@1consent/react 0.1.0-beta.3 → 0.1.0

package/README.md

@@ -1,21 +1,22 @@
 # @1consent/react
 
-React 19+ integration for 1Consent. It renders the synchronous CMP embed,
+React 19 integration for 1Consent. It renders the synchronous CMP embed,
 keeps third-party markup inert until consent, and exposes reactive consent
 state without making server-rendered HTML visitor-specific.
 
-## Distribution status
+It works with server-rendered apps (Next.js, React Router or Remix, Astro)
+and client-rendered apps (for example a Vite SPA started with `createRoot`). In
+server-rendered HTML the CMP embed and the inline engine run while the page
+parses; in a client-rendered app the provider inserts them when it mounts.
 
-The first supported release line is `0.1.0-beta.*` on npm's `beta` dist-tag.
-The protected public-repository workflow stages each release with provenance
-for a maintainer's npm 2FA approval. The first release uses a short-lived
-stage-only token; later releases use trusted publishing. Before a release is
-approved and verified against the registry, test the reviewed local tarball.
+## Distribution status
 
-After verification, beta consumers install an explicit prerelease channel:
+Stable releases are published on npm's `latest` dist-tag; prereleases use the
+`beta` dist-tag. The protected public-repository workflow stages each release
+with provenance for a maintainer's npm 2FA approval, using trusted publishing.
 
 ```sh
-npm install @1consent/react@beta
+npm install @1consent/react
 ```
 
 ## Public API
@@ -23,14 +24,15 @@ npm install @1consent/react@beta
 - `OneConsentProvider` embeds the CMP and framework-associated fast path.
 - `OneConsent` gates plain script, iframe, pixel, or other intrinsic markup by
   configured service or category.
-- `useConsent` returns the current decision and reacts to CMP updates.
+- `useConsent(name)` returns whether a service or category currently has
+  consent (`false` until consent is known) and reacts to CMP updates.
 - `OneConsentServiceMap` and `OneConsentCategoryMap` are declaration-merging
   targets populated by `1c typegen`.
 
-The generated declaration files are included in the package. React is the
-only peer dependency, Zod is the only public runtime dependency, and 1Consent
-workspace implementation packages are bundled into the JavaScript artifact
-instead of becoming consumer dependencies.
+The generated declaration files are included in the package. React 19 is the
+only peer dependency and there are no runtime dependencies: 1Consent workspace
+implementation packages are bundled into the JavaScript artifact instead of
+becoming consumer dependencies.
 
 See the 1Consent developer reference for the complete API and integration
 guidance.
@@ -60,5 +62,5 @@ From this repository's root, pack the reviewed artifact into an existing directo
 npm pack ./packages/libs/react --pack-destination /path/to/tarballs
 ```
 
-Install that tarball in a React 19+ test project. This repository contains the
+Install that tarball in a React 19 test project. This repository contains the
 reviewed distribution artifacts; it does not contain the private source build.

package/dist/client-provider.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @1consent/react — client entry provider (1CO-1601)
+ *
+ * The `react-server` entry exports the hook-free markup provider. This client
+ * entry keeps that markup whenever the scripts come from server HTML (server
+ * rendering and hydration) and, on a client-only mount, inserts real script
+ * elements instead: React never executes a `<script>` it renders on the client.
+ */
+import { type ReactNode } from "react";
+import { type OneConsentProviderProps } from "./provider.js";
+export declare function OneConsentProvider(props: OneConsentProviderProps): ReactNode;

package/dist/index.d.ts

@@ -5,9 +5,9 @@
  * context: Next.js (App or Pages Router), Vite SPAs, Remix/React Router,
  * Astro islands. No Next.js-specific APIs are used.
  */
+export { OneConsentProvider } from "./client-provider.js";
 export type { OneConsentProps } from "./one-consent.js";
 export { OneConsent } from "./one-consent.js";
 export type { OneConsentEnvironment, OneConsentProviderProps } from "./provider.js";
-export { OneConsentProvider } from "./provider.js";
 export type { OneConsentCategoryMap, OneConsentServiceMap, RegisteredCategoryName, RegisteredServiceName, } from "./types.js";
 export { useConsent } from "./use-consent.js";

package/dist/index.js

@@ -1,3 +1,6 @@
+// src/client-provider.tsx
+import { useLayoutEffect, useState, useSyncExternalStore } from "react";
+
 // ../../contracts/dist/consent-data-governance.js
 var CONSENT_MAX_AGE_DAYS = 390;
 var CONSENT_MAX_AGE_MS = CONSENT_MAX_AGE_DAYS * 24 * 60 * 60 * 1e3;
@@ -12,42 +15,141 @@ function isConsentExpiryFresh(expiresAt, now = Date.now()) {
   return expiresAt >= now && expiresAt <= latestPermittedExpiry;
 }
 
-// ../../contracts/dist/browser-storage.js
-var BROWSER_STORAGE_KEY = "1consent";
-var BROWSER_STORAGE_SCHEMA_VERSION = 1;
-function emptyBrowserStore() {
-  return { schemaVersion: BROWSER_STORAGE_SCHEMA_VERSION, apps: {} };
+// ../../contracts/dist/consent-fastpath.js
+var RUNTIME_CONFIG_EVENT = "1consent:config";
+var SERVICE_TEMPLATE_ATTRS = ["data-1c-service", "data-1c-service-tag", "data-1c-tag"];
+var CATEGORY_TEMPLATE_ATTR = "data-1c-category";
+var ONCE_TEMPLATE_ATTR = "data-1c-once";
+function fnv1a36(input) {
+  let hash = 2166136261;
+  for (let i = 0; i < input.length; i++) {
+    hash ^= input.charCodeAt(i);
+    hash = hash + ((hash << 1) + (hash << 4) + (hash << 7) + (hash << 8) + (hash << 24)) >>> 0;
+  }
+  return hash.toString(36);
 }
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function writeAlias(map, key, granted) {
+  map[key] = key in map ? map[key] === true && granted : granted;
 }
-function isOneConsentBrowserStore(value) {
-  return isRecord(value) && value.schemaVersion === BROWSER_STORAGE_SCHEMA_VERSION && isRecord(value.apps);
+function buildConsentAliasMaps(services, categories, serviceConsent, categoryConsent) {
+  const state = buildConsentAliasState(services, categories, serviceConsent, categoryConsent);
+  return { services: state.services, categories: state.categories };
 }
-function parseBrowserStore(raw) {
-  if (!raw)
-    return emptyBrowserStore();
-  try {
-    const value = JSON.parse(raw);
-    return isOneConsentBrowserStore(value) ? value : emptyBrowserStore();
-  } catch {
-    return emptyBrowserStore();
+function buildConsentAliasState(services, categories, serviceConsent, categoryConsent) {
+  const serviceAliases = {};
+  const memberCounts = /* @__PURE__ */ new Map();
+  let nonEssentialGranted = false;
+  for (const service of services) {
+    const granted = service.essential === true || serviceConsent[service.id] === true;
+    if (granted && service.essential !== true)
+      nonEssentialGranted = true;
+    writeAlias(serviceAliases, service.id, granted);
+    if (service.catalogServiceKey) {
+      writeAlias(serviceAliases, service.catalogServiceKey, granted);
+    }
+    if (service.tag)
+      writeAlias(serviceAliases, service.tag, granted);
+    if (service.name)
+      writeAlias(serviceAliases, service.name, granted);
+    if (service.categoryId) {
+      const counts = memberCounts.get(service.categoryId) ?? { total: 0, granted: 0 };
