@anonympins/fingerprint 0.3.1 → 0.3.2

package/README.md

@@ -5,7 +5,7 @@
 ![GitHub commit activity](https://img.shields.io/github/commit-activity/w/anonympins/fingerprint)
 [![Watchers](https://img.shields.io/github/watchers/anonympins/fingerprint)](https://github.com/anonympins/fingerprint/watchers)
 
-An HTTP(S) client mitigation and anti-bot protection library for Node.js/Express, based on digital fingerprinting and dynamic Proof-of-Work (PoW) challenges.
+An HTTP(S) client mitigation and anti-bot protection library for both PHP and Node.js/Express, based on digital fingerprinting and dynamic Proof-of-Work (PoW) challenges.
 
 ## How It Works
 
@@ -47,16 +47,15 @@ For API clients, the challenge is delivered as a `404` JSON response, and the cl
 -   **Timing Attack Protection**: Uses `crypto.timingSafeEqual` for secure validation of tickets and other signatures.
 -   **Bot Whitelisting**: Includes a DNS-based verification mechanism to reliably identify and whitelist legitimate crawlers like Googlebot and Bingbot, preventing them from being challenged. The results are cached for optimal performance.
 -   **Automatic Parameter Tuning**: Includes a genetic algorithm-based optimizer (`startThresholdAutoTuning`) that analyzes real traffic to dynamically adjust suspicion thresholds, weights, and behavioral pattern detection parameters, improving accuracy and reducing false positives over time. The tuner is hardened against data poisoning attempts.
+-   **Optional WASM Acceleration**: The client-side library can be accelerated with a WebAssembly module for high-performance hashing. The build process handles this optionally, and the client gracefully falls back to a pure JavaScript implementation if WASM is unavailable.
 -   **Hardened Security**: Protects against various attacks, including DoS via memory exhaustion, invalid nonce submission, and uses cryptographically secure randomness for all sensitive operations.
 
 ## Installation and Usage
 
 This library is available for both **Node.js** and **PHP**.
 
-*   [Node.js (Express) Quickstart](#nodejs-express)
-*   [PHP Quickstart](#php)
-    *   [PHP Quickstart (Direct Integration)](#php-quickstart-direct-integration)
-    *   [PHP Quickstart (PSR-15 Middleware)](#php-quickstart-psr-15-middleware)
+*   [PHP Quickstart](#php-quickstart)
+*   [Node.js Quickstart](#nodejs-quickstart)
 
 ### Prerequisites
 
@@ -66,7 +65,7 @@ This library is available for both **Node.js** and **PHP**.
 
 ---
 
-### Prerequisites
+<a id="php-quickstart"></a>
 
 ## PHP Quickstart (Direct Integration)
 
@@ -114,6 +113,11 @@ $securityConfig = SecurityProfiles::createSecurityProfile('balanced', [
     'verbose' => true,
 ]);
 
+// IMPORTANT: For PHP environments, TLS fingerprinting (JA3/JA4) requires a reverse proxy
+// (like Nginx, HAProxy, or a cloud load balancer) to inspect the TLS handshake and
+// pass the fingerprint hashes to the PHP application via HTTP headers
+// (e.g., `X-JA3-Hash`, `X-JA4-Hash`).
+
 // 2. Create an instance of the DirectFingerprint protector.
 $protector = new DirectFingerprint($securityConfig);
 
@@ -134,13 +138,14 @@ echo "<p>Your suspicion score was: " . round($score, 2) . "</p>";
 ?>
 ```
 
-### [NodeJS Configuration](nodejs-express)
+<a id="nodejs-quickstart"></a>
+## NodeJS Configuration
 
-#### Prerequisites for Node.js
+### Prerequisites for Node.js
 
 Ensure you have middleware for parsing cookies (like `cookie-parser`) and request bodies (like `express.json` and `express.urlencoded`) set up in your Express application *before* the `powMiddleware`.
 
-#### Configuration
+### Configuration
 Define a secret key for signing PoW tickets in your environment variables.
 
