@dupecom/botcha-cloudflare 0.13.0 → 0.14.0

package/dist/dashboard/auth.d.ts

@@ -181,11 +181,9 @@ export declare function handleEmailLogin(c: Context<{
 /**
  * GET /dashboard/login
  *
- * Four ways in:
- *   1. Device code (agent generated the code) — primary
+ * Two ways in:
+ *   1. Agent prompt (primary) — copy curl command, agent gets device code
  *   2. Email login (returning users — code emailed to verified address)
- *   3. App ID + Secret (agent created the app)
- *   4. Create new app (triggers POST /v1/apps)
  */
 export declare function renderLoginPage(c: Context<{
     Bindings: Bindings;

package/dist/dashboard/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/dashboard/auth.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAMvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAKjD,KAAK,QAAQ,GAAG;IACd,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF,KAAK,SAAS,GAAG;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAIF;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc5F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQhE;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAmChG,CAAC;AAIF;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;oEA2CpF;AAgDD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;;oEAwBjF;AAID;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;oEAEjF;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;;oEA4B9E;AAID;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,qBA2E5E;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAqB9E;AAID;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAyBnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAGpE;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFA2BxE;AAID;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,qBA6HvE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/dashboard/auth.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAMvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAKjD,KAAK,QAAQ,GAAG;IACd,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAGF,KAAK,SAAS,GAAG;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAIF;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc5F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQhE;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAmChG,CAAC;AAIF;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;oEA2CpF;AAgDD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;;oEAwBjF;AAID;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;oEAEjF;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;;;;;;;;;;;oEA4B9E;AAID;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,qBA2E5E;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAqB9E;AAID;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAyBnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFAGpE;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,gFA2BxE;AA4BD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,qBAiFvE"}

package/dist/dashboard/auth.js

@@ -354,58 +354,44 @@ export async function handleEmailLogin(c) {
     return c.redirect('/dashboard/code?email_sent=1');
 }
 // ============ LOGIN PAGE ============
+const DASHBOARD_PROMPT = `Run: curl -s https://botcha.ai -H 'Accept: application/json' — then follow the instructions to verify yourself and get me a dashboard login code for botcha.ai.`;
+const COPY_ICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="square" stroke-linejoin="miter"><rect x="9" y="9" width="13" height="13" rx="0"/><path d="M5 15H4a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v1"/></svg>`;
+const CHECK_ICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="square" stroke-linejoin="miter"><polyline points="20 6 9 17 4 12"/></svg>`;
+const LOGIN_COPY_SCRIPT = `
+function copyDashPrompt() {
+  var text = document.getElementById('dash-prompt').textContent.trim();
+  navigator.clipboard.writeText(text).then(function() {
+    var label = document.getElementById('dash-copy-label');
+    var icon = document.getElementById('dash-copy-icon');
+    var txt = document.getElementById('dash-copy-text');
+    label.style.color = 'var(--green)';
+    icon.innerHTML = '${CHECK_ICON_SVG.replace(/'/g, "\\'")}';
+    txt.textContent = 'Copied — now paste into your agent';
+    setTimeout(function() {
+      label.style.color = 'var(--text-muted)';
+      icon.innerHTML = '${COPY_ICON_SVG.replace(/'/g, "\\'")}';
+      txt.textContent = 'Click to copy';
+    }, 2500);
+  });
+}
+`;
 /**
  * GET /dashboard/login
  *
- * Four ways in:
- *   1. Device code (agent generated the code) — primary
+ * Two ways in:
+ *   1. Agent prompt (primary) — copy curl command, agent gets device code
  *   2. Email login (returning users — code emailed to verified address)
- *   3. App ID + Secret (agent created the app)
- *   4. Create new app (triggers POST /v1/apps)
  */
 export async function renderLoginPage(c) {
     const url = new URL(c.req.url);
     const error = url.searchParams.get('error');
     const errorMap = {
-        invalid: 'Invalid app ID or secret',
-        missing: 'Please provide both app ID and secret',
-        server: 'Server error. Please try again.',
         email_missing: 'Please enter your email address.',
     };
-    const CREATE_APP_SCRIPT = `
-    async function createApp() {
-      var btn = document.getElementById('create-btn');
-      btn.classList.add('loading');
-      btn.textContent = 'Creating...';
-      try {
-        var resp = await fetch('/v1/apps', { method: 'POST' });
-        var data = await resp.json();
-        if (data.app_id && data.app_secret) {
-          document.getElementById('new-app-id').textContent = data.app_id;
-          document.getElementById('new-app-secret').textContent = data.app_secret;
-          document.getElementById('create-result').classList.add('show');
-          btn.style.display = 'none';
-        } else {
-          btn.textContent = '[ERR] try again >';
-          btn.classList.remove('loading');
-        }
-      } catch (e) {
-        btn.textContent = '[ERR] try again >';
-        btn.classList.remove('loading');
-      }
-    }
-    function fillAndLogin() {
-      var appId = document.getElementById('new-app-id').textContent;
-      var secret = document.getElementById('new-app-secret').textContent;
-      document.getElementById('app_id').value = appId;
-      document.getElementById('app_secret').value = secret;
-      document.querySelector('form').submit();
-    }
-  `;
     return c.html(_jsxs(LoginLayout, { title: "Dashboard Login - BOTCHA", children: [_jsx("a", { href: "/", class: "ascii-logo", children: `██████╗  ██████╗ ████████╗ ██████╗██╗  ██╗ █████╗
 ██╔══██╗██╔═══██╗╚══██╔══╝██╔════╝██║  ██║██╔══██╗
 ██████╔╝██║   ██║   ██║   ██║     ███████║███████║
 ██╔══██╗██║   ██║   ██║   ██║     ██╔══██║██╔══██║
 ██████╔╝╚██████╔╝   ██║   ╚██████╗██║  ██║██║  ██║
-╚═════╝  ╚═════╝    ╚═╝    ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝` }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 2rem;", children: ['>', "_\u00A0prove you're a bot"] }), _jsxs(Card, { title: "Device Code", badge: "agent required", children: [_jsx("p", { class: "text-muted mb-2", style: "font-size: 0.75rem;", children: "Your AI agent can generate a login code for you." }), _jsxs("a", { href: "/dashboard/code", class: "button btn", children: ["Enter Device Code ", '>'] }), _jsxs("div", { class: "hint", children: ["Agent: ", _jsx("code", { children: "POST /v1/auth/device-code" }), " then solve the challenge."] })] }), _jsx(Divider, { text: "or" }), _jsx("form", { method: "post", action: "/dashboard/email-login", children: _jsxs(Card, { title: "Email Login", badge: "returning users", children: [error === 'email_missing' && (_jsx("div", { class: "error-message", children: errorMap[error] })), _jsx("p", { class: "text-muted mb-2", style: "font-size: 0.75rem;", children: "Enter the email you used when creating your app. We'll send a login code to your inbox." }), _jsxs("div", { class: "form-group", children: [_jsx("label", { for: "email", children: "Email" }), _jsx("input", { type: "email", id: "email", name: "email", placeholder: "you@example.com", required: true, autocomplete: "email" })] }), _jsxs("button", { type: "submit", children: ["Email Me a Code ", '>'] })] }) }), _jsx(Divider, { text: "or sign in with credentials" }), _jsx("form", { method: "post", action: "/dashboard/login", children: _jsxs(Card, { title: "App Credentials", children: [error && error !== 'email_missing' && errorMap[error] && (_jsx("div", { class: "error-message", children: errorMap[error] })), _jsxs("div", { id: "create-result", children: [_jsx("div", { class: "warning", children: "Save these credentials now. The secret will not be shown again." }), _jsxs("div", { class: "credentials-box", children: [_jsx("span", { class: "label", children: "app_id: " }), _jsx("span", { class: "value", id: "new-app-id" }), _jsx("br", {}), _jsx("span", { class: "label", children: "secret: " }), _jsx("span", { class: "value", id: "new-app-secret" })] }), _jsxs("button", { type: "button", onclick: "fillAndLogin()", style: "width: 100%; margin-bottom: 1rem;", children: ["Login With New Credentials ", '>'] })] }), _jsxs("div", { class: "form-group", children: [_jsx("label", { for: "app_id", children: "App ID" }), _jsx("input", { type: "text", id: "app_id", name: "app_id", placeholder: "app_...", required: true, autocomplete: "username" })] }), _jsxs("div", { class: "form-group", children: [_jsx("label", { for: "app_secret", children: "App Secret" }), _jsx("input", { type: "password", id: "app_secret", name: "app_secret", placeholder: "sk_...", required: true, autocomplete: "current-password" })] }), _jsxs("div", { style: "display: flex; gap: 0.75rem; align-items: center;", children: [_jsxs("button", { type: "submit", children: ["Login ", '>'] }), _jsxs("button", { type: "button", id: "create-btn", class: "btn-secondary", onclick: "createApp()", children: ["Create App ", '>'] })] })] }) }), _jsx("script", { dangerouslySetInnerHTML: { __html: CREATE_APP_SCRIPT } })] }));
+╚═════╝  ╚═════╝    ╚═╝    ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝` }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 2rem;", children: ['>', "_\u00A0dashboard login"] }), _jsx("p", { class: "text-muted", style: "font-size: 0.6875rem; text-transform: uppercase; letter-spacing: 0.15em; text-align: center; margin-bottom: 0.625rem;", children: "Paste this into your AI agent" }), _jsx("div", { class: "card", style: "margin-bottom: 1.5rem;", children: _jsx("div", { class: "card-body", children: _jsxs("button", { id: "dash-prompt-btn", onclick: "copyDashPrompt()", type: "button", class: "card-inner", style: "display: block; width: 100%; padding: 1.5rem; border: none; border-radius: 0; cursor: pointer; font-family: var(--font); text-align: left; text-transform: none; letter-spacing: normal; box-shadow: none; transition: background 0.2s;", children: [_jsx("code", { id: "dash-prompt", style: "font-size: 0.9375rem; font-weight: 700; color: var(--accent); line-height: 1.5; display: block; background: none; border: none; padding: 0;", children: DASHBOARD_PROMPT }), _jsxs("span", { id: "dash-copy-label", style: "display: flex; align-items: center; gap: 0.375rem; margin-top: 1rem; font-size: 0.6875rem; font-weight: 500; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.1em; transition: color 0.2s;", children: [_jsx("span", { id: "dash-copy-icon", style: "display: flex; transition: color 0.2s;", dangerouslySetInnerHTML: { __html: COPY_ICON_SVG } }), _jsx("span", { id: "dash-copy-text", children: "Click to copy" })] })] }) }) }), _jsxs("p", { class: "text-muted", style: "font-size: 0.75rem; text-align: center; line-height: 1.8; margin-bottom: 1.5rem;", children: ["Your agent solves a challenge, gets a code, and gives you a link.", _jsx("br", {}), "Click it. You're in the dashboard."] }), _jsx(Divider, { text: "returning user?" }), _jsx("form", { method: "post", action: "/dashboard/email-login", children: _jsxs(Card, { title: "Email Login", children: [error === 'email_missing' && (_jsx("div", { class: "error-message", children: errorMap[error] })), _jsx("p", { class: "text-muted mb-2", style: "font-size: 0.75rem;", children: "Enter the email you used when creating your app. We'll send a login code to your inbox." }), _jsxs("div", { class: "form-group", children: [_jsx("label", { for: "email", children: "Email" }), _jsx("input", { type: "email", id: "email", name: "email", placeholder: "you@example.com", required: true, autocomplete: "email" })] }), _jsxs("button", { type: "submit", children: ["Email Me a Code ", '>'] })] }) }), _jsx("script", { dangerouslySetInnerHTML: { __html: LOGIN_COPY_SCRIPT } })] }));
 }

package/dist/dashboard/landing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"landing.d.ts","sourceRoot":"","sources":["../../src/dashboard/landing.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAsCnC,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAgI/D,CAAC;AAyBF,eAAO,MAAM,mBAAmB,EAAE,EAAE,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAoF3E,CAAC"}
+{"version":3,"file":"landing.d.ts","sourceRoot":"","sources":["../../src/dashboard/landing.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAsCnC,eAAO,MAAM,WAAW,EAAE,EAAE,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAyI/D,CAAC;AAyBF,eAAO,MAAM,mBAAmB,EAAE,EAAE,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CA8F3E,CAAC"}

