@burdenoff/microfe-technospam 2026.1101.5 → 2026.1102.1

package/dist/index.js

@@ -1,7 +1,9 @@
 import { useTechnoSpam as e, useTechnoSpamNavigate as t } from "./technospam/providers/TechnoSpamProvider.js";
 import { useTechnoSpamAnalytics as n } from "./technospam/hooks/useTechnoSpamAnalytics.js";
 import { useTr as r } from "./technospam/hooks/useTr.js";
-import { TechnoSpamRoot as i } from "./technospam/TechnoSpamRoot.js";
-import { useSandboxAssistantTransport as a } from "./technospam/services/createSandboxAssistantTransport.js";
+import { CERTIFICATE_VERIFY_BASE_PATH as i, CERTIFICATE_VERIFY_ROUTE_PATH as a, certificateVerifyLink as o, certificateVerifyPath as s } from "./technospam/lib/certificateVerify.js";
+import { TechnoSpamRoot as c } from "./technospam/TechnoSpamRoot.js";
+import { useSandboxAssistantTransport as l } from "./technospam/services/createSandboxAssistantTransport.js";
+import { CertificateVerifyPage as u } from "./technospam/pages/public/CertificateVerifyPage.js";
 import "./technospam/index.js";
-export { i as TechnoSpamRoot, a as useSandboxAssistantTransport, e as useTechnoSpam, n as useTechnoSpamAnalytics, t as useTechnoSpamNavigate, r as useTr };
+export { i as CERTIFICATE_VERIFY_BASE_PATH, a as CERTIFICATE_VERIFY_ROUTE_PATH, u as CertificateVerifyPage, c as TechnoSpamRoot, o as certificateVerifyLink, s as certificateVerifyPath, l as useSandboxAssistantTransport, e as useTechnoSpam, n as useTechnoSpamAnalytics, t as useTechnoSpamNavigate, r as useTr };

package/dist/technospam/components/CertificateVerifyLink.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The public verification link for one certificate (BOFF-10576): the URL a
+ * learner shares with a recruiter, who opens it without an account. Shows
+ * the link itself, a copy button and an open-in-new-tab button.
+ */
+export declare function CertificateVerifyLink({ serial, compact, className, }: {
+    serial: string;
+    compact?: boolean;
+    className?: string;
+}): import("react").JSX.Element;
+//# sourceMappingURL=CertificateVerifyLink.d.ts.map

package/dist/technospam/components/CertificateVerifyLink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateVerifyLink.d.ts","sourceRoot":"","sources":["../../../src/technospam/components/CertificateVerifyLink.tsx"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,OAAe,EACf,SAAS,GACV,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,+BA0DA"}

package/dist/technospam/components/CertificateVerifyLink.js

@@ -0,0 +1,63 @@
+import { cn as e } from "../utils/cn.js";
+import { notify as t } from "../lib/toast.js";
+import { certificateVerifyLink as n } from "../lib/certificateVerify.js";
+import { Copy as r, ExternalLink as i } from "lucide-react";
+import { jsx as a, jsxs as o } from "react/jsx-runtime";
+import { Button as s } from "@burdenoff/fe-libs/ui";
+//#region src/technospam/components/CertificateVerifyLink.tsx
+function c({ serial: c, compact: l = !1, className: u }) {
+	let d = n(c), f = async () => {
+		try {
+			await navigator.clipboard.writeText(d), t.success("Verification link copied", "Share it with a recruiter or employer.");
+		} catch {
+			t.error("Could not copy the link", d);
+		}
+	};
+	return /* @__PURE__ */ o("div", {
+		className: e("flex min-w-0 flex-col gap-1.5", u),
+		"data-testid": `tec-cert-verify-link-${c}`,
+		children: [l ? null : /* @__PURE__ */ a("span", {
+			className: "text-[11px] font-medium uppercase tracking-wide text-text-muted",
+			children: "Public verification link"
+		}), /* @__PURE__ */ o("div", {
+			className: "flex min-w-0 items-center gap-1.5",
+			children: [
+				/* @__PURE__ */ a("a", {
+					href: d,
+					target: "_blank",
+					rel: "noopener noreferrer",
+					className: "min-w-0 flex-1 truncate font-mono text-xs text-text-link hover:underline",
+					onClick: (e) => e.stopPropagation(),
+					children: d
+				}),
+				/* @__PURE__ */ a(s, {
+					type: "button",
+					size: "sm",
+					variant: "ghost",
+					"aria-label": "Copy verification link",
+					onClick: (e) => {
+						e.stopPropagation(), f();
+					},
+					children: /* @__PURE__ */ a(r, { size: 14 })
+				}),
+				/* @__PURE__ */ a(s, {
+					asChild: !0,
+					size: "sm",
+					variant: "ghost",
+					children: /* @__PURE__ */ a("a", {
+						href: d,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						"aria-label": "Open verification page",
+						onClick: (e) => e.stopPropagation(),
+						children: /* @__PURE__ */ a(i, { size: 14 })
+					})
+				})
+			]
+		})]
+	});
+}
+//#endregion
+export { c as CertificateVerifyLink };
+
+//# sourceMappingURL=CertificateVerifyLink.js.map

