@drm3/sdk 0.1.2

package/dist/receipts.global.js

@@ -0,0 +1,587 @@
+"use strict";
+var drm3Receipts = (() => {
+  var __defProp = Object.defineProperty;
+  var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+  var __getOwnPropNames = Object.getOwnPropertyNames;
+  var __hasOwnProp = Object.prototype.hasOwnProperty;
+  var __export = (target, all) => {
+    for (var name in all)
+      __defProp(target, name, { get: all[name], enumerable: true });
+  };
+  var __copyProps = (to, from, except, desc) => {
+    if (from && typeof from === "object" || typeof from === "function") {
+      for (let key of __getOwnPropNames(from))
+        if (!__hasOwnProp.call(to, key) && key !== except)
+          __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+    }
+    return to;
+  };
+  var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+  // src/receipts.ts
+  var receipts_exports = {};
+  __export(receipts_exports, {
+    ALERT: () => ALERT,
+    CHECK: () => CHECK,
+    DOWNLOAD: () => DOWNLOAD,
+    FAILED: () => FAILED,
+    HEX: () => HEX,
+    LOCK: () => LOCK,
+    RECEIPT: () => RECEIPT,
+    SPIN: () => SPIN,
+    STAMP: () => STAMP,
+    UNVERIFIABLE_NO_ACCESS: () => UNVERIFIABLE_NO_ACCESS,
+    VERIFIED: () => VERIFIED,
+    appendDownload: () => appendDownload,
+    buildModal: () => buildModal,
+    canonicalize: () => canonicalize,
+    countsLine: () => countsLine,
+    esc: () => esc,
+    hashHex: () => hashHex,
+    injectStyles: () => injectStyles,
+    isEd25519Supported: () => isEd25519Supported,
+    legDetail: () => legDetail,
+    loadRegistry: () => loadRegistry,
+    monoColor: () => monoColor,
+    mountVerifyButton: () => mountVerifyButton,
+    openReceiptById: () => openReceiptById,
+    openReceiptModal: () => openReceiptModal,
+    prettyAction: () => prettyAction,
+    resolveReceipt: () => resolveReceipt,
+    sealVerdict: () => sealVerdict,
+    sha256Hex: () => sha256Hex,
+    shortHex: () => shortHex,
+    shortKey: () => shortKey,
+    verifyChainInto: () => verifyChainInto,
+    verifyContentSig: () => verifyContentSig,
+    verifyReceipt: () => verifyReceipt
+  });
+
+  // src/receipts-render.ts
+  var esc = (s) => String(s).replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
+  function shortHex(h) {
+    const x = String(h || "").replace(/^(ed25519|sha256|sha1):/, "");
+    return x ? `${x.slice(0, 10)}\u2026${x.slice(-6)}` : "-";
+  }
+  function shortKey(k) {
+    const h = String(k || "").replace(/^ed25519:/, "");
+    return h ? `ed25519:${h.slice(0, 8)}\u2026${h.slice(-6)}` : "-";
+  }
+  function prettyAction(a) {
+    if (/fetch/i.test(a)) return "Fetched & extracted";
+    if (/analy/i.test(a)) return "AI analysis";
+    if (/scrape|extract/i.test(a)) return "Content extracted";
+    if (/digest|compose/i.test(a)) return "Composed";
+    if (/infer/i.test(a)) return "Inference";
+    return String(a || "receipt").replace(/[._-]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
+  }
+  function monoColor(s) {
+    let h = 0;
+    for (let i = 0; i < s.length; i++) h = (h * 31 + s.charCodeAt(i)) % 360;
+    return `hsl(${h} 52% 64%)`;
+  }
+  function countsLine(c) {
+    return `<span class="drm3v-counts">${c.verified} verified \xB7 ${c.gated} not accessible \xB7 ${c.failed} failed</span>`;
+  }
+  function fieldRow(label, value, mono = false) {
+    return `<div class="drm3v-kv"><span>${esc(label)}</span>${mono ? `<code>${esc(value)}</code>` : `<b>${esc(value)}</b>`}</div>`;
+  }
+  function legDetail(payload, contentRef) {
+    const meta = payload?.metadata?._meta || {};
+    const rows = [];
+    const model = String(meta.model || "");
+    const provider = String(meta.provider || "");
+    if (model) rows.push(fieldRow("model", provider ? `${model} \xB7 ${provider}` : model));
+    else if (meta.extractor) rows.push(fieldRow("extractor", String(meta.extractor)));
