@nawa-captcha/server 0.0.0-stage → 0.1.1

package/dist/heuristics.d.ts

@@ -0,0 +1,33 @@
+import type { Interaction, TracePoint } from './types.js';
+export declare const MAX_TRAIL_POINTS = 800;
+/** Validates an untrusted trail: bounded length, finite numbers, non-decreasing time. */
+export declare function parseTrail(value: unknown, bounds: {
+    w: number;
+    h: number;
+}): TracePoint[] | undefined;
+export declare function parseInteraction(value: unknown, bounds: {
+    w: number;
+    h: number;
+}): Interaction | undefined;
+export interface TrajectoryOptions {
+    /** Minimum duration of the gesture itself, in ms. */
+    readonly minDurationMs?: number;
+    /** 'x' for one-axis drags (slider) where off-axis wobble is a human signal. */
+    readonly axis?: 'x' | 'free';
+    /** Score below which the gesture is rejected (0..1). */
+    readonly threshold?: number;
+}
+export interface TrajectoryVerdict {
+    readonly human: boolean;
+    readonly score: number;
+    readonly reasons: readonly string[];
+}
+/** Shannon entropy (bits) of values quantized into `bins` equal-width buckets. */
+export declare function entropy(xs: readonly number[], bins?: number): number;
+/**
+ * Scores how human a drag looks. These are cost-raising signals, not proof: a scripted mouse
+ * with recorded human jitter will pass. What it reliably rejects is the cheap attack —
+ * synthetic events in a perfectly straight line at constant speed, or an instant "teleport".
+ */
+export declare function analyzeTrajectory(interaction: Interaction, opts?: TrajectoryOptions): TrajectoryVerdict;
+//# sourceMappingURL=heuristics.d.ts.map

package/dist/heuristics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristics.d.ts","sourceRoot":"","sources":["../src/heuristics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErE,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAGpC,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,EAAE,GAAG,SAAS,CAgBrG;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,GAAG,SAAS,CAM1G;AAED,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IAC7B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAWD,kFAAkF;AAClF,wBAAgB,OAAO,CAAC,EAAE,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,SAAI,GAAG,MAAM,CAQ/D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,GAAE,iBAAsB,GAAG,iBAAiB,CAqE3G"}

package/dist/heuristics.js

@@ -0,0 +1,152 @@
+export const MAX_TRAIL_POINTS = 800;
+const INPUT_MODES = ['mouse', 'touch', 'pen', 'keyboard'];
+/** Validates an untrusted trail: bounded length, finite numbers, non-decreasing time. */
+export function parseTrail(value, bounds) {
+    if (!Array.isArray(value) || value.length > MAX_TRAIL_POINTS)
+        return undefined;
+    const out = [];
+    let lastT = -Infinity;
+    for (const p of value) {
+        if (!Array.isArray(p) || p.length !== 3)
+            return undefined;
+        const [x, y, t] = p;
+        if (typeof x !== 'number' || typeof y !== 'number' || typeof t !== 'number')
+            return undefined;
+        if (!Number.isFinite(x) || !Number.isFinite(y) || !Number.isFinite(t))
+            return undefined;
+        // Generous margin: a finger may legitimately overshoot the image while dragging.
+        if (x < -bounds.w || x > bounds.w * 2 || y < -bounds.h || y > bounds.h * 2 || t < 0 || t > 600_000)
+            return undefined;
+        if (t < lastT)
+            return undefined;
+        lastT = t;
+        out.push([x, y, t]);
+    }
+    return out;
+}
+export function parseInteraction(value, bounds) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const v = value;
+    if (!INPUT_MODES.includes(v['mode']))
+        return undefined;
+    const trail = parseTrail(v['trail'], bounds);
+    return trail ? { mode: v['mode'], trail } : undefined;
+}
+function mean(xs) {
+    return xs.reduce((a, b) => a + b, 0) / (xs.length || 1);
+}
+function std(xs) {
+    const m = mean(xs);
+    return Math.sqrt(mean(xs.map((x) => (x - m) ** 2)));
+}
+/** Shannon entropy (bits) of values quantized into `bins` equal-width buckets. */
+export function entropy(xs, bins = 8) {
+    if (xs.length === 0)
+        return 0;
+    const min = Math.min(...xs);
+    const max = Math.max(...xs);
+    if (max - min < 1e-9)
+        return 0;
+    const counts = new Array(bins).fill(0);
+    for (const x of xs)
+        counts[Math.min(bins - 1, Math.floor(((x - min) / (max - min)) * bins))] += 1;
+    return counts.reduce((h, c) => (c === 0 ? h : h - (c / xs.length) * Math.log2(c / xs.length)), 0);
+}
+/**
+ * Scores how human a drag looks. These are cost-raising signals, not proof: a scripted mouse
+ * with recorded human jitter will pass. What it reliably rejects is the cheap attack —
+ * synthetic events in a perfectly straight line at constant speed, or an instant "teleport".
