@viceme-ai/sdk 0.1.2

package/README.md

@@ -0,0 +1,48 @@
+# @viceme-ai/sdk
+
+Public ViceMe browser SDK: headless core, public session, and capability
+subpaths for static HTML, browser-native ESM, React/Next.js, and
+Agent-generated sites.
+
+## Install
+
+```bash
+pnpm add @viceme-ai/sdk
+```
+
+## Usage
+
+```ts
+import { createViceMe } from '@viceme-ai/sdk';
+
+const client = createViceMe({ workKey: 'wrk_public_xxx', region: 'cn' });
+await client.ready();
+
+if (client.hasCapability('danmaku')) {
+  // capability subpath, e.g. '@viceme-ai/sdk/danmaku'
+}
+
+client.destroy();
+```
+
+Static HTML sites can use the CDN auto-loader instead — see the
+[repository README](https://github.com/ViceMe-AI/sdk).
+
+## Testing your integration
+
+```ts
+import { createTestViceMe, createMemoryTransport } from '@viceme-ai/sdk/testing';
+
+const client = createTestViceMe({
+  workKey: 'wrk_test',
+  region: 'cn',
+  transport: createMemoryTransport({
+    work: { key: 'wrk_test', capabilities: ['fixture'] },
+  }),
+});
+await client.ready();
+```
+
+Consumers branch on stable `ViceMeError.code` values only — never on error
+messages. Status: `0.x` infrastructure phase; capability subpaths land as
+their public API contracts go live.

package/dist/bootstrap.min.js

@@ -0,0 +1,2 @@
+(function(){"use strict";(()=>{const t=document.currentScript;if(!(t instanceof HTMLScriptElement)||!t.src)return;const c=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(8e3):void 0;fetch(new URL("/viceme-sdk/-/aliases/v1",t.src),{credentials:"omit",signal:c}).then(e=>{if(!e.ok)throw new Error(`pointer HTTP ${e.status}`);return e.text()}).then(e=>{const i=e.trim();if(!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(i))throw new Error("invalid pointer");const r=document.createElement("script");for(const n of t.getAttributeNames())n==="src"||n==="integrity"||r.setAttribute(n,t.getAttribute(n)??"");r.src=new URL(`/viceme-sdk/${i}/viceme.min.js`,t.src).href,(document.head??document.documentElement).append(r)}).catch(()=>{document.dispatchEvent(new CustomEvent("viceme:error",{detail:{code:"CONFIG_INVALID",retryable:!1},bubbles:!0,composed:!0}))})})()})();
+//# sourceMappingURL=bootstrap.min.js.map

package/dist/bootstrap.min.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.min.js","sources":["../src/loader/bootstrap.ts"],"sourcesContent":["/**\n * FIXED alias bootstrap — the ONLY object under /viceme-sdk/v1/.\n *\n * Byte-stable for the whole API major (this file must not grow feature\n * logic): it reads the version pointer at /viceme-sdk/-/aliases/v1 and\n * injects the full versioned auto-loader at\n * /viceme-sdk/<version>/viceme.min.js with the same data-viceme-*\n * attributes. The full loader (and every future fix to it) lives in the\n * immutable exact-version directory, so the alias bytes never need to\n * change when releases ship.\n */\n(() => {\n  const script = document.currentScript;\n  if (!(script instanceof HTMLScriptElement) || !script.src) return;\n\n  const signal =\n    typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n      ? AbortSignal.timeout(8_000)\n      : undefined;\n\n  fetch(new URL('/viceme-sdk/-/aliases/v1', script.src), {\n    credentials: 'omit',\n    signal,\n  })\n    .then((response) => {\n      if (!response.ok) throw new Error(`pointer HTTP ${response.status}`);\n      return response.text();\n    })\n    .then((text) => {\n      const version = text.trim();\n      if (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {\n        throw new Error('invalid pointer');\n      }\n      const loader = document.createElement('script');\n      for (const name of script.getAttributeNames()) {\n        // The loader gets its own src; integrity pins are not transferable.\n        if (name === 'src' || name === 'integrity') continue;\n        loader.setAttribute(name, script.getAttribute(name) ?? '');\n      }\n      loader.src = new URL(`/viceme-sdk/${version}/viceme.min.js`, script.src).href;\n      (document.head ?? document.documentElement).append(loader);\n    })\n    .catch(() => {\n      document.dispatchEvent(\n        new CustomEvent('viceme:error', {\n          detail: { code: 'CONFIG_INVALID', retryable: false },\n          bubbles: true,\n          composed: true,\n        }),\n      );\n    });\n})();\n"],"names":["script","signal","response","text","version","loader","name"],"mappings":"0BAWC,IAAM,CACL,MAAMA,EAAS,SAAS,cACxB,GAAI,EAAEA,aAAkB,oBAAsB,CAACA,EAAO,IAAK,OAE3D,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQ,GAAK,EACzB,OAEN,MAAM,IAAI,IAAI,2BAA4BD,EAAO,GAAG,EAAG,CACrD,YAAa,OACb,OAAAC,CAAA,CACD,EACE,KAAMC,GAAa,CAClB,GAAI,CAACA,EAAS,GAAI,MAAM,IAAI,MAAM,gBAAgBA,EAAS,MAAM,EAAE,EACnE,OAAOA,EAAS,KAAA,CAClB,CAAC,EACA,KAAMC,GAAS,CACd,MAAMC,EAAUD,EAAK,KAAA,EACrB,GAAI,CAAC,sCAAsC,KAAKC,CAAO,EACrD,MAAM,IAAI,MAAM,iBAAiB,EAEnC,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,UAAWC,KAAQN,EAAO,oBAEpBM,IAAS,OAASA,IAAS,aAC/BD,EAAO,aAAaC,EAAMN,EAAO,aAAaM,CAAI,GAAK,EAAE,EAE3DD,EAAO,IAAM,IAAI,IAAI,eAAeD,CAAO,iBAAkBJ,EAAO,GAAG,EAAE,MACxE,SAAS,MAAQ,SAAS,iBAAiB,OAAOK,CAAM,CAC3D,CAAC,EACA,MAAM,IAAM,CACX,SAAS,cACP,IAAI,YAAY,eAAgB,CAC9B,OAAQ,CAAE,KAAM,iBAAkB,UAAW,EAAA,EAC7C,QAAS,GACT,SAAU,EAAA,CACX,CAAA,CAEL,CAAC,CACL,GAAA"}

package/dist/chunks/client-CGU3qeew.js

@@ -0,0 +1,275 @@
+const h = /* @__PURE__ */ new Set([
+  "RATE_LIMITED",
+  "NETWORK_TIMEOUT",
+  "CHECKOUT_UNAVAILABLE",
+  "INTERNAL_ERROR"
+]);
+class r extends Error {
+  code;
+  retryable;
+  requestId;
+  capability;
+  constructor(e) {
+    super(e.message), this.name = "ViceMeError", this.code = e.code, this.retryable = e.retryable ?? h.has(e.code), this.requestId = e.requestId, this.capability = e.capability;
+  }
+  /** Safe, stable-shape serialization for logs and `viceme:error` events. */
+  toJSON() {
+    const e = { code: this.code, retryable: this.retryable };
+    return this.requestId !== void 0 && (e.requestId = this.requestId), this.capability !== void 0 && (e.capability = this.capability), e;
+  }
+}
+function D(t) {
+  return t instanceof r;
+}
+function o(t) {
+  return new r({ code: "CONFIG_INVALID", message: t, retryable: !1 });
+}
+function n() {
+  return new r({
+    code: "CLIENT_DESTROYED",
+    message: "ViceMe client has been destroyed.",
+    retryable: !1