package/dist/technospam/components/CertificateVerifyLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateVerifyLink.js","names":[],"sources":["../../../src/technospam/components/CertificateVerifyLink.tsx"],"sourcesContent":["import { Copy, ExternalLink } from 'lucide-react';\nimport { Button } from '@burdenoff/fe-libs/ui';\nimport { certificateVerifyLink } from '../lib/certificateVerify';\nimport { notify } from '../lib/toast';\nimport { cn } from '../utils/cn';\n\n/**\n * The public verification link for one certificate (BOFF-10576): the URL a\n * learner shares with a recruiter, who opens it without an account. Shows\n * the link itself, a copy button and an open-in-new-tab button.\n */\nexport function CertificateVerifyLink({\n  serial,\n  compact = false,\n  className,\n}: {\n  serial: string;\n  compact?: boolean;\n  className?: string;\n}) {\n  const link = certificateVerifyLink(serial);\n\n  const copy = async () => {\n    try {\n      await navigator.clipboard.writeText(link);\n      notify.success('Verification link copied', 'Share it with a recruiter or employer.');\n    } catch {\n      notify.error('Could not copy the link', link);\n    }\n  };\n\n  return (\n    <div\n      className={cn('flex min-w-0 flex-col gap-1.5', className)}\n      data-testid={`tec-cert-verify-link-${serial}`}\n    >\n      {compact ? null : (\n        <span className=\"text-[11px] font-medium uppercase tracking-wide text-text-muted\">\n          Public verification link\n        </span>\n      )}\n      <div className=\"flex min-w-0 items-center gap-1.5\">\n        <a\n          href={link}\n          target=\"_blank\"\n          rel=\"noopener noreferrer\"\n          className=\"min-w-0 flex-1 truncate font-mono text-xs text-text-link hover:underline\"\n          onClick={(event) => event.stopPropagation()}\n        >\n          {link}\n        </a>\n        <Button\n          type=\"button\"\n          size=\"sm\"\n          variant=\"ghost\"\n          aria-label=\"Copy verification link\"\n          onClick={(event) => {\n            event.stopPropagation();\n            void copy();\n          }}\n        >\n          <Copy size={14} />\n        </Button>\n        <Button asChild size=\"sm\" variant=\"ghost\">\n          <a\n            href={link}\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            aria-label=\"Open verification page\"\n            onClick={(event) => event.stopPropagation()}\n          >\n            <ExternalLink size={14} />\n          </a>\n        </Button>\n      </div>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAWA,SAAgB,EAAsB,EACpC,WACA,aAAU,IACV,gBAKC;CACD,IAAM,IAAO,EAAsB,EAAO,EAEpC,IAAO,YAAY;AACvB,MAAI;AAEF,GADA,MAAM,UAAU,UAAU,UAAU,EAAK,EACzC,EAAO,QAAQ,4BAA4B,yCAAyC;UAC9E;AACN,KAAO,MAAM,2BAA2B,EAAK;;;AAIjD,QACE,kBAAC,OAAD;EACE,WAAW,EAAG,iCAAiC,EAAU;EACzD,eAAa,wBAAwB;YAFvC,CAIG,IAAU,OACT,kBAAC,QAAD;GAAM,WAAU;aAAkE;GAE3E,CAAA,EAET,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,KAAD;KACE,MAAM;KACN,QAAO;KACP,KAAI;KACJ,WAAU;KACV,UAAU,MAAU,EAAM,iBAAiB;eAE1C;KACC,CAAA;IACJ,kBAAC,GAAD;KACE,MAAK;KACL,MAAK;KACL,SAAQ;KACR,cAAW;KACX,UAAU,MAAU;AAEb,MADL,EAAM,iBAAiB,EAClB,GAAM;;eAGb,kBAAC,GAAD,EAAM,MAAM,IAAM,CAAA;KACX,CAAA;IACT,kBAAC,GAAD;KAAQ,SAAA;KAAQ,MAAK;KAAK,SAAQ;eAChC,kBAAC,KAAD;MACE,MAAM;MACN,QAAO;MACP,KAAI;MACJ,cAAW;MACX,UAAU,MAAU,EAAM,iBAAiB;gBAE3C,kBAAC,GAAD,EAAc,MAAM,IAAM,CAAA;MACxB,CAAA;KACG,CAAA;IACL;KACF"}

