@viceme-ai/sdk 0.1.2 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -178,7 +178,7 @@ class b {
178
178
  this.invalidate(), this.#i = void 0;
179
179
  }
180
180
  }
181
- const p = "0.1.2", I = 1;
181
+ const p = "0.1.4", I = 1;
182
182
  class A extends DOMException {
183
183
  constructor() {
184
184
  super("ViceMe client destroyed.", "AbortError");
@@ -272,4 +272,4 @@ export {
272
272
  R as r,
273
273
  k as v
274
274
  };
275
- //# sourceMappingURL=client-CGU3qeew.js.map
275
+ //# sourceMappingURL=client-HEsNBxO0.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"client-CGU3qeew.js","sources":["../../src/core/errors.ts","../../src/core/config.ts","../../src/core/lifecycle.ts","../../src/session/session.ts","../../src/version.ts","../../src/core/client.ts"],"sourcesContent":["/**\n * Public error model.\n *\n * Consumers branch on the stable `code` only — never on `message` text.\n * Error payloads must never contain provider responses, tokens, cookies, or\n * internal stack traces; `toJSON()` exposes the safe diagnostic subset.\n */\n\nexport type ViceMeErrorCode =\n | 'CONFIG_INVALID'\n | 'WORK_NOT_FOUND'\n | 'ORIGIN_NOT_ALLOWED'\n | 'CAPABILITY_DISABLED'\n | 'CLIENT_DESTROYED'\n | 'SESSION_EXPIRED'\n | 'RATE_LIMITED'\n | 'NETWORK_TIMEOUT'\n | 'CHECKOUT_UNAVAILABLE'\n | 'INTERNAL_ERROR';\n\nexport interface ViceMeErrorInit {\n code: ViceMeErrorCode;\n message: string;\n retryable?: boolean;\n /** Server-assigned request id echoed back for support correlation. */\n requestId?: string;\n /** Capability the error belongs to, when scoped to one. */\n capability?: string;\n}\n\nconst RETRYABLE_BY_DEFAULT: ReadonlySet<ViceMeErrorCode> = new Set([\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\nexport class ViceMeError extends Error {\n readonly code: ViceMeErrorCode;\n readonly retryable: boolean;\n readonly requestId?: string;\n readonly capability?: string;\n\n constructor(init: ViceMeErrorInit) {\n super(init.message);\n this.name = 'ViceMeError';\n this.code = init.code;\n this.retryable = init.retryable ?? RETRYABLE_BY_DEFAULT.has(init.code);\n this.requestId = init.requestId;\n this.capability = init.capability;\n }\n\n /** Safe, stable-shape serialization for logs and `viceme:error` events. */\n toJSON(): {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } {\n const json: {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } = { code: this.code, retryable: this.retryable };\n if (this.requestId !== undefined) json.requestId = this.requestId;\n if (this.capability !== undefined) json.capability = this.capability;\n return json;\n }\n}\n\nexport function isViceMeError(value: unknown): value is ViceMeError {\n return value instanceof ViceMeError;\n}\n\n/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */\nexport function configInvalid(message: string): ViceMeError {\n return new ViceMeError({ code: 'CONFIG_INVALID', message, retryable: false });\n}\n\n/** Build a CLIENT_DESTROYED error for post-destroy calls. */\nexport function clientDestroyed(): ViceMeError {\n return new ViceMeError({\n code: 'CLIENT_DESTROYED',\n message: 'ViceMe client has been destroyed.',\n retryable: false,\n });\n}\n","/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey`, `region`, and\n * `signal`. Anything else (transport, clock, request ids, base URLs) is a\n * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can\n * never bake temporary or internal endpoints into user projects.\n */\n\nimport { configInvalid } from './errors.ts';\n\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n workKey: string;\n /** Routes public API and CDN traffic. */\n region: ViceMeRegion;\n /** Optional abort signal owned by the host page. */\n signal?: AbortSignal;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\n/**\n * Public API origins per region. These are the only production endpoints the\n * SDK may contact; B1 confirms final hostnames and any change happens here in\n * one place (never via a public `apiBaseUrl` option).\n */\nexport const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>> = {\n cn: 'https://api.viceme.cn',\n global: 'https://api.viceme.ai',\n};\n\nexport function resolveApiBaseUrl(region: ViceMeRegion): string {\n return PUBLIC_API_BASE_URLS[region];\n}\n\nexport function isValidWorkKey(value: unknown): value is string {\n return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n if (typeof input !== 'object' || input === null) {\n throw configInvalid('createViceMe expects a configuration object.');\n }\n const raw = input as Record<string, unknown>;\n\n const known = new Set(['workKey', 'region', 'signal']);\n for (const key of Object.keys(raw)) {\n if (!known.has(key)) {\n throw configInvalid(`Unknown configuration field \"${key}\".`);\n }\n }\n if (!isValidWorkKey(raw.workKey)) {\n throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n }\n if (!isValidRegion(raw.region)) {\n throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n }\n if (raw.signal !== undefined && !(raw.signal instanceof AbortSignal)) {\n throw configInvalid('Configuration field \"signal\" must be an AbortSignal.');\n }\n return { workKey: raw.workKey, region: raw.region, signal: raw.signal };\n}\n","/**\n * Client lifecycle state machine.\n *\n * ```text\n * CREATED -> INITIALIZING -> READY -> DESTROYED\n * INITIALIZING -> FAILED (retryable: FAILED -> INITIALIZING)\n * READY -> DEGRADED (single capability unavailable; host page keeps working)\n * DEGRADED -> READY (when all capabilities recover is a B1+ concern)\n * ```\n *\n * State is exposed read-only; consumers can never assign it directly.\n */\n\nimport { ViceMeError, clientDestroyed } from './errors.ts';\n\nexport type ViceMeClientState =\n 'CREATED' | 'INITIALIZING' | 'READY' | 'DEGRADED' | 'FAILED' | 'DESTROYED';\n\nconst ALLOWED_TRANSITIONS: Readonly<Record<ViceMeClientState, readonly ViceMeClientState[]>> = {\n CREATED: ['INITIALIZING', 'DESTROYED'],\n INITIALIZING: ['READY', 'FAILED', 'DESTROYED'],\n READY: ['DEGRADED', 'DESTROYED'],\n DEGRADED: ['DESTROYED'],\n FAILED: ['INITIALIZING', 'DESTROYED'],\n DESTROYED: [],\n};\n\nexport type LifecycleListener = (state: ViceMeClientState) => void;\n\nexport class Lifecycle {\n #state: ViceMeClientState = 'CREATED';\n #listeners = new Set<LifecycleListener>();\n\n get state(): ViceMeClientState {\n return this.#state;\n }\n\n get destroyed(): boolean {\n return this.#state === 'DESTROYED';\n }\n\n transition(next: ViceMeClientState): void {\n if (next === this.#state) return;\n if (!ALLOWED_TRANSITIONS[this.#state]!.includes(next)) {\n throw new ViceMeError({\n code: 'INTERNAL_ERROR',\n message: `Illegal lifecycle transition ${this.#state} -> ${next}.`,\n retryable: false,\n });\n }\n this.#state = next;\n for (const listener of this.#listeners) listener(next);\n }\n\n /** Any operation on a destroyed client must fail closed with this guard. */\n assertAlive(): void {\n if (this.destroyed) throw clientDestroyed();\n }\n\n subscribe(listener: LifecycleListener): () => void {\n this.#listeners.add(listener);\n return () => {\n this.#listeners.delete(listener);\n };\n }\n\n clearListeners(): void {\n this.#listeners.clear();\n }\n}\n","/**\n * Public visitor session.\n *\n * ```text\n * SDK + workKey + Origin -> POST /public/v1/work-sessions\n * -> short-lived capability token -> public capability calls\n * ```\n *\n * The token lives in memory only (never localStorage/cookies), is bound to the\n * Work, Origin, capability set, and expiry by the server, and is dropped on\n * `destroy()`. `workKey` locates the Work — it is never an authorization\n * credential.\n */\n\nimport { ViceMeError } from '../core/errors.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport type { components } from '../generated/public-contract.ts';\n\n/**\n * DTO shapes come from the generated public contract snapshot — the SDK never\n * hand-writes a second copy of the server DTOs. The runtime validator below\n * stays intentionally narrow (required fields of the current contract only).\n */\ntype WorkSessionDto = components['schemas']['WorkSession'];\nexport type CreateWorkSessionRequestDto = components['schemas']['CreateWorkSessionRequest'];\n\nexport interface WorkDescriptor {\n key: string;\n /** Capability names enabled for this work. */\n capabilities: string[];\n}\n\nexport interface WorkSessionSnapshot {\n work: WorkDescriptor;\n /** Opaque short-lived capability token; memory-only. */\n token?: string;\n /** Epoch milliseconds when the token expires, when provided by the server. */\n expiresAt?: number;\n}\n\nexport interface SessionManagerOptions {\n workKey: string;\n transport: Transport;\n signal?: AbortSignal;\n timeoutMs?: number;\n /** Injectable clock for tests. */\n now?: () => number;\n}\n\nfunction parseSessionResponse(body: unknown, workKey: string): WorkSessionSnapshot {\n if (typeof body !== 'object' || body === null) {\n throw malformedSessionResponse();\n }\n const raw = body as WorkSessionDto;\n const work = raw.work as { key?: unknown; capabilities?: unknown } | undefined;\n if (\n typeof work !== 'object' ||\n work === null ||\n typeof work.key !== 'string' ||\n !Array.isArray(work.capabilities) ||\n !work.capabilities.every((c) => typeof c === 'string')\n ) {\n throw malformedSessionResponse();\n }\n if (work.key !== workKey) {\n throw new ViceMeError({\n code: 'WORK_NOT_FOUND',\n message: 'Work-session response did not match the requested work key.',\n retryable: false,\n });\n }\n const snapshot: WorkSessionSnapshot = {\n work: {\n key: work.key,\n capabilities: work.capabilities as string[],\n },\n };\n // Unknown extra fields are allowed and ignored (forward compatibility).\n if (typeof raw.token === 'string') snapshot.token = raw.token;\n if (typeof raw.expiresAt === 'number') snapshot.expiresAt = raw.expiresAt;\n return snapshot;\n}\n\nfunction malformedSessionResponse(): ViceMeError {\n return new ViceMeError({\n code: 'INTERNAL_ERROR',\n message: 'Malformed work-session response.',\n retryable: true,\n });\n}\n\nexport class SessionManager {\n readonly #options: SessionManagerOptions;\n readonly #now: () => number;\n #snapshot: WorkSessionSnapshot | undefined;\n #pending: Promise<WorkSessionSnapshot> | undefined;\n\n constructor(options: SessionManagerOptions) {\n this.#options = options;\n this.#now = options.now ?? (() => Date.now());\n }\n\n get snapshot(): WorkSessionSnapshot | undefined {\n return this.#snapshot;\n }\n\n /** True when the cached snapshot's server-provided expiry has passed. */\n #isExpired(): boolean {\n const expiresAt = this.#snapshot?.expiresAt;\n return expiresAt !== undefined && expiresAt <= this.#now();\n }\n\n /**\n * Establish (or return the established) public session.\n *\n * A cached snapshot is reused only while it is unexpired; an expired\n * snapshot is dropped and re-authenticated. Concurrent callers share one\n * in-flight request (single flight).\n */\n establish(): Promise<WorkSessionSnapshot> {\n if (this.#snapshot) {\n if (!this.#isExpired()) return Promise.resolve(this.#snapshot);\n this.#snapshot = undefined;\n }\n this.#pending ??= this.#options.transport\n .request({\n method: 'POST',\n path: '/public/v1/work-sessions',\n body: { workKey: this.#options.workKey } satisfies CreateWorkSessionRequestDto,\n signal: this.#options.signal,\n timeoutMs: this.#options.timeoutMs,\n })\n .then((response) => {\n const snapshot = parseSessionResponse(response.body, this.#options.workKey);\n this.#snapshot = snapshot;\n return snapshot;\n })\n .finally(() => {\n this.#pending = undefined;\n });\n return this.#pending;\n }\n\n /** Drop the token; next `establish()` re-authenticates. */\n invalidate(): void {\n this.#snapshot = undefined;\n }\n\n /** Hard cleanup: forget the token and pending work. */\n destroy(): void {\n this.invalidate();\n this.#pending = undefined;\n }\n}\n","/**\n * Single source of truth for the SDK runtime version.\n *\n * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces\n * the match so the loader, release manifest, and npm metadata can never drift.\n */\nexport const SDK_VERSION = '0.1.2';\n\n/** Public API major carried by this build (loader namespace `v1`). */\nexport const API_MAJOR = 1;\n","/**\n * Headless ViceMe client.\n *\n * The core never touches the DOM: `document`, auto-mount, and UI lifecycle\n * live exclusively in the loader and capability `mount` layers. `ready()` is\n * idempotent per instance (shares one promise), `destroy()` is idempotent and\n * synchronously cancels requests and subscriptions; every business method on a\n * destroyed client fails with `CLIENT_DESTROYED`.\n */\n\nimport { clientDestroyed } from './errors.ts';\nimport { Lifecycle, type ViceMeClientState } from './lifecycle.ts';\nimport type { ViceMeConfig, ViceMeRegion } from './config.ts';\nimport { SessionManager } from '../session/session.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport { API_MAJOR, SDK_VERSION } from '../version.ts';\n\nexport interface ViceMeClient {\n readonly version: string;\n readonly workKey: string;\n readonly region: ViceMeRegion;\n readonly state: ViceMeClientState;\n ready(): Promise<void>;\n hasCapability(name: string): boolean;\n destroy(): void;\n}\n\nexport interface ViceMeMountedInstance {\n readonly instanceKey: string;\n readonly capability: string;\n destroy(): void;\n}\n\n/** Marker so in-flight requests cancelled by `destroy()` map to CLIENT_DESTROYED. */\nclass DestroySignalReason extends DOMException {\n constructor() {\n super('ViceMe client destroyed.', 'AbortError');\n }\n}\n\nexport interface ViceMeClientDeps {\n config: ViceMeConfig;\n transport: Transport;\n /** Injectable clock (testing only). */\n now?: () => number;\n}\n\nexport class ViceMeClientImpl implements ViceMeClient {\n readonly #lifecycle = new Lifecycle();\n readonly #session: SessionManager;\n readonly #config: ViceMeConfig;\n readonly #internalSignal = new AbortController();\n #readyPromise: Promise<void> | undefined;\n\n constructor(deps: ViceMeClientDeps) {\n this.#config = deps.config;\n this.#session = new SessionManager({\n workKey: deps.config.workKey,\n transport: deps.transport,\n signal: this.#internalSignal.signal,\n ...(deps.now !== undefined ? { now: deps.now } : {}),\n });\n const callerSignal = deps.config.signal;\n if (callerSignal) {\n // Propagate the caller's own abort reason when one was set.\n const abortInternal = () => {\n this.#internalSignal.abort(\n callerSignal.reason instanceof Error\n ? callerSignal.reason\n : new DOMException('Caller signal aborted.', 'AbortError'),\n );\n };\n // An already-aborted signal never fires the listener; check\n // synchronously so a pre-cancelled caller cannot issue session\n // requests or reach the network at all.\n if (callerSignal.aborted) abortInternal();\n else callerSignal.addEventListener('abort', abortInternal, { once: true });\n }\n }\n\n get version(): string {\n return SDK_VERSION;\n }\n\n get workKey(): string {\n return this.#config.workKey;\n }\n\n get region(): ViceMeRegion {\n return this.#config.region;\n }\n\n get state(): ViceMeClientState {\n return this.#lifecycle.state;\n }\n\n /** Internal: public API major, used by the loader registry namespace. */\n get apiMajor(): number {\n return API_MAJOR;\n }\n\n ready(): Promise<void> {\n if (this.#lifecycle.destroyed) return Promise.reject(clientDestroyed());\n this.#readyPromise ??= this.#initialize();\n return this.#readyPromise;\n }\n\n async #initialize(): Promise<void> {\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('INITIALIZING');\n try {\n await this.#session.establish();\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('READY');\n } catch (error) {\n // If the client was destroyed mid-flight, report CLIENT_DESTROYED and do\n // not attempt any further lifecycle transitions.\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('FAILED');\n // Allow a later `ready()` retry instead of caching the failure forever.\n this.#readyPromise = undefined;\n this.#session.invalidate();\n throw error;\n }\n }\n\n hasCapability(name: string): boolean {\n if (this.#lifecycle.destroyed) return false;\n const capabilities = this.#session.snapshot?.work.capabilities;\n return capabilities !== undefined && capabilities.includes(name);\n }\n\n /** Names of capabilities enabled for this work (empty before `ready()`). */\n get capabilities(): readonly string[] {\n return this.#session.snapshot?.work.capabilities ?? [];\n }\n\n /**\n * Internal: mark one capability unavailable without taking down the client\n * (loader uses this when a feature chunk fails after the core is READY).\n */\n markDegraded(): void {\n if (this.#lifecycle.state === 'READY') this.#lifecycle.transition('DEGRADED');\n }\n\n /** Internal: session snapshot access for capability modules. */\n get sessionSnapshot() {\n return this.#session.snapshot;\n }\n\n destroy(): void {\n if (this.#lifecycle.destroyed) return;\n this.#lifecycle.transition('DESTROYED');\n this.#internalSignal.abort(new DestroySignalReason());\n this.#session.destroy();\n this.#lifecycle.clearListeners();\n this.