@easy-cookie/policy 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 easy-cookie contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,183 @@
-# Temporary Holding Version
+# @easy-cookie/policy
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Generates the cookie section of your cookie policy from the same easy-cookie config that drives the banner. The banner tables, the policy and the cleanup rules can no longer drift apart.
+
+It also renders full **legal documents** (cookie policy, privacy policy, terms) written in Markdown, with directives filled from the config. The consent server uses the same renderer. See [Legal documents](#legal-documents).
+
+- DOM-free. It runs at build time, on the server, in a React Server Component or in a CLI.
+- Output formats: an HTML string, Markdown, or React (`@easy-cookie/policy/react`).
+- The HTML has class names only (`ec-policy*`) and no inline styles.
+- Table headers ship in Italian and English. Other languages fall back to English, and every label can be overridden.
+
+## Install
+
+```sh
+pnpm add @easy-cookie/policy
+```
+
+## Usage
+
+### React / Next.js (server component)
+
+```tsx
+// app/cookie-policy/page.tsx
+import { CookiePolicy } from '@easy-cookie/policy/react';
+import config from '../../easy-cookie.config';
+
+export default function Page() {
+  return (
+    <article>
+      <h1>Cookie policy</h1>
+      <p>…your own introduction (data controller, legal basis, rights)…</p>
+      <CookiePolicy config={config} lang="it" />
+    </article>
+  );
+}
+```
+
+### HTML string / Markdown
+
+```ts
+import { buildPolicyModel, renderPolicyHtml, renderPolicyMarkdown } from '@easy-cookie/policy';
+
+const model = buildPolicyModel(config, 'en');          // categories → services → cookies, localized
+const html = renderPolicyHtml(model, { headingLevel: 3 });
+const md = renderPolicyMarkdown(model);
+```
+
+`buildPolicyModel(config, lang, { date?, labels? })`:
+
+- The date defaults to the revision when the revision starts with `YYYY-MM-DD`.
+- Cookies declared as regular expressions (`pattern: true`) are shown in a readable form, for example `^_ga_.*$` becomes `_ga_*`. The full pattern goes in the `title` attribute.
+
+`renderPolicyHtml(model, opts)` options:
+
+| Option | Default | |
+|---|---|---|
+| `headingLevel` | `2` | Heading level of the category titles |
+| `idPrefix` | `ec-policy-` | Section ids, for example `#ec-policy-measurement` |
+| `meta` | `true` | Shows the "Last updated · Revision" line |
+| `hideEmpty` | `false` | Skips categories without services |
+
+The output has this structure:
+
+```html
+<div class="ec-policy" lang="en">
+  <p class="ec-policy__meta">Last updated: <time datetime="2026-11-13">November 13, 2026</time> · Revision: …</p>
+  <section class="ec-policy__category" id="ec-policy-measurement" data-category="measurement">
+    <h2 class="ec-policy__title">Measurement</h2>
+    <p class="ec-policy__description">…</p>
+    <div class="ec-policy__table-wrap">
+      <table class="ec-policy__table">
+        <caption class="ec-policy__caption">…</caption>
+        <thead><tr><th>Cookie</th><th>Service</th><th>Provider</th><th>Duration</th><th>Purpose</th></tr></thead>
+        <tbody><tr data-service="ga4"><th scope="row"><code class="ec-policy__cookie">_ga</code></th>…
+          <td class="ec-policy__provider"><a class="ec-policy__link" href="https://policies.google.com/privacy">Google Ireland Ltd</a></td>…
+```
+
+- A service without cookies still gets a row, with `—` in the cookie column.
+- A read-only category gets `.ec-policy__badge` ("Always on").
+- All text is HTML-escaped.
+- A privacy URL is linked only when it is `http(s):`, `mailto:` or relative.
+
+### autoClear rules
+
+```ts
+import { autoClearRules, matchesRule } from '@easy-cookie/policy';
+
+autoClearRules(config);
+// { measurement: [{ name: '^_ga$', pattern: true, service: 'ga4' }, …], marketing: [...] }
+```
+
+The function returns, per category, the cookies to delete when that category is withdrawn. Read-only categories are not included. `matchesRule(rule, cookieName)` tests one cookie name against a rule.
+
+## Legal documents
+
+A legal document is Markdown text per language:
+
+```ts
+interface LegalDocContent {
+  translations: Record<string, { title: string; body: string /* Markdown */ }>;
+}
+```
+
+### Rendering
+
+```ts
+import { renderLegalDocument } from '@easy-cookie/policy';
+
+const { lang, title, html } = renderLegalDocument(content, 'it', {
+  config,                        // banner config for {{cookie-table}} / {{services-list}}
+  version: '2026-11-13',         // optional, written as data-version
+  publishedAt: '2026-11-13',     // for {{last-updated}}; defaults to today (previews)
+  site: { name: 'Acme', domain: 'acme.it' }, // for {{site.name}} / {{site.domain}} left in the text
+});
+```
+
+- The translation for `lang` is used. Otherwise the renderer falls back to the base language (`en-GB` → `en`), then to `config.language.default`, then to the first translation. The result reports the language it used.
+- Markdown is rendered with [markdown-it](https://github.com/markdown-it/markdown-it): raw HTML is **disabled** (it shows as text), bare URLs are linked, and links accept only `http:`, `https:`, `mailto:` and relative URLs. External links get `rel="noopener noreferrer"`.
+- The output is `<div class="ec-legal" lang="…">` with an `<h1 class="ec-legal__title">` (pass `heading: false` to leave it out) followed by the body.
+
+| Directive | Output |
+|---|---|
+| `{{cookie-table}}` (own line) | The per-category cookie tables of `renderPolicyHtml()` (`<h3>` titles, no meta line). Without `config`, a short notice. |
+| `{{services-list}}` (own line) | `<ul class="ec-legal__services">`: label, provider, purpose, category, privacy link and, for services added from the catalog (`from`), the transfer countries and safeguard. Services without a `provider` (first party) are skipped. |
+| `{{preferences-link}}` | `<a href="#" class="ec-legal__preferences" data-ec-open-preferences>`, which the core runtime binds to `openPreferences()`. With `preferencesHref`, a plain link to that URL instead (for pages without the banner). |
+| `{{last-updated}}` | On its own line: "Ultimo aggiornamento: 13 novembre 2026" (`.ec-legal__updated`). Inline: just the `<time>`. |
+| `{{site.name}}`, `{{site.domain}}` | The `site` values, when given. |
+
+`[[Text to fill in]]` placeholders render as `<mark class="ec-legal__todo">Text to fill in</mark>`. `countPlaceholders(content)` counts the ones left.
+
+Other helpers: `pickLegalLanguage`, `legalContentError` (validation), `fillSiteVariables`, `isSafeLegalUrl`, `LEGAL_KINDS`.
+
+### Built-in templates
+
+`LEGAL_TEMPLATES[kind][lang]` holds IT and EN drafts for `cookie`, `privacy` and `terms`. `legalTemplate(kind, lang, site?)` returns one, with `{{site.*}}` filled in (unknown languages get English).
+
+- **Privacy policy:** controller, data categories, purposes and legal bases (art. 6 GDPR), whether data must be provided, retention, recipients, `{{services-list}}`, transfers outside the EEA, rights (artt. 15–22), complaint to the Garante, contact.
+- **Cookie policy:** what cookies are, how they are used (technical vs consent-based), categories, `{{cookie-table}}`, managing consent (`{{preferences-link}}`), browser settings, controller, last update.
+- **Terms:** a generic skeleton for a site or service.
+
+They are **starting drafts, not legal advice**. Every owner-specific value is a `[[placeholder]]`, and the first line of each template is a placeholder that asks for a professional review. Delete it once the text is reviewed.
