altcha 0.1.0

package/README.md

@@ -0,0 +1,76 @@
+# ALTCHA
+
+ALTCHA uses a proof-of-work mechanism to protect your website, APIs, and online services from spam and abuse. Unlike other solutions, ALTCHA is self-hosted, does not use cookies nor fingerprinting, does not track users, and is fully compliant with GDPR.
+
+## Benefits
+
+- __Friction-less__ - Using PoW instead of visual puzzles.
+- __Cookie-less__ - GDPR compliant by design.
+- __Self-hosted__ - Without reliance on external providers.
+
+## Usage
+
+ALTCHA widget is distributed as a "Web Component" and [supports all modern browsers](https://developer.mozilla.org/en-US/docs/Web/API/Web_components#browser_compatibility).
+
+### 1. Add `<script>` tag to your website
+
+```html
+<script async defer src="/altcha.js" type="module"></script>
+```
+
+### 2. Use `<altcha-box>` tag in your forms
+
+```html
+<form>
+  <altcha-box
+    challengeurl="https://..."
+  ></altcha-box>  
+</form>
+```
+
+See the [configuration](#configuration) below or visit the [website integration documentation](https://altcha.org/docs/website-integration).
+
+### 3. Integrate ALCTHA with your server
+
+See [server documentation](https://altcha.org/docs/server-integration) for more details.
+
+## Configuration
+
+Main options:
+
+- __challengeurl__ - The URL of your server, where to fetch the challenge from. See [server integration](/docs/server-integration).
+- __challengejson__ - The JSON-encoded challenge. If you don't want to make an HTTP request to `challengeurl`, provide the data here instead.
+
+Customization options:
+
+- __hidefooter__ - Hide the footer (ALTCHA link).
+- __hidelogo__ - Hide the ALTCHA logo.
+- __maxnumber__ - Max. number to iterate to (defaults to 10,000,000).
+- __name__ - The name of the hidden field containing payload (defaults to "altcha").
+- __strings__ - JSON-encoded translation strings. See [customization](/docs/widget-customization).
+
+Development / testing options:
+
+- __debug__ - Print log messages into the console.
+- __mockerror__ - Causes the verification to always fail with a "mock" error.
+- __test__ - This option will make the widget generate its own "mock" challenge, thus __not__ making the request to the `challengeurl`.
+
+Events:
+
+- __statechange__ - triggers whenever an internal `state` changes.
+- __verified__ - triggers when the challenge is verified.
+
+Using events:
+
+```js
+document.querySelector('#altcha').addEventListener('statechange', (ev) => {
+  // state can be: unverified, verifying, verified, error
+  console.log('state:', ev.detail.state);
+});
+```
+
+
+## License
+
+MIT
+

package/dist/altcha.d.ts

@@ -0,0 +1 @@
+declare module 'altcha';

package/dist/altcha.js

@@ -0,0 +1,976 @@
+var Ce = Object.defineProperty;
+var xe = (t, e, n) => e in t ? Ce(t, e, { enumerable: !0, configurable: !0, writable: !0, value: n }) : t[e] = n;
+var x = (t, e, n) => (xe(t, typeof e != "symbol" ? e + "" : e, n), n);
+function Z() {
+}
+function fe(t) {
+  return t();
+}
+function re() {
+  return /* @__PURE__ */ Object.create(null);
+}
+function K(t) {
+  t.forEach(fe);
+}
+function he(t) {
+  return typeof t == "function";
+}
+function Le(t, e) {
+  return t != t ? e == e : t !== e || t && typeof t == "object" || typeof t == "function";
+}
+function Re(t) {
+  return Object.keys(t).length === 0;
+}
+function m(t, e) {
+  t.appendChild(e);
+}
+function Ie(t, e, n) {
+  const l = Ne(t);
+  if (!l.getElementById(e)) {
+    const i = p("style");
+    i.id = e, i.textContent = n, Ae(l, i);
+  }
+}
+function Ne(t) {
+  if (!t)
+    return document;
+  const e = t.getRootNode ? t.getRootNode() : t.ownerDocument;
+  return e && /** @type {ShadowRoot} */
+  e.host ? (
+    /** @type {ShadowRoot} */
+    e
+  ) : t.ownerDocument;
+}
+function Ae(t, e) {
+  return m(
+    /** @type {Document} */
+    t.head || t,
+    e
+  ), e.sheet;
+}
+function M(t, e, n) {
+  t.insertBefore(e, n || null);
+}
+function A(t) {
+  t.parentNode && t.parentNode.removeChild(t);
+}
+function p(t) {
+  return document.createElement(t);
+}
+function V(t) {
+  return document.createElementNS("http://www.w3.org/2000/svg", t);
+}
+function Me(t) {
+  return document.createTextNode(t);
+}
+function S() {
+  return Me(" ");
+}
+function z(t, e, n, l) {
+  return t.addEventListener(e, n, l), () => t.removeEventListener(e, n, l);
+}
+function o(t, e, n) {
+  n == null ? t.removeAttribute(e) : t.getAttribute(e) !== n && t.setAttribute(e, n);
+}
+function Ve(t) {
+  return Array.from(t.childNodes);
+}
+function le(t, e, n) {
+  t.classList.toggle(e, !!n);
+}
+function Oe(t, e, { bubbles: n = !1, cancelable: l = !1 } = {}) {
+  return new CustomEvent(t, { detail: e, bubbles: n, cancelable: l });
+}
+function Fe(t) {
+  const e = {};
+  return t.childNodes.forEach(
+    /** @param {Element} node */
+    (n) => {
+      e[n.slot || "default"] = !0;
+    }
+  ), e;
+}
+let U;
+function Y(t) {
+  U = t;
+}
+function te() {
+  if (!U)
+    throw new Error("Function called outside component initialization");
+  return U;
+}
+function He(t) {
+  te().$$.on_mount.push(t);
+}
+function Se(t) {
+  te().$$.on_destroy.push(t);
+}
+function Ge() {
+  const t = te();
+  return (e, n, { cancelable: l = !1 } = {}) => {
+    const i = t.$$.callbacks[e];
+    if (i) {
+      const r = Oe(
+        /** @type {string} */
+        e,
+        n,
+        { cancelable: l }
+      );
+      return i.slice().forEach((c) => {
+        c.call(t, r);
+      }), !r.defaultPrevented;
+    }
+    return !0;
+  };
+}
+const T = [], Q = [];
+let W = [];
+const ie = [], Te = /* @__PURE__ */ Promise.resolve();
+let q = !1;
+function We() {
+  q || (q = !0, Te.then(N));
+}
+function ee(t) {
+  W.push(t);
+}
+const J = /* @__PURE__ */ new Set();
+let G = 0;
+function N() {
+  if (G !== 0)
+    return;
+  const t = U;
+  do {
+    try {
+      for (; G < T.length; ) {
+        const e = T[G];
+        G++, Y(e), Be(e.$$);
+      }
+    } catch (e) {
+      throw T.length = 0, G = 0, e;
+    }
+    for (Y(null), T.length = 0, G = 0; Q.length; )
+      Q.pop()();
+    for (let e = 0; e < W.length; e += 1) {
+      const n = W[e];
+      J.has(n) || (J.add(n), n());
+    }
+    W.length = 0;
+  } while (T.length);
+  for (; ie.length; )
+    ie.pop()();
+  q = !1, J.clear(), Y(t);
+}
+function Be(t) {
+  if (t.fragment !== null) {
+    t.update(), K(t.before_update);
+    const e = t.dirty;
+    t.dirty = [-1], t.fragment && t.fragment.p(t.ctx, e), t.after_update.forEach(ee);
+  }
+}
+function Ye(t) {
+  const e = [], n = [];
+  W.forEach((l) => t.indexOf(l) === -1 ? e.push(l) : n.push(l)), n.forEach((l) => l()), W = e;
+}
+const Ze = /* @__PURE__ */ new Set();
+function Ue(t, e) {
+  t && t.i && (Ze.delete(t), t.i(e));
+}
+function Ke(t, e, n) {
