@viceme-ai/sdk 0.4.0 → 0.6.2

package/dist/chunks/{client-Cbldd7F2.js → client-DEg6YouY.js}

@@ -1,31 +1,34 @@
-import { b as M, a as T, V as w, c as C, i as G, B as W } from "./errors-B-Qv_azy.js";
-import { S as z, A as H } from "./version-C8DeBm39.js";
-const V = /* @__PURE__ */ new Set(["cn", "global"]), j = {
-  cn: M.cn,
-  global: M.global
+import { a as L, V as b, c as v, i as G } from "./errors-C7DfLKcF.js";
+import { a as q, B as j } from "./build-endpoints-NrDmg6jf.js";
+import { S as W, A as H } from "./version-BJiUVcir.js";
+const V = /* @__PURE__ */ new Set(["cn", "global"]), z = {
+  cn: q.cn,
+  global: q.global
 };
-function fe(t) {
-  return j[t];
+function pe(t) {
+  return z[t];
 }
 function B(t) {
-  return typeof t == "string" && /^wrk_[A-Za-z0-9_-]{4,124}$/.test(t);
+  return typeof t == "string" && /^wrk_(?:test|live)_[A-Za-z0-9_-]{4,119}$/.test(t);
 }
 function Y(t) {
   return typeof t == "string" && V.has(t);
 }
-function me(t) {
+function ye(t) {
   if (typeof t != "object" || t === null)
-    throw T("createViceMe expects a configuration object.");
+    throw L("createViceMe expects a configuration object.");
   const e = t, i = /* @__PURE__ */ new Set(["workKey", "region", "signal"]);
-  for (const a of Object.keys(e))
-    if (!i.has(a))
-      throw T(`Unknown configuration field "${a}".`);
+  for (const r of Object.keys(e))
+    if (!i.has(r))
+      throw L(`Unknown configuration field "${r}".`);
   if (!B(e.workKey))
-    throw T('Configuration field "workKey" must be a public work key ("wrk_…").');
+    throw L(
+      'Configuration field "workKey" must start with "wrk_test_" or "wrk_live_".'
+    );
   if (!Y(e.region))
-    throw T('Configuration field "region" must be "cn" or "global".');
+    throw L('Configuration field "region" must be "cn" or "global".');
   if (e.signal !== void 0 && !(e.signal instanceof AbortSignal))
-    throw T('Configuration field "signal" must be an AbortSignal.');
+    throw L('Configuration field "signal" must be an AbortSignal.');
   return {
     workKey: e.workKey,
     region: e.region,
@@ -50,7 +53,7 @@ class Q {
   transition(e) {
     if (e !== this.#e) {
       if (!$[this.#e].includes(e))
-        throw new w({
+        throw new b({
           code: "INTERNAL_ERROR",
           message: `Illegal lifecycle transition ${this.#e} -> ${e}.`,
           retryable: !1
@@ -61,7 +64,7 @@ class Q {
   }
   /** Any operation on a destroyed client must fail closed with this guard. */
   assertAlive() {
-    if (this.destroyed) throw C();
+    if (this.destroyed) throw v();
   }
   subscribe(e) {
     return this.#t.add(e), () => {
@@ -79,35 +82,44 @@ function X(t, e) {
   if (typeof i.workKey != "string" || !Array.isArray(i.capabilities) || !i.capabilities.every((c) => typeof c == "string"))
     throw R();
   if (i.workKey !== e)
-    throw new w({
+    throw new b({
       code: "WORK_NOT_FOUND",
       message: "Work-session response did not match the requested work key.",
       retryable: !1
     });
-  const a = {
+  const r = {
     work: {
       key: i.workKey,
       capabilities: i.capabilities
     }
   };
-  if (typeof i.token == "string" && (a.token = i.token), typeof i.expiresAt == "string") {
+  if (typeof i.token == "string" && (r.token = i.token), typeof i.expiresAt == "string") {
     const c = new Date(i.expiresAt).getTime();
-    Number.isNaN(c) || (a.expiresAt = c);
+    Number.isNaN(c) || (r.expiresAt = c);
   }
-  return a;
+  return r;
 }
 function R() {
-  return new w({
+  return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed work-session response.",
     retryable: !0
   });
 }
-class J {
+function J() {
+  return new b({
+    code: "SESSION_EXPIRED",
+    message: "The work session was invalidated before it completed.",
+    retryable: !0
+  });
+}
+class Z {
   #e;
   #t;
   #i;
-  #a;
+  #r;
+  #n = 0;
+  #a = !1;
   constructor(e) {
     this.#e = e, this.#t = e.now ?? (() => Date.now());
   }
@@ -115,7 +127,7 @@ class J {
     return this.#i;
   }
   /** True when the cached snapshot's server-provided expiry has passed. */
-  #r() {
+  #s() {
     const e = this.#i?.expiresAt;
     return e !== void 0 && e <= this.#t();
   }
@@ -127,48 +139,43 @@ class J {
    * in-flight request (single flight).
