@scalemule/news-publication 0.0.46 → 0.0.48

package/README.md

@@ -237,3 +237,11 @@ Moderate through **Newsroom → Community Maps → Comments**. Approval requires
 explicit guideline review and the current revision. Existing pumpkin reactions
 remain configurable alongside voting. The UI links to `/account?next=...`; the
 publication must validate that return path and preserve it through sign-in.
+
+### Community partnerships
+
+`SPONSORSHIP_OFFERINGS` defines preliminary USD rates and exact web/email deliverables. `Placement`, `SponsorParty`, `Campaign` and `SponsorshipReport` describe the publication-owned Blog API. `SponsorAcknowledgment` from `@scalemule/news-publication/sponsorship-view` and `sponsorship.css` use publication tokens, explicit labels and safe HTTPS links. They do not insert article ads, load advertising scripts, or measure preview renders.
+
+Inventory is unavailable until a verified operational placement is active. `placementAvailable` enforces verification freshness and keeps paid briefings disabled. Campaign approval, authorization, allocation capacity and manual commercial references remain server responsibilities. Report HTML distinguishes observed counts from unavailable data and can be printed or rendered to PDF. No invoice or payment is initiated by this SDK.
+
+The consent banner now offers a choice in every geography where optional measurement requires one. `measurementConsent` is the server gate for current, explicitly allowed categories and GPC/DNT. Positive permission is local: unsigned URL parameters and a binary network hub cannot grant all categories. Rendering sponsorship recognition does not require tracking consent; measuring it requires both performance and advertising permission.

package/dist/{chunk-OIEO2YVG.js → chunk-2XSW7JZS.js}

@@ -1,5 +1,5 @@
 "use client";
-import { setupNetworkConsentDelegation, COOKIE_CONSENT_EVENT, listedPublications, decorateNetworkUrl } from './chunk-UTBV6JJX.js';
+import { setupNetworkConsentDelegation, COOKIE_CONSENT_EVENT, listedPublications, decorateNetworkUrl } from './chunk-JV76ZEIA.js';
 import { useState, useId, useRef, useEffect } from 'react';
 import { jsx, jsxs } from 'react/jsx-runtime';
 

package/dist/chunk-66GI2IX6.js

@@ -0,0 +1,65 @@
+// src/sponsorships.ts
+var SPONSORSHIP_POLICY = "Sponsors receive clearly identified recognition. Sponsorship does not influence reporting, event selection, factual information, rankings or editorial recommendations.";
+var SPONSORSHIP_OFFERINGS = [
+  {
+    type: "community_partner",
+    name: "Publication Community Partner",
+    price_cents: 35e3,
+    duration: "One calendar month; exact start and end dates in the agreement.",
+    deliverables: "One acknowledgment on the publication's community partners page and one compact acknowledgment below the community calendar. No article placements.",
+    acknowledgments: "Two defined web locations; recurring display during the campaign, subject to reader repetition limits.",
+    creative: "Name, approved logo, up to 140 characters of copy and one HTTPS link.",
+    max_sponsors: 2,
+    product_path: "/community-partners"
+  },
+  {
+    type: "community_calendar",
+    name: "Community Calendar Sponsor",
+    price_cents: 25e3,
+    duration: "One calendar month; exact start and end dates in the agreement.",
+    deliverables: "One acknowledgment above the independently curated community events calendar.",
+    acknowledgments: "One web location; recurring display during the campaign, subject to reader repetition limits.",
+    creative: "Name, approved logo, up to 140 characters of copy and one HTTPS link.",
+    max_sponsors: 1,
+    product_path: "/this-week"
+  },
+  {
+    type: "daily_briefing",
+    name: "Daily Briefing Sponsor",
+    price_cents: 3e4,
+    duration: "One calendar month after verified newsletter delivery is operational.",
+    deliverables: "One acknowledgment per agreed briefing edition. Edition dates and count must be specified in the agreement before booking.",
+    acknowledgments: "One per contracted edition; no minimum send count is promised before launch.",
+    creative: "Name, optional logo, up to 140 characters of approved copy and one HTTPS link.",
+    max_sponsors: 1,
+    product_path: "/newsletter"
+  },
+  {
+    type: "community_guide",
+    name: "Community Guide Sponsor",
+    price_cents: null,
+    duration: "Fixed dates agreed for a named guide.",
+    deliverables: "One acknowledgment on one named, independently edited community guide; scope and updates agreed in writing.",
+    acknowledgments: "One web location per contracted guide.",
+    creative: "Name, approved logo, up to 140 characters of copy and one HTTPS link.",
+    max_sponsors: 1,
+    product_path: "/guides"
+  }
+];
+function safeSponsorUrl(value) {
+  if (typeof value !== "string" || value.length > 2048) return void 0;
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "https:" || url.username || url.password)
+      return void 0;
+    return url.toString();
+  } catch {
+    return void 0;
+  }
+}
+function placementAvailable(placement, now = Date.now()) {
+  const verified = placement.verified_at && Date.parse(placement.verified_at);
+  return placement.placement_type !== "daily_briefing" && placement.active && placement.availability === "available" && Boolean(safeSponsorUrl(placement.verification_url)) && typeof verified === "number" && Number.isFinite(verified) && verified <= now && now - verified <= 90 * 864e5;
+}
+
+export { SPONSORSHIP_OFFERINGS, SPONSORSHIP_POLICY, placementAvailable, safeSponsorUrl };

