@silverassist/recaptcha 0.1.0 → 0.2.1

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import Script from 'next/script';
-import { useRef, useCallback, useEffect } from 'react';
-import { jsxs, Fragment, jsx } from 'react/jsx-runtime';
+import { useRef, useState, useCallback, useEffect } from 'react';
+import { jsxs, jsx } from 'react/jsx-runtime';
 
 // src/client/index.tsx
 
@@ -15,6 +15,39 @@ var RECAPTCHA_CONFIG = {
   /** Default token refresh interval */
   tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL
 };
+function loadRecaptchaScript(siteKey, onLoad, onError) {
+  if (typeof window !== "undefined" && window.__recaptchaLoaded) {
+    onLoad();
+    return;
+  }
+  if (typeof window !== "undefined" && window.__recaptchaLoading) {
+    window.__recaptchaCallbacks = window.__recaptchaCallbacks || [];
+    window.__recaptchaCallbacks.push({ onLoad, onError });
+    return;
+  }
+  if (typeof window !== "undefined") {
+    window.__recaptchaLoading = true;
+    window.__recaptchaCallbacks = [];
+    const script = document.createElement("script");
+    script.src = `https://www.google.com/recaptcha/api.js?render=${siteKey}`;
+    script.async = true;
+    script.onload = () => {
+      window.__recaptchaLoaded = true;
+      window.__recaptchaLoading = false;
+      onLoad();
+      window.__recaptchaCallbacks?.forEach((cb) => cb.onLoad());
+      window.__recaptchaCallbacks = [];
+    };
+    script.onerror = () => {
+      window.__recaptchaLoading = false;
+      const error = new Error("Failed to load reCAPTCHA script");
+      onError(error);
+      window.__recaptchaCallbacks?.forEach((cb) => cb.onError(error));
+      window.__recaptchaCallbacks = [];
+    };
+    document.head.appendChild(script);
+  }
+}
 function RecaptchaWrapper({
   action,
   inputName = "recaptchaToken",
@@ -22,34 +55,60 @@ function RecaptchaWrapper({
   siteKey: propSiteKey,
   refreshInterval = RECAPTCHA_CONFIG.tokenRefreshInterval,
   onTokenGenerated,
-  onError
+  onError,
+  lazy = false,
+  lazyRootMargin = "200px"
 }) {
   const siteKey = propSiteKey ?? process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY;
   const tokenInputRef = useRef(null);
   const refreshIntervalRef = useRef(null);
+  const containerRef = useRef(null);
+  const isMountedRef = useRef(true);
+  const [isVisible, setIsVisible] = useState(!lazy);
+  const [scriptLoaded, setScriptLoaded] = useState(false);
   const executeRecaptcha = useCallback(async () => {
     if (!siteKey) {
       return;
     }
     try {
-      if (typeof window !== "undefined" && window.grecaptcha) {
-        window.grecaptcha.ready(async () => {
-          try {
-            const token = await window.grecaptcha.execute(siteKey, { action });
-            if (tokenInputRef.current) {
-              tokenInputRef.current.value = token;
-            }
-            if (onTokenGenerated) {
-              onTokenGenerated(token);
-            }
-          } catch (error) {
-            console.error("[reCAPTCHA] Error executing reCAPTCHA:", error);
-            if (onError && error instanceof Error) {
-              onError(error);
-            }
+      const waitForGrecaptcha = async (maxAttempts = 20, delayMs = 100) => {
+        for (let i = 0; i < maxAttempts; i++) {
+          if (!isMountedRef.current) {
+            return false;
+          }
+          if (typeof window !== "undefined" && window.grecaptcha) {
+            return true;
           }
-        });
+          await new Promise((resolve) => setTimeout(resolve, delayMs));
+        }
+        return false;
+      };
+      const grecaptchaAvailable = await waitForGrecaptcha();
+      if (!isMountedRef.current || !grecaptchaAvailable) {
+        return;
       }
+      window.grecaptcha.ready(async () => {
+        if (!isMountedRef.current) {
+          return;
+        }
+        try {
+          const token = await window.grecaptcha.execute(siteKey, { action });
+          if (!isMountedRef.current) {
+            return;
+          }
+          if (tokenInputRef.current) {
+            tokenInputRef.current.value = token;
+          }
+          if (onTokenGenerated) {
+            onTokenGenerated(token);
+          }
+        } catch (error) {
+          console.error("[reCAPTCHA] Error executing reCAPTCHA:", error);
+          if (onError && error instanceof Error) {
+            onError(error);
+          }
+        }
+      });
     } catch (error) {
       console.error("[reCAPTCHA] Error:", error);
       if (onError && error instanceof Error) {
@@ -58,7 +117,49 @@ function RecaptchaWrapper({
     }
   }, [siteKey, action, onTokenGenerated, onError]);
   useEffect(() => {
-    executeRecaptcha();
+    if (!lazy || !containerRef.current) return;
+    if (typeof IntersectionObserver === "undefined") {
+      setIsVisible(true);
+      return;
+    }
+    const observer = new IntersectionObserver(
+      ([entry]) => {
+        if (entry.isIntersecting) {
+          setIsVisible(true);
+          observer.disconnect();
+        }
+      },
+      { rootMargin: lazyRootMargin }
+    );
+    observer.observe(containerRef.current);
+    return () => observer.disconnect();
+  }, [lazy, lazyRootMargin]);
+  useEffect(() => {
+    if (!siteKey) return;
+    if (lazy) return;
+    if (typeof window !== "undefined" && !window.__recaptchaLoaded && !window.__recaptchaLoading) {
+      window.__recaptchaLoading = true;
+      window.__recaptchaCallbacks = window.__recaptchaCallbacks || [];
+    }
+  }, [siteKey, lazy]);
+  useEffect(() => {
+    if (!siteKey) return;
+    if (!lazy) return;
+    if (!isVisible) return;
+    const handleLoad = () => {
+      setScriptLoaded(true);
+      executeRecaptcha();
+    };
+    const handleError = (error) => {
+      console.error("[reCAPTCHA] Failed to load reCAPTCHA script");
+      if (onError) {
+        onError(error);
+      }
+    };
+    loadRecaptchaScript(siteKey, handleLoad, handleError);
+  }, [siteKey, lazy, isVisible, executeRecaptcha, onError]);
+  useEffect(() => {
+    if (!scriptLoaded) return;
     refreshIntervalRef.current = setInterval(() => {
       executeRecaptcha();
     }, refreshInterval);
@@ -67,7 +168,13 @@ function RecaptchaWrapper({
         clearInterval(refreshIntervalRef.current);
       }
     };
-  }, [executeRecaptcha, refreshInterval]);
+  }, [scriptLoaded, executeRecaptcha, refreshInterval]);
+  useEffect(() => {
+    isMountedRef.current = true;
+    return () => {
+      isMountedRef.current = false;
+    };
+  }, []);
   if (!siteKey) {
     if (process.env.NODE_ENV === "development") {
       console.warn(
@@ -76,7 +183,7 @@ function RecaptchaWrapper({
     }
     return null;
   }
-  return /* @__PURE__ */ jsxs(Fragment, { children: [
+  return /* @__PURE__ */ jsxs("div", { ref: containerRef, style: { display: "contents" }, children: [
     /* @__PURE__ */ jsx(
       "input",
       {
@@ -87,15 +194,28 @@ function RecaptchaWrapper({
         "data-testid": "recaptcha-token-input"
       }
     ),
-    /* @__PURE__ */ jsx(
+    !lazy && /* @__PURE__ */ jsx(
       Script,
       {
         src: `https://www.google.com/recaptcha/api.js?render=${siteKey}`,
         strategy: "afterInteractive",
         onLoad: () => {
+          if (typeof window !== "undefined") {
+            window.__recaptchaLoaded = true;
+            window.__recaptchaLoading = false;
+            window.__recaptchaCallbacks?.forEach((cb) => cb.onLoad());
+            window.__recaptchaCallbacks = [];
+          }
+          setScriptLoaded(true);
           executeRecaptcha();
         },
         onError: () => {
+          if (typeof window !== "undefined") {
+            window.__recaptchaLoading = false;
+            const error = new Error("Failed to load reCAPTCHA script");
+            window.__recaptchaCallbacks?.forEach((cb) => cb.onError(error));
+            window.__recaptchaCallbacks = [];
+          }
           console.error("[reCAPTCHA] Failed to load reCAPTCHA script");
           if (onError) {
             onError(new Error("Failed to load reCAPTCHA script"));
@@ -200,6 +320,73 @@ function getRecaptchaToken(formData, fieldName = "recaptchaToken") {
   const token = formData.get(fieldName);
   return typeof token === "string" ? token : null;
 }
+/**
+ * @module @silverassist/recaptcha/constants
+ * @description reCAPTCHA Configuration Constants - Default configuration values
+ * for reCAPTCHA v3 integration.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
+/**
+ * @module @silverassist/recaptcha/client
+ * @description reCAPTCHA v3 Client Component - Loads the Google reCAPTCHA script
+ * and generates tokens automatically. Place inside a form to add invisible spam protection.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/v3|Google reCAPTCHA v3 Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
+/**
+ * @module @silverassist/recaptcha/server
+ * @description reCAPTCHA v3 Server-Side Validation - Functions for validating
+ * reCAPTCHA tokens in Next.js Server Actions.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
+/**
+ * @module @silverassist/recaptcha
+ * @description Google reCAPTCHA v3 integration for Next.js applications.
+ * Provides both client-side token generation and server-side validation.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ *
+ * @example Client-side usage
+ * ```tsx
+ * import { RecaptchaWrapper } from '@silverassist/recaptcha';
+ *
+ * <form action={formAction}>
+ *   <RecaptchaWrapper action="contact_form" />
+ *   <input name="email" type="email" />
+ *   <button type="submit">Submit</button>
+ * </form>
+ * ```
+ *
+ * @example Server-side usage
+ * ```ts
+ * import { validateRecaptcha, getRecaptchaToken } from '@silverassist/recaptcha/server';
+ *
+ * export async function submitForm(formData: FormData) {
+ *   const token = getRecaptchaToken(formData);
+ *   const result = await validateRecaptcha(token, 'contact_form');
+ *   if (!result.success) {
+ *     return { success: false, message: result.error };
+ *   }
+ *   // Process form...
+ * }
+ * ```
+ */
 