+ */
+export function analyzeTrajectory(interaction, opts = {}) {
+    const { trail, mode } = interaction;
+    const minDuration = opts.minDurationMs ?? 180;
+    const threshold = opts.threshold ?? 0.5;
+    const reasons = [];
+    const first = trail[0];
+    const last = trail[trail.length - 1];
+    if (!first || !last)
+        return { human: false, score: 0, reasons: ['no-samples'] };
+    const duration = last[2] - first[2];
+    if (mode === 'keyboard') {
+        // Keyboard users press keys; we only refuse the impossible (zero time, machine-perfect cadence).
+        if (duration < Math.min(minDuration, 120) && trail.length > 1)
+            reasons.push('too-fast');
+        const dts = trail.slice(1).map((p, i) => p[2] - trail[i][2]);
+        if (dts.length >= 6 && std(dts) < 0.5)
+            reasons.push('uniform-key-timing');
+        const score = reasons.length === 0 ? 1 : 0;
+        return { human: score >= threshold, score, reasons };
+    }
+    if (trail.length < 5)
+        return { human: false, score: 0, reasons: ['too-few-samples'] };
+    if (duration < minDuration)
+        return { human: false, score: 0, reasons: ['too-fast'] };
+    let score = 1;
+    const dts = [];
+    const speeds = [];
+    for (let i = 1; i < trail.length; i += 1) {
+        const a = trail[i - 1];
+        const b = trail[i];
+        const dt = b[2] - a[2];
+        dts.push(dt);
+        if (dt > 0)
+            speeds.push(Math.hypot(b[0] - a[0], b[1] - a[1]) / dt);
+    }
+    // Synthetic event loops fire at a perfectly regular cadence.
+    if (dts.length >= 8 && std(dts) < 0.5) {
+        score -= 0.2;
+        reasons.push('uniform-timing');
+    }
+    // Humans accelerate and decelerate; scripts tend to move at a constant velocity.
+    const moving = speeds.filter((s) => s > 0.001);
+    const cv = moving.length > 2 ? std(moving) / (mean(moving) || 1) : 0;
+    if (cv < 0.12) {
+        score -= 0.4;
+        reasons.push('constant-velocity');
+    }
+    if (moving.length > 6 && entropy(moving) < 1) {
+        score -= 0.15;
+        reasons.push('low-speed-entropy');
+    }
+    // A one-axis drag by a hand always wanders a little off-axis.
+    if ((opts.axis ?? 'free') === 'x') {
+        const ys = trail.map((p) => p[1]);
+        if (Math.max(...ys) - Math.min(...ys) < 0.5) {
+            score -= 0.25;
+            reasons.push('perfectly-straight');
+        }
+    }
+    else {
+        // Straight machine segments only change heading at the corners.
