded with the page.
+ */
+const transmit = (purpose, send, label = 'event') => {
+  if (mayTransmit(purpose)) {
+    log(`SEND ${label} (${purpose}) — allowed`);
+    send();
+    return;
+  }
+  if (purpose !== 'necessary' && snapshot[purpose] === 'denied') {
+    log(`DROP ${label} (${purpose}) — visitor refused`);
+    return;
+  }
+  if (buffer.length >= bufferLimit) {
+    droppedFromOverflow += 1;
+    log(`DROP ${label} (${purpose}) — buffer full at ${bufferLimit}, ${droppedFromOverflow} lost`);
+    return;
+  }
+  buffer.push({
+    purpose: purpose,
+    send,
+    label
+  });
+  log(`HOLD ${label} (${purpose}) — no answer yet, ${buffer.length} held`);
+};
+
+/**
+ * The visitor did something deliberate — submitted a prompt — so the session
+ * may be measured even though no CMP has answered.
+ *
+ * This is the unlock that keeps web5 measurable at all: on a Shopify store
+ * with no privacy configuration the consent API never loads, consent stays
+ * `unknown` forever, and without this every store would report nothing.
+ *
+ * It unlocks **transmission only**. Persistent identity stays gated on real
+ * consent (see `mayPersistIdentity`) — typing a question is a reason to
+ * measure the session, not a reason to persist an identifier across visits.
+ * It also cannot override a `denied`.
+ */
+exports.transmit = transmit;
+const unlockOnUserAction = () => {
+  if (engaged) {
+    return;
+  }
+  engaged = true;
+  log(`UNLOCK — visitor submitted a prompt; ${buffer.length} held event(s) to settle`);
+  rebuildView();
+  settleBuffer();
+  notify();
+};
+
+/** Whether the visitor has taken the deliberate action that unlocks the session. */
+exports.unlockOnUserAction = unlockOnUserAction;
+const isUserEngaged = () => engaged;
+
+/**
+ * Persistent, cross-visit storage of a visitor identifier requires real
+ * consent — engagement is deliberately not enough.
+ */
+exports.isUserEngaged = isUserEngaged;
+const mayPersistIdentity = () => snapshot.analytics === 'granted';
+exports.mayPersistIdentity = mayPersistIdentity;
+const getConsentSnapshot = () => snapshot;
+
+/** Referentially stable between changes, for `useSyncExternalStore`. */
+exports.getConsentSnapshot = getConsentSnapshot;
+const getGateView = () => view;
+exports.getGateView = getGateView;
+const subscribeToConsent = listener => {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+};
+exports.subscribeToConsent = subscribeToConsent;
+const applySnapshot = next => {
+  if (next.analytics === snapshot.analytics && next.marketing === snapshot.marketing && next.performance === snapshot.performance) {
+    return;
+  }
+  log(`ANSWER — ${describe(snapshot)}  →  ${describe(next)}`);
+  snapshot = Object.freeze({
+    ...next
+  });
+  rebuildView();
+  settleBuffer();
+  notify();
+};
+
+/**
+ * Install the host's provider. Reads its current state immediately, *then*
+ * subscribes — DL #217: a listener registered into an already-rendered page is
+ * bound to an event that may have fired long before the bundle executed, so
+ * subscribing alone would leave the gate permanently at `unknown`.
+ */
+const installConsentProvider = next => {
+  unsubscribeProvider == null || unsubscribeProvider();
+  provider = next;
+  const initial = next.read();
+  log(`provider installed: ${next.name} — reads ${describe(initial)}`);
+  applySnapshot(initial);
+  unsubscribeProvider = next.subscribe(applySnapshot);
+};
+exports.installConsentProvider = installConsentProvider;
+const getInstalledProviderName = () => {
+  var _provider;
+  return ((_provider = provider) == null ? void 0 : _provider.name) ?? null;
+};
+exports.getInstalledProviderName = getInstalledProviderName;
+const setConsentBufferLimit = limit => {
+  bufferLimit = Math.max(0, limit);
+};
+
+/** Diagnostics only — how much the gate is holding, and what it had to drop. */
+exports.setConsentBufferLimit = setConsentBufferLimit;
+const getConsentGateStats = () => ({
+  held: buffer.length,
+  droppedFromOverflow
+});
+exports.getConsentGateStats = getConsentGateStats;
+const resetConsentGateForTests = () => {
+  unsubscribeProvider == null || unsubscribeProvider();
+  unsubscribeProvider = null;
+  provider = null;
+  snapshot = _types.UNKNOWN_CONSENT;
+  engaged = false;
+  buffer = [];
+  bufferLimit = DEFAULT_BUFFER_LIMIT;
+  droppedFromOverflow = 0;
+  listeners.clear();
+  rebuildView();
+};
+exports.resetConsentGateForTests = resetConsentGateForTests;
+//# sourceMappingURL=consentGate.js.map

package/dist/cjs/privacy/consentGate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_types","require","DEFAULT_BUFFER_LIMIT","LOG_PREFIX","log","args","console","describe","s","analytics","performance","marketing","snapshot","UNKNOWN_CONSENT","engaged","provider","unsubscribeProvider","buffer","bufferLimit","droppedFromOverflow","listeners","Set","view","Object","freeze","consent","rebuildView","notify","listener","mayTransmit","purpose","state","exports","settleBuffer","length","stillHeld","releasing","held","push","dropped","label","send","transmit","unlockOnUserAction","isUserEngaged","mayPersistIdentity","getConsentSnapshot","getGateView","subscribeToConsent","add","delete","applySnapshot","next","installConsentProvider","initial","read","name","subscribe","getInstalledProviderName","_provider","setConsentBufferLimit","limit","Math","max","getConsentGateStats","resetConsentGateForTests","clear"],"sources":["../../../src/privacy/consentGate.ts"],"sourcesContent":["/**\n * The consent gate — DL #218.\n *\n * Every BI, telemetry and analytics emitter in web5 goes through `transmit()`\n * instead of calling its transport directly. The gate exists because the\n * consent signal resolves *after* the events that need it: Shopify's consent\n * API is not on the page by default and has to be requested, and the fedops\n * app-load pair fires inside that window. A boolean checked at each call site\n * can only ever drop an event that is already in flight; the gate can hold it.\n *\n * Two independent unlocks, and they do not compose as a plain \"either/or\":\n *\n *   | consent   | engaged | result                          |\n *   |-----------|---------|---------------------------------|\n *   | granted   | either  | transmit                        |\n *   | unknown   | no      | hold in the buffer              |\n *   | unknown   | yes     | transmit, and flush what's held |\n *   | denied    | yes     | still nothing                   |\n *\n * Denied outranks engaged. A visitor who refused analytics in the banner does\n * not re-enable tracking by typing a question.\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentPurpose,\n  type ConsentSnapshot,\n  type GatedPurpose,\n} from './types';\n\n/** Held events are dropped past this many — a runaway emitter must not become a leak. */\nconst DEFAULT_BUFFER_LIMIT = 50;\n\n/**\n * One prefix for the whole consent trail, so `[w5-consent]` in the console\n * filter shows the full story: which CMP was found, what it answered, and for\n * every event whether it was sent, held, dropped or replayed.