@scalemule/news-publication 0.0.35 → 0.0.36

package/README.md

@@ -128,3 +128,28 @@ Optional questions can be browsed and copied before identity verification.
 reference and optional answers, never the invitation credential. Configure a
 monitored mailbox; received email must be recorded by the newsroom. Online
 answers retain their existing autosave and explicit-send behavior.
+
+## Community Maps
+
+The `community-maps-server` subpath exports `createPublicationCommunityMapsHandler`.
+Supply a resolver that verifies the publication host using your existing site lookup,
+then returns its server API key, gateway origin, canonical public origin, and trusted
+reader context. Forward only the public allowlisted catch-all route. The handler
+checks POST origins, bounds uploads, signs an HttpOnly reader cookie, and applies
+no-store responses. It never proxies editorial routes or accepts a caller-selected
+application ID. Use a Node server runtime; this module imports node:crypto.
+
+The `community-maps-view` subpath exports `PublicationCommunityMapPage` and
+`CommunityMapArticleEmbeds`. Supply the publication chrome and import the React map CSS.
+The optional React peer is required only when consuming these views. Use the map
+worker asset CLI from `@scalemule/react` before building the site.
+
+Article integration uses the existing Blog metadata extension:
+
+```json
+{"community_maps":[{"collection_slug":"halloween-2026","mode":"map"}]}
+```
+
+Other modes are `cards` and `features`; optional `area_id` / `feature_ids` select live
+records. No copied feature snapshot is embedded in a story, so withdrawal takes effect
+on the next read. Publishers should apply their caption policy to public media copy.

package/dist/chunk-IMYBSG7J.js

@@ -0,0 +1,23 @@
+// src/community-maps.ts
+function communityMapEmbeds(metadata) {
+  if (!metadata || typeof metadata !== "object") return [];
+  const value = metadata.community_maps;
+  if (!Array.isArray(value)) return [];
+  return value.slice(0, 5).flatMap((entry) => {
+    if (!entry || typeof entry !== "object" || typeof entry.collection_slug !== "string" || !/^[a-z0-9-]{1,191}$/.test(entry.collection_slug) || !["map", "cards", "features"].includes(entry.mode))
+      return [];
+    const ids = Array.isArray(entry.feature_ids) ? entry.feature_ids.filter(
+      (id) => typeof id === "string" && /^[0-9a-f-]{36}$/i.test(id)
+    ).slice(0, 20) : void 0;
+    return [
+      {
+        collection_slug: entry.collection_slug,
+        mode: entry.mode,
+        feature_ids: ids,
+        area_id: typeof entry.area_id === "string" && /^[0-9a-f-]{36}$/i.test(entry.area_id) ? entry.area_id : void 0
+      }
+    ];
+  });
+}
+
+export { communityMapEmbeds };

package/dist/community-maps-DKcYhQYN.d.cts

@@ -0,0 +1,10 @@
+interface CommunityMapArticleEmbed {
+    collection_slug: string;
+    feature_ids?: string[];
+    area_id?: string;
+    mode: "map" | "cards" | "features";
+}
+/** Article metadata extension: references only; records remain in Community Maps. */
+declare function communityMapEmbeds(metadata: unknown): CommunityMapArticleEmbed[];
+
+export { type CommunityMapArticleEmbed as C, communityMapEmbeds as c };

package/dist/community-maps-DKcYhQYN.d.ts

@@ -0,0 +1,10 @@
+interface CommunityMapArticleEmbed {
+    collection_slug: string;
+    feature_ids?: string[];
+    area_id?: string;
+    mode: "map" | "cards" | "features";
+}
+/** Article metadata extension: references only; records remain in Community Maps. */
+declare function communityMapEmbeds(metadata: unknown): CommunityMapArticleEmbed[];
+
+export { type CommunityMapArticleEmbed as C, communityMapEmbeds as c };

