@certrev/cert-block 0.5.2 → 0.5.3

package/CHANGELOG.md

@@ -0,0 +1,53 @@
+# Changelog — @certrev/cert-block
+
+The cert card is a **design-locked** component. Semver contract: **patch and minor releases never
+change the rendered cert output and never break a compiling integration** (registration surface,
+exports, types). Anything that would alter what a visitor sees — or require integration changes —
+is announced loudly here first.
+
+## 0.5.3 — 2026-07-22
+
+- **New:** `certRevCertComponent` (`./builder`) — the drop-in gen2 registration entry, with the
+  mutable `inputs[]` the SDK's `RegisteredComponent` type expects:
+  `customComponents={[...yourComponents, certRevCertComponent]}`. One import, no re-wrapping, no
+  readonly spread. `BUILDER_REGISTRATION` (the readonly canonical view) is unchanged.
+- **New:** the 19 exporter-populated wire inputs are marked `advanced` — the Builder editor's
+  Options tab now leads with the two placement inputs (`mode`, `part`) and tucks the
+  system-populated fields under "Advanced". Editor-cosmetic only.
+- **Changed:** `@certrev/cert-contract` moved from a peer dependency (`>=0.5.0`, unbounded) to a
+  regular dependency (bounded `^0.5.0`) — a plain `npm i @certrev/cert-block` is a complete
+  install regardless of the consumer's peer-install settings, and a future contract 0.6 can no
+  longer float in unreviewed.
+- **Docs:** README rewritten for the gen2 SDK (`customComponents` array) — the previous README
+  showed the gen1 `Builder.registerComponent` API and pre-publish notes that no longer applied
+  (the contract package and the modal bundle both ship for real since 0.5.x). Added in-package
+  modal instructions (`?url` import + external script + literal CSP allowances), a known-issues
+  note (`@builder.io/sdk-react@5.2.4` types under `moduleResolution: nodenext`), and this
+  changelog.
+- Rendered output: **byte-identical to 0.5.2** (changes outside the registration surface are
+  comment-only).
+
+## 0.5.2 — 2026-07-21
+
+- Republish of 0.5.1 (the 0.5.1 GitHub-Packages tarball was unfetchable). No code changes.
+
+## 0.5.1 — 2026-07
+
+- `./modal/placement` subpath exposed (the side-effect-free placement engine).
+
+## 0.5.0 — 2026-07
+
+- The certificate-modal Web Component moved **into** the package (POR-10721 W2): prebuilt
+  dependency-free IIFE at `./modal/certrev-cert.js` (byte-parity with the deployed theme-extension
+  asset) + the `./modal` subpath. Banner memo placement (`part`), font hook, static preview block.
+
+## 0.4.0 — 2026-07
+
+- Render strictly from `placedFields` + `renderCustomFace`; v2 brand-ink theming
+  (`barInk` / `inkColor`).
+
+## 0.3.0 and earlier
+
+- The locked 3-mode `renderCertBlock` faces, re-synced to the final Liquid design; the
+  ambient-URL anchor model (`CertRevAnchor`, zero-input); the initial React components, JSON-LD
+  projector, fail-closed verify layer, and `<certrev-badge>` Web Component.

package/README.md

@@ -52,6 +52,9 @@ import { verifyEnvelope, renderVerdict, verifySignatureOnly } from '@certrev/cer
 
 // Web Component (separate subpath — does NOT touch customElements on import)
 import { defineCertRevBadge, setCertRevKidResolver } from '@certrev/cert-block/webcomponent'
+
+// Builder.io registration (separate subpath; no Builder dependency)
+import { certRevCertComponent, BUILDER_REGISTRATION, CERT_COMPONENT_NAME } from '@certrev/cert-block/builder'
 ```
 
 ## Usage — headless React (Hydrogen / Next server component)
@@ -121,32 +124,76 @@ is the editor-placed alternative (W4, POR-10721).
 ### PUSH — the registered cert block (recommended)
 
 CertREV's exporter emits a cert block whose options are the `BuilderCertChromeData` projection.
-Register the ready component once, from the `./builder` subpath — no hand-mapped options, no
-hand-maintained inputs array:
+Register the ready component once, from the `./builder` subpath — one import, one entry in the
+`customComponents` array your app already passes to the gen2 SDK's `<Content>` (the same array
+your other custom components render from). No hand-mapped options, no hand-maintained inputs:
+
+```tsx
+// gen2 SDKs (@builder.io/sdk-react and friends — Hydrogen/Remix, Next, Gatsby)
+import { certRevCertComponent } from '@certrev/cert-block/builder'
+
+<Content
+  model="blog-article"
+  content={content}
+  apiKey={apiKey}
+  customComponents={[...yourExistingComponents, certRevCertComponent]}
+/>
+```
+
+On `0.5.2` and earlier (before `certRevCertComponent` existed), build the entry from the
+canonical readonly view — the spread sheds the `readonly` typing, which the gen2 SDK's mutable
+`inputs[]` type won't accept directly:
 
 ```ts
-import { Builder } from '@builder.io/react'
 import { BUILDER_REGISTRATION } from '@certrev/cert-block/builder'
 
-Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)
+const certRevComponent = {
+  component: BUILDER_REGISTRATION.component,
+  name: BUILDER_REGISTRATION.name,
+  inputs: [...BUILDER_REGISTRATION.inputs],
+}
 ```
 
-`CERT_COMPONENT_NAME` is the canonical block name the portal's `certComponent` connection field
-defaults to; `BUILDER_REGISTRATION.inputs` are single-sourced from the `BuilderCertChromeData`
-wire type (drift-locked — the exporter option keys, the registered inputs, and the type can
-never diverge silently). The component enforces the fused-credential rule by construction (a
-credential is unrenderable without its dated verification) and themes to the brand's render-def
-(accent / surface / corners / font + v2 bar-ink / body-ink).
