@naughtbot/sdk 0.0.1

package/README.md

@@ -0,0 +1,22 @@
+# NaughtBot SDK
+
+TypeScript SDK for the NaughtBot CAPTCHA widget. Provides BLE pairing, verification, and UI components.
+
+## Install
+
+```sh
+npm install @naughtbot/sdk
+```
+
+## Build & Test
+
+```sh
+pnpm install
+pnpm build
+pnpm vitest run
+```
+
+## Dependencies
+
+- [@ackagent/web-sdk](https://github.com/AckAgent/web-sdk) — peer dependency (npm)
+- [@naughtbot/api](https://github.com/naughtbot/api) — TypeScript types (npm)

package/dist/ble-fragmentation.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Pure BLE fragmentation logic extracted for testability.
+ * Implements the AckAgent BLE fragmentation protocol:
+ * each fragment has a 2-byte header [flags, sequence] followed by payload.
+ */
+export declare const FRAGMENT_HEADER_SIZE = 2;
+export declare const MAX_FRAGMENT_SIZE = 500;
+export declare const FRAGMENT_FLAG_FIRST = 1;
+export declare const FRAGMENT_FLAG_LAST = 2;
+export declare const MAX_REASSEMBLY_BYTES = 65536;
+/**
+ * Split data into fragments with headers (flags + sequence byte).
+ * Each fragment is at most maxFragmentSize bytes including the 2-byte header.
+ */
+export declare function fragmentMessage(data: Uint8Array, maxFragmentSize?: number): Uint8Array[];
+/**
+ * Reassemble fragments into a complete message.
+ * Validates fragment ordering, flags, and size limits.
+ * Throws if the reassembled message exceeds MAX_REASSEMBLY_BYTES.
+ */
+export declare function reassembleFragments(fragments: Uint8Array[]): Uint8Array;
+//# sourceMappingURL=ble-fragmentation.d.ts.map

package/dist/ble-fragmentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ble-fragmentation.d.ts","sourceRoot":"","sources":["../src/ble-fragmentation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,mBAAmB,IAAO,CAAC;AACxC,eAAO,MAAM,kBAAkB,IAAO,CAAC;AACvC,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,UAAU,EAChB,eAAe,GAAE,MAA0B,GAC1C,UAAU,EAAE,CAkCd;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,UAAU,CA+CvE"}

package/dist/ble-fragmentation.js

@@ -0,0 +1,89 @@
+/**
+ * Pure BLE fragmentation logic extracted for testability.
+ * Implements the AckAgent BLE fragmentation protocol:
+ * each fragment has a 2-byte header [flags, sequence] followed by payload.
+ */
+export const FRAGMENT_HEADER_SIZE = 2;
+export const MAX_FRAGMENT_SIZE = 500;
+export const FRAGMENT_FLAG_FIRST = 0x01;
+export const FRAGMENT_FLAG_LAST = 0x02;
+export const MAX_REASSEMBLY_BYTES = 65_536; // 64 KB max reassembled message
+/**
+ * Split data into fragments with headers (flags + sequence byte).
+ * Each fragment is at most maxFragmentSize bytes including the 2-byte header.
+ */
+export function fragmentMessage(data, maxFragmentSize = MAX_FRAGMENT_SIZE) {
+    if (data.length === 0) {
+        // Even empty data produces one fragment with FIRST|LAST flags
+        const fragment = new Uint8Array(FRAGMENT_HEADER_SIZE);
+        fragment[0] = FRAGMENT_FLAG_FIRST | FRAGMENT_FLAG_LAST;
+        fragment[1] = 0;
+        return [fragment];
+    }
+    const maxPayload = maxFragmentSize - FRAGMENT_HEADER_SIZE;
+    const fragments = [];
+    let offset = 0;
+    let sequence = 0;
+    while (offset < data.length) {
+        const remaining = data.length - offset;
+        const chunkSize = Math.min(remaining, maxPayload);
+        const chunk = data.slice(offset, offset + chunkSize);
+        let flags = 0;
+        if (offset === 0)
+            flags |= FRAGMENT_FLAG_FIRST;
+        if (offset + chunkSize >= data.length)
+            flags |= FRAGMENT_FLAG_LAST;
+        const fragment = new Uint8Array(FRAGMENT_HEADER_SIZE + chunk.length);
+        fragment[0] = flags;
+        fragment[1] = sequence & 0xff;
+        fragment.set(chunk, FRAGMENT_HEADER_SIZE);
+        fragments.push(fragment);
+        offset += chunkSize;
+        sequence++;
+    }
+    return fragments;
+}
+/**
+ * Reassemble fragments into a complete message.