\n */\nconst LOG_PREFIX = '[w5-consent]';\n\nconst log = (...args: unknown[]): void => {\n  try {\n    console.log(LOG_PREFIX, ...args);\n  } catch {\n    // A console that throws must never break a send.\n  }\n};\n\nconst describe = (s: ConsentSnapshot): string =>\n  `analytics=${s.analytics} performance=${s.performance} marketing=${s.marketing}`;\n\ninterface HeldEvent {\n  purpose: GatedPurpose;\n  send: () => void;\n  label: string;\n}\n\nexport interface GateView {\n  consent: ConsentSnapshot;\n  engaged: boolean;\n}\n\ntype Listener = () => void;\n\nlet snapshot: ConsentSnapshot = UNKNOWN_CONSENT;\nlet engaged = false;\nlet provider: ConsentProvider | null = null;\nlet unsubscribeProvider: (() => void) | null = null;\nlet buffer: HeldEvent[] = [];\nlet bufferLimit = DEFAULT_BUFFER_LIMIT;\nlet droppedFromOverflow = 0;\n\nconst listeners = new Set<Listener>();\n\n/**\n * Cached so `getGateView` is referentially stable between changes —\n * `useSyncExternalStore` re-renders forever if the snapshot is a fresh object\n * on every read.\n */\nlet view: GateView = Object.freeze({ consent: UNKNOWN_CONSENT, engaged: false });\n\nconst rebuildView = (): void => {\n  view = Object.freeze({ consent: snapshot, engaged });\n};\n\nconst notify = (): void => {\n  for (const listener of listeners) {\n    try {\n      listener();\n    } catch {\n      // A subscriber that throws must not stop the others, or stop a flush.\n    }\n  }\n};\n\n/**\n * Whether an event for `purpose` may go on the wire right now.\n *\n * `necessary` is always allowed. For everything else: explicit consent wins in\n * both directions, and engagement resolves only the `unknown` case.\n */\nexport const mayTransmit = (purpose: ConsentPurpose): boolean => {\n  if (purpose === 'necessary') {\n    return true;\n  }\n  const state = snapshot[purpose];\n  if (state === 'denied') {\n    return false;\n  }\n  if (state === 'granted') {\n    return true;\n  }\n  return engaged;\n};\n\n/**\n * Release everything the gate is holding that is now allowed, and drop\n * everything that is now refused. Anything still `unknown` stays held.\n *\n * Order is preserved among released events, but a flush necessarily emits them\n * later than they were raised — a held app-load event reaches the wire after\n * the prompt that unlocked it. Anything reading these as a timeline has to\n * know that.\n */\nconst settleBuffer = (): void => {\n  if (buffer.length === 0) {\n    return;\n  }\n  const stillHeld: HeldEvent[] = [];\n  const releasing: HeldEvent[] = [];\n\n  for (const held of buffer) {\n    if (mayTransmit(held.purpose)) {\n      releasing.push(held);\n    } else if (snapshot[held.purpose] === 'denied') {\n      // dropped on the floor, deliberately and permanently\n    } else {\n      stillHeld.push(held);\n    }\n  }\n\n  const dropped = buffer.length - stillHeld.length - releasing.length;\n  buffer = stillHeld;\n\n  if (releasing.length || dropped) {\n    log(\n      `settle — releasing ${releasing.length}` +\n        (dropped ? `, dropping ${dropped} (refused)` : '') +\n        (stillHeld.length ? `, still holding ${stillHeld.length}` : ''),\n    );\n  }\n\n  for (const held of releasing) {\n    try {\n      log(`  ↳ REPLAY ${held.label} (${held.purpose})`);\n      held.send();\n    } catch {\n      // A failed send must not strand the rest of the flush.\n    }\n  }\n};\n\n/**\n * The single entry point for anything that would put a request on the wire.\n *\n * Allowed → sent now. Refused → dropped. Not yet known → held until an unlock\n * settles it, or discarded with the page.\n */\nexport const transmit = (\n  purpose: ConsentPurpose,\n  send: () => void,\n  label = 'event',\n): void => {\n  if (mayTransmit(purpose)) {\n    log(`SEND ${label} (${purpose}) — allowed`);\n    send();\n    return;\n  }\n  if (purpose !== 'necessary' && snapshot[purpose] === 'denied') {\n    log(`DROP ${label} (${purpose}) — visitor refused`);\n    return;\n  }\n  if (buffer.length >= bufferLimit) {\n    droppedFromOverflow += 1;\n    log(\n      `DROP ${label} (${purpose}) — buffer full at ${bufferLimit}, ${droppedFromOverflow} lost`,\n    );\n    return;\n  }\n  buffer.push({ purpose: purpose as GatedPurpose, send, label });\n  log(`HOLD ${label} (${purpose}) — no answer yet, ${buffer.length} held`);\n};\n\n/**\n * The visitor did something deliberate — submitted a prompt — so the session\n * may be measured even though no CMP has answered.\n *\n * This is the unlock that keeps web5 measurable at all: on a Shopify store\n * with no privacy configuration the consent API never loads, consent stays\n * `unknown` forever, and without this every store would report nothing.\n *\n * It unlocks **transmission only**. Persistent identity stays gated on real\n * consent (see `mayPersistIdentity`) — typing a question is a reason to\n * measure the session, not a reason to persist an identifier across visits.\n * It also cannot override a `denied`.\n */\nexport const unlockOnUserAction = (): void => {\n  if (engaged) {\n    return;\n  }\n  engaged = true;\n  log(\n    `UNLOCK — visitor submitted a prompt; ${buffer.length} held event(s) to settle`,\n  );\n  rebuildView();\n  settleBuffer();\n  notify();\n};\n\n/** Whether the visitor has taken the deliberate action that unlocks the session. */\nexport const isUserEngaged = (): boolean => engaged;\n\n/**\n * Persistent, cross-visit storage of a visitor identifier requires real\n * consent — engagement is deliberately not enough.\n */\nexport const mayPersistIdentity = (): boolean => snapshot.analytics === 'granted';\n\nexport const getConsentSnapshot = (): ConsentSnapshot => snapshot;\n\n/** Referentially stable between changes, for `useSyncExternalStore`. */\nexport const getGateView = (): GateView => view;\n\nexport const subscribeToConsent = (listener: Listener): (() => void) => {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n};\n\nconst applySnapshot = (next: ConsentSnapshot): void => {\n  if (\n    next.analytics === snapshot.analytics &&\n    next.marketing === snapshot.marketing &&\n    next.performance === snapshot.performance\n  ) {\n    return;\n  }\n  log(`ANSWER — ${describe(snapshot)}  →  ${describe(next)}`);\n  snapshot = Object.freeze({ ...next });\n  rebuildView();\n  settleBuffer();\n  notify();\n};\n\n/**\n * Install the host's provider. Reads its current state immediately, *then*\n * subscribes — DL #217: a listener registered into an already-rendered page is\n * bound to an event that may have fired long before the bundle executed, so\n * subscribing alone would leave the gate permanently at `unknown`.\n */\nexport const installConsentProvider = (next: ConsentProvider): void => {\n  unsubscribeProvider?.