@notiblast/web 0.3.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cilsy Fiolution
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,239 @@
+# @notiblast/web
+
+<img src="https://app.notiblast.com/apple-touch-icon.png" alt="" width="72" height="72">
+
+Official web push SDK for [NotiBlast](https://notiblast.com). Send notifications to your web
+app's users — they arrive even when your site is closed.
+
+![3 kB](https://img.shields.io/badge/size-3%20kB-informational)
+![Frameworks](https://img.shields.io/badge/React%20%C2%B7%20Vue%20%C2%B7%20Angular%20%C2%B7%20Svelte-informational)
+![TypeScript](https://img.shields.io/badge/TypeScript-informational)
+![MIT](https://img.shields.io/badge/license-MIT-informational)
+
+---
+
+## Install
+
+```bash
+npm install @notiblast/web
+npx notiblast init
+```
+
+`npx notiblast init` copies the service worker into your public folder (`public`, `static`, `www`,
+`assets`). Use `--dir <folder>` if yours is named differently.
+
+It must be reachable at `https://your-site.com/notiblast-sw.js` — **at the root**. A service worker
+only controls the folder it sits in.
+
+## Use
+
+```ts
+import { init, promptAndSubscribe, identify, permission } from '@notiblast/web'
+
+// once, at startup
+init({
+  appId: 'YOUR_APP_ID',
+  firebase: { apiKey: '…', projectId: '…', messagingSenderId: '…', appId: '…' },
+  vapidKey: 'YOUR_WEB_PUSH_CERTIFICATE',
+  externalUserId: user?.id,     // leave undefined while nobody is logged in
+  prompt: {
+    message: 'Turn on notifications to hear about new cards as they happen.',
+    accept: 'Turn on',
+    cancel: 'Not now',
+    icon: 'https://cdn.your-site.com/icon.png',
+  },
+})
+
+// behind a button — never on page load
+const { outcome, deviceId } = await promptAndSubscribe()
+
+// when the user logs in or out
+await identify(user.id)
+await identify(null)
+```
+
+Find `appId` in the [NotiBlast dashboard](https://app.notiblast.com) → Push Apps → app detail.
+`firebase` and `vapidKey` come from your Firebase project: **Project settings → General → Your
+apps → Web app** for the config, **Cloud Messaging → Web Push certificates** for the key. Both are
+public by design — safe to ship in your bundle.
+
+Example with React:
+
+```tsx
+import { useEffect, useState } from 'react'
+import { permission, promptAndSubscribe, subscribe } from '@notiblast/web'
+
+export function NotificationButton() {
+  const [status, setStatus] = useState(permission())
+
+  useEffect(() => {
+    if (permission() !== 'default') void subscribe()   // refresh the token, or report a revoked permission
+  }, [])
+
+  if (status !== 'default') return null
+
+  return (
+    <button
+      onClick={async () => {
+        const { outcome } = await promptAndSubscribe()
+        setStatus(outcome === 'dismissed' ? 'default' : outcome)
+      }}
+    >
+      Notify me about new cards
+    </button>
+  )
+}
+```
+
+Vue, Angular and Svelte work the same way — only where you call `init()` differs.
+
+## The permission prompt
+
+The browser's own dialog can only be shown **once per site, ever**. Ask the wrong person at the
+wrong moment and you lose them permanently.
+
+So `promptAndSubscribe()` shows a soft prompt of its own first — a bar that slides down from the
+top — and only calls the browser when the visitor says yes:
+
+```
+┌──────────────────────────────────────────────────────┐
+│ 🔔  Turn on notifications to hear about new    │
+│     cards as they happen.        Not now  [ Turn on ]│
+└──────────────────────────────────────────────────────┘
+```
+
+Someone who dismisses the soft prompt can be asked again another day. Someone who dismisses the
+browser dialog cannot.
