altcha 2.3.0 → 3.0.0-beta.1

package/dist/workers/sha.js

@@ -0,0 +1,160 @@
+(function() {
+  "use strict";
+  class PasswordBuffer {
+    constructor(nonce, mode = "uint32") {
+      this.nonce = nonce;
+      this.mode = mode;
+      this.buffer = new Uint8Array(this.nonce.length + this.COUNTER_BYTES);
+      this.buffer.set(this.nonce, 0);
+      this.dataView = new DataView(this.buffer.buffer);
+    }
+    COUNTER_BYTES = 4;
+    buffer;
+    dataView;
+    encoder = new TextEncoder();
+    /**
+     * Appends the counter to the nonce buffer.
+     * In 'string' mode, encodes the counter as a UTF-8 string.
+     * In 'uint32' mode, writes the counter as a big-endian 32-bit integer.
+     */
+    setCounter(n) {
+      if (this.mode === "string") {
+        return concatBuffers(this.nonce, this.encoder.encode(n.toString()));
+      }
+      this.dataView.setUint32(this.nonce.length, n, false);
+      return this.buffer;
+    }
+  }
+  function bufferToHex(buffer) {
+    return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  function concatBuffers(a, b) {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+  }
+  function hexToBuffer(hex) {
+    if (hex.length % 2 !== 0) {
+      throw new Error(`Hex string must have an even length. Got: ${hex}`);
+    }
+    const buffer = new ArrayBuffer(hex.length / 2);
+    const view = new DataView(buffer);
+    for (let i = 0; i < hex.length; i += 2) {
+      const byteString = hex.substring(i, i + 2);
+      const byteValue = parseInt(byteString, 16);
+      view.setUint8(i / 2, byteValue);
+    }
+    return new Uint8Array(buffer);
+  }
+  async function solveChallenge(options) {
+    const {
+      challenge,
+      controller,
+      counterMode = "uint32",
+      counterStart = 0,
+      counterStep = 1,
+      deriveKey: deriveKey2,
+      timeout = 9e4
+    } = options;
+    let { nonce, keyPrefix, salt } = challenge.parameters;
+    const nonceBuf = hexToBuffer(nonce);
+    const saltBuf = hexToBuffer(salt);
+    const keyPrefixBuf = keyPrefix.length % 2 === 0 ? hexToBuffer(keyPrefix) : null;
+    const password = new PasswordBuffer(nonceBuf, counterMode);
+    const start = performance.now();
+    let counter = counterStart;
+    let derivedKeyHex = "";
+    let lastYield = start;
+    while (true) {
+      if (controller?.signal.aborted || timeout && counter % 10 === 0 && performance.now() - start > timeout) {
+        return null;
+      }
+      const { derivedKey } = await deriveKey2(
+        challenge.parameters,
+        saltBuf,
+        password.setCounter(counter)
+      );
+      if (counter % 10 === 0 && performance.now() - lastYield > 200) {
+        await delay(0);
+        lastYield = performance.now();
+      }
+      if (keyPrefixBuf ? bufferStartsWith(derivedKey, keyPrefixBuf) : bufferToHex(derivedKey).startsWith(keyPrefix)) {
+        derivedKeyHex = bufferToHex(derivedKey);
+        break;
+      }
+      counter = counter + counterStep;
+    }
+    return {
+      counter,
+      derivedKey: derivedKeyHex,
+      time: timeDuration(start)
+    };
+  }
+  function bufferStartsWith(buffer, prefix) {
+    if (prefix.length > buffer.length) {
+      return false;
+    }
+    for (let i = 0; i < prefix.length; i++) {
+      if (buffer[i] !== prefix[i]) {
+        return false;
+      }
+    }
+    return true;
+  }
+  async function delay(ms) {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+  }
+  function timeDuration(start) {
