@deflectbot/deflect-sdk 1.4.2 → 1.4.4

package/README.md

@@ -31,48 +31,52 @@ Use `@deflect-sdk@latest` to always use the latest version, or specify a version
 <script src="https://cdn.jsdelivr.net/npm/@deflectbot/deflect-sdk@latest/dist/index.min.js"></script>
 ```
 
-## Configuration
+## Usage (instance-based)
 
-Deflect works through Defense Actions™, which allows you to either setup a global configuration one-time to work across your entire application, or individual and more customized Defense Actions™ for each protected endpoint.
-
-#### One-time global initialization.
+The SDK uses lightweight clients so you can create multiple independent configs (one per actionId) without global state conflicts.
 
 ```ts
-Deflect.configure({
+import Deflect, { DeflectConfig } from "@deflectbot/deflect-sdk";
+
+const client = Deflect.createClient({
   actionId: "<ACTION_ID>",
-});
+  // optional
+  scriptUrl: "https://custom-host/main.js", // overrides script origin
+  prefetch: true, // default
+  extraArgs: { debug: true }, // appended as query params => &debug=true
+} satisfies DeflectConfig);
+
+const token = await client.getToken();
 ```
 
-#### To get a token to pass to a protected endpoint
+### Multiple clients on the same page
 
 ```ts
-const token = await Deflect.getToken(); // returns token as string
-```
+const loginClient = Deflect.createClient({ actionId: "login" });
+const signupClient = Deflect.createClient({ actionId: "signup" });
 
-#### Helper for form submit
+const loginToken = await loginClient.getToken();
+const signupToken = await signupClient.getToken();
+```
 
-If you're using forms like this:
+### Form helper with an instance
 
 ```html
-<form action="/login" method="POST">
+<form action="/login" method="POST" onsubmit="return loginClient.injectToken(event)">
   <input name="username" />
   <input name="password" type="password" />
   <button type="submit">Login</button>
 </form>
+
+<script type="module">
+  import Deflect from "https://cdn.jsdelivr.net/npm/@deflectbot/deflect-sdk@latest/dist/index.esm.js";
+  const loginClient = Deflect.createClient({ actionId: "login" });
+  window.loginClient = loginClient;
+</script>
 ```
 
-You can use the helper as shown:
+`injectToken(event)` fetches a token, injects it as a hidden `deflect_token` input, and submits the form.
 
-```html
-<form
-  action="/login"
-  method="POST"
-  onsubmit="return Deflect.injectToken(event)"
->
-  <input name="username" />
-  <input name="password" type="password" />
-  <button type="submit">Login</button>
-</form>
-```
+### Legacy global (still available, but prefer clients)
 
-`injectToken()` will fetch a token and insert it as a hidden input named `deflect_token` into your form. Use it directly in your form's onsubmit attribute:
+The previous `Deflect.configure`/`Deflect.getToken` singleton still works for single-action setups, but the recommended approach is to create per-action clients as shown above.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deflectbot/deflect-sdk",
-  "version": "1.4.2",
+  "version": "1.4.4",
   "description": "SDK for deflect.bot - Use it for seamless captcha integration on any website.",
   "main": "dist/index.min.js",
   "module": "dist/index.esm.js",

package/dist/index.d.ts

@@ -1,38 +0,0 @@
-interface DeflectConfig {
-    /** The action ID to fetch the script for. */
-    actionId: string;
-    /** Override URL for the script. For staging/enterprise customers */
-    scriptUrl?: string;
-    /** Enable/disable automatic warmup/prefetch. Defaults to true. */
-    prefetch?: boolean;
-}
-declare global {
-    interface Window {
-        Deflect: any;
-    }
-}
-declare class Deflect {
-    private config;
-    private scriptCache;
-    private isWarmupInProgress;
-    private hasWarmupError;
-    private warmupPromise;
-    private pulseReporter;
-    constructor();
-    private initializeGlobalState;
-    private setupAutomaticWarmup;
-    private resolvePulseConfig;
-    private reportError;
-    private tryWarmup;
-    private validateActionId;
-    private prefetchNextScript;
-    private isTestMode;
-    configure(params: DeflectConfig): void;
-    getToken(): Promise<string>;
-    private executeScript;
-    warmup(): Promise<boolean>;
-    clearCache(): void;
-    injectToken(event: SubmitEvent): Promise<void>;
-}
-declare const DeflectInstance: Deflect;
-export default DeflectInstance;

