@kcaptcha/core 0.1.0

package/dist/challenge.d.ts

@@ -0,0 +1,20 @@
+import type { ResolvedConfig } from './config.js';
+import { type Geometry } from './geometry.js';
+/** Everything the browser receives. The code itself is NOT in here. */
+export interface Challenge {
+    /** Signed, opaque token. Send it back with the answer. */
+    token: string;
+    /** Dot geometry for the animation. */
+    geometry: Geometry;
+    /** Seconds until this challenge expires. */
+    expiresIn: number;
+}
+/**
+ * Internal: also returns the plaintext code so tests can solve challenges.
+ * Deliberately NOT re-exported from index.ts.
+ */
+export declare function _createChallengeWithCode(config: ResolvedConfig): {
+    code: string;
+    challenge: Challenge;
+};
+export declare function createChallenge(config: ResolvedConfig): Challenge;

package/dist/challenge.js

@@ -0,0 +1,37 @@
+import { randomInt } from 'node:crypto';
+import { buildGeometry } from './geometry.js';
+import { answerMac, nowSeconds, randomId, signToken } from './token.js';
+function randomCode(length, charset) {
+    let out = '';
+    for (let i = 0; i < length; i++) {
+        out += charset[randomInt(0, charset.length)];
+    }
+    return out;
+}
+/**
+ * Internal: also returns the plaintext code so tests can solve challenges.
+ * Deliberately NOT re-exported from index.ts.
+ */
+export function _createChallengeWithCode(config) {
+    const code = randomCode(config.codeLength, config.charset);
+    const id = randomId();
+    const exp = nowSeconds() + config.expire;
+    const token = signToken(config.secret, 'challenge', {
+        t: 'challenge',
+        id,
+        exp,
+        mac: answerMac(config.secret, id, code),
+    });
+    return {
+        code,
+        challenge: {
+            token,
+            geometry: buildGeometry(code),
+            expiresIn: config.expire,
+        },
+    };
+}
+export function createChallenge(config) {
+    return _createChallengeWithCode(config).challenge;
+}
+//# sourceMappingURL=challenge.js.map

package/dist/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../src/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,aAAa,EAAiB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAYxE,SAAS,UAAU,CAAC,MAAc,EAAE,OAAe;IACjD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAsB;IAI7D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAEzC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;QAClD,CAAC,EAAE,WAAW;QACd,EAAE;QACF,GAAG;QACH,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC;KACxC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,SAAS,EAAE;YACT,KAAK;YACL,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,MAAM;SACzB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,51 @@
+export interface KCaptchaStore {
+    /** Increment the counter at `key` (creating it with a TTL if new). Returns the new count. */
+    incr(key: string, ttlSeconds: number): Promise<number>;
+    /** Mark `key` as used. Returns true if newly set, false if it was already used. */
+    setOnce(key: string, ttlSeconds: number): Promise<boolean>;
+}
+export interface RateLimitOptions {
+    /** Max requests allowed per client IP per window. */
+    max: number;
+    /** Window length in seconds. */
+    windowSeconds: number;
+}
+export interface KCaptchaOptions {
+    /** REQUIRED. Server-side signing secret, at least 32 characters. Never expose to the client. */
+    secret: string;
+    /** Seconds until a challenge expires. Default 120. */
+    expire?: number;
+    /** Seconds a pass token (issued after solving) stays valid. Default 300. */
+    passExpire?: number;
+    /** Per-IP rate limit for new-code / verify-captcha. Default 10 requests per 60 s. */
+    rateLimit?: Partial<RateLimitOptions>;
+    /** Characters in each code. Default 5. */
+    codeLength?: number;
+    /** Characters codes are drawn from. Must all exist in the font. */
+    charset?: string;
+    /** Where replay-protection and rate-limit counters live. Default: in-memory. */
+    store?: KCaptchaStore;
+}
+export interface ResolvedConfig {
+    readonly secret: string;
+    readonly expire: number;
+    readonly passExpire: number;
+    readonly rateLimit: Readonly<RateLimitOptions>;
+    readonly codeLength: number;
+    readonly charset: string;
+    readonly store: KCaptchaStore;
+}
+export declare const DEFAULTS: {
+    readonly expire: 120;
+    readonly passExpire: 300;
+    readonly rateLimit: {
+        readonly max: 10;
+        readonly windowSeconds: 60;
+    };
+    readonly codeLength: 5;
+    readonly charset: "ABCDEFGHIJKLMNPQRSTUVWXYZ";
+};
+export declare class KCaptchaConfigError extends Error {
+    constructor(message: string);
+}
+export declare function resolveConfig(options: KCaptchaOptions): ResolvedConfig;

