@prosopo/database 4.0.26 → 4.0.28

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/database@4.0.26 build:cjs
+> @prosopo/database@4.0.28 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -25,6 +25,7 @@ ViteCommonJSConfig: .
     '@prosopo/logger',
     '@prosopo/util',
     '@prosopo/types',
+The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
     '@prosopo/util-crypto',
     '@prosopo/types-database',
     '@prosopo/user-access-policy',
@@ -33,7 +34,6 @@ ViteCommonJSConfig: .
     '@prosopo/api'
   ]
 }
-The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
@@ -45,12 +45,12 @@ dist/cjs/base/mongoMemory.cjs              0.66 kB │ gzip:  0.32 kB
 dist/cjs/_virtual/_rolldown/runtime.cjs    1.00 kB │ gzip:  0.50 kB
 dist/cjs/databases/index.cjs               1.14 kB │ gzip:  0.32 kB
 dist/cjs/databases/client.cjs              1.57 kB │ gzip:  0.69 kB
-dist/cjs/index.cjs                         1.57 kB │ gzip:  0.48 kB
-dist/cjs/mongooseOptions.cjs               2.65 kB │ gzip:  1.15 kB
-dist/cjs/base/mongo.cjs                    3.77 kB │ gzip:  1.29 kB
-dist/cjs/databases/centralDbStreamer.cjs   5.29 kB │ gzip:  1.30 kB
-dist/cjs/databases/captcha.cjs             7.36 kB │ gzip:  2.17 kB
+dist/cjs/index.cjs                         1.66 kB │ gzip:  0.49 kB
+dist/cjs/mongooseOptions.cjs               3.74 kB │ gzip:  1.56 kB
+dist/cjs/base/mongo.cjs                    4.27 kB │ gzip:  1.41 kB
+dist/cjs/databases/centralDbStreamer.cjs   5.53 kB │ gzip:  1.37 kB
+dist/cjs/databases/captcha.cjs             7.38 kB │ gzip:  2.18 kB
 dist/cjs/redisCache.cjs                   15.77 kB │ gzip:  4.54 kB
-dist/cjs/databases/provider.cjs           59.70 kB │ gzip: 12.01 kB
+dist/cjs/databases/provider.cjs           59.03 kB │ gzip: 11.78 kB
 
-✓ built in 72ms
+✓ built in 124ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/database@4.0.26 build:tsc
+> @prosopo/database@4.0.28 build:tsc
 > tsc --build --verbose
 
-1:56:34 PM - Projects in this build: 
+1:15:41 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../locale/tsconfig.json
     * ../util/tsconfig.json
@@ -17,31 +17,31 @@
     * ../types-database/tsconfig.json
     * tsconfig.json
 
-1:56:34 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-1:56:34 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-1:56:34 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-1:56:34 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-1:56:34 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/index.ts' is older than output '../types/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/index.ts' is older than output '../common/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/utils/batches.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/index.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/tests/apiHarness.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/rule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
+1:15:41 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/types.test-d.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
 
-1:56:35 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+1:15:41 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-1:56:35 PM - Building project '/home/runner/work/captcha/captcha/packages/database/tsconfig.json'...
+1:15:41 PM - Building project '/home/runner/work/captcha/captcha/packages/database/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/database@4.0.26 build
+> @prosopo/database@4.0.28 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/database@4.0.26 build:cross-env
+> @prosopo/database@4.0.28 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -48,13 +48,13 @@ dist/_virtual/_rolldown/runtime.js    0.04 kB │ gzip:  0.06 kB
 dist/base/index.js                    0.14 kB │ gzip:  0.08 kB
 dist/base/mongoMemory.js              0.60 kB │ gzip:  0.30 kB
 dist/databases/index.js               0.77 kB │ gzip:  0.27 kB
-dist/index.js                         0.92 kB │ gzip:  0.34 kB
+dist/index.js                         1.07 kB │ gzip:  0.38 kB
 dist/databases/client.js              1.47 kB │ gzip:  0.68 kB
-dist/mongooseOptions.js               2.56 kB │ gzip:  1.12 kB
-dist/base/mongo.js                    3.52 kB │ gzip:  1.20 kB
-dist/databases/centralDbStreamer.js   5.23 kB │ gzip:  1.28 kB
-dist/databases/captcha.js             7.28 kB │ gzip:  2.16 kB
+dist/mongooseOptions.js               3.58 kB │ gzip:  1.53 kB
+dist/base/mongo.js                    4.01 kB │ gzip:  1.32 kB
+dist/databases/centralDbStreamer.js   5.47 kB │ gzip:  1.35 kB
+dist/databases/captcha.js             7.30 kB │ gzip:  2.17 kB
 dist/redisCache.js                   15.71 kB │ gzip:  4.53 kB
-dist/databases/provider.js           58.41 kB │ gzip: 12.04 kB
+dist/databases/provider.js           57.73 kB │ gzip: 11.80 kB
 
