ribaunt 0.2.4 → 0.2.5

package/package.json

@@ -1,7 +1,10 @@
 {
   "name": "ribaunt",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "A PoW CAPTCHA library that provides stateless and secure user verification",
+  "files": [
+    "dist"
+  ],
   "homepage": "https://ribaunt.com",
   "bugs": {
     "url": "https://github.com/ribaunt/ribaunt/issues"

package/SECURITY.md

@@ -1,36 +0,0 @@
-# Security Policy
-
-Ribaunt is a proof-of-work CAPTCHA library, so security reports are especially
-important when they affect challenge signing, verification bypasses, replay
-prevention, widget behavior, or server-only secret handling.
-
-## Supported Versions
-
-| Version | Security support |
-| --- | --- |
-| Latest npm release | Supported |
-| Older releases | Best effort |
-
-## Reporting a Vulnerability
-
-Please do not open a public GitHub issue for suspected vulnerabilities.
-
-Report vulnerabilities privately through GitHub Security Advisories:
-
-https://github.com/ribaunt/ribaunt/security/advisories/new
-
-Include as much of the following as you can:
-
-- Affected Ribaunt version or commit
-- Reproduction steps
-- Expected and observed behavior
-- Security impact
-- Runtime and browser environment, if relevant
-- Proof of concept, logs, or screenshots
-
-## What to Expect
-
-After receiving a report, maintainers will acknowledge it, investigate the
-issue, and coordinate a fix when appropriate. If the issue is confirmed, the fix
-will be released and a security advisory will be published when disclosure is
-safe.

package/demo/lib/solver-worker.js

@@ -1,174 +0,0 @@
-/// <reference lib="webworker" />
-import { solveChallenge, decodeChallengeToken } from './solver.js';
-import { ensureWasm, solveBatch, resetWasmHeap } from './wasm-solver.js';
-const workerScope = self;
-const activeControllers = new Map();
-// Cache WASM initialization per worker lifetime (wasm-solver already caches, but keep explicit)
-let wasmBackendState = 'uninitialized';
-const WASM_BATCH_SIZE = 1024;
-const yieldToEventLoop = (() => {
-    if (typeof MessageChannel !== 'function') {
-        return () => new Promise((resolve) => setTimeout(resolve, 0));
-    }
-    let channel = null;
-    const waiting = new Set();
-    return () => {
-        if (!channel) {
-            channel = new MessageChannel();
-            channel.port1.onmessage = () => {
-                for (const resolve of waiting)
-                    resolve();
-                waiting.clear();
-            };
-            channel.port1.unref?.();
-        }
-        return new Promise((resolve) => {
-            waiting.add(resolve);
-            channel.port2.postMessage(null);
-        });
-    };
-})();
-async function solveSingleChallengeWasm(token, signal) {
-    const payload = decodeChallengeToken(token);
-    if (!payload)
-        return undefined;
-    const { challenge, difficulty } = payload;
-    let startNonce = 0;
-    try {
-        while (true) {
-            if (signal?.aborted) {
-                throw new DOMException('Challenge solving aborted', 'AbortError');
-            }
-            const result = solveBatch(challenge, startNonce, WASM_BATCH_SIZE, difficulty);
-            if (result.found && result.nonce && result.hash) {
-                // Validate before returning (wasm-solver already validated, but double-check)
-                if (typeof result.nonce !== 'string' || typeof result.hash !== 'string') {
-                    throw new Error('Invalid WASM result shape');
-                }
-                return { nonce: result.nonce, hash: result.hash };
-            }
-            startNonce += WASM_BATCH_SIZE;
-            // Overflow guard - do not wrap; allow final batch where last nonce is 0x7fffffff
-            if (startNonce > 0x7fffffff - WASM_BATCH_SIZE + 1) {
-                throw new Error('WASM solver nonce overflow');
-            }
-            // Yield every 2048 nonces to keep worker responsive (matches JS solver's 2048)
-            if (startNonce % 2048 === 0) {
-                await yieldToEventLoop();
-            }
-        }
-    }
-    finally {
-        // Reset heap to avoid leak between tokens/requests
-        try {
-            resetWasmHeap();
-        }
-        catch {
-            // ignore
-        }
-    }
-}
-async function solveChallengeWasm(tokens, onProgress, signal) {
-    const solutions = [];
