@govuk-one-login/frontend-ui 5.0.0 → 5.1.0

package/build/all.css

@@ -1 +1 @@
-@media(max-width: 640px){.govuk-header__navigation-item{border-left:none !important}.govuk-template--rebranded .govuk-header__navigation-list{padding-bottom:0px !important}.govuk-header__navigation-item{padding-top:8px !important}}.frontendUi_header_signOut-item{padding:5px 0px 5px 30px;border-left:1px solid #b1b4b6;margin-left:auto}.frontendUi_header_signOut-item--rebrand{border-left:none;padding:5px 0px 5px 0px;margin-left:auto;font-weight:700 !important}.frontendUi_header__signOut{display:flex;flex-wrap:wrap}.frontendUi-header__content{margin-left:auto}.govuk-header__navigation--signOut{padding:15px 0 15px !important}.govuk-template--rebranded .govuk-header__navigation{padding:15px 0 15px !important}@media(max-width: 640px){.govuk-header__navigation--signOut{padding:18px 0 8px !important}.govuk-template--rebranded .govuk-header__navigation{padding:18px 0 8px !important}}.govuk-template--rebranded .govuk-header__navigation-item a{font-weight:700 !important}.govuk-template--rebranded .govuk-header__navigation-item{padding-top:5px !important}@media(min-width: 20em)and (max-width: 48.0525em){.govuk-template--rebranded .govuk-header__navigation-list{padding-bottom:0px}}@media(max-width: 323px){.govuk-header__logo{padding-right:5px}.frontendUi_header_signOut-item{padding-left:0px}}@media(max-width: 261px){.frontendUi-header__content{margin-left:unset}.govuk-template--rebranded .govuk-header__navigation{padding:0px 0 8px !important}.govuk-header__logotype{max-width:100%;max-height:auto}.govuk-template--rebranded .govuk-header__logo{padding-top:5% !important;padding-bottom:5% !important}}.govuk-tag{font-size:16px;font-weight:bold;line-height:1;display:inline-block;padding-top:5px;padding-right:8px;padding-bottom:4px;padding-left:8px;outline:2px solid rgba(0,0,0,0);outline-offset:-2px;color:#fff !important;background-color:#1d70b8 !important;letter-spacing:1px !important;text-decoration:none !important;text-transform:uppercase !important}@media(max-width: 256px){.govuk-phase-banner__content{display:block}}.language-select{margin:15px 0 15px 0}.language-select__list{margin-top:1em;text-align:right}.language-select__list-item{display:inline-block}.language-select__list-item:first-child::after{content:"";display:inline-block;position:relative;top:.1875em;height:1em;border-right:.09375em solid #000}.language-select__list-item a,.language-select__list-item [aria-current]{padding:.3125em}@media screen and (max-width: 641px){.language-select__list{float:none;text-align:left;padding-bottom:10px;border-bottom:1px solid #b1b4b6}}.spinner{width:80px;height:80px;border-radius:50%;border-width:12px;border-style:solid;border-color:#dee0e2;border-top-color:#005ea5;margin-bottom:15px}@media(forced-colors: active){.spinner{forced-color-adjust:none;border-top-color:rgba(0,0,0,0) !important}}@media not (prefers-reduced-motion){.spinner{-webkit-animation:spin 2s linear infinite;animation:spin 2s linear infinite}}@media(prefers-reduced-motion){.spinner{transform:rotate(0.125turn)}}.spinner__finished{border-color:#005ea5;-webkit-animation:none;animation:none}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}100%{-webkit-transform:rotate(360deg)}}@keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}.centre{margin-left:auto;margin-right:auto;text-align:center;display:block}@media(max-width: 256px){.govuk-footer__crown{max-width:100%;max-height:auto}}.govuk-footer{padding-top:25px;padding-bottom:15px;border-top:1px solid #b1b4b6;color:#0b0c0c;background:#f3f2f1}.govuk-template--rebranded .govuk-footer{border-top:10px solid #1d70b8;background:#f4f8fb}.govuk-footer__copyright-logo::before{background:#6e777a}.govuk-template--rebranded .govuk-footer__copyright-logo::before{background:currentcolor}.govuk-button--progress{position:relative}.govuk-button--progress-loading{background-color:#505a5f !important;color:#fff !important;pointer-events:none !important;padding-left:40px !important}@keyframes rotate{from{transform:rotate(0)}to{transform:rotate(360deg)}}.govuk-button--progress-loading::before{content:"";border:3px solid hsla(0,0%,100%,.35);border-top:3px solid #fff;border-radius:50%;width:20px;height:20px;animation:rotate 1s infinite linear;position:absolute;top:12% !important;left:8px}.govuk-progress-button--disabled{opacity:1 !important}@media(prefers-reduced-motion: reduce){.govuk-button--progress-loading{padding-left:10px !important}.govuk-button--progress-loading::before{display:none}}
+@media(max-width: 640px){.govuk-header__navigation-item{border-left:none !important}.govuk-template--rebranded .govuk-header__navigation-list{padding-bottom:0px !important}.govuk-header__navigation-item{padding-top:8px !important}}.frontendUi_header_signOut-item{padding:5px 0px 5px 30px;border-left:1px solid #b1b4b6;margin-left:auto}.frontendUi_header_signOut-item--rebrand{border-left:none;padding:5px 0px 5px 0px;margin-left:auto;font-weight:700 !important}.frontendUi_header__signOut{display:flex;flex-wrap:wrap}.frontendUi-header__content{margin-left:auto}.govuk-header__navigation--signOut{padding:15px 0 15px !important}.govuk-template--rebranded .govuk-header__navigation{padding:15px 0 15px !important}@media(max-width: 640px){.govuk-header__navigation--signOut{padding:18px 0 8px !important}.govuk-template--rebranded .govuk-header__navigation{padding:18px 0 8px !important}}.govuk-template--rebranded .govuk-header__navigation-item a{font-weight:700 !important}.govuk-template--rebranded .govuk-header__navigation-item{padding-top:5px !important}@media(min-width: 20em)and (max-width: 48.0525em){.govuk-template--rebranded .govuk-header__navigation-list{padding-bottom:0px}}@media(max-width: 323px){.govuk-header__logo{padding-right:5px}.frontendUi_header_signOut-item{padding-left:0px}}@media(max-width: 261px){.frontendUi-header__content{margin-left:unset}.govuk-template--rebranded .govuk-header__navigation{padding:0px 0 8px !important}.govuk-header__logotype{max-width:100%;max-height:auto}.govuk-template--rebranded .govuk-header__logo{padding-top:5% !important;padding-bottom:5% !important}}.govuk-tag{font-size:16px;font-weight:bold;line-height:1;display:inline-block;padding-top:5px;padding-right:8px;padding-bottom:4px;padding-left:8px;outline:2px solid rgba(0,0,0,0);outline-offset:-2px;color:#fff !important;background-color:#1d70b8 !important;letter-spacing:1px !important;text-decoration:none !important;text-transform:uppercase !important}@media(max-width: 256px){.govuk-phase-banner__content{display:block}}.language-select{margin:15px 0 15px 0}.language-select__list{margin-top:1em;text-align:right}.language-select__list-item{display:inline-block}.language-select__list-item:first-child::after{content:"";display:inline-block;position:relative;top:.1875em;height:1em;border-right:.09375em solid #000}.language-select__list-item a,.language-select__list-item [aria-current]{padding:.3125em}@media screen and (max-width: 641px){.language-select__list{float:none;text-align:left;padding-bottom:10px;border-bottom:1px solid #b1b4b6}}.spinner{width:80px;height:80px;border-radius:50%;border-width:12px;border-style:solid;border-color:#dee0e2;border-top-color:#005ea5;margin-bottom:15px}@media(forced-colors: active){.spinner{forced-color-adjust:none;border-top-color:rgba(0,0,0,0) !important}}@media not (prefers-reduced-motion){.spinner{-webkit-animation:spin 2s linear infinite;animation:spin 2s linear infinite}}@media(prefers-reduced-motion){.spinner{transform:rotate(0.125turn)}}.spinner__finished{border-color:#005ea5;-webkit-animation:none;animation:none}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}100%{-webkit-transform:rotate(360deg)}}@keyframes spin{0%{transform:rotate(0deg)}100%{transform:rotate(360deg)}}.centre{margin-left:auto;margin-right:auto;text-align:center;display:block}@media(max-width: 256px){.govuk-footer__crown{max-width:100%;max-height:auto}}.govuk-footer{padding-top:25px;padding-bottom:15px;border-top:1px solid #b1b4b6;color:#0b0c0c;background:#f3f2f1}.govuk-template--rebranded .govuk-footer{border-top:10px solid #1d70b8;background:#f4f8fb}.govuk-footer__copyright-logo::before{background:#6e777a}.govuk-template--rebranded .govuk-footer__copyright-logo::before{background:currentcolor}.govuk-button--progress{position:relative}.govuk-button--progress-loading{background-color:#505a5f !important;color:#fff !important;pointer-events:none !important;padding-left:40px !important}@keyframes rotate{from{transform:rotate(0)}to{transform:rotate(360deg)}}.govuk-button--progress-loading::before{content:"";border:3px solid hsla(0,0%,100%,.35);border-top:3px solid #fff;border-radius:50%;width:20px;height:20px;animation:rotate 1s infinite linear;position:absolute;top:12% !important;left:8px}.govuk-progress-button--disabled{opacity:1 !important}@media(prefers-reduced-motion: reduce){.govuk-button--progress-loading{padding-left:10px !important}.govuk-button--progress-loading::before{display:none}}.step-card{border:1px solid #b1b4b6;gap:0;box-sizing:border-box;display:flex;flex-direction:column;align-items:flex-start;text-align:left;background:#fff;color:#0b0c0c}@media(max-width: 768px){.step-card{padding-left:.75rem;padding-right:.75rem;margin-left:.75rem;margin-right:.75rem}}@media(min-width: 769px){.step-card{padding-left:1.5rem;padding-right:1.5rem}}.step-item-container{display:flex;align-items:flex-start;border-bottom:1px solid #b1b4b6}.step-item-image{flex-shrink:0;margin-right:16px;display:flex;align-items:center;background-color:#e8f1f8;justify-content:space-around;width:70px;height:70px}.step-item-content{display:flex;align-items:flex-start;width:100%}.step-title-container{display:grid;grid-template-columns:max-content 1fr;column-gap:.25em;align-items:baseline}.step-number{grid-column:1;grid-row:1;margin-bottom:0}.step-title{grid-column:2;grid-row:1;margin-bottom:6px}.step-description{grid-column:2;grid-row:2;margin-top:0;margin-bottom:0}.step-description.govuk-list--bullet{grid-column:1/-1;padding-left:0;margin-left:1.2em;margin-top:0px}.step-card .govuk-list li:last-child .step-item-container{border-bottom:none;padding-bottom:0}@media(max-width: 300px){.step-item-container{flex-direction:column}.step-item-image{margin-right:0;margin-bottom:12px}.step-title-container{display:flex;flex-wrap:wrap;align-items:baseline}.step-description{width:100%}}.govuk-list{margin-bottom:0 !important;width:100%}

