@nommos/core 0.0.39 → 0.0.42

package/src/lib/consent-manager.js

@@ -0,0 +1,828 @@
+import { CMP_BROADCAST_CHANNEL, CMP_COOKIE_PREFIX, CMP_STORAGE_PREFIX, } from './constants';
+import { createElement, escapeHtml, sanitizeCssColor, sanitizeCssFontFamily, sanitizeUrl } from './dom-safe';
+import { resolveLanguage } from './i18n';
+const ALL_CATEGORIES = ['necessary', 'analytics', 'sessionRecording', 'marketing'];
+const OPTIONAL_CATEGORIES = ['analytics', 'sessionRecording', 'marketing'];
+const DEFAULT_POLICY_URL = '/privacy-policy';
+const CMP_COPY = {
+    en: {
+        bannerTitle: 'We value your privacy',
+        bannerDescription: 'We use cookies and similar technologies to enhance your experience, analyse site traffic, record sessions to understand how our platform is used, and support our marketing efforts. You can accept all, reject optional cookies, or customise your preferences.',
+        preferencesTitle: 'Customise preferences',
+        preferencesDescription: 'Manage your cookie preferences. You can enable or disable each category except those that are strictly necessary.',
+        manageTitle: 'Privacy preferences',
+        manageDescription: 'Manage your cookie and similar technology preferences. You can update your choices at any time.',
+        reconsentTitle: 'We have updated our privacy settings',
+        reconsentDescription: 'We have changed our privacy settings and published an updated policy. Please review your choices to continue.',
+        necessaryName: 'Necessary',
+        necessaryDescription: 'These cookies are essential for the website to function and cannot be disabled. They enable core features such as security, network management and accessibility.',
+        analyticsName: 'Analytics',
+        analyticsDescription: 'These cookies help us understand how visitors use our site, which pages are viewed and how people navigate, so that we can improve it.',
+        sessionRecordingName: 'Session recording',
+        sessionRecordingDescription: 'These cookies record interactions on our site, such as clicks and scrolling, to help us identify problems and improve usability.',
+        marketingName: 'Marketing',
+        marketingDescription: 'These cookies are used to show relevant advertising and to measure the effectiveness of our marketing campaigns across sites and channels.',
+        alwaysOn: 'Always on',
+        on: 'On',
+        off: 'Off',
+        acceptAll: 'Accept all',
+        rejectOptional: 'Reject optional',
+        customize: 'Customise',
+        savePreferences: 'Save preferences',
+        saveChanges: 'Save changes',
+        reviewChoices: 'Review choices',
+        manage: 'Manage',
+        close: 'Close',
+        learnMore: 'Learn more',
+        privacyChoices: 'Your privacy',
+        choicesActive: 'Your choices are active',
+        viewReceipt: 'View full receipt',
+        updatedNow: 'Updated just now',
+        browserSaveHint: 'Your choices will be saved in this browser.',
+        poweredBy: 'Powered by',
+        privacyPolicy: 'Privacy Policy',
+        cookiePolicy: 'Cookie Policy',
+        consentVersionLabel: 'Consent version',
+        whatsChanged: 'What has changed',
+        changeSummary: 'We have updated how we use cookies and similar technologies. These preferences help us improve performance, personalisation and product insight.',
+        expiredTitle: 'Your privacy choices have expired',
+        expiredDescription: 'It has been a while since you set your preferences. Please confirm your choices to continue.',
+        gpcNotice: 'Global Privacy Control',
+        gpcDescription: 'Your browser is sending a Global Privacy Control signal, so marketing is switched off.',
+        savedTitle: 'Your privacy preferences were saved',
+        savedDescription: 'Your settings are now active.',
+        updatedTitle: 'Preferences updated',
+        updatedDescription: 'Your privacy preferences were saved.',
+        settingsSaveError: 'We could not save your preferences. Please try again.',
+        configLoadError: 'Privacy settings could not be loaded.',
+    },
+    fr: {
+        bannerTitle: 'Nous respectons votre vie privée',
+        bannerDescription: 'Nous utilisons des cookies et des technologies similaires pour améliorer votre expérience, analyser le trafic, enregistrer les sessions afin de comprendre l’utilisation de notre plateforme et soutenir nos actions marketing. Vous pouvez tout accepter, refuser les cookies optionnels ou personnaliser vos préférences.',
+        preferencesTitle: 'Personnaliser les préférences',
+        preferencesDescription: 'Gérez vos préférences de cookies. Vous pouvez activer ou désactiver chaque catégorie, à l’exception de celles qui sont strictement nécessaires.',
+        manageTitle: 'Préférences de confidentialité',
+        manageDescription: 'Gérez vos préférences en matière de cookies et de technologies similaires. Vous pouvez modifier vos choix à tout moment.',
+        reconsentTitle: 'Nous avons mis à jour nos paramètres de confidentialité',
+        reconsentDescription: 'Nous avons modifié nos paramètres de confidentialité et publié une politique mise à jour. Veuillez vérifier vos choix pour continuer.',
+        necessaryName: 'Nécessaires',
+        necessaryDescription: 'Ces cookies sont indispensables au fonctionnement du site et ne peuvent pas être désactivés. Ils permettent des fonctions essentielles telles que la sécurité, la gestion du réseau et l’accessibilité.',
+        analyticsName: 'Mesure d’audience',
+        analyticsDescription: 'Ces cookies nous aident à comprendre comment les visiteurs utilisent notre site, quelles pages sont consultées et comment ils naviguent, afin de l’améliorer.',
+        sessionRecordingName: 'Enregistrement de session',
+        sessionRecordingDescription: 'Ces cookies enregistrent les interactions sur notre site, comme les clics et le défilement, pour nous aider à repérer les problèmes et améliorer l’ergonomie.',
+        marketingName: 'Marketing',
+        marketingDescription: 'Ces cookies servent à afficher des publicités pertinentes et à mesurer l’efficacité de nos campagnes marketing sur différents sites et canaux.',
+        alwaysOn: 'Toujours activé',
+        on: 'Activé',
+        off: 'Désactivé',
+        acceptAll: 'Tout accepter',
+        rejectOptional: 'Refuser les optionnels',
+        customize: 'Personnaliser',
+        savePreferences: 'Enregistrer les préférences',
+        saveChanges: 'Enregistrer les modifications',
+        reviewChoices: 'Vérifier mes choix',
+        manage: 'Gérer',
+        close: 'Fermer',
