astro-consent 1.0.0

package/LICENSE.md

@@ -0,0 +1,36 @@
+BSD 4-Clause License
+
+Copyright (c) 2026, Velohost
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. All advertising materials mentioning features or use of this software
+   must display the following acknowledgement:
+
+   This product includes software developed by Velohost
+   (https://velohost.co.uk)
+
+4. Neither the name of Velohost nor the names of its contributors may be used
+   to endorse or promote products derived from this software without
+   specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.

package/README.md

@@ -0,0 +1,128 @@
+# astro-cookiebanner
+
+A **privacy‑first, zero‑dependency cookie consent banner** for Astro projects — built for speed, compliance, and full visual control.
+
+Designed and maintained by **Velohost**.
+
+---
+
+## ✨ Features
+
+- ✅ GDPR / UK GDPR friendly
+- 🍪 Essential, Analytics & Marketing categories
+- 🎛️ Manage preferences modal with toggle switches
+- ⚡ No external dependencies
+- 🎨 Fully themeable via CSS variables
+- 🧠 Frontend‑controlled script loading
+- 🧩 Astro Integration + CLI installer
+- 🔁 Easy uninstall via CLI
+- 🌍 Framework‑agnostic frontend API
+
+---
+
+## 📦 Installation
+
+```bash
+npm install astro-cookiebanner
+```
+
+Then run the installer inside your Astro project:
+
+```bash
+npx astro-cookiebanner
+```
+
+To remove everything:
+
+```bash
+npx astro-cookiebanner remove
+```
+
+---
+
+## 🔧 Usage
+
+```ts
+import astroCookieBanner from "astro-cookiebanner";
+
+export default {
+  integrations: [
+    astroCookieBanner({
+      siteName: "My Website",
+      policyUrl: "/privacy",
+      consent: {
+        days: 30,
+        storageKey: "astro-cookie-consent"
+      },
+      categories: {
+        analytics: false,
+        marketing: false
+      }
+    })
+  ]
+};
+```
+
+---
+
+## 🧠 Frontend API
+
+```js
+window.cookieConsent.get();
+window.cookieConsent.set({ essential: true, analytics: true });
+window.cookieConsent.reset();
+```
+
+Example conditional loading:
+
+```js
+const consent = window.cookieConsent.get();
+
+if (consent?.categories?.analytics) {
+  // Load analytics script
+}
+```
+
+---
+
+## 🎨 Theming
+
+All visuals are controlled via:
+
+```
+src/cookiebanner.css
+```
+
+This file is never overwritten.
+
+---
+
+## 🔐 Privacy
+
+- No cookies before consent
+- No tracking without permission
+- No external calls
+- Stored locally with TTL
+
+---
+
+## 🏷️ License & Attribution
+
+Open‑source with **mandatory attribution**.
+
+Any public use, fork, or redistribution **must credit Velohost**.
+
+See `LICENSE.md` for full terms.
+
+---
+
+## 🏢 Velohost
+
+Built by **Velohost**  
+https://velohost.co.uk
+
+---
+
+## 🤝 Contributions
+
+PRs welcome — attribution must be preserved.

