@nodii/onboarding 0.0.1 → 0.1.0

package/README.md

@@ -1,5 +1,78 @@
 # @nodii/onboarding
 
-Placeholder package at v0.0.1. Real implementation ships at v0.1.0 per the locked feature_doc.
+Browser SDK for the Nodii self-signup onboarding flow (D540 / D543): headless
+form + consent state, reCAPTCHA integration, submit clients, and default
+themeable vanilla-TS widgets.
 
-**Spec**: `https://planning.dev.nucleus-cloud.in/api/v1/feature-docs?serviceId=nodii-libs&docKey=onboarding`
+Subpath exports:
+
+- `@nodii/onboarding` — root barrel (most-common items)
+- `@nodii/onboarding/form` — Phase-1 contact-form headless state
+- `@nodii/onboarding/spec` — spec fetch client + D540 model
+- `@nodii/onboarding/dynamic` — spec→Zod derivation + dynamic signup stepper
+- `@nodii/onboarding/consent` — **headless** ConsentPack controller + gates (D543)
+- `@nodii/onboarding/viewer` — **opt-in** default document viewer (DOMPurify /
+  marked / PDF.js). Separate subpath so the base bundle stays lean.
+- `@nodii/onboarding/submit` — submit clients + typed error taxonomy
+- `@nodii/onboarding/recaptcha` — reCAPTCHA v3 loader
+- `@nodii/onboarding/widget` — default themeable widgets (contact + signup +
+  consent step)
+
+## Tests
+
+### Fast unit + happy-dom (default)
+
+```bash
+bun run test        # bun:test — headless controller, submit clients, widgets
+                    # (happy-dom), spec model, bundle discipline, no-NUL guard
+bun run typecheck   # tsc --noEmit (src)
+bun run lint        # bun lint + bun fmt check
+```
+
+### Browser tests (Playwright / real Chromium) — COMPLIANCE AUTHORITY
+
+The D543 consent scroll-gate, the PDF.js worker load, and DOMPurify-in-a-real-
+DOM are **layout-dependent** and cannot be validated under happy-dom (no layout
+engine). The Playwright spec in `browser-tests/` is the **authority** for those
+compliance paths — it renders the real SDK bundle in Chromium against genuine
+layout and proves:
+
+1. **scroll gate** — a long doc's gate is CLOSED before scroll and OPENS only
+   after a real scroll-to-end (real geometry); `buildConsentPayload` throws
+   before / succeeds (with `scrolled_to_end`) after.
+2. **P0a fabrication guard** — a short doc satisfies only WITH content present;
+   an empty/pre-render box never satisfies.
+3. **PDF worker** — the worker is actually FETCHED + loaded (no pre-set
+   `workerSrc`); pages render to `<canvas>`; the scroll gate opens only after a
+   real scroll.
+4. **open_then_accept** — the open affordance satisfies `opened` and only `opened`.
+5. **DOMPurify** — `<iframe>` / `<script>` / `<object>` are stripped in a real
+   browser (closes the "DOMPurify may be inert under bun+happy-dom" gap).
+
+```bash
+# One-time (and in CI): install the Chromium browser binary.
+bunx playwright install chromium
+
+# Build the browser bundle + run the Playwright spec.
+bun run test:browser
+
+# Typecheck the browser harness + spec.
+bun run typecheck:browser
+```
+
+**CI implication:** `bun run test:browser` requires a Chromium binary, so a CI
+job that runs it MUST add a `bunx playwright install --with-deps chromium` step
+before it (the browser is NOT downloaded by `bun install`). The default
+`ts-ci.yml` `Test` step runs `bun run test` (happy-dom, fast) per package and
+does NOT run the browser spec; wire the browser spec as a dedicated job/step,
+e.g.:
+
+```yaml
+- name: Install Chromium for browser tests
+  run: cd ts/onboarding && bunx playwright install --with-deps chromium
+- name: Browser tests (consent compliance authority)
+  run: cd ts/onboarding && bun run test:browser
+```
+
+Playwright build artifacts (`browser-tests/.bundle/`, `test-results/`,
+`playwright-report/`) are gitignored.

package/dist/chunk-7NS7ENJV.js

@@ -0,0 +1,232 @@
+// src/recaptcha/loader.ts
+var RECAPTCHA_SCRIPT_ID = "__nodii_recaptcha_script__";
+var DEFAULT_TIMEOUT_MS = 1e4;
+var POLL_INTERVAL_MS = 50;
+var RecaptchaError = class extends Error {
+  kind;
+  constructor(kind, message) {
+    super(message);
+    this.name = "RecaptchaError";
+    this.kind = kind;
+  }
+};
+var cachedLoad = null;
+var activeSiteKey = null;
+var ownsGlobal = false;
+function removeOwnScriptTag() {
+  if (typeof document === "undefined") return;
+  const tag = document.getElementById(RECAPTCHA_SCRIPT_ID);
+  tag?.parentNode?.removeChild(tag);
+}
+function readyWithTimeout(grecaptcha, timeoutMs, onReady, onTimeout) {
+  let done = false;
+  const timer = setTimeout(() => {
+    if (done) return;
+    done = true;
+    onTimeout();
+  }, timeoutMs);
+  grecaptcha.ready(() => {
+    if (done) return;
+    done = true;
+    clearTimeout(timer);
+    onReady();
+  });
+}
+function loadRecaptcha(siteKey, opts) {
+  if (activeSiteKey !== null && activeSiteKey !== siteKey) {
+    return Promise.reject(
+      new RecaptchaError(
+        "sitekey_mismatch",
+        "reCAPTCHA is already initialized for a different siteKey. The v3 script supports one siteKey per page; remount with the original key or reload the page."
+      )
+    );
+  }
+  if (cachedLoad !== null && cachedLoad.siteKey !== siteKey) {
+    return Promise.reject(
+      new RecaptchaError(
+        "sitekey_mismatch",
+        "A reCAPTCHA load for a different siteKey is already in flight."
+      )
+    );
+  }
+  if (cachedLoad !== null) return cachedLoad.promise;
+  const timeoutMs = opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const promise = new Promise((resolve, reject) => {
+    let settled = false;
+    const settleOk = () => {
+      if (settled) return;
+      settled = true;
+      activeSiteKey = siteKey;
+      ownsGlobal = true;
+      resolve();
+    };
+    const settleFail = (err) => {
+      if (settled) return;
+      settled = true;
+      cachedLoad = null;
+      removeOwnScriptTag();
+      reject(err);
+    };
+    if (typeof document === "undefined" || typeof window === "undefined") {
+      settleFail(
+        new RecaptchaError(
+          "unavailable",
+          "loadRecaptcha: no DOM available (browser-only API)."
+        )
+      );
+      return;
+    }
+    const ourTagPresent = document.getElementById(RECAPTCHA_SCRIPT_ID) !== null;
+    if (window.grecaptcha) {
+      if (!ownsGlobal && !ourTagPresent) {
+        settleFail(
+          new RecaptchaError(
+            "sitekey_mismatch",
+            "A reCAPTCHA global was pre-loaded by the host page with an unknown site key. The v3 script supports one render key per page and its key cannot be introspected, so executing a different key against it is unsafe. Load reCAPTCHA only via this SDK, or ensure the host uses the same site key."
+          )
+        );
+        return;
+      }
+      readyWithTimeout(
+        window.grecaptcha,
+        timeoutMs,
+        settleOk,
+        () => settleFail(
+          new RecaptchaError(
+            "timeout",
+            `grecaptcha.ready() did not fire within ${timeoutMs}ms (reCAPTCHA runtime blocked).`
+          )
+        )
+      );
+      return;
+    }
+    if (ourTagPresent) {
+      const startedAt2 = Date.now();
+      const poll = setInterval(() => {
+        if (window.grecaptcha) {
+          clearInterval(poll);
+          const remaining = Math.max(timeoutMs - (Date.now() - startedAt2), 0);
+          readyWithTimeout(
+            window.grecaptcha,
+            remaining,
+            settleOk,
+            () => settleFail(
+              new RecaptchaError(
+                "timeout",
+                `grecaptcha.ready() did not fire within the ${timeoutMs}ms budget.`
+              )
+            )
+          );
+          return;
+        }
+        if (Date.now() - startedAt2 >= timeoutMs) {
+          clearInterval(poll);
+          settleFail(
+            new RecaptchaError(
+              "timeout",
+              `reCAPTCHA script tag present but grecaptcha did not appear within ${timeoutMs}ms.`
+            )
+          );
+        }
+      }, POLL_INTERVAL_MS);
+      return;
+    }
+    const script = document.createElement("script");
+    script.id = RECAPTCHA_SCRIPT_ID;
+    script.src = `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKey)}`;
+    script.async = true;
+    script.defer = true;
+    const loadTimeout = setTimeout(() => {
+      settleFail(
+        new RecaptchaError(
+          "timeout",
+          `reCAPTCHA script did not load within ${timeoutMs}ms.`
+        )
+      );
+    }, timeoutMs);
+    const startedAt = Date.now();
+    script.onload = () => {
+      clearTimeout(loadTimeout);
+      if (!window.grecaptcha) {
+        settleFail(
+          new RecaptchaError(
+            "load_failed",
+            "reCAPTCHA script loaded but the grecaptcha global was not defined."
