@rovela-ai/sdk 0.3.17 → 0.3.20

package/dist/auth/server/customer-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-session.js","sourceRoot":"","sources":["../../../src/auth/server/customer-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAsBrD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,YAAY;IACnB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAC/C,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,UAAmB,CAAA;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,gBAAgB,CAAC,yBAAyB,EAAE,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAA;QAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,MAAM,WAAW,GAAI,UAEZ,EAAE,IAAI,CAAA;IAEf,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,kEAAkE;IAClE,oEAAoE;IACpE,sEAAsE;IACtE,+CAA+C;IAC/C,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAA;IAC7C,CAAC;IAED,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,QAA0B,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAA;QAChD,CAAC;QACD,QAAQ,GAAG;YACT,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;YACtB,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa;SACnC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAA;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAC/B,CAAC"}

package/dist/auth/server/index.d.ts

@@ -8,6 +8,8 @@ export { hashPassword, verifyPassword, validatePassword, MIN_PASSWORD_LENGTH, }
 export { sendVerificationEmail, sendPasswordResetEmail, sendWelcomeEmail, getStoreName, } from './email-sender';
 export { createCustomer, authenticateCustomer, findCustomerForSession, findCustomerByEmail, findCustomerById, updateCustomer, updateCustomerPassword, markEmailVerified, emailExists, } from './customer-service';
 export type { CreateCustomerResult, AuthenticateResult, AuthenticateError, } from './customer-service';
+export { requireCustomer } from './customer-session';
+export type { VerifiedCustomer, RequireCustomerResult } from './customer-session';
 export { createVerificationToken, verifyEmail, deleteVerificationTokens, resendVerificationEmail, isEmailVerified, cleanupExpiredTokens, } from './verification-service';
 export { requestPasswordReset, validateResetToken, resetPassword, deletePasswordResetTokens, cleanupExpiredResetTokens, } from './password-reset-service';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAGjF,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA"}

package/dist/auth/server/index.js

@@ -10,6 +10,8 @@ export { hashPassword, verifyPassword, validatePassword, MIN_PASSWORD_LENGTH, }
 export { sendVerificationEmail, sendPasswordResetEmail, sendWelcomeEmail, getStoreName, } from './email-sender';
 // Customer service
 export { createCustomer, authenticateCustomer, findCustomerForSession, findCustomerByEmail, findCustomerById, updateCustomer, updateCustomerPassword, markEmailVerified, emailExists, } from './customer-service';
+// Customer session guard (mirror of requireAdmin on the admin side)
+export { requireCustomer } from './customer-session';
 // Verification service
 export { createVerificationToken, verifyEmail, deleteVerificationTokens, resendVerificationEmail, isEmailVerified, cleanupExpiredTokens, } from './verification-service';
 // Password reset service

package/dist/auth/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qBAAqB;AACrB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAEnB,kBAAkB;AAClB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAA;AAEvB,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAO3B,uBAAuB;AACvB,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAE/B,yBAAyB;AACzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qBAAqB;AACrB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAA;AAEnB,kBAAkB;AAClB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,GACb,MAAM,gBAAgB,CAAA;AAEvB,mBAAmB;AACnB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAO3B,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAGpD,uBAAuB;AACvB,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAE/B,yBAAyB;AACzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA"}

package/dist/core/cookie-consent/CookieBanner.d.ts

@@ -0,0 +1,2 @@
+export declare function CookieBanner(): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=CookieBanner.d.ts.map

package/dist/core/cookie-consent/CookieBanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieBanner.d.ts","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookieBanner.tsx"],"names":[],"mappings":"AAkCA,wBAAgB,YAAY,mDAgG3B"}