-✓ built in 95ms
+✓ built in 82ms

package/CHANGELOG.md

@@ -1,5 +1,113 @@
 # @prosopo/database
 
+## 4.0.28
+### Patch Changes
+
+- f8a41fe: Stop leaking a mongoose connection pool on every failed database connect.
+  
+  `MongoDatabase.connect()` assigns `this.connection` only once the connection
+  opens, so a connection that fails to open is unreachable from the instance and
+  `close()` can never reach it — while mongoose keeps its topology monitor, its
+  `minPoolSize: 5` pool and its entry in `mongoose.connections` alive and
+  retrying forever. `onError` now destroys that connection. `destroy` rather than
+  `close` because only `destroy` drops the `mongoose.connections` entry, which
+  would otherwise retain the object on its own. The teardown is guarded so that a
+  runtime `error` on an already-open connection is not mistaken for a failed
+  connect and does not tear down a working pool; the `error` listener stays
+  registered after `open` because an `EventEmitter` `error` with no listener
+  would take the process down.
+  
+  Observed on a provider whose connects to the central DB were timing out: 524
+  failed connects an hour accumulated 5,819 ESTABLISHED sockets to the central
+  DB and 5,859 TLS sockets, and the resulting flood of driver DNS lookups
+  saturated libuv's four-thread pool — 8,812 `getaddrinfo` calls queued — so
+  every unrelated outbound lookup in the process backed up behind them. That
+  provider burned 3.45x the CPU of a healthy peer while serving 2.5x less
+  traffic, with event-loop p99 at 240ms against the peer's 27ms.
+  
+  `getMongoConnectionOptions` also gains `connectTimeoutMS` and
+  `serverSelectionTimeoutMS` overrides, and `CentralDbStreamer` passes 45s for
+  both. The 10s default is sized for a database that is local or on the same
+  continent; the central DB is long-haul for every provider and genuinely distant
+  for some, where the TLS handshake alone measures 2-30s. Under the old ceiling
+  those providers could never connect at all, so the streamer burned a connect
+  attempt every cooldown forever and streamed no records — which is what fed the
+  leak above.
+- 6f57ee9: chore(deps): bump make-dir from 3.1.0 to 5.1.0
+- 6f57ee9: chore(deps): bump the npm-minor-and-patch group across 1 directory with 3 updates
+- Updated dependencies [6f57ee9]
+- Updated dependencies [6f57ee9]
+- Updated dependencies [e22d5fb]
+- Updated dependencies [b6918c0]
+- Updated dependencies [d288371]
+  - @prosopo/user-access-policy@3.13.0
+  - @prosopo/types@5.7.0
+  - @prosopo/util@3.3.9
+  - @prosopo/types-database@5.4.1
+  - @prosopo/common@3.1.54
+  - @prosopo/logger@2.0.9
+  - @prosopo/redis-client@1.0.35
+
+## 4.0.27
+### Patch Changes
+
+- 89dd38a: chore(deps): batch the outstanding dependabot bumps into one upgrade
+  
+  Rolls up dependabot PRs #3112, #3127-#3134 and #3159. Majors: `mongoose`
+  8 -> 9, `bson` 6 -> 7, `@noble/curves` 1 -> 2, `@polkadot/util-crypto`
+  13 -> 14, `@typegoose/auto-increment` 4 -> 5, `@babel/preset-env` 7 -> 8,
+  `@types/jsdom` 21 -> 30, `@types/bcrypt` 5 -> 6, `@actions/github` 6 -> 9,
+  `testcontainers` 11 -> 12. The rest are minor/patch.
+  
+  Code changes the majors forced:
+  - `@noble/curves` v2 requires `.js` specifiers and renamed the point API,
+    so `secp256k1.ProjectivePoint.fromHex(...).toRawBytes()` becomes
+    `secp256k1.Point.fromBytes(...).toBytes()`, `RistrettoPoint` becomes
+    `ristretto255.Point`, and `abstract/utils` moves to `utils.js`.
+  - mongoose 9 drops `RootFilterQuery` (now `QueryFilter`), no longer sets
+    `background: true` on schema indexes by default, and no longer declares
+    `id` on `Document`, which un-hid a mismatch between
+    `updateDappUserCommitment`'s `Hash` parameter and the `string` `id` it
+    filters on.
+  - mongoose 9 rejects an aggregation-pipeline update (an array) unless the
+    call passes `updatePipeline: true`, so the six pipeline writes in
+    `ProviderDatabase` now opt in explicitly.
+  - mongoose 9's `castUpdate` throws on a `$setOnInsert` key inside `$set`.
+    `storeUserImageCaptchaSolution` passed its record straight in as the
+    update, and mongoose's `moveImmutableProperties` mutates that object on
+    an upsert -- adding the very `$setOnInsert` key the record then carried
+    into `CentralDbStreamer.streamImageRecord`. Image records stopped
+    reaching the central DB (the streamer is fire-and-forget, so it only
+    logged) and signup verification returned 500. The update is now an
+    explicit `$set` over a shallow copy.
+  - `@prosopo/database` moves from mongodb 6.20 to 7.5 to match the driver
+    mongoose 9 pulls, so bson 7 is the only copy resolvable in the package.
+  - `vitest`/`@vitest/coverage-v8` go to 4.1.11 alongside dependabot's
+    `@vitest/spy` bump; leaving them at 4.1.10 installed a second copy of
+    `@vitest/spy` and broke type inference in the provider test utils.
+- 8a670d3: Remove the provider-side context validation path.
+  
+  The provider read a per-context baseline out of `clientcontextentropies` on the frictionless path and compared a session's head hash against it. The task that wrote that collection was removed from the provider on 2026-08-21, so the read has returned `undefined` ever since and the branch has been dead in every deployment since then. Computing and applying the baseline now happens off-provider.
+  
+  Removed: `contextAwareValidation.ts`, the decision-machine branch that used it, `getClientContextEntropy` on the provider and its database method, the `clientContextEntropy` table registration, the unused `getRoundsFromSimScore` helper, and the `contextAwareEnabled` parameter threaded into image verification — which logged and then did nothing, its return commented out.
+  
+  Also removes the per-site `settings.contextAware` block that configured it, along with `ContextAwareSchema`, `IContextAware`, `IContexts`, `ContextConfigSchema`, `contextAwareThresholdDefault` and `expandContexts`, the legacy `default`/`webview` context keys and their helpers, and `FrictionlessReason.CONTEXT_AWARE_VALIDATION_FAILED`. The site-key registration CLI no longer writes a `contextAware` default into new sites.
+  
+  `ContextType`, `contextTypeFromSession` and `deviceContextTypes` stay — the off-provider work keys on them. `ClientContextEntropyRecord` and its schema stay for the same reason; only the provider's use of them goes.
+  
+  No behaviour change: every path removed here was already inert.
+- Updated dependencies [7fd6eb2]
+- Updated dependencies [89dd38a]
+- Updated dependencies [80f73c1]
+- Updated dependencies [8a670d3]
+  - @prosopo/user-access-policy@3.12.33
+  - @prosopo/common@3.1.53
+  - @prosopo/logger@2.0.8
+  - @prosopo/redis-client@1.0.34
+  - @prosopo/types@5.6.0
+  - @prosopo/types-database@5.4.0
+  - @prosopo/util@3.3.8
+
 ## 4.0.26
 ### Patch Changes
 

