altcha 2.2.4 → 2.3.0

package/README.md

@@ -9,6 +9,16 @@ ALTCHA is fully compliant with:
 
 For more details, visit [altcha.org](https://altcha.org).
 
+> [!NOTE]
+> **Breaking change (v2.3.0)**
+>
+> As of version **2.3.0**, the obfuscation and other plugins have been removed from the main package and moved to a separate package: `@altcha/plugins`.
+>
+> If you do not use any plugins, no changes are required.
+>
+> See the [migration guide for v2.3.0](https://github.com/altcha-org/altcha/blob/main/MIGRATION-v2.3.0.md).
+
+
 ## Features
 
 - **Frictionless Experience**: Uses proof-of-work (PoW) instead of visual puzzles for a seamless user experience.
@@ -60,7 +70,7 @@ Explore starter templates for popular frameworks:
 
 ## Plugins & CMS
 
-- [Libraries and plugins](https://altcha.org/docs/integrations/)
+- [Libraries and plugins](https://altcha.org/docs/v2/libraries/)
 
 ## Usage
 
@@ -103,11 +113,11 @@ Or load via `<script>` tag:
 </form>
 ```
 
-See [configuration options](#configuration) or the [website integration docs](https://altcha.org/docs/website-integration).
+See [configuration options](#configuration) or the [website integration docs](https://altcha.org/docs/v2/widget-integration).
 
 ### 3. Integrate with Your Server
 
-Refer to the [server documentation](https://altcha.org/docs/server-integration) for implementation details.
+Refer to the [server documentation](https://altcha.org/docs/v2/server-integration) for implementation details.
 
 ## Supported Browsers
 
@@ -141,7 +151,7 @@ When GZIPped, it totals about 30 kB, making ALTCHA’s widget about 90% smaller
 
 ## Content Security Policy (CSP)
 
-The default bundle includes styles and workers in a single file. For strict CSP compliance, use scripts from `/dist_external`. Learn more in the [documentation](https://altcha.org/docs/website-integration).
+The default bundle includes styles and workers in a single file. For strict CSP compliance, use scripts from `/dist_external`. Learn more in the [documentation](https://altcha.org/docs/v2/widget-integration).
 
 ## Configuration
 
@@ -172,14 +182,14 @@ Additional options:
 - **name**: Name of the hidden field containing the payload (defaults to "altcha").
 - **overlay**: Enables overlay UI mode (automatically sets `auto="onsubmit"`).
 - **overlaycontent**: CSS selector of the HTML element to display in the overlay modal before the widget.
-- **strings**: JSON-encoded translation strings. Refer to [customization](https://altcha.org/docs/widget-customization).
+- **strings**: JSON-encoded translation strings. Refer to [customization](https://altcha.org/docs/v2/widget-customization).
 - **verifyurl**: URL for server-side verification requests. This option is automatically configured with Sentinel. Override this setting only if using a custom server implementation. Supports `fn:function_name` format to call a global JS function instead.
 - **workers**: Number of workers to utilize for PoW (defaults to `navigator.hardwareConcurrency || 8`, max value `16`).
 - **workerurl**: URL of the Worker script (defaults to `./worker.js`, only works with `external` build).
 
 Data Obfuscation options:
 
-- **obfuscated**: The [obfuscated data](https://altcha.org/docs/obfuscation) provided as a base64-encoded string (requires `altcha/obfuscation` plugin). Use only without `challengeurl`/`challengejson`.
+- **obfuscated**: The [obfuscated data](https://altcha.org/docs/v2/obfuscation) provided as a base64-encoded string (requires `altcha/obfuscation` plugin). Use only without `challengeurl`/`challengejson`.
 
 Development / Testing options:
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "altcha",
   "description": "Privacy-first CAPTCHA widget, compliant with global regulations (GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL) and WCAG accessible. No tracking, self-verifying.",
-  "version": "2.2.4",
+  "version": "2.3.0",
   "license": "MIT",
   "author": {
     "name": "Daniel Regeci",
@@ -37,7 +37,6 @@
   "files": [
     "dist",
     "dist_external",
-    "dist_plugins",
     "dist_i18n"
   ],
   "main": "./dist/altcha.umd.cjs",
@@ -52,18 +51,6 @@
       "import": "./dist_external/altcha.css",
       "require": "./dist_external/altcha.css"
     },
-    "./analytics": {
-      "import": "./dist_plugins/analytics.js",
-      "require": "./dist_plugins/analytics.umd.cjs"
-    },
-    "./obfuscation": {
-      "import": "./dist_plugins/obfuscation.js",
-      "require": "./dist_plugins/obfuscation.umd.cjs"
-    },
-    "./upload": {
-      "import": "./dist_plugins/upload.js",
-      "require": "./dist_plugins/upload.umd.cjs"
-    },
     "./external": {
       "import": "./dist_external/altcha.js",
       "require": "./dist_external/altcha.umd.cjs"
@@ -83,16 +70,15 @@
   },
   "scripts": {
     "dev": "vite",
-    "build": "npm run build:bundle && npm run build:external && npm run build:plugins && npm run build:i18n",
+    "build": "npm run build:bundle && npm run build:external && npm run build:i18n",
     "build:bundle": "rimraf dist && vite build && vite build -c vite.bundle-i18n.config.ts && cp src/declarations.d.ts dist/altcha.d.ts && cp src/declarations.d.ts dist/altcha.i18n.d.ts",
     "build:external": "rimraf dist_external && vite build -c vite.external.config.ts && cp src/declarations.d.ts dist_external/altcha.d.ts",
-    "build:plugins": "rimraf dist_plugins && find src/plugins -type f -name '*.ts' | xargs -I {} vite build -c vite.plugins.config.ts -- {}",
     "build:i18n": "rimraf dist_i18n && find src/i18n -type f -name '*.ts' | xargs -I {} vite build -c vite.i18n.config.ts -- {}",
     "preview": "vite preview",
     "check": "svelte-check --tsconfig ./tsconfig.json",
     "format": "prettier --write ./src/**/*",
     "test": "vitest run tests/helpers.test.ts",
-    "test:e2e": "testcafe chrome,firefox e2e/altcha.fixture.ts --hostname localhost",
+    "test:e2e": "testcafe chrome e2e/altcha.fixture.ts --hostname localhost",
     "prepare": "husky"
   },
   "devDependencies": {

package/dist_plugins/analytics.d.ts

@@ -1 +0,0 @@
-declare module 'altcha/analytics';

package/dist_plugins/analytics.js

@@ -1,276 +0,0 @@
-new TextEncoder();
-function r() {
-  try {
-    return Intl.DateTimeFormat().resolvedOptions().timeZone;
-  } catch {
-  }
-}
-class n {
-  /**
-   * Constructs a new instance of the Plugin.
-   * 
-   * @param {PluginContext} context - The context provided to the plugin, containing necessary configurations and dependencies.
-   */
-  constructor(t) {
-    this.context = t;
-  }
-  /**
-   * A distinct name of the plugin. Every plugin must have it's own name.
