usehuma 1.0.0 → 1.1.0

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core.ts","../src/index.ts"],"sourcesContent":["/**\n * useHUMA — Core Signal Collector\n * Invisible behavioral biometrics — no PII collected.\n */\n\nimport type { SessionData, HumaVerifyResult, HumaError, HumaOptions } from \"./types\";\n\ntype MousePoint  = { x: number; y: number; t: number };\ntype KeyEntry    = { interval: number };\ntype ScrollEntry = { interval: number };\ntype ClickEntry  = { t: number };\ntype FocusEvent  = { type: \"focus\" | \"blur\"; t: number };\n\ninterface Signals {\n  mouse:       MousePoint[];\n  keys:        KeyEntry[];\n  scrolls:     ScrollEntry[];\n  clicks:      ClickEntry[];\n  focusEvents: FocusEvent[];\n  startTime:   number;\n  lastKeyTime:    number | null;\n  lastScrollTime: number | null;\n}\n\nfunction cv(arr: number[]): number {\n  if (arr.length < 2) return 0;\n  const mean = arr.reduce((a, b) => a + b, 0) / arr.length;\n  if (mean === 0) return 0;\n  const variance = arr.reduce((a, b) => a + Math.pow(b - mean, 2), 0) / arr.length;\n  return Math.sqrt(variance) / mean;\n}\n\nfunction mouseFeatures(pts: MousePoint[]) {\n  if (pts.length < 5) return { speed_cv: 0, direction_changes: 0, sample_count: 0 };\n  const speeds: number[] = [];\n  const directions: number[] = [];\n  for (let i = 1; i < pts.length; i++) {\n    const dx = pts[i].x - pts[i - 1].x;\n    const dy = pts[i].y - pts[i - 1].y;\n    const dt = Math.max(pts[i].t - pts[i - 1].t, 1);\n    speeds.push(Math.sqrt(dx * dx + dy * dy) / dt);\n    directions.push(Math.atan2(dy, dx));\n  }\n  let dirChanges = 0;\n  for (let j = 1; j < directions.length; j++) {\n    if (Math.abs(directions[j] - directions[j - 1]) > 0.3) dirChanges++;\n  }\n  return { speed_cv: cv(speeds), direction_changes: dirChanges, sample_count: pts.length };\n}\n\nexport class HumaCollector {\n  private signals: Signals = {\n    mouse: [], keys: [], scrolls: [], clicks: [], focusEvents: [],\n    startTime: Date.now(), lastKeyTime: null, lastScrollTime: null,\n  };\n  private listening = false;\n\n  private onMouseMove = (e: MouseEvent) => {\n    if (this.signals.mouse.length < 200)\n      this.signals.mouse.push({ x: e.clientX, y: e.clientY, t: Date.now() });\n  };\n  private onKeyDown = () => {\n    const now = Date.now();\n    if (this.signals.lastKeyTime !== null && this.signals.keys.length < 100)\n      this.signals.keys.push({ interval: now - this.signals.lastKeyTime });\n    this.signals.lastKeyTime = now;\n  };\n  private onScroll = () => {\n    const now = Date.now();\n    if (this.signals.lastScrollTime !== null && this.signals.scrolls.length < 50)\n      this.signals.scrolls.push({ interval: now - this.signals.lastScrollTime });\n    this.signals.lastScrollTime = now;\n  };\n  private onClick = () => {\n    if (this.signals.clicks.length < 50)\n      this.signals.clicks.push({ t: Date.now() });\n  };\n  private onFocus = () => this.signals.focusEvents.push({ type: \"focus\", t: Date.now() });\n  private onBlur  = () => this.signals.focusEvents.push({ type: \"blur\",  t: Date.now() });\n\n  start() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    document.addEventListener(\"mousemove\", this.onMouseMove, { passive: true });\n    document.addEventListener(\"keydown\",   this.onKeyDown,   { passive: true });\n    document.addEventListener(\"scroll\",    this.onScroll,    { passive: true });\n    document.addEventListener(\"click\",     this.onClick,     { passive: true });\n    window.addEventListener(\"focus\",       this.onFocus,     { passive: true });\n    window.addEventListener(\"blur\",        this.onBlur,      { passive: true });\n  }\n\n  stop() {\n    if (!this.listening) return;\n    this.listening = false;\n    document.removeEventListener(\"mousemove\", this.onMouseMove);\n    document.removeEventListener(\"keydown\",   this.onKeyDown);\n    document.removeEventListener(\"scroll\",    this.onScroll);\n    document.removeEventListener(\"click\",     this.onClick);\n    window.removeEventListener(\"focus\",       this.onFocus);\n    window.removeEventListener(\"blur\",        this.onBlur);\n  }\n\n  extract(): SessionData {\n    const { keys, scrolls, clicks, focusEvents, startTime, mouse } = this.signals;\n    const m = mouseFeatures(mouse);\n    const clickIntervals: number[] = [];\n    for (let i = 1; i < clicks.length; i++)\n      clickIntervals.push(clicks[i].t - clicks[i - 1].t);\n    return {\n      time_on_page_ms:      Date.now() - startTime,\n      key_interval_cv:      cv(keys.map(k => k.interval)),\n      key_count:            keys.length,\n      scroll_interval_cv:   cv(scrolls.map(s => s.interval)),\n      scroll_count:         scrolls.length,\n      mouse_speed_cv:       m.speed_cv,\n      mouse_direction_changes: m.direction_changes,\n      mouse_sample_count:   m.sample_count,\n      click_interval_cv:    cv(clickIntervals),\n      click_count:          clicks.length,\n      tab_switches:         focusEvents.length,\n    };\n  }\n\n  debug(): Record<string, unknown> {\n    return { signals: this.signals as unknown, features: this.extract() };\n  }\n}\n\n/** Send extracted signals to the HUMA API and return a result. */\nexport async function callHumaApi(\n  opts: HumaOptions,\n  sessionData: SessionData\n): Promise<HumaVerifyResult> {\n  const endpoint = opts.endpoint ?? \"https://humaverify.com/api/v1/verify\";\n  const res = await fetch(endpoint, {\n    method: \"POST\",\n    headers: {\n      Authorization: `Bearer ${opts.apiKey}`,\n      \"Content-Type\": \"application/json\",\n    },\n    body: JSON.stringify({ userId: opts.userId, sessionData }),\n  });\n  if (!res.ok) {\n    const err: HumaError = await res.json().catch(() => ({ error: \"Unknown error\" }));\n    throw err;\n  }\n  return res.json() as Promise<HumaVerifyResult>;\n}\n","/**\n * useHUMA JavaScript SDK\n * Privacy-first human verification — no PII, no Cloudflare dependency.