package/dist/core/cookie-consent/CookieBanner.js

@@ -0,0 +1,207 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * @rovela/sdk/core/cookie-consent/CookieBanner (R021)
+ *
+ * EDPB-compliant cookie consent banner for the storefront. Two layers:
+ *
+ *   Layer 1 (first visit) — short intro + three equally-prominent
+ *     buttons: Accept all · Reject all · Customize.
+ *
+ *   Layer 2 (on Customize or via footer preferences link) — three
+ *     category toggles (Essential=locked-on, Analytics, Marketing) +
+ *     Save preferences.
+ *
+ * Compliance notes applied:
+ *   - No pre-ticked boxes (EDPB §2.7)
+ *   - Reject All same prominence as Accept All (EDPB §2.2)
+ *   - No "continued browsing = consent" (EDPB §3.3)
+ *   - Closing = refusal (×) — not silent acceptance
+ *   - `aria-live` for screen readers, explicit focus trap in layer 2
+ *
+ * Styling uses the storefront's own CSS tokens (hsl(var(--accent)),
+ * hsl(var(--foreground))) so the banner blends with the merchant's
+ * theme. Inline styles on critical layout bits so Tailwind purge or
+ * accidental CSS-reset strips can't erase the compliance UX.
+ */
+import * as React from 'react';
+import { useConsentContext } from './CookieConsentProvider';
+// =============================================================================
+// Component
+// =============================================================================
+export function CookieBanner() {
+    const { consent, hasDecided, bannerDisabled, preferencesOpen, update, closePreferences, } = useConsentContext();
+    // Local state for the customize layer's pending toggles (only
+    // committed to the provider when user clicks Save).
+    const [pendingAnalytics, setPendingAnalytics] = React.useState(false);
+    const [pendingMarketing, setPendingMarketing] = React.useState(false);
+    const [showLayer2, setShowLayer2] = React.useState(false);
+    // Reset pending toggles to current consent whenever the customize
+    // layer opens (from footer link or Layer 1's Customize button).
+    React.useEffect(() => {
+        if (preferencesOpen || showLayer2) {
+            setPendingAnalytics(consent.analytics);
+            setPendingMarketing(consent.marketing);
+        }
+    }, [preferencesOpen, showLayer2, consent.analytics, consent.marketing]);
+    // Render gates.
+    if (bannerDisabled)
+        return null;
+    const showLayer1 = !hasDecided && !showLayer2 && !preferencesOpen;
+    const showPreferences = showLayer2 || preferencesOpen;
+    if (!showLayer1 && !showPreferences)
+        return null;
+    const handleAcceptAll = () => {
+        update({ analytics: true, marketing: true });
+        setShowLayer2(false);
+        closePreferences();
+    };
+    const handleRejectAll = () => {
+        update({ analytics: false, marketing: false });
+        setShowLayer2(false);
+        closePreferences();
+    };
+    const handleSave = () => {
+        update({ analytics: pendingAnalytics, marketing: pendingMarketing });
+        setShowLayer2(false);
+        closePreferences();
+    };
+    const handleClose = () => {
+        // Closing = refusal (EDPB). Explicit user rejection.
+        handleRejectAll();
+    };
+    return (_jsxs("div", { role: "dialog", "aria-modal": "false", "aria-label": "Cookie consent", "aria-live": "polite", className: "rovela-cookie-banner", style: {
+            position: 'fixed',
+            bottom: '1rem',
+            left: '1rem',
+            zIndex: 2147483000,
+            // Anchor to bottom-left. `maxWidth` sizes the card; removing the
+            // matching `right` + `margin: '0 auto'` is what stops the browser
+            // from centering it via equal left/right insets.
+            maxWidth: `min(${showPreferences ? '28rem' : '26rem'}, calc(100vw - 2rem))`,
+            background: 'hsl(var(--card, 0 0% 100%))',
+            border: '1px solid hsl(var(--border, 220 13% 91%))',
+            borderRadius: '0.75rem',
+            boxShadow: '0 10px 25px -5px rgba(0,0,0,0.15), 0 8px 10px -6px rgba(0,0,0,0.08)',
+            padding: '1.25rem',
+            fontFamily: 'inherit',
+            color: 'hsl(var(--foreground, 224 71.4% 4.1%))',
+        }, children: [showLayer1 && _jsx(Layer1, { onAcceptAll: handleAcceptAll, onRejectAll: handleRejectAll, onCustomize: () => setShowLayer2(true), onClose: handleClose }), showPreferences && _jsx(Layer2, { analytics: pendingAnalytics, marketing: pendingMarketing, onAnalyticsChange: setPendingAnalytics, onMarketingChange: setPendingMarketing, onSave: handleSave, onAcceptAll: handleAcceptAll, onRejectAll: handleRejectAll, onClose: handleClose })] }));
+}
+// =============================================================================
+// Layer 1 — initial banner
+// =============================================================================
+function Layer1({ onAcceptAll, onRejectAll, onCustomize, onClose, }) {
+    return (_jsxs("div", { style: { position: 'relative' }, children: [_jsx("button", { type: "button", onClick: onClose, "aria-label": "Close and reject non-essential cookies", style: closeButtonStyle, children: "\u00D7" }), _jsx("h2", { style: titleStyle, children: "Cookie preferences" }), _jsxs("p", { style: bodyStyle, children: ["We use cookies to make this store work and, with your consent, to understand how it's used and show you relevant content. You can choose which categories to allow.", ' ', _jsx("a", { href: "/privacy#cookies", style: linkStyle, target: "_blank", rel: "noopener noreferrer", children: "Learn more" })] }), _jsxs("div", { style: {
+                    display: 'flex',
+                    flexWrap: 'wrap',
+                    gap: '0.5rem',
+                    marginTop: '1rem',
