@redsift/products 12.5.7 → 12.5.8-muiv8-alpha.1

package/_internal/SignalCardSpfDomain.js

@@ -404,6 +404,37 @@ var EXTRACTOR_STRINGS = {
     "card.bimi.vmc.issuer_md": "**Issuer: {issuer}**",
     "card.bimi.vmc.trademarkAuthority_md": "**Trademark Authority: {trademarkAuthority}**",
     "card.bimi.vmc.valid-for-domain_md": "**Valid for domains:** `{domains}`",
+    // BIMI VMC/CMC published-certificate metadata (WEB-1137 / DS-93)
+    // Validity
+    "card.bimi.vmc.cert-section-validity": "Validity",
+    "card.bimi.vmc.cert-valid-from_md": "**Start:** {date}",
+    "card.bimi.vmc.cert-expiry_md": "**Expiry:** {date}",
+    // Certificate
+    "card.bimi.vmc.cert-section-certificate": "Certificate",
+    "card.bimi.vmc.cert-issuer-common-name_md": "**Issuer:** {issuerCommonName}",
+    "card.bimi.vmc.cert-issuer-organization_md": "**Issuer organization:** {issuerOrganization}",
+    "card.bimi.vmc.cert-issuer-country_md": "**Issuer country:** {issuerCountry}",
+    "card.bimi.vmc.cert-type_md": "**Certificate type:** {assertionMarkType}",
+    "card.bimi.vmc.cert-certified-domains_md": "**Certified domains:** `{certifiedDomains}`",
+    // Subject identity
+    "card.bimi.vmc.cert-section-subject-identity": "Subject identity",
+    "card.bimi.vmc.cert-serial-number_md": "**Serial number:** {serialNumber}",
+    "card.bimi.vmc.cert-organization_md": "**Organization:** {organization}",
+    "card.bimi.vmc.cert-common-name_md": "**Common name:** {commonName}",
+    "card.bimi.vmc.cert-business-category_md": "**Business category:** {businessCategory}",
+    "card.bimi.vmc.cert-organization-identifier_md": "**Organization identifier:** {organizationIdentifier}",
+    "card.bimi.vmc.cert-legal-entity-identifier_md": "**Legal entity identifier:** {legalEntityIdentifier}",
+    "card.bimi.vmc.cert-jurisdiction_md": "**Jurisdiction:** {jurisdiction}",
+    "card.bimi.vmc.cert-address_md": "**Address:** {address}",
+    // Mark evidence
+    "card.bimi.vmc.cert-section-mark-evidence": "Mark evidence",
+    "card.bimi.vmc.cert-trademark-registration_md": "**Trademark registration:** {trademarkRegistration}",
+    "card.bimi.vmc.cert-trademark-office_md": "**Trademark office:** {trademarkOfficeName}",
+    "card.bimi.vmc.cert-mark-type_md": "**Mark type:** {markType}",
+    "card.bimi.vmc.cert-trademark-country_md": "**Trademark country or region:** {trademarkCountryOrRegion}",
+    // Verification issues
+    "card.bimi.vmc.cert-section-verification-issues": "Verification issues",
+    "card.bimi.vmc.cert-no-issues-reported_md": "None reported",
     // BIMI section titles
     "section-titles.bimi-domain": "DMARC Domains",
     "section-titles.bimi-policy": "Your BIMI Policy",
@@ -843,6 +874,37 @@ var EXTRACTOR_STRINGS = {
     "card.bimi.vmc.issuer_md": "**Issuer : {issuer}**",
     "card.bimi.vmc.trademarkAuthority_md": "**Autorit\xE9 de la marque : {trademarkAuthority}**",
     "card.bimi.vmc.valid-for-domain_md": "**Valide pour les domaines :** `{domains}`",
+    // BIMI VMC/CMC published-certificate metadata (WEB-1137 / DS-93)