package/dist/config.js

@@ -0,0 +1,61 @@
+import { FONT } from './font.js';
+import { MemoryStore } from './stores/memory.js';
+export const DEFAULTS = {
+    expire: 120,
+    passExpire: 300,
+    rateLimit: { max: 10, windowSeconds: 60 },
+    codeLength: 5,
+    // O and 0 are drawn almost identically by the stroke font, so they are
+    // left out by default to keep the CAPTCHA humanly solvable.
+    charset: 'ABCDEFGHIJKLMNPQRSTUVWXYZ',
+};
+export class KCaptchaConfigError extends Error {
+    constructor(message) {
+        super(`[kCAPTCHA] ${message}`);
+        this.name = 'KCaptchaConfigError';
+    }
+}
+function intOption(name, value, fallback, min, max) {
+    if (value === undefined)
+        return fallback;
+    if (!Number.isInteger(value) || value < min || value > max) {
+        throw new KCaptchaConfigError(`"${name}" must be an integer between ${min} and ${max} (got ${String(value)}).`);
+    }
+    return value;
+}
+export function resolveConfig(options) {
+    if (!options || typeof options !== 'object') {
+        throw new KCaptchaConfigError('An options object with a "secret" is required.');
+    }
+    if (typeof options.secret !== 'string' || options.secret.length < 32) {
+        throw new KCaptchaConfigError('"secret" is required and must be at least 32 characters. ' +
+            'Generate one with: node -e "console.log(require(\'crypto\').randomBytes(32).toString(\'hex\'))"');
+    }
+    const expire = intOption('expire', options.expire, DEFAULTS.expire, 10, 900);
+    const passExpire = intOption('passExpire', options.passExpire, DEFAULTS.passExpire, 10, 3600);
+    const codeLength = intOption('codeLength', options.codeLength, DEFAULTS.codeLength, 4, 8);
+    const rateLimit = {
+        max: intOption('rateLimit.max', options.rateLimit?.max, DEFAULTS.rateLimit.max, 1, 10_000),
+        windowSeconds: intOption('rateLimit.windowSeconds', options.rateLimit?.windowSeconds, DEFAULTS.rateLimit.windowSeconds, 1, 86_400),
+    };
+    // Normalise charset: uppercase, de-duplicated, every char must have a glyph.
+    const charset = Array.from(new Set((options.charset ?? DEFAULTS.charset).toUpperCase())).join('');
+    if (charset.length < 16) {
+        throw new KCaptchaConfigError('"charset" needs at least 16 distinct characters for enough entropy.');
+    }
+    for (const ch of charset) {
+        if (!(ch in FONT)) {
+            throw new KCaptchaConfigError(`"charset" contains "${ch}", which has no glyph in the font.`);
+        }
+    }
+    return Object.freeze({
+        secret: options.secret,
+        expire,
+        passExpire,
+        rateLimit: Object.freeze(rateLimit),
+        codeLength,
+        charset,
+        store: options.store ?? new MemoryStore(),
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA+CjD,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,MAAM,EAAE,GAAG;IACX,UAAU,EAAE,GAAG;IACf,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;IACzC,UAAU,EAAE,CAAC;IACb,uEAAuE;IACvE,4DAA4D;IAC5D,OAAO,EAAE,2BAA2B;CAC5B,CAAC;AAEX,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,KAAyB,EACzB,QAAgB,EAChB,GAAW,EACX,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC3D,MAAM,IAAI,mBAAmB,CAC3B,IAAI,IAAI,gCAAgC,GAAG,QAAQ,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,mBAAmB,CAAC,gDAAgD,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrE,MAAM,IAAI,mBAAmB,CAC3B,2DAA2D;YACzD,iGAAiG,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAAqB;QAClC,GAAG,EAAE,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC;QAC1F,aAAa,EAAE,SAAS,CACtB,yBAAyB,EACzB,OAAO,CAAC,SAAS,EAAE,aAAa,EAChC,QAAQ,CAAC,SAAS,CAAC,aAAa,EAChC,CAAC,EACD,MAAM,CACP;KACF,CAAC;IAEF,6EAA6E;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,qEAAqE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,oCAAoC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;QACN,UAAU;QACV,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,UAAU;QACV,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC"}

package/dist/font.d.ts

@@ -0,0 +1,4 @@
+export type Pt = readonly [number, number];
+export type Segment = readonly ['L', Pt, Pt] | readonly ['Q', Pt, Pt, Pt] | readonly ['A', number, number, number, number, number, number];
+export type Glyph = readonly Segment[];
+export declare const FONT: Readonly<Record<string, Glyph>>;

