@c15t/react 3.0.0-alpha.7 → 3.0.0-alpha.8

package/dist/components/prompt/atoms/root.js

@@ -1,2 +1,2 @@
 "use client";
-import{Fragment as o,jsx as t,jsxs as e}from"react/jsx-runtime";import r from"@c15t/ui/styles/components/consent-banner";import{forwardRef as n,useMemo as i}from"react";import{useHeadlessConsentUI as a}from"../../../component-hooks/use-headless-consent-ui.js";import{ConsentTrackingContext as s}from"../../../context/consent-tracking-context.js";import{LocalThemeContext as l}from"../../../context/theme-context.js";import{useActiveUI as c,useHasConsentUI as m,useModel as p,usePolicyRule as d,useTranslations as u}from"../../../hooks.js";import{useLateEntry as f}from"../../../hooks/use-late-entry.js";import{useTextDirection as v}from"../../../hooks/use-text-direction.js";import{useUIConfig as b}from"../../../ui-config-context.js";import{defaultTranslationConfig as g}from"../../../utils/default-translation-config.js";import{mergeSlotProps as h}from"../../../utils/merge-slot-props.js";import{ConsentBannerSurfaceContext as j,mirrorDefaultPosition as k,useConsentBannerSurface as x}from"../surface-context.js";import{Overlay as N}from"./overlay.js";let y=["opt-in","opt-out"],S=n(({asChild:n,children:i,className:a,style:s,className:l,disableAnimation:j,noStyle:S,models:C=y,...$},L)=>{let P=c(),{components:R}=b(),B=m(),F=p()??"opt-in",A=d(),E=x(),V=u(),q=v(V?.language??g.defaultLanguage),w=k(E.position,E.positionSource,E.variant,q),z=B&&"banner"===P&&C.includes(F),D=f(z)&&!j,G=h(R?.banner?.root,{baseClassName:r.root,className:a||l,noStyle:S,style:s,...$}),H=S?G.className||"":`${G.className||""} ${j?"":`${r.bannerVisible} ${r.bannerEntering}`}`;return z?e(o,{children:[t(N,{}),t("div",{ref:L,...G,className:H,"data-variant":E.variant,"data-position":w,"data-blocking":E.blocking?"true":void 0,"data-prompt":A.prompt,"data-model":A.model,"data-entry":D?"late":void 0,"data-testid":"consent-banner-root",dir:q,children:i})]}):null}),C=({children:o,className:e,noStyle:r,disableAnimation:n,scrollLock:c,trapFocus:m,models:p,uiSource:d,variant:u,position:f,blocking:v,...b})=>{let{banner:g}=a({prompt:{blocking:v,position:f,scrollLock:c,trapFocus:m,variant:u}}),h=g.scrollLock,k=g.trapFocus,x=i(()=>({disableAnimation:n,noStyle:r,scrollLock:h,trapFocus:k}),[n,r,h,k]),N=i(()=>({blocking:g.blocking,position:g.position,positionSource:g.positionSource,variant:g.variant}),[g.blocking,g.position,g.positionSource,g.variant]),y=i(()=>({uiSource:d??"banner"}),[d]);return t(s.Provider,{value:y,children:t(l.Provider,{value:x,children:t(j.Provider,{value:N,children:t(S,{disableAnimation:n,className:e,noStyle:r,models:p,...b,children:o})})})})};S.displayName="ConsentBannerRootChildren";let $=C;export{C as ConsentBannerRoot,$ as Root};
+import{Fragment as o,jsx as t,jsxs as e}from"react/jsx-runtime";import r from"@c15t/ui/styles/components/consent-banner";import{forwardRef as n,useMemo as i}from"react";import{useHeadlessConsentUI as a}from"../../../component-hooks/use-headless-consent-ui.js";import{ConsentTrackingContext as s}from"../../../context/consent-tracking-context.js";import{LocalThemeContext as l}from"../../../context/theme-context.js";import{useActiveUI as c,useHasConsentUI as m,useModel as p,usePolicyRule as d,useTranslations as u}from"../../../hooks.js";import{useLateEntry as f}from"../../../hooks/use-late-entry.js";import{useTextDirection as h}from"../../../hooks/use-text-direction.js";import{useUIConfig as v}from"../../../ui-config-context.js";import{defaultTranslationConfig as b}from"../../../utils/default-translation-config.js";import{mergeSlotProps as g}from"../../../utils/merge-slot-props.js";import{StreamedSurface as j}from"../../shared/streamed-surface.js";import{ConsentBannerSurfaceContext as k,mirrorDefaultPosition as x,useConsentBannerSurface as N}from"../surface-context.js";import{Overlay as y}from"./overlay.js";let S=["opt-in","opt-out"],C=n(({asChild:n,children:i,className:a,style:s,className:l,disableAnimation:j,noStyle:k,models:C=S,...$},L)=>{let P=c(),{components:R}=v(),B=m(),F=p()??"opt-in",A=d(),E=N(),V=u(),q=h(V?.language??b.defaultLanguage),w=x(E.position,E.positionSource,E.variant,q),z=B&&"banner"===P&&C.includes(F),D=f(z)&&!j,G=g(R?.banner?.root,{baseClassName:r.root,className:a||l,noStyle:k,style:s,...$}),H=k?G.className||"":`${G.className||""} ${j?"":`${r.bannerVisible} ${r.bannerEntering}`}`;return z?e(o,{children:[t(y,{}),t("div",{ref:L,...G,className:H,"data-variant":E.variant,"data-position":w,"data-blocking":E.blocking?"true":void 0,"data-prompt":A.prompt,"data-model":A.model,"data-entry":D?"late":void 0,"data-testid":"consent-banner-root",dir:q,children:i})]}):null}),$=({children:o,className:e,noStyle:r,disableAnimation:n,scrollLock:c,trapFocus:m,models:p,uiSource:d,variant:u,position:f,blocking:h,...v})=>{let{banner:b}=a({prompt:{blocking:h,position:f,scrollLock:c,trapFocus:m,variant:u}}),g=b.scrollLock,j=b.trapFocus,x=i(()=>({disableAnimation:n,noStyle:r,scrollLock:g,trapFocus:j}),[n,r,g,j]),N=i(()=>({blocking:b.blocking,position:b.position,positionSource:b.positionSource,variant:b.variant}),[b.blocking,b.position,b.positionSource,b.variant]),y=i(()=>({uiSource:d??"banner"}),[d]);return t(s.Provider,{value:y,children:t(l.Provider,{value:x,children:t(k.Provider,{value:N,children:t(C,{disableAnimation:n,className:e,noStyle:r,models:p,...v,children:o})})})})};C.displayName="ConsentBannerRootChildren";let L=o=>t(j,{children:t($,{...o})}),P=L;export{L as ConsentBannerRoot,P as Root};

