consentlayer 0.0.0 → 1.0.0-rc.0

package/dist/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/react/error-boundary.tsx","../../src/react/gtm-noscript.ts","../../src/react/meta-pixel-noscript.ts"],"names":["createElement"],"mappings":";;;;;;;AAmBO,IAAM,aAAA,GAAN,cAA4B,SAAA,CAAmE;AAAA,EACpG,OAAO,WAAA,GAAc,gBAAA;AAAA,EAErB,KAAA,GAAQ,EAAE,KAAA,EAAO,MAAA,EAAsB,QAAQ,KAAA,EAAM;AAAA,EAErD,OAAO,yBAAyB,KAAA,EAAgB;AAC9C,IAAA,OAAO,EAAE,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAK;AAAA,EAC/B;AAAA,EAEA,kBAAkB,KAAA,EAAgB;AAChC,IAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,SAAA,IAAa,IAAA,CAAK,WAAW,eAAA,EAAgB;AAC1E,IAAA,KAAK,SAAA,EAAW,YAAA,CAAa,KAAA,EAAO,EAAE,MAAA,EAAQ,YAAY,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAAA;AAAA,EACnF;AAAA,EAEA,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,EAAE,KAAA,EAAO,MAAA,EAAW,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,EAE/D,MAAA,GAAS;AACP,IAAA,IAAI,CAAC,IAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,OAAO,KAAK,KAAA,CAAM,QAAA;AAC1C,IAAA,MAAM,EAAE,QAAA,EAAS,GAAI,IAAA,CAAK,KAAA;AAC1B,IAAA,OAAO,OAAO,QAAA,KAAa,UAAA,GAAa,QAAA,CAAS,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,CAAA,GAAI,QAAA;AAAA,EACrG;AACF;AAWO,SAAS,iBAAA,CACd,SAAA,EACA,MAAA,GAA8C,CAAC,EAAE,KAAA,EAAM,qBACrD,IAAA,CAAC,MAAA,EAAA,EAAK,OAAO,EAAE,UAAA,EAAY,WAAA,EAAa,OAAA,EAAS,QAAO,EACtD,QAAA,EAAA;AAAA,kBAAA,GAAA,CAAC,QAAG,QAAA,EAAA,uBAAA,EAAqB,CAAA;AAAA,sBACxB,QAAA,EAAA,EAAO,IAAA,EAAK,QAAA,EAAS,OAAA,EAAS,OAAO,QAAA,EAAA,WAAA,EAEtC;AAAA,CAAA,EACF,CAAA,EAEF;AACA,EAAA,OAAO,SAAS,WAAA,CAAY,EAAE,KAAA,EAAO,OAAM,EAA8D;AACvG,IAAA,SAAA,CAAU,MAAM;AACd,MAAA,KAAA,CAAM,YAAY;AAChB,QAAA,MAAM,SAAA,CAAU,QAAQ,SAAA,EAAU;AAClC,QAAA,MAAM,UAAU,IAAA,EAAK;AACrB,QAAA,MAAM,SAAA,CAAU,aAAa,KAAA,EAAO;AAAA,UAClC,MAAA,EAAQ,UAAA;AAAA,UACR,KAAA,EAAO,OAAA;AAAA,UACP,MAAM,KAAA,CAAM,MAAA,GAAS,EAAE,MAAA,EAAQ,KAAA,CAAM,QAAO,GAAI;AAAA,SACjD,CAAA;AAAA,MACH,CAAA,GAAG;AAAA,IACL,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AACV,IAAA,uBACE,GAAA,CAAC,MAAA,EAAA,EAAK,IAAA,EAAK,IAAA,EACT,QAAA,kBAAA,GAAA,CAAC,MAAA,EAAA,EAAM,QAAA,EAAA,MAAA,CAAO,EAAE,KAAA,EAAO,KAAA,EAAO,CAAA,EAAE,CAAA,EAClC,CAAA;AAAA,EAEJ,CAAA;AACF;ACvEO,SAAS,YACd,KAAA,EAIA;AACA,EAAA,MAAM,EAAE,WAAA,EAAa,OAAA,EAAS,GAAG,aAAY,GAAI,KAAA;AACjD,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,WAAA,EAAa,OAAO,IAAA;AACrC,EAAA,OAAO,aAAA;AAAA,IACL,UAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAc,QAAA,EAAU;AAAA,MACtB,KAAA,EAAO,oBAAA;AAAA,MACP,GAAG,WAAA;AAAA,MACH,MAAA,EAAQ,YAAY,MAAA,IAAU,CAAA;AAAA,MAC9B,KAAA,EAAO,YAAY,KAAA,IAAS,CAAA;AAAA,MAC5B,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,YAAY,QAAA,EAAU,GAAG,YAAY,KAAA,EAAM;AAAA,MACrE,GAAA,EAAK,eAAe,WAAW;AAAA,KAChC;AAAA,GACH;AACF;ACpBO,SAAS,kBACd,KAAA,EAIA;AACA,EAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAS,GAAG,YAAW,GAAI,KAAA;AAC5C,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,OAAA,EAAS,OAAO,IAAA;AACjC,EAAA,OAAOA,aAAAA;AAAA,IACL,UAAA;AAAA,IACA,MAAA;AAAA,IACAA,cAAc,KAAA,EAAO;AAAA,MACnB,GAAG,UAAA;AAAA,MACH,GAAA,EAAK,EAAA;AAAA,MACL,MAAA,EAAQ,WAAW,MAAA,IAAU,CAAA;AAAA,MAC7B,KAAA,EAAO,WAAW,KAAA,IAAS,CAAA;AAAA,MAC3B,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,GAAG,WAAW,KAAA,EAAM;AAAA,MAC9C,GAAA,EAAK,gBAAgB,OAAO;AAAA,KAC7B;AAAA,GACH;AACF","file":"index.js","sourcesContent":["'use client'\n\nimport { Component, useEffect, type ContextType, type ReactNode } from 'react'\nimport type { Analytics, ErrorContext } from '../core/types'\nimport { latestAnalytics } from '../core/create-analytics'\nimport { AnalyticsContext } from './analytics-provider'\n\ntype FallbackProps = { error: unknown; reset: () => void }\n\n/** Props for `<ErrorBoundary>`. */\nexport type ErrorBoundaryProps = {\n  children: ReactNode\n  fallback: ReactNode | ((props: FallbackProps) => ReactNode)\n  /** Defaults to the instance from `<AnalyticsProvider>`, else the one `createAnalytics()` made. */\n  analytics?: Analytics\n  tags?: ErrorContext['tags']\n}\n\n/** Renders `fallback` when a child throws, and sends the error through `captureError`. */\nexport class ErrorBoundary extends Component<ErrorBoundaryProps, { error: unknown; failed: boolean }> {\n  static contextType = AnalyticsContext\n  declare context: ContextType<typeof AnalyticsContext>\n  state = { error: undefined as unknown, failed: false }\n\n  static getDerivedStateFromError(error: unknown) {\n    return { error, failed: true }\n  }\n\n  componentDidCatch(error: unknown) {\n    const analytics = this.props.analytics ?? this.context ?? latestAnalytics()\n    void analytics?.captureError(error, { source: 'boundary', tags: this.props.tags })\n  }\n\n  reset = () => this.setState({ error: undefined, failed: false })\n\n  render() {\n    if (!this.state.failed) return this.props.children\n    const { fallback } = this.props\n    return typeof fallback === 'function' ? fallback({ error: this.state.error, reset: this.reset }) : fallback\n  }\n}\n\n/**\n * The component for Next.js `app/global-error.tsx`, which replaces the root\n * layout, so `<AnalyticsProvider>` isn't there: pass the instance.\n *\n * ```tsx\n * 'use client'\n * export default createGlobalError(analytics)\n * ```\n */\nexport function createGlobalError(\n  analytics: Analytics,\n  render: (props: FallbackProps) => ReactNode = ({ reset }) => (\n    <main style={{ fontFamily: 'system-ui', padding: '2rem' }}>\n      <h1>Something went wrong.</h1>\n      <button type=\"button\" onClick={reset}>\n        Try again\n      </button>\n    </main>\n  ),\n) {\n  return function GlobalError({ error, reset }: { error: Error & { digest?: string }; reset: () => void }) {\n    useEffect(() => {\n      void (async () => {\n        await analytics.consent.bootstrap()\n        await analytics.boot()\n        await analytics.captureError(error, {\n          source: 'boundary',\n          level: 'fatal',\n          tags: error.digest ? { digest: error.digest } : undefined,\n        })\n      })()\n    }, [error])\n    return (\n      <html lang=\"en\">\n        <body>{render({ error, reset })}</body>\n      </html>\n    )\n  }\n}\n","import { createElement, type ComponentPropsWithoutRef } from 'react'\nimport { gtmNoscriptSrc } from '../core/noscript'\n\n/**\n * Google Tag Manager's `<noscript>` iframe. It loads the container only for\n * visitors without JavaScript, who never see the consent banner, so its tags\n * run without consent. Render it only where that is lawful for you. Renders\n * nothing without `enabled` or while `containerId` is unset.\n */\nexport function GtmNoscript(\n  props: {\n    containerId: string | undefined\n    enabled?: boolean\n  } & ComponentPropsWithoutRef<'iframe'>,\n) {\n  const { containerId, enabled, ...iframeProps } = props\n  if (!enabled || !containerId) return null\n  return createElement(\n    'noscript',\n    undefined,\n    createElement('iframe', {\n      title: 'Google Tag Manager',\n      ...iframeProps,\n      height: iframeProps.height ?? 0,\n      width: iframeProps.width ?? 0,\n      style: { display: 'none', visibility: 'hidden', ...iframeProps.style },\n      src: gtmNoscriptSrc(containerId),\n    }),\n  )\n}\n","import { createElement, type ComponentPropsWithoutRef } from 'react'\nimport { metaNoscriptSrc } from '../core/noscript'\n\n/**\n * Meta's `<noscript>` PageView pixel. It fires only for visitors without\n * JavaScript, who never see the consent banner, so it tracks them without\n * consent. Render it only where that is lawful for you. Renders nothing without\n * `enabled` or while `pixelId` is unset.\n */\nexport function MetaPixelNoscript(\n  props: {\n    pixelId: string | undefined\n    enabled?: boolean\n  } & ComponentPropsWithoutRef<'img'>,\n) {\n  const { pixelId, enabled, ...imageProps } = props\n  if (!enabled || !pixelId) return null\n  return createElement(\n    'noscript',\n    undefined,\n    createElement('img', {\n      ...imageProps,\n      alt: '',\n      height: imageProps.height ?? 1,\n      width: imageProps.width ?? 1,\n      style: { display: 'none', ...imageProps.style },\n      src: metaNoscriptSrc(pixelId),\n    }),\n  )\n}\n"]}