+  const { fragment: l, after_update: i } = t.$$;
+  l && l.m(e, n), ee(() => {
+    const r = t.$$.on_mount.map(fe).filter(he);
+    t.$$.on_destroy ? t.$$.on_destroy.push(...r) : K(r), t.$$.on_mount = [];
+  }), i.forEach(ee);
+}
+function Pe(t, e) {
+  const n = t.$$;
+  n.fragment !== null && (Ye(n.after_update), K(n.on_destroy), n.fragment && n.fragment.d(e), n.on_destroy = n.fragment = null, n.ctx = []);
+}
+function Xe(t, e) {
+  t.$$.dirty[0] === -1 && (T.push(t), We(), t.$$.dirty.fill(0)), t.$$.dirty[e / 31 | 0] |= 1 << e % 31;
+}
+function De(t, e, n, l, i, r, c = null, a = [-1]) {
+  const u = U;
+  Y(t);
+  const f = t.$$ = {
+    fragment: null,
+    ctx: [],
+    // state
+    props: r,
+    update: Z,
+    not_equal: i,
+    bound: re(),
+    // lifecycle
+    on_mount: [],
+    on_destroy: [],
+    on_disconnect: [],
+    before_update: [],
+    after_update: [],
+    context: new Map(e.context || (u ? u.$$.context : [])),
+    // everything else
+    callbacks: re(),
+    dirty: a,
+    skip_bound: !1,
+    root: e.target || u.$$.root
+  };
+  c && c(f.root);
+  let L = !1;
+  if (f.ctx = n ? n(t, e.props || {}, (g, $, ...k) => {
+    const y = k.length ? k[0] : $;
+    return f.ctx && i(f.ctx[g], f.ctx[g] = y) && (!f.skip_bound && f.bound[g] && f.bound[g](y), L && Xe(t, g)), $;
+  }) : [], f.update(), L = !0, K(f.before_update), f.fragment = l ? l(f.ctx) : !1, e.target) {
+    if (e.hydrate) {
+      const g = Ve(e.target);
+      f.fragment && f.fragment.l(g), g.forEach(A);
+    } else
+      f.fragment && f.fragment.c();
+    e.intro && Ue(t.$$.fragment), Ke(t, e.target, e.anchor), N();
+  }
+  Y(u);
+}
+let de;
+typeof HTMLElement == "function" && (de = class extends HTMLElement {
+  constructor(e, n, l) {
+    super();
+    /** The Svelte component constructor */
+    x(this, "$$ctor");
+    /** Slots */
+    x(this, "$$s");
+    /** The Svelte component instance */
+    x(this, "$$c");
+    /** Whether or not the custom element is connected */
+    x(this, "$$cn", !1);
+    /** Component props data */
+    x(this, "$$d", {});
+    /** `true` if currently in the process of reflecting component props back to attributes */
+    x(this, "$$r", !1);
+    /** @type {Record<string, CustomElementPropDefinition>} Props definition (name, reflected, type etc) */
+    x(this, "$$p_d", {});
+    /** @type {Record<string, Function[]>} Event listeners */
+    x(this, "$$l", {});
+    /** @type {Map<Function, Function>} Event listener unsubscribe functions */
+    x(this, "$$l_u", /* @__PURE__ */ new Map());
+    this.$$ctor = e, this.$$s = n, l && this.attachShadow({ mode: "open" });
+  }
+  addEventListener(e, n, l) {
+    if (this.$$l[e] = this.$$l[e] || [], this.$$l[e].push(n), this.$$c) {
+      const i = this.$$c.$on(e, n);
+      this.$$l_u.set(n, i);
+    }
+    super.addEventListener(e, n, l);
+  }
+  removeEventListener(e, n, l) {
+    if (super.removeEventListener(e, n, l), this.$$c) {
+      const i = this.$$l_u.get(n);
+      i && (i(), this.$$l_u.delete(n));
+    }
+  }
+  async connectedCallback() {
+    if (this.$$cn = !0, !this.$$c) {
+      let e = function(r) {
+        return () => {
+          let c;
+          return {
+            c: function() {
+              c = p("slot"), r !== "default" && o(c, "name", r);
+            },
+            /**
+             * @param {HTMLElement} target
+             * @param {HTMLElement} [anchor]
+             */
+            m: function(f, L) {
+              M(f, c, L);
+            },
+            d: function(f) {
+              f && A(c);
+            }
+          };
+        };
+      };
+      if (await Promise.resolve(), !this.$$cn)
+        return;
+      const n = {}, l = Fe(this);
+      for (const r of this.$$s)
+        r in l && (n[r] = [e(r)]);
+      for (const r of this.attributes) {
+        const c = this.$$g_p(r.name);
+        c in this.$$d || (this.$$d[c] = X(c, r.value, this.$$p_d, "toProp"));
+      }
+      this.$$c = new this.$$ctor({
+        target: this.shadowRoot || this,
+        props: {
+          ...this.$$d,
+          $$slots: n,
+          $$scope: {
+            ctx: []
+          }
+        }
+      });
+      const i = () => {
+        this.$$r = !0;
+        for (const r in this.$$p_d)
+          if (this.$$d[r] = this.$$c.$$.ctx[this.$$c.$$.props[r]], this.$$p_d[r].reflect) {
+            const c = X(
+              r,
+              this.$$d[r],
+              this.$$p_d,
+              "toAttribute"
+            );
+            c == null ? this.removeAttribute(this.$$p_d[r].attribute || r) : this.setAttribute(this.$$p_d[r].attribute || r, c);
+          }
+        this.$$r = !1;
+      };
+      this.$$c.$$.after_update.push(i), i();
+      for (const r in this.$$l)
+        for (const c of this.$$l[r]) {
+          const a = this.$$c.$on(r, c);
+          this.$$l_u.set(c, a);
+        }
+      this.$$l = {};
+    }
+  }
+  // We don't need this when working within Svelte code, but for compatibility of people using this outside of Svelte
+  // and setting attributes through setAttribute etc, this is helpful
+  attributeChangedCallback(e, n, l) {
+    var i;
+    this.$$r || (e = this.$$g_p(e), this.$$d[e] = X(e, l, this.$$p_d, "toProp"), (i = this.$$c) == null || i.$set({ [e]: this.$$d[e] }));
+  }
+  disconnectedCallback() {
+    this.$$cn = !1, Promise.resolve().then(() => {
+      this.$$cn || (this.$$c.$destroy(), this.$$c = void 0);
+    });
+  }
+  $$g_p(e) {
+    return Object.keys(this.$$p_d).find(
+      (n) => this.$$p_d[n].attribute === e || !this.$$p_d[n].attribute && n.toLowerCase() === e
+    ) || e;
+  }
+});
+function X(t, e, n, l) {
+  var r;
+  const i = (r = n[t]) == null ? void 0 : r.type;
+  if (e = i === "Boolean" && typeof e != "boolean" ? e != null : e, !l || !n[t])
+    return e;
+  if (l === "toAttribute")
+    switch (i) {
+      case "Object":
+      case "Array":
+        return e == null ? null : JSON.stringify(e);
+      case "Boolean":
+        return e ? "" : null;
+      case "Number":
+        return e ?? null;
+      default:
+        return e;
+    }
+  else
+    switch (i) {
+      case "Object":
+      case "Array":
+        return e && JSON.parse(e);
+      case "Boolean":
+        return e;
+      case "Number":
+        return e != null ? +e : e;
+      default:
+        return e;
+    }
+}
+function ze(t, e, n, l, i, r) {
+  let c = class extends de {
+    constructor() {
+      super(t, n, i), this.$$p_d = e;
+    }
+    static get observedAttributes() {
+      return Object.keys(e).map(
+        (a) => (e[a].attribute || a).toLowerCase()
+      );
+    }
+  };
+  return Object.keys(e).forEach((a) => {
+    Object.defineProperty(c.prototype, a, {
+      get() {
