npm - @dynamic-labs-sdk/react-native-captcha - Versions diffs - 0.0.0 → 1.27.2 - Mend

@dynamic-labs-sdk/react-native-captcha 0.0.0 → 1.27.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (17) hide show

package/README.md +92 -0
package/dist/components/HCaptchaChallenge/HCaptchaChallenge.d.ts +86 -0
package/dist/components/HCaptchaChallenge/HCaptchaChallenge.d.ts.map +1 -0
package/dist/components/TurnstileChallenge/TurnstileChallenge.d.ts +86 -0
package/dist/components/TurnstileChallenge/TurnstileChallenge.d.ts.map +1 -0
package/dist/errors/HCaptchaError.d.ts +30 -0
package/dist/errors/HCaptchaError.d.ts.map +1 -0
package/dist/errors/TurnstileError.d.ts +30 -0
package/dist/errors/TurnstileError.d.ts.map +1 -0
package/dist/exports/index.d.ts +7 -0
package/dist/exports/index.d.ts.map +1 -0
package/dist/index.cjs +434 -0
package/dist/index.cjs.map +1 -0
package/dist/index.esm.js +400 -0
package/dist/index.esm.js.map +1 -0
package/dist/tsconfig.lib.tsbuildinfo +1 -0
package/package.json +45 -1

package/dist/index.esm.js ADDED Viewed

@@ -0,0 +1,400 @@
+import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
+import { useMemo, useRef } from "react";
+import { StyleSheet, View } from "react-native";
+import WebView from "react-native-webview";
+import { createLogger } from "@dynamic-labs-sdk/client/core";
+import * as z from "zod/mini";
+import { BaseError } from "@dynamic-labs-sdk/client";
+import { jsx } from "react/jsx-runtime";
+//#region package.json
+var name = "@dynamic-labs-sdk/react-native-captcha";
+var version = "1.27.2";
+//#endregion
+//#region src/errors/HCaptchaError.ts
+/**
+* Thrown when the embedded hCaptcha challenge fails to resolve — for example
+* the widget reports an error, the token expires, or the user closes the
+* challenge without completing it.
+*
+* The {@link HCaptchaChallenge} component surfaces this typed error through its
+* `onError` callback so consumers can distinguish a failed captcha from other
+* failures and prompt the user to retry rather than treating it as a fatal
+* error.
+*
+* @example
+* ```tsx
+* <HCaptchaChallenge
+*   onError={(error) => {
+*     if (error instanceof HCaptchaError) {
+*       promptRetry(error.message);
+*     }
+*   }}
+* />
+* ```
+* @see HCaptchaChallenge
+* @see HCaptchaChallengeProps
+*/
+var HCaptchaError = class extends BaseError {
+	constructor({ description }) {
+		super({
+			cause: null,
+			code: "hcaptcha_failed",
+			docsUrl: null,
+			name: "HCaptchaError",
+			shortMessage: `hCaptcha failed: ${description ?? "unknown error"}`
+		});
+	}
+};
+//#endregion
+//#region src/components/HCaptchaChallenge/HCaptchaChallenge.tsx
+/**
+* `testID` e2e drivers use to locate the hCaptcha widget on screen.
+*
+* @example
+* ```tsx
+* <View testID={HCAPTCHA_CHALLENGE_TEST_ID} />
+* ```
+* @see HCaptchaChallenge
+* @see HCaptchaChallengeProps
+*/
+const HCAPTCHA_CHALLENGE_TEST_ID = "hcaptcha-challenge";
+const bridgeMessageSchema$1 = z.union([z.object({
+	message: z.optional(z.string()),
+	type: z.enum(["error"])
+}), z.object({
+	token: z.string(),
+	type: z.enum(["token"])
+})]);
+const sanitizeSiteKey$1 = (siteKey) => siteKey.replace(/[^\w-]/g, "");
+const buildHCaptchaHtml = (siteKey) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <!-- No Subresource Integrity: hCaptcha serves a mutable loader script and
+       does not support SRI pinning; a pinned hash would break on their next
+       deploy. The script loads from hCaptcha's own origin over HTTPS. -->
+  <script src="https://js.hcaptcha.com/1/api.js" async defer><\/script>
+</head>
+<body style="margin:0;padding:0;display:flex;justify-content:center;align-items:center;min-height:100vh;">
+  <div
+    class="h-captcha"
+    data-sitekey="${siteKey}"
+    data-callback="onSuccess"
+    data-error-callback="onChallengeError"
+    data-expired-callback="onExpired"
+  ></div>
+  <script>
+    const post = (payload) => {
+      window.ReactNativeWebView.postMessage(JSON.stringify(payload));
+    };
+    // hCaptcha resolves the data-*-callback attributes by name off the global
+    // scope, so these handlers must be assigned onto window — a bare const
+    // binding would not be reachable and the callbacks would never fire.
+    window.onSuccess = (token) => {
+      post({ type: 'token', token: token });
+    };
+    window.onChallengeError = (error) => {
+      // Cap the hCaptcha-supplied error before forwarding it: it only ends up
+      // in an HCaptchaError message, so bound its length rather than surface an
+      // arbitrarily long string from the widget.
+      const errorMessage = String(error).substring(0, 200);
+      post({ type: 'error', message: 'challenge error: ' + errorMessage });
+    };
+    window.onExpired = () => {
+      post({ type: 'error', message: 'token expired before it was claimed' });
+    };
+  <\/script>
+</body>
+</html>
+`;
+/**
+* Renders the hCaptcha checkbox widget in an inline WebView and reports the
+* resulting captcha token over the postMessage bridge. The caller hands the
+* token to the SDK's `setCaptchaToken`. Exactly one of `onToken`/`onError`
+* fires, exactly once — the first terminal event (token, challenge error,
+* expiry, or WebView load failure) wins.
