@arirocha/openrisk-client 0.1.0

package/README.md

@@ -0,0 +1,21 @@
+# openrisk-client
+
+To install dependencies:
+
+```bash
+bun install
+```
+
+To run tests:
+
+```bash
+bun test
+```
+
+To build:
+
+```bash
+bun run build
+```
+
+This project was created using `bun init` in bun v1.3.1. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime.

package/dist/client.d.ts

@@ -0,0 +1,11 @@
+import type { RiskClientOptions } from "./types";
+export declare class OpenRiskClient {
+    private readonly options;
+    constructor(options: RiskClientOptions);
+    emit(eventName: string, extra?: Record<string, unknown>): void;
+    track(eventName: string, extra?: Record<string, unknown>): void;
+    private send;
+}
+export declare class RiskClient extends OpenRiskClient {
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAiBjD,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,iBAAiB;IAmBvD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIvD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAmBxD,OAAO,CAAC,IAAI;CAmBb;AAGD,qBAAa,UAAW,SAAQ,cAAc;CAAG"}

package/dist/fingerprint/index.d.ts

@@ -0,0 +1,8 @@
+export declare function collectFingerprint(): {
+    mode: string;
+    version: string;
+    data: {
+        canvas_fp: string | null;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/fingerprint/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fingerprint/index.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB;;;;;;EAMjC"}

package/dist/fingerprint/raw.d.ts

@@ -0,0 +1,4 @@
+export declare function collectRawFingerprint(): {
+    canvas_fp: string | null;
+};
+//# sourceMappingURL=raw.d.ts.map

