@owlmeans/web-consent 0.1.18-rc.2 → 0.1.18-rc.21

package/README.md

@@ -0,0 +1,15 @@
+<!-- owlmeans:agent-guidance:start -->
+## Agent guidance
+
+This package ships embedded agent skills under `agent-meta/`. After installing your
+`@owlmeans/*` packages, run the OwlMeans agent-skills installer to place them into
+your project's skill store (`.agents/skills/`):
+
+```sh
+npx @owlmeans/agent-skills@^0.1.18-rc.27
+```
+
+The embedded files are version-matched to this package release. Do not edit them
+directly — they are regenerated on each publish. To contribute guidance edits,
+open a PR against the source monorepo.
+<!-- owlmeans:agent-guidance:end -->

package/agent-meta/manifest.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 2,
+  "package": "@owlmeans/web-consent",
+  "version": "0.1.18-rc.21",
+  "generatedAt": "2026-09-15T18:16:10.631Z",
+  "canonicalRepo": "https://github.com/owlmeans/common",
+  "entries": [
+    {
+      "kind": "skill",
+      "name": "web-consent",
+      "category": "package-specific",
+      "file": "skills/web-consent/SKILL.md",
+      "canonicalPath": ".agents/skills/web-consent/SKILL.md"
+    }
+  ]
+}