+        return this.$$c && a in this.$$c ? this.$$c[a] : this.$$d[a];
+      },
+      set(u) {
+        var f;
+        u = X(a, u, e), this.$$d[a] = u, (f = this.$$c) == null || f.$set({ [a]: u });
+      }
+    });
+  }), l.forEach((a) => {
+    Object.defineProperty(c.prototype, a, {
+      get() {
+        var u;
+        return (u = this.$$c) == null ? void 0 : u[a];
+      }
+    });
+  }), r && (c = r(c)), t.element = /** @type {any} */
+  c, c;
+}
+class Je {
+  constructor() {
+    /**
+     * ### PRIVATE API
+     *
+     * Do not use, may change at any time
+     *
+     * @type {any}
+     */
+    x(this, "$$");
+    /**
+     * ### PRIVATE API
+     *
+     * Do not use, may change at any time
+     *
+     * @type {any}
+     */
+    x(this, "$$set");
+  }
+  /** @returns {void} */
+  $destroy() {
+    Pe(this, 1), this.$destroy = Z;
+  }
+  /**
+   * @template {Extract<keyof Events, string>} K
+   * @param {K} type
+   * @param {((e: Events[K]) => void) | null | undefined} callback
+   * @returns {() => void}
+   */
+  $on(e, n) {
+    if (!he(n))
+      return Z;
+    const l = this.$$.callbacks[e] || (this.$$.callbacks[e] = []);
+    return l.push(n), () => {
+      const i = l.indexOf(n);
+      i !== -1 && l.splice(i, 1);
+    };
+  }
+  /**
+   * @param {Partial<Props>} props
+   * @returns {void}
+   */
+  $set(e) {
+    this.$$set && !Re(e) && (this.$$.skip_bound = !0, this.$$set(e), this.$$.skip_bound = !1);
+  }
+}
+const Qe = "4";
+typeof window < "u" && (window.__svelte || (window.__svelte = { v: /* @__PURE__ */ new Set() })).v.add(Qe);
+const me = "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", se = typeof window < "u" && window.Blob && new Blob([atob(me)], { type: "text/javascript;charset=utf-8" });
+function qe() {
+  let t;
+  try {
+    if (t = se && (window.URL || window.webkitURL).createObjectURL(se), !t)
+      throw "";
+    return new Worker(t);
+  } catch {
+    return new Worker("data:application/javascript;base64," + me);
+  } finally {
+    t && (window.URL || window.webkitURL).revokeObjectURL(t);
+  }
+}
+const et = 1e7, tt = new TextEncoder();
+function nt(t) {
+  return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}
+async function rt(t = 1e5, e = "SHA-256") {
+  const n = Date.now().toString(16), l = await ge(n, Math.round(Math.random() * t), e);
+  return {
+    algorithm: e,
+    challenge: l,
+    salt: n,
+    signature: ""
+  };
+}
+async function ge(t, e, n) {
+  return nt(await crypto.subtle.digest(n, tt.encode(t + e)));
+}
+async function lt(t, e, n = "SHA-256", l = et) {
+  const i = Date.now();
+  for (let r = 0; r <= l; r++)
+    if (await ge(e, r, n) === t)
+      return {
+        number: r,
+        took: Date.now() - i
+      };
+  return null;
+}
+var j = /* @__PURE__ */ ((t) => (t.ERROR = "error", t.VERIFIED = "verified", t.VERIFYING = "verifying", t.UNVERIFIED = "unverfied", t))(j || {});
+function it(t) {
+  Ie(t, "svelte-mjm2j6", ".altcha.svelte-mjm2j6.svelte-mjm2j6{background:var(--altcha-color-base, #ffffff);border:1px solid var(--altcha-color-border, #a0a0a0);border-radius:3px;color:var(--altcha-color-text, currentColor);display:flex;flex-direction:column;max-width:260px;overflow:hidden;position:relative}.altcha.svelte-mjm2j6.svelte-mjm2j6:focus-within{border-color:var(--altcha-color-border-focus, currentColor)}.altcha-main.svelte-mjm2j6.svelte-mjm2j6{align-items:center;display:flex;gap:0.4rem;padding:0.7rem}.altcha-label.svelte-mjm2j6.svelte-mjm2j6{flex-grow:1}.altcha-label.svelte-mjm2j6 label.svelte-mjm2j6{cursor:pointer}.altcha-logo.svelte-mjm2j6.svelte-mjm2j6{color:currentColor;opacity:0.3}.altcha-logo.svelte-mjm2j6.svelte-mjm2j6:hover{opacity:1}.altcha-error.svelte-mjm2j6.svelte-mjm2j6{color:var(--altcha-color-error-text, #f23939);display:flex;font-size:0.85rem;gap:0.3rem;padding:0 0.7rem 0.7rem}.altcha-footer.svelte-mjm2j6.svelte-mjm2j6{align-items:center;background-color:var(--altcha-color-footer-bg, #f4f4f4);display:flex;font-size:0.75rem;padding:0.2rem 0.7rem;text-align:right}.altcha-footer.svelte-mjm2j6>.svelte-mjm2j6:first-child{flex-grow:1}.altcha-footer.svelte-mjm2j6 a{color:currentColor}.altcha-checkbox.svelte-mjm2j6.svelte-mjm2j6{display:flex;align-items:center;height:24px;width:24px}.altcha-checkbox.svelte-mjm2j6 input.svelte-mjm2j6{width:18px;height:18px;margin:0}.altcha-hidden.svelte-mjm2j6.svelte-mjm2j6{display:none}.altcha-spinner.svelte-mjm2j6.svelte-mjm2j6{animation:svelte-mjm2j6-altcha-spinner 0.75s infinite linear;transform-origin:center}@keyframes svelte-mjm2j6-altcha-spinner{100%{transform:rotate(360deg)}}");
+}
+function oe(t) {
+  let e, n, l;
+  return {
+    c() {
+      e = V("svg"), n = V("path"), l = V("path"), o(n, "d", "M12,1A11,11,0,1,0,23,12,11,11,0,0,0,12,1Zm0,19a8,8,0,1,1,8-8A8,8,0,0,1,12,20Z"), o(n, "fill", "currentColor"), o(n, "opacity", ".25"), o(l, "d", "M12,4a8,8,0,0,1,7.89,6.7A1.53,1.53,0,0,0,21.38,12h0a1.5,1.5,0,0,0,1.48-1.75,11,11,0,0,0-21.72,0A1.5,1.5,0,0,0,2.62,12h0a1.53,1.53,0,0,0,1.49-1.3A8,8,0,0,1,12,4Z"), o(l, "fill", "currentColor"), o(l, "class", "altcha-spinner svelte-mjm2j6"), o(e, "width", "24"), o(e, "height", "24"), o(e, "viewBox", "0 0 24 24"), o(e, "xmlns", "http://www.w3.org/2000/svg");
+    },
+    m(i, r) {
+      M(i, e, r), m(e, n), m(e, l);
+    },
+    d(i) {
+      i && A(e);
+    }
+  };
+}
+function st(t) {
+  let e, n = (
+    /*_strings*/
+    t[7].label + ""
+  ), l;
+  return {
+    c() {
+      e = p("label"), o(e, "for", l = /*name*/
+      t[1] + "_checkbox"), o(e, "class", "svelte-mjm2j6");
+    },
+    m(i, r) {
+      M(i, e, r), e.innerHTML = n;
+    },
+    p(i, r) {
+      r[0] & /*_strings*/
+      128 && n !== (n = /*_strings*/
+      i[7].label + "") && (e.innerHTML = n), r[0] & /*name*/
+      2 && l !== (l = /*name*/
+      i[1] + "_checkbox") && o(e, "for", l);
+    },
+    d(i) {
+      i && A(e);
+    }
+  };
+}
+function ot(t) {
+  let e, n = (
+    /*_strings*/
+    t[7].verifying + ""
+  );
+  return {
+    c() {
+      e = p("span");
+    },
+    m(l, i) {
+      M(l, e, i), e.innerHTML = n;
+    },
+    p(l, i) {
+      i[0] & /*_strings*/
+      128 && n !== (n = /*_strings*/
+      l[7].verifying + "") && (e.innerHTML = n);
+    },
+    d(l) {
+      l && A(e);
+    }
+  };
+}
+function ct(t) {
+  let e, n = (
+    /*_strings*/
+    t[7].verified + ""
+  ), l, i;
+  return {
+    c() {
+      e = p("span"), l = S(), i = p("input"), o(i, "type", "hidden"), o(
+        i,
+        "name",
+        /*name*/
+        t[1]
+      ), i.value = /*payload*/
+      t[6];
+    },
+    m(r, c) {
+      M(r, e, c), e.innerHTML = n, M(r, l, c), M(r, i, c);
+    },
+    p(r, c) {
+      c[0] & /*_strings*/
+      128 && n !== (n = /*_strings*/