package/dist/sentry/next.d.ts

@@ -0,0 +1 @@
+export { withSentryConfig } from '@sentry/nextjs/config';

package/dist/sentry/next.js

@@ -0,0 +1,3 @@
+export { withSentryConfig } from '@sentry/nextjs/config';
+//# sourceMappingURL=next.js.map
+//# sourceMappingURL=next.js.map

package/dist/sentry/next.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"next.js","sourcesContent":[]}

package/dist/sentry/server.d.ts

@@ -0,0 +1,24 @@
+import { captureRequestError } from '@sentry/nextjs';
+
+/** Options for `sentryInstrumentation`. */
+type SentryServerOptions = {
+    dsn: string | undefined;
+    environment?: string;
+    release?: string;
+    /** Performance tracing sample rate. Off by default. */
+    tracesSampleRate?: number;
+};
+/**
+ * Sentry for Next.js server and edge code, without personal data.
+ *
+ * ```ts
+ * // instrumentation.ts
+ * export const { register, onRequestError } = sentryInstrumentation({ dsn: process.env.SENTRY_DSN })
+ * ```
+ */
+declare function sentryInstrumentation(options: SentryServerOptions): {
+    register: () => void;
+    onRequestError: typeof captureRequestError;
+};
+
+export { type SentryServerOptions, sentryInstrumentation };

package/dist/sentry/server.js

@@ -0,0 +1,28 @@
+import { captureRequestError, init } from '@sentry/nextjs';
+
+// src/sentry/server.ts
+function sentryInstrumentation(options) {
+  return {
+    register: () => {
+      if (!options.dsn) return;
+      init({
+        dsn: options.dsn,
+        environment: options.environment,
+        release: options.release,
+        tracesSampleRate: options.tracesSampleRate,
+        dataCollection: {
+          userInfo: false,
+          cookies: false,
+          httpHeaders: false,
+          httpBodies: [],
+          urlQueryParams: false
+        }
+      });
+    },
+    onRequestError: captureRequestError
+  };
+}
+
+export { sentryInstrumentation };
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/sentry/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sentry/server.ts"],"names":[],"mappings":";;;AAmBO,SAAS,sBAAsB,OAAA,EAA8B;AAClE,EAAA,OAAO;AAAA,IACL,UAAU,MAAM;AACd,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK;AAClB,MAAA,IAAA,CAAK;AAAA,QACH,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,aAAa,OAAA,CAAQ,WAAA;AAAA,QACrB,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,QAC1B,cAAA,EAAgB;AAAA,UACd,QAAA,EAAU,KAAA;AAAA,UACV,OAAA,EAAS,KAAA;AAAA,UACT,WAAA,EAAa,KAAA;AAAA,UACb,YAAY,EAAC;AAAA,UACb,cAAA,EAAgB;AAAA;AAClB,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,cAAA,EAAgB;AAAA,GAClB;AACF","file":"server.js","sourcesContent":["import { captureRequestError, init } from '@sentry/nextjs'\n\n/** Options for `sentryInstrumentation`. */\nexport type SentryServerOptions = {\n  dsn: string | undefined\n  environment?: string\n  release?: string\n  /** Performance tracing sample rate. Off by default. */\n  tracesSampleRate?: number\n}\n\n/**\n * Sentry for Next.js server and edge code, without personal data.\n *\n * ```ts\n * // instrumentation.ts\n * export const { register, onRequestError } = sentryInstrumentation({ dsn: process.env.SENTRY_DSN })\n * ```\n */\nexport function sentryInstrumentation(options: SentryServerOptions) {\n  return {\n    register: () => {\n      if (!options.dsn) return\n      init({\n        dsn: options.dsn,\n        environment: options.environment,\n        release: options.release,\n        tracesSampleRate: options.tracesSampleRate,\n        dataCollection: {\n          userInfo: false,\n          cookies: false,\n          httpHeaders: false,\n          httpBodies: [],\n          urlQueryParams: false,\n        },\n      })\n    },\n    onRequestError: captureRequestError,\n  }\n}\n"]}

package/dist/sentry-replay-HSFVEFCM.js

@@ -0,0 +1,3 @@
+export { replayIntegration } from '@sentry/browser';
+//# sourceMappingURL=sentry-replay-HSFVEFCM.js.map
+//# sourceMappingURL=sentry-replay-HSFVEFCM.js.map

package/dist/sentry-replay-HSFVEFCM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"sentry-replay-HSFVEFCM.js","sourcesContent":[]}

package/dist/sentry-sdk-YQOGKGWD.js

@@ -0,0 +1,3 @@
+export { addIntegration, captureException, init, setUser } from '@sentry/browser';
+//# sourceMappingURL=sentry-sdk-YQOGKGWD.js.map
+//# sourceMappingURL=sentry-sdk-YQOGKGWD.js.map

package/dist/sentry-sdk-YQOGKGWD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"sentry-sdk-YQOGKGWD.js","sourcesContent":[]}

package/dist/sentry-tracing-KWT7ITHF.js

@@ -0,0 +1,3 @@
+export { browserTracingIntegration } from '@sentry/browser';
+//# sourceMappingURL=sentry-tracing-KWT7ITHF.js.map
+//# sourceMappingURL=sentry-tracing-KWT7ITHF.js.map

package/dist/sentry-tracing-KWT7ITHF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"sentry-tracing-KWT7ITHF.js","sourcesContent":[]}

package/dist/server/ga4.d.ts

@@ -0,0 +1,15 @@
+import { ServerDestination } from './index.js';
+import '../types-BV_AFZKQ.js';
+
+/**
+ * GA4 Measurement Protocol, for server-only events (webhooks). It augments
+ * gtag rather than replacing it, so `createAnalyticsHandler` doesn't take it.
+ * Off (`undefined`) while `measurementId` or `apiSecret` is unset.
+ */
+declare function ga4Server(options: {
+    measurementId: string | undefined;
+    apiSecret: string | undefined;
+    fetchImpl?: typeof fetch;
+}): ServerDestination<false> | undefined;
+
+export { ga4Server };

package/dist/server/ga4.js

@@ -0,0 +1,29 @@
+import { sendMeasurementProtocol } from '../chunk-HJGBVDPM.js';
+
+// src/server/ga4.ts
+var collectUrl = (measurementId, apiSecret) => `https://www.google-analytics.com/mp/collect?${new URLSearchParams({ measurement_id: measurementId, api_secret: apiSecret })}`;
+function ga4Server(options) {
+  const measurementId = options.measurementId?.trim();
+  const apiSecret = options.apiSecret?.trim();
+  if (!measurementId || !apiSecret) {
+    if (measurementId || apiSecret)
+      console.warn("[consentlayer] ga4Server is off: set both measurementId and apiSecret.");
+    return void 0;
+  }
+  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+  return {
+    id: "ga4",
+    requiredConsent: "analytics",
+    forwardBrowserEvents: false,
+    send: (event, request) => sendMeasurementProtocol(
+      { url: collectUrl(measurementId, apiSecret), sender: "ga4Server", receiver: "GA4 Measurement Protocol" },
+      event,
+      request,
+      fetchImpl
+    )
+  };
+}
+
+export { ga4Server };
+//# sourceMappingURL=ga4.js.map
+//# sourceMappingURL=ga4.js.map