+    return Math.floor((performance.now() - start) * 10) / 10;
+  }
+  function handler(options) {
+    const { deriveKey: deriveKey2 } = options;
+    let controller = void 0;
+    self.onmessage = async (message) => {
+      const { challenge, counterMode, counterStart, counterStep, type } = message.data;
+      if (type === "abort") {
+        controller?.abort();
+      } else if (type === "work") {
+        controller = new AbortController();
+        let solution;
+        try {
+          solution = await solveChallenge({
+            challenge,
+            controller,
+            counterStart,
+            counterStep,
+            deriveKey: deriveKey2,
+            counterMode
+          });
+        } catch (err) {
+          return self.postMessage({ error: err });
+        }
+        self.postMessage(solution);
+      }
+    };
+  }
+  async function deriveKey(parameters, salt, password) {
+    const { algorithm, keyLength = 32 } = parameters;
+    const iterations = Math.max(1, parameters.cost);
+    let data = void 0;
+    let derivedKey = void 0;
+    for (let i = 0; i < iterations; i++) {
+      if (i === 0) {
+        data = concatBuffers(salt, password);
+      } else {
+        data = derivedKey;
+      }
+      derivedKey = new Uint8Array(
+        (await crypto.subtle.digest(algorithm, data)).slice(0, keyLength)
+      );
+    }
+    return {
+      parameters: {},
+      derivedKey
+    };
+  }
+  handler({
+    deriveKey
+  });
+})();

package/package.json

@@ -1,7 +1,7 @@
 {
-  "name": "altcha",
-  "description": "Privacy-first CAPTCHA widget, compliant with global regulations (GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL) and WCAG accessible. No tracking, self-verifying.",
-  "version": "2.3.0",
+	"name": "altcha",
+	"description": "Privacy-first CAPTCHA widget, compliant with global regulations (GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL) and WCAG accessible. No tracking, self-verifying.",
+	"version": "3.0.0-beta.1",
   "license": "MIT",
   "author": {
     "name": "Daniel Regeci",
@@ -12,7 +12,6 @@
     "type": "git",
     "url": "git+https://github.com/altcha-org/altcha.git"
   },
-  "type": "module",
   "keywords": [
     "altcha",
     "altcaptcha",
@@ -34,81 +33,116 @@
     "protection",
     "svelte"
   ],
-  "files": [
-    "dist",
-    "dist_external",
-    "dist_i18n"
-  ],
-  "main": "./dist/altcha.umd.cjs",
-  "module": "./dist/altcha.js",
-  "types": "./dist/altcha.d.ts",
-  "exports": {
-    ".": {
-      "import": "./dist/altcha.js",
-      "require": "./dist/altcha.umd.cjs"
-    },
-    "./altcha.css": {
-      "import": "./dist_external/altcha.css",
-      "require": "./dist_external/altcha.css"
-    },
-    "./external": {
-      "import": "./dist_external/altcha.js",
-      "require": "./dist_external/altcha.umd.cjs"
-    },
-    "./worker": {
-      "import": "./dist_external/worker.js",
-      "require": "./dist_external/worker.js"
-    },
-    "./i18n": {
-      "import": "./dist/altcha.i18n.js",
-      "require": "./dist/altcha.i18n.umd.cjs"
-    },
-    "./i18n/*": {
-      "import": "./dist_i18n/*.js",
-      "require": "./dist_i18n/*.umd.js"
-    }
-  },
-  "scripts": {
-    "dev": "vite",
-    "build": "npm run build:bundle && npm run build:external && npm run build:i18n",
-    "build:bundle": "rimraf dist && vite build && vite build -c vite.bundle-i18n.config.ts && cp src/declarations.d.ts dist/altcha.d.ts && cp src/declarations.d.ts dist/altcha.i18n.d.ts",