+    // Validity
+    "card.bimi.vmc.cert-section-validity": "Validit\xE9",
+    "card.bimi.vmc.cert-valid-from_md": "**D\xE9but :** {date}",
+    "card.bimi.vmc.cert-expiry_md": "**Expiration :** {date}",
+    // Certificate
+    "card.bimi.vmc.cert-section-certificate": "Certificat",
+    "card.bimi.vmc.cert-issuer-common-name_md": "**\xC9metteur :** {issuerCommonName}",
+    "card.bimi.vmc.cert-issuer-organization_md": "**Organisation de l'\xE9metteur :** {issuerOrganization}",
+    "card.bimi.vmc.cert-issuer-country_md": "**Pays de l'\xE9metteur :** {issuerCountry}",
+    "card.bimi.vmc.cert-type_md": "**Type de certificat :** {assertionMarkType}",
+    "card.bimi.vmc.cert-certified-domains_md": "**Domaines certifi\xE9s :** `{certifiedDomains}`",
+    // Subject identity
+    "card.bimi.vmc.cert-section-subject-identity": "Identit\xE9 du sujet",
+    "card.bimi.vmc.cert-serial-number_md": "**Num\xE9ro de s\xE9rie :** {serialNumber}",
+    "card.bimi.vmc.cert-organization_md": "**Organisation :** {organization}",
+    "card.bimi.vmc.cert-common-name_md": "**Nom commun :** {commonName}",
+    "card.bimi.vmc.cert-business-category_md": "**Cat\xE9gorie d'activit\xE9 :** {businessCategory}",
+    "card.bimi.vmc.cert-organization-identifier_md": "**Identifiant de l'organisation :** {organizationIdentifier}",
+    "card.bimi.vmc.cert-legal-entity-identifier_md": "**Identifiant d'entit\xE9 juridique :** {legalEntityIdentifier}",
+    "card.bimi.vmc.cert-jurisdiction_md": "**Juridiction :** {jurisdiction}",
+    "card.bimi.vmc.cert-address_md": "**Adresse :** {address}",
+    // Mark evidence
+    "card.bimi.vmc.cert-section-mark-evidence": "Preuve de la marque",
+    "card.bimi.vmc.cert-trademark-registration_md": "**Enregistrement de la marque :** {trademarkRegistration}",
+    "card.bimi.vmc.cert-trademark-office_md": "**Office des marques :** {trademarkOfficeName}",
+    "card.bimi.vmc.cert-mark-type_md": "**Type de marque :** {markType}",
+    "card.bimi.vmc.cert-trademark-country_md": "**Pays ou r\xE9gion de la marque :** {trademarkCountryOrRegion}",
+    // Verification issues
+    "card.bimi.vmc.cert-section-verification-issues": "Probl\xE8mes de v\xE9rification",
+    "card.bimi.vmc.cert-no-issues-reported_md": "Aucun signal\xE9",
     // BIMI section titles
     "section-titles.bimi-domain": "Domaines DMARC",
     "section-titles.bimi-policy": "Votre politique BIMI",
@@ -7957,6 +8019,277 @@ const uncompressLogo = svgUrl => {
 
 var SVGLogo$1 = SVGLogo;
 
+/**
+ * A rendered published-certificate section: a titled group of Checklist items.
+ */
+
+/**
+ * Reference URL for the BIMI certificate-type explainer, used by the VMC/CMC
+ * type badge. Follows the existing external-link convention in the card.
+ */
+const CERT_TYPE_REFERENCE_URL = 'https://bimigroup.org/verified-mark-certificates-vmc-and-bimi/';
+const DAY_MS = 24 * 60 * 60 * 1000;
+
+/**
+ * Parse a YYYY-MM-DD date string to a UTC Date. Returns null when the input is
+ * missing or unparseable so callers can degrade gracefully.
