@atlasauth/js 0.10.0 → 0.12.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # @atlasauth/js changelog
 
+## 0.12.0
+- **New: SDK identity and advisories.** `FapiClientOptions.sdk?: AtlasSdkInfo` (`{ name, version }`, default
+  `@atlasauth/js`) is sent as `X-Atlas-SDK: <name>/<version>`; an `Atlas-SDK-Advisory` response header is logged once
+  per advisory per page load. New exports: `ATLAS_JS_VERSION`, `ATLAS_JS_SDK`, `AtlasSdkInfo`, `SDK_HEADER`,
+  `SDK_ADVISORY_HEADER`, `sdkHeaderValue()`, `parseSdkAdvisory()`, `reportSdkAdvisory()`, `resetSdkAdvisoryLog()`,
+  `SdkAdvisoryNotice`.
+- **New: sign-out events.** `SignOutNotifier` (`subscribe`, `expect(reason)`, `clear`, `signedOut(sessionId, fallback?)`),
+  `SignOutEvent` (`{ reason, sessionId }`), `SignOutReason` (`'user' | 'other_tab' | 'session_expired' | 'revoked' |
+  'unknown'`), `SignOutListener`, `SIGN_OUT_EVENT` (`'atlas:signout'`), `dispatchSignOutEvent()`, `onAtlasSignOut()` and
+  `signOutReasonFromClient()` (reads the new `signed_out_reason` of a signed-out `GET /v1/client`). Every framework
+  provider drives one.
+- **New: `getTemplateToken(client, sessionId, template)`** → `{ jwt, expiresIn } | null` (`getToken({ template })`), and
+  **`getForumulateReaderToken(client, spaceId?)`** → `{ jwt, expiresIn, orgId, spaceId, redeemUrl } | null`
+  (`GET /v1/client/forumulate/reader_token`).
+- **New: the Atlas captcha (provider `atlas`).** Atlas's own captcha needs no provider account or keys.
+  `renderCaptchaWidget` (and so every prebuilt form using `createCaptchaController`) draws it when a flow's provider is
+  `atlas`: it fetches a challenge, solves the proof of work in Web Workers (on the page when workers are blocked) and
+  shows the shape-matching step only when the server asks for it, with an accessible alternative.
+- **New exports:** `renderAtlasCaptcha(container, { fetchChallenge?, challengeUrl?, mode?, labels?, workers? })` →
+  `{ token: Promise<string>; stale(): boolean; remove(): void }`, `solveAtlasChallenge(challenge, { workers?, cancelled? })`
+  → `Promise<{ n, worker }>`, `searchAtlasRange`, `fetchAtlasChallenge(url, accessible?)`, `encodeAtlasToken(solution)`,
+  `ATLAS_CAPTCHA_LABELS`, types `AtlasChallenge`, `AtlasCaptchaOptions`, `AtlasCaptchaLabels`, `AtlasCaptchaHandle`.
+- **Added `FlowCaptcha.challengeUrl?: string`** (read from `/v1/appearance` `captchaFlows[flow].challengeUrl`).
+- **Added `CaptchaWidgetHandle.stale?(): boolean`**: a solved token about to expire unspent; the captcha controller
+  draws a fresh widget instead of sending it.
+- **Added an optional third argument to `renderCaptchaWidget` / `getCaptchaToken`:** `{ atlas?: { fetchChallenge?, labels?, workers? } }`.
+- `captcha(client).protect(el, action?)` supports `atlas` (the challenge is fetched through the client).
+- **New: `atlasCaptchaLabels(lookup)`** → `Partial<AtlasCaptchaLabels>` from a translator or a flat catalog (keys in
+  `ATLAS_CAPTCHA_LABEL_KEYS`, e.g. `captcha.puzzleTile`); unknown or echoed keys keep the English default.
+- **New: second argument to `createCaptchaController(initial?, settings?)`**: `{ atlasLabels?: () => Partial<AtlasCaptchaLabels> }`,
+  read each time a widget is drawn. New type `CaptchaControllerSettings`.
+
+## 0.11.0
+- **New: `fetchAtlasInitialState({ publishableKey, frontendApi, fetchImpl?, init?, timeoutMs? })`** →
+  `Promise<AtlasInitialState>` (`{ appearance?: unknown; environment?: unknown }`). Fetches `/v1/appearance` and
+  `/v1/client/environment` in parallel on the server, for a provider's `initialState`. Never throws: a part that
+  fails or takes longer than `timeoutMs` (default 1500) is left out. `init` is passed to both requests (for example
+  `{ next: { revalidate: 60 } }`).
+- New types `AtlasInitialState` and `FetchInitialStateOptions`.
+
 ## 0.10.0
 - **New: `planFirstFactor(offered)`** → `{ password: boolean; email: ('email_code' | 'email_link')[]; autoSend: 'email_code' | 'email_link' | null }`.
   The rule every prebuilt sign-in form follows: a password field only when the server offers `password`; with no

package/dist/atlas-captcha.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Atlas's own captcha (provider `atlas`), the browser half. Dependency-free.
