@seatlayer/js 0.47.2 → 0.48.0

package/dist/index.d.cts

@@ -1,7 +1,7 @@
 import { PickerSeat, RendererViewMode, SeatHoverDetails, PickerTransport, PickerMapTheme } from '@seatlayer/core';
 export { ExpandedSeat, SeatHoverDetails } from '@seatlayer/core';
-import { C as ChannelListResult, a as ChannelAllocationPage, b as ChannelRecord, A as AssignmentResult, c as ChannelPreviewProjection, d as ChannelAccessIntent, e as AccessLinkReveal, f as AccessLinkStatusRecord, g as ChannelSeatStatus, B as BucketRow } from './manager-CAIPkUYl.cjs';
-export { h as ACCESS_LINK_DEFAULTS, i as AccessIntentForbidsDetails, j as AccessLinkRecord, k as AccessLinkState, l as AccessLinkStatus, m as ArchiveBlockedDetails, n as AssignmentBuckets, o as AssignmentDropDetails, p as ChannelAccessSummary, q as ChannelAuditEntry, r as ChannelAuditPage, s as ChannelCounts, t as ChannelState, u as ControlRoomActivityEntry, v as ControlRoomSectionMetric, w as ControlRoomSnapshot, I as IntentSwitchBlockedDetails, L as LogEntry, x as LogPage, M as ManageApi, y as ManageApiError, P as PUBLIC_CHANNEL_ID, z as PUBLIC_CHANNEL_NAME, R as ReportByStatus, D as ReportCategoryMeta, E as ReportCategoryRow, F as ReportResult, S as SeatManager, G as SeatManagerActionResult, H as SeatManagerActivity, J as SeatManagerCapability, K as SeatManagerConnection, N as SeatManagerMode, O as SeatManagerOptions, Q as SeatManagerTallies, T as SelectionSourceRow, U as accessIntentDescription, V as accessIntentLabel, W as accessLine, X as accessLinkBadge, Y as accessLinkErrorCopy, Z as accessLinkIsLive, _ as accessLinkPolicyLines, $ as bucketRows, a0 as dropReviewRows, a1 as intentForbidsCopy, a2 as intentSwitchBlockedCopy, a3 as isPublicChannelId, a4 as markerLetter, a5 as markerOf, a6 as mutationCount, a7 as needsMoveConfirmation, a8 as planAssignment, a9 as retryAfterCopy, aa as selectionSources, ab as stateBadge, ac as suggestMarker } from './manager-CAIPkUYl.cjs';
+import { C as ChannelListResult, a as ChannelAllocationPage, b as ChannelRecord, A as AssignmentResult, c as ChannelPreviewProjection, d as ChannelAccessIntent, e as AccessLinkReveal, f as AccessLinkStatusRecord, g as ChannelSeatStatus, B as BucketRow } from './manager-DEjbKiqJ.cjs';
+export { h as ACCESS_LINK_DEFAULTS, i as AccessIntentForbidsDetails, j as AccessLinkRecord, k as AccessLinkState, l as AccessLinkStatus, m as ArchiveBlockedDetails, n as AssignmentBuckets, o as AssignmentDropDetails, p as ChannelAccessSummary, q as ChannelAttribution, r as ChannelAuditEntry, s as ChannelAuditPage, t as ChannelCounts, u as ChannelReport, v as ChannelReportLinkRecord, w as ChannelReportLinkReveal, x as ChannelReportResult, y as ChannelReportRow, z as ChannelState, D as ControlRoomActivityEntry, E as ControlRoomSectionMetric, F as ControlRoomSnapshot, I as IntentSwitchBlockedDetails, G as InventoryBooking, H as InventoryBookingActivity, J as InventoryBookingDetail, K as InventoryBookingObject, L as InventoryBookingState, M as InventoryBookingsPage, N as InventoryBookingsQuery, O as LogEntry, P as LogPage, Q as ManageApi, R as ManageApiError, S as PUBLIC_CHANNEL_ID, T as PUBLIC_CHANNEL_NAME, U as ReportByStatus, V as ReportCategoryMeta, W as ReportCategoryRow, X as ReportResult, Y as SeatManager, Z as SeatManagerActionResult, _ as SeatManagerActivity, $ as SeatManagerCapability, a0 as SeatManagerConnection, a1 as SeatManagerMode, a2 as SeatManagerOptions, a3 as SeatManagerTallies, a4 as SelectionSourceRow, a5 as accessIntentDescription, a6 as accessIntentLabel, a7 as accessLine, a8 as accessLinkBadge, a9 as accessLinkErrorCopy, aa as accessLinkIsLive, ab as accessLinkPolicyLines, ac as bucketRows, ad as dropReviewRows, ae as intentForbidsCopy, af as intentSwitchBlockedCopy, ag as isPublicChannelId, ah as markerLetter, ai as markerOf, aj as mutationCount, ak as needsMoveConfirmation, al as planAssignment, am as retryAfterCopy, an as selectionSources, ao as stateBadge, ap as suggestMarker } from './manager-DEjbKiqJ.cjs';
 