package/dist/cli.cjs

@@ -0,0 +1,311 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const process = __importStar(require("node:process"));
+const CWD = process.cwd();
+const args = process.argv.slice(2);
+const command = args[0] ?? "install";
+const ASTRO_CONFIG_FILES = [
+    "astro.config.mjs",
+    "astro.config.ts",
+    "astro.config.js"
+];
+function findAstroConfig() {
+    for (const file of ASTRO_CONFIG_FILES) {
+        const fullPath = path.join(CWD, file);
+        if (fs.existsSync(fullPath))
+            return fullPath;
+    }
+    return null;
+}
+function exitWith(message, code = 1) {
+    console.error(`\n❌ ${message}\n`);
+    process.exit(code);
+}
+/* ─────────────────────────────────────
+   Locate astro.config
+───────────────────────────────────── */
+const configPath = findAstroConfig();
+if (!configPath) {
+    exitWith("No astro.config.(mjs|ts|js) found. Run this in the root of an Astro project.");
+}
+let source = fs.readFileSync(configPath, "utf8");
+/* ─────────────────────────────────────
+   REMOVE MODE
+───────────────────────────────────── */
+if (command === "remove") {
+    source = source.replace(/\s*astroCookieBanner\s*\(\s*\{[\s\S]*?\}\s*\),?/gm, "");
+    source = source.replace(/import\s+astroCookieBanner\s+from\s+["']astro-cookiebanner["'];?\n?/, "");
+    fs.writeFileSync(configPath, source.trim() + "\n", "utf8");
+    const cssFile = path.join(CWD, "src", "cookiebanner.css");
+    if (fs.existsSync(cssFile))
+        fs.unlinkSync(cssFile);
+    console.log("\n🧹 astro-cookiebanner fully removed\n");
+    process.exit(0);
+}
+/* ─────────────────────────────────────
+   INSTALL MODE
+───────────────────────────────────── */
+const cssDir = path.join(CWD, "src");
+const cssFile = path.join(cssDir, "cookiebanner.css");
+if (!fs.existsSync(cssDir)) {
+    fs.mkdirSync(cssDir, { recursive: true });
+}
+/* ─────────────────────────────────────
+   Create FULL CSS VARIABLE OVERRIDE
+───────────────────────────────────── */
+if (!fs.existsSync(cssFile)) {
+    fs.writeFileSync(cssFile, `/* =========================================================
+   astro-cookiebanner — FULL THEME VARIABLES
+   All visuals are controlled from here.
+   This file is NEVER overwritten.
+   ========================================================= */
+
+:root {
+  /* ───── Core ───── */
+  --cb-font: system-ui, -apple-system, BlinkMacSystemFont, sans-serif;
+
+  /* ───── Banner ───── */
+  --cb-bg: rgba(12,18,32,0.88);
+  --cb-border: rgba(255,255,255,0.08);
+  --cb-text: #e5e7eb;
+  --cb-muted: #9ca3af;
+  --cb-link: #60a5fa;
+  --cb-radius: 16px;
+  --cb-shadow: 0 20px 40px rgba(0,0,0,0.35);
+
+  /* ───── Buttons ───── */
+  --cb-btn-radius: 999px;
+  --cb-btn-padding: 10px 18px;
+
+  --cb-accept-bg: #22c55e;
+  --cb-accept-text: #052e16;
+
+  --cb-reject-bg: #374151;
+  --cb-reject-text: #e5e7eb;
+
+  --cb-manage-bg: transparent;
+  --cb-manage-text: #e5e7eb;
+  --cb-manage-border: rgba(255,255,255,0.15);
+
+  /* ───── Modal ───── */
+  --cb-modal-backdrop: rgba(0,0,0,0.55);
+  --cb-modal-bg: #0c1220;
+  --cb-modal-radius: 18px;
+  --cb-modal-width: 480px;
+
+  /* ───── Toggles ───── */
+  --cb-toggle-off-bg: #374151;
+  --cb-toggle-on-bg: #22c55e;
+  --cb-toggle-knob: #ffffff;
+}
+
+/* =========================================================
+   Banner
+   ========================================================= */
+
+#astro-cookie-banner {
+  position: fixed;
+  left: 16px;
+  right: 16px;
+  bottom: 16px;
+  z-index: 9999;
+  font-family: var(--cb-font);
+}
+
+.cb-container {
+  max-width: 1200px;
+  margin: 0 auto;
