add dist

dist/modules/turnstile/verify.d.ts

@@ -0,0 +1,23 @@
+import 'server-only';
+import type { BasePayload } from 'payload';
+type VerifyTurnstileArgs = {
+    /** Optional client IP for stricter verification. */
+    ip?: string;
+    /** Payload instance — used to read the secret from SiteIntegrations. */
+    payload: BasePayload;
+    /** Token produced by the client-side widget. */
+    token: string;
+};
+/**
+ * Verifies a Turnstile token with Cloudflare, server-side only.
+ *
+ * The secret comes from the SiteIntegrations global (editor-managed, per the
+ * plugin's "secrets in the panel" model), read via the Local API which bypasses
+ * access control. `server-only` guarantees this never reaches the browser
+ * bundle, keeping the secret off the client.
+ *
+ * Returns false on any failure (missing secret/token, network error, rejected
+ * challenge) — callers treat false as "do not trust this submission".
+ */
+export declare function verifyTurnstile({ ip, payload, token, }: VerifyTurnstileArgs): Promise<boolean>;
+export {};