@viceme-ai/sdk 0.1.6 → 0.3.0

package/README.md

@@ -18,13 +18,38 @@ import { createViceMe } from '@viceme-ai/sdk';
 const client = createViceMe({ workKey: 'wrk_public_xxx', region: 'cn' });
 await client.ready();
 
-if (client.hasCapability('danmaku')) {
-  // capability subpath, e.g. '@viceme-ai/sdk/danmaku'
-}
+// Use server-authoritative titles and prices in the host site's existing
+// Button/Card components. This does not open or customize ViceMe checkout.
+const features = await client.access.getFeatures();
+const emperor = features.find((feature) => feature.featureKey === 'emperor');
+
+const access = await client.access.checkMany(['dingdong', 'emperor']);
+if (access.dingdong.allowed) enableDingdong();
+if (access.emperor.allowed) enableEmperor();
+
+// Call from a user gesture. A denied decision opens the ViceMe
+// bottom-sheet/in-page Web Component. Creator details and recent work covers appear
+// above one authorization action; accepted authorization automatically follows.
+const decision = await client.access.require('emperor');
+if (decision.allowed) enableEmperor();
 
 client.destroy();
 ```
 
+When adding a host-side locked state or purchase entry, preserve the site's
+existing component library, design tokens, responsive behavior, and feedback
+patterns. Keep the original business action unchanged and call it only after
+`access.require()` returns an allowed decision. Never hard-code a price from
+local configuration; `getFeatures()` returns the current display price. The
+ViceMe-owned authorization and checkout layer remains isolated and unchanged.
+
+The SDK registers and mounts `<viceme-access-layer>` with isolated ViceMe-owned
+styles. Authorization and checkout remain inside its iframe area and complete through
+an origin- and channel-validated message; no browser popup, page navigation,
+`confirm`, or `alert` is used. Custom site presenters and style inference are
+not part of the current public contract. WeChat opens directly inside the frame,
+and the checkout frame keeps a stable height while its content loads.
+
 Static HTML sites can use the CDN auto-loader instead — see the
 [repository README](https://github.com/ViceMe-AI/sdk).
 
@@ -44,5 +69,4 @@ await client.ready();
 ```
 
 Consumers branch on stable `ViceMeError.code` values only — never on error
-messages. Status: `0.x` infrastructure phase; capability subpaths land as
-their public API contracts go live.
+messages. Work-session tokens and work-scoped users remain in memory only.

package/dist/bootstrap.min.js

@@ -1,2 +1,2 @@
-(function(){"use strict";(()=>{const t=document.currentScript;if(!(t instanceof HTMLScriptElement)||!t.src)return;const c=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(8e3):void 0;fetch(new URL("/viceme-sdk/-/aliases/v1",t.src),{credentials:"omit",signal:c}).then(e=>{if(!e.ok)throw new Error(`pointer HTTP ${e.status}`);return e.text()}).then(e=>{const i=e.trim();if(!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(i))throw new Error("invalid pointer");const r=document.createElement("script");for(const n of t.getAttributeNames())n==="src"||n==="integrity"||r.setAttribute(n,t.getAttribute(n)??"");r.src=new URL(`/viceme-sdk/${i}/viceme.min.js`,t.src).href,(document.head??document.documentElement).append(r)}).catch(()=>{document.dispatchEvent(new CustomEvent("viceme:error",{detail:{code:"CONFIG_INVALID",retryable:!1},bubbles:!0,composed:!0}))})})()})();
+(function(){"use strict";(()=>{const t=document.currentScript;if(!(t instanceof HTMLScriptElement)||!t.src)return;const c=typeof AbortSignal<"u"&&typeof AbortSignal.timeout=="function"?AbortSignal.timeout(8e3):void 0;fetch(new URL("/viceme-sdk/-/aliases/v1",t.src),{credentials:"omit",signal:c}).then(e=>{if(!e.ok)throw new Error(`pointer HTTP ${e.status}`);return e.text()}).then(e=>{const i=e.trim();if(!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(i))throw new Error("invalid pointer");const r=document.createElement("script");for(const n of t.getAttributeNames())n==="src"||n==="integrity"||n==="nonce"||r.setAttribute(n,t.getAttribute(n)??"");r.nonce=t.nonce,r.src=new URL(`/viceme-sdk/${i}/viceme.min.js`,t.src).href,(document.head??document.documentElement).append(r)}).catch(()=>{document.dispatchEvent(new CustomEvent("viceme:error",{detail:{code:"CONFIG_INVALID",retryable:!1},bubbles:!0,composed:!0}))})})()})();
 //# sourceMappingURL=bootstrap.min.js.map

