consentlayer 0.0.0 → 1.0.0-rc.0

package/dist/server/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/meta.ts"],"names":[],"mappings":";;;;;AAKA,IAAM,YAAA,GAAe,CAAC,KAAA,KACpB,KAAA,KAAU,QACV,CAAC,QAAA,EAAU,QAAA,EAAU,SAAS,CAAA,CAAE,QAAA,CAAS,OAAO,KAAK,CAAA,IACrD,MAAM,OAAA,CAAQ,KAAK,KAClB,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,WAAA,KAAgB,MAAA;AAG/C,SAAS,SAAS,OAAA,EAOe;AACtC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,EAAS,IAAA,EAAK;AACtC,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,WAAA,EAAa,IAAA,EAAK;AAC9C,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,WAAA,EAAa;AAC5B,IAAA,IAAI,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,mEAAmE,CAAA;AAC5G,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,UAAA,CAAW,KAAA;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAA;AAAA,IACJ,eAAA,EAAiB,WAAA;AAAA,IACjB,oBAAA,EAAsB,IAAA;AAAA,IACtB,MAAM,IAAA,CAAK,KAAA,EAAO,OAAA,EAAS;AACzB,MAAA,MAAM,EAAE,IAAA,EAAM,MAAA,EAAO,GAAI,WAAA,CAAY;AAAA,QACnC,EAAA,EAAI,MAAM,EAAA,IAAM,EAAA;AAAA,QAChB,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,MAAA,EAAQ,KAAA,CAAM,MAAA,IAAU,EAAC;AAAA,QACzB,OAAA,EAAS,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA;AAAU,OACvC,CAAA;AACD,MAAA,MAAM,QAAQ,KAAA,CAAM,QAAA,EAAU,KAAA,EAAO,IAAA,GAAO,WAAA,EAAY;AACxD,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,QAAA,EAAU,KAAA,IAAS,CAAA,CAAA,EAAI,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AAClF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,2BAAA,EAA8B,QAAQ,UAAA,IAAc,OAAO,CAAA,CAAA,EAAI,OAAO,CAAA,OAAA,CAAS,CAAA;AACnG,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,cAAA,EAAgB,WAAW,CAAA;AAChD,MAAA,IAAI,QAAQ,aAAA,EAAe,GAAA,CAAI,aAAa,GAAA,CAAI,iBAAA,EAAmB,QAAQ,aAAa,CAAA;AACxF,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,GAAA,CAAI,IAAA,EAAM;AAAA,QACzC,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,QAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,IAAA,EAAM;AAAA,YACJ;AAAA,cACE,UAAA,EAAY,IAAA;AAAA,cACZ,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,cACxC,UAAU,KAAA,CAAM,EAAA;AAAA,cAChB,kBAAkB,KAAA,CAAM,GAAA;AAAA,cACxB,aAAA,EAAe,SAAA;AAAA,cACf,aAAa,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA,CAAO,CAAC,GAAG,KAAK,CAAA,KAAM,YAAA,CAAa,KAAK,CAAC,CAAC,CAAA;AAAA,cACjG,SAAA,EAAW;AAAA,gBACT,mBAAmB,OAAA,EAAS,EAAA;AAAA,gBAC5B,mBAAmB,OAAA,EAAS,SAAA;AAAA,gBAC5B,GAAA,EAAK,SAAS,OAAA,CAAQ,IAAA;AAAA,gBACtB,GAAA,EAAK,SAAS,OAAA,CAAQ,IAAA;AAAA,gBACtB,EAAA,EAAI,SAAS,YAAA,CAAa,KAAK,IAAI,MAAM,MAAA,CAAO,KAAK,CAAA,GAAI,MAAA;AAAA,gBACzD,EAAA,EAAI,KAAA,IAAS,gBAAA,CAAiB,KAAK,CAAA,GAAI,MAAM,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,MAAA;AAAA,gBACtE,WAAA,EAAa,MAAM,MAAA,CAAO,KAAA,CAAM,UAAU,MAAM;AAAA;AAClD;AACF;AACF,SACD;AAAA,OACF,CAAA;AACD,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,UAAA,EAAa,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,MAAM,QAAA,CAAS,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IAC5F;AAAA,GACF;AACF","file":"meta.js","sourcesContent":["import { toMetaEvent } from '../core/meta-events'\nimport { isValidEmail, isValidPhoneE164 } from '../core/validation'\nimport type { ServerDestination } from './handler'\nimport { sha256 } from './http'\n\nconst isPlainValue = (value: unknown) =>\n  value === null ||\n  ['string', 'number', 'boolean'].includes(typeof value) ||\n  Array.isArray(value) ||\n  (typeof value === 'object' && value.constructor === Object)\n\n/** Meta Conversions API. Receives browser events too; Meta dedupes them by event ID. Off (`undefined`) while `pixelId` or `accessToken` is unset. */\nexport function metaCapi(options: {\n  pixelId: string | undefined\n  accessToken: string | undefined\n  testEventCode?: string\n  /** Graph API version. */\n  apiVersion?: string\n  fetchImpl?: typeof fetch\n}): ServerDestination<true> | undefined {\n  const pixelId = options.pixelId?.trim()\n  const accessToken = options.accessToken?.trim()\n  if (!pixelId || !accessToken) {\n    if (pixelId || accessToken) console.warn('[consentlayer] metaCapi is off: set both pixelId and accessToken.')\n    return undefined\n  }\n  const fetchImpl = options.fetchImpl ?? globalThis.fetch\n  return {\n    id: 'meta',\n    requiredConsent: 'marketing',\n    forwardBrowserEvents: true,\n    async send(event, request) {\n      const { name, params } = toMetaEvent({\n        id: event.id ?? '',\n        name: event.name,\n        params: event.params ?? {},\n        options: { providers: event.providers },\n      })\n      const email = event.identity?.email?.trim().toLowerCase()\n      const phone = event.identity?.phone && `+${event.identity.phone.replace(/\\D/g, '')}`\n      const url = new URL(`https://graph.facebook.com/${options.apiVersion ?? 'v26.0'}/${pixelId}/events`)\n      url.searchParams.set('access_token', accessToken)\n      if (options.testEventCode) url.searchParams.set('test_event_code', options.testEventCode)\n      const response = await fetchImpl(url.href, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          data: [\n            {\n              event_name: name,\n              event_time: Math.floor(Date.now() / 1000),\n              event_id: event.id,\n              event_source_url: event.url,\n              action_source: 'website',\n              custom_data: Object.fromEntries(Object.entries(params).filter(([, value]) => isPlainValue(value))),\n              user_data: {\n                client_ip_address: request?.ip,\n                client_user_agent: request?.userAgent,\n                fbp: request?.cookies._fbp,\n                fbc: request?.cookies._fbc,\n                em: email && isValidEmail(email) ? await sha256(email) : undefined,\n                ph: phone && isValidPhoneE164(phone) ? await sha256(phone.slice(1)) : undefined,\n                external_id: await sha256(event.identity?.userId),\n              },\n            },\n          ],\n        }),\n      })\n      if (!response.ok) throw new Error(`Meta CAPI ${response.status}: ${await response.text()}`)\n    },\n  }\n}\n"]}

