@getquick/content 0.0.0-stage → 0.1.0

package/dist/state-BYWc5TUB.js

@@ -0,0 +1,559 @@
+//#region frontend/src/consent/catalog.ts
+/**
+* CONSENT-1's fixed purpose categories (CN-R2) and the Runtime's closed service
+* catalog (CN-R3). Sites choose services from here; they cannot add categories
+* or services. Adding a service is a Runtime release.
+*/
+const CONSENT_CATEGORIES = [
+	"necessary",
+	"preferences",
+	"analytics",
+	"marketing",
+	"external_media"
+];
+/** The categories a visitor decides on: every one but `necessary`, which is never a choice. */
+const OPTIONAL_CATEGORIES = [
+	"preferences",
+	"analytics",
+	"marketing",
+	"external_media"
+];
+/** The languages Runtime-owned copy ships in (CN-C3). */
+const COPY_LANGUAGES = ["en", "pt-PT"];
+/** The copy language for a page's `lang` (BCP 47): Portuguese pages get pt-PT, others en. */
+function copyLanguage(lang) {
+	return /^pt(?:-|$)/i.test(lang ?? "") ? "pt-PT" : "en";
+}
+const SERVICE_CATALOG = {
+	consent: {
+		id: "consent",
+		category: "necessary",
+		provider: "This website",
+		name: "Consent choices",
+		purpose: {
+			en: "Remembers your consent choices and the consent ID that identifies them.",
+			"pt-PT": "Memoriza as suas escolhas de consentimento e o ID que as identifica."
+		},
+		storage: [{
+			name: "gq_consent",
+			kind: "cookie",
+			party: "first",
+			duration: {
+				en: "13 months",
+				"pt-PT": "13 meses"
+			}
+		}],
+		retention: {
+			en: "Records: 5 years after the choice stops being in force.",
+			"pt-PT": "Registos: 5 anos após a escolha deixar de estar em vigor."
+		},
+		privacyPolicy: "",
+		hosts: []
+	},
+	turnstile: {
+		id: "turnstile",
+		category: "necessary",
+		provider: "Cloudflare, Inc.",
+		name: "Cloudflare Turnstile",
+		purpose: {
+			en: "Protects sign-in, registration and checkout against abuse, only on those actions.",
+			"pt-PT": "Protege o início de sessão, o registo e a finalização de compra contra abusos, apenas nessas ações."
+		},
+		storage: [],
+		retention: {
+			en: "Not stored by this website.",
+			"pt-PT": "Não guardado por este website."
+		},
+		privacyPolicy: "https://www.cloudflare.com/privacypolicy/",
+		hosts: ["challenges.cloudflare.com"]
+	},
+	ga4: {
+		id: "ga4",
+		category: "analytics",
+		provider: "Google Ireland Limited",
+		name: "Google Analytics 4",
+		purpose: {
+			en: "Measures how visitors use the website, in aggregate (Consent Mode v2, basic mode).",
+			"pt-PT": "Mede, de forma agregada, como os visitantes usam o website (Consent Mode v2, modo básico)."
+		},
+		storage: [{
+			name: "_ga",
+			kind: "cookie",
+			match: "prefix",
+			party: "first",
+			duration: {
+				en: "Up to 2 years",
+				"pt-PT": "Até 2 anos"
+			}
+		}],
+		retention: {
+			en: "14 months at Google (default data retention).",
+			"pt-PT": "14 meses na Google (retenção de dados predefinida)."
+		},
+		privacyPolicy: "https://policies.google.com/privacy",
+		hosts: [
+			"googletagmanager.com",
+			"google-analytics.com",
+			"analytics.google.com"
+		]
+	},
+	youtube: {
+		id: "youtube",
+		category: "external_media",
+		provider: "Google Ireland Limited",
+		name: "YouTube",
+		purpose: {
+			en: "Plays embedded YouTube videos. Loading one sends your IP address to YouTube.",
+			"pt-PT": "Reproduz vídeos do YouTube incorporados. Carregar um envia o seu endereço IP ao YouTube."
+		},
+		storage: [{
+			name: "VISITOR_INFO1_LIVE, YSC",
+			kind: "cookie",
+			party: "third",
+			duration: {
+				en: "Session to 6 months",
+				"pt-PT": "Sessão a 6 meses"
+			}
+		}],
+		retention: {
+			en: "Set by Google; see its privacy policy.",
+			"pt-PT": "Definida pela Google; consulte a sua política de privacidade."
