@deflectbot/deflect-sdk 1.4.1 → 1.4.4-beta.0

package/README.md

@@ -31,48 +31,52 @@ Use `@deflect-sdk@latest` to always use the latest version, or specify a version
 <script src="https://cdn.jsdelivr.net/npm/@deflectbot/deflect-sdk@latest/dist/index.min.js"></script>
 ```
 
-## Configuration
+## Usage (instance-based)
 
-Deflect works through Defense Actions™, which allows you to either setup a global configuration one-time to work across your entire application, or individual and more customized Defense Actions™ for each protected endpoint.
-
-#### One-time global initialization.
+The SDK uses lightweight clients so you can create multiple independent configs (one per actionId) without global state conflicts.
 
 ```ts
-Deflect.configure({
+import Deflect, { DeflectConfig } from "@deflectbot/deflect-sdk";
+
+const client = Deflect.createClient({
   actionId: "<ACTION_ID>",
-});
+  // optional
+  scriptUrl: "https://custom-host/main.js", // overrides script origin
+  prefetch: true, // default
+  extraArgs: { debug: true }, // appended as query params => &debug=true
+} satisfies DeflectConfig);
+
+const token = await client.getToken();
 ```
 
-#### To get a token to pass to a protected endpoint
+### Multiple clients on the same page
 
 ```ts
-const token = await Deflect.getToken(); // returns token as string
-```
+const loginClient = Deflect.createClient({ actionId: "login" });
+const signupClient = Deflect.createClient({ actionId: "signup" });
 
-#### Helper for form submit
+const loginToken = await loginClient.getToken();
+const signupToken = await signupClient.getToken();
+```
 
-If you're using forms like this:
+### Form helper with an instance
 
 ```html
-<form action="/login" method="POST">
+<form action="/login" method="POST" onsubmit="return loginClient.injectToken(event)">
   <input name="username" />
   <input name="password" type="password" />
   <button type="submit">Login</button>
 </form>
+
+<script type="module">
+  import Deflect from "https://cdn.jsdelivr.net/npm/@deflectbot/deflect-sdk@latest/dist/index.esm.js";
+  const loginClient = Deflect.createClient({ actionId: "login" });
+  window.loginClient = loginClient;
+</script>
 ```
 
-You can use the helper as shown:
+`injectToken(event)` fetches a token, injects it as a hidden `deflect_token` input, and submits the form.
 
-```html
-<form
-  action="/login"
-  method="POST"
-  onsubmit="return Deflect.injectToken(event)"
->
-  <input name="username" />
-  <input name="password" type="password" />
-  <button type="submit">Login</button>
-</form>
-```
+### Legacy global (still available, but prefer clients)
 
-`injectToken()` will fetch a token and insert it as a hidden input named `deflect_token` into your form. Use it directly in your form's onsubmit attribute:
+The previous `Deflect.configure`/`Deflect.getToken` singleton still works for single-action setups, but the recommended approach is to create per-action clients as shown above.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deflectbot/deflect-sdk",
-  "version": "1.4.1",
+  "version": "1.4.4-beta.0",
   "description": "SDK for deflect.bot - Use it for seamless captcha integration on any website.",
   "main": "dist/index.min.js",
   "module": "dist/index.esm.js",

package/dist/index.d.ts

@@ -1,113 +0,0 @@
-interface DeflectConfig {
-    actionId: string;
-    scriptUrl?: string;
-}
-declare global {
-    interface Window {
-        Deflect: any;
-    }
-}
-declare class Deflect {
-    private config;
-    private scriptCache;
-    private isWarmupInProgress;
-    private hasWarmupError;
-    private pulseReporter;
-    constructor();
-    private initializeGlobalState;
-    private setupAutomaticWarmup;
-    private resolvePulseConfig;
-    private reportError;
-    private tryWarmup;
-    /**
-     * @param actionId - The action ID to validate
-     * @returns The sanitized action ID
-     * @throws Error if actionId contains invalid characters
-     */
-    private validateActionId;
-    private buildScriptUrl;
-    private fetchScript;
-    private executeScript;
-    private prefetchNextScript;
-    private waitForGetToken;
-    private createScriptBlob;
-    private loadScriptElement;
-    private getTokenFromScript;
-    private cleanup;
-    /**
-     * Configures the Deflect SDK with the provided parameters.
-     * Must be called before using getToken() or other SDK methods.
-     *
-     * @param params - Configuration options for the SDK
-     * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-     * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-     * @throws Error if actionId is empty or contains invalid characters
-     *
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * ```
-     */
-    configure(params: DeflectConfig): void;
-    private isTestMode;
-    /**
-     * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-     * @returns A promise that resolves to the Deflect token string
-     */
-    solveChallenge(): Promise<string>;
-    /**
-     * Retrieves a Deflect token for the configured action.
-     * The token should be included in requests to your protected endpoints.
-     *
-     * @returns A promise that resolves to the Deflect token string
-     * @throws Error if configure() has not been called first
-     * @throws Error if the script fails to load or execute
-     *
-     * @example
-     * ```typescript
-     * const token = await Deflect.getToken();
-     * // Include token in your API request
-     * fetch('/api/protected', {
-     *   headers: { 'X-Deflect-Token': token }
-     * });
-     * ```
-     */
-    getToken(): Promise<string>;
-    /**
-     * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-     * This is automatically called after configure(), but can be manually triggered.
-     *
-     * @returns A promise that resolves to true if warmup succeeded, false otherwise
-     *
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * const warmedUp = await Deflect.warmup();
-     * console.log('Script pre-cached:', warmedUp);
-     * ```
-     */
-    warmup(): Promise<boolean>;
-    /**
-     * Clears the cached challenge script.
-     * Useful when you need to force a fresh script fetch on the next getToken() call.
-     */
-    clearCache(): void;
-    /**
-     * Injects a Deflect token as a hidden input into a form and submits it.
-     * Designed for use with form onsubmit handlers.
-     *
-     * @param event - The form submit event
-     * @throws Error if not called from a form submit event
-     *
-     * @example
-     * ```html
-     * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-     *   <input name="username" />
-     *   <button type="submit">Login</button>
-     * </form>
-     * ```
-     */
-    injectToken(event: SubmitEvent): Promise<void>;
-}
-declare const _default: Deflect;
-export default _default;