+    const ih = String(payload.input_hash || "");
+    const oh = String(payload.output_hash || "");
+    if (ih) rows.push(fieldRow("input", shortHex(ih), true));
+    if (oh) rows.push(fieldRow("output", shortHex(oh), true));
+    if (payload.timestamp) {
+      const d = new Date(String(payload.timestamp));
+      if (!Number.isNaN(d.getTime())) rows.push(fieldRow("signed", d.toUTCString()));
+    }
+    const att = String(meta.attestation || "");
+    const attHtml = att ? `<div class="drm3v-att">${esc(att)}</div>` : "";
+    const links = [];
+    if (contentRef?.ourUrl) links.push(`<a class="drm3v-clink" href="${esc(contentRef.ourUrl)}" target="_blank" rel="noopener">read the copy \u2197</a>`);
+    if (contentRef?.origUrl)
+      links.push(`<a class="drm3v-clink" href="${esc(contentRef.origUrl)}" target="_blank" rel="noopener noreferrer">original source \u2197</a>`);
+    const linksHtml = links.length ? `<div class="drm3v-clinks">${links.join("")}</div>` : "";
+    if (!rows.length && !attHtml && !linksHtml) return "";
+    return `<div class="drm3v-detail">${rows.join("")}${attHtml}${linksHtml}</div>`;
+  }
+
+  // src/receipts-types.ts
+  var VERIFIED = "verified";
+  var UNVERIFIABLE_NO_ACCESS = "unverifiable_no_access";
+  var FAILED = "failed";
+
+  // src/receipts-verify.ts
+  function canonicalize(obj) {
+    if (obj === null || obj === void 0) return JSON.stringify(obj);
+    if (Array.isArray(obj)) return `[${obj.map(canonicalize).join(",")}]`;
+    if (typeof obj === "object") {
+      const keys = Object.keys(obj).map((k) => k.normalize("NFC")).sort();
+      return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalize(obj[k])}`).join(",")}}`;
+    }
+    if (typeof obj === "string") return JSON.stringify(obj.normalize("NFC"));
+    return JSON.stringify(obj);
+  }
+  function hexToBytes(hex) {
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) out[i / 2] = Number.parseInt(hex.substr(i, 2), 16);
+    return out;
+  }
+  var SPEC11_FIELDS = ["purpose", "caller", "inputs", "outputs", "content_sig"];
+  async function verifyReceipt(r) {
+    const p = typeof r.receipt_json === "string" ? JSON.parse(r.receipt_json) : r.receipt_json;
+    if (!p) return false;
+    const sig = (r.signature || p.signature || "").replace(/^ed25519:/, "");
+    const pub = (r.public_key || p.public_key || "").replace(/^ed25519:/, "");
+    if (!sig || !pub) return false;
+    const key = await crypto.subtle.importKey("raw", hexToBytes(pub), { name: "Ed25519" }, false, ["verify"]);
+    const sigBytes = hexToBytes(sig);
+    const payloadFor = (ts) => {
+      const base = {
+        id: p.id,
+        action: p.action,
+        timestamp: ts,
+        input_hash: p.input_hash,
+        output_hash: p.output_hash,
+        cost: p.cost ?? null,
+        duration_ms: p.duration_ms ?? null,
+        parent_id: p.parent_id ?? null,
+        metadata: p.metadata ?? null,
+        public_key: p.public_key
+      };
+      for (const k of SPEC11_FIELDS) {
+        if (p[k] !== void 0 && p[k] !== null) base[k] = p[k];
+      }
+      return base;
+    };
+    const tryVerify = (ts) => crypto.subtle.verify("Ed25519", key, sigBytes, new TextEncoder().encode(canonicalize(payloadFor(ts))));
+    if (await tryVerify(p.timestamp)) return true;
+    if (typeof p.timestamp === "string" && p.timestamp.endsWith("Z")) {
+      if (await tryVerify(`${p.timestamp.slice(0, -1)}+00:00`)) return true;
+    }
+    return false;
+  }
+  async function verifyContentSig(contentSig, publicKey, body) {
+    const sig = String(contentSig || "").replace(/^ed25519:/, "");
+    const pub = String(publicKey || "").replace(/^ed25519:/, "");
+    if (!sig || !pub || !body || !crypto?.subtle) return null;
+    try {
+      const key = await crypto.subtle.importKey("raw", hexToBytes(pub), { name: "Ed25519" }, false, ["verify"]);
