@owlmeans/web-marketing-consent 0.1.18-rc.0

package/README.md

@@ -0,0 +1,15 @@
+<!-- owlmeans:agent-guidance:start -->
+## Agent guidance
+
+This package ships embedded agent skills under `agent-meta/`. After installing your
+`@owlmeans/*` packages, run the OwlMeans agent-skills installer to place them into
+your project's skill store (`.agents/skills/`):
+
+```sh
+npx @owlmeans/agent-skills@^0.1.18-rc.33
+```
+
+The embedded files are version-matched to this package release. Do not edit them
+directly — they are regenerated on each publish. To contribute guidance edits,
+open a PR against the source monorepo.
+<!-- owlmeans:agent-guidance:end -->

package/agent-meta/manifest.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 2,
+  "package": "@owlmeans/web-marketing-consent",
+  "version": "0.1.18-rc.0",
+  "generatedAt": "2026-09-22T17:37:10.922Z",
+  "canonicalRepo": "https://github.com/owlmeans/common",
+  "entries": [
+    {
+      "kind": "skill",
+      "name": "web-marketing-consent",
+      "category": "package-specific",
+      "file": "skills/web-marketing-consent/SKILL.md",
+      "canonicalPath": ".agents/skills/web-marketing-consent/SKILL.md"
+    }
+  ]
+}

