@feelflow/ffid-sdk 5.0.2 → 5.2.0

package/dist/{FFIDCookieLink-Buh84sTc.d.cts → FFIDCookieLink-D37pN-v_.d.cts}

@@ -165,10 +165,9 @@ declare const FFIDConsentCategoryMetadataSchema: z.ZodObject<{
  *
  * `publishedAt` accepts both `Z` suffix and numeric offsets (`+00:00`, `+09:00`)
  * so that consumers tolerate Postgres `timestamptz` raw passthrough as well as
- * `Z`-normalized output. The FFID server normalizes to `Z` since Issue #3244
- * (see `src/lib/cookie-consent/serialize.ts#isoZ`), but third-party / future
- * server paths may emit offsets — tolerant parsing is the defense-in-depth
- * layer specified in Issue #3245.
+ * `Z`-normalized output. The FFID server normalizes to `Z` since Issue #3244;
+ * third-party / future server paths may emit offsets — tolerant parsing is
+ * the defense-in-depth layer specified in Issue #3245.
  */
 declare const FFIDCookiePolicySchema: z.ZodObject<{
     id: z.ZodString;
@@ -478,6 +477,16 @@ declare const CONSENT_COOKIE_MAX_AGE_SEC: number;
  * first, then fall back to cookie. See `FFIDAnalyticsProvider.bootstrap`.
  */
 declare const CONSENT_SESSION_STORAGE_KEY = "ffid_consent_state";
+/**
+ * sessionStorage key for the dismissal timestamp ("あとで" cooldown).
+ *
+ * EDPB Guidelines 05/2020 §86 forbids treating dismissal as a refusal, so we
+ * never write this to a cookie or DB. Holding the timestamp in sessionStorage
+ * keeps it scoped to the current tab session — once the tab closes, the user
+ * is reprompted on next visit. See `FFIDAnalyticsProvider`'s
+ * `dismissalCooldownMinutes` prop for the auto-show suppression policy.
+ */
+declare const CONSENT_DISMISSAL_TIMESTAMP_KEY = "ffid_consent_dismissed_at";
 interface WriteConsentCookieOptions {
     /** Override Secure flag for non-https custom domains. Defaults to production. */
     secure?: boolean;
@@ -521,6 +530,34 @@ declare function deleteConsentCookie(opts?: WriteConsentCookieOptions): boolean;
 declare function readConsentSessionMirror(): FFIDConsentCategories | null;
 declare function writeConsentSessionMirror(cats: FFIDConsentCategories): boolean;
 declare function clearConsentSessionMirror(): void;
+/**
+ * Read the millisecond unix timestamp at which the banner was last dismissed,
+ * or `null` if absent / invalid / sessionStorage unavailable.
+ *
+ * Defensive parsing rejects non-finite values, negatives, and future-dated
+ * timestamps (clock-skew / tampering). When a corrupted value is detected,
+ * the helper **auto-heals** by clearing the slot — otherwise the same bad
+ * value would be re-parsed on every Provider mount and a buggy / extension-
+ * polluted consumer site could leave the cooldown effectively permanently
+ * disabled with no surface signal.
+ */
+declare function readConsentDismissalTimestamp(): number | null;
+/**
+ * Write the dismissal timestamp. Returns `true` on success, `false` when
+ * sessionStorage is unavailable / throws (e.g., quota, old Safari Private
+ * Browsing) **or** when `nowMs` is non-finite / negative.
+ *
+ * Callers may safely ignore the return — failure degrades to the legacy
+ * "reprompt every Provider mount" behavior, which is the published v5.1.0
+ * baseline. Dismissal carries no GDPR weight (EDPB §86) so there is no
+ * obligation to surface storage failure via `onError`.
+ */
+declare function writeConsentDismissalTimestamp(nowMs?: number): boolean;
+/**
+ * Idempotent clear of the dismissal timestamp. Safe to call when no value is
+ * present or sessionStorage is unavailable; never throws.
+ */
+declare function clearConsentDismissalTimestamp(): void;
 
 /**
  * Cookie Consent — Google Consent Mode v2 wiring.
@@ -653,11 +690,29 @@ interface FFIDAnalyticsProviderProps {
     onError?: (error: FFIDConsentError) => void;
     /** Whether to open banner automatically when no decision is on file. Default: true. */
     autoShowBanner?: boolean;
+    /**
+     * Minutes to suppress auto-reopen after the user presses "あとで" (closeBanner).
+     *
+     * The dismissal timestamp is held in `sessionStorage` only — never written
+     * to cookie or DB — so it expires when the tab closes. This is EDPB
+     * Guidelines 05/2020 §86 compliant: dismissal is not a refusal, and the
+     * user is reprompted on the next fresh visit regardless of cooldown.
+     *
+     * Accepts any `number`; non-finite (`NaN` / `±Infinity`) and negative
+     * values are treated as `0` (suppression disabled). `0` reverts to the
+     * legacy v5.1.0 "reprompt on every Provider mount" behavior. Default: 30.
+     *
+     * Manual `openBanner()` calls ignore the cooldown so consumer "Cookie 設定"
+     * links keep working, and `needsRenewal=true` overrides the cooldown so the
+     * renewal reprompt (CNIL/ICO renewal guidance — see PR #3261) is never
+     * suppressed by a UX dismissal.
+     */
+    dismissalCooldownMinutes?: number;
     /** Optional fetch override (mainly for tests). */
     fetchImpl?: typeof fetch;
     children: ReactNode;
 }
-declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
+declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
 
