@prodigio-io/sdk 2.1.8 → 3.0.1

package/README.md

@@ -46,12 +46,6 @@ Creates a new client. Get your API key from your Prodigio dashboard under **Sett
 
 ```typescript
 const prodigio = new Prodigio('pk_live_...');
-
-// Or with config object
-const prodigio = new Prodigio({
-  apiKey: 'pk_live_...',
-  baseUrl: 'https://hire.prodigio.io', // optional
-});
 ```
 
 ### `prodigio.jobs.list(params?)`
@@ -89,7 +83,7 @@ const attachment = await prodigio.upload.achievement(file);
 
 ### `prodigio.applications.submit(params)`
 
-Submits a candidate application. AI scoring runs automatically on the backend.
+Submits a candidate application.
 
 ```typescript
 const result = await prodigio.applications.submit({

package/dist/index.d.mts

@@ -90,6 +90,7 @@ interface BadgeProps {
     rel: string;
     text: string;
 }
+
 declare class ProdigioError extends Error {
     readonly status: number;
     readonly code?: string | undefined;
@@ -113,14 +114,17 @@ declare class Prodigio {
     readonly applications: {
         submit: (params: SubmitApplicationParams) => Promise<ApplicationResult>;
     };
-    static readonly POWERED_BY: PoweredBy;
+    static init(config: ProdigioInitConfig): Promise<void>;
+    static destroy(): void;
     static badge(poweredBy?: PoweredBy): BadgeProps;
     static meta(): {
         name: string;
         content: string;
     };
-    static init(config: ProdigioInitConfig): Promise<void>;
-    static destroy(): void;
+    static readonly POWERED_BY: {
+        text: string;
+        url: string;
+    };
 }
 
 export { type Achievement, type Applicant, type ApplicationResult, type BadgeProps, type CVInfo, type Job, type ListJobsParams, type PoweredBy, Prodigio, type ProdigioConfig, ProdigioError, type ProdigioInitConfig, type SalaryRange, type SubmitApplicationParams, type UploadResult, Prodigio as default };

package/dist/index.d.ts

@@ -90,6 +90,7 @@ interface BadgeProps {
     rel: string;
     text: string;
 }
+
 declare class ProdigioError extends Error {
     readonly status: number;
     readonly code?: string | undefined;
@@ -113,14 +114,17 @@ declare class Prodigio {
     readonly applications: {
         submit: (params: SubmitApplicationParams) => Promise<ApplicationResult>;
     };
-    static readonly POWERED_BY: PoweredBy;
+    static init(config: ProdigioInitConfig): Promise<void>;
+    static destroy(): void;
     static badge(poweredBy?: PoweredBy): BadgeProps;
     static meta(): {
         name: string;
         content: string;
     };
-    static init(config: ProdigioInitConfig): Promise<void>;
-    static destroy(): void;
+    static readonly POWERED_BY: {
+        text: string;
+        url: string;
+    };
 }
 
 export { type Achievement, type Applicant, type ApplicationResult, type BadgeProps, type CVInfo, type Job, type ListJobsParams, type PoweredBy, Prodigio, type ProdigioConfig, ProdigioError, type ProdigioInitConfig, type SalaryRange, type SubmitApplicationParams, type UploadResult, Prodigio as default };

package/dist/index.js

@@ -26,17 +26,7 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var DEFAULT_BASE_URL = "https://hire.prodigio.io";
-var BADGE_CACHE_KEY = "prodigio_badge_token";
-var GRACE_PERIOD_MS = 5 * 60 * 1e3;
-var PRODIGIO_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy85BNWaJVQQA/AFsz612
-I+3K94s6P7r9zoSUvxDhn2J1INyuc27EIcMOHHPDxChrzJGv6bozGbpexYSIIgQd
-ge9Ge9P/J+THQMdUmAbidfp/mR1i0vISaaBvKfFQfIGkuXpzbQB8eEV1s0jACMSd
-qRSKeJEKSKPf3OkWVhaWi4KxT9H14W6lJMBrE0ZaGbAog2HmG69f5+5JjvxU6TWR
-BojS5CYGvSvAIQGnsWm3Rz/HfZoPg1VRMRkGYCbLIVyV3XjLPo/VqBGuvjZSRTk+
-HW72H1ZvBsBnNSEKkOSp5r43Du3x2KUQdYyV7p0iIwMRnMq2enBEEb2qrrj7huln
-BQIDAQAB
------END PUBLIC KEY-----`;
+var CDN_URL = "https://cdn.prodigio.io/sdk/v2/sdk.js";
 var ProdigioError = class extends Error {
   constructor(message, status, code) {
     super(message);
@@ -45,203 +35,30 @@ var ProdigioError = class extends Error {
     this.name = "ProdigioError";
   }
 };
-function pemToArrayBuffer(pem) {
