@prosopo/procaptcha 2.10.57 → 2.10.59

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/procaptcha@2.10.57 build:cjs
+> @prosopo/procaptcha@2.10.59 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -13,8 +13,8 @@ ViteCommonJSConfig: .
     '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/api/tsconfig.json',
-    '/home/runner/work/captcha/captcha/packages/procaptcha-common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/load-balancer/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/procaptcha-common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/widget-skeleton/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/account/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/fingerprint/tsconfig.json',
@@ -32,8 +32,8 @@ ViteCommonJSConfig: .
     '@prosopo/types',
     '@prosopo/util-crypto',
     '@prosopo/api',
-    '@prosopo/procaptcha-common',
     '@prosopo/load-balancer',
+    '@prosopo/procaptcha-common',
     '@prosopo/widget-skeleton',
     '@prosopo/account',
     '@prosopo/fingerprint',
@@ -41,16 +41,17 @@ ViteCommonJSConfig: .
     '@prosopo/keyring'
   ]
 }
-vite v6.4.1 building SSR bundle for production...
+The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
+vite v8.1.5 building ssr environment for production...
 Bundle build started
-transforming...
-Build end
-✓ 5 modules transformed.
-Entry module "src/modules/ProsopoCaptchaApi.ts" is using named and default exports together. Consumers of your bundle will have to use `..default` to access the default export, which may not be what you want. Use `output.exports: "named"` to disable this warning.
+
+✓ 6 modules transformed.
 rendering chunks...
-dist/cjs/modules/index.cjs               0.39 kB
-dist/cjs/index.cjs                       0.44 kB
-dist/cjs/modules/collector.cjs           2.18 kB
-dist/cjs/modules/ProsopoCaptchaApi.cjs   2.48 kB
-dist/cjs/modules/Manager.cjs            14.14 kB
-✓ built in 227ms
+computing gzip size...
+dist/cjs/modules/index.cjs               0.34 kB │ gzip: 0.13 kB
+dist/cjs/index.cjs                       0.44 kB │ gzip: 0.19 kB
+dist/cjs/modules/collector.cjs           1.83 kB │ gzip: 0.59 kB
+dist/cjs/modules/ProsopoCaptchaApi.cjs   2.17 kB │ gzip: 0.78 kB
+dist/cjs/modules/Manager.cjs            13.39 kB │ gzip: 3.71 kB
+
+✓ built in 97ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/procaptcha@2.10.57 build:tsc
+> @prosopo/procaptcha@2.10.59 build:tsc
 > tsc --build --verbose
 
-10:22:55 PM - Projects in this build: 
+12:36:38 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../locale/tsconfig.json
     * ../util/tsconfig.json
@@ -21,39 +21,39 @@
     * ../procaptcha-common/tsconfig.json
     * tsconfig.json
 
-10:22:55 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/index.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-10:22:55 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/procaptcha/api.ts' is older than output '../types/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/provider/api.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/error.ts' is older than output '../common/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/index.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/dataset.unit.test.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/dataset.unit.test.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
+12:36:38 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/tests/apiHarness.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/balancer.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/tests/providers.unit.test.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../widget-skeleton/tsconfig.json' is up to date because newest input '../widget-skeleton/src/index.ts' is older than output '../widget-skeleton/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../widget-skeleton/tsconfig.json' is up to date because newest input '../widget-skeleton/src/webComponent/createWidget.ts' is older than output '../widget-skeleton/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../fingerprintjs/tsconfig.json' is up to date because newest input '../fingerprintjs/src/utils/browser.ts' is older than output '../fingerprintjs/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../fingerprintjs/tsconfig.json' is up to date because newest input '../fingerprintjs/src/utils/browser.ts' is older than output '../fingerprintjs/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../fingerprint/tsconfig.json' is up to date because newest input '../fingerprint/src/index.ts' is older than output '../fingerprint/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../fingerprint/tsconfig.json' is up to date because newest input '../fingerprint/src/index.ts' is older than output '../fingerprint/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/index.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/keyring/keyring.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../account/tsconfig.json' is up to date because newest input '../account/src/custom.d.ts' is older than output '../account/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../account/tsconfig.json' is up to date because newest input '../account/src/custom.d.ts' is older than output '../account/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project '../procaptcha-common/tsconfig.json' is up to date because newest input '../procaptcha-common/src/reactComponents/Honeypot.tsx' is older than output '../procaptcha-common/tsconfig.tsbuildinfo'
+12:36:39 PM - Project '../procaptcha-common/tsconfig.json' is up to date because newest input '../procaptcha-common/src/simdReadings.ts' is older than output '../procaptcha-common/tsconfig.tsbuildinfo'
 
