@createcms/core 0.1.1

package/dist/plugins/consent/index.d.cts

@@ -0,0 +1,618 @@
+import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
+import { AnyPgTable, PgDatabase } from 'drizzle-orm/pg-core';
+import { AnyColumn, SQL } from 'drizzle-orm';
+import { Endpoint, Middleware } from 'better-call';
+
+type ResolvedUserConfig = {
+    table: AnyPgTable;
+    tableName: string;
+    schemaName: string | null;
+    idColumn: AnyColumn;
+    /** The camelCase key used in the Drizzle table definition (e.g. "id"). */
+    idColumnKey: string;
+    /** The actual database column name (e.g. "id" or "user_id"). */
+    idColumnDbName: string;
+    allColumns: Record<string, AnyColumn>;
+    /** Allowlist (camelCase keys) of columns exposable via `withUser`. */
+    exposeColumns: string[];
+    sqlTableRef: string;
+};
+
+type DrizzleInstance = PgDatabase<any, Record<string, unknown>, any>;
+
+declare const notificationTypeEnum: drizzle_orm_pg_core.PgEnum<["mention", "comment", "threadResolved", "approvalRequested", "approvalApproved", "approvalRejected", "mergeRequestOpened", "mergeRequestMerged", "mergeRequestClosed", "mergeRequestReopened", "published", "custom"]>;
+
+type NotificationType = (typeof notificationTypeEnum.enumValues)[number];
+type NotificationPayload = {
+    id: string;
+    recipientId: string;
+    actorId: string | null;
+    type: NotificationType;
+    title: string;
+    body: string | null;
+    resourceType: string | null;
+    resourceId: string | null;
+    collection: string | null;
+    meta: Record<string, unknown> | null;
+    createdAt: Date;
+};
+type OnNotificationHandler = (notification: NotificationPayload) => void | Promise<void>;
+type NotificationInput = Omit<NotificationPayload, 'id' | 'createdAt'>;
+
+type NotificationService = ReturnType<typeof createNotificationService>;
+declare function createNotificationService(db: DrizzleInstance, handlers: OnNotificationHandler[]): {
+    notify(input: NotificationInput): Promise<NotificationPayload>;
+    notifyMany(inputs: NotificationInput[]): Promise<NotificationPayload[]>;
+};
+
+/**
+ * Per-request scope produced by a ScopeConditionFactory.
+ * `where` — appended to SELECT/UPDATE/DELETE queries.
+ * `insertColumns` — snake_case column name → value pairs merged directly
+ *   into the raw SQL INSERT via `scopedInsert` / `scopedInsertBatch`.
+ */
+type TableScope = {
+    where?: SQL;
+    insertColumns?: Record<string, unknown>;
+};
+/**
+ * `roots` scope additionally supports a per-NEW-ENTRY column contributor: a
+ * plugin can compute fresh insert columns once per newly-created logical entry
+ * (e.g. a freshly minted translation-group id), which the static `insertColumns`
+ * channel (same value on every row) can't express. Called once per
+ * createRoot / root-duplication. Generic — core names no column. (Seam D.)
+ */
+type RootTableScope = TableScope & {
+    newEntryColumns?: () => Record<string, unknown>;
+    /**
+     * Scope columns to EXCLUDE from cross-scope read filtering — columns the
+     * plugin varies INDEPENDENTLY of a query so that cross-scope reads (a
+     * reference/host/usage that legitimately spans them) must not filter on them.
+     * The i18n plugin declares `['language']` (a host/reference in any sibling
+     * language still counts; the read path already resolved a specific sibling).
+     * Generic — core names no column; passed to `rootScopeConditions` as its
+     * `exclude`. Empty/absent → every scope column filters. (Seam D6.)
+     */
+    crossScopeExclude?: readonly string[];
+};
+/**
+ * A plugin-provided resolver for reference values (rootId / group-key strings),
+ * carried on the resolved scope and consumed by the read path and the A/B
+ * co-render walk. Core ships an IDENTITY default (`coreReferenceResolver`)
+ * reproducing the single-language, no-plugin behaviour byte-for-byte; the i18n
+ * plugin supplies a real one that understands translation groups + the fallback
+ * chain. Core never names any i18n concept — it knows only this interface.