+                }, children: [_jsx("button", { type: "button", onClick: onAcceptAll, style: primaryButtonStyle, children: "Accept all" }), _jsx("button", { type: "button", onClick: onRejectAll, style: secondaryButtonStyle, children: "Reject all" }), _jsx("button", { type: "button", onClick: onCustomize, style: tertiaryButtonStyle, children: "Customize" })] })] }));
+}
+// =============================================================================
+// Layer 2 — category preferences
+// =============================================================================
+function Layer2({ analytics, marketing, onAnalyticsChange, onMarketingChange, onSave, onAcceptAll, onRejectAll, onClose, }) {
+    return (_jsxs("div", { style: { position: 'relative' }, children: [_jsx("button", { type: "button", onClick: onClose, "aria-label": "Close without saving", style: closeButtonStyle, children: "\u00D7" }), _jsx("h2", { style: titleStyle, children: "Cookie preferences" }), _jsx("p", { style: bodyStyle, children: "Choose which categories of cookies you allow." }), _jsxs("div", { style: { display: 'flex', flexDirection: 'column', gap: '0.75rem', marginTop: '0.75rem' }, children: [_jsx(CategoryRow, { title: "Essential", description: "Required for core features like cart and login. Always on.", checked: true, locked: true }), _jsx(CategoryRow, { title: "Analytics", description: "Help us understand how the store is used so we can improve it.", checked: analytics, onChange: onAnalyticsChange }), _jsx(CategoryRow, { title: "Marketing", description: "Used to measure ads and show you relevant content across sites.", checked: marketing, onChange: onMarketingChange })] }), _jsxs("div", { style: {
+                    display: 'flex',
+                    flexWrap: 'wrap',
+                    gap: '0.5rem',
+                    marginTop: '1rem',
+                    justifyContent: 'space-between',
+                }, children: [_jsxs("div", { style: { display: 'flex', gap: '0.5rem', flexWrap: 'wrap' }, children: [_jsx("button", { type: "button", onClick: onAcceptAll, style: tertiaryButtonStyle, children: "Accept all" }), _jsx("button", { type: "button", onClick: onRejectAll, style: tertiaryButtonStyle, children: "Reject all" })] }), _jsx("button", { type: "button", onClick: onSave, style: primaryButtonStyle, children: "Save preferences" })] })] }));
+}
+function CategoryRow({ title, description, checked, onChange, locked, }) {
+    return (_jsxs("div", { style: {
+            display: 'flex',
+            alignItems: 'flex-start',
+            justifyContent: 'space-between',
+            gap: '0.75rem',
+            padding: '0.75rem',
+            border: '1px solid hsl(var(--border, 220 13% 91%))',
+            borderRadius: '0.5rem',
+        }, children: [_jsxs("div", { style: { flex: 1, minWidth: 0 }, children: [_jsx("div", { style: { fontWeight: 600, fontSize: '0.875rem' }, children: title }), _jsx("p", { style: {
+                            margin: '0.125rem 0 0',
+                            fontSize: '0.8125rem',
+                            lineHeight: 1.45,
+                            color: 'hsl(var(--muted-foreground, 215 16% 47%))',
+                        }, children: description })] }), _jsx("label", { style: {
+                    display: 'inline-flex',
+                    alignItems: 'center',
+                    gap: '0.5rem',
+                    cursor: locked ? 'not-allowed' : 'pointer',
+                    opacity: locked ? 0.6 : 1,
+                }, children: _jsx("input", { type: "checkbox", checked: checked, disabled: locked, onChange: (e) => onChange?.(e.target.checked), "aria-label": `Allow ${title.toLowerCase()} cookies`, style: { width: '1rem', height: '1rem', accentColor: 'hsl(var(--accent, 142 71% 45%))' } }) })] }));
+}
+// =============================================================================
+// Inline styles — kept together so CSS-reset strips can't wreck them
+// =============================================================================
+const titleStyle = {
+    margin: 0,
+    fontSize: '1rem',
+    fontWeight: 600,
+    lineHeight: 1.3,
+};
+const bodyStyle = {
+    margin: '0.375rem 0 0',
+    fontSize: '0.875rem',
+    lineHeight: 1.5,
+    color: 'hsl(var(--muted-foreground, 215 16% 47%))',
+};
+const linkStyle = {
+    color: 'hsl(var(--accent, 142 71% 45%))',
+    textDecoration: 'underline',
+    textUnderlineOffset: '2px',
+};
+const primaryButtonStyle = {
+    flex: '1 1 auto',
+    padding: '0.5rem 1rem',
+    fontSize: '0.875rem',
+    fontWeight: 500,
+    color: 'hsl(var(--accent-foreground, 0 0% 100%))',
+    background: 'hsl(var(--accent, 142 71% 45%))',
+    border: 'none',
+    borderRadius: '0.5rem',
+    cursor: 'pointer',
+};
+const secondaryButtonStyle = {
+    flex: '1 1 auto',
+    padding: '0.5rem 1rem',
+    fontSize: '0.875rem',
+    fontWeight: 500,
+    color: 'hsl(var(--foreground, 224 71.4% 4.1%))',
+    background: 'hsl(var(--muted, 220 14% 96%))',
+    border: '1px solid hsl(var(--border, 220 13% 91%))',
+    borderRadius: '0.5rem',
+    cursor: 'pointer',
+};
+const tertiaryButtonStyle = {
+    flex: '0 1 auto',
+    padding: '0.5rem 1rem',
+    fontSize: '0.875rem',
+    fontWeight: 500,
+    color: 'hsl(var(--foreground, 224 71.4% 4.1%))',
+    background: 'transparent',
+    border: '1px solid hsl(var(--border, 220 13% 91%))',
+    borderRadius: '0.5rem',
+    cursor: 'pointer',
+};
+const closeButtonStyle = {
+    position: 'absolute',
+    top: '-0.25rem',
+    right: '-0.25rem',
+    width: '1.5rem',
+    height: '1.5rem',
+    display: 'flex',
+    alignItems: 'center',
+    justifyContent: 'center',
+    padding: 0,
+    fontSize: '1.125rem',
+    lineHeight: 1,
+    color: 'hsl(var(--muted-foreground, 215 16% 47%))',
+    background: 'transparent',
+    border: 'none',
+    borderRadius: '0.25rem',
+    cursor: 'pointer',
+};
+//# sourceMappingURL=CookieBanner.js.map