#readyPromise = undefined;\n }\n}\n"],"names":["RETRYABLE_BY_DEFAULT","ViceMeError","init","json","isViceMeError","value","configInvalid","message","clientDestroyed","REGIONS","PUBLIC_API_BASE_URLS","resolveApiBaseUrl","region","isValidWorkKey","isValidRegion","validatePublicConfig","input","raw","known","key","ALLOWED_TRANSITIONS","Lifecycle","#state","#listeners","next","listener","parseSessionResponse","body","workKey","malformedSessionResponse","work","c","snapshot","SessionManager","#options","#now","#snapshot","#pending","options","#isExpired","expiresAt","response","SDK_VERSION","API_MAJOR","DestroySignalReason","ViceMeClientImpl","#lifecycle","#session","#config","#internalSignal","#readyPromise","deps","callerSignal","abortInternal","#initialize","error","name","capabilities"],"mappings":"AA8BA,MAAMA,wBAAyD,IAAI;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAMC,UAAoB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAYC,GAAuB;AACjC,UAAMA,EAAK,OAAO,GAClB,KAAK,OAAO,eACZ,KAAK,OAAOA,EAAK,MACjB,KAAK,YAAYA,EAAK,aAAaF,EAAqB,IAAIE,EAAK,IAAI,GACrE,KAAK,YAAYA,EAAK,WACtB,KAAK,aAAaA,EAAK;AAAA,EACzB;AAAA;AAAA,EAGA,SAKE;AACA,UAAMC,IAKF,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAA;AACvC,WAAI,KAAK,cAAc,WAAWA,EAAK,YAAY,KAAK,YACpD,KAAK,eAAe,WAAWA,EAAK,aAAa,KAAK,aACnDA;AAAA,EACT;AACF;AAEO,SAASC,EAAcC,GAAsC;AAClE,SAAOA,aAAiBJ;AAC1B;AAGO,SAASK,EAAcC,GAA8B;AAC1D,SAAO,IAAIN,EAAY,EAAE,MAAM,kBAAkB,SAAAM,GAAS,WAAW,IAAO;AAC9E;AAGO,SAASC,IAA+B;AAC7C,SAAO,IAAIP,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;ACjEA,MAAMQ,IAA+B,oBAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,GAOhDC,IAA+D;AAAA,EAC1E,IAAI;AAAA,EACJ,QAAQ;AACV;AAEO,SAASC,EAAkBC,GAA8B;AAC9D,SAAOF,EAAqBE,CAAM;AACpC;AAEO,SAASC,EAAeR,GAAiC;AAC9D,SAAO,OAAOA,KAAU,YAAY,6BAA6B,KAAKA,CAAK;AAC7E;AAEO,SAASS,EAAcT,GAAuC;AACnE,SAAO,OAAOA,KAAU,YAAYI,EAAQ,IAAIJ,CAAK;AACvD;AAMO,SAASU,EAAqBC,GAA8B;AACjE,MAAI,OAAOA,KAAU,YAAYA,MAAU;AACzC,UAAMV,EAAc,8CAA8C;AAEpE,QAAMW,IAAMD,GAENE,IAAQ,oBAAI,IAAI,CAAC,WAAW,UAAU,QAAQ,CAAC;AACrD,aAAWC,KAAO,OAAO,KAAKF,CAAG;AAC/B,QAAI,CAACC,EAAM,IAAIC,CAAG;AAChB,YAAMb,EAAc,gCAAgCa,CAAG,IAAI;AAG/D,MAAI,CAACN,EAAeI,EAAI,OAAO;AAC7B,UAAMX,EAAc,oEAAoE;AAE1F,MAAI,CAACQ,EAAcG,EAAI,MAAM;AAC3B,UAAMX,EAAc,wDAAwD;AAE9E,MAAIW,EAAI,WAAW,UAAa,EAAEA,EAAI,kBAAkB;AACtD,UAAMX,EAAc,sDAAsD;AAE5E,SAAO,EAAE,SAASW,EAAI,SAAS,QAAQA,EAAI,QAAQ,QAAQA,EAAI,OAAA;AACjE;ACtDA,MAAMG,IAAyF;AAAA,EAC7F,SAAS,CAAC,gBAAgB,WAAW;AAAA,EACrC,cAAc,CAAC,SAAS,UAAU,WAAW;AAAA,EAC7C,OAAO,CAAC,YAAY,WAAW;AAAA,EAC/B,UAAU,CAAC,WAAW;AAAA,EACtB,QAAQ,CAAC,gBAAgB,WAAW;AAAA,EACpC,WAAW,CAAA;AACb;AAIO,MAAMC,EAAU;AAAA,EACrBC,KAA4B;AAAA,EAC5BC,yBAAiB,IAAA;AAAA,EAEjB,IAAI,QAA2B;AAC7B,WAAO,KAAKD;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAKA,OAAW;AAAA,EACzB;AAAA,EAEA,WAAWE,GAA+B;AACxC,QAAIA,MAAS,KAAKF,IAClB;AAAA,UAAI,CAACF,EAAoB,KAAKE,EAAM,EAAG,SAASE,CAAI;AAClD,cAAM,IAAIvB,EAAY;AAAA,UACpB,MAAM;AAAA,UACN,SAAS,gCAAgC,KAAKqB,EAAM,OAAOE,CAAI;AAAA,UAC/D,WAAW;AAAA,QAAA,CACZ;AAEH,WAAKF,KAASE;AACd,iBAAWC,KAAY,KAAKF,GAAY,CAAAE,EAASD,CAAI;AAAA;AAAA,EACvD;AAAA;AAAA,EAGA,cAAoB;AAClB,QAAI,KAAK,UAAW,OAAMhB,EAAA;AAAA,EAC5B;AAAA,EAEA,UAAUiB,GAAyC;AACjD,gBAAKF,GAAW,IAAIE,CAAQ,GACrB,MAAM;AACX,WAAKF,GAAW,OAAOE,CAAQ;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,iBAAuB;AACrB,SAAKF,GAAW,MAAA;AAAA,EAClB;AACF;ACpBA,SAASG,EAAqBC,GAAeC,GAAsC;AACjF,MAAI,OAAOD,KAAS,YAAYA,MAAS;AACvC,UAAME,EAAA;AAER,QAAMZ,IAAMU,GACNG,IAAOb,EAAI;AACjB,MACE,OAAOa,KAAS,YAChBA,MAAS,QACT,OAAOA,EAAK,OAAQ,YACpB,CAAC,MAAM,QAAQA,EAAK,YAAY,KAChC,CAACA,EAAK,aAAa,MAAM,CAACC,MAAM,OAAOA,KAAM,QAAQ;AAErD,UAAMF,EAAA;AAER,MAAIC,EAAK,QAAQF;AACf,UAAM,IAAI3B,EAAY;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,IAAA,CACZ;AAEH,QAAM+B,IAAgC;AAAA,IACpC,MAAM;AAAA,MACJ,KAAKF,EAAK;AAAA,MACV,cAAcA,EAAK;AAAA,IAAA;AAAA,EACrB;AAGF,SAAI,OAAOb,EAAI,SAAU,aAAUe,EAAS,QAAQf,EAAI,QACpD,OAAOA,EAAI,aAAc,aAAUe,EAAS,YAAYf,EAAI,YACzDe;AACT;AAEA,SAASH,IAAwC;AAC/C,SAAO,IAAI5B,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;AAEO,MAAMgC,EAAe;AAAA,EACjBC;AAAA,EACAC;AAAA,EACTC;AAAA,EACAC;AAAA,EAEA,YAAYC,GAAgC;AAC1C,SAAKJ,KAAWI,GAChB,KAAKH,KAAOG,EAAQ,QAAQ,MAAM,KAAK;EACzC;AAAA,EAEA,IAAI,WAA4C;AAC9C,WAAO,KAAKF;AAAA,EACd;AAAA;AAAA,EAGAG,KAAsB;AACpB,UAAMC,IAAY,KAAKJ,IAAW;AAClC,WAAOI,MAAc,UAAaA,KAAa,KAAKL,GAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAA0C;AACxC,QAAI,KAAKC,IAAW;AAClB,UAAI,CAAC,KAAKG,GAAA,UAAqB,QAAQ,QAAQ,KAAKH,EAAS;AAC7D,WAAKA,KAAY;AAAA,IACnB;AACA,gBAAKC,OAAa,KAAKH,GAAS,UAC7B,QAAQ;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,SAAS,KAAKA,GAAS,QAAA;AAAA,MAC/B,QAAQ,KAAKA,GAAS;AAAA,MACtB,WAAW,KAAKA,GAAS;AAAA,IAAA,CAC1B,EACA,KAAK,CAACO,MAAa;AAClB,YAAMT,IAAWN,EAAqBe,EAAS,MAAM,KAAKP,GAAS,OAAO;AAC1E,kBAAKE,KAAYJ,GACVA;AAAA,IACT,CAAC,EACA,QAAQ,MAAM;AACb,WAAKK,KAAW;AAAA,IAClB,CAAC,GACI,KAAKA;AAAA,EACd;AAAA;AAAA,EAGA,aAAmB;AACjB,SAAKD,KAAY;AAAA,EACnB;AAAA;AAAA,EAGA,UAAgB;AACd,SAAK,WAAA,GACL,KAAKC,KAAW;AAAA,EAClB;AACF;ACnJO,MAAMK,IAAc,SAGdC,IAAY;ACyBzB,MAAMC,UAA4B,aAAa;AAAA,EAC7C,cAAc;AACZ,UAAM,4BAA4B,YAAY;AAAA,EAChD;AACF;AASO,MAAMC,EAAyC;AAAA,EAC3CC,KAAa,IAAIzB,EAAA;AAAA,EACjB0B;AAAA,EACAC;AAAA,EACAC,KAAkB,IAAI,gBAAA;AAAA,EAC/BC;AAAA,EAEA,YAAYC,GAAwB;AAClC,SAAKH,KAAUG,EAAK,QACpB,KAAKJ,KAAW,IAAId,EAAe;AAAA,MACjC,SAASkB,EAAK,OAAO;AAAA,MACrB,WAAWA,EAAK;AAAA,MAChB,QAAQ,KAAKF,GAAgB;AAAA,MAC7B,GAAIE,EAAK,QAAQ,SAAY,EAAE,KAAKA,EAAK,QAAQ,CAAA;AAAA,IAAC,CACnD;AACD,UAAMC,IAAeD,EAAK,OAAO;AACjC,QAAIC,GAAc;AAEhB,YAAMC,IAAgB,MAAM;AAC1B,aAAKJ,GAAgB;AAAA,UACnBG,EAAa,kBAAkB,QAC3BA,EAAa,SACb,IAAI,aAAa,0BAA0B,YAAY;AAAA,QAAA;AAAA,MAE/D;AAIA,MAAIA,EAAa,UAASC,EAAA,MACR,iBAAiB,SAASA,GAAe,EAAE,MAAM,IAAM;AAAA,IAC3E;AAAA,EACF;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAOX;AAAA,EACT;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAKM,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,SAAuB;AACzB,WAAO,KAAKA,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,QAA2B;AAC7B,WAAO,KAAKF,GAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAOH;AAAA,EACT;AAAA,EAEA,QAAuB;AACrB,WAAI,KAAKG,GAAW,YAAkB,QAAQ,OAAOtC,GAAiB,KACtE,KAAK0C,OAAkB,KAAKI,GAAA,GACrB,KAAKJ;AAAA,EACd;AAAA,EAEA,MAAMI,KAA6B;AACjC,QAAI,KAAKR,GAAW,UAAW,OAAMtC,EAAA;AACrC,SAAKsC,GAAW,WAAW,cAAc;AACzC,QAAI;AAEF,UADA,MAAM,KAAKC,GAAS,UAAA,GAChB,KAAKD,GAAW,UAAW,OAAMtC,EAAA;AACrC,WAAKsC,GAAW,WAAW,OAAO;AAAA,IACpC,SAASS,GAAO;AAGd,YAAI,KAAKT,GAAW,YAAiBtC,EAAA,KACrC,KAAKsC,GAAW,WAAW,QAAQ,GAEnC,KAAKI,KAAgB,QACrB,KAAKH,GAAS,WAAA,GACRQ;AAAA,IACR;AAAA,EACF;AAAA,EAEA,cAAcC,GAAuB;AACnC,QAAI,KAAKV,GAAW,UAAW,QAAO;AACtC,UAAMW,IAAe,KAAKV,GAAS,UAAU,KAAK;AAClD,WAAOU,MAAiB,UAAaA,EAAa,SAASD,CAAI;AAAA,EACjE;AAAA;AAAA,EAGA,IAAI,eAAkC;AACpC,WAAO,KAAKT,GAAS,UAAU,KAAK,gBAAgB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAqB;AACnB,IAAI,KAAKD,GAAW,UAAU,WAAS,KAAKA,GAAW,WAAW,UAAU;AAAA,EAC9E;AAAA;AAAA,EAGA,IAAI,kBAAkB;AACpB,WAAO,KAAKC,GAAS;AAAA,EACvB;AAAA,EAEA,UAAgB;AACd,IAAI,KAAKD,GAAW,cACpB,KAAKA,GAAW,WAAW,WAAW,GACtC,KAAKG,GAAgB,MAAM,IAAIL,EAAA,CAAqB,GACpD,KAAKG,GAAS,QAAA,GACd,KAAKD,GAAW,eAAA,GAChB,KAAKI,KAAgB;AAAA,EACvB;AACF;"}
1
+ {"version":3,"file":"client-HEsNBxO0.js","sources":["../../src/core/errors.ts","../../src/core/config.ts","../../src/core/lifecycle.ts","../../src/session/session.ts","../../src/version.ts","../../src/core/client.ts"],"sourcesContent":["/**\n * Public error model.\n *\n * Consumers branch on the stable `code` only — never on `message` text.\n * Error payloads must never contain provider responses, tokens, cookies, or\n * internal stack traces; `toJSON()` exposes the safe diagnostic subset.\n */\n\nexport type ViceMeErrorCode =\n | 'CONFIG_INVALID'\n | 'WORK_NOT_FOUND'\n | 'ORIGIN_NOT_ALLOWED'\n | 'CAPABILITY_DISABLED'\n | 'CLIENT_DESTROYED'\n | 'SESSION_EXPIRED'\n | 'RATE_LIMITED'\n | 'NETWORK_TIMEOUT'\n | 'CHECKOUT_UNAVAILABLE'\n | 'INTERNAL_ERROR';\n\nexport interface ViceMeErrorInit {\n code: ViceMeErrorCode;\n message: string;\n retryable?: boolean;\n /** Server-assigned request id echoed back for support correlation. */\n requestId?: string;\n /** Capability the error belongs to, when scoped to one. */\n capability?: string;\n}\n\nconst RETRYABLE_BY_DEFAULT: ReadonlySet<ViceMeErrorCode> = new Set([\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\nexport class ViceMeError extends Error {\n readonly code: ViceMeErrorCode;\n readonly retryable: boolean;\n readonly requestId?: string;\n readonly capability?: string;\n\n constructor(init: ViceMeErrorInit) {\n super(init.message);\n this.name = 'ViceMeError';\n this.code = init.code;\n this.retryable = init.retryable ?? RETRYABLE_BY_DEFAULT.has(init.code);\n this.requestId = init.requestId;\n this.capability = init.capability;\n }\n\n /** Safe, stable-shape serialization for logs and `viceme:error` events. */\n toJSON(): {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } {\n const json: {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } = { code: this.code, retryable: this.retryable };\n if (this.requestId !== undefined) json.requestId = this.requestId;\n if (this.capability !== undefined) json.capability = this.capability;\n return json;\n }\n}\n\nexport function isViceMeError(value: unknown): value is ViceMeError {\n return value instanceof ViceMeError;\n}\n\n/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */\nexport function configInvalid(message: string): ViceMeError {\n return new ViceMeError({ code: 'CONFIG_INVALID', message, retryable: false });\n}\n\n/** Build a CLIENT_DESTROYED error for post-destroy calls. */\nexport function clientDestroyed(): ViceMeError {\n return new ViceMeError({\n code: 'CLIENT_DESTROYED',\n message: 'ViceMe client has been destroyed.',\n retryable: false,\n });\n}\n","/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey`, `region`, and\n * `signal`. Anything else (transport, clock, request ids, base URLs) is a\n * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can\n * never bake temporary or internal endpoints into user projects.\n */\n\nimport { configInvalid } from './errors.ts';\n\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n workKey: string;\n /** Routes public API and CDN traffic. */\n region: ViceMeRegion;\n /** Optional abort signal owned by the host page. */\n signal?: AbortSignal;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\n/**\n * Public API origins per region. These are the only production endpoints the\n * SDK may contact; B1 confirms final hostnames and any change happens here in\n * one place (never via a public `apiBaseUrl` option).\n */\nexport const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>> = {\n cn: 'https://api.viceme.cn',\n global: 'https://api.viceme.ai',\n};\n\nexport function resolveApiBaseUrl(region: ViceMeRegion): string {\n return PUBLIC_API_BASE_URLS[region];\n}\n\nexport function isValidWorkKey(value: unknown): value is string {\n return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n if (typeof input !== 'object' || input === null) {\n throw configInvalid('createViceMe expects a configuration object.');\n }\n const raw = input as Record<string, unknown>;\n\n const known = new Set(['workKey', 'region', 'signal']);\n for (const key of Object.keys(raw)) {\n if (!known.has(key)) {\n throw configInvalid(`Unknown configuration field \"${key}\".`);\n }\n }\n if (!isValidWorkKey(raw.workKey)) {\n throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n }\n if (!isValidRegion(raw.region)) {\n throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n }\n if (raw.signal !== undefined && !(raw.signal instanceof AbortSignal)) {\n throw configInvalid('Configuration field \"signal\" must be an AbortSignal.');\n }\n return { workKey: raw.workKey, region: raw.region, signal: raw.signal };\n}\n","/**\n * Client lifecycle state machine.\n *\n * ```text\n * CREATED -> INITIALIZING -> READY -> DESTROYED\n * INITIALIZING -> FAILED (retryable: FAILED -> INITIALIZING)\n * READY -> DEGRADED (single capability unavailable; host page keeps working)\n * DEGRADED -> READY (when all capabilities recover is a B1+ concern)\n * ```\n *\n * State is exposed read-only; consumers can never assign it directly.\n */\n\nimport { ViceMeError, clientDestroyed } from './errors.ts';\n\nexport type ViceMeClientState =\n 'CREATED' | 'INITIALIZING' | 'READY' | 'DEGRADED' | 'FAILED' | 'DESTROYED';\n\nconst ALLOWED_TRANSITIONS: Readonly<Record<ViceMeClientState, readonly ViceMeClientState[]>> = {\n CREATED: ['INITIALIZING', 'DESTROYED'],\n INITIALIZING: ['READY', 'FAILED', 'DESTROYED'],\n READY: ['DEGRADED', 'DESTROYED'],\n DEGRADED: ['DESTROYED'],\n FAILED: ['INITIALIZING', 'DESTROYED'],\n DESTROYED: [],\n};\n\nexport type LifecycleListener = (state: ViceMeClientState) => void;\n\nexport class Lifecycle {\n #state: ViceMeClientState = 'CREATED';\n #listeners = new Set<LifecycleListener>();\n\n get state(): ViceMeClientState {\n return this.#state;\n }\n\n get destroyed(): boolean {\n return this.#state === 'DESTROYED';\n }\n\n transition(next: ViceMeClientState): void {\n if (next === this.#state) return;\n if (!ALLOWED_TRANSITIONS[this.#state]!.includes(next)) {\n throw new ViceMeError({\n code: 'INTERNAL_ERROR',\n message: `Illegal lifecycle transition ${this.#state} -> ${next}.`,\n retryable: false,\n });\n }\n this.#state = next;\n for (const listener of this.#listeners) listener(next);\n }\n\n /** Any operation on a destroyed client must fail closed with this guard. */\n assertAlive(): void {\n if (this.destroyed) throw clientDestroyed();\n }\n\n subscribe(listener: LifecycleListener): () => void {\n this.#listeners.add(listener);\n return () => {\n this.#listeners.delete(listener);\n };\n }\n\n clearListeners(): void {\n this.#listeners.clear();\n }\n}\n","/**\n * Public visitor session.\n *\n * ```text\n * SDK + workKey + Origin -> POST /public/v1/work-sessions\n * -> short-lived capability token -> public capability calls\n * ```\n *\n * The token lives in memory only (never localStorage/cookies), is bound to the\n * Work, Origin, capability set, and expiry by the server, and is dropped on\n * `destroy()`. `workKey` locates the Work — it is never an authorization\n * credential.\n */\n\nimport { ViceMeError } from '../core/errors.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport type { components } from '../generated/public-contract.ts';\n\n/**\n * DTO shapes come from the generated public contract snapshot — the SDK never\n * hand-writes a second copy of the server DTOs. The runtime validator below\n * stays intentionally narrow (required fields of the current contract only).\n */\ntype WorkSessionDto = components['schemas']['WorkSession'];\nexport type CreateWorkSessionRequestDto = components['schemas']['CreateWorkSessionRequest'];\n\nexport interface WorkDescriptor {\n key: string;\n /** Capability names enabled for this work. */\n capabilities: string[];\n}\n\nexport interface WorkSessionSnapshot {\n work: WorkDescriptor;\n /** Opaque short-lived capability token; memory-only. */\n token?: string;\n /** Epoch milliseconds when the token expires, when provided by the server. */\n expiresAt?: number;\n}\n\nexport interface SessionManagerOptions {\n workKey: string;\n transport: Transport;\n signal?: AbortSignal;\n timeoutMs?: number;\n /** Injectable clock for tests. */\n now?: () => number;\n}\n\nfunction parseSessionResponse(body: unknown, workKey: string): WorkSessionSnapshot {\n if (typeof body !== 'object' || body === null) {\n throw malformedSessionResponse();\n }\n const raw = body as WorkSessionDto;\n const work = raw.work as { key?: unknown; capabilities?: unknown } | undefined;\n if (\n typeof work !== 'object' ||\n work === null ||\n typeof work.key !== 'string' ||\n !Array.isArray(work.capabilities) ||\n !work.capabilities.every((c) => typeof c === 'string')\n ) {\n throw malformedSessionResponse();\n }\n if (work.key !== workKey) {\n throw new ViceMeError({\n code: 'WORK_NOT_FOUND',\n message: 'Work-session response did not match the requested work key.',\n retryable: false,\n });\n }\n const snapshot: WorkSessionSnapshot = {\n work: {\n key: work.key,\n capabilities: work.capabilities as string[],\n },\n };\n // Unknown extra fields are allowed and ignored (forward compatibility).\n if (typeof raw.token === 'string') snapshot.token = raw.token;\n if (typeof raw.expiresAt === 'number') snapshot.expiresAt = raw.expiresAt;\n return snapshot;\n}\n\nfunction malformedSessionResponse(): ViceMeError {\n return new ViceMeError({\n code: 'INTERNAL_ERROR',\n message: 'Malformed work-session response.',\n retryable: true,\n });\n}\n\nexport class SessionManager {\n readonly #options: SessionManagerOptions;\n readonly #now: () => number;\n #snapshot: WorkSessionSnapshot | undefined;\n #pending: Promise<WorkSessionSnapshot> | undefined;\n\n constructor(options: SessionManagerOptions) {\n this.#options = options;\n this.#now = options.now ?? (() => Date.now());\n }\n\n get snapshot(): WorkSessionSnapshot | undefined {\n return this.#snapshot;\n }\n\n /** True when the cached snapshot's server-provided expiry has passed. */\n #isExpired(): boolean {\n const expiresAt = this.#snapshot?.expiresAt;\n return expiresAt !== undefined && expiresAt <= this.#now();\n }\n\n /**\n * Establish (or return the established) public session.\n *\n * A cached snapshot is reused only while it is unexpired; an expired\n * snapshot is dropped and re-authenticated. Concurrent callers share one\n * in-flight request (single flight).\n */\n establish(): Promise<WorkSessionSnapshot> {\n if (this.#snapshot) {\n if (!this.#isExpired()) return Promise.resolve(this.#snapshot);\n this.#snapshot = undefined;\n }\n this.#pending ??= this.#options.transport\n .request({\n method: 'POST',\n path: '/public/v1/work-sessions',\n body: { workKey: this.#options.workKey } satisfies CreateWorkSessionRequestDto,\n signal: this.#options.signal,\n timeoutMs: this.#options.timeoutMs,\n })\n .then((response) => {\n const snapshot = parseSessionResponse(response.body, this.#options.workKey);\n this.#snapshot = snapshot;\n return snapshot;\n })\n .finally(() => {\n this.#pending = undefined;\n });\n return this.#pending;\n }\n\n /** Drop the token; next `establish()` re-authenticates. */\n invalidate(): void {\n this.#snapshot = undefined;\n }\n\n /** Hard cleanup: forget the token and pending work. */\n destroy(): void {\n this.invalidate();\n this.#pending = undefined;\n }\n}\n","/**\n * Single source of truth for the SDK runtime version.\n *\n * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces\n * the match so the loader, release manifest, and npm metadata can never drift.\n */\nexport const SDK_VERSION = '0.1.4';\n\n/** Public API major carried by this build (loader namespace `v1`). */\nexport const API_MAJOR = 1;\n","/**\n * Headless ViceMe client.\n *\n * The core never touches the DOM: `document`, auto-mount, and UI lifecycle\n * live exclusively in the loader and capability `mount` layers. `ready()` is\n * idempotent per instance (shares one promise), `destroy()` is idempotent and\n * synchronously cancels requests and subscriptions; every business method on a\n * destroyed client fails with `CLIENT_DESTROYED`.\n */\n\nimport { clientDestroyed } from './errors.ts';\nimport { Lifecycle, type ViceMeClientState } from './lifecycle.ts';\nimport type { ViceMeConfig, ViceMeRegion } from './config.ts';\nimport { SessionManager } from '../session/session.ts';\nimport type { Transport } from '../transport/transport.ts';\nimport { API_MAJOR, SDK_VERSION } from '../version.ts';\n\nexport interface ViceMeClient {\n readonly version: string;\n readonly workKey: string;\n readonly region: ViceMeRegion;\n readonly state: ViceMeClientState;\n ready(): Promise<void>;\n hasCapability(name: string): boolean;\n destroy(): void;\n}\n\nexport interface ViceMeMountedInstance {\n readonly instanceKey: string;\n readonly capability: string;\n destroy(): void;\n}\n\n/** Marker so in-flight requests cancelled by `destroy()` map to CLIENT_DESTROYED. */\nclass DestroySignalReason extends DOMException {\n constructor() {\n super('ViceMe client destroyed.', 'AbortError');\n }\n}\n\nexport interface ViceMeClientDeps {\n config: ViceMeConfig;\n transport: Transport;\n /** Injectable clock (testing only). */\n now?: () => number;\n}\n\nexport class ViceMeClientImpl implements ViceMeClient {\n readonly #lifecycle = new Lifecycle();\n readonly #session: SessionManager;\n readonly #config: ViceMeConfig;\n readonly #internalSignal = new AbortController();\n #readyPromise: Promise<void> | undefined;\n\n constructor(deps: ViceMeClientDeps) {\n this.#config = deps.config;\n this.#session = new SessionManager({\n workKey: deps.config.workKey,\n transport: deps.transport,\n signal: this.#internalSignal.signal,\n ...(deps.now !== undefined ? { now: deps.now } : {}),\n });\n const callerSignal = deps.config.signal;\n if (callerSignal) {\n // Propagate the caller's own abort reason when one was set.\n const abortInternal = () => {\n this.#internalSignal.abort(\n callerSignal.reason instanceof Error\n ? callerSignal.reason\n : new DOMException('Caller signal aborted.', 'AbortError'),\n );\n };\n // An already-aborted signal never fires the listener; check\n // synchronously so a pre-cancelled caller cannot issue session\n // requests or reach the network at all.\n if (callerSignal.aborted) abortInternal();\n else callerSignal.addEventListener('abort', abortInternal, { once: true });\n }\n }\n\n get version(): string {\n return SDK_VERSION;\n }\n\n get workKey(): string {\n return this.#config.workKey;\n }\n\n get region(): ViceMeRegion {\n return this.#config.region;\n }\n\n get state(): ViceMeClientState {\n return this.#lifecycle.state;\n }\n\n /** Internal: public API major, used by the loader registry namespace. */\n get apiMajor(): number {\n return API_MAJOR;\n }\n\n ready(): Promise<void> {\n if (this.#lifecycle.destroyed) return Promise.reject(clientDestroyed());\n this.#readyPromise ??= this.#initialize();\n return this.#readyPromise;\n }\n\n async #initialize(): Promise<void> {\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('INITIALIZING');\n try {\n await this.#session.establish();\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('READY');\n } catch (error) {\n // If the client was destroyed mid-flight, report CLIENT_DESTROYED and do\n // not attempt any further lifecycle transitions.\n if (this.#lifecycle.destroyed) throw clientDestroyed();\n this.#lifecycle.transition('FAILED');\n // Allow a later `ready()` retry instead of caching the failure forever.\n this.#readyPromise = undefined;\n this.#session.invalidate();\n throw error;\n }\n }\n\n hasCapability(name: string): boolean {\n if (this.#lifecycle.destroyed) return false;\n const capabilities = this.#session.snapshot?.work.capabilities;\n return capabilities !