+ *
+ * No third-party script and no site key: the widget fetches a signed,
+ * single-use challenge from the instance's Frontend API, finds the number `n`
+ * with SHA-256(salt + n) = challenge (proof of work, in Web Workers via
+ * `crypto.subtle`, falling back to the page thread when workers are blocked),
+ * and, only when the server decided the request looks risky, shows a
+ * "select every matching shape" step with an accessible alternative (more
+ * work instead of the puzzle). The flow's request then carries
+ * `atlas1.<base64url JSON>` as `captcha_token`.
+ *
+ * Invisible by default: at low risk nothing is drawn and the work takes a
+ * fraction of a second.
+ */
+/** A challenge, exactly as `GET /v1/client/captcha/challenge` returns it. */
+export interface AtlasChallenge {
+    object: 'captcha_challenge';
+    provider: 'atlas';
+    token: string;
+    algorithm: 'SHA-256';
+    salt: string;
+    challenge: string;
+    maxnumber: number;
+    expires_at: string;
+    interactive: {
+        kind: 'match_shapes';
+        example: string;
+        tiles: string[];
+    } | null;
+    accessible_alternative: boolean;
+}
+/** The words the widget shows. English defaults; pass your own to localise. */
+export interface AtlasCaptchaLabels {
+    checking: string;
+    verified: string;
+    puzzlePrompt: string;
+    confirm: string;
+    /** `{n}` is the tile number. */
+    tile: string;
+    alternative: string;
+}
+export declare const ATLAS_CAPTCHA_LABELS: AtlasCaptchaLabels;
+/**
+ * The catalog keys of the widget's words, as in `@atlasauth/localizations` and
+ * every SDK's built-in catalog.
+ */
+export declare const ATLAS_CAPTCHA_LABEL_KEYS: Readonly<Record<keyof AtlasCaptchaLabels, string>>;
+/**
+ * The widget's labels from a form's translator (or any catalog lookup). A key
+ * the lookup does not know (no value, or the key echoed back) keeps the English
+ * default.
+ */
+export declare function atlasCaptchaLabels(lookup: ((key: string) => string | null | undefined) | Readonly<Record<string, unknown>> | null | undefined): Partial<AtlasCaptchaLabels>;
+export interface AtlasCaptchaOptions {
+    /**
+     * Fetch a fresh challenge. Defaults to a GET of the flow's `challengeUrl`
+     * (from `/v1/appearance`). `accessible` asks for the no-puzzle alternative.
+     */
+    fetchChallenge?: (accessible: boolean) => Promise<AtlasChallenge>;
+    /** Where the default fetcher GETs (the flow's `challengeUrl`). */
+    challengeUrl?: string;
+    /**
+     * `managed` (default) solves as soon as it is drawn and shows nothing unless
+     * the puzzle is needed; `invisible` is the same, drawn only at submit;
+     * `visible` always shows the check (and the server always adds the puzzle).
+     */
+    mode?: 'invisible' | 'managed' | 'visible';
+    labels?: Partial<AtlasCaptchaLabels>;
+    /** Use Web Workers when available (default true). */
+    workers?: boolean;
+}
+/**
+ * Search [from, to] for n with SHA-256(salt + n) = challenge, on this thread.
+ * Each batch awaits `crypto.subtle`, so the page stays responsive.
+ */
+export declare function searchAtlasRange(c: Pick<AtlasChallenge, 'salt' | 'challenge'>, from: number, to: number, cancelled?: () => boolean): Promise<number | null>;
+/**
+ * Solve a challenge's proof of work. Splits the range over up to four Web
+ * Workers; when workers cannot start (a CSP without `worker-src blob:`, an old
+ * browser) it searches on this thread instead. Resolves `{ n, worker }`.
+ */
+export declare function solveAtlasChallenge(c: Pick<AtlasChallenge, 'salt' | 'challenge' | 'maxnumber'>, opts?: {
+    workers?: boolean;
+    cancelled?: () => boolean;
+}): Promise<{
+    n: number;
+    worker: boolean;
+}>;
+/** Encode a solution as the `captcha_token` the flow's request carries. */
+export declare function encodeAtlasToken(s: {
+    t: string;
+    n: number;
+    ms?: number;
+    w?: 0 | 1;
+    sel?: number;
+}): string;
+/** GET a challenge from a URL (the flow's `challengeUrl`). */
+export declare function fetchAtlasChallenge(url: string, accessible?: boolean): Promise<AtlasChallenge>;
+/** A drawn Atlas captcha: its token, whether it is about to expire, and teardown. */
+export interface AtlasCaptchaHandle {
+    token: Promise<string>;
+    /** True once the solved challenge is within 15 s of expiring: draw a fresh one. */
+    stale(): boolean;
+    remove(): void;
+}
+/** Render Atlas's captcha into `container` and resolve the `captcha_token`. */
+export declare function renderAtlasCaptcha(container: HTMLElement, opts: AtlasCaptchaOptions): AtlasCaptchaHandle;

package/dist/atlas-captcha.js

@@ -0,0 +1,315 @@
+"use strict";
+/**
+ * Atlas's own captcha (provider `atlas`), the browser half. Dependency-free.
