@scalemule/news-publication 0.0.20 → 0.0.22

package/dist/verified-card.cjs

@@ -0,0 +1,232 @@
+'use strict';
+
+var jsxRuntime = require('react/jsx-runtime');
+
+// src/verified-card.tsx
+var ALLOWED_CARD_TYPES = /* @__PURE__ */ new Set([
+  "PLACE",
+  "ACTIVITY",
+  "EVENT",
+  "ORGANIZATION",
+  "PRODUCT"
+]);
+function clip(val, maxChars) {
+  if (typeof val !== "string") return void 0;
+  const trimmed = val.trim();
+  if (!trimmed) return void 0;
+  return Array.from(trimmed).slice(0, maxChars).join("");
+}
+function isSafeActionUrl(raw) {
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim();
+  if (!trimmed || trimmed.length > 2048) return false;
+  if (trimmed.startsWith("tel:") || trimmed.startsWith("mailto:")) {
+    return /^tel:\+?[\d\-().\s]+$/.test(trimmed) || /^mailto:[^\s@]+@[^\s@]+\.[^\s@]+$/.test(trimmed);
+  }
+  try {
+    const url = new URL(trimmed);
+    if (url.protocol !== "https:" && url.protocol !== "http:") return false;
+    if (url.username || url.password) return false;
+    const hostname = url.hostname.toLowerCase();
+    if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".internal") || hostname.endsWith(".local") || hostname === "127.0.0.1" || hostname === "169.254.169.254") {
+      return false;
+    }
+    for (const [key] of url.searchParams.entries()) {
+      const cleanKey = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+      if (cleanKey === "token" || cleanKey === "apikey" || cleanKey === "accesstoken" || cleanKey === "secret" || cleanKey === "clientsecret" || cleanKey === "authorization" || cleanKey === "signature" || cleanKey === "password" || cleanKey === "xamzsignature" || cleanKey === "xamzsecuritytoken") {
+        return false;
+      }
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+function getArticleCards(rawCards) {
+  if (!Array.isArray(rawCards) || rawCards.length === 0) return [];
+  const cards = [];
+  for (const item of rawCards) {
+    if (!item || typeof item !== "object") continue;
+    const c = item;
+    const id = clip(c.id, 64);
+    const title = clip(c.title, 300);
+    if (!id || !title) continue;
+    const rawType = typeof c.card_type === "string" ? c.card_type : c.cardType;
+    const cardType = ALLOWED_CARD_TYPES.has(rawType) ? rawType : "PLACE";
+    const kicker = clip(c.kicker, 120) || (cardType === "PLACE" ? "LOCAL VENUE \xB7 VERIFIED DIRECTORY" : cardType === "EVENT" ? "COMMUNITY EVENT \xB7 VERIFIED FACTSHEET" : cardType === "ACTIVITY" ? "COMMUNITY ACTIVITY \xB7 VERIFIED FACTSHEET" : cardType === "ORGANIZATION" ? "COMMUNITY ORGANIZATION \xB7 DIRECTORY" : "VERIFIED FACTSHEET");
+    const subtitle = clip(c.subtitle, 300);
+    const summary = clip(c.summary, 1e3);
+    const badge = clip(c.badge, 64);
+    const facts = [];
+    if (Array.isArray(c.facts)) {
+      for (const f of c.facts) {
+        if (!f || typeof f !== "object") continue;
+        const label = clip(f.label, 80);
+        const value = clip(f.value, 500);
+        if (!label || !value) continue;
+        let href = void 0;
+        const rawHref = f.href;
+        if (typeof rawHref === "string" && isSafeActionUrl(rawHref)) {
+          href = rawHref;
+        }
+        facts.push({ label, value, href });
+      }
+    } else {
+      const timeframe = clip(c.timeframe, 200);
+      if (timeframe) facts.push({ label: "Timeframe", value: timeframe });
+      const address = clip(c.address, 300);
+      if (address) {
+        facts.push({
+          label: "Address",
+          value: address,
+          href: `https://maps.google.com/?q=${encodeURIComponent(address)}`
+        });
+      }
+      const hours = clip(c.hours, 300);
+      if (hours) facts.push({ label: "Hours", value: hours });
+      const phone = clip(c.phone, 80);
+      if (phone) {
+        facts.push({
+          label: "Phone",
+          value: phone,
+          href: `tel:${phone.replace(/[^+\d]/g, "")}`
+        });
+      }
+      const cost = clip(c.cost, 120);
+      if (cost) facts.push({ label: "Cost", value: cost });
+    }
+    const actions = [];
+    if (Array.isArray(c.actions)) {
+      for (const act of c.actions) {
+        if (!act || typeof act !== "object") continue;
+        const actObj = act;
+        const label = clip(actObj.label, 80);
+        const url = typeof actObj.url === "string" ? actObj.url.trim() : "";
+        if (!label || !url || !isSafeActionUrl(url)) continue;
+        actions.push({
+          label,
+          url,
+          primary: Boolean(actObj.primary)
+        });
+        if (actions.length >= 5) break;
+      }
+    }
+    let image = void 0;
+    if (c.image && typeof c.image === "object") {
+      const img = c.image;
+      const masterUrl = typeof img.master_url === "string" && isSafeActionUrl(img.master_url) ? img.master_url : void 0;
+      const url = typeof img.url === "string" && isSafeActionUrl(img.url) ? img.url : masterUrl;
+      if (url) {
+        image = {