package/agent-meta/skills/web-consent/SKILL.md

@@ -0,0 +1,214 @@
+---
+name: web-consent
+description: How to use @owlmeans/web-consent — the React cookie-consent dialog, its re-open button, the generated cookie-policy page and the useConsent hooks, plus the Tailwind @source line every consumer must add. Auto-invoked when mounting a consent dialog, rendering a cookie policy, gating a feature on a consent category, or importing CookieConsent, CookiePolicy or useConsent.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/web-consent
+
+**Layer:** Web (React)
+**Install:** `"@owlmeans/web-consent": "^0.1.18-rc.21"` in `dependencies`
+
+The browser components of the consent set. The model — categories, storage, migration, the store,
+Consent Mode signalling — is `@owlmeans/consent`, and this package re-exports a **named selection**
+of it (listed under Key Exports) so an application usually has one import. Five public
+`@owlmeans/consent` exports are deliberately not in that list — `makeConsentStore`,
+`normalizeLocale`, `CONSENT_SETUP_FLAG`, `CONSENT_SIGNAL_DEFAULTS` and the `ConsentListener` type —
+so a caller that needs one of them imports it from `@owlmeans/consent` directly. **Read the
+`consent` skill for the model; read this one for the components.**
+
+## Deliberately not a shadcn package
+
+It uses **no shadcn primitive and no `@` alias**, and owns a four-line `cn` of its own. The `@`
+contract exists so a consumer's THEME and primitives win — `cn` has neither in it, and requiring an
+alias for it would mean adopting an OwlMeans UI contract before you may render a consent notice.
+One of the surfaces that needs this dialog most is a static site with its own component library and
+no such alias, where that would simply fail to build.
+
+For the same reason it is not part of `@owlmeans/web-panel`: that would drag ~30 packages onto a
+cookie notice. `@owlmeans/web-panel/consent` is the thin binding to OwlMeans i18n on top of these
+components — see below.
+
+## Key Exports
+
+| Export | Description |
+|--------|-------------|
+| `CookieConsent` | The preferences dialog **and** the persistent re-open button |
+| `ConsentMenuWidget` | A plain row a HOST'S OWN menu renders to reopen the dialog, in place of (or beside) `CookieConsent`'s own floating button — see below |
+| `CookiePolicy` | The cookie-policy page, generated from the configuration in force |
+| `ConsentToggle` | One category row — locked and labelled when the category is required |
+| `useConsent(opts?)` | This document's consent state and the actions over it (`UseConsentModel`) — **it also initialises the store on mount**, see below |
+| `useConsentCategory(key)` | Whether one category is granted, for a component gating a single thing |
+| `CookieConsentProps` / `CookiePolicyProps` / `ConsentLink` | The component props |
+| Re-exports from `@owlmeans/consent` | The complete list: `consentStore`, `openConsent`, `isConsented`, `readConsent`, `writeConsent`, `clearConsent`, `migrateConsent`, `applyConsent`, `pushConsentDefaults`, `consentBootstrapScript`, `consentDefaults`, `consentUpdate`, `gtagConsent`, `DEFAULT_CONSENT_CATEGORIES`, `DEFAULT_CONSENT_MESSAGES`, `defaultConsentTranslate`, `interpolate`, `CONSENT_KEY`, `CONSENT_COOKIE_DAYS`, `CONSENT_SCHEMA_VERSION`, `CONSENT_LOCALES`, `CONSENT_ESSENTIAL` / `CONSENT_ANALYTICS` / `CONSENT_MARKETING`, and the types `ConsentCategory`, `ConsentOptions`, `ConsentReason`, `ConsentRecord`, `ConsentSignal`, `ConsentState`, `ConsentStore`, `ConsentLocale` |
+
+## Mounting the dialog
+
+`CookieConsent` is mounted **once**, at the application root or in the layout. It opens itself when
+no decision is stored, renders nothing but the re-open button once one is, and needs no state from
+the caller:
+
+```tsx
+import { CookieConsent } from '@owlmeans/web-consent'
+
+<CookieConsent
+  policyHref="/legal/cookies"
+  links={[{ href: '/legal/privacy', labelKey: 'privacy', defaultLabel: 'Privacy Policy' }]}
+/>
+```
+
+- **The category set the dialog renders is the set it saves.** Pass `categories` here and pass the
+  same set to whatever stamps the head snippet, or the two disagree about what was asked. The same
+  goes for `storageKey`, `cookieDays` and `cookieDomain`.
+- `locale` picks the packaged language; leave it unset and English is used, so an app with a
+  language of its own passes it (or mounts `PanelCookieConsent`, which does). A region tag is
+  reduced to its base (`pl-PL` → `pl`), and anything outside the seven falls back to English.
+- `policyHref` is a plain string, so an app-resolved path, a framework route and a raw href all
+  work — the component must not know how its host does routing.
+- `noReopenButton` hides the floating button for an app that offers a footer link instead; that link
+  calls `openConsent('reopen')`.
+- **The re-open button is a bare icon in the very corner (`bottom-1 left-1`), not a card.** No
+  filled background, no border, no shadow, no hover-scale — `bg-transparent`, dimmed
+  (`opacity-70`) at rest and picked out on hover/focus — because it sits on every page of a site
+  for as long as a visitor stays and must read as a small fixture rather than compete with the
+  page's own controls. The pictogram itself stays at its original 20px (`h-5 w-5`); only the
+  chrome around it shrank. `[data-consent-reopen]` is still what any test or CSS override keys on.
+- `silent` skips every `dataLayer` and global write. It is for tests and for an app that runs no
+  tags at all.
+- The draft is **re-seeded from storage every time the dialog opens**, not from the last render — a
+  visitor reopening preferences must see the answer they gave.
+
+**When the dialog was raised by something waiting on it** — `reason === 'login'`, which the sign-in
+precondition in `@owlmeans/client-iam` raises — it says so and relabels the primary action *Accept
+& continue*. That is what makes the interruption legible instead of looking like the page asking
+twice. Word that path as an acknowledgement, never as "you must consent to essential cookies": a
+required category is disclosure, not a question.
+
+## A menu row for a host that already has one
+
+`ConsentMenuWidget` renders one row — icon, translated label, `onClick` reopening the dialog
+(`openConsent('reopen')` by default, or a caller's own `onSelect`) — for a host whose own
+navigation already carries a settings menu and would rather offer cookie preferences there than as
+a second floating button. It calls `openConsent` directly, never `useConsent()`, for the same
+init-on-mount reason as everywhere else in this document.
+
+**It carries no presence signalling of its own.** A host that wants `CookieConsent`'s floating
+button to hide while this row is reachable needs to know that itself, from something that stays
+mounted for as long as the row is reachable — never from the row's own mount. A row placed inside a
+host menu's lazily-rendered content (Radix's `DropdownMenuContent`, and most headless menu
+primitives, only mount their children while the menu is actually OPEN) reports "present" for a
+fraction of the time the menu itself is on screen, and the floating button reappears the instant
+the menu closes. `@owlmeans/web-panel/consent`'s `useConsentMenuPresence()` is the fix for a
+context-aware host: call it from the menu's own always-mounted shell component, not from inside the
+row. A context-free host (an Astro island with its own menu) owns that judgement itself.
+
+## Reading the decision
+
+```tsx
+import { useConsent, useConsentCategory, isConsented } from '@owlmeans/web-consent'
+
+const consent = useConsent()          // { record, open, reason, granted, save, acceptAll, openDialog, close }
+const analytics = useConsentCategory('analytics')   // one category, for a component gating one thing
+if (isConsented('analytics')) { /* outside React — a click handler, a service */ }
+```
+
+Both hooks subscribe through `useSyncExternalStore` over the module-singleton store, because consent
+is a property of the DOCUMENT rather than of a component tree: the dialog, the re-open button, the
+policy page and whatever an app gates on it all read one value, and local copies would disagree the
+moment one of them saved. During server rendering the snapshot is "no record, closed", so the dialog
+never flashes into static HTML before hydration corrects it.
+
+**`useConsent` is not a pure reader — it runs `consentStore.init(opts)` on mount.** Two consequences
+a component that only wanted to read has to plan for:
+
+- **It opens the dialog.** `init` reads storage, and with no stored record it publishes
+  `open: true, reason: 'initial'`. So a `useConsent()` in a card that merely wanted `granted('analytics')`
+  gates the page for a first-time visitor. Read a single category with `useConsentCategory(key)` —
+  that hook subscribes and does **not** init — or `isConsented(key)` outside React.
+- **The first `useConsent` to mount fixes the Consent Mode defaults.** `init` calls
+  `pushConsentDefaults`, which is idempotent through the `CONSENT_SETUP_FLAG` window flag: whoever
+  gets there first declares the `consent/default` signals from *its* categories, and every later
+  call returns immediately. A bare `useConsent()` mounting before `CookieConsent` therefore declares
+  `DEFAULT_CONSENT_CATEGORIES`' signals and the app's own `categories` never declare theirs — which
+  silently breaks the parity rule above. Pass the app's `opts` wherever `useConsent` is called, or
+  do not call it outside the dialog.
+
+`opts` are read on the mounting pass only (the effect's dependency list is empty), so changing them
+in a later render has no effect on that mount.
+
+## The policy page
+
+`CookiePolicy` states only what the widget provably does — the categories in force, the storage key,
+the dual storage, the retention — all read from the same configuration the dialog renders. That is
+why it is generated rather than written: a hand-written policy drifts the first time a category
+changes, and nobody notices because nobody reads it until it matters.
+
+```tsx
+<CookiePolicy operator="Example Sp. z o.o." privacyHref="/legal/privacy" termsHref="/legal/terms" />
+```
+
+Everything OwlMeans cannot assert on the operator's behalf — who the controller is, the lawful
+basis, how to exercise rights — is deferred to those two links. It also renders a *Manage
+preferences* control, so the policy page is a way back into the decision.
+
+## Tailwind — one `@source` line, pointing at `src`
+
+The components emit Tailwind classes that exist nowhere in the consumer's own sources, and
+Tailwind's scanner reads the CSS root plus `@source` directives only, excluding `node_modules`. Add
+the line to the app's Tailwind entry:
+
+```css
+@import "tailwindcss";
+
+@source "<relative path to node_modules>/@owlmeans/web-consent/src";
+```
+
+**Point it at `src`, never at `build`.** The scanner applies the `.gitignore` of whatever repository
+a path resolves into, and under a linked workspace the `node_modules` entry is a symlink into a
+monorepo where every package's build output is ignored. A `build` source there scans **zero files
+and reports nothing**: the build succeeds, the CSS is emitted, and the dialog renders *half*-styled
+— the utilities the app happens to use elsewhere still exist while the ones only this package asks
+for (`max-w-lg`, `bg-black/70`, `z-[999998]`) do not. What reaches the screen is a full-width,
+backdrop-less dialog with the page bleeding through, and nothing in the app's sources looks wrong.
+`src` is tracked and ships in the published tarball, so one path serves both a linked checkout and
+an npm install.
+
+The failure is silent, so verify rather than assume — grep the emitted stylesheet for a class only
+this package uses:
+
+```sh
+grep -c 'max-w-lg' dist/assets/*.css
+```
+
+A `*/` inside a CSS comment ends it early, so a comment above an `@source` that spells out a glob
+closes the comment at that star-slash and turns the next `@source` into an invalid declaration.
+Describe a glob in words, or keep it out of the comment.
+
+## i18n
+
+Given no `translate` prop, the components resolve every string through the packaged bundle for
+`locale` — seven languages, the same set the framework supports. **Once a `translate` prop is given,
+the packaged bundle is not consulted at all**, so a wrapper that forwards a framework resolver alone
+renders the English default for every key the application has not overridden, in every language. The
+resolver must fall through to `defaultConsentTranslate(locale)` for the default — which is exactly
+what `@owlmeans/web-panel/consent` does, and why an app inside the panel family mounts
+`PanelCookieConsent` / `PanelCookiePolicy` rather than these components directly.
+
+`ConsentToggle` is exported for a host that builds its own dialog body; the wording it shows is the
+caller's, already resolved.
+
+## Depends On
+
+- `@owlmeans/consent` — the model; the named selection above is re-exported from this package's root
+- Peers (app-provided): `react`, `tailwindcss`, `tailwind-merge`, `clsx`, `lucide-react`
+
+## Related
+
+- `consent` — the model: categories, `globalVar`, storage and migration, Consent Mode v2, the
+  ordering rule. Read it before changing anything a category means
+- `web-gtm` — the head snippet that carries a stored decision to the tag manager
+- `astro` — stamping that snippet from a static site's layout
+- `login-methods` / `login-plugins` — the sign-in precondition that raises this dialog with
+  `reason: 'login'`
+- `web-panel` — its `./consent` subpath, the OwlMeans-i18n binding of these components

package/build/consent/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAS/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CA2HhD,CAAA"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAS/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,EAAE,EAAE,CAAC,kBAAkB,CAkIhD,CAAA"}

