@wix/web5-core 1.63.43 → 1.63.45

package/dist/esm/privacy/consentGate.js

@@ -1,36 +1,26 @@
 /**
- * The consent gate — DL #218.
+ * The consent gate — DL #218 (revised).
  *
- * Every BI, telemetry and analytics emitter in web5 goes through `transmit()`
- * instead of calling its transport directly. The gate exists because the
- * consent signal resolves *after* the events that need it: Shopify's consent
- * API is not on the page by default and has to be requested, and the fedops
- * app-load pair fires inside that window. A boolean checked at each call site
- * can only ever drop an event that is already in flight; the gate can hold it.
+ * Legal cleared analytics/BI transmission to need no consent gate, so the old
+ * `transmit()` + buffer machinery is gone. What analytics emitters used to route
+ * through the gate now goes straight to the wire.
  *
- * Two independent unlocks, and they do not compose as a plain "either/or":
+ * Analytics AND performance telemetry both go straight to the wire now, so there
+ * is nothing left to "transmit"-gate. What remains is the consent SIGNAL —
+ * snapshot, engagement, provider — behind a single predicate:
  *
- *   | consent   | engaged | result                          |
- *   |-----------|---------|---------------------------------|
- *   | granted   | either  | transmit                        |
- *   | unknown   | no      | hold in the buffer              |
- *   | unknown   | yes     | transmit, and flush what's held |
- *   | denied    | yes     | still nothing                   |
+ *   - `mayPersistToken()` — whether the visitor's OAuth token may be written to
+ *     localStorage. Persisting the token persists a cross-visit visitor identity
+ *     (its refresh token), which is the one thing consent still governs. Truth
+ *     table: granted → yes; denied → never; unknown → only once the visitor
+ *     engaged.
  *
- * Denied outranks engaged. A visitor who refused analytics in the banner does
- * not re-enable tracking by typing a question.
+ * Engagement (`unlockOnUserAction`, fired when the visitor submits a prompt)
+ * resolves the `unknown` case — typing a question is a reason to remember this
+ * visitor for the session — but it never overrides a `denied`.
  */
 
 import { UNKNOWN_CONSENT } from './types.js';
-
-/** Held events are dropped past this many — a runaway emitter must not become a leak. */
-const DEFAULT_BUFFER_LIMIT = 50;
-
-/**
- * One prefix for the whole consent trail, so `[w5-consent]` in the console
- * filter shows the full story: which CMP was found, what it answered, and for
- * every event whether it was sent, held, dropped or replayed.
- */
 const LOG_PREFIX = '[w5-consent]';
 const log = function () {
   try {
@@ -39,55 +29,36 @@ const log = function () {
     }
     console.debug(LOG_PREFIX, ...args);
   } catch {
-    // A console that throws must never break a send.
+    // A console that throws must never break anything.
   }
 };
 const describe = s => `analytics=${s.analytics} performance=${s.performance} marketing=${s.marketing}`;
 let snapshot = UNKNOWN_CONSENT;
 let engaged = false;
-let provider = null;
 let unsubscribeProvider = null;
-let buffer = [];
-let bufferLimit = DEFAULT_BUFFER_LIMIT;
-let droppedFromOverflow = 0;
 const listeners = new Set();
-
-/**
- * Cached so `getGateView` is referentially stable between changes —
- * `useSyncExternalStore` re-renders forever if the snapshot is a fresh object
- * on every read.
- */
-let view = Object.freeze({
-  consent: UNKNOWN_CONSENT,
-  engaged: false
-});
-const rebuildView = () => {
-  view = Object.freeze({
-    consent: snapshot,
-    engaged
-  });
-};
 const notify = () => {
   for (const listener of listeners) {
     try {
       listener();
     } catch {
-      // A subscriber that throws must not stop the others, or stop a flush.
+      // A subscriber that throws must not stop the others.
     }
   }
 };
 
 /**
- * Whether an event for `purpose` may go on the wire right now.
+ * Whether the visitor's OAuth token may be persisted to `localStorage`.
  *
- * `necessary` is always allowed. For everything else: explicit consent wins in
- * both directions, and engagement resolves only the `unknown` case.
+ * Persisting the token persists a cross-visit visitor identity (the refresh
+ * token re-identifies the visitor on their next visit), so it answers to
+ * consent — the one thing that still does. Explicit consent wins in both
+ * directions; engagement resolves only the `unknown` case. The token still
+ * lives in memory for the session regardless — only the write to storage is
+ * gated.
  */
-export const mayTransmit = purpose => {
-  if (purpose === 'necessary') {
-    return true;
-  }
-  const state = snapshot[purpose];
+export const mayPersistToken = () => {
+  const state = snapshot.analytics;
   if (state === 'denied') {
     return false;
   }
@@ -98,112 +69,19 @@ export const mayTransmit = purpose => {
 };
 
 /**
- * Release everything the gate is holding that is now allowed, and drop
- * everything that is now refused. Anything still `unknown` stays held.
- *
- * Order is preserved among released events, but a flush necessarily emits them
- * later than they were raised — a held app-load event reaches the wire after
- * the prompt that unlocked it. Anything reading these as a timeline has to
- * know that.
- */
-const settleBuffer = () => {
-  if (buffer.length === 0) {
-    return;
-  }
-  const stillHeld = [];
-  const releasing = [];
-  for (const held of buffer) {
-    if (mayTransmit(held.purpose)) {
-      releasing.push(held);
-    } else if (snapshot[held.purpose] === 'denied') {
-      // dropped on the floor, deliberately and permanently
-    } else {
-      stillHeld.push(held);
-    }
-  }
-  const dropped = buffer.length - stillHeld.length - releasing.length;
-  buffer = stillHeld;
-  if (releasing.length || dropped) {
-    log(`settle — releasing ${releasing.length}` + (dropped ? `, dropping ${dropped} (refused)` : '') + (stillHeld.length ? `, still holding ${stillHeld.length}` : ''));
-  }
-  for (const held of releasing) {
-    try {
-      log(`  ↳ REPLAY ${held.label} (${held.purpose})`);
-      held.send();
-    } catch {
-      // A failed send must not strand the rest of the flush.
