@scalemule/news-publication 0.0.70 → 0.0.73

package/README.md

@@ -246,6 +246,26 @@ Inventory is unavailable until a verified operational placement is active. `plac
 
 The consent banner now offers a choice in every geography where optional measurement requires one. `measurementConsent` is the server gate for current, explicitly allowed categories and GPC/DNT. Positive permission is local: unsigned URL parameters and a binary network hub cannot grant all categories. Rendering sponsorship recognition does not require tracking consent; measuring it requires both performance and advertising permission.
 
+## Reader sign-in through Ledvery
+
+The `reader-sso` (server) and `reader-sso-client` entry points generalize the
+publications' Google sign-in into one Ledvery consumer flow with silent sign-in,
+explicit email sign-in, account linking, precedence between two accounts,
+RP-initiated sign-out and server-recorded telemetry. A site supplies its cookie
+prefix, canonical origin, Ledvery client id and a request adapter that performs
+gateway calls with the site's own API key; the package never sees a credential
+other than that key and the browser only ever sees host-only HttpOnly cookies.
+
+`startSignIn`, `completeSignIn`, `linkAccount`, `switchAccount`, `signOut` and
+`sessionSummary` return cookie instructions and destinations; the site applies
+them with `applyCookies` and answers with private, no-store headers. Merge
+`READER_SSO_EVENTS` into the site's analytics registry and allow
+`READER_SSO_PROPERTY_KEYS` in its property sanitizer. `ReaderSsoBoot` performs at
+most one silent attempt per page load and never on private paths, for bots,
+while typing, in frames or in prerendered documents; the server's negative cache
+makes a loop impossible. `ReaderGreeting` is a client island that renders only a
+first name, in the reader's own time zone and locale, after loading.
+
 ## Community pet sections
 
 The `pets`, `pets-view`, `pets-forms`, `pets-interactions`, `pets-server`,

package/dist/article-workflow-client.cjs

@@ -56,6 +56,17 @@ var PublicationArticleClient = class {
       `/article-workflow/options${articleId ? `?article_id=${encodeURIComponent(articleId)}` : ""}`
     );
   }
+  /** Explicit approver-authorized onboarding for a legacy article; never called by get().
+   * Existing schedules are cancelled by the server; public content remains unchanged.
+   * Missing immutable media identities must be resolved through newsroom media controls.
+   */
+  enableCollaboration(articleId, reviewPolicy) {
+    return this.request(
+      `/articles/${encodeURIComponent(articleId)}/collaboration/enable`,
+      "POST",
+      { review_policy: reviewPolicy }
+    );
+  }
   get(articleId) {
     return this.request(
       `/articles/${encodeURIComponent(articleId)}/collaboration`
@@ -74,13 +85,14 @@ var PublicationArticleClient = class {
       { expected_generation: expectedGeneration }
     );
   }
-  retryProcessing(articleId, expectedVersion, assetSourceFileId) {
+  retryProcessing(articleId, expectedVersion, assetSourceFileId, narrationProfileVersion) {
     return this.request(
       `/articles/${encodeURIComponent(articleId)}/processing`,
       "POST",
       {
         expected_version: expectedVersion,
-        asset_source_file_id: assetSourceFileId
+        asset_source_file_id: assetSourceFileId,
+        narration_profile_version: narrationProfileVersion
       }
     );
   }

package/dist/article-workflow-client.d.cts

@@ -40,6 +40,9 @@ type ArticleProcessing = {
     narration: {
         status: string;
         attempts?: number | null;
+        audio_id?: string | null;
+        job_id?: string | null;
+        profile_override_version?: number | null;
         error_code?: string | null;
         last_progress_at?: string | null;
     };
@@ -59,6 +62,7 @@ type ArticleProcessing = {
 };
 type ArticleWorkflowOptions = {
     workflow_version: number;
+    profile_version: number;
     formats: ArticleFormat[];
     layouts: {
         definition: ArticleLayout;
@@ -128,6 +132,15 @@ declare class PublicationArticleClient {
     });
     private request;
     options(articleId?: string): Promise<ArticleWorkflowOptions>;
+    /** Explicit approver-authorized onboarding for a legacy article; never called by get().
+     * Existing schedules are cancelled by the server; public content remains unchanged.
+     * Missing immutable media identities must be resolved through newsroom media controls.
+     */
+    enableCollaboration(articleId: string, reviewPolicy: "NONE" | "FACT_CHECK" | "CONTRIBUTOR_REVIEW" | "SUBJECT_APPROVAL_REQUIRED" | "SUBJECT_APPROVAL_PLUS_EDITOR"): Promise<{
+        post_id: string;
+        existing?: boolean;
+        current_revision_id?: string;
+    }>;
     get(articleId: string): Promise<Record>;
     processing(articleId: string): Promise<ArticleProcessing>;
     /** Existing private narration path for a saved revision and a before-publication audio policy. */
@@ -136,7 +149,7 @@ declare class PublicationArticleClient {
         audio_id?: string | null;
         job_id?: string | null;
     }>;
-    retryProcessing(articleId: string, expectedVersion: number, assetSourceFileId?: string): Promise<unknown>;
+    retryProcessing(articleId: string, expectedVersion: number, assetSourceFileId?: string, narrationProfileVersion?: number): Promise<unknown>;
     create(key: string, authorProfileId: string, document: ArticleDocument, reviewPolicy?: string): Promise<ArticleOperation>;
     save(key: string, articleId: string, generation: number, document: ArticleDocument, reason?: string): Promise<ArticleOperation>;
     command(articleId: string, generation: number, action: object): Promise<unknown>;

