@businessflow/reviews 1.0.0

package/dist/server/index.js

@@ -0,0 +1,402 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/server/index.ts
+var index_exports = {};
+__export(index_exports, {
+  createCorsHeaders: () => createCorsHeaders,
+  createReviewFetchHandler: () => createReviewFetchHandler,
+  createReviewHandler: () => createReviewHandler,
+  createReviewSubmitHandler: () => createReviewSubmitHandler,
+  getRecaptchaErrorMessage: () => getRecaptchaErrorMessage,
+  handleOptions: () => handleOptions,
+  verifyRecaptcha: () => verifyRecaptcha
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/server/handler.ts
+var import_server = require("next/server");
+
+// src/server/recaptcha.ts
+async function verifyRecaptcha(token, config) {
+  if (!config.secretKey) {
+    console.warn("RECAPTCHA_SECRET_KEY not configured, skipping verification");
+    return { success: true };
+  }
+  if (!token || typeof token !== "string") {
+    return {
+      success: false,
+      errorCodes: ["missing-input-response"]
+    };
+  }
+  const timeout = config.timeoutMs || 1e4;
+  try {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeout);
+    const response = await fetch("https://www.google.com/recaptcha/api/siteverify", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({
+        secret: config.secretKey,
+        response: token
+      }),
+      signal: controller.signal
+    });
+    clearTimeout(timeoutId);
+    if (!response.ok) {
+      console.error("reCAPTCHA API returned non-OK status:", response.status);
+      return {
+        success: false,
+        errorCodes: ["recaptcha-api-error"]
+      };
+    }
+    const data = await response.json();
+    if (config.minimumScore !== void 0 && data.score !== void 0) {
+      if (data.score < config.minimumScore) {
+        return {
+          success: false,
+          score: data.score,
+          errorCodes: ["score-threshold-not-met"]
+        };
+      }
+    }
+    return {
+      success: data.success === true,
+      score: data.score,
+      action: data.action,
+      challengeTimestamp: data.challenge_ts,
+      hostname: data.hostname,
+      errorCodes: data["error-codes"] || []
+    };
+  } catch (error) {
+    if (error instanceof Error && error.name === "AbortError") {
+      console.error("reCAPTCHA verification timeout");
+      return {
+        success: false,
+        errorCodes: ["timeout-or-duplicate"]
+      };
+    }
+    console.error("reCAPTCHA verification error:", error);
+    return {
+      success: false,
+      errorCodes: ["network-error"]
+    };
+  }
+}
+function getRecaptchaErrorMessage(errorCodes) {
+  const errorMessages = {
+    "missing-input-secret": "reCAPTCHA secret key is missing",
+    "invalid-input-secret": "reCAPTCHA secret key is invalid",
+    "missing-input-response": "reCAPTCHA token is missing",
+    "invalid-input-response": "reCAPTCHA token is invalid or malformed",
+    "bad-request": "The request is invalid or malformed",
+    "timeout-or-duplicate": "reCAPTCHA verification timed out or token was already used",
+    "score-threshold-not-met": "reCAPTCHA score is below the required threshold",
+    "recaptcha-api-error": "reCAPTCHA service is unavailable",
+    "network-error": "Network error during reCAPTCHA verification"
+  };
+  if (!errorCodes || errorCodes.length === 0) {
+    return "reCAPTCHA verification failed";
+  }
+  const knownErrors = errorCodes.filter((code) => errorMessages[code]).map((code) => errorMessages[code]);
+  return knownErrors.length > 0 ? knownErrors.join(", ") : "reCAPTCHA verification failed";
+}
+
+// src/server/handler.ts
+function createReviewSubmitHandler(config) {
+  return async function reviewSubmitHandler(request) {
+    if (request.method !== "POST") {
+      return import_server.NextResponse.json(
+        { error: "Method not allowed" },
+        { status: 405, headers: { Allow: "POST" } }
+      );
+    }
+    try {
+      let body;
+      try {
+        body = await request.json();
+      } catch (parseError) {
+        return import_server.NextResponse.json(
+          { error: "Invalid JSON in request body" },
+          { status: 400 }
+        );
+      }
+      if (config.rateLimiter) {
+        const allowed = await config.rateLimiter(request);
+        if (!allowed) {
+          return import_server.NextResponse.json(
+            { error: "Too many requests. Please try again later." },
+            { status: 429 }
+          );
+        }
+      }
+      if (!body.reviewerName || typeof body.reviewerName !== "string" || body.reviewerName.trim().length === 0) {
+        return import_server.NextResponse.json(
+          { error: "Reviewer name is required" },
+          { status: 400 }