 /**
  * Buyer access context — the browser half of the Sales Channels contract
@@ -369,8 +369,10 @@ interface ControllerSinkOptions {
 declare function createControllerSink(controller: PickerControllerLike, options?: ControllerSinkOptions): RealtimeSink;
 
 /**
- * Minimal client for the public embed surface of workers/api (the `/pub/*`
- * routes). Deliberately self-contained — it does NOT reuse src/lib/api.ts,
+ * Minimal client for the browser embed surface of workers/api (the `/pub/*`
+ * routes). Platform events bind this client to a buyer access context; Managed
+ * public/unlisted events may still use it anonymously. Deliberately
+ * self-contained — it does NOT reuse src/lib/api.ts,
  * which bakes in a build-time API base and dashboard session credentials. The
  * SDK runs cross-origin on a third-party ticketing page, so:
  *   - apiBase is per-instance (constructor option), not a build constant;
@@ -1371,6 +1373,13 @@ interface SeatPickerOptions {
      * owns hold persistence and supplies initialHoldId itself.
      */
     restoreHold?: boolean;
+    /**
+     * Render the real chart and live seat statuses without allowing selection,
+     * holds or checkout. This is for venue previews and pre-sale Website pages;
+     * it is enforced by the widget even if the event later opens while mounted.
+     * Default false.
+     */
+    readOnly?: boolean;
     /**
      * Confirm mode: tapping a seat shows a confirmation card with section, row,
      * seat, category, price and Select/Cancel before it enters the tray. Default
@@ -1522,6 +1531,8 @@ interface SeatPickerOptions {
 declare class SeatPicker {
     private readonly opts;
     private readonly api;
+    /** Authenticated view media, cached only for this picker lifetime. */
+    private readonly buyerAssetUrls;
     /** Our own public client, or null when the host injected a transport. */
     private readonly pubApi;
     /** Null for the ordinary public picker — the tokenless path is untouched. */
@@ -1615,6 +1626,8 @@ declare class SeatPicker {
     private secCardEl;
     private viewEl;
     private viewCleanup;
+    /** Supersedes an older authored-view byte request when another seat is opened. */
+    private seatViewGen;
     private allSeatsCache;
     private miniCanvas;
     private miniBase;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { PickerSeat, RendererViewMode, SeatHoverDetails, PickerTransport, PickerMapTheme } from '@seatlayer/core';
 export { ExpandedSeat, SeatHoverDetails } from '@seatlayer/core';
-import { C as ChannelListResult, a as ChannelAllocationPage, b as ChannelRecord, A as AssignmentResult, c as ChannelPreviewProjection, d as ChannelAccessIntent, e as AccessLinkReveal, f as AccessLinkStatusRecord, g as ChannelSeatStatus, B as BucketRow } from './manager-CAIPkUYl.js';
-export { h as ACCESS_LINK_DEFAULTS, i as AccessIntentForbidsDetails, j as AccessLinkRecord, k as AccessLinkState, l as AccessLinkStatus, m as ArchiveBlockedDetails, n as AssignmentBuckets, o as AssignmentDropDetails, p as ChannelAccessSummary, q as ChannelAuditEntry, r as ChannelAuditPage, s as ChannelCounts, t as ChannelState, u as ControlRoomActivityEntry, v as ControlRoomSectionMetric, w as ControlRoomSnapshot, I as IntentSwitchBlockedDetails, L as LogEntry, x as LogPage, M as ManageApi, y as ManageApiError, P as PUBLIC_CHANNEL_ID, z as PUBLIC_CHANNEL_NAME, R as ReportByStatus, D as ReportCategoryMeta, E as ReportCategoryRow, F as ReportResult, S as SeatManager, G as SeatManagerActionResult, H as