@owlmeans/consent 0.1.18-rc.8 → 0.1.18

package/tests/tracking.spec.ts

@@ -1,11 +1,11 @@
 import { describe, test, expect } from 'bun:test'
 import { CONSENT_ANALYTICS, CONSENT_ESSENTIAL, CONSENT_EVENT, CONSENT_KEY, CONSENT_MARKETING } from '../src/consts.js'
-import { consentGateScript, trackingGranted } from '../src/gtm.js'
+import { consentModeHelper } from '../src/gtobserver.js'
 import type { ConsentCategory, ConsentRecord } from '../src/types.js'
 
 describe('trackingGranted', () => {
   test('no record at all is not granted', () => {
-    expect(trackingGranted(null)).toBe(false)
+    expect(consentModeHelper.trackingGranted(null)).toBe(false)
   })
 
   test('an essential-only record is not granted — required categories never count', () => {
@@ -13,19 +13,19 @@ describe('trackingGranted', () => {
       [CONSENT_ESSENTIAL]: true, [CONSENT_ANALYTICS]: false, [CONSENT_MARKETING]: false,
     }
 
-    expect(trackingGranted(record)).toBe(false)
+    expect(consentModeHelper.trackingGranted(record)).toBe(false)
   })
 
   test('analytics granted is tracking-granted', () => {
     const record: ConsentRecord = { [CONSENT_ESSENTIAL]: true, [CONSENT_ANALYTICS]: true }
 
-    expect(trackingGranted(record)).toBe(true)
+    expect(consentModeHelper.trackingGranted(record)).toBe(true)
   })
 
   test('marketing granted is tracking-granted too', () => {
     const record: ConsentRecord = { [CONSENT_ESSENTIAL]: true, [CONSENT_MARKETING]: true }
 
-    expect(trackingGranted(record)).toBe(true)
+    expect(consentModeHelper.trackingGranted(record)).toBe(true)
   })
 
   test('a required category is ignored even when the record marks it granted', () => {
@@ -39,7 +39,7 @@ describe('trackingGranted', () => {
       },
     ]
 
-    expect(trackingGranted({ essential: true }, categories)).toBe(false)
+    expect(consentModeHelper.trackingGranted({ essential: true }, categories)).toBe(false)
   })
 
   test('a category with no signals is ignored even when granted', () => {
@@ -47,7 +47,7 @@ describe('trackingGranted', () => {
       { key: 'preferences', labelKey: 'a', descriptionKey: 'b' },
     ]
 
-    expect(trackingGranted({ preferences: true }, categories)).toBe(false)
+    expect(consentModeHelper.trackingGranted({ preferences: true }, categories)).toBe(false)
   })
 })
 
@@ -91,7 +91,7 @@ describe('consentGateScript — the two reachable paths', () => {
   test('a returning visitor with a stored grant runs the loader immediately, synchronously', () => {
     const browser = makeBrowser({ record: { essential: true, analytics: true, v: 2 } })
     browser.win.__loaded = 0
-    browser.run(consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
+    browser.run(consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
 
     expect(browser.win.__loaded).toBe(1)
     // Nothing left listening — the immediate branch never subscribes.
@@ -101,7 +101,7 @@ describe('consentGateScript — the two reachable paths', () => {
   test('a stored record that grants nothing does not run the loader immediately', () => {
     const browser = makeBrowser({ record: { essential: true, analytics: false, v: 2 } })
     browser.win.__loaded = 0
-    browser.run(consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
+    browser.run(consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
 
     expect(browser.win.__loaded).toBe(0)
     expect(browser.listenerCount()).toBe(1)
@@ -110,7 +110,7 @@ describe('consentGateScript — the two reachable paths', () => {
   test('no stored record at all falls to the event-listener branch and waits', () => {
     const browser = makeBrowser()
     browser.win.__loaded = 0
-    browser.run(consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
+    browser.run(consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1'))
 
     expect(browser.win.__loaded).toBe(0)
 