\n * https://humaverify.com\n */\n\nexport { HumaCollector, callHumaApi } from \"./core\";\nexport type {\n  SessionData,\n  HumaVerifyResult,\n  HumaError,\n  HumaOptions,\n  HumaState,\n} from \"./types\";\n\n/**\n * Vanilla JS verify — for non-React apps.\n *\n * @example\n * import { verify } from 'usehuma';\n *\n * const result = await verify({\n *   apiKey: 'huma_live_...',\n *   userId: 'user_123',\n * });\n * if (result.human) { ... }\n */\nimport { HumaCollector, callHumaApi } from \"./core\";\nimport type { HumaOptions, HumaVerifyResult } from \"./types\";\n\nlet _globalCollector: HumaCollector | null = null;\n\n/** Auto-start signal collection (call once, early in your app). */\nexport function init() {\n  if (typeof window === \"undefined\") return;\n  if (_globalCollector) return;\n  _globalCollector = new HumaCollector();\n  _globalCollector.start();\n}\n\n/**\n * Verify the current user as human using collected behavioral signals.\n * Calls init() automatically if not already started.\n */\nexport async function verify(opts: HumaOptions): Promise<HumaVerifyResult> {\n  if (!_globalCollector) init();\n  const sessionData = _globalCollector!.extract();\n  return callHumaApi(opts, sessionData);\n}\n\n/** Get raw collected signals — useful for debugging. */\nexport function debug(): Record<string, unknown> | null {\n  return _globalCollector?.debug() as Record<string, unknown> | null ?? null;\n}\n"],"mappings":";AAwBA,SAAS,GAAG,KAAuB;AACjC,MAAI,IAAI,SAAS,EAAG,QAAO;AAC3B,QAAM,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI;AAClD,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI;AAC1E,SAAO,KAAK,KAAK,QAAQ,IAAI;AAC/B;AAEA,SAAS,cAAc,KAAmB;AACxC,MAAI,IAAI,SAAS,EAAG,QAAO,EAAE,UAAU,GAAG,mBAAmB,GAAG,cAAc,EAAE;AAChF,QAAM,SAAmB,CAAC;AAC1B,QAAM,aAAuB,CAAC;AAC9B,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE;AACjC,UAAM,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE;AACjC,UAAM,KAAK,KAAK,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC;AAC9C,WAAO,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,EAAE,IAAI,EAAE;AAC7C,eAAW,KAAK,KAAK,MAAM,IAAI,EAAE,CAAC;AAAA,EACpC;AACA,MAAI,aAAa;AACjB,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,QAAI,KAAK,IAAI,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,IAAI,IAAK;AAAA,EACzD;AACA,SAAO,EAAE,UAAU,GAAG,MAAM,GAAG,mBAAmB,YAAY,cAAc,IAAI,OAAO;AACzF;AAEO,IAAM,gBAAN,MAAoB;AAAA,EAApB;AACL,SAAQ,UAAmB;AAAA,MACzB,OAAO,CAAC;AAAA,MAAG,MAAM,CAAC;AAAA,MAAG,SAAS,CAAC;AAAA,MAAG,QAAQ,CAAC;AAAA,MAAG,aAAa,CAAC;AAAA,MAC5D,WAAW,KAAK,IAAI;AAAA,MAAG,aAAa;AAAA,MAAM,gBAAgB;AAAA,IAC5D;AACA,SAAQ,YAAY;AAEpB,SAAQ,cAAc,CAAC,MAAkB;AACvC,UAAI,KAAK,QAAQ,MAAM,SAAS;AAC9B,aAAK,QAAQ,MAAM,KAAK,EAAE,GAAG,EAAE,SAAS,GAAG,EAAE,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,IACzE;AACA,SAAQ,YAAY,MAAM;AACxB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,KAAK,QAAQ,gBAAgB,QAAQ,KAAK,QAAQ,KAAK,SAAS;AAClE,aAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,MAAM,KAAK,QAAQ,YAAY,CAAC;AACrE,WAAK,QAAQ,cAAc;AAAA,IAC7B;AACA,SAAQ,WAAW,MAAM;AACvB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,QAAQ,SAAS;AACxE,aAAK,QAAQ,QAAQ,KAAK,EAAE,UAAU,MAAM,KAAK,QAAQ,eAAe,CAAC;AAC3E,WAAK,QAAQ,iBAAiB;AAAA,IAChC;AACA,SAAQ,UAAU,MAAM;AACtB,UAAI,KAAK,QAAQ,OAAO,SAAS;AAC/B,aAAK,QAAQ,OAAO,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,IAC9C;AACA,SAAQ,UAAU,MAAM,KAAK,QAAQ,YAAY,KAAK,EAAE,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AACtF,SAAQ,SAAU,MAAM,KAAK,QAAQ,YAAY,KAAK,EAAE,MAAM,QAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA;AAAA,EAEtF,QAAQ;AACN,QAAI,KAAK,aAAa,OAAO,WAAW,YAAa;AACrD,SAAK,YAAY;AACjB,aAAS,iBAAiB,aAAa,KAAK,aAAa,EAAE,SAAS,KAAK,CAAC;AAC1E,aAAS,iBAAiB,WAAa,KAAK,WAAa,EAAE,SAAS,KAAK,CAAC;AAC1E,aAAS,iBAAiB,UAAa,KAAK,UAAa,EAAE,SAAS,KAAK,CAAC;AAC1E,aAAS,iBAAiB,SAAa,KAAK,SAAa,EAAE,SAAS,KAAK,CAAC;AAC1E,WAAO,iBAAiB,SAAe,KAAK,SAAa,EAAE,SAAS,KAAK,CAAC;AAC1E,WAAO,iBAAiB,QAAe,KAAK,QAAa,EAAE,SAAS,KAAK,CAAC;AAAA,EAC5E;AAAA,EAEA,OAAO;AACL,QAAI,CAAC,KAAK,UAAW;AACrB,SAAK,YAAY;AACjB,aAAS,oBAAoB,aAAa,KAAK,WAAW;AAC1D,aAAS,oBAAoB,WAAa,KAAK,SAAS;AACxD,aAAS,oBAAoB,UAAa,KAAK,QAAQ;AACvD,aAAS,oBAAoB,SAAa,KAAK,OAAO;AACtD,WAAO,oBAAoB,SAAe,KAAK,OAAO;AACtD,WAAO,oBAAoB,QAAe,KAAK,MAAM;AAAA,EACvD;AAAA,EAEA,UAAuB;AACrB,UAAM,EAAE,MAAM,SAAS,QAAQ,aAAa,WAAW,MAAM,IAAI,KAAK;AACtE,UAAM,IAAI,cAAc,KAAK;AAC7B,UAAM,iBAA2B,CAAC;AAClC,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ;AACjC,qBAAe,KAAK,OAAO,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;AACnD,WAAO;AAAA,MACL,iBAAsB,KAAK,IAAI,IAAI;AAAA,MACnC,iBAAsB,GAAG,KAAK,IAAI,OAAK,EAAE,QAAQ,CAAC;AAAA,MAClD,WAAsB,KAAK;AAAA,MAC3B,oBAAsB,GAAG,QAAQ,IAAI,OAAK,EAAE,QAAQ,CAAC;AAAA,MACrD,cAAsB,QAAQ;AAAA,MAC9B,gBAAsB,EAAE;AAAA,MACxB,yBAAyB,EAAE;AAAA,MAC3B,oBAAsB,EAAE;AAAA,MACxB,mBAAsB,GAAG,cAAc;AAAA,MACvC,aAAsB,OAAO;AAAA,MAC7B,cAAsB,YAAY;AAAA,IACpC;AAAA,EACF;AAAA,EAEA,QAAiC;AAC/B,WAAO,EAAE,SAAS,KAAK,SAAoB,UAAU,KAAK,QAAQ,EAAE;AAAA,EACtE;AACF;AAGA,eAAsB,YACpB,MACA,aAC2B;AApI7B;AAqIE,QAAM,YAAW,UAAK,aAAL,YAAiB;AAClC,QAAM,MAAM,MAAM,MAAM,UAAU;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,KAAK,MAAM;AAAA,MACpC,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ,YAAY,CAAC;AAAA,EAC3D,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,MAAiB,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAChF,UAAM;AAAA,EACR;AACA,SAAO,IAAI,KAAK;AAClB;;;ACrHA,IAAI,mBAAyC;AAGtC,SAAS,OAAO;AACrB,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI,iBAAkB;AACtB,qBAAmB,IAAI,cAAc;AACrC,mBAAiB,MAAM;AACzB;AAMA,eAAsB,OAAO,MAA8C;AACzE,MAAI,CAAC,iBAAkB,MAAK;AAC5B,QAAM,cAAc,iBAAkB,QAAQ;AAC9C,SAAO,YAAY,MAAM,WAAW;AACtC;AAGO,SAAS,QAAwC;AAnDxD;AAoDE,UAAO,0DAAkB,YAAlB,YAA+D;AACxE;","names":[]}