+*
+* @example
+* ```tsx
+* <HCaptchaChallenge
+*   baseUrl="https://your-whitelisted-origin.com"
+*   siteKey="10000000-ffff-ffff-ffff-000000000001"
+*   onToken={(token) => setCaptchaToken({ captchaToken: token })}
+*   onError={(error) => console.error(error.message)}
+*   style={{ height: 260 }}
+*   logLevel="warn"
+* />
+* ```
+* @returns A React Native view that hosts the captcha WebView.
+* @see HCaptchaChallengeProps
+* @see HCaptchaError
+*/
+const HCaptchaChallenge = ({ baseUrl, logLevel, onError, onToken, siteKey, style }) => {
+	const settledRef = useRef(false);
+	const logger = useMemo(() => createLogger({ level: logLevel ?? "warn" }), [logLevel]);
+	const settleWith = (dispatch) => {
+		if (settledRef.current) return;
+		settledRef.current = true;
+		dispatch();
+	};
+	const handleMessage = (event) => {
+		let data;
+		try {
+			data = JSON.parse(event.nativeEvent.data);
+		} catch (error) {
+			logger.debug("Malformed hCaptcha bridge message", {
+				error: error instanceof Error ? error.message : String(error),
+				rawData: String(event.nativeEvent.data).slice(0, 200)
+			});
+			return;
+		}
+		const parsed = bridgeMessageSchema$1.safeParse(data);
+		if (!parsed.success) {
+			logger.debug("Malformed hCaptcha bridge message", {
+				error: parsed.error.message,
+				rawData: String(event.nativeEvent.data).slice(0, 200)
+			});
+			return;
+		}
+		if (parsed.data.type === "token") {
+			const token = parsed.data.token;
+			settleWith(() => onToken(token));
+		} else {
+			const message = parsed.data.message;
+			settleWith(() => onError(new HCaptchaError({ description: message })));
+		}
+	};
+	const handleLoadError = (event) => {
+		settleWith(() => onError(new HCaptchaError({ description: `WebView failed to load: ${event.nativeEvent.description ?? "unknown error"}` })));
+	};
+	return /* @__PURE__ */ jsx(View, {
+		style: [styles$1.container, style],
+		testID: HCAPTCHA_CHALLENGE_TEST_ID,
+		children: /* @__PURE__ */ jsx(WebView, {
+			domStorageEnabled: true,
+			javaScriptEnabled: true,
+			thirdPartyCookiesEnabled: true,
+			onError: handleLoadError,
+			onHttpError: handleLoadError,
+			onMessage: handleMessage,
+			originWhitelist: ["https://*"],
+			source: {
+				baseUrl,
+				html: buildHCaptchaHtml(sanitizeSiteKey$1(siteKey))
+			},
+			style: styles$1.webView
+		})
+	});
+};
+const styles$1 = StyleSheet.create({
+	container: {
+		height: 260,
+		overflow: "hidden"
+	},
+	webView: {
+		backgroundColor: "transparent",
+		flex: 1
+	}
+});
+//#endregion
+//#region src/errors/TurnstileError.ts
+/**
+* Thrown when the embedded Cloudflare Turnstile challenge fails to resolve —
+* for example the widget reports an error, the token expires, or the user
+* closes the challenge without completing it.
+*
+* The {@link TurnstileChallenge} component surfaces this typed error through
+* its `onError` callback so consumers can distinguish a failed captcha from
+* other failures and prompt the user to retry rather than treating it as a
+* fatal error.
+*
+* @example
+* ```tsx
+* <TurnstileChallenge
+*   onError={(error) => {
+*     if (error instanceof TurnstileError) {
+*       promptRetry(error.message);
+*     }
+*   }}
+* />
+* ```
+* @see TurnstileChallenge
+* @see TurnstileChallengeProps
+*/
+var TurnstileError = class extends BaseError {
+	constructor({ description }) {
+		super({
+			cause: null,
+			code: "turnstile_failed",
+			docsUrl: null,
+			name: "TurnstileError",
+			shortMessage: `Turnstile failed: ${description ?? "unknown error"}`
+		});
+	}
+};
+//#endregion
+//#region src/components/TurnstileChallenge/TurnstileChallenge.tsx
+/**
+* `testID` e2e drivers use to locate the Turnstile widget on screen.
+*
+* @example
+* ```tsx
+* <View testID={TURNSTILE_CHALLENGE_TEST_ID} />
+* ```
+* @see TurnstileChallenge
+* @see TurnstileChallengeProps
+*/
+const TURNSTILE_CHALLENGE_TEST_ID = "turnstile-challenge";
+const bridgeMessageSchema = z.union([z.object({
+	message: z.optional(z.string()),
+	type: z.enum(["error"])
+}), z.object({
+	token: z.string(),
+	type: z.enum(["token"])
+})]);
+const sanitizeSiteKey = (siteKey) => siteKey.replace(/[^\w-]/g, "");
+const buildTurnstileHtml = (siteKey) => `
+<!DOCTYPE html>
+<html>
+<head>
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <!-- No Subresource Integrity: Cloudflare serves a mutable loader script and
+       does not support SRI pinning; a pinned hash would break on their next
+       deploy. The script loads from Cloudflare's own origin over HTTPS. -->
+  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer><\/script>
+</head>
+<body style="margin:0;padding:0;display:flex;justify-content:center;align-items:center;min-height:100vh;">
+  <div
+    class="cf-turnstile"
+    data-sitekey="${siteKey}"
+    data-callback="onSuccess"
+    data-error-callback="onError"
+    data-expired-callback="onExpired"
+  ></div>
+  <script>
+    const post = (payload) => {
+      window.ReactNativeWebView.postMessage(JSON.stringify(payload));
+    };
+    // Turnstile resolves the data-*-callback attributes by name off the global
+    // scope, so these handlers must be assigned onto window — a bare const
+    // binding would not be reachable and the callbacks would never fire.