@@ -145,7 +145,7 @@ describe('consentGateScript — the two reachable paths', () => {
     const doc = { cookie: `${CONSENT_KEY}=${record}` }
     // eslint-disable-next-line no-new-func
     new Function(
-      'window', 'document', consentGateScript('window.__loaded = (window.__loaded || 0) + 1')
+      'window', 'document', consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1')
     )(win, doc)
 
     expect(win.__loaded).toBe(1)
@@ -158,7 +158,7 @@ describe('consentGateScript — the two reachable paths', () => {
     ]
     const browser = makeBrowser({ record: { essential: true, analytics: false, v: 2 } })
     browser.win.__loaded = 0
-    browser.run(consentGateScript('window.__loaded = (window.__loaded || 0) + 1', { categories }))
+    browser.run(consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1', { categories }))
 
     expect(browser.win.__loaded).toBe(0)
 
@@ -167,7 +167,7 @@ describe('consentGateScript — the two reachable paths', () => {
   })
 
   test('the generated script carries both reachable code paths in its text', () => {
-    const script = consentGateScript('window.__loaded = (window.__loaded || 0) + 1')
+    const script = consentModeHelper.consentGateScript('window.__loaded = (window.__loaded || 0) + 1')
 
     // The immediate branch: `load()` called right after the stored-record check, before any
     // listener is attached.
@@ -182,7 +182,7 @@ describe('consentGateScript — the two reachable paths', () => {
   test('a custom storage key is honoured, matching the bootstrap script\'s own lookup', () => {
     const browser = makeBrowser({ key: 'custom_key', record: { essential: true, analytics: true, v: 2 } })
     browser.win.__loaded = 0
-    browser.run(consentGateScript(
+    browser.run(consentModeHelper.consentGateScript(
       'window.__loaded = (window.__loaded || 0) + 1', { storageKey: 'custom_key' }
     ))
 

package/build/functional.d.ts

@@ -1,35 +0,0 @@
-import type { ConsentOptions } from './types.js';
-/**
- * Whether this document's visitor has granted functional storage — a preference they set, such as
- * the interface language, may be remembered on their device.
- *
- * Read from the stored record every time rather than from the store's state, so it is correct
- * before `consentStore.init` has run: the language resolves at start-up, ahead of any component.
- * A record with no `functional` key (one saved before the category existed) is NOT a grant — the
- * visitor was never asked, and a preference is not remembered on a device nobody asked about.
- */
-export declare const functionalGranted: (opts?: ConsentOptions) => boolean;
-/** Every `localStorage` key that may hold a functional preference for these options. */
-export declare const functionalKeysOf: (opts?: ConsentOptions) => string[];
-/**
- * Remove every functional preference this application keeps. Called whenever functional is not
- * granted — a refusal, a withdrawal, or a record that never answered — because a preference that
- * outlives the consent to remember it is exactly the storage the visitor did not agree to.
- */
-export declare const purgeFunctionalStorage: (opts?: ConsentOptions) => void;
-/**
- * Remember a functional preference — but only while `functional` is granted. Returns whether it was
- * written. The gate lives here so a caller cannot forget it; an application that is asked to store
- * something functional calls this instead of `localStorage.setItem`.
- */
-export declare const writeFunctionalPreference: (key: string, value: string, opts?: ConsentOptions) => boolean;
-/**
- * An inline `<head>` fragment that defines `window.owlConsentAllows(category)` — whether the stored
- * decision grants that category — for the scripts of a page that has no bundle yet: a site that
- * remembers the visitor's language choice from a plain inline script (owlmeans.com's language
- * switcher) asks it before it writes anything. Reads the same localStorage-then-cookie pair
- * `readConsent` does, and answers `false` for anything it cannot read or parse — no answer is not a
- * grant. Stamp it before the scripts that call it.
- */
-export declare const consentAllowsScript: (opts?: ConsentOptions) => string;
-//# sourceMappingURL=functional.d.ts.map

package/build/functional.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"functional.d.ts","sourceRoot":"","sources":["../src/functional.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,UAAW,cAAc,KAAG,OACR,CAAA;AAElD,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,UAAW,cAAc,KAAG,MAAM,EAK9D,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,UAAW,cAAc,KAAG,IAM9D,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,QAAS,MAAM,SAAS,MAAM,SAAS,cAAc,KAAG,OAW7F,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,UAAW,cAAc,KAAG,MAS3D,CAAA"}