package/dist/index.esm.js

@@ -1,388 +0,0 @@
-import PulseReporter from "./pulse";
-class Deflect {
-  constructor() {
-    this.config = null;
-    this.scriptCache = null;
-    this.isWarmupInProgress = false;
-    this.hasWarmupError = false;
-    this.initializeGlobalState();
-    this.pulseReporter = new PulseReporter(this.resolvePulseConfig());
-    this.setupAutomaticWarmup();
-  }
-  initializeGlobalState() {
-    if (typeof window === "undefined") return;
-    window.Deflect = window.Deflect || {};
-  }
-  setupAutomaticWarmup() {
-    if (typeof window === "undefined") return;
-    if (document.readyState === "loading") {
-      document.addEventListener("DOMContentLoaded", () => this.tryWarmup());
-    } else {
-      setTimeout(() => this.tryWarmup(), 100);
-    }
-  }
-  resolvePulseConfig() {
-    const runtimeConfig = typeof window !== "undefined" && typeof window.Deflect === "object" && window.Deflect?.pulseConfig && typeof window.Deflect.pulseConfig === "object" ? window.Deflect.pulseConfig : {};
-    return {
-      ...runtimeConfig,
-      environment: runtimeConfig.environment || (typeof window !== "undefined" ? window.location.hostname : void 0)
-    };
-  }
-  reportError(error, tags, context) {
-    this.pulseReporter.captureException(error, { tags, context });
-  }
-  async tryWarmup() {
-    if (!this.config?.actionId || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
-      return;
-    }
-    this.isWarmupInProgress = true;
-    try {
-      this.scriptCache = await this.fetchScript();
-      this.hasWarmupError = false;
-    } catch {
-      this.hasWarmupError = true;
-    } finally {
-      this.isWarmupInProgress = false;
-    }
-  }
-  /**
-   * @param actionId - The action ID to validate
-   * @returns The sanitized action ID
-   * @throws Error if actionId contains invalid characters
-   */
-  validateActionId(actionId) {
-    const sanitized = actionId.trim();
-    const validPattern = /^[a-zA-Z0-9/_-]+$/;
-    if (!validPattern.test(sanitized)) {
-      throw new Error("Invalid actionId format: contains disallowed characters");
-    }
-    return encodeURIComponent(sanitized);
-  }
-  buildScriptUrl(actionId) {
-    const baseUrl = this.config?.scriptUrl || "https://js.deflect.bot/main.js";
-    const sanitizedActionId = this.validateActionId(actionId);
-    const nonce = Date.now().toString();
-    return `${baseUrl}?action_id=${sanitizedActionId}&_=${nonce}`;
-  }
-  async fetchScript() {
-    if (!this.config?.actionId) {
-      throw new Error("actionId is required");
-    }
-    const url = this.buildScriptUrl(this.config.actionId);
-    try {
-      const response = await fetch(url, {
-        cache: "no-store",
-        mode: "cors",
-        credentials: "omit"
-      });
-      if (!response.ok) {
-        throw new Error(`Failed to fetch script: ${response.status}`);
-      }
-      const content = await response.text();
-      try {
-        const maybeError = JSON.parse(content);
-        if (maybeError.success === false || maybeError.error) {
-          const errorMessage = maybeError.error || "Script fetch failed";
-          const error = new Error(errorMessage);
-          if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
-            error.isUserError = true;
-          }
-          throw error;
-        }
-      } catch (e) {
-        if (!(e instanceof SyntaxError)) {
-          throw e;
-        }
-      }
-      return {
-        content,
-        sessionId: response.headers.get("session_id") || void 0
-      };
-    } catch (error) {
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          method: "fetchScript",
-          action_id: this.config.actionId
-        },
-        {
-          actionId: this.config.actionId,
-          url
-        }
-      );
-      throw error;
-    }
-  }
-  async executeScript(script) {
-    if (script.sessionId && typeof window !== "undefined") {
-      window.Deflect.sessionId = script.sessionId;
-    }
-    const blobUrl = this.createScriptBlob(script.content);
-    let scriptElement = null;
-    try {
-      scriptElement = await this.loadScriptElement(blobUrl);
-      await this.waitForGetToken();
-      const token = await this.getTokenFromScript();
-      this.prefetchNextScript();
-      return token;
-    } catch (error) {
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          method: "executeScript",
-          stage: "load_or_execute",
-          action_id: this.config?.actionId || "unknown"
-        },
-        {
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    } finally {
-      if (scriptElement) {
-        this.cleanup(blobUrl, scriptElement);
-      } else {
-        URL.revokeObjectURL(blobUrl);
-      }
-    }
-  }
-  prefetchNextScript() {
-    if (!this.hasWarmupError) {
-      this.tryWarmup().catch(() => {
-      });
-    }
-  }
-  async waitForGetToken() {
-    return new Promise((resolve, reject) => {
-      const checkInterval = setInterval(() => {
-        if (typeof window !== "undefined" && typeof window.Deflect?.getToken === "function") {
-          clearInterval(checkInterval);
-          resolve();
-        }
-      }, 50);
-      setTimeout(() => {
-        clearInterval(checkInterval);
-        reject(new Error("Timeout: getToken function did not become available within 10 seconds"));
-      }, 1e4);
-    });
-  }
-  createScriptBlob(content) {
-    const blob = new Blob([content], { type: "text/javascript" });
-    return URL.createObjectURL(blob);
-  }
-  async loadScriptElement(blobUrl) {
-    return new Promise((resolve, reject) => {
-      const script = document.createElement("script");
-      script.type = "module";
-      script.src = blobUrl;
-      script.onload = () => resolve(script);
-      script.onerror = () => reject(new Error("Script failed to load"));
-      document.head.appendChild(script);
-    });
-  }
-  async getTokenFromScript() {