 export { DEFAULT_SCORE_THRESHOLD, DEFAULT_TOKEN_REFRESH_INTERVAL, RECAPTCHA_CONFIG, RecaptchaWrapper, getRecaptchaToken, isRecaptchaEnabled, validateRecaptcha };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/constants/index.ts","../src/client/index.tsx","../src/server/index.ts"],"names":[],"mappings":";;;;;;;AAeO,IAAM,uBAAA,GAA0B;AAOhC,IAAM,8BAAA,GAAiC;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB;ACoBO,SAAS,gBAAA,CAAiB;AAAA,EAC/B,MAAA;AAAA,EACA,SAAA,GAAY,gBAAA;AAAA,EACZ,OAAA,GAAU,iBAAA;AAAA,EACV,OAAA,EAAS,WAAA;AAAA,EACT,kBAAkB,gBAAA,CAAiB,oBAAA;AAAA,EACnC,gBAAA;AAAA,EACA;AACF,CAAA,EAA0B;AAExB,EAAA,MAAM,OAAA,GAAU,WAAA,IAAe,OAAA,CAAQ,GAAA,CAAI,8BAAA;AAC3C,EAAA,MAAM,aAAA,GAAgB,OAAyB,IAAI,CAAA;AACnD,EAAA,MAAM,kBAAA,GAAqB,OAA8B,IAAI,CAAA;AAG7D,EAAA,MAAM,gBAAA,GAAmB,YAAY,YAAY;AAC/C,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACtD,QAAA,MAAA,CAAO,UAAA,CAAW,MAAM,YAAY;AAClC,UAAA,IAAI;AACF,YAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,QAAQ,CAAA;AAGjE,YAAA,IAAI,cAAc,OAAA,EAAS;AACzB,cAAA,aAAA,CAAc,QAAQ,KAAA,GAAQ,KAAA;AAAA,YAChC;AAGA,YAAA,IAAI,gBAAA,EAAkB;AACpB,cAAA,gBAAA,CAAiB,KAAK,CAAA;AAAA,YACxB;AAAA,UACF,SAAS,KAAA,EAAO;AACd,YAAA,OAAA,CAAQ,KAAA,CAAM,0CAA0C,KAAK,CAAA;AAC7D,YAAA,IAAI,OAAA,IAAW,iBAAiB,KAAA,EAAO;AACrC,cAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,YACf;AAAA,UACF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,sBAAsB,KAAK,CAAA;AACzC,MAAA,IAAI,OAAA,IAAW,iBAAiB,KAAA,EAAO;AACrC,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,MAAA,EAAQ,gBAAA,EAAkB,OAAO,CAAC,CAAA;AAG/C,EAAA,SAAA,CAAU,MAAM;AAEd,IAAA,gBAAA,EAAiB;AAGjB,IAAA,kBAAA,CAAmB,OAAA,GAAU,YAAY,MAAM;AAC7C,MAAA,gBAAA,EAAiB;AAAA,IACnB,GAAG,eAAe,CAAA;AAGlB,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,mBAAmB,OAAA,EAAS;AAC9B,QAAA,aAAA,CAAc,mBAAmB,OAAO,CAAA;AAAA,MAC1C;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,gBAAA,EAAkB,eAAe,CAAC,CAAA;AAGtC,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,EAAe;AAC1C,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,uBACE,IAAA,CAAA,QAAA,EAAA,EAEE,QAAA,EAAA;AAAA,oBAAA,GAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,aAAA;AAAA,QACL,IAAA,EAAK,QAAA;AAAA,QACL,IAAA,EAAM,SAAA;AAAA,QACN,EAAA,EAAI,OAAA;AAAA,QACJ,aAAA,EAAY;AAAA;AAAA,KACd;AAAA,oBAGA,GAAA;AAAA,MAAC,MAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,kDAAkD,OAAO,CAAA,CAAA;AAAA,QAC9D,QAAA,EAAS,kBAAA;AAAA,QACT,QAAQ,MAAM;AACZ,UAAA,gBAAA,EAAiB;AAAA,QACnB,CAAA;AAAA,QACA,SAAS,MAAM;AACb,UAAA,OAAA,CAAQ,MAAM,6CAA6C,CAAA;AAC3D,UAAA,IAAI,OAAA,EAAS;AACX,YAAA,OAAA,CAAQ,IAAI,KAAA,CAAM,iCAAiC,CAAC,CAAA;AAAA,UACtD;AAAA,QACF;AAAA;AAAA;AACF,GAAA,EACF,CAAA;AAEJ;;;AChHA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.mjs","sourcesContent":["/**\n * reCAPTCHA Configuration Constants\n *\n * Default configuration values for reCAPTCHA v3 integration.\n *\n * @packageDocumentation\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * reCAPTCHA v3 Client Component\n *\n * Loads the Google reCAPTCHA script and generates tokens automatically.\n * Place inside a form to add invisible spam protection.\n *\n * @see https://developers.google.com/recaptcha/docs/v3\n * @packageDocumentation\n */\n\n\"use client\";\n\nimport Script from \"next/script\";\nimport { useCallback, useEffect, useRef } from \"react\";\nimport type { RecaptchaWrapperProps } from \"../types\";\nimport { RECAPTCHA_CONFIG } from \"../constants\";\n\n/**\n * RecaptchaWrapper - Client component for reCAPTCHA v3 integration\n *\n * Features:\n * - Loads reCAPTCHA script automatically\n * - Generates token when script loads\n * - Refreshes token periodically (tokens expire after 2 minutes)\n * - Stores token in hidden input field for form submission\n * - Graceful fallback when not configured\n *\n * @example Basic usage\n * ```tsx\n * <form action={formAction}>\n *   <RecaptchaWrapper action=\"contact_form\" />\n *   <input name=\"email\" type=\"email\" required />\n *   <button type=\"submit\">Submit</button>\n * </form>\n * ```\n *\n * @example Custom input name\n * ```tsx\n * <RecaptchaWrapper\n *   action=\"signup\"\n *   inputName=\"captchaToken\"\n *   inputId=\"signup-captcha\"\n * />\n * ```\n *\n * @example With callbacks\n * ```tsx\n * <RecaptchaWrapper\n *   action=\"payment\"\n *   onTokenGenerated={(token) => console.log(\"Token:\", token)}\n *   onError={(error) => console.error(\"Error:\", error)}\n * />\n * ```\n */\nexport function RecaptchaWrapper({\n  action,\n  inputName = \"recaptchaToken\",\n  inputId = \"recaptcha-token\",\n  siteKey: propSiteKey,\n  refreshInterval = RECAPTCHA_CONFIG.tokenRefreshInterval,\n  onTokenGenerated,\n  onError,\n}: RecaptchaWrapperProps) {\n  // Use prop siteKey or fall back to environment variable\n  const siteKey = propSiteKey ?? process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY;\n  const tokenInputRef = useRef<HTMLInputElement>(null);\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n\n  // Execute reCAPTCHA and store token\n  const executeRecaptcha = useCallback(async () => {\n    if (!siteKey) {\n      return;\n    }\n\n    try {\n      if (typeof window !