package/dist/base/mongo.d.ts

@@ -1,6 +1,10 @@
 import { type Logger } from "@prosopo/logger";
 import type { IDatabase } from "@prosopo/types-database";
 import mongoose, { type Connection } from "mongoose";
+export interface MongoConnectionTimeouts {
+    connectTimeoutMS?: number;
+    serverSelectionTimeoutMS?: number;
+}
 export declare class MongoDatabase implements IDatabase {
     protected readonly _url: string;
     safeURL: string;
@@ -9,7 +13,9 @@ export declare class MongoDatabase implements IDatabase {
     logger: Logger;
     connected: boolean;
     private connecting?;
-    constructor(url: string, dbname?: string, authSource?: string, logger?: Logger);
+    protected readonly connectTimeoutMS?: number;
+    protected readonly serverSelectionTimeoutMS?: number;
+    constructor(url: string, dbname?: string, authSource?: string, logger?: Logger, timeouts?: MongoConnectionTimeouts);
     get url(): string;
     getConnection(): mongoose.Connection;
     connect(): Promise<void>;

package/dist/base/mongo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mongo.d.ts","sourceRoot":"","sources":["../../src/base/mongo.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,QAAQ,EAAE,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAcrD,qBAAa,aAAc,YAAW,SAAS;IAC9C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,UAAS;IAClB,OAAO,CAAC,UAAU,CAAC,CAAgB;gBAGlC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM;IAkBhB,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,aAAa,IAAI,QAAQ,CAAC,UAAU;IAa9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAoGxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM5B"}
+{"version":3,"file":"mongo.d.ts","sourceRoot":"","sources":["../../src/base/mongo.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,QAAQ,EAAE,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAYrD,MAAM,WAAW,uBAAuB;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAClC;AAQD,qBAAa,aAAc,YAAW,SAAS;IAC9C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,UAAS;IAClB,OAAO,CAAC,UAAU,CAAC,CAAgB;IACnC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC7C,SAAS,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;gBAGpD,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,uBAAuB;IAoBnC,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,aAAa,IAAI,QAAQ,CAAC,UAAU;IAa9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyIxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM5B"}

