@trustsig/client 1.0.0

package/README.md

@@ -0,0 +1,38 @@
+# @trustsig/client
+
+Vanilla JavaScript client for TrustSig bot protection. Handles dynamic script injection and token retrieval.
+
+## Installation
+
+```bash
+npm install @trustsig/client
+```
+
+## Usage
+
+```javascript
+import { TrustSigClient } from '@trustsig/client';
+
+const client = new TrustSigClient({
+  siteKey: "YOUR_PUBLIC_KEY"
+});
+
+await client.load();
+const token = await client.getResponse();
+
+await fetch('/api/action', {
+  method: 'POST',
+  headers: { 'X-TrustSig-Response': token || '' }
+});
+```
+
+## Options
+
+| Option | Type | Required | Description |
+| --- | --- | --- | --- |
+| `siteKey` | string | Yes | Your public site key. |
+| `endpoint` | string | No | Override edge URL. |
+| `wasmUrl` | string | No | Override wasm binary URL. |
+| `interceptRequests`| boolean | No | Auto-inject headers on fetch/XHR. |
+| `debug` | boolean | No | Enable verbose console logs. |
+| `nonce` | string | No | CSP nonce for script injection. |

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@trustsig/client",
+  "version": "1.0.0",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "scripts": { "build": "tsup" },
+  "dependencies": { "@trustsig/types": "*" }
+}

package/src/index.ts

@@ -0,0 +1,69 @@
+import "@trustsig/types";
+
+export interface ClientOptions {
+  siteKey: string;
+  endpoint?: string;
+  wasmUrl?: string;
+  interceptRequests?: boolean;
+  debug?: boolean;
+  nonce?: string;
+}
+
+export class TrustSigClient {
+  private options: ClientOptions;
+  private scriptPromise: Promise<void> | null = null;
+
+  constructor(options: ClientOptions) {
+    if (!options.siteKey) {
+      throw new Error("SITE_KEY_REQUIRED");
+    }
+    this.options = options;
+  }
+
+  public async load(): Promise<void> {
+    if (this.scriptPromise) {
+      return this.scriptPromise;
+    }
+    if (typeof window === 'undefined') {
+      return Promise.resolve();
+    }
+    if (window.TrustSig && typeof window.TrustSig.getResponse === 'function') {
+      this.scriptPromise = Promise.resolve();
+      return this.scriptPromise;
+    }
+
+    this.scriptPromise = new Promise((resolve, reject) => {
+      const script = document.createElement('script');
+      script.src = 'https://sdk.trustsig.com/trustsig.js';
+      script.setAttribute('data-site-key', this.options.siteKey);
+      
+      if (this.options.endpoint) script.setAttribute('data-endpoint', this.options.endpoint);
+      if (this.options.wasmUrl) script.setAttribute('data-wasm-url', this.options.wasmUrl);
+      if (this.options.interceptRequests) script.setAttribute('data-intercept-requests', 'true');
+      if (this.options.debug) script.setAttribute('data-debug', 'true');
+      if (this.options.nonce) script.setAttribute('nonce', this.options.nonce);
+
+      script.onload = () => resolve();
+      script.onerror = () => {
+        this.scriptPromise = null;
+        reject(new Error("SCRIPT_LOAD_FAIL"));
+      };
+
+      document.head.appendChild(script);
+    });
+
+    return this.scriptPromise;
+  }
+
+  public async getResponse(): Promise<string | null> {
+    await this.load();
+    if (typeof window !== 'undefined' && window.TrustSig) {
+      try {
+        return await window.TrustSig.getResponse();
+      } catch (e) {
+        return null;
+      }
+    }
+    return null;
+  }
+}

package/tests/client.test.ts

@@ -0,0 +1,44 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { TrustSigClient } from '../src/index';
+
+describe('TrustSig Client', () => {
+  beforeEach(() => {
+    document.head.innerHTML = '';
+    delete (window as any).TrustSig;
+    // Prevent happy-dom from actually trying to download the remote script
+    vi.spyOn(document.head, 'appendChild').mockImplementation((node) => {
+      if (node instanceof HTMLScriptElement) {
+        // Trigger onload manually
+        setTimeout(() => {
+          if (node.onload) node.onload(new Event('load'));
+        }, 10);
+      }
+      return node;
+    });
+  });
+
+  it('requires siteKey', () => {
+    expect(() => new TrustSigClient({ siteKey: '' })).toThrow('SITE_KEY_REQUIRED');
+  });
+
+  it('injects script tag', async () => {
+    const client = new TrustSigClient({ siteKey: 'TEST_KEY' });
+    const loadPromise = client.load();
+    const appendCall = (document.head.appendChild as any).mock.calls[0][0];
+    
+    expect(appendCall).not.toBeNull();
+    expect(appendCall.getAttribute('data-site-key')).toBe('TEST_KEY');
+    expect(appendCall.src).toBe('https://sdk.trustsig.com/trustsig.js');
+    await loadPromise;
+  });
+
+  it('returns response from window when loaded', async () => {
+    const client = new TrustSigClient({ siteKey: 'TEST_KEY' });
+    (window as any).TrustSig = {
+      getResponse: vi.fn().mockResolvedValue('test-token')
+    };
+    
+    const token = await client.getResponse();
+    expect(token).toBe('test-token');
+  });
+});

package/tsup.config.ts

@@ -0,0 +1,2 @@
+import { defineConfig } from 'tsup';
+export default defineConfig({ entry: ['src/index.ts'], format: ['cjs', 'esm'], dts: true, clean: true });