@scalemule/news-publication 0.0.33 → 0.0.35

package/README.md

@@ -111,3 +111,20 @@ The review endpoint returns the decision for the exact invited revision. Editors
 ### Publication framing for private previews (0.0.28)
 
 Pass `publicationHeader` and `publicationFooter` React nodes to `StoryReview` to reuse a publication's real navigation, masthead, and footer. The private banner remains above the publication header and the review controls remain separate from the story. The standalone masthead remains the default. The host must suppress analytics on private review routes; public article indexing and sharing features are not mounted by these slots. This patch changes presentation only; review permissions and publication gates are unchanged.
+
+### Private review sign-in and email options
+
+`StoryReview` accepts `readerAccountUrl` and a client `renderSignIn(returnTo)`
+function so the host publication can reuse its existing account and sign-in
+components. Hosts must implement the `/api/news/review/:session/account`
+server adapter to connect the authenticated, verified reader through Blog’s
+`join-account` endpoint. Never trust a browser-supplied email or verification flag.
+The private return path belongs in the host’s signed, HttpOnly OAuth flow cookie,
+not the provider’s authorization URL. Contributor access does not imply subject
+approval authority.
+
+Optional questions can be browsed and copied before identity verification.
+`feedbackEmail` enables mail-app links containing the story title, exact revision
+reference and optional answers, never the invitation credential. Configure a
+monitored mailbox; received email must be recorded by the newsroom. Online
+answers retain their existing autosave and explicit-send behavior.

package/dist/story-review.cjs

@@ -158,7 +158,18 @@ function useReviewDrafts(session, revision, initial, request) {
     }
   };
 }
+async function encodePendingPhoto(value) {
+  const { file, ...details } = value;
+  return { ...details, file: { bytes: await file.arrayBuffer(), name: file.name, type: file.type, lastModified: file.lastModified } };
+}
+function decodePendingPhoto(value) {
+  if (!value) return void 0;
+  if (value.file instanceof File) return value;
+  const file = value.file;
+  return { ...value, file: new File([file.bytes], file.name, { type: file.type, lastModified: file.lastModified }) };
+}
 async function stored(key, value) {
+  const encoded = value ? await encodePendingPhoto(value) : value;
   const db = await new Promise((resolve, reject) => {
     const request = indexedDB.open("story-review-pending-media", 1);
     request.onupgradeneeded = () => request.result.createObjectStore("photos");
@@ -169,8 +180,14 @@ async function stored(key, value) {
     return await new Promise((resolve, reject) => {
       const tx = db.transaction("photos", value === void 0 ? "readonly" : "readwrite");
       const store = tx.objectStore("photos");
-      const request = value === void 0 ? store.get(key) : value === null ? store.delete(key) : store.put(value, key);
-      tx.oncomplete = () => resolve(value === void 0 ? request.result : void 0);
+      const request = value === void 0 ? store.get(key) : value === null ? store.delete(key) : store.put(encoded, key);
+      tx.oncomplete = () => {
+        try {
+          resolve(value === void 0 ? decodePendingPhoto(request.result) : void 0);
+        } catch (error) {
+          reject(error);
+        }
+      };
       tx.onerror = () => reject(tx.error);
       tx.onabort = () => reject(tx.error);
     });
@@ -274,6 +291,23 @@ function proseDiff(before, after) {
   emit("same", a.slice(endA).join(""));
   return out;
 }
+
+// src/story-review-email.ts
+function reviewEmailText(review, answers) {
+  const header = `Private story feedback \u2014 not published
+${review.revision.document.title}
+Preview v${review.revision.number} \xB7 Reference ${review.revision.id}
+
+Your name:
+
+`;
+  return header + (answers === void 0 ? "My feedback:\n" : "These questions are optional. Answer only what you would like to share.\n\n" + review.questions.map((q, i) => `${i + 1}. ${q.prompt}
+${answers[q.id] || ""}`).join("\n\n"));
+}
+function reviewEmailLink(email, title, text) {
+  if (!email || !/^[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,}$/i.test(email)) return void 0;
+  return `mailto:${encodeURIComponent(email)}?subject=${encodeURIComponent(`Private story feedback: ${title}`)}&body=${encodeURIComponent(text)}`;
+}
 function EditorialNotices({ editorial }) {
   return editorial ? /* @__PURE__ */ jsxRuntime.jsxs("aside", { "aria-label": "Editorial notices", children: [
     editorial.content_kind && editorial.content_kind !== "EDITORIAL" && /* @__PURE__ */ jsxRuntime.jsx("p", { children: human(editorial.content_kind) }),
@@ -293,15 +327,40 @@ function StoryReview({
   publicationName,
   nameplateUrl,
   publicationHeader,
-  publicationFooter
+  publicationFooter,
+  readerAccountUrl,
+  renderSignIn,
+  feedbackEmail
 }) {
   const base = `/api/news/review/${encodeURIComponent(sessionId)}`;
