@wix/web5-core 1.63.48 → 1.63.49

package/dist/esm/privacy/providers/hostSuppliedProvider.js

@@ -1,85 +0,0 @@
-/**
- * Host-supplied provider — DL #218.
- *
- * The escape hatch for every CMP we cannot detect: a host page that already
- * knows its visitor's answer publishes it, and the gate believes it. This is
- * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach
- * the gate without web5 learning each vendor's API.
- *
- * Two ways in, because hosts differ in when they know:
- *   - `window.__web5_consent__` set before the bundle loads, read at install
- *   - `publishHostConsent()` called at any time afterwards
- */
-
-import { UNKNOWN_CONSENT } from '../types.js';
-export const HOST_CONSENT_GLOBAL = '__web5_consent__';
-
-/** What a host may publish. Anything missing stays `unknown`. */
-
-const coerce = value => {
-  if (value === true) {
-    return 'granted';
-  }
-  if (value === false) {
-    return 'denied';
-  }
-  if (value === 'granted' || value === 'denied' || value === 'unknown') {
-    return value;
-  }
-  return 'unknown';
-};
-const normalize = input => {
-  if (!input || typeof input !== 'object') {
-    return UNKNOWN_CONSENT;
-  }
-  const analytics = coerce(input.analytics);
-  return {
-    analytics,
-    marketing: coerce(input.marketing),
-    // A host that speaks only about analytics is taken to mean the same for
-    // load telemetry, which is the same wire and the same recipient.
-    performance: input.performance === undefined ? analytics : coerce(input.performance)
-  };
-};
-const readGlobal = () => {
-  if (typeof window === 'undefined') {
-    return UNKNOWN_CONSENT;
-  }
-  const raw = window[HOST_CONSENT_GLOBAL];
-  return normalize(raw);
-};
-export const hasHostSuppliedConsent = () => {
-  if (typeof window === 'undefined') {
-    return false;
-  }
-  const raw = window[HOST_CONSENT_GLOBAL];
-  return !!raw && typeof raw === 'object';
-};
-const subscribers = new Set();
-let published = null;
-
-/**
- * Called by the host — directly, or by the loader when it is handed consent in
- * its boot options — whenever the visitor's answer is known or changes.
- */
-export const publishHostConsent = input => {
-  published = normalize(input);
-  for (const subscriber of subscribers) {
-    subscriber(published);
-  }
-};
-export const createHostSuppliedConsentProvider = () => ({
-  name: 'host-supplied',
-  read: () => published ?? readGlobal(),
-  subscribe(onChange) {
-    subscribers.add(onChange);
-    return () => {
-      subscribers.delete(onChange);
-    };
-  }
-});
-export const __resetHostConsentForTests = () => {
-  published = null;
-  subscribers.clear();
-};
-//# sourceMappingURL=hostSuppliedProvider.js.map

package/dist/esm/privacy/providers/hostSuppliedProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["UNKNOWN_CONSENT","HOST_CONSENT_GLOBAL","coerce","value","normalize","input","analytics","marketing","performance","undefined","readGlobal","window","raw","hasHostSuppliedConsent","subscribers","Set","published","publishHostConsent","subscriber","createHostSuppliedConsentProvider","name","read","subscribe","onChange","add","delete","__resetHostConsentForTests","clear"],"sources":["../../../../src/privacy/providers/hostSuppliedProvider.ts"],"sourcesContent":["/**\n * Host-supplied provider — DL #218.\n *\n * The escape hatch for every CMP we cannot detect: a host page that already\n * knows its visitor's answer publishes it, and the gate believes it. This is\n * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach\n * the gate without web5 learning each vendor's API.\n *\n * Two ways in, because hosts differ in when they know:\n *   - `window.__web5_consent__` set before the bundle loads, read at install\n *   - `publishHostConsent()` called at any time afterwards\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n  type ConsentState,\n} from '../types';\n\nexport const HOST_CONSENT_GLOBAL = '__web5_consent__';\n\n/** What a host may publish. Anything missing stays `unknown`. */\nexport interface HostConsentInput {\n  analytics?: ConsentState | boolean;\n  marketing?: ConsentState | boolean;\n  performance?: ConsentState | boolean;\n}\n\nconst coerce = (value: ConsentState | boolean | undefined): ConsentState => {\n  if (value === true) {\n    return 'granted';\n  }\n  if (value === false) {\n    return 'denied';\n  }\n  if (value === 'granted' || value === 'denied' || value === 'unknown') {\n    return value;\n  }\n  return 'unknown';\n};\n\nconst normalize = (\n  input: HostConsentInput | null | undefined,\n): ConsentSnapshot => {\n  if (!input || typeof input !== 'object') {\n    return UNKNOWN_CONSENT;\n  }\n  const analytics = coerce(input.analytics);\n  return {\n    analytics,\n    marketing: coerce(input.marketing),\n    // A host that speaks only about analytics is taken to mean the same for\n    // load telemetry, which is the same wire and the same recipient.\n    performance:\n      input.performance === undefined ? analytics : coerce(input.performance),\n  };\n};\n\nconst readGlobal = (): ConsentSnapshot => {\n  if (typeof window === 'undefined') {\n    return UNKNOWN_CONSENT;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[\n    HOST_CONSENT_GLOBAL\n  ];\n  return normalize(raw as HostConsentInput | undefined);\n};\n\nexport const hasHostSuppliedConsent = (): boolean => {\n  if (typeof window === 'undefined') {\n    return false;\n  }\n  const raw = (window as unknown as Record<string, unknown>)[\n    HOST_CONSENT_GLOBAL\n  ];\n  return !!raw && typeof raw === 'object';\n};\n\nconst subscribers = new Set<(snapshot: ConsentSnapshot) => void>();\nlet published: ConsentSnapshot | null = null;\n\n/**\n * Called by the host — directly, or by the loader when it is handed consent in\n * its boot options — whenever the visitor's answer is known or changes.\n */\nexport const publishHostConsent = (input: HostConsentInput): void => {\n  published = normalize(input);\n  for (const subscriber of subscribers) {\n    subscriber(published);\n  }\n};\n\nexport const createHostSuppliedConsentProvider = (): ConsentProvider => ({\n  name: 'host-supplied',\n\n  read: () => published ?? readGlobal(),\n\n  subscribe(onChange) {\n    subscribers.add(onChange);\n    return () => {\n      subscribers.delete(onChange);\n    };\n  },\n});\n\nexport const __resetHostConsentForTests = (): void => {\n  published = null;\n  subscribers.clear();\n};\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAIV,UAAU;AAEjB,OAAO,MAAMC,mBAAmB,GAAG,kBAAkB;;AAErD;;AAOA,MAAMC,MAAM,GAAIC,KAAyC,IAAmB;EAC1E,IAAIA,KAAK,KAAK,IAAI,EAAE;IAClB,OAAO,SAAS;EAClB;EACA,IAAIA,KAAK,KAAK,KAAK,EAAE;IACnB,OAAO,QAAQ;EACjB;EACA,IAAIA,KAAK,KAAK,SAAS,IAAIA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,SAAS,EAAE;IACpE,OAAOA,KAAK;EACd;EACA,OAAO,SAAS;AAClB,CAAC;AAED,MAAMC,SAAS,GACbC,KAA0C,IACtB;EACpB,IAAI,CAACA,KAAK,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;IACvC,OAAOL,eAAe;EACxB;EACA,MAAMM,SAAS,GAAGJ,MAAM,CAACG,KAAK,CAACC,SAAS,CAAC;EACzC,OAAO;IACLA,SAAS;IACTC,SAAS,EAAEL,MAAM,CAACG,KAAK,CAACE,SAAS,CAAC;IAClC;IACA;IACAC,WAAW,EACTH,KAAK,CAACG,WAAW,KAAKC,SAAS,GAAGH,SAAS,GAAGJ,MAAM,CAACG,KAAK,CAACG,WAAW;EAC1E,CAAC;AACH,CAAC;AAED,MAAME,UAAU,GAAGA,CAAA,KAAuB;EACxC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAOX,eAAe;EACxB;EACA,MAAMY,GAAG,GAAID,MAAM,CACjBV,mBAAmB,CACpB;EACD,OAAOG,SAAS,CAACQ,GAAmC,CAAC;AACvD,CAAC;AAED,OAAO,MAAMC,sBAAsB,GAAGA,CAAA,KAAe;EACnD,IAAI,OAAOF,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,KAAK;EACd;EACA,MAAMC,GAAG,GAAID,MAAM,CACjBV,mBAAmB,CACpB;EACD,OAAO,CAAC,CAACW,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ;AACzC,CAAC;AAED,MAAME,WAAW,GAAG,IAAIC,GAAG,CAAsC,CAAC;AAClE,IAAIC,SAAiC,GAAG,IAAI;;AAE5C;AACA;AACA;AACA;AACA,OAAO,MAAMC,kBAAkB,GAAIZ,KAAuB,IAAW;EACnEW,SAAS,GAAGZ,SAAS,CAACC,KAAK,CAAC;EAC5B,KAAK,MAAMa,UAAU,IAAIJ,WAAW,EAAE;IACpCI,UAAU,CAACF,SAAS,CAAC;EACvB;AACF,CAAC;AAED,OAAO,MAAMG,iCAAiC,GAAGA,CAAA,MAAwB;EACvEC,IAAI,EAAE,eAAe;EAErBC,IAAI,EAAEA,CAAA,KAAML,SAAS,IAAIN,UAAU,CAAC,CAAC;EAErCY,SAASA,CAACC,QAAQ,EAAE;IAClBT,WAAW,CAACU,GAAG,CAACD,QAAQ,CAAC;IACzB,OAAO,MAAM;MACXT,WAAW,CAACW,MAAM,CAACF,QAAQ,CAAC;IAC9B,CAAC;EACH;AACF,CAAC,CAAC;AAEF,OAAO,MAAMG,0BAA0B,GAAGA,CAAA,KAAY;EACpDV,SAAS,GAAG,IAAI;EAChBF,WAAW,CAACa,KAAK,CAAC,CAAC;AACrB,CAAC","ignoreList":[]}