 ```bash
@@ -255,7 +260,7 @@ const securityConfig = {
     },
     cpu: {
         minDifficultyBits: 8,
-        maxDifficultyBits: 24,
+        maxDifficultyBits: 32,
     },
     // (Optional) Configure the duration (in milliseconds) for various temporary data.
     ticketMaxAge: 3600000, // 1 hour. Duration for which a solved challenge ticket is valid.
@@ -361,6 +366,10 @@ const securityConfig = {
     enableUsefulWork: true,
     usefulWorkConfigPath: './path/to/your/problems.config.json' // (Optional) Path to the useful work configuration.
 };
+
+
+// Create an instance of the middleware with your security configuration.
+const powMiddlewareInstance = powMiddleware(securityConfig);
 ```
 
 
@@ -618,6 +627,11 @@ initializeClient({
   // (Optional) An array of `name` attributes for hidden form fields that act as bot traps.
   honeypots: ['email_confirm', 'user_nickname', 'website_url'],
  
+  // (Optional) Path to the WebAssembly loader script (`fp.js`) for accelerated hashing.
+  // If provided, the client will attempt to load the WASM module. If it fails or is not available,
+  // it will gracefully fall back to the pure JavaScript implementation.
+  wasmPath: '/fp.js',
+ 
   // (Optional) Enables automatic protection for `fetch` requests.
   // If the `fetch` object is present, the protection is active.
   fetch: {
@@ -743,6 +757,11 @@ app.get('/api/problems/solutions', (req, res) => {
 
 ```
 
+#### `getBestTuningSolution()`
+
+Returns the last best solution object found by the auto-tuner. This is particularly useful for "FinOps" or for auditing the tuner's performance, as it allows you to log the exact configuration that the genetic algorithm identified as optimal.
+
+*   **Returns**: (`object|null`) The best solution object `{ solution, objectives }` or `null` if no tuning cycle has completed yet. The `solution` property contains the optimized `weights`, `thresholds`, and `patterns`, while `objectives` contains the performance scores (e.g., false positive/negative rates) for that solution.
 
 #### `problemManager.updateProblemPayload(problemId, newPayload)`
 

package/fingerprint.builder.js

@@ -1,7 +1,8 @@
 /**
  * Algorithme de hachage cyrb53 (rapide et faible taux de collision).
  */
-export const cyrb53 = (str, seed = 0) => {
+// Exporté pour être utilisé comme fallback par fingerprint.client.js
+export const cyrb53 = (str, seed = 0) => { 
     let h1 = 0xdeadbeef ^ seed,
         h2 = 0x41c6ce57 ^ seed;
     for (let i = 0, ch; i < str.length; i++) {
@@ -24,7 +25,10 @@ export const cyrb53 = (str, seed = 0) => {
  */
 export class FingerprintBuilder {
     constructor() {
+        // Le hasher est maintenant une propriété pour pouvoir être surchargé par le client WASM.
         this.components = new Map();
+        // FIX: Initialiser le hasher par défaut à l'implémentation JS.
+        this.hasher = cyrb53;
     }
 
     /**
@@ -35,7 +39,7 @@ export class FingerprintBuilder {
     add(group, value) {
         if (value === undefined || value === null) return this;
         // On hash la valeur individuellement pour l'anonymiser et réduire sa taille
-        this.components.set(group, cyrb53(String(value)));
+        this.components.set(group, this.hasher(String(value)));
         return this;
     }
 

package/fingerprint.client.js

@@ -1,9 +1,19 @@
-import { cyrb53, FingerprintBuilder } from './fingerprint.builder.js';
+import { cyrb53 as jsCyrb53, FingerprintBuilder } from './fingerprint.builder.js';
 import { solveChallenge } from './pow.solver.js';
 
+// Variable pour stocker la fonction de hachage active.
+// Par défaut, c'est l'implémentation JavaScript.
+let activeCyrb53 = jsCyrb53;
+
 const ClientLibrary = {
     // Cache pour éviter de recalculer les constantes (Hardware, etc.)
     _cachedBuilder: null,
+    /**
+     * Wrapper interne pour la fonction de hachage.
+     * @private
+     */
+    _hasher: (str, seed) => activeCyrb53(str, seed),
+
     /**
      * Génère l'empreinte de l'appareil actuel.
      */
@@ -12,7 +22,7 @@ const ClientLibrary = {
             console.error("getDeviceFingerprint can only be called on the client-side.");
             return "";
         }
-
+        
         if (!this._cachedBuilder) {
             const nav = window.navigator;
             const screen = window.screen;
@@ -21,7 +31,7 @@ const ClientLibrary = {
 
