@certrev/cert-block 1.2.0-canary.6 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/CHANGELOG.md +120 -35
  2. package/README.md +116 -21
  3. package/dist/builder/card-reader-css.d.ts +14 -0
  4. package/dist/builder/card-reader-css.d.ts.map +1 -0
  5. package/dist/builder/card-reader-css.js +17 -0
  6. package/dist/builder/card-reader-css.js.map +1 -0
  7. package/dist/builder/cert-review-card.d.ts +8 -0
  8. package/dist/builder/cert-review-card.d.ts.map +1 -1
  9. package/dist/builder/cert-review-card.js +234 -41
  10. package/dist/builder/cert-review-card.js.map +1 -1
  11. package/dist/builder/delivery-runtime.d.ts +15 -1
  12. package/dist/builder/delivery-runtime.d.ts.map +1 -1
  13. package/dist/builder/delivery-runtime.js +31 -3
  14. package/dist/builder/delivery-runtime.js.map +1 -1
  15. package/dist/builder/ssr-seed.d.ts +155 -0
  16. package/dist/builder/ssr-seed.d.ts.map +1 -0
  17. package/dist/builder/ssr-seed.js +278 -0
  18. package/dist/builder/ssr-seed.js.map +1 -0
  19. package/dist/reader/face.d.ts +6 -2
  20. package/dist/reader/face.d.ts.map +1 -1
  21. package/dist/reader/face.js +53 -5
  22. package/dist/reader/face.js.map +1 -1
  23. package/dist/reader/render.d.ts.map +1 -1
  24. package/dist/reader/render.js +10 -10
  25. package/dist/reader/render.js.map +1 -1
  26. package/dist/verify/cache.d.ts +39 -2
  27. package/dist/verify/cache.d.ts.map +1 -1
  28. package/dist/verify/cache.js +61 -12
  29. package/dist/verify/cache.js.map +1 -1
  30. package/dist/verify/get-verified-delivery.d.ts +28 -3
  31. package/dist/verify/get-verified-delivery.d.ts.map +1 -1
  32. package/dist/verify/get-verified-delivery.js +46 -9
  33. package/dist/verify/get-verified-delivery.js.map +1 -1
  34. package/package.json +112 -112
  35. package/src/builder/card-reader-css.ts +19 -0
  36. package/src/builder/cert-review-card.tsx +308 -56
  37. package/src/builder/delivery-runtime.ts +33 -3
  38. package/src/builder/ssr-seed.ts +343 -0
  39. package/src/reader/face.ts +59 -6
  40. package/src/reader/render.ts +12 -12
  41. package/src/verify/cache.ts +87 -11
  42. package/src/verify/get-verified-delivery.ts +77 -11
package/package.json CHANGED
@@ -1,113 +1,113 @@
1
1
  {
2
- "name": "@certrev/cert-block",
3
- "version": "1.2.0-canary.6",
4
- "description": "Headless render edge for the CertREV CertDeliveryEnvelope: SSR-safe React cert components, a framework-agnostic <certrev-badge> Web Component, a schema.org JSON-LD projector, and a fail-closed verify layer over the shared VerdictKernel.",
5
- "repository": {
6
- "type": "git",
7
- "url": "git+https://github.com/CertREV/cert-kit.git",
8
- "directory": "packages/cert-block"
9
- },
10
- "homepage": "https://github.com/CertREV/cert-kit/tree/HEAD/packages/cert-block#readme",
11
- "bugs": {
12
- "url": "https://github.com/CertREV/cert-kit/issues"
13
- },
14
- "type": "module",
15
- "main": "./dist/index.js",
16
- "types": "./dist/index.d.ts",
17
- "exports": {
18
- ".": {
19
- "types": "./dist/index.d.ts",
20
- "default": "./dist/index.js"
21
- },
22
- "./builder": {
23
- "types": "./dist/builder/index.d.ts",
24
- "default": "./dist/builder/index.js"
25
- },
26
- "./builder/face": {
27
- "types": "./dist/builder/envelope-face.d.ts",
28
- "default": "./dist/builder/envelope-face.js"
29
- },
30
- "./reader": {
31
- "types": "./dist/reader/index.d.ts",
32
- "default": "./dist/reader/index.js"
33
- },
34
- "./reader.css": "./src/reader/reader.css",
35
- "./webcomponent": {
36
- "types": "./dist/webcomponent/certrev-badge.d.ts",
37