SeatManagerActivity, J as SeatManagerCapability, K as SeatManagerConnection, N as SeatManagerMode, O as SeatManagerOptions, Q as SeatManagerTallies, T as SelectionSourceRow, U as accessIntentDescription, V as accessIntentLabel, W as accessLine, X as accessLinkBadge, Y as accessLinkErrorCopy, Z as accessLinkIsLive, _ as accessLinkPolicyLines, $ as bucketRows, a0 as dropReviewRows, a1 as intentForbidsCopy, a2 as intentSwitchBlockedCopy, a3 as isPublicChannelId, a4 as markerLetter, a5 as markerOf, a6 as mutationCount, a7 as needsMoveConfirmation, a8 as planAssignment, a9 as retryAfterCopy, aa as selectionSources, ab as stateBadge, ac as suggestMarker } from './manager-CAIPkUYl.js';
+import { C as ChannelListResult, a as ChannelAllocationPage, b as ChannelRecord, A as AssignmentResult, c as ChannelPreviewProjection, d as ChannelAccessIntent, e as AccessLinkReveal, f as AccessLinkStatusRecord, g as ChannelSeatStatus, B as BucketRow } from './manager-DEjbKiqJ.js';
+export { h as ACCESS_LINK_DEFAULTS, i as AccessIntentForbidsDetails, j as AccessLinkRecord, k as AccessLinkState, l as AccessLinkStatus, m as ArchiveBlockedDetails, n as AssignmentBuckets, o as AssignmentDropDetails, p as ChannelAccessSummary, q as ChannelAttribution, r as ChannelAuditEntry, s as ChannelAuditPage, t as ChannelCounts, u as ChannelReport, v as ChannelReportLinkRecord, w as ChannelReportLinkReveal, x as ChannelReportResult, y as ChannelReportRow, z as ChannelState, D as ControlRoomActivityEntry, E as ControlRoomSectionMetric, F as ControlRoomSnapshot, I as IntentSwitchBlockedDetails, G as InventoryBooking, H as InventoryBookingActivity, J as InventoryBookingDetail, K as InventoryBookingObject, L as InventoryBookingState, M as InventoryBookingsPage, N as InventoryBookingsQuery, O as LogEntry, P as LogPage, Q as ManageApi, R as ManageApiError, S as PUBLIC_CHANNEL_ID, T as PUBLIC_CHANNEL_NAME, U as ReportByStatus, V as ReportCategoryMeta, W as ReportCategoryRow, X as ReportResult, Y as SeatManager, Z as SeatManagerActionResult, _ as SeatManagerActivity, $ as SeatManagerCapability, a0 as SeatManagerConnection, a1 as SeatManagerMode, a2 as SeatManagerOptions, a3 as SeatManagerTallies, a4 as SelectionSourceRow, a5 as accessIntentDescription, a6 as accessIntentLabel, a7 as accessLine, a8 as accessLinkBadge, a9 as accessLinkErrorCopy, aa as accessLinkIsLive, ab as accessLinkPolicyLines, ac as bucketRows, ad as dropReviewRows, ae as intentForbidsCopy, af as intentSwitchBlockedCopy, ag as isPublicChannelId, ah as markerLetter, ai as markerOf, aj as mutationCount, ak as needsMoveConfirmation, al as planAssignment, am as retryAfterCopy, an as selectionSources, ao as stateBadge, ap as suggestMarker } from './manager-DEjbKiqJ.js';
 
 /**
  * Buyer access context — the browser half of the Sales Channels contract
@@ -369,8 +369,10 @@ interface ControllerSinkOptions {
 declare function createControllerSink(controller: PickerControllerLike, options?: ControllerSinkOptions): RealtimeSink;
 
 /**
- * Minimal client for the public embed surface of workers/api (the `/pub/*`
- * routes). Deliberately self-contained — it does NOT reuse src/lib/api.ts,
+ * Minimal client for the browser embed surface of workers/api (the `/pub/*`
+ * routes). Platform events bind this client to a buyer access context; Managed
+ * public/unlisted events may still use it anonymously. Deliberately
+ * self-contained — it does NOT reuse src/lib/api.ts,
  * which bakes in a build-time API base and dashboard session credentials. The
  * SDK runs cross-origin on a third-party ticketing page, so:
  *   - apiBase is per-instance (constructor option), not a build constant;
@@ -1371,6 +1373,13 @@ interface SeatPickerOptions {
      * owns hold persistence and supplies initialHoldId itself.