 interface FFIDConsentContextValue {
     /** Current consent state. Always non-null; "not yet decided" is encoded by `hasDecided=false`. */
@@ -797,15 +852,23 @@ declare function useFFIDConsentPreferences(): UseFFIDConsentPreferencesReturn;
  * `<FFIDCookieBanner>` — bottom-sheet consent banner.
  *
  * Renders only when `state.hasDecided === false` or `state.needsRenewal === true`.
- * Three buttons (spec §6.2):
+ * Four buttons (spec §6.2):
  *   1. "すべて同意" (Accept all)
- *   2. "必要なものだけ" (Necessary only)
+ *   2. "同意しない" (Necessary only — `necessary=true` is enforced by ePrivacy
+ *      5(3) and the DB invariant; the 3 user-toggleable categories are
+ *      recorded as false. The action itself is preserved in `source='banner'`)
  *   3. "詳細設定" (Open preference center)
+ *   4. "あとで" (Dismiss without recording a decision — banner re-appears on
+ *      the next visit because no row is written)
  *
  * GDPR Article 7(1)/(2) UX requirements:
  *   - "同意" and "拒否" share the same size + visual prominence.
  *   - Buttons share the same styles by default; consumers can override via
- *     `classNames` props (`primaryButton`, `secondaryButton`, `linkButton`).
+ *     `classNames` props (`primaryButton`, `secondaryButton`, `linkButton`,
+ *     `closeButton`).
+ *   - "あとで" is intentionally not a refusal: EDPB Guidelines 05/2020 §86
+ *     forbid treating dismissal as a refusal. We honor that by writing
+ *     nothing on dismissal and re-prompting next visit.
  *
  * Refs: docs/02-design/COOKIE_CONSENT.md §6.2
  */
@@ -817,6 +880,7 @@ interface FFIDCookieBannerClassNames {
     primaryButton?: string;
     secondaryButton?: string;
     linkButton?: string;
+    closeButton?: string;
 }
 interface FFIDCookieBannerProps {
     /** Root container class. */
@@ -827,14 +891,40 @@ interface FFIDCookieBannerProps {
     message?: ReactNode;
     /** Accept-all button label. Default: "すべて同意". */
     acceptAllLabel?: ReactNode;
-    /** Necessary-only button label. Default: "必要なものだけ". */
+    /**
+     * Necessary-only button label. Default: "同意しない".
+     *
+     * Selecting this button writes `necessary=true, functional=false,
+     * analytics=false, marketing=false` to the audit trail with
+     * `source='banner'`. The `necessary=true` value is enforced by the DB
+     * invariant; ePrivacy 5(3) exempts strictly necessary cookies from consent.
+     * Consumers that want to surface the legacy "必要なものだけ" wording can
+     * override via this prop.
+     */
     necessaryOnlyLabel?: ReactNode;
     /** Preference center link label. Default: "詳細設定". */
     preferencesLabel?: ReactNode;
+    /**
+     * Dismiss-without-recording button label. Default: "あとで".
+     *
+     * Selecting this button calls `closeBanner()` — session-only state, no row
+     * is written to the database. The banner re-appears on the next visit
+     * because bootstrap still sees `hasDecided=false`. Aligns with EDPB
+     * Guidelines 05/2020 §86 prohibiting treating dismissal as a refusal.
+     *
+     * NOTE for consumers: do NOT pass `closeLabel={null}` or `closeLabel=""`
+     * to visually hide the button while keeping the others. Doing so leaves
+     * a click-able empty area and breaks the GDPR Article 7(2) requirement
+     * that "consent" and "refusal" / "dismissal" controls share equal visual
+     * prominence. If you need to suppress dismissal entirely (e.g., for a
+     * strict-consent jurisdiction), build a custom banner using
+     * `useFFIDConsent()` instead of overriding the label.
+     */
+    closeLabel?: ReactNode;
     /** Custom root style. */
     style?: CSSProperties;
 }
-declare function FFIDCookieBanner({ className, classNames, message, acceptAllLabel, necessaryOnlyLabel, preferencesLabel, style, }: FFIDCookieBannerProps): React.JSX.Element | null;
+declare function FFIDCookieBanner({ className, classNames, message, acceptAllLabel, necessaryOnlyLabel, preferencesLabel, closeLabel, style, }: FFIDCookieBannerProps): React.JSX.Element | null;
 
 /**
  * `<FFIDCookieSettings>` — preference center modal.
@@ -882,4 +972,4 @@ interface FFIDCookieLinkProps {
 }
 declare function FFIDCookieLink({ children, className, style, id, }: FFIDCookieLinkProps): React.JSX.Element;
 