package/dist/server/sgtm.d.ts

@@ -0,0 +1,18 @@
+import { ServerDestination } from './index.js';
+import '../types-BV_AFZKQ.js';
+
+/**
+ * Server-side Google Tag Manager: events go, as GA4 Measurement Protocol
+ * requests, to the Measurement Protocol client of your server container.
+ * Receives browser events too. Off (`undefined`) while `url` or `measurementId` is unset.
+ */
+declare function sgtm(options: {
+    /** The client's endpoint: your tagging server and the client's activation path, e.g. `https://sgtm.example.com/mp/collect`. */
+    url: string | undefined;
+    measurementId: string | undefined;
+    /** Sent as `api_secret`, for a client or tag that checks it. */
+    apiSecret?: string;
+    fetchImpl?: typeof fetch;
+}): ServerDestination<true> | undefined;
+
+export { sgtm };

package/dist/server/sgtm.js

@@ -0,0 +1,34 @@
+import { sendMeasurementProtocol } from '../chunk-HJGBVDPM.js';
+import { isHttpsOrRelativeUrl } from '../chunk-J3KUPF4R.js';
+
+// src/server/sgtm.ts
+function sgtm(options) {
+  const url = options.url?.trim();
+  const measurementId = options.measurementId?.trim();
+  if (!url || !measurementId) {
+    if (url || measurementId) console.warn("[consentlayer] sgtm is off: set both url and measurementId.");
+    return void 0;
+  }
+  if (url.startsWith("/") || !isHttpsOrRelativeUrl(url)) {
+    throw new Error(`[consentlayer] sgtm url must be an HTTPS URL, received "${url}".`);
+  }
+  const endpoint = new URL(url);
+  endpoint.searchParams.set("measurement_id", measurementId);
+  if (options.apiSecret?.trim()) endpoint.searchParams.set("api_secret", options.apiSecret.trim());
+  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+  return {
+    id: "sgtm",
+    requiredConsent: "analytics",
+    forwardBrowserEvents: true,
+    send: (event, request) => sendMeasurementProtocol(
+      { url: endpoint.href, sender: "sgtm", receiver: "Server-side GTM" },
+      event,
+      request,
+      fetchImpl
+    )
+  };
+}
+
+export { sgtm };
+//# sourceMappingURL=sgtm.js.map
+//# sourceMappingURL=sgtm.js.map

package/dist/server/sgtm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/sgtm.ts"],"names":[],"mappings":";;;;AASO,SAAS,KAAK,OAAA,EAOmB;AACtC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,EAAK,IAAA,EAAK;AAC9B,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,aAAA,EAAe,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,aAAA,EAAe;AAC1B,IAAA,IAAI,GAAA,IAAO,aAAA,EAAe,OAAA,CAAQ,IAAA,CAAK,6DAA6D,CAAA;AACpG,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,IAAI,UAAA,CAAW,GAAG,KAAK,CAAC,oBAAA,CAAqB,GAAG,CAAA,EAAG;AACrD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wDAAA,EAA2D,GAAG,CAAA,EAAA,CAAI,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,GAAG,CAAA;AAC5B,EAAA,QAAA,CAAS,YAAA,CAAa,GAAA,CAAI,gBAAA,EAAkB,aAAa,CAAA;AACzD,EAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK,EAAG,QAAA,CAAS,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,OAAA,CAAQ,SAAA,CAAU,IAAA,EAAM,CAAA;AAC/F,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,UAAA,CAAW,KAAA;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,MAAA;AAAA,IACJ,eAAA,EAAiB,WAAA;AAAA,IACjB,oBAAA,EAAsB,IAAA;AAAA,IACtB,IAAA,EAAM,CAAC,KAAA,EAAO,OAAA,KACZ,uBAAA;AAAA,MACE,EAAE,GAAA,EAAK,QAAA,CAAS,MAAM,MAAA,EAAQ,MAAA,EAAQ,UAAU,iBAAA,EAAkB;AAAA,MAClE,KAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF","file":"sgtm.js","sourcesContent":["import { isHttpsOrRelativeUrl } from '../core/validation'\nimport type { ServerDestination } from './handler'\nimport { sendMeasurementProtocol } from './measurement-protocol'\n\n/**\n * Server-side Google Tag Manager: events go, as GA4 Measurement Protocol\n * requests, to the Measurement Protocol client of your server container.\n * Receives browser events too. Off (`undefined`) while `url` or `measurementId` is unset.\n */\nexport function sgtm(options: {\n  /** The client's endpoint: your tagging server and the client's activation path, e.g. `https://sgtm.example.com/mp/collect`. */\n  url: string | undefined\n  measurementId: string | undefined\n  /** Sent as `api_secret`, for a client or tag that checks it. */\n  apiSecret?: string\n  fetchImpl?: typeof fetch\n}): ServerDestination<true> | undefined {\n  const url = options.url?.trim()\n  const measurementId = options.measurementId?.trim()\n  if (!url || !measurementId) {\n    if (url || measurementId) console.warn('[consentlayer] sgtm is off: set both url and measurementId.')\n    return undefined\n  }\n  if (url.startsWith('/') || !isHttpsOrRelativeUrl(url)) {\n    throw new Error(`[consentlayer] sgtm url must be an HTTPS URL, received \"${url}\".`)\n  }\n  const endpoint = new URL(url)\n  endpoint.searchParams.set('measurement_id', measurementId)\n  if (options.apiSecret?.trim()) endpoint.searchParams.set('api_secret', options.apiSecret.trim())\n  const fetchImpl = options.fetchImpl ?? globalThis.fetch\n  return {\n    id: 'sgtm',\n    requiredConsent: 'analytics',\n    forwardBrowserEvents: true,\n    send: (event, request) =>\n      sendMeasurementProtocol(\n        { url: endpoint.href, sender: 'sgtm', receiver: 'Server-side GTM' },\n        event,\n        request,\n        fetchImpl,\n      ),\n  }\n}\n"]}

