@tripticonsent/sdk 0.1.0

package/README.md

@@ -0,0 +1,43 @@
+# @tripticonsent/sdk
+
+Browser + Node client for the tripticonsent consent & preference API.
+
+```bash
+npm install @tripticonsent/sdk
+```
+
+```ts
+import { TripticonsentClient } from '@tripticonsent/sdk';
+
+const tc = new TripticonsentClient({
+  baseUrl: 'https://api.tripticonsent.tripticode.com',
+  apiKey: 'pk_live_…', // sk_live_… on a server
+});
+
+// record a decision
+await tc.recordConsent(
+  { subject: 'email:user@example.com', purpose: 'marketing_email', state: 'GRANTED', channel: 'banner' },
+  { idempotencyKey: crypto.randomUUID() },
+);
+
+// read current state (in-memory cache + ETag revalidation)
+const state = await tc.getConsentState('email:user@example.com');
+
+// render your banner from the site's own published definitions
+const purposes = await tc.getPurposes({ locale: 'es' });
+
+// tag gate — load analytics only after consent
+await tc.gate('email:user@example.com', ['analytics'], () => loadAnalytics());
+// after your banner writes new consent:
+tc.notifyConsentChanged();
+
+// Google Consent Mode v2
+await tc.applyConsentMode('email:user@example.com', gtag);
+
+// verify a receipt offline
+const receipt = await tc.getReceipt('rcpt_…');
+const ok = await tc.verifyReceipt(receipt);
+```
+
+`pk_` keys are origin-restricted and can only touch the referenced subject; `sk_` keys unlock
+`createSubject` / `mergeSubjects` / full history / data requests.

package/dist/canonical.d.ts

@@ -0,0 +1,3 @@
+/** Deterministic JSON — recursively sorted object keys. Matches the server's
+ *  `canonicalJson` in @tripticonsent/crypto so receipt signatures verify. */
+export declare function canonicalJson(value: unknown): string;

package/dist/canonical.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalJson = canonicalJson;
+/** Deterministic JSON — recursively sorted object keys. Matches the server's
+ *  `canonicalJson` in @tripticonsent/crypto so receipt signatures verify. */
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    const entries = Object.entries(value)
+        .filter(([, v]) => v !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : 1))
+        .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);
+    return `{${entries.join(',')}}`;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":";;AAEA,sCAQC;AAVD;6EAC6E;AAC7E,SAAgB,aAAa,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACpC,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,112 @@
+import { SignedReceipt } from './receipt';
+export type ConsentInputState = 'GRANTED' | 'DENIED' | 'WITHDRAWN';
+export type SubjectRef = string | {
+    identifiers: {
+        type: string;
+        value: string;
+    }[];
+};
+export interface TripticonsentOptions {
+    /** e.g. https://api.tripticonsent.tripticode.com */
+    baseUrl: string;
+    /** pk_… in the browser, sk_… on a server. */
+    apiKey: string;
+    /** GET response cache TTL in ms (default 60_000). */
+    cacheTtlMs?: number;
+    fetch?: typeof fetch;
+}
+export interface RecordConsentParams {
+    subject: SubjectRef;
+    purpose: string;
+    state: ConsentInputState;
+    channel?: string;
+    locale?: string;
+    pageUrl?: string;
+    metadata?: Record<string, unknown>;
+}
+export declare class TripticonsentError extends Error {
+    status: number;
+    code: string;
+    hint?: string | undefined;
+    constructor(status: number, code: string, message: string, hint?: string | undefined);
+}
+export declare class TripticonsentClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly ttl;
+    private readonly f;
+    private readonly cache;
+    private readonly changeHandlers;
+    constructor(opts: TripticonsentOptions);
+    recordConsent(params: RecordConsentParams, opts?: {
+        idempotencyKey?: string;
+    }): Promise<unknown>;
+    recordConsentBatch(records: RecordConsentParams[], opts?: {
+        idempotencyKey?: string;
+    }): Promise<unknown>;
+    recordPreferences(params: {
+        subject: SubjectRef;
+        values: {
+            field: string;
+            value: unknown;
+        }[];
+        channel?: string;
+    }, opts?: {
+        idempotencyKey?: string;
+    }): Promise<unknown>;
+    createSubject(identifiers: {
+        type: string;
+        value: string;
+    }[]): Promise<unknown>;
+    addIdentifier(subject: string, identifier: {
+        type: string;
+        value: string;
+        isPrimary?: boolean;
+    }): Promise<unknown>;
+    mergeSubjects(source: SubjectRef, target: SubjectRef, reason?: string): Promise<unknown>;
+    createDataRequest(subject: SubjectRef, type: 'EXPORT' | 'ERASURE' | 'RECTIFICATION', payload?: Record<string, unknown>): Promise<unknown>;
+    /**
+     * Fetch the published banner for this site. Sends back any previously
+     * assigned A/B variant so the server returns the same variant consistently
+     * (sticky assignment). Persists the assigned variant in localStorage for 24h.
+     */
+    getBanner(opts?: {
+        locale?: string;
+        country?: string;
+        region?: string;
+    }): Promise<unknown>;
+    getConsentState(subject: string, opts?: {
+        purpose?: string;
+        fresh?: boolean;
+    }): Promise<unknown>;
+    getPreferences(subject: string, opts?: {
+        fresh?: boolean;
+    }): Promise<unknown>;
+    getPurposes(opts?: {
+        locale?: string;
+    }): Promise<unknown>;
+    getPurpose(key: string, opts?: {
+        locale?: string;
+    }): Promise<unknown>;
+    getPreferenceTemplate(): Promise<unknown>;
+    getPolicy(opts?: {
+        country?: string;
+    }): Promise<unknown>;
+    getTcString(subject: string): Promise<unknown>;
+    getConsentMode(subject: string): Promise<unknown>;
+    getReceipt(id: string): Promise<SignedReceipt & Record<string, unknown>>;
+    verifyReceipt(receipt: SignedReceipt): Promise<boolean>;
+    /**
+     * Run `loader` once the subject has GRANTED at least one purpose in
+     * `purposeKeys` (opt-in auto-blocking). Re-runs on `notifyConsentChanged`.
+     */
+    gate(subject: string, purposeKeys: string[], loader: () => void): Promise<void>;
+    /** Call after your banner writes new consent so gates re-evaluate. */
+    notifyConsentChanged(subjectId?: string): void;
+    /** Apply Consent Mode v2 signals to a gtag function. */
+    applyConsentMode(subject: string, gtag: (...args: unknown[]) => void): Promise<void>;
+    private get;
+    private rawGet;
+    private post;
+    private parse;
+}

