@viceme-ai/sdk 0.4.0 → 0.6.1

package/dist/chunks/{client-Cbldd7F2.js → client-w9vih8Ng.js}

@@ -1,31 +1,34 @@
-import { b as M, a as T, V as w, c as C, i as G, B as W } from "./errors-B-Qv_azy.js";
-import { S as z, A as H } from "./version-C8DeBm39.js";
-const V = /* @__PURE__ */ new Set(["cn", "global"]), j = {
-  cn: M.cn,
-  global: M.global
+import { a as C, V as b, c as x, i as G } from "./errors-C7DfLKcF.js";
+import { a as q, B as z } from "./build-endpoints-NrDmg6jf.js";
+import { S as H, A as V } from "./version-uPTHb89K.js";
+const W = /* @__PURE__ */ new Set(["cn", "global"]), j = {
+  cn: q.cn,
+  global: q.global
 };
-function fe(t) {
+function me(t) {
   return j[t];
 }
 function B(t) {
-  return typeof t == "string" && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(t);
+  return typeof t == "string" && /^wrk_(?:test|live)_[A-Za-z0-9_-]{4,119}$/.test(t);
 }
 function Y(t) {
-  return typeof t == "string" && V.has(t);
+  return typeof t == "string" && W.has(t);
 }
-function me(t) {
+function he(t) {
   if (typeof t != "object" || t === null)
-    throw T("createViceMe expects a configuration object.");
+    throw C("createViceMe expects a configuration object.");
   const e = t, i = /* @__PURE__ */ new Set(["workKey", "region", "signal"]);
-  for (const a of Object.keys(e))
-    if (!i.has(a))
-      throw T(`Unknown configuration field "${a}".`);
+  for (const r of Object.keys(e))
+    if (!i.has(r))
+      throw C(`Unknown configuration field "${r}".`);
   if (!B(e.workKey))
-    throw T('Configuration field "workKey" must be a public work key ("wrk_…").');
+    throw C(
+      'Configuration field "workKey" must start with "wrk_test_" or "wrk_live_".'
+    );
   if (!Y(e.region))
-    throw T('Configuration field "region" must be "cn" or "global".');
+    throw C('Configuration field "region" must be "cn" or "global".');
   if (e.signal !== void 0 && !(e.signal instanceof AbortSignal))
-    throw T('Configuration field "signal" must be an AbortSignal.');
+    throw C('Configuration field "signal" must be an AbortSignal.');
   return {
     workKey: e.workKey,
     region: e.region,
@@ -50,7 +53,7 @@ class Q {
   transition(e) {
     if (e !== this.#e) {
       if (!$[this.#e].includes(e))
-        throw new w({
+        throw new b({
           code: "INTERNAL_ERROR",
           message: `Illegal lifecycle transition ${this.#e} -> ${e}.`,
           retryable: !1
@@ -61,7 +64,7 @@ class Q {
   }
   /** Any operation on a destroyed client must fail closed with this guard. */
   assertAlive() {
-    if (this.destroyed) throw C();
+    if (this.destroyed) throw x();
   }
   subscribe(e) {
     return this.#t.add(e), () => {
@@ -79,25 +82,25 @@ function X(t, e) {
   if (typeof i.workKey != "string" || !Array.isArray(i.capabilities) || !i.capabilities.every((c) => typeof c == "string"))
     throw R();
   if (i.workKey !== e)
-    throw new w({
+    throw new b({
       code: "WORK_NOT_FOUND",
       message: "Work-session response did not match the requested work key.",
       retryable: !1
     });
-  const a = {
+  const r = {
     work: {
       key: i.workKey,
       capabilities: i.capabilities
     }
   };
-  if (typeof i.token == "string" && (a.token = i.token), typeof i.expiresAt == "string") {
+  if (typeof i.token == "string" && (r.token = i.token), typeof i.expiresAt == "string") {
     const c = new Date(i.expiresAt).getTime();
-    Number.isNaN(c) || (a.expiresAt = c);
+    Number.isNaN(c) || (r.expiresAt = c);
   }
-  return a;
+  return r;
 }
 function R() {
-  return new w({
+  return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed work-session response.",
     retryable: !0
@@ -107,7 +110,7 @@ class J {
   #e;
   #t;
   #i;
-  #a;
+  #r;
   constructor(e) {
     this.#e = e, this.#t = e.now ?? (() => Date.now());
   }
@@ -115,7 +118,7 @@ class J {
     return this.#i;
   }
   /** True when the cached snapshot's server-provided expiry has passed. */
-  #r() {
+  #a() {