-   */
-  static pluginName;
-  /**
-   * Registers a plugin class in the global `altchaPlugins` array.
-   * Ensures the plugin is added only once.
-   * 
-   * @param {new(context: PluginContext) => Plugin} cls - The plugin class to register.
-   */
-  static register(t) {
-    typeof globalThis.altchaPlugins != "object" && (globalThis.altchaPlugins = []), globalThis.altchaPlugins.includes(t) || globalThis.altchaPlugins.push(t);
-  }
-  /**
-   * Clean up resources when the plugin is destroyed.
-   * Override this method in subclasses to implement custom destruction logic.
-   */
-  destroy() {
-  }
-  /**
-   * Callback triggered when an error changes.
-   * Override this method in subclasses to handle error state changes.
-   * 
-   * @param {string | null} err - The error message or `null` if there's no error.
-   */
-  onErrorChange(t) {
-  }
-  /**
-   * Callback triggered when the plugin state changes.
-   * Override this method in subclasses to handle state changes.
-   * 
-   * @param {State} state - The new state of the plugin.
-   */
-  onStateChange(t) {
-  }
-}
-class a extends n {
-  static pluginName = "analytics";
-  // HTML form element associated with the plugin
-  #t;
-  // Session instance for tracking analytics data
-  #e;
-  // Bound method for form submission handling
-  #i = this.#s.bind(this);
-  /**
-   * Creates an instance of PluginAnalytics.
-   *
-   * @param {PluginContext} context - The context object containing plugin configurations.
-   */
-  constructor(t) {
-    if (super(t), this.#t = this.context.el.closest("form"), this.#t) {
-      let e = this.#t.getAttribute("data-beacon-url");
-      const i = this.#t.getAttribute("action");
-      !e && i && (e = i + "/beacon"), this.#t.addEventListener("submit", this.#i), this.#e = new h(this.#t, e);
-    }
-  }
-  /**
-   * Destroys the plugin instance, removing event listeners and cleaning up the session.
-   */
-  destroy() {
-    this.#t?.removeEventListener("submit", this.#i), this.#e?.destroy();
-  }
-  /**
-   * Tracks errors by forwarding them to the session instance.
-   *
-   * @param {string | null} err - The error message, or `null` if no error exists.
-   */
-  onErrorChange(t) {
-    this.#e?.trackError(t);
-  }
-  /**
-   * Handles form submission events, appending session data to the form if applicable.
-   */
-  #s() {
-    if (this.#e && !this.#e.submitTime) {
-      this.#e.end();
-      const t = this.#e.dataAsBase64();
-      this.context.dispatch("session", t);
-      const e = document.createElement("input");
-      e.type = "hidden", e.name = "__session", e.value = t, this.#t?.appendChild(e);
-    }
-  }
-}
-class h {
-  /**
-   * Creates a new Session instance.
-   *
-   * @param {HTMLFormElement} elForm - The form element being tracked.
-   * @param {string | null} [beaconUrl=null] - The URL to send analytics data to.
-   */
-  constructor(t, e = null) {
-    this.elForm = t, this.beaconUrl = e, window.addEventListener("unload", this.#n), this.elForm.addEventListener("change", this.#i), this.elForm.addEventListener("focusin", this.#s);
-  }
-  // Error message associated with the session
-  error = null;
-  // Timestamp when the form was loaded
-  loadTime = Date.now();
-  // Timestamp when the form was submitted
-  submitTime = null;
-  // Timestamp when the user started interacting with the form
-  startTime = null;
-  // Minimum time in milliseconds required to consider the form "viewed"
-  viewTimeThresholdMs = 1500;
-  // Tracks the number of changes made to each form field
-  #t = {};
-  // Name of the last input field focused by the user
-  #e = null;
-  // Bound method for handling form change events
-  #i = this.onFormChange.bind(this);
-  // Bound method for handling form focus events
-  #s = this.onFormFocus.bind(this);
-  // Bound method for handling the unload event
-  #n = this.onUnload.bind(this);
-  /**
-   * Collects and returns analytics data about the form interaction.
-   *
-   * @returns {Record<string, unknown>} - An object containing analytics data.
-   */
-  data() {
-    const t = Object.entries(this.#t);
-    return {
-      correction: t.length && t.filter(([e, i]) => i > 1).length / t.length || 0,
-      dropoff: !this.submitTime && !this.error && this.#e ? this.#e : null,
-      error: this.error,
-      mobile: this.isMobile(),
-      start: this.startTime,
-      submit: this.submitTime,
-      tz: r()
-    };
-  }
-  /**
-   * Encodes the session data as a base64 string.
-   *
-   * @returns {string} - The base64-encoded session data.
-   */
-  dataAsBase64() {
-    try {
-      return btoa(JSON.stringify(this.data()));
-    } catch (t) {
-      console.error("failed to encode ALTCHA session data to base64", t);
-    }
-    return "";
-  }
-  /**
-   * Destroys the session, removing event listeners.
-   */
-  destroy() {
-    window.removeEventListener("unload", this.#n), this.elForm.removeEventListener("change", this.#i), this.elForm.removeEventListener("focusin", this.#s);
-  }
-  /**
-   * Marks the session as ended by recording the submission time.
-   */
-  end() {
-    this.submitTime || (this.submitTime = Date.now());
-  }
-  /**
-   * Retrieves the name of a form field, including a group label if available.
-   *
-   * @param {HTMLInputElement} el - The input element.
-   * @param {number} [maxLength=40] - The maximum length of the field name.
-   * @returns {string} - The field name, truncated to `maxLength` if necessary.
-   */
-  getFieldName(t, e = 40) {
-    const i = t.getAttribute("data-group-label"), o = t.getAttribute("name") || t.getAttribute("aria-label");
-    return ((i ? i + ": " : "") + o).slice(0, e);
-  }
-  /**
-   * Determines if the current device is a mobile device.
-   *
-   * @returns {boolean} - `true` if the device is mobile, otherwise `false`.
-   */
-  isMobile() {
-    const t = "userAgentData" in navigator && navigator.userAgentData ? navigator.userAgentData : {};
-    return "mobile" in t ? t.mobile === !0 : /Mobi/i.test(window.navigator.userAgent);
-  }
-  /**
-   * Checks if a given element is an input element (input, select, or textarea).
-   *
-   * @param {HTMLElement} el - The element to check.
-   * @returns {boolean} - `true` if the element is an input, otherwise `false`.
-   */
-  isInput(t) {
-    return ["INPUT", "SELECT", "TEXTAREA"].includes(t.tagName);
-  }
-  /**
-   * Tracks changes to a specific form field.
-   *
-   * @param {HTMLInputElement} el - The input element that changed.
-   */
-  onFormFieldChange(t) {
-    const e = this.getFieldName(t);
-    e && this.trackFieldChange(e);
-  }
-  /**
-   * Handles form change events, tracking changes to input fields.
-   *
-   * @param {Event} ev - The change event.
