@c15t/nextjs 2.0.0-rc.8 → 2.0.0

package/README.md

@@ -11,7 +11,7 @@
 
 [![GitHub stars](https://img.shields.io/github/stars/c15t/c15t?style=flat-square)](https://github.com/c15t/c15t)
 [![CI](https://img.shields.io/github/actions/workflow/status/c15t/c15t/ci.yml?style=flat-square)](https://github.com/c15t/c15t/actions/workflows/ci.yml)
-[![License](https://img.shields.io/badge/license-GPL--3.0-blue.svg?style=flat-square)](https://github.com/c15t/c15t/blob/main/LICENSE.md)
+[![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg?style=flat-square)](https://github.com/c15t/c15t/blob/main/LICENSE.md)
 [![Discord](https://img.shields.io/discord/1312171102268690493?style=flat-square)](https://c15t.link/discord)
 [![npm version](https://img.shields.io/npm/v/%40c15t%2Fnextjs?style=flat-square)](https://www.npmjs.com/package/@c15t/nextjs)
 [![Top Language](https://img.shields.io/github/languages/top/c15t/c15t?style=flat-square)](https://github.com/c15t/c15t)
@@ -133,8 +133,8 @@ Our preference is that you make use of GitHub's private vulnerability reporting
 
 ## License
 
-[GNU General Public License v3.0](https://github.com/c15t/c15t/blob/main/LICENSE.md)
+[Apache License 2.0](https://github.com/c15t/c15t/blob/main/LICENSE.md)
 
 ---
 
-**Built with ❤️ by the [consent.io](https://www.consent.io?utm_source=github&utm_medium=repopage_%40c15t%2Fnextjs) team**
+**Built by [Inth](https://inth.com?utm_source=github&utm_medium=repopage_%40c15t%2Fnextjs)**

package/dist/version.cjs

@@ -1 +1 @@
-"use strict";const __rslib_import_meta_url__="u"<typeof document?new(require("url".replace("",""))).URL("file:"+__filename).href:document.currentScript&&document.currentScript.src||new URL("main.js",document.baseURI).href;var __webpack_require__={};__webpack_require__.d=(e,_)=>{for(var r in _)__webpack_require__.o(_,r)&&!__webpack_require__.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:_[r]})},__webpack_require__.o=(e,_)=>Object.prototype.hasOwnProperty.call(e,_),__webpack_require__.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var __webpack_exports__={};__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{version:()=>version});const version="2.0.0-rc.8";for(var __rspack_i in exports.version=__webpack_exports__.version,__webpack_exports__)-1===["version"].indexOf(__rspack_i)&&(exports[__rspack_i]=__webpack_exports__[__rspack_i]);Object.defineProperty(exports,"__esModule",{value:!0});
+"use strict";const __rslib_import_meta_url__="u"<typeof document?new(require("url".replace("",""))).URL("file:"+__filename).href:document.currentScript&&document.currentScript.src||new URL("main.js",document.baseURI).href;var __webpack_require__={};__webpack_require__.d=(e,_)=>{for(var r in _)__webpack_require__.o(_,r)&&!__webpack_require__.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:_[r]})},__webpack_require__.o=(e,_)=>Object.prototype.hasOwnProperty.call(e,_),__webpack_require__.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var __webpack_exports__={};__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{version:()=>version});const version="2.0.0";for(var __rspack_i in exports.version=__webpack_exports__.version,__webpack_exports__)-1===["version"].indexOf(__rspack_i)&&(exports[__rspack_i]=__webpack_exports__[__rspack_i]);Object.defineProperty(exports,"__esModule",{value:!0});

package/dist/version.js

@@ -1 +1 @@
-let e="2.0.0-rc.8";export{e as version};
+let e="2.0.0";export{e as version};

package/dist-types/libs/initial-data.d.ts

@@ -21,7 +21,13 @@ import type { FetchInitialDataOptions } from '../types';
  *   backendURL: '/api/consent',
  *   debug: process.env.NODE_ENV === 'development'
  * });
- * return <ClientProvider ssrData={initialData}>{children}</ClientProvider>
+ * return (
+ *   <ConsentManagerProvider
+ *     options={{ mode: 'hosted', backendURL: '/api/consent', ssrData: initialData }}
+ *   >
+ *     {children}
+ *   </ConsentManagerProvider>
+ * )
  * ```
  */
 export declare function fetchInitialData(options: FetchInitialDataOptions): Promise<SSRInitialData | undefined>;

package/dist-types/version.d.ts

@@ -1 +1 @@
-export declare const version = "2.0.0-rc.8";
+export declare const version = "2.0.0";

package/docs/building-headless-components.md

@@ -4,11 +4,11 @@ description: Build policy-aware custom consent components in Next.js using the h
 ---
 Building custom consent UI is easier now because c15t exposes multiple layers of policy-aware primitives instead of forcing you to reconstruct banner rules by hand.
 
-The layering is:
+Think of customization as a ladder:
 
 * stock component props for the shortest path
-* `ConsentBanner.PolicyActions` and `ConsentWidget.PolicyActions` for custom structure with policy-aware actions
-* `useHeadlessConsentUI()` for fully manual action rendering and non-standard controls
+* `ConsentBanner.PolicyActions` and `ConsentWidget.PolicyActions` when you want custom structure but still want c15t to resolve policy-aware actions
+* `useHeadlessConsentUI()` when you need fully manual action rendering, custom controls, or non-standard flow
 
 > ⚠️ **Warning:**
 > Headless is the last step in the customization ladder. Use this guide only when pre-built components, tokens, slots, compound components, and noStyle are no longer sufficient.
@@ -26,6 +26,29 @@ The split is intentional: `@c15t/ui` owns pure policy-action resolution, while t
 > ℹ️ **Info:**
 > This guide is about building your own components while still respecting resolved policy-pack behavior. For the general headless overview, see Headless Mode.
 
+## Choose the Smallest Layer That Solves the Job
+
+Start with the smallest API surface that still gives you the behavior you need:
+
+* Stay with stock components when you only need theming, spacing, copy, or legal-link changes
+* Use `ConsentBanner.PolicyActions` or `ConsentWidget.PolicyActions` when you want a custom compound-component layout but still want grouped actions, ordering, and primary emphasis to come from policy
+* Add `renderAction` when the grouping is still correct but you want to remap actions to stock c15t button compounds
+* Reach for `useHeadlessConsentUI()` only when you need custom button elements, need to map `actionGroups` yourself, wire non-button controls, or coordinate the consent UI with a more custom state machine
+
+This order matters because every step down the ladder gives you more control, but also makes it easier for your UI to drift away from the resolved policy if you stop using the provided state.
+
+## Before You Build Headless UI
+
+Do not use headless mode for problems that are still inside the stock component model:
+
+* Use `layout`, `direction`, `primaryButton`, and `legalLinks` before you rebuild banner markup
+* Use `theme.consentActions` before you swap out stock actions
+* Use tokens such as `colors.surface` and `colors.surfaceHover` before raw CSS overrides
+* Use slots such as `consentBannerCard`, `consentBannerFooter`, and `consentDialogCard` before compound components
+* Use `ConsentManagerProvider.options.i18n` before rebuilding UI just to change text
+
+A good rule: if the stock banner or dialog structure is still correct, you probably do not need headless mode.
+
 ## What the Headless Tooling Gives You
 
 The main win is that your custom UI can stay aligned with policy packs without duplicating policy logic in your components.
@@ -40,9 +63,67 @@ The main win is that your custom UI can stay aligned with policy packs without d
 * UI profile and scroll-lock hints
 * whether the banner or dialog should currently be visible
 
+The hook also gives you the policy-aware action helpers you are expected to call:
+
+* `performBannerAction('accept' | 'reject')`
+* `performDialogAction('accept' | 'reject')`
+* `saveCustomPreferences()` for the dialog `customize` action
+* `openDialog()`, `openBanner()`, and `closeUI()` for surface visibility
+
 That means your component mostly focuses on markup and design-system concerns instead of re-implementing policy interpretation.
 
-For most compound-component layouts, start with `ConsentBanner.PolicyActions` or `ConsentWidget.PolicyActions`. They render stock c15t buttons and translations by default, and `renderAction` is only needed when you want to override the action mapping. Reach for manual `actionGroups` mapping when you need action rendering that no longer fits the stock button compounds.
+For most compound-component layouts, start with `ConsentBanner.PolicyActions` or `ConsentWidget.PolicyActions`. They render stock c15t buttons and translations by default, and `renderAction` is only needed when you want to override which stock compound renders for each action. Reach for manual `actionGroups` mapping when you need action rendering that no longer fits the stock button compounds.
+
+## Policy-Aware Compound Components First
+
+If your goal is "custom layout, same policy behavior", start here before dropping to manual `actionGroups` rendering:
+
+```tsx title="components/consent-manager/banner-shell.tsx"
+'use client';
+
+import { ConsentBanner } from '@c15t/nextjs';
+
+export function BannerShell() {
+  return (
+    <ConsentBanner.Root>
+      <ConsentBanner.Card>
+        <ConsentBanner.Header>
+          <ConsentBanner.Title />
+          <ConsentBanner.Description />
+        </ConsentBanner.Header>
+        <ConsentBanner.PolicyActions />
+      </ConsentBanner.Card>
+    </ConsentBanner.Root>
+  );
+}
+```
+
+Use `renderAction` only when you want to remap actions to stock button compounds while keeping the same policy-driven grouping and ordering:
+
+```tsx title="components/consent-manager/banner-actions.tsx"
+'use client';
+
+import { ConsentBanner } from '@c15t/nextjs';
+
+export function BannerActionsWithCustomMapping() {
+  return (
+    <ConsentBanner.PolicyActions
+      renderAction={(action, props) => {
+        const { key, ...buttonProps } = props;
+
+        switch (action) {
+          case 'accept':
+            return <ConsentBanner.AcceptButton key={key} {...buttonProps} />;
+          case 'reject':
+            return <ConsentBanner.RejectButton key={key} {...buttonProps} />;
+          case 'customize':
+            return <ConsentBanner.CustomizeButton key={key} {...buttonProps} />;
+        }
+      }}
+    />
+  );
+}
+```
 
 > ℹ️ **Info:**
 > For custom layouts built from c15t compound components, prefer ConsentBanner.PolicyActions and ConsentWidget.PolicyActions. The examples below intentionally use manual actionGroups mapping to show the fully headless escape hatch.
@@ -89,9 +170,20 @@ export function ConsentManager({ children }: { children: ReactNode }) {
 import { useHeadlessConsentUI, useTranslations } from '@c15t/nextjs/headless';
 
 export function CustomConsentBanner() {
-  const { banner, openDialog, performAction } = useHeadlessConsentUI();
+  const { banner, openDialog, performBannerAction } = useHeadlessConsentUI();
   const translations = useTranslations();
 
+  function getActionLabel(action: (typeof banner.allowedActions)[number]) {
+    switch (action) {
+      case 'accept':
+        return translations.common.acceptAll;
+      case 'reject':
+        return translations.common.rejectAll;
+      case 'customize':
+        return translations.common.customize;
+    }
+  }
+
   if (!banner.isVisible) return null;
 
   return (
@@ -114,14 +206,10 @@ export function CustomConsentBanner() {
                     openDialog();
                     return;
                   }
-                  void performAction(action, { surface: 'banner' });
+                  void performBannerAction(action);
                 }}
               >
-                {action === 'accept'
-                  ? translations.common.acceptAll
-                  : action === 'reject'
-                    ? translations.common.rejectAll
-                    : translations.common.customize}
+                {getActionLabel(action)}
               </button>
             ))}
           </div>
@@ -154,6 +242,17 @@ export function CustomConsentDialog() {
   } = useConsentManager();
   const translations = useTranslations();
 
+  function getActionLabel(action: (typeof dialog.allowedActions)[number]) {
+    switch (action) {
+      case 'accept':
+        return translations.common.acceptAll;
+      case 'reject':
+        return translations.common.rejectAll;
+      case 'customize':
+        return translations.common.save;
+    }
+  }
+
   if (!dialog.isVisible) return null;
 
   const displayedTypes = consentTypes.filter(
@@ -202,11 +301,7 @@ export function CustomConsentDialog() {
                   void performDialogAction(action);
                 }}
               >
-                {action === 'accept'
-                  ? translations.common.acceptAll
-                  : action === 'reject'
-                    ? translations.common.rejectAll
-                    : translations.common.save}
+                {getActionLabel(action)}
               </button>
             ))}
           </div>
@@ -217,6 +312,17 @@ export function CustomConsentDialog() {
 }
 ```
 