+    window.onSuccess = (token) => {
+      post({ type: 'token', token: token });
+    };
+    window.onError = (error) => {
+      // Cap the Turnstile-supplied error before forwarding it: it only ends up
+      // in a TurnstileError message, so bound its length rather than surface an
+      // arbitrarily long string from the widget.
+      const errorMessage = String(error).substring(0, 200);
+      post({ type: 'error', message: 'challenge error: ' + errorMessage });
+    };
+    window.onExpired = () => {
+      post({ type: 'error', message: 'token expired before it was claimed' });
+    };
+  <\/script>
+</body>
+</html>
+`;
+/**
+* Renders the Cloudflare Turnstile widget in an inline WebView and reports the
+* resulting captcha token over the postMessage bridge. The caller hands the
+* token to the SDK's `setCaptchaToken`. Exactly one of `onToken`/`onError`
+* fires, exactly once — the first terminal event (token, challenge error,
+* expiry, or WebView load failure) wins.
+*
+* @example
+* ```tsx
+* <TurnstileChallenge
+*   baseUrl="https://your-whitelisted-origin.com"
+*   siteKey="1x00000000000000000000AA"
+*   onToken={(token) => setCaptchaToken({ captchaToken: token })}
+*   onError={(error) => console.error(error.message)}
+*   style={{ height: 120 }}
+*   logLevel="warn"
+* />
+* ```
+* @returns A React Native view that hosts the captcha WebView.
+* @see TurnstileChallengeProps
+* @see TurnstileError
+*/
+const TurnstileChallenge = ({ baseUrl, logLevel, onError, onToken, siteKey, style }) => {
+	const settledRef = useRef(false);
+	const logger = useMemo(() => createLogger({ level: logLevel ?? "warn" }), [logLevel]);
+	const settleWith = (dispatch) => {
+		if (settledRef.current) return;
+		settledRef.current = true;
+		dispatch();
+	};
+	const handleMessage = (event) => {
+		let data;
+		try {
+			data = JSON.parse(event.nativeEvent.data);
+		} catch (error) {
+			logger.debug("Malformed Turnstile bridge message", {
+				error: error instanceof Error ? error.message : String(error),
+				rawData: String(event.nativeEvent.data).slice(0, 200)
+			});
+			return;
+		}
+		const parsed = bridgeMessageSchema.safeParse(data);
+		if (!parsed.success) {
+			logger.debug("Malformed Turnstile bridge message", {
+				error: parsed.error.message,
+				rawData: String(event.nativeEvent.data).slice(0, 200)
+			});
+			return;
+		}
+		if (parsed.data.type === "token") {
+			const token = parsed.data.token;
+			settleWith(() => onToken(token));
+		} else {
+			const message = parsed.data.message;
+			settleWith(() => onError(new TurnstileError({ description: message })));
+		}
+	};
+	const handleLoadError = (event) => {
+		settleWith(() => onError(new TurnstileError({ description: `WebView failed to load: ${event.nativeEvent.description ?? "unknown error"}` })));
+	};
+	return /* @__PURE__ */ jsx(View, {
+		style: [styles.container, style],
+		testID: TURNSTILE_CHALLENGE_TEST_ID,
+		children: /* @__PURE__ */ jsx(WebView, {
+			domStorageEnabled: true,
+			javaScriptEnabled: true,
+			thirdPartyCookiesEnabled: true,
+			onError: handleLoadError,
+			onHttpError: handleLoadError,
+			onMessage: handleMessage,
+			originWhitelist: ["https://*", "about:srcdoc"],
+			source: {
+				baseUrl,
+				html: buildTurnstileHtml(sanitizeSiteKey(siteKey))
+			},
+			style: styles.webView
+		})
+	});
+};
+const styles = StyleSheet.create({
+	container: {
+		height: 120,
+		overflow: "hidden"
+	},
+	webView: {
+		backgroundColor: "transparent",
+		flex: 1
+	}
+});
+//#endregion
+//#region src/exports/index.ts
+assertPackageVersion(name, version);
+//#endregion
+export { HCAPTCHA_CHALLENGE_TEST_ID, HCaptchaChallenge, HCaptchaError, TURNSTILE_CHALLENGE_TEST_ID, TurnstileChallenge, TurnstileError };
+//# sourceMappingURL=index.esm.js.map

package/dist/index.esm.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.esm.js","names":["bridgeMessageSchema","sanitizeSiteKey","HCaptchaChallenge: FC<HCaptchaChallengeProps>","data: unknown","styles","TurnstileChallenge: FC<TurnstileChallengeProps>","data: unknown","packageName","packageVersion"],"sources":["../package.json","../src/errors/HCaptchaError.ts","../src/components/HCaptchaChallenge/HCaptchaChallenge.tsx","../src/errors/TurnstileError.ts","../src/components/TurnstileChallenge/TurnstileChallenge.tsx","../src/exports/index.ts"],"sourcesContent":["","import { BaseError } from '@dynamic-labs-sdk/client';\n\n/**\n * Thrown when the embedded hCaptcha challenge fails to resolve — for example\n * the widget reports an error, the token expires, or the user closes the\n * challenge without completing it.