@vectoriox/iox-ui 5.3.0 → 5.4.0

package/consent-core/index.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as
+ * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,
+ * the builder for design-time preview — ONE implementation of what a decision is.
+ */
+declare enum ConsentCategory {
+    /** Always on, never user-controllable — the site working at all. */
+    Necessary = "necessary",
+    Analytics = "analytics",
+    Marketing = "marketing"
+}
+/** A visitor's recorded decision. `necessary` is implied true and never stored as false. */
+interface ConsentDecision {
+    categories: Partial<Record<ConsentCategory, boolean>>;
+    /** Bumping the org's policy version invalidates every prior decision. */
+    policyVersion: string;
+    /** ISO timestamp of the decision. */
+    decidedAt: string;
+    anonymousId: string;
+}
+/** A fresh "nothing granted" decision skeleton — used when a visitor must be asked. */
+declare function emptyDecision(anonymousId: string, policyVersion: string, now?: Date): ConsentDecision;
+/** `null` (no decision yet) grants nothing; `necessary` is always granted. */
+declare function hasConsent(decision: ConsentDecision | null | undefined, category: ConsentCategory): boolean;
+/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */
+declare function isExpired(decision: ConsentDecision, now: Date, maxMonths: number): boolean;
+/**
+ * The function the dead fork got wrong: **a recorded "no" is a decision.** The banner shows only
+ * when there is no decision, the decision expired, or the policy version moved on — never because
+ * the visitor declined.
+ */
+declare function needsPrompt(decision: ConsentDecision | null | undefined, policyVersion: string, now?: Date, maxMonths?: number): boolean;
+
+/** First-party cookie name — the visitor's browser carries the proof (D-C1). */
+declare const CONSENT_COOKIE_NAME = "iox-consent";
+/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */
+declare function encode(decision: ConsentDecision): string;
+/**
+ * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`
+ * ("no decision"), never a throw and never a guess. The old fork threw its way to a re-prompt.
+ */
+declare function decode(raw: string | null | undefined): ConsentDecision | null;
+/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */
+declare function cookieAttributes(maxMonths?: number): string;
+
+/**
+ * Google Consent Mode v2 (consent plan §4): four parameters, mandatory for EEA/UK measurement
+ * since March 2024. Our categories map onto them; `necessary` maps to none.
+ */
+type ConsentModeSignal = 'granted' | 'denied';
+declare const CONSENT_MODE_PARAMS: readonly ["analytics_storage", "ad_storage", "ad_user_data", "ad_personalization"];
+/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */
+declare const CONSENT_DEFAULTS_DENIED: Readonly<Record<(typeof CONSENT_MODE_PARAMS)[number], ConsentModeSignal>>;
+/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */
+declare function toConsentModeSignals(decision: ConsentDecision | null | undefined): Record<string, ConsentModeSignal>;
+/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */
+declare function consentModeBootstrapJs(): string;
+
+export { CONSENT_COOKIE_NAME, CONSENT_DEFAULTS_DENIED, CONSENT_MODE_PARAMS, ConsentCategory, consentModeBootstrapJs, cookieAttributes, decode, emptyDecision, encode, hasConsent, isExpired, needsPrompt, toConsentModeSignals };
+export type { ConsentDecision, ConsentModeSignal };

package/consent-core/package.json

@@ -0,0 +1,3 @@
+{
+  "module": "../fesm2022/vectoriox-iox-ui-consent-core.mjs"
+}