package/dist/core/cookie-consent/CookieBanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieBanner.js","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookieBanner.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAE3D,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,UAAU,YAAY;IAC1B,MAAM,EACJ,OAAO,EACP,UAAU,EACV,cAAc,EACd,eAAe,EACf,MAAM,EACN,gBAAgB,GACjB,GAAG,iBAAiB,EAAE,CAAA;IAEvB,8DAA8D;IAC9D,oDAAoD;IACpD,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrE,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEzD,kEAAkE;IAClE,gEAAgE;IAChE,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;YAClC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACtC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACxC,CAAC;IACH,CAAC,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;IAEvE,gBAAgB;IAChB,IAAI,cAAc;QAAE,OAAO,IAAI,CAAA;IAE/B,MAAM,UAAU,GAAG,CAAC,UAAU,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAA;IACjE,MAAM,eAAe,GAAG,UAAU,IAAI,eAAe,CAAA;IAErD,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAA;IAEhD,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,gBAAgB,EAAE,CAAA;IACpB,CAAC,CAAA;IACD,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9C,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,gBAAgB,EAAE,CAAA;IACpB,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACpE,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,gBAAgB,EAAE,CAAA;IACpB,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,qDAAqD;QACrD,eAAe,EAAE,CAAA;IACnB,CAAC,CAAA;IAED,OAAO,CACL,eACE,IAAI,EAAC,QAAQ,gBACF,OAAO,gBACP,gBAAgB,eACjB,QAAQ,EAClB,SAAS,EAAC,sBAAsB,EAChC,KAAK,EAAE;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,iEAAiE;YACjE,kEAAkE;YAClE,iDAAiD;YACjD,QAAQ,EAAE,OAAO,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,uBAAuB;YAC3E,UAAU,EAAE,6BAA6B;YACzC,MAAM,EAAE,2CAA2C;YACnD,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,qEAAqE;YAChF,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,wCAAwC;SAChD,aAEA,UAAU,IAAI,KAAC,MAAM,IACpB,WAAW,EAAE,eAAe,EAC5B,WAAW,EAAE,eAAe,EAC5B,WAAW,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EACtC,OAAO,EAAE,WAAW,GACpB,EACD,eAAe,IAAI,KAAC,MAAM,IACzB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,iBAAiB,EAAE,mBAAmB,EACtC,iBAAiB,EAAE,mBAAmB,EACtC,MAAM,EAAE,UAAU,EAClB,WAAW,EAAE,eAAe,EAC5B,WAAW,EAAE,eAAe,EAC5B,OAAO,EAAE,WAAW,GACpB,IACE,CACP,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF,SAAS,MAAM,CAAC,EACd,WAAW,EACX,WAAW,EACX,WAAW,EACX,OAAO,GAMR;IACC,OAAO,CACL,eAAK,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,aAClC,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,OAAO,gBACL,wCAAwC,EACnD,KAAK,EAAE,gBAAgB,uBAGhB,EACT,aAAI,KAAK,EAAE,UAAU,mCAAyB,EAC9C,aAAG,KAAK,EAAE,SAAS,oLAGqB,GAAG,EACzC,YACE,IAAI,EAAC,kBAAkB,EACvB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,2BAGvB,IACF,EACJ,eACE,KAAK,EAAE;oBACL,OAAO,EAAE,MAAM;oBACf,QAAQ,EAAE,MAAM;oBAChB,GAAG,EAAE,QAAQ;oBACb,SAAS,EAAE,MAAM;iBAClB,aAED,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,2BAE5D,EACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,oBAAoB,2BAE9D,EACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,0BAE7D,IACL,IACF,CACP,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF,SAAS,MAAM,CAAC,EACd,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,EACN,WAAW,EACX,WAAW,EACX,OAAO,GAUR;IACC,OAAO,CACL,eAAK,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,aAClC,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,OAAO,gBACL,sBAAsB,EACjC,KAAK,EAAE,gBAAgB,uBAGhB,EACT,aAAI,KAAK,EAAE,UAAU,mCAAyB,EAC9C,YAAG,KAAK,EAAE,SAAS,8DAAmD,EACtE,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAC5F,KAAC,WAAW,IACV,KAAK,EAAC,WAAW,EACjB,WAAW,EAAC,4DAA4D,EACxE,OAAO,QACP,MAAM,SACN,EACF,KAAC,WAAW,IACV,KAAK,EAAC,WAAW,EACjB,WAAW,EAAC,gEAAgE,EAC5E,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,iBAAiB,GAC3B,EACF,KAAC,WAAW,IACV,KAAK,EAAC,WAAW,EACjB,WAAW,EAAC,iEAAiE,EAC7E,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,iBAAiB,GAC3B,IACE,EACN,eACE,KAAK,EAAE;oBACL,OAAO,EAAE,MAAM;oBACf,QAAQ,EAAE,MAAM;oBAChB,GAAG,EAAE,QAAQ;oBACb,SAAS,EAAE,MAAM;oBACjB,cAAc,EAAE,eAAe;iBAChC,aAED,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAC9D,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,2BAE7D,EACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,2BAE7D,IACL,EACN,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,iCAEvD,IACL,IACF,CACP,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,WAAW,EACX,OAAO,EACP,QAAQ,EACR,MAAM,GAOP;IACC,OAAO,CACL,eACE,KAAK,EAAE;YACL,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,YAAY;YACxB,cAAc,EAAE,eAAe;YAC/B,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,2CAA2C;YACnD,YAAY,EAAE,QAAQ;SACvB,aAED,eAAK,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAClC,cAAK,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAG,KAAK,GAAO,EACpE,YACE,KAAK,EAAE;4BACL,MAAM,EAAE,cAAc;4BACtB,QAAQ,EAAE,WAAW;4BACrB,UAAU,EAAE,IAAI;4BAChB,KAAK,EAAE,2CAA2C;yBACnD,YAEA,WAAW,GACV,IACA,EACN,gBACE,KAAK,EAAE;oBACL,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,QAAQ;oBACpB,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;oBAC1C,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBAC1B,YAED,gBACE,IAAI,EAAC,UAAU,EACf,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,gBACjC,SAAS,KAAK,CAAC,WAAW,EAAE,UAAU,EAClD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,iCAAiC,EAAE,GACxF,GACI,IACJ,CACP,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF,MAAM,UAAU,GAAwB;IACtC,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,GAAG;CAChB,CAAA;AAED,MAAM,SAAS,GAAwB;IACrC,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,2CAA2C;CACnD,CAAA;AAED,MAAM,SAAS,GAAwB;IACrC,KAAK,EAAE,iCAAiC;IACxC,cAAc,EAAE,WAAW;IAC3B,mBAAmB,EAAE,KAAK;CAC3B,CAAA;AAED,MAAM,kBAAkB,GAAwB;IAC9C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,0CAA0C;IACjD,UAAU,EAAE,iCAAiC;IAC7C,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,SAAS;CAClB,CAAA;AAED,MAAM,oBAAoB,GAAwB;IAChD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,wCAAwC;IAC/C,UAAU,EAAE,gCAAgC;IAC5C,MAAM,EAAE,2CAA2C;IACnD,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,SAAS;CAClB,CAAA;AAED,MAAM,mBAAmB,GAAwB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,GAAG;IACf,KAAK,EAAE,wCAAwC;IAC/C,UAAU,EAAE,aAAa;IACzB,MAAM,EAAE,2CAA2C;IACnD,YAAY,EAAE,QAAQ;IACtB,MAAM,EAAE,SAAS;CAClB,CAAA;AAED,MAAM,gBAAgB,GAAwB;IAC5C,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,2CAA2C;IAClD,UAAU,EAAE,aAAa;IACzB,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,SAAS;IACvB,MAAM,EAAE,SAAS;CAClB,CAAA"}