package/build/cjs/backend/index.cjs

@@ -1,7 +1,9 @@
 'use strict';
 
-var path = require('node:path');
 var node_fs = require('node:fs');
+var path = require('node:path');
+var pino = require('pino');
+var _ = require('lodash');
 
 var cookieBanner$1 = {
 	body1: "Rydym yn defnyddio rhai cwcis hanfodol i wneud i'r gwasanaeth hwn weithio.",
@@ -80,6 +82,9 @@ var progressButton$1 = {
 	longWaitingText: "Parhau i aros",
 	noJavascriptMessage: "Gall gymryd hyd at 10 eiliad i barhau i'r dudalen nesaf. Ar ôl i chi barhau, peidiwch ag ail-lwytho na chau'r dudalen hon."
 };
+var stepCard$1 = {
+	header: "Cwblhewch y camau canlynol"
+};
 var translationCy = {
 	cookieBanner: cookieBanner$1,
 	footer: footer$1,
@@ -87,7 +92,8 @@ var translationCy = {
 	languageSelect: languageSelect$1,
 	phaseBanner: phaseBanner$1,
 	skipLink: skipLink$1,
-	progressButton: progressButton$1
+	progressButton: progressButton$1,
+	stepCard: stepCard$1
 };
 
 var cookieBanner = {
@@ -167,6 +173,9 @@ var progressButton = {
 	longWaitingText: "Keep waiting",
 	noJavascriptMessage: "It can take up to 10 seconds to continue to the next page. After you continue, do not reload or close this page."
 };
+var stepCard = {
+	header: "Complete the following steps"
+};
 var translationEn = {
 	cookieBanner: cookieBanner,
 	footer: footer,
@@ -174,12 +183,145 @@ var translationEn = {
 	languageSelect: languageSelect,
 	phaseBanner: phaseBanner,
 	skipLink: skipLink,
-	progressButton: progressButton
+	progressButton: progressButton,
+	stepCard: stepCard
+};
+
+let logger;
+const setCustomLogger = (customLogger) => {
+    logger = customLogger;
+};
+const getLogger = () => {
+    var _a, _b;
+    if (!logger) {
+        logger = pino.pino({
+            name: "@govuk-one-login/frontend-passthrough-headers",
+            level: (_b = (_a = process.env.LOG_LEVEL) !== null && _a !== void 0 ? _a : process.env.LOGS_LEVEL) !== null && _b !== void 0 ? _b : "warn",
+        });
+        return logger;
+    }
+    return logger;
 };
 