package/dist/{chunk-2IYKWGVM.js → chunk-GOWOYMSG.js}

@@ -1,10 +1,10 @@
 "use client";
-import { setupNetworkConsentDelegation, checkUrlConsentBridge, hasConsented, isGeoConsentRequired, queryNetworkConsentHub, DEFAULT_CONSENT_HUB_URL, acceptAllCookies, rejectOptionalCookies, COOKIE_CONSENT_EVENT, recordConsentToCompliance, setNetworkConsentHub } from './chunk-UTBV6JJX.js';
+import { hasConsented, rejectOptionalCookies, DEFAULT_CONSENT_HUB_URL, isGpcActive, COOKIE_CONSENT_EVENT, acceptAllCookies, recordConsentToCompliance } from './chunk-JV76ZEIA.js';
 import { useState, useEffect } from 'react';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 
 function CookieConsentBanner({
-  title = "Help Us Improve Our Website with Cookies",
+  title = "Your privacy choices",
   text,
   settingsUrl = "/cookies",
   className = "",
@@ -18,73 +18,41 @@ function CookieConsentBanner({
   const [visible, setVisible] = useState(false);
   useEffect(() => {
     setMounted(true);
-    setupNetworkConsentDelegation();
-    if (checkUrlConsentBridge()) {
-      setVisible(false);
-      return;
+    const url = new URL(window.location.href);
+    if (url.searchParams.has("sm_consent")) {
+      if (url.searchParams.get("sm_consent") === "0" && !hasConsented())
+        rejectOptionalCookies({ hubUrl: consentHubUrl });
+      url.searchParams.delete("sm_consent");
+      window.history.replaceState(window.history.state, "", url);
     }
-    if (hasConsented()) {
-      setVisible(false);
-      return;
-    }
-    if (!forceShow && !isGeoConsentRequired(countryCode)) {
-      setVisible(false);
-      void queryNetworkConsentHub(consentHubUrl, 1200).then((networkStatus) => {
-        if (networkStatus === "accepted") {
-          acceptAllCookies();
-        } else if (networkStatus === "rejected") {
-          rejectOptionalCookies();
-        }
-      });
-      return;
-    }
-    let cancelled = false;
-    void queryNetworkConsentHub(consentHubUrl, 1e3).then((networkStatus) => {
-      if (cancelled) return;
-      if (networkStatus === "accepted") {
-        acceptAllCookies();
-        setVisible(false);
-      } else if (networkStatus === "rejected") {
-        rejectOptionalCookies();
-        setVisible(false);
-      } else {
-        setVisible(true);
-      }
-    });
-    return () => {
-      cancelled = true;
-    };
+    setVisible(!hasConsented() && !isGpcActive());
   }, [countryCode, forceShow, consentHubUrl]);
   useEffect(() => {
     const onConsentChange = () => {
-      if (hasConsented()) {
-        setVisible(false);
-      }
+      setVisible(!hasConsented() && !isGpcActive());
     };
     window.addEventListener(COOKIE_CONSENT_EVENT, onConsentChange);
     return () => window.removeEventListener(COOKIE_CONSENT_EVENT, onConsentChange);
   }, []);
   if (!mounted || !visible) return null;
   const handleAccept = () => {
-    const record = acceptAllCookies();
+    const record = acceptAllCookies({ hubUrl: consentHubUrl });
     setVisible(false);
     void recordConsentToCompliance(record, {
       endpoint: complianceEndpoint,
       publicationSlug
     });
-    setNetworkConsentHub("accepted", consentHubUrl);
   };
   const handleReject = () => {
-    const record = rejectOptionalCookies();
+    const record = rejectOptionalCookies({ hubUrl: consentHubUrl });
     setVisible(false);
     void recordConsentToCompliance(record, {
       endpoint: complianceEndpoint,
       publicationSlug
     });
-    setNetworkConsentHub("rejected", consentHubUrl);
   };
   const defaultText = /* @__PURE__ */ jsxs(Fragment, { children: [
-    "We use cookies and device data to analyze performance, support local sponsors, and remember your reading preferences across our news network. View",
+    "With your permission, we measure reading activity and sponsor acknowledgments. You can read the publication with optional cookies turned off. View",
     " ",
     /* @__PURE__ */ jsx("a", { href: settingsUrl, className: "sm-cookie-banner-link", children: "Cookie Settings" }),
     " ",