package/dist/core/cookie-consent/CookieConsentProvider.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @rovela/sdk/core/cookie-consent/CookieConsentProvider (R021)
+ *
+ * Stores + shares cookie-consent state across the storefront. Drives the
+ * `<CookieBanner>` component and the `useCookieConsent()` hook.
+ *
+ * Design notes:
+ *   - Persistence is localStorage-only. EDPB "consent record" expectation
+ *     is satisfied for SMB scale; server-side logging is an enterprise
+ *     feature and out of scope.
+ *   - Re-prompts after 12 months (industry-converged interpretation of
+ *     the EDPB Task Force dark-pattern analysis) or when `VERSION` bumps.
+ *   - When the store admin disables the banner entirely (master toggle
+ *     off), the provider short-circuits and grants all categories so
+ *     consumer scripts don't stall. This matches the merchant's stated
+ *     intent — if they've disabled the banner, they've accepted the risk
+ *     and want scripts to run unconditionally.
+ */
+import * as React from 'react';
+import type { ConsentCategories, ConsentRecord } from './types';
+interface CookieConsentContextValue {
+    /** The current consent record. `decidedAt === null` means the user
+     *  has not yet chosen. */
+    consent: ConsentRecord;
+    /** True once the user has made an explicit choice in-window. Scripts
+     *  should gate on `consent.analytics` / `consent.marketing` instead of
+     *  this — this is mostly for the banner's own render logic. */
+    hasDecided: boolean;
+    /** True when the master toggle is off (admin disabled banner). Scripts
+     *  treat this as implicit-grant; the banner never renders. */
+    bannerDisabled: boolean;
+    /** Set full consent (essentials always on). Used by banner's Accept /
+     *  Reject / Save actions. */
+    update: (categories: Partial<ConsentCategories>) => void;
+    /** Open the preferences layer of the banner. Triggered by the footer
+     *  "Cookie preferences" link. */
+    openPreferences: () => void;
+    /** Whether the preferences layer should currently be shown. The
+     *  banner reads this; external code just calls `openPreferences`. */
+    preferencesOpen: boolean;
+    /** Banner uses this to close its own preferences layer after Save. */
+    closePreferences: () => void;
+}
+export interface CookieConsentProviderProps {
+    /** Master toggle from store_settings.cookie_banner_enabled. When
+     *  `false`, the banner never renders and scripts get implicit grant. */
+    enabled: boolean;
+    children: React.ReactNode;
+}
+export declare function CookieConsentProvider({ enabled, children, }: CookieConsentProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare function useConsentContext(): CookieConsentContextValue;
+export {};
+//# sourceMappingURL=CookieConsentProvider.d.ts.map