+  padding: 20px 24px;
+  display: flex;
+  gap: 24px;
+  justify-content: space-between;
+  align-items: center;
+
+  background: var(--cb-bg);
+  backdrop-filter: blur(14px);
+  border-radius: var(--cb-radius);
+  border: 1px solid var(--cb-border);
+  box-shadow: var(--cb-shadow);
+  color: var(--cb-text);
+}
+
+.cb-title {
+  font-size: 16px;
+  font-weight: 600;
+}
+
+.cb-desc {
+  font-size: 14px;
+  color: var(--cb-muted);
+}
+
+.cb-desc a {
+  color: var(--cb-link);
+  text-decoration: none;
+}
+
+.cb-actions {
+  display: flex;
+  gap: 10px;
+}
+
+/* =========================================================
+   Buttons
+   ========================================================= */
+
+.cb-actions button {
+  padding: var(--cb-btn-padding);
+  border-radius: var(--cb-btn-radius);
+  border: 0;
+  font-size: 14px;
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.cb-accept {
+  background: var(--cb-accept-bg);
+  color: var(--cb-accept-text);
+}
+
+.cb-reject {
+  background: var(--cb-reject-bg);
+  color: var(--cb-reject-text);
+}
+
+.cb-manage {
+  background: var(--cb-manage-bg);
+  color: var(--cb-manage-text);
+  border: 1px solid var(--cb-manage-border);
+}
+
+/* =========================================================
+   Modal
+   ========================================================= */
+
+#astro-cookie-modal {
+  position: fixed;
+  inset: 0;
+  background: var(--cb-modal-backdrop);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 10000;
+}
+
+.cb-modal {
+  width: 100%;
+  max-width: var(--cb-modal-width);
+  background: var(--cb-modal-bg);
+  border-radius: var(--cb-modal-radius);
+  padding: 24px;
+  color: var(--cb-text);
+}
+
+/* =========================================================
+   Toggles
+   ========================================================= */
+
+.cb-toggle {
+  width: 44px;
+  height: 24px;
+  background: var(--cb-toggle-off-bg);
+  border-radius: 999px;
+  position: relative;
+  cursor: pointer;
+}
+
+.cb-toggle span {
+  position: absolute;
+  width: 18px;
+  height: 18px;
+  background: var(--cb-toggle-knob);
+  border-radius: 50%;
+  top: 3px;
+  left: 3px;
+  transition: transform 0.2s ease;
+}
+
+.cb-toggle.active {
+  background: var(--cb-toggle-on-bg);
+}
+
+.cb-toggle.active span {
+  transform: translateX(20px);
+}
+
+/* =========================================================
+   Mobile
+   ========================================================= */
+
+@media (max-width: 640px) {
+  .cb-container {
+    flex-direction: column;
+    align-items: stretch;
+    gap: 16px;
+  }
+}
+`, "utf8");
+    console.log("🎨 Created src/cookiebanner.css (CSS variables enabled)");
+}
+/* ─────────────────────────────────────
+   Inject Astro integration
+───────────────────────────────────── */
+if (!source.includes(`from "astro-cookiebanner"`)) {
+    source = `import astroCookieBanner from "astro-cookiebanner";\n${source}`;
+}
+if (!source.includes("astroCookieBanner(")) {
+    const injection = `    astroCookieBanner({
+      siteName: "My Website",
+      policyUrl: "/privacy",
+      consent: {
+        days: 30,
+        storageKey: "astro-cookie-consent"
+      },
+      categories: {
+        analytics: false,
+        marketing: false
+      }
+    }),
+`;
+    source = source.replace(/integrations\s*:\s*\[/, match => `${match}\n${injection}`);
+}
+fs.writeFileSync(configPath, source, "utf8");
+console.log("\n🎉 astro-cookiebanner installed successfully");
+console.log("👉 Edit src/cookiebanner.css to theme everything");
+console.log("👉 Run `astro-cookiebanner remove` to uninstall\n");

