siarashield_workspace 0.0.2 → 0.0.4

package/README.md

@@ -1,77 +1,85 @@
 # `siarashield_workspace`
 
-Angular library wrapper for **CyberSiara SiaraShield** captcha.
-
-## When you need this (and when you don't)
-
-- **Use this** if your Angular app needs to integrate **SiaraShield** captcha.
-- **Not required** if your app already uses a different captcha and you don't want SiaraShield.
+Angular wrapper library for CyberSiara SiaraShield captcha.
 
 ## Install
 
-Once published:
-
 ```bash
 npm i siarashield_workspace
 ```
 
-## Setup steps (easy integration)
+## Setup steps
 
-1. Get your **public & private key** from `mycybersiara.com`
+1. **Key for staging/development/localhost**
+   - Use `TEST-CYBERSIARA` for testing.
+   - For localhost, no new key creation is required.
+   - For testing note from your requirement: use `TEST-CYBERSIARA` as public and private key value.
 
-Note: Use public key `TEST-CYBERSIARA` for staging/development.
-
-2. Put keys in `.env` (example)
+2. **Store key in your app config**
 
 ```env
 SIARASHIELD_PUBLIC_KEY=TEST-CYBERSIARA
-SIARASHIELD_PRIVATE_KEY=YOUR-PRIVATE-KEY
+SIARASHIELD_PRIVATE_KEY=TEST-CYBERSIARA
 ```
 
-3. Add the component in your page/component (nothing else required)
+3. **jQuery loading behavior**
+   - If user project already has jQuery, package will not load again.
+   - If jQuery is missing, package loads:
+   - `https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js`
 
-```ts
-import { Component, ViewChild } from '@angular/core';
-import { SiaraShieldComponent } from 'siarashield_workspace';
-```
+4. **Render captcha container**
+   - Add this in your template where captcha should appear:
+   - `<div class="SiaraShield"></div>`
 
-4. When you need to show the captcha, use this code (nothing else)
-
-Renders `<div class="SiaraShield"></div>`
-
-5. Initialize captcha with your public key (example)
+5. **Initialize and validate**
 
 ```ts
 import { initSiaraShield, checkSiaraShieldCaptcha } from 'siarashield_workspace';
 
-await initSiaraShield({ publicKey: 'TEST-CYBERSIARA', loadJQuery: true });
+await initSiaraShield({
+  publicKey: 'TEST-CYBERSIARA',
+  loadJQuery: true,
+  // Optional: pass nonce when app uses strict CSP
+  // cspNonce: 'YOUR_NONCE_VALUE',
+});
 
-// On submit:
 const result = checkSiaraShieldCaptcha();
 if (result.ok) {
   console.log(result.token);
-  // Please write your submit button click event function here //
+  // your submit API logic here
 }
 ```
 
-Note: Please put your submit button code inside `if (result.ok)`.
+6. **Submit only when captcha is valid**
+   - Put submit logic inside `if (result.ok)`.
+
+## jQuery behavior in this package
 
-## What this library loads
+- The package checks if jQuery already exists in the user project (`window.jQuery`, `window.$`, or existing jquery script tag).
+- If jQuery is already available, package will **not** load it again.
+- If jQuery is missing, package will load:
+  - `https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js`
+- Then it loads:
+  - `https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js`
 
-- Loads:
-  - jQuery: `https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js`  
-    (If you are used other jQuery then not need to import this one; it will work properly.)
-  - SiaraShield script: `https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js`
-- Calls `initCaptcha(publicKey)`
+## CSP (strict policy) support
 
-## Build & pack (for release)
+- Package supports strict CSP by attaching a nonce to dynamically injected scripts.
+- You can pass nonce in both APIs:
+  - `initSiaraShield({ ..., cspNonce: 'YOUR_NONCE' })`
+  - `<siara-shield [publicKey]="..." [cspNonce]="nonceValue"></siara-shield>`
+- If nonce is not passed, package auto-detects from:
+  - first `<script nonce="...">`
+  - or `<meta name="csp-nonce" content="...">`
+- Keep CSP allowlist for required hosts:
+  - `https://embedcdn.mycybersiara.com`
 
-From the workspace root:
+## Build and pack
+
+From workspace root:
 
 ```bash
 npm run build:lib
 npm run pack:lib
 ```
 
-Pack output will be in `dist/siarashield-workspace`.
-

package/fesm2022/siarashield_workspace.mjs

@@ -13,7 +13,7 @@ class SiaraShieldLoaderService {
     constructor(document) {
         this.document = document;
     }
-    loadScript(src) {
+    loadScript(src, options) {
         const existing = this.document.querySelector(`script[src="${src}"]`);
         if (existing)
             return Promise.resolve();
@@ -30,6 +30,9 @@ class SiaraShieldLoaderService {
             const script = this.document.createElement('script');
             script.src = src;
             script.async = true;
+            if (options?.nonce) {
+                script.nonce = options.nonce;
+            }
             script.onload = () => {
                 this.statusBySrc.set(src, 'loaded');
                 resolve();
@@ -54,11 +57,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.5", ngImpor
                     args: [DOCUMENT]
                 }] }] });
 
