@justai/cuts 0.21.0 → 0.23.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justai/cuts",
-  "version": "0.21.0",
+  "version": "0.23.0",
   "description": "A persona's named parts — the page shell that holds them, and the cuts themselves.",
   "license": "UNLICENSED",
   "repository": {

package/src/Base.astro

@@ -296,7 +296,23 @@ const localePath = (l: string) => (l === defaultLocale ? "/" : `/${l}/`);
           if (localStorage.getItem("consent")) return;
           try { if (sessionStorage.getItem("consent-later")) return; } catch (_) {}
           if (!document.getElementById("kernel")) return; // no kernel = not a content page (e.g. 404) — don't ask for consent on a dead end
-          if ((Intl.DateTimeFormat().resolvedOptions().timeZone || "").indexOf("Europe/") !== 0) return;
+          // WHERE CONSENT IS LEGALLY ASKED — and a timezone is a PROXY for that, never the thing
+          // itself. `Europe/` carries almost all of the region list in the head, but not all of it:
+          // an EEA country can sit in another continent's zone entirely, and those visitors were
+          // DENIED by the regional default while never being offered the dialog — no path to
+          // consent at all. Twelve zones, measured, listed here with the country that owns them.
+          // The two lists are siblings: if the region array up there ever changes, this changes too.
+          var tz = Intl.DateTimeFormat().resolvedOptions().timeZone || "";
+          var asked = tz.indexOf("Europe/") === 0 || [
+            "Asia/Nicosia", "Asia/Famagusta",                              // Cyprus
+            "Atlantic/Canary",                                             // Spain — Canary Islands
+            "Atlantic/Azores", "Atlantic/Madeira",                         // Portugal
+            "Atlantic/Reykjavik",                                          // Iceland
+            "Arctic/Longyearbyen",                                         // Norway — Svalbard
+            "America/Guadeloupe", "America/Martinique", "America/Cayenne", // France — outermost
+            "Indian/Reunion", "Indian/Mayotte"                             //   regions; EU law applies
+          ].indexOf(tz) >= 0;
+          if (!asked) return;
           // the first second belongs to the kernel; the question arrives on the second beat
           setTimeout(open, 700);
         } catch (_) {}

package/src/LangPicker.astro

@@ -24,7 +24,14 @@ const { current, locales, localeNames, localePath, label, searchLabel } = Astro.
   <button class="trigger" type="button" aria-haspopup="listbox" aria-expanded="false" data-trigger aria-label={`${label}: ${current.toUpperCase()}`} title={label}>{current.toUpperCase()}</button>
 
   <div class="menu" role="listbox" data-menu hidden>
-    <input type="search" class="search" placeholder={searchLabel} autocomplete="off" spellcheck="false" data-search aria-label={searchLabel} />
+    {/* `name` and not `id`: a form field with neither makes the browser complain that it cannot
+        autofill (Chrome's Issues panel flags it on every page of the fleet, since this cut is on
+        every page). `name` answers it without the one risk an `id` would carry — an id must be
+        unique in a document, so a persona that ever renders two pickers would ship invalid HTML,
+        and a shared cut must be safe to place twice. Prefixed `lang-` so it cannot collide with a
+        persona's own field of the same idea. The value is never submitted: this input lives in no
+        form and filters the list client-side. */}
+    <input type="search" class="search" name="lang-search" placeholder={searchLabel} autocomplete="off" spellcheck="false" data-search aria-label={searchLabel} />
     <div class="list" data-list>
       {locales.map((l) => (
         <a