package/dist/community-maps-server.cjs

@@ -0,0 +1,250 @@
+'use strict';
+
+var crypto = require('crypto');
+var sdk = require('@scalemule/sdk');
+
+// src/community-maps-server.ts
+var ROOT = "/v1/knowledge/community-maps";
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var COOKIE = "sm_community_reader";
+var json = (data, status = 200) => Response.json(data, {
+  status,
+  headers: {
+    "cache-control": "private, no-store",
+    "x-content-type-options": "nosniff"
+  }
+});
+function identity(request, key, origin) {
+  const sign = (id2) => crypto.createHmac("sha256", key).update("community-maps-reader:" + id2).digest("base64url");
+  const raw = request.headers.get("cookie")?.split(";").map((v) => v.trim()).find((v) => v.startsWith(COOKIE + "="))?.slice(COOKIE.length + 1);
+  if (raw) {
+    const [id2, signature] = raw.split(".");
+    if (id2 && signature && UUID.test(id2) && /^[A-Za-z0-9_-]{43}$/.test(signature)) {
+      const expected = sign(id2);
+      if (expected.length === signature.length && crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected)))
+        return { id: id2, cookie: null };
+    }
+  }
+  const id = crypto.randomUUID();
+  return {
+    id,
+    cookie: `${COOKIE}=${id}.${sign(id)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000${new URL(origin).protocol === "https:" ? "; Secure" : ""}`
+  };
+}
+async function boundedBody(request, max) {
+  if (Number(request.headers.get("content-length") || 0) > max)
+    throw new ProxyProblem(413, "The submission is too large.");
+  const reader = request.body?.getReader();
+  if (!reader) return new Uint8Array();
+  const chunks = [];
+  let length = 0;
+  try {
+    while (true) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      length += value.length;
+      if (length > max) {
+        await reader.cancel();
+        throw new ProxyProblem(413, "The submission is too large.");
+      }
+      chunks.push(value);
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  return Buffer.concat(chunks);
+}
+var ProxyProblem = class extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+  status;
+};
+function createPublicationCommunityMapsHandler(options) {
+  return async (request, path) => {
+    try {
+      if (path[0] !== "collections" || !path[1] || !/^[a-z0-9-]{1,191}$/.test(path[1]))
+        return json({ error: { message: "Guide not found" } }, 404);
+      const slug = path[1];
+      const rest = path.slice(2);
+      const method = request.method;
+      const read = method === "GET" && (rest.length === 0 || rest[0] === "features" && (rest.length === 1 || rest.length === 2 && UUID.test(rest[1])) || rest[0] === "media" && rest.length === 2 && UUID.test(rest[1]));
+      const upload = method === "POST" && rest.length === 3 && rest[0] === "submissions" && UUID.test(rest[1]) && rest[2] === "media";
+      const submission = method === "POST" && rest.length === 1 && rest[0] === "submissions";
+      const action = method === "POST" && rest.length === 3 && rest[0] === "features" && UUID.test(rest[1]) && ["reactions", "reports"].includes(rest[2]);
+      if (!read && !upload && !submission && !action)
+        return json({ error: { message: "Route not found" } }, 404);
+      const scope = await options.resolve(request);
+      if (method !== "GET" && request.headers.get("origin") !== new URL(scope.origin).origin)
+        return json(
+          { error: { message: "Submit from this publication\u2019s website." } },
+          403
+        );
+      const gateway = new URL(scope.gatewayUrl);
+      if (gateway.protocol !== "https:" && !(gateway.protocol === "http:" && ["127.0.0.1", "localhost"].includes(gateway.hostname)))
+        throw new ProxyProblem(503, "The guide is unavailable.");
+      if (!scope.apiKey)
+        throw new ProxyProblem(503, "The guide is unavailable.");
+      const reader = identity(request, scope.apiKey, scope.origin);
+      const clientContext = { ...scope.clientContext, anonymousId: reader.id };
+      const sdk$1 = new sdk.ScaleMule({
+        apiKey: scope.apiKey,
+        baseUrl: scope.gatewayUrl
+      });
+      const callOptions = {
+        clientContext,
+        headers: scope.accessToken ? { authorization: `Bearer ${scope.accessToken}` } : {}
+      };
+      let response;
+      if (read && rest[0] === "media") {
+        const upstream = await fetch(
+          `${gateway.origin}${ROOT}/collections/${slug}/media/${rest[1]}`,
+          {
+            headers: {
+              ...sdk.buildClientContextHeaders(clientContext),
+              "x-api-key": scope.apiKey,
+              ...callOptions.headers
+            },
+            cache: "no-store",
+            redirect: "error",
+            signal: AbortSignal.timeout(3e4)
+          }
+        );
+        response = upstream.ok ? new Response(upstream.body, {
+          headers: {
+            "content-type": "image/png",
+            "cache-control": "private, no-store",
+            "x-content-type-options": "nosniff"
+          }
+        }) : json(
+          { error: { message: "Photo unavailable" } },
+          upstream.status >= 500 ? 503 : upstream.status
+        );
+      } else {
+        let result;
+        if (read) {
+          if (!rest.length)
+            result = await sdk$1.communityMaps.getCollection(slug, callOptions);
+          else if (rest.length === 2)
+            result = await sdk$1.communityMaps.getFeature(
+              slug,
+              rest[1],
+              callOptions
+            );
+          else {
+            const query = {};
+            const params = new URL(request.url).searchParams;
+            for (const key of [
+              "after",
+              "area_id",
+              "category",
+              "geometry_type",
+              "active_at",
+              "bbox"
+            ]) {
+              const value = params.get(key);
+              if (value) query[key] = value;
+            }
+            const limit = params.get("limit");
+            if (limit)
+              query.limit = Math.min(200, Math.max(1, Number(limit) || 50));
+            const filters = { ...query };
+            for (const key of ["featured", "verified"]) {
+              const value = params.get(key);
+              if (value === "true" || value === "false")
+                filters[key] = value === "true";
+            }
+            result = await sdk$1.communityMaps.listFeatures(
+              slug,
+              filters,
+              callOptions
+            );
+          }
+        } else if (upload) {
+          const contentType = request.headers.get("content-type") || "";
+          if (!contentType.startsWith("multipart/form-data;"))
+            throw new ProxyProblem(415, "Choose a photograph to upload.");
+          const bytes = await boundedBody(request, 9 * 1024 * 1024);
+          const form = await new Response(bytes, {
+            headers: { "content-type": contentType }
+          }).formData();
+          const file = form.get("file");
+          if (!(file instanceof Blob))
+            throw new ProxyProblem(400, "Photo is required.");
+          result = await sdk$1.communityMaps.uploadPhoto(
+            slug,
+            rest[1],
+            file,
+            {
+              caption: String(form.get("caption") || ""),
+              attribution: String(form.get("attribution") || ""),
+              rights_confirmed: form.get("rights_confirmed") === "true"
+            },
+            callOptions
+          );
+        } else {
+          if (!request.headers.get("content-type")?.startsWith("application/json"))
+            throw new ProxyProblem(415, "Use the community submission form.");
+          let body;
+          try {
+            body = JSON.parse(
+              new TextDecoder().decode(await boundedBody(request, 65536))
+            );
+          } catch (e) {
+            if (e instanceof ProxyProblem) throw e;
+            throw new ProxyProblem(400, "Invalid submission.");
+          }
+          if (!body || typeof body !== "object" || Array.isArray(body))
+            throw new ProxyProblem(400, "Invalid submission.");
+          if (submission)
+            result = await sdk$1.communityMaps.createSubmission(
+              slug,
+              body,
+              callOptions
+            );
+          else if (rest[2] === "reactions")
+            result = await sdk$1.communityMaps.react(
+              slug,
+              rest[1],
+              body.reaction,
+              body.active !== false,
+              callOptions
+            );
+          else
+            result = await sdk$1.communityMaps.report(
+              slug,
+              rest[1],
+              body,
+              callOptions
+            );
+        }
+        if (result.error) {
+          const error = result.error;
+          const status = typeof error.status === "number" ? error.status : 400;
+          response = json(
+            {
+              error: {
+                message: status >= 500 ? "The guide is temporarily unavailable. Please try again." : error.message
+              }
+            },
+            status
+          );
+        } else response = json({ data: result.data });
+      }
+      if (reader.cookie) response.headers.set("set-cookie", reader.cookie);
+      return response;
+    } catch (error) {
+      return json(
+        {
+          error: {
+            message: error instanceof ProxyProblem ? error.message : "The guide is temporarily unavailable. Please try again."
+          }
+        },
+        error instanceof ProxyProblem ? error.status : 503
+      );
+    }
+  };
+}
+
+exports.createPublicationCommunityMapsHandler = createPublicationCommunityMapsHandler;