package/fesm2022/vectoriox-iox-ui-consent-core.mjs

@@ -0,0 +1,141 @@
+/**
+ * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as
+ * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,
+ * the builder for design-time preview — ONE implementation of what a decision is.
+ */
+var ConsentCategory;
+(function (ConsentCategory) {
+    /** Always on, never user-controllable — the site working at all. */
+    ConsentCategory["Necessary"] = "necessary";
+    ConsentCategory["Analytics"] = "analytics";
+    ConsentCategory["Marketing"] = "marketing";
+})(ConsentCategory || (ConsentCategory = {}));
+/** A fresh "nothing granted" decision skeleton — used when a visitor must be asked. */
+function emptyDecision(anonymousId, policyVersion, now = new Date()) {
+    return {
+        categories: { [ConsentCategory.Necessary]: true },
+        policyVersion,
+        decidedAt: now.toISOString(),
+        anonymousId,
+    };
+}
+/** `null` (no decision yet) grants nothing; `necessary` is always granted. */
+function hasConsent(decision, category) {
+    if (category === ConsentCategory.Necessary)
+        return true;
+    if (!decision)
+        return false;
+    return decision.categories?.[category] === true;
+}
+/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */
+function isExpired(decision, now, maxMonths) {
+    const decided = new Date(decision.decidedAt);
+    if (Number.isNaN(decided.getTime()))
+        return true;
+    const expiry = new Date(decided);
+    expiry.setMonth(expiry.getMonth() + maxMonths);
+    return now >= expiry;
+}
+/**
+ * The function the dead fork got wrong: **a recorded "no" is a decision.** The banner shows only
+ * when there is no decision, the decision expired, or the policy version moved on — never because
+ * the visitor declined.
+ */
+function needsPrompt(decision, policyVersion, now = new Date(), maxMonths = 12) {
+    if (!decision)
+        return true;
+    if (decision.policyVersion !== policyVersion)
+        return true;
+    return isExpired(decision, now, maxMonths);
+}
+
+/** First-party cookie name — the visitor's browser carries the proof (D-C1). */
+const CONSENT_COOKIE_NAME = 'iox-consent';
+/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */
+function encode(decision) {
+    return JSON.stringify({ v: 1, ...decision });
+}
+/**
+ * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`
+ * ("no decision"), never a throw and never a guess. The old fork threw its way to a re-prompt.
+ */
+function decode(raw) {
+    if (!raw)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object')
+            return null;
+        if (typeof parsed.anonymousId !== 'string' || !parsed.anonymousId)
+            return null;
+        if (typeof parsed.policyVersion !== 'string')
+            return null;
+        if (!parsed.categories || typeof parsed.categories !== 'object' || Array.isArray(parsed.categories))
+            return null;
+        const categories = {};
+        for (const [k, v] of Object.entries(parsed.categories)) {
+            categories[k] = v === true;
+        }
+        categories[ConsentCategory.Necessary] = true;
+        return {
+            categories,
+            policyVersion: parsed.policyVersion,
+            decidedAt: typeof parsed.decidedAt === 'string' ? parsed.decidedAt : '',
+            anonymousId: parsed.anonymousId,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */
+function cookieAttributes(maxMonths = 12) {
+    const maxAge = Math.floor(maxMonths * 30.44 * 24 * 60 * 60);
+    return `Path=/; Max-Age=${maxAge}; SameSite=Lax; Secure`;
+}
+
+const CONSENT_MODE_PARAMS = [
+    'analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization',
+];
+/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */
+const CONSENT_DEFAULTS_DENIED = Object.freeze({
+    analytics_storage: 'denied',
+    ad_storage: 'denied',
+    ad_user_data: 'denied',
+    ad_personalization: 'denied',
+});
+/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */
+function toConsentModeSignals(decision) {
+    const analytics = hasConsent(decision ?? null, ConsentCategory.Analytics) ? 'granted' : 'denied';
+    const marketing = hasConsent(decision ?? null, ConsentCategory.Marketing) ? 'granted' : 'denied';
+    return {
+        analytics_storage: analytics,
+        ad_storage: marketing,
+        ad_user_data: marketing,
+        ad_personalization: marketing,
+    };
+}
+/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */
+function consentModeBootstrapJs() {
+    return "window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}" +
+        `gtag('consent','default',${JSON.stringify(CONSENT_DEFAULTS_DENIED)});`;
+}
+
+/**
+ * @vectoriox/iox-ui/consent-core — the shared, FRAMEWORK-FREE core of visitor consent.
+ *
+ * What a decision IS (`needsPrompt`: a recorded "no" is a decision), how it travels (a tolerant
+ * first-party cookie), and what it tells Google (Consent Mode v2 signals, denied-by-default).
+ * Consumed by the SSR engine (the gate, C2), the builder (banner preview, C3) and iox-cms (the
+ * optional per-org log, C4) — the fourth entry point on the forms-core pattern, replacing the
+ * dead byte-identical fork C0 deleted.
+ * ⚠️ Consumers wire the usual trio — ng-package raw-ts assets, jest moduleNameMapper, tsconfig
+ * paths — or `nest start` dies with ERR_REQUIRE_ESM while jest and build both pass.
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { CONSENT_COOKIE_NAME, CONSENT_DEFAULTS_DENIED, CONSENT_MODE_PARAMS, ConsentCategory, consentModeBootstrapJs, cookieAttributes, decode, emptyDecision, encode, hasConsent, isExpired, needsPrompt, toConsentModeSignals };
+//# sourceMappingURL=vectoriox-iox-ui-consent-core.mjs.map

