@prosopo/fingerprint 2.6.28 → 2.7.0

package/.turbo/turbo-build$colon$cjs.log

@@ -1,15 +1,33 @@
 
-> @prosopo/fingerprint@2.6.28 build:cjs
+> @prosopo/fingerprint@2.7.0 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
-{ tsConfigPaths: [] }
-{ externals: [] }
+{
+  tsConfigPaths: [
+    '/home/runner/work/captcha/captcha/packages/fingerprintjs/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/locale/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/util/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json'
+  ]
+}
+{
+  externals: [
+    '@prosopo/fingerprintjs',
+    '@prosopo/types',
+    '@prosopo/locale',
+    '@prosopo/util',
+    '@prosopo/util-crypto'
+  ]
+}
 vite v6.4.1 building SSR bundle for production...
 Bundle build started
 transforming...
 Build end
-✓ 1 modules transformed.
+✓ 3 modules transformed.
 rendering chunks...
-dist/cjs/index.cjs  1.58 kB
-✓ built in 153ms
+dist/cjs/merkle.cjs  2.72 kB
+dist/cjs/proof.cjs   3.17 kB
+dist/cjs/index.cjs   3.38 kB
+✓ built in 163ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,14 +1,29 @@
 
-> @prosopo/fingerprint@2.6.28 build:tsc
+> @prosopo/fingerprint@2.7.0 build:tsc
 > tsc --build --verbose
 
-4:56:26 PM - Projects in this build: 
+12:05:39 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
+    * ../fingerprintjs/tsconfig.json
+    * ../locale/tsconfig.json
+    * ../util/tsconfig.json
+    * ../util-crypto/tsconfig.json
+    * ../types/tsconfig.json
     * tsconfig.json
 
-4:56:27 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/dependencies.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+12:05:39 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/NodejsPolarsNativeFilePlugin.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-4:56:27 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+12:05:39 PM - Project '../fingerprintjs/tsconfig.json' is up to date because newest input '../fingerprintjs/src/utils/async.ts' is older than output '../fingerprintjs/tsconfig.tsbuildinfo'
 
-4:56:27 PM - Building project '/home/runner/work/captcha/captcha/packages/fingerprint/tsconfig.json'...
+12:05:39 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+
+12:05:39 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+
+12:05:39 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+
+12:05:39 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/keyring/keyring/types.ts' is older than output '../types/tsconfig.tsbuildinfo'
+
+12:05:39 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+
+12:05:39 PM - Building project '/home/runner/work/captcha/captcha/packages/fingerprint/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,19 +1,37 @@
 
-> @prosopo/fingerprint@2.6.28 build
+> @prosopo/fingerprint@2.7.0 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/fingerprint@2.6.28 build:cross-env
+> @prosopo/fingerprint@2.7.0 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
-{ tsConfigPaths: [] }
-{ externals: [] }
+{
+  tsConfigPaths: [
+    '/home/runner/work/captcha/captcha/packages/fingerprintjs/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/locale/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/util/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json'
+  ]
+}
+{
+  externals: [
+    '@prosopo/fingerprintjs',
+    '@prosopo/types',
+    '@prosopo/locale',
+    '@prosopo/util',
+    '@prosopo/util-crypto'
+  ]
+}
 vite v6.4.1 building SSR bundle for production...
 Bundle build started
 transforming...
 Build end
-✓ 1 modules transformed.
+✓ 3 modules transformed.
 rendering chunks...
-dist/index.js  0.32 kB
-✓ built in 129ms
+dist/index.js   1.92 kB
+dist/merkle.js  2.50 kB
+dist/proof.js   2.92 kB
+✓ built in 148ms

