@drm3/sdk 0.1.2

package/bin/drm3.js

@@ -0,0 +1,255 @@
+#!/usr/bin/env node
+// drm3 - the DRM3 partner CLI. Same capabilities as @drm3/sdk, for a human in a terminal.
+// Zero deps, plain Node >= 20 (WebCrypto Ed25519). Self-contained on purpose: the module
+// source is TypeScript; this bin must run under bare `npx drm3`. The signing discipline
+// (canonicalize + Ed25519 over object-minus-signature) is byte-identical to src/keys.ts
+// and pinned by test/cli.test.ts.
+//
+//   drm3 keys generate [--out FILE]     make a keypair locally (private never leaves you)
+//   drm3 keys csr --subject NAME --key FILE   build the CSR to submit to DRM3
+//   drm3 keys verify RECEIPT.json [--attestation ATT.json] [--root ed25519:HEX]
+//   drm3 keys docs                      the key-signing process, right here
+//   drm3 status                         fleet + key-registry state, live
+//   drm3 keys submit                    send the CSR to DRM3 (public key only)
+//   drm3 partner status --subject NAME  is my certificate issued yet?
+
+import { readFileSync, writeFileSync } from "node:fs";
+import { webcrypto } from "node:crypto";
+const crypto = globalThis.crypto ?? webcrypto;
+
+const CA_BASE = process.env.DRM3_CA_URL || "https://status.drm3.network";
+const REGISTRY = `${CA_BASE}/.well-known/drm3-keys.json`;
+
+// ── shared discipline (mirrors src/keys.ts; pinned by test) ──
+export function canonicalize(obj) {
+  if (obj === null || typeof obj !== "object") return JSON.stringify(obj);
+  if (Array.isArray(obj)) return `[${obj.map(canonicalize).join(",")}]`;
+  const keys = Object.keys(obj).sort();
+  return `{${keys.map((k) => `${JSON.stringify(k)}:${canonicalize(obj[k])}`).join(",")}}`;
+}
+const hex = (b) => [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, "0")).join("");
+const unhex = (s) => new Uint8Array((s.replace(/^ed25519:/, "").match(/../g) || []).map((x) => Number.parseInt(x, 16)));
+const b64 = (b) => Buffer.from(b).toString("base64");
+const enc = new TextEncoder();
+
+async function importVerify(pub) {
+  return crypto.subtle.importKey("raw", unhex(pub), { name: "Ed25519" }, false, ["verify"]);
+}
+async function verifySig(pub, sig, payload) {
+  try {
+    return await crypto.subtle.verify("Ed25519", await importVerify(pub), unhex(sig), enc.encode(payload));
+  } catch {
+    return false;
+  }
+}
+
+function out(s) {
+  process.stdout.write(`${s}\n`);
+}
+function die(s) {
+  process.stderr.write(`drm3: ${s}\n`);
+  process.exit(1);
+}
+function arg(flags, name, fallback) {
+  const i = flags.indexOf(name);
+  return i >= 0 && flags[i + 1] ? flags[i + 1] : fallback;
+}
+
+async function keysGenerate(flags) {
+  const kp = await crypto.subtle.generateKey({ name: "Ed25519" }, true, ["sign", "verify"]);
+  const pub = `ed25519:${hex(await crypto.subtle.exportKey("raw", kp.publicKey))}`;
+  const priv = b64(await crypto.subtle.exportKey("pkcs8", kp.privateKey));
+  const outFile = arg(flags, "--out");
+  const record = { schema: "drm3-signing-key/1", public_key: pub, private_key_pkcs8: priv, generated_at: new Date().toISOString() };
+  if (outFile) {
+    writeFileSync(outFile, `${JSON.stringify(record, null, 2)}\n`, { mode: 0o600 });
+    out(`public key   ${pub}`);
+    out(`private key  written to ${outFile} (mode 0600). Keep it. DRM3 never needs it.`);
+  } else {
+    out(JSON.stringify(record, null, 2));
+    out("\nShown once. Store the private key yourself; only the public key ever goes to DRM3.");
+  }
+}
+
+async function keysCsr(flags) {
+  const subject = arg(flags, "--subject") || die("--subject NAME is required");
+  const keyFile = arg(flags, "--key") || die("--key FILE (from `drm3 keys generate --out FILE`) is required");
+  const rec = JSON.parse(readFileSync(keyFile, "utf8"));
+  const priv = await crypto.subtle.importKey("pkcs8", Buffer.from(rec.private_key_pkcs8, "base64"), { name: "Ed25519" }, false, ["sign"]);
+  const unsigned = {
+    schema: "drm3-csr/1",
+    subject,
+    subject_key: rec.public_key,
+    purposes: (arg(flags, "--purposes", "receipt.sign")).split(","),
+    requested_valid_days: Number(arg(flags, "--days", "365")),
+    nonce: hex(crypto.getRandomValues(new Uint8Array(16))),
+    signed_at: new Date().toISOString(),
+  };