+          file_id: clip(img.file_id, 64),
+          master_url: masterUrl,
+          url,
+          width: typeof img.width === "number" ? img.width : void 0,
+          height: typeof img.height === "number" ? img.height : void 0,
+          alt: clip(img.alt, 500),
+          caption: clip(img.caption, 1e3),
+          attribution: clip(img.attribution, 500),
+          label: clip(img.label, 100),
+          ai_generated: Boolean(img.ai_generated)
+        };
+      }
+    }
+    const verificationNote = clip(c.verification_note || c.verificationNote, 300) || "Verified by publication reporting staff";
+    const verifiedAt = clip(c.verified_at || c.verifiedAt, 100) || "October 2026";
+    let rating = void 0;
+    if (typeof c.rating === "number" || typeof c.rating === "string") {
+      rating = c.rating;
+    }
+    cards.push({
+      id,
+      cardType,
+      kicker,
+      title,
+      subtitle,
+      summary,
+      badge,
+      facts,
+      actions,
+      verificationNote,
+      verifiedAt,
+      image,
+      rating
+    });
+    if (cards.length >= 10) break;
+  }
+  return cards;
+}
+function VerifiedCardComponent({
+  card,
+  className
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "aside",
+    {
+      className: `article-verified-card ${className || ""}`.trim(),
+      "aria-label": `Verified Factsheet: ${card.title}`,
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "article-verified-card__header", children: [
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "article-verified-card__kicker", children: card.kicker }),
+          card.badge && /* @__PURE__ */ jsxRuntime.jsx("span", { className: "article-verified-card__badge", children: card.badge })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "article-verified-card__title", children: card.title }),
+        card.subtitle && /* @__PURE__ */ jsxRuntime.jsx("p", { className: "article-verified-card__subtitle", children: card.subtitle }),
+        card.summary && /* @__PURE__ */ jsxRuntime.jsx("p", { className: "article-verified-card__summary", children: card.summary }),
+        card.facts.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("dl", { className: "article-verified-card__fact-grid", children: card.facts.map((fact, i) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "article-verified-card__fact-row", children: [
+          /* @__PURE__ */ jsxRuntime.jsx("dt", { className: "article-verified-card__fact-label", children: fact.label }),
+          /* @__PURE__ */ jsxRuntime.jsx("dd", { className: "article-verified-card__fact-value", children: fact.href ? /* @__PURE__ */ jsxRuntime.jsx(
+            "a",
+            {
+              className: "article-verified-card__fact-link",
+              href: fact.href,
+              rel: "noopener noreferrer",
+              target: fact.href.startsWith("http") ? "_blank" : void 0,
+              children: fact.value
+            }
+          ) : fact.value })
+        ] }, i)) }),
+        card.actions.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "article-verified-card__actions", children: card.actions.map((act, i) => /* @__PURE__ */ jsxRuntime.jsxs(
+          "a",
+          {
+            className: `article-verified-card__action ${act.primary ? "article-verified-card__action--primary" : "article-verified-card__action--secondary"}`,
+            href: act.url,
+            target: "_blank",
+            rel: "noopener noreferrer",
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx("span", { children: act.label }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { "aria-hidden": "true", className: "article-verified-card__action-icon", children: "\u2197" })
+            ]
+          },
+          i
+        )) }),
+        /* @__PURE__ */ jsxRuntime.jsxs("footer", { className: "article-verified-card__footer", children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "article-verified-card__seal", children: [
+            /* @__PURE__ */ jsxRuntime.jsx("span", { className: "article-verified-card__seal-check", "aria-hidden": "true", children: "\u2713" }),
+            /* @__PURE__ */ jsxRuntime.jsx("span", { children: card.verificationNote })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "article-verified-card__date", children: card.verifiedAt })
+        ] })
+      ]
+    }
+  );
+}
+function VerifiedCardSection({
+  cards,
+  className
+}) {
+  if (!cards || cards.length === 0) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    "section",
+    {
+      className: `article-verified-card-section ${className || ""}`.trim(),
+      "aria-label": "Verified Community Information",
+      children: cards.map((card) => /* @__PURE__ */ jsxRuntime.jsx(VerifiedCardComponent, { card }, card.id))
+    }
+  );
+}
+
+exports.VerifiedCardComponent = VerifiedCardComponent;
+exports.VerifiedCardSection = VerifiedCardSection;
+exports.getArticleCards = getArticleCards;
+exports.isSafeActionUrl = isSafeActionUrl;