package/dist/fingerprint/raw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../src/fingerprint/raw.ts"],"names":[],"mappings":"AAAA,wBAAgB,qBAAqB;;EAepC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { OpenRiskClient, RiskClient } from "./client";
+export * from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtD,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,407 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __moduleCache = /* @__PURE__ */ new WeakMap;
+var __toCommonJS = (from) => {
+  var entry = __moduleCache.get(from), desc;
+  if (entry)
+    return entry;
+  entry = __defProp({}, "__esModule", { value: true });
+  if (from && typeof from === "object" || typeof from === "function")
+    __getOwnPropNames(from).map((key) => !__hasOwnProp.call(entry, key) && __defProp(entry, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    }));
+  __moduleCache.set(from, entry);
+  return entry;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+
+// src/index.ts
+var exports_src = {};
+__export(exports_src, {
+  RiskClient: () => RiskClient,
+  OpenRiskClient: () => OpenRiskClient
+});
+module.exports = __toCommonJS(exports_src);
+
+// src/signals/behavior.ts
+var mouseMoves = 0;
+var lastMove = 0;
+var deltas = [];
+window.addEventListener("mousemove", () => {
+  const now = performance.now();
+  if (lastMove)
+    deltas.push(now - lastMove);
+  lastMove = now;
+  mouseMoves++;
+});
+function collectBehavior() {
+  if (!deltas.length) {
+    return {
+      mouse_entropy: null
+    };
+  }
+  const avg = deltas.reduce((a, b) => a + b, 0) / deltas.length;
+  return {
+    mouse_entropy: Math.min(1, mouseMoves / 50),
+    avg_mouse_interval_ms: Math.round(avg)
+  };
+}
+
+// src/signals/cadence.ts
+var timestamps = [];
+var WINDOW_MS = 60000;
+var STRUCTURAL_EVENTS = new Set([
+  "session_start",
+  "page_view",
+  "page_loaded"
+]);
+function recordEventTimestamp(eventName) {
+  if (STRUCTURAL_EVENTS.has(eventName))
+    return;
+  const now = Date.now();
+  timestamps.push(now);
+  while (timestamps.length > 0) {
+    const oldest = timestamps[0];
+    if (oldest !== undefined && now - oldest > WINDOW_MS) {
+      timestamps.shift();
+    } else {
+      break;
+    }
+  }
+}
+function collectCadence() {
+  if (timestamps.length < 2) {
+    return {
+      events_per_minute: timestamps.length,
+      avg_event_interval_ms: null,
+      burst_detected: false
+    };
+  }
+  const intervals = [];
+  for (let i = 1;i < timestamps.length; i++) {
+    intervals.push(timestamps[i] - timestamps[i - 1]);
+  }
+  const avg = intervals.reduce((a, b) => a + b, 0) / intervals.length;
+  const burst = intervals.some((i) => i < 50);
+  return {
+    events_per_minute: timestamps.length,
+    avg_event_interval_ms: Math.round(avg),
+    burst_detected: burst
+  };
+}
+
+// src/fingerprint/raw.ts
+function collectRawFingerprint() {
+  const canvas = document.createElement("canvas");
+  const ctx = canvas.getContext("2d");
+  let canvas_fp = null;
+  if (ctx) {
+    ctx.textBaseline = "top";
+    ctx.font = "14px Arial";
+    ctx.fillText("openrisk-fp", 2, 2);
+    canvas_fp = canvas.toDataURL();
+  }
+  return {
+    canvas_fp
+  };
+}
+
+// src/fingerprint/index.ts
+function collectFingerprint() {
+  return {
+    mode: "raw",
+    version: "fp_raw_v1",
+    data: collectRawFingerprint()
+  };
+}
+
+// src/signals/device.ts
+function collectDevice() {
+  const screen = window.screen;
+  return {
+    platform: navigator.platform || "unknown",
+    user_agent: navigator.userAgent || "unknown",
+    cpu_cores: navigator.hardwareConcurrency ?? null,
+    memory_gb: navigator.deviceMemory ?? null,
+    touch_support: "ontouchstart" in window,
+    screen: {
+      width: screen?.width ?? null,
+      height: screen?.height ?? null,
+      pixel_ratio: window.devicePixelRatio ?? 1
+    },
+    fingerprint: collectFingerprint()
+  };
+}
+
+// src/signals/environment.ts
+function collectEnvironment() {
+  return {
+    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+    locale: navigator.language,
+    languages: navigator.languages
+  };
+}
+
+// src/signals/features.ts
+function collectFeatures() {
+  return {
+    webdriver: navigator.webdriver === true,
+    plugins_count: navigator.plugins?.length ?? null,
+    languages_count: navigator.languages?.length ?? null,
+    permissions_api: "permissions" in navigator,
+    hardware_concurrency_present: typeof navigator.hardwareConcurrency === "number"
+  };
+}
+
+// src/signals/integrity.ts
+function collectIntegrity() {
+  return {
+    sdk_version: "__SDK_VERSION__",
+    schema_version: "1.0",
+    timestamp_skew_ms: Math.abs(Date.now() - performance.timeOrigin),
+    telemetry_blocked: false
+  };
+}
+
+// src/signals/multitabs.ts
+var TAB_ID = crypto.randomUUID();
+var channel = new BroadcastChannel("openrisk_tabs");
+var peers = new Set;
+peers.add(TAB_ID);
+channel.onmessage = (event) => {
+  const msg = event.data;
+  if (!msg || msg.tabId === TAB_ID)
+    return;
+  if (msg.type === "hello") {
+    peers.add(msg.tabId);
+    channel.postMessage({
+      type: "hello_ack",
+      tabId: TAB_ID
+    });
+  }
+  if (msg.type === "hello_ack") {
+    peers.add(msg.tabId);
+  }
+};
+setTimeout(() => {
+  channel.postMessage({
+    type: "hello",
+    tabId: TAB_ID
+  });
+}, 50);
+function collectMultiTabs() {
+  return {
+    concurrent_tabs_estimate: peers.size,
+    multiple_tabs_detected: peers.size > 1
+  };
+}
+
+// src/signals/navigation.ts
+function collectNavigation() {
+  const nav = performance.getEntriesByType("navigation")[0];