+{"version":3,"sources":["../src/core.ts","../src/index.ts"],"sourcesContent":["/**\n * useHUMA — Core Signal Collector\n * Invisible behavioral biometrics — no PII collected.\n */\n\nimport type { SessionData, HumaVerifyResult, HumaError, HumaOptions } from \"./types\";\n\ntype MousePoint  = { x: number; y: number; t: number };\ntype KeyEntry    = { interval: number };\ntype ScrollEntry = { interval: number };\ntype ClickEntry  = { t: number };\ntype FocusEvent  = { type: \"focus\" | \"blur\"; t: number };\ntype TapEntry    = { t: number; duration_ms: number; force: number; touch_count: number };\ntype TouchMove   = { speed: number; t: number };\ntype ActiveTouch = { t: number; x: number; y: number };\n\ninterface Signals {\n  mouse:           MousePoint[];\n  keys:            KeyEntry[];\n  scrolls:         ScrollEntry[];\n  clicks:          ClickEntry[];\n  focusEvents:     FocusEvent[];\n  taps:            TapEntry[];\n  touchMoves:      TouchMove[];\n  multiTouchCount: number;\n  startTime:       number;\n  lastKeyTime:     number | null;\n  lastScrollTime:  number | null;\n  activeTouches:   Record<number, ActiveTouch>;\n}\n\nfunction cv(arr: number[]): number {\n  if (arr.length < 2) return 0;\n  const mean = arr.reduce((a, b) => a + b, 0) / arr.length;\n  if (mean === 0) return 0;\n  const variance = arr.reduce((a, b) => a + Math.pow(b - mean, 2), 0) / arr.length;\n  return Math.sqrt(variance) / mean;\n}\n\nfunction mouseFeatures(pts: MousePoint[]) {\n  if (pts.length < 5) return { speed_cv: 0, direction_changes: 0, sample_count: 0 };\n  const speeds: number[] = [];\n  const directions: number[] = [];\n  for (let i = 1; i < pts.length; i++) {\n    const dx = pts[i].x - pts[i - 1].x;\n    const dy = pts[i].y - pts[i - 1].y;\n    const dt = Math.max(pts[i].t - pts[i - 1].t, 1);\n    speeds.push(Math.sqrt(dx * dx + dy * dy) / dt);\n    directions.push(Math.atan2(dy, dx));\n  }\n  let dirChanges = 0;\n  for (let j = 1; j < directions.length; j++) {\n    if (Math.abs(directions[j] - directions[j - 1]) > 0.3) dirChanges++;\n  }\n  return { speed_cv: cv(speeds), direction_changes: dirChanges, sample_count: pts.length };\n}\n\nfunction touchFeatures(taps: TapEntry[], moves: TouchMove[], multiTouchCount: number) {\n  const tapIntervals: number[] = [];\n  for (let i = 1; i < taps.length; i++) tapIntervals.push(taps[i].t - taps[i - 1].t);\n  const durations = taps.map(t => t.duration_ms);\n  const forces    = taps.filter(t => t.force > 0).map(t => t.force);\n  const speeds    = moves.map(m => m.speed);\n  return {\n    tap_count:         taps.length,\n    tap_interval_cv:   cv(tapIntervals),\n    tap_duration_cv:   cv(durations),\n    tap_force_cv:      cv(forces),\n    touch_move_count:  moves.length,\n    touch_speed_cv:    cv(speeds),\n    multi_touch_count: multiTouchCount,\n  };\n}\n\nexport class HumaCollector {\n  private signals: Signals = {\n    mouse: [], keys: [], scrolls: [], clicks: [], focusEvents: [],\n    taps: [], touchMoves: [], multiTouchCount: 0,\n    startTime: Date.now(), lastKeyTime: null, lastScrollTime: null,\n    activeTouches: {},\n  };\n  private listening = false;\n\n  private onMouseMove = (e: MouseEvent) => {\n    if (this.signals.mouse.length < 200)\n      this.signals.mouse.push({ x: e.clientX, y: e.clientY, t: Date.now() });\n  };\n  private onKeyDown = () => {\n    const now = Date.now();\n    if (this.signals.lastKeyTime !== null && this.signals.keys.length < 100)\n      this.signals.keys.push({ interval: now - this.signals.lastKeyTime });\n    this.signals.lastKeyTime = now;\n  };\n  private onScroll = () => {\n    const now = Date.now();\n    if (this.signals.lastScrollTime !== null && this.signals.scrolls.length < 50)\n      this.signals.scrolls.push({ interval: now - this.signals.lastScrollTime });\n    this.signals.lastScrollTime = now;\n  };\n  private onClick = () => {\n    if (this.signals.clicks.length < 50)\n      this.signals.clicks.push({ t: Date.now() });\n  };\n  private onFocus = () => this.signals.focusEvents.push({ type: \"focus\", t: Date.now() });\n  private onBlur  = () => this.signals.focusEvents.push({ type: \"blur\",  t: Date.now() });\n\n  private onTouchStart = (e: TouchEvent) => {\n    const now = Date.now();\n    if (e.touches.length > 1) this.signals.multiTouchCount++;\n    for (let i = 0; i < e.changedTouches.length; i++) {\n      const t = e.changedTouches[i];\n      this.signals.activeTouches[t.identifier] = { t: now, x: t.clientX, y: t.clientY };\n    }\n  };\n\n  private onTouchEnd = (e: TouchEvent) => {\n    const now = Date.now();\n    for (let i = 0; i < e.changedTouches.length; i++) {\n      const touch = e.changedTouches[i];\n      const start = this.signals.activeTouches[touch.identifier];\n      if (!start) continue;\n      delete this.signals.activeTouches[touch.identifier];\n      if (this.signals.taps.length < 80) {\n        this.signals.taps.push({\n          t: now,\n          duration_ms: now - start.t,\n          force: (touch as Touch & { force?: number }).force ?? 0,\n          touch_count: e.touches.length + 1,\n        });\n      }\n    }\n  };\n\n  private onTouchMove = (e: TouchEvent) => {\n    const now = Date.now();\n    for (let i = 0; i < e.changedTouches.length; i++) {\n      const touch = e.changedTouches[i];\n      const start = this.signals.activeTouches[touch.identifier];\n      if (!start) continue;\n      const dx = touch.clientX - start.x;\n      const dy = touch.clientY - start.y;\n      const dt = Math.max(now - start.t, 1);\n      if (this.signals.touchMoves.length < 100)\n        this.signals.touchMoves.push({ speed: Math.sqrt(dx * dx + dy * dy) / dt, t: now });\n      this.signals.activeTouches[touch.identifier] = { t: now, x: touch.clientX, y: touch.clientY };\n    }\n  };\n\n  start() {\n    if (this.listening || typeof window === \"undefined\") return;\n    this.listening = true;\n    document.addEventListener(\"mousemove\",  this.onMouseMove,  { passive: true });\n    document.addEventListener(\"keydown\",    this.onKeyDown,    { passive: true });\n    document.addEventListener(\"scroll\",     this.onScroll,     { passive: true });\n    document.addEventListener(\"click\",      this.onClick,      { passive: true });\n    document.addEventListener(\"touchstart\", this.onTouchStart, { passive: true });\n    document.addEventListener(\"touchend\",   this.onTouchEnd,   { passive: true });\n    document.addEventListener(\"touchmove\",  this.onTouchMove,  { passive: true });\n    window.addEventListener(\"focus\",        this.onFocus,      { passive: true });\n    window.addEventListener(\"blur\",         