+  const sig = new Uint8Array(await crypto.subtle.sign("Ed25519", priv, enc.encode(canonicalize(unsigned))));
+  out(JSON.stringify({ ...unsigned, signature: `ed25519:${hex(sig)}` }, null, 2));
+  out("\nSubmit this CSR from your verified partner account. Your private key was not included.");
+}
+
+async function keysVerify(flags, positional) {
+  const receiptFile = positional[0] || die("usage: drm3 keys verify RECEIPT.json [--attestation ATT.json] [--root KEY]");
+  const r = JSON.parse(readFileSync(receiptFile, "utf8"));
+  const payload = canonicalize({
+    id: r.id, action: r.action, timestamp: r.timestamp, input_hash: r.input_hash,
+    output_hash: r.output_hash, cost: r.cost, duration_ms: r.duration_ms,
+    parent_id: r.parent_id, metadata: r.metadata, public_key: r.public_key,
+  });
+  const sigOk = r.public_key && r.signature && (await verifySig(r.public_key, r.signature, payload));
+  if (!sigOk) die("FAILED: receipt signature does not verify");
+  out("receipt signature      OK");
+  const attFile = arg(flags, "--attestation");
+  if (!attFile) {
+    // No cert supplied: check the live registry for the key's status, grade honestly.
+    try {
+      const reg = await (await fetch(REGISTRY)).json();
+      const all = (reg.services || []).flatMap((s) => [...(s.current || []), ...(s.history || [])]);
+      const rec = all.find((k) => (k.key || "").toLowerCase() === r.public_key.toLowerCase());
+      if (rec) {
+        out(`registry status        ${rec.status}${rec.path ? ` (${rec.path})` : ""}`);
+        if (rec.status === "compromised" || rec.status === "revoked") die("FAILED: key status is untrusted");
+      } else out("registry status        key not found in the DRM3 registry");
+    } catch {
+      out("registry status        unreachable (offline?)");
+    }
+    out("grade                  unanchored (no issuer attestation supplied)");
+    return;
+  }
+  const att = JSON.parse(readFileSync(attFile, "utf8"));
+  const { signature, ...unsignedAtt } = att;
+  const root = arg(flags, "--root");
+  if (root && att.issuer.toLowerCase() !== root.toLowerCase()) die("FAILED: attestation issuer is not the expected root");
+  if (!(await verifySig(att.issuer, signature, canonicalize(unsignedAtt)))) die("FAILED: attestation signature");
+  if (!(att.subject_keys || []).some((k) => k.key.toLowerCase() === r.public_key.toLowerCase()))
+    die("FAILED: receipt key is not covered by the attestation");
+  out("issuer attestation     OK");
+  out("grade                  root-anchored");
+}
+
+/** drm3 keys submit --subject NAME --key FILE - build the CSR and send it to the CA. */
+async function keysSubmit(flags) {
+  const subject = arg(flags, "--subject") || die("--subject NAME is required");
+  const keyFile = arg(flags, "--key") || die("--key FILE is required");
+  const rec = JSON.parse(readFileSync(keyFile, "utf8"));
+  const priv = await crypto.subtle.importKey("pkcs8", Buffer.from(rec.private_key_pkcs8, "base64"), { name: "Ed25519" }, false, ["sign"]);
+  const unsigned = {
+    schema: "drm3-csr/1",
+    subject,
+    subject_key: rec.public_key,
+    purposes: (arg(flags, "--purposes", "receipt.sign")).split(","),
+    requested_valid_days: Number(arg(flags, "--days", "365")),
+    nonce: hex(crypto.getRandomValues(new Uint8Array(16))),
+    signed_at: new Date().toISOString(),
+  };
+  const sig = new Uint8Array(await crypto.subtle.sign("Ed25519", priv, enc.encode(canonicalize(unsigned))));
+  const csr = { ...unsigned, signature: `ed25519:${hex(sig)}` };
+  const r = await fetch(`${CA_BASE}/v1/ca/csr`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(csr),
+  }).catch((e) => die(`could not reach the CA: ${e?.message || e}`));
+  const d = await r.json().catch(() => ({}));
+  if (!r.ok) die(`${r.status}: ${d.error || "the CA refused the request"}`);
+  out(`request id             ${d.request_id}`);
+  out(`subject                ${d.subject}`);
+  out(`status                 ${String(d.status || "").toUpperCase()}`);
+  out("");
+  out(d.note || "");
+  out("");
+  out(`Check it with:  drm3 partner status --subject ${subject}`);
+  out("Your private key was NOT sent. Only the public half left this machine.");
+}
+
+function keysDocs() {
+  out(`The DRM3 key-signing process (DRM3 is the Certificate Authority)
