@scalemule/news-publication 0.0.49 → 0.0.51

package/README.md

@@ -273,3 +273,29 @@ Private recovery contact and broad community alert delivery are not implemented
 by these components. Notification controls default to disabled. The canonical
 application, collections, publication views and legitimate source content must
 be provisioned separately before launch.
+
+### Native pet plugin and shared sign-in
+
+`pets-plugin` exports `PetAccountPage`, `PetSubmitPage`, `PetStoryPage` and
+`PetBrowsePage`, with `publicationPetPaths` or `standalonePetPaths`. These are
+server components: give them the publication’s `PetScope` resolved on the server
+and its current reader token. Mount publication pages at `/pets/account`,
+`/pets/submit`, `/pets/:id` and `/pets/browse/:kind`. `native` on the publication
+section, references and calendar keeps resource links inside the publication.
+
+Configure `createPawAuthHandler` with the host’s existing `sessionCookie`,
+`callbackPath` and `accountPath`. An existing callback should dispatch to this
+handler only when `openPawFlow(pawCookie(request, PAW_FLOW_COOKIE), state, key)`
+validates. Otherwise preserve the publication’s normal authentication flow.
+`GET resume?next=...` makes a top-level `prompt=none` attempt; protected pages
+should call it only when the session is absent/invalid, `signin` is absent and
+`PAW_SIGNED_OUT_COOKIE` is absent. Failed continuity returns `signin=required`
+or `signin=retry`, preventing redirect loops. Explicit `POST start` opens the
+normal sign-in. Honor and clear the sign-out marker in existing host login/logout
+flows. All cookies remain host-only; do not embed the sign-in in an iframe.
+
+The collection must explicitly set `shared_identity_provider` to its configured
+OIDC provider. Auth resolves the verified provider subject; Knowledge authorizes
+each accepted view and keeps ownership collection-scoped. Never correlate local
+users by email or forward one application’s reader token/API key to another.
+Provision and verify each RP before enabling sign-in or contribution flags.

package/dist/{chunk-ZXH3O537.js → chunk-ABPJMDUG.js}

@@ -1,4 +1,4 @@
-import { PET_UUID, petReferences, PET_SLUG } from './chunk-MBBPEFDA.js';
+import { PET_UUID, petReferences, PET_SLUG } from './chunk-AFJ6S5WJ.js';
 import { buildClientContextHeaders } from '@scalemule/sdk';
 
 var PetRequestError = class extends Error {

package/dist/{chunk-MBBPEFDA.js → chunk-AFJ6S5WJ.js}

@@ -60,7 +60,7 @@ function petReferences(metadata) {
   });
 }
 function resolvePetCommunity(areas, selected, preference, publicationDefault) {
-  if (selected === "") return void 0;
+  if (selected === "" || selected === void 0 && preference === "all") return void 0;
   for (const candidate of [selected, preference, publicationDefault]) {
     const found = areas.find(
       (area) => area.id === candidate || area.slug === candidate

package/dist/{chunk-2MEYHM7M.js → chunk-AMLVCZDP.js}

@@ -1,4 +1,4 @@
-import { preparePawWalk } from './chunk-MBBPEFDA.js';
+import { preparePawWalk } from './chunk-AFJ6S5WJ.js';
 
