@certrev/cert-block 0.5.4 → 1.0.0

package/dist/modal/certrev-cert-modal.styles.js

@@ -1,8 +1,7 @@
 /**
- * Scoped styles + inline SVGs for the `<certrev-cert-modal>` Shadow-DOM element
- * (POR-10102). The single source of truth for the certificate (3a) + reviewer (4b)
- * modal look, ported byte-faithfully from the Claude Design reference
- * (`docs/claude/design/certificate-modals/`, footer variant 3a + reviewer 4b).
+ * Scoped styles + inline SVGs for the `<certrev-cert-modal>` Shadow-DOM element.
+ * The single source of truth for the certificate + reviewer modal look, ported
+ * byte-faithfully from the approved design reference.
  *
  * Because the element renders inside a shadow root, this CSS is fully scoped: the
  * brand storefront theme cannot bleed in, and these rules never leak out — so the
@@ -14,7 +13,8 @@
  */
 import { LOGO_PATHS } from './logo-paths.js';
 /** The four-chevron CertREV mark (viewBox 0 0 375 375), tinted via the passed fill. Path data is
- * single-sourced from src/lib/design-guide/logo.ts (the SOT the codegen mirrors into every twin). */
+ * single-sourced from the portal design-guide's logo module (the SOT the codegen mirrors into
+ * every twin). */
 export function chevronMark(size, fill) {
     const paths = LOGO_PATHS.map((d) => `<path fill="${fill}" d="${d}"/>`).join('');
     return `<svg width="${size}" height="${size}" viewBox="0 0 375 375" aria-hidden="true" style="display:block;flex-shrink:0">${paths}</svg>`;
@@ -46,7 +46,7 @@ export const CERT_MODAL_FONT_FAMILIES = [
     'Plus Jakarta Sans',
     'Allura',
 ];
-// The modal's fonts are self-hosted (POR-10657): the standalone loader (certrev-cert-modal.ts)
+// The modal's fonts are self-hosted: the standalone loader (certrev-cert-modal.ts)
 // injects the shared CERT_FONT_FACE_CSS @font-face block (R2 URLs) instead of a render-blocking
 // Google Fonts stylesheet. In the theme-app-extension the host page already declares these via
 // certrev-cert.css, so `data-fonts="host"` suppresses the injection entirely.
@@ -89,7 +89,7 @@ export const CERT_MODAL_CSS = `
 	background: var(--cr-white);
 	color: var(--cr-navy);
 	font-family: var(--cr-sans);
-	/* fixed, NOT relative (POR-10473): a :modal dialog (showModal) renders in the TOP LAYER; a
+	/* fixed, NOT relative: a :modal dialog (showModal) renders in the TOP LAYER; a
 	 * relative dialog anchors to its scrolled document position, so once the page is scrolled the
 	 * panel renders off-screen while the ::backdrop still covers the viewport (measured top -1972 at
 	 * scrollY 2537). fixed is viewport-anchored (the UA inset:0 + margin:auto centers it) and still
@@ -455,7 +455,7 @@ export const CERT_MODAL_CSS = `
 	color: var(--cr-navy-50);
 }
 
-/* FTC disclosure footer (POR-10496) — material-connection cue (compensated only) + scope line
+/* FTC disclosure footer — material-connection cue (compensated only) + scope line
  * (always). Rendered on both the certificate + reviewer dialogs, immediately above the actions. */
 .crm-disclosure {
 	margin-top: 14px;

package/dist/modal/certrev-cert-modal.styles.js.map

@@ -1 +1 @@
-{"version":3,"file":"certrev-cert-modal.styles.js","sourceRoot":"","sources":["../../src/modal/certrev-cert-modal.styles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C;qGACqG;AACrG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/E,OAAO,eAAe,IAAI,aAAa,IAAI,kFAAkF,KAAK,QAAQ,CAAA;AAC3I,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,SAAS,CAAC,IAAI,GAAG,CAAC;IACjC,OAAO,eAAe,IAAI,aAAa,IAAI,8KAA8K,CAAA;AAC1N,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAQ,GAAG,KAAK;IAC7C,MAAM,KAAK,GAAG,iBAAiB,QAAQ,EAAE,CAAA;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9E,OAAO,kKAAkK,KAAK,yYAAyY,KAAK,2KAA2K,IAAI,qBAAqB,CAAA;AACjwB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,SAAS;IACT,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,QAAQ;CACC,CAAA;AAEV,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAib7B,CAAA"}
+{"version":3,"file":"certrev-cert-modal.styles.js","sourceRoot":"","sources":["../../src/modal/certrev-cert-modal.styles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C;;kBAEkB;AAClB,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/E,OAAO,eAAe,IAAI,aAAa,IAAI,kFAAkF,KAAK,QAAQ,CAAA;AAC3I,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,SAAS,CAAC,IAAI,GAAG,CAAC;IACjC,OAAO,eAAe,IAAI,aAAa,IAAI,8KAA8K,CAAA;AAC1N,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAQ,GAAG,KAAK;IAC7C,MAAM,KAAK,GAAG,iBAAiB,QAAQ,EAAE,CAAA;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9E,OAAO,kKAAkK,KAAK,yYAAyY,KAAK,2KAA2K,IAAI,qBAAqB,CAAA;AACjwB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,SAAS;IACT,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,QAAQ;CACC,CAAA;AAEV,mFAAmF;AACnF,gGAAgG;AAChG,+FAA+F;AAC/F,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAib7B,CAAA"}

package/dist/modal/certrev-cert.entry.d.ts

@@ -1,7 +1,8 @@
 /**
- * Browser bundle ENTRY for the Shopify cert-badge Web Component (built by
- * scripts/build-shopify-cert-asset.mjs → shopify/extensions/certrev-schema/assets/certrev-cert.js,
- * loaded by the `certrev-cert` app block via its schema `javascript` key).
+ * Browser bundle ENTRY for the cert-badge Web Component. `pnpm build:modal-bundle`
+ * bundles this file into the IIFE at `dist/modal/certrev-cert.js` — the asset a
+ * storefront loads with a plain `<script>` tag, and the same asset the Shopify
+ * `certrev-cert` app block loads via its schema `javascript` key.
  *
  * Glue only: it resolves the published issuer key + the Delivery-API verifier (which runs the
  * canonical `verifyEnvelope` kernel) and kicks off the DOM revalidation pass. No crypto here.
@@ -10,9 +11,10 @@ import './certrev-cert-modal.js';
 /**
  * The published CertREV issuer signing key (SPKI PEM) for kid `cert-issuer-1` — the PUBLIC
  * verification key, safe to ship to every storefront browser. Kept BYTE-IDENTICAL to
- * `CERT_ENVELOPE_SIGNING_PUBLIC_KEY_PEM` in src/lib/cert-delivery/signer.ts; revalidate.test.ts
- * asserts the equality so a key rotation can't silently desync this copy. (signer.ts is
- * node-only, so it cannot be imported into a browser bundle — hence the asserted copy.)
+ * `CERT_ENVELOPE_SIGNING_PUBLIC_KEY_PEM` in the portal's cert-delivery signer. The equality is
+ * asserted PORTAL-side against this package's exported `CERT_ISSUER_*`, so a key rotation can't
+ * silently desync this copy; it cannot be asserted here, because the signer is node-only and
+ * cannot be imported into a browser bundle — hence the copy.
  */
 export declare const CERT_ISSUER_KID = "cert-issuer-1";
 export declare const CERT_ISSUER_PUBLIC_KEY_PEM = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAMWN956IOPjpAq900dL428VzA28TO/pVXnq3brwqUmwM=\n-----END PUBLIC KEY-----";

package/dist/modal/certrev-cert.entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certrev-cert.entry.d.ts","sourceRoot":"","sources":["../../src/modal/certrev-cert.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,yBAAyB,CAAA;AAOhC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,kBAAkB,CAAA;AAC9C,eAAO,MAAM,0BAA0B,uHAEd,CAAA"}
+{"version":3,"file":"certrev-cert.entry.d.ts","sourceRoot":"","sources":["../../src/modal/certrev-cert.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,yBAAyB,CAAA;AAOhC;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,kBAAkB,CAAA;AAC9C,eAAO,MAAM,0BAA0B,uHAEd,CAAA"}

package/dist/modal/certrev-cert.entry.js

@@ -1,12 +1,13 @@
 /**
- * Browser bundle ENTRY for the Shopify cert-badge Web Component (built by
- * scripts/build-shopify-cert-asset.mjs → shopify/extensions/certrev-schema/assets/certrev-cert.js,
- * loaded by the `certrev-cert` app block via its schema `javascript` key).
+ * Browser bundle ENTRY for the cert-badge Web Component. `pnpm build:modal-bundle`
+ * bundles this file into the IIFE at `dist/modal/certrev-cert.js` — the asset a
+ * storefront loads with a plain `<script>` tag, and the same asset the Shopify
+ * `certrev-cert` app block loads via its schema `javascript` key.
  *
  * Glue only: it resolves the published issuer key + the Delivery-API verifier (which runs the
  * canonical `verifyEnvelope` kernel) and kicks off the DOM revalidation pass. No crypto here.
  */
-import './certrev-cert-modal.js'; // registers the unified <certrev-cert-modal> element (POR-10102)
+import './certrev-cert-modal.js'; // registers the unified <certrev-cert-modal> element
 import { installFtcGuard } from './ftc-guard.js';
 import { initCertInteractionsOnReady } from './interactions.js';
 import { initCertPlacement } from './placement.js';
@@ -15,9 +16,10 @@ import { createDeliveryVerifier } from './verify-client.js';
 /**
  * The published CertREV issuer signing key (SPKI PEM) for kid `cert-issuer-1` — the PUBLIC
  * verification key, safe to ship to every storefront browser. Kept BYTE-IDENTICAL to
- * `CERT_ENVELOPE_SIGNING_PUBLIC_KEY_PEM` in src/lib/cert-delivery/signer.ts; revalidate.test.ts
- * asserts the equality so a key rotation can't silently desync this copy. (signer.ts is
- * node-only, so it cannot be imported into a browser bundle — hence the asserted copy.)
+ * `CERT_ENVELOPE_SIGNING_PUBLIC_KEY_PEM` in the portal's cert-delivery signer. The equality is
+ * asserted PORTAL-side against this package's exported `CERT_ISSUER_*`, so a key rotation can't
+ * silently desync this copy; it cannot be asserted here, because the signer is node-only and
+ * cannot be imported into a browser bundle — hence the copy.
  */
 export const CERT_ISSUER_KID = 'cert-issuer-1';
 export const CERT_ISSUER_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----

package/dist/modal/certrev-cert.entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"certrev-cert.entry.js","sourceRoot":"","sources":["../../src/modal/certrev-cert.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,yBAAyB,CAAA,CAAC,iEAAiE;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAA;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG;;yBAEjB,CAAA;AAEzB,MAAM,UAAU,GAA0B,CAAC,GAAG,EAAE,EAAE,CACjD,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpF,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;IACrC,4FAA4F;IAC5F,6FAA6F;IAC7F,+DAA+D;IAC/D,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC3B,4FAA4F;IAC5F,2BAA2B,CAAC,QAAQ,CAAC,CAAA;IACrC,iGAAiG;IACjG,8FAA8F;IAC9F,eAAe,CAAC,QAAQ,CAAC,CAAA;IACzB,qBAAqB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;AAChF,CAAC"}
+{"version":3,"file":"certrev-cert.entry.js","sourceRoot":"","sources":["../../src/modal/certrev-cert.entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,yBAAyB,CAAA,CAAC,qDAAqD;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAA;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG;;yBAEjB,CAAA;AAEzB,MAAM,UAAU,GAA0B,CAAC,GAAG,EAAE,EAAE,CACjD,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpF,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;IACrC,4FAA4F;IAC5F,6FAA6F;IAC7F,+DAA+D;IAC/D,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC3B,4FAA4F;IAC5F,2BAA2B,CAAC,QAAQ,CAAC,CAAA;IACrC,iGAAiG;IACjG,8FAA8F;IAC9F,eAAe,CAAC,QAAQ,CAAC,CAAA;IACzB,qBAAqB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;AAChF,CAAC"}

