@prodigio-io/sdk 2.0.1 → 2.1.0

package/dist/index.d.mts

@@ -8,9 +8,6 @@ interface ProdigioInitConfig {
     baseUrl?: string;
     badge?: {
         position?: 'bottom-right' | 'bottom-left';
-        /** Only inject the badge when the current page path starts with one of these strings.
-         *  e.g. ['/careers'] — badge appears on /careers and /careers/job-id but not on / or /about */
-        paths?: string[];
     };
 }
 interface SalaryRange {
@@ -119,6 +116,7 @@ declare class Prodigio {
         name: string;
         content: string;
     };
+    static destroy(): void;
     static init(config: ProdigioInitConfig): Promise<void>;
 }
 

package/dist/index.d.ts

@@ -8,9 +8,6 @@ interface ProdigioInitConfig {
     baseUrl?: string;
     badge?: {
         position?: 'bottom-right' | 'bottom-left';
-        /** Only inject the badge when the current page path starts with one of these strings.
-         *  e.g. ['/careers'] — badge appears on /careers and /careers/job-id but not on / or /about */
-        paths?: string[];
     };
 }
 interface SalaryRange {
@@ -119,6 +116,7 @@ declare class Prodigio {
         name: string;
         content: string;
     };
+    static destroy(): void;
     static init(config: ProdigioInitConfig): Promise<void>;
 }
 

package/dist/index.js

@@ -68,7 +68,6 @@ async function verifyBadgeToken(token) {
     const parts = token.split(".");
     if (parts.length !== 3) return null;
     const [headerB64, payloadB64, sigB64] = parts;
-    const signingInput = `${headerB64}.${payloadB64}`;
     const signature = base64urlToArrayBuffer(sigB64);
     const keyData = pemToArrayBuffer(PRODIGIO_PUBLIC_KEY_PEM);
     const publicKey = await crypto.subtle.importKey(
@@ -78,12 +77,11 @@ async function verifyBadgeToken(token) {
       false,
       ["verify"]
     );
-    const encoder = new TextEncoder();
     const valid = await crypto.subtle.verify(
       "RSASSA-PKCS1-v1_5",
       publicKey,
       signature,
-      encoder.encode(signingInput)
+      new TextEncoder().encode(`${headerB64}.${payloadB64}`)
     );
     if (!valid) return null;
     const claims = JSON.parse(atob(payloadB64.replace(/-/g, "+").replace(/_/g, "/")));
@@ -106,25 +104,13 @@ function injectBadge(position = "bottom-right") {
   el.setAttribute("data-prodigio-badge", "true");
   el.setAttribute("aria-label", "Hiring powered by Prodigio");
   el.style.cssText = `
-    position: fixed;
-    bottom: 20px;
-    ${side}
-    z-index: 2147483647;
-    display: inline-flex;
-    align-items: center;
-    gap: 6px;
-    padding: 6px 10px;
-    background: #ffffff;
-    border: 1px solid #e5e5e5;
-    border-radius: 20px;
-    box-shadow: 0 2px 8px rgba(0,0,0,0.08);
+    position: fixed; bottom: 20px; ${side}
+    z-index: 2147483647; display: inline-flex; align-items: center; gap: 6px;
+    padding: 6px 10px; background: #ffffff; border: 1px solid #e5e5e5;
+    border-radius: 20px; box-shadow: 0 2px 8px rgba(0,0,0,0.08);
     font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    font-size: 11px;
-    font-weight: 500;
-    color: #666666;
-    text-decoration: none;
-    cursor: pointer;
-    transition: box-shadow 0.15s ease;
+    font-size: 11px; font-weight: 500; color: #666666;
+    text-decoration: none; cursor: pointer; transition: box-shadow 0.15s ease;
   `;
   el.innerHTML = `
     <svg width="14" height="14" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
@@ -149,20 +135,48 @@ function removeBadge() {
 }
 function cacheToken(apiKey, token, badgeExemptUntil, configVersion) {
   try {
-    const entry = { token, badgeExemptUntil, configVersion, cachedAt: Date.now() };
-    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify(entry));
+    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify({ token, badgeExemptUntil, configVersion, cachedAt: Date.now() }));
   } catch {
   }
 }
 function getCachedToken(apiKey) {
   try {
