@wix/web5-core 1.63.15 → 1.63.17

package/dist/esm/privacy/providers/hostSuppliedProvider.js

@@ -0,0 +1,81 @@
+/**
+ * Host-supplied provider — DL #218.
+ *
+ * The escape hatch for every CMP we cannot detect: a host page that already
+ * knows its visitor's answer publishes it, and the gate believes it. This is
+ * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach
+ * the gate without web5 learning each vendor's API.
+ *
+ * Two ways in, because hosts differ in when they know:
+ *   - `window.__web5_consent__` set before the bundle loads, read at install
+ *   - `publishHostConsent()` called at any time afterwards
+ */
+
+import { UNKNOWN_CONSENT } from '../types.js';
+export const HOST_CONSENT_GLOBAL = '__web5_consent__';
+
+/** What a host may publish. Anything missing stays `unknown`. */
+
+const coerce = value => {
+  if (value === true) return 'granted';
+  if (value === false) return 'denied';
+  if (value === 'granted' || value === 'denied' || value === 'unknown') {
+    return value;
+  }
+  return 'unknown';
+};
+const normalize = input => {
+  if (!input || typeof input !== 'object') {
+    return UNKNOWN_CONSENT;
+  }
+  const analytics = coerce(input.analytics);
+  return {
+    analytics,
+    marketing: coerce(input.marketing),
+    // A host that speaks only about analytics is taken to mean the same for
+    // load telemetry, which is the same wire and the same recipient.
+    performance: input.performance === undefined ? analytics : coerce(input.performance)
+  };
+};
+const readGlobal = () => {
+  if (typeof window === 'undefined') {
+    return UNKNOWN_CONSENT;
+  }
+  const raw = window[HOST_CONSENT_GLOBAL];
+  return normalize(raw);
+};
+export const hasHostSuppliedConsent = () => {
+  if (typeof window === 'undefined') {
+    return false;
+  }
+  const raw = window[HOST_CONSENT_GLOBAL];
+  return !!raw && typeof raw === 'object';
+};
+const subscribers = new Set();
+let published = null;
+
+/**
+ * Called by the host — directly, or by the loader when it is handed consent in
+ * its boot options — whenever the visitor's answer is known or changes.
+ */
+export const publishHostConsent = input => {
+  published = normalize(input);
+  for (const subscriber of subscribers) {
+    subscriber(published);
+  }
+};
+export const createHostSuppliedConsentProvider = () => ({
+  name: 'host-supplied',
+  read: () => published ?? readGlobal(),
+  subscribe(onChange) {
+    subscribers.add(onChange);
+    return () => {
+      subscribers.delete(onChange);
+    };
+  }
+});
+export const __resetHostConsentForTests = () => {
+  published = null;
+  subscribers.clear();
+};
+//# sourceMappingURL=hostSuppliedProvider.js.map

package/dist/esm/privacy/providers/hostSuppliedProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["UNKNOWN_CONSENT","HOST_CONSENT_GLOBAL","coerce","value","normalize","input","analytics","marketing","performance","undefined","readGlobal","window","raw","hasHostSuppliedConsent","subscribers","Set","published","publishHostConsent","subscriber","createHostSuppliedConsentProvider","name","read","subscribe","onChange","add","delete","__resetHostConsentForTests","clear"],"sources":["../../../../src/privacy/providers/hostSuppliedProvider.ts"],"sourcesContent":["/**\n * Host-supplied provider — DL #218.\n *\n * The escape hatch for every CMP we cannot detect: a host page that already\n * knows its visitor's answer publishes it, and the gate believes it. This is\n * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach\n * the gate without web5 learning each vendor's API.\n *\n * Two ways in, because hosts differ in when they know:\n *   - `window.__web5_consent__` set before the bundle loads, read at install\n *   - `publishHostConsent()` called at any time afterwards\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n  type ConsentState,\n} from '../types';\n\nexport const HOST_CONSENT_GLOBAL = '__web5_consent__';\n\n/** What a host may publish. Anything missing stays `unknown`. */\nexport interface HostConsentInput {\n  analytics?: ConsentState | boolean;\n  marketing?: ConsentState | boolean;\n  performance?: ConsentState | boolean;\n}\n\nconst coerce = (value: ConsentState | boolean | undefined): ConsentState => {\n  if (value === true) return 'granted';\n  if (value === false) return 'denied';\n  if (value === 'granted' || value === 'denied' || value === 'unknown') {\n    return value;\n  }\n  return 'unknown';\n};\n\nconst normalize = (input: HostConsentInput | null | undefined): ConsentSnapshot => {\n  if (!input || typeof input !== 'object') {\n    return UNKNOWN_CONSENT;\n  }\n  const analytics = coerce(input.analytics);\n  return {\n    analytics,\n    marketing: coerce(input.marketing),\n    // A host that speaks only about analytics is taken to mean the same for\n    // load telemetry, which is the same wire and the same recipient.\n    performance:\n      input.performance === undefined ? analytics : coerce(input.performance),\n  };\n};\n\nconst readGlobal = (): ConsentSnapshot => {\n  if (typeof window === 'undefined') {\n    return UNKNOWN_CONSENT;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[HOST_CONSENT_GLOBAL];\n  return normalize(raw as HostConsentInput | undefined);\n};\n\nexport const hasHostSuppliedConsent = (): boolean => {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[HOST_CONSENT_GLOBAL];\n  return !!raw && typeof raw === 'object';\n};\n\nconst subscribers = new Set<(snapshot: ConsentSnapshot) => void>();\nlet published: ConsentSnapshot | null = null;\n\n/**\n * Called by the host — directly, or by the loader when it is handed consent in\n * its boot options — whenever the visitor's answer is known or changes.\n */\nexport const publishHostConsent = (input: HostConsentInput): void => {\n  published = normalize(input);\n  for (const subscriber of subscribers) {\n    subscriber(published);\n  }\n};\n\nexport const createHostSuppliedConsentProvider = (): ConsentProvider => ({\n  name: 'host-supplied',\n\n  read: () => published ?? readGlobal(),\n\n  subscribe(onChange) {\n    subscribers.add(onChange);\n    return () => {\n      subscribers.delete(onChange);\n    };\n  },\n});\n\nexport const __resetHostConsentForTests = (): void => {\n  published = null;\n  subscribers.clear();\n};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAIV,UAAU;AAEjB,OAAO,MAAMC,mBAAmB,GAAG,kBAAkB;;AAErD;;AAOA,MAAMC,MAAM,GAAIC,KAAyC,IAAmB;EAC1E,IAAIA,KAAK,KAAK,IAAI,EAAE,OAAO,SAAS;EACpC,IAAIA,KAAK,KAAK,KAAK,EAAE,OAAO,QAAQ;EACpC,IAAIA,KAAK,KAAK,SAAS,IAAIA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,SAAS,EAAE;IACpE,OAAOA,KAAK;EACd;EACA,OAAO,SAAS;AAClB,CAAC;AAED,MAAMC,SAAS,GAAIC,KAA0C,IAAsB;EACjF,IAAI,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;IACvC,OAAOL,eAAe;EACxB;EACA,MAAMM,SAAS,GAAGJ,MAAM,CAACG,KAAK,CAACC,SAAS,CAAC;EACzC,OAAO;IACLA,SAAS;IACTC,SAAS,EAAEL,MAAM,CAACG,KAAK,CAACE,SAAS,CAAC;IAClC;IACA;IACAC,WAAW,EACTH,KAAK,CAACG,WAAW,KAAKC,SAAS,GAAGH,SAAS,GAAGJ,MAAM,CAACG,KAAK,CAACG,WAAW;EAC1E,CAAC;AACH,CAAC;AAED,MAAME,UAAU,GAAGA,CAAA,KAAuB;EACxC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAOX,eAAe;EACxB;EACA,MAAMY,GAAG,GAAID,MAAM,CAAwCV,mBAAmB,CAAC;EAC/E,OAAOG,SAAS,CAACQ,GAAmC,CAAC;AACvD,CAAC;AAED,OAAO,MAAMC,sBAAsB,GAAGA,CAAA,KAAe;EACnD,IAAI,OAAOF,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,KAAK;EACd;EACA,MAAMC,GAAG,GAAID,MAAM,CAAwCV,mBAAmB,CAAC;EAC/E,OAAO,CAAC,CAACW,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ;AACzC,CAAC;AAED,MAAME,WAAW,GAAG,IAAIC,GAAG,CAAsC,CAAC;AAClE,IAAIC,SAAiC,GAAG,IAAI;;AAE5C;AACA;AACA;AACA;AACA,OAAO,MAAMC,kBAAkB,GAAIZ,KAAuB,IAAW;EACnEW,SAAS,GAAGZ,SAAS,CAACC,KAAK,CAAC;EAC5B,KAAK,MAAMa,UAAU,IAAIJ,WAAW,EAAE;IACpCI,UAAU,CAACF,SAAS,CAAC;EACvB;AACF,CAAC;AAED,OAAO,MAAMG,iCAAiC,GAAGA,CAAA,MAAwB;EACvEC,IAAI,EAAE,eAAe;EAErBC,IAAI,EAAEA,CAAA,KAAML,SAAS,IAAIN,UAAU,CAAC,CAAC;EAErCY,SAASA,CAACC,QAAQ,EAAE;IAClBT,WAAW,CAACU,GAAG,CAACD,QAAQ,CAAC;IACzB,OAAO,MAAM;MACXT,WAAW,CAACW,MAAM,CAACF,QAAQ,CAAC;IAC9B,CAAC;EACH;AACF,CAAC,CAAC;AAEF,OAAO,MAAMG,0BAA0B,GAAGA,CAAA,KAAY;EACpDV,SAAS,GAAG,IAAI;EAChBF,WAAW,CAACa,KAAK,CAAC,CAAC;AACrB,CAAC","ignoreList":[]}