package/agent-meta/skills/web-marketing-consent/SKILL.md

@@ -0,0 +1,245 @@
+---
+name: web-marketing-consent
+description: How to use @owlmeans/web-marketing-consent — the browser half of @owlmeans/marketing-consent: the post-sign-in privacy-choices screen, a reusable MarketingConsentPreferences settings-card body, appendMarketingConsent's login step and landing hooks, the MarketingConsentClientService (fail-open, signed-out-safe), and the cookie-consent bridge to @owlmeans/consent. Auto-invoked when wiring the marketing-consent screen into a web app, rendering a settings card for privacy choices, reconciling cookie-consent decisions with saved account decisions, or diagnosing a person stuck on (or never shown) the marketing-consent step.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/web-marketing-consent
+
+**Layer:** Web (React, shadcn + Tailwind v4)
+**Install:** `"@owlmeans/web-marketing-consent": "^0.1.18-rc.0"` in `dependencies`
+**Contracts:** `@owlmeans/marketing-consent` — the catalogue, `consentStatus`, the protocol tree
+**Server half:** `@owlmeans/server-marketing-consent` — `serveMarketingConsentEntrypoints` binds the
+same `status`/`save`/`terms` protocols this package calls
+**Login seam:** `@owlmeans/client-auth`'s `LoginStep`/`LoginLandingHook` registries (`./login`)
+**Cookie bridge:** `@owlmeans/consent`'s `consentStore` (device-side cookie/tracking decisions)
+
+Read `@owlmeans/marketing-consent`'s own skill first (the catalogue, `consentStatus`'s decision
+table, the protocol tree) and `@owlmeans/server-marketing-consent`'s (the service, `subjectOf`, the
+append-only log) — this package builds on both and repeats nothing they already document.
+
+## Key exports
+
+| Export | Description |
+|---|---|
+| `MARKETING_CONSENT_CLIENT_SERVICE` | The client service alias (`context.service<MarketingConsentClientService>(...)`) |
+| `MARKETING_CONSENT_LOGIN_STEP` · `MARKETING_CONSENT_LANDING_HOOK_TERMS` · `MARKETING_CONSENT_LANDING_HOOK_SYNC` | Registry aliases the step/hooks register under |
+| `MARKETING_CONSENT_I18N` | Re-export of `@owlmeans/marketing-consent`'s OWN `MARKETING_CONSENT_I18N` — see "One shared i18n resource" below |
+| `makeMarketingConsentClient(protocols, opts?)` · `appendMarketingConsentClient(ctx, protocols, opts?)` | Build/register the `MarketingConsentClientService` |
+| `MarketingConsentClientService` | `status(opts?)`, `save(request)`, `recordTerms(acceptance)`, `last()`, `bridges()`, `preferences()` — see "Fail open, always" |
+| `cookieConsentBridge(opts?)` | A `MarketingConsentBridge` over `@owlmeans/consent`'s `consentStore` |
+| `marketingConsentStep(client, entrypointAlias)` | The `LoginStep` — pending while `status().pending` is true |
+| `termsRecorder(loginTermsConfig, client, locale?)` · `landingSync(client)` | The two `LoginLandingHook`s |
+| `appendMarketingConsent(ctx, opts)` | The ONE call an app makes — wires the client, the step and both landing hooks |
+| `marketingConsentEntrypoints(protocols)` | `[bindScreen(protocols.screen, handler(MarketingConsentScreen))]` |
+| `MarketingConsentScreen` | The post-sign-in screen (`RoutedComponent`) |
+| `MarketingConsentPreferences` | The reusable settings-card body (`{ translate?, className?, onSaved? }`) |
+| `useMarketingConsent(opts?)` | The headless model both components share — `{ loading, saving, error, gpc, groups, allChecked, allIndeterminate, toggleAll, toggle, save, skip }` |
+
+## Wiring
+
+```ts
+import { appendMarketingConsent, marketingConsentEntrypoints } from '@owlmeans/web-marketing-consent'
+import { makeMarketingConsentProtocols } from '@owlmeans/marketing-consent'
+
+// shared package — the SAME object the server binds `serveMarketingConsentEntrypoints` to
+export const marketingConsentProtocols = makeMarketingConsentProtocols({ parent: appProtocols.account.base })
+
+// web app's makeContext
+appendMarketingConsent(context, { protocols: marketingConsentProtocols })
+// entrypoints: ...marketingConsentEntrypoints(marketingConsentProtocols)
+// PLUS the app's own bindAll for base/status/save/terms, alongside the server's bindAll — this
+// package binds only the SCREEN. Exactly the split @owlmeans/web-oauth's oauthEntrypoints draws
+// for its own consent API; see that package's skill if this split is unfamiliar.
+```
+
+`appendMarketingConsent(ctx, opts)` does four things, each independently toggleable:
+
+1. Registers the `MarketingConsentClientService` (`opts.bridges ?? [cookieConsentBridge()]`,
+   `opts.preferences`) — via `appendMarketingConsentClient`, so calling `appendMarketingConsent`
+   twice never double-registers.
+2. `opts.step !== false` — `login.registerStep(marketingConsentStep(client, opts.protocols.screen.alias))`.
+3. `opts.terms !== false` — reads `(context.cfg as CommonConfig).security?.auth?.login?.terms`
+   (the SAME typed path `@owlmeans/client-panel`'s `useLoginMethods` reads) and registers
+   `termsRecorder`.
+4. Always registers `landingSync`.
+
+`opts.config` (`MarketingConsentConfig`) is accepted for symmetry with the server's
+`appendMarketingConsentService({ config })` call but is NOT read here — `resolveMarketingConsents`
+only ever runs where the catalogue is enumerated (the server); this package's UI reads the
+ALREADY-RESOLVED `MarketingConsentStatusItem.definition` back off the status response and never
+re-resolves the catalogue client-side.
+
+## One shared i18n resource, not two
+
+`MARKETING_CONSENT_I18N` here is a re-export of `@owlmeans/marketing-consent`'s OWN constant
+(`'marketing-consent'`) — this package does NOT register a second resource for its `screen.*`/
+`preferences.*` strings. `@owlmeans/i18n`'s `addI18nLib` pushes a new resource ENTRY rather than
+replacing one, and `client-i18n`'s `useI18nResource` merges every entry for a given
+`(lng, resource, ns)` with `i18n.addResourceBundle(lng, ns, data, true, true)` (deep merge) before
+it is ever read. The domain package's bundle (`group.*`, `consent.*`, `link.*`, `errors.*`) and
+this package's own (`screen.*`, `preferences.*`) have disjoint top-level keys, so the two combine
+cleanly. `ConsentFields` (the shared group/item body) reads BOTH halves through one `t` —
+`t(item.definition.labelKey, ...)` for a domain key, `t('screen.updated', ...)` for one of ours,
+`t('link.default', 'Learn more')` for the domain package's own link fallback text.
+
+## Fail open, always
+
+`MarketingConsentClientService` NEVER calls the API while signed out
+(`AuthService.authenticated()` — no args, returns the token or `null` — checked before every call)
+and NEVER throws into a caller: any rejected/thrown network call is swallowed, returning `null`
+(`status`, `save`) or `false` (`recordTerms`) instead. A broken consent read/write must never block
+sign-in or break the app — the same discipline `@owlmeans/web-oauth`'s `landAfterLogin`/
+`continueLogin` already apply to a step/hook that hangs or throws (bound-and-swallow, timeout
+included).
+
+`status(opts?)` also caches: `opts.fresh !== true` and an already-cached `last()` skips the network
+round trip entirely (a footer "Privacy choices" link wants a quick paint, not a forced refetch);
+`marketingConsentStep`/`landingSync`/the two components all pass `{ fresh: true }` because a
+post-sign-in decision must never be stale.
+
+## The login step and the two landing hooks
+
+`marketingConsentStep(client, entrypointAlias)` is `pending: async () => (await client.status({
+fresh: true }))?.pending ?? false` — a fetch failure fails OPEN (not pending), because a broken
+read must never permanently trap a signed-in person on a screen they cannot get past.
+`entrypointAlias` is `protocols.screen.alias` — `continueLogin`'s `LoginStep.entrypoint` is where
+the dispatcher sends the browser while the step is pending.
+
+`termsRecorder` and `landingSync` are `LoginLandingHook`s, run once per freshly landed token by
+`landAfterLogin` (see `@owlmeans/client-auth`'s `./login` skill for the bound-and-swallow contract
+they share with every other landing hook):
+
+- **`termsRecorder`** (priority 100, runs first) — if `resolveTerms(loginTermsConfig)` is required
+  and `termsAccepted(resolved)` (the LOCAL `localStorage` marker `@owlmeans/client-auth`'s sign-in
+  screen already set before the flow was allowed to start), posts `client.recordTerms({ documents,
+  notices, version, locale })`. A config with terms disabled, or a person who has not yet locally
+  accepted, records nothing.
+- **`landingSync`** (priority 90) — reconciles every `client.bridges()` against the freshly loaded
+  status: a device with cookie decisions but no saved account decisions SEEDS the account
+  (`client.save({ source: 'cookie' })`); an account with decisions but a bare device SEEDS the
+  device (`bridge.write`); both present (agreeing or not), or neither present, and NOTHING is