package/dist/client.js

@@ -0,0 +1,204 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TripticonsentClient = exports.TripticonsentError = void 0;
+const receipt_1 = require("./receipt");
+class TripticonsentError extends Error {
+    status;
+    code;
+    hint;
+    constructor(status, code, message, hint) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.hint = hint;
+        this.name = 'TripticonsentError';
+    }
+}
+exports.TripticonsentError = TripticonsentError;
+class TripticonsentClient {
+    baseUrl;
+    apiKey;
+    ttl;
+    f;
+    cache = new Map();
+    changeHandlers = new Set();
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/$/, '');
+        this.apiKey = opts.apiKey;
+        this.ttl = opts.cacheTtlMs ?? 60_000;
+        this.f = opts.fetch ?? globalThis.fetch;
+        if (!this.f)
+            throw new Error('No fetch implementation available; pass one in options.');
+    }
+    // ── writes ───────────────────────────────────────────────────────────
+    recordConsent(params, opts = {}) {
+        return this.post('/v1/consent', params, opts.idempotencyKey);
+    }
+    recordConsentBatch(records, opts = {}) {
+        return this.post('/v1/consent/batch', { records }, opts.idempotencyKey);
+    }
+    recordPreferences(params, opts = {}) {
+        return this.post('/v1/preferences', params, opts.idempotencyKey);
+    }
+    // secret-key only
+    createSubject(identifiers) {
+        return this.post('/v1/subjects', { identifiers });
+    }
+    addIdentifier(subject, identifier) {
+        return this.post(`/v1/subjects/${encodeURIComponent(subject)}/identifiers`, identifier);
+    }
+    mergeSubjects(source, target, reason) {
+        return this.post('/v1/subjects/merge', { source, target, reason });
+    }
+    createDataRequest(subject, type, payload) {
+        return this.post('/v1/data-requests', { subject, type, payload });
+    }
+    // ── reads (cached) ───────────────────────────────────────────────────
+    /**
+     * Fetch the published banner for this site. Sends back any previously
+     * assigned A/B variant so the server returns the same variant consistently
+     * (sticky assignment). Persists the assigned variant in localStorage for 24h.
+     */
+    async getBanner(opts = {}) {
+        let abVariant;
+        if (typeof localStorage !== 'undefined') {
+            try {
+                const raw = localStorage.getItem('tc_ab_latest');
+                if (raw) {
+                    const stored = JSON.parse(raw);
+                    if (stored.expiresAt && stored.expiresAt > Date.now())
+                        abVariant = stored.variantVersionId;
+                }
+            }
+            catch { /* ignore */ }
+        }
+        const qs = new URLSearchParams();
+        if (opts.locale)
+            qs.set('locale', opts.locale);
+        if (opts.country)
+            qs.set('country', opts.country);
+        if (opts.region)
+            qs.set('region', opts.region);
+        if (abVariant)
+            qs.set('abVariant', abVariant);
+        const qStr = qs.toString();
+        const res = await this.get(`/v1/banner${qStr ? `?${qStr}` : ''}`);
+        const r = res;
+        if (typeof localStorage !== 'undefined' && r.abTest?.variantVersionId) {
+            try {
+                localStorage.setItem('tc_ab_latest', JSON.stringify({
+                    variantVersionId: r.abTest.variantVersionId,
+                    expiresAt: Date.now() + 86_400_000,
+                }));
+            }
+            catch { /* ignore */ }
+        }
+        return res;
+    }
+    getConsentState(subject, opts = {}) {
+        const q = opts.purpose ? `?purpose=${encodeURIComponent(opts.purpose)}` : '';
+        return this.get(`/v1/subjects/${encodeURIComponent(subject)}/consent${q}`, opts.fresh);
+    }
+    getPreferences(subject, opts = {}) {
+        return this.get(`/v1/subjects/${encodeURIComponent(subject)}/preferences`, opts.fresh);
+    }
+    getPurposes(opts = {}) {
+        return this.get(`/v1/purposes${opts.locale ? `?locale=${opts.locale}` : ''}`);
+    }
+    getPurpose(key, opts = {}) {
+        return this.get(`/v1/purposes/${encodeURIComponent(key)}/current${opts.locale ? `?locale=${opts.locale}` : ''}`);
+    }
+    getPreferenceTemplate() {
+        return this.get('/v1/preference-template');
+    }
+    getPolicy(opts = {}) {