-export { GetCategoriesWireSchema as $, ALL_DENIED_EXCEPT_NECESSARY as A, FFIDConsentMergeWarningSchema as B, CONSENT_COOKIE_MAX_AGE_SEC as C, DEFAULT_CONSENT_ERROR_MESSAGES as D, type FFIDConsentSource as E, type FFIDConsentResult as F, type GetConsentMeWire as G, FFIDConsentSourceSchema as H, FFIDConsentStateSchema as I, FFIDConsentUpdateSchema as J, FFIDCookieBanner as K, type FFIDCookieBannerClassNames as L, type FFIDCookieBannerProps as M, FFIDCookieLink as N, type FFIDCookieLinkProps as O, type PostConsentWire as P, FFIDCookiePolicySchema as Q, FFIDCookieSettings as R, type FFIDCookieSettingsClassNames as S, type FFIDCookieSettingsProps as T, type FFIDInternalConsentSource as U, FFIDInternalConsentSourceSchema as V, type FFIDPublicConsentSource as W, FFIDPublicConsentSourceSchema as X, FFID_CONSENT_ERROR_CODES as Y, FFID_CONSENT_NOT_DECIDED_STATE as Z, type GetCategoriesWire as _, type FFIDConsentState as a, GetConsentMeWireSchema as a0, type GetDocumentWire as a1, GetDocumentWireSchema as a2, type GtagBridge as a3, type GtagBridgeOptions as a4, type PostConsentRequest as a5, PostConsentRequestSchema as a6, PostConsentWireSchema as a7, type PostSyncRequest as a8, PostSyncRequestSchema as a9, PostSyncWireSchema as aa, PostWithdrawWireSchema as ab, type UseFFIDConsentPreferencesReturn as ac, type UseFFIDConsentReturn as ad, clearConsentSessionMirror as ae, createGtagBridge as af, decodeConsentCookie as ag, deleteConsentCookie as ah, encodeConsentCookie as ai, mapCategoriesToGtagParams as aj, readConsentCookie as ak, readConsentSessionMirror as al, useFFIDConsent as am, useFFIDConsentPreferences as an, writeConsentCookie as ao, writeConsentSessionMirror as ap, type FFIDConsentUpdate as b, type FFIDConsentCategories as c, type FFIDConsentSyncResult as d, type FFIDConsentCategoryMetadata as e, type FFIDCookiePolicy as f, type PostSyncWire as g, type PostWithdrawWire as h, CONSENT_COOKIE_NAME as i, CONSENT_SESSION_STORAGE_KEY as j, COOKIE_VERSION as k, DEFAULT_MERGE_WARNING_MESSAGES as l, DeviceIdSchema as m, FFIDAnalyticsProvider as n, type FFIDAnalyticsProviderProps as o, FFIDConsentCategoriesSchema as p, type FFIDConsentCategoryCode as q, FFIDConsentCategoryCodeSchema as r, FFIDConsentCategoryMetadataSchema as s, FFIDConsentContext as t, type FFIDConsentContextValue as u, FFIDConsentError as v, type FFIDConsentErrorCode as w, type FFIDConsentMergeStrategy as x, FFIDConsentMergeStrategySchema as y, type FFIDConsentMergeWarning as z };
+export { type GetCategoriesWire as $, ALL_DENIED_EXCEPT_NECESSARY as A, type FFIDConsentMergeWarning as B, CONSENT_COOKIE_MAX_AGE_SEC as C, DEFAULT_CONSENT_ERROR_MESSAGES as D, FFIDConsentMergeWarningSchema as E, type FFIDConsentResult as F, type GetConsentMeWire as G, type FFIDConsentSource as H, FFIDConsentSourceSchema as I, FFIDConsentStateSchema as J, FFIDConsentUpdateSchema as K, FFIDCookieBanner as L, type FFIDCookieBannerClassNames as M, type FFIDCookieBannerProps as N, FFIDCookieLink as O, type PostConsentWire as P, type FFIDCookieLinkProps as Q, FFIDCookiePolicySchema as R, FFIDCookieSettings as S, type FFIDCookieSettingsClassNames as T, type FFIDCookieSettingsProps as U, type FFIDInternalConsentSource as V, FFIDInternalConsentSourceSchema as W, type FFIDPublicConsentSource as X, FFIDPublicConsentSourceSchema as Y, FFID_CONSENT_ERROR_CODES as Z, FFID_CONSENT_NOT_DECIDED_STATE as _, type FFIDConsentState as a, GetCategoriesWireSchema as a0, GetConsentMeWireSchema as a1, type GetDocumentWire as a2, GetDocumentWireSchema as a3, type GtagBridge as a4, type GtagBridgeOptions as a5, type PostConsentRequest as a6, PostConsentRequestSchema as a7, PostConsentWireSchema as a8, type PostSyncRequest as a9, PostSyncRequestSchema as aa, PostSyncWireSchema as ab, PostWithdrawWireSchema as ac, type UseFFIDConsentPreferencesReturn as ad, type UseFFIDConsentReturn as ae, clearConsentDismissalTimestamp as af, clearConsentSessionMirror as ag, createGtagBridge as ah, decodeConsentCookie as ai, deleteConsentCookie as aj, encodeConsentCookie as ak, mapCategoriesToGtagParams as al, readConsentCookie as am, readConsentDismissalTimestamp as an, readConsentSessionMirror as ao, useFFIDConsent as ap, useFFIDConsentPreferences as aq, writeConsentCookie as ar, writeConsentDismissalTimestamp as as, writeConsentSessionMirror as at, type FFIDConsentUpdate as b, type FFIDConsentCategories as c, type FFIDConsentSyncResult as d, type FFIDConsentCategoryMetadata as e, type FFIDCookiePolicy as f, type PostSyncWire as g, type PostWithdrawWire as h, CONSENT_COOKIE_NAME as i, CONSENT_DISMISSAL_TIMESTAMP_KEY as j, CONSENT_SESSION_STORAGE_KEY as k, COOKIE_VERSION as l, DEFAULT_MERGE_WARNING_MESSAGES as m, DeviceIdSchema as n, FFIDAnalyticsProvider as o, type FFIDAnalyticsProviderProps as p, FFIDConsentCategoriesSchema as q, type FFIDConsentCategoryCode as r, FFIDConsentCategoryCodeSchema as s, FFIDConsentCategoryMetadataSchema as t, FFIDConsentContext as u, type FFIDConsentContextValue as v, FFIDConsentError as w, type FFIDConsentErrorCode as x, type FFIDConsentMergeStrategy as y, FFIDConsentMergeStrategySchema as z };

