@c15t/scripts 3.0.0-alpha.1 → 3.0.0-alpha.2

package/docs/guides/shared-consent-controls.md

@@ -0,0 +1,158 @@
+---
+title: Share consent controls across frameworks
+description: Use the same c15t script lifecycle, external consent source, and
+  event controls in every framework.
+group: guides
+---
+
+## Choose one consent authority
+
+c15t owns script loading, consent gates, lifecycle callbacks, and optional cleanup
+through its framework-independent core. React, Vue, Svelte, Astro, and the browser
+client connect to that core. Next.js and TanStack Start use the React provider;
+Nuxt uses Vue; SvelteKit uses Svelte. None requires Astro for these controls.
+
+With c15t as the consent authority, keep your framework's hosted, self-hosted, or
+offline setup. Offline mode keeps choices in the browser; a hosted backend can
+store records. The script SDK and event dispatcher work with either mode.
+
+To keep another CMP, provide a `consentSource`. It owns the banner, preferences,
+records, expiration, privacy signals, and category mapping. c15t follows its
+current permissions without creating a second choice record. Optional categories
+start denied, including during SSR. An unavailable source or a failed read denies
+them again. Initialize the CMP independently, or register its loader as an
+explicitly early-loading script so it does not wait for its own consent.
+
+The source contract is exported from `@c15t/core/runtime`:
+
+```ts title="src/consent-source.ts — adapter skeleton"
+import type { ExternalConsentSource } from 'c15t/runtime';
+import { provider } from './existing-cmp';
+
+export const consentSource: ExternalConsentSource = {
+  getPermissions: () => provider.getCategoryPermissions(),
+  subscribe: (notify) => provider.subscribe(notify),
+  openPreferences: () => provider.openPreferences(),
+};
+```
+
+`provider` is your application's adapter for the existing CMP, not a c15t export.
+Map its categories to c15t's `measurement`, `marketing`, `functionality`, and
+`experience` booleans. Missing categories are denied; `necessary` stays true.
+Return `null` until the CMP is ready. `subscribe` must notify on initialization,
+changes, withdrawal, and expiration, and return a function that removes listeners.
+Keep browser access inside these functions so importing the adapter during SSR is safe.
+
+If `subscribe` throws, c15t reports the failure through `callbacks.onError` and
+continues startup with optional categories denied. The failed connection ignores
+later notifications and does not forward preference requests. Recreate the owner
+after the CMP is available to connect again.
+
+## Pass the controls to your framework
+
+The `consentSource` option is available at these registration points. Register your SDK configurations through the same owner's
+`scripts` option. Do not create an additional runtime beside an existing provider.
+
+| Framework                   | Registration point                                                                                                             |
+| --------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
+| React                       | `ConsentProvider options={{ mode, consentSource, scripts }}`                                                                   |
+| Next.js / TanStack Start    | `ConsentRoot options={{ consentSource }}` with `scripts` as a top-level prop; `ConsentProvider` also accepts the React options |
+| Vue                         | `app.use(c15tVue, { consentSource, scripts })`                                                                                 |
+| Nuxt                        | `app.config.ts` → `c15t: { consentSource, scripts }`                                                                           |
+| Svelte / SvelteKit          | `ConsentManagerProvider` options or corresponding top-level props                                                              |
+| Astro                       | `clientOptions.consentSource`                                                                                                  |
+| Browser client              | `createConsentClient({ consentSource, scripts })`                                                                              |
+| Headless JavaScript / Solid | `createConsentRuntime({ mode, consentSource, scripts })`                                                                       |
+
+For example, a React client boundary can use the source directly:
+
+```tsx title="src/Consent.tsx"
+'use client';
+
+import type { ReactNode } from 'react';
+import { ConsentProvider, offline, useSetActiveUI } from 'c15t/react';
+import { googleTagManager } from '@c15t/scripts/google-tag-manager';
+import { consentSource } from './consent-source';
+
+const mode = offline();
+const scripts = [googleTagManager({ id: 'GTM-EXAMPLE' })];
+
+function Preferences() {
+  const setActiveUI = useSetActiveUI();
+  return <button type="button" onClick={() => setActiveUI('dialog')}>Privacy settings</button>;
+}
+
+export function Consent({ children }: { children: ReactNode }) {
+  return (
+    <ConsentProvider options={{ mode, consentSource, scripts }}>
+      {children}
+      <Preferences />
+    </ConsentProvider>
+  );
+}
+```
+
+Replace the container ID. `mode` remains required by the provider API, but an
+external source bypasses c15t backend initialization and persistence. Omit c15t's
+banner and dialog. Preference links, hooks, and `kernel.set.activeUI('dialog')`
+delegate to the source. Preference-opening failures reach `callbacks.onError`;
+`kernel.commands.save()` rejects instead of recording a second choice.
+
+In Next.js, construct the source in the client boundary; do not pass functions
+from a Server Component. Existing `ConsentRoot` state can stay serializable, but
+c15t records do not establish external permissions. A client-owned
+`ConsentProvider` avoids a redundant server consent fetch for external-only setups.
+For Nuxt, use `app.config.ts` for the functions, not serialized public runtime
+configuration; the module skips its consent fetch and record hydration when a
+source is configured. Browser access remains deferred until mount.
+
+Solid currently ships UI primitives, not a lifecycle provider. Create the core
+runtime once, call `start()` from `onMount`, and `dispose()` from `onCleanup`.
+Other frameworks' providers perform that lifecycle automatically. A provider given
+an existing `runtime` borrows it: configure controls on the runtime owner, which
+also owns starting and disposing it.
+
+## Handle withdrawal and application events
+
+When the source withdraws an optional category that was granted, c15t reloads
+the page, as it does when a visitor revokes consent in c15t's own UI. Removing a
+script element cannot stop JavaScript that already ran, so the reload starts a
+page with only permitted code. The reload runs in the next task, after
+synchronous consent callbacks and `onBeforeConsentRevocationReload`. Disposing
+the owner cancels a pending reload.
+
+c15t cannot tell a visitor's withdrawal from expiry or a reset in the CMP, so
+any notification that turns off a granted category reloads. The CMP owns
+persistence: store the new decision before notifying c15t, or the reloaded page
+reads the old one. Set `reloadOnConsentRevoked: false` to handle withdrawal
+yourself. c15t still updates gates and calls script consent callbacks.
+
+`createEventDispatcher` from `@c15t/scripts/events` also has no framework dependency:
+
+```ts title="src/events.ts — attach to an existing runtime"
+import { createEventDispatcher } from '@c15t/scripts/events';
+
+const events = createEventDispatcher({
+  scripts,
+  getSnapshot: () => runtime.kernel.getSnapshot(),
+});
+events.track('docs_search', { resultCount: 4 });
+```
+
+Here `scripts` is the same configuration registered with the existing `runtime`.
+For a provider-owned kernel, use that kernel's live `getSnapshot` instead. The
+dispatcher sends only to configured integrations with supported event APIs when
+measurement and the script's own consent condition allow it. It discards denied
+events, isolates vendor failures, and deduplicates explicitly configured SPA
+pageviews. It does not subscribe to a framework router: notify it from your
+router's navigation hook. Use vendor-specific helpers for APIs outside the shared
+event contract.
+
+## Verify the integration
+
+Test an undecided visitor, an existing grant, withdrawal, expiry, and a source
+that cannot be read. Check that only permitted scripts execute, the preference
+control opens the existing CMP, c15t does not render another banner or persist
+another receipt, and unmounting removes the source listeners. Test your actual
+CMP category mapping and tag-manager container; shared gates do not validate
+those configurations or establish compliance by themselves.