this.onBlur,       { passive: true });\n  }\n\n  stop() {\n    if (!this.listening) return;\n    this.listening = false;\n    document.removeEventListener(\"mousemove\",  this.onMouseMove);\n    document.removeEventListener(\"keydown\",    this.onKeyDown);\n    document.removeEventListener(\"scroll\",     this.onScroll);\n    document.removeEventListener(\"click\",      this.onClick);\n    document.removeEventListener(\"touchstart\", this.onTouchStart);\n    document.removeEventListener(\"touchend\",   this.onTouchEnd);\n    document.removeEventListener(\"touchmove\",  this.onTouchMove);\n    window.removeEventListener(\"focus\",        this.onFocus);\n    window.removeEventListener(\"blur\",         this.onBlur);\n  }\n\n  extract(): SessionData {\n    const { keys, scrolls, clicks, focusEvents, startTime, mouse, taps, touchMoves, multiTouchCount } = this.signals;\n    const m = mouseFeatures(mouse);\n    const t = touchFeatures(taps, touchMoves, multiTouchCount);\n    const clickIntervals: number[] = [];\n    for (let i = 1; i < clicks.length; i++)\n      clickIntervals.push(clicks[i].t - clicks[i - 1].t);\n    return {\n      time_on_page_ms:         Date.now() - startTime,\n      key_interval_cv:         cv(keys.map(k => k.interval)),\n      key_count:               keys.length,\n      scroll_interval_cv:      cv(scrolls.map(s => s.interval)),\n      scroll_count:            scrolls.length,\n      mouse_speed_cv:          m.speed_cv,\n      mouse_direction_changes: m.direction_changes,\n      mouse_sample_count:      m.sample_count,\n      click_interval_cv:       cv(clickIntervals),\n      click_count:             clicks.length,\n      tab_switches:            focusEvents.length,\n      tap_count:               t.tap_count,\n      tap_interval_cv:         t.tap_interval_cv,\n      tap_duration_cv:         t.tap_duration_cv,\n      tap_force_cv:            t.tap_force_cv,\n      touch_move_count:        t.touch_move_count,\n      touch_speed_cv:          t.touch_speed_cv,\n      multi_touch_count:       t.multi_touch_count,\n    };\n  }\n\n  debug(): Record<string, unknown> {\n    return { signals: this.signals as unknown, features: this.extract() };\n  }\n}\n\n/** Send extracted signals to the HUMA API and return a result. */\nexport async function callHumaApi(\n  opts: HumaOptions,\n  sessionData: SessionData\n): Promise<HumaVerifyResult> {\n  const endpoint = opts.endpoint ?? \"https://humaverify.com/api/v1/verify\";\n  const res = await fetch(endpoint, {\n    method: \"POST\",\n    headers: {\n      Authorization: `Bearer ${opts.apiKey}`,\n      \"Content-Type\": \"application/json\",\n    },\n    body: JSON.stringify({ userId: opts.userId, sessionData }),\n  });\n  if (!res.ok) {\n    const err: HumaError = await res.json().catch(() => ({ error: \"Unknown error\" }));\n    throw err;\n  }\n  return res.json() as Promise<HumaVerifyResult>;\n}\n","/**\n * useHUMA JavaScript SDK\n * Privacy-first human verification — no PII, no Cloudflare dependency.\n * https://humaverify.com\n */\n\nexport { HumaCollector, callHumaApi } from \"./core\";\nexport type {\n  SessionData,\n  HumaVerifyResult,\n  HumaError,\n  HumaOptions,\n  HumaState,\n} from \"./types\";\n\n/**\n * Vanilla JS verify — for non-React apps.\n *\n * @example\n * import { verify } from 'usehuma';\n *\n * const result = await verify({\n *   apiKey: 'huma_live_...',\n *   userId: 'user_123',\n * });\n * if (result.human) { ... }\n */\nimport { HumaCollector, callHumaApi } from \"./core\";\nimport type { HumaOptions, HumaVerifyResult } from \"./types\";\n\nlet _globalCollector: HumaCollector | null = null;\n\n/** Auto-start signal collection (call once, early in your app). */\nexport function init() {\n  if (typeof window === \"undefined\") return;\n  if (_globalCollector) return;\n  _globalCollector = new HumaCollector();\n  _globalCollector.start();\n}\n\n/**\n * Verify the current user as human using collected behavioral signals.\n * Calls init() automatically if not already started.\n */\nexport async function verify(opts: HumaOptions): Promise<HumaVerifyResult> {\n  if (!_globalCollector) init();\n  const sessionData = _globalCollector!.extract();\n  return callHumaApi(opts, sessionData);\n}\n\n/** Get raw collected signals — useful for debugging. */\nexport function debug(): Record<string, unknown> | null {\n  return _globalCollector?.debug() as Record<string, unknown> | null ?? null;\n}\n\n/**\n * Server-side verify — pass pre-collected signals forwarded from the browser.\n * Use this in your API routes / server actions when you want the final\n * verify call to happen on your backend, not the browser.\n *\n * @example\n * // In your Next.js API route:\n * import { verifyWithSignals } from 'usehuma';\n *\n * const result = await verifyWithSignals({\n *   apiKey:  process.env.HUMA_API_KEY!,\n *   userId:  req.body.userId,\n *   signals: req.body.humaSignals,   // forwarded from browser via Huma.debug()\n * });\n */\nexport async function verifyWithSignals(opts: {\n  apiKey: string;\n  userId: string;\n  signals: import(\"./types\").SessionData;\n  endpoint?: string;\n}): Promise<import(\"./types\").HumaVerifyResult> {\n  return callHumaApi(\n    { apiKey: opts.apiKey, userId: opts.userId, endpoint: opts.endpoint },\n    opts.signals\n  );\n}\n\n/**\n * Request a step-up challenge when verify() confidence is borderline (30–70%).\n * Returns challenge data to render to the user.