+
+  1. GENERATE   drm3 keys generate --out mykey.json
+                An Ed25519 keypair is created on YOUR machine. The private key
+                never leaves you. DRM3 never sees it, ever.
+
+  2. REQUEST    drm3 keys csr --subject your-app --key mykey.json
+                Builds a certificate signing request: your PUBLIC key plus what
+                it is for, self-signed so DRM3 can prove you hold the private key.
+
+  3. VERIFY     DRM3 confirms you are an approved partner (a human reviews) and
+                checks the CSR self-signature.
+
+  4. CERTIFY    DRM3 issues a certificate (drm3-issuer-attestation/1) signed by
+                the DRM3 Root, binding your key to your name, valid ~12 months.
+
+  5. PUBLISH    Your key joins the public tree and registry. Anyone can verify
+                receipts you sign chain back to a key DRM3 vouched for.
+
+  Roll:   generate a new key, submit a new CSR. Old certs stay valid for their
+          window, so history keeps verifying.
+  Revoke: tell DRM3 (or we detect compromise); the registry marks it within
+          minutes. Verifiers refuse it from then on.
+
+  A certificate proves WHO signed and THAT it was not altered. It never proves a
+  signed statement is true. Full practice statement: drm3-provenance
+  docs/specs/CERTIFICATE-PRACTICE-STATEMENT.md`);
+}
+
+async function status() {
+  try {
+    const reg = await (await fetch(REGISTRY)).json();
+    const services = reg.services || [];
+    const cur = services.reduce((n, s) => n + (s.current || []).length, 0);
+    const ri = reg.registry_integrity || {};
+    out(`registry               ${services.length} signers, ${cur} live keys`);
+    out(`registry signed        ${ri.signed ? `yes (root ${String(ri.root_key || "").slice(0, 26)}…)` : "no (content hash only)"}`);
+    out(`published              ${reg.published_at || "?"}`);
+  } catch (e) {
+    die(`could not reach ${REGISTRY}: ${e?.message || e}`);
+  }
+}
+
+/** drm3 partner status --subject NAME - is my certificate issued yet? */
+async function partnerStatus(flags) {
+  const subject = arg(flags, "--subject") || die("usage: drm3 partner status --subject NAME");
+  try {
+    const r = await fetch(`${CA_BASE}/v1/ca/cert/${encodeURIComponent(subject)}`);
+    const d = await r.json().catch(() => ({}));
+    if (r.ok && d.schema) {
+      const k = (d.subject_keys || [])[0] || {};
+      out(`subject                ${d.service}`);
+      out("status                 CERTIFIED");
+      out(`certified key          ${k.key || "?"}`);
+      out(`issued                 ${d.issued_at || "?"}`);
+      out(`valid until            ${k.expected_valid_until || "?"}`);
+      out(`issuer (DRM3 Root)     ${d.issuer || "?"}`);
+      return;
+    }
+    out(`subject                ${subject}`);
+    out(`status                 ${(d.status || "not found").toUpperCase()}`);
+    out(`                       ${d.note || "No certificate is published for this subject."}`);
+  } catch (e) {
+    die(`could not reach the CA: ${e?.message || e}`);
+  }
+}
+
+const [, , cmd, sub, ...rest] = process.argv;
+const flags = [sub, ...rest].filter(Boolean);
+const positional = flags.filter((f, i) => !f.startsWith("--") && (i === 0 || !flags[i - 1].startsWith("--")));
+const run = async () => {
+  if (cmd === "keys" && sub === "generate") return keysGenerate(rest);
+  if (cmd === "keys" && sub === "csr") return keysCsr(rest);
+  if (cmd === "keys" && sub === "verify") return keysVerify(rest, rest.filter((f, i) => !f.startsWith("--") && (i === 0 || !rest[i - 1].startsWith("--"))));
+  if (cmd === "keys" && sub === "submit") return keysSubmit(rest);
+  if (cmd === "keys" && sub === "docs") return keysDocs();
+  if (cmd === "status") return status();
+  if (cmd === "partner" && sub === "status") return partnerStatus(rest);
+  out(`drm3 - the DRM3 partner CLI
+
+  drm3 keys generate [--out FILE]
+  drm3 keys csr --subject NAME --key FILE [--purposes a,b] [--days N]
+  drm3 keys submit --subject NAME --key FILE     build the CSR and send it to DRM3
+  drm3 keys verify RECEIPT.json [--attestation ATT.json] [--root ed25519:HEX]
+  drm3 keys docs
+  drm3 status
+  drm3 partner status --subject NAME`);
+};
+run().catch((e) => die(e?.message || String(e)));