+
+### Fetching published documents
+
+```ts
+import { fetchLegalDocument } from '@easy-cookie/policy/client'; // tiny entry, no Markdown renderer
+
+const doc = await fetchLegalDocument({ endpoint: 'https://consent.example.com', siteKey: 'pk_…', kind: 'privacy', lang: 'it' });
+// { kind, lang, languages, title, html, version, publishedAt } or null when nothing is published
+```
+
+`fetchLegalDocument` is also exported from the root and from `/react`. It accepts `init` (extra `fetch` options) and `fetch` (a custom implementation).
+
+### React
+
+```tsx
+import { LegalDocument, LegalDocumentHtml } from '@easy-cookie/policy/react';
+
+// Server-rendered (RSC, SSR): fetch first, then render.
+<LegalDocumentHtml doc={doc} fallback={<p>Not published yet.</p>} />
+
+// Client-side fetch (a "use client" component).
+<LegalDocument endpoint="https://consent.example.com" siteKey="pk_…" kind="cookie" lang="it" loading={<p>…</p>} />
+```
+
+For Next.js, `getLegalDocument()` in `@easy-cookie/next/server` wraps `fetchLegalDocument` with `next: { revalidate }`.
+
+### Stylesheet
+
+`@easy-cookie/policy/legal.css` (`dist/easy-cookie-legal.css`, also served by the consent server at `/static/easy-cookie-legal.css`) is a small, neutral stylesheet for `.ec-legal`: readable measure, headings, lists, tables (including the cookie tables), the services list and the placeholder marks. All selectors use `:where()`, so your own rules always win. Restyle it with these variables, set on `:root`, on `.ec-legal` or on any ancestor:
+
+| Variable | Default | Role |
+|---|---|---|
+| `--ec-legal-font` | `system-ui, sans-serif` | Font |
+| `--ec-legal-ink` / `--ec-legal-muted` | `#1c1c1a` / `#5a5a55` | Text, secondary text |
+| `--ec-legal-line` | `#dcdcd6` | Rules and table borders |
+| `--ec-legal-accent` | `#1a56c4` | Links and focus ring |
+| `--ec-legal-todo` | `#fff2a8` | Placeholder highlight |
+| `--ec-legal-max-width` | `72ch` | Measure |
+
+## License
+
+MIT

package/dist/chunk-HDY2VYU4.js

@@ -0,0 +1,23 @@
+// src/legal-client.ts
+var LEGAL_KINDS = ["cookie", "privacy", "terms"];
+var isLegalKind = (v) => typeof v === "string" && LEGAL_KINDS.includes(v);
+function legalDocumentUrl(opts) {
+  const base = opts.endpoint.replace(/\/+$/, "");
+  const q = opts.lang ? `?lang=${encodeURIComponent(opts.lang)}` : "";
+  return `${base}/v1/sites/${encodeURIComponent(opts.siteKey)}/legal/${encodeURIComponent(opts.kind)}.json${q}`;
+}
+async function fetchLegalDocument(opts) {
+  const f = opts.fetch ?? fetch;
+  const res = await f(legalDocumentUrl(opts), { credentials: "omit", ...opts.init });
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`[easy-cookie] could not load the ${opts.kind} document (${res.status})`);
+  return await res.json();
+}
+
+export {
+  LEGAL_KINDS,
+  isLegalKind,
+  legalDocumentUrl,
+  fetchLegalDocument
+};
+//# sourceMappingURL=chunk-HDY2VYU4.js.map

package/dist/chunk-HDY2VYU4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/legal-client.ts"],"sourcesContent":["/**\n * Legal document types and the fetch client. Kept free of the Markdown\n * renderer so browser bundles (React component, Next.js) stay small.\n */\n\n/** The three legal documents every site has. */\nexport type LegalKind = 'cookie' | 'privacy' | 'terms';\nexport const LEGAL_KINDS: readonly LegalKind[] = ['cookie', 'privacy', 'terms'];\nexport const isLegalKind = (v: unknown): v is LegalKind => typeof v === 'string' && (LEGAL_KINDS as readonly string[]).includes(v);\n\nexport interface LegalTranslation {\n  title: string;\n  /** Markdown, rendered with raw HTML disabled. */\n  body: string;\n}\n\n/** Content of a legal document: one entry per language it is written in. */\nexport interface LegalDocContent {\n  translations: Record<string, LegalTranslation>;\n}\n\n/** A published document as served by `GET /v1/sites/:publicKey/legal/:kind.json`. */\nexport interface PublishedLegalDocument {\n  kind: LegalKind;\n  /** Language actually shown (after fallback). */\n  lang: string;\n  /** Every language the document is written in. */\n  languages: string[];\n  title: string;\n  /** Rendered, safe HTML wrapped in `<div class=\"ec-legal\" lang=\"…\">`. */\n  html: string;\n  version: string;\n  publishedAt: string;\n}\n\nexport interface FetchLegalDocumentOptions {\n  /** Base URL of the consent server. */\n  endpoint: string;\n  /** Public site key (`pk_…`). */\n  siteKey: string;\n  kind: LegalKind;\n  lang?: string;\n  /** Extra fetch options (e.g. Next's `next: { revalidate }`). */\n  init?: RequestInit & Record<string, unknown>;\n  /** Custom fetch implementation. */\n  fetch?: typeof fetch;\n}\n\n/** URL of the published document JSON on the consent server. */\nexport function legalDocumentUrl(opts: Pick<FetchLegalDocumentOptions, 'endpoint' | 'siteKey' | 'kind' | 'lang'>): string {\n  const base = opts.endpoint.replace(/\\/+$/, '');\n  const q = opts.lang ? `?lang=${encodeURIComponent(opts.lang)}` : '';\n  return `${base}/v1/sites/${encodeURIComponent(opts.siteKey)}/legal/${encodeURIComponent(opts.kind)}.json${q}`;\n}\n\n/**\n * Fetch a published legal document from the consent server.\n * Resolves to null when nothing is published yet (404); throws on other errors.\n */\nexport async function fetchLegalDocument(opts: FetchLegalDocumentOptions): Promise<PublishedLegalDocument | null> {\n  const f = opts.fetch ?? fetch;\n  const res = await f(legalDocumentUrl(opts), { credentials: 'omit', ...opts.init });\n  if (res.status === 404) return null;\n  if (!res.ok) throw new Error(`[easy-cookie] could not load the ${opts.kind} document (${res.status})`);\n  return (await res.json()) as PublishedLegalDocument;\n}\n"],"mappings":";AAOO,IAAM,cAAoC,CAAC,UAAU,WAAW,OAAO;AACvE,IAAM,cAAc,CAAC,MAA+B,OAAO,MAAM,YAAa,YAAkC,SAAS,CAAC;AAyC1H,SAAS,iBAAiB,MAAyF;AACxH,QAAM,OAAO,KAAK,SAAS,QAAQ,QAAQ,EAAE;AAC7C,QAAM,IAAI,KAAK,OAAO,SAAS,mBAAmB,KAAK,IAAI,CAAC,KAAK;AACjE,SAAO,GAAG,IAAI,aAAa,mBAAmB,KAAK,OAAO,CAAC,UAAU,mBAAmB,KAAK,IAAI,CAAC,QAAQ,CAAC;AAC7G;AAMA,eAAsB,mBAAmB,MAAyE;AAChH,QAAM,IAAI,KAAK,SAAS;AACxB,QAAM,MAAM,MAAM,EAAE,iBAAiB,IAAI,GAAG,EAAE,aAAa,QAAQ,GAAG,KAAK,KAAK,CAAC;AACjF,MAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,MAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,oCAAoC,KAAK,IAAI,cAAc,IAAI,MAAM,GAAG;AACrG,SAAQ,MAAM,IAAI,KAAK;AACzB;","names":[]}