package/dist/core/cookie-consent/CookieConsentProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieConsentProvider.d.ts","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookieConsentProvider.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAsB/D,UAAU,yBAAyB;IACjC;8BAC0B;IAC1B,OAAO,EAAE,aAAa,CAAA;IACtB;;mEAE+D;IAC/D,UAAU,EAAE,OAAO,CAAA;IACnB;kEAC8D;IAC9D,cAAc,EAAE,OAAO,CAAA;IACvB;iCAC6B;IAC7B,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAA;IACxD;qCACiC;IACjC,eAAe,EAAE,MAAM,IAAI,CAAA;IAC3B;yEACqE;IACrE,eAAe,EAAE,OAAO,CAAA;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,IAAI,CAAA;CAC7B;AA6ED,MAAM,WAAW,0BAA0B;IACzC;4EACwE;IACxE,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED,wBAAgB,qBAAqB,CAAC,EACpC,OAAO,EACP,QAAQ,GACT,EAAE,0BAA0B,2CAgE5B;AAMD,wBAAgB,iBAAiB,IAAI,yBAAyB,CAQ7D"}

package/dist/core/cookie-consent/CookieConsentProvider.js

@@ -0,0 +1,162 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * @rovela/sdk/core/cookie-consent/CookieConsentProvider (R021)
+ *
+ * Stores + shares cookie-consent state across the storefront. Drives the
+ * `<CookieBanner>` component and the `useCookieConsent()` hook.
+ *
+ * Design notes:
+ *   - Persistence is localStorage-only. EDPB "consent record" expectation
+ *     is satisfied for SMB scale; server-side logging is an enterprise
+ *     feature and out of scope.
+ *   - Re-prompts after 12 months (industry-converged interpretation of
+ *     the EDPB Task Force dark-pattern analysis) or when `VERSION` bumps.
+ *   - When the store admin disables the banner entirely (master toggle
+ *     off), the provider short-circuits and grants all categories so
+ *     consumer scripts don't stall. This matches the merchant's stated
+ *     intent — if they've disabled the banner, they've accepted the risk
+ *     and want scripts to run unconditionally.
+ */
+import * as React from 'react';
+// =============================================================================
+// Constants
+// =============================================================================
+/** localStorage key for the stored consent record. */
+const STORAGE_KEY = 'rovela-cookie-consent';
+/** Schema version — bump when adding a category or changing what an
+ *  existing category covers; existing stored consent gets invalidated
+ *  and the user is re-prompted. */
+const VERSION = 1;
+/** Re-prompt after this many days. 365 matches the DPA industry-
+ *  converged window (12 months). */
+const REPROMPT_AFTER_DAYS = 365;
+const CookieConsentContext = React.createContext(null);
+// =============================================================================
+// Defaults
+// =============================================================================
+function defaultConsent() {
+    return {
+        essential: true,
+        analytics: false,
+        marketing: false,
+        decidedAt: null,
+        version: VERSION,
+    };
+}
+function fullGrant() {
+    return {
+        essential: true,
+        analytics: true,
+        marketing: true,
+        decidedAt: new Date().toISOString(),
+        version: VERSION,
+    };
+}
+// =============================================================================
+// Persistence helpers
+// =============================================================================
+function readStoredConsent() {
+    if (typeof window === 'undefined')
+        return null;
+    try {
+        const raw = window.localStorage.getItem(STORAGE_KEY);
+        if (!raw)
+            return null;
+        const parsed = JSON.parse(raw);
+        // Version bump invalidates old consent.
+        if (parsed.version !== VERSION)
+            return null;
+        // Decision expired (>12 months) → re-prompt.
+        if (parsed.decidedAt) {
+            const ageDays = (Date.now() - new Date(parsed.decidedAt).getTime()) /
+                (1000 * 60 * 60 * 24);
+            if (ageDays > REPROMPT_AFTER_DAYS)
+                return null;
+        }
+        return {
+            essential: true,
+            analytics: !!parsed.analytics,
+            marketing: !!parsed.marketing,
+            decidedAt: parsed.decidedAt ?? null,
+            version: VERSION,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function writeStoredConsent(record) {
+    if (typeof window === 'undefined')
+        return;
+    try {
+        window.localStorage.setItem(STORAGE_KEY, JSON.stringify(record));
+    }
+    catch {
+        // Private-mode localStorage throws. Ignore — in-memory state is fine
+        // for the session; user re-prompts next visit.
+    }
+}
+export function CookieConsentProvider({ enabled, children, }) {
+    // SSR-safe initial state — provider always starts with "not decided";
+    // the post-mount effect reads localStorage and updates. Means we don't
+    // hydration-mismatch between server and client.
+    const [consent, setConsent] = React.useState(defaultConsent);
+    const [hydrated, setHydrated] = React.useState(false);
+    const [preferencesOpen, setPreferencesOpen] = React.useState(false);
+    // On mount, read the stored decision (if any within re-prompt window).
+    React.useEffect(() => {
+        if (!enabled) {
+            // Admin disabled the banner — grant everything so analytics/
+            // marketing scripts can run. This is the merchant's call.
+            setConsent(fullGrant());
+            setHydrated(true);
+            return;
+        }
+        const stored = readStoredConsent();
+        if (stored)
+            setConsent(stored);
+        setHydrated(true);
+    }, [enabled]);
+    const update = React.useCallback((categories) => {
+        const next = {
+            essential: true,
+            analytics: categories.analytics ?? false,
+            marketing: categories.marketing ?? false,
+            decidedAt: new Date().toISOString(),
+            version: VERSION,
+        };
+        setConsent(next);
+        writeStoredConsent(next);
+    }, []);
+    const openPreferences = React.useCallback(() => {
+        setPreferencesOpen(true);
+    }, []);
+    const closePreferences = React.useCallback(() => {
+        setPreferencesOpen(false);
+    }, []);
+    const value = React.useMemo(() => ({
+        consent,
+        hasDecided: consent.decidedAt !== null,
+        bannerDisabled: !enabled,
+        update,
+        openPreferences,
+        preferencesOpen,
+        closePreferences,
+    }), [consent, enabled, update, openPreferences, preferencesOpen, closePreferences]);
+    // Don't flash children with stale SSR state → the first client render
+    // is default (not-decided) which is safe: no scripts gate on it yet.
+    void hydrated;
+    return (_jsx(CookieConsentContext.Provider, { value: value, children: children }));
+}
+// =============================================================================
+// Internal hook
+// =============================================================================
+export function useConsentContext() {
+    const ctx = React.useContext(CookieConsentContext);
+    if (!ctx) {
+        throw new Error('useCookieConsent must be used within <CookieConsentProvider>');
+    }
+    return ctx;
+}
+//# sourceMappingURL=CookieConsentProvider.js.map

