@certrev/cert-block 0.3.0 → 0.5.0

package/README.md

@@ -112,6 +112,53 @@ Preferred mode is **SSR + hydrate** (crawlable): a server-side include emits the
 </script>
 ```
 
+## Usage — Builder.io (the cert component)
+
+Two ways to place the visible cert on a Builder.io page. **PUSH is the primary story** for
+exporter-driven brands (the cert block arrives with the CertREV-drafted entry); the PULL anchor
+is the editor-placed alternative (W4, POR-10721).
+
+### PUSH — the registered cert block (recommended)
+
+CertREV's exporter emits a cert block whose options are the `BuilderCertChromeData` projection.
+Register the ready component once, from the `./builder` subpath — no hand-mapped options, no
+hand-maintained inputs array:
+
+```ts
+import { Builder } from '@builder.io/react'
+import { BUILDER_REGISTRATION } from '@certrev/cert-block/builder'
+
+Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)
+```
+
+`CERT_COMPONENT_NAME` is the canonical block name the portal's `certComponent` connection field
+defaults to; `BUILDER_REGISTRATION.inputs` are single-sourced from the `BuilderCertChromeData`
+wire type (drift-locked — the exporter option keys, the registered inputs, and the type can
+never diverge silently). The component enforces the fused-credential rule by construction (a
+credential is unrenderable without its dated verification) and themes to the brand's render-def
+(accent / surface / corners / font + v2 bar-ink / body-ink).
+
+### The certificate modal + CSP
+
+The "View certificate" affordance opens an envelope-verified modal. Add the modal element +
+its browser bundle. *(Modal-in-package is POR-10721 W2 — until it lands, vendor the IIFE bundle
+from the Shopify theme extension's `certrev-cert.js`, exactly as the canary demo does.)*
+
+Two CSP allowances for the headless host:
+- `connect-src` → the CertREV Delivery origin (the modal fetches the signed envelope).
+- `img-src` → `cdn.builder.io` + the CertREV asset origin (headshots).
+
+`data-delivery-api` is the **origin only** — the element appends
+`/api/cert/v1/delivery/{platform}/{externalId}`. Preview drafts with `includeUnpublished` on the
+public key.
+
+### PULL — the editor-placed anchor (alternative)
+
+`CertRevProvider` + the zero-input `CertRevAnchor` (`@certrev/cert-block/builder`) let an editor
+drop the cert wherever they want it (panel-validated). Use this when placement is editorial
+rather than exporter-driven. *(The anchor is preset-default only today — render-def theming on
+the anchor path is a follow-up.)*
+
 ## Fail-closed, everywhere
 
 The package never renders an unverified credential. Every error path — bad signature, unknown kid, wrong post, revoked, expired, content drift, network failure, malformed JSON, a throwing resolver — collapses to a `suppress` verdict (or a `null` render), never an exception that a caller could swallow into a render. `<CertReview>` and `<CertRevBacklink>` also fail closed at the component boundary (suppress / unsafe URL → render nothing). URLs pass through `safeHttpUrl` (drops `javascript:`/`data:`); accent colors through `safeCssColor`; the JSON-LD body neutralizes `<`/`>` so a hostile memo can't break out of the `<script>` tag.
@@ -151,4 +198,4 @@ Facts are mocked via `makeMockPayload` / `makeSignedEnvelope` (`src/contract/fix
 
 ## Version
 
-`0.1.0` — initial scaffold against the settled contract shape, bound to the local contract stub. Publishes **publicly** to npm as `@certrev/cert-block` (`publishConfig.access: public`).
+`0.4.0` (this branch, `feat/cert-block-v2-render`) — the locked cert-render faces (`renderCertBlock`, 3 modes + custom), v2 brand-ink theming (`barInk`/`inkColor`), and the Builder.io PUSH kit (`CertReviewCard` + `BUILDER_REGISTRATION` + the single-sourced `BuilderCertChromeData` wire type, POR-10721 W1/W3). npm is at `0.3.0`; `main` trails on `0.1.3` — the version lineage + branch strategy are tracked in the repo `COORDINATION.md`. Publishes **publicly** to npm as `@certrev/cert-block` (`publishConfig.access: public`).

package/dist/builder/cert-chrome-data.d.ts

@@ -0,0 +1,129 @@
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `BuilderCertChromeData` — the CANONICAL headless cert-chrome wire type
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * The brand-render projection of the cert envelope (portal POR-10091) — the OPTIONS
+ * of a brand's native cert component (e.g. e.l.f.'s registered `CertReviewCard`) on
+ * a headless blocks-mode entry (Builder.io). CertREV serves the data + the ready-made
+ * strings; the brand renders it within the design-guide ladder (enforced live by the
+ * crawl monitor + the MSA anti-stripping teeth).