package/dist/font.js

@@ -0,0 +1,129 @@
+// Stroke font for kCAPTCHA — corrected glyphs (all joints exact).
+// 0..1 unit box, y grows downward.
+// Arc angles in degrees, y down: 0 = right, 90 = bottom, 180 = left, 270/-90 = top.
+const L = (a, b) => ['L', a, b];
+const Q = (a, c, b) => ['Q', a, c, b];
+const A = (cx, cy, rx, ry, a0, a1) => ['A', cx, cy, rx, ry, a0, a1];
+export const FONT = {
+    // ---------- LETTERS ----------
+    'A': [
+        L([0.06, 1.00], [0.50, 0.00]), // left leg
+        L([0.50, 0.00], [0.94, 1.00]), // right leg
+        L([0.20, 0.68], [0.80, 0.68]), // crossbar: x = 0.50 ± 0.44·0.68 exactly on both legs
+    ],
+    'B': [
+        L([0.00, 0.00], [0.00, 1.00]), // stem
+        A(0.00, 0.25, 0.42, 0.25, -90, 90), // upper bowl: (0,0) → (0,0.50)
+        A(0.00, 0.75, 0.48, 0.25, -90, 90), // lower bowl: (0,0.50) → (0,1.00), wider
+    ],
+    'C': [
+        A(0.50, 0.50, 0.46, 0.50, -55, -305), // circle with a symmetric 110° gap on the right
+    ],
+    'D': [
+        L([0.00, 0.00], [0.00, 1.00]),
+        A(0.00, 0.50, 0.92, 0.50, -90, 90), // (0,0) → (0,1), max width at (0.92, 0.50)
+    ],
+    'E': [
+        L([0.00, 0.00], [0.92, 0.00]), // top bar starts ON the stem
+        L([0.00, 0.00], [0.00, 1.00]),
+        L([0.00, 1.00], [0.92, 1.00]),
+        L([0.00, 0.50], [0.72, 0.50]),
+    ],
+    'F': [
+        L([0.00, 0.00], [0.92, 0.00]), // top bar starts ON the stem
+        L([0.00, 0.00], [0.00, 1.00]),
+        L([0.00, 0.50], [0.72, 0.50]),
+    ],
+    'G': [
+        A(0.50, 0.50, 0.46, 0.50, -45, -360), // arc ends exactly at 0° = (0.96, 0.50)
+        L([0.96, 0.50], [0.96, 0.76]), // spur drops straight down from the arc end
+        L([0.96, 0.76], [0.55, 0.76]), // horizontal terminal, no double-back hook
+    ],
+    'H': [
+        L([0.04, 0.00], [0.04, 1.00]),
+        L([0.96, 0.00], [0.96, 1.00]),
+        L([0.04, 0.50], [0.96, 0.50]), //
+    ],
+    'I': [
+        L([0.14, 0.00], [0.86, 0.00]),
+        L([0.50, 0.00], [0.50, 1.00]),
+        L([0.14, 1.00], [0.86, 1.00]),
+    ],
+    'J': [
+        L([0.48, 0.00], [0.88, 0.00]),
+        L([0.88, 0.00], [0.88, 0.70]),
+        A(0.47, 0.70, 0.41, 0.30, 0, 180), // starts exactly at (0.88, 0.70); bottom lands at (0.47, 1.00)
+    ],
+    'K': [
+        L([0.05, 0.00], [0.05, 1.00]), // stem
+        L([0.95, 0.00], [0.05, 0.56]), // arm ends ON the stem
+        L([0.05, 0.56], [0.95, 1.00]), // leg starts at the same vertex — no gap, no kink
+    ],
+    'L': [
+        L([0.06, 0.00], [0.06, 1.00]),
+        L([0.06, 1.00], [0.92, 1.00]),
+    ],
+    'M': [
+        L([0.04, 1.00], [0.04, 0.00]),
+        L([0.04, 0.00], [0.50, 0.66]),
+        L([0.50, 0.66], [0.96, 0.00]),
+        L([0.96, 0.00], [0.96, 1.00]),
+    ],
+    'N': [
+        L([0.05, 1.00], [0.05, 0.00]),
+        L([0.05, 0.00], [0.95, 1.00]),
+        L([0.95, 1.00], [0.95, 0.00]),
+    ],
+    'O': [A(0.50, 0.50, 0.46, 0.50, 0, 360)],
+    'P': [
+        L([0.00, 0.00], [0.00, 1.00]),
+        A(0.00, 0.27, 0.46, 0.27, -90, 90), // (0,0) → (0,0.54)
+    ],
+    'Q': [
+        A(0.50, 0.48, 0.46, 0.48, 0, 360),
+        L([0.825, 0.819], [1.00, 1.00]), // tail starts exactly ON the circle (angle 45°)
+    ],
+    'R': [
+        L([0.00, 0.00], [0.00, 1.00]),
+        A(0.00, 0.27, 0.46, 0.27, -90, 90),
+        L([0.296, 0.477], [0.95, 1.00]), // leg starts exactly ON the bowl (angle 50°)
+    ],
+    'S': [
+        A(0.50, 0.28, 0.44, 0.22, -38, -270), // ends at waist (0.50, 0.50), tangent horizontal
+        A(0.50, 0.72, 0.44, 0.22, -90, 142), // starts at same waist, tangent horizontal — smooth
+    ],
+    'T': [
+        L([0.04, 0.00], [0.96, 0.00]),
+        L([0.50, 0.00], [0.50, 1.00]),
+    ],
+    'U': [
+        L([0.04, 0.00], [0.04, 0.60]),
+        A(0.50, 0.60, 0.46, 0.40, 180, 0), // (0.04, 0.60) → (0.96, 0.60), bottom at (0.50, 1.00)
+        L([0.96, 0.60], [0.96, 0.00]), // starts exactly where the arc ends
+    ],
+    'V': [
+        L([0.04, 0.00], [0.50, 1.00]),
+        L([0.50, 1.00], [0.96, 0.00]),
+    ],
+    'W': [
+        L([0.02, 0.00], [0.22, 1.00]),
+        L([0.22, 1.00], [0.50, 0.34]),
+        L([0.50, 0.34], [0.78, 1.00]),
+        L([0.78, 1.00], [0.98, 0.00]),
+    ],
+    'X': [
+        L([0.05, 0.00], [0.95, 1.00]), // ↘ diagonal: top-left → bottom-right
+        L([0.95, 0.00], [0.05, 1.00]), // ↙ diagonal: top-right → bottom-left
+    ],
+    'Y': [
+        L([0.05, 0.00], [0.50, 0.52]), // left arm ends exactly at the vertex
+        L([0.95, 0.00], [0.50, 0.52]), // right arm ends at the same vertex
+        L([0.50, 0.52], [0.50, 1.00]), // tail starts at the vertex — no gap, no kink
+    ],
+    'Z': [
+        L([0.05, 0.00], [0.95, 0.00]), // top bar
+        L([0.95, 0.00], [0.05, 1.00]), // diagonal starts exactly at the top bar's end
+        L([0.05, 1.00], [0.95, 1.00]), // bottom bar starts exactly at the diagonal's end
+    ],
+};
+//# sourceMappingURL=font.js.map