+  });
+}
+const d = /* @__PURE__ */ new Set(["cn", "global"]), f = {
+  cn: "https://api.viceme.cn",
+  global: "https://api.viceme.ai"
+};
+function R(t) {
+  return f[t];
+}
+function y(t) {
+  return typeof t == "string" && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(t);
+}
+function u(t) {
+  return typeof t == "string" && d.has(t);
+}
+function k(t) {
+  if (typeof t != "object" || t === null)
+    throw o("createViceMe expects a configuration object.");
+  const e = t, s = /* @__PURE__ */ new Set(["workKey", "region", "signal"]);
+  for (const i of Object.keys(e))
+    if (!s.has(i))
+      throw o(`Unknown configuration field "${i}".`);
+  if (!y(e.workKey))
+    throw o('Configuration field "workKey" must be a public work key ("wrk_…").');
+  if (!u(e.region))
+    throw o('Configuration field "region" must be "cn" or "global".');
+  if (e.signal !== void 0 && !(e.signal instanceof AbortSignal))
+    throw o('Configuration field "signal" must be an AbortSignal.');
+  return { workKey: e.workKey, region: e.region, signal: e.signal };
+}
+const E = {
+  CREATED: ["INITIALIZING", "DESTROYED"],
+  INITIALIZING: ["READY", "FAILED", "DESTROYED"],
+  READY: ["DEGRADED", "DESTROYED"],
+  DEGRADED: ["DESTROYED"],
+  FAILED: ["INITIALIZING", "DESTROYED"],
+  DESTROYED: []
+};
+class g {
+  #e = "CREATED";
+  #t = /* @__PURE__ */ new Set();
+  get state() {
+    return this.#e;
+  }
+  get destroyed() {
+    return this.#e === "DESTROYED";
+  }
+  transition(e) {
+    if (e !== this.#e) {
+      if (!E[this.#e].includes(e))
+        throw new r({
+          code: "INTERNAL_ERROR",
+          message: `Illegal lifecycle transition ${this.#e} -> ${e}.`,
+          retryable: !1
+        });
+      this.#e = e;
+      for (const s of this.#t) s(e);
+    }
+  }
+  /** Any operation on a destroyed client must fail closed with this guard. */
+  assertAlive() {
+    if (this.destroyed) throw n();
+  }
+  subscribe(e) {
+    return this.#t.add(e), () => {
+      this.#t.delete(e);
+    };
+  }
+  clearListeners() {
+    this.#t.clear();
+  }
+}
+function w(t, e) {
+  if (typeof t != "object" || t === null)
+    throw c();
+  const s = t, i = s.work;
+  if (typeof i != "object" || i === null || typeof i.key != "string" || !Array.isArray(i.capabilities) || !i.capabilities.every((l) => typeof l == "string"))
+    throw c();
+  if (i.key !== e)
+    throw new r({
+      code: "WORK_NOT_FOUND",
+      message: "Work-session response did not match the requested work key.",
+      retryable: !1
+    });
+  const a = {
+    work: {
+      key: i.key,
+      capabilities: i.capabilities
+    }
+  };
+  return typeof s.token == "string" && (a.token = s.token), typeof s.expiresAt == "number" && (a.expiresAt = s.expiresAt), a;
+}
+function c() {
+  return new r({
+    code: "INTERNAL_ERROR",
+    message: "Malformed work-session response.",
+    retryable: !0
+  });
+}
+class b {
+  #e;
+  #t;
+  #s;
+  #i;
+  constructor(e) {
+    this.#e = e, this.#t = e.now ?? (() => Date.now());
+  }
+  get snapshot() {
+    return this.#s;
+  }
+  /** True when the cached snapshot's server-provided expiry has passed. */
+  #r() {
+    const e = this.#s?.expiresAt;
+    return e !== void 0 && e <= this.#t();
+  }
+  /**
+   * Establish (or return the established) public session.
+   *
+   * A cached snapshot is reused only while it is unexpired; an expired
+   * snapshot is dropped and re-authenticated. Concurrent callers share one
+   * in-flight request (single flight).
+   */
+  establish() {
+    if (this.#s) {
+      if (!this.#r()) return Promise.resolve(this.#s);
+      this.#s = void 0;
+    }
+    return this.#i ??= this.#e.transport.request({
+      method: "POST",
+      path: "/public/v1/work-sessions",
+      body: { workKey: this.#e.workKey },
+      signal: this.#e.signal,
+      timeoutMs: this.#e.timeoutMs
+    }).then((e) => {
+      const s = w(e.body, this.#e.workKey);
+      return this.#s = s, s;
+    }).finally(() => {
+      this.#i = void 0;
+    }), this.#i;
+  }
+  /** Drop the token; next `establish()` re-authenticates. */
+  invalidate() {
+    this.#s = void 0;
+  }
+  /** Hard cleanup: forget the token and pending work. */
+  destroy() {
+    this.invalidate(), this.#i = void 0;
+  }
+}
+const p = "0.1.2", I = 1;
+class A extends DOMException {
+  constructor() {
+    super("ViceMe client destroyed.", "AbortError");
+  }
+}
+class S {
+  #e = new g();
+  #t;
+  #s;
+  #i = new AbortController();
+  #r;
+  constructor(e) {
+    this.#s = e.config, this.#t = new b({
+      workKey: e.config.workKey,
+      transport: e.transport,
+      signal: this.#i.signal,
+      ...e.now !== void 0 ? { now: e.now } : {}
+    });
+    const s = e.config.signal;
+    if (s) {
+      const i = () => {
+        this.#i.abort(
+          s.reason instanceof Error ? s.reason : new DOMException("Caller signal aborted.", "AbortError")
+        );
+      };
+      s.aborted ? i() : s.addEventListener("abort", i, { once: !0 });
+    }
+  }
+  get version() {
+    return p;
+  }
+  get workKey() {
+    return this.#s.workKey;
+  }
+  get region() {
+    return this.#s.region;
+  }
+  get state() {
+    return this.#e.state;
+  }
+  /** Internal: public API major, used by the loader registry namespace. */
+  get apiMajor() {
+    return I;
+  }
+  ready() {
+    return this.#e.destroyed ? Promise.reject(n()) : (this.#r ??= this.#o(), this.#r);
+  }
+  async #o() {
+    if (this.#e.destroyed) throw n();
+    this.#e.transition("INITIALIZING");
+    try {
+      if (await this.#t.establish(), this.#e.destroyed) throw n();
+      this.#e.transition("READY");
+    } catch (e) {
+      throw this.#e.destroyed ? n() : (this.#e.transition("FAILED"), this.#r = void 0, this.#t.invalidate(), e);
+    }
+  }
+  hasCapability(e) {
+    if (this.#e.destroyed) return !1;
+    const s = this.#t.snapshot?.work.capabilities;
+    return s !== void 0 && s.includes(e);
+  }
+  /** Names of capabilities enabled for this work (empty before `ready()`). */
+  get capabilities() {
+    return this.#t.snapshot?.work.capabilities ?? [];
+  }
+  /**
+   * Internal: mark one capability unavailable without taking down the client
+   * (loader uses this when a feature chunk fails after the core is READY).