+  return {
+    entry_type: nav?.type ?? "unknown",
+    referrer_type: document.referrer ? "external" : "direct",
+    path_depth: location.pathname.split("/").filter(Boolean).length
+  };
+}
+
+// src/signals/session.ts
+var sessionStart = Date.now();
+var eventCount = 0;
+var pageCount = 1;
+var visibilityChanges = 0;
+document.addEventListener("visibilitychange", () => {
+  visibilityChanges++;
+});
+function collectSession() {
+  eventCount++;
+  return {
+    session_age_ms: Date.now() - sessionStart,
+    event_count: eventCount,
+    page_count: pageCount,
+    tab_visibility_changes: visibilityChanges
+  };
+}
+
+// src/signals/timing.ts
+function collectTiming() {
+  const nav = performance.getEntriesByType("navigation")[0];
+  const pageLoad = nav && nav.domComplete > 0 ? Math.round(nav.domComplete - nav.startTime) : null;
+  const domInteractive = nav && nav.domInteractive > 0 ? Math.round(nav.domInteractive - nav.startTime) : null;
+  return {
+    page_load_ms: pageLoad,
+    dom_interactive_ms: domInteractive,
+    network_rtt_estimate_ms: navigator.connection?.rtt ?? null
+  };
+}
+
+// src/payload.ts
+function buildPayload(eventName, extra, signalsOverride) {
+  const signals = signalsOverride || {
+    environment: collectEnvironment(),
+    device: collectDevice(),
+    session: collectSession(),
+    navigation: collectNavigation(),
+    timing: collectTiming(),
+    behavior: collectBehavior(),
+    cadence: collectCadence(),
+    features: collectFeatures(),
+    multitabs: collectMultiTabs(),
+    integrity: collectIntegrity()
+  };
+  return {
+    event: {
+      name: eventName,
+      timestamp: new Date().toISOString(),
+      event_id: crypto.randomUUID()
+    },
+    signals,
+    extra
+  };
+}
+
+// src/lifecycle/interaction.ts
+var interacted = false;
+function setupInteraction(client) {
+  const markInteraction = (type) => {
+    if (interacted)
+      return;
+    interacted = true;
+    client.emit("first_interaction", {
+      interaction_type: type
+    });
+    cleanup();
+  };
+  const cleanup = () => {
+    window.removeEventListener("mousemove", onMouse);
+    window.removeEventListener("keydown", onKey);
+    window.removeEventListener("touchstart", onTouch);
+  };
+  const onMouse = () => markInteraction("mouse");
+  const onKey = () => markInteraction("keyboard");
+  const onTouch = () => markInteraction("touch");
+  window.addEventListener("mousemove", onMouse, { passive: true });
+  window.addEventListener("keydown", onKey);
+  window.addEventListener("touchstart", onTouch, { passive: true });
+}
+
+// src/lifecycle/page.ts
+function setupPageLifecycle(client) {
+  client.emit("page_view");
+  window.addEventListener("load", () => {
+    client.emit("page_loaded");
+  });
+}
+
+// src/lifecycle/scroll.ts
+var maxScroll = 0;
+var thresholds = [25, 50, 75, 100];
+var sent = new Set;
+function setupScroll(client) {
+  window.addEventListener("scroll", () => {
+    const scrollTop = window.scrollY;
+    const height = document.documentElement.scrollHeight - window.innerHeight;
+    if (height <= 0)
+      return;
+    const percent = Math.round(scrollTop / height * 100);
+    maxScroll = Math.max(maxScroll, percent);
+    for (const t of thresholds) {
+      if (percent >= t && !sent.has(t)) {
+        sent.add(t);
+        client.emit("scroll_depth", { percent: t });
+      }
+    }
+  }, { passive: true });
+}
+
+// src/lifecycle/unload.ts
+function setupUnload(client) {
+  window.addEventListener("beforeunload", () => {
+    client.emit("session_end");
+  });
+  window.addEventListener("pagehide", () => {
+    client.emit("session_end");
+  });
+}
+
+// src/lifecycle/visibility.ts
+function setupVisibility(client) {
+  document.addEventListener("visibilitychange", () => {
+    if (document.visibilityState === "hidden") {
+      client.emit("page_hidden");
+    } else if (document.visibilityState === "visible") {
+      client.emit("page_visible");
+    }
+  });
+}
+
+// src/client.ts
+function emitDebug(payload) {
+  window.dispatchEvent(new CustomEvent("openrisk:debug", {
+    detail: payload
+  }));
+}
+
+class OpenRiskClient {
+  options;
+  constructor(options) {
+    this.options = options;
+    this.emit("session_start");
+    const setupPageLifecycleFn = this.options.setupPageLifecycle || setupPageLifecycle;
+    const setupVisibilityFn = this.options.setupVisibility || setupVisibility;
+    const setupInteractionFn = this.options.setupInteraction || setupInteraction;
+    const setupScrollFn = this.options.setupScroll || setupScroll;
+    const setupUnloadFn = this.options.setupUnload || setupUnload;
+    setupPageLifecycleFn(this);
+    setupVisibilityFn(this);
+    setupInteractionFn(this);
+    setupScrollFn(this);
+    setupUnloadFn(this);
+  }
+  emit(eventName, extra) {
+    this.track(eventName, extra);
+  }
+  track(eventName, extra) {
+    recordEventTimestamp(eventName);
+    const payload = buildPayload(eventName, extra, this.options.signalsOverride);
+    if (this.options.debug) {
+      emitDebug({
+        event: eventName,
+        payload
+      });
+    }
+    this.send(payload);
+  }
+  send(payload) {
+    try {
+      const body = JSON.stringify(payload);
+      if (navigator.sendBeacon) {
+        navigator.sendBeacon(this.options.endpoint, body);
+        return;
+      }
+      fetch(this.options.endpoint, {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body,
+        keepalive: true
+      }).catch(() => {});
+    } catch {}
+  }
+}
+
+class RiskClient extends OpenRiskClient {
+}