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # @prosopo/fingerprint
 
+## 2.7.0
+### Minor Changes
+
+- dde23e8: Internal bot-detection signal improvements.
+
+### Patch Changes
+
+- Updated dependencies [3a46191]
+- Updated dependencies [dde23e8]
+  - @prosopo/types@4.7.0
+
+## 2.6.31
+### Patch Changes
+
+- 642d064: Bump `@prosopo/fingerprintjs` to 5.2.0 to mirror the upstream v5.2.0
+  release brought into the fork by the earlier upstream merge. Also
+  aligns the fork's `@prosopo/config` devDependency with the workspace
+  pin (3.3.0 → 3.3.1).
+- Updated dependencies [642d064]
+  - @prosopo/fingerprintjs@5.3.0
+
+## 2.6.30
+### Patch Changes
+
+- 4aae4e6: Drop `webGlExtensions` from the FpJS visitorId source list to remove the
+  1.5–2s WebGL extension/parameter walk from the account-creation critical
+  path. Done at the wrapper level — `@prosopo/fingerprint` now calls
+  `loadSources(sources, opts, ['webGlExtensions'])` directly instead of the
+  default `FingerprintJS.load().get()`, so the fork's source list is
+  unchanged. `webGlBasics` (vendor + `UNMASKED_RENDERER_WEBGL`) is kept
+  because that's where most of WebGL's entropy lives; the slow extension
+  walk is largely redundant with the basics + canvas signals already in the
+  hash. Existing visitorIds will rotate once on first load.
+  
+  Also merges upstream FpJS v5.2.0 into the fork, picking up the new
+  `userAgentData` entropy source, Firefox zoom fix for font preferences,
+  and dep bumps.
+- Updated dependencies [4aae4e6]
+  - @prosopo/fingerprintjs@5.2.0
+
+## 2.6.29
+### Patch Changes
+
+- 730c61e: Speed up captcha
+
 ## 2.6.28
 ### Patch Changes
 

package/dist/cjs/index.cjs

@@ -22,11 +22,61 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const FingerprintJSImport = async () => (await import("@fingerprintjs/fingerprintjs")).default;
+const proof = require("./proof.cjs");
+const merkle = require("./merkle.cjs");
+const EXCLUDED_SOURCES = ["webGlExtensions"];
+const FingerprintJSImport = async () => import("@prosopo/fingerprintjs");
+let componentsCache = null;
+const loadComponents = () => {
+  if (!componentsCache) {
+    const pending = (async () => {
+      const { sources, loadSources, prepareForSources } = await FingerprintJSImport();
+      await prepareForSources();
+      const sourceOptions = {
+        cache: {}
+      };
+      const getComponents = loadSources(
+        sources,
+        sourceOptions,
+        EXCLUDED_SOURCES
+      );
+      return getComponents();
+    })();
+    componentsCache = pending;
+    pending.catch(() => {
+      if (componentsCache === pending) {
+        componentsCache = null;
+      }
+    });
+  }
+  return componentsCache;
+};
 const getFingerprint = async () => {
-  const FingerprintJS = await FingerprintJSImport();
-  const fp = await FingerprintJS.load();
-  const result = await fp.get();
-  return result.visitorId;
+  const [{ hashComponents }, components] = await Promise.all([
+    FingerprintJSImport(),
+    loadComponents()
+  ]);
+  return hashComponents(components);
+};
+const getFingerprintProof = async (discloseKeys) => {
+  const components = await loadComponents();
+  return proof.buildFingerprintProofFromComponents(components, discloseKeys);
+};
+const prefetchFingerprint = () => {
+  loadComponents().catch(() => {
+  });
 };
+exports.FINGERPRINT_DISCLOSURE_KEYS = proof.FINGERPRINT_DISCLOSURE_KEYS;
+exports.FINGERPRINT_PROOF_VERSION = proof.FINGERPRINT_PROOF_VERSION;
+exports.buildFingerprintProofFromComponents = proof.buildFingerprintProofFromComponents;
+exports.encodeFingerprintProof = proof.encodeFingerprintProof;
+exports.leafHashForContent = proof.leafHashForContent;
+exports.verifyFingerprintProofStructure = proof.verifyFingerprintProofStructure;
+exports.buildMerkleLayers = merkle.buildMerkleLayers;
+exports.hashMerklePair = merkle.hashMerklePair;
+exports.merkleProofFromLayers = merkle.merkleProofFromLayers;
+exports.merkleRootFromLayers = merkle.merkleRootFromLayers;
+exports.verifyMerkleProof = merkle.verifyMerkleProof;
 exports.getFingerprint = getFingerprint;
+exports.getFingerprintProof = getFingerprintProof;
+exports.prefetchFingerprint = prefetchFingerprint;