+      counts.total += 1;
+      if (granted)
+        counts.granted += 1;
+      memberCounts.set(service.categoryId, counts);
+    }
   }
+  const categoryAliases = {};
+  for (const category of categories) {
+    const counts = memberCounts.get(category.id);
+    const derived = counts !== void 0 && counts.total > 0 && counts.granted === counts.total;
+    const granted = category.essential === true || categoryConsent[category.id] === true || derived;
+    if (granted && category.essential !== true && categoryConsent[category.id] === true) {
+      nonEssentialGranted = true;
+    }
+    writeAlias(categoryAliases, category.id, granted);
+    writeAlias(categoryAliases, category.name, granted);
+  }
+  return {
+    services: serviceAliases,
+    categories: categoryAliases,
+    nonEssentialGranted
+  };
 }
-function isBooleanRecord(value) {
-  if (!isRecord(value))
+function hasGpcSignal() {
+  if (typeof navigator === "undefined")
     return false;
-  return Object.values(value).every((entry) => typeof entry === "boolean");
+  const nav = navigator;
+  return nav.globalPrivacyControl === true;
 }
-function isBrowserFastPathState(value) {
-  if (!isRecord(value))
-    return false;
-  return typeof value.structuralVersion === "string" && typeof value.consentEpoch === "number" && Number.isSafeInteger(value.consentEpoch) && value.consentEpoch >= 0 && typeof value.expiresAt === "number" && Number.isSafeInteger(value.expiresAt) && value.expiresAt >= 0 && isBooleanRecord(value.services) && isBooleanRecord(value.categories) && (value.decisionIntegrity === void 0 || typeof value.decisionIntegrity === "string") && (value.tcfCmpId === void 0 || typeof value.tcfCmpId === "number" && Number.isSafeInteger(value.tcfCmpId) && value.tcfCmpId >= 0 && value.tcfCmpId <= 4095) && (value.tcfValidationVersion === void 0 || typeof value.tcfValidationVersion === "number" && Number.isSafeInteger(value.tcfValidationVersion) && value.tcfValidationVersion > 0) && (value.tcfDisclosedVendorKey === void 0 || typeof value.tcfDisclosedVendorKey === "string" && /^(?:[1-9]\d*(?:,[1-9]\d*)*)?$/.test(value.tcfDisclosedVendorKey)) && (value.tcfApiDataIntegrity === void 0 || typeof value.tcfApiDataIntegrity === "string") && (value.gpcRevocable === void 0 || value.gpcRevocable === true) && (value.posture === void 0 || value.posture === true);
+
+// ../react-fastpath/dist/generated/engine-source.js
+var REACT_FASTPATH_SOURCE = '"use strict";(()=>{var $e=/^[A-Za-z0-9_-]{1,64}$/;var He=/^[\\da-f]{8}(-[\\da-f]{4}){3}-[\\da-f]{12}$/i,je=(r,s,y)=>typeof r=="string"&&s.test(r)&&!(y!=null&&y.test(r)),ie=r=>je(r,$e,He);var ze=1440*60*1e3;function Ge(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function ce(r){return Ge(r)&&ie(r.appId)&&ie(r.frameworkId)}var Ke="1consent";function Pe(r){return typeof r=="string"&&/^1consent-wix-[A-Za-z0-9]{1,64}$/.test(r)}function ae(r){var s;return(s=r.browserStorageScope)!=null?s:Ke}function ke(){let r=[],s=!1,y=!1,b,A,F=()=>{var l;if(!(s||y)){for(s=!0;!y&&r.length>0;){let f=r.shift();if(!f)break;if(!f.slot.isConnected||!f.allowed())continue;let i=f.recreate(f.source),u=i.hasAttribute("type")?i.type.trim().toLowerCase():i.getAttribute("language")?`text/${(l=i.getAttribute("language"))==null?void 0:l.trim().toLowerCase()}`:"",M=u===""||/^(?:application|text)\\/(?:x-)?(?:java|ecma)script$/.test(u)||/^text\\/(?:javascript1\\.[0-5]|jscript|livescript)$/.test(u);if(i.src&&M&&!i.hasAttribute("async")&&!i.defer&&!i.noModule){let N=new MutationObserver(()=>{i.isConnected||S()}),S=()=>{b===I&&(I(),s=!1,F())},I=()=>{N.disconnect(),i.removeEventListener("load",S),i.removeEventListener("error",S),b=void 0,A=void 0};b=I,A=()=>{(!i.isConnected||!f.allowed())&&(I(),s=!1)},i.addEventListener("load",S),i.addEventListener("error",S),N.observe(f.slot.ownerDocument,{childList:!0,subtree:!0}),f.slot.replaceWith(i),i.isConnected||S();return}f.slot.replaceWith(i)}s=!1}};return{activate(l,f,i,u){let M=Array.from(l.querySelectorAll("script"),S=>{let I=document.createComment("1c-script");return S.replaceWith(I),{source:S,slot:I,allowed:i,recreate:u}}),N=!s;s=!0,r.push(...M);try{f(l)}finally{N&&(s=!1),F()}},setPaused(l){y=l},recheck(){if(!y){A==null||A();for(let l=r.length-1;l>=0;l--){let f=r[l];f&&(!f.slot.isConnected||!f.allowed())&&r.splice(l,1)}}},flush:F,clear(){r.length=0,b==null||b(),s=!1}}}(()=>{var Te,Ce,we,Oe,Ne,Re,xe;let r=window,s=document,y=["data-1c-service","data-1c-service-tag","data-1c-tag"],b="data-1c-category",A="data-1c-resolved",F="data-1c-once",l="1consent:config",f=33696e6,i=y.concat(b).map(e=>`template[${e}]:not([${A}])`).join(","),u=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),M=e=>{let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=t+((t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24))>>>0;return t.toString(36)},N=e=>{var o,c;let t=((o=e.services)!=null?o:[]).map(d=>{var g,p,V;return`${d.id}\\0${(g=d.name)!=null?g:""}\\0${(p=d.tag)!=null?p:""}\\0${(V=d.categoryId)!=null?V:""}\\0${d.essential?1:0}${d.catalogServiceKey?`\\0k\\0${d.catalogServiceKey}`:""}${d.usSensitive?"\\x001":""}`}).sort(),n=((c=e.categories)!=null?c:[]).map(d=>`${d.id}\\0${d.name}\\0${d.essential?1:0}`).sort();return M(`s:${t.join("
")}|c:${n.join("
")}`)},S=((Te=s.currentScript)==null?void 0:Te.getAttribute("data-1c-app-id"))||"",I=((Ce=s.currentScript)==null?void 0:Ce.getAttribute("data-1c-framework-versions"))||"{}",z={};try{z=JSON.parse(I)}catch{}let a=r.__1CONSENT_CONFIG__,$=a==null?void 0:a.publicIdentity,q=(we=a==null?void 0:a.consentEpoch)!=null?we:0,R=a==null?void 0:a.framework.type,x=a==null?void 0:a.machine,B=(Oe=a==null?void 0:a.languages)==null?void 0:Oe.primary,w=a!==void 0&&(a.browserStorageScope===void 0||Pe(a.browserStorageScope))&&ce($)&&$.appId===S&&(R==="gdpr"||R==="tcf"||R==="us")&&(x==="P"||x==="S"||x==="D")&&typeof B=="string"&&B.length>0&&Number.isSafeInteger(q)&&q>=0,m=w?a:void 0,P=(Ne=m==null?void 0:m.appId)!=null?Ne:"",k=(Re=m==null?void 0:m.framework.id)!=null?Re:"",H=w&&R!=null?R:"",j=w&&x!=null?x:"",G=w&&B!=null?B:"",ue=w?$.appId:"",Y=w?$.frameworkId:"",de=u(z)?z[Y]:void 0,v=typeof de=="string"?de:"",O=w?q:-1,J=ae(m!=null?m:{}),pe=JSON.stringify([J,P,k,ue,Y,H,j,G,v,O]),X=!1,Z=!1,Q,ee,te,fe=!1,le=()=>{var e,t;try{let n=r.__1CONSENT_CONFIG__;return X||Z||!n||P.length===0||k.length===0||O<0||n.appId!==P||ae(n)!==J||n.framework.id!==k||!ce(n.publicIdentity)||n.publicIdentity.appId!==ue||n.publicIdentity.frameworkId!==Y||n.framework.type!==H||n.machine!==j||((e=n.languages)==null?void 0:e.primary)!==G||((t=n.consentEpoch)!=null?t:0)!==O||v.length===0?!1:((n!==Q||n.services!==ee||n.categories!==te)&&(Q=n,ee=n.services,te=n.categories,fe=N(n)===v),fe)}catch{return!1}},h=r.__1CONSENT_REACT_FASTPATH__;if(h){try{if(h.runtimeKey===pe&&h.supportsPendingConsent===!0&&typeof h.updateConsent=="function"&&typeof h.promote=="function"&&le()&&typeof h.reconcile=="function"&&h.reconcile())return}catch{}try{typeof h.destroy=="function"&&h.destroy()}catch{}r.__1CONSENT_REACT_FASTPATH__===h&&delete r.__1CONSENT_REACT_FASTPATH__}let _=null,E=null,L,me=!1,T,D=ke(),K,ne=()=>{},C=()=>X||Z?!1:le()?!0:(Z=!0,D.clear(),_=null,E=null,T==null||T.disconnect(),ne(),r.__1CONSENT_REACT_FASTPATH__===K&&delete r.__1CONSENT_REACT_FASTPATH__,!1),ge=new Set,ye=e=>{if(!e||typeof e!="object")return!1;for(let t of Object.values(e))if(typeof t!