create-astram-app 0.12.10 → 0.13.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-astram-app",
-  "version": "0.12.10",
+  "version": "0.13.1",
   "license": "MIT",
   "description": "Scaffolder for a new Astram app — emits a running, framework-enforced NestJS server (deny-by-default, built-in auth/identity to switch on) and, with --with-frontend, a React admin/auth UI, over the immutable @astram/* framework packages.",
   "type": "module",

package/template/frontend/package.json

@@ -12,7 +12,7 @@
     "test": "node scripts/run-tests.mjs"
   },
   "dependencies": {
-    "@astram/frontend-core": "^0.9.0",
+    "@astram/frontend-core": "^0.10.0",
     "@astram/sdk": "^0.2.1",
     "@radix-ui/react-alert-dialog": "^1.1.19",
     "@radix-ui/react-avatar": "^1.1.10",

package/template/frontend/src/auth/AuthContext.jsx

@@ -17,6 +17,7 @@ import {
   createAuthService,
   createCrossTenantService,
   createIdentityService,
+  createNotificationService,
   createRecordPolicyService,
   createRecordShareService,
   createSecurityPolicyService,
@@ -117,6 +118,9 @@ export function AuthProvider({ children }) {
       // their `ask_…` API keys (the raw key is revealed once on issue/rotate).
       serviceAccounts: createServiceAccountService(http),
       account: createAccountService(http),
+      // In-app notices (G-027): the header bell and Announcements menus and their unread counts
+      // (`/account/notifications`; shell/useNotificationCounts.js polls the counts).
+      notifications: createNotificationService(http),
       // The @astram/sdk ShieldClient (Phase E slice 1) — a UX-convenience projection of
       // the caller's OWN coarse grants, fetched once per session via `getAuthFacts`.
       // Built once, so every session boundary calls `shield.reset()` (establishSession,
@@ -147,6 +151,7 @@ export function AuthProvider({ children }) {
     recordShare,
     serviceAccounts,
     account,
+    notifications,
     shield,
     store,
     rawAuth,
@@ -450,6 +455,8 @@ export function AuthProvider({ children }) {
       // The shared self-scoped account service (change-password today; profile/MFA
       // later) — same injected web http client.
       account,
+      // The shared notification service (list / unread count / mark read; G-027) — same client.
+      notifications,
       // The @astram/sdk ShieldClient (Phase E slice 1) — exposed for any page that needs
       // direct access (e.g. a forced re-fetch). Most call sites should prefer `useCan`.
       shield,
@@ -483,6 +490,7 @@ export function AuthProvider({ children }) {
       recordShare,
       serviceAccounts,
       account,
+      notifications,
       shield,
       profile,
       mustReenroll,