package/dist/esm/privacy/providers/oneTrustProvider.js

@@ -1,66 +0,0 @@
-/**
- * OneTrust provider — DL #218.
- *
- * Lifted from the consent check that used to live inside
- * `utils/analyticsEvents.ts`, with one deliberate behaviour change: that
- * function returned `true` when OneTrust was absent ("host is responsible for
- * loading OneTrust"), which on a Shopify storefront meant unconditional
- * default-allow. Absence is no longer this provider's problem — it is only
- * selected when OneTrust is actually on the page, and absence is handled by
- * the gate's own default.
- */
-
-/** OneTrust's default taxonomy: C0002 is the performance/analytics category. */
-const ANALYTICS_CATEGORY = 'C0002';
-/** C0004 is targeting/advertising. */
-const MARKETING_CATEGORY = 'C0004';
-const readGroups = () => {
-  if (typeof window === 'undefined') {
-    return null;
-  }
-  const groups = window.OnetrustActiveGroups;
-  return typeof groups === 'string' ? groups : null;
-};
-export const isOneTrustHost = () => readGroups() !== null;
-const readSnapshot = () => {
-  const groups = readGroups();
-  if (groups !== null) {
-    try {
-      console.debug(`[w5-consent] onetrust: active groups "${groups}"`);
-    } catch {
-      /* never break on a console */
-    }
-  }
-  if (groups === null) {
-    return {
-      analytics: 'unknown',
-      marketing: 'unknown',
-      performance: 'unknown'
-    };
-  }
-  // OneTrust publishes the *active* groups, so a category that is absent from
-  // a string OneTrust has written is a refusal, not silence.
-  const analytics = groups.includes(ANALYTICS_CATEGORY) ? 'granted' : 'denied';
-  const marketing = groups.includes(MARKETING_CATEGORY) ? 'granted' : 'denied';
-  return {
-    analytics,
-    marketing,
-    performance: analytics
-  };
-};
-export const createOneTrustConsentProvider = () => ({
-  name: 'onetrust',
-  read: readSnapshot,
-  subscribe(onChange) {
-    const publish = () => onChange(readSnapshot());
-    if (typeof window === 'undefined') {
-      return () => {};
-    }
-    // OneTrust fires this on every banner interaction.
-    window.addEventListener('OneTrustGroupsUpdated', publish);
-    return () => {
-      window.removeEventListener('OneTrustGroupsUpdated', publish);
-    };
-  }
-});
-//# sourceMappingURL=oneTrustProvider.js.map