-   */
-  onFormChange(t) {
-    const e = t.target;
-    e && this.isInput(e) && this.onFormFieldChange(e);
-  }
-  /**
-   * Handles form focus events, marking the session start time and tracking the last focused field.
-   *
-   * @param {FocusEvent} ev - The focus event.
-   */
-  onFormFocus(t) {
-    const e = t.target;
-    if (this.startTime || this.start(), e && this.isInput(e)) {
-      const i = this.getFieldName(e);
-      i && (this.#e = i);
-    }
-  }
-  /**
-   * Handles the window unload event, sending a beacon with session data if the form was viewed but not submitted.
-   */
-  onUnload() {
-    this.loadTime <= Date.now() - this.viewTimeThresholdMs && !this.submitTime && this.sendBeacon();
-  }
-  /**
-   * Sends a beacon with session data to the specified beacon URL.
-   */
-  async sendBeacon() {
-    if (this.beaconUrl && "sendBeacon" in navigator)
-      try {
-        navigator.sendBeacon(
-          new URL(this.beaconUrl, location.origin),
-          JSON.stringify(this.data())
-        );
-      } catch {
-      }
-  }
-  /**
-   * Marks the session as started by recording the start time.
-   */
-  start() {
-    this.startTime = Date.now();
-  }
-  /**
-   * Tracks an error associated with the session.
-   *
-   * @param {string | null} err - The error message, or `null` if no error exists.
-   */
-  trackError(t) {
-    this.error = t === null ? null : String(t);
-  }
-  /**
-   * Tracks a change to a specific form field.
-   *
-   * @param {string} name - The name of the form field.
-   */
-  trackFieldChange(t) {
-    this.#t[t] = (this.#t[t] || 0) + 1;
-  }
-}
-n.register(a);
-export {
-  a as PluginAnalytics
-};

package/dist_plugins/analytics.umd.cjs

@@ -1 +0,0 @@
-(function(s,n){typeof exports=="object"&&typeof module<"u"?n(exports):typeof define=="function"&&define.amd?define(["exports"],n):(s=typeof globalThis<"u"?globalThis:s||self,n(s["[name]"]={}))})(this,function(s){"use strict";new TextEncoder;function n(){try{return Intl.DateTimeFormat().resolvedOptions().timeZone}catch{}}class o{constructor(t){this.context=t}static pluginName;static register(t){typeof globalThis.altchaPlugins!="object"&&(globalThis.altchaPlugins=[]),globalThis.altchaPlugins.includes(t)||globalThis.altchaPlugins.push(t)}destroy(){}onErrorChange(t){}onStateChange(t){}}class r extends o{static pluginName="analytics";#t;#e;#i=this.#s.bind(this);constructor(t){if(super(t),this.#t=this.context.el.closest("form"),this.#t){let e=this.#t.getAttribute("data-beacon-url");const i=this.#t.getAttribute("action");!e&&i&&(e=i+"/beacon"),this.#t.addEventListener("submit",this.#i),this.#e=new h(this.#t,e)}}destroy(){this.#t?.removeEventListener("submit",this.#i),this.#e?.destroy()}onErrorChange(t){this.#e?.trackError(t)}#s(){if(this.#e&&!this.#e.submitTime){this.#e.end();const t=this.#e.dataAsBase64();this.context.dispatch("session",t);const e=document.createElement("input");e.type="hidden",e.name="__session",e.value=t,this.#t?.appendChild(e)}}}class h{constructor(t,e=null){this.elForm=t,this.beaconUrl=e,window.addEventListener("unload",this.#n),this.elForm.addEventListener("change",this.#i),this.elForm.addEventListener("focusin",this.#s)}error=null;loadTime=Date.now();submitTime=null;startTime=null;viewTimeThresholdMs=1500;#t={};#e=null;#i=this.onFormChange.bind(this);#s=this.onFormFocus.bind(this);#n=this.onUnload.bind(this);data(){const t=Object.entries(this.#t);return{correction:t.length&&t.filter(([e,i])=>i>1).length/t.length||0,dropoff:!this.submitTime&&!this.error&&this.#e?this.#e:null,error:this.error,mobile:this.isMobile(),start:this.startTime,submit:this.submitTime,tz:n()}}dataAsBase64(){try{return btoa(JSON.stringify(this.data()))}catch(t){console.error("failed to encode ALTCHA session data to base64",t)}return""}destroy(){window.removeEventListener("unload",this.#n),this.elForm.removeEventListener("change",this.#i),this.elForm.removeEventListener("focusin",this.#s)}end(){this.submitTime||(this.submitTime=Date.now())}getFieldName(t,e=40){const i=t.getAttribute("data-group-label"),l=t.getAttribute("name")||t.getAttribute("aria-label");return((i?i+": ":"")+l).slice(0,e)}isMobile(){const t="userAgentData"in navigator&&navigator.userAgentData?navigator.userAgentData:{};return"mobile"in t?t.mobile===!0:/Mobi/i.test(window.navigator.userAgent)}isInput(t){return["INPUT","SELECT","TEXTAREA"].includes(t.tagName)}onFormFieldChange(t){const e=this.getFieldName(t);e&&this.trackFieldChange(e)}onFormChange(t){const e=t.target;e&&this.isInput(e)&&this.onFormFieldChange(e)}onFormFocus(t){const e=t.target;if(this.startTime||this.start(),e&&this.isInput(e)){const i=this.getFieldName(e);i&&(this.#e=i)}}onUnload(){this.loadTime<=Date.now()-this.viewTimeThresholdMs&&!this.submitTime&&this.sendBeacon()}async sendBeacon(){if(this.beaconUrl&&"sendBeacon"in navigator)try{navigator.sendBeacon(new URL(this.beaconUrl,location.origin),JSON.stringify(this.data()))}catch{}}start(){this.startTime=Date.now()}trackError(t){this.error=t===null?null:String(t)}trackFieldChange(t){this.#t[t]=(this.#t[t]||0)+1}}o.register(r),s.PluginAnalytics=r,Object.defineProperty(s,Symbol.toStringTag,{value:"Module"})});

package/dist_plugins/obfuscation.d.ts

@@ -1 +0,0 @@
-declare module 'altcha/obfuscation';

package/dist_plugins/obfuscation.js

@@ -1,129 +0,0 @@
-class h {
-  /**
-   * Constructs a new instance of the Plugin.
-   * 
-   * @param {PluginContext} context - The context provided to the plugin, containing necessary configurations and dependencies.
-   */
-  constructor(t) {
-    this.context = t;
-  }
-  /**
-   * A distinct name of the plugin. Every plugin must have it's own name.
-   */
-  static pluginName;
-  /**
-   * Registers a plugin class in the global `altchaPlugins` array.
-   * Ensures the plugin is added only once.
-   * 
-   * @param {new(context: PluginContext) => Plugin} cls - The plugin class to register.
-   */
-  static register(t) {
-    typeof globalThis.altchaPlugins != "object" && (globalThis.altchaPlugins = []), globalThis.altchaPlugins.includes(t) || globalThis.altchaPlugins.push(t);
-  }
-  /**
-   * Clean up resources when the plugin is destroyed.