package/dist/article-workflow-client.d.ts

@@ -40,6 +40,9 @@ type ArticleProcessing = {
     narration: {
         status: string;
         attempts?: number | null;
+        audio_id?: string | null;
+        job_id?: string | null;
+        profile_override_version?: number | null;
         error_code?: string | null;
         last_progress_at?: string | null;
     };
@@ -59,6 +62,7 @@ type ArticleProcessing = {
 };
 type ArticleWorkflowOptions = {
     workflow_version: number;
+    profile_version: number;
     formats: ArticleFormat[];
     layouts: {
         definition: ArticleLayout;
@@ -128,6 +132,15 @@ declare class PublicationArticleClient {
     });
     private request;
     options(articleId?: string): Promise<ArticleWorkflowOptions>;
+    /** Explicit approver-authorized onboarding for a legacy article; never called by get().
+     * Existing schedules are cancelled by the server; public content remains unchanged.
+     * Missing immutable media identities must be resolved through newsroom media controls.
+     */
+    enableCollaboration(articleId: string, reviewPolicy: "NONE" | "FACT_CHECK" | "CONTRIBUTOR_REVIEW" | "SUBJECT_APPROVAL_REQUIRED" | "SUBJECT_APPROVAL_PLUS_EDITOR"): Promise<{
+        post_id: string;
+        existing?: boolean;
+        current_revision_id?: string;
+    }>;
     get(articleId: string): Promise<Record>;
     processing(articleId: string): Promise<ArticleProcessing>;
     /** Existing private narration path for a saved revision and a before-publication audio policy. */
@@ -136,7 +149,7 @@ declare class PublicationArticleClient {
         audio_id?: string | null;
         job_id?: string | null;
     }>;
-    retryProcessing(articleId: string, expectedVersion: number, assetSourceFileId?: string): Promise<unknown>;
+    retryProcessing(articleId: string, expectedVersion: number, assetSourceFileId?: string, narrationProfileVersion?: number): Promise<unknown>;
     create(key: string, authorProfileId: string, document: ArticleDocument, reviewPolicy?: string): Promise<ArticleOperation>;
     save(key: string, articleId: string, generation: number, document: ArticleDocument, reason?: string): Promise<ArticleOperation>;
     command(articleId: string, generation: number, action: object): Promise<unknown>;

package/dist/article-workflow-client.js

@@ -54,6 +54,17 @@ var PublicationArticleClient = class {
       `/article-workflow/options${articleId ? `?article_id=${encodeURIComponent(articleId)}` : ""}`
     );
   }
+  /** Explicit approver-authorized onboarding for a legacy article; never called by get().
+   * Existing schedules are cancelled by the server; public content remains unchanged.
+   * Missing immutable media identities must be resolved through newsroom media controls.
+   */
+  enableCollaboration(articleId, reviewPolicy) {
+    return this.request(
+      `/articles/${encodeURIComponent(articleId)}/collaboration/enable`,
+      "POST",
+      { review_policy: reviewPolicy }
+    );
+  }
   get(articleId) {
     return this.request(
       `/articles/${encodeURIComponent(articleId)}/collaboration`
@@ -72,13 +83,14 @@ var PublicationArticleClient = class {
       { expected_generation: expectedGeneration }
     );
   }
-  retryProcessing(articleId, expectedVersion, assetSourceFileId) {
+  retryProcessing(articleId, expectedVersion, assetSourceFileId, narrationProfileVersion) {
     return this.request(
       `/articles/${encodeURIComponent(articleId)}/processing`,
       "POST",
       {
         expected_version: expectedVersion,
-        asset_source_file_id: assetSourceFileId
+        asset_source_file_id: assetSourceFileId,
+        narration_profile_version: narrationProfileVersion
       }
     );
   }