+          )
+        );
+        return;
+      }
+      const remaining = Math.max(timeoutMs - (Date.now() - startedAt), 0);
+      readyWithTimeout(
+        window.grecaptcha,
+        remaining,
+        settleOk,
+        () => settleFail(
+          new RecaptchaError(
+            "timeout",
+            `reCAPTCHA loaded but grecaptcha.ready() did not fire within ${timeoutMs}ms.`
+          )
+        )
+      );
+    };
+    script.onerror = () => {
+      clearTimeout(loadTimeout);
+      settleFail(
+        new RecaptchaError(
+          "load_failed",
+          "Failed to load the reCAPTCHA script (blocked by an ad blocker / CSP, or offline)."
+        )
+      );
+    };
+    document.head.appendChild(script);
+  });
+  cachedLoad = { siteKey, promise };
+  return promise;
+}
+async function executeRecaptcha(siteKey, action, opts) {
+  await loadRecaptcha(siteKey, opts);
+  if (typeof window === "undefined" || !window.grecaptcha) {
+    throw new RecaptchaError(
+      "unavailable",
+      "executeRecaptcha: grecaptcha is not available. Are you running in a browser?"
+    );
+  }
+  const timeoutMs = opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const grecaptcha = window.grecaptcha;
+  let timer;
+  const timeout = new Promise((_resolve, reject) => {
+    timer = setTimeout(() => {
+      reject(
+        new RecaptchaError(
+          "timeout",
+          `reCAPTCHA execute() did not settle within ${timeoutMs}ms (runtime blocked).`
+        )
+      );
+    }, timeoutMs);
+  });
+  try {
+    return await Promise.race([
+      grecaptcha.execute(siteKey, { action }),
+      timeout
+    ]);
+  } catch (err) {
+    if (err instanceof RecaptchaError) throw err;
+    const detail = err instanceof Error ? err.message : String(err ?? "unknown error");
+    throw new RecaptchaError(
+      "execute_failed",
+      `reCAPTCHA execute() failed: ${detail}`
+    );
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+function _resetRecaptchaState() {
+  cachedLoad = null;
+  activeSiteKey = null;
+  ownsGlobal = false;
+  removeOwnScriptTag();
+}
+
+export { RecaptchaError, _resetRecaptchaState, executeRecaptcha, loadRecaptcha };
+//# sourceMappingURL=chunk-7NS7ENJV.js.map
+//# sourceMappingURL=chunk-7NS7ENJV.js.map

package/dist/chunk-7NS7ENJV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recaptcha/loader.ts"],"names":["startedAt"],"mappings":";AAwDO,IAAM,mBAAA,GAAsB,4BAAA;AACnC,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,gBAAA,GAAmB,EAAA;AAUlB,IAAM,cAAA,GAAN,cAA6B,KAAA,CAAM;AAAA,EACxB,IAAA;AAAA,EAEhB,WAAA,CAAY,MAA0B,OAAA,EAAiB;AACrD,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAWA,IAAI,UAAA,GAAiE,IAAA;AAOrE,IAAI,aAAA,GAA+B,IAAA;AASnC,IAAI,UAAA,GAAa,KAAA;AAEjB,SAAS,kBAAA,GAA2B;AAClC,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,cAAA,CAAe,mBAAmB,CAAA;AACvD,EAAA,GAAA,EAAK,UAAA,EAAY,YAAY,GAAG,CAAA;AAClC;AAQA,SAAS,gBAAA,CACP,UAAA,EACA,SAAA,EACA,OAAA,EACA,SAAA,EACM;AACN,EAAA,IAAI,IAAA,GAAO,KAAA;AACX,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,SAAA,EAAU;AAAA,EACZ,GAAG,SAAS,CAAA;AACZ,EAAA,UAAA,CAAW,MAAM,MAAM;AACrB,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,YAAA,CAAa,KAAK,CAAA;AAClB,IAAA,OAAA,EAAQ;AAAA,EACV,CAAC,CAAA;AACH;AAaO,SAAS,aAAA,CACd,SACA,IAAA,EACe;AAEf,EAAA,IAAI,aAAA,KAAkB,IAAA,IAAQ,aAAA,KAAkB,OAAA,EAAS;AACvD,IAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,MACb,IAAI,cAAA;AAAA,QACF,kBAAA;AAAA,QACA;AAAA;AAGF,KACF;AAAA,EACF;AACA,EAAA,IAAI,UAAA,KAAe,IAAA,IAAQ,UAAA,CAAW,OAAA,KAAY,OAAA,EAAS;AACzD,IAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,MACb,IAAI,cAAA;AAAA,QACF,kBAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAEA,EAAA,IAAI,UAAA,KAAe,IAAA,EAAM,OAAO,UAAA,CAAW,OAAA;AAE3C,EAAA,MAAM,SAAA,GAAY,MAAM,SAAA,IAAa,kBAAA;AAErC,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAc,CAAC,SAAS,MAAA,KAAW;AACrD,IAAA,IAAI,OAAA,GAAU,KAAA;AAEd,IAAA,MAAM,WAAW,MAAY;AAC3B,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,aAAA,GAAgB,OAAA;AAChB,MAAA,UAAA,GAAa,IAAA;AACb,MAAA,OAAA,EAAQ;AAAA,IACV,CAAA;AAEA,IAAA,MAAM,UAAA,GAAa,CAAC,GAAA,KAA8B;AAChD,MAAA,IAAI,OAAA,EAAS;AACb,MAAA,OAAA,GAAU,IAAA;AAGV,MAAA,UAAA,GAAa,IAAA;AACb,MAAA,kBAAA,EAAmB;AACnB,MAAA,MAAA,CAAO,GAAG,CAAA;AAAA,IACZ,CAAA;AAEA,IAAA,IAAI,OAAO,QAAA,KAAa,WAAA,IAAe,OAAO,WAAW,WAAA,EAAa;AACpE,MAAA,UAAA;AAAA,QACE,IAAI,cAAA;AAAA,UACF,aAAA;AAAA,UACA;AAAA;AACF,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,cAAA,CAAe,mBAAmB,CAAA,KAAM,IAAA;AAEvE,IAAA,IAAI,OAAO,UAAA,EAAY;AAMrB,MAAA,IAAI,CAAC,UAAA,IAAc,CAAC,aAAA,EAAe;AACjC,QAAA,UAAA;AAAA,UACE,IAAI,cAAA;AAAA,YACF,kBAAA;AAAA,YACA;AAAA;AAKF,SACF;AACA,QAAA;AAAA,MACF;AAEA,MAAA,gBAAA;AAAA,QAAiB,MAAA,CAAO,UAAA;AAAA,QAAY,SAAA;AAAA,QAAW,QAAA;AAAA,QAAU,MACvD,UAAA;AAAA,UACE,IAAI,cAAA;AAAA,YACF,SAAA;AAAA,YACA,0CAA0C,SAAS,CAAA,+BAAA;AAAA;AACrD;AACF,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,aAAA,EAAe;AAIjB,MAAA,MAAMA,UAAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,MAAA,MAAM,IAAA,GAAO,YAAY,MAAM;AAC7B,QAAA,IAAI,OAAO,UAAA,EAAY;AACrB,UAAA,aAAA,CAAc,IAAI,CAAA;AAClB,UAAA,MAAM,SAAA,GAAY,KAAK,GAAA,CAAI,SAAA,IAAa,KAAK,GAAA,EAAI,GAAIA,aAAY,CAAC,CAAA;AAClE,UAAA,gBAAA;AAAA,YAAiB,MAAA,CAAO,UAAA;AAAA,YAAY,SAAA;AAAA,YAAW,QAAA;AAAA,YAAU,MACvD,UAAA;AAAA,cACE,IAAI,cAAA;AAAA,gBACF,SAAA;AAAA,gBACA,8CAA8C,SAAS,CAAA,UAAA;AAAA;AACzD;AACF,WACF;AACA,UAAA;AAAA,QACF;AACA,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAIA,UAAAA,IAAa,SAAA,EAAW;AACvC,UAAA,aAAA,CAAc,IAAI,CAAA;AAClB,UAAA,UAAA;AAAA,YACE,IAAI,cAAA;AAAA,cACF,SAAA;AAAA,cACA,qEAAqE,SAAS,CAAA,GAAA;AAAA;AAChF,WACF;AAAA,QACF;AAAA,MACF,GAAG,gBAAgB,CAAA;AACnB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,EAAA,GAAK,mBAAA;AACZ,IAAA,MAAA,CAAO,GAAA,GAAM,CAAA,+CAAA,EAAkD,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAC1F,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AACf,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AAEf,IAAA,MAAM,WAAA,GAAc,WAAW,MAAM;AACnC,MAAA,UAAA;AAAA,QACE,IAAI,cAAA;AAAA,UACF,SAAA;AAAA,UACA,wCAAwC,SAAS,CAAA,GAAA;AAAA;AACnD,OACF;AAAA,IACF,GAAG,SAAS,CAAA;AACZ,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,IAAA,MAAA,CAAO,SAAS,MAAM;AACpB,MAAA,YAAA,CAAa,WAAW,CAAA;AACxB,MAAA,IAAI,CAAC,OAAO,UAAA,EAAY;AACtB,QAAA,UAAA;AAAA,UACE,IAAI,cAAA;AAAA,YACF,aAAA;AAAA,YACA;AAAA;AACF,SACF;AACA,QAAA;AAAA,MACF;AAGA,MAAA,MAAM,SAAA,GAAY,KAAK,GAAA,CAAI,SAAA,IAAa,KAAK,GAAA,EAAI,GAAI,YAAY,CAAC,CAAA;AAClE,MAAA,gBAAA;AAAA,QAAiB,MAAA,CAAO,UAAA;AAAA,QAAY,SAAA;AAAA,QAAW,QAAA;AAAA,QAAU,MACvD,UAAA;AAAA,UACE,IAAI,cAAA;AAAA,YACF,SAAA;AAAA,YACA,+DAA+D,SAAS,CAAA,GAAA;AAAA;AAC1E;AACF,OACF;AAAA,IACF,CAAA;AAEA,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,YAAA,CAAa,WAAW,CAAA;AACxB,MAAA,UAAA;AAAA,QACE,IAAI,cAAA;AAAA,UACF,aAAA;AAAA,UACA;AAAA;AACF,OACF;AAAA,IACF,CAAA;AAEA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC,CAAC,CAAA;AAED,EAAA,UAAA,GAAa,EAAE,SAAS,OAAA,EAAQ;AAChC,EAAA,OAAO,OAAA;AACT;AAiBA,eAAsB,gBAAA,CACpB,OAAA,EACA,MAAA,EACA,IAAA,EACiB;AACjB,EAAA,MAAM,aAAA,CAAc,SAAS,IAAI,CAAA;AAEjC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,UAAA,EAAY;AACvD,IAAA,MAAM,IAAI,cAAA;AAAA,MACR,aAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,MAAM,SAAA,IAAa,kBAAA;AAMrC,EAAA,MAAM,aAAa,MAAA,CAAO,UAAA;AAC1B,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAe,CAAC,UAAU,MAAA,KAAW;AACvD,IAAA,KAAA,GAAQ,WAAW,MAAM;AACvB,MAAA,MAAA;AAAA,QACE,IAAI,cAAA;AAAA,UACF,SAAA;AAAA,UACA,6CAA6C,SAAS,CAAA,qBAAA;AAAA;AACxD,OACF;AAAA,IACF,GAAG,SAAS,CAAA;AAAA,EACd,CAAC,CAAA;AAED,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,QAAQ,IAAA,CAAK;AAAA,MACxB,UAAA,CAAW,OAAA,CAAQ,OAAA,EAAS,EAAE,QAAQ,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,GAAA,YAAe,gBAAgB,MAAM,GAAA;AACzC,IAAA,MAAM,SACJ,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,OAAO,eAAe,CAAA;AACpE,IAAA,MAAM,IAAI,cAAA;AAAA,MACR,gBAAA;AAAA,MACA,+BAA+B,MAAM,CAAA;AAAA,KACvC;AAAA,EACF,CAAA,SAAE;AACA,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,YAAA,CAAa,KAAK,CAAA;AAAA,EAC7C;AACF;AAQO,SAAS,oBAAA,GAA6B;AAC3C,EAAA,UAAA,GAAa,IAAA;AACb,EAAA,aAAA,GAAgB,IAAA;AAChB,EAAA,UAAA,GAAa,KAAA;AACb,EAAA,kBAAA,EAAmB;AACrB","file":"chunk-7NS7ENJV.js","sourcesContent":["/// <reference