package/dist/{FFIDCookieLink-Buh84sTc.d.ts → FFIDCookieLink-D37pN-v_.d.ts}

@@ -165,10 +165,9 @@ declare const FFIDConsentCategoryMetadataSchema: z.ZodObject<{
  *
  * `publishedAt` accepts both `Z` suffix and numeric offsets (`+00:00`, `+09:00`)
  * so that consumers tolerate Postgres `timestamptz` raw passthrough as well as
- * `Z`-normalized output. The FFID server normalizes to `Z` since Issue #3244
- * (see `src/lib/cookie-consent/serialize.ts#isoZ`), but third-party / future
- * server paths may emit offsets — tolerant parsing is the defense-in-depth
- * layer specified in Issue #3245.
+ * `Z`-normalized output. The FFID server normalizes to `Z` since Issue #3244;
+ * third-party / future server paths may emit offsets — tolerant parsing is
+ * the defense-in-depth layer specified in Issue #3245.
  */
 declare const FFIDCookiePolicySchema: z.ZodObject<{
     id: z.ZodString;
@@ -478,6 +477,16 @@ declare const CONSENT_COOKIE_MAX_AGE_SEC: number;
  * first, then fall back to cookie. See `FFIDAnalyticsProvider.bootstrap`.
  */
 declare const CONSENT_SESSION_STORAGE_KEY = "ffid_consent_state";
+/**
+ * sessionStorage key for the dismissal timestamp ("あとで" cooldown).
+ *
+ * EDPB Guidelines 05/2020 §86 forbids treating dismissal as a refusal, so we
+ * never write this to a cookie or DB. Holding the timestamp in sessionStorage
+ * keeps it scoped to the current tab session — once the tab closes, the user
+ * is reprompted on next visit. See `FFIDAnalyticsProvider`'s
+ * `dismissalCooldownMinutes` prop for the auto-show suppression policy.
+ */
+declare const CONSENT_DISMISSAL_TIMESTAMP_KEY = "ffid_consent_dismissed_at";
 interface WriteConsentCookieOptions {
     /** Override Secure flag for non-https custom domains. Defaults to production. */
     secure?: boolean;
@@ -521,6 +530,34 @@ declare function deleteConsentCookie(opts?: WriteConsentCookieOptions): boolean;
 declare function readConsentSessionMirror(): FFIDConsentCategories | null;
 declare function writeConsentSessionMirror(cats: FFIDConsentCategories): boolean;
 declare function clearConsentSessionMirror(): void;
+/**
+ * Read the millisecond unix timestamp at which the banner was last dismissed,
+ * or `null` if absent / invalid / sessionStorage unavailable.
+ *
+ * Defensive parsing rejects non-finite values, negatives, and future-dated
+ * timestamps (clock-skew / tampering). When a corrupted value is detected,
+ * the helper **auto-heals** by clearing the slot — otherwise the same bad
+ * value would be re-parsed on every Provider mount and a buggy / extension-
+ * polluted consumer site could leave the cooldown effectively permanently
+ * disabled with no surface signal.
+ */
+declare function readConsentDismissalTimestamp(): number | null;
+/**
+ * Write the dismissal timestamp. Returns `true` on success, `false` when
+ * sessionStorage is unavailable / throws (e.g., quota, old Safari Private
+ * Browsing) **or** when `nowMs` is non-finite / negative.
+ *
+ * Callers may safely ignore the return — failure degrades to the legacy
+ * "reprompt every Provider mount" behavior, which is the published v5.1.0
+ * baseline. Dismissal carries no GDPR weight (EDPB §86) so there is no
+ * obligation to surface storage failure via `onError`.
+ */
+declare function writeConsentDismissalTimestamp(nowMs?: number): boolean;
+/**
+ * Idempotent clear of the dismissal timestamp. Safe to call when no value is
+ * present or sessionStorage is unavailable; never throws.
+ */
+declare function clearConsentDismissalTimestamp(): void;
 
 /**
  * Cookie Consent — Google Consent Mode v2 wiring.
@@ -653,11 +690,29 @@ interface FFIDAnalyticsProviderProps {
     onError?: (error: FFIDConsentError) => void;
     /** Whether to open banner automatically when no decision is on file. Default: true. */
     autoShowBanner?: boolean;
+    /**
+     * Minutes to suppress auto-reopen after the user presses "あとで" (closeBanner).
+     *
+     * The dismissal timestamp is held in `sessionStorage` only — never written
+     * to cookie or DB — so it expires when the tab closes. This is EDPB
+     * Guidelines 05/2020 §86 compliant: dismissal is not a refusal, and the
+     * user is reprompted on the next fresh visit regardless of cooldown.
+     *
+     * Accepts any `number`; non-finite (`NaN` / `±Infinity`) and negative
+     * values are treated as `0` (suppression disabled). `0` reverts to the
+     * legacy v5.1.0 "reprompt on every Provider mount" behavior. Default: 30.
+     *
+     * Manual `openBanner()` calls ignore the cooldown so consumer "Cookie 設定"
+     * links keep working, and `needsRenewal=true` overrides the cooldown so the
+     * renewal reprompt (CNIL/ICO renewal guidance — see PR #3261) is never
+     * suppressed by a UX dismissal.
+     */
+    dismissalCooldownMinutes?: number;
     /** Optional fetch override (mainly for tests). */
     fetchImpl?: typeof fetch;
     children: ReactNode;
 }
-declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
+declare function FFIDAnalyticsProvider({ baseUrl, serviceApiKey, getAccessToken, gaMeasurementId, sentryReplay, sentry, onConsentChange, onError, autoShowBanner, dismissalCooldownMinutes, fetchImpl, children, }: FFIDAnalyticsProviderProps): React.JSX.Element;
 