package/dist/modal/certrev-cert.js

@@ -1,5 +1,5 @@
 /* biome-ignore-all format: generated cert-badge bundle, see @certrev/cert-block src/modal/ */ /* biome-ignore-all lint: generated cert-badge bundle, see @certrev/cert-block src/modal/ */
-"use strict";(()=>{var H="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",Le=(()=>{let e=new Int8Array(128).fill(-1);for(let t=0;t<H.length;t++)e[H.charCodeAt(t)]=t;return e[45]=62,e[95]=63,e})();function y(e){let t=[];for(let a=0;a<e.length;a++){let c=e.charCodeAt(a),f=c<128?Le[c]:-1;f>=0&&t.push(f)}let r=Math.floor(t.length*6/8),n=new Uint8Array(r),o=0,i=0,s=0;for(let a=0;a<t.length;a++)o=o<<6|t[a],i+=6,i>=8&&(i-=8,n[s++]=o>>i&255);return n}function x(e){return y(e)}function d(e,t=new Set){if(typeof e=="number"&&isNaN(e))throw new Error("NaN is not allowed");if(typeof e=="number"&&!isFinite(e))throw new Error("Infinity is not allowed");if(e===null||typeof e!="object")return JSON.stringify(e);if(typeof e.toJSON=="function"){if(t.has(e))throw new Error("Circular reference detected");t.add(e);let n=d(e.toJSON(),t);return t.delete(e),n}if(t.has(e))throw new Error("Circular reference detected");t.add(e);let r;if(Array.isArray(e))r=`[${e.map(o=>d(o===void 0||typeof o=="symbol"?null:o,t)).join(",")}]`;else{let n=[];for(let o of Object.keys(e).sort())e[o]===void 0||typeof e[o]=="symbol"||n.push(`${d(o)}:${d(e[o],t)}`);r=`{${n.join(",")}}`}return t.delete(e),r}var Ie=typeof d=="function"?d:d.default;function V(e){let t=Ie(e);if(typeof t!="string")throw new Error("canonicalize: value is not JSON-serializable");return t}function F(e){return new TextEncoder().encode(V(e))}function C(e,t="$"){if(typeof e=="number"){if(!Number.isInteger(e)||!Number.isSafeInteger(e))throw new Error(`canonicalPayloadBytes: number at ${t} (${e}) is not a safe integer \u2014 signed-payload numbers must be safe integers so PHP/Go/Java verifiers reproduce identical canonical bytes`);return}if(Array.isArray(e)){e.forEach((r,n)=>C(r,`${t}[${n}]`));return}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))C(n,`${t}.${r}`)}function T(e){return C(e),F(e)}function R(e){return C(e),F(e)}var b="ed25519";var u={name:"Ed25519"};function Me(e){return e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"")}async function K(e){switch(e.format){case"pem":return crypto.subtle.importKey("spki",y(Me(e.pem)),u,!1,["verify"]);case"spki-base64":return crypto.subtle.importKey("spki",y(e.base64),u,!1,["verify"]);case"spki-der":return crypto.subtle.importKey("spki",e.bytes,u,!1,["verify"]);case"raw":{if(e.bytes.length!==32)throw new Error(`ed25519 raw public key must be 32 bytes, got ${e.bytes.length}`);return crypto.subtle.importKey("raw",e.bytes,u,!1,["verify"])}}}function $e(e){if("format"in e)return!1;let t=e;return typeof t.type=="string"&&typeof t.algorithm=="object"&&Array.isArray(t.usages)}async function q(e){return $e(e)?e:K(e)}async function G(e,t,r){let n=T(e),o=x(t);try{return await crypto.subtle.verify(u,r,o,n)}catch{return!1}}async function Oe(e,t){let{payload:r,signature:n}=e??{};if(!r||!n||r.contractVersion!==1)return{ok:!1,reason:"unsupported_contract_version"};if(n.alg!==b)return{ok:!1,reason:"unsupported_alg"};let o=await t(n.kid);if(!o)return{ok:!1,reason:"unknown_key"};let i;try{i=await q(o)}catch{return{ok:!1,reason:"unknown_key"}}return await G(r,n.sig,i)?{ok:!0,key:i}:{ok:!1,reason:"invalid_signature"}}function j(e,t){let r=t.now??new Date;if(e.subject.platform!==t.platform)return{decision:"suppress",reason:"platform_mismatch"};if(e.subject.externalId!==t.externalId)return{decision:"suppress",reason:"subject_mismatch"};if(e.lifecycle.revokedAt!==null)return{decision:"suppress",reason:"revoked"};if(r.getTime()>=Date.parse(e.lifecycle.expiresAt))return{decision:"suppress",reason:"expired"};let n=e.subject.contentDigest,o=t.liveContentHash;return n!==null&&o!=null&&n!==o?{decision:"suppress",reason:"content_drift"}:{decision:"render",payload:e}}async function J(e,t,r){let n;try{n=await Oe(e,t)}catch{return{decision:"suppress",reason:"unknown_key"}}return n.ok?j(e.payload,r):{decision:"suppress",reason:n.reason}}function g(e){return e?.kind==="tombstone"}async function Ne(e,t){let{signature:r}=e??{};if(!e?.subject||!r||e.contractVersion!==1)return{ok:!1,reason:"unsupported_contract_version"};if(r.alg!==b)return{ok:!1,reason:"unsupported_alg"};let n=await t(r.kid);if(!n)return{ok:!1,reason:"unknown_key"};let o;try{o=await q(n)}catch{return{ok:!1,reason:"unknown_key"}}let{signature:i,...s}=e,a=x(r.sig),c=!1;try{c=await crypto.subtle.verify(u,o,a,R(s))}catch{c=!1}return c?{ok:!0,key:o}:{ok:!1,reason:"invalid_signature"}}async function W(e,t,r){let n;try{n=await Ne(e,t)}catch{return{decision:"suppress",reason:"unknown_key"}}return n.ok?e.subject.platform!==r.platform?{decision:"suppress",reason:"platform_mismatch"}:e.subject.externalId!==r.externalId?{decision:"suppress",reason:"subject_mismatch"}:{decision:"suppress",reason:"revoked"}:{decision:"suppress",reason:n.reason}}async function L(e,t,r){return g(e)?W(e,t,r):J(e,t,r)}var Z=`
+"use strict";(()=>{var H="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",$e=(()=>{let e=new Int8Array(128).fill(-1);for(let t=0;t<H.length;t++)e[H.charCodeAt(t)]=t;return e[45]=62,e[95]=63,e})();function g(e){let t=[];for(let a=0;a<e.length;a++){let c=e.charCodeAt(a),d=c<128?$e[c]:-1;d>=0&&t.push(d)}let r=Math.floor(t.length*6/8),n=new Uint8Array(r),o=0,i=0,s=0;for(let a=0;a<t.length;a++)o=o<<6|t[a],i+=6,i>=8&&(i-=8,n[s++]=o>>i&255);return n}function C(e){return g(e)}function p(e,t=new Set){if(typeof e=="number"&&isNaN(e))throw new Error("NaN is not allowed");if(typeof e=="number"&&!isFinite(e))throw new Error("Infinity is not allowed");if(e===null||typeof e!="object")return JSON.stringify(e);if(typeof e.toJSON=="function"){if(t.has(e))throw new Error("Circular reference detected");t.add(e);let n=p(e.toJSON(),t);return t.delete(e),n}if(t.has(e))throw new Error("Circular reference detected");t.add(e);let r;if(Array.isArray(e))r=`[${e.map(o=>p(o===void 0||typeof o=="symbol"?null:o,t)).join(",")}]`;else{let n=[];for(let o of Object.keys(e).sort())e[o]===void 0||typeof e[o]=="symbol"||n.push(`${p(o)}:${p(e[o],t)}`);r=`{${n.join(",")}}`}return t.delete(e),r}var Oe=typeof p=="function"?p:p.default;function K(e){let t=Oe(e);if(typeof t!="string")throw new Error("canonicalize: value is not JSON-serializable");return t}function T(e){return new TextEncoder().encode(K(e))}function b(e,t="$"){if(typeof e=="number"){if(!Number.isInteger(e)||!Number.isSafeInteger(e))throw new Error(`canonicalPayloadBytes: number at ${t} (${e}) is not a safe integer \u2014 signed-payload numbers must be safe integers so PHP/Go/Java verifiers reproduce identical canonical bytes`);return}if(Array.isArray(e)){e.forEach((r,n)=>b(r,`${t}[${n}]`));return}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))b(n,`${t}.${r}`)}function R(e){return b(e),T(e)}function k(e){return b(e),T(e)}var E="ed25519";var m={name:"Ed25519"};function Pe(e){return e.replace(/-----BEGIN [^-]+-----/g,"").replace(/-----END [^-]+-----/g,"").replace(/\s+/g,"")}async function q(e){switch(e.format){case"pem":return crypto.subtle.importKey("spki",g(Pe(e.pem)),m,!1,["verify"]);case"spki-base64":return crypto.subtle.importKey("spki",g(e.base64),m,!1,["verify"]);case"spki-der":return crypto.subtle.importKey("spki",e.bytes,m,!1,["verify"]);case"raw":{if(e.bytes.length!==32)throw new Error(`ed25519 raw public key must be 32 bytes, got ${e.bytes.length}`);return crypto.subtle.importKey("raw",e.bytes,m,!1,["verify"])}}}function ze(e){if("format"in e)return!1;let t=e;return typeof t.type=="string"&&typeof t.algorithm=="object"&&Array.isArray(t.usages)}async function G(e){return ze(e)?e:q(e)}async function j(e,t,r){let n=R(e),o=C(t);try{return await crypto.subtle.verify(m,r,o,n)}catch{return!1}}async function Ve(e,t){let{payload:r,signature:n}=e??{};if(!r||!n||r.contractVersion!==1)return{ok:!1,reason:"unsupported_contract_version"};if(n.alg!==E)return{ok:!1,reason:"unsupported_alg"};let o=await t(n.kid);if(!o)return{ok:!1,reason:"unknown_key"};let i;try{i=await G(o)}catch{return{ok:!1,reason:"unknown_key"}}return await j(r,n.sig,i)?{ok:!0,key:i}:{ok:!1,reason:"invalid_signature"}}function J(e,t){let r=t.now??new Date;if(e.subject.platform!==t.platform)return{decision:"suppress",reason:"platform_mismatch"};if(e.subject.externalId!==t.externalId)return{decision:"suppress",reason:"subject_mismatch"};if(e.lifecycle.revokedAt!