@vectoriox/iox-ui 5.2.0 → 5.4.0

package/consent-core/index.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as
+ * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,
+ * the builder for design-time preview — ONE implementation of what a decision is.
+ */
+declare enum ConsentCategory {
+    /** Always on, never user-controllable — the site working at all. */
+    Necessary = "necessary",
+    Analytics = "analytics",
+    Marketing = "marketing"
+}
+/** A visitor's recorded decision. `necessary` is implied true and never stored as false. */
+interface ConsentDecision {
+    categories: Partial<Record<ConsentCategory, boolean>>;
+    /** Bumping the org's policy version invalidates every prior decision. */
+    policyVersion: string;
+    /** ISO timestamp of the decision. */
+    decidedAt: string;
+    anonymousId: string;
+}
+/** A fresh "nothing granted" decision skeleton — used when a visitor must be asked. */
+declare function emptyDecision(anonymousId: string, policyVersion: string, now?: Date): ConsentDecision;
+/** `null` (no decision yet) grants nothing; `necessary` is always granted. */
+declare function hasConsent(decision: ConsentDecision | null | undefined, category: ConsentCategory): boolean;
+/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */
+declare function isExpired(decision: ConsentDecision, now: Date, maxMonths: number): boolean;
+/**
+ * The function the dead fork got wrong: **a recorded "no" is a decision.** The banner shows only
+ * when there is no decision, the decision expired, or the policy version moved on — never because
+ * the visitor declined.
+ */
+declare function needsPrompt(decision: ConsentDecision | null | undefined, policyVersion: string, now?: Date, maxMonths?: number): boolean;
+
+/** First-party cookie name — the visitor's browser carries the proof (D-C1). */
+declare const CONSENT_COOKIE_NAME = "iox-consent";
+/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */
+declare function encode(decision: ConsentDecision): string;
+/**
+ * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`
+ * ("no decision"), never a throw and never a guess. The old fork threw its way to a re-prompt.
+ */
+declare function decode(raw: string | null | undefined): ConsentDecision | null;
+/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */
+declare function cookieAttributes(maxMonths?: number): string;
+
+/**
+ * Google Consent Mode v2 (consent plan §4): four parameters, mandatory for EEA/UK measurement
+ * since March 2024. Our categories map onto them; `necessary` maps to none.
+ */
+type ConsentModeSignal = 'granted' | 'denied';
+declare const CONSENT_MODE_PARAMS: readonly ["analytics_storage", "ad_storage", "ad_user_data", "ad_personalization"];
+/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */
+declare const CONSENT_DEFAULTS_DENIED: Readonly<Record<(typeof CONSENT_MODE_PARAMS)[number], ConsentModeSignal>>;
+/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */
+declare function toConsentModeSignals(decision: ConsentDecision | null | undefined): Record<string, ConsentModeSignal>;
+/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */
+declare function consentModeBootstrapJs(): string;
+
+export { CONSENT_COOKIE_NAME, CONSENT_DEFAULTS_DENIED, CONSENT_MODE_PARAMS, ConsentCategory, consentModeBootstrapJs, cookieAttributes, decode, emptyDecision, encode, hasConsent, isExpired, needsPrompt, toConsentModeSignals };
+export type { ConsentDecision, ConsentModeSignal };

package/consent-core/package.json

@@ -0,0 +1,3 @@
+{
+  "module": "../fesm2022/vectoriox-iox-ui-consent-core.mjs"
+}

package/fesm2022/vectoriox-iox-ui-consent-core.mjs

@@ -0,0 +1,141 @@
+/**
+ * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as
+ * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,
+ * the builder for design-time preview — ONE implementation of what a decision is.