 // src/meet.ts
 var MEET_ACTIVITIES = [

package/dist/{chunk-TTLM7YOH.js → chunk-QW3OZB22.js}

@@ -1,5 +1,5 @@
 import { SponsorAcknowledgment } from './chunk-4JRWZXAP.js';
-import { PET_SAFETY, safePetLink, adoptionAvailability } from './chunk-MBBPEFDA.js';
+import { PET_SAFETY, safePetLink, adoptionAvailability } from './chunk-AFJ6S5WJ.js';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 
 function PawMark({ size = 36 }) {
@@ -30,6 +30,181 @@ function PawMark({ size = 36 }) {
     }
   );
 }
+function PawNeighborhoodIllustration() {
+  return /* @__PURE__ */ jsxs(
+    "svg",
+    {
+      className: "paw-neighborhood-art",
+      viewBox: "0 0 520 460",
+      fill: "none",
+      "aria-hidden": "true",
+      children: [
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M42 233C42 111 124 29 257 29c134 0 220 102 220 218v153H42V233Z",
+            fill: "var(--paw-art-sky)"
+          }
+        ),
+        /* @__PURE__ */ jsx("circle", { cx: "366", cy: "112", r: "44", fill: "var(--paw-sun)" }),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M42 262c93-99 132-19 203-52 91-43 145-27 232 52v138H42V262Z",
+            fill: "var(--paw-art-hill)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M42 331c89-59 161-27 216-3 81 36 145-47 219-21v93H42v-69Z",
+            fill: "var(--paw-art-ground)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M310 239c34-18 68-21 103-14M311 249c34-18 68-21 103-14",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "2",
+            strokeLinecap: "round",
+            opacity: ".45"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M90 190v75m29-85v75m-44-46h61m-57 31c14-15 32-15 51-7",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "3",
+            strokeLinecap: "round",
+            opacity: ".45"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M167 341c-29-24-33-67-5-88 16-12 44-6 59 17l27 47c15 26 36 38 58 44H167v-20Z",
+            fill: "var(--paw-terracotta)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M173 340c-17-9-39-15-54-31-14-16-13-27-11-38",
+            stroke: "var(--paw-terracotta)",
+            strokeWidth: "17",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M229 283c26-17 39-43 31-67-8-25-35-34-57-18-23 17-13 49 1 68",
+            fill: "var(--paw-terracotta)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M251 224l34 5c14 2 13 23 0 28l-36 13",
+            fill: "var(--paw-terracotta)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M206 203c-15 1-31 13-29 33 1 11 6 18 15 17 13-1 21-18 25-37",
+            fill: "var(--paw-art-line)"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M231 285l-10 67c-1 7 9 11 28 11M264 280l2 70c0 10 10 13 25 13",
+            stroke: "var(--paw-terracotta)",
+            strokeWidth: "19",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M215 273l38-7",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "9",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx("circle", { cx: "248", cy: "223", r: "3.5", fill: "var(--paw-art-line)" }),
+        /* @__PURE__ */ jsx("path", { d: "M283 229h9c1 8-3 13-9 13", fill: "var(--paw-art-line)" }),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M292 348c-9-46 1-79 33-79 33 0 47 37 48 77l-1 17h-80v-15Z",
+            fill: "var(--paw-art-cat)"
+          }
+        ),
+        /* @__PURE__ */ jsx("path", { d: "M303 277l-6-43 26 20 23-22 2 48", fill: "var(--paw-art-cat)" }),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M365 351c27-4 45-15 41-39-2-11-15-16-24-10",
+            stroke: "var(--paw-art-cat)",
+            strokeWidth: "12",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M316 277h3m17-2h3m-13 10 3 2-3 3m-21-5-15-3m16 9-17 2m54-10 16-5m-14 13 15 1",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "2.5",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M145 378h245",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "2",
+            strokeLinecap: "round",
+            opacity: ".3"
+          }
+        ),
+        /* @__PURE__ */ jsx("circle", { cx: "99", cy: "365", r: "16", fill: "var(--paw-sun)" }),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M93 351c16 8 18 18 12 28",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "2"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "M426 352v-43m0 22c-14-1-20-10-20-20 15 2 21 11 20 20m0-9c0-15 6-25 20-28 2 13-6 24-20 28",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "3",
+            strokeLinecap: "round"
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          "path",
+          {
+            d: "m406 153 8-6 8 6m-234-33 8-6 8 6",
+            stroke: "var(--paw-art-line)",
+            strokeWidth: "2.5",
+            strokeLinecap: "round"
+          }
+        )
+      ]
+    }
+  );
+}
 function Photo({
   resource,
   mediaUrl,
@@ -301,22 +476,19 @@ function PetsSection({
       }
     ) : /* @__PURE__ */ jsxs("section", { className: "paw-welcome", children: [
       /* @__PURE__ */ jsxs("div", { children: [
+        /* @__PURE__ */ jsx("p", { className: "paw-eyebrow", children: "Life is better together" }),
         /* @__PURE__ */ jsxs("h1", { children: [
-          "Every pet has a story.",
+          "Every pet.",
           /* @__PURE__ */ jsx("br", {}),
-          "Let\u2019s meet yours."
+          /* @__PURE__ */ jsx("em", { children: "A local story." })
         ] }),
         /* @__PURE__ */ jsx("p", { children: "A place for familiar faces, happy reunions and the everyday joy of life with pets." }),
         contributeUrl && /* @__PURE__ */ jsx("a", { className: "paw-button", href: safePetLink(contributeUrl), children: "Submit for Paw of the Week" }),
         /* @__PURE__ */ jsx("small", { children: "Free to enter. Thoughtfully selected by local editors." })
       ] }),
-      /* @__PURE__ */ jsxs("div", { className: "paw-emblem", children: [
-        /* @__PURE__ */ jsx(PawMark, { size: 180 }),
-        /* @__PURE__ */ jsxs("span", { children: [
-          "Good neighbors.",
-          /* @__PURE__ */ jsx("br", {}),
-          "Great companions."
-        ] })
+      /* @__PURE__ */ jsxs("div", { className: "paw-illustration", children: [
+        /* @__PURE__ */ jsx(PawNeighborhoodIllustration, {}),
+        /* @__PURE__ */ jsx("p", { children: "Good neighbors. Great companions." })
       ] })
     ] }),
     !unavailable && /* @__PURE__ */ jsxs(Fragment, { children: [
@@ -441,4 +613,4 @@ function PetsSection({
   ] });
 }
 