+        );
+      }
+      if (!body.reviewerEmail || typeof body.reviewerEmail !== "string" || body.reviewerEmail.trim().length === 0) {
+        return import_server.NextResponse.json(
+          { error: "Email is required" },
+          { status: 400 }
+        );
+      }
+      const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+      if (!emailRegex.test(body.reviewerEmail.trim())) {
+        return import_server.NextResponse.json(
+          { error: "Please enter a valid email address" },
+          { status: 400 }
+        );
+      }
+      if (typeof body.rating !== "number" || body.rating < 1 || body.rating > 5 || !Number.isInteger(body.rating)) {
+        return import_server.NextResponse.json(
+          { error: "Rating must be between 1 and 5 stars" },
+          { status: 400 }
+        );
+      }
+      if (config.validation) {
+        for (const [field, rules] of Object.entries(config.validation)) {
+          const value = body[field];
+          for (const rule of rules) {
+            let isValid = true;
+            let errorMessage = rule.message || "Validation failed";
+            switch (rule.type) {
+              case "required":
+                isValid = value != null && value !== "" && (typeof value !== "string" || value.trim() !== "");
+                break;
+              case "email":
+                if (value) {
+                  isValid = emailRegex.test(String(value).trim());
+                }
+                break;
+              case "rating":
+                if (value !== void 0) {
+                  isValid = typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 5;
+                }
+                break;
+              case "minLength":
+                if (value && typeof rule.value === "number") {
+                  isValid = String(value).length >= rule.value;
+                }
+                break;
+              case "maxLength":
+                if (value && typeof rule.value === "number") {
+                  isValid = String(value).length <= rule.value;
+                }
+                break;
+              case "pattern":
+                if (value && typeof rule.value === "string") {
+                  const regex = new RegExp(rule.value);
+                  isValid = regex.test(String(value));
+                }
+                break;
+              case "custom":
+                if (rule.validator) {
+                  const result = rule.validator(value);
+                  isValid = result === true;
+                  if (typeof result === "string") {
+                    errorMessage = result;
+                  }
+                }
+                break;
+            }
+            if (!isValid) {
+              return import_server.NextResponse.json(
+                { error: errorMessage },
+                { status: 400 }
+              );
+            }
+          }
+        }
+      }
+      if (config.recaptcha && body.RecaptchaToken) {
+        const recaptchaResult = await verifyRecaptcha(body.RecaptchaToken, config.recaptcha);
+        if (!recaptchaResult.success) {
+          const errorMessage = getRecaptchaErrorMessage(recaptchaResult.errorCodes || []);
+          return import_server.NextResponse.json(
+            { error: `reCAPTCHA verification failed: ${errorMessage}` },
+            { status: 400 }
+          );
+        }
+      }
+      let response;
+      try {
+        if (!config.onSubmit) {
+          return import_server.NextResponse.json(
+            { error: "Review submission not configured" },
+            { status: 500 }
+          );
+        }
+        response = await config.onSubmit(body);
+      } catch (submitError) {
+        console.error("Review submission error:", submitError);
+        if (config.onError) {
+          await config.onError(body, submitError instanceof Error ? submitError : new Error(String(submitError)));
+        }
+        return import_server.NextResponse.json(
+          { error: "Failed to submit review. Please try again." },
+          { status: 500 }
+        );
+      }
+      if (!response || typeof response !== "object") {
+        console.error("Invalid response from submit function:", response);
+        return import_server.NextResponse.json(
+          { error: "Internal server error" },
+          { status: 500 }
+        );
+      }
+      if (!response.success) {
+        const statusCode = response.message?.includes("validation") ? 400 : 500;
+        return import_server.NextResponse.json(
+          {
+            error: response.message || "Failed to submit review",
+            data: response.data
+          },
+          { status: statusCode }
+        );
+      }