package/dist/server/ga4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/ga4.ts"],"names":[],"mappings":";;;AAGA,IAAM,UAAA,GAAa,CAAC,aAAA,EAAuB,SAAA,KACzC,CAAA,4CAAA,EAA+C,IAAI,eAAA,CAAgB,EAAE,cAAA,EAAgB,aAAA,EAAe,UAAA,EAAY,SAAA,EAAW,CAAC,CAAA,CAAA;AAOvH,SAAS,UAAU,OAAA,EAIe;AACvC,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,aAAA,EAAe,IAAA,EAAK;AAClD,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAK;AAC1C,EAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,SAAA,EAAW;AAChC,IAAA,IAAI,aAAA,IAAiB,SAAA;AACnB,MAAA,OAAA,CAAQ,KAAK,wEAAwE,CAAA;AACvF,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,UAAA,CAAW,KAAA;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,KAAA;AAAA,IACJ,eAAA,EAAiB,WAAA;AAAA,IACjB,oBAAA,EAAsB,KAAA;AAAA,IACtB,IAAA,EAAM,CAAC,KAAA,EAAO,OAAA,KACZ,uBAAA;AAAA,MACE,EAAE,KAAK,UAAA,CAAW,aAAA,EAAe,SAAS,CAAA,EAAG,MAAA,EAAQ,WAAA,EAAa,QAAA,EAAU,0BAAA,EAA2B;AAAA,MACvG,KAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA;AACF,GACJ;AACF","file":"ga4.js","sourcesContent":["import type { ServerDestination } from './handler'\nimport { sendMeasurementProtocol } from './measurement-protocol'\n\nconst collectUrl = (measurementId: string, apiSecret: string) =>\n  `https://www.google-analytics.com/mp/collect?${new URLSearchParams({ measurement_id: measurementId, api_secret: apiSecret })}`\n\n/**\n * GA4 Measurement Protocol, for server-only events (webhooks). It augments\n * gtag rather than replacing it, so `createAnalyticsHandler` doesn't take it.\n * Off (`undefined`) while `measurementId` or `apiSecret` is unset.\n */\nexport function ga4Server(options: {\n  measurementId: string | undefined\n  apiSecret: string | undefined\n  fetchImpl?: typeof fetch\n}): ServerDestination<false> | undefined {\n  const measurementId = options.measurementId?.trim()\n  const apiSecret = options.apiSecret?.trim()\n  if (!measurementId || !apiSecret) {\n    if (measurementId || apiSecret)\n      console.warn('[consentlayer] ga4Server is off: set both measurementId and apiSecret.')\n    return undefined\n  }\n  const fetchImpl = options.fetchImpl ?? globalThis.fetch\n  return {\n    id: 'ga4',\n    requiredConsent: 'analytics',\n    forwardBrowserEvents: false,\n    send: (event, request) =>\n      sendMeasurementProtocol(\n        { url: collectUrl(measurementId, apiSecret), sender: 'ga4Server', receiver: 'GA4 Measurement Protocol' },\n        event,\n        request,\n        fetchImpl,\n      ),\n  }\n}\n"]}

package/dist/server/index.d.ts

@@ -0,0 +1,116 @@
+import { p as ConsentState, z as ConsentCategories, M as ServerEvent } from '../types-BV_AFZKQ.js';
+
+/** One row of the consent log. Rows are only ever appended. */
+type ConsentRecord = {
+    consentId: string;
+    createdAt: Date;
+    consent: ConsentState;
+    policyVersion: string;
+    userId?: string;
+    /** Sent again by the browser after the consent cookie was lost, not chosen at `createdAt`. */
+    restored: boolean;
+};
+/** Where `createConsentHandler` appends records. */
+interface ConsentStore {
+    append(record: ConsentRecord): Promise<void>;
+}
+/** What the signed cookie proves: this browser's latest recorded choice. */
+type ConsentProof = {
+    consentId: string;
+    consent: ConsentState;
+    policyVersion: string;
+};
+type ConsentCookieOptions = {
+    /** At least 32 characters, e.g. `process.env.CONSENT_SECRET`. */
+    secret: string | undefined;
+    /** Default `__Host-consentlayer_proof`, or `consentlayer_proof` on `localhost`, `127.0.0.1` and `[::1]`. */
+    cookie?: string;
+};
+/** The verified proof from the request's consent cookie, or `null` if it is missing or tampered with. */
+declare function readConsentCookie(request: Request, options: ConsentCookieOptions): Promise<ConsentProof | null>;
+/**
+ * A web-standard route handler for `createAnalytics({ server: { consentEndpoint } })`.
+ * Validates each choice, appends a record and answers with the signed consent cookie
+ * that `createAnalyticsHandler({ consentCookie })` trusts.
+ */
+declare function createConsentHandler(options: ConsentCookieOptions & {
+    store: ConsentStore;
+    /** The privacy policy the visitor saw, e.g. `'3.2'`. */
+    policyVersion: string;
+    /** Your own categories, as passed to `createAnalytics({ categories })`. */
+    categories?: (keyof ConsentCategories)[];
+    /** The signed-in user, from your session. Never read from the request body. */
+    userId?: (request: Request) => string | undefined | Promise<string | undefined>;
+    onError?: (error: unknown) => void;
+}): (request: Request) => Promise<Response>;
+type SqlTag = (strings: TemplateStringsArray, ...values: unknown[]) => PromiseLike<unknown>;
+/** Postgres through any `sql` tagged template: postgres.js, Neon or Vercel Postgres. */
+declare function postgresStore(sql: SqlTag): ConsentStore;
+/** Upstash Redis or Vercel KV: one list per consent ID, `consent:<consentId>`. */
+declare function upstashStore(redis: {
+    rpush(key: string, ...values: string[]): Promise<unknown>;
+}, options?: {
+    prefix?: string;
+}): ConsentStore;
+/** supabase-js. */
+declare function supabaseStore(supabase: {
+    from(table: string): {
+        insert(row: object): PromiseLike<{
+            error: unknown;
+        }>;
+    };
+}, options?: {
+    table?: string;
+}): ConsentStore;
+/** Prisma: pass the model, e.g. `prismaStore(prisma.consentRecord)`. */
+declare function prismaStore(model: {
+    create(args: {
+        data: object;
+    }): PromiseLike<unknown>;
+}): ConsentStore;
+/** Drizzle: pass the database and the table. */
+declare function drizzleStore<Table>(db: {
+    insert(table: Table): {
+        values(row: object): PromiseLike<unknown>;
+    };
+}, table: Table): ConsentStore;
+
+/** Request details destinations use: client IP, user agent and cookies. */
+type ServerRequestInfo = {
+    ip?: string;
+    userAgent?: string;
+    cookies: Record<string, string>;
+};
+/** A server-side destination. `send` throws when the vendor rejects the event. */
+interface ServerDestination<Forward extends boolean = boolean> {
+    id: string;
+    requiredConsent: keyof ConsentState;
+    /** Whether `createAnalyticsHandler` may send browser events to it. */
+    forwardBrowserEvents: Forward;
+    send(event: ServerEvent, request?: ServerRequestInfo): Promise<void>;
+}
+/** Whether one destination accepted the event. */
+type ServerSendResult = {
+    id: string;
+    ok: boolean;
+    error?: unknown;
+};
+/** Sends to every destination the event's consent and `only` allow, in parallel. `undefined` entries are destinations that are off. */
+declare function sendServerEvent(event: ServerEvent, options: {
+    destinations: (ServerDestination | undefined)[];
+    request?: ServerRequestInfo;
+}): Promise<ServerSendResult[]>;
+/** IP, user agent and cookies of a request, for `sendServerEvent({ request })`. */
+declare function requestInfo(request: Request): ServerRequestInfo;
+/**
+ * A web-standard route handler for events forwarded by `createAnalytics({ server })`.
+ * Only destinations that accept browser events (e.g. `metaCapi`) can be passed.
+ */
+declare function createAnalyticsHandler(options: {
+    destinations: (ServerDestination<true> | undefined)[];
+    /** Grant only categories both the cookie `createConsentHandler` signs and the body grant; no valid cookie means denied. */
+    consentCookie?: ConsentCookieOptions;
+    onError?: (error: unknown) => void;
+}): (request: Request) => Promise<Response>;
+
+export { type ConsentCookieOptions, type ConsentProof, type ConsentRecord, type ConsentStore, type ServerDestination, ServerEvent, type ServerRequestInfo, type ServerSendResult, createAnalyticsHandler, createConsentHandler, drizzleStore, postgresStore, prismaStore, readConsentCookie, requestInfo, sendServerEvent, supabaseStore, upstashStore };