package/dist/chunk-P3F5NQPR.js

@@ -0,0 +1,224 @@
+// src/model.ts
+import { localize, resolveConfig } from "@easy-cookie/core/shared";
+var POLICY_LABELS = {
+  it: {
+    cookie: "Cookie",
+    service: "Servizio",
+    provider: "Fornitore",
+    duration: "Durata",
+    purpose: "Finalit\xE0",
+    updated: "Ultimo aggiornamento",
+    revision: "Revisione",
+    alwaysOn: "Sempre attivi",
+    privacyPolicy: "Privacy policy",
+    noCookies: "Nessun cookie dichiarato in questa categoria.",
+    noCookie: "\u2014",
+    caption: "Cookie della categoria \xAB{category}\xBB"
+  },
+  en: {
+    cookie: "Cookie",
+    service: "Service",
+    provider: "Provider",
+    duration: "Duration",
+    purpose: "Purpose",
+    updated: "Last updated",
+    revision: "Revision",
+    alwaysOn: "Always on",
+    privacyPolicy: "Privacy policy",
+    noCookies: "No cookies declared in this category.",
+    noCookie: "\u2014",
+    caption: "Cookies in the \u201C{category}\u201D category"
+  }
+};
+function prettyCookiePattern(source) {
+  return source.replace(/^\^/, "").replace(/\$$/, "").replace(/\(([^()]*)\)\?/g, "[$1]").replace(/\.\*|\.\+|\[\^[^\]]*\]\*|\\d\+|\\w\+/g, "*").replace(/\\(.)/g, "$1");
+}
+function isoDate(value, revision) {
+  if (value instanceof Date) return Number.isNaN(value.getTime()) ? void 0 : value.toISOString().slice(0, 10);
+  if (typeof value === "string") return value.slice(0, 10);
+  const m = /^\d{4}-\d{2}-\d{2}/.exec(revision);
+  return m ? m[0] : void 0;
+}
+function buildPolicyModel(config, lang, opts = {}) {
+  const resolved = resolveConfig(config);
+  const fallback = resolved.language.default;
+  const l = (v) => localize(v, lang, fallback);
+  const labels = { ...POLICY_LABELS[lang] ?? POLICY_LABELS.en, ...opts.labels };
+  const services = config.services ?? {};
+  return {
+    lang,
+    revision: config.revision,
+    date: isoDate(opts.date, config.revision),
+    policyUrl: config.policyUrl ? l(config.policyUrl) : void 0,
+    labels,
+    categories: resolved.resolvedCategories.map((cat) => ({
+      id: cat.id,
+      title: l(cat.title),
+      description: l(cat.description),
+      readOnly: cat.readOnly,
+      color: cat.color,
+      services: cat.services.map((id) => {
+        const s = services[id];
+        return {
+          id,
+          label: s.label ? l(s.label) : id,
+          provider: s.provider ?? "",
+          privacyUrl: s.privacyUrl,
+          purpose: l(s.purpose),
+          cookies: (s.cookies ?? []).map((ck) => ({
+            name: ck.name,
+            displayName: ck.pattern ? prettyCookiePattern(ck.name) : ck.name,
+            pattern: !!ck.pattern,
+            duration: l(ck.duration),
+            description: l(ck.description),
+            domain: ck.domain
+          }))
+        };
+      })
+    }))
+  };
+}
+function formatPolicyDate(model) {
+  if (!model.date) return void 0;
+  const d = /* @__PURE__ */ new Date(`${model.date}T00:00:00Z`);
+  if (Number.isNaN(d.getTime())) return model.date;
+  try {
+    return new Intl.DateTimeFormat(model.lang, { dateStyle: "long", timeZone: "UTC" }).format(d);
+  } catch {
+    return model.date;
+  }
+}
+function autoClearRules(config) {
+  const out = {};
+  for (const [id, cat] of Object.entries(config.categories)) if (!cat.readOnly) out[id] = [];
+  for (const [service, s] of Object.entries(config.services ?? {})) {
+    const list = out[s.category];
+    if (!list) continue;
+    for (const ck of s.cookies ?? [])
+      list.push({ name: ck.name, pattern: !!ck.pattern, ...ck.domain ? { domain: ck.domain } : {}, service });
+  }
+  return out;
+}
+function matchesRule(rule, cookieName) {
+  if (!rule.pattern) return rule.name === cookieName;
+  try {
+    return new RegExp(rule.name).test(cookieName);
+  } catch {
+    return false;
+  }
+}
+
+// src/render.ts
+var ESC = { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" };
+function escapeHtml(value) {
+  return value.replace(/[&<>"']/g, (c) => ESC[c]);
+}
+function safeUrl(url) {
+  return /^(https?:|mailto:|\/|#)/i.test(url.trim()) ? url : void 0;
+}
+function policyRows(cat) {
+  const rows = [];
+  for (const service of cat.services) {
+    if (service.cookies.length === 0) rows.push({ service, first: true });
+    else service.cookies.forEach((cookie, i) => rows.push({ service, cookie, first: i === 0 }));
+  }
+  return rows;
+}
+function visible(model, opts) {
+  return opts.hideEmpty ? model.categories.filter((c) => c.services.length > 0) : model.categories;
+}
+function renderPolicyHtml(model, opts = {}) {
+  const h = `h${opts.headingLevel ?? 2}`;
+  const prefix = opts.idPrefix ?? "ec-policy-";
+  const L = model.labels;
+  const e = escapeHtml;
+  const out = [`<div class="ec-policy" lang="${e(model.lang)}">`];
+  if (opts.meta !== false) {
+    const parts = [];
+    const date = formatPolicyDate(model);
+    if (date) parts.push(`${e(L.updated)}: <time datetime="${e(model.date)}">${e(date)}</time>`);
+    parts.push(`${e(L.revision)}: <span class="ec-policy__revision">${e(model.revision)}</span>`);
+    out.push(`<p class="ec-policy__meta">${parts.join(" \xB7 ")}</p>`);
+  }
+  for (const cat of visible(model, opts)) {
+    const id = `${prefix}${cat.id}`;
+    out.push(
+      `<section class="ec-policy__category" id="${e(id)}" data-category="${e(cat.id)}" aria-labelledby="${e(id)}-title">`
+    );
+    out.push(`<${h} class="ec-policy__title" id="${e(id)}-title">${e(cat.title)}</${h}>`);
+    if (cat.readOnly) out.push(`<p class="ec-policy__badge">${e(L.alwaysOn)}</p>`);
+    if (cat.description) out.push(`<p class="ec-policy__description">${e(cat.description)}</p>`);
+    const rows = policyRows(cat);
+    if (rows.length === 0) {
+      out.push(`<p class="ec-policy__empty">${e(L.noCookies)}</p>`);
+    } else {
+      out.push('<div class="ec-policy__table-wrap">');
+      out.push('<table class="ec-policy__table">');
