@trustsig/react 1.2.8 → 2.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 TrustSig
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,6 +1,6 @@
 # @trustsig/react
 
-React Context Provider and hooks for TrustSig bot protection.
+React Context Provider and hooks for TrustSig bot protection. React 18 or 19.
 
 ## Installation
 
@@ -19,10 +19,7 @@ import { TrustSigProvider } from '@trustsig/react';
 
 export default function RootLayout({ children }) {
   return (
-    <TrustSigProvider 
-      siteKey="pk_live_..." 
-      autoScan={true}
-    >
+    <TrustSigProvider siteKey="pk_live_..." autoScan>
       {children}
     </TrustSigProvider>
   );
@@ -37,22 +34,20 @@ Use `useTrustSig` to access the analysis methods.
 import { useTrustSig } from '@trustsig/react';
 
 export function ActionForm() {
-  const { getResponse, scan, isLoaded } = useTrustSig();
+  const { getResponse, isLoaded, error } = useTrustSig();
 
   const handleSubmit = async (e) => {
     e.preventDefault();
-    
-    // Get the current analysis response
-    const response = await getResponse();
-    
+    const response = await getResponse(); // { request_id, token } | null
+
     if (response?.token) {
       await fetch('/api/secure-action', {
         method: 'POST',
-        headers: { 
+        headers: {
           'Content-Type': 'application/json',
-          'X-TrustSig-Response': response.token
+          'X-TrustSig-Response': response.token,
         },
-        body: JSON.stringify({ data: "..." })
+        body: JSON.stringify({ data: '...' }),
       });
     }
   };
@@ -65,12 +60,22 @@ export function ActionForm() {
 }
 ```
 
+`getResponse()` resolves to `{ request_id, token }` or `null` (script failed
+to load, timed out, or no verdict yet — inspect `error`). The server is the
+trust boundary: always verify the token with `@trustsig/server`.
+
 ## API
 
 | Export | Type | Description |
 | --- | --- | --- |
-| `isLoaded` | `boolean` | True when the TrustSig script has loaded. |
-| `getResponse()` | `Promise<TrustSigResponse>` | Returns the current analysis result. |
-| `scan()` | `Promise<TrustSigResponse>` | Manually triggers a new analysis scan. |
-| `setCustomData(data)` | `void` | Updates custom metadata for subsequent scans. |
-| `error` | `Error \| null` | Error object if script loading failed. |
+| `isLoaded` | `boolean` | True once the TrustSig script has loaded. |
+| `error` | `Error \| null` | Set if script loading failed or timed out (`SCRIPT_LOAD_FAIL` / `SCRIPT_LOAD_TIMEOUT`). |
+| `getResponse()` | `Promise<TrustSigResponse \| null>` | Current analysis result. |
+| `scan()` | `Promise<TrustSigResponse \| null>` | Manually trigger a new analysis scan. |
+| `setCustomData(data)` | `void` | Update custom metadata for subsequent scans. |
+
+### Provider props
+
+`siteKey` (required), `scriptUrl`, `interceptRequests`, `autoScan`, `debug`,
+`nonce`, `env`, `customData`. Changing `customData` updates the running script
+in place — it does **not** re-inject the script or reset state.

package/dist/index.cjs

@@ -42,6 +42,17 @@ module.exports = __toCommonJS(index_exports);
 var import_react = __toESM(require("react"), 1);
 var import_client = require("@trustsig/client");
 var TrustSigContext = (0, import_react.createContext)(null);
+function stableStringify(value) {
+  return JSON.stringify(value, (_key, val) => {
+    if (val && typeof val === "object" && !Array.isArray(val)) {
+      return Object.keys(val).sort().reduce((acc, k) => {
+        acc[k] = val[k];
+        return acc;
+      }, {});
+    }
+    return val;
+  });
+}
 var TrustSigProvider = ({
   siteKey,
   scriptUrl,
@@ -55,6 +66,7 @@ var TrustSigProvider = ({
 }) => {
   const [isLoaded, setIsLoaded] = (0, import_react.useState)(false);
   const [error, setError] = (0, import_react.useState)(null);
+  const initialCustomData = (0, import_react.useRef)(customData).current;
   const client = (0, import_react.useMemo)(
     () => new import_client.TrustSigClient({
       siteKey,
@@ -64,25 +76,27 @@ var TrustSigProvider = ({
       debug,
       nonce,
       env,
-      customData
+      customData: initialCustomData
     }),
-    [siteKey, scriptUrl, interceptRequests, autoScan, debug, nonce, env, JSON.stringify(customData)]
+    [siteKey, scriptUrl, interceptRequests, autoScan, debug, nonce, env, initialCustomData]
   );
   (0, import_react.useEffect)(() => {
     let mounted = true;
     client.load().then(() => {
-      if (mounted) {
-        setIsLoaded(true);
-      }
+      if (mounted) setIsLoaded(true);
     }).catch((err) => {
-      if (mounted) {
-        setError(err);
-      }
+      if (mounted) setError(err);
     });
     return () => {
       mounted = false;
     };
   }, [client]);
+  const customDataKey = customData ? stableStringify(customData) : "";
+  (0, import_react.useEffect)(() => {
+    if (customData) {
+      client.setCustomData(customData);
+    }
+  }, [client, customDataKey]);
   const value = (0, import_react.useMemo)(
     () => ({
       isLoaded,
@@ -98,7 +112,7 @@ var TrustSigProvider = ({