== \"undefined\" && window.grecaptcha) {\n        window.grecaptcha.ready(async () => {\n          try {\n            const token = await window.grecaptcha.execute(siteKey, { action });\n\n            // Store token in hidden input\n            if (tokenInputRef.current) {\n              tokenInputRef.current.value = token;\n            }\n\n            // Call callback if provided\n            if (onTokenGenerated) {\n              onTokenGenerated(token);\n            }\n          } catch (error) {\n            console.error(\"[reCAPTCHA] Error executing reCAPTCHA:\", error);\n            if (onError && error instanceof Error) {\n              onError(error);\n            }\n          }\n        });\n      }\n    } catch (error) {\n      console.error(\"[reCAPTCHA] Error:\", error);\n      if (onError && error instanceof Error) {\n        onError(error);\n      }\n    }\n  }, [siteKey, action, onTokenGenerated, onError]);\n\n  // Set up token refresh interval (tokens expire after 2 minutes)\n  useEffect(() => {\n    // Generate token immediately when component mounts\n    executeRecaptcha();\n\n    // Set up refresh interval\n    refreshIntervalRef.current = setInterval(() => {\n      executeRecaptcha();\n    }, refreshInterval);\n\n    // Cleanup interval on unmount\n    return () => {\n      if (refreshIntervalRef.current) {\n        clearInterval(refreshIntervalRef.current);\n      }\n    };\n  }, [executeRecaptcha, refreshInterval]);\n\n  // Don't render anything if site key is not configured\n  if (!siteKey) {\n    if (process.env.NODE_ENV === \"development\") {\n      console.warn(\n        \"[reCAPTCHA] Site key not configured. Set NEXT_PUBLIC_RECAPTCHA_SITE_KEY environment variable.\"\n      );\n    }\n    return null;\n  }\n\n  return (\n    <>\n      {/* Hidden input to store the token */}\n      <input\n        ref={tokenInputRef}\n        type=\"hidden\"\n        name={inputName}\n        id={inputId}\n        data-testid=\"recaptcha-token-input\"\n      />\n\n      {/* Load reCAPTCHA script */}\n      <Script\n        src={`https://www.google.com/recaptcha/api.js?render=${siteKey}`}\n        strategy=\"afterInteractive\"\n        onLoad={() => {\n          executeRecaptcha();\n        }}\n        onError={() => {\n          console.error(\"[reCAPTCHA] Failed to load reCAPTCHA script\");\n          if (onError) {\n            onError(new Error(\"Failed to load reCAPTCHA script\"));\n          }\n        }}\n      />\n    </>\n  );\n}\n\nexport default RecaptchaWrapper;\n","/**\n * reCAPTCHA v3 Server-Side Validation\n *\n * Functions for validating reCAPTCHA tokens in Next.js Server Actions.\n *\n * @see https://developers.google.com/recaptcha/docs/verify\n * @packageDocumentation\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}
+{"version":3,"sources":["../src/constants/index.ts","../src/client/index.tsx","../src/server/index.ts"],"names":[],"mappings":";;;;;;;AAkBO,IAAM,uBAAA,GAA0B;AAOhC,IAAM,8BAAA,GAAiC;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB;ACdA,SAAS,mBAAA,CACP,OAAA,EACA,MAAA,EACA,OAAA,EACM;AAEN,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,iBAAA,EAAmB;AAC7D,IAAA,MAAA,EAAO;AACP,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,kBAAA,EAAoB;AAC9D,IAAA,MAAA,CAAO,oBAAA,GAAuB,MAAA,CAAO,oBAAA,IAAwB,EAAC;AAC9D,IAAA,MAAA,CAAO,oBAAA,CAAqB,IAAA,CAAK,EAAE,MAAA,EAAQ,SAAS,CAAA;AACpD,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,MAAA,CAAO,kBAAA,GAAqB,IAAA;AAC5B,IAAA,MAAA,CAAO,uBAAuB,EAAC;AAE/B,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AAC9C,IAAA,MAAA,CAAO,GAAA,GAAM,kDAAkD,OAAO,CAAA,CAAA;AACtE,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AAEf,IAAA,MAAA,CAAO,SAAS,MAAM;AACpB,MAAA,MAAA,CAAO,iBAAA,GAAoB,IAAA;AAC3B,MAAA,MAAA,CAAO,kBAAA,GAAqB,KAAA;AAC5B,MAAA,MAAA,EAAO;AACP,MAAA,MAAA,CAAO,sBAAsB,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,QAAQ,CAAA;AACxD,MAAA,MAAA,CAAO,uBAAuB,EAAC;AAAA,IACjC,CAAA;AAEA,IAAA,MAAA,CAAO,UAAU,MAAM;AACrB,MAAA,MAAA,CAAO,kBAAA,GAAqB,KAAA;AAC5B,MAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,iCAAiC,CAAA;AACzD,MAAA,OAAA,CAAQ,KAAK,CAAA;AAEb,MAAA,MAAA,CAAO,sBAAsB,OAAA,CAAQ,CAAC,OAAO,EAAA,CAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC9D,MAAA,MAAA,CAAO,uBAAuB,EAAC;AAAA,IACjC,CAAA;AAEA,IAAA,QAAA,CAAS,IAAA,CAAK,YAAY,MAAM,CAAA;AAAA,EAClC;AACF;AA2DO,SAAS,gBAAA,CAAiB;AAAA,EAC/B,MAAA;AAAA,EACA,SAAA,GAAY,gBAAA;AAAA,EACZ,OAAA,GAAU,iBAAA;AAAA,EACV,OAAA,EAAS,WAAA;AAAA,EACT,kBAAkB,gBAAA,CAAiB,oBAAA;AAAA,EACnC,gBAAA;AAAA,EACA,OAAA;AAAA,EACA,IAAA,GAAO,KAAA;AAAA,EACP,cAAA,GAAiB;AACnB,CAAA,EAA0B;AAExB,EAAA,MAAM,OAAA,GAAU,WAAA,IAAe,OAAA,CAAQ,GAAA,CAAI,8BAAA;AAC3C,EAAA,MAAM,aAAA,GAAgB,OAAyB,IAAI,CAAA;AACnD,EAAA,MAAM,kBAAA,GAAqB,OAA8B,IAAI,CAAA;AAC7D,EAAA,MAAM,YAAA,GAAe,OAAuB,IAAI,CAAA;AAChD,EAAA,MAAM,YAAA,GAAe,OAAgB,IAAI,CAAA;AACzC,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAI,QAAA,CAAS,CAAC,IAAI,CAAA;AAChD,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,CAAA,GAAI,SAAS,KAAK,CAAA;AAGtD,EAAA,MAAM,gBAAA,GAAmB,YAAY,YAAY;AAC/C,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AAIF,MAAA,MAAM,iBAAA,GAAoB,OAAO,WAAA,GAAc,EAAA,EAAI,UAAU,GAAA,KAA0B;AACrF,QAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,WAAA,EAAa,CAAA,EAAA,EAAK;AAEpC,UAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,YAAA,OAAO,KAAA;AAAA,UACT;AAEA,UAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACtD,YAAA,OAAO,IAAA;AAAA,UACT;AACA,UAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,QAC7D;AACA,QAAA,OAAO,KAAA;AAAA,MACT,CAAA;AAEA,MAAA,MAAM,mBAAA,GAAsB,MAAM,iBAAA,EAAkB;AAGpD,MAAA,IAAI,CAAC,YAAA,CAAa,OAAA,IAAW,CAAC,mBAAA,EAAqB;AACjD,QAAA;AAAA,MACF;AAEA,MAAA,MAAA,CAAO,UAAA,CAAW,MAAM,YAAY;AAElC,QAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,UAAA;AAAA,QACF;AAEA,QAAA,IAAI;AACF,UAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,UAAA,CAAW,QAAQ,OAAA,EAAS,EAAE,QAAQ,CAAA;AAGjE,UAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,YAAA;AAAA,UACF;AAGA,UAAA,IAAI,cAAc,OAAA,EAAS;AACzB,YAAA,aAAA,CAAc,QAAQ,KAAA,GAAQ,KAAA;AAAA,UAChC;AAGA,UAAA,IAAI,gBAAA,EAAkB;AACpB,YAAA,gBAAA,CAAiB,KAAK,CAAA;AAAA,UACxB;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,0CAA0C,KAAK,CAAA;AAC7D,UAAA,IAAI,OAAA,IAAW,iBAAiB,KAAA,EAAO;AACrC,YAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,UACf;AAAA,QACF;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,sBAAsB,KAAK,CAAA;AACzC,MAAA,IAAI,OAAA,IAAW,iBAAiB,KAAA,EAAO;AACrC,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,MAAA,EAAQ,gBAAA,EAAkB,OAAO,CAAC,CAAA;AAG/C,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,YAAA,CAAa,OAAA,EAAS;AAIpC,IAAA,IAAI,OAAO,yBAAyB,WAAA,EAAa;AAC/C,MAAA,YAAA,CAAa,IAAI,CAAA;AACjB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAW,IAAI,oBAAA;AAAA,MACnB,CAAC,CAAC,KAAK,CAAA,KAAM;AACX,QAAA,IAAI,MAAM,cAAA,EAAgB;AACxB,UAAA,YAAA,CAAa,IAAI,CAAA;AACjB,UAAA,QAAA,CAAS,UAAA,EAAW;AAAA,QACtB;AAAA,MACF,CAAA;AAAA,MACA,EAAE,YAAY,cAAA;AAAe,KAC/B;AAEA,IAAA,QAAA,CAAS,OAAA,CAAQ,aAAa,OAAO,CAAA;AACrC,IAAA,OAAO,MAAM,SAAS,UAAA,EAAW;AAAA,EACnC,CAAA,EAAG,CAAC,IAAA,EAAM,cAAc,CAAC,CAAA;AAGzB,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,EAAS;AACd,IAAA,IAAI,IAAA,EAAM;AAGV,IAAA,IAAI,OAAO,WAAW,WAAA,IAAe,CAAC,OAAO,iBAAA,IAAqB,CAAC,OAAO,kBAAA,EAAoB;AAC5F,MAAA,MAAA,CAAO,kBAAA,GAAqB,IAAA;AAC5B,MAAA,MAAA,CAAO,oBAAA,GAAuB,MAAA,CAAO,oBAAA,IAAwB,EAAC;AAAA,IAChE;AAAA,EACF,CAAA,EAAG,CAAC,OAAA,EAAS,IAAI,CAAC,CAAA;AAGlB,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,EAAS;AACd,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI,CAAC,SAAA,EAAW;AAEhB,IAAA,MAAM,aAAa,MAAM;AACvB,MAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA;AAEA,IAAA,MAAM,WAAA,GAAc,CAAC,KAAA,KAAiB;AACpC,MAAA,OAAA,CAAQ,MAAM,6CAA6C,CAAA;AAC3D,MAAA,IAAI,OAAA,EAAS;AACX,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf;AAAA,IACF,CAAA;AAEA,IAAA,mBAAA,CAAoB,OAAA,EAAS,YAAY,WAAW,CAAA;AAAA,EACtD,GAAG,CAAC,OAAA,EAAS,MAAM,SAAA,EAAW,gBAAA,EAAkB,OAAO,CAAC,CAAA;AAGxD,EAAA,SAAA,CAAU,MAAM;AAEd,IAAA,IAAI,CAAC,YAAA,EAAc;AAGnB,IAAA,kBAAA,CAAmB,OAAA,GAAU,YAAY,MAAM;AAC7C,MAAA,gBAAA,EAAiB;AAAA,IACnB,GAAG,eAAe,CAAA;AAGlB,IAAA,OAAO,MAAM;AACX,MAAA,IAAI,mBAAmB,OAAA,EAAS;AAC9B,QAAA,aAAA,CAAc,mBAAmB,OAAO,CAAA;AAAA,MAC1C;AAAA,IACF,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,YAAA,EAAc,gBAAA,EAAkB,eAAe,CAAC,CAAA;AAGpD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,YAAA,CAAa,OAAA,GAAU,IAAA;AAEvB,IAAA,OAAO,MAAM;AACX,MAAA,YAAA,CAAa,OAAA,GAAU,KAAA;AAAA,IACzB,CAAA;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,EAAe;AAC1C,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,uBACE,IAAA,CAAC,SAAI,GAAA,EAAK,YAAA,EAAc,OAAO,EAAE,OAAA,EAAS,YAAW,EAOnD,QAAA,EAAA;AAAA,oBAAA,GAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,aAAA;AAAA,QACL,IAAA,EAAK,QAAA;AAAA,QACL,IAAA,EAAM,SAAA;AAAA,QACN,EAAA,EAAI,OAAA;AAAA,QACJ,aAAA,EAAY;AAAA;AAAA,KACd;AAAA,IAGC,CAAC,IAAA,oBACA,GAAA;AAAA,MAAC,MAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,kDAAkD,OAAO,CAAA,CAAA;AAAA,QAC9D,QAAA,EAAS,kBAAA;AAAA,QACT,QAAQ,MAAM;AAEZ,UAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,YAAA,MAAA,CAAO,iBAAA,GAAoB,IAAA;AAC3B,YAAA,MAAA,CAAO,kBAAA,GAAqB,KAAA;AAE5B,YAAA,MAAA,CAAO,sBAAsB,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,QAAQ,CAAA;AACxD,YAAA,MAAA,CAAO,uBAAuB,EAAC;AAAA,UACjC;AACA,UAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,UAAA,gBAAA,EAAiB;AAAA,QACnB,CAAA;AAAA,QACA,SAAS,MAAM;AAEb,UAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,YAAA,MAAA,CAAO,kBAAA,GAAqB,KAAA;AAE5B,YAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,iCAAiC,CAAA;AACzD,YAAA,MAAA,CAAO,sBAAsB,OAAA,CAAQ,CAAC,OAAO,EAAA,CAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC9D,YAAA,MAAA,CAAO,uBAAuB,EAAC;AAAA,UACjC;AACA,UAAA,OAAA,CAAQ,MAAM,6CAA6C,CAAA;AAC3D,UAAA,IAAI,OAAA,EAAS;AACX,YAAA,OAAA,CAAQ,IAAI,KAAA,CAAM,iCAAiC,CAAC,CAAA;AAAA,UACtD;AAAA,QACF;AAAA;AAAA;AACF,GAAA,EAEJ,CAAA;AAEJ;;;ACzTA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.mjs","sourcesContent":["/**\n * @module @silverassist/recaptcha/constants\n * @description reCAPTCHA Configuration Constants - Default configuration values\n * for reCAPTCHA v3 integration.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * @module @silverassist/recaptcha/client\n * @description reCAPTCHA v3 Client Component - Loads the Google reCAPTCHA script\n * and generates tokens automatically. Place inside a form to add invisible spam protection.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://developers.google.com/recaptcha/docs/v3|Google reCAPTCHA v3 Documentation}\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\n\"use client\";\n\nimport Script from \"next/script\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\nimport type { RecaptchaWrapperProps } from \"../types\";\nimport { RECAPTCHA_CONFIG } from \"../constants\";\n\n/**\n * Load reCAPTCHA script manually (singleton pattern)\n * Ensures script is only loaded once globally\n */\nfunction loadRecaptchaScript(\n  siteKey: string,\n  onLoad: () => void,\n  onError: (error: Error) => void\n): void {\n  // Already loaded\n  if (typeof window !== \"undefined\" && window.__recaptchaLoaded) {\n    onLoad();\n    return;\n  }\n\n  // Currently loading - add callbacks\n  if (typeof window !== \"undefined\" && window.