@trustsig/sdk 1.0.0

package/README.md

@@ -0,0 +1,49 @@
+# TrustSig Enterprise SDK
+
+TrustSig Node.js and Edge SDK for integrating TrustSig token verification in your backend services.
+
+## Features
+
+- Universal Compatibility (Node.js, Next.js Edge, Cloudflare Workers, Deno)
+- Zero-Dependency Core Cryptography (via `@noble/ciphers`)
+- Local Decryption (Zero Latency)
+- Remote API Verification
+
+## Installation
+
+```bash
+npm install @trustsig/sdk
+```
+
+## Usage
+
+```typescript
+import { TrustSig } from '@trustsig/sdk';
+
+const trustsig = new TrustSig({
+  secretKey: process.env.TRUSTSIG_SECRET_KEY
+});
+
+const token = req.body['trustsig-response'];
+
+const resultRemote = await trustsig.verifyRemote(token);
+if (resultRemote.action === 'BLOCK') {
+  throw new Error("Access Denied");
+}
+
+const resultLocal = trustsig.verifyLocal(token);
+if (resultLocal.action === 'BLOCK') {
+  throw new Error("Access Denied");
+}
+```
+
+## Verification Modes
+
+### Remote Verification (`verifyRemote`)
+Sends the token to the TrustSig Edge API for validation. Recommended for standard integrations.
+
+### Local Verification (`verifyLocal`)
+Decrypts the token locally using your Project Secret Key. Requires no outbound network requests. Recommended for high-throughput Edge environments.
+
+## Requirements
+- Node.js 18+ or standard Web Crypto API support.

package/dist/index.d.mts

@@ -0,0 +1,23 @@
+interface TrustSigOptions {
+    secretKey: string;
+    endpoint?: string;
+}
+interface BotAnalysisResponse {
+    is_bot: boolean;
+    score: number;
+    action: string;
+    request_id: string;
+    factors: string[];
+    evidence: Record<string, any>;
+    site_key: string;
+}
+
+declare class TrustSig {
+    private secretKey;
+    private endpoint;
+    constructor(options: TrustSigOptions);
+    verifyLocal(token: string): BotAnalysisResponse;
+    verifyRemote(token: string): Promise<BotAnalysisResponse>;
+}
+
+export { type BotAnalysisResponse, TrustSig, type TrustSigOptions };

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+interface TrustSigOptions {
+    secretKey: string;
+    endpoint?: string;
+}
+interface BotAnalysisResponse {
+    is_bot: boolean;
+    score: number;
+    action: string;
+    request_id: string;
+    factors: string[];
+    evidence: Record<string, any>;
+    site_key: string;
+}
+
+declare class TrustSig {
+    private secretKey;
+    private endpoint;
+    constructor(options: TrustSigOptions);
+    verifyLocal(token: string): BotAnalysisResponse;
+    verifyRemote(token: string): Promise<BotAnalysisResponse>;
+}
+
+export { type BotAnalysisResponse, TrustSig, type TrustSigOptions };

package/dist/index.js

@@ -0,0 +1 @@
+"use strict";var i=Object.defineProperty;var u=Object.getOwnPropertyDescriptor;var f=Object.getOwnPropertyNames;var l=Object.prototype.hasOwnProperty;var O=(r,t)=>{for(var e in t)i(r,e,{get:t[e],enumerable:!0})},R=(r,t,e,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of f(t))!l.call(r,s)&&s!==e&&i(r,s,{get:()=>t[s],enumerable:!(n=u(t,s))||n.enumerable});return r};var T=r=>R(i({},"__esModule",{value:!0}),r);var g={};O(g,{TrustSig:()=>c});module.exports=T(g);var a=require("@noble/ciphers/chacha");function A(r){let t=atob(r),e=t.length,n=new Uint8Array(e);for(let s=0;s<e;s++)n[s]=t.charCodeAt(s);return n}function y(r,t){let e=new Uint8Array(32),n=new TextEncoder().encode(r),s=Math.min(n.length,32);e.set(n.slice(0,s));let o=A(t);if(o.length<12)throw new Error("TOKEN_TOO_SHORT");let p=o.slice(0,12),d=o.slice(12),_=(0,a.chacha20poly1305)(e,p).decrypt(d),h=new TextDecoder().decode(_);return JSON.parse(h)}var c=class{secretKey;endpoint;constructor(t){if(!t.secretKey)throw new Error("SECRET_KEY_REQUIRED");this.secretKey=t.secretKey,this.endpoint=t.endpoint||"https://api.trustsig.com"}verifyLocal(t){try{let e=y(this.secretKey,t);return{is_bot:e.is_bot??!0,score:e.score??100,action:e.action??"BLOCK_MALFORMED_VERDICT",request_id:e.request_id??"",factors:e.factors??[],evidence:e.evidence??{},site_key:e.site_key??""}}catch{return{is_bot:!0,score:100,action:"BLOCK_CRYPTO_FAIL",request_id:"",factors:["CRYPTO_FAIL"],evidence:{},site_key:""}}}async verifyRemote(t){try{let e=await fetch(`${this.endpoint}/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({secret:this.secretKey,response:t})});if(!e.ok)throw new Error("HTTP_ERROR");return await e.json()}catch{return{is_bot:!0,score:100,action:"BLOCK_API_FAIL",request_id:"",factors:["API_FAIL"],evidence:{},site_key:""}}}};0&&(module.exports={TrustSig});

package/dist/index.mjs

@@ -0,0 +1 @@
+import{chacha20poly1305 as _}from"@noble/ciphers/chacha";function h(n){let t=atob(n),e=t.length,r=new Uint8Array(e);for(let s=0;s<e;s++)r[s]=t.charCodeAt(s);return r}function i(n,t){let e=new Uint8Array(32),r=new TextEncoder().encode(n),s=Math.min(r.length,32);e.set(r.slice(0,s));let o=h(t);if(o.length<12)throw new Error("TOKEN_TOO_SHORT");let a=o.slice(0,12),y=o.slice(12),p=_(e,a).decrypt(y),d=new TextDecoder().decode(p);return JSON.parse(d)}var c=class{secretKey;endpoint;constructor(t){if(!t.secretKey)throw new Error("SECRET_KEY_REQUIRED");this.secretKey=t.secretKey,this.endpoint=t.endpoint||"https://api.trustsig.com"}verifyLocal(t){try{let e=i(this.secretKey,t);return{is_bot:e.is_bot??!0,score:e.score??100,action:e.action??"BLOCK_MALFORMED_VERDICT",request_id:e.request_id??"",factors:e.factors??[],evidence:e.evidence??{},site_key:e.site_key??""}}catch{return{is_bot:!0,score:100,action:"BLOCK_CRYPTO_FAIL",request_id:"",factors:["CRYPTO_FAIL"],evidence:{},site_key:""}}}async verifyRemote(t){try{let e=await fetch(`${this.endpoint}/verify`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({secret:this.secretKey,response:t})});if(!e.ok)throw new Error("HTTP_ERROR");return await e.json()}catch{return{is_bot:!0,score:100,action:"BLOCK_API_FAIL",request_id:"",factors:["API_FAIL"],evidence:{},site_key:""}}}};export{c as TrustSig};

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@trustsig/sdk",
+  "version": "1.0.0",
+  "description": "TrustSig Enterprise SDK for Node.js and Edge environments",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^1.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.0.0",
+    "tsup": "^8.0.0",
+    "vitest": "^1.0.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "trustsig",
+    "security",
+    "bot-protection"
+  ],
+  "author": "TrustSig",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/TrustSig/TrustSigJS.git"
+  }
+}