lib=\"dom\" />\n/// <reference lib=\"dom.iterable\" />\n/**\n * reCAPTCHA v3 loader and token executor.\n *\n * Per D537:\n *   - Site key is public (supplied at mount time from the spec response).\n *   - Secret key is NEVER in the browser — only the site key is here.\n *   - v3 score-based by default; the operator may configure a v2 fallback\n *     on the server side for low-score requests.\n *   - The loader injects the reCAPTCHA script once and exposes execute()\n *     to obtain a fresh token before each submit.\n *\n * Failure semantics (all recoverable, all bounded by opts.timeoutMs / 10s):\n *   - A script load failure (adblock / CSP / offline) REJECTS with\n *     RecaptchaError(kind:\"load_failed\"), EVICTS the cached promise, and\n *     REMOVES the injected script tag — the next loadRecaptcha call starts\n *     fresh. A transient failure never poisons the siteKey.\n *   - EVERY wait is bounded, including grecaptcha.ready() AFTER onload and on\n *     the adoption/poll paths: if api.js serves but the inner runtime never\n *     boots (ready() never fires), the loader rejects RecaptchaError(\n *     kind:\"timeout\") and evicts, rather than hanging the widget on\n *     \"Sending…\" forever.\n *   - The \"existing script tag but no grecaptcha global\" poll is BOUNDED,\n *     then the subsequent ready() is bounded by the remaining budget.\n *\n * Multi-siteKey + foreign-global handling (honest):\n *   - The v3 script loads with `?render=<siteKey>` and initializes for ONE\n *     site key per page. A SECOND different siteKey after our first load is\n *     rejected RecaptchaError(kind:\"sitekey_mismatch\").\n *   - If the HOST page pre-loaded grecaptcha with an unknown render key (a\n *     FOREIGN global this SDK did not create), we CANNOT introspect its key,\n *     so executing our key against it would be the exact silent misfire we\n *     promise to prevent. We reject RecaptchaError(kind:\"sitekey_mismatch\")\n *     instead. (Detection: we only adopt a global we brought up ourselves or\n *     that our own script tag is loading.)\n *\n * execute() rejections (invalid key at execute time, Google-internal errors,\n * often plain strings) are wrapped in RecaptchaError(kind:\"execute_failed\").\n *\n * This module is browser-only. It accesses the `window` and `document`\n * globals explicitly.\n */\n\ndeclare global {\n  interface Window {\n    grecaptcha?: Grecaptcha;\n  }\n}\n\ninterface Grecaptcha {\n  ready(callback: () => void): void;\n  execute(siteKey: string, options: { action: string }): Promise<string>;\n}\n\n/** Exported for tests — the id of the script tag this loader owns. */\nexport const RECAPTCHA_SCRIPT_ID = \"__nodii_recaptcha_script__\";\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst POLL_INTERVAL_MS = 50;\n\nexport type RecaptchaErrorKind =\n  | \"load_failed\"\n  | \"timeout\"\n  | \"sitekey_mismatch\"\n  | \"execute_failed\"\n  | \"unavailable\";\n\n/** Typed error for every reCAPTCHA loader failure path. */\nexport class RecaptchaError extends Error {\n  public readonly kind: RecaptchaErrorKind;\n\n  constructor(kind: RecaptchaErrorKind, message: string) {\n    super(message);\n    this.name = \"RecaptchaError\";\n    this.kind = kind;\n  }\n}\n\nexport interface RecaptchaLoadOptions {\n  /**\n   * Max time to wait for the script / grecaptcha global to become ready\n   * before rejecting with RecaptchaError(kind:\"timeout\"). Default 10s.\n   */\n  timeoutMs?: number;\n}\n\n/** In-flight or settled load promise for the ACTIVE siteKey. */\nlet cachedLoad: { siteKey: string; promise: Promise<void> } | null = null;\n\n/**\n * The siteKey the page's grecaptcha script was initialized with. Set on\n * successful load; cleared only by _resetRecaptchaState. A different siteKey\n * after this is set → RecaptchaError(kind:\"sitekey_mismatch\").\n */\nlet activeSiteKey: string | null = null;\n\n/**\n * True once THIS loader's own <script?render=key> has successfully brought up\n * window.grecaptcha. Distinguishes a global WE initialized (safe to execute\n * against `activeSiteKey`) from a FOREIGN global the host page loaded with an\n * unknown render key (unsafe — we cannot know its key, so we must reject\n * rather than silently execute against it; see P8 in the module doc).\n */\nlet ownsGlobal = false;\n\nfunction removeOwnScriptTag(): void {\n  if (typeof document === \"undefined\") return;\n  const tag = document.getElementById(RECAPTCHA_SCRIPT_ID);\n  tag?.parentNode?.removeChild(tag);\n}\n\n/**\n * Run grecaptcha.ready() with a hard timeout. reCAPTCHA's inner init can be\n * blocked (api.js served but the runtime never boots — corp proxy, partial\n * CSP); ready() would then never fire and the loader would hang forever with\n * the cache un-evicted. This bounds ALL ready() waits and evicts on hang.\n */\nfunction readyWithTimeout(\n  grecaptcha: Grecaptcha,\n  timeoutMs: number,\n  onReady: () => void,\n  onTimeout: () => void,\n): void {\n  let done = false;\n  const timer = setTimeout(() => {\n    if (done) return;\n    done = true;\n    onTimeout();\n  }, timeoutMs);\n  grecaptcha.ready(() => {\n    if (done) return;\n    done = true;\n    clearTimeout(timer);\n    onReady();\n  });\n}\n\n/**\n * Inject the reCAPTCHA v3 script for the given siteKey.\n * Idempotent per siteKey: concurrent/repeated calls share one load.\n * A FAILED load is evicted — the next call retries from scratch.\n *\n * @throws {RecaptchaError} kind:\"sitekey_mismatch\" — a different siteKey\n *   is already active (single-render-script limitation, see module doc).\n * @throws {RecaptchaError} kind:\"load_failed\" — script failed to load.\n * @throws {RecaptchaError} kind:\"timeout\" — script/global never became ready.\n * @throws {RecaptchaError} kind:\"unavailable\" — no DOM (not a browser).\n */\nexport function loadRecaptcha(\n  siteKey: string,\n  opts?: RecaptchaLoadOptions,\n): Promise<void> {\n  // A different siteKey is already active or loading → hard, typed error.\n  if (activeSiteKey !== null && activeSiteKey !