@viceme-ai/sdk 0.3.0 → 0.6.1

package/dist/chunks/{client-DKsaEtwq.js → client-w9vih8Ng.js}

@@ -1,27 +1,31 @@
-import { a as q, c as C, V as b, b as R, i as H, S as V, A as Y } from "./version-C3KVoLNb.js";
-const $ = /* @__PURE__ */ new Set(["cn", "global"]), W = {
+import { a as C, V as b, c as x, i as G } from "./errors-C7DfLKcF.js";
+import { a as q, B as z } from "./build-endpoints-NrDmg6jf.js";
+import { S as H, A as V } from "./version-uPTHb89K.js";
+const W = /* @__PURE__ */ new Set(["cn", "global"]), j = {
   cn: q.cn,
   global: q.global
 };
-function ue(t) {
-  return W[t];
+function me(t) {
+  return j[t];
 }
 function B(t) {
-  return typeof t == "string" && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(t);
+  return typeof t == "string" && /^wrk_(?:test|live)_[A-Za-z0-9_-]{4,119}$/.test(t);
 }
-function Q(t) {
-  return typeof t == "string" && $.has(t);
+function Y(t) {
+  return typeof t == "string" && W.has(t);
 }
-function me(t) {
+function he(t) {
   if (typeof t != "object" || t === null)
     throw C("createViceMe expects a configuration object.");
   const e = t, i = /* @__PURE__ */ new Set(["workKey", "region", "signal"]);
-  for (const a of Object.keys(e))
-    if (!i.has(a))
-      throw C(`Unknown configuration field "${a}".`);
+  for (const r of Object.keys(e))
+    if (!i.has(r))
+      throw C(`Unknown configuration field "${r}".`);
   if (!B(e.workKey))
-    throw C('Configuration field "workKey" must be a public work key ("wrk_…").');
-  if (!Q(e.region))
+    throw C(
+      'Configuration field "workKey" must start with "wrk_test_" or "wrk_live_".'
+    );
+  if (!Y(e.region))
     throw C('Configuration field "region" must be "cn" or "global".');
   if (e.signal !== void 0 && !(e.signal instanceof AbortSignal))
     throw C('Configuration field "signal" must be an AbortSignal.');
@@ -31,15 +35,13 @@ function me(t) {
     signal: e.signal
   };
 }
-const Z = {
-  CREATED: ["INITIALIZING", "DESTROYED"],
-  INITIALIZING: ["READY", "FAILED", "DESTROYED"],
+const $ = {
+  CREATED: ["READY", "DESTROYED"],
   READY: ["DEGRADED", "DESTROYED"],
   DEGRADED: ["DESTROYED"],
-  FAILED: ["INITIALIZING", "DESTROYED"],
   DESTROYED: []
 };
-class X {
+class Q {
   #e = "CREATED";
   #t = /* @__PURE__ */ new Set();
   get state() {
@@ -50,7 +52,7 @@ class X {
   }
   transition(e) {
     if (e !== this.#e) {
-      if (!Z[this.#e].includes(e))
+      if (!$[this.#e].includes(e))
         throw new b({
           code: "INTERNAL_ERROR",
           message: `Illegal lifecycle transition ${this.#e} -> ${e}.`,
@@ -62,7 +64,7 @@ class X {
   }
   /** Any operation on a destroyed client must fail closed with this guard. */
   assertAlive() {
-    if (this.destroyed) throw R();
+    if (this.destroyed) throw x();
   }
   subscribe(e) {
     return this.#t.add(e), () => {
@@ -73,38 +75,42 @@ class X {
     this.#t.clear();
   }
 }
-function J(t, e) {
+function X(t, e) {
   if (typeof t != "object" || t === null)
-    throw x();
-  const i = t, a = i.work;
-  if (typeof a != "object" || a === null || typeof a.key != "string" || !Array.isArray(a.capabilities) || !a.capabilities.every((v) => typeof v == "string"))
-    throw x();
-  if (a.key !== e)
+    throw R();
+  const i = t;
+  if (typeof i.workKey != "string" || !Array.isArray(i.capabilities) || !i.capabilities.every((c) => typeof c == "string"))
+    throw R();
+  if (i.workKey !== e)
     throw new b({
       code: "WORK_NOT_FOUND",
       message: "Work-session response did not match the requested work key.",
       retryable: !1
     });
-  const l = {
+  const r = {
     work: {
-      key: a.key,
-      capabilities: a.capabilities
+      key: i.workKey,
+      capabilities: i.capabilities
     }
   };
-  return typeof i.token == "string" && (l.token = i.token), typeof i.expiresAt == "number" && (l.expiresAt = i.expiresAt), l;
+  if (typeof i.token == "string" && (r.token = i.token), typeof i.expiresAt == "string") {
+    const c = new Date(i.expiresAt).getTime();
+    Number.isNaN(c) || (r.expiresAt = c);
+  }
+  return r;
 }
-function x() {
+function R() {
   return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed work-session response.",
     retryable: !0
   });
 }
-class ee {
+class J {
   #e;
   #t;
   #i;
-  #a;
+  #r;
   constructor(e) {
     this.#e = e, this.#t = e.now ?? (() => Date.now());
   }
@@ -112,7 +118,7 @@ class ee {
     return this.#i;
   }
   /** True when the cached snapshot's server-provided expiry has passed. */
-  #r() {
+  #a() {
     const e = this.#i?.expiresAt;
     return e !== void 0 && e <= this.#t();
   }
@@ -125,49 +131,50 @@ class ee {
    */
   establish() {
     if (this.#i) {
-      if (!this.#r()) return Promise.resolve(this.#i);
+      if (!this.#a()) return Promise.resolve(this.#i);
       this.#i = void 0;
     }
-    return this.#a ??= this.#e.transport.request({
+    return this.#r ??= this.#e.transport.request({
       method: "POST",
-      path: "/v1/public/v1/work-sessions",
+      path: "/v1/public/work-sdk/sessions",
       body: { workKey: this.#e.workKey },
       signal: this.#e.signal,
       timeoutMs: this.#e.timeoutMs