+ * Validates fragment ordering, flags, and size limits.
+ * Throws if the reassembled message exceeds MAX_REASSEMBLY_BYTES.
+ */
+export function reassembleFragments(fragments) {
+    if (fragments.length === 0) {
+        throw new Error("No fragments to reassemble");
+    }
+    // Validate first fragment has FIRST flag
+    if (!(fragments[0][0] & FRAGMENT_FLAG_FIRST)) {
+        throw new Error("First fragment missing FIRST flag");
+    }
+    // Validate last fragment has LAST flag
+    if (!(fragments[fragments.length - 1][0] & FRAGMENT_FLAG_LAST)) {
+        throw new Error("Last fragment missing LAST flag");
+    }
+    let totalPayloadSize = 0;
+    const payloads = [];
+    for (let i = 0; i < fragments.length; i++) {
+        const frag = fragments[i];
+        if (frag.length < FRAGMENT_HEADER_SIZE) {
+            throw new Error(`Fragment ${i} too short`);
+        }
+        const seq = frag[1];
+        if (seq !== (i & 0xff)) {
+            throw new Error(`Fragment ${i} has wrong sequence number: expected ${i & 0xff}, got ${seq}`);
+        }
+        const payload = frag.slice(FRAGMENT_HEADER_SIZE);
+        totalPayloadSize += payload.length;
+        if (totalPayloadSize > MAX_REASSEMBLY_BYTES) {
+            throw new Error("BLE message exceeds maximum size");
+        }
+        payloads.push(payload);
+    }
+    const result = new Uint8Array(totalPayloadSize);
+    let offset = 0;
+    for (const p of payloads) {
+        result.set(p, offset);
+        offset += p.length;
+    }
+    return result;
+}
+//# sourceMappingURL=ble-fragmentation.js.map

package/dist/ble-fragmentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ble-fragmentation.js","sourceRoot":"","sources":["../src/ble-fragmentation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,gCAAgC;AAE5E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAgB,EAChB,kBAA0B,iBAAiB;IAE3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACtD,QAAQ,CAAC,CAAC,CAAC,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;QACvD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,GAAG,oBAAoB,CAAC;IAC1D,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAErD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,KAAK,CAAC;YAAE,KAAK,IAAI,mBAAmB,CAAC;QAC/C,IAAI,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,IAAI,kBAAkB,CAAC;QAEnE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACrE,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;QACpB,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAE1C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC;QACpB,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAuB;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,wCAAwC,CAAC,GAAG,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;QAEnC,IAAI,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ble.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Web Bluetooth transport for NaughtBot captcha.
+ * Connects to NaughtBot phone as a BLE Central, discovers the captcha
+ * GATT service, and exchanges ephemeral keys + encrypted challenge/response
+ * without going through the relay.
+ *
+ * Requires a user gesture to trigger device selection.
+ * Only works in secure contexts (HTTPS).
+ */
+import type { CaptchaOptions } from "./types.js";
+import type { CaptchaSession } from "./captcha.js";
+/** Check if Web Bluetooth is supported in this environment */
+export declare function isBLESupported(): boolean;
+/**
+ * Create a BLE-based captcha session.
+ * Must be called from a user gesture (click handler) because
+ * Web Bluetooth requires a user activation to show the device picker.
+ */
+export declare function createBLESession(options: CaptchaOptions): Promise<CaptchaSession>;
+//# sourceMappingURL=ble.d.ts.map

package/dist/ble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ble.d.ts","sourceRoot":"","sources":["../src/ble.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,KAAK,EACV,cAAc,EAMf,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAcnD,8DAA8D;AAC9D,wBAAgB,cAAc,IAAI,OAAO,CAOxC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAuNvF"}

package/dist/ble.js

@@ -0,0 +1,278 @@
+/**
+ * Web Bluetooth transport for NaughtBot captcha.