package/dist/server/tiktok.d.ts

@@ -0,0 +1,15 @@
+import { ServerDestination } from './index.js';
+import '../types-BV_AFZKQ.js';
+
+/**
+ * TikTok Events API. Receives browser events too; TikTok dedupes them by event ID.
+ * Page views stay with the pixel. Off (`undefined`) while `pixelId` or `accessToken` is unset.
+ */
+declare function tiktokEvents(options: {
+    pixelId: string | undefined;
+    accessToken: string | undefined;
+    testEventCode?: string;
+    fetchImpl?: typeof fetch;
+}): ServerDestination<true> | undefined;
+
+export { tiktokEvents };

package/dist/server/tiktok.js

@@ -0,0 +1,64 @@
+import { sha256 } from '../chunk-DK45XPEY.js';
+import { toTikTokEvent, tiktokUserData } from '../chunk-RK2M57GW.js';
+import { isValidPhoneE164, isValidEmail } from '../chunk-J3KUPF4R.js';
+
+// src/server/tiktok.ts
+function tiktokEvents(options) {
+  const pixelId = options.pixelId?.trim();
+  const accessToken = options.accessToken?.trim();
+  if (!pixelId || !accessToken) {
+    if (pixelId || accessToken) console.warn("[consentlayer] tiktokEvents is off: set both pixelId and accessToken.");
+    return void 0;
+  }
+  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+  return {
+    id: "tiktok",
+    requiredConsent: "marketing",
+    forwardBrowserEvents: true,
+    async send(event, request) {
+      if (event.name === "page_view") return;
+      const { name, params } = toTikTokEvent({
+        id: event.id ?? "",
+        name: event.name,
+        params: event.params ?? {},
+        options: { providers: event.providers }
+      });
+      const { email, phone_number: phone, external_id } = tiktokUserData(event.identity ?? {});
+      const response = await fetchImpl("https://business-api.tiktok.com/open_api/v1.3/event/track/", {
+        method: "POST",
+        headers: { "Access-Token": accessToken, "Content-Type": "application/json" },
+        body: JSON.stringify({
+          event_source: "web",
+          event_source_id: pixelId,
+          test_event_code: options.testEventCode,
+          data: [
+            {
+              event: name,
+              event_time: Math.floor(Date.now() / 1e3),
+              event_id: event.id,
+              user: {
+                email: email && isValidEmail(email) ? await sha256(email) : void 0,
+                phone: phone && isValidPhoneE164(phone) ? await sha256(phone) : void 0,
+                external_id: await sha256(external_id),
+                ip: request?.ip,
+                user_agent: request?.userAgent,
+                ttp: request?.cookies._ttp,
+                ttclid: request?.cookies.ttclid
+              },
+              properties: params,
+              page: { url: event.url }
+            }
+          ]
+        })
+      });
+      const result = await response.json().catch(() => ({}));
+      if (!response.ok || result.code !== 0) {
+        throw new Error(`TikTok Events API ${response.ok ? result.code : response.status}: ${result.message}`);
+      }
+    }
+  };
+}
+
+export { tiktokEvents };
+//# sourceMappingURL=tiktok.js.map
+//# sourceMappingURL=tiktok.js.map

