@unitninety/site-kit 1.6.5 → 1.6.6

package/src/features/contracts/consent.ts

@@ -1,150 +0,0 @@
-import { z } from 'zod'
-
-export type ConsentState = {
-  version: 1
-  necessary: true
-  preferences: boolean
-  analytics: boolean
-  marketing: boolean
-  ready: boolean
-}
-export type ConsentAdapter = {
-  read(): ConsentState
-  subscribe(listener: (state: ConsentState) => void): () => void
-  openPreferences(): void
-}
-export type ConsentCategory = 'preferences' | 'analytics' | 'marketing'
-export type ManagedIntegration = {
-  id: string
-  src: string
-  category: ConsentCategory
-  attributes?: Record<string, string>
-  revocation: 'stop' | 'reload'
-}
-export type ConsentInstallation = {
-  provider: 'none' | 'cookiescript' | 'custom'
-  scriptURL?: string
-  integrations: ManagedIntegration[]
-  googleMode: 'basic' | 'advanced'
-}
-export type IntegrationDriver = {
-  start(integration: ManagedIntegration): Promise<void>
-  stop(id: string): Promise<'stopped' | 'reload-required'>
-}
-
-/** Always allocate a new snapshot so consumers cannot mutate shared denial. */
-export function deniedConsentState(): ConsentState {
-  return { version: 1, necessary: true, preferences: false, analytics: false, marketing: false, ready: false }
-}
-export const ConsentStateSchema = z.strictObject({
-  version: z.literal(1), necessary: z.literal(true),
-  preferences: z.boolean(), analytics: z.boolean(), marketing: z.boolean(), ready: z.boolean(),
-}).transform((state): ConsentState => state.ready ? state : deniedConsentState())
-
-/** URL parsing must not silently discard raw controls, fragments, or backslashes. */
-const HTTPSURLSchema = z.string().max(2048).refine((source) => {
-  if (/[\s\\#]/.test(source)) return false
-  try {
-    const url = new URL(source)
-    return url.protocol === 'https:' && !!url.hostname && !url.username && !url.password && !source.includes('@')
-  } catch { return false }
-}, 'Expected an HTTPS URL without userinfo, fragments, whitespace or backslashes.')
-  .transform((source) => new URL(source).href)
-
-export function isCookieScriptURL(source: string): boolean {
-  const parsed = HTTPSURLSchema.safeParse(source)
-  return parsed.success && /^https:\/\/(?:cdn|dev-cdn)\.cookie-script\.com\/s\/[a-fA-F0-9]{32}\.js$/.test(parsed.data)
-}
-const ElementIdSchema = z.string().min(1).max(128).regex(/^[A-Za-z][A-Za-z0-9_:.-]*$/)
-// Only standard attributes are shipped. No data-* key is approved for this release.
-const AttributesSchema = z.strictObject({
-  id: ElementIdSchema.optional(),
-  charset: z.string().max(40).regex(/^[A-Za-z0-9._-]+$/).transform((value) => value.toLowerCase()).optional(),
-  crossorigin: z.enum(['anonymous', 'use-credentials']).optional(),
-  integrity: z.string().max(1024).refine((value) => value.split(' ').every((token) =>
-    /^sha256-[A-Za-z0-9+/]{43}=$/.test(token) ||
-    /^sha384-[A-Za-z0-9+/]{64}$/.test(token) ||
-    /^sha512-[A-Za-z0-9+/]{86}==$/.test(token)), 'Expected SHA-256, SHA-384 or SHA-512 SRI digests.').optional(),
-})
-const IntegrationFields = z.strictObject({
-  id: z.string().trim().min(1).max(128).regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]*$/),
-  src: HTTPSURLSchema,
-  category: z.enum(['preferences', 'analytics', 'marketing']),
-  attributes: AttributesSchema.optional(),
-  revocation: z.enum(['stop', 'reload']),
-})
-export const ManagedIntegrationSchema = IntegrationFields
-const InstallationFields = z.strictObject({
-  provider: z.enum(['none', 'cookiescript', 'custom']),
-  scriptURL: HTTPSURLSchema.optional(),
-  integrations: z.array(ManagedIntegrationSchema).max(100).default([]),
-  googleMode: z.enum(['basic', 'advanced']).default('basic'),
-})
-function validateInstallation(value: ConsentInstallation, context: z.RefinementCtx) {
-  if (value.provider !== 'none' && !value.scriptURL) {
-    context.addIssue({ code: 'custom', path: ['scriptURL'], message: 'An active provider requires an installation URL.' })
-  } else if (value.provider === 'none' && value.scriptURL) {
-    context.addIssue({ code: 'custom', path: ['scriptURL'], message: 'No provider cannot install a script.' })
-  } else if (value.provider === 'cookiescript' && !isCookieScriptURL(value.scriptURL!)) {
-    context.addIssue({ code: 'custom', path: ['scriptURL'], message: 'Use a direct global CookieScript production or staging installation; geographic wrappers are unsupported.' })
-  }
-  const ids = new Set<string>()
-  value.integrations.forEach((integration, index) => {
