@deflectbot/deflect-sdk 1.4.0 → 1.4.1-beta.1

package/dist/index.d.ts

@@ -19,94 +19,14 @@ declare class Deflect {
     private resolvePulseConfig;
     private reportError;
     private tryWarmup;
-    /**
-     * @param actionId - The action ID to validate
-     * @returns The sanitized action ID
-     * @throws Error if actionId contains invalid characters
-     */
     private validateActionId;
-    private buildScriptUrl;
-    private fetchScript;
-    private executeScript;
     private prefetchNextScript;
-    private waitForGetToken;
-    private createScriptBlob;
-    private loadScriptElement;
-    private getTokenFromScript;
-    private cleanup;
-    /**
-     * Configures the Deflect SDK with the provided parameters.
-     * Must be called before using getToken() or other SDK methods.
-     *
-     * @param params - Configuration options for the SDK
-     * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-     * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-     * @throws Error if actionId is empty or contains invalid characters
-     *
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * ```
-     */
-    configure(params: DeflectConfig): void;
     private isTestMode;
-    /**
-     * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-     * @returns A promise that resolves to the Deflect token string
-     */
-    solveChallenge(): Promise<string>;
-    /**
-     * Retrieves a Deflect token for the configured action.
-     * The token should be included in requests to your protected endpoints.
-     *
-     * @returns A promise that resolves to the Deflect token string
-     * @throws Error if configure() has not been called first
-     * @throws Error if the script fails to load or execute
-     *
-     * @example
-     * ```typescript
-     * const token = await Deflect.getToken();
-     * // Include token in your API request
-     * fetch('/api/protected', {
-     *   headers: { 'X-Deflect-Token': token }
-     * });
-     * ```
-     */
+    configure(params: DeflectConfig): void;
     getToken(): Promise<string>;
-    /**
-     * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-     * This is automatically called after configure(), but can be manually triggered.
-     *
-     * @returns A promise that resolves to true if warmup succeeded, false otherwise
-     *
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * const warmedUp = await Deflect.warmup();
-     * console.log('Script pre-cached:', warmedUp);
-     * ```
-     */
+    private executeScript;
     warmup(): Promise<boolean>;
-    /**
-     * Clears the cached challenge script.
-     * Useful when you need to force a fresh script fetch on the next getToken() call.
-     */
     clearCache(): void;
-    /**
-     * Injects a Deflect token as a hidden input into a form and submits it.
-     * Designed for use with form onsubmit handlers.
-     *
-     * @param event - The form submit event
-     * @throws Error if not called from a form submit event
-     *
-     * @example
-     * ```html
-     * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-     *   <input name="username" />
-     *   <button type="submit">Login</button>
-     * </form>
-     * ```
-     */
     injectToken(event: SubmitEvent): Promise<void>;
 }
 declare const DeflectInstance: Deflect;

package/dist/index.esm.js

@@ -1,4 +1,6 @@
 import PulseReporter from "./pulse";
+import { fetchScript } from "./scriptClient";
+import { createBlobUrl, loadModuleScript, waitForGlobalFunction, getTokenFromGlobal, cleanup } from "./scriptRunner";
 class Deflect {
   constructor() {
     this.config = null;
@@ -35,9 +37,10 @@ class Deflect {
     if (!this.config?.actionId || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
       return;
     }
+    this.validateActionId(this.config.actionId);
     this.isWarmupInProgress = true;
     try {
-      this.scriptCache = await this.fetchScript();
+      this.scriptCache = await fetchScript(this.config.actionId, this.config.scriptUrl);
       this.hasWarmupError = false;
     } catch {
       this.hasWarmupError = true;
@@ -45,11 +48,6 @@ class Deflect {
       this.isWarmupInProgress = false;
     }
   }
-  /**
-   * @param actionId - The action ID to validate
-   * @returns The sanitized action ID
-   * @throws Error if actionId contains invalid characters
-   */
   validateActionId(actionId) {
     const sanitized = actionId.trim();
     const validPattern = /^[a-zA-Z0-9/_-]+$/;
@@ -58,167 +56,24 @@ class Deflect {
     }
     return encodeURIComponent(sanitized);
   }
-  buildScriptUrl(actionId) {
-    const baseUrl = this.config?.scriptUrl || "https://js.deflect.bot/main.js";
-    const sanitizedActionId = this.validateActionId(actionId);
-    const nonce = Date.now().toString();
-    return `${baseUrl}?action_id=${sanitizedActionId}&_=${nonce}`;
-  }
-  async fetchScript() {
-    if (!this.config?.actionId) {
-      throw new Error("actionId is required");
-    }
-    const url = this.buildScriptUrl(this.config.actionId);
-    try {
-      const response = await fetch(url, {
-        cache: "no-store",
-        mode: "cors",
-        credentials: "omit"
-      });
-      if (!response.ok) {
-        throw new Error(`Failed to fetch script: ${response.status}`);
-      }
-      const content = await response.text();
-      try {
-        const maybeError = JSON.parse(content);
-        if (maybeError.success === false || maybeError.error) {
-          const errorMessage = maybeError.error || "Script fetch failed";
-          const error = new Error(errorMessage);
-          if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
-            error.isUserError = true;
-          }
-          throw error;
-        }
-      } catch (e) {
-        if (!(e instanceof SyntaxError)) {
-          throw e;
-        }
-      }
-      return {
-        content,
-        sessionId: response.headers.get("session_id") || void 0
-      };
-    } catch (error) {
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          method: "fetchScript",
-          action_id: this.config.actionId
-        },
-        {
-          actionId: this.config.actionId,
-          url
-        }
-      );
-      throw error;
-    }
-  }
-  async executeScript(script) {
-    if (script.sessionId && typeof window !== "undefined") {
-      window.Deflect.sessionId = script.sessionId;
-    }
-    const blobUrl = this.createScriptBlob(script.content);
-    let scriptElement = null;
-    try {
-      scriptElement = await this.loadScriptElement(blobUrl);
-      await this.waitForGetToken();
-      const token = await this.getTokenFromScript();
-      this.prefetchNextScript();
-      return token;