package/build/functional.js

@@ -1,67 +0,0 @@
-import { CONSENT_FUNCTIONAL, CONSENT_KEY, CONSENT_LANGUAGE_KEY } from './consts.js';
-import { readConsent } from './storage.js';
-/**
- * Whether this document's visitor has granted functional storage — a preference they set, such as
- * the interface language, may be remembered on their device.
- *
- * Read from the stored record every time rather than from the store's state, so it is correct
- * before `consentStore.init` has run: the language resolves at start-up, ahead of any component.
- * A record with no `functional` key (one saved before the category existed) is NOT a grant — the
- * visitor was never asked, and a preference is not remembered on a device nobody asked about.
- */
-export const functionalGranted = (opts) => readConsent(opts)?.[CONSENT_FUNCTIONAL] === true;
-/** Every `localStorage` key that may hold a functional preference for these options. */
-export const functionalKeysOf = (opts) => [
-    ...new Set([
-        ...(opts?.functionalKeys ?? [CONSENT_LANGUAGE_KEY]),
-        ...(opts?.linker?.language?.storageKey != null ? [opts.linker.language.storageKey] : []),
-    ]),
-];
-/**
- * Remove every functional preference this application keeps. Called whenever functional is not
- * granted — a refusal, a withdrawal, or a record that never answered — because a preference that
- * outlives the consent to remember it is exactly the storage the visitor did not agree to.
- */
-export const purgeFunctionalStorage = (opts) => {
-    for (const key of functionalKeysOf(opts)) {
-        try {
-            localStorage.removeItem(key);
-        }
-        catch { /* storage blocked: nothing was written there to remove */ }
-    }
-};
-/**
- * Remember a functional preference — but only while `functional` is granted. Returns whether it was
- * written. The gate lives here so a caller cannot forget it; an application that is asked to store
- * something functional calls this instead of `localStorage.setItem`.
- */
-export const writeFunctionalPreference = (key, value, opts) => {
-    if (!functionalGranted(opts)) {
-        return false;
-    }
-    try {
-        localStorage.setItem(key, value);
-        return true;
-    }
-    catch {
-        return false;
-    }
-};
-/**
- * An inline `<head>` fragment that defines `window.owlConsentAllows(category)` — whether the stored
- * decision grants that category — for the scripts of a page that has no bundle yet: a site that
- * remembers the visitor's language choice from a plain inline script (owlmeans.com's language
- * switcher) asks it before it writes anything. Reads the same localStorage-then-cookie pair
- * `readConsent` does, and answers `false` for anything it cannot read or parse — no answer is not a
- * grant. Stamp it before the scripts that call it.
- */
-export const consentAllowsScript = (opts) => {
-    const key = JSON.stringify(opts?.storageKey ?? CONSENT_KEY).replace(/</g, '\\u003c');
-    return `(function(w,d){w.owlConsentAllows=function(k){` +
-        `var raw=null;try{raw=w.localStorage.getItem(${key})}catch(e){}` +
-        `if(!raw){var p=('; '+d.cookie).split('; '+${key}+'=');if(p.length===2)raw=p.pop().split(';').shift()}` +
-        `if(!raw)return false;` +
-        `try{var r=JSON.parse(raw);return !!r&&typeof r==='object'&&r[k]===true}catch(e){return false}}` +
-        `})(window,document)`;
-};
-//# sourceMappingURL=functional.js.map

package/build/functional.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"functional.js","sourceRoot":"","sources":["../src/functional.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG1C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAqB,EAAW,EAAE,CAClE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAA;AAElD,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAqB,EAAY,EAAE,CAAC;IACnE,GAAG,IAAI,GAAG,CAAC;QACT,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;CACH,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAqB,EAAQ,EAAE;IACpE,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,IAAqB,EAAW,EAAE;IACtG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAEhC,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAqB,EAAU,EAAE;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAEpF,OAAO,gDAAgD;QACrD,+CAA+C,GAAG,cAAc;QAChE,6CAA6C,GAAG,uDAAuD;QACvG,uBAAuB;QACvB,gGAAgG;QAClG,qBAAqB,CAAA;AACvB,CAAC,CAAA"}