+ *
+ * `db` AND `scopeColumns` are passed PER CALL (not closed over): `db` so a
+ * caller inside a transaction (e.g. the A/B →running guard under FOR UPDATE)
+ * resolves against its own tx handle; `scopeColumns` because the MERGED root
+ * scope columns (tenant + language) exist only AFTER every scope factory has
+ * run — the i18n factory that builds the resolver sees only its OWN column at
+ * build time. The resolver therefore closes over just its resolution POLICY
+ * (e.g. the i18n active language + fallback chain). `scopeColumns` is the
+ * scope predicate; the resolver excludes its own cross-scope columns.
+ * (Seam B.)
+ */
+type ReferenceResolver = {
+    /**
+     * Read-time render pick: stored reference value → the ONE rootId it renders
+     * as (omit a key to leave it unresolved). Identity default: `value → value`.
+     */
+    resolveRenderTargets(db: DrizzleInstance, scopeColumns: Record<string, unknown> | undefined, collection: string, storedValues: string[]): Promise<Map<string, string>>;
+    /**
+     * Conflict superset: stored reference keys → ALL rootIds they could render as
+     * (a group key expands to its whole group). Used by the A/B co-render walk;
+     * collection-agnostic (a reference may target any collection). Identity
+     * default: the existing, non-archived roots among `storedKeys` (by id).
+     */
+    resolveConflictTargets(db: DrizzleInstance, scopeColumns: Record<string, unknown> | undefined, storedKeys: string[]): Promise<string[]>;
+    /** rootIds → all their group siblings. Identity default: the input rootIds. */
+    expandGroup(db: DrizzleInstance, scopeColumns: Record<string, unknown> | undefined, rootIds: string[]): Promise<string[]>;
+    /** rootIds → the group keys a host could embed them by. Default: `[]`. */
+    groupKeysFor(db: DrizzleInstance, scopeColumns: Record<string, unknown> | undefined, rootIds: string[]): Promise<string[]>;
+};
+/** One variant branch of a running A/B test on a referenced root. */
+type RunningAbTestVariant = {
+    branchId: string;
+    isControl: boolean;
+};
+/** A running A/B test on one root: the test plus its variant branches. */
+type RunningAbTest = {
+    testId: string;
+    trafficPercentage: number;
+    variants: RunningAbTestVariant[];
+};
+/**
+ * A plugin-provided resolver that reports which referenced roots currently have
+ * a RUNNING A/B test (with that test's variant branches). Carried on the
+ * resolved scope and consumed by the read path's reference loader to fan the one
+ * XOR-guaranteed varying block's branches out to the client (AB_FANOUT F2). Core
+ * ships NO default — when absent (no ab-test plugin) the read path assumes no
+ * running tests and every embed stays on its deterministic single pick (F0).
+ * Core never names any A/B concept beyond this interface. (Seam F.)
+ */
+type AbTestResolver = {
+    /**
+     * The subset of `rootIds` that have a running test, each mapped to its test +
+     * variant branches. `db` AND `scopeColumns` are passed PER CALL (same
+     * rationale as {@link ReferenceResolver}). The caller passes already
+     * render-resolved (active-language) rootIds, so this needs no group expansion.
+     */
+    runningTests(db: DrizzleInstance, scopeColumns: Record<string, unknown> | undefined, rootIds: string[]): Promise<Map<string, RunningAbTest>>;
+};
+type ResolvedScope = {
+    roots?: RootTableScope;
+    assets?: TableScope;
+    assetFolders?: TableScope;
+    redirects?: TableScope;
+    /**
+     * Plugin-provided reference resolver (i18n translation-group resolution). When
+     * absent, callers use core's identity default. Generic — see `ReferenceResolver`.
+     */
+    referenceResolver?: ReferenceResolver;
+    /**
+     * Plugin-provided running-A/B-test resolver (AB_FANOUT F2 server fan-out).