\n *\n * The {@link HCaptchaChallenge} component surfaces this typed error through its\n * `onError` callback so consumers can distinguish a failed captcha from other\n * failures and prompt the user to retry rather than treating it as a fatal\n * error.\n *\n * @example\n * ```tsx\n * <HCaptchaChallenge\n * onError={(error) => {\n * if (error instanceof HCaptchaError) {\n * promptRetry(error.message);\n * }\n * }}\n * />\n * ```\n * @see HCaptchaChallenge\n * @see HCaptchaChallengeProps\n */\nexport class HCaptchaError extends BaseError {\n constructor({ description }: { description: string | undefined }) {\n super({\n cause: null,\n code: 'hcaptcha_failed',\n docsUrl: null,\n name: 'HCaptchaError',\n shortMessage: `hCaptcha failed: ${description ?? 'unknown error'}`,\n });\n }\n}\n","'use client';\n\nimport type { FC } from 'react';\nimport { useMemo, useRef } from 'react';\nimport type { StyleProp, ViewStyle } from 'react-native';\nimport { StyleSheet, View } from 'react-native';\nimport type { WebViewMessageEvent } from 'react-native-webview';\nimport WebView from 'react-native-webview';\nimport { type LogLevel, createLogger } from '@dynamic-labs-sdk/client/core';\nimport * as z from 'zod/mini';\n\nimport { HCaptchaError } from '../../errors/HCaptchaError';\n\n/**\n * `testID` e2e drivers use to locate the hCaptcha widget on screen.\n *\n * @example\n * ```tsx\n * <View testID={HCAPTCHA_CHALLENGE_TEST_ID} />\n * ```\n * @see HCaptchaChallenge\n * @see HCaptchaChallengeProps\n */\nexport const HCAPTCHA_CHALLENGE_TEST_ID = 'hcaptcha-challenge';\n\n// react-native-webview only exports the message event type from its root;\n// for error events this is the minimal shape both onError and onHttpError\n// deliver.\ntype WebViewErrorEvent = { nativeEvent: { description?: string } };\n\n// Payload the widget document posts over the bridge (see buildHCaptchaHtml).\nconst bridgeMessageSchema = z.union([\n z.object({\n message: z.optional(z.string()),\n type: z.enum(['error']),\n }),\n z.object({\n token: z.string(),\n type: z.enum(['token']),\n }),\n]);\n\n/**\n * Props for the {@link HCaptchaChallenge} component.\n *\n * @example\n * ```tsx\n * const props: HCaptchaChallengeProps = {\n * baseUrl: 'https://your-whitelisted-origin.com',\n * onError: console.error,\n * onToken: setToken,\n * siteKey: '10000000-ffff-ffff-ffff-000000000001',\n * logLevel: 'warn',\n * };\n * ```\n * @see HCaptchaChallenge\n * @see HCaptchaError\n */\nexport type HCaptchaChallengeProps = {\n /**\n * Origin the widget document is served under. hCaptcha refuses to render on\n * origin-less documents, and real (non-test) site keys only render on hosts\n * whitelisted for the key — pass an origin your site key accepts.\n */\n baseUrl: string;\n /**\n * Optional minimum log level for the component's internal logger. Defaults\n * to `'warn'` when omitted.\n */\n logLevel?: LogLevel;\n /**\n * Called when the widget cannot produce a token: the WebView fails to load,\n * hCaptcha reports a challenge error, or the token expires unclaimed —\n * so callers awaiting `onToken` fail immediately instead of hanging until\n * their own timeout.\n */\n onError: (error: HCaptchaError) => void;\n /** Called with the token hCaptcha issues when the widget is solved. */\n onToken: (token: string) => void;\n /**\n * The environment's hCaptcha site key, from the SDK's `getCaptchaSettings`.\n */\n siteKey: string;\n /**\n * Optional style for the outer container. Use this to set width/height,\n * margins, border radius, or background color to match your app's UI.\n */\n style?: StyleProp<ViewStyle>;\n};\n\n// The site key is server-controlled, but it lands inside an HTML attribute —\n// keep only the charset real hCaptcha site keys use so a misconfigured value\n// cannot break out of the markup.\nconst sanitizeSiteKey = (siteKey: string) => siteKey.replace(/[^\\w-]/g, '');\n\nconst buildHCaptchaHtml = (siteKey: string) => `\n<!DOCTYPE html>\n<html>\n<head>\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n \n <script src=\"https://js.hcaptcha.com/1/api.js\" async defer></script>\n</head>\n<body style=\"margin:0;padding:0;display:flex;justify-content:center;align-items:center;min-height:100vh;\">\n <div\n class=\"h-captcha\"\n data-sitekey=\"${siteKey}\"\n data-callback=\"onSuccess\"\n data-error-callback=\"onChallengeError\"\n data-expired-callback=\"onExpired\"\n ></div>\n <script>\n const post = (payload) => {\n window.ReactNativeWebView.postMessage(JSON.stringify(payload));\n };\n // hCaptcha resolves the data-*-callback attributes by name off the global\n // scope, so these handlers must be assigned onto window — a bare const\n // binding would not be reachable and the callbacks would never fire.