== undefined && capabilities.includes(name);\n }\n\n /** Names of capabilities enabled for this work (empty before `ready()`). */\n get capabilities(): readonly string[] {\n return this.#session.snapshot?.work.capabilities ?? [];\n }\n\n /**\n * Internal: mark one capability unavailable without taking down the client\n * (loader uses this when a feature chunk fails after the core is READY).\n */\n markDegraded(): void {\n if (this.#lifecycle.state === 'READY') this.#lifecycle.transition('DEGRADED');\n }\n\n /** Internal: session snapshot access for capability modules. */\n get sessionSnapshot() {\n return this.#session.snapshot;\n }\n\n destroy(): void {\n if (this.#lifecycle.destroyed) return;\n this.#lifecycle.transition('DESTROYED');\n this.#internalSignal.abort(new DestroySignalReason());\n this.#session.destroy();\n this.#lifecycle.clearListeners();\n this.#readyPromise = undefined;\n }\n}\n"],"names":["RETRYABLE_BY_DEFAULT","ViceMeError","init","json","isViceMeError","value","configInvalid","message","clientDestroyed","REGIONS","PUBLIC_API_BASE_URLS","resolveApiBaseUrl","region","isValidWorkKey","isValidRegion","validatePublicConfig","input","raw","known","key","ALLOWED_TRANSITIONS","Lifecycle","#state","#listeners","next","listener","parseSessionResponse","body","workKey","malformedSessionResponse","work","c","snapshot","SessionManager","#options","#now","#snapshot","#pending","options","#isExpired","expiresAt","response","SDK_VERSION","API_MAJOR","DestroySignalReason","ViceMeClientImpl","#lifecycle","#session","#config","#internalSignal","#readyPromise","deps","callerSignal","abortInternal","#initialize","error","name","capabilities"],"mappings":"AA8BA,MAAMA,wBAAyD,IAAI;AAAA,EACjE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAMC,UAAoB,MAAM;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAYC,GAAuB;AACjC,UAAMA,EAAK,OAAO,GAClB,KAAK,OAAO,eACZ,KAAK,OAAOA,EAAK,MACjB,KAAK,YAAYA,EAAK,aAAaF,EAAqB,IAAIE,EAAK,IAAI,GACrE,KAAK,YAAYA,EAAK,WACtB,KAAK,aAAaA,EAAK;AAAA,EACzB;AAAA;AAAA,EAGA,SAKE;AACA,UAAMC,IAKF,EAAE,MAAM,KAAK,MAAM,WAAW,KAAK,UAAA;AACvC,WAAI,KAAK,cAAc,WAAWA,EAAK,YAAY,KAAK,YACpD,KAAK,eAAe,WAAWA,EAAK,aAAa,KAAK,aACnDA;AAAA,EACT;AACF;AAEO,SAASC,EAAcC,GAAsC;AAClE,SAAOA,aAAiBJ;AAC1B;AAGO,SAASK,EAAcC,GAA8B;AAC1D,SAAO,IAAIN,EAAY,EAAE,MAAM,kBAAkB,SAAAM,GAAS,WAAW,IAAO;AAC9E;AAGO,SAASC,IAA+B;AAC7C,SAAO,IAAIP,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;ACjEA,MAAMQ,IAA+B,oBAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,GAOhDC,IAA+D;AAAA,EAC1E,IAAI;AAAA,EACJ,QAAQ;AACV;AAEO,SAASC,EAAkBC,GAA8B;AAC9D,SAAOF,EAAqBE,CAAM;AACpC;AAEO,SAASC,EAAeR,GAAiC;AAC9D,SAAO,OAAOA,KAAU,YAAY,6BAA6B,KAAKA,CAAK;AAC7E;AAEO,SAASS,EAAcT,GAAuC;AACnE,SAAO,OAAOA,KAAU,YAAYI,EAAQ,IAAIJ,CAAK;AACvD;AAMO,SAASU,EAAqBC,GAA8B;AACjE,MAAI,OAAOA,KAAU,YAAYA,MAAU;AACzC,UAAMV,EAAc,8CAA8C;AAEpE,QAAMW,IAAMD,GAENE,IAAQ,oBAAI,IAAI,CAAC,WAAW,UAAU,QAAQ,CAAC;AACrD,aAAWC,KAAO,OAAO,KAAKF,CAAG;AAC/B,QAAI,CAACC,EAAM,IAAIC,CAAG;AAChB,YAAMb,EAAc,gCAAgCa,CAAG,IAAI;AAG/D,MAAI,CAACN,EAAeI,EAAI,OAAO;AAC7B,UAAMX,EAAc,oEAAoE;AAE1F,MAAI,CAACQ,EAAcG,EAAI,MAAM;AAC3B,UAAMX,EAAc,wDAAwD;AAE9E,MAAIW,EAAI,WAAW,UAAa,EAAEA,EAAI,kBAAkB;AACtD,UAAMX,EAAc,sDAAsD;AAE5E,SAAO,EAAE,SAASW,EAAI,SAAS,QAAQA,EAAI,QAAQ,QAAQA,EAAI,OAAA;AACjE;ACtDA,MAAMG,IAAyF;AAAA,EAC7F,SAAS,CAAC,gBAAgB,WAAW;AAAA,EACrC,cAAc,CAAC,SAAS,UAAU,WAAW;AAAA,EAC7C,OAAO,CAAC,YAAY,WAAW;AAAA,EAC/B,UAAU,CAAC,WAAW;AAAA,EACtB,QAAQ,CAAC,gBAAgB,WAAW;AAAA,EACpC,WAAW,CAAA;AACb;AAIO,MAAMC,EAAU;AAAA,EACrBC,KAA4B;AAAA,EAC5BC,yBAAiB,IAAA;AAAA,EAEjB,IAAI,QAA2B;AAC7B,WAAO,KAAKD;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAKA,OAAW;AAAA,EACzB;AAAA,EAEA,WAAWE,GAA+B;AACxC,QAAIA,MAAS,KAAKF,IAClB;AAAA,UAAI,CAACF,EAAoB,KAAKE,EAAM,EAAG,SAASE,CAAI;AAClD,cAAM,IAAIvB,EAAY;AAAA,UACpB,MAAM;AAAA,UACN,SAAS,gCAAgC,KAAKqB,EAAM,OAAOE,CAAI;AAAA,UAC/D,WAAW;AAAA,QAAA,CACZ;AAEH,WAAKF,KAASE;AACd,iBAAWC,KAAY,KAAKF,GAAY,CAAAE,EAASD,CAAI;AAAA;AAAA,EACvD;AAAA;AAAA,EAGA,cAAoB;AAClB,QAAI,KAAK,UAAW,OAAMhB,EAAA;AAAA,EAC5B;AAAA,EAEA,UAAUiB,GAAyC;AACjD,gBAAKF,GAAW,IAAIE,CAAQ,GACrB,MAAM;AACX,WAAKF,GAAW,OAAOE,CAAQ;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,iBAAuB;AACrB,SAAKF,GAAW,MAAA;AAAA,EAClB;AACF;ACpBA,SAASG,EAAqBC,GAAeC,GAAsC;AACjF,MAAI,OAAOD,KAAS,YAAYA,MAAS;AACvC,UAAME,EAAA;AAER,QAAMZ,IAAMU,GACNG,IAAOb,EAAI;AACjB,MACE,OAAOa,KAAS,YAChBA,MAAS,QACT,OAAOA,EAAK,OAAQ,YACpB,CAAC,MAAM,QAAQA,EAAK,YAAY,KAChC,CAACA,EAAK,aAAa,MAAM,CAACC,MAAM,OAAOA,KAAM,QAAQ;AAErD,UAAMF,EAAA;AAER,MAAIC,EAAK,QAAQF;AACf,UAAM,IAAI3B,EAAY;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW;AAAA,IAAA,CACZ;AAEH,QAAM+B,IAAgC;AAAA,IACpC,MAAM;AAAA,MACJ,KAAKF,EAAK;AAAA,MACV,cAAcA,EAAK;AAAA,IAAA;AAAA,EACrB;AAGF,SAAI,OAAOb,EAAI,SAAU,aAAUe,EAAS,QAAQf,EAAI,QACpD,OAAOA,EAAI,aAAc,aAAUe,EAAS,YAAYf,EAAI,YACzDe;AACT;AAEA,SAASH,IAAwC;AAC/C,SAAO,IAAI5B,EAAY;AAAA,IACrB,MAAM;AAAA,IACN,SAAS;AAAA,IACT,WAAW;AAAA,EAAA,CACZ;AACH;AAEO,MAAMgC,EAAe;AAAA,EACjBC;AAAA,EACAC;AAAA,EACTC;AAAA,EACAC;AAAA,EAEA,YAAYC,GAAgC;AAC1C,SAAKJ,KAAWI,GAChB,KAAKH,KAAOG,EAAQ,QAAQ,MAAM,KAAK;EACzC;AAAA,EAEA,IAAI,WAA4C;AAC9C,WAAO,KAAKF;AAAA,EACd;AAAA;AAAA,EAGAG,KAAsB;AACpB,UAAMC,IAAY,KAAKJ,IAAW;AAClC,WAAOI,MAAc,UAAaA,KAAa,KAAKL,GAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAA0C;AACxC,QAAI,KAAKC,IAAW;AAClB,UAAI,CAAC,KAAKG,GAAA,UAAqB,QAAQ,QAAQ,KAAKH,EAAS;AAC7D,WAAKA,KAAY;AAAA,IACnB;AACA,gBAAKC,OAAa,KAAKH,GAAS,UAC7B,QAAQ;AAAA,MACP,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM,EAAE,SAAS,KAAKA,GAAS,QAAA;AAAA,MAC/B,QAAQ,KAAKA,GAAS;AAAA,MACtB,WAAW,KAAKA,GAAS;AAAA,IAAA,CAC1B,EACA,KAAK,CAACO,MAAa;AAClB,YAAMT,IAAWN,EAAqBe,EAAS,MAAM,KAAKP,GAAS,OAAO;AAC1E,kBAAKE,KAAYJ,GACVA;AAAA,IACT,CAAC,EACA,QAAQ,MAAM;AACb,WAAKK,KAAW;AAAA,IAClB,CAAC,GACI,KAAKA;AAAA,EACd;AAAA;AAAA,EAGA,aAAmB;AACjB,SAAKD,KAAY;AAAA,EACnB;AAAA;AAAA,EAGA,UAAgB;AACd,SAAK,WAAA,GACL,KAAKC,KAAW;AAAA,EAClB;AACF;ACnJO,MAAMK,IAAc,SAGdC,IAAY;ACyBzB,MAAMC,UAA4B,aAAa;AAAA,EAC7C,cAAc;AACZ,UAAM,4BAA4B,YAAY;AAAA,EAChD;AACF;AASO,MAAMC,EAAyC;AAAA,EAC3CC,KAAa,IAAIzB,EAAA;AAAA,EACjB0B;AAAA,EACAC;AAAA,EACAC,KAAkB,IAAI,gBAAA;AAAA,EAC/BC;AAAA,EAEA,YAAYC,GAAwB;AAClC,SAAKH,KAAUG,EAAK,QACpB,KAAKJ,KAAW,IAAId,EAAe;AAAA,MACjC,SAASkB,EAAK,OAAO;AAAA,MACrB,WAAWA,EAAK;AAAA,MAChB,QAAQ,KAAKF,GAAgB;AAAA,MAC7B,GAAIE,EAAK,QAAQ,SAAY,EAAE,KAAKA,EAAK,QAAQ,CAAA;AAAA,IAAC,CACnD;AACD,UAAMC,IAAeD,EAAK,OAAO;AACjC,QAAIC,GAAc;AAEhB,YAAMC,IAAgB,MAAM;AAC1B,aAAKJ,GAAgB;AAAA,UACnBG,EAAa,kBAAkB,QAC3BA,EAAa,SACb,IAAI,aAAa,0BAA0B,YAAY;AAAA,QAAA;AAAA,MAE/D;AAIA,MAAIA,EAAa,UAASC,EAAA,MACR,iBAAiB,SAASA,GAAe,EAAE,MAAM,IAAM;AAAA,IAC3E;AAAA,EACF;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAOX;AAAA,EACT;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAKM,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,SAAuB;AACzB,WAAO,KAAKA,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,QAA2B;AAC7B,WAAO,KAAKF,GAAW;AAAA,EACzB;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAOH;AAAA,EACT;AAAA,EAEA,QAAuB;AACrB,WAAI,KAAKG,GAAW,YAAkB,QAAQ,OAAOtC,GAAiB,KACtE,KAAK0C,OAAkB,KAAKI,GAAA,GACrB,KAAKJ;AAAA,EACd;AAAA,EAEA,MAAMI,KAA6B;AACjC,QAAI,KAAKR,GAAW,UAAW,OAAMtC,EAAA;AACrC,SAAKsC,GAAW,WAAW,cAAc;AACzC,QAAI;AAEF,UADA,MAAM,KAAKC,GAAS,UAAA,GAChB,KAAKD,GAAW,UAAW,OAAMtC,EAAA;AACrC,WAAKsC,GAAW,WAAW,OAAO;AAAA,IACpC,SAASS,GAAO;AAGd,YAAI,KAAKT,GAAW,YAAiBtC,EAAA,KACrC,KAAKsC,GAAW,WAAW,QAAQ,GAEnC,KAAKI,KAAgB,QACrB,KAAKH,GAAS,WAAA,GACRQ;AAAA,IACR;AAAA,EACF;AAAA,EAEA,cAAcC,GAAuB;AACnC,QAAI,KAAKV,GAAW,UAAW,QAAO;AACtC,UAAMW,IAAe,KAAKV,GAAS,UAAU,KAAK;AAClD,WAAOU,MAAiB,UAAaA,EAAa,SAASD,CAAI;AAAA,EACjE;AAAA;AAAA,EAGA,IAAI,eAAkC;AACpC,WAAO,KAAKT,GAAS,UAAU,KAAK,gBAAgB,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,eAAqB;AACnB,IAAI,KAAKD,GAAW,UAAU,WAAS,KAAKA,GAAW,WAAW,UAAU;AAAA,EAC9E;AAAA;AAAA,EAGA,IAAI,kBAAkB;AACpB,WAAO,KAAKC,GAAS;AAAA,EACvB;AAAA,EAEA,UAAgB;AACd,IAAI,KAAKD,GAAW,cACpB,KAAKA,GAAW,WAAW,WAAW,GACtC,KAAKG,GAAgB,MAAM,IAAIL,EAAA,CAAqB,GACpD,KAAKG,GAAS,QAAA,GACd,KAAKD,GAAW,eAAA,GAChB,KAAKI,KAAgB;AAAA,EACvB;AACF;"}
package/dist/index.js CHANGED
@@ -1,5 +1,5 @@
1
- import { V as i, v as b, a as O, r as p } from "./chunks/client-CGU3qeew.js";
2
- import { A as w, S as L, i as S } from "./chunks/client-CGU3qeew.js";
1
+ import { V as i, v as b, a as O, r as p } from "./chunks/client-HEsNBxO0.js";
2
+ import { A as w, S as L, i as S } from "./chunks/client-HEsNBxO0.js";
3
3
  const A = 1e4, h = /* @__PURE__ */ new Map([
4
4
  [400, "CONFIG_INVALID"],
5
5
  [401, "SESSION_EXPIRED"],
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "0.1.2",
2
+ "version": "0.1.4",
3
3
  "apiMajor": 1,
4
4
  "loader": "viceme.min.js",
5
5
  "features": {},
@@ -10,27 +10,27 @@
10
10
  "bytes": 935,
11
11
  "gzipBytes": 585
12
12
  },
13
- "chunks/client-CGU3qeew.js": {
14
- "sha256": "aa0dd0d96548f5f2407eba9771bdfc9d308e18b8b82c1020317d4baf951ef75f",
15
- "sri": "sha384-OKBbC9Ou25tdP3F7ENuDaMV43raPG5ueYAKp8EcuUf+SOaGw4DCiaxHrqP+ifUMx",
13
+ "chunks/client-HEsNBxO0.js": {
14
+ "sha256": "2a628e616a3d297a28d57eb77e7d6f42d0bc57b7dc4fafed947ad9edc11defbe",
15
+ "sri": "sha384-6fC/ylks1w/6G+oFJFYGgzpwee/sPfRGvnAkZAzVxnYXJYiOPv2plt9t2DxLjFsa",
16
16
  "bytes": 7537,
17
- "gzipBytes": 2743
17
+ "gzipBytes": 2744
18
18
  },
19
19
  "index.js": {
20
- "sha256": "1dbd5dd4c3cee405f09b110c5450428dfa953bff8cc0162d4c4eb04f83ee31c7",
21
- "sri": "sha384-iPA3K29jZimRRPVxMV5Y6UIFQni3Fs0nY7mKt6PQE3BRndOwb2M0a4wOc8us+ER5",
20
+ "sha256": "390328f8af103c2f7032eba5500a5bda26c6c5c200e3764f920e478dc5267e3b",
21
+ "sri": "sha384-2b27oiTYoDE0b4SCkPx5aA9ehA27NtlcA45gJZvUJRIM0lBpwvdBDZYNeBJx34O0",
22
22
  "bytes": 4142,
23
- "gzipBytes": 1717
23
+ "gzipBytes": 1718
24
24
  },
25
25
  "testing.js": {
26
- "sha256": "488e6f414de1aa65a1217c154cdac38335544b7226994b8f0969ab061c58b758",
27
- "sri": "sha384-PWwNV0b8O3H9U6fSzviAHZVTeEqLAAhn+0a2NzEPFuLlvD1StjVcxbBr2XYMb0WV",
26
+ "sha256": "14c5ac5a0c51a741a65cadbda7c870cc074e71f9d5bb9bf1db2b695e8163a8ac",
27
+ "sri": "sha384-SqaEiqAURrn0zcpldHJk9XJEH636v/EV1fiRwKU94tJ6hTaUQugDPojmOqwsXOgH",
28
28
  "bytes": 2156,
29
- "gzipBytes": 983
29
+ "gzipBytes": 984
30
30
  },
31
31
  "viceme.min.js": {
32
- "sha256": "ac038a50a71720e49602223d89dde0f09b51917fb013c8a59a82858fa407b51c",
33
- "sri": "sha384-KMteTHDhwmb8Ob4OpHSUda+Cupi7ZEbQUWvtIHf+hqiMCpBkE0OCm7NhDjwEJdtP",
32
+ "sha256": "7a6ad0959d93276c238d66170c908a07d0883dd18995034ebdf72c4483cb00b7",
33
+ "sri": "sha384-NUXnJ8qDIiuL+A8Ehycxf/85kwEzbsKCsha1iu8xkd1oYpxjxVRxLBgZG5luLkR3",
34
34
  "bytes": 10125,
35
35
  "gzipBytes": 3642
36
36
  }
package/dist/testing.js CHANGED
@@ -1,4 +1,4 @@
1
- import { b as w, c as s, d as u, a as d } from "./chunks/client-CGU3qeew.js";
1
+ import { b as w, c as s, d as u, a as d } from "./chunks/client-HEsNBxO0.js";
2
2
  function f(e) {
3
3
  const i = [], o = [...e.sessionFailures ?? []], a = e.latencyMs ?? 0;
4
4
  return {
package/dist/version.d.ts CHANGED
@@ -4,7 +4,7 @@
4
4
  * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces
5
5
  * the match so the loader, release manifest, and npm metadata can never drift.
6
6
  */
7
- export declare const SDK_VERSION = "0.1.2";
7
+ export declare const SDK_VERSION = "0.1.4";
8
8
  /** Public API major carried by this build (loader namespace `v1`). */
9
9
  export declare const API_MAJOR = 1;
10
10
  //# sourceMappingURL=version.d.ts.map
@@ -1,2 +1,2 @@
1
- (function(){"use strict";const _=new Set(["RATE_LIMITED","NETWORK_TIMEOUT","CHECKOUT_UNAVAILABLE","INTERNAL_ERROR"]);class h extends Error{code;retryable;requestId;capability;constructor(e){super(e.message),this.name="ViceMeError",this.code=e.code,this.retryable=e.retryable??_.has(e.code),this.requestId=e.requestId,this.capability=e.capability}toJSON(){const e={code:this.code,retryable:this.retryable};return this.requestId!==void 0&&(e.requestId=this.requestId),this.capability!==void 0&&(e.capability=this.capability),e}}function Q(t){return t instanceof h}function s(t){return new h({code:"CONFIG_INVALID",message:t,retryable:!1})}function ee(){return new h({code:"CLIENT_DESTROYED",message:"ViceMe client has been destroyed.",retryable:!1})}const O=new Set(["cn","global"]),C={cn:"https://api.viceme.cn",global:"https://api.viceme.ai"};function te(t){return C[t]}function I(t){return typeof t=="string"&&/^wrk_[A-Za-z0-9_-]{4,124}$/.test(t)}function A(t){return typeof t=="string"&&O.has(t)}function re(t){if(typeof t!="object"||t===null)throw s("createViceMe expects a configuration object.");const e=t,r=new Set(["workKey","region","signal"]);for(const n of Object.keys(e))if(!r.has(n))throw s(`Unknown configuration field "${n}".`);if(!I(e.workKey))throw s('Configuration field "workKey" must be a public work key ("wrk_…").');if(!A(e.region))throw s('Configuration field "region" must be "cn" or "global".');if(e.signal!==void 0&&!(e.signal instanceof AbortSignal))throw s('Configuration field "signal" must be an AbortSignal.');return{workKey:e.workKey,region:e.region,signal:e.signal}}const M=new Set(["data-viceme-work","data-viceme-region","data-viceme-features","data-viceme-target","data-viceme-theme","data-viceme-loader"]),N=/^[a-z][a-z0-9-]{1,31}$/,$=new Set(["light","dark","auto"]);function D(t){for(const o of t.getAttributeNames())if(o.startsWith("data-viceme-")&&!M.has(o))throw s(`Unknown loader attribute "${o}".`);const e=t.getAttribute("data-viceme-work");if(!I(e))throw s('Loader attribute "data-viceme-work" must be a public work key ("wrk_…").');const r=t.getAttribute("data-viceme-region");if(!A(r))throw s('Loader attribute "data-viceme-region" must be "cn" or "global".');const n=t.getAttribute("data-viceme-features");if(n===null||n.trim()==="")throw s('Loader attribute "data-viceme-features" is required.');const u=[];for(const o of n.split(",")){const l=o.trim();if(l!==""){if(!N.test(l))throw s(`Loader feature name "${l}" is not a valid capability name.`);u.includes(l)||u.push(l)}}if(u.length===0)throw s('Loader attribute "data-viceme-features" must list at least one feature.');const c=t.getAttribute("data-viceme-target");if(c==="")throw s('Loader attribute "data-viceme-target" must be a CSS selector.');if(c===null)throw s('Loader attribute "data-viceme-target" is required when features are declared.');const i=t.getAttribute("data-viceme-theme");if(i!==null&&!$.has(i))throw s('Loader attribute "data-viceme-theme" must be "light", "dark", or "auto".');return{workKey:e,region:r,features:u,target:c,theme:i??"auto"}}function w(t,e,r){return`v${t}+${e}+${r}`}class U{#r=new Map;#e=new Map;#t=new Map;#n=0;getClient(e){return this.#r.get(e)}registerClient(e){this.#r.set(e.clientKey,e)}unregisterClient(e){this.#r.delete(e)}getInstance(e){return this.#e.get(e)}findInstance(e,r,n){return this.#t.get(`${e}::${r}`)?.get(n)}registerInstance(e,r,n,u){const c=`${e}::${r}`;let i=this.#t.get(c);i===void 0&&(i=new WeakMap,this.#t.set(c,i));const o=i.get(n);if(o)return o;this.#n+=1;const l={instanceKey:`${e}::${r}::el${this.#n}`,clientKey:e,capability:r,host:n,raw:u,destroyed:!1};return this.#e.set(l.instanceKey,l),i.set(n,l),l}removeInstance(e){const r=this.#e.get(e);if(r)return this.#e.delete(e),this.#t.get(`${r.clientKey}::${r.capability}`)?.delete(r.host),r}instancesForClient(e){return[...this.#e.values()].filter(r=>r.clientKey===e)}}const j=new Map([["viceme:ready",new Set(["clientKey","workKey","capabilities","version"])],["viceme:capability-ready",new Set(["clientKey","instanceKey","capability","version"])],["viceme:error",new Set(["clientKey","instanceKey","capability","code","retryable","requestId"])],["viceme:destroyed",new Set(["clientKey","instanceKey","capability"])]]);function q(t,e){const r=j.get(t),n={};for(const[u,c]of Object.entries(e))r.has(u)&&c!==void 0&&(n[u]=c);return n}function m(t,e,r){const n=new CustomEvent(e,{detail:q(e,r),bubbles:!0,composed:!0,cancelable:!1});t.dispatchEvent(n)}const ne="0.1.2",y=1,V=8e3,k=Symbol.for("viceme.loader.state.v1");function d(){const e=globalThis[k];if(e)return e;const r={registry:new U,queue:{current:Promise.resolve()}};return Object.defineProperty(globalThis,k,{value:r,writable:!0,configurable:!0,enumerable:!1}),r}function p(t){if(!t.destroyed){t.destroyed=!0,d().registry.removeInstance(t.instanceKey);try{t.raw.destroy()}finally{m(t.host,"viceme:destroyed",{clientKey:t.clientKey,instanceKey:t.instanceKey,capability:t.capability})}}}function P(t){return{instanceKey:t.instanceKey,capability:t.capability,destroy:()=>p(t)}}function v(t,e,r){Object.defineProperty(t,e,{value:r,writable:!0,configurable:!0,enumerable:!1})}function B(t){let r=globalThis.ViceMe;r||(r={},v(globalThis,"ViceMe",r));let n=r.versions;n||(n={},v(r,"versions",n));const u=n[`v${y}`];if(u)return u;const c={version:t,whenReady(i){const o=d().registry.getClient(i);return o?o.ready.then(()=>o.client):Promise.reject(s(`Unknown clientKey "${i}".`))},getInstance(i){const o=d().registry.getInstance(i);return o?P(o):void 0},destroyInstance(i){const o=d().registry.getInstance(i);o&&p(o)},destroyClient(i){for(const l of d().registry.instancesForClient(i))p(l);const o=d().registry.getClient(i);d().registry.unregisterClient(i),o?.client.destroy()}};return v(n,`v${y}`,c),c}function x(){return document.readyState!=="loading"?Promise.resolve():new Promise(t=>{document.addEventListener("DOMContentLoaded",()=>t(),{once:!0})})}async function W(t){let e;try{e=await E(t)}catch{e={ok:!1,status:0}}if(!e.ok){const r=await F(t);if(r!==void 0){const n=new URL(`/viceme-sdk/${r}/manifest.json`,t);return{manifest:await L(await E(n)),baseUrl:n}}}return{manifest:await L(e),baseUrl:t}}function E(t){const e=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(V):void 0;return fetch(t,{credentials:"omit",signal:e})}async function F(t){if(!(!/\/viceme-sdk\/[^/]+\/manifest\.json$/.test(t.pathname)||t.pathname.split("/viceme-sdk/")[1]?.split("/")[0]!==`v${y}`))try{const r=await E(new URL("/viceme-sdk/-/aliases/v1",t));if(!r.ok)return;const n=(await r.text()).trim();return/^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/.test(n)?n:void 0}catch{return}}async function L(t){if(!t.ok)throw s(`Release manifest is not available (HTTP ${t.status}).`);const e=await t.json();if(typeof e!="object"||e===null||typeof e.version!="string"||typeof e.apiMajor!="number"||typeof e.features!="object"||e.features===null)throw s("Release manifest is malformed.");const r=e;if(r.apiMajor!==y)throw s("Release manifest major version does not match this loader.");return r}async function Y(t){const r=await import(new URL("index.js",t).href);if(typeof r.createViceMe!="function")throw s("SDK core chunk does not export createViceMe().");return r}const H=new Set(["CONFIG_INVALID","WORK_NOT_FOUND","ORIGIN_NOT_ALLOWED","CAPABILITY_DISABLED","CLIENT_DESTROYED","SESSION_EXPIRED","RATE_LIMITED","NETWORK_TIMEOUT","CHECKOUT_UNAVAILABLE","INTERNAL_ERROR"]);function z(t){if(typeof t=="object"&&t!==null){const e=t;if(typeof e.code=="string"&&H.has(e.code)&&typeof e.retryable=="boolean"){const r={code:e.code,retryable:e.retryable};return typeof e.requestId=="string"&&(r.requestId=e.requestId),typeof e.capability=="string"&&(r.capability=e.capability),r}}return{code:"INTERNAL_ERROR",retryable:!0}}function f(t,e,r={}){m(t,"viceme:error",{...z(e),...r})}async function G(t){let e;try{e=D(t)}catch(a){f(document,a);return}if(!t.src){f(document,s("Loader script requires a src URL."));return}const r=new URL("manifest.json",t.src);let n,u;try{({manifest:n,baseUrl:u}=await W(r))}catch(a){f(document,a,{clientKey:w(y,e.region,e.workKey)});return}await x();let c;try{const a=document.querySelectorAll(e.target);if(a.length===0)throw s(`Loader target "${e.target}" matched no element; no node was created.`);if(a.length>1)throw s(`Loader target "${e.target}" matched ${a.length} elements; exactly one is required.`);c=a[0]}catch(a){f(document,a,{clientKey:w(n.apiMajor,e.region,e.workKey)});return}const i=w(n.apiMajor,e.region,e.workKey);B(n.version);let o=d().registry.getClient(i),l;if(o)l=o.client;else{let a;try{a=await Y(u)}catch(b){f(c,b,{clientKey:i});return}l=a.createViceMe({workKey:e.workKey,region:e.region});const g=l.ready();g.catch(()=>{}),o={clientKey:i,client:l,ready:g},d().registry.registerClient(o)}try{await o.ready}catch(a){d().registry.unregisterClient(i),l.destroy(),f(c,a,{clientKey:i});return}let K=!1;const T=[];for(const a of e.features){if(d().registry.findInstance(i,a,c))continue;const g=n.features[a];if(typeof g!="string"){l.markDegraded(),f(c,new h({code:"CAPABILITY_DISABLED",message:`Capability "${a}" is not part of this release.`,retryable:!1,capability:a}),{clientKey:i,capability:a});continue}try{const S=await import(new URL(g,u).href);if(typeof S.mount!="function")throw s(`Capability chunk "${a}" does not export mount().`);const Z=await S.mount(l,{target:c,theme:e.theme}),X=d().registry.registerInstance(i,a,c,Z);K=!0,T.push(a),m(c,"viceme:capability-ready",{clientKey:i,instanceKey:X.instanceKey,capability:a,version:n.version})}catch(b){l.markDegraded(),f(c,b,{clientKey:i,capability:a})}}K&&m(c,"viceme:ready",{clientKey:i,workKey:e.workKey,capabilities:T,version:n.version})}function J(t){const{queue:e}=d(),r=e.current.then(()=>G(t));return e.current=r.catch(()=>{}),r}function R(){if(typeof document>"u")return;let t=document.currentScript instanceof HTMLScriptElement?document.currentScript:null;if(!t){const e=document.querySelectorAll("script[data-viceme-loader]");e.length===1&&(t=e[0]??null)}t&&J(t).catch(e=>{f(document,e)})}R();const ie=R})();