package/dist/config/defaults.js

@@ -0,0 +1,32 @@
+/**
+ * Default configuration values.
+ * These are ONLY used as fallbacks if the user omits something.
+ * User config always takes priority.
+ */
+export const DEFAULT_CONFIG = {
+    siteName: "This website",
+    policyUrl: "/privacy",
+    consent: {
+        enabled: true,
+        days: 30,
+        storageKey: "astro-cookie-consent"
+    },
+    categories: {
+        essential: {
+            label: "Essential",
+            description: "Required for the website to function correctly",
+            enabled: true,
+            readonly: true
+        },
+        analytics: {
+            label: "Analytics",
+            description: "Helps us understand how visitors use the site",
+            enabled: false
+        },
+        marketing: {
+            label: "Marketing",
+            description: "Used to deliver personalised ads",
+            enabled: false
+        }
+    }
+};

package/dist/config/loadConfig.js

@@ -0,0 +1,74 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { pathToFileURL } from "node:url";
+import { DEFAULT_CONFIG } from "./defaults.js";
+/**
+ * Safely loads the user config file and merges it with defaults.
+ * User values always override defaults.
+ * Cache-busted to ensure updates are picked up during dev.
+ */
+export async function loadUserConfig(projectRoot) {
+    const configPath = path.join(projectRoot, "src", "cookiebanner", "config.ts");
+    let userConfig = {};
+    try {
+        // 🔑 IMPORTANT:
+        // Bust Node ESM import cache using file modified time
+        const stat = fs.statSync(configPath);
+        const cacheBuster = `?v=${stat.mtimeMs}`;
+        const imported = await import(
+        /* @vite-ignore */
+        pathToFileURL(configPath).href + cacheBuster);
+        userConfig = imported?.default ?? {};
+    }
+    catch (err) {
+        console.warn("[cookiebanner] Failed to load user config, falling back to defaults:", err);
+    }
+    return {
+        /* ─────────────────────────────
+           Site name
+        ───────────────────────────── */
+        siteName: userConfig.siteName ?? DEFAULT_CONFIG.siteName,
+        /* ─────────────────────────────
+           Policy URL
+        ───────────────────────────── */
+        policyUrl: userConfig.policyUrl ?? DEFAULT_CONFIG.policyUrl,
+        /* ─────────────────────────────
+           Consent settings
+        ───────────────────────────── */
+        consent: {
+            enabled: userConfig.consent?.enabled ??
+                DEFAULT_CONFIG.consent.enabled,
+            days: userConfig.consent?.days ??
+                DEFAULT_CONFIG.consent.days,
+            storageKey: userConfig.consent?.storageKey ??
+                DEFAULT_CONFIG.consent.storageKey
+        },
+        /* ─────────────────────────────
+           Categories
+        ───────────────────────────── */
+        categories: mergeCategories(userConfig.categories, DEFAULT_CONFIG.categories)
+    };
+}
+/**
+ * Merge category config safely.
+ * Defaults are preserved, user overrides where provided.
+ */
+function mergeCategories(userCategories, defaultCategories) {
+    const merged = {};
+    // Start with defaults
+    for (const key of Object.keys(defaultCategories)) {
+        merged[key] = {
+            ...defaultCategories[key],
+            ...(userCategories?.[key] ?? {})
+        };
+    }
+    // Include any custom categories the user added
+    if (userCategories) {
+        for (const key of Object.keys(userCategories)) {
+            if (!merged[key]) {
+                merged[key] = userCategories[key];
+            }
+        }
+    }
+    return merged;
+}