+ */
+var ConsentCategory;
+(function (ConsentCategory) {
+    /** Always on, never user-controllable — the site working at all. */
+    ConsentCategory["Necessary"] = "necessary";
+    ConsentCategory["Analytics"] = "analytics";
+    ConsentCategory["Marketing"] = "marketing";
+})(ConsentCategory || (ConsentCategory = {}));
+/** A fresh "nothing granted" decision skeleton — used when a visitor must be asked. */
+function emptyDecision(anonymousId, policyVersion, now = new Date()) {
+    return {
+        categories: { [ConsentCategory.Necessary]: true },
+        policyVersion,
+        decidedAt: now.toISOString(),
+        anonymousId,
+    };
+}
+/** `null` (no decision yet) grants nothing; `necessary` is always granted. */
+function hasConsent(decision, category) {
+    if (category === ConsentCategory.Necessary)
+        return true;
+    if (!decision)
+        return false;
+    return decision.categories?.[category] === true;
+}
+/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */
+function isExpired(decision, now, maxMonths) {
+    const decided = new Date(decision.decidedAt);
+    if (Number.isNaN(decided.getTime()))
+        return true;
+    const expiry = new Date(decided);
+    expiry.setMonth(expiry.getMonth() + maxMonths);
+    return now >= expiry;
+}
+/**
+ * The function the dead fork got wrong: **a recorded "no" is a decision.** The banner shows only
+ * when there is no decision, the decision expired, or the policy version moved on — never because
+ * the visitor declined.
+ */
+function needsPrompt(decision, policyVersion, now = new Date(), maxMonths = 12) {
+    if (!decision)
+        return true;
+    if (decision.policyVersion !== policyVersion)
+        return true;
+    return isExpired(decision, now, maxMonths);
+}
+
+/** First-party cookie name — the visitor's browser carries the proof (D-C1). */
+const CONSENT_COOKIE_NAME = 'iox-consent';
+/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */
+function encode(decision) {
+    return JSON.stringify({ v: 1, ...decision });
+}
+/**
+ * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`
+ * ("no decision"), never a throw and never a guess. The old fork threw its way to a re-prompt.
+ */
+function decode(raw) {
+    if (!raw)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return null;
+        if (typeof parsed.anonymousId !== 'string' || !parsed.anonymousId)
+            return null;
+        if (typeof parsed.policyVersion !== 'string')
+            return null;
+        if (!parsed.categories || typeof parsed.categories !== 'object' || Array.isArray(parsed.categories))
+            return null;
+        const categories = {};
+        for (const [k, v] of Object.entries(parsed.categories)) {
+            categories[k] = v === true;
+        }
+        categories[ConsentCategory.Necessary] = true;
+        return {
+            categories,
+            policyVersion: parsed.policyVersion,
+            decidedAt: typeof parsed.decidedAt === 'string' ? parsed.decidedAt : '',
+            anonymousId: parsed.anonymousId,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */
+function cookieAttributes(maxMonths = 12) {
+    const maxAge = Math.floor(maxMonths * 30.44 * 24 * 60 * 60);
+    return `Path=/; Max-Age=${maxAge}; SameSite=Lax; Secure`;
+}
+
+const CONSENT_MODE_PARAMS = [
+    'analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization',
+];
+/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */
+const CONSENT_DEFAULTS_DENIED = Object.freeze({
+    analytics_storage: 'denied',
+    ad_storage: 'denied',
+    ad_user_data: 'denied',
+    ad_personalization: 'denied',
+});
+/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */
+function toConsentModeSignals(decision) {
+    const analytics = hasConsent(decision ?? null, ConsentCategory.Analytics) ? 'granted' : 'denied';
+    const marketing = hasConsent(decision ?? null, ConsentCategory.Marketing) ? 'granted' : 'denied';
+    return {
+        analytics_storage: analytics,
+        ad_storage: marketing,
+        ad_user_data: marketing,
+        ad_personalization: marketing,
+    };
+}
+/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */
+function consentModeBootstrapJs() {
+    return "window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}" +
+        `gtag('consent','default',${JSON.stringify(CONSENT_DEFAULTS_DENIED)});`;
+}
+
+/**
+ * @vectoriox/iox-ui/consent-core — the shared, FRAMEWORK-FREE core of visitor consent.
+ *
+ * What a decision IS (`needsPrompt`: a recorded "no" is a decision), how it travels (a tolerant
+ * first-party cookie), and what it tells Google (Consent Mode v2 signals, denied-by-default).
+ * Consumed by the SSR engine (the gate, C2), the builder (banner preview, C3) and iox-cms (the
+ * optional per-org log, C4) — the fourth entry point on the forms-core pattern, replacing the
+ * dead byte-identical fork C0 deleted.
+ * ⚠️ Consumers wire the usual trio — ng-package raw-ts assets, jest moduleNameMapper, tsconfig
+ * paths — or `nest start` dies with ERR_REQUIRE_ESM while jest and build both pass.