\n *\n * @example\n * const result = await verify({ apiKey, userId });\n * if (!result.human && result.confidence > 0.3) {\n *   const ch = await requestChallenge({ apiKey, userId });\n *   // Render ch.payload to user, collect answer, then:\n *   const solved = await solveChallenge({ apiKey, challengeId: ch.challenge_id, answer });\n *   if (solved.passed) continueLogin(solved.token);\n * }\n */\nexport async function requestChallenge(opts: {\n  apiKey: string;\n  userId: string;\n  endpoint?: string;\n}): Promise<{ challenge_id: string; type: string; payload: Record<string, unknown>; expires_in_seconds: number }> {\n  const base = (opts.endpoint ?? \"https://humaverify.com/api/v1/verify\")\n    .replace(/\\/api\\/v1\\/verify$/, \"\")\n    .replace(/\\/$/, \"\");\n  const res = await fetch(`${base}/api/v1/challenge/create`, {\n    method: \"POST\",\n    headers: { Authorization: `Bearer ${opts.apiKey}`, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify({ userId: opts.userId }),\n  });\n  if (!res.ok) throw await res.json().catch(() => ({ error: \"Failed to create challenge\" }));\n  return res.json();\n}\n\nexport async function solveChallenge(opts: {\n  apiKey: string;\n  challengeId: string;\n  answer: string;\n  endpoint?: string;\n}): Promise<{ passed: boolean; token?: string; message?: string; attempts_remaining?: number }> {\n  const base = (opts.endpoint ?? \"https://humaverify.com/api/v1/verify\")\n    .replace(/\\/api\\/v1\\/verify$/, \"\")\n    .replace(/\\/$/, \"\");\n  const res = await fetch(`${base}/api/v1/challenge/verify`, {\n    method: \"POST\",\n    headers: { Authorization: `Bearer ${opts.apiKey}`, \"Content-Type\": \"application/json\" },\n    body: JSON.stringify({ challenge_id: opts.challengeId, answer: opts.answer }),\n  });\n  return res.json();\n}\n"],"mappings":";AA+BA,SAAS,GAAG,KAAuB;AACjC,MAAI,IAAI,SAAS,EAAG,QAAO;AAC3B,QAAM,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI;AAClD,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI;AAC1E,SAAO,KAAK,KAAK,QAAQ,IAAI;AAC/B;AAEA,SAAS,cAAc,KAAmB;AACxC,MAAI,IAAI,SAAS,EAAG,QAAO,EAAE,UAAU,GAAG,mBAAmB,GAAG,cAAc,EAAE;AAChF,QAAM,SAAmB,CAAC;AAC1B,QAAM,aAAuB,CAAC;AAC9B,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE;AACjC,UAAM,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE;AACjC,UAAM,KAAK,KAAK,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC;AAC9C,WAAO,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,EAAE,IAAI,EAAE;AAC7C,eAAW,KAAK,KAAK,MAAM,IAAI,EAAE,CAAC;AAAA,EACpC;AACA,MAAI,aAAa;AACjB,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,QAAI,KAAK,IAAI,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,IAAI,IAAK;AAAA,EACzD;AACA,SAAO,EAAE,UAAU,GAAG,MAAM,GAAG,mBAAmB,YAAY,cAAc,IAAI,OAAO;AACzF;AAEA,SAAS,cAAc,MAAkB,OAAoB,iBAAyB;AACpF,QAAM,eAAyB,CAAC;AAChC,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,IAAK,cAAa,KAAK,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;AACjF,QAAM,YAAY,KAAK,IAAI,OAAK,EAAE,WAAW;AAC7C,QAAM,SAAY,KAAK,OAAO,OAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,OAAK,EAAE,KAAK;AAChE,QAAM,SAAY,MAAM,IAAI,OAAK,EAAE,KAAK;AACxC,SAAO;AAAA,IACL,WAAmB,KAAK;AAAA,IACxB,iBAAmB,GAAG,YAAY;AAAA,IAClC,iBAAmB,GAAG,SAAS;AAAA,IAC/B,cAAmB,GAAG,MAAM;AAAA,IAC5B,kBAAmB,MAAM;AAAA,IACzB,gBAAmB,GAAG,MAAM;AAAA,IAC5B,mBAAmB;AAAA,EACrB;AACF;AAEO,IAAM,gBAAN,MAAoB;AAAA,EAApB;AACL,SAAQ,UAAmB;AAAA,MACzB,OAAO,CAAC;AAAA,MAAG,MAAM,CAAC;AAAA,MAAG,SAAS,CAAC;AAAA,MAAG,QAAQ,CAAC;AAAA,MAAG,aAAa,CAAC;AAAA,MAC5D,MAAM,CAAC;AAAA,MAAG,YAAY,CAAC;AAAA,MAAG,iBAAiB;AAAA,MAC3C,WAAW,KAAK,IAAI;AAAA,MAAG,aAAa;AAAA,MAAM,gBAAgB;AAAA,MAC1D,eAAe,CAAC;AAAA,IAClB;AACA,SAAQ,YAAY;AAEpB,SAAQ,cAAc,CAAC,MAAkB;AACvC,UAAI,KAAK,QAAQ,MAAM,SAAS;AAC9B,aAAK,QAAQ,MAAM,KAAK,EAAE,GAAG,EAAE,SAAS,GAAG,EAAE,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,IACzE;AACA,SAAQ,YAAY,MAAM;AACxB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,KAAK,QAAQ,gBAAgB,QAAQ,KAAK,QAAQ,KAAK,SAAS;AAClE,aAAK,QAAQ,KAAK,KAAK,EAAE,UAAU,MAAM,KAAK,QAAQ,YAAY,CAAC;AACrE,WAAK,QAAQ,cAAc;AAAA,IAC7B;AACA,SAAQ,WAAW,MAAM;AACvB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,QAAQ,SAAS;AACxE,aAAK,QAAQ,QAAQ,KAAK,EAAE,UAAU,MAAM,KAAK,QAAQ,eAAe,CAAC;AAC3E,WAAK,QAAQ,iBAAiB;AAAA,IAChC;AACA,SAAQ,UAAU,MAAM;AACtB,UAAI,KAAK,QAAQ,OAAO,SAAS;AAC/B,aAAK,QAAQ,OAAO,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,IAC9C;AACA,SAAQ,UAAU,MAAM,KAAK,QAAQ,YAAY,KAAK,EAAE,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AACtF,SAAQ,SAAU,MAAM,KAAK,QAAQ,YAAY,KAAK,EAAE,MAAM,QAAS,GAAG,KAAK,IAAI,EAAE,CAAC;AAEtF,SAAQ,eAAe,CAAC,MAAkB;AACxC,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,EAAE,QAAQ,SAAS,EAAG,MAAK,QAAQ;AACvC,eAAS,IAAI,GAAG,IAAI,EAAE,eAAe,QAAQ,KAAK;AAChD,cAAM,IAAI,EAAE,eAAe,CAAC;AAC5B,aAAK,QAAQ,cAAc,EAAE,UAAU,IAAI,EAAE,GAAG,KAAK,GAAG,EAAE,SAAS,GAAG,EAAE,QAAQ;AAAA,MAClF;AAAA,IACF;AAEA,SAAQ,aAAa,CAAC,MAAkB;AAnH1C;AAoHI,YAAM,MAAM,KAAK,IAAI;AACrB,eAAS,IAAI,GAAG,IAAI,EAAE,eAAe,QAAQ,KAAK;AAChD,cAAM,QAAQ,EAAE,eAAe,CAAC;AAChC,cAAM,QAAQ,KAAK,QAAQ,cAAc,MAAM,UAAU;AACzD,YAAI,CAAC,MAAO;AACZ,eAAO,KAAK,QAAQ,cAAc,MAAM,UAAU;AAClD,YAAI,KAAK,QAAQ,KAAK,SAAS,IAAI;AACjC,eAAK,QAAQ,KAAK,KAAK;AAAA,YACrB,GAAG;AAAA,YACH,aAAa,MAAM,MAAM;AAAA,YACzB,QAAQ,WAAqC,UAArC,YAA8C;AAAA,YACtD,aAAa,EAAE,QAAQ,SAAS;AAAA,UAClC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,SAAQ,cAAc,CAAC,MAAkB;AACvC,YAAM,MAAM,KAAK,IAAI;AACrB,eAAS,IAAI,GAAG,IAAI,EAAE,eAAe,QAAQ,KAAK;AAChD,cAAM,QAAQ,EAAE,eAAe,CAAC;AAChC,cAAM,QAAQ,KAAK,QAAQ,cAAc,MAAM,UAAU;AACzD,YAAI,CAAC,MAAO;AACZ,cAAM,KAAK,MAAM,UAAU,MAAM;AACjC,cAAM,KAAK,MAAM,UAAU,MAAM;AACjC,cAAM,KAAK,KAAK,IAAI,MAAM,MAAM,GAAG,CAAC;AACpC,YAAI,KAAK,QAAQ,WAAW,SAAS;AACnC,eAAK,QAAQ,WAAW,KAAK,EAAE,OAAO,KAAK,KAAK,KAAK,KAAK,KAAK,EAAE,IAAI,IAAI,GAAG,IAAI,CAAC;AACnF,aAAK,QAAQ,cAAc,MAAM,UAAU,IAAI,EAAE,GAAG,KAAK,GAAG,MAAM,SAAS,GAAG,MAAM,QAAQ;AAAA,MAC9F;AAAA,IACF;AAAA;AAAA,EAEA,QAAQ;AACN,QAAI,KAAK,aAAa,OAAO,WAAW,YAAa;AACrD,SAAK,YAAY;AACjB,aAAS,iBAAiB,aAAc,KAAK,aAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,WAAc,KAAK,WAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,UAAc,KAAK,UAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,SAAc,KAAK,SAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,cAAc,KAAK,cAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,YAAc,KAAK,YAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,aAAS,iBAAiB,aAAc,KAAK,aAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,WAAO,iBAAiB,SAAgB,KAAK,SAAc,EAAE,SAAS,KAAK,CAAC;AAC5E,WAAO,iBAAiB,QAAgB,KAAK,QAAc,EAAE,SAAS,KAAK,CAAC;AAAA,EAC9E;AAAA,EAEA,OAAO;AACL,QAAI,CAAC,KAAK,UAAW;AACrB,SAAK,YAAY;AACjB,aAAS,oBAAoB,aAAc,KAAK,WAAW;AAC3D,aAAS,oBAAoB,WAAc,KAAK,SAAS;AACzD,aAAS,oBAAoB,UAAc,KAAK,QAAQ;AACxD,aAAS,oBAAoB,SAAc,KAAK,OAAO;AACvD,aAAS,oBAAoB,cAAc,KAAK,YAAY;AAC5D,aAAS,oBAAoB,