package/dist/server/index.js

@@ -0,0 +1,206 @@
+import { parseCookieHeader, assertSameOrigin, parseJsonWithLimit, ANALYTICS_MAX_BODY } from '../chunk-DK45XPEY.js';
+import { BUILT_IN_CATEGORIES, normalizeConsent } from '../chunk-TVSZJLRC.js';
+import { assertValidConsent } from '../chunk-J3KUPF4R.js';
+
+// src/server/consent.ts
+var LOCAL_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+var isLocal = (request) => LOCAL_HOSTS.has(new URL(request.url).hostname);
+var cookieName = (request, options) => options.cookie ?? (isLocal(request) ? "consentlayer_proof" : "__Host-consentlayer_proof");
+var MAX_AGE = 400 * 24 * 60 * 60;
+var encoder = new TextEncoder();
+var toBase64Url = (bytes) => btoa(String.fromCharCode(...bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+var fromBase64Url = (value) => Uint8Array.from(atob(value.replace(/-/g, "+").replace(/_/g, "/")), (char) => char.charCodeAt(0));
+function assertSecret(secret) {
+  if (!secret) throw new Error("[consentlayer] the consent secret is not set");
+  if (secret.length < 32) throw new Error("[consentlayer] the consent secret needs at least 32 characters");
+}
+var hmacKey = (secret) => {
+  assertSecret(secret);
+  return crypto.subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, [
+    "sign",
+    "verify"
+  ]);
+};
+async function sign(proof, secret) {
+  const payload = toBase64Url(encoder.encode(JSON.stringify(proof)));
+  const signature = await crypto.subtle.sign("HMAC", await hmacKey(secret), encoder.encode(payload));
+  return `${payload}.${toBase64Url(new Uint8Array(signature))}`;
+}
+async function readConsentCookie(request, options) {
+  const value = parseCookieHeader(request.headers.get("cookie") ?? "")[cookieName(request, options)];
+  const [payload, signature] = value?.split(".") ?? [];
+  if (!payload || !signature) return null;
+  try {
+    const valid = await crypto.subtle.verify(
+      "HMAC",
+      await hmacKey(options.secret),
+      fromBase64Url(signature),
+      encoder.encode(payload)
+    );
+    return valid ? JSON.parse(new TextDecoder().decode(fromBase64Url(payload))) : null;
+  } catch {
+    return null;
+  }
+}
+function createConsentHandler(options) {
+  const categories = [...BUILT_IN_CATEGORIES, ...options.categories ?? []];
+  return async (request) => {
+    try {
+      assertSecret(options.secret);
+      assertSameOrigin(request, { requireHeader: true });
+      const body = await parseJsonWithLimit(request, 4 * 1024);
+      try {
+        assertValidConsent(body?.consent, categories);
+      } catch {
+        return new Response(null, { status: 400 });
+      }
+      const consent = normalizeConsent(body.consent, categories);
+      const previous = await readConsentCookie(request, options);
+      const consentId = previous?.consentId ?? crypto.randomUUID();
+      const userId = await options.userId?.(request);
+      await options.store.append({
+        consentId,
+        createdAt: /* @__PURE__ */ new Date(),
+        consent,
+        policyVersion: options.policyVersion,
+        ...userId ? { userId } : {},
+        restored: body.restored === true
+      });
+      const cookie = await sign({ consentId, consent, policyVersion: options.policyVersion }, options.secret);
+      return new Response(null, {
+        status: 204,
+        headers: {
+          "set-cookie": `${cookieName(request, options)}=${cookie}; Path=/; Max-Age=${MAX_AGE}; HttpOnly; SameSite=Lax${isLocal(request) ? "" : "; Secure"}`
+        }
+      });
+    } catch (error) {
+      const status = error.status;
+      if (typeof status === "number") return new Response(null, { status });
+      options.onError?.(error);
+      return new Response(null, { status: 500 });
+    }
+  };
+}
+var row = (record) => ({
+  consent_id: record.consentId,
+  created_at: record.createdAt.toISOString(),
+  consent: record.consent,
+  policy_version: record.policyVersion,
+  user_id: record.userId ?? null,
+  restored: record.restored
+});
+function postgresStore(sql) {
+  return {
+    async append(record) {
+      const r = row(record);
+      await sql`insert into consent_records (consent_id, created_at, consent, policy_version, user_id, restored)
+        values (${r.consent_id}, ${r.created_at}::timestamptz, ${JSON.stringify(r.consent)}::jsonb, ${r.policy_version}, ${r.user_id}, ${r.restored})`;
+    }
+  };
+}
+function upstashStore(redis, options = {}) {
+  return {
+    async append(record) {
+      await redis.rpush(`${options.prefix ?? "consent:"}${record.consentId}`, JSON.stringify(record));
+    }
+  };
+}
+function supabaseStore(supabase, options = {}) {
+  return {
+    async append(record) {
+      const { error } = await supabase.from(options.table ?? "consent_records").insert(row(record));
+      if (error) throw new Error("[consentlayer] supabase insert failed", { cause: error });
+    }
+  };
+}
+function prismaStore(model) {
+  return {
+    async append(record) {
+      await model.create({ data: { ...record, userId: record.userId ?? null } });
+    }
+  };
+}
+function drizzleStore(db, table) {
+  return {
+    async append(record) {
+      await db.insert(table).values({ ...record, userId: record.userId ?? null });
+    }
+  };
+}
+
+// src/server/handler.ts
+async function sendServerEvent(event, options) {
+  const targets = options.destinations.filter(
+    (destination) => destination !== void 0 && event.consent[destination.requiredConsent] === true && (!event.only || event.only.includes(destination.id))
+  );
+  const results = await Promise.allSettled(targets.map((destination) => destination.send(event, options.request)));
+  return targets.map((destination, index) => {
+    const result = results[index];
+    return result?.status === "rejected" ? { id: destination.id, ok: false, error: result.reason } : { id: destination.id, ok: true };
+  });
+}
+function requestInfo(request) {
+  const headers = request.headers;
+  return {
+    ip: headers.get("x-forwarded-for")?.split(",")[0]?.trim() || headers.get("x-real-ip") || void 0,
+    userAgent: headers.get("user-agent") ?? void 0,
+    cookies: parseCookieHeader(headers.get("cookie") ?? "")
+  };
+}
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isOptional = (value, check) => value === void 0 || check(value);
+var isString = (value) => typeof value === "string";
+var isStringArray = (value) => Array.isArray(value) && value.every(isString);
+function parseServerEvent(body) {
+  const valid = isObject(body) && typeof body.name === "string" && /^[\w.:-]{1,100}$/.test(body.name) && isObject(body.consent) && ["preferences", "analytics", "marketing"].every(
+    (key) => typeof body.consent[key] === "boolean"
+  ) && isOptional(body.id, isString) && isOptional(body.url, isString) && isOptional(body.clientId, isString) && isOptional(body.params, isObject) && isOptional(body.providers, isObject) && isOptional(body.only, isStringArray) && isOptional(
+    body.identity,
+    (identity) => isObject(identity) && Object.values(identity).every((value) => isOptional(value, isString))
+  );
+  if (!valid) throw Object.assign(new Error("Invalid event"), { status: 400 });
+  return body;
+}
+function createAnalyticsHandler(options) {
+  if (options.consentCookie && !options.consentCookie.secret) {
+    console.warn("[consentlayer] consentCookie.secret is not set: every event is treated as denied.");
+  }
+  const destinations = options.destinations.filter((destination) => destination?.forwardBrowserEvents);
+  return async (request) => {
+    try {
+      if (options.consentCookie?.secret) assertSecret(options.consentCookie.secret);
+      assertSameOrigin(request, { requireHeader: true });
+      if (!destinations.length)
+        return new Response(null, { status: 204, headers: { "consentlayer-forwarding": "off" } });
+      const event = parseServerEvent(await parseJsonWithLimit(request, ANALYTICS_MAX_BODY));
+      const proof = options.consentCookie && await readConsentCookie(request, options.consentCookie);
+      if (options.consentCookie) {
+        const recorded = proof?.consent ?? { preferences: false, analytics: false, marketing: false };
+        event.consent = Object.fromEntries(
+          Object.entries(recorded).map(([key, value]) => [
+            key,
+            value === true && event.consent[key] === true
+          ])
+        );
+      }
+      const results = await sendServerEvent(event, {