1
+ (function(){"use strict";const _=new Set(["RATE_LIMITED","NETWORK_TIMEOUT","CHECKOUT_UNAVAILABLE","INTERNAL_ERROR"]);class h extends Error{code;retryable;requestId;capability;constructor(e){super(e.message),this.name="ViceMeError",this.code=e.code,this.retryable=e.retryable??_.has(e.code),this.requestId=e.requestId,this.capability=e.capability}toJSON(){const e={code:this.code,retryable:this.retryable};return this.requestId!==void 0&&(e.requestId=this.requestId),this.capability!==void 0&&(e.capability=this.capability),e}}function Q(t){return t instanceof h}function s(t){return new h({code:"CONFIG_INVALID",message:t,retryable:!1})}function ee(){return new h({code:"CLIENT_DESTROYED",message:"ViceMe client has been destroyed.",retryable:!1})}const O=new Set(["cn","global"]),C={cn:"https://api.viceme.cn",global:"https://api.viceme.ai"};function te(t){return C[t]}function I(t){return typeof t=="string"&&/^wrk_[A-Za-z0-9_-]{4,124}$/.test(t)}function A(t){return typeof t=="string"&&O.has(t)}function re(t){if(typeof t!="object"||t===null)throw s("createViceMe expects a configuration object.");const e=t,r=new Set(["workKey","region","signal"]);for(const n of Object.keys(e))if(!r.has(n))throw s(`Unknown configuration field "${n}".`);if(!I(e.workKey))throw s('Configuration field "workKey" must be a public work key ("wrk_…").');if(!A(e.region))throw s('Configuration field "region" must be "cn" or "global".');if(e.signal!==void 0&&!(e.signal instanceof AbortSignal))throw s('Configuration field "signal" must be an AbortSignal.');return{workKey:e.workKey,region:e.region,signal:e.signal}}const M=new Set(["data-viceme-work","data-viceme-region","data-viceme-features","data-viceme-target","data-viceme-theme","data-viceme-loader"]),N=/^[a-z][a-z0-9-]{1,31}$/,$=new Set(["light","dark","auto"]);function D(t){for(const o of t.getAttributeNames())if(o.startsWith("data-viceme-")&&!M.has(o))throw s(`Unknown loader attribute "${o}".`);const e=t.getAttribute("data-viceme-work");if(!I(e))throw s('Loader attribute "data-viceme-work" must be a public work key ("wrk_…").');const r=t.getAttribute("data-viceme-region");if(!A(r))throw s('Loader attribute "data-viceme-region" must be "cn" or "global".');const n=t.getAttribute("data-viceme-features");if(n===null||n.trim()==="")throw s('Loader attribute "data-viceme-features" is required.');const u=[];for(const o of n.split(",")){const l=o.trim();if(l!==""){if(!N.test(l))throw s(`Loader feature name "${l}" is not a valid capability name.`);u.includes(l)||u.push(l)}}if(u.length===0)throw s('Loader attribute "data-viceme-features" must list at least one feature.');const c=t.getAttribute("data-viceme-target");if(c==="")throw s('Loader attribute "data-viceme-target" must be a CSS selector.');if(c===null)throw s('Loader attribute "data-viceme-target" is required when features are declared.');const i=t.getAttribute("data-viceme-theme");if(i!==null&&!$.has(i))throw s('Loader attribute "data-viceme-theme" must be "light", "dark", or "auto".');return{workKey:e,region:r,features:u,target:c,theme:i??"auto"}}function w(t,e,r){return`v${t}+${e}+${r}`}class U{#r=new Map;#e=new Map;#t=new Map;#n=0;getClient(e){return this.#r.get(e)}registerClient(e){this.#r.set(e.clientKey,e)}unregisterClient(e){this.#r.delete(e)}getInstance(e){return this.#e.get(e)}findInstance(e,r,n){return this.#t.get(`${e}::${r}`)?.get(n)}registerInstance(e,r,n,u){const c=`${e}::${r}`;let i=this.#t.get(c);i===void 0&&(i=new WeakMap,this.#t.set(c,i));const o=i.get(n);if(o)return o;this.#n+=1;const l={instanceKey:`${e}::${r}::el${this.#n}`,clientKey:e,capability:r,host:n,raw:u,destroyed:!1};return this.#e.set(l.instanceKey,l),i.set(n,l),l}removeInstance(e){const r=this.#e.get(e);if(r)return this.#e.delete(e),this.#t.get(`${r.clientKey}::${r.capability}`)?.delete(r.host),r}instancesForClient(e){return[...this.#e.values()].filter(r=>r.clientKey===e)}}const j=new Map([["viceme:ready",new Set(["clientKey","workKey","capabilities","version"])],["viceme:capability-ready",new Set(["clientKey","instanceKey","capability","version"])],["viceme:error",new Set(["clientKey","instanceKey","capability","code","retryable","requestId"])],["viceme:destroyed",new Set(["clientKey","instanceKey","capability"])]]);function q(t,e){const r=j.get(t),n={};for(const[u,c]of Object.entries(e))r.has(u)&&c!==void 0&&(n[u]=c);return n}function m(t,e,r){const n=new CustomEvent(e,{detail:q(e,r),bubbles:!0,composed:!0,cancelable:!1});t.dispatchEvent(n)}const ne="0.1.4",y=1,V=8e3,k=Symbol.for("viceme.loader.state.v1");function d(){const e=globalThis[k];if(e)return e;const r={registry:new U,queue:{current:Promise.resolve()}};return Object.defineProperty(globalThis,k,{value:r,writable:!0,configurable:!0,enumerable:!1}),r}function p(t){if(!t.destroyed){t.destroyed=!0,d().registry.removeInstance(t.instanceKey);try{t.raw.destroy()}finally{m(t.host,"viceme:destroyed",{clientKey:t.clientKey,instanceKey:t.instanceKey,capability:t.capability})}}}function P(t){return{instanceKey:t.instanceKey,capability:t.capability,destroy:()=>p(t)}}function v(t,e,r){Object.defineProperty(t,e,{value:r,writable:!0,configurable:!0,enumerable:!1})}function B(t){let r=globalThis.ViceMe;r||(r={},v(globalThis,"ViceMe",r));let n=r.versions;n||(n={},v(r,"versions",n));const u=n[`v${y}`];if(u)return u;const c={version:t,whenReady(i){const o=d().registry.getClient(i);return o?o.ready.then(()=>o.client):Promise.reject(s(`Unknown clientKey "${i}".`))},getInstance(i){const o=d().registry.getInstance(i);return o?P(o):void 0},destroyInstance(i){const o=d().registry.getInstance(i);o&&p(o)},destroyClient(i){for(const l of d().registry.instancesForClient(i))p(l);const o=d().registry.getClient(i);d().registry.unregisterClient(i),o?.client.destroy()}};return v(n,`v${y}`,c),c}function x(){return document.readyState!=="loading"?Promise.resolve():new Promise(t=>{document.addEventListener("DOMContentLoaded",()=>t(),{once:!0})})}async function W(t){let e;try{e=await E(t)}catch{e={ok:!1,status:0}}if(!e.ok){const r=await F(t);if(r!==void 0){const n=new URL(`/viceme-sdk/${r}/manifest.json`,t);return{manifest:await L(await E(n)),baseUrl:n}}}return{manifest:await L(e),baseUrl:t}}function E(t){const e=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(V):void 0;return fetch(t,{credentials:"omit",signal:e})}async function F(t){if(!(!/\/viceme-sdk\/[^/]+\/manifest\.json$/.test(t.pathname)||t.pathname.split("/viceme-sdk/")[1]?.split("/")[0]!==`v${y}`))try{const r=await E(new URL("/viceme-sdk/-/aliases/v1",t));if(!r.ok)return;const n=(await r.text()).trim();return/^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/.test(n)?n:void 0}catch{return}}async function L(t){if(!t.ok)throw s(`Release manifest is not available (HTTP ${t.status}).`);const e=await t.json();if(typeof e!="object"||e===null||typeof e.version!="string"||typeof e.apiMajor!="number"||typeof e.features!="object"||e.features===null)throw s("Release manifest is malformed.");const r=e;if(r.apiMajor!==y)throw s("Release manifest major version does not match this loader.");return r}async function Y(t){const r=await import(new URL("index.js",t).href);if(typeof r.createViceMe!="function")throw s("SDK core chunk does not export createViceMe().");return r}const H=new Set(["CONFIG_INVALID","WORK_NOT_FOUND","ORIGIN_NOT_ALLOWED","CAPABILITY_DISABLED","CLIENT_DESTROYED","SESSION_EXPIRED","RATE_LIMITED","NETWORK_TIMEOUT","CHECKOUT_UNAVAILABLE","INTERNAL_ERROR"]);function z(t){if(typeof t=="object"&&t!==null){const e=t;if(typeof e.code=="string"&&H.has(e.code)&&typeof e.retryable=="boolean"){const r={code:e.code,retryable:e.retryable};return typeof e.requestId=="string"&&(r.requestId=e.requestId),typeof e.capability=="string"&&(r.capability=e.capability),r}}return{code:"INTERNAL_ERROR",retryable:!0}}function f(t,e,r={}){m(t,"viceme:error",{...z(e),...r})}async function G(t){let e;try{e=D(t)}catch(a){f(document,a);return}if(!t.src){f(document,s("Loader script requires a src URL."));return}const r=new URL("manifest.json",t.src);let n,u;try{({manifest:n,baseUrl:u}=await W(r))}catch(a){f(document,a,{clientKey:w(y,e.region,e.workKey)});return}await x();let c;try{const a=document.querySelectorAll(e.target);if(a.length===0)throw s(`Loader target "${e.target}" matched no element; no node was created.`);if(a.length>1)throw s(`Loader target "${e.target}" matched ${a.length} elements; exactly one is required.`);c=a[0]}catch(a){f(document,a,{clientKey:w(n.apiMajor,e.region,e.workKey)});return}const i=w(n.apiMajor,e.region,e.workKey);B(n.version);let o=d().registry.getClient(i),l;if(o)l=o.client;else{let a;try{a=await Y(u)}catch(b){f(c,b,{clientKey:i});return}l=a.createViceMe({workKey:e.workKey,region:e.region});const g=l.ready();g.catch(()=>{}),o={clientKey:i,client:l,ready:g},d().registry.registerClient(o)}try{await o.ready}catch(a){d().registry.unregisterClient(i),l.destroy(),f(c,a,{clientKey:i});return}let K=!1;const T=[];for(const a of e.features){if(d().registry.findInstance(i,a,c))continue;const g=n.features[a];if(typeof g!="string"){l.markDegraded(),f(c,new h({code:"CAPABILITY_DISABLED",message:`Capability "${a}" is not part of this release.`,retryable:!1,capability:a}),{clientKey:i,capability:a});continue}try{const S=await import(new URL(g,u).href);if(typeof S.mount!="function")throw s(`Capability chunk "${a}" does not export mount().`);const Z=await S.mount(l,{target:c,theme:e.theme}),X=d().registry.registerInstance(i,a,c,Z);K=!0,T.push(a),m(c,"viceme:capability-ready",{clientKey:i,instanceKey:X.instanceKey,capability:a,version:n.version})}catch(b){l.markDegraded(),f(c,b,{clientKey:i,capability:a})}}K&&m(c,"viceme:ready",{clientKey:i,workKey:e.workKey,capabilities:T,version:n.version})}function J(t){const{queue:e}=d(),r=e.current.then(()=>G(t));return e.current=r.catch(()=>{}),r}function R(){if(typeof document>"u")return;let t=document.currentScript instanceof HTMLScriptElement?document.currentScript:null;if(!t){const e=document.querySelectorAll("script[data-viceme-loader]");e.length===1&&(t=e[0]??null)}t&&J(t).catch(e=>{f(document,e)})}R();const ie=R})();
2
2
  //# sourceMappingURL=viceme.min.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"viceme.min.js","sources":["../src/core/errors.ts","../src/core/config.ts","../src/loader/attributes.ts","../src/loader/registry.ts","../src/loader/events.ts","../src/version.ts","../src/loader/auto-loader.ts"],"sourcesContent":["/**\n * Public error model.\n *\n * Consumers branch on the stable `code` only — never on `message` text.\n * Error payloads must never contain provider responses, tokens, cookies, or\n * internal stack traces; `toJSON()` exposes the safe diagnostic subset.\n */\n\nexport type ViceMeErrorCode =\n | 'CONFIG_INVALID'\n | 'WORK_NOT_FOUND'\n | 'ORIGIN_NOT_ALLOWED'\n | 'CAPABILITY_DISABLED'\n | 'CLIENT_DESTROYED'\n | 'SESSION_EXPIRED'\n | 'RATE_LIMITED'\n | 'NETWORK_TIMEOUT'\n | 'CHECKOUT_UNAVAILABLE'\n | 'INTERNAL_ERROR';\n\nexport interface ViceMeErrorInit {\n code: ViceMeErrorCode;\n message: string;\n retryable?: boolean;\n /** Server-assigned request id echoed back for support correlation. */\n requestId?: string;\n /** Capability the error belongs to, when scoped to one. */\n capability?: string;\n}\n\nconst RETRYABLE_BY_DEFAULT: ReadonlySet<ViceMeErrorCode> = new Set([\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\nexport class ViceMeError extends Error {\n readonly code: ViceMeErrorCode;\n readonly retryable: boolean;\n readonly requestId?: string;\n readonly capability?: string;\n\n constructor(init: ViceMeErrorInit) {\n super(init.message);\n this.name = 'ViceMeError';\n this.code = init.code;\n this.retryable = init.retryable ?? RETRYABLE_BY_DEFAULT.has(init.code);\n this.requestId = init.requestId;\n this.capability = init.capability;\n }\n\n /** Safe, stable-shape serialization for logs and `viceme:error` events. */\n toJSON(): {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } {\n const json: {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } = { code: this.code, retryable: this.retryable };\n if (this.requestId !== undefined) json.requestId = this.requestId;\n if (this.capability !== undefined) json.capability = this.capability;\n return json;\n }\n}\n\nexport function isViceMeError(value: unknown): value is ViceMeError {\n return value instanceof ViceMeError;\n}\n\n/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */\nexport function configInvalid(message: string): ViceMeError {\n return new ViceMeError({ code: 'CONFIG_INVALID', message, retryable: false });\n}\n\n/** Build a CLIENT_DESTROYED error for post-destroy calls. */\nexport function clientDestroyed(): ViceMeError {\n return new ViceMeError({\n code: 'CLIENT_DESTROYED',\n message: 'ViceMe client has been destroyed.',\n retryable: false,\n });\n}\n","/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey`, `region`, and\n * `signal`. Anything else (transport, clock, request ids, base URLs) is a\n * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can\n * never bake temporary or internal endpoints into user projects.\n */\n\nimport { configInvalid } from './errors.ts';\n\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n workKey: string;\n /** Routes public API and CDN traffic. */\n region: ViceMeRegion;\n /** Optional abort signal owned by the host page. */\n signal?: AbortSignal;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\n/**\n * Public API origins per region. These are the only production endpoints the\n * SDK may contact; B1 confirms final hostnames and any change happens here in\n * one place (never via a public `apiBaseUrl` option).\n */\nexport const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>> = {\n cn: 'https://api.viceme.cn',\n global: 'https://api.viceme.ai',\n};\n\nexport function resolveApiBaseUrl(region: ViceMeRegion): string {\n return PUBLIC_API_BASE_URLS[region];\n}\n\nexport function isValidWorkKey(value: unknown): value is string {\n return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n if (typeof input !== 'object' || input === null) {\n throw configInvalid('createViceMe expects a configuration object.');\n }\n const raw = input as Record<string, unknown>;\n\n const known = new Set(['workKey', 'region', 'signal']);\n for (const key of Object.keys(raw)) {\n if (!known.has(key)) {\n throw configInvalid(`Unknown configuration field \"${key}\".`);\n }\n }\n if (!isValidWorkKey(raw.workKey)) {\n throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n }\n if (!isValidRegion(raw.region)) {\n throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n }\n if (raw.signal !== undefined && !(raw.signal instanceof AbortSignal)) {\n throw configInvalid('Configuration field \"signal\" must be an AbortSignal.');\n }\n return { workKey: raw.workKey, region: raw.region, signal: raw.signal };\n}\n","/**\n * `data-viceme-*` attribute parsing for the CDN auto-loader.\n *\n * The attribute set is fixed; unknown `data-viceme-*` attributes are rejected\n * so pages can never smuggle endpoints, tokens, secrets, prices, or payment\n * state through the loader. Parse failures never guess defaults for work,\n * region, or target.\n */\n\nimport { configInvalid } from '../core/errors.ts';\nimport type { ViceMeRegion } from '../core/config.ts';\nimport { isValidRegion, isValidWorkKey } from '../core/config.ts';\n\nexport type ViceMeTheme = 'light' | 'dark' | 'auto';\n\nexport interface LoaderAttributes {\n workKey: string;\n region: ViceMeRegion;\n /** Deduplicated feature names in declared order. */\n features: string[];\n /** CSS selector; required whenever features are declared. */\n target?: string;\n theme: ViceMeTheme;\n}\n\nconst KNOWN_ATTRIBUTES: ReadonlySet<string> = new Set([\n 'data-viceme-work',\n 'data-viceme-region',\n 'data-viceme-features',\n 'data-viceme-target',\n 'data-viceme-theme',\n // Marker for explicit opt-in when document.currentScript is unavailable.\n 'data-viceme-loader',\n]);\n\nconst FEATURE_NAME_PATTERN = /^[a-z][a-z0-9-]{1,31}$/;\nconst THEMES: ReadonlySet<string> = new Set(['light', 'dark', 'auto']);\n\nexport function parseLoaderAttributes(element: Element): LoaderAttributes {\n for (const name of element.getAttributeNames()) {\n if (name.startsWith('data-viceme-') && !KNOWN_ATTRIBUTES.has(name)) {\n throw configInvalid(`Unknown loader attribute \"${name}\".`);\n }\n }\n\n const workKey = element.getAttribute('data-viceme-work');\n if (!isValidWorkKey(workKey)) {\n throw configInvalid('Loader attribute \"data-viceme-work\" must be a public work key (\"wrk_…\").');\n }\n\n const region = element.getAttribute('data-viceme-region');\n if (!isValidRegion(region)) {\n throw configInvalid('Loader attribute \"data-viceme-region\" must be \"cn\" or \"global\".');\n }\n\n const rawFeatures = element.getAttribute('data-viceme-features');\n if (rawFeatures === null || rawFeatures.trim() === '') {\n throw configInvalid('Loader attribute \"data-viceme-features\" is required.');\n }\n const features: string[] = [];\n for (const part of rawFeatures.split(',')) {\n const feature = part.trim();\n if (feature === '') continue;\n if (!FEATURE_NAME_PATTERN.test(feature)) {\n throw configInvalid(`Loader feature name \"${feature}\" is not a valid capability name.`);\n }\n if (!features.includes(feature)) features.push(feature);\n }\n if (features.length === 0) {\n throw configInvalid('Loader attribute \"data-viceme-features\" must list at least one feature.');\n }\n\n const target = element.getAttribute('data-viceme-target');\n if (target === '') {\n throw configInvalid('Loader attribute \"data-viceme-target\" must be a CSS selector.');\n }\n // Loader-mounted features are visual capabilities, so a target is required.\n if (target === null) {\n throw configInvalid(\n 'Loader attribute \"data-viceme-target\" is required when features are declared.',\n );\n }\n\n const rawTheme = element.getAttribute('data-viceme-theme');\n if (rawTheme !== null && !THEMES.has(rawTheme)) {\n throw configInvalid('Loader attribute \"data-viceme-theme\" must be \"light\", \"dark\", or \"auto\".');\n }\n\n return {\n workKey,\n region,\n features,\n target,\n theme: (rawTheme ?? 'auto') as ViceMeTheme,\n };\n}\n","/**\n * Loader registry.\n *\n * Only the CDN loader maintains this registry (explicit `createViceMe()`\n * instances never register). Core clients are shared by\n * `major + region + workKey`; capability mounts are deduplicated by\n * `clientKey + capability + target Element identity`.\n *\n * The registry itself is never exposed on `window` — only the fixed\n * `ViceMe.versions.v1` diagnostics/destroy namespace is. It stores raw\n * capability handles; the loader wraps them into the public\n * `ViceMeMountedInstance` and owns destroy/event deduplication.