+ *
+ * No third-party script and no site key: the widget fetches a signed,
+ * single-use challenge from the instance's Frontend API, finds the number `n`
+ * with SHA-256(salt + n) = challenge (proof of work, in Web Workers via
+ * `crypto.subtle`, falling back to the page thread when workers are blocked),
+ * and, only when the server decided the request looks risky, shows a
+ * "select every matching shape" step with an accessible alternative (more
+ * work instead of the puzzle). The flow's request then carries
+ * `atlas1.<base64url JSON>` as `captcha_token`.
+ *
+ * Invisible by default: at low risk nothing is drawn and the work takes a
+ * fraction of a second.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ATLAS_CAPTCHA_LABEL_KEYS = exports.ATLAS_CAPTCHA_LABELS = void 0;
+exports.atlasCaptchaLabels = atlasCaptchaLabels;
+exports.searchAtlasRange = searchAtlasRange;
+exports.solveAtlasChallenge = solveAtlasChallenge;
+exports.encodeAtlasToken = encodeAtlasToken;
+exports.fetchAtlasChallenge = fetchAtlasChallenge;
+exports.renderAtlasCaptcha = renderAtlasCaptcha;
+exports.ATLAS_CAPTCHA_LABELS = {
+    checking: 'Checking your browser…',
+    verified: 'Security check complete.',
+    puzzlePrompt: "Select every picture that shows the same shape as this one. Colour and size don't matter.",
+    confirm: 'Confirm',
+    tile: 'Picture {n}',
+    alternative: "Can't do the picture check? Use a longer automatic check instead.",
+};
+/**
+ * The catalog keys of the widget's words, as in `@atlasauth/localizations` and
+ * every SDK's built-in catalog.
+ */
+exports.ATLAS_CAPTCHA_LABEL_KEYS = {
+    checking: 'captcha.checking',
+    verified: 'captcha.verified',
+    puzzlePrompt: 'captcha.puzzlePrompt',
+    confirm: 'captcha.puzzleConfirm',
+    tile: 'captcha.puzzleTile',
+    alternative: 'captcha.puzzleAlternative',
+};
+/**
+ * The widget's labels from a form's translator (or any catalog lookup). A key
+ * the lookup does not know (no value, or the key echoed back) keeps the English
+ * default.
+ */
+function atlasCaptchaLabels(lookup) {
+    if (!lookup)
+        return {};
+    const get = typeof lookup === 'function' ? lookup : (key) => lookup[key];
+    const out = {};
+    for (const [field, key] of Object.entries(exports.ATLAS_CAPTCHA_LABEL_KEYS)) {
+        const value = get(key);
+        if (typeof value === 'string' && value.trim() && value !== key)
+            out[field] = value;
+    }
+    return out;
+}
+const hex = (buf) => {
+    const b = new Uint8Array(buf);
+    let s = '';
+    for (let i = 0; i < b.length; i++)
+        s += (b[i] < 16 ? '0' : '') + b[i].toString(16);
+    return s;
+};
+const BATCH = 2000;
+/**
+ * Search [from, to] for n with SHA-256(salt + n) = challenge, on this thread.
+ * Each batch awaits `crypto.subtle`, so the page stays responsive.
+ */
+async function searchAtlasRange(c, from, to, cancelled = () => false) {
+    const enc = new TextEncoder();
+    for (let start = from; start <= to; start += BATCH) {
+        if (cancelled())
+            return null;
+        const end = Math.min(to, start + BATCH - 1);
+        const batch = [];
+        for (let n = start; n <= end; n++)
+            batch.push(crypto.subtle.digest('SHA-256', enc.encode(`${c.salt}${n}`)));
+        const hashes = await Promise.all(batch);
+        for (let i = 0; i < hashes.length; i++)
+            if (hex(hashes[i]) === c.challenge)
+                return start + i;
+    }
+    return null;
+}
+/** The worker: the same search, posted back as { n }. Kept as a string so it ships with no bundler setup. */
+const WORKER_SOURCE = `
+self.onmessage = async function (e) {
+  var d = e.data, enc = new TextEncoder();
+  function hex(buf) { var b = new Uint8Array(buf), s = ''; for (var i = 0; i < b.length; i++) s += (b[i] < 16 ? '0' : '') + b[i].toString(16); return s; }
+  for (var start = d.from; start <= d.to; start += ${BATCH}) {
+    var end = Math.min(d.to, start + ${BATCH} - 1), batch = [];
+    for (var n = start; n <= end; n++) batch.push(crypto.subtle.digest('SHA-256', enc.encode(d.salt + n)));
+    var hs = await Promise.all(batch);
+    for (var i = 0; i < hs.length; i++) if (hex(hs[i]) === d.challenge) { self.postMessage({ n: start + i }); return; }
+  }
+  self.postMessage({ n: null });
+};`;
+/**
+ * Solve a challenge's proof of work. Splits the range over up to four Web
+ * Workers; when workers cannot start (a CSP without `worker-src blob:`, an old
+ * browser) it searches on this thread instead. Resolves `{ n, worker }`.
