edgepress 2026.9.8 → 2026.9.10

package/content/posts/2026-09-27-edgepress-release-2026-9-10/zh-cn.md

@@ -0,0 +1,31 @@
+---
+title: EdgePress 2026 年 9 月更新：第 10 次需求
+author: toewpq
+date: 2026-09-27
+lang: zh-CN
+slug: edgepress-release-2026-9-10
+tags:
+  - 发布
+  - 多语言
+  - 隐私
+  - 主题
+description: 修复跨语言切换后的隐私选择，支持本地化站内链接，改进文章标签、搜索脚本和 SVG 图标。
+---
+
+这是 EdgePress 在 2026 年 9 月针对第 10 次需求的更新。
+
+## 切换语言后保留隐私选择
+
+隐私选择现在使用跨语言一致的配置校验，切换页面语言时会继续生效。现有的旧版选择会自动迁移；当告知日期或服务配置变化时，仍会重新征求选择。
+
+## 按当前语言生成站内链接
+
+页面块链接可使用 `/[launge]/quick-start/`。生成页面时，这个标记会替换为当前语言路径；默认语言会省略语言段。中文首页的指南链接现在会打开对应的中文页面。
+
+## 改进文章标签和搜索
+
+文章底部会以清楚可见的链接显示标签，并可打开对应的标签页。搜索脚本只在搜索页面加载，标签使用原生链接，无需 JavaScript。
+
+## 重绘图标并简化隐私说明
+
+重绘了设置和插头 SVG 图标。隐私政策以日常用语说明选择保存在访客设备上，不再显示内部存储键名称。

package/languages/base/en.json

@@ -24,7 +24,8 @@
   "searchResultCount": "Matching articles: {count}.",
   "markdownTaskComplete": "Task complete",
   "markdownTaskIncomplete": "Task incomplete",
-  "postContents": "On this page",
+  "postContents": "Contents",
+  "closeContents": "Close contents",
   "feed": "Atom feed",
   "languageName": "English",
   "mainNavigationLabel": "Main navigation",
@@ -37,26 +38,29 @@
   "postAuthor": "By {author}",
   "privacySettings": "Privacy settings",
   "privacyNotice": "Privacy choices",
-  "privacyIntro": "Optional services stay off until you choose. Accept or reject them now, or review each service before saving a custom choice.",
-  "acceptOptional": "Accept all",
+  "privacyIntro": "Optional services stay off until you choose.",
+  "acceptOptional": "Allow all",
   "rejectOptional": "Reject optional",
   "savePreferences": "Save choices",
   "optionalServices": "Optional services",
-  "noIntegrations": "No optional services are configured.",
+  "noIntegrations": "No optional services are active.",
   "privacyPolicy": "Privacy policy",
-  "privacyController": "Site operator",
+  "privacyController": "Operator",
+  "privacyContact": "Contact",
   "servicePurpose": "Purpose",
   "serviceDataCategories": "Data used",
   "serviceRecipient": "Recipient",
   "serviceRetention": "Retention",
-  "reviewDetails": "Review data and service settings",
-  "managePrivacy": "Manage choices",
-  "essentialStorage": "Your choice is saved in this browser for up to {days} days. This preference storage is required to remember your choice.",
+  "servicePrivacyDetails": "Privacy information",
+  "servicePrivacyLink": "Open policy",
+  "reviewDetails": "Details",
+  "essentialStorage": "Choice saved on this device for up to {days} days.",
   "pluginTracking": "Tracking",
   "pluginStatistics": "Statistics",
   "pluginAdvertising": "Advertising",
   "pluginCaptcha": "Human verification",
   "consentReload": "Your choice was saved. Reloading to apply the updated settings.",
   "agentSummary": "Project guides and reference pages for the EdgePress website builder.",
-  "closePrivacy": "Close settings"
+  "closePrivacy": "Close settings",
+  "consentStoredOnDevice": "This device"
 }