="boolean")return!1;return!0},ve=()=>navigator.globalPrivacyControl===!0;try{let e=localStorage.getItem(J);if(e&&P&&k&&v&&O>=0){let t=Date.now(),n=t+f,o=JSON.parse(e),c=u(o)&&u(o.apps)?o.apps[P]:void 0,d=u(c)?c.frameworks:void 0,g=u(d)?d[k]:void 0,p=u(g)?g.fastPath:void 0,V=u(g)?g.consent:void 0,se=u(g)&&"consentEpoch"in g?g.consentEpoch:0,Me=u(g)&&g.type===H&&g.machine===j&&typeof se=="number"&&Number.isSafeInteger(se)&&se>=O&&g.primaryLanguage===G,W=(m==null?void 0:m.framework.type)==="tcf"?(xe=r.__1cTcf)==null?void 0:xe.tcData:void 0,Be=(m==null?void 0:m.framework.type)!=="tcf"||u(V)&&typeof V.tcString=="string"&&(W==null?void 0:W.eventStatus)==="tcloaded"&&W.tcString===V.tcString;u(o)&&o.schemaVersion===1&&Me&&u(p)&&p.structuralVersion===v&&typeof p.consentEpoch=="number"&&Number.isSafeInteger(p.consentEpoch)&&p.consentEpoch>=O&&Number.isSafeInteger(t)&&t>=0&&Number.isSafeInteger(n)&&typeof p.expiresAt=="number"&&Number.isSafeInteger(p.expiresAt)&&p.expiresAt>=t&&p.expiresAt<=n&&ye(p.services)&&Be&&!(p.gpcRevocable===!0&&ve())&&(L=p.expiresAt,_=p.services,E=ye(p.categories)?p.categories:{})}}catch{}let Le=e=>{for(let t of y){let n=e.getAttribute(t);if(n!==null)return n}return e.getAttribute(b)},Se=e=>{if(me||L!==void 0&&Date.now()>L)return!1;for(let n of y){let o=e.getAttribute(n);if(o!==null)return _!==null&&_[o]===!0}let t=e.getAttribute(b);return t!==null?E!==null&&E[t]===!0:!1},De=e=>{let t=s.createElement("script");for(let n of e.attributes)t.setAttribute(n.name,n.value);return e.src?e.hasAttribute("async")||(t.async=!1):t.text=e.text||"",t},U=e=>{if(!C()||e.hasAttribute(A)||!Se(e))return!1;e.setAttribute(A,"");let t=e.getAttribute(F);if(t!==null){if(ge.has(t))return!1;ge.add(t)}let n=e.content.cloneNode(!0);return n instanceof DocumentFragment?(D.activate(n,o=>e.after(o),()=>e.isConnected&&C()&&Se(e),De),!0):!1},re=e=>e instanceof HTMLTemplateElement,_e=8,Ve=()=>new Promise(e=>{let t=r.scheduler;t!=null&&t.postTask?t.postTask(e,{priority:"user-visible"}):setTimeout(e,0)}),oe=e=>{if(!C())return[];let t=[];for(let c of e.querySelectorAll(i))re(c)&&t.push(c);let n=[],o=0;for(;o<t.length&&o<_e;o++){let c=t[o];if(c&&U(c)){let d=Le(c);d!==null&&n.push(d)}}return o<t.length&&(async()=>{for(;o<t.length;o++){o%_e===0&&await Ve();let c=t[o];if(c)try{U(c)}catch{}}})(),n},Ee=!1,be=()=>C()?s.readyState!=="loading"?oe(s):(Ee||(Ee=!0,s.addEventListener("DOMContentLoaded",()=>oe(s),{once:!0})),[]):[];T=new MutationObserver(e=>{if(!(!C()||s.readyState==="loading"||_===null&&E===null))for(let t of e)for(let n of t.addedNodes)re(n)?U(n):n instanceof Element&&oe(n)}),T.observe(s.documentElement,{childList:!0,subtree:!0});let he=()=>{Q=void 0,ee=void 0,te=void 0,C()},Fe=()=>{X=!0,D.clear(),_=null,E=null,T==null||T.disconnect(),ne(),r.__1CONSENT_REACT_FASTPATH__===K&&delete r.__1CONSENT_REACT_FASTPATH__},Ae=(e,t,n,o=!1)=>{if(C()){me=o,D.setPaused(o),L!==void 0&&Date.now()>L&&(_=null,E=null),n!==void 0&&(L=n===0?void 0:n),_=_||{},E=E||{};for(let c of Object.keys(e))_[c]=e[c]===!0;if(t)for(let c of Object.keys(t))E[c]=t[c]===!0;D.recheck()}},Ie=()=>(D.flush(),be());K={appId:P,frameworkId:k,frameworkType:H,machine:j,primaryLanguage:G,structuralVersion:v,consentEpoch:O,runtimeKey:pe,apply(e,t){return Ae(e,t),Ie()},supportsPendingConsent:!0,updateConsent:Ae,promote:Ie,resolve(e){return e!==null&&re(e)?U(e):!1},reconcile:C,destroy:Fe},r.__1CONSENT_REACT_FASTPATH__=K,r.addEventListener(l,he),ne=()=>r.removeEventListener(l,he),(_!==null||E!==null)&&be()})();})();';
+
+// src/client-scripts.ts
+function setNonce(script, nonce) {
+  if (nonce) script.nonce = nonce;
+}
+function findLoader(cmpSrc) {
+  const target = new URL(cmpSrc, document.baseURI);
+  for (const script of document.scripts) {
+    if (!script.src) continue;
+    const source = new URL(script.src);
+    if (source.origin === target.origin && source.pathname === target.pathname) return script;
+  }
+  return void 0;
+}
+function insertEngine({ appId, frameworkVersions, nonce }) {
+  const script = document.createElement("script");
+  script.setAttribute("data-1c-react-fastpath", "");
+  script.setAttribute("data-1c-app-id", appId);
+  script.setAttribute("data-1c-framework-versions", frameworkVersions);
+  setNonce(script, nonce);
+  script.text = REACT_FASTPATH_SOURCE;
+  document.head.appendChild(script);
+  script.remove();
+}
+function mountClientScripts(options) {
+  try {
+    return startClientScripts(options);
+  } catch (error) {
+    console.error("[1Consent] OneConsentProvider could not load the CMP.", error);
+    return () => void 0;
+  }
 }
-function isFreshBrowserFastPathState(value, now = Date.now()) {
-  if (!isBrowserFastPathState(value))
-    return false;
-  return isConsentExpiryFresh(value.expiresAt, now);
+function startClientScripts(options) {
+  const win = window;
+  if (win.__1CONSENT_CONFIG__ !== void 0) {
+    insertEngine(options);
+    return () => void 0;
+  }
+  const { cmpSrc, nonce } = options;
+  let loader = cmpSrc === void 0 ? void 0 : findLoader(cmpSrc);
+  const stop = () => {
+    window.removeEventListener(RUNTIME_CONFIG_EVENT, start);
+    loader?.removeEventListener("load", start);
+  };
+  function start() {
+    if (win.__1CONSENT_CONFIG__ === void 0) return;
+    stop();
+    try {
+      insertEngine(options);
+    } catch (error) {
+      console.error(
+        "[1Consent] OneConsentProvider could not start the consent engine.",
+        error
+      );
+    }
+  }
+  window.addEventListener(RUNTIME_CONFIG_EVENT, start);
+  if (cmpSrc !== void 0 && loader === void 0) {
+    loader = document.createElement("script");
+    loader.src = cmpSrc;
+    setNonce(loader, nonce);
+    document.head.appendChild(loader);
+  }
+  loader?.addEventListener("load", start);
+  return stop;
 }
 
 // ../../shared/dist/public-package-urls.js
@@ -109,71 +211,113 @@ function getCmpScriptUrl(appId, opts = {}) {
   return opts.frameworkId ? `${base}?frameworkId=${opts.frameworkId}` : base;
 }
 
-// ../../contracts/dist/consent-fastpath.js
-var SERVICE_TEMPLATE_ATTRS = ["data-1c-service", "data-1c-service-tag", "data-1c-tag"];
-var CATEGORY_TEMPLATE_ATTR = "data-1c-category";
-var ONCE_TEMPLATE_ATTR = "data-1c-once";
-function fnv1a36(input) {
-  let hash = 2166136261;
-  for (let i = 0; i < input.length; i++) {
-    hash ^= input.charCodeAt(i);
-    hash = hash + ((hash << 1) + (hash << 4) + (hash << 7) + (hash << 8) + (hash << 24)) >>> 0;
+// src/provider.tsx
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+function resolveEnvAppId() {
+  if (typeof process === "undefined" || !process?.env) return void 0;
+  return process.env.NEXT_PUBLIC_1CONSENT_APP_ID;
+}
+function resolveProviderSources({
+  appId,
+  fastPathVersions,
+  cmpSrc,
+  // Auto-detection maps a customer's NODE_ENV=development to 1Consent's
+  // internal "local" zone (unreachable outside our stack) — default to
+  // production and let internal setups override explicitly.
+  environment = "production",
+  loadCmp = true
+}) {
+  const resolvedAppId = appId ?? resolveEnvAppId();
+  const resolvedCmpSrc = cmpSrc ?? (resolvedAppId !== void 0 ? getCmpScriptUrl(resolvedAppId, { env: environment }) : void 0);
+  if (loadCmp && resolvedCmpSrc === void 0) {
+    throw new Error(
+      "[1Consent] Missing App ID: pass the `appId` prop to <OneConsentProvider> or set the NEXT_PUBLIC_1CONSENT_APP_ID environment variable."