== siteKey) {\n    return Promise.reject(\n      new RecaptchaError(\n        \"sitekey_mismatch\",\n        \"reCAPTCHA is already initialized for a different siteKey. \" +\n          \"The v3 script supports one siteKey per page; remount with the \" +\n          \"original key or reload the page.\",\n      ),\n    );\n  }\n  if (cachedLoad !== null && cachedLoad.siteKey !== siteKey) {\n    return Promise.reject(\n      new RecaptchaError(\n        \"sitekey_mismatch\",\n        \"A reCAPTCHA load for a different siteKey is already in flight.\",\n      ),\n    );\n  }\n\n  if (cachedLoad !== null) return cachedLoad.promise;\n\n  const timeoutMs = opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  const promise = new Promise<void>((resolve, reject) => {\n    let settled = false;\n\n    const settleOk = (): void => {\n      if (settled) return;\n      settled = true;\n      activeSiteKey = siteKey;\n      ownsGlobal = true;\n      resolve();\n    };\n\n    const settleFail = (err: RecaptchaError): void => {\n      if (settled) return;\n      settled = true;\n      // Evict so the NEXT loadRecaptcha starts fresh — a transient failure\n      // must not poison this siteKey for the page's lifetime.\n      cachedLoad = null;\n      removeOwnScriptTag();\n      reject(err);\n    };\n\n    if (typeof document === \"undefined\" || typeof window === \"undefined\") {\n      settleFail(\n        new RecaptchaError(\n          \"unavailable\",\n          \"loadRecaptcha: no DOM available (browser-only API).\",\n        ),\n      );\n      return;\n    }\n\n    const ourTagPresent = document.getElementById(RECAPTCHA_SCRIPT_ID) !== null;\n\n    if (window.grecaptcha) {\n      // A grecaptcha global exists. If WE didn't put it there (no prior\n      // successful self-load AND no tag of ours in the DOM), it's a FOREIGN\n      // global the host page loaded with an unknown ?render= key. We cannot\n      // read that key, so executing our siteKey against it would be the exact\n      // opaque Google-side misfire we promise to prevent — reject instead.\n      if (!ownsGlobal && !ourTagPresent) {\n        settleFail(\n          new RecaptchaError(\n            \"sitekey_mismatch\",\n            \"A reCAPTCHA global was pre-loaded by the host page with an \" +\n              \"unknown site key. The v3 script supports one render key per \" +\n              \"page and its key cannot be introspected, so executing a \" +\n              \"different key against it is unsafe. Load reCAPTCHA only via \" +\n              \"this SDK, or ensure the host uses the same site key.\",\n          ),\n        );\n        return;\n      }\n      // It's ours (or our tag is present) — adopt it, bounding ready().\n      readyWithTimeout(window.grecaptcha, timeoutMs, settleOk, () =>\n        settleFail(\n          new RecaptchaError(\n            \"timeout\",\n            `grecaptcha.ready() did not fire within ${timeoutMs}ms (reCAPTCHA runtime blocked).`,\n          ),\n        ),\n      );\n      return;\n    }\n\n    if (ourTagPresent) {\n      // Our tag exists but grecaptcha isn't up yet (still loading, or a stale\n      // tag from an earlier failure mode). Poll — BOUNDED — then ALSO bound\n      // the subsequent ready() with the remaining budget.\n      const startedAt = Date.now();\n      const poll = setInterval(() => {\n        if (window.grecaptcha) {\n          clearInterval(poll);\n          const remaining = Math.max(timeoutMs - (Date.now() - startedAt), 0);\n          readyWithTimeout(window.grecaptcha, remaining, settleOk, () =>\n            settleFail(\n              new RecaptchaError(\n                \"timeout\",\n                `grecaptcha.ready() did not fire within the ${timeoutMs}ms budget.`,\n              ),\n            ),\n          );\n          return;\n        }\n        if (Date.now() - startedAt >= timeoutMs) {\n          clearInterval(poll);\n          settleFail(\n            new RecaptchaError(\n              \"timeout\",\n              `reCAPTCHA script tag present but grecaptcha did not appear within ${timeoutMs}ms.`,\n            ),\n          );\n        }\n      }, POLL_INTERVAL_MS);\n      return;\n    }\n\n    const script = document.createElement(\"script\");\n    script.id = RECAPTCHA_SCRIPT_ID;\n    script.src = `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKey)}`;\n    script.async = true;\n    script.defer = true;\n\n    const loadTimeout = setTimeout(() => {\n      settleFail(\n        new RecaptchaError(\n          \"timeout\",\n          `reCAPTCHA script did not load within ${timeoutMs}ms.`,\n        ),\n      );\n    }, timeoutMs);\n    const startedAt = Date.now();\n\n    script.onload = () => {\n      clearTimeout(loadTimeout);\n      if (!window.grecaptcha) {\n        settleFail(\n          new RecaptchaError(\n            \"load_failed\",\n            \"reCAPTCHA script loaded but the grecaptcha global was not defined.\",\n          ),\n        );\n        return;\n      }\n      // Bound ready() with the remaining budget — onload succeeding does NOT\n      // guarantee the inner runtime boots.\n      const remaining = Math.max(timeoutMs - (Date.now() - startedAt), 0);\n      readyWithTimeout(window.grecaptcha, remaining, settleOk, () =>\n        settleFail(\n          new RecaptchaError(\n            \"timeout\",\n            `reCAPTCHA loaded but grecaptcha.ready() did not fire within ${timeoutMs}ms.`,\n          ),\n        ),\n      );\n    };\n\n    script.onerror = () => {\n      clearTimeout(loadTimeout);\n      settleFail(\n        new RecaptchaError(\n          \"load_failed\",\n          \"Failed to load the reCAPTCHA script (blocked by an ad blocker / CSP, or offline).\",\n        ),\n      );\n    };\n\n    document.head.appendChild(script);\n  });\n\n  cachedLoad = { siteKey, promise };\n  return promise;\n}\n\n/**\n * Obtain a fresh reCAPTCHA v3 token for the given action.\n * Loads the script if not already loaded. A previous load FAILURE does not\n * block this call — the loader retries from scratch (see loadRecaptcha).\n *\n * @param siteKey - The public reCAPTCHA site key (from the spec endpoint).\n * @param action  - The action name (e.g. \"contact_submit\"). Used for score analytics.\n * @param opts    - Optional load options (timeoutMs — also bounds execute()).\n * @returns A fresh reCAPTCHA token. Valid for ~2 minutes.\n *\n * @throws {RecaptchaError} kind:\"timeout\" if execute() does not settle within\n *   the timeout (Google runtime hung) — bounded so the widget re-enables.\n * @throws {RecaptchaError} on any load failure (see loadRecaptcha kinds) or\n *   an execute() rejection (kind:\"execute_failed\").\n */\nexport async function executeRecaptcha(\n  siteKey: string,\n  action: string,\n  opts?: RecaptchaLoadOptions,\n): Promise<string> {\n  await loadRecaptcha(siteKey, opts);\n\n  if (typeof window === \"undefined\" || !window.grecaptcha) {\n    throw new RecaptchaError(\n      \"unavailable\",\n      \"executeRecaptcha: grecaptcha is not available. Are you running in a browser?