\n window.onSuccess = (token) => {\n post({ type: 'token', token: token });\n };\n window.onChallengeError = (error) => {\n // Cap the hCaptcha-supplied error before forwarding it: it only ends up\n // in an HCaptchaError message, so bound its length rather than surface an\n // arbitrarily long string from the widget.\n const errorMessage = String(error).substring(0, 200);\n post({ type: 'error', message: 'challenge error: ' + errorMessage });\n };\n window.onExpired = () => {\n post({ type: 'error', message: 'token expired before it was claimed' });\n };\n </script>\n</body>\n</html>\n`;\n\n/**\n * Renders the hCaptcha checkbox widget in an inline WebView and reports the\n * resulting captcha token over the postMessage bridge. The caller hands the\n * token to the SDK's `setCaptchaToken`. Exactly one of `onToken`/`onError`\n * fires, exactly once — the first terminal event (token, challenge error,\n * expiry, or WebView load failure) wins.\n *\n * @example\n * ```tsx\n * <HCaptchaChallenge\n * baseUrl=\"https://your-whitelisted-origin.com\"\n * siteKey=\"10000000-ffff-ffff-ffff-000000000001\"\n * onToken={(token) => setCaptchaToken({ captchaToken: token })}\n * onError={(error) => console.error(error.message)}\n * style={{ height: 260 }}\n * logLevel=\"warn\"\n * />\n * ```\n * @returns A React Native view that hosts the captcha WebView.\n * @see HCaptchaChallengeProps\n * @see HCaptchaError\n */\nexport const HCaptchaChallenge: FC<HCaptchaChallengeProps> = ({\n baseUrl,\n logLevel,\n onError,\n onToken,\n siteKey,\n style,\n}) => {\n // First terminal event wins: hCaptcha only issues one token per solve, but\n // guard against duplicate bridge messages and double error events (onError\n // and onHttpError can both fire for one failure) so the callbacks keep\n // their called-once contract.\n const settledRef = useRef(false);\n\n const logger = useMemo(\n () => createLogger({ level: logLevel ?? 'warn' }),\n [logLevel]\n );\n\n // eslint-disable-next-line custom-rules/require-single-object-param -- (dispatch) is the entire input of this local helper\n const settleWith = (dispatch: () => void) => {\n if (settledRef.current) {\n return;\n }\n\n settledRef.current = true;\n dispatch();\n };\n\n const handleMessage = (event: WebViewMessageEvent) => {\n let data: unknown;\n try {\n data = JSON.parse(event.nativeEvent.data);\n } catch (error) {\n logger.debug('Malformed hCaptcha bridge message', {\n error: error instanceof Error ? error.message : String(error),\n rawData: String(event.nativeEvent.data).slice(0, 200),\n });\n return;\n }\n\n const parsed = bridgeMessageSchema.safeParse(data);\n if (!parsed.success) {\n logger.debug('Malformed hCaptcha bridge message', {\n error: parsed.error.message,\n rawData: String(event.nativeEvent.data).slice(0, 200),\n });\n return;\n }\n\n if (parsed.data.type === 'token') {\n const token = parsed.data.token;\n settleWith(() => onToken(token));\n } else {\n const message = parsed.data.message;\n settleWith(() => onError(new HCaptchaError({ description: message })));\n }\n };\n\n const handleLoadError = (event: WebViewErrorEvent) => {\n settleWith(() =>\n onError(\n new HCaptchaError({\n description: `WebView failed to load: ${event.nativeEvent.description ?? 'unknown error'}`,\n })\n )\n );\n };\n\n return (\n <View style={[styles.container, style]} testID={HCAPTCHA_CHALLENGE_TEST_ID}>\n <WebView\n domStorageEnabled\n javaScriptEnabled\n thirdPartyCookiesEnabled\n onError={handleLoadError}\n onHttpError={handleLoadError}\n onMessage={handleMessage}\n // https-only: hCaptcha's iframes may come from several hosts, but a\n // custom-scheme navigation escaping the WebView is never legitimate.\n originWhitelist={['https://*']}\n source={{\n baseUrl,\n html: buildHCaptchaHtml(sanitizeSiteKey(siteKey)),\n }}\n style={styles.webView}\n />\n </View>\n );\n};\n\nconst styles = StyleSheet.create({\n container: {\n // Tall enough for the checkbox widget plus the verification animation;\n // the challenge popup never appears with the always-pass test site key.\n height: 260,\n overflow: 'hidden',\n },\n webView: {\n backgroundColor: 'transparent',\n flex: 1,\n },\n});\n","import { BaseError } from '@dynamic-labs-sdk/client';\n\n/**\n * Thrown when the embedded Cloudflare Turnstile challenge fails to resolve —\n * for example the widget reports an error, the token expires, or the user\n * closes the challenge without completing it.