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { CONSENT_COOKIE_NAME, CONSENT_DEFAULTS_DENIED, CONSENT_MODE_PARAMS, ConsentCategory, consentModeBootstrapJs, cookieAttributes, decode, emptyDecision, encode, hasConsent, isExpired, needsPrompt, toConsentModeSignals };
+//# sourceMappingURL=vectoriox-iox-ui-consent-core.mjs.map

package/fesm2022/vectoriox-iox-ui-consent-core.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectoriox-iox-ui-consent-core.mjs","sources":["../../../projects/iox-ui/src/consent-core/consent.model.ts","../../../projects/iox-ui/src/consent-core/storage.ts","../../../projects/iox-ui/src/consent-core/consent-mode.ts","../../../projects/iox-ui/src/consent-core/public-api.ts","../../../projects/iox-ui/src/consent-core/vectoriox-iox-ui-consent-core.ts"],"sourcesContent":["/**\n * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as\n * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,\n * the builder for design-time preview — ONE implementation of what a decision is.\n */\n\nexport enum ConsentCategory {\n    /** Always on, never user-controllable — the site working at all. */\n    Necessary = 'necessary',\n    Analytics = 'analytics',\n    Marketing = 'marketing',\n}\n\n/** A visitor's recorded decision. `necessary` is implied true and never stored as false. */\nexport interface ConsentDecision {\n    categories: Partial<Record<ConsentCategory, boolean>>;\n    /** Bumping the org's policy version invalidates every prior decision. */\n    policyVersion: string;\n    /** ISO timestamp of the decision. */\n    decidedAt: string;\n    anonymousId: string;\n}\n\n/** A fresh \"nothing granted\" decision skeleton — used when a visitor must be asked. */\nexport function emptyDecision(anonymousId: string, policyVersion: string, now: Date = new Date()): ConsentDecision {\n    return {\n        categories: { [ConsentCategory.Necessary]: true },\n        policyVersion,\n        decidedAt: now.toISOString(),\n        anonymousId,\n    };\n}\n\n/** `null` (no decision yet) grants nothing; `necessary` is always granted. */\nexport function hasConsent(decision: ConsentDecision | null | undefined, category: ConsentCategory): boolean {\n    if (category === ConsentCategory.Necessary) return true;\n    if (!decision) return false;\n    return decision.categories?.[category] === true;\n}\n\n/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */\nexport function isExpired(decision: ConsentDecision, now: Date, maxMonths: number): boolean {\n    const decided = new Date(decision.decidedAt);\n    if (Number.isNaN(decided.getTime())) return true;\n    const expiry = new Date(decided);\n    expiry.setMonth(expiry.getMonth() + maxMonths);\n    return now >= expiry;\n}\n\n/**\n * The function the dead fork got wrong: **a recorded \"no\" is a decision.** The banner shows only\n * when there is no decision, the decision expired, or the policy version moved on — never because\n * the visitor declined.\n */\nexport function needsPrompt(\n    decision: ConsentDecision | null | undefined,\n    policyVersion: string,\n    now: Date = new Date(),\n    maxMonths = 12,\n): boolean {\n    if (!decision) return true;\n    if (decision.policyVersion !== policyVersion) return true;\n    return isExpired(decision, now, maxMonths);\n}\n","import { ConsentCategory, ConsentDecision } from './consent.model';\n\n/** First-party cookie name — the visitor's browser carries the proof (D-C1). */\nexport const CONSENT_COOKIE_NAME = 'iox-consent';\n\n/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */\nexport function encode(decision: ConsentDecision): string {\n    return JSON.stringify({ v: 1, ...decision });\n}\n\n/**\n * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`\n * (\"no decision\"), never a throw and never a guess. The old fork threw its way to a re-prompt.\n */\nexport function decode(raw: string | null | undefined): ConsentDecision | null {\n    if (!raw) return null;\n    try {\n        const parsed = JSON.parse(raw);\n        if (!parsed || typeof parsed !