package/dist/index.esm.js

@@ -1,233 +0,0 @@
-import PulseReporter from "./pulse";
-import { fetchScript } from "./scriptClient";
-import { createBlobUrl, loadModuleScript, waitForGlobalFunction, getTokenFromGlobal, cleanup } from "./scriptRunner";
-class Deflect {
-  constructor() {
-    this.config = null;
-    this.scriptCache = null;
-    this.isWarmupInProgress = false;
-    this.hasWarmupError = false;
-    this.warmupPromise = null;
-    this.initializeGlobalState();
-    this.pulseReporter = new PulseReporter(this.resolvePulseConfig());
-    this.setupAutomaticWarmup();
-  }
-  initializeGlobalState() {
-    if (typeof window === "undefined") return;
-    window.Deflect = window.Deflect || {};
-  }
-  setupAutomaticWarmup() {
-    if (typeof window === "undefined") return;
-    if (document.readyState === "loading") {
-      document.addEventListener("DOMContentLoaded", () => this.tryWarmup());
-    } else {
-      setTimeout(() => this.tryWarmup(), 100);
-    }
-  }
-  resolvePulseConfig() {
-    const runtimeConfig = typeof window !== "undefined" && typeof window.Deflect === "object" && window.Deflect?.pulseConfig && typeof window.Deflect.pulseConfig === "object" ? window.Deflect.pulseConfig : {};
-    return {
-      ...runtimeConfig,
-      environment: runtimeConfig.environment || (typeof window !== "undefined" ? window.location.hostname : void 0)
-    };
-  }
-  reportError(error, tags, context) {
-    this.pulseReporter.captureException(error, { tags, context });
-  }
-  async tryWarmup() {
-    if (!this.config?.actionId || this.config.prefetch === false || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
-      return;
-    }
-    this.validateActionId(this.config.actionId);
-    this.isWarmupInProgress = true;
-    this.warmupPromise = (async () => {
-      try {
-        this.scriptCache = await fetchScript(this.config.actionId, this.config.scriptUrl);
-        this.hasWarmupError = false;
-      } catch {
-        this.hasWarmupError = true;
-      } finally {
-        this.isWarmupInProgress = false;
-      }
-    })();
-    await this.warmupPromise.catch(() => {
-    });
-  }
-  validateActionId(actionId) {
-    const sanitized = actionId.trim();
-    const validPattern = /^[a-zA-Z0-9/_-]+$/;
-    if (!validPattern.test(sanitized)) {
-      throw new Error("Invalid actionId format: contains disallowed characters");
-    }
-    return encodeURIComponent(sanitized);
-  }
-  prefetchNextScript() {
-    if (!this.hasWarmupError && this.config?.prefetch !== false) {
-      this.tryWarmup().catch(() => {
-      });
-    }
-  }
-  isTestMode() {
-    if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-      throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-    }
-    return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-  }
-  configure(params) {
-    try {
-      if (!params.actionId?.trim()) {
-        throw new Error("actionId is required and cannot be empty");
-      }
-      this.validateActionId(params.actionId);
-      if (this.config?.actionId === params.actionId && this.config.prefetch === params.prefetch) {
-        return;
-      }
-      this.hasWarmupError = false;
-      this.scriptCache = null;
-      this.config = { prefetch: true, ...params };
-      if (typeof window !== "undefined") {
-        window.Deflect.actionId = params.actionId;
-      }
-      if (!this.isTestMode() && this.config.prefetch !== false) {
-        this.tryWarmup();
-      }
-    } catch (error) {
-      const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          deflect_user_error: isUserError ? "true" : "false",
-          method: "configure",
-          action_id: params?.actionId || "unknown"
-        },
-        {
-          actionId: params?.actionId,
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    }
-  }
-  async getToken() {
-    try {
-      if (!this.config?.actionId) {
-        throw new Error("Must call configure() before getToken()");
-      }
-      this.validateActionId(this.config.actionId);
-      if (this.isTestMode()) {
-        return "TESTTOKEN";
-      }
-      let script;
-      if (this.warmupPromise) {
-        await this.warmupPromise.catch(() => {
-        });
-      }
-      if (this.scriptCache && !this.isWarmupInProgress) {
-        script = this.scriptCache;
-        this.scriptCache = null;
-      } else {
-        script = await fetchScript(this.config.actionId, this.config.scriptUrl);
-      }
-      return this.executeScript(script);
-    } catch (error) {
-      const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          deflect_user_error: isUserError ? "true" : "false",
-          method: "getToken",
-          action_id: this.config?.actionId || "unknown",
-          has_cache: this.scriptCache !== null ? "true" : "false",
-          has_warmup_error: this.hasWarmupError ? "true" : "false",
-          stage: "call"
-        },
-        {
-          actionId: this.config?.actionId,
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    }
-  }
-  async executeScript(script) {
-    if (script.sessionId && typeof window !== "undefined") {
-      window.Deflect.sessionId = script.sessionId;
-    }
-    const blobUrl = createBlobUrl(script.content);
-    let scriptElement = null;
-    try {
-      scriptElement = await loadModuleScript(blobUrl);
-      await waitForGlobalFunction("getChallengeToken");
-      const token = await getTokenFromGlobal("getChallengeToken");
-      this.prefetchNextScript();
-      return token;
-    } catch (error) {
-      this.reportError(
-        error,
-        {
-          deflect_sdk_error: "true",
-          method: "executeScript",
-          stage: "load_or_execute",
-          action_id: this.config?.actionId || "unknown"
-        },
-        {
-          hasCache: this.scriptCache !== null,
-          hasWarmupError: this.hasWarmupError
-        }
-      );
-      throw error;
-    } finally {
-      if (scriptElement) {
-        cleanup(blobUrl, scriptElement, "getChallengeToken");
-      } else {
-        URL.revokeObjectURL(blobUrl);
-      }
-    }
-  }
-  async warmup() {
-    if (!this.config?.actionId) {
-      return false;
-    }
-    try {
-      if (this.config.prefetch === false) {
-        return false;
-      }
-      await this.tryWarmup();
-      return this.scriptCache !== null;
-    } catch {
-      return false;
-    }
-  }
-  clearCache() {
-    this.scriptCache = null;
-  }
-  async injectToken(event) {
-    if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
-      throw new Error("injectToken: must be called from a form submit event");
-    }
-    event.preventDefault();
-    const form = event.target;
-    const token = await this.getToken();
-    Array.from(form.querySelectorAll('input[name="deflect_token"]')).forEach(
-      (el) => el.remove()
-    );
-    const hidden = document.createElement("input");
-    hidden.type = "hidden";
-    hidden.name = "deflect_token";
-    hidden.value = token;
-    form.appendChild(hidden);
-    form.submit();
-  }
-}
-const DeflectInstance = new Deflect();
-if (typeof window !== "undefined") {
-  window.Deflect = DeflectInstance;
-}
-var src_default = DeflectInstance;
-export {
-  src_default as default
-};