\",\n    );\n  }\n\n  const timeoutMs = opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\n  // grecaptcha.execute() can (a) HANG (Google runtime blocked) with no abort\n  // API, or (b) reject with a plain string. Bound it with a timeout so the\n  // widget never stays on \"Sending…\" forever, and wrap every rejection in a\n  // typed RecaptchaError so callers get a consistent taxonomy.\n  const grecaptcha = window.grecaptcha;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_resolve, reject) => {\n    timer = setTimeout(() => {\n      reject(\n        new RecaptchaError(\n          \"timeout\",\n          `reCAPTCHA execute() did not settle within ${timeoutMs}ms (runtime blocked).`,\n        ),\n      );\n    }, timeoutMs);\n  });\n\n  try {\n    return await Promise.race([\n      grecaptcha.execute(siteKey, { action }),\n      timeout,\n    ]);\n  } catch (err) {\n    if (err instanceof RecaptchaError) throw err; // the timeout race\n    const detail =\n      err instanceof Error ? err.message : String(err ?? \"unknown error\");\n    throw new RecaptchaError(\n      \"execute_failed\",\n      `reCAPTCHA execute() failed: ${detail}`,\n    );\n  } finally {\n    if (timer !== undefined) clearTimeout(timer);\n  }\n}\n\n/**\n * Reset ALL loader state: cached load promise, active siteKey, and the\n * injected script tag (removed from the DOM if present). Primarily for\n * tests and for host pages that intentionally tear down reCAPTCHA.\n * Does NOT unset window.grecaptcha (the script may still own it).\n */\nexport function _resetRecaptchaState(): void {\n  cachedLoad = null;\n  activeSiteKey = null;\n  ownsGlobal = false;\n  removeOwnScriptTag();\n}\n"]}

package/dist/chunk-AZE3NPSY.js

@@ -0,0 +1,186 @@
+import { consentDocKey } from './chunk-U56GQITG.js';
+
+// src/consent/controller.ts
+var SCROLL_END_THRESHOLD = 0.99;
+function initialGateSatisfied(level) {
+  return level === "checkbox";
+}
+function gateSatisfiedFor(d) {
+  switch (d.doc.acceptanceLevel) {
+    case "checkbox":
+      return true;
+    case "scroll_then_accept":
+      return d.scrolledToEnd;
+    case "open_then_accept":
+      return d.opened;
+    default:
+      return false;
+  }
+}
+function evidenceOf(d) {
+  switch (d.doc.acceptanceLevel) {
+    case "scroll_then_accept":
+      return { scrolled_to_end: d.scrolledToEnd };
+    case "open_then_accept":
+      return { opened: d.opened };
+    default:
+      return {};
+  }
+}
+function createConsentController(pack) {
+  let docs = (pack?.documents ?? []).map((doc) => ({
+    doc,
+    key: consentDocKey(doc),
+    accepted: false,
+    scrolledToEnd: false,
+    scrollProgress: 0,
+    opened: false
+  }));
+  const listeners = /* @__PURE__ */ new Set();
+  function find(key) {
+    return docs.find((d) => d.key === key);
+  }
+  function snapshot() {
+    const documents = docs.map((d) => ({
+      doc: d.doc,
+      key: d.key,
+      acceptanceLevel: d.doc.acceptanceLevel,
+      required: d.doc.required,
+      gateSatisfied: gateSatisfiedFor(d),
+      accepted: d.accepted,
+      evidence: evidenceOf(d),
+      scrollProgress: d.scrollProgress
+    }));
+    return { documents, complete: computeComplete() };
+  }
+  function computeComplete() {
+    for (const d of docs) {
+      if (d.doc.required && !(d.accepted && gateSatisfiedFor(d))) return false;
+    }
+    return true;
+  }
+  function emit() {
+    const state = snapshot();
+    for (const listener of listeners) listener(state);
+  }
+  return {
+    getState() {
+      return snapshot();
+    },
+    isEmpty() {
+      return docs.length === 0;
+    },
+    isComplete() {
+      return computeComplete();
+    },
+    canSubmit() {
+      return computeComplete();
+    },
+    isGateSatisfied(key) {
+      const d = find(key);
+      return d ? gateSatisfiedFor(d) : false;
+    },
+    reportScrollProgress(key, ratio) {
+      const d = find(key);
+      if (!d || d.doc.acceptanceLevel !== "scroll_then_accept") return;
+      const clamped = Number.isFinite(ratio) ? Math.min(1, Math.max(0, ratio)) : 0;
+      const reachedEnd = clamped >= SCROLL_END_THRESHOLD;
+      const nextProgress = Math.max(d.scrollProgress, clamped);
+      const nextScrolledToEnd = d.scrolledToEnd || reachedEnd;
+      if (nextProgress === d.scrollProgress && nextScrolledToEnd === d.scrolledToEnd) {
+        return;
+      }
+      d.scrollProgress = nextProgress;
+      d.scrolledToEnd = nextScrolledToEnd;
+      emit();
+    },
+    markScrolledToEnd(key) {
+      const d = find(key);
+      if (!d || d.doc.acceptanceLevel !== "scroll_then_accept") return;
+      if (d.scrolledToEnd && d.scrollProgress >= 1) return;
+      d.scrolledToEnd = true;
+      d.scrollProgress = 1;
+      emit();
+    },
+    markOpened(key) {
+      const d = find(key);
+      if (!d || d.doc.acceptanceLevel !== "open_then_accept") return;
+      if (d.opened) return;
+      d.opened = true;
+      emit();
+    },
+    setAccepted(key, accepted) {
+      const d = find(key);
+      if (!d) return;
+      if (accepted) {
+        if (!gateSatisfiedFor(d)) return;
+        if (d.accepted) return;
+        d.accepted = true;
+      } else {
+        if (!d.accepted) return;
+        d.accepted = false;
+      }
+      emit();
+    },
+    buildConsentPayload() {
+      const out = [];
+      for (const d of docs) {
+        const gate = gateSatisfiedFor(d);
+        if (d.doc.required && !(d.accepted && gate)) {
+          throw new Error(
+            `buildConsentPayload: cannot build a consent payload \u2014 required document "${d.key}" (${d.doc.acceptanceLevel}) is not accepted at its gate. Never fabricate acceptance; surface the consent gate to the user first.`
+          );
+        }
+        if (d.accepted) {
+          out.push({
+            legalDocumentId: d.doc.legalDocumentId,
+            versionNo: d.doc.versionNo,
+            accepted: true,
+            evidence: evidenceOf(d)
+          });
+        }
+      }
+      return out;
+    },
+    applyNewPack(newPack) {
+      const prevByKey = new Map(docs.map((d) => [d.key, d]));
+      const resetKeys = [];
+      docs = (newPack?.documents ?? []).map((doc) => {
+        const key = consentDocKey(doc);
+        const prev = prevByKey.get(key);
+        const unchanged = prev !== void 0 && prev.doc.versionNo === doc.versionNo && prev.doc.contentHash === doc.contentHash && prev.doc.acceptanceLevel === doc.acceptanceLevel && prev.doc.required === doc.required;
+        if (unchanged) {
+          return {
+            doc,
+            key,
+            accepted: prev.accepted,
+            scrolledToEnd: prev.scrolledToEnd,
+            scrollProgress: prev.scrollProgress,
+            opened: prev.opened
+          };
+        }
+        if (prev?.accepted) resetKeys.push(key);
+        return {
+          doc,
+          key,
+          accepted: false,
+          scrolledToEnd: false,
+          scrollProgress: 0,
+          opened: false
+        };
+      });
+      emit();
+      return resetKeys;
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    }
+  };
+}
+
+export { SCROLL_END_THRESHOLD, createConsentController, initialGateSatisfied };
+//# sourceMappingURL=chunk-AZE3NPSY.js.map
+//# sourceMappingURL=chunk-AZE3NPSY.js.map