+  overwritten — the safer of two wrong guesses is to leave two already-made choices alone rather
+  than silently pick one.
+
+`MarketingConsentScreen`'s own "Save and continue"/"Continue without saving" buttons call
+`useContinueLogin()({ after: MARKETING_CONSENT_LOGIN_STEP })` directly — that is `continueLogin`,
+NOT `landAfterLogin`, so clicking through this step never re-runs `termsRecorder`/`landingSync`
+(those only fire once, on the token that just landed, before this step's screen was ever reached).
+
+## The cookie-consent bridge
+
+`cookieConsentBridge(opts?: { storageOptions?: ConsentOptions })` is a `MarketingConsentBridge`
+over `@owlmeans/consent`'s singleton `consentStore`, for every `MarketingConsentDefinition` whose
+`cookieCategory` names a `@owlmeans/consent` category (`trackers.analytics` -> `CONSENT_ANALYTICS`,
+`trackers.advertising` -> `CONSENT_MARKETING`). `consentStore.save` REPLACES the stored record
+wholesale (no merge of its own), so `write` always spreads the CURRENT record first and always
+re-asserts the essential category before patching in only the categories this bridge owns.
+`opts.storageOptions` is read ONLY to find which category is "essential" (a host that renamed it
+via its own `consentStore.init(storageOptions)` elsewhere is still honored); this bridge never
+calls `consentStore.init` itself — it has no opinion about whether a cookie dialog exists at all.
+
+A `suppress` flag guards re-entrancy: `write` sets it before calling `consentStore.save` and clears
+it in a `finally`, and `subscribe`'s own listener skips while it is set — otherwise a save made
+THROUGH this bridge would immediately hand the same change back to whatever reacts to `subscribe`,
+which could write again and loop. An update made OUTSIDE the bridge (the cookie dialog's own UI)
+still reaches every subscriber normally.
+
+## The screen and the settings card
+
+`MarketingConsentScreen` — full page, no application chrome, same `100dvh` centered-card shape as
+`@owlmeans/web-oauth`'s consent screen. **Renders when framed too** — unlike that screen (a
+token-mint decision a clickjacking overlay could steal), saving a marketing preference is not one,
+so there is deliberately no framed-refusal branch. Nothing checked by default is a fully valid
+save; there is no minimum-selection validation anywhere.
+
+`MarketingConsentPreferences({ translate?, className?, onSaved? })` renders the SAME group/item/
+select-all body (`ConsentFields`, internal — not exported) without the full-page chrome, for a
+host's own settings card. `MarketingConsentClientService.preferences()` names the entrypoint alias
+a footer "Privacy choices" link should point at; that screen is expected to render THIS component,
+not `MarketingConsentScreen`. No `useContinueLogin` here at all — nothing navigates on save, and
+there is no skip: a settings card is always revisitable, so failing to save just leaves the error
+showing and the draft in place.
+
+`useMarketingConsent({ source })` is the shared headless model: `source: 'sign-in'` from the screen,
+`'settings'` (the default) from preferences — posted on every `save()` call, on EVERY item's
+current draft value (never a diff; the server upserts by key). Groups are ordered
+`communications`/`data`/`trackers` (`MC_GROUP_*`), any other group appended after in first-seen
+order. `allIndeterminate` is applied to the select-all checkbox's `.indeterminate` DOM property via
+a `ref` in a `useEffect` — a native checkbox has no ARIA `mixed` prop, only that imperative one.
+
+## `data-marketing-consent-*` contract
+
+`data-marketing-consent` (screen root), `data-marketing-consent-all`,
+`data-marketing-consent-item="<key>"`, `data-marketing-consent-updated="<key>"`,
+`data-marketing-consent-save`, `data-marketing-consent-skip` (screen only — preferences has none),
+`data-marketing-consent-error` (screen; preferences uses a bare `role="alert"`, no fixed id),
+`data-marketing-consent-preferences-save`. `-all`/`-item`/`-updated` are the SAME attributes in
+both the screen and `MarketingConsentPreferences` — the two are never mounted on one page at once.
+Do not rename them.
+
+## The `@source` line — a consumer rule
+
+Same trap as `@owlmeans/web-oauth`/`@owlmeans/web-consent`: Tailwind's scanner reads the CSS root
+plus `@source` directives and excludes `node_modules`, so a class used only inside this package
+never reaches the app's stylesheet and the screen/card render unstyled with nothing in the
+consumer's own sources to blame. Every consuming app adds:
+
+```css
+@source "../../../node_modules/@owlmeans/web-marketing-consent/src";
+```
+
+Point at the shipped `src`, **never** `build` — under a linked workspace the `node_modules` entry
+is a symlink into this monorepo, where every package's `build` directory is ignored by `.gitignore`,
+so a `build` source scans zero files and reports nothing; the failure is silent. Primitives
+(`button`, `card`, `label`) are private under `src/@/` and imported only by relative specifiers —
+checkbox rows are a bare native `<input type="checkbox">`, the same choice `@owlmeans/client-auth`'s
+own `LoginTerms` makes for a sign-in screen (no checkbox primitive, and its Radix peer, is vendored
+just to render one). `tests/package-boundary.spec.ts` fails on any `from '@/…'` in `src/`.
+
+## Testing
+
+Category D (`/testing-ui`) — `bun test ./tests` drives a real chromium against a real app, with
+only the server absent, the same harness shape as `@owlmeans/web-oauth`'s:
+
+- **Harness** (`tests/context.ts` boots Vite; `tests/harness/mount.tsx` is the app) — the real
+  `@owlmeans/web-client` context, `appendMarketingConsent(context, { protocols })` (so the step and
+  both landing hooks are really registered, even though no spec drives them directly), the
+  marketing-consent API bound with `bindAll` under a backend parent on the harness's own origin,
+  the screen's own entrypoint, a bare `home` screen, and a `/prefs` screen that renders
+  `MarketingConsentPreferences` for the preferences specs. `tests/helpers.ts`'s `open(path, {
+  stubs, signedIn, lng })` stubs `status`/`save`/`terms` via `page.route` on
+  `/\/api\/.*marketing-consent\//`; `statusView(overrides?)` builds a `MarketingConsentStatusView`
+  from `STANDARD_MARKETING_CONSENTS` (every standard key is `opt-in`, so the un-overridden default
+  IS "nothing checked").
+- A signed-in visit is `?bearer=<makeBearer(USER)>`, written to IndexedDB (`idb-keyval`) BEFORE
+  `createRoot(...).render(...)` — **wait for a rendered marker** (`#home`, `[data-marketing-consent-save]`)
+  before `page.evaluate`-ing anything: `domcontentloaded` fires as soon as the module script
+  STARTS running, not once its own top-level `await`s (writing that bearer record) have settled: a
+  bare `page.evaluate` right after `goto` races the write and reads "signed out".
+- **What is covered:** `screen.spec.ts` (nothing checked by default, select-all/indeterminate, the
+  `updated` badge, save posting every current draft value then continuing the flow to `/`, a failed
+  save showing error+skip with skip still moving the flow on, a framed mount rendering normally);
+  `preferences.spec.ts` (same body, no navigation on save, `onSaved` firing, no skip link exists);
+  `bridge.spec.ts` (non-browser — a fake `localStorage`/`document`/`window`, the same fixture
+  `@owlmeans/consent`'s own suite uses; read/write/the re-entrancy guard); `i18n.spec.ts`
+  (non-browser — 8-locale parity plus a literal-key scan of `t('screen.…'/'preferences.…')` calls
+  across the three component files); `service.spec.ts` (browser — drives the REAL registered
+  `MarketingConsentClientService` via `window.__mc`, since faking `assertCtx`/`context.entrypoint`
+  by hand is not worth it: signed-out never calls the API, a healthy server round-trips, a failing
+  server fails open on every method); `package-boundary.spec.ts` (no consumer `@/` aliases in
+  `src/`).
+
+## Related
+
+- `@owlmeans/marketing-consent` — the catalogue, `consentStatus`'s decision table, the protocol
+  tree (read its skill first; this package repeats nothing it already documents)
+- `@owlmeans/server-marketing-consent` — the service and handlers this package's `status`/`save`/
+  `terms` calls reach
+- `@owlmeans/client-auth` (`./login`) — `LoginStep`/`LoginLandingHook`, `landAfterLogin`/
+  `continueLogin`/`useContinueLogin`, `resolveTerms`/`termsAccepted` — the seam this package plugs
+  into; read its skill for the bound-and-swallow contract every step/hook shares
+- `@owlmeans/consent` — `consentStore`, `ConsentRecord`, the categories this bridge patches
+- `@owlmeans/web-oauth` — the structural precedent this package copies: headless-hook/thin-component
+  split, vendored `src/@/` primitives, the `@source` line, the Vite+Playwright test harness shape

