@ecomconsult/consentkit 0.5.6 → 0.5.8

package/README.md

@@ -188,15 +188,18 @@ Pass any subset to `init()`. Nested objects merge with the defaults.
 | `theme.mode` | `"auto" \| "light" \| "dark"` | `"auto"` | `auto` follows `prefers-color-scheme` |
 | `theme.dark` | `{ bg, ink, accent, onAccent }` | built-in | Overrides the dark palette |
 | `texts.policyUrl` | `string` | — | v0.5.0. Cookie policy address. `http(s)` only; anything else is ignored |
-| `texts.detailsAction` | `"policy" \| "settings" \| "hide"` | see notes | v0.5.0. What «Learn more» does. Defaults to `policy` when `policyUrl` is set, `settings` when it is not. `policy` without a usable URL falls back to `settings` rather than rendering a dead link |
+| `texts.detailsAction` | `"policy" \| "settings" \| "hide" \| "declaration"` | see notes | v0.5.0, `declaration` in v0.5.7. What «Learn more» does. Defaults to `policy` when `policyUrl` is set, `settings` when it is not. `policy` or `declaration` without a usable URL falls back to `settings` rather than rendering a dead link |
+| `texts.declarationUrl` | `string` | — | v0.5.7. Address of the cookie declaration page, used by `detailsAction: "declaration"`. `http(s)` only. Filled by the hosted service; the client only reads it |
 | `categories.*.enabled` | `boolean` | `true` | Per category: `functional`, `analytics`, `marketing`. Hides the toggle when `false` |
 | `consentTtlDays` | `number` | `365` | Lifetime of the stored decision |
 | `integrations.gcm` | `boolean` | `true` | Google Consent Mode v2 signals |
 | `integrations.gtmDataLayer` | `boolean` | `true` | Push consent events to `window.dataLayer` |
 | `blocking.mode` | `"known" \| "strict"` | `"known"` | `strict` also holds back unknown third-party scripts and iframes — see [Strict mode](#strict-mode) |
 | `blocking.allow` | `string[]` | `[]` | Hosts strict mode must never intercept. Matched by suffix, so `partner.com` also covers `cdn.partner.com` |
+| `blocking.placeholders` | `boolean` | `true` | v0.5.7. Draw a card in place of an embed held back before consent — see [Placeholders for blocked embeds](#placeholders-for-blocked-embeds). `false` restores the pre-0.5.7 behaviour: the frame is still blocked, just invisible |
 | `hostdb` | `Record<string, Category>` | — | Extra `host: category` pairs merged into the tracker database, applied before the initial scan. SaaS mode fills this from the service; `ConsentKit._extendHostDb()` does the same at any later point |
 | `cookieTable` | `CkCookieTableEntry[]` | `[]` | Declared cookies, listed per category in the panel |
+| `services` | `CkService[]` | `[]` | v0.5.8. Third-party services the site declares. Each gets its own toggle inside its category group in the panel, and can be refused individually — see [Services](#services). At most 50 |
 
 `cookieTable` entries:
 