-export { AdoptionListingCard, LostPetNotice, PawMark, PawOfTheWeekCard, PetCelebrationCard, PetEventCard, PetFriendlyPlaceCard, PetProfileCard, PetsSection, SponsorAcknowledgment2 as SponsorAcknowledgment };
+export { AdoptionListingCard, LostPetNotice, PawMark, PawNeighborhoodIllustration, PawOfTheWeekCard, PetCelebrationCard, PetEventCard, PetFriendlyPlaceCard, PetProfileCard, PetsSection, SponsorAcknowledgment2 as SponsorAcknowledgment };

package/dist/index.js

@@ -1,9 +1,10 @@
+export { NetworkCopyrightNotice } from './chunk-WAC6ATNP.js';
 export { CURATED_COMMUNITY_CARDS, VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './chunk-FMCHQI7K.js';
+export { MEET_ACTIVITIES, activityLabel, canHostMeetup, isAdult, prepareMeetup, screenMessage } from './chunk-AMLVCZDP.js';
 export { CookieConsentBanner } from './chunk-GOWOYMSG.js';
 export { CookieSettingsView } from './chunk-UL2Q3N26.js';
 export { THEME_COOKIE, THEME_EVENT, THEME_MAX_AGE_SECONDS, THEME_STORAGE_KEY, ThemeToggle, applyTheme, clearTheme, getStoredTheme, getSystemTheme, resolveEffectiveTheme, setTheme, subscribeTheme, themeInitScript } from './chunk-NQD3M7ZY.js';
 export { LocalNetworkBar } from './chunk-2XSW7JZS.js';
-export { NetworkCopyrightNotice } from './chunk-WAC6ATNP.js';
 import { localPublications } from './chunk-JV76ZEIA.js';
 export { COOKIE_CATEGORIES, COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EDITORIAL_PRINCIPLES, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, NETWORK_PARENT, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, communityPublications, decorateNetworkUrl, findPublicationByHost, findPublicationBySlug, getCookieConsent, getNetworkPublicationUrl, hasConsented, isCategoryAllowed, isGeoConsentRequired, listedPublications, localPublications, queryNetworkConsentHub, recordConsentToCompliance, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub } from './chunk-JV76ZEIA.js';
 export { communityMapEmbeds } from './chunk-IMYBSG7J.js';
@@ -11,9 +12,8 @@ export { formatArtworkCaption, parseDocumentBlocks, renderArticleBlocksToHtml, s
 import { definePublication } from './chunk-57YVL6BD.js';
 export { BROADSHEET_THEME, FEATURE_NAMES, LAYOUT_COOKIE, acceptRemoteRecord, acceptSnapshot, definePublication, featureEnabled, parseSnapshot, publicationFromSnapshot, publicationRecord, resolveLayout, snapshotFromRecord, syncPublication } from './chunk-57YVL6BD.js';
 export { CLASSIFIED_CATEGORIES, JOB_EMPLOYMENT_TYPES, categoryLabel, classifiedPath, classifiedSearchPath, clipChars, dealDollars, dealGoPath, dealsFeedPath, employmentLabel, isClassifiedCategory, isEmploymentType, jobEmployerBody, jobOpeningBody, jobPostingBody, prepareClassified, prepareJobPost, publicJobPath, publicJobsPath } from './chunk-C7ZPLH2K.js';
-export { MEET_ACTIVITIES, activityLabel, canHostMeetup, isAdult, prepareMeetup, screenMessage } from './chunk-2MEYHM7M.js';
 export { SPONSORSHIP_OFFERINGS, SPONSORSHIP_POLICY, placementAvailable, safeSponsorUrl } from './chunk-66GI2IX6.js';
-import './chunk-MBBPEFDA.js';
+import './chunk-AFJ6S5WJ.js';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
 // src/editorial.ts

