@viceme-ai/sdk 0.2.0 → 0.4.0

package/dist/index.js

@@ -1,111 +1,130 @@
-import { c as i, V as n, a as o } from "./chunks/version-BbUa2jZV.js";
-import { A as w, S as A, i as k } from "./chunks/version-BbUa2jZV.js";
-const a = /* @__PURE__ */ new Set(["cn", "global"]);
-function c(t) {
-  return typeof t == "string" && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(t);
+import { V as n } from "./chunks/errors-B-Qv_azy.js";
+import { i as L } from "./chunks/errors-B-Qv_azy.js";
+import { v as A, V as b, r as h } from "./chunks/client-Cbldd7F2.js";
+import { A as S, S as V } from "./chunks/version-C8DeBm39.js";
+const m = 1e4, p = /* @__PURE__ */ new Map([
+  [400, "CONFIG_INVALID"],
+  [401, "SESSION_EXPIRED"],
+  [403, "CAPABILITY_DISABLED"],
+  [404, "WORK_NOT_FOUND"],
+  [409, "CONFIG_INVALID"],
+  [422, "CONFIG_INVALID"],
+  [429, "RATE_LIMITED"]
+]), T = /* @__PURE__ */ new Set([
+  "CONFIG_INVALID",
+  "WORK_NOT_FOUND",
+  "CAPABILITY_DISABLED",
+  "SESSION_EXPIRED",
+  "AUTH_REQUIRED",
+  "AUTH_CANCELLED",
+  "RETURN_URL_NOT_ALLOWED",
+  "RATE_LIMITED",
+  "NETWORK_TIMEOUT",
+  "CHECKOUT_UNAVAILABLE",
+  "INTERNAL_ERROR"
+]);
+function O(s) {
+  if (typeof s != "object" || s === null) return {};
+  const e = s, t = typeof e.error == "object" && e.error !== null ? e.error : e, r = {};
+  return typeof t.code == "string" && T.has(t.code) && (r.code = t.code), typeof t.message == "string" && (r.message = t.message.slice(0, 200)), typeof t.retryable == "boolean" && (r.retryable = t.retryable), typeof t.requestId == "string" && (r.requestId = t.requestId), r;
 }
-function l(t) {
-  return typeof t == "string" && a.has(t);
+function _() {
+  return typeof crypto < "u" && typeof crypto.randomUUID == "function" ? crypto.randomUUID() : `req-${Math.random().toString(36).slice(2)}`;
 }
-function f(t) {
-  if (typeof t != "object" || t === null)
-    throw i("createViceMe expects a configuration object.");
-  const e = t, r = /* @__PURE__ */ new Set(["workKey", "region"]);
-  for (const s of Object.keys(e))
-    if (!r.has(s))
-      throw i(`Unknown configuration field "${s}".`);
-  if (!c(e.workKey))
-    throw i('Configuration field "workKey" must be a public work key ("wrk_…").');
-  if (!l(e.region))
-    throw i('Configuration field "region" must be "cn" or "global".');
-  return {
-    workKey: e.workKey,
-    region: e.region
-  };
-}
-const h = {
-  CREATED: ["READY", "DESTROYED"],
-  READY: ["DEGRADED", "DESTROYED"],
-  DEGRADED: ["DESTROYED"],
-  DESTROYED: []
-};
-class E {
-  #e = "CREATED";
-  #t = /* @__PURE__ */ new Set();
-  get state() {
-    return this.#e;
-  }
-  get destroyed() {
-    return this.#e === "DESTROYED";
+class R {
+  #e;
+  #t;
+  #r;
+  #o;
+  constructor(e) {
+    this.#e = e.apiBaseUrl.replace(/\/+$/, ""), this.#t = e.fetchImpl ?? globalThis.fetch.bind(globalThis), this.#r = e.defaultTimeoutMs ?? m, this.#o = e.generateRequestId ?? _;
   }
-  transition(e) {
-    if (e !== this.#e) {
-      if (!h[this.#e].includes(e))
+  async request(e) {
+    if (e.signal?.aborted)
+      throw this.#s(e.signal);
+    const t = e.timeoutMs ?? this.#r, r = new AbortController();
+    let c = !1;
+    const E = setTimeout(() => {
+      c = !0, r.abort(new I());
+    }, t), d = () => r.abort(new I(!1));
+    e.signal?.addEventListener("abort", d, { once: !0 });
+    const l = this.#o();
+    try {
+      const o = await this.#t(`${this.#e}${e.path}`, {
+        method: e.method,
+        // Public API is CORS-only; credentials must stay off so Shop session
+        // cookies can never attach to public SDK requests.
+        credentials: "omit",
+        mode: "cors",
+        headers: {
+          "content-type": "application/json",
+          "x-client-request-id": l,
+          ...e.authorization !== void 0 ? { authorization: `Bearer ${e.authorization}` } : {},
+          ...e.userAuthorization !== void 0 ? { "x-viceme-user-token": e.userAuthorization } : {}
+        },
+        body: e.body !== void 0 ? JSON.stringify(e.body) : void 0,
+        signal: r.signal
+      });
+      let a;
+      try {
+        a = await o.json();
+      } catch (i) {
+        if (e.signal?.aborted || c)
+          throw i;
+        a = void 0;
+      }
+      const u = o.headers.get("x-request-id") ?? void 0;
+      if (!o.ok) {
+        const i = O(a), f = i.code ?? p.get(o.status) ?? "INTERNAL_ERROR";
         throw new n({
-          code: "INTERNAL_ERROR",
-          message: `Illegal lifecycle transition ${this.#e} -> ${e}.`,
-          retryable: !1
+          code: f,
+          message: i.message ?? "Public API request failed.",
+          retryable: i.retryable,
+          requestId: i.requestId ?? u
         });
-      this.#e = e;
-      for (const r of this.#t) r(e);
+      }
+      return { status: o.status, body: a, requestId: u };
+    } catch (o) {
+      throw e.signal?.aborted ? this.#s(e.signal) : c ? new n({
+        code: "NETWORK_TIMEOUT",
+        message: "Public API request timed out.",
+        retryable: !0,
+        requestId: l
+      }) : o instanceof n ? o : o instanceof DOMException && o.name === "AbortError" ? new DOMException("ViceMe request aborted by caller.", "AbortError") : new n({
+        code: "INTERNAL_ERROR",
+        message: "Public API request failed.",
+        retryable: !0,
+        requestId: l
+      });
+    } finally {
+      clearTimeout(E), e.signal?.removeEventListener("abort", d);
     }
   }
-  /** Any operation on a destroyed client must fail closed with this guard. */
-  assertAlive() {
-    if (this.destroyed) throw o();
-  }
-  subscribe(e) {
-    return this.#t.add(e), () => {
-      this.#t.delete(e);
-    };
-  }
-  clearListeners() {
-    this.#t.clear();
+  /** Caller-abort error that preserves the caller's own abort reason. */
+  #s(e) {
+    return e.reason instanceof Error ? e.reason : new DOMException("ViceMe request aborted by caller.", "AbortError");
   }
 }
-const D = /* @__PURE__ */ Symbol("ViceMeClient.markDegraded");
-class d {
-  #e = new E();
-  #t;
-  #i;
-  constructor(e) {
-    this.#t = e;
-  }
-  get workKey() {
-    return this.#t.workKey;
-  }
-  get region() {
-    return this.#t.region;
-  }
-  get state() {
-    return this.#e.state;
-  }
-  ready() {
-    return this.#e.destroyed ? Promise.reject(o()) : (this.#i || (this.#e.transition("READY"), this.#i = Promise.resolve()), this.#i);
-  }
-  hasCapability(e) {
-    return !this.#e.destroyed && e === "danmaku";
-  }
-  /**