+        const turns = directionChanges(trail);
+        if (trail.length > 10 && turns / (trail.length - 1) < 0.1) {
+            score -= 0.25;
+            reasons.push('no-direction-noise');
+        }
+    }
+    score = Math.max(0, Math.round(score * 100) / 100);
+    return { human: score >= threshold, score, reasons };
+}
+/** Counts small heading changes (> ~3°) between consecutive segments. */
+function directionChanges(trail) {
+    let changes = 0;
+    let prev;
+    for (let i = 1; i < trail.length; i += 1) {
+        const a = trail[i - 1];
+        const b = trail[i];
+        if (Math.hypot(b[0] - a[0], b[1] - a[1]) < 0.5)
+            continue;
+        const heading = Math.atan2(b[1] - a[1], b[0] - a[0]);
+        if (prev !== undefined) {
+            let d = Math.abs(heading - prev);
+            if (d > Math.PI)
+                d = 2 * Math.PI - d;
+            if (d > 0.05 && d < 1.2)
+                changes += 1;
+        }
+        prev = heading;
+    }
+    return changes;
+}
+//# sourceMappingURL=heuristics.js.map

package/dist/heuristics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristics.js","sourceRoot":"","sources":["../src/heuristics.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,WAAW,GAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAEhF,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,MAAgC;IACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAc,CAAC;QACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACxF,iFAAiF;QACjF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO;YAAE,OAAO,SAAS,CAAC;QACrH,IAAI,CAAC,GAAG,KAAK;YAAE,OAAO,SAAS,CAAC;QAChC,KAAK,GAAG,CAAC,CAAC;QACV,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,MAAgC;IAC/E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAiBD,SAAS,IAAI,CAAC,EAAqB;IACjC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,GAAG,CAAC,EAAqB;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,OAAO,CAAC,EAAqB,EAAE,IAAI,GAAG,CAAC;IACrD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5B,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAwB,EAAE,OAA0B,EAAE;IACtF,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,iGAAiG;QACjG,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAI,KAAK,CAAC,CAAC,CAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACtF,IAAI,QAAQ,GAAG,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IAErF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAe,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAe,CAAC;QACjC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,6DAA6D;IAC7D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;QACtC,KAAK,IAAI,GAAG,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAED,iFAAiF;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACd,KAAK,IAAI,GAAG,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;YAC5C,KAAK,IAAI,IAAI,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gEAAgE;QAChE,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;YAC1D,KAAK,IAAI,IAAI,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,KAA4B;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAe,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAe,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG;YAAE,SAAS;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE;gBAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,51 @@
+import type { ClientInfo } from './binding.js';
+import type { NawaCaptcha, PassTokenResult, VerifyPassTokenOptions } from './engine.js';
+import { verifyPassToken } from './engine.js';
+import type { NawaCaptchaStore } from './store.js';
+/** Framework-agnostic request: what the handlers need, nothing else. */
+export interface GuardHttpRequest {
+    /** Parsed JSON body (or undefined). */
+    readonly body: unknown;
+    readonly client: ClientInfo;
+}
+export interface GuardHttpResponse {
+    readonly status: number;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: unknown;
+}
+export declare const SECURITY_HEADERS: Readonly<Record<string, string>>;
+/** Maximum accepted JSON body for the captcha endpoints (trails are the largest part). */
+export declare const MAX_BODY_BYTES: number;
+/** POST /challenge  body: { siteKey?, action?, lang?, type?, types? } */
+export declare function handleChallenge(guard: NawaCaptcha, req: GuardHttpRequest): Promise<GuardHttpResponse>;
+/**
+ * POST /verify  body: { token, answer } → { success, token (pass token), expiresAt }, or for a
+ * multi-step policy { success, next: <the next challenge> } until the last step is solved.
+ */
+export declare function handleVerify(guard: NawaCaptcha, req: GuardHttpRequest): Promise<GuardHttpResponse>;
+export interface PassTokenSource {
+    readonly headers: Readonly<Record<string, string | readonly string[] | undefined>>;
+    readonly body?: unknown;
+}
+export declare const DEFAULT_TOKEN_FIELD = "nawa-captcha-token";
+export declare const DEFAULT_TOKEN_HEADER = "x-nawa-captcha-token";
+/** @deprecated Pre-rename (Nawa Guard) names, still accepted by default for this release. */
+export declare const LEGACY_TOKEN_FIELD = "nawa-guard-token";
+/** @deprecated Pre-rename (Nawa Guard) names, still accepted by default for this release. */
+export declare const LEGACY_TOKEN_HEADER = "x-nawa-guard-token";
+/**
+ * Reads a pass token from a header (preferred for JSON APIs) or a form/body field. With the
+ * defaults, the deprecated `X-Nawa-Guard-Token` header and `nawa-guard-token` field also work.