+    );
   }
-  return hash.toString(36);
+  return {
+    appId: resolvedAppId ?? "",
+    cmpSrc: loadCmp ? resolvedCmpSrc : void 0,
+    frameworkVersions: JSON.stringify(fastPathVersions ?? {})
+  };
 }
-function writeAlias(map, key, granted) {
-  map[key] = key in map ? map[key] === true && granted : granted;
+function OneConsentProvider(props) {
+  const { appId, cmpSrc, frameworkVersions } = resolveProviderSources(props);
+  const { nonce, children } = props;
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    cmpSrc !== void 0 && /* @__PURE__ */ jsx("script", { src: cmpSrc, nonce }),
+    /* @__PURE__ */ jsx(
+      "script",
+      {
+        "data-1c-react-fastpath": "",
+        "data-1c-app-id": appId,
+        "data-1c-framework-versions": frameworkVersions,
+        nonce,
+        children: REACT_FASTPATH_SOURCE
+      }
+    ),
+    children
+  ] });
 }
-function buildConsentAliasMaps(services, categories, serviceConsent, categoryConsent) {
-  const state = buildConsentAliasState(services, categories, serviceConsent, categoryConsent);
-  return { services: state.services, categories: state.categories };
+
+// src/client-provider.tsx
+import { jsx as jsx2 } from "react/jsx-runtime";
+var subscribeNever = () => () => void 0;
+function OneConsentProvider2(props) {
+  const rendering = useSyncExternalStore(
+    subscribeNever,
+    () => "client",
+    () => "server-html"
+  );
+  const [scriptsFrom] = useState(rendering);
+  const { appId, cmpSrc, frameworkVersions } = resolveProviderSources(props);
+  const { nonce } = props;
+  useLayoutEffect(() => {
+    if (scriptsFrom === "server-html") return;
+    return mountClientScripts({ appId, cmpSrc, frameworkVersions, nonce });
+  }, [scriptsFrom, appId, cmpSrc, frameworkVersions, nonce]);
+  if (scriptsFrom === "server-html") return /* @__PURE__ */ jsx2(OneConsentProvider, { ...props });
+  return props.children;
 }
-function buildConsentAliasState(services, categories, serviceConsent, categoryConsent) {
-  const serviceAliases = {};
-  const memberCounts = /* @__PURE__ */ new Map();
-  let nonEssentialGranted = false;
-  for (const service of services) {
-    const granted = service.essential === true || serviceConsent[service.id] === true;
-    if (granted && service.essential !== true)
-      nonEssentialGranted = true;
-    writeAlias(serviceAliases, service.id, granted);
-    if (service.catalogServiceKey) {
-      writeAlias(serviceAliases, service.catalogServiceKey, granted);
-    }
-    if (service.tag)
-      writeAlias(serviceAliases, service.tag, granted);
-    if (service.name)
-      writeAlias(serviceAliases, service.name, granted);
-    if (service.categoryId) {
-      const counts = memberCounts.get(service.categoryId) ?? { total: 0, granted: 0 };
-      counts.total += 1;
-      if (granted)
-        counts.granted += 1;
-      memberCounts.set(service.categoryId, counts);
-    }
-  }
-  const categoryAliases = {};
-  for (const category of categories) {
-    const counts = memberCounts.get(category.id);
-    const derived = counts !== void 0 && counts.total > 0 && counts.granted === counts.total;
-    const granted = category.essential === true || categoryConsent[category.id] === true || derived;
-    if (granted && category.essential !== true && categoryConsent[category.id] === true) {
-      nonEssentialGranted = true;
-    }
-    writeAlias(categoryAliases, category.id, granted);
-    writeAlias(categoryAliases, category.name, granted);
+
+// ../../contracts/dist/browser-storage.js
+var BROWSER_STORAGE_KEY = "1consent";
+function browserStorageKey(config) {
+  return config.browserStorageScope ?? BROWSER_STORAGE_KEY;
+}
+var BROWSER_STORAGE_SCHEMA_VERSION = 1;
+function emptyBrowserStore() {
+  return { schemaVersion: BROWSER_STORAGE_SCHEMA_VERSION, apps: {} };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isOneConsentBrowserStore(value) {
+  return isRecord(value) && value.schemaVersion === BROWSER_STORAGE_SCHEMA_VERSION && isRecord(value.apps);
+}
+function parseBrowserStore(raw) {
+  if (!raw)
+    return emptyBrowserStore();
+  try {
+    const value = JSON.parse(raw);
+    return isOneConsentBrowserStore(value) ? value : emptyBrowserStore();
+  } catch {
+    return emptyBrowserStore();
   }
-  return {
-    services: serviceAliases,
-    categories: categoryAliases,
-    nonEssentialGranted
-  };
 }
-function hasGpcSignal() {
-  if (typeof navigator === "undefined")
+function isBooleanRecord(value) {
+  if (!isRecord(value))
     return false;
-  const nav = navigator;
-  return nav.globalPrivacyControl === true;
+  return Object.values(value).every((entry) => typeof entry === "boolean");
+}
+function isBrowserFastPathState(value) {
+  if (!isRecord(value))
+    return false;
+  return typeof value.structuralVersion === "string" && typeof value.consentEpoch === "number" && Number.isSafeInteger(value.consentEpoch) && value.consentEpoch >= 0 && typeof value.expiresAt === "number" && Number.isSafeInteger(value.expiresAt) && value.expiresAt >= 0 && isBooleanRecord(value.services) && isBooleanRecord(value.categories) && (value.decisionIntegrity === void 0 || typeof value.decisionIntegrity === "string") && (value.tcfCmpId === void 0 || typeof value.tcfCmpId === "number" && Number.isSafeInteger(value.tcfCmpId) && value.tcfCmpId >= 0 && value.tcfCmpId <= 4095) && (value.tcfValidationVersion === void 0 || typeof value.tcfValidationVersion === "number" && Number.isSafeInteger(value.tcfValidationVersion) && value.tcfValidationVersion > 0) && (value.tcfDisclosedVendorKey === void 0 || typeof value.tcfDisclosedVendorKey === "string" && /^(?:[1-9]\d*(?:,[1-9]\d*)*)?$/.test(value.tcfDisclosedVendorKey)) && (value.tcfApiDataIntegrity === void 0 || typeof value.tcfApiDataIntegrity === "string") && (value.gpcRevocable === void 0 || value.gpcRevocable === true) && (value.posture === void 0 || value.posture === true);
+}
+function isFreshBrowserFastPathState(value, now = Date.now()) {
+  if (!isBrowserFastPathState(value))
+    return false;
+  return isConsentExpiryFresh(value.expiresAt, now);
 }
 
 // src/serialize.ts
@@ -334,7 +478,7 @@ function serializeChildren(children) {
 }
 
 // src/one-consent.tsx
-import { jsx } from "react/jsx-runtime";
+import { jsx as jsx3 } from "react/jsx-runtime";
 var SERVICE_ATTR = SERVICE_TEMPLATE_ATTRS[0] ?? "data-1c-service";
 function OneConsent(props) {
   const { nonce, children } = props;
@@ -354,7 +498,7 @@ function OneConsent(props) {
   const onceAttr = props.once ? ` ${ONCE_TEMPLATE_ATTR}="${fnv1a36(`${attr}=${key}|${content}`)}"` : "";
   const nonceAttr = nonce ? ` nonce="${escapeAttribute(nonce)}"` : "";
   const html = `<template ${attr}="${escapeAttribute(key)}"${onceAttr}>${content}</template><script${nonceAttr}>window.__1CONSENT_REACT_FASTPATH__&&window.__1CONSENT_REACT_FASTPATH__.resolve(document.currentScript.previousElementSibling);</script>`;
-  return /* @__PURE__ */ jsx(
+  return /* @__PURE__ */ jsx3(
     "div",
     {
       "data-1c-slot": "",
@@ -365,52 +509,8 @@ function OneConsent(props) {
   );
 }
 
-// ../react-fastpath/dist/generated/engine-source.js
-var REACT_FASTPATH_SOURCE = '"use strict";(()=>{var He=1440*60*1e3;function De(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function Fe(r){return typeof r=="string"&&/^[A-Za-z0-9_-]{1,64}$/.test(r)&&!/^[\\da-f]{8}(-[\\da-f]{4}){3}-[\\da-f]{12}$/i.test(r)}function se(r){return De(r)&&[r.appId,r.frameworkId].every(Fe)}function Oe(){let r=[],c=!1,T=!1,E,h,F=()=>{var p;if(!(c||T)){for(c=!0;!T&&r.length>0;){let d=r.shift();if(!d)break;if(!d.slot.isConnected||!d.allowed())continue;let s=d.recreate(d.source),a=s.hasAttribute("type")?s.type.trim().toLowerCase():s.getAttribute("language")?`text/${(p=s.getAttribute("language"))==null?void 0:p.trim().toLowerCase()}`:"",H=a===""||/^(?:application|text)\\/(?:x-)?(?:java|ecma)script$/.test(a)||/^text\\/(?:javascript1\\.[0-5]|jscript|livescript)$/.test(a);if(s.src&&H&&!s.hasAttribute("async")&&!s.defer&&!s.noModule){let O=new MutationObserver(()=>{s.isConnected||y()}),y=()=>{E===b&&(b(),c=!1,F())},b=()=>{O.disconnect(),s.removeEventListener("load",y),s.removeEventListener("error",y),E=void 0,h=void 0};E=b,h=()=>{(!s.isConnected||!d.allowed())&&(b(),c=!1)},s.addEventListener("load",y),s.addEventListener("error",y),O.observe(d.slot.ownerDocument,{childList:!0,subtree:!0}),d.slot.replaceWith(s),s.isConnected||y();return}d.slot.replaceWith(s)}c=!1}};return{activate(p,d,s,a){let H=Array.from(p.querySelectorAll("script"),y=>{let b=document.createComment("1c-script");return y.replaceWith(b),{source:y,slot:b,allowed:s,recreate:a}}),O=!c;c=!0,r.push(...H);try{d(p)}finally{O&&(c=!1),F()}},setPaused(p){T=p},recheck(){if(!T){h==null||h();for(let p=r.length-1;p>=0;p--){let d=r[p];d&&(!d.slot.isConnected||!d.allowed())&&r.splice(p,1)}}},flush:F,clear(){r.length=0,E==null||E(),c=!1}}}(()=>{var he,be,Te,Ce,Ie,Ne,ve;let r=window,c=document,T=["data-1c-service","data-1c-service-tag","data-1c-tag"],E="data-1c-category",h="data-1c-resolved",F="data-1c-once",p="1consent:config",d=33696e6,s=T.concat(E).map(e=>`template[${e}]:not([${h}])`).join(","),a=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),H=e=>{let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=t+((t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24))>>>0;return t.toString(36)},O=e=>{var o,i;let t=((o=e.services)!=null?o:[]).map(u=>{var m,l,D;return`${u.id}\\0${(m=u.name)!=null?m:""}\\0${(l=u.tag)!=null?l:""}\\0${(D=u.categoryId)!=null?D:""}\\0${u.essential?1:0}${u.catalogServiceKey?`\\0k\\0${u.catalogServiceKey}`:""}${u.usSensitive?"\\x001":""}`}).sort(),n=((i=e.categories)!=null?i:[]).map(u=>`${u.id}\\0${u.name}\\0${u.essential?1:0}`).sort();return H(`s:${t.join("