package/build/consent/component.js

@@ -51,6 +51,6 @@ export const CookieConsent = props => {
     const gated = consent.reason === 'login';
     return _jsxs(_Fragment, { children: [consent.open && _jsx("div", { className: "fixed inset-0 z-[999998] flex items-center justify-center overflow-y-auto bg-black/70 px-4 py-6 backdrop-blur-md", "aria-modal": "true", role: "dialog", "aria-labelledby": "cc-title", "aria-describedby": "cc-desc", "data-consent-dialog": true, children: _jsxs("div", { className: cn('relative z-[999999] w-full max-w-lg rounded-2xl border border-border bg-popover/95 p-6 shadow-[0_25px_60px_-12px_rgba(0,0,0,0.5)] ring-1 ring-primary/20 backdrop-blur-xl sm:p-8', props.className), children: [_jsx("div", { className: "absolute inset-x-0 top-0 h-1 rounded-t-2xl bg-gradient-to-r from-primary to-secondary" }), _jsxs("div", { className: "mb-4 flex items-center gap-3", children: [_jsx("div", { className: "flex h-10 w-10 items-center justify-center rounded-xl bg-primary/10 text-primary", children: _jsx(Cookie, { className: "h-5 w-5", "aria-hidden": "true" }) }), _jsx("h2", { id: "cc-title", className: "text-xl font-bold text-popover-foreground sm:text-2xl", children: t('title', 'Cookie Preferences') })] }), _jsx("p", { id: "cc-desc", className: "mb-6 text-sm leading-relaxed text-muted-foreground", children: t('description', 'We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic.') }), _jsx("div", { className: "space-y-3", children: categories.map(category => _jsx(ConsentToggle, { id: `cc-${category.key}`, label: t(category.labelKey, category.key), description: t(category.descriptionKey, ''), checked: draft[category.key] === true, ...(category.required === true ? { required: true } : {}), requiredLabel: t('required', 'Required'), onChange: value => setDraft(current => ({ ...current, [category.key]: value })) }, category.key)) }), gated && _jsx("p", { role: "status", "data-consent-reason": true, className: "mt-4 text-sm text-popover-foreground", children: t('loginReason', 'Signing in stores a session cookie. Accept essential cookies to continue.') }), _jsxs("div", { className: "mt-8 flex flex-col gap-3 sm:flex-row sm:gap-4", children: [_jsx("button", { type: "button", onClick: onSave, "data-consent-save": true, className: "flex-1 rounded-lg border border-border bg-transparent px-4 py-3 text-sm font-semibold text-popover-foreground transition-colors hover:bg-accent focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", children: t('savePreferences', 'Save Preferences') }), _jsx("button", { type: "button", onClick: onAcceptAll, "data-consent-accept-all": true, className: "flex-1 rounded-lg bg-primary px-4 py-3 text-sm font-bold text-primary-foreground shadow-lg shadow-primary/25 transition-all hover:bg-primary/90 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2", children: gated
                                         ? t('acceptAndContinue', 'Accept & continue')
-                                        : t('acceptAll', 'Accept All') })] }), (props.policyHref != null || props.links != null) && _jsxs("div", { className: "mt-4 flex flex-wrap justify-center gap-3 text-xs text-muted-foreground", children: [props.policyHref != null && _jsx("a", { href: props.policyHref, target: "_blank", rel: "noopener noreferrer", className: "underline underline-offset-2 transition-colors hover:text-popover-foreground", children: t('policyLink', 'Cookie Policy') }), props.links?.map(link => _jsx("a", { href: link.href, target: "_blank", rel: "noopener noreferrer", className: "underline underline-offset-2 transition-colors hover:text-popover-foreground", children: t(link.labelKey, link.defaultLabel) }, link.href))] })] }) }), props.noReopenButton !== true && consent.record != null && !consent.open && _jsx("button", { type: "button", onClick: () => consent.openDialog('reopen'), "aria-label": t('openPreferences', 'Cookie preferences'), "data-consent-reopen": true, className: "fixed bottom-5 left-5 z-[999997] flex h-12 w-12 items-center justify-center rounded-full border border-border bg-popover text-primary shadow-lg transition-transform hover:scale-110 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", children: _jsx(Cookie, { className: "h-5 w-5", "aria-hidden": "true" }) })] });
+                                        : t('acceptAll', 'Accept All') })] }), (props.policyHref != null || props.links != null) && _jsxs("div", { className: "mt-4 flex flex-wrap justify-center gap-3 text-xs text-muted-foreground", children: [props.policyHref != null && _jsx("a", { href: props.policyHref, target: "_blank", rel: "noopener noreferrer", className: "underline underline-offset-2 transition-colors hover:text-popover-foreground", children: t('policyLink', 'Cookie Policy') }), props.links?.map(link => _jsx("a", { href: link.href, target: "_blank", rel: "noopener noreferrer", className: "underline underline-offset-2 transition-colors hover:text-popover-foreground", children: t(link.labelKey, link.defaultLabel) }, link.href))] })] }) }), props.noReopenButton !== true && consent.record != null && !consent.open && _jsx("button", { type: "button", onClick: () => consent.openDialog('reopen'), "aria-label": t('openPreferences', 'Cookie preferences'), "data-consent-reopen": true, className: "fixed bottom-1 left-1 z-[999997] inline-flex items-center justify-center rounded border-0 bg-transparent p-1.5 text-muted-foreground opacity-70 transition-opacity hover:opacity-100 hover:text-primary focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring", children: _jsx(Cookie, { className: "h-5 w-5", "aria-hidden": "true" }) })] });
 };
 //# sourceMappingURL=component.js.map