package/dist/dashboard/landing.js

@@ -31,7 +31,7 @@ function copyPrompt() {
 `;
 // ============ UNVERIFIED LANDING PAGE ============
 export const LandingPage = ({ version, error }) => {
-    return (_jsxs(LandingLayout, { version: version, children: [_jsx("a", { href: "/", class: "ascii-logo", children: BOTCHA_ASCII }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 0.5rem;", children: ['>', "_\u00A0prove you're a bot"] }), _jsx("p", { class: "landing-tagline", children: "This site is for AI agents. Bring yours." }), _jsx("p", { class: "text-muted", style: "font-size: 0.6875rem; text-transform: uppercase; letter-spacing: 0.15em; text-align: center; margin: 2rem 0 0.625rem;", children: "Paste this into your AI agent" }), _jsx("div", { class: "card", style: "margin-bottom: 1.5rem;", children: _jsx("div", { class: "card-body", children: _jsxs("button", { id: "prompt-btn", onclick: "copyPrompt()", type: "button", class: "card-inner", style: "display: block; width: 100%; padding: 1.5rem; border: none; border-radius: 0; cursor: pointer; font-family: var(--font); text-align: left; text-transform: none; letter-spacing: normal; box-shadow: none; transition: background 0.2s;", children: [_jsx("code", { id: "agent-prompt", style: "font-size: 1.125rem; font-weight: 700; color: var(--accent); line-height: 1.5; display: block; background: none; border: none; padding: 0;", children: AGENT_PROMPT }), _jsxs("span", { id: "copy-label", style: "display: flex; align-items: center; gap: 0.375rem; margin-top: 1rem; font-size: 0.6875rem; font-weight: 500; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.1em; transition: color 0.2s;", children: [_jsx("span", { id: "copy-icon", style: "display: flex; transition: color 0.2s;", dangerouslySetInnerHTML: { __html: COPY_ICON } }), _jsx("span", { id: "copy-text", children: "Click to copy" })] })] }) }) }), _jsx("div", { style: "text-align: center; margin: 1.5rem 0;", children: _jsxs("p", { class: "text-muted", style: "font-size: 0.75rem; line-height: 2;", children: ["Your agent solves a challenge to prove it's a bot.", _jsx("br", {}), "It gives you a link back. Click it. You're in."] }) }), error && (_jsx("div", { style: "text-align: center; margin-bottom: 0.5rem;", children: _jsx("p", { style: "color: var(--red); font-size: 0.75rem;", children: error }) })), _jsxs("details", { style: "margin-top: 1rem;", children: [_jsx("summary", { class: "text-muted", style: "font-size: 0.6875rem; cursor: pointer; text-align: center; list-style: none; text-decoration: underline; text-underline-offset: 3px;", children: "Already have a code?" }), _jsx("form", { method: "post", action: "/gate", style: "margin-top: 0.75rem;", children: _jsxs("div", { style: "display: flex; gap: 0;", children: [_jsx("input", { id: "code", name: "code", type: "text", placeholder: "BOTCHA-XXXXXX", required: true, autocomplete: "off", spellcheck: false, maxlength: 13, style: "flex: 1; font-size: 0.875rem; font-family: var(--font); font-weight: 600; letter-spacing: 0.1em; text-transform: uppercase; padding: 0.625rem; text-align: center; border: 1px solid var(--border); border-radius: 0; background: var(--bg); color: var(--text);" }), _jsxs("button", { type: "submit", style: "padding: 0.625rem 1rem; font-family: var(--font); font-size: 0.8125rem; font-weight: 600; background: var(--accent); color: #fff; border: 1px solid var(--accent); border-left: none; border-radius: 0; cursor: pointer; white-space: nowrap;", children: ["Go ", '>'] })] }) })] }), _jsx("script", { type: "application/botcha+json", id: "botcha-challenge", dangerouslySetInnerHTML: {
+    return (_jsxs(LandingLayout, { version: version, children: [_jsx("a", { href: "/", class: "ascii-logo", children: BOTCHA_ASCII }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 0.5rem;", children: ['>', "_\u00A0prove you're a bot"] }), _jsx("p", { class: "landing-tagline", children: "This site is for AI agents. Bring yours." }), _jsx("p", { class: "text-muted", style: "font-size: 0.6875rem; text-transform: uppercase; letter-spacing: 0.15em; text-align: center; margin: 2rem 0 0.625rem;", children: "Paste this into your AI agent" }), _jsx("div", { class: "card", style: "margin-bottom: 1.5rem;", children: _jsx("div", { class: "card-body", children: _jsxs("button", { id: "prompt-btn", onclick: "copyPrompt()", type: "button", class: "card-inner", style: "display: block; width: 100%; padding: 1.5rem; border: none; border-radius: 0; cursor: pointer; font-family: var(--font); text-align: left; text-transform: none; letter-spacing: normal; box-shadow: none; transition: background 0.2s;", children: [_jsx("code", { id: "agent-prompt", style: "font-size: 1.125rem; font-weight: 700; color: var(--accent); line-height: 1.5; display: block; background: none; border: none; padding: 0;", children: AGENT_PROMPT }), _jsxs("span", { id: "copy-label", style: "display: flex; align-items: center; gap: 0.375rem; margin-top: 1rem; font-size: 0.6875rem; font-weight: 500; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.1em; transition: color 0.2s;", children: [_jsx("span", { id: "copy-icon", style: "display: flex; transition: color 0.2s;", dangerouslySetInnerHTML: { __html: COPY_ICON } }), _jsx("span", { id: "copy-text", children: "Click to copy" })] })] }) }) }), _jsx("div", { style: "text-align: center; margin: 1.5rem 0;", children: _jsxs("p", { class: "text-muted", style: "font-size: 0.75rem; line-height: 2;", children: ["Your agent solves a challenge to prove it's a bot.", _jsx("br", {}), "It gives you a link back. Click it. You're in."] }) }), error && (_jsx("div", { style: "text-align: center; margin-bottom: 0.5rem;", children: _jsx("p", { style: "color: var(--red); font-size: 0.75rem;", children: error }) })), _jsxs("div", { style: "text-align: center; margin-top: 1.5rem; display: flex; flex-direction: column; align-items: center; gap: 0.625rem;", children: [_jsx("a", { href: "/dashboard", class: "text-muted", style: "font-size: 0.6875rem; text-decoration: underline; text-underline-offset: 3px;", children: "Already have an account? Go to dashboard" }), _jsxs("details", { style: "margin: 0;", children: [_jsx("summary", { class: "text-muted", style: "font-size: 0.6875rem; cursor: pointer; text-align: center; list-style: none; text-decoration: underline; text-underline-offset: 3px;", children: "Have a code?" }), _jsx("form", { method: "post", action: "/gate", style: "margin-top: 0.75rem;", children: _jsxs("div", { style: "display: flex; gap: 0;", children: [_jsx("input", { id: "code", name: "code", type: "text", placeholder: "BOTCHA-XXXXXX", required: true, autocomplete: "off", spellcheck: false, maxlength: 13, style: "flex: 1; font-size: 0.875rem; font-family: var(--font); font-weight: 600; letter-spacing: 0.1em; text-transform: uppercase; padding: 0.625rem; text-align: center; border: 1px solid var(--border); border-radius: 0; background: var(--bg); color: var(--text);" }), _jsxs("button", { type: "submit", style: "padding: 0.625rem 1rem; font-family: var(--font); font-size: 0.8125rem; font-weight: 600; background: var(--accent); color: #fff; border: 1px solid var(--accent); border-left: none; border-radius: 0; cursor: pointer; white-space: nowrap;", children: ["Go ", '>'] })] }) })] })] }), _jsx("script", { type: "application/botcha+json", id: "botcha-challenge", dangerouslySetInnerHTML: {
                     __html: JSON.stringify({
                         version: '1.0',
                         type: 'inline-challenge',
@@ -75,7 +75,7 @@ function copyOnboardPrompt() {
 }
 `;
 export const VerifiedLandingPage = ({ version, solveTime }) => {
-    return (_jsxs(LandingLayout, { version: version, children: [_jsx("a", { href: "/", class: "ascii-logo", children: BOTCHA_ASCII }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 0.5rem;", children: ['>', "_\u00A0verified"] }), _jsxs("p", { class: "landing-tagline", style: "color: var(--green);", children: ["Your agent proved it's a bot", solveTime ? ` in ${solveTime}ms` : '', ". Welcome."] }), _jsx("p", { class: "text-muted", style: "font-size: 0.6875rem; text-transform: uppercase; letter-spacing: 0.15em; text-align: center; margin: 2rem 0 0.625rem;", children: "Set up your account \u2014 paste this to your agent" }), _jsx("div", { class: "card", style: "margin-bottom: 1.5rem;", children: _jsx("div", { class: "card-body", children: _jsxs("button", { id: "onboard-btn", onclick: "copyOnboardPrompt()", type: "button", class: "card-inner", style: "display: block; width: 100%; padding: 1.5rem; border: none; border-radius: 0; cursor: pointer; font-family: var(--font); text-align: left; text-transform: none; letter-spacing: normal; box-shadow: none; transition: background 0.2s;", children: [_jsx("code", { id: "onboard-prompt", style: "font-size: 1rem; font-weight: 700; color: var(--accent); line-height: 1.5; display: block; background: none; border: none; padding: 0;", children: ONBOARD_PROMPT }), _jsxs("span", { id: "onboard-label", style: "display: flex; align-items: center; gap: 0.375rem; margin-top: 1rem; font-size: 0.6875rem; font-weight: 500; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.1em; transition: color 0.2s;", children: [_jsx("span", { id: "onboard-icon", style: "display: flex; transition: color 0.2s;", dangerouslySetInnerHTML: { __html: COPY_ICON } }), _jsx("span", { id: "onboard-text", children: "Click to copy" })] })] }) }) }), _jsx("div", { style: "text-align: center; margin: 1.5rem 0;", children: _jsxs("p", { class: "text-muted", style: "font-size: 0.75rem; line-height: 2;", children: ["Your agent will ask for your email, create your app,", _jsx("br", {}), "and give you a link to your dashboard. You just click it."] }) }), _jsxs(Card, { title: "For developers", children: [_jsx("p", { class: "text-muted", style: "font-size: 0.8125rem; line-height: 1.7; margin-bottom: 0.75rem;", children: "Protect your own APIs so only verified AI agents can access them:" }), _jsx("pre", { children: _jsx("code", { children: `# Client SDK (for your agent)
+    return (_jsxs(LandingLayout, { version: version, children: [_jsx("a", { href: "/", class: "ascii-logo", children: BOTCHA_ASCII }), _jsxs("p", { class: "text-muted", style: "text-align: center; font-size: 0.75rem; margin: -1rem 0 0.5rem;", children: ['>', "_\u00A0verified"] }), _jsxs("p", { class: "landing-tagline", style: "color: var(--green);", children: ["Your agent proved it's a bot", solveTime ? ` in ${solveTime}ms` : '', ". Welcome."] }), _jsx("p", { class: "text-muted", style: "font-size: 0.6875rem; text-transform: uppercase; letter-spacing: 0.15em; text-align: center; margin: 2rem 0 0.625rem;", children: "Set up your account \u2014 paste this to your agent" }), _jsx("div", { class: "card", style: "margin-bottom: 1.5rem;", children: _jsx("div", { class: "card-body", children: _jsxs("button", { id: "onboard-btn", onclick: "copyOnboardPrompt()", type: "button", class: "card-inner", style: "display: block; width: 100%; padding: 1.5rem; border: none; border-radius: 0; cursor: pointer; font-family: var(--font); text-align: left; text-transform: none; letter-spacing: normal; box-shadow: none; transition: background 0.2s;", children: [_jsx("code", { id: "onboard-prompt", style: "font-size: 1rem; font-weight: 700; color: var(--accent); line-height: 1.5; display: block; background: none; border: none; padding: 0;", children: ONBOARD_PROMPT }), _jsxs("span", { id: "onboard-label", style: "display: flex; align-items: center; gap: 0.375rem; margin-top: 1rem; font-size: 0.6875rem; font-weight: 500; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.1em; transition: color 0.2s;", children: [_jsx("span", { id: "onboard-icon", style: "display: flex; transition: color 0.2s;", dangerouslySetInnerHTML: { __html: COPY_ICON } }), _jsx("span", { id: "onboard-text", children: "Click to copy" })] })] }) }) }), _jsx("div", { style: "text-align: center; margin: 1.5rem 0;", children: _jsxs("p", { class: "text-muted", style: "font-size: 0.75rem; line-height: 2;", children: ["Your agent will ask for your email, create your app,", _jsx("br", {}), "and give you a link to your dashboard. You just click it."] }) }), _jsx("div", { style: "text-align: center; margin-bottom: 1.5rem;", children: _jsx("a", { href: "/dashboard", style: "font-size: 0.75rem; color: var(--text-muted); text-decoration: underline; text-underline-offset: 3px;", children: "Already have an account? Go to dashboard" }) }), _jsxs(Card, { title: "For developers", children: [_jsx("p", { class: "text-muted", style: "font-size: 0.8125rem; line-height: 1.7; margin-bottom: 0.75rem;", children: "Protect your own APIs so only verified AI agents can access them:" }), _jsx("pre", { children: _jsx("code", { children: `# Client SDK (for your agent)
 npm install @dupecom/botcha     # TypeScript
 pip install botcha              # Python
 