package/dist/{chunk-UTBV6JJX.js → chunk-JV76ZEIA.js}

@@ -1,5 +1,5 @@
 import { recordConsentToCompliance as recordConsentToCompliance$1, getCookieConsent, decorateNetworkUrl } from '@scalemule/compliance';
-export { COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, decorateNetworkUrl, getCookieConsent, hasConsented, isCategoryAllowed, isGeoConsentRequired, queryNetworkConsentHub, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from '@scalemule/compliance';
+export { COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, decorateNetworkUrl, getCookieConsent, hasConsented, isCategoryAllowed, isGeoConsentRequired, isGpcActive, queryNetworkConsentHub, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from '@scalemule/compliance';
 
 // src/cookies.ts
 async function recordConsentToCompliance(record, options) {
@@ -48,13 +48,6 @@ var COOKIE_CATEGORIES = [
         duration: "1 year",
         type: "HTTP Cookie"
       },
-      {
-        name: "napsite_session_v1",
-        provider: "First-Party",
-        purpose: "Maintains session continuity, security tokens, and server routing.",
-        duration: "30 minutes (idle)",
-        type: "Session Storage"
-      },
       {
         name: "napsite_preview",
         provider: "First-Party",
@@ -68,9 +61,16 @@ var COOKIE_CATEGORIES = [
     id: "performance",
     title: "Performance & Analytics Cookies",
     shortDescription: "Help us measure reader engagement, story completion, and site reliability.",
-    fullDescription: "These cookies collect anonymous information about how visitors navigate our news publication. They allow us to count article reads, understand scroll depth and reading completion, and identify broken links or slow-loading assets so we can keep our community reporting responsive and fast. All metrics are aggregated and never contain personal information.",
+    fullDescription: "With your permission, first-party identifiers support page-visit and reading measurements. Aggregate reports help us improve the publication. Measurements are incomplete when readers decline consent and are not a count of unique people.",
     required: false,
     cookies: [
+      {
+        name: "napsite_session_v1",
+        provider: "First-Party",
+        purpose: "Groups consented reading measurements within a session.",
+        duration: "30 minutes (idle)",
+        type: "Session Storage"
+      },
       {
         name: "napsite_visitor_v1",
         provider: "First-Party",
@@ -120,25 +120,10 @@ var COOKIE_CATEGORIES = [
   {
     id: "advertising",
     title: "Advertising & Local Sponsorship Cookies",
-    shortDescription: "Support local business sponsors by capping repetition and measuring notices.",