   const [review, setReview] = react.useState(null), [error, setError] = react.useState(""), [notice, setNotice] = react.useState(""), [busy, setBusy] = react.useState(false), [panel, setPanelState] = react.useState("article"), [verification, setVerification] = react.useState(false), [code, setCode] = react.useState("");
   const [shareUrl, setShareUrl] = react.useState(""), [canShare, setCanShare] = react.useState(false);
   const [contributorName, setContributorName] = react.useState(""), [contributorEmail, setContributorEmail] = react.useState("");
   const [identityStep, setIdentityStep] = react.useState("name"), [requestedPanel, setRequestedPanel] = react.useState("comment");
+  const [reader, setReader] = react.useState(null);
+  const [readerLoading, setReaderLoading] = react.useState(!!readerAccountUrl);
+  const [useEmailCode, setUseEmailCode] = react.useState(!renderSignIn);
+  const [returnPanel, setReturnPanel] = react.useState("");
+  const resumed = react.useRef(false);
+  const [copiedQuestions, setCopiedQuestions] = react.useState(false);
+  react.useEffect(() => {
+    if (!readerAccountUrl) return;
+    let active = true;
+    void fetch(readerAccountUrl, { credentials: "same-origin", cache: "no-store", signal: AbortSignal.timeout(15e3) }).then(async (response) => {
+      if (response.ok) {
+        const data = await response.json();
+        if (active) setReader(data.user || null);
+      }
+    }).catch(() => {
+    }).finally(() => {
+      if (active) setReaderLoading(false);
+    });
+    return () => {
+      active = false;
+    };
+  }, [readerAccountUrl]);
   function setPanel(next) {
-    if (review?.identity_required && !["article", "history", "identity", "share"].includes(next)) {
+    if (review?.identity_required && !["article", "history", "identity", "share", "question-list"].includes(next)) {
       setRequestedPanel(next);
       setPanelState("identity");
     } else setPanelState(next);
@@ -399,10 +458,41 @@ function StoryReview({
       setReview(data);
     }
   }
+  async function connectReader(target = requestedPanel) {
+    setBusy(true);
+    setError("");
+    try {
+      await request("/account", {});
+      await load();
+      setPanelState(target);
+      setReturnPanel("");
+      const url = new URL(window.location.href);
+      url.searchParams.delete("respond");
+      window.history.replaceState(null, "", url.pathname + url.search);
+    } catch (e) {
+      setError(e.message);
+      setPanelState("identity");
+    } finally {
+      setBusy(false);
+    }
+  }
+  react.useEffect(() => {
+    if (!returnPanel || !review || !reader?.email_verified || resumed.current) return;
+    resumed.current = true;
+    void connectReader(returnPanel);
+  }, [returnPanel, review, reader]);
   react.useEffect(() => {
     let active = true;
     void (async () => {
       try {
+        const returnUrl = new URL(window.location.href);
+        if (returnUrl.searchParams.get("signin") === "retry") setError("Sign-in wasn\u2019t completed. Try again or use an email code.");
+        const respond = returnUrl.searchParams.get("respond") || "";
+        if (["feedback", "changes", "questions", "media", "comment", "edits"].includes(respond)) {
+          setRequestedPanel(respond);
+          setReturnPanel(respond);
+          setPanelState("identity");
+        }
         const token = new URL(window.location.href).searchParams.get("key") || (/^[a-f0-9]{64}$/.test(window.location.hash.slice(1)) ? window.location.hash.slice(1) : void 0);
         let exchange = {};
         try {
@@ -414,7 +504,9 @@ function StoryReview({
         if (address) {
           const canonical = new URL(address, window.location.origin);
           if (canonical.origin === window.location.origin) {
-            window.history.replaceState(null, "", canonical.pathname + canonical.search);
+            const address2 = new URL(canonical);
+            if (respond) address2.searchParams.set("respond", respond);
+            window.history.replaceState(null, "", address2.pathname + address2.search);
             if (active) {
               setShareUrl(canonical.href);
               setCanShare(exchange.can_share === true);
@@ -579,6 +671,15 @@ function StoryReview({
     (r) => r.id === (compareTo || review?.revision.id)
   );
   const errorMessage = error ? /* @__PURE__ */ jsxRuntime.jsx("p", { ref: errorRef, tabIndex: -1, role: "alert", className: "sm-review-alert", children: error }) : null;
+  const emailLink = review ? reviewEmailLink(feedbackEmail, review.revision.document.title, reviewEmailText(review)) : void 0;
+  const questionText = review ? reviewEmailText(review, answers) : "";
+  const questionsEmail = review ? reviewEmailLink(feedbackEmail, review.revision.document.title, questionText) : void 0;
+  const signInReturn = shareUrl ? new URL(shareUrl).pathname + new URL(shareUrl).search + `&respond=${encodeURIComponent(requestedPanel)}` : "";
+  const emailAlternative = emailLink && /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "sm-review-email-alternative", children: [
+    "Prefer email? ",
+    /* @__PURE__ */ jsxRuntime.jsx("a", { href: emailLink, children: "Email the newsroom" }),
+    ". Your email app will open; send your message there."