+        learnMore: 'En savoir plus',
+        privacyChoices: 'Votre confidentialité',
+        choicesActive: 'Vos choix sont actifs',
+        viewReceipt: 'Voir le reçu complet',
+        updatedNow: 'Mis à jour à l’instant',
+        browserSaveHint: 'Vos choix seront enregistrés dans ce navigateur.',
+        poweredBy: 'Propulsé par',
+        privacyPolicy: 'Politique de confidentialité',
+        cookiePolicy: 'Politique relative aux cookies',
+        consentVersionLabel: 'Version du consentement',
+        whatsChanged: 'Ce qui a changé',
+        changeSummary: 'Nous avons modifié notre utilisation des cookies et des technologies similaires. Ces préférences nous aident à améliorer les performances, la personnalisation et la connaissance de nos produits.',
+        expiredTitle: 'Vos choix de confidentialité ont expiré',
+        expiredDescription: 'Vos préférences datent d’un certain temps. Veuillez confirmer vos choix pour continuer.',
+        gpcNotice: 'Global Privacy Control',
+        gpcDescription: 'Votre navigateur envoie un signal Global Privacy Control : le marketing est donc désactivé.',
+        savedTitle: 'Vos préférences de confidentialité ont été enregistrées',
+        savedDescription: 'Vos paramètres sont désormais actifs.',
+        updatedTitle: 'Préférences mises à jour',
+        updatedDescription: 'Vos préférences de confidentialité ont été enregistrées.',
+        settingsSaveError: 'Nous n’avons pas pu enregistrer vos préférences. Veuillez réessayer.',
+        configLoadError: 'Les paramètres de confidentialité n’ont pas pu être chargés.',
+    },
+    es: {
+        bannerTitle: 'Valoramos tu privacidad',
+        bannerDescription: 'Utilizamos cookies y tecnologías similares para mejorar tu experiencia, analizar el tráfico del sitio, grabar sesiones para entender cómo se usa nuestra plataforma y apoyar nuestras acciones de marketing. Puedes aceptar todo, rechazar las cookies opcionales o personalizar tus preferencias.',
+        preferencesTitle: 'Personalizar preferencias',
+        preferencesDescription: 'Gestiona tus preferencias de cookies. Puedes activar o desactivar cada categoría, excepto las estrictamente necesarias.',
+        manageTitle: 'Preferencias de privacidad',
+        manageDescription: 'Gestiona tus preferencias de cookies y tecnologías similares. Puedes actualizar tus decisiones en cualquier momento.',
+        reconsentTitle: 'Hemos actualizado nuestra configuración de privacidad',
+        reconsentDescription: 'Hemos cambiado nuestra configuración de privacidad y publicado una política actualizada. Revisa tus opciones para continuar.',
+        necessaryName: 'Necesarias',
+        necessaryDescription: 'Estas cookies son esenciales para que el sitio funcione y no se pueden desactivar. Habilitan funciones básicas como la seguridad, la gestión de red y la accesibilidad.',
+        analyticsName: 'Analítica',
+        analyticsDescription: 'Estas cookies nos ayudan a entender cómo usan nuestro sitio los visitantes, qué páginas se ven y cómo navegan, para poder mejorarlo.',
+        sessionRecordingName: 'Grabación de sesión',
+        sessionRecordingDescription: 'Estas cookies registran las interacciones en nuestro sitio, como clics y desplazamientos, para ayudarnos a detectar problemas y mejorar la usabilidad.',
+        marketingName: 'Marketing',
+        marketingDescription: 'Estas cookies se utilizan para mostrar publicidad relevante y medir la eficacia de nuestras campañas de marketing en distintos sitios y canales.',
+        alwaysOn: 'Siempre activo',
+        on: 'Activado',
+        off: 'Desactivado',
+        acceptAll: 'Aceptar todo',
+        rejectOptional: 'Rechazar opcionales',
+        customize: 'Personalizar',
+        savePreferences: 'Guardar preferencias',
+        saveChanges: 'Guardar cambios',
+        reviewChoices: 'Revisar opciones',
+        manage: 'Gestionar',
+        close: 'Cerrar',
+        learnMore: 'Más información',
+        privacyChoices: 'Tu privacidad',
+        choicesActive: 'Tus opciones están activas',
+        viewReceipt: 'Ver el recibo completo',
+        updatedNow: 'Actualizado ahora mismo',
+        browserSaveHint: 'Tus opciones se guardarán en este navegador.',
+        poweredBy: 'Con la tecnología de',
+        privacyPolicy: 'Política de privacidad',
+        cookiePolicy: 'Política de cookies',
+        consentVersionLabel: 'Versión del consentimiento',
+        whatsChanged: 'Qué ha cambiado',
+        changeSummary: 'Hemos actualizado cómo usamos las cookies y tecnologías similares. Estas preferencias nos ayudan a mejorar el rendimiento, la personalización y el conocimiento del producto.',
+        expiredTitle: 'Tus opciones de privacidad han caducado',
+        expiredDescription: 'Ha pasado un tiempo desde que configuraste tus preferencias. Confirma tus opciones para continuar.',
+        gpcNotice: 'Global Privacy Control',
+        gpcDescription: 'Tu navegador envía una señal de Global Privacy Control, por lo que marketing está desactivado.',
+        savedTitle: 'Tus preferencias de privacidad se han guardado',
+        savedDescription: 'Tu configuración ya está activa.',
+        updatedTitle: 'Preferencias actualizadas',
+        updatedDescription: 'Tus preferencias de privacidad se han guardado.',
+        settingsSaveError: 'No hemos podido guardar tus preferencias. Inténtalo de nuevo.',
+        configLoadError: 'No se ha podido cargar la configuración de privacidad.',
+    },
+};
+/** Opt-out model: a visitor who has not decided yet counts as having granted everything. */
+function allGranted() {
+    return { necessary: true, analytics: true, sessionRecording: true, marketing: true };
+}
+/** Every optional category refused; `necessary` is not refusable. */
+function optionalRefused() {
+    return { necessary: true, analytics: false, sessionRecording: false, marketing: false };
+}
+export class ConsentManager {
+    constructor(siteKey, subjectId, cmpEndpoint, callbacks) {
+        this.siteKey = siteKey;
+        this.subjectId = subjectId;
+        this.cmpEndpoint = cmpEndpoint;
+        this.callbacks = callbacks;
+        this.cmpConfig = null;
+        this.currentState = null;
+        this.root = null;
+        this.toast = null;
+        this.summary = null;
+        this.channel = null;
+        this.storageListener = (event) => {
+            if (event.key !== this.storageKey || !event.newValue)
+                return;
+            try {
+                this.handleExternalState(JSON.parse(event.newValue));
+            }
+            catch {
+                // Ignore malformed cross-tab payloads.
