@jini-ai/admin 0.6.10 → 0.6.12

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.6.12
+
+### Patch Changes
+
+- consent settings: per-site `'unsafe-eval'` toggle.
+
+## 0.6.11
+
 ## 0.6.10
 
 ### Patch Changes

package/dist/consent/react/ConsentFields.d.ts

@@ -22,7 +22,7 @@ export interface ConsentFieldsProps {
 }
 /** Banner copy and its links. Text is always plain text; the engine never renders it as HTML. */
 export declare function ConsentBannerFields({ value, onChange, disabled, problems, dictionary, limits }: ConsentFieldsProps): import("react").JSX.Element;
-/** On/off, region behavior and the policy version that re-asks visitors when it changes. */
+/** On/off, script policy, region behavior and the version that re-asks visitors when it changes. */
 export declare function ConsentRulesFields({ value, onChange, disabled, problems, dictionary, limits, regionModes }: ConsentFieldsProps & {
     regionModes?: readonly ConsentSettingsView['regionMode'][];
 }): import("react").JSX.Element;

package/dist/consent/react/ConsentFields.js

@@ -46,13 +46,13 @@ export function ConsentBannerFields({ value, onChange, disabled = false, problem
                     ? _jsx("textarea", { className: "jini-input", value: value[key] ?? '', maxLength: limits[key] ?? 2000, rows: 3, onChange: handlers.text(key), ...aria })
                     : _jsx("input", { className: "jini-input", type: "text", value: value[key] ?? '', maxLength: limits[key] ?? 2000, onChange: handlers.text(key), ...aria }) }, key)), _jsx("p", { className: "jini-hint", children: t('Link a published privacy page, such as /privacy. The second link is optional.') })] });
 }
-/** On/off, region behavior and the policy version that re-asks visitors when it changes. */
+/** On/off, script policy, region behavior and the version that re-asks visitors when it changes. */
 export function ConsentRulesFields({ value, onChange, disabled = false, problems, dictionary, limits = {}, regionModes = ['auto', 'opt-in', 'opt-out'] }) {
     const id = useId();
     const t = translator(dictionary);
     const handlers = useConsentSettingsPanel({ value, onChange });
     const modes = regionModes.includes(value.regionMode) ? regionModes : [value.regionMode, ...regionModes];
-    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
+    return _jsxs("fieldset", { disabled: disabled, className: "jini-consent-settings-fields", children: [_jsx("legend", { children: t('Rules') }), _jsxs("button", { type: "button", className: value.enabled ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.enabled, "aria-labelledby": `${id}-enabled`, "aria-describedby": `${id}-hint`, onClick: handlers.toggle, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-enabled`, className: "jini-toggle-row-label", children: t('Enable cookie consent on this site') }), _jsx("span", { id: `${id}-hint`, className: "jini-toggle-row-hint", children: t('Applies to published site pages.') })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), value.enabled && _jsxs("button", { type: "button", className: value.allowUnsafeEval === true ? 'jini-toggle-row on' : 'jini-toggle-row', role: "switch", "aria-checked": value.allowUnsafeEval === true, "aria-labelledby": `${id}-eval`, "aria-describedby": `${id}-eval-hint`, onClick: handlers.toggleUnsafeEval, children: [_jsxs("span", { className: "jini-toggle-row-text", children: [_jsx("span", { id: `${id}-eval`, className: "jini-toggle-row-label", children: t('Allow dynamic code (unsafe-eval)') }), _jsx("span", { id: `${id}-eval-hint`, className: "jini-toggle-row-hint", children: t("Some themes need this. It weakens the site's script protection. Optional scripts still wait for consent.") })] }), _jsx("span", { className: "jini-toggle-row-switch", "aria-hidden": "true" })] }), _jsx(Field, { label: t('Region mode'), field: "regionMode", problems: problems, children: aria => _jsx("select", { className: "jini-input", value: value.regionMode, onChange: handlers.region, ...aria, children: modes.map(mode => _jsx("option", { value: mode, children: t(REGION_LABELS[mode]) }, mode)) }) }), _jsx("p", { className: "jini-hint", children: t('California permits optional categories until opt-out. Global Privacy Control always disables analytics and marketing.') }), _jsx(Field, { label: t('Policy version'), field: "policyVersion", problems: problems, children: aria => _jsx(PolicyVersionInput, { value: value.policyVersion, onChange: onChange, maxLength: limits.policyVersion ?? 128, aria: aria }) }), _jsx("p", { className: "jini-hint", children: t('Change the policy version to ask visitors to choose again.') })] });
 }
 /** Placement, bounded appearance tokens and allowlisted custom CSS. The engine checks contrast and
  * CSS safety; its problems arrive on the `appearance` field and show under the custom CSS. */