+      if (config.onSuccess) {
+        try {
+          await config.onSuccess(body, response);
+        } catch (callbackError) {
+          console.error("Success callback error:", callbackError);
+        }
+      }
+      return import_server.NextResponse.json({
+        success: true,
+        message: response.message || "Review submitted successfully",
+        reviewId: response.reviewId,
+        status: response.status,
+        data: response.data
+      });
+    } catch (error) {
+      console.error("Unexpected error in review submit handler:", error);
+      if (config.onError) {
+        try {
+          await config.onError({}, error instanceof Error ? error : new Error(String(error)));
+        } catch (callbackError) {
+          console.error("Error callback failed:", callbackError);
+        }
+      }
+      return import_server.NextResponse.json(
+        { error: "Internal server error" },
+        { status: 500 }
+      );
+    }
+  };
+}
+function createReviewFetchHandler(config) {
+  return async function reviewFetchHandler(request) {
+    if (request.method !== "GET") {
+      return import_server.NextResponse.json(
+        { error: "Method not allowed" },
+        { status: 405, headers: { Allow: "GET" } }
+      );
+    }
+    try {
+      const searchParams = request.nextUrl.searchParams;
+      const params = {
+        limit: searchParams.get("limit") ? parseInt(searchParams.get("limit")) : void 0,
+        offset: searchParams.get("offset") ? parseInt(searchParams.get("offset")) : void 0,
+        featured: searchParams.get("featured") === "true" ? true : void 0,
+        minRating: searchParams.get("minRating") ? parseInt(searchParams.get("minRating")) : void 0,
+        sortBy: searchParams.get("sortBy"),
+        sortOrder: searchParams.get("sortOrder")
+      };
+      let reviews;
+      try {
+        if (!config.onFetch) {
+          return import_server.NextResponse.json(
+            { error: "Review fetching not configured" },
+            { status: 500 }
+          );
+        }
+        reviews = await config.onFetch(params);
+      } catch (fetchError) {
+        console.error("Review fetch error:", fetchError);
+        return import_server.NextResponse.json(
+          { error: "Failed to fetch reviews. Please try again." },
+          { status: 500 }
+        );
+      }
+      if (!Array.isArray(reviews)) {
+        console.error("Invalid response from fetch function, expected array:", reviews);
+        return import_server.NextResponse.json(
+          { error: "Internal server error" },
+          { status: 500 }
+        );
+      }
+      return import_server.NextResponse.json(reviews);
+    } catch (error) {
+      console.error("Unexpected error in review fetch handler:", error);
+      return import_server.NextResponse.json(
+        { error: "Internal server error" },
+        { status: 500 }
+      );
+    }
+  };
+}
+function createReviewHandler(config) {
+  const fetchHandler = createReviewFetchHandler(config);
+  const submitHandler = createReviewSubmitHandler(config);
+  return async function combinedHandler(request) {
+    if (request.method === "GET") {
+      return fetchHandler(request);
+    } else if (request.method === "POST") {
+      return submitHandler(request);
+    } else {
+      return import_server.NextResponse.json(
+        { error: "Method not allowed" },
+        { status: 405, headers: { Allow: "GET, POST" } }
+      );
+    }
+  };
+}
+function createCorsHeaders(allowedOrigins) {
+  const headers = {
+    "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+    "Access-Control-Allow-Headers": "Content-Type, Authorization"
+  };
+  if (allowedOrigins && allowedOrigins.length > 0) {
+    headers["Access-Control-Allow-Origin"] = allowedOrigins.join(", ");
+  } else {
+    headers["Access-Control-Allow-Origin"] = "*";
+  }
+  return headers;
+}
+function handleOptions(allowedOrigins) {
+  return new import_server.NextResponse(null, {
+    status: 200,
+    headers: createCorsHeaders(allowedOrigins)
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createCorsHeaders,
+  createReviewFetchHandler,
+  createReviewHandler,
+  createReviewSubmitHandler,
+  getRecaptchaErrorMessage,
+  handleOptions,
+  verifyRecaptcha
+});