-   * Override this method in subclasses to implement custom destruction logic.
-   */
-  destroy() {
-  }
-  /**
-   * Callback triggered when an error changes.
-   * Override this method in subclasses to handle error state changes.
-   * 
-   * @param {string | null} err - The error message or `null` if there's no error.
-   */
-  onErrorChange(t) {
-  }
-  /**
-   * Callback triggered when the plugin state changes.
-   * Override this method in subclasses to handle state changes.
-   * 
-   * @param {State} state - The new state of the plugin.
-   */
-  onStateChange(t) {
-  }
-}
-var s = /* @__PURE__ */ ((e) => (e.CODE = "code", e.ERROR = "error", e.VERIFIED = "verified", e.VERIFYING = "verifying", e.UNVERIFIED = "unverified", e.EXPIRED = "expired", e))(s || {});
-class R extends h {
-  static pluginName = "obfuscation";
-  // The button element associated with revealing the obfuscated data
-  elButton;
-  // Bound method for handling button click events
-  #t = this.#e.bind(this);
-  /**
-   * Creates an instance of PluginObfuscation.
-   *
-   * @param {PluginContext} context - The context object containing plugin configurations.
-   */
-  constructor(t) {
-    super(t);
-    const i = t.el;
-    this.elButton = i.parentElement?.querySelector("[data-clarify-button]") || i.parentElement?.querySelector("button, a"), this.elButton && this.elButton.addEventListener("click", this.#t);
-  }
-  /**
-   * Destroys the plugin instance, removing event listeners.
-   */
-  destroy() {
-    this.elButton && this.elButton.removeEventListener("click", this.#t);
-  }
-  /**
-   * Handles the clarification process by decrypting the obfuscated data and rendering the clear text.
-   */
-  async clarify() {
-    const {
-      el: t,
-      getConfiguration: i,
-      getFloatingAnchor: n,
-      setFloatingAnchor: r,
-      reset: f,
-      solve: d,
-      setState: c
-    } = this.context, { delay: g, floating: m, maxnumber: p, obfuscated: u } = i();
-    if (this.elButton && !n() && r(this.elButton), !u) {
-      c(s.ERROR);
-      return;
-    }
-    f(s.VERIFYING), await new Promise((l) => setTimeout(l, g || 0));
-    const [E, y] = u.split("?");
-    let o = new URLSearchParams(y || "").get("key") || void 0;
-    if (o) {
-      const l = o.match(/^\(prompt:?(.*)\)$/);
-      l && (o = prompt(l[1] || "Enter Key:") || void 0);
-    }
-    const { solution: a } = await d({
-      obfuscated: E,
-      key: o,
-      maxnumber: p
-    });
-    a && "clearText" in a ? (this.#i(a.clearText), c(s.VERIFIED), this.context.dispatch("cleartext", a.clearText), m && t && (t.style.display = "none")) : c(s.ERROR, "Unable to decrypt data.");
-  }
-  /**
-   * Handles the button click event, triggering the clarification process.
-   *
-   * @param {Event} ev - The click event.
-   */
-  #e(t) {
-    t.preventDefault();
-    const { auto: i } = this.context.getConfiguration();
-    i === "off" || this.clarify();
-  }
-  /**
-   * Renders the clear text data by creating an appropriate element (e.g., a link or text node).
-   *
-   * @param {string} clearText - The decrypted clear text data to render.
-   */
-  #i(t) {
-    const i = t.match(/^(mailto|tel|sms|https?):/);
-    let n;
-    if (i) {
-      const [r] = t.slice(t.indexOf(":") + 1).replace(/^\/\//, "").split("?");
-      n = document.createElement("a"), n.href = t, n.innerHTML = r;
-    } else
-      n = document.createTextNode(t);
-    this.elButton && n && (this.elButton.after(n), this.elButton.parentElement?.removeChild(this.elButton));
-  }
-}
-h.register(R);
-export {
-  R as PluginObfuscation
-};

package/dist_plugins/obfuscation.umd.cjs

@@ -1 +0,0 @@
-(function(o,s){typeof exports=="object"&&typeof module<"u"?s(exports):typeof define=="function"&&define.amd?define(["exports"],s):(o=typeof globalThis<"u"?globalThis:o||self,s(o["[name]"]={}))})(this,function(o){"use strict";class s{constructor(t){this.context=t}static pluginName;static register(t){typeof globalThis.altchaPlugins!="object"&&(globalThis.altchaPlugins=[]),globalThis.altchaPlugins.includes(t)||globalThis.altchaPlugins.push(t)}destroy(){}onErrorChange(t){}onStateChange(t){}}var a=(e=>(e.CODE="code",e.ERROR="error",e.VERIFIED="verified",e.VERIFYING="verifying",e.UNVERIFIED="unverified",e.EXPIRED="expired",e))(a||{});class h extends s{static pluginName="obfuscation";elButton;#t=this.#e.bind(this);constructor(t){super(t);const i=t.el;this.elButton=i.parentElement?.querySelector("[data-clarify-button]")||i.parentElement?.querySelector("button, a"),this.elButton&&this.elButton.addEventListener("click",this.#t)}destroy(){this.elButton&&this.elButton.removeEventListener("click",this.#t)}async clarify(){const{el:t,getConfiguration:i,getFloatingAnchor:n,setFloatingAnchor:u,reset:p,solve:m,setState:f}=this.context,{delay:g,floating:E,maxnumber:y,obfuscated:d}=i();if(this.elButton&&!n()&&u(this.elButton),!d){f(a.ERROR);return}p(a.VERIFYING),await new Promise(c=>setTimeout(c,g||0));const[b,R]=d.split("?");let l=new URLSearchParams(R||"").get("key")||void 0;if(l){const c=l.match(/^\(prompt:?(.*)\)$/);c&&(l=prompt(c[1]||"Enter Key:")||void 0)}const{solution:r}=await m({obfuscated:b,key:l,maxnumber:y});r&&"clearText"in r?(this.#i(r.clearText),f(a.VERIFIED),this.context.dispatch("cleartext",r.clearText),E&&t&&(t.style.display="none")):f(a.ERROR,"Unable to decrypt data.")}#e(t){t.preventDefault();const{auto:i}=this.context.getConfiguration();i==="off"||this.clarify()}#i(t){const i=t.match(/^(mailto|tel|sms|https?):/);let n;if(i){const[u]=t.slice(t.indexOf(":")+1).replace(/^\/\//,"").split("?");n=document.createElement("a"),n.href=t,n.innerHTML=u}else n=document.createTextNode(t);this.elButton&&n&&(this.elButton.after(n),this.elButton.parentElement?.removeChild(this.elButton))}}s.register(h),o.PluginObfuscation=h,Object.defineProperty(o,Symbol.toStringTag,{value:"Module"})});