     const e = this.#i?.expiresAt;
     return e !== void 0 && e <= this.#t();
   }
@@ -128,10 +131,10 @@ class J {
    */
   establish() {
     if (this.#i) {
-      if (!this.#r()) return Promise.resolve(this.#i);
+      if (!this.#a()) return Promise.resolve(this.#i);
       this.#i = void 0;
     }
-    return this.#a ??= this.#e.transport.request({
+    return this.#r ??= this.#e.transport.request({
       method: "POST",
       path: "/v1/public/work-sdk/sessions",
       body: { workKey: this.#e.workKey },
@@ -141,8 +144,8 @@ class J {
       const i = X(e.body, this.#e.workKey);
       return this.#i = i, i;
     }).finally(() => {
-      this.#a = void 0;
-    }), this.#a;
+      this.#r = void 0;
+    }), this.#r;
   }
   async request(e) {
     const i = await this.establish();
@@ -154,8 +157,8 @@ class J {
         userAuthorization: i.userToken,
         signal: this.#e.signal
       });
-    } catch (a) {
-      if (!(a instanceof w) || a.code !== "SESSION_EXPIRED") throw a;
+    } catch (r) {
+      if (!(r instanceof b) || r.code !== "SESSION_EXPIRED") throw r;
       this.#i === i && this.invalidate();
       const c = await this.establish();
       if (!c.token) throw R();
@@ -184,10 +187,10 @@ class J {
   }
   /** Hard cleanup: forget the token and pending work. */
   destroy() {
-    this.invalidate(), this.#a = void 0;
+    this.invalidate(), this.#r = void 0;
   }
 }
-const _ = "viceme-access-layer", D = 50;
+const M = "viceme-access-layer", U = 50;
 function Z(t) {
   switch (t) {
     case "SIGN_IN":
@@ -223,12 +226,12 @@ function ee(t) {
   }
 }
 function te() {
-  if (customElements.get(_)) return;
+  if (customElements.get(M)) return;
   class t extends HTMLElement {
     interaction;
     connectedCallback() {
-      const i = Z(this.interaction.action), a = this.attachShadow({ mode: "open" });
-      a.innerHTML = `
+      const i = Z(this.interaction.action), r = this.attachShadow({ mode: "open" });
+      r.innerHTML = `
         <style>
           :host {
             position: fixed;
@@ -409,6 +412,9 @@ function te() {
             }
             [data-viceme='panel'][data-frame='true'] { width: min(30rem, 100%); }
             [data-viceme='panel'][data-action='SIGN_IN'] { width: min(30rem, 100%); }
+            [data-viceme='panel'][data-action='CHECKOUT'][data-frame='true'] {
+              width: min(42rem, 100%);
+            }
           }
           @media (prefers-reduced-motion: no-preference) {
             [data-viceme='panel'] { animation: viceme-enter 160ms ease-out; }
@@ -440,105 +446,105 @@ function te() {
           <iframe data-viceme="frame" title="" referrerpolicy="no-referrer" allow="payment"></iframe>
         </section>
       `;
-      const c = a.querySelector("[data-viceme='panel']");
+      const c = r.querySelector("[data-viceme='panel']");
       c.dataset.action = this.interaction.action, c.dataset.frame = "false";
-      const S = a.querySelector("[data-viceme='description']");
-      S.textContent = i.description;
-      const u = a.querySelector("[data-viceme='action']"), A = u.parentElement, E = a.querySelector("[data-viceme='close']"), L = a.querySelector("[data-viceme='backdrop']"), N = a.querySelector("[data-viceme='error']"), I = a.querySelector("[data-viceme='frame']"), U = a.querySelector("[data-viceme='profile']"), r = a.querySelector("[data-viceme='avatar']"), o = a.querySelector("[data-viceme='avatar-fallback']"), l = a.querySelector("[data-viceme='profile-name']"), n = a.querySelector(
+      const N = r.querySelector("[data-viceme='description']");
+      N.textContent = i.description;
+      const f = r.querySelector("[data-viceme='action']"), O = f.parentElement, A = r.querySelector("[data-viceme='close']"), L = r.querySelector("[data-viceme='backdrop']"), T = r.querySelector("[data-viceme='error']"), I = r.querySelector("[data-viceme='frame']"), P = r.querySelector("[data-viceme='profile']"), n = r.querySelector("[data-viceme='avatar']"), o = r.querySelector("[data-viceme='avatar-fallback']"), u = r.querySelector("[data-viceme='profile-name']"), a = r.querySelector(