+      out.push(`<caption class="ec-policy__caption">${e(L.caption.replace("{category}", cat.title))}</caption>`);
+      out.push(
+        "<thead><tr>" + [L.cookie, L.service, L.provider, L.duration, L.purpose].map((t) => `<th scope="col">${e(t)}</th>`).join("") + "</tr></thead>"
+      );
+      out.push("<tbody>");
+      for (const { service, cookie } of rows) {
+        const name = cookie ? `<code class="ec-policy__cookie"${cookie.pattern ? ` title="${e(cookie.name)}"` : ""}>${e(cookie.displayName)}</code>` + (cookie.domain ? ` <span class="ec-policy__domain">${e(cookie.domain)}</span>` : "") : `<span class="ec-policy__none">${e(L.noCookie)}</span>`;
+        const url = service.privacyUrl ? safeUrl(service.privacyUrl) : void 0;
+        const provider = url ? `<a class="ec-policy__link" href="${e(url)}" rel="noopener noreferrer" target="_blank">${e(service.provider || L.privacyPolicy)}</a>` : e(service.provider);
+        const purpose = cookie?.description || service.purpose;
+        out.push(
+          `<tr data-service="${e(service.id)}"><th scope="row">${name}</th><td class="ec-policy__service">${e(service.label)}</td><td class="ec-policy__provider">${provider}</td><td class="ec-policy__duration">${e(cookie?.duration ?? "")}</td><td class="ec-policy__purpose">${e(purpose)}</td></tr>`
+        );
+      }
+      out.push("</tbody></table></div>");
+    }
+    out.push("</section>");
+  }
+  out.push("</div>");
+  return out.join("\n");
+}
+function mdCell(value) {
+  return value.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\r?\n/g, " ");
+}
+function renderPolicyMarkdown(model, opts = {}) {
+  const hashes = "#".repeat(opts.headingLevel ?? 2);
+  const L = model.labels;
+  const out = [];
+  if (opts.meta !== false) {
+    const date = formatPolicyDate(model);
+    out.push([date ? `${L.updated}: ${date}` : "", `${L.revision}: ${model.revision}`].filter(Boolean).join(" \xB7 "), "");
+  }
+  for (const cat of visible(model, opts)) {
+    out.push(`${hashes} ${cat.title}`, "");
+    if (cat.readOnly) out.push(`*${L.alwaysOn}*`, "");
+    if (cat.description) out.push(cat.description, "");
+    const rows = policyRows(cat);
+    if (rows.length === 0) {
+      out.push(L.noCookies, "");
+      continue;
+    }
+    out.push(`| ${[L.cookie, L.service, L.provider, L.duration, L.purpose].map(mdCell).join(" | ")} |`);
+    out.push("| --- | --- | --- | --- | --- |");
+    for (const { service, cookie } of rows) {
+      const name = cookie ? `\`${cookie.displayName.replace(/`/g, "")}\`` : L.noCookie;
+      const provider = service.privacyUrl ? `[${mdCell(service.provider || L.privacyPolicy).replace(/[[\]]/g, "\\$&")}](${service.privacyUrl.replace(/[()\s]/g, encodeURIComponent)})` : mdCell(service.provider);
+      out.push(
+        `| ${name} | ${mdCell(service.label)} | ${provider} | ${mdCell(cookie?.duration ?? "")} | ${mdCell(cookie?.description || service.purpose)} |`
+      );
+    }
+    out.push("");
+  }
+  return out.join("\n").trimEnd() + "\n";
+}
+
+export {
+  POLICY_LABELS,
+  prettyCookiePattern,
+  buildPolicyModel,
+  formatPolicyDate,
+  autoClearRules,
+  matchesRule,
+  escapeHtml,
+  policyRows,
+  renderPolicyHtml,
+  renderPolicyMarkdown
+};
+//# sourceMappingURL=chunk-P3F5NQPR.js.map

package/dist/chunk-P3F5NQPR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/model.ts","../src/render.ts"],"sourcesContent":["import { localize, resolveConfig, type EasyCookieConfig } from '@easy-cookie/core/shared';\n\nexport interface PolicyLabels {\n  cookie: string;\n  service: string;\n  provider: string;\n  duration: string;\n  purpose: string;\n  /** Prefix of the \"last updated\" line. */\n  updated: string;\n  revision: string;\n  alwaysOn: string;\n  privacyPolicy: string;\n  /** Shown in a category without services. */\n  noCookies: string;\n  /** Shown in the cookie column for a service that sets no cookies. */\n  noCookie: string;\n  /** Table caption: `{category}` is replaced with the category title. */\n  caption: string;\n}\n\n/** Built-in table headers and labels. Unknown languages fall back to English. */\nexport const POLICY_LABELS: Record<'it' | 'en', PolicyLabels> = {\n  it: {\n    cookie: 'Cookie',\n    service: 'Servizio',\n    provider: 'Fornitore',\n    duration: 'Durata',\n    purpose: 'Finalità',\n    updated: 'Ultimo aggiornamento',\n    revision: 'Revisione',\n    alwaysOn: 'Sempre attivi',\n    privacyPolicy: 'Privacy policy',\n    noCookies: 'Nessun cookie dichiarato in questa categoria.',\n    noCookie: '—',\n    caption: 'Cookie della categoria «{category}»',\n  },\n  en: {\n    cookie: 'Cookie',\n    service: 'Service',\n    provider: 'Provider',\n    duration: 'Duration',\n    purpose: 'Purpose',\n    updated: 'Last updated',\n    revision: 'Revision',\n    alwaysOn: 'Always on',\n    privacyPolicy: 'Privacy policy',\n    noCookies: 'No cookies declared in this category.',\n    noCookie: '—',\n    caption: 'Cookies in the “{category}” category',\n  },\n};\n\nexport interface PolicyCookie {\n  /** Name as declared (a regular expression source when `pattern` is true). */\n  name: string;\n  /** Human-friendly name: anchors stripped, `.*` shown as `*` for patterns. */\n  displayName: string;\n  pattern: boolean;\n  duration: string;\n  description: string;\n  domain?: string;\n}\n\nexport interface PolicyService {\n  id: string;\n  label: string;\n  provider: string;\n  privacyUrl?: string;\n  purpose: string;\n  cookies: PolicyCookie[];\n}\n\nexport interface PolicyCategory {\n  id: string;\n  title: string;\n  description: string;\n  readOnly: boolean;\n  color: string;\n  services: PolicyService[];\n}\n\nexport interface PolicyModel {\n  lang: string;\n  revision: string;\n  /** ISO date (YYYY-MM-DD) of the revision, when known. */\n  date?: string;\n  policyUrl?: string;\n  labels: PolicyLabels;\n  categories: PolicyCategory[];\n}\n\nexport interface BuildPolicyOptions {\n  /** Date of this revision (ISO). Defaults to the revision itself when it starts with YYYY-MM-DD. */\n  date?: string | Date;\n  /** Override some labels. */\n  labels?: Partial<PolicyLabels>;\n}\n\n/** Make a cookie-name regular expression readable: `^_ga_.