@@ -204,6 +207,45 @@ Pass any subset to `init()`. Nested objects merge with the defaults.
 { name: '_ga', category: 'analytics', vendor: 'Google', purpose: 'Visit statistics', expiry: '2 years' }
 ```
 
+### Services
+
+**v0.5.8.** A `services` row names one third party: where its resources come
+from, which cookies it sets and what it is for. The preferences panel lists it
+inside its category group with **its own toggle**, so a visitor can accept
+analytics in general and still refuse one particular service.
+
+```js
+services: [{
+  id: 'hotjar',                                   // stable, ^[a-z0-9-]{1,64}$
+  name: 'Hotjar',
+  vendor: 'Hotjar Ltd',
+  category: 'analytics',
+  hosts: ['hotjar.com'],                          // suffix-matched, like the tracker database
+  paths: ['/hotjar-'],                            // optional, substring-matched
+  cookies: ['_hjSession', '_hjSessionUser'],      // names; matched against cookieTable
+  privacyUrl: 'https://www.hotjar.com/privacy/',  // http(s) only
+  purpose: { ru: '…', ro: '…', en: 'Records how visitors move around the page.' },
+  enabled: true                                   // false: not shown, not blocked separately
+}]
+```
+
+What the toggle does:
+
+- **Group off** — every service of that group is off and blocked, as before.
+- **Group on** — the services come back, *except* the ones the visitor switched
+  off by hand. A refusal survives the group being switched off and on again.
+- A refused service's resources are held back exactly as if its category had no
+  consent, and its cookies are deleted exactly as on a category withdrawal.
+- The «Allow and show» button on a blocked embed's placeholder grants the
+  category **and** clears the refusal on that frame's service.
+
+`hosts` need not already be in the tracker database: `init()` folds them into
+the block map under the row's own category, so a service host ConsentKit has
+never heard of is still held back.
+
+Refusals are stored in `ck_consent` as `services: { '<id>': false }` — denials
+only. An id absent from the map is allowed, subject to its category.
+
 ### Button appearance
 
 Each of the three banner buttons can be styled independently:
@@ -267,14 +309,69 @@ resolved colours, its contrast ratio, and whether the value was adjusted.
 | `"policy"` | A link to `texts.policyUrl`, opened with `target="_blank" rel="noopener"` |
 | `"settings"` | A button that opens the preferences panel |
 | `"hide"` | Nothing at all |
+| `"declaration"` | v0.5.7. A link to `texts.declarationUrl` — the cookie declaration page — opened the same way as `policy` |
 
 The default follows `policyUrl`: `policy` when one is set, `settings` when it
-is not — so supplying only a URL does the obvious thing.
+is not — so supplying only a URL does the obvious thing. `declarationUrl`
+deliberately does *not* affect that default: a site that gains a declaration
+address keeps whatever «Learn more» already did until it asks for the change.
+
+Both link forms accept `http(s)` addresses only. A `javascript:` or `data:` URL
+in a control the visitor is invited to click is an XSS vector, so anything else
+is refused and the link degrades to `settings`.
 
 > Before 0.5.0 this control was rendered as `<a href="#">` with no handler at
 > all: clicking it jumped to the top of the page and nothing else. Any site
 > running 0.4.x or earlier has a dead «Learn more» link.
 
+### Reopening the settings
+
+`ConsentKit.openSettings()` opens the preferences panel from anywhere on the
+page — a footer link, a menu item, a button in your own cookie policy. It is
+safe to call before the banner has mounted: a call that arrives while the UI
+file is still loading is remembered and honoured on mount, so a link clicked
+during a slow page load still works.
+
+The same panel has an address. Ссылка «Изменить выбор cookie» →
+`https://site/#ck-settings`: любая ссылка на страницу сайта с этим хвостом
+открывает окно настроек — и при загрузке страницы, и при переходе по ссылке на
+уже открытой странице. Хвост убирается из адреса через `history.replaceState`,
+поэтому перезагрузка или «назад» не открывают окно повторно. Это тот адрес, на
+который ведёт кнопка «Изменить выбор cookie» на странице декларации cookie, и
+его же удобно поставить в подвал сайта:
+
+```html
+<a href="#ck-settings">Изменить выбор cookie</a>
+```
+
+### Placeholders for blocked embeds
+
+When the engine holds back an `<iframe>` before consent — a known tracker, or
+any third-party frame in strict mode — the visitor would otherwise see an empty
+hole where a video or a map should be. Since 0.5.7 ConsentKit draws a card in
+its place: the name of the service, the category the embed is waiting for, a
+primary button «Разрешить и показать» that grants **that one category** and
+loads the embed, and a link to the full settings panel.
+
+The card is sized from the frame's own `width`/`height` (or its computed size),
+never shorter than 120px, and never wider than its container. It is rendered in
+its own Shadow DOM and takes the banner's theme — the page's font, your accent
+colour and corner radius — so it looks like part of the site rather than part of
+a third-party widget. Strings ship in ru, ro and en; every other language falls
+back to en.
+
+The button grants one category through the ordinary consent path: the decision
+is stored and journalled as `method: 'custom'`, the usual `ck:consent` /
+`ck:change` events fire, and consent the visitor had already given to *other*
+categories is preserved rather than overwritten. The frame itself is restored by
+the core's normal revival pass, which is the same code path the panel's switches
+and «Accept all» already use.
+
+Frames that are `display:none`, 1×1 tracking pixels, or outside `<body>` are
+left alone, and a frame the site allowed never gets a card at all — an allowed
+frame is never intercepted in the first place. Set `blocking.placeholders:
+false` to restore the pre-0.5.7 behaviour.
+
 ### Infrastructure
 
 Some third-party hosts are not a consent decision at all: they are where a site
@@ -304,12 +401,14 @@ All methods are safe to call at any time and never throw.
 |---|---|---|
 | `init(config?)` | `CkState` | Idempotent. Restores stored consent, then dispatches `ck:init`. Calling again merges config only |
 | `allowed(category)` | `boolean` | `necessary` is always `true` |
+| `allowedService(id)` | `boolean` | v0.5.8. May this one declared service run? True when its category is granted **and** the visitor has not refused it individually. An id the config does not declare is `true` |
 | `getState()` | `CkState` | A fresh object on every call |
 | `accept('all')` | `CkState` | Grants everything. `method: 'accept_all'` |
-| `accept({ ... })` | `CkState` | Per-category choice. `method: 'custom'`. Omitted categories stay denied |
+| `accept({ ... })` | `CkState` | Per-category choice. `method: 'custom'`. Omitted categories stay denied. v0.5.8: an optional `services: { '<id>': false }` replaces the stored refusals wholesale; omit it to leave them untouched |
 | `rejectAll()` | `CkState` | Denies every opt-in category. `method: 'reject_all'` |
 | `withdraw()` | `CkState` | Clears storage and known cookies, sends GCM `denied`, resets to `decided: false` |
 | `show()` | `void` | Opens the preferences panel |
+| `openSettings()` | `void` | v0.5.7. Opens the preferences panel. Safe before the UI has loaded — the request is remembered and honoured as soon as the banner mounts |
 | `hide()` | `void` | Closes the panel |
 | `config` | `CkConfig` | The merged, effective config |
 | `version` | `string` | Core version string |
@@ -323,6 +422,7 @@ All methods are safe to call at any time and never throw.
   ts: null,                // ISO timestamp
   policyVersion: '1',
   categories: { necessary: true, functional: false, analytics: false, marketing: false },
+  services: {},            // v0.5.8. Per-service refusals ONLY: { hotjar: false }
   method: null             // 'accept_all' | 'reject_all' | 'custom'
 }
 ```