package/build/@/components/ui/button.d.ts

@@ -0,0 +1,11 @@
+import * as React from 'react';
+import { type VariantProps } from 'class-variance-authority';
+declare const buttonVariants: (props?: ({
+    variant?: "default" | "destructive" | "ghost" | "link" | "outline" | "secondary" | null | undefined;
+    size?: "default" | "icon" | "lg" | "sm" | null | undefined;
+} & import("class-variance-authority/types").ClassProp) | undefined) => string;
+declare function Button({ className, variant, size, asChild, ...props }: React.ComponentProps<"button"> & VariantProps<typeof buttonVariants> & {
+    asChild?: boolean;
+}): React.JSX.Element;
+export { Button, buttonVariants };
+//# sourceMappingURL=button.d.ts.map

package/build/@/components/ui/button.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"button.d.ts","sourceRoot":"","sources":["../../../../src/@/components/ui/button.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAIjE,QAAA,MAAM,cAAc;;;8EA6BnB,CAAA;AAED,iBAAS,MAAM,CAAC,EACd,SAAS,EACT,OAAO,EACP,IAAI,EACJ,OAAe,EACf,GAAG,KAAK,EACT,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,GAC/B,YAAY,CAAC,OAAO,cAAc,CAAC,GAAG;IACpC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,qBAUF;AAED,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA"}