package/dist/chunk-CVD64KP6.js

@@ -0,0 +1,12 @@
+// src/reader-sso-events.ts
+var READER_SSO_EVENTS = {
+  reader_signin_started: { category: "engagement", source: "server" },
+  reader_signin_completed: { category: "conversion", source: "server" },
+  reader_signin_failed: { category: "system", source: "server" },
+  reader_sso_check: { category: "system", source: "server" },
+  reader_signed_out: { category: "engagement", source: "server" },
+  reader_account_linked: { category: "conversion", source: "server" }
+};
+var READER_SSO_PROPERTY_KEYS = ["method", "mode", "is_new", "reason", "outcome", "transaction"];
+
+export { READER_SSO_EVENTS, READER_SSO_PROPERTY_KEYS };

package/dist/index.cjs

@@ -3586,6 +3586,17 @@ function campaignReportHtml(report) {
   <footer><p>${escape(report.reporting_note)}</p><p>${escape(report.editorial_independence)}</p><p>Campaign reference: ${escape(report.campaign_id)}</p></footer></body></html>`;
 }
 
+// src/reader-sso-events.ts
+var READER_SSO_EVENTS = {
+  reader_signin_started: { category: "engagement", source: "server" },
+  reader_signin_completed: { category: "conversion", source: "server" },
+  reader_signin_failed: { category: "system", source: "server" },
+  reader_sso_check: { category: "system", source: "server" },
+  reader_signed_out: { category: "engagement", source: "server" },
+  reader_account_linked: { category: "conversion", source: "server" }
+};
+var READER_SSO_PROPERTY_KEYS = ["method", "mode", "is_new", "reason", "outcome", "transaction"];
+
 // src/article-presentation.ts
 var standard = {
   id: "standard",
@@ -3742,6 +3753,8 @@ exports.NETWORK_PARENT = NETWORK_PARENT;
 exports.NEWS_CACHE = NEWS_CACHE;
 exports.NetworkCopyrightNotice = NetworkCopyrightNotice;
 exports.NewsError = NewsError;
+exports.READER_SSO_EVENTS = READER_SSO_EVENTS;
+exports.READER_SSO_PROPERTY_KEYS = READER_SSO_PROPERTY_KEYS;
 exports.SESSION_IDLE_MS = SESSION_IDLE_MS;
 exports.SPONSORSHIP_OFFERINGS = SPONSORSHIP_OFFERINGS;
 exports.SPONSORSHIP_POLICY = SPONSORSHIP_POLICY;

package/dist/index.d.cts

@@ -17,6 +17,7 @@ export { C as CommunityMapArticleEmbed, c as communityMapEmbeds } from './commun
 export { C as ContentBlock, S as StructuredDocument, a as StructuredMedia, f as formatArtworkCaption, p as parseDocumentBlocks, r as renderArticleBlocksToHtml, s as sanitizeInlineMarkdown } from './article-blocks-DsabIDmH.cjs';
 import { M as Measurement } from './sponsorships-CtnBe3S8.cjs';
 export { a as Campaign, b as CampaignStatus, c as CampaignTarget, C as Creative, d as Placement, e as PlacementType, P as PublicAcknowledgment, S as SPONSORSHIP_OFFERINGS, f as SPONSORSHIP_POLICY, g as SponsorParty, p as placementAvailable, s as safeSponsorUrl } from './sponsorships-CtnBe3S8.cjs';
+export { R as READER_SSO_EVENTS, a as READER_SSO_PROPERTY_KEYS, b as ReaderSsoEventDefinition, c as ReaderSsoEventName } from './reader-sso-events-DBw8pGSM.cjs';
 export { A as ArticleFormat, a as ArticleLayout, b as ArticlePresentation, c as articleFormatLabel, d as articleHeroRatio, e as articlePresentation } from './article-presentation-BrNCcF-5.cjs';
 import './pets.cjs';
 

