@certrev/cert-block 1.2.1 → 2.0.0

package/dist/builder/contract-card.js

@@ -0,0 +1,141 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The contract-1 card face (2.0.0): one Builder block printing CertREV's server-rendered card verbatim.
+ *
+ * The block's wrapper holds, as its `dangerouslySetInnerHTML`, exactly `cardHtml(card, names)`: the block's part hosts
+ * in page order and, in the block holding the document's first part, the head fragment, both CertREV dialog hosts and
+ * the runtime's tag (`card-contract.ts`).
+ * Each host is a `<certrev-card>` with a declarative shadow root (`<template shadowrootmode="open">`), which the
+ * browser's HTML parser attaches as it reads the server's page: the card is complete with JavaScript off, and no page
+ * rule reaches inside it. React never reconciles the hosts (they are not React children), so the hosted runtime may
+ * remove a revoked placement's hosts without React noticing.
+ *
+ * What the parser does not do, the card does once it has mounted (`useCardRoots`):
+ *  - ATTACH ROOTS the parser never saw. A card React inserts (an in-app navigation, Builder's editor, React's own
+ *    re-render after a hydration error) gets its HTML through `innerHTML`, which leaves a declarative template inert.
+ *    The wrapper is re-parsed with `setHTMLUnsafe`, which attaches declarative roots; a browser without it (or without
+ *    declarative shadow DOM at all) gets each root attached from its template (`attachShadow` with the template's mode
+ *    and options, then the template's content). A host that already has its root is left alone, so a hydrated card,
+ *    whose roots the parser attached, is not touched.
+ *  - LOAD THE RUNTIME a React-inserted `<script>` never runs: once per page, into `document.head`, with its SRI
+ *    integrity and `crossorigin="anonymous"`, unless the runtime is already running (its global guard) or already
+ *    injected. Only the block that prints the runtime's tag loads it (`cardCarriesAssets`). The server's HTML carries
+ *    the same tag in that block's wrapper, which the parser runs; the runtime's init is idempotent, so it starts once.
+ * Both run in a layout effect, before the browser paints the inserted card, so a client-mounted card never shows an
+ * empty frame.
+ *
+ * ONE BUILDER RULE, for the sidebar card only. The card's rail is a right float that the article's copy flows around
+ * (the Appearance preview's layout, and every other CMS's). On a Builder page the block sits in Builder's own wrapper,
+ * a flex item of the flex column that holds the entry's blocks, and a flex item contains its floats: the block spans
+ * the column at the rail's height and no copy sits beside it. `BUILDER_CARD_FLOW_CSS` lets the float out of Builder's
+ * wrappers, as 1.2.0-canary.6 did for the reader face: in a column that holds a printed rail, above the card's own
+ * 820px breakpoint (below it the rail stacks as a block), the column lays its blocks out as blocks and still contains
+ * the float, and the rail's block and the card wrapper become plain blocks. It reaches nothing inside the card (the
+ * shadow root is out of its reach) and nothing on a page without a rail, or in a browser without `:has()`.
+ */
+import * as React from 'react';
+import { cardCarriesAssets, cardHtml } from './card-contract.js';
+import { SEED_ATTRIBUTE } from './ssr-seed.js';
+/** The global the hosted runtime sets once it has started (`Symbol.for('certrev.card-runtime')` on `document`). */
+const RUNTIME_GUARD = Symbol.for('certrev.card-runtime');
+/** Marks the runtime tag this package injected into `document.head`. */
+const INJECTED_RUNTIME_ATTRIBUTE = 'data-certrev-card-runtime';
+/** A layout effect in a browser; nothing on a server (where React would only warn about it). */
+const useBrowserLayoutEffect = typeof document === 'undefined' ? () => { } : React.useLayoutEffect;
+/** Whether this host still holds an unattached declarative root. */
+function pendingTemplate(host) {
+    if (host.shadowRoot)
+        return null;
+    for (const child of Array.from(host.children)) {
+        if (child instanceof HTMLTemplateElement && child.hasAttribute('shadowrootmode'))
+            return child;
+    }
+    return null;
+}
+/** Attach one host's root from its template, as the parser would have: its mode, its options, its content. */
+function attachFromTemplate(host, template) {
+    const mode = template.getAttribute('shadowrootmode') === 'closed' ? 'closed' : 'open';
+    const init = {
+        mode,
+        delegatesFocus: template.hasAttribute('shadowrootdelegatesfocus'),
+        ...(template.hasAttribute('shadowrootclonable') ? { clonable: true } : {}),
+        ...(template.hasAttribute('shadowrootserializable') ? { serializable: true } : {}),
+    };
+    const root = host.attachShadow(init);
+    root.appendChild(template.content);
+    template.remove();
+}
+/**
+ * Give every host in `wrapper` its declarative root: a no-op where the parser attached them all; else the wrapper is
+ * re-parsed from `html` with `setHTMLUnsafe` where the browser has it, or each pending root is attached from its
+ * template. Returns how many hosts were pending (for tests and the replica's evidence).
+ */
+export function attachCardRoots(wrapper, html) {
+    const pending = Array.from(wrapper.querySelectorAll('certrev-card')).filter((host) => pendingTemplate(host) !== null);
+    if (pending.length === 0)
+        return 0;
+    const parse = wrapper.setHTMLUnsafe;
+    if (typeof parse === 'function') {
+        parse.call(wrapper, html);
+        // A browser whose setHTMLUnsafe predates declarative roots leaves templates behind: attach those by hand.
+        for (const host of Array.from(wrapper.querySelectorAll('certrev-card'))) {
+            const template = pendingTemplate(host);
+            if (template)
+                attachFromTemplate(host, template);
+        }
+        return pending.length;
+    }
+    for (const host of pending) {
+        const template = pendingTemplate(host);
+        if (template)
+            attachFromTemplate(host, template);
+    }
+    return pending.length;
+}
+/** Load the document's runtime once per page: unless it already runs, or this package already injected it. */
+export function injectCardRuntime(card) {
+    const runtime = card.assets.runtime;
+    if (!runtime || typeof document === 'undefined' || !document.head)
+        return;
+    if (document[RUNTIME_GUARD])
+        return;
+    for (const script of Array.from(document.head.querySelectorAll(`script[${INJECTED_RUNTIME_ATTRIBUTE}]`))) {
+        if (script.getAttribute('src') === runtime.src)
+            return;
+    }
+    const script = document.createElement('script');
+    // Attributes, not IDL properties: the markup is then exactly the server's tag, wherever a property is not reflected.
+    script.setAttribute('src', runtime.src);
+    script.setAttribute('integrity', runtime.integrity);
+    script.setAttribute('crossorigin', 'anonymous');
+    script.defer = true;
+    script.setAttribute(INJECTED_RUNTIME_ATTRIBUTE, '');
+    document.head.appendChild(script);
+}
+/** Builder's wrappers around a printed rail let its float out (the header comment). */
+export const BUILDER_CARD_FLOW_CSS = '@media not all and (max-width: 820px){' +
+    '.builder-blocks:has(> .builder-block > [data-certrev-face="card"] > certrev-card[data-certrev-part="rail"]){display:flow-root !important}' +
+    '.builder-blocks > .builder-block:has(> [data-certrev-face="card"] > certrev-card[data-certrev-part="rail"]){display:block !important}' +
+    '.builder-blocks > .builder-block > [data-certrev-face="card"]:has(> certrev-card[data-certrev-part="rail"]){display:block !important}' +
+    '}';
+export function ContractCardFace(props) {
+    const ref = React.useRef(null);
+    const html = cardHtml(props.card, props.names);
+    const { card } = props;
+    const carriesAssets = cardCarriesAssets(card, props.names);
+    useBrowserLayoutEffect(() => {
+        const wrapper = ref.current;
+        if (!wrapper)
+            return;
+        attachCardRoots(wrapper, html);
+        if (carriesAssets)
+            injectCardRuntime(card);
+    }, [html, card, carriesAssets]);
+    const wrapper = (_jsx("div", { ref: ref, "data-certrev-cert-chrome": "", "data-certrev-delivery": "", "data-certrev-face": "card", "data-certrev-contract": String(props.card.contract), "data-certrev-def-version": props.card.defVersion, [SEED_ATTRIBUTE]: props.seed, 
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: CertREV's card document, printed only after it hashes to the digest the verified envelope signs
+        dangerouslySetInnerHTML: { __html: html } }));
+    if (!props.names.includes('rail'))
+        return wrapper;
+    return (_jsxs(_Fragment, { children: [wrapper, _jsx("style", { "data-certrev-builder-flow": "", dangerouslySetInnerHTML: { __html: BUILDER_CARD_FLOW_CSS } })] }));
+}
+//# sourceMappingURL=contract-card.js.map