-    } catch (error) {
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          method: "executeScript",
-          stage: "load_or_execute",
-          action_id: this.config?.actionId || "unknown"
-        },
-        {
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    } finally {
-      if (scriptElement) {
-        this.cleanup(blobUrl, scriptElement);
-      } else {
-        URL.revokeObjectURL(blobUrl);
-      }
-    }
-  }
   prefetchNextScript() {
     if (!this.hasWarmupError) {
       this.tryWarmup().catch(() => {
       });
     }
   }
-  async waitForGetToken() {
-    return new Promise((resolve, reject) => {
-      const checkInterval = setInterval(() => {
-        if (typeof window !== "undefined" && typeof window.Deflect?.getToken === "function") {
-          clearInterval(checkInterval);
-          resolve();
-        }
-      }, 50);
-      setTimeout(() => {
-        clearInterval(checkInterval);
-        reject(new Error("Timeout: getToken function did not become available within 10 seconds"));
-      }, 1e4);
-    });
-  }
-  createScriptBlob(content) {
-    const blob = new Blob([content], { type: "text/javascript" });
-    return URL.createObjectURL(blob);
-  }
-  async loadScriptElement(blobUrl) {
-    return new Promise((resolve, reject) => {
-      const script = document.createElement("script");
-      script.type = "module";
-      script.src = blobUrl;
-      script.onload = () => resolve(script);
-      script.onerror = () => reject(new Error("Script failed to load"));
-      document.head.appendChild(script);
-    });
-  }
-  async getTokenFromScript() {
-    if (typeof window === "undefined" || typeof window.Deflect?.getToken !== "function") {
-      throw new Error("Script did not load properly - getToken not available");
-    }
-    try {
-      return await window.Deflect.getToken();
-    } catch (error) {
-      throw new Error(`Script execution failed: ${error}`);
-    }
-  }
-  cleanup(blobUrl, scriptElement) {
-    URL.revokeObjectURL(blobUrl);
-    scriptElement.remove();
-    if (typeof window !== "undefined" && window.Deflect?.getToken) {
-      delete window.Deflect.getToken;
+  isTestMode() {
+    if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
+      throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
     }
+    return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
   }
-  /**
-   * Configures the Deflect SDK with the provided parameters.
-   * Must be called before using getToken() or other SDK methods.
-   * 
-   * @param params - Configuration options for the SDK
-   * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-   * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-   * @throws Error if actionId is empty or contains invalid characters
-   * 
-   * @example
-   * ```typescript
-   * Deflect.configure({ actionId: "your-action-id" });
-   * ```
-   */
   configure(params) {
     try {
       if (!params.actionId?.trim()) {
         throw new Error("actionId is required and cannot be empty");
       }
+      this.validateActionId(params.actionId);
       if (this.config?.actionId === params.actionId) {
         return;
       }
@@ -250,41 +105,12 @@ class Deflect {
       throw error;
     }
   }
-  isTestMode() {
-    if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-      throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-    }
-    return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-  }
-  /**
-   * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-   * @returns A promise that resolves to the Deflect token string
-   */
-  async solveChallenge() {
-    return this.getToken();
-  }
-  /**
-   * Retrieves a Deflect token for the configured action.
-   * The token should be included in requests to your protected endpoints.
-   * 
-   * @returns A promise that resolves to the Deflect token string
-   * @throws Error if configure() has not been called first
-   * @throws Error if the script fails to load or execute
-   * 
-   * @example
-   * ```typescript
-   * const token = await Deflect.getToken();
-   * // Include token in your API request
-   * fetch('/api/protected', {
-   *   headers: { 'X-Deflect-Token': token }
-   * });
-   * ```
-   */
   async getToken() {
     try {
       if (!this.config?.actionId) {
-        throw new Error("Must call configure() before solveChallenge()");
+        throw new Error("Must call configure() before getToken()");
       }
+      this.validateActionId(this.config.actionId);
       if (this.isTestMode()) {
         return "TESTTOKEN";
       }
@@ -293,7 +119,7 @@ class Deflect {
         script = this.scriptCache;
         this.scriptCache = null;
       } else {
-        script = await this.fetchScript();
+        script = await fetchScript(this.config.actionId, this.config.scriptUrl);
       }
       return this.executeScript(script);
     } catch (error) {
@@ -318,19 +144,41 @@ class Deflect {
       throw error;
     }
   }
-  /**
-   * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-   * This is automatically called after configure(), but can be manually triggered.
-   * 
-   * @returns A promise that resolves to true if warmup succeeded, false otherwise
-   * 
-   * @example
-   * ```typescript
-   * Deflect.configure({ actionId: "your-action-id" });
-   * const warmedUp = await Deflect.warmup();
-   * console.log('Script pre-cached:', warmedUp);
-   * ```
-   */
+  async executeScript(script) {
+    if (script.sessionId && typeof window !== "undefined") {
+      window.Deflect.sessionId = script.sessionId;
+    }
+    const blobUrl = createBlobUrl(script.content);
+    let scriptElement = null;
+    try {
+      scriptElement = await loadModuleScript(blobUrl);
+      await waitForGlobalFunction("getChallengeToken");
+      const token = await getTokenFromGlobal("getChallengeToken");
+      this.prefetchNextScript();
+      return token;
+    } catch (error) {
+      this.reportError(
+        error,
+        {
+          deflect_sdk_error: "true",
+          method: "executeScript",
+          stage: "load_or_execute",
+          action_id: this.config?.actionId || "unknown"
+        },
+        {
+          hasCache: this.scriptCache !== null,
+          hasWarmupError: this.hasWarmupError
+        }
+      );
+      throw error;
+    } finally {
+      if (scriptElement) {
+        cleanup(blobUrl, scriptElement, "getChallengeToken");
+      } else {
+        URL.revokeObjectURL(blobUrl);
+      }
+    }
+  }
   async warmup() {
     if (!this.config?.actionId) {
       return false;
@@ -342,28 +190,9 @@ class Deflect {
       return false;
     }
   }
-  /**
-   * Clears the cached challenge script.