    */
   establish() {
+    if (this.#a) return Promise.reject(v());
     if (this.#i) {
-      if (!this.#r()) return Promise.resolve(this.#i);
+      if (!this.#s()) return Promise.resolve(this.#i);
       this.#i = void 0;
     }
-    return this.#a ??= this.#e.transport.request({
+    if (this.#r) return this.#r;
+    const e = this.#n, i = this.#e.transport.request({
       method: "POST",
       path: "/v1/public/work-sdk/sessions",
       body: { workKey: this.#e.workKey },
       signal: this.#e.signal,
       timeoutMs: this.#e.timeoutMs
-    }).then((e) => {
-      const i = X(e.body, this.#e.workKey);
-      return this.#i = i, i;
+    }).then((r) => {
+      this.#c(e);
+      const c = X(r.body, this.#e.workKey);
+      return this.#c(e), this.#i = c, c;
     }).finally(() => {
-      this.#a = void 0;
-    }), this.#a;
+      this.#r === i && (this.#r = void 0);
+    });
+    return this.#r = i, i;
   }
   async request(e) {
     const i = await this.establish();
     if (!i.token) throw R();
     try {
-      return await this.#e.transport.request({
-        ...e,
-        authorization: i.token,
-        userAuthorization: i.userToken,
-        signal: this.#e.signal
-      });
-    } catch (a) {
-      if (!(a instanceof w) || a.code !== "SESSION_EXPIRED") throw a;
+      return await this.#l(e, i);
+    } catch (r) {
+      if (this.#a) throw v();
+      if (!(r instanceof b) || r.code !== "SESSION_EXPIRED") throw r;
       this.#i === i && this.invalidate();
       const c = await this.establish();
       if (!c.token) throw R();
-      return this.#e.transport.request({
-        ...e,
-        authorization: c.token,
-        userAuthorization: c.userToken,
-        signal: this.#e.signal
-      });
+      return this.#l(e, c);
     }
   }
   authenticate(e) {
-    if (!this.#i) throw R();
+    if (this.#o(), !this.#i) throw R();
     this.#i = {
       ...this.#i,
       userToken: e.userToken,
@@ -176,19 +183,39 @@ class J {
     };
   }
   async signOut() {
-    this.invalidate(), await this.establish();
+    this.#o(), this.invalidate(), await this.establish();
   }
   /** Drop the token; next `establish()` re-authenticates. */
   invalidate() {
-    this.#i = void 0;
+    this.#n += 1, this.#i = void 0, this.#r = void 0;
   }
   /** Hard cleanup: forget the token and pending work. */
   destroy() {
-    this.invalidate(), this.#a = void 0;
+    this.#a || (this.#a = !0, this.#n += 1, this.#i = void 0, this.#r = void 0);
+  }
+  #o() {
+    if (this.#a) throw v();
+  }
+  #c(e) {
+    if (this.#o(), e !== this.#n) throw J();
+  }
+  async #l(e, i) {
+    this.#o();
+    try {
+      const r = await this.#e.transport.request({
+        ...e,
+        authorization: i.token,
+        userAuthorization: i.userToken,
+        signal: this.#e.signal
+      });
+      return this.#o(), r;
+    } catch (r) {
+      throw this.#a ? v() : r;
+    }
   }
 }
-const _ = "viceme-access-layer", D = 50;
-function Z(t) {
+const K = "viceme-access-layer", P = 50;
+function ee(t) {
   switch (t) {
     case "SIGN_IN":
       return {
@@ -207,7 +234,7 @@ function Z(t) {
       };
   }
 }
-function ee(t) {
+function te(t) {
   if (!G(t)) return "操作未完成，请重试。";
   switch (t.code) {
     case "CONFIG_INVALID":
@@ -222,13 +249,13 @@ function ee(t) {
       return t.requestId ? `操作未完成，请重试。请求 ID：${t.requestId}` : "操作未完成，请重试。";
   }
 }
-function te() {
-  if (customElements.get(_)) return;
+function ie() {
+  if (customElements.get(K)) return;
   class t extends HTMLElement {
     interaction;
     connectedCallback() {
-      const i = Z(this.interaction.action), a = this.attachShadow({ mode: "open" });
-      a.innerHTML = `
+      const i = ee(this.interaction.action), r = this.attachShadow({ mode: "open" });
+      r.innerHTML = `
         <style>
           :host {
             position: fixed;
@@ -409,6 +436,9 @@ function te() {
             }
             [data-viceme='panel'][data-frame='true'] { width: min(30rem, 100%); }
             [data-viceme='panel'][data-action='SIGN_IN'] { width: min(30rem, 100%); }
+            [data-viceme='panel'][data-action='CHECKOUT'][data-frame='true'] {
+              width: min(42rem, 100%);
+            }
           }
           @media (prefers-reduced-motion: no-preference) {
             [data-viceme='panel'] { animation: viceme-enter 160ms ease-out; }
@@ -440,105 +470,109 @@ function te() {