package/dist/alerts-bell.d.ts

@@ -0,0 +1,7 @@
+import { type AlertsOptions } from "./alerts-fetch.js";
+/**
+ * Mount the DRM3 alerts bell into `target`. Signed-in-only: the first feed fetch
+ * doubles as the auth probe, and any failure leaves the target empty (fail closed).
+ */
+export declare function mountAlertsBell(target: HTMLElement | null, opts?: AlertsOptions): void;
+//# sourceMappingURL=alerts-bell.d.ts.map

package/dist/alerts-bell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-bell.d.ts","sourceRoot":"","sources":["../src/alerts-bell.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,KAAK,aAAa,EAA0D,MAAM,mBAAmB,CAAC;AAG/H;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,EAAE,IAAI,GAAE,aAAkB,GAAG,IAAI,CAU1F"}

package/dist/alerts-bell.js

@@ -0,0 +1,118 @@
+// @drm3/sdk/alerts - the bell UI: mountAlertsBell + buildBell + rendering.
+// Split out of ./alerts; re-exported by the barrel. Moved verbatim from ./alerts.
+import { esc, fetchAlerts, hubOf, safeLink, sortNewest, timeAgo } from "./alerts-fetch.js";
+import { BELL_SVG, KIND_DOTS, injectStyles } from "./alerts-styles.js";
+/**
+ * Mount the DRM3 alerts bell into `target`. Signed-in-only: the first feed fetch
+ * doubles as the auth probe, and any failure leaves the target empty (fail closed).
+ */
+export function mountAlertsBell(target, opts = {}) {
+    if (!target || typeof document === "undefined")
+        return;
+    if (opts.authed === false) {
+        target.replaceChildren();
+        return;
+    }
+    void fetchAlerts(opts).then((d) => {
+        if (d)
+            buildBell(target, opts, d);
+        else
+            target.replaceChildren();
+    });
+}
+function buildBell(target, opts, initial) {
+    injectStyles();
+    const hub = hubOf(opts);
+    target.classList.add("drm3al");
+    target.innerHTML = `<button class="drm3al-btn" type="button" aria-label="Alerts" aria-haspopup="true" aria-expanded="false">${BELL_SVG}<span class="drm3al-badge" hidden></span></button>
+<div class="drm3al-panel" role="menu" aria-label="Alerts">
+  <div class="drm3al-h">Alerts</div>
+  <div class="drm3al-list"></div>
+  <div class="drm3al-foot"><a href="${esc(hub)}/account?tab=alerts">All alerts &rarr;</a></div>
+</div>`;
+    const btn = target.querySelector(".drm3al-btn");
+    const badge = target.querySelector(".drm3al-badge");
+    const list = target.querySelector(".drm3al-list");
+    let alerts = sortNewest(initial.alerts);
+    const setUnread = (n) => {
+        badge.hidden = n <= 0;
+        badge.textContent = n > 9 ? "9+" : String(n);
+        opts.onCount?.(n);
+    };
+    const row = (a) => {
+        const dot = KIND_DOTS[a.kind] || KIND_DOTS.info;
+        const link = safeLink(a.link);
+        const body = a.body ? `<div class="drm3al-b">${esc(a.body)}</div>` : "";