package/dist/esm/privacy/providers/oneTrustProvider.js

@@ -0,0 +1,66 @@
+/**
+ * OneTrust provider — DL #218.
+ *
+ * Lifted from the consent check that used to live inside
+ * `utils/analyticsEvents.ts`, with one deliberate behaviour change: that
+ * function returned `true` when OneTrust was absent ("host is responsible for
+ * loading OneTrust"), which on a Shopify storefront meant unconditional
+ * default-allow. Absence is no longer this provider's problem — it is only
+ * selected when OneTrust is actually on the page, and absence is handled by
+ * the gate's own default.
+ */
+
+/** OneTrust's default taxonomy: C0002 is the performance/analytics category. */
+const ANALYTICS_CATEGORY = 'C0002';
+/** C0004 is targeting/advertising. */
+const MARKETING_CATEGORY = 'C0004';
+const readGroups = () => {
+  if (typeof window === 'undefined') {
+    return null;
+  }
+  const groups = window.OnetrustActiveGroups;
+  return typeof groups === 'string' ? groups : null;
+};
+export const isOneTrustHost = () => readGroups() !== null;
+const readSnapshot = () => {
+  const groups = readGroups();
+  if (groups !== null) {
+    try {
+      console.log(`[w5-consent] onetrust: active groups "${groups}"`);
+    } catch {
+      /* never break on a console */
+    }
+  }
+  if (groups === null) {
+    return {
+      analytics: 'unknown',
+      marketing: 'unknown',
+      performance: 'unknown'
+    };
+  }
+  // OneTrust publishes the *active* groups, so a category that is absent from
+  // a string OneTrust has written is a refusal, not silence.
+  const analytics = groups.includes(ANALYTICS_CATEGORY) ? 'granted' : 'denied';
+  const marketing = groups.includes(MARKETING_CATEGORY) ? 'granted' : 'denied';
+  return {
+    analytics,
+    marketing,
+    performance: analytics
+  };
+};
+export const createOneTrustConsentProvider = () => ({
+  name: 'onetrust',
+  read: readSnapshot,
+  subscribe(onChange) {
+    const publish = () => onChange(readSnapshot());
+    if (typeof window === 'undefined') {
+      return () => {};
+    }
+    // OneTrust fires this on every banner interaction.
+    window.addEventListener('OneTrustGroupsUpdated', publish);
+    return () => {
+      window.removeEventListener('OneTrustGroupsUpdated', publish);
+    };
+  }
+});
+//# sourceMappingURL=oneTrustProvider.js.map

package/dist/esm/privacy/providers/oneTrustProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ANALYTICS_CATEGORY","MARKETING_CATEGORY","readGroups","window","groups","OnetrustActiveGroups","isOneTrustHost","readSnapshot","console","log","analytics","marketing","performance","includes","createOneTrustConsentProvider","name","read","subscribe","onChange","publish","addEventListener","removeEventListener"],"sources":["../../../../src/privacy/providers/oneTrustProvider.ts"],"sourcesContent":["/**\n * OneTrust provider — DL #218.\n *\n * Lifted from the consent check that used to live inside\n * `utils/analyticsEvents.ts`, with one deliberate behaviour change: that\n * function returned `true` when OneTrust was absent (\"host is responsible for\n * loading OneTrust\"), which on a Shopify storefront meant unconditional\n * default-allow. Absence is no longer this provider's problem — it is only\n * selected when OneTrust is actually on the page, and absence is handled by\n * the gate's own default.\n */\n\nimport type { ConsentProvider, ConsentSnapshot } from '../types';\n\n/** OneTrust's default taxonomy: C0002 is the performance/analytics category. */\nconst ANALYTICS_CATEGORY = 'C0002';\n/** C0004 is targeting/advertising. */\nconst MARKETING_CATEGORY = 'C0004';\n\nconst readGroups = (): string | null => {\n  if (typeof window === 'undefined') {\n    return null;\n  }\n  const groups = (window as unknown as { OnetrustActiveGroups?: unknown })\n    .OnetrustActiveGroups;\n  return typeof groups === 'string' ? groups : null;\n};\n\nexport const isOneTrustHost = (): boolean => readGroups() !== null;\n\nconst readSnapshot = (): ConsentSnapshot => {\n  const groups = readGroups();\n  if (groups !== null) {\n    try {\n      console.log(`[w5-consent] onetrust: active groups \"${groups}\"`);\n    } catch {\n      /* never break on a console */\n    }\n  }\n  if (groups === null) {\n    return { analytics: 'unknown', marketing: 'unknown', performance: 'unknown' };\n  }\n  // OneTrust publishes the *active* groups, so a category that is absent from\n  // a string OneTrust has written is a refusal, not silence.\n  const analytics = groups.includes(ANALYTICS_CATEGORY) ? 'granted' : 'denied';\n  const marketing = groups.includes(MARKETING_CATEGORY) ? 'granted' : 'denied';\n  return { analytics, marketing, performance: analytics };\n};\n\nexport const createOneTrustConsentProvider = (): ConsentProvider => ({\n  name: 'onetrust',\n\n  read: readSnapshot,\n\n  subscribe(onChange) {\n    const publish = () => onChange(readSnapshot());\n    if (typeof window === 'undefined') {\n      return () => {};\n    }\n    // OneTrust fires this on every banner interaction.\n    window.addEventListener('OneTrustGroupsUpdated', publish);\n    return () => {\n      window.removeEventListener('OneTrustGroupsUpdated', publish);\n    };\n  },\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA,MAAMA,kBAAkB,GAAG,OAAO;AAClC;AACA,MAAMC,kBAAkB,GAAG,OAAO;AAElC,MAAMC,UAAU,GAAGA,CAAA,KAAqB;EACtC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,IAAI;EACb;EACA,MAAMC,MAAM,GAAID,MAAM,CACnBE,oBAAoB;EACvB,OAAO,OAAOD,MAAM,KAAK,QAAQ,GAAGA,MAAM,GAAG,IAAI;AACnD,CAAC;AAED,OAAO,MAAME,cAAc,GAAGA,CAAA,KAAeJ,UAAU,CAAC,CAAC,KAAK,IAAI;AAElE,MAAMK,YAAY,GAAGA,CAAA,KAAuB;EAC1C,MAAMH,MAAM,GAAGF,UAAU,CAAC,CAAC;EAC3B,IAAIE,MAAM,KAAK,IAAI,EAAE;IACnB,IAAI;MACFI,OAAO,CAACC,GAAG,CAAC,yCAAyCL,MAAM,GAAG,CAAC;IACjE,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EACA,IAAIA,MAAM,KAAK,IAAI,EAAE;IACnB,OAAO;MAAEM,SAAS,EAAE,SAAS;MAAEC,SAAS,EAAE,SAAS;MAAEC,WAAW,EAAE;IAAU,CAAC;EAC/E;EACA;EACA;EACA,MAAMF,SAAS,GAAGN,MAAM,CAACS,QAAQ,CAACb,kBAAkB,CAAC,GAAG,SAAS,GAAG,QAAQ;EAC5E,MAAMW,SAAS,GAAGP,MAAM,CAACS,QAAQ,CAACZ,kBAAkB,CAAC,GAAG,SAAS,GAAG,QAAQ;EAC5E,OAAO;IAAES,SAAS;IAAEC,SAAS;IAAEC,WAAW,EAAEF;EAAU,CAAC;AACzD,CAAC;AAED,OAAO,MAAMI,6BAA6B,GAAGA,CAAA,MAAwB;EACnEC,IAAI,EAAE,UAAU;EAEhBC,IAAI,EAAET,YAAY;EAElBU,SAASA,CAACC,QAAQ,EAAE;IAClB,MAAMC,OAAO,GAAGA,CAAA,KAAMD,QAAQ,CAACX,YAAY,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAOJ,MAAM,KAAK,WAAW,EAAE;MACjC,OAAO,MAAM,CAAC,CAAC;IACjB;IACA;IACAA,MAAM,CAACiB,gBAAgB,CAAC,uBAAuB,EAAED,OAAO,CAAC;IACzD,OAAO,MAAM;MACXhB,MAAM,CAACkB,mBAAmB,CAAC,uBAAuB,EAAEF,OAAO,CAAC;IAC9D,CAAC;EACH;AACF,CAAC,CAAC","ignoreList":[]}