+const getGTM = (req, res, next) => {
+    res.locals.ga4ContainerId = req.app.get("APP.GTM.GA4_CONTAINER_ID");
+    res.locals.analyticsCookieDomain = req.app.get("APP.GTM.ANALYTICS_COOKIE_DOMAIN");
+    res.locals.ga4Enabled = req.app.get("APP.GTM.GA4_ENABLED");
+    res.locals.analyticsDataSensitive = req.app.get("APP.GTM.ANALYTICS_DATA_SENSITIVE");
+    res.locals.ga4PageViewEnabled = req.app.get("APP.GTM.GA4_PAGE_VIEW_ENABLED");
+    res.locals.ga4FormResponseEnabled = req.app.get("APP.GTM.GA4_FORM_RESPONSE_ENABLED");
+    res.locals.ga4FormErrorEnabled = req.app.get("APP.GTM.GA4_FORM_ERROR_ENABLED");
+    res.locals.ga4FormChangeEnabled = req.app.get("APP.GTM.GA4_FORM_CHANGE_ENABLED");
+    res.locals.ga4NavigationEnabled = req.app.get("APP.GTM.GA4_NAVIGATION_ENABLED");
+    res.locals.ga4SelectContentEnabled = req.app.get("APP.GTM.GA4_SELECT_CONTENT_ENABLED");
+    next();
+};
+const getAssetPath = (req, res, next) => {
+    res.locals.assetPath = req.app.get("APP.ASSET_PATH");
+    next();
+};
+const getLanguageToggle = (req, res, next, customLogger) => {
+    if (customLogger) {
+        setCustomLogger(customLogger);
+    }
+    const logger = getLogger();
+    const toggleValue = req.app.get("APP.LANGUAGE_TOGGLE_ENABLED");
+    res.locals.showLanguageToggle = toggleValue && toggleValue === "1";
+    res.locals.htmlLang = req.i18n.language;
+    try {
+        res.locals.currentUrl = new URL(req.protocol + "://" + req.get("host") + req.originalUrl);
+    }
+    catch (e) {
+        if (e instanceof Error) {
+            logger.warn("Error constructing url for language toggle", e.message);
+        }
+    }
+    next();
+};
+
+var locals = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  getAssetPath: getAssetPath,
+  getGTM: getGTM,
+  getLanguageToggle: getLanguageToggle
+});
+
+const setGTM = ({ app, ga4ContainerId, analyticsCookieDomain, ga4Enabled, ga4PageViewEnabled, ga4FormResponseEnabled, ga4FormErrorEnabled, ga4FormChangeEnabled, ga4NavigationEnabled, ga4SelectContentEnabled, analyticsDataSensitive, }) => {
+    app.set("APP.GTM.GA4_CONTAINER_ID", ga4ContainerId);
+    app.set("APP.GTM.ANALYTICS_COOKIE_DOMAIN", analyticsCookieDomain);
+    app.set("APP.GTM.GA4_ENABLED", ga4Enabled);
+    app.set("APP.GTM.GA4_PAGE_VIEW_ENABLED", ga4PageViewEnabled);
+    app.set("APP.GTM.GA4_FORM_RESPONSE_ENABLED", ga4FormResponseEnabled);
+    app.set("APP.GTM.GA4_FORM_ERROR_ENABLED", ga4FormErrorEnabled);
+    app.set("APP.GTM.GA4_FORM_CHANGE_ENABLED", ga4FormChangeEnabled);
+    app.set("APP.GTM.GA4_NAVIGATION_ENABLED", ga4NavigationEnabled);
+    app.set("APP.GTM.GA4_SELECT_CONTENT_ENABLED", ga4SelectContentEnabled);
+    app.set("APP.GTM.ANALYTICS_DATA_SENSITIVE", analyticsDataSensitive !== null && analyticsDataSensitive !== void 0 ? analyticsDataSensitive : true);
+};
+const setLanguageToggle = ({ app, showLanguageToggle, }) => {
+    app.set("APP.LANGUAGE_TOGGLE_ENABLED", showLanguageToggle);
+};
+
+var settings = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  setGTM: setGTM,
+  setLanguageToggle: setLanguageToggle
+});
+
+const baseHelmetConfig = {
+    contentSecurityPolicy: {
+        directives: {
+            defaultSrc: ["'self'"],
+            styleSrc: ["'self'"],
+            scriptSrc: [
+                "'self'",
+                (_req, res) => `'nonce-${res.locals.cspNonce}'`,
+                "'sha256-+6WnXIl4mbFTCARd8N3COQmT3bJJmo32N8q8ZSQAIcU='",
+                "https://www.googletagmanager.com",
+                "https://www.google-analytics.com",
+                "https://ssl.google-analytics.com",
+            ],
+            imgSrc: [
+                "'self'",
+                "data:",
+                "https://www.googletagmanager.com",
+                "*.google-analytics.com",
+                "*.analytics.google.com",
+            ],
+            fontSrc: ["'self'"],
+            formAction: ["*"],
+            objectSrc: ["'none'"],
+            connectSrc: [
+                "'self'",
+                "*.google-analytics.com",
+                "*.analytics.google.com",
+            ],
+        },
+    },
+    dnsPrefetchControl: {
+        allow: false,
+    },
+    frameguard: {
+        action: "deny",
+    },
+    hsts: {
+        maxAge: 31536000, // 1 Year
+        preload: true,
+        includeSubDomains: true,
+    },
+    referrerPolicy: false,
+    permittedCrossDomainPolicies: false,
+    expectCt: false,
+    crossOriginEmbedderPolicy: false,
+};
+function getHelmetConfig(additions = {}) {
+    return _.merge(baseHelmetConfig, additions);
+}
+
 // Implementation
 function frontendUiMiddleware(req, res, next) {
     res.locals.translations = req.i18n.store.data[req.i18n.language];
+    res.locals.allTranslations = req.i18n.store.data;
     res.locals.basePath = process.cwd();
     next();
 }
@@ -197,6 +339,29 @@ const frontendUiMiddlewareIdentityBypass = (req, res, next) => {
     res.locals.basePath = process.cwd();
     next();
 };
+function resolvePath(obj, path) {
+    return path.split(".").reduce((acc, key) => (acc && typeof acc === "object" ? acc[key] : undefined), obj);
+}
+function buildSteps(allTranslations, currentTranslations, steps) {
+    if (!allTranslations || !steps || !currentTranslations)
+        return [];
+    return steps
+        .slice(0, 4)
+        .map(({ key, image }) => {
+        const allLanguageData = Object.keys(allTranslations).map((lng) => resolvePath(allTranslations[lng], key));
+        return {
+            data: resolvePath(currentTranslations, key),
+            allLanguageData,
+            image: image !== null && image !== void 0 ? image : null,
+        };
+    })
+        .filter(({ allLanguageData }) => allLanguageData.every((step) => { var _a, _b; return (step === null || step === void 0 ? void 0 : step.title) && ((step === null || step === void 0 ? void 0 : step.description) || ((_b = (_a = step === null || step === void 0 ? void 0 : step.bulletList) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0); }));
+}
+function addFrontendUiGlobals(nunjucksEnv) {
+    nunjucksEnv.addGlobal("addLanguageParam", addLanguageParam);
+    nunjucksEnv.addGlobal("contactUsUrl", contactUsUrl);
+    nunjucksEnv.addGlobal("buildSteps", buildSteps);
+}
 function addLanguageParam(language, url) {
     if (!url) {
         console.warn("URL is undefined. The parameter cannot be added, and the toggle will not work.");
@@ -211,7 +376,7 @@ function contactUsUrl(baseUrl, urlToAppend) {
     }
     try {
         const newUrl = new URL(urlToAppend); // Create a new URL object to modify
-        newUrl.search = ''; // Remove the query parameters
+        newUrl.search = ""; // Remove the query parameters
         const encodedUrl = encodeURIComponent(newUrl.toString()); // Encode the entire URL
         const searchParams = new URLSearchParams({ fromURL: encodedUrl });
         return `${baseUrl}?${searchParams.toString()}`;
@@ -248,12 +413,18 @@ const getTranslationObject = (locale, filepath) => {
     return {}; // Return an empty object as a fallback
 };
 
