@getquick/content 0.0.0-stage → 0.2.0

package/dist/consent.d.ts

@@ -0,0 +1,114 @@
+import { C as hostMatches, S as embedService, T as isServiceId, _ as SERVICE_CATALOG, a as MEASUREMENT_ID, b as catalogService, c as CONSENT_CATEGORIES, d as ConsentService, f as ConsentStorage, g as OptionalCategory, h as OPTIONAL_CATEGORIES, i as ConsentConfigurationInput, l as COPY_LANGUAGES, m as CopyLanguage, n as CONSENT_COPY_REVISION, o as consentConfiguration, p as Copy, r as ConsentConfiguration, s as needsBanner, t as AnalyticsSettings, u as ConsentCategory, v as SERVICE_IDS, w as hostService, x as copyLanguage, y as ServiceId } from "./configuration-C_JGygQI.js";
+import { a as REQUIRED_LEGAL_ROLES, i as LegalRole, n as LegalContract, o as legalRevisions, r as LegalLanguage, s as parseLegalLanguage, t as LEGAL_ROLES } from "./legal-C5Xiq59W.js";
+import { _ as serializeConsentState, a as ConsentChoice, c as DECISION_VALIDITY_MS, d as denyAll, f as grantedCategories, g as readConsentCookie, h as promptReason, i as ConsentAction, l as consentCookie, m as parseConsentState, n as CONSENT_COOKIE, o as ConsentDecisions, p as isConsentId, r as CONSENT_COOKIE_MAX_AGE_SECONDS, s as ConsentState, t as CONSENT_ACTIONS, u as decide, v as serviceGranted } from "./state-Dzd52F3c.js";
+import { a as isLegalRoleName, i as consentRecordRequest, n as ConsentRecordRequest, o as isRecordToken, r as MAX_RECORD_BYTES, s as parseConsentRecordRequest, t as ConsentRecord } from "./records-CACA2O0Q.js";
+//#region frontend/src/consent/copy.d.ts
+/**
+ * Runtime-owned copy (CN-C3, CN-C4): Sites restyle it but do not edit it.
+ * Drafted for CONSENT-1 and pending the legal review recorded in ADR 0008's
+ * open items; changing what it says about processing bumps
+ * CONSENT_COPY_REVISION.
+ */
+export interface ConsentCopy {
+  bannerTitle: string;
+  bannerText: string;
+  acceptAll: string;
+  rejectAll: string;
+  customise: string;
+  save: string;
+  close: string;
+  preferencesTitle: string;
+  preferencesText: string;
+  cookieSettings: string;
+  cookiePolicy: string;
+  consentId: string;
+  noDecision: string;
+  provider: string;
+  purpose: string;
+  storage: string;
+  retention: string;
+  thirdPartyStorage: string;
+  alwaysOn: string;
+  categories: Record<ConsentCategory, {
+    name: string;
+    description: string;
+  }>;
+  placeholderText: (service: string, provider: string) => string;
+  loadOnce: string;
+  alwaysAllow: string;
+  blockedText: (host: string) => string;
+  legal: Record<string, string>;
+  legalNavigation: string;
+}
+export declare const CONSENT_COPY: Record<CopyLanguage, ConsentCopy>;
+//#endregion
+//#region frontend/src/consent/embeds.d.ts
+/** Where rewriting runs: the Site's consent configuration and the page's language. */
+export interface EmbedContext {
+  configuration: ConsentConfiguration;
+  /** The page's `lang` (BCP 47); placeholders follow it (CN-C3). */
+  language: string;
+  /**
+   * Hosts that are the Site itself (its Frontend and its own CMS/media origin).
+   * Relative URLs are always first party.