+ * Connects to NaughtBot phone as a BLE Central, discovers the captcha
+ * GATT service, and exchanges ephemeral keys + encrypted challenge/response
+ * without going through the relay.
+ *
+ * Requires a user gesture to trigger device selection.
+ * Only works in secure contexts (HTTPS).
+ */
+import { generateKeyPair, deriveRequestKey, deriveResponseKey, encrypt, decrypt, requestIdToBytes, } from "@ackagent/web-sdk";
+import { base64urlEncode, base64urlDecode, generateUuid } from "@ackagent/web-sdk";
+import { computeSAS } from "@ackagent/web-sdk";
+import { DEFAULT_TIMEOUT_MS } from "./types.js";
+import { hexEncode } from "./captcha.js";
+import { fragmentMessage, FRAGMENT_HEADER_SIZE, FRAGMENT_FLAG_FIRST, FRAGMENT_FLAG_LAST, MAX_REASSEMBLY_BYTES, } from "./ble-fragmentation.js";
+// NaughtBot-specific BLE UUIDs (must match iOS BLECaptchaPeripheralService)
+const NAUGHTBOT_SERVICE_UUID = "0a097b07-ca9c-4a5b-8c7d-000000000001";
+const REQUEST_CHARACTERISTIC_UUID = "0a097b07-ca9c-4a5b-8c7d-000000000002";
+const RESPONSE_CHARACTERISTIC_UUID = "0a097b07-ca9c-4a5b-8c7d-000000000003";
+/** Check if Web Bluetooth is supported in this environment */
+export function isBLESupported() {
+    return (typeof navigator !== "undefined" &&
+        "bluetooth" in navigator &&
+        navigator.bluetooth !== undefined &&
+        typeof navigator.bluetooth.requestDevice === "function");
+}
+/**
+ * Create a BLE-based captcha session.
+ * Must be called from a user gesture (click handler) because
+ * Web Bluetooth requires a user activation to show the device picker.
+ */
+export async function createBLESession(options) {
+    const { nonce, timeoutMs = DEFAULT_TIMEOUT_MS, debug = false } = options;
+    const log = debug ? (...args) => console.debug("[NaughtBot BLE]", ...args) : () => { };
+    if (!isBLESupported()) {
+        throw new Error("Web Bluetooth is not supported in this browser");
+    }
+    // Request device from user (shows system picker dialog)
+    log("Requesting NaughtBot device...");
+    const device = await navigator.bluetooth.requestDevice({
+        filters: [{ services: [NAUGHTBOT_SERVICE_UUID] }],
+    });
+    log("Device selected:", device.name);
+    const sessionId = generateUuid();
+    const requestIdBytes = requestIdToBytes(sessionId);
+    const ephemeralKeyPair = await generateKeyPair();
+    let currentState = "initializing";
+    let currentSas = null;
+    let cancelled = false;
+    let sasResolve = null;
+    let cancelNotification = null;
+    const sasConfirmed = new Promise((resolve) => {
+        sasResolve = resolve;
+    });
+    const stateCallbacks = [];
+    function setState(newState, sas) {
+        currentState = newState;
+        if (sas !== undefined)
+            currentSas = sas;
+        for (const cb of stateCallbacks)
+            cb(currentState, currentSas);
+    }
+    const session = {
+        get sessionId() {
+            return sessionId;
+        },
+        get qrCodeUrl() {
+            return ""; // No QR code for BLE sessions
+        },
+        get state() {
+            return currentState;
+        },
+        get sas() {
+            return currentSas;
+        },
+        async waitForResult() {
+            const domain = typeof window !== "undefined" ? window.location.hostname : "unknown";
+            const deadline = Date.now() + timeoutMs;
+            // Connect to GATT server
+            setState("waiting_for_scan"); // "waiting for connection"
+            log("Connecting to GATT server...");
+            const server = await device.gatt.connect();
+            const service = await server.getPrimaryService(NAUGHTBOT_SERVICE_UUID);
+            const requestChar = await service.getCharacteristic(REQUEST_CHARACTERISTIC_UUID);
+            const responseChar = await service.getCharacteristic(RESPONSE_CHARACTERISTIC_UUID);
+            await responseChar.startNotifications();
+            setState("phone_connected");
+            log("Connected and notifications started");
+            // Register notification listener BEFORE writing to avoid missing the response
+            const connectMsg = JSON.stringify({
+                type: "connect",
+                sessionId,
+                ephemeralPublicKey: base64urlEncode(ephemeralKeyPair.publicKey),
+            });
+            const phoneResponsePromise = waitForNotification(responseChar, deadline - Date.now(), () => cancelled, log, (fn) => {
+                cancelNotification = fn;
+            });
+            await writeFragmented(requestChar, new TextEncoder().encode(connectMsg));