             // 1. Hardware (Très stable) : Cœurs, RAM, GPU (si dispo via canvas), Touch
             this._cachedBuilder.add(
-                "hw",
+                "hw", // Utilise maintenant le hasher actif
                 `${nav.hardwareConcurrency}_${nav.deviceMemory}_${nav.maxTouchPoints}`,
             );
 
@@ -111,7 +121,7 @@ const ClientLibrary = {
             .sort()
             .map((k) => `${k}=${payload[k]}`)
             .join("&");
-        const payloadHash = cyrb53(sortedPayload);
+        const payloadHash = this._hasher(sortedPayload);
         return `${deviceFp}|req:${payloadHash}`;
     },
 
@@ -138,6 +148,8 @@ const ClientLibrary = {
      * Resets the cached fingerprint builder. Used for testing purposes.
      */
     _resetCache() {
+        // Réinitialise le hasher à l'implémentation JS par défaut.
+        activeCyrb53 = jsCyrb53;
         this._cachedBuilder = null;
     },
 
@@ -345,7 +357,7 @@ const ClientLibrary = {
     };
 
     this.addFetchInterceptor(fingerprintInterceptor);
-  },
+  }, // <-- VIRGULE AJOUTÉE ICI
   
   /**
    * Intercepte une réponse de challenge JSON, le résout, et réessaie la requête.
@@ -388,18 +400,11 @@ const ClientLibrary = {
       console.error('[Fingerprint] Failed to solve or retry challenge:', e);
       return response; // Retourne la réponse 429 originale en cas d'échec
     }
-  },
-/**
- * @typedef {object} ClientConfig
- * @property {boolean} [mouse=true] - Activer le suivi de l'entropie de la souris.
- * @property {boolean} [keystrokes=true] - Activer le suivi de la dynamique de frappe.
- * @property {string[]} [honeypots] - Noms des champs de formulaire honeypot à initialiser.
- * @property {object} [fetch] - Configuration pour l'interception de fetch.
- * @property {string[]} [fetch.targetDomains] - Domaines à protéger. Si non fourni, protège les requêtes de même origine.
- */
+  }, // <-- VIRGULE AJOUTÉE ICI
 
 /**
  * Initialise toutes les protections côté client en une seule fois.
+ * Tente également de charger le module WASM si `wasmPath` est fourni.
  * C'est la méthode d'initialisation recommandée.
  * @param {ClientConfig} [config={}] - L'objet de configuration.
  */
@@ -408,9 +413,15 @@ const ClientLibrary = {
         mouse = true,
         keystrokes = true,
         honeypots = [],
-        fetch: fetchConfig = {},
+        wasmPath, // Nouveau paramètre
+        fetch: fetchConfig = {}
     } = config;
 
+    // Tentative de chargement du WASM si le chemin est fourni
+    if (wasmPath) {
+        this.initializeWasm(wasmPath);
+    }
+
     if (mouse) {
         this.startMouseEntropyTracker();
     }
@@ -426,14 +437,57 @@ const ClientLibrary = {
 