package/dist/index.js

@@ -0,0 +1,333 @@
+export default function astroCookieBanner(options = {}) {
+    const siteName = options.siteName ?? "This website";
+    const policyUrl = options.policyUrl ?? "/privacy";
+    const consentDays = options.consent?.days ?? 30;
+    const storageKey = options.consent?.storageKey ?? "astro-cookie-consent";
+    const defaultCategories = {
+        essential: true,
+        analytics: false,
+        marketing: false,
+        ...options.categories
+    };
+    const ttl = consentDays * 24 * 60 * 60 * 1000;
+    return {
+        name: "astro-cookiebanner",
+        hooks: {
+            "astro:config:setup": ({ injectScript }) => {
+                /* ─────────────────────────────────────
+                   ALL STYLES (banner + modal)
+                ───────────────────────────────────── */
+                injectScript("head-inline", `
+const style = document.createElement("style");
+style.innerHTML = \`
+:root {
+  --cb-bg: rgba(12,18,32,.88);
+  --cb-border: rgba(255,255,255,.08);
+  --cb-text: #e5e7eb;
+  --cb-muted: #9ca3af;
+  --cb-link: #60a5fa;
+  --cb-accept: #22c55e;
+  --cb-reject: #374151;
+}
+
+/* ───── Banner ───── */
+
+#astro-cookie-banner {
+  position: fixed;
+  left: 16px;
+  right: 16px;
+  bottom: 16px;
+  z-index: 9999;
+  font-family: system-ui,-apple-system,BlinkMacSystemFont,sans-serif;
+}
+
+.cb-container {
+  max-width: 1200px;
+  margin: 0 auto;
+  padding: 20px 24px;
+  display: flex;
+  gap: 24px;
+  justify-content: space-between;
+  align-items: center;
+
+  background: var(--cb-bg);
+  backdrop-filter: blur(14px);
+  border-radius: 16px;
+  border: 1px solid var(--cb-border);
+  box-shadow: 0 20px 40px rgba(0,0,0,.35);
+
+  color: var(--cb-text);
+}
+
+.cb-text {
+  max-width: 760px;
+}
+
+.cb-title {
+  font-size: 16px;
+  font-weight: 600;
+}
+
+.cb-desc {
+  font-size: 14px;
+  color: var(--cb-muted);
+}
+
+.cb-desc a {
+  color: var(--cb-link);
+  text-decoration: none;
+}
+
+.cb-desc a:hover {
+  text-decoration: underline;
+}
+
+.cb-actions {
+  display: flex;
+  gap: 10px;
+  flex-shrink: 0;
+}
+
+.cb-actions button {
+  padding: 10px 18px;
+  border-radius: 999px;
+  border: 0;
+  font-size: 14px;
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.cb-accept {
+  background: var(--cb-accept);
+  color: #052e16;
+}
+
+.cb-reject {
+  background: var(--cb-reject);
+  color: #e5e7eb;
+}
+
+.cb-manage {
+  background: transparent;
+  color: var(--cb-text);
+  border: 1px solid var(--cb-border);
+}
+
+/* ───── Modal ───── */
+
+#astro-cookie-modal {
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,.55);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 10000;
+  font-family: system-ui,-apple-system,BlinkMacSystemFont,sans-serif;
+}
+
+.cb-modal {
+  width: 100%;
+  max-width: 480px;
+  background: #0c1220;
+  border-radius: 18px;
+  padding: 24px;
+  border: 1px solid var(--cb-border);
+  color: var(--cb-text);
+}
+
+.cb-modal h3 {
+  margin: 0 0 16px;
+}
+
+.cb-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  padding: 12px 0;
+  border-bottom: 1px solid var(--cb-border);
+}
+
+.cb-row:last-child {
+  border-bottom: 0;
+}
+
+.cb-toggle {
+  width: 44px;
+  height: 24px;
+  background: #374151;
+  border-radius: 999px;
+  position: relative;
+  cursor: pointer;
+}
+
+.cb-toggle span {
+  position: absolute;
+  width: 18px;
+  height: 18px;
+  background: #fff;
+  border-radius: 50%;
+  top: 3px;
+  left: 3px;
+  transition: transform .2s;
+}
+
+.cb-toggle.active {
+  background: var(--cb-accept);
+}
+
+.cb-toggle.active span {
+  transform: translateX(20px);
+}
+
+@media (max-width: 640px) {
+  .cb-container {
+    flex-direction: column;
+    align-items: stretch;
+    gap: 16px;
+  }
+}
+\`;
+document.head.appendChild(style);