      */
     restoreHold?: boolean;
+    /**
+     * Render the real chart and live seat statuses without allowing selection,
+     * holds or checkout. This is for venue previews and pre-sale Website pages;
+     * it is enforced by the widget even if the event later opens while mounted.
+     * Default false.
+     */
+    readOnly?: boolean;
     /**
      * Confirm mode: tapping a seat shows a confirmation card with section, row,
      * seat, category, price and Select/Cancel before it enters the tray. Default
@@ -1522,6 +1531,8 @@ interface SeatPickerOptions {
 declare class SeatPicker {
     private readonly opts;
     private readonly api;
+    /** Authenticated view media, cached only for this picker lifetime. */
+    private readonly buyerAssetUrls;
     /** Our own public client, or null when the host injected a transport. */
     private readonly pubApi;
     /** Null for the ordinary public picker — the tokenless path is untouched. */
@@ -1615,6 +1626,8 @@ declare class SeatPicker {
     private secCardEl;
     private viewEl;
     private viewCleanup;
+    /** Supersedes an older authored-view byte request when another seat is opened. */
+    private seatViewGen;
     private allSeatsCache;
     private miniCanvas;
     private miniBase;

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   SeatManager
-} from "./chunk-CF5MS7UR.js";
+} from "./chunk-Q5QT3YLA.js";
 import {
   ACCESS_LINK_DEFAULTS,
   ChannelsMode,
@@ -28,11 +28,11 @@ import {
   selectionSources,
   stateBadge,
   suggestMarker
-} from "./chunk-DMEFXZIL.js";
+} from "./chunk-KNMZQZXR.js";
 import {
   ManageApi,
   ManageApiError
-} from "./chunk-X2R4AQSZ.js";
+} from "./chunk-H4OJF6LE.js";
 import {
   __privateAdd,
   __privateGet,
@@ -524,9 +524,54 @@ var PubApi = class {
     }
     return data;
   }
+  /**
+   * Binary counterpart to `request`. Buyer media needs the same in-memory
+   * bearer/refresh rules as JSON, but returns bytes that the picker turns into
+   * a blob URL. The bearer stays in the Authorization header and is never
+   * appended to `path`.
+   */
+  async requestBlob(path, retried = {}) {
+    const headers = {};
+    const authorization = await this.access?.authorization(retried.auth ? "unauthorized" : "initial");
+    if (authorization) headers.Authorization = authorization;
+    const res = await fetch(`${this.base}${path}`, { method: "GET", headers, credentials: "omit" });
+    if (res.ok) return res.blob();
+    const isJson = (res.headers.get("content-type") ?? "").includes("application/json");
+    const data = isJson ? await res.json().catch(() => null) : null;
+    const code = data?.code ?? data?.error;
+    if (this.access?.configured && (res.status === 401 || res.status === 403 || res.status === 422)) {
+      const refreshed = await this.access.handleFailure(res.status, code);
+      if (refreshed && !retried.auth) return this.requestBlob(path, { ...retried, auth: true });
+    }
+    let retryAfterS;
+    if (res.status === 429) {
+      retryAfterS = parseRetryAfter(res.headers.get("Retry-After"), data?.retryAfterSeconds) ?? DEFAULT_RATE_LIMIT_WAIT_S;
+      if (!retried.rateLimit && retryAfterS <= MAX_RATE_LIMIT_WAIT_S) {
+        await new Promise((resolve) => setTimeout(resolve, retryAfterS * 1e3));
+        return this.requestBlob(path, { ...retried, rateLimit: true });
+      }
+    }
+    throw new ApiError(
+      res.status,
+      data?.error ?? `request_failed_${res.status}`,
+      code,
+      void 0,
+      void 0,
+      retryAfterS
+    );
+  }
   chart(key) {
     return this.request(`/pub/events/${encodeURIComponent(key)}/chart`);
   }
+  /** Authenticated bytes for an Event-scoped authored view image. */
+  asset(key, asset) {
+    if (!/^[a-zA-Z0-9._-]+$/.test(asset)) {
+      return Promise.reject(new ApiError(404, "not_found", "not_found"));
+    }
+    return this.requestBlob(
+      `/pub/events/${encodeURIComponent(key)}/assets/${encodeURIComponent(asset)}`
+    );
+  }
   objects(key) {
     return this.request(`/pub/events/${encodeURIComponent(key)}/objects?compact=1`);
   }
@@ -629,12 +674,11 @@ var PubApi = class {
   /**
    * What PickerController opens its own socket with.