+
+Configure it in `init({ prompt })`, or pass it per call:
+
+```ts
+const accepted = await showPrompt({ message: '…', accept: 'Turn on', cancel: 'Not now' })
+if (accepted) await subscribe()
+```
+
+| Option | Default |
+| --- | --- |
+| `message` | "Stay in the loop — turn on notifications to get updates as they happen." |
+| `accept` | "Allow" |
+| `cancel` | "Not now" |
+| `icon` | none — the icon is simply left out |
+| `theme` | `'auto'` — follows the visitor's system. Force it with `'light'` or `'dark'` |
+
+It renders in a **closed shadow root**, so your CSS cannot break it and its CSS cannot leak into
+your page. It stacks on narrow screens and closes on Escape.
+
+By default it follows the visitor's system theme. If your site is always light or always dark,
+say so — otherwise the prompt will look out of place for half your visitors:
+
+```ts
+init({ appId: '…', prompt: { theme: 'light' } })
+```
+
+`promptAndSubscribe()` skips the soft prompt when permission is no longer `'default'` — already
+granted needs no asking, and already denied cannot be undone by asking again.
+
+⚠️ The `icon` URL is fetched by the browser and **fails silently**. If it returns HTML instead of
+an image, you get a broken-image box. Make sure the `content-type` is `image/*`.
+
+## API
+
+```ts
+init(options: {
+  appId
+  firebase               // your Firebase web app config
+  vapidKey               // Firebase → Cloud Messaging → Web Push certificates
+  apiUrl?
+  externalUserId?        // undefined = keep the current link · null = unlink
+  serviceWorkerPath?     // default '/notiblast-sw.js'
+  serviceWorkerScope?    // default: the worker's own folder
+  prompt?                // { message?, accept?, cancel?, icon?, theme? }
+}): void
+promptAndSubscribe(): Promise<{ outcome, deviceId, step?, reason? }>
+subscribe(): Promise<{ outcome, deviceId, step?, reason? }>
+showPrompt(options?): Promise<boolean>
+identify(externalUserId: string | null): Promise<string | null>
+unsubscribe(): Promise<void>
+permission(): NotificationPermission | 'unsupported'
+isSupported(): Promise<boolean>
+```
+
+| `outcome` | Meaning |
+| --- | --- |
+| `granted` | Subscribed. `deviceId` is set |
+| `denied` | Declined — do not offer again |
+| `dismissed` | Prompt closed without choosing. You may offer again later |
+| `unsupported` | This browser has no push support |
+| `error` | Something broke. `step` and `reason` say what |
+
+`unsubscribe()` stops NotiBlast from targeting this browser. Calling `subscribe()` again turns it
+back on — so after an unsubscribe, stop calling `subscribe()` on load until the visitor opts in again.
+
+## Five things that fail silently
+
+**Never ask on page load.** The browser lets you ask once, ever. Put `promptAndSubscribe()` behind
+a button or a deliberate moment — never in a `useEffect` that runs on mount.
+
+**Call `subscribe()` on every app load** once permission is no longer `'default'` — `subscribe()`,
+not `promptAndSubscribe()`. It shows no prompt. When granted it refreshes the token; when denied it
+tells NotiBlast the visitor revoked permission. Skip this and devices stop receiving one day, with
+no error anywhere.
+
+**`externalUserId: null` is not "nobody yet".** `null` unlinks the device from its user; leaving it
+out keeps the existing link. Pass `null` on page load and every visitor is logged out of their
+notifications each time they open your site.
+
+**Re-copy the service worker after `npm update`.** `public/notiblast-sw.js` is a copy. Add
+`"prebuild": "notiblast check"` to fail the build when it falls behind.
+
+**Another service worker at the same scope wins.** A scope can only have one active worker, so
+registering ours at `/` replaces an existing PWA or Workbox worker. If your site already has one,
+keep them apart:
+
+```ts
+init({ appId: '…', serviceWorkerPath: '/notiblast/notiblast-sw.js', serviceWorkerScope: '/notiblast/' })
+```
+
+```bash
+npx notiblast init --dir public/notiblast
+```
+
+Push works from any scope — a subscription belongs to the registration, not to the page.