==null)return{decision:"suppress",reason:"revoked"};if(r.getTime()>=Date.parse(e.lifecycle.expiresAt))return{decision:"suppress",reason:"expired"};let n=e.subject.contentDigest,o=t.liveContentHash;return n!==null&&o!=null&&n!==o?{decision:"suppress",reason:"content_drift"}:{decision:"render",payload:e}}async function W(e,t,r){let n;try{n=await Ve(e,t)}catch{return{decision:"suppress",reason:"unknown_key"}}return n.ok?J(e.payload,r):{decision:"suppress",reason:n.reason}}function v(e){return e?.kind==="tombstone"}async function He(e,t){let{signature:r}=e??{};if(!e?.subject||!r||e.contractVersion!==1)return{ok:!1,reason:"unsupported_contract_version"};if(r.alg!==E)return{ok:!1,reason:"unsupported_alg"};let n=await t(r.kid);if(!n)return{ok:!1,reason:"unknown_key"};let o;try{o=await G(n)}catch{return{ok:!1,reason:"unknown_key"}}let{signature:i,...s}=e,a=C(r.sig),c=!1;try{c=await crypto.subtle.verify(m,o,a,k(s))}catch{c=!1}return c?{ok:!0,key:o}:{ok:!1,reason:"invalid_signature"}}async function Z(e,t,r){let n;try{n=await He(e,t)}catch{return{decision:"suppress",reason:"unknown_key"}}return n.ok?e.subject.platform!==r.platform?{decision:"suppress",reason:"platform_mismatch"}:e.subject.externalId!==r.externalId?{decision:"suppress",reason:"subject_mismatch"}:{decision:"suppress",reason:"revoked"}:{decision:"suppress",reason:n.reason}}async function I(e,t,r){return v(e)?Z(e,t,r):W(e,t,r)}var Y=`
 @font-face {
 	font-family: "DM Sans";
 	font-style: normal;
@@ -119,7 +119,7 @@
 	unicode-range:
 		U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
-`,Y="https://assets.certrev.com";function l(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#039;")}var Pe=["assets.certrev.com","staging-assets.certrev.com"];function ze(e){return`width=${e},height=${e},fit=cover,format=auto,onerror=redirect`}function He(e,t){let r=(e??"").trim();if(!/^https:\/\//i.test(r))return r;let n;try{n=new URL(r)}catch{return r}if(!Pe.includes(n.hostname)||n.pathname.startsWith("/cdn-cgi/image/"))return r;let o=n.pathname.replace(/^\//,"");return`${n.origin}/cdn-cgi/image/${ze(t)}/${o}`}function X(e,t){return He(e,t)}var U="Independent editorial review of this article\u2019s text and sources. Not a product endorsement, nor medical advice.";var Q=U;function I(e){if(!e)return null;let t=e instanceof Date?e:new Date(e);return Number.isNaN(t.getTime())?null:t.toLocaleDateString("en-US",{month:"short",day:"numeric",year:"numeric",timeZone:"UTC"})}var B=["M67.59 221.77L138.77 292.95C145.8 299.98 145.8 311.44 138.77 318.47L123.02 334.22C116 341.25 104.54 341.25 97.5 334.22L26.32 263.04C19.29 256.01 19.29 244.55 26.32 237.52L42.07 221.77C49.1 214.74 60.56 214.74 67.59 221.77Z","M96.79 335.08L81.12 319.42C73.8 312.1 73.8 300.23 81.12 292.92L315.88 58.16C323.2 50.85 335.06 50.85 342.38 58.16L358.04 73.83C365.36 81.14 365.36 93.01 358.04 100.33L123.29 335.08C115.97 342.4 104.1 342.4 96.79 335.08Z","M203.5 335.14L187.83 319.48C180.52 312.16 180.52 300.29 187.83 292.98L315.88 164.93C323.2 157.62 335.06 157.62 342.38 164.93L358.04 180.6C365.36 187.92 365.36 199.78 358.04 207.1L230 335.14C222.68 342.46 210.82 342.46 203.5 335.14Z","M310.21 335.2L294.54 319.54C287.23 312.22 287.23 300.36 294.54 293.04L315.88 271.71C323.2 264.39 335.06 264.39 342.38 271.71L358.04 287.37C365.36 294.69 365.36 306.55 358.04 313.87L336.71 335.2C329.39 342.52 317.53 342.52 310.21 335.2Z"];function ee(e,t){let r=B.map(n=>`<path fill="${t}" d="${n}"/>`).join("");return`<svg width="${e}" height="${e}" viewBox="0 0 375 375" aria-hidden="true" style="display:block;flex-shrink:0">${r}</svg>`}function te(e=8){return`<svg width="${e}" height="${e}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M20 6 9 17l-5-5"/></svg>`}function re(e="crm"){let t=`crm-stamp-arc-${e}`,r=B.map(n=>`<path fill="#0a1b3f" d="${n}"/>`).join("");return`<span class="crm-stamp"><svg viewBox="0 0 128 128" width="74" height="74" role="img" aria-label="CertREV verified stamp" style="display:block"><defs><path id="${t}" d="M64 18 A46 46 0 1 1 64 110 A46 46 0 1 1 64 18"/></defs><circle cx="64" cy="64" r="58" fill="none" stroke="#0a1b3f" stroke-width="1.3"/><circle cx="64" cy="64" r="51.5" fill="none" stroke="#0a1b3f" stroke-width="0.7" stroke-opacity="0.4"/><text font-family="'JetBrains Mono',ui-monospace,monospace" font-size="7.8" font-weight="600" letter-spacing="1.3" fill="#0a1b3f"><textPath href="#${t}" startOffset="1%">CERTREV VERIFIED \xB7 CERTIFIED \xB7 </textPath></text><svg x="49" y="50" width="30" height="28" viewBox="0 0 375 375" preserveAspectRatio="xMidYMid meet">${r}</svg></svg></span>`}var M=`
+`,X="https://assets.certrev.com";function f(e){return typeof e=="string"?e:typeof e=="number"&&Number.isFinite(e)?String(e):""}function l(e){return f(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#039;")}var Ke=["assets.certrev.com","staging-assets.certrev.com"];function qe(e){return`width=${e},height=${e},fit=cover,format=auto,onerror=redirect`}function Ge(e,t){let r=(e??"").trim();if(!/^https:\/\//i.test(r))return r;let n;try{n=new URL(r)}catch{return r}if(!Ke.includes(n.hostname)||n.pathname.startsWith("/cdn-cgi/image/"))return r;let o=n.pathname.replace(/^\//,"");return`${n.origin}/cdn-cgi/image/${qe(t)}/${o}`}function Q(e,t){return Ge(e,t)}var U="Independent editorial review of this article\u2019s text and sources. Not a product endorsement, nor medical advice.";var ee=U;function M(e){if(!e||typeof e!="string"&&!(e instanceof Date))return null;let t=e instanceof Date?e:new Date(e);return Number.isNaN(t.getTime())?null:t.toLocaleDateString("en-US",{month:"short",day:"numeric",year:"numeric",timeZone:"UTC"})}var B=["M67.59 221.77L138.77 292.95C145.8 299.98 145.8 311.44 138.77 318.47L123.02 334.22C116 341.25 104.54 341.25 97.5 334.22L26.32 263.04C19.29 256.01 19.29 244.55 26.32 237.52L42.07 221.77C49.1 214.74 60.56 214.74 67.59 221.77Z","M96.79 335.08L81.12 319.42C73.8 312.1 73.8 300.23 81.12 292.92L315.88 58.16C323.2 50.85 335.06 50.85 342.38 58.16L358.04 73.83C365.36 81.14 365.36 93.01 358.04 100.33L123.29 335.08C115.97 342.4 104.1 342.4 96.79 335.08Z","M203.5 335.14L187.83 319.48C180.52 312.16 180.52 300.29 187.83 292.98L315.88 164.93C323.2 157.62 335.06 157.62 342.38 164.93L358.04 180.6C365.36 187.92 365.36 199.78 358.04 207.1L230 335.14C222.68 342.46 210.82 342.46 203.5 335.14Z","M310.21 335.2L294.54 319.54C287.23 312.22 287.23 300.36 294.54 293.04L315.88 271.71C323.2 264.39 335.06 264.39 342.38 271.71L358.04 287.37C365.36 294.69 365.36 306.55 358.04 313.87L336.71 335.2C329.39 342.52 317.53 342.52 310.21 335.2Z"];function te(e,t){let r=B.map(n=>`<path fill="${t}" d="${n}"/>`).join("");return`<svg width="${e}" height="${e}" viewBox="0 0 375 375" aria-hidden="true" style="display:block;flex-shrink:0">${r}</svg>`}function re(e=8){return`<svg width="${e}" height="${e}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M20 6 9 17l-5-5"/></svg>`}function ne(e="crm"){let t=`crm-stamp-arc-${e}`,r=B.map(n=>`<path fill="#0a1b3f" d="${n}"/>`).join("");return`<span class="crm-stamp"><svg viewBox="0 0 128 128" width="74" height="74" role="img" aria-label="CertREV verified stamp" style="display:block"><defs><path id="${t}" d="M64 18 A46 46 0 1 1 64 110 A46 46 0 1 1 64 18"/></defs><circle cx="64" cy="64" r="58" fill="none" stroke="#0a1b3f" stroke-width="1.3"/><circle cx="64" cy="64" r="51.5" fill="none" stroke="#0a1b3f" stroke-width="0.7" stroke-opacity="0.4"/><text font-family="'JetBrains Mono',ui-monospace,monospace" font-size="7.8" font-weight="600" letter-spacing="1.3" fill="#0a1b3f"><textPath href="#${t}" startOffset="1%">CERTREV VERIFIED \xB7 CERTIFIED \xB7 </textPath></text><svg x="49" y="50" width="30" height="28" viewBox="0 0 375 375" preserveAspectRatio="xMidYMid meet">${r}</svg></svg></span>`}var $=`
 :host {
 	--cr-navy: #0a1b3f;
 	--cr-lime: #d4e157;
@@ -157,7 +157,7 @@
 	background: var(--cr-white);
 	color: var(--cr-navy);
 	font-family: var(--cr-sans);
-	/* fixed, NOT relative (POR-10473): a :modal dialog (showModal) renders in the TOP LAYER; a
+	/* fixed, NOT relative: a :modal dialog (showModal) renders in the TOP LAYER; a
 	 * relative dialog anchors to its scrolled document position, so once the page is scrolled the
 	 * panel renders off-screen while the ::backdrop still covers the viewport (measured top -1972 at
 	 * scrollY 2537). fixed is viewport-anchored (the UA inset:0 + margin:auto centers it) and still
@@ -523,7 +523,7 @@
 	color: var(--cr-navy-50);
 }
 