     }).then((e) => {
-      const i = J(e.body, this.#e.workKey);
+      const i = X(e.body, this.#e.workKey);
       return this.#i = i, i;
     }).finally(() => {
-      this.#a = void 0;
-    }), this.#a;
+      this.#r = void 0;
+    }), this.#r;
   }
   async request(e) {
     const i = await this.establish();
-    if (!i.token) throw x();
+    if (!i.token) throw R();
     try {
       return await this.#e.transport.request({
         ...e,
         authorization: i.token,
+        userAuthorization: i.userToken,
         signal: this.#e.signal
       });
-    } catch (a) {
-      if (!(a instanceof b) || a.code !== "SESSION_EXPIRED") throw a;
+    } catch (r) {
+      if (!(r instanceof b) || r.code !== "SESSION_EXPIRED") throw r;
       this.#i === i && this.invalidate();
-      const l = await this.establish();
-      if (!l.token) throw x();
+      const c = await this.establish();
+      if (!c.token) throw R();
       return this.#e.transport.request({
         ...e,
-        authorization: l.token,
+        authorization: c.token,
+        userAuthorization: c.userToken,
         signal: this.#e.signal
       });
     }
   }
   authenticate(e) {
-    if (!this.#i) throw x();
+    if (!this.#i) throw R();
     this.#i = {
       ...this.#i,
-      token: e.token,
-      expiresAt: e.expiresAt,
+      userToken: e.userToken,
       user: e.user
     };
   }
@@ -180,26 +187,31 @@ class ee {
   }
   /** Hard cleanup: forget the token and pending work. */
   destroy() {
-    this.invalidate(), this.#a = void 0;
+    this.invalidate(), this.#r = void 0;
   }
 }
-const P = "viceme-access-layer", L = 50;
-function te(t) {
+const M = "viceme-access-layer", U = 50;
+function Z(t) {
   switch (t) {
     case "SIGN_IN":
       return {
         description: "",
         label: "授权"
       };
+    case "FOLLOW":
+      return {
+        description: "",
+        label: "关注"
+      };
     case "CHECKOUT":
       return {
         description: "",
-        label: "重新打开"
+        label: "打开支付"
       };
   }
 }
-function ie(t) {
-  if (!H(t)) return "操作未完成，请重试。";
+function ee(t) {
+  if (!G(t)) return "操作未完成，请重试。";
   switch (t.code) {
     case "CONFIG_INVALID":
       return "微信授权配置无效，请稍后重试。";
@@ -213,13 +225,13 @@ function ie(t) {
       return t.requestId ? `操作未完成，请重试。请求 ID：${t.requestId}` : "操作未完成，请重试。";
   }
 }
-function ae() {
-  if (customElements.get(P)) return;
+function te() {
+  if (customElements.get(M)) return;
   class t extends HTMLElement {
     interaction;
     connectedCallback() {
-      const i = te(this.interaction.action), a = this.attachShadow({ mode: "open" });
-      a.innerHTML = `
+      const i = Z(this.interaction.action), r = this.attachShadow({ mode: "open" });
+      r.innerHTML = `
         <style>
           :host {
             position: fixed;
@@ -325,25 +337,6 @@ function ae() {
             font-size: 0.875rem;
           }
           [data-viceme='profile-header'] { min-width: 0; }
-          [data-viceme='profile-covers'] {
-            display: none;
-            grid-template-columns: repeat(2, minmax(0, 1fr));
-            gap: 0.75rem;
-            margin-top: 1.25rem;
-            border-radius: 0.875rem;
-            padding: 0.75rem;
-            background: #f4f4f5;
-          }
-          [data-viceme='profile-covers'][data-visible='true'] { display: grid; }
-          [data-viceme='profile-cover'] {
-            display: block;
-            width: 100%;
-            aspect-ratio: 16 / 9;
-            border: 1px solid #e4e4e7;
-            border-radius: 0.625rem;
-            object-fit: cover;
-            background: #ffffff;
-          }
           [data-viceme='panel'][data-action='SIGN_IN'] [data-viceme='description'] { display: none; }
           [data-viceme='panel'][data-action='SIGN_IN'] [data-viceme='profile'][data-visible='true'] {
             display: block;
@@ -419,6 +412,9 @@ function ae() {
             }
             [data-viceme='panel'][data-frame='true'] { width: min(30rem, 100%); }
             [data-viceme='panel'][data-action='SIGN_IN'] { width: min(30rem, 100%); }
+            [data-viceme='panel'][data-action='CHECKOUT'][data-frame='true'] {
+              width: min(42rem, 100%);
+            }
           }
           @media (prefers-reduced-motion: no-preference) {
             [data-viceme='panel'] { animation: viceme-enter 160ms ease-out; }
@@ -441,7 +437,6 @@ function ae() {
                 </div>
               </div>
               <p data-viceme="profile-description"></p>
-              <div data-viceme="profile-covers" aria-label="作品封面"></div>
             </section>
             <p data-viceme="error" role="alert" aria-live="polite"></p>
             <div data-viceme="actions">
@@ -451,435 +446,478 @@ function ae() {
           <iframe data-viceme="frame" title="" referrerpolicy="no-referrer" allow="payment"></iframe>
         </section>
       `;
-      const l = a.querySelector("[data-viceme='panel']");
-      l.dataset.action = this.interaction.action, l.dataset.frame = String(this.interaction.action === "CHECKOUT");
-      const v = a.querySelector("[data-viceme='description']");