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/server/index.ts","../../src/server/handler.ts","../../src/server/recaptcha.ts"],"sourcesContent":["// Server-side utilities for NextJS API routes\nexport { \n  createReviewHandler, \n  createReviewFetchHandler, \n  createReviewSubmitHandler,\n  createCorsHeaders, \n  handleOptions \n} from './handler';\nexport { verifyRecaptcha, getRecaptchaErrorMessage } from './recaptcha';\nexport type { RecaptchaConfig, RecaptchaVerificationResult } from './recaptcha';\nexport * from '../types';","import { NextRequest, NextResponse } from 'next/server';\nimport { ReviewHandlerConfig, ReviewFormData, ReviewApiResponse, Review } from '../types';\nimport { verifyRecaptcha, getRecaptchaErrorMessage } from './recaptcha';\n\n/**\n * Create a generic NextJS API route handler for review submission\n */\nexport function createReviewSubmitHandler(config: ReviewHandlerConfig) {\n  return async function reviewSubmitHandler(request: NextRequest): Promise<NextResponse> {\n    // Only allow POST requests\n    if (request.method !== 'POST') {\n      return NextResponse.json(\n        { error: 'Method not allowed' },\n        { status: 405, headers: { Allow: 'POST' } }\n      );\n    }\n\n    try {\n      // Parse request body\n      let body: ReviewFormData;\n      try {\n        body = await request.json();\n      } catch (parseError) {\n        return NextResponse.json(\n          { error: 'Invalid JSON in request body' },\n          { status: 400 }\n        );\n      }\n\n      // Rate limiting (if configured)\n      if (config.rateLimiter) {\n        const allowed = await config.rateLimiter(request);\n        if (!allowed) {\n          return NextResponse.json(\n            { error: 'Too many requests. Please try again later.' },\n            { status: 429 }\n          );\n        }\n      }\n\n      // Validate required fields (basic validation)\n      if (!body.reviewerName || typeof body.reviewerName !== 'string' || body.reviewerName.trim().length === 0) {\n        return NextResponse.json(\n          { error: 'Reviewer name is required' },\n          { status: 400 }\n        );\n      }\n\n      if (!body.reviewerEmail || typeof body.reviewerEmail !== 'string' || body.reviewerEmail.trim().length === 0) {\n        return NextResponse.json(\n          { error: 'Email is required' },\n          { status: 400 }\n        );\n      }\n\n      // Email format validation\n      const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n      if (!emailRegex.test(body.reviewerEmail.trim())) {\n        return NextResponse.json(\n          { error: 'Please enter a valid email address' },\n          { status: 400 }\n        );\n      }\n\n      // Rating validation\n      if (typeof body.rating !== 'number' || body.rating < 1 || body.rating > 5 || !Number.isInteger(body.rating)) {\n        return NextResponse.json(\n          { error: 'Rating must be between 1 and 5 stars' },\n          { status: 400 }\n        );\n      }\n\n      // Custom validation (if configured)\n      if (config.validation) {\n        for (const [field, rules] of Object.entries(config.validation)) {\n          const value = (body as any)[field];\n          \n          for (const rule of rules) {\n            let isValid = true;\n            let errorMessage = rule.message || 'Validation failed';\n\n            switch (rule.type) {\n              case 'required':\n                isValid = value != null && value !== '' && \n                         (typeof value !== 'string' || value.trim() !== '');\n                break;\n              \n              case 'email':\n                if (value) {\n                  isValid = emailRegex.test(String(value).trim());\n                }\n                break;\n              \n              case 'rating':\n                if (value !== undefined) {\n                  isValid = typeof value === 'number' && Number.isInteger(value) && value >= 1 && value <= 5;\n                }\n                break;\n              \n              case 'minLength':\n                if (value && typeof rule.value === 'number') {\n                  isValid = String(value).length >= rule.value;\n                }\n                break;\n              \n              case 'maxLength':\n                if (value && typeof rule.value === 'number') {\n                  isValid = String(value).length <= rule.value;\n                }\n                break;\n              \n              case 'pattern':\n                if (value && typeof rule.value === 'string') {\n                  const regex = new RegExp(rule.value);\n                  isValid = regex.test(String(value));\n                }\n                break;\n              \n              case 'custom':\n                if (rule.validator) {\n                  const result = rule.validator(value);\n                  isValid = result === true;\n                  if (typeof result === 'string') {\n                    errorMessage = result;\n                  }\n                }\n                break;\n            }\n\n            if (!isValid) {\n              return NextResponse.json(\n                { error: errorMessage },\n                { status: 400 }\n              );\n            }\n          }\n        }\n      }\n\n      // reCAPTCHA verification (if configured)\n      if (config.recaptcha && (body as any).RecaptchaToken) {\n        const recaptchaResult = await verifyRecaptcha((body as any).RecaptchaToken, config.recaptcha);\n        \n        if (!recaptchaResult.success) {\n          const errorMessage = getRecaptchaErrorMessage(recaptchaResult.errorCodes || []);\n          return NextResponse.json(\n            { error: `reCAPTCHA verification failed: ${errorMessage}` },\n            { status: 400 }\n          );\n        }\n      }\n\n      // Call the user-provided submit function\n      let response: ReviewApiResponse;\n      try {\n        if (!config.onSubmit) {\n          return NextResponse.json(\n            { error: 'Review submission not configured' },\n            { status: 500 }\n          );\n        }\n\n        response = await config.onSubmit(body);\n      } catch (submitError) {\n        console.error('Review submission error:', submitError);\n        \n        // Call error callback if provided\n        if (config.onError) {\n          await config.onError(body, submitError instanceof Error ? submitError : new Error(String(submitError)));\n        }\n\n        return NextResponse.json(\n          { error: 'Failed to submit review. Please try again.' },\n          { status: 500 }\n        );\n      }\n\n      // Validate response from submit function\n      if (!response || typeof response !== 'object') {\n        console.error('Invalid response from submit function:', response);\n        return NextResponse.json(\n          { error: 'Internal server error' },\n          { status: 500 }\n        );\n      }\n\n      // Handle unsuccessful submission\n      if (!response.success) {\n        const statusCode = response.message?.includes('validation') ? 400 : 500;\n        return NextResponse.json(\n          { \n            error: response.message || 'Failed to submit review',\n            data: response.data \n          },\n          { status: statusCode }\n        );\n      }\n\n      // Call success callback if provided\n      if (config.onSuccess) {\n        try {\n          await config.onSuccess(body, response);\n        } catch (callbackError) {\n          console.error('Success callback error:', callbackError);\n          // Don't fail the request if callback fails\n        }\n      }\n\n      // Return successful response\n      return NextResponse.json({\n        success: true,\n        message: response.message || 'Review submitted successfully',\n        reviewId: response.reviewId,\n        status: response.status,\n        data: response.data\n      });\n\n    } catch (error) {\n      console.error('Unexpected error in review submit handler:', error);\n      \n      // Try to call error callback\n      if (config.onError) {\n        try {\n          await config.onError({} as ReviewFormData, error instanceof Error ? error : new Error(String(error)));\n        } catch (callbackError) {\n          console.error('Error callback failed:', callbackError);\n        }\n      }\n\n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  };\n}\n\n/**\n * Create a generic NextJS API route handler for fetching reviews\n */\nexport function createReviewFetchHandler(config: ReviewHandlerConfig) {\n  return async function reviewFetchHandler(request: NextRequest): Promise<NextResponse> {\n    // Only allow GET requests\n    if (request.method !== 'GET') {\n      return NextResponse.json(\n        { error: 'Method not allowed' },\n        { status: 405, headers: { Allow: 'GET' } }\n      );\n    }\n\n    try {\n      // Parse query parameters\n      const searchParams = request.nextUrl.searchParams;\n      const params = {\n        limit: searchParams.get('limit') ? parseInt(searchParams.get('limit')!) : undefined,\n        offset: searchParams.get('offset') ? parseInt(searchParams.get('offset')!) : undefined,\n        featured: searchParams.get('featured') === 'true' ? true : undefined,\n        minRating: searchParams.get('minRating') ? parseInt(searchParams.get('minRating')!) : undefined,\n        sortBy: searchParams.get('sortBy') as 'date' | 'rating' | 'name' | undefined,\n        sortOrder: searchParams.get('sortOrder') as 'asc' | 'desc' | undefined,\n      };\n\n      // Call the user-provided fetch function\n      let reviews: Review[];\n      try {\n        if (!config.onFetch) {\n          return NextResponse.json(\n            { error: 'Review fetching not configured' },\n            { status: 500 }\n          );\n        }\n\n        reviews = await config.onFetch(params);\n      } catch (fetchError) {\n        