+  ] });
   return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: `sm-review-frame${publicationHeader ? " sm-review-publication-frame" : ""}`, children: [
     /* @__PURE__ */ jsxRuntime.jsx("div", { className: "sm-review-banner-wrap", children: /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sm-review-private", children: [
       /* @__PURE__ */ jsxRuntime.jsx("strong", { children: review?.published ? "Private review" : "Private preview \xB7 Not published" }),
@@ -779,7 +880,7 @@ function StoryReview({
             {
               onClick: () => {
                 setMoreQuestions(false);
-                setPanel("questions");
+                setPanel(review.identity_required ? "question-list" : "questions");
               },
               children: "Tell Us More"
             }
@@ -792,7 +893,8 @@ function StoryReview({
               children: "Prefer Not to Publish"
             }
           ),
-          can("COMMENT") && /* @__PURE__ */ jsxRuntime.jsx("button", { className: "sm-review-quiet", onClick: () => setPanel("comment"), children: "Leave a Comment" })
+          can("COMMENT") && /* @__PURE__ */ jsxRuntime.jsx("button", { className: "sm-review-quiet", onClick: () => setPanel("comment"), children: "Leave a Comment" }),
+          emailAlternative
         ] }),
         /* @__PURE__ */ jsxRuntime.jsxs(
           "nav",
@@ -815,7 +917,7 @@ function StoryReview({
               can("UPLOAD_MEDIA") && /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => openMedia(), children: celebration ? "Add Photos" : "Add photos" }),
               !celebration && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
                 can("PROPOSE_EDITS") && /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel("edits"), children: "Suggest edits" }),
-                can("ANSWER_QUESTIONS") && review.questions.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel("questions"), children: "Answer questions" }),
+                can("ANSWER_QUESTIONS") && review.questions.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel(review.identity_required ? "question-list" : "questions"), children: "Answer questions" }),
                 can("COMMENT") && /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel("comment"), children: "Leave a comment" })
               ] })
             ]
@@ -837,7 +939,10 @@ function StoryReview({
         panel === "share" && /* @__PURE__ */ jsxRuntime.jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Share private preview", children: [
           /* @__PURE__ */ jsxRuntime.jsx("h2", { children: "Share with your family" }),
           errorMessage,
-          /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Anyone with this link can read the private preview. To send feedback or photos, they will enter their own name and verify their email. No account is needed." }),
+          /* @__PURE__ */ jsxRuntime.jsxs("p", { children: [
+            "Anyone with this link can read the private preview. ",
+            renderSignIn ? "To contribute, they can continue with Google or use an email code." : "To send feedback or photos, they will enter their own name and verify their email. No account is needed."
+          ] }),
           /* @__PURE__ */ jsxRuntime.jsx("label", { htmlFor: "review-share-url", children: "Private preview link" }),
           /* @__PURE__ */ jsxRuntime.jsx("input", { id: "review-share-url", readOnly: true, value: shareUrl, onFocus: (e) => e.currentTarget.select() }),
           /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: async () => {
@@ -850,11 +955,48 @@ function StoryReview({
           }, children: "Copy private link" }),
           /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => setPanel("article"), children: "Back to the story" })
         ] }),
+        panel === "question-list" && /* @__PURE__ */ jsxRuntime.jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Optional story questions", children: [
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "sm-review-form-heading", children: [
+            /* @__PURE__ */ jsxRuntime.jsx("h2", { children: "Tell us a little more" }),
+            /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => setPanel("article"), children: "Close" })
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Completely optional. Read the questions first, then answer online or copy them into an email. Even one answer helps." }),
+          /* @__PURE__ */ jsxRuntime.jsx("ol", { className: "sm-review-question-list", children: review.questions.filter((q, i) => moreQuestions || i < 5 || q.required).map((q) => /* @__PURE__ */ jsxRuntime.jsx("li", { children: q.prompt }, q.id)) }),
+          !moreQuestions && review.questions.length > 5 && /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: () => setMoreQuestions(true), children: "See all questions" }),
+          /* @__PURE__ */ jsxRuntime.jsx("button", { className: "sm-review-primary", onClick: () => setPanel("questions"), children: "Answer online" }),
+          /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Sign in to save your answers as you go. You can return whenever it suits you." }),
+          /* @__PURE__ */ jsxRuntime.jsx("button", { onClick: async () => {
+            try {
+              await navigator.clipboard.writeText(questionText);
+              setNotice("Questions copied. Paste them into an email and answer as many as you like.");
+            } catch {
+              setCopiedQuestions(true);
+            }
+          }, children: "Copy all questions" }),
+          copiedQuestions && /* @__PURE__ */ jsxRuntime.jsxs("label", { children: [
+            "Copy these questions",
+            /* @__PURE__ */ jsxRuntime.jsx("textarea", { readOnly: true, rows: 10, value: questionText, onFocus: (e) => e.currentTarget.select() })
+          ] }),
+          questionsEmail && /* @__PURE__ */ jsxRuntime.jsxs("p", { children: [
+            /* @__PURE__ */ jsxRuntime.jsx("a", { href: questionsEmail, children: "Answer by email" }),
+            " \u2014 opens your email app with the questions ready."