package/dist/base/mongo.js

@@ -13,8 +13,10 @@ var DEFAULT_ENDPOINT = "mongodb://127.0.0.1:27017";
 * @return {MongoDatabase}    Database layer
 */
 var MongoDatabase = class {
-	constructor(url, dbname, authSource, logger) {
+	constructor(url, dbname, authSource, logger, timeouts) {
 		this.connected = false;
+		this.connectTimeoutMS = timeouts?.connectTimeoutMS;
+		this.serverSelectionTimeoutMS = timeouts?.serverSelectionTimeoutMS;
 		const parsedUrl = new URL(url || DEFAULT_ENDPOINT);
 		if (dbname) parsedUrl.pathname = dbname;
 		if (authSource) parsedUrl.searchParams.set("authSource", authSource);
@@ -54,9 +56,13 @@ var MongoDatabase = class {
 					appName,
 					dbName: this.dbname,
 					maxPoolSize: 50,
-					minPoolSize: 5
+					minPoolSize: 5,
+					connectTimeoutMS: this.connectTimeoutMS,
+					serverSelectionTimeoutMS: this.serverSelectionTimeoutMS
 				}));
+				let opened = false;
 				const onConnected = () => {
+					opened = true;
 					this.logger.debug(() => ({ msg: "Database connection opened" }));
 					this.connected = true;
 					this.connection = connection;
@@ -70,6 +76,12 @@ var MongoDatabase = class {
 					}));
 					this.connected = false;
 					this.connecting = void 0;
+					if (!opened) connection.destroy(true).catch((destroyErr) => {
+						this.logger.error(() => ({
+							err: destroyErr,
+							msg: "Failed to destroy unconnected database connection"
+						}));
+					});
 					reject(err);
 				};
 				connection.once("open", onConnected);

package/dist/base/mongo.js.map

@@ -1 +1 @@
-{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/base/mongo.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,QAA6B,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAGnC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAQrD,MAAM,OAAO,aAAa;IASzB,YACC,GAAW,EACX,MAAe,EACf,UAAmB,EACnB,MAAe;QAPhB,cAAS,GAAG,KAAK,CAAC;QASjB,MAAM,YAAY,GAAG,GAAG,IAAI,gBAAgB,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC7B,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,QAAQ,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,aAAa;QACZ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE;gBACzD,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;aACnB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAKD,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,wBAAwB;SAC7B,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC;YAEJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,kCAAkC;iBACvC,CAAC,CAAC,CAAC;gBACJ,OAAO;YACR,CAAC;YAGD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,2DAA2D;iBAChE,CAAC,CAAC,CAAC;gBACJ,OAAO,IAAI,CAAC,UAAU,CAAC;YACxB,CAAC;YAGD,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAC3C,IAAI,CAAC,GAAG,EACR,yBAAyB,CAAC;oBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,CAAC;iBACd,CAAC,CACF,CAAC;gBAEF,MAAM,WAAW,GAAG,GAAG,EAAE;oBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,4BAA4B;qBACjC,CAAC,CAAC,CAAC;oBACJ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;oBAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC5B,OAAO,EAAE,CAAC;gBACX,CAAC,CAAC;gBAEF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;oBAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG;wBACH,GAAG,EAAE,gBAAgB;qBACrB,CAAC,CAAC,CAAC;oBACJ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC5B,MAAM,CAAC,GAAG,CAAC,CAAC;gBACb,CAAC,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAGlC,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;oBAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,uBAAuB;qBAC5B,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;oBACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,sBAAsB;qBAC3B,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,4BAA4B;qBACjC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;oBAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,oCAAoC;qBACzC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,UAAU,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,2BAA2B;aAChC,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,CAAC;QACT,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oBAAoB;SACzB,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;CACD"}
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/base/mongo.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,QAA6B,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAGnC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAiBrD,MAAM,OAAO,aAAa;IAWzB,YACC,GAAW,EACX,MAAe,EACf,UAAmB,EACnB,MAAe,EACf,QAAkC;QAVnC,cAAS,GAAG,KAAK,CAAC;QAYjB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,EAAE,gBAAgB,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,QAAQ,EAAE,wBAAwB,CAAC;QACnE,MAAM,YAAY,GAAG,GAAG,IAAI,gBAAgB,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC7B,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,QAAQ,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,GAAG;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,aAAa;QACZ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE;gBACzD,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;aACnB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAKD,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,wBAAwB;SAC7B,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC;YAEJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,kCAAkC;iBACvC,CAAC,CAAC,CAAC;gBACJ,OAAO;YACR,CAAC;YAGD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,2DAA2D;iBAChE,CAAC,CAAC,CAAC;gBACJ,OAAO,IAAI,CAAC,UAAU,CAAC;YACxB,CAAC;YAGD,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE/C,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAC3C,IAAI,CAAC,GAAG,EACR,yBAAyB,CAAC;oBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,CAAC;oBACd,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;iBACvD,CAAC,CACF,CAAC;gBAQF,IAAI,MAAM,GAAG,KAAK,CAAC;gBAEnB,MAAM,WAAW,GAAG,GAAG,EAAE;oBACxB,MAAM,GAAG,IAAI,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,4BAA4B;qBACjC,CAAC,CAAC,CAAC;oBACJ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;oBAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC5B,OAAO,EAAE,CAAC;gBACX,CAAC,CAAC;gBAEF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;oBAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG;wBACH,GAAG,EAAE,gBAAgB;qBACrB,CAAC,CAAC,CAAC;oBACJ,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;oBAE5B,IAAI,CAAC,MAAM,EAAE,CAAC;wBAiBb,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,UAAmB,EAAE,EAAE;4BACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gCACxB,GAAG,EAAE,UAAU;gCACf,GAAG,EAAE,mDAAmD;6BACxD,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;oBACJ,CAAC;oBAED,MAAM,CAAC,GAAG,CAAC,CAAC;gBACb,CAAC,CAAC;gBAEF,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAGlC,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;oBAClC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,uBAAuB;qBAC5B,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;oBACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,sBAAsB;qBAC3B,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,4BAA4B;qBACjC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;oBAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,oCAAoC;qBACzC,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,UAAU,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,2BAA2B;aAChC,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,CAAC;QACT,CAAC;IACF,CAAC;IAGD,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oBAAoB;SACzB,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;CACD"}