+ */
+const parseIsoDate = value => {
+  if (!value) return null;
+  const parsed = new Date(`${value}T00:00:00Z`);
+  return Number.isNaN(parsed.getTime()) ? null : parsed;
+};
+
+/** Whole-day difference between two dates (b - a), truncated toward zero. */
+const diffInDays = (a, b) => Math.trunc((b.getTime() - a.getTime()) / DAY_MS);
+
+/**
+ * Humanize the certificate validity start: "Active for {n} days — Since {date}".
+ * The humanized duration is a render-layer responsibility (the API returns only
+ * the raw validFrom date). Falls back to just the date when duration can't be
+ * computed.
+ */
+const humanizeValidFrom = (validFrom, now) => {
+  const from = parseIsoDate(validFrom);
+  if (!from) return undefined;
+  const days = diffInDays(from, now);
+  if (days < 0) {
+    // validFrom is in the future — not yet active; show the raw date only.
+    return `Not yet active — Since ${validFrom}`;
+  }
+  const unit = days === 1 ? 'day' : 'days';
+  return `Active for ${days} ${unit} — Since ${validFrom}`;
+};
+
+/**
+ * Humanize the certificate expiry: "Expires in {n} days — On {date}", or
+ * "Expired {n} days ago — On {date}" when already past. Falls back to the raw
+ * date when duration can't be computed.
+ */
+const humanizeExpiry = (expiry, now) => {
+  const to = parseIsoDate(expiry);
+  if (!to) return undefined;
+  const days = diffInDays(now, to);
+  if (days < 0) {
+    const ago = Math.abs(days);
+    const unit = ago === 1 ? 'day' : 'days';
+    return `Expired ${ago} ${unit} ago — On ${expiry}`;
+  }
+  const unit = days === 1 ? 'day' : 'days';
+  return `Expires in ${days} ${unit} — On ${expiry}`;
+};
+
+/** Join defined, non-empty parts with a separator; undefined when nothing remains. */
+const joinParts = function (parts) {
+  let sep = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : ', ';
+  const filtered = parts.map(p => p === null || p === void 0 ? void 0 : p.trim()).filter(p => !!p);
+  return filtered.length ? filtered.join(sep) : undefined;
+};
+
+/**
+ * Build a single info ChecklistItem when its value is present. Returns null so
+ * callers can filter absent fields out and only render populated rows.
+ */
+const infoRow = (t, key, params, testId, value) => {
+  if (!value) return null;
+  // 'no-icon' renders the label/value with no leading icon — these dense
+  // metadata rows read as a plain key/value list, so an info dot per row is
+  // just noise.
+  return {
+    type: 'no-icon',
+    text: t(key, params),
+    'data-testid': testId
+  };
+};
+
+/** External-link anchor rendered inline inside a Checklist item. */
+const ExternalLink = _ref => {
+  let {
+    href,
+    children,
+    'data-testid': testId
+  } = _ref;
+  return /*#__PURE__*/React__default.createElement("a", {
+    href: href,
+    target: "_blank",
+    rel: "noopener noreferrer",
+    "data-testid": testId
+  }, children);
+};
+
+/**
+ * Build the five published-certificate sections (Validity, Certificate, Subject
+ * identity, Mark evidence, Verification issues) from IPForensics
+ * VmcPublishedCertificate + VmcPemEvidence data.
+ *
+ * All labels come from @redsift/signal-logic BIMI_KEYS via `t` so they remain
+ * translatable. `now` is injected for deterministic humanized durations in
+ * tests and stories.