package/dist/builder/contract-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-card.js","sourceRoot":"","sources":["../../src/builder/contract-card.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,EAA0C,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,mHAAmH;AACnH,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;AACxD,wEAAwE;AACxE,MAAM,0BAA0B,GAAG,2BAA2B,CAAA;AAE9D,gGAAgG;AAChG,MAAM,sBAAsB,GAAG,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAA;AAEjG,oEAAoE;AACpE,SAAS,eAAe,CAAC,IAAa;IACrC,IAAK,IAAoB,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IACjD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAA;IAC/F,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,8GAA8G;AAC9G,SAAS,kBAAkB,CAAC,IAAiB,EAAE,QAA6B;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;IACrF,MAAM,IAAI,GAAoE;QAC7E,IAAI;QACJ,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,0BAA0B,CAAC;QACjE,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClF,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB,EAAE,IAAY;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAA;IACrH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAClC,MAAM,KAAK,GAAI,OAAgE,CAAC,aAAa,CAAA;IAC7F,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACzB,0GAA0G;QAC1G,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,QAAQ;gBAAE,kBAAkB,CAAC,IAAmB,EAAE,QAAQ,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAA;IACtB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,QAAQ;YAAE,kBAAkB,CAAC,IAAmB,EAAE,QAAQ,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAA;AACtB,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAM;IACzE,IAAK,QAA+C,CAAC,aAAa,CAAC;QAAE,OAAM;IAC3E,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,0BAA0B,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1G,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,GAAG;YAAE,OAAM;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/C,qHAAqH;IACrH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACnD,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;IACnB,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAA;IACnD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;AAClC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GACjC,wCAAwC;IACxC,2IAA2I;IAC3I,uIAAuI;IACvI,uIAAuI;IACvI,GAAG,CAAA;AAEJ,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAiB,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;IACtB,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1D,sBAAsB,CAAC,GAAG,EAAE;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC9B,IAAI,aAAa;YAAE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IAC3C,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAA;IAC/B,MAAM,OAAO,GAAG,CACf,cACC,GAAG,EAAE,GAAG,8BACiB,EAAE,2BACL,EAAE,uBACN,MAAM,2BACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,8BACxB,KAAK,CAAC,IAAI,CAAC,UAAU,EACzC,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,IAAI;QAClC,wJAAwJ;QACxJ,uBAAuB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GACxC,CACF,CAAA;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAA;IACjD,OAAO,CACN,8BACE,OAAO,EAER,6CAAiC,EAAE,EAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAI,IAChG,CACH,CAAA;AACF,CAAC"}