+        destinations,
+        request: requestInfo(request)
+      });
+      for (const result of results) if (!result.ok) options.onError?.(result.error);
+      return new Response(null, {
+        status: 204,
+        headers: options.consentCookie && !proof ? { "consentlayer-consent": "missing" } : {}
+      });
+    } catch (error) {
+      const status = error.status;
+      if (typeof status === "number") return new Response(null, { status });
+      options.onError?.(error);
+      return new Response(null, { status: 500 });
+    }
+  };
+}
+
+export { createAnalyticsHandler, createConsentHandler, drizzleStore, postgresStore, prismaStore, readConsentCookie, requestInfo, sendServerEvent, supabaseStore, upstashStore };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/consent.ts","../../src/server/handler.ts"],"names":[],"mappings":";;;;;AAoCA,IAAM,8BAAc,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,OAAO,CAAC,CAAA;AAC/D,IAAM,OAAA,GAAU,CAAC,OAAA,KAAqB,WAAA,CAAY,GAAA,CAAI,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAQ,CAAA;AACnF,IAAM,UAAA,GAAa,CAAC,OAAA,EAAkB,OAAA,KACpC,QAAQ,MAAA,KAAW,OAAA,CAAQ,OAAO,CAAA,GAAI,oBAAA,GAAuB,2BAAA,CAAA;AAE/D,IAAM,OAAA,GAAU,GAAA,GAAM,EAAA,GAAK,EAAA,GAAK,EAAA;AAEhC,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,IAAM,WAAA,GAAc,CAAC,KAAA,KACnB,IAAA,CAAK,OAAO,YAAA,CAAa,GAAG,KAAK,CAAC,CAAA,CAC/B,QAAQ,KAAA,EAAO,GAAG,EAClB,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAClB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,IAAM,aAAA,GAAgB,CAAC,KAAA,KACrB,UAAA,CAAW,KAAK,IAAA,CAAK,KAAA,CAAM,QAAQ,IAAA,EAAM,GAAG,EAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,EAAG,CAAC,IAAA,KAAS,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAE1F,SAAS,aAAa,MAAA,EAAsD;AACjF,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAC3E,EAAA,IAAI,OAAO,MAAA,GAAS,EAAA,EAAI,MAAM,IAAI,MAAM,gEAAgE,CAAA;AAC1G;AAEA,IAAM,OAAA,GAAU,CAAC,MAAA,KAA+B;AAC9C,EAAA,YAAA,CAAa,MAAM,CAAA;AACnB,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,QAAQ,MAAA,CAAO,MAAM,CAAA,EAAG,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,IAAa,KAAA,EAAO;AAAA,IACtG,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH,CAAA;AAEA,eAAe,IAAA,CAAK,OAAqB,MAAA,EAAiC;AACxE,EAAA,MAAM,OAAA,GAAU,YAAY,OAAA,CAAQ,MAAA,CAAO,KAAK,SAAA,CAAU,KAAK,CAAC,CAAC,CAAA;AACjE,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAC,CAAA;AACjG,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AAC7D;AAGA,eAAsB,iBAAA,CAAkB,SAAkB,OAAA,EAA6D;AACrH,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,IAAK,EAAE,CAAA,CAAE,UAAA,CAAW,OAAA,EAAS,OAAO,CAAC,CAAA;AACjG,EAAA,MAAM,CAAC,SAAS,SAAS,CAAA,GAAI,OAAO,KAAA,CAAM,GAAG,KAAK,EAAC;AACnD,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,SAAA,EAAW,OAAO,IAAA;AACnC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA;AAAA,MAChC,MAAA;AAAA,MACA,MAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA;AAAA,MAC5B,cAAc,SAAS,CAAA;AAAA,MACvB,OAAA,CAAQ,OAAO,OAAO;AAAA,KACxB;AACA,IAAA,OAAO,KAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,aAAA,CAAc,OAAO,CAAC,CAAC,CAAA,GAAqB,IAAA;AAAA,EAClG,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAOO,SAAS,qBACd,OAAA,EAUyC;AACzC,EAAA,MAAM,UAAA,GAAa,CAAC,GAAG,mBAAA,EAAqB,GAAI,OAAA,CAAQ,UAAA,IAAc,EAAG,CAAA;AACzE,EAAA,OAAO,OAAO,OAAA,KAAY;AACxB,IAAA,IAAI;AACF,MAAA,YAAA,CAAa,QAAQ,MAAM,CAAA;AAC3B,MAAA,gBAAA,CAAiB,OAAA,EAAS,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA;AACjD,MAAA,MAAM,IAAA,GAAO,MAAM,kBAAA,CAA8D,OAAA,EAAS,IAAI,IAAI,CAAA;AAClG,MAAA,IAAI;AACF,QAAA,kBAAA,CAAmB,IAAA,EAAM,SAAS,UAAU,CAAA;AAAA,MAC9C,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,MAC3C;AACA,MAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,IAAA,CAAK,OAAA,EAAyB,UAAU,CAAA;AACzE,MAAA,MAAM,QAAA,GAAW,MAAM,iBAAA,CAAkB,OAAA,EAAS,OAAO,CAAA;AACzD,MAAA,MAAM,SAAA,GAAY,QAAA,EAAU,SAAA,IAAa,MAAA,CAAO,UAAA,EAAW;AAC3D,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,GAAS,OAAO,CAAA;AAC7C,MAAA,MAAM,OAAA,CAAQ,MAAM,MAAA,CAAO;AAAA,QACzB,SAAA;AAAA,QACA,SAAA,sBAAe,IAAA,EAAK;AAAA,QACpB,OAAA;AAAA,QACA,eAAe,OAAA,CAAQ,aAAA;AAAA,QACvB,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW,EAAC;AAAA,QAC3B,QAAA,EAAU,KAAK,QAAA,KAAa;AAAA,OAC7B,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAE,SAAA,EAAW,OAAA,EAAS,aAAA,EAAe,OAAA,CAAQ,aAAA,EAAc,EAAG,OAAA,CAAQ,MAAM,CAAA;AACtG,MAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,QACxB,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,YAAA,EAAc,CAAA,EAAG,UAAA,CAAW,OAAA,EAAS,OAAO,CAAC,CAAA,CAAA,EAAI,MAAM,CAAA,kBAAA,EAAqB,OAAO,CAAA,wBAAA,EAA2B,OAAA,CAAQ,OAAO,CAAA,GAAI,KAAK,UAAU,CAAA;AAAA;AAClJ,OACD,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,SAAU,KAAA,CAA+B,MAAA;AAC/C,MAAA,IAAI,OAAO,WAAW,QAAA,EAAU,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,CAAA;AACpE,MAAA,OAAA,CAAQ,UAAU,KAAK,CAAA;AACvB,MAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,IAC3C;AAAA,EACF,CAAA;AACF;AAEA,IAAM,GAAA,GAAM,CAAC,MAAA,MAA2B;AAAA,EACtC,YAAY,MAAA,CAAO,SAAA;AAAA,EACnB,UAAA,EAAY,MAAA,CAAO,SAAA,CAAU,WAAA,EAAY;AAAA,EACzC,SAAS,MAAA,CAAO,OAAA;AAAA,EAChB,gBAAgB,MAAA,CAAO,aAAA;AAAA,EACvB,OAAA,EAAS,OAAO,MAAA,IAAU,IAAA;AAAA,EAC1B,UAAU,MAAA,CAAO;AACnB,CAAA,CAAA;AAKO,SAAS,cAAc,GAAA,EAA2B;AACvD,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,CAAA,GAAI,IAAI,MAAM,CAAA;AAEpB,MAAA,MAAM,GAAA,CAAA;AAAA,gBAAA,EACM,EAAE,UAAU,CAAA,EAAA,EAAK,EAAE,UAAU,CAAA,eAAA,EAAkB,KAAK,SAAA,CAAU,CAAA,CAAE,OAAO,CAAC,CAAA,SAAA,EAAY,EAAE,cAAc,CAAA,EAAA,EAAK,EAAE,OAAO,CAAA,EAAA,EAAK,EAAE,QAAQ,CAAA,CAAA,CAAA;AAAA,IAC/I;AAAA,GACF;AACF;AAGO,SAAS,YAAA,CACd,KAAA,EACA,OAAA,GAA+B,EAAC,EAClB;AACd,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,MAAA,IAAU,UAAU,CAAA,EAAG,MAAA,CAAO,SAAS,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,IAChG;AAAA,GACF;AACF;AAGO,SAAS,aAAA,CACd,QAAA,EACA,OAAA,GAA8B,EAAC,EACjB;AACd,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,OAAA,CAAQ,KAAA,IAAS,iBAAiB,CAAA,CAAE,MAAA,CAAO,GAAA,CAAI,MAAM,CAAC,CAAA;AAC5F,MAAA,IAAI,KAAA,QAAa,IAAI,KAAA,CAAM,yCAAyC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,IACtF;AAAA,GACF;AACF;AAGO,SAAS,YAAY,KAAA,EAA+E;AACzG,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,KAAA,CAAM,MAAA,CAAO,EAAE,IAAA,EAAM,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,MAAA,IAAU,IAAA,EAAK,EAAG,CAAA;AAAA,IAC3E;AAAA,GACF;AACF;AAGO,SAAS,YAAA,CACd,IACA,KAAA,EACc;AACd,EAAA,OAAO;AAAA,IACL,MAAM,OAAO,MAAA,EAAQ;AACnB,MAAA,MAAM,EAAA,CAAG,MAAA,CAAO,KAAK,CAAA,CAAE,MAAA,CAAO,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,MAAA,IAAU,IAAA,EAAM,CAAA;AAAA,IAC5E;AAAA,GACF;AACF;;;AC1LA,eAAsB,eAAA,CACpB,OACA,OAAA,EAC6B;AAC7B,EAAA,MAAM,OAAA,GAAU,QAAQ,YAAA,CAAa,MAAA;AAAA,IACnC,CAAC,WAAA,KACC,WAAA,KAAgB,MAAA,IAChB,KAAA,CAAM,QAAQ,WAAA,CAAY,eAAe,CAAA,KAAM,IAAA,KAC9C,CAAC,KAAA,CAAM,IAAA,IAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,YAAY,EAAE,CAAA;AAAA,GACtD;AACA,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,UAAA,CAAW,QAAQ,GAAA,CAAI,CAAC,WAAA,KAAgB,WAAA,CAAY,IAAA,CAAK,KAAA,EAAO,OAAA,CAAQ,OAAO,CAAC,CAAC,CAAA;AAC/G,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,WAAA,EAAa,KAAA,KAAU;AACzC,IAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,IAAA,OAAO,QAAQ,MAAA,KAAW,UAAA,GACtB,EAAE,EAAA,EAAI,WAAA,CAAY,IAAI,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,QAAkB,GACjE,EAAE,IAAI,WAAA,CAAY,EAAA,EAAI,IAAI,IAAA,EAAK;AAAA,EACrC,CAAC,CAAA;AACH;AAGO,SAAS,YAAY,OAAA,EAAqC;AAC/D,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,iBAAiB,GAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK,IAAK,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IAAK,MAAA;AAAA,IACzF,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,MAAA;AAAA,IACxC,SAAS,iBAAA,CAAkB,OAAA,CAAQ,GAAA,CAAI,QAAQ,KAAK,EAAE;AAAA,GACxD;AACF;AAEA,IAAM,QAAA,GAAW,CAAC,KAAA,KAChB,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACrE,IAAM,aAAa,CAAC,KAAA,EAAgB,UAAuC,KAAA,KAAU,MAAA,IAAa,MAAM,KAAK,CAAA;AAC7G,IAAM,QAAA,GAAW,CAAC,KAAA,KAAmB,OAAO,KAAA,KAAU,QAAA;AACtD,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAmB,KAAA,CAAM,QAAQ,KAAK,CAAA,IAAK,KAAA,CAAM,KAAA,CAAM,QAAQ,CAAA;AAEtF,SAAS,iBAAiB,IAAA,EAA4B;AACpD,EAAA,MAAM,KAAA,GACJ,SAAS,IAAI,CAAA,IACb,OAAO,IAAA,CAAK,IAAA,KAAS,YACrB,kBAAA,CAAmB,IAAA,CAAK,KAAK,IAAI,CAAA,IACjC,SAAS,IAAA,CAAK,OAAO,KACrB,CAAC,aAAA,EAAe,WAAA,EAAa,WAAW,CAAA,CAAE,KAAA;AAAA,IACxC,CAAC,GAAA,KAAQ,OAAQ,IAAA,CAAK,OAAA,CAAoC,GAAG,CAAA,KAAM;AAAA,GACrE,IACA,UAAA,CAAW,IAAA,CAAK,EAAA,EAAI,QAAQ,CAAA,IAC5B,UAAA,CAAW,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAA,IAC7B,UAAA,CAAW,KAAK,QAAA,EAAU,QAAQ,CAAA,IAClC,UAAA,CAAW,IAAA,CAAK,MAAA,EAAQ,QAAQ,CAAA,IAChC,UAAA,CAAW,IAAA,CAAK,SAAA,EAAW,QAAQ,CAAA,IACnC,UAAA,CAAW,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA,IACnC,UAAA;AAAA,IACE,IAAA,CAAK,QAAA;AAAA,IACL,CAAC,QAAA,KAAa,QAAA,CAAS,QAAQ,KAAK,MAAA,CAAO,MAAA,CAAO,QAAQ,CAAA,CAAE,MAAM,CAAC,KAAA,KAAU,UAAA,CAAW,KAAA,EAAO,QAAQ,CAAC;AAAA,GAC1G;AACF,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,eAAe,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAC3E,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,uBAAuB,OAAA,EAKK;AAC1C,EAAA,IAAI,OAAA,CAAQ,aAAA,IAAiB,CAAC,OAAA,CAAQ,cAAc,MAAA,EAAQ;AAC1D,IAAA,OAAA,CAAQ,KAAK,mFAAmF,CAAA;AAAA,EAClG;AACA,EAAA,MAAM,eAAe,OAAA,CAAQ,YAAA,CAAa,OAAO,CAAC,WAAA,KAAgB,aAAa,oBAAoB,CAAA;AACnG,EAAA,OAAO,OAAO,OAAA,KAAY;AACxB,IAAA,IAAI;AACF,MAAA,IAAI,QAAQ,aAAA,EAAe,MAAA,EAAQ,YAAA,CAAa,OAAA,CAAQ,cAAc,MAAM,CAAA;AAC5E,MAAA,gBAAA,CAAiB,OAAA,EAAS,EAAE,aAAA,EAAe,IAAA,EAAM,CAAA;AACjD,MAAA,IAAI,CAAC,YAAA,CAAa,MAAA;AAChB,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,OAAA,EAAS,EAAE,yBAAA,EAA2B,KAAA,EAAM,EAAG,CAAA;AAC1F,MAAA,MAAM,QAAQ,gBAAA,CAAiB,MAAM,kBAAA,CAAmB,OAAA,EAAS,kBAAkB,CAAC,CAAA;AACpF,MAAA,MAAM,QAAQ,OAAA,CAAQ,aAAA,IAAkB,MAAM,iBAAA,CAAkB,OAAA,EAAS,QAAQ,aAAa,CAAA;AAC9F,MAAA,IAAI,QAAQ,aAAA,EAAe;AACzB,QAAA,MAAM,QAAA,GAAW,OAAO,OAAA,IAAW,EAAE,aAAa,KAAA,EAAO,SAAA,EAAW,KAAA,EAAO,SAAA,EAAW,KAAA,EAAM;AAC5F,QAAA,KAAA,CAAM,UAAU,MAAA,CAAO,WAAA;AAAA,UACrB,MAAA,CAAO,QAAQ,QAAQ,CAAA,CAAE,IAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAAA,YAC7C,GAAA;AAAA,YACA,KAAA,KAAU,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,GAAyB,CAAA,KAAM;AAAA,WAChE;AAAA,SACH;AAAA,MACF;AACA,MAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB,KAAA,EAAO;AAAA,QAC3C,YAAA;AAAA,QACA,OAAA,EAAS,YAAY,OAAO;AAAA,OAC7B,CAAA;AACD,MAAA,KAAA,MAAW,MAAA,IAAU,SAAS,IAAI,CAAC,OAAO,EAAA,EAAI,OAAA,CAAQ,OAAA,GAAU,MAAA,CAAO,KAAK,CAAA;AAC5E,MAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,QACxB,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,QAAQ,aAAA,IAAiB,CAAC,QAAQ,EAAE,sBAAA,EAAwB,SAAA,EAAU,GAAI;AAAC,OACrF,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,SAAU,KAAA,CAA+B,MAAA;AAC/C,MAAA,IAAI,OAAO,WAAW,QAAA,EAAU,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,CAAA;AACpE,MAAA,OAAA,CAAQ,UAAU,KAAK,CAAA;AACvB,MAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,IAC3C;AAAA,EACF,CAAA;AACF","file":"index.js","sourcesContent":["import type { ConsentCategories, ConsentState } from '../core/types'\nimport { BUILT_IN_CATEGORIES, normalizeConsent } from '../core/utils'\nimport { assertValidConsent } from '../core/validation'\nimport { assertSameOrigin, parseCookieHeader, parseJsonWithLimit } from './http'\n\n/** One row of the consent log. Rows are only ever appended. */\nexport type ConsentRecord = {\n  consentId: string\n  createdAt: Date\n  consent: ConsentState\n  policyVersion: string\n  userId?: string\n  /** Sent again by the browser after the consent cookie was lost, not chosen at `createdAt`. */\n  restored: boolean\n}\n\n/** Where `createConsentHandler` appends records. */\nexport interface ConsentStore {\n  append(record: ConsentRecord): Promise<void>\n}\n\n/** What the signed cookie proves: this browser's latest recorded choice. */\nexport type ConsentProof = {\n  consentId: string\n  consent: ConsentState\n  policyVersion: string\n}\n\nexport type ConsentCookieOptions = {\n  /** At least 32 characters, e.g. `process.env.CONSENT_SECRET`. */\n  secret: string | undefined\n  /** Default `__Host-consentlayer_proof`, or `consentlayer_proof` on `localhost`, `127.0.0.1` and `[::1]`. */\n  cookie?: string\n}\n\n// Safari drops Secure cookies on http://localhost, and __Host- requires Secure.\nconst LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]'])\nconst isLocal = (request: Request) => LOCAL_HOSTS.has(new URL(request.url).hostname)\nconst cookieName = (request: Request, options: ConsentCookieOptions) =>\n  options.cookie ?? (isLocal(request) ? 'consentlayer_proof' : '__Host-consentlayer_proof')\n// ponytail: browsers cap cookie lifetimes at 400 days\nconst MAX_AGE = 400 * 24 * 60 * 60\n\nconst encoder = new TextEncoder()\nconst toBase64Url = (bytes: Uint8Array) =>\n  btoa(String.fromCharCode(...bytes))\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=+$/, '')\nconst fromBase64Url = (value: string) =>\n  Uint8Array.from(atob(value.replace(/-/g, '+').replace(/_/g, '/')), (char) => char.charCodeAt(0))\n\nexport function assertSecret(secret: string | undefined): asserts secret is string {\n  if (!secret) throw new Error('[consentlayer] the consent secret is not set')\n  if (secret.length < 32) throw new Error('[consentlayer] the consent secret needs at least 32 characters')\n}\n\nconst hmacKey = (secret: string | undefined) => {\n  assertSecret(secret)\n  return crypto.subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n    'verify',\n  ])\n}\n\nasync function sign(proof: ConsentProof, secret: string): Promise<string> {\n  const payload = toBase64Url(encoder.encode(JSON.stringify(proof)))\n  const signature = await crypto.subtle.sign('HMAC', await hmacKey(secret), encoder.encode(payload))\n  return `${payload}.${toBase64Url(new Uint8Array(signature))}`\n}\n\n/** The verified proof from the request's consent cookie, or `null` if it is missing or tampered with. */\nexport async function readConsentCookie(request: Request, options: ConsentCookieOptions): Promise<ConsentProof | null> {\n  const value = parseCookieHeader(request.headers.get('cookie') ?? '')[cookieName(request, options)]\n  const [payload, signature] = value?.split('.') ?? []\n  if (!payload || !signature) return null\n  try {\n    const valid = await crypto.subtle.verify(\n      'HMAC',\n      await hmacKey(options.secret),\n      fromBase64Url(signature),\n      encoder.encode(payload),\n    )\n    return valid ? (JSON.parse(new TextDecoder().decode(fromBase64Url(payload))) as ConsentProof) : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * A web-standard route handler for `createAnalytics({ server: { consentEndpoint } })`.\n * Validates each choice, appends a record and answers with the signed consent cookie\n * that `createAnalyticsHandler({ consentCookie })` trusts.\n */\nexport function createConsentHandler(\n  options: ConsentCookieOptions & {\n    store: ConsentStore\n    /** The privacy policy the visitor saw, e.g. `'3.2'`. */\n    policyVersion: string\n    /** Your own categories, as passed to `createAnalytics({ categories })`. */\n    categories?: (keyof ConsentCategories)[]\n    /** The signed-in user, from your session. Never read from the request body. */\n    userId?: (request: Request) => string | undefined | Promise<string | undefined>\n    onError?: (error: unknown) => void\n  },\n): (request: Request) => Promise<Response> {\n  const categories = [...BUILT_IN_CATEGORIES, ...(options.categories ?? [])]\n  return async (request) => {\n    try {\n      assertSecret(options.secret)\n      assertSameOrigin(request, { requireHeader: true })\n      const body = await parseJsonWithLimit<{ consent?: unknown; restored?: unknown }>(request, 4 * 1024)\n      try {\n        assertValidConsent(body?.consent, categories)\n      } catch {\n        return new Response(null, { status: 400 })\n      }\n      const consent = normalizeConsent(body.consent as ConsentState, categories)!\n      const previous = await readConsentCookie(request, options)\n      const consentId = previous?.consentId ?? crypto.randomUUID()\n      const userId = await options.userId?.(request)\n      await options.store.append({\n        consentId,\n        createdAt: new Date(),\n        consent,\n        policyVersion: options.policyVersion,\n        ...(userId ? { userId } : {}),\n        restored: body.restored === true,\n      })\n      const cookie = await sign({ consentId, consent, policyVersion: options.policyVersion }, options.secret)\n      return new Response(null, {\n        status: 204,\n        headers: {\n          'set-cookie': `${cookieName(request, options)}=${cookie}; Path=/; Max-Age=${MAX_AGE}; HttpOnly; SameSite=Lax${isLocal(request) ? '' : '; Secure'}`,\n        },\n      })\n    } catch (error) {\n      const status = (error as { status?: unknown }).status\n      if (typeof status === 'number') return new Response(null, { status })\n      options.onError?.