+        const inner = `<span class="drm3al-dot" style="background:${dot}"></span><div class="drm3al-c"><div class="drm3al-t">${esc(a.title || "")}</div>${body}<div class="drm3al-ago">${esc(timeAgo(a.created_at))}</div></div>`;
+        const cls = `drm3al-row${a.read ? "" : " drm3al-unread"}`;
+        return link ? `<a class="${cls}" href="${esc(link)}">${inner}</a>` : `<div class="${cls}">${inner}</div>`;
+    };
+    const render = () => {
+        list.innerHTML = alerts.length ? alerts.map(row).join("") : `<div class="drm3al-empty">No alerts.</div>`;
+    };
+    // Quiet background refresh: update badge + list without touching read state. A
+    // transient failure (or a dropped session) keeps the current view rather than
+    // flashing it away.
+    const refresh = async () => {
+        const d = await fetchAlerts(opts);
+        if (!d)
+            return;
+        alerts = sortNewest(d.alerts);
+        setUnread(d.unread);
+        if (target.getAttribute("data-open") === "1")
+            render();
+    };
+    const markAllRead = async () => {
+        try {
+            await fetch(`${hub}/api/sso/alerts/read`, {
+                method: "POST",
+                credentials: "include",
+                headers: { "content-type": "application/json", ...(opts.ssoToken ? { authorization: `Bearer ${opts.ssoToken}` } : {}) },
+                body: JSON.stringify({ all: true }),
+            });
+        }
+        catch {
+            /* best effort; the hub reconciles on the next feed read */
+        }
+    };
+    const close = () => {
+        target.removeAttribute("data-open");
+        btn.setAttribute("aria-expanded", "false");
+    };
+    // Opening acknowledges the feed: the badge clears immediately, but rows keep
+    // their unread highlight for this open (the local flags flip after the paint).
+    const open = async () => {
+        target.setAttribute("data-open", "1");
+        btn.setAttribute("aria-expanded", "true");
+        render(); // instant paint from cache
+        const d = await fetchAlerts(opts); // re-fetch on open
+        if (d) {
+            alerts = sortNewest(d.alerts);
+            render();
+        }
+        void markAllRead();
+        setUnread(0);
+        for (const a of alerts)
+            a.read = true;
+    };
+    btn.addEventListener("click", (e) => {
+        e.stopPropagation();
+        if (target.getAttribute("data-open") === "1")
+            return close();
+        void open();
+    });
+    document.addEventListener("click", (e) => {
+        if (!target.contains(e.target))
+            close();
+    });
+    document.addEventListener("keydown", (e) => {
+        if (e.key === "Escape")
+            close();
+    });
+    setUnread(initial.unread);
+    render();
+    const pollMs = opts.pollMs ?? 120000;
+    if (pollMs > 0)
+        setInterval(() => void refresh(), pollMs);
+}
+//# sourceMappingURL=alerts-bell.js.map