-    "build:external": "rimraf dist_external && vite build -c vite.external.config.ts && cp src/declarations.d.ts dist_external/altcha.d.ts",
-    "build:i18n": "rimraf dist_i18n && find src/i18n -type f -name '*.ts' | xargs -I {} vite build -c vite.i18n.config.ts -- {}",
-    "preview": "vite preview",
-    "check": "svelte-check --tsconfig ./tsconfig.json",
-    "format": "prettier --write ./src/**/*",
-    "test": "vitest run tests/helpers.test.ts",
-    "test:e2e": "testcafe chrome e2e/altcha.fixture.ts --hostname localhost",
-    "prepare": "husky"
-  },
-  "devDependencies": {
-    "@sveltejs/vite-plugin-svelte": "^6.2.1",
-    "@tsconfig/svelte": "^5.0.4",
-    "@types/csso": "^5.0.4",
-    "@types/node": "^20.16.3",
-    "@types/react": "^19.1.14",
-    "csso": "^5.0.5",
-    "husky": "^9.1.5",
-    "prettier": "3.2.5",
-    "prettier-plugin-svelte": "^3.2.6",
-    "rimraf": "^6.0.1",
-    "sass": "^1.77.8",
-    "svelte": "^5.28.6",
-    "svelte-check": "^4.0.0",
-    "testcafe": "^3.7.2",
-    "tslib": "^2.7.0",
-    "typescript": "^5.5.4",
-    "vite": "^7.1.7",
-    "vite-plugin-string": "^1.2.3",
-    "vitest": "^3.0.8"
-  },
-  "dependencies": {
-    "@altcha/crypto": "^0.0.1"
-  },
-  "optionalDependencies": {
-    "@rollup/rollup-linux-x64-gnu": "4.18.0"
-  },
-  "overrides": {
-    "tmp": "0.2.5"
-  }
+	"type": "module",
+	"files": [
+		"dist"
+	],
+	"main": "./dist/main/altcha.umd.cjs",
+	"module": "./dist/main/altcha.js",
+	"exports": {
+		".": {
+			"types": "./dist/types/generic.d.ts",
+			"import": "./dist/main/altcha.js",
+			"require": "./dist/main/altcha.umd.cjs"
+		},
+		"./altcha.css": {
+			"import": "./dist/external/altcha.css",
+			"require": "./dist/external/altcha.css"
+		},
+		"./external": {
+			"types": "./dist/external/index.d.ts",
+			"import": "./dist/external/altcha.js",
+			"require": "./dist/external/altcha.umd.cjs"
+		},
+		"./i18n": {
+			"types": "./dist/types/generic.d.ts",
+			"import": "./dist/main/altcha.i18n.js",
+			"require": "./dist/main/altcha.i18n.umd.cjs"
+		},
+		"./i18n/*": {
+			"types": "./dist/external/*.d.ts",
+			"import": "./dist/i18n/*.js",
+			"require": "./dist/i18n/*.umd.cjs"
+		},
+		"./lib": {
+			"types": "./dist/lib/index.d.ts",
+			"import": "./dist/lib/index.js",
+			"require": "./dist/lib/index.umd.cjs"
+		},
+		"./plugins/*": {
+			"types": "./dist/plugins/*.plugin.d.ts",
+			"import": "./dist/plugins/*.plugin.js",
+			"require": "./dist/plugins/*.plugin.umd.cjs"
+		},
+		"./themes/*": {
+			"import": "./dist/themes/*",
+			"require": "./dist/themes/*"
+		},
+		"./types": {
+			"types": "./dist/types/index.d.ts",
+			"import": "./dist/types/index.js"
+		},
+		"./types/*": {
+			"types": "./dist/types/*.d.ts",
+			"import": "./dist/types/*.js"
+		},
+		"./workers/*": {
+			"import": "./dist/workers/*.js"
+		}
+	},
+	"scripts": {
+		"dev": "vite -c vite.config.playground.ts",
+		"build": "npm run build:main && npm run build:external && npm run build:i18n && npm run build:plugins && npm run build:themes && npm run build:types && npm run build:lib",
+		"build:main": "rimraf dist/main && vite build && vite build --config vite.config.i18n-bundle.ts",
+		"build:external": "rimraf dist/external && vite build --config vite.config.external.ts",
+		"build:i18n": "rimraf dist/i18n && find src/i18n -type f -name '*.ts' | xargs -I {} vite build -c vite.config.i18n.ts -- {}",
+		"build:lib": "rimraf dist/lib && vite build -c vite.config.lib.ts && npm run build:lib:types",