+		},
+		privacyPolicy: "https://policies.google.com/privacy",
+		hosts: [
+			"youtube.com",
+			"youtube-nocookie.com",
+			"ytimg.com",
+			"googlevideo.com",
+			"ggpht.com"
+		],
+		embeds: [{ host: "youtube.com" }, { host: "youtube-nocookie.com" }]
+	},
+	vimeo: {
+		id: "vimeo",
+		category: "external_media",
+		provider: "Vimeo.com, Inc.",
+		name: "Vimeo",
+		purpose: {
+			en: "Plays embedded Vimeo videos. Loading one sends your IP address to Vimeo.",
+			"pt-PT": "Reproduz vídeos do Vimeo incorporados. Carregar um envia o seu endereço IP ao Vimeo."
+		},
+		storage: [{
+			name: "vuid",
+			kind: "cookie",
+			party: "third",
+			duration: {
+				en: "2 years",
+				"pt-PT": "2 anos"
+			}
+		}],
+		retention: {
+			en: "Set by Vimeo; see its privacy policy.",
+			"pt-PT": "Definida pela Vimeo; consulte a sua política de privacidade."
+		},
+		privacyPolicy: "https://vimeo.com/privacy",
+		hosts: ["vimeo.com", "vimeocdn.com"],
+		embeds: [{ host: "player.vimeo.com" }]
+	},
+	google_maps: {
+		id: "google_maps",
+		category: "external_media",
+		provider: "Google Ireland Limited",
+		name: "Google Maps",
+		purpose: {
+			en: "Shows an embedded map. Loading it sends your IP address to Google.",
+			"pt-PT": "Mostra um mapa incorporado. Carregá-lo envia o seu endereço IP à Google."
+		},
+		storage: [{
+			name: "NID",
+			kind: "cookie",
+			party: "third",
+			duration: {
+				en: "6 months",
+				"pt-PT": "6 meses"
+			}
+		}],
+		retention: {
+			en: "Set by Google; see its privacy policy.",
+			"pt-PT": "Definida pela Google; consulte a sua política de privacidade."
+		},
+		privacyPolicy: "https://policies.google.com/privacy",
+		hosts: [
+			"google.com",
+			"googleapis.com",
+			"gstatic.com"
+		],
+		embeds: [
+			{
+				host: "www.google.com",
+				path: "/maps"
+			},
+			{
+				host: "google.com",
+				path: "/maps"
+			},
+			{ host: "maps.google.com" }
+		]
+	}
+};
+const SERVICE_IDS = Object.keys(SERVICE_CATALOG);
+function isServiceId(value) {
+	return typeof value === "string" && Object.hasOwn(SERVICE_CATALOG, value);
+}
+function catalogService(id) {
+	return SERVICE_CATALOG[id];
+}
+/** Whether a host is a domain or one of its subdomains. */
+function hostMatches(host, domain) {
+	const h = host.toLowerCase().replace(/\.$/, "");
+	return h === domain || h.endsWith(`.${domain}`);
+}
+/** The catalog service an embed URL belongs to, if any. */
+function embedService(url) {
+	for (const id of SERVICE_IDS) {
+		const service = SERVICE_CATALOG[id];
+		for (const embed of service.embeds ?? []) {
+			if (!hostMatches(url.hostname, embed.host)) continue;
+			if (embed.path && !url.pathname.startsWith(embed.path)) continue;
+			return id;
+		}
+	}
+	return null;
+}
+/** The catalog service whose hosts include a host, if any. */
+function hostService(host) {
+	for (const id of SERVICE_IDS) if (SERVICE_CATALOG[id].hosts.some((domain) => hostMatches(host, domain))) return id;
+	return null;
+}
+//#endregion
+//#region frontend/src/consent/hash.ts
+const K = new Uint32Array([
+	1116352408,
+	1899447441,
+	3049323471,
+	3921009573,
+	961987163,
+	1508970993,