-   * Internal: mark one capability unavailable without taking down the client
-   * (loader uses this when a feature chunk fails after the core is READY).
-   */
-  [D]() {
-    this.#e.state === "READY" && this.#e.transition("DEGRADED");
-  }
-  destroy() {
-    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#e.clearListeners(), this.#i = void 0);
+function N(s) {
+  return new R(s);
+}
+class I extends DOMException {
+  constructor(e = !0) {
+    super(e ? "ViceMe request timed out." : "ViceMe request aborted.", "AbortError");
   }
 }
-function u(t) {
-  const e = f(t);
-  return new d(e);
+function D(s) {
+  const e = A(s), t = h(e.region), r = N({
+    apiBaseUrl: t
+  });
+  return new b({ config: e, transport: r });
 }
 export {
-  w as API_MAJOR,
-  A as SDK_VERSION,
+  S as API_MAJOR,
+  V as SDK_VERSION,
   n as ViceMeError,
-  u as createViceMe,
-  k as isViceMeError
+  D as createViceMe,
+  L as isViceMeError,
+  h as resolveApiBaseUrl
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/core/config.ts","../src/core/lifecycle.ts","../src/core/client.ts","../src/index.ts"],"sourcesContent":["/**\n * Public client configuration.\n *\n * Production `createViceMe()` accepts exactly `workKey` and `region`.\n * Endpoints, credentials, access policy, and provider state are not client\n * configuration: the hosted Shop runtime owns those concerns.\n */\n\nimport { configInvalid } from './errors.ts';\nexport type ViceMeRegion = 'cn' | 'global';\n\nexport interface ViceMeConfig {\n  /** Public opaque work key (`wrk_…`). Locates a Work; it is not a secret. */\n  workKey: string;\n  /** Selects the hosted Shop region. */\n  region: ViceMeRegion;\n}\n\nconst REGIONS: ReadonlySet<string> = new Set(['cn', 'global']);\n\nexport function isValidWorkKey(value: unknown): value is string {\n  return typeof value === 'string' && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(value);\n}\n\nexport function isValidRegion(value: unknown): value is ViceMeRegion {\n  return typeof value === 'string' && REGIONS.has(value);\n}\n\n/**\n * Validate unknown input as a public client config. Throws a CONFIG_INVALID\n * ViceMeError that never echoes values back beyond the offending field name.\n */\nexport function validatePublicConfig(input: unknown): ViceMeConfig {\n  if (typeof input !== 'object' || input === null) {\n    throw configInvalid('createViceMe expects a configuration object.');\n  }\n  const raw = input as Record<string, unknown>;\n\n  const known = new Set(['workKey', 'region']);\n  for (const key of Object.keys(raw)) {\n    if (!known.has(key)) {\n      throw configInvalid(`Unknown configuration field \"${key}\".`);\n    }\n  }\n  if (!isValidWorkKey(raw.workKey)) {\n    throw configInvalid('Configuration field \"workKey\" must be a public work key (\"wrk_…\").');\n  }\n  if (!isValidRegion(raw.region)) {\n    throw configInvalid('Configuration field \"region\" must be \"cn\" or \"global\".');\n  }\n  return {\n    workKey: raw.workKey,\n    region: raw.region,\n  };\n}\n","/**\n * Client lifecycle state machine.\n *\n * ```text\n * CREATED -> READY -> DESTROYED\n * READY -> DEGRADED (single capability unavailable; host page keeps working)\n * ```\n *\n * State is exposed read-only; consumers can never assign it directly.\n */\n\nimport { ViceMeError, clientDestroyed } from './errors.ts';\n\nexport type ViceMeClientState = 'CREATED' | 'READY' | 'DEGRADED' | 'DESTROYED';\n\nconst ALLOWED_TRANSITIONS: Readonly<Record<ViceMeClientState, readonly ViceMeClientState[]>> = {\n  CREATED: ['READY', 'DESTROYED'],\n  READY: ['DEGRADED', 'DESTROYED'],\n  DEGRADED: ['DESTROYED'],\n  DESTROYED: [],\n};\n\nexport type LifecycleListener = (state: ViceMeClientState) => void;\n\nexport class Lifecycle {\n  #state: ViceMeClientState = 'CREATED';\n  #listeners = new Set<LifecycleListener>();\n\n  get state(): ViceMeClientState {\n    return this.#state;\n  }\n\n  get destroyed(): boolean {\n    return this.#state === 'DESTROYED';\n  }\n\n  transition(next: ViceMeClientState): void {\n    if (next === this.#state) return;\n    if (!ALLOWED_TRANSITIONS[this.#state]!.includes(next)) {\n      throw new ViceMeError({\n        code: 'INTERNAL_ERROR',\n        message: `Illegal lifecycle transition ${this.#state} -> ${next}.`,\n        retryable: false,\n      });\n    }\n    this.#state = next;\n    for (const listener of this.#listeners) listener(next);\n  }\n\n  /** Any operation on a destroyed client must fail closed with this guard. */\n  assertAlive(): void {\n    if (this.destroyed) throw clientDestroyed();\n  }\n\n  subscribe(listener: LifecycleListener): () => void {\n    this.#listeners.add(listener);\n    return () => {\n      this.#listeners.delete(listener);\n    };\n  }\n\n  clearListeners(): void {\n    this.#listeners.clear();\n  }\n}\n","/**\n * Local ViceMe client for the public hosted danmaku capability.\n *\n * Initialization performs no network request. The static loader owns release\n * manifest/chunk loading, while the hosted iframe owns Shop API calls.\n */\n\nimport { clientDestroyed } from './errors.ts';\nimport { Lifecycle, type ViceMeClientState } from './lifecycle.ts';\nimport type { ViceMeConfig, ViceMeRegion } from './config.ts';\n\nconst MARK_DEGRADED = Symbol('ViceMeClient.markDegraded');\n\ninterface DegradableViceMeClient {\n  [MARK_DEGRADED](): void;\n}\n\nexport interface ViceMeClient {\n  readonly workKey: string;\n  readonly region: ViceMeRegion;\n  readonly state: ViceMeClientState;\n  ready(): Promise<void>;\n  hasCapability(name: string): boolean;\n  destroy(): void;\n}\n\nexport interface ViceMeMountedInstance {\n  readonly instanceKey: string;\n  readonly capability: string;\n  destroy(): void;\n}\n\n/** Internal loader hook; not part of the client object's string-keyed surface. */\nexport function markClientDegraded(client: ViceMeClient): void {\n  if (MARK_DEGRADED in client) {\n    (client as ViceMeClient & DegradableViceMeClient)[MARK_DEGRADED]();\n  }\n}\n\nexport class ViceMeClientImpl implements ViceMeClient {\n  readonly #lifecycle = new Lifecycle();\n  readonly #config: ViceMeConfig;\n  #readyPromise: Promise<void> | undefined;\n\n  constructor(config: ViceMeConfig) {\n    this.#config = config;\n  }\n\n  get workKey(): string {\n    return this.#config.workKey;\n  }\n\n  get region(): ViceMeRegion {\n    return this.#config.region;\n  }\n\n  get state(): ViceMeClientState {\n    return this.#lifecycle.state;\n  }\n\n  ready(): Promise<void> {\n    if (this.