();\n  provider = next;\n  const initial = next.read();\n  log(`provider installed: ${next.name} — reads ${describe(initial)}`);\n  applySnapshot(initial);\n  unsubscribeProvider = next.subscribe(applySnapshot);\n};\n\nexport const getInstalledProviderName = (): string | null => provider?.name ?? null;\n\nexport const setConsentBufferLimit = (limit: number): void => {\n  bufferLimit = Math.max(0, limit);\n};\n\n/** Diagnostics only — how much the gate is holding, and what it had to drop. */\nexport const getConsentGateStats = (): {\n  held: number;\n  droppedFromOverflow: number;\n} => ({ held: buffer.length, droppedFromOverflow });\n\nexport const resetConsentGateForTests = (): void => {\n  unsubscribeProvider?.();\n  unsubscribeProvider = null;\n  provider = null;\n  snapshot = UNKNOWN_CONSENT;\n  engaged = false;\n  buffer = [];\n  bufferLimit = DEFAULT_BUFFER_LIMIT;\n  droppedFromOverflow = 0;\n  listeners.clear();\n  rebuildView();\n};\n"],"mappings":";;;;AAuBA,IAAAA,MAAA,GAAAC,OAAA;AAvBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA;AACA,MAAMC,oBAAoB,GAAG,EAAE;;AAE/B;AACA;AACA;AACA;AACA;AACA,MAAMC,UAAU,GAAG,cAAc;AAEjC,MAAMC,GAAG,GAAGA,CAAC,GAAGC,IAAe,KAAW;EACxC,IAAI;IACFC,OAAO,CAACF,GAAG,CAACD,UAAU,EAAE,GAAGE,IAAI,CAAC;EAClC,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAED,MAAME,QAAQ,GAAIC,CAAkB,IAClC,aAAaA,CAAC,CAACC,SAAS,gBAAgBD,CAAC,CAACE,WAAW,cAAcF,CAAC,CAACG,SAAS,EAAE;AAelF,IAAIC,QAAyB,GAAGC,sBAAe;AAC/C,IAAIC,OAAO,GAAG,KAAK;AACnB,IAAIC,QAAgC,GAAG,IAAI;AAC3C,IAAIC,mBAAwC,GAAG,IAAI;AACnD,IAAIC,MAAmB,GAAG,EAAE;AAC5B,IAAIC,WAAW,GAAGhB,oBAAoB;AACtC,IAAIiB,mBAAmB,GAAG,CAAC;AAE3B,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAAW,CAAC;;AAErC;AACA;AACA;AACA;AACA;AACA,IAAIC,IAAc,GAAGC,MAAM,CAACC,MAAM,CAAC;EAAEC,OAAO,EAAEZ,sBAAe;EAAEC,OAAO,EAAE;AAAM,CAAC,CAAC;AAEhF,MAAMY,WAAW,GAAGA,CAAA,KAAY;EAC9BJ,IAAI,GAAGC,MAAM,CAACC,MAAM,CAAC;IAAEC,OAAO,EAAEb,QAAQ;IAAEE;EAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAMa,MAAM,GAAGA,CAAA,KAAY;EACzB,KAAK,MAAMC,QAAQ,IAAIR,SAAS,EAAE;IAChC,IAAI;MACFQ,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,WAAW,GAAIC,OAAuB,IAAc;EAC/D,IAAIA,OAAO,KAAK,WAAW,EAAE;IAC3B,OAAO,IAAI;EACb;EACA,MAAMC,KAAK,GAAGnB,QAAQ,CAACkB,OAAO,CAAC;EAC/B,IAAIC,KAAK,KAAK,QAAQ,EAAE;IACtB,OAAO,KAAK;EACd;EACA,IAAIA,KAAK,KAAK,SAAS,EAAE;IACvB,OAAO,IAAI;EACb;EACA,OAAOjB,OAAO;AAChB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AARAkB,OAAA,CAAAH,WAAA,GAAAA,WAAA;AASA,MAAMI,YAAY,GAAGA,CAAA,KAAY;EAC/B,IAAIhB,MAAM,CAACiB,MAAM,KAAK,CAAC,EAAE;IACvB;EACF;EACA,MAAMC,SAAsB,GAAG,EAAE;EACjC,MAAMC,SAAsB,GAAG,EAAE;EAEjC,KAAK,MAAMC,IAAI,IAAIpB,MAAM,EAAE;IACzB,IAAIY,WAAW,CAACQ,IAAI,CAACP,OAAO,CAAC,EAAE;MAC7BM,SAAS,CAACE,IAAI,CAACD,IAAI,CAAC;IACtB,CAAC,MAAM,IAAIzB,QAAQ,CAACyB,IAAI,CAACP,OAAO,CAAC,KAAK,QAAQ,EAAE;MAC9C;IAAA,CACD,MAAM;MACLK,SAAS,CAACG,IAAI,CAACD,IAAI,CAAC;IACtB;EACF;EAEA,MAAME,OAAO,GAAGtB,MAAM,CAACiB,MAAM,GAAGC,SAAS,CAACD,MAAM,GAAGE,SAAS,CAACF,MAAM;EACnEjB,MAAM,GAAGkB,SAAS;EAElB,IAAIC,SAAS,CAACF,MAAM,IAAIK,OAAO,EAAE;IAC/BnC,GAAG,CACD,sBAAsBgC,SAAS,CAACF,MAAM,EAAE,IACrCK,OAAO,GAAG,cAAcA,OAAO,YAAY,GAAG,EAAE,CAAC,IACjDJ,SAAS,CAACD,MAAM,GAAG,mBAAmBC,SAAS,CAACD,MAAM,EAAE,GAAG,EAAE,CAClE,CAAC;EACH;EAEA,KAAK,MAAMG,IAAI,IAAID,SAAS,EAAE;IAC5B,IAAI;MACFhC,GAAG,CAAC,cAAciC,IAAI,CAACG,KAAK,KAAKH,IAAI,CAACP,OAAO,GAAG,CAAC;MACjDO,IAAI,CAACI,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,QAAQ,GAAGA,CACtBZ,OAAuB,EACvBW,IAAgB,EAChBD,KAAK,GAAG,OAAO,KACN;EACT,IAAIX,WAAW,CAACC,OAAO,CAAC,EAAE;IACxB1B,GAAG,CAAC,QAAQoC,KAAK,KAAKV,OAAO,aAAa,CAAC;IAC3CW,IAAI,CAAC,CAAC;IACN;EACF;EACA,IAAIX,OAAO,KAAK,WAAW,IAAIlB,QAAQ,CAACkB,OAAO,CAAC,KAAK,QAAQ,EAAE;IAC7D1B,GAAG,CAAC,QAAQoC,KAAK,KAAKV,OAAO,qBAAqB,CAAC;IACnD;EACF;EACA,IAAIb,MAAM,CAACiB,MAAM,IAAIhB,WAAW,EAAE;IAChCC,mBAAmB,IAAI,CAAC;IACxBf,GAAG,CACD,QAAQoC,KAAK,KAAKV,OAAO,sBAAsBZ,WAAW,KAAKC,mBAAmB,OACpF,CAAC;IACD;EACF;EACAF,MAAM,CAACqB,IAAI,CAAC;IAAER,OAAO,EAAEA,OAAuB;IAAEW,IAAI;IAAED;EAAM,CAAC,CAAC;EAC9DpC,GAAG,CAAC,QAAQoC,KAAK,KAAKV,OAAO,sBAAsBb,MAAM,CAACiB,MAAM,OAAO,CAAC;AAC1E,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAZAF,OAAA,CAAAU,QAAA,GAAAA,QAAA;AAaO,MAAMC,kBAAkB,GAAGA,CAAA,KAAY;EAC5C,IAAI7B,OAAO,EAAE;IACX;EACF;EACAA,OAAO,GAAG,IAAI;EACdV,GAAG,CACD,wCAAwCa,MAAM,CAACiB,MAAM,0BACvD,CAAC;EACDR,WAAW,CAAC,CAAC;EACbO,YAAY,CAAC,CAAC;EACdN,MAAM,CAAC,CAAC;AACV,CAAC;;AAED;AAAAK,OAAA,CAAAW,kBAAA,GAAAA,kBAAA;AACO,MAAMC,aAAa,GAAGA,CAAA,KAAe9B,OAAO;;AAEnD;AACA;AACA;AACA;AAHAkB,OAAA,CAAAY,aAAA,GAAAA,aAAA;AAIO,MAAMC,kBAAkB,GAAGA,CAAA,KAAejC,QAAQ,CAACH,SAAS,KAAK,SAAS;AAACuB,OAAA,CAAAa,kBAAA,GAAAA,kBAAA;AAE3E,MAAMC,kBAAkB,GAAGA,CAAA,KAAuBlC,QAAQ;;AAEjE;AAAAoB,OAAA,CAAAc,kBAAA,GAAAA,kBAAA;AACO,MAAMC,WAAW,GAAGA,CAAA,KAAgBzB,IAAI;AAACU,OAAA,CAAAe,WAAA,GAAAA,WAAA;AAEzC,MAAMC,kBAAkB,GAAIpB,QAAkB,IAAmB;EACtER,SAAS,CAAC6B,GAAG,CAACrB,QAAQ,CAAC;EACvB,OAAO,MAAM;IACXR,SAAS,CAAC8B,MAAM,CAACtB,QAAQ,CAAC;EAC5B,CAAC;AACH,CAAC;AAACI,OAAA,CAAAgB,kBAAA,GAAAA,kBAAA;AAEF,MAAMG,aAAa,GAAIC,IAAqB,IAAW;EACrD,IACEA,IAAI,CAAC3C,SAAS,KAAKG,QAAQ,CAACH,SAAS,IACrC2C,IAAI,CAACzC,SAAS,KAAKC,QAAQ,CAACD,SAAS,IACrCyC,IAAI,CAAC1C,WAAW,KAAKE,QAAQ,CAACF,WAAW,EACzC;IACA;EACF;EACAN,GAAG,CAAC,YAAYG,QAAQ,CAACK,QAAQ,CAAC,QAAQL,QAAQ,CAAC6C,IAAI,CAAC,EAAE,CAAC;EAC3DxC,QAAQ,GAAGW,MAAM,CAACC,MAAM,CAAC;IAAE,GAAG4B;EAAK,CAAC,CAAC;EACrC1B,WAAW,CAAC,CAAC;EACbO,YAAY,CAAC,CAAC;EACdN,MAAM,CAAC,CAAC;AACV,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACO,MAAM0B,sBAAsB,GAAID,IAAqB,IAAW;EACrEpC,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvBD,QAAQ,GAAGqC,IAAI;EACf,MAAME,OAAO,GAAGF,IAAI,CAACG,IAAI,CAAC,CAAC;EAC3BnD,GAAG,CAAC,uBAAuBgD,IAAI,CAACI,IAAI,YAAYjD,QAAQ,CAAC+C,OAAO,CAAC,EAAE,CAAC;EACpEH,aAAa,CAACG,OAAO,CAAC;EACtBtC,mBAAmB,GAAGoC,IAAI,CAACK,SAAS,CAACN,aAAa,CAAC;AACrD,CAAC;AAACnB,OAAA,CAAAqB,sBAAA,GAAAA,sBAAA;AAEK,MAAMK,wBAAwB,GAAGA,CAAA;EAAA,IAAAC,SAAA;EAAA,OAAqB,EAAAA,SAAA,GAAA5C,QAAQ,qBAAR4C,SAAA,CAAUH,IAAI,KAAI,IAAI;AAAA;AAACxB,OAAA,CAAA0B,wBAAA,GAAAA,wBAAA;AAE7E,MAAME,qBAAqB,GAAIC,KAAa,IAAW;EAC5D3C,WAAW,GAAG4C,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEF,KAAK,CAAC;AAClC,CAAC;;AAED;AAAA7B,OAAA,CAAA4B,qBAAA,GAAAA,qBAAA;AACO,MAAMI,mBAAmB,GAAGA,CAAA,MAG7B;EAAE3B,IAAI,EAAEpB,MAAM,CAACiB,MAAM;EAAEf;AAAoB,CAAC,CAAC;AAACa,OAAA,CAAAgC,mBAAA,GAAAA,mBAAA;AAE7C,MAAMC,wBAAwB,GAAGA,CAAA,KAAY;EAClDjD,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvBA,mBAAmB,GAAG,IAAI;EAC1BD,QAAQ,GAAG,IAAI;EACfH,QAAQ,GAAGC,sBAAe;EAC1BC,OAAO,GAAG,KAAK;EACfG,MAAM,GAAG,EAAE;EACXC,WAAW,GAAGhB,oBAAoB;EAClCiB,mBAAmB,GAAG,CAAC;EACvBC,SAAS,CAAC8C,KAAK,CAAC,CAAC;EACjBxC,WAAW,CAAC,CAAC;AACf,CAAC;AAACM,OAAA,CAAAiC,wBAAA,GAAAA,wBAAA","ignoreList":[]}

package/dist/cjs/privacy/consentOverride.js

@@ -0,0 +1,94 @@
+"use strict";
+
+exports.__esModule = true;
+exports.setConsentOverride = exports.overrideSnapshot = exports.getConsentOverride = exports.CONSENT_OVERRIDE_QUERY_PARAM = exports.CONSENT_OVERRIDE_KEY = void 0;
+/**
+ * Consent override (debug-only) — DL #218.