package/languages/packs/zh-CN.json

@@ -25,6 +25,7 @@
   "markdownTaskComplete": "任务已完成",
   "markdownTaskIncomplete": "任务未完成",
   "postContents": "文章目录",
+  "closeContents": "关闭目录",
   "feed": "Atom 订阅",
   "languageName": "简体中文",
   "mainNavigationLabel": "主导航",
@@ -37,26 +38,29 @@
   "postAuthor": "作者：{author}",
   "privacySettings": "隐私设置",
   "privacyNotice": "隐私选择",
-  "privacyIntro": "可选服务默认关闭。你可以立即全部接受或拒绝，也可以先查看各项服务并保存自定义选择。",
-  "acceptOptional": "全部接受",
+  "privacyIntro": "可选服务仅在你选择后启用。",
+  "acceptOptional": "全部允许",
   "rejectOptional": "拒绝可选服务",
   "savePreferences": "保存选择",
   "optionalServices": "可选服务",
-  "noIntegrations": "尚未配置可选服务。",
+  "noIntegrations": "当前没有启用可选服务。",
   "privacyPolicy": "隐私政策",
-  "privacyController": "网站运营者",
+  "privacyController": "运营者",
+  "privacyContact": "联系邮箱",
   "servicePurpose": "用途",
   "serviceDataCategories": "涉及的数据",
   "serviceRecipient": "接收方",
   "serviceRetention": "保留期限",
-  "reviewDetails": "查看数据详情并管理服务",
-  "managePrivacy": "管理选择",
-  "essentialStorage": "此浏览器会保存你的选择，最长 {days} 天。这项偏好存储用于记住你的选择。",
+  "servicePrivacyDetails": "隐私说明",
+  "servicePrivacyLink": "查看政策",
+  "reviewDetails": "详情",
+  "essentialStorage": "选择保存在此设备，最长 {days} 天。",
   "pluginTracking": "跟踪",
   "pluginStatistics": "统计",
   "pluginAdvertising": "广告",
   "pluginCaptcha": "人机验证",
   "consentReload": "选择已保存，正在重新载入以应用设置。",
   "agentSummary": "EdgePress 网站构建器的项目指南与参考文档。",
-  "closePrivacy": "关闭设置"
+  "closePrivacy": "关闭设置",
+  "consentStoredOnDevice": "此设备"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "edgepress",
-  "version": "2026.9.8",
+  "version": "2026.9.10",
   "description": "A static website builder for Cloudflare Workers with editable pages, Markdown posts, local search, themes, and consent-gated integrations.",
   "type": "module",
   "bin": {

package/plugins/consent/index.js

@@ -20,9 +20,9 @@ export default function consentManager(api) {
     const locale = page?.locale || config.i18n.defaultLocale;
     const ui = Object.fromEntries([
       'privacySettings', 'privacyNotice', 'privacyIntro', 'acceptOptional', 'rejectOptional',
-      'savePreferences', 'optionalServices', 'noIntegrations', 'privacyPolicy', 'privacyController',
-      'servicePurpose', 'serviceDataCategories', 'serviceRecipient', 'serviceRetention', 'consentReload',
-      'closePrivacy', 'reviewDetails', 'managePrivacy', 'essentialStorage', 'pluginTracking',
+      'savePreferences', 'optionalServices', 'noIntegrations', 'privacyPolicy', 'privacyController', 'privacyContact',
+      'serviceDataCategories', 'serviceRecipient', 'serviceRetention', 'servicePrivacyDetails', 'servicePrivacyLink', 'consentReload',
+      'closePrivacy', 'reviewDetails', 'essentialStorage', 'pluginTracking',
       'pluginStatistics', 'pluginAdvertising', 'pluginCaptcha'
     ].map((key) => [key, translate(config, locale, key)]));
     const services = ['tracking', 'statistics', 'advertising', 'captcha'].flatMap((group) =>
@@ -34,7 +34,21 @@ export default function consentManager(api) {
       integrations: services
     };
     if (privacy.policyUrl.startsWith('/')) privacy.policyUrl = localizedUrl(config, locale, privacy.policyUrl);
-    const payload = safeJson({ privacy, ui, siteLanguage: locale, defaultLocale: config.i18n.defaultLocale });
+    const choiceFingerprint = JSON.stringify({
+      controller: config.privacy.controller,
+      policyUrl: config.privacy.policyUrl,
+      consent: config.browserPlugins.consent,
+      integrations: services
+    });
+    const legacyChoiceFingerprints = config.i18n.locales.map((legacyLocale) => JSON.stringify({
+      controller: config.privacy.controller,
+      policyUrl: config.privacy.policyUrl.startsWith('/')
+        ? localizedUrl(config, legacyLocale, config.privacy.policyUrl)
+        : config.privacy.policyUrl,
+      consent: config.browserPlugins.consent,
+      integrations: services
+    }));
+    const payload = safeJson({ privacy, ui, siteLanguage: locale, defaultLocale: config.i18n.defaultLocale, choiceFingerprint, legacyChoiceFingerprints });
     const integration = '<script type="application/json" id="edgepress-privacy-config">' + payload + '</script>' +
       '<script src="/edgepress/plugins/consent/manager.js" defer></script>';
     return html.replace(/<\/body\s*>/i, integration + '</body>');