package/dist_plugins/upload.d.ts

@@ -1 +0,0 @@
-declare module 'altcha/upload';

package/dist_plugins/upload.js

@@ -1,503 +0,0 @@
-const u = {
-  generateKey: v,
-  exportKey: S,
-  importKey: x,
-  decrypt: C,
-  encrypt: L
-};
-async function v(n = 256) {
-  return crypto.subtle.generateKey({
-    name: "AES-GCM",
-    length: n
-  }, !0, ["encrypt", "decrypt"]);
-}
-async function S(n) {
-  return new Uint8Array(await crypto.subtle.exportKey("raw", n));
-}
-async function x(n) {
-  return crypto.subtle.importKey("raw", n, {
-    name: "AES-GCM"
-  }, !0, ["encrypt", "decrypt"]);
-}
-async function L(n, e, t = 16) {
-  const r = crypto.getRandomValues(new Uint8Array(t));
-  return {
-    encrypted: new Uint8Array(await crypto.subtle.encrypt({
-      name: "AES-GCM",
-      iv: r
-    }, n, e)),
-    iv: r
-  };
-}
-async function C(n, e, t) {
-  return new Uint8Array(await crypto.subtle.decrypt({
-    name: "AES-GCM",
-    iv: t
-  }, n, e));
-}
-function I(n, e = !1) {
-  return e && (n = n.replace(/_/g, "/").replace(/-/g, "+") + "=".repeat(3 - (3 + n.length) % 4)), Uint8Array.from(atob(n), (t) => t.charCodeAt(0));
-}
-function h(n, e = !1) {
-  const t = btoa(String.fromCharCode(...n));
-  return e ? t.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "") : t;
-}
-function f(n, e = 80) {
-  let t = "";
-  for (; n.length > 0; )
-    t += n.slice(0, e) + `
-`, n = n.slice(e);
-  return t;
-}
-function g(n) {
-  return I(n.split(/\r?\n/).filter((e) => !e.startsWith("-----")).join(""));
-}
-const l = "RSA-OAEP", p = "SHA-256", N = 2048, z = new Uint8Array([1, 0, 1]), T = {
-  generateKeyPair: _,
-  encrypt: R,
-  decrypt: j,
-  exportPrivateKey: m,
-  exportPrivateKeyPem: H,
-  exportPublicKey: d,
-  exportPublicKeyPem: k,
-  exportPublicKeyFromPrivateKey: O,
-  importPrivateKey: E,
-  importPrivateKeyPem: q,
-  importPublicKey: w,
-  importPublicKeyPem: b
-};
-async function _() {
-  return crypto.subtle.generateKey({
-    name: l,
-    modulusLength: N,
-    publicExponent: z,
-    hash: p
-  }, !0, ["encrypt", "decrypt"]);
-}
-async function R(n, e) {
-  return new Uint8Array(await crypto.subtle.encrypt({
-    name: l
-  }, n, e));
-}
-async function j(n, e) {
-  return new Uint8Array(await crypto.subtle.decrypt({
-    name: l
-  }, n, e));
-}
-async function d(n) {
-  return new Uint8Array(await crypto.subtle.exportKey("spki", n));
-}
-async function m(n) {
-  return new Uint8Array(await crypto.subtle.exportKey("pkcs8", n));
-}
-async function k(n) {
-  return `-----BEGIN PUBLIC KEY-----
-` + f(h(await d(n)), 64) + "-----END PUBLIC KEY-----";
-}
-async function H(n) {
-  return `-----BEGIN PRIVATE KEY-----
-` + f(h(await m(n)), 64) + "-----END PRIVATE KEY-----";
-}
-async function w(n) {
-  return crypto.subtle.importKey("spki", n, {
-    name: l,
-    hash: p
-  }, !0, ["encrypt"]);
-}
-async function b(n) {
-  return w(g(n));
-}
-async function E(n) {
-  return crypto.subtle.importKey("pkcs8", n, {
-    name: l,
-    hash: p
-  }, !0, ["decrypt"]);
-}
-async function q(n) {
-  return E(g(n));
-}
-async function O(n) {
-  const e = await crypto.subtle.exportKey("jwk", n);
-  delete e.d, delete e.dp, delete e.dq, delete e.q, delete e.qi, e.key_ops = ["encrypt"];
-  const t = await crypto.subtle.importKey("jwk", e, {
-    name: l,
-    hash: p
-  }, !0, ["encrypt"]);
-  return d(t);
-}
-const $ = new Uint8Array([1, 0, 1]), B = 256, G = 16;
-async function M(n, e, t = {}) {
-  const { aesIVLength: r = G, aesKeyLength: i = B } = t, s = await u.generateKey(i), { encrypted: o, iv: a } = await u.encrypt(s, e, r), c = await T.encrypt(n, await u.exportKey(s));
-  return new Uint8Array([
-    ...$,
-    ...new Uint8Array([c.length]),
-    ...new Uint8Array([a.length]),
-    ...c,
-    ...a,
-    ...o
-  ]);
-}
-class U {
-  /**
-   * Constructs a new instance of the Plugin.
-   * 
-   * @param {PluginContext} context - The context provided to the plugin, containing necessary configurations and dependencies.
-   */
-  constructor(e) {
-    this.context = e;
-  }
-  /**
-   * A distinct name of the plugin. Every plugin must have it's own name.
-   */
-  static pluginName;
-  /**
-   * Registers a plugin class in the global `altchaPlugins` array.
-   * Ensures the plugin is added only once.
-   * 
-   * @param {new(context: PluginContext) => Plugin} cls - The plugin class to register.
-   */
-  static register(e) {
-    typeof globalThis.altchaPlugins != "object" && (globalThis.altchaPlugins = []), globalThis.altchaPlugins.includes(e) || globalThis.altchaPlugins.push(e);
-  }
-  /**
-   * Clean up resources when the plugin is destroyed.
-   * Override this method in subclasses to implement custom destruction logic.
-   */
-  destroy() {
-  }
-  /**
-   * Callback triggered when an error changes.
-   * Override this method in subclasses to handle error state changes.
-   * 
-   * @param {string | null} err - The error message or `null` if there's no error.
-   */
-  onErrorChange(e) {
-  }
-  /**
-   * Callback triggered when the plugin state changes.
-   * Override this method in subclasses to handle state changes.
-   * 
-   * @param {State} state - The new state of the plugin.
-   */
-  onStateChange(e) {
-  }
-}
-class Y extends U {
-  static pluginName = "upload";
-  pendingFiles = [];
-  uploadHandles = [];
-  elForm;
-  #e = this.#c.bind(this);
-  #t = this.#l.bind(this);
-  /**
-   * Constructor initializes the plugin, setting up event listeners on the form.
-   *
-   * @param {PluginContext} context - Plugin context providing access to the element, configuration, and utility methods.
-   */
-  constructor(e) {
-    super(e), this.elForm = this.context.el.closest("form"), this.elForm && (this.elForm.addEventListener("change", this.#e), this.elForm.addEventListener("submit", this.#t, {
-      capture: !0
-    }));
-  }
-  /**
-   * Adds a file to the pending files list for upload.