package/dist/lifecycle/interaction.d.ts

@@ -0,0 +1,4 @@
+import type { RiskClient } from "../client";
+export declare function setupInteraction(client: RiskClient): void;
+export declare function resetInteractionState(): void;
+//# sourceMappingURL=interaction.d.ts.map

package/dist/lifecycle/interaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction.d.ts","sourceRoot":"","sources":["../../src/lifecycle/interaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAI5C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,QAyBlD;AAGD,wBAAgB,qBAAqB,SAEpC"}

package/dist/lifecycle/page.d.ts

@@ -0,0 +1,3 @@
+import type { RiskClient } from "../client";
+export declare function setupPageLifecycle(client: RiskClient): void;
+//# sourceMappingURL=page.d.ts.map

package/dist/lifecycle/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../src/lifecycle/page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,QAMpD"}

package/dist/lifecycle/scroll.d.ts

@@ -0,0 +1,4 @@
+import type { RiskClient } from "../client";
+export declare function setupScroll(client: RiskClient): void;
+export declare function resetScrollState(): void;
+//# sourceMappingURL=scroll.d.ts.map

package/dist/lifecycle/scroll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scroll.d.ts","sourceRoot":"","sources":["../../src/lifecycle/scroll.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAM5C,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,QAqB7C;AAGD,wBAAgB,gBAAgB,SAG/B"}

package/dist/lifecycle/unload.d.ts

@@ -0,0 +1,3 @@
+import type { RiskClient } from "../client";
+export declare function setupUnload(client: RiskClient): void;
+//# sourceMappingURL=unload.d.ts.map

package/dist/lifecycle/unload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unload.d.ts","sourceRoot":"","sources":["../../src/lifecycle/unload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,QAQ7C"}

package/dist/lifecycle/visibility.d.ts

@@ -0,0 +1,3 @@
+import type { RiskClient } from "../client";
+export declare function setupVisibility(client: RiskClient): void;
+//# sourceMappingURL=visibility.d.ts.map

package/dist/lifecycle/visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.d.ts","sourceRoot":"","sources":["../../src/lifecycle/visibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,QAQjD"}

