@wix/web5-core 1.63.44 → 1.63.45

package/dist/types/privacy/consentGate.d.ts

@@ -1,70 +1,44 @@
 /**
- * The consent gate — DL #218.
+ * The consent gate — DL #218 (revised).
  *
- * Every BI, telemetry and analytics emitter in web5 goes through `transmit()`
- * instead of calling its transport directly. The gate exists because the
- * consent signal resolves *after* the events that need it: Shopify's consent
- * API is not on the page by default and has to be requested, and the fedops
- * app-load pair fires inside that window. A boolean checked at each call site
- * can only ever drop an event that is already in flight; the gate can hold it.
+ * Legal cleared analytics/BI transmission to need no consent gate, so the old
+ * `transmit()` + buffer machinery is gone. What analytics emitters used to route
+ * through the gate now goes straight to the wire.
  *
- * Two independent unlocks, and they do not compose as a plain "either/or":
+ * Analytics AND performance telemetry both go straight to the wire now, so there
+ * is nothing left to "transmit"-gate. What remains is the consent SIGNAL —
+ * snapshot, engagement, provider — behind a single predicate:
  *
- *   | consent   | engaged | result                          |
- *   |-----------|---------|---------------------------------|
- *   | granted   | either  | transmit                        |
- *   | unknown   | no      | hold in the buffer              |
- *   | unknown   | yes     | transmit, and flush what's held |
- *   | denied    | yes     | still nothing                   |
+ *   - `mayPersistToken()` — whether the visitor's OAuth token may be written to
+ *     localStorage. Persisting the token persists a cross-visit visitor identity
+ *     (its refresh token), which is the one thing consent still governs. Truth
+ *     table: granted → yes; denied → never; unknown → only once the visitor
+ *     engaged.
  *
- * Denied outranks engaged. A visitor who refused analytics in the banner does
- * not re-enable tracking by typing a question.
+ * Engagement (`unlockOnUserAction`, fired when the visitor submits a prompt)
+ * resolves the `unknown` case — typing a question is a reason to remember this
+ * visitor for the session — but it never overrides a `denied`.
  */
-import { type ConsentProvider, type ConsentPurpose, type ConsentSnapshot } from './types';
-export interface GateView {
-    consent: ConsentSnapshot;
-    engaged: boolean;
-}
+import { type ConsentProvider, type ConsentSnapshot } from './types';
 type Listener = () => void;
-declare let droppedFromOverflow: number;
 /**
- * Whether an event for `purpose` may go on the wire right now.
- *
- * `necessary` is always allowed. For everything else: explicit consent wins in
- * both directions, and engagement resolves only the `unknown` case.
- */
-export declare const mayTransmit: (purpose: ConsentPurpose) => boolean;
-/**
- * The single entry point for anything that would put a request on the wire.
- *
- * Allowed → sent now. Refused → dropped. Not yet known → held until an unlock
- * settles it, or discarded with the page.
+ * Whether the visitor's OAuth token may be persisted to `localStorage`.
+ *
+ * Persisting the token persists a cross-visit visitor identity (the refresh
+ * token re-identifies the visitor on their next visit), so it answers to
+ * consent — the one thing that still does. Explicit consent wins in both
+ * directions; engagement resolves only the `unknown` case. The token still
+ * lives in memory for the session regardless — only the write to storage is
+ * gated.
  */
-export declare const transmit: (purpose: ConsentPurpose, send: () => void, label?: string) => void;
+export declare const mayPersistToken: () => boolean;
 /**
- * The visitor did something deliberate — submitted a prompt — so the session
- * may be measured even though no CMP has answered.
- *
- * This is the unlock that keeps web5 measurable at all: on a Shopify store
- * with no privacy configuration the consent API never loads, consent stays
- * `unknown` forever, and without this every store would report nothing.
- *
- * It unlocks **transmission only**. Persistent identity stays gated on real
- * consent (see `mayPersistIdentity`) — typing a question is a reason to
- * measure the session, not a reason to persist an identifier across visits.
- * It also cannot override a `denied`.
+ * The visitor did something deliberate — submitted a prompt — so we may remember
+ * them for the session even though no CMP has answered. Unlocks the `unknown`
+ * case only; it cannot override a `denied`.
  */
 export declare const unlockOnUserAction: () => void;
-/** Whether the visitor has taken the deliberate action that unlocks the session. */
-export declare const isUserEngaged: () => boolean;
-/**
- * Persistent, cross-visit storage of a visitor identifier requires real
- * consent — engagement is deliberately not enough.
- */
-export declare const mayPersistIdentity: () => boolean;
 export declare const getConsentSnapshot: () => ConsentSnapshot;
-/** Referentially stable between changes, for `useSyncExternalStore`. */
-export declare const getGateView: () => GateView;
 export declare const subscribeToConsent: (listener: Listener) => (() => void);
 /**
  * Install the host's provider. Reads its current state immediately, *then*
@@ -73,13 +47,6 @@ export declare const subscribeToConsent: (listener: Listener) => (() => void);
  * subscribing alone would leave the gate permanently at `unknown`.
  */
 export declare const installConsentProvider: (next: ConsentProvider) => void;
-export declare const getInstalledProviderName: () => string | null;
-export declare const setConsentBufferLimit: (limit: number) => void;
-/** Diagnostics only — how much the gate is holding, and what it had to drop. */
-export declare const getConsentGateStats: () => {
-    held: number;
-    droppedFromOverflow: number;
-};
 export declare const resetConsentGateForTests: () => void;
 export {};
 //# sourceMappingURL=consentGate.d.ts.map