-   *
-   * @param {string} fieldName - The field name associated with the file input.
-   * @param {File} file - The file to be uploaded.
-   */
-  addFile(e, t) {
-    this.pendingFiles.find(([r, i]) => r === e && i === t) || this.pendingFiles.push([e, t]);
-  }
-  /**
-   * Cleans up event listeners and other resources when the plugin is destroyed.
-   */
-  destroy() {
-    this.elForm && (this.elForm.removeEventListener("change", this.#e), this.elForm.removeEventListener("submit", this.#t));
-  }
-  /**
-   * Uploads all pending files in the list.
-   */
-  async uploadPendingFiles() {
-    const e = async () => {
-      const t = this.pendingFiles[0];
-      if (t && await this.#r(this.#s(t)), this.pendingFiles.length)
-        return e();
-    };
-    try {
-      await e();
-    } catch (t) {
-      return this.context.log("upload failed", t), this.context.dispatch("uploaderror", {
-        error: t
-      }), !1;
-    }
-    this.pendingFiles.length === 0 && (this.#i(), this.elForm?.requestSubmit());
-  }
-  /**
-   * Adds hidden input fields to the form containing the file IDs of uploaded files.
-   */
-  #i() {
-    const e = this.uploadHandles.reduce(
-      (t, r) => (t[r.fieldName] || (t[r.fieldName] = []), r.fileId && t[r.fieldName].push(r.fileId), t),
-      {}
-    );
-    for (const t in e) {
-      const r = document.createElement("input");
-      r.name = t, r.type = "hidden", r.value = e[t].join(","), this.elForm?.querySelector(`[name="${t}"]`)?.setAttribute("disabled", "disabled"), this.elForm?.appendChild(r);
-    }
-  }
-  /**
-   * Creates an upload handle for the specified pending file.
-   *
-   * @param {[string, File]} pendingFile - The field name and file to be uploaded.
-   * @returns {UploadHandle} The created upload handle.
-   * @throws Will throw an error if the upload handle cannot be created.
-   */
-  #s(e) {
-    const t = this.pendingFiles.findIndex(
-      ([i, s]) => i === e[0] && s === e[1]
-    );
-    if (t < 0)
-      throw new Error("Cannot create upload handle.");
-    const r = new D(e[0], e[1]);
-    return this.uploadHandles.push(r), this.pendingFiles.splice(t, 1), this.#o(r), this.#n(), r;
-  }
-  /**
-   * Dispatches a custom event when a file upload starts.
-   *
-   * @param {UploadHandle} handle - The upload handle associated with the file upload.
-   */
-  #o(e) {
-    this.context.dispatch("upload", { handle: e });
-  }
-  /**
-   * Dispatches a custom event to track the progress of ongoing file uploads.
-   */
-  #n() {
-    const e = this.pendingFiles.reduce((r, [i, s]) => r + s.size, 0) + this.uploadHandles.reduce((r, { uploadSize: i }) => r + i, 0), t = this.uploadHandles.reduce(
-      (r, { loaded: i }) => r + i,
-      0
-    );
-    this.context.dispatch("uploadprogress", {
-      bytesLoaded: t,
-      bytesTotal: e,
-      pendingFiles: this.pendingFiles,
-      uploadHandles: this.uploadHandles
-    });
-  }
-  /**
-   * Retrieves the upload URL from the form's attributes.
-   *
-   * @returns {string | null} The upload URL, or null if not found.
-   */
-  #a() {
-    if (this.elForm) {
-      const e = this.elForm.getAttribute("action"), t = this.elForm.getAttribute("data-upload-url");
-      if (t)
-        return t;
-      const r = new URL(e || location.origin);
-      return r.pathname = r.pathname + "/file", r.toString();
-    }
-    return null;
-  }
-  /**
-   * Handles the form's change event, adding files to the pending files list.
-   *
-   * @param {Event} ev - The change event.
-   */
-  #c(e) {
-    const t = e.target;
-    if (t && t.type === "file") {
-      const r = t.files;
-      if (r?.length)
-        for (const i of r)
-          this.addFile(t.name, i);
-    }
-  }
-  /**
-   * Handles the form's submit event, preventing submission until all pending files are uploaded.
-   *
-   * @param {SubmitEvent} ev - The submit event.
-   */
-  #l(e) {
-    e.target?.hasAttribute(
-      "data-code-challenge-form"
-    ) || this.pendingFiles.length && (e.preventDefault(), e.stopPropagation(), this.uploadPendingFiles());
-  }
-  /**
-   * Uploads a single file, handling encryption and ALTCHA challenges if necessary.
-   *
-   * @param {UploadHandle} handle - The upload handle associated with the file.
-   * @param {string} [altchaPayload] - The ALTCHA payload, if available.
-   * @returns {Promise<unknown>} A promise that resolves when the upload is complete.
-   * @throws Will throw an error if the upload fails or if an ALTCHA challenge cannot be solved.
-   */
-  async #r(e, t) {
-    const r = this.#a();
-    if (!r)
-      throw new Error("Upload url not specified.");
-    const i = {
-      "content-type": "application/json"
-    };
-    t && (i.authorization = "Altcha payload=" + t);
-    const s = await fetch(r, {
-      body: JSON.stringify({
-        name: e.file.name || "file",
-        size: e.file.size,
-        type: e.file.type || "application/octet-stream"
-      }),
-      credentials: "include",
-      headers: i,
-      method: "POST"
-    });
-    if (s.status === 401)
-      return this.#p(s, e);
-    if (s.status !== 200)
-      throw new Error(`Unexpected server response ${s.status}.`);
-    const o = await s.json();
-    let a = e.file;
-    if (o.encrypted && o.encryptionPublicKey) {
-      const c = await b(o.encryptionPublicKey), P = await new Response(
-        new ReadableStream({
-          async start(y) {
-            const A = e.file.stream().getReader();
-            for (; ; ) {
-              const { done: F, value: K } = await A.read();
-              if (F)
-                break;
-              y.enqueue(K);
-            }
-            y.close();
-          }
-        })
-      ).arrayBuffer();
-      a = await M(c, new Uint8Array(P));
-    }
-    return e.uploadSize = a instanceof Uint8Array ? a.byteLength : e.file.size, await this.#d(o.uploadUrl, e, a, {
-      "content-type": e.file.type || "application/octet-stream"
-    }), o.finalizeUrl && await this.#u(o.finalizeUrl, e.uploadSize), e.fileId = o.fileId, e.resolve({
-      encrypted: o.encrypted,
-      fileId: o.fileId
-    }), e.promise;
-  }
-  /**
-   * Handles ALTCHA challenges during file upload, solving the challenge and retrying the upload.
-   *
-   * @param {Response} resp - The response from the server containing the ALTCHA challenge.
-   * @param {UploadHandle} handle - The upload handle associated with the file.
-   * @returns {Promise<unknown>} A promise that resolves when the challenge is solved and the upload is complete.
-   * @throws Will throw an error if the challenge cannot be solved.