__recaptchaLoading) {\n    window.__recaptchaCallbacks = window.__recaptchaCallbacks || [];\n    window.__recaptchaCallbacks.push({ onLoad, onError });\n    return;\n  }\n\n  // Start loading\n  if (typeof window !== \"undefined\") {\n    window.__recaptchaLoading = true;\n    window.__recaptchaCallbacks = [];\n\n    const script = document.createElement(\"script\");\n    script.src = `https://www.google.com/recaptcha/api.js?render=${siteKey}`;\n    script.async = true;\n\n    script.onload = () => {\n      window.__recaptchaLoaded = true;\n      window.__recaptchaLoading = false;\n      onLoad();\n      window.__recaptchaCallbacks?.forEach((cb) => cb.onLoad());\n      window.__recaptchaCallbacks = [];\n    };\n\n    script.onerror = () => {\n      window.__recaptchaLoading = false;\n      const error = new Error(\"Failed to load reCAPTCHA script\");\n      onError(error);\n      // Notify all queued callbacks about the failure\n      window.__recaptchaCallbacks?.forEach((cb) => cb.onError(error));\n      window.__recaptchaCallbacks = [];\n    };\n\n    document.head.appendChild(script);\n  }\n}\n\n/**\n * RecaptchaWrapper - Client component for reCAPTCHA v3 integration\n *\n * Features:\n * - Loads reCAPTCHA script automatically\n * - Generates token when script loads\n * - Refreshes token periodically (tokens expire after 2 minutes)\n * - Stores token in hidden input field for form submission\n * - Graceful fallback when not configured\n * - Lazy loading support to defer script loading until visible\n *\n * @example Basic usage\n * ```tsx\n * <form action={formAction}>\n *   <RecaptchaWrapper action=\"contact_form\" />\n *   <input name=\"email\" type=\"email\" required />\n *   <button type=\"submit\">Submit</button>\n * </form>\n * ```\n *\n * @example Custom input name\n * ```tsx\n * <RecaptchaWrapper\n *   action=\"signup\"\n *   inputName=\"captchaToken\"\n *   inputId=\"signup-captcha\"\n * />\n * ```\n *\n * @example With callbacks\n * ```tsx\n * // IMPORTANT: Memoize callbacks to prevent unnecessary re-renders\n * const handleToken = useCallback((token: string) => {\n *   console.log(\"Token:\", token);\n * }, []);\n *\n * const handleError = useCallback((error: Error) => {\n *   console.error(\"Error:\", error);\n * }, []);\n *\n * <RecaptchaWrapper\n *   action=\"payment\"\n *   onTokenGenerated={handleToken}\n *   onError={handleError}\n * />\n * ```\n *\n * @example Lazy loading for better performance\n * ```tsx\n * <RecaptchaWrapper action=\"contact_form\" lazy />\n * ```\n *\n * @example Lazy loading with custom root margin\n * ```tsx\n * <RecaptchaWrapper action=\"contact_form\" lazy lazyRootMargin=\"400px\" />\n * ```\n */\nexport function RecaptchaWrapper({\n  action,\n  inputName = \"recaptchaToken\",\n  inputId = \"recaptcha-token\",\n  siteKey: propSiteKey,\n  refreshInterval = RECAPTCHA_CONFIG.tokenRefreshInterval,\n  onTokenGenerated,\n  onError,\n  lazy = false,\n  lazyRootMargin = \"200px\",\n}: RecaptchaWrapperProps) {\n  // Use prop siteKey or fall back to environment variable\n  const siteKey = propSiteKey ?? process.env.NEXT_PUBLIC_RECAPTCHA_SITE_KEY;\n  const tokenInputRef = useRef<HTMLInputElement>(null);\n  const refreshIntervalRef = useRef<NodeJS.Timeout | null>(null);\n  const containerRef = useRef<HTMLDivElement>(null);\n  const isMountedRef = useRef<boolean>(true);\n  const [isVisible, setIsVisible] = useState(!lazy); // If not lazy, start visible\n  const [scriptLoaded, setScriptLoaded] = useState(false);\n\n  // Execute reCAPTCHA and store token\n  const executeRecaptcha = useCallback(async () => {\n    if (!siteKey) {\n      return;\n    }\n\n    try {\n      // Wait for grecaptcha to be available (with timeout)\n      // This handles the race condition where the script loads but\n      // window.grecaptcha is not immediately available\n      const waitForGrecaptcha = async (maxAttempts = 20, delayMs = 100): Promise<boolean> => {\n        for (let i = 0; i < maxAttempts; i++) {\n          // Check if component is still mounted\n          if (!isMountedRef.current) {\n            return false;\n          }\n          \n          if (typeof window !== \"undefined\" && window.grecaptcha) {\n            return true;\n          }\n          await new Promise((resolve) => setTimeout(resolve, delayMs));\n        }\n        return false;\n      };\n\n      const grecaptchaAvailable = await waitForGrecaptcha();\n\n      // Exit early if component unmounted during polling\n      if (!isMountedRef.current || !grecaptchaAvailable) {\n        return;\n      }\n\n      window.grecaptcha.ready(async () => {\n        // Check if still mounted before executing\n        if (!isMountedRef.current) {\n          return;\n        }\n\n        try {\n          const token = await window.grecaptcha.execute(siteKey, { action });\n\n          // Check if still mounted before storing token\n          if (!isMountedRef.current) {\n            return;\n          }\n\n          // Store token in hidden input\n          if (tokenInputRef.current) {\n            tokenInputRef.current.value = token;\n          }\n\n          // Call callback if provided\n          if (onTokenGenerated) {\n            onTokenGenerated(token);\n          }\n        } catch (error) {\n          console.error(\"[reCAPTCHA] Error executing reCAPTCHA:\", error);\n          if (onError && error instanceof Error) {\n            