YAAc,KAAK,UAAU;AAC1D,aAAS,oBAAoB,aAAc,KAAK,WAAW;AAC3D,WAAO,oBAAoB,SAAgB,KAAK,OAAO;AACvD,WAAO,oBAAoB,QAAgB,KAAK,MAAM;AAAA,EACxD;AAAA,EAEA,UAAuB;AACrB,UAAM,EAAE,MAAM,SAAS,QAAQ,aAAa,WAAW,OAAO,MAAM,YAAY,gBAAgB,IAAI,KAAK;AACzG,UAAM,IAAI,cAAc,KAAK;AAC7B,UAAM,IAAI,cAAc,MAAM,YAAY,eAAe;AACzD,UAAM,iBAA2B,CAAC;AAClC,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ;AACjC,qBAAe,KAAK,OAAO,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;AACnD,WAAO;AAAA,MACL,iBAAyB,KAAK,IAAI,IAAI;AAAA,MACtC,iBAAyB,GAAG,KAAK,IAAI,OAAK,EAAE,QAAQ,CAAC;AAAA,MACrD,WAAyB,KAAK;AAAA,MAC9B,oBAAyB,GAAG,QAAQ,IAAI,OAAK,EAAE,QAAQ,CAAC;AAAA,MACxD,cAAyB,QAAQ;AAAA,MACjC,gBAAyB,EAAE;AAAA,MAC3B,yBAAyB,EAAE;AAAA,MAC3B,oBAAyB,EAAE;AAAA,MAC3B,mBAAyB,GAAG,cAAc;AAAA,MAC1C,aAAyB,OAAO;AAAA,MAChC,cAAyB,YAAY;AAAA,MACrC,WAAyB,EAAE;AAAA,MAC3B,iBAAyB,EAAE;AAAA,MAC3B,iBAAyB,EAAE;AAAA,MAC3B,cAAyB,EAAE;AAAA,MAC3B,kBAAyB,EAAE;AAAA,MAC3B,gBAAyB,EAAE;AAAA,MAC3B,mBAAyB,EAAE;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,QAAiC;AAC/B,WAAO,EAAE,SAAS,KAAK,SAAoB,UAAU,KAAK,QAAQ,EAAE;AAAA,EACtE;AACF;AAGA,eAAsB,YACpB,MACA,aAC2B;AAtN7B;AAuNE,QAAM,YAAW,UAAK,aAAL,YAAiB;AAClC,QAAM,MAAM,MAAM,MAAM,UAAU;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,KAAK,MAAM;AAAA,MACpC,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ,YAAY,CAAC;AAAA,EAC3D,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,MAAiB,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAChF,UAAM;AAAA,EACR;AACA,SAAO,IAAI,KAAK;AAClB;;;ACvMA,IAAI,mBAAyC;AAGtC,SAAS,OAAO;AACrB,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI,iBAAkB;AACtB,qBAAmB,IAAI,cAAc;AACrC,mBAAiB,MAAM;AACzB;AAMA,eAAsB,OAAO,MAA8C;AACzE,MAAI,CAAC,iBAAkB,MAAK;AAC5B,QAAM,cAAc,iBAAkB,QAAQ;AAC9C,SAAO,YAAY,MAAM,WAAW;AACtC;AAGO,SAAS,QAAwC;AAnDxD;AAoDE,UAAO,0DAAkB,YAAlB,YAA+D;AACxE;AAiBA,eAAsB,kBAAkB,MAKQ;AAC9C,SAAO;AAAA,IACL,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,QAAQ,UAAU,KAAK,SAAS;AAAA,IACpE,KAAK;AAAA,EACP;AACF;AAeA,eAAsB,iBAAiB,MAI2E;AAnGlH;AAoGE,QAAM,SAAQ,UAAK,aAAL,YAAiB,wCAC5B,QAAQ,sBAAsB,EAAE,EAChC,QAAQ,OAAO,EAAE;AACpB,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,4BAA4B;AAAA,IACzD,QAAQ;AAAA,IACR,SAAS,EAAE,eAAe,UAAU,KAAK,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,IACtF,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,EAC9C,CAAC;AACD,MAAI,CAAC,IAAI,GAAI,OAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,6BAA6B,EAAE;AACzF,SAAO,IAAI,KAAK;AAClB;AAEA,eAAsB,eAAe,MAK2D;AArHhG;AAsHE,QAAM,SAAQ,UAAK,aAAL,YAAiB,wCAC5B,QAAQ,sBAAsB,EAAE,EAChC,QAAQ,OAAO,EAAE;AACpB,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,4BAA4B;AAAA,IACzD,QAAQ;AAAA,IACR,SAAS,EAAE,eAAe,UAAU,KAAK,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,IACtF,MAAM,KAAK,UAAU,EAAE,cAAc,KAAK,aAAa,QAAQ,KAAK,OAAO,CAAC;AAAA,EAC9E,CAAC;AACD,SAAO,IAAI,KAAK;AAClB;","names":[]}

package/dist/react.d.mts

@@ -128,6 +128,54 @@ declare function useHumaSession(opts: UseHumaSessionOptions): {
     anomaly: boolean;
     stop: () => void;
 };
+type ChallengeTarget = {
+    id: string;
+    x: number;
+    y: number;
+    label: string;
+};
+type ChallengeFailed = {
+    passed: false;
+    message: string;
+    attempts_remaining?: number;
+};
+type HumaChallengeProps = {
+    /** challenge_id from POST /api/v1/challenge/create */
+    challengeId: string;
+    /** type from challenge create response */
+    type: "click_targets" | "pattern";
+    /** payload from challenge create response */
+    payload: {
+        instruction: string;
+        targets?: ChallengeTarget[];
+        sequence?: number[];
+    };
+    apiKey: string;
+    endpoint?: string;
+    onPassed: (token: string) => void;
+    onFailed?: (result: ChallengeFailed) => void;
+    /** Called when user exhausts all attempts */
+    onBlocked?: () => void;
+};
+/**
+ * Renders a step-up verification challenge when behavioral signals are inconclusive.
+ * Supports "click_targets" and "pattern" challenge types.
+ *
+ * @example
+ * // After verify() returns { human: false, confidence: 0.45 }:
+ * const ch = await fetch('/api/v1/challenge/create', { ... });
+ * return (
+ *   <HumaChallenge
+ *     challengeId={ch.challenge_id}
+ *     type={ch.type}
+ *     payload={ch.payload}
+ *     apiKey="huma_live_..."
+ *     onPassed={(token) => continueLogin(token)}
+ *     onBlocked={() => router.push('/blocked')}
+ *   />
+ * );
+ */
+declare function HumaChallenge({ challengeId, type, payload, apiKey, endpoint, onPassed, onFailed, onBlocked, }: HumaChallengeProps): react_jsx_runtime.JSX.Element;
 type HumaVerifyButtonProps = {
     apiKey: string;
     userId: string;
@@ -154,4 +202,4 @@ type HumaVerifyButtonProps = {
  */
 declare function HumaVerifyButton({ apiKey, userId, endpoint, onVerified, onBlocked, children, className, style, }: HumaVerifyButtonProps): react_jsx_runtime.JSX.Element;
 
-export { HumaGate, HumaProvider, HumaVerifyButton, useHuma, useHumaContext, useHumaSession };
+export { HumaChallenge, HumaGate, HumaProvider, HumaVerifyButton, useHuma, useHumaContext, useHumaSession };

package/dist/react.d.ts

@@ -128,6 +128,54 @@ declare function useHumaSession(opts: UseHumaSessionOptions): {
     anomaly: boolean;
     stop: () => void;
 };
+type ChallengeTarget = {
+    id: string;
+    x: number;
+    y: number;
+    label: string;
+};
+type ChallengeFailed = {
+    passed: false;
+    message: string;
+    attempts_remaining?: number;
+};
+type HumaChallengeProps = {
+    /** challenge_id from POST /api/v1/challenge/create */
+    challengeId: string;
+    /** type from challenge create response */
+    type: "click_targets" | "pattern";
+    /** payload from challenge create response */
+    payload: {
+        instruction: string;
+        targets?: ChallengeTarget[];
+        sequence?: number[];
+    };
+    apiKey: string;
+    endpoint?: string;
+    onPassed: (token: string) => void;
+    onFailed?: (result: ChallengeFailed) => void;
+    /** Called when user exhausts all attempts */
+    onBlocked?: () => void;
+};
+/**
+ * Renders a step-up verification challenge when behavioral signals are inconclusive.