+## What Headless Is Not For
+
+Headless mode is not the recommended path for:
+
+* changing the banner footer background
+* rounding the stock banner card
+* restyling stock banner or dialog buttons
+* changing consent copy
+
+Those should stay in the pre-built stack with tokens, slots, `theme.consentActions`, and provider `i18n`.
+
 ## What a Policy-Aware Headless Component Should Respect
 
 When you build custom banner or dialog components, make sure they use:

package/docs/components/consent-banner.md

@@ -241,36 +241,7 @@ renderAction={(action, props) => {
 />
 ```
 
-Use `useTranslations()` only when you are replacing the button markup entirely:
-
-```tsx
-import { ConsentBanner, useTranslations } from '@c15t/react';
-
-export function CustomBannerActions() {
-  const { common } = useTranslations();
-
-  return (
-    <ConsentBanner.PolicyActions
-      renderAction={(action, props) => (
-        <button
-          key={props.key}
-          type="button"
-          className={props.isPrimary ? 'btn-primary' : 'btn-secondary'}
-          style={props.style}
-        >
-          {action === 'accept'
-            ? common.acceptAll
-            : action === 'reject'
-              ? common.rejectAll
-              : common.customize}
-        </button>
-      )}
-    />
-  );
-}
-```
-
-For maximum control, use `useHeadlessConsentUI()` and render `banner.actionGroups` manually.
+`renderAction` is still meant for stock button compounds. If you want completely custom button elements and click handling, use `useHeadlessConsentUI()` and render `banner.actionGroups` manually instead of `ConsentBanner.PolicyActions`.
 
 If you only need styling changes, stay with tokens and slots instead of rebuilding the banner layout.
 

package/docs/components/consent-dialog.md

@@ -75,7 +75,7 @@ Add a floating button that lets users re-open the dialog after dismissing the ba
 
 ## Branding
 
-Hide the c15t branding in the dialog footer:
+Hide the c15t branding tag:
 
 ```tsx
 <ConsentDialog hideBranding />
@@ -84,7 +84,7 @@ Hide the c15t branding in the dialog footer:
 ## Styling First
 