\n */\n\nimport type { ViceMeClient } from '../core/client.ts';\nimport type { CapabilityMountHandle } from './mount-handle.ts';\n\nexport interface RegisteredClient {\n clientKey: string;\n client: ViceMeClient;\n ready: Promise<void>;\n}\n\nexport interface RegisteredInstance {\n instanceKey: string;\n clientKey: string;\n capability: string;\n host: Element;\n raw: CapabilityMountHandle;\n destroyed: boolean;\n}\n\nexport function clientKeyOf(majorVersion: number, region: string, workKey: string): string {\n return `v${majorVersion}+${region}+${workKey}`;\n}\n\nexport class LoaderRegistry {\n readonly #clients = new Map<string, RegisteredClient>();\n readonly #instances = new Map<string, RegisteredInstance>();\n /** (clientKey, capability) -> mounted host element -> instance. */\n readonly #elements = new Map<string, WeakMap<Element, RegisteredInstance>>();\n #elementCounter = 0;\n\n getClient(clientKey: string): RegisteredClient | undefined {\n return this.#clients.get(clientKey);\n }\n\n registerClient(entry: RegisteredClient): void {\n this.#clients.set(entry.clientKey, entry);\n }\n\n unregisterClient(clientKey: string): void {\n this.#clients.delete(clientKey);\n }\n\n getInstance(instanceKey: string): RegisteredInstance | undefined {\n return this.#instances.get(instanceKey);\n }\n\n /** Existing mount for the same client+capability+element, if any. */\n findInstance(\n clientKey: string,\n capability: string,\n element: Element,\n ): RegisteredInstance | undefined {\n return this.#elements.get(`${clientKey}::${capability}`)?.get(element);\n }\n\n registerInstance(\n clientKey: string,\n capability: string,\n element: Element,\n raw: CapabilityMountHandle,\n ): RegisteredInstance {\n const compositeKey = `${clientKey}::${capability}`;\n let byElement = this.#elements.get(compositeKey);\n if (byElement === undefined) {\n byElement = new WeakMap();\n this.#elements.set(compositeKey, byElement);\n }\n const existing = byElement.get(element);\n if (existing) return existing;\n\n this.#elementCounter += 1;\n const instance: RegisteredInstance = {\n instanceKey: `${clientKey}::${capability}::el${this.#elementCounter}`,\n clientKey,\n capability,\n host: element,\n raw,\n destroyed: false,\n };\n this.#instances.set(instance.instanceKey, instance);\n byElement.set(element, instance);\n return instance;\n }\n\n removeInstance(instanceKey: string): RegisteredInstance | undefined {\n const instance = this.#instances.get(instanceKey);\n if (!instance) return undefined;\n this.#instances.delete(instanceKey);\n this.#elements.get(`${instance.clientKey}::${instance.capability}`)?.delete(instance.host);\n return instance;\n }\n\n instancesForClient(clientKey: string): RegisteredInstance[] {\n return [...this.#instances.values()].filter((i) => i.clientKey === clientKey);\n }\n}\n","/**\n * Stable `viceme:*` DOM events.\n *\n * Dispatch target is the mount host element; configuration errors that happen\n * before a host exists are dispatched on `document`. Event details carry an\n * allowlisted field set only — never tokens, cookies, provider payloads, or\n * internal stacks.\n */\n\nimport type { ViceMeErrorCode } from '../core/errors.ts';\n\nexport interface VicemeReadyDetail {\n clientKey: string;\n workKey: string;\n capabilities: string[];\n version: string;\n}\n\nexport interface VicemeCapabilityReadyDetail {\n clientKey: string;\n instanceKey: string;\n capability: string;\n version: string;\n}\n\nexport interface VicemeErrorDetail {\n clientKey?: string;\n instanceKey?: string;\n capability?: string;\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n}\n\nexport interface VicemeDestroyedDetail {\n clientKey: string;\n instanceKey: string;\n capability: string;\n}\n\nexport type VicemeEventType =\n 'viceme:ready' | 'viceme:capability-ready' | 'viceme:error' | 'viceme:destroyed';\n\nexport type VicemeEventDetailMap = {\n 'viceme:ready': VicemeReadyDetail;\n 'viceme:capability-ready': VicemeCapabilityReadyDetail;\n 'viceme:error': VicemeErrorDetail;\n 'viceme:destroyed': VicemeDestroyedDetail;\n};\n\nconst ALLOWED_KEYS: ReadonlyMap<VicemeEventType, ReadonlySet<string>> = new Map([\n ['viceme:ready', new Set(['clientKey', 'workKey', 'capabilities', 'version'])],\n ['viceme:capability-ready', new Set(['clientKey', 'instanceKey', 'capability', 'version'])],\n [\n 'viceme:error',\n new Set(['clientKey', 'instanceKey', 'capability', 'code', 'retryable', 'requestId']),\n ],\n ['viceme:destroyed', new Set(['clientKey', 'instanceKey', 'capability'])],\n]);\n\n/** Strip anything outside the documented allowlist before dispatch. */\nexport function sanitizeDetail(\n type: VicemeEventType,\n detail: VicemeEventDetailMap[VicemeEventType],\n): VicemeEventDetailMap[VicemeEventType] {\n const allowed = ALLOWED_KEYS.get(type)!;\n const result: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(detail)) {\n if (allowed.has(key) && value !== undefined) result[key] = value;\n }\n return result as unknown as VicemeEventDetailMap[VicemeEventType];\n}\n\nexport function dispatchViceMeEvent<K extends VicemeEventType>(\n target: EventTarget,\n type: K,\n detail: VicemeEventDetailMap[K],\n): void {\n const event = new CustomEvent(type, {\n detail: sanitizeDetail(type, detail),\n bubbles: true,\n composed: true,\n cancelable: false,\n });\n target.dispatchEvent(event);\n}\n","/**\n * Single source of truth for the SDK runtime version.\n *\n * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces\n * the match so the loader, release manifest, and npm metadata can never drift.\n */\nexport const SDK_VERSION = '0.1.2';\n\n/** Public API major carried by this build (loader namespace `v1`). */\nexport const API_MAJOR = 1;\n","/**\n * CDN auto-loader (`viceme.min.js`, IIFE).\n *\n * Deterministic algorithm (fixed baseline):\n *\n * 1. Read `document.currentScript`; when unavailable, accept exactly one\n * explicit `script[data-viceme-loader]`.\n * 2. Parse and validate `data-viceme-*`; build `clientKey` and per-feature\n * `instanceKey`s.\n * 3. Wait for DOM ready; a missing/ambiguous target emits `CONFIG_INVALID`\n * and never creates phantom nodes.\n * 4. Read `manifest.json` from the loader's own directory (exact release\n * version; URLs are never assembled from page parameters).\n * 5. Load the same-version core, then each declared feature chunk in order.\n * 6. Create the client, then mount; handles land in an internal registry.\n * 7. Re-running the same instance key returns the original handle — no\n * duplicate sessions, subscriptions, or DOM.\n * 8. A failing capability destroys only its own partial state; the rest of\n * the page and other capabilities keep working.\n * 9. `pagehide` never auto-destroys (bfcache); cleanup happens on explicit\n * `destroy()` only.\n *\n * The loader never writes localStorage, cookies, global CSS, or globals other\n * than the fixed `window.ViceMe.versions.vN` namespace.\n */\n\nimport { parseLoaderAttributes, type LoaderAttributes } from './attributes.ts';\nimport { LoaderRegistry, clientKeyOf, type RegisteredInstance } from './registry.ts';\nimport type { CapabilityMountHandle, CapabilityMountFunction } from './mount-handle.ts';\nimport { dispatchViceMeEvent, type VicemeErrorDetail } from './events.ts';\nimport { configInvalid, ViceMeError } from '../core/errors.ts';\nimport type { ViceMeClient, ViceMeMountedInstance } from '../core/client.ts';\nimport { API_MAJOR } from '../version.ts';\n\nexport interface ReleaseManifest {\n version: string;\n apiMajor: number;\n loader: string;\n features: Record<string, string>;\n}\n\ninterface CoreModule {\n createViceMe: (config: unknown) => ViceMeClient;\n}\n\n/** Internal surface the core implementation provides to the loader. */\ninterface InternalCoreClient extends ViceMeClient {\n markDegraded(): void;\n}\n\nexport interface ViceMeLoaderNamespaceV1 {\n readonly version: string;\n whenReady(clientKey: string): Promise<ViceMeClient>;\n getInstance(instanceKey: string): ViceMeMountedInstance | undefined;\n destroyInstance(instanceKey: string): void;\n destroyClient(clientKey: string): void;\n}\n\nexport interface ViceMeBrowserGlobal {\n versions: {\n // Other majors coexist; they are never overwritten by this loader.\n [major: string]: ViceMeLoaderNamespaceV1 | undefined;\n };\n}\n\nconst MANIFEST_TIMEOUT_MS = 8_000;\n\ninterface LoaderSharedState {\n registry: LoaderRegistry;\n /** Serialized run queue shared across every execution of this loader. */\n queue: { current: Promise<void> };\n}\n\nconst STATE_KEY = Symbol.for('viceme.loader.state.v1');\n\n/**\n * Loader state must survive multiple executions of the same (or an identical)\n * loader `<script>`: browsers execute each script tag as an independent IIFE,\n * so the registry and run queue live on a hidden, symbol-keyed, non-enumerable\n * global — never an undeclared string-named global.\n */\nfunction sharedState(): LoaderSharedState {\n const holder = globalThis as Record<symbol, unknown>;\n const existing = holder[STATE_KEY] as LoaderSharedState | undefined;\n if (existing) return existing;\n const state: LoaderSharedState = {\n registry: new LoaderRegistry(),\n queue: { current: Promise.resolve() },\n };\n Object.defineProperty(globalThis, STATE_KEY, {\n value: state,\n writable: true,\n configurable: true,\n enumerable: false,\n });\n return state;\n}\n\n/* ------------------------------------------------------------------ */\n/* Instance wrapper + destroy */\n/* ------------------------------------------------------------------ */\n\nfunction destroyInstanceInternal(instance: RegisteredInstance): void {\n if (instance.destroyed) return;\n instance.destroyed = true;\n sharedState().registry.removeInstance(instance.instanceKey);\n try {\n instance.raw.destroy();\n } finally {\n dispatchViceMeEvent(instance.host, 'viceme:destroyed', {\n clientKey: instance.clientKey,\n instanceKey: instance.instanceKey,\n capability: instance.capability,\n });\n }\n}\n\nfunction wrapInstance(instance: RegisteredInstance): ViceMeMountedInstance {\n return {\n instanceKey: instance.instanceKey,\n capability: instance.capability,\n destroy: () => destroyInstanceInternal(instance),\n };\n}\n\n/* ------------------------------------------------------------------ */\n/* Namespace installation */\n/* ------------------------------------------------------------------ */\n\nfunction defineHidden(target: object, key: string, value: unknown): void {\n Object.defineProperty(target, key, {\n value,\n writable: true,\n configurable: true,\n enumerable: false,\n });\n}\n\nexport function ensureNamespace(version: string): ViceMeLoaderNamespaceV1 {\n const holder = globalThis as { ViceMe?: ViceMeBrowserGlobal };\n let global = holder.ViceMe;\n if (!global) {\n global = {} as ViceMeBrowserGlobal;\n defineHidden(globalThis, 'ViceMe', global);\n }\n let versions = global.versions;\n if (!versions) {\n versions = {} as ViceMeBrowserGlobal['versions'];\n defineHidden(global, 'versions', versions);\n }\n const existing = versions[`v${API_MAJOR}`];\n if (existing) return existing;\n\n const namespace: ViceMeLoaderNamespaceV1 = {\n version,\n whenReady(clientKey: string): Promise<ViceMeClient> {\n const entry = sharedState().registry.getClient(clientKey);\n if (!entry) {\n return Promise.reject(configInvalid(`Unknown clientKey \"${clientKey}\".`));\n }\n return entry.ready.then(() => entry.client);\n },\n getInstance(instanceKey: string): ViceMeMountedInstance | undefined {\n const instance = sharedState().registry.getInstance(instanceKey);\n return instance ? wrapInstance(instance) : undefined;\n },\n destroyInstance(instanceKey: string): void {\n const instance = sharedState().registry.getInstance(instanceKey);\n if (instance) destroyInstanceInternal(instance);\n },\n destroyClient(clientKey: string): void {\n for (const instance of sharedState().registry.instancesForClient(clientKey)) {\n destroyInstanceInternal(instance);\n }\n const entry = sharedState().registry.getClient(clientKey);\n sharedState().registry.unregisterClient(clientKey);\n entry?.client.destroy();\n },\n };\n defineHidden(versions, `v${API_MAJOR}`, namespace);\n return namespace;\n}\n\n/* ------------------------------------------------------------------ */\n/* Loader algorithm */\n/* ------------------------------------------------------------------ */\n\nfunction whenDomReady(): Promise<void> {\n if (document.readyState !== 'loading') return Promise.resolve();\n return new Promise((resolve) => {\n document.addEventListener('DOMContentLoaded', () => resolve(), { once: true });\n });\n}\n\nasync function fetchReleaseManifest(\n manifestUrl: URL,\n): Promise<{ manifest: ReleaseManifest; baseUrl: URL }> {\n let response: Response;\n try {\n response = await fetchWithTimeout(manifestUrl);\n } catch {\n response = { ok: false, status: 0 } as Response;\n }\n // Alias path (e.g. /sdk/v1/) holds no manifest on the S3 topology: it\n // carries only the loader object plus the version POINTER. Resolve the\n // pointer and load the exact version beside it.\n if (!response.ok) {\n const aliasVersion = await resolveAliasPointer(manifestUrl);\n if (aliasVersion !== undefined) {\n const aliasUrl = new URL(`/viceme-sdk/${aliasVersion}/manifest.json`, manifestUrl);\n return { manifest: await parseManifest(await fetchWithTimeout(aliasUrl)), baseUrl: aliasUrl };\n }\n }\n return { manifest: await parseManifest(response), baseUrl: manifestUrl };\n}\n\nfunction fetchWithTimeout(url: URL): Promise<Response> {\n const signal =\n typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n ? AbortSignal.timeout(MANIFEST_TIMEOUT_MS)\n : undefined;\n return fetch(url, { credentials: 'omit', signal });\n}\n\n/** Read /sdk/-/aliases/v1 when the loader itself sits under /sdk/v1/. */\nasync function resolveAliasPointer(manifestUrl: URL): Promise<string | undefined> {\n if (!/\\/viceme-sdk\\/[^/]+\\/manifest\\.json$/.test(manifestUrl.pathname)) return undefined;\n const segment = manifestUrl.pathname.split('/viceme-sdk/')[1]?.split('/')[0];\n if (segment !== `v${API_MAJOR}`) return undefined;\n try {\n const response = await fetchWithTimeout(new URL('/viceme-sdk/-/aliases/v1', manifestUrl));\n if (!response.ok) return undefined;\n const version = (await response.text()).trim();\n return /^\\d+\\.\\d+\\.\\d+(-[0-9A-Za-z.-]+)?$/.test(version) ? version : undefined;\n } catch {\n return undefined;\n }\n}\n\nasync function parseManifest(response: Response): Promise<ReleaseManifest> {\n if (!response.ok) {\n throw configInvalid(`Release manifest is not available (HTTP ${response.status}).`);\n }\n const body: unknown = await response.json();\n if (\n typeof body !== 'object' ||\n body === null ||\n typeof (body as ReleaseManifest).version !== 'string' ||\n typeof (body as ReleaseManifest).apiMajor !== 'number' ||\n typeof (body as ReleaseManifest).features !== 'object' ||\n (body as ReleaseManifest).features === null\n ) {\n throw configInvalid('Release manifest is malformed.');\n }\n const manifest = body as ReleaseManifest;\n if (manifest.apiMajor !== API_MAJOR) {\n throw configInvalid('Release manifest major version does not match this loader.');\n }\n return manifest;\n}\n\nasync function loadCore(baseUrl: URL): Promise<CoreModule> {\n const coreUrl = new URL('index.js', baseUrl);\n const core = (await import(/* @vite-ignore */ coreUrl.href)) as Partial<CoreModule>;\n if (typeof core.createViceMe !== 'function') {\n throw configInvalid('SDK core chunk does not export createViceMe().');\n }\n return core as CoreModule;\n}\n\nconst KNOWN_ERROR_CODES: ReadonlySet<string> = new Set([\n 'CONFIG_INVALID',\n 'WORK_NOT_FOUND',\n 'ORIGIN_NOT_ALLOWED',\n 'CAPABILITY_DISABLED',\n 'CLIENT_DESTROYED',\n 'SESSION_EXPIRED',\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\n/**\n * Normalize any thrown value into an event detail. Uses structural checks,\n * not `instanceof`: the loader IIFE and the core ESM chunk are separate\n * builds, so their `ViceMeError` classes are distinct at runtime.\n */\nfunction toErrorDetail(error: unknown): VicemeErrorDetail {\n if (typeof error === 'object' && error !== null) {\n const candidate = error as Record<string, unknown>;\n if (\n typeof candidate.code === 'string' &&\n KNOWN_ERROR_CODES.has(candidate.code) &&\n typeof candidate.retryable === 'boolean'\n ) {\n const detail: VicemeErrorDetail = {\n code: candidate.code as VicemeErrorDetail['code'],\n retryable: candidate.retryable,\n };\n if (typeof candidate.requestId === 'string') detail.requestId = candidate.requestId;\n if (typeof candidate.capability === 'string') detail.capability = candidate.capability;\n return detail;\n }\n }\n return { code: 'INTERNAL_ERROR', retryable: true };\n}\n\nfunction emitError(\n target: EventTarget,\n error: unknown,\n extra: Partial<Pick<VicemeErrorDetail, 'clientKey' | 'instanceKey' | 'capability'>> = {},\n): void {\n dispatchViceMeEvent(target, 'viceme:error', { ...toErrorDetail(error), ...extra });\n}\n\nexport async function runAutoLoader(script: HTMLScriptElement): Promise<void> {\n let attributes: LoaderAttributes;\n try {\n attributes = parseLoaderAttributes(script);\n } catch (error) {\n // Configuration errors before any host exists go to `document`.\n emitError(document, error);\n return;\n }\n\n if (!script.src) {\n emitError(document, configInvalid('Loader script requires a src URL.'));\n return;\n }\n const manifestUrl = new URL('manifest.json', script.src);\n\n let manifest: ReleaseManifest;\n let releaseBase: URL;\n try {\n ({ manifest, baseUrl: releaseBase } = await fetchReleaseManifest(manifestUrl));\n } catch (error) {\n emitError(document, error, {\n clientKey: clientKeyOf(API_MAJOR, attributes.region, attributes.workKey),\n });\n return;\n }\n\n await whenDomReady();\n\n let host: Element;\n try {\n const matches = document.querySelectorAll(attributes.target!);\n if (matches.length === 0) {\n throw configInvalid(\n `Loader target \"${attributes.target}\" matched no element; no node was created.`,\n );\n }\n if (matches.length > 1) {\n throw configInvalid(\n `Loader target \"${attributes.target}\" matched ${matches.length} elements; exactly one is required.`,\n );\n }\n host = matches[0]!;\n } catch (error) {\n emitError(document, error, {\n clientKey: clientKeyOf(manifest.apiMajor, attributes.region, attributes.workKey),\n });\n return;\n }\n\n const clientKey = clientKeyOf(manifest.apiMajor, attributes.region, attributes.workKey);\n ensureNamespace(manifest.version);\n\n // Shared core client per (major, region, workKey).\n let entry = sharedState().registry.getClient(clientKey);\n let client: ViceMeClient;\n if (entry) {\n client = entry.client;\n } else {\n let core: CoreModule;\n try {\n core = await loadCore(releaseBase);\n } catch (error) {\n emitError(host, error, { clientKey });\n return;\n }\n client = core.createViceMe({\n workKey: attributes.workKey,\n region: attributes.region,\n });\n const ready = client.ready();\n // Keep an unhandled-rejection-free copy on the registry entry; failures\n // are reported through this loader run and via whenReady().\n void ready.catch(() => {});\n entry = { clientKey, client, ready };\n sharedState().registry.registerClient(entry);\n }\n\n try {\n await entry.ready;\n } catch (error) {\n sharedState().registry.unregisterClient(clientKey);\n client.destroy();\n emitError(host, error, { clientKey });\n return;\n }\n\n let mountedAny = false;\n const mounted: string[] = [];\n for (const capability of attributes.features) {\n // Same client + capability + element: reuse the original handle.\n if (sharedState().registry.findInstance(clientKey, capability, host)) continue;\n\n const fileName = manifest.features[capability];\n if (typeof fileName !