(error)\n      return new Response(null, { status: 500 })\n    }\n  }\n}\n\nconst row = (record: ConsentRecord) => ({\n  consent_id: record.consentId,\n  created_at: record.createdAt.toISOString(),\n  consent: record.consent,\n  policy_version: record.policyVersion,\n  user_id: record.userId ?? null,\n  restored: record.restored,\n})\n\ntype SqlTag = (strings: TemplateStringsArray, ...values: unknown[]) => PromiseLike<unknown>\n\n/** Postgres through any `sql` tagged template: postgres.js, Neon or Vercel Postgres. */\nexport function postgresStore(sql: SqlTag): ConsentStore {\n  return {\n    async append(record) {\n      const r = row(record)\n      // ponytail: fixed table name, since tagged templates can't take identifiers portably\n      await sql`insert into consent_records (consent_id, created_at, consent, policy_version, user_id, restored)\n        values (${r.consent_id}, ${r.created_at}::timestamptz, ${JSON.stringify(r.consent)}::jsonb, ${r.policy_version}, ${r.user_id}, ${r.restored})`\n    },\n  }\n}\n\n/** Upstash Redis or Vercel KV: one list per consent ID, `consent:<consentId>`. */\nexport function upstashStore(\n  redis: { rpush(key: string, ...values: string[]): Promise<unknown> },\n  options: { prefix?: string } = {},\n): ConsentStore {\n  return {\n    async append(record) {\n      await redis.rpush(`${options.prefix ?? 'consent:'}${record.consentId}`, JSON.stringify(record))\n    },\n  }\n}\n\n/** supabase-js. */\nexport function supabaseStore(\n  supabase: { from(table: string): { insert(row: object): PromiseLike<{ error: unknown }> } },\n  options: { table?: string } = {},\n): ConsentStore {\n  return {\n    async append(record) {\n      const { error } = await supabase.from(options.table ?? 'consent_records').insert(row(record))\n      if (error) throw new Error('[consentlayer] supabase insert failed', { cause: error })\n    },\n  }\n}\n\n/** Prisma: pass the model, e.g. `prismaStore(prisma.consentRecord)`. */\nexport function prismaStore(model: { create(args: { data: object }): PromiseLike<unknown> }): ConsentStore {\n  return {\n    async append(record) {\n      await model.create({ data: { ...record, userId: record.userId ?? null } })\n    },\n  }\n}\n\n/** Drizzle: pass the database and the table. */\nexport function drizzleStore<Table>(\n  db: { insert(table: Table): { values(row: object): PromiseLike<unknown> } },\n  table: Table,\n): ConsentStore {\n  return {\n    async append(record) {\n      await db.insert(table).values({ ...record, userId: record.userId ?? null })\n    },\n  }\n}\n","import type { ConsentState, ServerEvent } from '../core/types'\nimport { assertSecret, readConsentCookie, type ConsentCookieOptions } from './consent'\nimport { ANALYTICS_MAX_BODY, assertSameOrigin, parseCookieHeader, parseJsonWithLimit } from './http'\n\nexport type { ServerEvent }\n\n/** Request details destinations use: client IP, user agent and cookies. */\nexport type ServerRequestInfo = {\n  ip?: string\n  userAgent?: string\n  cookies: Record<string, string>\n}\n\n/** A server-side destination. `send` throws when the vendor rejects the event. */\nexport interface ServerDestination<Forward extends boolean = boolean> {\n  id: string\n  requiredConsent: keyof ConsentState\n  /** Whether `createAnalyticsHandler` may send browser events to it. */\n  forwardBrowserEvents: Forward\n  send(event: ServerEvent, request?: ServerRequestInfo): Promise<void>\n}\n\n/** Whether one destination accepted the event. */\nexport type ServerSendResult = { id: string; ok: boolean; error?: unknown }\n\n/** Sends to every destination the event's consent and `only` allow, in parallel. `undefined` entries are destinations that are off. */\nexport async function sendServerEvent(\n  event: ServerEvent,\n  options: { destinations: (ServerDestination | undefined)[]; request?: ServerRequestInfo },\n): Promise<ServerSendResult[]> {\n  const targets = options.destinations.filter(\n    (destination): destination is ServerDestination =>\n      destination !== undefined &&\n      event.consent[destination.requiredConsent] === true &&\n      (!event.only || event.only.includes(destination.id)),\n  )\n  const results = await Promise.allSettled(targets.map((destination) => destination.send(event, options.request)))\n  return targets.map((destination, index) => {\n    const result = results[index]\n    return result?.status === 'rejected'\n      ? { id: destination.id, ok: false, error: result.reason as unknown }\n      : { id: destination.id, ok: true }\n  })\n}\n\n/** IP, user agent and cookies of a request, for `sendServerEvent({ request })`. */\nexport function requestInfo(request: Request): ServerRequestInfo {\n  const headers = request.headers\n  return {\n    ip: headers.get('x-forwarded-for')?.split(',')[0]?.trim() || headers.get('x-real-ip') || undefined,\n    userAgent: headers.get('user-agent') ?? undefined,\n    cookies: parseCookieHeader(headers.get('cookie') ?? ''),\n  }\n}\n\nconst isObject = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value)\nconst isOptional = (value: unknown, check: (value: unknown) => boolean) => value === undefined || check(value)\nconst isString = (value: unknown) => typeof value === 'string'\nconst isStringArray = (value: unknown) => Array.isArray(value) && value.every(isString)\n\nfunction parseServerEvent(body: unknown): ServerEvent {\n  const valid =\n    isObject(body) &&\n    typeof body.name === 'string' &&\n    /^[\\w.:-]{1,100}$/.test(body.name) &&\n    isObject(body.consent) &&\n    ['preferences', 'analytics', 'marketing'].every(\n      (key) => typeof (body.consent as Record<string, unknown>)[key] === 'boolean',\n    ) &&\n    isOptional(body.id, isString) &&\n    isOptional(body.url, isString) &&\n    isOptional(body.clientId, isString) &&\n    isOptional(body.params, isObject) &&\n    isOptional(body.providers, isObject) &&\n    isOptional(body.only, isStringArray) &&\n    isOptional(\n      body.identity,\n      (identity) => isObject(identity) && Object.values(identity).every((value) => isOptional(value, isString)),\n    )\n  if (!valid) throw Object.assign(new Error('Invalid event'), { status: 400 })\n  return body as ServerEvent\n}\n\n/**\n * A web-standard route handler for events forwarded by `createAnalytics({ server })`.\n * Only destinations that accept browser events (e.g. `metaCapi`) can be passed.\n */\nexport function createAnalyticsHandler(options: {\n  destinations: (ServerDestination<true> | undefined)[]\n  /** Grant only categories both the cookie `createConsentHandler` signs and the body grant; no valid cookie means denied. */\n  consentCookie?: ConsentCookieOptions\n  onError?: (error: unknown) => void\n}): (request: Request) => Promise<Response> {\n  if (options.consentCookie && !options.consentCookie.secret) {\n    console.warn('[consentlayer] consentCookie.secret is not set: every event is treated as denied.')\n  }\n  const destinations = options.destinations.filter((destination) => destination?.forwardBrowserEvents)\n  return async (request) => {\n    try {\n      if (options.consentCookie?.secret) assertSecret(options.consentCookie.secret)\n      assertSameOrigin(request, { requireHeader: true })\n      if (!destinations.length)\n        return new Response(null, { status: 204, headers: { 'consentlayer-forwarding': 'off' } })\n      const event = parseServerEvent(await parseJsonWithLimit(request, ANALYTICS_MAX_BODY))\n      const proof = options.consentCookie && (await readConsentCookie(request, options.consentCookie))\n      if (options.consentCookie) {\n        const recorded = proof?.consent ?? { preferences: false, analytics: false, marketing: false }\n        event.consent = Object.fromEntries(\n          Object.entries(recorded).map(([key, value]) => [\n            key,\n            value === true && event.consent[key as keyof ConsentState] === true,\n          ]),\n        ) as ConsentState\n      }\n      const results = await sendServerEvent(event, {\n        destinations,\n        request: requestInfo(request),\n      })\n      for (const result of results) if (!result.ok) options.onError?.(result.error)\n      return new Response(null, {\n        status: 204,\n        headers: options.consentCookie && !proof ? { 'consentlayer-consent': 'missing' } : {},\n      })\n    } catch (error) {\n      const status = (error as { status?: unknown }).status\n      if (typeof status === 'number') return new Response(null, { status })\n      options.onError?.(error)\n      return new Response(null, { status: 500 })\n    }\n  }\n}\n"]}

