@tantainnovative/ndpr-toolkit 5.5.1 → 5.7.0

package/dist/headless.js

@@ -1,2 +1,2 @@
 "use client";
-'use strict';require('./chunk-OVW5ASY3.js');var chunkT32YQT4Y_js=require('./chunk-T32YQT4Y.js'),chunkEHQVTFYO_js=require('./chunk-EHQVTFYO.js'),chunkRC3XFXTJ_js=require('./chunk-RC3XFXTJ.js'),chunkQHW4UKGJ_js=require('./chunk-QHW4UKGJ.js'),chunkIRRUYR6M_js=require('./chunk-IRRUYR6M.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunkTLIHFGIJ_js=require('./chunk-TLIHFGIJ.js');require('./chunk-JS7SYL5P.js'),require('./chunk-VFRGCBJY.js'),require('./chunk-7TTXS7JX.js'),require('./chunk-3YTAOT5O.js'),require('./chunk-Y346CURW.js'),require('./chunk-D2ZKDQVL.js'),require('./chunk-6LJHLE6G.js'),require('./chunk-YFBDJ4FH.js'),require('./chunk-WZYCBW2R.js'),require('./chunk-4CVBQC66.js');var chunkQKXGVT2Q_js=require('./chunk-QKXGVT2Q.js'),chunkL2VO3MEJ_js=require('./chunk-L2VO3MEJ.js');require('./chunk-C2KEXHRX.js'),require('./chunk-DKLJ5DYN.js');var chunkTVA6D6S4_js=require('./chunk-TVA6D6S4.js');require('./chunk-R2ZZMATR.js');var chunkJLQT3W3E_js=require('./chunk-JLQT3W3E.js');require('./chunk-TQZWJGJ2.js'),require('./chunk-ZVOIR4QH.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"useBreachNotificationAssessment",{enumerable:true,get:function(){return chunkT32YQT4Y_js.a}});Object.defineProperty(exports,"useComplianceAuditReturn",{enumerable:true,get:function(){return chunkT32YQT4Y_js.d}});Object.defineProperty(exports,"useComplianceScore",{enumerable:true,get:function(){return chunkT32YQT4Y_js.b}});Object.defineProperty(exports,"useDCPMI",{enumerable:true,get:function(){return chunkT32YQT4Y_js.c}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkEHQVTFYO_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.a}});Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkQHW4UKGJ_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunkIRRUYR6M_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunkTLIHFGIJ_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunkQKXGVT2Q_js.a}});Object.defineProperty(exports,"useFocusTrap",{enumerable:true,get:function(){return chunkL2VO3MEJ_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkTVA6D6S4_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkJLQT3W3E_js.a}});
+'use strict';require('./chunk-VKDW2IHV.js');var chunkT32YQT4Y_js=require('./chunk-T32YQT4Y.js'),chunkEHQVTFYO_js=require('./chunk-EHQVTFYO.js'),chunkRC3XFXTJ_js=require('./chunk-RC3XFXTJ.js'),chunkQHW4UKGJ_js=require('./chunk-QHW4UKGJ.js'),chunkIRRUYR6M_js=require('./chunk-IRRUYR6M.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunkTLIHFGIJ_js=require('./chunk-TLIHFGIJ.js');require('./chunk-JS7SYL5P.js'),require('./chunk-VFRGCBJY.js'),require('./chunk-7TTXS7JX.js'),require('./chunk-3YTAOT5O.js'),require('./chunk-Y346CURW.js'),require('./chunk-D2ZKDQVL.js'),require('./chunk-6LJHLE6G.js'),require('./chunk-YFBDJ4FH.js'),require('./chunk-WZYCBW2R.js'),require('./chunk-4CVBQC66.js');var chunkQKXGVT2Q_js=require('./chunk-QKXGVT2Q.js'),chunkYMKN3YQL_js=require('./chunk-YMKN3YQL.js');require('./chunk-C2KEXHRX.js'),require('./chunk-DKLJ5DYN.js'),require('./chunk-PEUAA5EC.js');var chunkTVA6D6S4_js=require('./chunk-TVA6D6S4.js');require('./chunk-R2ZZMATR.js');var chunkJLQT3W3E_js=require('./chunk-JLQT3W3E.js');require('./chunk-TQZWJGJ2.js'),require('./chunk-ZVOIR4QH.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"useBreachNotificationAssessment",{enumerable:true,get:function(){return chunkT32YQT4Y_js.a}});Object.defineProperty(exports,"useComplianceAuditReturn",{enumerable:true,get:function(){return chunkT32YQT4Y_js.d}});Object.defineProperty(exports,"useComplianceScore",{enumerable:true,get:function(){return chunkT32YQT4Y_js.b}});Object.defineProperty(exports,"useDCPMI",{enumerable:true,get:function(){return chunkT32YQT4Y_js.c}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkEHQVTFYO_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.a}});Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkQHW4UKGJ_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunkIRRUYR6M_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunkTLIHFGIJ_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunkQKXGVT2Q_js.a}});Object.defineProperty(exports,"useCookieScan",{enumerable:true,get:function(){return chunkYMKN3YQL_js.b}});Object.defineProperty(exports,"useFocusTrap",{enumerable:true,get:function(){return chunkYMKN3YQL_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkTVA6D6S4_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkJLQT3W3E_js.a}});