*$` → `_ga_*`. */\nexport function prettyCookiePattern(source: string): string {\n  return source\n    .replace(/^\\^/, '')\n    .replace(/\\$$/, '')\n    .replace(/\\(([^()]*)\\)\\?/g, '[$1]')\n    .replace(/\\.\\*|\\.\\+|\\[\\^[^\\]]*\\]\\*|\\\\d\\+|\\\\w\\+/g, '*')\n    .replace(/\\\\(.)/g, '$1');\n}\n\nfunction isoDate(value: string | Date | undefined, revision: string): string | undefined {\n  if (value instanceof Date) return Number.isNaN(value.getTime()) ? undefined : value.toISOString().slice(0, 10);\n  if (typeof value === 'string') return value.slice(0, 10);\n  const m = /^\\d{4}-\\d{2}-\\d{2}/.exec(revision);\n  return m ? m[0] : undefined;\n}\n\n/**\n * Turn the config into a localized, render-agnostic cookie policy model:\n * categories → services → cookies. Pure and DOM-free.\n */\nexport function buildPolicyModel(config: EasyCookieConfig, lang: string, opts: BuildPolicyOptions = {}): PolicyModel {\n  const resolved = resolveConfig(config);\n  const fallback = resolved.language.default;\n  const l = (v: Parameters<typeof localize>[0]) => localize(v, lang, fallback);\n  const labels = { ...((POLICY_LABELS as Record<string, PolicyLabels>)[lang] ?? POLICY_LABELS.en), ...opts.labels };\n  const services = config.services ?? {};\n\n  return {\n    lang,\n    revision: config.revision,\n    date: isoDate(opts.date, config.revision),\n    policyUrl: config.policyUrl ? l(config.policyUrl) : undefined,\n    labels,\n    categories: resolved.resolvedCategories.map((cat) => ({\n      id: cat.id,\n      title: l(cat.title),\n      description: l(cat.description),\n      readOnly: cat.readOnly,\n      color: cat.color,\n      services: cat.services.map((id) => {\n        const s = services[id];\n        return {\n          id,\n          label: s.label ? l(s.label) : id,\n          provider: s.provider ?? '',\n          privacyUrl: s.privacyUrl,\n          purpose: l(s.purpose),\n          cookies: (s.cookies ?? []).map((ck) => ({\n            name: ck.name,\n            displayName: ck.pattern ? prettyCookiePattern(ck.name) : ck.name,\n            pattern: !!ck.pattern,\n            duration: l(ck.duration),\n            description: l(ck.description),\n            domain: ck.domain,\n          })),\n        };\n      }),\n    })),\n  };\n}\n\n/** Format the model date for display, e.g. \"13 novembre 2026\" / \"November 13, 2026\". */\nexport function formatPolicyDate(model: Pick<PolicyModel, 'date' | 'lang'>): string | undefined {\n  if (!model.date) return undefined;\n  const d = new Date(`${model.date}T00:00:00Z`);\n  if (Number.isNaN(d.getTime())) return model.date;\n  try {\n    return new Intl.DateTimeFormat(model.lang, { dateStyle: 'long', timeZone: 'UTC' }).format(d);\n  } catch {\n    return model.date;\n  }\n}\n\nexport interface AutoClearRule {\n  /** Cookie name, or a regular expression source when `pattern` is true. */\n  name: string;\n  pattern: boolean;\n  domain?: string;\n  service: string;\n}\n\n/**\n * Cookies to delete when a category is withdrawn, per category id.\n * Read-only (necessary) categories are omitted: they cannot be withdrawn.\n */\nexport function autoClearRules(config: EasyCookieConfig): Record<string, AutoClearRule[]> {\n  const out: Record<string, AutoClearRule[]> = {};\n  for (const [id, cat] of Object.entries(config.categories)) if (!cat.readOnly) out[id] = [];\n  for (const [service, s] of Object.entries(config.services ?? {})) {\n    const list = out[s.category];\n    if (!list) continue;\n    for (const ck of s.cookies ?? [])\n      list.push({ name: ck.name, pattern: !!ck.pattern, ...(ck.domain ? { domain: ck.domain } : {}), service });\n  }\n  return out;\n}\n\n/** True when `cookieName` matches the rule. */\nexport function matchesRule(rule: Pick<AutoClearRule, 'name' | 'pattern'>, cookieName: string): boolean {\n  if (!rule.pattern) return rule.name === cookieName;\n  try {\n    return new RegExp(rule.name).test(cookieName);\n  } catch {\n    return false;\n  }\n}\n","import { formatPolicyDate, type PolicyCategory, type PolicyModel, type PolicyService } from './model';\n\nexport interface RenderPolicyOptions {\n  /** Heading level of category titles (2 → `<h2>`). Default 2. */\n  headingLevel?: 2 | 3 | 4 | 5 | 6;\n  /** Prefix for section ids (`#ec-policy-measurement`). Default `ec-policy-`. */\n  idPrefix?: string;\n  /** Show the \"last updated / revision\" line. Default true. */\n  meta?: boolean;\n  /** Omit categories without services. Default false. */\n  hideEmpty?: boolean;\n}\n\nconst ESC: Record<string, string> = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' };\nexport function escapeHtml(value: string): string {\n  return value.replace(/[&<>\"']/g, (c) => ESC[c]);\n}\n\nfunction safeUrl(url: string): string | undefined {\n  return /^(https?:|mailto:|\\/|#)/i.test(url.trim()) ? url : undefined;\n}\n\nexport interface PolicyRow {\n  service: PolicyService;\n  cookie?: PolicyService['cookies'][number];\n  /** First row of this service (for grouping). */\n  first: boolean;\n}\n\n/** Flatten a category to table rows: one per cookie, or one per service without cookies. */\nexport function policyRows(cat: PolicyCategory): PolicyRow[] {\n  const rows: PolicyRow[] = [];\n  for (const service of cat.services) {\n    if (service.cookies.length === 0) rows.push({ service, first: true });\n    else service.cookies.forEach((cookie, i) => rows.push({ service, cookie, first: i === 0 }));\n  }\n  return rows;\n}\n\nfunction visible(model: PolicyModel, opts: RenderPolicyOptions): PolicyCategory[] {\n  return opts.hideEmpty ? model.categories.filter((c) => c.services.length > 0) : model.categories;\n}\n\n/**\n * Semantic HTML for the cookie section of a policy: one `<section>` and one\n * `<table>` per category. Class names only (`ec-policy*`), no inline styles.\n */\nexport function renderPolicyHtml(model: PolicyModel, opts: RenderPolicyOptions = {}): string {\n  const h = `h${opts.headingLevel ?? 2}`;\n  const prefix = opts.idPrefix ?? 'ec-policy-';\n  const L = model.labels;\n  const e = escapeHtml;\n  const out: string[] = [`<div class=\"ec-policy\" lang=\"${e(model.lang)}\">`];\n\n  if (opts.meta !