package/dist/esm/privacy/providers/oneTrustProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["ANALYTICS_CATEGORY","MARKETING_CATEGORY","readGroups","window","groups","OnetrustActiveGroups","isOneTrustHost","readSnapshot","console","debug","analytics","marketing","performance","includes","createOneTrustConsentProvider","name","read","subscribe","onChange","publish","addEventListener","removeEventListener"],"sources":["../../../../src/privacy/providers/oneTrustProvider.ts"],"sourcesContent":["/**\n * OneTrust provider — DL #218.\n *\n * Lifted from the consent check that used to live inside\n * `utils/analyticsEvents.ts`, with one deliberate behaviour change: that\n * function returned `true` when OneTrust was absent (\"host is responsible for\n * loading OneTrust\"), which on a Shopify storefront meant unconditional\n * default-allow. Absence is no longer this provider's problem — it is only\n * selected when OneTrust is actually on the page, and absence is handled by\n * the gate's own default.\n */\n\nimport type { ConsentProvider, ConsentSnapshot } from '../types';\n\n/** OneTrust's default taxonomy: C0002 is the performance/analytics category. */\nconst ANALYTICS_CATEGORY = 'C0002';\n/** C0004 is targeting/advertising. */\nconst MARKETING_CATEGORY = 'C0004';\n\nconst readGroups = (): string | null => {\n  if (typeof window === 'undefined') {\n    return null;\n  }\n  const groups = (window as unknown as { OnetrustActiveGroups?: unknown })\n    .OnetrustActiveGroups;\n  return typeof groups === 'string' ? groups : null;\n};\n\nexport const isOneTrustHost = (): boolean => readGroups() !== null;\n\nconst readSnapshot = (): ConsentSnapshot => {\n  const groups = readGroups();\n  if (groups !== null) {\n    try {\n      console.debug(`[w5-consent] onetrust: active groups \"${groups}\"`);\n    } catch {\n      /* never break on a console */\n    }\n  }\n  if (groups === null) {\n    return {\n      analytics: 'unknown',\n      marketing: 'unknown',\n      performance: 'unknown',\n    };\n  }\n  // OneTrust publishes the *active* groups, so a category that is absent from\n  // a string OneTrust has written is a refusal, not silence.\n  const analytics = groups.includes(ANALYTICS_CATEGORY) ? 'granted' : 'denied';\n  const marketing = groups.includes(MARKETING_CATEGORY) ? 'granted' : 'denied';\n  return { analytics, marketing, performance: analytics };\n};\n\nexport const createOneTrustConsentProvider = (): ConsentProvider => ({\n  name: 'onetrust',\n\n  read: readSnapshot,\n\n  subscribe(onChange) {\n    const publish = () => onChange(readSnapshot());\n    if (typeof window === 'undefined') {\n      return () => {};\n    }\n    // OneTrust fires this on every banner interaction.\n    window.addEventListener('OneTrustGroupsUpdated', publish);\n    return () => {\n      window.removeEventListener('OneTrustGroupsUpdated', publish);\n    };\n  },\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA,MAAMA,kBAAkB,GAAG,OAAO;AAClC;AACA,MAAMC,kBAAkB,GAAG,OAAO;AAElC,MAAMC,UAAU,GAAGA,CAAA,KAAqB;EACtC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,IAAI;EACb;EACA,MAAMC,MAAM,GAAID,MAAM,CACnBE,oBAAoB;EACvB,OAAO,OAAOD,MAAM,KAAK,QAAQ,GAAGA,MAAM,GAAG,IAAI;AACnD,CAAC;AAED,OAAO,MAAME,cAAc,GAAGA,CAAA,KAAeJ,UAAU,CAAC,CAAC,KAAK,IAAI;AAElE,MAAMK,YAAY,GAAGA,CAAA,KAAuB;EAC1C,MAAMH,MAAM,GAAGF,UAAU,CAAC,CAAC;EAC3B,IAAIE,MAAM,KAAK,IAAI,EAAE;IACnB,IAAI;MACFI,OAAO,CAACC,KAAK,CAAC,yCAAyCL,MAAM,GAAG,CAAC;IACnE,CAAC,CAAC,MAAM;MACN;IAAA;EAEJ;EACA,IAAIA,MAAM,KAAK,IAAI,EAAE;IACnB,OAAO;MACLM,SAAS,EAAE,SAAS;MACpBC,SAAS,EAAE,SAAS;MACpBC,WAAW,EAAE;IACf,CAAC;EACH;EACA;EACA;EACA,MAAMF,SAAS,GAAGN,MAAM,CAACS,QAAQ,CAACb,kBAAkB,CAAC,GAAG,SAAS,GAAG,QAAQ;EAC5E,MAAMW,SAAS,GAAGP,MAAM,CAACS,QAAQ,CAACZ,kBAAkB,CAAC,GAAG,SAAS,GAAG,QAAQ;EAC5E,OAAO;IAAES,SAAS;IAAEC,SAAS;IAAEC,WAAW,EAAEF;EAAU,CAAC;AACzD,CAAC;AAED,OAAO,MAAMI,6BAA6B,GAAGA,CAAA,MAAwB;EACnEC,IAAI,EAAE,UAAU;EAEhBC,IAAI,EAAET,YAAY;EAElBU,SAASA,CAACC,QAAQ,EAAE;IAClB,MAAMC,OAAO,GAAGA,CAAA,KAAMD,QAAQ,CAACX,YAAY,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAOJ,MAAM,KAAK,WAAW,EAAE;MACjC,OAAO,MAAM,CAAC,CAAC;IACjB;IACA;IACAA,MAAM,CAACiB,gBAAgB,CAAC,uBAAuB,EAAED,OAAO,CAAC;IACzD,OAAO,MAAM;MACXhB,MAAM,CAACkB,mBAAmB,CAAC,uBAAuB,EAAEF,OAAO,CAAC;IAC9D,CAAC;EACH;AACF,CAAC,CAAC","ignoreList":[]}