package/dist/components/prompt/prompt.js

@@ -1,2 +1,2 @@
 "use client";
-import{jsx as t,jsxs as n}from"react/jsx-runtime";import e from"@c15t/ui/styles/components/consent-actions";import r from"@c15t/ui/styles/components/consent-banner";import{Fragment as o}from"react";import{useHeadlessConsentUI as i}from"../../component-hooks/use-headless-consent-ui.js";import{Box as a}from"../shared/primitives/box.js";import{BrandingLink as s}from"../shared/ui/branding.js";import{useComponentConfig as c}from"../../hooks/use-component-config.js";import{ConsentBannerRoot as l}from"./atoms/root.js";import{ConsentBannerAcceptButton as d,ConsentBannerCard as m,ConsentBannerCustomizeButton as p,ConsentBannerDescription as u,ConsentBannerDismissButton as h,ConsentBannerFooter as b,ConsentBannerFooterSubGroup as f,ConsentBannerHeader as y,ConsentBannerRejectButton as g,ConsentBannerRights as j,ConsentBannerTitle as A}from"./components.js";import{ErrorBoundary as k}from"./error-boundary.js";import{resolveBannerPrimaryActions as v}from"./resolve-banner-primary-actions.js";let N=({noStyle:N,disableAnimation:S,scrollLock:w,trapFocus:C,title:L,description:x,rejectButtonText:z,customizeButtonText:F,acceptButtonText:P,dismissButtonText:B,legalLinks:$,hideBranding:G=!1,layout:E,direction:K,primaryButton:R,models:U,uiSource:q,variant:D,position:H,blocking:I})=>{let{banner:J}=i({prompt:{blocking:I,direction:K,layout:E,position:H,primaryActions:"string"==typeof R?[R]:R,scrollLock:w,trapFocus:C,variant:D}}),M=c({disableAnimation:S,noStyle:N,scrollLock:J.scrollLock,trapFocus:J.trapFocus}),{orderedActions:O}=J,Q=new Set(O),T=v(J.primaryActions,O),V=J.actionGroups,W=J.direction,{shouldFillActions:X}=J,Y=(n,e)=>{if(!Q.has(n))return null;let r=T.includes(n);switch(n){case"reject":return t(g,{consentAction:"reject",isPrimary:r,className:e,"data-action":"reject","data-testid":"consent-banner-reject-button",children:z});case"accept":return t(d,{consentAction:"accept",isPrimary:r,className:e,"data-action":"accept","data-testid":"consent-banner-accept-button",children:P});case"customize":return t(p,{consentAction:"customize",isPrimary:r,className:e,"data-action":"customize","data-testid":"consent-banner-customize-button",children:F});case"dismiss":return t(h,{consentAction:"dismiss",isPrimary:r,className:e,"data-action":"dismiss","data-testid":"consent-banner-dismiss-button",children:B});case"save":return null;default:throw Error(`Unhandled consent banner button type: ${n}`)}};return t(k,{fallback:t("div",{children:"Something went wrong with the Consent Banner."}),children:t(l,{...M,models:U,uiSource:q,variant:D,position:H,blocking:I,children:n(a,{baseClassName:r.cardShell,slotKey:"banner.cardShell",children:[t(s,{hideBranding:G,variant:"banner-tag",slotContext:"banner","data-testid":"consent-banner-branding"}),n(m,{children:[n(y,{children:[t(A,{children:L}),t(u,{legalLinks:$,children:x})]}),n(b,{className:e.actionRoot,"data-direction":W,"data-fill":!!X||void 0,"data-split":V.length>1&&!X||void 0,children:[t(j,{rights:J.preferenceControls}),V.map((n,r)=>{if(Array.isArray(n)){let i=n.filter(t=>Q.has(t));if(0===i.length)return null;let a=n.join("-");return t(f,{className:e.actionGroup,"data-direction":W,"data-fill":!!X||void 0,children:i.map(n=>t(o,{children:Y(n)},n))},a?`group-${a}`:`group-${r}`)}return Q.has(n)?t(o,{children:Y(n)},n):null})]})]})]})})})};export{N as ConsentBanner};
+import{jsx as t,jsxs as n}from"react/jsx-runtime";import e from"@c15t/ui/styles/components/consent-actions";import r from"@c15t/ui/styles/components/consent-banner";import{Fragment as o}from"react";import{useHeadlessConsentUI as i}from"../../component-hooks/use-headless-consent-ui.js";import{Box as a}from"../shared/primitives/box.js";import{BrandingLink as s}from"../shared/ui/branding.js";import{useComponentConfig as c}from"../../hooks/use-component-config.js";import{StreamedSurface as l}from"../shared/streamed-surface.js";import{ConsentBannerRoot as d}from"./atoms/root.js";import{ConsentBannerAcceptButton as m,ConsentBannerCard as p,ConsentBannerCustomizeButton as u,ConsentBannerDescription as h,ConsentBannerDismissButton as b,ConsentBannerFooter as f,ConsentBannerFooterSubGroup as y,ConsentBannerHeader as g,ConsentBannerRejectButton as j,ConsentBannerRights as A,ConsentBannerTitle as k}from"./components.js";import{ErrorBoundary as v}from"./error-boundary.js";import{resolveBannerPrimaryActions as N}from"./resolve-banner-primary-actions.js";let S=({noStyle:l,disableAnimation:S,scrollLock:w,trapFocus:C,title:L,description:x,rejectButtonText:z,customizeButtonText:F,acceptButtonText:P,dismissButtonText:B,legalLinks:$,hideBranding:G=!1,layout:E,direction:K,primaryButton:R,models:U,uiSource:q,variant:D,position:H,blocking:I})=>{let{banner:J}=i({prompt:{blocking:I,direction:K,layout:E,position:H,primaryActions:"string"==typeof R?[R]:R,scrollLock:w,trapFocus:C,variant:D}}),M=c({disableAnimation:S,noStyle:l,scrollLock:J.scrollLock,trapFocus:J.trapFocus}),{orderedActions:O}=J,Q=new Set(O),T=N(J.primaryActions,O),V=J.actionGroups,W=J.direction,{shouldFillActions:X}=J,Y=(n,e)=>{if(!Q.has(n))return null;let r=T.includes(n);switch(n){case"reject":return t(j,{consentAction:"reject",isPrimary:r,className:e,"data-action":"reject","data-testid":"consent-banner-reject-button",children:z});case"accept":return t(m,{consentAction:"accept",isPrimary:r,className:e,"data-action":"accept","data-testid":"consent-banner-accept-button",children:P});case"customize":return t(u,{consentAction:"customize",isPrimary:r,className:e,"data-action":"customize","data-testid":"consent-banner-customize-button",children:F});case"dismiss":return t(b,{consentAction:"dismiss",isPrimary:r,className:e,"data-action":"dismiss","data-testid":"consent-banner-dismiss-button",children:B});case"save":return null;default:throw Error(`Unhandled consent banner button type: ${n}`)}};return t(v,{fallback:t("div",{children:"Something went wrong with the Consent Banner."}),children:t(d,{...M,models:U,uiSource:q,variant:D,position:H,blocking:I,children:n(a,{baseClassName:r.cardShell,slotKey:"banner.cardShell",children:[t(s,{hideBranding:G,variant:"banner-tag",slotContext:"banner","data-testid":"consent-banner-branding"}),n(p,{children:[n(g,{children:[t(k,{children:L}),t(h,{legalLinks:$,children:x})]}),n(f,{className:e.actionRoot,"data-direction":W,"data-fill":!!X||void 0,"data-split":V.length>1&&!X||void 0,children:[t(A,{rights:J.preferenceControls}),V.map((n,r)=>{if(Array.isArray(n)){let i=n.filter(t=>Q.has(t));if(0===i.length)return null;let a=n.join("-");return t(y,{className:e.actionGroup,"data-direction":W,"data-fill":!!X||void 0,children:i.map(n=>t(o,{children:Y(n)},n))},a?`group-${a}`:`group-${r}`)}return Q.has(n)?t(o,{children:Y(n)},n):null})]})]})]})})})},w=n=>t(l,{children:t(S,{...n})});export{w as ConsentBanner};

package/dist/components/shared/primitives/legal-links/index.js

@@ -1 +1 @@
-import{jsxs as e}from"react/jsx-runtime";import t from"@c15t/ui/styles/components/legal-links";import{resolveTranslations as l}from"@c15t/ui/utils";import{useContext as n,useMemo as r,useSyncExternalStore as i}from"react";import{KernelContext as s}from"../../../../context.js";import{V3UIConfigContext as o,useUIConfig as a}from"../../../../ui-config-context.js";import{defaultTranslationConfig as u}from"../../../../utils/default-translation-config.js";import{mergeSlotProps as g}from"../../../../utils/merge-slot-props.js";let m=()=>()=>void 0,c=function(){let e=n(s),t=i(e?t=>e.subscribe(t):m,()=>e?.getSnapshot().translations??null,()=>e?.getServerSnapshot().translations??null);return r(()=>t?.translations?t.translations.legalLinks:l({},u).legalLinks,[t])},f=function(e){let t=n(o).legalLinks;return null==e?null:Object.fromEntries(Object.entries(t??{}).filter(([t])=>e.includes(t)))},p=({links:l,context:n,testIdPrefix:r})=>{let i=f(l),s=c(),{components:o}=a(),u=g(o?.["legal-links"]?.root,{}),m=g(o?.link?.[n],{baseClassName:t.legalLink});return i&&0!==Object.keys(i).length?e("span",{...u,children:[" ",Object.entries(i).map(([t,l],n,i)=>l?e("span",{children:[e("a",{href:l.href,target:l.target||"_blank",rel:l.rel||("_blank"===l.target?"noopener noreferrer":void 0),...m,"data-testid":r?`${r}-${t}`:void 0,children:[l.label??s?.[t],n<i.length-1&&","]}),n<i.length-1&&" "]},String(t)):null)]}):null};export{p as InlineLegalLinks,f as useFilteredLegalLinks};
+import{jsxs as e}from"react/jsx-runtime";import t from"@c15t/ui/styles/components/legal-links";import{resolveTranslations as l}from"@c15t/ui/utils";import{useContext as n,useMemo as r,useSyncExternalStore as i}from"react";import{KernelContext as s}from"../../../../context.js";import{useServerSnapshot as o}from"../../../../kernel-selector.js";import{V3UIConfigContext as a,useUIConfig as m}from"../../../../ui-config-context.js";import{defaultTranslationConfig as u}from"../../../../utils/default-translation-config.js";import{mergeSlotProps as c}from"../../../../utils/merge-slot-props.js";let g=()=>()=>void 0,f=function(){let e=n(s),t=o(e),a=i(e?t=>e.subscribe(t):g,()=>e?.getSnapshot().translations??null,()=>t()?.translations??null);return r(()=>a?.translations?a.translations.legalLinks:l({},u).legalLinks,[a])},p=function(e){let t=n(a).legalLinks;return null==e?null:Object.fromEntries(Object.entries(t??{}).filter(([t])=>e.includes(t)))},k=({links:l,context:n,testIdPrefix:r})=>{let i=p(l),s=f(),{components:o}=m(),a=c(o?.["legal-links"]?.root,{}),u=c(o?.link?.[n],{baseClassName:t.legalLink});return i&&0!==Object.keys(i).length?e("span",{...a,children:[" ",Object.entries(i).map(([t,l],n,i)=>l?e("span",{children:[e("a",{href:l.href,target:l.target||"_blank",rel:l.rel||("_blank"===l.target?"noopener noreferrer":void 0),...u,"data-testid":r?`${r}-${t}`:void 0,children:[l.label??s?.[t],n<i.length-1&&","]}),n<i.length-1&&" "]},String(t)):null)]}):null};export{k as InlineLegalLinks,p as useFilteredLegalLinks};

package/dist/components/shared/streamed-surface.js

@@ -0,0 +1,2 @@
+"use client";
+import{jsx as e}from"react/jsx-runtime";import{HydrationSnapshotContext as r,StreamedPrefetchContext as t}from"../../context.js";import{useKernel as o}from"../../kernel-selector.js";import*as l from"react";let u="u"<typeof document?l.useEffect:l.useLayoutEffect,n=function(e){if("fulfilled"===e.status)return e.value;throw e},a=function(e){let{use:r}=l;return r?r(e):n(e)},d=({children:l,streamed:n})=>{let d=o(),s=a(n.settled),c=n.snapshotFor(s);return u(()=>{n.adopt(s)},[n,s]),e(r.Provider,{value:c===d.getServerSnapshot()?null:c,children:e(t.Provider,{value:void 0,children:l})})},s=({children:r})=>{let o=(0,l.useContext)(t);return o?e(l.Suspense,{fallback:null,children:e(d,{streamed:o,children:r})}):r};export{s as StreamedSurface,n as readRecorded};

package/dist/context.js

@@ -1 +1 @@
-import{createContext as e}from"react";let t=e(null);t.displayName="C15tKernelContext";let l=e(null);export{t as KernelContext,l as ProviderServicesContext};
+import{createContext as e}from"react";let t=e(null);t.displayName="C15tKernelContext";let n=e(null),o=e(void 0),r=e(null);export{r as HydrationSnapshotContext,t as KernelContext,n as ProviderServicesContext,o as StreamedPrefetchContext};