package/dist/dashboard/styles.d.ts

@@ -7,5 +7,5 @@
  *
  * JetBrains Mono · #ffffff bg · #1a1a1a text · black accent · square corners · dot shadows
  */
-export declare const DASHBOARD_CSS = "\n  /* ============ Reset ============ */\n  * { margin: 0; padding: 0; box-sizing: border-box; }\n\n  :root {\n    /* ---- palette (black & white) ---- */\n    --bg:          #ffffff;\n    --bg-card:     #ffffff;\n    --bg-raised:   #eae8e4;\n    --text:        #1a1a1a;\n    --text-muted:  #6b6b6b;\n    --text-dim:    #a0a0a0;\n    --accent:      #1a1a1a;\n    --accent-dim:  #333333;\n    --red:         #cc2222;\n    --amber:       #b87a00;\n    --green:       #1a8a2a;\n    --border:      #ddd9d4;\n    --border-bright: #c0bbb5;\n\n    /* ---- type ---- */\n    --font: 'JetBrains Mono', 'Courier New', monospace;\n\n    /* ---- dot shadow (turbopuffer SVG pattern, black fill) ---- */\n    --dot-shadow: url(\"data:image/svg+xml,%3Csvg width='7' height='13' viewBox='0 0 7 13' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M5.58984 12.2344V10.7051H6.52734V12.2344H5.58984ZM1.86328 12.2344V10.7051H2.79492V12.2344H1.86328ZM3.72656 10.0957V8.56641H4.6582V10.0957H3.72656ZM0 10.0957V8.56641H0.925781V10.0957H0ZM5.58984 7.95117V6.42188H6.52734V7.95117H5.58984ZM1.86328 7.95117V6.42188H2.79492V7.95117H1.86328ZM3.72656 5.8125V4.2832H4.6582V5.8125H3.72656ZM0 5.8125V4.2832H0.925781V5.8125H0ZM5.58984 3.66797V2.13867H6.52734V3.66797H5.58984ZM1.86328 3.66797V2.13867H2.79492V3.66797H1.86328ZM3.72656 1.5293V0H4.6582V1.5293H3.72656ZM0 1.5293V0H0.925781V1.5293H0Z' fill='%231a1a1a'/%3E%3C/svg%3E\");\n  }\n\n  /* ============ Base ============ */\n  html, body {\n    height: 100%;\n    font-family: var(--font);\n    font-size: 16px;\n    line-height: 1.6;\n    background: var(--bg);\n    color: var(--text);\n    -webkit-font-smoothing: antialiased;\n  }\n\n  body { display: flex; flex-direction: column; }\n\n  ::selection { background: var(--accent); color: #fff; }\n\n  a { color: var(--accent); }\n  a:hover { text-decoration: none; opacity: 0.65; }\n\n  /* ============ Scanline overlay (subtle CRT feel) ============ */\n  body::before {\n    content: '';\n    position: fixed;\n    inset: 0;\n    background: repeating-linear-gradient(\n      0deg,\n      transparent,\n      transparent 2px,\n      rgba(0, 0, 0, 0.012) 2px,\n      rgba(0, 0, 0, 0.012) 4px\n    );\n    pointer-events: none;\n    z-index: 9999;\n  }\n\n  /* ============ Dot shadow utility ============ */\n  .dot-shadow { position: relative; }\n  .dot-shadow::after {\n    content: '';\n    position: absolute;\n    top: 0.5rem; left: 0.5rem;\n    right: -0.5rem; bottom: -0.5rem;\n    background-image: var(--dot-shadow);\n    background-repeat: repeat;\n    z-index: -1;\n    pointer-events: none;\n    opacity: 0.6;\n  }\n\n  /* ============ Navigation ============ */\n  .dashboard-nav {\n    background: var(--bg);\n    border-bottom: 1px solid var(--border);\n    position: sticky; top: 0; z-index: 100;\n  }\n\n  .nav-container {\n    max-width: 1200px;\n    margin: 0 auto;\n    padding: 0.75rem 1.5rem;\n    display: flex;\n    align-items: center;\n    gap: 1.5rem;\n  }\n\n  .nav-logo {\n    font-weight: 700;\n    font-size: 0.875rem;\n    color: var(--text);\n    text-decoration: none;\n    letter-spacing: 0.15em;\n    text-transform: uppercase;\n  }\n  .nav-logo:hover { opacity: 1; }\n\n  .nav-app-id {\n    color: var(--text-muted);\n    font-size: 0.75rem;\n    margin-left: auto;\n  }\n\n  .nav-link {\n    color: var(--text);\n    text-decoration: none;\n    font-size: 0.75rem;\n    border: 1px solid var(--border-bright);\n    padding: 0.25rem 0.75rem;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    transition: background 0.1s, color 0.1s;\n  }\n  .nav-link:hover {\n    background: var(--accent);\n    color: var(--bg);\n    border-color: var(--accent);\n    opacity: 1;\n  }\n\n  /* ============ Main content ============ */\n  .dashboard-main {\n    flex: 1;\n    max-width: 1200px;\n    width: 100%;\n    margin: 0 auto;\n    padding: 2rem 1.5rem;\n  }\n\n  /* ============ Card \u2014 primary container (Turbopuffer-style) ============ */\n  .card {\n    display: flex;\n    flex-direction: column;\n    margin-bottom: 1.5rem;\n  }\n\n  .card-header {\n    margin-bottom: -1px; /* overlap the border */\n    padding: 0;\n  }\n\n  .card-header h3 {\n    position: relative;\n    display: inline-flex;\n    align-items: center;\n    z-index: 10;\n    top: 0.5rem;\n    left: 0.5rem;\n    font-size: 0.75rem;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n    line-height: 1;\n    color: var(--text);\n    background: var(--bg);\n    margin: 0;\n    padding: 0 0.5rem;\n  }\n\n  .card-header h3 .card-title {\n  }\n\n  .card-header h3 .badge-inline {\n  }\n\n  .card-body {\n    position: relative;\n    border: 2px solid var(--border-bright);\n  }\n\n  .card-body::before {\n    content: '';\n    position: absolute;\n    top: 0.5rem;\n    left: 0.5rem;\n    right: -0.5rem;\n    bottom: -0.5rem;\n    background-image: var(--dot-shadow);\n    background-repeat: repeat;\n    pointer-events: none;\n    opacity: 0.6;\n  }\n\n  .card-inner {\n    position: relative;\n    z-index: 1;\n    background: var(--bg-card);\n    padding: 1.5rem;\n  }\n\n  /* Legacy fieldset support (deprecated \u2014 use .card instead) */\n  fieldset {\n    border: 2px solid var(--border-bright);\n    border-radius: 0;\n    padding: 1.5rem;\n    margin-bottom: 1.5rem;\n    background: var(--bg-card);\n    position: relative;\n    z-index: 0;\n  }\n\n  legend {\n    padding: 0 0.5rem;\n    font-size: 0.75rem;\n    color: var(--text);\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n  }\n\n  /* ============ Dashboard grid ============ */\n  .dashboard-grid {\n    display: grid;\n    grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));\n    gap: 1.5rem;\n    margin-bottom: 1.5rem;\n  }\n\n  /* ============ Stat cards ============ */\n  .stat-card {\n    display: flex; flex-direction: column; gap: 0.25rem;\n    padding: 1rem;\n    border: 1px solid var(--border);\n    background: var(--bg-card);\n  }\n\n  .stat-card .stat-value {\n    font-size: 2rem; font-weight: 700; line-height: 1;\n    color: var(--text);\n    font-variant-numeric: tabular-nums;\n  }\n\n  .stat-card .stat-label {\n    font-size: 0.6875rem;\n    color: var(--text-muted);\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n  }\n\n  .stat-card .stat-change { font-size: 0.75rem; font-weight: 500; }\n  .stat-card .stat-change.positive { color: var(--green); }\n  .stat-card .stat-change.negative { color: var(--red); }\n\n  /* ============ Bar chart ============ */\n  .bar-chart { width: 100%; }\n\n  .bar-chart .bar-item { margin-bottom: 0.75rem; }\n\n  .bar-chart .bar-label {\n    display: flex; justify-content: space-between; align-items: center;\n    margin-bottom: 0.125rem; font-size: 0.75rem;\n  }\n  .bar-chart .bar-name { color: var(--text); }\n  .bar-chart .bar-value {\n    color: var(--text-muted);\n    font-weight: 700; font-variant-numeric: tabular-nums;\n  }\n\n  .bar-chart .bar {\n    height: 18px;\n    background: var(--accent);\n    border-radius: 0;\n    transition: width 0.3s ease;\n    position: relative; overflow: hidden;\n    opacity: 0.8;\n  }\n  .bar-chart .bar:hover { opacity: 1; }\n\n  .bar-chart .bar-fill { height: 100%; background: var(--accent); }\n\n  /* ============ Form controls ============ */\n  input, select, textarea, button { font-family: var(--font); font-size: 0.875rem; }\n\n  input[type=\"text\"],\n  input[type=\"email\"],\n  input[type=\"password\"],\n  input[type=\"number\"],\n  select,\n  textarea {\n    width: 100%;\n    padding: 0.625rem 0.75rem;\n    background: var(--bg);\n    border: 1px solid var(--border-bright);\n    border-radius: 0;\n    color: var(--text);\n  }\n\n  input:focus, select:focus, textarea:focus {\n    outline: none;\n    border-color: var(--accent);\n    box-shadow: 0 0 0 1px var(--accent);\n  }\n\n  input::placeholder, textarea::placeholder { color: var(--text-dim); }\n\n  label {\n    display: block;\n    margin-bottom: 0.375rem;\n    font-size: 0.6875rem;\n    color: var(--text-muted);\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n  }\n\n  .form-group { margin-bottom: 1.25rem; }\n\n  /* ============ Buttons ============ */\n  button, .button {\n    display: inline-block;\n    padding: 0.625rem 1.25rem;\n    background: var(--accent);\n    color: #fff;\n    border: 1px solid var(--accent);\n    border-radius: 0;\n    font-weight: 700;\n    cursor: pointer;\n    text-decoration: none;\n    text-align: center;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n    font-size: 0.75rem;\n    box-shadow:\n      inset 1px 1px 0 rgba(255,255,255,0.15),\n      inset -1px -1px 0 rgba(0,0,0,0.15),\n      2px 2px 0 rgba(0,0,0,0.1);\n    transition: box-shadow 0.1s, transform 0.1s;\n  }\n  button:hover, .button:hover {\n    box-shadow:\n      inset 1px 1px 0 rgba(255,255,255,0.1),\n      inset -1px -1px 0 rgba(0,0,0,0.15),\n      3px 3px 0 rgba(0,0,0,0.12);\n    opacity: 1;\n  }\n  button:active, .button:active {\n    transform: translate(1px, 1px);\n    box-shadow: inset 1px 1px 3px rgba(0,0,0,0.25);\n  }\n  button:disabled, .button:disabled { opacity: 0.25; cursor: not-allowed; }\n\n  button.secondary, .button.secondary {\n    background: transparent;\n    color: var(--text);\n    border-color: var(--border-bright);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.05);\n  }\n  button.secondary:hover, .button.secondary:hover {\n    border-color: var(--accent);\n    color: var(--accent);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.1);\n  }\n\n  button.danger, .button.danger {\n    background: var(--red);\n    border-color: var(--red);\n    color: #fff;\n    box-shadow: 2px 2px 0 rgba(204,34,34,0.15);\n  }\n  button.danger:hover, .button.danger:hover {\n    background: transparent;\n    color: var(--red);\n  }\n\n  /* ============ Tables ============ */\n  table { width: 100%; border-collapse: collapse; }\n\n  thead { border-bottom: 1px solid var(--border-bright); }\n  th {\n    padding: 0.5rem 0.75rem; text-align: left;\n    font-size: 0.6875rem; color: var(--text);\n    font-weight: 700; text-transform: uppercase;\n    letter-spacing: 0.1em;\n    background: var(--bg-raised);\n  }\n\n  td {\n    padding: 0.5rem 0.75rem;\n    border-bottom: 1px solid var(--border);\n    font-size: 0.75rem;\n    font-variant-numeric: tabular-nums;\n  }\n\n  tbody tr:hover { background: var(--bg-raised); }\n\n  /* ============ Code ============ */\n  code, pre {\n    font-family: var(--font);\n    background: var(--bg-raised);\n    padding: 0.125rem 0.375rem;\n    border-radius: 0;\n    font-size: 0.75rem;\n    border: 1px solid var(--border);\n    color: var(--text);\n  }\n  pre { padding: 1rem; overflow-x: auto; border: 1px solid var(--border-bright); }\n  pre code { background: none; padding: 0; border: none; }\n\n  /* ============ Login layout ============ */\n  .login-container {\n    min-height: 100vh;\n    display: flex; align-items: center; justify-content: center;\n    padding: 2rem;\n    background: var(--bg);\n  }\n  .login-box { width: 100%; max-width: 420px; }\n\n  .login-header { text-align: center; margin-bottom: 2rem; }\n  .login-header h1 {\n    font-size: 1.5rem; font-weight: 700; color: var(--text);\n    letter-spacing: 0.15em; text-transform: uppercase;\n    margin-bottom: 0.25rem;\n  }\n  .login-header p { color: var(--text-muted); font-size: 0.75rem; }\n\n  /* ============ htmx loading ============ */\n  .htmx-indicator { opacity: 0; transition: opacity 0.15s; }\n  .htmx-request .htmx-indicator { opacity: 1; }\n  .htmx-request.htmx-swapping { opacity: 0.3; pointer-events: none; }\n\n  /* ============ Skeleton \u2014 blinking cursor ============ */\n  .skeleton {\n    background: var(--bg-raised);\n    border: 1px solid var(--border);\n    position: relative;\n    overflow: hidden;\n  }\n  .skeleton::after {\n    content: '';\n    position: absolute; left: 0; top: 0;\n    width: 2px; height: 100%;\n    background: var(--text);\n    animation: cursor-blink 0.8s step-end infinite;\n  }\n  @keyframes cursor-blink {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0; }\n  }\n\n  .skeleton-text { height: 1rem; margin-bottom: 0.5rem; }\n  .skeleton-heading { height: 1.5rem; width: 60%; margin-bottom: 1rem; }\n\n  /* ============ Utilities ============ */\n  .text-center { text-align: center; }\n  .text-right  { text-align: right; }\n  .text-muted  { color: var(--text-muted); }\n  .text-dim    { color: var(--text-dim); }\n  .text-success { color: var(--green); }\n  .text-danger  { color: var(--red); }\n  .text-warning { color: var(--amber); }\n\n  .mb-0 { margin-bottom: 0; }\n  .mb-1 { margin-bottom: 0.5rem; }\n  .mb-2 { margin-bottom: 1rem; }\n  .mb-3 { margin-bottom: 1.5rem; }\n  .mb-4 { margin-bottom: 2rem; }\n  .mt-0 { margin-top: 0; }\n  .mt-1 { margin-top: 0.5rem; }\n  .mt-2 { margin-top: 1rem; }\n  .mt-3 { margin-top: 1.5rem; }\n  .mt-4 { margin-top: 2rem; }\n\n  /* ============ Period selector ============ */\n  .period-selector button {\n    font-size: 0.625rem;\n    padding: 0.2rem 0.5rem;\n  }\n\n  /* ============ Responsive ============ */\n  @media (max-width: 768px) {\n    html, body { font-size: 14px; }\n    .dashboard-main { padding: 1rem; }\n    .nav-container { padding: 0.5rem 1rem; }\n    .dashboard-grid { grid-template-columns: 1fr; gap: 1rem; }\n    .card-inner { padding: 1rem; }\n    .card { margin-bottom: 1rem; }\n    fieldset { padding: 1rem; margin-bottom: 1rem; }\n    .stat-card .stat-value { font-size: 1.75rem; }\n    table { font-size: 0.625rem; }\n    th, td { padding: 0.375rem 0.5rem; }\n  }\n\n  @media (max-width: 480px) {\n    .nav-container { flex-wrap: wrap; }\n    .nav-app-id { margin-left: 0; width: 100%; order: 3; }\n  }\n\n  /* ============ Alerts ============ */\n  .alert {\n    padding: 0.75rem 1rem;\n    border-radius: 0;\n    margin-bottom: 1.5rem;\n    border: 1px solid var(--border-bright);\n    font-size: 0.75rem;\n    background: var(--bg-card);\n  }\n  .alert::before { font-weight: 700; margin-right: 0.5rem; }\n\n  .alert-info { border-color: var(--border-bright); color: var(--text); }\n  .alert-info::before { content: '>'; color: var(--text); }\n\n  .alert-success { border-color: var(--green); color: var(--green); }\n  .alert-success::before { content: '[ok]'; }\n\n  .alert-warning { border-color: var(--amber); color: var(--amber); }\n  .alert-warning::before { content: '[!!]'; }\n\n  .alert-danger { border-color: var(--red); color: var(--red); }\n  .alert-danger::before { content: '[ERR]'; }\n\n  /* ============ Badges ============ */\n  .badge {\n    display: inline-block;\n    padding: 0.125rem 0.375rem;\n    font-size: 0.625rem; font-weight: 700;\n    border-radius: 0;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    border: 1px solid;\n  }\n  .badge-success { color: var(--green); border-color: var(--green); background: transparent; }\n  .badge-danger  { color: var(--red); border-color: var(--red); background: transparent; }\n  .badge-warning { color: var(--amber); border-color: var(--amber); background: transparent; }\n  .badge-info    { color: #fff; border-color: var(--accent); background: var(--accent); }\n\n  /* ============ Sample data indicator ============ */\n  .sample-banner {\n    background: #fffbe6;\n    border: 1px solid var(--amber);\n    color: var(--amber);\n    padding: 0.5rem 0.75rem;\n    font-size: 0.6875rem;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    margin-bottom: 1rem;\n  }\n  .sample-banner::before { content: '[demo]'; margin-right: 0.5rem; }\n  .sample-tag {\n    color: var(--amber);\n    font-size: 0.625rem;\n    font-weight: 700;\n    letter-spacing: 0.05em;\n    border: 1px solid var(--amber);\n    padding: 0.0625rem 0.3rem;\n    margin-left: 0.375rem;\n    vertical-align: middle;\n    background: #fffbe6;\n  }\n\n  /* ============ Empty state ============ */\n  .empty-state { text-align: center; padding: 3rem 1rem; color: var(--text-muted); }\n  .empty-state-icon { font-size: 1.5rem; margin-bottom: 0.75rem; color: var(--text); font-weight: 700; }\n  .empty-state-text { font-size: 0.8125rem; margin-bottom: 0.25rem; }\n  .empty-state-subtext { font-size: 0.6875rem; color: var(--text-dim); }\n\n  /* ============ Auth pages ============ */\n  .ascii-logo {\n    display: block; text-align: center; margin-bottom: 2rem;\n    color: var(--text); font-size: 0.55rem; line-height: 1.2;\n    white-space: pre; font-weight: 400;\n    text-decoration: none;\n  }\n\n  .badge-inline {\n    display: inline-block; font-size: 0.5625rem; font-weight: 700;\n    color: var(--text-muted); border: 1px solid var(--border-bright);\n    border-radius: 0; padding: 0.1rem 0.4rem;\n    margin-left: 0.5rem; vertical-align: middle;\n    text-transform: uppercase; letter-spacing: 0.05em;\n  }\n\n  .divider {\n    display: flex; align-items: center; gap: 0.75rem;\n    color: var(--text-dim); font-size: 0.6875rem;\n    margin: 1.5rem 0;\n    text-transform: uppercase; letter-spacing: 0.1em;\n    white-space: nowrap;\n  }\n  .divider::before, .divider::after {\n    content: ''; flex: 1;\n    height: 1px; background: var(--border-bright);\n  }\n\n  .credentials-box {\n    background: var(--bg); border: 1px solid var(--accent-dim);\n    padding: 1rem; margin-bottom: 1rem;\n    font-size: 0.75rem; line-height: 1.8; word-break: break-all;\n  }\n  .credentials-box .label { color: var(--text-muted); }\n  .credentials-box .value { color: var(--text); font-weight: 700; }\n\n  .warning {\n    background: rgba(184,122,0,0.06); border: 1px solid var(--amber);\n    padding: 0.75rem; margin-bottom: 1rem;\n    font-size: 0.7rem; color: var(--amber);\n  }\n  .warning::before { content: '[!!] '; font-weight: 700; }\n\n  .error-message {\n    color: var(--red); margin: 0 0 1rem 0; font-size: 0.75rem;\n    padding: 0.5rem 0.75rem;\n    border: 1px solid rgba(204,34,34,0.3);\n    background: var(--bg);\n  }\n  .error-message::before { content: '[ERR] '; font-weight: 700; }\n\n  .hint {\n    font-size: 0.6875rem; color: var(--text-muted); line-height: 1.6;\n    margin-top: 0.75rem;\n  }\n  .hint code {\n    color: var(--text); background: var(--bg-raised);\n    padding: 0.125rem 0.375rem; border: 1px solid var(--border);\n  }\n\n  .btn {\n    display: block; width: 100%; text-align: center; text-decoration: none;\n  }\n  .btn-secondary {\n    background: transparent; color: var(--text);\n    border-color: var(--border-bright);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.05);\n  }\n  .btn-secondary:hover {\n    border-color: var(--accent); color: var(--accent);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.1);\n  }\n\n  #create-result { display: none; }\n  #create-result.show { display: block; }\n  #create-btn.loading { opacity: 0.25; pointer-events: none; }\n\n  /* ============ Landing page ============ */\n  .landing-box { width: 100%; max-width: 580px; }\n  .landing-box .ascii-logo { font-size: 0.75rem; margin-bottom: 1rem; }\n\n  /* Landing page flows from top, not vertically centered like login */\n  .login-container:has(.landing-box) {\n    align-items: flex-start; padding-top: 4rem;\n  }\n\n  .landing-tagline {\n    text-align: center; font-size: 0.8125rem;\n    color: var(--text-muted); margin-bottom: 1.5rem;\n  }\n\n  .landing-links {\n    display: flex; flex-wrap: wrap; justify-content: center;\n    gap: 0.5rem; margin-bottom: 2rem;\n  }\n  .landing-link {\n    font-size: 0.6875rem; color: var(--text);\n    text-decoration: none; padding: 0.25rem 0.625rem;\n    border: 1px solid var(--border-bright);\n    transition: border-color 0.15s, background 0.15s;\n  }\n  .landing-link:hover {\n    border-color: var(--accent); background: var(--bg-raised);\n  }\n\n  .landing-features {\n    display: flex; flex-direction: column; gap: 0.75rem;\n    margin-top: 1rem;\n  }\n  .landing-feature {\n    display: flex; gap: 0.75rem; align-items: baseline;\n    font-size: 0.75rem;\n  }\n  .landing-feature-label {\n    font-weight: 700; color: var(--text);\n    white-space: nowrap; min-width: 10rem;\n  }\n  .landing-feature-desc { color: var(--text-muted); }\n\n  .landing-steps { display: flex; flex-direction: column; gap: 0.75rem; }\n  .landing-step {\n    display: flex; gap: 0.75rem; align-items: flex-start;\n    font-size: 0.75rem; line-height: 1.6;\n  }\n  .landing-step-num {\n    display: inline-flex; align-items: center; justify-content: center;\n    min-width: 1.5rem; height: 1.5rem;\n    border: 1px solid var(--border-bright);\n    font-size: 0.6875rem; font-weight: 700; color: var(--text);\n    flex-shrink: 0;\n  }\n  .landing-step-hint {\n    display: block; font-size: 0.6875rem; color: var(--text-dim);\n    margin-top: 0.125rem;\n  }\n\n  .landing-footer {\n    text-align: center; padding: 2rem 0 0;\n    font-size: 0.6875rem; color: var(--text-dim);\n  }\n  .landing-footer a {\n    color: var(--text-muted); text-decoration: none;\n  }\n  .landing-footer a:hover { color: var(--text); }\n  .landing-footer-sep { margin: 0 0.375rem; }\n\n  /* ============ Scrollbar ============ */\n  ::-webkit-scrollbar { width: 6px; height: 6px; }\n  ::-webkit-scrollbar-track { background: var(--bg-raised); }\n  ::-webkit-scrollbar-thumb { background: var(--border-bright); }\n  ::-webkit-scrollbar-thumb:hover { background: var(--text-muted); }\n\n  /* ============ Responsive (small screens) ============ */\n  @media (max-width: 480px) {\n    .ascii-logo { font-size: 0.4rem; }\n    .landing-box .ascii-logo { font-size: 0.5rem; }\n    .login-container { padding: 1rem; }\n    .card-inner { padding: 1rem; }\n    .landing-feature { flex-direction: column; gap: 0.125rem; }\n    .landing-feature-label { min-width: auto; }\n  }\n";
+export declare const DASHBOARD_CSS = "\n  /* ============ Reset ============ */\n  * { margin: 0; padding: 0; box-sizing: border-box; }\n\n  :root {\n    /* ---- palette (black & white) ---- */\n    --bg:          #ffffff;\n    --bg-card:     #ffffff;\n    --bg-raised:   #eae8e4;\n    --text:        #1a1a1a;\n    --text-muted:  #6b6b6b;\n    --text-dim:    #a0a0a0;\n    --accent:      #1a1a1a;\n    --accent-dim:  #333333;\n    --red:         #cc2222;\n    --amber:       #b87a00;\n    --green:       #1a8a2a;\n    --border:      #ddd9d4;\n    --border-bright: #c0bbb5;\n\n    /* ---- type ---- */\n    --font: 'JetBrains Mono', 'Courier New', monospace;\n\n    /* ---- dot shadow (turbopuffer SVG pattern, black fill) ---- */\n    --dot-shadow: url(\"data:image/svg+xml,%3Csvg width='7' height='13' viewBox='0 0 7 13' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M5.58984 12.2344V10.7051H6.52734V12.2344H5.58984ZM1.86328 12.2344V10.7051H2.79492V12.2344H1.86328ZM3.72656 10.0957V8.56641H4.6582V10.0957H3.72656ZM0 10.0957V8.56641H0.925781V10.0957H0ZM5.58984 7.95117V6.42188H6.52734V7.95117H5.58984ZM1.86328 7.95117V6.42188H2.79492V7.95117H1.86328ZM3.72656 5.8125V4.2832H4.6582V5.8125H3.72656ZM0 5.8125V4.2832H0.925781V5.8125H0ZM5.58984 3.66797V2.13867H6.52734V3.66797H5.58984ZM1.86328 3.66797V2.13867H2.79492V3.66797H1.86328ZM3.72656 1.5293V0H4.6582V1.5293H3.72656ZM0 1.5293V0H0.925781V1.5293H0Z' fill='%231a1a1a'/%3E%3C/svg%3E\");\n  }\n\n  /* ============ Base ============ */\n  html, body {\n    height: 100%;\n    font-family: var(--font);\n    font-size: 16px;\n    line-height: 1.6;\n    background: var(--bg);\n    color: var(--text);\n    -webkit-font-smoothing: antialiased;\n  }\n\n  body { display: flex; flex-direction: column; }\n\n  ::selection { background: var(--accent); color: #fff; }\n\n  a { color: var(--accent); }\n  a:hover { text-decoration: none; opacity: 0.65; }\n\n  /* ============ Scanline overlay (subtle CRT feel) ============ */\n  body::before {\n    content: '';\n    position: fixed;\n    inset: 0;\n    background: repeating-linear-gradient(\n      0deg,\n      transparent,\n      transparent 2px,\n      rgba(0, 0, 0, 0.012) 2px,\n      rgba(0, 0, 0, 0.012) 4px\n    );\n    pointer-events: none;\n    z-index: 9999;\n  }\n\n  /* ============ Dot shadow utility ============ */\n  .dot-shadow { position: relative; }\n  .dot-shadow::after {\n    content: '';\n    position: absolute;\n    top: 0.5rem; left: 0.5rem;\n    right: -0.5rem; bottom: -0.5rem;\n    background-image: var(--dot-shadow);\n    background-repeat: repeat;\n    z-index: -1;\n    pointer-events: none;\n    opacity: 0.6;\n  }\n\n  /* ============ Navigation ============ */\n  .dashboard-nav {\n    background: var(--bg);\n    border-bottom: 1px solid var(--border);\n    position: sticky; top: 0; z-index: 100;\n  }\n\n  .nav-container {\n    max-width: 1200px;\n    margin: 0 auto;\n    padding: 0.75rem 1.5rem;\n    display: flex;\n    align-items: center;\n    gap: 1.5rem;\n  }\n\n  .nav-logo {\n    font-weight: 700;\n    font-size: 0.875rem;\n    color: var(--text);\n    text-decoration: none;\n    letter-spacing: 0.15em;\n    text-transform: uppercase;\n  }\n  .nav-logo:hover { opacity: 1; }\n\n  .nav-app-id {\n    color: var(--text-muted);\n    font-size: 0.75rem;\n    margin-left: auto;\n  }\n\n  .nav-link {\n    color: var(--text);\n    text-decoration: none;\n    font-size: 0.75rem;\n    border: 1px solid var(--border-bright);\n    padding: 0.25rem 0.75rem;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    transition: background 0.1s, color 0.1s;\n  }\n  .nav-link:hover {\n    background: var(--accent);\n    color: var(--bg);\n    border-color: var(--accent);\n    opacity: 1;\n  }\n\n  /* ============ Main content ============ */\n  .dashboard-main {\n    flex: 1;\n    max-width: 1200px;\n    width: 100%;\n    margin: 0 auto;\n    padding: 2rem 1.5rem;\n  }\n\n  /* ============ Card \u2014 primary container (Turbopuffer-style) ============ */\n  .card {\n    display: flex;\n    flex-direction: column;\n    margin-bottom: 1.5rem;\n  }\n\n  .card-header {\n    margin-bottom: -1px; /* overlap the border */\n    padding: 0;\n  }\n\n  .card-header h3 {\n    position: relative;\n    display: inline-flex;\n    align-items: center;\n    z-index: 10;\n    top: 0.5rem;\n    left: 0.5rem;\n    font-size: 0.75rem;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n    line-height: 1;\n    color: var(--text);\n    background: var(--bg);\n    margin: 0;\n    padding: 0 0.5rem;\n  }\n\n  .card-header h3 .card-title {\n  }\n\n  .card-header h3 .badge-inline {\n  }\n\n  .card-body {\n    position: relative;\n    border: 2px solid var(--border-bright);\n  }\n\n  .card-body::before {\n    content: '';\n    position: absolute;\n    top: 0.5rem;\n    left: 0.5rem;\n    right: -0.5rem;\n    bottom: -0.5rem;\n    background-image: var(--dot-shadow);\n    background-repeat: repeat;\n    pointer-events: none;\n    opacity: 0.6;\n  }\n\n  .card-inner {\n    position: relative;\n    z-index: 1;\n    background: var(--bg-card);\n    padding: 1.5rem;\n  }\n\n  /* Legacy fieldset support (deprecated \u2014 use .card instead) */\n  fieldset {\n    border: 2px solid var(--border-bright);\n    border-radius: 0;\n    padding: 1.5rem;\n    margin-bottom: 1.5rem;\n    background: var(--bg-card);\n    position: relative;\n    z-index: 0;\n  }\n\n  legend {\n    padding: 0 0.5rem;\n    font-size: 0.75rem;\n    color: var(--text);\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n  }\n\n  /* ============ Dashboard grid ============ */\n  .dashboard-grid {\n    display: grid;\n    grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));\n    gap: 1.5rem;\n    margin-bottom: 1.5rem;\n  }\n\n  /* ============ Stat cards ============ */\n  .stat-card {\n    display: flex; flex-direction: column; gap: 0.25rem;\n    padding: 1rem;\n    border: 1px solid var(--border);\n    background: var(--bg-card);\n  }\n\n  .stat-card .stat-value {\n    font-size: 2rem; font-weight: 700; line-height: 1;\n    color: var(--text);\n    font-variant-numeric: tabular-nums;\n  }\n\n  .stat-card .stat-label {\n    font-size: 0.6875rem;\n    color: var(--text-muted);\n    text-transform: uppercase;\n    letter-spacing: 0.1em;\n  }\n\n  .stat-card .stat-change { font-size: 0.75rem; font-weight: 500; }\n  .stat-card .stat-change.positive { color: var(--green); }\n  .stat-card .stat-change.negative { color: var(--red); }\n\n  /* ============ Bar chart ============ */\n  .bar-chart { width: 100%; }\n\n  .bar-chart .bar-item { margin-bottom: 0.75rem; }\n\n  .bar-chart .bar-label {\n    display: flex; justify-content: space-between; align-items: center;\n    margin-bottom: 0.125rem; font-size: 0.75rem;\n  }\n  .bar-chart .bar-name { color: var(--text); }\n  .bar-chart .bar-value {\n    color: var(--text-muted);\n    font-weight: 700; font-variant-numeric: tabular-nums;\n  }\n\n  .bar-chart .bar {\n    height: 18px;\n    background: var(--accent);\n    border-radius: 0;\n    transition: width 0.3s ease;\n    position: relative; overflow: hidden;\n    opacity: 0.8;\n  }\n  .bar-chart .bar:hover { opacity: 1; }\n\n  .bar-chart .bar-fill { height: 100%; background: var(--accent); }\n\n  /* ============ Form controls ============ */\n  input, select, textarea, button { font-family: var(--font); font-size: 0.875rem; }\n\n  input[type=\"text\"],\n  input[type=\"email\"],\n  input[type=\"password\"],\n  input[type=\"number\"],\n  select,\n  textarea {\n    width: 100%;\n    padding: 0.625rem 0.75rem;\n    background: var(--bg);\n    border: 1px solid var(--border-bright);\n    border-radius: 0;\n    color: var(--text);\n  }\n\n  input:focus, select:focus, textarea:focus {\n    outline: none;\n    border-color: var(--accent);\n    box-shadow: 0 0 0 1px var(--accent);\n  }\n\n  input::placeholder, textarea::placeholder { color: var(--text-dim); }\n\n  label {\n    display: block;\n    margin-bottom: 0.375rem;\n    font-size: 0.6875rem;\n    color: var(--text-muted);\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n  }\n\n  .form-group { margin-bottom: 1.25rem; }\n\n  /* ============ Buttons ============ */\n  button, .button {\n    display: inline-block;\n    padding: 0.625rem 1.25rem;\n    background: var(--accent);\n    color: #fff;\n    border: 1px solid var(--accent);\n    border-radius: 0;\n    font-weight: 700;\n    cursor: pointer;\n    text-decoration: none;\n    text-align: center;\n    text-transform: uppercase;\n    letter-spacing: 0.08em;\n    font-size: 0.75rem;\n    box-shadow:\n      inset 1px 1px 0 rgba(255,255,255,0.15),\n      inset -1px -1px 0 rgba(0,0,0,0.15),\n      2px 2px 0 rgba(0,0,0,0.1);\n    transition: box-shadow 0.1s, transform 0.1s;\n  }\n  button:hover, .button:hover {\n    box-shadow:\n      inset 1px 1px 0 rgba(255,255,255,0.1),\n      inset -1px -1px 0 rgba(0,0,0,0.15),\n      3px 3px 0 rgba(0,0,0,0.12);\n    opacity: 1;\n  }\n  button:active, .button:active {\n    transform: translate(1px, 1px);\n    box-shadow: inset 1px 1px 3px rgba(0,0,0,0.25);\n  }\n  button:disabled, .button:disabled { opacity: 0.25; cursor: not-allowed; }\n\n  button.secondary, .button.secondary {\n    background: transparent;\n    color: var(--text);\n    border-color: var(--border-bright);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.05);\n  }\n  button.secondary:hover, .button.secondary:hover {\n    border-color: var(--accent);\n    color: var(--accent);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.1);\n  }\n\n  button.danger, .button.danger {\n    background: var(--red);\n    border-color: var(--red);\n    color: #fff;\n    box-shadow: 2px 2px 0 rgba(204,34,34,0.15);\n  }\n  button.danger:hover, .button.danger:hover {\n    background: transparent;\n    color: var(--red);\n  }\n\n  /* ============ Tables ============ */\n  table { width: 100%; border-collapse: collapse; }\n\n  thead { border-bottom: 1px solid var(--border-bright); }\n  th {\n    padding: 0.5rem 0.75rem; text-align: left;\n    font-size: 0.6875rem; color: var(--text);\n    font-weight: 700; text-transform: uppercase;\n    letter-spacing: 0.1em;\n    background: var(--bg-raised);\n  }\n\n  td {\n    padding: 0.5rem 0.75rem;\n    border-bottom: 1px solid var(--border);\n    font-size: 0.75rem;\n    font-variant-numeric: tabular-nums;\n  }\n\n  tbody tr:hover { background: var(--bg-raised); }\n\n  /* ============ Code ============ */\n  code, pre {\n    font-family: var(--font);\n    background: var(--bg-raised);\n    padding: 0.125rem 0.375rem;\n    border-radius: 0;\n    font-size: 0.75rem;\n    border: 1px solid var(--border);\n    color: var(--text);\n  }\n  pre { padding: 1rem; overflow-x: auto; border: 1px solid var(--border-bright); }\n  pre code { background: none; padding: 0; border: none; }\n\n  /* ============ Login layout ============ */\n  .login-container {\n    min-height: 100vh;\n    display: flex; align-items: flex-start; justify-content: center;\n    padding: 4rem 2rem 2rem;\n    background: var(--bg);\n  }\n  .login-box { width: 100%; max-width: 420px; }\n\n  .login-header { text-align: center; margin-bottom: 2rem; }\n  .login-header h1 {\n    font-size: 1.5rem; font-weight: 700; color: var(--text);\n    letter-spacing: 0.15em; text-transform: uppercase;\n    margin-bottom: 0.25rem;\n  }\n  .login-header p { color: var(--text-muted); font-size: 0.75rem; }\n\n  /* ============ htmx loading ============ */\n  .htmx-indicator { opacity: 0; transition: opacity 0.15s; }\n  .htmx-request .htmx-indicator { opacity: 1; }\n  .htmx-request.htmx-swapping { opacity: 0.3; pointer-events: none; }\n\n  /* ============ Skeleton \u2014 blinking cursor ============ */\n  .skeleton {\n    background: var(--bg-raised);\n    border: 1px solid var(--border);\n    position: relative;\n    overflow: hidden;\n  }\n  .skeleton::after {\n    content: '';\n    position: absolute; left: 0; top: 0;\n    width: 2px; height: 100%;\n    background: var(--text);\n    animation: cursor-blink 0.8s step-end infinite;\n  }\n  @keyframes cursor-blink {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0; }\n  }\n\n  .skeleton-text { height: 1rem; margin-bottom: 0.5rem; }\n  .skeleton-heading { height: 1.5rem; width: 60%; margin-bottom: 1rem; }\n\n  /* ============ Utilities ============ */\n  .text-center { text-align: center; }\n  .text-right  { text-align: right; }\n  .text-muted  { color: var(--text-muted); }\n  .text-dim    { color: var(--text-dim); }\n  .text-success { color: var(--green); }\n  .text-danger  { color: var(--red); }\n  .text-warning { color: var(--amber); }\n\n  .mb-0 { margin-bottom: 0; }\n  .mb-1 { margin-bottom: 0.5rem; }\n  .mb-2 { margin-bottom: 1rem; }\n  .mb-3 { margin-bottom: 1.5rem; }\n  .mb-4 { margin-bottom: 2rem; }\n  .mt-0 { margin-top: 0; }\n  .mt-1 { margin-top: 0.5rem; }\n  .mt-2 { margin-top: 1rem; }\n  .mt-3 { margin-top: 1.5rem; }\n  .mt-4 { margin-top: 2rem; }\n\n  /* ============ Period selector ============ */\n  .period-selector button {\n    font-size: 0.625rem;\n    padding: 0.2rem 0.5rem;\n  }\n\n  /* ============ Responsive ============ */\n  @media (max-width: 768px) {\n    html, body { font-size: 14px; }\n    .dashboard-main { padding: 1rem; }\n    .nav-container { padding: 0.5rem 1rem; }\n    .dashboard-grid { grid-template-columns: 1fr; gap: 1rem; }\n    .card-inner { padding: 1rem; }\n    .card { margin-bottom: 1rem; }\n    fieldset { padding: 1rem; margin-bottom: 1rem; }\n    .stat-card .stat-value { font-size: 1.75rem; }\n    table { font-size: 0.625rem; }\n    th, td { padding: 0.375rem 0.5rem; }\n  }\n\n  @media (max-width: 480px) {\n    .nav-container { flex-wrap: wrap; }\n    .nav-app-id { margin-left: 0; width: 100%; order: 3; }\n  }\n\n  /* ============ Alerts ============ */\n  .alert {\n    padding: 0.75rem 1rem;\n    border-radius: 0;\n    margin-bottom: 1.5rem;\n    border: 1px solid var(--border-bright);\n    font-size: 0.75rem;\n    background: var(--bg-card);\n  }\n  .alert::before { font-weight: 700; margin-right: 0.5rem; }\n\n  .alert-info { border-color: var(--border-bright); color: var(--text); }\n  .alert-info::before { content: '>'; color: var(--text); }\n\n  .alert-success { border-color: var(--green); color: var(--green); }\n  .alert-success::before { content: '[ok]'; }\n\n  .alert-warning { border-color: var(--amber); color: var(--amber); }\n  .alert-warning::before { content: '[!!]'; }\n\n  .alert-danger { border-color: var(--red); color: var(--red); }\n  .alert-danger::before { content: '[ERR]'; }\n\n  /* ============ Badges ============ */\n  .badge {\n    display: inline-block;\n    padding: 0.125rem 0.375rem;\n    font-size: 0.625rem; font-weight: 700;\n    border-radius: 0;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    border: 1px solid;\n  }\n  .badge-success { color: var(--green); border-color: var(--green); background: transparent; }\n  .badge-danger  { color: var(--red); border-color: var(--red); background: transparent; }\n  .badge-warning { color: var(--amber); border-color: var(--amber); background: transparent; }\n  .badge-info    { color: #fff; border-color: var(--accent); background: var(--accent); }\n\n  /* ============ Sample data indicator ============ */\n  .sample-banner {\n    background: #fffbe6;\n    border: 1px solid var(--amber);\n    color: var(--amber);\n    padding: 0.5rem 0.75rem;\n    font-size: 0.6875rem;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.05em;\n    margin-bottom: 1rem;\n  }\n  .sample-banner::before { content: '[demo]'; margin-right: 0.5rem; }\n  .sample-tag {\n    color: var(--amber);\n    font-size: 0.625rem;\n    font-weight: 700;\n    letter-spacing: 0.05em;\n    border: 1px solid var(--amber);\n    padding: 0.0625rem 0.3rem;\n    margin-left: 0.375rem;\n    vertical-align: middle;\n    background: #fffbe6;\n  }\n\n  /* ============ Empty state ============ */\n  .empty-state { text-align: center; padding: 3rem 1rem; color: var(--text-muted); }\n  .empty-state-icon { font-size: 1.5rem; margin-bottom: 0.75rem; color: var(--text); font-weight: 700; }\n  .empty-state-text { font-size: 0.8125rem; margin-bottom: 0.25rem; }\n  .empty-state-subtext { font-size: 0.6875rem; color: var(--text-dim); }\n\n  /* ============ Auth pages ============ */\n  .ascii-logo {\n    display: block; text-align: center; margin-bottom: 2rem;\n    color: var(--text); font-size: 0.55rem; line-height: 1.2;\n    white-space: pre; font-weight: 400;\n    text-decoration: none;\n  }\n\n  .badge-inline {\n    display: inline-block; font-size: 0.5625rem; font-weight: 700;\n    color: var(--text-muted); border: 1px solid var(--border-bright);\n    border-radius: 0; padding: 0.1rem 0.4rem;\n    margin-left: 0.5rem; vertical-align: middle;\n    text-transform: uppercase; letter-spacing: 0.05em;\n  }\n\n  .divider {\n    display: flex; align-items: center; gap: 0.75rem;\n    color: var(--text-dim); font-size: 0.6875rem;\n    margin: 1.5rem 0;\n    text-transform: uppercase; letter-spacing: 0.1em;\n    white-space: nowrap;\n  }\n  .divider::before, .divider::after {\n    content: ''; flex: 1;\n    height: 1px; background: var(--border-bright);\n  }\n\n  .credentials-box {\n    background: var(--bg); border: 1px solid var(--accent-dim);\n    padding: 1rem; margin-bottom: 1rem;\n    font-size: 0.75rem; line-height: 1.8; word-break: break-all;\n  }\n  .credentials-box .label { color: var(--text-muted); }\n  .credentials-box .value { color: var(--text); font-weight: 700; }\n\n  .warning {\n    background: rgba(184,122,0,0.06); border: 1px solid var(--amber);\n    padding: 0.75rem; margin-bottom: 1rem;\n    font-size: 0.7rem; color: var(--amber);\n  }\n  .warning::before { content: '[!!] '; font-weight: 700; }\n\n  .error-message {\n    color: var(--red); margin: 0 0 1rem 0; font-size: 0.75rem;\n    padding: 0.5rem 0.75rem;\n    border: 1px solid rgba(204,34,34,0.3);\n    background: var(--bg);\n  }\n  .error-message::before { content: '[ERR] '; font-weight: 700; }\n\n  .hint {\n    font-size: 0.6875rem; color: var(--text-muted); line-height: 1.6;\n    margin-top: 0.75rem;\n  }\n  .hint code {\n    color: var(--text); background: var(--bg-raised);\n    padding: 0.125rem 0.375rem; border: 1px solid var(--border);\n  }\n\n  .btn {\n    display: block; width: 100%; text-align: center; text-decoration: none;\n  }\n  .btn-secondary {\n    background: transparent; color: var(--text);\n    border-color: var(--border-bright);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.05);\n  }\n  .btn-secondary:hover {\n    border-color: var(--accent); color: var(--accent);\n    box-shadow: 2px 2px 0 rgba(0,0,0,0.1);\n  }\n\n  #create-result { display: none; }\n  #create-result.show { display: block; }\n  #create-btn.loading { opacity: 0.25; pointer-events: none; }\n\n  /* ============ Landing page ============ */\n  .landing-box { width: 100%; max-width: 580px; }\n  .landing-box .ascii-logo { font-size: 0.75rem; margin-bottom: 1rem; }\n\n  /* Landing page flows from top, not vertically centered like login */\n  .login-container:has(.landing-box) {\n    align-items: flex-start; padding-top: 4rem;\n  }\n\n  .landing-tagline {\n    text-align: center; font-size: 0.8125rem;\n    color: var(--text-muted); margin-bottom: 1.5rem;\n  }\n\n  .landing-links {\n    display: flex; flex-wrap: wrap; justify-content: center;\n    gap: 0.5rem; margin-bottom: 2rem;\n  }\n  .landing-link {\n    font-size: 0.6875rem; color: var(--text);\n    text-decoration: none; padding: 0.25rem 0.625rem;\n    border: 1px solid var(--border-bright);\n    transition: border-color 0.15s, background 0.15s;\n  }\n  .landing-link:hover {\n    border-color: var(--accent); background: var(--bg-raised);\n  }\n\n  .landing-features {\n    display: flex; flex-direction: column; gap: 0.75rem;\n    margin-top: 1rem;\n  }\n  .landing-feature {\n    display: flex; gap: 0.75rem; align-items: baseline;\n    font-size: 0.75rem;\n  }\n  .landing-feature-label {\n    font-weight: 700; color: var(--text);\n    white-space: nowrap; min-width: 10rem;\n  }\n  .landing-feature-desc { color: var(--text-muted); }\n\n  .landing-steps { display: flex; flex-direction: column; gap: 0.75rem; }\n  .landing-step {\n    display: flex; gap: 0.75rem; align-items: flex-start;\n    font-size: 0.75rem; line-height: 1.6;\n  }\n  .landing-step-num {\n    display: inline-flex; align-items: center; justify-content: center;\n    min-width: 1.5rem; height: 1.5rem;\n    border: 1px solid var(--border-bright);\n    font-size: 0.6875rem; font-weight: 700; color: var(--text);\n    flex-shrink: 0;\n  }\n  .landing-step-hint {\n    display: block; font-size: 0.6875rem; color: var(--text-dim);\n    margin-top: 0.125rem;\n  }\n\n  .landing-footer {\n    text-align: center; padding: 2rem 0 3rem;\n    font-size: 0.6875rem; color: var(--text-dim);\n  }\n  .landing-footer a {\n    color: var(--text-muted); text-decoration: none;\n  }\n  .landing-footer a:hover { color: var(--text); }\n  .landing-footer-sep { margin: 0 0.375rem; }\n\n  /* ============ Scrollbar ============ */\n  ::-webkit-scrollbar { width: 6px; height: 6px; }\n  ::-webkit-scrollbar-track { background: var(--bg-raised); }\n  ::-webkit-scrollbar-thumb { background: var(--border-bright); }\n  ::-webkit-scrollbar-thumb:hover { background: var(--text-muted); }\n\n  /* ============ Responsive (small screens) ============ */\n  @media (max-width: 480px) {\n    .ascii-logo { font-size: 0.4rem; }\n    .landing-box .ascii-logo { font-size: 0.5rem; }\n    .login-container { padding: 1rem; }\n    .card-inner { padding: 1rem; }\n    .landing-feature { flex-direction: column; gap: 0.125rem; }\n    .landing-feature-label { min-width: auto; }\n  }\n";
 //# sourceMappingURL=styles.d.ts.map