+ */
+const buildPublishedCertificateSections = (cert, pem, t, now) => {
+  var _cert$certifiedDomain, _cert$certifiedDomain2, _pem$errors;
+  const sections = [];
+
+  // --- Validity ---
+  const validFromText = humanizeValidFrom(cert.validFrom, now);
+  const expiryText = humanizeExpiry(cert.expiry, now);
+  const validityItems = [infoRow(t, 'card.bimi.vmc.cert-valid-from_md', {
+    date: validFromText
+  }, 'bimi-cert-valid-from', validFromText), infoRow(t, 'card.bimi.vmc.cert-expiry_md', {
+    date: expiryText
+  }, 'bimi-cert-expiry', expiryText)].filter(i => i !== null);
+  if (validityItems.length) {
+    sections.push({
+      id: 'bimi-cert-validity',
+      title: t('card.bimi.vmc.cert-section-validity'),
+      items: validityItems,
+      testId: 'bimi-cert-validity-section'
+    });
+  }
+
+  // --- Certificate ---
+  const certItems = [];
+  const issuerCommon = infoRow(t, 'card.bimi.vmc.cert-issuer-common-name_md', {
+    issuerCommonName: cert.issuerCommonName
+  }, 'bimi-cert-issuer-common-name', cert.issuerCommonName);
+  if (issuerCommon) certItems.push(issuerCommon);
+  const issuerOrg = infoRow(t, 'card.bimi.vmc.cert-issuer-organization_md', {
+    issuerOrganization: cert.issuerOrganization
+  }, 'bimi-cert-issuer-organization', cert.issuerOrganization);
+  if (issuerOrg) certItems.push(issuerOrg);
+  const issuerCountry = infoRow(t, 'card.bimi.vmc.cert-issuer-country_md', {
+    issuerCountry: cert.issuerCountry
+  }, 'bimi-cert-issuer-country', cert.issuerCountry);
+  if (issuerCountry) certItems.push(issuerCountry);
+
+  // Certificate type row: a bold "Certificate type:" label with the VMC/CMC
+  // value as an external-link badge. We interpolate a placeholder for the value
+  // so the label markdown (**…**) parses correctly, then splice the linked
+  // badge in where the value goes — only the value links, not the label.
+  if (cert.markType) {
+    const VALUE_TOKEN = '';
+    const template = t('card.bimi.vmc.cert-type_md', {
+      assertionMarkType: VALUE_TOKEN
+    });
+    const [before, after = ''] = template.split(VALUE_TOKEN);
+    certItems.push({
+      type: 'no-icon',
+      'data-testid': 'bimi-cert-type',
+      text: /*#__PURE__*/React__default.createElement("span", null, parseGlossaryMarkdown(before), /*#__PURE__*/React__default.createElement(ExternalLink, {
+        href: CERT_TYPE_REFERENCE_URL,
+        "data-testid": "bimi-cert-type-link"
+      }, cert.markType), after && parseGlossaryMarkdown(after))
+    });
+  }
+
+  // Certified domains as chips with external links, comma-separated.
+  const certifiedDomains = (_cert$certifiedDomain = (_cert$certifiedDomain2 = cert.certifiedDomains) === null || _cert$certifiedDomain2 === void 0 ? void 0 : _cert$certifiedDomain2.filter(d => !!d)) !== null && _cert$certifiedDomain !== void 0 ? _cert$certifiedDomain : [];
+  if (certifiedDomains.length) {
+    certItems.push({
+      type: 'no-icon',
+      'data-testid': 'bimi-cert-certified-domains',
+      text: /*#__PURE__*/React__default.createElement("span", {
+        "data-testid": "bimi-cert-certified-domains-chips"
+      }, certifiedDomains.map((domain, idx) => /*#__PURE__*/React__default.createElement(React__default.Fragment, {
+        key: domain
+      }, idx > 0 && ', ', /*#__PURE__*/React__default.createElement(ExternalLink, {