package/fesm2022/vectoriox-iox-ui-consent-core.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"vectoriox-iox-ui-consent-core.mjs","sources":["../../../projects/iox-ui/src/consent-core/consent.model.ts","../../../projects/iox-ui/src/consent-core/storage.ts","../../../projects/iox-ui/src/consent-core/consent-mode.ts","../../../projects/iox-ui/src/consent-core/public-api.ts","../../../projects/iox-ui/src/consent-core/vectoriox-iox-ui-consent-core.ts"],"sourcesContent":["/**\n * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as\n * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,\n * the builder for design-time preview — ONE implementation of what a decision is.\n */\n\nexport enum ConsentCategory {\n    /** Always on, never user-controllable — the site working at all. */\n    Necessary = 'necessary',\n    Analytics = 'analytics',\n    Marketing = 'marketing',\n}\n\n/** A visitor's recorded decision. `necessary` is implied true and never stored as false. */\nexport interface ConsentDecision {\n    categories: Partial<Record<ConsentCategory, boolean>>;\n    /** Bumping the org's policy version invalidates every prior decision. */\n    policyVersion: string;\n    /** ISO timestamp of the decision. */\n    decidedAt: string;\n    anonymousId: string;\n}\n\n/** A fresh \"nothing granted\" decision skeleton — used when a visitor must be asked. */\nexport function emptyDecision(anonymousId: string, policyVersion: string, now: Date = new Date()): ConsentDecision {\n    return {\n        categories: { [ConsentCategory.Necessary]: true },\n        policyVersion,\n        decidedAt: now.toISOString(),\n        anonymousId,\n    };\n}\n\n/** `null` (no decision yet) grants nothing; `necessary` is always granted. */\nexport function hasConsent(decision: ConsentDecision | null | undefined, category: ConsentCategory): boolean {\n    if (category === ConsentCategory.Necessary) return true;\n    if (!decision) return false;\n    return decision.categories?.[category] === true;\n}\n\n/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */\nexport function isExpired(decision: ConsentDecision, now: Date, maxMonths: number): boolean {\n    const decided = new Date(decision.decidedAt);\n    if (Number.isNaN(decided.getTime())) return true;\n    const expiry = new Date(decided);\n    expiry.setMonth(expiry.getMonth() + maxMonths);\n    return now >= expiry;\n}\n\n/**\n * The function the dead fork got wrong: **a recorded \"no\" is a decision.** The banner shows only\n * when there is no decision, the decision expired, or the policy version moved on — never because\n * the visitor declined.\n */\nexport function needsPrompt(\n    decision: ConsentDecision | null | undefined,\n    policyVersion: string,\n    now: Date = new Date(),\n    maxMonths = 12,\n): boolean {\n    if (!decision) return true;\n    if (decision.policyVersion !== policyVersion) return true;\n    return isExpired(decision, now, maxMonths);\n}\n","import { ConsentCategory, ConsentDecision } from './consent.model';\n\n/** First-party cookie name — the visitor's browser carries the proof (D-C1). */\nexport const CONSENT_COOKIE_NAME = 'iox-consent';\n\n/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */\nexport function encode(decision: ConsentDecision): string {\n    return JSON.stringify({ v: 1, ...decision });\n}\n\n/**\n * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`\n * (\"no decision\"), never a throw and never a guess. The old fork threw its way to a re-prompt.\n */\nexport function decode(raw: string | null | undefined): ConsentDecision | null {\n    if (!raw) return null;\n    try {\n        const parsed = JSON.parse(raw);\n        if (!parsed || typeof parsed !== 'object') return null;\n        if (typeof parsed.anonymousId !