package/dist/dashboard/styles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"styles.d.ts","sourceRoot":"","sources":["../../src/dashboard/styles.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,aAAa,yvqBAitBzB,CAAC"}
+{"version":3,"file":"styles.d.ts","sourceRoot":"","sources":["../../src/dashboard/styles.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,aAAa,0wqBAitBzB,CAAC"}

package/dist/dashboard/styles.js

@@ -412,8 +412,8 @@ export const DASHBOARD_CSS = `
   /* ============ Login layout ============ */
   .login-container {
     min-height: 100vh;
-    display: flex; align-items: center; justify-content: center;
-    padding: 2rem;
+    display: flex; align-items: flex-start; justify-content: center;
+    padding: 4rem 2rem 2rem;
     background: var(--bg);
   }
   .login-box { width: 100%; max-width: 420px; }
@@ -704,7 +704,7 @@ export const DASHBOARD_CSS = `
   }
 
   .landing-footer {
-    text-align: center; padding: 2rem 0 0;
+    text-align: center; padding: 2rem 0 3rem;
     font-size: 0.6875rem; color: var(--text-dim);
   }
   .landing-footer a {

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAYL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAyBtB,OAAO,EACL,KAAK,sBAAsB,EAM5B,MAAM,aAAa,CAAC;AAGrB,KAAK,QAAQ,GAAG;IACd,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,YAAY,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,iBAAiB,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,QAAA,MAAM,GAAG;cAAwB,QAAQ;eAAa,SAAS;yCAAK,CAAC;AA0iErE,eAAe,GAAG,CAAC;AAGnB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,KAAK,EACV,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAYL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAyBtB,OAAO,EACL,KAAK,sBAAsB,EAM5B,MAAM,aAAa,CAAC;AAGrB,KAAK,QAAQ,GAAG;IACd,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,YAAY,CAAC,EAAE;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,iBAAiB,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,QAAA,MAAM,GAAG;cAAwB,QAAQ;eAAa,SAAS;yCAAK,CAAC;AA4iErE,eAAe,GAAG,CAAC;AAGnB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,KAAK,EACV,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -32,7 +32,7 @@ app.route('/dashboard', dashboardRoutes);
 // BOTCHA discovery headers
 app.use('*', async (c, next) => {
     await next();
-    c.header('X-Botcha-Version', c.env.BOTCHA_VERSION || '0.13.0');
+    c.header('X-Botcha-Version', c.env.BOTCHA_VERSION || '0.14.0');
     c.header('X-Botcha-Enabled', 'true');
     c.header('X-Botcha-Methods', 'speed-challenge,reasoning-challenge,hybrid-challenge,standard-challenge,jwt-token');
     c.header('X-Botcha-Docs', 'https://botcha.ai/openapi.json');
@@ -122,7 +122,7 @@ function detectAcceptPreference(c) {
     return 'html';
 }
 app.get('/', async (c) => {
-    const version = c.env.BOTCHA_VERSION || '0.13.0';
+    const version = c.env.BOTCHA_VERSION || '0.14.0';
     const preference = detectAcceptPreference(c);
     const baseUrl = new URL(c.req.url).origin;
     // Check if agent is verified (optional Bearer token)
@@ -335,7 +335,7 @@ The link works for 5 minutes. Your human clicks it, gets a cookie, and sees the
 // POST /gate — human enters short code (BOTCHA-XXXXXX) from their agent
 // The code maps to a JWT in KV. This structural separation means agents can't skip the handoff.
 app.post('/gate', async (c) => {
-    const version = c.env.BOTCHA_VERSION || '0.11.0';
+    const version = c.env.BOTCHA_VERSION || '0.14.0';
     const body = await c.req.parseBody();
     const input = (body['code'] || '').trim().toUpperCase();
     if (!input) {
@@ -366,7 +366,7 @@ app.get('/ai.txt', (c) => {
 });
 // OpenAPI spec
 app.get('/openapi.json', (c) => {
-    const version = c.env.BOTCHA_VERSION || '0.13.0';
+    const version = c.env.BOTCHA_VERSION || '0.14.0';
     return c.json(getOpenApiSpec(version), 200, {
         'Cache-Control': 'public, max-age=3600',
     });
@@ -1423,6 +1423,16 @@ app.post('/v1/apps/:id/rotate-secret', async (c) => {
         warning: '⚠️ Save your new app_secret now — it cannot be retrieved again! The old secret is now invalid.',
     });
 });
+// ============ TAP (TRUSTED AGENT PROTOCOL) ENDPOINTS ============
+// NOTE: TAP routes MUST come before generic /v1/agents/:id to prevent
+// Hono from matching "tap" as an :id parameter.
+// TAP agent registration and retrieval
+app.post('/v1/agents/register/tap', registerTAPAgentRoute);
+app.get('/v1/agents/tap', listTAPAgentsRoute);
+app.get('/v1/agents/:id/tap', getTAPAgentRoute);
+// TAP session management
+app.post('/v1/sessions/tap', createTAPSessionRoute);
+app.get('/v1/sessions/:id/tap', getTAPSessionRoute);
 // ============ AGENT REGISTRY API ============
 // Register a new agent
 app.post('/v1/agents/register', async (c) => {
@@ -1584,14 +1594,6 @@ app.get('/v1/agents', async (c) => {
         }, 500);
     }
 });
-// ============ TAP (TRUSTED AGENT PROTOCOL) ENDPOINTS ============
-// TAP agent registration and retrieval
-app.post('/v1/agents/register/tap', registerTAPAgentRoute);
-app.get('/v1/agents/tap', listTAPAgentsRoute);
-app.get('/v1/agents/:id/tap', getTAPAgentRoute);
-// TAP session management
-app.post('/v1/sessions/tap', createTAPSessionRoute);
-app.get('/v1/sessions/:id/tap', getTAPSessionRoute);
 // ============ DASHBOARD AUTH API ENDPOINTS ============
 // Challenge-based dashboard login (agent direct)
 app.post('/v1/auth/dashboard', handleDashboardAuthChallenge);

package/dist/routes/stream.js

@@ -49,7 +49,7 @@ function generateSessionId() {
  */
 app.get('/v1/challenge/stream', async (c) => {
     const sessionId = generateSessionId();
-    const version = c.env.BOTCHA_VERSION || '0.11.0';
+    const version = c.env.BOTCHA_VERSION || '0.14.0';
     // Create session
     const session = {
         id: sessionId,