-    }
-  }
-};
-
-/**
- * The single entry point for anything that would put a request on the wire.
- *
- * Allowed → sent now. Refused → dropped. Not yet known → held until an unlock
- * settles it, or discarded with the page.
- */
-export const transmit = function (purpose, send, label) {
-  if (label === void 0) {
-    label = 'event';
-  }
-  if (mayTransmit(purpose)) {
-    log(`SEND ${label} (${purpose}) — allowed`);
-    send();
-    return;
-  }
-  if (purpose !== 'necessary' && snapshot[purpose] === 'denied') {
-    log(`DROP ${label} (${purpose}) — visitor refused`);
-    return;
-  }
-  if (buffer.length >= bufferLimit) {
-    droppedFromOverflow += 1;
-    log(`DROP ${label} (${purpose}) — buffer full at ${bufferLimit}, ${droppedFromOverflow} lost`);
-    return;
-  }
-  buffer.push({
-    purpose: purpose,
-    send,
-    label
-  });
-  log(`HOLD ${label} (${purpose}) — no answer yet, ${buffer.length} held`);
-};
-
-/**
- * The visitor did something deliberate — submitted a prompt — so the session
- * may be measured even though no CMP has answered.
- *
- * This is the unlock that keeps web5 measurable at all: on a Shopify store
- * with no privacy configuration the consent API never loads, consent stays
- * `unknown` forever, and without this every store would report nothing.
- *
- * It unlocks **transmission only**. Persistent identity stays gated on real
- * consent (see `mayPersistIdentity`) — typing a question is a reason to
- * measure the session, not a reason to persist an identifier across visits.
- * It also cannot override a `denied`.
+ * The visitor did something deliberate — submitted a prompt — so we may remember
+ * them for the session even though no CMP has answered. Unlocks the `unknown`
+ * case only; it cannot override a `denied`.
  */
 export const unlockOnUserAction = () => {
   if (engaged) {
     return;
   }
   engaged = true;
-  log(`UNLOCK — visitor submitted a prompt; ${buffer.length} held event(s) to settle`);
-  rebuildView();
-  settleBuffer();
+  log('UNLOCK — visitor submitted a prompt');
   notify();
 };
-
-/** Whether the visitor has taken the deliberate action that unlocks the session. */
-export const isUserEngaged = () => engaged;
-
-/**
- * Persistent, cross-visit storage of a visitor identifier requires real
- * consent — engagement is deliberately not enough.
- */
-export const mayPersistIdentity = () => snapshot.analytics === 'granted';
 export const getConsentSnapshot = () => snapshot;
-
-/** Referentially stable between changes, for `useSyncExternalStore`. */
-export const getGateView = () => view;
 export const subscribeToConsent = listener => {
   listeners.add(listener);
   return () => {
@@ -218,8 +96,6 @@ const applySnapshot = next => {
   snapshot = Object.freeze({
     ...next
   });
-  rebuildView();
-  settleBuffer();
   notify();
 };
 
@@ -231,35 +107,16 @@ const applySnapshot = next => {
  */
 export const installConsentProvider = next => {
   unsubscribeProvider == null || unsubscribeProvider();
-  provider = next;
   const initial = next.read();
   log(`provider installed: ${next.name} — reads ${describe(initial)}`);
   applySnapshot(initial);
   unsubscribeProvider = next.subscribe(applySnapshot);
 };
-export const getInstalledProviderName = () => {
-  var _provider;
-  return ((_provider = provider) == null ? void 0 : _provider.name) ?? null;
-};
-export const setConsentBufferLimit = limit => {
-  bufferLimit = Math.max(0, limit);
-};
-
-/** Diagnostics only — how much the gate is holding, and what it had to drop. */
-export const getConsentGateStats = () => ({
-  held: buffer.length,
-  droppedFromOverflow
-});
 export const resetConsentGateForTests = () => {
   unsubscribeProvider == null || unsubscribeProvider();
   unsubscribeProvider = null;
-  provider = null;
   snapshot = UNKNOWN_CONSENT;
   engaged = false;
-  buffer = [];
-  bufferLimit = DEFAULT_BUFFER_LIMIT;
-  droppedFromOverflow = 0;
   listeners.clear();
-  rebuildView();
 };
 //# sourceMappingURL=consentGate.js.map

package/dist/esm/privacy/consentGate.js.map

@@ -1 +1 @@