+      r[7].verified + "") && (e.innerHTML = n), c[0] & /*name*/
+      2 && o(
+        i,
+        "name",
+        /*name*/
+        r[1]
+      ), c[0] & /*payload*/
+      64 && (i.value = /*payload*/
+      r[6]);
+    },
+    d(r) {
+      r && (A(e), A(l), A(i));
+    }
+  };
+}
+function ce(t) {
+  let e, n, l, i, r, c = (
+    /*_strings*/
+    t[7].error + ""
+  );
+  return {
+    c() {
+      e = p("div"), n = V("svg"), l = V("path"), i = S(), r = p("div"), o(l, "stroke-linecap", "round"), o(l, "stroke-linejoin", "round"), o(l, "d", "M6 18L18 6M6 6l12 12"), o(n, "width", "14"), o(n, "height", "14"), o(n, "xmlns", "http://www.w3.org/2000/svg"), o(n, "fill", "none"), o(n, "viewBox", "0 0 24 24"), o(n, "stroke-width", "1.5"), o(n, "stroke", "currentColor"), o(
+        r,
+        "title",
+        /*error*/
+        t[5]
+      ), o(e, "class", "altcha-error svelte-mjm2j6");
+    },
+    m(a, u) {
+      M(a, e, u), m(e, n), m(n, l), m(e, i), m(e, r), r.innerHTML = c;
+    },
+    p(a, u) {
+      u[0] & /*_strings*/
+      128 && c !== (c = /*_strings*/
+      a[7].error + "") && (r.innerHTML = c), u[0] & /*error*/
+      32 && o(
+        r,
+        "title",
+        /*error*/
+        a[5]
+      );
+    },
+    d(a) {
+      a && A(e);
+    }
+  };
+}
+function ae(t) {
+  let e, n, l = (
+    /*_strings*/
+    t[7].footer + ""
+  );
+  return {
+    c() {
+      e = p("div"), n = p("div"), o(n, "class", "svelte-mjm2j6"), o(e, "class", "altcha-footer svelte-mjm2j6");
+    },
+    m(i, r) {
+      M(i, e, r), m(e, n), n.innerHTML = l;
+    },
+    p(i, r) {
+      r[0] & /*_strings*/
+      128 && l !== (l = /*_strings*/
+      i[7].footer + "") && (n.innerHTML = l);
+    },
+    d(i) {
+      i && A(e);
+    }
+  };
+}
+function at(t) {
+  let e, n, l, i, r, c, a, u, f, L, g, $, k, y, H, B, R, O, I, _ = (
+    /*state*/
+    t[2] === j.VERIFYING && oe()
+  );
+  function F(h, C) {
+    return (
+      /*state*/
+      h[2] === j.VERIFIED ? ct : (
+        /*state*/
+        h[2] === j.VERIFYING ? ot : st
+      )
+    );
+  }
+  let E = F(t), d = E(t), v = (
+    /*error*/
+    t[5] && ce(t)
+  ), w = (
+    /*_strings*/
+    t[7].footer && /*hidefooter*/
+    t[0] !== !0 && ae(t)
+  );
+  return {
+    c() {
+      e = p("div"), n = p("div"), _ && _.c(), l = S(), i = p("div"), r = p("input"), a = S(), u = p("div"), d.c(), f = S(), L = p("div"), g = p("a"), $ = V("svg"), k = V("path"), y = V("path"), H = V("path"), B = S(), v && v.c(), R = S(), w && w.c(), o(r, "type", "checkbox"), o(r, "id", c = /*name*/
+      t[1] + "_checkbox"), r.required = !0, o(r, "class", "svelte-mjm2j6"), o(i, "class", "altcha-checkbox svelte-mjm2j6"), le(
+        i,
+        "altcha-hidden",
+        /*state*/
+        t[2] === j.VERIFYING
+      ), o(u, "class", "altcha-label svelte-mjm2j6"), o(k, "d", "M2.33955 16.4279C5.88954 20.6586 12.1971 21.2105 16.4279 17.6604C18.4699 15.947 19.6548 13.5911 19.9352 11.1365L17.9886 10.4279C17.8738 12.5624 16.909 14.6459 15.1423 16.1284C11.7577 18.9684 6.71167 18.5269 3.87164 15.1423C1.03163 11.7577 1.4731 6.71166 4.8577 3.87164C8.24231 1.03162 13.2883 1.4731 16.1284 4.8577C16.9767 5.86872 17.5322 7.02798 17.804 8.2324L19.9522 9.01429C19.7622 7.07737 19.0059 5.17558 17.6604 3.57212C14.1104 -0.658624 7.80283 -1.21043 3.57212 2.33956C-0.658625 5.88958 -1.21046 12.1971 2.33955 16.4279Z"), o(k, "fill", "currentColor"), o(y, "d", "M3.57212 2.33956C1.65755 3.94607 0.496389 6.11731 0.12782 8.40523L2.04639 9.13961C2.26047 7.15832 3.21057 5.25375 4.8577 3.87164C8.24231 1.03162 13.2883 1.4731 16.1284 4.8577L13.8302 6.78606L19.9633 9.13364C19.7929 7.15555 19.0335 5.20847 17.6604 3.57212C14.1104 -0.658624 7.80283 -1.21043 3.57212 2.33956Z"), o(y, "fill", "currentColor"), o(H, "d", "M7 10H5C5 12.7614 7.23858 15 10 15C12.7614 15 15 12.7614 15 10H13C13 11.6569 11.6569 13 10 13C8.3431 13 7 11.6569 7 10Z"), o(H, "fill", "currentColor"), o($, "width", "22"), o($, "height", "22"), o($, "viewBox", "0 0 20 20"), o($, "fill", "none"), o($, "xmlns", "http://www.w3.org/2000/svg"), o(g, "href", be), o(g, "target", "_blank"), o(g, "class", "altcha-logo svelte-mjm2j6"), o(n, "class", "altcha-main svelte-mjm2j6"), o(e, "class", "altcha svelte-mjm2j6"), o(
+        e,
+        "data-state",
+        /*state*/
+        t[2]
+      );
+    },
+    m(h, C) {
+      M(h, e, C), m(e, n), _ && _.m(n, null), m(n, l), m(n, i), m(i, r), r.checked = /*checked*/
+      t[3], m(n, a), m(n, u), d.m(u, null), m(n, f), m(n, L), m(L, g), m(g, $), m($, k), m($, y), m($, H), m(e, B), v && v.m(e, null), m(e, R), w && w.m(e, null), t[20](e), O || (I = [
+        z(
+          r,
+          "change",
+          /*input_change_handler*/
+          t[19]
+        ),
+        z(
+          r,
+          "change",
+          /*onCheckedChange*/
+          t[8]
+        ),
+        z(
+          r,
+          "invalid",
+          /*onInvalid*/
+          t[9]
+        )
+      ], O = !0);
+    },
+    p(h, C) {
+      /*state*/
+      h[2] === j.VERIFYING ? _ || (_ = oe(), _.c(), _.m(n, l)) : _ && (_.d(1), _ = null), C[0] & /*name*/
+      2 && c !== (c = /*name*/
+      h[1] + "_checkbox") && o(r, "id", c), C[0] & /*checked*/
+      8 && (r.checked = /*checked*/
+      h[3]), C[0] & /*state*/
+      4 && le(
+        i,
+        "altcha-hidden",
+        /*state*/
+        h[2] === j.VERIFYING
+      ), E === (E = F(h)) && d ? d.p(h, C) : (d.d(1), d = E(h), d && (d.c(), d.m(u, null))), /*error*/
+      h[5] ? v ? v.p(h, C) : (v = ce(h), v.c(), v.m(e, R)) : v && (v.d(1), v = null), /*_strings*/
+      h[7].footer && /*hidefooter*/
+      h[0] !== !0 ? w ? w.p(h, C) : (w = ae(h), w.c(), w.m(e, null)) : w && (w.d(1), w = null), C[0] & /*state*/
+      4 && o(
+        e,
+        "data-state",
+        /*state*/
+        h[2]
+      );
+    },
+    i: Z,
+    o: Z,
+    d(h) {
+      h && A(e), _ && _.d(), d.d(), v && v.d(), w && w.d(), t[20](null), O = !1, K(I);
+    }
+  };
+}
+const be = "https://altcha.org/";
+function ue(t) {
+  return JSON.parse(t);
+}
+function ut(t, e, n) {
+  let l, i, r, { challengeurl: c = void 0 } = e, { challengejson: a = void 0 } = e, { debug: u = !1 } = e, { hidefooter: f = !1 } = e, { name: L = "altcha" } = e, { maxnumber: g = void 0 } = e, { mockerror: $ = !1 } = e, { strings: k = void 0 } = e, { test: y = !1 } = e;
+  const H = Ge(), B = ["SHA-256", "SHA-384", "SHA-512"];
+  let R = !1, O, I = null, _ = null, F = null, E = j.UNVERIFIED;
+  Se(() => {
+    I && (I.removeEventListener("submit", v), I.removeEventListener("reset", w), I = null);
+  }), He(() => {
+    d("mounted"), y && d("using test mode"), I = O.closest("form"), I && (I.addEventListener("submit", v), I.addEventListener("reset", w));
+  });
+  function d(...s) {