package/build/gtm.d.ts

@@ -1,72 +0,0 @@
-import type { ConsentCategory, ConsentOptions, ConsentRecord } from './types.js';
-/**
- * Push onto the tag-manager queue in the shape Google's own snippet uses.
- *
- * `arguments`, not an array literal. Both work with today's Consent API, but `arguments` is what
- * `gtag.js` itself emits, and a page that carries both this and Google's snippet should not have
- * two shapes in one queue.
- */
-export declare function gtagConsent(..._args: unknown[]): void;
-/** Every signal the configured categories drive, at its pre-consent value. */
-export declare const consentDefaults: (categories?: ConsentCategory[]) => Record<string, 'granted' | 'denied'>;
-/** Every signal, at the value this record implies. */
-export declare const consentUpdate: (record: ConsentRecord, categories?: ConsentCategory[]) => Record<string, 'granted' | 'denied'>;
-/**
- * Declare what is denied, before any tag can act.
- *
- * Idempotent through a window flag, because the page may carry this call twice — once inline in
- * the document head, once from whatever bundle mounts the dialog — and a second `default` after a
- * tag has loaded is worse than none: it can widen what was already narrowed.
- */
-export declare const pushConsentDefaults: (opts?: ConsentOptions) => void;
-/**
- * Apply a decision: globals first, then the signal update, then any per-category events.
- *
- * The order is load-bearing. A tag that fires on the update event reads the globals in the same
- * turn, so writing them afterwards would let the first firing see the previous answer.
- */
-export declare const applyConsent: (record: ConsentRecord, opts?: ConsentOptions) => void;
-/**
- * Whether a stored decision grants tracking at all — a signal-bearing category, not merely the
- * required essential one.
- *
- * "Signal-bearing" is what a required category can never be: it exists to gate whether a LOADER
- * runs, and a required category is disclosure, not a question — everyone gets it. Only a category
- * that both is optional and drives at least one Consent Mode signal counts, which is exactly what
- * `googleTagHeadScript`'s `'basic'` mode gates a Google tag behind.
- */
-export declare const trackingGranted: (record: ConsentRecord | null, categories?: ConsentCategory[]) => boolean;
-/**
- * The inline script a document stamps ABOVE its tag-manager snippet.
- *
- * It exists because the defaults have to be on the queue before `gtm.js` loads, and a React bundle
- * cannot be: by the time an island mounts, the container has been running for hundreds of
- * milliseconds and has already decided what it may do. Emitting it from the HTML is the only
- * ordering that holds — and it reads the stored record too, so a returning visitor's tags are not
- * denied for the first paint of every page.
- */
-export declare const consentBootstrapScript: (opts?: ConsentOptions) => string;
-/**
- * Withhold a loader until a stored or later decision grants tracking.
- *
- * The counterpart to `consentBootstrapScript` for the `'basic'` gated loading mode
- * (`@owlmeans/web-gtm`'s `GOOGLE_TAG_DEFAULT_MODE`): where the bootstrap always declares Consent
- * Mode's defaults so a tag may load cookieless, this withholds the tag itself — the loader string
- * is only ever reached once `trackingGranted` is true, either because a returning visitor's stored
- * record already says so, or because `applyConsent` later dispatches {@link CONSENT_EVENT} with
- * one that does. The listener removes itself on the first passing event, so the loader — which
- * marks its own element and refuses to run twice — is asked to run at most once from here.
- *
- * `loaderExpr` is a complete statement or expression that runs the loader when reached — the
- * self-invoking IIFE string `googleTagHeadScript`'s `gtagScript`/`gtmContainerScript` already
- * produce, embedded here verbatim rather than called. It is placed inline exactly as
- * `consentBootstrapScript`'s own output is: dynamic values (the storage key, the category shape,
- * the event name) are JSON-encoded so nothing configured can break out of a string literal, and
- * escaping the RESULT for HTML (`</script`, `<!--`) is left to whoever composes the final inline
- * script — the same discipline `consentBootstrapScript` follows, and `googleTagHeadScript` already
- * applies to the whole script it stamps.
- */
-export declare const consentGateScript: (loaderExpr: string, opts?: ConsentOptions & {
-    categories?: ConsentCategory[];
-}) => string;
-//# sourceMappingURL=gtm.d.ts.map

package/build/gtm.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gtm.d.ts","sourceRoot":"","sources":["../src/gtm.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAUhF;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAUrD;AAKD,8EAA8E;AAC9E,eAAO,MAAM,eAAe,gBACb,eAAe,EAAE,KAC7B,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAMrC,CAAA;AAED,sDAAsD;AACtD,eAAO,MAAM,aAAa,WAChB,aAAa,eAAe,eAAe,EAAE,KACpD,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAWrC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAAW,cAAc,KAAG,IAO3D,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,WAAY,aAAa,SAAS,cAAc,KAAG,IA6B3E,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,WAClB,aAAa,GAAG,IAAI,eAAc,eAAe,EAAE,KAC1D,OAEF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,UAAW,cAAc,KAAG,MA+B9D,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iBAAiB,eAChB,MAAM,SAAS,cAAc,GAAG;IAAE,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;CAAE,KAC7E,MAuBF,CAAA"}