package/dist/community-maps-server.d.cts

@@ -0,0 +1,16 @@
+import { ClientContext } from '@scalemule/sdk';
+
+interface PublicationCommunityMapScope {
+    apiKey: string;
+    gatewayUrl: string;
+    origin: string;
+    clientContext: ClientContext;
+    accessToken?: string;
+}
+interface PublicationCommunityMapServerOptions {
+    resolve: (request: Request) => Promise<PublicationCommunityMapScope>;
+}
+/** Only public collection routes are accepted. The URL never selects tenant credentials. */
+declare function createPublicationCommunityMapsHandler(options: PublicationCommunityMapServerOptions): (request: Request, path: string[]) => Promise<Response>;
+
+export { type PublicationCommunityMapScope, type PublicationCommunityMapServerOptions, createPublicationCommunityMapsHandler };

package/dist/community-maps-server.d.ts

@@ -0,0 +1,16 @@
+import { ClientContext } from '@scalemule/sdk';
+
+interface PublicationCommunityMapScope {
+    apiKey: string;
+    gatewayUrl: string;
+    origin: string;
+    clientContext: ClientContext;
+    accessToken?: string;
+}
+interface PublicationCommunityMapServerOptions {
+    resolve: (request: Request) => Promise<PublicationCommunityMapScope>;
+}
+/** Only public collection routes are accepted. The URL never selects tenant credentials. */
+declare function createPublicationCommunityMapsHandler(options: PublicationCommunityMapServerOptions): (request: Request, path: string[]) => Promise<Response>;
+
+export { type PublicationCommunityMapScope, type PublicationCommunityMapServerOptions, createPublicationCommunityMapsHandler };