-      v.textContent = i.description;
-      const f = a.querySelector("[data-viceme='action']"), U = f.parentElement, E = a.querySelector("[data-viceme='close']"), T = a.querySelector("[data-viceme='backdrop']"), N = a.querySelector("[data-viceme='error']"), I = a.querySelector("[data-viceme='frame']"), K = a.querySelector("[data-viceme='profile']"), r = a.querySelector("[data-viceme='avatar']"), n = a.querySelector("[data-viceme='avatar-fallback']"), o = a.querySelector("[data-viceme='profile-name']"), d = a.querySelector(
+      const c = r.querySelector("[data-viceme='panel']");
+      c.dataset.action = this.interaction.action, c.dataset.frame = "false";
+      const N = r.querySelector("[data-viceme='description']");
+      N.textContent = i.description;
+      const f = r.querySelector("[data-viceme='action']"), O = f.parentElement, A = r.querySelector("[data-viceme='close']"), L = r.querySelector("[data-viceme='backdrop']"), T = r.querySelector("[data-viceme='error']"), I = r.querySelector("[data-viceme='frame']"), P = r.querySelector("[data-viceme='profile']"), n = r.querySelector("[data-viceme='avatar']"), o = r.querySelector("[data-viceme='avatar-fallback']"), u = r.querySelector("[data-viceme='profile-name']"), a = r.querySelector(
         "[data-viceme='profile-description']"
-      ), c = a.querySelector("[data-viceme='profile-stats']"), p = a.querySelector("[data-viceme='profile-covers']");
-      f.textContent = i.label, f.hidden = this.interaction.action === "CHECKOUT", U.dataset.single = "true";
-      const y = i.label;
-      I.title = this.interaction.action === "SIGN_IN" ? "微信授权" : "支付";
-      const u = this.interaction.followTarget;
-      if (u) {
-        l.setAttribute(
+      ), l = r.querySelector("[data-viceme='profile-stats']");
+      f.textContent = i.label, f.hidden = !1, O.dataset.single = "true";
+      const v = i.label;
+      I.title = this.interaction.action === "SIGN_IN" ? "登录授权" : "支付";
+      const d = this.interaction.followTarget;
+      if (d) {
+        c.setAttribute(
           "aria-label",
-          this.interaction.action === "SIGN_IN" ? `授权 ${u.displayName}` : `关注 ${u.displayName}`
-        ), K.dataset.visible = "true", o.textContent = u.displayName;
-        const s = [...u.description ?? ""];
-        if (d.textContent = s.length > L ? `${s.slice(0, L).join("")}…` : s.join(""), s.length > L && (d.title = u.description), c.textContent = `${u.workCount} 个作品`, u.coverUrls.length === 0)
-          p.remove();
-        else {
-          for (const [O, k] of u.coverUrls.entries()) {
-            const A = document.createElement("img");
-            A.dataset.viceme = "profile-cover", A.src = k, A.alt = `${u.displayName}的作品封面 ${O + 1}`, p.append(A);
-          }
-          p.dataset.visible = "true";
-        }
-        n.textContent = u.displayName.trim().slice(0, 1) || "V", u.avatarUrl && (r.src = u.avatarUrl, r.alt = `${u.displayName}的头像`, r.hidden = !1, n.hidden = !0);
+          this.interaction.action === "SIGN_IN" ? `授权 ${d.displayName}` : `关注 ${d.displayName}`
+        ), P.dataset.visible = "true", u.textContent = d.displayName;
+        const s = [...d.description ?? ""];
+        a.textContent = s.length > U ? `${s.slice(0, U).join("")}…` : s.join(""), s.length > U && (a.title = d.description), l.textContent = `${d.workCount} 个作品`, o.textContent = d.displayName.trim().slice(0, 1) || "V", d.avatarUrl && (n.src = d.avatarUrl, n.alt = `${d.displayName}的头像`, n.hidden = !1, o.hidden = !0);
       }
-      let w = null;
-      const D = (s) => {
+      let p = null;
+      const E = (s) => {
         this.dispatchEvent(new CustomEvent("viceme:access-layer-close", { detail: s }));
-      }, S = () => {
-        w?.cancel(), D("dismissed");
+      }, y = () => {
+        p?.cancel(), E("dismissed");
       };
-      T.addEventListener("click", S), E.addEventListener("click", S), this.addEventListener("keydown", (s) => {
-        if (s.key === "Escape" && S(), s.key === "Tab") {
-          if (s.preventDefault(), w) {
+      L.addEventListener("click", y), A.addEventListener("click", y), this.addEventListener("keydown", (s) => {
+        if (s.key === "Escape" && y(), s.key === "Tab") {
+          if (s.preventDefault(), p?.type === "frame") {
             I.focus();
             return;
           }
-          const k = [E, ...f.hidden ? [] : [f]].filter((M) => !M.disabled && !M.hidden);
-          if (k.length === 0) return;
-          const A = k.indexOf(a.activeElement), z = s.shiftKey ? -1 : 1;
-          k[(A + z + k.length) % k.length]?.focus();
+          const m = [A, ...f.hidden ? [] : [f]].filter((_) => !_.disabled && !_.hidden);
+          if (m.length === 0) return;
+          const D = m.indexOf(r.activeElement), g = s.shiftKey ? -1 : 1;
+          m[(D + g + m.length) % m.length]?.focus();
         }
       });
-      const g = async () => {
-        f.disabled = !0, f.setAttribute("aria-busy", "true"), f.textContent = "正在打开…", N.textContent = "";
+      const S = async () => {
+        f.disabled = !0, f.setAttribute("aria-busy", "true"), f.textContent = "正在打开…", T.textContent = "";