-  const base64 = pem.replace(/-----BEGIN PUBLIC KEY-----/, "").replace(/-----END PUBLIC KEY-----/, "").replace(/\s/g, "");
-  const binary = atob(base64);
-  const buf = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) buf[i] = binary.charCodeAt(i);
-  return buf.buffer;
-}
-function base64urlToArrayBuffer(b64url) {
-  const b64 = b64url.replace(/-/g, "+").replace(/_/g, "/").padEnd(
-    b64url.length + (4 - b64url.length % 4) % 4,
-    "="
-  );
-  const binary = atob(b64);
-  const buf = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) buf[i] = binary.charCodeAt(i);
-  return buf.buffer;
-}
-async function verifyBadgeToken(token) {
-  try {
-    if (typeof crypto === "undefined" || !crypto.subtle) return null;
-    const parts = token.split(".");
-    if (parts.length !== 3) return null;
-    const [headerB64, payloadB64, sigB64] = parts;
-    const signature = base64urlToArrayBuffer(sigB64);
-    const keyData = pemToArrayBuffer(PRODIGIO_PUBLIC_KEY_PEM);
-    const publicKey = await crypto.subtle.importKey(
-      "spki",
-      keyData,
-      { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
-      false,
-      ["verify"]
-    );
-    const valid = await crypto.subtle.verify(
-      "RSASSA-PKCS1-v1_5",
-      publicKey,
-      signature,
-      new TextEncoder().encode(`${headerB64}.${payloadB64}`)
-    );
-    if (!valid) return null;
-    const claims = JSON.parse(atob(payloadB64.replace(/-/g, "+").replace(/_/g, "/")));
-    if (claims.exp < Math.floor(Date.now() / 1e3)) return null;
-    return claims;
-  } catch {
-    return null;
-  }
-}
-var BADGE_ELEMENT_ID = "prodigio-badge-widget";
-function injectBadge(_position, badgeContainer) {
-  if (typeof document === "undefined") return;
-  if (document.getElementById(BADGE_ELEMENT_ID)) return;
-  const wrapper = document.createElement("div");
-  wrapper.id = BADGE_ELEMENT_ID;
-  wrapper.style.cssText = `
-    width: 100%; display: flex; justify-content: flex-end;
-    padding: 16px 20px; box-sizing: border-box;
-  `;
-  const el = document.createElement("a");
-  el.href = "https://prodigio.io";
-  el.target = "_blank";
-  el.rel = "noopener noreferrer";
-  el.setAttribute("data-prodigio-badge", "true");
-  el.setAttribute("aria-label", "Hiring powered by Prodigio");
-  el.style.cssText = `
-    display: inline-flex; align-items: center; gap: 7px;
-    padding: 7px 14px; background: #ffffff; border: 1px solid #e5e5e5;
-    border-radius: 24px; box-shadow: 0 2px 8px rgba(0,0,0,0.08);
-    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    font-size: 12px; font-weight: 400; color: #555555;
-    text-decoration: none; cursor: pointer; transition: box-shadow 0.15s ease;
-    white-space: nowrap;
-  `;
-  el.innerHTML = `
-    <span style="color:#555555;font-weight:400;">Hiring powered by</span>
-    <span style="display:inline-flex;align-items:center;gap:5px;">
-      <svg width="16" height="16" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
-        <rect width="24" height="24" rx="6" fill="#3730A3"/>
-        <path d="M7 7h5.5a3.5 3.5 0 0 1 0 7H7V7z" fill="#fff"/>
-        <path d="M7 14h6a3 3 0 0 1 0 6H7v-6z" fill="#fff" opacity="0.6"/>
-      </svg>
-      <span style="color:#111111;font-weight:600;font-size:12px;">Prodigio</span>
-    </span>
-  `;
-  el.addEventListener("mouseenter", () => {
-    el.style.boxShadow = "0 4px 12px rgba(0,0,0,0.12)";
-  });
-  el.addEventListener("mouseleave", () => {
-    el.style.boxShadow = "0 2px 8px rgba(0,0,0,0.08)";
-  });
-  wrapper.appendChild(el);
-  findBadgeContainer(badgeContainer).appendChild(wrapper);
-}
-function removeBadge() {
-  var _a;
-  if (typeof document === "undefined") return;
-  (_a = document.getElementById(BADGE_ELEMENT_ID)) == null ? void 0 : _a.remove();
-}
-function cacheToken(apiKey, token, badgeExemptUntil, configVersion) {
-  try {
-    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify({ token, badgeExemptUntil, configVersion, cachedAt: Date.now() }));
-  } catch {
-  }
-}
-function getCachedToken(apiKey) {
-  try {
-    const raw = localStorage.getItem(`${BADGE_CACHE_KEY}_${apiKey}`);