+            }
+        };
+        this.draft = allGranted();
+        const key = this.storageSafeKey(siteKey);
+        this.storageKey = `${CMP_STORAGE_PREFIX}${key}`;
+        this.cookieName = `${CMP_COOKIE_PREFIX}${key}`;
+        if (typeof BroadcastChannel !== 'undefined') {
+            this.channel = new BroadcastChannel(CMP_BROADCAST_CHANNEL);
+            this.channel.onmessage = (event) => this.handleExternalState(event.data);
+        }
+        if (typeof window !== 'undefined') {
+            window.addEventListener('storage', this.storageListener);
+        }
+    }
+    async init() {
+        if (typeof window === 'undefined' || typeof document === 'undefined')
+            return;
+        try {
+            const config = await this.fetchConfig();
+            if (!config?.enabled) {
+                this.callbacks.onConsentProof(null);
+                this.callbacks.onSessionRecordingRevoked();
+                this.callbacks.onMarketingRevoked();
+                return;
+            }
+            this.cmpConfig = config;
+            this.installGlobalApi();
+            this.injectStyles(config);
+            const stored = this.loadStoredConsent();
+            const expired = this.isExpired(stored);
+            if (stored && stored.configVersion === config.version && stored.consentRef && !expired) {
+                this.currentState = stored;
+                this.applyConsent(stored.permissions, stored);
+                this.renderPersistentPrivacyControl();
+                return;
+            }
+            this.callbacks.onConsentProof(null);
+            // No usable decision yet. Under the opt-out model the visitor is treated as having
+            // granted everything, minus anything a GPC signal withdraws.
+            this.applyOptionalPermissions(allGranted());
+            // An expired decision is re-collected through the same flow as a policy version change:
+            // the visitor is shown what they previously chose and asked to confirm it.
+            if (stored && (expired || stored.configVersion !== config.version)) {
+                this.renderReconsent(stored.permissions, expired);
+            }
+            else {
+                this.renderBanner();
+            }
+        }
+        catch (error) {
+            this.callbacks.onConsentProof(null);
+            this.callbacks.onSessionRecordingRevoked();
+            this.callbacks.onMarketingRevoked();
+            // Always surfaced, not gated behind dev mode: this means the visitor is browsing with no
+            // valid consent state and no banner, which the site owner needs to know about.
+            console.warn('[Nommos CMP] Consent manager failed to initialise; no consent UI is shown.', error);
+        }
+    }
+    openPreferences() {
+        if (!this.cmpConfig)
+            return;
+        this.draft = this.currentState?.permissions ?? allGranted();
+        this.renderPreferencePanel('manage');
+    }
+    /** True when a stored decision carries an expiry that has passed. */
+    isExpired(stored) {
+        if (!stored?.expiresAt)
+            return false;
+        const expiry = Date.parse(stored.expiresAt);
+        return Number.isFinite(expiry) && expiry <= Date.now();
+    }
+    getState() {
+        return this.currentState;
+    }
+    destroy() {
+        this.root?.remove();
+        this.toast?.remove();
+        this.summary?.remove();
+        this.channel?.close();
+        window.removeEventListener('storage', this.storageListener);
+        if (window.NommosConsent?.getState() === this.getState()) {
+            delete window.NommosConsent;
+        }
+    }
+    async fetchConfig() {
+        const res = await fetch(`${this.cmpEndpoint}/${encodeURIComponent(this.siteKey)}`);
+        if (!res.ok) {
+            throw new Error(`CMP config request failed: ${res.status}`);
+        }
+        return res.json();
+    }
+    async saveConsent(action, permissions) {
+        if (!this.cmpConfig)
+            return;
+        const normalized = this.applyGlobalPrivacyControl(permissions);
+        const res = await fetch(`${this.cmpEndpoint}/${encodeURIComponent(this.siteKey)}/consent-events`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            // configVersion and policyHash are deliberately not sent: the server owns them, and a
+            // receipt whose audit metadata came from the client would prove nothing.
+            body: JSON.stringify({
+                eventType: action,
+                subjectId: this.subjectId,
+                previousReceiptId: this.currentState?.receiptId,
+                language: this.language(),
+                clientTimestamp: new Date().toISOString(),
+                gpcApplied: this.hasGlobalPrivacyControl(),
+                permissions: normalized,
+            }),
+        });
+        if (!res.ok) {
+            console.warn(`[Nommos CMP] Consent could not be saved (HTTP ${res.status}); the visitor's choice was not recorded.`);
+            this.showToast(this.text('updatedTitle'), this.text('settingsSaveError', 'Could not save your preferences. Please try again.'), true);
+            return;
+        }
+        const response = await res.json();
+        const stored = {
+            receiptId: response.receiptId,
+            consentRef: response.consentRef,
+            configVersion: response.configVersion,
+            policyHash: response.policyHash,
+            permissions: response.permissions,
+            effectiveAt: response.effectiveAt,
+            expiresAt: response.expiresAt ?? null,
+            gpcApplied: Boolean(response.gpcApplied),
+        };
+        this.persistConsent(stored);
+        this.currentState = stored;
+        this.applyConsent(stored.permissions, stored);
+        this.broadcastState(stored);
+        this.closeRoot();
+        this.renderPersistentPrivacyControl();
+        this.showToast(action === 'SAVE_PREFERENCES' || action === 'RECONSENT' ? this.text('updatedTitle') : this.text('savedTitle'), action === 'SAVE_PREFERENCES' || action === 'RECONSENT' ? this.text('updatedDescription') : this.text('savedDescription'));
+    }
+    applyConsent(permissions, state) {
+        this.callbacks.onConsentProof(state);
+        this.applyOptionalPermissions(permissions);
+    }
+    applyOptionalPermissions(permissions) {
+        const normalized = this.applyGlobalPrivacyControl(permissions);
+        if (normalized.analytics) {
+            this.callbacks.onAnalyticsGranted();
+        }
+        else {
+            this.callbacks.onAnalyticsRevoked();
+        }
+        if (normalized.sessionRecording) {
+            this.callbacks.onSessionRecordingGranted();
+        }
+        else {
+            this.callbacks.onSessionRecordingRevoked();
+        }
+        if (normalized.marketing) {
+            this.callbacks.onMarketingGranted();
+        }
+        else {
+            this.callbacks.onMarketingRevoked();
+        }
+    }
+    loadStoredConsent() {
+        const raw = localStorage.getItem(this.storageKey);
+        if (!raw)
+            return null;
+        try {
+            const parsed = JSON.parse(raw);
+            if (!parsed?.receiptId || !parsed?.consentRef || !parsed?.permissions) {
+                localStorage.removeItem(this.storageKey);
+                return null;
+            }
+            return parsed;
+        }
+        catch (error) {
+            localStorage.removeItem(this.storageKey);
+            // Not dev-gated: a discarded decision means the visitor is about to be re-prompted, and
+            // repeated occurrences point at a storage or serialisation bug worth seeing.