+        return this.get(`/v1/policy${opts.country ? `?country=${opts.country}` : ''}`);
+    }
+    getTcString(subject) {
+        return this.get(`/v1/consent/tcstring?subject=${encodeURIComponent(subject)}`, true);
+    }
+    getConsentMode(subject) {
+        return this.get(`/v1/consent/google-consent-mode?subject=${encodeURIComponent(subject)}`, true);
+    }
+    // ── receipts ─────────────────────────────────────────────────────────
+    async getReceipt(id) {
+        return (await this.get(`/v1/receipts/${encodeURIComponent(id)}`, true));
+    }
+    async verifyReceipt(receipt) {
+        const jwks = (await this.rawGet('/.well-known/jwks.json'));
+        return (0, receipt_1.verifyReceipt)(receipt, jwks);
+    }
+    // ── tag gate ─────────────────────────────────────────────────────────
+    /**
+     * Run `loader` once the subject has GRANTED at least one purpose in
+     * `purposeKeys` (opt-in auto-blocking). Re-runs on `notifyConsentChanged`.
+     */
+    async gate(subject, purposeKeys, loader) {
+        const run = async () => {
+            const state = (await this.getConsentState(subject));
+            if (purposeKeys.some((k) => state.purposes?.[k]?.state === 'GRANTED'))
+                loader();
+        };
+        await run();
+        this.changeHandlers.add(() => void run());
+    }
+    /** Call after your banner writes new consent so gates re-evaluate. */
+    notifyConsentChanged(subjectId = '') {
+        this.cache.clear();
+        for (const h of this.changeHandlers)
+            h(subjectId);
+    }
+    /** Apply Consent Mode v2 signals to a gtag function. */
+    async applyConsentMode(subject, gtag) {
+        const { signals } = (await this.getConsentMode(subject));
+        gtag('consent', 'update', signals);
+    }
+    // ── transport ────────────────────────────────────────────────────────
+    async get(path, fresh = false) {
+        const key = path;
+        const cached = this.cache.get(key);
+        if (!fresh && cached && cached.expiresAt > Date.now())
+            return cached.value;
+        const headers = { authorization: `Bearer ${this.apiKey}` };
+        if (cached?.etag)
+            headers['if-none-match'] = cached.etag;
+        const res = await this.f(this.baseUrl + path, { headers });
+        if (res.status === 304 && cached) {
+            cached.expiresAt = Date.now() + this.ttl;
+            return cached.value;
+        }
+        const body = await this.parse(res);
+        this.cache.set(key, {
+            etag: res.headers.get('etag') ?? undefined,
+            value: body,
+            expiresAt: Date.now() + this.ttl,
+        });
+        return body;
+    }
+    async rawGet(path) {
+        const res = await this.f(this.baseUrl + path, { headers: { authorization: `Bearer ${this.apiKey}` } });
+        return this.parse(res);
+    }
+    async post(path, body, idempotencyKey) {
+        const headers = {
+            authorization: `Bearer ${this.apiKey}`,
+            'content-type': 'application/json',
+        };
+        if (idempotencyKey)
+            headers['idempotency-key'] = idempotencyKey;
+        const res = await this.f(this.baseUrl + path, { method: 'POST', headers, body: JSON.stringify(body) });
+        const parsed = await this.parse(res);
+        this.cache.clear(); // any write may change a cached read
+        return parsed;
+    }
+    async parse(res) {
+        const text = await res.text();
+        const json = text ? JSON.parse(text) : {};
+        if (!res.ok) {
+            throw new TripticonsentError(res.status, json.code ?? 'error', json.message ?? res.statusText, json.hint);
+        }
+        return json;
+    }
+}
+exports.TripticonsentClient = TripticonsentClient;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,uCAAyD;AA+BzD,MAAa,kBAAmB,SAAQ,KAAK;IAE9B;IACA;IAEA;IAJX,YACW,MAAc,EACd,IAAY,EACnB,OAAe,EACR,IAAa;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QALR,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACrC,CAAC;CACJ;AAVD,gDAUC;AAED,MAAa,mBAAmB;IACX,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,GAAG,CAAS;IACZ,CAAC,CAAe;IAChB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEzE,YAAY,IAA0B;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;QACrC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IAED,wEAAwE;IAExE,aAAa,CAAC,MAA2B,EAAE,OAAoC,EAAE;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IAED,kBAAkB,CAAC,OAA8B,EAAE,OAAoC,EAAE;