+ */
+async function solveAtlasChallenge(c, opts = {}) {
+    const cancelled = opts.cancelled ?? (() => false);
+    const g = globalThis;
+    if (opts.workers !== false && g.Worker && g.Blob && g.URL?.createObjectURL) {
+        const viaWorkers = await solveInWorkers(c, Math.max(1, Math.min(4, g.navigator?.hardwareConcurrency ?? 2)), cancelled).catch(() => undefined);
+        if (viaWorkers !== undefined) {
+            if (viaWorkers === null)
+                throw new Error('captcha: no solution');
+            return { n: viaWorkers, worker: true };
+        }
+    }
+    const n = await searchAtlasRange(c, 0, c.maxnumber, cancelled);
+    if (n === null)
+        throw new Error(cancelled() ? 'captcha: cancelled' : 'captcha: no solution');
+    return { n, worker: false };
+}
+function solveInWorkers(c, count, cancelled) {
+    const url = URL.createObjectURL(new Blob([WORKER_SOURCE], { type: 'text/javascript' }));
+    const workers = [];
+    const stop = () => {
+        for (const w of workers)
+            w.terminate();
+        URL.revokeObjectURL(url);
+    };
+    return new Promise((resolve, reject) => {
+        let pending = count;
+        const span = Math.ceil((c.maxnumber + 1) / count);
+        const poll = setInterval(() => {
+            if (cancelled()) {
+                clearInterval(poll);
+                stop();
+                resolve(null);
+            }
+        }, 100);
+        const finish = (value) => {
+            clearInterval(poll);
+            stop();
+            if (value instanceof Error)
+                reject(value);
+            else
+                resolve(value);
+        };
+        try {
+            for (let i = 0; i < count; i++) {
+                const w = new Worker(url);
+                workers.push(w);
+                w.onmessage = (e) => {
+                    if (typeof e.data?.n === 'number')
+                        finish(e.data.n);
+                    else if (--pending === 0)
+                        finish(null);
+                };
+                w.onerror = () => finish(new Error('captcha: worker failed'));
+                const from = i * span;
+                w.postMessage({ salt: c.salt, challenge: c.challenge, from, to: Math.min(c.maxnumber, from + span - 1) });
+            }
+        }
+        catch (e) {
+            finish(e instanceof Error ? e : new Error('captcha: worker failed'));
+        }
+    });
+}
+const b64url = (text) => {
+    const bytes = new TextEncoder().encode(text);
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+};
+/** Encode a solution as the `captcha_token` the flow's request carries. */
+function encodeAtlasToken(s) {
+    return `atlas1.${b64url(JSON.stringify(s))}`;
+}
+/** GET a challenge from a URL (the flow's `challengeUrl`). */
+async function fetchAtlasChallenge(url, accessible = false) {
+    const u = accessible ? `${url}${url.includes('?') ? '&' : '?'}accessible=true` : url;
+    const res = await fetch(u, { method: 'GET', credentials: 'omit' });
+    if (!res.ok)
+        throw new Error(`captcha: challenge refused (${res.status})`);
+    return (await res.json());
+}
+function svgImage(doc, svg) {
+    const img = doc.createElement('img');
+    // A data: image never runs script, whatever the markup.
+    img.src = `data:image/svg+xml;base64,${btoa(unescape(encodeURIComponent(svg)))}`;
+    img.alt = '';
+    img.width = 64;
+    img.height = 64;
+    img.style.cssText = 'display:block;width:64px;height:64px;border-radius:6px';
+    return img;
+}
+/** Draw the shape-matching step; resolves the tile mask, or 'accessible'. */
+function askPuzzle(box, c, labels, cancelled) {
+    const doc = box.ownerDocument;
+    return new Promise((resolve, reject) => {
+        box.replaceChildren();
+        const wrap = doc.createElement('div');
+        wrap.setAttribute('role', 'group');
+        wrap.setAttribute('data-atlas-captcha-puzzle', '');
+        wrap.style.cssText = 'display:flex;flex-direction:column;align-items:center;gap:8px';
+        const prompt = doc.createElement('p');
+        prompt.style.cssText = 'margin:0;font-size:13px;text-align:center';
+        prompt.textContent = labels.puzzlePrompt;
+        wrap.append(prompt, svgImage(doc, c.interactive.example));
+        const grid = doc.createElement('div');
+        grid.style.cssText = 'display:grid;grid-template-columns:repeat(3,72px);gap:6px';
+        let mask = 0;
+        c.interactive.tiles.forEach((svg, i) => {
+            const b = doc.createElement('button');
+            b.type = 'button';
+            b.setAttribute('aria-pressed', 'false');
+            b.setAttribute('aria-label', labels.tile.replace('{n}', String(i + 1)));
+            b.setAttribute('data-atlas-captcha-tile', String(i));
+            b.style.cssText = 'padding:3px;border:2px solid transparent;border-radius:8px;background:none;cursor:pointer';
+            b.append(svgImage(doc, svg));
+            b.addEventListener('click', () => {
+                mask ^= 1 << i;
+                const on = (mask & (1 << i)) !== 0;
+                b.setAttribute('aria-pressed', on ? 'true' : 'false');
+                b.style.borderColor = on ? 'currentColor' : 'transparent';
+            });
+            grid.append(b);
+        });
+        const ok = doc.createElement('button');
+        ok.type = 'button';
+        ok.setAttribute('data-atlas-captcha-confirm', '');
+        ok.textContent = labels.confirm;
+        ok.addEventListener('click', () => (cancelled() ? reject(new Error('captcha: widget removed')) : resolve(mask)));
+        wrap.append(grid, ok);
+        if (c.accessible_alternative) {
+            const alt = doc.createElement('button');
+            alt.type = 'button';
+            alt.setAttribute('data-atlas-captcha-alternative', '');
+            alt.style.cssText = 'font-size:12px;background:none;border:0;text-decoration:underline;cursor:pointer';
+            alt.textContent = labels.alternative;
+            alt.addEventListener('click', () => resolve('accessible'));
+            wrap.append(alt);
+        }
+        box.append(wrap);
+    });
+}
+/** Render Atlas's captcha into `container` and resolve the `captcha_token`. */
+function renderAtlasCaptcha(container, opts) {
+    const labels = { ...exports.ATLAS_CAPTCHA_LABELS, ...opts.labels };
+    const mode = opts.mode ?? 'managed';
+    const doc = container.ownerDocument;
+    const fetchChallenge = opts.fetchChallenge ??