+          ] })
+        ] }),
         panel === "identity" && /* @__PURE__ */ jsxRuntime.jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Introduce yourself", children: [
-          /* @__PURE__ */ jsxRuntime.jsx("h2", { children: identityStep === "code" ? "Check your email" : "Who is helping with the story?" }),
+          /* @__PURE__ */ jsxRuntime.jsx("h2", { children: identityStep === "code" ? "Check your email" : "Continue to help with the story" }),
           errorMessage,
-          /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Your name will accompany your feedback for the newsroom. Your email stays private. No password or account is needed." }),
-          identityStep === "name" ? /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: async (e) => {
+          /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Your name accompanies your feedback. Your email stays private." }),
+          identityStep === "name" && renderSignIn && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+            readerLoading ? /* @__PURE__ */ jsxRuntime.jsx("p", { role: "status", children: "Checking your sign-in\u2026" }) : reader?.email_verified ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+              /* @__PURE__ */ jsxRuntime.jsxs("button", { className: "sm-review-primary", disabled: busy, onClick: () => void connectReader(), children: [
+                "Continue as ",
+                reader.full_name || reader.email
+              ] }),
+              /* @__PURE__ */ jsxRuntime.jsx("p", { children: "Your reader account is ready. No email code is needed." })
+            ] }) : renderSignIn(signInReturn),
+            !useEmailCode && /* @__PURE__ */ jsxRuntime.jsx("button", { className: "sm-review-quiet", onClick: () => setUseEmailCode(true), children: "Use an email code instead" })
+          ] }),
+          identityStep === "name" && useEmailCode && /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: async (e) => {
             e.preventDefault();
             setBusy(true);
             setError("");
@@ -874,8 +1016,10 @@ function StoryReview({
             /* @__PURE__ */ jsxRuntime.jsx("label", { htmlFor: "contributor-email", children: "Your email" }),
             /* @__PURE__ */ jsxRuntime.jsx("input", { id: "contributor-email", type: "email", autoComplete: "email", value: contributorEmail, maxLength: 320, required: true, onChange: (e) => setContributorEmail(e.target.value) }),
             /* @__PURE__ */ jsxRuntime.jsx("p", { children: "We'll email you a code to confirm it's you." }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { children: "No password or account is needed for this option." }),
             /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, children: busy ? "Sending your code\u2026" : "Email me a code" })
-          ] }) : /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: async (e) => {
+          ] }),
+          identityStep === "code" && /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: async (e) => {
             e.preventDefault();
             setBusy(true);
             setError("");
@@ -911,6 +1055,7 @@ function StoryReview({
             }, children: "Send a new code" }),
             /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", disabled: busy, onClick: () => setIdentityStep("name"), children: "Use a different email" })
           ] }),
+          emailAlternative,
           /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel("article"), children: "Just read the story" })
         ] }),
         panel === "feedback" && /* @__PURE__ */ jsxRuntime.jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Family feedback", children: [
@@ -924,7 +1069,7 @@ function StoryReview({
           /* @__PURE__ */ jsxRuntime.jsx("button", { className: "sm-review-primary", disabled: busy, onClick: () => void send({ action: "COMMENT", message: "This draft looks good to me.", target: { kind: "STORY" } }, "Thank you. Your feedback has been sent to the newsroom. The story is still private.", false), children: "Send my feedback" }),
           /* @__PURE__ */ jsxRuntime.jsx("button", { disabled: busy, onClick: () => setPanel("article"), children: "Back to the story" })
         ] }),
-        !["article", "identity", "share", "feedback"].includes(panel) && /* @__PURE__ */ jsxRuntime.jsxs(
+        !["article", "identity", "share", "feedback", "question-list"].includes(panel) && /* @__PURE__ */ jsxRuntime.jsxs(
           "section",
           {
             ref: responseRef,
@@ -1045,7 +1190,11 @@ function StoryReview({
                           onClick: () => setMoreQuestions(true),
                           children: "Answer More Questions"
                         }
-                      )
+                      ),
+                      questionsEmail && /* @__PURE__ */ jsxRuntime.jsxs("p", { children: [
+                        /* @__PURE__ */ jsxRuntime.jsx("a", { href: questionsEmail, children: "Email these answers instead" }),
+                        ". Send them from your email app; your online draft stays saved."