+      return await crypto.subtle.verify("Ed25519", key, hexToBytes(sig), new TextEncoder().encode(body));
+    } catch {
+      return null;
+    }
+  }
+  async function hashHex(algo, s) {
+    const buf = await crypto.subtle.digest(algo, new TextEncoder().encode(s));
+    return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  var sha256Hex = (s) => hashHex("SHA-256", s);
+  async function isEd25519Supported() {
+    try {
+      await crypto.subtle.generateKey({ name: "Ed25519" }, false, ["sign", "verify"]);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+
+  // src/receipts-chain.ts
+  function parentRefs(r, pj) {
+    const out = [];
+    const add = (v) => {
+      if (typeof v === "string" && v) out.push(v);
+    };
+    add(r.parent_receipt_id);
+    add(pj?.parent_id);
+    for (const e of pj?.inputs || []) if (e && typeof e === "object") add(e.ref);
+    return out;
+  }
+  function safeParse(s) {
+    try {
+      return JSON.parse(s);
+    } catch {
+      return null;
+    }
+  }
+  async function verifyChainInto(chain, registry, addStep, settle, wait, contentRef) {
+    const counts = { verified: 0, gated: 0, failed: 0 };
+    const present = /* @__PURE__ */ new Set();
+    for (const r of chain) {
+      const pj = typeof r.receipt_json === "string" ? safeParse(r.receipt_json) : r.receipt_json;
+      if (r.id) present.add(r.id);
+      if (typeof pj?.id === "string") present.add(pj.id);
+    }
+    const referencedGated = /* @__PURE__ */ new Set();
+    for (const r of chain) {
+      const pj = typeof r.receipt_json === "string" ? safeParse(r.receipt_json) : r.receipt_json;
+      for (const pid of parentRefs(r, pj)) if (!present.has(pid)) referencedGated.add(pid);
+    }
+    const ordered = [...chain].reverse();
+    for (const r of ordered) {
+      const payload = typeof r.receipt_json === "string" ? JSON.parse(r.receipt_json) : r.receipt_json;
+      const action = r.action || payload?.action || r.receipt_type || "receipt";
+      const pub = (r.public_key || payload?.public_key || "").toLowerCase();
+      const signer = r.signer_path || payload?.metadata?._meta?.signer || "";
+      const el = addStep(prettyAction(action), signer ? `signer ${signer} \xB7 ${shortKey(pub)}` : shortKey(pub), legDetail(payload, contentRef));
+      await wait(420);
+      let ok = false;
+      try {
+        ok = await verifyReceipt(r);
+      } catch {
+        ok = false;
+      }
+      const rec = registry.get(pub);
+      const known = registry.size === 0 || !!rec;
+      const ts = payload?.timestamp || r.timestamp || "";
+      let verdict = ok && known ? VERIFIED : FAILED;
+      let note = "";
+      if (ok && rec) {
+        if (rec.status === "compromised" || rec.status === "revoked") {
+          verdict = FAILED;
+          note = ` \xB7 \u26A0 key ${rec.status}`;
+        } else if (rec.status === "superseded" || rec.status === "retired") {
+          const inWindow = (!rec.valid_from || !ts || ts >= rec.valid_from) && (!rec.valid_until || !ts || ts <= rec.valid_until);
+          if (inWindow) {
+            verdict = VERIFIED;
+            note = ` \xB7 key since rotated${rec.valid_until ? ` ${rec.valid_until.slice(0, 10)}` : ""} (verified)`;
+          } else {
+            verdict = FAILED;
+            note = " \xB7 \u26A0 signed outside the key's validity window";
+          }
+        }
+      } else if (ok && !known) {
+        note = " \xB7 \u26A0 key not found in registry";
+      }
+      settle(el, verdict);
+      if (verdict === VERIFIED) counts.verified++;
+      else counts.failed++;
+      if (note) {
+        const meta = el.querySelector(".drm3v-meta");
+        if (meta) meta.textContent += note;
+      }
+      await wait(180);
+    }
+    for (const pid of referencedGated) {
+      const el = addStep(
+        "Upstream step (not accessible)",
+        `referenced ${shortHex(pid)} \xB7 receipt not retrievable to you`,