+Gen1 SDK (`@builder.io/react`) consumers register the same data imperatively:
+`Builder.registerComponent(certRevCertComponent.component, certRevCertComponent)`.
+
+`CERT_COMPONENT_NAME` (`"CertREV Cert"`) is the canonical block name the portal's
+`certComponent` connection field defaults to; the inputs are single-sourced from the
+`BuilderCertChromeData` wire type (drift-locked — the exporter option keys, the registered
+inputs, and the type can never diverge silently). The 19 exporter-populated wire inputs are
+marked `advanced`, so the editor's Options tab leads with the two placement choices an editor
+actually makes (`mode`, `part`). The component enforces the fused-credential rule by
+construction (a credential is unrenderable without its dated verification) and themes to the
+brand's render-def (accent / surface / corners / font + v2 bar-ink / body-ink).
 
 ### The certificate modal + CSP
 
-The "View certificate" affordance opens an envelope-verified modal. Add the modal element +
-its browser bundle. *(Modal-in-package is POR-10721 W2 — until it lands, vendor the IIFE bundle
-from the Shopify theme extension's `certrev-cert.js`, exactly as the canary demo does.)*
+The "View certificate" affordance opens an envelope-verified modal. The browser bundle **ships
+in-package**: a prebuilt, dependency-free, minified IIFE at `@certrev/cert-block/modal/certrev-cert.js`.
+Serve it as an external `<script>` — do **not** side-effect-import it into server code (it
+registers `customElements` and touches `window`; keeping it an external script keeps it out of
+the SSR bundle entirely):
+
+```tsx
+// Vite-family stacks (Hydrogen/Remix): resolve the shipped asset to a URL, load it deferred
+import certScriptUrl from '@certrev/cert-block/modal/certrev-cert.js?url'
+
+<certrev-cert-modal
+  data-delivery-api="https://portal.certrev.com"
+  data-platform={platform}
+  data-external-id={externalId}
+  data-fonts="host"
+/>
+<script src={certScriptUrl} defer />
+```
+
+Two CSP allowances for the headless host — the modal is the ONLY part that needs any (the card
+renders zero external assets: no fonts fetched, no images, inline-SVG logo):
 
-Two CSP allowances for the headless host:
-- `connect-src` → the CertREV Delivery origin (the modal fetches the signed envelope).
-- `img-src` → `cdn.builder.io` + the CertREV asset origin (headshots).
+- `connect-src` → the CertREV Delivery origin the element fetches the signed envelope from
+  (production `https://portal.certrev.com`; staging `https://staging.portal.certrev.com`).
+- `img-src` → `https://cdn.builder.io` + whatever origin the envelope's expert-headshot
+  `photoUrl` points at (CertREV portal assets in production).
 
 `data-delivery-api` is the **origin only** — the element appends
 `/api/cert/v1/delivery/{platform}/{externalId}`. Preview drafts with `includeUnpublished` on the
@@ -169,21 +216,27 @@ The package never renders an unverified credential. Every error path — bad sig
 - The React components are render-pure (verified by `react-dom/server` SSR tests) so they work as Server Components and as client components that SSR identically — same crawlable output either way.
 - Date formatting is deterministic UTC (fixed English month abbreviations, not `toLocaleDateString`) so SSR output is byte-stable and never causes a hydration mismatch.
 
-## Integration TODOs (wire the real `@certrev/cert-contract`)
+## The contract dependency
 
-The shared contract types + the `VerdictKernel` live in the published `@certrev/cert-contract` package, which is **not yet on a registry this workspace installs from**. Until it publishes, the SDK binds the contract surface through a **local stub** so everything builds + tests now. To cut over on publish:
+The shared contract types + the fail-closed `VerdictKernel` live in
+[`@certrev/cert-contract`](https://www.npmjs.com/package/@certrev/cert-contract) (published, MIT).
+Since `0.5.3` it is a **regular dependency** — `npm i @certrev/cert-block` brings it along; a
+brand integration never imports it directly. Its one runtime dependency is `canonicalize` (the
+RFC-8785 JCS implementation used for signature verification). To be clear about that word:
+**nothing cryptographic runs at card render** — the cert card draws purely from block options;
+verification enters only with the modal / the `getVerifiedEnvelope` verify layer.
 
-1. **Delete** `src/contract/kernel-contract.ts` (the type mirror) and `src/contract/kernel-stub.ts` (the faithful kernel impl).
-2. In `src/contract/kernel.ts` (the single binding point), **replace both re-export blocks** with one line: `export * from '@certrev/cert-contract'`. The exported names are deliberately identical, so nothing else in the SDK changes.