package/dist/font.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"font.js","sourceRoot":"","sources":["../src/font.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,mCAAmC;AACnC,oFAAoF;AAWpF,MAAM,CAAC,GAAG,CAAC,CAAK,EAAE,CAAK,EAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACjD,MAAM,CAAC,GAAG,CAAC,CAAK,EAAE,CAAK,EAAE,CAAK,EAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC,GAAG,CACR,EAAU,EAAE,EAAU,EAAE,EAAU,EAAE,EAAU,EAAE,EAAU,EAAE,EAAU,EAC7D,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,IAAI,GAAoC;IAErD,gCAAgC;IAC9B,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,WAAW;QAC5C,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAG,YAAY;QAC5C,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,sDAAsD;KACtF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAS,OAAO;QAC7C,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAI,+BAA+B;QACrE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAI,yCAAyC;KAChF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,gDAAgD;KACvF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAI,2CAA2C;KAClF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,6BAA6B;QAC9D,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,6BAA6B;QAC9D,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,wCAAwC;QAC9E,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAS,4CAA4C;QAClF,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAS,2CAA2C;KAClF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAG,EAAE;KACnC;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,EAAG,+DAA+D;KACpG;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAQ,OAAO;QAC5C,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAQ,uBAAuB;QAC5D,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAQ,kDAAkD;KACxF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAG,mBAAmB;KACzD;IACD,GAAG,EAAE;QACH,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC;QACjC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAM,gDAAgD;KACtF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAM,6CAA6C;KACnF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAG,iDAAiD;QACxF,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAG,oDAAoD;KAC3F;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAI,sDAAsD;QAC3F,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAQ,oCAAoC;KAC1E;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC9B;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,sCAAsC;QACvE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,sCAAsC;KACxE;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,sCAAsC;QACvE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,oCAAoC;QACrE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,8CAA8C;KAChF;IACD,GAAG,EAAE;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,UAAU;QAC3C,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,+CAA+C;QAChF,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAI,kDAAkD;KACpF;CACF,CAAC"}

package/dist/geometry.d.ts

@@ -0,0 +1,15 @@
+export declare const GLYPH_WIDTH = 56;
+export declare const GLYPH_HEIGHT = 120;
+export declare const GLYPH_GAP = 30;
+export declare const DOT_SPACING = 7;
+export interface Geometry {
+    /** Width of the moving string in pixels. */
+    width: number;
+    /** Height of the moving string in pixels. */
+    height: number;
+    /** Pixel distance between neighbouring dots along a pipe. */
+    spacing: number;
+    /** Each pipe is a flat polyline [x0, y0, x1, y1, ...] in string space. */
+    pipes: number[][];
+}
+export declare function buildGeometry(code: string): Geometry;

package/dist/geometry.js

@@ -0,0 +1,109 @@
+import { randomInt } from 'node:crypto';
+import { FONT } from './font.js';
+// Glyph box in pixels, taken from the original Kinetic CAPTCHA demo.
+export const GLYPH_WIDTH = 56;
+export const GLYPH_HEIGHT = 120;
+export const GLYPH_GAP = 30;
+export const DOT_SPACING = 7; // smaller number = denser dots, easier to read
+const STEP = GLYPH_WIDTH + GLYPH_GAP;
+// Padding keeps worst-case distortion (rotation + shear + wave) inside the box.
+const PAD_X = 16;
+const PAD_Y = 18;
+// Distance between sampled polyline points. Dots are placed by the client
+// along these polylines, so this only needs to be fine enough to look smooth.
+const SAMPLE_SPACING = 2.5;
+// Whole-string wave warp.
+const WARP_AMP = 1.5;
+const WARP_FREQ = 0.045;
+// Uniform float in [0, 1) from a CSPRNG.
+const rnd = () => randomInt(0, 1_000_000) / 1_000_000;
+const between = (lo, hi) => lo + rnd() * (hi - lo);
+const round1 = (n) => Math.round(n * 10) / 10;
+function randomTransform() {
+    return {
+        sx: between(0.95, 1.05),
+        sy: between(0.96, 1.04),
+        shear: between(-0.06, 0.06),
+        rot: between(-0.07, 0.07), // radians, about +/- 4 degrees
+        dx: between(-2, 2),
+        dy: between(-2, 2),
+    };
+}
+// Position on a pipe in glyph-local 0..1 units.
+function segmentPos(seg, t) {
+    if (seg[0] === 'L') {
+        const [, a, b] = seg;
+        return [a[0] + (b[0] - a[0]) * t, a[1] + (b[1] - a[1]) * t];
+    }
+    if (seg[0] === 'Q') {
+        const [, a, c, b] = seg;
+        const mt = 1 - t;
+        return [
+            mt * mt * a[0] + 2 * mt * t * c[0] + t * t * b[0],
+            mt * mt * a[1] + 2 * mt * t * c[1] + t * t * b[1],
+        ];
+    }
+    const [, cx, cy, rx, ry, a0, a1] = seg;
+    const angle = (a0 + (a1 - a0) * t) * (Math.PI / 180);
+    return [cx + rx * Math.cos(angle), cy + ry * Math.sin(angle)];
+}
+// Glyph-local (u, v) -> string-space pixels, with distortion applied.
+function place(u, v, tf, glyphIndex, phase) {
+    let x = (u - 0.5) * GLYPH_WIDTH * tf.sx;
+    let y = (v - 0.5) * GLYPH_HEIGHT * tf.sy;
+    x += tf.shear * y;
+    const cos = Math.cos(tf.rot);
+    const sin = Math.sin(tf.rot);
+    const rx = x * cos - y * sin;
+    const ry = x * sin + y * cos;
+    const px = PAD_X + glyphIndex * STEP + GLYPH_WIDTH / 2 + tf.dx + rx;
+    const py = PAD_Y + GLYPH_HEIGHT / 2 + tf.dy + ry + WARP_AMP * Math.sin(px * WARP_FREQ + phase);
+    return [px, py];
+}
+function samplePipe(seg, tf, glyphIndex, phase) {
+    // Estimate pixel length first so point count follows real size.
+    const PROBE = 64;
+    let length = 0;
+    let prev = place(...segmentPos(seg, 0), tf, glyphIndex, phase);
+    for (let i = 1; i <= PROBE; i++) {
+        const cur = place(...segmentPos(seg, i / PROBE), tf, glyphIndex, phase);
+        length += Math.hypot(cur[0] - prev[0], cur[1] - prev[1]);
+        prev = cur;
+    }
+    const n = Math.max(8, Math.ceil(length / SAMPLE_SPACING));
+    const out = [];
+    for (let i = 0; i <= n; i++) {
+        const [x, y] = place(...segmentPos(seg, i / n), tf, glyphIndex, phase);
+        out.push(round1(x), round1(y));
+    }
+    return out;
+}
+// Fisher-Yates with a CSPRNG, so pipe order does not reveal glyph order.
+function shuffle(items) {
+    for (let i = items.length - 1; i > 0; i--) {
+        const j = randomInt(0, i + 1);
+        [items[i], items[j]] = [items[j], items[i]];
+    }
+}
+export function buildGeometry(code) {
+    const phase = rnd() * Math.PI * 2;
+    const pipes = [];
+    for (let i = 0; i < code.length; i++) {
+        const glyph = FONT[code[i]];
+        if (!glyph) {
+            throw new Error(`[kCAPTCHA] No glyph for character "${code[i]}".`);
+        }
+        const tf = randomTransform();
+        for (const seg of glyph) {
+            pipes.push(samplePipe(seg, tf, i, phase));
+        }
+    }
+    shuffle(pipes);
+    return {
+        width: Math.ceil((code.length - 1) * STEP + GLYPH_WIDTH + 2 * PAD_X),
+        height: GLYPH_HEIGHT + 2 * PAD_Y,
+        spacing: DOT_SPACING,
+        pipes,
+    };
+}
+//# sourceMappingURL=geometry.js.map