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5E,CAAC;IAED,iBAAiB,CACb,MAA8F,EAC9F,OAAoC,EAAE;QAEtC,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACrE,CAAC;IAED,kBAAkB;IAClB,aAAa,CAAC,WAA8C;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,aAAa,CAAC,OAAe,EAAE,UAAgE;QAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAC5F,CAAC;IACD,aAAa,CAAC,MAAkB,EAAE,MAAkB,EAAE,MAAe;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,iBAAiB,CAAC,OAAmB,EAAE,IAA4C,EAAE,OAAiC;QAClH,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,wEAAwE;IAExE;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,OAA+D,EAAE;QAC7E,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACjD,IAAI,GAAG,EAAE,CAAC;oBACN,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsD,CAAC;oBACpF,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;wBAAE,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;gBAC/F,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO;YAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,GAAiD,CAAC;QAC5D,IAAI,OAAO,YAAY,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;YACpE,IAAI,CAAC;gBACD,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC;oBAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB;oBAC3C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;iBACrC,CAAC,CAAC,CAAC;YACR,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,eAAe,CAAC,OAAe,EAAE,OAA8C,EAAE;QAC7E,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC;IACD,cAAc,CAAC,OAAe,EAAE,OAA4B,EAAE;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3F,CAAC;IACD,WAAW,CAAC,OAA4B,EAAE;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,UAAU,CAAC,GAAW,EAAE,OAA4B,EAAE;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,qBAAqB;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACD,SAAS,CAAC,OAA6B,EAAE;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,WAAW,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,cAAc,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,2CAA2C,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;IAED,wEAAwE;IAExE,KAAK,CAAC,UAAU,CAAC,EAAU;QACvB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAC3C,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,OAAsB;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAwB,CAAC;QAClF,OAAO,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAoB,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IAExE;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,WAAqB,EAAE,MAAkB;QACjE,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACnB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAEjD,CAAC;YACF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC;gBAAE,MAAM,EAAE,CAAC;QACpF,CAAC,CAAC;QACF,MAAM,GAAG,EAAE,CAAC;QACZ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,sEAAsE;IACtE,oBAAoB,CAAC,SAAS,GAAG,EAAE;QAC/B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc;YAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,IAAkC;QACtE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAwC,CAAC;QAChG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,wEAAwE;IAEhE,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QAE3E,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnF,IAAI,MAAM,EAAE,IAAI;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;YACzC,OAAO,MAAM,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAChB,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;YAC1C,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG;SACnC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAY;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,IAAa,EAAE,cAAuB;QACnE,MAAM,OAAO,GAA2B;YACpC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;YACtC,cAAc,EAAE,kBAAkB;SACrC,CAAC;QACF,IAAI,cAAc;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,qCAAqC;QACzD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,GAAa;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,IAAI,kBAAkB,CACxB,GAAG,CAAC,MAAM,EACT,IAAI,CAAC,IAAe,IAAI,OAAO,EAC/B,IAAI,CAAC,OAAkB,IAAI,GAAG,CAAC,UAAU,EAC1C,IAAI,CAAC,IAA0B,CAClC,CAAC;QACN,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA5MD,kDA4MC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { TripticonsentClient, TripticonsentError, type TripticonsentOptions, type RecordConsentParams, type ConsentInputState, type SubjectRef, } from './client';
+export { verifyReceipt, type SignedReceipt } from './receipt';
+export { canonicalJson } from './canonical';
+export declare const SDK_VERSION = "0.1.0";