+                      ] })
                     ]
                   }
                 ),

package/dist/story-review.d.cts

@@ -32,13 +32,17 @@ type Revision = {
     document: Document;
     content_html: string;
 };
-declare function StoryReview({ sessionId, publicationName, nameplateUrl, publicationHeader, publicationFooter, }: {
+declare function StoryReview({ sessionId, publicationName, nameplateUrl, publicationHeader, publicationFooter, readerAccountUrl, renderSignIn, feedbackEmail, }: {
     sessionId: string;
     publicationName: string;
     nameplateUrl?: string;
     /** The publication supplies its real shell; private content still loads only through the review capability. */
     publicationHeader?: react__default.ReactNode;
     publicationFooter?: react__default.ReactNode;
+    /** Reuse the publication's existing account and sign-in components. */
+    readerAccountUrl?: string;
+    renderSignIn?: (returnTo: string) => react__default.ReactNode;
+    feedbackEmail?: string;
 }): react__default.JSX.Element;
 /** Paragraph comparisons preserve readable prose and identify title/dek and media changes. */
 declare function ReviewDiff({ before, after, }: {

package/dist/story-review.d.ts

@@ -32,13 +32,17 @@ type Revision = {
     document: Document;
     content_html: string;
 };
-declare function StoryReview({ sessionId, publicationName, nameplateUrl, publicationHeader, publicationFooter, }: {
+declare function StoryReview({ sessionId, publicationName, nameplateUrl, publicationHeader, publicationFooter, readerAccountUrl, renderSignIn, feedbackEmail, }: {
     sessionId: string;
     publicationName: string;
     nameplateUrl?: string;
     /** The publication supplies its real shell; private content still loads only through the review capability. */
     publicationHeader?: react__default.ReactNode;
     publicationFooter?: react__default.ReactNode;
+    /** Reuse the publication's existing account and sign-in components. */
+    readerAccountUrl?: string;
+    renderSignIn?: (returnTo: string) => react__default.ReactNode;
+    feedbackEmail?: string;
 }): react__default.JSX.Element;
 /** Paragraph comparisons preserve readable prose and identify title/dek and media changes. */
 declare function ReviewDiff({ before, after, }: {

package/dist/story-review.js

@@ -156,7 +156,18 @@ function useReviewDrafts(session, revision, initial, request) {
     }
   };
 }
+async function encodePendingPhoto(value) {
+  const { file, ...details } = value;
+  return { ...details, file: { bytes: await file.arrayBuffer(), name: file.name, type: file.type, lastModified: file.lastModified } };
+}
+function decodePendingPhoto(value) {
+  if (!value) return void 0;
+  if (value.file instanceof File) return value;
+  const file = value.file;
+  return { ...value, file: new File([file.bytes], file.name, { type: file.type, lastModified: file.lastModified }) };
+}
 async function stored(key, value) {
+  const encoded = value ? await encodePendingPhoto(value) : value;
   const db = await new Promise((resolve, reject) => {
     const request = indexedDB.open("story-review-pending-media", 1);
     request.onupgradeneeded = () => request.result.createObjectStore("photos");
@@ -167,8 +178,14 @@ async function stored(key, value) {
     return await new Promise((resolve, reject) => {
       const tx = db.transaction("photos", value === void 0 ? "readonly" : "readwrite");
       const store = tx.objectStore("photos");
-      const request = value === void 0 ? store.get(key) : value === null ? store.delete(key) : store.put(value, key);
-      tx.oncomplete = () => resolve(value === void 0 ? request.result : void 0);
+      const request = value === void 0 ? store.get(key) : value === null ? store.delete(key) : store.put(encoded, key);
+      tx.oncomplete = () => {
+        try {
+          resolve(value === void 0 ? decodePendingPhoto(request.result) : void 0);
+        } catch (error) {
+          reject(error);
+        }
+      };
       tx.onerror = () => reject(tx.error);
       tx.onabort = () => reject(tx.error);
     });
@@ -272,6 +289,23 @@ function proseDiff(before, after) {
   emit("same", a.slice(endA).join(""));
   return out;
 }
+
+// src/story-review-email.ts
+function reviewEmailText(review, answers) {
+  const header = `Private story feedback \u2014 not published
+${review.revision.document.title}
+Preview v${review.revision.number} \xB7 Reference ${review.revision.id}
+
+Your name:
+
+`;
+  return header + (answers === void 0 ? "My feedback:\n" : "These questions are optional. Answer only what you would like to share.\n\n" + review.questions.map((q, i) => `${i + 1}. ${q.prompt}
+${answers[q.id] || ""}`).join("\n\n"));
+}
+function reviewEmailLink(email, title, text) {
+  if (!email || !/^[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,}$/i.test(email)) return void 0;
+  return `mailto:${encodeURIComponent(email)}?subject=${encodeURIComponent(`Private story feedback: ${title}`)}&body=${encodeURIComponent(text)}`;
+}
 function EditorialNotices({ editorial }) {
   return editorial ? /* @__PURE__ */ jsxs("aside", { "aria-label": "Editorial notices", children: [
     editorial.content_kind && editorial.content_kind !== "EDITORIAL" && /* @__PURE__ */ jsx("p", { children: human(editorial.content_kind) }),
@@ -291,15 +325,40 @@ function StoryReview({