+        ((accessible) => {
+            if (!opts.challengeUrl)
+                return Promise.reject(new Error('captcha: no challenge URL'));
+            return fetchAtlasChallenge(opts.challengeUrl, accessible);
+        });
+    let removed = false;
+    let expiresAt = 0;
+    const cancelled = () => removed;
+    const box = doc.createElement('div');
+    box.setAttribute('role', 'status');
+    box.setAttribute('aria-live', 'polite');
+    box.setAttribute('data-atlas-captcha-provider', 'atlas');
+    box.style.cssText = 'font-size:13px;opacity:.85;text-align:center';
+    container.append(box);
+    const say = (text) => {
+        box.replaceChildren();
+        box.textContent = text;
+    };
+    const run = async (accessible) => {
+        const c = await fetchChallenge(accessible);
+        if (removed)
+            throw new Error('captcha: widget removed');
+        expiresAt = Date.parse(c.expires_at) || 0;
+        if (mode === 'visible' || c.interactive)
+            say(labels.checking);
+        const started = Date.now();
+        const work = solveAtlasChallenge(c, { workers: opts.workers, cancelled }).then((r) => ({
+            ...r,
+            ms: Date.now() - started,
+        }));
+        // A rejection here is reported by whichever await reads it.
+        work.catch(() => undefined);
+        let sel;
+        if (c.interactive) {
+            const answer = await askPuzzle(box, c, labels, cancelled);
+            if (answer === 'accessible') {
+                say(labels.checking);
+                return run(true);
+            }
+            sel = answer;
+            say(labels.checking);
+        }
+        const { n, worker, ms } = await work;
+        if (removed)
+            throw new Error('captcha: widget removed');
+        if (mode === 'visible' || sel !== undefined)
+            say(labels.verified);
+        return encodeAtlasToken({ t: c.token, n, ms, ...(worker ? { w: 1 } : {}), ...(sel !== undefined ? { sel } : {}) });
+    };
+    const token = run(false);
+    token.catch(() => undefined);
+    return {
+        token,
+        stale: () => expiresAt > 0 && Date.now() > expiresAt - 15_000,
+        remove() {
+            removed = true;
+            box.remove();
+        },
+    };
+}
+//# sourceMappingURL=atlas-captcha.js.map

package/dist/atlas-captcha.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlas-captcha.js","sourceRoot":"","sources":["../src/atlas-captcha.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAsDH,gDAWC;AAkCD,4CAgBC;AAqBD,kDAuBC;AAuDD,4CAEC;AAGD,kDAKC;AA8ED,gDA+DC;AAlVY,QAAA,oBAAoB,GAAuB;IACtD,QAAQ,EAAE,wBAAwB;IAClC,QAAQ,EAAE,0BAA0B;IACpC,YAAY,EAAE,2FAA2F;IACzG,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mEAAmE;CACjF,CAAC;AAEF;;;GAGG;AACU,QAAA,wBAAwB,GAAuD;IAC1F,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,YAAY,EAAE,sBAAsB;IACpC,OAAO,EAAE,uBAAuB;IAChC,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,2BAA2B;CACzC,CAAC;AAEF;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,MAA2G;IAE3G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjF,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gCAAwB,CAAyC,EAAE,CAAC;QAC5G,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,GAAG;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACrF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAqBD,MAAM,GAAG,GAAG,CAAC,GAAgB,EAAE,EAAE;IAC/B,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,CAAC;AAEnB;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CACpC,CAA6C,EAC7C,IAAY,EACZ,EAAU,EACV,YAA2B,GAAG,EAAE,CAAC,KAAK;IAEtC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,KAAK,EAAE,CAAC;QACnD,IAAI,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,SAAS;gBAAE,OAAO,KAAK,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6GAA6G;AAC7G,MAAM,aAAa,GAAG;;;;qDAI+B,KAAK;uCACnB,KAAK;;;;;;GAMzC,CAAC;AAEJ;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CACvC,CAA2D,EAC3D,OAAyD,EAAE;IAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,UAKT,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;QAC3E,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,mBAAmB,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAC1H,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,UAAU,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CACrB,CAA2D,EAC3D,KAAa,EACb,SAAwB;IAExB,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,aAAa,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,EAAE,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,MAAM,GAAG,CAAC,KAA4B,EAAE,EAAE;YAC9C,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,EAAE,CAAC;YACP,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACrC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAqC,EAAE,EAAE;oBACtD,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;yBAC/C,IAAI,EAAE,OAAO,KAAK,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,CAAC,CAAC;gBACF,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;gBACtB,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC,CAAC;AAEF,2EAA2E;AAC3E,SAAgB,gBAAgB,CAAC,CAAiE;IAChG,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,8DAA8D;AACvD,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,UAAU,GAAG,KAAK;IACvE,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,wDAAwD;IACxD,GAAG,CAAC,GAAG,GAAG,6BAA6B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IACb,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;IACf,