    *
-   * Empty for an access-scoped client: a private scope authenticates with a
+   * Empty for an access-scoped client: a scoped audience authenticates with a
    * subprotocol ticket, which a URL-only constructor cannot carry, so the SDK's
    * BuyerRealtimeClient owns that socket instead and the controller skips its
    * own (an empty URL is its documented "no live feed" contract). A tokenless
-   * public client returns exactly the URL it always has, so nothing about the
-   * public picker's realtime path changes.
+   * Managed public client returns exactly the URL it always has.
    */
   socketUrl(key) {
     return this.accessScoped ? "" : this.subscribeUrl(key);
@@ -1994,6 +2038,81 @@ import {
   schedulePanoramaUpgrade
 } from "@seatlayer/core/view/panoramaDelivery";
 
+// src/buyerAssets.ts
+var SAFE_ASSET = /^[a-zA-Z0-9._-]+$/;
+function buyerEventAssetReference(value) {
+  let url;
+  try {
+    url = new URL(value, "https://seatlayer.invalid");
+  } catch {
+    return null;
+  }
+  if (url.search || url.hash) return null;
+  const match = /^\/pub\/events\/([^/]+)\/assets\/([^/]+)$/.exec(url.pathname);
+  if (!match) return null;
+  try {
+    const eventKey = decodeURIComponent(match[1]);
+    const asset = decodeURIComponent(match[2]);
+    if (!eventKey || !SAFE_ASSET.test(asset)) return null;
+    return { eventKey, asset };
+  } catch {
+    return null;
+  }
+}
+function looksLikeBuyerAsset(value) {
+  try {
+    return /^\/pub\/events\/[^/]+\/assets(?:\/|$)/.test(
+      new URL(value, "https://seatlayer.invalid").pathname
+    );
+  } catch {
+    return false;
+  }
+}
+var BuyerAssetObjectUrls = class {
+  constructor(eventKey, load) {
+    this.eventKey = eventKey;
+    this.load = load;
+    this.pending = /* @__PURE__ */ new Map();
+    this.created = /* @__PURE__ */ new Set();
+    this.disposed = false;
+  }
+  /**
+   * External organizer/CDN URLs pass through unchanged. SeatLayer event assets
+   * never do: they require the transport, and a reference for another Event is
+   * refused instead of being loaded anonymously.
+   */
+  resolve(reference) {
+    const parsed = buyerEventAssetReference(reference);
+    if (!parsed) {
+      return Promise.resolve(looksLikeBuyerAsset(reference) ? null : reference);
+    }
+    if (parsed.eventKey !== this.eventKey || !this.load || this.disposed) return Promise.resolve(null);
+    const existing = this.pending.get(reference);
+    if (existing) return existing;
+    const task = this.load(this.eventKey, parsed.asset).then((blob) => {
+      const objectUrl = URL.createObjectURL(blob);
+      if (this.disposed) {
+        URL.revokeObjectURL(objectUrl);
+        return null;
+      }
+      this.created.add(objectUrl);
+      return objectUrl;
+    }).catch((error) => {
+      this.pending.delete(reference);
+      throw error;
+    });
+    this.pending.set(reference, task);
+    return task;
+  }
+  dispose() {
+    if (this.disposed) return;
+    this.disposed = true;
+    for (const url of this.created) URL.revokeObjectURL(url);
+    this.created.clear();
+    this.pending.clear();
+  }
+};
+
 // src/offerAvailability.ts
 var SALE_STATES = [
   "on-sale",
@@ -3157,6 +3276,8 @@ var SeatPicker = class _SeatPicker {
     this.secCardEl = null;
     this.viewEl = null;
     this.viewCleanup = null;
+    /** Supersedes an older authored-view byte request when another seat is opened. */
+    this.seatViewGen = 0;
     this.allSeatsCache = null;
     // F3 minimap
     this.miniCanvas = null;
@@ -3229,6 +3350,10 @@ var SeatPicker = class _SeatPicker {
       onObjectUnavailable: (event) => this.opts.onSelectedObjectUnavailable?.(event)
     });
     this.api = options.transport ?? this.pubApi;
+    this.buyerAssetUrls = new BuyerAssetObjectUrls(
+      options.event,
+      this.api.asset ? (key, asset) => this.api.asset(key, asset) : void 0
+    );
     if (options.checkout === "hosted" && !this.pubApi) {
       console.warn(
         'seatlayer: checkout: "hosted" needs the widget\'s own transport \u2014 a custom `transport` owns its backend, so the picker is staying on onCheckout for this mount.'