package/dist/alerts-bell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-bell.js","sourceRoot":"","sources":["../src/alerts-bell.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,kFAAkF;AAClF,OAAO,EAAsC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC/H,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B,EAAE,OAAsB,EAAE;IAClF,IAAI,CAAC,MAAM,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;;YAC7B,MAAM,CAAC,eAAe,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAAmB,EAAE,IAAmB,EAAE,OAAgD;IAC3G,YAAY,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,CAAC,SAAS,GAAG,2GAA2G,QAAQ;;;;sCAIlG,GAAG,CAAC,GAAG,CAAC;OACvC,CAAC;IACN,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,aAAa,CAAsB,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,eAAe,CAAgB,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,cAAc,CAAgB,CAAC;IAEjE,IAAI,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAQ,EAAE;QACpC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,CAAY,EAAU,EAAE;QACnC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,8CAA8C,GAAG,wDAAwD,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,IAAI,2BAA2B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC;QAC1N,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,GAAG,KAAK,KAAK,QAAQ,CAAC;IAC5G,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC;IAC3G,CAAC,CAAC;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,oBAAoB;IACpB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9B,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,GAAG;YAAE,MAAM,EAAE,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,GAAG,sBAAsB,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACvH,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,CAAC,2BAA2B;QACrC,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB;QACtD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC;QACX,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;QACnB,SAAS,CAAC,CAAC,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;IACxC,CAAC,CAAC;IAEF,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,CAAC,CAAC,eAAe,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,EAAE,CAAC;QAC7D,KAAK,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAc,CAAC;YAAE,KAAK,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACzC,IAAK,CAAmB,CAAC,GAAG,KAAK,QAAQ;YAAE,KAAK,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC;QAAE,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC"}

package/dist/alerts-fetch.d.ts

@@ -0,0 +1,41 @@
+export interface AlertItem {
+    id: string;
+    /** "info" | "success" | "warning" | "critical". Unknown kinds fall back to info styling. */
+    kind: string;
+    title: string;
+    body?: string | null;
+    link?: string | null;
+    created_at?: string;
+    read?: boolean;
+}
+export interface AlertsOptions {
+    /** DRM3 account hub origin. Default https://drm3.network. */
+    hub?: string;
+    /** Optional `drm3_sso` token sent as a Bearer; otherwise the hub reads the session cookie. */
+    ssoToken?: string;
+    /**
+     * Whether the current user is signed in to DRM3. Pass `false` to render nothing.
+     * `true` or omitted tries the feed, and any failure (incl. a 401) renders nothing,
+     * so omitting it is always safe (fails closed).
+     */
+    authed?: boolean;
+    /** Background refresh interval in ms. Default 120000 (2 min); 0 disables it. */
+    pollMs?: number;
+    /** Called with the unread count on every update, for host UIs that render their own badge. */
+    onCount?: (unread: number) => void;
+}
+export declare function esc(s: string): string;
+export declare function safeLink(link?: string | null): string;
+export declare function timeAgo(iso?: string): string;
+export declare function sortNewest(list: AlertItem[]): AlertItem[];
+export declare function hubOf(opts: AlertsOptions): string;
+/**
+ * The signed-in user's platform alerts + unread count from the DRM3 account hub.
+ * Pass the `drm3_sso` token (Bearer) if you have it; otherwise the hub reads the cookie.
+ * Returns null on any error or non-200 (incl. a 401 when signed out) - never throws.
+ */
+export declare function fetchAlerts(opts?: AlertsOptions): Promise<{
+    alerts: AlertItem[];
+    unread: number;
+} | null>;
+//# sourceMappingURL=alerts-fetch.d.ts.map

package/dist/alerts-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-fetch.d.ts","sourceRoot":"","sources":["../src/alerts-fetch.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAErC;AAGD,wBAAgB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGrD;AAED,wBAAgB,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAS5C;AAGD,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAEzD;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAEjD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAcnH"}