+        href: `https://${domain}`
+      }, domain))))
+    });
+  }
+  if (certItems.length) {
+    sections.push({
+      id: 'bimi-cert-certificate',
+      title: t('card.bimi.vmc.cert-section-certificate'),
+      items: certItems,
+      testId: 'bimi-cert-certificate-section'
+    });
+  }
+
+  // --- Subject identity ---
+  const jurisdiction = joinParts([cert.jurisdictionLocality, cert.jurisdictionStateOrProvince, cert.jurisdictionCountry]);
+  const address = joinParts([cert.streetAddress, cert.locality, cert.stateOrProvince, cert.country]);
+  const organizationIdentifier = cert.organizationIdentifier ? cert.organizationIdentifierScheme ? `${cert.organizationIdentifier} (${cert.organizationIdentifierScheme})` : cert.organizationIdentifier : undefined;
+  const subjectItems = [infoRow(t, 'card.bimi.vmc.cert-serial-number_md', {
+    serialNumber: cert.serialNumber
+  }, 'bimi-cert-serial-number', cert.serialNumber), infoRow(t, 'card.bimi.vmc.cert-organization_md', {
+    organization: cert.organization
+  }, 'bimi-cert-organization', cert.organization), infoRow(t, 'card.bimi.vmc.cert-common-name_md', {
+    commonName: cert.commonName
+  }, 'bimi-cert-common-name', cert.commonName), infoRow(t, 'card.bimi.vmc.cert-business-category_md', {
+    businessCategory: cert.businessCategory
+  }, 'bimi-cert-business-category', cert.businessCategory), infoRow(t, 'card.bimi.vmc.cert-organization-identifier_md', {
+    organizationIdentifier
+  }, 'bimi-cert-organization-identifier', organizationIdentifier), infoRow(t, 'card.bimi.vmc.cert-legal-entity-identifier_md', {
+    legalEntityIdentifier: cert.legalEntityIdentifier
+  }, 'bimi-cert-legal-entity-identifier', cert.legalEntityIdentifier), infoRow(t, 'card.bimi.vmc.cert-jurisdiction_md', {
+    jurisdiction
+  }, 'bimi-cert-jurisdiction', jurisdiction), infoRow(t, 'card.bimi.vmc.cert-address_md', {
+    address
+  }, 'bimi-cert-address', address)].filter(i => i !== null);
+  if (subjectItems.length) {
+    sections.push({
+      id: 'bimi-cert-subject-identity',
+      title: t('card.bimi.vmc.cert-section-subject-identity'),
+      items: subjectItems,
+      testId: 'bimi-cert-subject-identity-section'
+    });
+  }
+
+  // --- Mark evidence ---
+  const markItems = [infoRow(t, 'card.bimi.vmc.cert-trademark-registration_md', {
+    trademarkRegistration: cert.trademarkRegistration
+  }, 'bimi-cert-trademark-registration', cert.trademarkRegistration), infoRow(t, 'card.bimi.vmc.cert-trademark-office_md', {
+    trademarkOfficeName: cert.trademarkOfficeName
+  }, 'bimi-cert-trademark-office', cert.trademarkOfficeName), infoRow(t, 'card.bimi.vmc.cert-mark-type_md', {
+    markType: cert.markType
+  }, 'bimi-cert-mark-type', cert.markType), infoRow(t, 'card.bimi.vmc.cert-trademark-country_md', {
+    trademarkCountryOrRegion: cert.trademarkCountryOrRegion
+  }, 'bimi-cert-trademark-country', cert.trademarkCountryOrRegion)].filter(i => i !== null);
+  if (markItems.length) {
+    sections.push({
+      id: 'bimi-cert-mark-evidence',
+      title: t('card.bimi.vmc.cert-section-mark-evidence'),
+      items: markItems,
+      testId: 'bimi-cert-mark-evidence-section'
+    });
+  }
+
+  // --- Verification issues ---
+  // Sourced from PEM evidence errors plus an ambiguous leaf-selection signal.