package/dist/builder/delivered-face.d.ts

@@ -0,0 +1,83 @@
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * The delivered face gate: when the Builder card may paint the server's markup (1.3.0)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * The Delivery API may serve a server-rendered face (`face: { html, css }`) beside the signed artifact. That sibling
+ * is UNSIGNED. What binds it is the signed `payload.content.faceDigest` (cert-contract 0.6.0): the lowercase hex sha256
+ * of the markup's and the stylesheet's UTF-8 bytes, for one saved design version. The card paints the delivered face
+ * only when ALL of these hold:
+ *
+ *  - the verdict is `render` (the caller has already checked that);
+ *  - the card is not pinned (a design pin keeps 1.2.1's pinned face; the caller checks that);
+ *  - the block shows the whole card: `part` is not `'header'` or `'memo'`, so a split banner never paints the face
+ *    twice (`showsWholeCard`);
+ *  - the verified content carries a digest it understands (`v: 1`, two 64-char lowercase hex digests, a numeric
+ *    `defVersion`);
+ *  - a well-formed face was served;
+ *  - a def was served and its `v` IS the digest's `defVersion` (markup rendered for another design version is not
+ *    this design);
+ *  - sha256(html) and sha256(css) equal the signed values.
+ *
+ * In every other case the card paints exactly what 1.2.1 paints. Markup whose bytes do not hash to the signed digest
+ * is never painted, and a WebCrypto failure counts as a mismatch, never as a pass.
+ *
+ * Hashing uses WebCrypto (`crypto.subtle.digest`), the global the kernel verifies with, so it runs wherever the card
+ * already verifies (Node SSR, edge runtimes, a browser in a secure context). It is react-free; the card owns the
+ * suspension around the async digest.
+ */
+import type { CertContent, CertFaceDigest } from '../contract/kernel.js';
+import type { DeliveredFace } from '../verify/get-verified-delivery.js';
+import type { CertChromeRenderDef } from './cert-chrome-data.js';
+/**
+ * Whether a block shows the whole card, by `renderCertBlock`'s own rule: only `'header'` and `'memo'` split the
+ * banner; absent, `'full'`, null or anything unrecognised is the full card. A split block keeps its own part even
+ * when a delivered face matches, because the delivered face is a whole design.
+ */
+export declare function showsWholeCard(part: unknown): boolean;
+/** The signed digest, accepted only in the shape cert-contract 0.6.0 defines; anything else is null. */
+export declare function acceptedFaceDigest(content: CertContent | null | undefined): CertFaceDigest | null;
+/**
+ * The synchronous half of the gate: the digest to hash the face against, or null when the delivered face cannot
+ * paint whatever its bytes are (no digest, no face, no def, or a def of another version). The card hashes only when
+ * this is non-null, so a delivery without a face never suspends a second time.
+ */
+export declare function deliveredFaceDigest(content: CertContent | null | undefined, renderDef: CertChromeRenderDef | null, face: DeliveredFace | null | undefined): CertFaceDigest | null;
+/** Lowercase hex sha256 of a string's UTF-8 bytes, via WebCrypto. */
+export declare function sha256HexUtf8(text: string): Promise<string>;
+/** The two digests of a delivered face. */
+export interface DeliveredFaceHashes {
+    readonly html: string;
+    readonly css: string;
+}
+/** Hash both halves. Never rejects: a WebCrypto failure (none in an insecure context) is null, which never matches. */
+export declare function hashDeliveredFace(face: DeliveredFace): Promise<DeliveredFaceHashes | null>;
+/** The asynchronous half's verdict: both halves hash to the signed values. */
+export declare function deliveredFaceMatches(hashes: DeliveredFaceHashes | null, digest: CertFaceDigest): boolean;
+/** The markup the card paints for a matching face: the stylesheet first, then the face. */
+export declare function deliveredFaceHtml(face: DeliveredFace): string;
+/**
+ * Make room in a memo of pending-then-settled work: drop the oldest SETTLED entry once the memo is full, never a pending
+ * one. A render suspends on a pending entry and, when React retries it, must find that entry again; evicting it would make
+ * every retry start (and suspend on) a new one, so a page with more documents than the memo holds would never finish
+ * (break-it B1). With nothing settled to drop, the memo grows past its bound until entries settle.
+ */
+export declare function evictOldestSettled<V extends {
+    settled?: unknown;
+}>(memo: Map<string, V>, max: number): void;
+/** One face's hashing: the pending digest, and its answer once settled. */
+export interface FaceHashMemo {
+    readonly pending: Promise<DeliveredFaceHashes | null>;
+    settled?: {
+        readonly hashes: DeliveredFaceHashes | null;
+    };
+}
+/**
+ * The memoized hashing of one face, keyed by its CONTENT (both strings), not by the object: the browser parses a seed
+ * from the page afresh on each render, and a server's cached read and a seed of the same face share one entry. A
+ * failure settles to null and stays settled (a context with no WebCrypto does not gain one).
+ */
+export declare function faceHashesFor(face: DeliveredFace): FaceHashMemo;
+/** Test seam: forget every face's hashes (a new process). */
+export declare function forgetFaceHashesForTests(): void;
+//# sourceMappingURL=delivered-face.d.ts.map

package/dist/builder/delivered-face.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivered-face.d.ts","sourceRoot":"","sources":["../../src/builder/delivered-face.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAIhE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAErD;AAED,wGAAwG;AACxG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,GAAG,cAAc,GAAG,IAAI,CAQjG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EACvC,SAAS,EAAE,mBAAmB,GAAG,IAAI,EACrC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GACpC,cAAc,GAAG,IAAI,CAKvB;AAED,qEAAqE;AACrE,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKjE;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACpB;AAED,uHAAuH;AACvH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAOhG;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAExG;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAQ3G;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;IACrD,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAA;KAAE,CAAA;CACzD;AAMD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,YAAY,CAc/D;AAED,6DAA6D;AAC7D,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C"}