package/dist/bootstrap.min.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.min.js","sources":["../src/loader/bootstrap.ts"],"sourcesContent":["/**\n * FIXED alias bootstrap — the ONLY object under /viceme-sdk/v1/.\n *\n * Byte-stable for the whole API major (this file must not grow feature\n * logic): it reads the version pointer at /viceme-sdk/-/aliases/v1 and\n * injects the full versioned auto-loader at\n * /viceme-sdk/<version>/viceme.min.js with the same data-viceme-*\n * attributes. The full loader (and every future fix to it) lives in the\n * immutable exact-version directory, so the alias bytes never need to\n * change when releases ship.\n */\n(() => {\n  const script = document.currentScript;\n  if (!(script instanceof HTMLScriptElement) || !script.src) return;\n\n  const signal =\n    typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n      ? AbortSignal.timeout(8_000)\n      : undefined;\n\n  fetch(new URL('/viceme-sdk/-/aliases/v1', script.src), {\n    credentials: 'omit',\n    signal,\n  })\n    .then((response) => {\n      if (!response.ok) throw new Error(`pointer HTTP ${response.status}`);\n      return response.text();\n    })\n    .then((text) => {\n      const version = text.trim();\n      if (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {\n        throw new Error('invalid pointer');\n      }\n      const loader = document.createElement('script');\n      for (const name of script.getAttributeNames()) {\n        // The loader gets its own src; integrity pins are not transferable.\n        if (name === 'src' || name === 'integrity') continue;\n        loader.setAttribute(name, script.getAttribute(name) ?? '');\n      }\n      loader.src = new URL(`/viceme-sdk/${version}/viceme.min.js`, script.src).href;\n      (document.head ?? document.documentElement).append(loader);\n    })\n    .catch(() => {\n      document.dispatchEvent(\n        new CustomEvent('viceme:error', {\n          detail: { code: 'CONFIG_INVALID', retryable: false },\n          bubbles: true,\n          composed: true,\n        }),\n      );\n    });\n})();\n"],"names":["script","signal","response","text","version","loader","name"],"mappings":"0BAWC,IAAM,CACL,MAAMA,EAAS,SAAS,cACxB,GAAI,EAAEA,aAAkB,oBAAsB,CAACA,EAAO,IAAK,OAE3D,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQ,GAAK,EACzB,OAEN,MAAM,IAAI,IAAI,2BAA4BD,EAAO,GAAG,EAAG,CACrD,YAAa,OACb,OAAAC,CAAA,CACD,EACE,KAAMC,GAAa,CAClB,GAAI,CAACA,EAAS,GAAI,MAAM,IAAI,MAAM,gBAAgBA,EAAS,MAAM,EAAE,EACnE,OAAOA,EAAS,KAAA,CAClB,CAAC,EACA,KAAMC,GAAS,CACd,MAAMC,EAAUD,EAAK,KAAA,EACrB,GAAI,CAAC,sCAAsC,KAAKC,CAAO,EACrD,MAAM,IAAI,MAAM,iBAAiB,EAEnC,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,UAAWC,KAAQN,EAAO,oBAEpBM,IAAS,OAASA,IAAS,aAC/BD,EAAO,aAAaC,EAAMN,EAAO,aAAaM,CAAI,GAAK,EAAE,EAE3DD,EAAO,IAAM,IAAI,IAAI,eAAeD,CAAO,iBAAkBJ,EAAO,GAAG,EAAE,MACxE,SAAS,MAAQ,SAAS,iBAAiB,OAAOK,CAAM,CAC3D,CAAC,EACA,MAAM,IAAM,CACX,SAAS,cACP,IAAI,YAAY,eAAgB,CAC9B,OAAQ,CAAE,KAAM,iBAAkB,UAAW,EAAA,EAC7C,QAAS,GACT,SAAU,EAAA,CACX,CAAA,CAEL,CAAC,CACL,GAAA"}
