@scalemule/news-publication 0.0.12 → 0.0.14

package/dist/{chunk-EKQXS63J.js → chunk-5YQYJ2L2.js}

@@ -1,5 +1,5 @@
 "use client";
-import { checkUrlConsentBridge, hasConsented, isGeoConsentRequired, COOKIE_CONSENT_EVENT, acceptAllCookies, recordConsentToCompliance, rejectOptionalCookies } from './chunk-CWZWU4HE.js';
+import { checkUrlConsentBridge, hasConsented, isGeoConsentRequired, queryNetworkConsentHub, DEFAULT_CONSENT_HUB_URL, acceptAllCookies, rejectOptionalCookies, COOKIE_CONSENT_EVENT, recordConsentToCompliance, setNetworkConsentHub } from './chunk-QWK6G2UF.js';
 import { useState, useEffect } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 
@@ -11,7 +11,8 @@ function CookieConsentBanner({
   publicationSlug,
   complianceEndpoint = "/api/compliance/consent",
   countryCode,
-  forceShow = false
+  forceShow = false,
+  consentHubUrl = DEFAULT_CONSENT_HUB_URL
 }) {
   const [mounted, setMounted] = useState(false);
   const [visible, setVisible] = useState(false);
@@ -27,11 +28,32 @@ function CookieConsentBanner({
     }
     if (!forceShow && !isGeoConsentRequired(countryCode)) {
       setVisible(false);
+      void queryNetworkConsentHub(consentHubUrl, 1200).then((networkStatus) => {
+        if (networkStatus === "accepted") {
+          acceptAllCookies();
+        } else if (networkStatus === "rejected") {
+          rejectOptionalCookies();
+        }
+      });
       return;
     }
-    const timer = window.setTimeout(() => setVisible(true), 300);
-    return () => window.clearTimeout(timer);
-  }, [countryCode, forceShow]);
+    let cancelled = false;
+    void queryNetworkConsentHub(consentHubUrl, 1e3).then((networkStatus) => {
+      if (cancelled) return;
+      if (networkStatus === "accepted") {
+        acceptAllCookies();
+        setVisible(false);
+      } else if (networkStatus === "rejected") {
+        rejectOptionalCookies();
+        setVisible(false);
+      } else {
+        setVisible(true);
+      }
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [countryCode, forceShow, consentHubUrl]);
   useEffect(() => {
     const onConsentChange = () => {
       if (hasConsented()) {
@@ -49,6 +71,7 @@ function CookieConsentBanner({
       endpoint: complianceEndpoint,
       publicationSlug
     });
+    setNetworkConsentHub("accepted", consentHubUrl);
   };
   const handleReject = () => {
     const record = rejectOptionalCookies();
@@ -57,6 +80,7 @@ function CookieConsentBanner({
       endpoint: complianceEndpoint,
       publicationSlug
     });
+    setNetworkConsentHub("rejected", consentHubUrl);
   };
   const defaultText = /* @__PURE__ */ jsxs(Fragment, { children: [
     "We use cookies and device data to analyze performance, support local sponsors, and remember your reading preferences across our news network. View",