+            console.warn('[Nommos CMP] Stored consent state was unreadable and has been discarded.', error);
+            return null;
+        }
+    }
+    persistConsent(state) {
+        localStorage.setItem(this.storageKey, JSON.stringify(state));
+        document.cookie = `${this.cookieName}=${encodeURIComponent(state.consentRef)}; path=/; SameSite=Lax`;
+    }
+    broadcastState(state) {
+        this.channel?.postMessage(state);
+        localStorage.setItem(`${this.storageKey}:updated`, String(Date.now()));
+    }
+    handleExternalState(data) {
+        if (!data || typeof data !== 'object')
+            return;
+        const state = data;
+        if (!state.receiptId || state.receiptId === this.currentState?.receiptId)
+            return;
+        this.currentState = state;
+        this.applyConsent(state.permissions, state);
+        this.closeRoot();
+        this.renderPersistentPrivacyControl();
+    }
+    renderBanner() {
+        if (!this.cmpConfig)
+            return;
+        this.draft = this.applyGlobalPrivacyControl(allGranted());
+        this.root = this.createRoot('nommos-cmp-root nommos-cmp-banner-root');
+        this.root.innerHTML = `
+      <section class="nommos-cmp-banner" role="dialog" aria-modal="false" aria-labelledby="nommos-cmp-title">
+        ${this.logoBlock()}
+        <div class="nommos-cmp-banner-copy">
+          <h2 id="nommos-cmp-title">${this.text('bannerTitle')}</h2>
+          <p>${this.text('bannerDescription')}</p>
+          <div class="nommos-cmp-chip-row">
+            ${this.enabledCategories().map((category) => this.permissionChip(category, this.draft[category] !== false)).join('')}
+          </div>
+        </div>
+        <div class="nommos-cmp-banner-actions">
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="customize">${this.iconGear()}${this.text('customize')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="reject">${this.iconX()}${this.text('rejectOptional')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-primary" data-cmp-action="accept">${this.iconCheck()}${this.text('acceptAll')}</button>
+        </div>
+      </section>
+      ${this.floatingHtml()}
+    `;
+        this.finalizeRoot();
+        this.bindCommonActions();
+    }
+    renderPreferencePanel(mode) {
+        if (!this.cmpConfig)
+            return;
+        this.root = this.createRoot('nommos-cmp-root nommos-cmp-panel-root');
+        const title = mode === 'manage' ? this.text('manageTitle') : this.text('preferencesTitle');
+        const description = mode === 'manage' ? this.text('manageDescription') : this.text('preferencesDescription');
+        this.root.innerHTML = `
+      <div class="nommos-cmp-scrim"></div>
+      <aside class="nommos-cmp-panel" role="dialog" aria-modal="true" aria-labelledby="nommos-cmp-panel-title">
+        <button class="nommos-cmp-close" type="button" aria-label="${this.text('close', 'Close')}" data-cmp-action="close">${this.iconX()}</button>
+        <div class="nommos-cmp-panel-head">
+          <span class="nommos-cmp-shield">${this.iconShield()}</span>
+          <div>
+            <h2 id="nommos-cmp-panel-title">${title}</h2>
+            <p>${description}</p>
+          </div>
+        </div>
+        <div class="nommos-cmp-pref-list">
+          ${this.enabledCategories().map((category) => this.preferenceRow(category)).join('')}
+        </div>
+        <footer class="nommos-cmp-panel-footer">
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="accept">${this.iconCheck()}${this.text('acceptAll')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="reject">${this.iconX()}${this.text('rejectOptional')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-primary" data-cmp-action="save">${mode === 'manage' ? this.text('saveChanges') : this.text('savePreferences')}</button>
+          <div class="nommos-cmp-panel-meta">
+            ${this.policyLinks()}
+            ${this.poweredBy()}
+          </div>
+        </footer>
+      </aside>
+      ${this.floatingHtml()}
+    `;
+        this.finalizeRoot();
+        this.bindCommonActions();
+        this.bindToggles();
+    }
+    renderReconsent(previous, expired = false) {
+        if (!this.cmpConfig)
+            return;
+        this.draft = this.applyGlobalPrivacyControl(previous);
+        const title = expired ? this.text('expiredTitle') : this.text('reconsentTitle');
+        const description = expired ? this.text('expiredDescription') : this.text('reconsentDescription');
+        this.root = this.createRoot('nommos-cmp-root nommos-cmp-reconsent-root');
+        this.root.innerHTML = `
+      <div class="nommos-cmp-reconsent-scrim"></div>
+      <section class="nommos-cmp-reconsent" role="dialog" aria-modal="true" aria-labelledby="nommos-cmp-reconsent-title">
+        <button class="nommos-cmp-close" type="button" aria-label="${this.text('close', 'Close')}" data-cmp-action="close">${this.iconX()}</button>
+        <div class="nommos-cmp-reconsent-icon">${this.iconShield()}</div>
+        <h2 id="nommos-cmp-reconsent-title">${title}</h2>
+        <p>${description}</p>
+        <div class="nommos-cmp-version-row">
+          <span>${this.text('consentVersionLabel', 'Consent version')} ${escapeHtml(this.cmpConfig.version)}</span>
+          <span>${escapeHtml(new Date().toLocaleDateString(this.language()))}</span>
+        </div>
+        <div class="nommos-cmp-change">
+          <strong>${this.text('whatsChanged')}</strong>
+          <p>${this.text('changeSummary')}</p>
+        </div>
+        <div class="nommos-cmp-chip-row nommos-cmp-chip-row-center">
+          ${this.enabledCategories().map((category) => this.permissionChip(category, this.draft[category] !== false)).join('')}
+        </div>
+        <div class="nommos-cmp-reconsent-actions">
+          <button class="nommos-cmp-btn nommos-cmp-primary" data-cmp-action="accept">${this.iconCheck()}${this.text('acceptAll')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="reject">${this.iconX()}${this.text('rejectOptional')}</button>
+          <button class="nommos-cmp-btn nommos-cmp-secondary" data-cmp-action="customize">${this.text('reviewChoices')}</button>
+        </div>
+        ${this.policyLinks()}
+        ${this.poweredBy()}
+      </section>
+      ${this.floatingHtml()}
+    `;
+        this.finalizeRoot();
+        this.bindCommonActions(true);
+    }
+    renderFloatingControl() {
+        if (this.root || !this.cmpConfig || !this.shouldShowPersistentPrivacyControl())
+            return;
+        this.root = this.createRoot('nommos-cmp-root nommos-cmp-floating-root');
+        this.root.innerHTML = this.floatingHtml();
+        this.finalizeRoot();
+        this.bindCommonActions();
+    }
+    renderSummaryBar() {