+ *
+ * Shopify only serves its cookie banner where consent is legally required, so
+ * from most of the world `shouldShowBanner()` is `false` and there is no way to
+ * reach the `unknown` or `denied` branches by hand. Development stores often
+ * have no privacy configuration at all, which pins the gate at `unknown`
+ * forever. Neither is a bug, and both make the interesting states unreachable
+ * from a browser.
+ *
+ * This forces the gate's answer so all four rows of the truth table can be
+ * walked on any store, in any region, published or not.
+ *
+ *   ?w5consent=granted | denied | unknown      (one-shot)
+ *   localStorage["w5_consent_override"]        (sticky)
+ *
+ * **The two are not equally trusted, on purpose.** A link is something one
+ * person can send another, so a query param may only ever *reduce* what is
+ * collected: `denied` is honoured anywhere, while `granted` and `unknown` are
+ * honoured only on a local origin. Turning tracking *on* for someone else by
+ * sending them a URL is exactly the thing this whole feature exists to
+ * prevent. On a real storefront, set the localStorage key in devtools — which
+ * is a deliberate act by the person whose browser it is.
+ */
+
+const CONSENT_OVERRIDE_KEY = exports.CONSENT_OVERRIDE_KEY = 'w5_consent_override';
+const CONSENT_OVERRIDE_QUERY_PARAM = exports.CONSENT_OVERRIDE_QUERY_PARAM = 'w5consent';
+const VALID = ['granted', 'denied', 'unknown'];
+const isConsentState = value => typeof value === 'string' && VALID.includes(value);
+
+/** Only a local origin may force a *more* permissive state from a URL. */
+const isLocalOrigin = () => {
+  try {
+    const {
+      hostname
+    } = window.location;
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname.endsWith('.local');
+  } catch {
+    return false;
+  }
+};
+const readQueryParam = () => {
+  try {
+    const raw = new URLSearchParams(window.location.search).get(CONSENT_OVERRIDE_QUERY_PARAM);
+    if (!isConsentState(raw)) {
+      return null;
+    }
+    // `denied` can only ever collect less, so a link may set it anywhere.
+    if (raw === 'denied' || isLocalOrigin()) {
+      return raw;
+    }
+    console.warn(`[w5-consent] ignoring ?${CONSENT_OVERRIDE_QUERY_PARAM}=${raw} — only "denied" is accepted from a URL off a local origin. ` + `Set localStorage["${CONSENT_OVERRIDE_KEY}"] = "${raw}" instead.`);
+    return null;
+  } catch {
+    return null;
+  }
+};
+const readStorage = () => {
+  try {
+    const raw = localStorage.getItem(CONSENT_OVERRIDE_KEY);
+    return isConsentState(raw) ? raw : null;
+  } catch {
+    return null;
+  }
+};
+
+/** The forced consent state, or `null` when no override is active. */
+const getConsentOverride = () => readQueryParam() ?? readStorage();
+exports.getConsentOverride = getConsentOverride;
+const overrideSnapshot = state => ({
+  analytics: state,
+  marketing: state,
+  performance: state
+});
+
+/** Persist the override and apply it on the next load. `null` clears it. */
+exports.overrideSnapshot = overrideSnapshot;
+const setConsentOverride = state => {
+  try {
+    if (state) {
+      localStorage.setItem(CONSENT_OVERRIDE_KEY, state);
+    } else {
+      localStorage.removeItem(CONSENT_OVERRIDE_KEY);
+    }
+  } catch {
+    // Ignore — the override simply won't persist.
+  }
+};
+exports.setConsentOverride = setConsentOverride;
+//# sourceMappingURL=consentOverride.js.map

package/dist/cjs/privacy/consentOverride.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CONSENT_OVERRIDE_KEY","exports","CONSENT_OVERRIDE_QUERY_PARAM","VALID","isConsentState","value","includes","isLocalOrigin","hostname","window","location","endsWith","readQueryParam","raw","URLSearchParams","search","get","console","warn","readStorage","localStorage","getItem","getConsentOverride","overrideSnapshot","state","analytics","marketing","performance","setConsentOverride","setItem","removeItem"],"sources":["../../../src/privacy/consentOverride.ts"],"sourcesContent":["/**\n * Consent override (debug-only) — DL #218.\n *\n * Shopify only serves its cookie banner where consent is legally required, so\n * from most of the world `shouldShowBanner()` is `false` and there is no way to\n * reach the `unknown` or `denied` branches by hand. Development stores often\n * have no privacy configuration at all, which pins the gate at `unknown`\n * forever. Neither is a bug, and both make the interesting states unreachable\n * from a browser.\n *\n * This forces the gate's answer so all four rows of the truth table can be\n * walked on any store, in any region, published or not.\n *\n *   ?w5consent=granted | denied | unknown      (one-shot)\n *   localStorage[\"w5_consent_override\"]        (sticky)\n *\n * **The two are not equally trusted, on purpose.** A link is something one\n * person can send another, so a query param may only ever *reduce* what is\n * collected: `denied` is honoured anywhere, while `granted` and `unknown` are\n * honoured only on a local origin. Turning tracking *on* for someone else by\n * sending them a URL is exactly the thing this whole feature exists to\n * prevent. On a real storefront, set the localStorage key in devtools — which\n * is a deliberate act by the person whose browser it is.\n */\n\nimport type { ConsentSnapshot, ConsentState } from './types';\n\nexport const CONSENT_OVERRIDE_KEY = 'w5_consent_override';\nexport const CONSENT_OVERRIDE_QUERY_PARAM = 'w5consent';\n\nconst VALID: readonly ConsentState[] = ['granted', 'denied', 'unknown'];\n\nconst isConsentState = (value: unknown): value is ConsentState =>\n  typeof value === 'string' && (VALID as readonly string[]).includes(value);\n\n/** Only a local origin may force a *more* permissive state from a URL. */\nconst isLocalOrigin = (): boolean => {\n  try {\n    const { hostname } = window.location;\n    return (\n      hostname === 'localhost' ||\n      hostname === '127.0.0.1' ||\n      hostname.endsWith('.local')\n    );\n  } catch {\n    return false;\n  }\n};\n\nconst readQueryParam = (): ConsentState | null => {\n  try {\n    const raw = new URLSearchParams(window.location.search).get(\n      CONSENT_OVERRIDE_QUERY_PARAM,\n    );\n    if (!isConsentState(raw)) {\n      return null;\n    }\n    // `denied` can only ever collect less, so a link may set it anywhere.