@anonympins/fingerprint 0.5.4 → 0.5.5

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## Version 0.5.5
+
+- **🔒 Client Session Handshake & HMAC Metric Signing**: Implemented elliptic-curve Diffie-Hellman (ECDH over curve `P-256`) key exchange protocol during client initialization (`?fp_handshake=1`). Leveraged the negotiated session key to cryptographically sign behavioral metrics (`signMetrics`) on the client using HMAC-SHA256, protecting against replay attacks and telemetry tampering.
+- **🧵 Non-Blocking Polymorphic Obfuscation Worker**: Offloaded CPU-heavy JavaScript obfuscation and parsing pipelines (`compilePolymorphicJs`) to a dedicated Node.js Worker Thread (`obfuscation.worker.js`). This isolates resource-intensive obfuscation tasks from the main event loop, preventing latency spikes on production servers.
+- **💾 Performance Optimizations with SimpleLRUCache**: Added an in-memory `SimpleLRUCache` to eliminate synchronous file system calls (`readFileSync`). Standardized caching of custom HTML challenge pages and static files (`fp.js`/`fp.wasm`).
+- **🛡️ Auto-Tuner Stability Guardrails & Rollbacks**: Implemented post-calculation validation checks with a configurable `validationTolerance` threshold (default `0.15`). Automatically rolls back unstable parameters and triggers an `autotuning_instability_alert` if proposed changes degrade FPR/FNR metrics.
+- **🧬 Strict Multi-Language Cross-Parity**: Aligned 32-bit single-precision floating-point (IEEE 754) calculations for chaotic map trajectories across WebGPU, WebGL, C++ WASM, and PHP environments. Guaranteed bit-to-bit convergence across 1,000 random seeds.
+- **🧮 Fixed Zero Threshold PoW Shift Error**: Patched a potential bitwise shift crash (`1n << shift` with a negative shift) inside `calculateTarget` when the suspicion score dropped to or below zero. Legitimate requests now resolve directly to the maximum target range.
+
 ## Version 0.5.4
 
 - **🔒 JA3/JA4 Handshake Parsing Hardening (PHP/Python)**: Fixed ALPN length constraints and untangled nested loops in the binary TLS Client Hello decoder, ensuring native and highly reliable raw JA4 fingerprint calculations directly at the socket layer.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anonympins/fingerprint",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
   "main": "index.js",
   "type": "module",