package/dist/headless.mjs

@@ -1,2 +1,2 @@
 "use client";
-import'./chunk-YQTZWPOS.mjs';export{a as useBreachNotificationAssessment,d as useComplianceAuditReturn,b as useComplianceScore,c as useDCPMI}from'./chunk-C5UYAOYX.mjs';export{a as useBreach}from'./chunk-RFXGD5NE.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-UVXS7KRV.mjs';export{a as useAdaptivePolicyWizard}from'./chunk-KE2FZH2V.mjs';export{a as useLawfulBasis}from'./chunk-B6BRD5SL.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as useROPA}from'./chunk-FRMVSG4N.mjs';import'./chunk-IVSNHT24.mjs';import'./chunk-MGXWQW5I.mjs';import'./chunk-6A7M4CGJ.mjs';import'./chunk-WTGKZX7J.mjs';import'./chunk-WJSUVPYX.mjs';import'./chunk-NBQQ2GN3.mjs';import'./chunk-BIJSMSUU.mjs';import'./chunk-7BJXI2HI.mjs';import'./chunk-LWIKDDSU.mjs';import'./chunk-XP5PL6K7.mjs';export{a as useConsent}from'./chunk-PQ5IPUJN.mjs';export{a as useFocusTrap}from'./chunk-YTU4FNM2.mjs';import'./chunk-XC3DLYEG.mjs';import'./chunk-R3ZKV2J7.mjs';export{a as useDSR}from'./chunk-ZSRO4L3C.mjs';import'./chunk-RRVML7CU.mjs';export{a as useDPIA}from'./chunk-I3V3ITN7.mjs';import'./chunk-LRRENTT5.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';
+import'./chunk-23CULZBM.mjs';export{a as useBreachNotificationAssessment,d as useComplianceAuditReturn,b as useComplianceScore,c as useDCPMI}from'./chunk-C5UYAOYX.mjs';export{a as useBreach}from'./chunk-RFXGD5NE.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-UVXS7KRV.mjs';export{a as useAdaptivePolicyWizard}from'./chunk-KE2FZH2V.mjs';export{a as useLawfulBasis}from'./chunk-B6BRD5SL.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as useROPA}from'./chunk-FRMVSG4N.mjs';import'./chunk-IVSNHT24.mjs';import'./chunk-MGXWQW5I.mjs';import'./chunk-6A7M4CGJ.mjs';import'./chunk-WTGKZX7J.mjs';import'./chunk-WJSUVPYX.mjs';import'./chunk-NBQQ2GN3.mjs';import'./chunk-BIJSMSUU.mjs';import'./chunk-7BJXI2HI.mjs';import'./chunk-LWIKDDSU.mjs';import'./chunk-XP5PL6K7.mjs';export{a as useConsent}from'./chunk-PQ5IPUJN.mjs';export{b as useCookieScan,a as useFocusTrap}from'./chunk-QNXLY5EJ.mjs';import'./chunk-XC3DLYEG.mjs';import'./chunk-R3ZKV2J7.mjs';import'./chunk-ZY4RCV5C.mjs';export{a as useDSR}from'./chunk-ZSRO4L3C.mjs';import'./chunk-RRVML7CU.mjs';export{a as useDPIA}from'./chunk-I3V3ITN7.mjs';import'./chunk-LRRENTT5.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';

package/dist/hooks.d.mts

@@ -478,6 +478,44 @@ export declare interface ConsentStorageOptions {
     };
 }
 
+/** How a present cookie was classified. */
+export declare type CookieMatchSource = 'declared' | 'known' | 'none';
+
+export declare interface CookieScanOptions {
+    /**
+     * The cookie string to scan, in `document.cookie` form (`a=1; b=2`).
+     * Defaults to `document.cookie` in the browser, or `''` on the server.
+     */
+    cookieString?: string;
+    /** Reference timestamp (epoch ms) recorded on the result. Defaults to `Date.now()`. */
+    asOf?: number;
+    /** Extra known cookies, checked before the built-in registry (so they can override it). */
+    knownCookies?: DeclaredCookie[];
+    /** Whether to fall back to the built-in known-cookie registry for undeclared cookies. @default true */
+    useKnownRegistry?: boolean;
+}
+
+export declare interface CookieScanResult {
+    /** When the scan ran (epoch ms). */
+    scannedAt: number;
+    /** Number of cookies present. */
+    total: number;
+    /** Every present cookie, classified. */
+    cookies: ScannedCookie[];
+    /** Cookies that matched one of your declared cookies. */
+    declared: ScannedCookie[];
+    /** Cookies present but NOT in your declaration — the compliance gap. */
+    undeclared: ScannedCookie[];
+    /** Undeclared cookies the built-in registry could still identify. */
+    identified: ScannedCookie[];
+    /** Undeclared cookies that could not be identified at all. */
+    unknown: ScannedCookie[];
+    /** Present cookies grouped by resolved category; unclassified cookies go under `uncategorized`. */
+    byCategory: Record<string, ScannedCookie[]>;
+    /** True when there are no undeclared cookies. */
+    complete: boolean;
+}
+
 /**
  * Summary of cross-border transfer compliance
  */
@@ -667,6 +705,30 @@ declare interface DCPMIThresholds {
  */
 declare type DCPMITier = 'UHL' | 'EHL' | 'OHL' | 'listed' | 'none';
 