+    (u || s.some((b) => b instanceof Error)) && console[s[0] instanceof Error ? "error" : "log"]("ALTCHA", ...s);
+  }
+  function v() {
+    P();
+  }
+  function w() {
+    P();
+  }
+  function h(s, b) {
+    return btoa(JSON.stringify({
+      algorithm: s.algorithm,
+      challenge: s.challenge,
+      number: b.number,
+      salt: s.salt,
+      signature: s.signature,
+      test: y ? !0 : void 0,
+      took: b.took
+    }));
+  }
+  function C(s) {
+    if (!s.algorithm || !B.includes(s.algorithm))
+      throw new Error(`Unknown algorithm value. Allowed values: ${B.join(", ")}`);
+    if (!s.challenge || s.challenge.length < 40)
+      throw new Error("Challenge is too short. Min. 40 chars.");
+    if (!s.salt || s.salt.length < 10)
+      throw new Error("Salt is too short. Min. 10 chars.");
+    if (s.signature === void 0)
+      throw new Error("Signature is missing.");
+  }
+  async function $e() {
+    if ($)
+      throw d("mocking error"), new Error("Mocked error.");
+    if (l)
+      return d("using provided json data"), l;
+    if (y)
+      return d("generating test challenge"), rt();
+    {
+      if (!c)
+        throw new Error("Attribute challengeurl not set.");
+      d("fetching challenge from", c);
+      const s = await fetch(c);
+      if (s.status !== 200)
+        throw new Error(`Server responded with ${s.status}.`);
+      return s.json();
+    }
+  }
+  async function _e(s) {
+    let b = null;
+    if ("Worker" in window) {
+      try {
+        b = await ve(s.challenge, s.salt, s.algorithm);
+      } catch (D) {
+        d(D);
+      }
+      if ((b == null ? void 0 : b.number) !== void 0)
+        return { data: s, solution: b };
+    }
+    return {
+      data: s,
+      solution: await lt(s.challenge, s.salt, s.algorithm, g)
+    };
+  }
+  async function ve(s, b, D) {
+    const ne = new qe();
+    return new Promise((ke) => {
+      ne.addEventListener("message", (Ee) => {
+        ke(Ee.data);
+      }), ne.postMessage({ alg: D, challenge: s, max: g, salt: b });
+    });
+  }
+  function we() {
+    [j.UNVERIFIED, j.ERROR].includes(E) ? (P(j.VERIFYING), $e().then((s) => (C(s), d("challenge", s), _e(s))).then(({ data: s, solution: b }) => {
+      if (d("solution", b), (b == null ? void 0 : b.number) !== void 0)
+        d("verified"), n(2, E = j.VERIFIED), n(3, R = !0), n(6, F = h(s, b)), H("verified", { payload: F }), d("payload", F);
+      else
+        throw new Error("Unexpected result returned.");
+    }).catch((s) => {
+      d(s), n(2, E = j.ERROR), n(3, R = !1), n(5, _ = s);
+    })) : n(3, R = !0);
+  }
+  function pe() {
+    E === j.VERIFYING && alert(r.waitAlert);
+  }
+  function P(s = j.UNVERIFIED) {
+    n(3, R = !1), n(5, _ = null), n(6, F = null), n(2, E = s);
+  }
+  function je() {
+    R = this.checked, n(3, R);
+  }
+  function ye(s) {
+    Q[s ? "unshift" : "push"](() => {
+      O = s, n(4, O);
+    });
+  }
+  return t.$$set = (s) => {
+    "challengeurl" in s && n(10, c = s.challengeurl), "challengejson" in s && n(11, a = s.challengejson), "debug" in s && n(12, u = s.debug), "hidefooter" in s && n(0, f = s.hidefooter), "name" in s && n(1, L = s.name), "maxnumber" in s && n(13, g = s.maxnumber), "mockerror" in s && n(14, $ = s.mockerror), "strings" in s && n(15, k = s.strings), "test" in s && n(16, y = s.test);
+  }, t.$$.update = () => {
+    t.$$.dirty[0] & /*challengejson*/
+    2048 && (l = a ? ue(a) : void 0), t.$$.dirty[0] & /*strings*/
+    32768 && n(18, i = k ? ue(k) : {}), t.$$.dirty[0] & /*parsedStrings*/
+    262144 && n(7, r = {
+      error: "Verification failed. Try again later.",
+      footer: `Protected by <a href="${be}" target="_blank">ALTCHA</a>`,
+      label: "I'm not a robot",
+      verified: "Verified",
+      verifying: "Verifying...",
+      waitAlert: "Verifying... please wait.",
+      ...i
+    }), t.$$.dirty[0] & /*state*/
+    4 && H("statechange", { state: E });
+  }, [
+    f,
+    L,
+    E,
+    R,
+    O,
+    _,
+    F,
+    r,
+    we,
+    pe,
+    c,
+    a,
+    u,
+    g,
+    $,
+    k,
+    y,
+    P,
+    i,
+    je,
+    ye
+  ];
+}
+class ft extends Je {
+  constructor(e) {
+    super(), De(
+      this,
+      e,
+      ut,
+      at,
+      Le,
+      {
+        challengeurl: 10,
+        challengejson: 11,
+        debug: 12,
+        hidefooter: 0,
+        name: 1,
+        maxnumber: 13,
+        mockerror: 14,
+        strings: 15,
+        test: 16,
+        reset: 17
+      },
+      it,
+      [-1, -1]
+    );
+  }
+  get challengeurl() {
+    return this.$$.ctx[10];
+  }
+  set challengeurl(e) {
+    this.$$set({ challengeurl: e }), N();
+  }
+  get challengejson() {
+    return this.$$.ctx[11];
+  }
+  set challengejson(e) {
+    this.$$set({ challengejson: e }), N();
+  }
+  get debug() {
+    return this.$$.ctx[12];
+  }
+  set debug(e) {
+    this.$$set({ debug: e }), N();
+  }
+  get hidefooter() {
+    return this.$$.ctx[0];
+  }
+  set hidefooter(e) {
+    this.$$set({ hidefooter: e }), N();
+  }
+  get name() {
+    return this.$$.ctx[1];
+  }
+  set name(e) {
+    this.$$set({ name: e }), N();
+  }
+  get maxnumber() {
+    return this.$$.ctx[13];
+  }
+  set maxnumber(e) {
+    this.$$set({ maxnumber: e }), N();
+  }
+  get mockerror() {
+    return this.$$.ctx[14];
+  }
+  set mockerror(e) {
+    this.$$set({ mockerror: e }), N();
+  }
+  get strings() {
+    return this.$$.ctx[15];
+  }
+  set strings(e) {
+    this.$$set({ strings: e }), N();
+  }
+  get test() {
+    return this.$$.ctx[16];
+  }
+  set test(e) {
+    this.$$set({ test: e }), N();
+  }
+  get reset() {
+    return this.$$.ctx[17];
+  }
+}
+customElements.define("altcha-box", ze(ft, { challengeurl: {}, challengejson: {}, debug: { type: "Boolean" }, hidefooter: { type: "Boolean" }, name: {}, maxnumber: {}, mockerror: { type: "Boolean" }, strings: {}, test: { type: "Boolean" } }, [], ["reset"], !1));
+export {
+  ft as Altcha
+};

package/dist/altcha.umd.cjs

@@ -0,0 +1 @@