== 'object') return null;\n        if (typeof parsed.anonymousId !== 'string' || !parsed.anonymousId) return null;\n        if (typeof parsed.policyVersion !== 'string') return null;\n        if (!parsed.categories || typeof parsed.categories !== 'object' || Array.isArray(parsed.categories)) return null;\n        const categories: Partial<Record<ConsentCategory, boolean>> = {};\n        for (const [k, v] of Object.entries(parsed.categories)) {\n            categories[k as ConsentCategory] = v === true;\n        }\n        categories[ConsentCategory.Necessary] = true;\n        return {\n            categories,\n            policyVersion: parsed.policyVersion,\n            decidedAt: typeof parsed.decidedAt === 'string' ? parsed.decidedAt : '',\n            anonymousId: parsed.anonymousId,\n        };\n    } catch {\n        return null;\n    }\n}\n\n/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */\nexport function cookieAttributes(maxMonths = 12): string {\n    const maxAge = Math.floor(maxMonths * 30.44 * 24 * 60 * 60);\n    return `Path=/; Max-Age=${maxAge}; SameSite=Lax; Secure`;\n}\n","import { ConsentCategory, ConsentDecision, hasConsent } from './consent.model';\n\n/**\n * Google Consent Mode v2 (consent plan §4): four parameters, mandatory for EEA/UK measurement\n * since March 2024. Our categories map onto them; `necessary` maps to none.\n */\nexport type ConsentModeSignal = 'granted' | 'denied';\n\nexport const CONSENT_MODE_PARAMS = [\n    'analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization',\n] as const;\n\n/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */\nexport const CONSENT_DEFAULTS_DENIED: Readonly<Record<(typeof CONSENT_MODE_PARAMS)[number], ConsentModeSignal>> =\n    Object.freeze({\n        analytics_storage: 'denied',\n        ad_storage: 'denied',\n        ad_user_data: 'denied',\n        ad_personalization: 'denied',\n    });\n\n/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */\nexport function toConsentModeSignals(decision: ConsentDecision | null | undefined): Record<string, ConsentModeSignal> {\n    const analytics: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Analytics) ? 'granted' : 'denied';\n    const marketing: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Marketing) ? 'granted' : 'denied';\n    return {\n        analytics_storage: analytics,\n        ad_storage: marketing,\n        ad_user_data: marketing,\n        ad_personalization: marketing,\n    };\n}\n\n/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */\nexport function consentModeBootstrapJs(): string {\n    return \"window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}\" +\n        `gtag('consent','default',${JSON.stringify(CONSENT_DEFAULTS_DENIED)});`;\n}\n","/**\n * @vectoriox/iox-ui/consent-core — the shared, FRAMEWORK-FREE core of visitor consent.\n *\n * What a decision IS (`needsPrompt`: a recorded \"no\" is a decision), how it travels (a tolerant\n * first-party cookie), and what it tells Google (Consent Mode v2 signals, denied-by-default).\n * Consumed by the SSR engine (the gate, C2), the builder (banner preview, C3) and iox-cms (the\n * optional per-org log, C4) — the fourth entry point on the forms-core pattern, replacing the\n * dead byte-identical fork C0 deleted.\n * ⚠️ Consumers wire the usual trio — ng-package raw-ts assets, jest moduleNameMapper, tsconfig\n * paths — or `nest start` dies with ERR_REQUIRE_ESM while jest and build both pass.