+ */
+export declare function readPassToken(src: PassTokenSource, field?: string, header?: string): string | undefined;
+export interface ProtectOptions extends Omit<VerifyPassTokenOptions, 'secret' | 'client' | 'store'> {
+    readonly field?: string;
+    readonly header?: string;
+    readonly store?: NawaCaptchaStore;
+}
+/** One call for protected routes in any framework: read + verify the pass token. */
+export declare function checkPassToken(guard: NawaCaptcha, src: PassTokenSource & {
+    client: ClientInfo;
+}, opts: ProtectOptions): Promise<PassTokenResult>;
+export { verifyPassToken };
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK7D,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,cAAc,QAAY,CAAC;AAQxC,yEAAyE;AACzE,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAM3G;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAWxG;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,mBAAmB,uBAAuB,CAAC;AACxD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,6FAA6F;AAC7F,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AACrD,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB,uBAAuB,CAAC;AAOxD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,SAAsB,EAAE,MAAM,SAAuB,GAAG,MAAM,GAAG,SAAS,CASlI;AAED,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,sBAAsB,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IACjG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED,oFAAoF;AACpF,wBAAsB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAGtJ;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/http.js

@@ -0,0 +1,70 @@
+import { verifyPassToken } from './engine.js';
+export const SECURITY_HEADERS = {
+    'Content-Type': 'application/json; charset=utf-8',
+    // Challenges and pass tokens must never be cached by a browser or proxy.
+    'Cache-Control': 'no-store',
+    'X-Content-Type-Options': 'nosniff',
+};
+/** Maximum accepted JSON body for the captcha endpoints (trails are the largest part). */
+export const MAX_BODY_BYTES = 32 * 1024;
+const json = (status, body) => ({ status, headers: SECURITY_HEADERS, body });
+function record(body) {
+    return body && typeof body === 'object' && !Array.isArray(body) ? body : undefined;
+}
+/** POST /challenge  body: { siteKey?, action?, lang?, type?, types? } */
+export async function handleChallenge(guard, req) {
+    const body = record(req.body ?? {});
+    if (!body)
+        return json(400, { success: false, error: 'invalid-input' });
+    const result = await guard.createChallenge({ siteKey: body['siteKey'], action: body['action'], lang: body['lang'], type: body['type'], types: body['types'], client: req.client });
+    if (!result.ok)
+        return json(result.error === 'rate-limited' ? 429 : 400, { success: false, error: result.error });
+    return json(200, { success: true, ...result.challenge });
+}
+/**
+ * POST /verify  body: { token, answer } → { success, token (pass token), expiresAt }, or for a
+ * multi-step policy { success, next: <the next challenge> } until the last step is solved.
+ */
+export async function handleVerify(guard, req) {
+    const body = record(req.body);
+    if (!body)
+        return json(400, { success: false, error: 'invalid-input', retry: false });
+    const result = await guard.verify({ token: body['token'], answer: body['answer'], client: req.client });
+    if (result.ok && result.next)
+        return json(200, { success: true, next: result.next });
+    if (result.ok) {
+        return json(200, { success: true, token: result.passToken, expiresAt: result.expiresAt, expiresInMs: result.expiresInMs, type: result.type, solvedTypes: result.solvedTypes });
+    }
+    // `reason`/`detail` stay server-side (onEvent); the browser only learns the coarse outcome.
+    const status = result.error === 'rate-limited' ? 429 : result.error === 'invalid-input' ? 400 : 403;
+    return json(status, { success: false, error: result.error, retry: result.retry });
+}
+export const DEFAULT_TOKEN_FIELD = 'nawa-captcha-token';
+export const DEFAULT_TOKEN_HEADER = 'x-nawa-captcha-token';
+/** @deprecated Pre-rename (Nawa Guard) names, still accepted by default for this release. */
+export const LEGACY_TOKEN_FIELD = 'nawa-guard-token';
+/** @deprecated Pre-rename (Nawa Guard) names, still accepted by default for this release. */
+export const LEGACY_TOKEN_HEADER = 'x-nawa-guard-token';
+function pick(value) {
+    const v = Array.isArray(value) ? value[0] : value;
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+/**
+ * Reads a pass token from a header (preferred for JSON APIs) or a form/body field. With the
+ * defaults, the deprecated `X-Nawa-Guard-Token` header and `nawa-guard-token` field also work.