     const raw = localStorage.getItem(`${BADGE_CACHE_KEY}_${apiKey}`);
-    if (!raw) return null;
-    return JSON.parse(raw);
+    return raw ? JSON.parse(raw) : null;
   } catch {
     return null;
   }
 }
+var _routeWatcherInstalled = false;
+var _routeChangeCallbacks = [];
+function installRouteWatcher() {
+  if (_routeWatcherInstalled || typeof window === "undefined") return;
+  _routeWatcherInstalled = true;
+  const dispatch = () => _routeChangeCallbacks.forEach((cb) => cb());
+  const orig = {
+    push: history.pushState.bind(history),
+    replace: history.replaceState.bind(history)
+  };
+  history.pushState = (...args) => {
+    orig.push(...args);
+    dispatch();
+  };
+  history.replaceState = (...args) => {
+    orig.replace(...args);
+    dispatch();
+  };
+  window.addEventListener("popstate", dispatch);
+  window.addEventListener("hashchange", dispatch);
+}
+var _initialized = false;
+function normalizePath(p) {
+  return p.replace(/\/$/, "").split("?")[0];
+}
+function pathMatches(current, careersPath) {
+  const c = normalizePath(current);
+  const target = normalizePath(careersPath);
+  return c === target || c.startsWith(target + "/");
+}
 var _Prodigio = class _Prodigio {
   constructor(config) {
     // ── Jobs ──────────────────────────────────────────────────────────────────
@@ -206,9 +220,7 @@ var _Prodigio = class _Prodigio {
     const url = new URL(`${this.baseUrl}${path}`);
     url.searchParams.set("key", this.apiKey);
     if (params) {
-      for (const [k, v] of Object.entries(params)) {
-        if (v !== void 0) url.searchParams.set(k, v);
-      }
+      for (const [k, v] of Object.entries(params)) if (v !== void 0) url.searchParams.set(k, v);
     }
     const res = await fetch(url.toString());
     if (!res.ok) {
@@ -243,75 +255,75 @@ var _Prodigio = class _Prodigio {
   }
   static badge(poweredBy) {
     const pb = poweredBy != null ? poweredBy : _Prodigio.POWERED_BY;
-    return {
-      href: pb.url,
-      "data-prodigio-badge": "true",
-      target: "_blank",
-      rel: "noopener noreferrer",
-      text: pb.text
-    };
+    return { href: pb.url, "data-prodigio-badge": "true", target: "_blank", rel: "noopener noreferrer", text: pb.text };
   }
   static meta() {
     return { name: "prodigio-badge", content: "true" };
   }
-  // ── init() — v2 badge auto-injection ─────────────────────────────────────
+  // ── destroy() ─────────────────────────────────────────────────────────────
+  static destroy() {
+    removeBadge();
+    _initialized = false;
+  }
+  // ── init() ────────────────────────────────────────────────────────────────
   static async init(config) {
     var _a;
     if (typeof window === "undefined") return;
+    if (_initialized) return;
+    _initialized = true;
     const { key, badgeToken, baseUrl = DEFAULT_BASE_URL, badge: badgeConfig } = config;
     const position = (_a = badgeConfig == null ? void 0 : badgeConfig.position) != null ? _a : "bottom-right";
-    const paths = badgeConfig == null ? void 0 : badgeConfig.paths;
-    if (paths && paths.length > 0) {
-      const currentPath = window.location.pathname;
-      if (!paths.some((p) => currentPath === p || currentPath.startsWith(p + "/"))) {
-        return;
-      }
-    }
-    const hostname = window.location.hostname;
     const cached = getCachedToken(key);
-    let bestToken = null;
-    let bestTokenRaw = null;
     const [initClaims, cachedClaims] = await Promise.all([
       badgeToken ? verifyBadgeToken(badgeToken) : Promise.resolve(null),
       cached ? verifyBadgeToken(cached.token) : Promise.resolve(null)
     ]);
+    let bestToken = null;
     if (initClaims && cachedClaims) {
-      if (new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil)) {
-        bestToken = initClaims;
-        bestTokenRaw = badgeToken;
-      } else {
-        bestToken = cachedClaims;
-        bestTokenRaw = cached.token;
-      }