+const JQUERY_FALLBACK_SRC$1 = 'https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js';
 class SiaraShieldComponent {
     host;
     loader;
     publicKey;
     loadJQuery = true;
+    cspNonce;
     /**
      * Emits the current `CyberSiaraToken` right after a successful `checkCaptcha()`.
      */
@@ -69,7 +74,7 @@ class SiaraShieldComponent {
         this.loader = loader;
     }
     async ngAfterViewInit() {
-        await this.init({ publicKey: this.publicKey, loadJQuery: this.loadJQuery });
+        await this.init({ publicKey: this.publicKey, loadJQuery: this.loadJQuery, cspNonce: this.cspNonce });
     }
     async init(options) {
         if (this.initialized)
@@ -79,10 +84,13 @@ class SiaraShieldComponent {
         if (!options.publicKey) {
             throw new Error('SiaraShieldComponent: publicKey is required.');
         }
-        if (options.loadJQuery ?? true) {
-            await this.loader.loadScript('https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js');
+        const cspNonce = this.resolveCspNonce(options.cspNonce);
+        if ((options.loadJQuery ?? true) && !this.isJQueryAlreadyAvailable()) {
+            await this.loader.loadScript(JQUERY_FALLBACK_SRC$1, { nonce: cspNonce });
         }
-        await this.loader.loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js');
+        await this.loader.loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js', {
+            nonce: cspNonce,
+        });
         const g = getSiaraShieldGlobals();
         if (!g.initCaptcha) {
             throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');
@@ -90,6 +98,31 @@ class SiaraShieldComponent {
         g.initCaptcha(options.publicKey);
         this.initialized = true;
     }
+    /**
+     * Detect preloaded jQuery from global object or an existing script tag.
+     */
+    isJQueryAlreadyAvailable() {
+        const g = getSiaraShieldGlobals();
+        if (typeof g.jQuery === 'function' || typeof g.$ === 'function') {
+            return true;
+        }
+        const existingJqueryScript = this.host.nativeElement.ownerDocument.querySelector('script[src*="jquery"]');
+        return Boolean(existingJqueryScript);
+    }
+    /**
+     * Uses explicit nonce first. If not provided, tries to reuse nonce
+     * from the first script tag or from `<meta name="csp-nonce">`.
+     */
+    resolveCspNonce(explicitNonce) {
+        if (explicitNonce)
+            return explicitNonce;
+        const doc = this.host.nativeElement.ownerDocument;
+        const scriptWithNonce = doc.querySelector('script[nonce]');
+        if (scriptWithNonce?.nonce)
+            return scriptWithNonce.nonce;
+        const nonceMeta = doc.querySelector('meta[name="csp-nonce"]');
+        return nonceMeta?.content || undefined;
+    }
     /**
      * Calls the global `CheckCaptcha()` from SiaraShield script.
      * Returns true when captcha is valid; emits token if available.
@@ -106,7 +139,7 @@ class SiaraShieldComponent {
         return ok;
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.5", ngImport: i0, type: SiaraShieldComponent, deps: [{ token: i0.ElementRef }, { token: SiaraShieldLoaderService }], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.5", type: SiaraShieldComponent, isStandalone: true, selector: "siara-shield", inputs: { publicKey: "publicKey", loadJQuery: "loadJQuery" }, outputs: { token: "token" }, ngImport: i0, template: `<div class="SiaraShield"></div>`, isInline: true, encapsulation: i0.ViewEncapsulation.None });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.5", type: SiaraShieldComponent, isStandalone: true, selector: "siara-shield", inputs: { publicKey: "publicKey", loadJQuery: "loadJQuery", cspNonce: "cspNonce" }, outputs: { token: "token" }, ngImport: i0, template: `<div class="SiaraShield"></div>`, isInline: true, encapsulation: i0.ViewEncapsulation.None });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.5", ngImport: i0, type: SiaraShieldComponent, decorators: [{
             type: Component,
@@ -121,13 +154,16 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.5", ngImpor
                 args: [{ required: true }]
             }], loadJQuery: [{
                 type: Input
+            }], cspNonce: [{
+                type: Input
             }], token: [{
                 type: Output
             }] } });
 
+const JQUERY_FALLBACK_SRC = 'https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js';
 let pending = null;
 let initialized = false;
-function loadScript(src) {
+function loadScript(src, nonce) {
     const existing = document.querySelector(`script[src="${src}"]`);
     if (existing)
         return Promise.resolve();
@@ -135,11 +171,30 @@ function loadScript(src) {
         const script = document.createElement('script');
         script.src = src;
         script.async = true;
+        if (nonce)
+            script.nonce = nonce;
         script.onload = () => resolve();
         script.onerror = () => reject(new Error(`Failed to load script: ${src}`));
         document.head.appendChild(script);
     });
 }
+function resolveCspNonce(explicitNonce) {
+    if (explicitNonce)
+        return explicitNonce;
+    const scriptWithNonce = document.querySelector('script[nonce]');
+    if (scriptWithNonce?.nonce)
+        return scriptWithNonce.nonce;
+    const nonceMeta = document.querySelector('meta[name="csp-nonce"]');
+    return nonceMeta?.content || undefined;
+}
+function isJQueryAlreadyAvailable() {
+    const g = getSiaraShieldGlobals();
+    if (typeof g.jQuery === 'function' || typeof g.$ === 'function') {
+        return true;
+    }
+    const existingJqueryScript = document.querySelector('script[src*="jquery"]');
+    return Boolean(existingJqueryScript);
+}
 /**
  * Drop-in initializer for SiaraShield.
  * - Loads required scripts (optionally jQuery)
@@ -157,10 +212,11 @@ async function initSiaraShield(options) {
         throw new Error('initSiaraShield: publicKey is required.');
     }
     pending = (async () => {
-        if (options.loadJQuery ?? true) {
-            await loadScript('https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js');
+        const cspNonce = resolveCspNonce(options.cspNonce);
+        if ((options.loadJQuery ?? true) && !isJQueryAlreadyAvailable()) {
+            await loadScript(JQUERY_FALLBACK_SRC, cspNonce);
         }
-        await loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js');
+        await loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js', cspNonce);
         const g = getSiaraShieldGlobals();
         if (!g.initCaptcha) {
             throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');