+ *
+ * SINGLE SOURCE (POR-10721 W1): this type is HOMED HERE so the portal exporter
+ * (`src/lib/builder/cert-chrome.ts`) and the kit component (`CertReviewCard`) +
+ * `BUILDER_REGISTRATION.inputs` all reference ONE definition — killing the drift the
+ * hand-rolled Hydrogen-replica component suffered (it carried a stale separate
+ * `credential`/`credentialVerifiedAt` shape from before the fused-pair projection).
+ * Keep byte-for-byte in sync with the portal interface until the portal migrates to
+ * import THIS (that migration is gated on publishing the package that carries it).
+ *
+ * PURITY: types + a pure key tuple only — no runtime deps, tree-shakeable.
+ */
+/**
+ * The baked render-def projection (the Shopify `render_def` metafield shape) the
+ * exporter delivers so a brand's Builder face themes byte-identically to its Shopify
+ * face. The component maps `{ tokens, version }` onto `renderCertBlock`'s theme +
+ * `data-certrev-def-version` stamp. Structurally matches the portal's
+ * `ShopifyRenderDefMetafield` (single-sourcing that metafield type too is a follow-up).
+ */
+export interface CertChromeRenderDef {
+    /** Monotonic per-brand def version → the `data-certrev-def-version` stamp. */
+    readonly v: number;
+    readonly preset: string;
+    readonly rung: string;
+    /**
+     * The resolved themeable tokens (the baked metafield's `tokens`) — includes the v2
+     * `barInk`/`inkColor`, so this is a superset of the input `CertThemeTokens` (which
+     * predates brand-ink theming). Inlined structurally to match what the exporter bakes.
+     */
+    readonly tokens: {
+        readonly accentColor?: string;
+        readonly surface?: string;
+        readonly cornerRadius?: string;
+        readonly fontSlot?: string;
+        readonly barInk?: string;
+        readonly inkColor?: string;
+    };
+    /** The auto-contrast bar foreground — present only on a barInk-themed face (v2). */
+    readonly barInkFg?: '#141414' | '#ffffff';
+    /** The subtractive field-visibility hide-set. */
+    readonly hidden: readonly string[];
+    /** v2 layout axis. Omitted ⇒ 'banner'. */
+    readonly layout?: string;
+    /** Custom-face composition — present only when layout === 'custom'. */
+    readonly customFace?: {
+        readonly placedFields: readonly string[];
+    };
+}
+/**
+ * The OPTIONS a brand's native cert component receives. Delivered per certified
+ * article; until the brand registers the component the block renders nothing.
+ */
+export interface BuilderCertChromeData {
+    /**
+     * The credentialed byline — credential + dated CertREV verification as ONE
+     * inseparable string. Null when the R1 gate fails (a displayed credential is
+     * unverified / missing `verified_at`); the brand then has only `bylinePlain`.
+     */
+    bylineCredentialed: string | null;
+    /**
+     * The RAW verified credential welded to its dated verification, delivered as ONE
+     * INSEPARABLE PAIR (present together) or `null` (omitted together). The WHOLE
+     * point: the type hands the brand `credential` and `verifiedAt` only as the two
+     * keys of one object, so a bare credential without its dated verification is
+     * UNCONSTRUCTIBLE — the fused-verification invariant enforced by construction, not
+     * a hopeful side rule. Non-null iff `bylineCredentialed` is. The sidebar/banner
+     * faces map this to their `credential` + `credentialVerifiedAt` inputs.