+        `<div class="drm3v-detail"><div class="drm3v-clinks"><a class="drm3v-clink" href="#" onclick="event.preventDefault();event.stopPropagation();window.drm3Receipts&&window.drm3Receipts.openReceiptById('${esc(pid)}')">resolve this receipt</a></div></div>`
+      );
+      await wait(280);
+      settle(el, UNVERIFIABLE_NO_ACCESS);
+      counts.gated++;
+      await wait(120);
+    }
+    return counts;
+  }
+
+  // src/receipts-ui.ts
+  var CHECK = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><path d="M20 6 9 17l-5-5"/></svg>';
+  var LOCK = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><rect x="5" y="11" width="14" height="9" rx="2"/><path d="M8 11V7a4 4 0 0 1 8 0v4"/></svg>';
+  var HEX = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round"><path d="M12 2.5 20.5 7.2v9.6L12 21.5 3.5 16.8V7.2z"/><path d="m8.7 12 2.2 2.2 4.4-4.4"/></svg>';
+  var STAMP = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="9"/><circle cx="12" cy="12" r="5.4" stroke-dasharray="1.4 2.3"/><path d="m9.5 12 1.8 1.8 3.6-3.7"/></svg>';
+  var ALERT = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 9v4m0 4h.01M10.3 3.9 1.8 18a2 2 0 0 0 1.7 3h17a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0z"/></svg>';
+  var RECEIPT = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M5 3v18l2-1.2L9 21l2-1.2L13 21l2-1.2L17 21l2-1.2V3l-2 1.2L15 3l-2 1.2L11 3 9 4.2 7 3z"/><path d="M8 8.5h8M8 12h8M8 15.5h5" stroke-width="1.4"/></svg>';
+  var SPIN = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round"><path d="M12 3a9 9 0 1 0 9 9" opacity=".95"/></svg>';
+  var DOWNLOAD = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M12 3v12m0 0 4-4m-4 4-4-4M5 21h14"/></svg>';
+  function injectStyles() {
+    if (typeof document === "undefined" || document.getElementById("drm3v-css")) return;
+    const s = document.createElement("style");
+    s.id = "drm3v-css";
+    s.textContent = `
+  .drm3v-trigger{display:inline-flex;align-items:center;gap:7px;margin:12px 0;padding:9px 15px;font:inherit;font-size:.82rem;font-weight:600;
+    color:#0a0a10;background:linear-gradient(180deg,#7fe3b0,#46c98a);border:none;border-radius:999px;cursor:pointer;transition:transform .12s,filter .15s}
+  .drm3v-trigger:hover{transform:translateY(-1px);filter:brightness(1.05)}
+  .drm3v-trigger svg{width:15px;height:15px}
+  .drm3v-ov{position:fixed;inset:0;z-index:99990;display:flex;align-items:center;justify-content:center;padding:20px;
+    background:rgba(4,4,9,.78);backdrop-filter:blur(7px);-webkit-backdrop-filter:blur(7px);animation:drm3v-fade .18s ease}
+  @keyframes drm3v-fade{from{opacity:0}to{opacity:1}}
+  .drm3v-modal{width:min(600px,100%);max-height:90vh;overflow:auto;background:linear-gradient(180deg,#13131f,#0d0d16);
+    border:1px solid #2a2a3f;border-radius:20px;box-shadow:0 30px 90px rgba(0,0,0,.66);padding:22px 22px 18px;font-family:ui-sans-serif,system-ui,sans-serif;color:#e8e8f2}
+  .drm3v-modal::-webkit-scrollbar{width:10px}
+  .drm3v-modal::-webkit-scrollbar-thumb{background:#2a2a3f;border-radius:8px;border:3px solid transparent;background-clip:padding-box}
+  .drm3v-h{display:flex;align-items:center;justify-content:space-between;margin-bottom:4px}
+  .drm3v-h h3{font-size:1.02rem;margin:0;color:#fff;display:flex;align-items:center;gap:9px}
+  .drm3v-h h3 svg{width:18px;height:18px;color:#7fe3b0}
+  .drm3v-x{background:none;border:none;color:#a8a8be;font-size:1.4rem;line-height:1;cursor:pointer}
+  .drm3v-x:hover{color:#e8e8f2}
+  .drm3v-sub{font-size:.79rem;color:#b6b6c8;margin-bottom:14px;line-height:1.5}
+  .drm3v-rcpt{position:relative;overflow:hidden;border:1px solid #2c2c42;border-radius:16px;padding:15px 17px 14px;margin:4px 0 2px;
+    background:radial-gradient(135% 150% at 0 0,rgba(70,201,138,.13),transparent 56%),#15151f}
+  .drm3v-rcpt::after{content:"";position:absolute;left:0;top:0;bottom:0;width:3px;background:linear-gradient(180deg,#7fe3b0,#46c98a)}