 interface FFIDConsentContextValue {
     /** Current consent state. Always non-null; "not yet decided" is encoded by `hasDecided=false`. */
@@ -797,15 +852,23 @@ declare function useFFIDConsentPreferences(): UseFFIDConsentPreferencesReturn;
  * `<FFIDCookieBanner>` — bottom-sheet consent banner.
  *
  * Renders only when `state.hasDecided === false` or `state.needsRenewal === true`.
- * Three buttons (spec §6.2):
+ * Four buttons (spec §6.2):
  *   1. "すべて同意" (Accept all)
- *   2. "必要なものだけ" (Necessary only)
+ *   2. "同意しない" (Necessary only — `necessary=true` is enforced by ePrivacy
+ *      5(3) and the DB invariant; the 3 user-toggleable categories are
+ *      recorded as false. The action itself is preserved in `source='banner'`)
  *   3. "詳細設定" (Open preference center)
+ *   4. "あとで" (Dismiss without recording a decision — banner re-appears on
+ *      the next visit because no row is written)
  *
  * GDPR Article 7(1)/(2) UX requirements:
  *   - "同意" and "拒否" share the same size + visual prominence.
  *   - Buttons share the same styles by default; consumers can override via
- *     `classNames` props (`primaryButton`, `secondaryButton`, `linkButton`).
+ *     `classNames` props (`primaryButton`, `secondaryButton`, `linkButton`,
+ *     `closeButton`).
+ *   - "あとで" is intentionally not a refusal: EDPB Guidelines 05/2020 §86
+ *     forbid treating dismissal as a refusal. We honor that by writing
+ *     nothing on dismissal and re-prompting next visit.
  *
  * Refs: docs/02-design/COOKIE_CONSENT.md §6.2
  */
@@ -817,6 +880,7 @@ interface FFIDCookieBannerClassNames {
     primaryButton?: string;
     secondaryButton?: string;
     linkButton?: string;
+    closeButton?: string;
 }
 interface FFIDCookieBannerProps {
     /** Root container class. */
@@ -827,14 +891,40 @@ interface FFIDCookieBannerProps {
     message?: ReactNode;
     /** Accept-all button label. Default: "すべて同意". */
     acceptAllLabel?: ReactNode;
-    /** Necessary-only button label. Default: "必要なものだけ". */
+    /**
+     * Necessary-only button label. Default: "同意しない".
+     *
+     * Selecting this button writes `necessary=true, functional=false,
+     * analytics=false, marketing=false` to the audit trail with
+     * `source='banner'`. The `necessary=true` value is enforced by the DB
+     * invariant; ePrivacy 5(3) exempts strictly necessary cookies from consent.
+     * Consumers that want to surface the legacy "必要なものだけ" wording can
+     * override via this prop.
+     */
     necessaryOnlyLabel?: ReactNode;
     /** Preference center link label. Default: "詳細設定". */
     preferencesLabel?: ReactNode;
+    /**
+     * Dismiss-without-recording button label. Default: "あとで".
+     *
+     * Selecting this button calls `closeBanner()` — session-only state, no row
+     * is written to the database. The banner re-appears on the next visit
+     * because bootstrap still sees `hasDecided=false`. Aligns with EDPB
+     * Guidelines 05/2020 §86 prohibiting treating dismissal as a refusal.
+     *
+     * NOTE for consumers: do NOT pass `closeLabel={null}` or `closeLabel=""`
+     * to visually hide the button while keeping the others. Doing so leaves
+     * a click-able empty area and breaks the GDPR Article 7(2) requirement
+     * that "consent" and "refusal" / "dismissal" controls share equal visual
+     * prominence. If you need to suppress dismissal entirely (e.g., for a
+     * strict-consent jurisdiction), build a custom banner using
+     * `useFFIDConsent()` instead of overriding the label.
+     */
+    closeLabel?: ReactNode;
     /** Custom root style. */
     style?: CSSProperties;
 }
-declare function FFIDCookieBanner({ className, classNames, message, acceptAllLabel, necessaryOnlyLabel, preferencesLabel, style, }: FFIDCookieBannerProps): React.JSX.Element | null;
+declare function FFIDCookieBanner({ className, classNames, message, acceptAllLabel, necessaryOnlyLabel, preferencesLabel, closeLabel, style, }: FFIDCookieBannerProps): React.JSX.Element | null;
 
 /**
  * `<FFIDCookieSettings>` — preference center modal.
@@ -882,4 +972,4 @@ interface FFIDCookieLinkProps {
 }
 declare function FFIDCookieLink({ children, className, style, id, }: FFIDCookieLinkProps): React.JSX.Element;
 