-    if (typeof window === "undefined" || typeof window.Deflect?.getToken !== "function") {
-      throw new Error("Script did not load properly - getToken not available");
-    }
-    try {
-      return await window.Deflect.getToken();
-    } catch (error) {
-      throw new Error(`Script execution failed: ${error}`);
-    }
-  }
-  cleanup(blobUrl, scriptElement) {
-    URL.revokeObjectURL(blobUrl);
-    scriptElement.remove();
-    if (typeof window !== "undefined" && window.Deflect?.getToken) {
-      delete window.Deflect.getToken;
-    }
-  }
-  /**
-   * Configures the Deflect SDK with the provided parameters.
-   * Must be called before using getToken() or other SDK methods.
-   * 
-   * @param params - Configuration options for the SDK
-   * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-   * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-   * @throws Error if actionId is empty or contains invalid characters
-   * 
-   * @example
-   * ```typescript
-   * Deflect.configure({ actionId: "your-action-id" });
-   * ```
-   */
-  configure(params) {
-    try {
-      if (!params.actionId?.trim()) {
-        throw new Error("actionId is required and cannot be empty");
-      }
-      if (this.config?.actionId === params.actionId) {
-        return;
-      }
-      this.hasWarmupError = false;
-      this.scriptCache = null;
-      this.config = { ...params };
-      if (typeof window !== "undefined") {
-        window.Deflect.actionId = params.actionId;
-      }
-      if (!this.isTestMode()) {
-        this.tryWarmup();
-      }
-    } catch (error) {
-      const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          deflect_user_error: isUserError ? "true" : "false",
-          method: "configure",
-          action_id: params?.actionId || "unknown"
-        },
-        {
-          actionId: params?.actionId,
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    }
-  }
-  isTestMode() {
-    if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-      throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-    }
-    return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-  }
-  /**
-   * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-   * @returns A promise that resolves to the Deflect token string
-   */
-  async solveChallenge() {
-    return this.getToken();
-  }
-  /**
-   * Retrieves a Deflect token for the configured action.
-   * The token should be included in requests to your protected endpoints.
-   * 
-   * @returns A promise that resolves to the Deflect token string
-   * @throws Error if configure() has not been called first
-   * @throws Error if the script fails to load or execute
-   * 
-   * @example
-   * ```typescript
-   * const token = await Deflect.getToken();
-   * // Include token in your API request
-   * fetch('/api/protected', {
-   *   headers: { 'X-Deflect-Token': token }
-   * });
-   * ```
-   */
-  async getToken() {
-    try {
-      if (!this.config?.actionId) {
-        throw new Error("Must call configure() before solveChallenge()");
-      }
-      if (this.isTestMode()) {
-        return "TESTTOKEN";
-      }
-      let script;
-      if (this.scriptCache && !this.isWarmupInProgress) {
-        script = this.scriptCache;
-        this.scriptCache = null;
-      } else {
-        script = await this.fetchScript();
-      }
-      return this.executeScript(script);
-    } catch (error) {
-      const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          deflect_user_error: isUserError ? "true" : "false",
-          method: "getToken",
-          action_id: this.config?.actionId || "unknown",
-          has_cache: this.scriptCache !== null ? "true" : "false",
-          has_warmup_error: this.hasWarmupError ? "true" : "false",
-          stage: "call"
-        },
-        {
-          actionId: this.config?.actionId,
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    }
-  }
-  /**
-   * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-   * This is automatically called after configure(), but can be manually triggered.
-   * 
-   * @returns A promise that resolves to true if warmup succeeded, false otherwise
-   * 
-   * @example
-   * ```typescript
-   * Deflect.configure({ actionId: "your-action-id" });
-   * const warmedUp = await Deflect.warmup();
-   * console.log('Script pre-cached:', warmedUp);
-   * ```
-   */
-  async warmup() {
-    if (!this.config?.actionId) {
-      return false;
-    }
-    try {
-      await this.tryWarmup();
-      return this.scriptCache !== null;
-    } catch {
-      return false;
-    }
-  }
-  /**
-   * Clears the cached challenge script.
-   * Useful when you need to force a fresh script fetch on the next getToken() call.
-   */
-  clearCache() {
-    this.scriptCache = null;
-  }
-  /**
-   * Injects a Deflect token as a hidden input into a form and submits it.
-   * Designed for use with form onsubmit handlers.
-   * 
-   * @param event - The form submit event
-   * @throws Error if not called from a form submit event
-   * 
-   * @example
-   * ```html
-   * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-   *   <input name="username" />
-   *   <button type="submit">Login</button>
-   * </form>
-   * ```
-   */
-  async injectToken(event) {
-    if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
-      throw new Error("injectToken: must be called from a form submit event");
-    }
-    event.preventDefault();
-    const form = event.target;
-    const token = await this.getToken();
-    Array.from(form.querySelectorAll('input[name="deflect_token"]')).forEach(
-      (el) => el.remove()
-    );
-    const hidden = document.createElement("input");
-    hidden.type = "hidden";
-    hidden.name = "deflect_token";
-    hidden.value = token;
-    form.appendChild(hidden);
-    form.submit();
-  }
-}
-var src_default = new Deflect();
-export {
-  src_default as default
-};

