@cookiemunch/sdk 0.0.0-stage → 0.1.1

package/dist/index.cjs

@@ -0,0 +1,475 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  CONSENT_COOKIE_NAME: () => CONSENT_COOKIE_NAME,
+  CookieMunchApiError: () => CookieMunchApiError,
+  createCookieMunch: () => createCookieMunch,
+  getConsent: () => getConsent,
+  isAllowed: () => isAllowed,
+  parseConsentValue: () => parseConsentValue,
+  readConsent: () => readConsent,
+  verifyWebhookSignature: () => verifyWebhookSignature
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/consent.ts
+var CONSENT_COOKIE_NAME = "CookieMunch";
+function cookieHeaderOf(src) {
+  if (typeof src === "string") return src;
+  if (!src || typeof src !== "object") return "";
+  const h = src.headers;
+  if (!h) return "";
+  if (typeof h.get === "function") {
+    return h.get("cookie") ?? "";
+  }
+  const c = h.cookie;
+  return typeof c === "string" ? c : "";
+}
+function cookieValue(header, name) {
+  for (const part of header.split(";")) {
+    const eq = part.indexOf("=");
+    if (eq === -1) continue;
+    if (part.slice(0, eq).trim() === name) return part.slice(eq + 1).trim();
+  }
+  return null;
+}
+function bool(v) {
+  return typeof v === "boolean";
+}
+function decode(raw) {
+  try {
+    return decodeURIComponent(raw);
+  } catch {
+    return raw;
+  }
+}
+function normalize(o) {
+  if (!o || typeof o !== "object") return null;
+  const r = o;
+  if (!bool(r.preferences) || !bool(r.statistics) || !bool(r.marketing)) return null;
+  if (r.method !== "explicit" && r.method !== "implied") return null;
+  if (typeof r.ver !== "number" || typeof r.utc !== "number") return null;
+  if (typeof r.stamp !== "string" && typeof r.stamp !== "number") return null;
+  if (typeof r.region !== "string") return null;
+  const out = {
+    necessary: true,
+    // never trust a cookie that claims necessary:false
+    preferences: r.preferences,
+    statistics: r.statistics,
+    marketing: r.marketing,
+    method: r.method,
+    ver: r.ver,
+    utc: r.utc,
+    region: r.region,
+    stamp: String(r.stamp)
+  };
+  if (r.custom && typeof r.custom === "object" && !Array.isArray(r.custom)) {
+    const custom = {};
+    for (const [k, v] of Object.entries(r.custom)) if (bool(v)) custom[k] = v;
+    if (Object.keys(custom).length > 0) out.custom = custom;
+  }
+  return out;
+}
+function parseConsentValue(raw) {
+  if (!raw) return null;
+  const decoded = decode(raw);
+  try {
+    return normalize(JSON.parse(decoded));
+  } catch {
+  }
+  if (!decoded.includes("necessary")) return null;
+  const json = decoded.replace(/'/g, '"').replace(/([{,]\s*)([A-Za-z_][\w]*)\s*:/g, '$1"$2":');
+  try {
+    return normalize(JSON.parse(json));
+  } catch {
+    return null;
+  }
+}
+var DAY_MS = 24 * 60 * 60 * 1e3;
+function readConsent(source, opts = {}) {
+  const raw = cookieValue(cookieHeaderOf(source), opts.cookieName ?? CONSENT_COOKIE_NAME);
+  const consent = raw ? parseConsentValue(raw) : null;
+  if (!consent) return null;
+  if (typeof opts.minVersion === "number" && consent.ver < opts.minVersion) return null;
+  if (typeof opts.expiryDays === "number" && opts.expiryDays > 0) {
+    if ((opts.now ?? Date.now()) - consent.utc > opts.expiryDays * DAY_MS) return null;
+  }
+  return consent;
+}
+function getConsent(source, cookieName = CONSENT_COOKIE_NAME) {
+  return readConsent(source, { cookieName });
+}
+function isAllowed(consent, category) {
+  if (category === "necessary") return true;