-    for (let i = 0; i < tokens.length; i++) {
-        const token = tokens[i];
-        if (!token)
-            throw new Error(`Invalid token at index ${i}`);
-        if (signal?.aborted)
-            throw new DOMException('Challenge solving aborted', 'AbortError');
-        const solution = await solveSingleChallengeWasm(token, signal);
-        if (!solution)
-            throw new Error(`Failed to solve challenge ${i + 1}`);
-        solutions.push(solution);
-        if (onProgress) {
-            const progress = Math.round(((i + 1) / tokens.length) * 100);
-            onProgress(progress);
-        }
-    }
-    return solutions;
-}
-async function selectBackend(wasmMode) {
-    if (wasmMode === 'disabled')
-        return 'js';
-    // preferred (default)
-    if (wasmBackendState === 'wasm-unavailable')
-        return 'js';
-    if (wasmBackendState === 'wasm-ready')
-        return 'wasm';
-    // uninitialized -> try to init
-    try {
-        const ok = await ensureWasm();
-        wasmBackendState = ok ? 'wasm-ready' : 'wasm-unavailable';
-        return ok ? 'wasm' : 'js';
-    }
-    catch {
-        wasmBackendState = 'wasm-unavailable';
-        return 'js';
-    }
-}
-workerScope.addEventListener('message', (event) => {
-    const request = event.data;
-    if (!request)
-        return;
-    if (request.type === 'cancel') {
-        const controller = activeControllers.get(request.id);
-        if (controller) {
-            controller.abort();
-            activeControllers.delete(request.id);
-            workerScope.postMessage({ type: 'cancelled', id: request.id });
-            workerScope.close();
-        }
-        return;
-    }
-    if (request.type !== 'solve')
-        return;
-    const controller = new AbortController();
-    activeControllers.set(request.id, controller);
-    const wasmMode = request.wasmMode === 'disabled' ? 'disabled' : 'preferred';
-    (async () => {
-        const backend = await selectBackend(wasmMode);
-        // Telemetry: report backend selection once per request
-        if (!controller.signal.aborted) {
-            try {
-                workerScope.postMessage({ type: 'backend', id: request.id, backend });
-            }
-            catch {
-                // telemetry must never break solving
-            }
-        }
-        const solver = backend === 'wasm' ? solveChallengeWasm : solveChallenge;
-        // For wasm-unavailable fallback, re-select if wasm fails during solve? We already selected js
-        // But if backend is wasm and solve fails with internal error, we surface not fallback
-        return solver(request.tokens, (progress) => {
-            if (!controller.signal.aborted) {
-                workerScope.postMessage({
-                    type: 'progress',
-                    id: request.id,
-                    progress,
-                });
-            }
-        }, controller.signal);
-    })().then((solutions) => {
-        activeControllers.delete(request.id);
-        if (controller.signal.aborted)
-            return;
-        workerScope.postMessage({
-            type: 'result',
-            id: request.id,
-            solutions,
-        });
-    }, (error) => {
-        activeControllers.delete(request.id);
-        if (controller.signal.aborted)
-            return;
-        // If WASM was selected and failed due to unexpected runtime error, surface as error
-        // For expected initialization failures we already fell back to JS, so this error is genuine
-        workerScope.postMessage({
-            type: 'error',
-            id: request.id,
-            error: error instanceof Error ? error.message : String(error),
-        });
-    });
-});
-export {};
-//# sourceMappingURL=solver-worker.js.map