\n */\nexport * from './consent.model';\nexport * from './storage';\nexport * from './consent-mode';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":"AAAA;;;;AAIG;IAES;AAAZ,CAAA,UAAY,eAAe,EAAA;;AAEvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AAC3B,CAAC,EALW,eAAe,KAAf,eAAe,GAAA,EAAA,CAAA,CAAA;AAiB3B;AACM,SAAU,aAAa,CAAC,WAAmB,EAAE,aAAqB,EAAE,GAAA,GAAY,IAAI,IAAI,EAAE,EAAA;IAC5F,OAAO;QACH,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,GAAG,IAAI,EAAE;QACjD,aAAa;AACb,QAAA,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,WAAW;KACd;AACL;AAEA;AACM,SAAU,UAAU,CAAC,QAA4C,EAAE,QAAyB,EAAA;AAC9F,IAAA,IAAI,QAAQ,KAAK,eAAe,CAAC,SAAS;AAAE,QAAA,OAAO,IAAI;AACvD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,OAAO,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,IAAI;AACnD;AAEA;SACgB,SAAS,CAAC,QAAyB,EAAE,GAAS,EAAE,SAAiB,EAAA;IAC7E,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AAAE,QAAA,OAAO,IAAI;AAChD,IAAA,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC;IAChC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC;IAC9C,OAAO,GAAG,IAAI,MAAM;AACxB;AAEA;;;;AAIG;AACG,SAAU,WAAW,CACvB,QAA4C,EAC5C,aAAqB,EACrB,GAAA,GAAY,IAAI,IAAI,EAAE,EACtB,SAAS,GAAG,EAAE,EAAA;AAEd,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI;AAC1B,IAAA,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa;AAAE,QAAA,OAAO,IAAI;IACzD,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;AAC9C;;AC7DA;AACO,MAAM,mBAAmB,GAAG;AAEnC;AACM,SAAU,MAAM,CAAC,QAAyB,EAAA;AAC5C,IAAA,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;AAChD;AAEA;;;AAGG;AACG,SAAU,MAAM,CAAC,GAA8B,EAAA;AACjD,IAAA,IAAI,CAAC,GAAG;AAAE,QAAA,OAAO,IAAI;AACrB,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,QAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI;QACtD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;AAAE,YAAA,OAAO,IAAI;AAC9E,QAAA,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI;AACzD,QAAA,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;AAAE,YAAA,OAAO,IAAI;QAChH,MAAM,UAAU,GAA8C,EAAE;AAChE,QAAA,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;AACpD,YAAA,UAAU,CAAC,CAAoB,CAAC,GAAG,CAAC,KAAK,IAAI;QACjD;AACA,QAAA,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,IAAI;QAC5C,OAAO;YACH,UAAU;YACV,aAAa,EAAE,MAAM,CAAC,aAAa;AACnC,YAAA,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,EAAE;YACvE,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC;IACL;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAI;IACf;AACJ;AAEA;AACM,SAAU,gBAAgB,CAAC,SAAS,GAAG,EAAE,EAAA;AAC3C,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC3D,OAAO,CAAA,gBAAA,EAAmB,MAAM,CAAA,sBAAA,CAAwB;AAC5D;;AClCO,MAAM,mBAAmB,GAAG;AAC/B,IAAA,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB;;AAG3E;AACO,MAAM,uBAAuB,GAChC,MAAM,CAAC,MAAM,CAAC;AACV,IAAA,iBAAiB,EAAE,QAAQ;AAC3B,IAAA,UAAU,EAAE,QAAQ;AACpB,IAAA,YAAY,EAAE,QAAQ;AACtB,IAAA,kBAAkB,EAAE,QAAQ;AAC/B,CAAA;AAEL;AACM,SAAU,oBAAoB,CAAC,QAA4C,EAAA;IAC7E,MAAM,SAAS,GAAsB,UAAU,CAAC,QAAQ,IAAI,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ;IACnH,MAAM,SAAS,GAAsB,UAAU,CAAC,QAAQ,IAAI,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ;IACnH,OAAO;AACH,QAAA,iBAAiB,EAAE,SAAS;AAC5B,QAAA,UAAU,EAAE,SAAS;AACrB,QAAA,YAAY,EAAE,SAAS;AACvB,QAAA,kBAAkB,EAAE,SAAS;KAChC;AACL;AAEA;SACgB,sBAAsB,GAAA;AAClC,IAAA,OAAO,mFAAmF;AACtF,QAAA,CAAA,yBAAA,EAA4B,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAAI;AAC/E;;ACrCA;;;;;;;;;;AAUG;;ACVH;;AAEG;;;;"}

package/fesm2022/vectoriox-iox-ui.mjs

@@ -4995,6 +4995,95 @@ function compileTokenCss(tokens) {
     };
 }
 
+/** trait → `var(--iox-<token>, <packValue>)` for one node type. Unknown type → {}. */
+function resolveFlavorDefaults(type, pack) {
+    const map = pack?.defaults?.[type];
+    if (!map)
+        return {};
+    const byName = new Map((pack.tokens ?? []).map(t => [t.name, t.value]));
+    const out = {};
+    for (const [trait, tokenName] of Object.entries(map)) {
+        const fallback = byName.get(tokenName);
+        if (fallback === undefined)
+            continue; // validator fails the build; runtime stays safe
+        out[trait] = `var(--iox-${tokenName}, ${fallback})`;
+    }
+    return out;
+}
+/**
+ * The ENGINE's half of the cascade: kebab `prop: var(…)` declarations for every pack default
+ * the node's persisted styleProps does NOT set. Appended beside renderDefaultDeclarations —
+ * same guard-on-undefined discipline, so a node saved post-F1 (var already serialised via the
+ * builder's trait defaults) is untouched, and a legacy node picks the pack default up at
+ * render time. Node styleProps always wins.