package/dist/community-maps-server.js

@@ -0,0 +1,248 @@
+import { timingSafeEqual, randomUUID, createHmac } from 'crypto';
+import { ScaleMule, buildClientContextHeaders } from '@scalemule/sdk';
+
+// src/community-maps-server.ts
+var ROOT = "/v1/knowledge/community-maps";
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var COOKIE = "sm_community_reader";
+var json = (data, status = 200) => Response.json(data, {
+  status,
+  headers: {
+    "cache-control": "private, no-store",
+    "x-content-type-options": "nosniff"
+  }
+});
+function identity(request, key, origin) {
+  const sign = (id2) => createHmac("sha256", key).update("community-maps-reader:" + id2).digest("base64url");
+  const raw = request.headers.get("cookie")?.split(";").map((v) => v.trim()).find((v) => v.startsWith(COOKIE + "="))?.slice(COOKIE.length + 1);
+  if (raw) {
+    const [id2, signature] = raw.split(".");
+    if (id2 && signature && UUID.test(id2) && /^[A-Za-z0-9_-]{43}$/.test(signature)) {
+      const expected = sign(id2);
+      if (expected.length === signature.length && timingSafeEqual(Buffer.from(signature), Buffer.from(expected)))
+        return { id: id2, cookie: null };
+    }
+  }
+  const id = randomUUID();
+  return {
+    id,
+    cookie: `${COOKIE}=${id}.${sign(id)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000${new URL(origin).protocol === "https:" ? "; Secure" : ""}`
+  };
+}
+async function boundedBody(request, max) {
+  if (Number(request.headers.get("content-length") || 0) > max)
+    throw new ProxyProblem(413, "The submission is too large.");
+  const reader = request.body?.getReader();
+  if (!reader) return new Uint8Array();
+  const chunks = [];
+  let length = 0;
+  try {
+    while (true) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      length += value.length;
+      if (length > max) {
+        await reader.cancel();
+        throw new ProxyProblem(413, "The submission is too large.");
+      }
+      chunks.push(value);
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  return Buffer.concat(chunks);
+}
+var ProxyProblem = class extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+  status;
+};
+function createPublicationCommunityMapsHandler(options) {
+  return async (request, path) => {
+    try {
+      if (path[0] !== "collections" || !path[1] || !/^[a-z0-9-]{1,191}$/.test(path[1]))
+        return json({ error: { message: "Guide not found" } }, 404);
+      const slug = path[1];
+      const rest = path.slice(2);
+      const method = request.method;
+      const read = method === "GET" && (rest.length === 0 || rest[0] === "features" && (rest.length === 1 || rest.length === 2 && UUID.test(rest[1])) || rest[0] === "media" && rest.length === 2 && UUID.test(rest[1]));
+      const upload = method === "POST" && rest.length === 3 && rest[0] === "submissions" && UUID.test(rest[1]) && rest[2] === "media";
+      const submission = method === "POST" && rest.length === 1 && rest[0] === "submissions";
+      const action = method === "POST" && rest.length === 3 && rest[0] === "features" && UUID.test(rest[1]) && ["reactions", "reports"].includes(rest[2]);
+      if (!read && !upload && !submission && !action)
+        return json({ error: { message: "Route not found" } }, 404);
+      const scope = await options.resolve(request);
+      if (method !== "GET" && request.headers.get("origin") !== new URL(scope.origin).origin)
+        return json(
+          { error: { message: "Submit from this publication\u2019s website." } },
+          403
+        );
+      const gateway = new URL(scope.gatewayUrl);
+      if (gateway.protocol !== "https:" && !(gateway.protocol === "http:" && ["127.0.0.1", "localhost"].includes(gateway.hostname)))
+        throw new ProxyProblem(503, "The guide is unavailable.");
+      if (!scope.apiKey)
+        throw new ProxyProblem(503, "The guide is unavailable.");
+      const reader = identity(request, scope.apiKey, scope.origin);
+      const clientContext = { ...scope.clientContext, anonymousId: reader.id };
+      const sdk = new ScaleMule({
+        apiKey: scope.apiKey,
+        baseUrl: scope.gatewayUrl
+      });
+      const callOptions = {
+        clientContext,
+        headers: scope.accessToken ? { authorization: `Bearer ${scope.accessToken}` } : {}
+      };
+      let response;
+      if (read && rest[0] === "media") {
+        const upstream = await fetch(
+          `${gateway.origin}${ROOT}/collections/${slug}/media/${rest[1]}`,
+          {
+            headers: {
+              ...buildClientContextHeaders(clientContext),
+              "x-api-key": scope.apiKey,
+              ...callOptions.headers
+            },
+            cache: "no-store",
+            redirect: "error",
+            signal: AbortSignal.timeout(3e4)
+          }
+        );
+        response = upstream.ok ? new Response(upstream.body, {
+          headers: {
+            "content-type": "image/png",
+            "cache-control": "private, no-store",
+            "x-content-type-options": "nosniff"
+          }
+        }) : json(
+          { error: { message: "Photo unavailable" } },
+          upstream.status >= 500 ? 503 : upstream.status
+        );
+      } else {
+        let result;
+        if (read) {
+          if (!rest.length)
+            result = await sdk.communityMaps.getCollection(slug, callOptions);
+          else if (rest.length === 2)
+            result = await sdk.communityMaps.getFeature(
+              slug,
+              rest[1],
+              callOptions
+            );
+          else {
+            const query = {};
+            const params = new URL(request.url).searchParams;
+            for (const key of [
+              "after",
+              "area_id",
+              "category",
+              "geometry_type",
+              "active_at",
+              "bbox"
+            ]) {
+              const value = params.get(key);
+              if (value) query[key] = value;
+            }
+            const limit = params.get("limit");
+            if (limit)
+              query.limit = Math.min(200, Math.max(1, Number(limit) || 50));
+            const filters = { ...query };
+            for (const key of ["featured", "verified"]) {
+              const value = params.get(key);
+              if (value === "true" || value === "false")
+                filters[key] = value === "true";
+            }
+            result = await sdk.communityMaps.listFeatures(
+              slug,
+              filters,
+              callOptions
+            );
+          }
+        } else if (upload) {
+          const contentType = request.headers.get("content-type") || "";
+          if (!contentType.startsWith("multipart/form-data;"))
+            throw new ProxyProblem(415, "Choose a photograph to upload.");
+          const bytes = await boundedBody(request, 9 * 1024 * 1024);
+          const form = await new Response(bytes, {
+            headers: { "content-type": contentType }
+          }).formData();
+          const file = form.get("file");
+          if (!(file instanceof Blob))
+            throw new ProxyProblem(400, "Photo is required.");
+          result = await sdk.communityMaps.uploadPhoto(
+            slug,
+            rest[1],
+            file,
+            {
+              caption: String(form.get("caption") || ""),
+              attribution: String(form.get("attribution") || ""),
+              rights_confirmed: form.get("rights_confirmed") === "true"
+            },
+            callOptions
+          );
+        } else {
+          if (!request.headers.get("content-type")?.startsWith("application/json"))
+            throw new ProxyProblem(415, "Use the community submission form.");
+          let body;
+          try {
+            body = JSON.parse(
+              new TextDecoder().decode(await boundedBody(request, 65536))
+            );
+          } catch (e) {
+            if (e instanceof ProxyProblem) throw e;
+            throw new ProxyProblem(400, "Invalid submission.");
+          }
+          if (!body || typeof body !== "object" || Array.isArray(body))
+            throw new ProxyProblem(400, "Invalid submission.");
+          if (submission)
+            result = await sdk.communityMaps.createSubmission(
+              slug,
+              body,
+              callOptions
+            );
+          else if (rest[2] === "reactions")
+            result = await sdk.communityMaps.react(
+              slug,
+              rest[1],
+              body.reaction,
+              body.active !== false,
+              callOptions
+            );
+          else
+            result = await sdk.communityMaps.report(
+              slug,
+              rest[1],
+              body,
+              callOptions
+            );
+        }
+        if (result.error) {
+          const error = result.error;
+          const status = typeof error.status === "number" ? error.status : 400;
+          response = json(
+            {
+              error: {
+                message: status >= 500 ? "The guide is temporarily unavailable. Please try again." : error.message
+              }
+            },
+            status
+          );
+        } else response = json({ data: result.data });
+      }
+      if (reader.cookie) response.headers.set("set-cookie", reader.cookie);
+      return response;
+    } catch (error) {
+      return json(
+        {
+          error: {
+            message: error instanceof ProxyProblem ? error.message : "The guide is temporarily unavailable. Please try again."
+          }
+        },
+        error instanceof ProxyProblem ? error.status : 503
+      );
+    }
+  };
+}
+
+export { createPublicationCommunityMapsHandler };