package/dist/cjs/merkle.cjs

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const utilCrypto = require("@prosopo/util-crypto");
+const at = (arr, index) => {
+  const value = arr[index];
+  if (value === void 0) {
+    throw new Error(
+      `merkle: index ${index} out of range (length ${arr.length})`
+    );
+  }
+  return value;
+};
+const hashMerklePair = (left, right) => utilCrypto.hexHashArray([left, right]);
+const buildMerkleLayers = (leafHashes) => {
+  if (leafHashes.length === 0) {
+    throw new Error("merkle: cannot build a tree with no leaves");
+  }
+  const layers = [[...leafHashes]];
+  let current = leafHashes;
+  while (current.length > 1) {
+    const next = [];
+    for (let i = 0; i < current.length; i += 2) {
+      const left = at(current, i);
+      const right = i + 1 < current.length ? at(current, i + 1) : left;
+      next.push(hashMerklePair(left, right));
+    }
+    layers.push(next);
+    current = next;
+  }
+  return layers;
+};
+const merkleRootFromLayers = (layers) => at(at(layers, layers.length - 1), 0);
+const merkleProofFromLayers = (layers, leafHash) => {
+  const proof = [];
+  let hash = leafHash;
+  for (let layerNum = 0; layerNum < layers.length - 1; layerNum++) {
+    const layer = at(layers, layerNum);
+    const index = layer.indexOf(hash);
+    if (index === -1) {
+      throw new Error("merkle: leaf hash not present in layer");
+    }
+    let partnerIndex = index % 2 === 1 ? index - 1 : index + 1;
+    if (partnerIndex > layer.length - 1) {
+      partnerIndex = index;
+    }
+    const partner = at(layer, partnerIndex);
+    const pair = partnerIndex > index ? [hash, partner] : [partner, hash];
+    proof.push(pair);
+    hash = hashMerklePair(pair[0], pair[1]);
+  }
+  return [...proof, [merkleRootFromLayers(layers)]];
+};
+const verifyMerkleProof = (leafHash, proof) => {
+  try {
+    const firstLayer = proof[0];
+    if (firstLayer === void 0 || firstLayer.indexOf(leafHash) === -1) {
+      return false;
+    }
+    if (proof.length === 1) {
+      return at(firstLayer, 0) === leafHash;
+    }
+    const root = at(at(proof, proof.length - 1), 0);
+    let hash = leafHash;
+    for (let i = 0; i < proof.length - 1; i++) {
+      const layer = at(proof, i);
+      if (layer.indexOf(hash) === -1) {
+        return false;
+      }
+      hash = hashMerklePair(at(layer, 0), at(layer, 1));
+      if (at(proof, i + 1).indexOf(hash) === -1) {
+        return false;
+      }
+    }
+    return hash === root;
+  } catch {
+    return false;
+  }
+};
+exports.buildMerkleLayers = buildMerkleLayers;
+exports.hashMerklePair = hashMerklePair;
+exports.merkleProofFromLayers = merkleProofFromLayers;
+exports.merkleRootFromLayers = merkleRootFromLayers;
+exports.verifyMerkleProof = verifyMerkleProof;