+   */
+  firstPartyHosts?: readonly string[];
+}
+/** An embed rewriting withheld for good: from an unknown host, an inactive service, or a script. */
+export interface BlockedEmbed {
+  tag: "iframe" | "script" | "embed" | "object";
+  /** The host it would have contacted; `inline` for an inline script. */
+  host: string;
+  service: ServiceId | null;
+  reason: "unknown-host" | "inactive-service" | "script";
+}
+export interface RewrittenHtml {
+  html: string;
+  /** Embeds turned into service placeholders, loadable after consent. */
+  placeholders: Array<{
+    service: ServiceId;
+    host: string;
+  }>;
+  /** Embeds blocked for good (CN-R3), for diagnostics and readiness. */
+  blocked: BlockedEmbed[];
+}
+/** Text safe inside an attribute value or element content. */
+export declare function escapeHtml(value: string): string;
+export interface PlaceholderInput {
+  service: ServiceId;
+  /** The embed's URL; it is only an attribute value until consent. */
+  src: string;
+  /** The page's `lang`. */
+  language: string;
+  title?: string;
+  width?: string | number;
+  height?: string | number;
+  /** Further iframe attributes (allow, allowfullscreen, class…), applied when it loads. */
+  attributes?: Record<string, string>;
+  /** A decorative embed (a background video): no notice or buttons; loads only on a grant. */
+  decorative?: boolean;
+}
+/**
+ * A placeholder for a third-party embed (CN-R13): no live `src`, naming the
+ * provider and purpose and offering "Load once" and "Always allow external
+ * media". The client runtime replaces it with the iframe after consent.
+ * Without JavaScript it never loads. Site components use it for their own
+ * embeds (a contact map); rewriteEmbeds uses it for WordPress HTML.
+ */
+export declare function embedPlaceholder(input: PlaceholderInput): string;
+/** The generic placeholder for an embed that may never load (CN-R3). */
+export declare function blockedPlaceholder(host: string, tag: BlockedEmbed["tag"], language: string): string;
+/**
+ * Rewrites published HTML so its initial form contacts no third party
+ * (CN-R1, CN-R3, CN-R13): iframes of active catalog services become
+ * placeholders; other third-party iframes, embeds and objects, and every
+ * third-party or inline executable script, are blocked and reported.
+ * First-party and non-executable content is left byte for byte.
+ */
+export declare function rewriteEmbeds(html: string, context: EmbedContext): RewrittenHtml;
+//#endregion
+//#region frontend/src/consent/version.d.ts
+/** The UI/adapter version recorded with each decision (CN-R7). */
+export declare const CONSENT_UI_VERSION: string;
+//#endregion
+export { AnalyticsSettings, CONSENT_ACTIONS, CONSENT_CATEGORIES, CONSENT_COOKIE, CONSENT_COOKIE_MAX_AGE_SECONDS, CONSENT_COPY_REVISION, COPY_LANGUAGES, ConsentAction, ConsentCategory, ConsentChoice, ConsentConfiguration, ConsentConfigurationInput, ConsentDecisions, ConsentRecord, ConsentRecordRequest, ConsentService, ConsentState, ConsentStorage, Copy, CopyLanguage, DECISION_VALIDITY_MS, LEGAL_ROLES, type LegalContract, type LegalLanguage, type LegalRole, MAX_RECORD_BYTES, MEASUREMENT_ID, OPTIONAL_CATEGORIES, OptionalCategory, REQUIRED_LEGAL_ROLES, SERVICE_CATALOG, SERVICE_IDS, ServiceId, catalogService, consentConfiguration, consentCookie, consentRecordRequest, copyLanguage, decide, denyAll, embedService, grantedCategories, hostMatches, hostService, isConsentId, isLegalRoleName, isRecordToken, isServiceId, legalRevisions, needsBanner, parseConsentRecordRequest, parseConsentState, parseLegalLanguage, promptReason, readConsentCookie, serializeConsentState, serviceGranted };