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,wDAAwD,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAChB,GAAgB,EAChB,CAAiB,EACjB,MAA0B,EAC1B,SAAwB;IAExB,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,eAAe,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,+DAA+D,CAAC;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,2CAA2C,CAAC;QACnE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,WAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,2DAA2D,CAAC;QACjF,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,CAAC,CAAC,WAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;YAClB,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,YAAY,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,2FAA2F,CAAC;YAC9G,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,MAAM,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACnC,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtD,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,EAAE,CAAC,IAAI,GAAG,QAAQ,CAAC;QACnB,EAAE,CAAC,YAAY,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;QAClD,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,sBAAsB,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;YACpB,GAAG,CAAC,YAAY,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,kFAAkF,CAAC;YACvG,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACrC,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,+EAA+E;AAC/E,SAAgB,kBAAkB,CAAC,SAAsB,EAAE,IAAyB;IAClF,MAAM,MAAM,GAAG,EAAE,GAAG,4BAAoB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IACpC,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC;IACpC,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc;QACnB,CAAC,CAAC,UAAmB,EAAE,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACtF,OAAO,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IAEL,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxC,GAAG,CAAC,YAAY,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;IACzD,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,8CAA8C,CAAC;IACnE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE;QAC3B,GAAG,CAAC,eAAe,EAAE,CAAC;QACtB,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,UAAmB,EAAmB,EAAE;QACzD,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW;YAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,GAAG,CAAC;YACJ,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SACzB,CAAC,CAAC,CAAC;QACJ,4DAA4D;QAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,GAAuB,CAAC;QAC5B,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrB,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YACD,GAAG,GAAG,MAAM,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC;QACrC,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO;QACL,KAAK;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM;QAC7D,MAAM;YACJ,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/captcha-controller.d.ts

@@ -1,5 +1,6 @@
 import { type FieldError } from './attempt';
 import { type FapiClient, type FlowState } from './fapi';
+import type { AtlasCaptchaLabels } from './atlas-captcha';
 import { type FlowCaptcha } from './captcha-widget';
 /**
  * The captcha half of a prebuilt sign-in / sign-up form, without a framework.
@@ -43,7 +44,16 @@ export interface CaptchaController {
     /** Remove the widget for good (component teardown). */
     destroy(): void;
 }
-export declare function createCaptchaController(initial?: CaptchaControllerOptions): CaptchaController;
+/** Settings that hold for the controller's whole life. */
+export interface CaptchaControllerSettings {
+    /**
+     * The Atlas captcha's words in the form's language, read each time a widget
+     * is drawn (so a locale switch applies to the next one). See
+     * `atlasCaptchaLabels(t)`.
+     */
+    atlasLabels?: () => Partial<AtlasCaptchaLabels>;
+}
+export declare function createCaptchaController(initial?: CaptchaControllerOptions, settings?: CaptchaControllerSettings): CaptchaController;
 /**
  * Swap the server's captcha refusals (CAPTCHA_REQUIRED / CAPTCHA_FAILED, which
  * the server ties to the `captcha_token` param) for a localized, form-level

package/dist/captcha-controller.js

@@ -9,7 +9,7 @@ const attempt_1 = require("./attempt");
 const fapi_1 = require("./fapi");
 const instance_settings_1 = require("./instance-settings");
 const captcha_widget_1 = require("./captcha-widget");
-function createCaptchaController(initial) {
+function createCaptchaController(initial, settings = {}) {
     let options = initial ?? { flow: undefined, active: false };
     let container = null;
     let handle = null;
@@ -35,7 +35,9 @@ function createCaptchaController(initial) {
         const flow = options.flow;
         if (!needed() || !flow || !container)
             return null;
-        const h = (0, captcha_widget_1.renderCaptchaWidget)(flow, container);
+        const h = (0, captcha_widget_1.renderCaptchaWidget)(flow, container, {
+            atlas: settings.atlasLabels ? { labels: settings.atlasLabels() } : undefined,
+        });
         handle = h;
         drawnKey = key();
         // Swallow here so a removed / failed widget is never an unhandled
@@ -76,7 +78,7 @@ function createCaptchaController(initial) {
             if (!needed())
                 return null;
             let h = handle;
-            if (!h || spent === h)
+            if (!h || spent === h || h.stale?.())
                 h = mount();
             if (!h)
                 return null;