package/build/gtm.js

@@ -1,182 +0,0 @@
-import { CONSENT_EVENT, CONSENT_KEY, CONSENT_SETUP_FLAG, CONSENT_SIGNAL_DEFAULTS, DEFAULT_CONSENT_CATEGORIES, } from './consts.js';
-import { consentLinkerScript } from './linker.js';
-const global = () => typeof window !== 'undefined' ? window : null;
-/**
- * Push onto the tag-manager queue in the shape Google's own snippet uses.
- *
- * `arguments`, not an array literal. Both work with today's Consent API, but `arguments` is what
- * `gtag.js` itself emits, and a page that carries both this and Google's snippet should not have
- * two shapes in one queue.
- */
-export function gtagConsent(..._args) {
-    const win = global();
-    if (win == null) {
-        return;
-    }
-    win.dataLayer = win.dataLayer ?? [];
-    // `arguments`, not `_args`. The rest parameter is only here to type the call sites; what goes on
-    // the queue must be the arguments object itself.
-    // eslint-disable-next-line prefer-rest-params
-    win.dataLayer.push(arguments);
-}
-const categoriesOf = (opts) => opts?.categories ?? DEFAULT_CONSENT_CATEGORIES;
-/** Every signal the configured categories drive, at its pre-consent value. */
-export const consentDefaults = (categories) => {
-    const used = new Set((categories ?? DEFAULT_CONSENT_CATEGORIES)
-        .flatMap(category => category.signals ?? []));
-    return Object.fromEntries(Object.entries(CONSENT_SIGNAL_DEFAULTS)
-        .filter(([signal]) => used.has(signal)));
-};
-/** Every signal, at the value this record implies. */
-export const consentUpdate = (record, categories) => {
-    const update = {};
-    for (const category of categories ?? DEFAULT_CONSENT_CATEGORIES) {
-        const granted = category.required === true || record[category.key] === true;
-        for (const signal of category.signals ?? []) {
-            // A signal named by two categories is granted only when every one of them is.
-            update[signal] = granted && update[signal] !== 'denied' ? 'granted' : 'denied';
-        }
-    }
-    return update;
-};
-/**
- * Declare what is denied, before any tag can act.
- *
- * Idempotent through a window flag, because the page may carry this call twice — once inline in
- * the document head, once from whatever bundle mounts the dialog — and a second `default` after a
- * tag has loaded is worse than none: it can widen what was already narrowed.
- */
-export const pushConsentDefaults = (opts) => {
-    const win = global();
-    if (win == null || opts?.silent === true || win[CONSENT_SETUP_FLAG] === true) {
-        return;
-    }
-    gtagConsent('consent', 'default', consentDefaults(categoriesOf(opts)));
-    win[CONSENT_SETUP_FLAG] = true;
-};
-/**
- * Apply a decision: globals first, then the signal update, then any per-category events.
- *
- * The order is load-bearing. A tag that fires on the update event reads the globals in the same
- * turn, so writing them afterwards would let the first firing see the previous answer.
- */
-export const applyConsent = (record, opts) => {
-    const win = global();
-    if (win == null || opts?.silent === true) {
-        return;
-    }
-    const categories = categoriesOf(opts);
-    for (const category of categories) {
-        if (category.globalVar != null) {
-            win[category.globalVar] = category.required === true || record[category.key] === true;
-        }
-    }
-    gtagConsent('consent', 'update', consentUpdate(record, categories));
-    for (const category of categories) {
-        if (category.event != null && (category.required === true || record[category.key] === true)) {
-            win.dataLayer = win.dataLayer ?? [];
-            win.dataLayer.push({ event: category.event });
-        }
-    }
-    // A gate script (`consentGateScript`) that already decided NOT to load, because nothing was
-    // granted at the time it ran, has no other way to hear this. Consent Mode itself speaks only on
-    // `dataLayer`, which a tag that never loaded is not listening to.
-    if (typeof window !== 'undefined' && typeof window.dispatchEvent === 'function'
-        && typeof CustomEvent === 'function') {
-        window.dispatchEvent(new CustomEvent(CONSENT_EVENT, { detail: { record } }));
-    }
-};
-/**
- * Whether a stored decision grants tracking at all — a signal-bearing category, not merely the
- * required essential one.
- *
- * "Signal-bearing" is what a required category can never be: it exists to gate whether a LOADER
- * runs, and a required category is disclosure, not a question — everyone gets it. Only a category
- * that both is optional and drives at least one Consent Mode signal counts, which is exactly what
- * `googleTagHeadScript`'s `'basic'` mode gates a Google tag behind.
- */
-export const trackingGranted = (record, categories = DEFAULT_CONSENT_CATEGORIES) => record != null && categories.some(category => !category.required && (category.signals?.length ?? 0) > 0 && record[category.key] === true);
-/**
- * The inline script a document stamps ABOVE its tag-manager snippet.
- *