-    fullDescription: "Our journalism is supported by local business sponsors and community partners. These cookies ensure you do not see the same sponsor banner repeatedly (frequency capping) and help local merchants measure whether their announcement reached their community. They never track your activity across unrelated third-party websites or build external advertising profiles.",
+    shortDescription: "Measure clearly labeled community sponsorship views and link clicks.",
+    fullDescription: "With your permission, we measure visible sponsor acknowledgments and link clicks. Repetition limits use temporary page-session memory. We do not use third-party advertising trackers or build behavioral advertising profiles.",
     required: false,
-    cookies: [
-      {
-        name: "napsite_sponsor_cap",
-        provider: "First-Party",
-        purpose: "Prevents repetitive display of identical local business announcements.",
-        duration: "7 days",
-        type: "Local Storage"
-      },
-      {
-        name: "local_sponsor_ref",
-        provider: "First-Party",
-        purpose: "Attributes community inquiries directly to the sponsoring local merchant.",
-        duration: "30 days",
-        type: "Local Storage"
-      }
-    ]
+    cookies: []
   }
 ];
 

package/dist/{chunk-72PKW2HM.js → chunk-UL2Q3N26.js}

@@ -1,5 +1,5 @@
 "use client";
-import { getCookieConsent, DEFAULT_PREFERENCES_ACCEPTED, COOKIE_CATEGORIES, setCookieConsent, recordConsentToCompliance, DEFAULT_PREFERENCES_REJECTED } from './chunk-UTBV6JJX.js';
+import { getCookieConsent, DEFAULT_PREFERENCES_ACCEPTED, COOKIE_CATEGORIES, setCookieConsent, recordConsentToCompliance, DEFAULT_PREFERENCES_REJECTED } from './chunk-JV76ZEIA.js';
 import { useState, useEffect } from 'react';
 import { jsxs, jsx } from 'react/jsx-runtime';
 

package/dist/{chunk-GVLJ3HAI.js → chunk-WAC6ATNP.js}

@@ -1,4 +1,4 @@
-import { NETWORK_PARENT } from './chunk-UTBV6JJX.js';
+import { NETWORK_PARENT } from './chunk-JV76ZEIA.js';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
 function NetworkCopyrightNotice({

package/dist/cookie-consent-banner.cjs

@@ -114,7 +114,7 @@ var listedPublications = localPublications.filter(
 listedPublications.filter(
   (publication) => publication.slug !== "bayareachronicle"
 );
-var NETWORK_HOSTNAMES = new Set(
+new Set(
   localPublications.map((p) => {
     try {
       return new URL(p.url).hostname.replace(/^www\./, "").toLowerCase();
@@ -123,46 +123,13 @@ var NETWORK_HOSTNAMES = new Set(
     }
   })
 );
-function isNetworkHostname(hostname) {
-  if (!hostname) return false;
-  const clean = hostname.replace(/^www\./, "").toLowerCase();
-  return clean === "bayareanewsnetwork.com" || clean.endsWith(".bayareanewsnetwork.com") || NETWORK_HOSTNAMES.has(clean) || clean.endsWith(".bayareachronicle.com") || clean.endsWith(".napsite.com") || clean.endsWith(".site.scalemule.com");
-}
 