+/**
+ * Cookie scanner — audits the cookies actually present in the browser against
+ * the cookies you have declared, surfacing undeclared cookies that put you out
+ * of step with your cookie notice (NDPA 2023 S.25-26 / NDPC GAID 2025 on
+ * specific, informed consent).
+ *
+ * Pure and DOM-optional: pass `cookieString` to scan an arbitrary value (a
+ * `Cookie:` header on the server, a test fixture), or call it in the browser
+ * and it reads `document.cookie`. Safe to import from a server bundle.
+ */
+/** A cookie you declare against a consent category. */
+export declare interface DeclaredCookie {
+    /** Exact cookie name, a prefix (with `prefix: true`), or a RegExp matched against the name. */
+    name: string | RegExp;
+    /** Consent category this cookie belongs to (e.g. 'necessary', 'analytics', 'marketing'). */
+    category: string;
+    /** Who sets the cookie (e.g. 'Google Analytics'). */
+    provider?: string;
+    /** What the cookie is used for — surfaced in your cookie policy. */
+    purpose?: string;
+    /** Treat a string `name` as a prefix match instead of an exact match. Ignored for RegExp names. */
+    prefix?: boolean;
+}
+
 /** Options for DOCX export of the finalised policy. */
 declare interface DOCXExportOptions {
     includeTOC?: boolean;
@@ -1555,6 +1617,17 @@ export declare interface ROPASummary {
     lastUpdated: number;
 }
 
+export declare interface ScannedCookie {
+    /** The cookie name as found in the cookie string. */
+    name: string;
+    /** Resolved consent category, or `null` when it could not be classified. */
+    category: string | null;
+    /** Whether it matched your declaration, only the known registry, or nothing. */
+    matchedBy: CookieMatchSource;
+    provider?: string;
+    purpose?: string;
+}
+
 /**
  * Additional conditions required for processing sensitive personal data
  * per NDPA Section 30
@@ -1987,6 +2060,23 @@ export declare interface UseConsentReturn {
     isLoading: boolean;
 }
 
+/**
+ * React hook that scans `document.cookie` against your declared cookies on
+ * mount and exposes a `rescan()` to re-run after you set or clear cookies.
+ *
+ * `result` is `null` until the first client-side scan, so server and first
+ * client render agree (no hydration mismatch). `rescan` is stable and always
+ * reads the latest `declared`/`options` — callers don't need to memoise them.
+ */
+export declare function useCookieScan(declared?: DeclaredCookie[], options?: CookieScanOptions): UseCookieScanReturn;
+
+export declare interface UseCookieScanReturn {
+    /** The latest scan, or `null` before the first client-side scan (e.g. during SSR). */
+    result: CookieScanResult | null;
+    /** Re-read the cookies and recompute the scan with the current arguments. */
+    rescan: () => void;
+}
+
 /**
  * Hook for managing cross-border data transfers in compliance with NDPA Part VIII (Sections 41-43).
  *

package/dist/hooks.d.ts

@@ -478,6 +478,44 @@ export declare interface ConsentStorageOptions {
     };
 }
 
+/** How a present cookie was classified. */
+export declare type CookieMatchSource = 'declared' | 'known' | 'none';
+
+export declare interface CookieScanOptions {
+    /**
+     * The cookie string to scan, in `document.cookie` form (`a=1; b=2`).
+     * Defaults to `document.cookie` in the browser, or `''` on the server.
+     */
+    cookieString?: string;
+    /** Reference timestamp (epoch ms) recorded on the result. Defaults to `Date.now()`. */
+    asOf?: number;
+    /** Extra known cookies, checked before the built-in registry (so they can override it). */
+    knownCookies?: DeclaredCookie[];
+    /** Whether to fall back to the built-in known-cookie registry for undeclared cookies. @default true */
+    useKnownRegistry?: boolean;
+}
+
+export declare interface CookieScanResult {
+    /** When the scan ran (epoch ms). */
+    scannedAt: number;
+    /** Number of cookies present. */
+    total: number;
+    /** Every present cookie, classified. */
+    cookies: ScannedCookie[];
+    /** Cookies that matched one of your declared cookies. */
+    declared: ScannedCookie[];
+    /** Cookies present but NOT in your declaration — the compliance gap. */
+    undeclared: ScannedCookie[];
+    /** Undeclared cookies the built-in registry could still identify. */
+    identified: ScannedCookie[];
+    /** Undeclared cookies that could not be identified at all. */
+    unknown: ScannedCookie[];
+    /** Present cookies grouped by resolved category; unclassified cookies go under `uncategorized`. */
+    byCategory: Record<string, ScannedCookie[]>;
+    /** True when there are no undeclared cookies. */
+    complete: boolean;
+}
+
 /**
  * Summary of cross-border transfer compliance
  */
@@ -667,6 +705,30 @@ declare interface DCPMIThresholds {
  */
 declare type DCPMITier = 'UHL' | 'EHL' | 'OHL' | 'listed' | 'none';
 
+/**
+ * Cookie scanner — audits the cookies actually present in the browser against
+ * the cookies you have declared, surfacing undeclared cookies that put you out
+ * of step with your cookie notice (NDPA 2023 S.25-26 / NDPC GAID 2025 on
+ * specific, informed consent).
+ *
+ * Pure and DOM-optional: pass `cookieString` to scan an arbitrary value (a
+ * `Cookie:` header on the server, a test fixture), or call it in the browser
+ * and it reads `document.cookie`. Safe to import from a server bundle.
+ */
+/** A cookie you declare against a consent category. */
+export declare interface DeclaredCookie {
+    /** Exact cookie name, a prefix (with `prefix: true`), or a RegExp matched against the name. */
+    name: string | RegExp;
+    /** Consent category this cookie belongs to (e.g. 'necessary', 'analytics', 'marketing'). */
+    category: string;
+    /** Who sets the cookie (e.g. 'Google Analytics'). */
+    provider?: string;
+    /** What the cookie is used for — surfaced in your cookie policy. */
+    purpose?: string;
+    /** Treat a string `name` as a prefix match instead of an exact match. Ignored for RegExp names. */
+    prefix?: boolean;
+}
+
 /** Options for DOCX export of the finalised policy. */
 declare interface DOCXExportOptions {
     includeTOC?: boolean;
@@ -1555,6 +1617,17 @@ export declare interface ROPASummary {
     lastUpdated: number;
 }
 