package/dist/geometry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geometry.js","sourceRoot":"","sources":["../src/geometry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,IAAI,EAAgB,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,+CAA+C;AAE7E,MAAM,IAAI,GAAG,WAAW,GAAG,SAAS,CAAC;AAErC,gFAAgF;AAChF,MAAM,KAAK,GAAG,EAAE,CAAC;AACjB,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,0BAA0B;AAC1B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,SAAS,GAAG,KAAK,CAAC;AAsBxB,yCAAyC;AACzC,MAAM,GAAG,GAAG,GAAW,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC;AAC9D,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAU,EAAU,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3E,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;AAE9D,SAAS,eAAe;IACtB,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QACvB,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;QAC3B,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,+BAA+B;QAC1D,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACnB,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,SAAS,UAAU,CAAC,GAAY,EAAE,CAAS;IACzC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QACrB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QACxB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO;YACL,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjD,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,sEAAsE;AACtE,SAAS,KAAK,CACZ,CAAS,EACT,CAAS,EACT,EAAkB,EAClB,UAAkB,EAClB,KAAa;IAEb,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC;IACzC,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAC7B,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAE7B,MAAM,EAAE,GAAG,KAAK,GAAG,UAAU,GAAG,IAAI,GAAG,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;IACpE,MAAM,EAAE,GAAG,KAAK,GAAG,YAAY,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC;IAC/F,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CACjB,GAAY,EACZ,EAAkB,EAClB,UAAkB,EAClB,KAAa;IAEb,gEAAgE;IAChE,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAI,KAAU;IAC5B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,KAAK,CAAC,CAAC,CAAM,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,CAAC;IAEf,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC;QACpE,MAAM,EAAE,YAAY,GAAG,CAAC,GAAG,KAAK;QAChC,OAAO,EAAE,WAAW;QACpB,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export { resolveConfig, DEFAULTS, KCaptchaConfigError } from './config.js';
+export type { KCaptchaOptions, ResolvedConfig, KCaptchaStore, RateLimitOptions, } from './config.js';
+export { createChallenge } from './challenge.js';
+export type { Challenge } from './challenge.js';
+export type { Geometry } from './geometry.js';
+export { verifyAnswer, consumePass } from './verify.js';
+export type { VerifyResult, VerifyFailure, PassResult, PassFailure } from './verify.js';
+export { checkRateLimit } from './rate-limit.js';
+export type { RateLimitBucket, RateLimitResult } from './rate-limit.js';
+export { MemoryStore } from './stores/memory.js';
+export type { MemoryStoreOptions } from './stores/memory.js';
+export { RedisStore } from './stores/redis.js';
+export type { RedisCommands, IoRedisLike, NodeRedisLike } from './stores/redis.js';

package/dist/index.js

@@ -0,0 +1,7 @@
+export { resolveConfig, DEFAULTS, KCaptchaConfigError } from './config.js';
+export { createChallenge } from './challenge.js';
+export { verifyAnswer, consumePass } from './verify.js';
+export { checkRateLimit } from './rate-limit.js';
+export { MemoryStore } from './stores/memory.js';
+export { RedisStore } from './stores/redis.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAQ3E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIjD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,14 @@
+import type { ResolvedConfig } from './config.js';
+/** Each endpoint has its own counter, so solving attempts don't starve new-code requests. */
+export type RateLimitBucket = 'new-code' | 'verify-captcha';
+export interface RateLimitResult {
+    allowed: boolean;
+    limit: number;
+    remaining: number;
+    /** Seconds until the current window resets. */
+    retryAfter: number;
+}
+/**
+ * Fixed-window limiter. Store errors propagate: adapters must fail closed.
+ */
+export declare function checkRateLimit(config: ResolvedConfig, bucket: RateLimitBucket, ip: string): Promise<RateLimitResult>;

package/dist/rate-limit.js

@@ -0,0 +1,24 @@
+import { createHmac } from 'node:crypto';
+function clientKey(secret, ip) {
+    return createHmac('sha256', secret)
+        .update(`kcaptcha/v1/client:${ip}`)
+        .digest('hex')
+        .slice(0, 32);
+}
+/**
+ * Fixed-window limiter. Store errors propagate: adapters must fail closed.
+ */
+export async function checkRateLimit(config, bucket, ip) {
+    const { max, windowSeconds } = config.rateLimit;
+    const now = Math.floor(Date.now() / 1000);
+    const windowIndex = Math.floor(now / windowSeconds);
+    const key = `rl:${bucket}:${windowIndex}:${clientKey(config.secret, ip)}`;
+    const count = await config.store.incr(key, windowSeconds + 1);
+    return {
+        allowed: count <= max,
+        limit: max,
+        remaining: Math.max(0, max - count),
+        retryAfter: windowSeconds - (now % windowSeconds),
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAczC,SAAS,SAAS,CAAC,MAAc,EAAE,EAAU;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,sBAAsB,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAsB,EACtB,MAAuB,EACvB,EAAU;IAEV,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,MAAM,MAAM,IAAI,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,GAAG;QACrB,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC;QACnC,UAAU,EAAE,aAAa,GAAG,CAAC,GAAG,GAAG,aAAa,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/stores/memory.d.ts