   publicationName,
   nameplateUrl,
   publicationHeader,
-  publicationFooter
+  publicationFooter,
+  readerAccountUrl,
+  renderSignIn,
+  feedbackEmail
 }) {
   const base = `/api/news/review/${encodeURIComponent(sessionId)}`;
   const [review, setReview] = useState(null), [error, setError] = useState(""), [notice, setNotice] = useState(""), [busy, setBusy] = useState(false), [panel, setPanelState] = useState("article"), [verification, setVerification] = useState(false), [code, setCode] = useState("");
   const [shareUrl, setShareUrl] = useState(""), [canShare, setCanShare] = useState(false);
   const [contributorName, setContributorName] = useState(""), [contributorEmail, setContributorEmail] = useState("");
   const [identityStep, setIdentityStep] = useState("name"), [requestedPanel, setRequestedPanel] = useState("comment");
+  const [reader, setReader] = useState(null);
+  const [readerLoading, setReaderLoading] = useState(!!readerAccountUrl);
+  const [useEmailCode, setUseEmailCode] = useState(!renderSignIn);
+  const [returnPanel, setReturnPanel] = useState("");
+  const resumed = useRef(false);
+  const [copiedQuestions, setCopiedQuestions] = useState(false);
+  useEffect(() => {
+    if (!readerAccountUrl) return;
+    let active = true;
+    void fetch(readerAccountUrl, { credentials: "same-origin", cache: "no-store", signal: AbortSignal.timeout(15e3) }).then(async (response) => {
+      if (response.ok) {
+        const data = await response.json();
+        if (active) setReader(data.user || null);
+      }
+    }).catch(() => {
+    }).finally(() => {
+      if (active) setReaderLoading(false);
+    });
+    return () => {
+      active = false;
+    };
+  }, [readerAccountUrl]);
   function setPanel(next) {
-    if (review?.identity_required && !["article", "history", "identity", "share"].includes(next)) {
+    if (review?.identity_required && !["article", "history", "identity", "share", "question-list"].includes(next)) {
       setRequestedPanel(next);
       setPanelState("identity");
     } else setPanelState(next);
@@ -397,10 +456,41 @@ function StoryReview({
       setReview(data);
     }
   }
+  async function connectReader(target = requestedPanel) {
+    setBusy(true);
+    setError("");
+    try {
+      await request("/account", {});
+      await load();
+      setPanelState(target);
+      setReturnPanel("");
+      const url = new URL(window.location.href);
+      url.searchParams.delete("respond");
+      window.history.replaceState(null, "", url.pathname + url.search);
+    } catch (e) {
+      setError(e.message);
+      setPanelState("identity");
+    } finally {
+      setBusy(false);
+    }
+  }
+  useEffect(() => {
+    if (!returnPanel || !review || !reader?.email_verified || resumed.current) return;
+    resumed.current = true;
+    void connectReader(returnPanel);
+  }, [returnPanel, review, reader]);
   useEffect(() => {
     let active = true;
     void (async () => {
       try {
+        const returnUrl = new URL(window.location.href);
+        if (returnUrl.searchParams.get("signin") === "retry") setError("Sign-in wasn\u2019t completed. Try again or use an email code.");
+        const respond = returnUrl.searchParams.get("respond") || "";
+        if (["feedback", "changes", "questions", "media", "comment", "edits"].includes(respond)) {
+          setRequestedPanel(respond);
+          setReturnPanel(respond);
+          setPanelState("identity");
+        }
         const token = new URL(window.location.href).searchParams.get("key") || (/^[a-f0-9]{64}$/.test(window.location.hash.slice(1)) ? window.location.hash.slice(1) : void 0);
         let exchange = {};
         try {
@@ -412,7 +502,9 @@ function StoryReview({
         if (address) {
           const canonical = new URL(address, window.location.origin);
           if (canonical.origin === window.location.origin) {
-            window.history.replaceState(null, "", canonical.pathname + canonical.search);
+            const address2 = new URL(canonical);
+            if (respond) address2.searchParams.set("respond", respond);
+            window.history.replaceState(null, "", address2.pathname + address2.search);
             if (active) {
               setShareUrl(canonical.href);
               setCanShare(exchange.can_share === true);
@@ -577,6 +669,15 @@ function StoryReview({
     (r) => r.id === (compareTo || review?.revision.id)
   );
   const errorMessage = error ? /* @__PURE__ */ jsx("p", { ref: errorRef, tabIndex: -1, role: "alert", className: "sm-review-alert", children: error }) : null;
+  const emailLink = review ? reviewEmailLink(feedbackEmail, review.revision.document.title, reviewEmailText(review)) : void 0;
+  const questionText = review ? reviewEmailText(review, answers) : "";
+  const questionsEmail = review ? reviewEmailLink(feedbackEmail, review.revision.document.title, questionText) : void 0;
+  const signInReturn = shareUrl ? new URL(shareUrl).pathname + new URL(shareUrl).search + `&respond=${encodeURIComponent(requestedPanel)}` : "";
+  const emailAlternative = emailLink && /* @__PURE__ */ jsxs("p", { className: "sm-review-email-alternative", children: [
+    "Prefer email? ",
+    /* @__PURE__ */ jsx("a", { href: emailLink, children: "Email the newsroom" }),
+    ". Your email app will open; send your message there."