package/dist/esm/privacy/providers/shopifyProvider.js

@@ -1,178 +0,0 @@
-/**
- * Shopify Customer Privacy API provider — DL #218.
- *
- * Two things about this API shape the provider:
- *
- * 1. **It is not on the page by default.** `window.Shopify.customerPrivacy` is
- *    `undefined` until somebody asks for it with `Shopify.loadFeatures`. The
- *    theme app extension warms it so it is ready before the bundle mounts;
- *    this provider still requests it, because the extension may not be
- *    installed and the request is idempotent.
- *
- * 2. **`visitorConsentCollected` may have already fired.** The bundle executes
- *    into an already-rendered storefront page (DL #217), so `read()` answers
- *    from current state and the event is only ever an update.
- *
- * The region rule is the one judgement encoded here, and it keys off
- * `isRegulationEnforced()` rather than `shouldShowBanner()`. The two are not
- * interchangeable: the banner reflects what the *merchant* configured, while
- * enforcement reflects what the *visitor's jurisdiction* requires. A store with
- * an empty consent configuration reports "no banner needed" everywhere,
- * including inside the EU.
- */
-
-import { UNKNOWN_CONSENT } from '../types.js';
-const CONSENT_FEATURE = {
-  name: 'consent-tracking-api',
-  version: '0.1'
-};
-const log = function () {
-  try {
-    for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
-      args[_key] = arguments[_key];
-    }
-    console.debug('[w5-consent] shopify:', ...args);
-  } catch {
-    /* never break on a console */
-  }
-};
-const getShopify = () => {
-  if (typeof window === 'undefined') {
-    return null;
-  }
-  return window.Shopify ?? null;
-};
-export const isShopifyHost = () => getShopify() !== null;
-const toState = value => {
-  if (value === 'yes') {
-    return 'granted';
-  }
-  if (value === 'no') {
-    return 'denied';
-  }
-  return null;
-};
-const readSnapshot = () => {
-  var _getShopify;
-  const privacy = (_getShopify = getShopify()) == null ? void 0 : _getShopify.customerPrivacy;
-  if (!privacy) {
-    log('customerPrivacy API not on the page — no answer available (store has no privacy configuration, or loadFeatures has not resolved yet)');
-    // The API has not loaded (or the store has no privacy configuration at
-    // all). Not an answer — the gate holds, and the visitor's own action is
-    // what unlocks the session.
-    return UNKNOWN_CONSENT;
-  }
-  let consent = {};
-  try {
-    consent = (privacy.currentVisitorConsent == null ? void 0 : privacy.currentVisitorConsent()) ?? {};
-  } catch {
-    // Present but not ready — treat as no answer yet.
-  }
-  const explicitAnalytics = toState(consent.analytics);
-  const explicitMarketing = toState(consent.marketing);
-  let allowed = false;
-  try {
-    allowed = (privacy.analyticsProcessingAllowed == null ? void 0 : privacy.analyticsProcessingAllowed()) === true;
-  } catch {
-    allowed = false;
-  }
-
-  // Is a privacy regulation in force for *this visitor's* region? This is the
-  // question that matters, and it is not the same question as "is a banner
-  // being shown" — see the comment on `enforced` below.
-  let enforced = null;
-  let regulation = '';
-  let region = '';
-  try {
-    if (typeof privacy.isRegulationEnforced === 'function') {
-      enforced = privacy.isRegulationEnforced() === true;
-    }
-    regulation = (privacy.getRegulation == null ? void 0 : privacy.getRegulation()) ?? '';
-    region = (privacy.getRegion == null ? void 0 : privacy.getRegion()) ?? '';
-  } catch {
-    enforced = null;
-  }
-  let bannerRequired = true;
-  try {
-    bannerRequired = (privacy.shouldShowBanner == null ? void 0 : privacy.shouldShowBanner()) !== false;
-  } catch {
-    bannerRequired = true;
-  }
-
-  /*
-   * Measured on a live store from a Frankfurt IP, with no consent recorded:
-   *
-   *   region 'DEBE' · regulation 'GDPR' · isRegulationEnforced() true
-   *   shouldShowBanner() false · analyticsProcessingAllowed() TRUE
-   *   getShopPrefs() { limit: [] }
-   *
-   * Shopify said tracking was allowed for a GDPR-protected visitor who had
-   * never been asked, because the *merchant* had configured no consent
-   * preferences. `shouldShowBanner()` and `analyticsProcessingAllowed()` both
-   * describe the merchant's setup; neither is a statement about a legal basis.
-   * A merchant's misconfiguration must not become our tracking decision, so
-   * under an enforced regulation an absent answer stays `unknown` and the gate
-   * holds — the visitor's own prompt is then the only thing that unlocks them.
-   */
-  const permissiveDefault = allowed || !bannerRequired;
-  const fallbackWhenUnenforceable = permissiveDefault ? 'granted' : 'unknown';
-  const analytics = explicitAnalytics ?? (enforced === true ? 'unknown' : fallbackWhenUnenforceable);
-  const marketing = explicitMarketing ?? (enforced === true ? 'unknown' : !bannerRequired ? 'granted' : 'unknown');
-  log(`read — visitorConsent.analytics=${consent.analytics ?? '(unset)'} ` + `analyticsProcessingAllowed=${allowed} bannerRequired=${bannerRequired} ` + `region=${region || '?'} regulation=${regulation || '?'} enforced=${enforced === null ? 'unavailable' : enforced}` + (enforced === true && explicitAnalytics === null ? ' → regulated and unanswered, holding' : '') + ` ⇒ ${analytics}`);
-  return {
-    analytics,
-    marketing,
-    // Shopify has no separate performance bucket. Load telemetry carries an
-    // app name and a session id to a Wix endpoint, so it answers to the same
-    // answer analytics does rather than riding for free.
-    performance: analytics
-  };
-};
-
-/**
- * Ask Shopify to load the consent API if it is not already there. Safe to call
- * more than once; the callback re-reads whatever state arrives.
- */
-const requestConsentApi = onReady => {
-  const shopify = getShopify();
-  if (!shopify || shopify.customerPrivacy || !shopify.loadFeatures) {
-    return;
-  }
-  try {
-    log('requesting consent-tracking-api via Shopify.loadFeatures…');
-    shopify.loadFeatures([CONSENT_FEATURE], error => {
-      if (error) {
-        log('loadFeatures failed — gate stays held', error);
-        return;
-      }
-      log('loadFeatures resolved — re-reading consent');
-      onReady();
-    });
-  } catch {
-    // Storefronts without the feature simply never resolve; the gate stays
-    // held and engagement remains the only unlock.
-  }
-};
-export const createShopifyConsentProvider = () => ({
-  name: 'shopify-customer-privacy',
-  read: readSnapshot,
-  subscribe(onChange) {
-    const publish = () => {
-      log('visitorConsentCollected — the visitor answered the banner');
-      onChange(readSnapshot());
-    };
-
-    // The visitor may have answered the banner before this bundle existed, so
-    // the event is an update — never the first read.
-    if (typeof document !== 'undefined') {
-      document.addEventListener('visitorConsentCollected', publish);
-    }
-    requestConsentApi(() => onChange(readSnapshot()));
-    return () => {
-      if (typeof document !== 'undefined') {
-        document.removeEventListener('visitorConsentCollected', publish);
-      }
-    };
-  }
-});
-//# sourceMappingURL=shopifyProvider.js.map