package/dist/chunk-QWK6G2UF.js

@@ -0,0 +1,117 @@
+import { recordConsentToCompliance as recordConsentToCompliance$1 } from '@scalemule/compliance';
+export { COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, decorateNetworkUrl, getCookieConsent, hasConsented, isCategoryAllowed, isGeoConsentRequired, queryNetworkConsentHub, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from '@scalemule/compliance';
+
+// src/cookies.ts
+async function recordConsentToCompliance(record, options) {
+  return recordConsentToCompliance$1(record, options);
+}
+var COOKIE_CATEGORIES = [
+  {
+    id: "essential",
+    title: "Strictly Necessary Cookies",
+    shortDescription: "Essential for site security, navigation, and privacy preference management.",
+    fullDescription: "These cookies are necessary for the website to function properly and securely. They enable core features such as load balancing, CSRF protection, secure session tokens, and remembering your cookie consent choice. Because the site cannot function without them, they cannot be turned off.",
+    required: true,
+    cookies: [
+      {
+        name: "sm_cookie_consent_v1",
+        provider: "First-Party (ScaleMule)",
+        purpose: "Stores your verified cookie privacy and category consent choices.",
+        duration: "1 year",
+        type: "HTTP Cookie"
+      },
+      {
+        name: "napsite_session_v1",
+        provider: "First-Party",
+        purpose: "Maintains session continuity, security tokens, and server routing.",
+        duration: "30 minutes (idle)",
+        type: "Session Storage"
+      },
+      {
+        name: "napsite_preview",
+        provider: "First-Party",
+        purpose: "Verifies preview access permissions when viewing unpublished newsroom editions.",
+        duration: "14 days",
+        type: "HTTP Cookie"
+      }
+    ]
+  },
+  {
+    id: "performance",
+    title: "Performance & Analytics Cookies",
+    shortDescription: "Help us measure reader engagement, story completion, and site reliability.",
+    fullDescription: "These cookies collect anonymous information about how visitors navigate our news publication. They allow us to count article reads, understand scroll depth and reading completion, and identify broken links or slow-loading assets so we can keep our community reporting responsive and fast. All metrics are aggregated and never contain personal information.",
+    required: false,
+    cookies: [
+      {
+        name: "napsite_visitor_v1",
+        provider: "First-Party",
+        purpose: "A randomized anonymous UUIDv7 to count distinct readers without tracking personal identity.",
+        duration: "1 year",
+        type: "Local Storage"
+      },
+      {
+        name: "napsite_analytics_v1",
+        provider: "First-Party",
+        purpose: "Connects reading completion and web vitals to the anonymous session.",
+        duration: "30 minutes",
+        type: "HTTP Cookie"
+      }
+    ]
+  },
+  {
+    id: "functional",
+    title: "Functional & Personalization Cookies",
+    shortDescription: "Remember your reading preferences, text size, and narration audio settings.",
+    fullDescription: "These cookies enable enhanced convenience features designed for readers. They remember your custom text sizing, keep your preferred audio narration playback speed (e.g., 1.0x vs 1.25x), and preserve your local town filters across the front page so you always see news closest to your neighborhood.",
+    required: false,
+    cookies: [
+      {
+        name: "reader_text_size",
+        provider: "First-Party",
+        purpose: "Remembers your preferred reading font size across articles.",
+        duration: "1 year",
+        type: "Local Storage"
+      },
+      {
+        name: "news_publication_theme",
+        provider: "First-Party",
+        purpose: "Remembers your reading theme preference (light, dark, or system).",
+        duration: "1 year",
+        type: "HTTP Cookie"
+      },
+      {
+        name: "audio_narration_speed",
+        provider: "First-Party",
+        purpose: "Stores your preferred audio player playback rate (e.g. 1.0x, 1.25x).",
+        duration: "1 year",
+        type: "Local Storage"
+      }
+    ]
+  },
+  {
+    id: "advertising",
+    title: "Advertising & Local Sponsorship Cookies",
+    shortDescription: "Support local business sponsors by capping repetition and measuring notices.",
+    fullDescription: "Our journalism is supported by local business sponsors and community partners. These cookies ensure you do not see the same sponsor banner repeatedly (frequency capping) and help local merchants measure whether their announcement reached their community. They never track your activity across unrelated third-party websites or build external advertising profiles.",
+    required: false,
+    cookies: [
+      {
+        name: "napsite_sponsor_cap",
+        provider: "First-Party",
+        purpose: "Prevents repetitive display of identical local business announcements.",
+        duration: "7 days",
+        type: "Local Storage"
+      },
+      {
+        name: "local_sponsor_ref",
+        provider: "First-Party",
+        purpose: "Attributes community inquiries directly to the sponsoring local merchant.",
+        duration: "30 days",
+        type: "Local Storage"
+      }
+    ]
+  }
+];
+
+export { COOKIE_CATEGORIES, recordConsentToCompliance };

package/dist/{chunk-ZSA6YQBV.js → chunk-WZ3NQRQO.js}

@@ -1,5 +1,5 @@
 "use client";
-import { getCookieConsent, DEFAULT_PREFERENCES_ACCEPTED, COOKIE_CATEGORIES, setCookieConsent, recordConsentToCompliance, DEFAULT_PREFERENCES_REJECTED } from './chunk-CWZWU4HE.js';
+import { getCookieConsent, DEFAULT_PREFERENCES_ACCEPTED, COOKIE_CATEGORIES, setCookieConsent, recordConsentToCompliance, DEFAULT_PREFERENCES_REJECTED } from './chunk-QWK6G2UF.js';
 import { useState, useEffect } from 'react';
 import { jsxs, jsx } from 'react/jsx-runtime';
 

package/dist/compliance.cjs

@@ -0,0 +1,19 @@
+'use strict';
+
+var compliance = require('@scalemule/compliance');
+var react = require('@scalemule/compliance/react');
+
+
+
+Object.keys(compliance).forEach(function (k) {
+	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function () { return compliance[k]; }
+	});
+});
+Object.keys(react).forEach(function (k) {
+	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function () { return react[k]; }
+	});
+});