package/fesm2022/siarashield_workspace.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"siarashield_workspace.mjs","sources":["../../../projects/siarashield-workspace/src/lib/siara-shield.globals.ts","../../../projects/siarashield-workspace/src/lib/siara-shield-loader.service.ts","../../../projects/siarashield-workspace/src/lib/siara-shield.component.ts","../../../projects/siarashield-workspace/src/lib/siara-shield.ts","../../../projects/siarashield-workspace/src/public-api.ts","../../../projects/siarashield-workspace/src/siarashield_workspace.ts"],"sourcesContent":["export type InitCaptchaFn = (publicKey: string) => void;\nexport type CheckCaptchaFn = () => boolean;\n\nexport interface SiaraShieldGlobals {\n  initCaptcha?: InitCaptchaFn;\n  CheckCaptcha?: CheckCaptchaFn;\n  CyberSiaraToken?: string;\n}\n\nexport function getSiaraShieldGlobals(): SiaraShieldGlobals {\n  return (globalThis as unknown as { [k: string]: unknown }) as SiaraShieldGlobals;\n}\n\n","import { DOCUMENT } from '@angular/common';\nimport { Inject, Injectable } from '@angular/core';\n\ntype ScriptStatus = 'idle' | 'loading' | 'loaded' | 'error';\n\n@Injectable({ providedIn: 'root' })\nexport class SiaraShieldLoaderService {\n  private statusBySrc = new Map<string, ScriptStatus>();\n  private pendingBySrc = new Map<string, Promise<void>>();\n\n  constructor(@Inject(DOCUMENT) private readonly document: Document) {}\n\n  loadScript(src: string): Promise<void> {\n    const existing = this.document.querySelector<HTMLScriptElement>(`script[src=\"${src}\"]`);\n    if (existing) return Promise.resolve();\n\n    const status = this.statusBySrc.get(src);\n    if (status === 'loaded') return Promise.resolve();\n    if (status === 'loading') {\n      const pending = this.pendingBySrc.get(src);\n      if (pending) return pending;\n    }\n\n    this.statusBySrc.set(src, 'loading');\n\n    const pending = new Promise<void>((resolve, reject) => {\n      const script = this.document.createElement('script');\n      script.src = src;\n      script.async = true;\n      script.onload = () => {\n        this.statusBySrc.set(src, 'loaded');\n        resolve();\n      };\n      script.onerror = () => {\n        this.statusBySrc.set(src, 'error');\n        reject(new Error(`Failed to load script: ${src}`));\n      };\n      this.document.head.appendChild(script);\n    });\n\n    this.pendingBySrc.set(src, pending);\n    return pending;\n  }\n}\n\n","import { AfterViewInit, Component, ElementRef, EventEmitter, Input, Output, ViewEncapsulation } from '@angular/core';\nimport { SiaraShieldLoaderService } from './siara-shield-loader.service';\nimport { getSiaraShieldGlobals } from './siara-shield.globals';\n\nexport interface SiaraShieldInitOptions {\n  /** SiaraShield public key. Use \"TEST-CYBERSIARA\" for staging/development. */\n  publicKey: string;\n  /** Loads jQuery before SiaraShield script. Keep true if your page doesn't already include jQuery. */\n  loadJQuery?: boolean;\n}\n\n@Component({\n  selector: 'siara-shield',\n  standalone: true,\n  template: `<div class=\"SiaraShield\"></div>`,\n  encapsulation: ViewEncapsulation.None,\n})\nexport class SiaraShieldComponent implements AfterViewInit {\n  @Input({ required: true }) publicKey!: string;\n  @Input() loadJQuery = true;\n\n  /**\n   * Emits the current `CyberSiaraToken` right after a successful `checkCaptcha()`.\n   */\n  @Output() token = new EventEmitter<string>();\n\n  private initialized = false;\n\n  constructor(\n    private readonly host: ElementRef<HTMLElement>,\n    private readonly loader: SiaraShieldLoaderService,\n  ) {}\n\n  async ngAfterViewInit(): Promise<void> {\n    await this.init({ publicKey: this.publicKey, loadJQuery: this.loadJQuery });\n  }\n\n  async init(options: SiaraShieldInitOptions): Promise<void> {\n    if (this.initialized) return;\n\n    // Ensure the host element is in DOM before scripts run.\n    void this.host.nativeElement;\n\n    if (!options.publicKey) {\n      throw new Error('SiaraShieldComponent: publicKey is required.');\n    }\n\n    if (options.loadJQuery ?? true) {\n      await this.loader.loadScript('https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js');\n    }\n\n    await this.loader.loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js');\n\n    const g = getSiaraShieldGlobals();\n    if (!g.initCaptcha) {\n      throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');\n    }\n\n    g.initCaptcha(options.publicKey);\n    this.initialized = true;\n  }\n\n  /**\n   * Calls the global `CheckCaptcha()` from SiaraShield script.\n   * Returns true when captcha is valid; emits token if available.\n   */\n  checkCaptcha(): boolean {\n    const g = getSiaraShieldGlobals();\n    if (!g.CheckCaptcha) {\n      throw new Error('SiaraShield: CheckCaptcha() is not available. Did init() run?');\n    }\n\n    const ok = g.CheckCaptcha();\n    if (ok && typeof g.CyberSiaraToken === 'string') {\n      this.token.emit(g.CyberSiaraToken);\n    }\n    return ok;\n  }\n}\n\n","import { getSiaraShieldGlobals } from './siara-shield.globals';\n\nexport interface InitSiaraShieldOptions {\n  /** SiaraShield public key. Use \"TEST-CYBERSIARA\" for staging/development. */\n  publicKey: string;\n  /**\n   * Loads jQuery before SiaraShield script.\n   * If your site/app already loads jQuery, set this to false (not required to load again).\n   */\n  loadJQuery?: boolean;\n}\n\nlet pending: Promise<void> | null = null;\nlet initialized = false;\n\nfunction loadScript(src: string): Promise<void> {\n  const existing = document.querySelector<HTMLScriptElement>(`script[src=\"${src}\"]`);\n  if (existing) return Promise.resolve();\n\n  return new Promise<void>((resolve, reject) => {\n    const script = document.createElement('script');\n    script.src = src;\n    script.async = true;\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error(`Failed to load script: ${src}`));\n    document.head.appendChild(script);\n  });\n}\n\n/**\n * Drop-in initializer for SiaraShield.