onError(error);\n          }\n        }\n      });\n    } catch (error) {\n      console.error(\"[reCAPTCHA] Error:\", error);\n      if (onError && error instanceof Error) {\n        onError(error);\n      }\n    }\n  }, [siteKey, action, onTokenGenerated, onError]);\n\n  // IntersectionObserver for lazy loading\n  useEffect(() => {\n    if (!lazy || !containerRef.current) return;\n\n    // Fallback to eager loading if IntersectionObserver is not supported\n    // (older browsers, some SSR/test environments)\n    if (typeof IntersectionObserver === \"undefined\") {\n      setIsVisible(true);\n      return;\n    }\n\n    const observer = new IntersectionObserver(\n      ([entry]) => {\n        if (entry.isIntersecting) {\n          setIsVisible(true);\n          observer.disconnect();\n        }\n      },\n      { rootMargin: lazyRootMargin }\n    );\n\n    observer.observe(containerRef.current);\n    return () => observer.disconnect();\n  }, [lazy, lazyRootMargin]);\n\n  // Mark loading flag for non-lazy mode to prevent duplicate loads\n  useEffect(() => {\n    if (!siteKey) return;\n    if (lazy) return; // Only for non-lazy mode\n\n    // Set loading flag before Script component loads\n    if (typeof window !== \"undefined\" && !window.__recaptchaLoaded && !window.__recaptchaLoading) {\n      window.__recaptchaLoading = true;\n      window.__recaptchaCallbacks = window.__recaptchaCallbacks || [];\n    }\n  }, [siteKey, lazy]);\n\n  // Load script when visible (only for lazy mode)\n  useEffect(() => {\n    if (!siteKey) return;\n    if (!lazy) return; // Only use manual loading for lazy mode\n    if (!isVisible) return; // Wait until visible\n\n    const handleLoad = () => {\n      setScriptLoaded(true);\n      executeRecaptcha();\n    };\n\n    const handleError = (error: Error) => {\n      console.error(\"[reCAPTCHA] Failed to load reCAPTCHA script\");\n      if (onError) {\n        onError(error);\n      }\n    };\n\n    loadRecaptchaScript(siteKey, handleLoad, handleError);\n  }, [siteKey, lazy, isVisible, executeRecaptcha, onError]);\n\n  // Set up token refresh interval (tokens expire after 2 minutes)\n  useEffect(() => {\n    // Only set up refresh if script is loaded\n    if (!scriptLoaded) return;\n\n    // Set up refresh interval\n    refreshIntervalRef.current = setInterval(() => {\n      executeRecaptcha();\n    }, refreshInterval);\n\n    // Cleanup interval on unmount\n    return () => {\n      if (refreshIntervalRef.current) {\n        clearInterval(refreshIntervalRef.current);\n      }\n    };\n  }, [scriptLoaded, executeRecaptcha, refreshInterval]);\n\n  // Track mounted state to prevent side effects after unmount\n  useEffect(() => {\n    isMountedRef.current = true;\n    \n    return () => {\n      isMountedRef.current = false;\n    };\n  }, []);\n\n  // Don't render anything if site key is not configured\n  if (!siteKey) {\n    if (process.env.NODE_ENV === \"development\") {\n      console.warn(\n        \"[reCAPTCHA] Site key not configured. Set NEXT_PUBLIC_RECAPTCHA_SITE_KEY environment variable.\"\n      );\n    }\n    return null;\n  }\n\n  return (\n    <div ref={containerRef} style={{ display: \"contents\" }}>\n      {/* \n        Note: display: contents makes this wrapper transparent to the DOM layout.\n        The wrapper is needed for IntersectionObserver but shouldn't affect form layout.\n        Browser support: https://caniuse.com/css-display-contents\n      */}\n      {/* Hidden input to store the token */}\n      <input\n        ref={tokenInputRef}\n        type=\"hidden\"\n        name={inputName}\n        id={inputId}\n        data-testid=\"recaptcha-token-input\"\n      />\n\n      {/* Load reCAPTCHA script using Next.js Script component for non-lazy mode */}\n      {!lazy && (\n        <Script\n          src={`https://www.google.com/recaptcha/api.js?render=${siteKey}`}\n          strategy=\"afterInteractive\"\n          onLoad={() => {\n            // Mark script as loaded globally for singleton behavior\n            if (typeof window !== \"undefined\") {\n              window.__recaptchaLoaded = true;\n              window.__recaptchaLoading = false;\n              // Flush all queued callbacks from lazy instances\n              window.__recaptchaCallbacks?.forEach((cb) => cb.onLoad());\n              window.__recaptchaCallbacks = [];\n            }\n            setScriptLoaded(true);\n            executeRecaptcha();\n          }}\n          onError={() => {\n            // Mark loading as complete on error\n            if (typeof window !== \"undefined\") {\n              window.__recaptchaLoading = false;\n              // Notify all queued callbacks about the failure\n              const error = new Error(\"Failed to load reCAPTCHA script\");\n              window.__recaptchaCallbacks?.forEach((cb) => cb.onError(error));\n              window.__recaptchaCallbacks = [];\n            }\n            console.error(\"[reCAPTCHA] Failed to load reCAPTCHA script\");\n            if (onError) {\n              onError(new Error(\"Failed to load reCAPTCHA script\"));\n            }\n          }}\n        />\n      )}\n    </div>\n  );\n}\n\nexport default RecaptchaWrapper;\n","/**\n * @module @silverassist/recaptcha/server\n * @description reCAPTCHA v3 Server-Side Validation - Functions for validating\n * reCAPTCHA tokens in Next.js Server Actions.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}