package/dist/cjs/proof.cjs

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const utilCrypto = require("@prosopo/util-crypto");
+const merkle = require("./merkle.cjs");
+const FINGERPRINT_PROOF_VERSION = 1;
+const FINGERPRINT_DISCLOSURE_KEYS = [
+  "colorDepth",
+  "cookiesEnabled",
+  "sessionStorage",
+  "localStorage",
+  "timezone",
+  "hardwareConcurrency",
+  "languages",
+  "architecture"
+];
+const escapeKey = (key) => key.replace(/([:|\\])/g, "\\$1");
+const componentLeafContent = (key, component) => {
+  const serialized = "error" in component ? "error" : JSON.stringify(component.value);
+  return `${escapeKey(key)}:${serialized}`;
+};
+const disclosureLeafContent = (disclosure) => {
+  const serialized = disclosure.error ? "error" : JSON.stringify(disclosure.value);
+  return `${escapeKey(disclosure.key)}:${serialized}`;
+};
+const leafHashForContent = (content) => utilCrypto.hexHash(content);
+const buildFingerprintProofFromComponents = (components, discloseKeys) => {
+  const keys = Object.keys(components).sort();
+  if (keys.length === 0) {
+    throw new Error("fingerprint proof: no components to commit to");
+  }
+  const leafHashes = keys.map((key) => {
+    const component = components[key];
+    if (component === void 0) {
+      throw new Error(`fingerprint proof: missing component ${key}`);
+    }
+    return leafHashForContent(componentLeafContent(key, component));
+  });
+  const layers = merkle.buildMerkleLayers(leafHashes);
+  const root = merkle.merkleRootFromLayers(layers);
+  const disclose = discloseKeys ?? keys;
+  const disclosures = [];
+  for (const key of disclose) {
+    const index = keys.indexOf(key);
+    if (index === -1) {
+      continue;
+    }
+    const component = components[key];
+    const leafHash = leafHashes[index];
+    if (component === void 0 || leafHash === void 0) {
+      continue;
+    }
+    const proof = merkle.merkleProofFromLayers(layers, leafHash);
+    disclosures.push(
+      "error" in component ? { key, error: true, proof } : { key, value: component.value, proof }
+    );
+  }
+  return { v: FINGERPRINT_PROOF_VERSION, root, disclosures };
+};
+const verifyFingerprintProofStructure = (proof) => {
+  if (proof.v !== FINGERPRINT_PROOF_VERSION) {
+    return false;
+  }
+  if (typeof proof.root !== "string" || proof.disclosures.length === 0) {
+    return false;
+  }
+  for (const disclosure of proof.disclosures) {
+    const leafHash = leafHashForContent(disclosureLeafContent(disclosure));
+    if (!merkle.verifyMerkleProof(leafHash, disclosure.proof)) {
+      return false;
+    }
+    const rootLayer = disclosure.proof[disclosure.proof.length - 1];
+    if (rootLayer === void 0 || rootLayer[0] !== proof.root) {
+      return false;
+    }
+  }
+  return true;
+};
+const encodeFingerprintProof = (proof) => JSON.stringify(proof);
+exports.FINGERPRINT_DISCLOSURE_KEYS = FINGERPRINT_DISCLOSURE_KEYS;
+exports.FINGERPRINT_PROOF_VERSION = FINGERPRINT_PROOF_VERSION;
+exports.buildFingerprintProofFromComponents = buildFingerprintProofFromComponents;
+exports.encodeFingerprintProof = encodeFingerprintProof;
+exports.leafHashForContent = leafHashForContent;
+exports.verifyFingerprintProofStructure = verifyFingerprintProofStructure;