+     */
+    credentialVerification: {
+        credential: string;
+        verifiedAt: string;
+    } | null;
+    /** The name-only byline (`Reviewed [date] by [Name].`). Always present. */
+    bylinePlain: string;
+    /** The reviewer's resolved professional name (QA-safe), raw, for a name-only layout. */
+    reviewerName: string;
+    /** Reviewer's short verified bio, or null (verified-only). */
+    bio: string | null;
+    /** Reviewer's longer verified background, or null (verified-only). */
+    background: string | null;
+    /** The QA-SCREENED `verifiedExpertMemo` (never the raw in-flight `expertMemo`), or null. */
+    memo: string | null;
+    /** The compensation cue (`Compensated expert`). Null for a pro-bono reviewer. */
+    compensationCue: string | null;
+    /** The verbatim FTC scope disclaimer. Always present. */
+    scopeLine: string;
+    /** Reviewer photo URL (cert-frozen override ?? live), or null. */
+    reviewerPhoto: string | null;
+    /** The CertREV expert-profile URL (`certrev.com/expert/{id}`) — never LinkedIn. */
+    reviewerProfileUrl: string | null;
+    /** The public certificate-verification URL (`/verify/{id}`). */
+    verifyUrl: string;
+    /** When the article was certified (ISO 8601) — the same date baked into the bylines. */
+    certifiedAt: string;
+    /** The last real content change after certification (ISO 8601), or null. */
+    contentModifiedAt: string | null;
+    /** The article's AUTHOR (a different person from the reviewer; carries no verification claim). */
+    authorName: string | null;
+    authorTitle: string | null;
+    /** Brand display prefs the rendering component honors. */
+    display: {
+        showExpertPhoto: boolean;
+        /** When false the component renders `bylinePlain` even if the credentialed form was delivered. */
+        showCredentials: boolean;
+    };
+    /** The brand's ACTIVE resolved render-def projection, or null (⇒ preset default). */
+    renderDef: CertChromeRenderDef | null;
+    /** Version of the delivered string set (`data-certrev-strings-version` for the crawl monitor). */
+    stringsVersion: string;
+}
+/**
+ * The ordered keys of `BuilderCertChromeData` — the SINGLE SOURCE the Builder
+ * `inputs` array and the W3 exporter⇄inputs⇄wire-type parity lock derive from, so
+ * the three can never silently drift again (POR-10721 W3). Adding a field to the
+ * interface without adding it here (or vice-versa) fails the `keyof` exhaustiveness
+ * check in `assertChromeKeysExhaustive` below.
+ */
+export declare const BUILDER_CERT_CHROME_KEYS: readonly ["bylineCredentialed", "credentialVerification", "bylinePlain", "reviewerName", "bio", "background", "memo", "compensationCue", "scopeLine", "reviewerPhoto", "reviewerProfileUrl", "verifyUrl", "certifiedAt", "contentModifiedAt", "authorName", "authorTitle", "display", "renderDef", "stringsVersion"];
+export type BuilderCertChromeKey = (typeof BUILDER_CERT_CHROME_KEYS)[number];
+//# sourceMappingURL=cert-chrome-data.d.ts.map

package/dist/builder/cert-chrome-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-chrome-data.d.ts","sourceRoot":"","sources":["../../src/builder/cert-chrome-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACzC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAClE;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;;;;;OAQG;IACH,sBAAsB,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IACzE,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAA;IACnB,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,sEAAsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,4FAA4F;IAC5F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,iFAAiF;IACjF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;IACjB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,kGAAkG;IAClG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,0DAA0D;IAC1D,OAAO,EAAE;QACR,eAAe,EAAE,OAAO,CAAA;QACxB,kGAAkG;QAClG,eAAe,EAAE,OAAO,CAAA;KACxB,CAAA;IACD,qFAAqF;IACrF,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAAA;IACrC,kGAAkG;IAClG,cAAc,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,sTAoB3B,CAAA;AAEV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/builder/cert-chrome-data.js

@@ -0,0 +1,59 @@
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `BuilderCertChromeData` — the CANONICAL headless cert-chrome wire type
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * The brand-render projection of the cert envelope (portal POR-10091) — the OPTIONS
+ * of a brand's native cert component (e.g. e.l.f.'s registered `CertReviewCard`) on
+ * a headless blocks-mode entry (Builder.io). CertREV serves the data + the ready-made
+ * strings; the brand renders it within the design-guide ladder (enforced live by the
+ * crawl monitor + the MSA anti-stripping teeth).
+ *
+ * SINGLE SOURCE (POR-10721 W1): this type is HOMED HERE so the portal exporter
+ * (`src/lib/builder/cert-chrome.ts`) and the kit component (`CertReviewCard`) +
+ * `BUILDER_REGISTRATION.inputs` all reference ONE definition — killing the drift the
+ * hand-rolled Hydrogen-replica component suffered (it carried a stale separate
+ * `credential`/`credentialVerifiedAt` shape from before the fused-pair projection).
+ * Keep byte-for-byte in sync with the portal interface until the portal migrates to
+ * import THIS (that migration is gated on publishing the package that carries it).
+ *
+ * PURITY: types + a pure key tuple only — no runtime deps, tree-shakeable.
+ */
+/**
+ * The ordered keys of `BuilderCertChromeData` — the SINGLE SOURCE the Builder
+ * `inputs` array and the W3 exporter⇄inputs⇄wire-type parity lock derive from, so
+ * the three can never silently drift again (POR-10721 W3). Adding a field to the
+ * interface without adding it here (or vice-versa) fails the `keyof` exhaustiveness
+ * check in `assertChromeKeysExhaustive` below.