- * It exists because the defaults have to be on the queue before `gtm.js` loads, and a React bundle
- * cannot be: by the time an island mounts, the container has been running for hundreds of
- * milliseconds and has already decided what it may do. Emitting it from the HTML is the only
- * ordering that holds — and it reads the stored record too, so a returning visitor's tags are not
- * denied for the first paint of every page.
- */
-export const consentBootstrapScript = (opts) => {
-    const defaults = JSON.stringify(consentDefaults(categoriesOf(opts)));
-    const categories = JSON.stringify(categoriesOf(opts).map(category => ({
-        key: category.key,
-        required: category.required === true,
-        signals: category.signals ?? [],
-        globalVar: category.globalVar ?? null,
-    })));
-    const storageKey = JSON.stringify(opts?.storageKey ?? CONSENT_KEY);
-    const flag = JSON.stringify(CONSENT_SETUP_FLAG);
-    // Right after the default is pushed and before EITHER storage read below (this one, and the
-    // `consentGateScript` that is concatenated after this whole IIFE) — an adopted decision must
-    // already be in storage by the time anything reads it, so `gtm.js`'s own `page_view` never sees
-    // the parameter and a granted decision loads the tag on arrival. A page with no `opts.linker`
-    // gets an empty string here, unchanged from before this existed.
-    const linker = opts?.linker != null ? `${consentLinkerScript(opts)};` : '';
-    return `(function(w,d){` +
-        `w.dataLayer=w.dataLayer||[];function g(){w.dataLayer.push(arguments)}` +
-        `if(w[${flag}])return;g('consent','default',${defaults});w[${flag}]=true;` +
-        linker +
-        `var raw=null;try{raw=w.localStorage.getItem(${storageKey})}catch(e){}` +
-        `if(!raw){var p=('; '+d.cookie).split('; '+${storageKey}+'=');` +
-        `if(p.length===2){raw=p.pop().split(';').shift()}}` +
-        `if(!raw)return;var r;try{r=JSON.parse(raw)}catch(e){return}` +
-        `var cs=${categories},u={};` +
-        `for(var i=0;i<cs.length;i++){var c=cs[i];var ok=c.required||r[c.key]===true;` +
-        `if(c.globalVar){w[c.globalVar]=ok}` +
-        `for(var j=0;j<c.signals.length;j++){var s=c.signals[j];` +
-        `u[s]=ok&&u[s]!=='denied'?'granted':'denied'}}` +
-        `g('consent','update',u)})(window,document)`;
-};
-/**
- * Withhold a loader until a stored or later decision grants tracking.
- *
- * The counterpart to `consentBootstrapScript` for the `'basic'` gated loading mode
- * (`@owlmeans/web-gtm`'s `GOOGLE_TAG_DEFAULT_MODE`): where the bootstrap always declares Consent
- * Mode's defaults so a tag may load cookieless, this withholds the tag itself — the loader string
- * is only ever reached once `trackingGranted` is true, either because a returning visitor's stored
- * record already says so, or because `applyConsent` later dispatches {@link CONSENT_EVENT} with
- * one that does. The listener removes itself on the first passing event, so the loader — which
- * marks its own element and refuses to run twice — is asked to run at most once from here.
- *
- * `loaderExpr` is a complete statement or expression that runs the loader when reached — the
- * self-invoking IIFE string `googleTagHeadScript`'s `gtagScript`/`gtmContainerScript` already
- * produce, embedded here verbatim rather than called. It is placed inline exactly as
- * `consentBootstrapScript`'s own output is: dynamic values (the storage key, the category shape,
- * the event name) are JSON-encoded so nothing configured can break out of a string literal, and
- * escaping the RESULT for HTML (`</script`, `<!--`) is left to whoever composes the final inline
- * script — the same discipline `consentBootstrapScript` follows, and `googleTagHeadScript` already
- * applies to the whole script it stamps.
- */
-export const consentGateScript = (loaderExpr, opts) => {
-    const gate = JSON.stringify(categoriesOf(opts).map(category => ({
-        key: category.key,
-        required: category.required === true,
-        hasSignal: (category.signals ?? []).length > 0,
-    })));
-    const storageKey = JSON.stringify(opts?.storageKey ?? CONSENT_KEY);
-    const event = JSON.stringify(CONSENT_EVENT);
-    return `(function(w,d){` +
-        `function ok(r){if(!r)return false;var cs=${gate};` +
-        `for(var i=0;i<cs.length;i++){var c=cs[i];` +
-        `if(!c.required&&c.hasSignal&&r[c.key]===true)return true}return false}` +
-        `function load(){${loaderExpr}}` +
-        `var raw=null;try{raw=w.localStorage.getItem(${storageKey})}catch(e){}` +
-        `if(!raw){var p=('; '+d.cookie).split('; '+${storageKey}+'=');` +
-        `if(p.length===2){raw=p.pop().split(';').shift()}}` +
-        `var r=null;if(raw){try{r=JSON.parse(raw)}catch(e){r=null}}` +
-        `if(ok(r)){load();return}` +
-        `function h(ev){if(ok(ev&&ev.detail&&ev.detail.record)){` +
-        `w.removeEventListener(${event},h);load()}}` +
-        `w.addEventListener(${event},h)` +
-        `})(window,document)`;
-};
-//# sourceMappingURL=gtm.js.map