package/dist/consent.js

@@ -0,0 +1,5 @@
+import { C as SERVICE_IDS, D as hostMatches, E as embedService, O as hostService, S as SERVICE_CATALOG, T as copyLanguage, _ as consentConfiguration, a as consentCookie, b as COPY_LANGUAGES, c as grantedCategories, d as promptReason, f as readConsentCookie, g as MEASUREMENT_ID, h as CONSENT_COPY_REVISION, i as DECISION_VALIDITY_MS, k as isServiceId, l as isConsentId, m as serviceGranted, n as CONSENT_COOKIE, o as decide, p as serializeConsentState, r as CONSENT_COOKIE_MAX_AGE_SECONDS, s as denyAll, t as CONSENT_ACTIONS, u as parseConsentState, v as needsBanner, w as catalogService, x as OPTIONAL_CATEGORIES, y as CONSENT_CATEGORIES } from "./state-BYWc5TUB.js";
+import { a as parseConsentRecordRequest, i as isRecordToken, n as consentRecordRequest, r as isLegalRoleName, t as MAX_RECORD_BYTES } from "./records-Dumrz759.js";
+import { a as CONSENT_COPY, c as legalRevisions, i as rewriteEmbeds, l as parseLegalLanguage, n as embedPlaceholder, o as LEGAL_ROLES, r as escapeHtml, s as REQUIRED_LEGAL_ROLES, t as blockedPlaceholder } from "./embeds-p9SyGNZI.js";
+import { t as CONSENT_UI_VERSION } from "./version-DyyNhsuU.js";
+export { CONSENT_ACTIONS, CONSENT_CATEGORIES, CONSENT_COOKIE, CONSENT_COOKIE_MAX_AGE_SECONDS, CONSENT_COPY, CONSENT_COPY_REVISION, CONSENT_UI_VERSION, COPY_LANGUAGES, DECISION_VALIDITY_MS, LEGAL_ROLES, MAX_RECORD_BYTES, MEASUREMENT_ID, OPTIONAL_CATEGORIES, REQUIRED_LEGAL_ROLES, SERVICE_CATALOG, SERVICE_IDS, blockedPlaceholder, catalogService, consentConfiguration, consentCookie, consentRecordRequest, copyLanguage, decide, denyAll, embedPlaceholder, embedService, escapeHtml, grantedCategories, hostMatches, hostService, isConsentId, isLegalRoleName, isRecordToken, isServiceId, legalRevisions, needsBanner, parseConsentRecordRequest, parseConsentState, parseLegalLanguage, promptReason, readConsentCookie, rewriteEmbeds, serializeConsentState, serviceGranted };

package/dist/embeds-p9SyGNZI.js

@@ -0,0 +1,344 @@
+import { D as hostMatches, E as embedService, O as hostService, S as SERVICE_CATALOG, T as copyLanguage } from "./state-BYWc5TUB.js";
+import { i as isRecordToken, r as isLegalRoleName } from "./records-Dumrz759.js";
+//#region frontend/src/consent/legal.ts
+/**
+* LEGAL-1's Legal Contract, as gq-config publishes it (fixed in the consent
+* execution record): per language, each assigned role's public URL, title and
+* revision, plus the controller's identity.
+*/
+const LEGAL_ROLES = [
+	"privacy_policy",
+	"cookie_policy",
+	"terms_of_use",
+	"legal_notice",
+	"terms_of_sale",
+	"returns_policy",
+	"shipping_policy",
+	"complaints_book",
+	"dispute_resolution"
+];
+/** The roles every Site needs; commerce and Portuguese-consumer roles come from gq-config's `missingRequired`. */
+const REQUIRED_LEGAL_ROLES = ["privacy_policy", "cookie_policy"];
+const text = (value) => typeof value === "string" && value.trim() ? value : null;
+function safeUrl(value) {
+	if (typeof value !== "string") return null;
+	if (value.startsWith("/") && !value.startsWith("//")) return value;
+	try {
+		const url = new URL(value);
+		return url.protocol === "https:" || url.protocol === "http:" ? url.href : null;
+	} catch {
+		return null;
+	}
+}
+/**
+* One language's Contract from untrusted input (GraphQL or the storefront
+* payload): unknown roles, unsafe URLs and malformed entries are dropped.