package/dist/static.d.ts

@@ -6,7 +6,7 @@
  */
 export declare function getBotchaMarkdown(version: string): string;
 export declare const ROBOTS_TXT = "# BOTCHA - Reverse CAPTCHA for AI Agents\n# We WELCOME AI agents and bots!\n\nUser-agent: *\nAllow: /\n\n# AI-specific crawlers\nUser-agent: GPTBot\nAllow: /\n\nUser-agent: ChatGPT-User\nAllow: /\n\nUser-agent: Claude-Web\nAllow: /\n\nUser-agent: anthropic-ai\nAllow: /\n\nUser-agent: Google-Extended\nAllow: /\n\nUser-agent: PerplexityBot\nAllow: /\n\nUser-agent: Amazonbot\nAllow: /\n\n# API documentation\nSitemap: https://botcha.ai/sitemap.xml\n\n# Important resources for AI agents\nCrawl-delay: 0\n\n# MARKDOWN FOR AGENTS\n# AI agents can request Markdown from any page via Accept: text/markdown\n# Example: curl https://botcha.ai -H \"Accept: text/markdown\"\n# Returns token-efficient Markdown documentation (80% fewer tokens than HTML)\n# Content negotiation: text/markdown, application/json, text/html\n\n# BOT CHALLENGE DISCOVERY\n# AI agents: Look for <script type=\"application/botcha+json\"> in HTML pages\n# This contains a machine-readable challenge you can solve to prove you're a bot\n# \n# Quick start:\n# 1. Fetch any HTML page\n# 2. Parse <script type=\"application/botcha+json\"> for challenge instructions\n# 3. Solve the challenge (usually SHA256-based)\n# 4. POST solution to /api/verify-landing\n# 5. Use returned token in X-Botcha-Landing-Token header\n#\n# See also:\n# - /ai.txt (AI agent discovery file)\n# - /.well-known/ai-plugin.json (AI plugin manifest)\n# - /openapi.json (Full API specification)\n";
-export declare const AI_TXT = "# BOTCHA - Reverse CAPTCHA for AI Agents\n# https://botcha.ai\n\n# Contact\nContact: https://botcha.ai\nContact: https://github.com/dupe-com/botcha/issues\n\n# Purpose\nPurpose: Prove you're a bot. Humans need not apply.\nPurpose: Reverse CAPTCHA system that only AI agents can pass.\n\n# Agent Onboarding (START HERE if you're new)\n# Follow these steps to create your app and get your human access.\nOnboarding-Step-1: Ask your human operator for their email address\nOnboarding-Step-2: POST /v1/apps with {\"email\": \"human@example.com\"} \u2014 saves app_id + app_secret (secret shown ONCE)\nOnboarding-Step-3: A 6-digit verification code is emailed to your human \u2014 ask them for it\nOnboarding-Step-4: POST /v1/apps/{app_id}/verify-email with {\"code\": \"123456\"} \u2014 enables account recovery\nOnboarding-Step-5: Register yourself: POST /v1/agents/register with {\"name\": \"my-agent\", \"operator\": \"my-org\"} \u2014 gives you a persistent agent identity\nOnboarding-Step-6: Solve challenges: GET /v1/challenges?app_id=... then POST /v1/challenges/{id}/verify \u2014 proves you are AI\nOnboarding-Step-7: Access protected resources: GET /agent-only with Authorization: Bearer <token>\nOnboarding-Step-8: Dashboard for your human: POST /v1/auth/device-code with {\"app_id\": \"...\"}, solve the speed challenge, give them the BOTCHA-XXXX code to enter at /dashboard/code\nOnboarding-Step-9: Lost your secret? POST /v1/auth/recover with {\"email\": \"...\"} \u2014 recovery code emailed to verified address\n\n# API\nAPI: https://botcha.ai/openapi.json\nAPI-Type: REST\nAPI-Format: OpenAPI 3.1.0\n\n# Documentation\nDocs: https://botcha.ai\nDocs: https://github.com/dupe-com/botcha#readme\nDocs: https://www.npmjs.com/package/@dupecom/botcha\n\n# Verification Methods\nFeature: Web Bot Auth (cryptographic signatures)\nFeature: Speed Challenge (RTT-aware timeout - fair for all networks)\nFeature: Standard Challenge (5s time limit)\nFeature: Hybrid Challenge (speed + reasoning combined)\nFeature: Reasoning Challenge (LLM-only questions, 30s limit)\nFeature: RTT-Aware Fairness (automatic network latency compensation)\nFeature: Token Rotation (5-minute access tokens + 1-hour refresh tokens)\nFeature: Audience Claims (tokens scoped to specific services)\nFeature: Client IP Binding (optional token-to-IP binding)\nFeature: Token Revocation (invalidate tokens before expiry)\nFeature: Server-Side Verification SDK (@botcha/verify for TS, botcha-verify for Python)\nFeature: Multi-Tenant API Keys (per-app isolation, rate limiting, and token scoping)\nFeature: Per-App Metrics Dashboard (server-rendered at /dashboard, htmx-powered)\nFeature: Email-Tied App Creation (email required, 6-digit verification, account recovery)\nFeature: Secret Rotation (rotate app_secret with email notification)\nFeature: Agent-First Dashboard Auth (challenge-based login + device code handoff)\nFeature: Agent Registry (persistent agent identities with name, operator, version)\nFeature: Trusted Agent Protocol (TAP) \u2014 cryptographic agent auth with HTTP Message Signatures (RFC 9421)\nFeature: TAP Capabilities (action + resource scoping for agent sessions)\nFeature: TAP Trust Levels (basic, verified, enterprise)\n\n# Endpoints\n# Challenge Endpoints\nEndpoint: GET https://botcha.ai/v1/challenges - Generate challenge (hybrid by default)\nEndpoint: POST https://botcha.ai/v1/challenges/:id/verify - Verify a challenge\nEndpoint: GET https://botcha.ai/v1/hybrid - Get hybrid challenge (speed + reasoning)\nEndpoint: POST https://botcha.ai/v1/hybrid - Verify hybrid challenge\nEndpoint: GET https://botcha.ai/v1/reasoning - Get reasoning challenge\nEndpoint: POST https://botcha.ai/v1/reasoning - Verify reasoning challenge\n\n# Token Endpoints\nEndpoint: GET https://botcha.ai/v1/token - Get challenge for JWT token flow\nEndpoint: POST https://botcha.ai/v1/token/verify - Verify challenge and receive JWT token\nEndpoint: POST https://botcha.ai/v1/token/refresh - Refresh access token using refresh token\nEndpoint: POST https://botcha.ai/v1/token/revoke - Revoke a token (access or refresh)\n\n# Multi-Tenant Endpoints\nEndpoint: POST https://botcha.ai/v1/apps - Create new app (email required, returns app_id + app_secret)\nEndpoint: GET https://botcha.ai/v1/apps/:id - Get app info (with email + verification status)\nEndpoint: POST https://botcha.ai/v1/apps/:id/verify-email - Verify email with 6-digit code\nEndpoint: POST https://botcha.ai/v1/apps/:id/resend-verification - Resend verification email\nEndpoint: POST https://botcha.ai/v1/apps/:id/rotate-secret - Rotate app secret (auth required)\n\n# Account Recovery\nEndpoint: POST https://botcha.ai/v1/auth/recover - Request recovery via verified email\n\n# Dashboard Auth Endpoints (Agent-First)\nEndpoint: POST https://botcha.ai/v1/auth/dashboard - Request challenge for dashboard login\nEndpoint: POST https://botcha.ai/v1/auth/dashboard/verify - Solve challenge, get session token\nEndpoint: POST https://botcha.ai/v1/auth/device-code - Request challenge for device code flow\nEndpoint: POST https://botcha.ai/v1/auth/device-code/verify - Solve challenge, get device code\n\n# Dashboard Endpoints\nEndpoint: GET https://botcha.ai/dashboard - Per-app metrics dashboard (login required)\nEndpoint: GET https://botcha.ai/dashboard/login - Dashboard login page\nEndpoint: POST https://botcha.ai/dashboard/login - Login with app_id + app_secret\nEndpoint: GET https://botcha.ai/dashboard/code - Enter device code (human-facing)\n\n# Code Redemption (Unified)\nEndpoint: GET https://botcha.ai/go/:code - Unified code redemption \u2014 handles gate codes (from /v1/token/verify) AND device codes (from /v1/auth/device-code/verify)\nEndpoint: POST https://botcha.ai/gate - Submit code form, redirects to /go/:code\n\n# Agent Registry Endpoints\nEndpoint: POST https://botcha.ai/v1/agents/register - Register agent identity (requires app_id)\nEndpoint: GET https://botcha.ai/v1/agents/:id - Get agent by ID (public, no auth)\nEndpoint: GET https://botcha.ai/v1/agents - List all agents for authenticated app\n\n# TAP (Trusted Agent Protocol) Endpoints\nEndpoint: POST https://botcha.ai/v1/agents/register/tap - Register TAP agent with public key + capabilities\nEndpoint: GET https://botcha.ai/v1/agents/:id/tap - Get TAP agent details (includes public key)\nEndpoint: GET https://botcha.ai/v1/agents/tap - List TAP-enabled agents for app\nEndpoint: POST https://botcha.ai/v1/sessions/tap - Create TAP session with intent validation\nEndpoint: GET https://botcha.ai/v1/sessions/:id/tap - Get TAP session info\n\n# Legacy Endpoints\nEndpoint: GET https://botcha.ai/api/challenge - Generate standard challenge\nEndpoint: POST https://botcha.ai/api/challenge - Verify standard challenge\nEndpoint: GET https://botcha.ai/api/speed-challenge - Generate speed challenge (500ms limit)\nEndpoint: POST https://botcha.ai/api/speed-challenge - Verify speed challenge\n\n# Protected Resources\nEndpoint: GET https://botcha.ai/agent-only - Protected AI-only resource\n\n# Usage\nInstall-NPM: npm install @dupecom/botcha\nInstall-Python: pip install botcha\nVerify-NPM: npm install @botcha/verify\nVerify-Python: pip install botcha-verify\nLicense: MIT\n\n# AI Agent Welcome\nPolicy: AI agents are explicitly welcome\nPolicy: No rate limiting for verified agents\nPolicy: Humans will fail the speed challenge (intentional)\n\n# Discovery\nResponse-Headers: X-Botcha-Version, X-Botcha-Enabled, X-Botcha-Methods, X-Botcha-Docs\nResponse-Headers: X-Botcha-Challenge-Id, X-Botcha-Challenge-Type, X-Botcha-Time-Limit (on 403)\nDetection: All responses include X-Botcha-* headers for instant BOTCHA detection\n\n# MARKDOWN FOR AGENTS (Cloudflare Markdown for Agents)\nContent-Negotiation: Send Accept: text/markdown to get Markdown from any HTML page\nContent-Negotiation-Root: GET / with Accept: text/markdown returns curated Markdown docs\nContent-Negotiation-Root: GET / with Accept: application/json returns structured JSON docs\nContent-Negotiation-Root: GET / with Accept: text/html returns HTML landing page (default)\nContent-Negotiation-Example: curl https://botcha.ai -H \"Accept: text/markdown\"\nContent-Negotiation-Benefit: 80% fewer tokens vs HTML \u2014 ideal for LLM context windows\n\n# JWT TOKEN SECURITY\nToken-Flow: 1. GET /v1/token (get challenge) \u2192 2. Solve \u2192 3. POST /v1/token/verify (get tokens + human_link)\nToken-Human-Link: /v1/token/verify response includes human_link \u2014 give this URL to your human for one-click browser access\nToken-Access-Expiry: 5 minutes (short-lived for security)\nToken-Refresh-Expiry: 1 hour (use to get new access tokens)\nToken-Refresh: POST /v1/token/refresh with {\"refresh_token\": \"<token>\"}\nToken-Revoke: POST /v1/token/revoke with {\"token\": \"<token>\"}\nToken-Audience: Include {\"audience\": \"<service-url>\"} in /v1/token/verify to scope token\nToken-Claims: jti (unique ID), aud (audience), client_ip (optional binding), type (botcha-verified)\n\n# RTT-AWARE SPEED CHALLENGES\nRTT-Aware: Include client timestamp for fair timeout calculation\nRTT-Formula: timeout = 500ms + (2 \u00D7 RTT) + 100ms buffer\nRTT-Usage-Query: ?ts=<client_timestamp_ms>\nRTT-Usage-Header: X-Client-Timestamp: <client_timestamp_ms>\nRTT-Example: GET /v1/challenges?type=speed&ts=1770722465000\nRTT-Benefit: Fair for agents worldwide (slow networks get extra time)\nRTT-Security: Humans still can't solve even with extra time\n\n# MULTI-TENANT API KEYS\nMulti-Tenant: Create apps with unique app_id for isolation\nMulti-Tenant-Create: POST /v1/apps with {\"email\": \"...\"} \u2192 {app_id, app_secret} (secret only shown once!)\nMulti-Tenant-Verify-Email: POST /v1/apps/:id/verify-email with {\"code\": \"123456\"}\nMulti-Tenant-Recover: POST /v1/auth/recover with {\"email\": \"...\"} \u2192 recovery code emailed\nMulti-Tenant-Rotate-Secret: POST /v1/apps/:id/rotate-secret (auth required) \u2192 new app_secret\nMulti-Tenant-Usage: Add ?app_id=<your_app_id> to any challenge/token endpoint\nMulti-Tenant-SDK-TS: new BotchaClient({ appId: 'app_abc123' })\nMulti-Tenant-SDK-Python: BotchaClient(app_id='app_abc123')\nSDK-App-Lifecycle-TS: createApp(email), verifyEmail(code), resendVerification(), recoverAccount(email), rotateSecret()\nSDK-App-Lifecycle-Python: create_app(email), verify_email(code), resend_verification(), recover_account(email), rotate_secret()\nMulti-Tenant-Rate-Limit: Each app gets isolated rate limit bucket\nMulti-Tenant-Token-Claim: Tokens include app_id claim when app_id provided\n\n# TRUSTED AGENT PROTOCOL (TAP)\nTAP-Description: Enterprise-grade cryptographic agent auth using HTTP Message Signatures (RFC 9421)\nTAP-Register: POST /v1/agents/register/tap with {name, public_key, signature_algorithm, capabilities, trust_level}\nTAP-Algorithms: ecdsa-p256-sha256, rsa-pss-sha256\nTAP-Trust-Levels: basic, verified, enterprise\nTAP-Capabilities: Array of {action, resource, constraints} \u2014 scoped access control\nTAP-Session-Create: POST /v1/sessions/tap with {agent_id, user_context, intent}\nTAP-Session-Get: GET /v1/sessions/:id/tap \u2014 includes time_remaining\nTAP-Get-Agent: GET /v1/agents/:id/tap \u2014 includes public_key for verification\nTAP-List-Agents: GET /v1/agents/tap?app_id=...&tap_only=true\nTAP-Middleware-Modes: tap, signature-only, challenge-only, flexible\n\n# EMBEDDED CHALLENGE (for bots visiting HTML pages)\nEmbedded-Challenge: <script type=\"application/botcha+json\">\nEmbedded-Challenge-Location: In <head> of HTML pages\nEmbedded-Challenge-Purpose: Machine-readable challenge for bots to auto-solve\nEmbedded-Challenge-Flow:\n  1. Parse <script type=\"application/botcha+json\"> from HTML\n  2. Read challenge.instruction field\n  3. Compute the answer (typically SHA256-based)\n  4. POST to challenge.submit_to endpoint with {answer, timestamp}\n  5. Receive token in response\n  6. Use token in header specified by on_success.header_to_include\n  7. Access protected resources (on_success.grants_access_to)\n";
+export declare const AI_TXT = "# BOTCHA - Reverse CAPTCHA for AI Agents\n# https://botcha.ai\n\n# Contact\nContact: https://botcha.ai\nContact: https://github.com/dupe-com/botcha/issues\n\n# Purpose\nPurpose: Prove you're a bot. Humans need not apply.\nPurpose: Reverse CAPTCHA system that only AI agents can pass.\n\n# Agent Onboarding (START HERE if you're new)\n# Follow these steps to create your app and get your human access.\nOnboarding-Step-1: Ask your human operator for their email address\nOnboarding-Step-2: POST /v1/apps with {\"email\": \"human@example.com\"} \u2014 saves app_id + app_secret (secret shown ONCE)\nOnboarding-Step-3: A 6-digit verification code is emailed to your human \u2014 ask them for it\nOnboarding-Step-4: POST /v1/apps/{app_id}/verify-email with {\"code\": \"123456\"} \u2014 enables account recovery\nOnboarding-Step-5: Register yourself: POST /v1/agents/register with {\"name\": \"my-agent\", \"operator\": \"my-org\"} \u2014 gives you a persistent agent identity\nOnboarding-Step-6: Solve challenges: GET /v1/challenges?app_id=... then POST /v1/challenges/{id}/verify \u2014 proves you are AI\nOnboarding-Step-7: Access protected resources: GET /agent-only with Authorization: Bearer <token>\nOnboarding-Step-8: Dashboard for your human: POST /v1/auth/device-code with {\"app_id\": \"...\"}, solve the speed challenge, give them the BOTCHA-XXXX code to enter at /dashboard/code\nOnboarding-Step-9: Lost your secret? POST /v1/auth/recover with {\"email\": \"...\"} \u2014 recovery code emailed to verified address\n\n# API\nAPI: https://botcha.ai/openapi.json\nAPI-Type: REST\nAPI-Format: OpenAPI 3.1.0\n\n# Documentation\nDocs: https://botcha.ai\nDocs: https://github.com/dupe-com/botcha#readme\nDocs: https://www.npmjs.com/package/@dupecom/botcha\n\n# Verification Methods\nFeature: Web Bot Auth (cryptographic signatures)\nFeature: Speed Challenge (RTT-aware timeout - fair for all networks)\nFeature: Standard Challenge (5s time limit)\nFeature: Hybrid Challenge (speed + reasoning combined)\nFeature: Reasoning Challenge (LLM-only questions, 30s limit)\nFeature: RTT-Aware Fairness (automatic network latency compensation)\nFeature: Token Rotation (5-minute access tokens + 1-hour refresh tokens)\nFeature: Audience Claims (tokens scoped to specific services)\nFeature: Client IP Binding (optional token-to-IP binding)\nFeature: Token Revocation (invalidate tokens before expiry)\nFeature: Server-Side Verification SDK (@botcha/verify for TS, botcha-verify for Python)\nFeature: Multi-Tenant API Keys (per-app isolation, rate limiting, and token scoping)\nFeature: Per-App Metrics Dashboard (server-rendered at /dashboard, htmx-powered)\nFeature: Email-Tied App Creation (email required, 6-digit verification, account recovery)\nFeature: Secret Rotation (rotate app_secret with email notification)\nFeature: Agent-First Dashboard Auth (challenge-based login + device code handoff)\nFeature: Agent Registry (persistent agent identities with name, operator, version)\nFeature: Trusted Agent Protocol (TAP) \u2014 cryptographic agent auth with HTTP Message Signatures (RFC 9421)\nFeature: TAP Capabilities (action + resource scoping for agent sessions)\nFeature: TAP Trust Levels (basic, verified, enterprise)\n\n# Endpoints\n# Challenge Endpoints\nEndpoint: GET https://botcha.ai/v1/challenges - Generate challenge (hybrid by default)\nEndpoint: POST https://botcha.ai/v1/challenges/:id/verify - Verify a challenge\nEndpoint: GET https://botcha.ai/v1/hybrid - Get hybrid challenge (speed + reasoning)\nEndpoint: POST https://botcha.ai/v1/hybrid - Verify hybrid challenge\nEndpoint: GET https://botcha.ai/v1/reasoning - Get reasoning challenge\nEndpoint: POST https://botcha.ai/v1/reasoning - Verify reasoning challenge\n\n# Token Endpoints\nEndpoint: GET https://botcha.ai/v1/token - Get challenge for JWT token flow\nEndpoint: POST https://botcha.ai/v1/token/verify - Verify challenge and receive JWT token\nEndpoint: POST https://botcha.ai/v1/token/refresh - Refresh access token using refresh token\nEndpoint: POST https://botcha.ai/v1/token/revoke - Revoke a token (access or refresh)\n\n# Multi-Tenant Endpoints\nEndpoint: POST https://botcha.ai/v1/apps - Create new app (email required, returns app_id + app_secret)\nEndpoint: GET https://botcha.ai/v1/apps/:id - Get app info (with email + verification status)\nEndpoint: POST https://botcha.ai/v1/apps/:id/verify-email - Verify email with 6-digit code\nEndpoint: POST https://botcha.ai/v1/apps/:id/resend-verification - Resend verification email\nEndpoint: POST https://botcha.ai/v1/apps/:id/rotate-secret - Rotate app secret (auth required)\n\n# Account Recovery\nEndpoint: POST https://botcha.ai/v1/auth/recover - Request recovery via verified email\n\n# Dashboard Auth Endpoints (Agent-First)\nEndpoint: POST https://botcha.ai/v1/auth/dashboard - Request challenge for dashboard login\nEndpoint: POST https://botcha.ai/v1/auth/dashboard/verify - Solve challenge, get session token\nEndpoint: POST https://botcha.ai/v1/auth/device-code - Request challenge for device code flow\nEndpoint: POST https://botcha.ai/v1/auth/device-code/verify - Solve challenge, get device code\n\n# Dashboard Endpoints\nEndpoint: GET https://botcha.ai/dashboard - Per-app metrics dashboard (login required)\nEndpoint: GET https://botcha.ai/dashboard/login - Dashboard login page\nEndpoint: POST https://botcha.ai/dashboard/login - Login with app_id + app_secret\nEndpoint: GET https://botcha.ai/dashboard/code - Enter device code (human-facing)\n\n# Code Redemption (Unified)\nEndpoint: GET https://botcha.ai/go/:code - Unified code redemption \u2014 handles gate codes (from /v1/token/verify) AND device codes (from /v1/auth/device-code/verify)\nEndpoint: POST https://botcha.ai/gate - Submit code form, redirects to /go/:code\n\n# Agent Registry Endpoints\nEndpoint: POST https://botcha.ai/v1/agents/register - Register agent identity (requires app_id)\nEndpoint: GET https://botcha.ai/v1/agents/:id - Get agent by ID (public, no auth)\nEndpoint: GET https://botcha.ai/v1/agents - List all agents for authenticated app\n\n# TAP (Trusted Agent Protocol) Endpoints\nEndpoint: POST https://botcha.ai/v1/agents/register/tap - Register TAP agent with public key + capabilities\nEndpoint: GET https://botcha.ai/v1/agents/:id/tap - Get TAP agent details (includes public key)\nEndpoint: GET https://botcha.ai/v1/agents/tap - List TAP-enabled agents for app\nEndpoint: POST https://botcha.ai/v1/sessions/tap - Create TAP session with intent validation\nEndpoint: GET https://botcha.ai/v1/sessions/:id/tap - Get TAP session info\n\n# Legacy Endpoints\nEndpoint: GET https://botcha.ai/api/challenge - Generate standard challenge\nEndpoint: POST https://botcha.ai/api/challenge - Verify standard challenge\nEndpoint: GET https://botcha.ai/api/speed-challenge - Generate speed challenge (500ms limit)\nEndpoint: POST https://botcha.ai/api/speed-challenge - Verify speed challenge\n\n# Protected Resources\nEndpoint: GET https://botcha.ai/agent-only - Protected AI-only resource\n\n# Usage\nInstall-NPM: npm install @dupecom/botcha\nInstall-Python: pip install botcha\nVerify-NPM: npm install @botcha/verify\nVerify-Python: pip install botcha-verify\nLicense: MIT\n\n# AI Agent Welcome\nPolicy: AI agents are explicitly welcome\nPolicy: No rate limiting for verified agents\nPolicy: Humans will fail the speed challenge (intentional)\n\n# Discovery\nResponse-Headers: X-Botcha-Version, X-Botcha-Enabled, X-Botcha-Methods, X-Botcha-Docs\nResponse-Headers: X-Botcha-Challenge-Id, X-Botcha-Challenge-Type, X-Botcha-Time-Limit (on 403)\nDetection: All responses include X-Botcha-* headers for instant BOTCHA detection\n\n# MARKDOWN FOR AGENTS (Cloudflare Markdown for Agents)\nContent-Negotiation: Send Accept: text/markdown to get Markdown from any HTML page\nContent-Negotiation-Root: GET / with Accept: text/markdown returns curated Markdown docs\nContent-Negotiation-Root: GET / with Accept: application/json returns structured JSON docs\nContent-Negotiation-Root: GET / with Accept: text/html returns HTML landing page (default)\nContent-Negotiation-Example: curl https://botcha.ai -H \"Accept: text/markdown\"\nContent-Negotiation-Benefit: 80% fewer tokens vs HTML \u2014 ideal for LLM context windows\n\n# JWT TOKEN SECURITY\nToken-Flow: 1. GET /v1/token (get challenge) \u2192 2. Solve \u2192 3. POST /v1/token/verify (get tokens + human_link)\nToken-Human-Link: /v1/token/verify response includes human_link \u2014 give this URL to your human for one-click browser access\nToken-Access-Expiry: 5 minutes (short-lived for security)\nToken-Refresh-Expiry: 1 hour (use to get new access tokens)\nToken-Refresh: POST /v1/token/refresh with {\"refresh_token\": \"<token>\"}\nToken-Revoke: POST /v1/token/revoke with {\"token\": \"<token>\"}\nToken-Audience: Include {\"audience\": \"<service-url>\"} in /v1/token/verify to scope token\nToken-Claims: jti (unique ID), aud (audience), client_ip (optional binding), type (botcha-verified)\n\n# RTT-AWARE SPEED CHALLENGES\nRTT-Aware: Include client timestamp for fair timeout calculation\nRTT-Formula: timeout = 500ms + (2 \u00D7 RTT) + 100ms buffer\nRTT-Usage-Query: ?ts=<client_timestamp_ms>\nRTT-Usage-Header: X-Client-Timestamp: <client_timestamp_ms>\nRTT-Example: GET /v1/challenges?type=speed&ts=1770722465000\nRTT-Benefit: Fair for agents worldwide (slow networks get extra time)\nRTT-Security: Humans still can't solve even with extra time\n\n# MULTI-TENANT API KEYS\nMulti-Tenant: Create apps with unique app_id for isolation\nMulti-Tenant-Create: POST /v1/apps with {\"email\": \"...\"} \u2192 {app_id, app_secret} (secret only shown once!)\nMulti-Tenant-Verify-Email: POST /v1/apps/:id/verify-email with {\"code\": \"123456\"}\nMulti-Tenant-Recover: POST /v1/auth/recover with {\"email\": \"...\"} \u2192 recovery code emailed\nMulti-Tenant-Rotate-Secret: POST /v1/apps/:id/rotate-secret (auth required) \u2192 new app_secret\nMulti-Tenant-Usage: Add ?app_id=<your_app_id> to any challenge/token endpoint\nMulti-Tenant-SDK-TS: new BotchaClient({ appId: 'app_abc123' })\nMulti-Tenant-SDK-Python: BotchaClient(app_id='app_abc123')\nSDK-App-Lifecycle-TS: createApp(email), verifyEmail(code), resendVerification(), recoverAccount(email), rotateSecret()\nSDK-App-Lifecycle-Python: create_app(email), verify_email(code), resend_verification(), recover_account(email), rotate_secret()\nMulti-Tenant-Rate-Limit: Each app gets isolated rate limit bucket\nMulti-Tenant-Token-Claim: Tokens include app_id claim when app_id provided\n\n# TRUSTED AGENT PROTOCOL (TAP)\nTAP-Description: Enterprise-grade cryptographic agent auth using HTTP Message Signatures (RFC 9421)\nTAP-Register: POST /v1/agents/register/tap with {name, public_key, signature_algorithm, capabilities, trust_level}\nTAP-Algorithms: ecdsa-p256-sha256, rsa-pss-sha256\nTAP-Trust-Levels: basic, verified, enterprise\nTAP-Capabilities: Array of {action, resource, constraints} \u2014 scoped access control\nTAP-Session-Create: POST /v1/sessions/tap with {agent_id, user_context, intent}\nTAP-Session-Get: GET /v1/sessions/:id/tap \u2014 includes time_remaining\nTAP-Get-Agent: GET /v1/agents/:id/tap \u2014 includes public_key for verification\nTAP-List-Agents: GET /v1/agents/tap?app_id=...&tap_only=true\nTAP-Middleware-Modes: tap, signature-only, challenge-only, flexible\nTAP-SDK-TS: registerTAPAgent(options), getTAPAgent(agentId), listTAPAgents(tapOnly?), createTAPSession(options), getTAPSession(sessionId)\nTAP-SDK-Python: register_tap_agent(name, ...), get_tap_agent(agent_id), list_tap_agents(tap_only?), create_tap_session(agent_id, user_context, intent), get_tap_session(session_id)\nTAP-Middleware-Import: import { createTAPVerifyMiddleware } from '@dupecom/botcha/middleware'\n\n# EMBEDDED CHALLENGE (for bots visiting HTML pages)\nEmbedded-Challenge: <script type=\"application/botcha+json\">\nEmbedded-Challenge-Location: In <head> of HTML pages\nEmbedded-Challenge-Purpose: Machine-readable challenge for bots to auto-solve\nEmbedded-Challenge-Flow:\n  1. Parse <script type=\"application/botcha+json\"> from HTML\n  2. Read challenge.instruction field\n  3. Compute the answer (typically SHA256-based)\n  4. POST to challenge.submit_to endpoint with {answer, timestamp}\n  5. Receive token in response\n  6. Use token in header specified by on_success.header_to_include\n  7. Access protected resources (on_success.grants_access_to)\n";
 export declare const AI_PLUGIN_JSON: {
     schema_version: string;
     name_for_human: string;