         "[data-viceme='profile-description']"
-      ), f = a.querySelector("[data-viceme='profile-stats']");
-      u.textContent = i.label, u.hidden = !1, A.dataset.single = "true";
-      const b = i.label;
+      ), l = r.querySelector("[data-viceme='profile-stats']");
+      f.textContent = i.label, f.hidden = !1, O.dataset.single = "true";
+      const v = i.label;
       I.title = this.interaction.action === "SIGN_IN" ? "登录授权" : "支付";
       const d = this.interaction.followTarget;
       if (d) {
         c.setAttribute(
           "aria-label",
           this.interaction.action === "SIGN_IN" ? `授权 ${d.displayName}` : `关注 ${d.displayName}`
-        ), U.dataset.visible = "true", l.textContent = d.displayName;
+        ), P.dataset.visible = "true", u.textContent = d.displayName;
         const s = [...d.description ?? ""];
-        n.textContent = s.length > D ? `${s.slice(0, D).join("")}…` : s.join(""), s.length > D && (n.title = d.description), f.textContent = `${d.workCount} 个作品`, o.textContent = d.displayName.trim().slice(0, 1) || "V", d.avatarUrl && (r.src = d.avatarUrl, r.alt = `${d.displayName}的头像`, r.hidden = !1, o.hidden = !0);
+        a.textContent = s.length > U ? `${s.slice(0, U).join("")}…` : s.join(""), s.length > U && (a.title = d.description), l.textContent = `${d.workCount} 个作品`, o.textContent = d.displayName.trim().slice(0, 1) || "V", d.avatarUrl && (n.src = d.avatarUrl, n.alt = `${d.displayName}的头像`, n.hidden = !1, o.hidden = !0);
       }
-      let y = null;
-      const k = (s) => {
+      let p = null;
+      const E = (s) => {
         this.dispatchEvent(new CustomEvent("viceme:access-layer-close", { detail: s }));
-      }, h = () => {
-        y?.cancel(), k("dismissed");
+      }, y = () => {
+        p?.cancel(), E("dismissed");
       };
-      L.addEventListener("click", h), E.addEventListener("click", h), this.addEventListener("keydown", (s) => {
-        if (s.key === "Escape" && h(), s.key === "Tab") {
-          if (s.preventDefault(), y?.type === "frame") {
+      L.addEventListener("click", y), A.addEventListener("click", y), this.addEventListener("keydown", (s) => {
+        if (s.key === "Escape" && y(), s.key === "Tab") {
+          if (s.preventDefault(), p?.type === "frame") {
             I.focus();
             return;
           }
-          const p = [E, ...u.hidden ? [] : [u]].filter((K) => !K.disabled && !K.hidden);
-          if (p.length === 0) return;
-          const q = p.indexOf(a.activeElement), F = s.shiftKey ? -1 : 1;
-          p[(q + F + p.length) % p.length]?.focus();
+          const m = [A, ...f.hidden ? [] : [f]].filter((_) => !_.disabled && !_.hidden);
+          if (m.length === 0) return;
+          const D = m.indexOf(r.activeElement), g = s.shiftKey ? -1 : 1;
+          m[(D + g + m.length) % m.length]?.focus();
         }
       });
-      const O = async () => {
-        u.disabled = !0, u.setAttribute("aria-busy", "true"), u.textContent = "正在打开…", N.textContent = "";
+      const S = async () => {
+        f.disabled = !0, f.setAttribute("aria-busy", "true"), f.textContent = "正在打开…", T.textContent = "";
         try {
           const s = await this.interaction.perform();
-          s.type === "frame" ? (y = s, c.dataset.frame = "true", I.src = s.url, I.focus(), await s.completion) : s.type === "external" && (y = s, await s.completion), k("acted");
+          s.type === "frame" ? (p = s, c.dataset.frame = "true", I.src = s.url, I.focus(), await s.completion) : s.type === "external" && (p = s, await s.completion), E("acted");
         } catch (s) {
-          y?.cancel(), y = null, c.dataset.frame = "false", I.removeAttribute("src"), N.textContent = ee(s), u.hidden = !1, u.disabled = !1, u.removeAttribute("aria-busy"), u.textContent = b, u.focus();