\n    if (raw === 'denied' || isLocalOrigin()) {\n      return raw;\n    }\n    console.warn(\n      `[w5-consent] ignoring ?${CONSENT_OVERRIDE_QUERY_PARAM}=${raw} — only \"denied\" is accepted from a URL off a local origin. ` +\n        `Set localStorage[\"${CONSENT_OVERRIDE_KEY}\"] = \"${raw}\" instead.`,\n    );\n    return null;\n  } catch {\n    return null;\n  }\n};\n\nconst readStorage = (): ConsentState | null => {\n  try {\n    const raw = localStorage.getItem(CONSENT_OVERRIDE_KEY);\n    return isConsentState(raw) ? raw : null;\n  } catch {\n    return null;\n  }\n};\n\n/** The forced consent state, or `null` when no override is active. */\nexport const getConsentOverride = (): ConsentState | null =>\n  readQueryParam() ?? readStorage();\n\nexport const overrideSnapshot = (state: ConsentState): ConsentSnapshot => ({\n  analytics: state,\n  marketing: state,\n  performance: state,\n});\n\n/** Persist the override and apply it on the next load. `null` clears it. */\nexport const setConsentOverride = (state: ConsentState | null): void => {\n  try {\n    if (state) {\n      localStorage.setItem(CONSENT_OVERRIDE_KEY, state);\n    } else {\n      localStorage.removeItem(CONSENT_OVERRIDE_KEY);\n    }\n  } catch {\n    // Ignore — the override simply won't persist.\n  }\n};\n"],"mappings":";;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIO,MAAMA,oBAAoB,GAAAC,OAAA,CAAAD,oBAAA,GAAG,qBAAqB;AAClD,MAAME,4BAA4B,GAAAD,OAAA,CAAAC,4BAAA,GAAG,WAAW;AAEvD,MAAMC,KAA8B,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;AAEvE,MAAMC,cAAc,GAAIC,KAAc,IACpC,OAAOA,KAAK,KAAK,QAAQ,IAAKF,KAAK,CAAuBG,QAAQ,CAACD,KAAK,CAAC;;AAE3E;AACA,MAAME,aAAa,GAAGA,CAAA,KAAe;EACnC,IAAI;IACF,MAAM;MAAEC;IAAS,CAAC,GAAGC,MAAM,CAACC,QAAQ;IACpC,OACEF,QAAQ,KAAK,WAAW,IACxBA,QAAQ,KAAK,WAAW,IACxBA,QAAQ,CAACG,QAAQ,CAAC,QAAQ,CAAC;EAE/B,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF,CAAC;AAED,MAAMC,cAAc,GAAGA,CAAA,KAA2B;EAChD,IAAI;IACF,MAAMC,GAAG,GAAG,IAAIC,eAAe,CAACL,MAAM,CAACC,QAAQ,CAACK,MAAM,CAAC,CAACC,GAAG,CACzDd,4BACF,CAAC;IACD,IAAI,CAACE,cAAc,CAACS,GAAG,CAAC,EAAE;MACxB,OAAO,IAAI;IACb;IACA;IACA,IAAIA,GAAG,KAAK,QAAQ,IAAIN,aAAa,CAAC,CAAC,EAAE;MACvC,OAAOM,GAAG;IACZ;IACAI,OAAO,CAACC,IAAI,CACV,0BAA0BhB,4BAA4B,IAAIW,GAAG,8DAA8D,GACzH,qBAAqBb,oBAAoB,SAASa,GAAG,YACzD,CAAC;IACD,OAAO,IAAI;EACb,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF,CAAC;AAED,MAAMM,WAAW,GAAGA,CAAA,KAA2B;EAC7C,IAAI;IACF,MAAMN,GAAG,GAAGO,YAAY,CAACC,OAAO,CAACrB,oBAAoB,CAAC;IACtD,OAAOI,cAAc,CAACS,GAAG,CAAC,GAAGA,GAAG,GAAG,IAAI;EACzC,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF,CAAC;;AAED;AACO,MAAMS,kBAAkB,GAAGA,CAAA,KAChCV,cAAc,CAAC,CAAC,IAAIO,WAAW,CAAC,CAAC;AAAClB,OAAA,CAAAqB,kBAAA,GAAAA,kBAAA;AAE7B,MAAMC,gBAAgB,GAAIC,KAAmB,KAAuB;EACzEC,SAAS,EAAED,KAAK;EAChBE,SAAS,EAAEF,KAAK;EAChBG,WAAW,EAAEH;AACf,CAAC,CAAC;;AAEF;AAAAvB,OAAA,CAAAsB,gBAAA,GAAAA,gBAAA;AACO,MAAMK,kBAAkB,GAAIJ,KAA0B,IAAW;EACtE,IAAI;IACF,IAAIA,KAAK,EAAE;MACTJ,YAAY,CAACS,OAAO,CAAC7B,oBAAoB,EAAEwB,KAAK,CAAC;IACnD,CAAC,MAAM;MACLJ,YAAY,CAACU,UAAU,CAAC9B,oBAAoB,CAAC;IAC/C;EACF,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAACC,OAAA,CAAA2B,kBAAA,GAAAA,kBAAA","ignoreList":[]}

package/dist/cjs/privacy/detectProvider.js

@@ -0,0 +1,71 @@
+"use strict";
+
+exports.__esModule = true;
+exports.initConsentGate = exports.detectConsentProvider = void 0;
+var _consentGate = require("./consentGate");
+var _consentOverride = require("./consentOverride");
+var _hostSuppliedProvider = require("./providers/hostSuppliedProvider");
+var _shopifyProvider = require("./providers/shopifyProvider");
+var _oneTrustProvider = require("./providers/oneTrustProvider");
+/**
+ * Provider selection — DL #218.
+ *
+ * Detected at boot, not configured per client, because a merchant can install
+ * a CMP long after we deploy and the bundle is not the source of truth for a
+ * store's behaviour (DL #214).
+ *
+ * Order is host-supplied → Shopify → OneTrust → none. A host that publishes an
+ * answer outranks anything we could sniff, because it knows things we cannot:
+ * a server-side consent record, a CMP behind its own abstraction, or a legal
+ * position we have no business guessing at.
+ *
+ * When nothing is detected the gate keeps its default — everything `unknown`,
+ * held until the visitor acts. That is the case on every Shopify store with no
+ * privacy configuration, which today is most of them.
+ */
+
+const detectConsentProvider = () => {
+  // Debug override outranks every real signal, so the states a region or an
+  // unconfigured store makes unreachable can still be walked by hand.
+  const forced = (0, _consentOverride.getConsentOverride)();
+  if (forced) {
+    console.warn(`[w5-consent] OVERRIDE ACTIVE — consent forced to "${forced}". This is a debug switch, not a real answer.`);
+    return {
+      name: `override:${forced}`,
+      read: () => (0, _consentOverride.overrideSnapshot)(forced),
+      subscribe: () => () => {}
+    };
+  }
+  if ((0, _hostSuppliedProvider.hasHostSuppliedConsent)()) {
+    return (0, _hostSuppliedProvider.createHostSuppliedConsentProvider)();
+  }
+  if ((0, _shopifyProvider.isShopifyHost)()) {
+    return (0, _shopifyProvider.createShopifyConsentProvider)();
+  }
+  if ((0, _oneTrustProvider.isOneTrustHost)()) {
+    return (0, _oneTrustProvider.createOneTrustConsentProvider)();
+  }
+  return null;
+};
+
+/**
+ * Install the detected provider, if any. Call once at boot, before the first
+ * emitter runs — anything raised earlier is held rather than lost, but the
+ * sooner this runs the less the buffer has to carry.