== 'string' || !parsed.anonymousId) return null;\n        if (typeof parsed.policyVersion !== 'string') return null;\n        if (!parsed.categories || typeof parsed.categories !== 'object' || Array.isArray(parsed.categories)) return null;\n        const categories: Partial<Record<ConsentCategory, boolean>> = {};\n        for (const [k, v] of Object.entries(parsed.categories)) {\n            categories[k as ConsentCategory] = v === true;\n        }\n        categories[ConsentCategory.Necessary] = true;\n        return {\n            categories,\n            policyVersion: parsed.policyVersion,\n            decidedAt: typeof parsed.decidedAt === 'string' ? parsed.decidedAt : '',\n            anonymousId: parsed.anonymousId,\n        };\n    } catch {\n        return null;\n    }\n}\n\n/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */\nexport function cookieAttributes(maxMonths = 12): string {\n    const maxAge = Math.floor(maxMonths * 30.44 * 24 * 60 * 60);\n    return `Path=/; Max-Age=${maxAge}; SameSite=Lax; Secure`;\n}\n","import { ConsentCategory, ConsentDecision, hasConsent } from './consent.model';\n\n/**\n * Google Consent Mode v2 (consent plan §4): four parameters, mandatory for EEA/UK measurement\n * since March 2024. Our categories map onto them; `necessary` maps to none.\n */\nexport type ConsentModeSignal = 'granted' | 'denied';\n\nexport const CONSENT_MODE_PARAMS = [\n    'analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization',\n] as const;\n\n/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */\nexport const CONSENT_DEFAULTS_DENIED: Readonly<Record<(typeof CONSENT_MODE_PARAMS)[number], ConsentModeSignal>> =\n    Object.freeze({\n        analytics_storage: 'denied',\n        ad_storage: 'denied',\n        ad_user_data: 'denied',\n        ad_personalization: 'denied',\n    });\n\n/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */\nexport function toConsentModeSignals(decision: ConsentDecision | null | undefined): Record<string, ConsentModeSignal> {\n    const analytics: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Analytics) ? 'granted' : 'denied';\n    const marketing: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Marketing) ? 'granted' : 'denied';\n    return {\n        analytics_storage: analytics,\n        ad_storage: marketing,\n        ad_user_data: marketing,\n        ad_personalization: marketing,\n    };\n}\n\n/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */\nexport function consentModeBootstrapJs(): string {\n    return \"window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}\" +\n        `gtag('consent','default',${JSON.stringify(CONSENT_DEFAULTS_DENIED)});`;\n}\n","/**\n * @vectoriox/iox-ui/consent-core — the shared, FRAMEWORK-FREE core of visitor consent.\n *\n * What a decision IS (`needsPrompt`: a recorded \"no\" is a decision), how it travels (a tolerant\n * first-party cookie), and what it tells Google (Consent Mode v2 signals, denied-by-default).\n * Consumed by the SSR engine (the gate, C2), the builder (banner preview, C3) and iox-cms (the\n * optional per-org log, C4) — the fourth entry point on the forms-core pattern, replacing the\n * dead byte-identical fork C0 deleted.\n * ⚠️ Consumers wire the usual trio — ng-package raw-ts assets, jest moduleNameMapper, tsconfig\n * paths — or `nest start` dies with ERR_REQUIRE_ESM while jest and build both pass.