package/dist/hooks.js

@@ -1 +1 @@
-import{applyExperimentAssignment as e,applyExperimentTheme as s,isVendorAllowed as o}from"@c15t/core";import{hasConsentPreferences as n,hasConsentUI as t,showConsentSurface as u}from"@c15t/core/surface-actions";import{useCallback as r,useContext as i,useMemo as a,useSyncExternalStore as c}from"react";import{ProviderServicesContext as f}from"./context.js";import{useGateSelector as l,useKernel as h,useKernelSelector as d}from"./kernel-selector.js";import{useUIConfig as m}from"./ui-config-context.js";let p=function(){let e=h();return c(s=>e.subscribe(s),()=>e.getSnapshot(),()=>e.getServerSnapshot())},k=function(e){return d(s=>s.effectivePermissions[e])},_=function(){return d(e=>e.effectivePermissions)},C=function(){return d(e=>e.overrides)},g=function(){return d(e=>e.user)},P=function(){return d(e=>e.location)},v=function(){return d(e=>e.translations)},S=function(){return d(e=>e.branding)},y=function(){return d(e=>"matched"===e.resolution.status)},I=function(){return d(t)},R=function(){return d(n)},b=function(){return d(e=>"matched"===e.resolution.status?e.model:null)},A=function(){return d(e=>e.activeUI)},x=function(){return d(e=>e.policyRule.scope)},U=function(){return d(e=>e.policyRule.scopeMode)},E=function(){return d(e=>e.iab)},T=function(){return d(e=>e.iab?.enabled??!1)},V=function(e){let s=String(e);return d(e=>e.iab?.vendorConsents[s]??!1)},D=function(e){return d(s=>s.iab?.purposeConsents[e]??!1)},O=function(e){return d(s=>s.iab?.specialFeatureOptIns[e]??!1)},B=function(){return d(e=>e.iab?.tcString??null)},H=[],L=function(){return d(e=>"iab"===e.model?H:e.vendors?.declared??H)},M=function(){return d(e=>e.vendorChoice)},N=function(e){return l((s,n)=>o(s,e,n))},j=function(){return h().set.registerConsentCategories},q=function(){return h().set.overrides},F=function(){let e=h(),s=i(f);return r(o=>{s?s.setLanguage(o):o!==e.getSnapshot().overrides.language&&(e.set.language(o),e.commands.init())},[e,s])},w=function(){let e=h();return r(s=>u(e,s),[e])},z=function(){return h().commands.save},G=function(){let e=h();return r(s=>e.events.on("permissions:changed",({snapshot:e})=>s(e.effectivePermissions)),[e])},J=function(){return h().commands.identify},K=function(){return h().commands.init},Q=function(){return d(e=>e.explicitChoice)},W=function(){return d(e=>e.effectivePermissions)},X=function(){return d(e=>e.promptRequirement)},Y=function(){return d(e=>e.noticeDismissal)},Z=function(){return d(e=>e.privacySignals)},$=function(){return d(e=>e.resolution)},ee=function(){return d(e=>e.policyRule)},es=function(){return d(e=>e.restrictions)},eo=function(){return h().commands.dismissNotice},en=function(){return d(e=>e.experiment)},et=function(){let{experiment:s,presentation:o}=m(),n=en();return a(()=>e(o,s,n),[o,s,n])},eu=function(){let{experiment:e,theme:o}=m(),n=en();return a(()=>s(o,e,n),[o,e,n])},er={},ei={},ea=function(){return et()?.prompt??er},ec=function(){return et()?.preferences??ei};export{A as useActiveUI,S as useBranding,k as useConsent,_ as useConsents,L as useDeclaredVendors,eo as useDismissNotice,W as useEffectivePermissions,en as useExperiment,Q as useExplicitChoice,y as useHasConsentPolicy,R as useHasConsentPreferences,I as useHasConsentUI,T as useIABEnabled,E as useIABSnapshot,J as useIdentify,K as useInit,P as useLocation,b as useModel,Y as useNoticeDismissal,C as useOverrides,x as usePolicyCategories,$ as usePolicyResolution,ee as usePolicyRule,U as usePolicyScopeMode,ec as usePreferencesPresentation,Z as usePrivacySignals,ea as usePromptPresentation,X as usePromptRequirement,D as usePurposeConsent,j as useRegisterConsentCategories,et as useResolvedPresentation,eu as useResolvedTheme,es as useRestrictions,z as useSaveConsents,w as useSetActiveUI,F as useSetLanguage,q as useSetOverrides,p as useSnapshot,O as useSpecialFeatureOptIn,G as useSubscribeToConsentChanges,B as useTCString,v as useTranslations,g as useUser,N as useVendorAllowed,M as useVendorChoice,V as useVendorConsent};
+import{applyExperimentAssignment as e,applyExperimentTheme as s,isVendorAllowed as o}from"@c15t/core";import{hasConsentPreferences as n,hasConsentUI as t,showConsentSurface as u}from"@c15t/core/surface-actions";import{useCallback as r,useContext as i,useMemo as a,useSyncExternalStore as c}from"react";import{ProviderServicesContext as f}from"./context.js";import{useGateSelector as l,useKernel as h,useKernelSelector as d,useServerSnapshot as m}from"./kernel-selector.js";import{useUIConfig as k}from"./ui-config-context.js";let p=function(){let e=h();return c(s=>e.subscribe(s),()=>e.getSnapshot(),m(e))},_=function(e){return d(s=>s.effectivePermissions[e])},C=function(){return d(e=>e.effectivePermissions)},g=function(){return d(e=>e.overrides)},P=function(){return d(e=>e.user)},v=function(){return d(e=>e.location)},S=function(){return d(e=>e.translations)},y=function(){return d(e=>e.branding)},I=function(){return d(e=>"matched"===e.resolution.status)},R=function(){return d(t)},b=function(){return d(n)},A=function(){return d(e=>"matched"===e.resolution.status?e.model:null)},x=function(){return d(e=>e.activeUI)},U=function(){return d(e=>e.policyRule.scope)},E=function(){return d(e=>e.policyRule.scopeMode)},T=function(){return d(e=>e.iab)},V=function(){return d(e=>e.iab?.enabled??!1)},D=function(e){let s=String(e);return d(e=>e.iab?.vendorConsents[s]??!1)},O=function(e){return d(s=>s.iab?.purposeConsents[e]??!1)},B=function(e){return d(s=>s.iab?.specialFeatureOptIns[e]??!1)},H=function(){return d(e=>e.iab?.tcString??null)},L=[],M=function(){return d(e=>"iab"===e.model?L:e.vendors?.declared??L)},N=function(){return d(e=>e.vendorChoice)},j=function(e){return l((s,n)=>o(s,e,n))},q=function(){return h().set.registerConsentCategories},F=function(){return h().set.overrides},w=function(){let e=h(),s=i(f);return r(o=>{s?s.setLanguage(o):o!==e.getSnapshot().overrides.language&&(e.set.language(o),e.commands.init())},[e,s])},z=function(){let e=h();return r(s=>u(e,s),[e])},G=function(){return h().commands.save},J=function(){let e=h();return r(s=>e.events.on("permissions:changed",({snapshot:e})=>s(e.effectivePermissions)),[e])},K=function(){return h().commands.identify},Q=function(){return h().commands.init},W=function(){return d(e=>e.explicitChoice)},X=function(){return d(e=>e.effectivePermissions)},Y=function(){return d(e=>e.promptRequirement)},Z=function(){return d(e=>e.noticeDismissal)},$=function(){return d(e=>e.privacySignals)},ee=function(){return d(e=>e.resolution)},es=function(){return d(e=>e.policyRule)},eo=function(){return d(e=>e.restrictions)},en=function(){return h().commands.dismissNotice},et=function(){return d(e=>e.experiment)},eu=function(){let{experiment:s,presentation:o}=k(),n=et();return a(()=>e(o,s,n),[o,s,n])},er=function(){let{experiment:e,theme:o}=k(),n=et();return a(()=>s(o,e,n),[o,e,n])},ei={},ea={},ec=function(){return eu()?.prompt??ei},ef=function(){return eu()?.preferences??ea};export{x as useActiveUI,y as useBranding,_ as useConsent,C as useConsents,M as useDeclaredVendors,en as useDismissNotice,X as useEffectivePermissions,et as useExperiment,W as useExplicitChoice,I as useHasConsentPolicy,b as useHasConsentPreferences,R as useHasConsentUI,V as useIABEnabled,T as useIABSnapshot,K as useIdentify,Q as useInit,v as useLocation,A as useModel,Z as useNoticeDismissal,g as useOverrides,U as usePolicyCategories,ee as usePolicyResolution,es as usePolicyRule,E as usePolicyScopeMode,ef as usePreferencesPresentation,$ as usePrivacySignals,ec as usePromptPresentation,Y as usePromptRequirement,O as usePurposeConsent,q as useRegisterConsentCategories,eu as useResolvedPresentation,er as useResolvedTheme,eo as useRestrictions,G as useSaveConsents,z as useSetActiveUI,w as useSetLanguage,F as useSetOverrides,p as useSnapshot,B as useSpecialFeatureOptIn,J as useSubscribeToConsentChanges,H as useTCString,S as useTranslations,P as useUser,j as useVendorAllowed,N as useVendorChoice,D as useVendorConsent};

package/dist/kernel-selector.js

@@ -1 +1 @@
-import{evaluateConsent as e}from"@c15t/core";import{useContext as t,useSyncExternalStore as r}from"react";import{KernelContext as n}from"./context.js";import{defaultTranslationConfig as o}from"./utils/default-translation-config.js";let a=function(){let e=t(n);if(!e)throw Error("c15t: no kernel in context. Wrap your app with <ConsentProvider options={...}> from @c15t/react.");return e},s=function(e){let t=a();return r(e=>t.subscribe(e),()=>e(t.getSnapshot()),()=>e(t.getServerSnapshot()))},l=function(e){let t=a();return r(e=>t.subscribe(e),()=>e(t.getSnapshot(),Date.now()),()=>{let r=t.getServerSnapshot();return e(r,r.evaluatedAt)})},u=function(t){return l((r,n)=>e({category:t},r,n))},c=function(){return s(e=>e.translations?.language??o.defaultLanguage)};export{u as useCategoryAllowed,l as useGateSelector,a as useKernel,s as useKernelSelector,c as useTranslationLanguage};
+import{evaluateConsent as e}from"@c15t/core";import{useContext as t,useSyncExternalStore as r}from"react";import{HydrationSnapshotContext as n,KernelContext as o}from"./context.js";import{defaultTranslationConfig as s}from"./utils/default-translation-config.js";let a=function(){let e=t(o);if(!e)throw Error("c15t: no kernel in context. Wrap your app with <ConsentProvider options={...}> from @c15t/react.");return e},l=function(e){let r=t(n);return()=>r??e?.getServerSnapshot()},u=function(e){let t=a(),n=l(t);return r(e=>t.subscribe(e),()=>e(t.getSnapshot()),()=>e(n()))},c=function(e){let t=a(),n=l(t);return r(e=>t.subscribe(e),()=>e(t.getSnapshot(),Date.now()),()=>{let t=n();return e(t,t.evaluatedAt)})},i=function(t){return c((r,n)=>e({category:t},r,n))},f=function(){return u(e=>e.translations?.language??s.defaultLanguage)};export{i as useCategoryAllowed,c as useGateSelector,a as useKernel,u as useKernelSelector,l as useServerSnapshot,f as useTranslationLanguage};