+ */
+exports.detectConsentProvider = detectConsentProvider;
+const initConsentGate = () => {
+  const provider = detectConsentProvider();
+  if (provider) {
+    (0, _consentGate.installConsentProvider)(provider);
+  } else {
+    try {
+      console.log('[w5-consent] no CMP detected (no host-supplied consent, no Shopify customerPrivacy, no OneTrust) — everything held until the visitor submits a prompt');
+    } catch {
+      /* never break on a console */
+    }
+  }
+  return provider;
+};
+exports.initConsentGate = initConsentGate;
+//# sourceMappingURL=detectProvider.js.map

package/dist/cjs/privacy/detectProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_consentGate","require","_consentOverride","_hostSuppliedProvider","_shopifyProvider","_oneTrustProvider","detectConsentProvider","forced","getConsentOverride","console","warn","name","read","overrideSnapshot","subscribe","hasHostSuppliedConsent","createHostSuppliedConsentProvider","isShopifyHost","createShopifyConsentProvider","isOneTrustHost","createOneTrustConsentProvider","exports","initConsentGate","provider","installConsentProvider","log"],"sources":["../../../src/privacy/detectProvider.ts"],"sourcesContent":["/**\n * Provider selection — DL #218.\n *\n * Detected at boot, not configured per client, because a merchant can install\n * a CMP long after we deploy and the bundle is not the source of truth for a\n * store's behaviour (DL #214).\n *\n * Order is host-supplied → Shopify → OneTrust → none. A host that publishes an\n * answer outranks anything we could sniff, because it knows things we cannot:\n * a server-side consent record, a CMP behind its own abstraction, or a legal\n * position we have no business guessing at.\n *\n * When nothing is detected the gate keeps its default — everything `unknown`,\n * held until the visitor acts. That is the case on every Shopify store with no\n * privacy configuration, which today is most of them.\n */\n\nimport { installConsentProvider } from './consentGate';\nimport { getConsentOverride, overrideSnapshot } from './consentOverride';\nimport type { ConsentProvider } from './types';\nimport {\n  createHostSuppliedConsentProvider,\n  hasHostSuppliedConsent,\n} from './providers/hostSuppliedProvider';\nimport {\n  createShopifyConsentProvider,\n  isShopifyHost,\n} from './providers/shopifyProvider';\nimport {\n  createOneTrustConsentProvider,\n  isOneTrustHost,\n} from './providers/oneTrustProvider';\n\nexport const detectConsentProvider = (): ConsentProvider | null => {\n  // Debug override outranks every real signal, so the states a region or an\n  // unconfigured store makes unreachable can still be walked by hand.\n  const forced = getConsentOverride();\n  if (forced) {\n    console.warn(\n      `[w5-consent] OVERRIDE ACTIVE — consent forced to \"${forced}\". This is a debug switch, not a real answer.`,\n    );\n    return {\n      name: `override:${forced}`,\n      read: () => overrideSnapshot(forced),\n      subscribe: () => () => {},\n    };\n  }\n  if (hasHostSuppliedConsent()) {\n    return createHostSuppliedConsentProvider();\n  }\n  if (isShopifyHost()) {\n    return createShopifyConsentProvider();\n  }\n  if (isOneTrustHost()) {\n    return createOneTrustConsentProvider();\n  }\n  return null;\n};\n\n/**\n * Install the detected provider, if any. Call once at boot, before the first\n * emitter runs — anything raised earlier is held rather than lost, but the\n * sooner this runs the less the buffer has to carry.\n */\nexport const initConsentGate = (): ConsentProvider | null => {\n  const provider = detectConsentProvider();\n  if (provider) {\n    installConsentProvider(provider);\n  } else {\n    try {\n      console.log(\n        '[w5-consent] no CMP detected (no host-supplied consent, no Shopify customerPrivacy, no OneTrust) — everything held until the visitor submits a prompt',\n      );\n    } catch {\n      /* never break on a console */\n    }\n  }\n  return provider;\n};\n"],"mappings":";;;;AAiBA,IAAAA,YAAA,GAAAC,OAAA;AACA,IAAAC,gBAAA,GAAAD,OAAA;AAEA,IAAAE,qBAAA,GAAAF,OAAA;AAIA,IAAAG,gBAAA,GAAAH,OAAA;AAIA,IAAAI,iBAAA,GAAAJ,OAAA;AA5BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBO,MAAMK,qBAAqB,GAAGA,CAAA,KAA8B;EACjE;EACA;EACA,MAAMC,MAAM,GAAG,IAAAC,mCAAkB,EAAC,CAAC;EACnC,IAAID,MAAM,EAAE;IACVE,OAAO,CAACC,IAAI,CACV,qDAAqDH,MAAM,+CAC7D,CAAC;IACD,OAAO;MACLI,IAAI,EAAE,YAAYJ,MAAM,EAAE;MAC1BK,IAAI,EAAEA,CAAA,KAAM,IAAAC,iCAAgB,EAACN,MAAM,CAAC;MACpCO,SAAS,EAAEA,CAAA,KAAM,MAAM,CAAC;IAC1B,CAAC;EACH;EACA,IAAI,IAAAC,4CAAsB,EAAC,CAAC,EAAE;IAC5B,OAAO,IAAAC,uDAAiC,EAAC,CAAC;EAC5C;EACA,IAAI,IAAAC,8BAAa,EAAC,CAAC,EAAE;IACnB,OAAO,IAAAC,6CAA4B,EAAC,CAAC;EACvC;EACA,IAAI,IAAAC,gCAAc,EAAC,CAAC,EAAE;IACpB,OAAO,IAAAC,+CAA6B,EAAC,CAAC;EACxC;EACA,OAAO,IAAI;AACb,CAAC;;AAED;AACA;AACA;AACA;AACA;AAJAC,OAAA,CAAAf,qBAAA,GAAAA,qBAAA;AAKO,MAAMgB,eAAe,GAAGA,CAAA,KAA8B;EAC3D,MAAMC,QAAQ,GAAGjB,qBAAqB,CAAC,CAAC;EACxC,IAAIiB,QAAQ,EAAE;IACZ,IAAAC,mCAAsB,EAACD,QAAQ,CAAC;EAClC,CAAC,MAAM;IACL,IAAI;MACFd,OAAO,CAACgB,GAAG,CACT,uJACF,CAAC;IACH,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EACA,OAAOF,QAAQ;AACjB,CAAC;AAACF,OAAA,CAAAC,eAAA,GAAAA,eAAA","ignoreList":[]}

package/dist/cjs/privacy/index.js

@@ -0,0 +1,40 @@
+"use strict";
+
+exports.__esModule = true;
+exports.unlockOnUserAction = exports.transmit = exports.subscribeToConsent = exports.setConsentOverride = exports.setConsentBufferLimit = exports.resetConsentGateForTests = exports.publishHostConsent = exports.mayTransmit = exports.mayPersistIdentity = exports.isUserEngaged = exports.isShopifyHost = exports.isOneTrustHost = exports.installConsentProvider = exports.initConsentGate = exports.hasHostSuppliedConsent = exports.getInstalledProviderName = exports.getGateView = exports.getConsentSnapshot = exports.getConsentOverride = exports.getConsentGateStats = exports.detectConsentProvider = exports.createShopifyConsentProvider = exports.createOneTrustConsentProvider = exports.createHostSuppliedConsentProvider = exports.UNKNOWN_CONSENT = exports.HOST_CONSENT_GLOBAL = exports.CONSENT_OVERRIDE_QUERY_PARAM = exports.CONSENT_OVERRIDE_KEY = void 0;
+var _types = require("./types");
+exports.UNKNOWN_CONSENT = _types.UNKNOWN_CONSENT;
+var _consentGate = require("./consentGate");
+exports.transmit = _consentGate.transmit;
+exports.mayTransmit = _consentGate.mayTransmit;
+exports.unlockOnUserAction = _consentGate.unlockOnUserAction;
+exports.isUserEngaged = _consentGate.isUserEngaged;
+exports.mayPersistIdentity = _consentGate.mayPersistIdentity;
+exports.getConsentSnapshot = _consentGate.getConsentSnapshot;
+exports.getGateView = _consentGate.getGateView;
+exports.subscribeToConsent = _consentGate.subscribeToConsent;
+exports.installConsentProvider = _consentGate.installConsentProvider;
+exports.getInstalledProviderName = _consentGate.getInstalledProviderName;
+exports.setConsentBufferLimit = _consentGate.setConsentBufferLimit;
+exports.getConsentGateStats = _consentGate.getConsentGateStats;
+exports.resetConsentGateForTests = _consentGate.resetConsentGateForTests;
+var _detectProvider = require("./detectProvider");
+exports.detectConsentProvider = _detectProvider.detectConsentProvider;
+exports.initConsentGate = _detectProvider.initConsentGate;