+  if (!consent) return false;
+  if (category === "preferences") return consent.preferences === true;
+  if (category === "statistics") return consent.statistics === true;
+  if (category === "marketing") return consent.marketing === true;
+  return consent.custom?.[category] === true;
+}
+
+// src/webhooks.ts
+var import_node_crypto = require("crypto");
+function verifyWebhookSignature(input) {
+  const { payload, signature, timestamp, secret } = input;
+  if (!signature || timestamp == null || timestamp === "" || !secret) return false;
+  const tsRaw = String(timestamp);
+  const tsNum = Number(tsRaw);
+  if (!Number.isFinite(tsNum)) return false;
+  const tolerance = input.toleranceSeconds ?? 300;
+  if (tolerance > 0) {
+    const nowSec = Math.floor((input.now ?? Date.now()) / 1e3);
+    if (Math.abs(nowSec - tsNum) > tolerance) return false;
+  }
+  const expected = `sha256=${(0, import_node_crypto.createHmac)("sha256", secret).update(`${tsRaw}.${payload}`).digest("hex")}`;
+  const got = Buffer.from(signature);
+  const want = Buffer.from(expected);
+  if (got.length !== want.length) return false;
+  return (0, import_node_crypto.timingSafeEqual)(got, want);
+}
+
+// src/index.ts
+var CookieMunchApiError = class extends Error {
+  constructor(status, message, code) {
+    super(message);
+    this.name = "CookieMunchApiError";
+    this.status = status;
+    if (code !== void 0) this.code = code;
+  }
+};
+function qs(query) {
+  if (!query) return "";
+  const parts = [];
+  for (const [k, v] of Object.entries(query)) {
+    if (v !== void 0) parts.push(`${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`);
+  }
+  return parts.length ? `?${parts.join("&")}` : "";
+}
+function toQuery(q) {
+  return q;
+}
+function createCookieMunch(opts) {
+  const base = `${opts.baseUrl.replace(/\/+$/, "")}/v1`;
+  const doFetch = opts.fetch ?? globalThis.fetch;
+  if (!doFetch) throw new Error("No fetch available; pass { fetch } in CookieMunchOptions.");
+  async function request(method, path, body, raw = false) {
+    const headers = { Authorization: `Bearer ${opts.apiKey}` };
+    const init = { method, headers };
+    if (body !== void 0) {
+      headers["Content-Type"] = "application/json";
+      init.body = JSON.stringify(body);
+    }
+    const res = await doFetch(`${base}${path}`, init);
+    if (!res.ok) {
+      let message = `request failed with status ${res.status}`;
+      let code;
+      try {
+        const data = await res.json();
+        if (typeof data.error === "string") message = data.error;
+        if (typeof data.code === "string") code = data.code;
+      } catch {
+      }
+      throw new CookieMunchApiError(res.status, message, code);
+    }
+    if (res.status === 204) return void 0;
+    if (raw) return res.text();
+    const contentType = res.headers.get("content-type") ?? "";
+    return contentType.includes("application/json") ? res.json() : res.text();
+  }
+  const get = (p) => request("GET", p);
+  const enc = encodeURIComponent;
+  return {
+    me: () => get("/me"),
+    languages: () => get("/languages"),
+    orgs: {
+      list: () => get("/orgs"),
+      create: (name, opts2) => request("POST", "/orgs", { name, ...opts2 ?? {} })
+    },
+    sites: {
+      list: () => get("/sites"),
+      create: (input) => request("POST", "/sites", input),
+      get: (cbid) => get(`/sites/${enc(cbid)}`),
+      delete: async (cbid) => {
+        await request("DELETE", `/sites/${enc(cbid)}`);