+	2453635748,
+	2870763221,
+	3624381080,
+	310598401,
+	607225278,
+	1426881987,
+	1925078388,
+	2162078206,
+	2614888103,
+	3248222580,
+	3835390401,
+	4022224774,
+	264347078,
+	604807628,
+	770255983,
+	1249150122,
+	1555081692,
+	1996064986,
+	2554220882,
+	2821834349,
+	2952996808,
+	3210313671,
+	3336571891,
+	3584528711,
+	113926993,
+	338241895,
+	666307205,
+	773529912,
+	1294757372,
+	1396182291,
+	1695183700,
+	1986661051,
+	2177026350,
+	2456956037,
+	2730485921,
+	2820302411,
+	3259730800,
+	3345764771,
+	3516065817,
+	3600352804,
+	4094571909,
+	275423344,
+	430227734,
+	506948616,
+	659060556,
+	883997877,
+	958139571,
+	1322822218,
+	1537002063,
+	1747873779,
+	1955562222,
+	2024104815,
+	2227730452,
+	2361852424,
+	2428436474,
+	2756734187,
+	3204031479,
+	3329325298
+]);
+function sha256Hex(text) {
+	const bytes = new TextEncoder().encode(text);
+	const length = bytes.length + 9 + 63 >> 6 << 6;
+	const padded = new Uint8Array(length);
+	padded.set(bytes);
+	padded[bytes.length] = 128;
+	const bits = bytes.length * 8;
+	const view = new DataView(padded.buffer);
+	view.setUint32(length - 8, Math.floor(bits / 4294967296));
+	view.setUint32(length - 4, bits >>> 0);
+	const h = new Uint32Array([
+		1779033703,
+		3144134277,
+		1013904242,
+		2773480762,
+		1359893119,
+		2600822924,
+		528734635,
+		1541459225
+	]);
+	const w = /* @__PURE__ */ new Uint32Array(64);
+	const rotr = (x, n) => x >>> n | x << 32 - n;
+	for (let offset = 0; offset < length; offset += 64) {
+		for (let i = 0; i < 16; i++) w[i] = view.getUint32(offset + i * 4);
+		for (let i = 16; i < 64; i++) {
+			const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ w[i - 15] >>> 3;
+			const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ w[i - 2] >>> 10;
+			w[i] = w[i - 16] + s0 + w[i - 7] + s1 >>> 0;
+		}
+		let [a, b, c, d, e, f, g, hh] = h;
+		for (let i = 0; i < 64; i++) {
+			const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+			const ch = e & f ^ ~e & g;
+			const t1 = hh + s1 + ch + K[i] + w[i] >>> 0;
+			const t2 = (rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) + (a & b ^ a & c ^ b & c) >>> 0;
+			hh = g;
+			g = f;
+			f = e;
+			e = d + t1 >>> 0;
+			d = c;
+			c = b;
+			b = a;
+			a = t1 + t2 >>> 0;
+		}
+		h[0] = h[0] + a >>> 0;
+		h[1] = h[1] + b >>> 0;
+		h[2] = h[2] + c >>> 0;
+		h[3] = h[3] + d >>> 0;
+		h[4] = h[4] + e >>> 0;
+		h[5] = h[5] + f >>> 0;
+		h[6] = h[6] + g >>> 0;
+		h[7] = h[7] + hh >>> 0;
+	}
+	return Array.from(h, (word) => word.toString(16).padStart(8, "0")).join("");
+}
+//#endregion
+//#region frontend/src/consent/configuration.ts
+/**
+* The revision of the Runtime's banner copy that counts as material. Copy edits
+* keep it (CN-R5); only a reviewed change of what the visitor is told about
+* processing bumps it.
+*/
+const CONSENT_COPY_REVISION = 1;
+/** A GA4 measurement ID. Anything else leaves GA4 inactive. */
+const MEASUREMENT_ID = /^G-[A-Z0-9]{4,16}$/;
+/**
+* A Site's consent configuration: the union of services it declares in code and
+* those its settings switch on. Unknown services are refused: the set is closed.