-    } else if (initClaims) {
-      bestToken = initClaims;
-      bestTokenRaw = badgeToken;
-    } else if (cachedClaims) {
-      bestToken = cachedClaims;
-      bestTokenRaw = cached.token;
+      bestToken = new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil) ? initClaims : cachedClaims;
+    } else {
+      bestToken = initClaims != null ? initClaims : cachedClaims;
     }
+    const hostname = window.location.hostname;
     const domainAllowed = bestToken ? bestToken.allowedDomains.length === 0 || bestToken.allowedDomains.includes(hostname) : true;
     const isExempt = bestToken !== null && !bestToken.badgeRequired && domainAllowed;
-    if (isExempt) {
-      removeBadge();
-    } else if (!bestToken && cached) {
-      const cacheAge = Date.now() - cached.cachedAt;
-      if (cacheAge < GRACE_PERIOD_MS) {
+    let careersPath = null;
+    function evaluateBadge() {
+      if (isExempt) {
         removeBadge();
+        return;
+      }
+      if (careersPath) {
+        if (pathMatches(window.location.pathname, careersPath)) {
+          injectBadge(position);
+        } else {
+          removeBadge();
+        }
       } else {
+        if (!bestToken && cached) {
+          const cacheAge = Date.now() - cached.cachedAt;
+          if (cacheAge < GRACE_PERIOD_MS) {
+            removeBadge();
+            return;
+          }
+        }
         injectBadge(position);
       }
-    } else {
-      injectBadge(position);
     }
+    evaluateBadge();
+    installRouteWatcher();
+    _routeChangeCallbacks.push(evaluateBadge);
     setTimeout(async () => {
       var _a2, _b;
       try {
         const res = await fetch(`${baseUrl}/api/sdk/config?key=${encodeURIComponent(key)}`);
         if (!res.ok) return;
         const data = await res.json();
+        if (data.careersPath !== void 0) {
+          careersPath = data.careersPath;
+        }
         if (data.badgeRequired) {
-          injectBadge(position);
+          evaluateBadge();
           return;
         }
         if (data.badgeToken) {
@@ -321,12 +333,13 @@ var _Prodigio = class _Prodigio {
             removeBadge();
           }
         }
+        evaluateBadge();
       } catch {
       }
     }, 0);
   }
 };
-// ── Badge (static helpers) ────────────────────────────────────────────────
+// ── Badge static helpers ──────────────────────────────────────────────────
 _Prodigio.POWERED_BY = {
   text: "Hiring powered by Prodigio",
   url: "https://prodigio.io"

package/dist/index.mjs

@@ -42,7 +42,6 @@ async function verifyBadgeToken(token) {
     const parts = token.split(".");
     if (parts.length !== 3) return null;
     const [headerB64, payloadB64, sigB64] = parts;
-    const signingInput = `${headerB64}.${payloadB64}`;
     const signature = base64urlToArrayBuffer(sigB64);
     const keyData = pemToArrayBuffer(PRODIGIO_PUBLIC_KEY_PEM);
     const publicKey = await crypto.subtle.importKey(
@@ -52,12 +51,11 @@ async function verifyBadgeToken(token) {
       false,
       ["verify"]
     );
-    const encoder = new TextEncoder();
     const valid = await crypto.subtle.verify(
       "RSASSA-PKCS1-v1_5",
       publicKey,
       signature,
-      encoder.encode(signingInput)
+      new TextEncoder().encode(`${headerB64}.${payloadB64}`)
     );
     if (!valid) return null;
     const claims = JSON.parse(atob(payloadB64.replace(/-/g, "+").replace(/_/g, "/")));
@@ -80,25 +78,13 @@ function injectBadge(position = "bottom-right") {
   el.setAttribute("data-prodigio-badge", "true");
   el.setAttribute("aria-label", "Hiring powered by Prodigio");
   el.style.cssText = `
-    position: fixed;
-    bottom: 20px;
-    ${side}
-    z-index: 2147483647;
-    display: inline-flex;
-    align-items: center;
-    gap: 6px;
-    padding: 6px 10px;
-    background: #ffffff;
-    border: 1px solid #e5e5e5;
-    border-radius: 20px;
-    box-shadow: 0 2px 8px rgba(0,0,0,0.08);