package/dist/esm/privacy/providers/shopifyProvider.js

@@ -0,0 +1,174 @@
+/**
+ * Shopify Customer Privacy API provider — DL #218.
+ *
+ * Two things about this API shape the provider:
+ *
+ * 1. **It is not on the page by default.** `window.Shopify.customerPrivacy` is
+ *    `undefined` until somebody asks for it with `Shopify.loadFeatures`. The
+ *    theme app extension warms it so it is ready before the bundle mounts;
+ *    this provider still requests it, because the extension may not be
+ *    installed and the request is idempotent.
+ *
+ * 2. **`visitorConsentCollected` may have already fired.** The bundle executes
+ *    into an already-rendered storefront page (DL #217), so `read()` answers
+ *    from current state and the event is only ever an update.
+ *
+ * The region rule is the one judgement encoded here, and it keys off
+ * `isRegulationEnforced()` rather than `shouldShowBanner()`. The two are not
+ * interchangeable: the banner reflects what the *merchant* configured, while
+ * enforcement reflects what the *visitor's jurisdiction* requires. A store with
+ * an empty consent configuration reports "no banner needed" everywhere,
+ * including inside the EU.
+ */
+
+import { UNKNOWN_CONSENT } from '../types.js';
+const CONSENT_FEATURE = {
+  name: 'consent-tracking-api',
+  version: '0.1'
+};
+const log = function () {
+  try {
+    for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+      args[_key] = arguments[_key];
+    }
+    console.log('[w5-consent] shopify:', ...args);
+  } catch {
+    /* never break on a console */
+  }
+};
+const getShopify = () => {
+  if (typeof window === 'undefined') {
+    return null;
+  }
+  return window.Shopify ?? null;
+};
+export const isShopifyHost = () => getShopify() !== null;
+const toState = value => {
+  if (value === 'yes') return 'granted';
+  if (value === 'no') return 'denied';
+  return null;
+};
+const readSnapshot = () => {
+  var _getShopify;
+  const privacy = (_getShopify = getShopify()) == null ? void 0 : _getShopify.customerPrivacy;
+  if (!privacy) {
+    log('customerPrivacy API not on the page — no answer available (store has no privacy configuration, or loadFeatures has not resolved yet)');
+    // The API has not loaded (or the store has no privacy configuration at
+    // all). Not an answer — the gate holds, and the visitor's own action is
+    // what unlocks the session.
+    return UNKNOWN_CONSENT;
+  }
+  let consent = {};
+  try {
+    consent = (privacy.currentVisitorConsent == null ? void 0 : privacy.currentVisitorConsent()) ?? {};
+  } catch {
+    // Present but not ready — treat as no answer yet.
+  }
+  const explicitAnalytics = toState(consent.analytics);
+  const explicitMarketing = toState(consent.marketing);
+  let allowed = false;
+  try {
+    allowed = (privacy.analyticsProcessingAllowed == null ? void 0 : privacy.analyticsProcessingAllowed()) === true;
+  } catch {
+    allowed = false;
+  }
+
+  // Is a privacy regulation in force for *this visitor's* region? This is the
+  // question that matters, and it is not the same question as "is a banner
+  // being shown" — see the comment on `enforced` below.
+  let enforced = null;
+  let regulation = '';
+  let region = '';
+  try {
+    if (typeof privacy.isRegulationEnforced === 'function') {
+      enforced = privacy.isRegulationEnforced() === true;
+    }
+    regulation = (privacy.getRegulation == null ? void 0 : privacy.getRegulation()) ?? '';
+    region = (privacy.getRegion == null ? void 0 : privacy.getRegion()) ?? '';
+  } catch {
+    enforced = null;
+  }
+  let bannerRequired = true;
+  try {
+    bannerRequired = (privacy.shouldShowBanner == null ? void 0 : privacy.shouldShowBanner()) !== false;
+  } catch {
+    bannerRequired = true;
+  }
+
+  /*
+   * Measured on a live store from a Frankfurt IP, with no consent recorded:
+   *
+   *   region 'DEBE' · regulation 'GDPR' · isRegulationEnforced() true
+   *   shouldShowBanner() false · analyticsProcessingAllowed() TRUE
+   *   getShopPrefs() { limit: [] }
+   *
+   * Shopify said tracking was allowed for a GDPR-protected visitor who had
+   * never been asked, because the *merchant* had configured no consent
+   * preferences. `shouldShowBanner()` and `analyticsProcessingAllowed()` both
+   * describe the merchant's setup; neither is a statement about a legal basis.
+   * A merchant's misconfiguration must not become our tracking decision, so
+   * under an enforced regulation an absent answer stays `unknown` and the gate
+   * holds — the visitor's own prompt is then the only thing that unlocks them.
+   */
+  const permissiveDefault = allowed || !bannerRequired;
+  const fallbackWhenUnenforceable = permissiveDefault ? 'granted' : 'unknown';
+  const analytics = explicitAnalytics ?? (enforced === true ? 'unknown' : fallbackWhenUnenforceable);
+  const marketing = explicitMarketing ?? (enforced === true ? 'unknown' : !bannerRequired ? 'granted' : 'unknown');
+  log(`read — visitorConsent.analytics=${consent.analytics ?? '(unset)'} ` + `analyticsProcessingAllowed=${allowed} bannerRequired=${bannerRequired} ` + `region=${region || '?'} regulation=${regulation || '?'} enforced=${enforced === null ? 'unavailable' : enforced}` + (enforced === true && explicitAnalytics === null ? ' → regulated and unanswered, holding' : '') + ` ⇒ ${analytics}`);
+  return {
+    analytics,
+    marketing,
+    // Shopify has no separate performance bucket. Load telemetry carries an
+    // app name and a session id to a Wix endpoint, so it answers to the same
+    // answer analytics does rather than riding for free.
+    performance: analytics
+  };
+};
+
+/**
+ * Ask Shopify to load the consent API if it is not already there. Safe to call
+ * more than once; the callback re-reads whatever state arrives.
+ */
+const requestConsentApi = onReady => {
+  const shopify = getShopify();
+  if (!shopify || shopify.customerPrivacy || !shopify.loadFeatures) {
+    return;
+  }
+  try {
+    log('requesting consent-tracking-api via Shopify.loadFeatures…');
+    shopify.loadFeatures([CONSENT_FEATURE], error => {
+      if (error) {
+        log('loadFeatures failed — gate stays held', error);
+        return;
+      }
+      log('loadFeatures resolved — re-reading consent');
+      onReady();
+    });
+  } catch {
+    // Storefronts without the feature simply never resolve; the gate stays
+    // held and engagement remains the only unlock.
+  }
+};
+export const createShopifyConsentProvider = () => ({
+  name: 'shopify-customer-privacy',
+  read: readSnapshot,
+  subscribe(onChange) {
+    const publish = () => {
+      log('visitorConsentCollected — the visitor answered the banner');
+      onChange(readSnapshot());
+    };
+
+    // The visitor may have answered the banner before this bundle existed, so
+    // the event is an update — never the first read.
+    if (typeof document !== 'undefined') {
+      document.addEventListener('visitorConsentCollected', publish);
+    }
+    requestConsentApi(() => onChange(readSnapshot()));
+    return () => {
+      if (typeof document !== 'undefined') {
+        document.removeEventListener('visitorConsentCollected', publish);
+      }
+    };
+  }
+});
+//# sourceMappingURL=shopifyProvider.js.map