package/docs/integrations/adobe-analytics.md

@@ -196,7 +196,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/ahrefs-analytics.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/amplitude.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/clearbit.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/cloudflare-web-analytics.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/cloudflare-zaraz.md

@@ -249,7 +249,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/crisp.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/databuddy.md

@@ -200,7 +200,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/fathom-analytics.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/front-chat.md

@@ -0,0 +1,322 @@
+---
+title: Front Chat
+description: Load the Front Chat widget with functionality permission, forward
+  CSP nonces and clear the session on revocation.
+group: integrations
+---
+
+## Configure Front Chat
+
+Copy the `chatId` from the widget snippet in your Front Chat channel's
+**Installation** tab. The helper loads Front's SDK once functionality permission
+is granted, then calls `FrontChat('init')` with your chat ID.
+
+| Package manager | Command                     |
+| :-------------- | :-------------------------- |
+| npm             | `npm install @c15t/scripts` |
+| pnpm            | `pnpm add @c15t/scripts`    |
+| yarn            | `yarn add @c15t/scripts`    |
+| bun             | `bun add @c15t/scripts`     |
+
+```ts title="src/consent-scripts.ts"
+import { frontChat } from '@c15t/scripts/front-chat';
+
+export const scripts = [frontChat({ chatId: 'YOUR_FRONT_CHAT_ID' })];
+```
+
+## Register the scripts
+
+Complete your [framework quickstart](https://c15t.com/docs/frameworks) first. Keep its Inth
+endpoint, policy, styles and consent UI. Remove the vendor's original script,
+SDK initializer or tag-manager entry so c15t owns loading once.
+
+The `scripts` export in `src/consent-scripts.ts` is a configuration, not an
+initializer. Add it to your existing consent owner using the registration point
+below. These are partial edits to that owner, not additional providers.
+
+**Next.js**
+
+Import the configuration into the client boundary from your router guide:
+
+```ts
+import { ConsentRoot } from 'c15t/next';
+import { scripts } from './consent-scripts';
+```
+
+Keep the server-resolved `state` and shared `consentConfig` from your
+router guide. Its manifest, init and save URLs stay in effect. Add
+`scripts` as a top-level prop on the existing root:
+
+```tsx
+<ConsentRoot state={state} config={consentConfig} scripts={scripts}>
+  {children}
+</ConsentRoot>
+```
+
+For a Pages Router or static-export setup using `ConsentProvider`, add
+`scripts` to its existing `options` instead. Keep the router-specific setup
+from [Next.js script loading](../frameworks/next/script-loader.md).
+
+**TanStack Start**
+
+In your existing root route component, import the scripts alongside
+`ConsentRoot`. Keep the server loader from the [TanStack Start quickstart](https://c15t.com/docs/frameworks/tanstack-start/quickstart).
+
+```tsx
+import { Outlet } from '@tanstack/react-router';
+import { ConsentRoot } from 'c15t/tanstack-start';
+import { scripts } from '../consent-scripts';
+
+function Root() {
+  const state = Route.useLoaderData();
+  return (
+    <ConsentRoot state={state} backendURL={backendURL} initRoute={false} scripts={scripts}>
+      <Outlet />
+      {/* Keep your consent banner, dialog and preferences link here. */}
+    </ConsentRoot>
+  );
+}
+```
+
+This edits the existing route. `Route` and `backendURL` come from its setup;
+keep the document shell and head components if they are part of your root.
+`initRoute={false}` keeps the quickstart's direct-backend initialization.
+If your app mounts a consent server route, retain its existing `initRoute`
+instead. Do not return script callbacks from a server function or route loader.
+
+**React**
+
+Import the scripts into your existing provider component:
+
+```ts
+import { ConsentProvider } from 'c15t/react';
+import { scripts } from './consent-scripts';
+```
+
+Keep the existing options and add `scripts`:
+
+```tsx
+<ConsentProvider options={{ ...consentOptions, scripts }}>
+  {children}
+</ConsentProvider>
+```
+
