@anonympins/fingerprint 0.6.3 → 0.6.5

package/CHANGELOG.md

@@ -1,3 +1,25 @@
+## Version 0.6.5
+
+- 🧬 **Auto-Tuner Upgrades & Threat Profiles**:
+  - **Threat-Profile Aware Tuning**: Integrated predefined security and threat profiles (e.g., `balanced`, `strict`, `api`) directly into the Auto-Tuner loop, ensuring optimized parameters dynamically align with the active defense posture.
+  - **Threshold Auto-Tuning Stabilization**: Disabled raw suspicion score threshold autotuning to prevent boundary drift, keeping decision limits highly predictable while focusing optimizer learning cycles on feature weights.
+- 🌐 **Federated Consensus & Proof-of-Work Verification**:
+  - **Federated Consensus Protocols (`federationConsensus`)**: Hardened decentralized consensus validation across federated peer nodes, improving consensus routing speed and securing verification against distributed proxy and replay tactics.
+  - **Cryptographic Sample Derivation (`deriveSampleIndices`)**: Reinforced the verification pipeline by binding sample coordinate indexing inside cryptographic challenges to a secure, time-windowed HMAC of the client IP and secret key, completely neutralizing lookup bypasses.
+- 🛡️ **Library Security Hardening**:
+  - Resolved critical security alerts and code-quality edge cases inside the main runtime library (`src/js/library.js`).
+
+## Version 0.6.4
+
+- 🔑 **IP and TLS Session Binding in CPU Challenge**: Reinforced CPU challenge security by cryptographically binding the client's IP and `tlsSessionId` to the challenge's binary block (`baseBlock`). This effectively prevents replay attacks and the sharing of calculation solutions between distinct sessions or IP addresses.
+- 🛡️ **Intelligent Filtering and Whitelist Inspection**:
+  - **Certain Attack Detection**: Added a mechanism that automatically bypasses the whitelist if an "authorized" client triggers a honeypot or presents obvious bot signatures (`_hasCertainAttack`).
+  - **Inspection Thresholds (`filterWhitelist`)**: Ability to inspect and challenge whitelist requests if their suspicion score exceeds a configurable limit (numeric or strict).
+  - **Updated Security Profiles**: Default integration of the `filterWhitelist` parameter across all predefined profiles (`balanced` at 85.0, `api` at 75.0, `blog` at 90.0, and `strict` and `ecommerce` set to `true` [strict]).
+- 🧬 **Auto-Tuner Extensions & Log Compression**: Improved the auto-tuning engine to better handle recent log patterns, adaptively optimize configurations, and smooth out transitions with better inertia management.
+- ⚡ **Automatic uPoW Updates**: The Auto-Tuner now autonomously updates useful Proof-of-Work (uPoW) task configurations using optimized Pareto fronts.
+- 🧹 **Store Reset on Startup**: Introduced the `reset` configuration option to cleanly empty the active persistence store during the initial instantiation of the fingerprinting engine.
+
 ## Version 0.6.3
 
 - 🛡️ **Subnet & Botnet Scoring Upgrades**: Refined the IP Subnet reputation score to use an advanced, continuous analog calculation while handling potential `NaN` boundary edge cases. Enhanced the `botnetClusterScore` algorithm to improve grouping and detection precision of clustered threats.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anonympins/fingerprint",
-  "version": "0.6.3",
+  "version": "0.6.5",
   "description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
   "main": "index.js",
   "type": "module",