package/dist/alerts-fetch.js

@@ -0,0 +1,60 @@
+// @drm3/sdk/alerts - the signed-in alerts feed client plus the shared option types
+// and the time/link/escape helpers. Split out of ./alerts; imported by ./alerts-bell
+// and re-exported by the barrel. Moved verbatim from ./alerts.
+//
+// The default hub mirrors ACCOUNT_HUB in ./index.
+const DEFAULT_HUB = "https://drm3.network";
+export function esc(s) {
+    return String(s).replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
+}
+// Only http(s) or site-relative links may become an href; anything else is dropped.
+export function safeLink(link) {
+    const l = String(link || "");
+    return /^https?:\/\//i.test(l) || l.startsWith("/") ? l : "";
+}
+export function timeAgo(iso) {
+    if (!iso)
+        return "";
+    const t = new Date(iso).getTime();
+    if (Number.isNaN(t))
+        return "";
+    const s = Math.max(0, (Date.now() - t) / 1000);
+    if (s < 60)
+        return "just now";
+    if (s < 3600)
+        return `${Math.floor(s / 60)}m ago`;
+    if (s < 86400)
+        return `${Math.floor(s / 3600)}h ago`;
+    return `${Math.floor(s / 86400)}d ago`;
+}
+// Newest first. ISO timestamps sort lexicographically; missing ones sink to the bottom.
+export function sortNewest(list) {
+    return [...list].sort((a, b) => String(b.created_at || "").localeCompare(String(a.created_at || "")));
+}
+export function hubOf(opts) {
+    return (opts.hub || DEFAULT_HUB).replace(/\/+$/, "");
+}
+/**
+ * The signed-in user's platform alerts + unread count from the DRM3 account hub.
+ * Pass the `drm3_sso` token (Bearer) if you have it; otherwise the hub reads the cookie.
+ * Returns null on any error or non-200 (incl. a 401 when signed out) - never throws.
+ */
+export async function fetchAlerts(opts = {}) {
+    try {
+        const r = await fetch(`${hubOf(opts)}/api/sso/alerts`, {
+            credentials: "include",
+            headers: opts.ssoToken ? { authorization: `Bearer ${opts.ssoToken}` } : undefined,
+        });
+        if (!r.ok)
+            return null;
+        const d = (await r.json());
+        if (!Array.isArray(d.alerts))
+            return null;
+        const unread = typeof d.unread === "number" ? d.unread : d.alerts.filter((a) => !a.read).length;
+        return { alerts: d.alerts, unread };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=alerts-fetch.js.map

package/dist/alerts-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-fetch.js","sourceRoot":"","sources":["../src/alerts-fetch.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,qFAAqF;AACrF,+DAA+D;AAC/D,EAAE;AACF,kDAAkD;AAClD,MAAM,WAAW,GAAG,sBAAsB,CAAC;AA+B3C,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AACvH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,QAAQ,CAAC,IAAoB;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7B,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,UAAU,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAClD,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAmB;IACvC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB,EAAE;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACrD,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA8C,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAChG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/alerts-styles.d.ts

@@ -0,0 +1,4 @@
+export declare const KIND_DOTS: Record<string, string>;
+export declare const BELL_SVG = "<svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M6 8a6 6 0 0 1 12 0c0 7 3 9 3 9H3s3-2 3-9\"/><path d=\"M10.3 21a1.94 1.94 0 0 0 3.4 0\"/></svg>";
+export declare function injectStyles(): void;
+//# sourceMappingURL=alerts-styles.d.ts.map

package/dist/alerts-styles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-styles.d.ts","sourceRoot":"","sources":["../src/alerts-styles.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAK5C,CAAC;AAEF,eAAO,MAAM,QAAQ,0QAAwP,CAAC;AAG9Q,wBAAgB,YAAY,IAAI,IAAI,CAiCnC"}