           <iframe data-viceme="frame" title="" referrerpolicy="no-referrer" allow="payment"></iframe>
         </section>
       `;
-      const c = a.querySelector("[data-viceme='panel']");
+      const c = r.querySelector("[data-viceme='panel']");
       c.dataset.action = this.interaction.action, c.dataset.frame = "false";
-      const S = a.querySelector("[data-viceme='description']");
-      S.textContent = i.description;
-      const u = a.querySelector("[data-viceme='action']"), A = u.parentElement, E = a.querySelector("[data-viceme='close']"), L = a.querySelector("[data-viceme='backdrop']"), N = a.querySelector("[data-viceme='error']"), I = a.querySelector("[data-viceme='frame']"), U = a.querySelector("[data-viceme='profile']"), r = a.querySelector("[data-viceme='avatar']"), o = a.querySelector("[data-viceme='avatar-fallback']"), l = a.querySelector("[data-viceme='profile-name']"), n = a.querySelector(
+      const O = r.querySelector("[data-viceme='description']");
+      O.textContent = i.description;
+      const f = r.querySelector("[data-viceme='action']"), U = f.parentElement, N = r.querySelector("[data-viceme='close']"), T = r.querySelector("[data-viceme='backdrop']"), C = r.querySelector("[data-viceme='error']"), S = r.querySelector("[data-viceme='frame']"), M = r.querySelector("[data-viceme='profile']"), x = r.querySelector("[data-viceme='avatar']"), n = r.querySelector("[data-viceme='avatar-fallback']"), o = r.querySelector("[data-viceme='profile-name']"), l = r.querySelector(
         "[data-viceme='profile-description']"
-      ), f = a.querySelector("[data-viceme='profile-stats']");
-      u.textContent = i.label, u.hidden = !1, A.dataset.single = "true";
-      const b = i.label;
-      I.title = this.interaction.action === "SIGN_IN" ? "登录授权" : "支付";
-      const d = this.interaction.followTarget;
-      if (d) {
+      ), a = r.querySelector("[data-viceme='profile-stats']");
+      f.textContent = i.label, f.hidden = !1, U.dataset.single = "true";
+      const d = i.label;
+      S.title = this.interaction.action === "SIGN_IN" ? "登录授权" : "支付";
+      const u = this.interaction.followTarget;
+      if (u) {
         c.setAttribute(
           "aria-label",
-          this.interaction.action === "SIGN_IN" ? `授权 ${d.displayName}` : `关注 ${d.displayName}`
-        ), U.dataset.visible = "true", l.textContent = d.displayName;
-        const s = [...d.description ?? ""];
-        n.textContent = s.length > D ? `${s.slice(0, D).join("")}…` : s.join(""), s.length > D && (n.title = d.description), f.textContent = `${d.workCount} 个作品`, o.textContent = d.displayName.trim().slice(0, 1) || "V", d.avatarUrl && (r.src = d.avatarUrl, r.alt = `${d.displayName}的头像`, r.hidden = !1, o.hidden = !0);
+          this.interaction.action === "SIGN_IN" ? `授权 ${u.displayName}` : `关注 ${u.displayName}`
+        ), M.dataset.visible = "true", o.textContent = u.displayName;
+        const s = [...u.description ?? ""];
+        l.textContent = s.length > P ? `${s.slice(0, P).join("")}…` : s.join(""), s.length > P && (l.title = u.description), a.textContent = `${u.workCount} 个作品`, n.textContent = u.displayName.trim().slice(0, 1) || "V", u.avatarUrl && (x.src = u.avatarUrl, x.alt = `${u.displayName}的头像`, x.hidden = !1, n.hidden = !0);
       }
-      let y = null;
-      const k = (s) => {
-        this.dispatchEvent(new CustomEvent("viceme:access-layer-close", { detail: s }));
-      }, h = () => {
-        y?.cancel(), k("dismissed");
+      let p = null, w = !1;
+      const I = (s) => {
+        w || (w = !0, this.interaction.signal?.removeEventListener("abort", y), this.dispatchEvent(new CustomEvent("viceme:access-layer-close", { detail: s })));
+      }, y = () => {
+        p?.cancel(), I("dismissed");
       };
-      L.addEventListener("click", h), E.addEventListener("click", h), this.addEventListener("keydown", (s) => {
-        if (s.key === "Escape" && h(), s.key === "Tab") {
-          if (s.preventDefault(), y?.type === "frame") {
-            I.focus();
+      this.interaction.signal?.addEventListener("abort", y, { once: !0 }), this.interaction.signal?.aborted && queueMicrotask(y), T.addEventListener("click", y), N.addEventListener("click", y), this.addEventListener("keydown", (s) => {
+        if (s.key === "Escape" && y(), s.key === "Tab") {
+          if (s.preventDefault(), p?.type === "frame") {
+            S.focus();
             return;
           }
-          const p = [E, ...u.hidden ? [] : [u]].filter((K) => !K.disabled && !K.hidden);