package/dist/server/tiktok.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/tiktok.ts"],"names":[],"mappings":";;;;;AASO,SAAS,aAAa,OAAA,EAKW;AACtC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,EAAS,IAAA,EAAK;AACtC,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,WAAA,EAAa,IAAA,EAAK;AAC9C,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,WAAA,EAAa;AAC5B,IAAA,IAAI,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,uEAAuE,CAAA;AAChH,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,UAAA,CAAW,KAAA;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,QAAA;AAAA,IACJ,eAAA,EAAiB,WAAA;AAAA,IACjB,oBAAA,EAAsB,IAAA;AAAA,IACtB,MAAM,IAAA,CAAK,KAAA,EAAO,OAAA,EAAS;AAEzB,MAAA,IAAI,KAAA,CAAM,SAAS,WAAA,EAAa;AAChC,MAAA,MAAM,EAAE,IAAA,EAAM,MAAA,EAAO,GAAI,aAAA,CAAc;AAAA,QACrC,EAAA,EAAI,MAAM,EAAA,IAAM,EAAA;AAAA,QAChB,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,MAAA,EAAQ,KAAA,CAAM,MAAA,IAAU,EAAC;AAAA,QACzB,OAAA,EAAS,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA;AAAU,OACvC,CAAA;AACD,MAAA,MAAM,EAAE,KAAA,EAAO,YAAA,EAAc,KAAA,EAAO,WAAA,KAAgB,cAAA,CAAe,KAAA,CAAM,QAAA,IAAY,EAAE,CAAA;AACvF,MAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,4DAAA,EAA8D;AAAA,QAC7F,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,WAAA,EAAa,gBAAgB,kBAAA,EAAmB;AAAA,QAC3E,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,YAAA,EAAc,KAAA;AAAA,UACd,eAAA,EAAiB,OAAA;AAAA,UACjB,iBAAiB,OAAA,CAAQ,aAAA;AAAA,UACzB,IAAA,EAAM;AAAA,YACJ;AAAA,cACE,KAAA,EAAO,IAAA;AAAA,cACP,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAAA,cACxC,UAAU,KAAA,CAAM,EAAA;AAAA,cAChB,IAAA,EAAM;AAAA,gBACJ,KAAA,EAAO,SAAS,YAAA,CAAa,KAAK,IAAI,MAAM,MAAA,CAAO,KAAK,CAAA,GAAI,MAAA;AAAA,gBAC5D,KAAA,EAAO,SAAS,gBAAA,CAAiB,KAAK,IAAI,MAAM,MAAA,CAAO,KAAK,CAAA,GAAI,MAAA;AAAA,gBAChE,WAAA,EAAa,MAAM,MAAA,CAAO,WAAW,CAAA;AAAA,gBACrC,IAAI,OAAA,EAAS,EAAA;AAAA,gBACb,YAAY,OAAA,EAAS,SAAA;AAAA,gBACrB,GAAA,EAAK,SAAS,OAAA,CAAQ,IAAA;AAAA,gBACtB,MAAA,EAAQ,SAAS,OAAA,CAAQ;AAAA,eAC3B;AAAA,cACA,UAAA,EAAY,MAAA;AAAA,cACZ,IAAA,EAAM,EAAE,GAAA,EAAK,KAAA,CAAM,GAAA;AAAI;AACzB;AACF,SACD;AAAA,OACF,CAAA;AACD,MAAA,MAAM,MAAA,GAAU,MAAM,QAAA,CAAS,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AACtD,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,IAAM,MAAA,CAAO,SAAS,CAAA,EAAG;AACrC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,QAAA,CAAS,EAAA,GAAK,MAAA,CAAO,IAAA,GAAO,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,MAAA,CAAO,OAAO,CAAA,CAAE,CAAA;AAAA,MACvG;AAAA,IACF;AAAA,GACF;AACF","file":"tiktok.js","sourcesContent":["import { tiktokUserData, toTikTokEvent } from '../core/tiktok-events'\nimport { isValidEmail, isValidPhoneE164 } from '../core/validation'\nimport type { ServerDestination } from './handler'\nimport { sha256 } from './http'\n\n/**\n * TikTok Events API. Receives browser events too; TikTok dedupes them by event ID.\n * Page views stay with the pixel. Off (`undefined`) while `pixelId` or `accessToken` is unset.\n */\nexport function tiktokEvents(options: {\n  pixelId: string | undefined\n  accessToken: string | undefined\n  testEventCode?: string\n  fetchImpl?: typeof fetch\n}): ServerDestination<true> | undefined {\n  const pixelId = options.pixelId?.trim()\n  const accessToken = options.accessToken?.trim()\n  if (!pixelId || !accessToken) {\n    if (pixelId || accessToken) console.warn('[consentlayer] tiktokEvents is off: set both pixelId and accessToken.')\n    return undefined\n  }\n  const fetchImpl = options.fetchImpl ?? globalThis.fetch\n  return {\n    id: 'tiktok',\n    requiredConsent: 'marketing',\n    forwardBrowserEvents: true,\n    async send(event, request) {\n      // ttq.page() takes no event ID, so a server copy of a page view could not be deduplicated.\n      if (event.name === 'page_view') return\n      const { name, params } = toTikTokEvent({\n        id: event.id ?? '',\n        name: event.name,\n        params: event.params ?? {},\n        options: { providers: event.providers },\n      })\n      const { email, phone_number: phone, external_id } = tiktokUserData(event.identity ?? {})\n      const response = await fetchImpl('https://business-api.tiktok.com/open_api/v1.3/event/track/', {\n        method: 'POST',\n        headers: { 'Access-Token': accessToken, 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          event_source: 'web',\n          event_source_id: pixelId,\n          test_event_code: options.testEventCode,\n          data: [\n            {\n              event: name,\n              event_time: Math.floor(Date.now() / 1000),\n              event_id: event.id,\n              user: {\n                email: email && isValidEmail(email) ? await sha256(email) : undefined,\n                phone: phone && isValidPhoneE164(phone) ? await sha256(phone) : undefined,\n                external_id: await sha256(external_id),\n                ip: request?.ip,\n                user_agent: request?.userAgent,\n                ttp: request?.cookies._ttp,\n                ttclid: request?.cookies.ttclid,\n              },\n              properties: params,\n              page: { url: event.url },\n            },\n          ],\n        }),\n      })\n      const result = (await response.json().catch(() => ({}))) as { code?: number; message?: string }\n      if (!response.ok || result.code !== 0) {\n        throw new Error(`TikTok Events API ${response.ok ? result.code : response.status}: ${result.message}`)\n      }\n    },\n  }\n}\n"]}