package/dist/community-maps-view.cjs

@@ -0,0 +1,155 @@
+"use client";
+'use strict';
+
+var react = require('react');
+var communityMaps = require('@scalemule/react/community-maps');
+var jsxRuntime = require('react/jsx-runtime');
+
+// src/community-maps.ts
+function communityMapEmbeds(metadata) {
+  if (!metadata || typeof metadata !== "object") return [];
+  const value = metadata.community_maps;
+  if (!Array.isArray(value)) return [];
+  return value.slice(0, 5).flatMap((entry) => {
+    if (!entry || typeof entry !== "object" || typeof entry.collection_slug !== "string" || !/^[a-z0-9-]{1,191}$/.test(entry.collection_slug) || !["map", "cards", "features"].includes(entry.mode))
+      return [];
+    const ids = Array.isArray(entry.feature_ids) ? entry.feature_ids.filter(
+      (id) => typeof id === "string" && /^[0-9a-f-]{36}$/i.test(id)
+    ).slice(0, 20) : void 0;
+    return [
+      {
+        collection_slug: entry.collection_slug,
+        mode: entry.mode,
+        feature_ids: ids,
+        area_id: typeof entry.area_id === "string" && /^[0-9a-f-]{36}$/i.test(entry.area_id) ? entry.area_id : void 0
+      }
+    ];
+  });
+}
+function PublicationCommunityMapPage({
+  collection,
+  feature,
+  mode = "guide",
+  areaId,
+  correctionFor,
+  basePath,
+  apiPath
+}) {
+  const client = react.useMemo(
+    () => communityMaps.createCommunityMapsBrowserClient(apiPath),
+    [apiPath]
+  );
+  const featureHref = (f) => `${basePath}/places/${f.id}`;
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "smcm", children: [
+    mode !== "guide" && /* @__PURE__ */ jsxRuntime.jsx("p", { children: /* @__PURE__ */ jsxRuntime.jsxs("a", { href: basePath, children: [
+      "\u2190 ",
+      collection.config.title
+    ] }) }),
+    mode === "submit" ? /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunitySubmissionForm,
+      {
+        client,
+        collection,
+        initialAreaId: areaId,
+        correctionFor
+      }
+    ) : mode === "feature" && feature ? /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunityFeatureDetail,
+      {
+        client,
+        collection,
+        feature,
+        correctionHref: `${basePath}/submit?correction=${feature.id}&area=${feature.area_id}`
+      }
+    ) : /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunityGuide,
+      {
+        client,
+        collection,
+        featureHref,
+        communityHref: (a) => `${basePath}/map?area=${a.id}`,
+        submitHref: `${basePath}/submit${areaId ? `?area=${areaId}` : ""}`,
+        initialAreaId: areaId,
+        showMap: mode === "map"
+      }
+    )
+  ] });
+}
+function CommunityMapArticleEmbeds({
+  metadata,
+  apiPath = "/api/community-maps"
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: communityMapEmbeds(metadata).map((embed, index) => /* @__PURE__ */ jsxRuntime.jsx(
+    ArticleMap,
+    {
+      embed,
+      apiPath
+    },
+    `${embed.collection_slug}-${index}`
+  )) });
+}
+function ArticleMap({
+  embed,
+  apiPath
+}) {
+  const client = react.useMemo(
+    () => communityMaps.createCommunityMapsBrowserClient(apiPath),
+    [apiPath]
+  );
+  const [data, setData] = react.useState(null);
+  const ids = embed.feature_ids?.join(",");
+  react.useEffect(() => {
+    const controller = new AbortController();
+    setData(null);
+    async function load() {
+      const collection = await client.collection(
+        embed.collection_slug,
+        controller.signal
+      );
+      const features = ids ? await Promise.all(
+        ids.split(",").map(
+          (id) => client.feature(embed.collection_slug, id, controller.signal)
+        )
+      ) : (await client.features(
+        embed.collection_slug,
+        { area_id: embed.area_id, limit: 20 },
+        controller.signal
+      )).items;
+      if (!controller.signal.aborted) setData({ collection, features });
+    }
+    void load().catch(() => setData(null));
+    return () => controller.abort();
+  }, [client, embed.collection_slug, embed.area_id, ids]);
+  if (!data) return null;
+  const path = `/community-maps/${data.collection.slug}`;
+  return /* @__PURE__ */ jsxRuntime.jsxs("aside", { className: "smcm", "aria-label": data.collection.config.title, children: [
+    /* @__PURE__ */ jsxRuntime.jsx("h2", { children: /* @__PURE__ */ jsxRuntime.jsx("a", { href: path, children: data.collection.config.title }) }),
+    embed.mode === "cards" ? /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunityCards,
+      {
+        areas: data.collection.areas,
+        href: (a) => `${path}/map?area=${a.id}`
+      }
+    ) : embed.mode === "map" ? /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunityMap,
+      {
+        features: data.features,
+        areas: data.collection.areas,
+        styleUrl: data.collection.config.presentation.map_style_url
+      }
+    ) : /* @__PURE__ */ jsxRuntime.jsx("div", { className: "smcm-feature-grid", children: data.features.map((f) => /* @__PURE__ */ jsxRuntime.jsx(
+      communityMaps.CommunityFeatureCard,
+      {
+        feature: f,
+        href: `${path}/places/${f.id}`,
+        photoUrl: f.media[0] ? client.mediaUrl(data.collection.slug, f.media[0].id) : void 0
+      },
+      f.id
+    )) }),
+    /* @__PURE__ */ jsxRuntime.jsx("p", { children: /* @__PURE__ */ jsxRuntime.jsx("a", { href: `${path}/map`, children: "Explore the full map \u2197" }) })
+  ] });
+}
+
+exports.CommunityMapArticleEmbeds = CommunityMapArticleEmbeds;
+exports.PublicationCommunityMapPage = PublicationCommunityMapPage;
+exports.communityMapEmbeds = communityMapEmbeds;