 > ℹ️ **Info:**
-> If you are only changing visuals, stay with the stock dialog and use the theme system first. Start with tokens and slots such as consentDialogCard, consentDialogHeader, and consentDialogFooter. See Styling Overview.
+> If you are only changing visuals, stay with the stock dialog and use the theme system first. Start with tokens and slots such as consentDialogCard, consentWidgetFooter, and consentDialogTag. See Styling Overview.
 
 ```tsx
 <ConsentManagerProvider
@@ -97,7 +97,8 @@ Hide the c15t branding in the dialog footer:
       slots: {
         consentDialogCard: 'rounded-[32px] shadow-xl',
         consentDialogHeader: 'gap-3',
-        consentDialogFooter: 'border-t border-black/10 px-6',
+        consentWidgetFooter: 'gap-3 pt-6',
+        consentDialogTag: 'shadow-none',
       },
     },
   }}

package/docs/components/consent-manager-provider.md

@@ -36,15 +36,15 @@ export default function ConsentManager({ children }: { children: ReactNode }) {
 |Property|Type|Description|Default|Required|
 |:--|:--|:--|:--|:--:|
 |enabled|boolean \|undefined|Whether c15t should be active.|true|Optional|
-|callbacks|[Callbacks \|undefined](https://v2.c15t.com/docs/frameworks/react/callbacks)|Event callbacks for consent actions.|-|Optional|
-|scripts|[Script \|undefined](https://v2.c15t.com/docs/frameworks/react/script-loader)|Dynamically load scripts based on consent state.|-|Optional|
+|callbacks|[Callbacks \|undefined](https://c15t.com/docs/frameworks/react/callbacks)|Event callbacks for consent actions.|-|Optional|
+|scripts|[Script \|undefined](https://c15t.com/docs/frameworks/react/script-loader)|Dynamically load scripts based on consent state.|-|Optional|
 |legalLinks|Object \|undefined|Configuration for the legal links.|-|Optional|
 |storageConfig|StorageConfig \|undefined|Storage configuration for consent persistence.|-|Optional|
 |user|User \|undefined|The user's information. Usually your own internal ID for the user from your auth provider.|-|Optional|
 |overrides|Overrides \|undefined|Forcefully set values like country, region, language for the consent manager. These values will override the values detected from the browser.|-|Optional|
-|networkBlocker|[NetworkBlockerConfig \|undefined](https://v2.c15t.com/docs/frameworks/react/network-blocker)|Configuration for the network request blocker.|-|Optional|
-|iab|[IABConfig \|undefined](https://v2.c15t.com/docs/frameworks/react/iab/overview)|IAB TCF 2.3 configuration.|-|Optional|
-|ssrData|[Object \|undefined](https://v2.c15t.com/docs/frameworks/react/server-side)|SSR-prefetched data for hydration.|-|Optional|
+|networkBlocker|[NetworkBlockerConfig \|undefined](https://c15t.com/docs/frameworks/react/network-blocker)|Configuration for the network request blocker.|-|Optional|
+|iab|[IABConfig \|undefined](https://c15t.com/docs/frameworks/react/iab/overview)|IAB TCF 2.3 configuration.|-|Optional|
+|ssrData|[Object \|undefined](https://c15t.com/docs/frameworks/react/server-side)|SSR-prefetched data for hydration.|-|Optional|
 
 #### `callbacks` Callbacks
 
@@ -171,8 +171,8 @@ SSR-prefetched data for hydration.
 |Property|Type|Description|Default|Required|
 |:--|:--|:--|:--|:--:|
 |i18n|I18nConfig \|undefined|Preferred i18n configuration in c15t v2.|-|Optional|
-|translations|[TranslationConfig \|undefined](https://v2.c15t.com/docs/frameworks/react/internationalization)|Translation configuration to seed the store with.|-|Optional|
-|consentCategories|[AllConsentNames \|undefined](https://v2.c15t.com/docs/frameworks/react/concepts/consent-categories)|Consent categories to show in the consent banner.|-|Optional|
+|translations|[TranslationConfig \|undefined](https://c15t.com/docs/frameworks/react/internationalization)|Translation configuration to seed the store with.|-|Optional|
+|consentCategories|[AllConsentNames \|undefined](https://c15t.com/docs/frameworks/react/concepts/consent-categories)|Consent categories to show in the consent banner.|-|Optional|
 
 #### `i18n` I18nConfig
 
@@ -198,12 +198,12 @@ Translation configuration to seed the store with.
 
 |Property|Type|Description|Default|Required|
 |:--|:--|:--|:--|:--:|
-|theme|[Theme \|undefined](https://v2.c15t.com/docs/frameworks/react/styling/tokens)|Visual theme to apply.|-|Optional|
+|theme|[Theme \|undefined](https://c15t.com/docs/frameworks/react/styling/tokens)|Visual theme to apply.|-|Optional|
 |disableAnimation|boolean \|undefined|Whether to disable animations.|false|Optional|
 |scrollLock|boolean \|undefined|Whether to lock scroll when dialogs are open.|false|Optional|
 |trapFocus|boolean \|undefined|Whether to trap focus within dialogs.|true|Optional|
-|colorScheme|["light" \|"dark" \|"system" \|undefined](https://v2.c15t.com/docs/frameworks/react/styling/color-scheme)|Color scheme preference. With this option, you can force the theme to be light, dark or system. Otherwise, the theme will be detected if you have '.dark' classname in your document.|-|Optional|
-|noStyle|[boolean \|undefined](https://v2.c15t.com/docs/frameworks/react/headless)|Whether to disable default styles.|false|Optional|
+|colorScheme|["light" \|"dark" \|"system" \|undefined](https://c15t.com/docs/frameworks/react/styling/color-scheme)|Color scheme preference. With this option, you can force the theme to be light, dark or system. Otherwise, the theme will be detected if you have '.dark' classname in your document.|-|Optional|
+|noStyle|[boolean \|undefined](https://c15t.com/docs/frameworks/react/headless)|Whether to disable default styles.|false|Optional|
 
 #### `theme` Theme
 
@@ -392,7 +392,7 @@ Read the full guide at [Policy Packs](/docs/frameworks/react/policy-packs) and t
 |Property|Type|Description|Default|Required|
 |:--|:--|:--|:--|:--:|
 |children|ReactNode|React children to render within the provider.|-|✅ Required|
-|options|[ConsentManagerOptions](https://v2.c15t.com/docs/frameworks/react/components/consent-manager-provider)|Configuration options for the consent manager. This includes core, React, store, and translation settings.|-|✅ Required|
+|options|[ConsentManagerOptions](https://c15t.com/docs/frameworks/react/components/consent-manager-provider)|Configuration options for the consent manager. This includes core, React, store, and translation settings.|-|✅ Required|
 
 #### `options` ConsentManagerOptions
 

package/docs/components/consent-widget.md

@@ -117,34 +117,7 @@ renderAction={(action, props) => {
 />
 ```
 
-Use `useTranslations()` only when you are replacing the button markup entirely:
-
-```tsx
-import { ConsentWidget, useTranslations } from '@c15t/react';
-
-export function CustomWidgetActions() {
-  const { common } = useTranslations();
-
-  return (
-    <ConsentWidget.PolicyActions
-      renderAction={(action, props) => (
-        <button
-          key={props.key}
-          type="button"
-          className={props.isPrimary ? 'btn-primary' : 'btn-secondary'}
-          style={props.style}
-        >
-          {action === 'accept'
-            ? common.acceptAll
-            : action === 'reject'
-              ? common.rejectAll
-              : common.save}
-        </button>
-      )}
-    />
-  );
-}
-```
+`renderAction` is still meant for stock button compounds. If you want completely custom button elements and handlers, use `useHeadlessConsentUI()` and render `dialog.actionGroups` manually instead of `ConsentWidget.PolicyActions`.
 
 For a fixed footer layout, render `ConsentWidget.Footer` and `ConsentWidget.FooterSubGroup` manually instead of using `ConsentWidget.PolicyActions`.
 

package/docs/concepts/client-modes.md

@@ -15,7 +15,7 @@ c15t supports three client modes that determine how consent data is stored and s
 
 ## Hosted Mode (Recommended)
 
-The default mode. Connects to a c15t backend for full consent lifecycle management. We recommend using [consent.io](https://consent.io) for a fully managed experience, but you can [self-host](/docs/self-host) as well.
+The default mode. Connects to a c15t backend for full consent lifecycle management. We recommend using [inth.com](https://inth.com) for a fully managed experience, but you can [self-host](/docs/self-host) as well.
 
 > ℹ️ **Info:**
 > mode: 'hosted' is the preferred value. The legacy alias mode: 'c15t' is still supported for backward compatibility.

package/docs/concepts/policy-packs.md

@@ -8,7 +8,7 @@ A policy pack is an ordered array of policies. Each policy targets a region or c
 
 There are three ways to configure policy packs:
 
-1. **consent.io (recommended)** — use [consent.io](https://consent.io) as your hosted backend. Configure packs visually in the dashboard or via API — no code changes required. Works with any frontend, including static sites.
+1. **inth.com (recommended)** — use [inth.com](https://inth.com) as your hosted backend. Configure packs visually in the dashboard or via API — no code changes required. Works with any frontend, including static sites.
 2. **Self-hosted backend** — define packs in code via `policyPacks` and resolve them from real request geo data. Full control over policy logic and storage.
 3. **Offline fallback** — pass the same policy shapes to the frontend via `offlinePolicy.policyPacks`. Use this mainly for local development, demos, deterministic testing, or resilience when the backend is temporarily unreachable. If you omit `offlinePolicy.policyPacks`, c15t falls back to a synthetic worldwide opt-in banner instead of no-banner mode.
 

package/docs/hooks/use-consent-manager/overview.md

@@ -87,7 +87,7 @@ Information about when and how consent was given
 |:--|:--|:--|:--|:--:|
 |time|number|The epoch timestamp of when the consent was recorded|-|✅ Required|
 |subjectId|string \|undefined|The client-generated subject ID in sub\_xxx format|-|Optional|
-|id|string \|undefined|Configuration for the legal links @remarks Legal links can display across different parts of the consent manager such as the consent banner & dialog.|-|Optional|
+|id|string \|undefined|Effective GPC signal used for the request.|-|Optional|
 |externalId|string \|undefined|The external user ID linked to this subject|-|Optional|
 |materialPolicyFingerprint|string \|undefined|Material fingerprint of the active policy when this consent was accepted.|-|Optional|
 |identityProvider|string \|undefined|The identity provider that provided the external ID|-|Optional|
@@ -189,6 +189,7 @@ IAB TCF 2.3 state and actions (null when not configured or not in IAB mode).
 |setOverrides|Object \|undefined \|null|Sets the overrides for the consent manager. Automatically attempts to fetch the consent manager again with the new overrides.|-|✅ Required|
 |setLanguage|Object \|undefined \|null|Set the language override for the consent manager. This will override the language detected from the browser and re-fetch the consent banner information.|-|✅ Required|
 |identifyUser|Object|Identifies the user by setting the external ID.|-|✅ Required|
+|unstable\_acceptPolicyConsent|Object \|undefined|Writes a policy-based consent such as terms and conditions.|-|✅ Required|
 |setSelectedConsent|(name: AllConsentNames, value: boolean) => void|Updates the selected consent state for a specific consent type.|-|✅ Required|
 |saveConsents|Object \|undefined|Saves the user's consent preferences.|-|✅ Required|
 |setConsent|(name: AllConsentNames, value: boolean) => void|Updates the consent state for a specific consent type & automatically save the consent.|-|✅ Required|
@@ -246,6 +247,21 @@ Identifies the user by setting the external ID.
 |id|string|Usually your own internal ID for the user from your auth provider|-|✅ Required|
 |identityProvider|string \|undefined|The identity provider of the user. Usually the name of the identity provider e.g. 'clerk', 'auth0', 'custom', etc.|-|Optional|
 