package/dist/openrisk.js

@@ -0,0 +1,375 @@
+// src/signals/behavior.ts
+var mouseMoves = 0;
+var lastMove = 0;
+var deltas = [];
+window.addEventListener("mousemove", () => {
+  const now = performance.now();
+  if (lastMove)
+    deltas.push(now - lastMove);
+  lastMove = now;
+  mouseMoves++;
+});
+function collectBehavior() {
+  if (!deltas.length) {
+    return {
+      mouse_entropy: null
+    };
+  }
+  const avg = deltas.reduce((a, b) => a + b, 0) / deltas.length;
+  return {
+    mouse_entropy: Math.min(1, mouseMoves / 50),
+    avg_mouse_interval_ms: Math.round(avg)
+  };
+}
+
+// src/signals/cadence.ts
+var timestamps = [];
+var WINDOW_MS = 60000;
+var STRUCTURAL_EVENTS = new Set([
+  "session_start",
+  "page_view",
+  "page_loaded"
+]);
+function recordEventTimestamp(eventName) {
+  if (STRUCTURAL_EVENTS.has(eventName))
+    return;
+  const now = Date.now();
+  timestamps.push(now);
+  while (timestamps.length > 0) {
+    const oldest = timestamps[0];
+    if (oldest !== undefined && now - oldest > WINDOW_MS) {
+      timestamps.shift();
+    } else {
+      break;
+    }
+  }
+}
+function collectCadence() {
+  if (timestamps.length < 2) {
+    return {
+      events_per_minute: timestamps.length,
+      avg_event_interval_ms: null,
+      burst_detected: false
+    };
+  }
+  const intervals = [];
+  for (let i = 1;i < timestamps.length; i++) {
+    intervals.push(timestamps[i] - timestamps[i - 1]);
+  }
+  const avg = intervals.reduce((a, b) => a + b, 0) / intervals.length;
+  const burst = intervals.some((i) => i < 50);
+  return {
+    events_per_minute: timestamps.length,
+    avg_event_interval_ms: Math.round(avg),
+    burst_detected: burst
+  };
+}
+
+// src/fingerprint/raw.ts
+function collectRawFingerprint() {
+  const canvas = document.createElement("canvas");
+  const ctx = canvas.getContext("2d");
+  let canvas_fp = null;
+  if (ctx) {
+    ctx.textBaseline = "top";
+    ctx.font = "14px Arial";
+    ctx.fillText("openrisk-fp", 2, 2);
+    canvas_fp = canvas.toDataURL();
+  }
+  return {
+    canvas_fp
+  };
+}
+
+// src/fingerprint/index.ts
+function collectFingerprint() {
+  return {
+    mode: "raw",
+    version: "fp_raw_v1",
+    data: collectRawFingerprint()
+  };
+}
+
+// src/signals/device.ts
+function collectDevice() {
+  const screen = window.screen;
+  return {
+    platform: navigator.platform || "unknown",
+    user_agent: navigator.userAgent || "unknown",
+    cpu_cores: navigator.hardwareConcurrency ?? null,
+    memory_gb: navigator.deviceMemory ?? null,
+    touch_support: "ontouchstart" in window,
+    screen: {
+      width: screen?.width ?? null,
+      height: screen?.height ?? null,
+      pixel_ratio: window.devicePixelRatio ?? 1
+    },
+    fingerprint: collectFingerprint()
+  };
+}
+
+// src/signals/environment.ts
+function collectEnvironment() {
+  return {
+    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+    locale: navigator.language,
+    languages: navigator.languages
+  };
+}
+
+// src/signals/features.ts
+function collectFeatures() {
+  return {
+    webdriver: navigator.webdriver === true,
+    plugins_count: navigator.plugins?.length ?? null,
+    languages_count: navigator.languages?.length ?? null,
+    permissions_api: "permissions" in navigator,
+    hardware_concurrency_present: typeof navigator.hardwareConcurrency === "number"
+  };
+}
+
+// src/signals/integrity.ts
+function collectIntegrity() {
+  return {
+    sdk_version: "__SDK_VERSION__",
+    schema_version: "1.0",
+    timestamp_skew_ms: Math.abs(Date.now() - performance.timeOrigin),
+    telemetry_blocked: false
+  };
+}
+
+// src/signals/multitabs.ts
+var TAB_ID = crypto.randomUUID();
+var channel = new BroadcastChannel("openrisk_tabs");
+var peers = new Set;
+peers.add(TAB_ID);
+channel.onmessage = (event) => {
+  const msg = event.data;
+  if (!msg || msg.tabId === TAB_ID)
+    return;
+  if (msg.type === "hello") {
+    peers.add(msg.tabId);
+    channel.postMessage({
+      type: "hello_ack",
+      tabId: TAB_ID
+    });
+  }
+  if (msg.type === "hello_ack") {
+    peers.add(msg.tabId);
+  }
+};
+setTimeout(() => {
+  channel.postMessage({
+    type: "hello",
+    tabId: TAB_ID
+  });
+}, 50);
+function collectMultiTabs() {
+  return {
+    concurrent_tabs_estimate: peers.size,
+    multiple_tabs_detected: peers.size > 1
+  };
+}
+
+// src/signals/navigation.ts
+function collectNavigation() {
+  const nav = performance.getEntriesByType("navigation")[0];
+  return {
+    entry_type: nav?.type ?? "unknown",
+    referrer_type: document.referrer ? "external" : "direct",
+    path_depth: location.pathname.split("/").filter(Boolean).length
+  };
+}
+
+// src/signals/session.ts
+var sessionStart = Date.now();
+var eventCount = 0;
+var pageCount = 1;
+var visibilityChanges = 0;
+document.addEventListener("visibilitychange", () => {
+  visibilityChanges++;
+});
+function collectSession() {
+  eventCount++;
+  return {
+    session_age_ms: Date.now() - sessionStart,
+    event_count: eventCount,
+    page_count: pageCount,