+            // Wait for phone's ephemeral public key (via notification)
+            const phoneResponse = await phoneResponsePromise;
+            cancelNotification = null;
+            const phoneData = JSON.parse(new TextDecoder().decode(phoneResponse));
+            if (!phoneData.ephemeralPublicKey) {
+                throw new Error("Phone did not send ephemeral public key");
+            }
+            const phonePublicKey = base64urlDecode(phoneData.ephemeralPublicKey);
+            // Compute SAS
+            const approverKey = {
+                encryptionPublicKeyHex: hexEncode(phonePublicKey),
+                publicKey: phonePublicKey,
+            };
+            const sasResult = computeSAS(ephemeralKeyPair.publicKey, [approverKey]);
+            setState("sas_verification", sasResult);
+            log("SAS:", sasResult.wordString);
+            // Wait for user to confirm SAS match before sending challenge
+            const sasTimeRemaining = deadline - Date.now();
+            if (sasTimeRemaining <= 0)
+                throw new Error("BLE session timeout");
+            await Promise.race([
+                sasConfirmed,
+                new Promise((_, reject) => setTimeout(() => reject(new Error("SAS confirmation timeout")), sasTimeRemaining)),
+            ]);
+            if (cancelled)
+                throw new Error("Session cancelled");
+            // Build and encrypt challenge
+            const challenge = {
+                type: "captcha",
+                domain,
+                nonce,
+                timestamp: Date.now(),
+            };
+            const challengeBytes = new TextEncoder().encode(JSON.stringify(challenge));
+            const requestKey = await deriveRequestKey(ephemeralKeyPair.privateKey, phonePublicKey, requestIdBytes);
+            const { ciphertext, nonce: encNonce } = encrypt(requestKey, challengeBytes, requestIdBytes);
+            // Register notification listener BEFORE writing to avoid missing the response
+            const challengeMsg = JSON.stringify({
+                type: "challenge",
+                sessionId,
+                encryptedChallenge: base64urlEncode(ciphertext),
+                challengeNonce: base64urlEncode(encNonce),
+            });
+            const responsePromise = waitForNotification(responseChar, deadline - Date.now(), () => cancelled, log, (fn) => {
+                cancelNotification = fn;
+            });
+            await writeFragmented(requestChar, new TextEncoder().encode(challengeMsg));
+            setState("verifying");
+            log("Challenge sent, waiting for response...");
+            // Wait for encrypted response
+            const responseData = await responsePromise;
+            cancelNotification = null;
+            if (cancelled)
+                throw new Error("Session cancelled");
+            const encResponse = JSON.parse(new TextDecoder().decode(responseData));
+            // Decrypt response
+            const responseKey = await deriveResponseKey(ephemeralKeyPair.privateKey, phonePublicKey, requestIdBytes);
+            const decrypted = decrypt(responseKey, base64urlDecode(encResponse.responseNonce), base64urlDecode(encResponse.encryptedResponse), requestIdBytes);
+            const response = JSON.parse(new TextDecoder().decode(decrypted));
+            // Disconnect
+            server.disconnect();
+            if (!response.approved) {
+                setState("error");
+                throw new Error("Verification declined by user");
+            }
+            const result = {
+                proof: response.attestation
+                    ? base64urlEncode(new TextEncoder().encode(JSON.stringify(response.attestation)))
+                    : "",
+                nonce,
+                domain,
+            };
+            setState("verified");
+            log("BLE verification complete");
+            return result;
+        },
+        confirmSAS() {
+            sasResolve?.();
+            sasResolve = null;
+        },
+        cancel() {
+            cancelled = true;
+            sasResolve?.();
+            sasResolve = null;
+            cancelNotification?.();
+            cancelNotification = null;
+            setState("error");
+            if (device.gatt?.connected) {
+                device.gatt.disconnect();
+            }
+        },
+        onStateChange(callback) {
+            stateCallbacks.push(callback);
+        },
+    };
+    return session;
+}
+// --- BLE Fragmentation (matching AckAgent protocol) ---
+/** Write data to a characteristic using BLE fragmentation */
+async function writeFragmented(characteristic, data) {