package/dist/provider.js

@@ -1,2 +1,2 @@
 "use client";
-let e,t;import{jsx as o,jsxs as r}from"react/jsx-runtime";import{applyExperimentAssignment as n,applyExperimentTheme as i,hostExperiment as s,watchRevocationReload as c}from"@c15t/core";import{createPersistence as l,readStoredRecords as a}from"@c15t/core/modules/persistence";import{createWindowDebug as u}from"@c15t/core/modules/window-debug";import{claimEarlyJourney as d,createConsentProviderRuntime as m,hostedModes as p,lazyRuntimeModule as f,lazyStreamPrefetch as h,streamPrefetchWith as g}from"@c15t/core/runtime/provider";import{applyThemeSlots as y}from"@c15t/ui/utils";import{useCallback as v,useEffect as k,useLayoutEffect as S,useMemo as b,useReducer as w,useState as C,useSyncExternalStore as x}from"react";import{KernelContext as j,ProviderServicesContext as L}from"./context.js";import{ExternalIABProvider as N}from"./external-iab-context.js";import{useColorScheme as O}from"./hooks/use-color-scheme.js";import{useIsHydrated as D}from"./hooks/use-is-hydrated.js";import{createIframeBlockerOnDemand as P}from"./module-hooks/iframe-blocker.js";import{UNCOMMITTED_HOLD_MS as R}from"./module-hooks/network-hold.js";import{V3ThemeProvider as _}from"./theme-provider.js";let E=(e,t)=>{let o,r=!1;return(async()=>{try{let{connectConsentSource:n}=await import("@c15t/core/runtime/controls");r||(o=n(e,t))}catch{}})(),()=>{r=!0,o?.()}},T=async()=>(await import("@c15t/core/modules/script-loader")).createScriptLoader,q=function(e){let t=e.__resolveStreamedInit;return{connectConsentSource:E,createClearOnRevocation:f(async()=>(await import("@c15t/core/modules/clear-on-revocation")).createClearOnRevocation),createIframeBlocker:P,createNetworkBlocker:f(async()=>(await import("@c15t/core/modules/network-blocker")).createNetworkBlocker),createPersistence:l,createScriptLoader:f(T),createWindowDebug:u,preloadScriptLoader:e.__preloadScriptLoader?.(T),streamPrefetch:t?g(t):h,watchRevocationReload:c}},B=new WeakMap,J=new Set,K=(e,t)=>e.fetch===t.fetch&&e.initialData===t.initialData&&JSON.stringify(e)===JSON.stringify(t),A=function(o){if("function"!=typeof o)return o;let r=B.get(o);return r||(r=Object.assign(r=>e=(t=()=>o(Object.create(r,{iabEnabled:{value:void 0}})))(),{kind:o.kind}),B.set(o,r)),r},F=function(e){return{...e,mode:A(e.mode),pkg:e.__debugPkg??"@c15t/react"}},I=function(e){let{persistence:t}=e;if(!1===t||e.consentSource)return!1;let o="object"==typeof t?t:{};if(o.skipHydration)return!1;let r=o.now?o.now():Date.now(),{records:n}=a(o.storageConfig??e.storageConfig,r);return!!(n.choice||n.noticeDismissal)},M=function(e){let{journey:t}=e;return JSON.stringify({journey:t?[t.id,t.scope,t.storedChoice]:null,overrides:e.overrides,user:e.user})},V=new Set,W=0,z=function(o,r){let n,i,s,{mode:c,networkBlocker:l}=o,a=m(F(o),q(o)),u=o,f=!1,h=!1,g=0,y=e;W+=1;let v={expire(){J.delete(s),V.delete(v),clearTimeout(n),f=!0,a.dispose()},holdKey:!1!==o.enabled&&l&&!1!==l.enabled?JSON.stringify(l.rules):null,sequence:W};if("u"<typeof window)h=!0;else{V.add(v),n=setTimeout(v.expire,R);let e=a.kernel.getSnapshot(),l=p.get(c),u=l&&{...l,fetch:l.fetch??globalThis.fetch};if(r&&u&&e.policyPending&&!(o.prefetch||o.experiment)){let r=d({option:o.journey,storedChoice:I(o)}),n=r?{journey:r,overrides:e.overrides,user:e.user}:{overrides:e.overrides,user:e.user},c=M(n);for(let e of J)e.key===c&&K(e.options,u)&&(i=e);if(!i){let e=t(),o=e.init,r=o(n);r.catch(()=>void 0);let l=!1;e.init=e=>{let t=!l&&M(e)===c;return l=!0,t?r:o(e)},i=s={key:c,options:u,transport:e},J.add(s)}}}let k=function(){if(f)return!1;if(h)return!0;if(h=!0,J.delete(i)&&Object.assign(y,i?.transport),V.delete(v),clearTimeout(n),null!==v.holdKey)for(let e of V)e.sequence<v.sequence&&e.holdKey===v.holdKey&&e.expire();return!0};return{apply(e){e!==u&&(u=e,a.update(F(e)).catch(()=>void 0))},mount(){if(!k())return null;let e=g+=1;return a.start(),()=>{queueMicrotask(()=>{g===e&&a.dispose()})}},runtime:a}},H=function(){let e=null;return{get:(t,o)=>e??=z(t,o),reset(){e=null}}},G=e=>e+1,Q=()=>()=>void 0,U=function(e){let[t]=C(H),[,o]=w(G,0),r=D(),n=v(()=>{t.reset(),o()},[t]);return e?{entry:t.get(e,r),rebuild:n}:void 0},X="u"<typeof document?k:S,Y=({entry:e,options:t,rebuild:o})=>(X(()=>e.apply(t),[e,t]),k(()=>{let t=e.mount();return t||void o()},[e,o]),null),Z=e=>{let{children:t}=e,c=e.options??{},[l]=C(()=>e.runtime),a=U(l?void 0:c),u=a?.entry.runtime,d=l?e.runtime??l:void 0,m=u??d,p=x(u?u.subscribe:Q,()=>m.kernel,()=>m.kernel),[f]=C(()=>{var e;return l?l.experiment??s(c.experiment,(e=c.prefetch,"function"==typeof e?.then)?void 0:c.prefetch):void 0}),h=u?u.experiment:f,g=d?c.consentCategories:void 0;k(()=>{d&&void 0!==g&&d.setConsentCategories(g)},[d,g]);let{presentation:v}=c,S=b(()=>({clearRecords:()=>m.clearRecords(),getConsentCategories:()=>m.consentCategories,getPresentation:()=>n(v,h,p.getSnapshot().experiment),setLanguage:e=>m.setLanguage(e)}),[h,p,v,m]),w=!!d&&void 0!==c.callbacks;k(()=>{"production"!==process.env.NODE_ENV&&w&&console.warn("c15t ConsentProvider: `options.callbacks` is ignored when you pass `runtime`. Pass them to createConsentRuntime({ callbacks }) instead.")},[w]);let D=x(e=>p.subscribe(e),()=>p.getSnapshot().experiment,()=>p.getServerSnapshot().experiment),P=b(()=>i(c.theme,h,D),[c.theme,h,D]);k(()=>{"production"===process.env.NODE_ENV||!P||!["colors","dark","motion","radius","shadows","spacing","typography"].some(e=>e in P)||document.getElementById("c15t-theme")||console.warn("c15t: `theme` tokens are no longer turned into CSS in the browser. Render <ConsentTheme theme={theme} /> on the server, or put the CSS from generateThemeCSS() in your stylesheet. See https://c15t.com/docs/frameworks/react/customize")},[P]);let R=b(()=>({colorScheme:c.colorScheme,disableAnimation:c.disableAnimation,noStyle:c.noStyle,scrollLock:c.scrollLock,theme:P,trapFocus:c.trapFocus}),[P,c.noStyle,c.disableAnimation,c.scrollLock,c.trapFocus,c.colorScheme]),E=b(()=>({components:y(P?.slots,c.components,"className"),experiment:h,legalLinks:c.legalLinks,preloadDialog:c.preloadDialog,presentation:c.presentation,theme:c.theme}),[P?.slots,c.components,h,c.legalLinks,c.preloadDialog,c.presentation,c.theme]);return O(c.colorScheme),o(j.Provider,{value:p,children:o(L.Provider,{value:S,children:r(_,{themeConfig:R,uiConfig:E,children:[a?o(Y,{entry:a.entry,options:c,rebuild:a.rebuild}):null,d?o(N,{runtime:d,children:t}):t]})})})};export{Z as ConsentProvider};
+let e,t;import{jsx as o,jsxs as r}from"react/jsx-runtime";import{applyExperimentAssignment as n,applyExperimentTheme as i,hostExperiment as s,watchRevocationReload as c}from"@c15t/core";import{createPersistence as l,readStoredRecords as a}from"@c15t/core/modules/persistence";import{createWindowDebug as u}from"@c15t/core/modules/window-debug";import{claimEarlyJourney as d,createConsentProviderRuntime as m,hostedModes as p,lazyRuntimeModule as f,lazyStreamPrefetch as h,streamPrefetchWith as g}from"@c15t/core/runtime/provider";import{applyThemeSlots as v}from"@c15t/ui/utils";import{useCallback as y,useEffect as k,useLayoutEffect as S,useMemo as b,useReducer as w,useState as C,useSyncExternalStore as x}from"react";import{KernelContext as j,ProviderServicesContext as L,StreamedPrefetchContext as N}from"./context.js";import{ExternalIABProvider as O}from"./external-iab-context.js";import{useColorScheme as P}from"./hooks/use-color-scheme.js";import{useIsHydrated as D}from"./hooks/use-is-hydrated.js";import{createIframeBlockerOnDemand as R}from"./module-hooks/iframe-blocker.js";import{UNCOMMITTED_HOLD_MS as _}from"./module-hooks/network-hold.js";import{V3ThemeProvider as E}from"./theme-provider.js";let T=(e,t)=>{let o,r=!1;return(async()=>{try{let{connectConsentSource:n}=await import("@c15t/core/runtime/controls");r||(o=n(e,t))}catch{}})(),()=>{r=!0,o?.()}},B=async()=>(await import("@c15t/core/modules/script-loader")).createScriptLoader,q=function(e){let t=e.__resolveStreamedInit;return{connectConsentSource:T,createClearOnRevocation:f(async()=>(await import("@c15t/core/modules/clear-on-revocation")).createClearOnRevocation),createIframeBlocker:R,createNetworkBlocker:f(async()=>(await import("@c15t/core/modules/network-blocker")).createNetworkBlocker),createPersistence:l,createScriptLoader:f(B),createWindowDebug:u,preloadScriptLoader:e.__preloadScriptLoader?.(B),streamPrefetch:t?g(t):h,watchRevocationReload:c}},J=new WeakMap,K=new Set,A=(e,t)=>e.fetch===t.fetch&&e.initialData===t.initialData&&JSON.stringify(e)===JSON.stringify(t),F=function(o){if("function"!=typeof o)return o;let r=J.get(o);return r||(r=Object.assign(r=>e=(t=()=>o(Object.create(r,{iabEnabled:{value:void 0}})))(),{kind:o.kind}),J.set(o,r)),r},I=function(e){return{...e,mode:F(e.mode),pkg:e.__debugPkg??"@c15t/react"}},M=function(e){let{persistence:t}=e;if(!1===t||e.consentSource)return!1;let o="object"==typeof t?t:{};if(o.skipHydration)return!1;let r=o.now?o.now():Date.now(),{records:n}=a(o.storageConfig??e.storageConfig,r);return!!(n.choice||n.noticeDismissal)},V=function(e){let{journey:t}=e;return JSON.stringify({journey:t?[t.id,t.scope,t.storedChoice]:null,overrides:e.overrides,user:e.user})},W=new Set,z=0,H=function(o,r){let n,i,s,{mode:c,networkBlocker:l}=o,a=m(I(o),q(o)),u=o,f=!1,h=!1,g=0,v=e;z+=1;let y={expire(){K.delete(s),W.delete(y),clearTimeout(n),f=!0,a.dispose()},holdKey:!1!==o.enabled&&l&&!1!==l.enabled?JSON.stringify(l.rules):null,sequence:z};if("u"<typeof window)h=!0;else{W.add(y),n=setTimeout(y.expire,_);let e=a.kernel.getSnapshot(),l=p.get(c),u=l&&{...l,fetch:l.fetch??globalThis.fetch};if(r&&u&&e.policyPending&&!(o.prefetch||o.experiment)){let r=d({option:o.journey,storedChoice:M(o)}),n=r?{journey:r,overrides:e.overrides,user:e.user}:{overrides:e.overrides,user:e.user},c=V(n);for(let e of K)e.key===c&&A(e.options,u)&&(i=e);if(!i){let e=t(),o=e.init,r=o(n);r.catch(()=>void 0);let l=!1;e.init=e=>{let t=!l&&V(e)===c;return l=!0,t?r:o(e)},i=s={key:c,options:u,transport:e},K.add(s)}}}let k=function(){if(f)return!1;if(h)return!0;if(h=!0,K.delete(i)&&Object.assign(v,i?.transport),W.delete(y),clearTimeout(n),null!==y.holdKey)for(let e of W)e.sequence<y.sequence&&e.holdKey===y.holdKey&&e.expire();return!0};return{apply(e){e!==u&&(u=e,a.update(I(e)).catch(()=>void 0))},mount(){if(!k())return null;let e=g+=1;return a.start(),()=>{queueMicrotask(()=>{g===e&&a.dispose()})}},runtime:a}},G=function(){let e=null;return{get:(t,o)=>e??=H(t,o),reset(){e=null}}},Q=e=>e+1,U=()=>()=>void 0,X=function(e){let[t]=C(G),[,o]=w(Q,0),r=D(),n=y(()=>{t.reset(),o()},[t]);return e?{entry:t.get(e,r),rebuild:n}:void 0},Y="u"<typeof document?k:S,Z=({entry:e,options:t,rebuild:o})=>(Y(()=>e.apply(t),[e,t]),k(()=>{let t=e.mount();return t||void o()},[e,o]),null),$=e=>{let{children:t}=e,c=e.options??{},[l]=C(()=>e.runtime),a=X(l?void 0:c),u=a?.entry.runtime,d=l?e.runtime??l:void 0,m=u??d,p=x(u?u.subscribe:U,()=>m.kernel,()=>m.kernel),[f]=C(()=>{var e;return l?l.experiment??s(c.experiment,(e=c.prefetch,"function"==typeof e?.then)?void 0:c.prefetch):void 0}),h=u?u.experiment:f,g=d?c.consentCategories:void 0;k(()=>{d&&void 0!==g&&d.setConsentCategories(g)},[d,g]);let{presentation:y}=c,S=b(()=>({clearRecords:()=>m.clearRecords(),getConsentCategories:()=>m.consentCategories,getPresentation:()=>n(y,h,p.getSnapshot().experiment),setLanguage:e=>m.setLanguage(e)}),[h,p,y,m]),w=!!d&&void 0!==c.callbacks;k(()=>{"production"!==process.env.NODE_ENV&&w&&console.warn("c15t ConsentProvider: `options.callbacks` is ignored when you pass `runtime`. Pass them to createConsentRuntime({ callbacks }) instead.")},[w]);let D=x(e=>p.subscribe(e),()=>p.getSnapshot().experiment,()=>p.getServerSnapshot().experiment),R=b(()=>i(c.theme,h,D),[c.theme,h,D]);k(()=>{"production"===process.env.NODE_ENV||!R||!["colors","dark","motion","radius","shadows","spacing","typography"].some(e=>e in R)||document.getElementById("c15t-theme")||console.warn("c15t: `theme` tokens are no longer turned into CSS in the browser. Render <ConsentTheme theme={theme} /> on the server, or put the CSS from generateThemeCSS() in your stylesheet. See https://c15t.com/docs/frameworks/react/customize")},[R]);let _=b(()=>({colorScheme:c.colorScheme,disableAnimation:c.disableAnimation,noStyle:c.noStyle,scrollLock:c.scrollLock,theme:R,trapFocus:c.trapFocus}),[R,c.noStyle,c.disableAnimation,c.scrollLock,c.trapFocus,c.colorScheme]),T=b(()=>({components:v(R?.slots,c.components,"className"),experiment:h,legalLinks:c.legalLinks,preloadDialog:c.preloadDialog,presentation:c.presentation,theme:c.theme}),[R?.slots,c.components,h,c.legalLinks,c.preloadDialog,c.presentation,c.theme]);return P(c.colorScheme),o(j.Provider,{value:p,children:o(L.Provider,{value:S,children:r(E,{themeConfig:_,uiConfig:T,children:[a?o(Z,{entry:a.entry,options:c,rebuild:a.rebuild}):null,d?o(O,{runtime:d,children:t}):o(N.Provider,{value:!1===c.streamBanner?void 0:u?.streamed,children:t})]})})})};export{$ as ConsentProvider};