\n * - Loads required scripts (optionally jQuery)\n * - Calls global `initCaptcha(publicKey)`\n *\n * Requirements in your HTML/template:\n * - You must render: `<div class=\"SiaraShield\"></div>`\n */\nexport async function initSiaraShield(options: InitSiaraShieldOptions): Promise<void> {\n  if (initialized) return;\n  if (pending) return pending;\n\n  if (!options?.publicKey) {\n    throw new Error('initSiaraShield: publicKey is required.');\n  }\n\n  pending = (async () => {\n    if (options.loadJQuery ?? true) {\n      await loadScript('https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js');\n    }\n\n    await loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js');\n\n    const g = getSiaraShieldGlobals();\n    if (!g.initCaptcha) {\n      throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');\n    }\n\n    g.initCaptcha(options.publicKey);\n    initialized = true;\n  })();\n\n  try {\n    await pending;\n  } finally {\n    // keep `pending` cached for subsequent callers\n  }\n}\n\n/**\n * Calls global `CheckCaptcha()` and returns its boolean result.\n * If successful, returns `{ ok: true, token?: string }`.\n */\nexport function checkSiaraShieldCaptcha(): { ok: boolean; token?: string } {\n  const g = getSiaraShieldGlobals();\n  if (!g.CheckCaptcha) {\n    throw new Error('SiaraShield: CheckCaptcha() is not available. Did initSiaraShield() run?');\n  }\n\n  const ok = g.CheckCaptcha();\n  const token = typeof g.CyberSiaraToken === 'string' ? g.CyberSiaraToken : undefined;\n  return ok ? { ok: true, token } : { ok: false };\n}\n\n","/*\n * Public API Surface of siarashield-workspace\n */\n\nexport * from './lib/siarashield-workspace';\nexport * from './lib/siara-shield.component';\nexport * from './lib/siara-shield-loader.service';\nexport * from './lib/siara-shield.globals';\nexport * from './lib/siara-shield';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["i1.SiaraShieldLoaderService"],"mappings":";;;;SASgB,qBAAqB,GAAA;AACnC,IAAA,OAAQ,UAAwE;AAClF;;MCLa,wBAAwB,CAAA;AAIY,IAAA,QAAA;AAHvC,IAAA,WAAW,GAAG,IAAI,GAAG,EAAwB;AAC7C,IAAA,YAAY,GAAG,IAAI,GAAG,EAAyB;AAEvD,IAAA,WAAA,CAA+C,QAAkB,EAAA;QAAlB,IAAA,CAAA,QAAQ,GAAR,QAAQ;IAAa;AAEpE,IAAA,UAAU,CAAC,GAAW,EAAA;AACpB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAoB,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAC;AACvF,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACxC,IAAI,MAAM,KAAK,QAAQ;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;AACjD,QAAA,IAAI,MAAM,KAAK,SAAS,EAAE;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;AAC1C,YAAA,IAAI,OAAO;AAAE,gBAAA,OAAO,OAAO;QAC7B;QAEA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;QAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AACpD,YAAA,MAAM,CAAC,GAAG,GAAG,GAAG;AAChB,YAAA,MAAM,CAAC,KAAK,GAAG,IAAI;AACnB,YAAA,MAAM,CAAC,MAAM,GAAG,MAAK;gBACnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;AACnC,gBAAA,OAAO,EAAE;AACX,YAAA,CAAC;AACD,YAAA,MAAM,CAAC,OAAO,GAAG,MAAK;gBACpB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;gBAClC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAA,CAAE,CAAC,CAAC;AACpD,YAAA,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACxC,QAAA,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;AACnC,QAAA,OAAO,OAAO;IAChB;AApCW,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,kBAIf,QAAQ,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAJjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cADX,MAAM,EAAA,CAAA;;2FACnB,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBADpC,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;0BAKnB,MAAM;2BAAC,QAAQ;;;MCOjB,oBAAoB,CAAA;AAYZ,IAAA,IAAA;AACA,IAAA,MAAA;AAZQ,IAAA,SAAS;IAC3B,UAAU,GAAG,IAAI;AAE1B;;AAEG;AACO,IAAA,KAAK,GAAG,IAAI,YAAY,EAAU;IAEpC,WAAW,GAAG,KAAK;IAE3B,WAAA,CACmB,IAA6B,EAC7B,MAAgC,EAAA;QADhC,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;IACtB;AAEH,IAAA,MAAM,eAAe,GAAA;AACnB,QAAA,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IAC7E;IAEA,MAAM,IAAI,CAAC,OAA+B,EAAA;QACxC,IAAI,IAAI,CAAC,WAAW;YAAE;;AAGtB,QAAA,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa;AAE5B,QAAA,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AACtB,YAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC;QACjE;AAEA,QAAA,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,kEAAkE,CAAC;QAClG;QAEA,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,sEAAsE,CAAC;AAEpG,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AAClB,YAAA,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC;QACvF;AAEA,QAAA,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI;IACzB;AAEA;;;AAGG;IACH,YAAY,GAAA;AACV,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE;AACnB,YAAA,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC;QAClF;AAEA,QAAA,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE;QAC3B,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,EAAE;YAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACpC;AACA,QAAA,OAAO,EAAE;IACX;uGA5DW,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,UAAA,EAAA,EAAA,EAAA,KAAA,EAAAA,wBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAApB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,oBAAoB,mKAHrB,CAAA,+BAAA,CAAiC,EAAA,QAAA,EAAA,IAAA,EAAA,aAAA,EAAA,EAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,CAAA;;2FAGhC,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBANhC,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,cAAc;AACxB,oBAAA,UAAU,EAAE,IAAI;AAChB,oBAAA,QAAQ,EAAE,CAAA,+BAAA,CAAiC;oBAC3C,aAAa,EAAE,iBAAiB,CAAC,IAAI;AACtC,iBAAA;;sBAEE,KAAK;uBAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;;sBACxB;;sBAKA;;;ACZH,IAAI,OAAO,GAAyB,IAAI;AACxC,IAAI,WAAW,GAAG,KAAK;AAEvB,SAAS,UAAU,CAAC,GAAW,EAAA;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAoB,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAC;AAClF,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE;IAEtC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,QAAA,MAAM,CAAC,GAAG,GAAG,GAAG;AAChB,QAAA,MAAM,CAAC,KAAK,GAAG,IAAI;QACnB,MAAM,CAAC,MAAM,GAAG,MAAM,OAAO,EAAE;AAC/B,QAAA,MAAM,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,KAAK,CAAC,CAAA,uBAAA,EAA0B,GAAG,CAAA,CAAE,CAAC,CAAC;AACzE,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,IAAA,CAAC,CAAC;AACJ;AAEA;;;;;;;AAOG;AACI,eAAe,eAAe,CAAC,OAA+B,EAAA;AACnE,IAAA,IAAI,WAAW;QAAE;AACjB,IAAA,IAAI,OAAO;AAAE,QAAA,OAAO,OAAO;AAE3B,IAAA,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE;AACvB,QAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;IAC5D;AAEA,IAAA,OAAO,GAAG,CAAC,YAAW;AACpB,QAAA,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE;AAC9B,YAAA,MAAM,UAAU,CAAC,kEAAkE,CAAC;QACtF;AAEA,QAAA,MAAM,UAAU,CAAC,sEAAsE,CAAC;AAExF,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AAClB,YAAA,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC;QACvF;AAEA,QAAA,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QAChC,WAAW,GAAG,IAAI;IACpB,CAAC,GAAG;AAEJ,IAAA,IAAI;AACF,QAAA,MAAM,OAAO;IACf;YAAU;;IAEV;AACF;AAEA;;;AAGG;SACa,uBAAuB,GAAA;AACrC,IAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,IAAA,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE;AACnB,QAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;IAC7F;AAEA,IAAA,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE;AAC3B,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,GAAG,CAAC,CAAC,eAAe,GAAG,SAAS;AACnF,IAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE;AACjD;;ACjFA;;AAEG;;ACFH;;AAEG;;;;"}