package/dist/esm/privacy/providers/shopifyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["UNKNOWN_CONSENT","CONSENT_FEATURE","name","version","log","_len","arguments","length","args","Array","_key","console","getShopify","window","Shopify","isShopifyHost","toState","value","readSnapshot","_getShopify","privacy","customerPrivacy","consent","currentVisitorConsent","explicitAnalytics","analytics","explicitMarketing","marketing","allowed","analyticsProcessingAllowed","enforced","regulation","region","isRegulationEnforced","getRegulation","getRegion","bannerRequired","shouldShowBanner","permissiveDefault","fallbackWhenUnenforceable","performance","requestConsentApi","onReady","shopify","loadFeatures","error","createShopifyConsentProvider","read","subscribe","onChange","publish","document","addEventListener","removeEventListener"],"sources":["../../../../src/privacy/providers/shopifyProvider.ts"],"sourcesContent":["/**\n * Shopify Customer Privacy API provider — DL #218.\n *\n * Two things about this API shape the provider:\n *\n * 1. **It is not on the page by default.** `window.Shopify.customerPrivacy` is\n *    `undefined` until somebody asks for it with `Shopify.loadFeatures`. The\n *    theme app extension warms it so it is ready before the bundle mounts;\n *    this provider still requests it, because the extension may not be\n *    installed and the request is idempotent.\n *\n * 2. **`visitorConsentCollected` may have already fired.** The bundle executes\n *    into an already-rendered storefront page (DL #217), so `read()` answers\n *    from current state and the event is only ever an update.\n *\n * The region rule is the one judgement encoded here, and it keys off\n * `isRegulationEnforced()` rather than `shouldShowBanner()`. The two are not\n * interchangeable: the banner reflects what the *merchant* configured, while\n * enforcement reflects what the *visitor's jurisdiction* requires. A store with\n * an empty consent configuration reports \"no banner needed\" everywhere,\n * including inside the EU.\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n  type ConsentState,\n} from '../types';\n\ntype ShopifyConsentValue = 'yes' | 'no' | '' | undefined;\n\ninterface ShopifyVisitorConsent {\n  analytics?: ShopifyConsentValue;\n  marketing?: ShopifyConsentValue;\n  preferences?: ShopifyConsentValue;\n  sale_of_data?: ShopifyConsentValue;\n}\n\ninterface ShopifyCustomerPrivacy {\n  analyticsProcessingAllowed?: () => boolean;\n  marketingAllowed?: () => boolean;\n  currentVisitorConsent?: () => ShopifyVisitorConsent;\n  shouldShowBanner?: () => boolean;\n  /** Whether a privacy regulation applies to this visitor's region. */\n  isRegulationEnforced?: () => boolean;\n  /** e.g. 'GDPR', 'CCPA'. */\n  getRegulation?: () => string;\n  /** e.g. 'DEBE' — country + subdivision. */\n  getRegion?: () => string;\n}\n\ninterface ShopifyGlobal {\n  customerPrivacy?: ShopifyCustomerPrivacy;\n  loadFeatures?: (\n    features: { name: string; version: string }[],\n    callback: (error?: unknown) => void,\n  ) => void;\n}\n\nconst CONSENT_FEATURE = { name: 'consent-tracking-api', version: '0.1' };\n\nconst log = (...args: unknown[]): void => {\n  try {\n    console.log('[w5-consent] shopify:', ...args);\n  } catch {\n    /* never break on a console */\n  }\n};\n\nconst getShopify = (): ShopifyGlobal | null => {\n  if (typeof window === 'undefined') {\n    return null;\n  }\n  return (window as unknown as { Shopify?: ShopifyGlobal }).Shopify ?? null;\n};\n\nexport const isShopifyHost = (): boolean => getShopify() !== null;\n\nconst toState = (value: ShopifyConsentValue): ConsentState | null => {\n  if (value === 'yes') return 'granted';\n  if (value === 'no') return 'denied';\n  return null;\n};\n\nconst readSnapshot = (): ConsentSnapshot => {\n  const privacy = getShopify()?.customerPrivacy;\n  if (!privacy) {\n    log(\n      'customerPrivacy API not on the page — no answer available (store has no privacy configuration, or loadFeatures has not resolved yet)',\n    );\n    // The API has not loaded (or the store has no privacy configuration at\n    // all). Not an answer — the gate holds, and the visitor's own action is\n    // what unlocks the session.\n    return UNKNOWN_CONSENT;\n  }\n\n  let consent: ShopifyVisitorConsent = {};\n  try {\n    consent = privacy.currentVisitorConsent?.() ?? {};\n  } catch {\n    // Present but not ready — treat as no answer yet.\n  }\n\n  const explicitAnalytics = toState(consent.analytics);\n  const explicitMarketing = toState(consent.marketing);\n\n  let allowed = false;\n  try {\n    allowed = privacy.analyticsProcessingAllowed?.() === true;\n  } catch {\n    allowed = false;\n  }\n\n  // Is a privacy regulation in force for *this visitor's* region? This is the\n  // question that matters, and it is not the same question as \"is a banner\n  // being shown\" — see the comment on `enforced` below.\n  let enforced: boolean | null = null;\n  let regulation = '';\n  let region = '';\n  try {\n    if (typeof privacy.isRegulationEnforced === 'function') {\n      enforced = privacy.isRegulationEnforced() === true;\n    }\n    regulation = privacy.getRegulation?.() ?? '';\n    region = privacy.getRegion?.() ?? '';\n  } catch {\n    enforced = null;\n  }\n\n  let bannerRequired = true;\n  try {\n    bannerRequired = privacy.shouldShowBanner?.() !== false;\n  } catch {\n    bannerRequired = true;\n  }\n\n  /*\n   * Measured on a live store from a Frankfurt IP, with no consent recorded:\n   *\n   *   region 'DEBE' · regulation 'GDPR' · isRegulationEnforced() true\n   *   shouldShowBanner() false · analyticsProcessingAllowed() TRUE\n   *   getShopPrefs() { limit: [] }\n   *\n   * Shopify said tracking was allowed for a GDPR-protected visitor who had\n   * never been asked, because the *merchant* had configured no consent\n   * preferences. `shouldShowBanner()` and `analyticsProcessingAllowed()` both\n   * describe the merchant's setup; neither is a statement about a legal basis.\n   * A merchant's misconfiguration must not become our tracking decision, so\n   * under an enforced regulation an absent answer stays `unknown` and the gate\n   * holds — the visitor's own prompt is then the only thing that unlocks them.\n   */\n  const permissiveDefault = allowed || !bannerRequired;\n  const fallbackWhenUnenforceable = permissiveDefault ? 'granted' : 'unknown';\n\n  const analytics: ConsentState =\n    explicitAnalytics ??