- "default": "./dist/webcomponent/certrev-badge.js"
38
- },
39
- "./fixtures": {
40
- "types": "./dist/contract/fixtures.d.ts",
41
- "default": "./dist/contract/fixtures.js"
42
- },
43
- "./modal": {
44
- "types": "./dist/modal/index.d.ts",
45
- "default": "./dist/modal/index.js"
46
- },
47
- "./modal/placement": {
48
- "types": "./dist/modal/placement.d.ts",
49
- "default": "./dist/modal/placement.js"
50
- },
51
- "./modal/certrev-cert.js": "./dist/modal/certrev-cert.js"
52
- },
53
- "files": [
54
- "dist",
55
- "src",
56
- "!src/**/__tests__",
57
- "!src/**/*.test.ts",
58
- "!src/**/*.test.tsx",
59
- "README.md",
60
- "CHANGELOG.md"
61
- ],
62
- "publishConfig": {
63
- "registry": "https://registry.npmjs.org",
64
- "access": "public"
65
- },
66
- "publishTargets": [
67
- "npmjs",
68
- "github-packages"
69
- ],
70
- "scripts": {
71
- "build": "tsc && pnpm build:modal-bundle",
72
- "build:modal-bundle": "pnpm dlx esbuild@0.27.7 src/modal/certrev-cert.entry.ts --bundle --minify --target=es2020 --format=iife --legal-comments=none --tsconfig-raw='{\"compilerOptions\":{\"target\":\"ES2017\",\"module\":\"esnext\",\"strict\":true}}' --banner:js='/* biome-ignore-all format: generated cert-badge bundle, see @certrev/cert-block src/modal/ */ /* biome-ignore-all lint: generated cert-badge bundle, see @certrev/cert-block src/modal/ */' --outfile=dist/modal/certrev-cert.js",
73
- "refresh:reader": "node scripts/refresh-reader.mjs",
74
- "typecheck": "tsc --noEmit",
75
- "test": "vitest run"
76
- },
77
- "dependencies": {
78
- "@certrev/cert-contract": "^0.5.0"
79
- },
80
- "peerDependencies": {
81
- "react": ">=18.0.0"
82
- },
83
- "peerDependenciesMeta": {
84
- "react": {
85
- "optional": false
86
- }
87
- },
88
- "devDependencies": {
89
- "@testing-library/react": "^16.1.0",
90
- "@types/node": "^20.0.0",
91
- "@types/react": "^18.3.0",
92
- "@types/react-dom": "^18.3.0",
93
- "jsdom": "^25.0.0",
94
- "react": "^18.3.1",
95
- "react-dom": "^18.3.1",
96
- "typescript": "^6.0.3",
97
- "vitest": "^4.1.5"
98
- },
99
- "keywords": [
100
- "certrev",
101
- "certification",
102
- "react",
103
- "server-components",
104
- "hydrogen",
105
- "shopify",
106
- "json-ld",
107
- "schema-org",
108
- "web-component",
109
- "ed25519",
110
- "ssr"
111
- ],
112
- "license": "MIT"
113
- }
2
+ "name": "@certrev/cert-block",
3
+ "version": "1.2.0",
4
+ "description": "Headless render edge for the CertREV CertDeliveryEnvelope: SSR-safe React cert components, a framework-agnostic <certrev-badge> Web Component, a schema.org JSON-LD projector, and a fail-closed verify layer over the shared VerdictKernel.",
5
+ "repository": {
6
+ "type": "git",
7
+ "url": "git+https://github.com/CertREV/cert-kit.git",
8
+ "directory": "packages/cert-block"
9
+ },
10
+ "homepage": "https://github.com/CertREV/cert-kit/tree/HEAD/packages/cert-block#readme",
11
+ "bugs": {
12
+ "url": "https://github.com/CertREV/cert-kit/issues"
13
+ },
14
+ "type": "module",
15
+ "main": "./dist/index.js",
16
+ "types": "./dist/index.d.ts",
17
+ "exports": {
18
+ ".": {
19
+ "types": "./dist/index.d.ts",
20
+ "default": "./dist/index.js"
21
+ },
22
+ "./builder": {
23
+ "types": "./dist/builder/index.d.ts",
24
+ "default": "./dist/builder/index.js"
25
+ },
26
+ "./builder/face": {
27
+ "types": "./dist/builder/envelope-face.d.ts",
28
+ "default": "./dist/builder/envelope-face.js"
29
+ },
30
+ "./reader": {
31
+ "types": "./dist/reader/index.d.ts",
32
+ "default": "./dist/reader/index.js"
33
+ },
34
+ "./reader.css": "./src/reader/reader.css",
35
+ "./webcomponent": {
36
+ "types": "./dist/webcomponent/certrev-badge.d.ts",