@@ -0,0 +1,22 @@
+import type { KCaptchaStore } from '../config.js';
+export interface MemoryStoreOptions {
+    /** Hard cap on stored keys. Default 100000. */
+    maxEntries?: number;
+    /** How often expired keys are swept. Default 30 s. */
+    sweepIntervalSeconds?: number;
+}
+export declare class MemoryStore implements KCaptchaStore {
+    private readonly entries;
+    private readonly maxEntries;
+    private readonly timer;
+    constructor(options?: MemoryStoreOptions);
+    incr(key: string, ttlSeconds: number): Promise<number>;
+    setOnce(key: string, ttlSeconds: number): Promise<boolean>;
+    /** Remove expired keys. Runs on a timer and when the store is full. */
+    sweep(now?: number): void;
+    /** Stop the sweep timer and clear all data (useful in tests and on shutdown). */
+    close(): void;
+    get size(): number;
+    private live;
+    private hasRoom;
+}

package/dist/stores/memory.js

@@ -0,0 +1,65 @@
+export class MemoryStore {
+    entries = new Map();
+    maxEntries;
+    timer;
+    constructor(options = {}) {
+        this.maxEntries = options.maxEntries ?? 100_000;
+        this.timer = setInterval(() => this.sweep(), (options.sweepIntervalSeconds ?? 30) * 1000);
+        this.timer.unref(); // never keep the process alive just for cleanup
+    }
+    async incr(key, ttlSeconds) {
+        const now = Date.now();
+        const existing = this.live(key, now);
+        if (existing) {
+            existing.value += 1;
+            return existing.value;
+        }
+        // Full: fail closed by reporting an over-limit count.
+        if (!this.hasRoom(now))
+            return Number.MAX_SAFE_INTEGER;
+        this.entries.set(key, { value: 1, expiresAt: now + ttlSeconds * 1000 });
+        return 1;
+    }
+    async setOnce(key, ttlSeconds) {
+        const now = Date.now();
+        if (this.live(key, now))
+            return false;
+        // Full: fail closed by refusing (treated as "already used").
+        if (!this.hasRoom(now))
+            return false;
+        this.entries.set(key, { value: 1, expiresAt: now + ttlSeconds * 1000 });
+        return true;
+    }
+    /** Remove expired keys. Runs on a timer and when the store is full. */
+    sweep(now = Date.now()) {
+        for (const [key, entry] of this.entries) {
+            if (entry.expiresAt <= now)
+                this.entries.delete(key);
+        }
+    }
+    /** Stop the sweep timer and clear all data (useful in tests and on shutdown). */
+    close() {
+        clearInterval(this.timer);
+        this.entries.clear();
+    }
+    get size() {
+        return this.entries.size;
+    }
+    live(key, now) {
+        const entry = this.entries.get(key);
+        if (!entry)
+            return undefined;
+        if (entry.expiresAt <= now) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry;
+    }
+    hasRoom(now) {
+        if (this.entries.size < this.maxEntries)
+            return true;
+        this.sweep(now);
+        return this.entries.size < this.maxEntries;
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/stores/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/stores/memory.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,WAAW;IACL,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACnC,UAAU,CAAS;IACnB,KAAK,CAAiB;IAEvC,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,gDAAgD;IACtE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,UAAkB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,UAAkB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,IAAI,CAAC,GAAW,EAAE,GAAW;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,GAAW;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7C,CAAC;CACF"}

package/dist/stores/redis.d.ts

@@ -0,0 +1,27 @@
+import type { KCaptchaStore } from '../config.js';
+/** The two primitives the store needs. Implement these to support any Redis client. */
+export interface RedisCommands {
+    /** Atomically INCR and set the TTL if the key is new. Returns the new count. */
+    incrWithTtl(key: string, ttlSeconds: number): Promise<number>;
+    /** SET key NX EX ttl. Returns true only if the key did not exist. */
+    setNx(key: string, ttlSeconds: number): Promise<boolean>;
+}
+export interface IoRedisLike {
+    eval(...args: any[]): Promise<unknown>;
+    set(...args: any[]): Promise<unknown>;
+}
+export interface NodeRedisLike {
+    eval(...args: any[]): Promise<unknown>;
+    set(...args: any[]): Promise<unknown>;
+}
+export declare class RedisStore implements KCaptchaStore {
+    private readonly commands;
+    private readonly prefix;
+    constructor(commands: RedisCommands, prefix?: string);
+    /** ioredis: `RedisStore.fromIoRedis(new Redis(url))` */
+    static fromIoRedis(client: IoRedisLike, prefix?: string): RedisStore;
+    /** node-redis v4+: `RedisStore.fromNodeRedis(createClient({ url }))` */
+    static fromNodeRedis(client: NodeRedisLike, prefix?: string): RedisStore;
+    incr(key: string, ttlSeconds: number): Promise<number>;
+    setOnce(key: string, ttlSeconds: number): Promise<boolean>;
+}