+exports.addFrontendUiGlobals = addFrontendUiGlobals;
 exports.addLanguageParam = addLanguageParam;
+exports.buildSteps = buildSteps;
 exports.contactUsUrl = contactUsUrl;
 exports.frontendUiMiddleware = frontendUiMiddleware;
 exports.frontendUiMiddlewareIdentityBypass = frontendUiMiddlewareIdentityBypass;
 exports.frontendUiTranslationCy = translationCy;
 exports.frontendUiTranslationEn = translationEn;
+exports.getHelmetConfig = getHelmetConfig;
 exports.getTranslationObject = getTranslationObject;
+exports.locals = locals;
+exports.resolvePath = resolvePath;
 exports.setBaseTranslations = setBaseTranslations;
 exports.setFrontendUiTranslations = setFrontendUiTranslations;
+exports.settings = settings;

package/build/cjs/backend/index.d.cts

@@ -1,5 +1,6 @@
-import i18next from "i18next";
 import { NextFunction, Request, Response } from "express";
+import i18next from "i18next";
+export * from "./lib";
 interface I18nData {
     language: string;
     store: {
@@ -14,6 +15,9 @@ interface ExpressRequest extends Request {
 interface ExpressResponse extends Response {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -23,6 +27,9 @@ interface PlainRequest {
 interface PlainResponse {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -30,6 +37,24 @@ export declare function frontendUiMiddleware(req: ExpressRequest, res: ExpressRe
 export declare function frontendUiMiddleware(req: PlainRequest, res: PlainResponse, next: NextFunction): void;
 export declare const setFrontendUiTranslations: (instanceI18n: typeof i18next) => void;
 export declare const frontendUiMiddlewareIdentityBypass: (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => void;
+export declare function resolvePath(obj: unknown, path: string): unknown;
+type StepData = {
+    title?: unknown;
+    description?: unknown;
+    bulletList?: unknown[];
+};
+type StepInput = {
+    key: string;
+    image?: string | null;
+};
+export declare function buildSteps(allTranslations: Record<string, unknown>, currentTranslations: unknown, steps: StepInput[]): {
+    data: StepData;
+    allLanguageData: StepData[];
+    image: string | null;
+}[];
+export declare function addFrontendUiGlobals(nunjucksEnv: {
+    addGlobal: (name: string, value: unknown) => void;
+}): void;
 export declare function addLanguageParam(language: string, url?: URL): string;
 export declare function contactUsUrl(baseUrl: string, urlToAppend: string): string | null;
 export declare const setBaseTranslations: (instanceI18n: typeof i18next, filePath?: string) => void;

package/build/cjs/backend/index.d.ts

@@ -1,5 +1,6 @@
-import i18next from "i18next";
 import { NextFunction, Request, Response } from "express";
+import i18next from "i18next";
+export * from "./lib";
 interface I18nData {
     language: string;
     store: {
@@ -14,6 +15,9 @@ interface ExpressRequest extends Request {
 interface ExpressResponse extends Response {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -23,6 +27,9 @@ interface PlainRequest {
 interface PlainResponse {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -30,6 +37,24 @@ export declare function frontendUiMiddleware(req: ExpressRequest, res: ExpressRe
 export declare function frontendUiMiddleware(req: PlainRequest, res: PlainResponse, next: NextFunction): void;
 export declare const setFrontendUiTranslations: (instanceI18n: typeof i18next) => void;
 export declare const frontendUiMiddlewareIdentityBypass: (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => void;
+export declare function resolvePath(obj: unknown, path: string): unknown;
+type StepData = {
+    title?: unknown;
+    description?: unknown;
+    bulletList?: unknown[];
+};
+type StepInput = {
+    key: string;
+    image?: string | null;
+};
+export declare function buildSteps(allTranslations: Record<string, unknown>, currentTranslations: unknown, steps: StepInput[]): {
+    data: StepData;
+    allLanguageData: StepData[];
+    image: string | null;
+}[];
+export declare function addFrontendUiGlobals(nunjucksEnv: {
+    addGlobal: (name: string, value: unknown) => void;
+}): void;
 export declare function addLanguageParam(language: string, url?: URL): string;
 export declare function contactUsUrl(baseUrl: string, urlToAppend: string): string | null;
 export declare const setBaseTranslations: (instanceI18n: typeof i18next, filePath?: string) => void;

package/build/cjs/backend/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQ1D,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;KAClC,CAAC;CACH;AAED,UAAU,cAAe,SAAQ,OAAO;IACtC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,eAAgB,SAAQ,QAAQ;IACxC,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAGD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAER,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAaR,eAAO,MAAM,yBAAyB,GAAI,cAAc,OAAO,OAAO,SAerE,CAAC;AAGF,eAAO,MAAM,kCAAkC,GAC7C,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,YAAY,SAUnB,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,UAU3D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAkBhE;AAED,eAAO,MAAM,mBAAmB,GAC9B,cAAc,OAAO,OAAO,EAC5B,WAAW,MAAM,SASlB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAuBxB,CAAC;AAEF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,cAAc,OAAO,CAAC;AAGtB,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;KAClC,CAAC;CACH;AAED,UAAU,cAAe,SAAQ,OAAO;IACtC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,eAAgB,SAAQ,QAAQ;IACxC,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAGD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAER,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAcR,eAAO,MAAM,yBAAyB,GAAI,cAAc,OAAO,OAAO,SAerE,CAAC;AAEF,eAAO,MAAM,kCAAkC,GAC7C,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,YAAY,SAUnB,CAAC;AAEF,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,KAAK,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC;AACnF,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAExD,wBAAgB,UAAU,CACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,mBAAmB,EAAE,OAAO,EAC5B,KAAK,EAAE,SAAS,EAAE,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,eAAe,EAAE,QAAQ,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,CAmBzE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE;IAAE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAAE,QAItG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,UAU3D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAkBhE;AAED,eAAO,MAAM,mBAAmB,GAC9B,cAAc,OAAO,OAAO,EAC5B,WAAW,MAAM,SASlB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAuBxB,CAAC;AAEF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC"}

package/build/cjs/backend/lib/helmet.d.ts

@@ -1,31 +1,3 @@
-import { Request, Response } from "express";
-declare const _default: {
-    contentSecurityPolicy: {
-        directives: {
-            defaultSrc: string[];
-            styleSrc: string[];
-            scriptSrc: (string | ((_req: Request, res: Response) => string))[];
-            imgSrc: string[];
-            formAction: string[];
-            objectSrc: string[];
-            connectSrc: string[];
-        };
-    };
-    dnsPrefetchControl: {
-        allow: boolean;
-    };
-    frameguard: {
-        action: string;
-    };
-    hsts: {
-        maxAge: number;
-        preload: boolean;
-        includeSubDomains: boolean;
-    };
-    referrerPolicy: boolean;
-    permittedCrossDomainPolicies: boolean;
-    expectCt: boolean;
-    crossOriginEmbedderPolicy: boolean;
-};
-export default _default;
+import { type HelmetOptions } from "helmet";
+export declare function getHelmetConfig(additions?: HelmetOptions): HelmetOptions;
 //# sourceMappingURL=helmet.d.ts.map

package/build/cjs/backend/lib/helmet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helmet.d.ts","sourceRoot":"","sources":["../../../../src/lib/helmet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;;;;;;yCAS7B,OAAO,OAAO,QAAQ;;;;;;;;;;;;;;;;;;;;;;;AAPrC,wBA4CE"}
+{"version":3,"file":"helmet.d.ts","sourceRoot":"","sources":["../../../../src/lib/helmet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AAiD5C,wBAAgB,eAAe,CAAC,SAAS,GAAE,aAAkB,GAAG,aAAa,CAE5E"}

package/build/cjs/backend/lib/index.d.ts

@@ -1,4 +1,4 @@
 export * as locals from "./locals";
 export * as settings from "./settings";
-export * as helmet from "./helmet";
+export * from "./helmet";
 //# sourceMappingURL=index.d.ts.map

package/build/cjs/backend/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,cAAc,UAAU,CAAC"}

package/build/components/_all.scss

@@ -3,4 +3,5 @@
 @use "./language-select";
 @use "./spinner";
 @use "./footer";
-@use "./progress-button";
+@use "./progress-button";
+@use "./step-card";

package/build/components/bases/ipv-core/ipv-core-base.njk

@@ -46,7 +46,7 @@
     {%- if pageErrorState %}
         {{ 'general.govuk.errorTitlePrefix' | translate }}
     {% endif %}
-    {%- if pageTitleKey %}{{ pageTitleKey | translateWithContextOrFallback(context) }} – GOV.UK One Login{% endif %}
+    {%- if pageTitleKey %}{{ pageTitleKey | translate(context) }} – GOV.UK One Login{% endif %}
 {%- endblock %}
 