== false) {\n    const parts: string[] = [];\n    const date = formatPolicyDate(model);\n    if (date) parts.push(`${e(L.updated)}: <time datetime=\"${e(model.date!)}\">${e(date)}</time>`);\n    parts.push(`${e(L.revision)}: <span class=\"ec-policy__revision\">${e(model.revision)}</span>`);\n    out.push(`<p class=\"ec-policy__meta\">${parts.join(' · ')}</p>`);\n  }\n\n  for (const cat of visible(model, opts)) {\n    const id = `${prefix}${cat.id}`;\n    out.push(\n      `<section class=\"ec-policy__category\" id=\"${e(id)}\" data-category=\"${e(cat.id)}\" aria-labelledby=\"${e(id)}-title\">`,\n    );\n    out.push(`<${h} class=\"ec-policy__title\" id=\"${e(id)}-title\">${e(cat.title)}</${h}>`);\n    if (cat.readOnly) out.push(`<p class=\"ec-policy__badge\">${e(L.alwaysOn)}</p>`);\n    if (cat.description) out.push(`<p class=\"ec-policy__description\">${e(cat.description)}</p>`);\n\n    const rows = policyRows(cat);\n    if (rows.length === 0) {\n      out.push(`<p class=\"ec-policy__empty\">${e(L.noCookies)}</p>`);\n    } else {\n      out.push('<div class=\"ec-policy__table-wrap\">');\n      out.push('<table class=\"ec-policy__table\">');\n      out.push(`<caption class=\"ec-policy__caption\">${e(L.caption.replace('{category}', cat.title))}</caption>`);\n      out.push(\n        '<thead><tr>' +\n          [L.cookie, L.service, L.provider, L.duration, L.purpose].map((t) => `<th scope=\"col\">${e(t)}</th>`).join('') +\n          '</tr></thead>',\n      );\n      out.push('<tbody>');\n      for (const { service, cookie } of rows) {\n        const name = cookie\n          ? `<code class=\"ec-policy__cookie\"${cookie.pattern ? ` title=\"${e(cookie.name)}\"` : ''}>${e(cookie.displayName)}</code>` +\n            (cookie.domain ? ` <span class=\"ec-policy__domain\">${e(cookie.domain)}</span>` : '')\n          : `<span class=\"ec-policy__none\">${e(L.noCookie)}</span>`;\n        const url = service.privacyUrl ? safeUrl(service.privacyUrl) : undefined;\n        const provider = url\n          ? `<a class=\"ec-policy__link\" href=\"${e(url)}\" rel=\"noopener noreferrer\" target=\"_blank\">${e(service.provider || L.privacyPolicy)}</a>`\n          : e(service.provider);\n        const purpose = cookie?.description || service.purpose;\n        out.push(\n          `<tr data-service=\"${e(service.id)}\">` +\n            `<th scope=\"row\">${name}</th>` +\n            `<td class=\"ec-policy__service\">${e(service.label)}</td>` +\n            `<td class=\"ec-policy__provider\">${provider}</td>` +\n            `<td class=\"ec-policy__duration\">${e(cookie?.duration ?? '')}</td>` +\n            `<td class=\"ec-policy__purpose\">${e(purpose)}</td>` +\n            '</tr>',\n        );\n      }\n      out.push('</tbody></table></div>');\n    }\n    out.push('</section>');\n  }\n  out.push('</div>');\n  return out.join('\\n');\n}\n\nfunction mdCell(value: string): string {\n  return value.replace(/\\\\/g, '\\\\\\\\').replace(/\\|/g, '\\\\|').replace(/\\r?\\n/g, ' ');\n}\n\n/** GitHub-flavoured Markdown version of the policy (one table per category). */\nexport function renderPolicyMarkdown(model: PolicyModel, opts: Pick<RenderPolicyOptions, 'headingLevel' | 'meta' | 'hideEmpty'> = {}): string {\n  const hashes = '#'.repeat(opts.headingLevel ?? 2);\n  const L = model.labels;\n  const out: string[] = [];\n  if (opts.meta !== false) {\n    const date = formatPolicyDate(model);\n    out.push([date ? `${L.updated}: ${date}` : '', `${L.revision}: ${model.revision}`].filter(Boolean).join(' · '), '');\n  }\n  for (const cat of visible(model, opts)) {\n    out.push(`${hashes} ${cat.title}`, '');\n    if (cat.readOnly) out.push(`*${L.alwaysOn}*`, '');\n    if (cat.description) out.push(cat.description, '');\n    const rows = policyRows(cat);\n    if (rows.length === 0) {\n      out.push(L.noCookies, '');\n      continue;\n    }\n    out.push(`| ${[L.cookie, L.service, L.provider, L.duration, L.purpose].map(mdCell).join(' | ')} |`);\n    out.push('| --- | --- | --- | --- | --- |');\n    for (const { service, cookie } of rows) {\n      const name = cookie ? `\\`${cookie.displayName.replace(/`/g, '')}\\`` : L.noCookie;\n      const provider = service.privacyUrl\n        ? `[${mdCell(service.provider || L.privacyPolicy).replace(/[[\\]]/g, '\\\\$&')}](${service.privacyUrl.replace(/[()\\s]/g, encodeURIComponent)})`\n        : mdCell(service.provider);\n      out.push(\n        `| ${name} | ${mdCell(service.label)} | ${provider} | ${mdCell(cookie?.duration ?? '')} | ${mdCell(cookie?.description || service.purpose)} |`,\n      );\n    }\n    out.push('');\n  }\n  return out.join('\\n').trimEnd() + '\\n';\n}\n"],"mappings":";AAAA,SAAS,UAAU,qBAA4C;AAsBxD,IAAM,gBAAmD;AAAA,EAC9D,IAAI;AAAA,IACF,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,eAAe;AAAA,IACf,WAAW;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AAAA,EACA,IAAI;AAAA,IACF,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU;AAAA,IACV,eAAe;AAAA,IACf,WAAW;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF;AAiDO,SAAS,oBAAoB,QAAwB;AAC1D,SAAO,OACJ,QAAQ,OAAO,EAAE,EACjB,QAAQ,OAAO,EAAE,EACjB,QAAQ,mBAAmB,MAAM,EACjC,QAAQ,yCAAyC,GAAG,EACpD,QAAQ,UAAU,IAAI;AAC3B;AAEA,SAAS,QAAQ,OAAkC,UAAsC;AACvF,MAAI,iBAAiB,KAAM,QAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,SAAY,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7G,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM,GAAG,EAAE;AACvD,QAAM,IAAI,qBAAqB,KAAK,QAAQ;AAC5C,SAAO,IAAI,EAAE,CAAC,IAAI;AACpB;AAMO,SAAS,iBAAiB,QAA0B,MAAc,OAA2B,CAAC,GAAgB;AACnH,QAAM,WAAW,cAAc,MAAM;AACrC,QAAM,WAAW,SAAS,SAAS;AACnC,QAAM,IAAI,CAAC,MAAsC,SAAS,GAAG,MAAM,QAAQ;AAC3E,QAAM,SAAS,EAAE,GAAK,cAA+C,IAAI,KAAK,cAAc,IAAK,GAAG,KAAK,OAAO;AAChH,QAAM,WAAW,OAAO,YAAY,CAAC;AAErC,SAAO;AAAA,IACL;AAAA,IACA,UAAU,OAAO;AAAA,IACjB,MAAM,QAAQ,KAAK,MAAM,OAAO,QAAQ;AAAA,IACxC,WAAW,OAAO,YAAY,EAAE,OAAO,SAAS,IAAI;AAAA,IACpD;AAAA,IACA,YAAY,SAAS,mBAAmB,IAAI,CAAC,SAAS;AAAA,MACpD,IAAI,IAAI;AAAA,MACR,OAAO,EAAE,IAAI,KAAK;AAAA,MAClB,aAAa,EAAE,IAAI,WAAW;AAAA,MAC9B,UAAU,IAAI;AAAA,MACd,OAAO,IAAI;AAAA,MACX,UAAU,IAAI,SAAS,IAAI,CAAC,OAAO;AACjC,cAAM,IAAI,SAAS,EAAE;AACrB,eAAO;AAAA,UACL;AAAA,UACA,