package/project-compatibility.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "frameworkVersion": "2026.9.8",
+  "frameworkVersion": "2026.9.10",
   "requirements": {
     "nodeMajor": 22,
     "nodeMinimumVersion": "22.12.0",
@@ -31,7 +31,9 @@
     { "name": "Consent-nested browser services and generated privacy disclosures", "stage": "experimental", "since": "2026.9.7" },
     { "name": "Responsive homepage imagery and chronological all-post archives", "stage": "experimental", "since": "2026.9.7" },
     { "name": "Date-versioned localized consent disclosures with isolated responsive checks", "stage": "experimental", "since": "2026.9.8" },
-    { "name": "Markdown video syntax and locale-deduplicated chronological post lists", "stage": "experimental", "since": "2026.9.8" }
+    { "name": "Markdown video syntax and locale-deduplicated chronological post lists", "stage": "experimental", "since": "2026.9.8" },
+    { "name": "Floating post contents and compact consent controls", "stage": "experimental", "since": "2026.9.9" },
+    { "name": "Locale-stable consent choices and localized page-block links", "stage": "experimental", "since": "2026.9.10" }
   ],
   "releaseHistory": [
     {
@@ -81,6 +83,18 @@
       "date": "2026-09-26",
       "request": 8,
       "notes": "Replace consent version counters with proposed and effective dates; localize service data disclosures; audit the consent component independently from page layout; add Markdown video rendering; fix unique localized archive ordering and Markdown excerpts."
+    },
+    {
+      "version": "2026.9.9",
+      "date": "2026-09-26",
+      "request": 9,
+      "notes": "Add a floating post contents widget, compact consent controls, supplier privacy links, and fuller bilingual privacy disclosures."
+    },
+    {
+      "version": "2026.9.10",
+      "date": "2026-09-27",
+      "request": 10,
+      "notes": "Keep consent choices across locale changes and migrate existing records; add localized page-block links; make article tags clear; load search only where needed; redraw icons and simplify privacy wording."
     }
   ]
 }

package/src/config.js

@@ -260,7 +260,16 @@ function validateBrowserPlugins(config) {
       validateLocalizedServiceText(service.dataCategories, 'Service ' + id + '.dataCategories', 600, locales);
       validateLocalizedServiceText(service.recipient, 'Service ' + id + '.recipient', 200, locales);
       validateLocalizedServiceText(service.retention, 'Service ' + id + '.retention', 300, locales);
-      const allowedKeys = new Set(['id', 'provider', 'name', 'purpose', 'dataCategories', 'recipient', 'retention', definition.credential]);
+      if (typeof service.privacyUrl !== 'string' || service.privacyUrl.length > 2048 || /[\x00-\x20]/.test(service.privacyUrl)) {
+        throw new Error('Service ' + id + '.privacyUrl must be a safe HTTPS URL');
+      }
+      let safePrivacyUrl = false;
+      try {
+        const parsed = new URL(service.privacyUrl);
+        safePrivacyUrl = parsed.protocol === 'https:' && !parsed.username && !parsed.password;
+      } catch { safePrivacyUrl = false; }
+      if (!safePrivacyUrl) throw new Error('Service ' + id + '.privacyUrl must be a safe HTTPS URL');
+      const allowedKeys = new Set(['id', 'provider', 'name', 'purpose', 'dataCategories', 'recipient', 'retention', 'privacyUrl', definition.credential]);
       for (const key of Object.keys(service)) if (!allowedKeys.has(key)) throw new Error('Unsupported option for service ' + id + ': ' + key);
       const credential = service[definition.credential];
       if (typeof credential !== 'string' || !definition.pattern.test(credential)) throw new Error('Service ' + id + ' needs a valid public ' + definition.credential);

package/src/generators.js

@@ -4,6 +4,7 @@ import { renderLayout } from './theme.js';
 import { localizedUrl, translate } from './i18n.js';
 import { postsForLocale, slugify, sortPostsNewest } from './content.js';
 import { mapLimit } from './concurrency.js';
+import { renderIcon } from './icons.js';
 