+var _consentOverride = require("./consentOverride");
+exports.CONSENT_OVERRIDE_KEY = _consentOverride.CONSENT_OVERRIDE_KEY;
+exports.CONSENT_OVERRIDE_QUERY_PARAM = _consentOverride.CONSENT_OVERRIDE_QUERY_PARAM;
+exports.getConsentOverride = _consentOverride.getConsentOverride;
+exports.setConsentOverride = _consentOverride.setConsentOverride;
+var _shopifyProvider = require("./providers/shopifyProvider");
+exports.createShopifyConsentProvider = _shopifyProvider.createShopifyConsentProvider;
+exports.isShopifyHost = _shopifyProvider.isShopifyHost;
+var _oneTrustProvider = require("./providers/oneTrustProvider");
+exports.createOneTrustConsentProvider = _oneTrustProvider.createOneTrustConsentProvider;
+exports.isOneTrustHost = _oneTrustProvider.isOneTrustHost;
+var _hostSuppliedProvider = require("./providers/hostSuppliedProvider");
+exports.HOST_CONSENT_GLOBAL = _hostSuppliedProvider.HOST_CONSENT_GLOBAL;
+exports.createHostSuppliedConsentProvider = _hostSuppliedProvider.createHostSuppliedConsentProvider;
+exports.hasHostSuppliedConsent = _hostSuppliedProvider.hasHostSuppliedConsent;
+exports.publishHostConsent = _hostSuppliedProvider.publishHostConsent;
+//# sourceMappingURL=index.js.map

package/dist/cjs/privacy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_types","require","exports","UNKNOWN_CONSENT","_consentGate","transmit","mayTransmit","unlockOnUserAction","isUserEngaged","mayPersistIdentity","getConsentSnapshot","getGateView","subscribeToConsent","installConsentProvider","getInstalledProviderName","setConsentBufferLimit","getConsentGateStats","resetConsentGateForTests","_detectProvider","detectConsentProvider","initConsentGate","_consentOverride","CONSENT_OVERRIDE_KEY","CONSENT_OVERRIDE_QUERY_PARAM","getConsentOverride","setConsentOverride","_shopifyProvider","createShopifyConsentProvider","isShopifyHost","_oneTrustProvider","createOneTrustConsentProvider","isOneTrustHost","_hostSuppliedProvider","HOST_CONSENT_GLOBAL","createHostSuppliedConsentProvider","hasHostSuppliedConsent","publishHostConsent"],"sources":["../../../src/privacy/index.ts"],"sourcesContent":["export {\n  type ConsentState,\n  type ConsentPurpose,\n  type GatedPurpose,\n  type ConsentSnapshot,\n  type ConsentProvider,\n  UNKNOWN_CONSENT,\n} from './types';\n\nexport {\n  type GateView,\n  transmit,\n  mayTransmit,\n  unlockOnUserAction,\n  isUserEngaged,\n  mayPersistIdentity,\n  getConsentSnapshot,\n  getGateView,\n  subscribeToConsent,\n  installConsentProvider,\n  getInstalledProviderName,\n  setConsentBufferLimit,\n  getConsentGateStats,\n  resetConsentGateForTests,\n} from './consentGate';\n\nexport { detectConsentProvider, initConsentGate } from './detectProvider';\n\nexport {\n  CONSENT_OVERRIDE_KEY,\n  CONSENT_OVERRIDE_QUERY_PARAM,\n  getConsentOverride,\n  setConsentOverride,\n} from './consentOverride';\n\nexport {\n  createShopifyConsentProvider,\n  isShopifyHost,\n} from './providers/shopifyProvider';\nexport {\n  createOneTrustConsentProvider,\n  isOneTrustHost,\n} from './providers/oneTrustProvider';\nexport {\n  type HostConsentInput,\n  HOST_CONSENT_GLOBAL,\n  createHostSuppliedConsentProvider,\n  hasHostSuppliedConsent,\n  publishHostConsent,\n} from './providers/hostSuppliedProvider';\n"],"mappings":";;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAOiBC,OAAA,CAAAC,eAAA,GAAAH,MAAA,CAAAG,eAAA;AAEjB,IAAAC,YAAA,GAAAH,OAAA;AAeuBC,OAAA,CAAAG,QAAA,GAAAD,YAAA,CAAAC,QAAA;AAAAH,OAAA,CAAAI,WAAA,GAAAF,YAAA,CAAAE,WAAA;AAAAJ,OAAA,CAAAK,kBAAA,GAAAH,YAAA,CAAAG,kBAAA;AAAAL,OAAA,CAAAM,aAAA,GAAAJ,YAAA,CAAAI,aAAA;AAAAN,OAAA,CAAAO,kBAAA,GAAAL,YAAA,CAAAK,kBAAA;AAAAP,OAAA,CAAAQ,kBAAA,GAAAN,YAAA,CAAAM,kBAAA;AAAAR,OAAA,CAAAS,WAAA,GAAAP,YAAA,CAAAO,WAAA;AAAAT,OAAA,CAAAU,kBAAA,GAAAR,YAAA,CAAAQ,kBAAA;AAAAV,OAAA,CAAAW,sBAAA,GAAAT,YAAA,CAAAS,sBAAA;AAAAX,OAAA,CAAAY,wBAAA,GAAAV,YAAA,CAAAU,wBAAA;AAAAZ,OAAA,CAAAa,qBAAA,GAAAX,YAAA,CAAAW,qBAAA;AAAAb,OAAA,CAAAc,mBAAA,GAAAZ,YAAA,CAAAY,mBAAA;AAAAd,OAAA,CAAAe,wBAAA,GAAAb,YAAA,CAAAa,wBAAA;AAEvB,IAAAC,eAAA,GAAAjB,OAAA;AAA0EC,OAAA,CAAAiB,qBAAA,GAAAD,eAAA,CAAAC,qBAAA;AAAAjB,OAAA,CAAAkB,eAAA,GAAAF,eAAA,CAAAE,eAAA;AAE1E,IAAAC,gBAAA,GAAApB,OAAA;AAK2BC,OAAA,CAAAoB,oBAAA,GAAAD,gBAAA,CAAAC,oBAAA;AAAApB,OAAA,CAAAqB,4BAAA,GAAAF,gBAAA,CAAAE,4BAAA;AAAArB,OAAA,CAAAsB,kBAAA,GAAAH,gBAAA,CAAAG,kBAAA;AAAAtB,OAAA,CAAAuB,kBAAA,GAAAJ,gBAAA,CAAAI,kBAAA;AAE3B,IAAAC,gBAAA,GAAAzB,OAAA;AAGqCC,OAAA,CAAAyB,4BAAA,GAAAD,gBAAA,CAAAC,4BAAA;AAAAzB,OAAA,CAAA0B,aAAA,GAAAF,gBAAA,CAAAE,aAAA;AACrC,IAAAC,iBAAA,GAAA5B,OAAA;AAGsCC,OAAA,CAAA4B,6BAAA,GAAAD,iBAAA,CAAAC,6BAAA;AAAA5B,OAAA,CAAA6B,cAAA,GAAAF,iBAAA,CAAAE,cAAA;AACtC,IAAAC,qBAAA,GAAA/B,OAAA;AAM0CC,OAAA,CAAA+B,mBAAA,GAAAD,qBAAA,CAAAC,mBAAA;AAAA/B,OAAA,CAAAgC,iCAAA,GAAAF,qBAAA,CAAAE,iCAAA;AAAAhC,OAAA,CAAAiC,sBAAA,GAAAH,qBAAA,CAAAG,sBAAA;AAAAjC,OAAA,CAAAkC,kBAAA,GAAAJ,qBAAA,CAAAI,kBAAA","ignoreList":[]}

package/dist/cjs/privacy/providers/hostSuppliedProvider.js

@@ -0,0 +1,89 @@
+"use strict";
+
+exports.__esModule = true;
+exports.publishHostConsent = exports.hasHostSuppliedConsent = exports.createHostSuppliedConsentProvider = exports.__resetHostConsentForTests = exports.HOST_CONSENT_GLOBAL = void 0;
+var _types = require("../types");
+/**
+ * Host-supplied provider — DL #218.
+ *
+ * The escape hatch for every CMP we cannot detect: a host page that already
+ * knows its visitor's answer publishes it, and the gate believes it. This is
+ * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach
+ * the gate without web5 learning each vendor's API.
+ *
+ * Two ways in, because hosts differ in when they know:
+ *   - `window.__web5_consent__` set before the bundle loads, read at install
+ *   - `publishHostConsent()` called at any time afterwards
+ */
+
+const HOST_CONSENT_GLOBAL = exports.HOST_CONSENT_GLOBAL = '__web5_consent__';
+
+/** What a host may publish. Anything missing stays `unknown`. */
+
+const coerce = value => {
+  if (value === true) return 'granted';
+  if (value === false) return 'denied';
+  if (value === 'granted' || value === 'denied' || value === 'unknown') {
+    return value;
+  }
+  return 'unknown';
+};
+const normalize = input => {
+  if (!input || typeof input !== 'object') {
+    return _types.UNKNOWN_CONSENT;
+  }
+  const analytics = coerce(input.analytics);
+  return {
+    analytics,
+    marketing: coerce(input.marketing),
+    // A host that speaks only about analytics is taken to mean the same for
+    // load telemetry, which is the same wire and the same recipient.
+    performance: input.performance === undefined ? analytics : coerce(input.performance)
+  };
+};
+const readGlobal = () => {
+  if (typeof window === 'undefined') {
+    return _types.UNKNOWN_CONSENT;
+  }
+  const raw = window[HOST_CONSENT_GLOBAL];
+  return normalize(raw);
+};
+const hasHostSuppliedConsent = () => {
+  if (typeof window === 'undefined') {
+    return false;
+  }
+  const raw = window[HOST_CONSENT_GLOBAL];
+  return !!raw && typeof raw === 'object';
+};
+exports.hasHostSuppliedConsent = hasHostSuppliedConsent;
+const subscribers = new Set();
+let published = null;
+
+/**
+ * Called by the host — directly, or by the loader when it is handed consent in
+ * its boot options — whenever the visitor's answer is known or changes.