-/* FTC disclosure footer (POR-10496) \u2014 material-connection cue (compensated only) + scope line
+/* FTC disclosure footer \u2014 material-connection cue (compensated only) + scope line
  * (always). Rendered on both the certificate + reviewer dialogs, immediately above the actions. */
 .crm-disclosure {
 	margin-top: 14px;
@@ -552,6 +552,6 @@
 		padding: 18px 18px 20px;
 	}
 }
-`;var Ve=/^(dr|prof|professor|mr|mrs|ms|mx|rev|sir|dame)\.?\s+/i;function ne(e){let t=e.replace(Ve,"").trim(),r=t.indexOf(",");return(r===-1?t:t.slice(0,r)).trim()}function Ke(e){let t=ne(e).split(/\s+/).filter(Boolean);return t.length===0?"":t.length===1?t[0].slice(0,2).toUpperCase():(t[0][0]+t[t.length-1][0]).toUpperCase()}function qe(e){return ne(e)}function Ge(e){return e.replace(/^https?:\/\//i,"").replace(/\/$/,"")}function oe(e){return e&&/^https?:\/\//i.test(e.trim())?e.trim():"#"}function je(e){return(e.cardLabel||e.fullName||e.abbreviation||"").trim()}function ie(e){let t=[];for(let r of e?.credentials??[]){let n=je(r);n&&!t.includes(n)&&t.push(n)}return t}function Je(e,t){return t?.showBio===!1?"":(e?.background||e?.bio||"").trim()}function ae(e,t,r,n){let o=(e?.photoUrl||"").trim();if(n&&/^https?:\/\//i.test(o)){let i=r.includes("--64")?64:56,s=X(o,i===64?128:112);return`<img class="crm-avatar ${r}" src="${l(s)}" alt="" width="${i}" height="${i}" decoding="async">`}return`<span class="crm-avatar ${r}">${l(Ke(t))}</span>`}var se='<button type="button" class="crm-close" data-certrev-modal-close aria-label="Close">&times;</button>';function ce(e){return`<div class="crm-head">${ee(16,"#ffffff")}<span class="crm-head__eyebrow">${l(e)}</span><span class="crm-head__wordmark">CertREV</span></div>`}function le(e){return`<span class="${e}">${te(8)}Certified</span>`}function fe(e){let t=(e?.compensationCue||"").trim();return`<div class="crm-disclosure">${t?`<span class="crm-disclosure__cue">${l(t)}</span> `:""}${l(Q)}</div>`}function de(e){let t=e.expert??null,r=(t?.displayName||"").trim();if(!r)return null;let n=e.display?.showExpertPhoto!==!1,o=ie(t).join(" \xB7 "),i=I(e.certifiedAt)??"",s=(e.displayCertId||"").trim(),a=(e.articleTitle||"").trim(),c=(e.verifyUrl||"").trim(),f=qe(r),v=a?`<div class="crm-certifies"><div class="crm-certifies__eyebrow">Certifies the article</div><div class="crm-certifies__title">${l(a)}</div></div>`:"",h=s?`<div class="crm-meta__col"><div class="crm-meta__label">Certificate ID</div><div class="crm-meta__value crm-meta__value--mono">${l(s)}</div></div>`:"",ke=c?`<div class="crm-sig__url">${l(Ge(c))}</div>`:"";return`${se}${ce("Certificate of Expert Review")}<div class="crm-body--cert"><div class="crm-expert-row">${ae(t,r,"crm-avatar--56",n)}<div class="crm-expert-row__info"><div class="crm-expert-row__eyebrow">Reviewing Expert</div><div class="crm-expert-row__name">${l(r)}</div>${o?`<div class="crm-expert-row__creds">${l(o)}</div>`:""}</div></div>${v}<div class="crm-meta"><div class="crm-meta__col"><div class="crm-meta__label">Issued</div><div class="crm-meta__value">${l(i)}</div></div>${h}<div class="crm-meta__col"><div class="crm-meta__label">Status</div><div class="crm-meta__status">${le("crm-chip")}</div></div></div><div class="crm-sig"><div><div class="crm-sig__name">${l(f)}</div><div class="crm-sig__rule"></div>${ke}</div>${re("cert")}</div>${fe(t)}<div class="crm-actions"><a class="crm-cta" href="${l(oe(c))}" target="_blank" rel="noopener noreferrer">View full certificate</a><button type="button" class="crm-ghost" data-certrev-modal-close>Close</button></div></div>`}function pe(e){let t=e.expert??null,r=(t?.displayName||"").trim();if(!r)return null;let n=e.display?.showExpertPhoto!==!1,o=ie(t),i=Je(t,e.display),s=I(e.certifiedAt),a=o.length?`<div class="crm-chips">${o.map(v=>`<span class="crm-chips__chip">${l(v)}</span>`).join("")}</div>`:"",c=i?`<p class="crm-bio">${l(i)}</p>`:"",f=s?`Independently reviewed \xB7 Certified ${l(s)}`:"Independently reviewed";return`${se}${ce("Verified reviewer")}<div class="crm-body--expert"><div class="crm-id">${ae(t,r,"crm-avatar--64",n)}<div class="crm-id__info"><div class="crm-id__name">${l(r)}</div></div></div>${a}${c}<div class="crm-trust">${le("crm-trust__chip")}<span class="crm-trust__text">${f}</span></div>${fe(t)}<div class="crm-actions"><a class="crm-cta" href="${l(oe(t?.profileUrl))}" target="_blank" rel="noopener noreferrer">View full profile on CertREV</a><button type="button" class="crm-ghost" data-certrev-modal-close>Close</button></div></div>`}var w="certrev-cert-modal",E=null;function We(){return typeof CSSStyleSheet<"u"&&"replaceSync"in CSSStyleSheet.prototype&&"adoptedStyleSheets"in Document.prototype}function Ze(){return We()?(E||(E=new CSSStyleSheet,E.replaceSync(M)),E):null}var ue=!1;function Ye(e){if(ue||(ue=!0,e.querySelector("style[data-certrev-modal-fonts]")))return;if(!e.querySelector("link[data-certrev-modal-preconnect]")){let r=e.createElement("link");r.rel="preconnect",r.href=Y,r.crossOrigin="",r.setAttribute("data-certrev-modal-preconnect",""),e.head.appendChild(r)}let t=e.createElement("style");t.textContent=Z,t.setAttribute("data-certrev-modal-fonts",""),e.head.appendChild(t)}var $=class extends HTMLElement{constructor(){super();this.rendered=!1;this.content=null;this.fetchInFlight=null;this.root=this.attachShadow({mode:"open"});let r=Ze();if(r)this.root.adoptedStyleSheets=[r];else{let n=document.createElement("style");n.textContent=M,this.root.appendChild(n)}this.root.addEventListener("click",n=>this.onShadowClick(n))}open(r){return this.getAttribute("data-fonts")!=="host"&&Ye(document),this.ensureRendered()?(this.show(r),!0):this.hasFetchSource()?(this.fetchThenShow(r),!0):!1}ensureRendered(){if(this.rendered)return this.content!=null;let r=this.readSyncContent();return r?(this.content=r,this.renderDialogs(r),this.rendered=!0,!0):!1}readSyncContent(){let r=this.getAttribute("data-envelope");if(r)return me(r);let n=this.querySelector("script[data-certrev-envelope]");return n?.textContent?me(n.textContent):null}hasFetchSource(){return!!(this.getAttribute("data-delivery-api")&&this.getAttribute("data-platform")&&this.getAttribute("data-external-id"))}async fetchThenShow(r){if(!this.fetchInFlight){let n=(this.getAttribute("data-delivery-api")||"").replace(/\/$/,""),o=this.getAttribute("data-platform")||"",i=this.getAttribute("data-external-id")||"";this.fetchInFlight=(async()=>{try{let s=await fetch(`${n}/api/cert/v1/delivery/${encodeURIComponent(o)}/${encodeURIComponent(i)}`,{cache:"no-store",credentials:"omit"});if(!s.ok)return;let a=await s.json();if(Xe(a)){this.markSuppressed();return}let c=g(a)?void 0:a.payload?.content;c&&(this.content=c,this.renderDialogs(c),this.rendered=!0)}catch{}})()}await this.fetchInFlight,this.rendered&&this.show(r)}renderDialogs(r){let n=de(r),o=pe(r),i=document.createElement("div");i.innerHTML=`${n?`<dialog id="cert" class="crm-dialog crm-dialog--cert" aria-label="CertREV certificate">${n}</dialog>`:""}${o?`<dialog id="expert" class="crm-dialog crm-dialog--expert" aria-label="Verified reviewer profile">${o}</dialog>`:""}`;for(let s of Array.from(i.childNodes))this.root.appendChild(s)}show(r){let n=this.root.getElementById(r);n&&typeof n.showModal=="function"&&!n.open&&n.showModal()}markSuppressed(){this.setAttribute("data-certrev-suppressed","");for(let r of Array.from(document.querySelectorAll("[data-certrev-modal-open]")))r.setAttribute("hidden",""),r.setAttribute("aria-hidden","true")}onShadowClick(r){let n=r.target;if(!n)return;if(n instanceof HTMLDialogElement&&n.classList.contains("crm-dialog")){n.close();return}let o=n.closest("[data-certrev-modal-close]");o&&(r.preventDefault(),o.closest("dialog")?.close())}};function me(e){try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function Xe(e){if(!e)return!1;if(g(e))return!0;let t=e.payload?.lifecycle;return t?!!(t.revokedAt!=null||t.expiresAt&&Date.now()>=new Date(t.expiresAt).getTime()):!1}function Qe(){typeof customElements>"u"||customElements.get(w)||customElements.define(w,$)}Qe();var et="[data-ftc-line]",tt=".certrev-memo",rt=".certrev-memo-wrap",nt="data-certrev-ftc-neutralized",ye=new WeakSet;function ot(e){let t=e.ownerDocument.defaultView;if(!t)return!0;let r=t.getComputedStyle(e);if(r.display==="none"||r.visibility==="hidden"||Number.parseFloat(r.opacity||"1")===0)return!1;let n=e.getBoundingClientRect();return n.width>0&&n.height>0}function it(e){let t=e.querySelector(et);return!t||(t.textContent||"").trim()!==U?!1:ot(t)}function at(e){let r=e.ownerDocument.createElement("div");r.setAttribute(nt,""),r.style.cssText="font-family:system-ui,-apple-system,sans-serif;font-size:12px;color:#555;padding:12px;line-height:1.4",r.innerHTML='This CertREV verification cannot be displayed because its required disclosure was not shown. <a href="https://certrev.com" style="color:#555" target="_blank" rel="noopener noreferrer">Learn more</a>.',e.replaceWith(r)}function st(e){let t=!0;for(let r of Array.from(e.querySelectorAll(tt)))it(r)||(t=!1,at(r));return t}function ge(e){if(ye.has(e))return;ye.add(e);let t=()=>{st(e)},r=()=>{t();let n=e.defaultView?.MutationObserver;if(!n)return;let o=Array.from(e.querySelectorAll(rt)),i=o.length?o:e.body?[e.body]:[];for(let s of i)new n(t).observe(s,{childList:!0,subtree:!0,characterData:!0,attributes:!0})};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",r,{once:!0}):r()}var ve="data-certrev-acc",A="data-certrev-modal-open",O="data-certrev-initials";var ct=["avatar","certrev-memo__avatar"],he=new WeakSet;function xe(e){let t=e.classList.toggle("open");e.setAttribute("aria-expanded",t?"true":"false")}function Ce(e){return e==="expert"?"expert":"cert"}function be(e,t){let r=e.querySelector(w);return r&&typeof r.open=="function"?r.open(t):!1}function Ue(e){return e&&e.closest?e:null}function Ee(e){let t=e.getAttribute(O);if(t==null)return;let r=ct.find(o=>e.classList.contains(o));if(!r)return;let n=e.ownerDocument.createElement("span");n.className=`${r} ${r}--initials`,n.setAttribute("aria-hidden","true"),n.textContent=t,e.replaceWith(n)}function lt(e){for(let t of Array.from(e.querySelectorAll(`img[${O}]`)))t.complete&&t.naturalWidth===0&&Ee(t)}function ft(e){he.has(e)||(he.add(e),e.addEventListener("click",t=>{let r=Ue(t.target);if(!r)return;let n=r.closest(`[${A}]`);if(n){be(e,Ce(n.getAttribute(A)))&&t.preventDefault();return}let o=r.closest(`[${ve}]`);o&&!r.closest("a, button")&&xe(o)}),e.addEventListener("error",t=>{let r=t.target;r&&r.tagName==="IMG"&&r.hasAttribute(O)&&Ee(r)},!0),lt(e),e.addEventListener("keydown",t=>{if(t.key!