+   */
+  markDegraded() {
+    this.#e.state === "READY" && this.#e.transition("DEGRADED");
+  }
+  /** Internal: session snapshot access for capability modules. */
+  get sessionSnapshot() {
+    return this.#t.snapshot;
+  }
+  destroy() {
+    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#i.abort(new A()), this.#t.destroy(), this.#e.clearListeners(), this.#r = void 0);
+  }
+}
+export {
+  I as A,
+  p as S,
+  r as V,
+  S as a,
+  y as b,
+  o as c,
+  u as d,
+  D as i,
+  R as r,
+  k as v
+};
+//# sourceMappingURL=client-CGU3qeew.js.map

package/dist/chunks/client-CGU3qeew.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-CGU3qeew.js","sources":["../../src/core/errors.ts","../../src/core/config.ts","../../src/core/lifecycle.ts","../../src/session/session.ts","../../src/version.ts","../../src/core/client.ts"],"sourcesContent":["/**\n * Public error model.\n *\n * Consumers branch on the stable `code` only — never on `message` text.\n * Error payloads must never contain provider responses, tokens, cookies, or\n * internal stack traces; `toJSON()` exposes the safe diagnostic subset.\n */\n\nexport type ViceMeErrorCode =\n  | 'CONFIG_INVALID'\n  | 'WORK_NOT_FOUND'\n  | 'ORIGIN_NOT_ALLOWED'\n  | 'CAPABILITY_DISABLED'\n  | 'CLIENT_DESTROYED'\n  | 'SESSION_EXPIRED'\n  | 'RATE_LIMITED'\n  | 'NETWORK_TIMEOUT'\n  | 'CHECKOUT_UNAVAILABLE'\n  | 'INTERNAL_ERROR';\n\nexport interface ViceMeErrorInit {\n  code: ViceMeErrorCode;\n  message: string;\n  retryable?: boolean;\n  /** Server-assigned request id echoed back for support correlation. */\n  requestId?: string;\n  /** Capability the error belongs to, when scoped to one. */\n  capability?: string;\n}\n\nconst RETRYABLE_BY_DEFAULT: ReadonlySet<ViceMeErrorCode> = new Set([\n  'RATE_LIMITED',\n  'NETWORK_TIMEOUT',\n  'CHECKOUT_UNAVAILABLE',\n  'INTERNAL_ERROR',\n]);\n\nexport class ViceMeError extends Error {\n  readonly code: ViceMeErrorCode;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly capability?: string;\n\n  constructor(init: ViceMeErrorInit) {\n    super(init.message);\n    this.name = 'ViceMeError';\n    this.code = init.code;\n    this.retryable = init.retryable ?? RETRYABLE_BY_DEFAULT.has(init.code);\n    this.requestId = init.requestId;\n    this.capability = init.capability;\n  }\n\n  /** Safe, stable-shape serialization for logs and `viceme:error` events. */\n  toJSON(): {\n    code: ViceMeErrorCode;\n    retryable: boolean;\n    requestId?: string;\n    capability?: string;\n  } {\n    const json: {\n      code: ViceMeErrorCode;\n      retryable: boolean;\n      requestId?: string;\n      capability?: string;\n    } = { code: this.code, retryable: this.retryable };\n    if (this.requestId !== undefined) json.requestId = this.requestId;\n    if (this.capability !== undefined) json.capability = this.capability;\n    return json;\n  }\n}\n\nexport function isViceMeError(value: unknown): value is ViceMeError {\n  return value instanceof ViceMeError;\n}\n\n/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */\nexport function configInvalid(message: string): ViceMeError {\n  return new ViceMeError({ code: 'CONFIG_INVALID', message, retryable: false });\n}\n\n/** Build a CLIENT_DESTROYED error for post-destroy calls. */\nexport function clientDestroyed(): ViceMeError {\n  return new ViceMeError({\n    code: 'CLIENT_DESTROYED',\n    message: 'ViceMe client has been destroyed.',\n    retryable: false,\n  });\n}\n","/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey`, `region`, and\n * `signal`. Anything else (transport, clock, request ids, base URLs) is a\n * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can\n * never bake temporary or internal endpoints into user projects.\n */\n\nimport { configInvalid } from './errors.ts';\n\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n  /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n  workKey: string;\n  /** Routes public API and CDN traffic. */\n  region: ViceMeRegion;\n  /** Optional abort signal owned by the host page. */\n  signal?: AbortSignal;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\n/**\n * Public API origins per region. These are the only production endpoints the\n * SDK may contact; B1 confirms final hostnames and any change happens here in\n * one place (never via a public `apiBaseUrl` option).\n */\nexport const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>> = {\n  cn: 'https://api.viceme.cn',\n  global: 'https://api.viceme.ai',\n};\n\nexport function resolveApiBaseUrl(region: ViceMeRegion): string {\n  return PUBLIC_API_BASE_URLS[region];\n}\n\nexport function isValidWorkKey(value: unknown): value is string {\n  return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n  return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n  if (typeof input !== 'object' || input === null) {\n    throw configInvalid('createViceMe expects a configuration object.');\n  }\n  const raw = input as Record<string, unknown>;\n\n  const known = new Set(['workKey', 'region', 'signal']);\n  for (const key of Object.keys(raw)) {\n    if (!known.has(key)) {\n      throw configInvalid(`Unknown configuration field \"${key}\".