package/build/@/components/ui/button.js

@@ -0,0 +1,32 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Slot } from '@radix-ui/react-slot';
+import { cva } from 'class-variance-authority';
+import { cn } from '../../lib/utils.js';
+const buttonVariants = cva("inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-all disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive cursor-pointer", {
+    variants: {
+        variant: {
+            default: "bg-primary text-primary-foreground shadow-xs hover:bg-primary/90",
+            destructive: "bg-destructive text-white shadow-xs hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
+            outline: "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50",
+            secondary: "bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80",
+            ghost: "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
+            link: "text-primary underline-offset-4 hover:underline",
+        },
+        size: {
+            default: "h-9 px-4 py-2 has-[>svg]:px-3",
+            sm: "h-8 rounded-md gap-1.5 px-3 has-[>svg]:px-2.5",
+            lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
+            icon: "size-9",
+        },
+    },
+    defaultVariants: {
+        variant: "default",
+        size: "default",
+    },
+});
+function Button({ className, variant, size, asChild = false, ...props }) {
+    const Comp = asChild ? Slot : "button";
+    return (_jsx(Comp, { "data-slot": "button", className: cn(buttonVariants({ variant, size, className })), ...props }));
+}
+export { Button, buttonVariants };
+//# sourceMappingURL=button.js.map

package/build/@/components/ui/button.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"button.js","sourceRoot":"","sources":["../../../../src/@/components/ui/button.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,GAAG,EAAqB,MAAM,0BAA0B,CAAA;AAEjE,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,MAAM,cAAc,GAAG,GAAG,CACxB,4cAA4c,EAC5c;IACE,QAAQ,EAAE;QACR,OAAO,EAAE;YACP,OAAO,EACL,kEAAkE;YACpE,WAAW,EACT,6JAA6J;YAC/J,OAAO,EACL,uIAAuI;YACzI,SAAS,EACP,wEAAwE;YAC1E,KAAK,EACH,sEAAsE;YACxE,IAAI,EAAE,iDAAiD;SACxD;QACD,IAAI,EAAE;YACJ,OAAO,EAAE,+BAA+B;YACxC,EAAE,EAAE,+CAA+C;YACnD,EAAE,EAAE,sCAAsC;YAC1C,IAAI,EAAE,QAAQ;SACf;KACF;IACD,eAAe,EAAE;QACf,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,SAAS;KAChB;CACF,CACF,CAAA;AAED,SAAS,MAAM,CAAC,EACd,SAAS,EACT,OAAO,EACP,IAAI,EACJ,OAAO,GAAG,KAAK,EACf,GAAG,KAAK,EAIP;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAA;IAEtC,OAAO,CACL,KAAC,IAAI,iBACO,QAAQ,EAClB,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KACvD,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA"}

package/build/@/components/ui/card.d.ts

@@ -0,0 +1,10 @@
+import * as React from 'react';
+declare function Card({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardHeader({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardTitle({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardDescription({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardAction({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardContent({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+declare function CardFooter({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
+export { Card, CardHeader, CardFooter, CardTitle, CardAction, CardDescription, CardContent, };
+//# sourceMappingURL=card.d.ts.map

package/build/@/components/ui/card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.d.ts","sourceRoot":"","sources":["../../../../src/@/components/ui/card.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,iBAAS,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAWjE;AAED,iBAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAWvE;AAED,iBAAS,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAQtE;AAED,iBAAS,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAQ5E;AAED,iBAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAWvE;AAED,iBAAS,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAQxE;AAED,iBAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,qBAQvE;AAED,OAAO,EACL,IAAI,EACJ,UAAU,EACV,UAAU,EACV,SAAS,EACT,UAAU,EACV,eAAe,EACf,WAAW,GACZ,CAAA"}

package/build/@/components/ui/card.js

@@ -0,0 +1,25 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { cn } from '../../lib/utils.js';
+function Card({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card", className: cn("bg-card text-card-foreground flex flex-col gap-6 rounded-xl border py-6 shadow-sm", className), ...props }));
+}
+function CardHeader({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-header", className: cn("@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-1.5 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6", className), ...props }));
+}
+function CardTitle({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-title", className: cn("leading-none font-semibold", className), ...props }));
+}
+function CardDescription({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-description", className: cn("text-muted-foreground text-sm", className), ...props }));
+}
+function CardAction({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-action", className: cn("col-start-2 row-span-2 row-start-1 self-start justify-self-end", className), ...props }));
+}
+function CardContent({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-content", className: cn("px-6", className), ...props }));
+}
+function CardFooter({ className, ...props }) {
+    return (_jsx("div", { "data-slot": "card-footer", className: cn("flex items-center px-6 [.border-t]:pt-6", className), ...props }));
+}
+export { Card, CardHeader, CardFooter, CardTitle, CardAction, CardDescription, CardContent, };
+//# sourceMappingURL=card.js.map