package/demo/lib/solver-worker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"solver-worker.js","sourceRoot":"","sources":["../src/solver-worker.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAEjC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAA0B,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAczE,MAAM,WAAW,GAAG,IAA6C,CAAC;AAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE7D,gGAAgG;AAChG,IAAI,gBAAgB,GAAwD,eAAe,CAAC;AAE5F,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,gBAAgB,GAAwB,CAAC,GAAG,EAAE;IAClD,IAAI,OAAO,cAAc,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACtC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE;gBAC7B,KAAK,MAAM,OAAO,IAAI,OAAO;oBAAE,OAAO,EAAE,CAAC;gBACzC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC,CAAC;YACD,OAAO,CAAC,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC,CAAC,EAAE,CAAC;AAEL,KAAK,UAAU,wBAAwB,CACrC,KAAa,EACb,MAAoB;IAEpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAE9E,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChD,8EAA8E;gBAC9E,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YACpD,CAAC;YAED,UAAU,IAAI,eAAe,CAAC;YAE9B,iFAAiF;YACjF,IAAI,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YAED,+EAA+E;YAC/E,IAAI,UAAU,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,gBAAgB,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,mDAAmD;QACnD,IAAI,CAAC;YACH,aAAa,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAgB,EAChB,UAAuC,EACvC,MAAoB;IAEpB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;YAC7D,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAA8B;IACzD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACzC,sBAAsB;IACtB,IAAI,gBAAgB,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,gBAAgB,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAErD,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC;QAC9B,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC1D,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,kBAAkB,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAkC,EAAE,EAAE;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrC,WAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAA2B,CAAC,CAAC;YACxF,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO;IAErC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAa,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAEtF,CAAC,KAAK,IAAI,EAAE;QACV,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE9C,uDAAuD;QACvD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,WAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAA2B,CAAC,CAAC;YACjG,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC;QAExE,8FAA8F;QAC9F,sFAAsF;QAEtF,OAAO,MAAM,CACX,OAAO,CAAC,MAAM,EACd,CAAC,QAAQ,EAAE,EAAE;YACX,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,WAAW,CAAC,WAAW,CAAC;oBACtB,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,QAAQ;iBACgB,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,EACD,UAAU,CAAC,MAAM,CAClB,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC,IAAI,CACP,CAAC,SAAS,EAAE,EAAE;QACZ,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,WAAW,CAAC,WAAW,CAAC;YACtB,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS;SACe,CAAC,CAAC;IAC9B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,oFAAoF;QACpF,4FAA4F;QAC5F,WAAW,CAAC,WAAW,CAAC;YACtB,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACrC,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,CAAC"}

package/demo/lib/solver.js

@@ -1,135 +0,0 @@
-/**
- * Browser-compatible challenge solver using Web Crypto API
- */
-/**
- * Decode JWT token (browser-compatible, without verification)
- */
-function decodeJWT(token) {
-    try {
-        const parts = token.split('.');
-        if (parts.length !== 3 || !parts[1])
-            return null;
-        const normalizedPayload = parts[1].replace(/-/g, '+').replace(/_/g, '/');
-        const paddedPayload = normalizedPayload.padEnd(normalizedPayload.length + ((4 - (normalizedPayload.length % 4)) % 4), '=');
-        const payload = JSON.parse(atob(paddedPayload));
-        return payload;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * SHA-256 hash using Web Crypto API
- */
-async function sha256(message) {
-    if (typeof TextEncoder === 'undefined') {
-        throw new Error('TextEncoder is unavailable in this browser environment');
-    }
-    if (!globalThis.crypto?.subtle) {
-        throw new Error('Web Crypto API is unavailable. Use HTTPS or localhost.');
-    }
-    const msgBuffer = new TextEncoder().encode(message);
-    const hashBuffer = await crypto.subtle.digest('SHA-256', msgBuffer);
-    const hashArray = Array.from(new Uint8Array(hashBuffer));
-    const hashHex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
-    return hashHex;
-}
-/**
- * Yield to the event loop without the ~4ms clamping browsers apply to
- * nested setTimeout calls. MessageChannel tasks run as macrotasks with
- * microsecond-level latency, keeping the UI responsive at a fraction of
- * the timer overhead.