+ */
+export const BUILDER_CERT_CHROME_KEYS = [
+    'bylineCredentialed',
+    'credentialVerification',
+    'bylinePlain',
+    'reviewerName',
+    'bio',
+    'background',
+    'memo',
+    'compensationCue',
+    'scopeLine',
+    'reviewerPhoto',
+    'reviewerProfileUrl',
+    'verifyUrl',
+    'certifiedAt',
+    'contentModifiedAt',
+    'authorName',
+    'authorTitle',
+    'display',
+    'renderDef',
+    'stringsVersion',
+];
+/**
+ * Compile-time proof that `BUILDER_CERT_CHROME_KEYS` === `keyof BuilderCertChromeData`
+ * exactly (both directions). If a field is added/removed on the interface without the
+ * matching key edit, ONE of these two assignments stops type-checking — so the tuple
+ * can never drift from the type silently.
+ */
+const _keysCoverType = Object.fromEntries(BUILDER_CERT_CHROME_KEYS.map((k) => [k, true]));
+const _typeCoversKeys = _keysCoverType;
+void _typeCoversKeys;
+//# sourceMappingURL=cert-chrome-data.js.map

package/dist/builder/cert-chrome-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-chrome-data.js","sourceRoot":"","sources":["../../src/builder/cert-chrome-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAiGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,oBAAoB;IACpB,wBAAwB;IACxB,aAAa;IACb,cAAc;IACd,KAAK;IACL,YAAY;IACZ,MAAM;IACN,iBAAiB;IACjB,WAAW;IACX,eAAe;IACf,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,mBAAmB;IACnB,YAAY;IACZ,aAAa;IACb,SAAS;IACT,WAAW;IACX,gBAAgB;CACP,CAAA;AAIV;;;;;GAKG;AACH,MAAM,cAAc,GAA8C,MAAM,CAAC,WAAW,CACnF,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CACR,CAAA;AACvC,MAAM,eAAe,GAAuC,cAAc,CAAA;AAC1E,KAAK,eAAe,CAAA"}

package/dist/builder/cert-review-card.d.ts

@@ -0,0 +1,68 @@
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `CertReviewCard` — the ready-to-register Builder.io PUSH cert component (W1)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * A headless brand (e.l.f.) registers `BUILDER_REGISTRATION` in its Builder
+ * `customComponents` and CertREV's exporter emits a block whose options are the
+ * `BuilderCertChromeData` projection — so the visible cert chrome renders itself,
+ * design-identical to the Shopify Liquid + WordPress PHP faces (same `renderCertBlock`
+ * string renderer). This REPLACES the ~200-line hand-rolled component every headless
+ * brand copied from the demo (POR-10721 W1).
+ *
+ * Improvements over the canary demo's hand-rolled version:
+ *  - consumes the CANONICAL `BuilderCertChromeData` (the fused `credentialVerification`
+ *    pair — a credential is UNCONSTRUCTIBLE without its dated verification), not the
+ *    demo's stale separate `credential`/`credentialVerifiedAt` fields;
+ *  - maps v2 `barInk`/`inkColor` into the theme (the demo predated brand-ink theming);
+ *  - honors `display.showCredentials`.
+ */
+import { type CertBlockMode } from '../components/render-cert-block.js';
+import type { BuilderCertChromeData } from './cert-chrome-data.js';
+/**
+ * The canonical Builder block name. A brand's registration + the portal
+ * `certComponent` connection field default to THIS; config exists only for
+ * deviation (portal `client-for-brand.ts` gains the default in a follow-up).
+ */
+export declare const CERT_COMPONENT_NAME = "CertREV Cert";
+export interface CertReviewCardProps extends Partial<BuilderCertChromeData> {
+    /** Placement face — the ENTRY/editor chooses this, NOT the exporter (not a wire-type field). */
+    mode?: CertBlockMode | null;
+    /**
+     * Banner memo placement (not a wire-type field — the ENTRY/editor chooses it). Passed
+     * straight through to `renderCertBlock`'s first-class `part` (POR-10741): `'full'`
+     * (default) renders header + memo in one block; `'header'`/`'memo'` render only that
+     * card so the memo can be placed as its own block under the article body. The old
+     * string-splitting shim is gone — `renderCertBlock` composes each part directly.
+     */
+    part?: 'full' | 'header' | 'memo' | null;
+}
+export declare function CertReviewCard(props: CertReviewCardProps): import("react").JSX.Element | null;
+/** The subset of the Builder.io input schema this kit emits. */
+export interface BuilderInput {
+    readonly name: string;
+    readonly type: 'string' | 'longText' | 'object' | 'boolean' | 'number';
+    readonly friendlyName?: string;
+    readonly helperText?: string;
+}
+/**
+ * The wire-type inputs — DERIVED from `BUILDER_CERT_CHROME_KEYS`, so the 19-field
+ * option set can never drift from the type (the W3 lock asserts name-parity). This
+ * kills the demo's hand-maintained 17-entry array.