+*/
+function parseLegalLanguage(value) {
+	if (!value || typeof value !== "object") return null;
+	const raw = value;
+	const controller = raw.controller ?? {};
+	const roles = [];
+	for (const entry of Array.isArray(raw.roles) ? raw.roles : []) {
+		if (!entry || typeof entry !== "object") continue;
+		const role = entry;
+		const url = safeUrl(role.url);
+		if (typeof role.role !== "string" || !LEGAL_ROLES.includes(role.role)) continue;
+		if (!url || roles.some((each) => each.role === role.role)) continue;
+		roles.push({
+			role: role.role,
+			url,
+			title: text(role.title),
+			revision: text(role.revision),
+			isFallback: role.isFallback === true
+		});
+	}
+	roles.sort((a, b) => LEGAL_ROLES.indexOf(a.role) - LEGAL_ROLES.indexOf(b.role));
+	return {
+		controller: {
+			name: text(controller.name),
+			privacyEmail: text(controller.privacyEmail),
+			dpoContact: text(controller.dpoContact)
+		},
+		roles,
+		missingRequired: (Array.isArray(raw.missingRequired) ? raw.missingRequired : []).filter(isLegalRoleName)
+	};
+}
+/**
+* The LEGAL-1 revisions in force on a page, recorded with each decision
+* (CN-R7). A revision the record schema can't hold is left out rather than
+* making every record invalid.
+*/
+function legalRevisions(legal) {
+	return Object.fromEntries((legal?.roles ?? []).flatMap((role) => isRecordToken(role.revision) ? [[role.role, role.revision]] : []));
+}
+//#endregion
+//#region frontend/src/consent/copy.ts
+const CONSENT_COPY = {
+	en: {
+		bannerTitle: "Your privacy choices",
+		bannerText: "We use what is strictly necessary for this website to work. With your consent we also use the services listed in the settings, for the purposes shown there. You can accept or reject them all, choose by purpose, and change your mind at any time in Cookie settings.",
+		acceptAll: "Accept all",
+		rejectAll: "Reject all",
+		customise: "Choose by purpose",
+		save: "Save choices",
+		close: "Close",
+		preferencesTitle: "Cookie settings",
+		preferencesText: "Choose which purposes you allow. Nothing optional is used until you allow it, and you can withdraw at any time.",
+		cookieSettings: "Cookie settings",
+		cookiePolicy: "Cookie policy",
+		consentId: "Your consent ID",
+		noDecision: "No choice recorded yet",
+		provider: "Provider",
+		purpose: "Purpose",
+		storage: "Storage",
+		retention: "Retention",
+		thirdPartyStorage: "set by the provider; this website cannot remove it",
+		alwaysOn: "Always on",
+		categories: {
+			necessary: {
+				name: "Strictly necessary",
+				description: "Needed for the website to work and to remember your choices."
+			},
+			preferences: {
+				name: "Preferences",
+				description: "Remembers settings that make the website more convenient."
+			},
+			analytics: {
+				name: "Analytics",
+				description: "Helps us understand, in aggregate, how the website is used."
+			},
+			marketing: {
+				name: "Marketing",
+				description: "Measures and personalises advertising."
+			},
+			external_media: {
+				name: "External media",
+				description: "Loads videos, maps and other content from other providers."
