@kcaptcha/express 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+import type { RequestHandler, Router } from 'express';
+import type { KCaptchaOptions, ResolvedConfig } from '@kcaptcha/core';
+import type { RequireKCaptchaOptions } from './middleware.js';
+export interface ExpressKCaptchaOptions extends KCaptchaOptions {
+    /** Serve the browser widget at <endpoint>/kcaptcha.js. Default true. */
+    serveClient?: boolean;
+}
+export interface KCaptchaInstance {
+    /** Mount this at your endpoint, e.g. app.use('/login/kcaptcha', kc.router). */
+    readonly router: Router;
+    /** Build a guard for your own routes. Consumes the pass token (single use). */
+    readonly requireKCaptcha: (options?: RequireKCaptchaOptions) => RequestHandler;
+    /** The resolved configuration (secret, expire, rate limit, store, ...). */
+    readonly config: ResolvedConfig;
+}
+/**
+ * Create a kCAPTCHA instance. Throws KCaptchaConfigError right away if the
+ * configuration is invalid (for example a missing or short "secret"), so a
+ * misconfigured server fails at startup rather than at the first request.
+ */
+export declare function createKCaptcha(options: ExpressKCaptchaOptions): KCaptchaInstance;
+export type { RequireKCaptchaOptions, RequireFailure } from './middleware.js';
+export { KCaptchaConfigError, MemoryStore, RedisStore } from '@kcaptcha/core';
+export type { KCaptchaOptions, KCaptchaStore } from '@kcaptcha/core';

package/dist/index.js

@@ -0,0 +1,20 @@
+import { resolveConfig } from '@kcaptcha/core';
+import { makeRequireKCaptcha } from './middleware.js';
+import { buildRouter } from './routes.js';
+/**
+ * Create a kCAPTCHA instance. Throws KCaptchaConfigError right away if the
+ * configuration is invalid (for example a missing or short "secret"), so a
+ * misconfigured server fails at startup rather than at the first request.
+ */
+export function createKCaptcha(options) {
+    const config = resolveConfig(options);
+    const router = buildRouter(config, { serveClient: options.serveClient ?? true });
+    return {
+        router,
+        requireKCaptcha: makeRequireKCaptcha(config),
+        config,
+    };
+}
+// Convenience re-exports so most apps import from a single package.
+export { KCaptchaConfigError, MemoryStore, RedisStore } from '@kcaptcha/core';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAgB1C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAA+B;IAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;IACjF,OAAO;QACL,MAAM;QACN,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC;QAC5C,MAAM;KACP,CAAC;AACJ,CAAC;AAID,oEAAoE;AACpE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,19 @@
+import type { NextFunction, Request, RequestHandler, Response } from 'express';
+import type { PassFailure, ResolvedConfig } from '@kcaptcha/core';
+export type RequireFailure = 'missing' | PassFailure;
+export interface RequireKCaptchaOptions {
+    /** Body field that carries the pass token. Default "kcaptcha_token". */
+    bodyField?: string;
+    /** Header that may carry the pass token instead. Default "x-kcaptcha-token". */
+    headerName?: string;
+    /**
+     * Custom rejection handler. Default: 403 JSON { ok: false, error: "captcha_..." }.
+     * Call res/next yourself; the request is NOT continued automatically.
+     */
+    onFail?: (req: Request, res: Response, next: NextFunction, reason: RequireFailure) => void;
+}
+/**
+ * Builds the protection middleware bound to ONE shared config, so pass tokens
+ * consumed here are burned in the same store the router uses.
+ */
+export declare function makeRequireKCaptcha(config: ResolvedConfig): (options?: RequireKCaptchaOptions) => RequestHandler;