+    const fragments = fragmentMessage(data);
+    for (const fragment of fragments) {
+        await characteristic.writeValue(fragment.buffer.slice(fragment.byteOffset, fragment.byteOffset + fragment.byteLength));
+    }
+}
+/** Wait for a complete fragmented notification */
+function waitForNotification(characteristic, timeoutMs, isCancelled, log, onCleanup) {
+    return new Promise((resolve, reject) => {
+        const fragments = new Map();
+        let expectedNext = 0;
+        let started = false;
+        let timeoutId;
+        const handler = (event) => {
+            const target = event.target;
+            const value = target.value;
+            if (!value)
+                return;
+            const raw = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+            if (raw.length < FRAGMENT_HEADER_SIZE)
+                return;
+            const flags = raw[0];
+            const seq = raw[1];
+            const payload = raw.slice(FRAGMENT_HEADER_SIZE);
+            if (flags & FRAGMENT_FLAG_FIRST) {
+                fragments.clear();
+                started = true;
+                expectedNext = 0;
+            }
+            if (!started || seq !== expectedNext)
+                return;
+            fragments.set(seq, payload);
+            expectedNext = (expectedNext + 1) & 0xff;
+            // Check total reassembled size
+            let currentSize = 0;
+            for (const p of fragments.values())
+                currentSize += p.length;
+            if (currentSize > MAX_REASSEMBLY_BYTES) {
+                clearTimeout(timeoutId);
+                characteristic.removeEventListener("characteristicvaluechanged", handler);
+                reject(new Error("BLE message exceeds maximum size"));
+                return;
+            }
+            if (flags & FRAGMENT_FLAG_LAST) {
+                clearTimeout(timeoutId);
+                characteristic.removeEventListener("characteristicvaluechanged", handler);
+                let totalSize = 0;
+                for (const p of fragments.values())
+                    totalSize += p.length;
+                const result = new Uint8Array(totalSize);
+                let off = 0;
+                for (let s = 0; s < expectedNext; s++) {
+                    const p = fragments.get(s);
+                    if (p) {
+                        result.set(p, off);
+                        off += p.length;
+                    }
+                }
+                log(`Reassembled ${expectedNext} fragments (${totalSize} bytes)`);
+                resolve(result);
+            }
+        };
+        characteristic.addEventListener("characteristicvaluechanged", handler);
+        timeoutId = setTimeout(() => {
+            characteristic.removeEventListener("characteristicvaluechanged", handler);
+            if (isCancelled()) {
+                reject(new Error("Session cancelled"));
+            }
+            else {
+                reject(new Error("BLE response timeout"));
+            }
+        }, timeoutMs);
+        const cleanup = () => {
+            clearTimeout(timeoutId);
+            characteristic.removeEventListener("characteristicvaluechanged", handler);
+            reject(new Error("Session cancelled"));
+        };
+        onCleanup?.(cleanup);
+    });
+}
+//# sourceMappingURL=ble.js.map

package/dist/ble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ble.js","sourceRoot":"","sources":["../src/ble.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,OAAO,EACP,OAAO,EACP,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAuB,MAAM,mBAAmB,CAAC;AASpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;AACtE,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAC3E,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAE5E,8DAA8D;AAC9D,MAAM,UAAU,cAAc;IAC5B,OAAO,CACL,OAAO,SAAS,KAAK,WAAW;QAChC,WAAW,IAAI,SAAS;QACxB,SAAS,CAAC,SAAS,KAAK,SAAS;QACjC,OAAO,SAAS,CAAC,SAAS,CAAC,aAAa,KAAK,UAAU,CACxD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAuB;IAC5D,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,kBAAkB,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;IAEjG,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,wDAAwD;IACxD,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAU,CAAC,aAAa,CAAC;QACtD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IAEH,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,MAAM,eAAe,EAAE,CAAC;IAEjD,IAAI,YAAY,GAAwB,cAAc,CAAC;IACvD,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,UAAU,GAAwB,IAAI,CAAC;IAC3C,IAAI,kBAAkB,GAAwB,IAAI,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACjD,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAwE,EAAE,CAAC;IAE/F,SAAS,QAAQ,CAAC,QAA6B,EAAE,GAAuB;QACtE,YAAY,GAAG,QAAQ,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS;YAAE,UAAU,GAAG,GAAG,CAAC;QACxC,KAAK,MAAM,EAAE,IAAI,cAAc;YAAE,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAmB;QAC9B,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,SAAS;YACX,OAAO,EAAE,CAAC,CAAC,8BAA8B;QAC3C,CAAC;QACD,IAAI,KAAK;YACP,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,IAAI,GAAG;YACL,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,aAAa;YACjB,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAExC,yBAAyB;YACzB,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,2BAA2B;YACzD,GAAG,CAAC,8BAA8B,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAK,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;YACjF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;YACnF,MAAM,YAAY,CAAC,kBAAkB,EAAE,CAAC;YAExC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC5B,GAAG,CAAC,qCAAqC,CAAC,CAAC;YAE3C,8EAA8E;YAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChC,IAAI,EAAE,SAAS;gBACf,SAAS;gBACT,kBAAkB,EAAE,eAAe,CAAC,gBAAgB,CAAC,SAAS,CAAC;aAChE,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,mBAAmB,CAC9C,YAAY,EACZ,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,EACrB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EACH,CAAC,EAAE,EAAE,EAAE;gBACL,kBAAkB,GAAG,EAAE,CAAC;YAC1B,CAAC,CACF,CAAC;YACF,MAAM,eAAe,CAAC,WAAW,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAEzE,2DAA2D;YAC3D,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC;YACjD,kBAAkB,GAAG,IAAI,CAAC;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;YAEtE,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAErE,cAAc;YACd,MAAM,WAAW,GAAmB;gBAClC,sBAAsB,EAAE,SAAS,CAAC,cAAc,CAAC;gBACjD,SAAS,EAAE,cAAc;aAC1B,CAAC;YACF,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACxE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YACxC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YAElC,8DAA8D;YAC9D,MAAM,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/C,IAAI,gBAAgB,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAClE,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,YAAY;gBACZ,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAClF;aACF,CAAC,CAAC;YACH,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAEpD,8BAA8B;YAC9B,MAAM,SAAS,GAAqB;gBAClC,IAAI,EAAE,SAAS;gBACf,MAAM;gBACN,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,gBAAgB,CAAC,UAAU,EAC3B,cAAc,EACd,cAAc,CACf,CAAC;YACF,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;YAE5F,8EAA8E;YAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;gBAClC,IAAI,EAAE,WAAW;gBACjB,SAAS;gBACT,kBAAkB,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/C,cAAc,EAAE,eAAe,CAAC,QAAQ,CAAC;aAC1C,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,mBAAmB,CACzC,YAAY,EACZ,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,EACrB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EACH,CAAC,EAAE,EAAE,EAAE;gBACL,kBAAkB,GAAG,EAAE,CAAC;YAC1B,CAAC,CACF,CAAC;YACF,MAAM,eAAe,CAAC,WAAW,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtB,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAE/C,8BAA8B;YAC9B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC;YAC3C,kBAAkB,GAAG,IAAI,CAAC;YAE1B,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAEpD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YAEvE,mBAAmB;YACnB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CACzC,gBAAgB,CAAC,UAAU,EAC3B,cAAc,EACd,cAAc,CACf,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,CACvB,WAAW,EACX,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,EAC1C,eAAe,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAC9C,cAAc,CACf,CAAC;YACF,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAElF,aAAa;YACb,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,MAAM,GAAkB;gBAC5B,KAAK,EAAE,QAAQ,CAAC,WAAW;oBACzB,CAAC,CAAC,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;oBACjF,CAAC,CAAC,EAAE;gBACN,KAAK;gBACL,MAAM;aACP,CAAC;YAEF,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrB,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,UAAU;YACR,UAAU,EAAE,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM;YACJ,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,EAAE,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAC;YAClB,kBAAkB,EAAE,EAAE,CAAC;YACvB,kBAAkB,GAAG,IAAI,CAAC;YAC1B,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,aAAa,CAAC,QAAQ;YACpB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yDAAyD;AAEzD,6DAA6D;AAC7D,KAAK,UAAU,eAAe,CAC5B,cAAiD,EACjD,IAAgB;IAEhB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