 // src/cookies.ts
 async function recordConsentToCompliance(record, options) {
   return compliance.recordConsentToCompliance(record, options);
 }
-var delegationInstalled = false;
-function setupNetworkConsentDelegation() {
-  if (typeof window === "undefined" || delegationInstalled) return;
-  delegationInstalled = true;
-  document.addEventListener(
-    "click",
-    (e) => {
-      const target = e.target;
-      const anchor = target?.closest("a");
-      if (!anchor || !anchor.href) return;
-      try {
-        const url = new URL(anchor.href, window.location.href);
-        if (url.protocol !== "http:" && url.protocol !== "https:") return;
-        if (isNetworkHostname(url.hostname)) {
-          const consent = compliance.getCookieConsent();
-          if (consent) {
-            const decorated = compliance.decorateNetworkUrl(anchor.href);
-            if (decorated !== anchor.href) {
-              anchor.href = decorated;
-            }
-          }
-        }
-      } catch {
-      }
-    },
-    { capture: true }
-  );
-}
 function CookieConsentBanner({
-  title = "Help Us Improve Our Website with Cookies",
+  title = "Your privacy choices",
   text,
   settingsUrl = "/cookies",
   className = "",
@@ -176,73 +143,41 @@ function CookieConsentBanner({
   const [visible, setVisible] = react.useState(false);
   react.useEffect(() => {
     setMounted(true);
-    setupNetworkConsentDelegation();
-    if (compliance.checkUrlConsentBridge()) {
-      setVisible(false);
-      return;
+    const url = new URL(window.location.href);
+    if (url.searchParams.has("sm_consent")) {
+      if (url.searchParams.get("sm_consent") === "0" && !compliance.hasConsented())
+        compliance.rejectOptionalCookies({ hubUrl: consentHubUrl });
+      url.searchParams.delete("sm_consent");
+      window.history.replaceState(window.history.state, "", url);
     }
-    if (compliance.hasConsented()) {
-      setVisible(false);
-      return;
-    }
-    if (!forceShow && !compliance.isGeoConsentRequired(countryCode)) {
-      setVisible(false);
-      void compliance.queryNetworkConsentHub(consentHubUrl, 1200).then((networkStatus) => {
-        if (networkStatus === "accepted") {
-          compliance.acceptAllCookies();
-        } else if (networkStatus === "rejected") {
-          compliance.rejectOptionalCookies();
-        }
-      });
-      return;
-    }
-    let cancelled = false;
-    void compliance.queryNetworkConsentHub(consentHubUrl, 1e3).then((networkStatus) => {
-      if (cancelled) return;
-      if (networkStatus === "accepted") {
-        compliance.acceptAllCookies();
-        setVisible(false);
-      } else if (networkStatus === "rejected") {
-        compliance.rejectOptionalCookies();
-        setVisible(false);
-      } else {
-        setVisible(true);
-      }
-    });
-    return () => {
-      cancelled = true;
-    };
+    setVisible(!compliance.hasConsented() && !compliance.isGpcActive());
   }, [countryCode, forceShow, consentHubUrl]);
   react.useEffect(() => {
     const onConsentChange = () => {
-      if (compliance.hasConsented()) {
-        setVisible(false);
-      }
+      setVisible(!compliance.hasConsented() && !compliance.isGpcActive());
     };
     window.addEventListener(compliance.COOKIE_CONSENT_EVENT, onConsentChange);
     return () => window.removeEventListener(compliance.COOKIE_CONSENT_EVENT, onConsentChange);
   }, []);
   if (!mounted || !visible) return null;
   const handleAccept = () => {
-    const record = compliance.acceptAllCookies();
+    const record = compliance.acceptAllCookies({ hubUrl: consentHubUrl });
     setVisible(false);
     void recordConsentToCompliance(record, {
       endpoint: complianceEndpoint,
       publicationSlug
     });
-    compliance.setNetworkConsentHub("accepted", consentHubUrl);
   };
   const handleReject = () => {
-    const record = compliance.rejectOptionalCookies();
+    const record = compliance.rejectOptionalCookies({ hubUrl: consentHubUrl });
     setVisible(false);
     void recordConsentToCompliance(record, {
       endpoint: complianceEndpoint,
       publicationSlug
     });
-    compliance.setNetworkConsentHub("rejected", consentHubUrl);
   };
   const defaultText = /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-    "We use cookies and device data to analyze performance, support local sponsors, and remember your reading preferences across our news network. View",
+    "With your permission, we measure reading activity and sponsor acknowledgments. You can read the publication with optional cookies turned off. View",
     " ",
     /* @__PURE__ */ jsxRuntime.jsx("a", { href: settingsUrl, className: "sm-cookie-banner-link", children: "Cookie Settings" }),
     " ",