         // Ajoute l'intercepteur pour la résolution de challenge
         if (fetchConfig.handleChallenges !== false) {
-          this.addFetchInterceptor(async (resource, options, next) => {
-            const originalResponse = await next(resource, options);
-            // On clone la réponse pour que la lecture du corps par solveChallengeAndRetry ne la consomme pas pour l'appelant original.
-            return this.solveChallengeAndRetry(originalResponse.clone(), resource, options);
-          });
+            this.addFetchInterceptor(async (resource, options, next) => {
+                const originalResponse = await next(resource, options);
+                // On clone la réponse pour que la lecture du corps par solveChallengeAndRetry ne la consomme pas pour l'appelant original.
+                return this.solveChallengeAndRetry(originalResponse.clone(), resource, options);
+            });
+        }
+    }
+  },
+
+    /**
+     * Tente de charger et d'initialiser le module WebAssembly pour un hachage plus rapide.
+     * Si le chargement échoue, il se rabat silencieusement sur l'implémentation JS.
+     * @param {string} wasmPath - Le chemin vers le script de chargement du module WASM (ex: '/fp.js').
+     */
+    async initializeWasm(wasmPath) {
+        try {
+            // 1. Injecter le script qui charge le module WASM
+            const script = document.createElement('script');
+            script.src = wasmPath;
+            await new Promise((resolve, reject) => {
+                script.onload = resolve;
+                script.onerror = reject;
+                document.head.appendChild(script);
+            });
+
+            // 2. Attendre que la fonction globale `createFingerprintModule` soit disponible
+            if (typeof window.createFingerprintModule !== 'function') {
+                throw new Error('WASM loader script did not expose createFingerprintModule.');
+            }
+
+            // 3. Initialiser le module
+            const wasmModule = await window.createFingerprintModule();
+            if (typeof wasmModule._hash_string !== 'function') {
+                throw new Error('WASM module did not export _hash_string.');
+            }
+
+            // 4. Remplacer la fonction de hachage par la version WASM
+            activeCyrb53 = (str) => {
+                // La fonction C++ attend un pointeur, Emscripten gère la conversion
+                return wasmModule._hash_string(str);
+            };
+
+            console.log('[Fingerprint] WASM module loaded successfully. Using fast hashing.');
+            // NOUVEAU: Ajoute un indicateur à l'empreinte pour que le serveur sache que le WASM est actif.
+            if (this._cachedBuilder) {
+                this._cachedBuilder.addRaw('wasm', 'true');
+            }
+        } catch (error) {
+            console.warn('[Fingerprint] WASM module failed to load. Falling back to JS implementation. Error:', error);
         }
     }
-  }
 };
 
 /**
@@ -477,6 +531,7 @@ export const addFetchInterceptor = ClientLibrary.addFetchInterceptor.bind(Client
 export const patchGlobalFetch = ClientLibrary.patchGlobalFetch.bind(ClientLibrary);
 export const initializeFetch = ClientLibrary.initializeFetch.bind(ClientLibrary);
 export const initializeClient = ClientLibrary.initializeClient.bind(ClientLibrary);
+export const initializeWasm = ClientLibrary.initializeWasm.bind(ClientLibrary);
 export const solveChallengeAndRetry = ClientLibrary.solveChallengeAndRetry.bind(ClientLibrary);
 
 // Export the internal object for testing purposes

package/fingerprint.js

@@ -235,6 +235,38 @@ const getPowSolverCode = () => {
   return readFileSync(solverPath, 'utf-8');
 };
 
+/**
+ * @private
+ * A mapping of IANA cipher suite names (as used by Node.js) to their decimal IDs.
+ * This is essential for correct JA3 fingerprint calculation.
+ * The list is not exhaustive but covers the most common cipher suites.
+ */
+const cipherSuiteMap = {
+    'TLS_AES_128_GCM_SHA256': 4865,
+    'TLS_AES_256_GCM_SHA384': 4866,
+    'TLS_CHACHA20_POLY1305_SHA256': 4867,
+    'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256': 49195,
+    'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256': 49199,
+    'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384': 49196,
+    'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384': 49200,
+    'TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256': 52393,
+    'TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256': 52392,
+    'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA': 49171,
+    'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA': 49172,
+    'TLS_RSA_WITH_AES_128_GCM_SHA256': 156,
+    'TLS_RSA_WITH_AES_256_GCM_SHA384': 157,
+    'TLS_RSA_WITH_AES_128_CBC_SHA': 47,
+    'TLS_RSA_WITH_AES_256_CBC_SHA': 53,
+    // Older/Less common suites
+    'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA': 49161,
+    'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA': 49162,
+    'TLS_DHE_RSA_WITH_AES_128_GCM_SHA256': 158,
+    'TLS_DHE_RSA_WITH_AES_256_GCM_SHA384': 159,
+    'TLS_DHE_RSA_WITH_AES_128_CBC_SHA': 51,
+    'TLS_DHE_RSA_WITH_AES_256_CBC_SHA': 57,
+    'TLS_RSA_WITH_3DES_EDE_CBC_SHA': 10,
+};
+
 /**
  * Extracts TLS fingerprints (JA3 and JA4) from request context.
  * Prioritizes headers from reverse proxies (x-ja4-hash) and falls back to JA3 calculation
@@ -265,15 +297,19 @@ function getTlsFingerprint(context) {
 