package/dist/captcha-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"captcha-controller.js","sourceRoot":"","sources":["../src/captcha-controller.ts"],"names":[],"mappings":";;AAwDA,0DAqFC;AAQD,sDAcC;AAUD,oDAYC;AAaD,gDA8CC;AAQD,oCAUC;AAtQD,uCAAsD;AACtD,iCAA+E;AAC/E,2DAAoD;AACpD,qDAO0B;AA8C1B,SAAgB,uBAAuB,CAAC,OAAkC;IACxE,IAAI,OAAO,GAA6B,OAAO,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtF,IAAI,SAAS,GAAuB,IAAI,CAAC;IACzC,IAAI,MAAM,GAA+B,IAAI,CAAC;IAC9C,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,KAAK,GAA+B,IAAI,CAAC;IAC7C,2EAA2E;IAC3E,6BAA6B;IAC7B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,IAAA,oCAAmB,EAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC;IAC1E,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QACvB,OAAO,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,EAAE,IAAI,KAAK,EAAE,EAAE,CAAC;IAC9F,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,GAAG,IAAI,CAAC;QACd,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAA+B,EAAE;QAC7C,MAAM,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,CAAC,GAAG,IAAA,oCAAmB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC,CAAC;QACX,QAAQ,GAAG,GAAG,EAAE,CAAC;QACjB,kEAAkE;QAClE,+DAA+D;QAC/D,CAAC,CAAC,KAAK,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,EAAE,IAAI,KAAK,EAAE;YAAE,KAAK,EAAE,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,MAAM;YACR,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,SAAS,CAAC,IAAI;YACZ,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,EAAE,CAAC;iBAC/B,IAAI,QAAQ,KAAK,GAAG,EAAE;gBAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,EAAE;YACP,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO;YAC7B,MAAM,EAAE,CAAC;YACT,SAAS,GAAG,EAAE,CAAC;YACf,IAAI,EAAE,IAAI,MAAM,EAAE,IAAI,KAAK,EAAE;gBAAE,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,CAAC,GAAG,MAAM,CAAC;YACf,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;gBAAE,CAAC,GAAG,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC;gBAC5B,KAAK,GAAG,CAAC,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,IAAI,MAAM,KAAK,CAAC;oBAAE,KAAK,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK;QACL,OAAO;YACL,MAAM,EAAE,CAAC;YACT,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,MAAoB,EACpB,CAA0B;IAE1B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,IAAI,CAAC,IAAA,+BAAc,EAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC;SACtF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,IAAoC,EACpC,KAAgB,EAChB,iBAA6B;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,kBAAQ,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,KAAK,iBAAiB,CAAC;IAC9C,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAA,iCAAgB,EAAC,IAAI,CAAC,CAAC;QAC/E,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAgB,EAChB,MAA8B,EAC9B,IAA6F;IAE7F,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,kBAAQ,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,UAAU;YAAE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACtD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,GAAG;oBACN,GAAG,MAAM;oBACT,UAAU,EACR,UAAU,IAAI,CAAE,KAAK,CAAC,OAAiD,EAAE,UAAU,IAAI,EAAE,CAAC;oBAC5F,aAAa,EAAE,KAAK;iBACrB,CAAC;gBACF,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;iBAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,mDAAmD;gBACnD,OAAO;oBACL,KAAK,EAAE;wBACL,GAAG,KAAK;wBACR,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;qBACvE;oBACD,UAAU;iBACX,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,MAAM,IAAA,cAAO,EAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACzF,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzE,IAAI,SAAS,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,MAA8B,EAC9B,IAA0F;IAE1F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,IAAA,iCAAa,EAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"captcha-controller.js","sourceRoot":"","sources":["../src/captcha-controller.ts"],"names":[],"mappings":";;AAmEA,0DA0FC;AAQD,sDAcC;AAUD,oDAYC;AAaD,gDA8CC;AAQD,oCAUC;AAtRD,uCAAsD;AACtD,iCAA+E;AAC/E,2DAAoD;AAEpD,qDAO0B;AAwD1B,SAAgB,uBAAuB,CACrC,OAAkC,EAClC,WAAsC,EAAE;IAExC,IAAI,OAAO,GAA6B,OAAO,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtF,IAAI,SAAS,GAAuB,IAAI,CAAC;IACzC,IAAI,MAAM,GAA+B,IAAI,CAAC;IAC9C,4EAA4E;IAC5E,wCAAwC;IACxC,IAAI,KAAK,GAA+B,IAAI,CAAC;IAC7C,2EAA2E;IAC3E,6BAA6B;IAC7B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,IAAA,oCAAmB,EAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC;IAC1E,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QACvB,OAAO,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,EAAE,IAAI,KAAK,EAAE,EAAE,CAAC;IAC9F,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,MAAM,GAAG,IAAI,CAAC;QACd,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAA+B,EAAE;QAC7C,MAAM,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,CAAC,GAAG,IAAA,oCAAmB,EAAC,IAAI,EAAE,SAAS,EAAE;YAC7C,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7E,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,CAAC;QACX,QAAQ,GAAG,GAAG,EAAE,CAAC;QACjB,kEAAkE;QAClE,+DAA+D;QAC/D,CAAC,CAAC,KAAK,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,EAAE,CAAC;QACT,IAAI,MAAM,EAAE,IAAI,KAAK,EAAE;YAAE,KAAK,EAAE,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,MAAM;YACR,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,SAAS,CAAC,IAAI;YACZ,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,EAAE,CAAC;iBAC/B,IAAI,QAAQ,KAAK,GAAG,EAAE;gBAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,EAAE;YACP,