`);\n    }\n  }\n  if (!isValidWorkKey(raw.workKey)) {\n    throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n  }\n  if (!isValidRegion(raw.region)) {\n    throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n  }\n  if (raw.signal !== undefined && !(raw.signal instanceof AbortSignal)) {\n    throw configInvalid('Configuration field \"signal\" must be an AbortSignal.');\n  }\n  return { workKey: raw.workKey, region: raw.region, signal: raw.signal };\n}\n","/**\n * Client lifecycle state machine.\n *\n * ```text\n * CREATED -> INITIALIZING -> READY -> DESTROYED\n * INITIALIZING -> FAILED (retryable: FAILED -> INITIALIZING)\n * READY -> DEGRADED (single capability unavailable; host page keeps working)\n * DEGRADED -> READY (when all capabilities recover is a B1+ concern)\n * ```\n *\n * State is exposed read-only; consumers can never assign it directly.\n */\n\nimport { ViceMeError, clientDestroyed } from './errors.ts';\n\nexport type ViceMeClientState =\n  'CREATED' | 'INITIALIZING' | 'READY' | 'DEGRADED' | 'FAILED' | 'DESTROYED';\n\nconst ALLOWED_TRANSITIONS: Readonly<Record<ViceMeClientState, readonly ViceMeClientState[]>> = {\n  CREATED: ['INITIALIZING', 'DESTROYED'],\n  INITIALIZING: ['READY', 'FAILED', 'DESTROYED'],\n  READY: ['DEGRADED', 'DESTROYED'],\n  DEGRADED: ['DESTROYED'],\n  FAILED: ['INITIALIZING', 'DESTROYED'],\n  DESTROYED: [],\n};\n\nexport type LifecycleListener = (state: ViceMeClientState) => void;\n\nexport class Lifecycle {\n  #state: ViceMeClientState = 'CREATED';\n  #listeners = new Set<LifecycleListener>();\n\n  get state(): ViceMeClientState {\n    return this.#state;\n  }\n\n  get destroyed(): boolean {\n    return this.#state === 'DESTROYED';\n  }\n\n  transition(next: ViceMeClientState): void {\n    if (next === this.#state) return;\n    if (!ALLOWED_TRANSITIONS[this.#state]!.includes(next)) {\n      throw new ViceMeError({\n        code: 'INTERNAL_ERROR',\n        message: `Illegal lifecycle transition ${this.#state} -> ${next}.`,\n        retryable: false,\n      });\n    }\n    this.#state = next;\n    for (const listener of this.#listeners) listener(next);\n  }\n\n  /** Any operation on a destroyed client must fail closed with this guard. */\n  assertAlive(): void {\n    if (this.destroyed) throw clientDestroyed();\n  }\n\n  subscribe(listener: LifecycleListener): () => void {\n    this.#listeners.add(listener);\n    return () => {\n      this.#listeners.delete(listener);\n    };\n  }\n\n  clearListeners(): void {\n    this.#listeners.clear();\n  }\n}\n","/**\n * Public visitor session.\n *\n * ```text\n * SDK + workKey + Origin -> POST /public/v1/work-sessions\n *   -> short-lived capability token -> public capability calls\n * ```\n *\n * The token lives in memory only (never localStorage/cookies), is bound to the\n * Work, Origin, capability set, and expiry by the server, and is dropped on\n * `destroy()`. `workKey` locates the Work — it is never an authorization\n * credential.\n */\n\nimport { ViceMeError } from '../core/errors.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport type { components } from '../generated/public-contract.ts';\n\n/**\n * DTO shapes come from the generated public contract snapshot — the SDK never\n * hand-writes a second copy of the server DTOs. The runtime validator below\n * stays intentionally narrow (required fields of the current contract only).\n */\ntype WorkSessionDto = components['schemas']['WorkSession'];\nexport type CreateWorkSessionRequestDto = components['schemas']['CreateWorkSessionRequest'];\n\nexport interface WorkDescriptor {\n  key: string;\n  /** Capability names enabled for this work. */\n  capabilities: string[];\n}\n\nexport interface WorkSessionSnapshot {\n  work: WorkDescriptor;\n  /** Opaque short-lived capability token; memory-only. */\n  token?: string;\n  /** Epoch milliseconds when the token expires, when provided by the server. */\n  expiresAt?: number;\n}\n\nexport interface SessionManagerOptions {\n  workKey: string;\n  transport: Transport;\n  signal?: AbortSignal;\n  timeoutMs?: number;\n  /** Injectable clock for tests. */\n  now?: () => number;\n}\n\nfunction parseSessionResponse(body: unknown, workKey: string): WorkSessionSnapshot {\n  if (typeof body !== 'object' || body === null) {\n    throw malformedSessionResponse();\n  }\n  const raw = body as WorkSessionDto;\n  const work = raw.work as { key?: unknown; capabilities?: unknown } | undefined;\n  if (\n    typeof work !== 'object' ||\n    work === null ||\n    typeof work.key !== 'string' ||\n    !Array.isArray(work.capabilities) ||\n    !work.capabilities.every((c) => typeof c === 'string')\n  ) {\n    throw malformedSessionResponse();\n  }\n  if (work.key !== workKey) {\n    throw new ViceMeError({\n      code: 'WORK_NOT_FOUND',\n      message: 'Work-session response did not match the requested work key.',\n      retryable: false,\n    });\n  }\n  const snapshot: WorkSessionSnapshot = {\n    work: {\n      key: work.key,\n      capabilities: work.capabilities as string[],\n    },\n  };\n  // Unknown extra fields are allowed and ignored (forward compatibility).