+#### `unstable_acceptPolicyConsent`
+
+Writes a policy-based consent such as terms and conditions.
+
+|Property|Type|Description|Default|Required|
+|:--|:--|:--|:--|:--:|
+|type|Object|-|-|✅ Required|
+|domain|string \|undefined|-|-|Optional|
+|givenAt|number \|undefined|-|-|Optional|
+|metadata|Record\<string, unknown> \|undefined|-|-|Optional|
+|preferences|Record\<string, boolean> \|undefined|-|-|Optional|
+|uiSource|string \|undefined|-|-|Optional|
+|externalId|string \|undefined|-|-|Optional|
+|identityProvider|string \|undefined|-|-|Optional|
+
 #### `subscribeToConsentChanges`
 
 Subscribes to change-only consent saves.
@@ -344,7 +360,7 @@ function LoginForm() {
 ```
 
 > ℹ️ **Info:**
-> identifyUser sends the user data to the c15t backend. It only works in 'c15t' mode — in 'offline' mode the call is a no-op.
+> identifyUser sends the user data to the c15t backend. It works in hosted mode, including the legacy alias mode: 'c15t'. In mode: 'offline', the call is a no-op.
 
 ## Key Types
 

package/docs/iab/consent-banner.md

@@ -19,6 +19,7 @@ Use this component instead of `ConsentBanner` when you need IAB TCF compliance f
 
 ```tsx
 import { type ReactNode } from 'react';
+import { iab } from '@c15t/iab';
 import { ConsentManagerProvider } from '@c15t/nextjs';
 import { IABConsentBanner, IABConsentDialog } from '@c15t/react/iab';
 
@@ -28,11 +29,12 @@ export default function ConsentManager({ children }: { children: ReactNode }) {
       options={{
         mode: 'hosted',
         backendURL: '/api/c15t',
-        iab: {
-          enabled: true,
-          cmpId: 123,
+        iab: iab({
           vendors: [1, 2, 10, 25],
-        },
+          // cmpId is automatically provided by the backend when using consent.io.
+          // Only set this if you have your own CMP registration.
+          // cmpId: 123,
+        }),
       }}
     >
       <IABConsentBanner />

package/docs/iab/consent-dialog.md

@@ -13,6 +13,7 @@ Pair it with `IABConsentBanner` inside the provider:
 
 ```tsx
 import { type ReactNode } from 'react';
+import { iab } from '@c15t/iab';
 import { ConsentManagerProvider } from '@c15t/nextjs';
 import { IABConsentBanner, IABConsentDialog } from '@c15t/react/iab';
 
@@ -22,11 +23,12 @@ export default function ConsentManager({ children }: { children: ReactNode }) {
       options={{
         mode: 'hosted',
         backendURL: '/api/c15t',
-        iab: {
-          enabled: true,
-          cmpId: 123,
+        iab: iab({
           vendors: [1, 2, 10, 25],
-        },
+          // cmpId is automatically provided by the backend when using consent.io.
+          // Only set this if you have your own CMP registration.
+          // cmpId: 123,
+        }),
       }}
     >
       <IABConsentBanner />

package/docs/iab/overview.md

@@ -15,12 +15,12 @@ When your site participates in the IAB ecosystem (ad exchanges, SSPs, DSPs, DMPs
 
 ## CMP Registration
 
-[consent.io](https://consent.io) is pending validation as an IAB Europe-registered CMP for c15t. Once approved, when you use consent.io as your backend, the correct CMP ID will be automatically provided to your client via the `/init` endpoint — no client-side configuration needed.
+[inth.com](https://inth.com) is pending validation as an IAB Europe-registered CMP for c15t. Once approved, when you use inth.com as your backend, the correct CMP ID will be automatically provided to your client via the `/init` endpoint — no client-side configuration needed.
 
 If you self-host the c15t backend and have your own CMP registration with IAB Europe, you can configure your CMP ID on the backend via `advanced.iab.cmpId` or on the client via the `iab.cmpId` option. A valid (non-zero) CMP ID is required for IAB TCF compliance.
 
 > ℹ️ **Info:**
-> If you heavily customize or build your own IAB banner or dialog (rather than using the default IABConsentBanner and IABConsentDialog components), you cannot use consent.io's CMP ID. You must register your own CMP with IAB Europe and use your own CMP ID.
+> If you heavily customize or build your own IAB banner or dialog (rather than using the default IABConsentBanner and IABConsentDialog components), you cannot use inth.com's CMP ID. You must register your own CMP with IAB Europe and use your own CMP ID.
 
 ## How c15t Implements TCF
 
@@ -45,6 +45,7 @@ If you use the prebuilt styled IAB UI, import the IAB stylesheet alongside the b
 
 ```tsx
 import { type ReactNode } from 'react';
+import { iab } from '@c15t/iab';
 import { ConsentManagerProvider } from '@c15t/nextjs';
 import { IABConsentBanner, IABConsentDialog } from '@c15t/react/iab';
 
@@ -54,13 +55,12 @@ export default function ConsentManager({ children }: { children: ReactNode }) {
       options={{
         mode: 'hosted',
         backendURL: '/api/c15t',
-        iab: {
-          enabled: true,
+        iab: iab({
           vendors: [1, 2, 10, 25],  // IAB vendor IDs you work with
-          // cmpId is automatically provided by the backend (consent.io).
+          // cmpId is automatically provided by the backend (inth.com).
           // Only set this if you have your own CMP registration with IAB Europe.
           // cmpId: 123,
-        },
+        }),
       }}
     >
       <IABConsentBanner />
@@ -73,14 +73,13 @@ export default function ConsentManager({ children }: { children: ReactNode }) {
 
 ## IAB Configuration Options
 
-The `iab` option on the provider accepts:
+Configure IAB mode with `iab({ ... })` from `@c15t/iab`. The factory enables the addon and injects the runtime module automatically. The user-facing options are:
 
 |Option|Type|Description|
 |--|--|--|
-|`enabled`|`boolean`|Enable IAB TCF mode|
-|`cmpId`|`number`|CMP ID registered with IAB Europe. Automatically provided by the backend when using consent.io. Only set this if you have your own CMP registration.|
+|`cmpId`|`number`|CMP ID registered with IAB Europe. Automatically provided by the backend when using inth.com. Only set this if you have your own CMP registration.|
 |`vendors`|`number[]`|IAB vendor IDs that your site works with|
-|`nonIABVendors`|`NonIABVendor[]`|Custom vendors not in the IAB registry|
+|`customVendors`|`NonIABVendor[]`|Custom vendors not in the IAB registry|
 
 ## Key Concepts
 
@@ -122,4 +121,6 @@ Each vendor in the GVL declares which purposes it uses, whether via consent or l
 |--|--|
 |[IABConsentBanner](/docs/frameworks/next/iab/consent-banner)|TCF-compliant banner with partner disclosure|
 |[IABConsentDialog](/docs/frameworks/next/iab/consent-dialog)|Tabbed preference center for purposes and vendors|
-|[useGVLData](/docs/frameworks/next/iab/use-gvl-data)|Hook for building custom IAB UI|
+
+> ℹ️ **Info:**
+> For lower-level custom IAB flows, use useHeadlessIABConsentUI() from @c15t/react/iab. useGVLData() is currently internal and is not part of the public package surface.

package/docs/iab/use-gvl-data.md

@@ -1,208 +1,20 @@
 ---
-title: useGVLData
-description: Hook to access processed Global Vendor List (GVL) data for building custom IAB TCF UI components.
+title: useGVLData (Internal)
+description: Status note for the internal GVL hook used by the built-in IAB dialog.
 ---
 > ❌ **Error:**
 > c15t is not yet IAB certified. The IAB TCF components are under active development and should not be used in production. APIs and behavior may change before certification is achieved.
 