-    if (ids.has(integration.id)) context.addIssue({ code: 'custom', path: ['integrations', index, 'id'], message: 'Integration IDs must be unique within the site.' })
-    ids.add(integration.id)
-  })
-}
-export const ConsentInstallationSchema = InstallationFields.superRefine(validateInstallation)
-/** Readers tolerate additive fields but retain only known validated installation data. */
-export const PublicConsentInstallationSchema = InstallationFields.loose().extend({
-  integrations: z.array(IntegrationFields.loose().transform((row) => ManagedIntegrationSchema.parse({
-    id: row.id, src: row.src, category: row.category, revocation: row.revocation,
-    ...(row.attributes ? { attributes: row.attributes } : {}),
-  }))).max(100).default([]),
-}).superRefine(validateInstallation).transform((row) => ConsentInstallationSchema.parse({
-  provider: row.provider, ...(row.scriptURL ? { scriptURL: row.scriptURL } : {}),
-  integrations: row.integrations, googleMode: row.googleMode,
-}))
-
-export type ManagedIntegrationClassification =
-  | { kind: 'ga4'; measurementId: string }
-  | { kind: 'contentsquare'; tagId: string }
-  | { kind: 'custom' }
-/** Shared by permissions and drivers. Caller IDs and known hosts confer no authority. */
-export function classifyManagedIntegration(input: unknown): ManagedIntegrationClassification {
-  const parsed = ManagedIntegrationSchema.safeParse(input)
-  if (!parsed.success) return { kind: 'custom' }
-  const row = parsed.data
-  if (row.category !== 'analytics' ||
-    (row.attributes?.charset !== undefined && row.attributes.charset !== 'utf-8') ||
-    (row.attributes?.crossorigin !== undefined && row.attributes.crossorigin !== 'anonymous')) return { kind: 'custom' }
-  // The 1–32 suffix bound is a U90 supported-input limit, not vendor certification.
-  const ga = /^https:\/\/www\.googletagmanager\.com\/gtag\/js\?id=(G-[A-Z0-9]{1,32})$/.exec(row.src)
-  if (ga) return { kind: 'ga4', measurementId: ga[1] }
-  const cs = /^https:\/\/t\.contentsquare\.net\/uxa\/([a-f0-9]{13})\.js$/.exec(row.src)
-  if (cs && row.revocation === 'reload') return { kind: 'contentsquare', tagId: cs[1] }
-  return { kind: 'custom' }
-}
-
-function customConfiguration(installation?: ConsentInstallation): string {
-  if (!installation) return JSON.stringify({ provider: null, integrations: [] })
-  const normalized = ConsentInstallationSchema.parse(installation)
-  return JSON.stringify({
-    provider: normalized.provider === 'custom' ? normalized.scriptURL : null,
-    integrations: normalized.integrations.filter((row) => classifyManagedIntegration(row).kind === 'custom')
-      .sort((a, b) => a.id.localeCompare(b.id)).map((row) => ({
-        id: row.id, src: row.src, category: row.category, revocation: row.revocation,
-        attributes: Object.fromEntries(Object.entries(row.attributes ?? {}).sort(([a], [b]) => a.localeCompare(b))),
-      })),
-  })
-}
-export type ConsentConfiguration = { enabled: boolean; installation?: ConsentInstallation }
-/** The protected writer and all feature toggles must use this same before/after check. */
-export function consentChangeRequiresCodeWrite(before: ConsentConfiguration, after: ConsentConfiguration): boolean {
-  const oldCustom = customConfiguration(before.installation)
-  const newCustom = customConfiguration(after.installation)
-  const wasActive = before.enabled && !!before.installation && before.installation.provider !== 'none'
-  const willBeActive = after.enabled && !!after.installation && after.installation.provider !== 'none'
-  const activates = (!before.enabled && after.enabled) || (!wasActive && willBeActive)
-  return oldCustom !== newCustom || (activates && newCustom !== customConfiguration())
-}

package/src/features/server/ConsentDefaults.tsx

@@ -1,15 +0,0 @@
-import Script from 'next/script'
-import { CONSENT_DEFAULTS_ID, CONSENT_DEFAULTS_SCRIPT } from '../consent/defaults'
-/** Mount once in the consuming server root layout, before SiteFeatures. */
-export function ConsentDefaults() {
-  return (
-    // App Router consumers mount this wrapper in their root layout. This rule
-    // uses the Pages Router _document filename heuristic for reusable packages.
-    // eslint-disable-next-line @next/next/no-before-interactive-script-outside-document
-    <Script
-      id={CONSENT_DEFAULTS_ID}
-      strategy="beforeInteractive"
-      dangerouslySetInnerHTML={{ __html: CONSENT_DEFAULTS_SCRIPT }}
-    />
-  )
-}