package/dist/version.js

@@ -1 +1 @@
-let e="3.0.0-alpha.7";export{e as version};
+let e="3.0.0-alpha.8";export{e as version};

package/dist-types/components/prompt/atoms/root.d.ts

@@ -73,6 +73,10 @@ interface ConsentBannerRootProps extends HTMLAttributes<HTMLDivElement> {
      */
     blocking?: boolean;
 }
+/**
+ * The banner, rendered where the server can stream it: see
+ * `StreamedSurface`.
+ */
 declare const ConsentBannerRoot: FC<ConsentBannerRootProps>;
 declare const Root: FC<ConsentBannerRootProps>;
 export { ConsentBannerRoot, Root };

package/dist-types/components/prompt/prompt.d.ts

@@ -162,6 +162,10 @@ export interface ConsentBannerProps {
      */
     blocking?: boolean;
 }
+/**
+ * The stock banner. It reads the policy to choose its buttons, so all of
+ * it renders where the server can stream it: see `StreamedSurface`.
+ */
 export declare const ConsentBanner: FC<ConsentBannerProps>;
 /**
  * Component type definition for the ConsentBanner with its compound components.

package/dist-types/components/shared/streamed-surface.d.ts

@@ -0,0 +1,23 @@
+import * as React from 'react';
+import type { ReactNode } from 'react';
+/**
+ * React 18's way to suspend: throw the promise, and read its recorded
+ * result on the retry. The runtime's `settled` records its own result.
+ * Exported for tests.
+ *
+ * @internal
+ */
+export declare const readRecorded: <Value>(thenable: PromiseLike<Value>) => Value;
+/**
+ * Renders a consent surface the server can stream. While the provider's
+ * `prefetch` is a promise, the surface waits for it in its own Suspense
+ * boundary: the rest of the page streams at once, and the surface follows
+ * in a later chunk of the same response, rendered from the resolved
+ * config. It shows only when that config carries a policy that shows it.
+ * Hydration reads the same config, so the surface hydrates in place.
+ *
+ * @internal
+ */
+export declare const StreamedSurface: ({ children }: {
+    children: ReactNode;
+}) => string | number | bigint | boolean | React.JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | Iterable<ReactNode> | React.ReactElement<unknown, string | React.JSXElementConstructor<any>> | React.ReactPortal | null | undefined> | null | undefined;

package/dist-types/context.d.ts

@@ -1,4 +1,5 @@
-import type { AllConsentNames, ConsentKernel, ConsentPresentation } from '@c15t/core';
+import type { AllConsentNames, ConsentKernel, ConsentPresentation, ConsentSnapshot } from '@c15t/core';
+import type { StreamedPrefetch } from '@c15t/core/runtime';
 /**
  * React context carrying the kernel instance.
  *
@@ -21,3 +22,18 @@ export interface ProviderServices {
     setLanguage: (code: string) => void;
 }
 export declare const ProviderServicesContext: import("react").Context<ProviderServices | null>;
+/**
+ * The provider runtime's streamed `prefetch`, while `prefetch` is a promise.
+ * Consent surfaces render inside a boundary that waits for it.
+ *
+ * @internal
+ */
+export declare const StreamedPrefetchContext: import("react").Context<StreamedPrefetch | undefined>;
+/**
+ * The snapshot a streamed consent surface was server-rendered from, which
+ * its hydration must read in place of the kernel's own server snapshot.
+ * `null` everywhere else.
+ *
+ * @internal
+ */
+export declare const HydrationSnapshotContext: import("react").Context<ConsentSnapshot | null>;