+ */
+export declare const WIRE_INPUTS: readonly BuilderInput[];
+/** Placement inputs — chosen by the entry/editor, NOT emitted by the exporter (not wire-type keys). */
+export declare const PLACEMENT_INPUTS: readonly BuilderInput[];
+/** A Builder.io custom-component registration (the general shape; the anchor uses the same). */
+export interface CertBlockBuilderRegistration {
+    readonly name: string;
+    readonly component: typeof CertReviewCard;
+    readonly inputs: readonly BuilderInput[];
+}
+/**
+ * Ready to spread into a brand's Builder `customComponents`:
+ * `Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)`.
+ * The exporter-emitted option keys === these `inputs` === the wire type — locked by W3.
+ */
+export declare const BUILDER_REGISTRATION: CertBlockBuilderRegistration;
+//# sourceMappingURL=cert-review-card.d.ts.map

package/dist/builder/cert-review-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-review-card.d.ts","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAmB,MAAM,oCAAoC,CAAA;AAExF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAGlE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,MAAM,WAAW,mBAAoB,SAAQ,OAAO,CAAC,qBAAqB,CAAC;IAC1E,gGAAgG;IAChG,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IAC3B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;CACxC;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,sCAyDxD;AAMD,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAyBD;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,YAAY,EAG5C,CAAA;AAEH,uGAAuG;AACvG,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAQnD,CAAA;AAED,gGAAgG;AAChG,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,cAAc,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,4BAIlC,CAAA"}

package/dist/builder/cert-review-card.js

@@ -0,0 +1,129 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * `CertReviewCard` — the ready-to-register Builder.io PUSH cert component (W1)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * A headless brand (e.l.f.) registers `BUILDER_REGISTRATION` in its Builder
+ * `customComponents` and CertREV's exporter emits a block whose options are the
+ * `BuilderCertChromeData` projection — so the visible cert chrome renders itself,
+ * design-identical to the Shopify Liquid + WordPress PHP faces (same `renderCertBlock`
+ * string renderer). This REPLACES the ~200-line hand-rolled component every headless
+ * brand copied from the demo (POR-10721 W1).
+ *
+ * Improvements over the canary demo's hand-rolled version:
+ *  - consumes the CANONICAL `BuilderCertChromeData` (the fused `credentialVerification`
+ *    pair — a credential is UNCONSTRUCTIBLE without its dated verification), not the
+ *    demo's stale separate `credential`/`credentialVerifiedAt` fields;
+ *  - maps v2 `barInk`/`inkColor` into the theme (the demo predated brand-ink theming);
+ *  - honors `display.showCredentials`.
+ */
+import { renderCertBlock } from '../components/render-cert-block.js';
+import { BUILDER_CERT_CHROME_KEYS } from './cert-chrome-data.js';
+/**
+ * The canonical Builder block name. A brand's registration + the portal
+ * `certComponent` connection field default to THIS; config exists only for
+ * deviation (portal `client-for-brand.ts` gains the default in a follow-up).
+ */
+export const CERT_COMPONENT_NAME = 'CertREV Cert';
+export function CertReviewCard(props) {
+    const { reviewerName, verifyUrl } = props;
+    if (!reviewerName || !verifyUrl)
+        return null; // no chrome pre-cert
+    // The credential + its verification date arrive ONLY as the fused pair, so we can
+    // never obtain one without the other (name-only face when the pair is null, or when
+    // the brand set showCredentials:false). This IS the R1 gate, enforced by the type.
+    const cv = props.credentialVerification ?? null;
+    const showCred = props.display?.showCredentials !== false;
+    const withCred = cv && showCred ? cv : null;
+    const tokens = props.renderDef?.tokens;
+    const theme = tokens
+        ? {
+            accentColor: tokens.accentColor,
+            surface: tokens.surface,
+            cornerRadius: tokens.cornerRadius,
+            fontSlot: tokens.fontSlot,
+            // v2 brand-ink (post-demo): the bar + free-content ink follow the def.
+            barInk: tokens.barInk,
+            inkColor: tokens.inkColor,
+        }
+        : undefined;
+    const html = renderCertBlock({
+        mode: props.mode ?? 'banner',
+        theme,
+        // First-class banner memo split (POR-10741) — renderCertBlock composes the requested
+        // part directly; no string-splitting. Ignored outside banner mode.
+        ...(props.part ? { part: props.part } : {}),
+        facts: {
+            authorName: props.authorName ?? 'Editorial',
+            authorTitle: props.authorTitle ?? undefined,
+            reviewerName,
+            credential: withCred ? withCred.credential : '',
+            credentialVerifiedAt: withCred ? withCred.verifiedAt : '',
+            certifiedAt: props.certifiedAt ?? '',
+            memo: props.memo ?? '',
+            bio: props.bio ?? undefined,
+            profileUrl: props.reviewerProfileUrl ?? '',
+            certificateUrl: verifyUrl,
+            // Locked strings default byte-verbatim inside renderCertBlock; pass the
+            // delivered cue/scope through so a pro-bono (null-cue) delivery is honored.