package/dist/index.js

@@ -1,533 +0,0 @@
-"use strict";
-(() => {
-  var __defProp = Object.defineProperty;
-  var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-
-  // src/pulse.ts
-  var REPORT_CONFIG = {
-    endpoint: "https://service.yabadabado.top/pulse",
-    projectId: "deflect-sdk",
-    deploymentId: "688529b539803661332b3f70",
-    service: "deflect-sdk",
-    release: "unknown"
-  };
-  var PULSE_SDK_INFO = {
-    name: "deflect-js-sdk",
-    version: REPORT_CONFIG.release || "unknown",
-    language: "javascript"
-  };
-  var PulseReporter = class {
-    static {
-      __name(this, "PulseReporter");
-    }
-    constructor(config) {
-      this.config = {
-        ...REPORT_CONFIG,
-        ...config,
-        endpoint: (config?.endpoint || REPORT_CONFIG.endpoint).replace(/\/$/, "")
-      };
-      this.enabled = Boolean(
-        this.config.endpoint && this.config.projectId && this.config.deploymentId
-      );
-    }
-    captureException(error, options = {}) {
-      if (!this.enabled || typeof fetch !== "function") {
-        return;
-      }
-      const event = this.buildErrorEvent(error, options);
-      fetch(`${this.config.endpoint}/capture`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          project_id: this.config.projectId
-        },
-        body: JSON.stringify(event),
-        keepalive: true
-      }).catch(() => {
-      });
-    }
-    buildErrorEvent(error, options) {
-      const normalizedError = this.normalizeError(error);
-      const environment = this.config.environment || (typeof window !== "undefined" ? window.location.hostname || "unknown" : "unknown");
-      const runtimeInfo = typeof navigator === "undefined" ? void 0 : {
-        name: navigator.userAgent || "browser",
-        version: navigator.appVersion
-      };
-      const osInfo = typeof navigator === "undefined" ? void 0 : {
-        name: navigator.platform
-      };
-      const deviceInfo = typeof window === "undefined" ? void 0 : {
-        model: `${window.screen.width}x${window.screen.height}`,
-        arch: typeof navigator !== "undefined" ? navigator.platform : void 0
-      };
-      const requestInfo = typeof window === "undefined" ? void 0 : {
-        method: "GET",
-        url: window.location.href,
-        headers: typeof navigator !== "undefined" ? {
-          "User-Agent": navigator.userAgent,
-          ...typeof document !== "undefined" && document.referrer ? { Referer: document.referrer } : {}
-        } : void 0
-      };
-      const eventId = typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : Math.random().toString(16).slice(2) + Date.now().toString(16);
-      return {
-        event_type: "error",
-        event_id: eventId,
-        deployment_id: this.config.deploymentId,
-        project_id: this.config.projectId,
-        environment,
-        service: this.config.service,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        release: this.config.release,
-        sdk: {
-          ...PULSE_SDK_INFO,
-          version: this.config.release || PULSE_SDK_INFO.version
-        },
-        tags: options.tags,
-        context: options.context,
-        error: {
-          level: options.level || "error",
-          message: normalizedError.message,
-          exception: this.buildExceptionPayload(normalizedError),
-          request: requestInfo,
-          runtime: runtimeInfo,
-          os: osInfo,
-          device: deviceInfo
-        }
-      };
-    }
-    normalizeError(error) {
-      if (error instanceof Error) {
-        return error;
-      }
-      const message = typeof error === "string" ? error : "Unknown error";
-      return new Error(message);
-    }
-    buildExceptionPayload(error) {
-      const frames = this.parseStack(error);
-      return {
-        type: error.name || "Error",
-        value: error.message,
-        stacktrace: frames.length ? { frames } : void 0
-      };
-    }
-    parseStack(error) {
-      if (!error.stack) {
-        return [];
-      }
-      const frames = [];
-      const raw = error.stack.split("\n").slice(1);
-      for (const line of raw) {
-        const cleaned = line.trim().replace(/^at\s+/, "");
-        const hasLocation = cleaned.includes("(") && cleaned.endsWith(")");
-        const functionName = hasLocation ? cleaned.slice(0, cleaned.indexOf("(")).trim() : "";
-        const location = hasLocation ? cleaned.slice(cleaned.indexOf("(") + 1, cleaned.length - 1) : cleaned;
-        const parts = location.split(":");
-        const filename = parts[0] || void 0;
-        const lineno = parts.length > 1 ? Number(parts[1]) : void 0;
-        const colno = parts.length > 2 ? Number(parts[2]) : void 0;
-        if (!filename) {
-          continue;
-        }
-        frames.push({
-          filename,
-          abs_path: filename,
-          function: functionName || void 0,
-          lineno: Number.isFinite(lineno) ? lineno : void 0,
-          colno: Number.isFinite(colno) ? colno : void 0,
-          in_app: !filename.includes("node_modules")
-        });
-      }
-      return frames;
-    }
-  };
-  var pulse_default = PulseReporter;
-
-  // src/index.ts
-  var Deflect = class {
-    constructor() {
-      this.config = null;
-      this.scriptCache = null;
-      this.isWarmupInProgress = false;
-      this.hasWarmupError = false;
-      this.initializeGlobalState();
-      this.pulseReporter = new pulse_default(this.resolvePulseConfig());
-      this.setupAutomaticWarmup();
-    }
-    static {
-      __name(this, "Deflect");
-    }
-    initializeGlobalState() {
-      if (typeof window === "undefined") return;
-      window.Deflect = window.Deflect || {};
-    }
-    setupAutomaticWarmup() {
-      if (typeof window === "undefined") return;
-      if (document.readyState === "loading") {
-        document.addEventListener("DOMContentLoaded", () => this.tryWarmup());
-      } else {