+  .drm3v-rcpt.part::after{background:linear-gradient(180deg,#f3d09a,#e3a24b)}
+  .drm3v-rcpt.bad::after{background:linear-gradient(180deg,#ffb3c0,#e0556b)}
+  .drm3v-rcpt.wait::after{background:linear-gradient(180deg,#3a3a52,#2a2a3d)}
+  .drm3v-rtop{display:flex;align-items:center;gap:7px;font-size:.69rem;font-weight:700;letter-spacing:.11em;text-transform:uppercase;color:#9ff0c4}
+  .drm3v-rtop .svc{color:#fff}
+  .drm3v-rtop .dep{color:#a8a8be;font-weight:600}
+  .drm3v-raction{margin-left:auto;font-family:ui-monospace,Menlo,monospace;font-size:.69rem;font-weight:600;color:#cfcfe0;
+    background:rgba(141,141,163,.14);border:1px solid #2c2c42;padding:2px 9px;border-radius:999px;letter-spacing:0;text-transform:none}
+  .drm3v-rsigner{display:flex;align-items:center;gap:9px;margin-top:12px}
+  .drm3v-rsigner>svg{flex:none;width:20px;height:20px;color:#7fe3b0}
+  .drm3v-rname{font-weight:700;font-size:.95rem;color:#fff;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+  .drm3v-rstate{margin-left:auto;display:inline-flex;align-items:center;gap:5px;font-size:.71rem;font-weight:700;
+    padding:4px 10px;border-radius:999px;border:1px solid;white-space:nowrap;flex:none}
+  .drm3v-rstate svg{width:13px;height:13px}
+  .drm3v-rstate.ok{color:#9ff0c4;background:rgba(70,201,138,.15);border-color:rgba(70,201,138,.45)}
+  .drm3v-rstate.wait{color:#c2c2d4;background:rgba(141,141,163,.14);border-color:#34344a}
+  .drm3v-rstate.part{color:#f3d09a;background:rgba(227,162,75,.15);border-color:rgba(227,162,75,.45)}
+  .drm3v-rstate.bad{color:#ffb3c0;background:rgba(224,85,107,.15);border-color:rgba(224,85,107,.45)}
+  .drm3v-rstate.spin svg{animation:drm3v-spin .7s linear infinite}
+  .drm3v-rkey{font-family:ui-monospace,Menlo,monospace;font-size:.71rem;color:#a8a8be;margin-top:9px;word-break:break-all}
+  .drm3v-rnote{font-size:.77rem;color:#bdbdd0;margin-top:8px;line-height:1.45}
+  .drm3v-rnote b{color:#fff}
+  .drm3v-rseal{position:absolute;right:-12px;bottom:-18px;width:94px;height:94px;color:#46c98a;opacity:.09;transform:rotate(-11deg);pointer-events:none}
+  .drm3v-rcpt.part .drm3v-rseal{color:#e3a24b}
+  .drm3v-rcpt.bad .drm3v-rseal{color:#e0556b}
+  .drm3v-railhead{display:flex;align-items:center;gap:8px;font-size:.65rem;font-weight:700;text-transform:uppercase;letter-spacing:.09em;color:#a8a8be;margin:17px 0 4px}
+  .drm3v-railhead .ct{color:#cfcfe0;font-family:ui-monospace,Menlo,monospace;letter-spacing:0;background:rgba(141,141,163,.14);border-radius:999px;padding:1px 8px}
+  .drm3v-step{display:flex;gap:12px;padding:11px 0;border-top:1px solid #1d1d2c;opacity:.35;transform:translateY(4px);transition:opacity .4s,transform .4s}
+  .drm3v-step.on{opacity:1;transform:none}
+  .drm3v-dot{flex:none;width:22px;height:22px;border-radius:50%;display:flex;align-items:center;justify-content:center;font-size:.7rem;
+    background:#1d1d2c;color:#a8a8be;border:1px solid #2a2a3d}
+  .drm3v-dot svg{width:13px;height:13px}
+  .drm3v-dot.ok{background:#46c98a;color:#0a0a10;border-color:#46c98a}
+  .drm3v-dot.warn{background:rgba(227,162,75,.18);color:#f3d09a;border-color:rgba(227,162,75,.5)}
+  .drm3v-dot.bad{background:#e0556b;color:#fff;border-color:#e0556b}
+  .drm3v-dot.spin{border-top-color:#7fe3b0;animation:drm3v-spin .7s linear infinite}
+  @keyframes drm3v-spin{to{transform:rotate(360deg)}}
+  .drm3v-body{flex:1;min-width:0}
+  .drm3v-act{font-weight:600;font-size:.88rem;color:#fff}
+  .drm3v-meta{font-size:.71rem;color:#a8a8be;margin-top:3px;word-break:break-all;font-family:ui-monospace,Menlo,monospace}
+  .drm3v-detail{margin:8px 0 2px;padding:9px 11px;background:#0e0e16;border:1px solid #1d1d2c;border-radius:9px}
+  .drm3v-kv{display:flex;gap:9px;font-size:.71rem;line-height:1.5;margin:2px 0}
+  .drm3v-kv>span{flex:none;width:56px;color:#a8a8be;text-transform:uppercase;letter-spacing:.05em;font-size:.64rem;font-weight:700;padding-top:2px}