-   */
-  async #p(e, t) {
-    try {
-      const i = e.headers.get("www-authenticate")?.match(/challenge=(.*),/)?.[1];
-      if (!i)
-        throw new Error(
-          "Unable to retrieve altcha challenge from www-authenticate header."
-        );
-      const s = JSON.parse(i);
-      if (s && "challenge" in s) {
-        const { solution: o } = await this.context.solve(s);
-        if (o && "number" in o)
-          return this.#r(
-            t,
-            btoa(
-              JSON.stringify({
-                ...s,
-                number: o.number
-              })
-            )
-          );
-        throw new Error("Invalid challenge solution.");
-      }
-    } catch (r) {
-      throw this.context.log(r), new Error("Unable to solve altcha challenge for upload.");
-    }
-  }
-  /**
-   * Finalizes the file upload by sending a request to the server.
-   *
-   * @param {string} finalizeUrl - The URL to finalize the upload.
-   * @param {number} uploadSize - The size of the uploaded file.
-   */
-  async #u(e, t) {
-    const r = await fetch(e, {
-      body: JSON.stringify({
-        uploadedBytes: t
-      }),
-      headers: {
-        "content-type": "application/json"
-      },
-      method: "POST"
-    });
-    if (r.status > 204)
-      throw new Error(`Unexpected server response ${r.status}.`);
-    return !0;
-  }
-  /**
-   * Uploads the file's contents to the server using the PUT method.
-   *
-   * @param {string} url - The URL to upload the file to.
-   * @param {UploadHandle} handle - The upload handle associated with the file.
-   * @param {Uint8Array | File} body - The file's contents.
-   * @param {Record<string, string>} headers - Additional headers for the upload request.
-   */
-  async #d(e, t, r, i = {}) {
-    return e = new URL(
-      e,
-      this.elForm?.getAttribute("action") || location.origin
-    ).toString(), new Promise((s, o) => {
-      const a = new XMLHttpRequest();
-      t.controller.signal.addEventListener("abort", () => {
-        a.abort();
-      }), a.upload.addEventListener("progress", (c) => {
-        t.setProgress(c.loaded), this.#n();
-      }), a.addEventListener("error", (c) => {
-        o(new Error("Upload failed."));
-      }), a.addEventListener("load", () => {
-        a.status >= 400 ? o(new Error(`Server responded with ${a.status}`)) : s(void 0);
-      }), a.open("PUT", e);
-      for (const c in i)
-        a.setRequestHeader(c, i[c]);
-      a.send(r);
-    });
-  }
-}
-class D {
-  /**
-   * Creates an instance of UploadHandle.
-   *
-   * @param {string} fieldName - The name of the field associated with the file upload.
-   * @param {File} file - The file to be uploaded.
-   */
-  constructor(e, t) {
-    this.fieldName = e, this.file = t, this.uploadSize = this.file.size, this.promise = new Promise((r, i) => {
-      this.resolve = r, this.reject = i;
-    });
-  }
-  controller = new AbortController();
-  promise;
-  fileId;
-  loaded = 0;
-  progress = 0;
-  uploadSize = 0;
-  resolve;
-  reject;
-  /**
-   * Aborts the file upload by invoking the AbortController's abort method.
-   */
-  abort() {
-    this.controller.abort();
-  }
-  /**
-   * Updates the progress of the file upload.
-   *
-   * @param {number} loaded - The number of bytes that have been uploaded.
-   */
-  setProgress(e) {
-    this.loaded = e, this.progress = this.file.size && e ? Math.min(1, e / this.file.size) : 0;
-  }
-}
-U.register(Y);
-export {
-  Y as PluginUpload
-};

package/dist_plugins/upload.umd.cjs

@@ -1,4 +0,0 @@
-(function(p,l){typeof exports=="object"&&typeof module<"u"?l(exports):typeof define=="function"&&define.amd?define(["exports"],l):(p=typeof globalThis<"u"?globalThis:p||self,l(p["[name]"]={}))})(this,function(p){"use strict";const l={generateKey:F,exportKey:K,importKey:v,decrypt:x,encrypt:S};async function F(n=256){return crypto.subtle.generateKey({name:"AES-GCM",length:n},!0,["encrypt","decrypt"])}async function K(n){return new Uint8Array(await crypto.subtle.exportKey("raw",n))}async function v(n){return crypto.subtle.importKey("raw",n,{name:"AES-GCM"},!0,["encrypt","decrypt"])}async function S(n,e,t=16){const r=crypto.getRandomValues(new Uint8Array(t));return{encrypted:new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:r},n,e)),iv:r}}async function x(n,e,t){return new Uint8Array(await crypto.subtle.decrypt({name:"AES-GCM",iv:t},n,e))}function L(n,e=!1){return e&&(n=n.replace(/_/g,"/").replace(/-/g,"+")+"=".repeat(3-(3+n.length)%4)),Uint8Array.from(atob(n),t=>t.charCodeAt(0))}function h(n,e=!1){const t=btoa(String.fromCharCode(...n));return e?t.replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""):t}function f(n,e=80){let t="";for(;n.length>0;)t+=n.slice(0,e)+`
-`,n=n.slice(e);return t}function m(n){return L(n.split(/\r?\n/).filter(e=>!e.startsWith("-----")).join(""))}const u="RSA-OAEP",d="SHA-256",C=2048,I=new Uint8Array([1,0,1]),T={generateKeyPair:N,encrypt:z,decrypt:j,exportPrivateKey:g,exportPrivateKeyPem:R,exportPublicKey:y,exportPublicKeyPem:_,exportPublicKeyFromPrivateKey:H,importPrivateKey:E,importPrivateKeyPem:k,importPublicKey:w,importPublicKeyPem:b};async function N(){return crypto.subtle.generateKey({name:u,modulusLength:C,publicExponent:I,hash:d},!0,["encrypt","decrypt"])}async function z(n,e){return new Uint8Array(await crypto.subtle.encrypt({name:u},n,e))}async function j(n,e){return new Uint8Array(await crypto.subtle.decrypt({name:u},n,e))}async function y(n){return new Uint8Array(await crypto.subtle.exportKey("spki",n))}async function g(n){return new Uint8Array(await crypto.subtle.exportKey("pkcs8",n))}async function _(n){return`-----BEGIN PUBLIC KEY-----
-`+f(h(await y(n)),64)+"-----END PUBLIC KEY-----"}async function R(n){return`-----BEGIN PRIVATE KEY-----