+{"version":3,"file":"bootstrap.min.js","sources":["../src/loader/bootstrap.ts"],"sourcesContent":["/**\n * FIXED alias bootstrap — the ONLY object under /viceme-sdk/v1/.\n *\n * Byte-stable for the whole API major (this file must not grow feature\n * logic): it reads the version pointer at /viceme-sdk/-/aliases/v1 and\n * injects the full versioned auto-loader at\n * /viceme-sdk/<version>/viceme.min.js with the same data-viceme-*\n * attributes. The full loader (and every future fix to it) lives in the\n * immutable exact-version directory, so the alias bytes never need to\n * change when releases ship.\n */\n(() => {\n  const script = document.currentScript;\n  if (!(script instanceof HTMLScriptElement) || !script.src) return;\n\n  const signal =\n    typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n      ? AbortSignal.timeout(8_000)\n      : undefined;\n\n  fetch(new URL('/viceme-sdk/-/aliases/v1', script.src), {\n    credentials: 'omit',\n    signal,\n  })\n    .then((response) => {\n      if (!response.ok) throw new Error(`pointer HTTP ${response.status}`);\n      return response.text();\n    })\n    .then((text) => {\n      const version = text.trim();\n      if (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {\n        throw new Error('invalid pointer');\n      }\n      const loader = document.createElement('script');\n      for (const name of script.getAttributeNames()) {\n        // The loader gets its own src; integrity pins are not transferable.\n        if (name === 'src' || name === 'integrity' || name === 'nonce') continue;\n        loader.setAttribute(name, script.getAttribute(name) ?? '');\n      }\n      loader.nonce = script.nonce;\n      loader.src = new URL(`/viceme-sdk/${version}/viceme.min.js`, script.src).href;\n      (document.head ?? document.documentElement).append(loader);\n    })\n    .catch(() => {\n      document.dispatchEvent(\n        new CustomEvent('viceme:error', {\n          detail: { code: 'CONFIG_INVALID', retryable: false },\n          bubbles: true,\n          composed: true,\n        }),\n      );\n    });\n})();\n"],"names":["script","signal","response","text","version","loader","name"],"mappings":"0BAWC,IAAM,CACL,MAAMA,EAAS,SAAS,cACxB,GAAI,EAAEA,aAAkB,oBAAsB,CAACA,EAAO,IAAK,OAE3D,MAAMC,EACJ,OAAO,YAAgB,KAAe,OAAO,YAAY,SAAY,WACjE,YAAY,QAAQ,GAAK,EACzB,OAEN,MAAM,IAAI,IAAI,2BAA4BD,EAAO,GAAG,EAAG,CACrD,YAAa,OACb,OAAAC,CAAA,CACD,EACE,KAAMC,GAAa,CAClB,GAAI,CAACA,EAAS,GAAI,MAAM,IAAI,MAAM,gBAAgBA,EAAS,MAAM,EAAE,EACnE,OAAOA,EAAS,KAAA,CAClB,CAAC,EACA,KAAMC,GAAS,CACd,MAAMC,EAAUD,EAAK,KAAA,EACrB,GAAI,CAAC,sCAAsC,KAAKC,CAAO,EACrD,MAAM,IAAI,MAAM,iBAAiB,EAEnC,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,UAAWC,KAAQN,EAAO,oBAEpBM,IAAS,OAASA,IAAS,aAAeA,IAAS,SACvDD,EAAO,aAAaC,EAAMN,EAAO,aAAaM,CAAI,GAAK,EAAE,EAE3DD,EAAO,MAAQL,EAAO,MACtBK,EAAO,IAAM,IAAI,IAAI,eAAeD,CAAO,iBAAkBJ,EAAO,GAAG,EAAE,MACxE,SAAS,MAAQ,SAAS,iBAAiB,OAAOK,CAAM,CAC3D,CAAC,EACA,MAAM,IAAM,CACX,SAAS,cACP,IAAI,YAAY,eAAgB,CAC9B,OAAQ,CAAE,KAAM,iBAAkB,UAAW,EAAA,EAC7C,QAAS,GACT,SAAU,EAAA,CACX,CAAA,CAEL,CAAC,CACL,GAAA"}