+ */
+function flavorDefaultDeclarations(type, styleProps, pack) {
+    const sp = styleProps ?? {};
+    const out = [];
+    for (const [trait, value] of Object.entries(resolveFlavorDefaults(type, pack))) {
+        if (sp[trait] === undefined)
+            out.push(`${styleKeyToKebab(trait)}: ${value}`);
+    }
+    return out;
+}
+/**
+ * The CI gate (flavors plan §10 C4): a pack may only name types and traits that exist in the
+ * live component registry, and tokens it defines itself. Returns human-readable errors; a
+ * consumer spec feeds it the REAL registry and asserts [].
+ */
+function validateFlavorPack(pack, knownTraitsByType) {
+    const errors = [];
+    const tokenNames = new Set((pack.tokens ?? []).map(t => t.name));
+    for (const t of pack.tokens ?? []) {
+        if (!t.name)
+            errors.push(`${pack.id}: token with empty name`);
+        if (!t.value)
+            errors.push(`${pack.id}: token "${t.name}" has no value`);
+    }
+    for (const [type, traits] of Object.entries(pack.defaults ?? {})) {
+        const known = knownTraitsByType[type];
+        if (!known) {
+            errors.push(`${pack.id}: unknown component type "${type}"`);
+            continue;
+        }
+        const knownSet = known instanceof Set ? known : new Set(known);
+        for (const [trait, tokenName] of Object.entries(traits)) {
+            if (!knownSet.has(trait))
+                errors.push(`${pack.id}: "${type}" has no style trait "${trait}"`);
+            if (!tokenNames.has(tokenName))
+                errors.push(`${pack.id}: "${type}.${trait}" references undefined token "${tokenName}"`);
+            if (/[:(]|^#|\d/.test(tokenName))
+                errors.push(`${pack.id}: "${type}.${trait}" must name a token, not a value ("${tokenName}")`);
+        }
+    }
+    return errors;
+}
+/**
+ * Swiss — the default pack (flavors plan §8: "the flavor that can never embarrass anyone").
+ * Deliberately SMALL at F1: radius + control padding on the clickables, surface radius on Card.
+ * Colour, type and motion arrive with the brand step (F2) — a colour default here would repaint
+ * legacy pages before anyone chose anything.
+ */
+const SWISS_FLAVOR = {
+    id: 'swiss',
+    version: 1,
+    label: 'Swiss',
+    blurb: 'Grid discipline, hairline rules, near-zero motion.',
+    tokens: [
+        { name: 'radius-control', value: '4px', type: 'size', group: 'radius' },
+        { name: 'radius-surface', value: '4px', type: 'size', group: 'radius' },
+        { name: 'space-control', value: '10px 18px', type: 'spacing', group: 'space' },
+        { name: 'space-stack', value: '12px', type: 'spacing', group: 'space' },
+    ],
+    defaults: {
+        Button: { borderRadius: 'radius-control', padding: 'space-control' },
+        ButtonBlock: { borderRadius: 'radius-control', padding: 'space-control' },
+        Card: { borderRadius: 'radius-surface' },
+    },
+};
+/** What both renderers use until F2 lets an org choose. */
+const DEFAULT_FLAVOR = SWISS_FLAVOR;
+
 /**
  * page-style — the ONE compiler that turns a page's style settings into CSS.
  *
@@ -6832,5 +6921,5 @@ function effectiveTransitionId(anim) {
  * Generated bundle index. Do not edit.