+{"version":3,"file":"siarashield_workspace.mjs","sources":["../../../projects/siarashield-workspace/src/lib/siara-shield.globals.ts","../../../projects/siarashield-workspace/src/lib/siara-shield-loader.service.ts","../../../projects/siarashield-workspace/src/lib/siara-shield.component.ts","../../../projects/siarashield-workspace/src/lib/siara-shield.ts","../../../projects/siarashield-workspace/src/public-api.ts","../../../projects/siarashield-workspace/src/siarashield_workspace.ts"],"sourcesContent":["export type InitCaptchaFn = (publicKey: string) => void;\nexport type CheckCaptchaFn = () => boolean;\n\nexport interface SiaraShieldGlobals {\n  initCaptcha?: InitCaptchaFn;\n  CheckCaptcha?: CheckCaptchaFn;\n  CyberSiaraToken?: string;\n  jQuery?: unknown;\n  $?: unknown;\n}\n\nexport function getSiaraShieldGlobals(): SiaraShieldGlobals {\n  return (globalThis as unknown as { [k: string]: unknown }) as SiaraShieldGlobals;\n}\n\n","import { DOCUMENT } from '@angular/common';\nimport { Inject, Injectable } from '@angular/core';\n\ntype ScriptStatus = 'idle' | 'loading' | 'loaded' | 'error';\n\nexport interface ScriptLoadOptions {\n  nonce?: string;\n}\n\n@Injectable({ providedIn: 'root' })\nexport class SiaraShieldLoaderService {\n  private statusBySrc = new Map<string, ScriptStatus>();\n  private pendingBySrc = new Map<string, Promise<void>>();\n\n  constructor(@Inject(DOCUMENT) private readonly document: Document) {}\n\n  loadScript(src: string, options?: ScriptLoadOptions): Promise<void> {\n    const existing = this.document.querySelector<HTMLScriptElement>(`script[src=\"${src}\"]`);\n    if (existing) return Promise.resolve();\n\n    const status = this.statusBySrc.get(src);\n    if (status === 'loaded') return Promise.resolve();\n    if (status === 'loading') {\n      const pending = this.pendingBySrc.get(src);\n      if (pending) return pending;\n    }\n\n    this.statusBySrc.set(src, 'loading');\n\n    const pending = new Promise<void>((resolve, reject) => {\n      const script = this.document.createElement('script');\n      script.src = src;\n      script.async = true;\n      if (options?.nonce) {\n        script.nonce = options.nonce;\n      }\n      script.onload = () => {\n        this.statusBySrc.set(src, 'loaded');\n        resolve();\n      };\n      script.onerror = () => {\n        this.statusBySrc.set(src, 'error');\n        reject(new Error(`Failed to load script: ${src}`));\n      };\n      this.document.head.appendChild(script);\n    });\n\n    this.pendingBySrc.set(src, pending);\n    return pending;\n  }\n}\n\n","import { AfterViewInit, Component, ElementRef, EventEmitter, Input, Output, ViewEncapsulation } from '@angular/core';\nimport { SiaraShieldLoaderService } from './siara-shield-loader.service';\nimport { getSiaraShieldGlobals } from './siara-shield.globals';\n\nconst JQUERY_FALLBACK_SRC = 'https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js';\n\nexport interface SiaraShieldInitOptions {\n  /** SiaraShield public key. Use \"TEST-CYBERSIARA\" for staging/development. */\n  publicKey: string;\n  /** Loads jQuery before SiaraShield script. Keep true if your page doesn't already include jQuery. */\n  loadJQuery?: boolean;\n  /** CSP nonce for strict policies (`script-src 'nonce-...'`). */\n  cspNonce?: string;\n}\n\n@Component({\n  selector: 'siara-shield',\n  standalone: true,\n  template: `<div class=\"SiaraShield\"></div>`,\n  encapsulation: ViewEncapsulation.None,\n})\nexport class SiaraShieldComponent implements AfterViewInit {\n  @Input({ required: true }) publicKey!: string;\n  @Input() loadJQuery = true;\n  @Input() cspNonce?: string;\n\n  /**\n   * Emits the current `CyberSiaraToken` right after a successful `checkCaptcha()`.\n   */\n  @Output() token = new EventEmitter<string>();\n\n  private initialized = false;\n\n  constructor(\n    private readonly host: ElementRef<HTMLElement>,\n    private readonly loader: SiaraShieldLoaderService,\n  ) {}\n\n  async ngAfterViewInit(): Promise<void> {\n    await this.init({ publicKey: this.publicKey, loadJQuery: this.loadJQuery, cspNonce: this.cspNonce });\n  }\n\n  async init(options: SiaraShieldInitOptions): Promise<void> {\n    if (this.initialized) return;\n\n    // Ensure the host element is in DOM before scripts run.\n    void this.host.nativeElement;\n\n    if (!options.publicKey) {\n      throw new Error('SiaraShieldComponent: publicKey is required.');\n    }\n    const cspNonce = this.resolveCspNonce(options.cspNonce);\n\n    if ((options.loadJQuery ?? true) && !this.isJQueryAlreadyAvailable()) {\n      await this.loader.loadScript(JQUERY_FALLBACK_SRC, { nonce: cspNonce });\n    }\n\n    await this.loader.loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js', {\n      nonce: cspNonce,\n    });\n\n    const g = getSiaraShieldGlobals();\n    if (!g.initCaptcha) {\n      throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');\n    }\n\n    g.initCaptcha(options.publicKey);\n    this.initialized = true;\n  }\n\n  /**\n   * Detect preloaded jQuery from global object or an existing script tag.\n   */\n  private isJQueryAlreadyAvailable(): boolean {\n    const g = getSiaraShieldGlobals();\n    if (typeof g.jQuery === 'function' || typeof g.$ === 'function') {\n      return true;\n    }\n\n    const existingJqueryScript = this.host.nativeElement.ownerDocument.querySelector<HTMLScriptElement>(\n      'script[src*=\"jquery\"]',\n    );\n    return Boolean(existingJqueryScript);\n  }\n\n  /**\n   * Uses explicit nonce first. If not provided, tries to reuse nonce\n   * from the first script tag or from `<meta name=\"csp-nonce\">`.