package/dist/cookie-consent-banner.js

@@ -1,3 +1,3 @@
 "use client";
-export { CookieConsentBanner } from './chunk-2IYKWGVM.js';
-import './chunk-UTBV6JJX.js';
+export { CookieConsentBanner } from './chunk-GOWOYMSG.js';
+import './chunk-JV76ZEIA.js';

package/dist/cookie-settings-view.cjs

@@ -143,13 +143,6 @@ var COOKIE_CATEGORIES = [
         duration: "1 year",
         type: "HTTP Cookie"
       },
-      {
-        name: "napsite_session_v1",
-        provider: "First-Party",
-        purpose: "Maintains session continuity, security tokens, and server routing.",
-        duration: "30 minutes (idle)",
-        type: "Session Storage"
-      },
       {
         name: "napsite_preview",
         provider: "First-Party",
@@ -163,9 +156,16 @@ var COOKIE_CATEGORIES = [
     id: "performance",
     title: "Performance & Analytics Cookies",
     shortDescription: "Help us measure reader engagement, story completion, and site reliability.",
-    fullDescription: "These cookies collect anonymous information about how visitors navigate our news publication. They allow us to count article reads, understand scroll depth and reading completion, and identify broken links or slow-loading assets so we can keep our community reporting responsive and fast. All metrics are aggregated and never contain personal information.",
+    fullDescription: "With your permission, first-party identifiers support page-visit and reading measurements. Aggregate reports help us improve the publication. Measurements are incomplete when readers decline consent and are not a count of unique people.",
     required: false,
     cookies: [
+      {
+        name: "napsite_session_v1",
+        provider: "First-Party",
+        purpose: "Groups consented reading measurements within a session.",
+        duration: "30 minutes (idle)",
+        type: "Session Storage"
+      },
       {
         name: "napsite_visitor_v1",
         provider: "First-Party",
@@ -215,25 +215,10 @@ var COOKIE_CATEGORIES = [
   {
     id: "advertising",
     title: "Advertising & Local Sponsorship Cookies",
-    shortDescription: "Support local business sponsors by capping repetition and measuring notices.",
-    fullDescription: "Our journalism is supported by local business sponsors and community partners. These cookies ensure you do not see the same sponsor banner repeatedly (frequency capping) and help local merchants measure whether their announcement reached their community. They never track your activity across unrelated third-party websites or build external advertising profiles.",
+    shortDescription: "Measure clearly labeled community sponsorship views and link clicks.",
+    fullDescription: "With your permission, we measure visible sponsor acknowledgments and link clicks. Repetition limits use temporary page-session memory. We do not use third-party advertising trackers or build behavioral advertising profiles.",
     required: false,
-    cookies: [
-      {
-        name: "napsite_sponsor_cap",
-        provider: "First-Party",
-        purpose: "Prevents repetitive display of identical local business announcements.",
-        duration: "7 days",
-        type: "Local Storage"
-      },
-      {
-        name: "local_sponsor_ref",
-        provider: "First-Party",
-        purpose: "Attributes community inquiries directly to the sponsoring local merchant.",
-        duration: "30 days",
-        type: "Local Storage"
-      }
-    ]
+    cookies: []
   }
 ];
 function CookieSettingsView({

package/dist/cookie-settings-view.js

@@ -1,3 +1,3 @@
 "use client";
-export { CookieSettingsView } from './chunk-72PKW2HM.js';
-import './chunk-UTBV6JJX.js';
+export { CookieSettingsView } from './chunk-UL2Q3N26.js';
+import './chunk-JV76ZEIA.js';