package/dist/index.js

@@ -1,467 +0,0 @@
-"use strict";
-(() => {
-  var __defProp = Object.defineProperty;
-  var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-
-  // src/pulse.ts
-  var REPORT_CONFIG = {
-    endpoint: "https://service.yabadabado.top/pulse",
-    projectId: "deflect-sdk",
-    deploymentId: "688529b539803661332b3f70",
-    service: "deflect-sdk",
-    release: "unknown"
-  };
-  var PULSE_SDK_INFO = {
-    name: "deflect-js-sdk",
-    version: REPORT_CONFIG.release || "unknown",
-    language: "javascript"
-  };
-  var PulseReporter = class {
-    static {
-      __name(this, "PulseReporter");
-    }
-    constructor(config) {
-      this.config = {
-        ...REPORT_CONFIG,
-        ...config,
-        endpoint: (config?.endpoint || REPORT_CONFIG.endpoint).replace(/\/$/, "")
-      };
-      this.enabled = Boolean(
-        this.config.endpoint && this.config.projectId && this.config.deploymentId
-      );
-    }
-    captureException(error, options = {}) {
-      if (!this.enabled || typeof fetch !== "function") {
-        return;
-      }
-      const event = this.buildErrorEvent(error, options);
-      fetch(`${this.config.endpoint}/capture`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          project_id: this.config.projectId
-        },
-        body: JSON.stringify(event),
-        keepalive: true
-      }).catch(() => {
-      });
-    }
-    buildErrorEvent(error, options) {
-      const normalizedError = this.normalizeError(error);
-      const environment = this.config.environment || (typeof window !== "undefined" ? window.location.hostname || "unknown" : "unknown");
-      const runtimeInfo = typeof navigator === "undefined" ? void 0 : {
-        name: navigator.userAgent || "browser",
-        version: navigator.appVersion
-      };
-      const osInfo = typeof navigator === "undefined" ? void 0 : {
-        name: navigator.platform
-      };
-      const deviceInfo = typeof window === "undefined" ? void 0 : {
-        model: `${window.screen.width}x${window.screen.height}`,
-        arch: typeof navigator !== "undefined" ? navigator.platform : void 0
-      };
-      const requestInfo = typeof window === "undefined" ? void 0 : {
-        method: "GET",
-        url: window.location.href,
-        headers: typeof navigator !== "undefined" ? {
-          "User-Agent": navigator.userAgent,
-          ...typeof document !== "undefined" && document.referrer ? { Referer: document.referrer } : {}
-        } : void 0
-      };
-      const eventId = typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : Math.random().toString(16).slice(2) + Date.now().toString(16);
-      return {
-        event_type: "error",
-        event_id: eventId,
-        deployment_id: this.config.deploymentId,
-        project_id: this.config.projectId,
-        environment,
-        service: this.config.service,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        release: this.config.release,
-        sdk: {
-          ...PULSE_SDK_INFO,
-          version: this.config.release || PULSE_SDK_INFO.version
-        },
-        tags: options.tags,
-        context: options.context,
-        error: {
-          level: options.level || "error",
-          message: normalizedError.message,
-          exception: this.buildExceptionPayload(normalizedError),
-          request: requestInfo,
-          runtime: runtimeInfo,
-          os: osInfo,
-          device: deviceInfo
-        }
-      };
-    }
-    normalizeError(error) {
-      if (error instanceof Error) {
-        return error;
-      }
-      const message = typeof error === "string" ? error : "Unknown error";
-      return new Error(message);
-    }
-    buildExceptionPayload(error) {
-      const frames = this.parseStack(error);
-      return {
-        type: error.name || "Error",
-        value: error.message,
-        stacktrace: frames.length ? { frames } : void 0
-      };
-    }
-    parseStack(error) {
-      if (!error.stack) {
-        return [];
-      }
-      const frames = [];
-      const raw = error.stack.split("\n").slice(1);
-      for (const line of raw) {
-        const cleaned = line.trim().replace(/^at\s+/, "");
-        const hasLocation = cleaned.includes("(") && cleaned.endsWith(")");
-        const functionName = hasLocation ? cleaned.slice(0, cleaned.indexOf("(")).trim() : "";
-        const location = hasLocation ? cleaned.slice(cleaned.indexOf("(") + 1, cleaned.length - 1) : cleaned;
-        const parts = location.split(":");
-        const filename = parts[0] || void 0;
-        const lineno = parts.length > 1 ? Number(parts[1]) : void 0;
-        const colno = parts.length > 2 ? Number(parts[2]) : void 0;
-        if (!filename) {
-          continue;
-        }
-        frames.push({
-          filename,
-          abs_path: filename,
-          function: functionName || void 0,
-          lineno: Number.isFinite(lineno) ? lineno : void 0,
-          colno: Number.isFinite(colno) ? colno : void 0,
-          in_app: !filename.includes("node_modules")
-        });
-      }
-      return frames;
-    }
-  };
-  var pulse_default = PulseReporter;
-
-  // src/scriptClient.ts
-  function buildScriptUrl(actionId, scriptUrl) {
-    const baseUrl = scriptUrl || "https://js.deflect.bot/main.js";
-    const nonce = Date.now().toString();