-`useGVLData()` processes the raw IAB Global Vendor List (GVL) into a UI-friendly format. It handles purpose grouping into stacks, vendor mapping, special purpose/feature extraction, and loading state.
+`useGVLData()` currently powers the built-in `IABConsentDialog`, but it is **not part of the public package surface**.
 
-Use this hook when building a custom IAB TCF UI instead of the pre-built `IABConsentDialog`.
+Older docs showed it as a public hook. That is no longer accurate.
 
-```tsx
-import { useGVLData } from '@c15t/react/hooks';
+If you need supported customization points today:
 
-function CustomIABPreferences() {
-  const { purposes, stacks, standalonePurposes, totalVendors, isLoading } = useGVLData();
-
-  if (isLoading) return <p>Loading vendor data...</p>;
-
-  return (
-    <div>
-      <p>{totalVendors} partners</p>
-      {standalonePurposes.map((purpose) => (
-        <div key={purpose.id}>
-          <h3>{purpose.name}</h3>
-          <p>{purpose.description}</p>
-          <p>{purpose.vendors.length} vendors</p>
-        </div>
-      ))}
-    </div>
-  );
-}
-```
+* Use `IABConsentBanner` and `IABConsentDialog` from `@c15t/react/iab` for the supported prebuilt UI
+* Use `useHeadlessIABConsentUI()` from `@c15t/react/iab` when you need lower-level control over banner/dialog state and actions
 
 > ℹ️ **Info:**
-> Must be used within a ConsentManagerProvider with IAB mode enabled. Returns empty data if IAB is not configured.
-
-## Return Value
-
-The hook returns a `GVLData` object:
-
-### GVLData
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|purposes|ProcessedPurpose|-|-|✅ Required|
-|specialPurposes|ProcessedPurpose|-|-|✅ Required|
-|specialFeatures|ProcessedSpecialFeature|-|-|✅ Required|
-|features|ProcessedFeature|-|-|✅ Required|
-|stacks|ProcessedStack|-|-|✅ Required|
-|standalonePurposes|ProcessedPurpose|-|-|✅ Required|
-|totalVendors|number|-|-|✅ Required|
-|isLoading|boolean|-|-|✅ Required|
-
-#### `purposes` ProcessedPurpose
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-|isSpecialPurpose|boolean \|undefined|-|-|Optional|
-
-#### `specialPurposes` ProcessedPurpose
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-|isSpecialPurpose|boolean \|undefined|-|-|Optional|
-
-#### `specialFeatures` ProcessedSpecialFeature
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-
-#### `features` ProcessedFeature
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-
-#### `stacks` ProcessedStack
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|purposes|ProcessedPurpose|-|-|✅ Required|
-
-#### `standalonePurposes` ProcessedPurpose
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-|isSpecialPurpose|boolean \|undefined|-|-|Optional|
-
-## Types
-
-### ProcessedPurpose
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
-|isSpecialPurpose|boolean \|undefined|-|-|Optional|
-
-#### `vendors` ProcessedVendor
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|VendorId|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|policyUrl|string|-|-|✅ Required|
-|usesNonCookieAccess|boolean|-|-|✅ Required|
-|deviceStorageDisclosureUrl|string \|null|-|-|✅ Required|
-|usesCookies|boolean|-|-|✅ Required|
-|cookieMaxAgeSeconds|number \|null|-|-|✅ Required|
-|cookieRefresh|boolean \|undefined|-|-|Optional|
-|specialPurposes|number\[]|-|-|✅ Required|
-|specialFeatures|number\[]|-|-|✅ Required|
-|features|number\[]|-|-|✅ Required|
-|purposes|number\[]|-|-|✅ Required|
-|legIntPurposes|number\[]|-|-|✅ Required|
-|legitimateInterestUrl|string \|null \|undefined|-|-|Optional|
-|isCustom|boolean \|undefined|-|-|Optional|
-|usesLegitimateInterest|boolean \|undefined|-|-|Optional|
-|dataRetention|Object \|undefined|-|-|Optional|
-|dataDeclaration|number\[] \|undefined|-|-|Optional|
-
-### ProcessedVendor
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|VendorId|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|policyUrl|string|-|-|✅ Required|
-|usesNonCookieAccess|boolean|-|-|✅ Required|
-|deviceStorageDisclosureUrl|string \|null|-|-|✅ Required|
-|usesCookies|boolean|-|-|✅ Required|
-|cookieMaxAgeSeconds|number \|null|-|-|✅ Required|
-|cookieRefresh|boolean \|undefined|-|-|Optional|
-|specialPurposes|number\[]|-|-|✅ Required|
-|specialFeatures|number\[]|-|-|✅ Required|
-|features|number\[]|-|-|✅ Required|
-|purposes|number\[]|-|-|✅ Required|
-|legIntPurposes|number\[]|-|-|✅ Required|
-|legitimateInterestUrl|string \|null \|undefined|-|-|Optional|
-|isCustom|boolean \|undefined|-|-|Optional|
-|usesLegitimateInterest|boolean \|undefined|-|-|Optional|
-|dataRetention|Object \|undefined|-|-|Optional|
-|dataDeclaration|number\[] \|undefined|-|-|Optional|
-
-#### `dataRetention`
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|purposes|Record\<number, number> \|undefined|-|-|Optional|
-|specialPurposes|Record\<number, number> \|undefined|-|-|Optional|
-|stdRetention|number \|undefined|-|-|Optional|
-
-### ProcessedStack
-
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|purposes|ProcessedPurpose|-|-|✅ Required|
-
-### ProcessedSpecialFeature
+> Until useGVLData() is exported as public API, avoid importing it from deep internal paths. Those paths are not covered by semver guarantees and can change without notice.
 
-|Property|Type|Description|Default|Required|
-|:--|:--|:--|:--|:--:|
-|id|number|-|-|✅ Required|
-|name|string|-|-|✅ Required|
-|description|string|-|-|✅ Required|
-|descriptionLegal|string \|undefined|-|-|Optional|
-|illustrations|string\[]|-|-|✅ Required|
-|vendors|ProcessedVendor|-|-|✅ Required|
+When a public GVL-focused hook becomes part of the supported API, this page should document that public surface instead of the internal dialog hook.

package/docs/internationalization.md

@@ -10,7 +10,7 @@ There are two ways c15t can load translations: client-side or server-side.
 
 |Server-side|Client-side|
 |--|--|
-|The best way to reduce bundle size and improve performance. We can detect the user's language based on the browser's language settings, allowing for the most accurate translations. By default, when using a [consent.io](https://consent.io) hosted instance, [these languages](https://github.com/c15t/c15t/tree/main/packages/translations/src/translations) are supported.|Bundled with the application allowing for multiple languages to be supported without the need for a backend. The more translations you have, the larger the bundle size will be, which may impact the performance of your application.|
+|The best way to reduce bundle size and improve performance. We can detect the user's language based on the browser's language settings, allowing for the most accurate translations. By default, when using a [inth.com](https://inth.com) hosted instance, [these languages](https://github.com/c15t/c15t/tree/main/packages/translations/src/translations) are supported.|Bundled with the application allowing for multiple languages to be supported without the need for a backend. The more translations you have, the larger the bundle size will be, which may impact the performance of your application.|
 
 ## Basic Configuration
 

package/docs/optimization.md

@@ -1,10 +1,35 @@
 ---
 title: Optimization
-description: Improve c15t startup performance in Next.js with rewrites, static prefetching, and rendering tradeoffs.
-lastModified: 2026-04-09
+description: Improve c15t startup performance in Next.js with same-origin rewrites, static prefetching, and dynamic-route SSR.
+lastModified: 2026-04-14
 ---
 Use this guide when you care about banner visibility speed, route static-ness, and reducing backend round-trip cost.
 