\n    (enforced === true ? 'unknown' : fallbackWhenUnenforceable);\n\n  const marketing: ConsentState =\n    explicitMarketing ??\n    (enforced === true ? 'unknown' : !bannerRequired ? 'granted' : 'unknown');\n\n  log(\n    `read — visitorConsent.analytics=${consent.analytics ?? '(unset)'} ` +\n      `analyticsProcessingAllowed=${allowed} bannerRequired=${bannerRequired} ` +\n      `region=${region || '?'} regulation=${regulation || '?'} enforced=${\n        enforced === null ? 'unavailable' : enforced\n      }` +\n      (enforced === true && explicitAnalytics === null\n        ? ' → regulated and unanswered, holding'\n        : '') +\n      ` ⇒ ${analytics}`,\n  );\n\n  return {\n    analytics,\n    marketing,\n    // Shopify has no separate performance bucket. Load telemetry carries an\n    // app name and a session id to a Wix endpoint, so it answers to the same\n    // answer analytics does rather than riding for free.\n    performance: analytics,\n  };\n};\n\n/**\n * Ask Shopify to load the consent API if it is not already there. Safe to call\n * more than once; the callback re-reads whatever state arrives.\n */\nconst requestConsentApi = (onReady: () => void): void => {\n  const shopify = getShopify();\n  if (!shopify || shopify.customerPrivacy || !shopify.loadFeatures) {\n    return;\n  }\n  try {\n    log('requesting consent-tracking-api via Shopify.loadFeatures…');\n    shopify.loadFeatures([CONSENT_FEATURE], (error) => {\n      if (error) {\n        log('loadFeatures failed — gate stays held', error);\n        return;\n      }\n      log('loadFeatures resolved — re-reading consent');\n      onReady();\n    });\n  } catch {\n    // Storefronts without the feature simply never resolve; the gate stays\n    // held and engagement remains the only unlock.\n  }\n};\n\nexport const createShopifyConsentProvider = (): ConsentProvider => ({\n  name: 'shopify-customer-privacy',\n\n  read: readSnapshot,\n\n  subscribe(onChange) {\n    const publish = () => {\n      log('visitorConsentCollected — the visitor answered the banner');\n      onChange(readSnapshot());\n    };\n\n    // The visitor may have answered the banner before this bundle existed, so\n    // the event is an update — never the first read.\n    if (typeof document !== 'undefined') {\n      document.addEventListener('visitorConsentCollected', publish);\n    }\n    requestConsentApi(() => onChange(readSnapshot()));\n\n    return () => {\n      if (typeof document !== 'undefined') {\n        document.removeEventListener('visitorConsentCollected', publish);\n      }\n    };\n  },\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAIV,UAAU;AAgCjB,MAAMC,eAAe,GAAG;EAAEC,IAAI,EAAE,sBAAsB;EAAEC,OAAO,EAAE;AAAM,CAAC;AAExE,MAAMC,GAAG,GAAG,SAAAA,CAAA,EAA8B;EACxC,IAAI;IAAA,SAAAC,IAAA,GAAAC,SAAA,CAAAC,MAAA,EADUC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,GAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAJ,SAAA,CAAAI,IAAA;IAAA;IAEhBC,OAAO,CAACP,GAAG,CAAC,uBAAuB,EAAE,GAAGI,IAAI,CAAC;EAC/C,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAED,MAAMI,UAAU,GAAGA,CAAA,KAA4B;EAC7C,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,IAAI;EACb;EACA,OAAQA,MAAM,CAA4CC,OAAO,IAAI,IAAI;AAC3E,CAAC;AAED,OAAO,MAAMC,aAAa,GAAGA,CAAA,KAAeH,UAAU,CAAC,CAAC,KAAK,IAAI;AAEjE,MAAMI,OAAO,GAAIC,KAA0B,IAA0B;EACnE,IAAIA,KAAK,KAAK,KAAK,EAAE,OAAO,SAAS;EACrC,IAAIA,KAAK,KAAK,IAAI,EAAE,OAAO,QAAQ;EACnC,OAAO,IAAI;AACb,CAAC;AAED,MAAMC,YAAY,GAAGA,CAAA,KAAuB;EAAA,IAAAC,WAAA;EAC1C,MAAMC,OAAO,IAAAD,WAAA,GAAGP,UAAU,CAAC,CAAC,qBAAZO,WAAA,CAAcE,eAAe;EAC7C,IAAI,CAACD,OAAO,EAAE;IACZhB,GAAG,CACD,sIACF,CAAC;IACD;IACA;IACA;IACA,OAAOJ,eAAe;EACxB;EAEA,IAAIsB,OAA8B,GAAG,CAAC,CAAC;EACvC,IAAI;IACFA,OAAO,GAAG,CAAAF,OAAO,CAACG,qBAAqB,oBAA7BH,OAAO,CAACG,qBAAqB,CAAG,CAAC,KAAI,CAAC,CAAC;EACnD,CAAC,CAAC,MAAM;IACN;EAAA;EAGF,MAAMC,iBAAiB,GAAGR,OAAO,CAACM,OAAO,CAACG,SAAS,CAAC;EACpD,MAAMC,iBAAiB,GAAGV,OAAO,CAACM,OAAO,CAACK,SAAS,CAAC;EAEpD,IAAIC,OAAO,GAAG,KAAK;EACnB,IAAI;IACFA,OAAO,GAAG,CAAAR,OAAO,CAACS,0BAA0B,oBAAlCT,OAAO,CAACS,0BAA0B,CAAG,CAAC,MAAK,IAAI;EAC3D,CAAC,CAAC,MAAM;IACND,OAAO,GAAG,KAAK;EACjB;;EAEA;EACA;EACA;EACA,IAAIE,QAAwB,GAAG,IAAI;EACnC,IAAIC,UAAU,GAAG,EAAE;EACnB,IAAIC,MAAM,GAAG,EAAE;EACf,IAAI;IACF,IAAI,OAAOZ,OAAO,CAACa,oBAAoB,KAAK,UAAU,EAAE;MACtDH,QAAQ,GAAGV,OAAO,CAACa,oBAAoB,CAAC,CAAC,KAAK,IAAI;IACpD;IACAF,UAAU,GAAG,CAAAX,OAAO,CAACc,aAAa,oBAArBd,OAAO,CAACc,aAAa,CAAG,CAAC,KAAI,EAAE;IAC5CF,MAAM,GAAG,CAAAZ,OAAO,CAACe,SAAS,oBAAjBf,OAAO,CAACe,SAAS,CAAG,CAAC,KAAI,EAAE;EACtC,CAAC,CAAC,MAAM;IACNL,QAAQ,GAAG,IAAI;EACjB;EAEA,IAAIM,cAAc,GAAG,IAAI;EACzB,IAAI;IACFA,cAAc,GAAG,CAAAhB,OAAO,CAACiB,gBAAgB,oBAAxBjB,OAAO,CAACiB,gBAAgB,CAAG,CAAC,MAAK,KAAK;EACzD,CAAC,CAAC,MAAM;IACND,cAAc,GAAG,IAAI;EACvB;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAME,iBAAiB,GAAGV,OAAO,IAAI,CAACQ,cAAc;EACpD,MAAMG,yBAAyB,GAAGD,iBAAiB,GAAG,SAAS,GAAG,SAAS;EAE3E,MAAMb,SAAuB,GAC3BD,iBAAiB,KAChBM,QAAQ,KAAK,IAAI,GAAG,SAAS,GAAGS,yBAAyB,CAAC;EAE7D,MAAMZ,SAAuB,GAC3BD,iBAAiB,KAChBI,QAAQ,KAAK,IAAI,GAAG,SAAS,GAAG,CAACM,cAAc,GAAG,SAAS,GAAG,SAAS,CAAC;EAE3EhC,GAAG,CACD,mCAAmCkB,OAAO,CAACG,SAAS,IAAI,SAAS,GAAG,GAClE,8BAA8BG,OAAO,mBAAmBQ,cAAc,GAAG,GACzE,UAAUJ,MAAM,IAAI,GAAG,eAAeD,UAAU,IAAI,GAAG,aACrDD,QAAQ,KAAK,IAAI,GAAG,aAAa,GAAGA,QAAQ,EAC5C,IACDA,QAAQ,KAAK,IAAI,IAAIN,iBAAiB,KAAK,IAAI,GAC5C,sCAAsC,GACtC,EAAE,CAAC,GACP,MAAMC,SAAS,EACnB,CAAC;EAED,OAAO;IACLA,SAAS;IACTE,SAAS;IACT;IACA;IACA;IACAa,WAAW,EAAEf;EACf,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA,MAAMgB,iBAAiB,GAAIC,OAAmB,IAAW;EACvD,MAAMC,OAAO,GAAG/B,UAAU,CAAC,CAAC;EAC5B,IAAI,CAAC+B,OAAO,IAAIA,OAAO,CAACtB,eAAe,IAAI,CAACsB,OAAO,CAACC,YAAY,EAAE;IAChE;EACF;EACA,IAAI;IACFxC,GAAG,CAAC,2DAA2D,CAAC;IAChEuC,OAAO,CAACC,YAAY,CAAC,CAAC3C,eAAe,CAAC,EAAG4C,KAAK,IAAK;MACjD,IAAIA,KAAK,EAAE;QACTzC,GAAG,CAAC,uCAAuC,EAAEyC,KAAK,CAAC;QACnD;MACF;MACAzC,GAAG,CAAC,4CAA4C,CAAC;MACjDsC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM;IACN;IACA;EAAA;AAEJ,CAAC;AAED,OAAO,MAAMI,4BAA4B,GAAGA,CAAA,MAAwB;EAClE5C,IAAI,EAAE,0BAA0B;EAEhC6C,IAAI,EAAE7B,YAAY;EAElB8B,SAASA,CAACC,QAAQ,EAAE;IAClB,MAAMC,OAAO,GAAGA,CAAA,KAAM;MACpB9C,GAAG,CAAC,2DAA2D,CAAC;MAChE6C,QAAQ,CAAC/B,YAAY,CAAC,CAAC,CAAC;IAC1B,CAAC;;IAED;IACA;IACA,IAAI,OAAOiC,QAAQ,KAAK,WAAW,EAAE;MACnCA,QAAQ,CAACC,gBAAgB,CAAC,yBAAyB,EAAEF,OAAO,CAAC;IAC/D;IACAT,iBAAiB,CAAC,MAAMQ,QAAQ,CAAC/B,YAAY,CAAC,CAAC,CAAC,CAAC;IAEjD,OAAO,MAAM;MACX,IAAI,OAAOiC,QAAQ,KAAK,WAAW,EAAE;QACnCA,QAAQ,CAACE,mBAAmB,CAAC,yBAAyB,EAAEH,OAAO,CAAC;MAClE;IACF,CAAC;EACH;AACF,CAAC,CAAC","ignoreList":[]}