-    return `${baseUrl}?action_id=${encodeURIComponent(actionId)}&_=${nonce}`;
-  }
-  __name(buildScriptUrl, "buildScriptUrl");
-  async function fetchScript(actionId, scriptUrl) {
-    const url = buildScriptUrl(actionId, scriptUrl);
-    const response = await fetch(url, {
-      cache: "no-store",
-      mode: "cors",
-      credentials: "omit"
-    });
-    const content = await response.text();
-    const error = parseErrorJson(content);
-    if (error) throw error;
-    return {
-      content,
-      sessionId: response.headers.get("session_id") || void 0
-    };
-  }
-  __name(fetchScript, "fetchScript");
-  function parseErrorJson(content) {
-    try {
-      const maybeError = JSON.parse(content);
-      if (maybeError.success === false || maybeError.error) {
-        const errorMessage = maybeError.error || "Script fetch failed";
-        const error = new Error(errorMessage);
-        if (errorMessage === "action_does_not_exist" || errorMessage.includes("invalid action")) {
-          error.isUserError = true;
-        }
-        return error;
-      }
-    } catch (err) {
-      if (!(err instanceof SyntaxError)) {
-        throw err;
-      }
-    }
-    return null;
-  }
-  __name(parseErrorJson, "parseErrorJson");
-
-  // src/scriptRunner.ts
-  function createBlobUrl(content) {
-    const blob = new Blob([content], { type: "text/javascript" });
-    return URL.createObjectURL(blob);
-  }
-  __name(createBlobUrl, "createBlobUrl");
-  function loadModuleScript(blobUrl) {
-    return new Promise((resolve, reject) => {
-      const script = document.createElement("script");
-      script.type = "module";
-      script.src = blobUrl;
-      script.onload = () => resolve(script);
-      script.onerror = () => reject(new Error("Script failed to load"));
-      document.head.appendChild(script);
-    });
-  }
-  __name(loadModuleScript, "loadModuleScript");
-  function waitForGlobalFunction(fnName, timeout = 1e4) {
-    return new Promise((resolve, reject) => {
-      const checkInterval = setInterval(() => {
-        if (typeof window !== "undefined" && typeof window.Deflect?.[fnName] === "function") {
-          clearInterval(checkInterval);
-          resolve();
-        }
-      }, 50);
-      setTimeout(() => {
-        clearInterval(checkInterval);
-        reject(new Error(`Timeout: ${fnName} did not become available within ${timeout / 1e3} seconds`));
-      }, timeout);
-    });
-  }
-  __name(waitForGlobalFunction, "waitForGlobalFunction");
-  async function getTokenFromGlobal(fnName) {
-    if (typeof window === "undefined" || typeof window.Deflect?.[fnName] !== "function") {
-      throw new Error(`${fnName} not available on window.Deflect`);
-    }
-    return window.Deflect[fnName]();
-  }
-  __name(getTokenFromGlobal, "getTokenFromGlobal");
-  function cleanup(blobUrl, scriptElement, fnName) {
-    URL.revokeObjectURL(blobUrl);
-    scriptElement.remove();
-    if (typeof window !== "undefined" && window.Deflect?.[fnName]) {
-      delete window.Deflect[fnName];
-    }
-  }
-  __name(cleanup, "cleanup");
-
-  // src/index.ts
-  var Deflect = class {
-    constructor() {
-      this.config = null;
-      this.scriptCache = null;
-      this.isWarmupInProgress = false;
-      this.hasWarmupError = false;
-      this.warmupPromise = null;
-      this.initializeGlobalState();
-      this.pulseReporter = new pulse_default(this.resolvePulseConfig());
-      this.setupAutomaticWarmup();
-    }
-    static {
-      __name(this, "Deflect");
-    }
-    initializeGlobalState() {
-      if (typeof window === "undefined") return;
-      window.Deflect = window.Deflect || {};
-    }
-    setupAutomaticWarmup() {
-      if (typeof window === "undefined") return;
-      if (document.readyState === "loading") {
-        document.addEventListener("DOMContentLoaded", () => this.tryWarmup());
-      } else {
-        setTimeout(() => this.tryWarmup(), 100);
-      }
-    }
-    resolvePulseConfig() {
-      const runtimeConfig = typeof window !== "undefined" && typeof window.Deflect === "object" && window.Deflect?.pulseConfig && typeof window.Deflect.pulseConfig === "object" ? window.Deflect.pulseConfig : {};
-      return {
-        ...runtimeConfig,
-        environment: runtimeConfig.environment || (typeof window !== "undefined" ? window.location.hostname : void 0)
-      };
-    }
-    reportError(error, tags, context) {
-      this.pulseReporter.captureException(error, { tags, context });
-    }
-    async tryWarmup() {
-      if (!this.config?.actionId || this.config.prefetch === false || this.isWarmupInProgress || this.scriptCache || this.hasWarmupError) {
-        return;
-      }
-      this.validateActionId(this.config.actionId);
-      this.isWarmupInProgress = true;
-      this.warmupPromise = (async () => {
-        try {
-          this.scriptCache = await fetchScript(this.config.actionId, this.config.scriptUrl);
-          this.hasWarmupError = false;
-        } catch {
-          this.hasWarmupError = true;
-        } finally {
-          this.isWarmupInProgress = false;
-        }
-      })();
-      await this.warmupPromise.catch(() => {
-      });
-    }
-    validateActionId(actionId) {
-      const sanitized = actionId.trim();
-      const validPattern = /^[a-zA-Z0-9/_-]+$/;
-      if (!validPattern.test(sanitized)) {
-        throw new Error("Invalid actionId format: contains disallowed characters");