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO;YAC7B,MAAM,EAAE,CAAC;YACT,SAAS,GAAG,EAAE,CAAC;YACf,IAAI,EAAE,IAAI,MAAM,EAAE,IAAI,KAAK,EAAE;gBAAE,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,CAAC,GAAG,MAAM,CAAC;YACf,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAAE,CAAC,GAAG,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC;gBAC5B,KAAK,GAAG,CAAC,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,IAAI,MAAM,KAAK,CAAC;oBAAE,KAAK,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK;QACL,OAAO;YACL,MAAM,EAAE,CAAC;YACT,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,MAAoB,EACpB,CAA0B;IAE1B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,IAAI,CAAC,IAAA,+BAAc,EAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,eAAe,GAAG,IAAI,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC;SACtF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,IAAoC,EACpC,KAAgB,EAChB,iBAA6B;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,kBAAQ,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,KAAK,iBAAiB,CAAC;IAC9C,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAA,iCAAgB,EAAC,IAAI,CAAC,CAAC;QAC/E,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAgB,EAChB,MAA8B,EAC9B,IAA6F;IAE7F,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,kBAAQ,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACvC,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,UAAU;YAAE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACtD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,GAAG;oBACN,GAAG,MAAM;oBACT,UAAU,EACR,UAAU,IAAI,CAAE,KAAK,CAAC,OAAiD,EAAE,UAAU,IAAI,EAAE,CAAC;oBAC5F,aAAa,EAAE,KAAK;iBACrB,CAAC;gBACF,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;iBAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,mDAAmD;gBACnD,OAAO;oBACL,KAAK,EAAE;wBACL,GAAG,KAAK;wBACR,IAAI,EAAE,KAAK;wBACX,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;qBACvE;oBACD,UAAU;iBACX,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,MAAM,IAAA,cAAO,EAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC;IACzF,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzE,IAAI,SAAS,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,MAA8B,EAC9B,IAA0F;IAE1F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,IAAI,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,IAAA,iCAAa,EAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/captcha-widget.d.ts

@@ -18,7 +18,11 @@
  *
  * Everything is SSR-safe: nothing touches `window`/`document` until a call that
  * renders into a DOM element.
+ *
+ * Provider `atlas` is Atlas's own captcha: no vendor script, no site key (see
+ * `atlas-captcha.ts`).
  */
+import { type AtlasCaptchaOptions } from './atlas-captcha';
 /** The flows `captchaFlows` covers. */
 export type CaptchaFlowKey = 'signUp' | 'signIn' | 'guest' | 'passwordReset';
 /** How a widget-drawing provider renders. */
@@ -35,6 +39,11 @@ export interface FlowCaptcha {
     provider?: string;
     siteKey?: string | null;
     widget?: CaptchaWidgetMode;
+    /**
+     * Provider `atlas` (Atlas's own captcha, no keys): where the widget fetches
+     * each fresh challenge. Set by `/v1/appearance`.
+     */
+    challengeUrl?: string;
 }
 /** Whether the prebuilt UIs can draw this provider's widget. */
 export declare function isRenderableCaptcha(provider?: string | null): boolean;
@@ -53,10 +62,20 @@ type Win = Window & Record<string, unknown>;
  * already present (a prior load, or a test that preset it) it resolves at once.
  */
 export declare function loadCaptchaProvider(provider: string, siteKey: string, win: Win): Promise<unknown>;
+/** Per-render options. Only Atlas's own captcha reads any today. */
+export interface RenderCaptchaOptions {
+    /** Atlas captcha: a custom challenge fetcher (e.g. through your FAPI proxy) and localised labels. */
+    atlas?: Pick<AtlasCaptchaOptions, 'fetchChallenge' | 'labels' | 'workers'>;
+}
 /** A widget rendered into a container: its eventual token, and a way to take it down. */
 export interface CaptchaWidgetHandle {
     /** Resolves with the solved token; rejects on provider error/timeout or removal. */
     token: Promise<string>;
+    /**
+     * True when the solved token is about to expire unspent (Atlas's captcha), so
+     * the caller draws a fresh widget instead of sending it. Absent: never stale.
+     */
+    stale?(): boolean;
     /**
      * Remove the widget (provider teardown + empty the container). Tokens are
      * single-use, so call this after a submit spent the token and render a fresh
@@ -70,12 +89,12 @@ export interface CaptchaWidgetHandle {
  * `container` is where a visible/managed widget draws; score providers draw
  * nothing there.
  */
-export declare function renderCaptchaWidget(flow: FlowCaptcha, container: HTMLElement): CaptchaWidgetHandle;
+export declare function renderCaptchaWidget(flow: FlowCaptcha, container: HTMLElement, options?: RenderCaptchaOptions): CaptchaWidgetHandle;
 /**
  * Obtain a captcha token for a flow: render the widget into `container` and
  * resolve its token. Rejects on provider error/timeout — the caller decides
  * whether to surface it or let the (fail-closed) server reject the tokenless
  * request.
  */
-export declare function getCaptchaToken(flow: FlowCaptcha, container: HTMLElement): Promise<string>;
+export declare function getCaptchaToken(flow: FlowCaptcha, container: HTMLElement, options?: RenderCaptchaOptions): Promise<string>;
 export {};