== 'string') {\n (client as InternalCoreClient).markDegraded();\n emitError(\n host,\n new ViceMeError({\n code: 'CAPABILITY_DISABLED',\n message: `Capability \"${capability}\" is not part of this release.`,\n retryable: false,\n capability,\n }),\n { clientKey, capability },\n );\n continue;\n }\n\n try {\n const chunkUrl = new URL(fileName, releaseBase);\n const module = (await import(/* @vite-ignore */ chunkUrl.href)) as {\n mount?: unknown;\n };\n if (typeof module.mount !== 'function') {\n throw configInvalid(`Capability chunk \"${capability}\" does not export mount().`);\n }\n const raw = (await (module.mount as CapabilityMountFunction)(client, {\n target: host,\n theme: attributes.theme,\n })) as CapabilityMountHandle;\n const instance = sharedState().registry.registerInstance(clientKey, capability, host, raw);\n mountedAny = true;\n mounted.push(capability);\n dispatchViceMeEvent(host, 'viceme:capability-ready', {\n clientKey,\n instanceKey: instance.instanceKey,\n capability,\n version: manifest.version,\n });\n } catch (error) {\n // Only this capability's partial state is discarded; everything else\n // (including the host page) keeps working.\n (client as InternalCoreClient).markDegraded();\n emitError(host, error, { clientKey, capability });\n }\n }\n\n if (mountedAny) {\n dispatchViceMeEvent(host, 'viceme:ready', {\n clientKey,\n workKey: attributes.workKey,\n capabilities: mounted,\n version: manifest.version,\n });\n }\n}\n\n/* ------------------------------------------------------------------ */\n/* IIFE bootstrap */\n/* ------------------------------------------------------------------ */\n\n/**\n * Loader runs are serialized so identical scripts (duplicate tags, re-runs,\n * same work with different targets) observe registry state deterministically\n * and never create duplicate sessions or DOM.\n */\nfunction enqueueRun(script: HTMLScriptElement): Promise<void> {\n const { queue } = sharedState();\n const run = queue.current.then(() => runAutoLoader(script));\n queue.current = run.catch(() => {});\n return run;\n}\n\nfunction bootstrap(): void {\n if (typeof document === 'undefined') return;\n let script: HTMLScriptElement | null =\n document.currentScript instanceof HTMLScriptElement ? document.currentScript : null;\n if (!script) {\n const explicit = document.querySelectorAll<HTMLScriptElement>('script[data-viceme-loader]');\n if (explicit.length === 1) script = explicit[0] ?? null;\n }\n if (!script) return;\n void enqueueRun(script).catch((error: unknown) => {\n emitError(document, error);\n });\n}\n\nbootstrap();\n\n// Test-only handle for re-running the bootstrap in controlled environments.\nexport const __bootstrapForTests = bootstrap;\nexport type { RegisteredInstance };\n"],"names":["RETRYABLE_BY_DEFAULT","ViceMeError","init","json","isViceMeError","value","configInvalid","message","clientDestroyed","REGIONS","PUBLIC_API_BASE_URLS","resolveApiBaseUrl","region","isValidWorkKey","isValidRegion","validatePublicConfig","input","raw","known","key","KNOWN_ATTRIBUTES","FEATURE_NAME_PATTERN","THEMES","parseLoaderAttributes","element","name","workKey","rawFeatures","features","part","feature","target","rawTheme","clientKeyOf","majorVersion","LoaderRegistry","#clients","#instances","#elements","#elementCounter","clientKey","entry","instanceKey","capability","compositeKey","byElement","existing","instance","i","ALLOWED_KEYS","sanitizeDetail","type","detail","allowed","result","dispatchViceMeEvent","event","SDK_VERSION","API_MAJOR","MANIFEST_TIMEOUT_MS","STATE_KEY","sharedState","state","destroyInstanceInternal","wrapInstance","defineHidden","ensureNamespace","version","global","versions","namespace","whenDomReady","resolve","fetchReleaseManifest","manifestUrl","response","fetchWithTimeout","aliasVersion","resolveAliasPointer","aliasUrl","parseManifest","url","signal","body","manifest","loadCore","baseUrl","core","KNOWN_ERROR_CODES","toErrorDetail","error","candidate","emitError","extra","runAutoLoader","script","attributes","releaseBase","host","matches","client","ready","mountedAny","mounted","fileName","module","enqueueRun","queue","run","bootstrap","explicit","__bootstrapForTests"],"mappings":"yBA8BA,MAAMA,MAAyD,IAAI,CACjE,eACA,kBACA,uBACA,gBACF,CAAC,EAEM,MAAMC,UAAoB,KAAM,CAC5B,KACA,UACA,UACA,WAET,YAAYC,EAAuB,CACjC,MAAMA,EAAK,OAAO,EAClB,KAAK,KAAO,cACZ,KAAK,KAAOA,EAAK,KACjB,KAAK,UAAYA,EAAK,WAAaF,EAAqB,IAAIE,EAAK,IAAI,EACrE,KAAK,UAAYA,EAAK,UACtB,KAAK,WAAaA,EAAK,UACzB,CAGA,QAKE,CACA,MAAMC,EAKF,CAAE,KAAM,KAAK,KAAM,UAAW,KAAK,SAAA,EACvC,OAAI,KAAK,YAAc,SAAWA,EAAK,UAAY,KAAK,WACpD,KAAK,aAAe,SAAWA,EAAK,WAAa,KAAK,YACnDA,CACT,CACF,CAEO,SAASC,EAAcC,EAAsC,CAClE,OAAOA,aAAiBJ,CAC1B,CAGO,SAASK,EAAcC,EAA8B,CAC1D,OAAO,IAAIN,EAAY,CAAE,KAAM,iBAAkB,QAAAM,EAAS,UAAW,GAAO,CAC9E,CAGO,SAASC,IAA+B,CAC7C,OAAO,IAAIP,EAAY,CACrB,KAAM,mBACN,QAAS,oCACT,UAAW,EAAA,CACZ,CACH,CCjEA,MAAMQ,EAA+B,IAAI,IAAI,CAAC,KAAM,QAAQ,CAAC,EAOhDC,EAA+D,CAC1E,GAAI,wBACJ,OAAQ,uBACV,EAEO,SAASC,GAAkBC,EAA8B,CAC9D,OAAOF,EAAqBE,CAAM,CACpC,CAEO,SAASC,EAAeR,EAAiC,CAC9D,OAAO,OAAOA,GAAU,UAAY,6BAA6B,KAAKA,CAAK,CAC7E,CAEO,SAASS,EAAcT,EAAuC,CACnE,OAAO,OAAOA,GAAU,UAAYI,EAAQ,IAAIJ,CAAK,CACvD,CAMO,SAASU,GAAqBC,EAA8B,CACjE,GAAI,OAAOA,GAAU,UAAYA,IAAU,KACzC,MAAMV,EAAc,8CAA8C,EAEpE,MAAMW,EAAMD,EAENE,EAAQ,IAAI,IAAI,CAAC,UAAW,SAAU,QAAQ,CAAC,EACrD,UAAWC,KAAO,OAAO,KAAKF,CAAG,EAC/B,GAAI,CAACC,EAAM,IAAIC,CAAG,EAChB,MAAMb,EAAc,gCAAgCa,CAAG,IAAI,EAG/D,GAAI,CAACN,EAAeI,EAAI,OAAO,EAC7B,MAAMX,EAAc,oEAAoE,EAE1F,GAAI,CAACQ,EAAcG,EAAI,MAAM,EAC3B,MAAMX,EAAc,wDAAwD,EAE9E,GAAIW,EAAI,SAAW,QAAa,EAAEA,EAAI,kBAAkB,aACtD,MAAMX,EAAc,sDAAsD,EAE5E,MAAO,CAAE,QAASW,EAAI,QAAS,OAAQA,EAAI,OAAQ,OAAQA,EAAI,MAAA,CACjE,CC/CA,MAAMG,MAA4C,IAAI,CACpD,mBACA,qBACA,uBACA,qBACA,oBAEA,oBACF,CAAC,EAEKC,EAAuB,yBACvBC,EAA8B,IAAI,IAAI,CAAC,QAAS,OAAQ,MAAM,CAAC,EAE9D,SAASC,EAAsBC,EAAoC,CACxE,UAAWC,KAAQD,EAAQ,oBACzB,GAAIC,EAAK,WAAW,cAAc,GAAK,CAACL,EAAiB,IAAIK,CAAI,EAC/D,MAAMnB,EAAc,6BAA6BmB,CAAI,IAAI,EAI7D,MAAMC,EAAUF,EAAQ,aAAa,kBAAkB,EACvD,GAAI,CAACX,EAAea,CAAO,EACzB,MAAMpB,EAAc,0EAA0E,EAGhG,MAAMM,EAASY,EAAQ,aAAa,oBAAoB,EACxD,GAAI,CAACV,EAAcF,CAAM,EACvB,MAAMN,EAAc,iEAAiE,EAGvF,MAAMqB,EAAcH,EAAQ,aAAa,sBAAsB,EAC/D,GAAIG,IAAgB,MAAQA,EAAY,KAAA,IAAW,GACjD,MAAMrB,EAAc,sDAAsD,EAE5E,MAAMsB,EAAqB,CAAA,EAC3B,UAAWC,KAAQF,EAAY,MAAM,GAAG,EAAG,CACzC,MAAMG,EAAUD,EAAK,KAAA,EACrB,GAAIC,IAAY,GAChB,IAAI,CAACT,EAAqB,KAAKS,CAAO,EACpC,MAAMxB,EAAc,wBAAwBwB,CAAO,mCAAmC,EAEnFF,EAAS,SAASE,CAAO,GAAGF,EAAS,KAAKE,CAAO,EACxD,CACA,GAAIF,EAAS,SAAW,EACtB,MAAMtB,EAAc,yEAAyE,EAG/F,MAAMyB,EAASP,EAAQ,aAAa,oBAAoB,EACxD,GAAIO,IAAW,GACb,MAAMzB,EAAc,+DAA+D,EAGrF,GAAIyB,IAAW,KACb,MAAMzB,EACJ,+EAAA,EAIJ,MAAM0B,EAAWR,EAAQ,aAAa,mBAAmB,EACzD,GAAIQ,IAAa,MAAQ,CAACV,EAAO,IAAIU,CAAQ,EAC3C,MAAM1B,EAAc,0EAA0E,EAGhG,MAAO,CACL,QAAAoB,EACA,OAAAd,EACA,SAAAgB,EACA,OAAAG,EACA,MAAQC,GAAY,MAAA,CAExB,CC/DO,SAASC,EAAYC,EAAsBtB,EAAgBc,EAAyB,CACzF,MAAO,IAAIQ,CAAY,IAAItB,CAAM,IAAIc,CAAO,EAC9C,CAEO,MAAMS,CAAe,CACjBC,OAAe,IACfC,OAAiB,IAEjBC,OAAgB,IACzBC,GAAkB,EAElB,UAAUC,EAAiD,CACzD,OAAO,KAAKJ,GAAS,IAAII,CAAS,CACpC,CAEA,eAAeC,EAA+B,CAC5C,KAAKL,GAAS,IAAIK,EAAM,UAAWA,CAAK,CAC1C,CAEA,iBAAiBD,EAAyB,CACxC,KAAKJ,GAAS,OAAOI,CAAS,CAChC,CAEA,YAAYE,EAAqD,CAC/D,OAAO,KAAKL,GAAW,IAAIK,CAAW,CACxC,CAGA,aACEF,EACAG,EACAnB,EACgC,CAChC,OAAO,KAAKc,GAAU,IAAI,GAAGE,CAAS,KAAKG,CAAU,EAAE,GAAG,IAAInB,CAAO,CACvE,CAEA,iBACEgB,EACAG,EACAnB,EACAP,EACoB,CACpB,MAAM2B,EAAe,GAAGJ,CAAS,KAAKG,CAAU,GAChD,IAAIE,EAAY,KAAKP,GAAU,IAAIM,CAAY,EAC3CC,IAAc,SAChBA,MAAgB,QAChB,KAAKP,GAAU,IAAIM,EAAcC,CAAS,GAE5C,MAAMC,EAAWD,EAAU,IAAIrB,CAAO,EACtC,GAAIsB,EAAU,OAAOA,EAErB,KAAKP,IAAmB,EACxB,MAAMQ,EAA+B,CACnC,YAAa,GAAGP,CAAS,KAAKG,CAAU,OAAO,KAAKJ,EAAe,GACnE,UAAAC,EACA,WAAAG,EACA,KAAMnB,EACN,IAAAP,EACA,UAAW,EAAA,EAEb,YAAKoB,GAAW,IAAIU,EAAS,YAAaA,CAAQ,EAClDF,EAAU,IAAIrB,EAASuB,CAAQ,EACxBA,CACT,CAEA,eAAeL,EAAqD,CAClE,MAAMK,EAAW,KAAKV,GAAW,IAAIK,CAAW,EAChD,GAAKK,EACL,YAAKV,GAAW,OAAOK,CAAW,EAClC,KAAKJ,GAAU,IAAI,GAAGS,EAAS,SAAS,KAAKA,EAAS,UAAU,EAAE,GAAG,OAAOA,EAAS,IAAI,EAClFA,CACT,CAEA,mBAAmBP,EAAyC,CAC1D,MAAO,CAAC,GAAG,KAAKH,GAAW,OAAA,CAAQ,EAAE,OAAQW,GAAMA,EAAE,YAAcR,CAAS,CAC9E,CACF,CC1DA,MAAMS,MAAsE,IAAI,CAC9E,CAAC,eAAgB,IAAI,IAAI,CAAC,YAAa,UAAW,eAAgB,SAAS,CAAC,CAAC,EAC7E,CAAC,0BAA2B,IAAI,IAAI,CAAC,YAAa,cAAe,aAAc,SAAS,CAAC,CAAC,EAC1F,CACE,eACA,IAAI,IAAI,CAAC,YAAa,cAAe,aAAc,OAAQ,YAAa,WAAW,CAAC,CAAA,EAEtF,CAAC,mBAAoB,IAAI,IAAI,CAAC,YAAa,cAAe,YAAY,CAAC,CAAC,CAC1E,CAAC,EAGM,SAASC,EACdC,EACAC,EACuC,CACvC,MAAMC,EAAUJ,EAAa,IAAIE,CAAI,EAC/BG,EAAkC,CAAA,EACxC,SAAW,CAACnC,EAAKd,CAAK,IAAK,OAAO,QAAQ+C,CAAM,EAC1CC,EAAQ,IAAIlC,CAAG,GAAKd,IAAU,SAAWiD,EAAOnC,CAAG,EAAId,GAE7D,OAAOiD,CACT,CAEO,SAASC,EACdxB,EACAoB,EACAC,EACM,CACN,MAAMI,EAAQ,IAAI,YAAYL,EAAM,CAClC,OAAQD,EAAeC,EAAMC,CAAM,EACnC,QAAS,GACT,SAAU,GACV,WAAY,EAAA,CACb,EACDrB,EAAO,cAAcyB,CAAK,CAC5B,CC/EO,MAAMC,GAAc,QAGdC,EAAY,ECwDnBC,EAAsB,IAQtBC,EAAY,OAAO,IAAI,wBAAwB,EAQrD,SAASC,GAAiC,CAExC,MAAMf,EADS,WACSc,CAAS,EACjC,GAAId,EAAU,OAAOA,EACrB,MAAMgB,EAA2B,CAC/B,SAAU,IAAI3B,EACd,MAAO,CAAE,QAAS,QAAQ,SAAQ,CAAE,EAEtC,cAAO,eAAe,WAAYyB,EAAW,CAC3C,MAAOE,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAAA,CACb,EACMA,CACT,CAMA,SAASC,EAAwBhB,EAAoC,CACnE,GAAI,CAAAA,EAAS,UACb,CAAAA,EAAS,UAAY,GACrBc,EAAA,EAAc,SAAS,eAAed,EAAS,WAAW,EAC1D,GAAI,CACFA,EAAS,IAAI,QAAA,CACf,QAAA,CACEQ,EAAoBR,EAAS,KAAM,mBAAoB,CACrD,UAAWA,EAAS,UACpB,YAAaA,EAAS,YACtB,WAAYA,EAAS,UAAA,CACtB,CACH,EACF,CAEA,SAASiB,EAAajB,EAAqD,CACzE,MAAO,CACL,YAAaA,EAAS,YACtB,WAAYA,EAAS,WACrB,QAAS,IAAMgB,EAAwBhB,CAAQ,CAAA,CAEnD,CAMA,SAASkB,EAAalC,EAAgBZ,EAAad,EAAsB,CACvE,OAAO,eAAe0B,EAAQZ,EAAK,CACjC,MAAAd,EACA,SAAU,GACV,aAAc,GACd,WAAY,EAAA,CACb,CACH,CAEO,SAAS6D,EAAgBC,EAA0C,CAExE,IAAIC,EADW,WACK,OACfA,IACHA,EAAS,CAAA,EACTH,EAAa,WAAY,SAAUG,CAAM,GAE3C,IAAIC,EAAWD,EAAO,SACjBC,IACHA,EAAW,CAAA,EACXJ,EAAaG,EAAQ,WAAYC,CAAQ,GAE3C,MAAMvB,EAAWuB,EAAS,IAAIX,CAAS,EAAE,EACzC,GAAIZ,EAAU,OAAOA,EAErB,MAAMwB,EAAqC,CACzC,QAAAH,EACA,UAAU3B,EAA0C,CAClD,MAAMC,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EACxD,OAAKC,EAGEA,EAAM,MAAM,KAAK,IAAMA,EAAM,MAAM,EAFjC,QAAQ,OAAOnC,EAAc,sBAAsBkC,CAAS,IAAI,CAAC,CAG5E,EACA,YAAYE,EAAwD,CAClE,MAAMK,EAAWc,EAAA,EAAc,SAAS,YAAYnB,CAAW,EAC/D,OAAOK,EAAWiB,EAAajB,CAAQ,EAAI,MAC7C,EACA,gBAAgBL,EAA2B,CACzC,MAAMK,EAAWc,EAAA,EAAc,SAAS,YAAYnB,CAAW,EAC3DK,KAAkCA,CAAQ,CAChD,EACA,cAAcP,EAAyB,CACrC,UAAWO,KAAYc,EAAA,EAAc,SAAS,mBAAmBrB,CAAS,EACxEuB,EAAwBhB,CAAQ,EAElC,MAAMN,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EACxDqB,IAAc,SAAS,iBAAiBrB,CAAS,EACjDC,GAAO,OAAO,QAAA,CAChB,CAAA,EAEF,OAAAwB,EAAaI,EAAU,IAAIX,CAAS,GAAIY,CAAS,EAC1CA,CACT,CAMA,SAASC,GAA8B,CACrC,OAAI,SAAS,aAAe,UAAkB,QAAQ,QAAA,EAC/C,IAAI,QAASC,GAAY,CAC9B,SAAS,iBAAiB,mBAAoB,IAAMA,EAAA,EAAW,CAAE,KAAM,GAAM,CAC/E,CAAC,CACH,CAEA,eAAeC,EACbC,EACsD,CACtD,IAAIC,EACJ,GAAI,CACFA,EAAW,MAAMC,EAAiBF,CAAW,CAC/C,MAAQ,CACNC,EAAW,CAAE,GAAI,GAAO,OAAQ,CAAA,CAClC,CAIA,GAAI,CAACA,EAAS,GAAI,CAChB,MAAME,EAAe,MAAMC,EAAoBJ,CAAW,EAC1D,GAAIG,IAAiB,OAAW,CAC9B,MAAME,EAAW,IAAI,IAAI,eAAeF,CAAY,iBAAkBH,CAAW,EACjF,MAAO,CAAE,SAAU,MAAMM,EAAc,MAAMJ,EAAiBG,CAAQ,CAAC,EAAG,QAASA,CAAA,CACrF,CACF,CACA,MAAO,CAAE,SAAU,MAAMC,EAAcL,CAAQ,EAAG,QAASD,CAAA,CAC7D,CAEA,SAASE,EAAiBK,EAA6B,CACrD,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQvB,CAAmB,EACvC,OACN,OAAO,MAAMsB,EAAK,CAAE,YAAa,OAAQ,OAAAC,EAAQ,CACnD,CAGA,eAAeJ,EAAoBJ,EAA+C,CAGhF,GAFI,GAAC,uCAAuC,KAAKA,EAAY,QAAQ,GACrDA,EAAY,SAAS,MAAM,cAAc,EAAE,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC,IAC3D,IAAIhB,CAAS,IAC7B,GAAI,CACF,MAAMiB,EAAW,MAAMC,EAAiB,IAAI,IAAI,2BAA4BF,CAAW,CAAC,EACxF,GAAI,CAACC,EAAS,GAAI,OAClB,MAAMR,GAAW,MAAMQ,EAAS,KAAA,GAAQ,KAAA,EACxC,MAAO,oCAAoC,KAAKR,CAAO,EAAIA,EAAU,MACvE,MAAQ,CACN,MACF,CACF,CAEA,eAAea,EAAcL,EAA8C,CACzE,GAAI,CAACA,EAAS,GACZ,MAAMrE,EAAc,2CAA2CqE,EAAS,MAAM,IAAI,EAEpF,MAAMQ,EAAgB,MAAMR,EAAS,KAAA,EACrC,GACE,OAAOQ,GAAS,UAChBA,IAAS,MACT,OAAQA,EAAyB,SAAY,UAC7C,OAAQA,EAAyB,UAAa,UAC9C,OAAQA,EAAyB,UAAa,UAC7CA,EAAyB,WAAa,KAEvC,MAAM7E,EAAc,gCAAgC,EAEtD,MAAM8E,EAAWD,EACjB,GAAIC,EAAS,WAAa1B,EACxB,MAAMpD,EAAc,4DAA4D,EAElF,OAAO8E,CACT,CAEA,eAAeC,EAASC,EAAmC,CAEzD,MAAMC,EAAQ,MAAM,OADJ,IAAI,IAAI,WAAYD,CAAO,EACW,MACtD,GAAI,OAAOC,EAAK,cAAiB,WAC/B,MAAMjF,EAAc,gDAAgD,EAEtE,OAAOiF,CACT,CAEA,MAAMC,MAA6C,IAAI,CACrD,iBACA,iBACA,qBACA,sBACA,mBACA,kBACA,eACA,kBACA,uBACA,gBACF,CAAC,EAOD,SAASC,EAAcC,EAAmC,CACxD,GAAI,OAAOA,GAAU,UAAYA,IAAU,KAAM,CAC/C,MAAMC,EAAYD,EAClB,GACE,OAAOC,EAAU,MAAS,UAC1BH,EAAkB,IAAIG,EAAU,IAAI,GACpC,OAAOA,EAAU,WAAc,UAC/B,CACA,MAAMvC,EAA4B,CAChC,KAAMuC,EAAU,KAChB,UAAWA,EAAU,SAAA,EAEvB,OAAI,OAAOA,EAAU,WAAc,WAAUvC,EAAO,UAAYuC,EAAU,WACtE,OAAOA,EAAU,YAAe,WAAUvC,EAAO,WAAauC,EAAU,YACrEvC,CACT,CACF,CACA,MAAO,CAAE,KAAM,iBAAkB,UAAW,EAAA,CAC9C,CAEA,SAASwC,EACP7D,EACA2D,EACAG,EAAsF,CAAA,EAChF,CACNtC,EAAoBxB,EAAQ,eAAgB,CAAE,GAAG0D,EAAcC,CAAK,EAAG,GAAGG,EAAO,CACnF,CAEA,eAAsBC,EAAcC,EAA0C,CAC5E,IAAIC,EACJ,GAAI,CACFA,EAAazE,EAAsBwE,CAAM,CAC3C,OAASL,EAAO,CAEdE,EAAU,SAAUF,CAAK,EACzB,MACF,CAEA,GAAI,CAACK,EAAO,IAAK,CACfH,EAAU,SAAUtF,EAAc,mCAAmC,CAAC,EACtE,MACF,CACA,MAAMoE,EAAc,IAAI,IAAI,gBAAiBqB,EAAO,GAAG,EAEvD,IAAIX,EACAa,EACJ,GAAI,EACD,CAAE,SAAAb,EAAU,QAASa,GAAgB,MAAMxB,EAAqBC,CAAW,EAC9E,OAASgB,EAAO,CACdE,EAAU,SAAUF,EAAO,CACzB,UAAWzD,EAAYyB,EAAWsC,EAAW,OAAQA,EAAW,OAAO,CAAA,CACxE,EACD,MACF,CAEA,MAAMzB,EAAA,EAEN,IAAI2B,EACJ,GAAI,CACF,MAAMC,EAAU,SAAS,iBAAiBH,EAAW,MAAO,EAC5D,GAAIG,EAAQ,SAAW,EACrB,MAAM7F,EACJ,kBAAkB0F,EAAW,MAAM,4CAAA,EAGvC,GAAIG,EAAQ,OAAS,EACnB,MAAM7F,EACJ,kBAAkB0F,EAAW,MAAM,aAAaG,EAAQ,MAAM,qCAAA,EAGlED,EAAOC,EAAQ,CAAC,CAClB,OAAST,EAAO,CACdE,EAAU,SAAUF,EAAO,CACzB,UAAWzD,EAAYmD,EAAS,SAAUY,EAAW,OAAQA,EAAW,OAAO,CAAA,CAChF,EACD,MACF,CAEA,MAAMxD,EAAYP,EAAYmD,EAAS,SAAUY,EAAW,OAAQA,EAAW,OAAO,EACtF9B,EAAgBkB,EAAS,OAAO,EAGhC,IAAI3C,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EAClD4D,EACJ,GAAI3D,EACF2D,EAAS3D,EAAM,WACV,CACL,IAAI8C,EACJ,GAAI,CACFA,EAAO,MAAMF,EAASY,CAAW,CACnC,OAASP,EAAO,CACdE,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,CAAA,CAAW,EACpC,MACF,CACA4D,EAASb,EAAK,aAAa,CACzB,QAASS,EAAW,QACpB,OAAQA,EAAW,MAAA,CACpB,EACD,MAAMK,EAAQD,EAAO,MAAA,EAGhBC,EAAM,MAAM,IAAM,CAAC,CAAC,EACzB5D,EAAQ,CAAE,UAAAD,EAAW,OAAA4D,EAAQ,MAAAC,CAAA,EAC7BxC,IAAc,SAAS,eAAepB,CAAK,CAC7C,CAEA,GAAI,CACF,MAAMA,EAAM,KACd,OAASiD,EAAO,CACd7B,IAAc,SAAS,iBAAiBrB,CAAS,EACjD4D,EAAO,QAAA,EACPR,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,CAAA,CAAW,EACpC,MACF,CAEA,IAAI8D,EAAa,GACjB,MAAMC,EAAoB,CAAA,EAC1B,UAAW5D,KAAcqD,EAAW,SAAU,CAE5C,GAAInC,IAAc,SAAS,aAAarB,EAAWG,EAAYuD,CAAI,EAAG,SAEtE,MAAMM,EAAWpB,EAAS,SAASzC,CAAU,EAC7C,GAAI,OAAO6D,GAAa,SAAU,CAC/BJ,EAA8B,aAAA,EAC/BR,EACEM,EACA,IAAIjG,EAAY,CACd,KAAM,sBACN,QAAS,eAAe0C,CAAU,iCAClC,UAAW,GACX,WAAAA,CAAA,CACD,EACD,CAAE,UAAAH,EAAW,WAAAG,CAAA,CAAW,EAE1B,QACF,CAEA,GAAI,CAEF,MAAM8D,EAAU,MAAM,OADL,IAAI,IAAID,EAAUP,CAAW,EACW,MAGzD,GAAI,OAAOQ,EAAO,OAAU,WAC1B,MAAMnG,EAAc,qBAAqBqC,CAAU,4BAA4B,EAEjF,MAAM1B,EAAO,MAAOwF,EAAO,MAAkCL,EAAQ,CACnE,OAAQF,EACR,MAAOF,EAAW,KAAA,CACnB,EACKjD,EAAWc,IAAc,SAAS,iBAAiBrB,EAAWG,EAAYuD,EAAMjF,CAAG,EACzFqF,EAAa,GACbC,EAAQ,KAAK5D,CAAU,EACvBY,EAAoB2C,EAAM,0BAA2B,CACnD,UAAA1D,EACA,YAAaO,EAAS,YACtB,WAAAJ,EACA,QAASyC,EAAS,OAAA,CACnB,CACH,OAASM,EAAO,CAGbU,EAA8B,aAAA,EAC/BR,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,EAAW,WAAAG,EAAY,CAClD,CACF,CAEI2D,GACF/C,EAAoB2C,EAAM,eAAgB,CACxC,UAAA1D,EACA,QAASwD,EAAW,QACpB,aAAcO,EACd,QAASnB,EAAS,OAAA,CACnB,CAEL,CAWA,SAASsB,EAAWX,EAA0C,CAC5D,KAAM,CAAE,MAAAY,CAAA,EAAU9C,EAAA,EACZ+C,EAAMD,EAAM,QAAQ,KAAK,IAAMb,EAAcC,CAAM,CAAC,EAC1D,OAAAY,EAAM,QAAUC,EAAI,MAAM,IAAM,CAAC,CAAC,EAC3BA,CACT,CAEA,SAASC,GAAkB,CACzB,GAAI,OAAO,SAAa,IAAa,OACrC,IAAId,EACF,SAAS,yBAAyB,kBAAoB,SAAS,cAAgB,KACjF,GAAI,CAACA,EAAQ,CACX,MAAMe,EAAW,SAAS,iBAAoC,4BAA4B,EACtFA,EAAS,SAAW,IAAGf,EAASe,EAAS,CAAC,GAAK,KACrD,CACKf,GACAW,EAAWX,CAAM,EAAE,MAAOL,GAAmB,CAChDE,EAAU,SAAUF,CAAK,CAC3B,CAAC,CACH,CAEAmB,EAAA,EAGO,MAAME,GAAsBF"}
1
+ {"version":3,"file":"viceme.min.js","sources":["../src/core/errors.ts","../src/core/config.ts","../src/loader/attributes.ts","../src/loader/registry.ts","../src/loader/events.ts","../src/version.ts","../src/loader/auto-loader.ts"],"sourcesContent":["/**\n * Public error model.\n *\n * Consumers branch on the stable `code` only — never on `message` text.\n * Error payloads must never contain provider responses, tokens, cookies, or\n * internal stack traces; `toJSON()` exposes the safe diagnostic subset.\n */\n\nexport type ViceMeErrorCode =\n | 'CONFIG_INVALID'\n | 'WORK_NOT_FOUND'\n | 'ORIGIN_NOT_ALLOWED'\n | 'CAPABILITY_DISABLED'\n | 'CLIENT_DESTROYED'\n | 'SESSION_EXPIRED'\n | 'RATE_LIMITED'\n | 'NETWORK_TIMEOUT'\n | 'CHECKOUT_UNAVAILABLE'\n | 'INTERNAL_ERROR';\n\nexport interface ViceMeErrorInit {\n code: ViceMeErrorCode;\n message: string;\n retryable?: boolean;\n /** Server-assigned request id echoed back for support correlation. */\n requestId?: string;\n /** Capability the error belongs to, when scoped to one. */\n capability?: string;\n}\n\nconst RETRYABLE_BY_DEFAULT: ReadonlySet<ViceMeErrorCode> = new Set([\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\nexport class ViceMeError extends Error {\n readonly code: ViceMeErrorCode;\n readonly retryable: boolean;\n readonly requestId?: string;\n readonly capability?: string;\n\n constructor(init: ViceMeErrorInit) {\n super(init.message);\n this.name = 'ViceMeError';\n this.code = init.code;\n this.retryable = init.retryable ?? RETRYABLE_BY_DEFAULT.has(init.code);\n this.requestId = init.requestId;\n this.capability = init.capability;\n }\n\n /** Safe, stable-shape serialization for logs and `viceme:error` events. */\n toJSON(): {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } {\n const json: {\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n capability?: string;\n } = { code: this.code, retryable: this.retryable };\n if (this.requestId !== undefined) json.requestId = this.requestId;\n if (this.capability !== undefined) json.capability = this.capability;\n return json;\n }\n}\n\nexport function isViceMeError(value: unknown): value is ViceMeError {\n return value instanceof ViceMeError;\n}\n\n/** Build a CONFIG_INVALID error with a stable, non-sensitive message. */\nexport function configInvalid(message: string): ViceMeError {\n return new ViceMeError({ code: 'CONFIG_INVALID', message, retryable: false });\n}\n\n/** Build a CLIENT_DESTROYED error for post-destroy calls. */\nexport function clientDestroyed(): ViceMeError {\n return new ViceMeError({\n code: 'CLIENT_DESTROYED',\n message: 'ViceMe client has been destroyed.',\n retryable: false,\n });\n}\n","/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey`, `region`, and\n * `signal`. Anything else (transport, clock, request ids, base URLs) is a\n * testing-only concern and lives in `@viceme-ai/sdk/testing`, so Agents can\n * never bake temporary or internal endpoints into user projects.\n */\n\nimport { configInvalid } from './errors.ts';\n\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n workKey: string;\n /** Routes public API and CDN traffic. */\n region: ViceMeRegion;\n /** Optional abort signal owned by the host page. */\n signal?: AbortSignal;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\n/**\n * Public API origins per region. These are the only production endpoints the\n * SDK may contact; B1 confirms final hostnames and any change happens here in\n * one place (never via a public `apiBaseUrl` option).\n */\nexport const PUBLIC_API_BASE_URLS: Readonly<Record<ViceMeRegion, string>> = {\n cn: 'https://api.viceme.cn',\n global: 'https://api.viceme.ai',\n};\n\nexport function resolveApiBaseUrl(region: ViceMeRegion): string {\n return PUBLIC_API_BASE_URLS[region];\n}\n\nexport function isValidWorkKey(value: unknown): value is string {\n return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n if (typeof input !== 'object' || input === null) {\n throw configInvalid('createViceMe expects a configuration object.');\n }\n const raw = input as Record<string, unknown>;\n\n const known = new Set(['workKey', 'region', 'signal']);\n for (const key of Object.keys(raw)) {\n if (!known.has(key)) {\n throw configInvalid(`Unknown configuration field \"${key}\".`);\n }\n }\n if (!isValidWorkKey(raw.workKey)) {\n throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n }\n if (!isValidRegion(raw.region)) {\n throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n }\n if (raw.signal !