+export declare interface ScannedCookie {
+    /** The cookie name as found in the cookie string. */
+    name: string;
+    /** Resolved consent category, or `null` when it could not be classified. */
+    category: string | null;
+    /** Whether it matched your declaration, only the known registry, or nothing. */
+    matchedBy: CookieMatchSource;
+    provider?: string;
+    purpose?: string;
+}
+
 /**
  * Additional conditions required for processing sensitive personal data
  * per NDPA Section 30
@@ -1987,6 +2060,23 @@ export declare interface UseConsentReturn {
     isLoading: boolean;
 }
 
+/**
+ * React hook that scans `document.cookie` against your declared cookies on
+ * mount and exposes a `rescan()` to re-run after you set or clear cookies.
+ *
+ * `result` is `null` until the first client-side scan, so server and first
+ * client render agree (no hydration mismatch). `rescan` is stable and always
+ * reads the latest `declared`/`options` — callers don't need to memoise them.
+ */
+export declare function useCookieScan(declared?: DeclaredCookie[], options?: CookieScanOptions): UseCookieScanReturn;
+
+export declare interface UseCookieScanReturn {
+    /** The latest scan, or `null` before the first client-side scan (e.g. during SSR). */
+    result: CookieScanResult | null;
+    /** Re-read the cookies and recompute the scan with the current arguments. */
+    rescan: () => void;
+}
+
 /**
  * Hook for managing cross-border data transfers in compliance with NDPA Part VIII (Sections 41-43).
  *

package/dist/hooks.js

@@ -1,2 +1,2 @@
 "use client";
-'use strict';require('./chunk-OVW5ASY3.js');var chunkT32YQT4Y_js=require('./chunk-T32YQT4Y.js'),chunkEHQVTFYO_js=require('./chunk-EHQVTFYO.js'),chunkRC3XFXTJ_js=require('./chunk-RC3XFXTJ.js'),chunkQHW4UKGJ_js=require('./chunk-QHW4UKGJ.js'),chunkIRRUYR6M_js=require('./chunk-IRRUYR6M.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunkTLIHFGIJ_js=require('./chunk-TLIHFGIJ.js');require('./chunk-JS7SYL5P.js'),require('./chunk-VFRGCBJY.js'),require('./chunk-7TTXS7JX.js'),require('./chunk-3YTAOT5O.js'),require('./chunk-Y346CURW.js'),require('./chunk-D2ZKDQVL.js'),require('./chunk-6LJHLE6G.js'),require('./chunk-YFBDJ4FH.js'),require('./chunk-WZYCBW2R.js'),require('./chunk-4CVBQC66.js');var chunkQKXGVT2Q_js=require('./chunk-QKXGVT2Q.js'),chunkL2VO3MEJ_js=require('./chunk-L2VO3MEJ.js');require('./chunk-C2KEXHRX.js'),require('./chunk-DKLJ5DYN.js');var chunkTVA6D6S4_js=require('./chunk-TVA6D6S4.js');require('./chunk-R2ZZMATR.js');var chunkJLQT3W3E_js=require('./chunk-JLQT3W3E.js');require('./chunk-TQZWJGJ2.js'),require('./chunk-ZVOIR4QH.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"useBreachNotificationAssessment",{enumerable:true,get:function(){return chunkT32YQT4Y_js.a}});Object.defineProperty(exports,"useComplianceAuditReturn",{enumerable:true,get:function(){return chunkT32YQT4Y_js.d}});Object.defineProperty(exports,"useComplianceScore",{enumerable:true,get:function(){return chunkT32YQT4Y_js.b}});Object.defineProperty(exports,"useDCPMI",{enumerable:true,get:function(){return chunkT32YQT4Y_js.c}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkEHQVTFYO_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.a}});Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkQHW4UKGJ_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunkIRRUYR6M_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunkTLIHFGIJ_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunkQKXGVT2Q_js.a}});Object.defineProperty(exports,"useFocusTrap",{enumerable:true,get:function(){return chunkL2VO3MEJ_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkTVA6D6S4_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkJLQT3W3E_js.a}});
+'use strict';require('./chunk-VKDW2IHV.js');var chunkT32YQT4Y_js=require('./chunk-T32YQT4Y.js'),chunkEHQVTFYO_js=require('./chunk-EHQVTFYO.js'),chunkRC3XFXTJ_js=require('./chunk-RC3XFXTJ.js'),chunkQHW4UKGJ_js=require('./chunk-QHW4UKGJ.js'),chunkIRRUYR6M_js=require('./chunk-IRRUYR6M.js'),chunkHHK5LHEG_js=require('./chunk-HHK5LHEG.js'),chunkTLIHFGIJ_js=require('./chunk-TLIHFGIJ.js');require('./chunk-JS7SYL5P.js'),require('./chunk-VFRGCBJY.js'),require('./chunk-7TTXS7JX.js'),require('./chunk-3YTAOT5O.js'),require('./chunk-Y346CURW.js'),require('./chunk-D2ZKDQVL.js'),require('./chunk-6LJHLE6G.js'),require('./chunk-YFBDJ4FH.js'),require('./chunk-WZYCBW2R.js'),require('./chunk-4CVBQC66.js');var chunkQKXGVT2Q_js=require('./chunk-QKXGVT2Q.js'),chunkYMKN3YQL_js=require('./chunk-YMKN3YQL.js');require('./chunk-C2KEXHRX.js'),require('./chunk-DKLJ5DYN.js'),require('./chunk-PEUAA5EC.js');var chunkTVA6D6S4_js=require('./chunk-TVA6D6S4.js');require('./chunk-R2ZZMATR.js');var chunkJLQT3W3E_js=require('./chunk-JLQT3W3E.js');require('./chunk-TQZWJGJ2.js'),require('./chunk-ZVOIR4QH.js'),require('./chunk-VWED6UTN.js'),require('./chunk-RFPLZDIO.js');Object.defineProperty(exports,"useBreachNotificationAssessment",{enumerable:true,get:function(){return chunkT32YQT4Y_js.a}});Object.defineProperty(exports,"useComplianceAuditReturn",{enumerable:true,get:function(){return chunkT32YQT4Y_js.d}});Object.defineProperty(exports,"useComplianceScore",{enumerable:true,get:function(){return chunkT32YQT4Y_js.b}});Object.defineProperty(exports,"useDCPMI",{enumerable:true,get:function(){return chunkT32YQT4Y_js.c}});Object.defineProperty(exports,"useBreach",{enumerable:true,get:function(){return chunkEHQVTFYO_js.a}});Object.defineProperty(exports,"useDefaultPrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.b}});Object.defineProperty(exports,"usePrivacyPolicy",{enumerable:true,get:function(){return chunkRC3XFXTJ_js.a}});Object.defineProperty(exports,"useAdaptivePolicyWizard",{enumerable:true,get:function(){return chunkQHW4UKGJ_js.a}});Object.defineProperty(exports,"useLawfulBasis",{enumerable:true,get:function(){return chunkIRRUYR6M_js.a}});Object.defineProperty(exports,"useCrossBorderTransfer",{enumerable:true,get:function(){return chunkHHK5LHEG_js.a}});Object.defineProperty(exports,"useROPA",{enumerable:true,get:function(){return chunkTLIHFGIJ_js.a}});Object.defineProperty(exports,"useConsent",{enumerable:true,get:function(){return chunkQKXGVT2Q_js.a}});Object.defineProperty(exports,"useCookieScan",{enumerable:true,get:function(){return chunkYMKN3YQL_js.b}});Object.defineProperty(exports,"useFocusTrap",{enumerable:true,get:function(){return chunkYMKN3YQL_js.a}});Object.defineProperty(exports,"useDSR",{enumerable:true,get:function(){return chunkTVA6D6S4_js.a}});Object.defineProperty(exports,"useDPIA",{enumerable:true,get:function(){return chunkJLQT3W3E_js.a}});