package/dist/builder/delivered-face.js

@@ -0,0 +1,135 @@
+/**
+ * ─────────────────────────────────────────────────────────────────────────────
+ * The delivered face gate: when the Builder card may paint the server's markup (1.3.0)
+ * ─────────────────────────────────────────────────────────────────────────────
+ *
+ * The Delivery API may serve a server-rendered face (`face: { html, css }`) beside the signed artifact. That sibling
+ * is UNSIGNED. What binds it is the signed `payload.content.faceDigest` (cert-contract 0.6.0): the lowercase hex sha256
+ * of the markup's and the stylesheet's UTF-8 bytes, for one saved design version. The card paints the delivered face
+ * only when ALL of these hold:
+ *
+ *  - the verdict is `render` (the caller has already checked that);
+ *  - the card is not pinned (a design pin keeps 1.2.1's pinned face; the caller checks that);
+ *  - the block shows the whole card: `part` is not `'header'` or `'memo'`, so a split banner never paints the face
+ *    twice (`showsWholeCard`);
+ *  - the verified content carries a digest it understands (`v: 1`, two 64-char lowercase hex digests, a numeric
+ *    `defVersion`);
+ *  - a well-formed face was served;
+ *  - a def was served and its `v` IS the digest's `defVersion` (markup rendered for another design version is not
+ *    this design);
+ *  - sha256(html) and sha256(css) equal the signed values.
+ *
+ * In every other case the card paints exactly what 1.2.1 paints. Markup whose bytes do not hash to the signed digest
+ * is never painted, and a WebCrypto failure counts as a mismatch, never as a pass.
+ *
+ * Hashing uses WebCrypto (`crypto.subtle.digest`), the global the kernel verifies with, so it runs wherever the card
+ * already verifies (Node SSR, edge runtimes, a browser in a secure context). It is react-free; the card owns the
+ * suspension around the async digest.
+ */
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+/**
+ * Whether a block shows the whole card, by `renderCertBlock`'s own rule: only `'header'` and `'memo'` split the
+ * banner; absent, `'full'`, null or anything unrecognised is the full card. A split block keeps its own part even
+ * when a delivered face matches, because the delivered face is a whole design.
+ */
+export function showsWholeCard(part) {
+    return part !== 'header' && part !== 'memo';
+}
+/** The signed digest, accepted only in the shape cert-contract 0.6.0 defines; anything else is null. */
+export function acceptedFaceDigest(content) {
+    const digest = content?.faceDigest;
+    if (typeof digest !== 'object' || digest === null || Array.isArray(digest))
+        return null;
+    const { v, defVersion, html, css } = digest;
+    if (v !== 1 || typeof defVersion !== 'number' || !Number.isFinite(defVersion))
+        return null;
+    if (typeof html !== 'string' || !SHA256_HEX.test(html))
+        return null;
+    if (typeof css !== 'string' || !SHA256_HEX.test(css))
+        return null;
+    return { v: 1, defVersion, html, css };
+}
+/**
+ * The synchronous half of the gate: the digest to hash the face against, or null when the delivered face cannot
+ * paint whatever its bytes are (no digest, no face, no def, or a def of another version). The card hashes only when
+ * this is non-null, so a delivery without a face never suspends a second time.
+ */
+export function deliveredFaceDigest(content, renderDef, face) {
+    if (!face)
+        return null;
+    const digest = acceptedFaceDigest(content);
+    if (!digest || !renderDef || renderDef.v !== digest.defVersion)
+        return null;
+    return digest;
+}
+/** Lowercase hex sha256 of a string's UTF-8 bytes, via WebCrypto. */
+export async function sha256HexUtf8(text) {
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(text)));
+    let hex = '';
+    for (const byte of digest)
+        hex += byte.toString(16).padStart(2, '0');
+    return hex;
+}
+/** Hash both halves. Never rejects: a WebCrypto failure (none in an insecure context) is null, which never matches. */
+export async function hashDeliveredFace(face) {
+    try {
+        const [html, css] = await Promise.all([sha256HexUtf8(face.html), sha256HexUtf8(face.css)]);
+        return { html, css };
+    }
+    catch {
+        return null;
+    }
+}
+/** The asynchronous half's verdict: both halves hash to the signed values. */
+export function deliveredFaceMatches(hashes, digest) {
+    return hashes !== null && hashes.html === digest.html && hashes.css === digest.css;
+}
+/** The markup the card paints for a matching face: the stylesheet first, then the face. */
+export function deliveredFaceHtml(face) {
+    return `<style>${face.css}</style>${face.html}`;
+}
+/**
+ * Make room in a memo of pending-then-settled work: drop the oldest SETTLED entry once the memo is full, never a pending
+ * one. A render suspends on a pending entry and, when React retries it, must find that entry again; evicting it would make
+ * every retry start (and suspend on) a new one, so a page with more documents than the memo holds would never finish
+ * (break-it B1). With nothing settled to drop, the memo grows past its bound until entries settle.
+ */
+export function evictOldestSettled(memo, max) {
+    if (memo.size < max)
+        return;
+    for (const [key, entry] of memo) {
+        if (entry.settled !== undefined) {
+            memo.delete(key);
+            return;
+        }
+    }
+}
+/** How many faces' hashes are kept (insertion order; the oldest goes first). A page or a brand has one or a few. */
+const FACE_HASH_MEMO_MAX = 64;
+const faceHashMemo = new Map();
+/**
+ * The memoized hashing of one face, keyed by its CONTENT (both strings), not by the object: the browser parses a seed
+ * from the page afresh on each render, and a server's cached read and a seed of the same face share one entry. A
+ * failure settles to null and stays settled (a context with no WebCrypto does not gain one).
+ */
+export function faceHashesFor(face) {
+    const key = `${face.html.length}:${face.html}${face.css}`;
+    const known = faceHashMemo.get(key);
+    if (known)
+        return known;
+    const fresh = {
+        pending: hashDeliveredFace(face).then((hashes) => {
+            fresh.settled = { hashes };
+            return hashes;
+        }),
+    };
+    // 2.0.0: never a pending entry (break-it B1: more faces than the memo holds made every retry suspend again).
+    evictOldestSettled(faceHashMemo, FACE_HASH_MEMO_MAX);
+    faceHashMemo.set(key, fresh);
+    return fresh;
+}
+/** Test seam: forget every face's hashes (a new process). */
+export function forgetFaceHashesForTests() {
+    faceHashMemo.clear();
+}
+//# sourceMappingURL=delivered-face.js.map