+			}
+		},
+		placeholderText: (service, provider) => `This content is hosted by ${service} (${provider}). Loading it sends your IP address to that provider and may let it store data on your device.`,
+		loadOnce: "Load once",
+		alwaysAllow: "Always allow external media",
+		blockedText: (host) => `Content from ${host} is blocked: it isn't a service this website uses.`,
+		legal: {
+			privacy_policy: "Privacy policy",
+			cookie_policy: "Cookie policy",
+			terms_of_use: "Terms of use",
+			legal_notice: "Legal notice",
+			terms_of_sale: "Terms of sale",
+			returns_policy: "Returns policy",
+			shipping_policy: "Shipping policy",
+			complaints_book: "Complaints book",
+			dispute_resolution: "Dispute resolution"
+		},
+		legalNavigation: "Legal information"
+	},
+	"pt-PT": {
+		bannerTitle: "As suas escolhas de privacidade",
+		bannerText: "Usamos o estritamente necessário para que este website funcione. Com o seu consentimento, usamos também os serviços indicados nas definições, para as finalidades aí descritas. Pode aceitar ou rejeitar todos, escolher por finalidade e mudar de ideias a qualquer momento nas Definições de cookies.",
+		acceptAll: "Aceitar todos",
+		rejectAll: "Rejeitar todos",
+		customise: "Escolher por finalidade",
+		save: "Guardar escolhas",
+		close: "Fechar",
+		preferencesTitle: "Definições de cookies",
+		preferencesText: "Escolha as finalidades que autoriza. Nada opcional é usado até o autorizar, e pode retirar o consentimento a qualquer momento.",
+		cookieSettings: "Definições de cookies",
+		cookiePolicy: "Política de cookies",
+		consentId: "O seu ID de consentimento",
+		noDecision: "Ainda não há escolha registada",
+		provider: "Fornecedor",
+		purpose: "Finalidade",
+		storage: "Armazenamento",
+		retention: "Conservação",
+		thirdPartyStorage: "definido pelo fornecedor; este website não o pode remover",
+		alwaysOn: "Sempre ativo",
+		categories: {
+			necessary: {
+				name: "Estritamente necessários",
+				description: "Necessários para o funcionamento do website e para memorizar as suas escolhas."
+			},
+			preferences: {
+				name: "Preferências",
+				description: "Memorizam definições que tornam o website mais conveniente."
+			},
+			analytics: {
+				name: "Estatísticas",
+				description: "Ajudam-nos a perceber, de forma agregada, como o website é usado."
+			},
+			marketing: {
+				name: "Marketing",
+				description: "Medem e personalizam a publicidade."
+			},
+			external_media: {
+				name: "Conteúdos externos",
+				description: "Carregam vídeos, mapas e outros conteúdos de outros fornecedores."
+			}
+		},
+		placeholderText: (service, provider) => `Este conteúdo está alojado em ${service} (${provider}). Carregá-lo envia o seu endereço IP a esse fornecedor e pode permitir-lhe guardar dados no seu dispositivo.`,
+		loadOnce: "Carregar uma vez",
+		alwaysAllow: "Permitir sempre conteúdos externos",
+		blockedText: (host) => `O conteúdo de ${host} está bloqueado: não é um serviço usado por este website.`,
+		legal: {
+			privacy_policy: "Política de privacidade",
+			cookie_policy: "Política de cookies",
+			terms_of_use: "Termos de utilização",
+			legal_notice: "Informação legal",
+			terms_of_sale: "Termos e condições de venda",
+			returns_policy: "Política de devoluções",
+			shipping_policy: "Política de envios",
+			complaints_book: "Livro de reclamações",
+			dispute_resolution: "Resolução alternativa de litígios"
+		},
+		legalNavigation: "Informação legal"
+	}
+};
+//#endregion
+//#region frontend/src/consent/embeds.ts
+const ATTRIBUTE = /([^\s"'<>/=]+)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+)))?/g;
+const ATTRIBUTES = `((?:[^>"']|"[^"]*"|'[^']*')*)`;
+const ELEMENT = new RegExp(`<(iframe|object)\\b${ATTRIBUTES}>[\\s\\S]*?<\\/\\1\\s*>|<(script)\\b${ATTRIBUTES}>([\\s\\S]*?)<\\/script\\s*>|<(iframe|embed)\\b${ATTRIBUTES}\\/?>`, "gi");
+const NON_EXECUTABLE = /^(?:application\/(?:ld\+)?json|text\/template|text\/x-template|importmap)$/i;
+const RUNTIME_HOOKS = /\bdata-gq-(consent-[a-z-]*|embed|decorative|loaded|once)\b/gi;
+function codePoint(value) {
+	return Number.isInteger(value) && value >= 0 && value <= 1114111 ? String.fromCodePoint(value) : "�";
+}
+function decodeEntities(value) {