package/dist/technospam/components/index.d.ts

@@ -12,4 +12,5 @@ export { CodePanel, IoBlock, TestResultsPanel } from './SubmissionViews';
 export { SubmissionReviewPanel } from './SubmissionReviewPanel';
 export { TechnoSpamErrorBoundary } from './TechnoSpamErrorBoundary';
 export { CardOpenButton } from './CardOpenButton';
+export { CertificateVerifyLink } from './CertificateVerifyLink';
 //# sourceMappingURL=index.d.ts.map

package/dist/technospam/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/technospam/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/technospam/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/technospam/components/index.js

@@ -12,3 +12,4 @@ import "./SubmissionViews.js";
 import "./SubmissionReviewPanel.js";
 import "./TechnoSpamErrorBoundary.js";
 import "./CardOpenButton.js";
+import "./CertificateVerifyLink.js";

package/dist/technospam/index.d.ts

@@ -4,4 +4,6 @@ export { useTechnoSpam, useTechnoSpamNavigate } from './providers/TechnoSpamProv
 export * from './services/createSandboxAssistantTransport';
 export { useTr } from './hooks/useTr';
 export { useTechnoSpamAnalytics } from './hooks/useTechnoSpamAnalytics';
+export { CertificateVerifyPage } from './pages/public/CertificateVerifyPage';
+export { CERTIFICATE_VERIFY_BASE_PATH, CERTIFICATE_VERIFY_ROUTE_PATH, certificateVerifyLink, certificateVerifyPath, } from './lib/certificateVerify';
 //# sourceMappingURL=index.d.ts.map

package/dist/technospam/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/technospam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAOtF,cAAc,4CAA4C,CAAC;AAG3D,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/technospam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAOtF,cAAc,4CAA4C,CAAC;AAG3D,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAIxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC"}

package/dist/technospam/index.js

@@ -1,5 +1,7 @@
 import "./providers/TechnoSpamProvider.js";
 import "./hooks/useTechnoSpamAnalytics.js";
 import "./hooks/useTr.js";
+import "./lib/certificateVerify.js";
 import "./TechnoSpamRoot.js";
 import "./services/createSandboxAssistantTransport.js";
+import "./pages/public/CertificateVerifyPage.js";