-    return raw ? JSON.parse(raw) : null;
-  } catch {
-    return null;
-  }
-}
-var _initialized = false;
-var _routeWatcherInstalled = false;
-var _rafHandle = null;
-var _anchorObserver = null;
-var _anchorTimeout = null;
-var ANCHOR_WAIT_MS = 3e3;
-function normalizePath(p) {
-  return p.replace(/\/$/, "").split("?")[0];
-}
-function pathMatches(current, careersPath) {
-  const c = normalizePath(current);
-  const target = normalizePath(careersPath);
-  return c === target || c.startsWith(target + "/");
-}
-function cancelPending() {
-  if (_rafHandle !== null) {
-    cancelAnimationFrame(_rafHandle);
-    _rafHandle = null;
-  }
-  if (_anchorObserver !== null) {
-    _anchorObserver.disconnect();
-    _anchorObserver = null;
-  }
-  if (_anchorTimeout !== null) {
-    clearTimeout(_anchorTimeout);
-    _anchorTimeout = null;
-  }
-}
-function waitForAnchor(badgeContainer, onFound) {
-  _anchorObserver = new MutationObserver(() => {
-    if (findBadgeAnchor(badgeContainer)) {
-      cancelPending();
-      onFound();
+var _runtimePromise = null;
+function ensureRuntime() {
+  if (_runtimePromise) return _runtimePromise;
+  _runtimePromise = new Promise((resolve, reject) => {
+    var _a;
+    if (typeof window === "undefined") {
+      resolve();
+      return;
     }
-  });
-  _anchorObserver.observe(document.body, { childList: true, subtree: true });
-  _anchorTimeout = setTimeout(() => {
-    cancelPending();
-    if (process.env.NODE_ENV !== "production") {
-      console.warn("[Prodigio] Badge anchor not found within 3s. Add <div data-prodigio-badge-anchor></div> to your page.");
+    if ((_a = window.Prodigio) == null ? void 0 : _a.__cdnLoaded) {
+      resolve();
+      return;
     }
-  }, ANCHOR_WAIT_MS);
-}
-function findBadgeAnchor(badgeContainer) {
-  if (badgeContainer) {
-    const el = document.querySelector(badgeContainer);
-    if (el) return el;
-  }
-  const anchor = document.querySelector("[data-prodigio-badge-anchor]");
-  if (anchor) return anchor;
-  return null;
-}
-function findBadgeContainer(badgeContainer) {
-  const anchor = findBadgeAnchor(badgeContainer);
-  if (anchor) return anchor;
-  const selectors = ["main", '[role="main"]', "#root", "#__next", "#app"];
-  for (const sel of selectors) {
-    const el = document.querySelector(sel);
-    if (el) return el;
-  }
-  return document.body;
-}
-function installRouteWatcher() {
-  if (_routeWatcherInstalled || typeof window === "undefined") return;
-  _routeWatcherInstalled = true;
-  const orig = {
-    push: history.pushState.bind(history),
-    replace: history.replaceState.bind(history)
-  };
-  const dispatch = () => {
-    _routeChangeCallbacks.forEach((cb) => cb());
-  };
-  history.pushState = (...args) => {
-    orig.push(...args);
-    dispatch();
-  };
-  history.replaceState = (...args) => {
-    orig.replace(...args);
-    dispatch();
-  };
-  window.addEventListener("popstate", dispatch);
-  window.addEventListener("hashchange", dispatch);
+    const script = document.createElement("script");
+    script.src = CDN_URL;
+    script.async = true;
+    script.onload = () => resolve();
+    script.onerror = () => reject(new Error("[Prodigio] Failed to load SDK runtime from CDN"));
+    document.head.appendChild(script);
+  });
+  return _runtimePromise;
 }
-var _routeChangeCallbacks = [];
 var _Prodigio = class _Prodigio {
   constructor(config) {
-    // ── Jobs ──────────────────────────────────────────────────────────────────
     this.jobs = {
       list: (params) => {
         const p = {};
@@ -251,7 +68,6 @@ var _Prodigio = class _Prodigio {
       },
       get: (jobId) => this.get(`/api/jobs/${jobId}`)
     };
-    // ── Uploads ───────────────────────────────────────────────────────────────
     this.upload = {
       cv: (file, fileName) => {
         const form = new FormData();
@@ -264,7 +80,6 @@ var _Prodigio = class _Prodigio {
         return this.postForm("/api/upload/achievement", form);
       }
     };
-    // ── Applications ──────────────────────────────────────────────────────────