+(function(E,$){typeof exports=="object"&&typeof module<"u"?$(exports):typeof define=="function"&&define.amd?define(["exports"],$):(E=typeof globalThis<"u"?globalThis:E||self,$(E["<<name>>"]={}))})(this,function(E){"use strict";var ft=Object.defineProperty;var ht=(E,$,F)=>$ in E?ft(E,$,{enumerable:!0,configurable:!0,writable:!0,value:F}):E[$]=F;var R=(E,$,F)=>(ht(E,typeof $!="symbol"?$+"":$,F),F);function $(){}function F(t){return t()}function le(){return Object.create(null)}function U(t){t.forEach(F)}function ie(t){return typeof t=="function"}function ve(t,e){return t!=t?e==e:t!==e||t&&typeof t=="object"||typeof t=="function"}function pe(t){return Object.keys(t).length===0}function d(t,e){t.appendChild(e)}function we(t,e,n){const l=je(t);if(!l.getElementById(e)){const i=_("style");i.id=e,i.textContent=n,ye(l,i)}}function je(t){if(!t)return document;const e=t.getRootNode?t.getRootNode():t.ownerDocument;return e&&e.host?e:t.ownerDocument}function ye(t,e){return d(t.head||t,e),e.sheet}function O(t,e,n){t.insertBefore(e,n||null)}function I(t){t.parentNode&&t.parentNode.removeChild(t)}function _(t){return document.createElement(t)}function S(t){return document.createElementNS("http://www.w3.org/2000/svg",t)}function ke(t){return document.createTextNode(t)}function G(){return ke(" ")}function J(t,e,n,l){return t.addEventListener(e,n,l),()=>t.removeEventListener(e,n,l)}function o(t,e,n){n==null?t.removeAttribute(e):t.getAttribute(e)!==n&&t.setAttribute(e,n)}function Ee(t){return Array.from(t.childNodes)}function se(t,e,n){t.classList.toggle(e,!!n)}function Ce(t,e,{bubbles:n=!1,cancelable:l=!1}={}){return new CustomEvent(t,{detail:e,bubbles:n,cancelable:l})}function xe(t){const e={};return t.childNodes.forEach(n=>{e[n.slot||"default"]=!0}),e}let K;function P(t){K=t}function Q(){if(!K)throw new Error("Function called outside component initialization");return K}function Le(t){Q().$$.on_mount.push(t)}function Re(t){Q().$$.on_destroy.push(t)}function Ie(){const t=Q();return(e,n,{cancelable:l=!1}={})=>{const i=t.$$.callbacks[e];if(i){const r=Ce(e,n,{cancelable:l});return i.slice().forEach(c=>{c.call(t,r)}),!r.defaultPrevented}return!0}}const B=[],q=[];let Y=[];const oe=[],Ne=Promise.resolve();let ee=!1;function Ae(){ee||(ee=!0,Ne.then(N))}function te(t){Y.push(t)}const ne=new Set;let Z=0;function N(){if(Z!==0)return;const t=K;do{try{for(;Z<B.length;){const e=B[Z];Z++,P(e),Me(e.$$)}}catch(e){throw B.length=0,Z=0,e}for(P(null),B.length=0,Z=0;q.length;)q.pop()();for(let e=0;e<Y.length;e+=1){const n=Y[e];ne.has(n)||(ne.add(n),n())}Y.length=0}while(B.length);for(;oe.length;)oe.pop()();ee=!1,ne.clear(),P(t)}function Me(t){if(t.fragment!==null){t.update(),U(t.before_update);const e=t.dirty;t.dirty=[-1],t.fragment&&t.fragment.p(t.ctx,e),t.after_update.forEach(te)}}function Ve(t){const e=[],n=[];Y.forEach(l=>t.indexOf(l)===-1?e.push(l):n.push(l)),n.forEach(l=>l()),Y=e}const Oe=new Set;function Se(t,e){t&&t.i&&(Oe.delete(t),t.i(e))}function Fe(t,e,n){const{fragment:l,after_update:i}=t.$$;l&&l.m(e,n),te(()=>{const r=t.$$.on_mount.map(F).filter(ie);t.$$.on_destroy?t.$$.on_destroy.push(...r):U(r),t.$$.on_mount=[]}),i.forEach(te)}function He(t,e){const n=t.$$;n.fragment!==null&&(Ve(n.after_update),U(n.on_destroy),n.fragment&&n.fragment.d(e),n.on_destroy=n.fragment=null,n.ctx=[])}function Te(t,e){t.$$.dirty[0]===-1&&(B.push(t),Ae(),t.$$.dirty.fill(0)),t.$$.dirty[e/31|0]|=1<<e%31}function Ge(t,e,n,l,i,r,c=null,a=[-1]){const u=K;P(t);const f=t.$$={fragment:null,ctx:[],props:r,update:$,not_equal:i,bound:le(),on_mount:[],on_destroy:[],on_disconnect:[],before_update:[],after_update:[],context:new Map(e.context||(u?u.$$.context:[])),callbacks:le(),dirty:a,skip_bound:!1,root:e.target||u.$$.root};c&&c(f.root);let A=!1;if(f.ctx=n?n(t,e.props||{},(g,v,...C)=>{const k=C.length?C[0]:v;return f.ctx&&i(f.ctx[g],f.ctx[g]=k)&&(!f.skip_bound&&f.bound[g]&&f.bound[g](k),A&&Te(t,g)),v}):[],f.update(),A=!0,U(f.before_update),f.fragment=l?l(f.ctx):!1,e.target){if(e.hydrate){const g=Ee(e.target);f.fragment&&f.fragment.l(g),g.forEach(I)}else f.fragment&&f.fragment.c();e.intro&&Se(t.$$.fragment),Fe(t,e.target,e.anchor),N()}P(u)}let ce;typeof HTMLElement=="function"&&(ce=class extends HTMLElement{constructor(e,n,l){super();R(this,"$$ctor");R(this,"$$s");R(this,"$$c");R(this,"$$cn",!1);R(this,"$$d",{});R(this,"$$r",!1);R(this,"$$p_d",{});R(this,"$$l",{});R(this,"$$l_u",new Map);this.$$ctor=e,this.$$s=n,l&&this.attachShadow({mode:"open"})}addEventListener(e,n,l){if(this.$$l[e]=this.$$l[e]||[],this.$$l[e].push(n),this.$$c){const i=this.$$c.$on(e,n);this.$$l_u.set(n,i)}super.addEventListener(e,n,l)}removeEventListener(e,n,l){if(super.removeEventListener(e,n,l),this.$$c){const i=this.$$l_u.get(n);i&&(i(),this.$$l_u.delete(n))}}async connectedCallback(){if(this.$$cn=!0,!this.$$c){let e=function(r){return()=>{let c;return{c:function(){c=_("slot"),r!=="default"&&o(c,"name",r)},m:function(f,A){O(f,c,A)},d:function(f){f&&I(c)}}}};if(await Promise.resolve(),!this.$$cn)return;const n={},l=xe(this);for(const r of this.$$s)r in l&&(n[r]=[e(r)]);for(const r of this.attributes){const c=this.$$g_p(r.name);c in this.$$d||(this.$$d[c]=D(c,r.value,this.$$p_d,"toProp"))}this.$$c=new this.$$ctor({target:this.shadowRoot||this,props:{...this.$$d,$$slots:n,$$scope:{ctx:[]}}});const i=()=>{this.$$r=!0;for(const r in this.$$p_d)if(this.$$d[r]=this.$$c.$$.ctx[this.$$c.$$.props[r]],this.$$p_d[r].reflect){const c=D(r,this.$$d[r],this.$$p_d,"toAttribute");c==null?this.removeAttribute(this.$$p_d[r].attribute||r):this.setAttribute(this.$$p_d[r].attribute||r,c)}this.$$r=!1};this.$$c.$$.after_update.push(i),i();for(const r in this.$$l)for(const c of this.$$l[r]){const a=this.$$c.$on(r,c);this.$$l_u.set(c,a)}this.$$l={}}}attributeChangedCallback(e,n,l){var i;this.$$r||(e=this.$$g_p(e),this.$$d[e]=D(e,l,this.$$p_d,"toProp"),(i=this.$$c)==null||i.$set({[e]:this.$$d[e]}))}disconnectedCallback(){this.$$cn=!1,Promise.resolve().then(()=>{this.$$cn||(this.$$c.$destroy(),this.$$c=void 0)})}$$g_p(e){return Object.keys(this.$$p_d).find(n=>this.$$p_d[n].attribute===e||!this.$$p_d[n].attribute&&n.toLowerCase()===e)||e}});function D(t,e,n,l){var r;const i=(r=n[t])==null?void 0:r.type;if(e=i==="Boolean"&&typeof e!="boolean"?e!=null:e,!l||!n[t])return e;if(l==="toAttribute")switch(i){case"Object":case"Array":return e==null?null:JSON.stringify(e);case"Boolean":return e?"":null;case"Number":return e??null;default:return e}else switch(i){case"Object":case"Array":return e&&JSON.parse(e);case"Boolean":return e;case"Number":return e!=null?+e:e;default:return e}}function We(t,e,n,l,i,r){let c=class extends ce{constructor(){super(t,n,i),this.$$p_d=e}static get observedAttributes(){return Object.keys(e).map(a=>(e[a].attribute||a).toLowerCase())}};return Object.keys(e).forEach(a=>{Object.defineProperty(c.prototype,a,{get(){return this.$$c&&a in this.$$c?this.$$c[a]:this.$$d[a]},set(u){var f;u=D(a,u,e),this.$$d[a]=u,(f=this.$$c)==null||f.$set({[a]:u})}})}),l.forEach(a=>{Object.defineProperty(c.prototype,a,{get(){var u;return(u=this.$$c)==null?void 0:u[a]}})}),r&&(c=r(c)),t.element=c,c}class Be{constructor(){R(this,"$$");R(this,"$$set")}$destroy(){He(this,1),this.$destroy=$}$on(e,n){if(!ie(n))return $;const l=this.$$.callbacks[e]||(this.$$.callbacks[e]=[]);return l.push(n),()=>{const i=l.indexOf(n);i!==-1&&l.splice(i,1)}}$set(e){this.$$set&&!pe(e)&&(this.$$.skip_bound=!0,this.$$set(e),this.$$.skip_bound=!1)}}const Ye="4";typeof window<"u"&&(window.__svelte||(window.