-      }
-      return encodeURIComponent(sanitized);
-    }
-    prefetchNextScript() {
-      if (!this.hasWarmupError && this.config?.prefetch !== false) {
-        this.tryWarmup().catch(() => {
-        });
-      }
-    }
-    isTestMode() {
-      if (this.config?.actionId === "PULSE_TEST" || this.config?.actionId === "SENTRY_TEST") {
-        throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");
-      }
-      return this.config?.actionId === "t/FFFFFFFFFFFFF/111111111" || this.config?.actionId === "t/FFFFFFFFFFFFF/000000000";
-    }
-    configure(params) {
-      try {
-        if (!params.actionId?.trim()) {
-          throw new Error("actionId is required and cannot be empty");
-        }
-        this.validateActionId(params.actionId);
-        if (this.config?.actionId === params.actionId && this.config.prefetch === params.prefetch) {
-          return;
-        }
-        this.hasWarmupError = false;
-        this.scriptCache = null;
-        this.config = { prefetch: true, ...params };
-        if (typeof window !== "undefined") {
-          window.Deflect.actionId = params.actionId;
-        }
-        if (!this.isTestMode() && this.config.prefetch !== false) {
-          this.tryWarmup();
-        }
-      } catch (error) {
-        const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            deflect_user_error: isUserError ? "true" : "false",
-            method: "configure",
-            action_id: params?.actionId || "unknown"
-          },
-          {
-            actionId: params?.actionId,
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      }
-    }
-    async getToken() {
-      try {
-        if (!this.config?.actionId) {
-          throw new Error("Must call configure() before getToken()");
-        }
-        this.validateActionId(this.config.actionId);
-        if (this.isTestMode()) {
-          return "TESTTOKEN";
-        }
-        let script;
-        if (this.warmupPromise) {
-          await this.warmupPromise.catch(() => {
-          });
-        }
-        if (this.scriptCache && !this.isWarmupInProgress) {
-          script = this.scriptCache;
-          this.scriptCache = null;
-        } else {
-          script = await fetchScript(this.config.actionId, this.config.scriptUrl);
-        }
-        return this.executeScript(script);
-      } catch (error) {
-        const isUserError = error && typeof error === "object" && "isUserError" in error && error.isUserError === true;
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            deflect_user_error: isUserError ? "true" : "false",
-            method: "getToken",
-            action_id: this.config?.actionId || "unknown",
-            has_cache: this.scriptCache !== null ? "true" : "false",
-            has_warmup_error: this.hasWarmupError ? "true" : "false",
-            stage: "call"
-          },
-          {
-            actionId: this.config?.actionId,
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      }
-    }
-    async executeScript(script) {
-      if (script.sessionId && typeof window !== "undefined") {
-        window.Deflect.sessionId = script.sessionId;
-      }
-      const blobUrl = createBlobUrl(script.content);
-      let scriptElement = null;
-      try {
-        scriptElement = await loadModuleScript(blobUrl);
-        await waitForGlobalFunction("getChallengeToken");
-        const token = await getTokenFromGlobal("getChallengeToken");
-        this.prefetchNextScript();
-        return token;
-      } catch (error) {
-        this.reportError(
-          error,
-          {
-            deflect_sdk_error: "true",
-            method: "executeScript",
-            stage: "load_or_execute",
-            action_id: this.config?.actionId || "unknown"
-          },
-          {
-            hasCache: this.scriptCache !== null,
-            hasWarmupError: this.hasWarmupError
-          }
-        );
-        throw error;
-      } finally {
-        if (scriptElement) {
-          cleanup(blobUrl, scriptElement, "getChallengeToken");
-        } else {
-          URL.revokeObjectURL(blobUrl);
-        }
-      }
-    }
-    async warmup() {
-      if (!this.config?.actionId) {
-        return false;
-      }
-      try {
-        if (this.config.prefetch === false) {
-          return false;
-        }
-        await this.tryWarmup();
-        return this.scriptCache !== null;
-      } catch {
-        return false;
-      }
-    }
-    clearCache() {
-      this.scriptCache = null;
-    }
-    async injectToken(event) {
-      if (!event || !event.target || !(event.target instanceof HTMLFormElement)) {
-        throw new Error("injectToken: must be called from a form submit event");
-      }
-      event.preventDefault();
-      const form = event.target;
-      const token = await this.getToken();
-      Array.from(form.querySelectorAll('input[name="deflect_token"]')).forEach(
-        (el) => el.remove()
-      );
-      const hidden = document.createElement("input");
-      hidden.type = "hidden";
-      hidden.name = "deflect_token";
-      hidden.value = token;
-      form.appendChild(hidden);
-      form.submit();
-    }
-  };
-  var DeflectInstance = new Deflect();
-  if (typeof window !== "undefined") {
-    window.Deflect = DeflectInstance;
-  }
-  var src_default = DeflectInstance;
-})();