package/dist/esm/privacy/types.js

@@ -0,0 +1,30 @@
+/**
+ * Consent vocabulary shared by the gate and every provider.
+ *
+ * DL #218. Three states, because "we have not been told" is not the same
+ * answer as "no" and must not be collapsed into one: a visitor who has not
+ * been asked can still be unlocked by their own action, a visitor who
+ * refused never can.
+ */
+
+/**
+ * `necessary` is never gated — auth tokens and the configuration fetch are
+ * what make the widget work at all, and a visitor who loaded the page asked
+ * for that much. Everything else answers to the gate.
+ */
+
+export const UNKNOWN_CONSENT = Object.freeze({
+  performance: 'unknown',
+  analytics: 'unknown',
+  marketing: 'unknown'
+});
+
+/**
+ * A consent provider adapts one host's CMP to the gate.
+ *
+ * `read()` must answer synchronously with what is known *now*. Providers are
+ * installed into an already-rendered storefront page (DL #217), so a provider
+ * that only subscribes is inert — the event it waits for may have fired long
+ * before the bundle executed. Always read first, then subscribe.
+ */
+//# sourceMappingURL=types.js.map

package/dist/esm/privacy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["UNKNOWN_CONSENT","Object","freeze","performance","analytics","marketing"],"sources":["../../../src/privacy/types.ts"],"sourcesContent":["/**\n * Consent vocabulary shared by the gate and every provider.\n *\n * DL #218. Three states, because \"we have not been told\" is not the same\n * answer as \"no\" and must not be collapsed into one: a visitor who has not\n * been asked can still be unlocked by their own action, a visitor who\n * refused never can.\n */\n\nexport type ConsentState = 'granted' | 'denied' | 'unknown';\n\n/**\n * `necessary` is never gated — auth tokens and the configuration fetch are\n * what make the widget work at all, and a visitor who loaded the page asked\n * for that much. Everything else answers to the gate.\n */\nexport type ConsentPurpose =\n  | 'necessary'\n  | 'performance'\n  | 'analytics'\n  | 'marketing';\n\nexport type GatedPurpose = Exclude<ConsentPurpose, 'necessary'>;\n\nexport type ConsentSnapshot = Record<GatedPurpose, ConsentState>;\n\nexport const UNKNOWN_CONSENT: ConsentSnapshot = Object.freeze({\n  performance: 'unknown',\n  analytics: 'unknown',\n  marketing: 'unknown',\n});\n\n/**\n * A consent provider adapts one host's CMP to the gate.\n *\n * `read()` must answer synchronously with what is known *now*. Providers are\n * installed into an already-rendered storefront page (DL #217), so a provider\n * that only subscribes is inert — the event it waits for may have fired long\n * before the bundle executed. Always read first, then subscribe.\n */\nexport interface ConsentProvider {\n  readonly name: string;\n  read(): ConsentSnapshot;\n  subscribe(onChange: (snapshot: ConsentSnapshot) => void): () => void;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;;AAWA,OAAO,MAAMA,eAAgC,GAAGC,MAAM,CAACC,MAAM,CAAC;EAC5DC,WAAW,EAAE,SAAS;EACtBC,SAAS,EAAE,SAAS;EACpBC,SAAS,EAAE;AACb,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}

package/dist/esm/utils/analyticsEvents.js

@@ -1,15 +1,18 @@
-const ANALYTICS_CATEGORY = 'C0002';
+import { mayTransmit, transmit } from '../privacy/consentGate.js';
+/**
+ * Whether analytics may go on the wire right now.
+ *
+ * DL #218: this used to read OneTrust directly and return `true` when OneTrust
+ * was absent, which on a Shopify storefront — where no host loads OneTrust —
+ * meant unconditional default-allow. It now defers to the consent gate, which
+ * reads whichever CMP the host actually has and, in the absence of any answer,
+ * holds until the visitor does something deliberate.
+ */
 export function hasAnalyticsConsent() {
   if (typeof window === 'undefined') {
     return false;
   }
-  const groups = window.OnetrustActiveGroups;
-  if (typeof groups === 'string') {
-    return groups.includes(ANALYTICS_CATEGORY);
-  }
-
-  // No OneTrust on page — allow tracking (host is responsible for loading OneTrust)
-  return true;
+  return mayTransmit('analytics');
 }
 
 /**
@@ -26,26 +29,28 @@ export function pushEvent(eventName, params) {
   if (typeof window === 'undefined') {
     return;
   }
-  if (!hasAnalyticsConsent()) {
-    return;
-  }
 
-  // GTM mode
-  if (window.google_tag_manager && window.dataLayer) {
-    window.dataLayer.push({
-      event: eventName,
-      ...params
-    });
-    return;
-  }
+  // DL #218: routed through the gate rather than checked against it, so an
+  // event raised before consent resolves is held and replayed rather than
+  // dropped on the floor.
+  transmit('analytics', () => {
+    // GTM mode
+    if (window.google_tag_manager && window.dataLayer) {
+      window.dataLayer.push({
+        event: eventName,
+        ...params
+      });
+      return;
+    }
 
-  // Standalone gtag.js mode
-  if (typeof window.gtag === 'function') {
-    window.gtag('event', eventName, params);
-    return;
-  }
+    // Standalone gtag.js mode
+    if (typeof window.gtag === 'function') {
+      window.gtag('event', eventName, params);
+      return;
+    }
 
-  // No analytics SDK loaded — no-op
+    // No analytics SDK loaded — no-op
+  }, `ga ${eventName}`);
 }
 export function pushPromptSubmit(promptType, promptText) {
   pushEvent('web5_prompt_submit', {