             // The official JA3 spec includes the TLS version.
             // Node.js provides it as a string like 'TLSv1.3', we need the corresponding decimal value.
-            const tlsVersionMap = {
+            const tlsVersionMap = { // NOSONAR
                 'TLSv1': 769, 'TLSv1.1': 770, 'TLSv1.2': 771, 'TLSv1.3': 772
             };
             const tlsVersionId = tlsVersionMap[version] || 0;
 
+            // Convert cipher suite names to their decimal IDs.
+            const cipherIds = Array.isArray(ciphers)
+                ? ciphers.map(c => cipherSuiteMap[c.name] || c).join('-') // Use the raw ID if name is not in map
+                : '';
+
             const ja3String = [
                 tlsVersionId,
-                // The ciphers array from clientHello is an array of objects, not just IDs.
-                Array.isArray(ciphers) ? ciphers.join('-') : '',
+                cipherIds,
                 extensions?.join('-') || '',
                 ellipticCurves?.join('-') || '',
                 ellipticCurvePointFormats?.join('-') || ''
@@ -906,7 +942,7 @@ function getHoneypotScore(context, honeypotConfig = {}) {
  */
 const injectionPatterns = {
     // SQL/NoSQL injections, including time-based attacks
-    sql: /(\$ne|' *OR *'1'='1|['";]\s*--|; ?(DROP|TRUNCATE|DELETE)|UNION SELECT|SLEEP\(|BENCHMARK\(|WAITFOR DELAY)/i,
+    sql: /(\$ne|\' *OR *\'1\'=\'1|['";]\s*--|; ?(DROP|TRUNCATE|DELETE)|UNION SELECT|(?:SLEEP|BENCHMARK)\s*\(|WAITFOR DELAY)/i,
     // Log4Shell (JNDI injection)
     log4shell: /\$\{jndi:(ldap|rmi|dns):/i,
     // Server-Side Template Injection (SSTI) for engines like Jinja2, Twig, etc.
@@ -983,7 +1019,7 @@ function getBehaviorScore(context) {
       if (keystrokeDeviation > 0.15) score += 40;
     }
 
-    return { behaviorScore: Math.max(0, Math.min(100, score)) }; // Assure que le score reste entre 0 et 100
+    return { behaviorScore: Math.min(100, score) }; // Assure que le score ne dépasse pas 100, mais peut être négatif (bonus)
   } catch (e) {
     return { behaviorScore: 10 }; // En-tête malformé = légèrement suspect.
   }
@@ -3093,6 +3129,7 @@ export const __internal = {
 // --- THRESHOLD AUTO-TUNING SECTION ---
 
 let autoTuningJobId = null;
+let lastBestSolution = null; // NOUVEAU: Stocke la meilleure solution trouvée
 
 /**
  * Executes a threshold optimization pass using collected traffic data.
@@ -3151,30 +3188,47 @@ function runThresholdOptimization(securityConfig, trafficData, minDataPoints, ma
 
   /**
    * Met à jour un objet de configuration (ex: thresholds, weights) en douceur.
+   * Cette nouvelle version préserve la proportionnalité des valeurs initiales.
    * @param {object} currentConfig - La configuration actuelle à modifier.
    * @param {object} targetConfig - La configuration cible proposée par l'optimiseur.
    */
   const applyInertialUpdate = (currentConfig, targetConfig) => {
-      if (!currentConfig || !targetConfig) return; // Vérifier aussi currentConfig
-      for (const key in targetConfig) {
-          if (Object.hasOwnProperty.call(currentConfig, key)) {
-              const currentValue = currentConfig[key];
-              const targetValue = targetConfig[key];
-              const delta = targetValue - currentValue;
-              const maxChange = Math.abs(currentValue * MAX_CHANGE_VELOCITY);
-
-              // Limite le changement à la vélocité maximale
-              const change = Math.max(-maxChange, Math.min(maxChange, delta));
-              
-              currentConfig[key] += change;
-          }
+    if (!currentConfig || !targetConfig) return; // Vérifier aussi currentConfig
+
+    // --- NOUVELLE LOGIQUE PROPORTIONNELLE ---
+    let totalCurrentWeight = 0;
+    let totalTargetWeight = 0;
+
+    // 1. Calculer la somme des poids actuels et cibles pour les clés communes.
+    for (const key in currentConfig) {
+      if (Object.hasOwnProperty.call(targetConfig, key)) {
+        totalCurrentWeight += currentConfig[key];
+        totalTargetWeight += targetConfig[key];
       }
-  };
+    }
 