-          if (p.length === 0) return;
-          const q = p.indexOf(a.activeElement), F = s.shiftKey ? -1 : 1;
-          p[(q + F + p.length) % p.length]?.focus();
+          const m = [N, ...f.hidden ? [] : [f]].filter((_) => !_.disabled && !_.hidden);
+          if (m.length === 0) return;
+          const D = m.indexOf(r.activeElement), E = s.shiftKey ? -1 : 1;
+          m[(D + E + m.length) % m.length]?.focus();
         }
       });
-      const O = async () => {
-        u.disabled = !0, u.setAttribute("aria-busy", "true"), u.textContent = "正在打开…", N.textContent = "";
+      const A = async () => {
+        f.disabled = !0, f.setAttribute("aria-busy", "true"), f.textContent = "正在打开…", C.textContent = "";
         try {
           const s = await this.interaction.perform();
-          s.type === "frame" ? (y = s, c.dataset.frame = "true", I.src = s.url, I.focus(), await s.completion) : s.type === "external" && (y = s, await s.completion), k("acted");
+          if (w || this.interaction.signal?.aborted) {
+            s.type !== "completed" && s.cancel();
+            return;
+          }
+          s.type === "frame" ? (p = s, c.dataset.frame = "true", S.src = s.url, S.focus(), await s.completion) : s.type === "external" && (p = s, await s.completion), I("acted");
         } catch (s) {
-          y?.cancel(), y = null, c.dataset.frame = "false", I.removeAttribute("src"), N.textContent = ee(s), u.hidden = !1, u.disabled = !1, u.removeAttribute("aria-busy"), u.textContent = b, u.focus();
+          if (w) return;
+          p?.cancel(), p = null, c.dataset.frame = "false", S.removeAttribute("src"), C.textContent = te(s), f.hidden = !1, f.disabled = !1, f.removeAttribute("aria-busy"), f.textContent = d, f.focus();
         }
       };
-      u.addEventListener("click", O), queueMicrotask(() => u.focus());
+      f.addEventListener("click", A), queueMicrotask(() => f.focus());
     }
   }
-  customElements.define(_, t);
+  customElements.define(K, t);
 }
-const x = async (t) => {
-  if (typeof document > "u" || typeof customElements > "u")
-    return "dismissed";
-  te();
-  const e = document.createElement(_);
+const re = async (t) => {
+  if (typeof document > "u" || typeof customElements > "u" || t.signal?.aborted) return "dismissed";
+  ie();
+  const e = document.createElement(K);
   e.interaction = t;
-  const i = document.documentElement.style.overflow, a = document.activeElement instanceof HTMLElement ? document.activeElement : null;
+  const i = document.documentElement.style.overflow, r = document.activeElement instanceof HTMLElement ? document.activeElement : null;
   document.documentElement.style.overflow = "hidden", document.body.append(e);
   try {
     return await new Promise((c) => {
       e.addEventListener(
         "viceme:access-layer-close",
-        (S) => c(S.detail),
+        (O) => c(O.detail),
         { once: !0 }
       );
     });
   } finally {
-    e.remove(), document.documentElement.style.overflow = i, a?.focus();
+    e.remove(), document.documentElement.style.overflow = i, r?.focus();
   }
 };
-function v(t) {
-  if (typeof t != "object" || t === null) throw m();
+function k(t) {
+  if (typeof t != "object" || t === null) throw h();
   return t;
 }
-function m() {
-  return new w({
+function h() {
+  return new b({
     code: "INTERNAL_ERROR",
     message: "Malformed public API response.",
     retryable: !0
   });
 }
-function ie(t) {
-  const e = v(t);
+function ae(t) {
+  const e = k(t);
   if (typeof e.id != "string" || !(typeof e.displayName == "string" || e.displayName === null) || !(typeof e.avatarUrl == "string" || e.avatarUrl === null))
-    throw m();
+    throw h();
   return {
     subject: e.id,
     nickname: e.displayName,
     avatarUrl: e.avatarUrl
   };
 }
-function P(t) {
-  const e = v(t);
+function F(t) {
+  const e = k(t);
   if (typeof e.following != "boolean" || !(typeof e.followedAt == "string" || e.followedAt === null))
-    throw m();
-  const i = v(e.creator);
+    throw h();
+  const i = k(e.creator);
   if (typeof i.displayName != "string" || !(typeof i.avatarUrl == "string" || i.avatarUrl === null) || !(typeof i.description == "string" || i.description === null) || !Number.isInteger(i.publishedWorkCount) || i.publishedWorkCount < 0)
-    throw m();
+    throw h();
   return {
     following: e.following,
     followedAt: e.followedAt,
@@ -551,8 +585,8 @@ function P(t) {