")}|c:${n.join("
")}`)},y=((he=c.currentScript)==null?void 0:he.getAttribute("data-1c-app-id"))||"",b=((be=c.currentScript)==null?void 0:be.getAttribute("data-1c-framework-versions"))||"{}",q={};try{q=JSON.parse(b)}catch{}let f=r.__1CONSENT_CONFIG__,j=f==null?void 0:f.publicIdentity,z=(Te=f==null?void 0:f.consentEpoch)!=null?Te:0,R=f==null?void 0:f.framework.type,w=f==null?void 0:f.machine,$=(Ce=f==null?void 0:f.languages)==null?void 0:Ce.primary,N=f!==void 0&&se(j)&&j.appId===y&&(R==="gdpr"||R==="tcf"||R==="us")&&(w==="P"||w==="S"||w==="D")&&typeof $=="string"&&$.length>0&&Number.isSafeInteger(z)&&z>=0,g=N?f:void 0,k=(Ie=g==null?void 0:g.appId)!=null?Ie:"",P=(Ne=g==null?void 0:g.framework.id)!=null?Ne:"",V=N&&R!=null?R:"",G=N&&w!=null?w:"",B=N&&$!=null?$:"",ie=N?j.appId:"",J=N?j.frameworkId:"",ce=a(q)?q[J]:void 0,L=typeof ce=="string"?ce:"",v=N?z:-1,ae=JSON.stringify([k,P,ie,J,V,G,B,L,v]),Y=!1,X=!1,Q,Z,ee,ue=!1,le=()=>{var e,t;try{let n=r.__1CONSENT_CONFIG__;return Y||X||!n||k.length===0||P.length===0||v<0||n.appId!==k||n.framework.id!==P||!se(n.publicIdentity)||n.publicIdentity.appId!==ie||n.publicIdentity.frameworkId!==J||n.framework.type!==V||n.machine!==G||((e=n.languages)==null?void 0:e.primary)!==B||((t=n.consentEpoch)!=null?t:0)!==v||L.length===0?!1:((n!==Q||n.services!==Z||n.categories!==ee)&&(Q=n,Z=n.services,ee=n.categories,ue=O(n)===L),ue)}catch{return!1}},A=r.__1CONSENT_REACT_FASTPATH__;if(A){try{if(A.runtimeKey===ae&&A.supportsPendingConsent===!0&&typeof A.updateConsent=="function"&&typeof A.promote=="function"&&le()&&typeof A.reconcile=="function"&&A.reconcile())return}catch{}try{typeof A.destroy=="function"&&A.destroy()}catch{}r.__1CONSENT_REACT_FASTPATH__===A&&delete r.__1CONSENT_REACT_FASTPATH__}let _=null,S=null,x,de=!1,C,M=Oe(),U,te=()=>{},I=()=>Y||X?!1:le()?!0:(X=!0,M.clear(),_=null,S=null,C==null||C.disconnect(),te(),r.__1CONSENT_REACT_FASTPATH__===U&&delete r.__1CONSENT_REACT_FASTPATH__,!1),fe=new Set,pe=e=>{if(!e||typeof e!="object")return!1;for(let t of Object.values(e))if(typeof t!="boolean")return!1;return!0},Re=()=>navigator.globalPrivacyControl===!0;try{let e=localStorage.getItem("1consent");if(e&&k&&P&&L&&v>=0){let t=Date.now(),n=t+d,o=JSON.parse(e),i=a(o)&&a(o.apps)?o.apps[k]:void 0,u=a(i)?i.frameworks:void 0,m=a(u)?u[P]:void 0,l=a(m)?m.fastPath:void 0,D=a(m)?m.consent:void 0,oe=a(m)&&"consentEpoch"in m?m.consentEpoch:0,xe=a(m)&&m.type===V&&m.machine===G&&typeof oe=="number"&&Number.isSafeInteger(oe)&&oe>=v&&m.primaryLanguage===B,W=(g==null?void 0:g.framework.type)==="tcf"?(ve=r.__1cTcf)==null?void 0:ve.tcData:void 0,Me=(g==null?void 0:g.framework.type)!=="tcf"||a(D)&&typeof D.tcString=="string"&&(W==null?void 0:W.eventStatus)==="tcloaded"&&W.tcString===D.tcString;a(o)&&o.schemaVersion===1&&xe&&a(l)&&l.structuralVersion===L&&typeof l.consentEpoch=="number"&&Number.isSafeInteger(l.consentEpoch)&&l.consentEpoch>=v&&Number.isSafeInteger(t)&&t>=0&&Number.isSafeInteger(n)&&typeof l.expiresAt=="number"&&Number.isSafeInteger(l.expiresAt)&&l.expiresAt>=t&&l.expiresAt<=n&&pe(l.services)&&Me&&!(l.gpcRevocable===!0&&Re())&&(x=l.expiresAt,_=l.services,S=pe(l.categories)?l.categories:{})}}catch{}let we=e=>{for(let t of T){let n=e.getAttribute(t);if(n!==null)return n}return e.getAttribute(E)},me=e=>{if(de||x!==void 0&&Date.now()>x)return!1;for(let n of T){let o=e.getAttribute(n);if(o!==null)return _!==null&&_[o]===!0}let t=e.getAttribute(E);return t!==null?S!==null&&S[t]===!0:!1},ke=e=>{let t=c.createElement("script");for(let n of e.attributes)t.setAttribute(n.name,n.value);return e.src?e.hasAttribute("async")||(t.async=!1):t.text=e.text||"",t},K=e=>{if(!I()||e.hasAttribute(h)||!me(e))return!1;e.setAttribute(h,"");let t=e.getAttribute(F);if(t!==null){if(fe.has(t))return!1;fe.add(t)}let n=e.content.cloneNode(!0);return n instanceof DocumentFragment?(M.activate(n,o=>e.after(o),()=>e.isConnected&&I()&&me(e),ke),!0):!1},ne=e=>e instanceof HTMLTemplateElement,ge=8,Pe=()=>new Promise(e=>{let t=r.scheduler;t!=null&&t.postTask?t.postTask(e,{priority:"user-visible"}):setTimeout(e,0)}),re=e=>{if(!I())return[];let t=[];for(let i of e.querySelectorAll(s))ne(i)&&t.push(i);let n=[],o=0;for(;o<t.length&&o<ge;o++){let i=t[o];if(i&&K(i)){let u=we(i);u!==null&&n.push(u)}}return o<t.length&&(async()=>{for(;o<t.length;o++){o%ge===0&&await Pe();let i=t[o];if(i)try{K(i)}catch{}}})(),n},ye=!1,_e=()=>I()?c.readyState!=="loading"?re(c):(ye||(ye=!0,c.addEventListener("DOMContentLoaded",()=>re(c),{once:!0})),[]):[];C=new MutationObserver(e=>{if(!(!I()||c.readyState==="loading"||_===null&&S===null))for(let t of e)for(let n of t.addedNodes)ne(n)?K(n):n instanceof Element&&re(n)}),C.observe(c.documentElement,{childList:!0,subtree:!0});let Se=()=>{Q=void 0,Z=void 0,ee=void 0,I()},Le=()=>{Y=!0,M.clear(),_=null,S=null,C==null||C.disconnect(),te(),r.__1CONSENT_REACT_FASTPATH__===U&&delete r.__1CONSENT_REACT_FASTPATH__},Ee=(e,t,n,o=!1)=>{if(I()){de=o,M.setPaused(o),x!==void 0&&Date.now()>x&&(_=null,S=null),n!==void 0&&(x=n===0?void 0:n),_=_||{},S=S||{};for(let i of Object.keys(e))_[i]=e[i]===!0;if(t)for(let i of Object.keys(t))S[i]=t[i]===!0;M.recheck()}},Ae=()=>(M.flush(),_e());U={appId:k,frameworkId:P,frameworkType:V,machine:G,primaryLanguage:B,structuralVersion:L,consentEpoch:v,runtimeKey:ae,apply(e,t){return Ee(e,t),Ae()},supportsPendingConsent:!0,updateConsent:Ee,promote:Ae,resolve(e){return e!==null&&ne(e)?K(e):!1},reconcile:I,destroy:Le},r.__1CONSENT_REACT_FASTPATH__=U,r.addEventListener(p,Se),te=()=>r.removeEventListener(p,Se),(_!==null||S!==null)&&_e()})();})();';
-
-// src/provider.tsx
-import { Fragment, jsx as jsx2, jsxs } from "react/jsx-runtime";
-function resolveEnvAppId() {
-  if (typeof process === "undefined" || !process?.env) return void 0;
-  return process.env.NEXT_PUBLIC_1CONSENT_APP_ID;
-}
-function OneConsentProvider({
-  appId,
-  fastPathVersions,
-  nonce,
-  cmpSrc,
-  // Auto-detection maps a customer's NODE_ENV=development to 1Consent's
-  // internal "local" zone (unreachable outside our stack) — default to
-  // production and let internal setups override explicitly.
-  environment = "production",
-  loadCmp = true,
-  children
-}) {
-  const resolvedAppId = appId ?? resolveEnvAppId();
-  const resolvedCmpSrc = cmpSrc ?? (resolvedAppId !== void 0 ? getCmpScriptUrl(resolvedAppId, { env: environment }) : void 0);
-  if (loadCmp && resolvedCmpSrc === void 0) {
-    throw new Error(
-      "[1Consent] Missing App ID: pass the `appId` prop to <OneConsentProvider> or set the NEXT_PUBLIC_1CONSENT_APP_ID environment variable."
-    );
-  }
-  return /* @__PURE__ */ jsxs(Fragment, { children: [
-    loadCmp && resolvedCmpSrc !== void 0 && /* @__PURE__ */ jsx2("script", { src: resolvedCmpSrc, nonce }),
-    /* @__PURE__ */ jsx2(
-      "script",
-      {
-        "data-1c-react-fastpath": "",
-        "data-1c-app-id": resolvedAppId ?? "",
-        "data-1c-framework-versions": JSON.stringify(fastPathVersions ?? {}),
-        nonce,
-        dangerouslySetInnerHTML: { __html: REACT_FASTPATH_SOURCE }
-      }
-    ),
-    children
-  ] });
-}
-
 // src/use-consent.ts
-import { useEffect, useState } from "react";
+import { useEffect, useState as useState2 } from "react";
 function readMirrorConsent(key) {
   try {
     const api = window.__1CONSENT_REACT_FASTPATH__;
@@ -422,7 +522,7 @@ function readMirrorConsent(key) {
     if (!config || config.appId !== api.appId || config.framework.id !== api.frameworkId || !Number.isSafeInteger(liveEpoch) || liveEpoch < 0 || liveEpoch !== api.consentEpoch || config.languages.primary.length === 0) {
       return false;
     }
-    const root = parseBrowserStore(localStorage.getItem(BROWSER_STORAGE_KEY));
+    const root = parseBrowserStore(localStorage.getItem(browserStorageKey(config)));
     const framework = root.apps[api.appId]?.frameworks[api.frameworkId];
     if (!framework || framework.type !== config.framework.type || framework.machine !== config.machine || (framework.consentEpoch ?? 0) < liveEpoch || framework.primaryLanguage !== config.languages.primary) {
       return false;
@@ -521,7 +621,7 @@ function whenBusAvailable(listener) {
   };
 }
 function useConsent(key) {
-  const [granted, setGranted] = useState(false);
+  const [granted, setGranted] = useState2(false);
   useEffect(() => {
     setGranted(readMirrorConsent(key));
     let disposed = false;
@@ -554,6 +654,6 @@ function useConsent(key) {
 }
 export {
   OneConsent,
-  OneConsentProvider,
+  OneConsentProvider2 as OneConsentProvider,
   useConsent
 };

package/dist/provider.d.ts

@@ -40,4 +40,20 @@ export interface OneConsentProviderProps {
     loadCmp?: boolean;
     children?: ReactNode;
 }
-export declare function OneConsentProvider({ appId, fastPathVersions, nonce, cmpSrc, environment, loadCmp, children, }: OneConsentProviderProps): import("react").JSX.Element;
+export interface ProviderSources {
+    /** Resolved app id ("" when unresolved: the fast path stays cold). */
+    appId: string;
+    /** CMP embed URL, or undefined when `loadCmp` is false. */
+    cmpSrc: string | undefined;
+    /** JSON of the framework-associated build stamps. */
+    frameworkVersions: string;
+}
+/** Resolve what the provider loads; throws when the CMP embed has no app id. */
+export declare function resolveProviderSources({ appId, fastPathVersions, cmpSrc, environment, loadCmp, }: OneConsentProviderProps): ProviderSources;
+/**
+ * Server-rendered provider markup. The browser runs these scripts only when
+ * they arrive in the HTML; React never executes a `<script>` it renders on the
+ * client, so the client entry (`client-provider.tsx`) inserts them itself on a
+ * client-only mount.