package/dist/server/index.d.mts

@@ -1,12 +1,15 @@
 import { RecaptchaValidationOptions, RecaptchaValidationResult } from '../types/index.mjs';
 
 /**
- * reCAPTCHA v3 Server-Side Validation
+ * @module @silverassist/recaptcha/server
+ * @description reCAPTCHA v3 Server-Side Validation - Functions for validating
+ * reCAPTCHA tokens in Next.js Server Actions.
  *
- * Functions for validating reCAPTCHA tokens in Next.js Server Actions.
- *
- * @see https://developers.google.com/recaptcha/docs/verify
- * @packageDocumentation
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
  */
 
 /**

package/dist/server/index.d.ts

@@ -1,12 +1,15 @@
 import { RecaptchaValidationOptions, RecaptchaValidationResult } from '../types/index.js';
 
 /**
- * reCAPTCHA v3 Server-Side Validation
+ * @module @silverassist/recaptcha/server
+ * @description reCAPTCHA v3 Server-Side Validation - Functions for validating
+ * reCAPTCHA tokens in Next.js Server Actions.
  *
- * Functions for validating reCAPTCHA tokens in Next.js Server Actions.
- *
- * @see https://developers.google.com/recaptcha/docs/verify
- * @packageDocumentation
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
  */
 
 /**

package/dist/server/index.js

@@ -106,6 +106,27 @@ function getRecaptchaToken(formData, fieldName = "recaptchaToken") {
   const token = formData.get(fieldName);
   return typeof token === "string" ? token : null;
 }
+/**
+ * @module @silverassist/recaptcha/constants
+ * @description reCAPTCHA Configuration Constants - Default configuration values
+ * for reCAPTCHA v3 integration.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
+/**
+ * @module @silverassist/recaptcha/server
+ * @description reCAPTCHA v3 Server-Side Validation - Functions for validating
+ * reCAPTCHA tokens in Next.js Server Actions.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
 
 exports.getRecaptchaToken = getRecaptchaToken;
 exports.isRecaptchaEnabled = isRecaptchaEnabled;

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/constants/index.ts","../../src/server/index.ts"],"names":[],"mappings":";;;AAeO,IAAM,uBAAA,GAA0B,GAAA;AAOhC,IAAM,8BAAA,GAAiC,GAAA;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB,CAAA;;;ACcA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.js","sourcesContent":["/**\n * reCAPTCHA Configuration Constants\n *\n * Default configuration values for reCAPTCHA v3 integration.\n *\n * @packageDocumentation\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * reCAPTCHA v3 Server-Side Validation\n *\n * Functions for validating reCAPTCHA tokens in Next.js Server Actions.\n *\n * @see https://developers.google.com/recaptcha/docs/verify\n * @packageDocumentation\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}
+{"version":3,"sources":["../../src/constants/index.ts","../../src/server/index.ts"],"names":[],"mappings":";;;AAkBO,IAAM,uBAAA,GAA0B,GAAA;AAOhC,IAAM,8BAAA,GAAiC,GAAA;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB,CAAA;;;ACcA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.js","sourcesContent":["/**\n * @module @silverassist/recaptcha/constants\n * @description reCAPTCHA Configuration Constants - Default configuration values\n * for reCAPTCHA v3 integration.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * @module @silverassist/recaptcha/server\n * @description reCAPTCHA v3 Server-Side Validation - Functions for validating\n * reCAPTCHA tokens in Next.js Server Actions.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}

package/dist/server/index.mjs

@@ -104,6 +104,27 @@ function getRecaptchaToken(formData, fieldName = "recaptchaToken") {
   const token = formData.get(fieldName);
   return typeof token === "string" ? token : null;
 }
+/**
+ * @module @silverassist/recaptcha/constants
+ * @description reCAPTCHA Configuration Constants - Default configuration values
+ * for reCAPTCHA v3 integration.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
+/**
+ * @module @silverassist/recaptcha/server
+ * @description reCAPTCHA v3 Server-Side Validation - Functions for validating
+ * reCAPTCHA tokens in Next.js Server Actions.
+ *
+ * @author Miguel Colmenares <me@miguelcolmenares.com>
+ * @license Polyform-Noncommercial-1.0.0
+ * @version 0.2.1
+ * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}
+ * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}
+ */
 
 export { getRecaptchaToken, isRecaptchaEnabled, validateRecaptcha };
 //# sourceMappingURL=index.mjs.map

package/dist/server/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/constants/index.ts","../../src/server/index.ts"],"names":[],"mappings":";AAeO,IAAM,uBAAA,GAA0B,GAAA;AAOhC,IAAM,8BAAA,GAAiC,GAAA;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB,CAAA;;;ACcA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.mjs","sourcesContent":["/**\n * reCAPTCHA Configuration Constants\n *\n * Default configuration values for reCAPTCHA v3 integration.\n *\n * @packageDocumentation\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * reCAPTCHA v3 Server-Side Validation\n *\n * Functions for validating reCAPTCHA tokens in Next.js Server Actions.\n *\n * @see https://developers.google.com/recaptcha/docs/verify\n * @packageDocumentation\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}
+{"version":3,"sources":["../../src/constants/index.ts","../../src/server/index.ts"],"names":[],"mappings":";AAkBO,IAAM,uBAAA,GAA0B,GAAA;AAOhC,IAAM,8BAAA,GAAiC,GAAA;AAKvC,IAAM,gBAAA,GAAoC;AAAA;AAAA,EAE/C,SAAA,EAAW,iDAAA;AAAA;AAAA,EAEX,qBAAA,EAAuB,uBAAA;AAAA;AAAA,EAEvB,oBAAA,EAAsB;AACxB,CAAA;;;ACcA,eAAsB,iBAAA,CACpB,KAAA,EACA,cAAA,EACA,OAAA,GAAsC,EAAC,EACH;AACpC,EAAA,MAAM;AAAA,IACJ,cAAA,GAAiB,uBAAA;AAAA,IACjB,SAAA,GAAY,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACxB,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa;AAAA,GACnC,GAAI,OAAA;AAGJ,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OAAA,EAAS;AAAA,KACX;AAAA,EACF;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,SAAA,EAAW;AAAA,MACvD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB;AAAA,QACxB,MAAA,EAAQ,SAAA;AAAA,QACR,QAAA,EAAU;AAAA,OACX;AAAA,KACF,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,GAAgC,MAAM,QAAA,CAAS,IAAA,EAAK;AAE1D,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,IAAI,oCAAA,EAAsC;AAAA,QAChD,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,UAAU,IAAA,CAAK;AAAA,OAChB,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,kCAAkC,IAAA,CAAK,aAAa,GAAG,IAAA,CAAK,IAAI,KAAK,eAAe,CAAA,CAAA;AAAA,QAC3F,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,EAAgB;AAC/B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,yBAAA,EAA4B,IAAA,CAAK,KAAK,gBAAgB,cAAc,CAAA,CAAA,CAAA;AAAA,QAC3E,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,IAAI,cAAA,IAAkB,IAAA,CAAK,MAAA,KAAW,cAAA,EAAgB;AACpD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,KAAA,EAAO,CAAA,qCAAA,EAAwC,cAAc,CAAA,QAAA,EAAW,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QACnF,WAAA,EAAa;AAAA,OACf;AAAA,IACF;AAGA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAA,EAAa;AAAA,KACf;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO,CAAA;AAAA,MACP,OACE,KAAA,YAAiB,KAAA,GACb,CAAA,4BAAA,EAA+B,KAAA,CAAM,OAAO,CAAA,CAAA,GAC5C;AAAA,KACR;AAAA,EACF;AACF;AAiBO,SAAS,mBAAmB,SAAA,EAA6B;AAC9D,EAAA,OAAO,CAAC,EAAE,SAAA,IAAa,OAAA,CAAQ,GAAA,CAAI,oBAAA,CAAA;AACrC;AAkBO,SAAS,iBAAA,CACd,QAAA,EACA,SAAA,GAAoB,gBAAA,EACL;AACf,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AACpC,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAC7C","file":"index.mjs","sourcesContent":["/**\n * @module @silverassist/recaptcha/constants\n * @description reCAPTCHA Configuration Constants - Default configuration values\n * for reCAPTCHA v3 integration.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type { RecaptchaConfig } from \"../types\";\n\n/**\n * Default score threshold for validation\n * Scores below this value are considered suspicious\n * Range: 0.0 (bot) to 1.0 (human)\n */\nexport const DEFAULT_SCORE_THRESHOLD = 0.5;\n\n/**\n * Token refresh interval in milliseconds\n * reCAPTCHA tokens expire after 2 minutes, so we refresh at 90 seconds\n * to ensure tokens are always valid when forms are submitted\n */\nexport const DEFAULT_TOKEN_REFRESH_INTERVAL = 90000;\n\n/**\n * reCAPTCHA v3 configuration constants\n */\nexport const RECAPTCHA_CONFIG: RecaptchaConfig = {\n  /** Google reCAPTCHA verification endpoint */\n  verifyUrl: \"https://www.google.com/recaptcha/api/siteverify\",\n  /** Default score threshold for validation */\n  defaultScoreThreshold: DEFAULT_SCORE_THRESHOLD,\n  /** Default token refresh interval */\n  tokenRefreshInterval: DEFAULT_TOKEN_REFRESH_INTERVAL,\n} as const;\n","/**\n * @module @silverassist/recaptcha/server\n * @description reCAPTCHA v3 Server-Side Validation - Functions for validating\n * reCAPTCHA tokens in Next.js Server Actions.\n *\n * @author Miguel Colmenares <me@miguelcolmenares.com>\n * @license Polyform-Noncommercial-1.0.0\n * @version 0.2.1\n * @see {@link https://developers.google.com/recaptcha/docs/verify|Google reCAPTCHA Verify Documentation}\n * @see {@link https://github.com/SilverAssist/recaptcha|GitHub Repository}\n */\n\nimport type {\n  RecaptchaValidationResult,\n  RecaptchaVerifyResponse,\n  RecaptchaValidationOptions,\n} from \"../types\";\nimport { RECAPTCHA_CONFIG, DEFAULT_SCORE_THRESHOLD } from \"../constants\";\n\n/**\n * Validate a reCAPTCHA token with Google's API\n *\n * @param token - The reCAPTCHA token from the client\n * @param expectedAction - The expected action name (optional, for extra security)\n * @param options - Additional validation options\n * @returns Validation result with success status and score\n *\n * @example Basic validation\n * ```ts\n * const result = await validateRecaptcha(token, \"contact_form\");\n * if (!result.success) {\n *   return { success: false, message: result.error };\n * }\n * ```\n *\n * @example Custom threshold for sensitive forms\n * ```ts\n * const result = await validateRecaptcha(token, \"payment_form\", {\n *   scoreThreshold: 0.7, // Higher threshold for payments\n *   secretKey: process.env.RECAPTCHA_SECRET_KEY,\n * });\n * ```\n *\n * @example Skip validation in development\n * ```ts\n * const result = await validateRecaptcha(token, \"test_form\", {\n *   debug: true, // Enable debug logging\n * });\n * // Returns { success: true, score: 1, skipped: true } if not configured\n * ```\n */\nexport async function validateRecaptcha(\n  token: string | null | undefined,\n  expectedAction?: string,\n  options: RecaptchaValidationOptions = {}\n): Promise<RecaptchaValidationResult> {\n  const {\n    scoreThreshold = DEFAULT_SCORE_THRESHOLD,\n    secretKey = process.env.RECAPTCHA_SECRET_KEY,\n    debug = process.env.NODE_ENV === \"development\",\n  } = options;\n\n  // Check if reCAPTCHA is configured\n  if (!secretKey) {\n    if (debug) {\n      console.warn(\n        \"[reCAPTCHA] Secret key not configured. Skipping validation.\"\n      );\n    }\n    return {\n      success: true,\n      score: 1,\n      skipped: true,\n    };\n  }\n\n  // Check if token is provided\n  if (!token) {\n    return {\n      success: false,\n      score: 0,\n      error: \"reCAPTCHA token is missing\",\n    };\n  }\n\n  try {\n    // Verify token with Google\n    const response = await fetch(RECAPTCHA_CONFIG.verifyUrl, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: new URLSearchParams({\n        secret: secretKey,\n        response: token,\n      }),\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP error! status: ${response.status}`);\n    }\n\n    const data: RecaptchaVerifyResponse = await response.json();\n\n    if (debug) {\n      console.log(\"[reCAPTCHA] Verification response:\", {\n        success: data.success,\n        score: data.score,\n        action: data.action,\n        hostname: data.hostname,\n      });\n    }\n\n    // Check if verification failed\n    if (!data.success) {\n      return {\n        success: false,\n        score: 0,\n        error: `reCAPTCHA verification failed: ${data[\"error-codes\"]?.join(\", \") || \"Unknown error\"}`,\n        rawResponse: data,\n      };\n    }\n\n    // Check score threshold\n    if (data.score < scoreThreshold) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA score too low: ${data.score} (threshold: ${scoreThreshold})`,\n        rawResponse: data,\n      };\n    }\n\n    // Check action if provided\n    if (expectedAction && data.action !== expectedAction) {\n      return {\n        success: false,\n        score: data.score,\n        error: `reCAPTCHA action mismatch: expected \"${expectedAction}\", got \"${data.action}\"`,\n        rawResponse: data,\n      };\n    }\n\n    // Validation passed\n    return {\n      success: true,\n      score: data.score,\n      rawResponse: data,\n    };\n  } catch (error) {\n    console.error(\"[reCAPTCHA] Validation error:\", error);\n    return {\n      success: false,\n      score: 0,\n      error:\n        error instanceof Error\n          ? `reCAPTCHA validation error: ${error.message}`\n          : \"reCAPTCHA validation error\",\n    };\n  }\n}\n\n/**\n * Check if reCAPTCHA is enabled (secret key is configured)\n *\n * @param secretKey - Optional explicit secret key to check\n * @returns true if reCAPTCHA is configured\n *\n * @example\n * ```ts\n * if (isRecaptchaEnabled()) {\n *   // Require reCAPTCHA validation\n * } else {\n *   // Skip validation in development\n * }\n * ```\n */\nexport function isRecaptchaEnabled(secretKey?: string): boolean {\n  return !!(secretKey ?? process.env.RECAPTCHA_SECRET_KEY);\n}\n\n/**\n * Extract reCAPTCHA token from FormData\n *\n * @param formData - Form data containing the token\n * @param fieldName - Name of the token field (default: \"recaptchaToken\")\n * @returns The token string or null\n *\n * @example\n * ```ts\n * export async function submitForm(prevState: State, formData: FormData) {\n *   const token = getRecaptchaToken(formData);\n *   const result = await validateRecaptcha(token, \"contact_form\");\n *   // ...\n * }\n * ```\n */\nexport function getRecaptchaToken(\n  formData: FormData,\n  fieldName: string = \"recaptchaToken\"\n): string | null {\n  const token = formData.get(fieldName);\n  return typeof token === \"string\" ? token : null;\n}\n"]}