package/dist/technospam/lib/certificateVerify.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Public certificate verification page helpers (BOFF-10576).
+ *
+ * The page lets a recruiter open the link printed on a TechnoSpam certificate
+ * and confirm it without a Burdenoff account. It calls the public
+ * `tecVerifyCertificate` field (`@rbac(public: true)`, BOFF-4430), which
+ * returns the course, score, dates and status but never the learner's
+ * identity or a revoke reason.
+ *
+ * Unlike the route constants that are relative to this MFE's `basePath`, the
+ * verification route is absolute: the host shell mounts the page on its own
+ * top-level router, outside the auth guard. It lives under `/public/` because
+ * fe-libs' shell-route table already treats every `/public/*` path as a
+ * public, sidebar-less page.
+ */
+/** Base path of the public verification page. */
+export declare const CERTIFICATE_VERIFY_BASE_PATH = "/public/verify";
+/** For the host's `<Route path={CERTIFICATE_VERIFY_ROUTE_PATH} ... />`. */
+export declare const CERTIFICATE_VERIFY_ROUTE_PATH = "/public/verify/:serial";
+/** Mirrors the service's MAX_SERIAL_LENGTH guard; longer input is never sent. */
+export declare const MAX_SERIAL_LENGTH = 120;
+export type CertificateVerificationStatus = 'VALID' | 'REVOKED' | 'NOT_FOUND';
+export interface CertificateVerification {
+    serial: string;
+    status: CertificateVerificationStatus;
+    valid: boolean;
+    issuer: string;
+    courseTitle: string | null;
+    courseLevel: string | null;
+    score: number | null;
+    issuedAt: string | null;
+    revokedAt: string | null;
+    verifiedAt: string;
+}
+export type VerifyOutcome = {
+    kind: 'result';
+    verification: CertificateVerification;
+} | {
+    kind: 'invalid';
+} | {
+    kind: 'error';
+};
+/** Normalize a serial the way the service does: trim and upper-case. */
+export declare function normalizeSerial(raw: string | null | undefined): string;
+/** True when a normalized serial is worth sending to the service at all. */
+export declare function isPlausibleSerial(serial: string): boolean;
+/** Relative path of the verification page for one serial. */
+export declare function certificateVerifyPath(serial: string): string;
+/**
+ * The full, shareable verification link for a serial. Defaults to the current
+ * origin, which is the product's app shell (for example
+ * `https://app.technospam.com`).
+ */
+export declare function certificateVerifyLink(serial: string, origin?: string): string;
+export declare const VERIFY_QUERY = "\n  query PublicTecVerifyCertificate($serial: String!) {\n    tecVerifyCertificate(serial: $serial) {\n      serial\n      status\n      valid\n      issuer\n      courseTitle\n      courseLevel\n      score\n      issuedAt\n      revokedAt\n      verifiedAt\n    }\n  }\n";
+/**
+ * The GraphQL endpoint for a gateway URL. Hosts pass either the workspace
+ * gateway origin (the app shell's `workspaceBaseUrl`) or a complete GraphQL
+ * endpoint (the dev harness and stories); a URL that already ends in
+ * `/graphql` is used as is.
+ */
+export declare function verificationEndpoint(apiGatewayUrl: string | undefined): string;
+type FetchLike = (input: string, init: RequestInit) => Promise<Response>;
+/**
+ * Verify one serial against the public workspace gateway. The request is
+ * deliberately anonymous: no Authorization header and no cookies, so the
+ * viewer's own session (if any) is never attached to a public lookup.
+ */
+export declare function fetchCertificateVerification(apiGatewayUrl: string | undefined, rawSerial: string, fetchImpl?: FetchLike): Promise<VerifyOutcome>;
+export {};
+//# sourceMappingURL=certificateVerify.d.ts.map

package/dist/technospam/lib/certificateVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificateVerify.d.ts","sourceRoot":"","sources":["../../../src/technospam/lib/certificateVerify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,iDAAiD;AACjD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAE7D,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,2BAA4C,CAAC;AAEvF,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;AAE9E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,6BAA6B,CAAC;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,uBAAuB,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAEtE;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED,6DAA6D;AAC7D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED,eAAO,MAAM,YAAY,qRAexB,CAAC;AAgBF;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG9E;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEzE;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,SAA+C,GACzD,OAAO,CAAC,aAAa,CAAC,CAuBxB"}