package/dist/compliance.d.cts

@@ -0,0 +1,2 @@
+export * from '@scalemule/compliance';
+export * from '@scalemule/compliance/react';

package/dist/compliance.d.ts

@@ -0,0 +1,2 @@
+export * from '@scalemule/compliance';
+export * from '@scalemule/compliance/react';

package/dist/compliance.js

@@ -0,0 +1,2 @@
+export * from '@scalemule/compliance';
+export * from '@scalemule/compliance/react';

package/dist/cookie-consent-banner.cjs

@@ -2,208 +2,11 @@
 'use strict';
 
 var react = require('react');
+var compliance = require('@scalemule/compliance');
 var jsxRuntime = require('react/jsx-runtime');
 
-// src/cookies.ts
-var COOKIE_CONSENT_KEY = "sm_cookie_consent_v1";
-var COOKIE_CONSENT_BACKUP_KEY = "napsite_cookie_consent_v1";
-var COOKIE_CONSENT_EVENT = "scalemule-cookie-consent-change";
-var COOKIE_CONSENT_MAX_AGE_SECONDS = 365 * 24 * 60 * 60;
-var DEFAULT_PREFERENCES_REJECTED = {
-  performance: false,
-  functional: false,
-  advertising: false
-};
-var DEFAULT_PREFERENCES_ACCEPTED = {
-  performance: true,
-  functional: true,
-  advertising: true
-};
-var memoryConsent = null;
-function readCookie(name) {
-  if (typeof document === "undefined") return null;
-  const match = document.cookie.match(new RegExp("(?:^|; )" + name.replace(/([.$?*|{}()[\]\\/+^])/g, "\\$1") + "=([^;]*)"));
-  return match ? decodeURIComponent(match[1]) : null;
-}
-function writeCookie(name, value, maxAgeSeconds) {
-  if (typeof document === "undefined") return;
-  const secure = typeof location !== "undefined" && location.protocol === "https:" ? "; Secure" : "";
-  document.cookie = `${name}=${encodeURIComponent(value)}; Path=/; Max-Age=${maxAgeSeconds}; SameSite=Lax${secure}`;
-}
-function getCookieConsent() {
-  if (typeof window === "undefined") return memoryConsent;
-  try {
-    const raw = readCookie(COOKIE_CONSENT_KEY) || readCookie(COOKIE_CONSENT_BACKUP_KEY);
-    if (raw) {
-      const parsed = JSON.parse(raw);
-      if (parsed && parsed.version === 1 && parsed.preferences) {
-        memoryConsent = parsed;
-        return parsed;
-      }
-    }
-    const stored = window.localStorage?.getItem(COOKIE_CONSENT_KEY);
-    if (stored) {
-      const parsed = JSON.parse(stored);
-      if (parsed && parsed.version === 1 && parsed.preferences) {
-        memoryConsent = parsed;
-        return parsed;
-      }
-    }
-  } catch {
-  }
-  return memoryConsent;
-}
-var EU_EEA_UK_COUNTRIES = /* @__PURE__ */ new Set([
-  "AT",
-  "BE",
-  "BG",
-  "HR",
-  "CY",
-  "CZ",
-  "DK",
-  "EE",
-  "FI",
-  "FR",
-  "DE",
-  "GR",
-  "HU",
-  "IE",
-  "IT",
-  "LV",
-  "LT",
-  "LU",
-  "MT",
-  "NL",
-  "PL",
-  "PT",
-  "RO",
-  "SK",
-  "SI",
-  "ES",
-  "SE",
-  "IS",
-  "LI",
-  "NO",
-  "GB",
-  "CH"
-]);
-function isGeoConsentRequired(countryCode) {
-  if (countryCode && typeof countryCode === "string") {
-    const code = countryCode.trim().toUpperCase();
-    if (code.length === 2) {
-      return EU_EEA_UK_COUNTRIES.has(code);
-    }
-  }
-  if (typeof window !== "undefined") {
-    try {
-      const cached = readCookie("sm_geo_country") || window.localStorage?.getItem("sm_geo_country");
-      if (cached && typeof cached === "string" && cached.length === 2) {
-        return EU_EEA_UK_COUNTRIES.has(cached.toUpperCase());
-      }
-      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
-      if (tz) {
-        if (/^(America|US|Canada|Pacific)\//i.test(tz)) {
-          return false;
-        }
-        if (/^(Europe|Atlantic\/Reykjavik|Atlantic\/Canary|Atlantic\/Faeroe|Atlantic\/Madeira|Atlantic\/Azores|WET|CET|EET|GMT)/i.test(tz)) {
-          return true;
-        }
-      }
-    } catch {
-    }
-  }
-  return false;
-}
-function checkUrlConsentBridge() {
-  if (typeof window === "undefined") return false;
-  try {
-    const url = new URL(window.location.href);
-    const param = url.searchParams.get("sm_consent");
-    if (!param) return false;
-    if (param === "accepted" || param === "1" || param === "all") {
-      acceptAllCookies();
-    } else if (param === "rejected" || param === "0" || param === "essential") {
-      rejectOptionalCookies();
-    } else {
-      return false;
-    }
-    url.searchParams.delete("sm_consent");
-    const newSearch = url.searchParams.toString() ? `?${url.searchParams.toString()}` : "";
-    window.history.replaceState(null, "", `${url.pathname}${newSearch}${url.hash}`);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function hasConsented() {
-  return getCookieConsent() !== null;
-}
-function setCookieConsent(preferences, source = "settings_save") {
-  const mergedPreferences = {
-    essential: true,
-    performance: Boolean(preferences.performance),
-    functional: Boolean(preferences.functional),
-    advertising: Boolean(preferences.advertising)
-  };
-  let anonymous_id;
-  if (typeof window !== "undefined") {
-    try {
-      anonymous_id = window.localStorage?.getItem("napsite_visitor_v1") || void 0;
-    } catch {
-    }
-  }
-  const record = {
-    version: 1,
-    preferences: mergedPreferences,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    anonymous_id,
-    source