package/dist/solid.d.ts

@@ -0,0 +1,59 @@
+import { JSX, ComponentProps, Accessor } from 'solid-js';
+import { b as ConsentControllerOptions, C as ConsentControllerState, a as ConsentControllerActions } from './consent-controller-DyHPNfyT.js';
+import { m as Analytics, n as PageViewPayload, l as ErrorContext, p as ConsentState, q as ConsentApi } from './types-BV_AFZKQ.js';
+
+/** Props for `<AnalyticsProvider>`. */
+type AnalyticsProviderProps = ConsentControllerOptions & {
+    analytics: Analytics;
+    children?: JSX.Element;
+    /** Changes on every navigation; a page view is sent once per key. `null` holds page views until the route is known. */
+    routeKey?: string | null;
+    page?: PageViewPayload;
+};
+/** What `useConsentController()` returns: the UI state as reactive properties, and the actions. */
+type ConsentController = Readonly<ConsentControllerState> & ConsentControllerActions;
+/** Boots analytics, sends page views on navigation and provides the state for your consent UI. */
+declare function AnalyticsProvider(props: AnalyticsProviderProps): JSX.Element;
+/** The instance from `<AnalyticsProvider>`, else the one `createAnalytics()` made. */
+declare function useAnalytics(): Analytics;
+/** Current consent as an accessor, `null` before a choice. */
+declare function useConsent(): {
+    consent: Accessor<ConsentState | null>;
+    engine: ConsentApi;
+    setConsent: (consent: ConsentState) => Promise<void>;
+    update: (partial: Partial<ConsentState>) => Promise<void>;
+};
+/** State and actions for building your own consent UI. */
+declare function useConsentController(): ConsentController;
+/** Props for `<ErrorBoundary>`. */
+type ErrorBoundaryProps = {
+    children?: JSX.Element;
+    fallback: JSX.Element | ((error: unknown, reset: () => void) => JSX.Element);
+    /** Defaults to the instance from `<AnalyticsProvider>`, else the one `createAnalytics()` made. */
+    analytics?: Analytics;
+    tags?: ErrorContext['tags'];
+};
+/** Renders `fallback` when a child throws, and sends the error through `captureError`. */
+declare function ErrorBoundary(props: ErrorBoundaryProps): JSX.Element;
+/**
+ * Meta's `<noscript>` PageView pixel. It fires only for visitors without
+ * JavaScript, who never see the consent banner, so it tracks them without
+ * consent. Render it only where that is lawful for you. Renders nothing without
+ * `enabled` or while `pixelId` is unset. Other attributes go to the `<img>`.
+ */
+declare function MetaPixelNoscript(props: {
+    pixelId: string | undefined;
+    enabled?: boolean;
+} & ComponentProps<'img'>): JSX.Element;
+/**
+ * Google Tag Manager's `<noscript>` iframe. It loads the container only for
+ * visitors without JavaScript, who never see the consent banner, so its tags
+ * run without consent. Render it only where that is lawful for you. Renders
+ * nothing without `enabled` or while `containerId` is unset. Other attributes go to the `<iframe>`.
+ */
+declare function GtmNoscript(props: {
+    containerId: string | undefined;
+    enabled?: boolean;
+} & ComponentProps<'iframe'>): JSX.Element;
+
+export { AnalyticsProvider, type AnalyticsProviderProps, type ConsentController, ErrorBoundary, type ErrorBoundaryProps, GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController };

package/dist/solid.js

@@ -0,0 +1,3 @@
+export { AnalyticsProvider, ErrorBoundary, GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController } from './chunk-RZ4TYRNY.js';
+//# sourceMappingURL=solid.js.map
+//# sourceMappingURL=solid.js.map

package/dist/solid.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"solid.js"}

package/dist/solidstart.d.ts

@@ -0,0 +1,16 @@
+import { JSX } from 'solid-js';
+import { AnalyticsProviderProps } from './solid.js';
+export { ConsentController, ErrorBoundary, ErrorBoundaryProps, GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController } from './solid.js';
+import './consent-controller-DyHPNfyT.js';
+import './types-BV_AFZKQ.js';
+
+/** Props for `<AnalyticsProvider>` from `consentlayer/solidstart`: the route comes from Solid Router. */
+type SolidStartAnalyticsProviderProps = Omit<AnalyticsProviderProps, 'routeKey'>;
+/**
+ * `<AnalyticsProvider>` for SolidStart and Solid Router: sends a page view on
+ * every navigation to a new path or query string. Render it in the router's
+ * `root`.
+ */
+declare function AnalyticsProvider(props: SolidStartAnalyticsProviderProps): JSX.Element;
+
+export { AnalyticsProvider, type SolidStartAnalyticsProviderProps };

package/dist/solidstart.js

@@ -0,0 +1,22 @@
+import { AnalyticsProvider } from './chunk-RZ4TYRNY.js';
+export { ErrorBoundary, GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController } from './chunk-RZ4TYRNY.js';
+import { useLocation, useIsRouting } from '@solidjs/router';
+import { createComponent, mergeProps } from 'solid-js';
+
+function AnalyticsProvider2(props) {
+  const location = useLocation();
+  const isRouting = useIsRouting();
+  return createComponent(
+    AnalyticsProvider,
+    mergeProps(props, {
+      // The router updates `location` before the browser URL, which it sets when routing ends.
+      get routeKey() {
+        return isRouting() ? null : location.pathname + location.search;
+      }
+    })
+  );
+}
+
+export { AnalyticsProvider2 as AnalyticsProvider };
+//# sourceMappingURL=solidstart.js.map
+//# sourceMappingURL=solidstart.js.map

package/dist/solidstart.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/solidstart.ts"],"names":["AnalyticsProvider"],"mappings":";;;;;AAuBO,SAASA,mBAAkB,KAAA,EAAsD;AACtF,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,MAAM,YAAY,YAAA,EAAa;AAC/B,EAAA,OAAO,eAAA;AAAA,IACL,iBAAA;AAAA,IACA,WAAW,KAAA,EAAO;AAAA;AAAA,MAEhB,IAAI,QAAA,GAAW;AACb,QAAA,OAAO,SAAA,EAAU,GAAI,IAAA,GAAO,QAAA,CAAS,WAAW,QAAA,CAAS,MAAA;AAAA,MAC3D;AAAA,KACD;AAAA,GACH;AACF","file":"solidstart.js","sourcesContent":["import { useIsRouting, useLocation } from '@solidjs/router'\nimport { createComponent, mergeProps, type JSX } from 'solid-js'\nimport { AnalyticsProvider as SolidAnalyticsProvider, type AnalyticsProviderProps } from './solid'\n\nexport {\n  ErrorBoundary,\n  GtmNoscript,\n  MetaPixelNoscript,\n  useAnalytics,\n  useConsent,\n  useConsentController,\n  type ConsentController,\n  type ErrorBoundaryProps,\n} from './solid'\n\n/** Props for `<AnalyticsProvider>` from `consentlayer/solidstart`: the route comes from Solid Router. */\nexport type SolidStartAnalyticsProviderProps = Omit<AnalyticsProviderProps, 'routeKey'>\n\n/**\n * `<AnalyticsProvider>` for SolidStart and Solid Router: sends a page view on\n * every navigation to a new path or query string. Render it in the router's\n * `root`.\n */\nexport function AnalyticsProvider(props: SolidStartAnalyticsProviderProps): JSX.Element {\n  const location = useLocation()\n  const isRouting = useIsRouting()\n  return createComponent(\n    SolidAnalyticsProvider,\n    mergeProps(props, {\n      // The router updates `location` before the browser URL, which it sets when routing ends.\n      get routeKey() {\n        return isRouting() ? null : location.pathname + location.search\n      },\n    }),\n  )\n}\n"]}