=="Enter"&&t.key!==" "&&t.key!=="Spacebar")return;let r=Ue(t.target);if(!r||r.closest("a, button"))return;let n=r.closest(`[${A}]`);if(n&&be(e,Ce(n.getAttribute(A)))){t.preventDefault();return}let o=r.closest(`[${ve}]`);o&&(t.preventDefault(),xe(o))}))}function we(e){let t=()=>ft(e);e.readyState==="loading"?e.addEventListener("DOMContentLoaded",t,{once:!0}):t()}var dt=[{selector:"main article",tier:"article"},{selector:"article",tier:"article"},{selector:"main",tier:"main"},{selector:".article-template__content",tier:"theme-class"},{selector:'[id^="ArticleContent"]',tier:"theme-class"},{selector:".rte",tier:"theme-class"}],m=[{selector:".article-template__content",tier:"theme-class"},{selector:'[id^="ArticleContent"]',tier:"theme-class"},{selector:".rte",tier:"theme-class"},{selector:"main article",tier:"article"},{selector:"article",tier:"article"},{selector:"main",tier:"main"}],N=m.map(e=>e.selector).join(", "),pt='header, [role="banner"], [class*="announcement"], footer, [role="contentinfo"], nav, [role="navigation"], cart-drawer, .cart-drawer, .drawer, .mini-cart, .modal, [role="dialog"]',p="data-certrev-placement",_e="data-certrev-anchor",ut='script[type="application/ld+json"][data-certrev-graph]',mt=".certrev-card-wrap",Se=".certrev-memo-wrap",yt=".certrev-pill-wrap",De=384,gt=24,_="#references";function S(e){for(let t=e;t;t=t.parentElement){if(t.hasAttribute("hidden")||t.getAttribute("aria-hidden")==="true")return!1;let r=getComputedStyle(t);if(r.display==="none"||r.visibility==="hidden")return!1}return!0}function P(e){return e.closest(pt)!==null}function Ae(e,t){for(let{selector:r,tier:n}of t)if(e.matches(r))return n;return"article"}function D(e,t,r){for(let{selector:n,tier:o}of r)for(let i of Array.from(e.querySelectorAll(n)))if(i!==t&&!i.contains(t)&&!t.contains(i)&&S(i)&&!P(i))return{el:i,tier:o};return null}function z(e,t){let r=t.getAttribute(p);if(r)return{anchored:r!=="body-fallback",tier:r};let n=t.getAttribute(_e);if(n==="rail"){let a=e.querySelector(_)?.closest(N)??D(e,t,m)?.el??null,c=e.defaultView;if(a&&c&&S(a)&&!P(a)){let f=a.getBoundingClientRect();if(c.innerWidth-f.right>=De)return t.style.setProperty("--certrev-rail-left",`${Math.round(f.right+gt)}px`),t.setAttribute(p,"rail"),{anchored:!0,tier:"rail"};a.insertAdjacentElement("afterbegin",t);let h=Ae(a,m);return t.setAttribute(p,h),{anchored:!0,tier:h}}return t.setAttribute(p,"body-fallback"),{anchored:!1,tier:"body-fallback"}}let o=n==="bottom"?"bottom":"top",i="body-fallback";if(o==="top"){let a=e.querySelector(_)?.closest(N)??null;if(a&&a!==t&&!a.contains(t)&&!t.contains(a)&&S(a)&&!P(a))a.insertAdjacentElement("afterbegin",t),i=Ae(a,m);else{let c=D(e,t,m);c&&(c.el.insertAdjacentElement("afterbegin",t),i=c.tier)}}else{let s=e.querySelector(_);if(s&&s!==t&&!t.contains(s)&&!s.contains(t)&&S(s))s.insertAdjacentElement("beforebegin",t),i="references";else{let a=D(e,t,dt);a&&(a.el.insertAdjacentElement("afterend",t),i=a.tier)}}return t.setAttribute(p,i),{anchored:i!=="body-fallback",tier:i}}function vt(e){let t=e.querySelector(ut),r=!1;t&&t.parentNode!==e.head&&(e.head.appendChild(t),r=!0);let n=e.querySelector(mt),o=e.querySelector(Se);return e.querySelector(yt)?.setAttribute(p,"pill-fixed"),{graph:r,card:n?z(e,n):null,memo:o?z(e,o):null}}function ht(e){let t=e.defaultView;if(!t)return;let r=e.querySelector(`${Se}[${_e}="rail"]`);if(!r||r.getAttribute(p)!=="rail")return;let n,o=()=>{n&&clearTimeout(n),n=setTimeout(()=>{if(r.getAttribute(p)!=="rail"){t.removeEventListener("resize",o);return}let s=e.querySelector(_)?.closest(N)??D(e,r,m)?.el??null;(s?t.innerWidth-s.getBoundingClientRect().right:0)<De&&(r.style.removeProperty("--certrev-rail-left"),r.removeAttribute(p),z(e,r),t.removeEventListener("resize",o))},150)};t.addEventListener("resize",o)}function Fe(e){let t=()=>{vt(e),ht(e)};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",t,{once:!0}):t()}async function xt(e,t){let r=e.querySelector(".certrev-badge");if(!r)return;let n=e.getAttribute("data-delivery-api"),o=e.getAttribute("data-external-id"),i=e.getAttribute("data-platform")??"shopify";if(!n||!o)return;let s;try{s=await t.verify({baseUrl:n,platform:i,externalId:o})}catch{return}s.decision!=="render"&&(r.setAttribute("hidden",""),r.setAttribute("data-certrev-suppressed",s.reason))}function Te(e,t){let r=()=>{for(let n of Array.from(e.querySelectorAll("certrev-badge[revalidate]")))xt(n,t)};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",r,{once:!0}):r()}function Re(e,t=fetch){return async r=>{let o=`${r.baseUrl.replace(/\/+$/,"")}/api/cert/v1/delivery/${encodeURIComponent(r.platform)}/${encodeURIComponent(r.externalId)}`,i=await t(o,{headers:{accept:"application/json"}});if(!i.ok)throw new Error(`cert delivery ${i.status}`);let s=await i.json();return L(s,e,{platform:r.platform,externalId:r.externalId,liveContentHash:null,now:new Date})}}var Ct="cert-issuer-1",bt=`-----BEGIN PUBLIC KEY-----
+`;var oe="nofollow sponsored noopener noreferrer",je=/^(dr|prof|professor|mr|mrs|ms|mx|rev|sir|dame)\.?\s+/i;function ie(e){let t=f(e).replace(je,"").trim(),r=t.indexOf(",");return(r===-1?t:t.slice(0,r)).trim()}function Je(e){let t=ie(e).split(/\s+/).filter(Boolean);return t.length===0?"":t.length===1?t[0].slice(0,2).toUpperCase():(t[0][0]+t[t.length-1][0]).toUpperCase()}function We(e){return ie(e)}function Ze(e){return f(e).replace(/^https?:\/\//i,"").replace(/\/$/,"")}function ae(e){let t=f(e).trim();return t&&/^https?:\/\//i.test(t)?t:"#"}function Ye(e){return(f(e?.cardLabel)||f(e?.fullName)||f(e?.abbreviation)).trim()}function se(e){let t=[],r=Array.isArray(e?.credentials)?e.credentials:[];for(let n of r){let o=Ye(n);o&&!t.includes(o)&&t.push(o)}return t}function Xe(e,t){return t?.showBio===!1?"":(f(e?.background)||f(e?.bio)).trim()}function ce(e,t,r,n){let o=f(e?.photoUrl).trim();if(n&&/^https?:\/\//i.test(o)){let i=r.includes("--64")?64:56,s=Q(o,i===64?128:112);return`<img class="crm-avatar ${r}" src="${l(s)}" alt="" width="${i}" height="${i}" decoding="async">`}return`<span class="crm-avatar ${r}">${l(Je(t))}</span>`}var le='<button type="button" class="crm-close" data-certrev-modal-close aria-label="Close">&times;</button>';function fe(e){return`<div class="crm-head">${te(16,"#ffffff")}<span class="crm-head__eyebrow">${l(e)}</span><span class="crm-head__wordmark">CertREV</span></div>`}function de(e){return`<span class="${e}">${re(8)}Certified</span>`}function pe(e){let t=f(e?.compensationCue).trim();return`<div class="crm-disclosure">${t?`<span class="crm-disclosure__cue">${l(t)}</span> `:""}${l(ee)}</div>`}function ue(e){let t=e.expert??null,r=f(t?.displayName).trim();if(!r)return null;let n=e.display?.showExpertPhoto!==!1,o=se(t).join(" \xB7 "),i=M(e.certifiedAt)??"",s=f(e.displayCertId).trim(),a=f(e.articleTitle).trim(),c=f(e.verifyUrl).trim(),d=We(r),h=a?`<div class="crm-certifies"><div class="crm-certifies__eyebrow">Certifies the article</div><div class="crm-certifies__title">${l(a)}</div></div>`:"",x=s?`<div class="crm-meta__col"><div class="crm-meta__label">Certificate ID</div><div class="crm-meta__value crm-meta__value--mono">${l(s)}</div></div>`:"",Be=c?`<div class="crm-sig__url">${l(Ze(c))}</div>`:"";return`${le}${fe("Certificate of Expert Review")}<div class="crm-body--cert"><div class="crm-expert-row">${ce(t,r,"crm-avatar--56",n)}<div class="crm-expert-row__info"><div class="crm-expert-row__eyebrow">Reviewing Expert</div><div class="crm-expert-row__name">${l(r)}</div>${o?`<div class="crm-expert-row__creds">${l(o)}</div>`:""}</div></div>${h}<div class="crm-meta"><div class="crm-meta__col"><div class="crm-meta__label">Issued</div><div class="crm-meta__value">${l(i)}</div></div>${x}<div class="crm-meta__col"><div class="crm-meta__label">Status</div><div class="crm-meta__status">${de("crm-chip")}</div></div></div><div class="crm-sig"><div><div class="crm-sig__name">${l(d)}</div><div class="crm-sig__rule"></div>${Be}</div>${ne("cert")}</div>${pe(t)}<div class="crm-actions"><a class="crm-cta" href="${l(ae(c))}" target="_blank" rel="${oe}">View full certificate</a><button type="button" class="crm-ghost" data-certrev-modal-close>Close</button></div></div>`}function me(e){let t=e.expert??null,r=f(t?.displayName).trim();if(!r)return null;let n=e.display?.showExpertPhoto!==!1,o=se(t),i=Xe(t,e.display),s=M(e.certifiedAt),a=o.length?`<div class="crm-chips">${o.map(h=>`<span class="crm-chips__chip">${l(h)}</span>`).join("")}</div>`:"",c=i?`<p class="crm-bio">${l(i)}</p>`:"",d=s?`Independently reviewed \xB7 Certified ${l(s)}`:"Independently reviewed";return`${le}${fe("Verified reviewer")}<div class="crm-body--expert"><div class="crm-id">${ce(t,r,"crm-avatar--64",n)}<div class="crm-id__info"><div class="crm-id__name">${l(r)}</div></div></div>${a}${c}<div class="crm-trust">${de("crm-trust__chip")}<span class="crm-trust__text">${d}</span></div>${pe(t)}<div class="crm-actions"><a class="crm-cta" href="${l(ae(t?.profileUrl))}" target="_blank" rel="${oe}">View full profile on CertREV</a><button type="button" class="crm-ghost" data-certrev-modal-close>Close</button></div></div>`}var A="certrev-cert-modal",w=null;function Qe(){return typeof CSSStyleSheet<"u"&&"replaceSync"in CSSStyleSheet.prototype&&"adoptedStyleSheets"in Document.prototype}function et(){return Qe()?(w||(w=new CSSStyleSheet,w.replaceSync($)),w):null}var ye=!1;function tt(e){if(ye||(ye=!0,e.querySelector("style[data-certrev-modal-fonts]")))return;if(!e.querySelector("link[data-certrev-modal-preconnect]")){let r=e.createElement("link");r.rel="preconnect",r.href=X,r.crossOrigin="",r.setAttribute("data-certrev-modal-preconnect",""),e.head.appendChild(r)}let t=e.createElement("style");t.textContent=Y,t.setAttribute("data-certrev-modal-fonts",""),e.head.appendChild(t)}var O=class extends HTMLElement{constructor(){super();this.rendered=!1;this.content=null;this.fetchInFlight=null;this.root=this.attachShadow({mode:"open"});let r=et();if(r)this.root.adoptedStyleSheets=[r];else{let n=document.createElement("style");n.textContent=$,this.root.appendChild(n)}this.root.addEventListener("click",n=>this.onShadowClick(n))}open(r){return this.getAttribute("data-fonts")!=="host"&&tt(document),this.ensureRendered()?