 {% block bodyStart %}
@@ -158,7 +158,7 @@
         </script>
         {{ ga4OnPageLoad({
         nonce: cspNonce,
-        statusCode: statusCode,         
+        statusCode: statusCode,
         dynamic: isPageDynamic,
         englishPageTitle: pageTitleKey | translateToEnglish,
         taxonomyLevel1: taxLevel1,

package/build/components/phase-banner/_index.scss

@@ -1,4 +1,4 @@
-@import "../../../../node_modules/govuk-frontend/govuk/helpers/_colour.scss";
+@import "../../../../node_modules/govuk-frontend/dist/govuk/helpers/_colour.scss";
 // Temporarily overwrite the tag component styling to match pre-v5 appearance.
 // This ensures a cohesive phase banner across One Login applications during the transition.
 .govuk-tag {
@@ -22,7 +22,7 @@
 }
 
 @media (max-width: 256px) {
-.govuk-phase-banner__content{
-  display: block;
-}
+  .govuk-phase-banner__content {
+    display: block;
+  }
 }

package/build/components/step-card/README.md

@@ -0,0 +1,112 @@
+# Step Card
+
+This component displays a numbered list of steps, each with an image, title, and description or bullet list. It is intended to guide users through a process in a clear, structured format.
+
+- Renders up to 4 steps
+- Each step's content comes from your translation files, referenced by a dot-notation key
+- A step is only rendered if it is valid (has a `title` and either a `description` or `bulletList`) in **all** configured languages
+- Steps that are invalid in any language are silently omitted
+
+## How it works
+
+Step content lives entirely in your translation files. The component uses `buildSteps` — a Nunjucks global provided by `@govuk-one-login/frontend-ui` — to resolve each step's content across all languages and filter out any steps that are incomplete in any language before passing them to the macro.
+
+`buildSteps` is called in the outer template scope (where Nunjucks globals are available), inline within the macro call. The macro itself just renders the pre-resolved steps.
+
+`allTranslations` and `translations` are set automatically on `res.locals` by `frontendUiMiddleware` and are available in all templates without any extra setup.
+
+## Setup
+
+Register `buildSteps` as a Nunjucks global in your app's Nunjucks configuration:
+
+```js
+const frontendUi = require("@govuk-one-login/frontend-ui");
+
+nunjucksEnv.addGlobal("buildSteps", frontendUi.buildSteps);
+```
+
+Or if you are already calling `addFrontendUiGlobals`, this is included automatically:
+
+```js
+frontendUi.addFrontendUiGlobals(nunjucksEnv);
+```
+
+Ensure `frontendUiMiddleware` is registered in your Express app:
+
+```js
+const { frontendUiMiddleware } = require("@govuk-one-login/frontend-ui");
+app.use(frontendUiMiddleware);
+```
+
+## Translation file structure
+
+Each step must have a `title` and either a `description` or a `bulletList`. The `key` you pass is the full dot-notation path from the root of the language object in your translation data.
+
+```json
+{
+  "pages": {
+    "myPage": {
+      "steps": [
+        {
+          "title": "Create an account",
+          "description": "Sign up using your email address."
+        },
+        {
+          "title": "Verify your identity",
+          "bulletList": ["Provide your passport", "Answer security questions"]
+        }
+      ]
+    }
+  }
+}
+```
+
+This structure must exist in **every** language's translation file. Any step missing `title` and `description`/`bulletList` in any language will be omitted from all languages.
+
+## Usage
+
+```njk
+{% from "frontend-ui/build/components/step-card/macro.njk" import frontendUiStepCard %}
+
+{{ frontendUiStepCard({
+  translations: translations.translation.stepCard,
+  steps: buildSteps(allTranslations, translations, [
+    { key: "translation.pages.myPage.steps.0", image: "/assets/images/step1.svg" },
+    { key: "translation.pages.myPage.steps.1", image: "/assets/images/step2.svg" },
+    { key: "translation.pages.myPage.steps.2", image: null }
+  ])
+}) }}
+```
+
+## Parameters
+
+### `frontendUiStepCard`
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `translations` | object | Yes | Translations object for the component (e.g. `translations.translation.stepCard`). The template uses `translations.header` for the section heading. |
+| `steps` | array | Yes | Array of resolved step objects returned by `buildSteps`. |
+
+### `buildSteps(allTranslations, translations, steps)`
+
+| Argument | Type | Description |
+|----------|------|-------------|
+| `allTranslations` | object | All language translation data, available in templates as `allTranslations` via `frontendUiMiddleware`. |
+| `translations` | object | Current language translation data, available in templates as `translations` via `frontendUiMiddleware`. |
+| `steps` | array | Array of step definitions, each with a `key` and optional `image`. |
+
+### Step definition
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `key` | string | Yes | Full dot-notation path to the step from the root of the language object (e.g. `translation.pages.myPage.steps.0`). |
+| `image` | string | No | Path to the step image. Falls back to an inline SVG placeholder if `null` or omitted. |
+
+## Styles
+
+Styles for this component are defined in `_index.scss`. The component uses GOV.UK Frontend base styles and responsive breakpoints.
+
+## Accessibility
+
+- Step images are marked with `aria-hidden="true"` as they are decorative
+- Steps are rendered as an ordered list (`<ol>`) to convey sequence to assistive technologies

package/build/components/step-card/_index.scss

@@ -0,0 +1,112 @@
+@import "../../../../node_modules/govuk-frontend/dist/govuk/base.scss";
+
+.step-card {
+  border: 1px solid $govuk-border-colour;
+  gap: 0;
+  box-sizing: border-box;
+  display: flex;
+  flex-direction: column;
+  align-items: flex-start;
+  text-align: left;
+  background: #fff;
+  color: #0b0c0c;
+
+  @media (max-width: 768px) {
+    padding-left: 0.75rem;
+    padding-right: 0.75rem;
+    margin-left: 0.75rem;
+    margin-right: 0.75rem;
+  }
+
+  @media (min-width: 769px) {
+    padding-left: 1.5rem;
+    padding-right: 1.5rem;
+  }
+}
+
+.step-item-container {
+  display: flex;
+  align-items: flex-start;
+  border-bottom: 1px solid $govuk-border-colour;
+}
+
+.step-item-image {
+  flex-shrink: 0;
+  margin-right: 16px;
+  display: flex;
+  align-items: center;
+  background-color: #e8f1f8;
+  justify-content: space-around;
+  width: 70px;
+  height: 70px;
+}
+
+.step-item-content {
+  display: flex;
+  align-items: flex-start;
+  width: 100%;
+}
+
+.step-title-container {
+  display: grid;
+  grid-template-columns: max-content 1fr;
+  column-gap: 0.25em;
+  align-items: baseline;
+}
+
+.step-number {
+  grid-column: 1;
+  grid-row: 1;
+  margin-bottom: 0;
+}
+
+.step-title {
+  grid-column: 2;
+  grid-row: 1;
+  margin-bottom: 6px;
+}
+
+.step-description {
+  grid-column: 2;
+  grid-row: 2;
+  margin-top: 0;
+  margin-bottom: 0;
+}
+
+.step-description.govuk-list--bullet {
+  grid-column: 1 / -1;
+  padding-left: 0;
+  margin-left: 1.2em;
+  margin-top: 0px;
+}
+
+.step-card .govuk-list li:last-child .step-item-container {
+  border-bottom: none;
+  padding-bottom: 0;
+}
+
+@media (max-width: 300px) {
+  .step-item-container {
+    flex-direction: column;
+  }
+
+  .step-item-image {
+    margin-right: 0;
+    margin-bottom: 12px;
+  }
+
+  .step-title-container {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: baseline;
+  }
+
+  .step-description {
+    width: 100%;
+  }
+}
+
+.govuk-list {
+  margin-bottom: 0 !important;
+  width: 100%;
+}