+
+**iOS needs Home Screen.** In a normal Safari tab web push does not exist. Only after Share → Add to
+Home Screen. Check with `await isSupported()`, never the user agent.
+
+## Sending
+
+From your server, with an API key: `POST /v1/push/send`. Web-only options go in the `web` block,
+passed to Firebase as-is:
+
+```json
+{
+  "push_app_id": "YOUR_APP_ID",
+  "title": "New comment",
+  "body": "Budi mentioned you",
+  "target": { "type": "external_id", "external_ids": ["usr_88213"] },
+  "web": {
+    "notification": { "icon": "https://…/avatar.png", "tag": "card-42", "requireInteraction": true },
+    "fcm_options": { "link": "https://your-site.com/cards/42" }
+  }
+}
+```
+
+| Want | Set |
+| --- | --- |
+| Open a page on click | `web.fcm_options.link` — **https only**. Otherwise `data.url` |
+| Replace instead of stack | `web.notification.tag` — same tag, one notification |
+| Stay until dismissed | `web.notification.requireInteraction: true` |
+| Small icon | `web.notification.icon` |
+
+## Requirements
+
+Node 20+ · ESM bundler (Vite 4+, webpack 5+, Rollup 3+) · **HTTPS** (`localhost` is fine)
+
+Chrome, Edge, Firefox, Opera · Safari macOS 16.4+ · Safari iOS 16.4+ (Home Screen only)
+
+## License
+
+MIT © Cilsy Fiolution

package/bin/notiblast.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+import { copyFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs'
+import { dirname, join, relative, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const SOURCE = resolve(HERE, '../service-worker/notiblast-sw.js')
+const FILENAME = 'notiblast-sw.js'
+const CANDIDATES = ['public', 'static', 'www', 'assets']
+
+const { version } = JSON.parse(readFileSync(resolve(HERE, '../package.json'), 'utf8'))
+
+function say(line = '') {
+  console.log(line)
+}
+
+function fail(message, hint) {
+  console.error(`\n✗ ${message}`)
+  if (hint) console.error(`  ${hint}`)
+  console.error('')
+  process.exit(1)
+}
+
+function findPublicDir(explicit) {
+  if (explicit) return resolve(process.cwd(), explicit)
+
+  const found = CANDIDATES.find((name) => existsSync(join(process.cwd(), name)))
+  if (found) return join(process.cwd(), found)
+
+  return null
+}
+
+function init(explicit, apiUrl) {
+  if (apiUrl) say('\n  --api-url is no longer needed: the service worker never calls the API. Ignoring it.')
+
+  const target = findPublicDir(explicit)
+
+  if (!target) {
+    fail(
+      'Could not find a public folder.',
+      `Looked for: ${CANDIDATES.join(', ')}. Name it yourself: npx notiblast init --dir <folder>`,
+    )
+  }
+
+  mkdirSync(target, { recursive: true })
+  const destination = join(target, FILENAME)
+
+  copyFileSync(SOURCE, destination)
+
+  const shown = relative(process.cwd(), destination) || destination
+
+  say(`\n✓ ${FILENAME} v${version} copied to ${shown}`)
+  say('')
+  say('  Make sure it is reachable at https://your-site.com/notiblast-sw.js')
+  say('  It must be at the site root — a service worker only controls the folder it sits in.')