-{"version":3,"names":["UNKNOWN_CONSENT","DEFAULT_BUFFER_LIMIT","LOG_PREFIX","log","_len","arguments","length","args","Array","_key","console","debug","describe","s","analytics","performance","marketing","snapshot","engaged","provider","unsubscribeProvider","buffer","bufferLimit","droppedFromOverflow","listeners","Set","view","Object","freeze","consent","rebuildView","notify","listener","mayTransmit","purpose","state","settleBuffer","stillHeld","releasing","held","push","dropped","label","send","transmit","unlockOnUserAction","isUserEngaged","mayPersistIdentity","getConsentSnapshot","getGateView","subscribeToConsent","add","delete","applySnapshot","next","installConsentProvider","initial","read","name","subscribe","getInstalledProviderName","_provider","setConsentBufferLimit","limit","Math","max","getConsentGateStats","resetConsentGateForTests","clear"],"sources":["../../../src/privacy/consentGate.ts"],"sourcesContent":["/**\n * The consent gate — DL #218.\n *\n * Every BI, telemetry and analytics emitter in web5 goes through `transmit()`\n * instead of calling its transport directly. The gate exists because the\n * consent signal resolves *after* the events that need it: Shopify's consent\n * API is not on the page by default and has to be requested, and the fedops\n * app-load pair fires inside that window. A boolean checked at each call site\n * can only ever drop an event that is already in flight; the gate can hold it.\n *\n * Two independent unlocks, and they do not compose as a plain \"either/or\":\n *\n *   | consent   | engaged | result                          |\n *   |-----------|---------|---------------------------------|\n *   | granted   | either  | transmit                        |\n *   | unknown   | no      | hold in the buffer              |\n *   | unknown   | yes     | transmit, and flush what's held |\n *   | denied    | yes     | still nothing                   |\n *\n * Denied outranks engaged. A visitor who refused analytics in the banner does\n * not re-enable tracking by typing a question.\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentPurpose,\n  type ConsentSnapshot,\n  type GatedPurpose,\n} from './types';\n\n/** Held events are dropped past this many — a runaway emitter must not become a leak. */\nconst DEFAULT_BUFFER_LIMIT = 50;\n\n/**\n * One prefix for the whole consent trail, so `[w5-consent]` in the console\n * filter shows the full story: which CMP was found, what it answered, and for\n * every event whether it was sent, held, dropped or replayed.\n */\nconst LOG_PREFIX = '[w5-consent]';\n\nconst log = (...args: unknown[]): void => {\n  try {\n    console.debug(LOG_PREFIX, ...args);\n  } catch {\n    // A console that throws must never break a send.\n  }\n};\n\nconst describe = (s: ConsentSnapshot): string =>\n  `analytics=${s.analytics} performance=${s.performance} marketing=${s.marketing}`;\n\ninterface HeldEvent {\n  purpose: GatedPurpose;\n  send: () => void;\n  label: string;\n}\n\nexport interface GateView {\n  consent: ConsentSnapshot;\n  engaged: boolean;\n}\n\ntype Listener = () => void;\n\nlet snapshot: ConsentSnapshot = UNKNOWN_CONSENT;\nlet engaged = false;\nlet provider: ConsentProvider | null = null;\nlet unsubscribeProvider: (() => void) | null = null;\nlet buffer: HeldEvent[] = [];\nlet bufferLimit = DEFAULT_BUFFER_LIMIT;\nlet droppedFromOverflow = 0;\n\nconst listeners = new Set<Listener>();\n\n/**\n * Cached so `getGateView` is referentially stable between changes —\n * `useSyncExternalStore` re-renders forever if the snapshot is a fresh object\n * on every read.\n */\nlet view: GateView = Object.freeze({\n  consent: UNKNOWN_CONSENT,\n  engaged: false,\n});\n\nconst rebuildView = (): void => {\n  view = Object.freeze({ consent: snapshot, engaged });\n};\n\nconst notify = (): void => {\n  for (const listener of listeners) {\n    try {\n      listener();\n    } catch {\n      // A subscriber that throws must not stop the others, or stop a flush.\n    }\n  }\n};\n\n/**\n * Whether an event for `purpose` may go on the wire right now.\n *\n * `necessary` is always allowed. For everything else: explicit consent wins in\n * both directions, and engagement resolves only the `unknown` case.\n */\nexport const mayTransmit = (purpose: ConsentPurpose): boolean => {\n  if (purpose === 'necessary') {\n    return true;\n  }\n  const state = snapshot[purpose];\n  if (state === 'denied') {\n    return false;\n  }\n  if (state === 'granted') {\n    return true;\n  }\n  return engaged;\n};\n\n/**\n * Release everything the gate is holding that is now allowed, and drop\n * everything that is now refused. Anything still `unknown` stays held.\n *\n * Order is preserved among released events, but a flush necessarily emits them\n * later than they were raised — a held app-load event reaches the wire after\n * the prompt that unlocked it. Anything reading these as a timeline has to\n * know that.