package/dist/meet-forms.js

@@ -1,6 +1,6 @@
 "use client";
-import { MEET_ACTIVITIES } from './chunk-2MEYHM7M.js';
-import './chunk-MBBPEFDA.js';
+import { MEET_ACTIVITIES } from './chunk-AMLVCZDP.js';
+import './chunk-AFJ6S5WJ.js';
 import { useState } from 'react';
 import { jsxs, jsx } from 'react/jsx-runtime';
 

package/dist/meet-view.d.cts

@@ -18,7 +18,7 @@ declare function MeetupDetail({ meetup, joined }: {
     joined: boolean;
 }): React.JSX.Element;
 declare function activityChoices(): {
-    value: "other" | "walk" | "coffee" | "hike" | "pickleball" | "tennis" | "soccer" | "bike" | "dogs" | "books" | "games" | "kids" | "volunteer";
+    value: "walk" | "other" | "coffee" | "hike" | "pickleball" | "tennis" | "soccer" | "bike" | "dogs" | "books" | "games" | "kids" | "volunteer";
     label: string;
 }[];
 

package/dist/meet-view.d.ts

@@ -18,7 +18,7 @@ declare function MeetupDetail({ meetup, joined }: {
     joined: boolean;
 }): React.JSX.Element;
 declare function activityChoices(): {
-    value: "other" | "walk" | "coffee" | "hike" | "pickleball" | "tennis" | "soccer" | "bike" | "dogs" | "books" | "games" | "kids" | "volunteer";
+    value: "walk" | "other" | "coffee" | "hike" | "pickleball" | "tennis" | "soccer" | "bike" | "dogs" | "books" | "games" | "kids" | "volunteer";
     label: string;
 }[];
 

package/dist/meet-view.js

@@ -1,5 +1,5 @@
-import { MEET_ACTIVITIES, activityLabel } from './chunk-2MEYHM7M.js';
-import { PET_SAFETY } from './chunk-MBBPEFDA.js';
+import { MEET_ACTIVITIES, activityLabel } from './chunk-AMLVCZDP.js';
+import { PET_SAFETY } from './chunk-AFJ6S5WJ.js';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 
 function MeetBoard({ region, meetups }) {

package/dist/pets-auth-server.cjs

@@ -56,10 +56,13 @@ async function petRequest(scope, path, init = {}, fetcher = fetch) {
 