\n */\nexport * from './consent.model';\nexport * from './storage';\nexport * from './consent-mode';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":"AAAA;;;;AAIG;IAES;AAAZ,CAAA,UAAY,eAAe,EAAA;;AAEvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACvB,IAAA,eAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AAC3B,CAAC,EALW,eAAe,KAAf,eAAe,GAAA,EAAA,CAAA,CAAA;AAiB3B;AACM,SAAU,aAAa,CAAC,WAAmB,EAAE,aAAqB,EAAE,GAAA,GAAY,IAAI,IAAI,EAAE,EAAA;IAC5F,OAAO;QACH,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,GAAG,IAAI,EAAE;QACjD,aAAa;AACb,QAAA,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,WAAW;KACd;AACL;AAEA;AACM,SAAU,UAAU,CAAC,QAA4C,EAAE,QAAyB,EAAA;AAC9F,IAAA,IAAI,QAAQ,KAAK,eAAe,CAAC,SAAS;AAAE,QAAA,OAAO,IAAI;AACvD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,OAAO,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,IAAI;AACnD;AAEA;SACgB,SAAS,CAAC,QAAyB,EAAE,GAAS,EAAE,SAAiB,EAAA;IAC7E,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AAAE,QAAA,OAAO,IAAI;AAChD,IAAA,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC;IAChC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC;IAC9C,OAAO,GAAG,IAAI,MAAM;AACxB;AAEA;;;;AAIG;AACG,SAAU,WAAW,CACvB,QAA4C,EAC5C,aAAqB,EACrB,GAAA,GAAY,IAAI,IAAI,EAAE,EACtB,SAAS,GAAG,EAAE,EAAA;AAEd,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI;AAC1B,IAAA,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa;AAAE,QAAA,OAAO,IAAI;IACzD,OAAO,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;AAC9C;;AC7DA;AACO,MAAM,mBAAmB,GAAG;AAEnC;AACM,SAAU,MAAM,CAAC,QAAyB,EAAA;AAC5C,IAAA,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;AAChD;AAEA;;;AAGG;AACG,SAAU,MAAM,CAAC,GAA8B,EAAA;AACjD,IAAA,IAAI,CAAC,GAAG;AAAE,QAAA,OAAO,IAAI;AACrB,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,QAAA,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI;QACtD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW;AAAE,YAAA,OAAO,IAAI;AAC9E,QAAA,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;AAAE,YAAA,OAAO,IAAI;AACzD,QAAA,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;AAAE,YAAA,OAAO,IAAI;QAChH,MAAM,UAAU,GAA8C,EAAE;AAChE,QAAA,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;AACpD,YAAA,UAAU,CAAC,CAAoB,CAAC,GAAG,CAAC,KAAK,IAAI;QACjD;AACA,QAAA,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,IAAI;QAC5C,OAAO;YACH,UAAU;YACV,aAAa,EAAE,MAAM,CAAC,aAAa;AACnC,YAAA,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,EAAE;YACvE,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC;IACL;AAAE,IAAA,MAAM;AACJ,QAAA,OAAO,IAAI;IACf;AACJ;AAEA;AACM,SAAU,gBAAgB,CAAC,SAAS,GAAG,EAAE,EAAA;AAC3C,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC3D,OAAO,CAAA,gBAAA,EAAmB,MAAM,CAAA,sBAAA,CAAwB;AAC5D;;AClCO,MAAM,mBAAmB,GAAG;AAC/B,IAAA,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB;;AAG3E;AACO,MAAM,uBAAuB,GAChC,MAAM,CAAC,MAAM,CAAC;AACV,IAAA,iBAAiB,EAAE,QAAQ;AAC3B,IAAA,UAAU,EAAE,QAAQ;AACpB,IAAA,YAAY,EAAE,QAAQ;AACtB,IAAA,kBAAkB,EAAE,QAAQ;AAC/B,CAAA;AAEL;AACM,SAAU,oBAAoB,CAAC,QAA4C,EAAA;IAC7E,MAAM,SAAS,GAAsB,UAAU,CAAC,QAAQ,IAAI,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ;IACnH,MAAM,SAAS,GAAsB,UAAU,CAAC,QAAQ,IAAI,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,QAAQ;IACnH,OAAO;AACH,QAAA,iBAAiB,EAAE,SAAS;AAC5B,QAAA,UAAU,EAAE,SAAS;AACrB,QAAA,YAAY,EAAE,SAAS;AACvB,QAAA,kBAAkB,EAAE,SAAS;KAChC;AACL;AAEA;SACgB,sBAAsB,GAAA;AAClC,IAAA,OAAO,mFAAmF;AACtF,QAAA,CAAA,yBAAA,EAA4B,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,IAAI;AAC/E;;ACrCA;;;;;;;;;;AAUG;;ACVH;;AAEG;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vectoriox/iox-ui",
-  "version": "5.3.0",
+  "version": "5.4.0",
   "peerDependencies": {
     "@angular/common": ">=20.0.0",
     "@angular/core": ">=20.0.0",
@@ -23,6 +23,10 @@
       "types": "./actions-core/index.d.ts",
       "default": "./fesm2022/vectoriox-iox-ui-actions-core.mjs"
     },
+    "./consent-core": {
+      "types": "./consent-core/index.d.ts",
+      "default": "./fesm2022/vectoriox-iox-ui-consent-core.mjs"
+    },
     "./forms-core": {
       "types": "./forms-core/index.d.ts",
       "default": "./fesm2022/vectoriox-iox-ui-forms-core.mjs"