+      },
+      getConfig: (cbid) => get(`/sites/${enc(cbid)}/config`),
+      putConfig: (cbid, config, opts2) => request("PUT", `/sites/${enc(cbid)}/config${qs({ keep: opts2?.keep })}`, config),
+      patchConfig: (cbid, config) => request("PATCH", `/sites/${enc(cbid)}/config`, config),
+      dryRunConfig: (cbid, config, opts2) => request(
+        opts2?.mode === "put" ? "PUT" : "PATCH",
+        `/sites/${enc(cbid)}/config${qs({ dryRun: 1, keep: opts2?.mode === "put" ? opts2.keep : void 0 })}`,
+        config
+      ),
+      cookies: (cbid) => get(`/sites/${enc(cbid)}/cookies`),
+      scan: (cbid) => request("POST", `/sites/${enc(cbid)}/scan`),
+      scanStatus: (cbid) => get(`/sites/${enc(cbid)}/scan`),
+      ab: (cbid) => get(`/sites/${enc(cbid)}/ab`),
+      policy: (cbid, o) => request(
+        "GET",
+        `/sites/${enc(cbid)}/policy${qs({ contactEmail: o?.contactEmail, effectiveDate: o?.effectiveDate, jurisdictions: o?.jurisdictions?.join(",") })}`,
+        void 0,
+        true
+      ),
+      setAdPersonalization: (cbid, input) => request("POST", `/sites/${enc(cbid)}/elements/ad-personalization`, input),
+      analyzeSession: (cbid, input) => request("POST", `/sites/${enc(cbid)}/sentry`, input),
+      banner: (cbid) => get(`/sites/${enc(cbid)}/banner`),
+      blocked: (cbid) => get(`/sites/${enc(cbid)}/blocked`),
+      importDeclaration: (cbid, data) => request("POST", `/sites/${enc(cbid)}/import`, { data }),
+      applyImport: (cbid, data, o) => request("POST", `/sites/${enc(cbid)}/import${qs({ apply: "1", overwrite: o?.overwrite ? "1" : void 0 })}`, { data }),
+      declareCookie: (cbid, name, input) => request("PUT", `/sites/${enc(cbid)}/cookies/${enc(name)}`, input),
+      undeclareCookie: async (cbid, name) => {
+        await request("DELETE", `/sites/${enc(cbid)}/cookies/${enc(name)}`);
+      },
+      declareCookies: (cbid, cookies, o) => request("PUT", `/sites/${enc(cbid)}/cookies`, { cookies, ...o?.replace ? { replace: true } : {} }),
+      snippet: (cbid, opts2) => get(`/sites/${enc(cbid)}/snippet${qs({ blockingmode: opts2?.blockingMode, culture: opts2?.culture })}`),
+      previewToken: (cbid, o) => request("POST", `/sites/${enc(cbid)}/preview-token`, o ?? {}),
+      verify: (cbid, method) => request("POST", `/sites/${enc(cbid)}/verify`, { method }),
+      verifyChallenge: (cbid) => get(`/sites/${enc(cbid)}/verify/challenge`),
+      createBulk: (sites) => request("POST", "/sites/bulk", { sites }),
+      brand: (cbid) => request("POST", `/sites/${enc(cbid)}/brand`, {}),
+      getFlow: (cbid) => get(`/sites/${enc(cbid)}/flow`),
+      editFlow: (cbid, operations) => request("POST", `/sites/${enc(cbid)}/flow/ops`, { operations }),
+      setFlow: (cbid, config) => request("PUT", `/sites/${enc(cbid)}/flow`, config)
+    },
+    consent: {
+      verify: (cbid) => get(`/sites/${enc(cbid)}/consent/verify`),
+      stats: (cbid, query) => get(`/sites/${enc(cbid)}/consent/stats${qs(toQuery(query))}`),
+      log: (cbid, query) => get(`/sites/${enc(cbid)}/consent/log${qs(toQuery(query))}`),
+      export: (cbid, query) => request("GET", `/sites/${enc(cbid)}/consent/export${qs(toQuery(query))}`, void 0, true),
+      receipt: (cbid, stamp) => get(`/sites/${enc(cbid)}/receipt/${enc(stamp)}`),
+      eraseSubject: (cbid, stamp) => request("POST", `/sites/${enc(cbid)}/erase-consent`, { stamp }),
+      exportSubject: (cbid, stamp) => request("GET", `/sites/${enc(cbid)}/subject-export?stamp=${enc(stamp)}`),