@@ -3357,7 +3482,7 @@ var SeatPicker = class _SeatPicker {
       }
     }
     const sightHtml = hasStage && distance != null ? `<div class="sl-confirm-sight">${t2("picker.sightline", { m: distance })}</div>` : "";
-    const viewBtn = realPhoto ? `<button type="button" class="sl-confirm-view sl-confirm-thumbwrap" aria-label="${t2("picker.viewFromSeat", { label: seat.label })}"><img class="sl-confirm-thumb" src="${realPhoto}" alt="" /><span class="sl-confirm-thumb-badge">\u{1F52D} ${this.tf("picker.viewFromHere", "View from here")}</span></button>` : `<button type="button" class="sl-confirm-view sl-confirm-viewbtn" aria-label="${t2("picker.viewFromSeat", { label: seat.label })}"><span aria-hidden="true">\u{1F52D}</span><span>${this.tf("picker.viewFromHere", "View from here")}</span></button>`;
+    const viewBtn = realPhoto ? `<button type="button" class="sl-confirm-view sl-confirm-thumbwrap" aria-label="${t2("picker.viewFromSeat", { label: seat.label })}"><img class="sl-confirm-thumb" alt="" /><span class="sl-confirm-thumb-badge">\u{1F52D} ${this.tf("picker.viewFromHere", "View from here")}</span></button>` : `<button type="button" class="sl-confirm-view sl-confirm-viewbtn" aria-label="${t2("picker.viewFromSeat", { label: seat.label })}"><span aria-hidden="true">\u{1F52D}</span><span>${this.tf("picker.viewFromHere", "View from here")}</span></button>`;
     return viewBtn + sightHtml;
   }
   /** "See it in 3D" (2D) / "View from this seat" (already in 3D) action for the
@@ -3808,7 +3933,7 @@ var SeatPicker = class _SeatPicker {
     }
     this.els.boot.remove();
     this.startRealtime();
-    this.salesClosed = !!info.salesClosed;
+    this.salesClosed = !!info.salesClosed || !!this.opts.readOnly;
     this.controller.setViewMode(this.normalizeInitialView(this.opts.initialView));
     this.buildRegions();
     this.regions["bottom-right"].appendChild(this.els.zoom);
@@ -4055,8 +4180,9 @@ var SeatPicker = class _SeatPicker {
    * idempotent DOM apply used at load and on transition.
    */
   setSalesClosed(closed) {
-    if (this.salesClosed === closed) return;
-    this.salesClosed = closed;
+    const next = closed || !!this.opts.readOnly;
+    if (this.salesClosed === next) return;
+    this.salesClosed = next;
     this.applySalesClosed();
   }
   applySalesClosed() {
@@ -4940,6 +5066,13 @@ var SeatPicker = class _SeatPicker {
     el.innerHTML = `<div class="sl-confirm-grid">` + identityFields + `</div><div class="sl-confirm-cat"><span class="sl-dot" style="background:${cat?.color ?? "#6e7bff"}"></span><span class="sl-confirm-cat-name">${safe(details?.categoryLabel ?? cat?.label ?? seat.categoryKey)}</span>` + (price != null ? `<span class="sl-confirm-price">${this.money(price)}</span>` : "") + `</div><div class="sl-confirm-body">` + this.wheelchairConfirmHtml(details?.wheelchairSpaceType) + this.commercialConfirmHtml(seat.commercial) + (this.seatViewEnabled() ? this.confirmThumbHtml(seat) : "") + this.see3dConfirmHtml() + `<div class="sl-confirm-row"><button type="button" class="sl-confirm-cancel">Cancel</button><button type="button" class="sl-confirm-add"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M5 12.5l4 4L19 7"/></svg>Select</button></div></div>`;
     this.els.map.appendChild(el);
     this.confirmEl = el;
+    const thumb = el.querySelector(".sl-confirm-thumb");
+    if (thumb && seat.viewUrl) {
+      const thumbReference = seat.viewMeta?.previewUrl ?? seat.viewUrl;
+      void this.buyerAssetUrls.resolve(thumbReference).then((url) => {
+        if (url && el.isConnected && this.confirmEl === el) thumb.src = url;
+      }).catch((error) => this.opts.onError?.(error));
+    }