+ */
+export function readPassToken(src, field = DEFAULT_TOKEN_FIELD, header = DEFAULT_TOKEN_HEADER) {
+    const legacy = field === DEFAULT_TOKEN_FIELD && header === DEFAULT_TOKEN_HEADER;
+    const body = record(src.body);
+    return (pick(src.headers[header.toLowerCase()]) ??
+        (legacy ? pick(src.headers[LEGACY_TOKEN_HEADER]) : undefined) ??
+        pick(body?.[field]) ??
+        (legacy ? pick(body?.[LEGACY_TOKEN_FIELD]) : undefined));
+}
+/** One call for protected routes in any framework: read + verify the pass token. */
+export async function checkPassToken(guard, src, opts) {
+    const token = readPassToken(src, opts.field, opts.header);
+    return guard.verifyPassToken(token, { ...opts, client: src.client });
+}
+export { verifyPassToken };
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgB9C,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,cAAc,EAAE,iCAAiC;IACjD,yEAAyE;IACzE,eAAe,EAAE,UAAU;IAC3B,wBAAwB,EAAE,SAAS;CACpC,CAAC;AAEF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAqB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjH,SAAS,MAAM,CAAC,IAAa;IAC3B,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClH,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAkB,EAAE,GAAqB;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnL,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClH,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAkB,EAAE,GAAqB;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,4FAA4F;IAC5F,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACpG,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAOD,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AACrD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAExD,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB,EAAE,KAAK,GAAG,mBAAmB,EAAE,MAAM,GAAG,oBAAoB;IAC5G,MAAM,MAAM,GAAG,KAAK,KAAK,mBAAmB,IAAI,MAAM,KAAK,oBAAoB,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CACL,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CACxD,CAAC;AACJ,CAAC;AAQD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAkB,EAAE,GAA6C,EAAE,IAAoB;IAC1H,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/i18n.d.ts

@@ -0,0 +1,237 @@
+import type { Lang } from './types.js';
+import type { PictoKind } from './render/pictograms.js';
+declare const PROMPTS: {
+    readonly slider: {
+        readonly en: "Drag the piece into the matching gap.";
+        readonly ar: "اسحب القطعة إلى الفراغ المطابق لها.";
+    };
+    readonly slideUnlock: {
+        readonly en: "Slide the handle until its arrow points at the ring.";
+        readonly ar: "اسحب المقبض حتى يشير سهمه إلى الحلقة.";
+    };
+    readonly shadowDrag: {
+        readonly en: "Drag the picture onto its matching shadow.";
+        readonly ar: "اسحب الصورة إلى الظل المطابق لها.";
+    };
+    readonly jigsaw: {
+        readonly en: "Swap the pieces until the picture is complete.";
+        readonly ar: "بدّل القطع حتى تكتمل الصورة.";
+    };
+    readonly rotate: {
+        readonly en: "Rotate the picture until it is upright.";
+        readonly ar: "دوّر الصورة حتى تصبح معتدلة.";
+    };
+    readonly rotateObject: {
+        readonly en: "Rotate the {thing} until it stands upright.";
+        readonly ar: "دوّر صورة {thing} حتى تصبح معتدلة.";
+    };
+    readonly rotateMatch: {
+        readonly en: "Turn the inner circle until the picture lines up.";
+        readonly ar: "دوّر الدائرة الداخلية حتى تتطابق الصورة.";
+    };
+    readonly hold: {
+        readonly en: "Press and hold, and let go while the ring is in the green zone.";
+        readonly ar: "اضغط مطولًا ثم أفلت عندما تكون الحلقة داخل المنطقة الخضراء.";
+    };
+    readonly icons: {
+        readonly en: "Select every {icon}.";
+        readonly ar: "اختر كل {icon}.";
+    };
+    readonly oddOneOut: {
+        readonly en: "One picture is different from the others. Select it.";
+        readonly ar: "إحدى الصور مختلفة عن البقية. اخترها.";