     this.applications = {
       submit: (params) => this.post("/api/applications", params)
     };
@@ -315,120 +130,27 @@ var _Prodigio = class _Prodigio {
     }
     return res.json();
   }
+  // ── Static methods — delegate to CDN runtime ──────────────────────────────
+  static async init(config) {
+    await ensureRuntime();
+    return window.Prodigio.init(config);
+  }
+  static destroy() {
+    var _a;
+    (_a = window.Prodigio) == null ? void 0 : _a.destroy();
+  }
   static badge(poweredBy) {
+    var _a;
+    if ((_a = window.Prodigio) == null ? void 0 : _a.badge) {
+      return window.Prodigio.badge(poweredBy);
+    }
     const pb = poweredBy != null ? poweredBy : _Prodigio.POWERED_BY;
     return { href: pb.url, "data-prodigio-badge": "true", target: "_blank", rel: "noopener noreferrer", text: pb.text };
   }
   static meta() {
     return { name: "prodigio-badge", content: "true" };
   }
-  // ── init() ────────────────────────────────────────────────────────────────
-  static async init(config) {
-    var _a;
-    if (typeof window === "undefined") return;
-    if (_initialized) return;
-    _initialized = true;
-    if (process.env.NODE_ENV !== "production" && !document.querySelector('meta[name="prodigio-badge"]')) {
-      console.warn('[Prodigio] Missing <meta name="prodigio-badge" content="true"> in your page <head>. This is required for compliance detection. See docs.prodigio.io');
-    }
-    const { key, badgeToken, baseUrl = DEFAULT_BASE_URL, badge: badgeConfig, badgeContainer } = config;
-    const position = (_a = badgeConfig == null ? void 0 : badgeConfig.position) != null ? _a : "bottom-right";
-    const cached = getCachedToken(key);
-    const [initClaims, cachedClaims] = await Promise.all([
-      badgeToken ? verifyBadgeToken(badgeToken) : Promise.resolve(null),
-      cached ? verifyBadgeToken(cached.token) : Promise.resolve(null)
-    ]);
-    let bestToken = null;
-    if (initClaims && cachedClaims) {
-      bestToken = new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil) ? initClaims : cachedClaims;
-    } else {
-      bestToken = initClaims != null ? initClaims : cachedClaims;
-    }
-    const hostname = window.location.hostname;
-    const domainAllowed = bestToken ? bestToken.allowedDomains.length === 0 || bestToken.allowedDomains.includes(hostname) : true;
-    const isExempt = bestToken !== null && !bestToken.badgeRequired && domainAllowed;
-    let configState = { status: "loading" };
-    function reconcile() {
-      cancelPending();
-      if (isExempt) {
-        removeBadge();
-        return;
-      }
-      if (configState.status === "loading" || configState.status === "error") {
-        return;
-      }
-      const { careersPath } = configState;
-      if (!careersPath) {
-        if (bestToken && cached) {
-          const cacheAge = Date.now() - cached.cachedAt;
-          if (cacheAge < GRACE_PERIOD_MS) {
-            removeBadge();
-            return;
-          }
-        }
-        if (!document.getElementById(BADGE_ELEMENT_ID)) {
-          injectBadge(position, badgeContainer);
-        }
-        return;
-      }
-      const routeMatches = pathMatches(window.location.pathname, careersPath);
-      if (!routeMatches) {
-        removeBadge();
-        return;
-      }
-      queueMicrotask(() => {
-        _rafHandle = requestAnimationFrame(() => {
-          _rafHandle = null;
-          const anchor = findBadgeAnchor(badgeContainer);
-          if (anchor) {
-            if (!document.getElementById(BADGE_ELEMENT_ID)) injectBadge(position, badgeContainer);
-            return;
-          }
-          waitForAnchor(badgeContainer, () => {
-            if (!document.getElementById(BADGE_ELEMENT_ID)) injectBadge(position, badgeContainer);
-          });
-        });
-      });
-    }
-    reconcile();
-    installRouteWatcher();
-    _routeChangeCallbacks.push(reconcile);
-    setTimeout(async () => {
-      var _a2, _b, _c;
-      try {