package/dist/index.d.ts

@@ -17,6 +17,7 @@ export { C as CommunityMapArticleEmbed, c as communityMapEmbeds } from './commun
 export { C as ContentBlock, S as StructuredDocument, a as StructuredMedia, f as formatArtworkCaption, p as parseDocumentBlocks, r as renderArticleBlocksToHtml, s as sanitizeInlineMarkdown } from './article-blocks-DsabIDmH.js';
 import { M as Measurement } from './sponsorships-CtnBe3S8.js';
 export { a as Campaign, b as CampaignStatus, c as CampaignTarget, C as Creative, d as Placement, e as PlacementType, P as PublicAcknowledgment, S as SPONSORSHIP_OFFERINGS, f as SPONSORSHIP_POLICY, g as SponsorParty, p as placementAvailable, s as safeSponsorUrl } from './sponsorships-CtnBe3S8.js';
+export { R as READER_SSO_EVENTS, a as READER_SSO_PROPERTY_KEYS, b as ReaderSsoEventDefinition, c as ReaderSsoEventName } from './reader-sso-events-DBw8pGSM.js';
 export { A as ArticleFormat, a as ArticleLayout, b as ArticlePresentation, c as articleFormatLabel, d as articleHeroRatio, e as articlePresentation } from './article-presentation-BrNCcF-5.js';
 import './pets.js';
 

package/dist/index.js

@@ -1,17 +1,18 @@
+export { LocalNetworkBar } from './chunk-Q77T2S7B.js';
 export { NetworkCopyrightNotice } from './chunk-FWEYKWKP.js';
 export { CURATED_COMMUNITY_CARDS, VerifiedCardComponent, VerifiedCardSection, getArticleCards, isSafeActionUrl } from './chunk-KYUVXEJY.js';
+export { CLASSIFIED_CATEGORIES, JOB_EMPLOYMENT_TYPES, categoryLabel, classifiedPath, classifiedSearchPath, clipChars, dealDollars, dealGoPath, dealsFeedPath, employmentLabel, isClassifiedCategory, isEmploymentType, jobEmployerBody, jobOpeningBody, jobPostingBody, prepareClassified, prepareJobPost, publicJobPath, publicJobsPath } from './chunk-C7ZPLH2K.js';
 export { MEET_ACTIVITIES, activityLabel, canHostMeetup, isAdult, prepareMeetup, screenMessage } from './chunk-AMLVCZDP.js';
 export { CookieConsentBanner } from './chunk-XSAVJJVW.js';
 export { CookieSettingsView } from './chunk-X7AU7DV6.js';
-export { THEME_COOKIE, THEME_EVENT, THEME_MAX_AGE_SECONDS, THEME_STORAGE_KEY, ThemeToggle, applyTheme, clearTheme, getStoredTheme, getSystemTheme, resolveEffectiveTheme, setTheme, subscribeTheme, themeInitScript } from './chunk-NQD3M7ZY.js';
-export { LocalNetworkBar } from './chunk-Q77T2S7B.js';
 import { localPublications } from './chunk-XWXPERLK.js';
 export { COOKIE_CATEGORIES, COOKIE_CONSENT_BACKUP_KEY, COOKIE_CONSENT_EVENT, COOKIE_CONSENT_KEY, COOKIE_CONSENT_MAX_AGE_SECONDS, DEFAULT_CONSENT_HUB_URL, DEFAULT_PREFERENCES_ACCEPTED, DEFAULT_PREFERENCES_REJECTED, EDITORIAL_PRINCIPLES, EU_EEA_UK_COUNTRIES, NETWORK_CONSENT_STORAGE_KEY, NETWORK_PARENT, acceptAllCookies, checkUrlConsentBridge, clearCookieConsent, communityPublications, consentModel, decorateNetworkUrl, effectivePreferences, findPublicationByHost, findPublicationBySlug, getCookieConsent, getNetworkPublicationUrl, hasConsented, impliedPreferences, isCategoryAllowed, isGeoConsentRequired, listedPublications, localPublications, queryNetworkConsentHub, recordConsentToCompliance, rejectOptionalCookies, setCookieConsent, setNetworkConsentHub, topicalPublications } from './chunk-XWXPERLK.js';
+export { THEME_COOKIE, THEME_EVENT, THEME_MAX_AGE_SECONDS, THEME_STORAGE_KEY, ThemeToggle, applyTheme, clearTheme, getStoredTheme, getSystemTheme, resolveEffectiveTheme, setTheme, subscribeTheme, themeInitScript } from './chunk-NQD3M7ZY.js';
 export { communityMapEmbeds } from './chunk-IMYBSG7J.js';
 export { articleFormatLabel, articleHeroRatio, articlePresentation, formatArtworkCaption, parseDocumentBlocks, renderArticleBlocksToHtml, sanitizeInlineMarkdown } from './chunk-DN3TBZLK.js';
 import { definePublication } from './chunk-57YVL6BD.js';
 export { BROADSHEET_THEME, FEATURE_NAMES, LAYOUT_COOKIE, acceptRemoteRecord, acceptSnapshot, definePublication, featureEnabled, parseSnapshot, publicationFromSnapshot, publicationRecord, resolveLayout, snapshotFromRecord, syncPublication } from './chunk-57YVL6BD.js';
-export { CLASSIFIED_CATEGORIES, JOB_EMPLOYMENT_TYPES, categoryLabel, classifiedPath, classifiedSearchPath, clipChars, dealDollars, dealGoPath, dealsFeedPath, employmentLabel, isClassifiedCategory, isEmploymentType, jobEmployerBody, jobOpeningBody, jobPostingBody, prepareClassified, prepareJobPost, publicJobPath, publicJobsPath } from './chunk-C7ZPLH2K.js';
+export { READER_SSO_EVENTS, READER_SSO_PROPERTY_KEYS } from './chunk-CVD64KP6.js';
 export { SPONSORSHIP_OFFERINGS, SPONSORSHIP_POLICY, placementAvailable, safeSponsorUrl } from './chunk-66GI2IX6.js';
 import './chunk-AFJ6S5WJ.js';
 import { jsxs, jsx } from 'react/jsx-runtime';