package/dist/server/meta.d.ts

@@ -0,0 +1,14 @@
+import { ServerDestination } from './index.js';
+import '../types-BV_AFZKQ.js';
+
+/** Meta Conversions API. Receives browser events too; Meta dedupes them by event ID. Off (`undefined`) while `pixelId` or `accessToken` is unset. */
+declare function metaCapi(options: {
+    pixelId: string | undefined;
+    accessToken: string | undefined;
+    testEventCode?: string;
+    /** Graph API version. */
+    apiVersion?: string;
+    fetchImpl?: typeof fetch;
+}): ServerDestination<true> | undefined;
+
+export { metaCapi };

package/dist/server/meta.js

@@ -0,0 +1,63 @@
+import { sha256 } from '../chunk-DK45XPEY.js';
+import { toMetaEvent } from '../chunk-LBEIEAJX.js';
+import { isValidPhoneE164, isValidEmail } from '../chunk-J3KUPF4R.js';
+
+// src/server/meta.ts
+var isPlainValue = (value) => value === null || ["string", "number", "boolean"].includes(typeof value) || Array.isArray(value) || typeof value === "object" && value.constructor === Object;
+function metaCapi(options) {
+  const pixelId = options.pixelId?.trim();
+  const accessToken = options.accessToken?.trim();
+  if (!pixelId || !accessToken) {
+    if (pixelId || accessToken) console.warn("[consentlayer] metaCapi is off: set both pixelId and accessToken.");
+    return void 0;
+  }
+  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+  return {
+    id: "meta",
+    requiredConsent: "marketing",
+    forwardBrowserEvents: true,
+    async send(event, request) {
+      const { name, params } = toMetaEvent({
+        id: event.id ?? "",
+        name: event.name,
+        params: event.params ?? {},
+        options: { providers: event.providers }
+      });
+      const email = event.identity?.email?.trim().toLowerCase();
+      const phone = event.identity?.phone && `+${event.identity.phone.replace(/\D/g, "")}`;
+      const url = new URL(`https://graph.facebook.com/${options.apiVersion ?? "v26.0"}/${pixelId}/events`);
+      url.searchParams.set("access_token", accessToken);
+      if (options.testEventCode) url.searchParams.set("test_event_code", options.testEventCode);
+      const response = await fetchImpl(url.href, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          data: [
+            {
+              event_name: name,
+              event_time: Math.floor(Date.now() / 1e3),
+              event_id: event.id,
+              event_source_url: event.url,
+              action_source: "website",
+              custom_data: Object.fromEntries(Object.entries(params).filter(([, value]) => isPlainValue(value))),
+              user_data: {
+                client_ip_address: request?.ip,
+                client_user_agent: request?.userAgent,
+                fbp: request?.cookies._fbp,
+                fbc: request?.cookies._fbc,
+                em: email && isValidEmail(email) ? await sha256(email) : void 0,
+                ph: phone && isValidPhoneE164(phone) ? await sha256(phone.slice(1)) : void 0,
+                external_id: await sha256(event.identity?.userId)
+              }
+            }
+          ]
+        })
+      });
+      if (!response.ok) throw new Error(`Meta CAPI ${response.status}: ${await response.text()}`);
+    }
+  };
+}
+
+export { metaCapi };
+//# sourceMappingURL=meta.js.map
+//# sourceMappingURL=meta.js.map