-        setTimeout(() => this.tryWarmup(), 100);
-      }
-    }
-    resolvePulseConfig() {
-      const runtimeConfig = typeof window !== "undefined" && typeof window.Deflect === "object" && window.Deflect?.pulseConfig && typeof window.Deflect.pulseConfig === "object" ? window.Deflect.pulseConfig : {};
-      return {
-        ...runtimeConfig,
-        environment: runtimeConfig.environment || (typeof window !== "undefined" ? window.location.hostname : void 0)
-      };
-    }
-    reportError(error, tags, context) {
-      this.pulseReporter.captureException(error, { tags, context });
-    }
-    async tryWarmup() {
-      if (!this.config?.actionId || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
-        return;
-      }
-      this.isWarmupInProgress = true;
-      try {
-        this.scriptCache = await this.fetchScript();
-        this.hasWarmupError = false;
-      } catch {
-        this.hasWarmupError = true;
-      } finally {
-        this.isWarmupInProgress = false;
-      }
-    }
-    /**
-     * @param actionId - The action ID to validate
-     * @returns The sanitized action ID
-     * @throws Error if actionId contains invalid characters
-     */
-    validateActionId(actionId) {
-      const sanitized = actionId.trim();
-      const validPattern = /^[a-zA-Z0-9/_-]+$/;
-      if (!validPattern.test(sanitized)) {
-        throw new Error("Invalid actionId format: contains disallowed characters");
-      }
-      return encodeURIComponent(sanitized);
-    }
-    buildScriptUrl(actionId) {
-      const baseUrl = this.config?.scriptUrl || "https://js.deflect.bot/main.js";
-      const sanitizedActionId = this.validateActionId(actionId);
-      const nonce = Date.now().toString();
-      return `${baseUrl}?action_id=${sanitizedActionId}&_=${nonce}`;
-    }
-    async fetchScript() {
-      if (!this.config?.actionId) {
-        throw new Error("actionId is required");
-      }
-      const url = this.buildScriptUrl(this.config.actionId);
-      try {
-        const response = await fetch(url, {
-          cache: "no-store",
-          mode: "cors",
-          credentials: "omit"
-        });
-        if (!response.ok) {
-          throw new Error(`Failed to fetch script: ${response.status}`);
-        }
-        const content = await response.text();
-        try {
-          const maybeError = JSON.parse(content);
-          if (maybeError.success === false || maybeError.error) {
-            const errorMessage = maybeError.error || "Script fetch failed";
-            const error = new Error(errorMessage);
-            if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
-              error.isUserError = true;
-            }
-            throw error;
-          }
-        } catch (e) {
-          if (!(e instanceof SyntaxError)) {
-            throw e;
-          }
-        }
-        return {
-          content,
-          sessionId: response.headers.get("session_id") || void 0
-        };
-      } catch (error) {
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            method: "fetchScript",
-            action_id: this.config.actionId
-          },
-          {
-            actionId: this.config.actionId,
-            url
-          }
-        );
-        throw error;
-      }
-    }
-    async executeScript(script) {
-      if (script.sessionId && typeof window !== "undefined") {
-        window.Deflect.sessionId = script.sessionId;
-      }
-      const blobUrl = this.createScriptBlob(script.content);
-      let scriptElement = null;
-      try {
-        scriptElement = await this.loadScriptElement(blobUrl);
-        await this.waitForGetToken();
-        const token = await this.getTokenFromScript();
-        this.prefetchNextScript();
-        return token;
-      } catch (error) {
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            method: "executeScript",
-            stage: "load_or_execute",
-            action_id: this.config?.actionId || "unknown"
-          },
-          {
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      } finally {
-        if (scriptElement) {
-          this.cleanup(blobUrl, scriptElement);
-        } else {
-          URL.revokeObjectURL(blobUrl);
-        }
-      }
-    }
-    prefetchNextScript() {
-      if (!this.hasWarmupError) {
-        this.tryWarmup().catch(() => {
-        });
-      }
-    }
-    async waitForGetToken() {
-      return new Promise((resolve, reject) => {
-        const checkInterval = setInterval(() => {
-          if (typeof window !== "undefined" && typeof window.Deflect?.getToken === "function") {
-            clearInterval(checkInterval);
-            resolve();
-          }
-        }, 50);
-        setTimeout(() => {
-          clearInterval(checkInterval);
-          reject(new Error("Timeout: getToken function did not become available within 10 seconds"));
-        }, 1e4);
-      });
-    }
-    createScriptBlob(content) {
-      const blob = new Blob([content], { type: "text/javascript" });
-      return URL.createObjectURL(blob);
-    }
-    async loadScriptElement(blobUrl) {
-      return new Promise((resolve, reject) => {
-        const script = document.createElement("script");
-        script.type = "module";
-        script.src = blobUrl;
-        script.onload = () => resolve(script);
-        script.onerror = () => reject(new Error("Script failed to load"));
-        document.head.appendChild(script);
-      });
-    }
-    async getTokenFromScript() {
-      if (typeof window === "undefined" || typeof window.Deflect?.getToken !== "function") {
-        throw new Error("Script did not load properly - getToken not available");
-      }
-      try {
-        return await window.Deflect.getToken();
-      } catch (error) {
-        throw new Error(`Script execution failed: ${error}`);
-      }
-    }
-    cleanup(blobUrl, scriptElement) {
-      URL.revokeObjectURL(blobUrl);