+Here `consentOptions` is your existing configuration, including
+`mode: hosted({ url: backendURL })`. Keep the banner, dialog and preferences
+link inside the provider. See [React script loading](../frameworks/react/script-loader.md).
+
+**Nuxt**
+
+Attach one loader from the root `app.vue`, after the Nuxt module has
+started its browser runtime. This keeps vendor callbacks in application code rather
+than serialized `nuxt.config.ts` runtime configuration.
+
+```vue title="app/app.vue"
+<script setup lang="ts">
+import { onUnmounted } from 'vue';
+import { createScriptLoader } from 'c15t/modules/script-loader';
+import { scripts } from '../src/consent-scripts';
+
+const nuxtApp = useNuxtApp();
+const kernel = useConsentKernel();
+let loader: ReturnType<typeof createScriptLoader> | undefined;
+
+const removeMountedHook = nuxtApp.hook('app:mounted', () => {
+  loader = createScriptLoader({ kernel, scripts });
+});
+onUnmounted(() => {
+  removeMountedHook();
+  loader?.dispose();
+});
+</script>
+
+<template>
+  <ConsentRoot />
+  <NuxtPage />
+</template>
+```
+
+Merge the setup code into your root and retain its footer and preferences
+link. `useConsentKernel` is auto-imported by the c15t Nuxt module. Adjust the
+relative script import if your `app.vue` is at the project root. This loader
+waits until the module has applied browser persistence and privacy signals,
+then reads the current snapshot and observes future changes. Do not also register these scripts
+in another loader. See the [Nuxt quickstart](https://c15t.com/docs/frameworks/nuxt/quickstart).
+
+**Vue**
+
+Use the kernel already provided by the Vue plugin. Merge this setup into
+`App.vue`, whose lifetime covers the application:
+
+```vue title="src/App.vue"
+<script setup lang="ts">
+import { onMounted, onUnmounted } from 'vue';
+import { createScriptLoader } from 'c15t/modules/script-loader';
+import { useConsentKernel } from 'c15t/vue/vue-plugin';
+import ConsentRoot from 'c15t/vue/consent-root';
+import { scripts } from './consent-scripts';
+
+const kernel = useConsentKernel();
+let loader: ReturnType<typeof createScriptLoader> | undefined;
+
+onMounted(() => {
+  loader = createScriptLoader({ kernel, scripts });
+});
+onUnmounted(() => loader?.dispose());
+</script>
+
+<template>
+  <ConsentRoot />
+  <main>Your application</main>
+</template>
+```
+
+Keep your existing page content and preferences link. The plugin still owns
+the kernel and persistence; this component owns only the vendor loader.
+Do not register the same scripts in plugin configuration as well. See the
+[Vue quickstart](https://c15t.com/docs/frameworks/vue/quickstart).
+
+**Astro**
+
+Point the existing Astro integration at a client module. Keep its `mode`,
+`ui` and framework integration from the [Astro quickstart](https://c15t.com/docs/frameworks/astro/quickstart).
+Import `fileURLToPath` in your Astro configuration:
+
+```js title="astro.config.mjs"
+import { fileURLToPath } from 'node:url';
+```
+
+Add this option to the existing `c15t({ ... })` call. Resolve the path from
+the configuration file because Astro injects the import into a virtual module:
+
+```js
+clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)),
+```
+
+Export the scripts from that module:
+
+```ts title="src/c15t.client.ts"
+import type { C15tClientOptionsExtension } from 'c15t/astro';
+import { scripts } from './consent-scripts';
+
+export default { scripts } satisfies C15tClientOptionsExtension;
+```
+
+The integration passes this extension to its shared browser runtime. Vendor
+helpers contain callbacks, so do not put them in the serialized `scripts`
+option in `astro.config.mjs`. Keep one runtime across consent islands and
+`ClientRouter` navigation.
+
+**Svelte**
+
+Import the scripts in the component that owns your existing provider and
+pass them as a top-level prop:
+
+```svelte title="src/App.svelte"
+<script lang="ts">
+  import { ConsentManagerProvider, hosted } from '@c15t/svelte';
+  import { scripts } from './consent-scripts';
+
+  const backendURL = import.meta.env.VITE_C15T_BACKEND_URL;
+  if (!backendURL) throw new Error('Set VITE_C15T_BACKEND_URL');
+  const mode = hosted({ url: backendURL });
+</script>
+
+<ConsentManagerProvider {mode} {scripts}>