\n   */\n  private resolveCspNonce(explicitNonce?: string): string | undefined {\n    if (explicitNonce) return explicitNonce;\n    const doc = this.host.nativeElement.ownerDocument;\n    const scriptWithNonce = doc.querySelector<HTMLScriptElement>('script[nonce]');\n    if (scriptWithNonce?.nonce) return scriptWithNonce.nonce;\n\n    const nonceMeta = doc.querySelector<HTMLMetaElement>('meta[name=\"csp-nonce\"]');\n    return nonceMeta?.content || undefined;\n  }\n\n  /**\n   * Calls the global `CheckCaptcha()` from SiaraShield script.\n   * Returns true when captcha is valid; emits token if available.\n   */\n  checkCaptcha(): boolean {\n    const g = getSiaraShieldGlobals();\n    if (!g.CheckCaptcha) {\n      throw new Error('SiaraShield: CheckCaptcha() is not available. Did init() run?');\n    }\n\n    const ok = g.CheckCaptcha();\n    if (ok && typeof g.CyberSiaraToken === 'string') {\n      this.token.emit(g.CyberSiaraToken);\n    }\n    return ok;\n  }\n}\n\n","import { getSiaraShieldGlobals } from './siara-shield.globals';\n\nconst JQUERY_FALLBACK_SRC = 'https://embedcdn.mycybersiara.com/capcha-temple/js/jquery.min.js';\n\nexport interface InitSiaraShieldOptions {\n  /** SiaraShield public key. Use \"TEST-CYBERSIARA\" for staging/development. */\n  publicKey: string;\n  /**\n   * Loads jQuery before SiaraShield script.\n   * If your site/app already loads jQuery, set this to false (not required to load again).\n   */\n  loadJQuery?: boolean;\n  /** CSP nonce for strict policies (`script-src 'nonce-...'`). */\n  cspNonce?: string;\n}\n\nlet pending: Promise<void> | null = null;\nlet initialized = false;\n\nfunction loadScript(src: string, nonce?: string): Promise<void> {\n  const existing = document.querySelector<HTMLScriptElement>(`script[src=\"${src}\"]`);\n  if (existing) return Promise.resolve();\n\n  return new Promise<void>((resolve, reject) => {\n    const script = document.createElement('script');\n    script.src = src;\n    script.async = true;\n    if (nonce) script.nonce = nonce;\n    script.onload = () => resolve();\n    script.onerror = () => reject(new Error(`Failed to load script: ${src}`));\n    document.head.appendChild(script);\n  });\n}\n\nfunction resolveCspNonce(explicitNonce?: string): string | undefined {\n  if (explicitNonce) return explicitNonce;\n  const scriptWithNonce = document.querySelector<HTMLScriptElement>('script[nonce]');\n  if (scriptWithNonce?.nonce) return scriptWithNonce.nonce;\n\n  const nonceMeta = document.querySelector<HTMLMetaElement>('meta[name=\"csp-nonce\"]');\n  return nonceMeta?.content || undefined;\n}\n\nfunction isJQueryAlreadyAvailable(): boolean {\n  const g = getSiaraShieldGlobals();\n  if (typeof g.jQuery === 'function' || typeof g.$ === 'function') {\n    return true;\n  }\n\n  const existingJqueryScript = document.querySelector<HTMLScriptElement>('script[src*=\"jquery\"]');\n  return Boolean(existingJqueryScript);\n}\n\n/**\n * Drop-in initializer for SiaraShield.\n * - Loads required scripts (optionally jQuery)\n * - Calls global `initCaptcha(publicKey)`\n *\n * Requirements in your HTML/template:\n * - You must render: `<div class=\"SiaraShield\"></div>`\n */\nexport async function initSiaraShield(options: InitSiaraShieldOptions): Promise<void> {\n  if (initialized) return;\n  if (pending) return pending;\n\n  if (!options?.publicKey) {\n    throw new Error('initSiaraShield: publicKey is required.');\n  }\n\n  pending = (async () => {\n    const cspNonce = resolveCspNonce(options.cspNonce);\n    if ((options.loadJQuery ?? true) && !isJQueryAlreadyAvailable()) {\n      await loadScript(JQUERY_FALLBACK_SRC, cspNonce);\n    }\n\n    await loadScript('https://embedcdn.mycybersiara.com/CaptchaFormate/CaptchaResources.js', cspNonce);\n\n    const g = getSiaraShieldGlobals();\n    if (!g.initCaptcha) {\n      throw new Error('SiaraShield: initCaptcha() is not available after loading scripts.');\n    }\n\n    g.initCaptcha(options.publicKey);\n    initialized = true;\n  })();\n\n  try {\n    await pending;\n  } finally {\n    // keep `pending` cached for subsequent callers\n  }\n}\n\n/**\n * Calls global `CheckCaptcha()` and returns its boolean result.\n * If successful, returns `{ ok: true, token?: string }`.\n */\nexport function checkSiaraShieldCaptcha(): { ok: boolean; token?: string } {\n  const g = getSiaraShieldGlobals();\n  if (!g.CheckCaptcha) {\n    throw new Error('SiaraShield: CheckCaptcha() is not available. Did initSiaraShield() run?');\n  }\n\n  const ok = g.CheckCaptcha();\n  const token = typeof g.CyberSiaraToken === 'string' ? g.CyberSiaraToken : undefined;\n  return ok ? { ok: true, token } : { ok: false };\n}\n\n","/*\n * Public API Surface of siarashield-workspace\n */\n\nexport * from './lib/siarashield-workspace';\nexport * from './lib/siara-shield.component';\nexport * from './lib/siara-shield-loader.service';\nexport * from './lib/siara-shield.globals';\nexport * from './lib/siara-shield';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["JQUERY_FALLBACK_SRC","i1.SiaraShieldLoaderService"],"mappings":";;;;SAWgB,qBAAqB,GAAA;AACnC,IAAA,OAAQ,UAAwE;AAClF;;MCHa,wBAAwB,CAAA;AAIY,IAAA,QAAA;AAHvC,IAAA,WAAW,GAAG,IAAI,GAAG,EAAwB;AAC7C,IAAA,YAAY,GAAG,IAAI,GAAG,EAAyB;AAEvD,IAAA,WAAA,CAA+C,QAAkB,EAAA;QAAlB,IAAA,CAAA,QAAQ,GAAR,QAAQ;IAAa;IAEpE,UAAU,CAAC,GAAW,EAAE,OAA2B,EAAA;AACjD,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAoB,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAC;AACvF,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACxC,IAAI,MAAM,KAAK,QAAQ;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,EAAE;AACjD,QAAA,IAAI,MAAM,KAAK,SAAS,EAAE;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;AAC1C,YAAA,IAAI,OAAO;AAAE,gBAAA,OAAO,OAAO;QAC7B;QAEA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;QAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AACpD,YAAA,MAAM,CAAC,GAAG,GAAG,GAAG;AAChB,YAAA,MAAM,CAAC,KAAK,GAAG,IAAI;AACnB,YAAA,IAAI,OAAO,EAAE,KAAK,EAAE;AAClB,gBAAA,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK;YAC9B;AACA,YAAA,MAAM,CAAC,MAAM,GAAG,MAAK;gBACnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;AACnC,gBAAA,OAAO,EAAE;AACX,YAAA,CAAC;AACD,YAAA,MAAM,CAAC,OAAO,GAAG,MAAK;gBACpB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;gBAClC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAA,CAAE,CAAC,CAAC;AACpD,YAAA,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACxC,QAAA,CAAC,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