package/dist/esm/utils/analyticsEvents.js.map

@@ -1 +1 @@
-{"version":3,"names":["ANALYTICS_CATEGORY","hasAnalyticsConsent","window","groups","OnetrustActiveGroups","includes","pushEvent","eventName","params","google_tag_manager","dataLayer","push","event","gtag","pushPromptSubmit","promptType","promptText","prompt_type","prompt_text","pushLinkClick","linkUrl","linkType","linkText","link_url","link_type","link_text","pushError","errorType","statusCode","errorMessage","error_type","status_code","error_message","pushExit","exitUrl","exitType","exit_url","exit_type","pushEntityFiltered","reason","entityType","entityId","entity_type","entity_id"],"sources":["../../../src/utils/analyticsEvents.ts"],"sourcesContent":["declare global {\n  interface Window {\n    dataLayer?: Record<string, unknown>[];\n    gtag?: (...args: unknown[]) => void;\n    google_tag_manager?: Record<string, unknown>;\n    OnetrustActiveGroups?: string;\n  }\n}\n\nconst ANALYTICS_CATEGORY = 'C0002';\n\nexport function hasAnalyticsConsent(): boolean {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n\n  const groups = window.OnetrustActiveGroups;\n  if (typeof groups === 'string') {\n    return groups.includes(ANALYTICS_CATEGORY);\n  }\n\n  // No OneTrust on page — allow tracking (host is responsible for loading OneTrust)\n  return true;\n}\n\n/**\n * Universal event dispatch: auto-detects GTM vs standalone gtag.js.\n *\n * GTM is checked first via `google_tag_manager` because when GTM has a GA4\n * tag configured it also creates `window.gtag`. Using dataLayer.push()\n * ensures GTM triggers/tags still process the event.\n */\nexport function pushEvent(\n  eventName: string,\n  params: Record<string, unknown> = {},\n): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n  if (!hasAnalyticsConsent()) {\n    return;\n  }\n\n  // GTM mode\n  if (window.google_tag_manager && window.dataLayer) {\n    window.dataLayer.push({ event: eventName, ...params });\n    return;\n  }\n\n  // Standalone gtag.js mode\n  if (typeof window.gtag === 'function') {\n    window.gtag('event', eventName, params);\n    return;\n  }\n\n  // No analytics SDK loaded — no-op\n}\n\nexport function pushPromptSubmit(\n  promptType: 'text' | 'chip',\n  promptText: string,\n): void {\n  pushEvent('web5_prompt_submit', {\n    prompt_type: promptType,\n    prompt_text: promptText,\n  });\n}\n\nexport function pushLinkClick(\n  linkUrl: string,\n  linkType: 'web5' | 'external' | 'internal',\n  linkText?: string,\n): void {\n  pushEvent('web5_link_click', {\n    link_url: linkUrl,\n    link_type: linkType,\n    link_text: linkText ?? '',\n  });\n}\n\nexport function pushError(\n  errorType: string,\n  statusCode: number,\n  errorMessage?: string,\n): void {\n  pushEvent('web5_error', {\n    error_type: errorType,\n    status_code: statusCode,\n    error_message: errorMessage ?? '',\n  });\n}\n\nexport function pushExit(\n  exitUrl: string,\n  linkText: string,\n  exitType: 'external' | 'internal',\n): void {\n  pushEvent('web5_exit', {\n    exit_url: exitUrl,\n    link_text: linkText,\n    exit_type: exitType,\n  });\n}\n\nexport type EntityFilteredReason = 'no_data' | 'no_url';\n\nexport function pushEntityFiltered(\n  reason: EntityFilteredReason,\n  entityType: string,\n  entityId: string,\n): void {\n  pushEvent('web5_entity_filtered', {\n    reason,\n    entity_type: entityType,\n    entity_id: entityId,\n  });\n}\n"],"mappings":"AASA,MAAMA,kBAAkB,GAAG,OAAO;AAElC,OAAO,SAASC,mBAAmBA,CAAA,EAAY;EAC7C,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,KAAK;EACd;EAEA,MAAMC,MAAM,GAAGD,MAAM,CAACE,oBAAoB;EAC1C,IAAI,OAAOD,MAAM,KAAK,QAAQ,EAAE;IAC9B,OAAOA,MAAM,CAACE,QAAQ,CAACL,kBAAkB,CAAC;EAC5C;;EAEA;EACA,OAAO,IAAI;AACb;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASM,SAASA,CACvBC,SAAiB,EACjBC,MAA+B,EACzB;EAAA,IADNA,MAA+B;IAA/BA,MAA+B,GAAG,CAAC,CAAC;EAAA;EAEpC,IAAI,OAAON,MAAM,KAAK,WAAW,EAAE;IACjC;EACF;EACA,IAAI,CAACD,mBAAmB,CAAC,CAAC,EAAE;IAC1B;EACF;;EAEA;EACA,IAAIC,MAAM,CAACO,kBAAkB,IAAIP,MAAM,CAACQ,SAAS,EAAE;IACjDR,MAAM,CAACQ,SAAS,CAACC,IAAI,CAAC;MAAEC,KAAK,EAAEL,SAAS;MAAE,GAAGC;IAAO,CAAC,CAAC;IACtD;EACF;;EAEA;EACA,IAAI,OAAON,MAAM,CAACW,IAAI,KAAK,UAAU,EAAE;IACrCX,MAAM,CAACW,IAAI,CAAC,OAAO,EAAEN,SAAS,EAAEC,MAAM,CAAC;IACvC;EACF;;EAEA;AACF;AAEA,OAAO,SAASM,gBAAgBA,CAC9BC,UAA2B,EAC3BC,UAAkB,EACZ;EACNV,SAAS,CAAC,oBAAoB,EAAE;IAC9BW,WAAW,EAAEF,UAAU;IACvBG,WAAW,EAAEF;EACf,CAAC,CAAC;AACJ;AAEA,OAAO,SAASG,aAAaA,CAC3BC,OAAe,EACfC,QAA0C,EAC1CC,QAAiB,EACX;EACNhB,SAAS,CAAC,iBAAiB,EAAE;IAC3BiB,QAAQ,EAAEH,OAAO;IACjBI,SAAS,EAAEH,QAAQ;IACnBI,SAAS,EAAEH,QAAQ,IAAI;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASI,SAASA,CACvBC,SAAiB,EACjBC,UAAkB,EAClBC,YAAqB,EACf;EACNvB,SAAS,CAAC,YAAY,EAAE;IACtBwB,UAAU,EAAEH,SAAS;IACrBI,WAAW,EAAEH,UAAU;IACvBI,aAAa,EAAEH,YAAY,IAAI;EACjC,CAAC,CAAC;AACJ;AAEA,OAAO,SAASI,QAAQA,CACtBC,OAAe,EACfZ,QAAgB,EAChBa,QAAiC,EAC3B;EACN7B,SAAS,CAAC,WAAW,EAAE;IACrB8B,QAAQ,EAAEF,OAAO;IACjBT,SAAS,EAAEH,QAAQ;IACnBe,SAAS,EAAEF;EACb,CAAC,CAAC;AACJ;AAIA,OAAO,SAASG,kBAAkBA,CAChCC,MAA4B,EAC5BC,UAAkB,EAClBC,QAAgB,EACV;EACNnC,SAAS,CAAC,sBAAsB,EAAE;IAChCiC,MAAM;IACNG,WAAW,EAAEF,UAAU;IACvBG,SAAS,EAAEF;EACb,CAAC,CAAC;AACJ","ignoreList":[]}
+{"version":3,"names":["mayTransmit","transmit","hasAnalyticsConsent","window","pushEvent","eventName","params","google_tag_manager","dataLayer","push","event","gtag","pushPromptSubmit","promptType","promptText","prompt_type","prompt_text","pushLinkClick","linkUrl","linkType","linkText","link_url","link_type","link_text","pushError","errorType","statusCode","errorMessage","error_type","status_code","error_message","pushExit","exitUrl","exitType","exit_url","exit_type","pushEntityFiltered","reason","entityType","entityId","entity_type","entity_id"],"sources":["../../../src/utils/analyticsEvents.ts"],"sourcesContent":["import { mayTransmit, transmit } from '../privacy/consentGate';\n\ndeclare global {\n  interface Window {\n    dataLayer?: Record<string, unknown>[];\n    gtag?: (...args: unknown[]) => void;\n    google_tag_manager?: Record<string, unknown>;\n    OnetrustActiveGroups?: string;\n  }\n}\n\n/**\n * Whether analytics may go on the wire right now.\n *\n * DL #218: this used to read OneTrust directly and return `true` when OneTrust\n * was absent, which on a Shopify storefront — where no host loads OneTrust —\n * meant unconditional default-allow. It now defers to the consent gate, which\n * reads whichever CMP the host actually has and, in the absence of any answer,\n * holds until the visitor does something deliberate.\n */\nexport function hasAnalyticsConsent(): boolean {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n  return mayTransmit('analytics');\n}\n\n/**\n * Universal event dispatch: auto-detects GTM vs standalone gtag.js.\n *\n * GTM is checked first via `google_tag_manager` because when GTM has a GA4\n * tag configured it also creates `window.gtag`. Using dataLayer.push()\n * ensures GTM triggers/tags still process the event.\n */\nexport function pushEvent(\n  eventName: string,\n  params: Record<string, unknown> = {},\n): void {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  // DL #218: routed through the gate rather than checked against it, so an\n  // event raised before consent resolves is held and replayed rather than\n  // dropped on the floor.\n  transmit(\n    'analytics',\n    () => {\n    // GTM mode\n    if (window.google_tag_manager && window.dataLayer) {\n      window.dataLayer.push({ event: eventName, ...params });\n      return;\n    }\n\n    // Standalone gtag.js mode\n    if (typeof window.gtag === 'function') {\n      window.gtag('event', eventName, params);\n      return;\n    }\n\n    // No analytics SDK loaded — no-op\n    },\n    `ga ${eventName}`,\n  );\n}\n\nexport function pushPromptSubmit(\n  promptType: 'text' | 'chip',\n  promptText: string,\n): void {\n  pushEvent('web5_prompt_submit', {\n    prompt_type: promptType,\n    prompt_text: promptText,\n  });\n}\n\nexport function pushLinkClick(\n  linkUrl: string,\n  linkType: 'web5' | 'external' | 'internal',\n  linkText?: string,\n): void {\n  pushEvent('web5_link_click', {\n    link_url: linkUrl,\n    link_type: linkType,\n    link_text: linkText ?? '',\n  });\n}\n\nexport function pushError(\n  errorType: string,\n  statusCode: number,\n  errorMessage?: string,\n): void {\n  pushEvent('web5_error', {\n    error_type: errorType,\n    status_code: statusCode,\n    error_message: errorMessage ?? '',\n  });\n}\n\nexport function pushExit(\n  exitUrl: string,\n  linkText: string,\n  exitType: 'external' | 'internal',\n): void {\n  pushEvent('web5_exit', {\n    exit_url: exitUrl,\n    link_text: linkText,\n    exit_type: exitType,\n  });\n}\n\nexport type EntityFilteredReason = 'no_data' | 'no_url';\n\nexport function pushEntityFiltered(\n  reason: EntityFilteredReason,\n  entityType: string,\n  entityId: string,\n): void {\n  pushEvent('web5_entity_filtered', {\n    reason,\n    entity_type: entityType,\n    entity_id: entityId,\n  });\n}\n"],"mappings":"AAAA,SAASA,WAAW,EAAEC,QAAQ,QAAQ,wBAAwB;AAW9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAAA,EAAY;EAC7C,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,KAAK;EACd;EACA,OAAOH,WAAW,CAAC,WAAW,CAAC;AACjC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,SAASA,CACvBC,SAAiB,EACjBC,MAA+B,EACzB;EAAA,IADNA,MAA+B;IAA/BA,MAA+B,GAAG,CAAC,CAAC;EAAA;EAEpC,IAAI,OAAOH,MAAM,KAAK,WAAW,EAAE;IACjC;EACF;;EAEA;EACA;EACA;EACAF,QAAQ,CACN,WAAW,EACX,MAAM;IACN;IACA,IAAIE,MAAM,CAACI,kBAAkB,IAAIJ,MAAM,CAACK,SAAS,EAAE;MACjDL,MAAM,CAACK,SAAS,CAACC,IAAI,CAAC;QAAEC,KAAK,EAAEL,SAAS;QAAE,GAAGC;MAAO,CAAC,CAAC;MACtD;IACF;;IAEA;IACA,IAAI,OAAOH,MAAM,CAACQ,IAAI,KAAK,UAAU,EAAE;MACrCR,MAAM,CAACQ,IAAI,CAAC,OAAO,EAAEN,SAAS,EAAEC,MAAM,CAAC;MACvC;IACF;;IAEA;EACA,CAAC,EACD,MAAMD,SAAS,EACjB,CAAC;AACH;AAEA,OAAO,SAASO,gBAAgBA,CAC9BC,UAA2B,EAC3BC,UAAkB,EACZ;EACNV,SAAS,CAAC,oBAAoB,EAAE;IAC9BW,WAAW,EAAEF,UAAU;IACvBG,WAAW,EAAEF;EACf,CAAC,CAAC;AACJ;AAEA,OAAO,SAASG,aAAaA,CAC3BC,OAAe,EACfC,QAA0C,EAC1CC,QAAiB,EACX;EACNhB,SAAS,CAAC,iBAAiB,EAAE;IAC3BiB,QAAQ,EAAEH,OAAO;IACjBI,SAAS,EAAEH,QAAQ;IACnBI,SAAS,EAAEH,QAAQ,IAAI;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASI,SAASA,CACvBC,SAAiB,EACjBC,UAAkB,EAClBC,YAAqB,EACf;EACNvB,SAAS,CAAC,YAAY,EAAE;IACtBwB,UAAU,EAAEH,SAAS;IACrBI,WAAW,EAAEH,UAAU;IACvBI,aAAa,EAAEH,YAAY,IAAI;EACjC,CAAC,CAAC;AACJ;AAEA,OAAO,SAASI,QAAQA,CACtBC,OAAe,EACfZ,QAAgB,EAChBa,QAAiC,EAC3B;EACN7B,SAAS,CAAC,WAAW,EAAE;IACrB8B,QAAQ,EAAEF,OAAO;IACjBT,SAAS,EAAEH,QAAQ;IACnBe,SAAS,EAAEF;EACb,CAAC,CAAC;AACJ;AAIA,OAAO,SAASG,kBAAkBA,CAChCC,MAA4B,EAC5BC,UAAkB,EAClBC,QAAgB,EACV;EACNnC,SAAS,CAAC,sBAAsB,EAAE;IAChCiC,MAAM;IACNG,WAAW,EAAEF,UAAU;IACvBG,SAAS,EAAEF;EACb,CAAC,CAAC;AACJ","ignoreList":[]}