+*/
+function consentConfiguration(input = {}) {
+	const active = /* @__PURE__ */ new Set(["consent"]);
+	for (const id of input.services ?? []) {
+		if (!isServiceId(id)) throw new Error(`"${id}" isn't a consent catalog service`);
+		if (id === "ga4") throw new Error("GA4 is switched on by gq-config's analytics settings");
+		active.add(id);
+	}
+	const measurementId = input.analytics?.enabled && MEASUREMENT_ID.test(input.analytics.measurementId ?? "") ? input.analytics.measurementId : null;
+	if (measurementId) active.add("ga4");
+	const services = [...active].sort();
+	const categories = OPTIONAL_CATEGORIES.filter((category) => services.some((id) => SERVICE_CATALOG[id].category === category));
+	const name = input.controller?.trim() ?? "";
+	const controller = name ? sha256Hex(`controller:${name}`).slice(0, 12) : "";
+	return {
+		schemaVersion: 1,
+		services,
+		categories,
+		measurementId,
+		controller,
+		version: sha256Hex(JSON.stringify({
+			categories,
+			services,
+			controller,
+			copy: 1
+		})).slice(0, 16)
+	};
+}
+/** CN-C1: a Site with no active service outside `necessary` shows no banner and records nothing. */
+function needsBanner(configuration) {
+	return configuration.categories.length > 0;
+}
+//#endregion
+//#region frontend/src/consent/state.ts
+/** The first-party consent cookie: necessary, and the only storage written before a decision. */
+const CONSENT_COOKIE = "gq_consent";
+/** A decision, acceptance or rejection, is valid for 6 months (CN-R5). */
+const DECISION_VALIDITY_MS = Math.round(157788e5);
+/** The consent cookie lives at most 13 months (CN-R5): kept so a renewal keeps its consent ID. */
+const CONSENT_COOKIE_MAX_AGE_SECONDS = 34128e3;
+/** The record actions of CN-R7. */
+const CONSENT_ACTIONS = [
+	"accept_all",
+	"reject_all",
+	"custom",
+	"withdraw",
+	"renew"
+];
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+function isConsentId(value) {
+	return typeof value === "string" && UUID.test(value);
+}
+const denyAll = () => ({
+	preferences: false,
+	analytics: false,
+	marketing: false,
+	external_media: false
+});
+function base64url(text) {
+	const bytes = new TextEncoder().encode(text);
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function unbase64url(text) {
+	const binary = atob(text.replaceAll("-", "+").replaceAll("_", "/"));
+	return new TextDecoder().decode(Uint8Array.from(binary, (char) => char.charCodeAt(0)));
+}
+/** The cookie value of a state: base64url JSON, short keys, no characters cookies forbid. */
+function serializeConsentState(state) {
+	const bits = OPTIONAL_CATEGORIES.map((category) => state.decisions[category] ? "1" : "0");
+	return base64url(JSON.stringify({
+		v: 1,
+		i: state.consentId,
+		t: state.decidedAt,
+		d: bits.join(""),
+		s: state.services,
+		c: state.controller,
+		h: state.version,
+		a: state.action,
+		r: state.recorded ? 1 : 0
+	}));
+}
+/** A cookie value's state, or null for anything malformed: an unreadable cookie is no decision. */
+function parseConsentState(value) {
+	if (!value || value.length > 2048) return null;
+	try {
+		const raw = JSON.parse(unbase64url(value));
+		if (raw.v !== 1 || !isConsentId(raw.i)) return null;
+		if (typeof raw.t !== "number" || !Number.isFinite(raw.t) || raw.t <= 0) return null;
+		if (typeof raw.d !== "string" || !/^[01]{4}$/.test(raw.d)) return null;
+		if (!Array.isArray(raw.s) || typeof raw.c !== "string" || typeof raw.h !== "string") return null;
+		if (!CONSENT_ACTIONS.includes(raw.a)) return null;
+		const decisions = denyAll();
+		OPTIONAL_CATEGORIES.forEach((category, index) => {
+			decisions[category] = raw.d[index] === "1";
+		});
+		return {
+			consentId: raw.i,
+			decidedAt: raw.t,
+			decisions,
+			services: raw.s.filter(isServiceId),
+			controller: raw.c,
+			version: raw.h,
+			action: raw.a,
+			recorded: raw.r === 1
+		};
+	} catch {
+		return null;
+	}
+}
+/** The consent state in a Cookie header (server side) or `document.cookie` (browser). */
+function readConsentCookie(cookieHeader) {
+	for (const part of (cookieHeader ?? "").split(";")) {
+		const [name, ...rest] = part.trim().split("=");
+		if (name === "gq_consent") return parseConsentState(rest.join("="));
+	}
+	return null;
+}
+/** The cookie string for a state: first party, the whole Site, Lax, Secure on HTTPS. */
+function consentCookie(state, { secure = true } = {}) {
+	return `${CONSENT_COOKIE}=${serializeConsentState(state)}; Path=/; Max-Age=${CONSENT_COOKIE_MAX_AGE_SECONDS}; SameSite=Lax` + (secure ? "; Secure" : "");
+}
+/** Whether the controller changed: both known and different (an unknown one isn't a change). */
+function otherController(state, configuration) {
+	return Boolean(state.controller && configuration.controller) && state.controller !== configuration.controller;
+}
+/**
+* Why the visitor must decide now, or null: no decision (`first`), one older
+* than 6 months (`expired`), or a material change since (`material`): a new
+* category, a new service in a category they granted, or another controller.