package/dist/builder/delivered-face.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivered-face.js","sourceRoot":"","sources":["../../src/builder/delivered-face.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,MAAM,UAAU,GAAG,gBAAgB,CAAA;AAEnC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC3C,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,CAAA;AAC5C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,OAAuC;IACzE,MAAM,MAAM,GAAa,OAAuD,EAAE,UAAU,CAAA;IAC5F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACvF,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAiC,CAAA;IACtE,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACnE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,OAAuC,EACvC,SAAqC,EACrC,IAAsC;IAEtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC3E,OAAO,MAAM,CAAA;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpG,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACpE,OAAO,GAAG,CAAA;AACX,CAAC;AAQD,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB;IAC1D,IAAI,CAAC;QACJ,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1F,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,MAAkC,EAAE,MAAsB;IAC9F,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAA;AACnF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACpD,OAAO,UAAU,IAAI,CAAC,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAkC,IAAoB,EAAE,GAAW;IACpG,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;QAAE,OAAM;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChB,OAAM;QACP,CAAC;IACF,CAAC;AACF,CAAC;AAQD,oHAAoH;AACpH,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwB,CAAA;AAEpD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAChD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,KAAK,GAAiB;QAC3B,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAChD,KAAK,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,CAAA;YAC1B,OAAO,MAAM,CAAA;QACd,CAAC,CAAC;KACF,CAAA;IACD,6GAA6G;IAC7G,kBAAkB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAA;IACpD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5B,OAAO,KAAK,CAAA;AACb,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,wBAAwB;IACvC,YAAY,CAAC,KAAK,EAAE,CAAA;AACrB,CAAC"}

package/dist/builder/delivery-runtime.d.ts

@@ -13,6 +13,11 @@
  * read on a brand's server then misses at most once per placement, and a warm one never waits.
  * A revocation still lands on the first render after its refresh does. The tests' runtime gets
  * the same cache shape, so they exercise what production runs.
+ *
+ * 2.0.0: the trust root is a key SET (`verify/key-set.ts`). `resolveKid` is still the baked set (today
+ * `cert-issuer-1`), and the card verifies with `resolveKidFor(baseUrl)`: a baked kid resolves as before, any other kid
+ * makes one read of the delivery origin's published key set, accepted only when a baked kid signs it. A rotation then
+ * needs no reinstall. The card's (2.0) contract-1 document digests are memoized with the delivered faces' hashes.
  */
 import type { ResolvePublicKeyByKid } from '../contract/kernel.js';
 import { TtlCache } from '../verify/cache.js';
@@ -22,16 +27,25 @@ export declare const CARD_DELIVERY_TIMEOUT_MS = 8000;
 /** How long past its 60s TTL a certificate may still paint while it is refreshed or CertREV is down. */
 export declare const CARD_DELIVERY_STALE_MS = 300000;
 export interface CardDeliveryRuntime {
+    /** The baked kids: the package's own trust root (and the only keys that may sign a published key set). */
     readonly resolveKid: ResolvePublicKeyByKid;
+    /**
+     * 2.0.0: what the card verifies a read from `baseUrl` with: the baked kids, then that origin's signed published set.
+     * Absent: derived from `resolveKid`, `fetchImpl` and `timeoutMs` (`keySetResolver`).
+     */
+    readonly resolveKidFor?: (baseUrl: string) => ResolvePublicKeyByKid;
     readonly fetchImpl: () => typeof fetch;
     readonly cache: TtlCache<CachedDelivery>;
     readonly now: () => number;
     readonly timeoutMs?: number;
 }
 export declare function cardDeliveryRuntime(): CardDeliveryRuntime;
+/** 2.0.0: the resolver for a read from `baseUrl`: the runtime's own, else the baked kids plus the origin's key set. */
+export declare function cardResolveKidFor(rt: CardDeliveryRuntime, baseUrl: string): ResolvePublicKeyByKid;
 /**
  * Test seam: replace parts of the runtime (a fresh cache unless one is given) and forget the page's envelope seeds
- * (a fresh runtime is a fresh page). Returns a restore.
+ * (a fresh runtime is a fresh page), (1.3.0) every delivered face's memoized hashes and (2.0.0) every card
+ * document's digest and every published key set. Returns a restore.
  */
 export declare function setCardDeliveryRuntimeForTests(overrides: Partial<CardDeliveryRuntime>): () => void;
 //# sourceMappingURL=delivery-runtime.d.ts.map

package/dist/builder/delivery-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-runtime.d.ts","sourceRoot":"","sources":["../../src/builder/delivery-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAIxE,iGAAiG;AACjG,eAAO,MAAM,wBAAwB,OAAQ,CAAA;AAC7C,wGAAwG;AACxG,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAA;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,KAAK,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AA6BD,wBAAgB,mBAAmB,IAAI,mBAAmB,CAEzD;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAYlG"}
+{"version":3,"file":"delivery-runtime.d.ts","sourceRoot":"","sources":["../../src/builder/delivery-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAQxE,iGAAiG;AACjG,eAAO,MAAM,wBAAwB,OAAQ,CAAA;AAC7C,wGAAwG;AACxG,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C,MAAM,WAAW,mBAAmB;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAA;IAC1C;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,qBAAqB,CAAA;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,KAAK,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AA6BD,wBAAgB,mBAAmB,IAAI,mBAAmB,CAEzD;AAED,uHAAuH;AACvH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,qBAAqB,CAQjG;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,IAAI,CAgBlG"}