     }
   };
 }
-function ae(t) {
-  const e = v(t), i = /* @__PURE__ */ new Set([
+function ne(t) {
+  const e = k(t), i = /* @__PURE__ */ new Set([
     "PUBLIC",
     "OWNER",
     "FOLLOWING",
@@ -562,22 +596,22 @@ function ae(t) {
     "PURCHASE_REQUIRED",
     "FEATURE_NOT_FOUND",
     "FEATURE_DISABLED"
-  ]), a = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
-  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !a.has(e.nextAction))
-    throw m();
+  ]), r = /* @__PURE__ */ new Set([null, "SIGN_IN", "FOLLOW", "CHECKOUT"]);
+  if (typeof e.allowed != "boolean" || typeof e.reason != "string" || !i.has(e.reason) || !r.has(e.nextAction))
+    throw h();
   return {
     allowed: e.allowed,
     reason: e.reason,
     nextAction: e.nextAction
   };
 }
-function re(t) {
-  const e = v(t);
+function oe(t) {
+  const e = k(t);
   if (typeof e.featureKey != "string" || !/^[a-z][a-z0-9_-]{1,63}$/.test(e.featureKey) || typeof e.title != "string" || e.title.trim().length === 0 || e.title.length > 120 || !(e.policyType === "PUBLIC" || e.policyType === "FOLLOW_OWNER" || e.policyType === "WORK_ENTITLEMENT"))
-    throw m();
-  const i = e.price === null ? null : v(e.price);
+    throw h();
+  const i = e.price === null ? null : k(e.price);
   if (i !== null && (!Number.isInteger(i.amountCents) || i.amountCents <= 0 || i.currency !== "CNY") || e.policyType === "WORK_ENTITLEMENT" != (i !== null))
-    throw m();
+    throw h();
   return {
     featureKey: e.featureKey,
     title: e.title,
@@ -585,245 +619,287 @@ function re(t) {
     price: i === null ? null : { amountCents: i.amountCents, currency: "CNY" }
   };
 }
-function oe() {
+function se() {
   const t = crypto.getRandomValues(new Uint8Array(32));
-  return ne(t);
+  return ce(t);
 }
-function ne(t) {
+function ce(t) {
   let e = "";
   for (const i of t) e += String.fromCharCode(i);
   return btoa(e).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
-function se() {
+function le() {
   return typeof document < "u" && document.documentElement.lang.toLowerCase() === "en-us" ? "en-US" : "zh-CN";
 }
-function ce(t) {
-  const e = () => new w({
+function de(t) {
+  const e = () => new b({
     code: "AUTH_CANCELLED",
     message: "The interactive action was cancelled.",
     retryable: !1
-  }), i = (r, o, l, n, f, b) => {
+  }), i = (n) => {
+    if (t.signal.aborted) return Promise.reject(v());
+    let o;
+    const l = new Promise((d, u) => {
+      o = () => u(v()), t.signal.addEventListener("abort", o, { once: !0 }), t.signal.aborted && o();
+    });
+    let a;
+    try {
+      a = (t.presenter ?? re)({
+        ...n,
+        signal: t.signal
+      });
+    } catch (d) {
+      a = Promise.reject(d);
+    }
+    return Promise.race([a, l]).then((d) => {
+      if (t.signal.aborted) throw v();
+      return d;
+    }).finally(() => {
+      o && t.signal.removeEventListener("abort", o);
+    });
+  }, r = (n, o, l, a, d, u) => {
     if (typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Interactive access requires a browser window.",
         retryable: !1
       });
-    let d = !0, y, k;
-    const h = () => {
-      d && (d = !1, window.removeEventListener("message", s));
-    }, O = new Promise((g, p) => {
-      y = g, k = p;
+    let p = !0, w, I;
+    const y = () => {
+      p && (p = !1, window.removeEventListener("message", s));
+    }, A = new Promise((g, m) => {
+      w = g, I = m;
     }), s = (g) => {
-      if (!d || g.origin !== o || typeof g.data != "object" || g.data === null) return;
-      const p = g.data;
-      if (!(p.workKey !== t.workKey || p.channel !== l)) {
-        if (p.type === `viceme:${n}:ready`) {
+      if (!p || g.origin !== o || typeof g.data != "object" || g.data === null) return;
+      const m = g.data;
+      if (!(m.workKey !== t.workKey || m.channel !== l)) {
+        if (m.type === `viceme:${a}:ready`) {
           g.source && "postMessage" in g.source && g.source.postMessage(
             {
-              type: `viceme:${n}:init`,
+              type: `viceme:${a}:init`,
               workKey: t.workKey,
               channel: l,
-              ...f
+              ...d
             },
             o
           );
           return;
         }
-        if (p.type === `viceme:${n}:cancelled`) {
-          h(), k(e());
+        if (m.type === `viceme:${a}:cancelled`) {
+          y(), I(e());
           return;
         }