+  <!-- Keep your application, consent UI and preferences link here. -->
+</ConsentManagerProvider>
+```
+
+Retain the styles and consent UI from the [Svelte quickstart](https://c15t.com/docs/frameworks/svelte/quickstart).
+The provider owns the loader and disposes it on unmount.
+
+**SvelteKit**
+
+Add the scripts to the existing root layout provider. Keep the server load
+and its serializable prefetch data from the [SvelteKit quickstart](https://c15t.com/docs/frameworks/sveltekit/quickstart).
+
+```svelte title="src/routes/+layout.svelte"
+<script lang="ts">
+  import { ConsentManagerProvider, hosted } from '@c15t/svelte';
+  import { scripts } from '../consent-scripts';
+
+  let { children, data } = $props();
+  const mode = hosted({ url: data.backendURL });
+</script>
+
+<ConsentManagerProvider {mode} {scripts} prefetch={data.prefetch}>
+  {@render children()}
+  <!-- Keep your consent UI and preferences link here. -->
+</ConsentManagerProvider>
+```
+
+Import vendor helpers in the layout component, not in `+layout.server.ts`.
+For static hosting, keep your browser-only `mode` setup and omit request
+prefetch; the `scripts` prop stays the same. If you pass an externally owned
+`runtime` to the provider, register scripts when creating that runtime instead.
+
+**JavaScript**
+
+Attach the loader to your existing kernel before calling
+`kernel.commands.init()`:
+
+```ts
+import { createScriptLoader } from 'c15t/modules/script-loader';
+import { scripts } from './consent-scripts';
+
+const loader = createScriptLoader({ kernel, scripts });
+```
+
+Call `loader.dispose()` when that application instance is destroyed.
+`kernel` is the hosted kernel from your quickstart. A provider-owned kernel
+already has a loader; do not attach a second one. See
+[JavaScript script loading](../frameworks/javascript/script-loader.md).
+
+## Options
+
+| Option               | Behavior                                                                                                                                                                  |
+| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `chatId`             | Required public chat ID. An empty value throws.                                                                                                                           |
+| `useDefaultLauncher` | Shows Front's launcher. Defaults to `true`. With `false`, open the widget from your own launcher through Front's [SDK](https://dev.frontapp.com/docs/chat-sdk-reference). |
+| `nonce`              | CSP nonce for the loader and Front's generated scripts. A loader-level nonce from your provider is forwarded too.                                                         |
+| `scriptSrc`          | Defaults to `https://chat-assets.frontapp.com/v1/chat.bundle.js`. A proxy here does not proxy the widget's other requests.                                                |
+
+Front creates more resources for the widget. Follow Front's
+[CSP instructions](https://help.front.com/en/articles/2049) for the rest of the
+policy.
+
+## Consent behavior
+
+The widget waits for functionality permission. When a visitor revokes it, c15t
+reloads the page, which removes the running widget. Keep
+`reloadOnConsentRevoked` enabled: removing the loader cannot stop a widget that
+already initialized.
+
+To also clear the visitor's Front session, call `shutdownFrontChat()` from
+`onBeforeConsentRevocationReload`:
+
+```ts
+import { shutdownFrontChat } from '@c15t/scripts/front-chat';
+
+const callbacks = {
+	onBeforeConsentRevocationReload: ({ preferences }) => {
+		if (!preferences.functionality) {
+			shutdownFrontChat();
+		}
+	},
+};
+```
+
+It sends Front's `shutdown` command with `clearSession: true` when the SDK has
+loaded. Front returns no completion signal, so the reload does not wait for the
+session to clear.
+
+## Verify the integration
+
+Reject functionality permission and confirm the loader is absent. Grant it and
+confirm the widget opens and connects to your Front inbox. Then revoke it and
+confirm the page reloads without the widget. Keep another support contact
+available while chat is blocked.
+
+Removing a script cannot undo requests that already ran. Follow the
+[consent verification guide](../guides/verify-consent.md).