__svelte={v:new Set})).v.add(Ye);const ae="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",ue=typeof window<"u"&&window.Blob&&new Blob([atob(ae)],{type:"text/javascript;charset=utf-8"});function Ze(){let t;try{if(t=ue&&(window.URL||window.webkitURL).createObjectURL(ue),!t)throw"";return new Worker(t)}catch{return new Worker("data:application/javascript;base64,"+ae)}finally{t&&(window.URL||window.webkitURL).revokeObjectURL(t)}}const Ue=1e7,Ke=new TextEncoder;function Pe(t){return[...new Uint8Array(t)].map(e=>e.toString(16).padStart(2,"0")).join("")}async function Xe(t=1e5,e="SHA-256"){const n=Date.now().toString(16),l=await fe(n,Math.round(Math.random()*t),e);return{algorithm:e,challenge:l,salt:n,signature:""}}async function fe(t,e,n){return Pe(await crypto.subtle.digest(n,Ke.encode(t+e)))}async function De(t,e,n="SHA-256",l=Ue){const i=Date.now();for(let r=0;r<=l;r++)if(await fe(e,r,n)===t)return{number:r,took:Date.now()-i};return null}var y=(t=>(t.ERROR="error",t.VERIFIED="verified",t.VERIFYING="verifying",t.UNVERIFIED="unverfied",t))(y||{});function ze(t){we(t,"svelte-mjm2j6",".altcha.svelte-mjm2j6.svelte-mjm2j6{background:var(--altcha-color-base, #ffffff);border:1px solid var(--altcha-color-border, #a0a0a0);border-radius:3px;color:var(--altcha-color-text, currentColor);display:flex;flex-direction:column;max-width:260px;overflow:hidden;position:relative}.altcha.svelte-mjm2j6.svelte-mjm2j6:focus-within{border-color:var(--altcha-color-border-focus, currentColor)}.altcha-main.svelte-mjm2j6.svelte-mjm2j6{align-items:center;display:flex;gap:0.4rem;padding:0.7rem}.altcha-label.svelte-mjm2j6.svelte-mjm2j6{flex-grow:1}.altcha-label.svelte-mjm2j6 label.svelte-mjm2j6{cursor:pointer}.altcha-logo.svelte-mjm2j6.svelte-mjm2j6{color:currentColor;opacity:0.3}.altcha-logo.svelte-mjm2j6.svelte-mjm2j6:hover{opacity:1}.altcha-error.svelte-mjm2j6.svelte-mjm2j6{color:var(--altcha-color-error-text, #f23939);display:flex;font-size:0.85rem;gap:0.3rem;padding:0 0.7rem 0.7rem}.altcha-footer.svelte-mjm2j6.svelte-mjm2j6{align-items:center;background-color:var(--altcha-color-footer-bg, #f4f4f4);display:flex;font-size:0.75rem;padding:0.2rem 0.7rem;text-align:right}.altcha-footer.svelte-mjm2j6>.svelte-mjm2j6:first-child{flex-grow:1}.altcha-footer.svelte-mjm2j6 a{color:currentColor}.altcha-checkbox.svelte-mjm2j6.svelte-mjm2j6{display:flex;align-items:center;height:24px;width:24px}.altcha-checkbox.svelte-mjm2j6 input.svelte-mjm2j6{width:18px;height:18px;margin:0}.altcha-hidden.svelte-mjm2j6.svelte-mjm2j6{display:none}.altcha-spinner.svelte-mjm2j6.svelte-mjm2j6{animation:svelte-mjm2j6-altcha-spinner 0.75s infinite linear;transform-origin:center}@keyframes svelte-mjm2j6-altcha-spinner{100%{transform:rotate(360deg)}}")}function he(t){let e,n,l;return{c(){e=S("svg"),n=S("path"),l=S("path"),o(n,"d","M12,1A11,11,0,1,0,23,12,11,11,0,0,0,12,1Zm0,19a8,8,0,1,1,8-8A8,8,0,0,1,12,20Z"),o(n,"fill","currentColor"),o(n,"opacity",".25"),o(l,"d","M12,4a8,8,0,0,1,7.89,6.7A1.53,1.53,0,0,0,21.38,12h0a1.5,1.5,0,0,0,1.48-1.75,11,11,0,0,0-21.72,0A1.5,1.5,0,0,0,2.62,12h0a1.53,1.53,0,0,0,1.49-1.3A8,8,0,0,1,12,4Z"),o(l,"fill","currentColor"),o(l,"class","altcha-spinner svelte-mjm2j6"),o(e,"width","24"),o(e,"height","24"),o(e,"viewBox","0 0 24 24"),o(e,"xmlns","http://www.w3.org/2000/svg")},m(i,r){O(i,e,r),d(e,n),d(e,l)},d(i){i&&I(e)}}}function Je(t){let e,n=t[7].label+"",l;return{c(){e=_("label"),o(e,"for",l=t[1]+"_checkbox"),o(e,"class","svelte-mjm2j6")},m(i,r){O(i,e,r),e.innerHTML=n},p(i,r){r[0]&128&&n!==(n=i[7].label+"")&&(e.innerHTML=n),r[0]&2&&l!==(l=i[1]+"_checkbox")&&o(e,"for",l)},d(i){i&&I(e)}}}function Qe(t){let e,n=t[7].verifying+"";return{c(){e=_("span")},m(l,i){O(l,e,i),e.innerHTML=n},p(l,i){i[0]&128&&n!==(n=l[7].verifying+"")&&(e.innerHTML=n)},d(l){l&&I(e)}}}function qe(t){let e,n=t[7].verified+"",l,i;return{c(){e=_("span"),l=G(),i=_("input"),o(i,"type","hidden"),o(i,"name",t[1]),i.value=t[6]},m(r,c){O(r,e,c),e.innerHTML=n,O(r,l,c),O(r,i,c)},p(r,c){c[0]&128&&n!==(n=r[7].verified+"")&&(e.innerHTML=n),c[0]&2&&o(i,"name",r[1]),c[0]&64&&(i.value=r[6])},d(r){r&&(I(e),I(l),I(i))}}}function de(t){let e,n,l,i,r,c=t[7].error+"";return{c(){e=_("div"),n=S("svg"),l=S("path"),i=G(),r=_("div"),o(l,"stroke-linecap","round"),o(l,"stroke-linejoin","round"),o(l,"d","M6 18L18 6M6 6l12 12"),o(n,"width","14"),o(n,"height","14"),o(n,"xmlns","http://www.w3.org/2000/svg"),o(n,"fill","none"),o(n,"viewBox","0 0 24 24"),o(n,"stroke-width","1.5"),o(n,"stroke","currentColor"),o(r,"title",t[5]),o(e,"class","altcha-error svelte-mjm2j6")},m(a,u){O(a,e,u),d(e,n),d(n,l),d(e,i),d(e,r),r.innerHTML=c},p(a,u){u[0]&128&&c!==(c=a[7].error+"")&&(r.innerHTML=c),u[0]&32&&o(r,"title",a[5])},d(a){a&&I(e)}}}function me(t){let e,n,l=t[7].footer+"";return{c(){e=_("div"),n=_("div"),o(n,"class","svelte-mjm2j6"),o(e,"class","altcha-footer svelte-mjm2j6")},m(i,r){O(i,e,r),d(e,n),n.innerHTML=l},p(i,r){r[0]&128&&l!==(l=i[7].footer+"")&&(n.innerHTML=l)},d(i){i&&I(e)}}}function et(t){let e,n,l,i,r,c,a,u,f,A,g,v,C,k,W,X,M,H,V,p=t[2]===y.VERIFYING&&he();function T(h,L){return h[2]===y.VERIFIED?qe:h[2]===y.VERIFYING?Qe:Je}let x=T(t),m=x(t),w=t[5]&&de(t),j=t[7].footer&&t[0]!==!0&&me(t);return{c(){e=_("div"),n=_("div"),p&&p.c(),l=G(),i=_("div"),r=_("input"),a=G(),u=_("div"),m.c(),f=G(),A=_("div"),g=_("a"),v=S("svg"),C=S("path"),k=S("path"),W=S("path"),X=G(),w&&w.c(),M=G(),j&&j.c(),o(r,"type","checkbox"),o(r,"id",c=t[1]+"_checkbox"),r.required=!0,o(r,"class","svelte-mjm2j6"),o(i,"class","altcha-checkbox svelte-mjm2j6"),se(i,"altcha-hidden",t[2]===y.VERIFYING),o(u,"class","altcha-label svelte-mjm2j6"),o(C,"d","M2.33955 16.4279C5.88954 20.6586 12.1971 21.2105 16.4279 17.6604C18.4699 15.947 19.6548 13.5911 19.9352 11.1365L17.9886 10.4279C17.8738 12.5624 16.909 14.6459 15.1423 16.1284C11.7577 18.9684 6.71167 18.5269 3.87164 15.1423C1.03163 11.7577 1.4731 6.71166 4.8577 3.87164C8.24231 1.03162 13.2883 1.4731 16.1284 4.8577C16.9767 5.86872 17.5322 7.02798 17.804 8.2324L19.9522 9.01429C19.7622 7.07737 19.0059 5.17558 17.6604 3.57212C14.1104 -0.658624 7.80283 -1.21043 3.57212 2.33956C-0.658625 5.88958 -1.21046 12.1971 2.33955 16.4279Z"),o(C,"fill","currentColor"),o(k,"d","M3.57212 2.33956C1.65755 3.94607 0.496389 6.11731 0.12782 8.40523L2.04639 9.13961C2.26047 7.15832 3.21057 5.25375 4.8577 3.87164C8.24231 1.03162 13.2883 1.4731 16.1284 4.8577L13.8302 6.78606L19.9633 9.13364C19.7929 7.15555 19.0335 5.20847 17.6604 3.57212C14.1104 -0.658624 7.80283 -1.21043 3.57212 2.33956Z"),o(k,"fill","currentColor"),o(W,"d","M7 10H5C5 12.7614 7.23858 15 10 15C12.7614 15 15 12.7614 15 10H13C13 11.6569 11.6569 13 10 13C8.3431 13 7 11.6569 7 10Z"),o(W,"fill","currentColor"),o(v,"width","22"),o(v,"height","22"),o(v,"viewBox","0 0 20 20"),o(v,"fill","none"),o(v,"xmlns","http://www.w3.org/2000/svg"),o(g,"href",ge),o(g,"target","_blank"),o(g,"class","altcha-logo svelte-mjm2j6"),o(n,"class","altcha-main svelte-mjm2j6"),o(e,"class","altcha svelte-mjm2j6"),o(e,"data-state",t[2])},m(h,L){O(h,e,L),d(e,n),p&&p.m(n,null),d(n,l),d(n,i),d(i,r),r.checked=t[3],d(n,a),d(n,u),m.m(u,null),d(n,f),d(n,A),d(A,g),d(g,v),d(v,C),d(v,k),d(v,W),d(e,X),w&&w.m(e,null),d(e,M),j&&j.m(e,null),t[20](e),H||(V=[J(r,"change",t[19]),J(r,"change",t[8]),J(r,"invalid",t[9])],H=!0)},p(h,L){h[2]===y.VERIFYING?p||(p=he(),p.c(),p.m(n,l)):p&&(p.d(1),p=null),L[0]&2&&c!