+            ...(props.compensationCue ? { compensationCue: props.compensationCue } : {}),
+            ...(props.scopeLine ? { scopeLine: props.scopeLine } : {}),
+        },
+    });
+    return (_jsx("div", { "data-certrev-cert-chrome": "", "data-certrev-strings-version": props.stringsVersion ?? undefined, "data-certrev-def-version": props.renderDef?.v ?? undefined, 
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: renderCertBlock is the escaping-safe SSR string renderer
+        dangerouslySetInnerHTML: { __html: html } }));
+}
+/** Builder input TYPE per wire-type key — the exporter serializes these option values. */
+const WIRE_INPUT_TYPE = {
+    bylineCredentialed: 'string',
+    credentialVerification: 'object',
+    bylinePlain: 'string',
+    reviewerName: 'string',
+    bio: 'longText',
+    background: 'longText',
+    memo: 'longText',
+    compensationCue: 'string',
+    scopeLine: 'string',
+    reviewerPhoto: 'string',
+    reviewerProfileUrl: 'string',
+    verifyUrl: 'string',
+    certifiedAt: 'string',
+    contentModifiedAt: 'string',
+    authorName: 'string',
+    authorTitle: 'string',
+    display: 'object',
+    renderDef: 'object',
+    stringsVersion: 'string',
+};
+/**
+ * The wire-type inputs — DERIVED from `BUILDER_CERT_CHROME_KEYS`, so the 19-field
+ * option set can never drift from the type (the W3 lock asserts name-parity). This
+ * kills the demo's hand-maintained 17-entry array.
+ */
+export const WIRE_INPUTS = BUILDER_CERT_CHROME_KEYS.map((name) => ({
+    name,
+    type: WIRE_INPUT_TYPE[name],
+}));
+/** Placement inputs — chosen by the entry/editor, NOT emitted by the exporter (not wire-type keys). */
+export const PLACEMENT_INPUTS = [
+    {
+        name: 'mode',
+        type: 'string',
+        friendlyName: 'Placement',
+        helperText: 'banner (default) · sidebar · floating',
+    },
+    { name: 'part', type: 'string', friendlyName: 'Banner part', helperText: 'full (default) · header · memo' },
+];
+/**
+ * Ready to spread into a brand's Builder `customComponents`:
+ * `Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)`.
+ * The exporter-emitted option keys === these `inputs` === the wire type — locked by W3.
+ */
+export const BUILDER_REGISTRATION = {
+    name: CERT_COMPONENT_NAME,
+    component: CertReviewCard,
+    inputs: [...PLACEMENT_INPUTS, ...WIRE_INPUTS],
+};
+//# sourceMappingURL=cert-review-card.js.map

package/dist/builder/cert-review-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-review-card.js","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAsB,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAejD,MAAM,UAAU,cAAc,CAAC,KAA0B;IACxD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IACzC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;IAElE,kFAAkF;IAClF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,EAAE,GAAG,KAAK,CAAC,sBAAsB,IAAI,IAAI,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,KAAK,CAAA;IACzD,MAAM,QAAQ,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE3C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAA;IACtC,MAAM,KAAK,GAA4C,MAAM;QAC5D,CAAC,CAAC;YACA,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAsD;YACvE,uEAAuE;YACvE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SACzB;QACF,CAAC,CAAC,SAAS,CAAA;IAEZ,MAAM,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,EAAG,KAAK,CAAC,IAAsB,IAAI,QAAQ;QAC/C,KAAK;QACL,qFAAqF;QACrF,mEAAmE;QACnE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,KAAK,EAAE;YACN,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,WAAW;YAC3C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC3C,YAAY;YACZ,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAC/C,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;YAC1C,cAAc,EAAE,SAAS;YACzB,wEAAwE;YACxE,4EAA4E;YAC5E,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D;KACD,CAAC,CAAA;IAEF,OAAO,CACN,0CAC0B,EAAE,kCACG,KAAK,CAAC,cAAc,IAAI,SAAS,8BACrC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,SAAS;QACzD,iHAAiH;QACjH,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GACxC,CACF,CAAA;AACF,CAAC;AAcD,0FAA0F;AAC1F,MAAM,eAAe,GAA4E;IAChG,kBAAkB,EAAE,QAAQ;IAC5B,sBAAsB,EAAE,QAAQ;IAChC,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,QAAQ;IACtB,GAAG,EAAE,UAAU;IACf,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,UAAU;IAChB,eAAe,EAAE,QAAQ;IACzB,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,cAAc,EAAE,QAAQ;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAA4B,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI;IACJ,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;CAC3B,CAAC,CAAC,CAAA;AAEH,uGAAuG;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACxD;QACC,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,uCAAuC;KACnD;IACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,gCAAgC,EAAE;CAC3G,CAAA;AASD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IACjE,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,WAAW,CAAC;CAC7C,CAAA"}

package/dist/builder/index.d.ts

@@ -72,4 +72,6 @@ export interface CertRevBuilderRegistration {
  * (truth). Matched by NAME at render, so Write-API content works without visual-editor setup.