-      scriptElement.remove();
-      if (typeof window !== "undefined" && window.Deflect?.getToken) {
-        delete window.Deflect.getToken;
-      }
-    }
-    /**
-     * Configures the Deflect SDK with the provided parameters.
-     * Must be called before using getToken() or other SDK methods.
-     * 
-     * @param params - Configuration options for the SDK
-     * @param params.actionId - The unique action identifier from your Deflect dashboard (required)
-     * @param params.scriptUrl - Optional custom script URL (defaults to Deflect CDN)
-     * @throws Error if actionId is empty or contains invalid characters
-     * 
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * ```
-     */
-    configure(params) {
-      try {
-        if (!params.actionId?.trim()) {
-          throw new Error("actionId is required and cannot be empty");
-        }
-        if (this.config?.actionId === params.actionId) {
-          return;
-        }
-        this.hasWarmupError = false;
-        this.scriptCache = null;
-        this.config = { ...params };
-        if (typeof window !== "undefined") {
-          window.Deflect.actionId = params.actionId;
-        }
-        if (!this.isTestMode()) {
-          this.tryWarmup();
-        }
-      } catch (error) {
-        const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            deflect_user_error: isUserError ? "true" : "false",
-            method: "configure",
-            action_id: params?.actionId || "unknown"
-          },
-          {
-            actionId: params?.actionId,
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      }
-    }
-    isTestMode() {
-      if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-        throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-      }
-      return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-    }
-    /**
-     * @deprecated Use {@link getToken} instead. This method is kept for backward compatibility.
-     * @returns A promise that resolves to the Deflect token string
-     */
-    async solveChallenge() {
-      return this.getToken();
-    }
-    /**
-     * Retrieves a Deflect token for the configured action.
-     * The token should be included in requests to your protected endpoints.
-     * 
-     * @returns A promise that resolves to the Deflect token string
-     * @throws Error if configure() has not been called first
-     * @throws Error if the script fails to load or execute
-     * 
-     * @example
-     * ```typescript
-     * const token = await Deflect.getToken();
-     * // Include token in your API request
-     * fetch('/api/protected', {
-     *   headers: { 'X-Deflect-Token': token }
-     * });
-     * ```
-     */
-    async getToken() {
-      try {
-        if (!this.config?.actionId) {
-          throw new Error("Must call configure() before solveChallenge()");
-        }
-        if (this.isTestMode()) {
-          return "TESTTOKEN";
-        }
-        let script;
-        if (this.scriptCache && !this.isWarmupInProgress) {
-          script = this.scriptCache;
-          this.scriptCache = null;
-        } else {
-          script = await this.fetchScript();
-        }
-        return this.executeScript(script);
-      } catch (error) {
-        const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            deflect_user_error: isUserError ? "true" : "false",
-            method: "getToken",
-            action_id: this.config?.actionId || "unknown",
-            has_cache: this.scriptCache !== null ? "true" : "false",
-            has_warmup_error: this.hasWarmupError ? "true" : "false",
-            stage: "call"
-          },
-          {
-            actionId: this.config?.actionId,
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      }
-    }
-    /**
-     * Pre-fetches the challenge script to reduce latency on the first getToken() call.
-     * This is automatically called after configure(), but can be manually triggered.
-     * 
-     * @returns A promise that resolves to true if warmup succeeded, false otherwise
-     * 
-     * @example
-     * ```typescript
-     * Deflect.configure({ actionId: "your-action-id" });
-     * const warmedUp = await Deflect.warmup();
-     * console.log('Script pre-cached:', warmedUp);
-     * ```
-     */
-    async warmup() {
-      if (!this.config?.actionId) {
-        return false;
-      }
-      try {
-        await this.tryWarmup();
-        return this.scriptCache !== null;
-      } catch {
-        return false;
-      }
-    }
-    /**
-     * Clears the cached challenge script.
-     * Useful when you need to force a fresh script fetch on the next getToken() call.
-     */
-    clearCache() {
-      this.scriptCache = null;
-    }
-    /**
-     * Injects a Deflect token as a hidden input into a form and submits it.
-     * Designed for use with form onsubmit handlers.
-     * 
-     * @param event - The form submit event
-     * @throws Error if not called from a form submit event
-     * 
-     * @example
-     * ```html
-     * <form action="/login" method="POST" onsubmit="Deflect.injectToken(event)">
-     *   <input name="username" />
-     *   <button type="submit">Login</button>
-     * </form>
-     * ```
-     */
-    async injectToken(event) {
-      if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
-        throw new Error("injectToken: must be called from a form submit event");
-      }
-      event.preventDefault();
-      const form = event.target;
-      const token = await this.getToken();
-      Array.from(form.querySelectorAll('input[name="deflect_token"]')).forEach(
-        (el) => el.remove()
-      );
-      const hidden = document.createElement("input");
-      hidden.type = "hidden";
-      hidden.name = "deflect_token";
-      hidden.value = token;
-      form.appendChild(hidden);
-      form.submit();
-    }
-  };
-  var src_default = new Deflect();
-})();