package/dist/core/cookie-consent/CookieConsentProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookieConsentProvider.js","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookieConsentProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAG9B,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,sDAAsD;AACtD,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C;;mCAEmC;AACnC,MAAM,OAAO,GAAG,CAAC,CAAA;AAEjB;oCACoC;AACpC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AA8B/B,MAAM,oBAAoB,GACxB,KAAK,CAAC,aAAa,CAAmC,IAAI,CAAC,CAAA;AAE7D,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,SAAS,cAAc;IACrB,OAAO;QACL,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,OAAO;KACjB,CAAA;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO;QACL,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,OAAO;KACjB,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,SAAS,iBAAiB;IACxB,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAA;QAExD,wCAAwC;QACxC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QAE3C,6CAA6C;QAC7C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,OAAO,GACX,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnD,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;YACvB,IAAI,OAAO,GAAG,mBAAmB;gBAAE,OAAO,IAAI,CAAA;QAChD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;YAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,OAAO,EAAE,OAAO;SACjB,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAqB;IAC/C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAM;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,+CAA+C;IACjD,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,qBAAqB,CAAC,EACpC,OAAO,EACP,QAAQ,GACmB;IAC3B,sEAAsE;IACtE,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAgB,cAAc,CAAC,CAAA;IAC3E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrD,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEnE,uEAAuE;IACvE,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACnB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,6DAA6D;YAC7D,0DAA0D;YAC1D,UAAU,CAAC,SAAS,EAAE,CAAC,CAAA;YACvB,WAAW,CAAC,IAAI,CAAC,CAAA;YACjB,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;QAClC,IAAI,MAAM;YAAE,UAAU,CAAC,MAAM,CAAC,CAAA;QAC9B,WAAW,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAEb,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,UAAsC,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAkB;YAC1B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,KAAK;YACxC,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,KAAK;YACxC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,OAAO;SACjB,CAAA;QACD,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7C,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QAC9C,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,KAAK,GAA8B,KAAK,CAAC,OAAO,CACpD,GAAG,EAAE,CAAC,CAAC;QACL,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI;QACtC,cAAc,EAAE,CAAC,OAAO;QACxB,MAAM;QACN,eAAe;QACf,eAAe;QACf,gBAAgB;KACjB,CAAC,EACF,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAC/E,CAAA;IAED,sEAAsE;IACtE,qEAAqE;IACrE,KAAK,QAAQ,CAAA;IAEb,OAAO,CACL,KAAC,oBAAoB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YACxC,QAAQ,GACqB,CACjC,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAA;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/core/cookie-consent/CookiePreferencesLink.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @rovela/sdk/core/cookie-consent/CookiePreferencesLink (R021)
+ *
+ * Persistent "Cookie preferences" link/button for the storefront footer.
+ * Clicking it re-opens the banner's customize layer so users can change
+ * their decision at any time — fulfills the GDPR Art. 7(3) "withdrawal
+ * as easy as consent" requirement.
+ *
+ * Accepts any standard button attributes so the merchant's storefront
+ * can style it to match the footer (or use the default unstyled look).
+ */
+import * as React from 'react';
+export type CookiePreferencesLinkProps = Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, 'onClick' | 'type'>;
+export declare function CookiePreferencesLink({ children, ...props }: CookiePreferencesLinkProps): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=CookiePreferencesLink.d.ts.map

package/dist/core/cookie-consent/CookiePreferencesLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookiePreferencesLink.d.ts","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookiePreferencesLink.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAG9B,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,EAC7C,SAAS,GAAG,MAAM,CACnB,CAAA;AAED,wBAAgB,qBAAqB,CAAC,EACpC,QAA+B,EAC/B,GAAG,KAAK,EACT,EAAE,0BAA0B,kDAY5B"}

package/dist/core/cookie-consent/CookiePreferencesLink.js

@@ -0,0 +1,12 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useConsentContext } from './CookieConsentProvider';
+export function CookiePreferencesLink({ children = 'Cookie preferences', ...props }) {
+    const { openPreferences, bannerDisabled } = useConsentContext();
+    // If the merchant has disabled the banner entirely, there are no
+    // preferences to manage — don't render the link at all.
+    if (bannerDisabled)
+        return null;
+    return (_jsx("button", { type: "button", onClick: openPreferences, ...props, children: children }));
+}
+//# sourceMappingURL=CookiePreferencesLink.js.map