;AACnC,QAAA,OAAO,OAAO;IAChB;AAvCW,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,kBAIf,QAAQ,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAJjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cADX,MAAM,EAAA,CAAA;;2FACnB,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBADpC,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;0BAKnB,MAAM;2BAAC,QAAQ;;;ACV9B,MAAMA,qBAAmB,GAAG,kEAAkE;MAiBjF,oBAAoB,CAAA;AAaZ,IAAA,IAAA;AACA,IAAA,MAAA;AAbQ,IAAA,SAAS;IAC3B,UAAU,GAAG,IAAI;AACjB,IAAA,QAAQ;AAEjB;;AAEG;AACO,IAAA,KAAK,GAAG,IAAI,YAAY,EAAU;IAEpC,WAAW,GAAG,KAAK;IAE3B,WAAA,CACmB,IAA6B,EAC7B,MAAgC,EAAA;QADhC,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;IACtB;AAEH,IAAA,MAAM,eAAe,GAAA;QACnB,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtG;IAEA,MAAM,IAAI,CAAC,OAA+B,EAAA;QACxC,IAAI,IAAI,CAAC,WAAW;YAAE;;AAGtB,QAAA,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa;AAE5B,QAAA,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AACtB,YAAA,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC;QACjE;QACA,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;AAEvD,QAAA,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE;AACpE,YAAA,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAACA,qBAAmB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACxE;AAEA,QAAA,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,sEAAsE,EAAE;AACnG,YAAA,KAAK,EAAE,QAAQ;AAChB,SAAA,CAAC;AAEF,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AAClB,YAAA,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC;QACvF;AAEA,QAAA,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;AAChC,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI;IACzB;AAEA;;AAEG;IACK,wBAAwB,GAAA;AAC9B,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE;AAC/D,YAAA,OAAO,IAAI;QACb;AAEA,QAAA,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,aAAa,CAC9E,uBAAuB,CACxB;AACD,QAAA,OAAO,OAAO,CAAC,oBAAoB,CAAC;IACtC;AAEA;;;AAGG;AACK,IAAA,eAAe,CAAC,aAAsB,EAAA;AAC5C,QAAA,IAAI,aAAa;AAAE,YAAA,OAAO,aAAa;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa;QACjD,MAAM,eAAe,GAAG,GAAG,CAAC,aAAa,CAAoB,eAAe,CAAC;QAC7E,IAAI,eAAe,EAAE,KAAK;YAAE,OAAO,eAAe,CAAC,KAAK;QAExD,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAkB,wBAAwB,CAAC;AAC9E,QAAA,OAAO,SAAS,EAAE,OAAO,IAAI,SAAS;IACxC;AAEA;;;AAGG;IACH,YAAY,GAAA;AACV,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE;AACnB,YAAA,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC;QAClF;AAEA,QAAA,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE;QAC3B,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,EAAE;YAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QACpC;AACA,QAAA,OAAO,EAAE;IACX;uGA7FW,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,UAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,wBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAApB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,oBAAoB,yLAHrB,CAAA,+BAAA,CAAiC,EAAA,QAAA,EAAA,IAAA,EAAA,aAAA,EAAA,EAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,CAAA;;2FAGhC,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBANhC,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,cAAc;AACxB,oBAAA,UAAU,EAAE,IAAI;AAChB,oBAAA,QAAQ,EAAE,CAAA,+BAAA,CAAiC;oBAC3C,aAAa,EAAE,iBAAiB,CAAC,IAAI;AACtC,iBAAA;;sBAEE,KAAK;uBAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;;sBACxB;;sBACA;;sBAKA;;;AC3BH,MAAM,mBAAmB,GAAG,kEAAkE;AAc9F,IAAI,OAAO,GAAyB,IAAI;AACxC,IAAI,WAAW,GAAG,KAAK;AAEvB,SAAS,UAAU,CAAC,GAAW,EAAE,KAAc,EAAA;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAoB,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAC;AAClF,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE;IAEtC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,KAAI;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,QAAA,MAAM,CAAC,GAAG,GAAG,GAAG;AAChB,QAAA,MAAM,CAAC,KAAK,GAAG,IAAI;AACnB,QAAA,IAAI,KAAK;AAAE,YAAA,MAAM,CAAC,KAAK,GAAG,KAAK;QAC/B,MAAM,CAAC,MAAM,GAAG,MAAM,OAAO,EAAE;AAC/B,QAAA,MAAM,CAAC,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,KAAK,CAAC,CAAA,uBAAA,EAA0B,GAAG,CAAA,CAAE,CAAC,CAAC;AACzE,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,IAAA,CAAC,CAAC;AACJ;AAEA,SAAS,eAAe,CAAC,aAAsB,EAAA;AAC7C,IAAA,IAAI,aAAa;AAAE,QAAA,OAAO,aAAa;IACvC,MAAM,eAAe,GAAG,QAAQ,CAAC,aAAa,CAAoB,eAAe,CAAC;IAClF,IAAI,eAAe,EAAE,KAAK;QAAE,OAAO,eAAe,CAAC,KAAK;IAExD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAkB,wBAAwB,CAAC;AACnF,IAAA,OAAO,SAAS,EAAE,OAAO,IAAI,SAAS;AACxC;AAEA,SAAS,wBAAwB,GAAA;AAC/B,IAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,IAAA,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE;AAC/D,QAAA,OAAO,IAAI;IACb;IAEA,MAAM,oBAAoB,GAAG,QAAQ,CAAC,aAAa,CAAoB,uBAAuB,CAAC;AAC/F,IAAA,OAAO,OAAO,CAAC,oBAAoB,CAAC;AACtC;AAEA;;;;;;;AAOG;AACI,eAAe,eAAe,CAAC,OAA+B,EAAA;AACnE,IAAA,IAAI,WAAW;QAAE;AACjB,IAAA,IAAI,OAAO;AAAE,QAAA,OAAO,OAAO;AAE3B,IAAA,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE;AACvB,QAAA,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC;IAC5D;AAEA,IAAA,OAAO,GAAG,CAAC,YAAW;QACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;AAClD,QAAA,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC,wBAAwB,EAAE,EAAE;AAC/D,YAAA,MAAM,UAAU,CAAC,mBAAmB,EAAE,QAAQ,CAAC;QACjD;AAEA,QAAA,MAAM,UAAU,CAAC,sEAAsE,EAAE,QAAQ,CAAC;AAElG,QAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,QAAA,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AAClB,YAAA,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC;QACvF;AAEA,QAAA,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QAChC,WAAW,GAAG,IAAI;IACpB,CAAC,GAAG;AAEJ,IAAA,IAAI;AACF,QAAA,MAAM,OAAO;IACf;YAAU;;IAEV;AACF;AAEA;;;AAGG;SACa,uBAAuB,GAAA;AACrC,IAAA,MAAM,CAAC,GAAG,qBAAqB,EAAE;AACjC,IAAA,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE;AACnB,QAAA,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC;IAC7F;AAEA,IAAA,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE;AAC3B,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,GAAG,CAAC,CAAC,eAAe,GAAG,SAAS;AACnF,IAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE;AACjD;;AC1GA;;AAEG;;ACFH;;AAEG;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "siarashield_workspace",
-  "version": "0.0.2",
+  "version": "0.0.4",
   "description": "Angular wrapper for CyberSiara SiaraShield captcha embed.",
   "keywords": [
     "cybersiara",
@@ -27,4 +27,4 @@
       "default": "./fesm2022/siarashield_workspace.mjs"
     }
   }
-}
+}