package/dist/middleware.js

@@ -0,0 +1,59 @@
+import { consumePass } from '@kcaptcha/core';
+const ERROR_CODE = {
+    missing: 'captcha_required',
+    malformed: 'captcha_invalid',
+    invalid: 'captcha_invalid',
+    expired: 'captcha_expired',
+    replayed: 'captcha_replayed',
+};
+function extractToken(req, bodyField, headerName) {
+    const header = req.get(headerName);
+    if (typeof header === 'string' && header.length > 0)
+        return header;
+    const body = req.body;
+    if (typeof body === 'object' && body !== null) {
+        const value = body[bodyField];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return undefined;
+}
+/**
+ * Builds the protection middleware bound to ONE shared config, so pass tokens
+ * consumed here are burned in the same store the router uses.
+ */
+export function makeRequireKCaptcha(config) {
+    return function requireKCaptcha(options = {}) {
+        const bodyField = options.bodyField ?? 'kcaptcha_token';
+        const headerName = options.headerName ?? 'x-kcaptcha-token';
+        const reject = (req, res, next, reason) => {
+            if (options.onFail) {
+                options.onFail(req, res, next, reason);
+                return;
+            }
+            res.status(403).json({ ok: false, error: ERROR_CODE[reason] });
+        };
+        return async (req, res, next) => {
+            const token = extractToken(req, bodyField, headerName);
+            if (token === undefined) {
+                reject(req, res, next, 'missing');
+                return;
+            }
+            try {
+                const result = await consumePass(config, token);
+                if (!result.ok) {
+                    reject(req, res, next, result.reason);
+                    return;
+                }
+                res.locals.kcaptcha = { verified: true };
+                next();
+            }
+            catch (err) {
+                // Store failure: fail closed.
+                console.error('[kCAPTCHA] Could not verify pass token (failing closed):', err);
+                res.status(503).json({ ok: false, error: 'service_unavailable' });
+            }
+        };
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAiB7C,MAAM,UAAU,GAAmC;IACjD,OAAO,EAAE,kBAAkB;IAC3B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;AAEF,SAAS,YAAY,CAAC,GAAY,EAAE,SAAiB,EAAE,UAAkB;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAEnE,MAAM,IAAI,GAAY,GAAG,CAAC,IAAI,CAAC;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAI,IAAgC,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,OAAO,SAAS,eAAe,CAAC,UAAkC,EAAE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC;QAE5D,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,MAAsB,EAAE,EAAE;YACzF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACzC,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8BAA8B;gBAC9B,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;gBAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes.d.ts

@@ -0,0 +1,7 @@
+import type { Router } from 'express';
+import type { ResolvedConfig } from '@kcaptcha/core';
+export interface RoutesOptions {
+    /** Serve the browser widget at <endpoint>/kcaptcha.js. */
+    serveClient: boolean;
+}
+export declare function buildRouter(config: ResolvedConfig, options: RoutesOptions): Router;