+        if (!this.cmpConfig || !this.currentState || !this.shouldShowPersistentPrivacyControl())
+            return;
+        this.summary?.remove();
+        const summary = document.createElement('div');
+        summary.className = 'nommos-cmp-summary';
+        const permissions = this.currentState.permissions;
+        summary.innerHTML = `
+      <strong>${this.text('privacyChoices')}</strong>
+      ${this.enabledCategories().map((category) => {
+            const state = category === 'necessary'
+                ? this.text('alwaysOn')
+                : permissions[category] ? this.text('on') : this.text('off');
+            return `<span>${this.categoryIcon(category)} ${this.categoryName(category)} <em>${state}</em></span>`;
+        }).join('')}
+      <button type="button" data-cmp-action="manage">${this.text('manage', 'Manage')}</button>
+    `;
+        document.body.appendChild(summary);
+        this.summary = summary;
+        summary.querySelector('[data-cmp-action="manage"]')?.addEventListener('click', () => this.openPreferences());
+    }
+    renderPersistentPrivacyControl() {
+        this.summary?.remove();
+        this.summary = null;
+        if (!this.shouldShowPersistentPrivacyControl())
+            return;
+        this.renderFloatingControl();
+        this.renderSummaryBar();
+    }
+    showToast(title, message, error = false) {
+        this.toast?.remove();
+        const toast = document.createElement('div');
+        toast.className = `nommos-cmp-toast${error ? ' nommos-cmp-toast-error' : ''}`;
+        toast.innerHTML = `
+      <span class="nommos-cmp-toast-icon">${error ? this.iconX() : this.iconCheck()}</span>
+      <span><strong>${title}</strong><small>${message}</small></span>
+      <button type="button" aria-label="Close">${this.iconX()}</button>
+    `;
+        document.body.appendChild(toast);
+        this.toast = toast;
+        toast.querySelector('button')?.addEventListener('click', () => toast.remove());
+        setTimeout(() => toast.remove(), 5000);
+    }
+    bindCommonActions(isReconsent = false) {
+        this.root?.querySelector('[data-cmp-action="accept"]')?.addEventListener('click', () => {
+            this.saveConsent(isReconsent ? 'RECONSENT' : 'ACCEPT_ALL', allGranted());
+        });
+        this.root?.querySelector('[data-cmp-action="reject"]')?.addEventListener('click', () => {
+            this.saveConsent(isReconsent ? 'RECONSENT' : 'REJECT_OPTIONAL', optionalRefused());
+        });
+        this.root?.querySelector('[data-cmp-action="customize"]')?.addEventListener('click', () => this.renderPreferencePanel('customize'));
+        this.root?.querySelector('[data-cmp-action="privacy"]')?.addEventListener('click', () => this.openPreferences());
+        this.root?.querySelector('[data-cmp-action="close"]')?.addEventListener('click', () => {
+            if (this.currentState) {
+                this.closeRoot();
+                this.renderPersistentPrivacyControl();
+            }
+            else if (this.root?.classList.contains('nommos-cmp-panel-root')) {
+                this.renderBanner();
+            }
+        });
+        this.root?.querySelector('[data-cmp-action="save"]')?.addEventListener('click', () => this.saveConsent('SAVE_PREFERENCES', this.draft));
+    }
+    bindToggles() {
+        this.root?.querySelectorAll('input[data-cmp-permission]').forEach((input) => {
+            input.addEventListener('change', () => {
+                const category = input.dataset['cmpPermission'];
+                if (category && OPTIONAL_CATEGORIES.includes(category)) {
+                    this.draft = { ...this.draft, [category]: input.checked };
+                }
+            });
+        });
+    }
+    /**
+     * Every category, in display order. The backend's per-category `enabled` flag is a tenant
+     * activation setting — whether that consent, once granted, is actually stored and enforced —
+     * not a UI visibility switch. A visitor can express a preference for a category the tenant
+     * hasn't activated yet; the backend clamps the *effect* of that preference independently.
+     */
+    enabledCategories() {
+        return ALL_CATEGORIES;
+    }
+    /**
+     * Whether the tenant has switched this category on — the other half of the server's rule that a
+     * permission needs both tenant activation and a visitor grant.
+     *
+     * <p>Deliberately not used to filter {@link enabledCategories}: a visitor may still express a
+     * preference for a category the tenant has not activated. It exists for callers that would
+     * otherwise ask the server for something it is certain to refuse with `FEATURE_DISABLED`.
+     */
+    isCategoryActivated(category) {
+        return this.cmpConfig?.permissions?.[category]?.enabled !== false;
+    }
+    preferenceRow(category) {
+        const locked = category === 'necessary';
+        const enabled = locked ? true : Boolean(this.draft[category]);
+        const disabledByGpc = category === 'marketing' && this.hasGlobalPrivacyControl();
+        return `
+      <article class="nommos-cmp-pref-row">
+        <span class="nommos-cmp-pref-icon">${this.categoryIcon(category)}</span>
+        <div>
+          <h3>${this.categoryName(category)} ${locked ? `<span>${this.text('alwaysOn')}</span>` : ''}</h3>
+          <p>${this.categoryDescription(category)}</p>
+          ${disabledByGpc ? `<a title="${this.text('gpcDescription')}">${this.text('gpcNotice')}</a>` : `<a>${this.text('learnMore')}</a>`}
+        </div>
+        ${locked
+            ? `<span class="nommos-cmp-lock">${this.iconLock()}</span>`
+            : `<label class="nommos-cmp-toggle"><input type="checkbox" data-cmp-permission="${escapeHtml(category)}" ${enabled && !disabledByGpc ? 'checked' : ''} ${disabledByGpc ? 'disabled' : ''}/><span></span></label>`}
+      </article>
+    `;
+    }
+    permissionChip(category, enabled) {
+        const locked = category === 'necessary';
+        return `
+      <div class="nommos-cmp-chip">
+        <span>${this.categoryIcon(category)}</span>
+        <strong>${this.categoryName(category)}</strong>
+        <em>${locked ? this.text('alwaysOn') : enabled ? this.text('on') : this.text('off')}</em>
+        ${locked ? this.iconLock() : enabled ? this.iconCheckCircle() : this.iconMinusCircle()}
+      </div>
+    `;
+    }
+    createRoot(className) {
+        this.closeRoot();
+        const root = document.createElement('div');
+        root.className = className;
+        document.body.appendChild(root);
+        return root;
+    }
+    /**
+     * Run after any innerHTML assignment on the root: replaces logo placeholders with elements
+     * built via DOM APIs, so tenant-supplied branding never passes through markup parsing.