package/types/siarashield_workspace.d.ts

@@ -1,12 +1,15 @@
 import * as i0 from '@angular/core';
 import { AfterViewInit, EventEmitter, ElementRef } from '@angular/core';
 
+interface ScriptLoadOptions {
+    nonce?: string;
+}
 declare class SiaraShieldLoaderService {
     private readonly document;
     private statusBySrc;
     private pendingBySrc;
     constructor(document: Document);
-    loadScript(src: string): Promise<void>;
+    loadScript(src: string, options?: ScriptLoadOptions): Promise<void>;
     static ɵfac: i0.ɵɵFactoryDeclaration<SiaraShieldLoaderService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<SiaraShieldLoaderService>;
 }
@@ -16,12 +19,15 @@ interface SiaraShieldInitOptions {
     publicKey: string;
     /** Loads jQuery before SiaraShield script. Keep true if your page doesn't already include jQuery. */
     loadJQuery?: boolean;
+    /** CSP nonce for strict policies (`script-src 'nonce-...'`). */
+    cspNonce?: string;
 }
 declare class SiaraShieldComponent implements AfterViewInit {
     private readonly host;
     private readonly loader;
     publicKey: string;
     loadJQuery: boolean;
+    cspNonce?: string;
     /**
      * Emits the current `CyberSiaraToken` right after a successful `checkCaptcha()`.
      */
@@ -30,13 +36,22 @@ declare class SiaraShieldComponent implements AfterViewInit {
     constructor(host: ElementRef<HTMLElement>, loader: SiaraShieldLoaderService);
     ngAfterViewInit(): Promise<void>;
     init(options: SiaraShieldInitOptions): Promise<void>;
+    /**
+     * Detect preloaded jQuery from global object or an existing script tag.
+     */
+    private isJQueryAlreadyAvailable;
+    /**
+     * Uses explicit nonce first. If not provided, tries to reuse nonce
+     * from the first script tag or from `<meta name="csp-nonce">`.
+     */
+    private resolveCspNonce;
     /**
      * Calls the global `CheckCaptcha()` from SiaraShield script.
      * Returns true when captcha is valid; emits token if available.
      */
     checkCaptcha(): boolean;
     static ɵfac: i0.ɵɵFactoryDeclaration<SiaraShieldComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<SiaraShieldComponent, "siara-shield", never, { "publicKey": { "alias": "publicKey"; "required": true; }; "loadJQuery": { "alias": "loadJQuery"; "required": false; }; }, { "token": "token"; }, never, never, true, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<SiaraShieldComponent, "siara-shield", never, { "publicKey": { "alias": "publicKey"; "required": true; }; "loadJQuery": { "alias": "loadJQuery"; "required": false; }; "cspNonce": { "alias": "cspNonce"; "required": false; }; }, { "token": "token"; }, never, never, true, never>;
 }
 
 type InitCaptchaFn = (publicKey: string) => void;
@@ -45,6 +60,8 @@ interface SiaraShieldGlobals {
     initCaptcha?: InitCaptchaFn;
     CheckCaptcha?: CheckCaptchaFn;
     CyberSiaraToken?: string;
+    jQuery?: unknown;
+    $?: unknown;
 }
 declare function getSiaraShieldGlobals(): SiaraShieldGlobals;
 
@@ -56,6 +73,8 @@ interface InitSiaraShieldOptions {
      * If your site/app already loads jQuery, set this to false (not required to load again).
      */
     loadJQuery?: boolean;
+    /** CSP nonce for strict policies (`script-src 'nonce-...'`). */
+    cspNonce?: string;
 }
 /**
  * Drop-in initializer for SiaraShield.
@@ -76,4 +95,4 @@ declare function checkSiaraShieldCaptcha(): {
 };
 
 export { SiaraShieldComponent, SiaraShieldLoaderService, checkSiaraShieldCaptcha, getSiaraShieldGlobals, initSiaraShield };
-export type { CheckCaptchaFn, InitCaptchaFn, InitSiaraShieldOptions, SiaraShieldGlobals, SiaraShieldInitOptions };
+export type { CheckCaptchaFn, InitCaptchaFn, InitSiaraShieldOptions, ScriptLoadOptions, SiaraShieldGlobals, SiaraShieldInitOptions };