package/npm/core.cjs

@@ -25,11 +25,15 @@ function createStub() {
     config: {},
     init: function () { return undecidedState(); },
     allowed: function (cat) { return cat === 'necessary'; },
+    // v0.5.8 (SPEC V1.12 §3). `true`: a stub means the engine never attached
+    // and withholds nothing, so it must not claim a refusal it cannot enforce.
+    allowedService: function () { return true; },
     getState: undecidedState,
     accept: function () { return undecidedState(); },
     rejectAll: function () { return undecidedState(); },
     withdraw: function () { return undecidedState(); },
     show: function () {},
+    openSettings: function () {},
     hide: function () {},
     _categories: CATEGORIES.slice(),
     _isStub: true

package/npm/core.mjs

@@ -23,11 +23,18 @@ export default ConsentKit;
 export const {
   init,
   allowed,
+  // v0.5.8 (SPEC V1.12 §3): «may this ONE declared service run?» — the category
+  // check plus the visitor's per-service refusal, which getState() alone cannot
+  // reconstruct. Part of the public surface, so it is a named import too.
+  allowedService,
   getState,
   accept,
   rejectAll,
   withdraw,
   show,
+  // v0.5.7: the public name for «open the cookie settings», safe to call
+  // before the UI has loaded.
+  openSettings,
   hide,
   // v0.4.0 (§1.3): merging service overrides into the tracker database is part
   // of the public surface, so it must be reachable as a named import too.