         try {
           const s = await this.interaction.perform();
-          if (s.type === "frame") {
-            if (w = s, this.interaction.action === "SIGN_IN") {
-              const O = l.getBoundingClientRect().height;
-              O > 0 && (l.style.height = `${O}px`);
-            }
-            l.dataset.frame = "true", I.src = s.url, I.focus(), await s.completion;
-          }
-          D("acted");
+          s.type === "frame" ? (p = s, c.dataset.frame = "true", I.src = s.url, I.focus(), await s.completion) : s.type === "external" && (p = s, await s.completion), E("acted");
         } catch (s) {
-          w?.cancel(), w = null, l.dataset.frame = "false", I.removeAttribute("src"), N.textContent = ie(s), f.hidden = !1, f.disabled = !1, f.removeAttribute("aria-busy"), f.textContent = y, f.focus();
+          p?.cancel(), p = null, c.dataset.frame = "false", I.removeAttribute("src"), T.textContent = ee(s), f.hidden = !1, f.disabled = !1, f.removeAttribute("aria-busy"), f.textContent = v, f.focus();
         }
       };
-      f.addEventListener("click", g), this.interaction.action === "CHECKOUT" ? queueMicrotask(() => {
-        g();
-      }) : queueMicrotask(() => f.focus());
+      f.addEventListener("click", S), queueMicrotask(() => f.focus());
     }
   }
-  customElements.define(P, t);
+  customElements.define(M, t);
 }
-const _ = async (t) => {
+const K = async (t) => {
   if (typeof document > "u" || typeof customElements > "u")
     return "dismissed";
-  ae();
-  const e = document.createElement(P);
+  te();
+  const e = document.createElement(M);
   e.interaction = t;
-  const i = document.documentElement.style.overflow, a = document.activeElement instanceof HTMLElement ? document.activeElement : null;
+  const i = document.documentElement.style.overflow, r = document.activeElement instanceof HTMLElement ? document.activeElement : null;
   document.documentElement.style.overflow = "hidden", document.body.append(e);
   try {
-    return await new Promise((l) => {
+    return await new Promise((c) => {
       e.addEventListener(
         "viceme:access-layer-close",
-        (v) => l(v.detail),
+        (N) => c(N.detail),
         { once: !0 }
       );
     });
   } finally {
-    e.remove(), document.documentElement.style.overflow = i, a?.focus();
+    e.remove(), document.documentElement.style.overflow = i, r?.focus();
   }
 };
-function h(t) {
-  if (typeof t != "object" || t === null) throw m();
+function k(t) {
+  if (typeof t != "object" || t === null) throw h();
   return t;
 }
-function m() {
+function h() {
   return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed public API response.",
     retryable: !0
   });
 }
-function re(t) {
-  const e = h(t);
-  if (typeof e.subject != "string" || !(typeof e.nickname == "string" || e.nickname === null) || !(typeof e.avatarUrl == "string" || e.avatarUrl === null))
-    throw m();
+function ie(t) {
+  const e = k(t);
+  if (typeof e.id != "string" || !(typeof e.displayName == "string" || e.displayName === null) || !(typeof e.avatarUrl == "string" || e.avatarUrl === null))
+    throw h();
   return {
-    subject: e.subject,
-    nickname: e.nickname,
+    subject: e.id,
+    nickname: e.displayName,
     avatarUrl: e.avatarUrl
   };
 }
-function G(t) {
-  const e = h(t);
+function F(t) {
+  const e = k(t);
   if (typeof e.following != "boolean" || !(typeof e.followedAt == "string" || e.followedAt === null))
-    throw m();
-  const i = h(e.target);
-  if (!(i.kind === "CREATOR" || i.kind === "USER") || typeof i.displayName != "string" || !(typeof i.avatarUrl == "string" || i.avatarUrl === null) || !(typeof i.description == "string" || i.description === null) || !Number.isInteger(i.workCount) || i.workCount < 0 || !Array.isArray(i.coverUrls) || i.coverUrls.length > 2 || !i.coverUrls.every((a) => typeof a == "string"))
-    throw m();
+    throw h();
+  const i = k(e.creator);
+  if (typeof i.displayName != "string" || !(typeof i.avatarUrl == "string" || i.avatarUrl === null) || !(typeof i.description == "string" || i.description === null) || !Number.isInteger(i.publishedWorkCount) || i.publishedWorkCount < 0)
+    throw h();
   return {
     following: e.following,
     followedAt: e.followedAt,
     target: {
-      kind: i.kind,
+      kind: "CREATOR",
       displayName: i.displayName,
       avatarUrl: i.avatarUrl,
       description: i.description,
-      workCount: i.workCount,
-      coverUrls: i.coverUrls
+      workCount: i.publishedWorkCount
     }
   };
 }
-function ne(t) {
-  const e = h(t), i = /* @__PURE__ */ new Set([
+function re(t) {
+  const e = k(t), i = /* @__PURE__ */ new Set([
+    "PUBLIC",
     "OWNER",
     "FOLLOWING",
-    "PURCHASED",
     "ENTITLED",
     "AUTH_REQUIRED",
     "FOLLOW_REQUIRED",
     "PURCHASE_REQUIRED",
     "FEATURE_NOT_FOUND",
-    "FEATURE_DISABLED",
-    "POLICY_UNSUPPORTED"
-  ]), a = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
-  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !a.has(e.nextAction))
-    throw m();
+    "FEATURE_DISABLED"
+  ]), r = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