package/build/components/step-card/macro.njk

@@ -0,0 +1,2 @@
+{% macro frontendUiStepCard(params) %} {%- include "./template.njk" -%} {% endmacro
+%}

package/build/components/step-card/step-card.yaml

@@ -0,0 +1,22 @@
+params:
+  - name: translations
+    type: object
+    required: true
+    description: translations object from middleware (translations.translation.stepCard)
+  - name: steps
+    type: array
+    required: true
+    description: array of step objects combining translation data and image. Maximum of 4 steps will be rendered.
+    params:
+      - name: data
+        type: object
+        required: true
+        description: the step translation object containing title, description or bulletList
+      - name: image
+        type: string
+        required: false
+        description: path to the image for this step, or null for the default placeholder
+  - name: stepsPath
+    type: string
+    required: false
+    description: dot-notation path to the steps array within each language's translation data (e.g. "translation.pages.stepCard1.steps"). Requires configureFrontendUiNunjucks to be called in your nunjucks setup. When provided, a step is only rendered if it is valid in all languages.

package/build/components/step-card/template.njk

@@ -0,0 +1,33 @@
+{% set stepCard = params.translations %}
+{% set steps = params.steps if params.steps else [] %}
+
+<div class="step-card govuk-!-padding-top-3 govuk-!-padding-bottom-6 govuk-!-margin-bottom-6">
+  <h2 class="govuk-heading-m">{{ stepCard.header }}</h2>
+  <ol class="govuk-list" role="list">
+    {% for step in steps %}
+      <li class="step-item" role="listitem">
+        <div class="step-item-container govuk-!-padding-top-6{% if not loop.last %} govuk-!-padding-bottom-6{% endif %}">
+          <div class="step-item-image" aria-hidden="true">
+            <img src="{{ step.image if step.image else 'data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2270%22 height=%2270%22 viewBox=%220 0 70 70%22%3E%3Crect width=%2270%22 height=%2270%22 fill=%22%23e8f1f8%22/%3E%3C/svg%3E' }}" alt="">
+          </div>
+          <div class="step-item-content">
+            <div class="step-title-container">
+              <span class="step-number govuk-body govuk-!-font-weight-bold">{{loop.index}}.</span>
+              <p class="govuk-body govuk-!-font-weight-bold step-title">{{step.data.title}}</p>
+              {% if step.data.description and not step.data.bulletList %}
+              <p class="govuk-body step-description">{{ step.data.description }}</p>
+              {% endif %}
+              {% if step.data.bulletList and step.data.bulletList.length %}
+                <ul class="govuk-list govuk-list--bullet step-description">
+                  {% for item in step.data.bulletList %}
+                    <li>{{ item }}</li>
+                  {% endfor %}
+                </ul>
+              {% endif %}
+            </div>
+          </div>
+        </div>
+      </li>
+    {% endfor %}
+  </ol>
+</div>

package/build/esm/backend/index.d.ts

@@ -1,5 +1,6 @@
-import i18next from "i18next";
 import { NextFunction, Request, Response } from "express";
+import i18next from "i18next";
+export * from "./lib";
 interface I18nData {
     language: string;
     store: {
@@ -14,6 +15,9 @@ interface ExpressRequest extends Request {
 interface ExpressResponse extends Response {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -23,6 +27,9 @@ interface PlainRequest {
 interface PlainResponse {
     locals: {
         translations: unknown;
+        allTranslations: {
+            [lng: string]: unknown;
+        };
         basePath?: string;
     };
 }
@@ -30,6 +37,24 @@ export declare function frontendUiMiddleware(req: ExpressRequest, res: ExpressRe
 export declare function frontendUiMiddleware(req: PlainRequest, res: PlainResponse, next: NextFunction): void;
 export declare const setFrontendUiTranslations: (instanceI18n: typeof i18next) => void;
 export declare const frontendUiMiddlewareIdentityBypass: (req: ExpressRequest, res: ExpressResponse, next: NextFunction) => void;
+export declare function resolvePath(obj: unknown, path: string): unknown;
+type StepData = {
+    title?: unknown;
+    description?: unknown;
+    bulletList?: unknown[];
+};
+type StepInput = {
+    key: string;
+    image?: string | null;
+};
+export declare function buildSteps(allTranslations: Record<string, unknown>, currentTranslations: unknown, steps: StepInput[]): {
+    data: StepData;
+    allLanguageData: StepData[];
+    image: string | null;
+}[];
+export declare function addFrontendUiGlobals(nunjucksEnv: {
+    addGlobal: (name: string, value: unknown) => void;
+}): void;
 export declare function addLanguageParam(language: string, url?: URL): string;
 export declare function contactUsUrl(baseUrl: string, urlToAppend: string): string | null;
 export declare const setBaseTranslations: (instanceI18n: typeof i18next, filePath?: string) => void;

package/build/esm/backend/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQ1D,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;KAClC,CAAC;CACH;AAED,UAAU,cAAe,SAAQ,OAAO;IACtC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,eAAgB,SAAQ,QAAQ;IACxC,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAGD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAER,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAaR,eAAO,MAAM,yBAAyB,GAAI,cAAc,OAAO,OAAO,SAerE,CAAC;AAGF,eAAO,MAAM,kCAAkC,GAC7C,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,YAAY,SAUnB,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,UAU3D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAkBhE;AAED,eAAO,MAAM,mBAAmB,GAC9B,cAAc,OAAO,OAAO,EAC5B,WAAW,MAAM,SASlB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAuBxB,CAAC;AAEF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,cAAc,OAAO,CAAC;AAGtB,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;KAClC,CAAC;CACH;AAED,UAAU,cAAe,SAAQ,OAAO;IACtC,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,eAAgB,SAAQ,QAAQ;IACxC,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAGD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAER,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,YAAY,EACjB,GAAG,EAAE,aAAa,EAClB,IAAI,EAAE,YAAY,GACjB,IAAI,CAAC;AAcR,eAAO,MAAM,yBAAyB,GAAI,cAAc,OAAO,OAAO,SAerE,CAAC;AAEF,eAAO,MAAM,kCAAkC,GAC7C,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,YAAY,SAUnB,CAAC;AAEF,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,KAAK,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC;AACnF,KAAK,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAExD,wBAAgB,UAAU,CACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,mBAAmB,EAAE,OAAO,EAC5B,KAAK,EAAE,SAAS,EAAE,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,eAAe,EAAE,QAAQ,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,CAmBzE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE;IAAE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAAE,QAItG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,UAU3D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAkBhE;AAED,eAAO,MAAM,mBAAmB,GAC9B,cAAc,OAAO,OAAO,EAC5B,WAAW,MAAM,SASlB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,EACd,WAAW,MAAM,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAuBxB,CAAC;AAEF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,gCAAgC,CAAC"}