+  const errorMessages = ((_pem$errors = pem === null || pem === void 0 ? void 0 : pem.errors) !== null && _pem$errors !== void 0 ? _pem$errors : []).map(e => typeof e === 'string' ? e : e === null || e === void 0 ? void 0 : e.message).filter(m => !!m);
+  const isAmbiguous = (pem === null || pem === void 0 ? void 0 : pem.leafSelectionMethod) === 'AMBIGUOUS';
+  const issueItems = [];
+  if (isAmbiguous) {
+    issueItems.push({
+      type: 'warning',
+      text: 'Ambiguous leaf certificate selection',
+      'data-testid': 'bimi-cert-issue-ambiguous'
+    });
+  }
+  errorMessages.forEach((message, idx) => {
+    issueItems.push({
+      type: 'warning',
+      text: message,
+      'data-testid': `bimi-cert-issue-${idx}`
+    });
+  });
+  if (!issueItems.length) {
+    issueItems.push({
+      type: 'good',
+      text: t('card.bimi.vmc.cert-no-issues-reported_md'),
+      'data-testid': 'bimi-cert-no-issues'
+    });
+  }
+  sections.push({
+    id: 'bimi-cert-verification-issues',
+    title: t('card.bimi.vmc.cert-section-verification-issues'),
+    items: issueItems,
+    testId: 'bimi-cert-verification-issues-section'
+  });
+  return sections;
+};
+
 const _excluded$2 = ["jmap", "onHeightChange", "useInvestigateColors", "isCollapsible", "areAllCollapsed", "onCollapseAll", "className"];
 const COMPONENT_NAME$2 = 'SignalCardBimi';
 const CLASSNAME$2 = 'redsift-signal-card-bimi';
@@ -7966,6 +8299,7 @@ const CLASSNAME$2 = 'redsift-signal-card-bimi';
  * BIMI record validation, VMC certificate details, and SVG logo validation.
  */
 const SignalCardBimi = /*#__PURE__*/forwardRef((props, ref) => {
+  var _bimi$vmc;
   const {
     t
   } = useSignalCardTranslation('investigate');
@@ -8024,31 +8358,77 @@ const SignalCardBimi = /*#__PURE__*/forwardRef((props, ref) => {
       items
     });
   }, [adapterResult === null || adapterResult === void 0 ? void 0 : adapterResult.svgSection, bimi, isDeclinationToPublish]);
+  const hasPublishedCertificate = !!(bimi !== null && bimi !== void 0 && (_bimi$vmc = bimi.vmc) !== null && _bimi$vmc !== void 0 && _bimi$vmc.publishedCertificate);
 
   // Inject SVGLogo into VMC section (React-specific)
   const vmcSection = useMemo(() => {
-    var _bimi$vmc;
+    var _bimi$vmc2;
     if (isDeclinationToPublish || !(adapterResult !== null && adapterResult !== void 0 && adapterResult.vmcSection)) return null;
-    const logoSrc = bimi === null || bimi === void 0 ? void 0 : (_bimi$vmc = bimi.vmc) === null || _bimi$vmc === void 0 ? void 0 : _bimi$vmc.logoSrc;
-    if (!logoSrc) return adapterResult.vmcSection;
-    const items = [...adapterResult.vmcSection.items];
-    // Insert logo before the first 'no-icon' item (matching original helpers behavior)
-    const noIconIdx = items.findIndex(item => item.type === 'no-icon');
-    const svgItem = {
-      text: /*#__PURE__*/React__default.createElement(SVGLogo$1, {
-        svgUrl: logoSrc
-      }),
-      type: 'image'
-    };
-    if (noIconIdx >= 0) {
-      items.splice(noIconIdx, 0, svgItem);
-    } else {
-      items.push(svgItem);
+    let items = [...adapterResult.vmcSection.items];
+
+    // When the full published certificate is present, the new metadata sections
+    // (below) supersede several legacy VMC rows with richer equivalents, so drop
+    // the duplicated legacy rows to avoid showing each field twice (DS-93):
+    //   issuer            → Certificate › Issuer
+    //   expiry            → Validity › Expiry (matched by testid)
+    //   valid-for-domains → Certificate › Certified domains
+    //   trademark authority → Mark evidence › Trademark office
+    // The legacy assertion-mark and VMC validity-status rows have no equivalent
+    // in the new sections and are kept.
+    if (hasPublishedCertificate) {
+      const stripMd = s => s.replace(/[*`]/g, '').trim();
+      // Label prefixes (value interpolated empty) of the legacy rows to suppress.