-   * Useful when you need to force a fresh script fetch on the next getToken() call.
-   */
   clearCache() {
     this.scriptCache = null;
   }
-  /**
-   * Injects a Deflect token as a hidden input into a form and submits it.
-   * Designed for use with form onsubmit handlers.
-   * 
-   * @param event - The form submit event
-   * @throws Error if not called from a form submit event
-   * 
-   * @example
-   * ```html
-   * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-   *   <input name="username" />
-   *   <button type="submit">Login</button>
-   * </form>
-   * ```
-   */
   async injectToken(event) {
     if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
       throw new Error("injectToken: must be called from a form submit event");

package/dist/index.js

@@ -142,6 +142,97 @@
   };
   var pulse_default = PulseReporter;
 
+  // src/scriptClient.ts
+  function buildScriptUrl(actionId, scriptUrl) {
+    const baseUrl = scriptUrl || "https://js.deflect.bot/main.js";
+    const nonce = Date.now().toString();
+    return `${baseUrl}?action_id=${encodeURIComponent(actionId)}&_=${nonce}`;
+  }
+  __name(buildScriptUrl, "buildScriptUrl");
+  async function fetchScript(actionId, scriptUrl) {
+    const url = buildScriptUrl(actionId, scriptUrl);
+    const response = await fetch(url, {
+      cache: "no-store",
+      mode: "cors",
+      credentials: "omit"
+    });
+    const content = await response.text();
+    const error = parseErrorJson(content);
+    if (error) throw error;
+    return {
+      content,
+      sessionId: response.headers.get("session_id") || void 0
+    };
+  }
+  __name(fetchScript, "fetchScript");
+  function parseErrorJson(content) {
+    try {
+      const maybeError = JSON.parse(content);
+      if (maybeError.success === false || maybeError.error) {
+        const errorMessage = maybeError.error || "Script fetch failed";
+        const error = new Error(errorMessage);
+        if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
+          error.isUserError = true;
+        }
+        return error;
+      }
+    } catch (err) {
+      if (!(err instanceof SyntaxError)) {
+        throw err;
+      }
+    }
+    return null;
+  }
+  __name(parseErrorJson, "parseErrorJson");
+
+  // src/scriptRunner.ts
+  function createBlobUrl(content) {
+    const blob = new Blob([content], { type: "text/javascript" });
+    return URL.createObjectURL(blob);
+  }
+  __name(createBlobUrl, "createBlobUrl");
+  function loadModuleScript(blobUrl) {
+    return new Promise((resolve, reject) => {
+      const script = document.createElement("script");
+      script.type = "module";
+      script.src = blobUrl;
+      script.onload = () => resolve(script);
+      script.onerror = () => reject(new Error("Script failed to load"));
+      document.head.appendChild(script);
+    });
+  }
+  __name(loadModuleScript, "loadModuleScript");
+  function waitForGlobalFunction(fnName, timeout = 1e4) {
+    return new Promise((resolve, reject) => {
+      const checkInterval = setInterval(() => {
+        if (typeof window !== "undefined" && typeof window.Deflect?.[fnName] === "function") {
+          clearInterval(checkInterval);
+          resolve();
+        }
+      }, 50);
+      setTimeout(() => {
+        clearInterval(checkInterval);
+        reject(new Error(`Timeout: ${fnName} did not become available within ${timeout / 1e3} seconds`));
+      }, timeout);
+    });
+  }
+  __name(waitForGlobalFunction, "waitForGlobalFunction");
+  async function getTokenFromGlobal(fnName) {
+    if (typeof window === "undefined" || typeof window.Deflect?.[fnName] !== "function") {
+      throw new Error(`${fnName} not available on window.Deflect`);
+    }
+    return window.Deflect[fnName]();
+  }
+  __name(getTokenFromGlobal, "getTokenFromGlobal");
+  function cleanup(blobUrl, scriptElement, fnName) {
+    URL.revokeObjectURL(blobUrl);
+    scriptElement.remove();
+    if (typeof window !== "undefined" && window.Deflect?.[fnName]) {
+      delete window.Deflect[fnName];
+    }
+  }
+  __name(cleanup, "cleanup");
+
   // src/index.ts
   var Deflect = class {
     constructor() {
@@ -182,9 +273,10 @@
       if (!this.config?.actionId || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
         return;
       }
+      this.validateActionId(this.config.actionId);
       this.isWarmupInProgress = true;
       try {
-        this.scriptCache = await this.fetchScript();
+        this.scriptCache = await fetchScript(this.config.actionId, this.config.scriptUrl);
         this.hasWarmupError = false;
       } catch {
         this.hasWarmupError = true;
@@ -192,11 +284,6 @@
         this.isWarmupInProgress = false;
       }
     }
-    /**
-     * @param actionId - The action ID to validate
-     * @returns The sanitized action ID
-     * @throws Error if actionId contains invalid characters
-     */
     validateActionId(actionId) {
       const sanitized = actionId.trim();
       const validPattern = /^[a-zA-Z0-9/_-]+$/;
@@ -205,167 +292,24 @@
       }
       return encodeURIComponent(sanitized);
     }
-    buildScriptUrl(actionId) {
-      const baseUrl = this.config?.scriptUrl || "https://js.deflect.bot/main.js";
-      const sanitizedActionId = this.validateActionId(actionId);
-      const nonce = Date.now().toString();
-      return `${baseUrl}?action_id=${sanitizedActionId}&_=${nonce}`;
-    }
-    async fetchScript() {
-      if (!this.config?.actionId) {
-        throw new Error("actionId is required");
-      }
-      const url = this.buildScriptUrl(this.config.actionId);
-      try {
-        const response = await fetch(url, {
-          cache: "no-store",
-          mode: "cors",
-          credentials: "omit"
-        });
-        if (!response.ok) {
-          throw new Error(`Failed to fetch script: ${response.status}`);
-        }
-        const content = await response.text();
-        try {
-          const maybeError = JSON.parse(content);
-          if (maybeError.success === false || maybeError.error) {
-            const errorMessage = maybeError.error || "Script fetch failed";
-            const error = new Error(errorMessage);
-            if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
-              error.isUserError = true;
-            }
-            throw error;
-          }