\n */\nconst settleBuffer = (): void => {\n  if (buffer.length === 0) {\n    return;\n  }\n  const stillHeld: HeldEvent[] = [];\n  const releasing: HeldEvent[] = [];\n\n  for (const held of buffer) {\n    if (mayTransmit(held.purpose)) {\n      releasing.push(held);\n    } else if (snapshot[held.purpose] === 'denied') {\n      // dropped on the floor, deliberately and permanently\n    } else {\n      stillHeld.push(held);\n    }\n  }\n\n  const dropped = buffer.length - stillHeld.length - releasing.length;\n  buffer = stillHeld;\n\n  if (releasing.length || dropped) {\n    log(\n      `settle — releasing ${releasing.length}` +\n        (dropped ? `, dropping ${dropped} (refused)` : '') +\n        (stillHeld.length ? `, still holding ${stillHeld.length}` : ''),\n    );\n  }\n\n  for (const held of releasing) {\n    try {\n      log(`  ↳ REPLAY ${held.label} (${held.purpose})`);\n      held.send();\n    } catch {\n      // A failed send must not strand the rest of the flush.\n    }\n  }\n};\n\n/**\n * The single entry point for anything that would put a request on the wire.\n *\n * Allowed → sent now. Refused → dropped. Not yet known → held until an unlock\n * settles it, or discarded with the page.\n */\nexport const transmit = (\n  purpose: ConsentPurpose,\n  send: () => void,\n  label = 'event',\n): void => {\n  if (mayTransmit(purpose)) {\n    log(`SEND ${label} (${purpose}) — allowed`);\n    send();\n    return;\n  }\n  if (purpose !== 'necessary' && snapshot[purpose] === 'denied') {\n    log(`DROP ${label} (${purpose}) — visitor refused`);\n    return;\n  }\n  if (buffer.length >= bufferLimit) {\n    droppedFromOverflow += 1;\n    log(\n      `DROP ${label} (${purpose}) — buffer full at ${bufferLimit}, ${droppedFromOverflow} lost`,\n    );\n    return;\n  }\n  buffer.push({ purpose: purpose as GatedPurpose, send, label });\n  log(`HOLD ${label} (${purpose}) — no answer yet, ${buffer.length} held`);\n};\n\n/**\n * The visitor did something deliberate — submitted a prompt — so the session\n * may be measured even though no CMP has answered.\n *\n * This is the unlock that keeps web5 measurable at all: on a Shopify store\n * with no privacy configuration the consent API never loads, consent stays\n * `unknown` forever, and without this every store would report nothing.\n *\n * It unlocks **transmission only**. Persistent identity stays gated on real\n * consent (see `mayPersistIdentity`) — typing a question is a reason to\n * measure the session, not a reason to persist an identifier across visits.\n * It also cannot override a `denied`.\n */\nexport const unlockOnUserAction = (): void => {\n  if (engaged) {\n    return;\n  }\n  engaged = true;\n  log(\n    `UNLOCK — visitor submitted a prompt; ${buffer.length} held event(s) to settle`,\n  );\n  rebuildView();\n  settleBuffer();\n  notify();\n};\n\n/** Whether the visitor has taken the deliberate action that unlocks the session. */\nexport const isUserEngaged = (): boolean => engaged;\n\n/**\n * Persistent, cross-visit storage of a visitor identifier requires real\n * consent — engagement is deliberately not enough.\n */\nexport const mayPersistIdentity = (): boolean =>\n  snapshot.analytics === 'granted';\n\nexport const getConsentSnapshot = (): ConsentSnapshot => snapshot;\n\n/** Referentially stable between changes, for `useSyncExternalStore`. */\nexport const getGateView = (): GateView => view;\n\nexport const subscribeToConsent = (listener: Listener): (() => void) => {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n};\n\nconst applySnapshot = (next: ConsentSnapshot): void => {\n  if (\n    next.analytics === snapshot.analytics &&\n    next.marketing === snapshot.marketing &&\n    next.performance === snapshot.performance\n  ) {\n    return;\n  }\n  log(`ANSWER — ${describe(snapshot)}  →  ${describe(next)}`);\n  snapshot = Object.freeze({ ...next });\n  rebuildView();\n  settleBuffer();\n  notify();\n};\n\n/**\n * Install the host's provider. Reads its current state immediately, *then*\n * subscribes — DL #217: a listener registered into an already-rendered page is\n * bound to an event that may have fired long before the bundle executed, so\n * subscribing alone would leave the gate permanently at `unknown`.\n */\nexport const installConsentProvider = (next: ConsentProvider): void => {\n  unsubscribeProvider?.();\n  provider = next;\n  const initial = next.read();\n  log(`provider installed: ${next.name} — reads ${describe(initial)}`);\n  applySnapshot(initial);\n  unsubscribeProvider = next.subscribe(applySnapshot);\n};\n\nexport const getInstalledProviderName = (): string | null =>\n  provider?.name ?? null;\n\nexport const setConsentBufferLimit = (limit: number): void => {\n  bufferLimit = Math.max(0, limit);\n};\n\n/** Diagnostics only — how much the gate is holding, and what it had to drop. */\nexport const getConsentGateStats = (): {\n  held: number;\n  droppedFromOverflow: number;\n} => ({ held: buffer.length, droppedFromOverflow });\n\nexport const resetConsentGateForTests = (): void => {\n  unsubscribeProvider?.