package/npm/index.cjs

@@ -28,11 +28,15 @@ function createStub() {
     config: {},
     init: function () { return undecidedState(); },
     allowed: function (cat) { return cat === 'necessary'; },
+    // v0.5.8 (SPEC V1.12 §3). `true`: a stub means the engine never attached
+    // and withholds nothing, so it must not claim a refusal it cannot enforce.
+    allowedService: function () { return true; },
     getState: undecidedState,
     accept: function () { return undecidedState(); },
     rejectAll: function () { return undecidedState(); },
     withdraw: function () { return undecidedState(); },
     show: function () {},
+    openSettings: function () {},
     hide: function () {},
     _categories: CATEGORIES.slice(),
     _isStub: true

package/npm/index.d.ts

@@ -34,11 +34,26 @@ export interface CkState {
   /** Policy version the decision was recorded against. */
   policyVersion: string;
   categories: CkCategories;
+  /**
+   * v0.5.8 (SPEC V1.12 §3). Per-service refusals, and ONLY refusals:
+   * `{ 'hotjar': false }`. An id absent from the map is allowed, subject to its
+   * category. A denial survives its category being switched off and back on.
+   */
+  services: Record<string, false>;
   method: CkMethod;
 }
 
 /** Argument to `accept()`: `'all'`, or an explicit per-category selection. */
-export type CkAcceptArg = 'all' | Partial<Record<CkOptInCategory, boolean>>;
+export type CkAcceptArg =
+  | 'all'
+  | (Partial<Record<CkOptInCategory, boolean>> & {
+      /**
+       * v0.5.8 (SPEC V1.12 §3). The FULL per-service refusal map for this
+       * decision — it replaces the stored one wholesale. Omit it to leave
+       * the existing refusals untouched.
+       */
+      services?: Record<string, false>;
+    });
 
 /** Banner placement. `bar` uses bottom/top; `box` uses the corner positions. */
 export type CkLayoutType = 'bar' | 'modal' | 'box';
@@ -136,8 +151,17 @@ export interface CkTextsConfig {
    * What «Learn more» does. Defaults to `'policy'` when `policyUrl` is set and
    * `'settings'` when it is not. `'policy'` without a usable URL falls back to
    * `'settings'` rather than rendering a dead link. `'hide'` renders nothing.
+   * v0.5.7 adds `'declaration'`: a link to {@link CkTextsConfig.declarationUrl},
+   * the cookie declaration page, which likewise degrades to `'settings'`
+   * without a usable URL.
+   */
+  detailsAction?: 'policy' | 'settings' | 'hide' | 'declaration';
+  /**
+   * v0.5.7. Address of the cookie declaration page, used by
+   * `detailsAction: 'declaration'`. `http(s)` only. Supplied by the hosted
+   * service; the client only reads it.
    */
-  detailsAction?: 'policy' | 'settings' | 'hide';
+  declarationUrl?: string;
 }
 
 /** Whether a category is offered in the preferences panel at all. */
@@ -170,6 +194,12 @@ export interface CkBlockingConfig {
   mode?: 'known' | 'strict';
   /** Hosts strict mode must never intercept. Suffix match: `p.com` covers `cdn.p.com`. */
   allow?: string[];
+  /**
+   * v0.5.7. Draw a card in place of an `<iframe>` held back before consent,
+   * offering «Разрешить и показать» for that one category. Default `true`;
+   * `false` restores the pre-0.5.7 behaviour (still blocked, just invisible).
+   */
+  placeholders?: boolean;
 }
 