package/dist/esm/privacy/providers/shopifyProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["UNKNOWN_CONSENT","CONSENT_FEATURE","name","version","log","_len","arguments","length","args","Array","_key","console","debug","getShopify","window","Shopify","isShopifyHost","toState","value","readSnapshot","_getShopify","privacy","customerPrivacy","consent","currentVisitorConsent","explicitAnalytics","analytics","explicitMarketing","marketing","allowed","analyticsProcessingAllowed","enforced","regulation","region","isRegulationEnforced","getRegulation","getRegion","bannerRequired","shouldShowBanner","permissiveDefault","fallbackWhenUnenforceable","performance","requestConsentApi","onReady","shopify","loadFeatures","error","createShopifyConsentProvider","read","subscribe","onChange","publish","document","addEventListener","removeEventListener"],"sources":["../../../../src/privacy/providers/shopifyProvider.ts"],"sourcesContent":["/**\n * Shopify Customer Privacy API provider — DL #218.\n *\n * Two things about this API shape the provider:\n *\n * 1. **It is not on the page by default.** `window.Shopify.customerPrivacy` is\n *    `undefined` until somebody asks for it with `Shopify.loadFeatures`. The\n *    theme app extension warms it so it is ready before the bundle mounts;\n *    this provider still requests it, because the extension may not be\n *    installed and the request is idempotent.\n *\n * 2. **`visitorConsentCollected` may have already fired.** The bundle executes\n *    into an already-rendered storefront page (DL #217), so `read()` answers\n *    from current state and the event is only ever an update.\n *\n * The region rule is the one judgement encoded here, and it keys off\n * `isRegulationEnforced()` rather than `shouldShowBanner()`. The two are not\n * interchangeable: the banner reflects what the *merchant* configured, while\n * enforcement reflects what the *visitor's jurisdiction* requires. A store with\n * an empty consent configuration reports \"no banner needed\" everywhere,\n * including inside the EU.\n */\n\nimport {\n  UNKNOWN_CONSENT,\n  type ConsentProvider,\n  type ConsentSnapshot,\n  type ConsentState,\n} from '../types';\n\ntype ShopifyConsentValue = 'yes' | 'no' | '' | undefined;\n\ninterface ShopifyVisitorConsent {\n  analytics?: ShopifyConsentValue;\n  marketing?: ShopifyConsentValue;\n  preferences?: ShopifyConsentValue;\n  sale_of_data?: ShopifyConsentValue;\n}\n\ninterface ShopifyCustomerPrivacy {\n  analyticsProcessingAllowed?: () => boolean;\n  marketingAllowed?: () => boolean;\n  currentVisitorConsent?: () => ShopifyVisitorConsent;\n  shouldShowBanner?: () => boolean;\n  /** Whether a privacy regulation applies to this visitor's region. */\n  isRegulationEnforced?: () => boolean;\n  /** e.g. 'GDPR', 'CCPA'. */\n  getRegulation?: () => string;\n  /** e.g. 'DEBE' — country + subdivision. */\n  getRegion?: () => string;\n}\n\ninterface ShopifyGlobal {\n  customerPrivacy?: ShopifyCustomerPrivacy;\n  loadFeatures?: (\n    features: { name: string; version: string }[],\n    callback: (error?: unknown) => void,\n  ) => void;\n}\n\nconst CONSENT_FEATURE = { name: 'consent-tracking-api', version: '0.1' };\n\nconst log = (...args: unknown[]): void => {\n  try {\n    console.debug('[w5-consent] shopify:', ...args);\n  } catch {\n    /* never break on a console */\n  }\n};\n\nconst getShopify = (): ShopifyGlobal | null => {\n  if (typeof window === 'undefined') {\n    return null;\n  }\n  return (window as unknown as { Shopify?: ShopifyGlobal }).Shopify ?? null;\n};\n\nexport const isShopifyHost = (): boolean => getShopify() !== null;\n\nconst toState = (value: ShopifyConsentValue): ConsentState | null => {\n  if (value === 'yes') {\n    return 'granted';\n  }\n  if (value === 'no') {\n    return 'denied';\n  }\n  return null;\n};\n\nconst readSnapshot = (): ConsentSnapshot => {\n  const privacy = getShopify()?.customerPrivacy;\n  if (!privacy) {\n    log(\n      'customerPrivacy API not on the page — no answer available (store has no privacy configuration, or loadFeatures has not resolved yet)',\n    );\n    // The API has not loaded (or the store has no privacy configuration at\n    // all). Not an answer — the gate holds, and the visitor's own action is\n    // what unlocks the session.\n    return UNKNOWN_CONSENT;\n  }\n\n  let consent: ShopifyVisitorConsent = {};\n  try {\n    consent = privacy.currentVisitorConsent?.() ?? {};\n  } catch {\n    // Present but not ready — treat as no answer yet.\n  }\n\n  const explicitAnalytics = toState(consent.analytics);\n  const explicitMarketing = toState(consent.marketing);\n\n  let allowed = false;\n  try {\n    allowed = privacy.analyticsProcessingAllowed?.() === true;\n  } catch {\n    allowed = false;\n  }\n\n  // Is a privacy regulation in force for *this visitor's* region? This is the\n  // question that matters, and it is not the same question as \"is a banner\n  // being shown\" — see the comment on `enforced` below.\n  let enforced: boolean | null = null;\n  let regulation = '';\n  let region = '';\n  try {\n    if (typeof privacy.isRegulationEnforced === 'function') {\n      enforced = privacy.isRegulationEnforced() === true;\n    }\n    regulation = privacy.getRegulation?.() ?? '';\n    region = privacy.getRegion?.() ?? '';\n  } catch {\n    enforced = null;\n  }\n\n  let bannerRequired = true;\n  try {\n    bannerRequired = privacy.shouldShowBanner?.() !== false;\n  } catch {\n    bannerRequired = true;\n  }\n\n  /*\n   * Measured on a live store from a Frankfurt IP, with no consent recorded:\n   *\n   *   region 'DEBE' · regulation 'GDPR' · isRegulationEnforced() true\n   *   shouldShowBanner() false · analyticsProcessingAllowed() TRUE\n   *   getShopPrefs() { limit: [] }\n   *\n   * Shopify said tracking was allowed for a GDPR-protected visitor who had\n   * never been asked, because the *merchant* had configured no consent\n   * preferences. `shouldShowBanner()` and `analyticsProcessingAllowed()` both\n   * describe the merchant's setup; neither is a statement about a legal basis.\n   * A merchant's misconfiguration must not become our tracking decision, so\n   * under an enforced regulation an absent answer stays `unknown` and the gate\n   * holds — the visitor's own prompt is then the only thing that unlocks them.\n   */\n  const permissiveDefault = allowed || !bannerRequired;\n  const fallbackWhenUnenforceable = permissiveDefault ? 'granted' : 'unknown';\n\n  const analytics: ConsentState =\n    explicitAnalytics ??