+## Start Here
+
+Apply the optimizations in this order:
+
+|Situation|Use|Why|
+|--|--|--|
+|Any production Next.js app|Same-origin `/api/c15t` rewrite|Lowers browser startup overhead and keeps the backend origin out of client config|
+|Static route, but banner speed matters|`C15tPrefetch`|Starts `/init` before hydration without making the route dynamic|
+|Dynamic route, or you want the fastest first banner|`fetchInitialData()`|Starts `/init` on the server and streams the result into the provider|
+|You want the simplest setup|Client-only init|No extra moving parts, but the banner appears later on cold loads|
+
+> ℹ️ **Info:**
+> C15tPrefetch is the only static-route prefetch step you need in @c15t/nextjs. Matching prefetched data is consumed automatically during first initialization.
+>
+> ℹ️ **Info:**
+> Prefetched or SSR data is reused only when the request context still matches at runtime. That includes the backend URL, credentials, overrides, and the browser's ambient GPC signal.
+
+In production benchmarks with a same-origin rewrite, prefetching strategies show measurable improvement over client-only init:
+
+|Strategy|Scripts loaded|Data request starts|Banner visible|
+|--|--|--|--|
+|Client-only (no prefetch)|baseline|baseline|baseline|
+|Browser prefetch|\~1.3x faster|\~2.6x earlier|\~1.25x faster|
+|Server prefetch|\~2x faster|before page loads|\~1.9x faster|
+
 ## 1) Prefer Same-Origin Rewrites
 
 Proxy c15t requests through your Next.js app so the browser calls your own origin instead of a third-party domain.
@@ -39,30 +64,24 @@ Why this helps:
 * You can change backend infrastructure without touching client code
 
 > ℹ️ **Info:**
-> Set NEXT\_PUBLIC\_C15T\_URL in .env to your backend URL, for example https\://your-instance.c15t.dev.
+> Set NEXT\_PUBLIC\_C15T\_URL in .env to your backend URL, for example https\://your-project.inth.app.
 >
 > ℹ️ **Info:**
-> Use rewrites for browser-side calls (ConsentManagerProvider, C15tPrefetch). For server-side fetchInitialData(), prefer a direct backend URL (for example https\://your-instance.c15t.dev) to avoid an extra server proxy hop.
+> Use rewrites for browser-side calls (ConsentManagerProvider, C15tPrefetch). For server-side fetchInitialData(), prefer a direct backend URL (for example https\://your-project.inth.app) to avoid an extra server proxy hop.
 
-## 2) Pick The Right Data Strategy
+## 2) Choose A Startup Strategy
 
-|Goal|Strategy|Tradeoff|
-|--|--|--|
-|Keep routes fully static|`C15tPrefetch`|Still client-side fetch, but starts earlier|
-|Fastest first banner on dynamic routes|`fetchInitialData()` in a Server Component (do not await)|Route becomes dynamic because of `next/headers`|
-|Simplest setup|Client-only init (no prefetch)|Banner appears later on slow networks|
+Start with a same-origin rewrite and the default client-side provider. Add one of the preloading strategies below only when the route behavior or performance target calls for it.
 
-In production benchmarks with a same-origin rewrite, prefetching strategies show measurable improvement over client-only init:
+### Client-Only Init
 
-|Strategy|Scripts loaded|Data request starts|Banner visible|
-|--|--|--|--|
-|Client-only (no prefetch)|baseline|baseline|baseline|
-|Browser prefetch|\~1.3x faster|\~2.6x earlier|\~1.25x faster|
-|Server prefetch|\~2x faster|before page loads|\~1.9x faster|
+Keep the default provider setup when you want the least complexity. This works on both static and dynamic routes, but the banner only appears after the client runtime starts and the initial `/init` request completes.
 
 ### Dynamic Routes: Fetch On The Server And Stream
 
-Use `fetchInitialData()` in a Server Component when you want the fastest first banner and can accept the route becoming dynamic.
+Use `fetchInitialData()` when the route is already dynamic, or when you are willing to make it dynamic in exchange for the fastest first banner.
+
+Because it depends on `next/headers`, this opts the route into dynamic rendering.
 
 ```tsx title="app/layout.tsx"
 import { fetchInitialData } from '@c15t/nextjs';
@@ -106,7 +125,7 @@ export default function ConsentManager({
       options={{
         mode: 'hosted',
         backendURL: '/api/c15t',
-        store: { ssrData },
+        ssrData,
       }}
     >
       <ConsentBanner />
@@ -121,11 +140,11 @@ export default function ConsentManager({
 > Do not await fetchInitialData(). Pass the unresolved Promise to the provider so Next.js can stream the route while /init runs in parallel.
 >
 > ℹ️ **Info:**
-> For fetchInitialData(), prefer a direct backend URL such as https\://your-instance.c15t.dev instead of a rewrite to avoid an extra server-side proxy hop. See Server-Side Data Fetching for the full flow.
+> For fetchInitialData(), prefer a direct backend URL such as https\://your-project.inth.app instead of a rewrite to avoid an extra server-side proxy hop. See Server-Side Data Fetching for the full flow.
 
 ### Static Routes: Start Fetch Early In The Browser
 
-Use `C15tPrefetch` in your layout. Matching prefetched data is consumed automatically by the runtime during first store initialization.
+Use `C15tPrefetch` when the route needs to stay static but you still want the `/init` request to start before hydration. Matching prefetched data is consumed automatically by the runtime during first store initialization.
 
 ```tsx title="app/layout.tsx"
 import { C15tPrefetch } from '@c15t/nextjs';
@@ -175,10 +194,10 @@ export default function ConsentManagerClient({ children }: { children: React.Rea
 ```
 
 > ℹ️ **Info:**
-> C15tPrefetch uses Next.js beforeInteractive script loading, so the /init request can start before hydration. In App Router streaming output, this may appear as Next.js script bootstrap data (for example self.\_\_next\_s.push(...)) instead of a literal \<head>\<script> tag.
+> C15tPrefetch uses Next.js beforeInteractive script loading, so the /init request can start before hydration.
 >
 > ℹ️ **Info:**
-> If overrides.gpc conflicts with the browser's ambient GPC signal, the prefetched entry is not reused and c15t falls back to a normal client /init.
+> If the request context changes between prefetch time and runtime, c15t falls back to a normal client /init. A common example is overrides.gpc conflicting with the browser's ambient GPC signal.
 
 ## Keep The Provider Mounted Across Navigation
 
@@ -210,6 +229,6 @@ If you must use a cross-origin backend URL, add preconnect so the browser starts
 
 ```tsx title="app/layout.tsx"
 <head>
-  <link rel="preconnect" href="https://your-instance.c15t.dev" crossOrigin="" />
+  <link rel="preconnect" href="https://your-project.inth.app" crossOrigin="" />
 </head>
 ```

package/docs/policy-packs.md

@@ -13,7 +13,7 @@ When a backend isn't available — local development, static previews, Storybook
 
 ## Hosted Mode (Recommended)
 
-When using consent.io or a self-hosted backend, the provider connects automatically. No policy configuration is needed on the frontend:
+When using inth.com or a self-hosted backend, the provider connects automatically. No policy configuration is needed on the frontend:
 
 ```tsx
 <ConsentManagerProvider

package/docs/quickstart.md

@@ -17,10 +17,10 @@ availableIn:
 
 |Package manager|Command|
 |:--|:--|
-|npm|`npx @c15t/cli@rc`|
-|pnpm|`pnpm dlx @c15t/cli@rc`|
-|yarn|`yarn dlx @c15t/cli@rc`|
-|bun|`bunx @c15t/cli@rc`|
+|npm|`npx @c15t/cli`|
+|pnpm|`pnpm dlx @c15t/cli`|
+|yarn|`yarn dlx @c15t/cli`|
+|bun|`bunx @c15t/cli`|
 
 ## Manual Installation
 
@@ -151,10 +151,10 @@ Install c15t agent skills to let AI agents help with styling, i18n, scripts & ot
 
 |Package manager|Command|
 |:--|:--|
-|npm|`npx @c15t/cli@rc skills`|
-|pnpm|`pnpm dlx @c15t/cli@rc skills`|
-|yarn|`yarn dlx @c15t/cli@rc skills`|
-|bun|`bunx @c15t/cli@rc skills`|
+|npm|`npx @c15t/cli skills`|
+|pnpm|`pnpm dlx @c15t/cli skills`|
+|yarn|`yarn dlx @c15t/cli skills`|
+|bun|`bunx @c15t/cli skills`|
 
 See [AI Agents](/docs/ai-agents) for bundled package docs and agent skills.
 

package/docs/server-side.md

@@ -1,8 +1,10 @@
 ---
 title: Server-Side Data Fetching
-description: Pre-fetch consent data in Server Components with fetchInitialData — eliminate the loading flash and enable streaming.
+description: Pre-fetch consent data in Server Components with fetchInitialData for dynamic Next.js routes.
 ---
-The `@c15t/nextjs` package provides `fetchInitialData`, a server-side function that fetches consent data before rendering. This enables SSR hydration — consent state is available immediately on page load without a client-side fetch, eliminating the consent banner flash.
+The `@c15t/nextjs` package provides `fetchInitialData`, a server-side function that fetches consent data before rendering. Use it when the route is already dynamic, or when you want the fastest first banner and are okay opting the route into dynamic rendering. If you need to keep a route fully static, use `C15tPrefetch` instead.
+
+Because `fetchInitialData()` resolves request headers from `next/headers`, using it opts the route into dynamic rendering.
 