-3. In `package.json`, flip the `@certrev/cert-contract` peer dependency back to **`optional: false`** and **remove the root `.npmrc`** `auto-install-peers=false` line (it exists only so the workspace installs against the stub).
-4. Point `src/contract/fixtures.ts` at cert-contract's real `canonicalPayloadBytes` (RFC 8785) so the test fixtures sign bytes the published kernel verifies. (Today the stub + fixtures share a minimal JCS sufficient for the all-string/number/bool envelope shape.)
-5. Confirm `verifyEnvelope` / `renderVerdict` / `verifySignatureOnly` / `toEd25519PublicKey` resolve from the published package, then re-run `pnpm typecheck && pnpm test && pnpm build`.
+## Known issues (upstream)
 
-A WebCrypto verify path for the Web Component's client-fetch fallback lives in cert-contract; once published, wire it into `certrev-badge.ts` so the universal embed can verify in the browser without a pre-supplied resolver.
+- `@builder.io/sdk-react@5.2.4` ships types that fail to compile under
+  `moduleResolution: "nodenext"` (TS2834 cascade inside the SDK's own imports). cert-block's own
+  types are clean under both `bundler` and `nodenext` in an ESM consumer. Hydrogen / Remix / Vite
+  storefronts use `bundler` resolution and are unaffected.
 
-## Current consumers
+## Target surfaces
 
-- _None yet._ Target consumers: brand-owned Hydrogen / Next / Remix storefronts (`headless_react`), Builder.io spaces (`headless_visual_cms`), and any site dropping in `<certrev-badge>` (`universal_embed`). Add each here as it adopts the SDK.
+- Brand-owned Hydrogen / Next / Remix storefronts (`headless_react`), Builder.io spaces
+  (`headless_visual_cms`), and any site dropping in `<certrev-badge>` (`universal_embed`).
 
 ## Tests
 
@@ -198,4 +251,7 @@ Facts are mocked via `makeMockPayload` / `makeSignedEnvelope` (`src/contract/fix
 
 ## Version
 
-`0.4.0` (this branch, `feat/cert-block-v2-render`) — the locked cert-render faces (`renderCertBlock`, 3 modes + custom), v2 brand-ink theming (`barInk`/`inkColor`), and the Builder.io PUSH kit (`CertReviewCard` + `BUILDER_REGISTRATION` + the single-sourced `BuilderCertChromeData` wire type, POR-10721 W1/W3). npm is at `0.3.0`; `main` trails on `0.1.3` — the version lineage + branch strategy are tracked in the repo `COORDINATION.md`. Publishes **publicly** to npm as `@certrev/cert-block` (`publishConfig.access: public`).
+`0.5.3` — see [CHANGELOG.md](./CHANGELOG.md) for the release history and the semver contract
+(patch/minor never change the rendered cert output or break a compiling integration). Publishes
+**publicly** to npm as `@certrev/cert-block` (`publishConfig.access: public`) via GitHub Actions
+trusted publishing (OIDC); the internal `@certrev` GitHub-Packages channel mirrors it.

package/dist/builder/cert-chrome-data.d.ts

@@ -4,7 +4,7 @@
  * ─────────────────────────────────────────────────────────────────────────────
  *
  * The brand-render projection of the cert envelope (portal POR-10091) — the OPTIONS
- * of a brand's native cert component (e.g. e.l.f.'s registered `CertReviewCard`) on
+ * of a brand's native cert component (the registered `CertReviewCard`) on
  * a headless blocks-mode entry (Builder.io). CertREV serves the data + the ready-made
  * strings; the brand renders it within the design-guide ladder (enforced live by the
  * crawl monitor + the MSA anti-stripping teeth).

package/dist/builder/cert-chrome-data.js

@@ -4,7 +4,7 @@
  * ─────────────────────────────────────────────────────────────────────────────
  *
  * The brand-render projection of the cert envelope (portal POR-10091) — the OPTIONS
- * of a brand's native cert component (e.g. e.l.f.'s registered `CertReviewCard`) on
+ * of a brand's native cert component (the registered `CertReviewCard`) on
  * a headless blocks-mode entry (Builder.io). CertREV serves the data + the ready-made
  * strings; the brand renders it within the design-guide ladder (enforced live by the
  * crawl monitor + the MSA anti-stripping teeth).

package/dist/builder/cert-review-card.d.ts

@@ -3,7 +3,7 @@
  * `CertReviewCard` — the ready-to-register Builder.io PUSH cert component (W1)
  * ─────────────────────────────────────────────────────────────────────────────
  *
- * A headless brand (e.l.f.) registers `BUILDER_REGISTRATION` in its Builder
+ * A headless brand registers `certRevCertComponent` in its Builder
  * `customComponents` and CertREV's exporter emits a block whose options are the
  * `BuilderCertChromeData` projection — so the visible cert chrome renders itself,
  * design-identical to the Shopify Liquid + WordPress PHP faces (same `renderCertBlock`
@@ -44,6 +44,8 @@ export interface BuilderInput {
     readonly type: 'string' | 'longText' | 'object' | 'boolean' | 'number';
     readonly friendlyName?: string;
     readonly helperText?: string;
+    /** Tucks the input under the editor's "Advanced" reveal (Builder's `Input.advanced`). */
+    readonly advanced?: boolean;
 }
 /**
  * The wire-type inputs — DERIVED from `BUILDER_CERT_CHROME_KEYS`, so the 19-field
@@ -60,9 +62,31 @@ export interface CertBlockBuilderRegistration {
     readonly inputs: readonly BuilderInput[];
 }
 /**
- * Ready to spread into a brand's Builder `customComponents`:
- * `Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)`.
