@justai/cuts 0.22.0 → 0.24.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justai/cuts",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "A persona's named parts — the page shell that holds them, and the cuts themselves.",
   "license": "UNLICENSED",
   "repository": {
@@ -29,6 +29,6 @@
     "access": "public"
   },
   "dependencies": {
-    "@justai/core": "^0.1.0"
+    "@justai/core": "^0.2.0"
   }
 }

package/src/Base.astro

@@ -29,7 +29,7 @@
 import { dir as dirOf } from "@justai/ui/locale";
 // The load-bearing behaviour is framework-free and lives in @justai/core, so `feed` (Next) injects the
 // SAME strings instead of hand-copying them. This binding just decides where they go in an Astro head.
-import { AUTH_CAPTURE_JS, JS_CLASS_JS, REVEAL_CSS } from "@justai/core";
+import { AUTH_CAPTURE_JS, JS_CLASS_JS, REVEAL_CSS, analyticsJs } from "@justai/core";
 // The consent ask IS a confirmation — a moment of trust — so it rides the fleet's ONE dialog
 // rather than keeping a private dialect. One anatomy for "are you sure?" and "may I count you?".
 import ConfirmSheet from "./ConfirmSheet.astro";
@@ -186,52 +186,12 @@ const localePath = (l: string) => (l === defaultLocale ? "/" : `/${l}/`);
         character: the one surface that can prove it collects nothing by running nothing (doctrine 15).
         The default stays app.zone's property, so every existing persona is unchanged — this costs the
         ten that measure themselves exactly nothing. */}
-    {gaId && (
-    <script is:inline define:vars={{ gaId }}>
-      // A non-production page measures NOTHING. Found by the first read through the analytics MCP:
-      // 127.0.0.1 + localhost were the property's TOP "persona" (562 fake users in 28 days — local
-      // dev, plus every headless verification sweep loading the built HTML). The guard also covers
-      // the edge's dev- preview hosts: previews are rehearsals, not visits. gtag is still defined
-      // (as the same queue-stub) even on a silenced host, so the consent script can never hit
-      // "gtag is not defined" — the exact trap documented below. The whole block sits in an if
-      // rather than behind an early return: Astro 7's compiler rejects a top-level `return` in an
-      // inline script at BUILD time (the define:vars IIFE only exists later, at runtime).
-      window.gtag = window.gtag || function () { (window.dataLayer = window.dataLayer || []).push(arguments); };
-      var __h = location.hostname;
-      var __nonprod = __h === "localhost" || __h === "127.0.0.1" || __h === "::1" || __h === "[::1]" || __h.indexOf("dev-") === 0;
-      if (!__nonprod) {
-      window.dataLayer = window.dataLayer || [];
-      // gtag is put on WINDOW, not declared as `function gtag`, and this is load-bearing: `define:vars`
-      // wraps this inline script in an IIFE to scope the injected `gaId`, so a `function gtag` here
-      // would be trapped in that IIFE — and the consent banner's own inline script (in the body) calls
-      // gtag, giving "gtag is not defined" the moment a European visitor clicks Allow/Decline (the
-      // choice is never applied, the banner never closes). Global on window, both scripts see it.
-      window.gtag = window.gtag || function () { window.dataLayer.push(arguments); };
-      gtag("js", new Date());
-      gtag("consent", "default", { ad_storage: "denied", ad_user_data: "denied", ad_personalization: "denied", analytics_storage: "granted" });
-      // EEA + UK + CH: deny analytics until the visitor consents (the banner below grants it).
-      gtag("consent", "default", { region: ["AT","BE","BG","HR","CY","CZ","DK","EE","FI","FR","DE","GR","HU","IE","IT","LV","LT","LU","MT","NL","PL","PT","RO","SK","SI","ES","SE","IS","LI","NO","GB","CH"], ad_storage: "denied", ad_user_data: "denied", ad_personalization: "denied", analytics_storage: "denied" });
-      try { var cc0 = localStorage.getItem("consent"); if (cc0) gtag("consent", "update", { analytics_storage: cc0 }); } catch (e) {}
-      // page_title is PINNED to the title as it is at load, before anything can touch it. Only one
-      // persona mutates document.title today — time shows a live clock in the tab — and without this
-      // its analytics reports "13:32 · Amsterdam" as the page name instead of the page. For every
-      // other persona it captures the same string the title already has, so it costs nothing and
-      // removes a trap the next persona that animates its tab would otherwise walk into.
-      //
-      // Found by migration: it existed only in time, and the extraction dropped it silently. Nothing
-      // errored — the analytics would simply have been wrong from that day on.
-      gtag("config", gaId, { cookie_expires: 60 * 60 * 24 * 60, page_title: document.title, /* two months — matches the GA data retention; the cookie must not outlive the data it labels (foundations/15) */ allow_google_signals: false, allow_ad_personalization_signals: false });
-      addEventListener("load", function () {
-        (window.requestIdleCallback || function (f) { setTimeout(f, 1200); })(function () {
-          var s = document.createElement("script");
-          s.async = true;
-          s.src = "https://www.googletagmanager.com/gtag/js?id=" + gaId;
-          document.head.appendChild(s);
-        });
-      });
-      }
-    </script>
-    )}
+    {/* THE BLOCK ITSELF LIVES IN @justai/core (analyticsJs) — because feed and auth need the byte-
+        identical thing and cannot import an .astro file. Everything that made it load-bearing (the
+        non-production guard, why gtag goes on window, the two consent defaults and their sibling
+        timezone list, the pinned page_title, the idle load) is documented there, beside the code.
+        What stays here is only the decision of WHICH id this persona reports into. */}
+    {gaId && <script is:inline set:html={analyticsJs(gaId)} />}
   </head>
   <body>
     <slot />
@@ -296,7 +256,23 @@ const localePath = (l: string) => (l === defaultLocale ? "/" : `/${l}/`);
           if (localStorage.getItem("consent")) return;
           try { if (sessionStorage.getItem("consent-later")) return; } catch (_) {}
           if (!document.getElementById("kernel")) return; // no kernel = not a content page (e.g. 404) — don't ask for consent on a dead end
-          if ((Intl.DateTimeFormat().resolvedOptions().timeZone || "").indexOf("Europe/") !== 0) return;
+          // WHERE CONSENT IS LEGALLY ASKED — and a timezone is a PROXY for that, never the thing
+          // itself. `Europe/` carries almost all of the region list in the head, but not all of it:
+          // an EEA country can sit in another continent's zone entirely, and those visitors were
+          // DENIED by the regional default while never being offered the dialog — no path to
+          // consent at all. Twelve zones, measured, listed here with the country that owns them.
+          // The two lists are siblings: if the region array up there ever changes, this changes too.
+          var tz = Intl.DateTimeFormat().resolvedOptions().timeZone || "";
+          var asked = tz.indexOf("Europe/") === 0 || [
+            "Asia/Nicosia", "Asia/Famagusta",                              // Cyprus
+            "Atlantic/Canary",                                             // Spain — Canary Islands
+            "Atlantic/Azores", "Atlantic/Madeira",                         // Portugal
+            "Atlantic/Reykjavik",                                          // Iceland
+            "Arctic/Longyearbyen",                                         // Norway — Svalbard
+            "America/Guadeloupe", "America/Martinique", "America/Cayenne", // France — outermost
+            "Indian/Reunion", "Indian/Mayotte"                             //   regions; EU law applies
+          ].indexOf(tz) >= 0;
+          if (!asked) return;
           // the first second belongs to the kernel; the question arrives on the second beat
           setTimeout(open, 700);
         } catch (_) {}