fix(audience): purge identify/alias messages in core on anonymous downgrade

Move the identify/alias queue purge from the SDK into core's
createConsentManager so both the SDK and pixel correctly remove
PII-linked messages on full→anonymous downgrade.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ImmutableJeffrey

packages/audience/core/src/consent.ts

@@ -62,7 +62,8 @@ export function createConsentManager(
           // Purge all queued messages
           queue.purge(() => true);
         } else if (next === 'anonymous') {
-          // Strip userId from queued messages
+          // Remove identify/alias messages and strip userId from the rest
+          queue.purge((msg: Message) => msg.type === 'identify' || msg.type === 'alias');
           queue.transform((msg: Message) => {
             if ('userId' in msg) {
               const { userId, ...rest } = msg;

packages/audience/sdk/src/sdk.ts

@@ -362,7 +362,8 @@ export class Audience {
       this.queue.stop();
     }
 
-    // Core handles: queue purge on →none, userId strip on →anonymous, server sync.
+    // Core handles: queue purge on →none, identify/alias purge + userId strip
+    // on →anonymous, server sync.
     this.consent.setLevel(level);
 
     // Web-specific cleanup after core's transition.
@@ -371,9 +372,6 @@ export class Audience {
       deleteCookie(SESSION_COOKIE, this.cookieDomain);
     } else if (level === 'anonymous' && previous === 'full') {
       this.userId = undefined;
-      this.queue.purge(
-        (m) => m.type === 'identify' || m.type === 'alias',
-      );
     }
 
     if (isUpgradeFromNone) {