package/src/js/build-client.js

@@ -1,68 +1,68 @@
-import {promises as fs} from 'node:fs';
-import {dirname, join} from 'node:path';
-import {fileURLToPath} from 'node:url';
-import {exec} from 'node:child_process';
-import JavaScriptObfuscator from 'javascript-obfuscator';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-/**
- * Tente d'exécuter la commande de build pour le module WASM.
- * Ne bloque pas le build si la commande échoue (ex: em++ non trouvé).
- */
-function buildWasm() {
-  return new Promise((resolve) => {
-    console.log('Attempting to build WASM module (optional)...');
-    const command = "em++ src/cpp/main.cpp src/cpp/utils.cpp -o public/fp.js -s WASM=1 -s MODULARIZE=1 -s EXPORT_NAME='createFingerprintModule' -s \"EXPORTED_FUNCTIONS=['_hash_string','_solve_cpu_target','_solve_memory_challenge']\" -O3 --no-entry";
-    
-    exec(command, (error, stdout, stderr) => {
-      if (error) {
-        console.warn('WASM build failed (this is optional and can be ignored):', stderr);
-      } else {
-        console.log('WASM module built successfully.');
-      }
-      resolve(); // Toujours résoudre la promesse pour ne pas bloquer le build principal.
-    });
-  });
-}
-
-async function buildClientScript() {
-  try {
-    console.log('Reading client script...');
-    const clientScriptPath = join(__dirname, 'fingerprint.client.js');
-    const clientScriptContent = await fs.readFile(clientScriptPath, 'utf-8');
-
-    console.log('Obfuscating client script...');
-    const obfuscationResult = JavaScriptObfuscator.obfuscate(clientScriptContent, {
-      compact: true,
-      controlFlowFlattening: true, // Aplatit le flux de contrôle
-      deadCodeInjection: true, // Injecte du code mort
-      stringArray: true,
-      stringArrayRotate: true, // Fait tourner le tableau de chaînes
-      stringArrayShuffle: true, // Mélange le tableau de chaînes
-      // L'utilisation d'une graine (seed) de 0 signifie que l'obfuscation sera déterministe
-      // pour une même entrée. Pour une obfuscation unique à chaque build, on peut utiliser
-      // une graine aléatoire, par exemple : seed: Math.random()
-      seed: Math.random(),
-      selfDefending: true,
-    });
-
-    const obfuscatedCode = obfuscationResult.getObfuscatedCode();
-
-    console.log('Writing obfuscated script to fingerprint.client.obfuscated.js...');
-    await fs.writeFile(join(__dirname, './fingerprint.client.obfuscated.js'), obfuscatedCode);
-
-    console.log('Client script build process completed successfully.');
-  } catch (error) {
-    console.error('Error during client script build:', error);
-    process.exit(1);
-  }
-}
-
-async function main() {
-  await buildClientScript();
-  await buildWasm();
-}
-
+import {promises as fs} from 'node:fs';
+import {dirname, join} from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {exec} from 'node:child_process';
+import JavaScriptObfuscator from 'javascript-obfuscator';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+/**
+ * Tente d'exécuter la commande de build pour le module WASM.
+ * Ne bloque pas le build si la commande échoue (ex: em++ non trouvé).
+ */
+function buildWasm() {
+  return new Promise((resolve) => {
+    console.log('Attempting to build WASM module (optional)...');
+    const command = "em++ src/cpp/main.cpp src/cpp/utils.cpp -o public/fp.js -s WASM=1 -s MODULARIZE=1 -s EXPORT_NAME='createFingerprintModule' -s \"EXPORTED_FUNCTIONS=['_hash_string','_solve_cpu_target','_solve_memory_challenge','_generate_gpu_pow_trajectory']\" -O3 --no-entry";
+    
+    exec(command, (error, stdout, stderr) => {
+      if (error) {
+        console.warn('WASM build failed (this is optional and can be ignored):', stderr);
+      } else {
+        console.log('WASM module built successfully.');
+      }
+      resolve(); // Toujours résoudre la promesse pour ne pas bloquer le build principal.
+    });
+  });
+}
+
+async function buildClientScript() {
+  try {
+    console.log('Reading client script...');
+    const clientScriptPath = join(__dirname, 'fingerprint.client.js');
+    const clientScriptContent = await fs.readFile(clientScriptPath, 'utf-8');
+
+    console.log('Obfuscating client script...');
+    const obfuscationResult = JavaScriptObfuscator.obfuscate(clientScriptContent, {
+      compact: true,
+      controlFlowFlattening: true, // Aplatit le flux de contrôle
+      deadCodeInjection: true, // Injecte du code mort
+      stringArray: true,
+      stringArrayRotate: true, // Fait tourner le tableau de chaînes
+      stringArrayShuffle: true, // Mélange le tableau de chaînes
+      // L'utilisation d'une graine (seed) de 0 signifie que l'obfuscation sera déterministe
+      // pour une même entrée. Pour une obfuscation unique à chaque build, on peut utiliser
+      // une graine aléatoire, par exemple : seed: Math.random()
+      seed: Math.random(),
+      selfDefending: true,
+    });
+
+    const obfuscatedCode = obfuscationResult.getObfuscatedCode();
+
+    console.log('Writing obfuscated script to fingerprint.client.obfuscated.js...');
+    await fs.writeFile(join(__dirname, './fingerprint.client.obfuscated.js'), obfuscatedCode);
+
+    console.log('Client script build process completed successfully.');
+  } catch (error) {
+    console.error('Error during client script build:', error);
+    process.exit(1);
+  }
+}
+
+async function main() {
+  await buildClientScript();
+  await buildWasm();
+}
+
 main();