fix(consent): address the first review round

- Add /cookie-policy to LANDING_ROUTES. It is an app/(landing) route, and
  every one of those must be exempt from COEP: the header is inherited across
  soft navigations, so an isolated landing page navigating into /demo leaves
  the Cal.com booker loading uncredentialed.
- Render the withdrawal control as plain text on a self-hosted deployment,
  where the consent runtime is never mounted and the button had no listener.
- Give ConsentPreferencesLink a named props interface.

Author: waleedlatif1

apps/sim/app/(landing)/cookie-policy/consent-preferences-link.tsx

@@ -1,18 +1,24 @@
 'use client'
 
+import type { ReactNode } from 'react'
 import { OPEN_CONSENT_PREFERENCES_EVENT } from '@/lib/consent/constants'
 import { PROSE_TYPE } from '@/app/(landing)/components/prose-page/constants'
 
+interface ConsentPreferencesLinkProps {
+  children: ReactNode
+}
+
 /**
  * Inline control that reopens the consent banner with its category switches
  * expanded, so a recorded choice can be withdrawn or changed. Wearing the
  * prose link chrome, it reads as part of the sentence it sits in.
  *
- * On a self-hosted deployment the consent runtime is never mounted, so nothing
- * listens and the control is inert — but it is also unreachable, since the
- * Cookie Policy documents Sim's own hosted service.
+ * Only rendered where the consent runtime is mounted — see the call site. On a
+ * self-hosted deployment nothing would listen for the event, so the Cookie
+ * Policy renders the phrase as plain text rather than a control that does
+ * nothing when clicked.
  */
-export function ConsentPreferencesLink({ children }: { children: React.ReactNode }) {
+export function ConsentPreferencesLink({ children }: ConsentPreferencesLinkProps) {
   return (
     <button
       type='button'

apps/sim/app/(landing)/cookie-policy/cookie-policy-content.tsx

@@ -1,4 +1,5 @@
 import type { ReactNode } from 'react'
+import { isHosted } from '@/lib/core/config/env-flags'
 import {
   type LegalBlock,
   type LegalPageConfig,
@@ -11,6 +12,17 @@ import { ConsentPreferencesLink } from '@/app/(landing)/cookie-policy/consent-pr
  * One cookie-inventory table per consent category. The three share a header and
  * a column layout, so they are built from one shape rather than repeated.
  */
+/**
+ * The withdrawal control, or the bare phrase on a self-hosted deployment. The
+ * consent runtime is hosted-only, so there the button would have no listener
+ * and clicking it would do nothing.
+ */
+const CHANGE_CHOICES: ReactNode = isHosted ? (
+  <ConsentPreferencesLink>change your cookie choices</ConsentPreferencesLink>
+) : (
+  'change your cookie choices'
+)
+
 function cookieTable(caption: string, rows: ReactNode[][]): LegalBlock {
   return {
     kind: 'table',
@@ -55,8 +67,7 @@ export const COOKIE_POLICY_CONFIG: LegalPageConfig = {
       content: (
         <>
           If you are in the EU, the UK, or another region where consent is required, we ask before
-          setting anything that is not strictly necessary. You can{' '}
-          <ConsentPreferencesLink>change your cookie choices</ConsentPreferencesLink> at any time.
+          setting anything that is not strictly necessary. You can {CHANGE_CHOICES} at any time.
         </>
       ),
     },
@@ -203,9 +214,7 @@ export const COOKIE_POLICY_CONFIG: LegalPageConfig = {
               Where consent is required, the banner appears on your first visit with accept and
               reject offered equally, and "Customize" lets you turn each category on or off
               individually. To revisit that decision later — including withdrawing consent you
-              already gave —{' '}
-              <ConsentPreferencesLink>change your cookie choices</ConsentPreferencesLink>. We ask
-              again after 365 days.
+              already gave — {CHANGE_CHOICES}. We ask again after 365 days.
             </>
           ),
         },

apps/sim/next.config.ts

@@ -23,6 +23,7 @@ const LANDING_ROUTES = [
   'changelog',
   'comparisons',
   'contact',
+  'cookie-policy',
   'demo',
   'enterprise',
   'files',