#lifecycle.destroyed) return Promise.reject(clientDestroyed());\n    if (!this.#readyPromise) {\n      this.#lifecycle.transition('READY');\n      this.#readyPromise = Promise.resolve();\n    }\n    return this.#readyPromise;\n  }\n\n  hasCapability(name: string): boolean {\n    return !this.#lifecycle.destroyed && name === 'danmaku';\n  }\n\n  /**\n   * Internal: mark one capability unavailable without taking down the client\n   * (loader uses this when a feature chunk fails after the core is READY).\n   */\n  [MARK_DEGRADED](): void {\n    if (this.#lifecycle.state === 'READY') this.#lifecycle.transition('DEGRADED');\n  }\n\n  destroy(): void {\n    if (this.#lifecycle.destroyed) return;\n    this.#lifecycle.transition('DESTROYED');\n    this.#lifecycle.clearListeners();\n    this.#readyPromise = undefined;\n  }\n}\n","/**\n * `@viceme-ai/sdk` public entry.\n *\n * Production consumers get a local public-danmaku client plus public types.\n */\n\nimport { validatePublicConfig } from './core/config.ts';\nimport { ViceMeClientImpl } from './core/client.ts';\nimport { ViceMeError, isViceMeError, type ViceMeErrorCode } from './core/errors.ts';\nimport type { ViceMeClient, ViceMeMountedInstance } from './core/client.ts';\nimport type { ViceMeRegion, ViceMeConfig } from './core/config.ts';\nimport type { ViceMeClientState } from './core/lifecycle.ts';\nimport { SDK_VERSION, API_MAJOR } from './version.ts';\n\nexport { ViceMeError, isViceMeError, SDK_VERSION, API_MAJOR };\nexport type {\n  ViceMeClient,\n  ViceMeMountedInstance,\n  ViceMeConfig,\n  ViceMeRegion,\n  ViceMeClientState,\n  ViceMeErrorCode,\n};\n\n/**\n * Create a local public-danmaku client for one Work.\n *\n * @example\n * ```ts\n * const client = createViceMe({ workKey: 'wrk_public_xxx', region: 'cn' });\n * await client.ready();\n * client.destroy();\n * ```\n */\nexport function createViceMe(config: unknown): ViceMeClient {\n  const validated = validatePublicConfig(config);\n  return new ViceMeClientImpl(validated);\n}\n"],"names":["REGIONS","isValidWorkKey","value","isValidRegion","validatePublicConfig","input","configInvalid","raw","known","key","ALLOWED_TRANSITIONS","Lifecycle","#state","#listeners","next","ViceMeError","listener","clientDestroyed","MARK_DEGRADED","ViceMeClientImpl","#lifecycle","#config","#readyPromise","config","name","createViceMe","validated"],"mappings":";;AAkBA,MAAMA,IAA+B,oBAAI,IAAI,CAAC,MAAM,QAAQ,CAAC;AAEtD,SAASC,EAAeC,GAAiC;AAC9D,SAAO,OAAOA,KAAU,YAAY,6BAA6B,KAAKA,CAAK;AAC7E;AAEO,SAASC,EAAcD,GAAuC;AACnE,SAAO,OAAOA,KAAU,YAAYF,EAAQ,IAAIE,CAAK;AACvD;AAMO,SAASE,EAAqBC,GAA8B;AACjE,MAAI,OAAOA,KAAU,YAAYA,MAAU;AACzC,UAAMC,EAAc,8CAA8C;AAEpE,QAAMC,IAAMF,GAENG,IAAQ,oBAAI,IAAI,CAAC,WAAW,QAAQ,CAAC;AAC3C,aAAWC,KAAO,OAAO,KAAKF,CAAG;AAC/B,QAAI,CAACC,EAAM,IAAIC,CAAG;AAChB,YAAMH,EAAc,gCAAgCG,CAAG,IAAI;AAG/D,MAAI,CAACR,EAAeM,EAAI,OAAO;AAC7B,UAAMD,EAAc,oEAAoE;AAE1F,MAAI,CAACH,EAAcI,EAAI,MAAM;AAC3B,UAAMD,EAAc,wDAAwD;AAE9E,SAAO;AAAA,IACL,SAASC,EAAI;AAAA,IACb,QAAQA,EAAI;AAAA,EAAA;AAEhB;ACvCA,MAAMG,IAAyF;AAAA,EAC7F,SAAS,CAAC,SAAS,WAAW;AAAA,EAC9B,OAAO,CAAC,YAAY,WAAW;AAAA,EAC/B,UAAU,CAAC,WAAW;AAAA,EACtB,WAAW,CAAA;AACb;AAIO,MAAMC,EAAU;AAAA,EACrBC,KAA4B;AAAA,EAC5BC,yBAAiB,IAAA;AAAA,EAEjB,IAAI,QAA2B;AAC7B,WAAO,KAAKD;AAAA,EACd;AAAA,EAEA,IAAI,YAAqB;AACvB,WAAO,KAAKA,OAAW;AAAA,EACzB;AAAA,EAEA,WAAWE,GAA+B;AACxC,QAAIA,MAAS,KAAKF,IAClB;AAAA,UAAI,CAACF,EAAoB,KAAKE,EAAM,EAAG,SAASE,CAAI;AAClD,cAAM,IAAIC,EAAY;AAAA,UACpB,MAAM;AAAA,UACN,SAAS,gCAAgC,KAAKH,EAAM,OAAOE,CAAI;AAAA,UAC/D,WAAW;AAAA,QAAA,CACZ;AAEH,WAAKF,KAASE;AACd,iBAAWE,KAAY,KAAKH,GAAY,CAAAG,EAASF,CAAI;AAAA;AAAA,EACvD;AAAA;AAAA,EAGA,cAAoB;AAClB,QAAI,KAAK,UAAW,OAAMG,EAAA;AAAA,EAC5B;AAAA,EAEA,UAAUD,GAAyC;AACjD,gBAAKH,GAAW,IAAIG,CAAQ,GACrB,MAAM;AACX,WAAKH,GAAW,OAAOG,CAAQ;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,iBAAuB;AACrB,SAAKH,GAAW,MAAA;AAAA,EAClB;AACF;ACrDA,MAAMK,2BAAuB,2BAA2B;AA4BjD,MAAMC,EAAyC;AAAA,EAC3CC,KAAa,IAAIT,EAAA;AAAA,EACjBU;AAAA,EACTC;AAAA,EAEA,YAAYC,GAAsB;AAChC,SAAKF,KAAUE;AAAA,EACjB;AAAA,EAEA,IAAI,UAAkB;AACpB,WAAO,KAAKF,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,SAAuB;AACzB,WAAO,KAAKA,GAAQ;AAAA,EACtB;AAAA,EAEA,IAAI,QAA2B;AAC7B,WAAO,KAAKD,GAAW;AAAA,EACzB;AAAA,EAEA,QAAuB;AACrB,WAAI,KAAKA,GAAW,YAAkB,QAAQ,OAAOH,GAAiB,KACjE,KAAKK,OACR,KAAKF,GAAW,WAAW,OAAO,GAClC,KAAKE,KAAgB,QAAQ,QAAA,IAExB,KAAKA;AAAA,EACd;AAAA,EAEA,cAAcE,GAAuB;AACnC,WAAO,CAAC,KAAKJ,GAAW,aAAaI,MAAS;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,CAACN,CAAa,IAAU;AACtB,IAAI,KAAKE,GAAW,UAAU,WAAS,KAAKA,GAAW,WAAW,UAAU;AAAA,EAC9E;AAAA,EAEA,UAAgB;AACd,IAAI,KAAKA,GAAW,cACpB,KAAKA,GAAW,WAAW,WAAW,GACtC,KAAKA,GAAW,eAAA,GAChB,KAAKE,KAAgB;AAAA,EACvB;AACF;ACrDO,SAASG,EAAaF,GAA+B;AAC1D,QAAMG,IAAYtB,EAAqBmB,CAAM;AAC7C,SAAO,IAAIJ,EAAiBO,CAAS;AACvC;"}
+{"version":3,"file":"index.js","sources":["../src/transport/transport.ts","../src/index.ts"],"sourcesContent":["/**\n * HTTP transport for the public API.\n *\n * Responsibilities: request execution with timeout, abort, client request ids,\n * and normalization of every failure into the public `ViceMeError` model.\n * Capabilities and the loader never build their own `fetch` calls — they go\n * through a Transport so tests can swap in `createMemoryTransport`.\n */\n\nimport { ViceMeError, type ViceMeErrorCode } from '../core/errors.ts';\n\nexport interface TransportRequest {\n  method: 'GET' | 'POST' | 'PUT' | 'DELETE';\n  /** Absolute path under the public API base. */\n  path: string;\n  /** JSON-serializable request body. */\n  body?: unknown;\n  /** Work-session token. It is never persisted by the transport. */\n  authorization?: string;\n  /** Optional memory-only signed-in widget token. */\n  userAuthorization?: string;\n  signal?: AbortSignal;\n  /** Per-request timeout; defaults to the transport default. */\n  timeoutMs?: number;\n}\n\nexport interface TransportResponse {\n  status: number;\n  body?: unknown;\n  /** Echoed server request id, when provided. */\n  requestId?: string;\n}\n\nexport interface Transport {\n  request(request: TransportRequest): Promise<TransportResponse>;\n}\n\nexport interface FetchTransportOptions {\n  apiBaseUrl: string;\n  /** Injectable for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch;\n  defaultTimeoutMs?: number;\n  /** Injectable id generator (default: `crypto.randomUUID`). */\n  generateRequestId?: () => string;\n}\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\n\nconst STATUS_CODE_MAP: ReadonlyMap<number, ViceMeErrorCode> = new Map([\n  [400, 'CONFIG_INVALID'],\n  [401, 'SESSION_EXPIRED'],\n  [403, 'CAPABILITY_DISABLED'],\n  [404, 'WORK_NOT_FOUND'],\n  [409, 'CONFIG_INVALID'],\n  [422, 'CONFIG_INVALID'],\n  [429, 'RATE_LIMITED'],\n]);\n\nconst KNOWN_CODES: ReadonlySet<string> = new Set([\n  'CONFIG_INVALID',\n  'WORK_NOT_FOUND',\n  'CAPABILITY_DISABLED',\n  'SESSION_EXPIRED',\n  'AUTH_REQUIRED',\n  'AUTH_CANCELLED',\n  'RETURN_URL_NOT_ALLOWED',\n  'RATE_LIMITED',\n  'NETWORK_TIMEOUT',\n  'CHECKOUT_UNAVAILABLE',\n  'INTERNAL_ERROR',\n]);\n\n/** Extract a stable error payload from a JSON error body, if well-formed. */\nfunction parseErrorBody(body: unknown): {\n  code?: ViceMeErrorCode;\n  message?: string;\n  retryable?: boolean;\n  requestId?: string;\n} {\n  if (typeof body !