package/dist/svelte/GtmNoscript.svelte

@@ -0,0 +1,18 @@
+<script lang="ts">
+  import type { HTMLIframeAttributes } from 'svelte/elements'
+
+  let { containerId, enabled = false, ...rest }: { containerId: string | undefined; enabled?: boolean } & HTMLIframeAttributes = $props()
+</script>
+
+{#if enabled && containerId}
+  <noscript>
+    <iframe
+      title="Google Tag Manager"
+      height="0"
+      width="0"
+      style="display:none;visibility:hidden"
+      {...rest}
+      src="https://www.googletagmanager.com/ns.html?id={encodeURIComponent(containerId)}"
+    ></iframe>
+  </noscript>
+{/if}

package/dist/svelte/MetaPixelNoscript.svelte

@@ -0,0 +1,18 @@
+<script lang="ts">
+  import type { HTMLImgAttributes } from 'svelte/elements'
+
+  let { pixelId, enabled = false, ...rest }: { pixelId: string | undefined; enabled?: boolean } & HTMLImgAttributes = $props()
+</script>
+
+{#if enabled && pixelId}
+  <noscript>
+    <img
+      height="1"
+      width="1"
+      style="display:none"
+      {...rest}
+      alt=""
+      src="https://www.facebook.com/tr?id={encodeURIComponent(pixelId)}&ev=PageView&noscript=1"
+    />
+  </noscript>
+{/if}

package/dist/svelte.d.ts

@@ -0,0 +1,55 @@
+import { Component } from 'svelte';
+import { C as ConsentControllerState, a as ConsentControllerActions, b as ConsentControllerOptions } from './consent-controller-DyHPNfyT.js';
+import { m as Analytics, n as PageViewPayload, p as ConsentState, q as ConsentApi } from './types-BV_AFZKQ.js';
+import { HTMLIframeAttributes, HTMLImgAttributes } from 'svelte/elements';
+
+/** The part of SvelteKit's `afterNavigate` ConsentLayer uses. */
+type AfterNavigateLike = (callback: (navigation: {
+    to: {
+        url: URL;
+    } | null;
+}) => void) => void;
+/** Options for `consentLayer()`. */
+type ConsentLayerOptions = ConsentControllerOptions & {
+    analytics: Analytics;
+    /** SvelteKit's `afterNavigate`; sends a page view on every navigation. Without it, one page view is sent for the page load. */
+    afterNavigate?: AfterNavigateLike;
+    page?: PageViewPayload;
+};
+/** What `useConsentController()` returns: the UI state as reactive properties, and the actions. */
+type ConsentController = Readonly<ConsentControllerState> & ConsentControllerActions;
+/**
+ * Meta's `<noscript>` PageView pixel. It fires only for visitors without
+ * JavaScript, who never see the consent banner, so it tracks them without
+ * consent. Render it only where that is lawful for you. Renders nothing without
+ * `enabled` or while `pixelId` is unset. Other attributes go to the `<img>`.
+ */
+declare const MetaPixelNoscript: Component<{
+    pixelId: string | undefined;
+    enabled?: boolean;
+} & HTMLImgAttributes>;
+/**
+ * Google Tag Manager's `<noscript>` iframe. It loads the container only for
+ * visitors without JavaScript, who never see the consent banner, so its tags
+ * run without consent. Render it only where that is lawful for you. Renders
+ * nothing without `enabled` or while `containerId` is unset. Other attributes go to the `<iframe>`.
+ */
+declare const GtmNoscript: Component<{
+    containerId: string | undefined;
+    enabled?: boolean;
+} & HTMLIframeAttributes>;
+/** Boots analytics, sends page views on navigation and provides the state for your consent UI. Call it in your root component. */
+declare function consentLayer({ analytics, afterNavigate, page, ...options }: ConsentLayerOptions): ConsentController;
+/** The instance from `consentLayer()`, else the one `createAnalytics()` made. */
+declare function useAnalytics(): Analytics;
+/** Current consent as a reactive property, `null` before a choice. */
+declare function useConsent(): {
+    readonly consent: ConsentState | null;
+    engine: ConsentApi;
+    setConsent: (consent: ConsentState) => Promise<void>;
+    update: (partial: Partial<ConsentState>) => Promise<void>;
+};
+/** State and actions for building your own consent UI. */
+declare function useConsentController(): ConsentController;
+
+export { type AfterNavigateLike, type ConsentController, type ConsentLayerOptions, GtmNoscript, MetaPixelNoscript, consentLayer, useAnalytics, useConsent, useConsentController };

package/dist/svelte.js

@@ -0,0 +1,3 @@
+export { GtmNoscript, MetaPixelNoscript, consentLayer, useAnalytics, useConsent, useConsentController } from './chunk-TYOQYV45.js';
+//# sourceMappingURL=svelte.js.map
+//# sourceMappingURL=svelte.js.map

package/dist/svelte.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"svelte.js"}