+ */
+export declare function OneConsentProvider(props: OneConsentProviderProps): import("react").JSX.Element;

package/dist/react-server.js

@@ -260,7 +260,7 @@ function OneConsent(props) {
 }
 
 // ../react-fastpath/dist/generated/engine-source.js
-var REACT_FASTPATH_SOURCE = '"use strict";(()=>{var He=1440*60*1e3;function De(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function Fe(r){return typeof r=="string"&&/^[A-Za-z0-9_-]{1,64}$/.test(r)&&!/^[\\da-f]{8}(-[\\da-f]{4}){3}-[\\da-f]{12}$/i.test(r)}function se(r){return De(r)&&[r.appId,r.frameworkId].every(Fe)}function Oe(){let r=[],c=!1,T=!1,E,h,F=()=>{var p;if(!(c||T)){for(c=!0;!T&&r.length>0;){let d=r.shift();if(!d)break;if(!d.slot.isConnected||!d.allowed())continue;let s=d.recreate(d.source),a=s.hasAttribute("type")?s.type.trim().toLowerCase():s.getAttribute("language")?`text/${(p=s.getAttribute("language"))==null?void 0:p.trim().toLowerCase()}`:"",H=a===""||/^(?:application|text)\\/(?:x-)?(?:java|ecma)script$/.test(a)||/^text\\/(?:javascript1\\.[0-5]|jscript|livescript)$/.test(a);if(s.src&&H&&!s.hasAttribute("async")&&!s.defer&&!s.noModule){let O=new MutationObserver(()=>{s.isConnected||y()}),y=()=>{E===b&&(b(),c=!1,F())},b=()=>{O.disconnect(),s.removeEventListener("load",y),s.removeEventListener("error",y),E=void 0,h=void 0};E=b,h=()=>{(!s.isConnected||!d.allowed())&&(b(),c=!1)},s.addEventListener("load",y),s.addEventListener("error",y),O.observe(d.slot.ownerDocument,{childList:!0,subtree:!0}),d.slot.replaceWith(s),s.isConnected||y();return}d.slot.replaceWith(s)}c=!1}};return{activate(p,d,s,a){let H=Array.from(p.querySelectorAll("script"),y=>{let b=document.createComment("1c-script");return y.replaceWith(b),{source:y,slot:b,allowed:s,recreate:a}}),O=!c;c=!0,r.push(...H);try{d(p)}finally{O&&(c=!1),F()}},setPaused(p){T=p},recheck(){if(!T){h==null||h();for(let p=r.length-1;p>=0;p--){let d=r[p];d&&(!d.slot.isConnected||!d.allowed())&&r.splice(p,1)}}},flush:F,clear(){r.length=0,E==null||E(),c=!1}}}(()=>{var he,be,Te,Ce,Ie,Ne,ve;let r=window,c=document,T=["data-1c-service","data-1c-service-tag","data-1c-tag"],E="data-1c-category",h="data-1c-resolved",F="data-1c-once",p="1consent:config",d=33696e6,s=T.concat(E).map(e=>`template[${e}]:not([${h}])`).join(","),a=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),H=e=>{let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=t+((t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24))>>>0;return t.toString(36)},O=e=>{var o,i;let t=((o=e.services)!=null?o:[]).map(u=>{var m,l,D;return`${u.id}\\0${(m=u.name)!=null?m:""}\\0${(l=u.tag)!=null?l:""}\\0${(D=u.categoryId)!=null?D:""}\\0${u.essential?1:0}${u.catalogServiceKey?`\\0k\\0${u.catalogServiceKey}`:""}${u.usSensitive?"\\x001":""}`}).sort(),n=((i=e.categories)!=null?i:[]).map(u=>`${u.id}\\0${u.name}\\0${u.essential?1:0}`).sort();return H(`s:${t.join("
")}|c:${n.join("
")}`)},y=((he=c.currentScript)==null?void 0:he.getAttribute("data-1c-app-id"))||"",b=((be=c.currentScript)==null?void 0:be.getAttribute("data-1c-framework-versions"))||"{}",q={};try{q=JSON.parse(b)}catch{}let f=r.__1CONSENT_CONFIG__,j=f==null?void 0:f.publicIdentity,z=(Te=f==null?void 0:f.consentEpoch)!=null?Te:0,R=f==null?void 0:f.framework.type,w=f==null?void 0:f.machine,$=(Ce=f==null?void 0:f.languages)==null?void 0:Ce.primary,N=f!==void 0&&se(j)&&j.appId===y&&(R==="gdpr"||R==="tcf"||R==="us")&&(w==="P"||w==="S"||w==="D")&&typeof $=="string"&&$.length>0&&Number.isSafeInteger(z)&&z>=0,g=N?f:void 0,k=(Ie=g==null?void 0:g.appId)!=null?Ie:"",P=(Ne=g==null?void 0:g.framework.id)!=null?Ne:"",V=N&&R!=null?R:"",G=N&&w!=null?w:"",B=N&&$!=null?$:"",ie=N?j.appId:"",J=N?j.frameworkId:"",ce=a(q)?q[J]:void 0,L=typeof ce=="string"?ce:"",v=N?z:-1,ae=JSON.stringify([k,P,ie,J,V,G,B,L,v]),Y=!1,X=!1,Q,Z,ee,ue=!1,le=()=>{var e,t;try{let n=r.__1CONSENT_CONFIG__;return Y||X||!n||k.length===0||P.length===0||v<0||n.appId!==k||n.framework.id!==P||!se(n.publicIdentity)||n.publicIdentity.appId!==ie||n.publicIdentity.frameworkId!==J||n.framework.type!==V||n.machine!==G||((e=n.languages)==null?void 0:e.primary)!==B||((t=n.consentEpoch)!=null?t:0)!==v||L.length===0?!1:((n!==Q||n.services!==Z||n.categories!==ee)&&(Q=n,Z=n.services,ee=n.categories,ue=O(n)===L),ue)}catch{return!1}},A=r.__1CONSENT_REACT_FASTPATH__;if(A){try{if(A.runtimeKey===ae&&A.supportsPendingConsent===!0&&typeof A.updateConsent=="function"&&typeof A.promote=="function"&&le()&&typeof A.reconcile=="function"&&A.reconcile())return}catch{}try{typeof A.destroy=="function"&&A.destroy()}catch{}r.__1CONSENT_REACT_FASTPATH__===A&&delete r.__1CONSENT_REACT_FASTPATH__}let _=null,S=null,x,de=!1,C,M=Oe(),U,te=()=>{},I=()=>Y||X?!1:le()?!0:(X=!0,M.clear(),_=null,S=null,C==null||C.disconnect(),te(),r.__1CONSENT_REACT_FASTPATH__===U&&delete r.__1CONSENT_REACT_FASTPATH__,!1),fe=new Set,pe=e=>{if(!e||typeof e!="object")return!1;for(let t of Object.values(e))if(typeof t!="boolean")return!1;return!0},Re=()=>navigator.globalPrivacyControl===!0;try{let e=localStorage.getItem("1consent");if(e&&k&&P&&L&&v>=0){let t=Date.now(),n=t+d,o=JSON.parse(e),i=a(o)&&a(o.apps)?o.apps[k]:void 0,u=a(i)?i.frameworks:void 0,m=a(u)?u[P]:void 0,l=a(m)?m.fastPath:void 0,D=a(m)?m.consent:void 0,oe=a(m)&&"consentEpoch"in m?m.consentEpoch:0,xe=a(m)&&m.type===V&&m.machine===G&&typeof oe=="number"&&Number.isSafeInteger(oe)&&oe>=v&&m.primaryLanguage===B,W=(g==null?void 0:g.framework.type)==="tcf"?(ve=r.__1cTcf)==null?void 0:ve.tcData:void 0,Me=(g==null?void 0:g.framework.type)!=="tcf"||a(D)&&typeof D.tcString=="string"&&(W==null?void 0:W.eventStatus)==="tcloaded"&&W.tcString===D.tcString;a(o)&&o.schemaVersion===1&&xe&&a(l)&&l.structuralVersion===L&&typeof l.consentEpoch=="number"&&Number.isSafeInteger(l.consentEpoch)&&l.consentEpoch>=v&&Number.isSafeInteger(t)&&t>=0&&Number.isSafeInteger(n)&&typeof l.expiresAt=="number"&&Number.isSafeInteger(l.expiresAt)&&l.expiresAt>=t&&l.expiresAt<=n&&pe(l.services)&&Me&&!(l.gpcRevocable===!0&&Re())&&(x=l.expiresAt,_=l.services,S=pe(l.categories)?l.categories:{})}}catch{}let we=e=>{for(let t of T){let n=e.getAttribute(t);if(n!==null)return n}return e.getAttribute(E)},me=e=>{if(de||x!==void 0&&Date.now()>x)return!1;for(let n of T){let o=e.getAttribute(n);if(o!==null)return _!==null&&_[o]===!0}let t=e.getAttribute(E);return t!==null?S!==null&&S[t]===!0:!1},ke=e=>{let t=c.createElement("script");for(let n of e.attributes)t.setAttribute(n.name,n.value);return e.src?e.hasAttribute("async")||(t.async=!1):t.text=e.text||"",t},K=e=>{if(!I()||e.hasAttribute(h)||!me(e))return!1;e.setAttribute(h,"");let t=e.getAttribute(F);if(t!