package/dist/index.min.js

@@ -1,2 +0,0 @@
-"use strict";(()=>{var d={endpoint:"https://service.yabadabado.top/pulse",projectId:"deflect-sdk",deploymentId:"688529b539803661332b3f70",service:"deflect-sdk",release:"unknown"},w={name:"deflect-js-sdk",version:d.release||"unknown",language:"javascript"},u=class{constructor(e){this.config={...d,...e,endpoint:(e?.endpoint||d.endpoint).replace(/\/$/,"")},this.enabled=!!(this.config.endpoint&&this.config.projectId&&this.config.deploymentId)}captureException(e,t={}){if(!this.enabled||typeof fetch!="function")return;let n=this.buildErrorEvent(e,t);fetch(`${this.config.endpoint}/capture`,{method:"POST",headers:{"Content-Type":"application/json",project_id:this.config.projectId},body:JSON.stringify(n),keepalive:!0}).catch(()=>{})}buildErrorEvent(e,t){let n=this.normalizeError(e),i=this.config.environment||typeof window<"u"&&window.location.hostname||"unknown",o=typeof navigator>"u"?void 0:{name:navigator.userAgent||"browser",version:navigator.appVersion},a=typeof navigator>"u"?void 0:{name:navigator.platform},l=typeof window>"u"?void 0:{model:`${window.screen.width}x${window.screen.height}`,arch:typeof navigator<"u"?navigator.platform:void 0},h=typeof window>"u"?void 0:{method:"GET",url:window.location.href,headers:typeof navigator<"u"?{"User-Agent":navigator.userAgent,...typeof document<"u"&&document.referrer?{Referer:document.referrer}:{}}:void 0};return{event_type:"error",event_id:typeof crypto<"u"&&typeof crypto.randomUUID=="function"?crypto.randomUUID():Math.random().toString(16).slice(2)+Date.now().toString(16),deployment_id:this.config.deploymentId,project_id:this.config.projectId,environment:i,service:this.config.service,timestamp:new Date().toISOString(),release:this.config.release,sdk:{...w,version:this.config.release||w.version},tags:t.tags,context:t.context,error:{level:t.level||"error",message:n.message,exception:this.buildExceptionPayload(n),request:h,runtime:o,os:a,device:l}}}normalizeError(e){if(e instanceof Error)return e;let t=typeof e=="string"?e:"Unknown error";return new Error(t)}buildExceptionPayload(e){let t=this.parseStack(e);return{type:e.name||"Error",value:e.message,stacktrace:t.length?{frames:t}:void 0}}parseStack(e){if(!e.stack)return[];let t=[],n=e.stack.split(`
-`).slice(1);for(let i of n){let o=i.trim().replace(/^at\s+/,""),a=o.includes("(")&&o.endsWith(")"),l=a?o.slice(0,o.indexOf("(")).trim():"",s=(a?o.slice(o.indexOf("(")+1,o.length-1):o).split(":"),c=s[0]||void 0,g=s.length>1?Number(s[1]):void 0,m=s.length>2?Number(s[2]):void 0;c&&t.push({filename:c,abs_path:c,function:l||void 0,lineno:Number.isFinite(g)?g:void 0,colno:Number.isFinite(m)?m:void 0,in_app:!c.includes("node_modules")})}return t}},v=u;function k(r,e){let t=e||"https://js.deflect.bot/main.js",n=Date.now().toString();return`${t}?action_id=${encodeURIComponent(r)}&_=${n}`}async function f(r,e){let t=k(r,e),n=await fetch(t,{cache:"no-store",mode:"cors",credentials:"omit"}),i=await n.text(),o=_(i);if(o)throw o;return{content:i,sessionId:n.headers.get("session_id")||void 0}}function _(r){try{let e=JSON.parse(r);if(e.success===!1||e.error){let t=e.error||"Script fetch failed",n=new Error(t);return(t==="action_does_not_exist"||t.includes("invalid action"))&&(n.isUserError=!0),n}}catch(e){if(!(e instanceof SyntaxError))throw e}return null}function y(r){let e=new Blob([r],{type:"text/javascript"});return URL.createObjectURL(e)}function E(r){return new Promise((e,t)=>{let n=document.createElement("script");n.type="module",n.src=r,n.onload=()=>e(n),n.onerror=()=>t(new Error("Script failed to load")),document.head.appendChild(n)})}function I(r,e=1e4){return new Promise((t,n)=>{let i=setInterval(()=>{typeof window<"u"&&typeof window.Deflect?.[r]=="function"&&(clearInterval(i),t())},50);setTimeout(()=>{clearInterval(i),n(new Error(`Timeout: ${r} did not become available within ${e/1e3} seconds`))},e)})}async function P(r){if(typeof window>"u"||typeof window.Deflect?.[r]!="function")throw new Error(`${r} not available on window.Deflect`);return window.Deflect[r]()}function b(r,e,t){URL.revokeObjectURL(r),e.remove(),typeof window<"u"&&window.Deflect?.