-        const res = await fetch(`${baseUrl}/api/sdk/config?key=${encodeURIComponent(key)}`);
-        if (!res.ok) return;
-        const data = await res.json();
-        configState = {
-          status: "loaded",
-          careersPath: (_a2 = data.careersPath) != null ? _a2 : null,
-          badgeRequired: data.badgeRequired
-        };
-        if (data.badgeRequired) {
-          reconcile();
-          return;
-        }
-        if (data.badgeToken) {
-          const refreshedClaims = await verifyBadgeToken(data.badgeToken);
-          if (refreshedClaims && !refreshedClaims.badgeRequired) {
-            cacheToken(key, data.badgeToken, (_b = data.badgeExemptUntil) != null ? _b : "", (_c = data.configVersion) != null ? _c : 1);
-            removeBadge();
-            return;
-          }
-        }
-        reconcile();
-      } catch {
-        configState = { status: "error" };
-      }
-    }, 0);
-  }
-  static destroy() {
-    cancelPending();
-    removeBadge();
-    _initialized = false;
-  }
 };
-// ── Badge static helpers ──────────────────────────────────────────────────
 _Prodigio.POWERED_BY = {
   text: "Hiring powered by Prodigio",
   url: "https://prodigio.io"

package/dist/index.mjs

@@ -1,16 +1,6 @@
 // src/index.ts
 var DEFAULT_BASE_URL = "https://hire.prodigio.io";
-var BADGE_CACHE_KEY = "prodigio_badge_token";
-var GRACE_PERIOD_MS = 5 * 60 * 1e3;
-var PRODIGIO_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy85BNWaJVQQA/AFsz612
-I+3K94s6P7r9zoSUvxDhn2J1INyuc27EIcMOHHPDxChrzJGv6bozGbpexYSIIgQd
-ge9Ge9P/J+THQMdUmAbidfp/mR1i0vISaaBvKfFQfIGkuXpzbQB8eEV1s0jACMSd
-qRSKeJEKSKPf3OkWVhaWi4KxT9H14W6lJMBrE0ZaGbAog2HmG69f5+5JjvxU6TWR
-BojS5CYGvSvAIQGnsWm3Rz/HfZoPg1VRMRkGYCbLIVyV3XjLPo/VqBGuvjZSRTk+
-HW72H1ZvBsBnNSEKkOSp5r43Du3x2KUQdYyV7p0iIwMRnMq2enBEEb2qrrj7huln
-BQIDAQAB
------END PUBLIC KEY-----`;
+var CDN_URL = "https://cdn.prodigio.io/sdk/v2/sdk.js";
 var ProdigioError = class extends Error {
   constructor(message, status, code) {
     super(message);
@@ -19,203 +9,30 @@ var ProdigioError = class extends Error {
     this.name = "ProdigioError";
   }
 };
-function pemToArrayBuffer(pem) {
-  const base64 = pem.replace(/-----BEGIN PUBLIC KEY-----/, "").replace(/-----END PUBLIC KEY-----/, "").replace(/\s/g, "");
-  const binary = atob(base64);
-  const buf = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) buf[i] = binary.charCodeAt(i);
-  return buf.buffer;
-}
-function base64urlToArrayBuffer(b64url) {
-  const b64 = b64url.replace(/-/g, "+").replace(/_/g, "/").padEnd(
-    b64url.length + (4 - b64url.length % 4) % 4,
-    "="
-  );
-  const binary = atob(b64);
-  const buf = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) buf[i] = binary.charCodeAt(i);
-  return buf.buffer;
-}
-async function verifyBadgeToken(token) {
-  try {
-    if (typeof crypto === "undefined" || !crypto.subtle) return null;
-    const parts = token.split(".");
-    if (parts.length !== 3) return null;
-    const [headerB64, payloadB64, sigB64] = parts;
-    const signature = base64urlToArrayBuffer(sigB64);
-    const keyData = pemToArrayBuffer(PRODIGIO_PUBLIC_KEY_PEM);
-    const publicKey = await crypto.subtle.importKey(
-      "spki",
-      keyData,
-      { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
-      false,
-      ["verify"]
-    );
-    const valid = await crypto.subtle.verify(
-      "RSASSA-PKCS1-v1_5",
-      publicKey,
-      signature,
-      new TextEncoder().encode(`${headerB64}.${payloadB64}`)
-    );
-    if (!valid) return null;
-    const claims = JSON.parse(atob(payloadB64.replace(/-/g, "+").replace(/_/g, "/")));
-    if (claims.exp < Math.floor(Date.now() / 1e3)) return null;
-    return claims;
-  } catch {
-    return null;
-  }
-}
-var BADGE_ELEMENT_ID = "prodigio-badge-widget";
-function injectBadge(_position, badgeContainer) {
-  if (typeof document === "undefined") return;
-  if (document.getElementById(BADGE_ELEMENT_ID)) return;
-  const wrapper = document.createElement("div");
-  wrapper.id = BADGE_ELEMENT_ID;
-  wrapper.style.cssText = `