package/dist/consent/react/ConsentSettingsPanel.d.ts

@@ -12,6 +12,8 @@ export interface ConsentAppearanceView {
 /** The host's consent configuration. The look fields are optional so older hosts stay valid. */
 export interface ConsentSettingsView {
     enabled: boolean;
+    /** Optional for older hosts; omitted means the dynamic code exception is off. */
+    allowUnsafeEval?: boolean;
     regionMode: 'auto' | 'opt-in' | 'opt-out';
     policyVersion: string;
     privacyPolicyUrl: string;

package/dist/consent/react/settings-panel.hooks.d.ts

@@ -3,6 +3,7 @@ import type { ConsentAppearanceView, ConsentFieldProblem, ConsentSettingsPanelPr
 /** Keep value conversions and toggle behavior out of the view. React owns event signatures. */
 export declare function useConsentSettingsPanel({ value, onChange }: Pick<ConsentSettingsPanelProps, 'value' | 'onChange'>, _options?: {}): {
     toggle: () => void;
+    toggleUnsafeEval: () => void;
     region: (event: ChangeEvent<HTMLSelectElement>) => void;
     placement: (event: ChangeEvent<HTMLSelectElement>) => void;
     text: (key: keyof ConsentSettingsView) => (event: ChangeEvent<HTMLInputElement | HTMLTextAreaElement>) => void;

package/dist/consent/react/settings-panel.hooks.js

@@ -3,6 +3,7 @@ import { useEffect, useState } from 'react';
 export function useConsentSettingsPanel({ value, onChange }, _options = {}) {
     return {
         toggle: () => onChange({ patch: { enabled: !value.enabled } }),
+        toggleUnsafeEval: () => onChange({ patch: { allowUnsafeEval: value.allowUnsafeEval !== true } }),
         region: (event) => onChange({ patch: { regionMode: event.target.value } }),
         placement: (event) => onChange({ patch: { placement: event.target.value } }),
         text: (key) => (event) => onChange({ patch: { [key]: event.target.value } }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/admin",
-  "version": "0.6.10",
+  "version": "0.6.12",
   "description": "Composable admin surface for Jini-hosted products: framework-free contracts, panel registry, and route model in `/core`; React shell and panels in `/react`. Import only the layers you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -491,12 +491,12 @@
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "@testing-library/user-event": "^14.6.1",
-    "@jini-ai/agentic": "^0.6.10",
-    "@jini-ai/core": "^0.6.10",
-    "@jini-ai/agent-plugins": "^0.6.10",
-    "@jini-ai/ui-kit": "^0.6.10",
-    "@jini-ai/ui": "^0.6.10",
-    "@jini-ai/cms": "^0.6.10"
+    "@jini-ai/ui": "^0.6.12",
+    "@jini-ai/agentic": "^0.6.12",
+    "@jini-ai/ui-kit": "^0.6.12",
+    "@jini-ai/agent-plugins": "^0.6.12",
+    "@jini-ai/cms": "^0.6.12",
+    "@jini-ai/core": "^0.6.12"
   },
   "typesVersions": {
     "*": {