package/dist/reader-sso-client.cjs

@@ -0,0 +1,364 @@
+"use client";
+'use strict';
+
+var react = require('react');
+var jsxRuntime = require('react/jsx-runtime');
+
+var READER_SSO_BOT_PATTERN = /bot|crawl|spider|headless|lighthouse|pagespeed|preview|slurp|facebookexternalhit|embedly|python|curl|wget|phantom|puppeteer|playwright|selenium|prerender/i;
+var READER_SSO_PRIVATE_PATHS = [
+  /^\/account(\/|$)/,
+  /^\/api(\/|$)/,
+  /^\/review(\/|$)/,
+  /^\/reset-password(\/|$)/,
+  /^\/verify-email(\/|$)/,
+  /^\/claim(\/|$)/,
+  /^\/tip(\/|$)/,
+  /^\/news\/unsubscribe(\/|$)/,
+  /^\/pets\/account(\/|$)/,
+  /^\/newsletter(\/|$)/
+];
+var FLOW_QUERY = ["signin", "signed_out", "switch", "link", "subscription", "code", "state", "error"];
+var READER_SSO_ATTEMPT_WINDOW_MS = 5 * 6e4;
+function silentSignInDecision(env) {
+  if (!env.enabled) return { attempt: false, reason: "disabled" };
+  if (env.hasSession) return { attempt: false, reason: "session" };
+  if (env.suppressed) return { attempt: false, reason: "suppressed" };
+  if (env.webdriver) return { attempt: false, reason: "webdriver" };
+  if (!env.userAgent || READER_SSO_BOT_PATTERN.test(env.userAgent)) return { attempt: false, reason: "bot" };
+  if (env.framed) return { attempt: false, reason: "framed" };
+  if (env.prerendering || env.visibilityState !== "visible") return { attempt: false, reason: "hidden" };
+  if ((env.privatePaths ?? READER_SSO_PRIVATE_PATHS).some((pattern) => pattern.test(env.pathname))) return { attempt: false, reason: "private" };
+  const params = new URLSearchParams(env.search);
+  if (FLOW_QUERY.some((key) => params.has(key))) return { attempt: false, reason: "flow" };
+  if (env.fieldFocused) return { attempt: false, reason: "typing" };
+  if (env.lastAttemptAt !== null && env.now - env.lastAttemptAt < READER_SSO_ATTEMPT_WINDOW_MS) return { attempt: false, reason: "recent" };
+  return { attempt: true };
+}
+function silentSignInUrl(startPath, pathname, search) {
+  return `${startPath}?${new URLSearchParams({ mode: "silent", next: pathname + search })}`;
+}
+function isFormField(element) {
+  if (!element) return false;
+  const tag = element.tagName;
+  return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || element.isContentEditable === true;
+}
+var ATTEMPT_KEY = "reader-sso-attempt-v1";
+function readAttempt() {
+  try {
+    const raw = window.sessionStorage.getItem(ATTEMPT_KEY);
+    const value = raw ? Number(raw) : NaN;
+    return Number.isFinite(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function writeAttempt(now) {
+  try {
+    window.sessionStorage.setItem(ATTEMPT_KEY, String(now));
+  } catch {
+  }
+}
+function browserEnvironment(flags) {
+  const doc = document;
+  let framed = false;
+  try {
+    framed = window.top !== window.self;
+  } catch {
+    framed = true;
+  }
+  return {
+    ...flags,
+    webdriver: navigator.webdriver === true,
+    userAgent: navigator.userAgent,
+    pathname: location.pathname,
+    search: location.search,
+    fieldFocused: isFormField(document.activeElement),
+    prerendering: doc.prerendering === true,
+    visibilityState: document.visibilityState,
+    framed,
+    lastAttemptAt: readAttempt(),
+    now: Date.now()
+  };
+}
+function ReaderSsoBoot({ enabled = true, hasSession: hasSessionCookie, suppressed, startPath = "/api/news/ledvery-start", sessionPath = "/api/news/session", privatePaths, idleDelayMs = 1500 }) {
+  const [staleCookie, setStaleCookie] = react.useState(false);
+  react.useEffect(() => {
+    if (!enabled || !hasSessionCookie || staleCookie) return;
+    let cancelled = false;
+    fetch(sessionPath, { credentials: "same-origin", cache: "no-store" }).then((response) => response.json()).then((body) => {
+      if (!cancelled && body?.authenticated !== true) setStaleCookie(true);
+    }).catch(() => {
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [enabled, hasSessionCookie, staleCookie, sessionPath]);
+  const hasSession = hasSessionCookie && !staleCookie;
+  react.useEffect(() => {
+    if (silentSignInDecision(browserEnvironment({ enabled, hasSession, suppressed, privatePaths })).attempt !== true) return;
+    let cancelled = false;
+    let idle;
+    const go = () => {