package/build/consent/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAExD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EACL,0BAA0B,EAAE,uBAAuB,EAAE,WAAW,GACjE,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B,KAAK,CAAC,EAAE;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAA;IACjE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAElE,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAA;IAC1E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAA0B,EAAE,CAAC,CAAA;IAE/D,iGAAiG;IACjG,6FAA6F;IAC7F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAA;QACF,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAClD,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAElC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,MAA+B,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAkB,MAAM,CAAC,WAAW,CAAC;YAC/C,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;SACtD,CAAC,CAAA;QACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IAEzB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,WAAW,CAC7B,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CACzF,CAAA;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,qDAAqD;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAA;IAExC,OAAO,8BACJ,OAAO,CAAC,IAAI,IAAI,cACf,SAAS,EAAC,kHAAkH,gBACjH,MAAM,EAAC,IAAI,EAAC,QAAQ,qBAAiB,UAAU,sBAAkB,SAAS,yCAGrF,eAAK,SAAS,EAAE,EAAE,CAChB,kLAAkL,EAClL,KAAK,CAAC,SAAS,CAChB,aACC,cAAK,SAAS,EAAC,uFAAuF,GAAG,EAEzG,eAAK,SAAS,EAAC,8BAA8B,aAC3C,cAAK,SAAS,EAAC,kFAAkF,YAC/F,KAAC,MAAM,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,GAC7C,EACN,aAAI,EAAE,EAAC,UAAU,EAAC,SAAS,EAAC,uDAAuD,YAChF,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC,GAC9B,IACD,EAEN,YAAG,EAAE,EAAC,SAAS,EAAC,SAAS,EAAC,oDAAoD,YAC3E,CAAC,CAAC,aAAa,EAAE,iHAAiH,CAAC,GAClI,EAEJ,cAAK,SAAS,EAAC,WAAW,YACvB,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAC,aAAa,IAExC,EAAE,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EACxB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EACzC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,EAC3C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,KACjC,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC1D,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EACxC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAP1E,QAAQ,CAAC,GAAG,CAQjB,CAAC,GACC,EAEL,KAAK,IAAI,YAAG,IAAI,EAAC,QAAQ,+BAAqB,SAAS,EAAC,sCAAsC,YAC5F,CAAC,CAAC,aAAa,EAAE,2EAA2E,CAAC,GAC5F,EAEJ,eAAK,SAAS,EAAC,+CAA+C,aAC5D,iBACE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,MAAM,6BAC7B,SAAS,EAAC,yNAAyN,YACnO,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,GAAU,EACpD,iBACE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,mCAClC,SAAS,EAAC,qPAAqP,YAC/P,KAAK;wCACL,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;wCAC7C,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,GAAU,IACtC,EAEL,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,eAAK,SAAS,EAAC,wEAAwE,aAC1I,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,YAC3B,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,EACjE,SAAS,EAAC,8EAA8E,YACxF,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,GAAK,EACtC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YACR,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,EAC1E,SAAS,EAAC,8EAA8E,YACxF,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,IAF9B,IAAI,CAAC,IAAI,CAE0B,CAAC,IACvC,IACF,GACF,EAEL,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,iBAC3E,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAC7C,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,+BAEtD,SAAS,EAAC,8PAA8P,YAExQ,KAAC,MAAM,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,GAC1C,IACR,CAAA;AACL,CAAC,CAAA"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../src/consent/component.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAExD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EACL,0BAA0B,EAAE,uBAAuB,EAAE,WAAW,GACjE,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B,KAAK,CAAC,EAAE;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAA;IACjE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAElE,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAA;IAC1E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAA0B,EAAE,CAAC,CAAA;IAE/D,iGAAiG;IACjG,6FAA6F;IAC7F,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAA;QACF,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAClD,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IAElC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,MAA+B,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAkB,MAAM,CAAC,WAAW,CAAC;YAC/C,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;SACtD,CAAC,CAAA;QACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;IAEzB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,WAAW,CAC7B,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CACzF,CAAA;IAED,+FAA+F;IAC/F,4FAA4F;IAC5F,qDAAqD;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAA;IAExC,OAAO,8BACJ,OAAO,CAAC,IAAI,IAAI,cACf,SAAS,EAAC,kHAAkH,gBACjH,MAAM,EAAC,IAAI,EAAC,QAAQ,qBAAiB,UAAU,sBAAkB,SAAS,yCAGrF,eAAK,SAAS,EAAE,EAAE,CAChB,kLAAkL,EAClL,KAAK,CAAC,SAAS,CAChB,aACC,cAAK,SAAS,EAAC,uFAAuF,GAAG,EAEzG,eAAK,SAAS,EAAC,8BAA8B,aAC3C,cAAK,SAAS,EAAC,kFAAkF,YAC/F,KAAC,MAAM,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,GAC7C,EACN,aAAI,EAAE,EAAC,UAAU,EAAC,SAAS,EAAC,uDAAuD,YAChF,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC,GAC9B,IACD,EAEN,YAAG,EAAE,EAAC,SAAS,EAAC,SAAS,EAAC,oDAAoD,YAC3E,CAAC,CAAC,aAAa,EAAE,iHAAiH,CAAC,GAClI,EAEJ,cAAK,SAAS,EAAC,WAAW,YACvB,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAC,aAAa,IAExC,EAAE,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EACxB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EACzC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,EAC3C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,KACjC,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC1D,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EACxC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAP1E,QAAQ,CAAC,GAAG,CAQjB,CAAC,GACC,EAEL,KAAK,IAAI,YAAG,IAAI,EAAC,QAAQ,+BAAqB,SAAS,EAAC,sCAAsC,YAC5F,CAAC,CAAC,aAAa,EAAE,2EAA2E,CAAC,GAC5F,EAEJ,eAAK,SAAS,EAAC,+CAA+C,aAC5D,iBACE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,MAAM,6BAC7B,SAAS,EAAC,yNAAyN,YACnO,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,GAAU,EACpD,iBACE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,mCAClC,SAAS,EAAC,qPAAqP,YAC/P,KAAK;wCACL,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;wCAC7C,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,GAAU,IACtC,EAEL,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,eAAK,SAAS,EAAC,wEAAwE,aAC1I,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,YAC3B,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,EACjE,SAAS,EAAC,8EAA8E,YACxF,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,GAAK,EACtC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YACR,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,EAC1E,SAAS,EAAC,8EAA8E,YACxF,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,IAF9B,IAAI,CAAC,IAAI,CAE0B,CAAC,IACvC,IACF,GACF,EASL,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,iBAC3E,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAC7C,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,+BAEtD,SAAS,EAAC,iRAAiR,YAE3R,KAAC,MAAM,IAAC,SAAS,EAAC,SAAS,iBAAa,MAAM,GAAG,GAC1C,IACR,CAAA;AACL,CAAC,CAAA"}

package/build/consent/widget.d.ts

@@ -0,0 +1,18 @@
+import type { FC } from 'react';
+import type { ConsentMenuWidgetProps } from '../types.js';
+/**
+ * One row a HOST'S OWN menu can render to reopen the preferences dialog, in place of (or beside)
+ * the floating button `CookieConsent` renders itself. No outer row padding here — the host's own
+ * menu-row wrapper supplies that, the same way it does for any other widget row it renders.
+ *
+ * Carries no presence signalling of its own: a host whose menu only mounts this row while its
+ * dropdown/menu content is actually open (Radix's `DropdownMenuContent`, for one) would report
+ * "present" only for that brief window. A host that wants to hide `CookieConsent`'s floating
+ * button while this row is reachable announces that from whatever component of its own stays
+ * mounted for the menu's whole lifetime — see `useConsentMenuPresence` in `@owlmeans/web-panel/consent`.
+ *
+ * Uses `openConsent` directly rather than the `useConsent()` hook: that hook's mount itself
+ * triggers `consentStore.init()`, which a row that only needs to trigger a reopen must not do.
+ */
+export declare const ConsentMenuWidget: FC<ConsentMenuWidgetProps>;
+//# sourceMappingURL=widget.d.ts.map

package/build/consent/widget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.d.ts","sourceRoot":"","sources":["../../src/consent/widget.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,OAAO,CAAA;AAI/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEzD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,EAAE,EAAE,CAAC,sBAAsB,CAqBxD,CAAA"}

package/build/consent/widget.js

@@ -0,0 +1,31 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback } from 'react';
+import { Cookie } from 'lucide-react';
+import { defaultConsentTranslate, openConsent } from '@owlmeans/consent';
+import { cn } from '../lib/utils.js';
+/**
+ * One row a HOST'S OWN menu can render to reopen the preferences dialog, in place of (or beside)
+ * the floating button `CookieConsent` renders itself. No outer row padding here — the host's own
+ * menu-row wrapper supplies that, the same way it does for any other widget row it renders.
+ *
+ * Carries no presence signalling of its own: a host whose menu only mounts this row while its
+ * dropdown/menu content is actually open (Radix's `DropdownMenuContent`, for one) would report
+ * "present" only for that brief window. A host that wants to hide `CookieConsent`'s floating
+ * button while this row is reachable announces that from whatever component of its own stays
+ * mounted for the menu's whole lifetime — see `useConsentMenuPresence` in `@owlmeans/web-panel/consent`.
+ *
+ * Uses `openConsent` directly rather than the `useConsent()` hook: that hook's mount itself
+ * triggers `consentStore.init()`, which a row that only needs to trigger a reopen must not do.
+ */
+export const ConsentMenuWidget = props => {
+    const t = props.translate ?? defaultConsentTranslate(props.locale);
+    const onClick = useCallback(() => {
+        if (props.onSelect != null) {
+            props.onSelect();
+            return;
+        }
+        openConsent('reopen');
+    }, [props.onSelect]);
+    return _jsxs("button", { type: "button", onClick: onClick, "data-consent-menu-widget": true, className: cn('flex w-full min-w-0 items-center gap-2 rounded-md text-left text-sm text-popover-foreground transition-colors hover:bg-accent', props.className), children: [_jsx(Cookie, { className: "h-4 w-4 shrink-0", "aria-hidden": "true" }), _jsx("span", { className: "flex-1 truncate", children: props.label ?? t('openPreferences', 'Cookie preferences') })] });
+};
+//# sourceMappingURL=widget.js.map