package/dist/cjs/base/mongo.cjs

@@ -15,8 +15,10 @@ var DEFAULT_ENDPOINT = "mongodb://127.0.0.1:27017";
 * @return {MongoDatabase}    Database layer
 */
 var MongoDatabase = class {
-	constructor(url, dbname, authSource, logger) {
+	constructor(url, dbname, authSource, logger, timeouts) {
 		this.connected = false;
+		this.connectTimeoutMS = timeouts?.connectTimeoutMS;
+		this.serverSelectionTimeoutMS = timeouts?.serverSelectionTimeoutMS;
 		const parsedUrl = new URL(url || DEFAULT_ENDPOINT);
 		if (dbname) parsedUrl.pathname = dbname;
 		if (authSource) parsedUrl.searchParams.set("authSource", authSource);
@@ -56,9 +58,13 @@ var MongoDatabase = class {
 					appName,
 					dbName: this.dbname,
 					maxPoolSize: 50,
-					minPoolSize: 5
+					minPoolSize: 5,
+					connectTimeoutMS: this.connectTimeoutMS,
+					serverSelectionTimeoutMS: this.serverSelectionTimeoutMS
 				}));
+				let opened = false;
 				const onConnected = () => {
+					opened = true;
 					this.logger.debug(() => ({ msg: "Database connection opened" }));
 					this.connected = true;
 					this.connection = connection;
@@ -72,6 +78,12 @@ var MongoDatabase = class {
 					}));
 					this.connected = false;
 					this.connecting = void 0;
+					if (!opened) connection.destroy(true).catch((destroyErr) => {
+						this.logger.error(() => ({
+							err: destroyErr,
+							msg: "Failed to destroy unconnected database connection"
+						}));
+					});
 					reject(err);
 				};
 				connection.once("open", onConnected);

package/dist/cjs/databases/captcha.cjs

@@ -29,8 +29,8 @@ var CAPTCHA_TABLES = [
 	}
 ];
 var CaptchaDatabase = class CaptchaDatabase extends require_mongo.MongoDatabase {
-	constructor(url, dbname, authSource, logger) {
-		super(url, dbname, authSource, logger);
+	constructor(url, dbname, authSource, logger, timeouts) {
+		super(url, dbname, authSource, logger, timeouts);
 		this.indexesEnsured = false;
 		this.tables = {};
 	}

package/dist/cjs/databases/centralDbStreamer.cjs

@@ -17,10 +17,19 @@ var CentralDbStreamer = class CentralDbStreamer {
 	static {
 		this.RECONNECT_COOLDOWN_MS = 5e3;
 	}
+	static {
+		this.CONNECT_TIMEOUT_MS = 45e3;
+	}
+	static {
+		this.SERVER_SELECTION_TIMEOUT_MS = 45e3;
+	}
 	constructor(mongoCaptchaUri, logger) {
 		this.lastFailureTime = 0;
 		this.logger = logger || (0, _prosopo_logger.getLogger)("info", "CentralDbStreamer");
-		this.db = new require_captcha.CaptchaDatabase(mongoCaptchaUri, void 0, void 0, this.logger);
+		this.db = new require_captcha.CaptchaDatabase(mongoCaptchaUri, void 0, void 0, this.logger, {
+			connectTimeoutMS: CentralDbStreamer.CONNECT_TIMEOUT_MS,
+			serverSelectionTimeoutMS: CentralDbStreamer.SERVER_SELECTION_TIMEOUT_MS
+		});
 	}
 	ensureConnected() {
 		if (this.connectPromise && !this.db.connected) this.connectPromise = void 0;