+      if (cancelled) return;
+      const env = browserEnvironment({ enabled, hasSession, suppressed, privatePaths });
+      if (silentSignInDecision(env).attempt !== true) return;
+      writeAttempt(env.now);
+      window.location.assign(silentSignInUrl(startPath, env.pathname, env.search));
+    };
+    const whenIdle = () => {
+      const w = window;
+      if (typeof w.requestIdleCallback === "function") idle = w.requestIdleCallback(() => {
+        idle = window.setTimeout(go, idleDelayMs);
+      }, { timeout: 4e3 });
+      else idle = window.setTimeout(go, idleDelayMs);
+    };
+    if (document.readyState === "complete") whenIdle();
+    else window.addEventListener("load", whenIdle, { once: true });
+    return () => {
+      cancelled = true;
+      window.removeEventListener("load", whenIdle);
+      if (idle !== void 0) window.clearTimeout(idle);
+    };
+  }, [enabled, hasSession, suppressed, startPath, privatePaths, idleDelayMs]);
+  return null;
+}
+function firstName(fullName) {
+  if (typeof fullName !== "string") return "";
+  const token = fullName.replace(/[\u0000-\u001f\u007f]/g, " ").trim().split(/\s+/u)[0] ?? "";
+  return Array.from(token).slice(0, 40).join("");
+}
+function localHour(now, timeZone, locale) {
+  const options = { hour: "numeric", hourCycle: "h23" };
+  const attempts = [[locale ?? void 0, timeZone ?? void 0], [void 0, timeZone ?? void 0], [void 0, void 0]];
+  for (const [loc, tz] of attempts) {
+    try {
+      const part = new Intl.DateTimeFormat(loc, { ...options, ...tz ? { timeZone: tz } : {} }).formatToParts(now).find((p) => p.type === "hour");
+      const hour = part ? Number(part.value) : NaN;
+      if (Number.isInteger(hour) && hour >= 0 && hour < 24) return hour;
+    } catch {
+    }
+  }
+  return now.getHours();
+}
+function greetingWord(hour) {
+  if (hour >= 5 && hour < 12) return "Good morning";
+  if (hour >= 12 && hour < 18) return "Good afternoon";
+  return "Good evening";
+}
+function greetingText(profile, now = /* @__PURE__ */ new Date(), fallback = "Welcome back") {
+  const name = firstName(profile.full_name);
+  if (!name) return fallback;
+  return `${greetingWord(localHour(now, profile.time_zone, profile.locale))}, ${name}`;
+}
+function ReaderGreeting({ endpoint = "/api/news/session", className, fallback = "Welcome back", as: Tag = "span" }) {
+  const [text, setText] = react.useState(null);
+  react.useEffect(() => {
+    let alive = true;
+    const controller = new AbortController();
+    fetch(endpoint, { credentials: "same-origin", cache: "no-store", signal: controller.signal }).then((response) => response.ok ? response.json() : null).then((summary) => {
+      if (!alive || !summary || summary.authenticated !== true) return;
+      setText(greetingText(summary, /* @__PURE__ */ new Date(), fallback));
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+      controller.abort();
+    };
+  }, [endpoint, fallback]);
+  if (text === null) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx(Tag, { className, "data-reader-greeting": "", children: text });
+}
+async function postJson(endpoint, body, timeoutMs = 3e4) {
+  const response = await fetch(endpoint, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify(body),
+    credentials: "same-origin",
+    signal: AbortSignal.timeout(timeoutMs)
+  });
+  const data = await response.json().catch(() => ({}));
+  if (!response.ok) throw Object.assign(new Error(data.error || "Please try again."), { mfaRequired: data.mfa_required === true });
+  return data;
+}
+function GoogleMark() {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "20", height: "20", viewBox: "0 0 24 24", "aria-hidden": "true", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M21.805 10.023H12.24v3.955h5.483c-.237 1.273-.958 2.352-2.042 3.073v2.552h3.305c1.936-1.782 3.05-4.41 3.05-7.603 0-.676-.06-1.326-.171-1.977Z", fill: "#4285F4" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12.24 22c2.745 0 5.047-.909 6.73-2.447l-3.305-2.552c-.918.615-2.094.978-3.425.978-2.636 0-4.87-1.78-5.67-4.173H3.154v2.632A10.16 10.16 0 0 0 12.24 22Z", fill: "#34A853" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M6.57 13.806A6.112 6.112 0 0 1 6.253 12c0-.627.109-1.235.317-1.806V7.562H3.154A10.157 10.157 0 0 0 2 12c0 1.633.39 3.177 1.154 4.438l3.416-2.632Z", fill: "#FBBC04" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12.24 6.02c1.493 0 2.833.514 3.888 1.523l2.913-2.913C17.281 2.998 14.979 2 12.24 2A10.16 10.16 0 0 0 3.154 7.562l3.416 2.632c.8-2.393 3.034-4.174 5.67-4.174Z", fill: "#EA4335" })