package/dist/verified-card.d.cts

@@ -0,0 +1,22 @@
+import * as react from 'react';
+import { V as VerifiedCard } from './types-DFDCZHbS.cjs';
+
+/**
+ * Validate that an action link is safe for readers.
+ * Rejects javascript:, data:, blob:, credentials, and loopback/internal hosts.
+ */
+declare function isSafeActionUrl(raw: unknown): boolean;
+/**
+ * Sanitize and project raw API metadata cards into strictly validated `VerifiedCard[]`.
+ */
+declare function getArticleCards(rawCards?: unknown): VerifiedCard[];
+declare function VerifiedCardComponent({ card, className, }: {
+    card: VerifiedCard;
+    className?: string;
+}): react.JSX.Element;
+declare function VerifiedCardSection({ cards, className, }: {
+    cards?: VerifiedCard[];
+    className?: string;
+}): react.JSX.Element | null;
+
+export { VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl };

package/dist/verified-card.d.ts

@@ -0,0 +1,22 @@
+import * as react from 'react';
+import { V as VerifiedCard } from './types-DFDCZHbS.js';
+
+/**
+ * Validate that an action link is safe for readers.
+ * Rejects javascript:, data:, blob:, credentials, and loopback/internal hosts.
+ */
+declare function isSafeActionUrl(raw: unknown): boolean;
+/**
+ * Sanitize and project raw API metadata cards into strictly validated `VerifiedCard[]`.
+ */
+declare function getArticleCards(rawCards?: unknown): VerifiedCard[];
+declare function VerifiedCardComponent({ card, className, }: {
+    card: VerifiedCard;
+    className?: string;
+}): react.JSX.Element;
+declare function VerifiedCardSection({ cards, className, }: {
+    cards?: VerifiedCard[];
+    className?: string;
+}): react.JSX.Element | null;
+
+export { VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl };

package/dist/verified-card.js

@@ -0,0 +1 @@
+export { VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './chunk-I3ZTQCV3.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/news-publication",
-  "version": "0.0.20",
+  "version": "0.0.22",
   "description": "Shared server framework for ScaleMule local news publications. Walnut Creek Times is the broadsheet default; each paper supplies its own identity and feature flags.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -69,13 +69,20 @@
       "types": "./dist/network-bar.d.ts",
       "import": "./dist/network-bar.js",
       "require": "./dist/network-bar.cjs"
-    }
+    },
+    "./verified-card": {
+      "types": "./dist/verified-card.d.ts",
+      "import": "./dist/verified-card.js",
+      "require": "./dist/verified-card.cjs"
+    },
+    "./verified-card.css": "./verified-card.css"
   },
   "files": [
     "dist",
     "tokens",
     "marketplace.css",
     "cookie-consent.css",
+    "verified-card.css",
     "README.md",
     "LICENSE"
   ],