+		"build:lib:types": "dts-bundle-generator --project tsconfig.lib.json -o dist/lib/index.d.ts src/entry-lib.ts",
+		"build:plugins": "rimraf dist/plugins && find src/plugins -type f -name '*.ts' -not -name 'base.plugin.ts' | xargs -I {} vite build -c vite.config.plugins.ts -- {}",
+		"build:themes": "rimraf dist/themes && vite build --config vite.config.themes.ts",
+		"build:types": "rimraf dist/types && tsc --declaration --target es6 --jsx react-jsx --skipLibCheck --moduleResolution bundler --outDir dist/types src/types/*.ts",
+		"build:playground": "rimraf dist_playground && vite build --config vite.config.playground.ts",
+		"preview": "vite preview",
+		"check": "svelte-check --tsconfig ./tsconfig.app.json && tsc -p tsconfig.node.json",
+		"lint": "prettier --check .",
+		"format": "prettier --write .",
+		"test": "vitest",
+		"test:e2e": "testcafe chrome e2e/**/*.fixture.ts --hostname localhost",
+		"prepare": "husky"
+	},
+	"devDependencies": {
+		"@rollup/plugin-terser": "^0.4.4",
+		"@sveltejs/vite-plugin-svelte": "^6.2.1",
+		"@tailwindcss/typography": "^0.5.19",
+		"@tailwindcss/vite": "^4.1.18",
+		"@tsconfig/svelte": "^5.0.6",
+		"@types/node": "^24.10.1",
+		"@types/react": "^19.2.10",
+		"@types/react-dom": "^19.2.3",
+		"cssnano": "^7.1.2",
+		"daisyui": "^5.5.14",
+		"dts-bundle-generator": "^9.5.1",
+		"glob": "^13.0.0",
+		"husky": "^9.1.7",
+		"prettier": "^3.8.1",
+		"prettier-plugin-svelte": "^3.4.1",
+		"prettier-plugin-tailwindcss": "^0.7.2",
+		"rimraf": "^6.1.2",
+		"sass-embedded": "^1.97.1",
+		"svelte": "^5.53.2",
+		"svelte-check": "^4.3.4",
+		"tailwindcss": "^4.1.18",
+		"terser": "^5.44.1",
+		"testcafe": "^3.7.4",
+		"typescript": "~5.9.3",
+		"vite": "^7.2.4",
+		"vite-plugin-markdown": "^2.2.0",
+		"vitest": "^4.0.18"
+	},
+	"dependencies": {
+		"hash-wasm": "^4.12.0"
+	},
+	"overrides": {
+		"minimatch": "10.2.2"
+	}
 }

package/dist/altcha.d.ts

@@ -1,183 +0,0 @@
-export {};
-
-declare module 'altcha';
-
-declare global {
-  var altchaCreateWorker: (url?: string) => Worker;
-  var altchaPlugins: any[];
-  var altchaI18n: {
-    get: (language: string) => Record<string, string>;
-    set: (language: string, translation: Record<string, string>) => void;
-    store: {
-      set(this: void, value: Record<string, Record<string, string>>): void;
-      update(
-        this: void,
-        updater: (
-          value: Record<string, Record<string, string>>
-        ) => Record<string, Record<string, string>>
-      ): void;
-      subscribe(
-        this: void,
-        run: (value: Record<string, Record<string, string>>) => void,
-        invalidate?: () => void
-      ): () => void;
-    };
-  };
-
-  type AltchaState =
-    | 'error'
-    | 'expired'
-    | 'verified'
-    | 'verifying'
-    | 'unverified';
-
-  interface AltchaStateChangeEvent
-    extends CustomEvent<{
-      payload?: string;
-      state: AltchaState;
-    }> {}
-
-  interface AltchaVerifiedEvent
-    extends CustomEvent<{
-      payload: string;
-    }> {}
-
-  interface AltchaServerVerificationEvent
-    extends CustomEvent<Record<string, unknown>> {}
-
-  interface AltchaWidgetOptions {
-    auto?: 'off' | 'onfocus' | 'onload' | 'onsubmit';
-    /** @deprecated */
-    blockspam?: boolean;
-    challengeurl?: string;
-    challengejson?: string;
-    credentials?: 'omit' | 'same-origin' | 'include' | boolean | undefined;
-    customfetch?:
-      | string
-      | ((url: string, init?: RequestInit) => Promise<Response>);
-    debug?: boolean;
-    delay?: number;