+     */
+    finalizeRoot() {
+        if (this.root)
+            this.hydrateLogos(this.root);
+    }
+    closeRoot() {
+        this.root?.remove();
+        this.root = null;
+    }
+    installGlobalApi() {
+        window.NommosConsent = {
+            openPreferences: () => this.openPreferences(),
+            getState: () => this.getState(),
+        };
+    }
+    /** A Global Privacy Control signal only forces Marketing off; other opt-out categories stay user-controlled. */
+    applyGlobalPrivacyControl(permissions) {
+        if (this.hasGlobalPrivacyControl()) {
+            return { ...permissions, necessary: true, marketing: false };
+        }
+        return {
+            necessary: true,
+            analytics: Boolean(permissions.analytics),
+            sessionRecording: Boolean(permissions.sessionRecording),
+            marketing: Boolean(permissions.marketing),
+        };
+    }
+    hasGlobalPrivacyControl() {
+        return Boolean(this.cmpConfig?.settings?.honorGlobalPrivacyControl && navigator.globalPrivacyControl);
+    }
+    shouldShowPersistentPrivacyControl() {
+        return this.cmpConfig?.settings?.showFloatingPrivacyControl === true;
+    }
+    /**
+     * The raw configured value. Only for callers that sanitise it themselves — everything that
+     * lands in markup must go through {@link text} or {@link url} instead.
+     */
+    rawText(key, fallback = '') {
+        const lang = this.language();
+        const local = CMP_COPY[lang]?.[key] ?? CMP_COPY.en[key];
+        if (local !== undefined)
+            return local;
+        const entry = this.cmpConfig?.content?.[key];
+        if (entry === undefined || entry === null)
+            return fallback;
+        if (typeof entry === 'string')
+            return entry;
+        return entry[lang] ?? entry['en'] ?? fallback;
+    }
+    /**
+     * Content escaped for interpolation into markup.
+     *
+     * Escaping here rather than at each of the ~40 call sites means a newly added string is safe
+     * by default; the unsafe path has to be asked for explicitly.
+     */
+    text(key, fallback = '') {
+        return escapeHtml(this.rawText(key, fallback));
+    }
+    /** Content sanitised for use in `href`/`src`. Returns '' when the URL is not safe. */
+    url(key, fallback = '') {
+        return sanitizeUrl(this.rawText(key, fallback));
+    }
+    language() {
+        return resolveLanguage();
+    }
+    /**
+     * Built with DOM APIs rather than interpolated markup: `logoUrl` and `companyName` come from
+     * tenant configuration, and this renders on the tenant's own customers' pages.
+     */
+    logoElement() {
+        const brand = this.cmpConfig?.branding;
+        const container = createElement('div', { className: 'nommos-cmp-logo' });
+        const companyName = brand?.companyName ?? 'NOMMOS';
+        const safeLogo = sanitizeUrl(brand?.logoUrl);
+        if (safeLogo) {
+            container.appendChild(createElement('img', { attributes: { src: safeLogo, alt: companyName } }));
+            return container;
+        }
+        container.innerHTML = this.iconBars();
+        container.appendChild(createElement('strong', { text: companyName }));
+        return container;
+    }
+    /** Placeholder replaced with {@link logoElement} after the markup is parsed. */
+    logoBlock() {
+        return '<div data-cmp-logo-slot></div>';
+    }
+    /** Swaps every logo placeholder for a safely constructed element. */
+    hydrateLogos(root) {
+        root.querySelectorAll('[data-cmp-logo-slot]').forEach((slot) => {
+            slot.replaceWith(this.logoElement());
+        });
+    }
+    floatingHtml() {
+        if (!this.shouldShowPersistentPrivacyControl())
+            return '';
+        return `<button class="nommos-cmp-floating" type="button" data-cmp-action="privacy">${this.iconShield()}<span>${this.text('privacyChoices')}</span></button>`;
+    }
+    policyLinks() {
+        return `
+      <div class="nommos-cmp-links">
+        <a href="${escapeHtml(this.configUrl('privacyPolicyUrl'))}" target="_blank" rel="noopener">${this.text('privacyPolicy')}</a>
+        <span></span>
+        <a href="${escapeHtml(this.configUrl('cookiePolicyUrl'))}" target="_blank" rel="noopener">${this.text('cookiePolicy')}</a>
+      </div>
+    `;
+    }
+    configUrl(key) {
+        const value = sanitizeUrl(this.cmpConfig?.[key] ?? '');
+        if (value)
+            return value;
+        return this.url(key, DEFAULT_POLICY_URL) || DEFAULT_POLICY_URL;
+    }
+    poweredBy() {
+        return `<div class="nommos-cmp-powered">${this.text('poweredBy')} <strong>NOMMOS</strong></div>`;
+    }
+    // Content keys are derived from the category name, so adding a category needs only new
+    // entries in the server-side defaults rather than another branch in three parallel chains.
+    categoryName(category) {
+        return this.text(`${category}Name`);
+    }
+    categoryDescription(category) {
+        return this.text(`${category}Description`);
+    }
+    categoryIcon(category) {
+        switch (category) {
+            case 'necessary':
+                return this.iconShield();
+            case 'analytics':
+                return this.iconBars();
+            case 'sessionRecording':
+                return this.iconScreen();
+            default:
+                return this.iconMegaphone();
+        }
+    }
+    storageSafeKey(value) {
+        return value.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 80);
+    }
+    iconShield() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M12 3l7 3v5c0 4.6-2.9 8.7-7 10-4.1-1.3-7-5.4-7-10V6l7-3z" fill="none" stroke="currentColor" stroke-width="2"/><path d="M9 12l2 2 4-5" fill="none" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    iconScreen() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><rect x="3" y="5" width="18" height="12" rx="2" fill="none" stroke="currentColor" stroke-width="2"/><path d="M8 21h8M12 17v4" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    iconMegaphone() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M4 14h3l9 4V6L7 10H4v4z" fill="none" stroke="currentColor" stroke-width="2"/><path d="M7 14l2 6" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    iconBars() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M5 20V9M12 20V4M19 20v-7" stroke="currentColor" stroke-width="2.5" stroke-linecap="round"/></svg>';
+    }
+    iconCheck() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M5 12l4 4L19 6" fill="none" stroke="currentColor" stroke-width="2.5"/></svg>';
+    }
+    iconX() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"/></svg>';
+    }
+    iconGear() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="3" fill="none" stroke="currentColor" stroke-width="2"/><path d="M12 2v3M12 19v3M4.9 4.9L7 7M17 17l2.1 2.1M2 12h3M19 12h3M4.9 19.1L7 17M17 7l2.1-2.1" stroke="currentColor" stroke-width="2" stroke-linecap="round"/></svg>';
+    }
+    iconLock() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><rect x="6" y="10" width="12" height="10" rx="2" fill="none" stroke="currentColor" stroke-width="2"/><path d="M8 10V7a4 4 0 018 0v3" fill="none" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    iconCheckCircle() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="9" fill="none" stroke="currentColor" stroke-width="2"/><path d="M8 12l3 3 5-6" fill="none" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    iconMinusCircle() {
+        return '<svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="9" fill="none" stroke="currentColor" stroke-width="2"/><path d="M8 12h8" stroke="currentColor" stroke-width="2"/></svg>';
+    }
+    injectStyles(config) {
+        if (document.getElementById('nommos-cmp-styles'))
+            return;
+        // Branding is tenant-controlled and lands inside a <style> block, so it is validated
+        // rather than trusted — see sanitizeCssColor for what an unchecked value permits.