 // src/pets-auth-server.ts
 var PAW_SESSION_COOKIE = "__Host-paw-reader";
-var FLOW = "__Host-paw-signin";
+var PAW_FLOW_COOKIE = "__Host-paw-signin";
+var PAW_SIGNED_OUT_COOKIE = "__Host-paw-signed-out";
+var FLOW = PAW_FLOW_COOKIE;
 var attrs = "Path=/; HttpOnly; Secure; SameSite=Lax";
 function pawCookie(request, name = PAW_SESSION_COOKIE) {
-  return request.headers.get("cookie")?.split(";").map((v) => v.trim()).find((v) => v.startsWith(name + "="))?.slice(name.length + 1);
+  const values = (request.headers.get("cookie") || "").split(";").map((v) => v.trim()).filter((v) => v.startsWith(name + "="));
+  return values.length === 1 ? values[0].slice(name.length + 1) : void 0;
 }
 function digest(value) {
   return crypto.createHash("sha256").update(value).digest("hex");
@@ -108,6 +111,15 @@ function createPawAuthHandler(options) {
       const scope = await options.resolve(request), origin = new URL(scope.origin).origin;
       if (!origin.startsWith("https://") || !scope.apiKey)
         return json({ error: "Sign-in is not configured." }, 503);
+      const account = returnPath(options.accountPath || "/account");
+      const sessionCookie = options.sessionCookie || PAW_SESSION_COOKIE;
+      if (!/^[A-Za-z0-9_-]{1,100}$/.test(sessionCookie))
+        throw new Error("Invalid cookie name");
+      const retryPath = (path, reason) => {
+        const target = new URL(returnPath(path), origin);
+        target.searchParams.set("signin", reason);
+        return target.pathname + target.search;
+      };
       const redirect = (path) => new Response(null, {
         status: 303,
         headers: {
@@ -115,33 +127,60 @@ function createPawAuthHandler(options) {
           location: origin + returnPath(path)
         }
       });
-      if (action === "start" && request.method === "POST") {
-        if (request.headers.get("origin") !== origin)
+      const resuming = action === "resume" && request.method === "GET";
+      if (resuming || action === "start" && request.method === "POST") {
+        if (!resuming && request.headers.get("origin") !== origin || resuming && (request.headers.has("sec-fetch-mode") && request.headers.get("sec-fetch-mode") !== "navigate" || request.headers.has("sec-fetch-dest") && request.headers.get("sec-fetch-dest") !== "document"))
           return json({ error: "Sign in from this website." }, 403);
-        const callback = origin + "/api/paw-auth/callback";
+        const next = returnPath(
+          new URL(request.url).searchParams.get("next") || account
+        );
+        if (resuming && pawCookie(request, PAW_SIGNED_OUT_COOKIE))
+          return redirect(retryPath(next, "required"));
+        const callback = origin + returnPath(options.callbackPath || "/api/paw-auth/callback");
         const result = await petRequest(
           scope,
-          "/v1/auth/oauth/ledvery/authorize?" + new URLSearchParams({ redirect_uri: callback }),
+          "/v1/auth/oauth/ledvery/authorize?" + new URLSearchParams({
+            redirect_uri: callback,
+            ...resuming ? { prompt: "none" } : {}
+          }),
           {},
           options.fetch
         );
         const url = new URL(result.url);
-        if (url.origin !== new URL(options.issuerOrigin).origin || url.pathname !== "/authorize" || url.username || url.password || url.searchParams.get("state") !== result.state || url.searchParams.get("redirect_uri") !== callback || url.searchParams.get("code_challenge_method") !== "S256" || !url.searchParams.get("code_challenge"))
+        if (url.protocol !== "https:" || url.origin !== new URL(options.issuerOrigin).origin || url.pathname !== "/authorize" || url.username || url.password || url.searchParams.get("state") !== result.state || url.searchParams.get("redirect_uri") !== callback || url.searchParams.get("code_challenge_method") !== "S256" || !url.searchParams.get("code_challenge"))
           throw new Error("Invalid authorization response");
-        const response = json({ url: url.href });
+        const response = resuming ? new Response(null, {
+          status: 303,
+          headers: { ...petPrivateHeaders, location: url.href }
+        }) : json({ url: url.href });
+        if (!resuming)
+          response.headers.append(
+            "set-cookie",
+            `${PAW_SIGNED_OUT_COOKIE}=; ${attrs}; Max-Age=0`
+          );
         response.headers.append(
           "set-cookie",
-          `${FLOW}=${sealPawFlow(result.state, returnPath(new URL(request.url).searchParams.get("next")), scope.apiKey)}; ${attrs}; Max-Age=600`
+          `${FLOW}=${sealPawFlow(result.state, next, scope.apiKey)}; ${attrs}; Max-Age=600`
         );
         return response;
       }
       if (action === "callback" && request.method === "GET") {
         const query = new URL(request.url).searchParams, code = query.get("code"), state = query.get("state");
         const next = openPawFlow(pawCookie(request, FLOW), state, scope.apiKey);
-        const response = redirect(next || "/account?signin=retry");
+        const response = redirect(next || retryPath(account, "retry"));
         response.headers.append("set-cookie", `${FLOW}=; ${attrs}; Max-Age=0`);
-        if (!next || !code || code.length > 4096 || query.has("error"))
+        if (!next || !code || code.length > 4096 || query.has("error")) {
+          response.headers.set(
+            "location",
+            origin + retryPath(
+              next || account,
+              ["login_required", "consent_required"].includes(
+                query.get("error") || ""
+              ) ? "required" : "retry"
+            )
+          );
           return response;
+        }
         try {
           const session = await petRequest(
             scope,
@@ -162,11 +201,11 @@ function createPawAuthHandler(options) {
             throw new Error("Verified reader required");
           response.headers.append(
             "set-cookie",
-            `${PAW_SESSION_COOKIE}=${session.session_token}; ${attrs}; Expires=${new Date(expiry).toUTCString()}`
+            `${sessionCookie}=${session.session_token}; ${attrs}; Expires=${new Date(expiry).toUTCString()}`
           );
           return response;
         } catch {
-          response.headers.set("location", origin + "/account?signin=retry");
+          response.headers.set("location", origin + retryPath(next, "retry"));
           return response;
         }
       }
@@ -191,7 +230,11 @@ function createPawAuthHandler(options) {
         const response = json({ authenticated: false });
         response.headers.append(
           "set-cookie",
-          `${PAW_SESSION_COOKIE}=; ${attrs}; Max-Age=0`
+          `${sessionCookie}=; ${attrs}; Max-Age=0`
+        );
+        response.headers.append(
+          "set-cookie",
+          `${PAW_SIGNED_OUT_COOKIE}=1; ${attrs}; Max-Age=2592000`
         );
         return response;
       }
@@ -205,7 +248,9 @@ function createPawAuthHandler(options) {
   };
 }
 