 > ℹ️ **Info:**
 > SSR hydration is part of the initialization flow. When SSR data is available, the client skips the API fetch entirely.
@@ -20,7 +22,7 @@ import { fetchInitialData } from '@c15t/nextjs';
 
 // In a Server Component — do NOT await
 const ssrData = fetchInitialData({
-  backendURL: '/api/c15t',
+  backendURL: 'https://your-instance.c15t.dev',
   debug: process.env.NODE_ENV === 'development',
 });
 ```
@@ -29,6 +31,9 @@ const ssrData = fetchInitialData({
 > Do not await fetchInitialData() in Server Components. Pass the Promise directly to your client component so Next.js can stream the page while the consent data loads in parallel.
 >
 > ℹ️ **Info:**
+> For fetchInitialData(), prefer a direct backend URL such as https\://your-instance.c15t.dev. For browser-side calls from the provider, C15tPrefetch, and other client runtime work, prefer a same-origin /api/c15t rewrite. See Optimization for the full decision guide.
+>
+> ℹ️ **Info:**
 > Need fully static routes? Use C15tPrefetch in your layout. Matching prefetched data is consumed automatically by the runtime instead of using fetchInitialData(). See Optimization.
 
 ### How Streaming Works
@@ -94,7 +99,7 @@ export default function ConsentManager({
       options={{
         mode: 'hosted',
         backendURL: '/api/c15t',
-        store: { ssrData },
+        ssrData,
       }}
     >
       <ConsentBanner />
@@ -111,7 +116,7 @@ import ConsentManager from '@/components/consent-manager';
 
 export default function RootLayout({ children }: { children: React.ReactNode }) {
   const ssrData = fetchInitialData({
-    backendURL: '/api/c15t',
+    backendURL: 'https://your-instance.c15t.dev',
   });
 
   return (

package/docs/styling/color-scheme.md

@@ -65,7 +65,7 @@ function ThemeToggle() {
 
 ## How Dark Mode Works
 
-When dark mode is active, c15t applies the `dark` token values as CSS variable overrides. Only tokens specified in `dark` are overridden - unset tokens fall back to the `colors` values.
+When dark mode is active, c15t applies the `dark` token values as CSS variable overrides. Only tokens specified in `dark` are overridden - unset tokens fall back to the `colors` values. This also applies to `textOnPrimary`: if you omit it, c15t derives a readable foreground from the active `primary` color in that scheme.
 
 ```tsx
 const theme = {

package/docs/styling/css-variables.md

@@ -18,7 +18,7 @@ Every theme token is converted to a `--c15t-*` CSS custom property at runtime. Y
 |--c15t-border-hover|string \|undefined|\`colors.borderHover\` (default: \`hsl(0, 0%, 85%)\`)|-|Optional|
 |--c15t-text|string \|undefined|\`colors.text\` (default: \`hsl(0, 0%, 10%)\`)|-|Optional|
 |--c15t-text-muted|string \|undefined|\`colors.textMuted\` (default: \`hsl(0, 0%, 40%)\`)|-|Optional|
-|--c15t-text-on-primary|string \|undefined|\`colors.textOnPrimary\` (default: \`hsl(0, 0%, 100%)\`)|-|Optional|
+|--c15t-text-on-primary|string \|undefined|\`colors.textOnPrimary\` (auto-derived from \`colors.primary\` when omitted)|-|Optional|
 |--c15t-overlay|string \|undefined|\`colors.overlay\` (default: \`hsla(0, 0%, 0%, 0.5)\`)|-|Optional|
 |--c15t-switch-track|string \|undefined|\`colors.switchTrack\` (default: \`hsl(0, 0%, 85%)\`)|-|Optional|
 |--c15t-switch-track-active|string \|undefined|\`colors.switchTrackActive\` (default: \`hsl(228, 100%, 60%)\`)|-|Optional|

package/docs/styling/overview.md

@@ -99,6 +99,7 @@ Use tokens first when the change is semantic:
 * Banner card background -> `theme.colors.surface`
 * Banner footer background -> `theme.colors.surfaceHover`
 * Shared copy color -> `theme.colors.text` and `theme.colors.textMuted`
+* Primary-filled surfaces such as stock branding tags and filled actions -> `theme.colors.primary` with `theme.colors.textOnPrimary` as the matching foreground override
 
 ```tsx
 options={{
@@ -111,6 +112,8 @@ options={{
 }}
 ```
 
+If you set `theme.colors.primary` but omit `theme.colors.textOnPrimary`, c15t derives a readable foreground automatically. Add `textOnPrimary` only when you need to force a specific branded foreground color.
+
 ### 3. Component slots
 
 Target specific component parts via the `slots` object:
@@ -314,7 +317,7 @@ Color palette for light mode.
 |borderHover|string \|undefined|Hover state for bordered elements.|-|Optional|
 |text|string \|undefined|Primary text color for headings and body.|-|Optional|
 |textMuted|string \|undefined|Muted text color for secondary content.|-|Optional|
-|textOnPrimary|string \|undefined|Text color for content on primary background.|-|Optional|
+|textOnPrimary|string \|undefined|Text color for content on primary background. Auto-derived from \`primary\` when omitted.|-|Optional|
 |overlay|string \|undefined|Overlay color for modal backdrops.|-|Optional|
 |switchTrack|string \|undefined|Toggle track color (off state).|-|Optional|
 |switchTrackActive|string \|undefined|Toggle track color (on state).|-|Optional|
@@ -334,7 +337,7 @@ Dark mode color overrides.
 |borderHover|string \|undefined|Hover state for bordered elements.|-|Optional|
 |text|string \|undefined|Primary text color for headings and body.|-|Optional|
 |textMuted|string \|undefined|Muted text color for secondary content.|-|Optional|
-|textOnPrimary|string \|undefined|Text color for content on primary background.|-|Optional|
+|textOnPrimary|string \|undefined|Text color for content on primary background. Auto-derived from \`primary\` when omitted.|-|Optional|
 |overlay|string \|undefined|Overlay color for modal backdrops.|-|Optional|
 |switchTrack|string \|undefined|Toggle track color (off state).|-|Optional|
 |switchTrackActive|string \|undefined|Toggle track color (on state).|-|Optional|
@@ -420,6 +423,7 @@ Component-specific style overrides.
 |consentBannerDescription|SlotStyle \|undefined|Banner description text element.|-|Optional|
 |consentBannerFooter|SlotStyle \|undefined|Footer container for banner action buttons.|-|Optional|
 |consentBannerFooterSubGroup|SlotStyle \|undefined|Nested button group inside the banner footer.|-|Optional|
+|consentBannerTag|SlotStyle \|undefined|Branding tag rendered above the consent banner card.|-|Optional|
 |consentBannerOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the banner when enabled.|-|Optional|
 |consentDialog|SlotStyle \|undefined|Root wrapper for the consent dialog modal.|-|Optional|
 |consentDialogCard|SlotStyle \|undefined|Main dialog card container.|-|Optional|
@@ -427,22 +431,25 @@ Component-specific style overrides.
 |consentDialogTitle|SlotStyle \|undefined|Dialog title text element.|-|Optional|
 |consentDialogDescription|SlotStyle \|undefined|Dialog description text element.|-|Optional|
 |consentDialogContent|SlotStyle \|undefined|Dialog content region (typically holds ConsentWidget).|-|Optional|
-|consentDialogFooter|SlotStyle \|undefined|Dialog footer container with actions/branding.|-|Optional|
+|consentDialogFooter|SlotStyle \|undefined|Footer container used by compound dialog layouts.|-|Optional|
+|consentDialogTag|SlotStyle \|undefined|Branding tag rendered below the stock consent dialog card.|-|Optional|
 |consentDialogOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the dialog.|-|Optional|
 |consentWidget|SlotStyle \|undefined|Root wrapper for the consent widget/preferences panel.|-|Optional|
 |consentWidgetAccordion|SlotStyle \|undefined|Accordion region listing consent categories.|-|Optional|
 |consentWidgetFooter|SlotStyle \|undefined|Footer area for widget actions and links.|-|Optional|
-|consentWidgetBranding|SlotStyle \|undefined|Branding element rendered in the widget footer.|-|Optional|
+|consentWidgetTag|SlotStyle \|undefined|Branding tag rendered below the standalone consent widget.|-|Optional|
 |frame|SlotStyle \|undefined|Frame wrapper used by blocking placeholders (e.g., iframe blocking).|-|Optional|
 |iabConsentBanner|SlotStyle \|undefined|Root wrapper for the IAB consent banner.|-|Optional|
 |iabConsentBannerCard|SlotStyle \|undefined|Main card container for IAB banner content.|-|Optional|
 |iabConsentBannerHeader|SlotStyle \|undefined|Header region for IAB banner title/description.|-|Optional|
 |iabConsentBannerFooter|SlotStyle \|undefined|Footer container for IAB banner actions.|-|Optional|
+|iabConsentBannerTag|SlotStyle \|undefined|Branding tag rendered above the IAB banner card.|-|Optional|
 |iabConsentBannerOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the IAB banner.|-|Optional|
 |iabConsentDialog|SlotStyle \|undefined|Root wrapper for the IAB consent dialog.|-|Optional|
 |iabConsentDialogCard|SlotStyle \|undefined|Main card container for IAB dialog content.|-|Optional|
 |iabConsentDialogHeader|SlotStyle \|undefined|Header region for IAB dialog title/description.|-|Optional|
 |iabConsentDialogFooter|SlotStyle \|undefined|Footer container for IAB dialog actions.|-|Optional|
+|iabConsentDialogTag|SlotStyle \|undefined|Branding tag rendered below the IAB dialog card.|-|Optional|
 |iabConsentDialogOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the IAB dialog.|-|Optional|
 |buttonPrimary|SlotStyle \|undefined|Shared primary button style used across consent components.|-|Optional|
 |buttonSecondary|SlotStyle \|undefined|Shared secondary button style used across consent components.|-|Optional|