+        const primary = sanitizeCssColor(config.branding.primaryColor, '#3155F5');
+        const secondary = sanitizeCssColor(config.branding.secondaryColor, primary);
+        const font = sanitizeCssFontFamily(config.branding.fontFamily, 'Inter, Arial, sans-serif');
+        const style = document.createElement('style');
+        style.id = 'nommos-cmp-styles';
+        style.textContent = `
+      .nommos-cmp-root,.nommos-cmp-root *,.nommos-cmp-toast,.nommos-cmp-toast *,.nommos-cmp-summary,.nommos-cmp-summary *{box-sizing:border-box;font-family:${font};letter-spacing:0}
+      .nommos-cmp-banner{position:fixed;left:clamp(14px,2vw,32px);right:clamp(14px,2vw,32px);bottom:24px;z-index:2147483000;display:grid;grid-template-columns:64px minmax(0,1fr) minmax(430px,536px);gap:20px;align-items:center;padding:20px 24px;border:1px solid #dfe5f1;border-radius:14px;background:rgba(255,255,255,.97);box-shadow:0 18px 54px rgba(15,23,42,.14);color:#080d2a}
+      .nommos-cmp-logo{display:flex;align-items:center;gap:10px;font-weight:800;letter-spacing:2px;min-width:0}.nommos-cmp-logo img{max-width:112px;max-height:34px;object-fit:contain}.nommos-cmp-logo svg{width:30px;height:30px;color:${primary}}
+      .nommos-cmp-banner .nommos-cmp-logo{width:52px;height:52px;justify-content:center;border-radius:12px;background:color-mix(in srgb, ${primary} 12%, white)}.nommos-cmp-banner .nommos-cmp-logo strong{display:none}.nommos-cmp-banner .nommos-cmp-logo svg{width:32px;height:32px}
+      .nommos-cmp-banner h2,.nommos-cmp-panel h2,.nommos-cmp-reconsent h2{margin:0 0 8px;font-size:22px;line-height:1.15;color:#080d2a}.nommos-cmp-banner p,.nommos-cmp-panel p,.nommos-cmp-reconsent p{margin:0;color:#364361;font-size:15px;line-height:1.45}
+      .nommos-cmp-banner .nommos-cmp-chip-row{display:none}.nommos-cmp-chip-row{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px;margin-top:18px}.nommos-cmp-chip-row-center{margin:18px 0}.nommos-cmp-chip{min-height:58px;display:grid;grid-template-columns:24px 1fr 20px;gap:8px;align-items:center;padding:12px;border-radius:10px;background:#f4f6fb;color:#0a102d}.nommos-cmp-chip svg{width:22px;height:22px}.nommos-cmp-chip strong{font-size:13px}.nommos-cmp-chip em{grid-column:2;font-style:normal;color:#14a34a;font-size:12px}
+      .nommos-cmp-banner-actions{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px;align-items:center}.nommos-cmp-btn{height:48px;border-radius:8px;border:1px solid #cfd7ea;display:inline-flex;align-items:center;justify-content:center;gap:9px;font-size:15px;font-weight:800;cursor:pointer;background:#fff;color:${primary};white-space:nowrap}.nommos-cmp-btn svg{width:18px;height:18px}.nommos-cmp-primary{border-color:${primary};background:linear-gradient(135deg,${primary},${secondary});color:#fff;box-shadow:0 8px 20px color-mix(in srgb, ${primary} 24%, transparent)}
+      .nommos-cmp-links{grid-column:1 / -1;display:flex;gap:18px;justify-content:center;margin-top:14px}.nommos-cmp-links a{color:${primary};font-size:13px;font-weight:700;text-decoration:underline}.nommos-cmp-links span{width:1px;background:#98a1b8}.nommos-cmp-powered{grid-column:1 / -1;text-align:right;color:#7c849a;font-size:13px}.nommos-cmp-powered strong{color:#179bd7}
+      .nommos-cmp-floating{position:fixed;right:24px;bottom:22px;z-index:2147483001;display:flex;align-items:center;gap:16px;min-height:68px;padding:10px 24px 10px 10px;border:0;border-radius:999px;background:#fff;color:#080d2a;box-shadow:0 14px 44px rgba(15,23,42,.18);font-weight:800;cursor:pointer}.nommos-cmp-floating svg{width:48px;height:48px;padding:10px;border-radius:999px;background:linear-gradient(135deg,${primary},${secondary});color:#fff}
+      .nommos-cmp-scrim,.nommos-cmp-reconsent-scrim{position:fixed;inset:0;z-index:2147482998;background:rgba(18,24,43,.22);backdrop-filter:blur(2px)}.nommos-cmp-panel{position:fixed;left:50%;top:50%;transform:translate(-50%,-50%);z-index:2147483000;width:min(980px,calc(100vw - 48px));max-height:calc(100vh - 52px);display:flex;flex-direction:column;padding:28px 28px 22px;border:1px solid #dfe5f1;border-radius:14px;background:#fff;box-shadow:0 24px 78px rgba(15,23,42,.18);color:#080d2a;overflow:auto}.nommos-cmp-close{position:absolute;right:22px;top:22px;width:34px;height:34px;border:0;border-radius:8px;background:#fff;color:#64708d;cursor:pointer}.nommos-cmp-close svg{width:22px;height:22px}
+      .nommos-cmp-panel-head{display:flex;gap:18px;margin:8px 56px 24px 0}.nommos-cmp-shield{width:58px;height:58px;display:grid;place-items:center;border:0;border-radius:14px;background:color-mix(in srgb, ${primary} 12%, white);color:${primary};flex:0 0 auto}.nommos-cmp-shield svg{width:32px;height:32px}.nommos-cmp-pref-list{border:1px solid #dfe5f1;border-radius:8px;overflow:hidden}.nommos-cmp-pref-row{min-height:82px;display:grid;grid-template-columns:48px minmax(0,1fr) auto;gap:16px;align-items:center;padding:14px 16px 14px 18px;border-bottom:1px solid #dfe5f1}.nommos-cmp-pref-row:last-child{border-bottom:0}.nommos-cmp-pref-row>span:first-child{width:38px;height:38px;display:grid;place-items:center;border-radius:10px;background:color-mix(in srgb, ${primary} 10%, white);color:${primary}}.nommos-cmp-pref-row>span svg{width:24px;height:24px}.nommos-cmp-pref-row h3{margin:0 0 6px;font-size:17px;display:flex;gap:10px;align-items:center}.nommos-cmp-pref-row h3 span{padding:5px 10px;border-radius:999px;background:#eef0f5;color:#52607a;font-size:12px;font-weight:700}.nommos-cmp-pref-row p{font-size:14px;line-height:1.35}.nommos-cmp-pref-row a{display:none}.nommos-cmp-lock{width:36px;height:36px;display:grid;place-items:center;border-radius:10px;background:#f1f3f8;color:#69738d}