== undefined && !(raw.signal instanceof AbortSignal)) {\n throw configInvalid('Configuration field \"signal\" must be an AbortSignal.');\n }\n return { workKey: raw.workKey, region: raw.region, signal: raw.signal };\n}\n","/**\n * `data-viceme-*` attribute parsing for the CDN auto-loader.\n *\n * The attribute set is fixed; unknown `data-viceme-*` attributes are rejected\n * so pages can never smuggle endpoints, tokens, secrets, prices, or payment\n * state through the loader. Parse failures never guess defaults for work,\n * region, or target.\n */\n\nimport { configInvalid } from '../core/errors.ts';\nimport type { ViceMeRegion } from '../core/config.ts';\nimport { isValidRegion, isValidWorkKey } from '../core/config.ts';\n\nexport type ViceMeTheme = 'light' | 'dark' | 'auto';\n\nexport interface LoaderAttributes {\n workKey: string;\n region: ViceMeRegion;\n /** Deduplicated feature names in declared order. */\n features: string[];\n /** CSS selector; required whenever features are declared. */\n target?: string;\n theme: ViceMeTheme;\n}\n\nconst KNOWN_ATTRIBUTES: ReadonlySet<string> = new Set([\n 'data-viceme-work',\n 'data-viceme-region',\n 'data-viceme-features',\n 'data-viceme-target',\n 'data-viceme-theme',\n // Marker for explicit opt-in when document.currentScript is unavailable.\n 'data-viceme-loader',\n]);\n\nconst FEATURE_NAME_PATTERN = /^[a-z][a-z0-9-]{1,31}$/;\nconst THEMES: ReadonlySet<string> = new Set(['light', 'dark', 'auto']);\n\nexport function parseLoaderAttributes(element: Element): LoaderAttributes {\n for (const name of element.getAttributeNames()) {\n if (name.startsWith('data-viceme-') && !KNOWN_ATTRIBUTES.has(name)) {\n throw configInvalid(`Unknown loader attribute \"${name}\".`);\n }\n }\n\n const workKey = element.getAttribute('data-viceme-work');\n if (!isValidWorkKey(workKey)) {\n throw configInvalid('Loader attribute \"data-viceme-work\" must be a public work key (\"wrk_…\").');\n }\n\n const region = element.getAttribute('data-viceme-region');\n if (!isValidRegion(region)) {\n throw configInvalid('Loader attribute \"data-viceme-region\" must be \"cn\" or \"global\".');\n }\n\n const rawFeatures = element.getAttribute('data-viceme-features');\n if (rawFeatures === null || rawFeatures.trim() === '') {\n throw configInvalid('Loader attribute \"data-viceme-features\" is required.');\n }\n const features: string[] = [];\n for (const part of rawFeatures.split(',')) {\n const feature = part.trim();\n if (feature === '') continue;\n if (!FEATURE_NAME_PATTERN.test(feature)) {\n throw configInvalid(`Loader feature name \"${feature}\" is not a valid capability name.`);\n }\n if (!features.includes(feature)) features.push(feature);\n }\n if (features.length === 0) {\n throw configInvalid('Loader attribute \"data-viceme-features\" must list at least one feature.');\n }\n\n const target = element.getAttribute('data-viceme-target');\n if (target === '') {\n throw configInvalid('Loader attribute \"data-viceme-target\" must be a CSS selector.');\n }\n // Loader-mounted features are visual capabilities, so a target is required.\n if (target === null) {\n throw configInvalid(\n 'Loader attribute \"data-viceme-target\" is required when features are declared.',\n );\n }\n\n const rawTheme = element.getAttribute('data-viceme-theme');\n if (rawTheme !== null && !THEMES.has(rawTheme)) {\n throw configInvalid('Loader attribute \"data-viceme-theme\" must be \"light\", \"dark\", or \"auto\".');\n }\n\n return {\n workKey,\n region,\n features,\n target,\n theme: (rawTheme ?? 'auto') as ViceMeTheme,\n };\n}\n","/**\n * Loader registry.\n *\n * Only the CDN loader maintains this registry (explicit `createViceMe()`\n * instances never register). Core clients are shared by\n * `major + region + workKey`; capability mounts are deduplicated by\n * `clientKey + capability + target Element identity`.\n *\n * The registry itself is never exposed on `window` — only the fixed\n * `ViceMe.versions.v1` diagnostics/destroy namespace is. It stores raw\n * capability handles; the loader wraps them into the public\n * `ViceMeMountedInstance` and owns destroy/event deduplication.\n */\n\nimport type { ViceMeClient } from '../core/client.ts';\nimport type { CapabilityMountHandle } from './mount-handle.ts';\n\nexport interface RegisteredClient {\n clientKey: string;\n client: ViceMeClient;\n ready: Promise<void>;\n}\n\nexport interface RegisteredInstance {\n instanceKey: string;\n clientKey: string;\n capability: string;\n host: Element;\n raw: CapabilityMountHandle;\n destroyed: boolean;\n}\n\nexport function clientKeyOf(majorVersion: number, region: string, workKey: string): string {\n return `v${majorVersion}+${region}+${workKey}`;\n}\n\nexport class LoaderRegistry {\n readonly #clients = new Map<string, RegisteredClient>();\n readonly #instances = new Map<string, RegisteredInstance>();\n /** (clientKey, capability) -> mounted host element -> instance. */\n readonly #elements = new Map<string, WeakMap<Element, RegisteredInstance>>();\n #elementCounter = 0;\n\n getClient(clientKey: string): RegisteredClient | undefined {\n return this.#clients.get(clientKey);\n }\n\n registerClient(entry: RegisteredClient): void {\n this.#clients.set(entry.clientKey, entry);\n }\n\n unregisterClient(clientKey: string): void {\n this.#clients.delete(clientKey);\n }\n\n getInstance(instanceKey: string): RegisteredInstance | undefined {\n return this.#instances.get(instanceKey);\n }\n\n /** Existing mount for the same client+capability+element, if any. */\n findInstance(\n clientKey: string,\n capability: string,\n element: Element,\n ): RegisteredInstance | undefined {\n return this.#elements.get(`${clientKey}::${capability}`)?.get(element);\n }\n\n registerInstance(\n clientKey: string,\n capability: string,\n element: Element,\n raw: CapabilityMountHandle,\n ): RegisteredInstance {\n const compositeKey = `${clientKey}::${capability}`;\n let byElement = this.#elements.get(compositeKey);\n if (byElement === undefined) {\n byElement = new WeakMap();\n this.#elements.set(compositeKey, byElement);\n }\n const existing = byElement.get(element);\n if (existing) return existing;\n\n this.#elementCounter += 1;\n const instance: RegisteredInstance = {\n instanceKey: `${clientKey}::${capability}::el${this.#elementCounter}`,\n clientKey,\n capability,\n host: element,\n raw,\n destroyed: false,\n };\n this.#instances.set(instance.instanceKey, instance);\n byElement.set(element, instance);\n return instance;\n }\n\n removeInstance(instanceKey: string): RegisteredInstance | undefined {\n const instance = this.#instances.get(instanceKey);\n if (!instance) return undefined;\n this.#instances.delete(instanceKey);\n this.#elements.get(`${instance.clientKey}::${instance.capability}`)?.delete(instance.host);\n return instance;\n }\n\n instancesForClient(clientKey: string): RegisteredInstance[] {\n return [...this.#instances.values()].filter((i) => i.clientKey === clientKey);\n }\n}\n","/**\n * Stable `viceme:*` DOM events.\n *\n * Dispatch target is the mount host element; configuration errors that happen\n * before a host exists are dispatched on `document`. Event details carry an\n * allowlisted field set only — never tokens, cookies, provider payloads, or\n * internal stacks.\n */\n\nimport type { ViceMeErrorCode } from '../core/errors.ts';\n\nexport interface VicemeReadyDetail {\n clientKey: string;\n workKey: string;\n capabilities: string[];\n version: string;\n}\n\nexport interface VicemeCapabilityReadyDetail {\n clientKey: string;\n instanceKey: string;\n capability: string;\n version: string;\n}\n\nexport interface VicemeErrorDetail {\n clientKey?: string;\n instanceKey?: string;\n capability?: string;\n code: ViceMeErrorCode;\n retryable: boolean;\n requestId?: string;\n}\n\nexport interface VicemeDestroyedDetail {\n clientKey: string;\n instanceKey: string;\n capability: string;\n}\n\nexport type VicemeEventType =\n 'viceme:ready' | 'viceme:capability-ready' | 'viceme:error' | 'viceme:destroyed';\n\nexport type VicemeEventDetailMap = {\n 'viceme:ready': VicemeReadyDetail;\n 'viceme:capability-ready': VicemeCapabilityReadyDetail;\n 'viceme:error': VicemeErrorDetail;\n 'viceme:destroyed': VicemeDestroyedDetail;\n};\n\nconst ALLOWED_KEYS: ReadonlyMap<VicemeEventType, ReadonlySet<string>> = new Map([\n ['viceme:ready', new Set(['clientKey', 'workKey', 'capabilities', 'version'])],\n ['viceme:capability-ready', new Set(['clientKey', 'instanceKey', 'capability', 'version'])],\n [\n 'viceme:error',\n new Set(['clientKey', 'instanceKey', 'capability', 'code', 'retryable', 'requestId']),\n ],\n ['viceme:destroyed', new Set(['clientKey', 'instanceKey', 'capability'])],\n]);\n\n/** Strip anything outside the documented allowlist before dispatch. */\nexport function sanitizeDetail(\n type: VicemeEventType,\n detail: VicemeEventDetailMap[VicemeEventType],\n): VicemeEventDetailMap[VicemeEventType] {\n const allowed = ALLOWED_KEYS.get(type)!;\n const result: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(detail)) {\n if (allowed.has(key) && value !== undefined) result[key] = value;\n }\n return result as unknown as VicemeEventDetailMap[VicemeEventType];\n}\n\nexport function dispatchViceMeEvent<K extends VicemeEventType>(\n target: EventTarget,\n type: K,\n detail: VicemeEventDetailMap[K],\n): void {\n const event = new CustomEvent(type, {\n detail: sanitizeDetail(type, detail),\n bubbles: true,\n composed: true,\n cancelable: false,\n });\n target.dispatchEvent(event);\n}\n","/**\n * Single source of truth for the SDK runtime version.\n *\n * Kept in sync with `packages/sdk/package.json#version`; a unit test enforces\n * the match so the loader, release manifest, and npm metadata can never drift.\n */\nexport const SDK_VERSION = '0.1.4';\n\n/** Public API major carried by this build (loader namespace `v1`). */\nexport const API_MAJOR = 1;\n","/**\n * CDN auto-loader (`viceme.min.js`, IIFE).\n *\n * Deterministic algorithm (fixed baseline):\n *\n * 1. Read `document.currentScript`; when unavailable, accept exactly one\n * explicit `script[data-viceme-loader]`.\n * 2. Parse and validate `data-viceme-*`; build `clientKey` and per-feature\n * `instanceKey`s.\n * 3. Wait for DOM ready; a missing/ambiguous target emits `CONFIG_INVALID`\n * and never creates phantom nodes.\n * 4. Read `manifest.json` from the loader's own directory (exact release\n * version; URLs are never assembled from page parameters).\n * 5. Load the same-version core, then each declared feature chunk in order.\n * 6. Create the client, then mount; handles land in an internal registry.\n * 7. Re-running the same instance key returns the original handle — no\n * duplicate sessions, subscriptions, or DOM.\n * 8. A failing capability destroys only its own partial state; the rest of\n * the page and other capabilities keep working.\n * 9. `pagehide` never auto-destroys (bfcache); cleanup happens on explicit\n * `destroy()` only.\n *\n * The loader never writes localStorage, cookies, global CSS, or globals other\n * than the fixed `window.ViceMe.versions.vN` namespace.\n */\n\nimport { parseLoaderAttributes, type LoaderAttributes } from './attributes.ts';\nimport { LoaderRegistry, clientKeyOf, type RegisteredInstance } from './registry.ts';\nimport type { CapabilityMountHandle, CapabilityMountFunction } from './mount-handle.ts';\nimport { dispatchViceMeEvent, type VicemeErrorDetail } from './events.ts';\nimport { configInvalid, ViceMeError } from '../core/errors.ts';\nimport type { ViceMeClient, ViceMeMountedInstance } from '../core/client.ts';\nimport { API_MAJOR } from '../version.ts';\n\nexport interface ReleaseManifest {\n version: string;\n apiMajor: number;\n loader: string;\n features: Record<string, string>;\n}\n\ninterface CoreModule {\n createViceMe: (config: unknown) => ViceMeClient;\n}\n\n/** Internal surface the core implementation provides to the loader. */\ninterface InternalCoreClient extends ViceMeClient {\n markDegraded(): void;\n}\n\nexport interface ViceMeLoaderNamespaceV1 {\n readonly version: string;\n whenReady(clientKey: string): Promise<ViceMeClient>;\n getInstance(instanceKey: string): ViceMeMountedInstance | undefined;\n destroyInstance(instanceKey: string): void;\n destroyClient(clientKey: string): void;\n}\n\nexport interface ViceMeBrowserGlobal {\n versions: {\n // Other majors coexist; they are never overwritten by this loader.\n [major: string]: ViceMeLoaderNamespaceV1 | undefined;\n };\n}\n\nconst MANIFEST_TIMEOUT_MS = 8_000;\n\ninterface LoaderSharedState {\n registry: LoaderRegistry;\n /** Serialized run queue shared across every execution of this loader. */\n queue: { current: Promise<void> };\n}\n\nconst STATE_KEY = Symbol.for('viceme.loader.state.v1');\n\n/**\n * Loader state must survive multiple executions of the same (or an identical)\n * loader `<script>`: browsers execute each script tag as an independent IIFE,\n * so the registry and run queue live on a hidden, symbol-keyed, non-enumerable\n * global — never an undeclared string-named global.\n */\nfunction sharedState(): LoaderSharedState {\n const holder = globalThis as Record<symbol, unknown>;\n const existing = holder[STATE_KEY] as LoaderSharedState | undefined;\n if (existing) return existing;\n const state: LoaderSharedState = {\n registry: new LoaderRegistry(),\n queue: { current: Promise.resolve() },\n };\n Object.defineProperty(globalThis, STATE_KEY, {\n value: state,\n writable: true,\n configurable: true,\n enumerable: false,\n });\n return state;\n}\n\n/* ------------------------------------------------------------------ */\n/* Instance wrapper + destroy */\n/* ------------------------------------------------------------------ */\n\nfunction destroyInstanceInternal(instance: RegisteredInstance): void {\n if (instance.destroyed) return;\n instance.destroyed = true;\n sharedState().registry.removeInstance(instance.instanceKey);\n try {\n instance.raw.destroy();\n } finally {\n dispatchViceMeEvent(instance.host, 'viceme:destroyed', {\n clientKey: instance.clientKey,\n instanceKey: instance.instanceKey,\n capability: instance.capability,\n });\n }\n}\n\nfunction wrapInstance(instance: RegisteredInstance): ViceMeMountedInstance {\n return {\n instanceKey: instance.instanceKey,\n capability: instance.capability,\n destroy: () => destroyInstanceInternal(instance),\n };\n}\n\n/* ------------------------------------------------------------------ */\n/* Namespace installation */\n/* ------------------------------------------------------------------ */\n\nfunction defineHidden(target: object, key: string, value: unknown): void {\n Object.defineProperty(target, key, {\n value,\n writable: true,\n configurable: true,\n enumerable: false,\n });\n}\n\nexport function ensureNamespace(version: string): ViceMeLoaderNamespaceV1 {\n const holder = globalThis as { ViceMe?: ViceMeBrowserGlobal };\n let global = holder.ViceMe;\n if (!global) {\n global = {} as ViceMeBrowserGlobal;\n defineHidden(globalThis, 'ViceMe', global);\n }\n let versions = global.versions;\n if (!versions) {\n versions = {} as ViceMeBrowserGlobal['versions'];\n defineHidden(global, 'versions', versions);\n }\n const existing = versions[`v${API_MAJOR}`];\n if (existing) return existing;\n\n const namespace: ViceMeLoaderNamespaceV1 = {\n version,\n whenReady(clientKey: string): Promise<ViceMeClient> {\n const entry = sharedState().registry.getClient(clientKey);\n if (!entry) {\n return Promise.reject(configInvalid(`Unknown clientKey \"${clientKey}\".`));\n }\n return entry.ready.then(() => entry.client);\n },\n getInstance(instanceKey: string): ViceMeMountedInstance | undefined {\n const instance = sharedState().registry.getInstance(instanceKey);\n return instance ? wrapInstance(instance) : undefined;\n },\n destroyInstance(instanceKey: string): void {\n const instance = sharedState().registry.getInstance(instanceKey);\n if (instance) destroyInstanceInternal(instance);\n },\n destroyClient(clientKey: string): void {\n for (const instance of sharedState().registry.instancesForClient(clientKey)) {\n destroyInstanceInternal(instance);\n }\n const entry = sharedState().registry.getClient(clientKey);\n sharedState().registry.unregisterClient(clientKey);\n entry?.client.destroy();\n },\n };\n defineHidden(versions, `v${API_MAJOR}`, namespace);\n return namespace;\n}\n\n/* ------------------------------------------------------------------ */\n/* Loader algorithm */\n/* ------------------------------------------------------------------ */\n\nfunction whenDomReady(): Promise<void> {\n if (document.readyState !== 'loading') return Promise.resolve();\n return new Promise((resolve) => {\n document.addEventListener('DOMContentLoaded', () => resolve(), { once: true });\n });\n}\n\nasync function fetchReleaseManifest(\n manifestUrl: URL,\n): Promise<{ manifest: ReleaseManifest; baseUrl: URL }> {\n let response: Response;\n try {\n response = await fetchWithTimeout(manifestUrl);\n } catch {\n response = { ok: false, status: 0 } as Response;\n }\n // Alias path (e.g. /sdk/v1/) holds no manifest on the S3 topology: it\n // carries only the loader object plus the version POINTER. Resolve the\n // pointer and load the exact version beside it.\n if (!response.ok) {\n const aliasVersion = await resolveAliasPointer(manifestUrl);\n if (aliasVersion !== undefined) {\n const aliasUrl = new URL(`/viceme-sdk/${aliasVersion}/manifest.json`, manifestUrl);\n return { manifest: await parseManifest(await fetchWithTimeout(aliasUrl)), baseUrl: aliasUrl };\n }\n }\n return { manifest: await parseManifest(response), baseUrl: manifestUrl };\n}\n\nfunction fetchWithTimeout(url: URL): Promise<Response> {\n const signal =\n typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n ? AbortSignal.timeout(MANIFEST_TIMEOUT_MS)\n : undefined;\n return fetch(url, { credentials: 'omit', signal });\n}\n\n/** Read /sdk/-/aliases/v1 when the loader itself sits under /sdk/v1/. */\nasync function resolveAliasPointer(manifestUrl: URL): Promise<string | undefined> {\n if (!/\\/viceme-sdk\\/[^/]+\\/manifest\\.json$/.test(manifestUrl.pathname)) return undefined;\n const segment = manifestUrl.pathname.split('/viceme-sdk/')[1]?.split('/')[0];\n if (segment !== `v${API_MAJOR}`) return undefined;\n try {\n const response = await fetchWithTimeout(new URL('/viceme-sdk/-/aliases/v1', manifestUrl));\n if (!response.ok) return undefined;\n const version = (await response.text()).trim();\n return /^\\d+\\.\\d+\\.\\d+(-[0-9A-Za-z.-]+)?$/.test(version) ? version : undefined;\n } catch {\n return undefined;\n }\n}\n\nasync function parseManifest(response: Response): Promise<ReleaseManifest> {\n if (!response.ok) {\n throw configInvalid(`Release manifest is not available (HTTP ${response.status}).`);\n }\n const body: unknown = await response.json();\n if (\n typeof body !== 'object' ||\n body === null ||\n typeof (body as ReleaseManifest).version !== 'string' ||\n typeof (body as ReleaseManifest).apiMajor !== 'number' ||\n typeof (body as ReleaseManifest).features !== 'object' ||\n (body as ReleaseManifest).features === null\n ) {\n throw configInvalid('Release manifest is malformed.');\n }\n const manifest = body as ReleaseManifest;\n if (manifest.apiMajor !== API_MAJOR) {\n throw configInvalid('Release manifest major version does not match this loader.');\n }\n return manifest;\n}\n\nasync function loadCore(baseUrl: URL): Promise<CoreModule> {\n const coreUrl = new URL('index.js', baseUrl);\n const core = (await import(/* @vite-ignore */ coreUrl.href)) as Partial<CoreModule>;\n if (typeof core.createViceMe !