package/dist/types/privacy/consentGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consentGate.d.ts","sourceRoot":"","sources":["../../../src/privacy/consentGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EAErB,MAAM,SAAS,CAAC;AA6BjB,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,KAAK,QAAQ,GAAG,MAAM,IAAI,CAAC;AAQ3B,QAAA,IAAI,mBAAmB,QAAI,CAAC;AA4B5B;;;;;GAKG;AACH,eAAO,MAAM,WAAW,YAAa,cAAc,KAAG,OAYrD,CAAC;AAiDF;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,YACV,cAAc,QACjB,MAAM,IAAI,qBAEf,IAmBF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,QAAO,IAWrC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,aAAa,QAAO,OAAkB,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,OACJ,CAAC;AAEnC,eAAO,MAAM,kBAAkB,QAAO,eAA2B,CAAC;AAElE,wEAAwE;AACxE,eAAO,MAAM,WAAW,QAAO,QAAgB,CAAC;AAEhD,eAAO,MAAM,kBAAkB,aAAc,QAAQ,KAAG,CAAC,MAAM,IAAI,CAKlE,CAAC;AAiBF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAU,eAAe,KAAG,IAO9D,CAAC;AAEF,eAAO,MAAM,wBAAwB,QAAO,MAAM,GAAG,IAC7B,CAAC;AAEzB,eAAO,MAAM,qBAAqB,UAAW,MAAM,KAAG,IAErD,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,QAAO;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB,MAAM,CAAC;CACqB,CAAC;AAEpD,eAAO,MAAM,wBAAwB,QAAO,IAW3C,CAAC"}
+{"version":3,"file":"consentGate.d.ts","sourceRoot":"","sources":["../../../src/privacy/consentGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,SAAS,CAAC;AAejB,KAAK,QAAQ,GAAG,MAAM,IAAI,CAAC;AAkB3B;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,QAAO,OASlC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAO,IAOrC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,eAA2B,CAAC;AAElE,eAAO,MAAM,kBAAkB,aAAc,QAAQ,KAAG,CAAC,MAAM,IAAI,CAKlE,CAAC;AAeF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAU,eAAe,KAAG,IAM9D,CAAC;AAEF,eAAO,MAAM,wBAAwB,QAAO,IAM3C,CAAC"}

package/dist/types/privacy/index.d.ts

@@ -1,5 +1,5 @@
 export { type ConsentState, type ConsentPurpose, type GatedPurpose, type ConsentSnapshot, type ConsentProvider, UNKNOWN_CONSENT, } from './types';
-export { type GateView, transmit, mayTransmit, unlockOnUserAction, isUserEngaged, mayPersistIdentity, getConsentSnapshot, getGateView, subscribeToConsent, installConsentProvider, getInstalledProviderName, setConsentBufferLimit, getConsentGateStats, resetConsentGateForTests, } from './consentGate';
+export { unlockOnUserAction, mayPersistToken, getConsentSnapshot, subscribeToConsent, installConsentProvider, resetConsentGateForTests, } from './consentGate';
 export { detectConsentProvider, initConsentGate } from './detectProvider';
 export { CONSENT_OVERRIDE_KEY, CONSENT_OVERRIDE_QUERY_PARAM, getConsentOverride, setConsentOverride, } from './consentOverride';
 export { createShopifyConsentProvider, isShopifyHost, } from './providers/shopifyProvider';

package/dist/types/privacy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/privacy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,KAAK,QAAQ,EACb,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,4BAA4B,EAC5B,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/privacy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,4BAA4B,EAC5B,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,kCAAkC,CAAC"}

package/dist/types/utils/analyticsEvents.d.ts

@@ -6,16 +6,6 @@ declare global {
         OnetrustActiveGroups?: string;
     }
 }
-/**
- * Whether analytics may go on the wire right now.
- *
- * DL #218: this used to read OneTrust directly and return `true` when OneTrust
- * was absent, which on a Shopify storefront — where no host loads OneTrust —
- * meant unconditional default-allow. It now defers to the consent gate, which
- * reads whichever CMP the host actually has and, in the absence of any answer,
- * holds until the visitor does something deliberate.
- */
-export declare function hasAnalyticsConsent(): boolean;
 /**
  * Universal event dispatch: auto-detects GTM vs standalone gtag.js.
  *

package/dist/types/utils/analyticsEvents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyticsEvents.d.ts","sourceRoot":"","sources":["../../../src/utils/analyticsEvents.ts"],"names":[],"mappings":"AAEA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B;CACF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAK7C;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,IAAI,CA2BN;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,MAAM,EAC3B,UAAU,EAAE,MAAM,GACjB,IAAI,CAKN;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,EAC1C,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAMN;AAED,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAMN;AAED,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,UAAU,GAAG,UAAU,GAChC,IAAI,CAMN;AAED,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAExD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CAMN"}
+{"version":3,"file":"analyticsEvents.d.ts","sourceRoot":"","sources":["../../../src/utils/analyticsEvents.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;QACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,IAAI,CAoBN;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,MAAM,EAC3B,UAAU,EAAE,MAAM,GACjB,IAAI,CAKN;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,EAC1C,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAMN;AAED,wBAAgB,SAAS,CACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAMN;AAED,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,UAAU,GAAG,UAAU,GAChC,IAAI,CAMN;AAED,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAExD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CAMN"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@wix/web5-core",
   "license": "MIT",
-  "version": "1.63.44",
+  "version": "1.63.45",
   "author": {
     "name": "tsachis",
     "email": "tsachis@wix.com"
@@ -100,5 +100,5 @@
   "wallaby": {
     "autoDetect": true
   },
-  "falconPackageHash": "a8f9d2f5f65d9049ad197fd47d3e47c6852fe450be81c0e67de91d7e"
+  "falconPackageHash": "66d02251395d1958f52f669009563c0b5205283f3a5c75f958279223"
 }