+      ingest: async (input) => {
+        const res = await doFetch(`${opts.baseUrl.replace(/\/+$/, "")}/api/v1/consent`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify(input)
+        });
+        if (!res.ok) {
+          let message = `consent ingest failed with status ${res.status}`;
+          let code;
+          try {
+            const data = await res.json();
+            if (typeof data.error === "string") message = data.error;
+            if (typeof data.code === "string") code = data.code;
+          } catch {
+          }
+          throw new CookieMunchApiError(res.status, message, code);
+        }
+      }
+    },
+    dsar: {
+      list: () => get("/dsar"),
+      get: (id) => get(`/dsar/${enc(id)}`),
+      create: (input) => request("POST", "/dsar", input),
+      advance: (id, toStatus) => request("POST", `/dsar/${enc(id)}/advance`, { toStatus }),
+      response: (id) => request("GET", `/dsar/${enc(id)}/response`, void 0, true),
+      erase: (id, cbid, stamp) => request("POST", `/dsar/${enc(id)}/erase`, { cbid, stamp }),
+      export: (id, cbid, stamp) => request("POST", `/dsar/${enc(id)}/export`, { cbid, stamp }),
+      delete: async (id) => {
+        await request("DELETE", `/dsar/${enc(id)}`);
+      },
+      markTest: (id) => request("POST", `/dsar/${enc(id)}/mark-test`)
+    },
+    vendors: {
+      list: () => get("/vendors"),
+      create: (input) => request("POST", "/vendors", input)
+    },
+    ropa: {
+      list: () => get("/ropa"),
+      create: (input) => request("POST", "/ropa", input),
+      exportCsv: () => request("GET", "/ropa/export.csv", void 0, true)
+    },
+    brandKits: {
+      list: () => get("/brand-kits"),
+      create: (input) => request("POST", "/brand-kits", input),
+      delete: async (id) => {
+        await request("DELETE", `/brand-kits/${enc(id)}`);
+      }
+    },
+    identity: {
+      resolve: (identifiers) => request("POST", "/identity/resolve", { identifiers }),
+      link: (identifiers) => request("POST", "/identity/link", { identifiers }),
+      cluster: (subjectId) => get(`/identity/${enc(subjectId)}`)
+    },
+    vault: {
+      record: (identifiers, decisions) => request("POST", "/vault/record", { identifiers, decisions }),
+      current: (identifiers) => request("POST", "/vault/current", { identifiers }),
+      permits: (identifiers) => request("POST", "/vault/permits", { identifiers })
+    },
+    profile: {
+      get: (identifiers) => request("POST", "/profile/get", { identifiers }),
+      setAttributes: (identifiers, attributes) => request("POST", "/profile/attributes", { identifiers, attributes }),
+      activate: (identifiers, purpose) => request("POST", "/profile/activate", { identifiers, purpose })
+    },
+    subscriptions: {
+      topics: () => get("/subscriptions/topics"),
+      setTopics: (topics) => request("PUT", "/subscriptions/topics", { topics }),
+      get: (subjectId) => get(`/subscriptions/${enc(subjectId)}`),
+      set: (subjectId, topic, channel, optedIn) => request("PUT", `/subscriptions/${enc(subjectId)}`, { topic, channel, optedIn }),
+      unsubscribeAll: (subjectId) => request("POST", `/subscriptions/${enc(subjectId)}/unsubscribe-all`),
+      resubscribe: (subjectId) => request("POST", `/subscriptions/${enc(subjectId)}/resubscribe`),
+      activation: (subjectId, topics) => request("POST", `/subscriptions/${enc(subjectId)}/activation`, { topics })
+    },