package/dist/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDK_VERSION = exports.canonicalJson = exports.verifyReceipt = exports.TripticonsentError = exports.TripticonsentClient = void 0;
+var client_1 = require("./client");
+Object.defineProperty(exports, "TripticonsentClient", { enumerable: true, get: function () { return client_1.TripticonsentClient; } });
+Object.defineProperty(exports, "TripticonsentError", { enumerable: true, get: function () { return client_1.TripticonsentError; } });
+var receipt_1 = require("./receipt");
+Object.defineProperty(exports, "verifyReceipt", { enumerable: true, get: function () { return receipt_1.verifyReceipt; } });
+var canonical_1 = require("./canonical");
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_1.canonicalJson; } });
+exports.SDK_VERSION = '0.1.0';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAOkB;AANd,6GAAA,mBAAmB,OAAA;AACnB,4GAAA,kBAAkB,OAAA;AAMtB,qCAA8D;AAArD,wGAAA,aAAa,OAAA;AACtB,yCAA4C;AAAnC,0GAAA,aAAa,OAAA;AAET,QAAA,WAAW,GAAG,OAAO,CAAC"}

package/dist/receipt.d.ts

@@ -0,0 +1,19 @@
+export interface SignedReceipt {
+    payload: unknown;
+    signature: string;
+    kid: string;
+}
+interface Jwk {
+    kid?: string;
+    kty?: string;
+    crv?: string;
+    x?: string;
+}
+/**
+ * Verify a consent receipt offline against a JWKS. Uses Web Crypto (Ed25519),
+ * available in modern browsers and Node ≥ 20.
+ */
+export declare function verifyReceipt(receipt: SignedReceipt, jwks: {
+    keys: Jwk[];
+}): Promise<boolean>;
+export {};

package/dist/receipt.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyReceipt = verifyReceipt;
+const canonical_1 = require("./canonical");
+function fromBase64Url(s) {
+    const b64 = s.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(s.length / 4) * 4, '=');
+    const bin = atob(b64); // available in browsers and Node ≥ 16
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+function toBufferSource(u8) {
+    // Detach from any SharedArrayBuffer typing so Web Crypto accepts it.
+    return u8.slice();
+}
+/**
+ * Verify a consent receipt offline against a JWKS. Uses Web Crypto (Ed25519),
+ * available in modern browsers and Node ≥ 20.
+ */
+async function verifyReceipt(receipt, jwks) {
+    const jwk = jwks.keys.find((k) => k.kid === receipt.kid);
+    if (!jwk)
+        return false;
+    try {
+        const key = await crypto.subtle.importKey('jwk', jwk, { name: 'Ed25519' }, false, ['verify']);
+        const data = toBufferSource(new TextEncoder().encode((0, canonical_1.canonicalJson)(receipt.payload)));
+        return await crypto.subtle.verify('Ed25519', key, toBufferSource(fromBase64Url(receipt.signature)), data);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=receipt.js.map

package/dist/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":";;AAgCA,sCAUC;AA1CD,2CAA4C;AAe5C,SAAS,aAAa,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,sCAAsC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,EAAc;IAClC,qEAAqE;IACrE,OAAO,EAAE,CAAC,KAAK,EAA6B,CAAC;AACjD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,OAAsB,EAAE,IAAqB;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,yBAAa,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@tripticonsent/sdk",
+  "version": "0.1.0",
+  "description": "Browser + Node SDK for the tripticonsent consent & preference API.",
+  "license": "MIT",
+  "type": "commonjs",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tripticonsentdevops/tripticonsent.git",
+    "directory": "packages/sdk-js"
+  },
+  "homepage": "https://tripticonsent.tripticode.com/docs",
+  "bugs": "https://github.com/tripticonsentdevops/tripticonsent/issues",
+  "keywords": ["consent", "cmp", "gdpr", "privacy", "preference-center", "consent-management"],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src",
+    "test": "jest"
+  },
+  "devDependencies": {
+    "@tripticonsent/config": "*"
+  }
+}