console.error('Review fetch error:', fetchError);\n        \n        return NextResponse.json(\n          { error: 'Failed to fetch reviews. Please try again.' },\n          { status: 500 }\n        );\n      }\n\n      // Validate response from fetch function\n      if (!Array.isArray(reviews)) {\n        console.error('Invalid response from fetch function, expected array:', reviews);\n        return NextResponse.json(\n          { error: 'Internal server error' },\n          { status: 500 }\n        );\n      }\n\n      // Return successful response\n      return NextResponse.json(reviews);\n\n    } catch (error) {\n      console.error('Unexpected error in review fetch handler:', error);\n      \n      return NextResponse.json(\n        { error: 'Internal server error' },\n        { status: 500 }\n      );\n    }\n  };\n}\n\n/**\n * Combined handler that supports both GET (fetch) and POST (submit)\n */\nexport function createReviewHandler(config: ReviewHandlerConfig) {\n  const fetchHandler = createReviewFetchHandler(config);\n  const submitHandler = createReviewSubmitHandler(config);\n\n  return async function combinedHandler(request: NextRequest): Promise<NextResponse> {\n    if (request.method === 'GET') {\n      return fetchHandler(request);\n    } else if (request.method === 'POST') {\n      return submitHandler(request);\n    } else {\n      return NextResponse.json(\n        { error: 'Method not allowed' },\n        { status: 405, headers: { Allow: 'GET, POST' } }\n      );\n    }\n  };\n}\n\n/**\n * Helper function to create CORS headers for the response\n */\nexport function createCorsHeaders(allowedOrigins?: string[]): HeadersInit {\n  const headers: HeadersInit = {\n    'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',\n    'Access-Control-Allow-Headers': 'Content-Type, Authorization',\n  };\n\n  if (allowedOrigins && allowedOrigins.length > 0) {\n    headers['Access-Control-Allow-Origin'] = allowedOrigins.join(', ');\n  } else {\n    headers['Access-Control-Allow-Origin'] = '*';\n  }\n\n  return headers;\n}\n\n/**\n * Helper to handle OPTIONS requests for CORS\n */\nexport function handleOptions(allowedOrigins?: string[]): NextResponse {\n  return new NextResponse(null, {\n    status: 200,\n    headers: createCorsHeaders(allowedOrigins)\n  });\n}","/**\n * Server-side reCAPTCHA verification utility\n */\n\nexport interface RecaptchaConfig {\n  secretKey: string;\n  minimumScore?: number; // For reCAPTCHA v3, minimum score (0.0 to 1.0)\n  timeoutMs?: number; // Request timeout in milliseconds\n}\n\nexport interface RecaptchaVerificationResult {\n  success: boolean;\n  score?: number; // reCAPTCHA v3 score\n  action?: string; // reCAPTCHA v3 action\n  challengeTimestamp?: string;\n  hostname?: string;\n  errorCodes?: string[];\n}\n\n/**\n * Verify reCAPTCHA token with Google's API\n */\nexport async function verifyRecaptcha(\n  token: string,\n  config: RecaptchaConfig\n): Promise<RecaptchaVerificationResult> {\n  if (!config.secretKey) {\n    console.warn('RECAPTCHA_SECRET_KEY not configured, skipping verification');\n    return { success: true };\n  }\n\n  if (!token || typeof token !== 'string') {\n    return {\n      success: false,\n      errorCodes: ['missing-input-response']\n    };\n  }\n\n  const timeout = config.timeoutMs || 10000; // 10 second default timeout\n\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n    const response = await fetch('https://www.google.com/recaptcha/api/siteverify', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        secret: config.secretKey,\n        response: token\n      }),\n      signal: controller.signal\n    });\n\n    clearTimeout(timeoutId);\n\n    if (!response.ok) {\n      console.error('reCAPTCHA API returned non-OK status:', response.status);\n      return {\n        success: false,\n        errorCodes: ['recaptcha-api-error']\n      };\n    }\n\n    const data = await response.json();\n    \n    // Check minimum score for v3 (if configured)\n    if (config.minimumScore !== undefined && data.score !