+ * Supports "click_targets" and "pattern" challenge types.
+ *
+ * @example
+ * // After verify() returns { human: false, confidence: 0.45 }:
+ * const ch = await fetch('/api/v1/challenge/create', { ... });
+ * return (
+ *   <HumaChallenge
+ *     challengeId={ch.challenge_id}
+ *     type={ch.type}
+ *     payload={ch.payload}
+ *     apiKey="huma_live_..."
+ *     onPassed={(token) => continueLogin(token)}
+ *     onBlocked={() => router.push('/blocked')}
+ *   />
+ * );
+ */
+declare function HumaChallenge({ challengeId, type, payload, apiKey, endpoint, onPassed, onFailed, onBlocked, }: HumaChallengeProps): react_jsx_runtime.JSX.Element;
 type HumaVerifyButtonProps = {
     apiKey: string;
     userId: string;
@@ -154,4 +202,4 @@ type HumaVerifyButtonProps = {
  */
 declare function HumaVerifyButton({ apiKey, userId, endpoint, onVerified, onBlocked, children, className, style, }: HumaVerifyButtonProps): react_jsx_runtime.JSX.Element;
 
-export { HumaGate, HumaProvider, HumaVerifyButton, useHuma, useHumaContext, useHumaSession };
+export { HumaChallenge, HumaGate, HumaProvider, HumaVerifyButton, useHuma, useHumaContext, useHumaSession };

package/dist/react.js

@@ -38,6 +38,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/react.tsx
 var react_exports = {};
 __export(react_exports, {
+  HumaChallenge: () => HumaChallenge,
   HumaGate: () => HumaGate,
   HumaProvider: () => HumaProvider,
   HumaVerifyButton: () => HumaVerifyButton,
@@ -73,6 +74,22 @@ function mouseFeatures(pts) {
   }
   return { speed_cv: cv(speeds), direction_changes: dirChanges, sample_count: pts.length };
 }
+function touchFeatures(taps, moves, multiTouchCount) {
+  const tapIntervals = [];
+  for (let i = 1; i < taps.length; i++) tapIntervals.push(taps[i].t - taps[i - 1].t);
+  const durations = taps.map((t) => t.duration_ms);
+  const forces = taps.filter((t) => t.force > 0).map((t) => t.force);
+  const speeds = moves.map((m) => m.speed);
+  return {
+    tap_count: taps.length,
+    tap_interval_cv: cv(tapIntervals),
+    tap_duration_cv: cv(durations),
+    tap_force_cv: cv(forces),
+    touch_move_count: moves.length,
+    touch_speed_cv: cv(speeds),
+    multi_touch_count: multiTouchCount
+  };
+}
 var HumaCollector = class {
   constructor() {
     this.signals = {
@@ -81,9 +98,13 @@ var HumaCollector = class {
       scrolls: [],
       clicks: [],
       focusEvents: [],
+      taps: [],
+      touchMoves: [],
+      multiTouchCount: 0,
       startTime: Date.now(),
       lastKeyTime: null,
-      lastScrollTime: null
+      lastScrollTime: null,
+      activeTouches: {}
     };
     this.listening = false;
     this.onMouseMove = (e) => {
@@ -108,6 +129,46 @@ var HumaCollector = class {
     };
     this.onFocus = () => this.signals.focusEvents.push({ type: "focus", t: Date.now() });
     this.onBlur = () => this.signals.focusEvents.push({ type: "blur", t: Date.now() });
+    this.onTouchStart = (e) => {
+      const now = Date.now();
+      if (e.touches.length > 1) this.signals.multiTouchCount++;
+      for (let i = 0; i < e.changedTouches.length; i++) {
+        const t = e.changedTouches[i];
+        this.signals.activeTouches[t.identifier] = { t: now, x: t.clientX, y: t.clientY };
+      }
+    };
+    this.onTouchEnd = (e) => {
+      var _a;
+      const now = Date.now();
+      for (let i = 0; i < e.changedTouches.length; i++) {
+        const touch = e.changedTouches[i];
+        const start = this.signals.activeTouches[touch.identifier];
+        if (!start) continue;
+        delete this.signals.activeTouches[touch.identifier];
+        if (this.signals.taps.length < 80) {
+          this.signals.taps.push({
+            t: now,
+            duration_ms: now - start.t,
+            force: (_a = touch.force) != null ? _a : 0,
+            touch_count: e.touches.length + 1
+          });
+        }
+      }
+    };
+    this.onTouchMove = (e) => {
+      const now = Date.now();
+      for (let i = 0; i < e.changedTouches.length; i++) {
+        const touch = e.changedTouches[i];
+        const start = this.signals.activeTouches[touch.identifier];
+        if (!start) continue;
+        const dx = touch.clientX - start.x;
+        const dy = touch.clientY - start.y;
+        const dt = Math.max(now - start.t, 1);
+        if (this.signals.touchMoves.length < 100)
+          this.signals.touchMoves.push({ speed: Math.sqrt(dx * dx + dy * dy) / dt, t: now });
+        this.signals.activeTouches[touch.identifier] = { t: now, x: touch.clientX, y: touch.clientY };
+      }
+    };
   }
   start() {
     if (this.listening || typeof window === "undefined") return;
@@ -116,6 +177,9 @@ var HumaCollector = class {
     document.addEventListener("keydown", this.onKeyDown, { passive: true });
     document.addEventListener("scroll", this.onScroll, { passive: true });
     document.addEventListener("click", this.onClick, { passive: true });
+    document.addEventListener("touchstart", this.onTouchStart, { passive: true });
+    document.addEventListener("touchend", this.onTouchEnd, { passive: true });
+    document.addEventListener("touchmove", this.onTouchMove, { passive: true });
     window.addEventListener("focus", this.onFocus, { passive: true });
     window.addEventListener("blur", this.onBlur, { passive: true });
   }
@@ -126,12 +190,16 @@ var HumaCollector = class {
     document.removeEventListener("keydown", this.onKeyDown);
     document.removeEventListener("scroll", this.onScroll);
     document.removeEventListener("click", this.onClick);
+    document.removeEventListener("touchstart", this.onTouchStart);
+    document.removeEventListener("touchend", this.onTouchEnd);
+    document.removeEventListener("touchmove", this.onTouchMove);
     window.removeEventListener("focus", this.onFocus);
     window.removeEventListener("blur", this.onBlur);
   }
   extract() {
-    const { keys, scrolls, clicks, focusEvents, startTime, mouse } = this.signals;
+    const { keys, scrolls, clicks, focusEvents, startTime, mouse, taps, touchMoves, multiTouchCount } = this.signals;
     const m = mouseFeatures(mouse);
+    const t = touchFeatures(taps, touchMoves, multiTouchCount);
     const clickIntervals = [];
     for (let i = 1; i < clicks.length; i++)
       clickIntervals.push(clicks[i].t - clicks[i - 1].t);
@@ -146,7 +214,14 @@ var HumaCollector = class {
       mouse_sample_count: m.sample_count,
       click_interval_cv: cv(clickIntervals),
       click_count: clicks.length,
-      tab_switches: focusEvents.length
+      tab_switches: focusEvents.length,
+      tap_count: t.tap_count,
+      tap_interval_cv: t.tap_interval_cv,
+      tap_duration_cv: t.tap_duration_cv,
+      tap_force_cv: t.tap_force_cv,
+      touch_move_count: t.touch_move_count,
+      touch_speed_cv: t.touch_speed_cv,
+      multi_touch_count: t.multi_touch_count
     };
   }
   debug() {
@@ -299,6 +374,169 @@ function useHumaSession(opts) {
   }, [opts.intervalMs]);
   return { lastResult, anomaly, stop };
 }
+var DOT_POSITIONS = {
+  1: { x: 16.5, y: 16.5 },