+  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !r.has(e.nextAction))
+    throw h();
   return {
     allowed: e.allowed,
     reason: e.reason,
     nextAction: e.nextAction
   };
 }
-function oe(t) {
-  const e = h(t), i = h(e.policy);
-  if (typeof e.featureKey != "string" || !/^[a-z][a-z0-9_-]{1,63}$/.test(e.featureKey) || typeof e.title != "string" || e.title.trim().length === 0 || e.title.length > 120 || !(i.type === "PUBLIC" || i.type === "FOLLOW_OWNER" || i.type === "WORK_ENTITLEMENT"))
-    throw m();
-  const a = e.price === null ? null : h(e.price);
-  if (a !== null && (!Number.isInteger(a.amountCents) || a.amountCents <= 0 || a.currency !== "CNY") || i.type === "WORK_ENTITLEMENT" != (a !== null))
-    throw m();
+function ae(t) {
+  const e = k(t);
+  if (typeof e.featureKey != "string" || !/^[a-z][a-z0-9_-]{1,63}$/.test(e.featureKey) || typeof e.title != "string" || e.title.trim().length === 0 || e.title.length > 120 || !(e.policyType === "PUBLIC" || e.policyType === "FOLLOW_OWNER" || e.policyType === "WORK_ENTITLEMENT"))
+    throw h();
+  const i = e.price === null ? null : k(e.price);
+  if (i !== null && (!Number.isInteger(i.amountCents) || i.amountCents <= 0 || i.currency !== "CNY") || e.policyType === "WORK_ENTITLEMENT" != (i !== null))
+    throw h();
   return {
     featureKey: e.featureKey,
     title: e.title,
-    policy: { type: i.type },
-    price: a === null ? null : { amountCents: a.amountCents, currency: "CNY" }
+    policy: { type: e.policyType },
+    price: i === null ? null : { amountCents: i.amountCents, currency: "CNY" }
   };
 }
-function F(t) {
-  if (typeof t != "string") throw m();
-  try {
-    const e = new URL(t).origin;
-    if (e !== t) throw m();
-    return e;
-  } catch (e) {
-    throw e instanceof b ? e : m();
-  }
-}
-function j() {
+function ne() {
   const t = crypto.getRandomValues(new Uint8Array(32));
-  return se(t);
+  return oe(t);
 }
-function se(t) {
+function oe(t) {
   let e = "";
   for (const i of t) e += String.fromCharCode(i);
   return btoa(e).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
-function ce() {
+function se() {
   return typeof document < "u" && document.documentElement.lang.toLowerCase() === "en-us" ? "en-US" : "zh-CN";
 }
-function le(t) {
-  const e = async (r, n) => {
-    const o = h(
-      (await t.session.request({
-        method: "POST",
-        path: "/v1/public/v1/auth/exchange",
-        body: { code: r, codeVerifier: n }
-      })).body
-    );
-    if (typeof o.token != "string" || typeof o.expiresAt != "number")
-      throw m();
-    const d = re(o.user);
-    return t.session.authenticate({ token: o.token, expiresAt: o.expiresAt, user: d }), { authenticated: !0, user: d };
-  }, i = () => new b({
+function ce(t) {
+  const e = () => new b({
     code: "AUTH_CANCELLED",
     message: "The interactive action was cancelled.",
     retryable: !1
-  }), a = (r, n, o, d, c) => {
+  }), i = (n, o, u, a, l, v) => {
     if (typeof window > "u")
       throw new b({
         code: "CONFIG_INVALID",
         message: "Interactive access requires a browser window.",
         retryable: !1
       });
-    let p = !0, y, u;
-    const w = () => {
-      p && (p = !1, window.removeEventListener("message", S));
-    }, D = new Promise((g, s) => {
-      y = g, u = s;
-    }), S = (g) => {
-      if (!p || g.origin !== n || typeof g.data != "object" || g.data === null) return;
-      const s = g.data;
-      if (!(s.workKey !== t.workKey || s.channel !== o)) {
-        if (s.type === `viceme:${d}:cancelled`) {
-          w(), u(i());
+    let d = !0, p, E;
+    const y = () => {
+      d && (d = !1, window.removeEventListener("message", s));
+    }, S = new Promise((w, m) => {
+      p = w, E = m;
+    }), s = (w) => {
+      if (!d || w.origin !== o || typeof w.data != "object" || w.data === null) return;
+      const m = w.data;
+      if (!(m.workKey !== t.workKey || m.channel !== u)) {
+        if (m.type === `viceme:${a}:ready`) {
+          w.source && "postMessage" in w.source && w.source.postMessage(
+            {
+              type: `viceme:${a}:init`,
+              workKey: t.workKey,
+              channel: u,
+              ...l
+            },
+            o
+          );
           return;
         }
-        s.type === `viceme:${d}:complete` && (w(), c(s).then(y, u));
+        if (m.type === `viceme:${a}:cancelled`) {
+          y(), E(e());
+          return;
+        }
+        m.type === `viceme:${a}:complete` && (y(), v(m).then(p, E));
       }
     };
-    return window.addEventListener("message", S), {
+    return window.addEventListener("message", s), {
       type: "frame",
-      url: r,
-      completion: D,
+      url: n,
+      completion: S,
       cancel() {
-        w(), y();
+        y(), p();
       }
     };
-  }, l = async (r) => {
-    await t.ready();
-    const n = j(), o = await t.session.request({
-      method: "POST",
-      path: "/v1/public/v1/auth/wechat/authorize",
-      body: {
-        channel: n,
-        // Keep the debuggable QR flow until the embedded WeChat H5 design is restored.