== undefined) {\n      if (data.score < config.minimumScore) {\n        return {\n          success: false,\n          score: data.score,\n          errorCodes: ['score-threshold-not-met']\n        };\n      }\n    }\n\n    return {\n      success: data.success === true,\n      score: data.score,\n      action: data.action,\n      challengeTimestamp: data.challenge_ts,\n      hostname: data.hostname,\n      errorCodes: data['error-codes'] || []\n    };\n\n  } catch (error) {\n    if (error instanceof Error && error.name === 'AbortError') {\n      console.error('reCAPTCHA verification timeout');\n      return {\n        success: false,\n        errorCodes: ['timeout-or-duplicate']\n      };\n    }\n\n    console.error('reCAPTCHA verification error:', error);\n    return {\n      success: false,\n      errorCodes: ['network-error']\n    };\n  }\n}\n\n/**\n * Get human-readable error message for reCAPTCHA error codes\n */\nexport function getRecaptchaErrorMessage(errorCodes: string[]): string {\n  const errorMessages: { [key: string]: string } = {\n    'missing-input-secret': 'reCAPTCHA secret key is missing',\n    'invalid-input-secret': 'reCAPTCHA secret key is invalid',\n    'missing-input-response': 'reCAPTCHA token is missing',\n    'invalid-input-response': 'reCAPTCHA token is invalid or malformed',\n    'bad-request': 'The request is invalid or malformed',\n    'timeout-or-duplicate': 'reCAPTCHA verification timed out or token was already used',\n    'score-threshold-not-met': 'reCAPTCHA score is below the required threshold',\n    'recaptcha-api-error': 'reCAPTCHA service is unavailable',\n    'network-error': 'Network error during reCAPTCHA verification'\n  };\n\n  if (!errorCodes || errorCodes.length === 0) {\n    return 'reCAPTCHA verification failed';\n  }\n\n  const knownErrors = errorCodes\n    .filter(code => errorMessages[code])\n    .map(code => errorMessages[code]);\n\n  return knownErrors.length > 0 \n    ? knownErrors.join(', ')\n    : 'reCAPTCHA verification failed';\n}"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;;;ACsB1C,eAAsB,gBACpB,OACA,QACsC;AACtC,MAAI,CAAC,OAAO,WAAW;AACrB,YAAQ,KAAK,4DAA4D;AACzE,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,YAAY,CAAC,wBAAwB;AAAA,IACvC;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,aAAa;AAEpC,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM,WAAW,MAAM,GAAG,OAAO;AAE9D,UAAM,WAAW,MAAM,MAAM,mDAAmD;AAAA,MAC9E,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB,QAAQ,OAAO;AAAA,QACf,UAAU;AAAA,MACZ,CAAC;AAAA,MACD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,SAAS;AAEtB,QAAI,CAAC,SAAS,IAAI;AAChB,cAAQ,MAAM,yCAAyC,SAAS,MAAM;AACtE,aAAO;AAAA,QACL,SAAS;AAAA,QACT,YAAY,CAAC,qBAAqB;AAAA,MACpC;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AAGjC,QAAI,OAAO,iBAAiB,UAAa,KAAK,UAAU,QAAW;AACjE,UAAI,KAAK,QAAQ,OAAO,cAAc;AACpC,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK;AAAA,UACZ,YAAY,CAAC,yBAAyB;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,oBAAoB,KAAK;AAAA,MACzB,UAAU,KAAK;AAAA,MACf,YAAY,KAAK,aAAa,KAAK,CAAC;AAAA,IACtC;AAAA,EAEF,SAAS,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,SAAS,cAAc;AACzD,cAAQ,MAAM,gCAAgC;AAC9C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,YAAY,CAAC,sBAAsB;AAAA,MACrC;AAAA,IACF;AAEA,YAAQ,MAAM,iCAAiC,KAAK;AACpD,WAAO;AAAA,MACL,SAAS;AAAA,MACT,YAAY,CAAC,eAAe;AAAA,IAC9B;AAAA,EACF;AACF;AAKO,SAAS,yBAAyB,YAA8B;AACrE,QAAM,gBAA2C;AAAA,IAC/C,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,0BAA0B;AAAA,IAC1B,0BAA0B;AAAA,IAC1B,eAAe;AAAA,IACf,wBAAwB;AAAA,IACxB,2BAA2B;AAAA,IAC3B,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,EACnB;AAEA,MAAI,CAAC,cAAc,WAAW,WAAW,GAAG;AAC1C,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,WACjB,OAAO,UAAQ,cAAc,IAAI,CAAC,EAClC,IAAI,UAAQ,cAAc,IAAI,CAAC;AAElC,SAAO,YAAY,SAAS,IACxB,YAAY,KAAK,IAAI,IACrB;AACN;;;AD7HO,SAAS,0BAA0B,QAA6B;AACrE,SAAO,eAAe,oBAAoB,SAA6C;AAErF,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,qBAAqB;AAAA,QAC9B,EAAE,QAAQ,KAAK,SAAS,EAAE,OAAO,OAAO,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI;AAEF,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK;AAAA,MAC5B,SAAS,YAAY;AACnB,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,+BAA+B;AAAA,UACxC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,OAAO,aAAa;AACtB,cAAM,UAAU,MAAM,OAAO,YAAY,OAAO;AAChD,YAAI,CAAC,SAAS;AACZ,iBAAO,2BAAa;AAAA,YAClB,EAAE,OAAO,6CAA6C;AAAA,YACtD,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAGA,UAAI,CAAC,KAAK,gBAAgB,OAAO,KAAK,iBAAiB,YAAY,KAAK,aAAa,KAAK,EAAE,WAAW,GAAG;AACxG,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,4BAA4B;AAAA,UACrC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,UAAI,CAAC,KAAK,iBAAiB,OAAO,KAAK,kBAAkB,YAAY,KAAK,cAAc,KAAK,EAAE,WAAW,GAAG;AAC3G,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,oBAAoB;AAAA,UAC7B,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,YAAM,aAAa;AACnB,UAAI,CAAC,WAAW,KAAK,KAAK,cAAc,KAAK,CAAC,GAAG;AAC/C,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,qCAAqC;AAAA,UAC9C,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,OAAO,KAAK,WAAW,YAAY,KAAK,SAAS,KAAK,KAAK,SAAS,KAAK,CAAC,OAAO,UAAU,KAAK,MAAM,GAAG;AAC3G,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,uCAAuC;AAAA,UAChD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,OAAO,YAAY;AACrB,mBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,OAAO,UAAU,GAAG;AAC9D,gBAAM,QAAS,KAAa,KAAK;AAEjC,qBAAW,QAAQ,OAAO;AACxB,gBAAI,UAAU;AACd,