-export { GetCategoriesWireSchema as $, ALL_DENIED_EXCEPT_NECESSARY as A, FFIDConsentMergeWarningSchema as B, CONSENT_COOKIE_MAX_AGE_SEC as C, DEFAULT_CONSENT_ERROR_MESSAGES as D, type FFIDConsentSource as E, type FFIDConsentResult as F, type GetConsentMeWire as G, FFIDConsentSourceSchema as H, FFIDConsentStateSchema as I, FFIDConsentUpdateSchema as J, FFIDCookieBanner as K, type FFIDCookieBannerClassNames as L, type FFIDCookieBannerProps as M, FFIDCookieLink as N, type FFIDCookieLinkProps as O, type PostConsentWire as P, FFIDCookiePolicySchema as Q, FFIDCookieSettings as R, type FFIDCookieSettingsClassNames as S, type FFIDCookieSettingsProps as T, type FFIDInternalConsentSource as U, FFIDInternalConsentSourceSchema as V, type FFIDPublicConsentSource as W, FFIDPublicConsentSourceSchema as X, FFID_CONSENT_ERROR_CODES as Y, FFID_CONSENT_NOT_DECIDED_STATE as Z, type GetCategoriesWire as _, type FFIDConsentState as a, GetConsentMeWireSchema as a0, type GetDocumentWire as a1, GetDocumentWireSchema as a2, type GtagBridge as a3, type GtagBridgeOptions as a4, type PostConsentRequest as a5, PostConsentRequestSchema as a6, PostConsentWireSchema as a7, type PostSyncRequest as a8, PostSyncRequestSchema as a9, PostSyncWireSchema as aa, PostWithdrawWireSchema as ab, type UseFFIDConsentPreferencesReturn as ac, type UseFFIDConsentReturn as ad, clearConsentSessionMirror as ae, createGtagBridge as af, decodeConsentCookie as ag, deleteConsentCookie as ah, encodeConsentCookie as ai, mapCategoriesToGtagParams as aj, readConsentCookie as ak, readConsentSessionMirror as al, useFFIDConsent as am, useFFIDConsentPreferences as an, writeConsentCookie as ao, writeConsentSessionMirror as ap, type FFIDConsentUpdate as b, type FFIDConsentCategories as c, type FFIDConsentSyncResult as d, type FFIDConsentCategoryMetadata as e, type FFIDCookiePolicy as f, type PostSyncWire as g, type PostWithdrawWire as h, CONSENT_COOKIE_NAME as i, CONSENT_SESSION_STORAGE_KEY as j, COOKIE_VERSION as k, DEFAULT_MERGE_WARNING_MESSAGES as l, DeviceIdSchema as m, FFIDAnalyticsProvider as n, type FFIDAnalyticsProviderProps as o, FFIDConsentCategoriesSchema as p, type FFIDConsentCategoryCode as q, FFIDConsentCategoryCodeSchema as r, FFIDConsentCategoryMetadataSchema as s, FFIDConsentContext as t, type FFIDConsentContextValue as u, FFIDConsentError as v, type FFIDConsentErrorCode as w, type FFIDConsentMergeStrategy as x, FFIDConsentMergeStrategySchema as y, type FFIDConsentMergeWarning as z };
+export { type GetCategoriesWire as $, ALL_DENIED_EXCEPT_NECESSARY as A, type FFIDConsentMergeWarning as B, CONSENT_COOKIE_MAX_AGE_SEC as C, DEFAULT_CONSENT_ERROR_MESSAGES as D, FFIDConsentMergeWarningSchema as E, type FFIDConsentResult as F, type GetConsentMeWire as G, type FFIDConsentSource as H, FFIDConsentSourceSchema as I, FFIDConsentStateSchema as J, FFIDConsentUpdateSchema as K, FFIDCookieBanner as L, type FFIDCookieBannerClassNames as M, type FFIDCookieBannerProps as N, FFIDCookieLink as O, type PostConsentWire as P, type FFIDCookieLinkProps as Q, FFIDCookiePolicySchema as R, FFIDCookieSettings as S, type FFIDCookieSettingsClassNames as T, type FFIDCookieSettingsProps as U, type FFIDInternalConsentSource as V, FFIDInternalConsentSourceSchema as W, type FFIDPublicConsentSource as X, FFIDPublicConsentSourceSchema as Y, FFID_CONSENT_ERROR_CODES as Z, FFID_CONSENT_NOT_DECIDED_STATE as _, type FFIDConsentState as a, GetCategoriesWireSchema as a0, GetConsentMeWireSchema as a1, type GetDocumentWire as a2, GetDocumentWireSchema as a3, type GtagBridge as a4, type GtagBridgeOptions as a5, type PostConsentRequest as a6, PostConsentRequestSchema as a7, PostConsentWireSchema as a8, type PostSyncRequest as a9, PostSyncRequestSchema as aa, PostSyncWireSchema as ab, PostWithdrawWireSchema as ac, type UseFFIDConsentPreferencesReturn as ad, type UseFFIDConsentReturn as ae, clearConsentDismissalTimestamp as af, clearConsentSessionMirror as ag, createGtagBridge as ah, decodeConsentCookie as ai, deleteConsentCookie as aj, encodeConsentCookie as ak, mapCategoriesToGtagParams as al, readConsentCookie as am, readConsentDismissalTimestamp as an, readConsentSessionMirror as ao, useFFIDConsent as ap, useFFIDConsentPreferences as aq, writeConsentCookie as ar, writeConsentDismissalTimestamp as as, writeConsentSessionMirror as at, type FFIDConsentUpdate as b, type FFIDConsentCategories as c, type FFIDConsentSyncResult as d, type FFIDConsentCategoryMetadata as e, type FFIDCookiePolicy as f, type PostSyncWire as g, type PostWithdrawWire as h, CONSENT_COOKIE_NAME as i, CONSENT_DISMISSAL_TIMESTAMP_KEY as j, CONSENT_SESSION_STORAGE_KEY as k, COOKIE_VERSION as l, DEFAULT_MERGE_WARNING_MESSAGES as m, DeviceIdSchema as n, FFIDAnalyticsProvider as o, type FFIDAnalyticsProviderProps as p, FFIDConsentCategoriesSchema as q, type FFIDConsentCategoryCode as r, FFIDConsentCategoryCodeSchema as s, FFIDConsentCategoryMetadataSchema as t, FFIDConsentContext as u, type FFIDConsentContextValue as v, FFIDConsentError as w, type FFIDConsentErrorCode as x, type FFIDConsentMergeStrategy as y, FFIDConsentMergeStrategySchema as z };