-        clientType: "pc",
-        locale: ce()
-      }
-    }), d = h(o.body);
-    if (typeof d.authorizationUrl != "string") throw m();
-    return a(
-      d.authorizationUrl,
-      F(d.completionOrigin),
+  }, r = async () => {
+    if (await t.ready(), typeof window > "u")
+      throw new b({
+        code: "CONFIG_INVALID",
+        message: "Interactive access requires a browser window.",
+        retryable: !1
+      });
+    const n = ne(), o = new URL("/sdk/login", t.widgetOrigin);
+    o.search = new URLSearchParams({
+      workKey: t.workKey,
+      channel: n,
+      parentOrigin: window.location.origin,
+      locale: se()
+    }).toString();
+    const u = t.session.snapshot?.token;
+    if (!u) throw h();
+    return i(
+      o.toString(),
+      t.widgetOrigin,
       n,
       "auth",
-      async (c) => {
-        if (typeof c.code != "string" || typeof c.codeVerifier != "string")
-          throw m();
-        await e(c.code, c.codeVerifier), await r?.();
+      { workSessionToken: u },
+      async (a) => {
+        if (typeof a.userToken != "string")
+          throw h();
+        t.session.authenticate({ userToken: a.userToken, user: ie(a.user) });
       }
     );
-  }, v = async () => (await t.ready(), G(
-    (await t.session.request({ method: "GET", path: "/v1/public/v1/follow" })).body
-  )), f = async (r) => (await t.ready(), G(
-    (await t.session.request({ method: r, path: "/v1/public/v1/follow" })).body
-  )), U = {
+  }, c = async () => (await t.ready(), F(
+    (await t.session.request({ method: "GET", path: "/v1/public/work-sdk/follow" })).body
+  )), N = async () => (await t.ready(), F(
+    (await t.session.request({ method: "PUT", path: "/v1/public/work-sdk/follow" })).body
+  )), f = {
     async getState() {
       await t.ready();
-      const r = t.session.snapshot?.user ?? null;
-      return { authenticated: r !== null, user: r };
+      const n = t.session.snapshot?.user ?? null;
+      return { authenticated: n !== null, user: n };
     },
     async signIn() {
-      const r = t.presenter ?? _, n = (await v()).target;
-      if (await r({
+      if (await (t.presenter ?? K)({
         featureKey: "auth",
         reason: "AUTH_REQUIRED",
         action: "SIGN_IN",
-        followTarget: n,
-        perform: () => l(async () => {
-          await f("PUT");
-        })
-      }) === "dismissed") throw i();
+        perform: r
+      }) === "dismissed") throw e();
       return this.getState();
     },
     async signOut() {
       await t.ready(), await t.session.signOut();
     }
-  }, E = {
-    getState: v,
-    follow: () => f("PUT"),
-    unfollow: () => f("DELETE")
-  }, T = async (r) => {
+  }, O = {
+    getState: c,
+    follow: N,
+    unfollow: async () => {
+      throw new b({
+        code: "CAPABILITY_DISABLED",
+        message: "Unfollow is not exposed by website access.",
+        retryable: !1
+      });
+    }
+  }, A = async (n) => {
     await t.ready();
-    const n = h(
+    const o = k(
       (await t.session.request({
         method: "POST",
-        path: "/v1/public/v1/access/check",
-        body: { featureKeys: r }
+        path: "/v1/public/work-sdk/access/check",
+        body: { featureKeys: n }
       })).body
-    ), o = h(n.decisions);
+    ), u = k(o.decisions);
     return Object.fromEntries(
-      Object.entries(o).map(([d, c]) => [d, ne(c)])
+      Object.entries(u).map(([a, l]) => [a, re(l)])
     );
-  }, N = async (r, n = {}) => {
+  }, L = async (n, o = {}) => {
     await t.ready();
-    const o = j(), d = {
-      featureKey: r,
-      locale: n.locale ?? "zh-CN",
-      channel: o
-    }, c = h(
+    const u = {
+      featureKey: n,
+      locale: o.locale ?? "zh-CN"
+    }, a = k(
       (await t.session.request({
         method: "POST",
-        path: "/v1/public/v1/checkout/sessions",
-        body: d
+        path: "/v1/public/work-sdk/checkout",
+        body: u
       })).body
     );
-    if (typeof c.checkoutUrl != "string" || typeof c.alreadyOwned != "boolean")
-      throw m();
-    const p = F(c.completionOrigin), y = {
-      checkoutUrl: c.checkoutUrl,
-      alreadyOwned: c.alreadyOwned
-    };
+    if (typeof a.checkoutUrl != "string" || typeof a.alreadyOwned != "boolean" || !(a.expiresAt === null || typeof a.expiresAt == "string" && !Number.isNaN(Date.parse(a.expiresAt))) || a.alreadyOwned !== (a.expiresAt === null))
+      throw h();
+    let l;
+    try {
+      l = new URL(a.checkoutUrl);
+    } catch {
+      throw h();
+    }