package/dist/hooks.mjs

@@ -1,2 +1,2 @@
 "use client";
-import'./chunk-YQTZWPOS.mjs';export{a as useBreachNotificationAssessment,d as useComplianceAuditReturn,b as useComplianceScore,c as useDCPMI}from'./chunk-C5UYAOYX.mjs';export{a as useBreach}from'./chunk-RFXGD5NE.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-UVXS7KRV.mjs';export{a as useAdaptivePolicyWizard}from'./chunk-KE2FZH2V.mjs';export{a as useLawfulBasis}from'./chunk-B6BRD5SL.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as useROPA}from'./chunk-FRMVSG4N.mjs';import'./chunk-IVSNHT24.mjs';import'./chunk-MGXWQW5I.mjs';import'./chunk-6A7M4CGJ.mjs';import'./chunk-WTGKZX7J.mjs';import'./chunk-WJSUVPYX.mjs';import'./chunk-NBQQ2GN3.mjs';import'./chunk-BIJSMSUU.mjs';import'./chunk-7BJXI2HI.mjs';import'./chunk-LWIKDDSU.mjs';import'./chunk-XP5PL6K7.mjs';export{a as useConsent}from'./chunk-PQ5IPUJN.mjs';export{a as useFocusTrap}from'./chunk-YTU4FNM2.mjs';import'./chunk-XC3DLYEG.mjs';import'./chunk-R3ZKV2J7.mjs';export{a as useDSR}from'./chunk-ZSRO4L3C.mjs';import'./chunk-RRVML7CU.mjs';export{a as useDPIA}from'./chunk-I3V3ITN7.mjs';import'./chunk-LRRENTT5.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';
+import'./chunk-23CULZBM.mjs';export{a as useBreachNotificationAssessment,d as useComplianceAuditReturn,b as useComplianceScore,c as useDCPMI}from'./chunk-C5UYAOYX.mjs';export{a as useBreach}from'./chunk-RFXGD5NE.mjs';export{b as useDefaultPrivacyPolicy,a as usePrivacyPolicy}from'./chunk-UVXS7KRV.mjs';export{a as useAdaptivePolicyWizard}from'./chunk-KE2FZH2V.mjs';export{a as useLawfulBasis}from'./chunk-B6BRD5SL.mjs';export{a as useCrossBorderTransfer}from'./chunk-KDAZQO3N.mjs';export{a as useROPA}from'./chunk-FRMVSG4N.mjs';import'./chunk-IVSNHT24.mjs';import'./chunk-MGXWQW5I.mjs';import'./chunk-6A7M4CGJ.mjs';import'./chunk-WTGKZX7J.mjs';import'./chunk-WJSUVPYX.mjs';import'./chunk-NBQQ2GN3.mjs';import'./chunk-BIJSMSUU.mjs';import'./chunk-7BJXI2HI.mjs';import'./chunk-LWIKDDSU.mjs';import'./chunk-XP5PL6K7.mjs';export{a as useConsent}from'./chunk-PQ5IPUJN.mjs';export{b as useCookieScan,a as useFocusTrap}from'./chunk-QNXLY5EJ.mjs';import'./chunk-XC3DLYEG.mjs';import'./chunk-R3ZKV2J7.mjs';import'./chunk-ZY4RCV5C.mjs';export{a as useDSR}from'./chunk-ZSRO4L3C.mjs';import'./chunk-RRVML7CU.mjs';export{a as useDPIA}from'./chunk-I3V3ITN7.mjs';import'./chunk-LRRENTT5.mjs';import'./chunk-ITCY2Z66.mjs';import'./chunk-DBZSN4WP.mjs';import'./chunk-ZJYULEER.mjs';