package/build/@/components/ui/card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.js","sourceRoot":"","sources":["../../../../src/@/components/ui/card.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,SAAS,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IAChE,OAAO,CACL,2BACY,MAAM,EAChB,SAAS,EAAE,EAAE,CACX,mFAAmF,EACnF,SAAS,CACV,KACG,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IACtE,OAAO,CACL,2BACY,aAAa,EACvB,SAAS,EAAE,EAAE,CACX,4JAA4J,EAC5J,SAAS,CACV,KACG,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IACrE,OAAO,CACL,2BACY,YAAY,EACtB,SAAS,EAAE,EAAE,CAAC,4BAA4B,EAAE,SAAS,CAAC,KAClD,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IAC3E,OAAO,CACL,2BACY,kBAAkB,EAC5B,SAAS,EAAE,EAAE,CAAC,+BAA+B,EAAE,SAAS,CAAC,KACrD,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IACtE,OAAO,CACL,2BACY,aAAa,EACvB,SAAS,EAAE,EAAE,CACX,gEAAgE,EAChE,SAAS,CACV,KACG,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IACvE,OAAO,CACL,2BACY,cAAc,EACxB,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,KAC5B,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAA+B;IACtE,OAAO,CACL,2BACY,aAAa,EACvB,SAAS,EAAE,EAAE,CAAC,yCAAyC,EAAE,SAAS,CAAC,KAC/D,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,OAAO,EACL,IAAI,EACJ,UAAU,EACV,UAAU,EACV,SAAS,EACT,UAAU,EACV,eAAe,EACf,WAAW,GACZ,CAAA"}

package/build/@/components/ui/label.d.ts

@@ -0,0 +1,5 @@
+import * as React from 'react';
+import * as LabelPrimitive from '@radix-ui/react-label';
+declare function Label({ className, ...props }: React.ComponentProps<typeof LabelPrimitive.Root>): React.JSX.Element;
+export { Label };
+//# sourceMappingURL=label.d.ts.map

package/build/@/components/ui/label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"label.d.ts","sourceRoot":"","sources":["../../../../src/@/components/ui/label.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AAIvD,iBAAS,KAAK,CAAC,EACb,SAAS,EACT,GAAG,KAAK,EACT,EAAE,KAAK,CAAC,cAAc,CAAC,OAAO,cAAc,CAAC,IAAI,CAAC,qBAWlD;AAED,OAAO,EAAE,KAAK,EAAE,CAAA"}

package/build/@/components/ui/label.js

@@ -0,0 +1,8 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import * as LabelPrimitive from '@radix-ui/react-label';
+import { cn } from '../../lib/utils.js';
+function Label({ className, ...props }) {
+    return (_jsx(LabelPrimitive.Root, { "data-slot": "label", className: cn("flex items-center gap-2 text-sm leading-none font-medium select-none group-data-[disabled=true]:pointer-events-none group-data-[disabled=true]:opacity-50 peer-disabled:cursor-not-allowed peer-disabled:opacity-50", className), ...props }));
+}
+export { Label };
+//# sourceMappingURL=label.js.map

package/build/@/components/ui/label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"label.js","sourceRoot":"","sources":["../../../../src/@/components/ui/label.tsx"],"names":[],"mappings":";AAEA,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAEvC,SAAS,KAAK,CAAC,EACb,SAAS,EACT,GAAG,KAAK,EACyC;IACjD,OAAO,CACL,KAAC,cAAc,CAAC,IAAI,iBACR,OAAO,EACjB,SAAS,EAAE,EAAE,CACX,qNAAqN,EACrN,SAAS,CACV,KACG,KAAK,GACT,CACH,CAAA;AACH,CAAC;AAED,OAAO,EAAE,KAAK,EAAE,CAAA"}

package/build/@/lib/utils.d.ts

@@ -0,0 +1,3 @@
+import { type ClassValue } from 'clsx';
+export declare function cn(...inputs: ClassValue[]): string;
+//# sourceMappingURL=utils.d.ts.map

package/build/@/lib/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/@/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,MAAM,CAAA;AAG5C,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,UAEzC"}

package/build/@/lib/utils.js

@@ -0,0 +1,6 @@
+import { clsx } from 'clsx';
+import { twMerge } from 'tailwind-merge';
+export function cn(...inputs) {
+    return twMerge(clsx(inputs));
+}
+//# sourceMappingURL=utils.js.map

package/build/@/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/@/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,MAAM,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAExC,MAAM,UAAU,EAAE,CAAC,GAAG,MAAoB;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9B,CAAC"}