package/dist/chunk-AZE3NPSY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/consent/controller.ts"],"names":[],"mappings":";;;AAuKO,IAAM,oBAAA,GAAuB;AAGpC,SAAS,qBAAqB,KAAA,EAAiC;AAC7D,EAAA,OAAO,KAAA,KAAU,UAAA;AACnB;AAWA,SAAS,iBAAiB,CAAA,EAAyB;AACjD,EAAA,QAAQ,CAAA,CAAE,IAAI,eAAA;AAAiB,IAC7B,KAAK,UAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,oBAAA;AACH,MAAA,OAAO,CAAA,CAAE,aAAA;AAAA,IACX,KAAK,kBAAA;AACH,MAAA,OAAO,CAAA,CAAE,MAAA;AAAA,IACX;AAGE,MAAA,OAAO,KAAA;AAAA;AAEb;AAEA,SAAS,WAAW,CAAA,EAAiC;AACnD,EAAA,QAAQ,CAAA,CAAE,IAAI,eAAA;AAAiB,IAC7B,KAAK,oBAAA;AACH,MAAA,OAAO,EAAE,eAAA,EAAiB,CAAA,CAAE,aAAA,EAAc;AAAA,IAC5C,KAAK,kBAAA;AACH,MAAA,OAAO,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO;AAAA,IAC5B;AACE,MAAA,OAAO,EAAC;AAAA;AAEd;AAiBO,SAAS,wBACd,IAAA,EACmB;AACnB,EAAA,IAAI,QAAuB,IAAA,EAAM,SAAA,IAAa,EAAC,EAAG,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,IAC9D,GAAA;AAAA,IACA,GAAA,EAAK,cAAc,GAAG,CAAA;AAAA,IACtB,QAAA,EAAU,KAAA;AAAA,IACV,aAAA,EAAe,KAAA;AAAA,IACf,cAAA,EAAgB,CAAA;AAAA,IAChB,MAAA,EAAQ;AAAA,GACV,CAAE,CAAA;AAEF,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAA0B;AAEhD,EAAA,SAAS,KAAK,GAAA,EAAsC;AAClD,IAAA,OAAO,KAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,GAAG,CAAA;AAAA,EACvC;AAEA,EAAA,SAAS,QAAA,GAAyB;AAChC,IAAA,MAAM,SAAA,GAA+B,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACpD,KAAK,CAAA,CAAE,GAAA;AAAA,MACP,KAAK,CAAA,CAAE,GAAA;AAAA,MACP,eAAA,EAAiB,EAAE,GAAA,CAAI,eAAA;AAAA,MACvB,QAAA,EAAU,EAAE,GAAA,CAAI,QAAA;AAAA,MAChB,aAAA,EAAe,iBAAiB,CAAC,CAAA;AAAA,MACjC,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,MACtB,gBAAgB,CAAA,CAAE;AAAA,KACpB,CAAE,CAAA;AACF,IAAA,OAAO,EAAE,SAAA,EAAW,QAAA,EAAU,eAAA,EAAgB,EAAE;AAAA,EAClD;AAEA,EAAA,SAAS,eAAA,GAA2B;AAClC,IAAA,KAAA,MAAW,KAAK,IAAA,EAAM;AACpB,MAAA,IAAI,CAAA,CAAE,IAAI,QAAA,IAAY,EAAE,EAAE,QAAA,IAAY,gBAAA,CAAiB,CAAC,CAAA,CAAA,EAAI,OAAO,KAAA;AAAA,IACrE;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,SAAS,IAAA,GAAa;AACpB,IAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,IAAA,KAAA,MAAW,QAAA,IAAY,SAAA,EAAW,QAAA,CAAS,KAAK,CAAA;AAAA,EAClD;AAEA,EAAA,OAAO;AAAA,IACL,QAAA,GAAW;AACT,MAAA,OAAO,QAAA,EAAS;AAAA,IAClB,CAAA;AAAA,IAEA,OAAA,GAAU;AACR,MAAA,OAAO,KAAK,MAAA,KAAW,CAAA;AAAA,IACzB,CAAA;AAAA,IAEA,UAAA,GAAa;AACX,MAAA,OAAO,eAAA,EAAgB;AAAA,IACzB,CAAA;AAAA,IAEA,SAAA,GAAY;AACV,MAAA,OAAO,eAAA,EAAgB;AAAA,IACzB,CAAA;AAAA,IAEA,gBAAgB,GAAA,EAAK;AACnB,MAAA,MAAM,CAAA,GAAI,KAAK,GAAG,CAAA;AAClB,MAAA,OAAO,CAAA,GAAI,gBAAA,CAAiB,CAAC,CAAA,GAAI,KAAA;AAAA,IACnC,CAAA;AAAA,IAEA,oBAAA,CAAqB,KAAK,KAAA,EAAO;AAC/B,MAAA,MAAM,CAAA,GAAI,KAAK,GAAG,CAAA;AAClB,MAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,CAAI,oBAAoB,oBAAA,EAAsB;AAC1D,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,GACjC,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAA,GAC9B,CAAA;AACJ,MAAA,MAAM,aAAa,OAAA,IAAW,oBAAA;AAI9B,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,gBAAgB,OAAO,CAAA;AACvD,MAAA,MAAM,iBAAA,GAAoB,EAAE,aAAA,IAAiB,UAAA;AAC7C,MAAA,IACE,YAAA,KAAiB,CAAA,CAAE,cAAA,IACnB,iBAAA,KAAsB,EAAE,aAAA,EACxB;AACA,QAAA;AAAA,MACF;AACA,MAAA,CAAA,CAAE,cAAA,GAAiB,YAAA;AACnB,MAAA,CAAA,CAAE,aAAA,GAAgB,iBAAA;AAClB,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,IAEA,kBAAkB,GAAA,EAAK;AACrB,MAAA,MAAM,CAAA,GAAI,KAAK,GAAG,CAAA;AAClB,MAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,CAAI,oBAAoB,oBAAA,EAAsB;AAC1D,MAAA,IAAI,CAAA,CAAE,aAAA,IAAiB,CAAA,CAAE,cAAA,IAAkB,CAAA,EAAG;AAC9C,MAAA,CAAA,CAAE,aAAA,GAAgB,IAAA;AAClB,MAAA,CAAA,CAAE,cAAA,GAAiB,CAAA;AACnB,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,IAEA,WAAW,GAAA,EAAK;AACd,MAAA,MAAM,CAAA,GAAI,KAAK,GAAG,CAAA;AAClB,MAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,GAAA,CAAI,oBAAoB,kBAAA,EAAoB;AACxD,MAAA,IAAI,EAAE,MAAA,EAAQ;AACd,MAAA,CAAA,CAAE,MAAA,GAAS,IAAA;AACX,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,IAEA,WAAA,CAAY,KAAK,QAAA,EAAU;AACzB,MAAA,MAAM,CAAA,GAAI,KAAK,GAAG,CAAA;AAClB,MAAA,IAAI,CAAC,CAAA,EAAG;AACR,MAAA,IAAI,QAAA,EAAU;AAIZ,QAAA,IAAI,CAAC,gBAAA,CAAiB,CAAC,CAAA,EAAG;AAC1B,QAAA,IAAI,EAAE,QAAA,EAAU;AAChB,QAAA,CAAA,CAAE,QAAA,GAAW,IAAA;AAAA,MACf,CAAA,MAAO;AACL,QAAA,IAAI,CAAC,EAAE,QAAA,EAAU;AACjB,QAAA,CAAA,CAAE,QAAA,GAAW,KAAA;AAAA,MACf;AACA,MAAA,IAAA,EAAK;AAAA,IACP,CAAA;AAAA,IAEA,mBAAA,GAAsB;AACpB,MAAA,MAAM,MAA+B,EAAC;AACtC,MAAA,KAAA,MAAW,KAAK,IAAA,EAAM;AACpB,QAAA,MAAM,IAAA,GAAO,iBAAiB,CAAC,CAAA;AAC/B,QAAA,IAAI,EAAE,GAAA,CAAI,QAAA,IAAY,EAAE,CAAA,CAAE,YAAY,IAAA,CAAA,EAAO;AAC3C,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,iFAA4E,CAAA,CAAE,GAAG,CAAA,GAAA,EAAM,CAAA,CAAE,IAAI,eAAe,CAAA,sGAAA;AAAA,WAC9G;AAAA,QACF;AAIA,QAAA,IAAI,EAAE,QAAA,EAAU;AACd,UAAA,GAAA,CAAI,IAAA,CAAK;AAAA,YACP,eAAA,EAAiB,EAAE,GAAA,CAAI,eAAA;AAAA,YACvB,SAAA,EAAW,EAAE,GAAA,CAAI,SAAA;AAAA,YACjB,QAAA,EAAU,IAAA;AAAA,YACV,QAAA,EAAU,WAAW,CAAC;AAAA,WACvB,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,GAAA;AAAA,IACT,CAAA;AAAA,IAEA,aAAa,OAAA,EAAS;AACpB,MAAA,MAAM,SAAA,GAAY,IAAI,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,GAAA,EAAK,CAAC,CAAC,CAAC,CAAA;AACrD,MAAA,MAAM,YAAsB,EAAC;AAE7B,MAAA,IAAA,GAAA,CAAQ,SAAS,SAAA,IAAa,EAAC,EAAG,GAAA,CAAI,CAAC,GAAA,KAAQ;AAC7C,QAAA,MAAM,GAAA,GAAM,cAAc,GAAG,CAAA;AAC7B,QAAA,MAAM,IAAA,GAAO,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAU9B,QAAA,MAAM,SAAA,GACJ,SAAS,MAAA,IACT,IAAA,CAAK,IAAI,SAAA,KAAc,GAAA,CAAI,aAC3B,IAAA,CAAK,GAAA,CAAI,gBAAgB,GAAA,CAAI,WAAA,IAC7B,KAAK,GAAA,CAAI,eAAA,KAAoB,IAAI,eAAA,IACjC,IAAA,CAAK,GAAA,CAAI,QAAA,KAAa,GAAA,CAAI,QAAA;AAC5B,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,OAAO;AAAA,YACL,GAAA;AAAA,YACA,GAAA;AAAA,YACA,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,eAAe,IAAA,CAAK,aAAA;AAAA,YACpB,gBAAgB,IAAA,CAAK,cAAA;AAAA,YACrB,QAAQ,IAAA,CAAK;AAAA,WACf;AAAA,QACF;AAEA,QAAA,IAAI,IAAA,EAAM,QAAA,EAAU,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA;AACtC,QAAA,OAAO;AAAA,UACL,GAAA;AAAA,UACA,GAAA;AAAA,UACA,QAAA,EAAU,KAAA;AAAA,UACV,aAAA,EAAe,KAAA;AAAA,UACf,cAAA,EAAgB,CAAA;AAAA,UAChB,MAAA,EAAQ;AAAA,SACV;AAAA,MACF,CAAC,CAAA;AAED,MAAA,IAAA,EAAK;AACL,MAAA,OAAO,SAAA;AAAA,IACT,CAAA;AAAA,IAEA,UAAU,QAAA,EAAU;AAClB,MAAA,SAAA,CAAU,IAAI,QAAQ,CAAA;AACtB,MAAA,OAAO,MAAM;AACX,QAAA,SAAA,CAAU,OAAO,QAAQ,CAAA;AAAA,MAC3B,CAAA;AAAA,IACF;AAAA,GACF;AACF","file":"chunk-AZE3NPSY.js","sourcesContent":["/**\n * Headless ConsentPack controller (D543 §2/§5).\n *\n * Framework-agnostic consent state for the signup flow's consent stage.\n * Exposes, per document: { doc, accepted, gateSatisfied, evidence } and\n * enforces the per-document ACCEPTANCE-LEVEL GATE (D543 §2):\n *\n *   - checkbox           — accept is enable-able immediately (basic clickwrap).\n *   - scroll_then_accept — accept is DISABLED until the rendered doc is\n *                          scrolled to the end (evidence.scrolled_to_end).\n *   - open_then_accept   — accept is DISABLED until the doc is opened/viewed\n *                          (evidence.opened).\n *\n * The gate is a UX guard (D543 §5: \"Client evidence is UX-only; the server\n * re-validates\"). But the controller ENFORCES it locally so a UI cannot\n * present an accept affordance the gate hasn't unlocked, and so a headless\n * caller cannot assemble a payload that claims an unsatisfied gate.