+  say('')
+}
+
+function check(explicit) {
+  const target = findPublicDir(explicit)
+  const destination = target ? join(target, FILENAME) : null
+
+  if (!destination || !existsSync(destination)) {
+    fail(`${FILENAME} is not in your public folder.`, 'Run: npx notiblast init')
+  }
+
+  const installed = readFileSync(destination, 'utf8')
+  const shown = relative(process.cwd(), destination)
+
+  if (installed === readFileSync(SOURCE, 'utf8')) {
+    say(`\n✓ ${shown} matches package v${version}\n`)
+    return
+  }
+
+  fail(
+    `${shown} differs from package v${version}.`,
+    'Re-copy it: npx notiblast init',
+  )
+}
+
+const [command, ...rest] = process.argv.slice(2)
+const flag = (name) => {
+  const at = rest.indexOf(name)
+  return at === -1 ? null : rest[at + 1]
+}
+
+const explicit = flag('--dir')
+
+if (command === 'init') init(explicit, flag('--api-url'))
+else if (command === 'check') check(explicit)
+else {
+  say(`\nnotiblast v${version}`)
+  say('')
+  say('  npx notiblast init [--dir public]')
+  say('      copy the service worker into your public folder')
+  say('  npx notiblast check [--dir public]    verify that copy still matches')
+  say('')
+  process.exit(command ? 1 : 0)
+}

package/dist/index.d.ts

@@ -0,0 +1,52 @@
+type PromptTheme = 'auto' | 'light' | 'dark';
+interface PromptOptions {
+    message?: string;
+    accept?: string;
+    cancel?: string;
+    icon?: string;
+    theme?: PromptTheme;
+}
+interface FirebaseWebConfig {
+    apiKey: string;
+    authDomain?: string;
+    projectId: string;
+    storageBucket?: string;
+    messagingSenderId: string;
+    appId: string;
+    measurementId?: string;
+}
+interface NotiblastOptions {
+    appId: string;
+    firebase: FirebaseWebConfig;
+    vapidKey: string;
+    apiUrl?: string;
+    externalUserId?: string | null;
+    serviceWorkerPath?: string;
+    serviceWorkerScope?: string;
+    prompt?: PromptOptions;
+}
+type PermissionOutcome = 'granted' | 'denied' | 'dismissed' | 'unsupported';
+type SubscribeOutcome = PermissionOutcome | 'error';
+type FailureStep = 'service-worker' | 'token' | 'register';
+interface SubscribeResult {
+    outcome: SubscribeOutcome;
+    deviceId: string | null;
+    step?: FailureStep;
+    reason?: string;
+}
+type ReleaseAction = 'logout' | 'unsubscribe' | 'permission_denied';
+
+declare function isPromptOpen(): boolean;
+declare function showPrompt(options?: PromptOptions): Promise<boolean>;
+
+declare const SDK_VERSION = "0.3.1";
+
+declare function init(next: NotiblastOptions): void;
+declare function identify(externalUserId: string | null): Promise<string | null>;
+declare function unsubscribe(): Promise<void>;
+declare function isSupported(): Promise<boolean>;
+declare function permission(): NotificationPermission | 'unsupported';
+declare function promptAndSubscribe(): Promise<SubscribeResult>;
+declare function subscribe(): Promise<SubscribeResult>;
+
+export { type FailureStep, type FirebaseWebConfig, type NotiblastOptions, type PermissionOutcome, type PromptOptions, type PromptTheme, type ReleaseAction, SDK_VERSION, type SubscribeOutcome, type SubscribeResult, identify, init, isPromptOpen, isSupported, permission, promptAndSubscribe, showPrompt, subscribe, unsubscribe };

package/dist/index.js

@@ -0,0 +1,59 @@