37
+ "default": "./dist/webcomponent/certrev-badge.js"
38
+ },
39
+ "./fixtures": {
40
+ "types": "./dist/contract/fixtures.d.ts",
41
+ "default": "./dist/contract/fixtures.js"
42
+ },
43
+ "./modal": {
44
+ "types": "./dist/modal/index.d.ts",
45
+ "default": "./dist/modal/index.js"
46
+ },
47
+ "./modal/placement": {
48
+ "types": "./dist/modal/placement.d.ts",
49
+ "default": "./dist/modal/placement.js"
50
+ },
51
+ "./modal/certrev-cert.js": "./dist/modal/certrev-cert.js"
52
+ },
53
+ "files": [
54
+ "dist",
55
+ "src",
56
+ "!src/**/__tests__",
57
+ "!src/**/*.test.ts",
58
+ "!src/**/*.test.tsx",
59
+ "README.md",
60
+ "CHANGELOG.md"
61
+ ],
62
+ "publishConfig": {
63
+ "registry": "https://registry.npmjs.org",
64
+ "access": "public"
65
+ },
66
+ "publishTargets": [
67
+ "npmjs",
68
+ "github-packages"
69
+ ],
70
+ "dependencies": {
71
+ "@certrev/cert-contract": "^0.5.0"
72
+ },
73
+ "peerDependencies": {
74
+ "react": ">=18.0.0"
75
+ },
76
+ "peerDependenciesMeta": {
77
+ "react": {
78
+ "optional": false
79
+ }
80
+ },
81
+ "devDependencies": {
82
+ "@testing-library/react": "^16.1.0",
83
+ "@types/node": "^20.0.0",
84
+ "@types/react": "^18.3.0",
85
+ "@types/react-dom": "^18.3.0",
86
+ "jsdom": "^25.0.0",
87
+ "react": "^18.3.1",
88
+ "react-dom": "^18.3.1",
89
+ "typescript": "^6.0.3",
90
+ "vitest": "^4.1.5"
91
+ },
92
+ "keywords": [
93
+ "certrev",
94
+ "certification",
95
+ "react",
96
+ "server-components",
97
+ "hydrogen",
98
+ "shopify",
99
+ "json-ld",
100
+ "schema-org",
101
+ "web-component",
102
+ "ed25519",
103
+ "ssr"
104
+ ],
105
+ "license": "MIT",
106
+ "scripts": {
107
+ "build": "tsc && pnpm build:modal-bundle",
108
+ "build:modal-bundle": "pnpm dlx esbuild@0.27.7 src/modal/certrev-cert.entry.ts --bundle --minify --target=es2020 --format=iife --legal-comments=none --tsconfig-raw='{\"compilerOptions\":{\"target\":\"ES2017\",\"module\":\"esnext\",\"strict\":true}}' --banner:js='/* biome-ignore-all format: generated cert-badge bundle, see @certrev/cert-block src/modal/ */ /* biome-ignore-all lint: generated cert-badge bundle, see @certrev/cert-block src/modal/ */' --outfile=dist/modal/certrev-cert.js",
109
+ "refresh:reader": "node scripts/refresh-reader.mjs",
110
+ "typecheck": "tsc --noEmit",
111
+ "test": "vitest run"
112
+ }
113
+ }
package/src/builder/card-reader-css.ts ADDED
@@ -0,0 +1,19 @@
1
+ /**
2
+ * The reader stylesheet as the Builder card inlines it (1.2.0): `READER_CSS` without its remote `@font-face` rules.
3
+ *
4
+ * The portal's reader CSS loads its faces from `https://assets.certrev.com/fonts/…`. A storefront whose CSP
5
+ * `font-src` does not name that origin (e.l.f.'s live policy names `'self' data:` and a list of font CDNs, no
6
+ * CertREV origin) refuses each load and logs a violation, and the text falls back anyway. So the card ships only the
7
+ * `local()` fallback faces (Arial or Times New Roman under each family's metric overrides), which need no CSP at all:
8
+ * the face looks the same as it does on a page that blocks the remote fonts, with nothing refused. The portal and the
9
+ * Shopify reader keep `READER_CSS` unchanged.
10
+ *
11
+ * INTERNAL: not on the package `exports` map.
12
+ */
13
+
14
+ import { READER_CSS } from '../reader/reader-css.generated.js'
15
+
16
+ /** One `@font-face { … }` rule whose body has a `url(`; the reader CSS has no nested braces inside a face rule. */
17
+ const REMOTE_FONT_FACE = /@font-face\s*\{[^{}]*\burl\([^{}]*\}\s*/g
18
+
19
+ export const CARD_READER_CSS = READER_CSS.replace(REMOTE_FONT_FACE, '')