package/dist/sveltekit.d.ts

@@ -0,0 +1,18 @@
+import { m as Analytics } from './types-BV_AFZKQ.js';
+import { ConsentLayerOptions, ConsentController } from './svelte.js';
+export { GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController } from './svelte.js';
+import 'svelte';
+import './consent-controller-DyHPNfyT.js';
+import 'svelte/elements';
+
+/** Options for `consentLayer()` from `consentlayer/sveltekit`. */
+type SvelteKitConsentLayerOptions = Omit<ConsentLayerOptions, 'afterNavigate'>;
+/** Boots analytics, sends a page view on every SvelteKit navigation and provides the state for your consent UI. Call it in your root layout. */
+declare function consentLayer(options: SvelteKitConsentLayerOptions): ConsentController;
+/** A client `handleError` hook that sends the errors your code throws (`kind: 'unknown'`) through `captureError`. */
+declare function handleErrorWith(analytics: Analytics): (input: {
+    kind: string;
+    error: unknown;
+}) => void;
+
+export { ConsentController, type SvelteKitConsentLayerOptions, consentLayer, handleErrorWith };

package/dist/sveltekit.js

@@ -0,0 +1,16 @@
+import { consentLayer } from './chunk-TYOQYV45.js';
+export { GtmNoscript, MetaPixelNoscript, useAnalytics, useConsent, useConsentController } from './chunk-TYOQYV45.js';
+import { afterNavigate } from '$app/navigation';
+
+function consentLayer2(options) {
+  return consentLayer({ ...options, afterNavigate });
+}
+function handleErrorWith(analytics) {
+  return ({ kind, error }) => {
+    if (kind === "unknown") void analytics.captureError(error, { source: "boundary" });
+  };
+}
+
+export { consentLayer2 as consentLayer, handleErrorWith };
+//# sourceMappingURL=sveltekit.js.map
+//# sourceMappingURL=sveltekit.js.map

package/dist/sveltekit.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sveltekit.ts"],"names":["consentLayer"],"mappings":";;;;AAiBO,SAASA,cAAa,OAAA,EAA0D;AACrF,EAAA,OAAO,YAAA,CAAmB,EAAE,GAAG,OAAA,EAAS,eAAe,CAAA;AACzD;AAGO,SAAS,gBAAgB,SAAA,EAAyE;AACvG,EAAA,OAAO,CAAC,EAAE,IAAA,EAAM,KAAA,EAAM,KAAM;AAC1B,IAAA,IAAI,IAAA,KAAS,WAAW,KAAK,SAAA,CAAU,aAAa,KAAA,EAAO,EAAE,MAAA,EAAQ,UAAA,EAAY,CAAA;AAAA,EACnF,CAAA;AACF","file":"sveltekit.js","sourcesContent":["import { afterNavigate } from '$app/navigation'\nimport type { Analytics } from './core/types'\nimport { consentLayer as svelteConsentLayer, type ConsentController, type ConsentLayerOptions } from './svelte'\n\nexport {\n  GtmNoscript,\n  MetaPixelNoscript,\n  useAnalytics,\n  useConsent,\n  useConsentController,\n  type ConsentController,\n} from './svelte'\n\n/** Options for `consentLayer()` from `consentlayer/sveltekit`. */\nexport type SvelteKitConsentLayerOptions = Omit<ConsentLayerOptions, 'afterNavigate'>\n\n/** Boots analytics, sends a page view on every SvelteKit navigation and provides the state for your consent UI. Call it in your root layout. */\nexport function consentLayer(options: SvelteKitConsentLayerOptions): ConsentController {\n  return svelteConsentLayer({ ...options, afterNavigate })\n}\n\n/** A client `handleError` hook that sends the errors your code throws (`kind: 'unknown'`) through `captureError`. */\nexport function handleErrorWith(analytics: Analytics): (input: { kind: string; error: unknown }) => void {\n  return ({ kind, error }) => {\n    if (kind === 'unknown') void analytics.captureError(error, { source: 'boundary' })\n  }\n}\n"]}

package/dist/testing.d.ts

@@ -0,0 +1,11 @@
+import { f as AnalyticsPlugin } from './types-BV_AFZKQ.js';
+
+/**
+ * Runs a plugin through the manager in a DOM test environment (jsdom, happy-dom)
+ * and returns the contract problems found; `[]` means it passed.
+ * Checks that nothing loads, sends or sets cookies before consent
+ * (scripts are allowed with `loadBeforeConsent`), and that no hook throws.
+ */
+declare function checkPlugin(plugin: AnalyticsPlugin): Promise<string[]>;
+
+export { checkPlugin };