package/dist/stores/redis.js

@@ -0,0 +1,44 @@
+const INCR_SCRIPT = `
+local c = redis.call('INCR', KEYS[1])
+if c == 1 then redis.call('EXPIRE', KEYS[1], tonumber(ARGV[1])) end
+return c
+`;
+/* eslint-enable @typescript-eslint/no-explicit-any */
+const ttl = (seconds) => Math.max(1, Math.ceil(seconds));
+export class RedisStore {
+    commands;
+    prefix;
+    constructor(commands, prefix = 'kcaptcha:') {
+        this.commands = commands;
+        this.prefix = prefix;
+    }
+    /** ioredis: `RedisStore.fromIoRedis(new Redis(url))` */
+    static fromIoRedis(client, prefix) {
+        return new RedisStore({
+            async incrWithTtl(key, seconds) {
+                return Number(await client.eval(INCR_SCRIPT, 1, key, String(ttl(seconds))));
+            },
+            async setNx(key, seconds) {
+                return (await client.set(key, '1', 'EX', ttl(seconds), 'NX')) === 'OK';
+            },
+        }, prefix);
+    }
+    /** node-redis v4+: `RedisStore.fromNodeRedis(createClient({ url }))` */
+    static fromNodeRedis(client, prefix) {
+        return new RedisStore({
+            async incrWithTtl(key, seconds) {
+                return Number(await client.eval(INCR_SCRIPT, { keys: [key], arguments: [String(ttl(seconds))] }));
+            },
+            async setNx(key, seconds) {
+                return (await client.set(key, '1', { EX: ttl(seconds), NX: true })) === 'OK';
+            },
+        }, prefix);
+    }
+    incr(key, ttlSeconds) {
+        return this.commands.incrWithTtl(this.prefix + key, ttlSeconds);
+    }
+    setOnce(key, ttlSeconds) {
+        return this.commands.setNx(this.prefix + key, ttlSeconds);
+    }
+}
+//# sourceMappingURL=redis.js.map

package/dist/stores/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/stores/redis.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAG;;;;CAInB,CAAC;AAoBF,sDAAsD;AAEtD,MAAM,GAAG,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzE,MAAM,OAAO,UAAU;IAEF;IACA;IAFnB,YACmB,QAAuB,EACvB,SAAiB,WAAW;QAD5B,aAAQ,GAAR,QAAQ,CAAe;QACvB,WAAM,GAAN,MAAM,CAAsB;IAC5C,CAAC;IAEJ,wDAAwD;IACxD,MAAM,CAAC,WAAW,CAAC,MAAmB,EAAE,MAAe;QACrD,OAAO,IAAI,UAAU,CACnB;YACE,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO;gBAC5B,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO;gBACtB,OAAO,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;YACzE,CAAC;SACF,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,aAAa,CAAC,MAAqB,EAAE,MAAe;QACzD,OAAO,IAAI,UAAU,CACnB;YACE,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO;gBAC5B,OAAO,MAAM,CACX,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CACnF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO;gBACtB,OAAO,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;YAC/E,CAAC;SACF,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,UAAkB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,UAAkB;QACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/token.d.ts

@@ -0,0 +1,31 @@
+export type TokenPurpose = 'challenge' | 'pass';
+export interface ChallengePayload {
+    t: 'challenge';
+    /** Unique challenge id (also the replay-protection key). */
+    id: string;
+    /** Expiry, unix seconds. */
+    exp: number;
+    /** HMAC of the correct answer. Useless without the server secret. */
+    mac: string;
+}
+export interface PassPayload {
+    t: 'pass';
+    /** The id of the challenge that was solved. */
+    id: string;
+    exp: number;
+}
+export type PayloadFor<P extends TokenPurpose> = P extends 'challenge' ? ChallengePayload : PassPayload;
+export type TokenError = 'invalid' | 'expired';
+export type TokenResult<P extends TokenPurpose> = {
+    ok: true;
+    payload: PayloadFor<P>;
+} | {
+    ok: false;
+    reason: TokenError;
+};
+export declare const nowSeconds: () => number;
+export declare const randomId: () => string;
+export declare function signToken<P extends TokenPurpose>(secret: string, purpose: P, payload: PayloadFor<P>): string;
+export declare function verifyToken<P extends TokenPurpose>(secret: string, purpose: P, token: string): TokenResult<P>;
+export declare function answerMac(secret: string, id: string, code: string): string;
+export declare function macMatches(secret: string, id: string, code: string, mac: string): boolean;

package/dist/token.js

@@ -0,0 +1,68 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+const MAX_TOKEN_LENGTH = 1024;
+export const nowSeconds = () => Math.floor(Date.now() / 1000);
+export const randomId = () => randomBytes(16).toString('base64url');
+// Domain separation: every purpose signs with its own key derived from the secret.
+function deriveKey(secret, label) {
+    return createHmac('sha256', secret).update(`kcaptcha/v1/${label}`).digest();
+}
+function safeEqual(a, b) {
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+export function signToken(secret, purpose, payload) {
+    const body = Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url');
+    const sig = createHmac('sha256', deriveKey(secret, `token:${purpose}`))
+        .update(body)
+        .digest('base64url');
+    return `${body}.${sig}`;
+}
+export function verifyToken(secret, purpose, token) {
+    if (token.length === 0 || token.length > MAX_TOKEN_LENGTH) {
+        return { ok: false, reason: 'invalid' };
+    }
+    const parts = token.split('.');
+    if (parts.length !== 2)
+        return { ok: false, reason: 'invalid' };
+    const [body, sig] = parts;
+    // Check the signature over the exact string received BEFORE parsing anything.
+    const expected = createHmac('sha256', deriveKey(secret, `token:${purpose}`))
+        .update(body)
+        .digest();
+    if (!safeEqual(Buffer.from(sig, 'base64url'), expected)) {
+        return { ok: false, reason: 'invalid' };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+    }
+    catch {
+        return { ok: false, reason: 'invalid' };
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return { ok: false, reason: 'invalid' };
+    const o = parsed;
+    const shapeOk = o.t === purpose &&
+        typeof o.id === 'string' &&
+        typeof o.exp === 'number' &&
+        Number.isFinite(o.exp) &&
+        (purpose !== 'challenge' || typeof o.mac === 'string');
+    if (!shapeOk)
+        return { ok: false, reason: 'invalid' };
+    if (nowSeconds() >= o.exp)
+        return { ok: false, reason: 'expired' };
+    return { ok: true, payload: parsed };
+}
+// ---------------------------------------------------------------------------
+// Answer MAC. The code is never stored or sent; only this keyed hash is.
+// Because it is an HMAC under the server secret, an attacker who reads the
+// token cannot brute-force the small code space offline.
+// ---------------------------------------------------------------------------
+export function answerMac(secret, id, code) {
+    return createHmac('sha256', deriveKey(secret, 'answer'))
+        .update(`${id}\0${code}`)
+        .digest('base64url');
+}
+export function macMatches(secret, id, code, mac) {
+    return safeEqual(Buffer.from(answerMac(secret, id, code)), Buffer.from(mac));
+}
+//# sourceMappingURL=token.js.map