+  .drm3v-kv>b{color:#e8e8f2;font-weight:600;min-width:0;word-break:break-word}
+  .drm3v-kv>code{font-family:ui-monospace,Menlo,monospace;color:#9ff0c4;word-break:break-all;font-size:.7rem}
+  .drm3v-att{margin-top:8px;font-size:.72rem;line-height:1.55;color:#a6a6bd;border-left:2px solid #2a2a3d;padding:1px 0 1px 9px}
+  .drm3v-clinks{display:flex;flex-wrap:wrap;gap:8px;margin-top:9px}
+  .drm3v-clink{font-size:.72rem;font-weight:600;color:#7fe3b0;text-decoration:none;border:1px solid rgba(70,201,138,.32);border-radius:999px;padding:3px 11px;transition:background .14s,border-color .14s;cursor:pointer}
+  .drm3v-clink:hover{background:rgba(70,201,138,.13);border-color:rgba(70,201,138,.5)}
+  .drm3v-dlbtn{display:inline-flex;align-items:center;gap:7px;margin-top:13px;padding:8px 14px;font:inherit;font-size:.78rem;font-weight:600;
+    color:#cfcfe0;background:rgba(141,141,163,.12);border:1px solid #34344a;border-radius:9px;cursor:pointer;transition:border-color .14s,background .14s}
+  .drm3v-dlbtn:hover{border-color:#7fe3b0;color:#9ff0c4;background:rgba(70,201,138,.1)}
+  .drm3v-dlbtn svg{width:14px;height:14px}
+  .drm3v-final{margin-top:16px;padding:16px;border-radius:14px;font-size:.86rem;line-height:1.5}
+  .drm3v-final.ok{background:rgba(70,201,138,.10);border:1px solid rgba(70,201,138,.4);color:#cdeede}
+  .drm3v-final.part{background:rgba(227,162,75,.10);border:1px solid rgba(227,162,75,.4);color:#ecd6ad}
+  .drm3v-final.bad{background:rgba(224,85,107,.10);border:1px solid rgba(224,85,107,.4);color:#f3c0c9}
+  .drm3v-final b{color:#fff}
+  .drm3v-final svg{width:16px;height:16px;vertical-align:-3px;margin-right:4px}
+  .drm3v-counts{display:block;margin-top:8px;font-size:.78rem;font-family:ui-monospace,Menlo,monospace;color:inherit;opacity:.92}`;
+    document.head.appendChild(s);
+  }
+
+  // src/receipts-modal.ts
+  function dlJSON(filename, obj) {
+    const blob = new Blob([JSON.stringify(obj, null, 2)], { type: "application/json" });
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement("a");
+    a.href = url;
+    a.download = filename;
+    a.click();
+    setTimeout(() => URL.revokeObjectURL(url), 1e3);
+  }
+  function appendDownload(host, filename, obj) {
+    if (!obj) return;
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.className = "drm3v-dlbtn";
+    btn.innerHTML = `${DOWNLOAD}<span>Download receipt JSON</span>`;
+    btn.addEventListener("click", () => dlJSON(filename, obj));
+    host.appendChild(btn);
+  }
+  function buildModal(title, subtitle) {
+    injectStyles();
+    const ov = document.createElement("div");
+    ov.className = "drm3v-ov";
+    ov.innerHTML = `<div class="drm3v-modal" role="dialog" aria-label="${esc(title)}">
+    <div class="drm3v-h"><h3>${RECEIPT}${esc(title)}</h3><button class="drm3v-x" aria-label="Close">&times;</button></div>
+    <div class="drm3v-sub">${subtitle}</div>
+    <div class="drm3v-steps"></div>
+    <div class="drm3v-final"></div></div>`;
+    document.body.appendChild(ov);
+    const close = () => ov.remove();
+    ov.addEventListener("click", (e) => {
+      if (e.target === ov) close();
+    });
+    ov.querySelector(".drm3v-x")?.addEventListener("click", close);
+    const onEsc = (e) => {
+      if (e.key === "Escape") {
+        close();
+        document.removeEventListener("keydown", onEsc);
+      }
+    };
+    document.addEventListener("keydown", onEsc);
+    const steps = ov.querySelector(".drm3v-steps");
+    const final = ov.querySelector(".drm3v-final");
+    const addStep = (act, meta, detail) => {
+      const el = document.createElement("div");
+      el.className = "drm3v-step";
+      el.innerHTML = `<div class="drm3v-dot spin"></div><div class="drm3v-body"><div class="drm3v-act">${esc(act)}</div><div class="drm3v-meta">${esc(meta)}</div>${detail || ""}</div>`;