+    position: fixed; bottom: 20px; ${side}
+    z-index: 2147483647; display: inline-flex; align-items: center; gap: 6px;
+    padding: 6px 10px; background: #ffffff; border: 1px solid #e5e5e5;
+    border-radius: 20px; box-shadow: 0 2px 8px rgba(0,0,0,0.08);
     font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    font-size: 11px;
-    font-weight: 500;
-    color: #666666;
-    text-decoration: none;
-    cursor: pointer;
-    transition: box-shadow 0.15s ease;
+    font-size: 11px; font-weight: 500; color: #666666;
+    text-decoration: none; cursor: pointer; transition: box-shadow 0.15s ease;
   `;
   el.innerHTML = `
     <svg width="14" height="14" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
@@ -123,20 +109,48 @@ function removeBadge() {
 }
 function cacheToken(apiKey, token, badgeExemptUntil, configVersion) {
   try {
-    const entry = { token, badgeExemptUntil, configVersion, cachedAt: Date.now() };
-    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify(entry));
+    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify({ token, badgeExemptUntil, configVersion, cachedAt: Date.now() }));
   } catch {
   }
 }
 function getCachedToken(apiKey) {
   try {
     const raw = localStorage.getItem(`${BADGE_CACHE_KEY}_${apiKey}`);
-    if (!raw) return null;
-    return JSON.parse(raw);
+    return raw ? JSON.parse(raw) : null;
   } catch {
     return null;
   }
 }
+var _routeWatcherInstalled = false;
+var _routeChangeCallbacks = [];
+function installRouteWatcher() {
+  if (_routeWatcherInstalled || typeof window === "undefined") return;
+  _routeWatcherInstalled = true;
+  const dispatch = () => _routeChangeCallbacks.forEach((cb) => cb());
+  const orig = {
+    push: history.pushState.bind(history),
+    replace: history.replaceState.bind(history)
+  };
+  history.pushState = (...args) => {
+    orig.push(...args);
+    dispatch();
+  };
+  history.replaceState = (...args) => {
+    orig.replace(...args);
+    dispatch();
+  };
+  window.addEventListener("popstate", dispatch);
+  window.addEventListener("hashchange", dispatch);
+}
+var _initialized = false;
+function normalizePath(p) {
+  return p.replace(/\/$/, "").split("?")[0];
+}
+function pathMatches(current, careersPath) {
+  const c = normalizePath(current);
+  const target = normalizePath(careersPath);
+  return c === target || c.startsWith(target + "/");
+}
 var _Prodigio = class _Prodigio {
   constructor(config) {
     // ── Jobs ──────────────────────────────────────────────────────────────────
@@ -180,9 +194,7 @@ var _Prodigio = class _Prodigio {
     const url = new URL(`${this.baseUrl}${path}`);
     url.searchParams.set("key", this.apiKey);
     if (params) {
-      for (const [k, v] of Object.entries(params)) {
-        if (v !== void 0) url.searchParams.set(k, v);
-      }
+      for (const [k, v] of Object.entries(params)) if (v !== void 0) url.searchParams.set(k, v);
     }
     const res = await fetch(url.toString());
     if (!res.ok) {
@@ -217,75 +229,75 @@ var _Prodigio = class _Prodigio {
   }
   static badge(poweredBy) {
     const pb = poweredBy != null ? poweredBy : _Prodigio.POWERED_BY;
-    return {
-      href: pb.url,
-      "data-prodigio-badge": "true",
-      target: "_blank",
-      rel: "noopener noreferrer",
-      text: pb.text
-    };
+    return { href: pb.url, "data-prodigio-badge": "true", target: "_blank", rel: "noopener noreferrer", text: pb.text };
   }
   static meta() {
     return { name: "prodigio-badge", content: "true" };
   }
-  // ── init() — v2 badge auto-injection ─────────────────────────────────────
+  // ── destroy() ─────────────────────────────────────────────────────────────
+  static destroy() {
+    removeBadge();
+    _initialized = false;
+  }
+  // ── init() ────────────────────────────────────────────────────────────────
   static async init(config) {
     var _a;
     if (typeof window === "undefined") return;