+`);
+                /* ─────────────────────────────────────
+                   Consent runtime
+                ───────────────────────────────────── */
+                injectScript("page", `
+(() => {
+  const KEY = "${storageKey}";
+  const TTL = ${ttl};
+
+  function now(){ return Date.now(); }
+
+  function read(){
+    try{
+      const raw = localStorage.getItem(KEY);
+      if(!raw) return null;
+      const data = JSON.parse(raw);
+      if(data.expiresAt < now()){
+        localStorage.removeItem(KEY);
+        return null;
+      }
+      return data;
+    }catch{ return null; }
+  }
+
+  function write(categories){
+    localStorage.setItem(KEY, JSON.stringify({
+      updatedAt: now(),
+      expiresAt: now() + TTL,
+      categories
+    }));
+  }
+
+  window.cookieConsent = {
+    get: read,
+    set: write,
+    reset(){
+      localStorage.removeItem(KEY);
+      location.reload();
+    }
+  };
+})();
+`);
+                /* ─────────────────────────────────────
+                   Banner + modal UI
+                ───────────────────────────────────── */
+                injectScript("page", `
+(() => {
+  if (window.cookieConsent.get()) return;
+
+  const state = { ...${JSON.stringify(defaultCategories)} };
+
+  const banner = document.createElement("div");
+  banner.id = "astro-cookie-banner";
+
+  banner.innerHTML = \`
+    <div class="cb-container">
+      <div class="cb-text">
+        <div class="cb-title">${siteName} uses cookies</div>
+        <div class="cb-desc">
+          Choose how your data is used.
+          <a href="${policyUrl}">Learn more</a>
+        </div>
+      </div>
+      <div class="cb-actions">
+        <button class="cb-manage">Manage</button>
+        <button class="cb-reject">Reject</button>
+        <button class="cb-accept">Accept all</button>
+      </div>
+    </div>
+  \`;
+
+  document.body.appendChild(banner);
+
+  banner.querySelector(".cb-accept").onclick = () => {
+    window.cookieConsent.set({ essential:true, analytics:true, marketing:true });
+    banner.remove();
+  };
+
+  banner.querySelector(".cb-reject").onclick = () => {
+    window.cookieConsent.set({ essential:true });
+    banner.remove();
+  };
+
+  banner.querySelector(".cb-manage").onclick = openModal;
+
+  function openModal(){
+    const modal = document.createElement("div");
+    modal.id = "astro-cookie-modal";
+
+    modal.innerHTML = \`
+      <div class="cb-modal">
+        <h3>Cookie preferences</h3>
+
+        <div class="cb-row">
+          <span>Essential</span>
+          <strong>Always on</strong>
+        </div>
+
+        <div class="cb-row">
+          <span>Analytics</span>
+          <div class="cb-toggle" data-key="analytics"><span></span></div>
+        </div>
+
+        <div class="cb-row">
+          <span>Marketing</span>
+          <div class="cb-toggle" data-key="marketing"><span></span></div>
+        </div>
+
+        <div class="cb-actions" style="margin-top:16px;justify-content:flex-end">
+          <button class="cb-accept">Save preferences</button>
+        </div>
+      </div>
+    \`;
+
+    document.body.appendChild(modal);
+
+    modal.querySelectorAll(".cb-toggle").forEach(toggle => {
+      const key = toggle.getAttribute("data-key");
+      if(state[key]) toggle.classList.add("active");
+
+      toggle.onclick = () => {
+        state[key] = !state[key];
+        toggle.classList.toggle("active");
+      };
+    });
+
+    modal.querySelector(".cb-accept").onclick = () => {
+      window.cookieConsent.set({ essential:true, ...state });
+      modal.remove();
+      banner.remove();
+    };
+
+    modal.onclick = e => {
+      if(e.target === modal) modal.remove();
+    };
+  }
+})();
+`);
+            }
+        }
+    };
+}