+      steps.appendChild(el);
+      requestAnimationFrame(() => el.classList.add("on"));
+      return el;
+    };
+    const settle = (el, verdict) => {
+      const dot = el.querySelector(".drm3v-dot");
+      if (verdict === VERIFIED) {
+        dot.className = "drm3v-dot ok";
+        dot.innerHTML = CHECK;
+      } else if (verdict === UNVERIFIABLE_NO_ACCESS) {
+        dot.className = "drm3v-dot warn";
+        dot.innerHTML = LOCK;
+      } else {
+        dot.className = "drm3v-dot bad";
+        dot.innerHTML = "&times;";
+      }
+    };
+    const wait = (ms) => new Promise((r) => setTimeout(r, ms));
+    return { ov, steps, final, addStep, settle, wait };
+  }
+  function sealVerdict(final, counts) {
+    if (counts.verified + counts.gated + counts.failed === 0) {
+      final.className = "drm3v-final bad";
+      final.textContent = "No receipts were found to verify.";
+      return;
+    }
+    if (counts.failed > 0) {
+      final.className = "drm3v-final bad";
+      final.innerHTML = `One or more signatures did not verify. That's exactly what provenance is for - it tells you when something doesn't add up.${countsLine(counts)}`;
+    } else if (counts.gated > 0) {
+      final.className = "drm3v-final part";
+      final.innerHTML = `${LOCK} <b>Verified in part.</b> Every receipt you could retrieve carries a valid Ed25519 signature from a registered DRM3 signer, checked right here in your browser. ${counts.gated} upstream step${counts.gated === 1 ? "" : "s"} ${counts.gated === 1 ? "is" : "are"} referenced but not accessible to you - a normal access boundary, not a failure.${countsLine(counts)}`;
+    } else {
+      final.className = "drm3v-final ok";
+      final.innerHTML = `${CHECK} <b>Verified.</b> Every receipt in this chain carries a valid Ed25519 signature from a registered DRM3 signer - checked right here in your browser.${countsLine(counts)}`;
+    }
+  }
+
+  // src/receipts-registry.ts
+  var DEFAULT_REGISTRY_URL = "https://status.drm3.network/.well-known/drm3-keys.json";
+  var registryCache = /* @__PURE__ */ new Map();
+  async function loadRegistry(url = DEFAULT_REGISTRY_URL) {
+    const cached = registryCache.get(url);
+    if (cached) return cached;
+    const map = /* @__PURE__ */ new Map();
+    try {
+      const reg = await (await fetch(url)).json();
+      for (const svc of reg.services || []) {
+        for (const k of svc.current || [])
+          if (k.key) map.set(k.key.toLowerCase(), { status: k.status || "current", valid_from: k.valid_from, valid_until: k.valid_until });
+        for (const k of svc.history || [])
+          if (k.key && !map.has(k.key.toLowerCase()))
+            map.set(k.key.toLowerCase(), { status: k.status || "superseded", valid_from: k.valid_from, valid_until: k.valid_until });
+      }
+      for (const k of reg.keys || []) if (k.key && !map.has(k.key.toLowerCase())) map.set(k.key.toLowerCase(), { status: "current" });
+    } catch {
+    }
+    registryCache.set(url, map);
+    return map;
+  }
+  async function resolveReceipt(id, cfg = {}) {
+    try {
+      const base = cfg.resolverBase || "";
+      const r = await fetch(`${base}/receipts/${encodeURIComponent(id)}`, cfg.headers ? { headers: cfg.headers } : void 0);
+      if (!r.ok) return null;
+      const j = await r.json();
+      return j?.ok && j.receipt ? j : null;
+    } catch {
+      return null;
+    }
+  }
+
+  // src/receipts-api.ts
+  var activeCfg = {};
+  async function openReceiptModal(chain, cfg = activeCfg) {
+    if (typeof document === "undefined") return;
+    registerGlobal(cfg);
+    const { final, addStep, settle, wait } = buildModal(
+      cfg.title || "Provenance receipt",
+      cfg.subtitle || "A signed, content-addressed receipt, verified <b>in your browser</b> against the public key registry. Each leg confirms only the one before it; anything it cannot open, it says so."