+     * When absent, the read path assumes no running tests. Generic — see
+     * {@link AbTestResolver}.
+     */
+    abTestResolver?: AbTestResolver;
+    /**
+     * Opaque per-plugin context slots, keyed by plugin id. Core never reads it;
+     * each plugin stashes its own per-request context here from a scope factory
+     * and reads it back via its own exported accessor. Merged generically in
+     * computeScope (shallow, last-writer-wins per slot).
+     */
+    pluginContext?: Record<string, unknown>;
+};
+/**
+ * Factory registered by plugins during `init`.
+ * Called once per request with the middleware result to produce
+ * table-level WHERE conditions and extra INSERT values.
+ */
+type ScopeConditionFactory = (mwResult: MiddlewareResult) => ResolvedScope;
+type BlockTypes = {
+    string: string;
+    number: number;
+    boolean: boolean;
+    date: string;
+    richText: string;
+    image: string;
+    select: string;
+    reference: string;
+};
+type BlockPropertyType = keyof BlockTypes;
+type SelectOption = {
+    readonly label: string;
+    readonly value: string;
+};
+type BlockPropertySpec<T extends BlockPropertyType> = {
+    type: T;
+    required?: boolean;
+    defaultValue?: BlockTypes[T];
+    label: string;
+    description?: string;
+    placeholder?: string;
+} & (T extends 'select' ? {
+    options: readonly SelectOption[];
+} : {}) & (T extends 'reference' ? {
+    collection: string;
+} : {});
+/** Discriminated union over all concrete block-property specs. */
+type BlockProperty = {
+    [K in BlockPropertyType]: BlockPropertySpec<K>;
+}[BlockPropertyType];
+/** Scalar property subset usable as an event parameter (no references/media). */
+type ScalarBlockProperty = Extract<BlockProperty, {
+    type: 'string' | 'number' | 'boolean' | 'select' | 'date';
+}>;
+/**
+ * Declares a meaningful event a functional block can emit (e.g. a form's
+ * `submitSuccess`). Living on the block DEFINITION makes it the single source of
+ * truth for the typed `fire(...)` union, the test-creation goal picker, and the
+ * analytics wire name. `name` overrides the GA4/dataLayer wire name (defaults to
+ * `cms_<blockType>_<eventKey>`, computed by the measurement layer). Whether an
+ * event counts as a conversion is decided per test in the UI, not here.
+ */
+type EventDeclaration = {
+    /** Analytics wire-name override (snake_case). Defaults to cms_<type>_<key>. */
+    name?: string;
+    /** Typed parameters carried with the event (scalar only). */
+    params?: Record<string, ScalarBlockProperty>;
+    /** Human label for the goal picker. */
+    label?: string;
+};
+type BlockDefinition<TProps extends Record<string, BlockProperty> = Record<string, BlockProperty>, TEvents extends Record<string, EventDeclaration> = Record<string, never>> = {
+    properties: TProps;
+    label: string;
+    description?: string;
+    previewImageUrl?: string;
+    /** Events this (functional) block can emit — see {@link EventDeclaration}. */
+    events?: TEvents;
+} & ({
+    allowChildren?: false;
+} | {
+    allowChildren: true;
+    allowedChildBlocks?: string[];
+});
+type AnyBlockDefinition = BlockDefinition<Record<string, BlockProperty>, Record<string, EventDeclaration>>;
+type RootDefinition<TProps extends Record<string, BlockProperty> = Record<string, BlockProperty>> = {
+    properties: TProps;
+};
+type SlugConfig = {
+    enabled: false;
+} | {
+    enabled: true;
+    root: string;
+    allowRoot?: boolean;
+    normalize?: boolean;
+    nested?: boolean;
+};
+type CollectionDefinition<TProps extends Record<string, BlockProperty> = Record<string, BlockProperty>, TBlocks extends Record<string, AnyBlockDefinition> = Record<string, AnyBlockDefinition>> = {
+    slug?: SlugConfig;
+    root: RootDefinition<TProps>;
+    blocks?: TBlocks;
+    label: string;
+    description?: string;
+    /**
+     * Marks this collection as one whose roots are meant to be EMBEDDED into other
+     * roots via a `reference` property (a "reusable block" library). Purely an
+     * ergonomic hint — it informs editor pickers and which endpoints to surface; it
+     * NEVER gates safety (the delete-in-use guard protects every referenced root
+     * regardless of this flag). Any collection can still be a reference target.