== 'object' || body === null) return {};\n  const raw = body as Record<string, unknown>;\n  const candidate =\n    typeof raw.error === 'object' && raw.error !== null\n      ? (raw.error as Record<string, unknown>)\n      : raw;\n  const result: {\n    code?: ViceMeErrorCode;\n    message?: string;\n    retryable?: boolean;\n    requestId?: string;\n  } = {};\n  if (typeof candidate.code === 'string' && KNOWN_CODES.has(candidate.code)) {\n    result.code = candidate.code as ViceMeErrorCode;\n  }\n  if (typeof candidate.message === 'string') {\n    result.message = candidate.message.slice(0, 200);\n  }\n  if (typeof candidate.retryable === 'boolean') {\n    result.retryable = candidate.retryable;\n  }\n  if (typeof candidate.requestId === 'string') {\n    result.requestId = candidate.requestId;\n  }\n  return result;\n}\n\nfunction defaultRequestId(): string {\n  if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function') {\n    return crypto.randomUUID();\n  }\n  return `req-${Math.random().toString(36).slice(2)}`;\n}\n\nexport class FetchTransport implements Transport {\n  readonly #apiBaseUrl: string;\n  readonly #fetchImpl: typeof fetch;\n  readonly #defaultTimeoutMs: number;\n  readonly #generateRequestId: () => string;\n\n  constructor(options: FetchTransportOptions) {\n    this.#apiBaseUrl = options.apiBaseUrl.replace(/\\/+$/, '');\n    this.#fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);\n    this.#defaultTimeoutMs = options.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.#generateRequestId = options.generateRequestId ?? defaultRequestId;\n  }\n\n  async request(request: TransportRequest): Promise<TransportResponse> {\n    // A pre-aborted signal must never reach the network. Preserve the\n    // caller's abort reason when one was set.\n    if (request.signal?.aborted) {\n      throw this.#callerAbortError(request.signal);\n    }\n    const timeoutMs = request.timeoutMs ?? this.#defaultTimeoutMs;\n    const controller = new AbortController();\n    // Engine notes: Chrome/Firefox reject fetch with the abort reason and\n    // WebKit may reject with a plain error — so timeout/abort classification\n    // keys off our own timer/signal state, never off the exception shape.\n    let timedOut = false;\n    const timer = setTimeout(() => {\n      timedOut = true;\n      controller.abort(new TimeoutAbort());\n    }, timeoutMs);\n    const onOuterAbort = () => controller.abort(new TimeoutAbort(false));\n    request.signal?.addEventListener('abort', onOuterAbort, { once: true });\n\n    const requestId = this.#generateRequestId();\n    try {\n      const response = await this.#fetchImpl(`${this.#apiBaseUrl}${request.path}`, {\n        method: request.method,\n        // Public API is CORS-only; credentials must stay off so Shop session\n        // cookies can never attach to public SDK requests.\n        credentials: 'omit',\n        mode: 'cors',\n        headers: {\n          'content-type': 'application/json',\n          'x-client-request-id': requestId,\n          ...(request.authorization !== undefined\n            ? { authorization: `Bearer ${request.authorization}` }\n            : {}),\n          ...(request.userAuthorization !== undefined\n            ? { 'x-viceme-user-token': request.userAuthorization }\n            : {}),\n        },\n        body: request.body !== undefined ? JSON.stringify(request.body) : undefined,\n        signal: controller.signal,\n      });\n\n      // Body reading stays inside the same timeout/abort lifecycle: a server\n      // that returns headers and then stalls the body still hits\n      // NETWORK_TIMEOUT, caller abort still cancels the read, and a late\n      // body can never outlive a destroyed client/session.\n      let body: unknown;\n      try {\n        body = await response.json();\n      } catch (error) {\n        // A malformed/empty body is tolerated; a cancelled read must\n        // propagate so the outer handler can classify it.\n        if (request.signal?.aborted || timedOut) {\n          throw error;\n        }\n        body = undefined;\n      }\n\n      const serverRequestId = response.headers.get('x-request-id') ?? undefined;\n      if (!response.ok) {\n        const parsed = parseErrorBody(body);\n        const code = parsed.code ?? STATUS_CODE_MAP.get(response.status) ?? 'INTERNAL_ERROR';\n        throw new ViceMeError({\n          code,\n          message: parsed.message ?? 'Public API request failed.',\n          retryable: parsed.retryable,\n          requestId: parsed.requestId ?? serverRequestId,\n        });\n      }\n      return { status: response.status, body, requestId: serverRequestId };\n    } catch (cause) {\n      if (request.signal?.aborted) {\n        throw this.#callerAbortError(request.signal);\n      }\n      if (timedOut) {\n        throw new ViceMeError({\n          code: 'NETWORK_TIMEOUT',\n          message: 'Public API request timed out.',\n          retryable: true,\n          requestId,\n        });\n      }\n      // Non-OK statuses already carry a normalized error — pass it through.\n      if (cause instanceof ViceMeError) {\n        throw cause;\n      }\n      if (cause instanceof DOMException && cause.name === 'AbortError') {\n        throw new DOMException('ViceMe request aborted by caller.', 'AbortError');\n      }\n      throw new ViceMeError({\n        code: 'INTERNAL_ERROR',\n        message: 'Public API request failed.',\n        retryable: true,\n        requestId,\n      });\n    } finally {\n      clearTimeout(timer);\n      request.signal?.removeEventListener('abort', onOuterAbort);\n    }\n  }\n\n  /** Caller-abort error that preserves the caller's own abort reason. */\n  #callerAbortError(signal: AbortSignal): unknown {\n    return signal.reason instanceof Error\n      ? signal.reason\n      : new DOMException('ViceMe request aborted by caller.', 'AbortError');\n  }\n}\n\nexport function createFetchTransport(options: FetchTransportOptions): Transport {\n  return new FetchTransport(options);\n}\n\n/** Internal marker distinguishing timeout aborts from caller aborts. */\nclass TimeoutAbort extends DOMException {\n  constructor(timedOut = true) {\n    super(timedOut ? 