package/dist/cjs/databases/provider.cjs

@@ -63,11 +63,6 @@ var PROVIDER_TABLES = [
 		modelName: "DecisionMachine",
 		schema: _prosopo_types_database.DecisionMachineArtifactRecordSchema
 	},
-	{
-		collectionName: "clientContextEntropy",
-		modelName: "ClientContextEntropy",
-		schema: _prosopo_types_database.ClientContextEntropyRecordSchema
-	},
 	{
 		collectionName: "spamEmailDomain",
 		modelName: "SpamEmailDomain",
@@ -406,7 +401,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 		});
 		if (captchas.length) {
 			const filter = { id: commit.id };
-			await this.tables?.commitment.updateOne(filter, commitmentRecord, { upsert: true });
+			await this.tables?.commitment.updateOne(filter, { $set: { ...commitmentRecord } }, { upsert: true });
 			const ops = captchas.map((captcha) => ({ updateOne: {
 				filter: {
 					commitmentId: commit.id,
@@ -588,7 +583,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 		if (userSubmitted) setStage.submittedAtTimestamp = { $ifNull: ["$submittedAtTimestamp", timestamp] };
 		if (isDisapproved) setStage.failedAtTimestamp = { $ifNull: ["$failedAtTimestamp", timestamp] };
 		try {
-			if ((await tables.powcaptcha.updateOne({ challenge }, [{ $set: setStage }])).matchedCount === 0) {
+			if ((await tables.powcaptcha.updateOne({ challenge }, [{ $set: setStage }], { updatePipeline: true })).matchedCount === 0) {
 				const err = new _prosopo_common.ProsopoDBError("DATABASE.CAPTCHA_GET_FAILED", {
 					context: {
 						challenge,
@@ -921,7 +916,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 			lastUpdatedTimestamp: timestamp,
 			pendingStage: true,
 			verifiedAtTimestamp: { $ifNull: ["$verifiedAtTimestamp", timestamp] }
-		} }]);
+		} }], { updatePipeline: true });
 	}
 	/** @description Update an image captcha commitment
 	*/
@@ -944,7 +939,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 		await this.tables?.commitment.updateOne(filter, [{ $set: {
 			...baseSet,
 			...pipelineExprs
-		} }]);
+		} }], { updatePipeline: true });
 	}
 	/**
 	* Counts server-checked captcha records across image (`commitment`),
@@ -1005,7 +1000,10 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 			lastUpdatedTimestamp: timestamp,
 			pendingStage: true,
 			verifiedAtTimestamp: { $ifNull: ["$verifiedAtTimestamp", timestamp] }
-		} }], { upsert: false });
+		} }], {
+			upsert: false,
+			updatePipeline: true
+		});
 	}
 	/**
 	* Store a new session record
@@ -1175,7 +1173,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 				simdReadingsStage: { $ifNull: ["$simdReadingsStage", stage] },
 				lastUpdatedTimestamp: /* @__PURE__ */ new Date(),
 				pendingStage: true
-			} }]);
+			} }], { updatePipeline: true });
 		} catch (err) {
 			throw new _prosopo_common.ProsopoDBError("DATABASE.SESSION_GET_FAILED", {
 				context: {
@@ -1208,7 +1206,7 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 		if (fields.peerIp !== void 0) setStage["dnsEvent.peerIp"] = fields.peerIp;
 		if (fields.pathValid !== void 0) setStage["dnsEvent.pathValid"] = fields.pathValid;
 		try {
-			return (await this.tables.session.updateOne({ sessionId }, [{ $set: setStage }])).matchedCount > 0;
+			return (await this.tables.session.updateOne({ sessionId }, [{ $set: setStage }], { updatePipeline: true })).matchedCount > 0;
 		} catch (err) {
 			throw new _prosopo_common.ProsopoDBError("DATABASE.SESSION_GET_FAILED", {
 				context: {
@@ -1731,24 +1729,6 @@ var ProviderDatabase = class ProviderDatabase extends require_mongo.MongoDatabas
 	async removeAllDecisionMachineArtifacts() {
 		return (await this.tables?.decisionMachine.deleteMany({}))?.deletedCount ?? 0;
 	}
-	/**
-	* @description get client context-specific entropy
-	*
-	* Read-only. The `clientcontextentropies` collection is populated
-	* externally by the job-runner sweep — the provider used to compute
-	* entropy locally via `sampleContextEntropy` + `setClientContextEntropy`
-	* on a scheduled task, but that path was pulled 2026-08-21 (the sweep
-	* aggregation was ~36 minutes of DB time per 6h, and the same
-	* computation now runs off-provider across the full record set).
-	*/
-	async getClientContextEntropy(account, contextType) {
-		const filter = {
-			account,
-			contextType
-		};
-		const doc = await this.tables?.clientContextEntropy.findOne(filter).lean();
-		return doc ? doc.entropy : void 0;
-	}
 	async getSpamEmailDomain(domain) {
 		if (!this.tables?.spamEmailDomain) throw new _prosopo_common.ProsopoDBError("DATABASE.DATABASE_IMPORT_ERROR", { context: { failedFuncName: this.getSpamEmailDomain.name } });
 		const suffixCandidates = (0, _prosopo_util.buildDomainSuffixCandidates)(domain).slice(0, MAX_DOMAIN_SUFFIX_CANDIDATES);