package/dist/templates/cssTemplate.js

@@ -0,0 +1,117 @@
+export const DEFAULT_CSS = `
+:root {
+  /* Layout */
+  --cb-z-index: 9999;
+  --cb-max-width: 960px;
+  --cb-padding: 16px;
+  --cb-gap: 12px;
+  --cb-radius: 10px;
+
+  /* Colours */
+  --cb-bg: #111827;
+  --cb-surface: #1f2933;
+  --cb-text: #ffffff;
+  --cb-muted: #9ca3af;
+  --cb-border: #374151;
+  --cb-accent: #6366f1;
+
+  /* Buttons */
+  --cb-btn-bg: var(--cb-accent);
+  --cb-btn-text: #ffffff;
+  --cb-btn-secondary-bg: transparent;
+  --cb-btn-secondary-text: var(--cb-text);
+  --cb-btn-border: var(--cb-border);
+
+  /* Typography */
+  --cb-font-family: system-ui, -apple-system, BlinkMacSystemFont, sans-serif;
+  --cb-title-size: 1rem;
+  --cb-text-size: 0.875rem;
+}
+
+#astro-cookie-banner {
+  position: fixed;
+  bottom: 0;
+  left: 0;
+  right: 0;
+  z-index: var(--cb-z-index);
+  background: var(--cb-bg);
+  color: var(--cb-text);
+  font-family: var(--cb-font-family);
+  border-top: 1px solid var(--cb-border);
+}
+
+#astro-cookie-banner > * {
+  max-width: var(--cb-max-width);
+  margin: 0 auto;
+  padding: var(--cb-padding);
+}
+
+#astro-cookie-banner h2 {
+  margin: 0 0 4px;
+  font-size: var(--cb-title-size);
+}
+
+#astro-cookie-banner p {
+  margin: 0;
+  font-size: var(--cb-text-size);
+  color: var(--cb-muted);
+}
+
+#astro-cookie-banner a {
+  color: var(--cb-accent);
+  text-decoration: underline;
+}
+
+.astro-cookie-categories {
+  display: grid;
+  gap: var(--cb-gap);
+  margin-top: var(--cb-gap);
+}
+
+.astro-cookie-category {
+  background: var(--cb-surface);
+  padding: 12px;
+  border-radius: var(--cb-radius);
+  border: 1px solid var(--cb-border);
+}
+
+.astro-cookie-label {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-weight: 600;
+}
+
+.astro-cookie-description {
+  margin: 4px 0 0 26px;
+  font-size: 0.8rem;
+  color: var(--cb-muted);
+}
+
+.astro-cookie-actions {
+  display: flex;
+  gap: 8px;
+  justify-content: flex-end;
+  margin-top: var(--cb-gap);
+  flex-wrap: wrap;
+}
+
+.astro-cookie-actions button {
+  padding: 8px 14px;
+  border-radius: var(--cb-radius);
+  font-size: 0.875rem;
+  cursor: pointer;
+  border: 1px solid var(--cb-btn-border);
+}
+
+.astro-cookie-actions button:first-child {
+  background: var(--cb-btn-secondary-bg);
+  color: var(--cb-btn-secondary-text);
+}
+
+.astro-cookie-actions button:last-child {
+  background: var(--cb-btn-bg);
+  color: var(--cb-btn-text);
+  border-color: var(--cb-btn-bg);
+}
+`;

package/dist/types/config.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "astro-consent",
+  "version": "1.0.0",
+  "description": "A privacy-first, GDPR-compliant cookie consent banner for Astro with a built-in preferences modal, zero dependencies, and full theme control.",
+  "type": "module",
+  "author": {
+    "name": "Velohost",
+    "url": "https://velohost.co.uk"
+  },
+  "license": "BSD-4-Clause",
+  "homepage": "https://velohost.co.uk",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/velohost/astro-cookiebanner.git"
+  },
+  "bugs": {
+    "url": "https://github.com/velohost/astro-cookiebanner/issues"
+  },
+  "main": "./dist/index.js",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "bin": {
+    "astro-cookiebanner": "dist/cli.cjs"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && tsc -p tsconfig.cli.json"
+  },
+  "keywords": [
+    "astro",
+    "astro-integration",
+    "cookie-banner",
+    "cookie-consent",
+    "gdpr",
+    "privacy",
+    "analytics-consent",
+    "marketing-consent",
+    "withastro",
+    "velohost"
+  ],
+  "peerDependencies": {
+    "astro": "^4.0.0 || ^5.0.0"
+  },
+  "devDependencies": {
+    "astro": "^5.16.6"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}