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI;AAAA,UAC9B,UAAU,EAAE,YAAY;AAAA,UACxB,YAAY,EAAE;AAAA,UACd,SAAS,EAAE,EAAE,OAAO;AAAA,UACpB,UAAU,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ;AAAA,YACtC,MAAM,GAAG;AAAA,YACT,aAAa,GAAG,UAAU,oBAAoB,GAAG,IAAI,IAAI,GAAG;AAAA,YAC5D,SAAS,CAAC,CAAC,GAAG;AAAA,YACd,UAAU,EAAE,GAAG,QAAQ;AAAA,YACvB,aAAa,EAAE,GAAG,WAAW;AAAA,YAC7B,QAAQ,GAAG;AAAA,UACb,EAAE;AAAA,QACJ;AAAA,MACF,CAAC;AAAA,IACH,EAAE;AAAA,EACJ;AACF;AAGO,SAAS,iBAAiB,OAA+D;AAC9F,MAAI,CAAC,MAAM,KAAM,QAAO;AACxB,QAAM,IAAI,oBAAI,KAAK,GAAG,MAAM,IAAI,YAAY;AAC5C,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO,MAAM;AAC5C,MAAI;AACF,WAAO,IAAI,KAAK,eAAe,MAAM,MAAM,EAAE,WAAW,QAAQ,UAAU,MAAM,CAAC,EAAE,OAAO,CAAC;AAAA,EAC7F,QAAQ;AACN,WAAO,MAAM;AAAA,EACf;AACF;AAcO,SAAS,eAAe,QAA2D;AACxF,QAAM,MAAuC,CAAC;AAC9C,aAAW,CAAC,IAAI,GAAG,KAAK,OAAO,QAAQ,OAAO,UAAU,EAAG,KAAI,CAAC,IAAI,SAAU,KAAI,EAAE,IAAI,CAAC;AACzF,aAAW,CAAC,SAAS,CAAC,KAAK,OAAO,QAAQ,OAAO,YAAY,CAAC,CAAC,GAAG;AAChE,UAAM,OAAO,IAAI,EAAE,QAAQ;AAC3B,QAAI,CAAC,KAAM;AACX,eAAW,MAAM,EAAE,WAAW,CAAC;AAC7B,WAAK,KAAK,EAAE,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,GAAG,SAAS,GAAI,GAAG,SAAS,EAAE,QAAQ,GAAG,OAAO,IAAI,CAAC,GAAI,QAAQ,CAAC;AAAA,EAC5G;AACA,SAAO;AACT;AAGO,SAAS,YAAY,MAA+C,YAA6B;AACtG,MAAI,CAAC,KAAK,QAAS,QAAO,KAAK,SAAS;AACxC,MAAI;AACF,WAAO,IAAI,OAAO,KAAK,IAAI,EAAE,KAAK,UAAU;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AChMA,IAAM,MAA8B,EAAE,KAAK,SAAS,KAAK,QAAQ,KAAK,QAAQ,KAAK,UAAU,KAAK,QAAQ;AACnG,SAAS,WAAW,OAAuB;AAChD,SAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC;AAChD;AAEA,SAAS,QAAQ,KAAiC;AAChD,SAAO,2BAA2B,KAAK,IAAI,KAAK,CAAC,IAAI,MAAM;AAC7D;AAUO,SAAS,WAAW,KAAkC;AAC3D,QAAM,OAAoB,CAAC;AAC3B,aAAW,WAAW,IAAI,UAAU;AAClC,QAAI,QAAQ,QAAQ,WAAW,EAAG,MAAK,KAAK,EAAE,SAAS,OAAO,KAAK,CAAC;AAAA,QAC/D,SAAQ,QAAQ,QAAQ,CAAC,QAAQ,MAAM,KAAK,KAAK,EAAE,SAAS,QAAQ,OAAO,MAAM,EAAE,CAAC,CAAC;AAAA,EAC5F;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,OAAoB,MAA6C;AAChF,SAAO,KAAK,YAAY,MAAM,WAAW,OAAO,CAAC,MAAM,EAAE,SAAS,SAAS,CAAC,IAAI,MAAM;AACxF;AAMO,SAAS,iBAAiB,OAAoB,OAA4B,CAAC,GAAW;AAC3F,QAAM,IAAI,IAAI,KAAK,gBAAgB,CAAC;AACpC,QAAM,SAAS,KAAK,YAAY;AAChC,QAAM,IAAI,MAAM;AAChB,QAAM,IAAI;AACV,QAAM,MAAgB,CAAC,gCAAgC,EAAE,MAAM,IAAI,CAAC,IAAI;AAExE,MAAI,KAAK,SAAS,OAAO;AACvB,UAAM,QAAkB,CAAC;AACzB,UAAM,OAAO,iBAAiB,KAAK;AACnC,QAAI,KAAM,OAAM,KAAK,GAAG,EAAE,EAAE,OAAO,CAAC,qBAAqB,EAAE,MAAM,IAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS;AAC5F,UAAM,KAAK,GAAG,EAAE,EAAE,QAAQ,CAAC,uCAAuC,EAAE,MAAM,QAAQ,CAAC,SAAS;AAC5F,QAAI,KAAK,8BAA8B,MAAM,KAAK,QAAK,CAAC,MAAM;AAAA,EAChE;AAEA,aAAW,OAAO,QAAQ,OAAO,IAAI,GAAG;AACtC,UAAM,KAAK,GAAG,MAAM,GAAG,IAAI,EAAE;AAC7B,QAAI;AAAA,MACF,4CAA4C,EAAE,EAAE,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,EAAE,CAAC;AAAA,IAC3G;AACA,QAAI,KAAK,IAAI,CAAC,iCAAiC,EAAE,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG;AACpF,QAAI,IAAI,SAAU,KAAI,KAAK,+BAA+B,EAAE,EAAE,QAAQ,CAAC,MAAM;AAC7E,QAAI,IAAI,YAAa,KAAI,KAAK,qCAAqC,EAAE,IAAI,WAAW,CAAC,MAAM;AAE3F,UAAM,OAAO,WAAW,GAAG;AAC3B,QAAI,KAAK,WAAW,GAAG;AACrB,UAAI,KAAK,+BAA+B,EAAE,EAAE,SAAS,CAAC,MAAM;AAAA,IAC9D,OAAO;AACL,UAAI,KAAK,qCAAqC;AAC9C,UAAI,KAAK,kCAAkC;AAC3C,UAAI,KAAK,uCAAuC,EAAE,EAAE,QAAQ,QAAQ,cAAc,IAAI,KAAK,CAAC,CAAC,YAAY;AACzG,UAAI;AAAA,QACF,gBACE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAC3G;AAAA,MACJ;AACA,UAAI,KAAK,SAAS;AAClB,iBAAW,EAAE,SAAS,OAAO,KAAK,MAAM;AACtC,cAAM,OAAO,SACT,kCAAkC,OAAO,UAAU,WAAW,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,WAAW,CAAC,aAC5G,OAAO,SAAS,oCAAoC,EAAE,OAAO,MAAM,CAAC,YAAY,MACjF,iCAAiC,EAAE,EAAE,QAAQ,CAAC;AAClD,cAAM,MAAM,QAAQ,aAAa,QAAQ,QAAQ,UAAU,IAAI;AAC/D,cAAM,WAAW,MACb,oCAAoC,EAAE,GAAG,CAAC,+CAA+C,EAAE,QAAQ,YAAY,EAAE,aAAa,CAAC,SAC/H,EAAE,QAAQ,QAAQ;AACtB,cAAM,UAAU,QAAQ,eAAe,QAAQ;AAC/C,YAAI;AAAA,UACF,qBAAqB,EAAE,QAAQ,EAAE,CAAC,qBACb,IAAI,uCACW,EAAE,QAAQ,KAAK,CAAC,wCACf,QAAQ,wCACR,EAAE,QAAQ,YAAY,EAAE,CAAC,uCAC1B,EAAE,OAAO,CAAC;AAAA,QAEhD;AAAA,MACF;AACA,UAAI,KAAK,wBAAwB;AAAA,IACnC;AACA,QAAI,KAAK,YAAY;AAAA,EACvB;AACA,MAAI,KAAK,QAAQ;AACjB,SAAO,IAAI,KAAK,IAAI;AACtB;AAEA,SAAS,OAAO,OAAuB;AACrC,SAAO,MAAM,QAAQ,OAAO,MAAM,EAAE,QAAQ,OAAO,KAAK,EAAE,QAAQ,UAAU,GAAG;AACjF;AAGO,SAAS,qBAAqB,OAAoB,OAAyE,CAAC,GAAW;AAC5I,QAAM,SAAS,IAAI,OAAO,KAAK,gBAAgB,CAAC;AAChD,QAAM,IAAI,MAAM;AAChB,QAAM,MAAgB,CAAC;AACvB,MAAI,KAAK,SAAS,OAAO;AACvB,UAAM,OAAO,iBAAiB,KAAK;AACnC,QAAI,KAAK,CAAC,OAAO,GAAG,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,GAAG,EAAE,QAAQ,KAAK,MAAM,QAAQ,EAAE,EAAE,OAAO,OAAO,EAAE,KAAK,QAAK,GAAG,EAAE;AAAA,EACpH;AACA,aAAW,OAAO,QAAQ,OAAO,IAAI,GAAG;AACtC,QAAI,KAAK,GAAG,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AACrC,QAAI,IAAI,SAAU,KAAI,KAAK,IAAI,EAAE,QAAQ,KAAK,EAAE;AAChD,QAAI,IAAI,YAAa,KAAI,KAAK,IAAI,aAAa,EAAE;AACjD,UAAM,OAAO,WAAW,GAAG;AAC3B,QAAI,KAAK,WAAW,GAAG;AACrB,UAAI,KAAK,EAAE,WAAW,EAAE;AACxB;AAAA,IACF;AACA,QAAI,KAAK,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,KAAK,KAAK,CAAC,IAAI;AAClG,QAAI,KAAK,iCAAiC;AAC1C,eAAW,EAAE,SAAS,OAAO,KAAK,MAAM;AACtC,YAAM,OAAO,SAAS,KAAK,OAAO,YAAY,QAAQ,MAAM,EAAE,CAAC,OAAO,EAAE;AACxE,YAAM,WAAW,QAAQ,aACrB,IAAI,OAAO,QAAQ,YAAY,EAAE,aAAa,EAAE,QAAQ,UAAU,MAAM,CAAC,KAAK,QAAQ,WAAW,QAAQ,WAAW,kBAAkB,CAAC,MACvI,OAAO,QAAQ,QAAQ;AAC3B,UAAI;AAAA,QACF,KAAK,IAAI,MAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,QAAQ,MAAM,OAAO,QAAQ,YAAY,EAAE,CAAC,MAAM,OAAO,QAAQ,eAAe,QAAQ,OAAO,CAAC;AAAA,MAC5I;AAAA,IACF;AACA,QAAI,KAAK,EAAE;AAAA,EACb;AACA,SAAO,IAAI,KAAK,IAAI,EAAE,QAAQ,IAAI;AACpC;","names":[]}

package/dist/client.cjs

@@ -0,0 +1,50 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/legal-client.ts
+var legal_client_exports = {};
+__export(legal_client_exports, {
+  LEGAL_KINDS: () => LEGAL_KINDS,
+  fetchLegalDocument: () => fetchLegalDocument,
+  isLegalKind: () => isLegalKind,
+  legalDocumentUrl: () => legalDocumentUrl
+});
+module.exports = __toCommonJS(legal_client_exports);
+var LEGAL_KINDS = ["cookie", "privacy", "terms"];
+var isLegalKind = (v) => typeof v === "string" && LEGAL_KINDS.includes(v);
+function legalDocumentUrl(opts) {
+  const base = opts.endpoint.replace(/\/+$/, "");
+  const q = opts.lang ? `?lang=${encodeURIComponent(opts.lang)}` : "";
+  return `${base}/v1/sites/${encodeURIComponent(opts.siteKey)}/legal/${encodeURIComponent(opts.kind)}.json${q}`;
+}