+    tab_visibility_changes: visibilityChanges
+  };
+}
+
+// src/signals/timing.ts
+function collectTiming() {
+  const nav = performance.getEntriesByType("navigation")[0];
+  const pageLoad = nav && nav.domComplete > 0 ? Math.round(nav.domComplete - nav.startTime) : null;
+  const domInteractive = nav && nav.domInteractive > 0 ? Math.round(nav.domInteractive - nav.startTime) : null;
+  return {
+    page_load_ms: pageLoad,
+    dom_interactive_ms: domInteractive,
+    network_rtt_estimate_ms: navigator.connection?.rtt ?? null
+  };
+}
+
+// src/payload.ts
+function buildPayload(eventName, extra, signalsOverride) {
+  const signals = signalsOverride || {
+    environment: collectEnvironment(),
+    device: collectDevice(),
+    session: collectSession(),
+    navigation: collectNavigation(),
+    timing: collectTiming(),
+    behavior: collectBehavior(),
+    cadence: collectCadence(),
+    features: collectFeatures(),
+    multitabs: collectMultiTabs(),
+    integrity: collectIntegrity()
+  };
+  return {
+    event: {
+      name: eventName,
+      timestamp: new Date().toISOString(),
+      event_id: crypto.randomUUID()
+    },
+    signals,
+    extra
+  };
+}
+
+// src/lifecycle/interaction.ts
+var interacted = false;
+function setupInteraction(client) {
+  const markInteraction = (type) => {
+    if (interacted)
+      return;
+    interacted = true;
+    client.emit("first_interaction", {
+      interaction_type: type
+    });
+    cleanup();
+  };
+  const cleanup = () => {
+    window.removeEventListener("mousemove", onMouse);
+    window.removeEventListener("keydown", onKey);
+    window.removeEventListener("touchstart", onTouch);
+  };
+  const onMouse = () => markInteraction("mouse");
+  const onKey = () => markInteraction("keyboard");
+  const onTouch = () => markInteraction("touch");
+  window.addEventListener("mousemove", onMouse, { passive: true });
+  window.addEventListener("keydown", onKey);
+  window.addEventListener("touchstart", onTouch, { passive: true });
+}
+
+// src/lifecycle/page.ts
+function setupPageLifecycle(client) {
+  client.emit("page_view");
+  window.addEventListener("load", () => {
+    client.emit("page_loaded");
+  });
+}
+
+// src/lifecycle/scroll.ts
+var maxScroll = 0;
+var thresholds = [25, 50, 75, 100];
+var sent = new Set;
+function setupScroll(client) {
+  window.addEventListener("scroll", () => {
+    const scrollTop = window.scrollY;
+    const height = document.documentElement.scrollHeight - window.innerHeight;
+    if (height <= 0)
+      return;
+    const percent = Math.round(scrollTop / height * 100);
+    maxScroll = Math.max(maxScroll, percent);
+    for (const t of thresholds) {
+      if (percent >= t && !sent.has(t)) {
+        sent.add(t);
+        client.emit("scroll_depth", { percent: t });
+      }
+    }
+  }, { passive: true });
+}
+
+// src/lifecycle/unload.ts
+function setupUnload(client) {
+  window.addEventListener("beforeunload", () => {
+    client.emit("session_end");
+  });
+  window.addEventListener("pagehide", () => {
+    client.emit("session_end");
+  });
+}
+
+// src/lifecycle/visibility.ts
+function setupVisibility(client) {
+  document.addEventListener("visibilitychange", () => {
+    if (document.visibilityState === "hidden") {
+      client.emit("page_hidden");
+    } else if (document.visibilityState === "visible") {
+      client.emit("page_visible");
+    }
+  });
+}
+
+// src/client.ts
+function emitDebug(payload) {
+  window.dispatchEvent(new CustomEvent("openrisk:debug", {
+    detail: payload
+  }));
+}
+
+class OpenRiskClient {
+  options;
+  constructor(options) {
+    this.options = options;
+    this.emit("session_start");
+    const setupPageLifecycleFn = this.options.setupPageLifecycle || setupPageLifecycle;
+    const setupVisibilityFn = this.options.setupVisibility || setupVisibility;
+    const setupInteractionFn = this.options.setupInteraction || setupInteraction;
+    const setupScrollFn = this.options.setupScroll || setupScroll;
+    const setupUnloadFn = this.options.setupUnload || setupUnload;
+    setupPageLifecycleFn(this);
+    setupVisibilityFn(this);
+    setupInteractionFn(this);
+    setupScrollFn(this);
+    setupUnloadFn(this);
+  }
+  emit(eventName, extra) {
+    this.track(eventName, extra);
+  }
+  track(eventName, extra) {
+    recordEventTimestamp(eventName);
+    const payload = buildPayload(eventName, extra, this.options.signalsOverride);
+    if (this.options.debug) {
+      emitDebug({
+        event: eventName,
+        payload
+      });
+    }
+    this.send(payload);
+  }
+  send(payload) {
+    try {
+      const body = JSON.stringify(payload);
+      if (navigator.sendBeacon) {
+        navigator.sendBeacon(this.options.endpoint, body);
+        return;
+      }
+      fetch(this.options.endpoint, {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body,
+        keepalive: true
+      }).catch(() => {});
+    } catch {}
+  }
+}
+
+class RiskClient extends OpenRiskClient {
+}
+export {
+  RiskClient,
+  OpenRiskClient
+};