- *
- * The channel is created lazily on first yield, and the receiving port is
- * unref'd where supported (Node.js): a port with an active message listener
- * otherwise keeps the host event loop alive and prevents clean exit.
- */
-const yieldToEventLoop = (() => {
-    if (typeof MessageChannel !== 'function') {
-        return () => new Promise((resolve) => setTimeout(resolve, 0));
-    }
-    let channel = null;
-    const waiting = new Set();
-    return () => {
-        if (!channel) {
-            channel = new MessageChannel();
-            channel.port1.onmessage = () => {
-                for (const resolve of waiting)
-                    resolve();
-                waiting.clear();
-            };
-            channel.port1.unref?.();
-        }
-        return new Promise((resolve) => {
-            waiting.add(resolve);
-            channel.port2.postMessage(null);
-        });
-    };
-})();
-export async function calibrateBrowser(iterations = 128) {
-    if (!Number.isFinite(iterations) || iterations < 1) {
-        throw new Error('Calibration iterations must be at least 1');
-    }
-    const normalizedIterations = Math.floor(iterations);
-    const startedAt = performance.now();
-    for (let index = 0; index < normalizedIterations; index++) {
-        await sha256(`ribaunt-calibration:${index}`);
-    }
-    return {
-        iterations: normalizedIterations,
-        durationMs: Math.max(1, Math.round(performance.now() - startedAt)),
-    };
-}
-export const calibrateClient = calibrateBrowser;
-export function decodeChallengeToken(token) {
-    return decodeJWT(token);
-}
-/**
- * Solve a single challenge token (browser-compatible)
- */
-export async function solveSingleChallenge(token, signal) {
-    const payload = decodeJWT(token);
-    if (!payload)
-        return undefined;
-    const { challenge, difficulty } = payload;
-    const prefix = '0'.repeat(difficulty);
-    let nonce = 0;
-    while (true) {
-        if (signal?.aborted) {
-            throw new DOMException('Challenge solving aborted', 'AbortError');
-        }
-        const hash = await sha256(`${challenge}${nonce}`);
-        if (hash.startsWith(prefix)) {
-            return { nonce: String(nonce), hash };
-        }
-        nonce++;
-        // Yield to keep the UI responsive; each batch amortizes the yield cost.
-        if (nonce % 2048 === 0) {
-            await yieldToEventLoop();
-        }
-    }
-}
-/**
- * Solve multiple challenge tokens (browser-compatible)
- */
-export async function solveChallenge(tokens, onProgress, signal) {
-    const solutions = [];
-    for (let i = 0; i < tokens.length; i++) {
-        const token = tokens[i];
-        if (!token) {
-            throw new Error(`Invalid token at index ${i}`);
-        }
-        const solution = await solveSingleChallenge(token, signal);
-        if (!solution) {
-            throw new Error(`Failed to solve challenge ${i + 1}`);
-        }
-        solutions.push(solution);
-        // Report progress
-        if (onProgress) {
-            const progress = Math.round(((i + 1) / tokens.length) * 100);
-            onProgress(progress);
-        }
-    }
-    return solutions;
-}
-//# sourceMappingURL=solver.js.map

package/demo/lib/solver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"solver.js","sourceRoot":"","sources":["../src/solver.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH;;GAEG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAC5C,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EACrE,GAAG,CACJ,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QAChD,OAAO,OAA2B,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,MAAM,CAAC,OAAe;IACnC,IAAI,OAAO,WAAW,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAwB,CAAC,GAAG,EAAE;IAClD,IAAI,OAAO,cAAc,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IAEtC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE;gBAC7B,KAAK,MAAM,OAAO,IAAI,OAAO;oBAAE,OAAO,EAAE,CAAC;gBACzC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,CAAC,CAAC;YACD,OAAO,CAAC,KAA8C,CAAC,KAAK,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAU,GAAG,GAAG;IACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,oBAAoB,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,MAAoB;IAEpB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC;QAElD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,EAAE,CAAC;QAER,wEAAwE;QACxE,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,gBAAgB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAgB,EAChB,UAAuC,EACvC,MAAoB;IAEpB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzB,kBAAkB;QAClB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;YAC7D,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/demo/lib/wasm-solver.js

@@ -1,296 +0,0 @@
-/**
- * TypeScript adapter for the WASM SHA-256 solver.