 function escapeHtml(value) {
   return String(value ?? '').replace(/[&<>"']/g, (char) => ({
@@ -72,8 +73,14 @@ function addPostContents(html, locale, config) {
   const items = headings.map((heading) => '<li class="post-toc-level-' + heading.level + '"><a href="#' +
     escapeHtml(heading.id) + '">' + escapeHtml(heading.label) + '</a></li>').join('');
   const contentsLabel = translate(config, locale, 'postContents');
-  const toc = '<nav class="post-toc" aria-label="' + escapeHtml(contentsLabel) + '"><h2 id="post-toc-title">' +
-    escapeHtml(contentsLabel) + '</h2><ol>' + items + '</ol></nav>';
+  const closeContents = translate(config, locale, 'closeContents');
+  const toc = '<aside class="post-toc-widget" data-post-toc hidden>' +
+    '<button class="post-toc-toggle" type="button" aria-expanded="false" aria-controls="post-toc-panel" aria-label="' +
+    escapeHtml(contentsLabel) + '">' + renderIcon('book-open', 'post-toc-icon') + '<span>' + escapeHtml(contentsLabel) + '</span></button>' +
+    '<nav class="post-toc-panel" id="post-toc-panel" aria-labelledby="post-toc-title" aria-label="' +
+    escapeHtml(contentsLabel) + '" hidden><div class="post-toc-heading"><h2 id="post-toc-title">' + escapeHtml(contentsLabel) +
+    '</h2><button class="post-toc-close" type="button" aria-label="' + escapeHtml(closeContents) + '"><span aria-hidden="true">×</span></button></div>' +
+    '<ol>' + items + '</ol></nav></aside>';
   return { html: content, toc };
 }
 
@@ -231,8 +238,9 @@ export async function generateBuiltinRoutes(site, config, extensions) {
       const body = '<article class="post"><header><h1>' + escapeHtml(post.title) + '</h1><p class="meta"><time datetime="' + post.date.toISOString() + '">' +
         escapeHtml(dateLabel(post.date, locale)) + '</time>' + (post.author ? ' · ' + renderPostAuthor(post, locale, config) : '') +
         '</p></header>' + renderPostVideo(post.video, locale) + renderedMarkdown.toc + '<div class="post-content">' + renderedMarkdown.html + '</div>' +
-        (post.tags.length ? '<p class="tags">' + escapeHtml(label('tags')) + ': ' + post.tags.map((tag) => '<a href="' +
-          escapeHtml(localizedUrl(config, locale, 'tags/' + tagSlug(tag) + '/')) + '">' + escapeHtml(tag) + '</a>').join(' ') + '</p>' : '') + '</article>';
+        (post.tags.length ? '<nav class="post-tags" aria-label="' + escapeHtml(label('tags')) + '"><span class="post-tags-label">' + escapeHtml(label('tags')) + ':</span><ul>' +
+          post.tags.map((tag) => '<li><a rel="tag" href="' + escapeHtml(localizedUrl(config, locale, 'tags/' + tagSlug(tag) + '/')) + '">' + escapeHtml(tag) + '</a></li>').join('') +
+          '</ul></nav>' : '') + '</article>';
       const canonicalPath = urlFor(post.path);
       return pageRoute(post.path + 'index.html', post.title, post.description || plainText(post.markdown).slice(0, 160), body,
         locale, config, extensions, {
@@ -308,8 +316,7 @@ export async function generateBuiltinRoutes(site, config, extensions) {
       'aria-describedby="edgepress-search-hint"><button type="submit">' + escapeHtml(label('searchButton')) + '</button></div>' +
       '<p id="edgepress-search-hint">' + escapeHtml(label('searchHint')) + '</p></form><p id="edgepress-search-status" role="status" aria-live="polite">' +
       escapeHtml(label('searchPrompt')) + '</p><ol id="edgepress-search-results" class="local-search-results"></ol>' +
-      '<noscript><p>' + escapeHtml(label('searchNeedsJavaScript')) + '</p></noscript></section>' +
-      '<script defer src="/edgepress/search.js"></script>';
+      '<noscript><p>' + escapeHtml(label('searchNeedsJavaScript')) + '</p></noscript></section>';
     routes.push(await pageRoute(prefix + 'search/index.html', label('searchPosts'), label('searchIntro'), searchBody,
       locale, config, extensions));
 