package/build/append.d.ts

@@ -0,0 +1,32 @@
+import type { ClientConfig, ClientContext } from '@owlmeans/client-context';
+import type { MarketingConsentBridge, MarketingConsentConfig, MarketingConsentEntrypoints } from '@owlmeans/marketing-consent';
+export interface MarketingConsentAppendOptions {
+    /** From `makeMarketingConsentProtocols(...)` — the app builds this once and shares it between
+     * this call and its own server-side `serveMarketingConsentEntrypoints`/`bindAll` wiring. */
+    protocols: MarketingConsentEntrypoints;
+    /**
+     * Accepted for API symmetry with the server side (`appendMarketingConsentService({ config })`),
+     * but not read here: `resolveMarketingConsents` only ever runs where the catalogue is actually
+     * enumerated — the server. This package's own UI reads the ALREADY-RESOLVED definitions back off
+     * `MarketingConsentStatusItem.definition` and never re-resolves the catalogue client-side.
+     */
+    config?: MarketingConsentConfig;
+    /** Register the post-sign-in step. Default `true`. */
+    step?: boolean;
+    /** Record a fresh terms acceptance on landing. Default `true`. */
+    terms?: boolean;
+    /** Default `[cookieConsentBridge()]`. */
+    bridges?: MarketingConsentBridge[];
+    /** Entrypoint alias of a host's own "Privacy choices" settings screen, for
+     * `MarketingConsentClientService.preferences()`. */
+    preferences?: string;
+    locale?: string;
+}
+/**
+ * Wire the marketing-consent client into a web app: the client service, the post-sign-in step
+ * (pending while anything is unanswered) and the two landing hooks (terms acceptance, then
+ * cookie/account reconciliation) — the whole of what an application calls beyond registering
+ * `marketingConsentEntrypoints(protocols)` in its own entrypoint list.
+ */
+export declare const appendMarketingConsent: <C extends ClientConfig, T extends ClientContext<C>>(context: T, opts: MarketingConsentAppendOptions) => T;
+//# sourceMappingURL=append.d.ts.map

package/build/append.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"append.d.ts","sourceRoot":"","sources":["../src/append.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAE3E,OAAO,KAAK,EACV,sBAAsB,EAAE,sBAAsB,EAAE,2BAA2B,EAC5E,MAAM,6BAA6B,CAAA;AAQpC,MAAM,WAAW,6BAA6B;IAC5C;gGAC4F;IAC5F,SAAS,EAAE,2BAA2B,CAAA;IACtC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,sBAAsB,CAAA;IAC/B,sDAAsD;IACtD,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,yCAAyC;IACzC,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAA;IAClC;wDACoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,YAAY,EAAE,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,WAC9E,CAAC,QAAQ,6BAA6B,KAC9C,CAiBF,CAAA"}

package/build/append.js

@@ -0,0 +1,28 @@
+import { ensureLoginService } from '@owlmeans/client-auth/login';
+import { cookieConsentBridge } from './bridge.js';
+import { MARKETING_CONSENT_CLIENT_SERVICE } from './consts.js';
+import { landingSync, termsRecorder } from './landing.js';
+import { appendMarketingConsentClient } from './service.js';
+import { marketingConsentStep } from './step.js';
+/**
+ * Wire the marketing-consent client into a web app: the client service, the post-sign-in step
+ * (pending while anything is unanswered) and the two landing hooks (terms acceptance, then
+ * cookie/account reconciliation) — the whole of what an application calls beyond registering
+ * `marketingConsentEntrypoints(protocols)` in its own entrypoint list.
+ */
+export const appendMarketingConsent = (context, opts) => {
+    const bridges = opts.bridges ?? [cookieConsentBridge()];
+    appendMarketingConsentClient(context, opts.protocols, { bridges, preferences: opts.preferences });
+    const client = context.service(MARKETING_CONSENT_CLIENT_SERVICE);
+    const login = ensureLoginService(context);
+    if (opts.step !== false) {
+        login.registerStep(marketingConsentStep(client, opts.protocols.screen.alias));
+    }
+    if (opts.terms !== false) {
+        const terms = context.cfg.security?.auth?.login?.terms;
+        login.onLanded(termsRecorder(terms, client, opts.locale));
+    }
+    login.onLanded(landingSync(client));
+    return context;
+};
+//# sourceMappingURL=append.js.map

package/build/append.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append.js","sourceRoot":"","sources":["../src/append.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAIhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAyBhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAAU,EAAE,IAAmC,EAC5C,EAAE;IACL,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAEvD,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAgC,gCAAgC,CAAC,CAAA;IAE/F,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,KAAK,CAAC,YAAY,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAkC,OAAO,CAAC,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAA;QACtG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IAEnC,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/bridge.d.ts

@@ -0,0 +1,25 @@
+import type { ConsentOptions } from '@owlmeans/consent';
+import type { MarketingConsentBridge } from '@owlmeans/marketing-consent';
+export interface MakeCookieConsentBridgeOptions {
+    /**
+     * The SAME options the app passes to `consentStore.init(...)` elsewhere (e.g. via
+     * `@owlmeans/web-consent`'s dialog mount) — read here only to find which category key is the
+     * required "essential" one, so `write` re-asserts the right key even when a host renamed it.
+     * This bridge never calls `consentStore.init` itself; a marketing-consent screen has no opinion
+     * about whether a cookie dialog exists at all.
+     */
+    storageOptions?: ConsentOptions;
+}
+/**
+ * The seam between a person's saved marketing-consent DECISIONS (server-held, per account) and
+ * this browser's cookie-consent RECORD (`@owlmeans/consent`'s `consentStore`, per device) — for
+ * every definition whose `cookieCategory` names a `@owlmeans/consent` category
+ * (`trackers.analytics` -> `CONSENT_ANALYTICS`, `trackers.advertising` -> `CONSENT_MARKETING`).
+ *
+ * `consentStore.save` REPLACES the stored record wholesale — `store.ts`'s `save` calls
+ * `writeConsent(record, options)` with exactly what it is given, no merge of its own — so `write`
+ * always spreads the CURRENT record first and always re-asserts the essential category, before
+ * patching in only the categories THIS bridge owns.
+ */
+export declare const cookieConsentBridge: (opts?: MakeCookieConsentBridgeOptions) => MarketingConsentBridge;
+//# sourceMappingURL=bridge.d.ts.map