  */
 
-export { AOSService, BREAKPOINTS, Breakpoint, BreakpointQueryKind, BuilderButtonComponent, BuilderDividerComponent, BuilderHeadingComponent, BuilderIconComponent, BuilderImageComponent, BuilderLinkComponent, BuilderSpacerComponent, ButtonBlockComponent, CONTEXT_ACTION_TYPES, CardComponent, ClientGalleryComponent, ClientListComponent, ClientListItemComponent, ClientRepeaterComponent, ClientSliderContainerComponent, ClientSliderSlideComponent, ComponentInstanceRegistryService, ContainerComponent, ContextStore, DEFAULT_GALLERY_SCHEDULER, DEFAULT_PAGE_TRANSITION, DEFAULT_PAGE_TRANSITION_DURATION, DEFAULT_PAGE_TRANSITION_EASING, DEFAULT_PAGE_TRANSITION_PERSPECTIVE, DEFAULT_PHOSPHOR_WEIGHT, DEFAULT_WIDTH_BY_TYPE, DeclarationContext, FormRenderState, FormRuntimeService, GALLERY_EFFECTS, GALLERY_EFFECT_DESCRIPTORS, GalleryLoop, IOX_BUILDER_EVENTS, IOX_FORM_MESSAGES, IOX_FORM_NAVIGATOR, IOX_FORM_TRANSPORT, IS_PREVIEW, IoxAnimateContainer, IoxAosDirective, IoxAosModule, IoxBuilderComponentsModule, IoxComponentRegistryService, IoxFieldComponent, IoxFormComponent, IoxFormErrorComponent, IoxFormSuccessComponent, IoxPageComponent, IoxPageModule, IoxSubmitButtonComponent, IoxUiModule, LinkedContainerComponent, PAGE_TRANSITION_CATEGORIES, PAGE_TRANSITION_PRESETS, PART_CLASS_NAMES, PIPE_DESCRIPTORS, PIPE_REGISTRY, PageScrollProvider, RESERVED_ALIAS_PREFIX, SUPPRESSED_STYLE_PROPS_BY_TYPE, SWIPER_RESPONSIVE_TRAITS, SectionComponent, TRANSITION_FEELS, TextBlockComponent, VALIDATION_STATES, VALIDATION_STATE_CLASS, VIRTUAL_TRAIT_GROUPS, VIRTUAL_TRAIT_KEYS, ViewPositionDirective, ViewPositionModule, activeActions, applyBindingPipes, applyFeel, breakpointDef, breakpointForWidth, breakpointQueryFor, buildDataSourceFilter, buildPartSelector, buildRelatedFilter, buildSwiperBreakpoints, buildTargetedStateSelector, buildTransitionTimeline, cascadeChain, clearInputOverride, clearOverride, collectContextSlotKeys, collectReferencedAliases, compileDeclarations, compilePageStyle, compileTokenCss, composeVirtualTraits, computeRelative, contextActionEffect, contextSlotKeys, countOverrides, dataSourcePlanToRequest, declaredInputNames, defaultMessageResolver, deriveSeoFromContent, describeSeoFields, effectiveTransitionId, excludeSelf, feelFor, getByPath, getSeoValue, initialSlotValues, isActionEnabled, isContextAction, isInputOverriddenAt, isOverriddenAt, isReservedAlias, isValidSlotKey, legacyEnterToTransition, matchRouteParams, mediaQueryFor, mergeSwiperBreakpoints, nearestCommonAncestorId, nodeCssId, nodeUsesContext, normalizeCollectionResult, normalizeGalleryImage, normalizeIconClass, parentBreakpoint, parseUrlList, partClassName, planDataSource, planResponsiveRules, referencedDataSources, referencedDataSourcesDeep, renderDefaultDeclarations, resetSeoField, resolveBoundValue, resolveContextValue, resolveDerivedInto, resolveGalleryEffect, resolveGalleryUrls, resolveInputChain, resolveInputs, resolvePageTransition, resolvePath, resolveRelativeInto, resolveRepeaterItems, resolveSeo, resolveSiblings, resolveSingleItemId, resolveStateStyles, resolveStyleProps, resolveValueChain, rewriteViewportUnits, safeSetInput, setInputOverride, setOverride, setSeoAuto, setSeoBinding, setSeoOverride, setSeoValue, stateNamesIn, stripSuppressedProps, styleKeyToKebab, tokensToDarkVarMap, tokensToVarMap, variableAliases, variableItemsFrom, withContextSlots, wrapInBreakpointQuery, wrapInMediaQuery };