package/src/consent-core/consent-mode.ts

@@ -0,0 +1,38 @@
+import { ConsentCategory, ConsentDecision, hasConsent } from './consent.model';
+
+/**
+ * Google Consent Mode v2 (consent plan §4): four parameters, mandatory for EEA/UK measurement
+ * since March 2024. Our categories map onto them; `necessary` maps to none.
+ */
+export type ConsentModeSignal = 'granted' | 'denied';
+
+export const CONSENT_MODE_PARAMS = [
+    'analytics_storage', 'ad_storage', 'ad_user_data', 'ad_personalization',
+] as const;
+
+/** What the SSR head declares BEFORE any tag can load (invariant I1): everything denied. */
+export const CONSENT_DEFAULTS_DENIED: Readonly<Record<(typeof CONSENT_MODE_PARAMS)[number], ConsentModeSignal>> =
+    Object.freeze({
+        analytics_storage: 'denied',
+        ad_storage: 'denied',
+        ad_user_data: 'denied',
+        ad_personalization: 'denied',
+    });
+
+/** A decision → the four v2 signals. `null` (undecided) is indistinguishable from denied. */
+export function toConsentModeSignals(decision: ConsentDecision | null | undefined): Record<string, ConsentModeSignal> {
+    const analytics: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Analytics) ? 'granted' : 'denied';
+    const marketing: ConsentModeSignal = hasConsent(decision ?? null, ConsentCategory.Marketing) ? 'granted' : 'denied';
+    return {
+        analytics_storage: analytics,
+        ad_storage: marketing,
+        ad_user_data: marketing,
+        ad_personalization: marketing,
+    };
+}
+
+/** The inline `<head>` bootstrap (basic mode, D-C2): defaults denied before anything loads. */
+export function consentModeBootstrapJs(): string {
+    return "window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}" +
+        `gtag('consent','default',${JSON.stringify(CONSENT_DEFAULTS_DENIED)});`;
+}

package/src/consent-core/consent.model.ts

@@ -0,0 +1,64 @@
+/**
+ * The visitor-consent vocabulary (consent plan C1). Framework-free for the same forced reason as
+ * forms-core/seo-core/actions-core: iox-cms consumes it under plain Node, the engine at SSR time,
+ * the builder for design-time preview — ONE implementation of what a decision is.
+ */
+
+export enum ConsentCategory {
+    /** Always on, never user-controllable — the site working at all. */
+    Necessary = 'necessary',
+    Analytics = 'analytics',
+    Marketing = 'marketing',
+}
+
+/** A visitor's recorded decision. `necessary` is implied true and never stored as false. */
+export interface ConsentDecision {
+    categories: Partial<Record<ConsentCategory, boolean>>;
+    /** Bumping the org's policy version invalidates every prior decision. */
+    policyVersion: string;
+    /** ISO timestamp of the decision. */
+    decidedAt: string;
+    anonymousId: string;
+}
+
+/** A fresh "nothing granted" decision skeleton — used when a visitor must be asked. */
+export function emptyDecision(anonymousId: string, policyVersion: string, now: Date = new Date()): ConsentDecision {
+    return {
+        categories: { [ConsentCategory.Necessary]: true },
+        policyVersion,
+        decidedAt: now.toISOString(),
+        anonymousId,
+    };
+}
+
+/** `null` (no decision yet) grants nothing; `necessary` is always granted. */
+export function hasConsent(decision: ConsentDecision | null | undefined, category: ConsentCategory): boolean {
+    if (category === ConsentCategory.Necessary) return true;
+    if (!decision) return false;
+    return decision.categories?.[category] === true;
+}
+
+/** A decision older than `maxMonths` no longer counts (default re-ask: 12 months, D-C6). */
+export function isExpired(decision: ConsentDecision, now: Date, maxMonths: number): boolean {
+    const decided = new Date(decision.decidedAt);
+    if (Number.isNaN(decided.getTime())) return true;
+    const expiry = new Date(decided);
+    expiry.setMonth(expiry.getMonth() + maxMonths);
+    return now >= expiry;
+}
+
+/**
+ * The function the dead fork got wrong: **a recorded "no" is a decision.** The banner shows only
+ * when there is no decision, the decision expired, or the policy version moved on — never because
+ * the visitor declined.
+ */
+export function needsPrompt(
+    decision: ConsentDecision | null | undefined,
+    policyVersion: string,
+    now: Date = new Date(),
+    maxMonths = 12,
+): boolean {
+    if (!decision) return true;
+    if (decision.policyVersion !== policyVersion) return true;
+    return isExpired(decision, now, maxMonths);
+}