+    if (!a.alreadyOwned && (l.protocol !== "https:" || l.origin !== t.widgetOrigin))
+      throw h();
     return {
-      result: y,
-      action: y.alreadyOwned ? { type: "completed" } : a(y.checkoutUrl, p, o, "checkout", async () => {
-      })
+      checkoutUrl: a.checkoutUrl,
+      alreadyOwned: a.alreadyOwned,
+      expiresAt: a.expiresAt
+    };
+  }, T = (n, o) => {
+    if (n.alreadyOwned) return { type: "completed" };
+    const u = Date.parse(n.expiresAt);
+    if (typeof window > "u")
+      throw new b({
+        code: "CONFIG_INVALID",
+        message: "Hosted checkout requires a browser window.",
+        retryable: !1
+      });
+    let a = !0, l, v, d, p;
+    const E = new Promise((g, _) => {
+      d = g, p = _;
+    }), y = () => {
+      l && clearTimeout(l), v && clearTimeout(v), document.removeEventListener("visibilitychange", m);
+    }, S = () => {
+      a && (a = !1, y(), p(
+        new b({
+          code: "SESSION_EXPIRED",
+          message: "Hosted checkout session expired.",
+          retryable: !0
+        })
+      ));
+    }, s = () => {
+      if (!a || document.visibilityState === "hidden") return;
+      const g = u - t.now();
+      if (g <= 0) {
+        S();
+        return;
+      }
+      l = setTimeout(() => {
+        w();
+      }, Math.min(1500, g));
+    }, w = async () => {
+      if (a)
+        try {
+          const g = (await A([o]))[o];
+          if (!g) throw h();
+          if (g.allowed) {
+            a = !1, y(), d();
+            return;
+          }
+          s();
+        } catch (g) {
+          a = !1, y(), p(g);
+        }
+    };
+    function m() {
+      if (a) {
+        if (document.visibilityState === "hidden") {
+          l && clearTimeout(l), l = void 0;
+          return;
+        }
+        s();
+      }
+    }
+    document.addEventListener("visibilitychange", m);
+    const D = u - t.now();
+    return D <= 0 ? S() : (v = setTimeout(S, D), s()), {
+      type: "frame",
+      url: n.checkoutUrl,
+      completion: E,
+      cancel() {
+        a && (a = !1, y(), d());
+      }
     };
   };
-  return { auth: U, follow: E, access: {
+  return { auth: f, follow: O, access: {
     async getFeatures() {
       await t.ready();
-      const r = h(
-        (await t.session.request({ method: "GET", path: "/v1/public/v1/access/features" })).body
+      const n = k(
+        (await t.session.request({
+          method: "GET",
+          path: "/v1/public/work-sdk/access/features"
+        })).body
       );
-      if (!Array.isArray(r.features) || r.features.length > 100)
-        throw m();
-      return r.features.map(oe);
+      if (!Array.isArray(n.features) || n.features.length > 100)
+        throw h();
+      return n.features.map(ae);
     },
-    async check(r) {
-      const o = (await T([r]))[r];
-      if (!o) throw m();
-      return o;
+    async check(n) {
+      const u = (await A([n]))[n];
+      if (!u) throw h();
+      return u;
     },
-    checkMany: T,
-    async require(r) {
-      let n = await this.check(r);
-      const o = t.presenter ?? _;
-      for (let d = 0; !n.allowed && n.nextAction && d < 3; d += 1) {
-        const c = n.nextAction;
-        if (c === "FOLLOW") {
-          await E.follow(), n = await this.check(r);
+    checkMany: A,
+    async require(n) {
+      let o = await this.check(n);
+      const u = t.presenter ?? K;
+      for (let a = 0; !o.allowed && o.nextAction && a < 3; a += 1) {
+        const l = o.nextAction, v = l === "FOLLOW" ? (await O.getState()).target : void 0, d = l === "CHECKOUT" ? await L(n) : void 0;
+        if (d?.alreadyOwned) {
+          o = await this.check(n);
           continue;
         }
-        const p = c === "SIGN_IN" ? (await E.getState()).target : void 0;
-        if (await o({
-          featureKey: r,
-          reason: n.reason,
-          action: c,
-          ...p ? { followTarget: p } : {},
-          perform: async () => c === "SIGN_IN" ? l(async () => {
-            await E.follow();
-          }) : (await N(r)).action
-        }) === "dismissed") return n;
-        n = await this.check(r);
+        if (await u({
+          featureKey: n,
+          reason: o.reason,
+          action: l,
+          ...v ? { followTarget: v } : {},
+          perform: async () => l === "SIGN_IN" ? r() : l === "FOLLOW" ? (await O.follow(), { type: "completed" }) : T(d, n)
+        }) === "dismissed") return o;
+        o = await this.check(n);
       }
-      return n;
+      return o;
     },
     async refresh() {