+ */
+const publishHostConsent = input => {
+  published = normalize(input);
+  for (const subscriber of subscribers) {
+    subscriber(published);
+  }
+};
+exports.publishHostConsent = publishHostConsent;
+const createHostSuppliedConsentProvider = () => ({
+  name: 'host-supplied',
+  read: () => published ?? readGlobal(),
+  subscribe(onChange) {
+    subscribers.add(onChange);
+    return () => {
+      subscribers.delete(onChange);
+    };
+  }
+});
+exports.createHostSuppliedConsentProvider = createHostSuppliedConsentProvider;
+const __resetHostConsentForTests = () => {
+  published = null;
+  subscribers.clear();
+};
+exports.__resetHostConsentForTests = __resetHostConsentForTests;
+//# sourceMappingURL=hostSuppliedProvider.js.map

package/dist/cjs/privacy/providers/hostSuppliedProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_types","require","HOST_CONSENT_GLOBAL","exports","coerce","value","normalize","input","UNKNOWN_CONSENT","analytics","marketing","performance","undefined","readGlobal","window","raw","hasHostSuppliedConsent","subscribers","Set","published","publishHostConsent","subscriber","createHostSuppliedConsentProvider","name","read","subscribe","onChange","add","delete","__resetHostConsentForTests","clear"],"sources":["../../../../src/privacy/providers/hostSuppliedProvider.ts"],"sourcesContent":["/**\n * Host-supplied provider — DL #218.\n *\n * The escape hatch for every CMP we cannot detect: a host page that already\n * knows its visitor's answer publishes it, and the gate believes it. This is\n * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach\n * the gate without web5 learning each vendor's API.\n *\n * Two ways in, because hosts differ in when they know:\n *   - `window.__web5_consent__` set before the bundle loads, read at install\n *   - `publishHostConsent()` called at any time afterwards\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n  type ConsentState,\n} from '../types';\n\nexport const HOST_CONSENT_GLOBAL = '__web5_consent__';\n\n/** What a host may publish. Anything missing stays `unknown`. */\nexport interface HostConsentInput {\n  analytics?: ConsentState | boolean;\n  marketing?: ConsentState | boolean;\n  performance?: ConsentState | boolean;\n}\n\nconst coerce = (value: ConsentState | boolean | undefined): ConsentState => {\n  if (value === true) return 'granted';\n  if (value === false) return 'denied';\n  if (value === 'granted' || value === 'denied' || value === 'unknown') {\n    return value;\n  }\n  return 'unknown';\n};\n\nconst normalize = (input: HostConsentInput | null | undefined): ConsentSnapshot => {\n  if (!input || typeof input !== 'object') {\n    return UNKNOWN_CONSENT;\n  }\n  const analytics = coerce(input.analytics);\n  return {\n    analytics,\n    marketing: coerce(input.marketing),\n    // A host that speaks only about analytics is taken to mean the same for\n    // load telemetry, which is the same wire and the same recipient.\n    performance:\n      input.performance === undefined ? analytics : coerce(input.performance),\n  };\n};\n\nconst readGlobal = (): ConsentSnapshot => {\n  if (typeof window === 'undefined') {\n    return UNKNOWN_CONSENT;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[HOST_CONSENT_GLOBAL];\n  return normalize(raw as HostConsentInput | undefined);\n};\n\nexport const hasHostSuppliedConsent = (): boolean => {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[HOST_CONSENT_GLOBAL];\n  return !!raw && typeof raw === 'object';\n};\n\nconst subscribers = new Set<(snapshot: ConsentSnapshot) => void>();\nlet published: ConsentSnapshot | null = null;\n\n/**\n * Called by the host — directly, or by the loader when it is handed consent in\n * its boot options — whenever the visitor's answer is known or changes.\n */\nexport const publishHostConsent = (input: HostConsentInput): void => {\n  published = normalize(input);\n  for (const subscriber of subscribers) {\n    subscriber(published);\n  }\n};\n\nexport const createHostSuppliedConsentProvider = (): ConsentProvider => ({\n  name: 'host-supplied',\n\n  read: () => published ?? readGlobal(),\n\n  subscribe(onChange) {\n    subscribers.add(onChange);\n    return () => {\n      subscribers.delete(onChange);\n    };\n  },\n});\n\nexport const __resetHostConsentForTests = (): void => {\n  published = null;\n  subscribers.clear();\n};\n"],"mappings":";;;;AAaA,IAAAA,MAAA,GAAAC,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASO,MAAMC,mBAAmB,GAAAC,OAAA,CAAAD,mBAAA,GAAG,kBAAkB;;AAErD;;AAOA,MAAME,MAAM,GAAIC,KAAyC,IAAmB;EAC1E,IAAIA,KAAK,KAAK,IAAI,EAAE,OAAO,SAAS;EACpC,IAAIA,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ;EACpC,IAAIA,KAAK,KAAK,SAAS,IAAIA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,SAAS,EAAE;IACpE,OAAOA,KAAK;EACd;EACA,OAAO,SAAS;AAClB,CAAC;AAED,MAAMC,SAAS,GAAIC,KAA0C,IAAsB;EACjF,IAAI,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;IACvC,OAAOC,sBAAe;EACxB;EACA,MAAMC,SAAS,GAAGL,MAAM,CAACG,KAAK,CAACE,SAAS,CAAC;EACzC,OAAO;IACLA,SAAS;IACTC,SAAS,EAAEN,MAAM,CAACG,KAAK,CAACG,SAAS,CAAC;IAClC;IACA;IACAC,WAAW,EACTJ,KAAK,CAACI,WAAW,KAAKC,SAAS,GAAGH,SAAS,GAAGL,MAAM,CAACG,KAAK,CAACI,WAAW;EAC1E,CAAC;AACH,CAAC;AAED,MAAME,UAAU,GAAGA,CAAA,KAAuB;EACxC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAON,sBAAe;EACxB;EACA,MAAMO,GAAG,GAAID,MAAM,CAAwCZ,mBAAmB,CAAC;EAC/E,OAAOI,SAAS,CAACS,GAAmC,CAAC;AACvD,CAAC;AAEM,MAAMC,sBAAsB,GAAGA,CAAA,KAAe;EACnD,IAAI,OAAOF,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,KAAK;EACd;EACA,MAAMC,GAAG,GAAID,MAAM,CAAwCZ,mBAAmB,CAAC;EAC/E,OAAO,CAAC,CAACa,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ;AACzC,CAAC;AAACZ,OAAA,CAAAa,sBAAA,GAAAA,sBAAA;AAEF,MAAMC,WAAW,GAAG,IAAIC,GAAG,CAAsC,CAAC;AAClE,IAAIC,SAAiC,GAAG,IAAI;;AAE5C;AACA;AACA;AACA;AACO,MAAMC,kBAAkB,GAAIb,KAAuB,IAAW;EACnEY,SAAS,GAAGb,SAAS,CAACC,KAAK,CAAC;EAC5B,KAAK,MAAMc,UAAU,IAAIJ,WAAW,EAAE;IACpCI,UAAU,CAACF,SAAS,CAAC;EACvB;AACF,CAAC;AAAChB,OAAA,CAAAiB,kBAAA,GAAAA,kBAAA;AAEK,MAAME,iCAAiC,GAAGA,CAAA,MAAwB;EACvEC,IAAI,EAAE,eAAe;EAErBC,IAAI,EAAEA,CAAA,KAAML,SAAS,IAAIN,UAAU,CAAC,CAAC;EAErCY,SAASA,CAACC,QAAQ,EAAE;IAClBT,WAAW,CAACU,GAAG,CAACD,QAAQ,CAAC;IACzB,OAAO,MAAM;MACXT,WAAW,CAACW,MAAM,CAACF,QAAQ,CAAC;IAC9B,CAAC;EACH;AACF,CAAC,CAAC;AAACvB,OAAA,CAAAmB,iCAAA,GAAAA,iCAAA;AAEI,MAAMO,0BAA0B,GAAGA,CAAA,KAAY;EACpDV,SAAS,GAAG,IAAI;EAChBF,WAAW,CAACa,KAAK,CAAC,CAAC;AACrB,CAAC;AAAC3B,OAAA,CAAA0B,0BAAA,GAAAA,0BAAA","ignoreList":[]}