+          p?.cancel(), p = null, c.dataset.frame = "false", I.removeAttribute("src"), T.textContent = ee(s), f.hidden = !1, f.disabled = !1, f.removeAttribute("aria-busy"), f.textContent = v, f.focus();
         }
       };
-      u.addEventListener("click", O), queueMicrotask(() => u.focus());
+      f.addEventListener("click", S), queueMicrotask(() => f.focus());
     }
   }
-  customElements.define(_, t);
+  customElements.define(M, t);
 }
-const x = async (t) => {
+const K = async (t) => {
   if (typeof document > "u" || typeof customElements > "u")
     return "dismissed";
   te();
-  const e = document.createElement(_);
+  const e = document.createElement(M);
   e.interaction = t;
-  const i = document.documentElement.style.overflow, a = document.activeElement instanceof HTMLElement ? document.activeElement : null;
+  const i = document.documentElement.style.overflow, r = document.activeElement instanceof HTMLElement ? document.activeElement : null;
   document.documentElement.style.overflow = "hidden", document.body.append(e);
   try {
     return await new Promise((c) => {
       e.addEventListener(
         "viceme:access-layer-close",
-        (S) => c(S.detail),
+        (N) => c(N.detail),
         { once: !0 }
       );
     });
   } finally {
-    e.remove(), document.documentElement.style.overflow = i, a?.focus();
+    e.remove(), document.documentElement.style.overflow = i, r?.focus();
   }
 };
-function v(t) {
-  if (typeof t != "object" || t === null) throw m();
+function k(t) {
+  if (typeof t != "object" || t === null) throw h();
   return t;
 }
-function m() {
-  return new w({
+function h() {
+  return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed public API response.",
     retryable: !0
   });
 }
 function ie(t) {
-  const e = v(t);
+  const e = k(t);
   if (typeof e.id != "string" || !(typeof e.displayName == "string" || e.displayName === null) || !(typeof e.avatarUrl == "string" || e.avatarUrl === null))
-    throw m();
+    throw h();
   return {
     subject: e.id,
     nickname: e.displayName,
     avatarUrl: e.avatarUrl
   };
 }
-function P(t) {
-  const e = v(t);
+function F(t) {
+  const e = k(t);
   if (typeof e.following != "boolean" || !(typeof e.followedAt == "string" || e.followedAt === null))
-    throw m();
-  const i = v(e.creator);
+    throw h();
+  const i = k(e.creator);
   if (typeof i.displayName != "string" || !(typeof i.avatarUrl == "string" || i.avatarUrl === null) || !(typeof i.description == "string" || i.description === null) || !Number.isInteger(i.publishedWorkCount) || i.publishedWorkCount < 0)
-    throw m();
+    throw h();
   return {
     following: e.following,
     followedAt: e.followedAt,
@@ -551,8 +557,8 @@ function P(t) {
     }
   };
 }
-function ae(t) {
-  const e = v(t), i = /* @__PURE__ */ new Set([
+function re(t) {
+  const e = k(t), i = /* @__PURE__ */ new Set([
     "PUBLIC",
     "OWNER",
     "FOLLOWING",
@@ -562,22 +568,22 @@ function ae(t) {
     "PURCHASE_REQUIRED",
     "FEATURE_NOT_FOUND",
     "FEATURE_DISABLED"
-  ]), a = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
-  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !a.has(e.nextAction))
-    throw m();
+  ]), r = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
+  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !r.has(e.nextAction))
+    throw h();
   return {
     allowed: e.allowed,
     reason: e.reason,
     nextAction: e.nextAction
   };
 }
-function re(t) {
-  const e = v(t);
+function ae(t) {
+  const e = k(t);
   if (typeof e.featureKey != "string" || !/^[a-z][a-z0-9_-]{1,63}$/.test(e.featureKey) || typeof e.title != "string" || e.title.trim().length === 0 || e.title.length > 120 || !(e.policyType === "PUBLIC" || e.policyType === "FOLLOW_OWNER" || e.policyType === "WORK_ENTITLEMENT"))
-    throw m();
-  const i = e.price === null ? null : v(e.price);
+    throw h();
+  const i = e.price === null ? null : k(e.price);
   if (i !== null && (!Number.isInteger(i.amountCents) || i.amountCents <= 0 || i.currency !== "CNY") || e.policyType === "WORK_ENTITLEMENT" != (i !== null))