package/build/consent/widget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.js","sourceRoot":"","sources":["../../src/consent/widget.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAA;AAGpC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA+B,KAAK,CAAC,EAAE;IACnE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAElE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,QAAQ,EAAE,CAAA;YAChB,OAAM;QACR,CAAC;QACD,WAAW,CAAC,QAAQ,CAAC,CAAA;IACvB,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEpB,OAAO,kBACL,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,oCAC9B,SAAS,EAAE,EAAE,CACX,+HAA+H,EAC/H,KAAK,CAAC,SAAS,CAChB,aAED,KAAC,MAAM,IAAC,SAAS,EAAC,kBAAkB,iBAAa,MAAM,GAAG,EAC1D,eAAM,SAAS,EAAC,iBAAiB,YAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,GAAQ,IAC7F,CAAA;AACX,CAAC,CAAA"}

package/build/index.d.ts

@@ -1,6 +1,7 @@
 export type * from './types.js';
 export * from './hooks.js';
 export * from './consent/component.js';
+export * from './consent/widget.js';
 export * from './consent/toggle.js';
 export * from './policy/component.js';
 export { consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, migrateConsent, applyConsent, pushConsentDefaults, consentBootstrapScript, consentDefaults, consentUpdate, gtagConsent, DEFAULT_CONSENT_CATEGORIES, DEFAULT_CONSENT_MESSAGES, defaultConsentTranslate, interpolate, CONSENT_KEY, CONSENT_COOKIE_DAYS, CONSENT_SCHEMA_VERSION, CONSENT_LOCALES, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, } from '@owlmeans/consent';

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AAErC,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAC/E,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EACzE,eAAe,EAAE,aAAa,EAAE,WAAW,EAC3C,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,WAAW,EAC1F,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe,EACzE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACxD,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAC1F,YAAY,EAAE,aAAa,GAC5B,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AAErC,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAC/E,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EACzE,eAAe,EAAE,aAAa,EAAE,WAAW,EAC3C,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,WAAW,EAC1F,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe,EACzE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACxD,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAC1F,YAAY,EAAE,aAAa,GAC5B,MAAM,mBAAmB,CAAA"}

package/build/index.js

@@ -1,5 +1,6 @@
 export * from './hooks.js';
 export * from './consent/component.js';
+export * from './consent/widget.js';
 export * from './consent/toggle.js';
 export * from './policy/component.js';
 export { consentStore, openConsent, isConsented, readConsent, writeConsent, clearConsent, migrateConsent, applyConsent, pushConsentDefaults, consentBootstrapScript, consentDefaults, consentUpdate, gtagConsent, DEFAULT_CONSENT_CATEGORIES, DEFAULT_CONSENT_MESSAGES, defaultConsentTranslate, interpolate, CONSENT_KEY, CONSENT_COOKIE_DAYS, CONSENT_SCHEMA_VERSION, CONSENT_LOCALES, CONSENT_ESSENTIAL, CONSENT_ANALYTICS, CONSENT_MARKETING, } from '@owlmeans/consent';

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AAErC,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAC/E,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EACzE,eAAe,EAAE,aAAa,EAAE,WAAW,EAC3C,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,WAAW,EAC1F,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe,EACzE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACxD,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAA;AAC1B,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AAErC,OAAO,EACL,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAC/E,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EACzE,eAAe,EAAE,aAAa,EAAE,WAAW,EAC3C,0BAA0B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,WAAW,EAC1F,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe,EACzE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACxD,MAAM,mBAAmB,CAAA"}

package/build/types.d.ts

@@ -36,6 +36,15 @@ export interface CookiePolicyProps {
     cookieDays?: number;
     className?: string;
 }
+export interface ConsentMenuWidgetProps {
+    locale?: string;
+    /** `(key, defaultValue) => string`. Defaults to the built-in seven-language bundle. */
+    translate?: (key: string, defaultValue: string) => string;
+    label?: string;
+    className?: string;
+    /** Defaults to `openConsent('reopen')` — the same call the floating button itself makes. */
+    onSelect?: () => void;
+}
 export interface UseConsentModel {
     record: ConsentRecord | null;
     open: boolean;

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAAE,aAAa,EAAE,aAAa,EAC9C,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,wFAAwF;IACxF,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IACjC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAA;IACrC,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IAC5C,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAAE,aAAa,EAAE,aAAa,EAC9C,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,wFAAwF;IACxF,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;IAC9B,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,uFAAuF;IACvF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IACjC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAA;IACrC,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IAC5C,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/web-consent",
-  "version": "0.1.18-rc.2",
+  "version": "0.1.18-rc.21",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -22,7 +22,7 @@
     }
   },
   "dependencies": {
-    "@owlmeans/consent": "^0.1.18-rc.2"
+    "@owlmeans/consent": "^0.1.18-rc.4"
   },
   "peerDependencies": {
     "clsx": "*",
@@ -33,13 +33,19 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
+    "@owlmeans/test-ui": "^0.1.18-rc.29",
+    "@tailwindcss/vite": "^4.0.0",
     "@types/bun": "^1.4.0",
     "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.3",
     "clsx": "^2.1.1",
     "lucide-react": "^0.550.0",
     "nodemon": "^3.1.14",
+    "react-dom": "^19.2.0",
     "tailwind-merge": "^3.4.1",
-    "typescript": "^7.0.2"
+    "typescript": "^7.0.2",
+    "vite": "^8.1.2"
   },
   "publishConfig": {
     "access": "public"

package/src/consent/component.tsx

@@ -132,11 +132,18 @@ export const CookieConsent: FC<CookieConsentProps> = props => {
       </div>
     </div>}
 