+     */
+    reusableBlock?: boolean;
+};
+type AnyCollectionDefinition = CollectionDefinition<Record<string, BlockProperty>, Record<string, AnyBlockDefinition>>;
+type CollectionWithName = Omit<AnyCollectionDefinition, 'blocks'> & {
+    name: string;
+    blocks: Record<string, AnyBlockDefinition>;
+};
+type DataRetentionConfig = {
+    keepDays: number;
+    keepMinCommits: number;
+    /**
+     * Grace period (days) before a soft-archived root (`archivedAt`) is physically
+     * hard-deleted by pruning. Defaults to `keepDays` when omitted — a trash
+     * window after which the page and its whole history are reclaimed.
+     */
+    archiveKeepDays?: number;
+};
+/** Result that user middleware can return to extend context */
+type MiddlewareResult = {
+    userId?: string;
+    [key: string]: unknown;
+};
+/** Base ctx injected by withCMSContext middleware. */
+type CMSProcedureCtx = {
+    db: DrizzleInstance;
+    collections: Record<string, CollectionWithName>;
+    dataRetention?: DataRetentionConfig;
+    scopeConditions?: ScopeConditionFactory[];
+    notificationService?: NotificationService;
+    resolvedUser?: ResolvedUserConfig;
+};
+
+type SchemaNamespace = 'cms';
+type ColumnScalarType = 'text' | 'boolean' | 'integer' | 'timestamp' | 'jsonb' | 'tsvector';
+type ColumnType<EnumTarget extends string = string> = ColumnScalarType | {
+    enum: EnumTarget;
+};
+type DefaultValue = {
+    kind: 'literal';
+    value: boolean | number | string | string[] | Record<string, unknown>;
+} | {
+    kind: 'sql';
+    value: string;
+};
+type ForeignKeyAction = 'cascade' | 'restrict' | 'no action' | 'set null' | 'set default';
+type IndexUsing = 'btree' | 'gin';
+type ColumnDefinition<ReferenceTarget extends string = string, EnumTarget extends string = string> = {
+    type: ColumnType<EnumTarget>;
+    columnName?: string;
+    notNull?: boolean;
+    primaryKey?: boolean;
+    unique?: boolean;
+    default?: DefaultValue;
+    defaultId?: boolean;
+    defaultIdPrefix?: string;
+    defaultNow?: boolean;
+    jsonType?: string;
+    references?: {
+        table: ReferenceTarget;
+        column: string;
+        onDelete?: ForeignKeyAction;
+        onUpdate?: ForeignKeyAction;
+    };
+};
+type TableColumns<ReferenceTarget extends string = string, EnumTarget extends string = string> = Record<string, ColumnDefinition<ReferenceTarget, EnumTarget>>;
+type IndexDefinition<ColumnName extends string> = {
+    columns: readonly ColumnName[];
+    unique?: boolean;
+    using?: IndexUsing;
+    where?: string;
+};
+type CompositePrimaryKey<ColumnName extends string> = {
+    columns: readonly ColumnName[];
+};
+type TableLevelForeignKey<ColumnName extends string = string> = {
+    columns: readonly ColumnName[];
+    foreignTable: string;
+    foreignColumns: readonly string[];
+    name?: string;
+    onDelete?: ForeignKeyAction;
+    onUpdate?: ForeignKeyAction;
+};
+type TableDefinition<Columns extends TableColumns = TableColumns, ReferenceTarget extends string = string, EnumTarget extends string = string> = {
+    tableName?: string;
+    indexPrefix?: string;
+    columns: Columns;
+    indexes?: Record<string, IndexDefinition<Extract<keyof Columns, string>>>;
+    compositePrimaryKey?: CompositePrimaryKey<Extract<keyof Columns, string>>;
+    foreignKeys?: TableLevelForeignKey<Extract<keyof Columns, string>>[];
+};
+type EnumDefinition = {
+    values: readonly string[];
+    enumName?: string;
+};
+type EnumMap = Record<string, EnumDefinition>;
+type TableMap = Record<string, TableDefinition>;
+type SchemaModule<_Namespace extends SchemaNamespace = SchemaNamespace, Tables extends TableMap = {}, Enums extends EnumMap = {}, Extensions = {}> = {
+    enums?: Enums;
+    tables?: Tables;
+    extend?: Extensions;
+};
+
+type Awaitable<T> = T | Promise<T>;
+/**
+ * Endpoint key used as a hook action identifier.