\n *\n * COMPLIANCE-CRITICAL (same discipline as the stepper's consent-fabrication\n * fix): `accept(key)` is REFUSED when the gate is not yet satisfied, and\n * `buildConsentPayload()` THROWS if ANY required doc is not accepted at its\n * gate. The controller NEVER fabricates acceptance or evidence — it only\n * records what the user genuinely did. `isComplete()` is true only when every\n * REQUIRED doc is accepted with its gate satisfied.\n *\n * Same subscribe/mutate contract as the dynamic stepper so the default\n * component layer renders it and tenants can build their own UI against the\n * exported control surface (D543 §5 headless flexibility).\n */\n\nimport {\n  consentDocKey,\n  type AcceptanceLevel,\n  type ConsentDocument,\n  type ConsentPack,\n} from \"./model.js\";\n\n/**\n * Evidence for a document's gate. Only the field relevant to the doc's\n * acceptanceLevel is ever set true — a checkbox doc carries no evidence.\n * Mirrors the D543 §4 submit `evidence:{scrolled_to_end?, opened?}` — these\n * two keys stay snake_case (the ONLY snake bits in the consent wire shape).\n */\nexport interface ConsentEvidence {\n  scrolled_to_end?: boolean;\n  opened?: boolean;\n}\n\n/**\n * Per-document view of the consent state — the framework-agnostic \"row model\"\n * a consumer binds their own rendering to (TanStack-style). NO DOM here.\n */\nexport interface ConsentDocState {\n  /** The document descriptor (from the spec's consentPack). */\n  doc: ConsentDocument;\n  /** Stable client-side key (docType | custom:<customKey>). */\n  key: string;\n  /** The document's acceptance level, surfaced for convenience. */\n  acceptanceLevel: AcceptanceLevel;\n  /** Whether the document is required, surfaced for convenience. */\n  required: boolean;\n  /**\n   * Whether the acceptance-level GATE is satisfied — i.e. accept is\n   * enable-able. checkbox ⇒ always true; scroll ⇒ scrolled-to-end;\n   * open ⇒ opened.\n   */\n  gateSatisfied: boolean;\n  /** Whether the user has genuinely accepted (only possible past the gate). */\n  accepted: boolean;\n  /** The evidence collected so far (drives gateSatisfied for gated levels). */\n  evidence: ConsentEvidence;\n  /**\n   * Scroll progress in [0,1] for a `scroll_then_accept` doc (0 for other\n   * levels). A consumer's scroll handler feeds this via reportScrollProgress;\n   * reaching ~1 flips gateSatisfied. Purely a UX-progress read (e.g. a\n   * progress bar); the gate itself keys on scrolledToEnd evidence.\n   */\n  scrollProgress: number;\n}\n\nexport interface ConsentState {\n  /** All documents in spec order. */\n  documents: ConsentDocState[];\n  /** True iff every REQUIRED doc is accepted with its gate satisfied. */\n  complete: boolean;\n}\n\nexport type ConsentStateListener = (state: ConsentState) => void;\n\n/**\n * One element of the D543 §4 submit `consent.documents` array — CANONICAL\n * camelCase (legalDocumentId, versionNo, accepted); `evidence` keys stay\n * snake_case (scrolled_to_end / opened).\n */\nexport interface ConsentSubmitDocument {\n  legalDocumentId: string;\n  versionNo: number;\n  accepted: true;\n  evidence: ConsentEvidence;\n}\n\nexport interface ConsentController {\n  getState(): ConsentState;\n  /** True iff there are no documents to consent to (stage is skippable). */\n  isEmpty(): boolean;\n  /** True iff every required doc is accepted with its gate satisfied. */\n  isComplete(): boolean;\n  /**\n   * Alias of isComplete() — TanStack-style ergonomic read: \"can the consumer\n   * submit the consent step?\" (all required docs accepted at their gate).\n   */\n  canSubmit(): boolean;\n  /**\n   * Whether the given document's gate is satisfied (accept is enable-able).\n   * Unknown key ⇒ false.\n   */\n  isGateSatisfied(key: string): boolean;\n  /**\n   * Report scroll progress in [0,1] for a `scroll_then_accept` doc — the\n   * consumer's OWN scroll handler feeds this (e.g. on its same-origin scroll\n   * container). Ratio ≥ SCROLL_END_THRESHOLD marks scrolled-to-end (opens the\n   * gate); otherwise it just updates scrollProgress for UX. Clamped to [0,1].\n   * No-op for other levels and unknown keys.\n   */\n  reportScrollProgress(key: string, ratio: number): void;\n  /**\n   * Mark a `scroll_then_accept` doc as scrolled to the end (evidence). No-op\n   * for other levels (their gate isn't scroll-driven) and unknown keys.\n   * Equivalent to reportScrollProgress(key, 1).\n   */\n  markScrolledToEnd(key: string): void;\n  /**\n   * Mark an `open_then_accept` doc as opened/viewed (evidence). No-op for\n   * other levels and unknown keys.\n   */\n  markOpened(key: string): void;\n  /**\n   * Set a document's accepted flag. Accepting is REFUSED (accepted stays\n   * false) when the gate is not satisfied — a UI cannot record acceptance a\n   * user could not legitimately give. Unaccepting is always allowed.\n   */\n  setAccepted(key: string, accepted: boolean): void;\n  /**\n   * Build the D543 §4 submit array from the ACTUAL consent state.\n   *\n   * @throws {Error} if any REQUIRED doc is not accepted with its gate\n   *   satisfied — never fabricates acceptance/evidence (compliance-critical).\n   *   Optional docs that were accepted ARE included; optional docs left\n   *   unaccepted are omitted.\n   */\n  buildConsentPayload(): ConsentSubmitDocument[];\n  /**\n   * Swap in a refetched consentPack after 409 consent_stale. For every doc\n   * whose (versionNo, contentHash) CHANGED, acceptance + evidence are\n   * RESET (re-acceptance required — NEVER auto-accept a changed doc, D543 §4\n   * / task §4). Unchanged docs keep their state. Returns the keys whose\n   * consent was reset so the UI can highlight what changed.\n   */\n  applyNewPack(pack: ConsentPack | undefined): string[];\n  subscribe(listener: ConsentStateListener): () => void;\n}\n\n/**\n * Scroll ratio at/above which a `scroll_then_accept` doc counts as\n * scrolled-to-end. Slightly below 1 so sub-pixel rounding on the consumer's\n * scroll math (scrollTop+clientHeight vs scrollHeight) still opens the gate.\n */\nexport const SCROLL_END_THRESHOLD = 0.99;\n\n/** checkbox docs have no gate; gated levels start unsatisfied. */\nfunction initialGateSatisfied(level: AcceptanceLevel): boolean {\n  return level === \"checkbox\";\n}\n\ninterface InternalDoc {\n  doc: ConsentDocument;\n  key: string;\n  accepted: boolean;\n  scrolledToEnd: boolean;\n  scrollProgress: number;\n  opened: boolean;\n}\n\nfunction gateSatisfiedFor(d: InternalDoc): boolean {\n  switch (d.doc.acceptanceLevel) {\n    case \"checkbox\":\n      return true;\n    case \"scroll_then_accept\":\n      return d.scrolledToEnd;\n    case \"open_then_accept\":\n      return d.opened;\n    default:\n      // Unreachable — the level enum is exhaustive and validated at parse.\n      // Fail CLOSED: an unknown level is never auto-satisfied.\n      return false;\n  }\n}\n\nfunction evidenceOf(d: InternalDoc): ConsentEvidence {\n  switch (d.doc.acceptanceLevel) {\n    case \"scroll_then_accept\":\n      return { scrolled_to_end: d.scrolledToEnd };\n    case \"open_then_accept\":\n      return { opened: d.opened };\n    default:\n      return {};\n  }\n}\n\n/**\n * Create a headless consent controller for a spec's consentPack.