+    {/*
+      * A bare icon, not a card: it sits in the very corner of the page for as long as a visitor
+      * stays, on every page of the site, so it must read as a small fixture rather than as a
+      * floating action button competing with the page's own controls. No border, no filled
+      * background, no shadow and no hover-scale — only the pictogram, dimmed at rest and picked
+      * out on hover/focus, at the exact size (`h-5 w-5`) it always was.
+      */}
     {props.noReopenButton !== true && consent.record != null && !consent.open && <button
       type="button" onClick={() => consent.openDialog('reopen')}
       aria-label={t('openPreferences', 'Cookie preferences')}
       data-consent-reopen
-      className="fixed bottom-5 left-5 z-[999997] flex h-12 w-12 items-center justify-center rounded-full border border-border bg-popover text-primary shadow-lg transition-transform hover:scale-110 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+      className="fixed bottom-1 left-1 z-[999997] inline-flex items-center justify-center rounded border-0 bg-transparent p-1.5 text-muted-foreground opacity-70 transition-opacity hover:opacity-100 hover:text-primary focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
     >
       <Cookie className="h-5 w-5" aria-hidden="true" />
     </button>}

package/src/consent/widget.tsx

@@ -0,0 +1,43 @@
+import { useCallback } from 'react'
+import type { FC } from 'react'
+import { Cookie } from 'lucide-react'
+import { defaultConsentTranslate, openConsent } from '@owlmeans/consent'
+import { cn } from '../lib/utils.js'
+import type { ConsentMenuWidgetProps } from '../types.js'
+
+/**
+ * One row a HOST'S OWN menu can render to reopen the preferences dialog, in place of (or beside)
+ * the floating button `CookieConsent` renders itself. No outer row padding here — the host's own
+ * menu-row wrapper supplies that, the same way it does for any other widget row it renders.
+ *
+ * Carries no presence signalling of its own: a host whose menu only mounts this row while its
+ * dropdown/menu content is actually open (Radix's `DropdownMenuContent`, for one) would report
+ * "present" only for that brief window. A host that wants to hide `CookieConsent`'s floating
+ * button while this row is reachable announces that from whatever component of its own stays
+ * mounted for the menu's whole lifetime — see `useConsentMenuPresence` in `@owlmeans/web-panel/consent`.
+ *
+ * Uses `openConsent` directly rather than the `useConsent()` hook: that hook's mount itself
+ * triggers `consentStore.init()`, which a row that only needs to trigger a reopen must not do.
+ */
+export const ConsentMenuWidget: FC<ConsentMenuWidgetProps> = props => {
+  const t = props.translate ?? defaultConsentTranslate(props.locale)
+
+  const onClick = useCallback(() => {
+    if (props.onSelect != null) {
+      props.onSelect()
+      return
+    }
+    openConsent('reopen')
+  }, [props.onSelect])
+
+  return <button
+    type="button" onClick={onClick} data-consent-menu-widget
+    className={cn(
+      'flex w-full min-w-0 items-center gap-2 rounded-md text-left text-sm text-popover-foreground transition-colors hover:bg-accent',
+      props.className
+    )}
+  >
+    <Cookie className="h-4 w-4 shrink-0" aria-hidden="true" />
+    <span className="flex-1 truncate">{props.label ?? t('openPreferences', 'Cookie preferences')}</span>
+  </button>
+}

package/src/index.ts

@@ -1,6 +1,7 @@
 export type * from './types.js'
 export * from './hooks.js'
 export * from './consent/component.js'
+export * from './consent/widget.js'
 export * from './consent/toggle.js'
 export * from './policy/component.js'
 

package/src/types.ts

@@ -42,6 +42,16 @@ export interface CookiePolicyProps {
   className?: string
 }
 
+export interface ConsentMenuWidgetProps {
+  locale?: string
+  /** `(key, defaultValue) => string`. Defaults to the built-in seven-language bundle. */
+  translate?: (key: string, defaultValue: string) => string
+  label?: string
+  className?: string
+  /** Defaults to `openConsent('reopen')` — the same call the floating button itself makes. */
+  onSelect?: () => void
+}
+
 export interface UseConsentModel {
   record: ConsentRecord | null
   open: boolean