package/tokens/broadsheet.css

@@ -263,3 +263,213 @@
   text-decoration: underline;
   text-underline-offset: 3px;
 }
+
+/*
+ * Broadsheet Verified Factsheet Card
+ */
+.article-verified-card {
+  margin: 2.25rem 0 2rem 0;
+  border: 1px solid var(--pub-rule, var(--news-border, #d7dcd7));
+  border-top: 3px solid var(--pub-accent, var(--news-nameplate, #bb171d));
+  background-color: var(--pub-paper, var(--news-paper, #ffffff));
+  color: var(--pub-ink, var(--news-ink, #171917));
+  padding: 1.5rem 1.75rem;
+  box-sizing: border-box;
+}
+
+@media (max-width: 640px) {
+  .article-verified-card {
+    padding: 1.25rem 1rem;
+    margin: 1.75rem 0 1.5rem 0;
+  }
+}
+
+.article-verified-card__header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+  margin-bottom: 0.5rem;
+}
+
+.article-verified-card__kicker {
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.6875rem;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--pub-accent, var(--news-nameplate, #bb171d));
+  margin: 0;
+}
+
+.article-verified-card__badge {
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.6875rem;
+  font-weight: 600;
+  color: var(--pub-ink, var(--news-ink, #171917));
+  background-color: var(--pub-soft, #f0f2f0);
+  padding: 0.2rem 0.55rem;
+  border-radius: 2px;
+  white-space: nowrap;
+}
+
+.article-verified-card__title {
+  font-family: var(--pub-serif, Georgia, "Times New Roman", serif);
+  font-size: 1.375rem;
+  font-weight: 700;
+  line-height: 1.25;
+  color: var(--pub-ink, var(--news-ink, #171917));
+  margin: 0.25rem 0 0.25rem 0;
+}
+
+@media (max-width: 640px) {
+  .article-verified-card__title {
+    font-size: 1.25rem;
+  }
+}
+
+.article-verified-card__subtitle {
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.875rem;
+  color: var(--pub-muted, var(--news-muted, #545c55));
+  margin: 0 0 0.875rem 0;
+  line-height: 1.4;
+}
+
+.article-verified-card__summary {
+  font-family: var(--pub-serif, Georgia, "Times New Roman", serif);
+  font-size: 0.9375rem;
+  line-height: 1.5;
+  color: var(--pub-ink, #2d312e);
+  margin: 0 0 1.25rem 0;
+}
+
+.article-verified-card__fact-grid {
+  display: grid;
+  grid-template-columns: 1fr;
+  gap: 0.625rem;
+  border-top: 1px solid var(--pub-rule, #eef0ee);
+  border-bottom: 1px solid var(--pub-rule, #eef0ee);
+  padding: 1rem 0;
+  margin: 0 0 1.25rem 0;
+}
+
+.article-verified-card__fact-row {
+  display: flex;
+  flex-direction: row;
+  align-items: baseline;
+  gap: 1rem;
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.875rem;
+  line-height: 1.4;
+}
+
+@media (max-width: 540px) {
+  .article-verified-card__fact-row {
+    flex-direction: column;
+    gap: 0.125rem;
+  }
+}
+
+.article-verified-card__fact-label {
+  min-width: 140px;
+  font-size: 0.6875rem;
+  font-weight: 700;
+  letter-spacing: 0.05em;
+  text-transform: uppercase;
+  color: var(--pub-muted, var(--news-muted, #545c55));
+  flex-shrink: 0;
+  margin: 0;
+}
+
+.article-verified-card__fact-value {
+  color: var(--pub-ink, var(--news-ink, #171917));
+  font-weight: 500;
+  margin: 0;
+}
+
+.article-verified-card__fact-link {
+  color: var(--pub-ink, var(--news-ink, #171917));
+  text-decoration: underline;
+  text-underline-offset: 3px;
+  text-decoration-color: var(--pub-muted, #a0a6a0);
+  transition: color 0.15s ease, text-decoration-color 0.15s ease;
+}
+
+.article-verified-card__fact-link:hover {
+  color: var(--pub-accent, var(--news-nameplate, #bb171d));
+  text-decoration-color: var(--pub-accent, var(--news-nameplate, #bb171d));
+}
+
+.article-verified-card__actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.75rem;
+  margin: 1.25rem 0 0 0;
+}
+
+.article-verified-card__action {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 0.375rem;
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.8125rem;
+  font-weight: 600;
+  border-radius: 2px;
+  text-decoration: none !important;
+  transition: background-color 0.15s ease, border-color 0.15s ease, color 0.15s ease;
+}
+
+.article-verified-card__action--primary {
+  background-color: var(--pub-ink, var(--news-ink, #171917));
+  color: var(--pub-paper, #ffffff) !important;
+  padding: 0.625rem 1.125rem;
+}
+
+.article-verified-card__action--primary:hover {
+  background-color: var(--pub-accent, var(--news-nameplate, #bb171d));
+}
+
+.article-verified-card__action--secondary {
+  background-color: transparent;
+  color: var(--pub-ink, var(--news-ink, #171917)) !important;
+  border: 1px solid var(--pub-ink, var(--news-ink, #171917));
+  padding: 0.5625rem 1rem;
+}
+
+.article-verified-card__action--secondary:hover {
+  background-color: var(--pub-soft, #f2f4f2);
+}
+
+.article-verified-card__footer {
+  border-top: 1px solid var(--pub-rule, #eef0ee);
+  margin-top: 1.25rem;
+  padding-top: 0.75rem;
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+  font-family: var(--pub-sans, Arial, Helvetica, sans-serif);
+  font-size: 0.75rem;
+  color: var(--pub-muted, var(--news-muted, #545c55));
+}
+
+.article-verified-card__seal {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.375rem;
+  color: var(--pub-sponsor, #173e32);
+  font-weight: 600;
+}
+
+.article-verified-card__seal-check {
+  color: var(--pub-sponsor, #173e32);
+  font-weight: 700;
+}
+
+.article-verified-card__date {
+  color: var(--pub-muted, var(--news-muted, #545c55));
+  font-weight: 400;
+}