package/dist/community-maps-view.d.cts

@@ -0,0 +1,22 @@
+import * as react from 'react';
+import { CommunityMapCollection, CommunityMapFeature } from '@scalemule/react/community-maps';
+export { c as communityMapEmbeds } from './community-maps-DKcYhQYN.cjs';
+
+interface PublicationCommunityMapPageProps {
+    collection: CommunityMapCollection;
+    feature?: CommunityMapFeature;
+    mode?: "guide" | "map" | "submit" | "feature";
+    areaId?: string;
+    correctionFor?: string;
+    basePath: string;
+    apiPath?: string;
+}
+/** The newspaper supplies its chrome and inherited type. The platform owns map behavior. */
+declare function PublicationCommunityMapPage({ collection, feature, mode, areaId, correctionFor, basePath, apiPath, }: PublicationCommunityMapPageProps): react.JSX.Element;
+
+declare function CommunityMapArticleEmbeds({ metadata, apiPath, }: {
+    metadata: unknown;
+    apiPath?: string;
+}): react.JSX.Element;
+
+export { CommunityMapArticleEmbeds, PublicationCommunityMapPage, type PublicationCommunityMapPageProps };

package/dist/community-maps-view.d.ts

@@ -0,0 +1,22 @@
+import * as react from 'react';
+import { CommunityMapCollection, CommunityMapFeature } from '@scalemule/react/community-maps';
+export { c as communityMapEmbeds } from './community-maps-DKcYhQYN.js';
+
+interface PublicationCommunityMapPageProps {
+    collection: CommunityMapCollection;
+    feature?: CommunityMapFeature;
+    mode?: "guide" | "map" | "submit" | "feature";
+    areaId?: string;
+    correctionFor?: string;
+    basePath: string;
+    apiPath?: string;
+}
+/** The newspaper supplies its chrome and inherited type. The platform owns map behavior. */
+declare function PublicationCommunityMapPage({ collection, feature, mode, areaId, correctionFor, basePath, apiPath, }: PublicationCommunityMapPageProps): react.JSX.Element;
+
+declare function CommunityMapArticleEmbeds({ metadata, apiPath, }: {
+    metadata: unknown;
+    apiPath?: string;
+}): react.JSX.Element;
+
+export { CommunityMapArticleEmbeds, PublicationCommunityMapPage, type PublicationCommunityMapPageProps };

package/dist/community-maps-view.js

@@ -0,0 +1,132 @@
+"use client";
+import { communityMapEmbeds } from './chunk-IMYBSG7J.js';
+export { communityMapEmbeds } from './chunk-IMYBSG7J.js';
+import { useMemo, useState, useEffect } from 'react';
+import { createCommunityMapsBrowserClient, CommunitySubmissionForm, CommunityFeatureDetail, CommunityGuide, CommunityCards, CommunityMap, CommunityFeatureCard } from '@scalemule/react/community-maps';
+import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
+
+function PublicationCommunityMapPage({
+  collection,
+  feature,
+  mode = "guide",
+  areaId,
+  correctionFor,
+  basePath,
+  apiPath
+}) {
+  const client = useMemo(
+    () => createCommunityMapsBrowserClient(apiPath),
+    [apiPath]
+  );
+  const featureHref = (f) => `${basePath}/places/${f.id}`;
+  return /* @__PURE__ */ jsxs("div", { className: "smcm", children: [
+    mode !== "guide" && /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsxs("a", { href: basePath, children: [
+      "\u2190 ",
+      collection.config.title
+    ] }) }),
+    mode === "submit" ? /* @__PURE__ */ jsx(
+      CommunitySubmissionForm,
+      {
+        client,
+        collection,
+        initialAreaId: areaId,
+        correctionFor
+      }
+    ) : mode === "feature" && feature ? /* @__PURE__ */ jsx(
+      CommunityFeatureDetail,
+      {
+        client,
+        collection,
+        feature,
+        correctionHref: `${basePath}/submit?correction=${feature.id}&area=${feature.area_id}`
+      }
+    ) : /* @__PURE__ */ jsx(
+      CommunityGuide,
+      {
+        client,
+        collection,
+        featureHref,
+        communityHref: (a) => `${basePath}/map?area=${a.id}`,
+        submitHref: `${basePath}/submit${areaId ? `?area=${areaId}` : ""}`,
+        initialAreaId: areaId,
+        showMap: mode === "map"
+      }
+    )
+  ] });
+}
+function CommunityMapArticleEmbeds({
+  metadata,
+  apiPath = "/api/community-maps"
+}) {
+  return /* @__PURE__ */ jsx(Fragment, { children: communityMapEmbeds(metadata).map((embed, index) => /* @__PURE__ */ jsx(
+    ArticleMap,
+    {
+      embed,
+      apiPath
+    },
+    `${embed.collection_slug}-${index}`
+  )) });
+}
+function ArticleMap({
+  embed,
+  apiPath
+}) {
+  const client = useMemo(
+    () => createCommunityMapsBrowserClient(apiPath),
+    [apiPath]
+  );
+  const [data, setData] = useState(null);
+  const ids = embed.feature_ids?.join(",");
+  useEffect(() => {
+    const controller = new AbortController();
+    setData(null);
+    async function load() {
+      const collection = await client.collection(
+        embed.collection_slug,
+        controller.signal
+      );
+      const features = ids ? await Promise.all(
+        ids.split(",").map(
+          (id) => client.feature(embed.collection_slug, id, controller.signal)
+        )
+      ) : (await client.features(
+        embed.collection_slug,
+        { area_id: embed.area_id, limit: 20 },
+        controller.signal
+      )).items;
+      if (!controller.signal.aborted) setData({ collection, features });
+    }
+    void load().catch(() => setData(null));
+    return () => controller.abort();
+  }, [client, embed.collection_slug, embed.area_id, ids]);
+  if (!data) return null;
+  const path = `/community-maps/${data.collection.slug}`;
+  return /* @__PURE__ */ jsxs("aside", { className: "smcm", "aria-label": data.collection.config.title, children: [
+    /* @__PURE__ */ jsx("h2", { children: /* @__PURE__ */ jsx("a", { href: path, children: data.collection.config.title }) }),
+    embed.mode === "cards" ? /* @__PURE__ */ jsx(
+      CommunityCards,
+      {
+        areas: data.collection.areas,
+        href: (a) => `${path}/map?area=${a.id}`
+      }
+    ) : embed.mode === "map" ? /* @__PURE__ */ jsx(
+      CommunityMap,
+      {
+        features: data.features,
+        areas: data.collection.areas,
+        styleUrl: data.collection.config.presentation.map_style_url
+      }
+    ) : /* @__PURE__ */ jsx("div", { className: "smcm-feature-grid", children: data.features.map((f) => /* @__PURE__ */ jsx(
+      CommunityFeatureCard,
+      {
+        feature: f,
+        href: `${path}/places/${f.id}`,
+        photoUrl: f.media[0] ? client.mediaUrl(data.collection.slug, f.media[0].id) : void 0
+      },
+      f.id
+    )) }),
+    /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx("a", { href: `${path}/map`, children: "Explore the full map \u2197" }) })
+  ] });
+}
+
+export { CommunityMapArticleEmbeds, PublicationCommunityMapPage };