 /** One declared cookie, shown under its category in the preferences panel. */
@@ -181,6 +211,31 @@ export interface CkCookieTableEntry {
   expiry?: string;
 }
 
+/**
+ * v0.5.8 (SPEC V1.12 §2). One declared third-party service.
+ *
+ * `hosts` are suffix-matched (a bare domain also covers its subdomains) and
+ * `paths` are matched as case-insensitive substrings of the resolved URL —
+ * the same two rules the built-in tracker database uses.
+ */
+export interface CkService {
+  /** Stable kebab-case id, `^[a-z0-9-]{1,64}$`. */
+  id: string;
+  name: string;
+  vendor: string;
+  category: CkCategory;
+  hosts: string[];
+  paths?: string[];
+  /** Cookie names, matched against `cookieTable` to list them under the service. */
+  cookies: string[];
+  /** `http(s)` only; anything else is dropped rather than rendered as a link. */
+  privacyUrl?: string;
+  /** One line for the visitor, per language. Falls back to `en`. */
+  purpose?: { ru?: string; ro?: string; en?: string };
+  /** Default `true`. `false` hides the row and stops blocking it separately. */
+  enabled?: boolean;
+}
+
 /** Configuration accepted by `init()`. Every field is optional. */
 export interface CkConfig {
   /** Bump to invalidate stored decisions and re-show the banner. Default `'1'`. */
@@ -205,6 +260,17 @@ export interface CkConfig {
    */
   hostdb?: Record<string, CkCategory>;
   cookieTable?: CkCookieTableEntry[];
+  /**
+   * v0.5.8 (SPEC V1.12 §2/§3). The third-party services this site declares.
+   * Each row gets its own switch inside its category group in the preferences
+   * panel, and the engine can hold back that one service while the rest of the
+   * category runs. At most 50 rows; a row with `enabled: false` is neither
+   * shown nor blocked separately.
+   *
+   * `hosts` need not be in the built-in tracker database — `init()` folds them
+   * into the block map under the row's own category.
+   */
+  services?: CkService[];
 }
 
 /** Detail payload of `ck:init`. */
@@ -226,6 +292,13 @@ export interface ConsentKitApi {
   /** Idempotent. Restores stored state, then dispatches `ck:init`. */
   init(config?: CkConfig): CkState;
   allowed(category: CkCategory | string): boolean;
+  /**
+   * v0.5.8 (SPEC V1.12 §3). May this one declared service run? True when its
+   * category is granted AND the visitor has not switched it off individually —
+   * a combination `getState().categories` alone cannot reconstruct. An id the
+   * config does not declare answers `true`.
+   */
+  allowedService(id: string): boolean;
   getState(): CkState;
   /** `accept('all')` grants everything; an object records `method: 'custom'`. */
   accept(choice?: CkAcceptArg): CkState;
@@ -234,6 +307,12 @@ export interface ConsentKitApi {
   withdraw(): CkState;
   /** Dispatches `ck:ui:open-preferences`. */
   show(): void;
+  /**
+   * v0.5.7. Opens the preferences panel. Unlike {@link show}, a call made
+   * before the UI has loaded is remembered and honoured once the banner
+   * mounts, so a footer link clicked during a slow load still works.
+   */
+  openSettings(): void;
   /** Dispatches `ck:ui:close`. */
   hide(): void;
 
@@ -375,11 +454,14 @@ export { ConsentKit };
 
 export declare function init(config?: CkConfig): CkState;
 export declare function allowed(category: CkCategory | string): boolean;
+/** v0.5.8 (SPEC V1.12 §3). */
+export declare function allowedService(id: string): boolean;
 export declare function getState(): CkState;
 export declare function accept(choice?: CkAcceptArg): CkState;
 export declare function rejectAll(): CkState;
 export declare function withdraw(): CkState;
 export declare function show(): void;
+export declare function openSettings(): void;
 export declare function hide(): void;
 export declare function _extendHostDb(map: Record<string, CkCategory>): number;
 