package/dist/{chunk-WZ6LF34H.cjs → chunk-4IIVIB2Q.cjs}

@@ -840,7 +840,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.0.2";
+var SDK_VERSION = "5.2.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/{chunk-QYKYTZA6.js → chunk-FACWGQHL.js}

@@ -838,7 +838,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.0.2";
+var SDK_VERSION = "5.2.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/{chunk-XPSWABVY.cjs → chunk-I3QZJXQQ.cjs}

@@ -284,6 +284,7 @@ var HOURS_PER_DAY = 24;
 var DAYS_PER_YEAR = 365;
 var CONSENT_COOKIE_MAX_AGE_SEC = SECONDS_PER_MINUTE * MINUTES_PER_HOUR * HOURS_PER_DAY * DAYS_PER_YEAR;
 var CONSENT_SESSION_STORAGE_KEY = "ffid_consent_state";
+var CONSENT_DISMISSAL_TIMESTAMP_KEY = "ffid_consent_dismissed_at";
 function hasDocument() {
   return typeof document !== "undefined";
 }
@@ -374,6 +375,39 @@ function clearConsentSessionMirror() {
   } catch {
   }
 }
+function readConsentDismissalTimestamp() {
+  if (!hasSessionStorage()) return null;
+  try {
+    const raw = sessionStorage.getItem(CONSENT_DISMISSAL_TIMESTAMP_KEY);
+    if (!raw) return null;
+    const parsed = Number(raw);
+    const CLOCK_SKEW_GRACE_MS = 6e4;
+    if (!Number.isFinite(parsed) || parsed < 0 || parsed > Date.now() + CLOCK_SKEW_GRACE_MS) {
+      clearConsentDismissalTimestamp();
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function writeConsentDismissalTimestamp(nowMs = Date.now()) {
+  if (!Number.isFinite(nowMs) || nowMs < 0) return false;
+  if (!hasSessionStorage()) return false;
+  try {
+    sessionStorage.setItem(CONSENT_DISMISSAL_TIMESTAMP_KEY, String(nowMs));
+    return true;
+  } catch {
+    return false;
+  }
+}
+function clearConsentDismissalTimestamp() {
+  if (!hasSessionStorage()) return;
+  try {
+    sessionStorage.removeItem(CONSENT_DISMISSAL_TIMESTAMP_KEY);
+  } catch {
+  }
+}
 