[t]&&delete window.Deflect[t]}var p=class{constructor(){this.config=null;this.scriptCache=null;this.isWarmupInProgress=!1;this.hasWarmupError=!1;this.warmupPromise=null;this.initializeGlobalState(),this.pulseReporter=new v(this.resolvePulseConfig()),this.setupAutomaticWarmup()}initializeGlobalState(){typeof window>"u"||(window.Deflect=window.Deflect||{})}setupAutomaticWarmup(){typeof window>"u"||(document.readyState==="loading"?document.addEventListener("DOMContentLoaded",()=>this.tryWarmup()):setTimeout(()=>this.tryWarmup(),100))}resolvePulseConfig(){let e=typeof window<"u"&&typeof window.Deflect=="object"&&window.Deflect?.pulseConfig&&typeof window.Deflect.pulseConfig=="object"?window.Deflect.pulseConfig:{};return{...e,environment:e.environment||(typeof window<"u"?window.location.hostname:void 0)}}reportError(e,t,n){this.pulseReporter.captureException(e,{tags:t,context:n})}async tryWarmup(){!this.config?.actionId||this.config.prefetch===!1||this.isWarmupInProgress||this.scriptCache||this.hasWarmupError||(this.validateActionId(this.config.actionId),this.isWarmupInProgress=!0,this.warmupPromise=(async()=>{try{this.scriptCache=await f(this.config.actionId,this.config.scriptUrl),this.hasWarmupError=!1}catch{this.hasWarmupError=!0}finally{this.isWarmupInProgress=!1}})(),await this.warmupPromise.catch(()=>{}))}validateActionId(e){let t=e.trim();if(!/^[a-zA-Z0-9/_-]+$/.test(t))throw new Error("Invalid actionId format: contains disallowed characters");return encodeURIComponent(t)}prefetchNextScript(){!this.hasWarmupError&&this.config?.prefetch!==!1&&this.tryWarmup().catch(()=>{})}isTestMode(){if(this.config?.actionId==="PULSE_TEST"||this.config?.actionId==="SENTRY_TEST")throw new Error("PULSE_TEST: This is a test error to verify Pulse integration is working");return this.config?.actionId==="t/FFFFFFFFFFFFF/111111111"||this.config?.actionId==="t/FFFFFFFFFFFFF/000000000"}configure(e){try{if(!e.actionId?.trim())throw new Error("actionId is required and cannot be empty");if(this.validateActionId(e.actionId),this.config?.actionId===e.actionId&&this.config.prefetch===e.prefetch)return;this.hasWarmupError=!1,this.scriptCache=null,this.config={prefetch:!0,...e},typeof window<"u"&&(window.Deflect.actionId=e.actionId),!this.isTestMode()&&this.config.prefetch!==!1&&this.tryWarmup()}catch(t){let n=t&&typeof t=="object"&&"isUserError"in t&&t.isUserError===!0;throw this.reportError(t,{deflect_sdk_error:"true",deflect_user_error:n?"true":"false",method:"configure",action_id:e?.actionId||"unknown"},{actionId:e?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),t}}async getToken(){try{if(!this.config?.actionId)throw new Error("Must call configure() before getToken()");if(this.validateActionId(this.config.actionId),this.isTestMode())return"TESTTOKEN";let e;return this.warmupPromise&&await this.warmupPromise.catch(()=>{}),this.scriptCache&&!this.isWarmupInProgress?(e=this.scriptCache,this.scriptCache=null):e=await f(this.config.actionId,this.config.scriptUrl),this.executeScript(e)}catch(e){let t=e&&typeof e=="object"&&"isUserError"in e&&e.isUserError===!0;throw this.reportError(e,{deflect_sdk_error:"true",deflect_user_error:t?"true":"false",method:"getToken",action_id:this.config?.actionId||"unknown",has_cache:this.scriptCache!==null?"true":"false",has_warmup_error:this.hasWarmupError?"true":"false",stage:"call"},{actionId:this.config?.actionId,hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),e}}async executeScript(e){e.sessionId&&typeof window<"u"&&(window.Deflect.sessionId=e.sessionId);let t=y(e.content),n=null;try{n=await E(t),await I("getChallengeToken");let i=await P("getChallengeToken");return this.prefetchNextScript(),i}catch(i){throw this.reportError(i,{deflect_sdk_error:"true",method:"executeScript",stage:"load_or_execute",action_id:this.config?.actionId||"unknown"},{hasCache:this.scriptCache!==null,hasWarmupError:this.hasWarmupError}),i}finally{n?b(t,n,"getChallengeToken"):URL.revokeObjectURL(t)}}async warmup(){if(!this.config?.actionId)return!1;try{return this.config.prefetch===!1?!1:(await this.tryWarmup(),this.scriptCache!==null)}catch{return!1}}clearCache(){this.scriptCache=null}async injectToken(e){if(!e||!e.target||!(e.target instanceof HTMLFormElement))throw new Error("injectToken: must be called from a form submit event");e.preventDefault();let t=e.target,n=await this.getToken();Array.from(t.querySelectorAll('input[name="deflect_token"]')).forEach(o=>o.remove());let i=document.createElement("input");i.type="hidden",i.name="deflect_token",i.value=n,t.appendChild(i),t.submit()}},S=new p;typeof window<"u"&&(window.Deflect=S);var j=S;})();