     this.reanchorConfirm();
     el.querySelector(".sl-confirm-view")?.addEventListener("click", () => void this.openSeatView(seat));
     el.querySelector(".sl-confirm-3d")?.addEventListener("click", () => {
@@ -5020,6 +5153,7 @@ var SeatPicker = class _SeatPicker {
    */
   async openSeatView(seat) {
     if (!this.root || !this.seatViewEnabled()) return;
+    const generation = ++this.seatViewGen;
     const doc = this.controller.doc;
     const activeId = this.controller.getActiveFloorId();
     const focal = seat.focalPoint ?? doc?.floors?.find((f) => f.id === activeId)?.focalPoint ?? doc?.focalPoint ?? { x: 0, y: 0 };
@@ -5027,9 +5161,24 @@ var SeatPicker = class _SeatPicker {
     let caption;
     let real = false;
     if (seat.viewUrl) {
+      let resolvedUrl;
+      let resolvedPreviewUrl = null;
+      try {
+        const previewReference = seat.viewMeta?.previewUrl;
+        if (previewReference && previewReference !== seat.viewUrl) {
+          resolvedPreviewUrl = await this.buyerAssetUrls.resolve(previewReference);
+          resolvedUrl = seat.viewUrl;
+        } else {
+          resolvedUrl = await this.buyerAssetUrls.resolve(seat.viewUrl);
+        }
+      } catch (error) {
+        if (generation === this.seatViewGen) this.opts.onError?.(error);
+        return;
+      }
+      if (generation !== this.seatViewGen || !resolvedUrl || seat.viewMeta?.previewUrl && seat.viewMeta.previewUrl !== seat.viewUrl && !resolvedPreviewUrl || !this.root || !this.seatViewEnabled()) return;
       const view = {
-        url: seat.viewUrl,
-        ...seat.viewMeta?.previewUrl ? { previewUrl: seat.viewMeta.previewUrl } : {},
+        url: resolvedUrl,
+        ...resolvedPreviewUrl ? { previewUrl: resolvedPreviewUrl } : {},
         ...seat.viewMeta?.sourceWidth !== void 0 ? { sourceWidth: seat.viewMeta.sourceWidth } : {},
         ...seat.viewMeta?.sourceHeight !== void 0 ? { sourceHeight: seat.viewMeta.sourceHeight } : {},
         ...seat.viewMeta?.previewWidth !== void 0 ? { previewWidth: seat.viewMeta.previewWidth } : {},
@@ -5047,14 +5196,14 @@ var SeatPicker = class _SeatPicker {
         const { generateSeatPanorama } = await loadPanorama();
         pano2 = generateSeatPanorama(seat, focal, this.allSeats());
       } catch (err) {
-        this.opts.onError?.(err);
+        if (generation === this.seatViewGen) this.opts.onError?.(err);
         return;
       }
-      if (!this.root || !this.seatViewEnabled()) return;
+      if (generation !== this.seatViewGen || !this.root || !this.seatViewEnabled()) return;
       panoSource = { url: pano2.url, generated: true };
       caption = t2("picker.illustrationCaption", { m: pano2.distanceM });
     }
-    this.closeSeatView();
+    this.closeSeatView(false);
     const el = document.createElement("div");
     el.className = "sl-view";
     el.setAttribute("role", "dialog");
@@ -5070,9 +5219,12 @@ var SeatPicker = class _SeatPicker {
     };
     if (delivery.upgradeUrl) {
       cancelUpgrade = schedulePanoramaUpgrade(() => {
-        void loadPanoramaImage(delivery.upgradeUrl, loadAbort.signal).then(() => {
-          if (!el.isConnected || loadAbort.signal.aborted) return;
-          pano.style.backgroundImage = `url("${delivery.upgradeUrl}")`;
+        void this.buyerAssetUrls.resolve(delivery.upgradeUrl).then((url) => {
+          if (!url || loadAbort.signal.aborted) return null;
+          return loadPanoramaImage(url, loadAbort.signal).then(() => url);
+        }).then((url) => {
+          if (!url || !el.isConnected || loadAbort.signal.aborted) return;
+          pano.style.backgroundImage = `url("${url}")`;
         }).catch(() => {
         });