\n    (enforced === true ? 'unknown' : fallbackWhenUnenforceable);\n\n  const marketing: ConsentState =\n    explicitMarketing ??\n    (enforced === true ? 'unknown' : !bannerRequired ? 'granted' : 'unknown');\n\n  log(\n    `read — visitorConsent.analytics=${consent.analytics ?? '(unset)'} ` +\n      `analyticsProcessingAllowed=${allowed} bannerRequired=${bannerRequired} ` +\n      `region=${region || '?'} regulation=${regulation || '?'} enforced=${\n        enforced === null ? 'unavailable' : enforced\n      }` +\n      (enforced === true && explicitAnalytics === null\n        ? ' → regulated and unanswered, holding'\n        : '') +\n      ` ⇒ ${analytics}`,\n  );\n\n  return {\n    analytics,\n    marketing,\n    // Shopify has no separate performance bucket. Load telemetry carries an\n    // app name and a session id to a Wix endpoint, so it answers to the same\n    // answer analytics does rather than riding for free.\n    performance: analytics,\n  };\n};\n\n/**\n * Ask Shopify to load the consent API if it is not already there. Safe to call\n * more than once; the callback re-reads whatever state arrives.\n */\nconst requestConsentApi = (onReady: () => void): void => {\n  const shopify = getShopify();\n  if (!shopify || shopify.customerPrivacy || !shopify.loadFeatures) {\n    return;\n  }\n  try {\n    log('requesting consent-tracking-api via Shopify.loadFeatures…');\n    shopify.loadFeatures([CONSENT_FEATURE], (error) => {\n      if (error) {\n        log('loadFeatures failed — gate stays held', error);\n        return;\n      }\n      log('loadFeatures resolved — re-reading consent');\n      onReady();\n    });\n  } catch {\n    // Storefronts without the feature simply never resolve; the gate stays\n    // held and engagement remains the only unlock.\n  }\n};\n\nexport const createShopifyConsentProvider = (): ConsentProvider => ({\n  name: 'shopify-customer-privacy',\n\n  read: readSnapshot,\n\n  subscribe(onChange) {\n    const publish = () => {\n      log('visitorConsentCollected — the visitor answered the banner');\n      onChange(readSnapshot());\n    };\n\n    // The visitor may have answered the banner before this bundle existed, so\n    // the event is an update — never the first read.\n    if (typeof document !== 'undefined') {\n      document.addEventListener('visitorConsentCollected', publish);\n    }\n    requestConsentApi(() => onChange(readSnapshot()));\n\n    return () => {\n      if (typeof document !== 'undefined') {\n        document.removeEventListener('visitorConsentCollected', publish);\n      }\n    };\n  },\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SACEA,eAAe,QAIV,UAAU;AAgCjB,MAAMC,eAAe,GAAG;EAAEC,IAAI,EAAE,sBAAsB;EAAEC,OAAO,EAAE;AAAM,CAAC;AAExE,MAAMC,GAAG,GAAG,SAAAA,CAAA,EAA8B;EACxC,IAAI;IAAA,SAAAC,IAAA,GAAAC,SAAA,CAAAC,MAAA,EADUC,IAAI,OAAAC,KAAA,CAAAJ,IAAA,GAAAK,IAAA,MAAAA,IAAA,GAAAL,IAAA,EAAAK,IAAA;MAAJF,IAAI,CAAAE,IAAA,IAAAJ,SAAA,CAAAI,IAAA;IAAA;IAEhBC,OAAO,CAACC,KAAK,CAAC,uBAAuB,EAAE,GAAGJ,IAAI,CAAC;EACjD,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ,CAAC;AAED,MAAMK,UAAU,GAAGA,CAAA,KAA4B;EAC7C,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;IACjC,OAAO,IAAI;EACb;EACA,OAAQA,MAAM,CAA4CC,OAAO,IAAI,IAAI;AAC3E,CAAC;AAED,OAAO,MAAMC,aAAa,GAAGA,CAAA,KAAeH,UAAU,CAAC,CAAC,KAAK,IAAI;AAEjE,MAAMI,OAAO,GAAIC,KAA0B,IAA0B;EACnE,IAAIA,KAAK,KAAK,KAAK,EAAE;IACnB,OAAO,SAAS;EAClB;EACA,IAAIA,KAAK,KAAK,IAAI,EAAE;IAClB,OAAO,QAAQ;EACjB;EACA,OAAO,IAAI;AACb,CAAC;AAED,MAAMC,YAAY,GAAGA,CAAA,KAAuB;EAAA,IAAAC,WAAA;EAC1C,MAAMC,OAAO,IAAAD,WAAA,GAAGP,UAAU,CAAC,CAAC,qBAAZO,WAAA,CAAcE,eAAe;EAC7C,IAAI,CAACD,OAAO,EAAE;IACZjB,GAAG,CACD,sIACF,CAAC;IACD;IACA;IACA;IACA,OAAOJ,eAAe;EACxB;EAEA,IAAIuB,OAA8B,GAAG,CAAC,CAAC;EACvC,IAAI;IACFA,OAAO,GAAG,CAAAF,OAAO,CAACG,qBAAqB,oBAA7BH,OAAO,CAACG,qBAAqB,CAAG,CAAC,KAAI,CAAC,CAAC;EACnD,CAAC,CAAC,MAAM;IACN;EAAA;EAGF,MAAMC,iBAAiB,GAAGR,OAAO,CAACM,OAAO,CAACG,SAAS,CAAC;EACpD,MAAMC,iBAAiB,GAAGV,OAAO,CAACM,OAAO,CAACK,SAAS,CAAC;EAEpD,IAAIC,OAAO,GAAG,KAAK;EACnB,IAAI;IACFA,OAAO,GAAG,CAAAR,OAAO,CAACS,0BAA0B,oBAAlCT,OAAO,CAACS,0BAA0B,CAAG,CAAC,MAAK,IAAI;EAC3D,CAAC,CAAC,MAAM;IACND,OAAO,GAAG,KAAK;EACjB;;EAEA;EACA;EACA;EACA,IAAIE,QAAwB,GAAG,IAAI;EACnC,IAAIC,UAAU,GAAG,EAAE;EACnB,IAAIC,MAAM,GAAG,EAAE;EACf,IAAI;IACF,IAAI,OAAOZ,OAAO,CAACa,oBAAoB,KAAK,UAAU,EAAE;MACtDH,QAAQ,GAAGV,OAAO,CAACa,oBAAoB,CAAC,CAAC,KAAK,IAAI;IACpD;IACAF,UAAU,GAAG,CAAAX,OAAO,CAACc,aAAa,oBAArBd,OAAO,CAACc,aAAa,CAAG,CAAC,KAAI,EAAE;IAC5CF,MAAM,GAAG,CAAAZ,OAAO,CAACe,SAAS,oBAAjBf,OAAO,CAACe,SAAS,CAAG,CAAC,KAAI,EAAE;EACtC,CAAC,CAAC,MAAM;IACNL,QAAQ,GAAG,IAAI;EACjB;EAEA,IAAIM,cAAc,GAAG,IAAI;EACzB,IAAI;IACFA,cAAc,GAAG,CAAAhB,OAAO,CAACiB,gBAAgB,oBAAxBjB,OAAO,CAACiB,gBAAgB,CAAG,CAAC,MAAK,KAAK;EACzD,CAAC,CAAC,MAAM;IACND,cAAc,GAAG,IAAI;EACvB;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAME,iBAAiB,GAAGV,OAAO,IAAI,CAACQ,cAAc;EACpD,MAAMG,yBAAyB,GAAGD,iBAAiB,GAAG,SAAS,GAAG,SAAS;EAE3E,MAAMb,SAAuB,GAC3BD,iBAAiB,KAChBM,QAAQ,KAAK,IAAI,GAAG,SAAS,GAAGS,yBAAyB,CAAC;EAE7D,MAAMZ,SAAuB,GAC3BD,iBAAiB,KAChBI,QAAQ,KAAK,IAAI,GAAG,SAAS,GAAG,CAACM,cAAc,GAAG,SAAS,GAAG,SAAS,CAAC;EAE3EjC,GAAG,CACD,mCAAmCmB,OAAO,CAACG,SAAS,IAAI,SAAS,GAAG,GAClE,8BAA8BG,OAAO,mBAAmBQ,cAAc,GAAG,GACzE,UAAUJ,MAAM,IAAI,GAAG,eAAeD,UAAU,IAAI,GAAG,aACrDD,QAAQ,KAAK,IAAI,GAAG,aAAa,GAAGA,QAAQ,EAC5C,IACDA,QAAQ,KAAK,IAAI,IAAIN,iBAAiB,KAAK,IAAI,GAC5C,sCAAsC,GACtC,EAAE,CAAC,GACP,MAAMC,SAAS,EACnB,CAAC;EAED,OAAO;IACLA,SAAS;IACTE,SAAS;IACT;IACA;IACA;IACAa,WAAW,EAAEf;EACf,CAAC;AACH,CAAC;;AAED;AACA;AACA;AACA;AACA,MAAMgB,iBAAiB,GAAIC,OAAmB,IAAW;EACvD,MAAMC,OAAO,GAAG/B,UAAU,CAAC,CAAC;EAC5B,IAAI,CAAC+B,OAAO,IAAIA,OAAO,CAACtB,eAAe,IAAI,CAACsB,OAAO,CAACC,YAAY,EAAE;IAChE;EACF;EACA,IAAI;IACFzC,GAAG,CAAC,2DAA2D,CAAC;IAChEwC,OAAO,CAACC,YAAY,CAAC,CAAC5C,eAAe,CAAC,EAAG6C,KAAK,IAAK;MACjD,IAAIA,KAAK,EAAE;QACT1C,GAAG,CAAC,uCAAuC,EAAE0C,KAAK,CAAC;QACnD;MACF;MACA1C,GAAG,CAAC,4CAA4C,CAAC;MACjDuC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;EACJ,CAAC,CAAC,MAAM;IACN;IACA;EAAA;AAEJ,CAAC;AAED,OAAO,MAAMI,4BAA4B,GAAGA,CAAA,MAAwB;EAClE7C,IAAI,EAAE,0BAA0B;EAEhC8C,IAAI,EAAE7B,YAAY;EAElB8B,SAASA,CAACC,QAAQ,EAAE;IAClB,MAAMC,OAAO,GAAGA,CAAA,KAAM;MACpB/C,GAAG,CAAC,2DAA2D,CAAC;MAChE8C,QAAQ,CAAC/B,YAAY,CAAC,CAAC,CAAC;IAC1B,CAAC;;IAED;IACA;IACA,IAAI,OAAOiC,QAAQ,KAAK,WAAW,EAAE;MACnCA,QAAQ,CAACC,gBAAgB,CAAC,yBAAyB,EAAEF,OAAO,CAAC;IAC/D;IACAT,iBAAiB,CAAC,MAAMQ,QAAQ,CAAC/B,YAAY,CAAC,CAAC,CAAC,CAAC;IAEjD,OAAO,MAAM;MACX,IAAI,OAAOiC,QAAQ,KAAK,WAAW,EAAE;QACnCA,QAAQ,CAACE,mBAAmB,CAAC,yBAAyB,EAAEH,OAAO,CAAC;MAClE;IACF,CAAC;EACH;AACF,CAAC,CAAC","ignoreList":[]}