package/build/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,MAAM,WAAW,8BAA8B;IAC7C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,UAAW,8BAA8B,KAAG,sBA8D3E,CAAA"}

package/build/bridge.js

@@ -0,0 +1,69 @@
+import { CONSENT_ESSENTIAL, DEFAULT_CONSENT_CATEGORIES, consentStore } from '@owlmeans/consent';
+/**
+ * The seam between a person's saved marketing-consent DECISIONS (server-held, per account) and
+ * this browser's cookie-consent RECORD (`@owlmeans/consent`'s `consentStore`, per device) — for
+ * every definition whose `cookieCategory` names a `@owlmeans/consent` category
+ * (`trackers.analytics` -> `CONSENT_ANALYTICS`, `trackers.advertising` -> `CONSENT_MARKETING`).
+ *
+ * `consentStore.save` REPLACES the stored record wholesale — `store.ts`'s `save` calls
+ * `writeConsent(record, options)` with exactly what it is given, no merge of its own — so `write`
+ * always spreads the CURRENT record first and always re-asserts the essential category, before
+ * patching in only the categories THIS bridge owns.
+ */
+export const cookieConsentBridge = (opts) => {
+    const categories = opts?.storageOptions?.categories ?? DEFAULT_CONSENT_CATEGORIES;
+    const essentialKey = categories.find(category => category.required === true)?.key ?? CONSENT_ESSENTIAL;
+    // Re-entrancy guard: `write` calling `consentStore.save` publishes to every subscriber of the
+    // store, including the one `subscribe` below registers — without this, saving a marketing
+    // decision through this bridge would immediately hand the SAME change back to a caller that
+    // reacts to it by writing again (a naive two-way binding), looping the two writes forever.
+    let suppress = false;
+    return {
+        alias: 'cookie-consent',
+        read: defs => {
+            const record = consentStore.get().record;
+            if (record == null) {
+                return null;
+            }
+            const out = {};
+            for (const definition of defs) {
+                if (definition.cookieCategory != null) {
+                    out[definition.key] = record[definition.cookieCategory] === true;
+                }
+            }
+            return out;
+        },
+        write: (decisions, defs) => {
+            const current = consentStore.get().record ?? {};
+            const patch = {};
+            for (const definition of defs) {
+                if (definition.cookieCategory != null && decisions[definition.key] != null) {
+                    patch[definition.cookieCategory] = decisions[definition.key];
+                }
+            }
+            if (Object.keys(patch).length === 0) {
+                return;
+            }
+            suppress = true;
+            try {
+                consentStore.save({ ...current, [essentialKey]: true, ...patch });
+            }
+            finally {
+                suppress = false;
+            }
+        },
+        subscribe: (listener, defs) => consentStore.subscribe(state => {
+            if (suppress || state.record == null) {
+                return;
+            }
+            const out = {};
+            for (const definition of defs) {
+                if (definition.cookieCategory != null) {
+                    out[definition.key] = state.record[definition.cookieCategory] === true;
+                }
+            }
+            listener(out);
+        }),
+    };
+};
+//# sourceMappingURL=bridge.js.map

package/build/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAe/F;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAqC,EAA0B,EAAE;IACnG,MAAM,UAAU,GAAG,IAAI,EAAE,cAAc,EAAE,UAAU,IAAI,0BAA0B,CAAA;IACjF,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,iBAAiB,CAAA;IAEtG,8FAA8F;IAC9F,0FAA0F;IAC1F,4FAA4F;IAC5F,2FAA2F;IAC3F,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,OAAO;QACL,KAAK,EAAE,gBAAgB;QAEvB,IAAI,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAA;YACxC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,GAAG,GAA4B,EAAE,CAAA;YACvC,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;gBAC9B,IAAI,UAAU,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;oBACtC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;gBAClE,CAAC;YACH,CAAC;YAED,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,OAAO,GAAkB,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAA;YAC9D,MAAM,KAAK,GAA2B,EAAE,CAAA;YACxC,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;gBAC9B,IAAI,UAAU,CAAC,cAAc,IAAI,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC3E,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;gBAC9D,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAM;YACR,CAAC;YAED,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,CAAC;gBACH,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;YACnE,CAAC;oBAAS,CAAC;gBACT,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;QACH,CAAC;QAED,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YAC5D,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBACrC,OAAM;YACR,CAAC;YACD,MAAM,GAAG,GAA4B,EAAE,CAAA;YACvC,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;gBAC9B,IAAI,UAAU,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;oBACtC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,IAAI,CAAA;gBACxE,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CAAC;KACH,CAAA;AACH,CAAC,CAAA"}