package/dist/index.d.ts

@@ -1,2 +1,8 @@
+import { type FingerprintProof } from "./proof.js";
 export declare const getFingerprint: () => Promise<string>;
+export declare const getFingerprintProof: (discloseKeys?: readonly string[]) => Promise<FingerprintProof>;
+export declare const prefetchFingerprint: () => void;
+export type { FingerprintLeafDisclosure, FingerprintProof } from "./proof.js";
+export { FINGERPRINT_DISCLOSURE_KEYS, FINGERPRINT_PROOF_VERSION, buildFingerprintProofFromComponents, encodeFingerprintProof, leafHashForContent, verifyFingerprintProofStructure, } from "./proof.js";
+export { buildMerkleLayers, hashMerklePair, merkleProofFromLayers, merkleRootFromLayers, verifyMerkleProof, } from "./merkle.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,cAAc,uBAK1B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAeA,OAAO,EACN,KAAK,gBAAgB,EAErB,MAAM,YAAY,CAAC;AA2CpB,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,MAAM,CAMrD,CAAC;AASF,eAAO,MAAM,mBAAmB,kBAChB,SAAS,MAAM,EAAE,KAC9B,OAAO,CAAC,gBAAgB,CAG1B,CAAC;AAEF,eAAO,MAAM,mBAAmB,QAAO,IAItC,CAAC;AAEF,YAAY,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EACN,2BAA2B,EAC3B,yBAAyB,EACzB,mCAAmC,EACnC,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,GACjB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,10 +1,61 @@
-const FingerprintJSImport = async () => (await import("@fingerprintjs/fingerprintjs")).default;
+import { buildFingerprintProofFromComponents } from "./proof.js";
+import { FINGERPRINT_DISCLOSURE_KEYS, FINGERPRINT_PROOF_VERSION, encodeFingerprintProof, leafHashForContent, verifyFingerprintProofStructure } from "./proof.js";
+import { buildMerkleLayers, hashMerklePair, merkleProofFromLayers, merkleRootFromLayers, verifyMerkleProof } from "./merkle.js";
+const EXCLUDED_SOURCES = ["webGlExtensions"];
+const FingerprintJSImport = async () => import("@prosopo/fingerprintjs");
+let componentsCache = null;
+const loadComponents = () => {
+  if (!componentsCache) {
+    const pending = (async () => {
+      const { sources, loadSources, prepareForSources } = await FingerprintJSImport();
+      await prepareForSources();
+      const sourceOptions = {
+        cache: {}
+      };
+      const getComponents = loadSources(
+        sources,
+        sourceOptions,
+        EXCLUDED_SOURCES
+      );
+      return getComponents();
+    })();
+    componentsCache = pending;
+    pending.catch(() => {
+      if (componentsCache === pending) {
+        componentsCache = null;
+      }
+    });
+  }
+  return componentsCache;
+};
 const getFingerprint = async () => {
-  const FingerprintJS = await FingerprintJSImport();
-  const fp = await FingerprintJS.load();
-  const result = await fp.get();
-  return result.visitorId;
+  const [{ hashComponents }, components] = await Promise.all([
+    FingerprintJSImport(),
+    loadComponents()
+  ]);
+  return hashComponents(components);
+};
+const getFingerprintProof = async (discloseKeys) => {
+  const components = await loadComponents();
+  return buildFingerprintProofFromComponents(components, discloseKeys);
+};
+const prefetchFingerprint = () => {
+  loadComponents().catch(() => {
+  });
 };
 export {
-  getFingerprint
+  FINGERPRINT_DISCLOSURE_KEYS,
+  FINGERPRINT_PROOF_VERSION,
+  buildFingerprintProofFromComponents,
+  buildMerkleLayers,
+  encodeFingerprintProof,
+  getFingerprint,
+  getFingerprintProof,
+  hashMerklePair,
+  leafHashForContent,
+  merkleProofFromLayers,
+  merkleRootFromLayers,
+  prefetchFingerprint,
+  verifyFingerprintProofStructure,
+  verifyMerkleProof
 };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,MAAM,mBAAmB,GAAG,KAAK,IAAI,EAAE,CACtC,CAAC,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;IACxC,MAAM,aAAa,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,CAAC;AACzB,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAeA,OAAO,EAEN,mCAAmC,GACnC,MAAM,YAAY,CAAC;AAKpB,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAEtD,MAAM,mBAAmB,GAAG,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAIzE,IAAI,eAAe,GAAsC,IAAI,CAAC;AAE9D,MAAM,cAAc,GAAG,GAA+B,EAAE;IACvD,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAChD,MAAM,mBAAmB,EAAE,CAAC;YAC7B,MAAM,iBAAiB,EAAE,CAAC;YAG1B,MAAM,aAAa,GAClB;gBACC,KAAK,EAAE,EAAE;aACT,CAAC;YACH,MAAM,aAAa,GAAG,WAAW,CAChC,OAAO,EACP,aAAa,EACb,gBAAgB,CAChB,CAAC;YACF,OAAO,aAAa,EAAE,CAAC;QACxB,CAAC,CAAC,EAAE,CAAC;QACL,eAAe,GAAG,OAAO,CAAC;QAE1B,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;YAClB,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;gBACjC,eAAe,GAAG,IAAI,CAAC;YACxB,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAqB,EAAE;IACzD,MAAM,CAAC,EAAE,cAAc,EAAE,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,mBAAmB,EAAE;QACrB,cAAc,EAAE;KAChB,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACvC,YAAgC,EACJ,EAAE;IAC9B,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC;IAC1C,OAAO,mCAAmC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAS,EAAE;IAC7C,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;IAE5B,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC;AAGF,OAAO,EACN,2BAA2B,EAC3B,yBAAyB,EACzB,mCAAmC,EACnC,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,GACjB,MAAM,aAAa,CAAC"}