();\n  unsubscribeProvider = null;\n  provider = null;\n  snapshot = UNKNOWN_CONSENT;\n  engaged = false;\n  buffer = [];\n  bufferLimit = DEFAULT_BUFFER_LIMIT;\n  droppedFromOverflow = 0;\n  listeners.clear();\n  rebuildView();\n};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAKV,SAAS;;AAEhB;AACA,MAAMC,oBAAoB,GAAG,EAAE;;AAE/B;AACA;AACA;AACA;AACA;AACA,MAAMC,UAAU,GAAG,cAAc;AAEjC,MAAMC,GAAG,GAAG,SAAAA,CAAA,EAA8B;EACxC,IAAI;IAAA,SAAAC,IAAA,GAAAC,SAAA,CAAAC,MAAA,EADUC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,GAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAJ,SAAA,CAAAI,IAAA;IAAA;IAEhBC,OAAO,CAACC,KAAK,CAACT,UAAU,EAAE,GAAGK,IAAI,CAAC;EACpC,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAED,MAAMK,QAAQ,GAAIC,CAAkB,IAClC,aAAaA,CAAC,CAACC,SAAS,gBAAgBD,CAAC,CAACE,WAAW,cAAcF,CAAC,CAACG,SAAS,EAAE;AAelF,IAAIC,QAAyB,GAAGjB,eAAe;AAC/C,IAAIkB,OAAO,GAAG,KAAK;AACnB,IAAIC,QAAgC,GAAG,IAAI;AAC3C,IAAIC,mBAAwC,GAAG,IAAI;AACnD,IAAIC,MAAmB,GAAG,EAAE;AAC5B,IAAIC,WAAW,GAAGrB,oBAAoB;AACtC,IAAIsB,mBAAmB,GAAG,CAAC;AAE3B,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAAW,CAAC;;AAErC;AACA;AACA;AACA;AACA;AACA,IAAIC,IAAc,GAAGC,MAAM,CAACC,MAAM,CAAC;EACjCC,OAAO,EAAE7B,eAAe;EACxBkB,OAAO,EAAE;AACX,CAAC,CAAC;AAEF,MAAMY,WAAW,GAAGA,CAAA,KAAY;EAC9BJ,IAAI,GAAGC,MAAM,CAACC,MAAM,CAAC;IAAEC,OAAO,EAAEZ,QAAQ;IAAEC;EAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAMa,MAAM,GAAGA,CAAA,KAAY;EACzB,KAAK,MAAMC,QAAQ,IAAIR,SAAS,EAAE;IAChC,IAAI;MACFQ,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,GAAIC,OAAuB,IAAc;EAC/D,IAAIA,OAAO,KAAK,WAAW,EAAE;IAC3B,OAAO,IAAI;EACb;EACA,MAAMC,KAAK,GAAGlB,QAAQ,CAACiB,OAAO,CAAC;EAC/B,IAAIC,KAAK,KAAK,QAAQ,EAAE;IACtB,OAAO,KAAK;EACd;EACA,IAAIA,KAAK,KAAK,SAAS,EAAE;IACvB,OAAO,IAAI;EACb;EACA,OAAOjB,OAAO;AAChB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMkB,YAAY,GAAGA,CAAA,KAAY;EAC/B,IAAIf,MAAM,CAACf,MAAM,KAAK,CAAC,EAAE;IACvB;EACF;EACA,MAAM+B,SAAsB,GAAG,EAAE;EACjC,MAAMC,SAAsB,GAAG,EAAE;EAEjC,KAAK,MAAMC,IAAI,IAAIlB,MAAM,EAAE;IACzB,IAAIY,WAAW,CAACM,IAAI,CAACL,OAAO,CAAC,EAAE;MAC7BI,SAAS,CAACE,IAAI,CAACD,IAAI,CAAC;IACtB,CAAC,MAAM,IAAItB,QAAQ,CAACsB,IAAI,CAACL,OAAO,CAAC,KAAK,QAAQ,EAAE;MAC9C;IAAA,CACD,MAAM;MACLG,SAAS,CAACG,IAAI,CAACD,IAAI,CAAC;IACtB;EACF;EAEA,MAAME,OAAO,GAAGpB,MAAM,CAACf,MAAM,GAAG+B,SAAS,CAAC/B,MAAM,GAAGgC,SAAS,CAAChC,MAAM;EACnEe,MAAM,GAAGgB,SAAS;EAElB,IAAIC,SAAS,CAAChC,MAAM,IAAImC,OAAO,EAAE;IAC/BtC,GAAG,CACD,sBAAsBmC,SAAS,CAAChC,MAAM,EAAE,IACrCmC,OAAO,GAAG,cAAcA,OAAO,YAAY,GAAG,EAAE,CAAC,IACjDJ,SAAS,CAAC/B,MAAM,GAAG,mBAAmB+B,SAAS,CAAC/B,MAAM,EAAE,GAAG,EAAE,CAClE,CAAC;EACH;EAEA,KAAK,MAAMiC,IAAI,IAAID,SAAS,EAAE;IAC5B,IAAI;MACFnC,GAAG,CAAC,cAAcoC,IAAI,CAACG,KAAK,KAAKH,IAAI,CAACL,OAAO,GAAG,CAAC;MACjDK,IAAI,CAACI,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,QAAQ,GAAG,SAAAA,CACtBV,OAAuB,EACvBS,IAAgB,EAChBD,KAAK,EACI;EAAA,IADTA,KAAK;IAALA,KAAK,GAAG,OAAO;EAAA;EAEf,IAAIT,WAAW,CAACC,OAAO,CAAC,EAAE;IACxB/B,GAAG,CAAC,QAAQuC,KAAK,KAAKR,OAAO,aAAa,CAAC;IAC3CS,IAAI,CAAC,CAAC;IACN;EACF;EACA,IAAIT,OAAO,KAAK,WAAW,IAAIjB,QAAQ,CAACiB,OAAO,CAAC,KAAK,QAAQ,EAAE;IAC7D/B,GAAG,CAAC,QAAQuC,KAAK,KAAKR,OAAO,qBAAqB,CAAC;IACnD;EACF;EACA,IAAIb,MAAM,CAACf,MAAM,IAAIgB,WAAW,EAAE;IAChCC,mBAAmB,IAAI,CAAC;IACxBpB,GAAG,CACD,QAAQuC,KAAK,KAAKR,OAAO,sBAAsBZ,WAAW,KAAKC,mBAAmB,OACpF,CAAC;IACD;EACF;EACAF,MAAM,CAACmB,IAAI,CAAC;IAAEN,OAAO,EAAEA,OAAuB;IAAES,IAAI;IAAED;EAAM,CAAC,CAAC;EAC9DvC,GAAG,CAAC,QAAQuC,KAAK,KAAKR,OAAO,sBAAsBb,MAAM,CAACf,MAAM,OAAO,CAAC;AAC1E,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMuC,kBAAkB,GAAGA,CAAA,KAAY;EAC5C,IAAI3B,OAAO,EAAE;IACX;EACF;EACAA,OAAO,GAAG,IAAI;EACdf,GAAG,CACD,wCAAwCkB,MAAM,CAACf,MAAM,0BACvD,CAAC;EACDwB,WAAW,CAAC,CAAC;EACbM,YAAY,CAAC,CAAC;EACdL,MAAM,CAAC,CAAC;AACV,CAAC;;AAED;AACA,OAAO,MAAMe,aAAa,GAAGA,CAAA,KAAe5B,OAAO;;AAEnD;AACA;AACA;AACA;AACA,OAAO,MAAM6B,kBAAkB,GAAGA,CAAA,KAChC9B,QAAQ,CAACH,SAAS,KAAK,SAAS;AAElC,OAAO,MAAMkC,kBAAkB,GAAGA,CAAA,KAAuB/B,QAAQ;;AAEjE;AACA,OAAO,MAAMgC,WAAW,GAAGA,CAAA,KAAgBvB,IAAI;AAE/C,OAAO,MAAMwB,kBAAkB,GAAIlB,QAAkB,IAAmB;EACtER,SAAS,CAAC2B,GAAG,CAACnB,QAAQ,CAAC;EACvB,OAAO,MAAM;IACXR,SAAS,CAAC4B,MAAM,CAACpB,QAAQ,CAAC;EAC5B,CAAC;AACH,CAAC;AAED,MAAMqB,aAAa,GAAIC,IAAqB,IAAW;EACrD,IACEA,IAAI,CAACxC,SAAS,KAAKG,QAAQ,CAACH,SAAS,IACrCwC,IAAI,CAACtC,SAAS,KAAKC,QAAQ,CAACD,SAAS,IACrCsC,IAAI,CAACvC,WAAW,KAAKE,QAAQ,CAACF,WAAW,EACzC;IACA;EACF;EACAZ,GAAG,CAAC,YAAYS,