+    if (totalCurrentWeight === 0) return; // Éviter la division par zéro
+
+    // 2. Déterminer le ratio de changement global et le limiter par la vélocité.
+    // Cela crée un "facteur d'ajustement" unique pour l'ensemble de la configuration.
+    const globalChangeRatio = (totalTargetWeight - totalCurrentWeight) / totalCurrentWeight;
+    const adjustmentFactor = Math.max(-MAX_CHANGE_VELOCITY, Math.min(MAX_CHANGE_VELOCITY, globalChangeRatio));
+
+    // 3. Appliquer ce facteur à chaque valeur de la configuration actuelle.
+    // Cela fait "glisser" l'ensemble de la configuration tout en préservant les proportions.
+    for (const key in currentConfig) {
+      if (Object.hasOwnProperty.call(targetConfig, key)) {
+        currentConfig[key] *= (1 + adjustmentFactor);
+      }
+    }
+  };
   applyInertialUpdate(securityConfig.thresholds, newConfig.thresholds);
   applyInertialUpdate(securityConfig.weights, newConfig.weights);
   applyInertialUpdate(securityConfig.patterns, newConfig.patterns);
 
+  // NOUVEAU: Stocker la meilleure solution pour une consultation externe
+  lastBestSolution = bestSolution;
+
   console.log("[AutoTuning] Nouvelle configuration de sécurité optimisée appliquée.");
   console.log("[AutoTuning] Objectifs atteints :", { falsePositiveRate: bestSolution.objectives[0].toFixed(4), falseNegativeRate: bestSolution.objectives[1].toFixed(4) });
   console.log("[AutoTuning] Nouveaux seuils :", securityConfig.thresholds);
@@ -3228,3 +3282,13 @@ export function stopThresholdAutoTuning() {
         console.log("[AutoTuning] Job d'optimisation des seuils arrêté.");
     }
 }
+
+/**
+ * Returns the last best solution found by the auto-tuner.
+ * This is useful for logging or creating a "finops" security configuration.
+ * @export
+ * @returns {object|null} The best solution object { solution, objectives } or null if no tuning has run.
+ */
+export function getBestTuningSolution() {
+    return lastBestSolution;
+}

package/library.js

@@ -1635,6 +1635,8 @@ Optimization.Operators.solveFullSecurityTuning = (context, options = {}) => {
             behaviorScore: secureRandom(),
             crossLayerInconsistencyScore: secureRandom(),
             timeInconsistencyScore: secureRandom(),
+            tlsSpoofingScore: secureRandom(), // NOUVEAU: Ajout du poids pour le spoofing TLS
+            botScore: secureRandom(), // NOUVEAU: Ajout du poids pour la détection de bot
         },
         patterns: {
             velocityThreshold: 100 + secureRandom() * 400, // 100-500ms

