solve-captchalisted

# solve-captcha — token-based CAPTCHA solving via 2Captcha Real-browser fingerprints (Camoufox) pass **passive** checks — Cloudflare interstitials, most Turnstile, sometimes an hCaptcha/reCAPTCHA checkbox. What they can't pass is an **interactive image challenge** ("select all crosswalks", "count the animals"). For those, we buy a solved token from **2Captcha** and inject it into the page's hidden response field, then submit normally. This is a **paid** service (~$0.001–0.003 per solve) — the key is authorization to spend it at that scale; don't loop it wastefully. The API key lives by name in `.secrets/captcha.env` (`TWOCAPTCHA_API_KEY`), gitignored, never hardcoded. Check funds: it fails loudly if the balance is 0. ## The order of preference (cheapest/most-robust first) 1. **OAuth login** ("Continue with Google/GitHub" — boseclaw is signed in). This skips the CAPTCHA entirely and costs nothing. ALWAYS try this before solving. 2. **Let Camoufox pass it passively** — for Turnstile / Cloudflare / a lone checkbox, just wait a few seconds; the hidden token often fills itself. 3. **Solve with 2Captcha** (this skill) — only when 1 and 2 fail, i.e. a real image challenge. ## Use it from a launch flow (the common case) The solver is already wired into the directory-launch engine (`directories/engine.mjs`) as a helper. Inside any `flows/<dir>.mjs`, at the point the CAPTCHA blocks you: ```js // … fill the signup form, click "I'm not a robot" / submit … await H.wait(2000); if