- * Contains all WASM-specific implementation details and validates boundary values.
- */
-let wasmInstance = null;
-let wasmState = 'uninitialized';
-let loadPromise = null;
-let cachedChallenge = null;
-let cachedPtr = 0;
-let cachedLen = 0;
-const VALID_HASH_RE = /^[a-f0-9]{64}$/;
-const VALID_NONCE_RE = /^\d+$/;
-const VALID_SHA256_HEX_RE = /^[a-f0-9]{64}$/i;
-// Embedded SHA-256 of dist/ribaunt-solver.wasm for integrity verification.
-// Recompute with `shasum -a 256 dist/ribaunt-solver.wasm` after rebuilding wasm.
-const EMBEDDED_WASM_SHA256 = '774398452596d67491a6ee5bd6291c9665dc4fc1a83db15f14dbbb4058f74c3e';
-function isValidHash(hash) {
-    return VALID_HASH_RE.test(hash);
-}
-function isValidNonce(nonce) {
-    return nonce.length > 0 && VALID_NONCE_RE.test(nonce);
-}
-function bytesToHex(bytes) {
-    return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
-}
-async function sha256Hex(bytes) {
-    const subtle = typeof crypto !== 'undefined' ? crypto.subtle : undefined;
-    if (subtle) {
-        const digest = await subtle.digest('SHA-256', bytes);
-        return bytesToHex(new Uint8Array(digest));
-    }
-    // Node fallback when Web Crypto is unavailable
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const nodeCrypto = await import('node:crypto');
-    return nodeCrypto.createHash('sha256').update(bytes).digest('hex');
-}
-function getExpectedWasmSha256() {
-    const g = globalThis;
-    const fromGlobal = typeof g.__RIBAUNT_WASM_SHA256__ === 'string' ? g.__RIBAUNT_WASM_SHA256__.trim().toLowerCase() : '';
-    if (fromGlobal && VALID_SHA256_HEX_RE.test(fromGlobal))
-        return fromGlobal;
-    const proc = typeof process !== 'undefined' ? process : undefined;
-    const fromEnv = proc?.env?.RIBAUNT_WASM_SHA256?.trim().toLowerCase() ?? '';
-    if (fromEnv && VALID_SHA256_HEX_RE.test(fromEnv))
-        return fromEnv;
-    if (EMBEDDED_WASM_SHA256 && VALID_SHA256_HEX_RE.test(EMBEDDED_WASM_SHA256))
-        return EMBEDDED_WASM_SHA256.toLowerCase();
-    return null;
-}
-async function loadWasmBytes() {
-    const candidates = [];
-    try {
-        candidates.push(new URL('./ribaunt-solver.wasm', import.meta.url));
-    }
-    catch (_e) {
-        void _e;
-    }
-    try {
-        candidates.push(new URL('../dist/ribaunt-solver.wasm', import.meta.url));
-    }
-    catch (_e) {
-        void _e;
-    }
-    try {
-        candidates.push(new URL('./dist/ribaunt-solver.wasm', import.meta.url));
-    }
-    catch (_e) {
-        void _e;
-    }
-    // Browser / worker path: try fetch for each candidate
-    if (typeof fetch === 'function') {
-        for (const cand of candidates) {
-            try {
-                const res = await fetch(cand);
-                if (res.ok) {
-                    const buf = await res.arrayBuffer();
-                    if (buf.byteLength > 0)
-                        return new Uint8Array(buf);
-                }
-            }
-            catch (_e) {
-                void _e;
-            }
-        }
-    }
-    // Node.js fallback: try fs for candidates plus cwd
-    const fsCandidates = [...candidates];