== 'function') {\n throw configInvalid('SDK core chunk does not export createViceMe().');\n }\n return core as CoreModule;\n}\n\nconst KNOWN_ERROR_CODES: ReadonlySet<string> = new Set([\n 'CONFIG_INVALID',\n 'WORK_NOT_FOUND',\n 'ORIGIN_NOT_ALLOWED',\n 'CAPABILITY_DISABLED',\n 'CLIENT_DESTROYED',\n 'SESSION_EXPIRED',\n 'RATE_LIMITED',\n 'NETWORK_TIMEOUT',\n 'CHECKOUT_UNAVAILABLE',\n 'INTERNAL_ERROR',\n]);\n\n/**\n * Normalize any thrown value into an event detail. Uses structural checks,\n * not `instanceof`: the loader IIFE and the core ESM chunk are separate\n * builds, so their `ViceMeError` classes are distinct at runtime.\n */\nfunction toErrorDetail(error: unknown): VicemeErrorDetail {\n if (typeof error === 'object' && error !== null) {\n const candidate = error as Record<string, unknown>;\n if (\n typeof candidate.code === 'string' &&\n KNOWN_ERROR_CODES.has(candidate.code) &&\n typeof candidate.retryable === 'boolean'\n ) {\n const detail: VicemeErrorDetail = {\n code: candidate.code as VicemeErrorDetail['code'],\n retryable: candidate.retryable,\n };\n if (typeof candidate.requestId === 'string') detail.requestId = candidate.requestId;\n if (typeof candidate.capability === 'string') detail.capability = candidate.capability;\n return detail;\n }\n }\n return { code: 'INTERNAL_ERROR', retryable: true };\n}\n\nfunction emitError(\n target: EventTarget,\n error: unknown,\n extra: Partial<Pick<VicemeErrorDetail, 'clientKey' | 'instanceKey' | 'capability'>> = {},\n): void {\n dispatchViceMeEvent(target, 'viceme:error', { ...toErrorDetail(error), ...extra });\n}\n\nexport async function runAutoLoader(script: HTMLScriptElement): Promise<void> {\n let attributes: LoaderAttributes;\n try {\n attributes = parseLoaderAttributes(script);\n } catch (error) {\n // Configuration errors before any host exists go to `document`.\n emitError(document, error);\n return;\n }\n\n if (!script.src) {\n emitError(document, configInvalid('Loader script requires a src URL.'));\n return;\n }\n const manifestUrl = new URL('manifest.json', script.src);\n\n let manifest: ReleaseManifest;\n let releaseBase: URL;\n try {\n ({ manifest, baseUrl: releaseBase } = await fetchReleaseManifest(manifestUrl));\n } catch (error) {\n emitError(document, error, {\n clientKey: clientKeyOf(API_MAJOR, attributes.region, attributes.workKey),\n });\n return;\n }\n\n await whenDomReady();\n\n let host: Element;\n try {\n const matches = document.querySelectorAll(attributes.target!);\n if (matches.length === 0) {\n throw configInvalid(\n `Loader target \"${attributes.target}\" matched no element; no node was created.`,\n );\n }\n if (matches.length > 1) {\n throw configInvalid(\n `Loader target \"${attributes.target}\" matched ${matches.length} elements; exactly one is required.`,\n );\n }\n host = matches[0]!;\n } catch (error) {\n emitError(document, error, {\n clientKey: clientKeyOf(manifest.apiMajor, attributes.region, attributes.workKey),\n });\n return;\n }\n\n const clientKey = clientKeyOf(manifest.apiMajor, attributes.region, attributes.workKey);\n ensureNamespace(manifest.version);\n\n // Shared core client per (major, region, workKey).\n let entry = sharedState().registry.getClient(clientKey);\n let client: ViceMeClient;\n if (entry) {\n client = entry.client;\n } else {\n let core: CoreModule;\n try {\n core = await loadCore(releaseBase);\n } catch (error) {\n emitError(host, error, { clientKey });\n return;\n }\n client = core.createViceMe({\n workKey: attributes.workKey,\n region: attributes.region,\n });\n const ready = client.ready();\n // Keep an unhandled-rejection-free copy on the registry entry; failures\n // are reported through this loader run and via whenReady().\n void ready.catch(() => {});\n entry = { clientKey, client, ready };\n sharedState().registry.registerClient(entry);\n }\n\n try {\n await entry.ready;\n } catch (error) {\n sharedState().registry.unregisterClient(clientKey);\n client.destroy();\n emitError(host, error, { clientKey });\n return;\n }\n\n let mountedAny = false;\n const mounted: string[] = [];\n for (const capability of attributes.features) {\n // Same client + capability + element: reuse the original handle.\n if (sharedState().registry.findInstance(clientKey, capability, host)) continue;\n\n const fileName = manifest.features[capability];\n if (typeof fileName !== 'string') {\n (client as InternalCoreClient).markDegraded();\n emitError(\n host,\n new ViceMeError({\n code: 'CAPABILITY_DISABLED',\n message: `Capability \"${capability}\" is not part of this release.`,\n retryable: false,\n capability,\n }),\n { clientKey, capability },\n );\n continue;\n }\n\n try {\n const chunkUrl = new URL(fileName, releaseBase);\n const module = (await import(/* @vite-ignore */ chunkUrl.href)) as {\n mount?: unknown;\n };\n if (typeof module.mount !== 'function') {\n throw configInvalid(`Capability chunk \"${capability}\" does not export mount().`);\n }\n const raw = (await (module.mount as CapabilityMountFunction)(client, {\n target: host,\n theme: attributes.theme,\n })) as CapabilityMountHandle;\n const instance = sharedState().registry.registerInstance(clientKey, capability, host, raw);\n mountedAny = true;\n mounted.push(capability);\n dispatchViceMeEvent(host, 'viceme:capability-ready', {\n clientKey,\n instanceKey: instance.instanceKey,\n capability,\n version: manifest.version,\n });\n } catch (error) {\n // Only this capability's partial state is discarded; everything else\n // (including the host page) keeps working.\n (client as InternalCoreClient).markDegraded();\n emitError(host, error, { clientKey, capability });\n }\n }\n\n if (mountedAny) {\n dispatchViceMeEvent(host, 'viceme:ready', {\n clientKey,\n workKey: attributes.workKey,\n capabilities: mounted,\n version: manifest.version,\n });\n }\n}\n\n/* ------------------------------------------------------------------ */\n/* IIFE bootstrap */\n/* ------------------------------------------------------------------ */\n\n/**\n * Loader runs are serialized so identical scripts (duplicate tags, re-runs,\n * same work with different targets) observe registry state deterministically\n * and never create duplicate sessions or DOM.\n */\nfunction enqueueRun(script: HTMLScriptElement): Promise<void> {\n const { queue } = sharedState();\n const run = queue.current.then(() => runAutoLoader(script));\n queue.current = run.catch(() => {});\n return run;\n}\n\nfunction bootstrap(): void {\n if (typeof document === 'undefined') return;\n let script: HTMLScriptElement | null =\n document.currentScript instanceof HTMLScriptElement ? document.currentScript : null;\n if (!script) {\n const explicit = document.querySelectorAll<HTMLScriptElement>('script[data-viceme-loader]');\n if (explicit.length === 1) script = explicit[0] ?? null;\n }\n if (!script) return;\n void enqueueRun(script).catch((error: unknown) => {\n emitError(document, error);\n });\n}\n\nbootstrap();\n\n// Test-only handle for re-running the bootstrap in controlled environments.\nexport const __bootstrapForTests = bootstrap;\nexport type { RegisteredInstance };\n"],"names":["RETRYABLE_BY_DEFAULT","ViceMeError","init","json","isViceMeError","value","configInvalid","message","clientDestroyed","REGIONS","PUBLIC_API_BASE_URLS","resolveApiBaseUrl","region","isValidWorkKey","isValidRegion","validatePublicConfig","input","raw","known","key","KNOWN_ATTRIBUTES","FEATURE_NAME_PATTERN","THEMES","parseLoaderAttributes","element","name","workKey","rawFeatures","features","part","feature","target","rawTheme","clientKeyOf","majorVersion","LoaderRegistry","#clients","#instances","#elements","#elementCounter","clientKey","entry","instanceKey","capability","compositeKey","byElement","existing","instance","i","ALLOWED_KEYS","sanitizeDetail","type","detail","allowed","result","dispatchViceMeEvent","event","SDK_VERSION","API_MAJOR","MANIFEST_TIMEOUT_MS","STATE_KEY","sharedState","state","destroyInstanceInternal","wrapInstance","defineHidden","ensureNamespace","version","global","versions","namespace","whenDomReady","resolve","fetchReleaseManifest","manifestUrl","response","fetchWithTimeout","aliasVersion","resolveAliasPointer","aliasUrl","parseManifest","url","signal","body","manifest","loadCore","baseUrl","core","KNOWN_ERROR_CODES","toErrorDetail","error","candidate","emitError","extra","runAutoLoader","script","attributes","releaseBase","host","matches","client","ready","mountedAny","mounted","fileName","module","enqueueRun","queue","run","bootstrap","explicit","__bootstrapForTests"],"mappings":"yBA8BA,MAAMA,MAAyD,IAAI,CACjE,eACA,kBACA,uBACA,gBACF,CAAC,EAEM,MAAMC,UAAoB,KAAM,CAC5B,KACA,UACA,UACA,WAET,YAAYC,EAAuB,CACjC,MAAMA,EAAK,OAAO,EAClB,KAAK,KAAO,cACZ,KAAK,KAAOA,EAAK,KACjB,KAAK,UAAYA,EAAK,WAAaF,EAAqB,IAAIE,EAAK,IAAI,EACrE,KAAK,UAAYA,EAAK,UACtB,KAAK,WAAaA,EAAK,UACzB,CAGA,QAKE,CACA,MAAMC,EAKF,CAAE,KAAM,KAAK,KAAM,UAAW,KAAK,SAAA,EACvC,OAAI,KAAK,YAAc,SAAWA,EAAK,UAAY,KAAK,WACpD,KAAK,aAAe,SAAWA,EAAK,WAAa,KAAK,YACnDA,CACT,CACF,CAEO,SAASC,EAAcC,EAAsC,CAClE,OAAOA,aAAiBJ,CAC1B,CAGO,SAASK,EAAcC,EAA8B,CAC1D,OAAO,IAAIN,EAAY,CAAE,KAAM,iBAAkB,QAAAM,EAAS,UAAW,GAAO,CAC9E,CAGO,SAASC,IAA+B,CAC7C,OAAO,IAAIP,EAAY,CACrB,KAAM,mBACN,QAAS,oCACT,UAAW,EAAA,CACZ,CACH,CCjEA,MAAMQ,EAA+B,IAAI,IAAI,CAAC,KAAM,QAAQ,CAAC,EAOhDC,EAA+D,CAC1E,GAAI,wBACJ,OAAQ,uBACV,EAEO,SAASC,GAAkBC,EAA8B,CAC9D,OAAOF,EAAqBE,CAAM,CACpC,CAEO,SAASC,EAAeR,EAAiC,CAC9D,OAAO,OAAOA,GAAU,UAAY,6BAA6B,KAAKA,CAAK,CAC7E,CAEO,SAASS,EAAcT,EAAuC,CACnE,OAAO,OAAOA,GAAU,UAAYI,EAAQ,IAAIJ,CAAK,CACvD,CAMO,SAASU,GAAqBC,EAA8B,CACjE,GAAI,OAAOA,GAAU,UAAYA,IAAU,KACzC,MAAMV,EAAc,8CAA8C,EAEpE,MAAMW,EAAMD,EAENE,EAAQ,IAAI,IAAI,CAAC,UAAW,SAAU,QAAQ,CAAC,EACrD,UAAWC,KAAO,OAAO,KAAKF,CAAG,EAC/B,GAAI,CAACC,EAAM,IAAIC,CAAG,EAChB,MAAMb,EAAc,gCAAgCa,CAAG,IAAI,EAG/D,GAAI,CAACN,EAAeI,EAAI,OAAO,EAC7B,MAAMX,EAAc,oEAAoE,EAE1F,GAAI,CAACQ,EAAcG,EAAI,MAAM,EAC3B,MAAMX,EAAc,wDAAwD,EAE9E,GAAIW,EAAI,SAAW,QAAa,EAAEA,EAAI,kBAAkB,aACtD,MAAMX,EAAc,sDAAsD,EAE5E,MAAO,CAAE,QAASW,EAAI,QAAS,OAAQA,EAAI,OAAQ,OAAQA,EAAI,MAAA,CACjE,CC/CA,MAAMG,MAA4C,IAAI,CACpD,mBACA,qBACA,uBACA,qBACA,oBAEA,oBACF,CAAC,EAEKC,EAAuB,yBACvBC,EAA8B,IAAI,IAAI,CAAC,QAAS,OAAQ,MAAM,CAAC,EAE9D,SAASC,EAAsBC,EAAoC,CACxE,UAAWC,KAAQD,EAAQ,oBACzB,GAAIC,EAAK,WAAW,cAAc,GAAK,CAACL,EAAiB,IAAIK,CAAI,EAC/D,MAAMnB,EAAc,6BAA6BmB,CAAI,IAAI,EAI7D,MAAMC,EAAUF,EAAQ,aAAa,kBAAkB,EACvD,GAAI,CAACX,EAAea,CAAO,EACzB,MAAMpB,EAAc,0EAA0E,EAGhG,MAAMM,EAASY,EAAQ,aAAa,oBAAoB,EACxD,GAAI,CAACV,EAAcF,CAAM,EACvB,MAAMN,EAAc,iEAAiE,EAGvF,MAAMqB,EAAcH,EAAQ,aAAa,sBAAsB,EAC/D,GAAIG,IAAgB,MAAQA,EAAY,KAAA,IAAW,GACjD,MAAMrB,EAAc,sDAAsD,EAE5E,MAAMsB,EAAqB,CAAA,EAC3B,UAAWC,KAAQF,EAAY,MAAM,GAAG,EAAG,CACzC,MAAMG,EAAUD,EAAK,KAAA,EACrB,GAAIC,IAAY,GAChB,IAAI,CAACT,EAAqB,KAAKS,CAAO,EACpC,MAAMxB,EAAc,wBAAwBwB,CAAO,mCAAmC,EAEnFF,EAAS,SAASE,CAAO,GAAGF,EAAS,KAAKE,CAAO,EACxD,CACA,GAAIF,EAAS,SAAW,EACtB,MAAMtB,EAAc,yEAAyE,EAG/F,MAAMyB,EAASP,EAAQ,aAAa,oBAAoB,EACxD,GAAIO,IAAW,GACb,MAAMzB,EAAc,+DAA+D,EAGrF,GAAIyB,IAAW,KACb,MAAMzB,EACJ,+EAAA,EAIJ,MAAM0B,EAAWR,EAAQ,aAAa,mBAAmB,EACzD,GAAIQ,IAAa,MAAQ,CAACV,EAAO,IAAIU,CAAQ,EAC3C,MAAM1B,EAAc,0EAA0E,EAGhG,MAAO,CACL,QAAAoB,EACA,OAAAd,EACA,SAAAgB,EACA,OAAAG,EACA,MAAQC,GAAY,MAAA,CAExB,CC/DO,SAASC,EAAYC,EAAsBtB,EAAgBc,EAAyB,CACzF,MAAO,IAAIQ,CAAY,IAAItB,CAAM,IAAIc,CAAO,EAC9C,CAEO,MAAMS,CAAe,CACjBC,OAAe,IACfC,OAAiB,IAEjBC,OAAgB,IACzBC,GAAkB,EAElB,UAAUC,EAAiD,CACzD,OAAO,KAAKJ,GAAS,IAAII,CAAS,CACpC,CAEA,eAAeC,EAA+B,CAC5C,KAAKL,GAAS,IAAIK,EAAM,UAAWA,CAAK,CAC1C,CAEA,iBAAiBD,EAAyB,CACxC,KAAKJ,GAAS,OAAOI,CAAS,CAChC,CAEA,YAAYE,EAAqD,CAC/D,OAAO,KAAKL,GAAW,IAAIK,CAAW,CACxC,CAGA,aACEF,EACAG,EACAnB,EACgC,CAChC,OAAO,KAAKc,GAAU,IAAI,GAAGE,CAAS,KAAKG,CAAU,EAAE,GAAG,IAAInB,CAAO,CACvE,CAEA,iBACEgB,EACAG,EACAnB,EACAP,EACoB,CACpB,MAAM2B,EAAe,GAAGJ,CAAS,KAAKG,CAAU,GAChD,IAAIE,EAAY,KAAKP,GAAU,IAAIM,CAAY,EAC3CC,IAAc,SAChBA,MAAgB,QAChB,KAAKP,GAAU,IAAIM,EAAcC,CAAS,GAE5C,MAAMC,EAAWD,EAAU,IAAIrB,CAAO,EACtC,GAAIsB,EAAU,OAAOA,EAErB,KAAKP,IAAmB,EACxB,MAAMQ,EAA+B,CACnC,YAAa,GAAGP,CAAS,KAAKG,CAAU,OAAO,KAAKJ,EAAe,GACnE,UAAAC,EACA,WAAAG,EACA,KAAMnB,EACN,IAAAP,EACA,UAAW,EAAA,EAEb,YAAKoB,GAAW,IAAIU,EAAS,YAAaA,CAAQ,EAClDF,EAAU,IAAIrB,EAASuB,CAAQ,EACxBA,CACT,CAEA,eAAeL,EAAqD,CAClE,MAAMK,EAAW,KAAKV,GAAW,IAAIK,CAAW,EAChD,GAAKK,EACL,YAAKV,GAAW,OAAOK,CAAW,EAClC,KAAKJ,GAAU,IAAI,GAAGS,EAAS,SAAS,KAAKA,EAAS,UAAU,EAAE,GAAG,OAAOA,EAAS,IAAI,EAClFA,CACT,CAEA,mBAAmBP,EAAyC,CAC1D,MAAO,CAAC,GAAG,KAAKH,GAAW,OAAA,CAAQ,EAAE,OAAQW,GAAMA,EAAE,YAAcR,CAAS,CAC9E,CACF,CC1DA,MAAMS,MAAsE,IAAI,CAC9E,CAAC,eAAgB,IAAI,IAAI,CAAC,YAAa,UAAW,eAAgB,SAAS,CAAC,CAAC,EAC7E,CAAC,0BAA2B,IAAI,IAAI,CAAC,YAAa,cAAe,aAAc,SAAS,CAAC,CAAC,EAC1F,CACE,eACA,IAAI,IAAI,CAAC,YAAa,cAAe,aAAc,OAAQ,YAAa,WAAW,CAAC,CAAA,EAEtF,CAAC,mBAAoB,IAAI,IAAI,CAAC,YAAa,cAAe,YAAY,CAAC,CAAC,CAC1E,CAAC,EAGM,SAASC,EACdC,EACAC,EACuC,CACvC,MAAMC,EAAUJ,EAAa,IAAIE,CAAI,EAC/BG,EAAkC,CAAA,EACxC,SAAW,CAACnC,EAAKd,CAAK,IAAK,OAAO,QAAQ+C,CAAM,EAC1CC,EAAQ,IAAIlC,CAAG,GAAKd,IAAU,SAAWiD,EAAOnC,CAAG,EAAId,GAE7D,OAAOiD,CACT,CAEO,SAASC,EACdxB,EACAoB,EACAC,EACM,CACN,MAAMI,EAAQ,IAAI,YAAYL,EAAM,CAClC,OAAQD,EAAeC,EAAMC,CAAM,EACnC,QAAS,GACT,SAAU,GACV,WAAY,EAAA,CACb,EACDrB,EAAO,cAAcyB,CAAK,CAC5B,CC/EO,MAAMC,GAAc,QAGdC,EAAY,ECwDnBC,EAAsB,IAQtBC,EAAY,OAAO,IAAI,wBAAwB,EAQrD,SAASC,GAAiC,CAExC,MAAMf,EADS,WACSc,CAAS,EACjC,GAAId,EAAU,OAAOA,EACrB,MAAMgB,EAA2B,CAC/B,SAAU,IAAI3B,EACd,MAAO,CAAE,QAAS,QAAQ,SAAQ,CAAE,EAEtC,cAAO,eAAe,WAAYyB,EAAW,CAC3C,MAAOE,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAAA,CACb,EACMA,CACT,CAMA,SAASC,EAAwBhB,EAAoC,CACnE,GAAI,CAAAA,EAAS,UACb,CAAAA,EAAS,UAAY,GACrBc,EAAA,EAAc,SAAS,eAAed,EAAS,WAAW,EAC1D,GAAI,CACFA,EAAS,IAAI,QAAA,CACf,QAAA,CACEQ,EAAoBR,EAAS,KAAM,mBAAoB,CACrD,UAAWA,EAAS,UACpB,YAAaA,EAAS,YACtB,WAAYA,EAAS,UAAA,CACtB,CACH,EACF,CAEA,SAASiB,EAAajB,EAAqD,CACzE,MAAO,CACL,YAAaA,EAAS,YACtB,WAAYA,EAAS,WACrB,QAAS,IAAMgB,EAAwBhB,CAAQ,CAAA,CAEnD,CAMA,SAASkB,EAAalC,EAAgBZ,EAAad,EAAsB,CACvE,OAAO,eAAe0B,EAAQZ,EAAK,CACjC,MAAAd,EACA,SAAU,GACV,aAAc,GACd,WAAY,EAAA,CACb,CACH,CAEO,SAAS6D,EAAgBC,EAA0C,CAExE,IAAIC,EADW,WACK,OACfA,IACHA,EAAS,CAAA,EACTH,EAAa,WAAY,SAAUG,CAAM,GAE3C,IAAIC,EAAWD,EAAO,SACjBC,IACHA,EAAW,CAAA,EACXJ,EAAaG,EAAQ,WAAYC,CAAQ,GAE3C,MAAMvB,EAAWuB,EAAS,IAAIX,CAAS,EAAE,EACzC,GAAIZ,EAAU,OAAOA,EAErB,MAAMwB,EAAqC,CACzC,QAAAH,EACA,UAAU3B,EAA0C,CAClD,MAAMC,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EACxD,OAAKC,EAGEA,EAAM,MAAM,KAAK,IAAMA,EAAM,MAAM,EAFjC,QAAQ,OAAOnC,EAAc,sBAAsBkC,CAAS,IAAI,CAAC,CAG5E,EACA,YAAYE,EAAwD,CAClE,MAAMK,EAAWc,EAAA,EAAc,SAAS,YAAYnB,CAAW,EAC/D,OAAOK,EAAWiB,EAAajB,CAAQ,EAAI,MAC7C,EACA,gBAAgBL,EAA2B,CACzC,MAAMK,EAAWc,EAAA,EAAc,SAAS,YAAYnB,CAAW,EAC3DK,KAAkCA,CAAQ,CAChD,EACA,cAAcP,EAAyB,CACrC,UAAWO,KAAYc,EAAA,EAAc,SAAS,mBAAmBrB,CAAS,EACxEuB,EAAwBhB,CAAQ,EAElC,MAAMN,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EACxDqB,IAAc,SAAS,iBAAiBrB,CAAS,EACjDC,GAAO,OAAO,QAAA,CAChB,CAAA,EAEF,OAAAwB,EAAaI,EAAU,IAAIX,CAAS,GAAIY,CAAS,EAC1CA,CACT,CAMA,SAASC,GAA8B,CACrC,OAAI,SAAS,aAAe,UAAkB,QAAQ,QAAA,EAC/C,IAAI,QAASC,GAAY,CAC9B,SAAS,iBAAiB,mBAAoB,IAAMA,EAAA,EAAW,CAAE,KAAM,GAAM,CAC/E,CAAC,CACH,CAEA,eAAeC,EACbC,EACsD,CACtD,IAAIC,EACJ,GAAI,CACFA,EAAW,MAAMC,EAAiBF,CAAW,CAC/C,MAAQ,CACNC,EAAW,CAAE,GAAI,GAAO,OAAQ,CAAA,CAClC,CAIA,GAAI,CAACA,EAAS,GAAI,CAChB,MAAME,EAAe,MAAMC,EAAoBJ,CAAW,EAC1D,GAAIG,IAAiB,OAAW,CAC9B,MAAME,EAAW,IAAI,IAAI,eAAeF,CAAY,iBAAkBH,CAAW,EACjF,MAAO,CAAE,SAAU,MAAMM,EAAc,MAAMJ,EAAiBG,CAAQ,CAAC,EAAG,QAASA,CAAA,CACrF,CACF,CACA,MAAO,CAAE,SAAU,MAAMC,EAAcL,CAAQ,EAAG,QAASD,CAAA,CAC7D,CAEA,SAASE,EAAiBK,EAA6B,CACrD,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQvB,CAAmB,EACvC,OACN,OAAO,MAAMsB,EAAK,CAAE,YAAa,OAAQ,OAAAC,EAAQ,CACnD,CAGA,eAAeJ,EAAoBJ,EAA+C,CAGhF,GAFI,GAAC,uCAAuC,KAAKA,EAAY,QAAQ,GACrDA,EAAY,SAAS,MAAM,cAAc,EAAE,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC,IAC3D,IAAIhB,CAAS,IAC7B,GAAI,CACF,MAAMiB,EAAW,MAAMC,EAAiB,IAAI,IAAI,2BAA4BF,CAAW,CAAC,EACxF,GAAI,CAACC,EAAS,GAAI,OAClB,MAAMR,GAAW,MAAMQ,EAAS,KAAA,GAAQ,KAAA,EACxC,MAAO,oCAAoC,KAAKR,CAAO,EAAIA,EAAU,MACvE,MAAQ,CACN,MACF,CACF,CAEA,eAAea,EAAcL,EAA8C,CACzE,GAAI,CAACA,EAAS,GACZ,MAAMrE,EAAc,2CAA2CqE,EAAS,MAAM,IAAI,EAEpF,MAAMQ,EAAgB,MAAMR,EAAS,KAAA,EACrC,GACE,OAAOQ,GAAS,UAChBA,IAAS,MACT,OAAQA,EAAyB,SAAY,UAC7C,OAAQA,EAAyB,UAAa,UAC9C,OAAQA,EAAyB,UAAa,UAC7CA,EAAyB,WAAa,KAEvC,MAAM7E,EAAc,gCAAgC,EAEtD,MAAM8E,EAAWD,EACjB,GAAIC,EAAS,WAAa1B,EACxB,MAAMpD,EAAc,4DAA4D,EAElF,OAAO8E,CACT,CAEA,eAAeC,EAASC,EAAmC,CAEzD,MAAMC,EAAQ,MAAM,OADJ,IAAI,IAAI,WAAYD,CAAO,EACW,MACtD,GAAI,OAAOC,EAAK,cAAiB,WAC/B,MAAMjF,EAAc,gDAAgD,EAEtE,OAAOiF,CACT,CAEA,MAAMC,MAA6C,IAAI,CACrD,iBACA,iBACA,qBACA,sBACA,mBACA,kBACA,eACA,kBACA,uBACA,gBACF,CAAC,EAOD,SAASC,EAAcC,EAAmC,CACxD,GAAI,OAAOA,GAAU,UAAYA,IAAU,KAAM,CAC/C,MAAMC,EAAYD,EAClB,GACE,OAAOC,EAAU,MAAS,UAC1BH,EAAkB,IAAIG,EAAU,IAAI,GACpC,OAAOA,EAAU,WAAc,UAC/B,CACA,MAAMvC,EAA4B,CAChC,KAAMuC,EAAU,KAChB,UAAWA,EAAU,SAAA,EAEvB,OAAI,OAAOA,EAAU,WAAc,WAAUvC,EAAO,UAAYuC,EAAU,WACtE,OAAOA,EAAU,YAAe,WAAUvC,EAAO,WAAauC,EAAU,YACrEvC,CACT,CACF,CACA,MAAO,CAAE,KAAM,iBAAkB,UAAW,EAAA,CAC9C,CAEA,SAASwC,EACP7D,EACA2D,EACAG,EAAsF,CAAA,EAChF,CACNtC,EAAoBxB,EAAQ,eAAgB,CAAE,GAAG0D,EAAcC,CAAK,EAAG,GAAGG,EAAO,CACnF,CAEA,eAAsBC,EAAcC,EAA0C,CAC5E,IAAIC,EACJ,GAAI,CACFA,EAAazE,EAAsBwE,CAAM,CAC3C,OAASL,EAAO,CAEdE,EAAU,SAAUF,CAAK,EACzB,MACF,CAEA,GAAI,CAACK,EAAO,IAAK,CACfH,EAAU,SAAUtF,EAAc,mCAAmC,CAAC,EACtE,MACF,CACA,MAAMoE,EAAc,IAAI,IAAI,gBAAiBqB,EAAO,GAAG,EAEvD,IAAIX,EACAa,EACJ,GAAI,EACD,CAAE,SAAAb,EAAU,QAASa,GAAgB,MAAMxB,EAAqBC,CAAW,EAC9E,OAASgB,EAAO,CACdE,EAAU,SAAUF,EAAO,CACzB,UAAWzD,EAAYyB,EAAWsC,EAAW,OAAQA,EAAW,OAAO,CAAA,CACxE,EACD,MACF,CAEA,MAAMzB,EAAA,EAEN,IAAI2B,EACJ,GAAI,CACF,MAAMC,EAAU,SAAS,iBAAiBH,EAAW,MAAO,EAC5D,GAAIG,EAAQ,SAAW,EACrB,MAAM7F,EACJ,kBAAkB0F,EAAW,MAAM,4CAAA,EAGvC,GAAIG,EAAQ,OAAS,EACnB,MAAM7F,EACJ,kBAAkB0F,EAAW,MAAM,aAAaG,EAAQ,MAAM,qCAAA,EAGlED,EAAOC,EAAQ,CAAC,CAClB,OAAST,EAAO,CACdE,EAAU,SAAUF,EAAO,CACzB,UAAWzD,EAAYmD,EAAS,SAAUY,EAAW,OAAQA,EAAW,OAAO,CAAA,CAChF,EACD,MACF,CAEA,MAAMxD,EAAYP,EAAYmD,EAAS,SAAUY,EAAW,OAAQA,EAAW,OAAO,EACtF9B,EAAgBkB,EAAS,OAAO,EAGhC,IAAI3C,EAAQoB,EAAA,EAAc,SAAS,UAAUrB,CAAS,EAClD4D,EACJ,GAAI3D,EACF2D,EAAS3D,EAAM,WACV,CACL,IAAI8C,EACJ,GAAI,CACFA,EAAO,MAAMF,EAASY,CAAW,CACnC,OAASP,EAAO,CACdE,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,CAAA,CAAW,EACpC,MACF,CACA4D,EAASb,EAAK,aAAa,CACzB,QAASS,EAAW,QACpB,OAAQA,EAAW,MAAA,CACpB,EACD,MAAMK,EAAQD,EAAO,MAAA,EAGhBC,EAAM,MAAM,IAAM,CAAC,CAAC,EACzB5D,EAAQ,CAAE,UAAAD,EAAW,OAAA4D,EAAQ,MAAAC,CAAA,EAC7BxC,IAAc,SAAS,eAAepB,CAAK,CAC7C,CAEA,GAAI,CACF,MAAMA,EAAM,KACd,OAASiD,EAAO,CACd7B,IAAc,SAAS,iBAAiBrB,CAAS,EACjD4D,EAAO,QAAA,EACPR,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,CAAA,CAAW,EACpC,MACF,CAEA,IAAI8D,EAAa,GACjB,MAAMC,EAAoB,CAAA,EAC1B,UAAW5D,KAAcqD,EAAW,SAAU,CAE5C,GAAInC,IAAc,SAAS,aAAarB,EAAWG,EAAYuD,CAAI,EAAG,SAEtE,MAAMM,EAAWpB,EAAS,SAASzC,CAAU,EAC7C,GAAI,OAAO6D,GAAa,SAAU,CAC/BJ,EAA8B,aAAA,EAC/BR,EACEM,EACA,IAAIjG,EAAY,CACd,KAAM,sBACN,QAAS,eAAe0C,CAAU,iCAClC,UAAW,GACX,WAAAA,CAAA,CACD,EACD,CAAE,UAAAH,EAAW,WAAAG,CAAA,CAAW,EAE1B,QACF,CAEA,GAAI,CAEF,MAAM8D,EAAU,MAAM,OADL,IAAI,IAAID,EAAUP,CAAW,EACW,MAGzD,GAAI,OAAOQ,EAAO,OAAU,WAC1B,MAAMnG,EAAc,qBAAqBqC,CAAU,4BAA4B,EAEjF,MAAM1B,EAAO,MAAOwF,EAAO,MAAkCL,EAAQ,CACnE,OAAQF,EACR,MAAOF,EAAW,KAAA,CACnB,EACKjD,EAAWc,IAAc,SAAS,iBAAiBrB,EAAWG,EAAYuD,EAAMjF,CAAG,EACzFqF,EAAa,GACbC,EAAQ,KAAK5D,CAAU,EACvBY,EAAoB2C,EAAM,0BAA2B,CACnD,UAAA1D,EACA,YAAaO,EAAS,YACtB,WAAAJ,EACA,QAASyC,EAAS,OAAA,CACnB,CACH,OAASM,EAAO,CAGbU,EAA8B,aAAA,EAC/BR,EAAUM,EAAMR,EAAO,CAAE,UAAAlD,EAAW,WAAAG,EAAY,CAClD,CACF,CAEI2D,GACF/C,EAAoB2C,EAAM,eAAgB,CACxC,UAAA1D,EACA,QAASwD,EAAW,QACpB,aAAcO,EACd,QAASnB,EAAS,OAAA,CACnB,CAEL,CAWA,SAASsB,EAAWX,EAA0C,CAC5D,KAAM,CAAE,MAAAY,CAAA,EAAU9C,EAAA,EACZ+C,EAAMD,EAAM,QAAQ,KAAK,IAAMb,EAAcC,CAAM,CAAC,EAC1D,OAAAY,EAAM,QAAUC,EAAI,MAAM,IAAM,CAAC,CAAC,EAC3BA,CACT,CAEA,SAASC,GAAkB,CACzB,GAAI,OAAO,SAAa,IAAa,OACrC,IAAId,EACF,SAAS,yBAAyB,kBAAoB,SAAS,cAAgB,KACjF,GAAI,CAACA,EAAQ,CACX,MAAMe,EAAW,SAAS,iBAAoC,4BAA4B,EACtFA,EAAS,SAAW,IAAGf,EAASe,EAAS,CAAC,GAAK,KACrD,CACKf,GACAW,EAAWX,CAAM,EAAE,MAAOL,GAAmB,CAChDE,EAAU,SAAUF,CAAK,CAC3B,CAAC,CACH,CAEAmB,EAAA,EAGO,MAAME,GAAsBF"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@viceme-ai/sdk",
3
- "version": "0.1.2",
3
+ "version": "0.1.4",
4
4
  "description": "ViceMe browser SDK: headless core, public session, and capability subpaths for static HTML, ESM, React, and Agent-generated sites.",
5
5
  "type": "module",
6
6
  "repository": {