package/dist/technospam/lib/certificateVerify.js

@@ -0,0 +1,55 @@
+//#region src/technospam/lib/certificateVerify.ts
+var e = "/public/verify", t = `${e}/:serial`;
+function n(e) {
+	return (e ?? "").trim().toUpperCase();
+}
+function r(e) {
+	return e.length > 0 && e.length <= 120 && /^[A-Z0-9][A-Z0-9._-]*$/.test(e);
+}
+function i(t) {
+	return `${e}/${encodeURIComponent(n(t))}`;
+}
+function a(e, t) {
+	return `${(t ?? (typeof window < "u" ? window.location.origin : "")).replace(/\/+$/, "")}${i(e)}`;
+}
+var o = "\n  query PublicTecVerifyCertificate($serial: String!) {\n    tecVerifyCertificate(serial: $serial) {\n      serial\n      status\n      valid\n      issuer\n      courseTitle\n      courseLevel\n      score\n      issuedAt\n      revokedAt\n      verifiedAt\n    }\n  }\n", s = new Set([
+	"VALID",
+	"REVOKED",
+	"NOT_FOUND"
+]);
+function c(e) {
+	if (!e || typeof e != "object") return !1;
+	let t = e;
+	return typeof t.serial == "string" && typeof t.status == "string" && s.has(t.status) && typeof t.valid == "boolean" && typeof t.verifiedAt == "string";
+}
+function l(e) {
+	let t = (e ?? "").replace(/\/+$/, "");
+	return /\/graphql$/.test(t) ? t : `${t}/workspaces/graphql`;
+}
+async function u(e, t, i = (e, t) => fetch(e, t)) {
+	let a = n(t);
+	if (!r(a)) return { kind: "invalid" };
+	let s = l(e), u;
+	try {
+		u = await i(s, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			credentials: "omit",
+			body: JSON.stringify({
+				query: o,
+				variables: { serial: a }
+			})
+		});
+	} catch {
+		return { kind: "error" };
+	}
+	let d = (await u.json().catch(() => null))?.data?.tecVerifyCertificate;
+	return !u.ok || !c(d) ? { kind: "error" } : {
+		kind: "result",
+		verification: d
+	};
+}
+//#endregion
+export { e as CERTIFICATE_VERIFY_BASE_PATH, t as CERTIFICATE_VERIFY_ROUTE_PATH, a as certificateVerifyLink, i as certificateVerifyPath, u as fetchCertificateVerification, r as isPlausibleSerial, n as normalizeSerial };
+
+//# sourceMappingURL=certificateVerify.js.map