+  ] });
   return /* @__PURE__ */ jsxs("div", { className: `sm-review-frame${publicationHeader ? " sm-review-publication-frame" : ""}`, children: [
     /* @__PURE__ */ jsx("div", { className: "sm-review-banner-wrap", children: /* @__PURE__ */ jsxs("div", { className: "sm-review-private", children: [
       /* @__PURE__ */ jsx("strong", { children: review?.published ? "Private review" : "Private preview \xB7 Not published" }),
@@ -777,7 +878,7 @@ function StoryReview({
             {
               onClick: () => {
                 setMoreQuestions(false);
-                setPanel("questions");
+                setPanel(review.identity_required ? "question-list" : "questions");
               },
               children: "Tell Us More"
             }
@@ -790,7 +891,8 @@ function StoryReview({
               children: "Prefer Not to Publish"
             }
           ),
-          can("COMMENT") && /* @__PURE__ */ jsx("button", { className: "sm-review-quiet", onClick: () => setPanel("comment"), children: "Leave a Comment" })
+          can("COMMENT") && /* @__PURE__ */ jsx("button", { className: "sm-review-quiet", onClick: () => setPanel("comment"), children: "Leave a Comment" }),
+          emailAlternative
         ] }),
         /* @__PURE__ */ jsxs(
           "nav",
@@ -813,7 +915,7 @@ function StoryReview({
               can("UPLOAD_MEDIA") && /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => openMedia(), children: celebration ? "Add Photos" : "Add photos" }),
               !celebration && /* @__PURE__ */ jsxs(Fragment, { children: [
                 can("PROPOSE_EDITS") && /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel("edits"), children: "Suggest edits" }),
-                can("ANSWER_QUESTIONS") && review.questions.length > 0 && /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel("questions"), children: "Answer questions" }),
+                can("ANSWER_QUESTIONS") && review.questions.length > 0 && /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel(review.identity_required ? "question-list" : "questions"), children: "Answer questions" }),
                 can("COMMENT") && /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel("comment"), children: "Leave a comment" })
               ] })
             ]
@@ -835,7 +937,10 @@ function StoryReview({
         panel === "share" && /* @__PURE__ */ jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Share private preview", children: [
           /* @__PURE__ */ jsx("h2", { children: "Share with your family" }),
           errorMessage,
-          /* @__PURE__ */ jsx("p", { children: "Anyone with this link can read the private preview. To send feedback or photos, they will enter their own name and verify their email. No account is needed." }),
+          /* @__PURE__ */ jsxs("p", { children: [
+            "Anyone with this link can read the private preview. ",
+            renderSignIn ? "To contribute, they can continue with Google or use an email code." : "To send feedback or photos, they will enter their own name and verify their email. No account is needed."
+          ] }),
           /* @__PURE__ */ jsx("label", { htmlFor: "review-share-url", children: "Private preview link" }),
           /* @__PURE__ */ jsx("input", { id: "review-share-url", readOnly: true, value: shareUrl, onFocus: (e) => e.currentTarget.select() }),
           /* @__PURE__ */ jsx("button", { onClick: async () => {
@@ -848,11 +953,48 @@ function StoryReview({
           }, children: "Copy private link" }),
           /* @__PURE__ */ jsx("button", { onClick: () => setPanel("article"), children: "Back to the story" })
         ] }),
+        panel === "question-list" && /* @__PURE__ */ jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Optional story questions", children: [
+          /* @__PURE__ */ jsxs("div", { className: "sm-review-form-heading", children: [
+            /* @__PURE__ */ jsx("h2", { children: "Tell us a little more" }),
+            /* @__PURE__ */ jsx("button", { onClick: () => setPanel("article"), children: "Close" })
+          ] }),
+          /* @__PURE__ */ jsx("p", { children: "Completely optional. Read the questions first, then answer online or copy them into an email. Even one answer helps." }),
+          /* @__PURE__ */ jsx("ol", { className: "sm-review-question-list", children: review.questions.filter((q, i) => moreQuestions || i < 5 || q.required).map((q) => /* @__PURE__ */ jsx("li", { children: q.prompt }, q.id)) }),
+          !moreQuestions && review.questions.length > 5 && /* @__PURE__ */ jsx("button", { onClick: () => setMoreQuestions(true), children: "See all questions" }),
+          /* @__PURE__ */ jsx("button", { className: "sm-review-primary", onClick: () => setPanel("questions"), children: "Answer online" }),
+          /* @__PURE__ */ jsx("p", { children: "Sign in to save your answers as you go. You can return whenever it suits you." }),
+          /* @__PURE__ */ jsx("button", { onClick: async () => {
+            try {
+              await navigator.clipboard.writeText(questionText);
+              setNotice("Questions copied. Paste them into an email and answer as many as you like.");
+            } catch {
+              setCopiedQuestions(true);
+            }
+          }, children: "Copy all questions" }),
+          copiedQuestions && /* @__PURE__ */ jsxs("label", { children: [
+            "Copy these questions",
+            /* @__PURE__ */ jsx("textarea", { readOnly: true, rows: 10, value: questionText, onFocus: (e) => e.currentTarget.select() })
+          ] }),
+          questionsEmail && /* @__PURE__ */ jsxs("p", { children: [
+            /* @__PURE__ */ jsx("a", { href: questionsEmail, children: "Answer by email" }),
+            " \u2014 opens your email app with the questions ready."