-    width: 100%; display: flex; justify-content: flex-end;
-    padding: 16px 20px; box-sizing: border-box;
-  `;
-  const el = document.createElement("a");
-  el.href = "https://prodigio.io";
-  el.target = "_blank";
-  el.rel = "noopener noreferrer";
-  el.setAttribute("data-prodigio-badge", "true");
-  el.setAttribute("aria-label", "Hiring powered by Prodigio");
-  el.style.cssText = `
-    display: inline-flex; align-items: center; gap: 7px;
-    padding: 7px 14px; background: #ffffff; border: 1px solid #e5e5e5;
-    border-radius: 24px; box-shadow: 0 2px 8px rgba(0,0,0,0.08);
-    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    font-size: 12px; font-weight: 400; color: #555555;
-    text-decoration: none; cursor: pointer; transition: box-shadow 0.15s ease;
-    white-space: nowrap;
-  `;
-  el.innerHTML = `
-    <span style="color:#555555;font-weight:400;">Hiring powered by</span>
-    <span style="display:inline-flex;align-items:center;gap:5px;">
-      <svg width="16" height="16" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
-        <rect width="24" height="24" rx="6" fill="#3730A3"/>
-        <path d="M7 7h5.5a3.5 3.5 0 0 1 0 7H7V7z" fill="#fff"/>
-        <path d="M7 14h6a3 3 0 0 1 0 6H7v-6z" fill="#fff" opacity="0.6"/>
-      </svg>
-      <span style="color:#111111;font-weight:600;font-size:12px;">Prodigio</span>
-    </span>
-  `;
-  el.addEventListener("mouseenter", () => {
-    el.style.boxShadow = "0 4px 12px rgba(0,0,0,0.12)";
-  });
-  el.addEventListener("mouseleave", () => {
-    el.style.boxShadow = "0 2px 8px rgba(0,0,0,0.08)";
-  });
-  wrapper.appendChild(el);
-  findBadgeContainer(badgeContainer).appendChild(wrapper);
-}
-function removeBadge() {
-  var _a;
-  if (typeof document === "undefined") return;
-  (_a = document.getElementById(BADGE_ELEMENT_ID)) == null ? void 0 : _a.remove();
-}
-function cacheToken(apiKey, token, badgeExemptUntil, configVersion) {
-  try {
-    localStorage.setItem(`${BADGE_CACHE_KEY}_${apiKey}`, JSON.stringify({ token, badgeExemptUntil, configVersion, cachedAt: Date.now() }));
-  } catch {
-  }
-}
-function getCachedToken(apiKey) {
-  try {
-    const raw = localStorage.getItem(`${BADGE_CACHE_KEY}_${apiKey}`);
-    return raw ? JSON.parse(raw) : null;
-  } catch {
-    return null;
-  }
-}
-var _initialized = false;
-var _routeWatcherInstalled = false;
-var _rafHandle = null;
-var _anchorObserver = null;
-var _anchorTimeout = null;
-var ANCHOR_WAIT_MS = 3e3;
-function normalizePath(p) {
-  return p.replace(/\/$/, "").split("?")[0];
-}
-function pathMatches(current, careersPath) {
-  const c = normalizePath(current);
-  const target = normalizePath(careersPath);
-  return c === target || c.startsWith(target + "/");
-}
-function cancelPending() {
-  if (_rafHandle !== null) {
-    cancelAnimationFrame(_rafHandle);
-    _rafHandle = null;
-  }
-  if (_anchorObserver !== null) {
-    _anchorObserver.disconnect();
-    _anchorObserver = null;
-  }
-  if (_anchorTimeout !== null) {
-    clearTimeout(_anchorTimeout);
-    _anchorTimeout = null;
-  }
-}
-function waitForAnchor(badgeContainer, onFound) {
-  _anchorObserver = new MutationObserver(() => {
-    if (findBadgeAnchor(badgeContainer)) {
-      cancelPending();
-      onFound();
+var _runtimePromise = null;
+function ensureRuntime() {
+  if (_runtimePromise) return _runtimePromise;
+  _runtimePromise = new Promise((resolve, reject) => {
+    var _a;
+    if (typeof window === "undefined") {
+      resolve();
+      return;
     }
-  });
-  _anchorObserver.observe(document.body, { childList: true, subtree: true });
-  _anchorTimeout = setTimeout(() => {
-    cancelPending();
-    if (process.env.NODE_ENV !== "production") {
-      console.warn("[Prodigio] Badge anchor not found within 3s. Add <div data-prodigio-badge-anchor></div> to your page.");
+    if ((_a = window.Prodigio) == null ? void 0 : _a.__cdnLoaded) {
+      resolve();
+      return;
     }
-  }, ANCHOR_WAIT_MS);
-}
-function findBadgeAnchor(badgeContainer) {
-  if (badgeContainer) {