+* A Site without optional services never prompts (CN-C1).
+*/
+function promptReason(configuration, state, now = Date.now()) {
+	if (!needsBanner(configuration)) return null;
+	if (!state) return "first";
+	if (now - state.decidedAt >= DECISION_VALIDITY_MS || state.decidedAt > now + 6e4) return "expired";
+	if (otherController(state, configuration)) return "material";
+	const known = new Set(state.services);
+	const knownCategories = new Set(state.services.map((id) => SERVICE_CATALOG[id].category));
+	for (const category of configuration.categories) if (!knownCategories.has(category)) return "material";
+	for (const id of configuration.services) {
+		const category = SERVICE_CATALOG[id].category;
+		if (category !== "necessary" && state.decisions[category] && !known.has(id)) return "material";
+	}
+	return null;
+}
+/**
+* Whether a service may load now: necessary ones always; others only on a
+* valid, unexpired grant of their category that already knew the service.
+* Anything else (no decision, an expired one, a newer service) is denied.
+*/
+function serviceGranted(configuration, state, id, now = Date.now()) {
+	if (!configuration.services.includes(id)) return false;
+	const category = SERVICE_CATALOG[id].category;
+	if (category === "necessary") return true;
+	if (!state) return false;
+	if (now - state.decidedAt >= DECISION_VALIDITY_MS || state.decidedAt > now + 6e4) return false;
+	if (otherController(state, configuration)) return false;
+	return state.decisions[category] && state.services.includes(id);
+}
+/** The optional categories in force now (see serviceGranted). */
+function grantedCategories(configuration, state, now = Date.now()) {
+	return configuration.categories.filter((category) => configuration.services.some((id) => SERVICE_CATALOG[id].category === category && serviceGranted(configuration, state, id, now)));
+}
+function randomId() {
+	return globalThis.crypto.randomUUID();
+}
+/**
+* A new decision. It keeps the consent ID of an earlier one. Its action: a
+* renewal when the visitor was asked again (expired or material change), a
+* withdrawal when a category in force is no longer granted, else the button.
+* Only active categories can be granted; nothing is granted by default.
+*/
+function decide(configuration, previous, choice, now = Date.now()) {
+	const decisions = denyAll();
+	for (const category of configuration.categories) decisions[category] = choice.kind === "accept_all" || choice.kind === "custom" && choice.decisions[category] === true;
+	const inForce = grantedCategories(configuration, previous, now);
+	const reason = previous ? promptReason(configuration, previous, now) : null;
+	const action = reason === "expired" || reason === "material" ? "renew" : inForce.some((category) => !decisions[category]) ? "withdraw" : choice.kind;
+	return {
+		action,
+		state: {
+			consentId: previous?.consentId ?? randomId(),
+			decidedAt: now,
+			decisions,
+			services: [...configuration.services],
+			controller: configuration.controller,
+			version: configuration.version,
+			action,
+			recorded: false
+		}
+	};
+}
+//#endregion
+export { SERVICE_IDS as C, hostMatches as D, embedService as E, hostService as O, SERVICE_CATALOG as S, copyLanguage as T, consentConfiguration as _, consentCookie as a, COPY_LANGUAGES as b, grantedCategories as c, promptReason as d, readConsentCookie as f, MEASUREMENT_ID as g, CONSENT_COPY_REVISION as h, DECISION_VALIDITY_MS as i, isServiceId as k, isConsentId as l, serviceGranted as m, CONSENT_COOKIE as n, decide as o, serializeConsentState as p, CONSENT_COOKIE_MAX_AGE_SECONDS as r, denyAll as s, CONSENT_ACTIONS as t, parseConsentState as u, needsBanner as v, catalogService as w, OPTIONAL_CATEGORIES as x, CONSENT_CATEGORIES as y };

package/dist/state-Dzd52F3c.d.ts

@@ -0,0 +1,77 @@
+import { g as OptionalCategory, r as ConsentConfiguration, y as ServiceId } from "./configuration-C_JGygQI.js";
+//#region frontend/src/consent/state.d.ts
+/** The first-party consent cookie: necessary, and the only storage written before a decision. */
+declare const CONSENT_COOKIE = "gq_consent";
+/** A decision, acceptance or rejection, is valid for 6 months (CN-R5). */
+declare const DECISION_VALIDITY_MS: number;
+/** The consent cookie lives at most 13 months (CN-R5): kept so a renewal keeps its consent ID. */