package/dist/index.cjs

@@ -230,7 +230,26 @@ function composeEdition(items, selection = {}, now = Date.now()) {
     ...(pins.secondary_slugs ?? []).flatMap((slug) => remaining.find((item) => item.slug === slug) ?? []),
     ...remaining.filter((item) => !requested.has(item.slug))
   ];
-  const secondary = Array.from(new Map(ordered.map((item) => [item.id, item])).values()).slice(0, 3);
+  const uniqueOrdered = Array.from(new Map(ordered.map((item) => [item.id, item])).values());
+  const seenImages = /* @__PURE__ */ new Set();
+  if (lead?.cover_image_url?.trim()) {
+    seenImages.add(lead.cover_image_url.trim());
+  }
+  const secondary = [];
+  const deferredWithDuplicateImage = [];
+  for (const item of uniqueOrdered) {
+    if (secondary.length >= 3) break;
+    const img = item.cover_image_url?.trim();
+    if (img && seenImages.has(img)) {
+      deferredWithDuplicateImage.push(item);
+    } else {
+      secondary.push(item);
+      if (img) seenImages.add(img);
+    }
+  }
+  while (secondary.length < 3 && deferredWithDuplicateImage.length > 0) {
+    secondary.push(deferredWithDuplicateImage.shift());
+  }
   for (const item of secondary) remaining.splice(remaining.indexOf(item), 1);
   const eligible = remaining.filter((item) => {
     const age = now - Date.parse(item.published_at);
@@ -2678,6 +2697,28 @@ function VerifiedCardSection({
   );
 }
 
+// src/community-maps.ts
+function communityMapEmbeds(metadata) {
+  if (!metadata || typeof metadata !== "object") return [];
+  const value = metadata.community_maps;
+  if (!Array.isArray(value)) return [];
+  return value.slice(0, 5).flatMap((entry) => {
+    if (!entry || typeof entry !== "object" || typeof entry.collection_slug !== "string" || !/^[a-z0-9-]{1,191}$/.test(entry.collection_slug) || !["map", "cards", "features"].includes(entry.mode))
+      return [];
+    const ids = Array.isArray(entry.feature_ids) ? entry.feature_ids.filter(
+      (id) => typeof id === "string" && /^[0-9a-f-]{36}$/i.test(id)
+    ).slice(0, 20) : void 0;
+    return [
+      {
+        collection_slug: entry.collection_slug,
+        mode: entry.mode,
+        feature_ids: ids,
+        area_id: typeof entry.area_id === "string" && /^[0-9a-f-]{36}$/i.test(entry.area_id) ? entry.area_id : void 0
+      }
+    ];
+  });
+}
+
 Object.defineProperty(exports, "COOKIE_CONSENT_BACKUP_KEY", {
   enumerable: true,
   get: function () { return compliance.COOKIE_CONSENT_BACKUP_KEY; }
@@ -2809,6 +2850,7 @@ exports.classifiedPath = classifiedPath;
 exports.classifiedSearchPath = classifiedSearchPath;
 exports.clearTheme = clearTheme;
 exports.clipChars = clipChars;
+exports.communityMapEmbeds = communityMapEmbeds;
 exports.communityPublications = communityPublications;
 exports.composeEdition = composeEdition;
 exports.dealDollars = dealDollars;

package/dist/index.d.cts

@@ -13,6 +13,7 @@ export { LocalNetworkBar, LocalNetworkBarProps } from './network-bar.cjs';
 export { NetworkCopyrightNotice, NetworkCopyrightNoticeProps } from './network-copyright.cjs';
 import * as react from 'react';
 export { VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './verified-card.cjs';
+export { C as CommunityMapArticleEmbed, c as communityMapEmbeds } from './community-maps-DKcYhQYN.cjs';
 
 /** Walnut Creek Times broadsheet colors. A paper overrides only what it changes. */
 declare const BROADSHEET_THEME: PublicationTheme;

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export { LocalNetworkBar, LocalNetworkBarProps } from './network-bar.js';
 export { NetworkCopyrightNotice, NetworkCopyrightNoticeProps } from './network-copyright.js';
 import * as react from 'react';
 export { VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './verified-card.js';
+export { C as CommunityMapArticleEmbed, c as communityMapEmbeds } from './community-maps-DKcYhQYN.js';
 