-        p.type === `viceme:${n}:complete` && (h(), b(p).then(y, k));
+        m.type === `viceme:${a}:complete` && (y(), u(m).then(w, I));
       }
     };
     return window.addEventListener("message", s), {
       type: "frame",
-      url: r,
-      completion: O,
+      url: n,
+      completion: A,
       cancel() {
-        h(), y();
+        y(), w();
       }
     };
-  }, a = async () => {
+  }, c = async () => {
     if (await t.ready(), typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Interactive access requires a browser window.",
         retryable: !1
       });
-    const r = oe(), o = new URL("/sdk/login", t.widgetOrigin);
+    const n = se(), o = new URL("/sdk/login", t.widgetOrigin);
     o.search = new URLSearchParams({
       workKey: t.workKey,
-      channel: r,
+      channel: n,
       parentOrigin: window.location.origin,
-      locale: se()
+      locale: le()
     }).toString();
     const l = t.session.snapshot?.token;
-    if (!l) throw m();
-    return i(
+    if (!l) throw h();
+    return r(
       o.toString(),
       t.widgetOrigin,
-      r,
+      n,
       "auth",
       { workSessionToken: l },
-      async (n) => {
-        if (typeof n.userToken != "string")
-          throw m();
-        t.session.authenticate({ userToken: n.userToken, user: ie(n.user) });
+      async (a) => {
+        if (typeof a.userToken != "string")
+          throw h();
+        t.session.authenticate({ userToken: a.userToken, user: ae(a.user) });
       }
     );
-  }, c = async () => (await t.ready(), P(
+  }, O = async () => (await t.ready(), F(
     (await t.session.request({ method: "GET", path: "/v1/public/work-sdk/follow" })).body
-  )), S = async () => (await t.ready(), P(
+  )), f = async () => (await t.ready(), F(
     (await t.session.request({ method: "PUT", path: "/v1/public/work-sdk/follow" })).body
-  )), u = {
+  )), U = {
     async getState() {
       await t.ready();
-      const r = t.session.snapshot?.user ?? null;
-      return { authenticated: r !== null, user: r };
+      const n = t.session.snapshot?.user ?? null;
+      return { authenticated: n !== null, user: n };
     },
     async signIn() {
-      if (await (t.presenter ?? x)({
+      if (await i({
         featureKey: "auth",
         reason: "AUTH_REQUIRED",
         action: "SIGN_IN",
-        perform: a
+        perform: c
       }) === "dismissed") throw e();
       return this.getState();
     },
     async signOut() {
       await t.ready(), await t.session.signOut();
     }
-  }, A = {
-    getState: c,
-    follow: S,
+  }, N = {
+    getState: O,
+    follow: f,
     unfollow: async () => {
-      throw new w({
+      throw new b({
         code: "CAPABILITY_DISABLED",
         message: "Unfollow is not exposed by website access.",
         retryable: !1
       });
     }
-  }, E = async (r) => {
+  }, T = async (n) => {
     await t.ready();
-    const o = v(
+    const o = k(
       (await t.session.request({
         method: "POST",
         path: "/v1/public/work-sdk/access/check",
-        body: { featureKeys: r }
+        body: { featureKeys: n }
       })).body
-    ), l = v(o.decisions);
+    ), l = k(o.decisions);
     return Object.fromEntries(
-      Object.entries(l).map(([n, f]) => [n, ae(f)])
+      Object.entries(l).map(([a, d]) => [a, ne(d)])
     );
-  }, L = async (r, o = {}) => {
+  }, C = async (n, o = {}) => {
     await t.ready();
     const l = {
-      featureKey: r,
+      featureKey: n,
       locale: o.locale ?? "zh-CN"
-    }, n = v(
+    }, a = k(
       (await t.session.request({
         method: "POST",
         path: "/v1/public/work-sdk/checkout",
         body: l
       })).body
     );
-    if (typeof n.checkoutUrl != "string" || typeof n.alreadyOwned != "boolean")
-      throw m();
+    if (typeof a.checkoutUrl != "string" || typeof a.alreadyOwned != "boolean" || !(a.expiresAt === null || typeof a.expiresAt == "string" && !Number.isNaN(Date.parse(a.expiresAt))) || a.alreadyOwned !== (a.expiresAt === null))
+      throw h();
+    let d;
     try {
-      new URL(n.checkoutUrl);
+      d = new URL(a.checkoutUrl);
     } catch {
-      throw m();
+      throw h();
     }
+    if (!a.alreadyOwned && (d.protocol !== "https:" || d.origin !== t.widgetOrigin))
+      throw h();
     return {
-      checkoutUrl: n.checkoutUrl,
-      alreadyOwned: n.alreadyOwned
+      checkoutUrl: a.checkoutUrl,
+      alreadyOwned: a.alreadyOwned,
+      expiresAt: a.expiresAt
     };