+  ] });
+}
+function MailMark() {
+  return /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "20", height: "20", viewBox: "0 0 24 24", "aria-hidden": "true", fill: "none", stroke: "currentColor", strokeWidth: "1.8", strokeLinecap: "round", strokeLinejoin: "round", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("rect", { x: "3", y: "5", width: "18", height: "14", rx: "2" }),
+    /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m3 7 9 6 9-6" })
+  ] });
+}
+var LEDVERY_BUTTON_LABELS = {
+  google: { label: "Continue with Google", busy: "Opening Google\u2026" },
+  email: { label: "Continue with email", busy: "Opening sign-in\u2026" }
+};
+function LedveryButton({
+  provider = "google",
+  subscribe = false,
+  disabled = false,
+  returnTo = "",
+  startPath = "/api/news/ledvery-start",
+  label,
+  busyLabel,
+  description,
+  classNames = {},
+  onStart
+}) {
+  const [busy, setBusy] = react.useState(false);
+  const [error, setError] = react.useState("");
+  const descriptionId = react.useId();
+  const labels = LEDVERY_BUTTON_LABELS[provider];
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: classNames.wrapper, "data-reader-signin": provider, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(
+      "button",
+      {
+        type: "button",
+        className: classNames.button,
+        disabled: busy || disabled,
+        "aria-describedby": description ? descriptionId : void 0,
+        onClick: async () => {
+          setBusy(true);
+          setError("");
+          try {
+            onStart?.(provider);
+          } catch {
+          }
+          try {
+            const data = await postJson(startPath, { provider, subscribe, consent: subscribe, returnTo });
+            if (!data.url) throw new Error("Sign-in is temporarily unavailable. Please try again.");
+            window.location.assign(data.url);
+          } catch (e) {
+            setError(e instanceof Error ? e.message : "Please try again.");
+            setBusy(false);
+          }
+        },
+        children: [
+          provider === "google" ? /* @__PURE__ */ jsxRuntime.jsx(GoogleMark, {}) : /* @__PURE__ */ jsxRuntime.jsx(MailMark, {}),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: busy ? busyLabel ?? labels.busy : label ?? labels.label })
+        ]
+      }
+    ),
+    description && /* @__PURE__ */ jsxRuntime.jsx("p", { id: descriptionId, className: classNames.fine, children: description }),
+    error && /* @__PURE__ */ jsxRuntime.jsx("p", { role: "alert", className: classNames.error, children: error })
+  ] });
+}
+function AccountLinkForm({
+  challengeId,
+  hint = "",
+  endpoint = "/api/news/ledvery-link",
+  next = "",
+  subscribe = false,
+  classNames = {},
+  onLinked,
+  onCancel
+}) {
+  const [busy, setBusy] = react.useState(false);
+  const [error, setError] = react.useState("");
+  const [password, setPassword] = react.useState("");
+  const [mfaRequired, setMfaRequired] = react.useState(false);
+  const [code, setCode] = react.useState("");
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "form",
+    {
+      className: classNames.form,
+      "data-reader-link": "",
+      onSubmit: (event) => {
+        event.preventDefault();
+        setBusy(true);
+        setError("");
+        postJson(endpoint, { challenge_id: challengeId, password, next, subscribe, ...mfaRequired && code ? { mfa_code: code } : {} }).then((result) => {
+          setPassword("");
+          setCode("");
+          if (onLinked) onLinked(result);
+          else window.location.assign(result.location || "/account");
+        }).catch((e) => {
+          if (e?.mfaRequired) setMfaRequired(true);
+          setCode("");
+          setError(e instanceof Error ? e.message : "Please try again.");
+          setBusy(false);
+        });
+      },