==(c=h[1]+"_checkbox")&&o(r,"id",c),L[0]&8&&(r.checked=h[3]),L[0]&4&&se(i,"altcha-hidden",h[2]===y.VERIFYING),x===(x=T(h))&&m?m.p(h,L):(m.d(1),m=x(h),m&&(m.c(),m.m(u,null))),h[5]?w?w.p(h,L):(w=de(h),w.c(),w.m(e,M)):w&&(w.d(1),w=null),h[7].footer&&h[0]!==!0?j?j.p(h,L):(j=me(h),j.c(),j.m(e,null)):j&&(j.d(1),j=null),L[0]&4&&o(e,"data-state",h[2])},i:$,o:$,d(h){h&&I(e),p&&p.d(),m.d(),w&&w.d(),j&&j.d(),t[20](null),H=!1,U(V)}}}const ge="https://altcha.org/";function be(t){return JSON.parse(t)}function tt(t,e,n){let l,i,r,{challengeurl:c=void 0}=e,{challengejson:a=void 0}=e,{debug:u=!1}=e,{hidefooter:f=!1}=e,{name:A="altcha"}=e,{maxnumber:g=void 0}=e,{mockerror:v=!1}=e,{strings:C=void 0}=e,{test:k=!1}=e;const W=Ie(),X=["SHA-256","SHA-384","SHA-512"];let M=!1,H,V=null,p=null,T=null,x=y.UNVERIFIED;Re(()=>{V&&(V.removeEventListener("submit",w),V.removeEventListener("reset",j),V=null)}),Le(()=>{m("mounted"),k&&m("using test mode"),V=H.closest("form"),V&&(V.addEventListener("submit",w),V.addEventListener("reset",j))});function m(...s){(u||s.some(b=>b instanceof Error))&&console[s[0]instanceof Error?"error":"log"]("ALTCHA",...s)}function w(){z()}function j(){z()}function h(s,b){return btoa(JSON.stringify({algorithm:s.algorithm,challenge:s.challenge,number:b.number,salt:s.salt,signature:s.signature,test:k?!0:void 0,took:b.took}))}function L(s){if(!s.algorithm||!X.includes(s.algorithm))throw new Error(`Unknown algorithm value. Allowed values: ${X.join(", ")}`);if(!s.challenge||s.challenge.length<40)throw new Error("Challenge is too short. Min. 40 chars.");if(!s.salt||s.salt.length<10)throw new Error("Salt is too short. Min. 10 chars.");if(s.signature===void 0)throw new Error("Signature is missing.")}async function nt(){if(v)throw m("mocking error"),new Error("Mocked error.");if(l)return m("using provided json data"),l;if(k)return m("generating test challenge"),Xe();{if(!c)throw new Error("Attribute challengeurl not set.");m("fetching challenge from",c);const s=await fetch(c);if(s.status!==200)throw new Error(`Server responded with ${s.status}.`);return s.json()}}async function rt(s){let b=null;if("Worker"in window){try{b=await lt(s.challenge,s.salt,s.algorithm)}catch(re){m(re)}if((b==null?void 0:b.number)!==void 0)return{data:s,solution:b}}return{data:s,solution:await De(s.challenge,s.salt,s.algorithm,g)}}async function lt(s,b,re){const _e=new Ze;return new Promise(at=>{_e.addEventListener("message",ut=>{at(ut.data)}),_e.postMessage({alg:re,challenge:s,max:g,salt:b})})}function it(){[y.UNVERIFIED,y.ERROR].includes(x)?(z(y.VERIFYING),nt().then(s=>(L(s),m("challenge",s),rt(s))).then(({data:s,solution:b})=>{if(m("solution",b),(b==null?void 0:b.number)!==void 0)m("verified"),n(2,x=y.VERIFIED),n(3,M=!0),n(6,T=h(s,b)),W("verified",{payload:T}),m("payload",T);else throw new Error("Unexpected result returned.")}).catch(s=>{m(s),n(2,x=y.ERROR),n(3,M=!1),n(5,p=s)})):n(3,M=!0)}function st(){x===y.VERIFYING&&alert(r.waitAlert)}function z(s=y.UNVERIFIED){n(3,M=!1),n(5,p=null),n(6,T=null),n(2,x=s)}function ot(){M=this.checked,n(3,M)}function ct(s){q[s?"unshift":"push"](()=>{H=s,n(4,H)})}return t.$$set=s=>{"challengeurl"in s&&n(10,c=s.challengeurl),"challengejson"in s&&n(11,a=s.challengejson),"debug"in s&&n(12,u=s.debug),"hidefooter"in s&&n(0,f=s.hidefooter),"name"in s&&n(1,A=s.name),"maxnumber"in s&&n(13,g=s.maxnumber),"mockerror"in s&&n(14,v=s.mockerror),"strings"in s&&n(15,C=s.strings),"test"in s&&n(16,k=s.test)},t.$$.update=()=>{t.$$.dirty[0]&2048&&(l=a?be(a):void 0),t.$$.dirty[0]&32768&&n(18,i=C?be(C):{}),t.$$.dirty[0]&262144&&n(7,r={error:"Verification failed. Try again later.",footer:`Protected by <a href="${ge}" target="_blank">ALTCHA</a>`,label:"I'm not a robot",verified:"Verified",verifying:"Verifying...",waitAlert:"Verifying... please wait.",...i}),t.$$.dirty[0]&4&&W("statechange",{state:x})},[f,A,x,M,H,p,T,r,it,st,c,a,u,g,v,C,k,z,i,ot,ct]}class $e extends Be{constructor(e){super(),Ge(this,e,tt,et,ve,{challengeurl:10,challengejson:11,debug:12,hidefooter:0,name:1,maxnumber:13,mockerror:14,strings:15,test:16,reset:17},ze,[-1,-1])}get challengeurl(){return this.$$.ctx[10]}set challengeurl(e){this.$$set({challengeurl:e}),N()}get challengejson(){return this.$$.ctx[11]}set challengejson(e){this.$$set({challengejson:e}),N()}get debug(){return this.$$.ctx[12]}set debug(e){this.$$set({debug:e}),N()}get hidefooter(){return this.$$.ctx[0]}set hidefooter(e){this.$$set({hidefooter:e}),N()}get name(){return this.$$.ctx[1]}set name(e){this.$$set({name:e}),N()}get maxnumber(){return this.$$.ctx[13]}set maxnumber(e){this.$$set({maxnumber:e}),N()}get mockerror(){return this.$$.ctx[14]}set mockerror(e){this.$$set({mockerror:e}),N()}get strings(){return this.$$.ctx[15]}set strings(e){this.$$set({strings:e}),N()}get test(){return this.$$.ctx[16]}set test(e){this.$$set({test:e}),N()}get reset(){return this.$$.ctx[17]}}customElements.define("altcha-box",We($e,{challengeurl:{},challengejson:{},debug:{type:"Boolean"},hidefooter:{type:"Boolean"},name:{},maxnumber:{},mockerror:{type:"Boolean"},strings:{},test:{type:"Boolean"}},[],["reset"],!1)),E.Altcha=$e,Object.defineProperty(E,Symbol.toStringTag,{value:"Module"})});

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "altcha",
+  "version": "0.1.0",
+  "license": "MIT",
+  "homepage": "https://github.com/altcha-org/altchajs",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/altcha-org/altchajs"
+  },
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/altcha.umd.cjs",
+  "module": "./dist/altcha.js",
+  "exports": {
+    ".": {
+      "import": "./dist/altcha.js",
+      "require": "./dist/altcha.umd.cjs"
+    }
+  },
+  "scripts": {
+    "dev": "vite",
+    "build": "rimraf dist && vite build && echo \"declare module 'altcha';\" > dist/altcha.d.ts",
+    "preview": "vite preview",
+    "check": "svelte-check --tsconfig ./tsconfig.json",
+    "test": "vitest"
+  },
+  "devDependencies": {
+    "@sveltejs/vite-plugin-svelte": "^2.4.2",
+    "@tsconfig/svelte": "^5.0.0",
+    "body-parser": "^1.20.2",
+    "cors": "^2.8.5",
+    "express": "^4.18.2",
+    "svelte": "^4.0.5",
+    "svelte-check": "^3.4.6",
+    "tslib": "^2.6.0",
+    "typescript": "^5.0.2",
+    "vite": "^4.4.5",
+    "vitest": "^0.34.6"
+  }
+}