-`+f(h(await g(n)),64)+"-----END PRIVATE KEY-----"}async function w(n){return crypto.subtle.importKey("spki",n,{name:u,hash:d},!0,["encrypt"])}async function b(n){return w(m(n))}async function E(n){return crypto.subtle.importKey("pkcs8",n,{name:u,hash:d},!0,["decrypt"])}async function k(n){return E(m(n))}async function H(n){const e=await crypto.subtle.exportKey("jwk",n);delete e.d,delete e.dp,delete e.dq,delete e.q,delete e.qi,e.key_ops=["encrypt"];const t=await crypto.subtle.importKey("jwk",e,{name:u,hash:d},!0,["encrypt"]);return y(t)}const O=new Uint8Array([1,0,1]),q=256,M=16;async function $(n,e,t={}){const{aesIVLength:r=M,aesKeyLength:i=q}=t,s=await l.generateKey(i),{encrypted:o,iv:a}=await l.encrypt(s,e,r),c=await T.encrypt(n,await l.exportKey(s));return new Uint8Array([...O,...new Uint8Array([c.length]),...new Uint8Array([a.length]),...c,...a,...o])}class P{constructor(e){this.context=e}static pluginName;static register(e){typeof globalThis.altchaPlugins!="object"&&(globalThis.altchaPlugins=[]),globalThis.altchaPlugins.includes(e)||globalThis.altchaPlugins.push(e)}destroy(){}onErrorChange(e){}onStateChange(e){}}class U extends P{static pluginName="upload";pendingFiles=[];uploadHandles=[];elForm;#e=this.#c.bind(this);#t=this.#l.bind(this);constructor(e){super(e),this.elForm=this.context.el.closest("form"),this.elForm&&(this.elForm.addEventListener("change",this.#e),this.elForm.addEventListener("submit",this.#t,{capture:!0}))}addFile(e,t){this.pendingFiles.find(([r,i])=>r===e&&i===t)||this.pendingFiles.push([e,t])}destroy(){this.elForm&&(this.elForm.removeEventListener("change",this.#e),this.elForm.removeEventListener("submit",this.#t))}async uploadPendingFiles(){const e=async()=>{const t=this.pendingFiles[0];if(t&&await this.#r(this.#s(t)),this.pendingFiles.length)return e()};try{await e()}catch(t){return this.context.log("upload failed",t),this.context.dispatch("uploaderror",{error:t}),!1}this.pendingFiles.length===0&&(this.#i(),this.elForm?.requestSubmit())}#i(){const e=this.uploadHandles.reduce((t,r)=>(t[r.fieldName]||(t[r.fieldName]=[]),r.fileId&&t[r.fieldName].push(r.fileId),t),{});for(const t in e){const r=document.createElement("input");r.name=t,r.type="hidden",r.value=e[t].join(","),this.elForm?.querySelector(`[name="${t}"]`)?.setAttribute("disabled","disabled"),this.elForm?.appendChild(r)}}#s(e){const t=this.pendingFiles.findIndex(([i,s])=>i===e[0]&&s===e[1]);if(t<0)throw new Error("Cannot create upload handle.");const r=new B(e[0],e[1]);return this.uploadHandles.push(r),this.pendingFiles.splice(t,1),this.#o(r),this.#n(),r}#o(e){this.context.dispatch("upload",{handle:e})}#n(){const e=this.pendingFiles.reduce((r,[i,s])=>r+s.size,0)+this.uploadHandles.reduce((r,{uploadSize:i})=>r+i,0),t=this.uploadHandles.reduce((r,{loaded:i})=>r+i,0);this.context.dispatch("uploadprogress",{bytesLoaded:t,bytesTotal:e,pendingFiles:this.pendingFiles,uploadHandles:this.uploadHandles})}#a(){if(this.elForm){const e=this.elForm.getAttribute("action"),t=this.elForm.getAttribute("data-upload-url");if(t)return t;const r=new URL(e||location.origin);return r.pathname=r.pathname+"/file",r.toString()}return null}#c(e){const t=e.target;if(t&&t.type==="file"){const r=t.files;if(r?.length)for(const i of r)this.addFile(t.name,i)}}#l(e){e.target?.hasAttribute("data-code-challenge-form")||this.pendingFiles.length&&(e.preventDefault(),e.stopPropagation(),this.uploadPendingFiles())}async#r(e,t){const r=this.#a();if(!r)throw new Error("Upload url not specified.");const i={"content-type":"application/json"};t&&(i.authorization="Altcha payload="+t);const s=await fetch(r,{body:JSON.stringify({name:e.file.name||"file",size:e.file.size,type:e.file.type||"application/octet-stream"}),credentials:"include",headers:i,method:"POST"});if(s.status===401)return this.#p(s,e);if(s.status!==200)throw new Error(`Unexpected server response ${s.status}.`);const o=await s.json();let a=e.file;if(o.encrypted&&o.encryptionPublicKey){const c=await b(o.encryptionPublicKey),G=await new Response(new ReadableStream({async start(A){const Y=e.file.stream().getReader();for(;;){const{done:D,value:V}=await Y.read();if(D)break;A.enqueue(V)}A.close()}})).arrayBuffer();a=await $(c,new Uint8Array(G))}return e.uploadSize=a instanceof Uint8Array?a.byteLength:e.file.size,await this.#d(o.uploadUrl,e,a,{"content-type":e.file.type||"application/octet-stream"}),o.finalizeUrl&&await this.#u(o.finalizeUrl,e.uploadSize),e.fileId=o.fileId,e.resolve({encrypted:o.encrypted,fileId:o.fileId}),e.promise}async#p(e,t){try{const i=e.headers.get("www-authenticate")?.match(/challenge=(.*),/)?.[1];if(!i)throw new Error("Unable to retrieve altcha challenge from www-authenticate header.");const s=JSON.parse(i);if(s&&"challenge"in s){const{solution:o}=await this.context.solve(s);if(o&&"number"in o)return this.#r(t,btoa(JSON.stringify({...s,number:o.number})));throw new Error("Invalid challenge solution.")}}catch(r){throw this.context.log(r),new Error("Unable to solve altcha challenge for upload.")}}async#u(e,t){const r=await fetch(e,{body:JSON.stringify({uploadedBytes:t}),headers:{"content-type":"application/json"},method:"POST"});if(r.status>204)throw new Error(`Unexpected server response ${r.status}.`);return!0}async#d(e,t,r,i={}){return e=new URL(e,this.elForm?.getAttribute("action")||location.origin).toString(),new Promise((s,o)=>{const a=new XMLHttpRequest;t.controller.signal.addEventListener("abort",()=>{a.abort()}),a.upload.addEventListener("progress",c=>{t.setProgress(c.loaded),this.#n()}),a.addEventListener("error",c=>{o(new Error("Upload failed."))}),a.addEventListener("load",()=>{a.status>=400?o(new Error(`Server responded with ${a.status}`)):s(void 0)}),a.open("PUT",e);for(const c in i)a.setRequestHeader(c,i[c]);a.send(r)})}}class B{constructor(e,t){this.fieldName=e,this.file=t,this.uploadSize=this.file.size,this.promise=new Promise((r,i)=>{this.resolve=r,this.reject=i})}controller=new AbortController;promise;fileId;loaded=0;progress=0;uploadSize=0;resolve;reject;abort(){this.controller.abort()}setProgress(e){this.loaded=e,this.progress=this.file.size&&e?Math.min(1,e/this.file.size):0}}P.register(U),p.PluginUpload=U,Object.defineProperty(p,Symbol.toStringTag,{value:"Module"})});