package/dist/index.d.mts

@@ -983,6 +983,8 @@ export declare interface ConsentBannerClassNames {
     saveButton?: string;
     customizePanel?: string;
     selectAllButton?: string;
+    /** The optional on-page cookie scan panel (shown in the customize view) */
+    cookieScanPanel?: string;
     /** Alias for acceptButton */
     primaryButton?: string;
     /** Alias for rejectButton */
@@ -1106,6 +1108,30 @@ export declare interface ConsentBannerProps {
      * Called when the banner is shown, accepted, rejected, customized, or dismissed.
      */
     onAnalytics?: (event: ConsentAnalyticsEvent) => void;
+    /**
+     * Show a "cookies on this page" scan panel inside the customize view. It
+     * audits the cookies actually present against `declaredCookies` and flags
+     * undeclared ones — a transparency / self-audit aid (NDPA S.25-26 specific,
+     * informed consent). Off by default.
+     * @default false
+     */
+    showCookieScan?: boolean;
+    /**
+     * The cookies you declare, matched against what's present when
+     * `showCookieScan` is on. Without it, every present cookie is treated as
+     * undeclared (though the built-in registry may still identify it).
+     */
+    declaredCookies?: DeclaredCookie[];
+    /**
+     * Options forwarded to the scan (e.g. `knownCookies`, `useKnownRegistry`,
+     * or a `cookieString` to scan instead of `document.cookie`).
+     */
+    cookieScanOptions?: CookieScanOptions;
+    /**
+     * Heading for the cookie scan panel.
+     * @default "Cookies on this page"
+     */
+    cookieScanTitle?: string;
 }
 
 /**
@@ -1369,6 +1395,44 @@ export declare interface CookieAdapterOptions {
     sameSite?: 'Strict' | 'Lax' | 'None';
 }
 
+/** How a present cookie was classified. */
+export declare type CookieMatchSource = 'declared' | 'known' | 'none';
+
+export declare interface CookieScanOptions {
+    /**
+     * The cookie string to scan, in `document.cookie` form (`a=1; b=2`).
+     * Defaults to `document.cookie` in the browser, or `''` on the server.
+     */
+    cookieString?: string;
+    /** Reference timestamp (epoch ms) recorded on the result. Defaults to `Date.now()`. */
+    asOf?: number;
+    /** Extra known cookies, checked before the built-in registry (so they can override it). */
+    knownCookies?: DeclaredCookie[];
+    /** Whether to fall back to the built-in known-cookie registry for undeclared cookies. @default true */
+    useKnownRegistry?: boolean;
+}
+
+export declare interface CookieScanResult {
+    /** When the scan ran (epoch ms). */
+    scannedAt: number;
+    /** Number of cookies present. */
+    total: number;
+    /** Every present cookie, classified. */
+    cookies: ScannedCookie[];
+    /** Cookies that matched one of your declared cookies. */
+    declared: ScannedCookie[];
+    /** Cookies present but NOT in your declaration — the compliance gap. */
+    undeclared: ScannedCookie[];
+    /** Undeclared cookies the built-in registry could still identify. */
+    identified: ScannedCookie[];
+    /** Undeclared cookies that could not be identified at all. */
+    unknown: ScannedCookie[];
+    /** Present cookies grouped by resolved category; unclassified cookies go under `uncategorized`. */
+    byCategory: Record<string, ScannedCookie[]>;
+    /** True when there are no undeclared cookies. */
+    complete: boolean;
+}
+
 /**
  * Creates a new audit entry from consent settings. If `previousSettings` is
  * provided, the action is automatically determined by comparing old and new
@@ -1665,6 +1729,30 @@ export declare interface DCPMIThresholds {
  */
 export declare type DCPMITier = 'UHL' | 'EHL' | 'OHL' | 'listed' | 'none';
 
+/**
+ * Cookie scanner — audits the cookies actually present in the browser against
+ * the cookies you have declared, surfacing undeclared cookies that put you out
+ * of step with your cookie notice (NDPA 2023 S.25-26 / NDPC GAID 2025 on
+ * specific, informed consent).
+ *
+ * Pure and DOM-optional: pass `cookieString` to scan an arbitrary value (a
+ * `Cookie:` header on the server, a test fixture), or call it in the browser
+ * and it reads `document.cookie`. Safe to import from a server bundle.
+ */
+/** A cookie you declare against a consent category. */
+export declare interface DeclaredCookie {
+    /** Exact cookie name, a prefix (with `prefix: true`), or a RegExp matched against the name. */
+    name: string | RegExp;
+    /** Consent category this cookie belongs to (e.g. 'necessary', 'analytics', 'marketing'). */
+    category: string;
+    /** Who sets the cookie (e.g. 'Google Analytics'). */
+    provider?: string;
+    /** What the cookie is used for — surfaced in your cookie policy. */
+    purpose?: string;
+    /** Treat a string `name` as a prefix match instead of an exact match. Ignored for RegExp names. */
+    prefix?: boolean;
+}
+
 /** September 2025 GAID baseline annual fees (NGN). */
 export declare const DEFAULT_DCPMI_FEES_NGN: DCPMIFees;
 