-    throw m();
+    throw h();
   return {
     featureKey: e.featureKey,
     title: e.title,
@@ -585,11 +591,11 @@ function re(t) {
     price: i === null ? null : { amountCents: i.amountCents, currency: "CNY" }
   };
 }
-function oe() {
+function ne() {
   const t = crypto.getRandomValues(new Uint8Array(32));
-  return ne(t);
+  return oe(t);
 }
-function ne(t) {
+function oe(t) {
   let e = "";
   for (const i of t) e += String.fromCharCode(i);
   return btoa(e).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
@@ -598,232 +604,254 @@ function se() {
   return typeof document < "u" && document.documentElement.lang.toLowerCase() === "en-us" ? "en-US" : "zh-CN";
 }
 function ce(t) {
-  const e = () => new w({
+  const e = () => new b({
     code: "AUTH_CANCELLED",
     message: "The interactive action was cancelled.",
     retryable: !1
-  }), i = (r, o, l, n, f, b) => {
+  }), i = (n, o, u, a, l, v) => {
     if (typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Interactive access requires a browser window.",
         retryable: !1
       });
-    let d = !0, y, k;
-    const h = () => {
+    let d = !0, p, E;
+    const y = () => {
       d && (d = !1, window.removeEventListener("message", s));
-    }, O = new Promise((g, p) => {
-      y = g, k = p;
-    }), s = (g) => {
-      if (!d || g.origin !== o || typeof g.data != "object" || g.data === null) return;
-      const p = g.data;
-      if (!(p.workKey !== t.workKey || p.channel !== l)) {
-        if (p.type === `viceme:${n}:ready`) {
-          g.source && "postMessage" in g.source && g.source.postMessage(
+    }, S = new Promise((w, m) => {
+      p = w, E = m;
+    }), s = (w) => {
+      if (!d || w.origin !== o || typeof w.data != "object" || w.data === null) return;
+      const m = w.data;
+      if (!(m.workKey !== t.workKey || m.channel !== u)) {
+        if (m.type === `viceme:${a}:ready`) {
+          w.source && "postMessage" in w.source && w.source.postMessage(
             {
-              type: `viceme:${n}:init`,
+              type: `viceme:${a}:init`,
               workKey: t.workKey,
-              channel: l,
-              ...f
+              channel: u,
+              ...l
             },
             o
           );
           return;
         }
-        if (p.type === `viceme:${n}:cancelled`) {
-          h(), k(e());
+        if (m.type === `viceme:${a}:cancelled`) {
+          y(), E(e());
           return;
         }
-        p.type === `viceme:${n}:complete` && (h(), b(p).then(y, k));
+        m.type === `viceme:${a}:complete` && (y(), v(m).then(p, E));
       }
     };
     return window.addEventListener("message", s), {
       type: "frame",
-      url: r,
-      completion: O,
+      url: n,
+      completion: S,
       cancel() {
-        h(), y();
+        y(), p();
       }
     };
-  }, a = async () => {
+  }, r = async () => {
     if (await t.ready(), typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Interactive access requires a browser window.",
         retryable: !1
       });
-    const r = oe(), o = new URL("/sdk/login", t.widgetOrigin);
+    const n = ne(), o = new URL("/sdk/login", t.widgetOrigin);
     o.search = new URLSearchParams({
       workKey: t.workKey,
-      channel: r,
+      channel: n,
       parentOrigin: window.location.origin,
       locale: se()
     }).toString();
-    const l = t.session.snapshot?.token;
-    if (!l) throw m();
+    const u = t.session.snapshot?.token;
+    if (!u) throw h();
     return i(
       o.toString(),
       t.widgetOrigin,
-      r,
+      n,
       "auth",
-      { workSessionToken: l },
-      async (n) => {
-        if (typeof n.userToken != "string")
-          throw m();
-        t.session.authenticate({ userToken: n.userToken, user: ie(n.user) });
+      { workSessionToken: u },
+      async (a) => {
+        if (typeof a.userToken != "string")
+          throw h();