package/dist/technospam/lib/certificateVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificateVerify.js","names":[],"sources":["../../../src/technospam/lib/certificateVerify.ts"],"sourcesContent":["/**\n * Public certificate verification page helpers (BOFF-10576).\n *\n * The page lets a recruiter open the link printed on a TechnoSpam certificate\n * and confirm it without a Burdenoff account. It calls the public\n * `tecVerifyCertificate` field (`@rbac(public: true)`, BOFF-4430), which\n * returns the course, score, dates and status but never the learner's\n * identity or a revoke reason.\n *\n * Unlike the route constants that are relative to this MFE's `basePath`, the\n * verification route is absolute: the host shell mounts the page on its own\n * top-level router, outside the auth guard. It lives under `/public/` because\n * fe-libs' shell-route table already treats every `/public/*` path as a\n * public, sidebar-less page.\n */\n\n/** Base path of the public verification page. */\nexport const CERTIFICATE_VERIFY_BASE_PATH = '/public/verify';\n\n/** For the host's `<Route path={CERTIFICATE_VERIFY_ROUTE_PATH} ... />`. */\nexport const CERTIFICATE_VERIFY_ROUTE_PATH = `${CERTIFICATE_VERIFY_BASE_PATH}/:serial`;\n\n/** Mirrors the service's MAX_SERIAL_LENGTH guard; longer input is never sent. */\nexport const MAX_SERIAL_LENGTH = 120;\n\nexport type CertificateVerificationStatus = 'VALID' | 'REVOKED' | 'NOT_FOUND';\n\nexport interface CertificateVerification {\n  serial: string;\n  status: CertificateVerificationStatus;\n  valid: boolean;\n  issuer: string;\n  courseTitle: string | null;\n  courseLevel: string | null;\n  score: number | null;\n  issuedAt: string | null;\n  revokedAt: string | null;\n  verifiedAt: string;\n}\n\nexport type VerifyOutcome =\n  | { kind: 'result'; verification: CertificateVerification }\n  | { kind: 'invalid' }\n  | { kind: 'error' };\n\n/** Normalize a serial the way the service does: trim and upper-case. */\nexport function normalizeSerial(raw: string | null | undefined): string {\n  return (raw ?? '').trim().toUpperCase();\n}\n\n/** True when a normalized serial is worth sending to the service at all. */\nexport function isPlausibleSerial(serial: string): boolean {\n  return (\n    serial.length > 0 && serial.length <= MAX_SERIAL_LENGTH && /^[A-Z0-9][A-Z0-9._-]*$/.test(serial)\n  );\n}\n\n/** Relative path of the verification page for one serial. */\nexport function certificateVerifyPath(serial: string): string {\n  return `${CERTIFICATE_VERIFY_BASE_PATH}/${encodeURIComponent(normalizeSerial(serial))}`;\n}\n\n/**\n * The full, shareable verification link for a serial. Defaults to the current\n * origin, which is the product's app shell (for example\n * `https://app.technospam.com`).\n */\nexport function certificateVerifyLink(serial: string, origin?: string): string {\n  const base = origin ?? (typeof window !== 'undefined' ? window.location.origin : '');\n  return `${base.replace(/\\/+$/, '')}${certificateVerifyPath(serial)}`;\n}\n\nexport const VERIFY_QUERY = `\n  query PublicTecVerifyCertificate($serial: String!) {\n    tecVerifyCertificate(serial: $serial) {\n      serial\n      status\n      valid\n      issuer\n      courseTitle\n      courseLevel\n      score\n      issuedAt\n      revokedAt\n      verifiedAt\n    }\n  }\n`;\n\nconst STATUSES: ReadonlySet<string> = new Set(['VALID', 'REVOKED', 'NOT_FOUND']);\n\nfunction isVerification(value: unknown): value is CertificateVerification {\n  if (!value || typeof value !