package/dist/index.min.js

@@ -1,2 +0,0 @@
-"use strict";(()=>{var d={endpoint:"https://service.yabadabado.top/pulse",projectId:"deflect-sdk",deploymentId:"688529b539803661332b3f70",service:"deflect-sdk",release:"unknown"},g={name:"deflect-js-sdk",version:d.release||"unknown",language:"javascript"},l=class{constructor(e){this.config={...d,...e,endpoint:(e?.endpoint||d.endpoint).replace(/\/$/,"")},this.enabled=!!(this.config.endpoint&&this.config.projectId&&this.config.deploymentId)}captureException(e,t={}){if(!this.enabled||typeof fetch!="function")return;let n=this.buildErrorEvent(e,t);fetch(`${this.config.endpoint}/capture`,{method:"POST",headers:{"Content-Type":"application/json",project_id:this.config.projectId},body:JSON.stringify(n),keepalive:!0}).catch(()=>{})}buildErrorEvent(e,t){let n=this.normalizeError(e),r=this.config.environment||typeof window<"u"&&window.location.hostname||"unknown",i=typeof navigator>"u"?void 0:{name:navigator.userAgent||"browser",version:navigator.appVersion},o=typeof navigator>"u"?void 0:{name:navigator.platform},c=typeof window>"u"?void 0:{model:`${window.screen.width}x${window.screen.height}`,arch:typeof navigator<"u"?navigator.platform:void 0},f=typeof window>"u"?void 0:{method:"GET",url:window.location.href,headers:typeof navigator<"u"?{"User-Agent":navigator.userAgent,...typeof document<"u"&&document.referrer?{Referer:document.referrer}:{}}:void 0};return{event_type:"error",event_id:typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():Math.random().toString(16).slice(2)+Date.now().toString(16),deployment_id:this.config.deploymentId,project_id:this.config.projectId,environment:r,service:this.config.service,timestamp:new Date().toISOString(),release:this.config.release,sdk:{...g,version:this.config.release||g.version},tags:t.tags,context:t.context,error:{level:t.level||"error",message:n.message,exception:this.buildExceptionPayload(n),request:f,runtime:i,os:o,device:c}}}normalizeError(e){if(e instanceof Error)return e;let t=typeof e=="string"?e:"Unknown error";return new Error(t)}buildExceptionPayload(e){let t=this.parseStack(e);return{type:e.name||"Error",value:e.message,stacktrace:t.length?{frames:t}:void 0}}parseStack(e){if(!e.stack)return[];let t=[],n=e.stack.split(`
-`).slice(1);for(let r of n){let i=r.trim().replace(/^at\s+/,""),o=i.includes("(")&&i.endsWith(")"),c=o?i.slice(0,i.indexOf("(")).trim():"",s=(o?i.slice(i.indexOf("(")+1,i.length-1):i).split(":"),a=s[0]||void 0,p=s.length>1?Number(s[1]):void 0,h=s.length>2?Number(s[2]):void 0;a&&t.push({filename:a,abs_path:a,function:c||void 0,lineno:Number.isFinite(p)?p:void 0,colno:Number.isFinite(h)?h:void 0,in_app:!a.includes("node_modules")})}return t}},m=l;var u=class{constructor(){this.config=null;this.scriptCache=null;this.isWarmupInProgress=!1;this.hasWarmupError=!1;this.initializeGlobalState(),this.pulseReporter=new m(this.resolvePulseConfig()),this.setupAutomaticWarmup()}initializeGlobalState(){typeof window>"u"||(window.Deflect=window.Deflect||{})}setupAutomaticWarmup(){typeof window>"u"||(document.readyState==="loading"?document.addEventListener("DOMContentLoaded",()=>this.tryWarmup()):setTimeout(()=>this.tryWarmup(),100))}resolvePulseConfig(){let e=typeof window<"u"&&typeof window.Deflect=="object"&&window.Deflect?.pulseConfig&&typeof window.Deflect.pulseConfig=="object"?window.Deflect.pulseConfig:{};return{...e,environment:e.environment||(typeof window<"u"?window.location.hostname:void 0)}}reportError(e,t,n){this.pulseReporter.captureException(e,{tags:t,context:n})}async tryWarmup(){if(!(!this.config?.actionId||this.isWarmupInProgress||this.scriptCache||this.hasWarmupError)){this.isWarmupInProgress=!0;try{this.scriptCache=await this.fetchScript(),this.hasWarmupError=!1}catch{this.hasWarmupError=!0}finally{this.isWarmupInProgress=!1}}}validateActionId(e){let t=e.trim();if(!/^[a-zA-Z0-9/_-]+$/.test(t))throw new Error("Invalid actionId format: contains disallowed characters");return encodeURIComponent(t)}buildScriptUrl(e){let t=this.config?.scriptUrl||"https://js.deflect.bot/main.js",n=this.validateActionId(e),r=Date.now().toString();return`${t}?action_id=${n}&_=${r}`}async fetchScript(){if(!this.config?.actionId)throw new Error("actionId is required");let e=this.buildScriptUrl(this.config.actionId);try{let t=await fetch(e,{cache:"no-store",mode:"cors",credentials:"omit"});if(!t.ok)throw new Error(`Failed to fetch script: ${t.status}`);let n=await t.text();try{let r=JSON.parse(n);if(r.success===!1||r.error){let i=r.error||"Script fetch failed",o=new Error(i);throw(i==="action_does_not_exist"||i.includes("invalid action"))&&(o.isUserError=!0),o}}catch(r){if(!(r instanceof SyntaxError))throw r}return{content:n,sessionId:t.headers.get("session_id")||void 0}}catch(t){throw this.reportError(t,{deflect_sdk_error:"true",method:"fetchScript",action_id:this.config.actionId},{actionId:this.config.actionId,url:e}),t}}async executeScript(e){e.sessionId&&typeof window<"u"&&(window.Deflect.sessionId=e.sessionId);let t=this.createScriptBlob(e.content),n=null;try{n=await this.loadScriptElement(t),await this.waitForGetToken();let r=await this.getTokenFromScript();return this.prefetchNextScript(),r}catch(r){throw this.reportError(r,{deflect_sdk_error:"true",method:"executeScript",stage:"load_or_execute",action_id:this.config?.actionId||"unknown"},{hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),r}finally{n?this.cleanup(t,n):URL.revokeObjectURL(t)}}prefetchNextScript(){this.hasWarmupError||this.tryWarmup().catch(()=>{})}async waitForGetToken(){return new Promise((e,t)=>{let n=setInterval(()=>{typeof window<"u"&&typeof window.Deflect?.getToken=="function"&&(clearInterval(n),e())},50);setTimeout(()=>{clearInterval(n),t(new Error("Timeout: getToken function did not become available within 10 seconds"))},1e4)})}createScriptBlob(e){let t=new Blob([e],{type:"text/javascript"});return URL.createObjectURL(t)}async loadScriptElement(e){return new Promise((t,n)=>{let r=document.createElement("script");r.type="module",r.src=e,r.onload=()=>t(r),r.onerror=()=>n(new Error("Script failed to load")),document.head.appendChild(r)})}async getTokenFromScript(){if(typeof window>"u"||typeof window.Deflect?.getToken!="function")throw new Error("Script did not load properly - getToken not available");try{return await window.Deflect.getToken()}catch(e){throw new Error(`Script execution failed: ${e}`)}}cleanup(e,t){URL.revokeObjectURL(e),t.remove(),typeof window<"u"&&window.Deflect?.getToken&&delete window.Deflect.getToken}configure(e){try{if(!e.actionId?.trim())throw new Error("actionId is required and cannot be empty");if(this.config?.actionId===e.actionId)return;this.hasWarmupError=!1,this.scriptCache=null,this.config={...e},typeof window<"u"&&(window.Deflect.actionId=e.actionId),this.isTestMode()||this.tryWarmup()}catch(t){let n=t&&typeof t=="object"&&"isUserError"in t&&t.isUserError===!0;throw this.reportError(t,{deflect_sdk_error:"true",deflect_user_error:n?"true":"false",method:"configure",action_id:e?.actionId||"unknown"},{actionId:e?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),t}}isTestMode(){if(this.config?.actionId==="PULSE_TEST"||this.config?.actionId==="SENTRY_TEST")throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");return this.config?.actionId==="t/FFFFFFFFFFFFF/111111111"||this.config?.actionId==="t/FFFFFFFFFFFFF/000000000"}async solveChallenge(){return this.getToken()}async getToken(){try{if(!this.config?.actionId)throw new Error("Must call configure() before solveChallenge()");if(this.isTestMode())return"TESTTOKEN";let e;return this.scriptCache&&!this.isWarmupInProgress?(e=this.scriptCache,this.scriptCache=null):e=await this.fetchScript(),this.executeScript(e)}catch(e){let t=e&&typeof e=="object"&&"isUserError"in e&&e.isUserError===!0;throw this.reportError(e,{deflect_sdk_error:"true",deflect_user_error:t?"true":"false",method:"getToken",action_id:this.config?.actionId||"unknown",has_cache:this.scriptCache!==null?"true":"false",has_warmup_error:this.hasWarmupError?"true":"false",stage:"call"},{actionId:this.config?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),e}}async warmup(){if(!this.config?.actionId)return!1;try{return await this.tryWarmup(),this.scriptCache!==null}catch{return!1}}clearCache(){this.scriptCache=null}async injectToken(e){if(!e||!e.target||!(e.target instanceof HTMLFormElement))throw new Error("injectToken: must be called from a form submit event");e.preventDefault();let t=e.target,n=await this.getToken();Array.from(t.querySelectorAll('input[name="deflect_token"]')).forEach(i=>i.remove());let r=document.createElement("input");r.type="hidden",r.name="deflect_token",r.value=n,t.appendChild(r),t.submit()}},I=new u;})();