+        t.session.authenticate({ userToken: a.userToken, user: ie(a.user) });
       }
     );
-  }, c = async () => (await t.ready(), P(
+  }, c = async () => (await t.ready(), F(
     (await t.session.request({ method: "GET", path: "/v1/public/work-sdk/follow" })).body
-  )), S = async () => (await t.ready(), P(
+  )), N = async () => (await t.ready(), F(
     (await t.session.request({ method: "PUT", path: "/v1/public/work-sdk/follow" })).body
-  )), u = {
+  )), f = {
     async getState() {
       await t.ready();
-      const r = t.session.snapshot?.user ?? null;
-      return { authenticated: r !== null, user: r };
+      const n = t.session.snapshot?.user ?? null;
+      return { authenticated: n !== null, user: n };
     },
     async signIn() {
-      if (await (t.presenter ?? x)({
+      if (await (t.presenter ?? K)({
         featureKey: "auth",
         reason: "AUTH_REQUIRED",
         action: "SIGN_IN",
-        perform: a
+        perform: r
       }) === "dismissed") throw e();
       return this.getState();
     },
     async signOut() {
       await t.ready(), await t.session.signOut();
     }
-  }, A = {
+  }, O = {
     getState: c,
-    follow: S,
+    follow: N,
     unfollow: async () => {
-      throw new w({
+      throw new b({
         code: "CAPABILITY_DISABLED",
         message: "Unfollow is not exposed by website access.",
         retryable: !1
       });
     }
-  }, E = async (r) => {
+  }, A = async (n) => {
     await t.ready();
-    const o = v(
+    const o = k(
       (await t.session.request({
         method: "POST",
         path: "/v1/public/work-sdk/access/check",
-        body: { featureKeys: r }
+        body: { featureKeys: n }
       })).body
-    ), l = v(o.decisions);
+    ), u = k(o.decisions);
     return Object.fromEntries(
-      Object.entries(l).map(([n, f]) => [n, ae(f)])
+      Object.entries(u).map(([a, l]) => [a, re(l)])
     );
-  }, L = async (r, o = {}) => {
+  }, L = async (n, o = {}) => {
     await t.ready();
-    const l = {
-      featureKey: r,
+    const u = {
+      featureKey: n,
       locale: o.locale ?? "zh-CN"
-    }, n = v(
+    }, a = k(
       (await t.session.request({
         method: "POST",
         path: "/v1/public/work-sdk/checkout",
-        body: l
+        body: u
       })).body
     );
-    if (typeof n.checkoutUrl != "string" || typeof n.alreadyOwned != "boolean")
-      throw m();
+    if (typeof a.checkoutUrl != "string" || typeof a.alreadyOwned != "boolean" || !(a.expiresAt === null || typeof a.expiresAt == "string" && !Number.isNaN(Date.parse(a.expiresAt))) || a.alreadyOwned !== (a.expiresAt === null))
+      throw h();
+    let l;
     try {
-      new URL(n.checkoutUrl);
+      l = new URL(a.checkoutUrl);
     } catch {
-      throw m();
+      throw h();
     }
+    if (!a.alreadyOwned && (l.protocol !== "https:" || l.origin !== t.widgetOrigin))
+      throw h();
     return {
-      checkoutUrl: n.checkoutUrl,
-      alreadyOwned: n.alreadyOwned
+      checkoutUrl: a.checkoutUrl,
+      alreadyOwned: a.alreadyOwned,
+      expiresAt: a.expiresAt
     };
-  }, N = (r, o) => {
-    if (r.alreadyOwned) return { type: "completed" };
+  }, T = (n, o) => {
+    if (n.alreadyOwned) return { type: "completed" };
+    const u = Date.parse(n.expiresAt);
     if (typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Hosted checkout requires a browser window.",
         retryable: !1
       });
-    const l = window.open(r.checkoutUrl, "_blank", "popup,width=520,height=760");
-    if (!l)
-      throw new w({
-        code: "AUTH_CANCELLED",
-        message: "The hosted checkout window was blocked.",
-        retryable: !1
-      });
-    let n = !0, f, b, d;
-    const y = new Promise((h, O) => {
-      b = h, d = O;
-    }), k = async () => {
-      if (n)
+    let a = !0, l, v, d, p;
+    const E = new Promise((g, _) => {
+      d = g, p = _;
+    }), y = () => {
+      l && clearTimeout(l), v && clearTimeout(v), document.removeEventListener("visibilitychange", m);