+ * The canonical registration data (readonly view). Most consumers want
+ * `certRevCertComponent` below — drop-in ready for the gen2 SDK's `customComponents`
+ * array. This readonly view remains for consumers that build their own entry
+ * (`inputs` must be spread — `[...BUILDER_REGISTRATION.inputs]` — because the gen2
+ * SDK's `RegisteredComponent.inputs` type is mutable).
  * The exporter-emitted option keys === these `inputs` === the wire type — locked by W3.
  */
 export declare const BUILDER_REGISTRATION: CertBlockBuilderRegistration;
+/**
+ * Structural shape of the gen2 SDK's `RegisteredComponent` — the subset the PUSH kit
+ * populates, with the MUTABLE `inputs` array the SDK's type requires. Declared locally
+ * (same pattern as `CertRevBuilderRegistration` on the anchor path) so cert-block needs
+ * no Builder dependency; directly assignable at `<Content customComponents={[...]}>`.
+ */
+export interface CertReviewCardRegisteredComponent {
+    component: typeof CertReviewCard;
+    name: string;
+    description?: string;
+    inputs: BuilderInput[];
+}
+/**
+ * Ready-to-register: `customComponents={[...yourComponents, certRevCertComponent]}` —
+ * one import, no re-wrapping, no spread. Carries the identical W3-locked input set as
+ * `BUILDER_REGISTRATION` in a FRESH mutable array (the two never share an instance, so
+ * an SDK-side mutation can never corrupt the canonical readonly view).
+ */
+export declare const certRevCertComponent: CertReviewCardRegisteredComponent;
 //# sourceMappingURL=cert-review-card.d.ts.map

package/dist/builder/cert-review-card.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cert-review-card.d.ts","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAmB,MAAM,oCAAoC,CAAA;AAExF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAGlE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,MAAM,WAAW,mBAAoB,SAAQ,OAAO,CAAC,qBAAqB,CAAC;IAC1E,gGAAgG;IAChG,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IAC3B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;CACxC;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,sCAyDxD;AAMD,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAyBD;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,YAAY,EAG5C,CAAA;AAEH,uGAAuG;AACvG,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAQnD,CAAA;AAED,gGAAgG;AAChG,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,cAAc,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,4BAIlC,CAAA"}
+{"version":3,"file":"cert-review-card.d.ts","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAmB,MAAM,oCAAoC,CAAA;AAExF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAGlE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,MAAM,WAAW,mBAAoB,SAAQ,OAAO,CAAC,qBAAqB,CAAC;IAC1E,gGAAgG;IAChG,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IAC3B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;CACxC;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,sCAyDxD;AAMD,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC3B;AAyBD;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,YAAY,EAM5C,CAAA;AAEH,uGAAuG;AACvG,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAQnD,CAAA;AAED,gGAAgG;AAChG,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,cAAc,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACxC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,4BAIlC,CAAA;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IACjD,SAAS,EAAE,OAAO,cAAc,CAAA;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,YAAY,EAAE,CAAA;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,iCAMlC,CAAA"}

package/dist/builder/cert-review-card.js

@@ -4,7 +4,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * `CertReviewCard` — the ready-to-register Builder.io PUSH cert component (W1)
  * ─────────────────────────────────────────────────────────────────────────────
  *
- * A headless brand (e.l.f.) registers `BUILDER_REGISTRATION` in its Builder
+ * A headless brand registers `certRevCertComponent` in its Builder
  * `customComponents` and CertREV's exporter emits a block whose options are the
  * `BuilderCertChromeData` projection — so the visible cert chrome renders itself,
  * design-identical to the Shopify Liquid + WordPress PHP faces (same `renderCertBlock`
@@ -105,6 +105,9 @@ const WIRE_INPUT_TYPE = {
 export const WIRE_INPUTS = BUILDER_CERT_CHROME_KEYS.map((name) => ({
     name,
     type: WIRE_INPUT_TYPE[name],
+    // Exporter-populated wire fields: collapsed under the editor's "Advanced" reveal so the
+    // Options tab leads with the two placement choices an editor actually makes (mode/part).
+    advanced: true,
 }));
 /** Placement inputs — chosen by the entry/editor, NOT emitted by the exporter (not wire-type keys). */
 export const PLACEMENT_INPUTS = [
@@ -117,8 +120,11 @@ export const PLACEMENT_INPUTS = [
     { name: 'part', type: 'string', friendlyName: 'Banner part', helperText: 'full (default) · header · memo' },
 ];
 /**
- * Ready to spread into a brand's Builder `customComponents`:
- * `Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)`.