QAAQ,CAACK,QAAQ,CAAC,QAAQL,QAAQ,CAAC0C,IAAI,CAAC,EAAE,CAAC;EAC3DrC,QAAQ,GAAGU,MAAM,CAACC,MAAM,CAAC;IAAE,GAAG0B;EAAK,CAAC,CAAC;EACrCxB,WAAW,CAAC,CAAC;EACbM,YAAY,CAAC,CAAC;EACdL,MAAM,CAAC,CAAC;AACV,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMwB,sBAAsB,GAAID,IAAqB,IAAW;EACrElC,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvBD,QAAQ,GAAGmC,IAAI;EACf,MAAME,OAAO,GAAGF,IAAI,CAACG,IAAI,CAAC,CAAC;EAC3BtD,GAAG,CAAC,uBAAuBmD,IAAI,CAACI,IAAI,YAAY9C,QAAQ,CAAC4C,OAAO,CAAC,EAAE,CAAC;EACpEH,aAAa,CAACG,OAAO,CAAC;EACtBpC,mBAAmB,GAAGkC,IAAI,CAACK,SAAS,CAACN,aAAa,CAAC;AACrD,CAAC;AAED,OAAO,MAAMO,wBAAwB,GAAGA,CAAA;EAAA,IAAAC,SAAA;EAAA,OACtC,EAAAA,SAAA,GAAA1C,QAAQ,qBAAR0C,SAAA,CAAUH,IAAI,KAAI,IAAI;AAAA;AAExB,OAAO,MAAMI,qBAAqB,GAAIC,KAAa,IAAW;EAC5DzC,WAAW,GAAG0C,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEF,KAAK,CAAC;AAClC,CAAC;;AAED;AACA,OAAO,MAAMG,mBAAmB,GAAGA,CAAA,MAG7B;EAAE3B,IAAI,EAAElB,MAAM,CAACf,MAAM;EAAEiB;AAAoB,CAAC,CAAC;AAEnD,OAAO,MAAM4C,wBAAwB,GAAGA,CAAA,KAAY;EAClD/C,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvBA,mBAAmB,GAAG,IAAI;EAC1BD,QAAQ,GAAG,IAAI;EACfF,QAAQ,GAAGjB,eAAe;EAC1BkB,OAAO,GAAG,KAAK;EACfG,MAAM,GAAG,EAAE;EACXC,WAAW,GAAGrB,oBAAoB;EAClCsB,mBAAmB,GAAG,CAAC;EACvBC,SAAS,CAAC4C,KAAK,CAAC,CAAC;EACjBtC,WAAW,CAAC,CAAC;AACf,CAAC","ignoreList":[]}
+{"version":3,"names":["UNKNOWN_CONSENT","LOG_PREFIX","log","_len","arguments","length","args","Array","_key","console","debug","describe","s","analytics","performance","marketing","snapshot","engaged","unsubscribeProvider","listeners","Set","notify","listener","mayPersistToken","state","unlockOnUserAction","getConsentSnapshot","subscribeToConsent","add","delete","applySnapshot","next","Object","freeze","installConsentProvider","initial","read","name","subscribe","resetConsentGateForTests","clear"],"sources":["../../../src/privacy/consentGate.ts"],"sourcesContent":["/**\n * The consent gate — DL #218 (revised).\n *\n * Legal cleared analytics/BI transmission to need no consent gate, so the old\n * `transmit()` + buffer machinery is gone. What analytics emitters used to route\n * through the gate now goes straight to the wire.\n *\n * Analytics AND performance telemetry both go straight to the wire now, so there\n * is nothing left to \"transmit\"-gate. What remains is the consent SIGNAL —\n * snapshot, engagement, provider — behind a single predicate:\n *\n *   - `mayPersistToken()` — whether the visitor's OAuth token may be written to\n *     localStorage. Persisting the token persists a cross-visit visitor identity\n *     (its refresh token), which is the one thing consent still governs. Truth\n *     table: granted → yes; denied → never; unknown → only once the visitor\n *     engaged.\n *\n * Engagement (`unlockOnUserAction`, fired when the visitor submits a prompt)\n * resolves the `unknown` case — typing a question is a reason to remember this\n * visitor for the session — but it never overrides a `denied`.\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n} from './types';\n\nconst LOG_PREFIX = '[w5-consent]';\n\nconst log = (...args: unknown[]): void => {\n  try {\n    console.debug(LOG_PREFIX, ...args);\n  } catch {\n    // A console that throws must never break anything.\n  }\n};\n\nconst describe = (s: ConsentSnapshot): string =>\n  `analytics=${s.analytics} performance=${s.performance} marketing=${s.marketing}`;\n\ntype Listener = () => void;\n\nlet snapshot: ConsentSnapshot = UNKNOWN_CONSENT;\nlet engaged = false;\nlet unsubscribeProvider: (() => void) | null = null;\n\nconst listeners = new Set<Listener>();\n\nconst notify = (): void => {\n  for (const listener of listeners) {\n    try {\n      listener();\n    } catch {\n      // A subscriber that throws must not stop the others.\n    }\n  }\n};\n\n/**\n * Whether the visitor's OAuth token may be persisted to `localStorage`.\n *\n * Persisting the token persists a cross-visit visitor identity (the refresh\n * token re-identifies the visitor on their next visit), so it answers to\n * consent — the one thing that still does. Explicit consent wins in both\n * directions; engagement resolves only the `unknown` case. The token still\n * lives in memory for the session regardless — only the write to storage is\n * gated.\n */\nexport const mayPersistToken = (): boolean => {\n  const state = snapshot.analytics;\n  if (state === 'denied') {\n    return false;\n  }\n  if (state === 'granted') {\n    return true;\n  }\n  return engaged;\n};\n\n/**\n * The visitor did something deliberate — submitted a prompt — so we may remember\n * them for the session even though no CMP has answered. Unlocks the `unknown`\n * case only; it cannot override a `denied`.