+export { AOSService, BREAKPOINTS, Breakpoint, BreakpointQueryKind, BuilderButtonComponent, BuilderDividerComponent, BuilderHeadingComponent, BuilderIconComponent, BuilderImageComponent, BuilderLinkComponent, BuilderSpacerComponent, ButtonBlockComponent, CONTEXT_ACTION_TYPES, CardComponent, ClientGalleryComponent, ClientListComponent, ClientListItemComponent, ClientRepeaterComponent, ClientSliderContainerComponent, ClientSliderSlideComponent, ComponentInstanceRegistryService, ContainerComponent, ContextStore, DEFAULT_FLAVOR, DEFAULT_GALLERY_SCHEDULER, DEFAULT_PAGE_TRANSITION, DEFAULT_PAGE_TRANSITION_DURATION, DEFAULT_PAGE_TRANSITION_EASING, DEFAULT_PAGE_TRANSITION_PERSPECTIVE, DEFAULT_PHOSPHOR_WEIGHT, DEFAULT_WIDTH_BY_TYPE, DeclarationContext, FormRenderState, FormRuntimeService, GALLERY_EFFECTS, GALLERY_EFFECT_DESCRIPTORS, GalleryLoop, IOX_BUILDER_EVENTS, IOX_FORM_MESSAGES, IOX_FORM_NAVIGATOR, IOX_FORM_TRANSPORT, IS_PREVIEW, IoxAnimateContainer, IoxAosDirective, IoxAosModule, IoxBuilderComponentsModule, IoxComponentRegistryService, IoxFieldComponent, IoxFormComponent, IoxFormErrorComponent, IoxFormSuccessComponent, IoxPageComponent, IoxPageModule, IoxSubmitButtonComponent, IoxUiModule, LinkedContainerComponent, PAGE_TRANSITION_CATEGORIES, PAGE_TRANSITION_PRESETS, PART_CLASS_NAMES, PIPE_DESCRIPTORS, PIPE_REGISTRY, PageScrollProvider, RESERVED_ALIAS_PREFIX, SUPPRESSED_STYLE_PROPS_BY_TYPE, SWIPER_RESPONSIVE_TRAITS, SWISS_FLAVOR, SectionComponent, TRANSITION_FEELS, TextBlockComponent, VALIDATION_STATES, VALIDATION_STATE_CLASS, VIRTUAL_TRAIT_GROUPS, VIRTUAL_TRAIT_KEYS, ViewPositionDirective, ViewPositionModule, activeActions, applyBindingPipes, applyFeel, breakpointDef, breakpointForWidth, breakpointQueryFor, buildDataSourceFilter, buildPartSelector, buildRelatedFilter, buildSwiperBreakpoints, buildTargetedStateSelector, buildTransitionTimeline, cascadeChain, clearInputOverride, clearOverride, collectContextSlotKeys, collectReferencedAliases, compileDeclarations, compilePageStyle, compileTokenCss, composeVirtualTraits, computeRelative, contextActionEffect, contextSlotKeys, countOverrides, dataSourcePlanToRequest, declaredInputNames, defaultMessageResolver, deriveSeoFromContent, describeSeoFields, effectiveTransitionId, excludeSelf, feelFor, flavorDefaultDeclarations, getByPath, getSeoValue, initialSlotValues, isActionEnabled, isContextAction, isInputOverriddenAt, isOverriddenAt, isReservedAlias, isValidSlotKey, legacyEnterToTransition, matchRouteParams, mediaQueryFor, mergeSwiperBreakpoints, nearestCommonAncestorId, nodeCssId, nodeUsesContext, normalizeCollectionResult, normalizeGalleryImage, normalizeIconClass, parentBreakpoint, parseUrlList, partClassName, planDataSource, planResponsiveRules, referencedDataSources, referencedDataSourcesDeep, renderDefaultDeclarations, resetSeoField, resolveBoundValue, resolveContextValue, resolveDerivedInto, resolveFlavorDefaults, resolveGalleryEffect, resolveGalleryUrls, resolveInputChain, resolveInputs, resolvePageTransition, resolvePath, resolveRelativeInto, resolveRepeaterItems, resolveSeo, resolveSiblings, resolveSingleItemId, resolveStateStyles, resolveStyleProps, resolveValueChain, rewriteViewportUnits, safeSetInput, setInputOverride, setOverride, setSeoAuto, setSeoBinding, setSeoOverride, setSeoValue, stateNamesIn, stripSuppressedProps, styleKeyToKebab, tokensToDarkVarMap, tokensToVarMap, validateFlavorPack, variableAliases, variableItemsFrom, withContextSlots, wrapInBreakpointQuery, wrapInMediaQuery };
 //# sourceMappingURL=vectoriox-iox-ui.mjs.map