-    const el = document.querySelector(badgeContainer);
-    if (el) return el;
-  }
-  const anchor = document.querySelector("[data-prodigio-badge-anchor]");
-  if (anchor) return anchor;
-  return null;
-}
-function findBadgeContainer(badgeContainer) {
-  const anchor = findBadgeAnchor(badgeContainer);
-  if (anchor) return anchor;
-  const selectors = ["main", '[role="main"]', "#root", "#__next", "#app"];
-  for (const sel of selectors) {
-    const el = document.querySelector(sel);
-    if (el) return el;
-  }
-  return document.body;
-}
-function installRouteWatcher() {
-  if (_routeWatcherInstalled || typeof window === "undefined") return;
-  _routeWatcherInstalled = true;
-  const orig = {
-    push: history.pushState.bind(history),
-    replace: history.replaceState.bind(history)
-  };
-  const dispatch = () => {
-    _routeChangeCallbacks.forEach((cb) => cb());
-  };
-  history.pushState = (...args) => {
-    orig.push(...args);
-    dispatch();
-  };
-  history.replaceState = (...args) => {
-    orig.replace(...args);
-    dispatch();
-  };
-  window.addEventListener("popstate", dispatch);
-  window.addEventListener("hashchange", dispatch);
+    const script = document.createElement("script");
+    script.src = CDN_URL;
+    script.async = true;
+    script.onload = () => resolve();
+    script.onerror = () => reject(new Error("[Prodigio] Failed to load SDK runtime from CDN"));
+    document.head.appendChild(script);
+  });
+  return _runtimePromise;
 }
-var _routeChangeCallbacks = [];
 var _Prodigio = class _Prodigio {
   constructor(config) {
-    // ── Jobs ──────────────────────────────────────────────────────────────────
     this.jobs = {
       list: (params) => {
         const p = {};
@@ -225,7 +42,6 @@ var _Prodigio = class _Prodigio {
       },
       get: (jobId) => this.get(`/api/jobs/${jobId}`)
     };
-    // ── Uploads ───────────────────────────────────────────────────────────────
     this.upload = {
       cv: (file, fileName) => {
         const form = new FormData();
@@ -238,7 +54,6 @@ var _Prodigio = class _Prodigio {
         return this.postForm("/api/upload/achievement", form);
       }
     };
-    // ── Applications ──────────────────────────────────────────────────────────
     this.applications = {
       submit: (params) => this.post("/api/applications", params)
     };
@@ -289,120 +104,27 @@ var _Prodigio = class _Prodigio {
     }
     return res.json();
   }
+  // ── Static methods — delegate to CDN runtime ──────────────────────────────
+  static async init(config) {
+    await ensureRuntime();
+    return window.Prodigio.init(config);
+  }
+  static destroy() {
+    var _a;
+    (_a = window.Prodigio) == null ? void 0 : _a.destroy();
+  }
   static badge(poweredBy) {
+    var _a;
+    if ((_a = window.Prodigio) == null ? void 0 : _a.badge) {
+      return window.Prodigio.badge(poweredBy);
+    }
     const pb = poweredBy != null ? poweredBy : _Prodigio.POWERED_BY;
     return { href: pb.url, "data-prodigio-badge": "true", target: "_blank", rel: "noopener noreferrer", text: pb.text };
   }
   static meta() {
     return { name: "prodigio-badge", content: "true" };
   }
-  // ── init() ────────────────────────────────────────────────────────────────
-  static async init(config) {
-    var _a;
-    if (typeof window === "undefined") return;
-    if (_initialized) return;
-    _initialized = true;
-    if (process.env.NODE_ENV !== "production" && !document.querySelector('meta[name="prodigio-badge"]')) {
-      console.warn('[Prodigio] Missing <meta name="prodigio-badge" content="true"> in your page <head>. This is required for compliance detection. See docs.prodigio.io');
-    }
-    const { key, badgeToken, baseUrl = DEFAULT_BASE_URL, badge: badgeConfig, badgeContainer } = config;
-    const position = (_a = badgeConfig == null ? void 0 : badgeConfig.position) != null ? _a : "bottom-right";
-    const cached = getCachedToken(key);
-    const [initClaims, cachedClaims] = await Promise.all([
-      badgeToken ? verifyBadgeToken(badgeToken) : Promise.resolve(null),
