@nommos/core 0.0.40 → 0.0.42

package/README.md

@@ -120,6 +120,7 @@ Represents the platform (Social Media, SMS or direct access) the user used to ha
 interface ConnectionConfig {
   token: string;
   mode: string;
+  baseUrl?: string;
 }
 ```
 #### Description
@@ -129,7 +130,12 @@ An Interface representing the required information for initializing the tracking
 | Field | type | Description |
 |--------|-------|-------------|
 | `token` | `string` | The access token for fetching configuration |
-| `mode` | `string` | Run tracking module in 'dev' or 'prod' mode |
+| `mode` | `string` | Which stack to talk to, and how loudly to log. `'dev'` targets the test backend and enables console diagnostics; anything else targets production and stays silent. |
+| `baseUrl` | `string?` | Overrides the backend URL `mode` would select. For local or self-hosted deployments only. |
+
+> **Tokens are issued per environment.** The test and production stacks have separate databases,
+> so a token minted on one is not valid on the other — `mode` must match wherever the token came
+> from. An unrecognised `mode` falls back to production rather than failing closed.
 ---
 
 ### `Interface: UrlTrackingKey`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nommos/core",
-  "version": "0.0.40",
+  "version": "0.0.42",
   "type": "module",
   "main": "./src/index.js",
   "module": "./src/index.js",
@@ -20,4 +20,4 @@
   "devDependencies": {
     "@types/pako": "^2.0.4"
   }
-}
+}

package/src/index.d.ts

@@ -1,3 +1,3 @@
 export { EventTracker } from './lib/event-tracker';
 export { ANALYTICS_ACTION, ANALYTICS_ACTION_STATE, SITE_SOURCE, } from './lib/enums';
-export type { ConnectionConfig, UrlTrackingKey, AnalyticsEvent, TrackingControls, AdsEventsConfig, AdEventConfig, GoogleAdsConfig, GoogleConversionAction, } from './lib/types';
+export type { ConnectionConfig, UrlTrackingKey, AnalyticsEvent, TrackingControls, AdsEventsConfig, AdEventConfig, GoogleAdsConfig, GoogleConversionAction, ConsentConfig, ConsentPermission, ConsentPermissionState, ConsentStoredState, ConsentAwareModule, WebPopupItem, WebPopupButton, WebPopupContent, WebPopupInboxState, } from './lib/types';

package/src/lib/consent-manager.d.ts

@@ -0,0 +1,136 @@
+import { ConsentStoredState, OptionalConsentCategory } from './types';
+type RenderableCategory = 'necessary' | OptionalConsentCategory;
+interface ConsentManagerCallbacks {
+    onConsentProof: (state: ConsentStoredState | null) => void;
+    onAnalyticsGranted: () => void;
+    onAnalyticsRevoked: () => void;
+    onSessionRecordingGranted: () => void;
+    onSessionRecordingRevoked: () => void;
+    onMarketingGranted: () => void;
+    onMarketingRevoked: () => void;
+}
+declare global {
+    interface Window {
+        NommosConsent?: {
+            openPreferences: () => void;
+            getState: () => ConsentStoredState | null;
+        };
+    }
+    interface Navigator {
+        globalPrivacyControl?: boolean;
+    }
+}
+export declare class ConsentManager {
+    private readonly siteKey;
+    private readonly subjectId;
+    private readonly cmpEndpoint;
+    private readonly callbacks;
+    private cmpConfig;
+    private currentState;
+    private root;
+    private toast;
+    private summary;
+    private readonly storageKey;
+    private readonly cookieName;
+    private readonly channel;
+    private readonly storageListener;
+    private draft;
+    constructor(siteKey: string, subjectId: string, cmpEndpoint: string, callbacks: ConsentManagerCallbacks);
+    init(): Promise<void>;
+    openPreferences(): void;
+    /** True when a stored decision carries an expiry that has passed. */
+    private isExpired;
+    getState(): ConsentStoredState | null;
+    destroy(): void;
+    private fetchConfig;
+    private saveConsent;
+    private applyConsent;
+    private applyOptionalPermissions;
+    private loadStoredConsent;
+    private persistConsent;
+    private broadcastState;
+    private handleExternalState;
+    private renderBanner;
+    private renderPreferencePanel;
+    private renderReconsent;
+    private renderFloatingControl;
+    private renderSummaryBar;
+    private renderPersistentPrivacyControl;
+    private showToast;
+    private bindCommonActions;
+    private bindToggles;
+    /**
+     * Every category, in display order. The backend's per-category `enabled` flag is a tenant
+     * activation setting — whether that consent, once granted, is actually stored and enforced —
+     * not a UI visibility switch. A visitor can express a preference for a category the tenant
+     * hasn't activated yet; the backend clamps the *effect* of that preference independently.
+     */
+    private enabledCategories;
+    /**
+     * Whether the tenant has switched this category on — the other half of the server's rule that a
+     * permission needs both tenant activation and a visitor grant.
+     *
+     * <p>Deliberately not used to filter {@link enabledCategories}: a visitor may still express a
+     * preference for a category the tenant has not activated. It exists for callers that would
+     * otherwise ask the server for something it is certain to refuse with `FEATURE_DISABLED`.
+     */
+    isCategoryActivated(category: RenderableCategory): boolean;
+    private preferenceRow;
+    private permissionChip;
+    private createRoot;
+    /**
+     * Run after any innerHTML assignment on the root: replaces logo placeholders with elements
+     * built via DOM APIs, so tenant-supplied branding never passes through markup parsing.
+     */
+    private finalizeRoot;
+    private closeRoot;
+    private installGlobalApi;
+    /** A Global Privacy Control signal only forces Marketing off; other opt-out categories stay user-controlled. */
+    private applyGlobalPrivacyControl;
+    private hasGlobalPrivacyControl;
+    private shouldShowPersistentPrivacyControl;
+    /**
+     * The raw configured value. Only for callers that sanitise it themselves — everything that
+     * lands in markup must go through {@link text} or {@link url} instead.
+     */
+    private rawText;
+    /**
+     * Content escaped for interpolation into markup.
+     *
+     * Escaping here rather than at each of the ~40 call sites means a newly added string is safe
+     * by default; the unsafe path has to be asked for explicitly.
+     */
+    private text;
+    /** Content sanitised for use in `href`/`src`. Returns '' when the URL is not safe. */
+    private url;
+    private language;
+    /**
+     * Built with DOM APIs rather than interpolated markup: `logoUrl` and `companyName` come from
+     * tenant configuration, and this renders on the tenant's own customers' pages.
+     */
+    private logoElement;
+    /** Placeholder replaced with {@link logoElement} after the markup is parsed. */
+    private logoBlock;
+    /** Swaps every logo placeholder for a safely constructed element. */
+    private hydrateLogos;
+    private floatingHtml;
+    private policyLinks;
+    private configUrl;
+    private poweredBy;
+    private categoryName;
+    private categoryDescription;
+    private categoryIcon;
+    private storageSafeKey;
+    private iconShield;
+    private iconScreen;
+    private iconMegaphone;
+    private iconBars;
+    private iconCheck;
+    private iconX;
+    private iconGear;
+    private iconLock;
+    private iconCheckCircle;
+    private iconMinusCircle;
+    private injectStyles;
+}
+export {};