+async function fetchLegalDocument(opts) {
+  const f = opts.fetch ?? fetch;
+  const res = await f(legalDocumentUrl(opts), { credentials: "omit", ...opts.init });
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`[easy-cookie] could not load the ${opts.kind} document (${res.status})`);
+  return await res.json();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  LEGAL_KINDS,
+  fetchLegalDocument,
+  isLegalKind,
+  legalDocumentUrl
+});
+//# sourceMappingURL=client.cjs.map

package/dist/client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/legal-client.ts"],"sourcesContent":["/**\n * Legal document types and the fetch client. Kept free of the Markdown\n * renderer so browser bundles (React component, Next.js) stay small.\n */\n\n/** The three legal documents every site has. */\nexport type LegalKind = 'cookie' | 'privacy' | 'terms';\nexport const LEGAL_KINDS: readonly LegalKind[] = ['cookie', 'privacy', 'terms'];\nexport const isLegalKind = (v: unknown): v is LegalKind => typeof v === 'string' && (LEGAL_KINDS as readonly string[]).includes(v);\n\nexport interface LegalTranslation {\n  title: string;\n  /** Markdown, rendered with raw HTML disabled. */\n  body: string;\n}\n\n/** Content of a legal document: one entry per language it is written in. */\nexport interface LegalDocContent {\n  translations: Record<string, LegalTranslation>;\n}\n\n/** A published document as served by `GET /v1/sites/:publicKey/legal/:kind.json`. */\nexport interface PublishedLegalDocument {\n  kind: LegalKind;\n  /** Language actually shown (after fallback). */\n  lang: string;\n  /** Every language the document is written in. */\n  languages: string[];\n  title: string;\n  /** Rendered, safe HTML wrapped in `<div class=\"ec-legal\" lang=\"…\">`. */\n  html: string;\n  version: string;\n  publishedAt: string;\n}\n\nexport interface FetchLegalDocumentOptions {\n  /** Base URL of the consent server. */\n  endpoint: string;\n  /** Public site key (`pk_…`). */\n  siteKey: string;\n  kind: LegalKind;\n  lang?: string;\n  /** Extra fetch options (e.g. Next's `next: { revalidate }`). */\n  init?: RequestInit & Record<string, unknown>;\n  /** Custom fetch implementation. */\n  fetch?: typeof fetch;\n}\n\n/** URL of the published document JSON on the consent server. */\nexport function legalDocumentUrl(opts: Pick<FetchLegalDocumentOptions, 'endpoint' | 'siteKey' | 'kind' | 'lang'>): string {\n  const base = opts.endpoint.replace(/\\/+$/, '');\n  const q = opts.lang ? `?lang=${encodeURIComponent(opts.lang)}` : '';\n  return `${base}/v1/sites/${encodeURIComponent(opts.siteKey)}/legal/${encodeURIComponent(opts.kind)}.json${q}`;\n}\n\n/**\n * Fetch a published legal document from the consent server.\n * Resolves to null when nothing is published yet (404); throws on other errors.\n */\nexport async function fetchLegalDocument(opts: FetchLegalDocumentOptions): Promise<PublishedLegalDocument | null> {\n  const f = opts.fetch ?? fetch;\n  const res = await f(legalDocumentUrl(opts), { credentials: 'omit', ...opts.init });\n  if (res.status === 404) return null;\n  if (!res.ok) throw new Error(`[easy-cookie] could not load the ${opts.kind} document (${res.status})`);\n  return (await res.json()) as PublishedLegalDocument;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOO,IAAM,cAAoC,CAAC,UAAU,WAAW,OAAO;AACvE,IAAM,cAAc,CAAC,MAA+B,OAAO,MAAM,YAAa,YAAkC,SAAS,CAAC;AAyC1H,SAAS,iBAAiB,MAAyF;AACxH,QAAM,OAAO,KAAK,SAAS,QAAQ,QAAQ,EAAE;AAC7C,QAAM,IAAI,KAAK,OAAO,SAAS,mBAAmB,KAAK,IAAI,CAAC,KAAK;AACjE,SAAO,GAAG,IAAI,aAAa,mBAAmB,KAAK,OAAO,CAAC,UAAU,mBAAmB,KAAK,IAAI,CAAC,QAAQ,CAAC;AAC7G;AAMA,eAAsB,mBAAmB,MAAyE;AAChH,QAAM,IAAI,KAAK,SAAS;AACxB,QAAM,MAAM,MAAM,EAAE,iBAAiB,IAAI,GAAG,EAAE,aAAa,QAAQ,GAAG,KAAK,KAAK,CAAC;AACjF,MAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,MAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,oCAAoC,KAAK,IAAI,cAAc,IAAI,MAAM,GAAG;AACrG,SAAQ,MAAM,IAAI,KAAK;AACzB;","names":[]}

package/dist/client.d.cts

@@ -0,0 +1,51 @@
+/**
+ * Legal document types and the fetch client. Kept free of the Markdown
+ * renderer so browser bundles (React component, Next.js) stay small.
+ */
+/** The three legal documents every site has. */
+type LegalKind = 'cookie' | 'privacy' | 'terms';
+declare const LEGAL_KINDS: readonly LegalKind[];
+declare const isLegalKind: (v: unknown) => v is LegalKind;
+interface LegalTranslation {
+    title: string;
+    /** Markdown, rendered with raw HTML disabled. */
+    body: string;
+}
+/** Content of a legal document: one entry per language it is written in. */
+interface LegalDocContent {
+    translations: Record<string, LegalTranslation>;
+}
+/** A published document as served by `GET /v1/sites/:publicKey/legal/:kind.json`. */
+interface PublishedLegalDocument {
+    kind: LegalKind;
+    /** Language actually shown (after fallback). */
+    lang: string;
+    /** Every language the document is written in. */
+    languages: string[];
+    title: string;
+    /** Rendered, safe HTML wrapped in `<div class="ec-legal" lang="…">`. */
+    html: string;
+    version: string;
+    publishedAt: string;
+}
+interface FetchLegalDocumentOptions {
+    /** Base URL of the consent server. */
+    endpoint: string;
+    /** Public site key (`pk_…`). */
+    siteKey: string;
+    kind: LegalKind;
+    lang?: string;
+    /** Extra fetch options (e.g. Next's `next: { revalidate }`). */
+    init?: RequestInit & Record<string, unknown>;
+    /** Custom fetch implementation. */
+    fetch?: typeof fetch;
+}
+/** URL of the published document JSON on the consent server. */
+declare function legalDocumentUrl(opts: Pick<FetchLegalDocumentOptions, 'endpoint' | 'siteKey' | 'kind' | 'lang'>): string;
+/**
+ * Fetch a published legal document from the consent server.
+ * Resolves to null when nothing is published yet (404); throws on other errors.
+ */
+declare function fetchLegalDocument(opts: FetchLegalDocumentOptions): Promise<PublishedLegalDocument | null>;
+
+export { type FetchLegalDocumentOptions, LEGAL_KINDS, type LegalDocContent, type LegalKind, type LegalTranslation, type PublishedLegalDocument, fetchLegalDocument, isLegalKind, legalDocumentUrl };