-  }, N = (r, o) => {
-    if (r.alreadyOwned) return { type: "completed" };
+  }, S = (n, o) => {
+    if (n.alreadyOwned) return { type: "completed" };
+    const l = Date.parse(n.expiresAt);
     if (typeof window > "u")
-      throw new w({
+      throw new b({
         code: "CONFIG_INVALID",
         message: "Hosted checkout requires a browser window.",
         retryable: !1
       });
-    const l = window.open(r.checkoutUrl, "_blank", "popup,width=520,height=760");
-    if (!l)
-      throw new w({
-        code: "AUTH_CANCELLED",
-        message: "The hosted checkout window was blocked.",
-        retryable: !1
-      });
-    let n = !0, f, b, d;
-    const y = new Promise((h, O) => {
-      b = h, d = O;
-    }), k = async () => {
-      if (n)
+    let a = !0, d, u, p, w;
+    const I = new Promise((E, _) => {
+      p = E, w = _;
+    }), y = () => {
+      d && clearTimeout(d), u && clearTimeout(u), document.removeEventListener("visibilitychange", m);
+    }, A = () => {
+      a && (a = !1, y(), w(
+        new b({
+          code: "SESSION_EXPIRED",
+          message: "Hosted checkout session expired.",
+          retryable: !0
+        })
+      ));
+    }, s = () => {
+      if (!a || document.visibilityState === "hidden") return;
+      const E = l - t.now();
+      if (E <= 0) {
+        A();
+        return;
+      }
+      d = setTimeout(() => {
+        g();
+      }, Math.min(1500, E));
+    }, g = async () => {
+      if (a)
         try {
-          const h = (await E([o]))[o];
-          if (!h) throw m();
-          if (h.allowed) {
-            n = !1, l.close(), b();
-            return;
-          }
-          if (l.closed) {
-            n = !1, d(e());
+          const E = (await T([o]))[o];
+          if (!E) throw h();
+          if (E.allowed) {
+            a = !1, y(), p();
             return;
           }
-          f = setTimeout(() => {
-            k();
-          }, 1500);
-        } catch (h) {
-          n = !1, d(h);
+          s();
+        } catch (E) {
+          a = !1, y(), w(E);
         }
     };
-    return f = setTimeout(() => {
-      k();
-    }, 1500), {
-      type: "external",
-      completion: y,
+    function m() {
+      if (a) {
+        if (document.visibilityState === "hidden") {
+          d && clearTimeout(d), d = void 0;
+          return;
+        }
+        s();
+      }
+    }
+    document.addEventListener("visibilitychange", m);
+    const D = l - t.now();
+    return D <= 0 ? A() : (u = setTimeout(A, D), s()), {
+      type: "frame",
+      url: n.checkoutUrl,
+      completion: I,
       cancel() {
-        n && (n = !1, f && clearTimeout(f), l.close(), b());
+        a && (a = !1, y(), p());
       }
     };
   };
-  return { auth: u, follow: A, access: {
+  return { auth: U, follow: N, access: {
     async getFeatures() {
       await t.ready();
-      const r = v(
+      const n = k(
         (await t.session.request({
           method: "GET",
           path: "/v1/public/work-sdk/access/features"
         })).body
       );
-      if (!Array.isArray(r.features) || r.features.length > 100)
-        throw m();
-      return r.features.map(re);
+      if (!Array.isArray(n.features) || n.features.length > 100)
+        throw h();
+      return n.features.map(oe);
     },
-    async check(r) {
-      const l = (await E([r]))[r];
-      if (!l) throw m();
+    async check(n) {
+      const l = (await T([n]))[n];
+      if (!l) throw h();
       return l;
     },
-    checkMany: E,
-    async require(r) {
-      let o = await this.check(r);
-      const l = t.presenter ?? x;
-      for (let n = 0; !o.allowed && o.nextAction && n < 3; n += 1) {
-        const f = o.nextAction, b = f === "FOLLOW" ? (await A.getState()).target : void 0, d = f === "CHECKOUT" ? await L(r) : void 0;
-        if (d?.alreadyOwned) {
-          o = await this.check(r);
+    checkMany: T,
+    async require(n) {
+      let o = await this.check(n);
+      for (let l = 0; !o.allowed && o.nextAction && l < 3; l += 1) {
+        const a = o.nextAction, d = a === "FOLLOW" ? (await N.getState()).target : void 0, u = a === "CHECKOUT" ? await C(n) : void 0;
+        if (u?.alreadyOwned) {
+          o = await this.check(n);
           continue;
         }
-        if (await l({
-          featureKey: r,
+        if (await i({
+          featureKey: n,
           reason: o.reason,
-          action: f,
-          ...b ? { followTarget: b } : {},