+ * The canonical registration data (readonly view). Most consumers want
+ * `certRevCertComponent` below — drop-in ready for the gen2 SDK's `customComponents`
+ * array. This readonly view remains for consumers that build their own entry
+ * (`inputs` must be spread — `[...BUILDER_REGISTRATION.inputs]` — because the gen2
+ * SDK's `RegisteredComponent.inputs` type is mutable).
  * The exporter-emitted option keys === these `inputs` === the wire type — locked by W3.
  */
 export const BUILDER_REGISTRATION = {
@@ -126,4 +132,16 @@ export const BUILDER_REGISTRATION = {
     component: CertReviewCard,
     inputs: [...PLACEMENT_INPUTS, ...WIRE_INPUTS],
 };
+/**
+ * Ready-to-register: `customComponents={[...yourComponents, certRevCertComponent]}` —
+ * one import, no re-wrapping, no spread. Carries the identical W3-locked input set as
+ * `BUILDER_REGISTRATION` in a FRESH mutable array (the two never share an instance, so
+ * an SDK-side mutation can never corrupt the canonical readonly view).
+ */
+export const certRevCertComponent = {
+    name: CERT_COMPONENT_NAME,
+    component: CertReviewCard,
+    description: 'CertREV expert-review cert card. Options are populated by the CertREV exporter — editors choose placement (mode/part) only.',
+    inputs: [...PLACEMENT_INPUTS, ...WIRE_INPUTS],
+};
 //# sourceMappingURL=cert-review-card.js.map

package/dist/builder/cert-review-card.js.map

@@ -1 +1 @@
-{"version":3,"file":"cert-review-card.js","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAsB,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAejD,MAAM,UAAU,cAAc,CAAC,KAA0B;IACxD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IACzC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;IAElE,kFAAkF;IAClF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,EAAE,GAAG,KAAK,CAAC,sBAAsB,IAAI,IAAI,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,KAAK,CAAA;IACzD,MAAM,QAAQ,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE3C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAA;IACtC,MAAM,KAAK,GAA4C,MAAM;QAC5D,CAAC,CAAC;YACA,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAsD;YACvE,uEAAuE;YACvE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SACzB;QACF,CAAC,CAAC,SAAS,CAAA;IAEZ,MAAM,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,EAAG,KAAK,CAAC,IAAsB,IAAI,QAAQ;QAC/C,KAAK;QACL,qFAAqF;QACrF,mEAAmE;QACnE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,KAAK,EAAE;YACN,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,WAAW;YAC3C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC3C,YAAY;YACZ,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAC/C,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;YAC1C,cAAc,EAAE,SAAS;YACzB,wEAAwE;YACxE,4EAA4E;YAC5E,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D;KACD,CAAC,CAAA;IAEF,OAAO,CACN,0CAC0B,EAAE,kCACG,KAAK,CAAC,cAAc,IAAI,SAAS,8BACrC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,SAAS;QACzD,iHAAiH;QACjH,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GACxC,CACF,CAAA;AACF,CAAC;AAcD,0FAA0F;AAC1F,MAAM,eAAe,GAA4E;IAChG,kBAAkB,EAAE,QAAQ;IAC5B,sBAAsB,EAAE,QAAQ;IAChC,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,QAAQ;IACtB,GAAG,EAAE,UAAU;IACf,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,UAAU;IAChB,eAAe,EAAE,QAAQ;IACzB,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,cAAc,EAAE,QAAQ;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAA4B,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI;IACJ,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;CAC3B,CAAC,CAAC,CAAA;AAEH,uGAAuG;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACxD;QACC,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,uCAAuC;KACnD;IACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,gCAAgC,EAAE;CAC3G,CAAA;AASD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IACjE,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,WAAW,CAAC;CAC7C,CAAA"}
+{"version":3,"file":"cert-review-card.js","sourceRoot":"","sources":["../../src/builder/cert-review-card.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAsB,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAGxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAejD,MAAM,UAAU,cAAc,CAAC,KAA0B;IACxD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IACzC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA,CAAC,qBAAqB;IAElE,kFAAkF;IAClF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,EAAE,GAAG,KAAK,CAAC,sBAAsB,IAAI,IAAI,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,KAAK,KAAK,CAAA;IACzD,MAAM,QAAQ,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE3C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAA;IACtC,MAAM,KAAK,GAA4C,MAAM;QAC5D,CAAC,CAAC;YACA,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,QAAsD;YACvE,uEAAuE;YACvE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SACzB;QACF,CAAC,CAAC,SAAS,CAAA;IAEZ,MAAM,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,EAAG,KAAK,CAAC,IAAsB,IAAI,QAAQ;QAC/C,KAAK;QACL,qFAAqF;QACrF,mEAAmE;QACnE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,KAAK,EAAE;YACN,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,WAAW;YAC3C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS;YAC3C,YAAY;YACZ,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAC/C,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;YAC1C,cAAc,EAAE,SAAS;YACzB,wEAAwE;YACxE,4EAA4E;YAC5E,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D;KACD,CAAC,CAAA;IAEF,OAAO,CACN,0CAC0B,EAAE,kCACG,KAAK,CAAC,cAAc,IAAI,SAAS,8BACrC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,SAAS;QACzD,iHAAiH;QACjH,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GACxC,CACF,CAAA;AACF,CAAC;AAgBD,0FAA0F;AAC1F,MAAM,eAAe,GAA4E;IAChG,kBAAkB,EAAE,QAAQ;IAC5B,sBAAsB,EAAE,QAAQ;IAChC,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,QAAQ;IACtB,GAAG,EAAE,UAAU;IACf,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,UAAU;IAChB,eAAe,EAAE,QAAQ;IACzB,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,kBAAkB,EAAE,QAAQ;IAC5B,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,cAAc,EAAE,QAAQ;CACxB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAA4B,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI;IACJ,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;IAC3B,wFAAwF;IACxF,yFAAyF;IACzF,QAAQ,EAAE,IAAI;CACd,CAAC,CAAC,CAAA;AAEH,uGAAuG;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACxD;QACC,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,uCAAuC;KACnD;IACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,gCAAgC,EAAE;CAC3G,CAAA;AASD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IACjE,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,WAAW,CAAC;CAC7C,CAAA;AAeD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsC;IACtE,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,cAAc;IACzB,WAAW,EACV,6HAA6H;IAC9H,MAAM,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,WAAW,CAAC;CAC7C,CAAA"}

package/dist/builder/index.d.ts

@@ -73,5 +73,5 @@ export interface CertRevBuilderRegistration {
  */
 export declare const certRevAnchorComponent: CertRevBuilderRegistration;
 export { BUILDER_CERT_CHROME_KEYS, type BuilderCertChromeData, type BuilderCertChromeKey, type CertChromeRenderDef, } from './cert-chrome-data.js';
-export { BUILDER_REGISTRATION, type BuilderInput, CERT_COMPONENT_NAME, type CertBlockBuilderRegistration, CertReviewCard, type CertReviewCardProps, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
+export { BUILDER_REGISTRATION, type BuilderInput, CERT_COMPONENT_NAME, type CertBlockBuilderRegistration, certRevCertComponent, CertReviewCard, type CertReviewCardProps, type CertReviewCardRegisteredComponent, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/builder/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA;AAGD,OAAO,EACN,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EACpB,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,cAAc,EACd,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA;AAGD,OAAO,EACN,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EACpB,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,oBAAoB,EACpB,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,iCAAiC,EACtC,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}

package/dist/builder/index.js

@@ -79,5 +79,5 @@ export const certRevAnchorComponent = {
 };
 // ── POR-10721 W1/W3: the Builder.io PUSH kit (CertReviewCard) + single-sourced wire type ──
 export { BUILDER_CERT_CHROME_KEYS, } from './cert-chrome-data.js';
-export { BUILDER_REGISTRATION, CERT_COMPONENT_NAME, CertReviewCard, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
+export { BUILDER_REGISTRATION, CERT_COMPONENT_NAME, certRevCertComponent, CertReviewCard, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
 //# sourceMappingURL=index.js.map

package/dist/builder/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,uCAEgB,8CAA0B,oJAEtC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA;AAED,6FAA6F;AAC7F,OAAO,EACN,wBAAwB,GAIxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EAEpB,mBAAmB,EAEnB,cAAc,EAEd,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,uCAEgB,8CAA0B,oJAEtC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA;AAED,6FAA6F;AAC7F,OAAO,EACN,wBAAwB,GAIxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,oBAAoB,EAEpB,mBAAmB,EAEnB,oBAAoB,EACpB,cAAc,EAGd,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA"}

package/dist/components/preview-block.d.ts

@@ -1,6 +1,6 @@
 /**
  * `renderPreviewBlock` — a STATIC, NON-DELIVERY preview of the cert block for pre-sales
- * look-demos (POR-10743, from the e.l.f. Builder demo).
+ * look-demos (POR-10743, from the Builder demo).
  *
  * The visual is BYTE-FOR-BYTE `renderCertBlock` (pixel-parity — "see it on your own site
  * today"), wrapped in a `[data-certrev-preview]` container carrying a REQUIRED expiry.

package/dist/components/preview-block.js

@@ -1,6 +1,6 @@
 /**
  * `renderPreviewBlock` — a STATIC, NON-DELIVERY preview of the cert block for pre-sales
- * look-demos (POR-10743, from the e.l.f. Builder demo).
+ * look-demos (POR-10743, from the Builder demo).
  *
  * The visual is BYTE-FOR-BYTE `renderCertBlock` (pixel-parity — "see it on your own site
  * today"), wrapped in a `[data-certrev-preview]` container carrying a REQUIRED expiry.

package/dist/components/render-def.d.ts

@@ -160,7 +160,7 @@ export interface ResolvedBlockTheme {
     readonly fontSlot: RenderBlockFontSlot;
     readonly accentFg: '#141414' | '#ffffff';
     /**
-     * V2 chrome-ink (Phase 1, e.l.f.) — the header/seal bar (and floating-pill) FILL. OPTIONAL:
+     * V2 chrome-ink (Phase 1) — the header/seal bar (and floating-pill) FILL. OPTIONAL:
      * present ONLY when the def themes it, so an un-barInk'd face emits nothing extra and the bar
      * keeps its locked navy/white base (byte-identical). Mirrors the portal's `ThemeTokens.barInk`.