package/dist/builder/delivery-runtime.js

@@ -13,8 +13,17 @@
  * read on a brand's server then misses at most once per placement, and a warm one never waits.
  * A revocation still lands on the first render after its refresh does. The tests' runtime gets
  * the same cache shape, so they exercise what production runs.
+ *
+ * 2.0.0: the trust root is a key SET (`verify/key-set.ts`). `resolveKid` is still the baked set (today
+ * `cert-issuer-1`), and the card verifies with `resolveKidFor(baseUrl)`: a baked kid resolves as before, any other kid
+ * makes one read of the delivery origin's published key set, accepted only when a baked kid signs it. A rotation then
+ * needs no reinstall. The card's (2.0) contract-1 document digests are memoized with the delivered faces' hashes.
  */
 import { TtlCache } from '../verify/cache.js';
+import { forgetKeySetsForTests, keySetResolver } from '../verify/key-set.js';
+import { forgetCardDigestsForTests } from './card-contract.js';
+import { forgetCardReportsForTests } from './card-report.js';
+import { forgetFaceHashesForTests } from './delivered-face.js';
 import { CERT_ISSUER_KID, CERT_ISSUER_PUBLIC_KEY_PEM } from './issuer-key.js';
 import { forgetPageSeedsForTests } from './ssr-seed.js';
 /** The card's server read deadline. A brand's server waits this long once per cold placement. */
@@ -46,12 +55,28 @@ let runtime = defaultRuntime();
 export function cardDeliveryRuntime() {
     return runtime;
 }
+/** 2.0.0: the resolver for a read from `baseUrl`: the runtime's own, else the baked kids plus the origin's key set. */
+export function cardResolveKidFor(rt, baseUrl) {
+    if (rt.resolveKidFor)
+        return rt.resolveKidFor(baseUrl);
+    return keySetResolver({
+        baseUrl,
+        bakedResolveKid: rt.resolveKid,
+        fetchImpl: rt.fetchImpl(),
+        ...(rt.timeoutMs !== undefined ? { timeoutMs: rt.timeoutMs } : {}),
+    });
+}
 /**
  * Test seam: replace parts of the runtime (a fresh cache unless one is given) and forget the page's envelope seeds
- * (a fresh runtime is a fresh page). Returns a restore.
+ * (a fresh runtime is a fresh page), (1.3.0) every delivered face's memoized hashes and (2.0.0) every card
+ * document's digest and every published key set. Returns a restore.
  */
 export function setCardDeliveryRuntimeForTests(overrides) {
     forgetPageSeedsForTests();
+    forgetFaceHashesForTests();
+    forgetCardDigestsForTests();
+    forgetKeySetsForTests();
+    forgetCardReportsForTests();
     const previous = runtime;
     const now = overrides.now ?? previous.now;
     runtime = {

package/dist/builder/delivery-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-runtime.js","sourceRoot":"","sources":["../../src/builder/delivery-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,iGAAiG;AACjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAC7C,wGAAwG;AACxG,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAU7C,MAAM,eAAe,GAA0B,CAAC,GAAG,EAAE,EAAE,CACtD,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpF,SAAS,YAAY,CAAC,GAAkB;IACvC,OAAO,IAAI,QAAQ,CAAiB;QACnC,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE,sBAAsB;QAC/B,wFAAwF;QACxF,+EAA+E;QAC/E,aAAa,EAAE,wBAAwB,GAAG,KAAK;QAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,cAAc;IACtB,OAAO;QACN,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK;QACjC,KAAK,EAAE,YAAY,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,wBAAwB;KACnC,CAAA;AACF,CAAC;AAED,IAAI,OAAO,GAAwB,cAAc,EAAE,CAAA;AAEnD,MAAM,UAAU,mBAAmB;IAClC,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAuC;IACrF,uBAAuB,EAAE,CAAA;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAA;IACxB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAA;IACzC,OAAO,GAAG;QACT,GAAG,QAAQ;QACX,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;QACxB,GAAG,SAAS;KACZ,CAAA;IACD,OAAO,GAAG,EAAE;QACX,OAAO,GAAG,QAAQ,CAAA;IACnB,CAAC,CAAA;AACF,CAAC"}
+{"version":3,"file":"delivery-runtime.js","sourceRoot":"","sources":["../../src/builder/delivery-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,iGAAiG;AACjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAA;AAC7C,wGAAwG;AACxG,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAgB7C,MAAM,eAAe,GAA0B,CAAC,GAAG,EAAE,EAAE,CACtD,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpF,SAAS,YAAY,CAAC,GAAkB;IACvC,OAAO,IAAI,QAAQ,CAAiB;QACnC,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE,sBAAsB;QAC/B,wFAAwF;QACxF,+EAA+E;QAC/E,aAAa,EAAE,wBAAwB,GAAG,KAAK;QAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvB,CAAC,CAAA;AACH,CAAC;AAED,SAAS,cAAc;IACtB,OAAO;QACN,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK;QACjC,KAAK,EAAE,YAAY,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,wBAAwB;KACnC,CAAA;AACF,CAAC;AAED,IAAI,OAAO,GAAwB,cAAc,EAAE,CAAA;AAEnD,MAAM,UAAU,mBAAmB;IAClC,OAAO,OAAO,CAAA;AACf,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,iBAAiB,CAAC,EAAuB,EAAE,OAAe;IACzE,IAAI,EAAE,CAAC,aAAa;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACtD,OAAO,cAAc,CAAC;QACrB,OAAO;QACP,eAAe,EAAE,EAAE,CAAC,UAAU;QAC9B,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE;QACzB,GAAG,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAuC;IACrF,uBAAuB,EAAE,CAAA;IACzB,wBAAwB,EAAE,CAAA;IAC1B,yBAAyB,EAAE,CAAA;IAC3B,qBAAqB,EAAE,CAAA;IACvB,yBAAyB,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAA;IACxB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAA;IACzC,OAAO,GAAG;QACT,GAAG,QAAQ;QACX,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;QACxB,GAAG,SAAS;KACZ,CAAA;IACD,OAAO,GAAG,EAAE;QACX,OAAO,GAAG,QAAQ,CAAA;IACnB,CAAC,CAAA;AACF,CAAC"}