package/dist/cjs/index.cjs

@@ -1,5 +1,4 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
 const require_mongooseOptions = require("./mongooseOptions.cjs");
 const require_mongo = require("./base/mongo.cjs");
 const require_mongoMemory = require("./base/mongoMemory.cjs");
@@ -10,13 +9,14 @@ const require_centralDbStreamer = require("./databases/centralDbStreamer.cjs");
 const require_index = require("./databases/index.cjs");
 const require_redisCache = require("./redisCache.cjs");
 let make_dir = require("make-dir");
-make_dir = require_runtime.__toESM(make_dir, 1);
 //#region src/index.ts
-console.debug(make_dir.default);
+console.debug(make_dir.makeDirectory);
 //#endregion
 exports.CaptchaDatabase = require_captcha.CaptchaDatabase;
 exports.CentralDbStreamer = require_centralDbStreamer.CentralDbStreamer;
 exports.ClientDatabase = require_client.ClientDatabase;
+exports.DEFAULT_CONNECT_TIMEOUT_MS = require_mongooseOptions.DEFAULT_CONNECT_TIMEOUT_MS;
+exports.DEFAULT_SERVER_SELECTION_TIMEOUT_MS = require_mongooseOptions.DEFAULT_SERVER_SELECTION_TIMEOUT_MS;
 exports.DETECTOR_BUNDLE_TTL_SECONDS = require_redisCache.DETECTOR_BUNDLE_TTL_SECONDS;
 exports.Databases = require_index.Databases;
 exports.MongoDatabase = require_mongo.MongoDatabase;

package/dist/cjs/mongooseOptions.cjs

@@ -25,6 +25,19 @@ var getMongoCompressors = (url, compressors = DEFAULT_COMPRESSORS) => {
 	}
 };
 /**
+* Default connect / server-selection timeouts.
+*
+* These are sized for a database that is local to the process or at least on
+* the same continent, where a connect that has not completed in 10s is a real
+* fault worth failing fast on. They are *not* safe as a universal ceiling: a
+* connection to a remote database can need far longer for the TLS handshake
+* alone — pronode17 measures 2-30s to mongo1 — and every connect that trips
+* the ceiling is a wasted attempt that will simply be retried. Callers that
+* own a known long-haul connection pass their own values instead.
+*/
+var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
+var DEFAULT_SERVER_SELECTION_TIMEOUT_MS = 2e4;
+/**
 * Returns default mongoose connection options with the ability to override specific values.
 *
 * @param options - Configuration options
@@ -33,10 +46,12 @@ var getMongoCompressors = (url, compressors = DEFAULT_COMPRESSORS) => {
 * @param options.maxPoolSize - Maximum pool size (default: 10)
 * @param options.minPoolSize - Minimum pool size (default: 0)
 * @param options.dbName - Optional database name
+* @param options.connectTimeoutMS - Max time to establish a connection (default: 10000)
+* @param options.serverSelectionTimeoutMS - Max time to select a server (default: 20000)
 * @returns Mongoose connection options object
 */
 var getMongoConnectionOptions = (options) => {
-	const { url, appName, maxPoolSize = 10, minPoolSize = 0, dbName } = options;
+	const { url, appName, maxPoolSize = 10, minPoolSize = 0, dbName, connectTimeoutMS = DEFAULT_CONNECT_TIMEOUT_MS, serverSelectionTimeoutMS = DEFAULT_SERVER_SELECTION_TIMEOUT_MS } = options;
 	if (!url || url.trim() === "") throw new Error("MongoDB connection URL is required and cannot be empty or whitespace-only");
 	const compressors = getMongoCompressors(url);
 	const connectionOptions = {
@@ -48,16 +63,18 @@ var getMongoConnectionOptions = (options) => {
 		maxPoolSize,
 		minPoolSize,
 		maxConnecting: 2,
-		connectTimeoutMS: 1e4,
+		connectTimeoutMS,
 		socketTimeoutMS: 3e4,
 		maxIdleTimeMS: 3e5,
 		appName,
-		serverSelectionTimeoutMS: 2e4,
+		serverSelectionTimeoutMS,
 		compressors
 	};
 	if (dbName) connectionOptions.dbName = dbName;
 	return connectionOptions;
 };
 //#endregion
+exports.DEFAULT_CONNECT_TIMEOUT_MS = DEFAULT_CONNECT_TIMEOUT_MS;
+exports.DEFAULT_SERVER_SELECTION_TIMEOUT_MS = DEFAULT_SERVER_SELECTION_TIMEOUT_MS;
 exports.getMongoCompressors = getMongoCompressors;
 exports.getMongoConnectionOptions = getMongoConnectionOptions;