package/docs/styling/slots.md

@@ -4,7 +4,7 @@ description: Target individual component parts with styles using the slot system
 ---
 ## What are Slots?
 
-Slots let you target specific parts of consent components with styles. Each component is built from named slots such as `consentBannerTitle` and `consentDialogFooter`.
+Slots let you target specific parts of consent components with styles. Each component is built from named slots such as `consentBannerTitle` and `consentDialogTag`.
 
 Use slots after the stock component APIs and design tokens:
 
@@ -88,6 +88,7 @@ Use the typed API reference below for the full slot list and descriptions. It st
 |consentBannerDescription|SlotStyle \|undefined|Banner description text element.|-|Optional|
 |consentBannerFooter|SlotStyle \|undefined|Footer container for banner action buttons.|-|Optional|
 |consentBannerFooterSubGroup|SlotStyle \|undefined|Nested button group inside the banner footer.|-|Optional|
+|consentBannerTag|SlotStyle \|undefined|Branding tag rendered above the consent banner card.|-|Optional|
 |consentBannerOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the banner when enabled.|-|Optional|
 |consentDialog|SlotStyle \|undefined|Root wrapper for the consent dialog modal.|-|Optional|
 |consentDialogCard|SlotStyle \|undefined|Main dialog card container.|-|Optional|
@@ -95,22 +96,25 @@ Use the typed API reference below for the full slot list and descriptions. It st
 |consentDialogTitle|SlotStyle \|undefined|Dialog title text element.|-|Optional|
 |consentDialogDescription|SlotStyle \|undefined|Dialog description text element.|-|Optional|
 |consentDialogContent|SlotStyle \|undefined|Dialog content region (typically holds ConsentWidget).|-|Optional|
-|consentDialogFooter|SlotStyle \|undefined|Dialog footer container with actions/branding.|-|Optional|
+|consentDialogFooter|SlotStyle \|undefined|Footer container used by compound dialog layouts.|-|Optional|
+|consentDialogTag|SlotStyle \|undefined|Branding tag rendered below the stock consent dialog card.|-|Optional|
 |consentDialogOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the dialog.|-|Optional|
 |consentWidget|SlotStyle \|undefined|Root wrapper for the consent widget/preferences panel.|-|Optional|
 |consentWidgetAccordion|SlotStyle \|undefined|Accordion region listing consent categories.|-|Optional|
 |consentWidgetFooter|SlotStyle \|undefined|Footer area for widget actions and links.|-|Optional|
-|consentWidgetBranding|SlotStyle \|undefined|Branding element rendered in the widget footer.|-|Optional|
+|consentWidgetTag|SlotStyle \|undefined|Branding tag rendered below the standalone consent widget.|-|Optional|
 |frame|SlotStyle \|undefined|Frame wrapper used by blocking placeholders (e.g., iframe blocking).|-|Optional|
 |iabConsentBanner|SlotStyle \|undefined|Root wrapper for the IAB consent banner.|-|Optional|
 |iabConsentBannerCard|SlotStyle \|undefined|Main card container for IAB banner content.|-|Optional|
 |iabConsentBannerHeader|SlotStyle \|undefined|Header region for IAB banner title/description.|-|Optional|
 |iabConsentBannerFooter|SlotStyle \|undefined|Footer container for IAB banner actions.|-|Optional|
+|iabConsentBannerTag|SlotStyle \|undefined|Branding tag rendered above the IAB banner card.|-|Optional|
 |iabConsentBannerOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the IAB banner.|-|Optional|
 |iabConsentDialog|SlotStyle \|undefined|Root wrapper for the IAB consent dialog.|-|Optional|
 |iabConsentDialogCard|SlotStyle \|undefined|Main card container for IAB dialog content.|-|Optional|
 |iabConsentDialogHeader|SlotStyle \|undefined|Header region for IAB dialog title/description.|-|Optional|
 |iabConsentDialogFooter|SlotStyle \|undefined|Footer container for IAB dialog actions.|-|Optional|
+|iabConsentDialogTag|SlotStyle \|undefined|Branding tag rendered below the IAB dialog card.|-|Optional|
 |iabConsentDialogOverlay|SlotStyle \|undefined|Backdrop overlay rendered behind the IAB dialog.|-|Optional|
 |buttonPrimary|SlotStyle \|undefined|Shared primary button style used across consent components.|-|Optional|
 |buttonSecondary|SlotStyle \|undefined|Shared secondary button style used across consent components.|-|Optional|

package/docs/styling/tokens.md

@@ -6,6 +6,8 @@ description: The six base token categories that control colors, typography, spac
 
 Color tokens define the palette for all consent components. Set `colors` for light mode and `dark` for dark mode overrides.
 
+When `textOnPrimary` is omitted, c15t derives it automatically from `primary` to keep text readable on primary-filled surfaces such as stock branding tags and buttons. Set `textOnPrimary` explicitly when you need a specific foreground color.
+
 ```tsx
 const theme = {
   colors: {
@@ -45,7 +47,7 @@ const theme = {
 |borderHover|string \|undefined|Hover state for bordered elements.|-|Optional|
 |text|string \|undefined|Primary text color for headings and body.|-|Optional|
 |textMuted|string \|undefined|Muted text color for secondary content.|-|Optional|
-|textOnPrimary|string \|undefined|Text color for content on primary background.|-|Optional|
+|textOnPrimary|string \|undefined|Text color for content on primary background. Auto-derived from \`primary\` when omitted.|-|Optional|
 |overlay|string \|undefined|Overlay color for modal backdrops.|-|Optional|
 |switchTrack|string \|undefined|Toggle track color (off state).|-|Optional|
 |switchTrackActive|string \|undefined|Toggle track color (on state).|-|Optional|

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@c15t/nextjs",
-	"version": "2.0.0-rc.8",
+	"version": "2.0.0",
 	"description": "Developer-first CMP for Next.js: cookie banner, consent manager, preferences centre. GDPR ready with minimal setup and rich customization.",
 	"keywords": [
 		"nextjs",
@@ -26,7 +26,7 @@
 		"url": "https://github.com/c15t/c15t.git",
 		"directory": "packages/nextjs"
 	},
-	"license": "GPL-3.0-only",
+	"license": "Apache-2.0",
 	"sideEffects": [
 		"**/*.css"
 	],
@@ -75,17 +75,17 @@
 		"dev": "bun prebuild && rslib build && bun ../../scripts/normalize-dist-types.mjs && bun scripts/generate-distribution-css.ts",
 		"fmt": "bun biome format --write . && bun biome check --formatter-enabled=false --linter-enabled=false --write",
 		"lint": "bun biome lint ./src",
-		"prepack": "cd ../.. && bunx turbo run build --filter=@c15t/nextjs",
+		"prepack": "bun run build",
 		"test": "bun prebuild && vitest run --passWithNoTests",
 		"test:watch": "bun prebuild && vitest --passWithNoTests"
 	},
 	"dependencies": {
-		"@c15t/react": "2.0.0-rc.8",
-		"@c15t/translations": "2.0.0-rc.8",
-		"c15t": "2.0.0-rc.8"
+		"@c15t/react": "2.0.0",
+		"@c15t/translations": "2.0.0",
+		"c15t": "2.0.0"
 	},
 	"devDependencies": {
-		"@c15t/typescript-config": "0.0.1-beta.1",
+		"@c15t/typescript-config": "0.0.1",
 		"@c15t/vitest-config": "1.0.0",
 		"genversion": "3.2.0",
 		"typescript": "6.0.2"