+exports.PAW_FLOW_COOKIE = PAW_FLOW_COOKIE;
 exports.PAW_SESSION_COOKIE = PAW_SESSION_COOKIE;
+exports.PAW_SIGNED_OUT_COOKIE = PAW_SIGNED_OUT_COOKIE;
 exports.createPawAuthHandler = createPawAuthHandler;
 exports.openPawFlow = openPawFlow;
 exports.pawCookie = pawCookie;

package/dist/pets-auth-server.d.cts

@@ -4,6 +4,8 @@ import './sponsorships-CtnBe3S8.cjs';
 import './pets.cjs';
 
 declare const PAW_SESSION_COOKIE = "__Host-paw-reader";
+declare const PAW_FLOW_COOKIE = "__Host-paw-signin";
+declare const PAW_SIGNED_OUT_COOKIE = "__Host-paw-signed-out";
 declare function pawCookie(request: Request, name?: string): string | undefined;
 declare function sealPawFlow(state: string, next: string, key: string, now?: number): string;
 declare function openPawFlow(raw: string | undefined, state: string | null, key: string, now?: number): string | null;
@@ -11,7 +13,11 @@ declare function createPawAuthHandler(options: {
     resolve(request: Request): Promise<PetScope>;
     enabled: boolean;
     issuerOrigin: string;
+    /** Reuse the publication’s existing host-only reader cookie and registered callback. */
+    sessionCookie?: string;
+    callbackPath?: string;
+    accountPath?: string;
     fetch?: typeof fetch;
 }): (request: Request, action: string) => Promise<Response>;
 
-export { PAW_SESSION_COOKIE, createPawAuthHandler, openPawFlow, pawCookie, sealPawFlow };
+export { PAW_FLOW_COOKIE, PAW_SESSION_COOKIE, PAW_SIGNED_OUT_COOKIE, createPawAuthHandler, openPawFlow, pawCookie, sealPawFlow };

package/dist/pets-auth-server.d.ts

@@ -4,6 +4,8 @@ import './sponsorships-CtnBe3S8.js';
 import './pets.js';
 
 declare const PAW_SESSION_COOKIE = "__Host-paw-reader";
+declare const PAW_FLOW_COOKIE = "__Host-paw-signin";
+declare const PAW_SIGNED_OUT_COOKIE = "__Host-paw-signed-out";
 declare function pawCookie(request: Request, name?: string): string | undefined;
 declare function sealPawFlow(state: string, next: string, key: string, now?: number): string;
 declare function openPawFlow(raw: string | undefined, state: string | null, key: string, now?: number): string | null;
@@ -11,7 +13,11 @@ declare function createPawAuthHandler(options: {
     resolve(request: Request): Promise<PetScope>;
     enabled: boolean;
     issuerOrigin: string;
+    /** Reuse the publication’s existing host-only reader cookie and registered callback. */
+    sessionCookie?: string;
+    callbackPath?: string;
+    accountPath?: string;
     fetch?: typeof fetch;
 }): (request: Request, action: string) => Promise<Response>;
 
-export { PAW_SESSION_COOKIE, createPawAuthHandler, openPawFlow, pawCookie, sealPawFlow };
+export { PAW_FLOW_COOKIE, PAW_SESSION_COOKIE, PAW_SIGNED_OUT_COOKIE, createPawAuthHandler, openPawFlow, pawCookie, sealPawFlow };