@@ -405,11 +487,14 @@ declare module '@ecomconsult/consentkit' {
   export { ConsentKit };
   export function init(config?: CkConfig): CkState;
   export function allowed(category: CkCategory | string): boolean;
+  /** v0.5.8 (SPEC V1.12 §3). */
+  export function allowedService(id: string): boolean;
   export function getState(): CkState;
   export function accept(choice?: CkAcceptArg): CkState;
   export function rejectAll(): CkState;
   export function withdraw(): CkState;
   export function show(): void;
+  export function openSettings(): void;
   export function hide(): void;
 }
 
@@ -419,11 +504,14 @@ declare module '@ecomconsult/consentkit/core' {
   export { ConsentKit };
   export function init(config?: CkConfig): CkState;
   export function allowed(category: CkCategory | string): boolean;
+  /** v0.5.8 (SPEC V1.12 §3). */
+  export function allowedService(id: string): boolean;
   export function getState(): CkState;
   export function accept(choice?: CkAcceptArg): CkState;
   export function rejectAll(): CkState;
   export function withdraw(): CkState;
   export function show(): void;
+  export function openSettings(): void;
   export function hide(): void;
 }
 
@@ -432,6 +520,8 @@ export interface UseConsentResult {
   /** Current state. On the server, an undecided snapshot. */
   state: CkState;
   allowed(category: CkCategory | string): boolean;
+  /** v0.5.8 (SPEC V1.12 §3). May this one declared service run? */
+  allowedService(id: string): boolean;
   /** Defaults to `'all'` when called with no argument. */
   accept(choice?: CkAcceptArg): CkState;
   rejectAll(): CkState;

package/npm/index.mjs

@@ -46,11 +46,18 @@ export default ConsentKit;
 export const {
   init,
   allowed,
+  // v0.5.8 (SPEC V1.12 §3): «may this ONE declared service run?» — the category
+  // check plus the visitor's per-service refusal, which getState() alone cannot
+  // reconstruct. Part of the public surface, so it is a named import too.
+  allowedService,
   getState,
   accept,
   rejectAll,
   withdraw,
   show,
+  // v0.5.7: the public name for «open the cookie settings», safe to call
+  // before the UI has loaded.
+  openSettings,
   hide,
   // v0.4.0 (§1.3): merging service overrides into the tracker database is part
   // of the public surface, so it must be reachable as a named import too.

package/npm/internal-stub.mjs

@@ -28,15 +28,21 @@ export function undecidedState() {
  */
 export function createStub() {
   const stub = {
-    version: '0.5.6',
+    version: '0.5.8',
     config: {},
     init: function () { return undecidedState(); },
     allowed: function (cat) { return cat === 'necessary'; },
+    // v0.5.8 (SPEC V1.12 §3): may this one declared service run? `true` here
+    // for the same reason the real core answers `true` for an unknown id — a
+    // stub means the engine never attached and is withholding nothing, so
+    // claiming a refusal it does not enforce would be a lie consumer code acts on.
+    allowedService: function () { return true; },
     getState: undecidedState,
     accept: function () { return undecidedState(); },
     rejectAll: function () { return undecidedState(); },
     withdraw: function () { return undecidedState(); },
     show: function () {},
+    openSettings: function () {},
     hide: function () {},
     _categories: CATEGORIES.slice(),
     // v0.4.0: the stub mirrors the real surface, so consumer code that calls
@@ -50,6 +56,11 @@ export function createStub() {
     _infra: function () { return []; },
     _isInfra: function () { return false; },
     _blocked: function () { return []; },
+    // v0.5.8 (SPEC V1.12 §3): the service registry. Empty for the same reason
+    // _baseAllow and _infra are — nothing was normalised, nothing is blocked.
+    _serviceForUrl: function () { return null; },
+    _services: function () { return []; },
+    _deniedServices: function () { return []; },
     _isStub: true
   };
   return stub;