+declare const CONSENT_COOKIE_MAX_AGE_SECONDS: number;
+type ConsentDecisions = Record<OptionalCategory, boolean>;
+/** The record actions of CN-R7. */
+declare const CONSENT_ACTIONS: readonly ["accept_all", "reject_all", "custom", "withdraw", "renew"];
+type ConsentAction = (typeof CONSENT_ACTIONS)[number];
+/** A visitor's decision as the consent cookie holds it. */
+interface ConsentState {
+  /** Random (UUID v4); also the record's consent ID, quoted in data-subject requests. */
+  consentId: string;
+  /** When the visitor decided (ms since the epoch, the browser's clock). */
+  decidedAt: number;
+  decisions: ConsentDecisions;
+  /** The active services when the visitor decided: a later one in a granted category is new. */
+  services: ServiceId[];
+  /** The controller hash when the visitor decided. */
+  controller: string;
+  /** The configuration version decided on. */
+  version: string;
+  /** The decision's record action, resent until the Worker confirms it. */
+  action: ConsentAction;
+  /** Whether the Worker has confirmed the decision's record. */
+  recorded: boolean;
+}
+type ConsentChoice = {
+  kind: "accept_all";
+} | {
+  kind: "reject_all";
+} | {
+  kind: "custom";
+  decisions: Partial<ConsentDecisions>;
+};
+declare function isConsentId(value: unknown): value is string;
+declare const denyAll: () => ConsentDecisions;
+/** The cookie value of a state: base64url JSON, short keys, no characters cookies forbid. */
+declare function serializeConsentState(state: ConsentState): string;
+/** A cookie value's state, or null for anything malformed: an unreadable cookie is no decision. */
+declare function parseConsentState(value: string | null | undefined): ConsentState | null;
+/** The consent state in a Cookie header (server side) or `document.cookie` (browser). */
+declare function readConsentCookie(cookieHeader: string | null | undefined): ConsentState | null;
+/** The cookie string for a state: first party, the whole Site, Lax, Secure on HTTPS. */
+declare function consentCookie(state: ConsentState, { secure }?: {
+  secure?: boolean | undefined;
+}): string;
+/**
+ * Why the visitor must decide now, or null: no decision (`first`), one older
+ * than 6 months (`expired`), or a material change since (`material`): a new
+ * category, a new service in a category they granted, or another controller.
+ * A Site without optional services never prompts (CN-C1).
+ */
+declare function promptReason(configuration: ConsentConfiguration, state: ConsentState | null, now?: number): "first" | "expired" | "material" | null;
+/**
+ * Whether a service may load now: necessary ones always; others only on a
+ * valid, unexpired grant of their category that already knew the service.
+ * Anything else (no decision, an expired one, a newer service) is denied.
+ */
+declare function serviceGranted(configuration: ConsentConfiguration, state: ConsentState | null, id: ServiceId, now?: number): boolean;
+/** The optional categories in force now (see serviceGranted). */
+declare function grantedCategories(configuration: ConsentConfiguration, state: ConsentState | null, now?: number): OptionalCategory[];
+/**
+ * A new decision. It keeps the consent ID of an earlier one. Its action: a
+ * renewal when the visitor was asked again (expired or material change), a
+ * withdrawal when a category in force is no longer granted, else the button.
+ * Only active categories can be granted; nothing is granted by default.
+ */
+declare function decide(configuration: ConsentConfiguration, previous: ConsentState | null, choice: ConsentChoice, now?: number): {
+  state: ConsentState;
+  action: ConsentAction;
+};
+//#endregion
+export { serializeConsentState as _, ConsentChoice as a, DECISION_VALIDITY_MS as c, denyAll as d, grantedCategories as f, readConsentCookie as g, promptReason as h, ConsentAction as i, consentCookie as l, parseConsentState as m, CONSENT_COOKIE as n, ConsentDecisions as o, isConsentId as p, CONSENT_COOKIE_MAX_AGE_SECONDS as r, ConsentState as s, CONSENT_ACTIONS as t, decide as u, serviceGranted as v };

package/dist/version-Dn6VLZJO.js

@@ -0,0 +1,6 @@
+//#endregion
+//#region frontend/src/consent/version.ts
+/** The UI/adapter version recorded with each decision (CN-R7). */
+const CONSENT_UI_VERSION = `gq-content@0.1.0`;
+//#endregion
+export { CONSENT_UI_VERSION as t };