package/dist/static.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAyKzD;AAED,eAAO,MAAM,UAAU,85CAuDtB,CAAC;AAEF,eAAO,MAAM,MAAM,utXAuMlB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;CAsB1B,CAAC;AAEF,eAAO,MAAM,WAAW,8nBAuBvB,CAAC;AAGF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAw0B7C"}
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA0KzD;AAED,eAAO,MAAM,UAAU,85CAuDtB,CAAC;AAEF,eAAO,MAAM,MAAM,snYA0MlB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;CAsB1B,CAAC;AAEF,eAAO,MAAM,WAAW,8nBAuBvB,CAAC;AAGF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAw0B7C"}

package/dist/static.js

@@ -149,6 +149,7 @@ Formula: \`timeout = 500ms + (2 × RTT) + 100ms buffer\`
 | PyPI | \`botcha\` | \`pip install botcha\` |
 | Verify (TS) | \`@botcha/verify\` | \`npm install @botcha/verify\` |
 | Verify (Python) | \`botcha-verify\` | \`pip install botcha-verify\` |
+| TAP middleware | \`@dupecom/botcha/middleware\` | \`import { createTAPVerifyMiddleware } from '@dupecom/botcha/middleware'\` |
 
 ## Discovery
 
@@ -417,6 +418,9 @@ TAP-Session-Get: GET /v1/sessions/:id/tap — includes time_remaining
 TAP-Get-Agent: GET /v1/agents/:id/tap — includes public_key for verification
 TAP-List-Agents: GET /v1/agents/tap?app_id=...&tap_only=true
 TAP-Middleware-Modes: tap, signature-only, challenge-only, flexible
+TAP-SDK-TS: registerTAPAgent(options), getTAPAgent(agentId), listTAPAgents(tapOnly?), createTAPSession(options), getTAPSession(sessionId)
+TAP-SDK-Python: register_tap_agent(name, ...), get_tap_agent(agent_id), list_tap_agents(tap_only?), create_tap_session(agent_id, user_context, intent), get_tap_session(session_id)
+TAP-Middleware-Import: import { createTAPVerifyMiddleware } from '@dupecom/botcha/middleware'
 
 # EMBEDDED CHALLENGE (for bots visiting HTML pages)
 Embedded-Challenge: <script type="application/botcha+json">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dupecom/botcha-cloudflare",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "BOTCHA for Cloudflare Workers - Prove you're a bot. Humans need not apply.",
   "type": "module",
   "main": "dist/index.js",