+ * Accepts any string so internal plumbing doesn't need the full union,
+ * but the exported `CMSEndpointKey` (from `index.ts`) provides a narrowed
+ * union with autocomplete for hook authors.
+ */
+type CMSHookAction = string & {};
+type CMSBeforeHookContext = {
+    action: CMSHookAction;
+    collection: string;
+    db: DrizzleInstance;
+    input: Record<string, unknown>;
+    /**
+     * The resolved per-request scope (tenant/i18n), available to before-hooks so
+     * they can tenant-scope any cross-resource reads they perform. Set by the
+     * endpoint wrapper before hooks run; may be undefined for hooks invoked
+     * outside that path.
+     */
+    scope?: ResolvedScope;
+};
+type CMSAfterHookContext = CMSBeforeHookContext & {
+    result: unknown;
+};
+type CMSBeforeHook = {
+    action: CMSHookAction | '*';
+    collection?: string;
+    handler: (ctx: CMSBeforeHookContext) => Promise<void | {
+        override?: Record<string, unknown>;
+    }>;
+};
+type CMSAfterHook = {
+    action: CMSHookAction | '*';
+    collection?: string;
+    handler: (ctx: CMSAfterHookContext) => Promise<void | {
+        response: unknown;
+    }>;
+};
+type CMSHooks = {
+    before?: CMSBeforeHook[];
+    after?: CMSAfterHook[];
+};
+type CMSPluginContext = CMSProcedureCtx & {
+    collections: Record<string, CollectionWithName>;
+};
+type CMSCoreRootPruningPlan = {
+    rootId: string;
+    deletableCommitIds: string[];
+    deletableBlockVersionIds: string[];
+    deletableSnapshotCount: number;
+    deletableMergeRequestIds: string[];
+    deletableApprovalIds: string[];
+    initialCommitId: string;
+};
+type CMSPluginPruningMetrics = Record<string, number>;
+type CMSPluginRootPruningPlan<TData = unknown> = {
+    rootId: string;
+    data?: TData;
+    metrics?: CMSPluginPruningMetrics;
+};
+type CMSPluginPruningPlanContext = Omit<CMSPluginContext, 'dataRetention'> & {
+    db: DrizzleInstance;
+    dataRetention: DataRetentionConfig;
+    rootPlan: CMSCoreRootPruningPlan;
+};
+type CMSPluginPruningExecuteContext<TData = unknown> = Omit<CMSPluginContext, 'db' | 'dataRetention'> & {
+    tx: DrizzleInstance;
+    dataRetention: DataRetentionConfig;
+    rootPlan: CMSCoreRootPruningPlan;
+    pluginPlan: CMSPluginRootPruningPlan<TData>;
+};
+type CMSPluginPruningExecuteResult = {
+    metrics?: CMSPluginPruningMetrics;
+};
+type CMSPluginPruning<TData = unknown> = {
+    plan: (ctx: CMSPluginPruningPlanContext) => Promise<CMSPluginRootPruningPlan<TData> | null>;
+    execute?: (ctx: CMSPluginPruningExecuteContext<TData>) => Promise<CMSPluginPruningExecuteResult | void>;
+};
+type CMSPluginInitOptions = {
+    hooks?: CMSHooks;
+};
+type CMSPluginInitResult = {
+    context?: Record<string, unknown>;
+    options?: Partial<CMSPluginInitOptions>;
+};
+/**
+ * A CMS plugin can extend the system with custom endpoints, hooks,
+ * middleware, database tables, and data-retention pruning logic.