package/dist/routes.js

@@ -0,0 +1,156 @@
+import { createRequire } from 'node:module';
+import express from 'express';
+import { checkRateLimit, createChallenge, verifyAnswer } from '@kcaptcha/core';
+const require = createRequire(import.meta.url);
+// verify-captcha bodies are tiny: { token, answer }.
+const BODY_LIMIT = '2kb';
+const VERIFY_STATUS = {
+    malformed: 400,
+    invalid: 400,
+    expired: 410,
+    replayed: 409,
+    incorrect: 403,
+};
+// ---------------------------------------------------------------------------
+// Small helpers
+// ---------------------------------------------------------------------------
+function fail(res, status, error, extra = {}) {
+    res.status(status).json({ ok: false, error, ...extra });
+}
+/** Store or internal failure: log for the operator, tell the client nothing useful, fail closed. */
+function unavailable(res, err) {
+    console.error('[kCAPTCHA] Store or internal error (failing closed):', err);
+    if (!res.headersSent)
+        fail(res, 503, 'service_unavailable');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+// req.ip honours Express's "trust proxy" setting. Behind a reverse proxy you
+// MUST configure it (app.set('trust proxy', ...)) or every visitor shares one
+// rate-limit bucket.
+function clientIp(req) {
+    return req.ip ?? req.socket.remoteAddress ?? 'unknown';
+}
+// ---------------------------------------------------------------------------
+// Shared middleware
+// ---------------------------------------------------------------------------
+const securityHeaders = (_req, res, next) => {
+    res.setHeader('X-Content-Type-Options', 'nosniff');
+    next();
+};
+// Challenges and passes must never be cached by browsers or proxies.
+const noStore = (_req, res, next) => {
+    res.setHeader('Cache-Control', 'no-store');
+    next();
+};
+function methodNotAllowed(allow) {
+    return (_req, res) => {
+        res.setHeader('Allow', allow);
+        fail(res, 405, 'method_not_allowed');
+    };
+}
+function rateLimit(config, bucket) {
+    return async (req, res, next) => {
+        try {
+            const result = await checkRateLimit(config, bucket, clientIp(req));
+            res.setHeader('RateLimit-Limit', String(result.limit));
+            res.setHeader('RateLimit-Remaining', String(result.remaining));
+            if (!result.allowed) {
+                res.setHeader('Retry-After', String(result.retryAfter));
+                fail(res, 429, 'rate_limited', { retryAfter: result.retryAfter });
+                return;
+            }
+            next();
+        }
+        catch (err) {
+            unavailable(res, err);
+        }
+    };
+}
+// ---------------------------------------------------------------------------
+// Serving the browser bundle from the site's own server
+// ---------------------------------------------------------------------------
+let cachedBundlePath;
+function resolveBundlePath() {
+    if (cachedBundlePath === undefined) {
+        try {
+            cachedBundlePath = require.resolve('@kcaptcha/client/kcaptcha.js');
+        }
+        catch {
+            cachedBundlePath = null;
+        }
+    }
+    return cachedBundlePath;
+}
+const serveClientBundle = (_req, res) => {
+    const bundle = resolveBundlePath();
+    if (!bundle) {
+        console.error('[kCAPTCHA] Client bundle not found. Build it with "npm run build" ' +
+            'or set serveClient: false and host kcaptcha.js yourself.');
+        res.status(500).type('text/plain').send('kCAPTCHA client bundle is not available.');
+        return;
+    }
+    // sendFile provides ETag / Last-Modified / 304 handling.
+    res.sendFile(bundle, { maxAge: process.env.NODE_ENV === 'production' ? '1h' : 0 }, (err) => {
+        if (err) {
+            console.error('[kCAPTCHA] Failed to send client bundle:', err);
+            if (!res.headersSent)
+                res.status(500).type('text/plain').send('Failed to load kCAPTCHA.');
+        }
+    });
+};
+// ---------------------------------------------------------------------------
+// The router
+// ---------------------------------------------------------------------------
+export function buildRouter(config, options) {
+    const router = express.Router();
+    router.use(securityHeaders);
+    if (options.serveClient) {
+        router.get('/kcaptcha.js', serveClientBundle);
+    }
+    // POST <endpoint>/new-code
+    router
+        .route('/new-code')
+        .post(noStore, rateLimit(config, 'new-code'), (_req, res) => {
+        try {
+            res.status(200).json({ ok: true, ...createChallenge(config) });
+        }
+        catch (err) {
+            unavailable(res, err);
+        }
+    })
+        .all(methodNotAllowed('POST'));
+    // POST <endpoint>/verify-captcha   body: { token, answer }
+    router
+        .route('/verify-captcha')
+        .post(noStore, rateLimit(config, 'verify-captcha'), // rate limit first: cheap rejection before body parsing
+    express.json({ limit: BODY_LIMIT, strict: true, type: 'application/json' }), async (req, res) => {
+        try {
+            const body = req.body;
+            const fields = isRecord(body) ? body : {};
+            const result = await verifyAnswer(config, fields.token, fields.answer);
+            if (result.ok) {
+                res.status(200).json({ ok: true, token: result.pass, expiresIn: result.expiresIn });
+            }
+            else {
+                fail(res, VERIFY_STATUS[result.reason], result.reason);
+            }
+        }
+        catch (err) {
+            unavailable(res, err);
+        }
+    })
+        .all(methodNotAllowed('POST'));
+    // Body-parser errors (bad JSON, oversized body) -> clean JSON instead of an HTML stack page.
+    router.use((err, _req, res, next) => {
+        const status = isRecord(err) && typeof err.status === 'number' ? err.status : 0;
+        if (status >= 400 && status < 500) {
+            fail(res, status === 413 ? 413 : 400, status === 413 ? 'payload_too_large' : 'bad_request');
+            return;
+        }
+        next(err);
+    });
+    return router;
+}
+//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG/E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAO/C,qDAAqD;AACrD,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,MAAM,aAAa,GAAkC;IACnD,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAC9E,SAAS,IAAI,CACX,GAAa,EACb,MAAc,EACd,KAAa,EACb,QAAiC,EAAE;IAEnC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,oGAAoG;AACpG,SAAS,WAAW,CAAC,GAAa,EAAE,GAAY;IAC9C,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,WAAW;QAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,qBAAqB;AACrB,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAC9E,MAAM,eAAe,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC1D,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF,qEAAqE;AACrE,MAAM,OAAO,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnB,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAsB,EAAE,MAAuB;IAChE,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACnE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBACxD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAC9E,IAAI,gBAA2C,CAAC;AAEhD,SAAS,iBAAiB;IACxB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,iBAAiB,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACtD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CACX,oEAAoE;YAClE,0DAA0D,CAC7D,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,yDAAyD;IACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QAC5F,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,OAAsB;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE5B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAChD,CAAC;IAED,2BAA2B;IAC3B,MAAM;SACH,KAAK,CAAC,WAAW,CAAC;SAClB,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC7E,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;SACD,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjC,2DAA2D;IAC3D,MAAM;SACH,KAAK,CAAC,iBAAiB,CAAC;SACxB,IAAI,CACH,OAAO,EACP,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,wDAAwD;IAC7F,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAC3E,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAY,GAAG,CAAC,IAAI,CAAC;YAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAEvE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF;SACA,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjC,6FAA6F;IAC7F,MAAM,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@kcaptcha/express",
+  "version": "0.1.0",
+  "description": "Express adapter for kCAPTCHA: router, client bundle hosting and route protection",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@kcaptcha/client": "^0.1.0",
+    "@kcaptcha/core": "^0.1.0"
+  },
+  "peerDependencies": {
+    "express": "^4.18.0 || ^5.0.0"
+  },
+  "devDependencies": {
+  "@types/express": "^4.17.21",
+  "@types/supertest": "^6.0.0",
+  "supertest": "^7.0.0"
+},
+  "engines": {
+    "node": ">=18"
+  }
+}