'ViceMe request timed out.' : 'ViceMe request aborted.', 'AbortError');\n  }\n}\n","/**\n * `@viceme-ai/sdk` public entry.\n *\n * Production consumers get `createViceMe` plus public types. Test injection\n * lives under `@viceme-ai/sdk/testing`.\n */\n\nimport { createFetchTransport } from './transport/transport.ts';\nimport { resolveApiBaseUrl, validatePublicConfig } from './core/config.ts';\nimport { ViceMeClientImpl } from './core/client.ts';\nimport { ViceMeError, isViceMeError, type ViceMeErrorCode } from './core/errors.ts';\nimport type { ViceMeClient, ViceMeMountedInstance } from './core/client.ts';\nimport type { ViceMeRegion, ViceMeConfig } from './core/config.ts';\nimport type { ViceMeClientState } from './core/lifecycle.ts';\nimport type {\n  AccessCapability,\n  AccessDecision,\n  AccessFeaturePresentation,\n  AccessPolicyType,\n  AccessReason,\n  AuthCapability,\n  AuthState,\n  CheckoutCapability,\n  CheckoutOptions,\n  CheckoutResult,\n} from './core/capabilities.ts';\nimport type { WorkUser } from './session/session.ts';\nimport { SDK_VERSION, API_MAJOR } from './version.ts';\n\nexport { ViceMeError, isViceMeError, SDK_VERSION, API_MAJOR, resolveApiBaseUrl };\nexport type {\n  ViceMeClient,\n  ViceMeMountedInstance,\n  ViceMeConfig,\n  ViceMeRegion,\n  ViceMeClientState,\n  ViceMeErrorCode,\n  AccessCapability,\n  AccessDecision,\n  AccessFeaturePresentation,\n  AccessPolicyType,\n  AccessReason,\n  AuthCapability,\n  AuthState,\n  CheckoutCapability,\n  CheckoutOptions,\n  CheckoutResult,\n  WorkUser,\n};\n\n/**\n * Create a ViceMe client for one Work. Hosted capabilities initialize locally;\n * website access establishes a short-lived Work session only when used.\n *\n * @example\n * ```ts\n * const client = createViceMe({ workKey: 'wrk_public_xxx', region: 'cn' });\n * await client.ready();\n * client.destroy();\n * ```\n */\nexport function createViceMe(config: unknown): ViceMeClient {\n  const validated = validatePublicConfig(config);\n  const apiBaseUrl = resolveApiBaseUrl(validated.region);\n  const transport = createFetchTransport({\n    apiBaseUrl,\n  });\n  return new ViceMeClientImpl({ config: validated, transport });\n}\n"],"names":["DEFAULT_TIMEOUT_MS","STATUS_CODE_MAP","KNOWN_CODES","parseErrorBody","body","raw","candidate","result","defaultRequestId","FetchTransport","#apiBaseUrl","#fetchImpl","#defaultTimeoutMs","#generateRequestId","options","request","#callerAbortError","timeoutMs","controller","timedOut","timer","TimeoutAbort","onOuterAbort","requestId","response","error","serverRequestId","parsed","code","ViceMeError","cause","signal","createFetchTransport","createViceMe","config","validated","validatePublicConfig","apiBaseUrl","resolveApiBaseUrl","transport","ViceMeClientImpl"],"mappings":";;;;AA8CA,MAAMA,IAAqB,KAErBC,wBAA4D,IAAI;AAAA,EACpE,CAAC,KAAK,gBAAgB;AAAA,EACtB,CAAC,KAAK,iBAAiB;AAAA,EACvB,CAAC,KAAK,qBAAqB;AAAA,EAC3B,CAAC,KAAK,gBAAgB;AAAA,EACtB,CAAC,KAAK,gBAAgB;AAAA,EACtB,CAAC,KAAK,gBAAgB;AAAA,EACtB,CAAC,KAAK,cAAc;AACtB,CAAC,GAEKC,wBAAuC,IAAI;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,SAASC,EAAeC,GAKtB;AACA,MAAI,OAAOA,KAAS,YAAYA,MAAS,aAAa,CAAA;AACtD,QAAMC,IAAMD,GACNE,IACJ,OAAOD,EAAI,SAAU,YAAYA,EAAI,UAAU,OAC1CA,EAAI,QACLA,GACAE,IAKF,CAAA;AACJ,SAAI,OAAOD,EAAU,QAAS,YAAYJ,EAAY,IAAII,EAAU,IAAI,MACtEC,EAAO,OAAOD,EAAU,OAEtB,OAAOA,EAAU,WAAY,aAC/BC,EAAO,UAAUD,EAAU,QAAQ,MAAM,GAAG,GAAG,IAE7C,OAAOA,EAAU,aAAc,cACjCC,EAAO,YAAYD,EAAU,YAE3B,OAAOA,EAAU,aAAc,aACjCC,EAAO,YAAYD,EAAU,YAExBC;AACT;AAEA,SAASC,IAA2B;AAClC,SAAI,OAAO,SAAW,OAAe,OAAO,OAAO,cAAe,aACzD,OAAO,WAAA,IAET,OAAO,KAAK,OAAA,EAAS,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACnD;AAEO,MAAMC,EAAoC;AAAA,EACtCC;AAAA,EACAC;AAAA,EACAC;AAAA,EACAC;AAAA,EAET,YAAYC,GAAgC;AAC1C,SAAKJ,KAAcI,EAAQ,WAAW,QAAQ,QAAQ,EAAE,GACxD,KAAKH,KAAaG,EAAQ,aAAa,WAAW,MAAM,KAAK,UAAU,GACvE,KAAKF,KAAoBE,EAAQ,oBAAoBd,GACrD,KAAKa,KAAqBC,EAAQ,qBAAqBN;AAAA,EACzD;AAAA,EAEA,MAAM,QAAQO,GAAuD;AAGnE,QAAIA,EAAQ,QAAQ;AAClB,YAAM,KAAKC,GAAkBD,EAAQ,MAAM;AAE7C,UAAME,IAAYF,EAAQ,aAAa,KAAKH,IACtCM,IAAa,IAAI,gBAAA;AAIvB,QAAIC,IAAW;AACf,UAAMC,IAAQ,WAAW,MAAM;AAC7B,MAAAD,IAAW,IACXD,EAAW,MAAM,IAAIG,GAAc;AAAA,IACrC,GAAGJ,CAAS,GACNK,IAAe,MAAMJ,EAAW,MAAM,IAAIG,EAAa,EAAK,CAAC;AACnE,IAAAN,EAAQ,QAAQ,iBAAiB,SAASO,GAAc,EAAE,MAAM,IAAM;AAEtE,UAAMC,IAAY,KAAKV,GAAA;AACvB,QAAI;AACF,YAAMW,IAAW,MAAM,KAAKb,GAAW,GAAG,KAAKD,EAAW,GAAGK,EAAQ,IAAI,IAAI;AAAA,QAC3E,QAAQA,EAAQ;AAAA;AAAA;AAAA,QAGhB,aAAa;AAAA,QACb,MAAM;AAAA,QACN,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,uBAAuBQ;AAAA,UACvB,GAAIR,EAAQ,kBAAkB,SAC1B,EAAE,eAAe,UAAUA,EAAQ,aAAa,GAAA,IAChD,CAAA;AAAA,UACJ,GAAIA,EAAQ,sBAAsB,SAC9B,EAAE,uBAAuBA,EAAQ,sBACjC,CAAA;AAAA,QAAC;AAAA,QAEP,MAAMA,EAAQ,SAAS,SAAY,KAAK,UAAUA,EAAQ,IAAI,IAAI;AAAA,QAClE,QAAQG,EAAW;AAAA,MAAA,CACpB;AAMD,UAAId;AACJ,UAAI;AACF,QAAAA,IAAO,MAAMoB,EAAS,KAAA;AAAA,MACxB,SAASC,GAAO;AAGd,YAAIV,EAAQ,QAAQ,WAAWI;AAC7B,gBAAMM;AAER,QAAArB,IAAO;AAAA,MACT;AAEA,YAAMsB,IAAkBF,EAAS,QAAQ,IAAI,cAAc,KAAK;AAChE,UAAI,CAACA,EAAS,IAAI;AAChB,cAAMG,IAASxB,EAAeC,CAAI,GAC5BwB,IAAOD,EAAO,QAAQ1B,EAAgB,IAAIuB,EAAS,MAAM,KAAK;AACpE,cAAM,IAAIK,EAAY;AAAA,UACpB,MAAAD;AAAA,UACA,SAASD,EAAO,WAAW;AAAA,UAC3B,WAAWA,EAAO;AAAA,UAClB,WAAWA,EAAO,aAAaD;AAAA,QAAA,CAChC;AAAA,MACH;AACA,aAAO,EAAE,QAAQF,EAAS,QAAQ,MAAApB,GAAM,WAAWsB,EAAA;AAAA,IACrD,SAASI,GAAO;AACd,YAAIf,EAAQ,QAAQ,UACZ,KAAKC,GAAkBD,EAAQ,MAAM,IAEzCI,IACI,IAAIU,EAAY;AAAA,QACpB,MAAM;AAAA,QACN,SAAS;AAAA,QACT,WAAW;AAAA,QACX,WAAAN;AAAA,MAAA,CACD,IAGCO,aAAiBD,IACbC,IAEJA,aAAiB,gBAAgBA,EAAM,SAAS,eAC5C,IAAI,aAAa,qCAAqC,YAAY,IAEpE,IAAID,EAAY;AAAA,QACpB,MAAM;AAAA,QACN,SAAS;AAAA,QACT,WAAW;AAAA,QACX,WAAAN;AAAA,MAAA,CACD;AAAA,IACH,UAAA;AACE,mBAAaH,CAAK,GAClBL,EAAQ,QAAQ,oBAAoB,SAASO,CAAY;AAAA,IAC3D;AAAA,EACF;AAAA;AAAA,EAGAN,GAAkBe,GAA8B;AAC9C,WAAOA,EAAO,kBAAkB,QAC5BA,EAAO,SACP,IAAI,aAAa,qCAAqC,YAAY;AAAA,EACxE;AACF;AAEO,SAASC,EAAqBlB,GAA2C;AAC9E,SAAO,IAAIL,EAAeK,CAAO;AACnC;AAGA,MAAMO,UAAqB,aAAa;AAAA,EACtC,YAAYF,IAAW,IAAM;AAC3B,UAAMA,IAAW,8BAA8B,2BAA2B,YAAY;AAAA,EACxF;AACF;ACtLO,SAASc,EAAaC,GAA+B;AAC1D,QAAMC,IAAYC,EAAqBF,CAAM,GACvCG,IAAaC,EAAkBH,EAAU,MAAM,GAC/CI,IAAYP,EAAqB;AAAA,IACrC,YAAAK;AAAA,EAAA,CACD;AACD,SAAO,IAAIG,EAAiB,EAAE,QAAQL,GAAW,WAAAI,GAAW;AAC9D;"}