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { children: "You already have a reader account" }),
+        /* @__PURE__ */ jsxRuntime.jsxs("p", { className: classNames.fine, children: [
+          hint ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+            "An account for ",
+            /* @__PURE__ */ jsxRuntime.jsx("strong", { children: hint }),
+            " already exists. "
+          ] }) : null,
+          "Enter its password once to connect your sign-in. Your preferences and subscriptions stay as they are."
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("label", { children: [
+          "Reader account password",
+          /* @__PURE__ */ jsxRuntime.jsx("input", { type: "password", autoComplete: "current-password", required: true, minLength: 1, maxLength: 1024, value: password, onChange: (e) => setPassword(e.target.value) })
+        ] }),
+        mfaRequired && /* @__PURE__ */ jsxRuntime.jsxs("label", { children: [
+          "Authentication code",
+          /* @__PURE__ */ jsxRuntime.jsx("input", { type: "text", inputMode: "numeric", autoComplete: "one-time-code", required: true, maxLength: 32, value: code, onChange: (e) => setCode(e.target.value) })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: classNames.button, disabled: busy || !password || mfaRequired && !code, children: busy ? "Connecting\u2026" : "Connect and sign in" }),
+        onCancel && /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", className: classNames.secondary, disabled: busy, onClick: onCancel, children: "Start over" }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("p", { role: "alert", className: classNames.error, children: error })
+      ]
+    }
+  );
+}
+function AccountSwitchPrompt({
+  currentName,
+  pendingName,
+  endpoint = "/api/news/switch-account",
+  classNames = {},
+  onDone
+}) {
+  const [busy, setBusy] = react.useState(null);
+  const [error, setError] = react.useState("");
+  const current = firstName(currentName) || "your current account";
+  const pending = firstName(pendingName) || "the new account";
+  const choose = (choice) => {
+    setBusy(choice);
+    setError("");
+    postJson(endpoint, { choice }).then((result) => {
+      if (onDone) onDone({ ...result, choice });
+      else window.location.assign(result.location || "/account");
+    }).catch((e) => {
+      setError(e instanceof Error ? e.message : "Please try again.");
+      setBusy(null);
+    });
+  };
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: classNames.wrapper, "data-reader-switch": "", role: "group", "aria-label": "Choose an account", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("h2", { children: "Which account would you like to use?" }),
+    /* @__PURE__ */ jsxRuntime.jsxs("p", { className: classNames.fine, children: [
+      "You are signed in as ",
+      current,
+      ". A different account, ",
+      pending,
+      ", just signed in through Ledvery."
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", className: classNames.button, disabled: busy !== null, onClick: () => choose("continue"), children: busy === "continue" ? "Switching\u2026" : `Continue as ${pending}` }),
+    /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", className: classNames.secondary, disabled: busy !== null, onClick: () => choose("stay"), children: busy === "stay" ? "One moment\u2026" : `Stay as ${current}` }),
+    error && /* @__PURE__ */ jsxRuntime.jsx("p", { role: "alert", className: classNames.error, children: error })
+  ] });
+}
+
+exports.AccountLinkForm = AccountLinkForm;
+exports.AccountSwitchPrompt = AccountSwitchPrompt;
+exports.LEDVERY_BUTTON_LABELS = LEDVERY_BUTTON_LABELS;
+exports.LedveryButton = LedveryButton;
+exports.READER_SSO_ATTEMPT_WINDOW_MS = READER_SSO_ATTEMPT_WINDOW_MS;
+exports.READER_SSO_BOT_PATTERN = READER_SSO_BOT_PATTERN;
+exports.READER_SSO_PRIVATE_PATHS = READER_SSO_PRIVATE_PATHS;
+exports.ReaderGreeting = ReaderGreeting;
+exports.ReaderSsoBoot = ReaderSsoBoot;
+exports.firstName = firstName;
+exports.greetingText = greetingText;
+exports.greetingWord = greetingWord;
+exports.isFormField = isFormField;
+exports.localHour = localHour;
+exports.silentSignInDecision = silentSignInDecision;
+exports.silentSignInUrl = silentSignInUrl;