package/dist-types/kernel-selector.d.ts

@@ -16,6 +16,16 @@ import type { AllConsentNames, ConsentKernel, ConsentSnapshot } from '@c15t/core
  * @internal
  */
 export declare const useKernel: () => ConsentKernel;
+/**
+ * Reads the snapshot hydration renders: the kernel's server snapshot, or,
+ * inside a streamed consent surface, the snapshot the server rendered that
+ * surface from.
+ *
+ * @param kernel - The provider's kernel.
+ * @returns A `getServerSnapshot` for `useSyncExternalStore`.
+ * @internal
+ */
+export declare const useServerSnapshot: (kernel: ConsentKernel | null) => () => ConsentSnapshot | undefined;
 /**
  * Subscribes to one slice of the kernel snapshot. React re-renders the
  * caller only when the selected value `Object.is`-differs, so a selector

package/dist-types/provider.d.ts

@@ -85,9 +85,12 @@ export interface ConsentProviderOptions extends ConsentControlOptions, Pick<Reac
      * Pass the pending `Promise<KernelConfig>` instead and the provider
      * mounts at once with a provisional policy, so `children` render (and
      * the static shell can prerender) while the consent data streams in.
-     * Consent surfaces stay hidden until the promise resolves; its first
-     * `init()` then applies the resolved config in place of the transport's
-     * network init. A config that resolves without a policy (persisted
+     * Consent surfaces stay hidden until the promise resolves. On the
+     * server, `ConsentBanner` waits for it in its own Suspense boundary and
+     * follows the page in a later chunk of the same response, before
+     * hydration, when the resolved policy shows a banner; see
+     * `streamBanner`. The resolved config then answers the first `init()`
+     * in place of the transport's network init. A config that resolves without a policy (persisted
      * consents, geo, language only) is applied to the kernel and the
      * transport init runs as usual; a rejected promise is logged outside
      * production and falls through to the transport init. Initial-only:
@@ -105,6 +108,17 @@ export interface ConsentProviderOptions extends ConsentControlOptions, Pick<Reac
      * ```
      */
     prefetch?: ConsentProviderPrefetch | Promise<ConsentProviderPrefetch>;
+    /**
+     * Whether `ConsentBanner` renders on the server once a `prefetch`
+     * promise resolves, so it arrives in the streamed response before the
+     * page hydrates. It shows only when the resolved policy shows a banner
+     * for this visitor. Set `false` to mount the banner after hydration
+     * instead, as with a client-only provider. No effect when `prefetch` is
+     * not a promise. Use the same value on the server and in the browser.
+     *
+     * @default true
+     */
+    streamBanner?: boolean;
     callbacks?: ConsentProviderCallbacks;
     /**
      * Remove configured browser data when its consent permission is revoked.

package/dist-types/version.d.ts

@@ -1 +1 @@
-export declare const version = "3.0.0-alpha.7";
+export declare const version = "3.0.0-alpha.8";

package/docs/concepts/choose-your-setup.md

@@ -13,7 +13,7 @@ to the alternatives it rules out.
 | Your app                                                                               | Setup                                                                                  | Guide                                                                                                                             |
 | -------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
 | Next.js App Router with a Next.js server                                               | Server resolves consent from a build-time manifest and streams it to the page          | [App Router](https://c15t.com/docs/frameworks/next/quickstart)                                                                    |
-| Next.js App Router, banner must be in the first HTML                                   | Await consent inside `Suspense`                                                        | [Stream or await](https://c15t.com/docs/frameworks/next/rendering#stream-or-await-consent-in-the-app-router)                      |
+| Next.js App Router, page must arrive with its banner                                   | Await consent inside `Suspense`                                                        | [Stream or await](https://c15t.com/docs/frameworks/next/rendering#stream-or-await-consent-in-the-app-router)                      |
 | Next.js with static, ISR, `'use cache'` or `ensureStatic = 'navigation'` pages         | Browser resolves consent on those pages                                                | [Static, ISR and cached pages](https://c15t.com/docs/frameworks/next/rendering#render-static-isr-and-cached-pages)                |
 | Next.js Pages Router                                                                   | Resolve consent in `getServerSideProps`                                                | [Pages Router](https://c15t.com/docs/frameworks/next/rendering#pick-your-rendering-path)                                          |
 | Next.js with `output: 'export'`                                                        | Browser resolves consent                                                               | [Static export](https://c15t.com/docs/frameworks/next/static-export)                                                              |

package/docs/frameworks/react/components/consent-banner.md

@@ -12,20 +12,25 @@ The [quickstart](../quickstart.md) mounts both in
 `src/consent.tsx`:
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>

package/docs/frameworks/react/components/consent-dialog.md

@@ -14,20 +14,25 @@ group: frameworks
 code.
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>