+	return value.replace(/&#x([0-9a-f]{1,8});/gi, (_, hex) => codePoint(parseInt(hex, 16))).replace(/&#(\d{1,10});/g, (_, decimal) => codePoint(Number(decimal))).replaceAll("&quot;", "\"").replaceAll("&#039;", "'").replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");
+}
+/** Text safe inside an attribute value or element content. */
+function escapeHtml(value) {
+	return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#039;");
+}
+function attributesOf(source) {
+	const attributes = {};
+	for (const match of source.matchAll(ATTRIBUTE)) {
+		const name = match[1].toLowerCase();
+		if (Object.hasOwn(attributes, name)) continue;
+		attributes[name] = decodeEntities(match[2] ?? match[3] ?? match[4] ?? "");
+	}
+	return attributes;
+}
+/**
+* What a reference contacts: the Site itself (relative, first-party host,
+* about:blank), a third-party URL, or an opaque document (data:, javascript:,
+* blob:…) whose own requests can't be known, treated as never loadable.
+*/
+function classify(reference, firstPartyHosts) {
+	const value = reference.trim();
+	if (!value || /^about:blank$/i.test(value)) return { kind: "first" };
+	let url;
+	try {
+		url = new URL(value, "https://first-party.invalid/");
+	} catch {
+		return { kind: "opaque" };
+	}
+	if (url.protocol !== "https:" && url.protocol !== "http:") return { kind: "opaque" };
+	if (url.hostname === "first-party.invalid") return { kind: "first" };
+	if (firstPartyHosts.some((host) => hostMatches(url.hostname, host.toLowerCase()))) return { kind: "first" };
+	return {
+		kind: "third",
+		url
+	};
+}
+/**
+* A placeholder for a third-party embed (CN-R13): no live `src`, naming the
+* provider and purpose and offering "Load once" and "Always allow external
+* media". The client runtime replaces it with the iframe after consent.
+* Without JavaScript it never loads. Site components use it for their own
+* embeds (a contact map); rewriteEmbeds uses it for WordPress HTML.
+*/
+function embedPlaceholder(input) {
+	const service = SERVICE_CATALOG[input.service];
+	const copy = CONSENT_COPY[copyLanguage(input.language)];
+	const attrs = {
+		...input.attributes,
+		src: input.src
+	};
+	if (input.title !== void 0) attrs.title = input.title;
+	if (input.width !== void 0) attrs.width = String(input.width);
+	if (input.height !== void 0) attrs.height = String(input.height);
+	const embed = escapeHtml(JSON.stringify({
+		tag: "iframe",
+		attrs
+	}));
+	const ratio = Number(attrs.width) > 0 && Number(attrs.height) > 0 ? ` style="aspect-ratio: ${Number(attrs.width)} / ${Number(attrs.height)}"` : "";
+	const data = `data-gq-consent-embed="${input.service}" data-gq-category="${service.category}" data-gq-embed="${embed}"`;
+	if (input.decorative) return `<div class="gq-consent-embed gq-consent-embed--decorative" ${data} data-gq-decorative aria-hidden="true"${ratio}></div>`;
+	return `<div class="gq-consent-embed" ${data} role="group" aria-label="${escapeHtml(attrs.title ? `${service.name}: ${attrs.title}` : service.name)}"${ratio}><div class="gq-consent-embed__notice"><p class="gq-consent-embed__text">${escapeHtml(copy.placeholderText(service.name, service.provider))}</p><p class="gq-consent-embed__purpose">${escapeHtml(service.purpose[copyLanguage(input.language)])}</p><div class="gq-consent-embed__actions"><button type="button" class="gq-consent-button" data-gq-consent-load-once>${escapeHtml(copy.loadOnce)}</button><button type="button" class="gq-consent-button" data-gq-consent-allow="${service.category}">${escapeHtml(copy.alwaysAllow)}</button></div></div></div>`;
+}
+/** The generic placeholder for an embed that may never load (CN-R3). */
+function blockedPlaceholder(host, tag, language) {
+	const copy = CONSENT_COPY[copyLanguage(language)];
+	if (tag === "script") return `<span hidden data-gq-consent-blocked="${escapeHtml(host)}" data-gq-tag="script"></span>`;
+	return `<div class="gq-consent-blocked" data-gq-consent-blocked="${escapeHtml(host)}" data-gq-tag="${tag}" role="note"><p>${escapeHtml(copy.blockedText(host))}</p></div>`;
+}
+/**
+* Rewrites published HTML so its initial form contacts no third party
+* (CN-R1, CN-R3, CN-R13): iframes of active catalog services become
+* placeholders; other third-party iframes, embeds and objects, and every
+* third-party or inline executable script, are blocked and reported.