(this.show(r),!0):this.hasFetchSource()?(this.fetchThenShow(r),!0):!1}ensureRendered(){if(this.rendered)return this.content!=null;let r=this.readSyncContent();return r?(this.content=r,this.renderDialogs(r),this.rendered=!0,!0):!1}readSyncContent(){let r=this.getAttribute("data-envelope");if(r)return ge(r);let n=this.querySelector("script[data-certrev-envelope]");return n?.textContent?ge(n.textContent):null}hasFetchSource(){return!!(this.getAttribute("data-delivery-api")&&this.getAttribute("data-platform")&&this.getAttribute("data-external-id"))}async fetchThenShow(r){if(!this.fetchInFlight){let n=(this.getAttribute("data-delivery-api")||"").replace(/\/$/,""),o=this.getAttribute("data-platform")||"",i=this.getAttribute("data-external-id")||"";this.fetchInFlight=(async()=>{try{let s=await fetch(`${n}/api/cert/v1/delivery/${encodeURIComponent(o)}/${encodeURIComponent(i)}`,{cache:"no-store",credentials:"omit"});if(!s.ok)return;let a=await s.json();if(rt(a)){this.markSuppressed();return}let c=v(a)?void 0:a.payload?.content;c&&(this.content=c,this.renderDialogs(c),this.rendered=!0)}catch{}})()}await this.fetchInFlight,this.rendered&&this.show(r)}renderDialogs(r){let n=ue(r),o=me(r),i=document.createElement("div");i.innerHTML=`${n?`<dialog id="cert" class="crm-dialog crm-dialog--cert" aria-label="CertREV certificate">${n}</dialog>`:""}${o?`<dialog id="expert" class="crm-dialog crm-dialog--expert" aria-label="Verified reviewer profile">${o}</dialog>`:""}`;for(let s of Array.from(i.childNodes))this.root.appendChild(s)}show(r){let n=this.root.getElementById(r);n&&typeof n.showModal=="function"&&!n.open&&n.showModal()}markSuppressed(){this.setAttribute("data-certrev-suppressed","");for(let r of Array.from(document.querySelectorAll("[data-certrev-modal-open]")))r.setAttribute("hidden",""),r.setAttribute("aria-hidden","true")}onShadowClick(r){let n=r.target;if(!n)return;if(n instanceof HTMLDialogElement&&n.classList.contains("crm-dialog")){n.close();return}let o=n.closest("[data-certrev-modal-close]");o&&(r.preventDefault(),o.closest("dialog")?.close())}};function ge(e){try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function rt(e){if(!e)return!1;if(v(e))return!0;let t=e.payload?.lifecycle;return t?!!(t.revokedAt!=null||t.expiresAt&&Date.now()>=new Date(t.expiresAt).getTime()):!1}function nt(){typeof customElements>"u"||customElements.get(A)||customElements.define(A,O)}nt();var ot="[data-ftc-line]",xe=".certrev-memo",ve=".certrev-memo-wrap",it="data-certrev-ftc-neutralized",at="nofollow sponsored noopener noreferrer",he=new WeakSet;function st(e){let t=e.ownerDocument.defaultView;if(!t)return!0;let r=t.getComputedStyle(e);if(r.display==="none"||r.visibility==="hidden"||Number.parseFloat(r.opacity||"1")===0)return!1;let n=e.getBoundingClientRect();return n.width>0&&n.height>0}function ct(e){let t=e.querySelector(ot);return!t||(t.textContent||"").trim()!==U?!1:st(t)}function lt(e){let r=e.ownerDocument.createElement("div");r.setAttribute(it,""),r.style.cssText="font-family:system-ui,-apple-system,sans-serif;font-size:12px;color:#555;padding:12px;line-height:1.4",r.innerHTML=`This CertREV verification cannot be displayed because its required disclosure was not shown. <a href="https://certrev.com" style="color:#555" target="_blank" rel="${at}">Learn more</a>.`,e.replaceWith(r)}function ft(e){let t=Array.from(e.querySelectorAll(xe));if(!t.length)return"unguarded";let r="intact";for(let n of t)ct(n)||(r="tampered",lt(n));return r}function Ce(e){if(he.has(e))return;he.add(e);let t=()=>{ft(e)},r=()=>{t();let n=e.defaultView?.MutationObserver;if(!n)return;let o=Array.from(e.querySelectorAll(ve)),i=Array.from(e.querySelectorAll(xe)).filter(s=>!s.closest(ve));for(let s of[...o,...i])new n(t).observe(s,{childList:!0,subtree:!0,characterData:!0,attributes:!0})};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",r,{once:!0}):r()}var be="data-certrev-acc",_="data-certrev-modal-open",N="data-certrev-initials";var dt=["avatar","certrev-memo__avatar"],Ee=new WeakSet;function Ue(e){let t=e.classList.toggle("open");e.setAttribute("aria-expanded",t?"true":"false")}function we(e){return e==="expert"?"expert":"cert"}function Ae(e,t){let r=e.querySelector(A);return r&&typeof r.open=="function"?r.open(t):!1}function _e(e){return e&&e.closest?e:null}function Se(e){let t=e.getAttribute(N);if(t==null)return;let r=dt.find(o=>e.classList.contains(o));if(!r)return;let n=e.ownerDocument.createElement("span");n.className=`${r} ${r}--initials`,n.setAttribute("aria-hidden","true"),n.textContent=t,e.replaceWith(n)}function pt(e){for(let t of Array.from(e.querySelectorAll(`img[${N}]`)))t.complete&&t.naturalWidth===0&&Se(t)}function ut(e){Ee.has(e)||(Ee.add(e),e.addEventListener("click",t=>{let r=_e(t.target);if(!r)return;let n=r.closest(`[${_}]`);if(n){Ae(e,we(n.getAttribute(_)))&&t.preventDefault();return}let o=r.closest(`[${be}]`);o&&!r.closest("a, button")&&Ue(o)}),e.addEventListener("error",t=>{let r=t.target;r&&r.tagName==="IMG"&&r.hasAttribute(N)&&Se(r)},!0),pt(e),e.addEventListener("keydown",t=>{if(t.key!=="Enter"&&t.key!==" "&&t.key!=="Spacebar")return;let r=_e(t.target);if(!r||r.closest("a, button"))return;let n=r.closest(`[${_}]`);if(n&&Ae(e,we(n.getAttribute(_)))){t.preventDefault();return}let o=r.closest(`[${be}]`);o&&(t.preventDefault(),Ue(o))}))}function De(e){let t=()=>ut(e);e.readyState==="loading"?e.addEventListener("DOMContentLoaded",t,{once:!0}):t()}var mt=[{selector:"main article",tier:"article"},{selector:"article",tier:"article"},{selector:"main",tier:"main"},{selector:".article-template__content",tier:"theme-class"},{selector:'[id^="ArticleContent"]',tier:"theme-class"},{selector:".rte",tier:"theme-class"}],y=[{selector:".article-template__content",tier:"theme-class"},{selector:'[id^="ArticleContent"]',tier:"theme-class"},{selector:".rte",tier:"theme-class"},{selector:"main article",tier:"article"},{selector:"article",tier:"article"},{selector:"main",tier:"main"}],P=y.map(e=>e.selector).join(", "),yt='header, [role="banner"], [class*="announcement"], footer, [role="contentinfo"], nav, [role="navigation"], cart-drawer, .cart-drawer, .drawer, .mini-cart, .modal, [role="dialog"]',u="data-certrev-placement",Te="data-certrev-anchor",gt='script[type="application/ld+json"][data-certrev-graph]',vt=".certrev-card-wrap",Re=".certrev-memo-wrap",ht=".certrev-pill-wrap",ke=384,xt=24,S="#references";function D(e){for(let t=e;t;t=t.parentElement){if(t.hasAttribute("hidden")||t.getAttribute("aria-hidden")==="true")return!1;let r=getComputedStyle(t);if(r.display==="none"||r.visibility==="hidden")return!1}return!0}function z(e){return e.closest(yt)!==null}function Fe(e,t){for(let{selector:r,tier:n}of t)if(e.matches(r))return n;return"article"}function F(e,t,r){for(let{selector:n,tier:o}of r)for(let i of Array.from(e.querySelectorAll(n)))if(i!==t&&!i.contains(t)&&!t.contains(i)&&D(i)&&!z(i))return{el:i,tier:o};return null}function V(e,t){let r=t.getAttribute(u);if(r)return{anchored:r!=="body-fallback",tier:r};let n=t.getAttribute(Te);if(n==="rail"){let a=e.querySelector(S)?.closest(P)??F(e,t,y)?.el??null,c=e.defaultView;if(a&&c&&D(a)&&!z(a)){let d=a.getBoundingClientRect();if(c.innerWidth-d.right>=ke)return t.style.setProperty("--certrev-rail-left",`${Math.round(d.right+xt)}px`),t.setAttribute(u,"rail"),{anchored:!0,tier:"rail"};a.insertAdjacentElement("afterbegin",t);let x=Fe(a,y);return t.setAttribute(u,x),{anchored:!0,tier:x}}return t.setAttribute(u,"body-fallback"),{anchored:!1,tier:"body-fallback"}}let o=n==="bottom"?"bottom":"top",i="body-fallback";if(o==="top"){let a=e.querySelector(S)?.closest(P)??null;if(a&&a!==t&&!a.contains(t)&&!t.contains(a)&&D(a)&&!z(a))a.insertAdjacentElement("afterbegin",t),i=Fe(a,y);else{let c=F(e,t,y);c&&(c.el.insertAdjacentElement("afterbegin",t),i=c.tier)}}else{let s=e.querySelector(S);if(s&&s!==t&&!t.contains(s)&&!s.contains(t)&&D(s))s.insertAdjacentElement("beforebegin",t),i="references";else{let a=F(e,t,mt);a&&(a.el.insertAdjacentElement("afterend",t),i=a.tier)}}return t.setAttribute(u,i),{anchored:i!=="body-fallback",tier:i}}function Ct(e){let t=e.querySelector(gt),r=!1;t&&t.parentNode!==e.head&&(e.head.appendChild(t),r=!0);let n=e.querySelector(vt),o=e.querySelector(Re);return e.querySelector(ht)?.setAttribute(u,"pill-fixed"),{graph:r,card:n?V(e,n):null,memo:o?V(e,o):null}}function bt(e){let t=e.defaultView;if(!t)return;let r=e.querySelector(`${Re}[${Te}="rail"]`);if(!r||r.getAttribute(u)!=="rail")return;let n,o=()=>{n&&clearTimeout(n),n=setTimeout(()=>{if(r.getAttribute(u)!=="rail"){t.removeEventListener("resize",o);return}let s=e.querySelector(S)?.closest(P)??F(e,r,y)?.el??null;(s?t.innerWidth-s.getBoundingClientRect().right:0)<ke&&(r.style.removeProperty("--certrev-rail-left"),r.removeAttribute(u),V(e,r),t.removeEventListener("resize",o))},150)};t.addEventListener("resize",o)}function Le(e){let t=()=>{Ct(e),bt(e)};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",t,{once:!0}):t()}async function Et(e,t){let r=e.querySelector(".certrev-badge");if(!r)return;let n=e.getAttribute("data-delivery-api"),o=e.getAttribute("data-external-id"),i=e.getAttribute("data-platform")??"shopify";if(!n||!o)return;let s;try{s=await t.verify({baseUrl:n,platform:i,externalId:o})}catch{return}s.decision!=="render"&&(r.setAttribute("hidden",""),r.setAttribute("data-certrev-suppressed",s.reason))}function Ie(e,t){let r=()=>{for(let n of Array.from(e.querySelectorAll("certrev-badge[revalidate]")))Et(n,t)};e.readyState==="loading"?e.addEventListener("DOMContentLoaded",r,{once:!0}):r()}function Me(e,t=fetch){return async r=>{let o=`${r.baseUrl.replace(/\/+$/,"")}/api/cert/v1/delivery/${encodeURIComponent(r.platform)}/${encodeURIComponent(r.externalId)}`,i=await t(o,{headers:{accept:"application/json"}});if(!i.ok)throw new Error(`cert delivery ${i.status}`);let s=await i.json();return I(s,e,{platform:r.platform,externalId:r.externalId,liveContentHash:null,now:new Date})}}var Ut="cert-issuer-1",wt=`-----BEGIN PUBLIC KEY-----
 MCowBQYDK2VwAyEAMWN956IOPjpAq900dL428VzA28TO/pVXnq3brwqUmwM=
------END PUBLIC KEY-----`,Ut=e=>e===Ct?{format:"pem",pem:bt}:null;typeof document<"u"&&(Fe(document),we(document),ge(document),Te(document,{verify:Re(Ut)}));})();
+-----END PUBLIC KEY-----`,At=e=>e===Ut?{format:"pem",pem:wt}:null;typeof document<"u"&&(Le(document),De(document),Ce(document),Ie(document,{verify:Me(At)}));})();