       await t.ready();
     }
   }, checkout: {
-    async open(r) {
-      const n = t.presenter ?? _;
-      let o;
-      if (await n({
-        featureKey: r.featureKey,
+    async open(n) {
+      const o = await L(n.featureKey, n);
+      if (o.alreadyOwned) return o;
+      if (await (t.presenter ?? K)({
+        featureKey: n.featureKey,
         reason: "PURCHASE_REQUIRED",
         action: "CHECKOUT",
-        perform: async () => {
-          const c = await N(r.featureKey, r);
-          return o = c.result, c.action;
-        }
-      }) === "dismissed" || !o) throw i();
+        perform: async () => T(o, n.featureKey)
+      }) === "dismissed") throw e();
       return o;
     }
   } };
 }
-class de extends DOMException {
+class le extends DOMException {
   constructor() {
     super("ViceMe client destroyed.", "AbortError");
   }
 }
-class he {
-  #e = new X();
+class pe {
+  #e = new Q();
   #t;
   #i;
-  #a = new AbortController();
-  #r;
+  #r = new AbortController();
+  #a;
   auth;
   access;
   checkout;
   /** Detaches the caller-signal listener; undefined when none was attached. */
   #n;
   constructor(e) {
-    this.#i = e.config, this.#t = new ee({
+    this.#i = e.config, this.#t = new J({
       workKey: e.config.workKey,
       transport: e.transport,
-      signal: this.#a.signal,
+      signal: this.#r.signal,
       ...e.now !== void 0 ? { now: e.now } : {}
     });
-    const i = le({
+    const i = ce({
       session: this.#t,
       workKey: e.config.workKey,
+      widgetOrigin: z[e.config.region],
+      now: e.now ?? (() => Date.now()),
       presenter: e.presenter,
-      ready: () => this.ready()
+      ready: () => this.#o()
     });
     this.auth = i.auth, this.access = i.access, this.checkout = i.checkout;
-    const a = e.config.signal;
-    if (a) {
-      const l = () => {
-        this.#a.abort(
-          a.reason instanceof Error ? a.reason : new DOMException("Caller signal aborted.", "AbortError")
+    const r = e.config.signal;
+    if (r) {
+      const c = () => {
+        this.#r.abort(
+          r.reason instanceof Error ? r.reason : new DOMException("Caller signal aborted.", "AbortError")
         );
       };
-      a.aborted ? l() : (a.addEventListener("abort", l, { once: !0 }), this.#n = () => {
-        a.removeEventListener("abort", l);
+      r.aborted ? c() : (r.addEventListener("abort", c, { once: !0 }), this.#n = () => {
+        r.removeEventListener("abort", c);
       });
     }
   }
   get version() {
-    return V;
+    return H;
   }
   get workKey() {
     return this.#i.workKey;
@@ -892,25 +930,24 @@ class he {
   }
   /** Internal: public API major, used by the loader registry namespace. */
   get apiMajor() {
-    return Y;
+    return V;
   }
   ready() {
-    return this.#e.destroyed ? Promise.reject(R()) : (this.#r ??= this.#o(), this.#r);
+    return this.#e.destroyed ? Promise.reject(x()) : (this.#a || (this.#e.transition("READY"), this.#a = Promise.resolve()), this.#a);
   }
   async #o() {
-    if (this.#e.destroyed) throw R();
-    this.#e.transition("INITIALIZING");
+    if (this.#e.destroyed) throw x();
+    await this.ready();
     try {
-      if (await this.#t.establish(), this.#e.destroyed) throw R();
-      this.#e.transition("READY");
+      if (await this.#t.establish(), this.#e.destroyed) throw x();
     } catch (e) {
-      throw this.#e.destroyed ? R() : (this.#e.transition("FAILED"), this.#r = void 0, this.#t.invalidate(), e);
+      throw this.#e.destroyed ? x() : (this.#t.invalidate(), e);
     }
   }
   hasCapability(e) {
     if (this.#e.destroyed) return !1;
     const i = this.#t.snapshot?.work.capabilities;
-    return i !== void 0 && i.includes(e);
+    return e === "danmaku" || e === "tip" || i?.includes(e) === !0;
   }
   /** Names of capabilities enabled for this work (empty before `ready()`). */
   get capabilities() {
@@ -928,14 +965,14 @@ class he {
     return this.#t.snapshot;
   }
   destroy() {
-    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#a.abort(new de()), this.#t.destroy(), this.#e.clearListeners(), this.#r = void 0, this.#n?.(), this.#n = void 0);
+    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#r.abort(new le()), this.#t.destroy(), this.#e.clearListeners(), this.#a = void 0, this.#n?.(), this.#n = void 0);
   }
 }
 export {
-  he as V,
-  Q as a,
+  pe as V,
+  Y as a,
   B as i,
-  ue as r,
-  me as v
+  me as r,
+  he as v
 };
-//# sourceMappingURL=client-DKsaEtwq.js.map
+//# sourceMappingURL=client-w9vih8Ng.js.map