package/dist/payload.d.ts

@@ -0,0 +1,10 @@
+export declare function buildPayload(eventName: string, extra?: Record<string, unknown>, signalsOverride?: Record<string, unknown>): {
+    event: {
+        name: string;
+        timestamp: string;
+        event_id: `${string}-${string}-${string}-${string}-${string}`;
+    };
+    signals: Record<string, unknown>;
+    extra: Record<string, unknown> | undefined;
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../src/payload.ts"],"names":[],"mappings":"AAWA,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;EA0B1C"}

package/dist/signals/behavior.d.ts

@@ -0,0 +1,10 @@
+export declare function collectBehavior(): {
+    mouse_entropy: null;
+    avg_mouse_interval_ms?: undefined;
+} | {
+    mouse_entropy: number;
+    avg_mouse_interval_ms: number;
+};
+export declare function simulateMouseMove(): void;
+export declare function resetBehaviorState(): void;
+//# sourceMappingURL=behavior.d.ts.map

package/dist/signals/behavior.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior.d.ts","sourceRoot":"","sources":["../../src/signals/behavior.ts"],"names":[],"mappings":"AAWA,wBAAgB,eAAe;;;;;;EAa9B;AAGD,wBAAgB,iBAAiB,SAKhC;AAGD,wBAAgB,kBAAkB,SAIjC"}

package/dist/signals/cadence.d.ts

@@ -0,0 +1,12 @@
+export declare function recordEventTimestamp(eventName: string): void;
+export declare function collectCadence(): {
+    events_per_minute: number;
+    avg_event_interval_ms: null;
+    burst_detected: boolean;
+} | {
+    events_per_minute: number;
+    avg_event_interval_ms: number;
+    burst_detected: boolean;
+};
+export declare function resetCadenceTimestamps(): void;
+//# sourceMappingURL=cadence.d.ts.map

package/dist/signals/cadence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cadence.d.ts","sourceRoot":"","sources":["../../src/signals/cadence.ts"],"names":[],"mappings":"AASA,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,QAcrD;AAED,wBAAgB,cAAc;;;;;;;;EAuB7B;AAGD,wBAAgB,sBAAsB,SAErC"}

package/dist/signals/device.d.ts

@@ -0,0 +1,20 @@
+export declare function collectDevice(): {
+    platform: "MacIntel" | "Win32" | "Linux x86_64";
+    user_agent: string;
+    cpu_cores: number;
+    memory_gb: any;
+    touch_support: boolean;
+    screen: {
+        width: number;
+        height: number;
+        pixel_ratio: number;
+    };
+    fingerprint: {
+        mode: string;
+        version: string;
+        data: {
+            canvas_fp: string | null;
+        };
+    };
+};
+//# sourceMappingURL=device.d.ts.map

package/dist/signals/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../src/signals/device.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa;;;;;;;;;;;;;;;;;;EAmB5B"}

package/dist/signals/environment.d.ts

@@ -0,0 +1,6 @@
+export declare function collectEnvironment(): {
+    timezone: string;
+    locale: string;
+    languages: readonly string[];
+};
+//# sourceMappingURL=environment.d.ts.map

package/dist/signals/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/signals/environment.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB;;;;EAMjC"}

package/dist/signals/features.d.ts

@@ -0,0 +1,8 @@
+export declare function collectFeatures(): {
+    webdriver: boolean;
+    plugins_count: number;
+    languages_count: number;
+    permissions_api: boolean;
+    hardware_concurrency_present: boolean;
+};
+//# sourceMappingURL=features.d.ts.map