package/build/gtm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gtm.js","sourceRoot":"","sources":["../src/gtm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,uBAAuB,EACvE,0BAA0B,GAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAQjD,MAAM,MAAM,GAAG,GAAyB,EAAE,CACxC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAA;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,KAAgB;IAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAA;IACnC,iGAAiG;IACjG,iDAAiD;IACjD,8CAA8C;IAC9C,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,IAAqB,EAAqB,EAAE,CAChE,IAAI,EAAE,UAAU,IAAI,0BAA0B,CAAA;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,UAA8B,EACQ,EAAE;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,0BAA0B,CAAC;SAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IAE/C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;SAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAe,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAqB,EAAE,UAA8B,EACf,EAAE;IACxC,MAAM,MAAM,GAAyC,EAAE,CAAA;IACvD,KAAK,MAAM,QAAQ,IAAI,UAAU,IAAI,0BAA0B,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;QAC3E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC5C,8EAA8E;YAC9E,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;QAChF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAqB,EAAQ,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAM;IACR,CAAC;IACD,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtE,GAAG,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAqB,EAAE,IAAqB,EAAQ,EAAE;IACjF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QACzC,OAAM;IACR,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAErC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;QACvF,CAAC;IACH,CAAC;IAED,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;IAEnE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAA;YACnC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,gGAAgG;IAChG,kEAAkE;IAClE,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU;WAC1E,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAA4B,EAAE,UAAU,GAAsB,0BAA0B,EAC/E,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,CAC7C,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CACvG,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAqB,EAAU,EAAE;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpE,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QACpC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;KACtC,CAAC,CAAC,CAAC,CAAA;IACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAC/C,4FAA4F;IAC5F,6FAA6F;IAC7F,gGAAgG;IAChG,8FAA8F;IAC9F,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE1E,OAAO,iBAAiB;QACtB,uEAAuE;QACvE,QAAQ,IAAI,kCAAkC,QAAQ,OAAO,IAAI,SAAS;QAC1E,MAAM;QACN,+CAA+C,UAAU,cAAc;QACvE,6CAA6C,UAAU,QAAQ;QAC/D,mDAAmD;QACnD,6DAA6D;QAC7D,UAAU,UAAU,QAAQ;QAC5B,8EAA8E;QAC9E,oCAAoC;QACpC,yDAAyD;QACzD,+CAA+C;QAC/C,4CAA4C,CAAA;AAChD,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,UAAkB,EAAE,IAA0D,EACtE,EAAE;IACV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9D,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QACpC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;KAC/C,CAAC,CAAC,CAAC,CAAA;IACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IAE3C,OAAO,iBAAiB;QACtB,4CAA4C,IAAI,GAAG;QACnD,2CAA2C;QAC3C,wEAAwE;QACxE,mBAAmB,UAAU,GAAG;QAChC,+CAA+C,UAAU,cAAc;QACvE,6CAA6C,UAAU,QAAQ;QAC/D,mDAAmD;QACnD,4DAA4D;QAC5D,0BAA0B;QAC1B,yDAAyD;QACzD,yBAAyB,KAAK,cAAc;QAC5C,sBAAsB,KAAK,KAAK;QAChC,qBAAqB,CAAA;AACzB,CAAC,CAAA"}