+    };
+    readonly oddRotation: {
+        readonly en: "One letter is mirrored (backwards). Select it.";
+        readonly ar: "أحد الحروف معكوس كالمرآة. اختره.";
+    };
+    readonly colorName: {
+        readonly en: "Select every {color} shape (they have {pattern}).";
+        readonly ar: "اختر كل شكل {color} (عليه {pattern}).";
+    };
+    readonly biggest: {
+        readonly en: "Select the largest {icon}.";
+        readonly ar: "اختر أكبر {icon}.";
+    };
+    readonly smallest: {
+        readonly en: "Select the smallest {icon}.";
+        readonly ar: "اختر أصغر {icon}.";
+    };
+    readonly findShape: {
+        readonly en: "Select every cell that shows the shape in the box.";
+        readonly ar: "اختر كل خانة فيها الشكل الموجود في المربع.";
+    };
+    readonly shadowPick: {
+        readonly en: "Select the shadow that matches the picture in the box.";
+        readonly ar: "اختر الظل الذي يطابق الصورة في المربع.";
+    };
+    readonly pattern: {
+        readonly en: "Which picture comes next in the row? Select it.";
+        readonly ar: "ما الصورة التالية في الصف؟ اخترها.";
+    };
+    readonly clock: {
+        readonly en: "Select the clock that shows {time}.";
+        readonly ar: "اختر الساعة التي تشير إلى {time}.";
+    };
+    readonly mathCompare: {
+        readonly en: "Select every card whose answer is more than {n}.";
+        readonly ar: "اختر كل بطاقة ناتجها أكبر من {n}.";
+    };
+    readonly symmetry: {
+        readonly en: "Fill the right half so it mirrors the left half.";
+        readonly ar: "لوّن النصف الأيمن ليصبح مرآة للنصف الأيسر.";
+    };
+    readonly pairs: {
+        readonly en: "Match the pictures in pairs: select two that are the same.";
+        readonly ar: "طابق الصور أزواجًا: اختر صورتين متماثلتين.";
+    };
+    readonly tapOrder: {
+        readonly en: "Tap the numbers from smallest to largest.";
+        readonly ar: "انقر الأرقام من الأصغر إلى الأكبر.";
+    };
+    readonly spell: {
+        readonly en: "Tap the letters to spell the word at the top.";
+        readonly ar: "انقر الحروف لتكتب الكلمة الظاهرة في الأعلى.";
+    };
+    readonly orderDots: {
+        readonly en: "Order the tiles from fewest dots to most.";
+        readonly ar: "رتّب البطاقات من الأقل نقاطًا إلى الأكثر.";
+    };
+    readonly orderBars: {
+        readonly en: "Order the tiles from shortest bar to tallest.";
+        readonly ar: "رتّب البطاقات من أقصر عمود إلى أطوله.";
+    };
+    readonly orderSize: {
+        readonly en: "Order the shapes from smallest to largest.";
+        readonly ar: "رتّب الأشكال من الأصغر إلى الأكبر.";
+    };
+    readonly orderNumbersUp: {
+        readonly en: "Order the numbers from smallest to largest.";
+        readonly ar: "رتّب الأعداد من الأصغر إلى الأكبر.";
+    };
+    readonly orderNumbersDown: {
+        readonly en: "Order the numbers from largest to smallest.";
+        readonly ar: "رتّب الأعداد من الأكبر إلى الأصغر.";
+    };
+    readonly orderTime: {
+        readonly en: "Order the clocks from earliest time to latest.";
+        readonly ar: "رتّب الساعات من الوقت الأبكر إلى الأحدث.";
+    };
+    readonly story: {
+        readonly en: "Put the pictures in order: {story}.";
+        readonly ar: "رتّب الصور: {story}.";
+    };
+    readonly trace: {
+        readonly en: "Connect the dots in order, from 1 to {n}.";
+        readonly ar: "صِل النقاط بالترتيب من 1 إلى {n}.";
+    };
+    readonly traceLetters: {
+        readonly en: "Connect the dots in alphabetical order, from A to {last}.";
+        readonly ar: "صِل النقاط بالترتيب الأبجدي الإنجليزي من A إلى {last}.";
+    };
+    readonly maze: {
+        readonly en: "Draw a path through the maze from the green dot to the flag.";
+        readonly ar: "ارسم طريقًا عبر المتاهة من النقطة الخضراء إلى العلم.";
+    };
+    readonly math: {