package/dist/loader/attributes.d.ts

@@ -8,11 +8,12 @@
  */
 import type { ViceMeRegion } from '../core/config.ts';
 export type ViceMeTheme = 'light' | 'dark' | 'auto';
+export type LoaderFeature = 'danmaku' | 'tip';
 export interface LoaderAttributes {
     workKey: string;
     region: ViceMeRegion;
-    /** The only released public feature. */
-    features: string[];
+    /** Hosted capabilities mounted by this loader invocation. */
+    features: LoaderFeature[];
     /** CSS selector; required whenever features are declared. */
     target?: string;
     theme: ViceMeTheme;

package/dist/loader/attributes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attributes.d.ts","sourceRoot":"","sources":["../../src/loader/attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;CACpB;AAcD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAsDxE"}
+{"version":3,"file":"attributes.d.ts","sourceRoot":"","sources":["../../src/loader/attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AACpD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;CACpB;AAeD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAiExE"}

package/dist/loader/auto-loader.d.ts

@@ -12,7 +12,7 @@
  * 4. Read `manifest.json` from the loader's own directory (exact release
  *    version; URLs are never assembled from page parameters).
  * 5. Create the local client embedded in this loader, then load the
- *    same-version danmaku chunk declared by the manifest.
+ *    requested same-version capability chunks declared by the manifest.
  * 6. Mount; handles land in an internal registry.
  * 7. Re-running the same instance key returns the original handle — no
  *    duplicate clients, subscriptions, or DOM.

package/dist/loader/auto-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-loader.d.ts","sourceRoot":"","sources":["../../src/loader/auto-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAA+B,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIrF,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAI3B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IACpE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE;QAER,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAC;KACtD,CAAC;CACH;AA4ED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CA2CxE;AA0GD,wBAAsB,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuJ5E;AAkBD,iBAAS,SAAS,IAAI,IAAI,CAYzB;AAKD,eAAO,MAAM,mBAAmB,kBAAY,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"auto-loader.d.ts","sourceRoot":"","sources":["../../src/loader/auto-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAA+B,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIrF,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAI3B,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IACpE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE;QAER,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAC;KACtD,CAAC;CACH;AAoFD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CA4CxE;AA4ID,wBAAsB,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiK5E;AAkBD,iBAAS,SAAS,IAAI,IAAI,CAYzB;AAKD,eAAO,MAAM,mBAAmB,kBAAY,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/loader/events.d.ts