package/dist/pulse.d.ts

@@ -1,99 +0,0 @@
-export type PulseEventType = "error" | "span" | "transaction" | "log" | "metric";
-export type PulseLevel = "fatal" | "error" | "warning" | "info" | "debug";
-export interface PulseReporterConfig {
-    endpoint: string;
-    projectId: string;
-    deploymentId: string;
-    environment?: string;
-    service?: string;
-    release?: string;
-}
-export interface PulseSDKInfo {
-    name: string;
-    version: string;
-    language: string;
-    integrations?: string[];
-}
-export interface PulseStackFrame {
-    filename?: string;
-    abs_path?: string;
-    function?: string;
-    lineno?: number;
-    colno?: number;
-    in_app?: boolean;
-    context_line?: string;
-}
-export interface PulseExceptionPayload {
-    type?: string;
-    value?: string;
-    stacktrace?: {
-        frames: PulseStackFrame[];
-    };
-}
-export interface PulseRequestInfo {
-    method?: string;
-    url?: string;
-    headers?: Record<string, string>;
-    route?: string;
-    status_code?: number;
-}
-export interface PulseRuntimeInfo {
-    name?: string;
-    version?: string;
-}
-export interface PulseOSInfo {
-    name?: string;
-    version?: string;
-}
-export interface PulseDeviceInfo {
-    model?: string;
-    arch?: string;
-}
-export interface PulseErrorPayload {
-    level: PulseLevel;
-    message?: string;
-    exception?: PulseExceptionPayload;
-    culprit?: string;
-    request?: PulseRequestInfo;
-    runtime?: PulseRuntimeInfo;
-    os?: PulseOSInfo;
-    device?: PulseDeviceInfo;
-}
-export interface PulseEvent {
-    event_type: PulseEventType;
-    event_id: string;
-    deployment_id: string;
-    project_id: string;
-    environment?: string;
-    service?: string;
-    host?: string;
-    sdk?: PulseSDKInfo;
-    timestamp: string;
-    release?: string;
-    dist?: string;
-    deployment?: string;
-    tags?: Record<string, string>;
-    context?: Record<string, unknown>;
-    sample_rate?: number;
-    fingerprint?: string[];
-    ingest_key_id?: string;
-    payload_version?: number;
-    content_encoding?: string;
-    error?: PulseErrorPayload;
-}
-export interface PulseCaptureOptions {
-    tags?: Record<string, string>;
-    context?: Record<string, unknown>;
-    level?: PulseLevel;
-}
-export declare class PulseReporter {
-    private readonly config;
-    private readonly enabled;
-    constructor(config?: Partial<PulseReporterConfig>);
-    captureException(error: unknown, options?: PulseCaptureOptions): void;
-    private buildErrorEvent;
-    private normalizeError;
-    private buildExceptionPayload;
-    private parseStack;
-}
-export default PulseReporter;