package/src/page-blocks.js

@@ -29,6 +29,19 @@ function safeUrl(value, label) {
   return url;
 }
 
+function localizedSiteUrl(value, label, context) {
+  const url = safeUrl(value, label);
+  if (!url.startsWith('/')) return url;
+  const localeToken = /^\/\[launge\](?=\/|$)/i;
+  if (/\[launge\]/i.test(url) && !localeToken.test(url)) {
+    throw new Error(label + ' may use [launge] only as the first site-path segment');
+  }
+  if (!localeToken.test(url)) return url;
+  const suffix = url.replace(localeToken, '');
+  const prefix = context.locale === context.config.i18n.defaultLocale ? '' : '/' + context.locale;
+  return prefix + (suffix || '/');
+}
+
 function list(value, label, min = 1, max = 50) {
   if (!Array.isArray(value) || value.length < min || value.length > max) throw new Error(label + ' must contain ' + min + ' to ' + max + ' items');
   return value;
@@ -86,7 +99,9 @@ function renderPrivacyServices(context) {
     escapeHtml(translate(context.config, context.locale, 'serviceRecipient')) + ':</strong> ' +
     escapeHtml(translateValue(context.config, context.locale, service.recipient)) + '</p><p><strong>' +
     escapeHtml(translate(context.config, context.locale, 'serviceRetention')) + ':</strong> ' +
-    escapeHtml(translateValue(context.config, context.locale, service.retention)) + '</p></li>').join('') + '</ul>';
+    escapeHtml(translateValue(context.config, context.locale, service.retention)) + '</p><p><a class="privacy-vendor-link" href="' +
+    escapeHtml(service.privacyUrl) + '" rel="noopener noreferrer">' +
+    escapeHtml(translate(context.config, context.locale, 'servicePrivacyDetails')) + '</a></p></li>').join('') + '</ul>';
 }
 
 async function renderLatestPosts(block, context) {
@@ -113,7 +128,7 @@ async function renderLatestPosts(block, context) {
     (cards ? '<div class="post-list">' + cards + '</div>' : '<p>' + escapeHtml(translate(context.config, context.locale, 'noPosts')) + '</p>') + pagination + '</section>';
 }
 