+    }, S = () => {
+      a && (a = !1, y(), p(
+        new b({
+          code: "SESSION_EXPIRED",
+          message: "Hosted checkout session expired.",
+          retryable: !0
+        })
+      ));
+    }, s = () => {
+      if (!a || document.visibilityState === "hidden") return;
+      const g = u - t.now();
+      if (g <= 0) {
+        S();
+        return;
+      }
+      l = setTimeout(() => {
+        w();
+      }, Math.min(1500, g));
+    }, w = async () => {
+      if (a)
         try {
-          const h = (await E([o]))[o];
-          if (!h) throw m();
-          if (h.allowed) {
-            n = !1, l.close(), b();
-            return;
-          }
-          if (l.closed) {
-            n = !1, d(e());
+          const g = (await A([o]))[o];
+          if (!g) throw h();
+          if (g.allowed) {
+            a = !1, y(), d();
             return;
           }
-          f = setTimeout(() => {
-            k();
-          }, 1500);
-        } catch (h) {
-          n = !1, d(h);
+          s();
+        } catch (g) {
+          a = !1, y(), p(g);
         }
     };
-    return f = setTimeout(() => {
-      k();
-    }, 1500), {
-      type: "external",
-      completion: y,
+    function m() {
+      if (a) {
+        if (document.visibilityState === "hidden") {
+          l && clearTimeout(l), l = void 0;
+          return;
+        }
+        s();
+      }
+    }
+    document.addEventListener("visibilitychange", m);
+    const D = u - t.now();
+    return D <= 0 ? S() : (v = setTimeout(S, D), s()), {
+      type: "frame",
+      url: n.checkoutUrl,
+      completion: E,
       cancel() {
-        n && (n = !1, f && clearTimeout(f), l.close(), b());
+        a && (a = !1, y(), d());
       }
     };
   };
-  return { auth: u, follow: A, access: {
+  return { auth: f, follow: O, access: {
     async getFeatures() {
       await t.ready();
-      const r = v(
+      const n = k(
         (await t.session.request({
           method: "GET",
           path: "/v1/public/work-sdk/access/features"
         })).body
       );
-      if (!Array.isArray(r.features) || r.features.length > 100)
-        throw m();
-      return r.features.map(re);
+      if (!Array.isArray(n.features) || n.features.length > 100)
+        throw h();
+      return n.features.map(ae);
     },
-    async check(r) {
-      const l = (await E([r]))[r];
-      if (!l) throw m();
-      return l;
+    async check(n) {
+      const u = (await A([n]))[n];
+      if (!u) throw h();
+      return u;
     },
-    checkMany: E,
-    async require(r) {
-      let o = await this.check(r);
-      const l = t.presenter ?? x;
-      for (let n = 0; !o.allowed && o.nextAction && n < 3; n += 1) {
-        const f = o.nextAction, b = f === "FOLLOW" ? (await A.getState()).target : void 0, d = f === "CHECKOUT" ? await L(r) : void 0;
+    checkMany: A,
+    async require(n) {
+      let o = await this.check(n);
+      const u = t.presenter ?? K;
+      for (let a = 0; !o.allowed && o.nextAction && a < 3; a += 1) {
+        const l = o.nextAction, v = l === "FOLLOW" ? (await O.getState()).target : void 0, d = l === "CHECKOUT" ? await L(n) : void 0;
         if (d?.alreadyOwned) {
-          o = await this.check(r);
+          o = await this.check(n);
           continue;
         }
-        if (await l({
-          featureKey: r,
+        if (await u({
+          featureKey: n,
           reason: o.reason,
-          action: f,
-          ...b ? { followTarget: b } : {},
-          perform: async () => f === "SIGN_IN" ? a() : f === "FOLLOW" ? (await A.follow(), { type: "completed" }) : N(d, r)
+          action: l,
+          ...v ? { followTarget: v } : {},
+          perform: async () => l === "SIGN_IN" ? r() : l === "FOLLOW" ? (await O.follow(), { type: "completed" }) : T(d, n)
         }) === "dismissed") return o;
-        o = await this.check(r);
+        o = await this.check(n);
       }
       return o;