package/dist/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA+BvE,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE5E,mFAAmF;AACnF,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,OAAU,EACV,OAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,OAAU,EACV,KAAa;IAEb,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,KAAyB,CAAC;IAE9C,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC;SACzE,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,EAAE,CAAC;IACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3F,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,MAAM,OAAO,GACX,CAAC,CAAC,CAAC,KAAK,OAAO;QACf,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QACtB,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAEtD,IAAI,UAAU,EAAE,IAAK,CAAC,CAAC,GAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAE/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAuB,EAAE,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,2EAA2E;AAC3E,yDAAyD;AACzD,8EAA8E;AAC9E,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,EAAU,EAAE,IAAY;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;SACrD,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,EAAU,EAAE,IAAY,EAAE,GAAW;IAC9E,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,27 @@
+import type { ResolvedConfig } from './config.js';
+export type VerifyFailure = 'malformed' | 'invalid' | 'expired' | 'replayed' | 'incorrect';
+export type VerifyResult = {
+    ok: true;
+    pass: string;
+    expiresIn: number;
+} | {
+    ok: false;
+    reason: VerifyFailure;
+};
+export type PassFailure = 'malformed' | 'invalid' | 'expired' | 'replayed';
+export type PassResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: PassFailure;
+};
+/**
+ * Verify a challenge token + the user's answer.
+ * Store errors propagate: adapters must fail closed (respond 503).
+ */
+export declare function verifyAnswer(config: ResolvedConfig, token: unknown, answer: unknown): Promise<VerifyResult>;
+/**
+ * Check and consume a pass token. Call this from the protected route
+ * (login, signup, ...). A pass works exactly once.
+ */
+export declare function consumePass(config: ResolvedConfig, token: unknown): Promise<PassResult>;

package/dist/verify.js

@@ -0,0 +1,53 @@
+import { macMatches, nowSeconds, signToken, verifyToken } from './token.js';
+const MAX_ANSWER_LENGTH = 16;
+// Small grace so a marker never disappears a moment before its token expires.
+const TTL_GRACE_SECONDS = 5;
+/**
+ * Verify a challenge token + the user's answer.
+ * Store errors propagate: adapters must fail closed (respond 503).
+ */
+export async function verifyAnswer(config, token, answer) {
+    if (typeof token !== 'string' || typeof answer !== 'string') {
+        return { ok: false, reason: 'malformed' };
+    }
+    const guess = answer.replace(/\s+/g, '').toUpperCase();
+    if (guess.length === 0 || guess.length > MAX_ANSWER_LENGTH) {
+        return { ok: false, reason: 'malformed' };
+    }
+    const checked = verifyToken(config.secret, 'challenge', token);
+    if (!checked.ok)
+        return { ok: false, reason: checked.reason };
+    const { id, exp, mac } = checked.payload;
+    // Burn the challenge FIRST: one guess per challenge, right or wrong.
+    const ttl = Math.max(1, exp - nowSeconds()) + TTL_GRACE_SECONDS;
+    const firstUse = await config.store.setOnce(`used:${id}`, ttl);
+    if (!firstUse)
+        return { ok: false, reason: 'replayed' };
+    if (!macMatches(config.secret, id, guess, mac)) {
+        return { ok: false, reason: 'incorrect' };
+    }
+    const pass = signToken(config.secret, 'pass', {
+        t: 'pass',
+        id,
+        exp: nowSeconds() + config.passExpire,
+    });
+    return { ok: true, pass, expiresIn: config.passExpire };
+}
+/**
+ * Check and consume a pass token. Call this from the protected route
+ * (login, signup, ...). A pass works exactly once.
+ */
+export async function consumePass(config, token) {
+    if (typeof token !== 'string')
+        return { ok: false, reason: 'malformed' };
+    const checked = verifyToken(config.secret, 'pass', token);
+    if (!checked.ok)
+        return { ok: false, reason: checked.reason };
+    const { id, exp } = checked.payload;
+    const ttl = Math.max(1, exp - nowSeconds()) + TTL_GRACE_SECONDS;
+    const firstUse = await config.store.setOnce(`pass:${id}`, ttl);
+    if (!firstUse)
+        return { ok: false, reason: 'replayed' };
+    return { ok: true };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAY5E,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAsB,EACtB,KAAc,EACd,MAAe;IAEf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC9D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAEzC,qEAAqE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAExD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE;QAC5C,CAAC,EAAE,MAAM;QACT,EAAE;QACF,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU;KACtC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAsB,EAAE,KAAc;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAEzE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC9D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAExD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@kcaptcha/core",
+  "version": "0.1.0",
+  "description": "Framework-agnostic server logic for kCAPTCHA",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}