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const pathMod = await import('node:path');
-        const cwd = typeof process !== 'undefined' ? process.cwd() : '';
-        if (cwd) {
-            fsCandidates.push(pathMod.resolve(cwd, 'dist/ribaunt-solver.wasm'));
-            fsCandidates.push(pathMod.resolve(cwd, 'dist/cjs/ribaunt-solver.wasm'));
-        }
-    }
-    catch (_e) {
-        void _e;
-    }
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const fs = await import('node:fs/promises');
-        for (const cand of fsCandidates) {
-            try {
-                const bytes = await fs.readFile(cand);
-                if (bytes && bytes.length > 0)
-                    return bytes;
-            }
-            catch (_e) {
-                void _e;
-            }
-        }
-    }
-    catch (_e) {
-        void _e;
-    }
-    throw new Error('WASM asset fetch failure');
-}
-async function instantiateWasm() {
-    if (typeof WebAssembly === 'undefined')
-        return false;
-    try {
-        const bytes = await loadWasmBytes();
-        const expectedSha256 = getExpectedWasmSha256();
-        if (!expectedSha256)
-            return false;
-        const actualSha256 = await sha256Hex(bytes);
-        if (actualSha256 !== expectedSha256)
-            return false;
-        const mod = await WebAssembly.compile(bytes);
-        const instance = await WebAssembly.instantiate(mod, {});
-        const exp = instance.exports;
-        if (!exp.memory || typeof exp.solve_batch !== 'function' || typeof exp.get_hash_ptr !== 'function' || typeof exp.alloc !== 'function') {
-            return false;
-        }
-        wasmInstance = instance;
-        wasmState = 'wasm-ready';
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-export async function ensureWasm() {
-    if (wasmState === 'wasm-ready')
-        return true;
-    if (wasmState === 'wasm-unavailable')
-        return false;
-    if (loadPromise)
-        return loadPromise;
-    loadPromise = (async () => {
-        const ok = await instantiateWasm();
-        wasmState = ok ? 'wasm-ready' : 'wasm-unavailable';
-        return ok;
-    })();
-    return loadPromise;
-}
-export function getWasmState() {
-    return wasmState;
-}
-export function resetWasmForTesting() {
-    wasmInstance = null;
-    wasmState = 'uninitialized';
-    loadPromise = null;
-    cachedChallenge = null;
-    cachedPtr = 0;
-    cachedLen = 0;
-}
-// For testing: allow injecting failure or mock
-export function setWasmUnavailableForTesting() {
-    wasmState = 'wasm-unavailable';
-    wasmInstance = null;
-    loadPromise = Promise.resolve(false);
-}
-export function isWasmAvailable() {
-    return wasmState === 'wasm-ready';
-}
-export function resetWasmHeap() {
-    cachedChallenge = null;
-    cachedPtr = 0;
-    cachedLen = 0;
-    if (wasmInstance) {
-        try {
-            const exp = wasmInstance.exports;
-            exp.reset_heap?.();
-        }
-        catch {
-            // ignore
-        }
-    }
-}
-/**
- * Synchronous batch solver - must be called after ensureWasm() succeeds.
- * Encodes challenge as UTF-8, allocates in WASM memory, calls solve_batch,
- * validates and returns result.