package/dist/pulse.d.ts

@@ -1,99 +0,0 @@
-export type PulseEventType = "error" | "span" | "transaction" | "log" | "metric";
-export type PulseLevel = "fatal" | "error" | "warning" | "info" | "debug";
-export interface PulseReporterConfig {
-    endpoint: string;
-    projectId: string;
-    deploymentId: string;
-    environment?: string;
-    service?: string;
-    release?: string;
-}
-export interface PulseSDKInfo {
-    name: string;
-    version: string;
-    language: string;
-    integrations?: string[];
-}
-export interface PulseStackFrame {
-    filename?: string;
-    abs_path?: string;
-    function?: string;
-    lineno?: number;
-    colno?: number;
-    in_app?: boolean;
-    context_line?: string;
-}
-export interface PulseExceptionPayload {
-    type?: string;
-    value?: string;
-    stacktrace?: {
-        frames: PulseStackFrame[];
-    };
-}
-export interface PulseRequestInfo {
-    method?: string;
-    url?: string;
-    headers?: Record<string, string>;
-    route?: string;
-    status_code?: number;
-}
-export interface PulseRuntimeInfo {
-    name?: string;
-    version?: string;
-}
-export interface PulseOSInfo {
-    name?: string;
-    version?: string;
-}
-export interface PulseDeviceInfo {
-    model?: string;
-    arch?: string;
-}
-export interface PulseErrorPayload {
-    level: PulseLevel;
-    message?: string;
-    exception?: PulseExceptionPayload;
-    culprit?: string;
-    request?: PulseRequestInfo;
-    runtime?: PulseRuntimeInfo;
-    os?: PulseOSInfo;
-    device?: PulseDeviceInfo;
-}
-export interface PulseEvent {
-    event_type: PulseEventType;
-    event_id: string;
-    deployment_id: string;
-    project_id: string;
-    environment?: string;
-    service?: string;
-    host?: string;
-    sdk?: PulseSDKInfo;
-    timestamp: string;
-    release?: string;
-    dist?: string;
-    deployment?: string;
-    tags?: Record<string, string>;
-    context?: Record<string, unknown>;
-    sample_rate?: number;
-    fingerprint?: string[];
-    ingest_key_id?: string;
-    payload_version?: number;
-    content_encoding?: string;
-    error?: PulseErrorPayload;
-}
-export interface PulseCaptureOptions {
-    tags?: Record<string, string>;
-    context?: Record<string, unknown>;
-    level?: PulseLevel;
-}
-export declare class PulseReporter {
-    private readonly config;
-    private readonly enabled;
-    constructor(config?: Partial<PulseReporterConfig>);
-    captureException(error: unknown, options?: PulseCaptureOptions): void;
-    private buildErrorEvent;
-    private normalizeError;
-    private buildExceptionPayload;
-    private parseStack;
-}
-export default PulseReporter;

package/dist/scriptClient.d.ts

@@ -1,7 +0,0 @@
-export interface DeflectScript {
-    sessionId?: string;
-    content: string;
-}
-export declare function buildScriptUrl(actionId: string, scriptUrl?: string): string;
-export declare function fetchScript(actionId: string, scriptUrl?: string): Promise<DeflectScript>;
-export declare function parseErrorJson(content: string): Error | null;

package/dist/scriptRunner.d.ts

@@ -1,5 +0,0 @@
-export declare function createBlobUrl(content: string): string;
-export declare function loadModuleScript(blobUrl: string): Promise<HTMLScriptElement>;
-export declare function waitForGlobalFunction(fnName: string, timeout?: number): Promise<void>;
-export declare function getTokenFromGlobal(fnName: string): Promise<string>;
-export declare function cleanup(blobUrl: string, scriptElement: HTMLScriptElement, fnName: string): void;