+    assessments: {
+      templates: () => get("/assessments/templates"),
+      list: () => get("/assessments"),
+      start: (template, subject) => request("POST", "/assessments", { template, subject }),
+      get: (id) => get(`/assessments/${enc(id)}`),
+      answer: (id, questionId, value) => request("POST", `/assessments/${enc(id)}/answer`, { questionId, value }),
+      autoPopulateFromMap: (id) => request("POST", `/assessments/${enc(id)}/autopopulate-from-map`),
+      autoPopulate: (id, evidence, source) => request("POST", `/assessments/${enc(id)}/autopopulate`, { evidence, ...source !== void 0 ? { source } : {} }),
+      submit: (id) => request("POST", `/assessments/${enc(id)}/submit`),
+      approve: (id, by) => request("POST", `/assessments/${enc(id)}/approve`, { by }),
+      reject: (id, by, reason) => request("POST", `/assessments/${enc(id)}/reject`, { by, reason })
+    },
+    discovery: {
+      ingestMap: (map) => request("POST", "/discovery/map", { map }),
+      getMap: () => get("/discovery/map"),
+      ropaDrafts: () => get("/discovery/ropa-drafts"),
+      evidence: () => get("/discovery/evidence"),
+      drift: () => get("/discovery/drift"),
+      planEnforcement: (dialect, rules, opts2) => request("POST", "/discovery/enforcement", {
+        dialect,
+        rules,
+        ...opts2?.permitsTable !== void 0 ? { permitsTable: opts2.permitsTable } : {},
+        ...opts2?.policyPrefix !== void 0 ? { policyPrefix: opts2.policyPrefix } : {}
+      })
+    },
+    regulatory: {
+      feed: (jurisdictions) => get(`/regulatory/feed${qs({ jurisdictions: jurisdictions?.join(",") })}`),
+      upcoming: (days) => get(`/regulatory/upcoming${qs({ days })}`)
+    },
+    ai: {
+      getPolicy: () => get("/ai/policy"),
+      setPolicy: (policy) => request("PUT", "/ai/policy", { policy }),
+      inspect: (input) => request("POST", "/ai/inspect", input),
+      inventory: () => get("/ai/inventory"),
+      lineage: () => get("/ai/lineage"),
+      registerSystem: (input) => request("POST", "/ai/systems", input),
+      systems: () => get("/ai/systems"),
+      audit: (limit) => get(`/ai/audit${qs({ limit })}`)
+    },
+    fulfillment: {
+      sla: () => get("/dsar/sla"),
+      plan: (requestId, systems, includeHistorical) => request("POST", `/dsar/${enc(requestId)}/plan`, { systems, ...includeHistorical ? { includeHistorical: true } : {} }),
+      status: (requestId) => get(`/dsar/${enc(requestId)}/fulfillment`),
+      pendingTasks: (limit) => get(`/dsar/agent/tasks${qs({ limit })}`),
+      reportTask: (taskId, ok, error) => request("POST", `/dsar/agent/tasks/${enc(taskId)}/result`, { ok, ...error !== void 0 ? { error } : {} }),
+      executors: () => get("/dsar/executors"),
+      connectExecutor: (input) => request("POST", "/dsar/executors", input),
+      updateExecutor: (id, patch) => request("PATCH", `/dsar/executors/${enc(id)}`, patch),
+      disconnectExecutor: async (id) => {
+        await request("DELETE", `/dsar/executors/${enc(id)}`);
+      },
+      taskExport: (requestId, taskId) => get(`/dsar/${enc(requestId)}/tasks/${enc(taskId)}/export`),
+      task: (requestId, taskId) => get(`/dsar/${enc(requestId)}/tasks/${enc(taskId)}`),
+      testExecutor: (id, input) => request("POST", `/dsar/executors/${enc(id)}/test`, input)
+    },
+    preferences: {
+      list: () => get("/preferences"),
+      save: (subjectId, purposes) => request("POST", "/preferences", { subjectId, purposes }),