package/npm/react.mjs

@@ -113,6 +113,7 @@ function sameState(a, b) {
  * @returns {{
  *   state: object,
  *   allowed: (cat: string) => boolean,
+ *   allowedService: (id: string) => boolean,
  *   accept: (choice?: any) => object,
  *   rejectAll: () => object,
  *   withdraw: () => object,
@@ -127,6 +128,14 @@ export function useConsent() {
     try { return api().allowed(cat); } catch (e) { return false; }
   }, []);
 
+  /* v0.5.8 (SPEC V1.12 §3). On the server there is no stored decision and no
+     service registry, so nothing is being withheld — `true`, matching what the
+     core answers for an id it does not know. */
+  const allowedService = useCallback(function (id) {
+    if (!hasDom()) return true;
+    try { return api().allowedService(id); } catch (e) { return true; }
+  }, []);
+
   const accept = useCallback(function (choice) {
     if (!hasDom()) return SERVER_SNAPSHOT;
     return api().accept(choice === undefined ? 'all' : choice);
@@ -147,7 +156,7 @@ export function useConsent() {
     api().show();
   }, []);
 
-  return { state, allowed, accept, rejectAll, withdraw, show };
+  return { state, allowed, allowedService, accept, rejectAll, withdraw, show };
 }
 
 export default useConsent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ecomconsult/consentkit",
-  "version": "0.5.6",
+  "version": "0.5.8",
   "description": "GDPR cookie consent core with blocking engine, Shadow DOM UI and Google Consent Mode v2. Zero dependencies, no build step.",
   "repository": {
     "type": "git",
@@ -21,7 +21,8 @@
   "author": "E-COM CONSULT PLUS",
   "license": "MIT",
   "scripts": {
-    "test": "node --test test/*.test.mjs"
+    "test": "node --test test/*.test.mjs",
+    "build": "node tools/build-inline.mjs --langs=ru,ro,en --language=auto --layout=bar --position=bottom --accent=#2B50D8 --mode=auto --policy=1 --out=ready/ru-bar.txt && node tools/build-inline.mjs --langs=ru,ro,en --language=auto --layout=box --position=bottom-left --accent=#2B50D8 --mode=auto --policy=1 --out=ready/ru-box.txt && node tools/build-inline.mjs --langs=ru,ro,en --language=auto --layout=box --position=bottom-right --accent=#2B50D8 --mode=auto --policy=1 --out=ready/ru-box-right.txt && node tools/build-inline.mjs --langs=ru,ro,en --language=auto --layout=modal --position=bottom --accent=#2B50D8 --mode=auto --policy=1 --out=ready/ru-modal.txt && node tools/build-inline.mjs --langs=en --language=en --layout=bar --position=bottom --accent=#2B50D8 --mode=auto --policy=1 --out=ready/en-bar.txt && node tools/build-inline.mjs --langs=bg,ca,cs,da,de,el,en,es,et,fi,fr,ga,hr,hu,is,it,lt,lv,mk,mt,nb,nl,no,pl,pt,ro,ru,sk,sl,sq,sr,sv,tr,uk --language=auto --layout=bar --position=bottom --accent=#2B50D8 --mode=auto --policy=1 --out=ready/eu-bar.txt && node tools/export-hostdb.mjs && node tools/sync-site.mjs && node tools/build-site.mjs && cp -f src/ck-core.js src/ck-locales.js src/ck-ui-branding.js src/ck-ui.js src/ck-debug-loader.js plugins/wordpress/consentkit/assets/"
   },
   "type": "module",
   "sideEffects": true,