[Amit-Shvil]

Bug

App mode On (<meta name="base44-analytics" content="on">). A visitor declines in the app's cookie banner. On every following page load (real-browser test of @base44/sdk@0.8.58-beta.0 on Cookie Lab Test, 2026-11-03):

317ms setItem base44_analytics_session_id=…
318ms xhr …/analytics/track/batch
372ms gtag consent update {"analytics_storage":"denied",…}   ← banner replays the saved Decline
372ms removeItem base44_analytics_session_id

The SDK stores the id and sends one batch before the denial arrives.

Fix

• New localStorage marker base44_analytics_denied = "1". A denial writes it; a grant removes it.
• initialConsentGranted(mode): consent → false; on → not denied; else true. Used for the initial analytics-consent state.
• Storage throws → marker reads as "not denied" (same as today; the banner replay still stops tracking).
• Mode consent → on after a Decline: the visitor stays untracked until they Accept. Intended: it honors their choice.

Tests

New unit test in analytics-consent.test.ts: after a Decline, the next "on" page stores and sends nothing; a later Accept clears the marker and starts tracking. Local npm ci failed (local npm proxy 502 on follow-redirects), so CI is the test run.

Release

Ship in 0.8.58 (beta.0 already published from main 150fabb).

🤖 Generated with Claude Code

[github-actions]

🚀 Package Preview Available!

---

Install this PR's preview build with npm:

npm i @base44-preview/sdk@0.8.58-beta.0-pr.363.6724db0

Prefer not to change any import paths? Install using npm alias so your code still imports @base44/sdk:

npm i "@base44/sdk@npm:@base44-preview/sdk@0.8.58-beta.0-pr.363.6724db0"

Or add it to your package.json dependencies:

{
  "dependencies": {
    "@base44/sdk": "npm:@base44-preview/sdk@0.8.58-beta.0-pr.363.6724db0"
  }
}

• 📦 Preview Package: @base44-preview/sdk@0.8.58-beta.0-pr.363.6724db0
• 🔗 View this commit on GitHub

---

_{Preview published to npm registry — try new features instantly!}

[Maozsm]

lgtm, ship it