-function renderMediaText(block) {
+function renderMediaText(block, context) {
   const mediaType = text(block.mediaType, 'media-text.mediaType', 10);
   if (!['image', 'video'].includes(mediaType)) throw new Error('media-text.mediaType must be image or video');
   const src = escapeHtml(safeUrl(block.src, 'media-text.src'));
@@ -138,7 +153,7 @@ function renderMediaText(block) {
   const content = text(block.text, 'media-text.text', 2000);
   let action = '';
   if (block.cta) {
-    action = '<p><a class="button" href="' + escapeHtml(safeUrl(block.cta.url, 'media-text.cta.url')) + '">' +
+    action = '<p><a class="button" href="' + escapeHtml(localizedSiteUrl(block.cta.url, 'media-text.cta.url', context)) + '">' +
       escapeHtml(text(block.cta.label, 'media-text.cta.label', 120)) + '</a></p>';
   }
   return '<article class="media-text-block media-text-block--' + placement + '"><figure>' + media +
@@ -175,7 +190,7 @@ async function renderBlock(block, context, depth, index) {
       let action = '';
       if (block.cta) {
         const label = escapeHtml(text(block.cta.label, 'hero.cta.label', 120));
-        const url = escapeHtml(safeUrl(block.cta.url, 'hero.cta.url'));
+        const url = escapeHtml(localizedSiteUrl(block.cta.url, 'hero.cta.url', context));
         action = '<p><a class="button" href="' + url + '">' + label + '</a></p>';
       }
       const highlights = block.highlights === undefined ? [] : list(block.highlights, 'hero.highlights', 1, 4);
@@ -229,7 +244,7 @@ async function renderBlock(block, context, depth, index) {
       if (!Array.isArray(paragraphs) || paragraphs.length < 1 || paragraphs.length > 30) throw new Error('text needs a text value or 1 to 30 paragraphs');
       return '<div class="text-widget">' + paragraphs.map((paragraph) => '<p>' + escapeHtml(text(paragraph, 'text paragraph', 4000)) + '</p>').join('') + '</div>';
     }
-    case 'media-text': return renderMediaText(block);
+    case 'media-text': return renderMediaText(block, context);
     case 'display-text': {
       const value = escapeHtml(text(block.text, 'display-text.text', 1000));
       const style = block.style ?? 'editorial';
@@ -244,7 +259,7 @@ async function renderBlock(block, context, depth, index) {
       return '<nav class="link-list"' + (title ? ' aria-label="' + escapeHtml(title) + '"' : '') + '>' +
         (title ? '<h3>' + escapeHtml(title) + '</h3>' : '') + '<ul>' + items.map((item) => {
           const label = escapeHtml(text(item?.label, 'link-list label', 200));
-          const url = escapeHtml(safeUrl(item?.url, 'link-list.url'));
+          const url = escapeHtml(localizedSiteUrl(item?.url, 'link-list.url', context));
           const description = text(item?.text, 'link-list.text', 500, true);
           return '<li><a href="' + url + '">' + label + '</a>' + (description ? '<p>' + escapeHtml(description) + '</p>' : '') + '</li>';
         }).join('') + '</ul></nav>';
@@ -306,7 +321,7 @@ async function renderBlock(block, context, depth, index) {
       const expiryText = text(block.expiryText, 'privacy-consent.expiryText', 120);
       if (!expiryText.includes('{days}')) throw new Error('privacy-consent.expiryText must include a {days} placeholder');
       const consent = context.config.browserPlugins.consent;
-      return '<dl class="privacy-controller-details"><div><dt>' + storageLabel + '</dt><dd>edgepress-privacy-choice</dd></div>' +
+      return '<dl class="privacy-controller-details"><div><dt>' + storageLabel + '</dt><dd>' + escapeHtml(translate(context.config, context.locale, 'consentStoredOnDevice')) + '</dd></div>' +
         '<div><dt>' + expiryLabel + '</dt><dd>' + escapeHtml(expiryText.replace('{days}', String(consent.expiresDays))) + '</dd></div>' +
         '<div><dt>' + proposedDateLabel + '</dt><dd>' + escapeHtml(dateOnlyLabel(consent.proposedDate, context.locale)) + '</dd></div>' +
         (consent.effectiveDate ? '<div><dt>' + effectiveDateLabel + '</dt><dd>' + escapeHtml(dateOnlyLabel(consent.effectiveDate, context.locale)) + '</dd></div>' : '') + '</dl>';
@@ -322,8 +337,11 @@ async function renderBlock(block, context, depth, index) {
       if (!name || !contact) {
         return '<aside class="notice-widget notice-widget--warning"><h3>' + missingTitle + '</h3><p>' + missingText + '</p></aside>';
       }
-      return '<dl class="privacy-controller-details"><div><dt>' + nameLabel + '</dt><dd>' + escapeHtml(name) +
-        '</dd></div><div><dt>' + contactLabel + '</dt><dd>' + escapeHtml(contact) + '</dd></div></dl>';
+      const email = /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(contact);
+      const contactValue = email ? '<a href="mailto:' + escapeHtml(contact) + '">' + escapeHtml(contact) + '</a>' : escapeHtml(contact);
+      return '<p class="privacy-controller-inline"><span><strong>' + nameLabel + ':</strong> ' + escapeHtml(name) +
+        '</span><span class="privacy-controller-separator" aria-hidden="true">·</span><span><strong>' + contactLabel +
+        ':</strong> ' + contactValue + '</span></p>';
     }
     case 'feature-grid': {
       const items = list(block.items, 'feature-grid.items', 1, 12);
@@ -331,7 +349,7 @@ async function renderBlock(block, context, depth, index) {
       const cells = items.map((item) => {
         const title = escapeHtml(text(item?.title, 'feature title', 200));
         const description = escapeHtml(text(item?.text, 'feature text', 1000, true));
-        const href = item?.url ? safeUrl(item.url, 'feature.url') : '';
+        const href = item?.url ? localizedSiteUrl(item.url, 'feature.url', context) : '';
         const iconName = item?.icon === undefined ? '' : text(item.icon, 'feature icon', 40);
         if (iconName && !isIconName(iconName)) throw new Error('Unsupported feature icon: ' + iconName);
         const icon = iconName ? renderIcon(iconName, 'feature-icon') : '';
@@ -356,7 +374,7 @@ async function renderBlock(block, context, depth, index) {
       const title = escapeHtml(text(block.title, 'cta.title', 240));
       const description = text(block.text, 'cta.text', 1000, true);
       const label = escapeHtml(text(block.label, 'cta.label', 120));
-      const url = escapeHtml(safeUrl(block.url, 'cta.url'));
+      const url = escapeHtml(localizedSiteUrl(block.url, 'cta.url', context));
       return '<section class="cta-block"><h2>' + title + '</h2>' + (description ? '<p>' + escapeHtml(description) + '</p>' : '') +
         '<p><a class="button" href="' + url + '">' + label + '</a></p></section>';
     }