package/dist/signals/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/signals/features.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe;;;;;;EAS9B"}

package/dist/signals/integrity.d.ts

@@ -0,0 +1,7 @@
+export declare function collectIntegrity(): {
+    sdk_version: string;
+    schema_version: string;
+    timestamp_skew_ms: number;
+    telemetry_blocked: boolean;
+};
+//# sourceMappingURL=integrity.d.ts.map

package/dist/signals/integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../src/signals/integrity.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB;;;;;EAO/B"}

package/dist/signals/multitabs.d.ts

@@ -0,0 +1,5 @@
+export declare function collectMultiTabs(): {
+    concurrent_tabs_estimate: number;
+    multiple_tabs_detected: boolean;
+};
+//# sourceMappingURL=multitabs.d.ts.map

package/dist/signals/multitabs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multitabs.d.ts","sourceRoot":"","sources":["../../src/signals/multitabs.ts"],"names":[],"mappings":"AA+BA,wBAAgB,gBAAgB;;;EAK/B"}

package/dist/signals/navigation.d.ts

@@ -0,0 +1,6 @@
+export declare function collectNavigation(): {
+    entry_type: string;
+    referrer_type: string;
+    path_depth: number;
+};
+//# sourceMappingURL=navigation.d.ts.map

package/dist/signals/navigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/signals/navigation.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB;;;;EAUhC"}

package/dist/signals/session.d.ts

@@ -0,0 +1,7 @@
+export declare function collectSession(): {
+    session_age_ms: number;
+    event_count: number;
+    page_count: number;
+    tab_visibility_changes: number;
+};
+//# sourceMappingURL=session.d.ts.map

package/dist/signals/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/signals/session.ts"],"names":[],"mappings":"AASA,wBAAgB,cAAc;;;;;EAS7B"}

package/dist/signals/timing.d.ts

@@ -0,0 +1,6 @@
+export declare function collectTiming(): {
+    page_load_ms: number | null;
+    dom_interactive_ms: number | null;
+    network_rtt_estimate_ms: any;
+};
+//# sourceMappingURL=timing.d.ts.map

package/dist/signals/timing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.d.ts","sourceRoot":"","sources":["../../src/signals/timing.ts"],"names":[],"mappings":"AAAA,wBAAgB,aAAa;;;;EAoB5B"}

package/dist/types.d.ts

@@ -0,0 +1,24 @@
+export type RiskEventName = string;
+export interface RiskEvent {
+    name: RiskEventName;
+    timestamp: string;
+    event_id: string;
+    correlation_id?: string;
+}
+export interface RiskPayload {
+    event: RiskEvent;
+    signals: Record<string, unknown>;
+    custom?: Record<string, unknown>;
+}
+export type RiskClientOptions = {
+    projectKey: string;
+    endpoint: string;
+    debug?: boolean;
+    setupPageLifecycle?: (client: any) => void;
+    setupVisibility?: (client: any) => void;
+    setupInteraction?: (client: any) => void;
+    setupScroll?: (client: any) => void;
+    setupUnload?: (client: any) => void;
+    signalsOverride?: Record<string, unknown>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAGhB,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IAC3C,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IACxC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IACzC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IACpC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;IAGpC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@arirocha/openrisk-client",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./browser": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/openrisk.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "private": false,
+  "devDependencies": {
+    "@types/bun": "latest",
+    "@playwright/test": "^1.58.0",
+    "jsdom": "^27.4.0",
+    "typescript": "^5.5.4"
+  },
+  "scripts": {
+    "dev": "bun build src/index.ts --outfile=../dist/openrisk.js --target=browser --format=esm --watch",
+    "build:esm": "bun build src/index.ts --outdir=dist --target=browser --format=esm",
+    "build:cjs": "bun build src/index.ts --outdir=dist --target=browser --format=cjs",
+    "build:browser": "bun build src/index.ts --outfile=dist/openrisk.js --target=browser --format=esm",
+    "build:types": "bunx tsc -p tsconfig.json --emitDeclarationOnly",
+    "build": "bun run build:esm && bun run build:cjs && bun run build:browser && bun run build:types",
+    "test": "bun test",
+    "test:e2e": "npm run build && playwright test",
+    "test:e2e:ui": "playwright test --ui",
+    "test:e2e:headed": "playwright test --headed",
+    "test:e2e:debug": "playwright test --debug"
+  },
+  "peerDependencies": {
+    "typescript": "^5"
+  }
+}