package/src/functional.ts

@@ -1,73 +0,0 @@
-import { CONSENT_FUNCTIONAL, CONSENT_KEY, CONSENT_LANGUAGE_KEY } from './consts.js'
-import { readConsent } from './storage.js'
-import type { ConsentOptions } from './types.js'
-
-/**
- * Whether this document's visitor has granted functional storage — a preference they set, such as
- * the interface language, may be remembered on their device.
- *
- * Read from the stored record every time rather than from the store's state, so it is correct
- * before `consentStore.init` has run: the language resolves at start-up, ahead of any component.
- * A record with no `functional` key (one saved before the category existed) is NOT a grant — the
- * visitor was never asked, and a preference is not remembered on a device nobody asked about.
- */
-export const functionalGranted = (opts?: ConsentOptions): boolean =>
-  readConsent(opts)?.[CONSENT_FUNCTIONAL] === true
-
-/** Every `localStorage` key that may hold a functional preference for these options. */
-export const functionalKeysOf = (opts?: ConsentOptions): string[] => [
-  ...new Set([
-    ...(opts?.functionalKeys ?? [CONSENT_LANGUAGE_KEY]),
-    ...(opts?.linker?.language?.storageKey != null ? [opts.linker.language.storageKey] : []),
-  ]),
-]
-
-/**
- * Remove every functional preference this application keeps. Called whenever functional is not
- * granted — a refusal, a withdrawal, or a record that never answered — because a preference that
- * outlives the consent to remember it is exactly the storage the visitor did not agree to.
- */
-export const purgeFunctionalStorage = (opts?: ConsentOptions): void => {
-  for (const key of functionalKeysOf(opts)) {
-    try {
-      localStorage.removeItem(key)
-    } catch { /* storage blocked: nothing was written there to remove */ }
-  }
-}
-
-/**
- * Remember a functional preference — but only while `functional` is granted. Returns whether it was
- * written. The gate lives here so a caller cannot forget it; an application that is asked to store
- * something functional calls this instead of `localStorage.setItem`.
- */
-export const writeFunctionalPreference = (key: string, value: string, opts?: ConsentOptions): boolean => {
-  if (!functionalGranted(opts)) {
-    return false
-  }
-  try {
-    localStorage.setItem(key, value)
-
-    return true
-  } catch {
-    return false
-  }
-}
-
-/**
- * An inline `<head>` fragment that defines `window.owlConsentAllows(category)` — whether the stored
- * decision grants that category — for the scripts of a page that has no bundle yet: a site that
- * remembers the visitor's language choice from a plain inline script (owlmeans.com's language
- * switcher) asks it before it writes anything. Reads the same localStorage-then-cookie pair
- * `readConsent` does, and answers `false` for anything it cannot read or parse — no answer is not a
- * grant. Stamp it before the scripts that call it.
- */
-export const consentAllowsScript = (opts?: ConsentOptions): string => {
-  const key = JSON.stringify(opts?.storageKey ?? CONSENT_KEY).replace(/</g, '\\u003c')
-
-  return `(function(w,d){w.owlConsentAllows=function(k){` +
-    `var raw=null;try{raw=w.localStorage.getItem(${key})}catch(e){}` +
-    `if(!raw){var p=('; '+d.cookie).split('; '+${key}+'=');if(p.length===2)raw=p.pop().split(';').shift()}` +
-    `if(!raw)return false;` +
-    `try{var r=JSON.parse(raw);return !!r&&typeof r==='object'&&r[k]===true}catch(e){return false}}` +
-  `})(window,document)`
-}