\n *\n * The {@link TurnstileChallenge} component surfaces this typed error through\n * its `onError` callback so consumers can distinguish a failed captcha from\n * other failures and prompt the user to retry rather than treating it as a\n * fatal error.\n *\n * @example\n * ```tsx\n * <TurnstileChallenge\n * onError={(error) => {\n * if (error instanceof TurnstileError) {\n * promptRetry(error.message);\n * }\n * }}\n * />\n * ```\n * @see TurnstileChallenge\n * @see TurnstileChallengeProps\n */\nexport class TurnstileError extends BaseError {\n constructor({ description }: { description: string | undefined }) {\n super({\n cause: null,\n code: 'turnstile_failed',\n docsUrl: null,\n name: 'TurnstileError',\n shortMessage: `Turnstile failed: ${description ?? 'unknown error'}`,\n });\n }\n}\n","'use client';\n\nimport type { FC } from 'react';\nimport { useMemo, useRef } from 'react';\nimport type { StyleProp, ViewStyle } from 'react-native';\nimport { StyleSheet, View } from 'react-native';\nimport type { WebViewMessageEvent } from 'react-native-webview';\nimport WebView from 'react-native-webview';\nimport { type LogLevel, createLogger } from '@dynamic-labs-sdk/client/core';\nimport * as z from 'zod/mini';\n\nimport { TurnstileError } from '../../errors/TurnstileError';\n\n/**\n * `testID` e2e drivers use to locate the Turnstile widget on screen.\n *\n * @example\n * ```tsx\n * <View testID={TURNSTILE_CHALLENGE_TEST_ID} />\n * ```\n * @see TurnstileChallenge\n * @see TurnstileChallengeProps\n */\nexport const TURNSTILE_CHALLENGE_TEST_ID = 'turnstile-challenge';\n\n// react-native-webview only exports the message event type from its root;\n// for error events this is the minimal shape both onError and onHttpError\n// deliver.\ntype WebViewErrorEvent = { nativeEvent: { description?: string } };\n\n// Payload the widget document posts over the bridge (see buildTurnstileHtml).\nconst bridgeMessageSchema = z.union([\n z.object({\n message: z.optional(z.string()),\n type: z.enum(['error']),\n }),\n z.object({\n token: z.string(),\n type: z.enum(['token']),\n }),\n]);\n\n/**\n * Props for the {@link TurnstileChallenge} component.\n *\n * @example\n * ```tsx\n * const props: TurnstileChallengeProps = {\n * baseUrl: 'https://your-whitelisted-origin.com',\n * onError: console.error,\n * onToken: setToken,\n * siteKey: '1x00000000000000000000AA',\n * logLevel: 'warn',\n * };\n * ```\n * @see TurnstileChallenge\n * @see TurnstileError\n */\nexport type TurnstileChallengeProps = {\n /**\n * Origin the widget document is served under. Turnstile refuses to render on\n * origin-less documents, and real (non-test) site keys only render on hosts\n * whitelisted for the key — pass an origin your site key accepts.\n */\n baseUrl: string;\n /**\n * Optional minimum log level for the component's internal logger. Defaults\n * to `'warn'` when omitted.\n */\n logLevel?: LogLevel;\n /**\n * Called when the widget cannot produce a token: the WebView fails to load,\n * Turnstile reports a challenge error, or the token expires unclaimed —\n * so callers awaiting `onToken` fail immediately instead of hanging until\n * their own timeout.\n */\n onError: (error: TurnstileError) => void;\n /** Called with the token Turnstile issues when the widget is solved. */\n onToken: (token: string) => void;\n /**\n * The environment's Turnstile site key, from the SDK's `getCaptchaSettings`.\n */\n siteKey: string;\n /**\n * Optional style for the outer container. Use this to set width/height,\n * margins, border radius, or background color to match your app's UI.\n */\n style?: StyleProp<ViewStyle>;\n};\n\n// The site key is server-controlled, but it lands inside an HTML attribute —\n// keep only the charset real Turnstile site keys use so a misconfigured value\n// cannot break out of the markup.\nconst sanitizeSiteKey = (siteKey: string) => siteKey.replace(/[^\\w-]/g, '');\n\nconst buildTurnstileHtml = (siteKey: string) => `\n<!DOCTYPE html>\n<html>\n<head>\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n \n <script src=\"https://challenges.cloudflare.com/turnstile/v0/api.js\" async defer></script>\n</head>\n<body style=\"margin:0;padding:0;display:flex;justify-content:center;align-items:center;min-height:100vh;\">\n <div\n class=\"cf-turnstile\"\n data-sitekey=\"${siteKey}\"\n data-callback=\"onSuccess\"\n data-error-callback=\"onError\"\n data-expired-callback=\"onExpired\"\n ></div>\n <script>\n const post = (payload) => {\n window.ReactNativeWebView.postMessage(JSON.stringify(payload));\n };\n // Turnstile resolves the data-*-callback attributes by name off the global\n // scope, so these handlers must be assigned onto window — a bare const\n // binding would not be reachable and the callbacks would never fire.