package/docs/frameworks/react/components/consent-provider.md

@@ -14,20 +14,25 @@ The [quickstart](../quickstart.md) does this in
 `src/consent.tsx`:
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>
@@ -41,9 +46,11 @@ export const Consent = ({ children }: { children: ReactNode }) => (
 );
 ```
 
-`hosted({ url })` points the provider at your Inth backend. Replace
-`https://your-project.inth.app` with the URL from your Inth project. The
-Next.js and TanStack Start adapters export `ConsentRoot` instead, which wraps
+`manifest()` from `@c15t/browser/headless` resolves the policy from the
+snapshot the build bundled, and sends consent choices to `backendURL`. Replace
+the demo project URL with the URL from your Inth project, or set
+`VITE_C15T_BACKEND_URL`. To fetch the policy from the backend on every page
+load instead, pass `hosted({ url })` from `c15t/react`. The Next.js and TanStack Start adapters export `ConsentRoot` instead, which wraps
 this provider and passes it server-resolved state.
 
 ## Provider options
@@ -56,35 +63,35 @@ the provider to change them. `scripts`, `vendors`, `networkBlocker`,
 `iframeBlocker`, `consentCategories`, `overrides`, `user`, `callbacks` and
 `enabled` apply when they change.
 
-| Option                        | Purpose                                                                                                                                                     |
-| ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `mode`                        | Required. `hosted({ url })` for a backend, `offline()` for local policies, or `custom()` for your own transport                                             |
-| `prefetch`                    | Server-resolved state, or a promise of it, from a framework adapter's server helper                                                                         |
-| `scripts`                     | Consent-gated vendor scripts. See [scripts and embeds](../scripts.md)                                                                                       |
-| `vendors`                     | Vendors listed under their category with their own switch. See [vendor consent](../vendor-consent.md)                                                       |
-| `scriptLoader`                | Options for the script loader module                                                                                                                        |
-| `networkBlocker`              | Rules that hold `fetch` and `XMLHttpRequest` calls until their category is allowed, or `false`                                                              |
-| `iframeBlocker`               | Gates DOM iframes that carry `data-category`. On by default; `false` turns it off                                                                           |
-| `persistence`                 | Stores the visitor's choice in a cookie and localStorage. On by default                                                                                     |
-| `storageConfig`               | Storage key and cookie settings for the stored choice                                                                                                       |
-| `clearOnRevocation`           | Cookies and storage keys to delete when a category is denied                                                                                                |
-| `reloadOnConsentRevoked`      | Reload the page after the visitor turns off a granted category or vendor. Defaults to `true`                                                                |
-| `consentCategories`           | Categories the preference dialog offers alongside those your scripts use, within the policy's scope                                                         |
-| `overrides`                   | Force the country, region or language the policy is resolved for, for testing                                                                               |
-| `user`                        | Link consent records to a signed-in user                                                                                                                    |
-| `callbacks`                   | Choice, permission and error events                                                                                                                         |
-| `i18n`                        | Languages and message overrides                                                                                                                             |
-| `legalLinks`                  | Privacy policy and other links shown in the banner and dialog                                                                                               |
-| `theme`                       | `consentActions` and slot styles. Tokens go through `ConsentTheme`; see [customize](../customize.md)                                                        |
-| `components`                  | Slot attributes per component part                                                                                                                          |
-| `presentation`                | Banner and dialog shape, position and blocking                                                                                                              |
-| `experiment`                  | A/B test of `presentation`, read once at mount. See [banner experiments](../../../guides/banner-experiments.md)                                             |
-| `journey`                     | Random id that links each `/init` to the save that follows. See [session reports](../../../concepts/data-fetching.md#link-an-init-to-the-save-that-follows) |
-| `colorScheme`                 | `'light'`, `'dark'`, `'system'`, or `null` to leave the `c15t-dark` class alone                                                                             |
-| `noStyle`, `disableAnimation` | Drop the built-in styles, or turn off animations                                                                                                            |
-| `preloadDialog`               | When the deferred `ConsentDialog` starts loading: `'idle'` (default) or `'intent'`; see [ConsentDialog](./consent-dialog.md#behavior)                       |
-| `nonce`                       | Content Security Policy nonce for script elements c15t inserts                                                                                              |
-| `enabled`                     | Set `false` only when you deliberately bypass consent enforcement                                                                                           |
+| Option                        | Purpose                                                                                                                                                                          |
+| ----------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `mode`                        | Required. `hosted({ url })` for a backend, `manifest()` from `@c15t/browser/headless` for a bundled policy, `offline()` for local policies, or `custom()` for your own transport |
+| `prefetch`                    | Server-resolved state, or a promise of it, from a framework adapter's server helper                                                                                              |
+| `scripts`                     | Consent-gated vendor scripts. See [scripts and embeds](../scripts.md)                                                                                                            |
+| `vendors`                     | Vendors listed under their category with their own switch. See [vendor consent](../vendor-consent.md)                                                                            |
+| `scriptLoader`                | Options for the script loader module                                                                                                                                             |
+| `networkBlocker`              | Rules that hold `fetch` and `XMLHttpRequest` calls until their category is allowed, or `false`                                                                                   |
+| `iframeBlocker`               | Gates DOM iframes that carry `data-category`. On by default; `false` turns it off                                                                                                |
+| `persistence`                 | Stores the visitor's choice in a cookie and localStorage. On by default                                                                                                          |
+| `storageConfig`               | Storage key and cookie settings for the stored choice                                                                                                                            |
+| `clearOnRevocation`           | Cookies and storage keys to delete when a category is denied                                                                                                                     |
+| `reloadOnConsentRevoked`      | Reload the page after the visitor turns off a granted category or vendor. Defaults to `true`                                                                                     |
+| `consentCategories`           | Categories the preference dialog offers alongside those your scripts use, within the policy's scope                                                                              |
+| `overrides`                   | Force the country, region or language the policy is resolved for, for testing                                                                                                    |
+| `user`                        | Link consent records to a signed-in user                                                                                                                                         |
+| `callbacks`                   | Choice, permission and error events                                                                                                                                              |
+| `i18n`                        | Languages and message overrides                                                                                                                                                  |
+| `legalLinks`                  | Privacy policy and other links shown in the banner and dialog                                                                                                                    |
+| `theme`                       | `consentActions` and slot styles. Tokens go through `ConsentTheme`; see [customize](../customize.md)                                                                             |
+| `components`                  | Slot attributes per component part                                                                                                                                               |
+| `presentation`                | Banner and dialog shape, position and blocking                                                                                                                                   |
+| `experiment`                  | A/B test of `presentation`, read once at mount. See [banner experiments](../../../guides/banner-experiments.md)                                                                  |
+| `journey`                     | Random id that links each `/init` to the save that follows. See [session reports](../../../concepts/data-fetching.md#link-an-init-to-the-save-that-follows)                      |
+| `colorScheme`                 | `'light'`, `'dark'`, `'system'`, or `null` to leave the `c15t-dark` class alone                                                                                                  |
+| `noStyle`, `disableAnimation` | Drop the built-in styles, or turn off animations                                                                                                                                 |
+| `preloadDialog`               | When the deferred `ConsentDialog` starts loading: `'idle'` (default) or `'intent'`; see [ConsentDialog](./consent-dialog.md#behavior)                                            |
+| `nonce`                       | Content Security Policy nonce for script elements c15t inserts                                                                                                                   |
+| `enabled`                     | Set `false` only when you deliberately bypass consent enforcement                                                                                                                |
 
 `enabled: false` grants categories and allows gated loading while suppressing
 consent UI. It is not a way to fix failed initialization or hide a banner in

package/docs/frameworks/react/components.md

@@ -36,20 +36,25 @@ Most apps start with four components. `ConsentProvider` holds the runtime,
 one file:
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>

package/docs/frameworks/react/quickstart.md

@@ -7,10 +7,11 @@ group: frameworks
 
 ## Before you start
 
-This guide sets up a client-rendered React app built with Vite. The browser
-loads the page, resolves the visitor's policy, then shows the banner or runs
-the scripts the visitor allowed. The build-time step bundles the public
-policy; regional policies may still need a backend location request.
+This guide sets up a client-rendered React app built with Vite. The build
+bundles your project's public policy. The browser loads the page, resolves the
+visitor's policy from that bundle, then shows the banner or runs the scripts
+the visitor allowed. Regional policies may still need a backend location
+request.
 
 * **Next.js or TanStack Start?** Use that framework's guide from the
   [framework list](https://c15t.com/docs/frameworks). Their adapters resolve consent on the
@@ -27,21 +28,65 @@ the backend URL.
 [Choose your setup](../../concepts/choose-your-setup.md#decide-who-runs-the-consent-backend)
 covers self-hosting and offline mode.
 
-Build-time manifests are the recommended production setup. Complete the
-[build-time manifest step](#bundle-the-manifest-during-builds) before
-deploying, and rebuild after changing policies, translations or vendors.
+Bundling the policy at build time is the recommended production setup.
+Rebuild after changing policies, translations or vendors.
 
 ## Install c15t
 
-| Package manager | Command                                           |
-| :-------------- | :------------------------------------------------ |
-| npm             | `npm install c15t@alpha @c15t/integrations@alpha` |
-| pnpm            | `pnpm add c15t@alpha @c15t/integrations@alpha`    |
-| yarn            | `yarn add c15t@alpha @c15t/integrations@alpha`    |
-| bun             | `bun add c15t@alpha @c15t/integrations@alpha`     |
+| Package manager | Command                                                               |
+| :-------------- | :-------------------------------------------------------------------- |
+| npm             | `npm install c15t@alpha @c15t/browser@alpha @c15t/integrations@alpha` |
+| pnpm            | `pnpm add c15t@alpha @c15t/browser@alpha @c15t/integrations@alpha`    |
+| yarn            | `yarn add c15t@alpha @c15t/browser@alpha @c15t/integrations@alpha`    |
+| bun             | `bun add c15t@alpha @c15t/browser@alpha @c15t/integrations@alpha`     |
 
-`c15t` contains the React adapter at `c15t/react`. `@c15t/integrations` holds the
-vendor loaders used below.
+`c15t` contains the React adapter at `c15t/react` and the Vite plugin at
+`c15t/build`. `@c15t/browser` resolves the bundled policy in the browser.
+`@c15t/integrations` holds the vendor loaders used below.
+
+## Bundle your policy
+
+Add `consentManifest` to `vite.config.ts`:
+
+```ts title="vite.config.ts"
+import react from '@vitejs/plugin-react';
+import { consentManifest } from 'c15t/build';
+import { defineConfig, loadEnv } from 'vite';
+
+export default defineConfig(({ mode }) => {
+	const env = loadEnv(mode, process.cwd(), 'VITE_');
+	return {
+		plugins: [
+			react(),
+			// Downloads the policy and writes src/c15t-manifest.ts.
+			consentManifest({
+				backendURL:
+					env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+			}),
+		],
+	};
+});
+```
+
+`https://benchmarks-inth.inth.app` is a demo project, so the snippet runs as
+is. Replace it with your project's backend URL, exactly as Inth shows it,
+including any path prefix, or set `VITE_C15T_BACKEND_URL` when you build.
+
+`consentManifest` downloads your project's public policy from `/manifest` when
+`vite build` or `vite dev` starts, and writes it to `src/c15t-manifest.ts`.
+Add that file to `.gitignore`.
+
+The snapshot is fixed at build time:
+
+* Rebuild after changing policies, translations or vendors. If your CI caches
+  build output, force a fresh build.
+* The build must reach the backend. A failed fetch fails the build.
+* Consent choices still go to the backend.
+
+Run `vite build` or `vite dev` before a standalone `tsc`, `vue-tsc` or
+`svelte-check`; the generated file doesn't exist on a fresh checkout. Both
+commands fetch the manifest when they start, so both need the backend.
+`vite preview` serves the last build without fetching.
 
 ## Register your vendor scripts
 
@@ -77,20 +122,25 @@ asks for them, and `ConsentDialogLink` keeps preferences reachable after the
 banner closes.
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>
@@ -104,8 +154,17 @@ export const Consent = ({ children }: { children: ReactNode }) => (
 );
 ```
 
-Replace `https://your-project.inth.app` with your project's backend URL,
-exactly as Inth shows it, including any path prefix.
+`manifest()` resolves the policy from the bundled snapshot in the browser,
+with no `/manifest` request. Use the same backend URL as in
+`vite.config.ts`: consent choices go to it, and so does an `/init` request
+when the policy depends on the visitor's country or region and the browser
+does not know it. That request returns the backend's current policy, which can
+be newer than the snapshot. Vite reads `VITE_C15T_BACKEND_URL` at build time
+for both files, so set it before you build, not when you serve the files.
+
+To apply policy edits without rebuilding, remove `consentManifest` and use
+`hosted({ url })` from `c15t/react` as the mode. The browser then requests the
+policy from `/init` on every page load.
 
 Wrap your app with it in `src/main.tsx`:
 
@@ -131,66 +190,6 @@ router, render the router inside `Consent` so navigation does not remount the
 provider. The stylesheet import in `src/consent.tsx` styles the banner and
 dialog; import it once.
 
-## Bundle the manifest during builds
-
-The build fetches your public policy once and bundles it, so the server never
-fetches it at runtime.
-
-Add `consentManifest` to your existing Vite plugin list:
-
-```ts title="vite.config.ts (plugins option)"
-import { consentManifest } from 'c15t/build';
-
-export default {
-	plugins: [
-		// Keep your existing framework plugins here.
-		consentManifest({ backendURL: 'https://your-project.inth.app' }),
-	],
-};
-```
-
-Vite writes `src/c15t-manifest.ts` before compiling, including at development
-startup. Keep the generated file out of Git. Install `@c15t/browser@alpha` for
-its browser manifest transport. In the quickstart's `src/consent.tsx`, replace
-the `hosted()` mode with this factory:
-
-```tsx title="src/consent.tsx"
-import { manifest } from '@c15t/browser/headless';
-
-import { consentManifest } from './c15t-manifest';
-
-const mode = manifest({
-	backendURL: 'https://your-project.inth.app',
-	manifest: consentManifest,
-});
-```
-
-Keep passing `mode` to `ConsentProvider`. The browser resolves the snapshot
-without `/manifest` when it has the geography the policy needs, or the policy
-does not depend on geography. Supply known country and region through `inputs`
-or overrides to keep regional resolution on the snapshot.
-
-When the required country or region is missing, the transport calls backend
-`/init` and uses its resolved policy and translations. That response can use
-newer backend policy than the build snapshot. This is a full consent resolution,
-so these visitors still wait for a backend round trip.
-
-Policy and resolver code are part of the browser bundle.
-
-The snapshot is fixed at build time:
-
-* Rebuild after changing policies, translations or vendors. If your CI caches
-  build output, force a fresh build.
-* The build must reach the backend. A failed fetch fails the build.
-* Consent choices still go to the backend.
-
-Run `vite build` or `vite dev` before a standalone `tsc`, `vue-tsc` or
-`svelte-check`; the generated file doesn't exist on a fresh checkout.
-
-For policy updates without a rebuild, keep the original `hosted()` factory
-and omit the build plugin. That setup resolves policy through the backend
-`/init` on each page load.
-
 ## Gate your own features
 
 Read a category's permission with `useConsent` inside the provider:
@@ -215,8 +214,8 @@ Build and preview the production bundle with `vite build` and `vite preview`,
 then open the site in a private window with DevTools open on the Network tab.
 Test under a policy that asks for a choice, such as an EU opt-in policy.
 