-        } catch (e) {
-          if (!(e instanceof SyntaxError)) {
-            throw e;
-          }
-        }
-        return {
-          content,
-          sessionId: response.headers.get("session_id") || void 0
-        };
-      } catch (error) {
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            method: "fetchScript",
-            action_id: this.config.actionId
-          },
-          {
-            actionId: this.config.actionId,
-            url
-          }
-        );
-        throw error;
-      }
-    }
-    async executeScript(script) {
-      if (script.sessionId && typeof window !== "undefined") {
-        window.Deflect.sessionId = script.sessionId;
-      }
-      const blobUrl = this.createScriptBlob(script.content);
-      let scriptElement = null;
-      try {
-        scriptElement = await this.loadScriptElement(blobUrl);
-        await this.waitForGetToken();
-        const token = await this.getTokenFromScript();
-        this.prefetchNextScript();
-        return token;
-      } catch (error) {
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            method: "executeScript",
-            stage: "load_or_execute",
-            action_id: this.config?.actionId || "unknown"
-          },
-          {
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      } finally {
-        if (scriptElement) {
-          this.cleanup(blobUrl, scriptElement);
-        } else {
-          URL.revokeObjectURL(blobUrl);
-        }
-      }
-    }
     prefetchNextScript() {
       if (!this.hasWarmupError) {
         this.tryWarmup().catch(() => {
         });
       }
     }
-    async waitForGetToken() {
-      return new Promise((resolve, reject) => {
-        const checkInterval = setInterval(() => {
-          if (typeof window !== "undefined" && typeof window.Deflect?.getToken === "function") {
-            clearInterval(checkInterval);
-            resolve();
-          }
-        }, 50);
-        setTimeout(() => {
-          clearInterval(checkInterval);
-          reject(new Error("Timeout: getToken function did not become available within 10 seconds"));
-        }, 1e4);
-      });
-    }
-    createScriptBlob(content) {
-      const blob = new Blob([content], { type: "text/javascript" });
-      return URL.createObjectURL(blob);
-    }
-    async loadScriptElement(blobUrl) {
-      return new Promise((resolve, reject) => {
-        const script = document.createElement("script");
-        script.type = "module";
-        script.src = blobUrl;
-        script.onload = () => resolve(script);
-        script.onerror = () => reject(new Error("Script failed to load"));
-        document.head.appendChild(script);
-      });
-    }
-    async getTokenFromScript() {
-      if (typeof window === "undefined" || typeof window.Deflect?.getToken !== "function") {
-        throw new Error("Script did not load properly - getToken not available");
-      }
-      try {
-        return await window.Deflect.getToken();
-      } catch (error) {
-        throw new Error(`Script execution failed: ${error}`);
-      }
-    }
-    cleanup(blobUrl, scriptElement) {
-      URL.revokeObjectURL(blobUrl);
-      scriptElement.remove();
-      if (typeof window !== "undefined" && window.Deflect?.getToken) {
-        delete window.Deflect.getToken;
+    isTestMode() {
+      if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
+        throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
       }
+      return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
     }
-    /**
-     * Configures the Deflect SDK with the provided parameters.
-     * Must be called before using getToken() or other SDK methods.
-     * 
-     * @param params - Configuration options for the SDK
-     * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-     * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-     * @throws Error if actionId is empty or contains invalid characters
-     * 
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * ```
-     */
     configure(params) {
       try {
         if (!params.actionId?.trim()) {
           throw new Error("actionId is required and cannot be empty");
         }
+        this.validateActionId(params.actionId);
         if (this.config?.actionId === params.actionId) {
           return;
         }
@@ -397,41 +341,12 @@
         throw error;
       }
     }
-    isTestMode() {
-      if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-        throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-      }
-      return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-    }
-    /**
-     * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-     * @returns A promise that resolves to the Deflect token string
-     */
-    async solveChallenge() {
-      return this.getToken();
-    }
-    /**
-     * Retrieves a Deflect token for the configured action.
-     * The token should be included in requests to your protected endpoints.
-     * 
-     * @returns A promise that resolves to the Deflect token string
-     * @throws Error if configure() has not been called first
-     * @throws Error if the script fails to load or execute
-     * 
-     * @example
-     * ```typescript
-     * const token = await Deflect.getToken();
-     * // Include token in your API request
-     * fetch('/api/protected', {
-     *   headers: { 'X-Deflect-Token': token }
-     * });
-     * ```
-     */
     async getToken() {
       try {
         if (!this.config?.actionId) {
-          throw new Error("Must call configure() before solveChallenge()");
+          throw new Error("Must call configure() before getToken()");
         }
+        this.validateActionId(this.config.actionId);
         if (this.isTestMode()) {
           return "TESTTOKEN";
         }
@@ -440,7 +355,7 @@
           script = this.scriptCache;
           this.scriptCache = null;
         } else {
-          script = await this.fetchScript();
+          script = await fetchScript(this.config.actionId, this.config.scriptUrl);
         }
         return this.executeScript(script);
       } catch (error) {
@@ -465,19 +380,41 @@
         throw error;
       }
     }
-    /**
-     * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-     * This is automatically called after configure(), but can be manually triggered.