package/docs/integrations/google-maps.md

@@ -175,7 +175,7 @@ Add this component to pages using your consent-enabled base layout:
 <c15t-consent-embed style="display: block"></c15t-consent-embed>
 
 <script>
-  import { getConsentClient } from '@c15t/astro/client';
+  import { getConsentClient } from 'c15t/astro/client';
   import { mountConsentEmbed } from '../consent-embed';
 
   class ConsentEmbed extends HTMLElement {

package/docs/integrations/google-tag-manager.md

@@ -196,7 +196,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/google-tag.md

@@ -198,7 +198,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/granular-consent.md

@@ -80,7 +80,9 @@ loads  =  category condition satisfied  AND  vendor not denied
 ```
 
 The category is evaluated first, so an unknown category still throws as a
-configuration error. A vendor toggle never grants a category on its own: with
+configuration error. The iframe blocker is the exception: an `<iframe>` with an
+unknown `data-category` stays blocked and logs a console warning, so one typo
+can't stop the other iframes on the page from being gated. A vendor toggle never grants a category on its own: with
 marketing denied, `meta-pixel` stays blocked whatever its own switch says.
 A script with `alwaysLoad` still mounts, as it does for a denied category;
 its callbacks receive the vendor result in `info.vendor.granted` so a

package/docs/integrations/heap.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/hightouch.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/hotjar.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/intercom.md

@@ -197,7 +197,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;

package/docs/integrations/linkedin-insights.md

@@ -194,7 +194,7 @@ clientEntrypoint: fileURLToPath(new URL('./src/c15t.client.ts', import.meta.url)
 Export the scripts from that module:
 
 ```ts title="src/c15t.client.ts"
-import type { C15tClientOptionsExtension } from '@c15t/astro';
+import type { C15tClientOptionsExtension } from 'c15t/astro';
 import { scripts } from './consent-scripts';
 
 export default { scripts } satisfies C15tClientOptionsExtension;