package/src/consent-core/public-api.ts

@@ -0,0 +1,14 @@
+/**
+ * @vectoriox/iox-ui/consent-core — the shared, FRAMEWORK-FREE core of visitor consent.
+ *
+ * What a decision IS (`needsPrompt`: a recorded "no" is a decision), how it travels (a tolerant
+ * first-party cookie), and what it tells Google (Consent Mode v2 signals, denied-by-default).
+ * Consumed by the SSR engine (the gate, C2), the builder (banner preview, C3) and iox-cms (the
+ * optional per-org log, C4) — the fourth entry point on the forms-core pattern, replacing the
+ * dead byte-identical fork C0 deleted.
+ * ⚠️ Consumers wire the usual trio — ng-package raw-ts assets, jest moduleNameMapper, tsconfig
+ * paths — or `nest start` dies with ERR_REQUIRE_ESM while jest and build both pass.
+ */
+export * from './consent.model';
+export * from './storage';
+export * from './consent-mode';

package/src/consent-core/storage.ts

@@ -0,0 +1,43 @@
+import { ConsentCategory, ConsentDecision } from './consent.model';
+
+/** First-party cookie name — the visitor's browser carries the proof (D-C1). */
+export const CONSENT_COOKIE_NAME = 'iox-consent';
+
+/** Cookie payload. Versioned so a future shape change can read old cookies tolerantly. */
+export function encode(decision: ConsentDecision): string {
+    return JSON.stringify({ v: 1, ...decision });
+}
+
+/**
+ * Tolerant by contract: bad JSON, a foreign shape, a tampered cookie — all read as `null`
+ * ("no decision"), never a throw and never a guess. The old fork threw its way to a re-prompt.
+ */
+export function decode(raw: string | null | undefined): ConsentDecision | null {
+    if (!raw) return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object') return null;
+        if (typeof parsed.anonymousId !== 'string' || !parsed.anonymousId) return null;
+        if (typeof parsed.policyVersion !== 'string') return null;
+        if (!parsed.categories || typeof parsed.categories !== 'object' || Array.isArray(parsed.categories)) return null;
+        const categories: Partial<Record<ConsentCategory, boolean>> = {};
+        for (const [k, v] of Object.entries(parsed.categories)) {
+            categories[k as ConsentCategory] = v === true;
+        }
+        categories[ConsentCategory.Necessary] = true;
+        return {
+            categories,
+            policyVersion: parsed.policyVersion,
+            decidedAt: typeof parsed.decidedAt === 'string' ? parsed.decidedAt : '',
+            anonymousId: parsed.anonymousId,
+        };
+    } catch {
+        return null;
+    }
+}
+
+/** `Set-Cookie` attributes for the decision: a NECESSARY cookie, 12 months, first-party. */
+export function cookieAttributes(maxMonths = 12): string {
+    const maxAge = Math.floor(maxMonths * 30.44 * 24 * 60 * 60);
+    return `Path=/; Max-Age=${maxAge}; SameSite=Lax; Secure`;
+}