-     * 
-     * @returns A promise that resolves to true if warmup succeeded, false otherwise
-     * 
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * const warmedUp = await Deflect.warmup();
-     * console.log('Script pre-cached:', warmedUp);
-     * ```
-     */
+    async executeScript(script) {
+      if (script.sessionId && typeof window !== "undefined") {
+        window.Deflect.sessionId = script.sessionId;
+      }
+      const blobUrl = createBlobUrl(script.content);
+      let scriptElement = null;
+      try {
+        scriptElement = await loadModuleScript(blobUrl);
+        await waitForGlobalFunction("getChallengeToken");
+        const token = await getTokenFromGlobal("getChallengeToken");
+        this.prefetchNextScript();
+        return token;
+      } catch (error) {
+        this.reportError(
+          error,
+          {
+            deflect_sdk_error: "true",
+            method: "executeScript",
+            stage: "load_or_execute",
+            action_id: this.config?.actionId || "unknown"
+          },
+          {
+            hasCache: this.scriptCache !== null,
+            hasWarmupError: this.hasWarmupError
+          }
+        );
+        throw error;
+      } finally {
+        if (scriptElement) {
+          cleanup(blobUrl, scriptElement, "getChallengeToken");
+        } else {
+          URL.revokeObjectURL(blobUrl);
+        }
+      }
+    }
     async warmup() {
       if (!this.config?.actionId) {
         return false;
@@ -489,28 +426,9 @@
         return false;
       }
     }
-    /**
-     * Clears the cached challenge script.
-     * Useful when you need to force a fresh script fetch on the next getToken() call.
-     */
     clearCache() {
       this.scriptCache = null;
     }
-    /**
-     * Injects a Deflect token as a hidden input into a form and submits it.
-     * Designed for use with form onsubmit handlers.
-     * 
-     * @param event - The form submit event
-     * @throws Error if not called from a form submit event
-     * 
-     * @example
-     * ```html
-     * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-     *   <input name="username" />
-     *   <button type="submit">Login</button>
-     * </form>
-     * ```
-     */
     async injectToken(event) {
       if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
         throw new Error("injectToken: must be called from a form submit event");

package/dist/index.min.js

@@ -1,2 +1,2 @@
-"use strict";(()=>{var d={endpoint:"https://service.yabadabado.top/pulse",projectId:"deflect-sdk",deploymentId:"688529b539803661332b3f70",service:"deflect-sdk",release:"unknown"},g={name:"deflect-js-sdk",version:d.release||"unknown",language:"javascript"},l=class{constructor(e){this.config={...d,...e,endpoint:(e?.endpoint||d.endpoint).replace(/\/$/,"")},this.enabled=!!(this.config.endpoint&&this.config.projectId&&this.config.deploymentId)}captureException(e,t={}){if(!this.enabled||typeof fetch!="function")return;let n=this.buildErrorEvent(e,t);fetch(`${this.config.endpoint}/capture`,{method:"POST",headers:{"Content-Type":"application/json",project_id:this.config.projectId},body:JSON.stringify(n),keepalive:!0}).catch(()=>{})}buildErrorEvent(e,t){let n=this.normalizeError(e),r=this.config.environment||typeof window<"u"&&window.location.hostname||"unknown",i=typeof navigator>"u"?void 0:{name:navigator.userAgent||"browser",version:navigator.appVersion},o=typeof navigator>"u"?void 0:{name:navigator.platform},c=typeof window>"u"?void 0:{model:`${window.screen.width}x${window.screen.height}`,arch:typeof navigator<"u"?navigator.platform:void 0},f=typeof window>"u"?void 0:{method:"GET",url:window.location.href,headers:typeof navigator<"u"?{"User-Agent":navigator.userAgent,...typeof document<"u"&&document.referrer?{Referer:document.referrer}:{}}:void 0};return{event_type:"error",event_id:typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():Math.random().toString(16).slice(2)+Date.now().toString(16),deployment_id:this.config.deploymentId,project_id:this.config.projectId,environment:r,service:this.config.service,timestamp:new Date().toISOString(),release:this.config.release,sdk:{...g,version:this.config.release||g.version},tags:t.tags,context:t.context,error:{level:t.level||"error",message:n.message,exception:this.buildExceptionPayload(n),request:f,runtime:i,os:o,device:c}}}normalizeError(e){if(e instanceof Error)return e;let t=typeof e=="string"?e:"Unknown error";return new Error(t)}buildExceptionPayload(e){let t=this.parseStack(e);return{type:e.name||"Error",value:e.message,stacktrace:t.length?{frames:t}:void 0}}parseStack(e){if(!e.stack)return[];let t=[],n=e.stack.split(`