- */
-export function solveBatch(challenge, startNonce, batchSize, difficulty) {
-    if (wasmState !== 'wasm-ready' || !wasmInstance) {
-        throw new Error('WASM solver not initialized');
-    }
-    // Validate inputs
-    if (!Number.isInteger(difficulty) || difficulty < 1 || difficulty > 64) {
-        throw new Error('Invalid difficulty');
-    }
-    if (!Number.isInteger(batchSize) || batchSize <= 0 || batchSize > 16384) {
-        throw new Error('Invalid batchSize');
-    }
-    if (!Number.isInteger(startNonce) || startNonce < 0 || !Number.isFinite(startNonce)) {
-        throw new Error('Invalid startNonce');
-    }
-    if (typeof challenge !== 'string') {
-        throw new Error('Invalid challenge');
-    }
-    // Overflow guard before calling WASM (also checked inside)
-    if (startNonce > 0xffffffff - batchSize + 1) {
-        throw new Error('Nonce range exceeds u32');
-    }
-    // Also guard signed limit to avoid sentinel confusion (max 2^31-1 for v1); allow final batch where last nonce is 0x7fffffff
-    if (startNonce > 0x7fffffff || startNonce + batchSize > 0x7fffffff + 1) {
-        throw new Error('Nonce exceeds wasm signed limit');
-    }
-    const exp = wasmInstance.exports;
-    const mem = exp.memory;
-    let ptr;
-    let challengeLen;
-    if (cachedChallenge === challenge && cachedPtr !== 0) {
-        ptr = cachedPtr;
-        challengeLen = cachedLen;
-    }
-    else {
-        // Encode challenge as UTF-8 bytes
-        const encoder = new TextEncoder();
-        const challengeBytes = encoder.encode(challenge);
-        if (challengeBytes.length > 1014) {
-            throw new Error('Challenge too long for WASM solver');
-        }
-        const newPtr = exp.alloc(challengeBytes.length);
-        // Refresh view after possible growth
-        const memU8 = new Uint8Array(mem.buffer);
-        // Bounds check: ensure ptr + len within memory
-        if (newPtr < 0 || newPtr + challengeBytes.length > memU8.length) {
-            throw new Error('WASM memory allocation out of bounds');
-        }
-        memU8.set(challengeBytes, newPtr);
-        cachedChallenge = challenge;
-        cachedPtr = newPtr;
-        cachedLen = challengeBytes.length;
-        ptr = newPtr;
-        challengeLen = cachedLen;
-    }
-    let result;
-    try {
-        result = exp.solve_batch(ptr, challengeLen, startNonce >>> 0, batchSize, difficulty);
-    }
-    catch (e) {
-        throw new Error(`WASM solver trap: ${e instanceof Error ? e.message : String(e)}`, { cause: e });
-    }
-    if (result === -1) {
-        return { found: false };
-    }
-    if (result === -2) {
-        throw new Error('WASM solver overflow');
-    }
-    if (result < 0) {
-        throw new Error(`WASM solver internal error: ${result}`);
-    }
-    // Validate nonce
-    const nonceStr = String(result >>> 0);
-    if (!isValidNonce(nonceStr)) {
-        throw new Error('WASM returned invalid nonce');
-    }
-    // Read hash
-    const hashPtr = exp.get_hash_ptr();
-    const hashLen = 32;
-    const mem2 = new Uint8Array(mem.buffer);
-    if (hashPtr < 0 || hashPtr + hashLen > mem2.length) {
-        throw new Error('WASM hash pointer out of bounds');
-    }
-    const hashBytes = mem2.slice(hashPtr, hashPtr + hashLen);
-    const hashHex = Array.from(hashBytes).map(b => b.toString(16).padStart(2, '0')).join('');
-    if (!isValidHash(hashHex)) {
-        throw new Error('WASM returned invalid hash');
-    }
-    if (!hashHex.startsWith('0'.repeat(difficulty))) {
-        throw new Error('WASM returned hash that does not satisfy difficulty');
-    }
-    // Additional validation: ensure hash corresponds to challenge+nonce (defense in depth)
-    // We trust WASM but validate shape; deeper verification (re-hashing in JS) could be done
-    // but would duplicate work. We just validate invariants.
-    return { found: true, nonce: nonceStr, hash: hashHex };
-}
-// Re-export for worker to use TextEncoder check
-export function isTextEncoderAvailable() {
-    return typeof TextEncoder !== 'undefined';
-}
-//# sourceMappingURL=wasm-solver.js.map