@@ -1,45 +1,2 @@
-/**
- * Stable `viceme:*` DOM events.
- *
- * Dispatch target is the mount host element; configuration errors that happen
- * before a host exists are dispatched on `document`. Event details carry an
- * allowlisted field set only — never tokens, cookies, provider payloads, or
- * internal stacks.
- */
-import type { ViceMeErrorCode } from '../core/errors.ts';
-export interface VicemeReadyDetail {
-    clientKey: string;
-    workKey: string;
-    capabilities: string[];
-    version: string;
-}
-export interface VicemeCapabilityReadyDetail {
-    clientKey: string;
-    instanceKey: string;
-    capability: string;
-    version: string;
-}
-export interface VicemeErrorDetail {
-    clientKey?: string;
-    instanceKey?: string;
-    capability?: string;
-    code: ViceMeErrorCode;
-    retryable: boolean;
-    requestId?: string;
-}
-export interface VicemeDestroyedDetail {
-    clientKey: string;
-    instanceKey: string;
-    capability: string;
-}
-export type VicemeEventType = 'viceme:ready' | 'viceme:capability-ready' | 'viceme:error' | 'viceme:destroyed';
-export type VicemeEventDetailMap = {
-    'viceme:ready': VicemeReadyDetail;
-    'viceme:capability-ready': VicemeCapabilityReadyDetail;
-    'viceme:error': VicemeErrorDetail;
-    'viceme:destroyed': VicemeDestroyedDetail;
-};
-/** Strip anything outside the documented allowlist before dispatch. */
-export declare function sanitizeDetail(type: VicemeEventType, detail: VicemeEventDetailMap[VicemeEventType]): VicemeEventDetailMap[VicemeEventType];
-export declare function dispatchViceMeEvent<K extends VicemeEventType>(target: EventTarget, type: K, detail: VicemeEventDetailMap[K]): void;
+export { dispatchViceMeEvent, sanitizeDetail, type VicemeCapabilityReadyDetail, type VicemeDestroyedDetail, type VicemeErrorDetail, type VicemeEventDetailMap, type VicemeEventType, type VicemeReadyDetail, type VicemeTipPaidDetail, type VicemeWidgetCloseDetail, } from '../browser-events.ts';
 //# sourceMappingURL=events.d.ts.map

package/dist/loader/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/loader/events.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GACzB,cAAc,GAAG,yBAAyB,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEnF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,iBAAiB,CAAC;IAClC,yBAAyB,EAAE,2BAA2B,CAAC;IACvD,cAAc,EAAE,iBAAiB,CAAC;IAClC,kBAAkB,EAAE,qBAAqB,CAAC;CAC3C,CAAC;AAYF,uEAAuE;AACvE,wBAAgB,cAAc,CAC5B,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,oBAAoB,CAAC,eAAe,CAAC,GAC5C,oBAAoB,CAAC,eAAe,CAAC,CAOvC;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,eAAe,EAC3D,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC9B,IAAI,CAQN"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/loader/events.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC"}

package/dist/loader/registry.d.ts

@@ -12,11 +12,12 @@
  * `ViceMeMountedInstance` and owns destroy/event deduplication.
  */
 import type { ViceMeClient } from '../core/client.ts';
-import type { CapabilityMountHandle } from './mount-handle.ts';
+import type { CapabilityMountHandle } from '../capability-mount.ts';
 export interface RegisteredClient {
     clientKey: string;
     client: ViceMeClient;
     ready: Promise<void>;
+    pendingMounts: Set<AbortController>;
 }
 export interface RegisteredInstance {
     instanceKey: string;

package/dist/loader/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/loader/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,qBAAqB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,qBAAa,cAAc;;IAOzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI1D,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAI7C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIzC,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIhE,qEAAqE;IACrE,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACf,kBAAkB,GAAG,SAAS;IAIjC,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,qBAAqB,GACzB,kBAAkB;IAwBrB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAQnE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,EAAE;CAG5D"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/loader/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,qBAAqB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,qBAAa,cAAc;;IAOzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI1D,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAI7C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIzC,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIhE,qEAAqE;IACrE,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACf,kBAAkB,GAAG,SAAS;IAIjC,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,qBAAqB,GACzB,kBAAkB;IAwBrB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAQnE,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,EAAE;CAG5D"}

package/dist/manifest.json

@@ -1,9 +1,10 @@
 {
-  "version": "0.2.0",
+  "version": "0.4.0",
   "apiMajor": 1,
   "loader": "viceme.min.js",
   "features": {
-    "danmaku": "danmaku.js"
+    "danmaku": "danmaku.js",
+    "tip": "tip.js"
   },
   "files": {
     "bootstrap.min.js": {
@@ -12,29 +13,53 @@
       "bytes": 964,
       "gzipBytes": 597
     },
-    "chunks/version-BbUa2jZV.js": {
-      "sha256": "2c6e1471b3162fc1f5d22fe9409d5dee132ac3dcf5813e86b3484c532795ea2f",
-      "sri": "sha384-9xs64VnKybQmjrIQAQIZXPB3jjMD3L+lYG2IUCWuXM1m6N61XJfiPYqFiLrJ/g53",
-      "bytes": 1033,
-      "gzipBytes": 545
+    "chunks/client-Cbldd7F2.js": {
+      "sha256": "d3cc3bb1af3d1a932d4a90e03bb9bb87fcc7feccae41e8d847c2aaf554dde5e3",
+      "sri": "sha384-3KcJOxpIpTef28FKFuVc94xQnYXf8dMmnlOxp2RU7GJgUT0gfZyHEVp5RPIO2N1I",
+      "bytes": 31162,
+      "gzipBytes": 8991
+    },
+    "chunks/errors-B-Qv_azy.js": {
+      "sha256": "e8663d662b0a3d483cb46498bd30a8b910658ca4ae707dbd6c0955930bcaef99",
+      "sri": "sha384-aD5pgOhBsOrYVQhKM02ig6c9J/Rrw/t0+ZJ5FVamOnI+xuoBx7OhDCqR/FLFNfhN",
+      "bytes": 1215,
+      "gzipBytes": 616
+    },
+    "chunks/version-C8DeBm39.js": {
+      "sha256": "0c3445a6c890c11d734e4a0eecfd3b68d777f2f830188fffe4087d5f54791d55",
+      "sri": "sha384-MWCW0IJOfoua7WCu/Am8r6cCVgwPorO8likP6tc35DDUMjgn/lJkF7lyPHvF5DGU",
+      "bytes": 102,
+      "gzipBytes": 119
     },
     "danmaku.js": {
-      "sha256": "01b50d712efeb192741c212f3b5145f74f36af9b2d6f521270c331c28dd50497",
-      "sri": "sha384-nvVUPE872/arFChMvzTh4rnmMGDKXOIjbV5gRpRvXAIamvzoam7xvJGszK8nFL4k",
-      "bytes": 8969,
-      "gzipBytes": 3219
+      "sha256": "fddd863f1dca4cc8884bbf6a034dfdfe1cce5f5dc7b85a42776d2297512cb2a7",
+      "sri": "sha384-i2JXE00Si/MITDDy2WES5iy+65Ny7eoKNStNK65T7yvY6YC8Bkbe+WQ79aFSB+R+",
+      "bytes": 9380,
+      "gzipBytes": 3312
     },
     "index.js": {
-      "sha256": "6cd6dad051a6426be8aec028c80bdef6e51d142d8ca511d5ea5ff8d230d11d2d",
-      "sri": "sha384-N6nFflxbSfoM0bFcqoJOIykbg5k6DXvXXp5h/uoGSwEyLe7cuVeT1uZE1qIRoafm",
-      "bytes": 2849,
-      "gzipBytes": 1248
+      "sha256": "559fb02f5353e4f5ff25caaff745e5dfd4fd5788a84992867996fb5f02b76b94",
+      "sri": "sha384-WJYmAkUGfbGZlZM9iW8KhMnBdrfXAia4HUz3Vf9PaUO9AoFPSHrYT1izflCjnpTG",
+      "bytes": 4472,
+      "gzipBytes": 1843
+    },
+    "testing.js": {
+      "sha256": "4917da4fd09a0ed34886c0831d1f59e129504b3c7d0fb70a104fdadcdc4e05c4",
+      "sri": "sha384-rTEGIbt82W3dv1pBBPj65IokdBGxXjXU8MR3RgELWDxtB2karLqr0+o8jlY5u60u",
+      "bytes": 2286,
+      "gzipBytes": 1030
+    },
+    "tip.js": {
+      "sha256": "0f2a15e6640d94a81fd0ea1376bdd3b67d4a765a546f8511635521f4a20bd95f",
+      "sri": "sha384-K8pK7stoxs7viZBclXhBEBWbMmddisbHZSQLrkisVhDb0ZlvW7Wy1kRagRR7HCQu",
+      "bytes": 5962,
+      "gzipBytes": 2290
     },
     "viceme.min.js": {
-      "sha256": "b220fda500ea54fdfb2288379e12e5de8e376ca4d2dc8e7831e18e98be3eb7b2",
-      "sri": "sha384-5cWwq3wmL/wBaC+sj4CNSZ2bCK+3Ai/eKgUf/08YWyuT0yd9YXQA5Aj+78G3lhsF",
-      "bytes": 10496,
-      "gzipBytes": 3635
+      "sha256": "c05d6cccf5e98f56941d507409c092e00bf628c2f04810efc3a09a9e389354cf",
+      "sri": "sha384-BE8bq1YYCmrB+6OxIcHINjsXvGBqqPzn4WxlTE90u8i69tjg6sZ5t8oVldPRmaTj",
+      "bytes": 37200,
+      "gzipBytes": 11548
     }
   }
 }