package/dist/core/cookie-consent/CookiePreferencesLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CookiePreferencesLink.js","sourceRoot":"","sources":["../../../src/core/cookie-consent/CookiePreferencesLink.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAeZ,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAO3D,MAAM,UAAU,qBAAqB,CAAC,EACpC,QAAQ,GAAG,oBAAoB,EAC/B,GAAG,KAAK,EACmB;IAC3B,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAA;IAE/D,iEAAiE;IACjE,wDAAwD;IACxD,IAAI,cAAc;QAAE,OAAO,IAAI,CAAA;IAE/B,OAAO,CACL,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,eAAe,KAAM,KAAK,YACtD,QAAQ,GACF,CACV,CAAA;AACH,CAAC"}

package/dist/core/cookie-consent/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @rovela/sdk/core/cookie-consent
+ *
+ * EDPB-compliant cookie consent primitives for Rovela storefronts
+ * (R021). Public surface:
+ *
+ *   - `<CookieConsentProvider>` — wraps the storefront in `app/layout`.
+ *   - `<CookieBanner />` — the layered consent UI.
+ *   - `<CookiePreferencesLink />` — footer link to re-open preferences.
+ *   - `useCookieConsent()` — hook for gating scripts on category grant.
+ */
+export { CookieConsentProvider, type CookieConsentProviderProps, } from './CookieConsentProvider';
+export { CookieBanner } from './CookieBanner';
+export { CookiePreferencesLink, type CookiePreferencesLinkProps, } from './CookiePreferencesLink';
+export { useCookieConsent, type UseCookieConsentReturn } from './useCookieConsent';
+export type { ConsentCategories, ConsentRecord, CategoryKey } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/cookie-consent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/cookie-consent/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,GAChC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,GAChC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAClF,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA"}

package/dist/core/cookie-consent/index.js

@@ -0,0 +1,16 @@
+/**
+ * @rovela/sdk/core/cookie-consent
+ *
+ * EDPB-compliant cookie consent primitives for Rovela storefronts
+ * (R021). Public surface:
+ *
+ *   - `<CookieConsentProvider>` — wraps the storefront in `app/layout`.
+ *   - `<CookieBanner />` — the layered consent UI.
+ *   - `<CookiePreferencesLink />` — footer link to re-open preferences.
+ *   - `useCookieConsent()` — hook for gating scripts on category grant.
+ */
+export { CookieConsentProvider, } from './CookieConsentProvider';
+export { CookieBanner } from './CookieBanner';
+export { CookiePreferencesLink, } from './CookiePreferencesLink';
+export { useCookieConsent } from './useCookieConsent';
+//# sourceMappingURL=index.js.map

package/dist/core/cookie-consent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/cookie-consent/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EACL,qBAAqB,GAEtB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAA+B,MAAM,oBAAoB,CAAA"}

package/dist/core/cookie-consent/types.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Cookie consent types (R021).
+ *
+ * Shared shape between provider, banner, hook. Keep lean — the minimum
+ * viable EDPB-compliant categorization is Essential / Analytics /
+ * Marketing. We do NOT ship per-vendor granularity; categories are the
+ * contract any storefront script follows via `useCookieConsent()`.
+ */
+export interface ConsentCategories {
+    /** Strictly necessary (cart, session, login). Always on, never
+     *  user-toggleable. The field exists for symmetry in checks like
+     *  `consent.essential` — every script can assume true. */
+    essential: true;
+    /** Analytics scripts (GA4, Matomo, etc.). Defaults to `false` until
+     *  the user opts in. */
+    analytics: boolean;
+    /** Marketing / ad-tech scripts (Meta Pixel, Google Ads, TikTok, etc.).
+     *  Defaults to `false` until the user opts in. */
+    marketing: boolean;
+}
+export interface ConsentRecord extends ConsentCategories {
+    /** ISO timestamp when the decision was last made. `null` before the
+     *  user has interacted with the banner. */
+    decidedAt: string | null;
+    /** Schema version of the categories list. Bumping this invalidates
+     *  stored consent and re-prompts the user — use when adding a new
+     *  category or materially changing what an existing category covers. */
+    version: number;
+}
+export type CategoryKey = 'analytics' | 'marketing';
+//# sourceMappingURL=types.d.ts.map

package/dist/core/cookie-consent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/cookie-consent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,iBAAiB;IAChC;;8DAE0D;IAC1D,SAAS,EAAE,IAAI,CAAA;IACf;4BACwB;IACxB,SAAS,EAAE,OAAO,CAAA;IAClB;sDACkD;IAClD,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD;+CAC2C;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;4EAEwE;IACxE,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,WAAW,CAAA"}

package/dist/core/cookie-consent/types.js

@@ -0,0 +1,10 @@
+/**
+ * Cookie consent types (R021).
+ *
+ * Shared shape between provider, banner, hook. Keep lean — the minimum
+ * viable EDPB-compliant categorization is Essential / Analytics /
+ * Marketing. We do NOT ship per-vendor granularity; categories are the
+ * contract any storefront script follows via `useCookieConsent()`.
+ */
+export {};
+//# sourceMappingURL=types.js.map