package/dist/merkle.d.ts

@@ -0,0 +1,7 @@
+import type { MerkleLeaf, MerkleProof } from "@prosopo/types";
+export declare const hashMerklePair: (left: string, right: string) => string;
+export declare const buildMerkleLayers: (leafHashes: string[]) => string[][];
+export declare const merkleRootFromLayers: (layers: string[][]) => string;
+export declare const merkleProofFromLayers: (layers: string[][], leafHash: MerkleLeaf) => MerkleProof;
+export declare const verifyMerkleProof: (leafHash: MerkleLeaf, proof: MerkleProof) => boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AAqBhF,eAAO,MAAM,cAAc,SAAU,MAAM,SAAS,MAAM,KAAG,MACjC,CAAC;AAO7B,eAAO,MAAM,iBAAiB,eAAgB,MAAM,EAAE,KAAG,MAAM,EAAE,EAiBhE,CAAC;AAEF,eAAO,MAAM,oBAAoB,WAAY,MAAM,EAAE,EAAE,KAAG,MACrB,CAAC;AAGtC,eAAO,MAAM,qBAAqB,WACzB,MAAM,EAAE,EAAE,YACR,UAAU,KAClB,WAqBF,CAAC;AAGF,eAAO,MAAM,iBAAiB,aACnB,UAAU,SACb,WAAW,KAChB,OA0BF,CAAC"}

package/dist/merkle.js

@@ -0,0 +1,83 @@
+import { hexHashArray } from "@prosopo/util-crypto";
+const at = (arr, index) => {
+  const value = arr[index];
+  if (value === void 0) {
+    throw new Error(
+      `merkle: index ${index} out of range (length ${arr.length})`
+    );
+  }
+  return value;
+};
+const hashMerklePair = (left, right) => hexHashArray([left, right]);
+const buildMerkleLayers = (leafHashes) => {
+  if (leafHashes.length === 0) {
+    throw new Error("merkle: cannot build a tree with no leaves");
+  }
+  const layers = [[...leafHashes]];
+  let current = leafHashes;
+  while (current.length > 1) {
+    const next = [];
+    for (let i = 0; i < current.length; i += 2) {
+      const left = at(current, i);
+      const right = i + 1 < current.length ? at(current, i + 1) : left;
+      next.push(hashMerklePair(left, right));
+    }
+    layers.push(next);
+    current = next;
+  }
+  return layers;
+};
+const merkleRootFromLayers = (layers) => at(at(layers, layers.length - 1), 0);
+const merkleProofFromLayers = (layers, leafHash) => {
+  const proof = [];
+  let hash = leafHash;
+  for (let layerNum = 0; layerNum < layers.length - 1; layerNum++) {
+    const layer = at(layers, layerNum);
+    const index = layer.indexOf(hash);
+    if (index === -1) {
+      throw new Error("merkle: leaf hash not present in layer");
+    }
+    let partnerIndex = index % 2 === 1 ? index - 1 : index + 1;
+    if (partnerIndex > layer.length - 1) {
+      partnerIndex = index;
+    }
+    const partner = at(layer, partnerIndex);
+    const pair = partnerIndex > index ? [hash, partner] : [partner, hash];
+    proof.push(pair);
+    hash = hashMerklePair(pair[0], pair[1]);
+  }
+  return [...proof, [merkleRootFromLayers(layers)]];
+};
+const verifyMerkleProof = (leafHash, proof) => {
+  try {
+    const firstLayer = proof[0];
+    if (firstLayer === void 0 || firstLayer.indexOf(leafHash) === -1) {
+      return false;
+    }
+    if (proof.length === 1) {
+      return at(firstLayer, 0) === leafHash;
+    }
+    const root = at(at(proof, proof.length - 1), 0);
+    let hash = leafHash;
+    for (let i = 0; i < proof.length - 1; i++) {
+      const layer = at(proof, i);
+      if (layer.indexOf(hash) === -1) {
+        return false;
+      }
+      hash = hashMerklePair(at(layer, 0), at(layer, 1));
+      if (at(proof, i + 1).indexOf(hash) === -1) {
+        return false;
+      }
+    }
+    return hash === root;
+  } catch {
+    return false;
+  }
+};
+export {
+  buildMerkleLayers,
+  hashMerklePair,
+  merkleProofFromLayers,
+  merkleRootFromLayers,
+  verifyMerkleProof
+};