\n */\nexport const unlockOnUserAction = (): void => {\n  if (engaged) {\n    return;\n  }\n  engaged = true;\n  log('UNLOCK — visitor submitted a prompt');\n  notify();\n};\n\nexport const getConsentSnapshot = (): ConsentSnapshot => snapshot;\n\nexport const subscribeToConsent = (listener: Listener): (() => void) => {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n};\n\nconst applySnapshot = (next: ConsentSnapshot): void => {\n  if (\n    next.analytics === snapshot.analytics &&\n    next.marketing === snapshot.marketing &&\n    next.performance === snapshot.performance\n  ) {\n    return;\n  }\n  log(`ANSWER — ${describe(snapshot)}  →  ${describe(next)}`);\n  snapshot = Object.freeze({ ...next });\n  notify();\n};\n\n/**\n * Install the host's provider. Reads its current state immediately, *then*\n * subscribes — DL #217: a listener registered into an already-rendered page is\n * bound to an event that may have fired long before the bundle executed, so\n * subscribing alone would leave the gate permanently at `unknown`.\n */\nexport const installConsentProvider = (next: ConsentProvider): void => {\n  unsubscribeProvider?.();\n  const initial = next.read();\n  log(`provider installed: ${next.name} — reads ${describe(initial)}`);\n  applySnapshot(initial);\n  unsubscribeProvider = next.subscribe(applySnapshot);\n};\n\nexport const resetConsentGateForTests = (): void => {\n  unsubscribeProvider?.();\n  unsubscribeProvider = null;\n  snapshot = UNKNOWN_CONSENT;\n  engaged = false;\n  listeners.clear();\n};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAGV,SAAS;AAEhB,MAAMC,UAAU,GAAG,cAAc;AAEjC,MAAMC,GAAG,GAAG,SAAAA,CAAA,EAA8B;EACxC,IAAI;IAAA,SAAAC,IAAA,GAAAC,SAAA,CAAAC,MAAA,EADUC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,GAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAJ,SAAA,CAAAI,IAAA;IAAA;IAEhBC,OAAO,CAACC,KAAK,CAACT,UAAU,EAAE,GAAGK,IAAI,CAAC;EACpC,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAED,MAAMK,QAAQ,GAAIC,CAAkB,IAClC,aAAaA,CAAC,CAACC,SAAS,gBAAgBD,CAAC,CAACE,WAAW,cAAcF,CAAC,CAACG,SAAS,EAAE;AAIlF,IAAIC,QAAyB,GAAGhB,eAAe;AAC/C,IAAIiB,OAAO,GAAG,KAAK;AACnB,IAAIC,mBAAwC,GAAG,IAAI;AAEnD,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAAW,CAAC;AAErC,MAAMC,MAAM,GAAGA,CAAA,KAAY;EACzB,KAAK,MAAMC,QAAQ,IAAIH,SAAS,EAAE;IAChC,IAAI;MACFG,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,eAAe,GAAGA,CAAA,KAAe;EAC5C,MAAMC,KAAK,GAAGR,QAAQ,CAACH,SAAS;EAChC,IAAIW,KAAK,KAAK,QAAQ,EAAE;IACtB,OAAO,KAAK;EACd;EACA,IAAIA,KAAK,KAAK,SAAS,EAAE;IACvB,OAAO,IAAI;EACb;EACA,OAAOP,OAAO;AAChB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,kBAAkB,GAAGA,CAAA,KAAY;EAC5C,IAAIR,OAAO,EAAE;IACX;EACF;EACAA,OAAO,GAAG,IAAI;EACdf,GAAG,CAAC,qCAAqC,CAAC;EAC1CmB,MAAM,CAAC,CAAC;AACV,CAAC;AAED,OAAO,MAAMK,kBAAkB,GAAGA,CAAA,KAAuBV,QAAQ;AAEjE,OAAO,MAAMW,kBAAkB,GAAIL,QAAkB,IAAmB;EACtEH,SAAS,CAACS,GAAG,CAACN,QAAQ,CAAC;EACvB,OAAO,MAAM;IACXH,SAAS,CAACU,MAAM,CAACP,QAAQ,CAAC;EAC5B,CAAC;AACH,CAAC;AAED,MAAMQ,aAAa,GAAIC,IAAqB,IAAW;EACrD,IACEA,IAAI,CAAClB,SAAS,KAAKG,QAAQ,CAACH,SAAS,IACrCkB,IAAI,CAAChB,SAAS,KAAKC,QAAQ,CAACD,SAAS,IACrCgB,IAAI,CAACjB,WAAW,KAAKE,QAAQ,CAACF,WAAW,EACzC;IACA;EACF;EACAZ,GAAG,CAAC,YAAYS,QAAQ,CAACK,QAAQ,CAAC,QAAQL,QAAQ,CAACoB,IAAI,CAAC,EAAE,CAAC;EAC3Df,QAAQ,GAAGgB,MAAM,CAACC,MAAM,CAAC;IAAE,GAAGF;EAAK,CAAC,CAAC;EACrCV,MAAM,CAAC,CAAC;AACV,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMa,sBAAsB,GAAIH,IAAqB,IAAW;EACrEb,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvB,MAAMiB,OAAO,GAAGJ,IAAI,CAACK,IAAI,CAAC,CAAC;EAC3BlC,GAAG,CAAC,uBAAuB6B,IAAI,CAACM,IAAI,YAAY1B,QAAQ,CAACwB,OAAO,CAAC,EAAE,CAAC;EACpEL,aAAa,CAACK,OAAO,CAAC;EACtBjB,mBAAmB,GAAGa,IAAI,CAACO,SAAS,CAACR,aAAa,CAAC;AACrD,CAAC;AAED,OAAO,MAAMS,wBAAwB,GAAGA,CAAA,KAAY;EAClDrB,mBAAmB,YAAnBA,mBAAmB,CAAG,CAAC;EACvBA,mBAAmB,GAAG,IAAI;EAC1BF,QAAQ,GAAGhB,eAAe;EAC1BiB,OAAO,GAAG,KAAK;EACfE,SAAS,CAACqB,KAAK,CAAC,CAAC;AACnB,CAAC","ignoreList":[]}

package/dist/esm/privacy/index.js

@@ -1,5 +1,5 @@
 export { UNKNOWN_CONSENT } from './types.js';
-export { transmit, mayTransmit, unlockOnUserAction, isUserEngaged, mayPersistIdentity, getConsentSnapshot, getGateView, subscribeToConsent, installConsentProvider, getInstalledProviderName, setConsentBufferLimit, getConsentGateStats, resetConsentGateForTests } from './consentGate.js';
+export { unlockOnUserAction, mayPersistToken, getConsentSnapshot, subscribeToConsent, installConsentProvider, resetConsentGateForTests } from './consentGate.js';
 export { detectConsentProvider, initConsentGate } from './detectProvider.js';