-          perform: async () => f === "SIGN_IN" ? a() : f === "FOLLOW" ? (await A.follow(), { type: "completed" }) : N(d, r)
+          action: a,
+          ...d ? { followTarget: d } : {},
+          perform: async () => a === "SIGN_IN" ? c() : a === "FOLLOW" ? (await N.follow(), { type: "completed" }) : S(u, n)
         }) === "dismissed") return o;
-        o = await this.check(r);
+        o = await this.check(n);
       }
       return o;
     },
@@ -831,64 +907,66 @@ function ce(t) {
       await t.ready();
     }
   }, checkout: {
-    async open(r) {
-      const o = await L(r.featureKey, r);
+    async open(n) {
+      const o = await C(n.featureKey, n);
       if (o.alreadyOwned) return o;
-      if (await (t.presenter ?? x)({
-        featureKey: r.featureKey,
+      if (await i({
+        featureKey: n.featureKey,
         reason: "PURCHASE_REQUIRED",
         action: "CHECKOUT",
-        perform: async () => N(o, r.featureKey)
+        perform: async () => S(o, n.featureKey)
       }) === "dismissed") throw e();
       return o;
     }
   } };
 }
-class le extends DOMException {
+class ue extends DOMException {
   constructor() {
     super("ViceMe client destroyed.", "AbortError");
   }
 }
-class he {
+class we {
   #e = new Q();
   #t;
   #i;
-  #a = new AbortController();
-  #r;
+  #r = new AbortController();
+  #n;
   auth;
   access;
   checkout;
   /** Detaches the caller-signal listener; undefined when none was attached. */
-  #o;
+  #a;
   constructor(e) {
-    this.#i = e.config, this.#t = new J({
+    this.#i = e.config, this.#t = new Z({
       workKey: e.config.workKey,
       transport: e.transport,
-      signal: this.#a.signal,
+      signal: this.#r.signal,
       ...e.now !== void 0 ? { now: e.now } : {}
     });
-    const i = ce({
+    const i = de({
       session: this.#t,
       workKey: e.config.workKey,
-      widgetOrigin: W[e.config.region],
+      widgetOrigin: j[e.config.region],
+      now: e.now ?? (() => Date.now()),
       presenter: e.presenter,
-      ready: () => this.#n()
+      signal: this.#r.signal,
+      ready: () => this.#s()
     });
     this.auth = i.auth, this.access = i.access, this.checkout = i.checkout;
-    const a = e.config.signal;
-    if (a) {
+    const r = e.config.signal;
+    if (r) {
       const c = () => {
-        this.#a.abort(
-          a.reason instanceof Error ? a.reason : new DOMException("Caller signal aborted.", "AbortError")
+        this.#r.abort(
+          r.reason instanceof Error ? r.reason : new DOMException("Caller signal aborted.", "AbortError")
         );
       };
-      a.aborted ? c() : (a.addEventListener("abort", c, { once: !0 }), this.#o = () => {
-        a.removeEventListener("abort", c);
+      r.aborted ? c() : (r.addEventListener("abort", c, { once: !0 }), this.#a = () => {
+        r.removeEventListener("abort", c);
       });
     }
   }
   get version() {
-    return z;
+    return W;
   }
   get workKey() {
     return this.#i.workKey;
@@ -904,15 +982,15 @@ class he {
     return H;
   }
   ready() {
-    return this.#e.destroyed ? Promise.reject(C()) : (this.#r || (this.#e.transition("READY"), this.#r = Promise.resolve()), this.#r);
+    return this.#e.destroyed ? Promise.reject(v()) : (this.#n || (this.#e.transition("READY"), this.#n = Promise.resolve()), this.#n);
   }
-  async #n() {
-    if (this.#e.destroyed) throw C();
+  async #s() {
+    if (this.#e.destroyed) throw v();
     await this.ready();
     try {
-      if (await this.#t.establish(), this.#e.destroyed) throw C();
+      if (await this.#t.establish(), this.#e.destroyed) throw v();
     } catch (e) {
-      throw this.#e.destroyed ? C() : (this.#t.invalidate(), e);
+      throw this.#e.destroyed ? v() : (this.#t.invalidate(), e);
     }
   }
   hasCapability(e) {
@@ -936,14 +1014,14 @@ class he {
     return this.#t.snapshot;
   }
   destroy() {
-    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#a.abort(new le()), this.#t.destroy(), this.#e.clearListeners(), this.#r = void 0, this.#o?.(), this.#o = void 0);
+    this.#e.destroyed || (this.#e.transition("DESTROYED"), this.#r.abort(new ue()), this.#t.destroy(), this.#e.clearListeners(), this.#n = void 0, this.#a?.(), this.#a = void 0);
   }
 }
 export {
-  he as V,
+  we as V,
   Y as a,
   B as i,
-  fe as r,
-  me as v
+  pe as r,
+  ye as v
 };
-//# sourceMappingURL=client-Cbldd7F2.js.map
+//# sourceMappingURL=client-DEg6YouY.js.map