package/tests/consent.spec.ts

@@ -0,0 +1,275 @@
+import { afterAll, describe, expect, test } from 'bun:test'
+import { closeBrowser, mountComponent } from '@owlmeans/test-ui'
+import {
+  CONSENT_KEY, CONSENT_LOCALES, CONSENT_SCHEMA_VERSION, defaultConsentTranslate,
+} from '@owlmeans/consent'
+import { HARNESS_URL } from './context.js'
+
+// Browser work does not fit the 5s default: a cold harness compiles the app on first request.
+const TIMEOUT = 60_000
+
+afterAll(async () => {
+  await closeBrowser()
+})
+
+const base = HARNESS_URL.replace(/\/$/, '')
+
+/**
+ * A page booted with `record` already in storage, the way a returning visitor arrives.
+ *
+ * The seed lands BEFORE the document under test loads, because both things being observed — the
+ * inline bootstrap's `consent/update` and the dialog's decision not to open — read storage during
+ * the first paint. Seeding after load would test neither.
+ */
+const seeded = async (record: unknown | null, query = '') => {
+  const mounted = await mountComponent({ url: `${base}/`, waitUntil: 'commit' })
+  // Seed on the real origin, then reload so the document boots with the record in place.
+  await mounted.page.evaluate(
+    ([key, value]) => {
+      if (value == null) window.localStorage.removeItem(key as string)
+      else window.localStorage.setItem(key as string, value as string)
+    },
+    [CONSENT_KEY, record == null ? null : JSON.stringify(record)] as [string, string | null]
+  )
+  await mounted.page.goto(`${base}/${query}`, { waitUntil: 'domcontentloaded' })
+
+  return mounted
+}
+
+describe('@owlmeans/web-consent — the dialog', () => {
+  test('a first-time visitor is asked, and the defaults were declared before anything could read them', async () => {
+    const { page, close } = await mountComponent({ url: `${base}/` })
+    try {
+      await page.waitForSelector('[data-consent-dialog]')
+
+      // The ORDER is the whole point of the inline bootstrap: whatever a tag reads when it loads
+      // is what it obeys, so `consent/default` has to be the FIRST thing on the queue — not merely
+      // present somewhere on it.
+      const layer = await page.evaluate(() => (
+        (window as never as { dataLayer?: unknown[] }).dataLayer ?? []
+      ).map(item => Array.from(item as ArrayLike<unknown>).slice(0, 2).join(':')))
+
+      expect(layer[0]).toBe('consent:default')
+
+      // No decision exists yet, so nothing may have been granted on this page.
+      expect(layer.filter(entry => entry === 'consent:update')).toHaveLength(0)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('an existing owlmeans.com visitor is NOT asked again', async () => {
+    // THE migration case. The previous widget stored two booleans and no version; a reader that
+    // treated those as unusable would re-prompt every visitor the site has ever had — the most
+    // expensive possible regression, and completely silent.
+    const { page, close } = await seeded({ analytics: true, marketing: false })
+    try {
+      await page.waitForSelector('[data-consent-reopen]')
+
+      expect(await page.locator('[data-consent-dialog]').count()).toBe(0)
+
+      // The migration is applied on READ, in memory — a read must never write — so the assertion
+      // is on the EFFECTIVE decision rather than on the stored bytes, which legitimately stay in
+      // the old shape until the visitor next saves. Essential is granted without ever having been
+      // offered as a choice, and the two answers the visitor did give are carried across intact.
+      const applied = await page.evaluate(() => {
+        const w = window as never as Record<string, unknown>
+
+        return {
+          essential: w.owlConsentEssential ?? null,
+          analytics: w.owlConsentAnalytics ?? null,
+          marketing: w.owlConsentMarketing ?? null,
+        }
+      })
+      expect(applied).toEqual({ essential: true, analytics: true, marketing: false })
+
+      // And the record still on disk is the legacy one, untouched.
+      const stored = await page.evaluate(
+        key => JSON.parse(window.localStorage.getItem(key) ?? 'null'), CONSENT_KEY
+      ) as Record<string, unknown>
+      expect(stored.v).toBeUndefined()
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('a stored decision reaches the tag from the INLINE script, before React runs', async () => {
+    // The returning visitor's case, and the reason the bootstrap reads storage at all: a tag that
+    // loads on this page must see the previous answer immediately, or every returning visitor is
+    // treated as denied for the first paint of every page.
+    //
+    // Asserted against the DEFAULT categories on purpose — the inline snippet is stamped by the
+    // HTML emitter, so it carries whatever set the host gave `consentBootstrapScript()`, and a
+    // host with custom categories must pass them there too. Mismatching the two is a real
+    // misconfiguration, not something the component can paper over.
+    const { page, close } = await seeded(
+      { essential: true, analytics: true, marketing: false, v: CONSENT_SCHEMA_VERSION }
+    )
+    try {
+      await page.waitForSelector('[data-consent-reopen]')
+
+      const seen = await page.evaluate(() => {
+        const layer = ((window as never as { dataLayer?: unknown[] }).dataLayer ?? [])
+          .map(item => Array.from(item as ArrayLike<unknown>))
+
+        return {
+          kinds: layer.map(entry => `${String(entry[0])}:${String(entry[1])}`),
+          update: layer.find(entry => entry[1] === 'update')?.[2] ?? null,
+          analytics: (window as never as Record<string, unknown>).owlConsentAnalytics ?? null,
+          marketing: (window as never as Record<string, unknown>).owlConsentMarketing ?? null,
+        }
+      })
+
+      expect(seen.kinds[0]).toBe('consent:default')
+      expect(seen.kinds).toContain('consent:update')
+      expect(seen.update).toMatchObject({
+        analytics_storage: 'granted', ad_storage: 'denied', security_storage: 'granted',
+      })
+      // `globalVar` is the seam for a snippet that cannot subscribe — a GTM custom-HTML tag, a
+      // hand-placed pixel — so it has to be right by the time the update lands, which is the same
+      // inline script and therefore the same tick.
+      expect(seen.analytics).toBe(true)
+      expect(seen.marketing).toBe(false)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('refusing a category denies its signal, and the decision survives a remount', async () => {
+    const { page, close } = await mountComponent({ url: `${base}/?categories=custom` })
+    try {
+      await page.waitForSelector('[data-consent-dialog]')
+      // Save without granting the optional category: the essential row is locked on, the other is
+      // off by default, so saving as-is IS the refusal.
+      await page.locator('[data-consent-save]').click()
+      await page.waitForSelector('[data-consent-reopen]')
+
+      const denied = await page.evaluate(() => {
+        const layer = ((window as never as { dataLayer?: unknown[] }).dataLayer ?? [])
+          .map(item => Array.from(item as ArrayLike<unknown>))
+
+        return {
+          update: layer.filter(entry => entry[1] === 'update').pop()?.[2] ?? null,
+          globalVar: (window as never as Record<string, unknown>).harnessTelemetry ?? null,
+        }
+      })
+      expect(denied.update).toMatchObject({ analytics_storage: 'denied' })
+      expect(denied.globalVar).toBe(false)
+
+      // A decision that does not survive a remount would re-prompt on every page of an SPA.
+      await page.locator('#remount').click()
+      await page.waitForSelector('[data-consent-reopen]')
+      expect(await page.locator('[data-consent-dialog]').count()).toBe(0)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('a custom category set is what renders — no silent fallback to the defaults', async () => {
+    const { page, close } = await mountComponent({ url: `${base}/?categories=custom` })
+    try {
+      const dialog = page.locator('[data-consent-dialog]')
+      await dialog.waitFor()
+      const text = await dialog.innerText()
+
+      expect(text).toContain('Telemetry')
+      // The default set's optional categories must NOT appear: a component that ignored the prop
+      // would still render a plausible dialog, and only their absence proves it did not.
+      expect(text).not.toContain('Marketing')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('the re-open button is a bare, compact corner icon', async () => {
+    // The harness carries no Tailwind build (the package ships classes for a CONSUMING app's own
+    // `@source` scan, as `web-panel`'s consuming `index.css` does), so this is asserted on the
+    // class list itself rather than on computed style — exactly what every card/border/shadow/
+    // size utility below would resolve to once a consumer's stylesheet compiles them.
+    const { page, close } = await seeded(
+      { essential: true, analytics: false, marketing: false, v: CONSENT_SCHEMA_VERSION }
+    )
+    try {
+      const button = page.locator('[data-consent-reopen]')
+      await button.waitFor()
+      const cls = await button.getAttribute('class') ?? ''
+
+      // In the very corner, not 20px off it (`bottom-5 left-5` was the old, card-sized offset).
+      expect(cls).toContain('bottom-1')
+      expect(cls).toContain('left-1')
+      // Bare icon: no filled surface, no border, no shadow, no hover-scale card affordance.
+      expect(cls).toContain('bg-transparent')
+      expect(cls).not.toMatch(/\bshadow-lg\b/)
+      expect(cls).not.toMatch(/\brounded-full\b/)
+      expect(cls).not.toMatch(/\bborder-border\b/)
+      expect(cls).not.toMatch(/\bhover:scale-110\b/)
+      // The pictogram itself keeps its original size.
+      const iconCls = await page.locator('[data-consent-reopen] svg').getAttribute('class') ?? ''
+      expect(iconCls).toMatch(/\bh-5\b/)
+      expect(iconCls).toMatch(/\bw-5\b/)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('the re-open button brings the dialog back with a reason', async () => {
+    const { page, close } = await seeded({ essential: true, analytics: false, marketing: false, v: CONSENT_SCHEMA_VERSION })
+    try {
+      await page.locator('[data-consent-reopen]').click()
+      await page.waitForSelector('[data-consent-dialog]')
+      // The reason is what lets a host explain WHY it reopened — a login gate reads differently
+      // from a footer link, and a dialog that cannot say which is not answerable.
+      expect(await page.locator('[data-consent-reason]').count()).toBeGreaterThanOrEqual(0)
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('every supported locale renders wording, never a bare key', async () => {
+    // Seven languages are a shipped contract. A missing bundle does not throw — it renders the
+    // key — so the visible string is the only thing worth asserting.
+    for (const locale of CONSENT_LOCALES) {
+      const { page, close } = await mountComponent({ url: `${base}/?locale=${locale}` })
+      try {
+        const dialog = page.locator('[data-consent-dialog]')
+        await dialog.waitFor()
+        const text = await dialog.innerText()
+
+        expect(text).not.toContain('consent.')
+        expect(text.length).toBeGreaterThan(40)
+        // And it is genuinely THAT language's wording, not English shown seven times.
+        expect(text).toContain(defaultConsentTranslate(locale)('consent.title', ''))
+      } finally {
+        await close()
+      }
+    }
+  }, TIMEOUT * 3)
+})
+
+describe('@owlmeans/web-consent — the policy page', () => {
+  test('it names what is actually stored', async () => {
+    // A policy that does not name the key, the retention and the categories in force is
+    // decoration. This is the page a regulator and a user both read.
+    const { page, close } = await mountComponent({ url: `${base}/?view=policy` })
+    try {
+      const policy = page.locator('[data-cookie-policy]')
+      await policy.waitFor()
+      const text = await policy.innerText()
+
+      expect(text).toContain(CONSENT_KEY)
+      expect(text).toContain('Acme')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+
+  test('it offers a way back to the decision', async () => {
+    const { page, close } = await mountComponent({ url: `${base}/?view=policy` })
+    try {
+      await page.locator('[data-cookie-policy-manage]').click()
+      await page.waitForSelector('[data-consent-dialog]')
+    } finally {
+      await close()
+    }
+  }, TIMEOUT)
+})