+ *
+ * @example
+ * ```ts
+ * const myPlugin: CMSPlugin = {
+ *   id: 'my-plugin',
+ *   endpoints: { ... },
+ *   hooks: { before: [...], after: [...] },
+ *   async init(ctx) { return { context: { myService } }; },
+ * };
+ * ```
+ */
+type CMSPlugin<TPruningData = unknown> = {
+    id: string;
+    endpoints?: Record<string, Endpoint>;
+    /**
+     * Per-COLLECTION endpoints contributed by the plugin: called once per
+     * collection during API assembly, returning routes merged into THAT
+     * collection's endpoint record (so they surface at `cms.api.<collection>.x`,
+     * not the flat `cms.api.<pluginId>.x`). The per-collection analogue of the
+     * flat `endpoints` above. Generic — any plugin can attach a route to every
+     * collection (the i18n plugin uses it for createTranslation / listTranslations).
+     * (Seam A.)
+     */
+    collectionEndpoints?: (def: CollectionWithName, ctx: CMSPluginContext) => Record<string, Endpoint>;
+    hooks?: {
+        before?: CMSBeforeHook[];
+        after?: CMSAfterHook[];
+    };
+    middlewares?: {
+        path: string;
+        middleware: Middleware;
+    }[];
+    schema?: SchemaModule;
+    pruning?: CMSPluginPruning<TPruningData>;
+    init?: (ctx: CMSPluginContext) => Awaitable<CMSPluginInitResult | void>;
+    onRequest?: (request: Request, ctx: CMSPluginContext) => Promise<{
+        response: Response;
+    } | {
+        request: Request;
+    } | void>;
+    onResponse?: (response: Response, ctx: CMSPluginContext) => Promise<{
+        response: Response;
+    } | void>;
+    onNotification?: OnNotificationHandler;
+    $ERROR_CODES?: Record<string, {
+        status: number;
+        message: string;
+    }>;
+};
+
+type ConsentSignal = 'granted' | 'denied';
+/**
+ * The four Google Consent Mode v2 signals. Every major CMP (Cookiebot,
+ * Usercentrics, OneTrust) emits these, so a single inbound contract covers all.
+ * `analytics_storage` gates the A/B + analytics path; the `ad_*` signals gate
+ * any ad-related fan-out.
+ */
+type ConsentState = {
+    analytics_storage: ConsentSignal;
+    ad_storage: ConsentSignal;
+    ad_user_data: ConsentSignal;
+    ad_personalization: ConsentSignal;
+};
+type ConsentPurpose = keyof ConsentState;
+
+/** Default-deny: nothing is granted until a CMP / Consent Mode signal says so. */
+declare const DENIED_ALL: ConsentState;
+/**
+ * How long (ms) to buffer events before resolving the gate when no consent
+ * DECISION has arrived yet — the Consent Mode `wait_for_update` window. Render
+ * is NEVER blocked on this; only event emission waits.
+ */
+declare const CONSENT_WAIT_MS = 2000;
+/** `default` = the pre-interaction seed; `update` = a real consent decision. */
+type ConsentMode = 'default' | 'update';
+type ParsedConsentEntry = {
+    mode: ConsentMode;
+    state: Partial<ConsentState>;
+};
+/**
+ * Extracts the mode + partial {@link ConsentState} from a single dataLayer entry
+ * IF it is a Consent Mode command (`gtag('consent','default'|'update',{...})`,
+ * which lands on the dataLayer as an arguments-like `['consent', mode, params]`).
+ * Returns `null` for any non-consent entry. The `mode` matters: a `default` only
+ * seeds state, while an `update` is the user's decision (see {@link ConsentGate}).