 export { CONSENT_OVERRIDE_KEY, CONSENT_OVERRIDE_QUERY_PARAM, getConsentOverride, setConsentOverride } from './consentOverride.js';
 export { createShopifyConsentProvider, isShopifyHost } from './providers/shopifyProvider.js';

package/dist/esm/privacy/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["UNKNOWN_CONSENT","transmit","mayTransmit","unlockOnUserAction","isUserEngaged","mayPersistIdentity","getConsentSnapshot","getGateView","subscribeToConsent","installConsentProvider","getInstalledProviderName","setConsentBufferLimit","getConsentGateStats","resetConsentGateForTests","detectConsentProvider","initConsentGate","CONSENT_OVERRIDE_KEY","CONSENT_OVERRIDE_QUERY_PARAM","getConsentOverride","setConsentOverride","createShopifyConsentProvider","isShopifyHost","createOneTrustConsentProvider","isOneTrustHost","HOST_CONSENT_GLOBAL","createHostSuppliedConsentProvider","hasHostSuppliedConsent","publishHostConsent"],"sources":["../../../src/privacy/index.ts"],"sourcesContent":["export {\n  type ConsentState,\n  type ConsentPurpose,\n  type GatedPurpose,\n  type ConsentSnapshot,\n  type ConsentProvider,\n  UNKNOWN_CONSENT,\n} from './types';\n\nexport {\n  type GateView,\n  transmit,\n  mayTransmit,\n  unlockOnUserAction,\n  isUserEngaged,\n  mayPersistIdentity,\n  getConsentSnapshot,\n  getGateView,\n  subscribeToConsent,\n  installConsentProvider,\n  getInstalledProviderName,\n  setConsentBufferLimit,\n  getConsentGateStats,\n  resetConsentGateForTests,\n} from './consentGate';\n\nexport { detectConsentProvider, initConsentGate } from './detectProvider';\n\nexport {\n  CONSENT_OVERRIDE_KEY,\n  CONSENT_OVERRIDE_QUERY_PARAM,\n  getConsentOverride,\n  setConsentOverride,\n} from './consentOverride';\n\nexport {\n  createShopifyConsentProvider,\n  isShopifyHost,\n} from './providers/shopifyProvider';\nexport {\n  createOneTrustConsentProvider,\n  isOneTrustHost,\n} from './providers/oneTrustProvider';\nexport {\n  type HostConsentInput,\n  HOST_CONSENT_GLOBAL,\n  createHostSuppliedConsentProvider,\n  hasHostSuppliedConsent,\n  publishHostConsent,\n} from './providers/hostSuppliedProvider';\n"],"mappings":"AAAA,SAMEA,eAAe,QACV,SAAS;AAEhB,SAEEC,QAAQ,EACRC,WAAW,EACXC,kBAAkB,EAClBC,aAAa,EACbC,kBAAkB,EAClBC,kBAAkB,EAClBC,WAAW,EACXC,kBAAkB,EAClBC,sBAAsB,EACtBC,wBAAwB,EACxBC,qBAAqB,EACrBC,mBAAmB,EACnBC,wBAAwB,QACnB,eAAe;AAEtB,SAASC,qBAAqB,EAAEC,eAAe,QAAQ,kBAAkB;AAEzE,SACEC,oBAAoB,EACpBC,4BAA4B,EAC5BC,kBAAkB,EAClBC,kBAAkB,QACb,mBAAmB;AAE1B,SACEC,4BAA4B,EAC5BC,aAAa,QACR,6BAA6B;AACpC,SACEC,6BAA6B,EAC7BC,cAAc,QACT,8BAA8B;AACrC,SAEEC,mBAAmB,EACnBC,iCAAiC,EACjCC,sBAAsB,EACtBC,kBAAkB,QACb,kCAAkC","ignoreList":[]}
+{"version":3,"names":["UNKNOWN_CONSENT","unlockOnUserAction","mayPersistToken","getConsentSnapshot","subscribeToConsent","installConsentProvider","resetConsentGateForTests","detectConsentProvider","initConsentGate","CONSENT_OVERRIDE_KEY","CONSENT_OVERRIDE_QUERY_PARAM","getConsentOverride","setConsentOverride","createShopifyConsentProvider","isShopifyHost","createOneTrustConsentProvider","isOneTrustHost","HOST_CONSENT_GLOBAL","createHostSuppliedConsentProvider","hasHostSuppliedConsent","publishHostConsent"],"sources":["../../../src/privacy/index.ts"],"sourcesContent":["export {\n  type ConsentState,\n  type ConsentPurpose,\n  type GatedPurpose,\n  type ConsentSnapshot,\n  type ConsentProvider,\n  UNKNOWN_CONSENT,\n} from './types';\n\nexport {\n  unlockOnUserAction,\n  mayPersistToken,\n  getConsentSnapshot,\n  subscribeToConsent,\n  installConsentProvider,\n  resetConsentGateForTests,\n} from './consentGate';\n\nexport { detectConsentProvider, initConsentGate } from './detectProvider';\n\nexport {\n  CONSENT_OVERRIDE_KEY,\n  CONSENT_OVERRIDE_QUERY_PARAM,\n  getConsentOverride,\n  setConsentOverride,\n} from './consentOverride';\n\nexport {\n  createShopifyConsentProvider,\n  isShopifyHost,\n} from './providers/shopifyProvider';\nexport {\n  createOneTrustConsentProvider,\n  isOneTrustHost,\n} from './providers/oneTrustProvider';\nexport {\n  type HostConsentInput,\n  HOST_CONSENT_GLOBAL,\n  createHostSuppliedConsentProvider,\n  hasHostSuppliedConsent,\n  publishHostConsent,\n} from './providers/hostSuppliedProvider';\n"],"mappings":"AAAA,SAMEA,eAAe,QACV,SAAS;AAEhB,SACEC,kBAAkB,EAClBC,eAAe,EACfC,kBAAkB,EAClBC,kBAAkB,EAClBC,sBAAsB,EACtBC,wBAAwB,QACnB,eAAe;AAEtB,SAASC,qBAAqB,EAAEC,eAAe,QAAQ,kBAAkB;AAEzE,SACEC,oBAAoB,EACpBC,4BAA4B,EAC5BC,kBAAkB,EAClBC,kBAAkB,QACb,mBAAmB;AAE1B,SACEC,4BAA4B,EAC5BC,aAAa,QACR,6BAA6B;AACpC,SACEC,6BAA6B,EAC7BC,cAAc,QACT,8BAA8B;AACrC,SAEEC,mBAAmB,EACnBC,iCAAiC,EACjCC,sBAAsB,EACtBC,kBAAkB,QACb,kCAAkC","ignoreList":[]}