+import {initializeApp}from'firebase/app';import {isSupported,getMessaging,getToken}from'firebase/messaging';var V=[["Windows",/Windows NT ([\d.]+)/],["Android",/Android ([\d.]+)/],["iOS",/(?:iPhone|iPad|iPod).*? OS ([\d_]+)/],["macOS",/Mac OS X ([\d_.]+)/],["ChromeOS",/CrOS \S+ ([\d.]+)/],["Linux",/Linux/]];function O(e){for(let[t,n]of V){let o=e.match(n);if(!o)continue;let r=o[1]?.replace(/_/g,".").slice(0,32)??null;return {name:t,version:r}}return {name:null,version:null}}async function P(e,t){return fetch(e,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(t)})}async function R(e){try{return await e.json()}catch{return {}}}function F(e,t){let n=O(t),o={push_app_id:e.appId,token:e.token,platform:"web",os_name:n.name,os_version:n.version};return e.externalUserId!==void 0&&(o.external_id=e.externalUserId),o}async function v(e,t){let n=await P(`${e}/v1/push/devices`,F(t,navigator.userAgent)),o=await R(n);if(!n.ok)throw new Error(o.message??`HTTP ${n.status}`);let r=o.data?._id;if(!r)throw new Error("The server answered without a device id");return r}async function N(e,t){let n=await P(`${e}/v1/push/devices/release`,{push_app_id:t.appId,token:t.token,action:t.action});if(n.ok)return;let o=await R(n);throw new Error(o.message??`HTTP ${n.status}`)}function _(e){return e?new Promise(t=>{let n=new MessageChannel,o=setTimeout(()=>r(null),1e3);function r(a){clearTimeout(o),n.port1.close(),t(a);}n.port1.onmessage=a=>{let i=a.data;r(i?.type==="notiblast:version"?i.version??null:null);},e.postMessage("notiblast:version",[n.port2]);}):Promise.resolve(null)}var T="notiblast-prompt",C={message:"Stay in the loop \u2014 turn on notifications to get updates as they happen.",accept:"Allow",cancel:"Not now",theme:"auto"},j=`
+:host { all: initial }
+.wrap {
+  position: fixed;
+  top: 0; left: 0; right: 0;
+  display: flex; justify-content: center;
+  z-index: 2147483647;
+  pointer-events: none;
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+}
+.card {
+  --bg: #fff;
+  --fg: #1f2430;
+  --muted: #5b6478;
+  --accent: #2f6fed;
+  --accent-hover: #2a62d4;
+  --accent-fg: #fff;
+
+  pointer-events: auto;
+  display: flex; align-items: center; gap: 14px;
+  max-width: 520px; width: calc(100% - 24px);
+  margin: 12px;
+  padding: 14px 16px;
+  background: var(--bg); color: var(--fg);
+  border-radius: 12px;
+  box-shadow: 0 8px 28px rgba(0, 0, 0, .18);
+  transform: translateY(-140%);
+  transition: transform .28s cubic-bezier(.2, .8, .3, 1);
+}
+.card.dark {
+  --bg: #1f2430;
+  --fg: #eef1f7;
+  --muted: #9aa4ba;
+}
+@media (prefers-color-scheme: dark) {
+  .card.auto {
+    --bg: #1f2430;
+    --fg: #eef1f7;
+    --muted: #9aa4ba;
+  }
+}
+.card.in { transform: translateY(0) }
+img { width: 40px; height: 40px; border-radius: 8px; flex: none; object-fit: cover }
+p { margin: 0; flex: 1; font-size: 14px; line-height: 1.45 }
+.actions { display: flex; align-items: center; gap: 8px; flex: none }
+button {
+  font: inherit; font-size: 14px; font-weight: 600;
+  border: 0; border-radius: 8px; padding: 9px 16px; cursor: pointer;
+}
+.cancel { background: transparent; color: var(--muted) }
+.cancel:hover { color: var(--fg) }
+.accept { background: var(--accent); color: var(--accent-fg) }
+.accept:hover { background: var(--accent-hover) }
+@media (max-width: 520px) {
+  .card { flex-wrap: wrap }
+  .actions { width: 100%; justify-content: flex-end }
+}