       });
@@ -5148,7 +5300,8 @@ var SeatPicker = class _SeatPicker {
       el.removeEventListener("keydown", onKey);
     };
   }
-  closeSeatView() {
+  closeSeatView(cancelPending = true) {
+    if (cancelPending) this.seatViewGen += 1;
     this.viewCleanup?.();
     this.viewCleanup = null;
     this.viewEl?.remove();
@@ -6231,19 +6384,33 @@ var SeatPicker = class _SeatPicker {
   async seatViewFor3d(seatId) {
     const seat = this.allSeats().find((s) => s.id === seatId);
     if (!seat) return null;
-    if (seat.viewUrl) return {
-      url: seat.viewUrl,
-      ...seat.viewMeta?.previewUrl ? { previewUrl: seat.viewMeta.previewUrl } : {},
-      ...seat.viewMeta?.sourceWidth !== void 0 ? { sourceWidth: seat.viewMeta.sourceWidth } : {},
-      ...seat.viewMeta?.sourceHeight !== void 0 ? { sourceHeight: seat.viewMeta.sourceHeight } : {},
-      ...seat.viewMeta?.previewWidth !== void 0 ? { previewWidth: seat.viewMeta.previewWidth } : {},
-      ...seat.viewMeta?.previewHeight !== void 0 ? { previewHeight: seat.viewMeta.previewHeight } : {},
-      ...seat.viewMeta?.initialBearingDeg !== void 0 ? { initialBearingDeg: seat.viewMeta.initialBearingDeg } : {},
-      ...seat.viewMeta?.initialPitchDeg !== void 0 ? { initialPitchDeg: seat.viewMeta.initialPitchDeg } : {},
-      ...seat.viewMeta?.coverage ? { coverage: seat.viewMeta.coverage } : {},
-      ...seat.viewMeta?.capturedAt ? { capturedAt: seat.viewMeta.capturedAt } : {},
-      ...seat.viewMeta?.sourceLabel ? { sourceLabel: seat.viewMeta.sourceLabel } : {}
-    };
+    if (seat.viewUrl) {
+      try {
+        const previewReference = seat.viewMeta?.previewUrl;
+        const progressive = !!previewReference && previewReference !== seat.viewUrl;
+        const previewUrl = progressive ? await this.buyerAssetUrls.resolve(previewReference) : null;
+        const url = progressive ? seat.viewUrl : await this.buyerAssetUrls.resolve(seat.viewUrl);
+        if (!url) return null;
+        if (progressive && !previewUrl) return null;
+        return {
+          url,
+          ...previewUrl ? { previewUrl } : {},
+          ...progressive ? { resolveUrl: (reference) => this.buyerAssetUrls.resolve(reference) } : {},
+          ...seat.viewMeta?.sourceWidth !== void 0 ? { sourceWidth: seat.viewMeta.sourceWidth } : {},
+          ...seat.viewMeta?.sourceHeight !== void 0 ? { sourceHeight: seat.viewMeta.sourceHeight } : {},
+          ...seat.viewMeta?.previewWidth !== void 0 ? { previewWidth: seat.viewMeta.previewWidth } : {},
+          ...seat.viewMeta?.previewHeight !== void 0 ? { previewHeight: seat.viewMeta.previewHeight } : {},
+          ...seat.viewMeta?.initialBearingDeg !== void 0 ? { initialBearingDeg: seat.viewMeta.initialBearingDeg } : {},
+          ...seat.viewMeta?.initialPitchDeg !== void 0 ? { initialPitchDeg: seat.viewMeta.initialPitchDeg } : {},
+          ...seat.viewMeta?.coverage ? { coverage: seat.viewMeta.coverage } : {},
+          ...seat.viewMeta?.capturedAt ? { capturedAt: seat.viewMeta.capturedAt } : {},
+          ...seat.viewMeta?.sourceLabel ? { sourceLabel: seat.viewMeta.sourceLabel } : {}
+        };
+      } catch (error) {
+        this.opts.onError?.(error);
+        return null;
+      }
+    }
     const doc = this.controller.doc;
     if (!doc) return null;
     const activeId = this.controller.getActiveFloorId();
@@ -6826,6 +6993,7 @@ var SeatPicker = class _SeatPicker {
     this.closeSeatView();
     this.closeCheckoutPanel();
     this.exit3d();
+    this.buyerAssetUrls.dispose();
     this.stopHoldTimer();
     if (this.toastTimer) clearTimeout(this.toastTimer);
     if (this.liveTimer) clearTimeout(this.liveTimer);