package/dist/session/session.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Public visitor session.
+ *
+ * ```text
+ * SDK + workKey + Origin -> POST /v1/public/work-sdk/sessions
+ *   -> short-lived capability token -> public capability calls
+ * ```
+ *
+ * The token lives in memory only (never localStorage/cookies), is bound to the
+ * Work, Origin, capability set, and expiry by the server, and is dropped on
+ * `destroy()`. `workKey` locates the Work — it is never an authorization
+ * credential.
+ */
+import type { Transport, TransportRequest, TransportResponse } from '../transport/transport.ts';
+export interface CreateWorkSessionRequestDto {
+    workKey: string;
+}
+export interface WorkDescriptor {
+    key: string;
+    /** Capability names enabled for this work. */
+    capabilities: string[];
+}
+export interface WorkSessionSnapshot {
+    work: WorkDescriptor;
+    /** Opaque short-lived capability token; memory-only. */
+    token?: string;
+    /** Epoch milliseconds when the token expires, when provided by the server. */
+    expiresAt?: number;
+    user?: WorkUser;
+    userToken?: string;
+}
+export interface WorkUser {
+    subject: string;
+    nickname: string | null;
+    avatarUrl: string | null;
+}
+export interface SessionManagerOptions {
+    workKey: string;
+    transport: Transport;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    /** Injectable clock for tests. */
+    now?: () => number;
+}
+export declare class SessionManager {
+    #private;
+    constructor(options: SessionManagerOptions);
+    get snapshot(): WorkSessionSnapshot | undefined;
+    /**
+     * Establish (or return the established) public session.
+     *
+     * A cached snapshot is reused only while it is unexpired; an expired
+     * snapshot is dropped and re-authenticated. Concurrent callers share one
+     * in-flight request (single flight).
+     */
+    establish(): Promise<WorkSessionSnapshot>;
+    request(request: Omit<TransportRequest, 'authorization' | 'userAuthorization' | 'signal'>): Promise<TransportResponse>;
+    authenticate(input: {
+        userToken: string;
+        user: WorkUser;
+    }): void;
+    signOut(): Promise<void>;
+    /** Drop the token; next `establish()` re-authenticates. */
+    invalidate(): void;
+    /** Hard cleanup: forget the token and pending work. */
+    destroy(): void;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/session/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/session/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAChG,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AA4CD,qBAAa,cAAc;;gBAMb,OAAO,EAAE,qBAAqB;IAK1C,IAAI,QAAQ,IAAI,mBAAmB,GAAG,SAAS,CAE9C;IAQD;;;;;;OAMG;IACH,SAAS,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAwBnC,OAAO,CACX,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,GAAG,mBAAmB,GAAG,QAAQ,CAAC,GAChF,OAAO,CAAC,iBAAiB,CAAC;IAwB7B,YAAY,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,IAAI;IAS1D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,2DAA2D;IAC3D,UAAU,IAAI,IAAI;IAIlB,uDAAuD;IACvD,OAAO,IAAI,IAAI;CAIhB"}

package/dist/testing/test-adapter.d.ts

@@ -0,0 +1,59 @@
+/**
+ * `@viceme-ai/sdk/testing` — explicit test adapter.
+ *
+ * Deterministic fixture helpers for SDK consumers and capability authors.
+ * This code must never be imported from production core, loader, or capability
+ * bundles; it is excluded from them at build time and only exported via the
+ * `./testing` subpath.
+ *
+ * The test client runs the exact same config, lifecycle, error, and contract
+ * validation as production `createViceMe()` — it is not a bypass mock.
+ */
+import type { ViceMeClient } from '../core/client.ts';
+import type { ViceMeRegion } from '../core/config.ts';
+import type { AccessPresenter } from '../core/presentation.ts';
+import type { Transport, TransportRequest } from '../transport/transport.ts';
+export interface MemoryTransportWorkFixture {
+    key: string;
+    capabilities: string[];
+    token?: string;
+    expiresAt?: number;
+}
+export interface MemoryTransportOptions {
+    /** Work descriptor served for `POST /v1/public/work-sdk/sessions`. */
+    work: MemoryTransportWorkFixture;
+    /** Artificial response latency in milliseconds (default 0). */
+    latencyMs?: number;
+    /**
+     * Queue of failures thrown before the fixture response is served; each
+     * entry is consumed by one session request. Use for retry/timeout tests.
+     */
+    sessionFailures?: Array<Error | {
+        status: number;
+        code: string;
+        message?: string;
+    }>;
+}
+export interface MemoryTransport extends Transport {
+    /** Every request seen so far, for assertions. */
+    readonly requests: TransportRequest[];
+}
+export declare function createMemoryTransport(options: MemoryTransportOptions): MemoryTransport;
+export interface CreateTestViceMeOptions {
+    workKey: string;
+    region: ViceMeRegion;
+    /** Mock transport serving the fixture contract. */
+    transport: Transport;
+    signal?: AbortSignal;
+    presenter?: AccessPresenter;
+    /** Stable virtual clock for deterministic time-based assertions. */
+    now?: () => number;
+}
+/**
+ * Create a client backed by an injected transport. Runs identical validation
+ * and lifecycle logic to `createViceMe()`.
+ */
+export declare function createTestViceMe(options: CreateTestViceMeOptions): ViceMeClient;
+/** Standard fixture work used across repo tests and examples. */
+export declare const FIXTURE_WORK: MemoryTransportWorkFixture;
+//# sourceMappingURL=test-adapter.d.ts.map

package/dist/testing/test-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-adapter.d.ts","sourceRoot":"","sources":["../../src/testing/test-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAqB,MAAM,2BAA2B,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,IAAI,EAAE,0BAA0B,CAAC;IACjC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAuDtF;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,mDAAmD;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,YAAY,CAoB/E;AAED,iEAAiE;AACjE,eAAO,MAAM,YAAY,EAAE,0BAI1B,CAAC"}

package/dist/testing.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `@viceme-ai/sdk/testing` subpath entry (test adapter only).
+ *
+ * Re-exports the deterministic mock transport and test client so the emitted
+ * declaration lands at `dist/testing.d.ts`, matching the package exports map.
+ */
+export { createTestViceMe, createMemoryTransport, FIXTURE_WORK } from './testing/test-adapter.ts';
+export type { MemoryTransport, MemoryTransportOptions, MemoryTransportWorkFixture, CreateTestViceMeOptions, } from './testing/test-adapter.ts';
+//# sourceMappingURL=testing.d.ts.map