package/build/esm/backend/index.js

@@ -1,5 +1,7 @@
-import path from 'node:path';
 import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { pino } from 'pino';
+import _ from 'lodash';
 
 var cookieBanner$1 = {
 	body1: "Rydym yn defnyddio rhai cwcis hanfodol i wneud i'r gwasanaeth hwn weithio.",
@@ -78,6 +80,9 @@ var progressButton$1 = {
 	longWaitingText: "Parhau i aros",
 	noJavascriptMessage: "Gall gymryd hyd at 10 eiliad i barhau i'r dudalen nesaf. Ar ôl i chi barhau, peidiwch ag ail-lwytho na chau'r dudalen hon."
 };
+var stepCard$1 = {
+	header: "Cwblhewch y camau canlynol"
+};
 var translationCy = {
 	cookieBanner: cookieBanner$1,
 	footer: footer$1,
@@ -85,7 +90,8 @@ var translationCy = {
 	languageSelect: languageSelect$1,
 	phaseBanner: phaseBanner$1,
 	skipLink: skipLink$1,
-	progressButton: progressButton$1
+	progressButton: progressButton$1,
+	stepCard: stepCard$1
 };
 
 var cookieBanner = {
@@ -165,6 +171,9 @@ var progressButton = {
 	longWaitingText: "Keep waiting",
 	noJavascriptMessage: "It can take up to 10 seconds to continue to the next page. After you continue, do not reload or close this page."
 };
+var stepCard = {
+	header: "Complete the following steps"
+};
 var translationEn = {
 	cookieBanner: cookieBanner,
 	footer: footer,
@@ -172,12 +181,145 @@ var translationEn = {
 	languageSelect: languageSelect,
 	phaseBanner: phaseBanner,
 	skipLink: skipLink,
-	progressButton: progressButton
+	progressButton: progressButton,
+	stepCard: stepCard
+};
+
+let logger;
+const setCustomLogger = (customLogger) => {
+    logger = customLogger;
+};
+const getLogger = () => {
+    var _a, _b;
+    if (!logger) {
+        logger = pino({
+            name: "@govuk-one-login/frontend-passthrough-headers",
+            level: (_b = (_a = process.env.LOG_LEVEL) !== null && _a !== void 0 ? _a : process.env.LOGS_LEVEL) !== null && _b !== void 0 ? _b : "warn",
+        });
+        return logger;
+    }
+    return logger;
 };
 
+const getGTM = (req, res, next) => {
+    res.locals.ga4ContainerId = req.app.get("APP.GTM.GA4_CONTAINER_ID");
+    res.locals.analyticsCookieDomain = req.app.get("APP.GTM.ANALYTICS_COOKIE_DOMAIN");
+    res.locals.ga4Enabled = req.app.get("APP.GTM.GA4_ENABLED");
+    res.locals.analyticsDataSensitive = req.app.get("APP.GTM.ANALYTICS_DATA_SENSITIVE");
+    res.locals.ga4PageViewEnabled = req.app.get("APP.GTM.GA4_PAGE_VIEW_ENABLED");
+    res.locals.ga4FormResponseEnabled = req.app.get("APP.GTM.GA4_FORM_RESPONSE_ENABLED");
+    res.locals.ga4FormErrorEnabled = req.app.get("APP.GTM.GA4_FORM_ERROR_ENABLED");
+    res.locals.ga4FormChangeEnabled = req.app.get("APP.GTM.GA4_FORM_CHANGE_ENABLED");
+    res.locals.ga4NavigationEnabled = req.app.get("APP.GTM.GA4_NAVIGATION_ENABLED");
+    res.locals.ga4SelectContentEnabled = req.app.get("APP.GTM.GA4_SELECT_CONTENT_ENABLED");
+    next();
+};
+const getAssetPath = (req, res, next) => {
+    res.locals.assetPath = req.app.get("APP.ASSET_PATH");
+    next();
+};
+const getLanguageToggle = (req, res, next, customLogger) => {
+    if (customLogger) {
+        setCustomLogger(customLogger);
+    }
+    const logger = getLogger();
+    const toggleValue = req.app.get("APP.LANGUAGE_TOGGLE_ENABLED");
+    res.locals.showLanguageToggle = toggleValue && toggleValue === "1";
+    res.locals.htmlLang = req.i18n.language;
+    try {
+        res.locals.currentUrl = new URL(req.protocol + "://" + req.get("host") + req.originalUrl);
+    }
+    catch (e) {
+        if (e instanceof Error) {
+            logger.warn("Error constructing url for language toggle", e.message);
+        }
+    }
+    next();
+};
+
+var locals = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  getAssetPath: getAssetPath,
+  getGTM: getGTM,
+  getLanguageToggle: getLanguageToggle
+});
+
+const setGTM = ({ app, ga4ContainerId, analyticsCookieDomain, ga4Enabled, ga4PageViewEnabled, ga4FormResponseEnabled, ga4FormErrorEnabled, ga4FormChangeEnabled, ga4NavigationEnabled, ga4SelectContentEnabled, analyticsDataSensitive, }) => {
+    app.set("APP.GTM.GA4_CONTAINER_ID", ga4ContainerId);
+    app.set("APP.GTM.ANALYTICS_COOKIE_DOMAIN", analyticsCookieDomain);
+    app.set("APP.GTM.GA4_ENABLED", ga4Enabled);
+    app.set("APP.GTM.GA4_PAGE_VIEW_ENABLED", ga4PageViewEnabled);
+    app.set("APP.GTM.GA4_FORM_RESPONSE_ENABLED", ga4FormResponseEnabled);
+    app.set("APP.GTM.GA4_FORM_ERROR_ENABLED", ga4FormErrorEnabled);
+    app.set("APP.GTM.GA4_FORM_CHANGE_ENABLED", ga4FormChangeEnabled);
+    app.set("APP.GTM.GA4_NAVIGATION_ENABLED", ga4NavigationEnabled);
+    app.set("APP.GTM.GA4_SELECT_CONTENT_ENABLED", ga4SelectContentEnabled);
+    app.set("APP.GTM.ANALYTICS_DATA_SENSITIVE", analyticsDataSensitive !== null && analyticsDataSensitive !== void 0 ? analyticsDataSensitive : true);
+};
+const setLanguageToggle = ({ app, showLanguageToggle, }) => {
+    app.set("APP.LANGUAGE_TOGGLE_ENABLED", showLanguageToggle);
+};
+
+var settings = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  setGTM: setGTM,
+  setLanguageToggle: setLanguageToggle
+});
+
+const baseHelmetConfig = {
+    contentSecurityPolicy: {
+        directives: {
+            defaultSrc: ["'self'"],
+            styleSrc: ["'self'"],
+            scriptSrc: [
+                "'self'",
+                (_req, res) => `'nonce-${res.locals.cspNonce}'`,
+                "'sha256-+6WnXIl4mbFTCARd8N3COQmT3bJJmo32N8q8ZSQAIcU='",
+                "https://www.googletagmanager.com",
+                "https://www.google-analytics.com",
+                "https://ssl.google-analytics.com",
+            ],
+            imgSrc: [
+                "'self'",
+                "data:",
+                "https://www.googletagmanager.com",
+                "*.google-analytics.com",
+                "*.analytics.google.com",
+            ],
+            fontSrc: ["'self'"],
+            formAction: ["*"],
+            objectSrc: ["'none'"],
+            connectSrc: [
+                "'self'",
+                "*.google-analytics.com",
+                "*.analytics.google.com",
+            ],
+        },
+    },
+    dnsPrefetchControl: {
+        allow: false,
+    },
+    frameguard: {
+        action: "deny",
+    },
+    hsts: {
+        maxAge: 31536000, // 1 Year
+        preload: true,
+        includeSubDomains: true,
+    },
+    referrerPolicy: false,
+    permittedCrossDomainPolicies: false,
+    expectCt: false,
+    crossOriginEmbedderPolicy: false,
+};
+function getHelmetConfig(additions = {}) {
+    return _.merge(baseHelmetConfig, additions);
+}
+
 // Implementation
 function frontendUiMiddleware(req, res, next) {
     res.locals.translations = req.i18n.store.data[req.i18n.language];
+    res.locals.allTranslations = req.i18n.store.data;
     res.locals.basePath = process.cwd();
     next();
 }
@@ -195,6 +337,29 @@ const frontendUiMiddlewareIdentityBypass = (req, res, next) => {
     res.locals.basePath = process.cwd();
     next();
 };
+function resolvePath(obj, path) {
+    return path.split(".").reduce((acc, key) => (acc && typeof acc === "object" ? acc[key] : undefined), obj);
+}
+function buildSteps(allTranslations, currentTranslations, steps) {
+    if (!allTranslations || !steps || !currentTranslations)
+        return [];
+    return steps
+        .slice(0, 4)
+        .map(({ key, image }) => {
+        const allLanguageData = Object.keys(allTranslations).map((lng) => resolvePath(allTranslations[lng], key));
+        return {
+            data: resolvePath(currentTranslations, key),
+            allLanguageData,
+            image: image !== null && image !== void 0 ? image : null,
+        };
+    })
+        .filter(({ allLanguageData }) => allLanguageData.every((step) => { var _a, _b; return (step === null || step === void 0 ? void 0 : step.title) && ((step === null || step === void 0 ? void 0 : step.description) || ((_b = (_a = step === null || step === void 0 ? void 0 : step.bulletList) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0); }));
+}
+function addFrontendUiGlobals(nunjucksEnv) {
+    nunjucksEnv.addGlobal("addLanguageParam", addLanguageParam);
+    nunjucksEnv.addGlobal("contactUsUrl", contactUsUrl);
+    nunjucksEnv.addGlobal("buildSteps", buildSteps);
+}
 function addLanguageParam(language, url) {
     if (!url) {
         console.warn("URL is undefined. The parameter cannot be added, and the toggle will not work.");
@@ -209,7 +374,7 @@ function contactUsUrl(baseUrl, urlToAppend) {
     }
     try {
         const newUrl = new URL(urlToAppend); // Create a new URL object to modify
-        newUrl.search = ''; // Remove the query parameters
+        newUrl.search = ""; // Remove the query parameters
         const encodedUrl = encodeURIComponent(newUrl.toString()); // Encode the entire URL
         const searchParams = new URLSearchParams({ fromURL: encodedUrl });
         return `${baseUrl}?${searchParams.toString()}`;
@@ -246,4 +411,4 @@ const getTranslationObject = (locale, filepath) => {
     return {}; // Return an empty object as a fallback
 };
 