+`;function A(){return !!document.getElementById(T)}function W(e={}){if(typeof document>"u"||A())return Promise.resolve(false);let t={...C,...e};return new Promise(n=>{let o=document.createElement("div");o.id=T;let r=o.attachShadow({mode:"closed"}),a=document.createElement("style");a.textContent=j;let i=document.createElement("div");i.className="wrap";let s=document.createElement("div");if(s.className=`card ${t.theme}`,s.setAttribute("role","dialog"),s.setAttribute("aria-live","polite"),e.icon){let c=document.createElement("img");c.src=e.icon,c.alt="",s.append(c);}let S=document.createElement("p");S.textContent=t.message;let m=document.createElement("div");m.className="actions";let u=document.createElement("button");u.className="cancel",u.textContent=t.cancel;let l=document.createElement("button");l.className="accept",l.textContent=t.accept,m.append(u,l),s.append(S,m),i.append(s),r.append(a,i),document.body.append(o),requestAnimationFrame(()=>s.classList.add("in"));function g(c){document.removeEventListener("keydown",E),s.classList.remove("in"),setTimeout(()=>o.remove(),280),n(c);}function E(c){c.key==="Escape"&&g(false);}u.addEventListener("click",()=>g(false)),l.addEventListener("click",()=>g(true)),document.addEventListener("keydown",E),l.focus();})}function b(e){return `notiblast:${e}:token`}function w(e){try{return localStorage.getItem(b(e))}catch{return null}}function D(e,t){try{localStorage.setItem(b(e),t);}catch{return}}function y(e){try{localStorage.removeItem(b(e));}catch{return}}var x="0.3.1";function H(e,t){return t?t===e?"ok":"stale":"unknown"}function L(e,t){return H(e,t)==="ok"?null:[`notiblast: your service worker is version ${t??"unknown"}, the package is ${e}.`,"Re-copy it: npx notiblast init"].join(" ")}var K="https://primaryapi.notiblast.com",Y="/notiblast-sw.js",d=null,p=null;function ge(e){if(!e.appId||!e.firebase||!e.vapidKey)throw new Error("notiblast: init() needs appId, firebase and vapidKey");d={apiUrl:K,...e};}function f(){if(!d)throw new Error("notiblast: call init() first");return d}function k(e){return e.apiUrl??K}async function h(e,t,n){await N(k(e),{appId:e.appId,token:t,action:n});}async function ve(e){let t=f();if(d={...t,externalUserId:e},!p)return null;try{return e===null?(await h(t,p,"logout"),null):await v(k(t),{appId:t.appId,token:p,externalUserId:e})}catch(n){return console.error(`notiblast: identify failed \u2014 ${I(n)}`),null}}async function be(){let e=f(),t=p??w(e.appId);t&&(await h(e,t,"unsubscribe"),y(e.appId),p=null);}async function M(){return typeof window>"u"||!("serviceWorker"in navigator)||!("Notification"in window)?false:isSupported()}function G(){return typeof window>"u"||!("Notification"in window)?"unsupported":Notification.permission}async function we(){let e=f();return await M()?G()!=="default"||await W(e.prompt)?U():{outcome:"dismissed",deviceId:null}:{outcome:"unsupported",deviceId:null}}async function U(){let e=f();if(!await M())return {outcome:"unsupported",deviceId:null};let t=await Q();if(t==="denied"&&await J(e),t!=="granted")return {outcome:t,deviceId:null};let n="service-worker";try{let o=await navigator.serviceWorker.register(e.serviceWorkerPath??Y,e.serviceWorkerScope?{scope:e.serviceWorkerScope}:void 0);await navigator.serviceWorker.ready;let r=L(x,await _(o.active??navigator.serviceWorker.controller));r&&console.warn(r),n="token";let a=getMessaging(initializeApp(e.firebase,`notiblast-${e.appId}`)),i=await getToken(a,{vapidKey:e.vapidKey,serviceWorkerRegistration:o});if(!i)return $("token","Firebase returned no token");p=i,n="register";let s=await v(k(e),{appId:e.appId,token:i,externalUserId:e.externalUserId});return D(e.appId,i),{outcome:"granted",deviceId:s}}catch(o){return $(n,I(o))}}async function J(e){let t=w(e.appId);if(t)try{await h(e,t,"permission_denied"),y(e.appId);}catch(n){console.error(`notiblast: could not report the revoked permission \u2014 ${I(n)}`);}}function I(e){return e instanceof Error?e.message:String(e)}function $(e,t){return console.error(`notiblast: failed at step "${e}" \u2014 ${t}`),{outcome:"error",deviceId:null,step:e,reason:t}}async function Q(){if(Notification.permission==="granted")return "granted";if(Notification.permission==="denied")return "denied";let e=await Notification.requestPermission();return e==="granted"?"granted":e==="denied"?"denied":"dismissed"}