+      .nommos-cmp-toggle{position:relative;width:48px;height:28px}.nommos-cmp-toggle input{opacity:0;width:0;height:0}.nommos-cmp-toggle span{position:absolute;inset:0;border-radius:999px;background:#c7ccd8;transition:.2s}.nommos-cmp-toggle span:before{content:"";position:absolute;width:22px;height:22px;left:3px;top:3px;border-radius:999px;background:#fff;transition:.2s;box-shadow:0 2px 8px rgba(0,0,0,.18)}.nommos-cmp-toggle input:checked+span{background:linear-gradient(135deg,${primary},${secondary})}.nommos-cmp-toggle input:checked+span:before{transform:translateX(20px)}.nommos-cmp-toggle input:disabled+span{opacity:.55}
+      .nommos-cmp-panel-footer{margin-top:18px;display:grid;grid-template-columns:1fr 1fr 1fr;gap:12px;padding-top:0}.nommos-cmp-panel-meta{grid-column:1/-1;display:flex;justify-content:space-between;align-items:center;margin-top:8px}.nommos-cmp-panel-meta .nommos-cmp-links{margin:0;grid-column:auto}.nommos-cmp-panel-meta .nommos-cmp-powered{grid-column:auto}
+      .nommos-cmp-toast{position:fixed;right:34px;top:34px;z-index:2147483002;min-width:360px;display:grid;grid-template-columns:48px 1fr 28px;gap:12px;align-items:center;padding:18px;border:1px solid #b7e2c5;border-bottom:4px solid #16a34a;border-radius:10px;background:#fff;box-shadow:0 18px 48px rgba(15,23,42,.16);color:#102018}.nommos-cmp-toast-error{border-color:#fecaca;border-bottom-color:#dc2626}.nommos-cmp-toast-icon{display:grid;place-items:center;width:42px;height:42px;border-radius:999px;background:#13b84a;color:#fff}.nommos-cmp-toast-error .nommos-cmp-toast-icon{background:#dc2626}.nommos-cmp-toast svg{width:22px;height:22px}.nommos-cmp-toast strong,.nommos-cmp-toast small{display:block}.nommos-cmp-toast small{color:#647085;margin-top:4px}.nommos-cmp-toast button{border:0;background:transparent;color:#647085;cursor:pointer}
+      .nommos-cmp-summary{position:fixed;left:50%;bottom:18px;transform:translateX(-50%);z-index:2147482999;display:flex;align-items:center;gap:18px;min-height:54px;max-width:calc(100vw - 220px);padding:10px 20px;border:1px solid #e7eaf2;border-radius:14px;background:#fff;box-shadow:0 14px 40px rgba(15,23,42,.16);color:#0c122e;font-size:13px}.nommos-cmp-summary span{display:flex;align-items:center;gap:7px;border-left:1px solid #e4e8f0;padding-left:14px;white-space:nowrap}.nommos-cmp-summary svg{width:18px;height:18px}.nommos-cmp-summary em{font-style:normal;color:#16a34a;font-weight:700}.nommos-cmp-summary button{border:0;background:transparent;color:${primary};font-weight:800;cursor:pointer}
+      .nommos-cmp-reconsent{position:fixed;left:50%;top:50%;transform:translate(-50%,-50%);z-index:2147483000;width:min(590px,calc(100vw - 32px));padding:40px;border-radius:22px;background:#fff;color:#080d2a;text-align:center;box-shadow:0 28px 90px rgba(15,23,42,.28)}.nommos-cmp-reconsent-icon{width:80px;height:80px;margin:0 auto 20px;display:grid;place-items:center;border-radius:999px;background:color-mix(in srgb, ${primary} 12%, white);color:${primary}}.nommos-cmp-reconsent-icon svg{width:42px;height:42px}.nommos-cmp-version-row{display:flex;justify-content:center;gap:18px;margin:20px 0;color:#68738c;font-size:13px}.nommos-cmp-version-row span:first-child{padding:7px 12px;border-radius:999px;background:color-mix(in srgb, ${primary} 10%, white);color:${primary};font-weight:800}.nommos-cmp-change{text-align:left;margin:18px 0}.nommos-cmp-reconsent-actions{display:grid;grid-template-columns:repeat(3,1fr);gap:12px;margin-top:18px}
+      @media (max-width: 860px){.nommos-cmp-banner{left:12px;right:12px;bottom:12px;grid-template-columns:44px 1fr;padding:16px}.nommos-cmp-banner-actions{grid-column:1/-1;grid-template-columns:1fr;gap:8px}.nommos-cmp-banner .nommos-cmp-logo{width:42px;height:42px}.nommos-cmp-banner h2{font-size:18px}.nommos-cmp-banner p{font-size:13px}.nommos-cmp-chip-row,.nommos-cmp-panel-footer,.nommos-cmp-reconsent-actions{grid-template-columns:1fr}.nommos-cmp-panel{left:0;right:0;top:auto;bottom:0;transform:none;width:100%;max-height:88vh;border-radius:18px 18px 0 0;padding:22px}.nommos-cmp-panel-head{margin-right:48px}.nommos-cmp-pref-row{min-height:auto;padding:14px;grid-template-columns:40px 1fr auto}.nommos-cmp-summary{left:12px;right:12px;bottom:96px;transform:none;max-width:none;overflow:auto}.nommos-cmp-floating{right:14px;bottom:14px}.nommos-cmp-toast{left:12px;right:12px;top:18px;min-width:0}}
+    `;
+        document.head.appendChild(style);
+    }
+}
+//# sourceMappingURL=consent-manager.js.map