@prosopo/cli 3.6.48 → 3.6.49

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/cli@3.6.48 build:cjs
+> @prosopo/cli@3.6.49 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/cli@3.6.48 build:tsc
+> @prosopo/cli@3.6.49 build:tsc
 > tsc --build --verbose
 
-3:25:42 PM - Projects in this build: 
+10:33:46 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../locale/tsconfig.json
     * ../util/tsconfig.json
@@ -28,53 +28,53 @@
     * ../../dev/workspace/tsconfig.json
     * tsconfig.json
 
-3:25:42 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/NodejsPolarsNativeFilePlugin.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/procaptcha/api.ts' is older than output '../types/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/provider/api.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/logger.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/error.ts' is older than output '../common/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/tests/utils/batches.unit.test.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../dotenv/tsconfig.json' is up to date because newest input '../dotenv/src/env.ts' is older than output '../dotenv/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../dotenv/tsconfig.json' is up to date because newest input '../dotenv/src/env.ts' is older than output '../dotenv/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/IpInfoService.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/IpInfoService.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/redisClient.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/ruleRecord.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/types/captcha.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/unit/databases/centralDbStreamer.unit.test.ts' is older than output '../database/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/mongoGlobalSetup.ts' is older than output '../database/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/index.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/keyring/keyring.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/env.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/env.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/env.ts' is older than output '../env/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/env.ts' is older than output '../env/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/errorHandler.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/tests/unit/errorHandler.unit.test.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/mocks/data/captchas.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/dataset.unit.test.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/balancer.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/index.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../provider/tsconfig.json' is up to date because newest input '../provider/src/util.ts' is older than output '../provider/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../provider/tsconfig.json' is up to date because newest input '../provider/src/utils/dns.ts' is older than output '../provider/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project '../../dev/workspace/tsconfig.json' is up to date because newest input '../../dev/workspace/src/index.ts' is older than output '../../dev/workspace/tsconfig.tsbuildinfo'
+10:33:47 PM - Project '../../dev/workspace/tsconfig.json' is up to date because newest input '../../dev/workspace/src/index.ts' is older than output '../../dev/workspace/tsconfig.tsbuildinfo'
 
-3:25:42 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+10:33:47 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-3:25:42 PM - Building project '/home/runner/work/captcha/captcha/packages/cli/tsconfig.json'...
+10:33:47 PM - Building project '/home/runner/work/captcha/captcha/packages/cli/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/cli@3.6.48 build
+> @prosopo/cli@3.6.49 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/cli@3.6.48 build:cross-env
+> @prosopo/cli@3.6.49 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -83,4 +83,4 @@ rendering chunks...
 dist/commands/siteKeyRegister.js              3.67 kB
 dist/prosopo.config.js                        4.91 kB
 dist/RateLimiter.js                           5.25 kB
-✓ built in 346ms
+✓ built in 360ms

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @prosopo/cli
 
+## 3.6.49
+### Patch Changes
+
+- Updated dependencies [ec363e9]
+  - @prosopo/provider@4.13.1
+  - @prosopo/env@3.6.2
+
 ## 3.6.48
 ### Patch Changes
 