     },
@@ -831,14 +859,14 @@ function ce(t) {
       await t.ready();
     }
   }, checkout: {
-    async open(r) {
-      const o = await L(r.featureKey, r);
+    async open(n) {
+      const o = await L(n.featureKey, n);
       if (o.alreadyOwned) return o;
-      if (await (t.presenter ?? x)({
-        featureKey: r.featureKey,
+      if (await (t.presenter ?? K)({
+        featureKey: n.featureKey,
         reason: "PURCHASE_REQUIRED",
         action: "CHECKOUT",
-        perform: async () => N(o, r.featureKey)
+        perform: async () => T(o, n.featureKey)
       }) === "dismissed") throw e();
       return o;
     }
@@ -849,46 +877,47 @@ class le extends DOMException {
     super("ViceMe client destroyed.", "AbortError");
   }
 }
-class he {
+class pe {
   #e = new Q();
   #t;
   #i;
-  #a = new AbortController();
-  #r;
+  #r = new AbortController();
+  #a;
   auth;
   access;
   checkout;
   /** Detaches the caller-signal listener; undefined when none was attached. */
-  #o;
+  #n;
   constructor(e) {
     this.#i = e.config, this.#t = new J({
       workKey: e.config.workKey,
       transport: e.transport,
-      signal: this.#a.signal,
+      signal: this.#r.signal,
       ...e.now !== void 0 ? { now: e.now } : {}
     });
     const i = ce({
       session: this.#t,
       workKey: e.config.workKey,
-      widgetOrigin: W[e.config.region],
+      widgetOrigin: z[e.config.region],
+      now: e.now ?? (() => Date.now()),
       presenter: e.presenter,
-      ready: () => this.#n()
+      ready: () => this.#o()
     });
     this.auth = i.auth, this.access = i.access, this.checkout = i.checkout;
-    const a = e.config.signal;
-    if (a) {
+    const r = e.config.signal;
+    if (r) {
       const c = () => {
-        this.#a.abort(
-          a.reason instanceof Error ? a.reason : new DOMException("Caller signal aborted.", "AbortError")
+        this.#r.abort(
+          r.reason instanceof Error ? r.reason : new DOMException("Caller signal aborted.", "AbortError")
         );
       };
-      a.aborted ? c() : (a.addEventListener("abort", c, { once: !0 }), this.#o = () => {
-        a.removeEventListener("abort", c);
+      r.aborted ? c() : (r.addEventListener("abort", c, { once: !0 }), this.#n = () => {
+        r.removeEventListener("abort", c);
       });
     }
   }
   get version() {
-    return z;
+    return H;
   }
   get workKey() {
     return this.#i.workKey;
@@ -901,18 +930,18 @@ class he {
   }
   /** Internal: public API major, used by the loader registry namespace. */
   get apiMajor() {
-    return H;
+    return V;
   }
   ready() {
-    return this.#e.destroyed ? Promise.reject(C()) : (this.#r || (this.#e.transition("READY"), this.#r = Promise.resolve()), this.#r);
+    return this.#e.destroyed ? Promise.reject(x()) : (this.#a || (this.#e.transition("READY"), this.#a = Promise.resolve()), this.#a);
   }
-  async #n() {
-    if (this.#e.destroyed) throw C();
+  async #o() {
+    if (this.#e.destroyed) throw x();
     await this.ready();
     try {
-      if (await this.#t.establish(), this.#e.destroyed) throw C();
+      if (await this.#t.establish(), this.#e.destroyed) throw x();
     } catch (e) {
-      throw this.#e.destroyed ? C() : (this.#t.invalidate(), e);
+      throw this.#e.destroyed ? x() : (this.#t.invalidate(), e);
     }
   }
   hasCapability(e) {
@@ -936,14 +965,14 @@ class he {
     return this.#t.snapshot;
   }
   destroy() {
-    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#a.abort(new le()), this.#t.destroy(), this.#e.clearListeners(), this.#r = void 0, this.#o?.(), this.#o = void 0);
+    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#r.abort(new le()), this.#t.destroy(), this.#e.clearListeners(), this.#a = void 0, this.#n?.(), this.#n = void 0);
   }
 }
 export {
-  he as V,
+  pe as V,
   Y as a,
   B as i,
-  fe as r,
-  me as v
+  me as r,
+  he as v
 };
-//# sourceMappingURL=client-Cbldd7F2.js.map
+//# sourceMappingURL=client-w9vih8Ng.js.map