+* First-party and non-executable content is left byte for byte.
+*/
+function rewriteEmbeds(html, context) {
+	const firstParty = context.firstPartyHosts ?? [];
+	const placeholders = [];
+	const blocked = [];
+	const block = (tag, host, service, reason) => {
+		blocked.push({
+			tag,
+			host,
+			service,
+			reason
+		});
+		return blockedPlaceholder(host, tag, context.language);
+	};
+	return {
+		html: html.replace(RUNTIME_HOOKS, "data-gq-published-$1").replace(ELEMENT, (whole, pairedTag, pairedAttrs, scriptTag, scriptAttrs, scriptBody, voidTag, voidAttrs) => {
+			if (scriptTag) {
+				const attrs = attributesOf(scriptAttrs ?? "");
+				if (attrs.type && NON_EXECUTABLE.test(attrs.type.trim())) return whole;
+				if (attrs.src !== void 0) {
+					const target = classify(attrs.src, firstParty);
+					if (target.kind === "first") return whole;
+					return target.kind === "third" ? block("script", target.url.hostname, hostService(target.url.hostname), "script") : block("script", "inline", null, "script");
+				}
+				return scriptBody?.trim() ? block("script", "inline", null, "script") : whole;
+			}
+			const tag = (pairedTag ?? voidTag).toLowerCase();
+			const attrs = attributesOf((pairedAttrs ?? voidAttrs) || "");
+			const reference = tag === "object" ? attrs.data : attrs.src;
+			if (reference === void 0) {
+				if (tag === "iframe" && attrs.srcdoc === void 0) return whole;
+				return block(tag, "inline", null, "unknown-host");
+			}
+			const target = classify(reference, firstParty);
+			if (target.kind === "first") return whole;
+			if (target.kind === "opaque") return block(tag, "inline", null, "unknown-host");
+			const url = target.url;
+			const service = tag === "iframe" ? embedService(url) : null;
+			if (!service) return block(tag, url.hostname, hostService(url.hostname), "unknown-host");
+			if (!context.configuration.services.includes(service)) return block(tag, url.hostname, service, "inactive-service");
+			placeholders.push({
+				service,
+				host: url.hostname
+			});
+			const { src: _src, title, width, height, ...rest } = attrs;
+			return embedPlaceholder({
+				service,
+				src: url.href,
+				language: context.language,
+				...title !== void 0 ? { title } : {},
+				...width !== void 0 ? { width } : {},
+				...height !== void 0 ? { height } : {},
+				attributes: rest,
+				decorative: /\bwp-block-getquick-design-video-hero__video\b/.test(attrs.class ?? "")
+			});
+		}),
+		placeholders,
+		blocked
+	};
+}
+//#endregion
+export { CONSENT_COPY as a, legalRevisions as c, rewriteEmbeds as i, parseLegalLanguage as l, embedPlaceholder as n, LEGAL_ROLES as o, escapeHtml as r, REQUIRED_LEGAL_ROLES as s, blockedPlaceholder as t };