-1. **Before a choice.** The banner shows. There are no requests to
-   `posthog.com`.
+1. **Before a choice.** The banner shows, with no `/manifest` request. There
+   are no requests to `posthog.com`.
 2. **Reject All.** The banner closes and the vendor requests stay absent.
 3. **Reload.** The banner stays closed and the vendor requests stay absent.
 4. **Privacy settings.** The footer link opens the dialog with **Analytics** (the

package/docs/frameworks/react/rendering.md

@@ -25,6 +25,9 @@ explains the difference in general terms.
 
 ## Bundle the manifest during Vite builds
 
+The [quickstart](./quickstart.md) and `examples/react` in
+the c15t repository use this setup.
+
 The build fetches your public policy once and bundles it, so the server never
 fetches it at runtime.
 
@@ -43,8 +46,8 @@ export default {
 
 Vite writes `src/c15t-manifest.ts` before compiling, including at development
 startup. Keep the generated file out of Git. Install `@c15t/browser@alpha` for
-its browser manifest transport. In the quickstart's `src/consent.tsx`, replace
-the `hosted()` mode with this factory:
+its browser manifest transport. In `src/consent.tsx`, create the provider's
+mode with `manifest()` instead of `hosted()`:
 
 ```tsx title="src/consent.tsx"
 import { manifest } from '@c15t/browser/headless';
@@ -77,19 +80,21 @@ The snapshot is fixed at build time:
 * Consent choices still go to the backend.
 
 Run `vite build` or `vite dev` before a standalone `tsc`, `vue-tsc` or
-`svelte-check`; the generated file doesn't exist on a fresh checkout.
+`svelte-check`; the generated file doesn't exist on a fresh checkout. Both
+commands fetch the manifest when they start, so both need the backend.
+`vite preview` serves the last build without fetching.
 
-For policy updates without a rebuild, keep the original `hosted()` factory
-and omit the build plugin. That setup resolves policy through the backend
-`/init` on each page load.
+For policy updates without a rebuild, use `hosted({ url })` from `c15t/react`
+as the mode and omit the build plugin. That setup resolves policy through the
+backend `/init` on each page load.
 
 ## Client-rendered apps
 
 The recommended [quickstart](./quickstart.md) bundles the
 manifest and resolves it in the browser. See [build-time manifests](#bundle-the-manifest-during-vite-builds).
 
-For policy updates without rebuilding, keep `hosted({ url })`. That runtime
-path works as follows:
+For policy updates without rebuilding, use `hosted({ url })` from
+`c15t/react` as the mode. That runtime path works as follows:
 
 1. The page loads with no consent state. Every optional category is denied.
 2. `ConsentProvider` requests `GET /init` from your backend URL while it first
@@ -182,7 +187,12 @@ With `hosted({ url })`, the browser calls two backend endpoints:
 | `GET {url}/init`      | Once per page load, to resolve the policy  |
 | `POST {url}/subjects` | When the visitor accepts, rejects or saves |
 
-Both go to the backend's origin, so it must list your site as a trusted origin.
+With a bundled manifest, `manifest({ backendURL })` sends the same
+`/subjects` request, and requests `/init` only when the policy depends on a
+country or region the browser does not know.
+
+These requests go to the backend's origin, so it must list your site as a
+trusted origin.
 [Data fetching](../../concepts/data-fetching.md) compares this with proxies and
 custom transports.
 

package/docs/frameworks/react/scripts.md

@@ -28,20 +28,25 @@ export const scripts = [
 The provider in `src/consent.tsx` receives them:
 
 ```tsx title="src/consent.tsx"
+import { manifest } from '@c15t/browser/headless';
 import {
 	ConsentBanner,
 	ConsentDialog,
 	ConsentDialogLink,
 	ConsentProvider,
-	hosted,
 } from 'c15t/react';
 import type { ReactNode } from 'react';
 
+import { consentManifest } from './c15t-manifest';
 import { scripts } from './scripts';
 
 import 'c15t/react/styles.css';
 
-const mode = hosted({ url: 'https://your-project.inth.app' });
+const mode = manifest({
+	backendURL:
+		import.meta.env.VITE_C15T_BACKEND_URL ?? 'https://benchmarks-inth.inth.app',
+	manifest: consentManifest,
+});
 
 export const Consent = ({ children }: { children: ReactNode }) => (
 	<ConsentProvider options={{ mode, scripts }}>

package/docs/frameworks/react/troubleshooting.md

@@ -5,25 +5,40 @@ description: Fix a missing banner, early vendor requests, unstyled components
 group: frameworks
 ---
 
-## The /init request goes to your-project.inth.app
+## Why does the build fail to download the manifest?
 
-**Check.** In DevTools Network, the `GET` request to `/init` goes to
-`your-project.inth.app` and fails.
+**Check.** `vite build` or `vite dev` stops before compiling, with an error
+from `consentManifest` that starts with `@c15t/core/build:`.
 
-**Fix.** Replace the placeholder URL in `hosted({ url })` in `src/consent.tsx`
-with the backend URL from your Inth project, exactly as Inth shows it, then
-rebuild.
+| Error                                                    | Cause                                                                                                                           | Fix                                                                                  |
+| -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
+| `build-time manifests require an absolute upstream URL.` | `backendURL` is empty or relative, such as `/api/c15t`                                                                          | Pass the absolute backend URL from your Inth project                                 |
+| `build-time manifests require an http(s) upstream URL.`  | `backendURL` uses another protocol                                                                                              | Use the `https://` URL Inth shows                                                    |
+| `/manifest responded 404`                                | The URL is not your project's backend, such as the `https://your-project.inth.app` placeholder or a URL missing its path prefix | Copy the backend URL exactly as Inth shows it, or set `VITE_C15T_BACKEND_URL`        |
+| `/manifest returned an invalid consent manifest.`        | The URL answered with something other than a consent manifest, such as an HTML page                                             | Point `backendURL` at the backend itself, not your site or a dashboard page          |
+| `fetch failed`                                           | The build cannot reach the backend                                                                                              | Build where the backend is reachable. A failed download never reuses an old snapshot |
+
+## Why can't TypeScript find ./c15t-manifest?
+
+**Check.** `tsc`, `vue-tsc` or your editor reports that it cannot find the
+module `./c15t-manifest`, on a fresh checkout or in CI.
+
+**Fix.** `consentManifest` writes `src/c15t-manifest.ts` when `vite build` or
+`vite dev` starts, and the file is not in Git. Run one of them before the type
+check. In CI, run the build first, or cache the generated file with the build
+output.
 
 ## There is no banner
 
 **Check.** In DevTools Network, find the `GET` request to `/init` on your
-backend URL.
-
-| What you see                    | Cause                                                                                  | Fix                                                                                                           |
-| ------------------------------- | -------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- |
-| No `/init` request              | `ConsentProvider` is not mounted, or an error stopped `src/consent.tsx` from rendering | Check the console for errors and render one provider at the app root, as in the [quickstart](./quickstart.md) |
-| `/init` fails with a CORS error | Your site's origin is not trusted                                                      | Add the exact origin, including port in development, to the trusted origins in your Inth project              |
-| `/init` returns 200             | The policy for this visitor asks for no banner, or a stored choice is still valid      | Inspect the active policy with the component below, or clear site data                                        |
+backend URL. With the bundled manifest, the browser makes no request before
+the banner unless the policy depends on a country or region it does not know.
+
+| What you see                    | Cause                                                                                                                         | Fix                                                                                                                                                               |
+| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| No request and no banner        | `ConsentProvider` is not mounted, an error stopped `src/consent.tsx` from rendering, or the bundled policy asks for no banner | Check the console for errors, render one provider at the app root as in the [quickstart](./quickstart.md), and inspect the active policy with the component below |
+| `/init` fails with a CORS error | Your site's origin is not trusted                                                                                             | Add the exact origin, including port in development, to the trusted origins in your Inth project                                                                  |
+| `/init` returns 200             | The policy for this visitor asks for no banner, or a stored choice is still valid                                             | Inspect the active policy with the component below, or clear site data                                                                                            |
 
 A policy with `prompt: 'none'` shows no banner by design, and so does a
 returning visitor with a valid stored choice. [Policies](../../concepts/policies.md)

package/docs/guides/banner-experiments.md

@@ -258,7 +258,7 @@ import { resolveConsent } from 'c15t/next/server';
 import { Suspense } from 'react';
 import type { ReactNode } from 'react';
 
-import { consentConfig } from '@/c15t.config';
+import { consentOptions } from '@/c15t.server';
 import { ExperimentConsent } from '@/components/experiment-consent';
 import { bannerExperiment } from '@/lib/experiment';
 import { bannerExperimentFlag } from '@/lib/flags';
@@ -268,7 +268,7 @@ import '@/styles/globals.css';
 const ResolvedConsent = async ({ children }: { children: ReactNode }) => {
 	const arm = await bannerExperimentFlag();
 	const state = await resolveConsent({
-		config: consentConfig,
+		...consentOptions,
 		// `off` keeps this visitor out of the experiment.
 		experiment: arm === 'off' ? undefined : { ...bannerExperiment, arm },
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@c15t/react",
-	"version": "3.0.0-alpha.7",
+	"version": "3.0.0-alpha.8",
 	"description": "React cookie banner, consent manager, preference center, and headless CMP components with IAB TCF and Consent Mode support.",
 	"keywords": [
 		"ccpa",
@@ -254,16 +254,16 @@
 		"test:watch": "bun prebuild && vitest"
 	},
 	"dependencies": {
-		"@c15t/core": "3.0.0-alpha.7",
-		"@c15t/dev-tools": "3.0.0-alpha.7",
-		"@c15t/iab": "3.0.0-alpha.7",
-		"@c15t/schema": "3.0.0-alpha.6",
+		"@c15t/core": "3.0.0-alpha.8",
+		"@c15t/dev-tools": "3.0.0-alpha.8",
+		"@c15t/iab": "3.0.0-alpha.8",
+		"@c15t/schema": "3.0.0-alpha.7",
 		"@c15t/translations": "3.0.0-alpha.6",
-		"@c15t/ui": "3.0.0-alpha.7",
+		"@c15t/ui": "3.0.0-alpha.8",
 		"@types/google.maps": "3.65.3"
 	},
 	"devDependencies": {
-		"@c15t/backend": "3.0.0-alpha.7",
+		"@c15t/backend": "3.0.0-alpha.8",
 		"@c15t/conformance": "0.0.1",
 		"@c15t/typescript-config": "0.0.1",
 		"@c15t/vitest-config": "1.0.0",