package/src/page-check.js

@@ -304,14 +304,16 @@ export async function checkPages(config) {
     });
     consentCheck('privacy controls are injected on every generated page', files.length > 0 && htmlWithConsent.length === files.length);
     consentCheck('consent manager script was generated', Boolean(managerScript));
-    consentCheck('service disclosure supports data categories, recipient, and retention',
-      managerScript.includes('serviceDataCategories') && managerScript.includes('serviceRecipient') && managerScript.includes('serviceRetention'));
+    consentCheck('service disclosure supports data, recipient, retention, and supplier privacy links',
+      managerScript.includes('serviceDataCategories') && managerScript.includes('serviceRecipient') &&
+      managerScript.includes('serviceRetention') && managerScript.includes('servicePrivacyDetails') &&
+      managerScript.includes('integration.privacyUrl'));
     consentCheck('stored choices are tied to proposed and effective dates',
       managerScript.includes('proposedDate: consent.proposedDate') && managerScript.includes('effectiveDate: consent.effectiveDate'));
     consentCheck('new visitors start with every optional service off', managerScript.includes('checkbox.checked = false'));
     consentCheck('accept and reject controls share the same component styling',
-      /\.privacy-panel \.privacy-accept,\.privacy-manager \.privacy-panel \.privacy-reject\s*\{[^}]*background:[^}]*\}/.test(styles));
-    const componentClass = /(?:^|[\s>+~])\.privacy-(?:manager|panel|settings-button|close|intro|essential|details|service-preview|preview-item|category|service-settings|service-setting|service-toggle|service-toggle-text|service-disclosures|actions|accept|reject|manage|save|empty|policy-link|controller)(?=$|[^\w-])/;
+      /\.privacy-manager \.privacy-panel \.privacy-accept\s*,\s*\.privacy-manager \.privacy-panel \.privacy-reject\s*\{[^}]*background:[^}]*\}/.test(styles));
+    const componentClass = /(?:^|[\s>+~])\.privacy-(?:manager|panel|settings-button|close|intro|essential|details|category|service-settings|service-setting|service-toggle|service-toggle-text|service-purpose|service-disclosures|actions|accept|reject|save|empty|policy-link|footer|controller)(?=$|[^\w-])/;
     let scoped = true;
     for (const match of styles.matchAll(/([^{}]+)\{[^{}]*\}/g)) {
       const selector = match[1].trim();

package/src/theme.js

@@ -164,9 +164,17 @@ export async function renderLayout(config, extensions, page, body) {
   const html = '<!doctype html>' + rendered;
   const filtered = await extensions.filter('html:afterLayout', html, context);
   if (typeof filtered !== 'string') throw new Error('html:afterLayout filters must return a string');
-  if (/src=["']\/edgepress\/code-copy\.js["']/i.test(filtered)) return filtered;
-  const codeCopyScript = '<script defer src="/edgepress/code-copy.js"></script>';
+  const scripts = [];
+  if (!/src=["']\/edgepress\/code-copy\.js["']/i.test(filtered)) scripts.push('<script defer src="/edgepress/code-copy.js"></script>');
+  if (/data-post-toc(?:\s|>)/i.test(filtered) && !/src=["']\/edgepress\/post-toc\.js["']/i.test(filtered)) {
+    scripts.push('<script defer src="/edgepress/post-toc.js"></script>');
+  }
+  if (/data-edgepress-search(?:\s|=|>)/i.test(filtered) && !/src=["']\/edgepress\/search\.js["']/i.test(filtered)) {
+    scripts.push('<script defer src="/edgepress/search.js"></script>');
+  }
+  if (!scripts.length) return filtered;
+  const integration = scripts.join('');
   return /<\/body\s*>/i.test(filtered)
-    ? filtered.replace(/<\/body\s*>/i, codeCopyScript + '</body>')
-    : filtered + codeCopyScript;
+    ? filtered.replace(/<\/body\s*>/i, integration + '</body>')
+    : filtered + integration;
 }