+export{x as SDK_VERSION,ve as identify,ge as init,A as isPromptOpen,M as isSupported,G as permission,we as promptAndSubscribe,W as showPrompt,U as subscribe,be as unsubscribe};

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@notiblast/web",
+  "version": "0.3.1",
+  "description": "Official web push SDK for NotiBlast. Send notifications to your web app's users, even when your site is closed.",
+  "type": "module",
+  "license": "MIT",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "service-worker"
+  ],
+  "bin": {
+    "notiblast": "./bin/notiblast.js"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./service-worker": "./service-worker/notiblast-sw.js"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepare": "npm run build",
+    "prepublishOnly": "npm run typecheck && npm run test"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  },
+  "dependencies": {
+    "firebase": "^12.19.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "push",
+    "notification",
+    "web-push",
+    "fcm",
+    "notiblast"
+  ],
+  "author": "Cilsy Fiolution",
+  "repository": {
+    "type": "git",
+    "url": "git+https://gitlab.com/bitaplikasi-public/notiblast/notiblast-web.git"
+  },
+  "homepage": "https://gitlab.com/bitaplikasi-public/notiblast/notiblast-web"
+}

package/service-worker/notiblast-sw.js

@@ -0,0 +1 @@
+(function(){'use strict';function c(n){return n?.url??null}function u(n,t){return n.find(i=>i.url===t)??null}function r(n){return typeof n=="object"&&n!==null?n:{}}function e(n){return typeof n=="string"&&n.length>0?n:void 0}function f(n){return n===true||n==="true"||n==="1"}function d(n){if(typeof n!="object"||n===null)return null;let t=n,i=r(t.notification),o=r(t.data),y=r(t.fcmOptions),s=e(i.title)??e(o.title);if(!s)return null;let a=e(i.tag)??e(o.tag),l=i.renotify??o.renotify;return {title:s,body:e(i.body)??e(o.body),icon:e(i.icon)??e(o.icon),image:e(i.image)??e(o.image_url),url:e(y.link)??e(i.click_action)??e(o.url),tag:a,renotify:a?l===void 0||f(l):false,requireInteraction:f(i.requireInteraction??o.require_interaction)}}function p(n){return {body:n.body??"",icon:n.icon,image:n.image,tag:n.tag,renotify:!!(n.tag&&n.renotify),requireInteraction:!!n.requireInteraction,data:n}}var g="0.3.1";self.addEventListener("install",()=>self.skipWaiting());self.addEventListener("message",n=>{if(n.data!=="notiblast:version")return;let t={type:"notiblast:version",version:g},i=n.ports[0];if(i){i.postMessage(t);return}n.source?.postMessage(t);});self.addEventListener("activate",n=>{n.waitUntil(self.clients.claim());});self.addEventListener("push",n=>{if(!n.data)return;let t=null;try{t=d(n.data.json());}catch{return}t&&n.waitUntil(self.registration.showNotification(t.title,p(t)));});self.addEventListener("notificationclick",n=>{n.notification.close();let t=c(n.notification.data??null);t&&n.waitUntil((async()=>{let i=await self.clients.matchAll({type:"window",includeUncontrolled:true}),o=u(i,t);if(o){await o.focus();return}await self.clients.openWindow(t);})());});})();