package/dist/modal/display-strings.d.ts

@@ -1,13 +1,17 @@
 /**
- * Cert-render display strings + date formatter for the MODAL — a BYTE-FAITHFUL relocation of
- * portal `src/lib/cert-delivery/display-strings.ts` (POR-10721 W2). Kept a SEPARATE module from
- * ftc-disclosure.ts (matching portal) so the bundle's `var` layout is byte-identical to the live asset.
+ * Cert-render display strings + date formatter for the MODAL — a BYTE-FAITHFUL relocation of the
+ * portal's own display-strings module. Kept a SEPARATE module from ftc-disclosure.ts (matching the
+ * portal's file split) so the bundle's `var` layout is byte-identical to the live deployed asset.
  *
  * ⚠ Deliberately SEPARATE from `../components/render-def.ts`/`format.ts`. `formatCertDisplayDate`
  * uses `toLocaleDateString` (NOT the components' fixed MONTHS array): the live modal formats dates
  * via `toLocaleDateString` at runtime in the browser, so a fixed-array formatter would VISIBLY
  * diverge on any browser whose ICU renders a month abbreviation differently (the "Sep"/"Sept"
  * CLDR-42 case). Byte-parity with the deployed asset requires preserving the exact source.
+ *
+ * Byte-frozen about OUTPUT, type-guarded about INPUT — the same split `escape.ts` makes here:
+ * every well-formed value renders the exact string portal renders, and a value the wire could
+ * never legitimately carry renders nothing (see `formatCertDisplayDate`).
  */
 /** The compensation cue (guide "line A"), byte-verbatim from portal `COMPENSATED_EXPERT_CUE`. */
 export declare const COMPENSATED_EXPERT_CUE = "Compensated expert";
@@ -15,8 +19,24 @@ export declare const COMPENSATED_EXPERT_CUE = "Compensated expert";
 export declare const CERT_SCOPE_LINE: "Independent editorial review of this article’s text and sources. Not a product endorsement, nor medical advice.";
 /**
  * Format a timestamp the way every cert byline renders dates ("Jun 14, 2026", en-US short month,
- * UTC-pinned). Byte-faithful to portal `formatCertDisplayDate`. Null for an unparseable input —
- * callers treat that as "no date, no byline".
+ * UTC-pinned). Null for an unparseable input — callers treat that as "no date, no byline".
+ * Byte-faithful to portal `formatCertDisplayDate` for every value the wire can legitimately carry.
+ *
+ * STRINGS AND `Date`s ONLY — any other type is null, the same rule `../components/format.ts`'s
+ * `formatDate` settled on. `certifiedAt` reaches here off a `JSON.parse(...) as` cast whose
+ * SIGNATURE was checked and whose SHAPE never was, and the `Date` constructor coerces whatever it
+ * is handed: `certifiedAt: 42` put "Jan 1, 1970" in the certificate's Issued row, and `[2026]`
+ * put "Jan 1, 2026" there. There is no reading to rescue — the wire types this field as an
+ * ISO-8601 string, so a number is always a malformed payload, and epoch seconds vs milliseconds
+ * is not decidable from the value anyway. A compliance-facing card that prints a confident wrong
+ * certification date is worse than one that prints none.
+ *
+ * The guard is on the TYPE, not the value: the string "42" still parses as the year 2042, exactly
+ * as `formatDate` does with it. Both helpers hand string parsing to the engine.
+ *
+ * One behaviour narrows: a `Date` from another realm fails `instanceof` and is now null instead of
+ * being coerced through `new Date(obj)`. Nothing passes a `Date` here at all — both call sites in
+ * `cert-modal-view.ts` pass `content.certifiedAt` straight off the parsed envelope.
  */
 export declare function formatCertDisplayDate(iso: string | Date | null | undefined): string | null;
 //# sourceMappingURL=display-strings.d.ts.map

package/dist/modal/display-strings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"display-strings.d.ts","sourceRoot":"","sources":["../../src/modal/display-strings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,+GAA+G;AAC/G,eAAO,MAAM,eAAe,mHAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,GACnC,MAAM,GAAG,IAAI,CAUf"}
+{"version":3,"file":"display-strings.d.ts","sourceRoot":"","sources":["../../src/modal/display-strings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,+GAA+G;AAC/G,eAAO,MAAM,eAAe,mHAAsB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,GACnC,MAAM,GAAG,IAAI,CAWf"}

package/dist/modal/display-strings.js

@@ -1,13 +1,17 @@
 /**
- * Cert-render display strings + date formatter for the MODAL — a BYTE-FAITHFUL relocation of
- * portal `src/lib/cert-delivery/display-strings.ts` (POR-10721 W2). Kept a SEPARATE module from
- * ftc-disclosure.ts (matching portal) so the bundle's `var` layout is byte-identical to the live asset.
+ * Cert-render display strings + date formatter for the MODAL — a BYTE-FAITHFUL relocation of the
+ * portal's own display-strings module. Kept a SEPARATE module from ftc-disclosure.ts (matching the
+ * portal's file split) so the bundle's `var` layout is byte-identical to the live deployed asset.
  *
  * ⚠ Deliberately SEPARATE from `../components/render-def.ts`/`format.ts`. `formatCertDisplayDate`
  * uses `toLocaleDateString` (NOT the components' fixed MONTHS array): the live modal formats dates
  * via `toLocaleDateString` at runtime in the browser, so a fixed-array formatter would VISIBLY
  * diverge on any browser whose ICU renders a month abbreviation differently (the "Sep"/"Sept"
  * CLDR-42 case). Byte-parity with the deployed asset requires preserving the exact source.
+ *
+ * Byte-frozen about OUTPUT, type-guarded about INPUT — the same split `escape.ts` makes here:
+ * every well-formed value renders the exact string portal renders, and a value the wire could
+ * never legitimately carry renders nothing (see `formatCertDisplayDate`).
  */
 import { FTC_DISCLOSURE_LINE } from "./ftc-disclosure.js";
 /** The compensation cue (guide "line A"), byte-verbatim from portal `COMPENSATED_EXPERT_CUE`. */
@@ -16,12 +20,30 @@ export const COMPENSATED_EXPERT_CUE = "Compensated expert";
 export const CERT_SCOPE_LINE = FTC_DISCLOSURE_LINE;
 /**
  * Format a timestamp the way every cert byline renders dates ("Jun 14, 2026", en-US short month,
- * UTC-pinned). Byte-faithful to portal `formatCertDisplayDate`. Null for an unparseable input —
- * callers treat that as "no date, no byline".
+ * UTC-pinned). Null for an unparseable input — callers treat that as "no date, no byline".
+ * Byte-faithful to portal `formatCertDisplayDate` for every value the wire can legitimately carry.
+ *
+ * STRINGS AND `Date`s ONLY — any other type is null, the same rule `../components/format.ts`'s
+ * `formatDate` settled on. `certifiedAt` reaches here off a `JSON.parse(...) as` cast whose
+ * SIGNATURE was checked and whose SHAPE never was, and the `Date` constructor coerces whatever it
+ * is handed: `certifiedAt: 42` put "Jan 1, 1970" in the certificate's Issued row, and `[2026]`
+ * put "Jan 1, 2026" there. There is no reading to rescue — the wire types this field as an
+ * ISO-8601 string, so a number is always a malformed payload, and epoch seconds vs milliseconds
+ * is not decidable from the value anyway. A compliance-facing card that prints a confident wrong
+ * certification date is worse than one that prints none.
+ *
+ * The guard is on the TYPE, not the value: the string "42" still parses as the year 2042, exactly
+ * as `formatDate` does with it. Both helpers hand string parsing to the engine.
+ *
+ * One behaviour narrows: a `Date` from another realm fails `instanceof` and is now null instead of
+ * being coerced through `new Date(obj)`. Nothing passes a `Date` here at all — both call sites in
+ * `cert-modal-view.ts` pass `content.certifiedAt` straight off the parsed envelope.
  */
 export function formatCertDisplayDate(iso) {
     if (!iso)
         return null;
+    if (typeof iso !== "string" && !(iso instanceof Date))
+        return null;
     const date = iso instanceof Date ? iso : new Date(iso);
     if (Number.isNaN(date.getTime()))
         return null;

package/dist/modal/display-strings.js.map

@@ -1 +1 @@
-{"version":3,"file":"display-strings.js","sourceRoot":"","sources":["../../src/modal/display-strings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,iGAAiG;AACjG,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,+GAA+G;AAC/G,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACpC,GAAqC;IAErC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACvC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,KAAK;KACf,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"display-strings.js","sourceRoot":"","sources":["../../src/modal/display-strings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,iGAAiG;AACjG,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,+GAA+G;AAC/G,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CACpC,GAAqC;IAErC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACvC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,KAAK;KACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/modal/escape.d.ts