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AASpD,MAAM,EAAE,GAAG,CAAI,GAAiB,EAAE,KAAa,EAAK,EAAE;IACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,iBAAiB,KAAK,yBAAyB,GAAG,CAAC,MAAM,GAAG,CAC5D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACrE,YAAY,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAO7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAoB,EAAc,EAAE;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAe,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,GAAa,UAAU,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAkB,EAAU,EAAE,CAClE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAGtC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,MAAkB,EAClB,QAAoB,EACN,EAAE;IAChB,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAErC,YAAY,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,IAAI,GACT,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,QAAoB,EACpB,KAAkB,EACR,EAAE;IACZ,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,QAAQ,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,IAAI,KAAK,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC,CAAC"}

package/dist/proof.d.ts

@@ -0,0 +1,20 @@
+import type { UnknownComponents } from "@prosopo/fingerprintjs";
+import type { MerkleProof } from "@prosopo/types";
+export declare const FINGERPRINT_PROOF_VERSION = 1;
+export declare const FINGERPRINT_DISCLOSURE_KEYS: readonly string[];
+export interface FingerprintLeafDisclosure {
+    key: string;
+    value?: unknown;
+    error?: boolean;
+    proof: MerkleProof;
+}
+export interface FingerprintProof {
+    v: number;
+    root: string;
+    disclosures: FingerprintLeafDisclosure[];
+}
+export declare const leafHashForContent: (content: string) => string;
+export declare const buildFingerprintProofFromComponents: (components: UnknownComponents, discloseKeys?: readonly string[]) => FingerprintProof;
+export declare const verifyFingerprintProofStructure: (proof: FingerprintProof) => boolean;
+export declare const encodeFingerprintProof: (proof: FingerprintProof) => string;
+//# sourceMappingURL=proof.d.ts.map

package/dist/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAa,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AASlD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAa3C,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EASxD,CAAC;AASF,MAAM,WAAW,yBAAyB;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;CACnB;AASD,MAAM,WAAW,gBAAgB;IAChC,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,yBAAyB,EAAE,CAAC;CACzC;AA2BD,eAAO,MAAM,kBAAkB,YAAa,MAAM,KAAG,MAA0B,CAAC;AAShF,eAAO,MAAM,mCAAmC,eACnC,iBAAiB,iBACd,SAAS,MAAM,EAAE,KAC9B,gBAsCF,CAAC;AAQF,eAAO,MAAM,+BAA+B,UACpC,gBAAgB,KACrB,OAkBF,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAAW,gBAAgB,KAAG,MAC3C,CAAC"}