package/package.json

@@ -1,94 +1,95 @@
-{
-  "name": "@anonympins/fingerprint",
-  "version": "0.3.1",
-  "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
-  "main": "fingerprint.js",
-  "type": "module",
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "scripts": {
-    "test": "vitest run --reporter=verbose",
-    "build": "npm run build:client",
-    "build:client": "node build-client.js"
-  },
-  "files": [
-    "fingerprint.js",
-    "fingerprint.client.js",
-    "fingerprint.client.obfuscated.js",
-    "fingerprint.builder.js",
-    "pow.solver.js",
-    "pow.worker.js",
-    "pow.solver.inline.js",
-    "problem-manager.js",
-    "optimization.worker.js",
-    "library.js",
-    "redis-store.js",
-    "mongodb-store.js",
-    "sql-store.js",
-    "README.md",
-    "LICENSE"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/anonympins/fingerprint.git"
-  },
-  "keywords": [
-    "anti-bot",
-    "bot-detection",
-    "security",
-    "middleware",
-    "express",
-    "nodejs",
-    "fingerprint",
-    "device-fingerprinting",
-    "ja3",
-    "tls-fingerprinting",
-    "proof-of-work",
-    "pow",
-    "useful-proof-of-work",
-    "upow",
-    "waf",
-    "scraping",
-    "scalping",
-    "mitigation",
-    "rate-limiting",
-    "honeypot",
-    "behavioral-analysis"
-  ],
-  "author": "anonympins",
-  "license": "MIT",
-  "bugs": {
-    "url": "https://github.com/anonympins/fingerprint/issues"
-  },
-  "homepage": "https://github.com/anonympins/fingerprint#readme",
-  "devDependencies": {
-    "body-parser": "^1.20.2",
-    "cookie-parser": "^1.4.6",
-    "express": "^4.18.2",
-    "prom-client": "^15.1.2",
-    "vitest": "^4.1.11",
-    "javascript-obfuscator": "^4.1.0",
-    "terser": "^5.30.3"
-  },
-  "peerDependencies": {
-    "ioredis": "^5.3.2",
-    "knex": ">=3.0.0",
-    "mongodb": "^6.3.0",
-    "sqlite3": "^5.1.7"
-  },
-  "peerDependenciesMeta": {
-    "ioredis": {
-      "optional": true
-    },
-    "mongodb": {
-      "optional": true
-    },
-    "knex": {
-      "optional": true
-    },
-    "sqlite3": {
-      "optional": true
-    }
-  }
-}
+{
+  "name": "@anonympins/fingerprint",
+  "version": "0.3.2",
+  "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
+  "main": "fingerprint.js",
+  "type": "module",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "test": "vitest run --reporter=verbose",
+    "build": "node build-client.js"
+  },
+  "files": [
+    "fingerprint.js",
+    "fingerprint.client.js",
+    "fingerprint.client.obfuscated.js",
+    "fingerprint.builder.js",
+    "pow.solver.js",
+    "pow.worker.js",
+    "pow.solver.inline.js",
+    "problem-manager.js",
+    "optimization.worker.js",
+    "library.js",
+    "redis-store.js",
+    "mongodb-store.js",
+    "sql-store.js", 
+    "public/fp.wasm",
+    "README.md",
+    "LICENSE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/anonympins/fingerprint.git"
+  },
+  "keywords": [
+    "anti-bot",
+    "bot-detection",
+    "security",
+    "middleware",
+    "express",
+    "nodejs",
+    "fingerprint",
+    "device-fingerprinting",
+    "ja3",
+    "tls-fingerprinting",
+    "proof-of-work",
+    "pow",
+    "useful-proof-of-work",
+    "upow",
+    "waf",
+    "scraping",
+    "scalping",
+    "mitigation",
+    "rate-limiting",
+    "honeypot",
+    "behavioral-analysis"
+  ],
+  "author": "anonympins",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/anonympins/fingerprint/issues"
+  },
+  "homepage": "https://github.com/anonympins/fingerprint#readme",
+  "devDependencies": {
+    "body-parser": "^1.20.2",
+    "cookie-parser": "^1.4.6",
+    "express": "^4.18.2",
+    "prom-client": "^15.1.2",
+    "vitest": "^4.1.11",
+    "javascript-obfuscator": "^4.1.0",
+    "terser": "^5.30.3",
+    "jsdom": "^24.0.0"
+  },
+  "peerDependencies": {
+    "ioredis": "^5.3.2",
+    "knex": ">=3.0.0",
+    "mongodb": "^6.3.0",
+    "sqlite3": "^5.1.7"
+  },
+  "peerDependenciesMeta": {
+    "ioredis": {
+      "optional": true
+    },
+    "mongodb": {
+      "optional": true
+    },
+    "knex": {
+      "optional": true
+    },
+    "sqlite3": {
+      "optional": true
+    }
+  }
+}