  */
 export declare const certRevAnchorComponent: CertRevBuilderRegistration;
+export { BUILDER_CERT_CHROME_KEYS, type BuilderCertChromeData, type BuilderCertChromeKey, type CertChromeRenderDef, } from './cert-chrome-data.js';
+export { BUILDER_REGISTRATION, type BuilderInput, CERT_COMPONENT_NAME, type CertBlockBuilderRegistration, CertReviewCard, type CertReviewCardProps, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/builder/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA;AAGD,OAAO,EACN,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EACpB,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,cAAc,EACd,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}

package/dist/builder/index.js

@@ -77,4 +77,7 @@ export const certRevAnchorComponent = {
     name: 'CertREV Review',
     inputs: [],
 };
+// ── POR-10721 W1/W3: the Builder.io PUSH kit (CertReviewCard) + single-sourced wire type ──
+export { BUILDER_CERT_CHROME_KEYS, } from './cert-chrome-data.js';
+export { BUILDER_REGISTRATION, CERT_COMPONENT_NAME, CertReviewCard, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
 //# sourceMappingURL=index.js.map

package/dist/builder/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,uCAEgB,8CAA0B,oJAEtC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,uCAEgB,8CAA0B,oJAEtC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA;AAED,6FAA6F;AAC7F,OAAO,EACN,wBAAwB,GAIxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EAEpB,mBAAmB,EAEnB,cAAc,EAEd,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}

package/dist/components/preview-block.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `renderPreviewBlock` — a STATIC, NON-DELIVERY preview of the cert block for pre-sales
+ * look-demos (POR-10743, from the e.l.f. Builder demo).
+ *
+ * The visual is BYTE-FOR-BYTE `renderCertBlock` (pixel-parity — "see it on your own site
+ * today"), wrapped in a `[data-certrev-preview]` container carrying a REQUIRED expiry.
+ *
+ * Why it is safe by construction — and can NEVER be delivery:
+ *  - A preview has NO signed envelope and NO modal. CertREV's verify / badge-revalidation /
+ *    crawl-audit all key off a signed `CertDeliveryEnvelope`; an unsigned block is SUPPRESSED
+ *    on any live verify, never rendered as a certification. So a preview literally cannot pass
+ *    as a delivered cert — the "never delivery" property is structural, not a policy.
+ *  - The container marker (`data-certrev-preview="1"`) + the default-on visible label make it
+ *    unmistakable to humans AND tooling; the required `data-certrev-preview-expires` bounds its
+ *    life so a stale snapshot can be refused downstream.
+ *  - It is NOT revocable — the kill-switch cannot reach a static HTML snapshot — so it must stay
+ *    demo / draft-only. That is the CALLER's duty; this renderer bakes the markers that let the
+ *    surrounding systems enforce it.
+ */
+import { type RenderCertBlockInput } from './render-cert-block.js';
+export interface PreviewBlockOptions {
+    /**
+     * REQUIRED — when this preview expires (ISO 8601). A preview MUST be time-bounded so a stale
+     * snapshot can be refused downstream; there is deliberately NO default (an unbounded preview
+     * is the drift-into-shadow-delivery risk this option exists to prevent).
+     */
+    readonly expiresAt: string;
+    /**
+     * Show the visible caption. Default `true` — the SAFE default. Opt out (`false`) ONLY for a
+     * true pixel-parity look-demo; the machine marker + expiry + non-delivery guarantee remain.
+     */
+    readonly showLabel?: boolean;
+    /** Override the caption text (default below). */
+    readonly labelText?: string;
+}
+/** Extract a preview block's baked expiry (ISO), or null if the HTML isn't a preview block. */
+export declare function previewExpiry(html: string): string | null;
+/**
+ * Render a static, clearly-labeled, time-bounded preview of the cert block. See the module doc
+ * for the safety model. `expiresAt` is required; throws without it.