-export { addLanguageParam, contactUsUrl, frontendUiMiddleware, frontendUiMiddlewareIdentityBypass, translationCy as frontendUiTranslationCy, translationEn as frontendUiTranslationEn, getTranslationObject, setBaseTranslations, setFrontendUiTranslations };
+export { addFrontendUiGlobals, addLanguageParam, buildSteps, contactUsUrl, frontendUiMiddleware, frontendUiMiddlewareIdentityBypass, translationCy as frontendUiTranslationCy, translationEn as frontendUiTranslationEn, getHelmetConfig, getTranslationObject, locals, resolvePath, setBaseTranslations, setFrontendUiTranslations, settings };

package/build/esm/backend/lib/helmet.d.ts

@@ -1,31 +1,3 @@
-import { Request, Response } from "express";
-declare const _default: {
-    contentSecurityPolicy: {
-        directives: {
-            defaultSrc: string[];
-            styleSrc: string[];
-            scriptSrc: (string | ((_req: Request, res: Response) => string))[];
-            imgSrc: string[];
-            formAction: string[];
-            objectSrc: string[];
-            connectSrc: string[];
-        };
-    };
-    dnsPrefetchControl: {
-        allow: boolean;
-    };
-    frameguard: {
-        action: string;
-    };
-    hsts: {
-        maxAge: number;
-        preload: boolean;
-        includeSubDomains: boolean;
-    };
-    referrerPolicy: boolean;
-    permittedCrossDomainPolicies: boolean;
-    expectCt: boolean;
-    crossOriginEmbedderPolicy: boolean;
-};
-export default _default;
+import { type HelmetOptions } from "helmet";
+export declare function getHelmetConfig(additions?: HelmetOptions): HelmetOptions;
 //# sourceMappingURL=helmet.d.ts.map

package/build/esm/backend/lib/helmet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helmet.d.ts","sourceRoot":"","sources":["../../../../src/lib/helmet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;;;;;;yCAS7B,OAAO,OAAO,QAAQ;;;;;;;;;;;;;;;;;;;;;;;AAPrC,wBA4CE"}
+{"version":3,"file":"helmet.d.ts","sourceRoot":"","sources":["../../../../src/lib/helmet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AAiD5C,wBAAgB,eAAe,CAAC,SAAS,GAAE,aAAkB,GAAG,aAAa,CAE5E"}

package/build/esm/backend/lib/index.d.ts

@@ -1,4 +1,4 @@
 export * as locals from "./locals";
 export * as settings from "./settings";
-export * as helmet from "./helmet";
+export * from "./helmet";
 //# sourceMappingURL=index.d.ts.map

package/build/esm/backend/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,cAAc,UAAU,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@govuk-one-login/frontend-ui",
-  "version": "5.0.0",
+  "version": "5.1.0",
   "description": "",
   "main": "build/cjs/backend/index.cjs",
   "module": "build/esm/backend/index.js",
@@ -12,8 +12,8 @@
     "build": "rollup -c",
     "dev": "rollup -c --watch",
     "test": "jest --coverage src",
-    "test:visual": "npx playwright install --with-deps && playwright test browser-tests/functional-tests",
-    "test:visual:update": "npx playwright install --with-deps && playwright test browser-tests/functional-tests --update-snapshots"
+    "test:visual": "playwright test browser-tests/functional-tests",
+    "test:visual:update": "playwright test browser-tests/functional-tests --update-snapshots"
   },
   "files": [
     "build/",
@@ -43,7 +43,13 @@
   "peerDependencies": {
     "@govuk-one-login/frontend-analytics": " ^3.0.1 || ^4.0.3",
     "express": "^5.1.0 || >= 4.21.2",
-    "govuk-frontend": "^4.10.1 || ^5.0.0"
+    "govuk-frontend": "^4.10.1 || ^5.0.0",
+    "hmpo-components": "^7.1.0"
+  },
+  "peerDependenciesMeta": {
+    "hmpo-components": {
+      "optional": true
+    }
   },
   "exports": {
     ".": {
@@ -57,7 +63,6 @@
   },
   "types": "./build/esm/backend/index.d.ts",
   "optionalDependencies": {
-    "@govuk-one-login/frontend-analytics": "^4.0.7",
-    "hmpo-components": "^7.1.0"
+    "@govuk-one-login/frontend-analytics": "^4.0.7"
   }
 }