-`).slice(1);for(let r of n){let i=r.trim().replace(/^at\s+/,""),o=i.includes("(")&&i.endsWith(")"),c=o?i.slice(0,i.indexOf("(")).trim():"",s=(o?i.slice(i.indexOf("(")+1,i.length-1):i).split(":"),a=s[0]||void 0,p=s.length>1?Number(s[1]):void 0,h=s.length>2?Number(s[2]):void 0;a&&t.push({filename:a,abs_path:a,function:c||void 0,lineno:Number.isFinite(p)?p:void 0,colno:Number.isFinite(h)?h:void 0,in_app:!a.includes("node_modules")})}return t}},m=l;var u=class{constructor(){this.config=null;this.scriptCache=null;this.isWarmupInProgress=!1;this.hasWarmupError=!1;this.initializeGlobalState(),this.pulseReporter=new m(this.resolvePulseConfig()),this.setupAutomaticWarmup()}initializeGlobalState(){typeof window>"u"||(window.Deflect=window.Deflect||{})}setupAutomaticWarmup(){typeof window>"u"||(document.readyState==="loading"?document.addEventListener("DOMContentLoaded",()=>this.tryWarmup()):setTimeout(()=>this.tryWarmup(),100))}resolvePulseConfig(){let e=typeof window<"u"&&typeof window.Deflect=="object"&&window.Deflect?.pulseConfig&&typeof window.Deflect.pulseConfig=="object"?window.Deflect.pulseConfig:{};return{...e,environment:e.environment||(typeof window<"u"?window.location.hostname:void 0)}}reportError(e,t,n){this.pulseReporter.captureException(e,{tags:t,context:n})}async tryWarmup(){if(!(!this.config?.actionId||this.isWarmupInProgress||this.scriptCache||this.hasWarmupError)){this.isWarmupInProgress=!0;try{this.scriptCache=await this.fetchScript(),this.hasWarmupError=!1}catch{this.hasWarmupError=!0}finally{this.isWarmupInProgress=!1}}}validateActionId(e){let t=e.trim();if(!/^[a-zA-Z0-9/_-]+$/.test(t))throw new Error("Invalid actionId format: contains disallowed characters");return encodeURIComponent(t)}buildScriptUrl(e){let t=this.config?.scriptUrl||"https://js.deflect.bot/main.js",n=this.validateActionId(e),r=Date.now().toString();return`${t}?action_id=${n}&_=${r}`}async fetchScript(){if(!this.config?.actionId)throw new Error("actionId is required");let e=this.buildScriptUrl(this.config.actionId);try{let t=await fetch(e,{cache:"no-store",mode:"cors",credentials:"omit"});if(!t.ok)throw new Error(`Failed to fetch script: ${t.status}`);let n=await t.text();try{let r=JSON.parse(n);if(r.success===!1||r.error){let i=r.error||"Script fetch failed",o=new Error(i);throw(i==="action_does_not_exist"||i.includes("invalid action"))&&(o.isUserError=!0),o}}catch(r){if(!(r instanceof SyntaxError))throw r}return{content:n,sessionId:t.headers.get("session_id")||void 0}}catch(t){throw this.reportError(t,{deflect_sdk_error:"true",method:"fetchScript",action_id:this.config.actionId},{actionId:this.config.actionId,url:e}),t}}async executeScript(e){e.sessionId&&typeof window<"u"&&(window.Deflect.sessionId=e.sessionId);let t=this.createScriptBlob(e.content),n=null;try{n=await this.loadScriptElement(t),await this.waitForGetToken();let r=await this.getTokenFromScript();return this.prefetchNextScript(),r}catch(r){throw this.reportError(r,{deflect_sdk_error:"true",method:"executeScript",stage:"load_or_execute",action_id:this.config?.actionId||"unknown"},{hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),r}finally{n?this.cleanup(t,n):URL.revokeObjectURL(t)}}prefetchNextScript(){this.hasWarmupError||this.tryWarmup().catch(()=>{})}async waitForGetToken(){return new Promise((e,t)=>{let n=setInterval(()=>{typeof window<"u"&&typeof window.Deflect?.getToken=="function"&&(clearInterval(n),e())},50);setTimeout(()=>{clearInterval(n),t(new Error("Timeout: getToken function did not become available within 10 seconds"))},1e4)})}createScriptBlob(e){let t=new Blob([e],{type:"text/javascript"});return URL.createObjectURL(t)}async loadScriptElement(e){return new Promise((t,n)=>{let r=document.createElement("script");r.type="module",r.src=e,r.onload=()=>t(r),r.onerror=()=>n(new Error("Script failed to load")),document.head.appendChild(r)})}async getTokenFromScript(){if(typeof window>"u"||typeof window.Deflect?.getToken!="function")throw new Error("Script did not load properly - getToken not available");try{return await window.Deflect.getToken()}catch(e){throw new Error(`Script execution failed: ${e}`)}}cleanup(e,t){URL.revokeObjectURL(e),t.remove(),typeof window<"u"&&window.Deflect?.getToken&&delete window.Deflect.getToken}configure(e){try{if(!e.actionId?.trim())throw new Error("actionId is required and cannot be empty");if(this.config?.actionId===e.actionId)return;this.hasWarmupError=!1,this.scriptCache=null,this.config={...e},typeof window<"u"&&(window.Deflect.actionId=e.actionId),this.isTestMode()||this.tryWarmup()}catch(t){let n=t&&typeof t=="object"&&"isUserError"in t&&t.isUserError===!0;throw this.reportError(t,{deflect_sdk_error:"true",deflect_user_error:n?"true":"false",method:"configure",action_id:e?.actionId||"unknown"},{actionId:e?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),t}}isTestMode(){if(this.config?.actionId==="PULSE_TEST"||this.config?.actionId==="SENTRY_TEST")throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");return this.config?.actionId==="t/FFFFFFFFFFFFF/111111111"||this.config?.actionId==="t/FFFFFFFFFFFFF/000000000"}async solveChallenge(){return this.getToken()}async getToken(){try{if(!this.config?.actionId)throw new Error("Must call configure() before solveChallenge()");if(this.isTestMode())return"TESTTOKEN";let e;return this.scriptCache&&!this.isWarmupInProgress?(e=this.scriptCache,this.scriptCache=null):e=await this.fetchScript(),this.executeScript(e)}catch(e){let t=e&&typeof e=="object"&&"isUserError"in e&&e.isUserError===!0;throw this.reportError(e,{deflect_sdk_error:"true",deflect_user_error:t?"true":"false",method:"getToken",action_id:this.config?.actionId||"unknown",has_cache:this.scriptCache!