+ */
+export declare function renderPreviewBlock(input: RenderCertBlockInput, options: PreviewBlockOptions): string;
+//# sourceMappingURL=preview-block.d.ts.map

package/dist/components/preview-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-block.d.ts","sourceRoot":"","sources":["../../src/components/preview-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,KAAK,oBAAoB,EAAmB,MAAM,wBAAwB,CAAA;AAEnF,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,iDAAiD;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAID,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGzD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAsBpG"}

package/dist/components/preview-block.js

@@ -0,0 +1,53 @@
+/**
+ * `renderPreviewBlock` — a STATIC, NON-DELIVERY preview of the cert block for pre-sales
+ * look-demos (POR-10743, from the e.l.f. Builder demo).
+ *
+ * The visual is BYTE-FOR-BYTE `renderCertBlock` (pixel-parity — "see it on your own site
+ * today"), wrapped in a `[data-certrev-preview]` container carrying a REQUIRED expiry.
+ *
+ * Why it is safe by construction — and can NEVER be delivery:
+ *  - A preview has NO signed envelope and NO modal. CertREV's verify / badge-revalidation /
+ *    crawl-audit all key off a signed `CertDeliveryEnvelope`; an unsigned block is SUPPRESSED
+ *    on any live verify, never rendered as a certification. So a preview literally cannot pass
+ *    as a delivered cert — the "never delivery" property is structural, not a policy.
+ *  - The container marker (`data-certrev-preview="1"`) + the default-on visible label make it
+ *    unmistakable to humans AND tooling; the required `data-certrev-preview-expires` bounds its
+ *    life so a stale snapshot can be refused downstream.
+ *  - It is NOT revocable — the kill-switch cannot reach a static HTML snapshot — so it must stay
+ *    demo / draft-only. That is the CALLER's duty; this renderer bakes the markers that let the
+ *    surrounding systems enforce it.
+ */
+import { escapeAttribute, escapeHtml } from './escape.js';
+import { renderCertBlock } from './render-cert-block.js';
+const DEFAULT_LABEL = 'Preview — not a verified certification';
+/** Extract a preview block's baked expiry (ISO), or null if the HTML isn't a preview block. */
+export function previewExpiry(html) {
+    const m = html.match(/data-certrev-preview-expires="([^"]*)"/);
+    return m ? m[1] : null;
+}
+/**
+ * Render a static, clearly-labeled, time-bounded preview of the cert block. See the module doc
+ * for the safety model. `expiresAt` is required; throws without it.
+ */
+export function renderPreviewBlock(input, options) {
+    const expires = options.expiresAt.trim();
+    if (!expires) {
+        throw new Error('renderPreviewBlock: `expiresAt` is required — a preview must be time-bounded.');
+    }
+    // The bound must be REAL — an unparseable expiry is a toothless bound (downstream can't refuse a
+    // stale preview it can't date). Reject anything Date can't parse, so `previewExpiry()` consumers
+    // always get a usable timestamp.
+    if (Number.isNaN(new Date(expires).getTime())) {
+        throw new Error(`renderPreviewBlock: \`expiresAt\` must be a parseable date (got "${expires}").`);
+    }
+    const showLabel = options.showLabel !== false;
+    const label = showLabel
+        ? `<div data-certrev-preview-label style="font:500 11px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:.08em;text-transform:uppercase;color:#9a9a9a;margin-bottom:8px;">${escapeHtml(options.labelText ?? DEFAULT_LABEL)}</div>`
+        : '';
+    return (`<!-- CertREV PREVIEW — static, non-revocable, NOT a verified certification. Expires ${escapeHtml(expires)}. Never use as delivery. -->` +
+        `<div data-certrev-preview="1" data-certrev-preview-expires="${escapeAttribute(expires)}">` +
+        label +
+        renderCertBlock(input) +
+        `</div>`);
+}
+//# sourceMappingURL=preview-block.js.map

package/dist/components/preview-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-block.js","sourceRoot":"","sources":["../../src/components/preview-block.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAA6B,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAkBnF,MAAM,aAAa,GAAG,wCAAwC,CAAA;AAE9D,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC9D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA2B,EAAE,OAA4B;IAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAA;IACjG,CAAC;IACD,iGAAiG;IACjG,iGAAiG;IACjG,iCAAiC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oEAAoE,OAAO,KAAK,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAA;IAC7C,MAAM,KAAK,GAAG,SAAS;QACtB,CAAC,CAAC,wLAAwL,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,QAAQ;QAChP,CAAC,CAAC,EAAE,CAAA;IACL,OAAO,CACN,uFAAuF,UAAU,CAAC,OAAO,CAAC,8BAA8B;QACxI,+DAA+D,eAAe,CAAC,OAAO,CAAC,IAAI;QAC3F,KAAK;QACL,eAAe,CAAC,KAAK,CAAC;QACtB,QAAQ,CACR,CAAA;AACF,CAAC"}