package/dist/builder/index.d.ts

@@ -27,7 +27,10 @@
  * for the entry it renders inside (`builderContext.content.id`) from the CertREV Delivery API on
  * `baseUrl` (an https certrev.com origin, nothing else), verifies it against the baked
  * `cert-issuer-1` key, re-judges revocation and expiry at every render, and paints the brand's
- * render def served beside it. A revoked, expired, unverifiable or unreachable cert, a marker that
+ * render def served beside it. 1.3.0: when the Delivery API also serves a server-rendered face
+ * (`face: { html, css }`, unsigned) and the verified envelope signs that face's sha256 digests for the
+ * def version served (`content.faceDigest`), an unpinned whole-card block paints that face instead;
+ * markup that does not hash to the signed digest is never painted. A revoked, expired, unverifiable or unreachable cert, a marker that
  * is not exactly that shape, or a missing entry id renders nothing. A block WITHOUT the marker
  * (every entry exported before 1.1.0) renders from its options exactly as 1.0.3 did, so the
  * paragraph above still describes it: an editor who deletes the marker gets the options face back,
@@ -101,7 +104,10 @@ export interface CertRevBuilderRegistration {
  */
 export declare const certRevAnchorComponent: CertRevBuilderRegistration;
 export { type DesignPin, designPinFromUrl, parseDesignPin } from '../verify/get-verified-delivery.js';
+export { acceptedCardBinding, type CardBinding, type CardDocumentV1, type CardPartName, cardDocumentDigest, cardPartsFor, parseCardDocument, } from './card-contract.js';
+export { CARD_FALLBACK_EVENT, type CardFallbackDetail, type CardFallbackReason } from './card-report.js';
 export { BUILDER_CERT_CHROME_KEYS, type BuilderCertChromeData, type BuilderCertChromeKey, type CertChromeRenderDef, type CertDeliveryMarker, } from './cert-chrome-data.js';
 export { acceptedDeliveryMarker, BUILDER_REGISTRATION, type BuilderInput, CERT_COMPONENT_NAME, type CertBlockBuilderRegistration, CertReviewCard, type CertReviewCardProps, type CertReviewCardRegisteredComponent, certRevCertComponent, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
+export { BUILDER_CARD_FLOW_CSS } from './contract-card.js';
 export { CERT_FACE_FIELDS, credentialLabel, type EnvelopeCardOptions, envelopeCardHtml, envelopeCardInput, faceFromDef, isReaderFaceDef, layoutFor, READER_FACE, themeFromDef, } from './envelope-face.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/builder/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA;AAGD,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAGrG,OAAO,EACN,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,iCAAiC,EACtC,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,GACZ,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAiB,KAAK,SAAS,EAAc,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAExD,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAC/B,OAAO,EACP,SAAiB,EACjB,QAAQ,GACR,EAAE;IACF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC5B,+BAEA;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,gCAiBvC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,uCAO5B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,OAAO,aAAa,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,EAAE,CAAA;CACf;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,0BAIpC,CAAA;AAGD,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAGrG,OAAO,EACN,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,GACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAExG,OAAO,EACN,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,YAAY,EACjB,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,cAAc,EACd,KAAK,mBAAmB,EACxB,KAAK,iCAAiC,EACtC,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,GACZ,MAAM,oBAAoB,CAAA"}

package/dist/builder/index.js

@@ -28,7 +28,10 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * for the entry it renders inside (`builderContext.content.id`) from the CertREV Delivery API on
  * `baseUrl` (an https certrev.com origin, nothing else), verifies it against the baked
  * `cert-issuer-1` key, re-judges revocation and expiry at every render, and paints the brand's
- * render def served beside it. A revoked, expired, unverifiable or unreachable cert, a marker that
+ * render def served beside it. 1.3.0: when the Delivery API also serves a server-rendered face
+ * (`face: { html, css }`, unsigned) and the verified envelope signs that face's sha256 digests for the
+ * def version served (`content.faceDigest`), an unpinned whole-card block paints that face instead;
+ * markup that does not hash to the signed digest is never painted. A revoked, expired, unverifiable or unreachable cert, a marker that
  * is not exactly that shape, or a missing entry id renders nothing. A block WITHOUT the marker
  * (every entry exported before 1.1.0) renders from its options exactly as 1.0.3 did, so the
  * paragraph above still describes it: an editor who deletes the marker gets the options face back,
@@ -107,8 +110,12 @@ export const certRevAnchorComponent = {
 };
 // 1.2.0-canary.5: the design pin, for CertREV's own canary replica (`<Content context={{ certrevDesignPin }}>`).
 export { designPinFromUrl, parseDesignPin } from '../verify/get-verified-delivery.js';
+// 2.0.0: the contract-1 card (CertREV's server-rendered card document), its fallback report and the Builder flow rule.
+export { acceptedCardBinding, cardDocumentDigest, cardPartsFor, parseCardDocument, } from './card-contract.js';
+export { CARD_FALLBACK_EVENT } from './card-report.js';
 // ── The Builder.io PUSH kit (CertReviewCard) + the single-sourced wire type ──
 export { BUILDER_CERT_CHROME_KEYS, } from './cert-chrome-data.js';
 export { acceptedDeliveryMarker, BUILDER_REGISTRATION, CERT_COMPONENT_NAME, CertReviewCard, certRevCertComponent, PLACEMENT_INPUTS, WIRE_INPUTS, } from './cert-review-card.js';
+export { BUILDER_CARD_FLOW_CSS } from './contract-card.js';
 export { CERT_FACE_FIELDS, credentialLabel, envelopeCardHtml, envelopeCardInput, faceFromDef, isReaderFaceDef, layoutFor, READER_FACE, themeFromDef, } from './envelope-face.js';
 //# sourceMappingURL=index.js.map