\n  if (typeof raw.token === 'string') snapshot.token = raw.token;\n  if (typeof raw.expiresAt === 'number') snapshot.expiresAt = raw.expiresAt;\n  return snapshot;\n}\n\nfunction malformedSessionResponse(): ViceMeError {\n  return new ViceMeError({\n    code: 'INTERNAL_ERROR',\n    message: 'Malformed work-session response.',\n    retryable: true,\n  });\n}\n\nexport class SessionManager {\n  readonly #options: SessionManagerOptions;\n  readonly #now: () => number;\n  #snapshot: WorkSessionSnapshot | undefined;\n  #pending: Promise<WorkSessionSnapshot> | undefined;\n\n  constructor(options: SessionManagerOptions) {\n    this.#options = options;\n    this.#now = options.now ?? (() => Date.now());\n  }\n\n  get snapshot(): WorkSessionSnapshot | undefined {\n    return this.#snapshot;\n  }\n\n  /** True when the cached snapshot's server-provided expiry has passed. */\n  #isExpired(): boolean {\n    const expiresAt = this.#snapshot?.expiresAt;\n    return expiresAt !== undefined && expiresAt <= this.#now();\n  }\n\n  /**\n   * Establish (or return the established) public session.\n   *\n   * A cached snapshot is reused only while it is unexpired; an expired\n   * snapshot is dropped and re-authenticated. Concurrent callers share one\n   * in-flight request (single flight).\n   */\n  establish(): Promise<WorkSessionSnapshot> {\n    if (this.#snapshot) {\n      if (!this.#isExpired()) return Promise.resolve(this.#snapshot);\n      this.#snapshot = undefined;\n    }\n    this.#pending ??= this.#options.transport\n      .request({\n        method: 'POST',\n        path: '/public/v1/work-sessions',\n        body: { workKey: this.#options.workKey } satisfies CreateWorkSessionRequestDto,\n        signal: this.#options.signal,\n        timeoutMs: this.#options.timeoutMs,\n      })\n      .then((response) => {\n        const snapshot = parseSessionResponse(response.body, this.#options.workKey);\n        this.#snapshot = snapshot;\n        return snapshot;\n      })\n      .finally(() => {\n        this.#pending = undefined;\n      });\n    return this.#pending;\n  }\n\n  /** Drop the token; next `establish()` re-authenticates. */\n  invalidate(): void {\n    this.#snapshot = undefined;\n  }\n\n  /** Hard cleanup: forget the token and pending work. */\n  destroy(): void {\n    this.invalidate();\n    this.#pending = undefined;\n  }\n}\n","/**\n * Single source of truth for the SDK runtime version.\n *\n * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces\n * the match so the loader, release manifest, and npm metadata can never drift.\n */\nexport const SDK_VERSION = '0.1.2';\n\n/** Public API major carried by this build (loader namespace `v1`). */\nexport const API_MAJOR = 1;\n","/**\n * Headless ViceMe client.\n *\n * The core never touches the DOM: `document`, auto-mount, and UI lifecycle\n * live exclusively in the loader and capability `mount` layers. `ready()` is\n * idempotent per instance (shares one promise), `destroy()` is idempotent and\n * synchronously cancels requests and subscriptions; every business method on a\n * destroyed client fails with `CLIENT_DESTROYED`.\n */\n\nimport { clientDestroyed } from './errors.ts';\nimport { Lifecycle, type ViceMeClientState } from './lifecycle.ts';\nimport type { ViceMeConfig, ViceMeRegion } from './config.ts';\nimport { SessionManager } from '../session/session.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport { API_MAJOR, SDK_VERSION } from '../version.ts';\n\nexport interface ViceMeClient {\n  readonly version: string;\n  readonly workKey: string;\n  readonly region: ViceMeRegion;\n  readonly state: ViceMeClientState;\n  ready(): Promise<void>;\n  hasCapability(name: string): boolean;\n  destroy(): void;\n}\n\nexport interface ViceMeMountedInstance {\n  readonly instanceKey: string;\n  readonly capability: string;\n  destroy(): void;\n}\n\n/** Marker so in-flight requests cancelled by `destroy()` map to CLIENT_DESTROYED. */\nclass DestroySignalReason extends DOMException {\n  constructor() {\n    super('ViceMe client destroyed.', 'AbortError');\n  }\n}\n\nexport interface ViceMeClientDeps {\n  config: ViceMeConfig;\n  transport: Transport;\n  /** Injectable clock (testing only). */\n  now?: () => number;\n}\n\nexport class ViceMeClientImpl implements ViceMeClient {\n  readonly #lifecycle = new Lifecycle();\n  readonly #session: SessionManager;\n  readonly #config: ViceMeConfig;\n  readonly #internalSignal = new AbortController();\n  #readyPromise: Promise<void> | undefined;\n\n  constructor(deps: ViceMeClientDeps) {\n    this.#config = deps.config;\n    this.#session = new SessionManager({\n      workKey: deps.config.workKey,\n      transport: deps.transport,\n      signal: this.#internalSignal.signal,\n      ...(deps.now !== undefined ? { now: deps.now } : {}),\n    });\n    const callerSignal = deps.config.signal;\n    if (callerSignal) {\n      // Propagate the caller's own abort reason when one was set.\n      const abortInternal = () => {\n        this.