@viceme-ai/sdk-poc 0.1.7-poc.1

package/README.md

@@ -0,0 +1,71 @@
+# @viceme-ai/sdk
+
+Public ViceMe browser SDK: headless core, public session, and capability
+subpaths for static HTML, browser-native ESM, React/Next.js, and
+Agent-generated sites.
+
+## Install
+
+```bash
+pnpm add @viceme-ai/sdk
+```
+
+## Usage
+
+```ts
+import { createViceMe } from '@viceme-ai/sdk';
+
+const client = createViceMe({ workKey: 'wrk_public_xxx', region: 'cn' });
+await client.ready();
+
+if (client.hasCapability('danmaku')) {
+  const { mountDanmaku } = await import('@viceme-ai/sdk/danmaku');
+  await mountDanmaku(client, {
+    target: document.body,
+    theme: 'auto',
+  });
+}
+
+const access = await client.access.checkMany(['dingdong', 'emperor']);
+if (access.dingdong.allowed) enableDingdong();
+if (access.emperor.allowed) enableEmperor();
+
+// Call from a user gesture. A denied decision opens the ViceMe
+// bottom-sheet/in-page Web Component. It never silently follows.
+const decision = await client.access.require('emperor');
+if (decision.allowed) enableEmperor();
+
+client.destroy();
+```
+
+The SDK registers and mounts `<viceme-access-layer>` with isolated ViceMe-owned
+styles. Login and checkout remain inside its iframe area and complete through
+an origin- and channel-validated message; no browser popup, page navigation,
+`confirm`, or `alert` is used. Custom site presenters and style inference are
+not part of the current public contract.
+
+Static HTML sites can use the CDN auto-loader instead — see the
+[repository README](https://github.com/ViceMe-AI/sdk).
+
+## Testing your integration
+
+```ts
+import { createTestViceMe, createMemoryTransport } from '@viceme-ai/sdk/testing';
+
+const client = createTestViceMe({
+  workKey: 'wrk_test',
+  region: 'cn',
+  transport: createMemoryTransport({
+    work: { key: 'wrk_test', capabilities: ['fixture'] },
+  }),
+});
+await client.ready();
+```
+
+Static HTML uses the four-line CDN loader shown in the repository README. The
+danmaku capability automatically hashes the canonical page URL and combines it
+with a 10% scroll bucket; the full host URL is not sent to the hosted iframe.
+
+Consumers branch on stable `ViceMeError.code` values only — never on error
+messages. Work-session tokens and work-scoped users remain in memory only;
+additional capability subpaths land as their public API contracts go live.

package/dist/bootstrap.min.js

@@ -0,0 +1,2 @@
+(function(){"use strict";(()=>{const t=document.currentScript;if(!(t instanceof HTMLScriptElement)||!t.src)return;const c=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(8e3):void 0;fetch(new URL("/viceme-sdk/-/aliases/v1",t.src),{credentials:"omit",signal:c}).then(e=>{if(!e.ok)throw new Error(`pointer HTTP ${e.status}`);return e.text()}).then(e=>{const i=e.trim();if(!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(i))throw new Error("invalid pointer");const r=document.createElement("script");for(const n of t.getAttributeNames())n==="src"||n==="integrity"||r.setAttribute(n,t.getAttribute(n)??"");r.src=new URL(`/viceme-sdk/${i}/viceme.min.js`,t.src).href,(document.head??document.documentElement).append(r)}).catch(()=>{document.dispatchEvent(new CustomEvent("viceme:error",{detail:{code:"CONFIG_INVALID",retryable:!1},bubbles:!0,composed:!0}))})})()})();
+//# sourceMappingURL=bootstrap.min.js.map

package/dist/bootstrap.min.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.min.js","sources":["../src/loader/bootstrap.ts"],"sourcesContent":["/**\n * FIXED alias bootstrap — the ONLY object under /viceme-sdk/v1/.\n *\n * Byte-stable for the whole API major (this file must not grow feature\n * logic): it reads the version pointer at /viceme-sdk/-/aliases/v1 and\n * injects the full versioned auto-loader at\n * /viceme-sdk/<version>/viceme.min.js with the same data-viceme-*\n * attributes. The full loader (and every future fix to it) lives in the\n * immutable exact-version directory, so the alias bytes never need to\n * change when releases ship.\n */\n(() => {\n  const script = document.currentScript;\n  if (!(script instanceof HTMLScriptElement) || !script.src) return;\n\n  const signal =\n    typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n      ? AbortSignal.timeout(8_000)\n      : undefined;\n\n  fetch(new URL('/viceme-sdk/-/aliases/v1', script.src), {\n    credentials: 'omit',\n    signal,\n  })\n    .then((response) => {\n      if (!response.ok) throw new Error(`pointer HTTP ${response.status}`);\n      return response.text();\n    })\n    .then((text) => {\n      const version = text.trim();\n      if (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {\n        throw new Error('invalid pointer');\n      }\n      const loader = document.createElement('script');\n      for (const name of script.getAttributeNames()) {\n        // The loader gets its own src; integrity pins are not transferable.\n        if (name === 'src' || name === 'integrity') continue;\n        loader.setAttribute(name, script.getAttribute(name) ?? '');\n      }\n      loader.src = new URL(`/viceme-sdk/${version}/viceme.min.js`, script.src).href;\n      (document.head ?? document.documentElement).append(loader);\n    })\n    .catch(() => {\n      document.dispatchEvent(\n        new CustomEvent('viceme:error', {\n          detail: { code: 'CONFIG_INVALID', retryable: false },\n          bubbles: true,\n          composed: true,\n        }),\n      );\n    });\n})();\n"],"names":["script","signal","response","text","version","loader","name"],"mappings":"0BAWC,IAAM,CACL,MAAMA,EAAS,SAAS,cACxB,GAAI,EAAEA,aAAkB,oBAAsB,CAACA,EAAO,IAAK,OAE3D,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQ,GAAK,EACzB,OAEN,MAAM,IAAI,IAAI,2BAA4BD,EAAO,GAAG,EAAG,CACrD,YAAa,OACb,OAAAC,CAAA,CACD,EACE,KAAMC,GAAa,CAClB,GAAI,CAACA,EAAS,GAAI,MAAM,IAAI,MAAM,gBAAgBA,EAAS,MAAM,EAAE,EACnE,OAAOA,EAAS,KAAA,CAClB,CAAC,EACA,KAAMC,GAAS,CACd,MAAMC,EAAUD,EAAK,KAAA,EACrB,GAAI,CAAC,sCAAsC,KAAKC,CAAO,EACrD,MAAM,IAAI,MAAM,iBAAiB,EAEnC,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,UAAWC,KAAQN,EAAO,oBAEpBM,IAAS,OAASA,IAAS,aAC/BD,EAAO,aAAaC,EAAMN,EAAO,aAAaM,CAAI,GAAK,EAAE,EAE3DD,EAAO,IAAM,IAAI,IAAI,eAAeD,CAAO,iBAAkBJ,EAAO,GAAG,EAAE,MACxE,SAAS,MAAQ,SAAS,iBAAiB,OAAOK,CAAM,CAC3D,CAAC,EACA,MAAM,IAAM,CACX,SAAS,cACP,IAAI,YAAY,eAAgB,CAC9B,OAAQ,CAAE,KAAM,iBAAkB,UAAW,EAAA,EAC7C,QAAS,GACT,SAAU,EAAA,CACX,CAAA,CAEL,CAAC,CACL,GAAA"}