==null){if(fe.has(t))return!1;fe.add(t)}let n=e.content.cloneNode(!0);return n instanceof DocumentFragment?(M.activate(n,o=>e.after(o),()=>e.isConnected&&I()&&me(e),ke),!0):!1},ne=e=>e instanceof HTMLTemplateElement,ge=8,Pe=()=>new Promise(e=>{let t=r.scheduler;t!=null&&t.postTask?t.postTask(e,{priority:"user-visible"}):setTimeout(e,0)}),re=e=>{if(!I())return[];let t=[];for(let i of e.querySelectorAll(s))ne(i)&&t.push(i);let n=[],o=0;for(;o<t.length&&o<ge;o++){let i=t[o];if(i&&K(i)){let u=we(i);u!==null&&n.push(u)}}return o<t.length&&(async()=>{for(;o<t.length;o++){o%ge===0&&await Pe();let i=t[o];if(i)try{K(i)}catch{}}})(),n},ye=!1,_e=()=>I()?c.readyState!=="loading"?re(c):(ye||(ye=!0,c.addEventListener("DOMContentLoaded",()=>re(c),{once:!0})),[]):[];C=new MutationObserver(e=>{if(!(!I()||c.readyState==="loading"||_===null&&S===null))for(let t of e)for(let n of t.addedNodes)ne(n)?K(n):n instanceof Element&&re(n)}),C.observe(c.documentElement,{childList:!0,subtree:!0});let Se=()=>{Q=void 0,Z=void 0,ee=void 0,I()},Le=()=>{Y=!0,M.clear(),_=null,S=null,C==null||C.disconnect(),te(),r.__1CONSENT_REACT_FASTPATH__===U&&delete r.__1CONSENT_REACT_FASTPATH__},Ee=(e,t,n,o=!1)=>{if(I()){de=o,M.setPaused(o),x!==void 0&&Date.now()>x&&(_=null,S=null),n!==void 0&&(x=n===0?void 0:n),_=_||{},S=S||{};for(let i of Object.keys(e))_[i]=e[i]===!0;if(t)for(let i of Object.keys(t))S[i]=t[i]===!0;M.recheck()}},Ae=()=>(M.flush(),_e());U={appId:k,frameworkId:P,frameworkType:V,machine:G,primaryLanguage:B,structuralVersion:L,consentEpoch:v,runtimeKey:ae,apply(e,t){return Ee(e,t),Ae()},supportsPendingConsent:!0,updateConsent:Ee,promote:Ae,resolve(e){return e!==null&&ne(e)?K(e):!1},reconcile:I,destroy:Le},r.__1CONSENT_REACT_FASTPATH__=U,r.addEventListener(p,Se),te=()=>r.removeEventListener(p,Se),(_!==null||S!==null)&&_e()})();})();';
+var REACT_FASTPATH_SOURCE = '"use strict";(()=>{var $e=/^[A-Za-z0-9_-]{1,64}$/;var He=/^[\\da-f]{8}(-[\\da-f]{4}){3}-[\\da-f]{12}$/i,je=(r,s,y)=>typeof r=="string"&&s.test(r)&&!(y!=null&&y.test(r)),ie=r=>je(r,$e,He);var ze=1440*60*1e3;function Ge(r){return typeof r=="object"&&r!==null&&!Array.isArray(r)}function ce(r){return Ge(r)&&ie(r.appId)&&ie(r.frameworkId)}var Ke="1consent";function Pe(r){return typeof r=="string"&&/^1consent-wix-[A-Za-z0-9]{1,64}$/.test(r)}function ae(r){var s;return(s=r.browserStorageScope)!=null?s:Ke}function ke(){let r=[],s=!1,y=!1,b,A,F=()=>{var l;if(!(s||y)){for(s=!0;!y&&r.length>0;){let f=r.shift();if(!f)break;if(!f.slot.isConnected||!f.allowed())continue;let i=f.recreate(f.source),u=i.hasAttribute("type")?i.type.trim().toLowerCase():i.getAttribute("language")?`text/${(l=i.getAttribute("language"))==null?void 0:l.trim().toLowerCase()}`:"",M=u===""||/^(?:application|text)\\/(?:x-)?(?:java|ecma)script$/.test(u)||/^text\\/(?:javascript1\\.[0-5]|jscript|livescript)$/.test(u);if(i.src&&M&&!i.hasAttribute("async")&&!i.defer&&!i.noModule){let N=new MutationObserver(()=>{i.isConnected||S()}),S=()=>{b===I&&(I(),s=!1,F())},I=()=>{N.disconnect(),i.removeEventListener("load",S),i.removeEventListener("error",S),b=void 0,A=void 0};b=I,A=()=>{(!i.isConnected||!f.allowed())&&(I(),s=!1)},i.addEventListener("load",S),i.addEventListener("error",S),N.observe(f.slot.ownerDocument,{childList:!0,subtree:!0}),f.slot.replaceWith(i),i.isConnected||S();return}f.slot.replaceWith(i)}s=!1}};return{activate(l,f,i,u){let M=Array.from(l.querySelectorAll("script"),S=>{let I=document.createComment("1c-script");return S.replaceWith(I),{source:S,slot:I,allowed:i,recreate:u}}),N=!s;s=!0,r.push(...M);try{f(l)}finally{N&&(s=!1),F()}},setPaused(l){y=l},recheck(){if(!y){A==null||A();for(let l=r.length-1;l>=0;l--){let f=r[l];f&&(!f.slot.isConnected||!f.allowed())&&r.splice(l,1)}}},flush:F,clear(){r.length=0,b==null||b(),s=!1}}}(()=>{var Te,Ce,we,Oe,Ne,Re,xe;let r=window,s=document,y=["data-1c-service","data-1c-service-tag","data-1c-tag"],b="data-1c-category",A="data-1c-resolved",F="data-1c-once",l="1consent:config",f=33696e6,i=y.concat(b).map(e=>`template[${e}]:not([${A}])`).join(","),u=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),M=e=>{let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=t+((t<<1)+(t<<4)+(t<<7)+(t<<8)+(t<<24))>>>0;return t.toString(36)},N=e=>{var o,c;let t=((o=e.services)!=null?o:[]).map(d=>{var g,p,V;return`${d.id}\\0${(g=d.name)!=null?g:""}\\0${(p=d.tag)!=null?p:""}\\0${(V=d.categoryId)!=null?V:""}\\0${d.essential?1:0}${d.catalogServiceKey?`\\0k\\0${d.catalogServiceKey}`:""}${d.usSensitive?"\\x001":""}`}).sort(),n=((c=e.categories)!=null?c:[]).map(d=>`${d.id}\\0${d.name}\\0${d.essential?1:0}`).sort();return M(`s:${t.join("
")}|c:${n.join("
")}`)},S=((Te=s.currentScript)==null?void 0:Te.getAttribute("data-1c-app-id"))||"",I=((Ce=s.currentScript)==null?void 0:Ce.getAttribute("data-1c-framework-versions"))||"{}",z={};try{z=JSON.parse(I)}catch{}let a=r.__1CONSENT_CONFIG__,$=a==null?void 0:a.publicIdentity,q=(we=a==null?void 0:a.consentEpoch)!=null?we:0,R=a==null?void 0:a.framework.type,x=a==null?void 0:a.machine,B=(Oe=a==null?void 0:a.languages)==null?void 0:Oe.primary,w=a!==void 0&&(a.browserStorageScope===void 0||Pe(a.browserStorageScope))&&ce($)&&$.appId===S&&(R==="gdpr"||R==="tcf"||R==="us")&&(x==="P"||x==="S"||x==="D")&&typeof B=="string"&&B.length>0&&Number.isSafeInteger(q)&&q>=0,m=w?a:void 0,P=(Ne=m==null?void 0:m.appId)!=null?Ne:"",k=(Re=m==null?void 0:m.framework.id)!=null?Re:"",H=w&&R!=null?R:"",j=w&&x!=null?x:"",G=w&&B!=null?B:"",ue=w?$.appId:"",Y=w?$.frameworkId:"",de=u(z)?z[Y]:void 0,v=typeof de=="string"?de:"",O=w?q:-1,J=ae(m!=null?m:{}),pe=JSON.stringify([J,P,k,ue,Y,H,j,G,v,O]),X=!1,Z=!1,Q,ee,te,fe=!1,le=()=>{var e,t;try{let n=r.__1CONSENT_CONFIG__;return X||Z||!n||P.length===0||k.length===0||O<0||n.appId!==P||ae(n)!==J||n.framework.id!==k||!ce(n.publicIdentity)||n.publicIdentity.appId!==ue||n.publicIdentity.frameworkId!==Y||n.framework.type!==H||n.machine!==j||((e=n.languages)==null?void 0:e.primary)!==G||((t=n.consentEpoch)!=null?t:0)!==O||v.length===0?!1:((n!==Q||n.services!==ee||n.categories!==te)&&(Q=n,ee=n.services,te=n.categories,fe=N(n)===v),fe)}catch{return!1}},h=r.__1CONSENT_REACT_FASTPATH__;if(h){try{if(h.runtimeKey===pe&&h.supportsPendingConsent===!0&&typeof h.updateConsent=="function"&&typeof h.promote=="function"&&le()&&typeof h.reconcile=="function"&&h.reconcile())return}catch{}try{typeof h.destroy=="function"&&h.destroy()}catch{}r.__1CONSENT_REACT_FASTPATH__===h&&delete r.__1CONSENT_REACT_FASTPATH__}let _=null,E=null,L,me=!1,T,D=ke(),K,ne=()=>{},C=()=>X||Z?!1:le()?!0:(Z=!0,D.clear(),_=null,E=null,T==null||T.disconnect(),ne(),r.__1CONSENT_REACT_FASTPATH__===K&&delete r.__1CONSENT_REACT_FASTPATH__,!1),ge=new Set,ye=e=>{if(!e||typeof e!