#internalSignal.abort(\n          callerSignal.reason instanceof Error\n            ? callerSignal.reason\n            : new DOMException('Caller signal aborted.', 'AbortError'),\n        );\n      };\n      // An already-aborted signal never fires the listener; check\n      // synchronously so a pre-cancelled caller cannot issue session\n      // requests or reach the network at all.\n      if (callerSignal.aborted) abortInternal();\n      else callerSignal.addEventListener('abort', abortInternal, { once: true });\n    }\n  }\n\n  get version(): string {\n    return SDK_VERSION;\n  }\n\n  get workKey(): string {\n    return this.#config.workKey;\n  }\n\n  get region(): ViceMeRegion {\n    return this.#config.region;\n  }\n\n  get state(): ViceMeClientState {\n    return this.#lifecycle.state;\n  }\n\n  /** Internal: public API major, used by the loader registry namespace. */\n  get apiMajor(): number {\n    return API_MAJOR;\n  }\n\n  ready(): Promise<void> {\n    if (this.#lifecycle.destroyed) return Promise.reject(clientDestroyed());\n    this.#readyPromise ??= this.#initialize();\n    return this.#readyPromise;\n  }\n\n  async #initialize(): Promise<void> {\n    if (this.#lifecycle.destroyed) throw clientDestroyed();\n    this.#lifecycle.transition('INITIALIZING');\n    try {\n      await this.#session.establish();\n      if (this.#lifecycle.destroyed) throw clientDestroyed();\n      this.#lifecycle.transition('READY');\n    } catch (error) {\n      // If the client was destroyed mid-flight, report CLIENT_DESTROYED and do\n      // not attempt any further lifecycle transitions.\n      if (this.#lifecycle.destroyed) throw clientDestroyed();\n      this.#lifecycle.transition('FAILED');\n      // Allow a later `ready()` retry instead of caching the failure forever.\n      this.#readyPromise = undefined;\n      this.#session.invalidate();\n      throw error;\n    }\n  }\n\n  hasCapability(name: string): boolean {\n    if (this.#lifecycle.destroyed) return false;\n    const capabilities = this.#session.snapshot?.work.capabilities;\n    return capabilities !== undefined && capabilities.includes(name);\n  }\n\n  /** Names of capabilities enabled for this work (empty before `ready()`). */\n  get capabilities(): readonly string[] {\n    return this.#session.snapshot?.work.capabilities ?? [];\n  }\n\n  /**\n   * Internal: mark one capability unavailable without taking down the client\n   * (loader uses this when a feature chunk fails after the core is READY).\n   */\n  markDegraded(): void {\n    if (this.#lifecycle.state === 'READY') this.#lifecycle.transition('DEGRADED');\n  }\n\n  /** Internal: session snapshot access for capability modules. */\n  get sessionSnapshot() {\n    return this.#session.snapshot;\n  }\n\n  destroy(): void {\n    if (this.#lifecycle.destroyed) return;\n    this.#lifecycle.transition('DESTROYED');\n    this.#internalSignal.abort(new DestroySignalReason());\n    this.#session.destroy();\n    this.#lifecycle.clearListeners();\n    this.#readyPromise = undefined;\n  }\n}\n"],"names":["RETRYABLE_BY_DEFAULT","ViceMeError","init","json","isViceMeError","value","configInvalid","message","clientDestroyed","REGIONS","PUBLIC_API_BASE_URLS","resolveApiBaseUrl","region","isValidWorkKey","isValidRegion","validatePublicConfig","input","raw","known","key","ALLOWED_TRANSITIONS","Lifecycle","#state","#listeners","next","listener","parseSessionResponse","body","workKey","malformedSessionResponse","work","c","snapshot","SessionManager","#options","#now","#snapshot","#pending","options","#isExpired","expiresAt","response","SDK_VERSION","API_MAJOR","DestroySignalReason","ViceMeClientImpl","#lifecycle","#session","#config","#internalSignal","#readyPromise","deps","callerSignal","abortInternal","#initialize","error","name","capabilities"],"mappings":"AA8BA,MAAMA,wBAAyD,IAAI;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAMC,UAAoB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAYC,GAAuB;AACjC,UAAMA,EAAK,OAAO,GAClB,KAAK,OAAO,eACZ,KAAK,OAAOA,EAAK,MACjB,KAAK,YAAYA,EAAK,aAAaF,EAAqB,IAAIE,EAAK,IAAI,GACrE,KAAK,YAAYA,EAAK,WACtB,KAAK,aAAaA,EAAK;AAAA,EACzB;AAAA;AAAA,EAGA,SAKE;AACA,UAAMC,IAKF,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAA;AACvC,WAAI,KAAK,cAAc,WAAWA,EAAK,YAAY,KAAK,YACpD,KAAK,eAAe,WAAWA,EAAK,aAAa,KAAK,aACnDA;AAAA,EACT;AACF;AAEO,SAASC,EAAcC,GAAsC;AAClE,SAAOA,aAAiBJ;AAC1B;AAGO,SAASK,EAAcC,GAA8B;AAC1D,SAAO,IAAIN,EAAY,EAAE,MAAM,kBAAkB,SAAAM,GAAS,WAAW,IAAO;AAC9E;AAGO,SAASC,IAA+B;AAC7C,SAAO,IAAIP,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;ACjEA,MAAMQ,IAA+B,oBAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,GAOhDC,IAA+D;AAAA,EAC1E,IAAI;AAAA,EACJ,QAAQ;AACV;AAEO,SAASC,EAAkBC,GAA8B;AAC9D,SAAOF,EAAqBE,CAAM;AACpC;AAEO,SAASC,EAAeR,GAAiC;AAC9D,SAAO,OAAOA,KAAU,YAAY,6BAA6B,KAAKA,CAAK;AAC7E;AAEO,SAASS,EAAcT,GAAuC;AACnE,SAAO,OAAOA,KAAU,YAAYI,EAAQ,IAAIJ,CAAK;AACvD;AAMO,SAASU,EAAqBC,GAA8B;AACjE,MAAI,OAAOA,KAAU,YAAYA,MAAU;AACzC,UAAMV,EAAc,8CAA8C;AAEpE,QAAMW,IAAMD,GAENE,IAAQ,oBAAI,IAAI,CAAC,WAAW,UAAU,QAAQ,CAAC;AACrD,aAAWC,KAAO,OAAO,KAAKF,CAAG;AAC/B,QAAI,CAACC,EAAM,IAAIC,CAAG;AAChB,YAAMb,EAAc,gCAAgCa,CAAG,IAAI;AAG/D,MAAI,CAACN,EAAeI,EAAI,OAAO;AAC7B,UAAMX,EAAc,oEAAoE;AAE1F,MAAI,CAACQ,EAAcG,EAAI,MAAM;AAC3B,UAAMX,EAAc,wDAAwD;AAE9E,MAAIW,EAAI,WAAW,UAAa,EAAEA,EAAI,kBAAkB;AACtD,UAAMX,EAAc,sDAAsD;AAE5E,SAAO,EAAE,SAASW,EAAI,SAAS,QAAQA,EAAI,QAAQ,QAAQA,EAAI,OAAA;AACjE;ACtDA,MAAMG,IAAyF;AAAA,EAC7F,SAAS,CAAC,gBAAgB,WAAW;AAAA,EACrC,cAAc,CAAC,SAAS,UAAU,WAAW;AAAA,EAC7C,OAAO,CAAC,YAAY,WAAW;AAAA,EAC/B,UAAU,CAAC,WAAW;AAAA,EACtB,QAAQ,CAAC,gBAAgB,WAAW;AAAA,EACpC,WAAW,CAAA;AACb;AAIO,MAAMC,EAAU;AAAA,EACrBC,KAA4B;AAAA,EAC5BC,yBAAiB,IAAA;AAAA,EAEjB,IAAI,QAA2B;AAC7B,WAAO,KAAKD;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAKA,OAAW;AAAA,EACzB;AAAA,EAEA,WAAWE,GAA+B;AACxC,QAAIA,MAAS,KAAKF,IAClB;AAAA,UAAI,CAACF,EAAoB,KAAKE,EAAM,EAAG,SAASE,CAAI;AAClD,cAAM,IAAIvB,EAAY;AAAA,UACpB,MAAM;AAAA,UACN,SAAS,gCAAgC,KAAKqB,EAAM,OAAOE,CAAI;AAAA,UAC/D,WAAW;AAAA,QAAA,CACZ;AAEH,WAAKF,KAASE;AACd,iBAAWC,KAAY,KAAKF,GAAY,CAAAE,EAASD,CAAI;AAAA;AAAA,EACvD;AAAA;AAAA,EAGA,cAAoB;AAClB,QAAI,KAAK,UAAW,OAAMhB,EAAA;AAAA,EAC5B;AAAA,EAEA,UAAUiB,GAAyC;AACjD,gBAAKF,GAAW,IAAIE,CAAQ,GACrB,MAAM;AACX,WAAKF,GAAW,OAAOE,CAAQ;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,iBAAuB;AACrB,SAAKF,GAAW,MAAA;AAAA,EAClB;AACF;ACpBA,SAASG,EAAqBC,GAAeC,GAAsC;AACjF,MAAI,OAAOD,KAAS,YAAYA,MAAS;AACvC,UAAME,EAAA;AAER,QAAMZ,IAAMU,GACNG,IAAOb,EAAI;AACjB,MACE,OAAOa,KAAS,YAChBA,MAAS,QACT,OAAOA,EAAK,OAAQ,YACpB,CAAC,MAAM,QAAQA,EAAK,YAAY,KAChC,CAACA,EAAK,aAAa,MAAM,CAACC,MAAM,OAAOA,KAAM,QAAQ;AAErD,UAAMF,EAAA;AAER,MAAIC,EAAK,QAAQF;AACf,UAAM,IAAI3B,EAAY;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,IAAA,CACZ;AAEH,QAAM+B,IAAgC;AAAA,IACpC,MAAM;AAAA,MACJ,KAAKF,EAAK;AAAA,MACV,cAAcA,EAAK;AAAA,IAAA;AAAA,EACrB;AAGF,SAAI,OAAOb,EAAI,SAAU,aAAUe,EAAS,QAAQf,EAAI,QACpD,OAAOA,EAAI,aAAc,aAAUe,EAAS,YAAYf,EAAI,YACzDe;AACT;AAEA,SAASH,IAAwC;AAC/C,SAAO,IAAI5B,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;AAEO,MAAMgC,EAAe;AAAA,EACjBC;AAAA,EACAC;AAAA,EACTC;AAAA,EACAC;AAAA,EAEA,YAAYC,GAAgC;AAC1C,SAAKJ,KAAWI,GAChB,KAAKH,KAAOG,EAAQ,QAAQ,MAAM,KAAK;EACzC;AAAA,EAEA,IAAI,WAA4C;AAC9C,WAAO,KAAKF;AAAA,EACd;AAAA;AAAA,EAGAG,KAAsB;AACpB,UAAMC,IAAY,KAAKJ,IAAW;AAClC,WAAOI,MAAc,UAAaA,KAAa,KAAKL,GAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAA0C;AACxC,QAAI,KAAKC,IAAW;AAClB,UAAI,CAAC,KAAKG,GAAA,UAAqB,QAAQ,QAAQ,KAAKH,EAAS;AAC7D,WAAKA,KAAY;AAAA,IACnB;AACA,gBAAKC,OAAa,KAAKH,GAAS,UAC7B,QAAQ;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,SAAS,KAAKA,GAAS,QAAA;AAAA,MAC/B,QAAQ,KAAKA,GAAS;AAAA,MACtB,WAAW,KAAKA,GAAS;AAAA,IAAA,CAC1B,EACA,KAAK,CAACO,MAAa;AAClB,YAAMT,IAAWN,EAAqBe,EAAS,MAAM,KAAKP,GAAS,OAAO;AAC1E,kBAAKE,KAAYJ,GACVA;AAAA,IACT,CAAC,EACA,QAAQ,MAAM;AACb,WAAKK,KAAW;AAAA,IAClB,CAAC,GACI,KAAKA;AAAA,EACd;AAAA;AAAA,EAGA,aAAmB;AACjB,SAAKD,KAAY;AAAA,EACnB;AAAA;AAAA,EAGA,UAAgB;AACd,SAAK,WAAA,GACL,KAAKC,KAAW;AAAA,EAClB;AACF;ACnJO,MAAMK,IAAc,SAGdC,IAAY;ACyBzB,MAAMC,UAA4B,aAAa;AAAA,EAC7C,cAAc;AACZ,UAAM,4BAA4B,YAAY;AAAA,EAChD;AACF;AASO,MAAMC,EAAyC;AAAA,EAC3CC,KAAa,IAAIzB,EAAA;AAAA,EACjB0B;AAAA,EACAC;AAAA,EACAC,KAAkB,IAAI,gBAAA;AAAA,EAC/BC;AAAA,EAEA,YAAYC,GAAwB;AAClC,SAAKH,KAAUG,EAAK,QACpB,KAAKJ,KAAW,IAAId,EAAe;AAAA,MACjC,SAASkB,EAAK,OAAO;AAAA,MACrB,WAAWA,EAAK;AAAA,MAChB,QAAQ,KAAKF,GAAgB;AAAA,MAC7B,GAAIE,EAAK,QAAQ,SAAY,EAAE,KAAKA,EAAK,QAAQ,CAAA;AAAA,IAAC,CACnD;AACD,UAAMC,IAAeD,EAAK,OAAO;AACjC,QAAIC,GAAc;AAEhB,YAAMC,IAAgB,MAAM;AAC1B,aAAKJ,GAAgB;AAAA,UACnBG,EAAa,kBAAkB,QAC3BA,EAAa,SACb,IAAI,aAAa,0BAA0B,YAAY;AAAA,QAAA;AAAA,MAE/D;AAIA,MAAIA,EAAa,UAASC,EAAA,MACR,iBAAiB,SAASA,GAAe,EAAE,MAAM,IAAM;AAAA,IAC3E;AAAA,EACF;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAOX;AAAA,EACT;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAKM,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,SAAuB;AACzB,WAAO,KAAKA,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,QAA2B;AAC7B,WAAO,KAAKF,GAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAOH;AAAA,EACT;AAAA,EAEA,QAAuB;AACrB,WAAI,KAAKG,GAAW,YAAkB,QAAQ,OAAOtC,GAAiB,KACtE,KAAK0C,OAAkB,KAAKI,GAAA,GACrB,KAAKJ;AAAA,EACd;AAAA,EAEA,MAAMI,KAA6B;AACjC,QAAI,KAAKR,GAAW,UAAW,OAAMtC,EAAA;AACrC,SAAKsC,GAAW,WAAW,cAAc;AACzC,QAAI;AAEF,UADA,MAAM,KAAKC,GAAS,UAAA,GAChB,KAAKD,GAAW,UAAW,OAAMtC,EAAA;AACrC,WAAKsC,GAAW,WAAW,OAAO;AAAA,IACpC,SAASS,GAAO;AAGd,YAAI,KAAKT,GAAW,YAAiBtC,EAAA,KACrC,KAAKsC,GAAW,WAAW,QAAQ,GAEnC,KAAKI,KAAgB,QACrB,KAAKH,GAAS,WAAA,GACRQ;AAAA,IACR;AAAA,EACF;AAAA,EAEA,cAAcC,GAAuB;AACnC,QAAI,KAAKV,GAAW,UAAW,QAAO;AACtC,UAAMW,IAAe,KAAKV,GAAS,UAAU,KAAK;AAClD,WAAOU,MAAiB,UAAaA,EAAa,SAASD,CAAI;AAAA,EACjE;AAAA;AAAA,EAGA,IAAI,eAAkC;AACpC,WAAO,KAAKT,GAAS,UAAU,KAAK,gBAAgB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAqB;AACnB,IAAI,KAAKD,GAAW,UAAU,WAAS,KAAKA,GAAW,WAAW,UAAU;AAAA,EAC9E;AAAA;AAAA,EAGA,IAAI,kBAAkB;AACpB,WAAO,KAAKC,GAAS;AAAA,EACvB;AAAA,EAEA,UAAgB;AACd,IAAI,KAAKD,GAAW,cACpB,KAAKA,GAAW,WAAW,WAAW,GACtC,KAAKG,GAAgB,MAAM,IAAIL,EAAA,CAAqB,GACpD,KAAKG,GAAS,QAAA,GACd,KAAKD,GAAW,eAAA,GAChB,KAAKI,KAAgB;AAAA,EACvB;AACF;"}

package/dist/core/client.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Headless ViceMe client.
+ *
+ * The core never touches the DOM: `document`, auto-mount, and UI lifecycle
+ * live exclusively in the loader and capability `mount` layers. `ready()` is
+ * idempotent per instance (shares one promise), `destroy()` is idempotent and
+ * synchronously cancels requests and subscriptions; every business method on a
+ * destroyed client fails with `CLIENT_DESTROYED`.