+  2: { x: 50, y: 16.5 },
+  3: { x: 83.5, y: 16.5 },
+  4: { x: 16.5, y: 50 },
+  5: { x: 50, y: 50 },
+  6: { x: 83.5, y: 50 },
+  7: { x: 16.5, y: 83.5 },
+  8: { x: 50, y: 83.5 },
+  9: { x: 83.5, y: 83.5 }
+};
+function HumaChallenge({
+  challengeId,
+  type,
+  payload,
+  apiKey,
+  endpoint,
+  onPassed,
+  onFailed,
+  onBlocked
+}) {
+  const [loading, setLoading] = (0, import_react.useState)(false);
+  const [error, setError] = (0, import_react.useState)(null);
+  const [attemptsLeft, setAttemptsLeft] = (0, import_react.useState)(3);
+  const [userSequence, setUserSequence] = (0, import_react.useState)([]);
+  const [showingSequence, setShowingSequence] = (0, import_react.useState)(type === "pattern");
+  const [highlightedDot, setHighlightedDot] = (0, import_react.useState)(null);
+  (0, import_react.useEffect)(() => {
+    if (type !== "pattern" || !payload.sequence) return;
+    let i = 0;
+    const interval = setInterval(() => {
+      var _a;
+      setHighlightedDot((_a = payload.sequence[i]) != null ? _a : null);
+      i++;
+      if (i > payload.sequence.length) {
+        clearInterval(interval);
+        setShowingSequence(false);
+        setHighlightedDot(null);
+      }
+    }, 700);
+    return () => clearInterval(interval);
+  }, []);
+  const submitAnswer = async (answer) => {
+    var _a, _b;
+    setLoading(true);
+    setError(null);
+    const verifyEndpoint = (endpoint != null ? endpoint : "https://humaverify.com").replace(/\/api\/v1\/verify$/, "").replace(/\/$/, "") + "/api/v1/challenge/verify";
+    try {
+      const res = await fetch(verifyEndpoint, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${apiKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({ challenge_id: challengeId, answer })
+      });
+      const data = await res.json();
+      if (data.passed) {
+        onPassed(data.token);
+      } else {
+        const remaining = (_a = data.attempts_remaining) != null ? _a : 0;
+        setAttemptsLeft(remaining);
+        setError((_b = data.message) != null ? _b : "Incorrect");
+        onFailed == null ? void 0 : onFailed(data);
+        if (remaining <= 0) onBlocked == null ? void 0 : onBlocked();
+        if (type === "pattern") setUserSequence([]);
+      }
+    } catch (e) {
+      setError("Network error \u2014 please try again");
+    } finally {
+      setLoading(false);
+    }
+  };
+  const handleTargetClick = (targetId) => {
+    if (loading) return;
+    submitAnswer(targetId);
+  };
+  const handleDotClick = (dot) => {
+    if (loading || showingSequence) return;
+    const next = [...userSequence, dot];
+    setUserSequence(next);
+    if (payload.sequence && next.length === payload.sequence.length) {
+      submitAnswer(next.join("-"));
+    }
+  };
+  const containerStyle = {
+    fontFamily: "'DM Mono', 'Courier New', monospace",
+    background: "#0d0d0d",
+    border: "1px solid rgba(125,211,168,0.2)",
+    padding: "24px",
+    maxWidth: 360,
+    color: "#e2e8f0"
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: containerStyle, role: "dialog", "aria-label": "Human verification challenge", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 10, letterSpacing: "0.15em", textTransform: "uppercase", color: "rgba(125,211,168,0.7)", marginBottom: 4 }, children: "HUMA \u2014 Step-up Verification" }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 13, color: "#e2e8f0", marginBottom: 20, lineHeight: 1.5 }, children: showingSequence ? "Watch the sequence..." : payload.instruction }),
+    type === "click_targets" && payload.targets && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { position: "relative", width: "100%", paddingTop: "80%", background: "#161616", border: "1px solid #2d2d2d", marginBottom: 16 }, children: payload.targets.map((t) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      "button",
+      {
+        onClick: () => handleTargetClick(t.id),
+        disabled: loading,
+        style: {
+          position: "absolute",
+          left: `${t.x}%`,
+          top: `${t.y}%`,
+          transform: "translate(-50%, -50%)",
+          fontSize: 28,
+          background: "transparent",
+          border: "none",
+          cursor: loading ? "default" : "pointer",
+          padding: 8,
+          borderRadius: 8,
+          transition: "transform 0.1s"
+        },
+        "aria-label": `Target ${t.label}`,
+        children: t.label
+      },
+      t.id
+    )) }),
+    type === "pattern" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { position: "relative", width: "100%", paddingTop: "100%", background: "#161616", border: "1px solid #2d2d2d", borderRadius: 4, marginBottom: 16 }, children: [1, 2, 3, 4, 5, 6, 7, 8, 9].map((dot) => {
+      const pos = DOT_POSITIONS[dot];
+      const isActive = userSequence.includes(dot);
+      const isHl = highlightedDot === dot;
+      const size = 18;
+      return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "button",
+        {
+          onClick: () => handleDotClick(dot),
+          disabled: loading || showingSequence || isActive,
+          style: {
+            position: "absolute",
+            left: `${pos.x}%`,
+            top: `${pos.y}%`,
+            transform: "translate(-50%, -50%)",
+            width: size,
+            height: size,
+            borderRadius: "50%",
+            background: isHl ? "rgba(125,211,168,0.9)" : isActive ? "rgba(125,211,168,0.5)" : "rgba(255,255,255,0.15)",
+            border: isHl ? "2px solid #7dd3a8" : "2px solid transparent",
+            cursor: loading || showingSequence || isActive ? "default" : "pointer",
+            transition: "background 0.15s, border 0.15s"
+          },
+          "aria-label": `Dot ${dot}`
+        },
+        dot
+      );
+    }) }),
+    error && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { fontSize: 11, color: "#f87171", marginBottom: 12, letterSpacing: "0.05em" }, children: [
+      error,
+      attemptsLeft > 0 ? ` \u2014 ${attemptsLeft} attempt${attemptsLeft !== 1 ? "s" : ""} remaining` : ""
+    ] }),
+    loading && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 11, color: "rgba(125,211,168,0.7)", letterSpacing: "0.08em" }, children: "Verifying\u2026" }),
+    type === "pattern" && !showingSequence && userSequence.length > 0 && !loading && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+      "button",
+      {
+        onClick: () => setUserSequence([]),
+        style: { fontSize: 10, color: "#64748b", background: "transparent", border: "none", cursor: "pointer", letterSpacing: "0.08em" },
+        children: "Reset pattern"
+      }
+    ),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontSize: 9, color: "#334155", marginTop: 16, letterSpacing: "0.05em" }, children: "Secured by HUMA \xB7 humaverify.com" })
+  ] });
+}
 function HumaVerifyButton({
   apiKey,
   userId,
@@ -320,6 +558,7 @@ function HumaVerifyButton({
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  HumaChallenge,
   HumaGate,
   HumaProvider,
   HumaVerifyButton,