package/dist/esm/privacy/types.js

@@ -1,30 +0,0 @@
-/**
- * Consent vocabulary shared by the gate and every provider.
- *
- * DL #218. Three states, because "we have not been told" is not the same
- * answer as "no" and must not be collapsed into one: a visitor who has not
- * been asked can still be unlocked by their own action, a visitor who
- * refused never can.
- */
-
-/**
- * `necessary` is never gated — auth tokens and the configuration fetch are
- * what make the widget work at all, and a visitor who loaded the page asked
- * for that much. Everything else answers to the gate.
- */
-
-export const UNKNOWN_CONSENT = Object.freeze({
-  performance: 'unknown',
-  analytics: 'unknown',
-  marketing: 'unknown'
-});
-
-/**
- * A consent provider adapts one host's CMP to the gate.
- *
- * `read()` must answer synchronously with what is known *now*. Providers are
- * installed into an already-rendered storefront page (DL #217), so a provider
- * that only subscribes is inert — the event it waits for may have fired long
- * before the bundle executed. Always read first, then subscribe.
- */
-//# sourceMappingURL=types.js.map

package/dist/esm/privacy/types.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["UNKNOWN_CONSENT","Object","freeze","performance","analytics","marketing"],"sources":["../../../src/privacy/types.ts"],"sourcesContent":["/**\n * Consent vocabulary shared by the gate and every provider.\n *\n * DL #218. Three states, because \"we have not been told\" is not the same\n * answer as \"no\" and must not be collapsed into one: a visitor who has not\n * been asked can still be unlocked by their own action, a visitor who\n * refused never can.\n */\n\nexport type ConsentState = 'granted' | 'denied' | 'unknown';\n\n/**\n * `necessary` is never gated — auth tokens and the configuration fetch are\n * what make the widget work at all, and a visitor who loaded the page asked\n * for that much. Everything else answers to the gate.\n */\nexport type ConsentPurpose =\n  | 'necessary'\n  | 'performance'\n  | 'analytics'\n  | 'marketing';\n\nexport type GatedPurpose = Exclude<ConsentPurpose, 'necessary'>;\n\nexport type ConsentSnapshot = Record<GatedPurpose, ConsentState>;\n\nexport const UNKNOWN_CONSENT: ConsentSnapshot = Object.freeze({\n  performance: 'unknown',\n  analytics: 'unknown',\n  marketing: 'unknown',\n});\n\n/**\n * A consent provider adapts one host's CMP to the gate.\n *\n * `read()` must answer synchronously with what is known *now*. Providers are\n * installed into an already-rendered storefront page (DL #217), so a provider\n * that only subscribes is inert — the event it waits for may have fired long\n * before the bundle executed. Always read first, then subscribe.\n */\nexport interface ConsentProvider {\n  readonly name: string;\n  read(): ConsentSnapshot;\n  subscribe(onChange: (snapshot: ConsentSnapshot) => void): () => void;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;;AAWA,OAAO,MAAMA,eAAgC,GAAGC,MAAM,CAACC,MAAM,CAAC;EAC5DC,WAAW,EAAE,SAAS;EACtBC,SAAS,EAAE,SAAS;EACpBC,SAAS,EAAE;AACb,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}

package/dist/types/privacy/consentGate.d.ts

@@ -1,52 +0,0 @@
-/**
- * The consent gate — DL #218 (revised).
- *
- * Legal cleared analytics/BI transmission to need no consent gate, so the old
- * `transmit()` + buffer machinery is gone. What analytics emitters used to route
- * through the gate now goes straight to the wire.
- *
- * Analytics AND performance telemetry both go straight to the wire now, so there
- * is nothing left to "transmit"-gate. What remains is the consent SIGNAL —
- * snapshot, engagement, provider — behind a single predicate:
- *
- *   - `mayPersistToken()` — whether the visitor's OAuth token may be written to
- *     localStorage. Persisting the token persists a cross-visit visitor identity
- *     (its refresh token), which is the one thing consent still governs. Truth
- *     table: granted → yes; denied → never; unknown → only once the visitor
- *     engaged.
- *
- * Engagement (`unlockOnUserAction`, fired when the visitor submits a prompt)
- * resolves the `unknown` case — typing a question is a reason to remember this
- * visitor for the session — but it never overrides a `denied`.
- */
-import { type ConsentProvider, type ConsentSnapshot } from './types';
-type Listener = () => void;
-/**
- * Whether the visitor's OAuth token may be persisted to `localStorage`.
- *
- * Persisting the token persists a cross-visit visitor identity (the refresh
- * token re-identifies the visitor on their next visit), so it answers to
- * consent — the one thing that still does. Explicit consent wins in both
- * directions; engagement resolves only the `unknown` case. The token still
- * lives in memory for the session regardless — only the write to storage is
- * gated.
- */
-export declare const mayPersistToken: () => boolean;
-/**
- * The visitor did something deliberate — submitted a prompt — so we may remember
- * them for the session even though no CMP has answered. Unlocks the `unknown`
- * case only; it cannot override a `denied`.
- */
-export declare const unlockOnUserAction: () => void;
-export declare const getConsentSnapshot: () => ConsentSnapshot;
-export declare const subscribeToConsent: (listener: Listener) => (() => void);
-/**
- * Install the host's provider. Reads its current state immediately, *then*
- * subscribes — DL #217: a listener registered into an already-rendered page is
- * bound to an event that may have fired long before the bundle executed, so
- * subscribing alone would leave the gate permanently at `unknown`.
- */
-export declare const installConsentProvider: (next: ConsentProvider) => void;
-export declare const resetConsentGateForTests: () => void;
-export {};
-//# sourceMappingURL=consentGate.d.ts.map

package/dist/types/privacy/consentGate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"consentGate.d.ts","sourceRoot":"","sources":["../../../src/privacy/consentGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,SAAS,CAAC;AAejB,KAAK,QAAQ,GAAG,MAAM,IAAI,CAAC;AAkB3B;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,QAAO,OASlC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAO,IAOrC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,eAA2B,CAAC;AAElE,eAAO,MAAM,kBAAkB,aAAc,QAAQ,KAAG,CAAC,MAAM,IAAI,CAKlE,CAAC;AAeF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAU,eAAe,KAAG,IAM9D,CAAC;AAEF,eAAO,MAAM,wBAAwB,QAAO,IAM3C,CAAC"}

package/dist/types/privacy/consentOverride.d.ts

@@ -1,33 +0,0 @@
-/**
- * Consent override (debug-only) — DL #218.
- *
- * Shopify only serves its cookie banner where consent is legally required, so
- * from most of the world `shouldShowBanner()` is `false` and there is no way to
- * reach the `unknown` or `denied` branches by hand. Development stores often
- * have no privacy configuration at all, which pins the gate at `unknown`
- * forever. Neither is a bug, and both make the interesting states unreachable
- * from a browser.
- *
- * This forces the gate's answer so all four rows of the truth table can be
- * walked on any store, in any region, published or not.
- *
- *   ?w5consent=granted | denied | unknown      (one-shot)
- *   localStorage["w5_consent_override"]        (sticky)
- *
- * **The two are not equally trusted, on purpose.** A link is something one
- * person can send another, so a query param may only ever *reduce* what is
- * collected: `denied` is honoured anywhere, while `granted` and `unknown` are
- * honoured only on a local origin. Turning tracking *on* for someone else by
- * sending them a URL is exactly the thing this whole feature exists to
- * prevent. On a real storefront, set the localStorage key in devtools — which
- * is a deliberate act by the person whose browser it is.
- */
-import type { ConsentSnapshot, ConsentState } from './types';
-export declare const CONSENT_OVERRIDE_KEY = "w5_consent_override";
-export declare const CONSENT_OVERRIDE_QUERY_PARAM = "w5consent";
-/** The forced consent state, or `null` when no override is active. */
-export declare const getConsentOverride: () => ConsentState | null;
-export declare const overrideSnapshot: (state: ConsentState) => ConsentSnapshot;
-/** Persist the override and apply it on the next load. `null` clears it. */
-export declare const setConsentOverride: (state: ConsentState | null) => void;
-//# sourceMappingURL=consentOverride.d.ts.map