,UAAU,CAC7B,QAAQ,CAAC,MAAM,CAAC,KAAK,CACnB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAC3B,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,mBAAmB,CAC1B,cAAiD,EACjD,SAAiB,EACjB,WAA0B,EAC1B,GAAiC,EACjC,SAAyC;IAEzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;QAChD,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAwC,CAAC;QAE7C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAA2C,CAAC;YACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,OAAO;YAEnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,GAAG,CAAC,MAAM,GAAG,oBAAoB;gBAAE,OAAO;YAE9C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAEhD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;gBAChC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,GAAG,CAAC,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,YAAY;gBAAE,OAAO;YAE7C,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5B,YAAY,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YAEzC,+BAA+B;YAC/B,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE;gBAAE,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC;YAC5D,IAAI,WAAW,GAAG,oBAAoB,EAAE,CAAC;gBACvC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,cAAc,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;gBAC1E,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;gBAC/B,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,cAAc,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;gBAE1E,IAAI,SAAS,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE;oBAAE,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC;gBAC1D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,GAAG,GAAG,CAAC,CAAC;gBACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC3B,IAAI,CAAC,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;wBACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;oBAClB,CAAC;gBACH,CAAC;gBAED,GAAG,CAAC,eAAe,YAAY,eAAe,SAAS,SAAS,CAAC,CAAC;gBAClE,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,cAAc,CAAC,gBAAgB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;QAEvE,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,cAAc,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,cAAc,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/captcha.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Core captcha session logic.
+ *
+ * Handles ephemeral key generation, QR code URL creation, relay polling,
+ * E2E encrypted challenge/response exchange, and SAS computation.
+ */
+import type { CaptchaOptions, CaptchaResult, CaptchaSessionState, SASDisplay } from "./types.js";
+/** Captcha session — manages the ephemeral E2E encrypted session with the phone */
+export interface CaptchaSession {
+    /** Unique session ID */
+    readonly sessionId: string;
+    /** URL to encode as QR code */
+    readonly qrCodeUrl: string;
+    /** Current session state */
+    readonly state: CaptchaSessionState;
+    /** SAS words/emojis (available after phone connects) */
+    readonly sas: SASDisplay | null;
+    /** Wait for the captcha result (resolves on approval, rejects on error/timeout) */
+    waitForResult(): Promise<CaptchaResult>;
+    /**
+     * Confirm SAS match — unblocks challenge sending.
+     * In BLE mode, the browser user must call this after visually confirming the SAS.
+     * In QR mode, SAS confirmation happens on the phone side, so this is a no-op.
+     */
+    confirmSAS(): void;
+    /** Cancel the session */
+    cancel(): void;
+    /** Subscribe to state changes */
+    onStateChange(callback: (state: CaptchaSessionState, sas: SASDisplay | null) => void): void;
+}
+/** Create a new captcha session */
+export declare function createSession(options: CaptchaOptions): Promise<CaptchaSession>;
+/** Hex-encode bytes (lowercase) */
+export declare function hexEncode(data: Uint8Array): string;
+//# sourceMappingURL=captcha.d.ts.map

package/dist/captcha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captcha.d.ts","sourceRoot":"","sources":["../src/captcha.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,mBAAmB,EAGnB,UAAU,EACX,MAAM,YAAY,CAAC;AAMpB,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,wBAAwB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAEpC,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;IAEhC,mFAAmF;IACnF,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAExC;;;;OAIG;IACH,UAAU,IAAI,IAAI,CAAC;IAEnB,yBAAyB;IACzB,MAAM,IAAI,IAAI,CAAC;IAEf,iCAAiC;IACjC,aAAa,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7F;AAED,mCAAmC;AACnC,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAgLpF;AAuKD,mCAAmC;AACnC,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAElD"}