peczenyj / GDPR-IAB-TCFv2 / 25549925941

96%

main: 96%

push

github

feat(validator): per-call overrides for purpose ID lists (#69)

Phase 6.5: validate()/validate_all() now accept consent_purpose_ids,
legitimate_interest_purpose_ids, and flexible_purpose_ids in the
%overrides hash, replacing the constructor lists for that call only.

Coherence is enforced silently by orphan-drop at runtime: a flexible
pid that isn't in either basis list is unreachable by the rule loops
and is silently ignored, instead of croaking like the constructor
does. This keeps per-call overrides forgiving for callers that
generate their lists dynamically while leaving the static-policy
constructor strict.

Refactors the consent/LI rule helpers to take the lists and the flex
set as parameters; the rule semantics are unchanged when no override
is supplied (existing tests cover the static path).

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

10 of 10 new or added lines in 1 file covered. (100.0%)

1069 of 1118 relevant lines covered (95.62%)

10848.3 hits per line