-      cached ? verifyBadgeToken(cached.token) : Promise.resolve(null)
-    ]);
-    let bestToken = null;
-    if (initClaims && cachedClaims) {
-      bestToken = new Date(initClaims.badgeExemptUntil) >= new Date(cachedClaims.badgeExemptUntil) ? initClaims : cachedClaims;
-    } else {
-      bestToken = initClaims != null ? initClaims : cachedClaims;
-    }
-    const hostname = window.location.hostname;
-    const domainAllowed = bestToken ? bestToken.allowedDomains.length === 0 || bestToken.allowedDomains.includes(hostname) : true;
-    const isExempt = bestToken !== null && !bestToken.badgeRequired && domainAllowed;
-    let configState = { status: "loading" };
-    function reconcile() {
-      cancelPending();
-      if (isExempt) {
-        removeBadge();
-        return;
-      }
-      if (configState.status === "loading" || configState.status === "error") {
-        return;
-      }
-      const { careersPath } = configState;
-      if (!careersPath) {
-        if (bestToken && cached) {
-          const cacheAge = Date.now() - cached.cachedAt;
-          if (cacheAge < GRACE_PERIOD_MS) {
-            removeBadge();
-            return;
-          }
-        }
-        if (!document.getElementById(BADGE_ELEMENT_ID)) {
-          injectBadge(position, badgeContainer);
-        }
-        return;
-      }
-      const routeMatches = pathMatches(window.location.pathname, careersPath);
-      if (!routeMatches) {
-        removeBadge();
-        return;
-      }
-      queueMicrotask(() => {
-        _rafHandle = requestAnimationFrame(() => {
-          _rafHandle = null;
-          const anchor = findBadgeAnchor(badgeContainer);
-          if (anchor) {
-            if (!document.getElementById(BADGE_ELEMENT_ID)) injectBadge(position, badgeContainer);
-            return;
-          }
-          waitForAnchor(badgeContainer, () => {
-            if (!document.getElementById(BADGE_ELEMENT_ID)) injectBadge(position, badgeContainer);
-          });
-        });
-      });
-    }
-    reconcile();
-    installRouteWatcher();
-    _routeChangeCallbacks.push(reconcile);
-    setTimeout(async () => {
-      var _a2, _b, _c;
-      try {
-        const res = await fetch(`${baseUrl}/api/sdk/config?key=${encodeURIComponent(key)}`);
-        if (!res.ok) return;
-        const data = await res.json();
-        configState = {
-          status: "loaded",
-          careersPath: (_a2 = data.careersPath) != null ? _a2 : null,
-          badgeRequired: data.badgeRequired
-        };
-        if (data.badgeRequired) {
-          reconcile();
-          return;
-        }
-        if (data.badgeToken) {
-          const refreshedClaims = await verifyBadgeToken(data.badgeToken);
-          if (refreshedClaims && !refreshedClaims.badgeRequired) {
-            cacheToken(key, data.badgeToken, (_b = data.badgeExemptUntil) != null ? _b : "", (_c = data.configVersion) != null ? _c : 1);
-            removeBadge();
-            return;
-          }
-        }
-        reconcile();
-      } catch {
-        configState = { status: "error" };
-      }
-    }, 0);
-  }
-  static destroy() {
-    cancelPending();
-    removeBadge();
-    _initialized = false;
-  }
 };
-// ── Badge static helpers ──────────────────────────────────────────────────
 _Prodigio.POWERED_BY = {
   text: "Hiring powered by Prodigio",
   url: "https://prodigio.io"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prodigio-io/sdk",
-  "version": "2.1.8",
+  "version": "3.0.1",
   "description": "Official JavaScript SDK for the Prodigio hiring API",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -17,7 +17,9 @@
   ],
   "scripts": {
     "build": "tsup src/index.ts --format esm,cjs --dts --clean",
-    "dev": "tsup src/index.ts --format esm,cjs --dts --watch"
+    "build:cdn": "tsup src/cdn.ts --format iife --no-dts --minify --out-dir dist-cdn --clean",
+    "dev": "tsup src/index.ts --format esm,cjs --dts --watch",
+    "publish:cdn": "node scripts/publish-cdn.js"
   },
   "keywords": [
     "prodigio",