package/static/edgepress/icons.svg

@@ -10,7 +10,7 @@
   <symbol id="layers" viewBox="0 0 24 24"><path d="m12 3 9 5-9 5-9-5z"/><path d="m3 12 9 5 9-5M3 16l9 5 9-5"/></symbol>
   <symbol id="code" viewBox="0 0 24 24"><path d="m8 7-5 5 5 5m8-10 5 5-5 5m-3-12-2 14"/></symbol>
   <symbol id="puzzle" viewBox="0 0 24 24"><path d="M4 4h5a2.5 2.5 0 1 1 5 0h6v6a2.5 2.5 0 1 0 0 5v5h-6a2.5 2.5 0 1 0-5 0H4v-6a2.5 2.5 0 1 1 0-5z"/></symbol>
-  <symbol id="plug" viewBox="0 0 24 24"><path d="M9 3v6m6-6v6m-9 0h12v3a6 6 0 0 1-6 6v3m0-9v6"/></symbol>
+  <symbol id="plug" viewBox="0 0 24 24"><path d="M9 3v6m6-6v6M6 9h12v2a6 6 0 0 1-12 0V9Z"/><path d="M12 17v4"/></symbol>
   <symbol id="cloud" viewBox="0 0 24 24"><path d="M7 18a5 5 0 1 1 1-9.9A6 6 0 0 1 19 10a4 4 0 0 1 0 8z"/><path d="m9 14 3-3 3 3m-3-3v7"/></symbol>
   <symbol id="palette" viewBox="0 0 24 24"><path d="M12 3a9 9 0 1 0 0 18h1.2a2.3 2.3 0 0 0 1.6-4c-.7-.7-.2-2 1-2H18a3 3 0 0 0 3-3c0-5-4-9-9-9Z"/><circle cx="7.5" cy="11" r="1"/><circle cx="10" cy="7.5" r="1"/><circle cx="15" cy="8" r="1"/></symbol>
   <symbol id="globe" viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="M3 12h18M12 3a14 14 0 0 1 0 18m0-18a14 14 0 0 0 0 18"/></symbol>
@@ -19,6 +19,6 @@
   <symbol id="check-circle" viewBox="0 0 24 24"><circle cx="12" cy="12" r="9"/><path d="m8 12 2.7 2.7L16.5 9"/></symbol>
   <symbol id="layout-grid" viewBox="0 0 24 24"><rect x="3" y="3" width="8" height="8" rx="1.5"/><rect x="13" y="3" width="8" height="5" rx="1.5"/><rect x="13" y="10" width="8" height="11" rx="1.5"/><rect x="3" y="13" width="8" height="8" rx="1.5"/></symbol>
   <symbol id="terminal" viewBox="0 0 24 24"><rect x="3" y="4" width="18" height="16" rx="2"/><path d="m7 9 3 3-3 3m6 0h4"/></symbol>
-  <symbol id="settings" viewBox="0 0 24 24"><circle cx="12" cy="12" r="3"/><path d="m19.4 15 .1.1 1.1.9-1.1 2-1.4-.4a8 8 0 0 1-1.7 1l-.3 1.4h-2.2l-.3-1.4a8 8 0 0 1-1.7-1l-1.4.4-1.1-2 1.1-.9A8 8 0 0 1 8.5 14L7 13.7v-2.4l1.5-.3a8 8 0 0 1 .9-1.7l-.5-1.4 2-1.2 1 1.1a8 8 0 0 1 2 0l1-1.1 2 1.2-.5 1.4a8 8 0 0 1 .9 1.7l1.5.3v2.4l-1.5.3"/></symbol>
+  <symbol id="settings" viewBox="0 0 24 24"><path d="M10 2h4l.7 2.5a8 8 0 0 1 1.6.7l2.4-1.1 2 3.5-1.9 1.6a8 8 0 0 1 0 1.6l1.9 1.6-2 3.5-2.4-1.1a8 8 0 0 1-1.6.7L14 22h-4l-.7-2.5a8 8 0 0 1-1.6-.7l-2.4 1.1-2-3.5 1.9-1.6a8 8 0 0 1 0-1.6l-1.9-1.6 2-3.5 2.4 1.1a8 8 0 0 1 1.6-.7z"/><circle cx="12" cy="12" r="2.7"/></symbol>
   <symbol id="sparkles" viewBox="0 0 24 24"><path d="m12 3 1.4 5.6L19 10l-5.6 1.4L12 17l-1.4-5.6L5 10l5.6-1.4zM19 16l.7 2.3L22 19l-2.3.7L19 22l-.7-2.3L16 19l2.3-.7z"/></symbol>
 </svg>