+      get: (subjectId) => get(`/preferences/${enc(subjectId)}`)
+    },
+    members: {
+      list: () => get("/members"),
+      invite: (email, role) => request("POST", "/members", { email, role }),
+      setRole: (userId, role) => request("PATCH", `/members/${enc(userId)}`, { role }),
+      remove: (userId) => request("DELETE", `/members/${enc(userId)}`)
+    },
+    keys: {
+      list: () => get("/keys"),
+      issue: (input) => request("POST", "/keys", input ?? {}),
+      revoke: async (prefix) => {
+        await request("DELETE", `/keys/${enc(prefix)}`);
+      },
+      roll: (prefix) => request("POST", `/keys/${enc(prefix)}/roll`),
+      update: (prefix, patch) => request("PATCH", `/keys/${enc(prefix)}`, patch)
+    },
+    usage: () => get("/usage"),
+    org: {
+      get: () => get("/org"),
+      update: (patch) => request("PATCH", "/org", patch)
+    },
+    audit: (limit) => get(`/audit${qs({ limit })}`),
+    assets: {
+      upload: (input) => request("POST", "/assets", input),
+      delete: async (urlOrFileName) => {
+        const name = urlOrFileName.split("/").pop() ?? urlOrFileName;
+        await request("DELETE", `/assets/${enc(name)}`);
+      }
+    },
+    reseller: {
+      list: () => get("/reseller/customers"),
+      create: (input) => request("POST", "/reseller/customers", input),
+      get: (id) => get(`/reseller/customers/${enc(id)}`),
+      update: (id, patch) => request("PATCH", `/reseller/customers/${enc(id)}`, patch),
+      deprovision: async (id, o) => {
+        await request("DELETE", `/reseller/customers/${enc(id)}${qs({ purge: o?.purge ? "true" : void 0 })}`);
+      },
+      listKeys: (id) => get(`/reseller/customers/${enc(id)}/keys`),
+      mintKey: (id, input) => request("POST", `/reseller/customers/${enc(id)}/keys`, input ?? {}),
+      revokeKey: async (id, prefix) => {
+        await request("DELETE", `/reseller/customers/${enc(id)}/keys/${enc(prefix)}`);
+      }
+    },
+    webhooks: {
+      list: () => get("/webhooks"),
+      create: (input) => request("POST", "/webhooks", input),
+      update: (id, patch) => request("PATCH", `/webhooks/${enc(id)}`, patch),
+      delete: async (id) => {
+        await request("DELETE", `/webhooks/${enc(id)}`);
+      },
+      rollSecret: (id) => request("POST", `/webhooks/${enc(id)}/roll`),
+      test: (id) => request("POST", `/webhooks/${enc(id)}/test`),
+      deadLetters: () => get("/webhooks/dead-letters"),
+      replayDeadLetter: (id) => request("POST", `/webhooks/dead-letters/${enc(id)}/replay`)
+    },
+    subjects: {
+      consent: (subjectId) => get(`/subjects/${enc(subjectId)}/consent`)
+    },
+    banners: {
+      list: () => get("/banners"),
+      create: (input) => request("POST", "/banners", input),
+      get: (id) => get(`/banners/${enc(id)}`),
+      update: (id, patch) => request("PUT", `/banners/${enc(id)}`, patch),
+      delete: async (id) => {
+        await request("DELETE", `/banners/${enc(id)}`);
+      },
+      assignments: (id) => get(`/banners/${enc(id)}/assignments`),
+      setAssignments: (id, cbids) => request("PUT", `/banners/${enc(id)}/assignments`, { cbids }),
+      publish: (id) => request("POST", `/banners/${enc(id)}/publish`)
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CONSENT_COOKIE_NAME,
+  CookieMunchApiError,
+  createCookieMunch,
+  getConsent,
+  isAllowed,
+  parseConsentValue,
+  readConsent,
+  verifyWebhookSignature
+});
+//# sourceMappingURL=index.cjs.map