\n window.onSuccess = (token) => {\n post({ type: 'token', token: token });\n };\n window.onError = (error) => {\n // Cap the Turnstile-supplied error before forwarding it: it only ends up\n // in a TurnstileError message, so bound its length rather than surface an\n // arbitrarily long string from the widget.\n const errorMessage = String(error).substring(0, 200);\n post({ type: 'error', message: 'challenge error: ' + errorMessage });\n };\n window.onExpired = () => {\n post({ type: 'error', message: 'token expired before it was claimed' });\n };\n </script>\n</body>\n</html>\n`;\n\n/**\n * Renders the Cloudflare Turnstile widget in an inline WebView and reports the\n * resulting captcha token over the postMessage bridge. The caller hands the\n * token to the SDK's `setCaptchaToken`. Exactly one of `onToken`/`onError`\n * fires, exactly once — the first terminal event (token, challenge error,\n * expiry, or WebView load failure) wins.\n *\n * @example\n * ```tsx\n * <TurnstileChallenge\n * baseUrl=\"https://your-whitelisted-origin.com\"\n * siteKey=\"1x00000000000000000000AA\"\n * onToken={(token) => setCaptchaToken({ captchaToken: token })}\n * onError={(error) => console.error(error.message)}\n * style={{ height: 120 }}\n * logLevel=\"warn\"\n * />\n * ```\n * @returns A React Native view that hosts the captcha WebView.\n * @see TurnstileChallengeProps\n * @see TurnstileError\n */\nexport const TurnstileChallenge: FC<TurnstileChallengeProps> = ({\n baseUrl,\n logLevel,\n onError,\n onToken,\n siteKey,\n style,\n}) => {\n // First terminal event wins: Turnstile only issues one token per solve, but\n // guard against duplicate bridge messages and double error events (onError\n // and onHttpError can both fire for one failure) so the callbacks keep\n // their called-once contract.\n const settledRef = useRef(false);\n\n const logger = useMemo(\n () => createLogger({ level: logLevel ?? 'warn' }),\n [logLevel]\n );\n\n // eslint-disable-next-line custom-rules/require-single-object-param -- (dispatch) is the entire input of this local helper\n const settleWith = (dispatch: () => void) => {\n if (settledRef.current) {\n return;\n }\n\n settledRef.current = true;\n dispatch();\n };\n\n const handleMessage = (event: WebViewMessageEvent) => {\n let data: unknown;\n try {\n data = JSON.parse(event.nativeEvent.data);\n } catch (error) {\n logger.debug('Malformed Turnstile bridge message', {\n error: error instanceof Error ? error.message : String(error),\n rawData: String(event.nativeEvent.data).slice(0, 200),\n });\n return;\n }\n\n const parsed = bridgeMessageSchema.safeParse(data);\n if (!parsed.success) {\n logger.debug('Malformed Turnstile bridge message', {\n error: parsed.error.message,\n rawData: String(event.nativeEvent.data).slice(0, 200),\n });\n return;\n }\n\n if (parsed.data.type === 'token') {\n const token = parsed.data.token;\n settleWith(() => onToken(token));\n } else {\n const message = parsed.data.message;\n settleWith(() => onError(new TurnstileError({ description: message })));\n }\n };\n\n const handleLoadError = (event: WebViewErrorEvent) => {\n settleWith(() =>\n onError(\n new TurnstileError({\n description: `WebView failed to load: ${event.nativeEvent.description ?? 'unknown error'}`,\n })\n )\n );\n };\n\n return (\n <View style={[styles.container, style]} testID={TURNSTILE_CHALLENGE_TEST_ID}>\n <WebView\n domStorageEnabled\n javaScriptEnabled\n thirdPartyCookiesEnabled\n onError={handleLoadError}\n onHttpError={handleLoadError}\n onMessage={handleMessage}\n // Turnstile renders challenge frames over HTTPS, but its iOS WebView\n // placeholder iframes use about:blank/about:srcdoc (the WebView already\n // allows about:blank by default, so we only need to add about:srcdoc).\n // Keep the whitelist https-only to block cleartext or custom-scheme nav.\n originWhitelist={['https://*', 'about:srcdoc']}\n source={{\n baseUrl,\n html: buildTurnstileHtml(sanitizeSiteKey(siteKey)),\n }}\n style={styles.webView}\n />\n </View>\n );\n};\n\nconst styles = StyleSheet.create({\n container: {\n // Tall enough for the widget plus the verification animation.