      */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@certrev/cert-block",
-	"version": "0.5.2",
+	"version": "0.5.3",
 	"description": "Headless / crypto_verify render edge for the CertREV CertDeliveryEnvelope. SSR-safe React components (<CertBadge>/<ExpertBio>/<CertRevBacklink>), a deterministic schema.org JSON-LD projector, a fail-closed verify layer over the shared VerdictKernel, and a framework-agnostic <certrev-badge> Web Component. Sign once (portal), render everywhere (Hydrogen / Next / Builder / universal embed).",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -35,7 +35,8 @@
 	"files": [
 		"dist",
 		"src",
-		"README.md"
+		"README.md",
+		"CHANGELOG.md"
 	],
 	"publishConfig": {
 		"registry": "https://registry.npmjs.org",
@@ -51,8 +52,10 @@
 		"typecheck": "tsc --noEmit",
 		"test": "vitest run"
 	},
+	"dependencies": {
+		"@certrev/cert-contract": "^0.5.0"
+	},
 	"peerDependencies": {
-		"@certrev/cert-contract": ">=0.5.0",
 		"react": ">=18.0.0"
 	},
 	"peerDependenciesMeta": {
@@ -61,7 +64,6 @@
 		}
 	},
 	"devDependencies": {
-		"@certrev/cert-contract": "workspace:*",
 		"@testing-library/react": "^16.1.0",
 		"@types/node": "^20.0.0",
 		"@types/react": "^18.3.0",

package/src/__tests__/render-cert-block.test.ts

@@ -51,7 +51,7 @@ const THEMED: ResolvedBlockTheme = {
 }
 
 /**
- * A v2 brand-ink themed brand (e.l.f.-shaped): a black seal bar + near-black free-content ink on
+ * A v2 brand-ink themed brand: a black seal bar + near-black free-content ink on
  * top of the accent/surface/corner/font theming. `barInkFg` is DERIVED at the edge from `barInk`
  * (accentFg('#000000') = '#ffffff'), so it need not be supplied here.
  */

package/src/builder/__tests__/builder.test.tsx

@@ -73,6 +73,7 @@ import {
 	BUILDER_REGISTRATION,
 	type BuilderCertChromeData,
 	CERT_COMPONENT_NAME,
+	certRevCertComponent,
 	CertReviewCard,
 	WIRE_INPUTS,
 } from '../index.js'
@@ -89,6 +90,24 @@ describe('POR-10721 W3 — Builder kit contract lock (inputs ⇄ wire-type parit
 	})
 })
 
+describe('POR-10721 — certRevCertComponent (the drop-in gen2 registration)', () => {
+	it('carries the identical W3-locked registration as BUILDER_REGISTRATION (name/component/inputs)', () => {
+		expect(certRevCertComponent.name).toBe(CERT_COMPONENT_NAME)
+		expect(certRevCertComponent.component).toBe(CertReviewCard)
+		expect(certRevCertComponent.inputs).toEqual([...BUILDER_REGISTRATION.inputs])
+	})
+	it('inputs is a FRESH mutable array — never the canonical readonly instance', () => {
+		expect(certRevCertComponent.inputs).not.toBe(BUILDER_REGISTRATION.inputs)
+		expect(Object.isFrozen(certRevCertComponent.inputs)).toBe(false)
+	})
+	it('wire inputs sit under the editor "Advanced" reveal; placement inputs stay front-and-center', () => {
+		const byName = new Map(certRevCertComponent.inputs.map((i) => [i.name, i]))
+		for (const k of BUILDER_CERT_CHROME_KEYS) expect(byName.get(k)?.advanced).toBe(true)
+		expect(byName.get('mode')?.advanced).toBeUndefined()
+		expect(byName.get('part')?.advanced).toBeUndefined()
+	})
+})
+
 describe('POR-10721 W1 — CertReviewCard render + the fused-credential R1 gate', () => {
 	const base: Partial<BuilderCertChromeData> = {
 		reviewerName: 'Dr. Jane Doe',

package/src/builder/cert-chrome-data.ts

@@ -4,7 +4,7 @@
  * ─────────────────────────────────────────────────────────────────────────────
  *
  * The brand-render projection of the cert envelope (portal POR-10091) — the OPTIONS
- * of a brand's native cert component (e.g. e.l.f.'s registered `CertReviewCard`) on
+ * of a brand's native cert component (the registered `CertReviewCard`) on
  * a headless blocks-mode entry (Builder.io). CertREV serves the data + the ready-made
  * strings; the brand renders it within the design-guide ladder (enforced live by the
  * crawl monitor + the MSA anti-stripping teeth).