+          ] })
+        ] }),
         panel === "identity" && /* @__PURE__ */ jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Introduce yourself", children: [
-          /* @__PURE__ */ jsx("h2", { children: identityStep === "code" ? "Check your email" : "Who is helping with the story?" }),
+          /* @__PURE__ */ jsx("h2", { children: identityStep === "code" ? "Check your email" : "Continue to help with the story" }),
           errorMessage,
-          /* @__PURE__ */ jsx("p", { children: "Your name will accompany your feedback for the newsroom. Your email stays private. No password or account is needed." }),
-          identityStep === "name" ? /* @__PURE__ */ jsxs("form", { onSubmit: async (e) => {
+          /* @__PURE__ */ jsx("p", { children: "Your name accompanies your feedback. Your email stays private." }),
+          identityStep === "name" && renderSignIn && /* @__PURE__ */ jsxs(Fragment, { children: [
+            readerLoading ? /* @__PURE__ */ jsx("p", { role: "status", children: "Checking your sign-in\u2026" }) : reader?.email_verified ? /* @__PURE__ */ jsxs(Fragment, { children: [
+              /* @__PURE__ */ jsxs("button", { className: "sm-review-primary", disabled: busy, onClick: () => void connectReader(), children: [
+                "Continue as ",
+                reader.full_name || reader.email
+              ] }),
+              /* @__PURE__ */ jsx("p", { children: "Your reader account is ready. No email code is needed." })
+            ] }) : renderSignIn(signInReturn),
+            !useEmailCode && /* @__PURE__ */ jsx("button", { className: "sm-review-quiet", onClick: () => setUseEmailCode(true), children: "Use an email code instead" })
+          ] }),
+          identityStep === "name" && useEmailCode && /* @__PURE__ */ jsxs("form", { onSubmit: async (e) => {
             e.preventDefault();
             setBusy(true);
             setError("");
@@ -872,8 +1014,10 @@ function StoryReview({
             /* @__PURE__ */ jsx("label", { htmlFor: "contributor-email", children: "Your email" }),
             /* @__PURE__ */ jsx("input", { id: "contributor-email", type: "email", autoComplete: "email", value: contributorEmail, maxLength: 320, required: true, onChange: (e) => setContributorEmail(e.target.value) }),
             /* @__PURE__ */ jsx("p", { children: "We'll email you a code to confirm it's you." }),
+            /* @__PURE__ */ jsx("p", { children: "No password or account is needed for this option." }),
             /* @__PURE__ */ jsx("button", { disabled: busy, children: busy ? "Sending your code\u2026" : "Email me a code" })
-          ] }) : /* @__PURE__ */ jsxs("form", { onSubmit: async (e) => {
+          ] }),
+          identityStep === "code" && /* @__PURE__ */ jsxs("form", { onSubmit: async (e) => {
             e.preventDefault();
             setBusy(true);
             setError("");
@@ -909,6 +1053,7 @@ function StoryReview({
             }, children: "Send a new code" }),
             /* @__PURE__ */ jsx("button", { type: "button", disabled: busy, onClick: () => setIdentityStep("name"), children: "Use a different email" })
           ] }),
+          emailAlternative,
           /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel("article"), children: "Just read the story" })
         ] }),
         panel === "feedback" && /* @__PURE__ */ jsxs("section", { ref: responseRef, tabIndex: -1, className: "sm-review-form", "aria-label": "Family feedback", children: [
@@ -922,7 +1067,7 @@ function StoryReview({
           /* @__PURE__ */ jsx("button", { className: "sm-review-primary", disabled: busy, onClick: () => void send({ action: "COMMENT", message: "This draft looks good to me.", target: { kind: "STORY" } }, "Thank you. Your feedback has been sent to the newsroom. The story is still private.", false), children: "Send my feedback" }),
           /* @__PURE__ */ jsx("button", { disabled: busy, onClick: () => setPanel("article"), children: "Back to the story" })
         ] }),
-        !["article", "identity", "share", "feedback"].includes(panel) && /* @__PURE__ */ jsxs(
+        !["article", "identity", "share", "feedback", "question-list"].includes(panel) && /* @__PURE__ */ jsxs(
           "section",
           {
             ref: responseRef,
@@ -1043,7 +1188,11 @@ function StoryReview({
                           onClick: () => setMoreQuestions(true),
                           children: "Answer More Questions"
                         }
-                      )
+                      ),
+                      questionsEmail && /* @__PURE__ */ jsxs("p", { children: [
+                        /* @__PURE__ */ jsx("a", { href: questionsEmail, children: "Email these answers instead" }),
+                        ". Send them from your email app; your online draft stays saved."
+                      ] })
                     ]
                   }
                 ),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/news-publication",
-  "version": "0.0.33",
+  "version": "0.0.35",
   "description": "Shared server framework for ScaleMule local news publications. Walnut Creek Times is the broadsheet default; each paper supplies its own identity and feature flags.",
   "type": "module",
   "main": "./dist/index.cjs",

package/story-review.css

@@ -630,3 +630,8 @@
 .sm-review-sharing button, .sm-review-identity-status button { min-height:48px; font:inherit; padding:10px 16px; cursor:pointer; }
 .sm-review-form input#review-share-url { width:100%; font-size:16px; min-width:0; }
 .sm-review-form label[for^="contributor-"] { display:block; margin-top:16px; }
+
+.sm-review-question-list { padding-left: 1.5rem; margin: 1.5rem 0; }
+.sm-review-question-list li { padding-left: .4rem; margin: 0 0 1.2rem; line-height: 1.6; }
+.sm-review-email-alternative { border-top: 1px solid var(--sm-review-line, #d7d7d7); padding-top: 1rem; margin-top: 1.5rem; line-height: 1.6; }
+.sm-review-email-alternative a { font-weight: 700; text-decoration: underline; text-underline-offset: .2em; }