-  };
-  memoryConsent = record;
-  const serialized = JSON.stringify(record);
-  writeCookie(COOKIE_CONSENT_KEY, serialized, COOKIE_CONSENT_MAX_AGE_SECONDS);
-  writeCookie(COOKIE_CONSENT_BACKUP_KEY, serialized, COOKIE_CONSENT_MAX_AGE_SECONDS);
-  if (typeof window !== "undefined") {
-    try {
-      window.localStorage?.setItem(COOKIE_CONSENT_KEY, serialized);
-    } catch {
-    }
-    window.dispatchEvent(new CustomEvent(COOKIE_CONSENT_EVENT, { detail: record }));
-  }
-  return record;
-}
-function acceptAllCookies() {
-  return setCookieConsent(DEFAULT_PREFERENCES_ACCEPTED, "banner_accept");
-}
-function rejectOptionalCookies() {
-  return setCookieConsent(DEFAULT_PREFERENCES_REJECTED, "banner_reject");
-}
 async function recordConsentToCompliance(record, options) {
-  if (typeof window === "undefined") return;
-  const endpoint = options?.endpoint || "/api/compliance/consent";
-  try {
-    const payload = {
-      consent_type: "cookie_policy",
-      granted: record.preferences.performance || record.preferences.advertising,
-      preferences: record.preferences,
-      source: record.source,
-      anonymous_id: record.anonymous_id,
-      timestamp: record.timestamp,
-      url: window.location.href,
-      user_agent: window.navigator.userAgent
-    };
-    if (typeof navigator.sendBeacon === "function") {
-      navigator.sendBeacon(endpoint, new Blob([JSON.stringify(payload)], { type: "application/json" }));
-    } else {
-      await fetch(endpoint, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(payload),
-        keepalive: true
-      });
-    }
-  } catch {
-  }
+  return compliance.recordConsentToCompliance(record, options);
 }
 function CookieConsentBanner({
   title = "Help Us Improve Our Website with Cookies",
@@ -213,48 +16,76 @@ function CookieConsentBanner({
   publicationSlug,
   complianceEndpoint = "/api/compliance/consent",
   countryCode,
-  forceShow = false
+  forceShow = false,
+  consentHubUrl = compliance.DEFAULT_CONSENT_HUB_URL
 }) {
   const [mounted, setMounted] = react.useState(false);
   const [visible, setVisible] = react.useState(false);
   react.useEffect(() => {
     setMounted(true);
-    if (checkUrlConsentBridge()) {
+    if (compliance.checkUrlConsentBridge()) {
       setVisible(false);
       return;
     }
-    if (hasConsented()) {
+    if (compliance.hasConsented()) {
       setVisible(false);
       return;
     }
-    if (!forceShow && !isGeoConsentRequired(countryCode)) {
+    if (!forceShow && !compliance.isGeoConsentRequired(countryCode)) {
       setVisible(false);
+      void compliance.queryNetworkConsentHub(consentHubUrl, 1200).then((networkStatus) => {
+        if (networkStatus === "accepted") {
+          compliance.acceptAllCookies();
+        } else if (networkStatus === "rejected") {
+          compliance.rejectOptionalCookies();
+        }
+      });
       return;
     }
-    const timer = window.setTimeout(() => setVisible(true), 300);
-    return () => window.clearTimeout(timer);
-  }, [countryCode, forceShow]);
+    let cancelled = false;
+    void compliance.queryNetworkConsentHub(consentHubUrl, 1e3).then((networkStatus) => {
+      if (cancelled) return;
+      if (networkStatus === "accepted") {
+        compliance.acceptAllCookies();
+        setVisible(false);
+      } else if (networkStatus === "rejected") {
+        compliance.rejectOptionalCookies();
+        setVisible(false);
+      } else {
+        setVisible(true);
+      }
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [countryCode, forceShow, consentHubUrl]);
   react.useEffect(() => {
     const onConsentChange = () => {
-      if (hasConsented()) {
+      if (compliance.hasConsented()) {
         setVisible(false);
       }
     };
-    window.addEventListener(COOKIE_CONSENT_EVENT, onConsentChange);
-    return () => window.removeEventListener(COOKIE_CONSENT_EVENT, onConsentChange);
+    window.addEventListener(compliance.COOKIE_CONSENT_EVENT, onConsentChange);
+    return () => window.removeEventListener(compliance.COOKIE_CONSENT_EVENT, onConsentChange);
   }, []);
   if (!mounted || !visible) return null;
   const handleAccept = () => {
-    const record = acceptAllCookies();
+    const record = compliance.acceptAllCookies();
     setVisible(false);
     void recordConsentToCompliance(record, {
-      endpoint: complianceEndpoint});
+      endpoint: complianceEndpoint,
+      publicationSlug
+    });
+    compliance.setNetworkConsentHub("accepted", consentHubUrl);
   };
   const handleReject = () => {
-    const record = rejectOptionalCookies();
+    const record = compliance.rejectOptionalCookies();
     setVisible(false);
     void recordConsentToCompliance(record, {
-      endpoint: complianceEndpoint});
+      endpoint: complianceEndpoint,
+      publicationSlug
+    });
+    compliance.setNetworkConsentHub("rejected", consentHubUrl);
   };
   const defaultText = /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     "We use cookies and device data to analyze performance, support local sponsors, and remember your reading preferences across our news network. View",