package/tests/context.ts

@@ -0,0 +1,51 @@
+import { createServer } from 'vite'
+import type { Plugin } from 'vite'
+import react from '@vitejs/plugin-react'
+import tailwindcss from '@tailwindcss/vite'
+import { fileURLToPath } from 'node:url'
+import { dirname, resolve } from 'node:path'
+import { consentBootstrapScript } from '@owlmeans/consent'
+
+const here = dirname(fileURLToPath(import.meta.url))
+
+/**
+ * Stamp the real bootstrap snippet into `<head>`, the way every consumer does.
+ *
+ * A test that hand-wrote the snippet would pass while the shipped emitter was broken, and one that
+ * loaded it as a module would defer it — which is precisely the defect the ordering exists to
+ * prevent. Injecting the emitter's own output, inline and classic, is what makes the ordering
+ * assertions in `bootstrap.spec.ts` mean anything.
+ */
+const consentBootstrap = (): Plugin => ({
+  name: 'owlmeans-consent-bootstrap',
+  transformIndexHtml: html =>
+    html.replace('<!--owlmeans:consent-->', `<script>${consentBootstrapScript()}</script>`),
+})
+
+let url: string | null = null
+
+/**
+ * Boot a Vite dev server over `tests/harness/` — a real HTTP origin, because everything under
+ * test reads and writes `localStorage` and a document cookie, and neither exists on a `data:` URL.
+ *
+ * React is deduped so hooks cross the workspace links.
+ */
+export const getHarnessUrl = async (): Promise<string> => {
+  if (url != null) return url
+  const server = await createServer({
+    configFile: false,
+    root: resolve(here, './harness'),
+    plugins: [react(), tailwindcss(), consentBootstrap()],
+    resolve: { dedupe: ['react', 'react-dom'] },
+    server: { port: 0 },
+    logLevel: 'warn'
+  })
+  await server.listen()
+  const local = server.resolvedUrls?.local?.[0]
+  if (local == null) throw new Error('vite did not expose a local URL')
+  url = local
+
+  return url
+}
+
+export const HARNESS_URL = await getHarnessUrl()

package/tests/harness/index.html

@@ -0,0 +1,22 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>@owlmeans/web-consent</title>
+    <!--
+      The bootstrap script is injected HERE, above the module below, because that is the only
+      placement that makes Consent Mode mean anything: a tag reads the state present when it loads,
+      so a decision pushed from a React bundle arrives after everything on the page has acted.
+
+      It is injected by the harness server's `transformIndexHtml`, exactly as `manager-web`'s vite
+      plugin, the template's rollup config and the Astro layout do — so the string under test is
+      the one `consentBootstrapScript()` emits, inline and classic, not a copy and not a deferred
+      module.
+    -->
+    <!--owlmeans:consent-->
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/mount.tsx"></script>
+  </body>
+</html>

package/tests/harness/mount.tsx

@@ -0,0 +1,77 @@
+import type { FC } from 'react'
+import { useState } from 'react'
+import { createRoot } from 'react-dom/client'
+import { CookieConsent, CookiePolicy, DEFAULT_CONSENT_CATEGORIES } from '../../src/index.js'
+import type { ConsentCategory } from '../../src/index.js'
+
+/**
+ * The harness renders whatever the query string asks for, so a spec chooses its case by URL and
+ * every case runs against one real mount of the shipped components.
+ *
+ * - `?locale=<lng>` — render the dialog in that language.
+ * - `?categories=custom` — a category set that is NOT the default, with its own global var.
+ * - `?view=policy` — the cookie-policy page instead of the dialog.
+ */
+const params = new URLSearchParams(window.location.search)
+
+/**
+ * A deliberately non-default set: a different key, a different global var, and a signal list that
+ * does not match the built-in one. A component that quietly fell back to the defaults would still
+ * render three plausible rows, so the assertions key on THESE names.
+ */
+const CUSTOM: ConsentCategory[] = [
+  {
+    key: 'essential', required: true,
+    labelKey: 'consent.essential.label', descriptionKey: 'consent.essential.description',
+  },
+  {
+    key: 'telemetry',
+    labelKey: 'consent.telemetry.label', descriptionKey: 'consent.telemetry.description',
+    globalVar: 'harnessTelemetry',
+    signals: ['analytics_storage'],
+  },
+]
+
+const categories = params.get('categories') === 'custom' ? CUSTOM : DEFAULT_CONSENT_CATEGORIES
+
+const translate = params.get('categories') === 'custom'
+  // Only the custom keys need wording; everything else falls through to the packaged bundle,
+  // which is exactly how a consumer with one extra category is expected to wire it.
+  ? (key: string, defaultValue: string): string => key === 'consent.telemetry.label'
+    ? 'Telemetry'
+    : key === 'consent.telemetry.description' ? 'Product telemetry.' : defaultValue
+  : undefined
+
+const App: FC = () => {
+  // Re-mounting on demand proves a decision SURVIVES a mount rather than merely a render — the
+  // migration case is meaningless otherwise.
+  const [generation, setGeneration] = useState(0)
+
+  return <div>
+    <button id="remount" onClick={() => setGeneration(g => g + 1)}>remount</button>
+    <span id="generation">{generation}</span>
+    {params.get('view') === 'policy' && <CookiePolicy
+      key={`policy-${generation}`}
+      locale={params.get('locale') ?? undefined}
+      categories={categories}
+      operator="Acme"
+      privacyHref="https://example.test/privacy"
+      termsHref="https://example.test/terms"
+    />}
+    {/*
+      Mounted in EVERY view, including alongside the policy page — that is how an application
+      wires it (once, at the root) and it is what makes the policy's "manage preferences" button
+      mean anything: the button asks the store to open, and something has to be listening.
+    */}
+    <CookieConsent
+      key={`consent-${generation}`}
+      locale={params.get('locale') ?? undefined}
+      categories={categories}
+      translate={translate}
+      policyHref="/cookies"
+      links={[{ href: 'https://example.test/privacy', labelKey: 'consent.privacy', defaultLabel: 'Privacy Policy' }]}
+    />
+  </div>
+}
+
+createRoot(document.getElementById('root')!).render(<App />)

package/build/@/lib/utils.d.ts

@@ -1,3 +0,0 @@
-import { type ClassValue } from 'clsx';
-export declare function cn(...inputs: ClassValue[]): string;
-//# sourceMappingURL=utils.d.ts.map

package/build/@/lib/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/@/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,MAAM,CAAA;AAG5C,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAEzC"}

package/build/@/lib/utils.js

@@ -1,6 +0,0 @@
-import { clsx } from 'clsx';
-import { twMerge } from 'tailwind-merge';
-export function cn(...inputs) {
-    return twMerge(clsx(inputs));
-}
-//# sourceMappingURL=utils.js.map

package/build/@/lib/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/@/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,MAAM,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,MAAM,UAAU,EAAE,CAAC,GAAG,MAAoB;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,CAAC"}