package/src/builder/cert-review-card.tsx

@@ -3,7 +3,7 @@
  * `CertReviewCard` — the ready-to-register Builder.io PUSH cert component (W1)
  * ─────────────────────────────────────────────────────────────────────────────
  *
- * A headless brand (e.l.f.) registers `BUILDER_REGISTRATION` in its Builder
+ * A headless brand registers `certRevCertComponent` in its Builder
  * `customComponents` and CertREV's exporter emits a block whose options are the
  * `BuilderCertChromeData` projection — so the visible cert chrome renders itself,
  * design-identical to the Shopify Liquid + WordPress PHP faces (same `renderCertBlock`
@@ -112,6 +112,8 @@ export interface BuilderInput {
 	readonly type: 'string' | 'longText' | 'object' | 'boolean' | 'number'
 	readonly friendlyName?: string
 	readonly helperText?: string
+	/** Tucks the input under the editor's "Advanced" reveal (Builder's `Input.advanced`). */
+	readonly advanced?: boolean
 }
 
 /** Builder input TYPE per wire-type key — the exporter serializes these option values. */
@@ -145,6 +147,9 @@ const WIRE_INPUT_TYPE: Record<(typeof BUILDER_CERT_CHROME_KEYS)[number], Builder
 export const WIRE_INPUTS: readonly BuilderInput[] = BUILDER_CERT_CHROME_KEYS.map((name) => ({
 	name,
 	type: WIRE_INPUT_TYPE[name],
+	// Exporter-populated wire fields: collapsed under the editor's "Advanced" reveal so the
+	// Options tab leads with the two placement choices an editor actually makes (mode/part).
+	advanced: true,
 }))
 
 /** Placement inputs — chosen by the entry/editor, NOT emitted by the exporter (not wire-type keys). */
@@ -166,8 +171,11 @@ export interface CertBlockBuilderRegistration {
 }
 
 /**
- * Ready to spread into a brand's Builder `customComponents`:
- * `Builder.registerComponent(BUILDER_REGISTRATION.component, BUILDER_REGISTRATION)`.
+ * The canonical registration data (readonly view). Most consumers want
+ * `certRevCertComponent` below — drop-in ready for the gen2 SDK's `customComponents`
+ * array. This readonly view remains for consumers that build their own entry
+ * (`inputs` must be spread — `[...BUILDER_REGISTRATION.inputs]` — because the gen2
+ * SDK's `RegisteredComponent.inputs` type is mutable).
  * The exporter-emitted option keys === these `inputs` === the wire type — locked by W3.
  */
 export const BUILDER_REGISTRATION: CertBlockBuilderRegistration = {
@@ -175,3 +183,30 @@ export const BUILDER_REGISTRATION: CertBlockBuilderRegistration = {
 	component: CertReviewCard,
 	inputs: [...PLACEMENT_INPUTS, ...WIRE_INPUTS],
 }
+
+/**
+ * Structural shape of the gen2 SDK's `RegisteredComponent` — the subset the PUSH kit
+ * populates, with the MUTABLE `inputs` array the SDK's type requires. Declared locally
+ * (same pattern as `CertRevBuilderRegistration` on the anchor path) so cert-block needs
+ * no Builder dependency; directly assignable at `<Content customComponents={[...]}>`.
+ */
+export interface CertReviewCardRegisteredComponent {
+	component: typeof CertReviewCard
+	name: string
+	description?: string
+	inputs: BuilderInput[]
+}
+
+/**
+ * Ready-to-register: `customComponents={[...yourComponents, certRevCertComponent]}` —
+ * one import, no re-wrapping, no spread. Carries the identical W3-locked input set as
+ * `BUILDER_REGISTRATION` in a FRESH mutable array (the two never share an instance, so
+ * an SDK-side mutation can never corrupt the canonical readonly view).
+ */
+export const certRevCertComponent: CertReviewCardRegisteredComponent = {
+	name: CERT_COMPONENT_NAME,
+	component: CertReviewCard,
+	description:
+		'CertREV expert-review cert card. Options are populated by the CertREV exporter — editors choose placement (mode/part) only.',
+	inputs: [...PLACEMENT_INPUTS, ...WIRE_INPUTS],
+}

package/src/builder/index.tsx

@@ -133,8 +133,10 @@ export {
 	type BuilderInput,
 	CERT_COMPONENT_NAME,
 	type CertBlockBuilderRegistration,
+	certRevCertComponent,
 	CertReviewCard,
 	type CertReviewCardProps,
+	type CertReviewCardRegisteredComponent,
 	PLACEMENT_INPUTS,
 	WIRE_INPUTS,
 } from './cert-review-card.js'

package/src/components/preview-block.ts

@@ -1,6 +1,6 @@
 /**
  * `renderPreviewBlock` — a STATIC, NON-DELIVERY preview of the cert block for pre-sales
- * look-demos (POR-10743, from the e.l.f. Builder demo).
+ * look-demos (POR-10743, from the Builder demo).
  *
  * The visual is BYTE-FOR-BYTE `renderCertBlock` (pixel-parity — "see it on your own site
  * today"), wrapped in a `[data-certrev-preview]` container carrying a REQUIRED expiry.

package/src/components/render-def.ts

@@ -263,7 +263,7 @@ export interface ResolvedBlockTheme {
 	readonly fontSlot: RenderBlockFontSlot
 	readonly accentFg: '#141414' | '#ffffff'
 	/**
-	 * V2 chrome-ink (Phase 1, e.l.f.) — the header/seal bar (and floating-pill) FILL. OPTIONAL:
+	 * V2 chrome-ink (Phase 1) — the header/seal bar (and floating-pill) FILL. OPTIONAL:
 	 * present ONLY when the def themes it, so an un-barInk'd face emits nothing extra and the bar
 	 * keeps its locked navy/white base (byte-identical). Mirrors the portal's `ThemeTokens.barInk`.
 	 */