package/dist/builder/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,iCAEe,8CAA0B,oJAErC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA;AAED,iHAAiH;AACjH,OAAO,EAAkB,gBAAgB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAErG,gFAAgF;AAChF,OAAO,EACN,wBAAwB,GAKxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EAEpB,mBAAmB,EAEnB,cAAc,EAGd,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,gBAAgB,EAChB,eAAe,EAEf,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,GACZ,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/builder/index.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAE,aAAa,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAexD,MAAM,cAAc,GAAG,aAAa,CAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAC/B,OAAO,EACP,SAAS,GAAG,KAAK,EACjB,QAAQ,GAKR;IACA,OAAO,KAAC,cAAc,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAG,QAAQ,GAA2B,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,CACN,kDACiC,EAAE,EAClC,KAAK,EAAE;YACN,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,SAAS;SACrB,iCAEe,8CAA0B,oJAErC,CACN,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACzD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,KAAC,UAAU,IAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,SAAG,CAAA;IACrF,CAAC;IACD,IAAI,SAAS;QAAE,OAAO,KAAC,wBAAwB,KAAG,CAAA;IAClD,OAAO,IAAI,CAAA;AACZ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA+B;IACjE,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE;CACV,CAAA;AAED,iHAAiH;AACjH,OAAO,EAAkB,gBAAgB,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAErG,uHAAuH;AACvH,OAAO,EACN,mBAAmB,EAInB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,GACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,mBAAmB,EAAoD,MAAM,kBAAkB,CAAA;AACxG,gFAAgF;AAChF,OAAO,EACN,wBAAwB,GAKxB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EAEpB,mBAAmB,EAEnB,cAAc,EAGd,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GACX,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EACN,gBAAgB,EAChB,eAAe,EAEf,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,GACZ,MAAM,oBAAoB,CAAA"}

package/dist/builder/ssr-seed.d.ts

@@ -48,11 +48,29 @@
  * server withheld. A record holds no payload, so `parseSeed` never takes one for a seed. A `'none'` record sits on a
  * `hidden` element with nothing in it.
  *
+ * A DELIVERED FACE RIDES THE SEED (1.3.0), and only when the server painted it: the seed then ends with
+ * `face: { html, css }`, the server-rendered markup and stylesheet the Delivery API served beside the envelope, whose
+ * hashes the signed `payload.content.faceDigest` binds. A browser repaints that face from the seed only after hashing
+ * it against the seed payload's digest itself (`cert-review-card.tsx`); a seed with no `face`, a malformed one, or one
+ * whose hashes fail paints what 1.2.1 paints for it. A seed with no face is byte for byte the 1.2.1 seed. The face is
+ * on the page twice (painted, and in the seed), which is its page-weight cost.
+ *
+ * A CONTRACT-1 CARD RIDES THE SEED (2.0.0), and only when the server printed it: the seed then ends with `card`, the
+ * card document exactly as the Delivery API served it, whose RFC 8785 digest the signed `payload.content.faceDigest`
+ * binds (`contract: 1`, `doc`). The browser prints that card from the seed only after it has checked it against the
+ * seed payload's binding itself (`cert-review-card.tsx`), so a client re-render (React's recovery from a hydration
+ * error, a streamed record, a later mount of the same placement) prints the server's card with no read. A seed with no
+ * card is the 1.3.1 seed byte for byte. The card is on the page twice (printed, and in the seed), as 1.3.0's face is.
+ *
+ * A FALLBACK RECORD MAY NAME ITS REASON (2.0.0): where a contract-1 placement prints nothing, its `'none'` record ends
+ * with `reason` (`card_missing`, `card_verify_failed`, `card_unsupported_contract`, `card_pin_mismatch`), the same
+ * reason the card reports. Every other record is the 1.3.1 record byte for byte, and 1.3.1 ignores the key.
+ *
  * React-free and browser-only in effect: with no `document` (a server) `pageSeedFor` finds nothing, so a server never
  * reads or keeps a seed and a multi-tenant render process holds nothing per page.
  */
 import type { CertPayload, CertSignature } from '../contract/kernel.js';
-import { type DesignPin } from '../verify/get-verified-delivery.js';
+import { type DeliveredFace, type DesignPin } from '../verify/get-verified-delivery.js';
 import type { CertChromeRenderDef } from './cert-chrome-data.js';
 export declare const SEED_ATTRIBUTE = "data-certrev-envelope";
 export interface DeliverySeed {
@@ -68,6 +86,16 @@ export interface DeliverySeed {
      */
     readonly signature?: CertSignature;
     readonly renderDef: CertChromeRenderDef | null;
+    /**
+     * 1.3.0: the delivered face the server painted (the file header); absent whenever it painted anything else. On a
+     * seed read from the page it is UNVERIFIED until hashed against `payload.content.faceDigest`.
+     */
+    readonly face?: DeliveredFace;
+    /**
+     * 2.0.0: the contract-1 card document the server printed (the file header), exactly as served; absent whenever it
+     * printed anything else. On a seed read from the page it is UNVERIFIED until checked against the payload's binding.
+     */
+    readonly card?: Readonly<Record<string, unknown>>;
 }
 /** A seed as read from the page: the parsed seed and the attribute's exact text (re-rendered verbatim on hydration). */
 export interface PageSeed {
@@ -82,6 +110,8 @@ export interface DeliveryFallback {
     readonly externalId: string;
     readonly design?: DesignPin;
     readonly face: FallbackFace;
+    /** 2.0.0: why a contract-1 placement printed nothing; absent on every other record. */
+    readonly reason?: string;
 }
 /** A fallback record as read from the page, with the attribute's exact text. */
 export interface PageFallback {