 /** Walnut Creek Times broadsheet colors. A paper overrides only what it changes. */
 declare const BROADSHEET_THEME: PublicationTheme;

package/dist/index.js

@@ -1,15 +1,16 @@
+export { CURATED_COMMUNITY_CARDS, VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './chunk-FMCHQI7K.js';
+export { CookieConsentBanner } from './chunk-DC6RMIYL.js';
 export { CookieSettingsView } from './chunk-XDGBMMLD.js';
 export { THEME_COOKIE, THEME_EVENT, THEME_MAX_AGE_SECONDS, THEME_STORAGE_KEY, ThemeToggle, applyTheme, clearTheme, getStoredTheme, getSystemTheme, resolveEffectiveTheme, setTheme, subscribeTheme, themeInitScript } from './chunk-NQD3M7ZY.js';
 export { LocalNetworkBar } from './chunk-EVAGI7C5.js';
 export { NetworkCopyrightNotice } from './chunk-VRDUSIVG.js';
-export { CURATED_COMMUNITY_CARDS, VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './chunk-FMCHQI7K.js';
+import { localPublications } from './chunk-56TU57OO.js';
+export { COOKIE_CATEGORIES, COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, NETWORK_PARENT, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, communityPublications, decorateNetworkUrl, findPublicationByHost, findPublicationBySlug, getCookieConsent, getNetworkPublicationUrl, hasConsented, isCategoryAllowed, isGeoConsentRequired, listedPublications, localPublications, queryNetworkConsentHub, recordConsentToCompliance, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from './chunk-56TU57OO.js';
+export { communityMapEmbeds } from './chunk-IMYBSG7J.js';
 import { definePublication } from './chunk-C7JTEHTH.js';
 export { BROADSHEET_THEME, FEATURE_NAMES, LAYOUT_COOKIE, acceptRemoteRecord, acceptSnapshot, definePublication, featureEnabled, parseSnapshot, publicationFromSnapshot, publicationRecord, resolveLayout, snapshotFromRecord, syncPublication } from './chunk-C7JTEHTH.js';
 export { CLASSIFIED_CATEGORIES, JOB_EMPLOYMENT_TYPES, categoryLabel, classifiedPath, classifiedSearchPath, clipChars, dealDollars, dealGoPath, dealsFeedPath, employmentLabel, isClassifiedCategory, isEmploymentType, jobEmployerBody, jobOpeningBody, jobPostingBody, prepareClassified, prepareJobPost, publicJobPath, publicJobsPath } from './chunk-C7ZPLH2K.js';
 export { MEET_ACTIVITIES, activityLabel, canHostMeetup, isAdult, prepareMeetup, screenMessage } from './chunk-GB36YM56.js';
-export { CookieConsentBanner } from './chunk-DC6RMIYL.js';
-import { localPublications } from './chunk-56TU57OO.js';
-export { COOKIE_CATEGORIES, COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, NETWORK_PARENT, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, communityPublications, decorateNetworkUrl, findPublicationByHost, findPublicationBySlug, getCookieConsent, getNetworkPublicationUrl, hasConsented, isCategoryAllowed, isGeoConsentRequired, listedPublications, localPublications, queryNetworkConsentHub, recordConsentToCompliance, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from './chunk-56TU57OO.js';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
 // src/preset.ts
@@ -169,7 +170,26 @@ function composeEdition(items, selection = {}, now = Date.now()) {
     ...(pins.secondary_slugs ?? []).flatMap((slug) => remaining.find((item) => item.slug === slug) ?? []),
     ...remaining.filter((item) => !requested.has(item.slug))
   ];
-  const secondary = Array.from(new Map(ordered.map((item) => [item.id, item])).values()).slice(0, 3);
+  const uniqueOrdered = Array.from(new Map(ordered.map((item) => [item.id, item])).values());
+  const seenImages = /* @__PURE__ */ new Set();
+  if (lead?.cover_image_url?.trim()) {
+    seenImages.add(lead.cover_image_url.trim());
+  }
+  const secondary = [];
+  const deferredWithDuplicateImage = [];
+  for (const item of uniqueOrdered) {
+    if (secondary.length >= 3) break;
+    const img = item.cover_image_url?.trim();
+    if (img && seenImages.has(img)) {
+      deferredWithDuplicateImage.push(item);
+    } else {
+      secondary.push(item);
+      if (img) seenImages.add(img);
+    }
+  }
+  while (secondary.length < 3 && deferredWithDuplicateImage.length > 0) {
+    secondary.push(deferredWithDuplicateImage.shift());
+  }
   for (const item of secondary) remaining.splice(remaining.indexOf(item), 1);
   const eligible = remaining.filter((item) => {
     const age = now - Date.parse(item.published_at);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalemule/news-publication",
-  "version": "0.0.35",
+  "version": "0.0.36",
   "description": "Shared server framework for ScaleMule local news publications. Walnut Creek Times is the broadsheet default; each paper supplies its own identity and feature flags.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -86,7 +86,17 @@
       "import": "./dist/story-review.js",
       "require": "./dist/story-review.cjs"
     },
-    "./story-review.css": "./story-review.css"
+    "./story-review.css": "./story-review.css",
+    "./community-maps-server": {
+      "types": "./dist/community-maps-server.d.ts",
+      "import": "./dist/community-maps-server.js",
+      "require": "./dist/community-maps-server.cjs"
+    },
+    "./community-maps-view": {
+      "types": "./dist/community-maps-view.d.ts",
+      "import": "./dist/community-maps-view.js",
+      "require": "./dist/community-maps-view.cjs"
+    }
   },
   "files": [
     "dist",
@@ -99,11 +109,15 @@
     "story-review.css"
   ],
   "peerDependencies": {
-    "react": ">=18.0.0"
+    "react": ">=18.0.0",
+    "@scalemule/react": ">=0.0.13 <0.1.0"
   },
   "peerDependenciesMeta": {
     "react": {
       "optional": true
+    },
+    "@scalemule/react": {
+      "optional": true
     }
   },
   "scripts": {
@@ -124,7 +138,8 @@
     "react-dom": "^19.3.0",
     "tsup": "^8.5.0",
     "typescript": "^5.8.3",
-    "vitest": "^3.2.4"
+    "vitest": "^3.2.4",
+    "@scalemule/react": "^0.0.13"
   },
   "keywords": [
     "scalemule",
@@ -146,6 +161,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@scalemule/compliance": "^0.0.5"
+    "@scalemule/compliance": "^0.0.5",
+    "@scalemule/sdk": "^0.0.71"
   }
 }