==null?"true":"false",has_warmup_error:this.hasWarmupError?"true":"false",stage:"call"},{actionId:this.config?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),e}}async warmup(){if(!this.config?.actionId)return!1;try{return await this.tryWarmup(),this.scriptCache!==null}catch{return!1}}clearCache(){this.scriptCache=null}async injectToken(e){if(!e||!e.target||!(e.target instanceof HTMLFormElement))throw new Error("injectToken: must be called from a form submit event");e.preventDefault();let t=e.target,n=await this.getToken();Array.from(t.querySelectorAll('input[name="deflect_token"]')).forEach(i=>i.remove());let r=document.createElement("input");r.type="hidden",r.name="deflect_token",r.value=n,t.appendChild(r),t.submit()}},w=new u;typeof window<"u"&&(window.Deflect=w);var P=w;})();
+"use strict";(()=>{var d={endpoint:"https://service.yabadabado.top/pulse",projectId:"deflect-sdk",deploymentId:"688529b539803661332b3f70",service:"deflect-sdk",release:"unknown"},w={name:"deflect-js-sdk",version:d.release||"unknown",language:"javascript"},u=class{constructor(e){this.config={...d,...e,endpoint:(e?.endpoint||d.endpoint).replace(/\/$/,"")},this.enabled=!!(this.config.endpoint&&this.config.projectId&&this.config.deploymentId)}captureException(e,t={}){if(!this.enabled||typeof fetch!="function")return;let n=this.buildErrorEvent(e,t);fetch(`${this.config.endpoint}/capture`,{method:"POST",headers:{"Content-Type":"application/json",project_id:this.config.projectId},body:JSON.stringify(n),keepalive:!0}).catch(()=>{})}buildErrorEvent(e,t){let n=this.normalizeError(e),i=this.config.environment||typeof window<"u"&&window.location.hostname||"unknown",o=typeof navigator>"u"?void 0:{name:navigator.userAgent||"browser",version:navigator.appVersion},a=typeof navigator>"u"?void 0:{name:navigator.platform},l=typeof window>"u"?void 0:{model:`${window.screen.width}x${window.screen.height}`,arch:typeof navigator<"u"?navigator.platform:void 0},g=typeof window>"u"?void 0:{method:"GET",url:window.location.href,headers:typeof navigator<"u"?{"User-Agent":navigator.userAgent,...typeof document<"u"&&document.referrer?{Referer:document.referrer}:{}}:void 0};return{event_type:"error",event_id:typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():Math.random().toString(16).slice(2)+Date.now().toString(16),deployment_id:this.config.deploymentId,project_id:this.config.projectId,environment:i,service:this.config.service,timestamp:new Date().toISOString(),release:this.config.release,sdk:{...w,version:this.config.release||w.version},tags:t.tags,context:t.context,error:{level:t.level||"error",message:n.message,exception:this.buildExceptionPayload(n),request:g,runtime:o,os:a,device:l}}}normalizeError(e){if(e instanceof Error)return e;let t=typeof e=="string"?e:"Unknown error";return new Error(t)}buildExceptionPayload(e){let t=this.parseStack(e);return{type:e.name||"Error",value:e.message,stacktrace:t.length?{frames:t}:void 0}}parseStack(e){if(!e.stack)return[];let t=[],n=e.stack.split(`
+`).slice(1);for(let i of n){let o=i.trim().replace(/^at\s+/,""),a=o.includes("(")&&o.endsWith(")"),l=a?o.slice(0,o.indexOf("(")).trim():"",s=(a?o.slice(o.indexOf("(")+1,o.length-1):o).split(":"),c=s[0]||void 0,h=s.length>1?Number(s[1]):void 0,m=s.length>2?Number(s[2]):void 0;c&&t.push({filename:c,abs_path:c,function:l||void 0,lineno:Number.isFinite(h)?h:void 0,colno:Number.isFinite(m)?m:void 0,in_app:!c.includes("node_modules")})}return t}},v=u;function k(r,e){let t=e||"https://js.deflect.bot/main.js",n=Date.now().toString();return`${t}?action_id=${encodeURIComponent(r)}&_=${n}`}async function f(r,e){let t=k(r,e),n=await fetch(t,{cache:"no-store",mode:"cors",credentials:"omit"}),i=await n.text(),o=_(i);if(o)throw o;return{content:i,sessionId:n.headers.get("session_id")||void 0}}function _(r){try{let e=JSON.parse(r);if(e.success===!1||e.error){let t=e.error||"Script fetch failed",n=new Error(t);return(t==="action_does_not_exist"||t.includes("invalid action"))&&(n.isUserError=!0),n}}catch(e){if(!(e instanceof SyntaxError))throw e}return null}function y(r){let e=new Blob([r],{type:"text/javascript"});return URL.createObjectURL(e)}function E(r){return new Promise((e,t)=>{let n=document.createElement("script");n.type="module",n.src=r,n.onload=()=>e(n),n.onerror=()=>t(new Error("Script failed to load")),document.head.appendChild(n)})}function I(r,e=1e4){return new Promise((t,n)=>{let i=setInterval(()=>{typeof window<"u"&&typeof window.Deflect?.[r]=="function"&&(clearInterval(i),t())},50);setTimeout(()=>{clearInterval(i),n(new Error(`Timeout: ${r} did not become available within ${e/1e3} seconds`))},e)})}async function P(r){if(typeof window>"u"||typeof window.Deflect?.[r]!="function")throw new Error(`${r} not available on window.Deflect`);return window.Deflect[r]()}function b(r,e,t){URL.revokeObjectURL(r),e.remove(),typeof window<"u"&&window.Deflect?.