+    );
+    if (!await isEd25519Supported()) {
+      final.className = "drm3v-final bad";
+      final.innerHTML = "This browser can't do Ed25519 in the page (try a recent Chrome, Safari, or Firefox). The receipts are still independently verifiable - see <b>status.drm3.network</b>.";
+      return;
+    }
+    if (!chain.length) {
+      final.className = "drm3v-final bad";
+      final.textContent = "No receipts attached.";
+      return;
+    }
+    const registry = await loadRegistry(cfg.registryUrl);
+    const counts = await verifyChainInto(chain, registry, addStep, settle, wait, cfg.contentRef);
+    await wait(200);
+    sealVerdict(final, counts);
+    if (chain.length === 1) appendDownload(final, `receipt-${chain[0].id || "drm3"}.json`, chain[0].receipt_json || chain[0]);
+  }
+  async function openReceiptById(id, cfg = activeCfg) {
+    if (typeof document === "undefined") return;
+    registerGlobal(cfg);
+    const { final, addStep, settle, wait } = buildModal(
+      cfg.title || "Provenance receipt",
+      cfg.subtitle || "Resolved by its content-addressed id and verified <b>in your browser</b> against the public key registry."
+    );
+    if (!await isEd25519Supported()) {
+      final.className = "drm3v-final bad";
+      final.innerHTML = "This browser can't do Ed25519 in the page. The receipt is still independently verifiable - see <b>status.drm3.network</b>.";
+      return;
+    }
+    const resolved = await resolveReceipt(id, cfg);
+    if (!resolved?.receipt) {
+      final.className = "drm3v-final bad";
+      final.textContent = "This receipt isn't retrievable here (it may live on another host, or require access).";
+      return;
+    }
+    const rc = resolved.receipt;
+    const chain = [
+      {
+        id,
+        receipt_json: rc,
+        signature: rc.signature,
+        public_key: rc.public_key,
+        action: rc.action
+      }
+    ];
+    const registry = await loadRegistry(cfg.registryUrl);
+    const counts = await verifyChainInto(chain, registry, addStep, settle, wait, cfg.contentRef);
+    await wait(200);
+    sealVerdict(final, counts);
+    appendDownload(final, `receipt-${id}.json`, rc);
+  }
+  function mountVerifyButton(target, source, cfg = {}) {
+    if (!target || typeof document === "undefined") return;
+    injectStyles();
+    const btn = document.createElement("button");
+    btn.type = "button";
+    btn.className = "drm3v-trigger";
+    btn.innerHTML = `${CHECK}<span>Verify provenance in your browser</span>`;
+    btn.addEventListener("click", async () => {
+      const resolved = typeof source === "function" ? await source() : source;
+      if (typeof resolved === "string") return void openReceiptById(resolved, cfg);
+      const chain = Array.isArray(resolved) ? resolved : [resolved];
+      return void openReceiptModal(chain, cfg);
+    });
+    target.appendChild(btn);
+  }
+  function registerGlobal(cfg) {
+    activeCfg = cfg;
+    if (typeof window === "undefined") return;
+    const w = window;
+    if (!w.drm3Receipts) {
+      try {
+        w.drm3Receipts = { openReceiptById, openReceiptModal, mountVerifyButton };
+      } catch {
+      }
+    }
+  }
+  return __toCommonJS(receipts_exports);
+})();