+ */
+declare function parseConsentEntry(entry: unknown): ParsedConsentEntry | null;
+/** Parses every Consent Mode command on a dataLayer, in order. */
+declare function parseConsentEntries(dataLayer: readonly unknown[]): ParsedConsentEntry[];
+type ConsentGate = {
+    getState(): ConsentState;
+    isGranted(purpose: ConsentPurpose): boolean;
+    /** True once a real decision arrived or the wait-window elapsed. */
+    isResolved(): boolean;
+    /**
+     * Seed state from a Consent Mode `default` command. Updates state but does NOT
+     * resolve the gate — a denied default must not collapse the wait-window before
+     * the async CMP `update` arrives.
+     */
+    applyDefault(update: Partial<ConsentState>): void;
+    /**
+     * Apply a real consent decision — a Consent Mode `update` or an explicit host
+     * `setConsent`. Resolves + drains the buffer once the decision carries an
+     * `analytics_storage` value (a partial update touching only `ad_*` keeps the
+     * gate pending so a later analytics grant still flushes).
+     */
+    applyUpdate(update: Partial<ConsentState>): void;
+    /** Resolve the wait-window with whatever we have (stays default-deny). */
+    resolve(): void;
+    /**
+     * Queue an `analytics_storage`-gated side effect. Runs immediately if already
+     * resolved+granted, calls `onDrop` if resolved+denied, and buffers while
+     * pending. `onDrop` lets callers release a dedup guard so a later grant can
+     * re-fire.
+     */
+    run(effect: () => void, onDrop?: () => void): void;
+    /** Subscribe to state changes (apply / resolve / reset). Returns unsubscribe. */
+    onChange(listener: (state: ConsentState, resolved: boolean) => void): () => void;
+    /** Revoke consent (e.g. `abTest.reset()`): back to denied, stops fan-out. */
+    reset(): void;
+};
+declare function createConsentGate(initial?: ConsentState): ConsentGate;
+/**
+ * Decides which visitor key to use and whether it may be persisted. Before
+ * `analytics_storage` is granted, the key is in-memory only (page lifetime, no
+ * device storage). On grant, an existing cookie wins; otherwise the in-memory
+ * key is promoted to the cookie so a buffered impression and later events share
+ * one identity.
+ */
+declare function resolveVisitorKey(opts: {
+    granted: boolean;
+    cookieKey: string | null;
+    memKey: string | null;
+    generate: () => string;
+}): {
+    key: string;
+    persist: boolean;
+    memKey: string;
+};
+
+/**
+ * Zero-config consent: reads Consent Mode v2 commands off `window.dataLayer`
+ * (already-present `default`/`update` entries and future pushes) and feeds the
+ * gate. Resilient to GTM/gtag.js loading LATER — which reassigns `dataLayer` /
+ * its `push` and would discard an in-place patch — via a short re-scan poll over
+ * the wait window that re-reads `window.dataLayer` fresh each tick (and re-scans
+ * from 0 if the array was replaced). The `push` patch is only a fast path. When
+ * running GTM, driving consent explicitly via `setConsent` from the CMP's
+ * Consent Mode update callback is the most reliable path.
+ */
+declare function startConsentAutoRead(gate: ConsentGate): void;
+
+/**
+ * The consent plugin. Owns the generic Google Consent Mode v2 infrastructure
+ * (the buffer-then-flush gate, the dataLayer/CMP auto-read, the state model)
+ * that any consumer can ride — A/B tracking, analytics sinks, or consent-gated
+ * rendering of embedded third-party content.
+ *
+ * Server-side it is a marker plugin (no schema/endpoints/hooks): consent is a
+ * client-side concern today. The client capability (gate + setConsent/getConsent
+ * + the <ConsentGate> render wrapper) is exposed via the client entry.
+ */
+declare function consent(): CMSPlugin;
+
+export { CONSENT_WAIT_MS, DENIED_ALL, consent, createConsentGate, parseConsentEntries, parseConsentEntry, resolveVisitorKey, startConsentAutoRead };
+export type { ConsentGate, ConsentMode, ConsentPurpose, ConsentSignal, ConsentState, ParsedConsentEntry };