package/dist/testing.js

@@ -0,0 +1,50 @@
+import { createAnalyticsManager } from './chunk-LEAQJXJU.js';
+
+// src/testing.ts
+var denied = { preferences: false, analytics: false, marketing: false };
+var granted = { preferences: true, analytics: true, marketing: true };
+async function checkPlugin(plugin) {
+  const problems = [];
+  const scripts = () => document.querySelectorAll("script[src]").length;
+  const before = { scripts: scripts(), cookies: document.cookie };
+  const realFetch = globalThis.fetch;
+  let requests = 0;
+  globalThis.fetch = (() => {
+    requests += 1;
+    return Promise.resolve(new Response(null, { status: 204 }));
+  });
+  const manager = createAnalyticsManager({
+    providers: [plugin],
+    consent: denied,
+    onError: (error) => problems.push(`${error.message}: ${String(error.cause)}`)
+  });
+  const exercise = async () => {
+    await manager.page();
+    await manager.track("sign_up", { method: "test" });
+    await manager.identify("contract_user", { email: "contract@example.com" });
+    await manager.group("contract_group");
+  };
+  try {
+    await manager.boot();
+    await exercise();
+    if (plugin.requiredConsent !== "none") {
+      if (!plugin.loadBeforeConsent && scripts() > before.scripts) {
+        problems.push("loaded a script before consent");
+      }
+      if (requests) problems.push("sent a request before consent");
+      if (document.cookie !== before.cookies) problems.push("set a cookie before consent");
+    }
+    await manager.updateConsent(granted);
+    await exercise();
+    await manager.reset();
+    await manager.updateConsent(denied);
+  } finally {
+    manager.destroy();
+    globalThis.fetch = realFetch;
+  }
+  return problems;
+}
+
+export { checkPlugin };
+//# sourceMappingURL=testing.js.map
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/testing.ts"],"names":[],"mappings":";;;AAGA,IAAM,SAAuB,EAAE,WAAA,EAAa,OAAO,SAAA,EAAW,KAAA,EAAO,WAAW,KAAA,EAAM;AACtF,IAAM,UAAwB,EAAE,WAAA,EAAa,MAAM,SAAA,EAAW,IAAA,EAAM,WAAW,IAAA,EAAK;AAQpF,eAAsB,YAAY,MAAA,EAA4C;AAC5E,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,gBAAA,CAAiB,aAAa,CAAA,CAAE,MAAA;AAC/D,EAAA,MAAM,SAAS,EAAE,OAAA,EAAS,SAAQ,EAAG,OAAA,EAAS,SAAS,MAAA,EAAO;AAC9D,EAAA,MAAM,YAAY,UAAA,CAAW,KAAA;AAC7B,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,UAAA,CAAW,SAAS,MAAM;AACxB,IAAA,QAAA,IAAY,CAAA;AACZ,IAAA,OAAO,OAAA,CAAQ,QAAQ,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAC,CAAA;AAAA,EAC5D,CAAA,CAAA;AAEA,EAAA,MAAM,UAAU,sBAAA,CAAuB;AAAA,IACrC,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,IAClB,OAAA,EAAS,MAAA;AAAA,IACT,OAAA,EAAS,CAAC,KAAA,KAAU,QAAA,CAAS,IAAA,CAAK,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,KAAK,CAAC,CAAA,CAAE;AAAA,GAC7E,CAAA;AACD,EAAA,MAAM,WAAW,YAAY;AAC3B,IAAA,MAAM,QAAQ,IAAA,EAAK;AACnB,IAAA,MAAM,QAAQ,KAAA,CAAM,SAAA,EAAW,EAAE,MAAA,EAAQ,QAAQ,CAAA;AACjD,IAAA,MAAM,QAAQ,QAAA,CAAS,eAAA,EAAiB,EAAE,KAAA,EAAO,wBAAwB,CAAA;AACzE,IAAA,MAAM,OAAA,CAAQ,MAAM,gBAAgB,CAAA;AAAA,EACtC,CAAA;AACA,EAAA,IAAI;AACF,IAAA,MAAM,QAAQ,IAAA,EAAK;AACnB,IAAA,MAAM,QAAA,EAAS;AACf,IAAA,IAAI,MAAA,CAAO,oBAAoB,MAAA,EAAQ;AACrC,MAAA,IAAI,CAAC,MAAA,CAAO,iBAAA,IAAqB,OAAA,EAAQ,GAAI,OAAO,OAAA,EAAS;AAC3D,QAAA,QAAA,CAAS,KAAK,gCAAgC,CAAA;AAAA,MAChD;AACA,MAAA,IAAI,QAAA,EAAU,QAAA,CAAS,IAAA,CAAK,+BAA+B,CAAA;AAC3D,MAAA,IAAI,SAAS,MAAA,KAAW,MAAA,CAAO,OAAA,EAAS,QAAA,CAAS,KAAK,6BAA6B,CAAA;AAAA,IACrF;AACA,IAAA,MAAM,OAAA,CAAQ,cAAc,OAAO,CAAA;AACnC,IAAA,MAAM,QAAA,EAAS;AACf,IAAA,MAAM,QAAQ,KAAA,EAAM;AACpB,IAAA,MAAM,OAAA,CAAQ,cAAc,MAAM,CAAA;AAAA,EACpC,CAAA,SAAE;AACA,IAAA,OAAA,CAAQ,OAAA,EAAQ;AAChB,IAAA,UAAA,CAAW,KAAA,GAAQ,SAAA;AAAA,EACrB;AACA,EAAA,OAAO,QAAA;AACT","file":"testing.js","sourcesContent":["import { createAnalyticsManager } from './core/analytics-manager'\nimport type { AnalyticsPlugin, ConsentState } from './core/types'\n\nconst denied: ConsentState = { preferences: false, analytics: false, marketing: false }\nconst granted: ConsentState = { preferences: true, analytics: true, marketing: true }\n\n/**\n * Runs a plugin through the manager in a DOM test environment (jsdom, happy-dom)\n * and returns the contract problems found; `[]` means it passed.\n * Checks that nothing loads, sends or sets cookies before consent\n * (scripts are allowed with `loadBeforeConsent`), and that no hook throws.\n */\nexport async function checkPlugin(plugin: AnalyticsPlugin): Promise<string[]> {\n  const problems: string[] = []\n  const scripts = () => document.querySelectorAll('script[src]').length\n  const before = { scripts: scripts(), cookies: document.cookie }\n  const realFetch = globalThis.fetch\n  let requests = 0\n  globalThis.fetch = (() => {\n    requests += 1\n    return Promise.resolve(new Response(null, { status: 204 }))\n  }) as typeof fetch\n\n  const manager = createAnalyticsManager({\n    providers: [plugin],\n    consent: denied,\n    onError: (error) => problems.push(`${error.message}: ${String(error.cause)}`),\n  })\n  const exercise = async () => {\n    await manager.page()\n    await manager.track('sign_up', { method: 'test' })\n    await manager.identify('contract_user', { email: 'contract@example.com' })\n    await manager.group('contract_group')\n  }\n  try {\n    await manager.boot()\n    await exercise()\n    if (plugin.requiredConsent !== 'none') {\n      if (!plugin.loadBeforeConsent && scripts() > before.scripts) {\n        problems.push('loaded a script before consent')\n      }\n      if (requests) problems.push('sent a request before consent')\n      if (document.cookie !== before.cookies) problems.push('set a cookie before consent')\n    }\n    await manager.updateConsent(granted)\n    await exercise()\n    await manager.reset()\n    await manager.updateConsent(denied)\n  } finally {\n    manager.destroy()\n    globalThis.fetch = realFetch\n  }\n  return problems\n}\n"]}