="object")return!1;for(let t of Object.values(e))if(typeof t!="boolean")return!1;return!0},ve=()=>navigator.globalPrivacyControl===!0;try{let e=localStorage.getItem(J);if(e&&P&&k&&v&&O>=0){let t=Date.now(),n=t+f,o=JSON.parse(e),c=u(o)&&u(o.apps)?o.apps[P]:void 0,d=u(c)?c.frameworks:void 0,g=u(d)?d[k]:void 0,p=u(g)?g.fastPath:void 0,V=u(g)?g.consent:void 0,se=u(g)&&"consentEpoch"in g?g.consentEpoch:0,Me=u(g)&&g.type===H&&g.machine===j&&typeof se=="number"&&Number.isSafeInteger(se)&&se>=O&&g.primaryLanguage===G,W=(m==null?void 0:m.framework.type)==="tcf"?(xe=r.__1cTcf)==null?void 0:xe.tcData:void 0,Be=(m==null?void 0:m.framework.type)!=="tcf"||u(V)&&typeof V.tcString=="string"&&(W==null?void 0:W.eventStatus)==="tcloaded"&&W.tcString===V.tcString;u(o)&&o.schemaVersion===1&&Me&&u(p)&&p.structuralVersion===v&&typeof p.consentEpoch=="number"&&Number.isSafeInteger(p.consentEpoch)&&p.consentEpoch>=O&&Number.isSafeInteger(t)&&t>=0&&Number.isSafeInteger(n)&&typeof p.expiresAt=="number"&&Number.isSafeInteger(p.expiresAt)&&p.expiresAt>=t&&p.expiresAt<=n&&ye(p.services)&&Be&&!(p.gpcRevocable===!0&&ve())&&(L=p.expiresAt,_=p.services,E=ye(p.categories)?p.categories:{})}}catch{}let Le=e=>{for(let t of y){let n=e.getAttribute(t);if(n!==null)return n}return e.getAttribute(b)},Se=e=>{if(me||L!==void 0&&Date.now()>L)return!1;for(let n of y){let o=e.getAttribute(n);if(o!==null)return _!==null&&_[o]===!0}let t=e.getAttribute(b);return t!==null?E!==null&&E[t]===!0:!1},De=e=>{let t=s.createElement("script");for(let n of e.attributes)t.setAttribute(n.name,n.value);return e.src?e.hasAttribute("async")||(t.async=!1):t.text=e.text||"",t},U=e=>{if(!C()||e.hasAttribute(A)||!Se(e))return!1;e.setAttribute(A,"");let t=e.getAttribute(F);if(t!==null){if(ge.has(t))return!1;ge.add(t)}let n=e.content.cloneNode(!0);return n instanceof DocumentFragment?(D.activate(n,o=>e.after(o),()=>e.isConnected&&C()&&Se(e),De),!0):!1},re=e=>e instanceof HTMLTemplateElement,_e=8,Ve=()=>new Promise(e=>{let t=r.scheduler;t!=null&&t.postTask?t.postTask(e,{priority:"user-visible"}):setTimeout(e,0)}),oe=e=>{if(!C())return[];let t=[];for(let c of e.querySelectorAll(i))re(c)&&t.push(c);let n=[],o=0;for(;o<t.length&&o<_e;o++){let c=t[o];if(c&&U(c)){let d=Le(c);d!==null&&n.push(d)}}return o<t.length&&(async()=>{for(;o<t.length;o++){o%_e===0&&await Ve();let c=t[o];if(c)try{U(c)}catch{}}})(),n},Ee=!1,be=()=>C()?s.readyState!=="loading"?oe(s):(Ee||(Ee=!0,s.addEventListener("DOMContentLoaded",()=>oe(s),{once:!0})),[]):[];T=new MutationObserver(e=>{if(!(!C()||s.readyState==="loading"||_===null&&E===null))for(let t of e)for(let n of t.addedNodes)re(n)?U(n):n instanceof Element&&oe(n)}),T.observe(s.documentElement,{childList:!0,subtree:!0});let he=()=>{Q=void 0,ee=void 0,te=void 0,C()},Fe=()=>{X=!0,D.clear(),_=null,E=null,T==null||T.disconnect(),ne(),r.__1CONSENT_REACT_FASTPATH__===K&&delete r.__1CONSENT_REACT_FASTPATH__},Ae=(e,t,n,o=!1)=>{if(C()){me=o,D.setPaused(o),L!==void 0&&Date.now()>L&&(_=null,E=null),n!==void 0&&(L=n===0?void 0:n),_=_||{},E=E||{};for(let c of Object.keys(e))_[c]=e[c]===!0;if(t)for(let c of Object.keys(t))E[c]=t[c]===!0;D.recheck()}},Ie=()=>(D.flush(),be());K={appId:P,frameworkId:k,frameworkType:H,machine:j,primaryLanguage:G,structuralVersion:v,consentEpoch:O,runtimeKey:pe,apply(e,t){return Ae(e,t),Ie()},supportsPendingConsent:!0,updateConsent:Ae,promote:Ie,resolve(e){return e!==null&&re(e)?U(e):!1},reconcile:C,destroy:Fe},r.__1CONSENT_REACT_FASTPATH__=K,r.addEventListener(l,he),ne=()=>r.removeEventListener(l,he),(_!==null||E!==null)&&be()})();})();';
 
 // src/provider.tsx
 import { Fragment, jsx as jsx2, jsxs } from "react/jsx-runtime";
@@ -268,17 +268,15 @@ function resolveEnvAppId() {
   if (typeof process === "undefined" || !process?.env) return void 0;
   return process.env.NEXT_PUBLIC_1CONSENT_APP_ID;
 }
-function OneConsentProvider({
+function resolveProviderSources({
   appId,
   fastPathVersions,
-  nonce,
   cmpSrc,
   // Auto-detection maps a customer's NODE_ENV=development to 1Consent's
   // internal "local" zone (unreachable outside our stack) — default to
   // production and let internal setups override explicitly.
   environment = "production",
-  loadCmp = true,
-  children
+  loadCmp = true
 }) {
   const resolvedAppId = appId ?? resolveEnvAppId();
   const resolvedCmpSrc = cmpSrc ?? (resolvedAppId !== void 0 ? getCmpScriptUrl(resolvedAppId, { env: environment }) : void 0);
@@ -287,16 +285,25 @@ function OneConsentProvider({
       "[1Consent] Missing App ID: pass the `appId` prop to <OneConsentProvider> or set the NEXT_PUBLIC_1CONSENT_APP_ID environment variable."
     );
   }
+  return {
+    appId: resolvedAppId ?? "",
+    cmpSrc: loadCmp ? resolvedCmpSrc : void 0,
+    frameworkVersions: JSON.stringify(fastPathVersions ?? {})
+  };
+}
+function OneConsentProvider(props) {
+  const { appId, cmpSrc, frameworkVersions } = resolveProviderSources(props);
+  const { nonce, children } = props;
   return /* @__PURE__ */ jsxs(Fragment, { children: [
-    loadCmp && resolvedCmpSrc !== void 0 && /* @__PURE__ */ jsx2("script", { src: resolvedCmpSrc, nonce }),
+    cmpSrc !== void 0 && /* @__PURE__ */ jsx2("script", { src: cmpSrc, nonce }),
     /* @__PURE__ */ jsx2(
       "script",
       {
         "data-1c-react-fastpath": "",
-        "data-1c-app-id": resolvedAppId ?? "",
-        "data-1c-framework-versions": JSON.stringify(fastPathVersions ?? {}),
+        "data-1c-app-id": appId,
+        "data-1c-framework-versions": frameworkVersions,
         nonce,
-        dangerouslySetInnerHTML: { __html: REACT_FASTPATH_SOURCE }
+        children: REACT_FASTPATH_SOURCE
       }
     ),
     children

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@1consent/react",
-    "version": "0.1.0-beta.3",
+    "version": "0.1.0",
     "description": "React 19 consent components and hooks for the 1Consent CMP.",
     "type": "module",
     "sideEffects": false,
@@ -25,7 +25,7 @@
         "access": "public",
         "provenance": true,
         "registry": "https://registry.npmjs.org/",
-        "tag": "beta"
+        "tag": "latest"
     },
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",
@@ -34,6 +34,7 @@
         "dist/index.d.ts",
         "dist/react-server.js",
         "dist/react-server.d.ts",
+        "dist/client-provider.d.ts",
         "dist/one-consent.d.ts",
         "dist/provider.d.ts",
         "dist/types.d.ts",
@@ -49,9 +50,6 @@
         }
     },
     "peerDependencies": {
-        "react": ">=19.0.0"
-    },
-    "dependencies": {
-        "zod": "^4.4.3"
+        "react": ">=19.0.0 <20.0.0"
     }
 }