package/dist/alerts-styles.js

@@ -0,0 +1,49 @@
+// @drm3/sdk/alerts - injected scoped styles (.drm3al* namespace), the bell SVG, and
+// the kind accents. Split out of ./alerts so the barrel stays thin; imported by
+// ./alerts-bell. Moved verbatim from ./alerts.
+// Kind accents: dot colors on the dark panel. Accents only - row text stays light
+// (#f2f6fa / #9fb1c4 on #0f1318) so every text surface holds WCAG AA 4.5:1.
+export const KIND_DOTS = {
+    info: "#60a5fa",
+    success: "#4ade80",
+    warning: "#fbbf24",
+    critical: "#f87171",
+};
+export const BELL_SVG = `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M6 8a6 6 0 0 1 12 0c0 7 3 9 3 9H3s3-2 3-9"/><path d="M10.3 21a1.94 1.94 0 0 0 3.4 0"/></svg>`;
+// styles (injected once)
+export function injectStyles() {
+    if (typeof document === "undefined" || document.getElementById("drm3al-css"))
+        return;
+    const s = document.createElement("style");
+    s.id = "drm3al-css";
+    s.textContent = `
+.drm3al{position:relative;display:inline-block;font-family:ui-sans-serif,system-ui,sans-serif}
+.drm3al-btn{position:relative;display:grid;place-items:center;width:38px;height:38px;border:0;border-radius:10px;
+  background:transparent;color:inherit;cursor:pointer;opacity:.8}
+.drm3al-btn:hover{opacity:1;background:rgba(127,127,127,.12)}
+.drm3al-btn svg{width:20px;height:20px}
+.drm3al-badge{position:absolute;top:2px;right:2px;min-width:16px;height:16px;padding:0 4px;border-radius:999px;
+  background:#dc2626;color:#fff;font-size:10px;font-weight:700;line-height:16px;text-align:center;pointer-events:none}
+.drm3al-panel{position:absolute;right:0;top:46px;width:340px;max-height:70vh;overflow-y:auto;z-index:9999;
+  background:#0f1318;border:1px solid #1c2530;border-radius:14px;box-shadow:0 18px 50px rgba(0,0,0,.5);
+  display:none;color:#f2f6fa;text-align:left}
+.drm3al[data-open="1"] .drm3al-panel{display:block}
+.drm3al-h{padding:12px 14px 6px;font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.08em;color:#9fb1c4}
+.drm3al-list{padding:0 6px 6px}
+.drm3al-row{display:flex;gap:10px;align-items:flex-start;padding:10px 8px;border-radius:10px;text-decoration:none;color:inherit}
+.drm3al-row+.drm3al-row{margin-top:2px}
+a.drm3al-row:hover{background:#161e28}
+.drm3al-unread{background:rgba(96,165,250,.08)}
+.drm3al-dot{flex:none;width:8px;height:8px;border-radius:50%;margin-top:5px}
+.drm3al-c{flex:1;min-width:0}
+.drm3al-t{font-size:13px;font-weight:600;color:#f2f6fa;line-height:1.35;word-break:break-word}
+.drm3al-b{font-size:12px;color:#9fb1c4;line-height:1.45;margin-top:2px;word-break:break-word}
+.drm3al-ago{font-size:11px;color:#9fb1c4;margin-top:3px}
+.drm3al-empty{padding:18px 14px 22px;color:#9fb1c4;font-size:12px}
+.drm3al-foot{padding:10px 14px;border-top:1px solid #1c2530}
+.drm3al-foot a{color:#7aa7d6;font-size:12px;text-decoration:none}
+.drm3al-foot a:hover{text-decoration:underline}
+@media (max-width:479px){.drm3al-panel{position:fixed;left:10px;right:10px;top:64px;width:auto;max-height:calc(100vh - 84px)}}`;
+    document.head.appendChild(s);
+}
+//# sourceMappingURL=alerts-styles.js.map

package/dist/alerts-styles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-styles.js","sourceRoot":"","sources":["../src/alerts-styles.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gFAAgF;AAChF,+CAA+C;AAE/C,kFAAkF;AAClF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,SAAS,GAA2B;IAC/C,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,qPAAqP,CAAC;AAE9Q,yBAAyB;AACzB,MAAM,UAAU,YAAY;IAC1B,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC;QAAE,OAAO;IACrF,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,EAAE,GAAG,YAAY,CAAC;IACpB,CAAC,CAAC,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;+HA2B6G,CAAC;IAC9H,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/alerts.d.ts

@@ -0,0 +1,3 @@
+export { type AlertItem, type AlertsOptions, fetchAlerts } from "./alerts-fetch.js";
+export { mountAlertsBell } from "./alerts-bell.js";
+//# sourceMappingURL=alerts.d.ts.map

package/dist/alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../src/alerts.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}