+ */
+import { type ViceMeClientState } from './lifecycle.ts';
+import type { ViceMeConfig, ViceMeRegion } from './config.ts';
+import type { Transport } from '../transport/transport.ts';
+export interface ViceMeClient {
+    readonly version: string;
+    readonly workKey: string;
+    readonly region: ViceMeRegion;
+    readonly state: ViceMeClientState;
+    ready(): Promise<void>;
+    hasCapability(name: string): boolean;
+    destroy(): void;
+}
+export interface ViceMeMountedInstance {
+    readonly instanceKey: string;
+    readonly capability: string;
+    destroy(): void;
+}
+export interface ViceMeClientDeps {
+    config: ViceMeConfig;
+    transport: Transport;
+    /** Injectable clock (testing only). */
+    now?: () => number;
+}
+export declare class ViceMeClientImpl implements ViceMeClient {
+    #private;
+    constructor(deps: ViceMeClientDeps);
+    get version(): string;
+    get workKey(): string;
+    get region(): ViceMeRegion;
+    get state(): ViceMeClientState;
+    /** Internal: public API major, used by the loader registry namespace. */
+    get apiMajor(): number;
+    ready(): Promise<void>;
+    hasCapability(name: string): boolean;
+    /** Names of capabilities enabled for this work (empty before `ready()`). */
+    get capabilities(): readonly string[];
+    /**
+     * Internal: mark one capability unavailable without taking down the client
+     * (loader uses this when a feature chunk fails after the core is READY).
+     */
+    markDegraded(): void;
+    /** Internal: session snapshot access for capability modules. */
+    get sessionSnapshot(): import("../session/session.ts").WorkSessionSnapshot | undefined;
+    destroy(): void;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/core/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAa,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAG3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,IAAI,IAAI,CAAC;CACjB;AASD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;IACrB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,gBAAiB,YAAW,YAAY;;gBAOvC,IAAI,EAAE,gBAAgB;IA0BlC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,IAAI,KAAK,IAAI,iBAAiB,CAE7B;IAED,yEAAyE;IACzE,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBtB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAMpC,4EAA4E;IAC5E,IAAI,YAAY,IAAI,SAAS,MAAM,EAAE,CAEpC;IAED;;;OAGG;IACH,YAAY,IAAI,IAAI;IAIpB,gEAAgE;IAChE,IAAI,eAAe,oEAElB;IAED,OAAO,IAAI,IAAI;CAQhB"}

package/dist/core/config.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Public client configuration.
+ *
+ * Production `createViceMe()` accepts exactly `workKey`, `region`, and
+ * `signal`. Anything else (transport, clock, request ids, base URLs) is a
+ * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can
+ * never bake temporary or internal endpoints into user projects.
+ */
+export type ViceMeRegion = 'cn' | 'global';
+export interface ViceMeConfig {
+    /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */
+    workKey: string;
+    /** Routes public API and CDN traffic. */
+    region: ViceMeRegion;
+    /** Optional abort signal owned by the host page. */
+    signal?: AbortSignal;
+}
+/**
+ * Public API origins per region. These are the only production endpoints the
+ * SDK may contact; B1 confirms final hostnames and any change happens here in
+ * one place (never via a public `apiBaseUrl` option).
+ */
+export declare const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>>;
+export declare function resolveApiBaseUrl(region: ViceMeRegion): string;
+export declare function isValidWorkKey(value: unknown): value is string;
+export declare function isValidRegion(value: unknown): value is ViceMeRegion;
+/**
+ * Validate unknown input as a public client config. Throws a CONFIG_INVALID
+ * ViceMeError that never echoes values back beyond the offending field name.
+ */
+export declare function validatePublicConfig(input: unknown): ViceMeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/core/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,QAAQ,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,oDAAoD;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAID;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAGvE,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE9D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAsBjE"}

package/dist/core/errors.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Public error model.
+ *
+ * Consumers branch on the stable `code` only — never on `message` text.
+ * Error payloads must never contain provider responses, tokens, cookies, or
+ * internal stack traces; `toJSON()` exposes the safe diagnostic subset.
+ */
+export type ViceMeErrorCode = 'CONFIG_INVALID' | 'WORK_NOT_FOUND' | 'ORIGIN_NOT_ALLOWED' | 'CAPABILITY_DISABLED' | 'CLIENT_DESTROYED' | 'SESSION_EXPIRED' | 'RATE_LIMITED' | 'NETWORK_TIMEOUT' | 'CHECKOUT_UNAVAILABLE' | 'INTERNAL_ERROR';
+export interface ViceMeErrorInit {
+    code: ViceMeErrorCode;
+    message: string;
+    retryable?: boolean;
+    /** Server-assigned request id echoed back for support correlation. */
+    requestId?: string;
+    /** Capability the error belongs to, when scoped to one. */
+    capability?: string;
+}
+export declare class ViceMeError extends Error {
+    readonly code: ViceMeErrorCode;
+    readonly retryable: boolean;
+    readonly requestId?: string;
+    readonly capability?: string;
+    constructor(init: ViceMeErrorInit);
+    /** Safe, stable-shape serialization for logs and `viceme:error` events. */
+    toJSON(): {
+        code: ViceMeErrorCode;
+        retryable: boolean;
+        requestId?: string;
+        capability?: string;
+    };
+}
+export declare function isViceMeError(value: unknown): value is ViceMeError;
+/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */
+export declare function configInvalid(message: string): ViceMeError;
+/** Build a CLIENT_DESTROYED error for post-destroy calls. */
+export declare function clientDestroyed(): ViceMeError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,iBAAiB,GACjB,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,IAAI,EAAE,eAAe;IASjC,2EAA2E;IAC3E,MAAM,IAAI;QACR,IAAI,EAAE,eAAe,CAAC;QACtB,SAAS,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAWF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAE1D;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,IAAI,WAAW,CAM7C"}

package/dist/core/lifecycle.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Client lifecycle state machine.
+ *
+ * ```text
+ * CREATED -> INITIALIZING -> READY -> DESTROYED
+ * INITIALIZING -> FAILED (retryable: FAILED -> INITIALIZING)
+ * READY -> DEGRADED (single capability unavailable; host page keeps working)
+ * DEGRADED -> READY (when all capabilities recover is a B1+ concern)
+ * ```
+ *
+ * State is exposed read-only; consumers can never assign it directly.
+ */
+export type ViceMeClientState = 'CREATED' | 'INITIALIZING' | 'READY' | 'DEGRADED' | 'FAILED' | 'DESTROYED';
+export type LifecycleListener = (state: ViceMeClientState) => void;
+export declare class Lifecycle {
+    #private;
+    get state(): ViceMeClientState;
+    get destroyed(): boolean;
+    transition(next: ViceMeClientState): void;
+    /** Any operation on a destroyed client must fail closed with this guard. */
+    assertAlive(): void;
+    subscribe(listener: LifecycleListener): () => void;
+    clearListeners(): void;
+}
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/core/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/core/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,MAAM,iBAAiB,GAC3B,SAAS,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAW7E,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAEnE,qBAAa,SAAS;;IAIpB,IAAI,KAAK,IAAI,iBAAiB,CAE7B;IAED,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAazC,4EAA4E;IAC5E,WAAW,IAAI,IAAI;IAInB,SAAS,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAOlD,cAAc,IAAI,IAAI;CAGvB"}