\n height: 120,\n overflow: 'hidden',\n },\n webView: {\n backgroundColor: 'transparent',\n flex: 1,\n },\n});\n","import { assertPackageVersion } from '@dynamic-labs-sdk/assert-package-version';\n\nimport {\n name as packageName,\n version as packageVersion,\n} from '../../package.json';\n\nassertPackageVersion(packageName, packageVersion);\n\nexport {\n HCAPTCHA_CHALLENGE_TEST_ID,\n HCaptchaChallenge,\n} from '../components/HCaptchaChallenge/HCaptchaChallenge';\nexport type { HCaptchaChallengeProps } from '../components/HCaptchaChallenge/HCaptchaChallenge';\nexport { HCaptchaError } from '../errors/HCaptchaError';\n\nexport {\n TURNSTILE_CHALLENGE_TEST_ID,\n TurnstileChallenge,\n} from '../components/TurnstileChallenge/TurnstileChallenge';\nexport type { TurnstileChallengeProps } from '../components/TurnstileChallenge/TurnstileChallenge';\nexport { TurnstileError } from '../errors/TurnstileError';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACyBA,IAAa,gBAAb,cAAmC,UAAU;CAC3C,YAAY,EAAE,eAAoD;AAChE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,oBAAoB,eAAe;GAClD,CAAC;;;;;;;;;;;;;;;;ACVN,MAAa,6BAA6B;AAQ1C,MAAMA,wBAAsB,EAAE,MAAM,CAClC,EAAE,OAAO;CACP,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CACxB,CAAC,EACF,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CACxB,CAAC,CACH,CAAC;AAqDF,MAAMC,qBAAmB,YAAoB,QAAQ,QAAQ,WAAW,GAAG;AAE3E,MAAM,qBAAqB,YAAoB;;;;;;;;;;;;;oBAa3B,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoD5B,MAAaC,qBAAiD,EAC5D,SACA,UACA,SACA,SACA,SACA,YACI;CAKJ,MAAM,aAAa,OAAO,MAAM;CAEhC,MAAM,SAAS,cACP,aAAa,EAAE,OAAO,YAAY,QAAQ,CAAC,EACjD,CAAC,SAAS,CACX;CAGD,MAAM,cAAc,aAAyB;AAC3C,MAAI,WAAW,QACb;AAGF,aAAW,UAAU;AACrB,YAAU;;CAGZ,MAAM,iBAAiB,UAA+B;EACpD,IAAIC;AACJ,MAAI;AACF,UAAO,KAAK,MAAM,MAAM,YAAY,KAAK;WAClC,OAAO;AACd,UAAO,MAAM,qCAAqC;IAChD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC7D,SAAS,OAAO,MAAM,YAAY,KAAK,CAAC,MAAM,GAAG,IAAI;IACtD,CAAC;AACF;;EAGF,MAAM,SAASH,sBAAoB,UAAU,KAAK;AAClD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAO,MAAM,qCAAqC;IAChD,OAAO,OAAO,MAAM;IACpB,SAAS,OAAO,MAAM,YAAY,KAAK,CAAC,MAAM,GAAG,IAAI;IACtD,CAAC;AACF;;AAGF,MAAI,OAAO,KAAK,SAAS,SAAS;GAChC,MAAM,QAAQ,OAAO,KAAK;AAC1B,oBAAiB,QAAQ,MAAM,CAAC;SAC3B;GACL,MAAM,UAAU,OAAO,KAAK;AAC5B,oBAAiB,QAAQ,IAAI,cAAc,EAAE,aAAa,SAAS,CAAC,CAAC,CAAC;;;CAI1E,MAAM,mBAAmB,UAA6B;AACpD,mBACE,QACE,IAAI,cAAc,EAChB,aAAa,2BAA2B,MAAM,YAAY,eAAe,mBAC1E,CAAC,CACH,CACF;;AAGH,QACE,oBAAC;EAAK,OAAO,CAACI,SAAO,WAAW,MAAM;EAAE,QAAQ;YAC9C,oBAAC;GACC;GACA;GACA;GACA,SAAS;GACT,aAAa;GACb,WAAW;GAGX,iBAAiB,CAAC,YAAY;GAC9B,QAAQ;IACN;IACA,MAAM,kBAAkBH,kBAAgB,QAAQ,CAAC;IAClD;GACD,OAAOG,SAAO;IACd;GACG;;AAIX,MAAMA,WAAS,WAAW,OAAO;CAC/B,WAAW;EAGT,QAAQ;EACR,UAAU;EACX;CACD,SAAS;EACP,iBAAiB;EACjB,MAAM;EACP;CACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;AC7OF,IAAa,iBAAb,cAAoC,UAAU;CAC5C,YAAY,EAAE,eAAoD;AAChE,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,qBAAqB,eAAe;GACnD,CAAC;;;;;;;;;;;;;;;;ACVN,MAAa,8BAA8B;AAQ3C,MAAM,sBAAsB,EAAE,MAAM,CAClC,EAAE,OAAO;CACP,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CACxB,CAAC,EACF,EAAE,OAAO;CACP,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CACxB,CAAC,CACH,CAAC;AAqDF,MAAM,mBAAmB,YAAoB,QAAQ,QAAQ,WAAW,GAAG;AAE3E,MAAM,sBAAsB,YAAoB;;;;;;;;;;;;;oBAa5B,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoD5B,MAAaC,sBAAmD,EAC9D,SACA,UACA,SACA,SACA,SACA,YACI;CAKJ,MAAM,aAAa,OAAO,MAAM;CAEhC,MAAM,SAAS,cACP,aAAa,EAAE,OAAO,YAAY,QAAQ,CAAC,EACjD,CAAC,SAAS,CACX;CAGD,MAAM,cAAc,aAAyB;AAC3C,MAAI,WAAW,QACb;AAGF,aAAW,UAAU;AACrB,YAAU;;CAGZ,MAAM,iBAAiB,UAA+B;EACpD,IAAIC;AACJ,MAAI;AACF,UAAO,KAAK,MAAM,MAAM,YAAY,KAAK;WAClC,OAAO;AACd,UAAO,MAAM,sCAAsC;IACjD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC7D,SAAS,OAAO,MAAM,YAAY,KAAK,CAAC,MAAM,GAAG,IAAI;IACtD,CAAC;AACF;;EAGF,MAAM,SAAS,oBAAoB,UAAU,KAAK;AAClD,MAAI,CAAC,OAAO,SAAS;AACnB,UAAO,MAAM,sCAAsC;IACjD,OAAO,OAAO,MAAM;IACpB,SAAS,OAAO,MAAM,YAAY,KAAK,CAAC,MAAM,GAAG,IAAI;IACtD,CAAC;AACF;;AAGF,MAAI,OAAO,KAAK,SAAS,SAAS;GAChC,MAAM,QAAQ,OAAO,KAAK;AAC1B,oBAAiB,QAAQ,MAAM,CAAC;SAC3B;GACL,MAAM,UAAU,OAAO,KAAK;AAC5B,oBAAiB,QAAQ,IAAI,eAAe,EAAE,aAAa,SAAS,CAAC,CAAC,CAAC;;;CAI3E,MAAM,mBAAmB,UAA6B;AACpD,mBACE,QACE,IAAI,eAAe,EACjB,aAAa,2BAA2B,MAAM,YAAY,eAAe,mBAC1E,CAAC,CACH,CACF;;AAGH,QACE,oBAAC;EAAK,OAAO,CAAC,OAAO,WAAW,MAAM;EAAE,QAAQ;YAC9C,oBAAC;GACC;GACA;GACA;GACA,SAAS;GACT,aAAa;GACb,WAAW;GAKX,iBAAiB,CAAC,aAAa,eAAe;GAC9C,QAAQ;IACN;IACA,MAAM,mBAAmB,gBAAgB,QAAQ,CAAC;IACnD;GACD,OAAO,OAAO;IACd;GACG;;AAIX,MAAM,SAAS,WAAW,OAAO;CAC/B,WAAW;EAET,QAAQ;EACR,UAAU;EACX;CACD,SAAS;EACP,iBAAiB;EACjB,MAAM;EACP;CACF,CAAC;;;;AChQF,qBAAqBC,MAAaC,QAAe"}