package/dist/databases/captcha.d.ts

@@ -1,7 +1,7 @@
 import { type Logger } from "@prosopo/logger";
 import { type CaptchaProperties, type ICaptchaDatabase, type PoWCaptchaRecord, type PuzzleCaptchaRecord, type StoredSession, type Tables, type UserCommitmentRecord } from "@prosopo/types-database";
-import type { RootFilterQuery } from "mongoose";
-import { MongoDatabase } from "../base/index.js";
+import type { QueryFilter } from "mongoose";
+import { type MongoConnectionTimeouts, MongoDatabase } from "../base/index.js";
 declare enum TableNames {
     frictionlessToken = "frictionlessToken",
     session = "session",
@@ -12,14 +12,14 @@ declare enum TableNames {
 export declare class CaptchaDatabase extends MongoDatabase implements ICaptchaDatabase {
     tables: Tables<TableNames>;
     private indexesEnsured;
-    constructor(url: string, dbname?: string, authSource?: string, logger?: Logger);
+    constructor(url: string, dbname?: string, authSource?: string, logger?: Logger, timeouts?: MongoConnectionTimeouts);
     connect(): Promise<void>;
     getTables(): Tables<TableNames>;
     ensureIndexes(): Promise<void>;
     private static normaliseCompositeIp;
     private static normaliseDocCompositeIps;
     saveCaptchas(sessionEvents: StoredSession[], imageCaptchaEvents: UserCommitmentRecord[], powCaptchaEvents: PoWCaptchaRecord[], puzzleCaptchaEvents?: PuzzleCaptchaRecord[]): Promise<void>;
-    getCaptchas(filter?: RootFilterQuery<CaptchaProperties>, limit?: number): Promise<{
+    getCaptchas(filter?: QueryFilter<CaptchaProperties>, limit?: number): Promise<{
         userCommitmentRecords: UserCommitmentRecord[];
         powCaptchaRecords: PoWCaptchaRecord[];
         puzzleCaptchaRecords: PuzzleCaptchaRecord[];

package/dist/databases/captcha.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"captcha.d.ts","sourceRoot":"","sources":["../../src/databases/captcha.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAGxB,KAAK,aAAa,EAGlB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,MAAM,yBAAyB,CAAC;AAajC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,aAAK,UAAU;IACd,iBAAiB,sBAAsB;IACvC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,UAAU,eAAe;IACzB,aAAa,kBAAkB;CAC/B;AAyBD,qBAAa,eAAgB,SAAQ,aAAc,YAAW,gBAAgB;IAC7E,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,CAAC,cAAc,CAAS;gBAG9B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM;IAMD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAUvC,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC;IAUzB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAqDpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAoBnC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAajC,YAAY,CACjB,aAAa,EAAE,aAAa,EAAE,EAC9B,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,gBAAgB,EAAE,EACpC,mBAAmB,GAAE,mBAAmB,EAAO;IAmI1C,WAAW,CAChB,MAAM,GAAE,eAAe,CAAC,iBAAiB,CAAM,EAC/C,KAAK,SAAM,GACT,OAAO,CAAC;QACV,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;QAC9C,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;QACtC,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;KAC5C,CAAC;CAsCF"}
+{"version":3,"file":"captcha.d.ts","sourceRoot":"","sources":["../../src/databases/captcha.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAGxB,KAAK,aAAa,EAGlB,KAAK,MAAM,EACX,KAAK,oBAAoB,EACzB,MAAM,yBAAyB,CAAC;AAajC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,KAAK,uBAAuB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAI/E,aAAK,UAAU;IACd,iBAAiB,sBAAsB;IACvC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,UAAU,eAAe;IACzB,aAAa,kBAAkB;CAC/B;AAyBD,qBAAa,eAAgB,SAAQ,aAAc,YAAW,gBAAgB;IAC7E,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,CAAC,cAAc,CAAS;gBAG9B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,uBAAuB;IAMpB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAUvC,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC;IAUzB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAqDpC,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAoBnC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAajC,YAAY,CACjB,aAAa,EAAE,aAAa,EAAE,EAC9B,kBAAkB,EAAE,oBAAoB,EAAE,EAC1C,gBAAgB,EAAE,gBAAgB,EAAE,EACpC,mBAAmB,GAAE,mBAAmB,EAAO;IAmI1C,WAAW,CAChB,MAAM,GAAE,WAAW,CAAC,iBAAiB,CAAM,EAC3C,KAAK,SAAM,GACT,OAAO,CAAC;QACV,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;QAC9C,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;QACtC,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;KAC5C,CAAC;CAsCF"}