@@ -1,13 +1,36 @@
 /**
  * HTML escaping for the cert MODAL string builder — a BYTE-FAITHFUL relocation of
- * portal `src/lib/utils/html.ts` `escapeHtml` (the exact `.replace` chain the deployed
- * `certrev-cert.js` was bundled from — POR-10721 W2).
+ * the portal's `escapeHtml` (the exact `.replace` chain the deployed `certrev-cert.js`
+ * was bundled from).
  *
  * ⚠ Deliberately SEPARATE from `../components/escape.ts`: that SSR helper encodes the
  * apostrophe as `'`, THIS one as `'`. They render identically in a browser, but
  * this module is a byte-frozen relocation of the live Shopify asset, so it must reproduce
  * portal's exact `'` bytes — the two escapes are NOT interchangeable here. (Unifying
  * them is a deliberate post-publish follow-up, tracked with the unification program.)
+ *
+ * The two files are separate about BYTES and identical about TYPES: `asText` below mirrors
+ * `../components/escape.ts`'s guard of the same name, for the same reason. This escape runs
+ * downstream of a `JSON.parse(...) as CertDeliveryEnvelope` cast, and `verifyEnvelope` checks
+ * the SIGNATURE, never the SHAPE — so a number / object / array arrives where the contract
+ * promised a string, and `text.replace` on one is a `TypeError`. In the browser that throw
+ * takes down the dialog the reader clicked, so the family's contract is NEVER THROW.
+ */
+/**
+ * Coerce an untyped value to renderable text — byte-for-byte the same rule the components
+ * copy applies: a string passes through UNTOUCHED (the escape chain below is the only XSS
+ * boundary the modal has, and any change to its string output is a security regression);
+ * a finite number renders as its digits; everything else — null, undefined, booleans,
+ * objects, arrays, NaN/Infinity — renders as empty.
+ *
+ * Deliberately not `String(input)`: blind coercion splices `[object Object]` (or a hostile
+ * `toString`'s payload) into the dialog, and on a null-prototype object it throws the very
+ * TypeError this exists to prevent. A value that is not text is not copy.
+ *
+ * Exported for `cert-modal-view.ts`, whose pre-escape `.trim()` reads need the same guard —
+ * a coercion applied only inside `escapeHtml` would still leave the dereference above it
+ * throwing. Modal-internal (the `/modal` entry does not re-export it).
  */
-export declare function escapeHtml(text: string): string;
+export declare function asText(input: unknown): string;
+export declare function escapeHtml(text: string | null | undefined): string;
 //# sourceMappingURL=escape.d.ts.map

package/dist/modal/escape.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"escape.d.ts","sourceRoot":"","sources":["../../src/modal/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C"}
+{"version":3,"file":"escape.d.ts","sourceRoot":"","sources":["../../src/modal/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI7C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAOlE"}

package/dist/modal/escape.js

@@ -1,16 +1,45 @@
 /**
  * HTML escaping for the cert MODAL string builder — a BYTE-FAITHFUL relocation of
- * portal `src/lib/utils/html.ts` `escapeHtml` (the exact `.replace` chain the deployed
- * `certrev-cert.js` was bundled from — POR-10721 W2).
+ * the portal's `escapeHtml` (the exact `.replace` chain the deployed `certrev-cert.js`
+ * was bundled from).
  *
  * ⚠ Deliberately SEPARATE from `../components/escape.ts`: that SSR helper encodes the
  * apostrophe as `'`, THIS one as `'`. They render identically in a browser, but
  * this module is a byte-frozen relocation of the live Shopify asset, so it must reproduce
  * portal's exact `'` bytes — the two escapes are NOT interchangeable here. (Unifying
  * them is a deliberate post-publish follow-up, tracked with the unification program.)
+ *
+ * The two files are separate about BYTES and identical about TYPES: `asText` below mirrors
+ * `../components/escape.ts`'s guard of the same name, for the same reason. This escape runs
+ * downstream of a `JSON.parse(...) as CertDeliveryEnvelope` cast, and `verifyEnvelope` checks
+ * the SIGNATURE, never the SHAPE — so a number / object / array arrives where the contract
+ * promised a string, and `text.replace` on one is a `TypeError`. In the browser that throw
+ * takes down the dialog the reader clicked, so the family's contract is NEVER THROW.
+ */
+/**
+ * Coerce an untyped value to renderable text — byte-for-byte the same rule the components
+ * copy applies: a string passes through UNTOUCHED (the escape chain below is the only XSS
+ * boundary the modal has, and any change to its string output is a security regression);
+ * a finite number renders as its digits; everything else — null, undefined, booleans,
+ * objects, arrays, NaN/Infinity — renders as empty.
+ *
+ * Deliberately not `String(input)`: blind coercion splices `[object Object]` (or a hostile
+ * `toString`'s payload) into the dialog, and on a null-prototype object it throws the very
+ * TypeError this exists to prevent. A value that is not text is not copy.
+ *
+ * Exported for `cert-modal-view.ts`, whose pre-escape `.trim()` reads need the same guard —
+ * a coercion applied only inside `escapeHtml` would still leave the dereference above it
+ * throwing. Modal-internal (the `/modal` entry does not re-export it).
  */
+export function asText(input) {
+    if (typeof input === "string")
+        return input;
+    if (typeof input === "number")
+        return Number.isFinite(input) ? String(input) : "";
+    return "";
+}
 export function escapeHtml(text) {
-    return text
+    return asText(text)
         .replace(/&/g, "&")
         .replace(/</g, "&lt;")
         .replace(/>/g, "&gt;")

package/dist/modal/escape.js.map

@@ -1 +1 @@
-{"version":3,"file":"escape.js","sourceRoot":"","sources":["../../src/modal/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,UAAU,UAAU,CAAC,IAAY;IACtC,OAAO,IAAI;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"escape.js","sourceRoot":"","sources":["../../src/modal/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,OAAO,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAA+B;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC;SACjB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC"}

package/dist/modal/font-face.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"font-face.d.ts","sourceRoot":"","sources":["../../src/modal/font-face.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,kBAAkB,uiKAwH9B,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,iBAAiB,+BAA+B,CAAC"}
+{"version":3,"file":"font-face.d.ts","sourceRoot":"","sources":["../../src/modal/font-face.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,kBAAkB,uiKAwH9B,CAAC;AAEF,kGAAkG;AAClG,eAAO,MAAM,iBAAiB,+BAA+B,CAAC"}

package/dist/modal/font-face.js

@@ -1,16 +1,13 @@
-// ⚠ VENDORED, BYTE-FAITHFUL copy of portal `src/lib/cert-delivery/fonts/font-face.generated.ts`
-// (POR-10721 W2) — the exact @font-face block the deployed `certrev-cert.js` was bundled from.
-// Regenerated upstream in portal; do not hand-edit the CSS here (a drift would break byte-parity).
-//
-// GENERATED by scripts/build-cert-fonts.mjs — DO NOT EDIT BY HAND.
+// ⚠ VENDORED, BYTE-FAITHFUL copy of the portal's GENERATED cert @font-face module — the exact
+// @font-face block the deployed `certrev-cert.js` was bundled from. It is generated (and
+// regenerated) upstream in portal, never in this repo: do not hand-edit the CSS here, because a
+// drift would break byte-parity with the deployed asset.
 //
 // The CertREV self-hosted cert @font-face block (absolute R2 URLs on assets.certrev.com),
-// mirrored from the block spliced into
-// shopify/extensions/certrev-schema/assets/certrev-cert.css so the surfaces that CAN'T @import a
-// .css asset share ONE canonical declaration: the standalone /embed renderers and the
-// <certrev-cert-modal> web component (POR-10657). Regenerate with
-// `node scripts/build-cert-fonts.mjs` (or `--emit-ts-only` to re-derive from the CSS without
-// re-downloading). Inline this inside a <style> to load the fonts non-blocking from R2.
+// mirrored from the block spliced into the Shopify extension's `certrev-cert.css` so the surfaces
+// that CAN'T @import a .css asset share ONE canonical declaration: the standalone /embed renderers
+// and the <certrev-cert-modal> web component. Inline this inside a <style> to load the fonts
+// non-blocking from R2.
 export const CERT_FONT_FACE_CSS = `
 @font-face {
 	font-family: "DM Sans";

package/dist/modal/font-face.js.map

@@ -1 +1 @@
-{"version":3,"file":"font-face.js","sourceRoot":"","sources":["../../src/modal/font-face.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,+FAA+F;AAC/F,mGAAmG;AACnG,EAAE;AACF,mEAAmE;AACnE,EAAE;AACF,0FAA0F;AAC1F,uCAAuC;AACvC,iGAAiG;AACjG,sFAAsF;AACtF,kEAAkE;AAClE,6FAA6F;AAC7F,wFAAwF;AAExF,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwHjC,CAAC;AAEF,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC"}
+{"version":3,"file":"font-face.js","sourceRoot":"","sources":["../../src/modal/font-face.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yFAAyF;AACzF,gGAAgG;AAChG,yDAAyD;AACzD,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,mGAAmG;AACnG,6FAA6F;AAC7F,wBAAwB;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwHjC,CAAC;AAEF,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC"}

package/dist/modal/ftc-disclosure.d.ts

@@ -1,7 +1,7 @@
 /**
  * The verbatim FTC material-connection + scope disclosure line — a BYTE-FAITHFUL relocation of
- * the (tree-shaken) `FTC_DISCLOSURE_LINE` from portal `src/lib/embed/ftc-disclosure.ts`
- * (POR-9317 / POR-10721 W2). Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
+ * the (tree-shaken) `FTC_DISCLOSURE_LINE` from the portal's embed disclosure
+ * module. Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
  * is byte-exact; a reword is a contract divergence.
  *
  * Kept as its OWN module (imported by both ftc-guard + display-strings, exactly as in portal) so

package/dist/modal/ftc-disclosure.js

@@ -1,7 +1,7 @@
 /**
  * The verbatim FTC material-connection + scope disclosure line — a BYTE-FAITHFUL relocation of
- * the (tree-shaken) `FTC_DISCLOSURE_LINE` from portal `src/lib/embed/ftc-disclosure.ts`
- * (POR-9317 / POR-10721 W2). Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
+ * the (tree-shaken) `FTC_DISCLOSURE_LINE` from the portal's embed disclosure
+ * module. Legally load-bearing: the curly apostrophe (U+2019) in "article’s"
  * is byte-exact; a reword is a contract divergence.
  *
  * Kept as its OWN module (imported by both ftc-guard + display-strings, exactly as in portal) so