== 'object') return false;\n  const v = value as Record<string, unknown>;\n  return (\n    typeof v.serial === 'string' &&\n    typeof v.status === 'string' &&\n    STATUSES.has(v.status) &&\n    typeof v.valid === 'boolean' &&\n    typeof v.verifiedAt === 'string'\n  );\n}\n\n/**\n * The GraphQL endpoint for a gateway URL. Hosts pass either the workspace\n * gateway origin (the app shell's `workspaceBaseUrl`) or a complete GraphQL\n * endpoint (the dev harness and stories); a URL that already ends in\n * `/graphql` is used as is.\n */\nexport function verificationEndpoint(apiGatewayUrl: string | undefined): string {\n  const base = (apiGatewayUrl ?? '').replace(/\\/+$/, '');\n  return /\\/graphql$/.test(base) ? base : `${base}/workspaces/graphql`;\n}\n\ntype FetchLike = (input: string, init: RequestInit) => Promise<Response>;\n\n/**\n * Verify one serial against the public workspace gateway. The request is\n * deliberately anonymous: no Authorization header and no cookies, so the\n * viewer's own session (if any) is never attached to a public lookup.\n */\nexport async function fetchCertificateVerification(\n  apiGatewayUrl: string | undefined,\n  rawSerial: string,\n  fetchImpl: FetchLike = (input, init) => fetch(input, init)\n): Promise<VerifyOutcome> {\n  const serial = normalizeSerial(rawSerial);\n  if (!isPlausibleSerial(serial)) return { kind: 'invalid' };\n\n  const endpoint = verificationEndpoint(apiGatewayUrl);\n  let response: Response;\n  try {\n    response = await fetchImpl(endpoint, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      credentials: 'omit',\n      body: JSON.stringify({ query: VERIFY_QUERY, variables: { serial } }),\n    });\n  } catch {\n    return { kind: 'error' };\n  }\n\n  const body = (await response.json().catch(() => null)) as {\n    data?: { tecVerifyCertificate?: unknown } | null;\n  } | null;\n  const verification = body?.data?.tecVerifyCertificate;\n  if (!response.ok || !isVerification(verification)) return { kind: 'error' };\n  return { kind: 'result', verification };\n}\n"],"mappings":";AAiBA,IAAa,IAA+B,kBAG/B,IAAgC,GAAG,EAA6B;AA0B7E,SAAgB,EAAgB,GAAwC;AACtE,SAAQ,KAAO,IAAI,MAAM,CAAC,aAAa;;AAIzC,SAAgB,EAAkB,GAAyB;AACzD,QACE,EAAO,SAAS,KAAK,EAAO,UAAA,OAA+B,yBAAyB,KAAK,EAAO;;AAKpG,SAAgB,EAAsB,GAAwB;AAC5D,QAAO,GAAG,EAA6B,GAAG,mBAAmB,EAAgB,EAAO,CAAC;;AAQvF,SAAgB,EAAsB,GAAgB,GAAyB;AAE7E,QAAO,IADM,MAAW,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS,KAClE,QAAQ,QAAQ,GAAG,GAAG,EAAsB,EAAO;;AAGpE,IAAa,IAAe,oRAiBtB,IAAgC,IAAI,IAAI;CAAC;CAAS;CAAW;CAAY,CAAC;AAEhF,SAAS,EAAe,GAAkD;AACxE,KAAI,CAAC,KAAS,OAAO,KAAU,SAAU,QAAO;CAChD,IAAM,IAAI;AACV,QACE,OAAO,EAAE,UAAW,YACpB,OAAO,EAAE,UAAW,YACpB,EAAS,IAAI,EAAE,OAAO,IACtB,OAAO,EAAE,SAAU,aACnB,OAAO,EAAE,cAAe;;AAU5B,SAAgB,EAAqB,GAA2C;CAC9E,IAAM,KAAQ,KAAiB,IAAI,QAAQ,QAAQ,GAAG;AACtD,QAAO,aAAa,KAAK,EAAK,GAAG,IAAO,GAAG,EAAK;;AAUlD,eAAsB,EACpB,GACA,GACA,KAAwB,GAAO,MAAS,MAAM,GAAO,EAAK,EAClC;CACxB,IAAM,IAAS,EAAgB,EAAU;AACzC,KAAI,CAAC,EAAkB,EAAO,CAAE,QAAO,EAAE,MAAM,WAAW;CAE1D,IAAM,IAAW,EAAqB,EAAc,EAChD;AACJ,KAAI;AACF,MAAW,MAAM,EAAU,GAAU;GACnC,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,aAAa;GACb,MAAM,KAAK,UAAU;IAAE,OAAO;IAAc,WAAW,EAAE,WAAQ;IAAE,CAAC;GACrE,CAAC;SACI;AACN,SAAO,EAAE,MAAM,SAAS;;CAM1B,IAAM,KAHQ,MAAM,EAAS,MAAM,CAAC,YAAY,KAAK,GAG1B,MAAM;AAEjC,QADI,CAAC,EAAS,MAAM,CAAC,EAAe,EAAa,GAAS,EAAE,MAAM,SAAS,GACpE;EAAE,MAAM;EAAU;EAAc"}

package/dist/technospam/pages/CoursesCourseDetailsPagePage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CoursesCourseDetailsPagePage.d.ts","sourceRoot":"","sources":["../../../src/technospam/pages/CoursesCourseDetailsPagePage.tsx"],"names":[],"mappings":"AA+RA,wBAAgB,4BAA4B,gCA4V3C"}
+{"version":3,"file":"CoursesCourseDetailsPagePage.d.ts","sourceRoot":"","sources":["../../../src/technospam/pages/CoursesCourseDetailsPagePage.tsx"],"names":[],"mappings":"AAoSA,wBAAgB,4BAA4B,gCA4V3C"}