package/dist/types/component/componentDefinitions/TextBlockSectionDefinition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TextBlockSectionDefinition.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/TextBlockSectionDefinition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,EACV,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACf,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG7E,qBAAa,0BACX,YAAW,iBAAiB,CAAC,yBAAyB,CAAC;IAEvD,WAAW,cAAwB;IAkBnC,QAAQ,WAAyC;IAEjD,QAAQ,EAAE,kBAAkB,CAI1B;IAEF,QAAQ,EAAE,cAAc,CAAC,kBAAkB,CAAC,EAAE,CA0C5C;IAEF,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,kBAAkB,GAAG,IAAI;CAexE"}
+{"version":3,"file":"TextBlockSectionDefinition.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/TextBlockSectionDefinition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,EACV,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACf,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG7E,qBAAa,0BACX,YAAW,iBAAiB,CAAC,yBAAyB,CAAC;IAEvD,WAAW,cAAwB;IAkCnC,QAAQ,WAAwC;IAEhD,QAAQ,EAAE,kBAAkB,CAG1B;IAEF,QAAQ,EAAE,cAAc,CAAC,kBAAkB,CAAC,EAAE,CAuC5C;IAEF,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,kBAAkB,GAAG,IAAI;CAcxE"}

package/dist/types/component/componentDefinitions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAoBnD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAoC3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAoBnD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAqC3D"}

package/dist/types/component/componentDefinitions/parse-utils.d.ts

@@ -7,6 +7,27 @@ export declare function headingText(parts: Part[], level?: number): string;
 /** Like headingText but preserves inline markdown formatting (bold, italic, etc.) */
 export declare function headingMarkdown(parts: Part[], level?: number): string;
 export declare function bodyText(parts: Part[]): string;
+/**
+ * Body copy as markdown, with inline links intact and paragraph breaks kept.
+ *
+ * `bodyText` reads text parts only, so a paragraph carrying an inline link —
+ * `Try narrowing to [men](web5://ask/…) instead` — arrives as `t + link + t`
+ * and comes back as `"Try narrowing to\n\ninstead"`: label and url both
+ * deleted, and the sentence broken in two at the gap. That is DL #134's list
+ * bug in a different helper, and it is why an ask link in prose never reached
+ * the page.
+ *
+ * `inlinePartsToMarkdown` already rebuilds a run of inline parts with links
+ * intact, but it flattens to one line, which is wrong for multi-paragraph
+ * copy. So group first: `astToParts` marks every part after the first of a
+ * given AST node with `meta.continuesNode`, which is exactly "same paragraph,
+ * keep going". Parts without it open a new paragraph.
+ *
+ * Kept separate from `bodyText` deliberately — the other seven callers hand
+ * their result to consumers that do not render markdown, and would show a
+ * visitor a raw `[label](url)`.
+ */
+export declare function bodyMarkdown(parts: Part[]): string;
 /**
  * Entity sections may be authored as one paragraph per entity:
  * `[Product](web5://entity/...) - why it matches`.

package/dist/types/component/componentDefinitions/parse-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-utils.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/parse-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EAGJ,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAS3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAiB3C,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAOrE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAO9C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAY3D;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAoB9D;AAED,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,CACvB,KAAK,EAAE,IAAI,EAAE,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAO5C;AAED,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAUhE;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,GAAG,SAAS,CASnE;AAED,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAgBhE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,GACV;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcjD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAwB/D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAe/C;AAiBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAY3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAW9D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,MAAM,CAsB5D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAM7E;AAED,kCAAkC;AAClC,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAMD,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAmBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAkH5D"}
+{"version":3,"file":"parse-utils.d.ts","sourceRoot":"","sources":["../../../../src/component/componentDefinitions/parse-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EAGJ,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAS3B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAiB3C,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAOrE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAO9C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAuBlD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAY3D;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAoB9D;AAED,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED,8CAA8C;AAC9C,wBAAgB,SAAS,CACvB,KAAK,EAAE,IAAI,EAAE,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAO5C;AAED,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAUhE;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,GAAG,SAAS,CASnE;AAED,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,SAAS,CAgBhE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,GACV;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcjD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAwB/D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAe/C;AAiBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAY3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAW9D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,MAAM,CAsB5D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAM7E;AAED,kCAAkC;AAClC,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAMD,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAmBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAkH5D"}

package/dist/types/index.d.ts

@@ -48,6 +48,7 @@ export { analyzeBackdrop, computeContentBBox, buildProbeUrl, loadImagePixels, lo
 export { stripMarkdown } from './component/componentDefinitions/parse-utils';
 export { type RGB, rgbToHsl, hslToRgb, ensureMinLightness, toRgb, deriveDarkColor, deriveDarkGradient, deriveLightColor, } from './color/colorUtils';
 export { pushEvent, pushPromptSubmit, pushLinkClick, pushError, pushExit, pushEntityFiltered, hasAnalyticsConsent, type EntityFilteredReason, } from './utils/analyticsEvents';
+export { type ConsentState, type ConsentPurpose, type GatedPurpose, type ConsentSnapshot, type ConsentProvider, type GateView, type HostConsentInput, UNKNOWN_CONSENT, HOST_CONSENT_GLOBAL, transmit, mayTransmit, unlockOnUserAction, isUserEngaged, mayPersistIdentity, getConsentSnapshot, getGateView, subscribeToConsent, installConsentProvider, getInstalledProviderName, setConsentBufferLimit, getConsentGateStats, resetConsentGateForTests, detectConsentProvider, initConsentGate, CONSENT_OVERRIDE_KEY, CONSENT_OVERRIDE_QUERY_PARAM, getConsentOverride, setConsentOverride, createShopifyConsentProvider, isShopifyHost, createOneTrustConsentProvider, isOneTrustHost, createHostSuppliedConsentProvider, hasHostSuppliedConsent, publishHostConsent, } from './privacy';
 export { type ConversationErrorType, ERROR_MARKDOWN, getErrorTypeFromStatus, createErrorMarkdown, STREAMING_TIMEOUT_MS, type ErrorActionType, type ErrorIconType, type ErrorTemplateButton, type ErrorTemplate, type ErrorTemplateOverrides, DEFAULT_ERROR_TEMPLATES, resolveErrorTemplate, } from './errors';
 export { getForwardStack, setForwardStack, clearForwardStack, pushToForwardStack, popFromForwardStack, } from './utils/navigationStack';
 export { UserQuery, type UserQueryProps, type ProductBackContext, } from './components/ui/UserQuery';