@@ -2628,6 +2716,14 @@ declare type Industry = 'fintech' | 'healthcare' | 'ecommerce' | 'saas' | 'educa
  */
 export declare function isNDPCApprovalRequired(mechanism: TransferMechanism): boolean;
 
+/**
+ * Built-in registry of widely deployed third-party cookies, so an undeclared
+ * cookie can often still be identified (provider + likely category). Override
+ * or extend via {@link CookieScanOptions.knownCookies}; categories follow the
+ * common necessary / functional / analytics / marketing taxonomy.
+ */
+export declare const KNOWN_COOKIES: DeclaredCookie[];
+
 /**
  * Lawful Basis types aligned with NDPA 2023 Part III (Sections 24-28)
  * Every processing activity must have a documented lawful basis
@@ -4350,6 +4446,24 @@ export declare function runNdprAudit(input: NdprAuditInput, options?: NdprAuditO
  */
 export declare function sanitizeInput(input: string): string;
 
+/**
+ * Scan the cookies present against your declared cookies and a registry of
+ * well-known third-party cookies. Returns which cookies are declared, which are
+ * undeclared (and whether they can still be identified), and a per-category view.
+ */
+export declare function scanCookies(declared?: DeclaredCookie[], options?: CookieScanOptions): CookieScanResult;
+
+export declare interface ScannedCookie {
+    /** The cookie name as found in the cookie string. */
+    name: string;
+    /** Resolved consent category, or `null` when it could not be classified. */
+    category: string | null;
+    /** Whether it matched your declaration, only the known registry, or nothing. */
+    matchedBy: CookieMatchSource;
+    provider?: string;
+    purpose?: string;
+}
+
 /**
  * Additional conditions required for processing sensitive personal data
  * per NDPA Section 30
@@ -4938,6 +5052,23 @@ declare interface UseConsentReturn {
     isLoading: boolean;
 }
 
+/**
+ * React hook that scans `document.cookie` against your declared cookies on
+ * mount and exposes a `rescan()` to re-run after you set or clear cookies.
+ *
+ * `result` is `null` until the first client-side scan, so server and first
+ * client render agree (no hydration mismatch). `rescan` is stable and always
+ * reads the latest `declared`/`options` — callers don't need to memoise them.
+ */
+export declare function useCookieScan(declared?: DeclaredCookie[], options?: CookieScanOptions): UseCookieScanReturn;
+
+export declare interface UseCookieScanReturn {
+    /** The latest scan, or `null` before the first client-side scan (e.g. during SSR). */
+    result: CookieScanResult | null;
+    /** Re-read the cookies and recompute the scan with the current arguments. */
+    rescan: () => void;
+}
+
 /**
  * Hook for managing cross-border data transfers in compliance with NDPA Part VIII (Sections 41-43).
  *

package/dist/index.d.ts

@@ -983,6 +983,8 @@ export declare interface ConsentBannerClassNames {
     saveButton?: string;
     customizePanel?: string;
     selectAllButton?: string;
+    /** The optional on-page cookie scan panel (shown in the customize view) */
+    cookieScanPanel?: string;
     /** Alias for acceptButton */
     primaryButton?: string;
     /** Alias for rejectButton */
@@ -1106,6 +1108,30 @@ export declare interface ConsentBannerProps {
      * Called when the banner is shown, accepted, rejected, customized, or dismissed.
      */
     onAnalytics?: (event: ConsentAnalyticsEvent) => void;
+    /**
+     * Show a "cookies on this page" scan panel inside the customize view. It
+     * audits the cookies actually present against `declaredCookies` and flags
+     * undeclared ones — a transparency / self-audit aid (NDPA S.25-26 specific,
+     * informed consent). Off by default.
+     * @default false
+     */
+    showCookieScan?: boolean;
+    /**
+     * The cookies you declare, matched against what's present when
+     * `showCookieScan` is on. Without it, every present cookie is treated as
+     * undeclared (though the built-in registry may still identify it).
+     */
+    declaredCookies?: DeclaredCookie[];
+    /**
+     * Options forwarded to the scan (e.g. `knownCookies`, `useKnownRegistry`,
+     * or a `cookieString` to scan instead of `document.cookie`).
+     */
+    cookieScanOptions?: CookieScanOptions;
+    /**
+     * Heading for the cookie scan panel.
+     * @default "Cookies on this page"
+     */
+    cookieScanTitle?: string;
 }
 
 /**
@@ -1369,6 +1395,44 @@ export declare interface CookieAdapterOptions {
     sameSite?: 'Strict' | 'Lax' | 'None';
 }
 