-    disableautofocus?: boolean;
-    disablerefetchonexpire?: boolean;
-    expire?: number;
-    floating?: 'auto' | 'top' | 'bottom' | 'false' | '' | boolean;
-    floatinganchor?: string;
-    floatingoffset?: number;
-    floatingpersist?: 'focus' | boolean;
-    hidefooter?: boolean;
-    hidelogo?: boolean;
-    id?: string;
-    language?: string;
-    maxnumber?: number;
-    mockerror?: boolean;
-    name?: string;
-    obfuscated?: string;
-    oncleartext?: (ev: CustomEvent) => void;
-    onload?: (ev: CustomEvent) => void;
-    onstatechange?: (ev: CustomEvent) => void;
-    onverified?: (ev: CustomEvent) => void;
-    onserververification?: (ev: CustomEvent) => void;
-    onupload?: (ev: CustomEvent) => void;
-    onuploadprogress?: (ev: CustomEvent) => void;
-    overlay?: boolean;
-    overlaycontent?: string;
-    plugins?: string;
-    /** @deprecated Use `disablerefetchonexpire` instead. */
-    refetchonexpire?: boolean;
-    /** @deprecated */
-    spamfilter?: boolean | 'ipAddress';
-    strings?: string;
-    test?: boolean | number;
-    verifyurl?: string;
-    workers?: number;
-    workerurl?: string;
-  }
-
-  interface AltchaWidgetMethods {
-    configure: (options: AltchaWidgetOptions) => void;
-    clarify: () => Promise<void>;
-    getConfiguration: () => AltchaWidgetOptions;
-    getFloatingAnchor: () => HTMLElement | null;
-    getPlugin: <T = unknown>(name: string) => T;
-    getState: () => AltchaState;
-    hide: () => void;
-    repositionFloating: (viewportOffset?: number) => void;
-    reset: (newState?: AltchaState, err?: string | null) => void;
-    setFloatingAnchor: (el: HTMLElement) => void;
-    setState: (newState: AltchaState, err?: string | null) => void;
-    show: () => void;
-    verify: () => Promise<void>;
-  }
-
-  interface AltchaWidget extends AltchaWidgetOptions {}
-
-  interface AltchaWidgetCSSProperties extends Partial<CSSStyleDeclaration> {
-    '--altcha-border-width'?: string;
-    '--altcha-border-radius'?: string;
-    '--altcha-color-base'?: string;
-    '--altcha-color-border'?: string;
-    '--altcha-color-text'?: string;
-    '--altcha-color-border-focus'?: string;
-    '--altcha-color-error-text'?: string;
-    '--altcha-color-footer-bg'?: string;
-    '--altcha-max-width'?: string;
-  }
-
-  interface AltchaWidgetReactRefObject<T> {
-    current: T | null;
-  }
-
-  interface AltchaWidgetReact extends AltchaWidget {
-    children?: string | number | Node | DocumentFragment;
-    ref?: AltchaWidgetReactRefObject<HTMLElement>;
-    style?: AltchaWidgetCSSProperties;
-  }
-
-  namespace JSX {
-    interface IntrinsicElements {
-      'altcha-widget': AltchaWidgetReact;
-    }
-  }
-
-  namespace React {
-    namespace JSX {
-      interface IntrinsicElements {
-        'altcha-widget': AltchaWidgetReact;
-      }
-    }
-  }
-
-  namespace svelteHTML {
-    interface IntrinsicElements {
-      'altcha-widget': AltchaWidgetSvelte;
-    }
-
-    interface AltchaWidgetSvelte extends AltchaWidget {
-      style?: string;
-    }
-  }
-}
-
-declare module 'react' {
-  namespace JSX {
-    interface IntrinsicElements {
-      'altcha-widget': AltchaWidgetReact;
-    }
-  }
-}
-
-declare module 'react/jsx-runtime' {
-  namespace JSX {
-    interface IntrinsicElements {
-      'altcha-widget': AltchaWidgetReact;
-    }
-  }
-}
-
-declare module 'react/jsx-dev-runtime' {
-  namespace JSX {
-    interface IntrinsicElements {
-      'altcha-widget': AltchaWidgetReact;
-    }
-  }
-}