[t]&&delete window.Deflect[t]}var p=class{constructor(){this.config=null;this.scriptCache=null;this.isWarmupInProgress=!1;this.hasWarmupError=!1;this.initializeGlobalState(),this.pulseReporter=new v(this.resolvePulseConfig()),this.setupAutomaticWarmup()}initializeGlobalState(){typeof window>"u"||(window.Deflect=window.Deflect||{})}setupAutomaticWarmup(){typeof window>"u"||(document.readyState==="loading"?document.addEventListener("DOMContentLoaded",()=>this.tryWarmup()):setTimeout(()=>this.tryWarmup(),100))}resolvePulseConfig(){let e=typeof window<"u"&&typeof window.Deflect=="object"&&window.Deflect?.pulseConfig&&typeof window.Deflect.pulseConfig=="object"?window.Deflect.pulseConfig:{};return{...e,environment:e.environment||(typeof window<"u"?window.location.hostname:void 0)}}reportError(e,t,n){this.pulseReporter.captureException(e,{tags:t,context:n})}async tryWarmup(){if(!(!this.config?.actionId||this.isWarmupInProgress||this.scriptCache||this.hasWarmupError)){this.validateActionId(this.config.actionId),this.isWarmupInProgress=!0;try{this.scriptCache=await f(this.config.actionId,this.config.scriptUrl),this.hasWarmupError=!1}catch{this.hasWarmupError=!0}finally{this.isWarmupInProgress=!1}}}validateActionId(e){let t=e.trim();if(!/^[a-zA-Z0-9/_-]+$/.test(t))throw new Error("Invalid actionId format: contains disallowed characters");return encodeURIComponent(t)}prefetchNextScript(){this.hasWarmupError||this.tryWarmup().catch(()=>{})}isTestMode(){if(this.config?.actionId==="PULSE_TEST"||this.config?.actionId==="SENTRY_TEST")throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");return this.config?.actionId==="t/FFFFFFFFFFFFF/111111111"||this.config?.actionId==="t/FFFFFFFFFFFFF/000000000"}configure(e){try{if(!e.actionId?.trim())throw new Error("actionId is required and cannot be empty");if(this.validateActionId(e.actionId),this.config?.actionId===e.actionId)return;this.hasWarmupError=!1,this.scriptCache=null,this.config={...e},typeof window<"u"&&(window.Deflect.actionId=e.actionId),this.isTestMode()||this.tryWarmup()}catch(t){let n=t&&typeof t=="object"&&"isUserError"in t&&t.isUserError===!0;throw this.reportError(t,{deflect_sdk_error:"true",deflect_user_error:n?"true":"false",method:"configure",action_id:e?.actionId||"unknown"},{actionId:e?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),t}}async getToken(){try{if(!this.config?.actionId)throw new Error("Must call configure() before getToken()");if(this.validateActionId(this.config.actionId),this.isTestMode())return"TESTTOKEN";let e;return this.scriptCache&&!this.isWarmupInProgress?(e=this.scriptCache,this.scriptCache=null):e=await f(this.config.actionId,this.config.scriptUrl),this.executeScript(e)}catch(e){let t=e&&typeof e=="object"&&"isUserError"in e&&e.isUserError===!0;throw this.reportError(e,{deflect_sdk_error:"true",deflect_user_error:t?"true":"false",method:"getToken",action_id:this.config?.actionId||"unknown",has_cache:this.scriptCache!==null?"true":"false",has_warmup_error:this.hasWarmupError?"true":"false",stage:"call"},{actionId:this.config?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),e}}async executeScript(e){e.sessionId&&typeof window<"u"&&(window.Deflect.sessionId=e.sessionId);let t=y(e.content),n=null;try{n=await E(t),await I("getChallengeToken");let i=await P("getChallengeToken");return this.prefetchNextScript(),i}catch(i){throw this.reportError(i,{deflect_sdk_error:"true",method:"executeScript",stage:"load_or_execute",action_id:this.config?.actionId||"unknown"},{hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),i}finally{n?b(t,n,"getChallengeToken"):URL.revokeObjectURL(t)}}async warmup(){if(!this.config?.actionId)return!1;try{return await this.tryWarmup(),this.scriptCache!==null}catch{return!1}}clearCache(){this.scriptCache=null}async injectToken(e){if(!e||!e.target||!(e.target instanceof HTMLFormElement))throw new Error("injectToken: must be called from a form submit event");e.preventDefault();let t=e.target,n=await this.getToken();Array.from(t.querySelectorAll('input[name="deflect_token"]')).forEach(o=>o.remove());let i=document.createElement("input");i.type="hidden",i.name="deflect_token",i.value=n,t.appendChild(i),t.submit()}},S=new p;typeof window<"u"&&(window.Deflect=S);var j=S;})();

package/dist/scriptClient.d.ts

@@ -0,0 +1,7 @@
+export interface DeflectScript {
+    sessionId?: string;
+    content: string;
+}
+export declare function buildScriptUrl(actionId: string, scriptUrl?: string): string;
+export declare function fetchScript(actionId: string, scriptUrl?: string): Promise<DeflectScript>;
+export declare function parseErrorJson(content: string): Error | null;

package/dist/scriptRunner.d.ts

@@ -0,0 +1,5 @@
+export declare function createBlobUrl(content: string): string;
+export declare function loadModuleScript(blobUrl: string): Promise<HTMLScriptElement>;
+export declare function waitForGlobalFunction(fnName: string, timeout?: number): Promise<void>;
+export declare function getTokenFromGlobal(fnName: string): Promise<string>;
+export declare function cleanup(blobUrl: string, scriptElement: HTMLScriptElement, fnName: string): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deflectbot/deflect-sdk",
-  "version": "1.4.0",
+  "version": "1.4.1-beta.1",
   "description": "SDK for deflect.bot - Use it for seamless captcha integration on any website.",
   "main": "dist/index.min.js",
   "module": "dist/index.esm.js",