gBAAI,eAAe,KAAK,WAAW;AAEnC,oBAAQ,KAAK,MAAM;AAAA,cACjB,KAAK;AACH,0BAAU,SAAS,QAAQ,UAAU,OAC3B,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AACxD;AAAA,cAEF,KAAK;AACH,oBAAI,OAAO;AACT,4BAAU,WAAW,KAAK,OAAO,KAAK,EAAE,KAAK,CAAC;AAAA,gBAChD;AACA;AAAA,cAEF,KAAK;AACH,oBAAI,UAAU,QAAW;AACvB,4BAAU,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS;AAAA,gBAC3F;AACA;AAAA,cAEF,KAAK;AACH,oBAAI,SAAS,OAAO,KAAK,UAAU,UAAU;AAC3C,4BAAU,OAAO,KAAK,EAAE,UAAU,KAAK;AAAA,gBACzC;AACA;AAAA,cAEF,KAAK;AACH,oBAAI,SAAS,OAAO,KAAK,UAAU,UAAU;AAC3C,4BAAU,OAAO,KAAK,EAAE,UAAU,KAAK;AAAA,gBACzC;AACA;AAAA,cAEF,KAAK;AACH,oBAAI,SAAS,OAAO,KAAK,UAAU,UAAU;AAC3C,wBAAM,QAAQ,IAAI,OAAO,KAAK,KAAK;AACnC,4BAAU,MAAM,KAAK,OAAO,KAAK,CAAC;AAAA,gBACpC;AACA;AAAA,cAEF,KAAK;AACH,oBAAI,KAAK,WAAW;AAClB,wBAAM,SAAS,KAAK,UAAU,KAAK;AACnC,4BAAU,WAAW;AACrB,sBAAI,OAAO,WAAW,UAAU;AAC9B,mCAAe;AAAA,kBACjB;AAAA,gBACF;AACA;AAAA,YACJ;AAEA,gBAAI,CAAC,SAAS;AACZ,qBAAO,2BAAa;AAAA,gBAClB,EAAE,OAAO,aAAa;AAAA,gBACtB,EAAE,QAAQ,IAAI;AAAA,cAChB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAGA,UAAI,OAAO,aAAc,KAAa,gBAAgB;AACpD,cAAM,kBAAkB,MAAM,gBAAiB,KAAa,gBAAgB,OAAO,SAAS;AAE5F,YAAI,CAAC,gBAAgB,SAAS;AAC5B,gBAAM,eAAe,yBAAyB,gBAAgB,cAAc,CAAC,CAAC;AAC9E,iBAAO,2BAAa;AAAA,YAClB,EAAE,OAAO,kCAAkC,YAAY,GAAG;AAAA,YAC1D,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAGA,UAAI;AACJ,UAAI;AACF,YAAI,CAAC,OAAO,UAAU;AACpB,iBAAO,2BAAa;AAAA,YAClB,EAAE,OAAO,mCAAmC;AAAA,YAC5C,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAEA,mBAAW,MAAM,OAAO,SAAS,IAAI;AAAA,MACvC,SAAS,aAAa;AACpB,gBAAQ,MAAM,4BAA4B,WAAW;AAGrD,YAAI,OAAO,SAAS;AAClB,gBAAM,OAAO,QAAQ,MAAM,uBAAuB,QAAQ,cAAc,IAAI,MAAM,OAAO,WAAW,CAAC,CAAC;AAAA,QACxG;AAEA,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,6CAA6C;AAAA,UACtD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,CAAC,YAAY,OAAO,aAAa,UAAU;AAC7C,gBAAQ,MAAM,0CAA0C,QAAQ;AAChE,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,wBAAwB;AAAA,UACjC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,CAAC,SAAS,SAAS;AACrB,cAAM,aAAa,SAAS,SAAS,SAAS,YAAY,IAAI,MAAM;AACpE,eAAO,2BAAa;AAAA,UAClB;AAAA,YACE,OAAO,SAAS,WAAW;AAAA,YAC3B,MAAM,SAAS;AAAA,UACjB;AAAA,UACA,EAAE,QAAQ,WAAW;AAAA,QACvB;AAAA,MACF;AAGA,UAAI,OAAO,WAAW;AACpB,YAAI;AACF,gBAAM,OAAO,UAAU,MAAM,QAAQ;AAAA,QACvC,SAAS,eAAe;AACtB,kBAAQ,MAAM,2BAA2B,aAAa;AAAA,QAExD;AAAA,MACF;AAGA,aAAO,2BAAa,KAAK;AAAA,QACvB,SAAS;AAAA,QACT,SAAS,SAAS,WAAW;AAAA,QAC7B,UAAU,SAAS;AAAA,QACnB,QAAQ,SAAS;AAAA,QACjB,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IAEH,SAAS,OAAO;AACd,cAAQ,MAAM,8CAA8C,KAAK;AAGjE,UAAI,OAAO,SAAS;AAClB,YAAI;AACF,gBAAM,OAAO,QAAQ,CAAC,GAAqB,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,QACtG,SAAS,eAAe;AACtB,kBAAQ,MAAM,0BAA0B,aAAa;AAAA,QACvD;AAAA,MACF;AAEA,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,yBAAyB,QAA6B;AACpE,SAAO,eAAe,mBAAmB,SAA6C;AAEpF,QAAI,QAAQ,WAAW,OAAO;AAC5B,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,qBAAqB;AAAA,QAC9B,EAAE,QAAQ,KAAK,SAAS,EAAE,OAAO,MAAM,EAAE;AAAA,MAC3C;AAAA,IACF;AAEA,QAAI;AAEF,YAAM,eAAe,QAAQ,QAAQ;AACrC,YAAM,SAAS;AAAA,QACb,OAAO,aAAa,IAAI,OAAO,IAAI,SAAS,aAAa,IAAI,OAAO,CAAE,IAAI;AAAA,QAC1E,QAAQ,aAAa,IAAI,QAAQ,IAAI,SAAS,aAAa,IAAI,QAAQ,CAAE,IAAI;AAAA,QAC7E,UAAU,aAAa,IAAI,UAAU,MAAM,SAAS,OAAO;AAAA,QAC3D,WAAW,aAAa,IAAI,WAAW,IAAI,SAAS,aAAa,IAAI,WAAW,CAAE,IAAI;AAAA,QACtF,QAAQ,aAAa,IAAI,QAAQ;AAAA,QACjC,WAAW,aAAa,IAAI,WAAW;AAAA,MACzC;AAGA,UAAI;AACJ,UAAI;AACF,YAAI,CAAC,OAAO,SAAS;AACnB,iBAAO,2BAAa;AAAA,YAClB,EAAE,OAAO,iCAAiC;AAAA,YAC1C,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAEA,kBAAU,MAAM,OAAO,QAAQ,MAAM;AAAA,MACvC,SAAS,YAAY;AACnB,gBAAQ,MAAM,uBAAuB,UAAU;AAE/C,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,6CAA6C;AAAA,UACtD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,UAAI,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC3B,gBAAQ,MAAM,yDAAyD,OAAO;AAC9E,eAAO,2BAAa;AAAA,UAClB,EAAE,OAAO,wBAAwB;AAAA,UACjC,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,aAAO,2BAAa,KAAK,OAAO;AAAA,IAElC,SAAS,OAAO;AACd,cAAQ,MAAM,6CAA6C,KAAK;AAEhE,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,oBAAoB,QAA6B;AAC/D,QAAM,eAAe,yBAAyB,MAAM;AACpD,QAAM,gBAAgB,0BAA0B,MAAM;AAEtD,SAAO,eAAe,gBAAgB,SAA6C;AACjF,QAAI,QAAQ,WAAW,OAAO;AAC5B,aAAO,aAAa,OAAO;AAAA,IAC7B,WAAW,QAAQ,WAAW,QAAQ;AACpC,aAAO,cAAc,OAAO;AAAA,IAC9B,OAAO;AACL,aAAO,2BAAa;AAAA,QAClB,EAAE,OAAO,qBAAqB;AAAA,QAC9B,EAAE,QAAQ,KAAK,SAAS,EAAE,OAAO,YAAY,EAAE;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,kBAAkB,gBAAwC;AACxE,QAAM,UAAuB;AAAA,IAC3B,gCAAgC;AAAA,IAChC,gCAAgC;AAAA,EAClC;AAEA,MAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,YAAQ,6BAA6B,IAAI,eAAe,KAAK,IAAI;AAAA,EACnE,OAAO;AACL,YAAQ,6BAA6B,IAAI;AAAA,EAC3C;AAEA,SAAO;AACT;AAKO,SAAS,cAAc,gBAAyC;AACrE,SAAO,IAAI,2BAAa,MAAM;AAAA,IAC5B,QAAQ;AAAA,IACR,SAAS,kBAAkB,cAAc;AAAA,EAC3C,CAAC;AACH;","names":[]}