\n *\n * @param pack the spec's `consentPack` (or undefined ⇒ an empty controller;\n *   the stage is skipped and `isComplete()` / `isEmpty()` are true).\n *\n * @example\n * ```ts\n * const consent = createConsentController(spec.consentPack);\n * consent.subscribe(render);\n * consent.markScrolledToEnd(\"tos\");   // scroll_then_accept gate\n * consent.setAccepted(\"tos\", true);   // now allowed\n * const docs = consent.buildConsentPayload(); // throws if any required unmet\n * ```\n */\nexport function createConsentController(\n  pack: ConsentPack | undefined,\n): ConsentController {\n  let docs: InternalDoc[] = (pack?.documents ?? []).map((doc) => ({\n    doc,\n    key: consentDocKey(doc),\n    accepted: false,\n    scrolledToEnd: false,\n    scrollProgress: 0,\n    opened: false,\n  }));\n\n  const listeners = new Set<ConsentStateListener>();\n\n  function find(key: string): InternalDoc | undefined {\n    return docs.find((d) => d.key === key);\n  }\n\n  function snapshot(): ConsentState {\n    const documents: ConsentDocState[] = docs.map((d) => ({\n      doc: d.doc,\n      key: d.key,\n      acceptanceLevel: d.doc.acceptanceLevel,\n      required: d.doc.required,\n      gateSatisfied: gateSatisfiedFor(d),\n      accepted: d.accepted,\n      evidence: evidenceOf(d),\n      scrollProgress: d.scrollProgress,\n    }));\n    return { documents, complete: computeComplete() };\n  }\n\n  function computeComplete(): boolean {\n    for (const d of docs) {\n      if (d.doc.required && !(d.accepted && gateSatisfiedFor(d))) return false;\n    }\n    return true;\n  }\n\n  function emit(): void {\n    const state = snapshot();\n    for (const listener of listeners) listener(state);\n  }\n\n  return {\n    getState() {\n      return snapshot();\n    },\n\n    isEmpty() {\n      return docs.length === 0;\n    },\n\n    isComplete() {\n      return computeComplete();\n    },\n\n    canSubmit() {\n      return computeComplete();\n    },\n\n    isGateSatisfied(key) {\n      const d = find(key);\n      return d ? gateSatisfiedFor(d) : false;\n    },\n\n    reportScrollProgress(key, ratio) {\n      const d = find(key);\n      if (!d || d.doc.acceptanceLevel !== \"scroll_then_accept\") return;\n      const clamped = Number.isFinite(ratio)\n        ? Math.min(1, Math.max(0, ratio))\n        : 0;\n      const reachedEnd = clamped >= SCROLL_END_THRESHOLD;\n      // Progress never regresses below a prior high-water mark that already\n      // opened the gate — once scrolled-to-end, a scroll-back must not re-lock\n      // acceptance (matches how clickwrap gates latch).\n      const nextProgress = Math.max(d.scrollProgress, clamped);\n      const nextScrolledToEnd = d.scrolledToEnd || reachedEnd;\n      if (\n        nextProgress === d.scrollProgress &&\n        nextScrolledToEnd === d.scrolledToEnd\n      ) {\n        return;\n      }\n      d.scrollProgress = nextProgress;\n      d.scrolledToEnd = nextScrolledToEnd;\n      emit();\n    },\n\n    markScrolledToEnd(key) {\n      const d = find(key);\n      if (!d || d.doc.acceptanceLevel !== \"scroll_then_accept\") return;\n      if (d.scrolledToEnd && d.scrollProgress >= 1) return;\n      d.scrolledToEnd = true;\n      d.scrollProgress = 1;\n      emit();\n    },\n\n    markOpened(key) {\n      const d = find(key);\n      if (!d || d.doc.acceptanceLevel !== \"open_then_accept\") return;\n      if (d.opened) return;\n      d.opened = true;\n      emit();\n    },\n\n    setAccepted(key, accepted) {\n      const d = find(key);\n      if (!d) return;\n      if (accepted) {\n        // COMPLIANCE: refuse to record acceptance a user could not give —\n        // the gate must be satisfied first. A UI that offers accept before\n        // the gate is unlocked cannot fabricate consent through this control.\n        if (!gateSatisfiedFor(d)) return;\n        if (d.accepted) return;\n        d.accepted = true;\n      } else {\n        if (!d.accepted) return;\n        d.accepted = false;\n      }\n      emit();\n    },\n\n    buildConsentPayload() {\n      const out: ConsentSubmitDocument[] = [];\n      for (const d of docs) {\n        const gate = gateSatisfiedFor(d);\n        if (d.doc.required && !(d.accepted && gate)) {\n          throw new Error(\n            `buildConsentPayload: cannot build a consent payload — required document \"${d.key}\" (${d.doc.acceptanceLevel}) is not accepted at its gate. Never fabricate acceptance; surface the consent gate to the user first.`,\n          );\n        }\n        // Include every ACCEPTED doc (required or optional). An accepted doc\n        // always has its gate satisfied (setAccepted refuses otherwise), so\n        // its evidence is trustworthy.\n        if (d.accepted) {\n          out.push({\n            legalDocumentId: d.doc.legalDocumentId,\n            versionNo: d.doc.versionNo,\n            accepted: true,\n            evidence: evidenceOf(d),\n          });\n        }\n      }\n      return out;\n    },\n\n    applyNewPack(newPack) {\n      const prevByKey = new Map(docs.map((d) => [d.key, d]));\n      const resetKeys: string[] = [];\n\n      docs = (newPack?.documents ?? []).map((doc) => {\n        const key = consentDocKey(doc);\n        const prev = prevByKey.get(key);\n        // A doc is UNCHANGED iff the same key AND the same live version AND the\n        // same content hash AND the same GATE SHAPE (acceptanceLevel + required).\n        // Only then may prior acceptance carry over. A gate ESCALATION at the\n        // same version/hash (e.g. checkbox → scroll_then_accept, or required\n        // flipping true) would otherwise keep accepted:true with an unsatisfied\n        // gate — violating the \"an accepted doc always has its gate satisfied\"\n        // invariant and making buildConsentPayload emit accepted:true with\n        // insufficient evidence → an unrecoverable server-side gate rejection\n        // (P2). Treat any gate-shape change as \"changed\" → reset + re-lock.\n        const unchanged =\n          prev !== undefined &&\n          prev.doc.versionNo === doc.versionNo &&\n          prev.doc.contentHash === doc.contentHash &&\n          prev.doc.acceptanceLevel === doc.acceptanceLevel &&\n          prev.doc.required === doc.required;\n        if (unchanged) {\n          return {\n            doc,\n            key,\n            accepted: prev.accepted,\n            scrolledToEnd: prev.scrolledToEnd,\n            scrollProgress: prev.scrollProgress,\n            opened: prev.opened,\n          };\n        }\n        // Changed (or new) doc → require fresh acceptance. NEVER auto-accept.\n        if (prev?.accepted) resetKeys.push(key);\n        return {\n          doc,\n          key,\n          accepted: false,\n          scrolledToEnd: false,\n          scrollProgress: 0,\n          opened: false,\n        };\n      });\n\n      emit();\n      return resetKeys;\n    },\n\n    subscribe(listener) {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n  };\n}\n\n/** Re-export the gate-init helper for the widget's initial affordance state. */\nexport { initialGateSatisfied };\n"]}