package/dist/bundle/provider.cli.bundle.js

@@ -1758,7 +1758,7 @@ function zr(e, t, r) {
     throw new Error(`Index ${t} smaller than 0`);
   return e[t];
 }
-const yMe = typeof process < "u" ? "3.6.48" : void 0, Ave = yMe || "dev", k6 = new Array(256), bve = new Array(256 * 256);
+const yMe = typeof process < "u" ? "3.6.49" : void 0, Ave = yMe || "dev", k6 = new Array(256), bve = new Array(256 * 256);
 for (let e = 0; e < 256; e++)
   k6[e] = e.toString(16).padStart(2, "0");
 for (let e = 0; e < 256; e++) {
@@ -95293,6 +95293,87 @@ class I2e {
       })), null;
     }
   }
+  /**
+   * Cache an origin → escalation sessionId mapping for the post-PoW
+   * escalation flow.
+   *
+   * Background: when the routing machine returns image/puzzle from the
+   * postPow phase, `buildEscalation` (`api/captcha/submitPoWCaptchaSolution.ts`)
+   * mints a new session with a fresh `sessionId` and returns it on the
+   * `escalation` field. A widget that handles the escalation cleanly
+   * mounts the next captcha with the new sessionId. But there are
+   * several real-world paths where the widget keeps using the original
+   * sessionId for the follow-up `/captcha/{type}` request — bundled SDK
+   * versions that predate the escalation handler, dapps that hand-roll
+   * the wrapper, network-glitch retries, or browser-tab races. The
+   * original session has been consumed and soft-deleted by the
+   * preceding `/captcha/pow`, so the follow-up gets
+   * `CAPTCHA.NO_SESSION_FOUND` and the user sees an inline error → FAQ.
+   *
+   * This mapping lets `isValidRequest` resolve the original sessionId
+   * forward to the live escalation session and proceed normally.
+   *
+   * TTL is short on purpose: escalation handoffs complete in seconds
+   * (the user solves the follow-up immediately) and a stale mapping
+   * pointing at a long-gone session would just produce a different
+   * shape of NO_SESSION_FOUND.
+   */
+  async cacheSessionEscalation(t, r, n = 600) {
+    const i = await this.getClient();
+    if (!i)
+      return !1;
+    try {
+      const s = `cache:session:escalation:${t}`;
+      return await i.set(s, r, { EX: n }), !0;
+    } catch (s) {
+      return this.logger.warn(() => ({
+        msg: "Failed to cache session escalation mapping in Redis",
+        err: s,
+        originSessionId: t,
+        escalationSessionId: r
+      })), !1;
+    }
+  }
+  /**
+   * Resolve an original sessionId to its escalation sessionId, if one was
+   * recorded. Returns null when there is no mapping (either no escalation
+   * happened, or the TTL has elapsed).
+   */
+  async getCachedSessionEscalation(t) {
+    const r = await this.getClient();
+    if (!r)
+      return null;
+    try {
+      const n = `cache:session:escalation:${t}`;
+      return await r.get(n);
+    } catch (n) {
+      return this.logger.warn(() => ({
+        msg: "Failed to get cached session escalation mapping from Redis",
+        err: n,
+        originSessionId: t
+      })), null;
+    }
+  }
+  /**
+   * Invalidate an escalation mapping. Called when the escalation session
+   * itself is consumed so subsequent retries on the origin sessionId fall
+   * through to the standard NO_SESSION_FOUND path rather than chasing a
+   * second-hand stale pointer.
+   */
+  async invalidateCachedSessionEscalation(t) {
+    const r = await this.getClient();
+    if (r)
+      try {
+        const n = `cache:session:escalation:${t}`;
+        await r.del(n);
+      } catch (n) {
+        this.logger.warn(() => ({
+          msg: "Failed to invalidate cached session escalation mapping",
+          err: n,
+          originSessionId: t
+        }));
+      }
+  }
   // ── Session write queue ─────────────────────────────────────────────
   /**
    * Queue a session record for batched insertion into MongoDB.
@@ -101011,7 +101092,22 @@ class Og {
         this.writeQueue?.invalidateCachedSession(i),
         u ? this.writeQueue?.invalidateCachedSessionByHash(u) : Promise.resolve()
       ]);
-      const c = await this.db.checkAndRemoveSession(i);
+      let c = await this.db.checkAndRemoveSession(i), l = i;
+      if (!c && this.writeQueue) {
+        const f = await this.writeQueue.getCachedSessionEscalation(i);
+        if (f && f !== i) {
+          this.logger.info(() => ({
+            msg: "Resolving origin sessionId to escalation",
+            data: {
+              account: t.account,
+              originSessionId: i,
+              escalationSessionId: f
+            }
+          }));
+          const d = await this.db.checkAndRemoveSession(f);
+          d && (c = d, l = f), await this.writeQueue.invalidateCachedSessionEscalation(i);
+        }
+      }
       if (!c) {
         if (this.logger.warn(() => ({
           msg: "No session found",
@@ -101020,10 +101116,10 @@ class Og {
             sessionId: i
           }
         })), this.writeQueue) {
-          const l = typeof a?.userSitekeyIpHash == "string" ? a.userSitekeyIpHash : void 0;
+          const f = typeof a?.userSitekeyIpHash == "string" ? a.userSitekeyIpHash : void 0;
           await Promise.all([
             this.writeQueue.invalidateCachedSession(i),
-            l ? this.writeQueue.invalidateCachedSessionByHash(l) : Promise.resolve()
+            f ? this.writeQueue.invalidateCachedSessionByHash(f) : Promise.resolve()
           ]);
         }
         return {
@@ -101032,21 +101128,21 @@ class Og {
           type: r
         };
       }
-      if (this.writeQueue && await Promise.all([
+      if (i = l, this.writeQueue && await Promise.all([
         this.writeQueue.invalidateCachedSession(i),
         c.userSitekeyIpHash ? this.writeQueue.invalidateCachedSessionByHash(
           c.userSitekeyIpHash
         ) : Promise.resolve()
       ]), o) {
-        const l = await this.validateSessionIP(
+        const f = await this.validateSessionIP(
           c,
           o,
           n
         );
-        if (!l.valid)
+        if (!f.valid)
           return {
             valid: !1,
-            reason: l.reason,
+            reason: f.reason,
             type: r
           };
       }
@@ -120529,7 +120625,10 @@ const Xot = async (e, t) => {
     s.mode,
     s.simdReadings
   );
-  return {
+  return e.writeQueue && await e.writeQueue.cacheSessionEscalation(
+    i.sessionId,
+    u.sessionId
+  ), {
     captchaType: o.captchaType,
     sessionId: u.sessionId
   };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@prosopo/cli",
-	"version": "3.6.48",
+	"version": "3.6.49",
 	"description": "CLI for Prosopo Provider",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -36,10 +36,10 @@
 		"@prosopo/common": "3.1.41",
 		"@prosopo/logger": "2.0.0",
 		"@prosopo/dotenv": "3.0.46",
-		"@prosopo/env": "3.6.1",
+		"@prosopo/env": "3.6.2",
 		"@prosopo/keyring": "2.9.47",
 		"@prosopo/locale": "3.2.5",
-		"@prosopo/provider": "4.13.0",
+		"@prosopo/provider": "4.13.1",
 		"@prosopo/types": "4.9.0",
 		"@prosopo/util": "3.3.2",
 		"@prosopo/workspace": "3.1.20",