 // src/consent/storage/device-id.ts
 var DEVICE_ID_LOCAL_STORAGE_KEY = "ffid_device_id";
@@ -1014,6 +1048,8 @@ var DEFAULT_MERGE_WARNING_MESSAGES = {
   shared_device_detected: "\u3053\u306E\u7AEF\u672B\u306F\u5225\u306E\u30A2\u30AB\u30A6\u30F3\u30C8\u3067\u3082\u4F7F\u7528\u3055\u308C\u3066\u3044\u307E\u3059\u3002Cookie \u8A2D\u5B9A\u306F\u30A2\u30AB\u30A6\u30F3\u30C8\u3054\u3068\u306B\u4FDD\u5B58\u3055\u308C\u3066\u3044\u307E\u3059",
   drift_detected: "\u4FDD\u5B58\u3055\u308C\u3066\u3044\u305F\u8A2D\u5B9A\u3068\u7570\u306A\u308B\u9805\u76EE\u304C\u3042\u3063\u305F\u305F\u3081\u3001\u65B0\u3057\u304F\u8A18\u9332\u3055\u308C\u307E\u3057\u305F"
 };
+var DEFAULT_DISMISSAL_COOLDOWN_MINUTES = 30;
+var MS_PER_MINUTE = 6e4;
 function applyChanges(base, changes) {
   return {
     necessary: true,
@@ -1032,9 +1068,17 @@ function FFIDAnalyticsProvider({
   onConsentChange,
   onError,
   autoShowBanner = true,
+  dismissalCooldownMinutes = DEFAULT_DISMISSAL_COOLDOWN_MINUTES,
   fetchImpl,
   children
 }) {
+  const cooldownMs = Number.isFinite(dismissalCooldownMinutes) && dismissalCooldownMinutes > 0 ? dismissalCooldownMinutes * MS_PER_MINUTE : 0;
+  const isWithinDismissalCooldown = react.useCallback(() => {
+    if (cooldownMs <= 0) return false;
+    const dismissedAt = readConsentDismissalTimestamp();
+    if (dismissedAt === null) return false;
+    return Date.now() - dismissedAt < cooldownMs;
+  }, [cooldownMs]);
   const [state, setState] = react.useState(
     FFID_CONSENT_NOT_DECIDED_STATE
   );
@@ -1145,7 +1189,7 @@ function FFIDAnalyticsProvider({
       applyCategoriesSideEffects(result.value.categories);
       writeConsentSessionMirror(result.value.categories);
       setIsLoading(false);
-      if (!result.value.hasDecided && autoShowBanner) {
+      if (!result.value.hasDecided && autoShowBanner && !isWithinDismissalCooldown()) {
         setIsBannerOpen(true);
       }
       if (result.value.needsRenewal && autoShowBanner) {
@@ -1273,7 +1317,10 @@ function FFIDAnalyticsProvider({
     persistCategories
   ]);
   const openBanner = react.useCallback(() => setIsBannerOpen(true), []);
-  const closeBanner = react.useCallback(() => setIsBannerOpen(false), []);
+  const closeBanner = react.useCallback(() => {
+    if (cooldownMs > 0) writeConsentDismissalTimestamp();
+    setIsBannerOpen(false);
+  }, [cooldownMs]);
   const openPreferences = react.useCallback(async () => {
     if (!categoryMetadata) {
       const client = clientRef.current;
@@ -1403,6 +1450,7 @@ function FFIDCookieBanner({
   acceptAllLabel,
   necessaryOnlyLabel,
   preferencesLabel,
+  closeLabel,
   style
 }) {
   const {
@@ -1411,6 +1459,7 @@ function FFIDCookieBanner({
     acceptAll,
     acceptNecessaryOnly,
     openPreferences,
+    closeBanner,
     error
   } = useFFIDConsent();
   if (!isBannerOpen && state.hasDecided && !state.needsRenewal) return null;
@@ -1462,7 +1511,7 @@ function FFIDCookieBanner({
                     void acceptNecessaryOnly();
                   },
                   "data-testid": "ffid-cookie-banner-necessary-only",
-                  children: necessaryOnlyLabel ?? "\u5FC5\u8981\u306A\u3082\u306E\u3060\u3051"
+                  children: necessaryOnlyLabel ?? "\u540C\u610F\u3057\u306A\u3044"
                 }
               ),
               /* @__PURE__ */ jsxRuntime.jsx(
@@ -1477,6 +1526,19 @@ function FFIDCookieBanner({
                   "data-testid": "ffid-cookie-banner-preferences",
                   children: preferencesLabel ?? "\u8A73\u7D30\u8A2D\u5B9A"
                 }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                "button",
+                {
+                  type: "button",
+                  className: classNames?.closeButton,
+                  style: DEFAULT_BUTTON_STYLE,
+                  onClick: () => {
+                    closeBanner();
+                  },
+                  "data-testid": "ffid-cookie-banner-close",
+                  children: closeLabel ?? "\u3042\u3068\u3067"
+                }
               )
             ]
           }
@@ -1780,6 +1842,7 @@ function FFIDCookieLink({
 exports.ALL_DENIED_EXCEPT_NECESSARY = ALL_DENIED_EXCEPT_NECESSARY;
 exports.CONSENT_COOKIE_MAX_AGE_SEC = CONSENT_COOKIE_MAX_AGE_SEC;
 exports.CONSENT_COOKIE_NAME = CONSENT_COOKIE_NAME;
+exports.CONSENT_DISMISSAL_TIMESTAMP_KEY = CONSENT_DISMISSAL_TIMESTAMP_KEY;
 exports.CONSENT_SESSION_STORAGE_KEY = CONSENT_SESSION_STORAGE_KEY;
 exports.COOKIE_VERSION = COOKIE_VERSION;
 exports.DEFAULT_CONSENT_ERROR_MESSAGES = DEFAULT_CONSENT_ERROR_MESSAGES;
@@ -1814,6 +1877,7 @@ exports.PostConsentWireSchema = PostConsentWireSchema;
 exports.PostSyncRequestSchema = PostSyncRequestSchema;
 exports.PostSyncWireSchema = PostSyncWireSchema;
 exports.PostWithdrawWireSchema = PostWithdrawWireSchema;
+exports.clearConsentDismissalTimestamp = clearConsentDismissalTimestamp;
 exports.clearConsentSessionMirror = clearConsentSessionMirror;
 exports.clearDeviceId = clearDeviceId;
 exports.createConsentClient = createConsentClient;
@@ -1831,8 +1895,10 @@ exports.mapMeWireToState = mapMeWireToState;
 exports.mapSyncWireToResult = mapSyncWireToResult;
 exports.mapWithdrawWireToState = mapWithdrawWireToState;
 exports.readConsentCookie = readConsentCookie;
+exports.readConsentDismissalTimestamp = readConsentDismissalTimestamp;
 exports.readConsentSessionMirror = readConsentSessionMirror;
 exports.useFFIDConsent = useFFIDConsent;
 exports.useFFIDConsentPreferences = useFFIDConsentPreferences;
 exports.writeConsentCookie = writeConsentCookie;
+exports.writeConsentDismissalTimestamp = writeConsentDismissalTimestamp;
 exports.writeConsentSessionMirror = writeConsentSessionMirror;