package/dist/types/privacy/consentOverride.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"consentOverride.d.ts","sourceRoot":"","sources":["../../../src/privacy/consentOverride.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE7D,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAC1D,eAAO,MAAM,4BAA4B,cAAc,CAAC;AAoDxD,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,QAAO,YAAY,GAAG,IAClB,CAAC;AAEpC,eAAO,MAAM,gBAAgB,UAAW,YAAY,KAAG,eAIrD,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,UAAW,YAAY,GAAG,IAAI,KAAG,IAU/D,CAAC"}

package/dist/types/privacy/detectProvider.d.ts

@@ -1,25 +0,0 @@
-/**
- * Provider selection — DL #218.
- *
- * Detected at boot, not configured per client, because a merchant can install
- * a CMP long after we deploy and the bundle is not the source of truth for a
- * store's behaviour (DL #214).
- *
- * Order is host-supplied → Shopify → OneTrust → none. A host that publishes an
- * answer outranks anything we could sniff, because it knows things we cannot:
- * a server-side consent record, a CMP behind its own abstraction, or a legal
- * position we have no business guessing at.
- *
- * When nothing is detected the gate keeps its default — everything `unknown`,
- * held until the visitor acts. That is the case on every Shopify store with no
- * privacy configuration, which today is most of them.
- */
-import type { ConsentProvider } from './types';
-export declare const detectConsentProvider: () => ConsentProvider | null;
-/**
- * Install the detected provider, if any. Call once at boot, before the first
- * emitter runs — anything raised earlier is held rather than lost, but the
- * sooner this runs the less the buffer has to carry.
- */
-export declare const initConsentGate: () => ConsentProvider | null;
-//# sourceMappingURL=detectProvider.d.ts.map

package/dist/types/privacy/detectProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"detectProvider.d.ts","sourceRoot":"","sources":["../../../src/privacy/detectProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAc/C,eAAO,MAAM,qBAAqB,QAAO,eAAe,GAAG,IAwB1D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAAO,eAAe,GAAG,IAcpD,CAAC"}

package/dist/types/privacy/index.d.ts

@@ -1,8 +0,0 @@
-export { type ConsentState, type ConsentPurpose, type GatedPurpose, type ConsentSnapshot, type ConsentProvider, UNKNOWN_CONSENT, } from './types';
-export { unlockOnUserAction, mayPersistToken, getConsentSnapshot, subscribeToConsent, installConsentProvider, resetConsentGateForTests, } from './consentGate';
-export { detectConsentProvider, initConsentGate } from './detectProvider';
-export { CONSENT_OVERRIDE_KEY, CONSENT_OVERRIDE_QUERY_PARAM, getConsentOverride, setConsentOverride, } from './consentOverride';
-export { createShopifyConsentProvider, isShopifyHost, } from './providers/shopifyProvider';
-export { createOneTrustConsentProvider, isOneTrustHost, } from './providers/oneTrustProvider';
-export { type HostConsentInput, HOST_CONSENT_GLOBAL, createHostSuppliedConsentProvider, hasHostSuppliedConsent, publishHostConsent, } from './providers/hostSuppliedProvider';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/privacy/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/privacy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE1E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,4BAA4B,EAC5B,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,kCAAkC,CAAC"}

package/dist/types/privacy/providers/hostSuppliedProvider.d.ts

@@ -1,29 +0,0 @@
-/**
- * Host-supplied provider — DL #218.
- *
- * The escape hatch for every CMP we cannot detect: a host page that already
- * knows its visitor's answer publishes it, and the gate believes it. This is
- * how Circana, feature.com and any merchant on Cookiebot/Osano/Klaviyo reach
- * the gate without web5 learning each vendor's API.
- *
- * Two ways in, because hosts differ in when they know:
- *   - `window.__web5_consent__` set before the bundle loads, read at install
- *   - `publishHostConsent()` called at any time afterwards
- */
-import { type ConsentProvider, type ConsentState } from '../types';
-export declare const HOST_CONSENT_GLOBAL = "__web5_consent__";
-/** What a host may publish. Anything missing stays `unknown`. */
-export interface HostConsentInput {
-    analytics?: ConsentState | boolean;
-    marketing?: ConsentState | boolean;
-    performance?: ConsentState | boolean;
-}
-export declare const hasHostSuppliedConsent: () => boolean;
-/**
- * Called by the host — directly, or by the loader when it is handed consent in
- * its boot options — whenever the visitor's answer is known or changes.
- */
-export declare const publishHostConsent: (input: HostConsentInput) => void;
-export declare const createHostSuppliedConsentProvider: () => ConsentProvider;
-export declare const __resetHostConsentForTests: () => void;
-//# sourceMappingURL=hostSuppliedProvider.d.ts.map

package/dist/types/privacy/providers/hostSuppliedProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostSuppliedProvider.d.ts","sourceRoot":"","sources":["../../../../src/privacy/providers/hostSuppliedProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAElB,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AAEtD,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IACnC,SAAS,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IACnC,WAAW,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;CACtC;AA0CD,eAAO,MAAM,sBAAsB,QAAO,OAQzC,CAAC;AAKF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAW,gBAAgB,KAAG,IAK5D,CAAC;AAEF,eAAO,MAAM,iCAAiC,QAAO,eAWnD,CAAC;AAEH,eAAO,MAAM,0BAA0B,QAAO,IAG7C,CAAC"}

package/dist/types/privacy/providers/oneTrustProvider.d.ts

@@ -1,15 +0,0 @@
-/**
- * OneTrust provider — DL #218.
- *
- * Lifted from the consent check that used to live inside
- * `utils/analyticsEvents.ts`, with one deliberate behaviour change: that
- * function returned `true` when OneTrust was absent ("host is responsible for
- * loading OneTrust"), which on a Shopify storefront meant unconditional
- * default-allow. Absence is no longer this provider's problem — it is only
- * selected when OneTrust is actually on the page, and absence is handled by
- * the gate's own default.
- */
-import type { ConsentProvider } from '../types';
-export declare const isOneTrustHost: () => boolean;
-export declare const createOneTrustConsentProvider: () => ConsentProvider;
-//# sourceMappingURL=oneTrustProvider.d.ts.map

package/dist/types/privacy/providers/oneTrustProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oneTrustProvider.d.ts","sourceRoot":"","sources":["../../../../src/privacy/providers/oneTrustProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAmB,MAAM,UAAU,CAAC;AAgBjE,eAAO,MAAM,cAAc,QAAO,OAAgC,CAAC;AAyBnE,eAAO,MAAM,6BAA6B,QAAO,eAgB/C,CAAC"}