+      const suppressedPrefixes = [t('card.bimi.vmc.issuer_md', {
+        issuer: ''
+      }), t('card.bimi.vmc.valid-for-domain_md', {
+        domains: ''
+      }), t('card.bimi.vmc.trademarkAuthority_md', {
+        trademarkAuthority: ''
+      })].map(stripMd).filter(Boolean);
+      const suppressedTestIds = new Set(['vmc-expiration-valid', 'vmc-expiration-expired']);
+      items = items.filter(item => {
+        const testId = item['data-testid'];
+        if (testId && suppressedTestIds.has(testId)) return false;
+        if (typeof item.text === 'string') {
+          const text = stripMd(item.text);
+          if (suppressedPrefixes.some(prefix => text.startsWith(prefix))) return false;
+        }
+        return true;
+      });
+    }
+    const logoSrc = bimi === null || bimi === void 0 ? void 0 : (_bimi$vmc2 = bimi.vmc) === null || _bimi$vmc2 === void 0 ? void 0 : _bimi$vmc2.logoSrc;
+    if (logoSrc) {
+      // Insert logo before the first 'no-icon' item (matching original helpers behavior)
+      const noIconIdx = items.findIndex(item => item.type === 'no-icon');
+      const svgItem = {
+        text: /*#__PURE__*/React__default.createElement(SVGLogo$1, {
+          svgUrl: logoSrc
+        }),
+        type: 'image'
+      };
+      if (noIconIdx >= 0) {
+        items.splice(noIconIdx, 0, svgItem);
+      } else {
+        items.push(svgItem);
+      }
     }
     return _objectSpread2(_objectSpread2({}, adapterResult.vmcSection), {}, {
       items
     });
-  }, [adapterResult === null || adapterResult === void 0 ? void 0 : adapterResult.vmcSection, bimi, isDeclinationToPublish]);
+  }, [adapterResult === null || adapterResult === void 0 ? void 0 : adapterResult.vmcSection, bimi, isDeclinationToPublish, hasPublishedCertificate, t]);
+
+  // Build the published-certificate metadata sections (VMC/CMC leaf identity,
+  // mark evidence, verification issues). Only present when IPForensics resolved
+  // a unique leaf; otherwise this is empty and the card degrades to the legacy
+  // VMC section above (DS-93). `now` drives the humanized validity durations.
+  const publishedCertSections = useMemo(() => {
+    var _bimi$vmc3, _bimi$vmc4;
+    if (isDeclinationToPublish) return [];
+    const cert = bimi === null || bimi === void 0 ? void 0 : (_bimi$vmc3 = bimi.vmc) === null || _bimi$vmc3 === void 0 ? void 0 : _bimi$vmc3.publishedCertificate;
+    if (!cert) return [];
+    const pem = bimi === null || bimi === void 0 ? void 0 : (_bimi$vmc4 = bimi.vmc) === null || _bimi$vmc4 === void 0 ? void 0 : _bimi$vmc4.pem;
+    return buildPublishedCertificateSections(cert, pem, t, new Date());
+  }, [bimi, t, isDeclinationToPublish]);
   const getTranslatedCaption = useCallback(caption => {
     if (!caption) return undefined;
     return t(EXTRACTION_CAPTION_KEYS[caption]);
@@ -8106,6 +8486,20 @@ const SignalCardBimi = /*#__PURE__*/forwardRef((props, ref) => {
       testId: 'bimi-vmc-section'
     });
   }
+
+  // Full published-certificate metadata sections (DS-93). Rendered only when
+  // vmc.publishedCertificate is present; otherwise the card keeps its legacy
+  // VMC rendering above.
+  publishedCertSections.forEach(section => {
+    sections.push({
+      id: section.id,
+      title: section.title,
+      content: /*#__PURE__*/React__default.createElement(Checklist$1, {
+        items: section.items
+      }),
+      testId: section.testId
+    });
+  });
   if (svgSection) {
     sections.push({
       id: 'safeSVG',