package/dist/cookie-consent-banner.d.cts

@@ -17,7 +17,9 @@ interface CookieConsentBannerProps {
     countryCode?: string | null;
     /** Force display of banner regardless of visitor geography */
     forceShow?: boolean;
+    /** URL of the central network consent iframe bridge. Default: "https://bayareachronicle.com/consent-bridge.html" */
+    consentHubUrl?: string;
 }
-declare function CookieConsentBanner({ title, text, settingsUrl, className, publicationSlug, complianceEndpoint, countryCode, forceShow, }: CookieConsentBannerProps): react__default.JSX.Element | null;
+declare function CookieConsentBanner({ title, text, settingsUrl, className, publicationSlug, complianceEndpoint, countryCode, forceShow, consentHubUrl, }: CookieConsentBannerProps): react__default.JSX.Element | null;
 
 export { CookieConsentBanner, type CookieConsentBannerProps };

package/dist/cookie-consent-banner.d.ts

@@ -17,7 +17,9 @@ interface CookieConsentBannerProps {
     countryCode?: string | null;
     /** Force display of banner regardless of visitor geography */
     forceShow?: boolean;
+    /** URL of the central network consent iframe bridge. Default: "https://bayareachronicle.com/consent-bridge.html" */
+    consentHubUrl?: string;
 }
-declare function CookieConsentBanner({ title, text, settingsUrl, className, publicationSlug, complianceEndpoint, countryCode, forceShow, }: CookieConsentBannerProps): react__default.JSX.Element | null;
+declare function CookieConsentBanner({ title, text, settingsUrl, className, publicationSlug, complianceEndpoint, countryCode, forceShow, consentHubUrl, }: CookieConsentBannerProps): react__default.JSX.Element | null;
 
 export { CookieConsentBanner, type CookieConsentBannerProps };

package/dist/cookie-consent-banner.js

@@ -1,3 +1,3 @@
 "use client";
-export { CookieConsentBanner } from './chunk-EKQXS63J.js';
-import './chunk-CWZWU4HE.js';
+export { CookieConsentBanner } from './chunk-5YQYJ2L2.js';
+import './chunk-QWK6G2UF.js';