+        readonly en: "Solve the sum shown in the picture.";
+        readonly ar: "احسب ناتج العملية في الصورة.";
+    };
+    readonly count: {
+        readonly en: "How many {icon} shapes are in the picture?";
+        readonly ar: "كم {icon} في الصورة؟";
+    };
+    readonly dice: {
+        readonly en: "Add up the dots on all the dice.";
+        readonly ar: "اجمع النقاط الموجودة على كل أحجار النرد.";
+    };
+    readonly pow: {
+        readonly en: "Checking your browser…";
+        readonly ar: "جارٍ التحقق من المتصفح…";
+    };
+    readonly accessible: {
+        readonly en: "Answer the question in words or digits.";
+        readonly ar: "أجب عن السؤال بالكلمات أو الأرقام.";
+    };
+    readonly audioDigits: {
+        readonly en: "Press Play and type the {n} digits you hear.";
+        readonly ar: "اضغط تشغيل واكتب الأرقام الـ{n} التي تسمعها (بالإنجليزية).";
+    };
+    readonly audioBeeps: {
+        readonly en: "Press Play and count the high-pitched beeps. Type how many you heard.";
+        readonly ar: "اضغط تشغيل وعُدّ النغمات الحادّة (العالية)، ثم اكتب عددها.";
+    };
+};
+export type PromptKey = keyof typeof PROMPTS;
+export declare function prompt(key: PromptKey, lang: Lang, vars?: Record<string, string | number>): string;
+export declare function pictoName(kind: PictoKind, lang: Lang): string;
+/** @deprecated kept for compatibility; use {@link pictoName}. */
+export declare const iconName: typeof pictoName;
+export declare const COLOR_NAMES: {
+    readonly red: {
+        readonly en: "red";
+        readonly ar: "أحمر";
+        readonly pattern: {
+            readonly en: "dots";
+            readonly ar: "نقاط";
+        };
+    };
+    readonly blue: {
+        readonly en: "blue";
+        readonly ar: "أزرق";
+        readonly pattern: {
+            readonly en: "stripes";
+            readonly ar: "خطوط";
+        };
+    };
+    readonly green: {
+        readonly en: "green";
+        readonly ar: "أخضر";
+        readonly pattern: {
+            readonly en: "a cross";
+            readonly ar: "علامة زائد";
+        };
+    };
+    readonly yellow: {
+        readonly en: "yellow";
+        readonly ar: "أصفر";
+        readonly pattern: {
+            readonly en: "a ring";
+            readonly ar: "حلقة";
+        };
+    };
+    readonly purple: {
+        readonly en: "purple";
+        readonly ar: "بنفسجي";
+        readonly pattern: {
+            readonly en: "a zigzag";
+            readonly ar: "خط متعرّج";
+        };
+    };
+};
+export type ColorName = keyof typeof COLOR_NAMES;
+export declare const STORIES: {
+    readonly plant: {
+        readonly en: "a seed grows into a flower";
+        readonly ar: "بذرة تنمو حتى تصبح زهرة";
+    };
+    readonly candle: {
+        readonly en: "a candle burns down";
+        readonly ar: "شمعة تحترق وتقصر";
+    };
+    readonly glass: {
+        readonly en: "a glass is being filled with water";
+        readonly ar: "كوب يُملأ بالماء";
+    };
+    readonly egg: {
+        readonly en: "a chick hatches from an egg";
+        readonly ar: "كتكوت يفقس من بيضة";
+    };
+    readonly battery: {
+        readonly en: "a battery charges up";
+        readonly ar: "بطارية تُشحن";
+    };
+};
+export type StoryKind = keyof typeof STORIES;
+export {};
+//# sourceMappingURL=i18n.d.ts.map

package/dist/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyCH,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,OAAO,CAAC;AAE7C,wBAAgB,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAM,GAAG,MAAM,CAErG;AA8BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,CAE7D;AAED,iEAAiE;AACjE,eAAO,MAAM,QAAQ,kBAAY,CAAC;AAElC,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMd,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,WAAW,CAAC;AAEjD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;CAMV,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,OAAO,CAAC"}