+/** How a present cookie was classified. */
+export declare type CookieMatchSource = 'declared' | 'known' | 'none';
+
+export declare interface CookieScanOptions {
+    /**
+     * The cookie string to scan, in `document.cookie` form (`a=1; b=2`).
+     * Defaults to `document.cookie` in the browser, or `''` on the server.
+     */
+    cookieString?: string;
+    /** Reference timestamp (epoch ms) recorded on the result. Defaults to `Date.now()`. */
+    asOf?: number;
+    /** Extra known cookies, checked before the built-in registry (so they can override it). */
+    knownCookies?: DeclaredCookie[];
+    /** Whether to fall back to the built-in known-cookie registry for undeclared cookies. @default true */
+    useKnownRegistry?: boolean;
+}
+
+export declare interface CookieScanResult {
+    /** When the scan ran (epoch ms). */
+    scannedAt: number;
+    /** Number of cookies present. */
+    total: number;
+    /** Every present cookie, classified. */
+    cookies: ScannedCookie[];
+    /** Cookies that matched one of your declared cookies. */
+    declared: ScannedCookie[];
+    /** Cookies present but NOT in your declaration — the compliance gap. */
+    undeclared: ScannedCookie[];
+    /** Undeclared cookies the built-in registry could still identify. */
+    identified: ScannedCookie[];
+    /** Undeclared cookies that could not be identified at all. */
+    unknown: ScannedCookie[];
+    /** Present cookies grouped by resolved category; unclassified cookies go under `uncategorized`. */
+    byCategory: Record<string, ScannedCookie[]>;
+    /** True when there are no undeclared cookies. */
+    complete: boolean;
+}
+
 /**
  * Creates a new audit entry from consent settings. If `previousSettings` is
  * provided, the action is automatically determined by comparing old and new
@@ -1665,6 +1729,30 @@ export declare interface DCPMIThresholds {
  */
 export declare type DCPMITier = 'UHL' | 'EHL' | 'OHL' | 'listed' | 'none';
 
+/**
+ * Cookie scanner — audits the cookies actually present in the browser against
+ * the cookies you have declared, surfacing undeclared cookies that put you out
+ * of step with your cookie notice (NDPA 2023 S.25-26 / NDPC GAID 2025 on
+ * specific, informed consent).
+ *
+ * Pure and DOM-optional: pass `cookieString` to scan an arbitrary value (a
+ * `Cookie:` header on the server, a test fixture), or call it in the browser
+ * and it reads `document.cookie`. Safe to import from a server bundle.
+ */
+/** A cookie you declare against a consent category. */
+export declare interface DeclaredCookie {
+    /** Exact cookie name, a prefix (with `prefix: true`), or a RegExp matched against the name. */
+    name: string | RegExp;
+    /** Consent category this cookie belongs to (e.g. 'necessary', 'analytics', 'marketing'). */
+    category: string;
+    /** Who sets the cookie (e.g. 'Google Analytics'). */
+    provider?: string;
+    /** What the cookie is used for — surfaced in your cookie policy. */
+    purpose?: string;
+    /** Treat a string `name` as a prefix match instead of an exact match. Ignored for RegExp names. */
+    prefix?: boolean;
+}
+
 /** September 2025 GAID baseline annual fees (NGN). */
 export declare const DEFAULT_DCPMI_FEES_NGN: DCPMIFees;
 
@@ -2628,6 +2716,14 @@ declare type Industry = 'fintech' | 'healthcare' | 'ecommerce' | 'saas' | 'educa
  */
 export declare function isNDPCApprovalRequired(mechanism: TransferMechanism): boolean;
 
+/**
+ * Built-in registry of widely deployed third-party cookies, so an undeclared
+ * cookie can often still be identified (provider + likely category). Override
+ * or extend via {@link CookieScanOptions.knownCookies}; categories follow the
+ * common necessary / functional / analytics / marketing taxonomy.
+ */
+export declare const KNOWN_COOKIES: DeclaredCookie[];
+
 /**
  * Lawful Basis types aligned with NDPA 2023 Part III (Sections 24-28)
  * Every processing activity must have a documented lawful basis
@@ -4350,6 +4446,24 @@ export declare function runNdprAudit(input: NdprAuditInput, options?: NdprAuditO
  */
 export declare function sanitizeInput(input: string): string;
 
+/**
+ * Scan the cookies present against your declared cookies and a registry of
+ * well-known third-party cookies. Returns which cookies are declared, which are
+ * undeclared (and whether they can still be identified), and a per-category view.
+ */
+export declare function scanCookies(declared?: DeclaredCookie[], options?: CookieScanOptions): CookieScanResult;
+
+export declare interface ScannedCookie {
+    /** The cookie name as found in the cookie string. */
+    name: string;
+    /** Resolved consent category, or `null` when it could not be classified. */
+    category: string | null;
+    /** Whether it matched your declaration, only the known registry, or nothing. */
+    matchedBy: CookieMatchSource;
+    provider?: string;
+    purpose?: string;
+}
+
 /**
  * Additional conditions required for processing sensitive personal data
  * per NDPA Section 30
@@ -4938,6 +5052,23 @@ declare interface UseConsentReturn {
     isLoading: boolean;
 }
 
+/**
+ * React hook that scans `document.cookie` against your declared cookies on
+ * mount and exposes a `rescan()` to re-run after you set or clear cookies.
+ *
+ * `result` is `null` until the first client-side scan, so server and first
+ * client render agree (no hydration mismatch). `rescan` is stable and always
+ * reads the latest `declared`/`options` — callers don't need to memoise them.
+ */
+export declare function useCookieScan(declared?: DeclaredCookie[], options?: CookieScanOptions): UseCookieScanReturn;
+
+export declare interface UseCookieScanReturn {
+    /** The latest scan, or `null` before the first client-side scan (e.g. during SSR). */
+    result: CookieScanResult | null;
+    /** Re-read the cookies and recompute the scan with the current arguments. */
+    rescan: () => void;
+}
+
 /**
  * Hook for managing cross-border data transfers in compliance with NDPA Part VIII (Sections 41-43).
  *