+    if (_initialized) return;
+    _initialized = true;
     const { key, badgeToken, baseUrl = DEFAULT_BASE_URL, badge: badgeConfig } = config;
     const position = (_a = badgeConfig == null ? void 0 : badgeConfig.position) != null ? _a : "bottom-right";
-    const paths = badgeConfig == null ? void 0 : badgeConfig.paths;
-    if (paths && paths.length > 0) {
-      const currentPath = window.location.pathname;
-      if (!paths.some((p) => currentPath === p || currentPath.startsWith(p + "/"))) {
-        return;
-      }
-    }
-    const hostname = window.location.hostname;
     const cached = getCachedToken(key);
-    let bestToken = null;
-    let bestTokenRaw = null;
     const [initClaims, cachedClaims] = await Promise.all([
       badgeToken ? verifyBadgeToken(badgeToken) : Promise.resolve(null),
       cached ? verifyBadgeToken(cached.token) : Promise.resolve(null)
     ]);
+    let bestToken = null;
     if (initClaims && cachedClaims) {
-      if (new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil)) {
-        bestToken = initClaims;
-        bestTokenRaw = badgeToken;
-      } else {
-        bestToken = cachedClaims;
-        bestTokenRaw = cached.token;
-      }
-    } else if (initClaims) {
-      bestToken = initClaims;
-      bestTokenRaw = badgeToken;
-    } else if (cachedClaims) {
-      bestToken = cachedClaims;
-      bestTokenRaw = cached.token;
+      bestToken = new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil) ? initClaims : cachedClaims;
+    } else {
+      bestToken = initClaims != null ? initClaims : cachedClaims;
     }
+    const hostname = window.location.hostname;
     const domainAllowed = bestToken ? bestToken.allowedDomains.length === 0 || bestToken.allowedDomains.includes(hostname) : true;
     const isExempt = bestToken !== null && !bestToken.badgeRequired && domainAllowed;
-    if (isExempt) {
-      removeBadge();
-    } else if (!bestToken && cached) {
-      const cacheAge = Date.now() - cached.cachedAt;
-      if (cacheAge < GRACE_PERIOD_MS) {
+    let careersPath = null;
+    function evaluateBadge() {
+      if (isExempt) {
         removeBadge();
+        return;
+      }
+      if (careersPath) {
+        if (pathMatches(window.location.pathname, careersPath)) {
+          injectBadge(position);
+        } else {
+          removeBadge();
+        }
       } else {
+        if (!bestToken && cached) {
+          const cacheAge = Date.now() - cached.cachedAt;
+          if (cacheAge < GRACE_PERIOD_MS) {
+            removeBadge();
+            return;
+          }
+        }
         injectBadge(position);
       }
-    } else {
-      injectBadge(position);
     }
+    evaluateBadge();
+    installRouteWatcher();
+    _routeChangeCallbacks.push(evaluateBadge);
     setTimeout(async () => {
       var _a2, _b;
       try {
         const res = await fetch(`${baseUrl}/api/sdk/config?key=${encodeURIComponent(key)}`);
         if (!res.ok) return;
         const data = await res.json();
+        if (data.careersPath !== void 0) {
+          careersPath = data.careersPath;
+        }
         if (data.badgeRequired) {
-          injectBadge(position);
+          evaluateBadge();
           return;
         }
         if (data.badgeToken) {
@@ -295,12 +307,13 @@ var _Prodigio = class _Prodigio {
             removeBadge();
           }
         }
+        evaluateBadge();
       } catch {
       }
     }, 0);
   }
 };
-// ── Badge (static helpers) ────────────────────────────────────────────────
+// ── Badge static helpers ──────────────────────────────────────────────────
 _Prodigio.POWERED_BY = {
   text: "Hiring powered by Prodigio",
   url: "https://prodigio.io"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prodigio-io/sdk",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "Official JavaScript SDK for the Prodigio hiring API",
   "main": "dist/index.js",
   "module": "dist/index.mjs",