 var useTrustSigContext = () => {
   const context = (0, import_react.useContext)(TrustSigContext);
   if (!context) {
-    throw new Error("USE_TRUSTSIG_CONTEXT_ERROR");
+    throw new Error("useTrustSig must be used within a <TrustSigProvider>");
   }
   return context;
 };

package/dist/index.d.cts

@@ -6,7 +6,7 @@ interface TrustSigContextValue {
     error: Error | null;
     getResponse: () => Promise<TrustSigResponse | null>;
     scan: () => Promise<TrustSigResponse | null>;
-    setCustomData: (data: Record<string, any>) => void;
+    setCustomData: (data: Record<string, unknown>) => void;
 }
 interface TrustSigProviderProps {
     siteKey: string;
@@ -16,7 +16,7 @@ interface TrustSigProviderProps {
     debug?: boolean;
     nonce?: string;
     env?: TrustSigEnv;
-    customData?: Record<string, any>;
+    customData?: Record<string, unknown>;
     children: React.ReactNode;
 }
 declare const TrustSigProvider: React.FC<TrustSigProviderProps>;

package/dist/index.d.ts

@@ -6,7 +6,7 @@ interface TrustSigContextValue {
     error: Error | null;
     getResponse: () => Promise<TrustSigResponse | null>;
     scan: () => Promise<TrustSigResponse | null>;
-    setCustomData: (data: Record<string, any>) => void;
+    setCustomData: (data: Record<string, unknown>) => void;
 }
 interface TrustSigProviderProps {
     siteKey: string;
@@ -16,7 +16,7 @@ interface TrustSigProviderProps {
     debug?: boolean;
     nonce?: string;
     env?: TrustSigEnv;
-    customData?: Record<string, any>;
+    customData?: Record<string, unknown>;
     children: React.ReactNode;
 }
 declare const TrustSigProvider: React.FC<TrustSigProviderProps>;

package/dist/index.js

@@ -2,9 +2,20 @@
 "use client";
 
 // src/TrustSigProvider.tsx
-import React, { createContext, useContext, useEffect, useState, useMemo } from "react";
+import React, { createContext, useContext, useEffect, useRef, useState, useMemo } from "react";
 import { TrustSigClient } from "@trustsig/client";
 var TrustSigContext = createContext(null);
+function stableStringify(value) {
+  return JSON.stringify(value, (_key, val) => {
+    if (val && typeof val === "object" && !Array.isArray(val)) {
+      return Object.keys(val).sort().reduce((acc, k) => {
+        acc[k] = val[k];
+        return acc;
+      }, {});
+    }
+    return val;
+  });
+}
 var TrustSigProvider = ({
   siteKey,
   scriptUrl,
@@ -18,6 +29,7 @@ var TrustSigProvider = ({
 }) => {
   const [isLoaded, setIsLoaded] = useState(false);
   const [error, setError] = useState(null);
+  const initialCustomData = useRef(customData).current;
   const client = useMemo(
     () => new TrustSigClient({
       siteKey,
@@ -27,25 +39,27 @@ var TrustSigProvider = ({
       debug,
       nonce,
       env,
-      customData
+      customData: initialCustomData
     }),
-    [siteKey, scriptUrl, interceptRequests, autoScan, debug, nonce, env, JSON.stringify(customData)]
+    [siteKey, scriptUrl, interceptRequests, autoScan, debug, nonce, env, initialCustomData]
   );
   useEffect(() => {
     let mounted = true;
     client.load().then(() => {
-      if (mounted) {
-        setIsLoaded(true);
-      }
+      if (mounted) setIsLoaded(true);
     }).catch((err) => {
-      if (mounted) {
-        setError(err);
-      }
+      if (mounted) setError(err);
     });
     return () => {
       mounted = false;
     };
   }, [client]);
+  const customDataKey = customData ? stableStringify(customData) : "";
+  useEffect(() => {
+    if (customData) {
+      client.setCustomData(customData);
+    }
+  }, [client, customDataKey]);
   const value = useMemo(
     () => ({
       isLoaded,
@@ -61,7 +75,7 @@ var TrustSigProvider = ({
 var useTrustSigContext = () => {
   const context = useContext(TrustSigContext);
   if (!context) {
-    throw new Error("USE_TRUSTSIG_CONTEXT_ERROR");
+    throw new Error("useTrustSig must be used within a <TrustSigProvider>");
   }
   return context;
 };

package/package.json

@@ -1,10 +1,12 @@
 {
   "name": "@trustsig/react",
-  "version": "1.2.8",
+  "version": "2.1.0",
+  "description": "React Context Provider and hooks for TrustSig bot protection",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "sideEffects": false,
   "files": [
     "dist"
   ],
@@ -17,14 +19,40 @@
     "./package.json": "./package.json"
   },
   "scripts": {
-    "build": "tsup"
+    "build": "tsup",
+    "prepublishOnly": "tsup"
+  },
+  "keywords": [
+    "trustsig",
+    "security",
+    "bot-protection",
+    "react",
+    "nextjs",
+    "hooks"
+  ],
+  "author": "TrustSig (https://trustsig.eu)",
+  "license": "MIT",
+  "homepage": "https://trustsig.eu",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/trustsig-eu/trustsigjs.git",
+    "directory": "packages/react"
+  },
+  "bugs": {
+    "url": "https://github.com/trustsig-eu/trustsigjs/issues"
+  },
+  "engines": {
+    "node": ">=18"
   },
   "dependencies": {
-    "@trustsig/client": "^1.2.8",
-    "@trustsig/types": "^1.2.8"
+    "@trustsig/client": "^2.1.0",
+    "@trustsig/types": "^2.1.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
   }
 }