-10:22:56 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+12:36:39 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-10:22:56 PM - Building project '/home/runner/work/captcha/captcha/packages/procaptcha/tsconfig.json'...
+12:36:39 PM - Building project '/home/runner/work/captcha/captcha/packages/procaptcha/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/procaptcha@2.10.57 build
+> @prosopo/procaptcha@2.10.59 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/procaptcha@2.10.57 build:cross-env
+> @prosopo/procaptcha@2.10.59 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -17,8 +17,8 @@ ViteEsmConfig: .
     '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/api/tsconfig.json',
-    '/home/runner/work/captcha/captcha/packages/procaptcha-common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/load-balancer/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/procaptcha-common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/widget-skeleton/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/account/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/fingerprint/tsconfig.json',
@@ -36,8 +36,8 @@ ViteEsmConfig: .
     '@prosopo/types',
     '@prosopo/util-crypto',
     '@prosopo/api',
-    '@prosopo/procaptcha-common',
     '@prosopo/load-balancer',
+    '@prosopo/procaptcha-common',
     '@prosopo/widget-skeleton',
     '@prosopo/account',
     '@prosopo/fingerprint',
@@ -45,15 +45,18 @@ ViteEsmConfig: .
     '@prosopo/keyring'
   ]
 }
-vite v6.4.1 building SSR bundle for production...
+The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
+vite v8.1.5 building ssr environment for production...
 Bundle build started
-transforming...
-Build end
-✓ 5 modules transformed.
+
+✓ 6 modules transformed.
 rendering chunks...
-dist/modules/index.js               0.21 kB
-dist/index.js                       0.26 kB
-dist/modules/collector.js           2.08 kB
-dist/modules/ProsopoCaptchaApi.js   2.36 kB
-dist/modules/Manager.js            13.89 kB
-✓ built in 219ms
+computing gzip size...
+dist/_virtual/_rolldown/runtime.js   0.04 kB │ gzip: 0.06 kB
+dist/modules/index.js                0.20 kB │ gzip: 0.11 kB
+dist/index.js                        0.27 kB │ gzip: 0.14 kB
+dist/modules/collector.js            1.81 kB │ gzip: 0.59 kB
+dist/modules/ProsopoCaptchaApi.js    2.09 kB │ gzip: 0.78 kB
+dist/modules/Manager.js             12.62 kB │ gzip: 3.65 kB
+
+✓ built in 66ms

package/CHANGELOG.md

@@ -1,5 +1,53 @@
 # @prosopo/procaptcha
 
+## 2.10.59
+### Patch Changes
+
+- cc022be: Add unit and type tests for the image captcha manager, the provider adapter and the behavioural collector (140 tests, 100% statement/branch/function/line coverage).
+  
+  Two edge cases surfaced and fixed while covering `ProsopoCaptchaApi`/`Manager`:
+  
+  - `submitCaptchaSolution` overflowed the stack on an empty solution set: `CaptchaMerkleTree` recurses on an empty layer, so the existing `!tree.root` guard never ran. Empty solution sets are now rejected up front.
+  - `loadProviderApi` proved the site key was set but its callers still fell back to `""` when constructing `ProsopoCaptchaApi`, so a missing site key could have been forwarded as an empty dapp account. It now returns the validated site key alongside the client.
+  
+  No behavioural changes to the captcha flow itself.
+- Updated dependencies [1e0cf14]
+  - @prosopo/api@3.5.21
+
+## 2.10.58
+### Patch Changes
+
+- ab3499c: feat(procaptcha): block on SIMD readings at solution submit
+  
+  Solution submit is the last hop the client controls, so it's the last chance to
+  attach the catcher's WASM SIMD readings for a session. The image, PoW and puzzle
+  managers now wait for the benchmark there via a shared
+  `getSimdReadingsForSubmit` helper, capped at 5s, instead of attaching only
+  whatever the prefetch happened to have resolved.
+  
+  The helper passes the budget down to the detector *and* races it locally — the
+  detector ships prebuilt, so a bundle that ignores `timeoutMs` (or a benchmark
+  wedged on a busy main thread) can't hang the submission. It never rejects: a
+  missing accessor, a rejection, a synchronous throw and a timeout all resolve to
+  `undefined` and the solution is submitted without readings, so a user is never
+  failed over telemetry.
+  
+  The earlier frictionless POST and challenge GET hops are unchanged and remain
+  non-blocking.
+- e14fce6: chore(deps): bump vite to 6.4.3 and mongoose to 8.24.1, and adjust types for the mongoose 8.24 Document/ObjectId changes
+- Updated dependencies [2c47bb7]
+- Updated dependencies [ab3499c]
+- Updated dependencies [0e1171c]
+- Updated dependencies [103318c]
+- Updated dependencies [270a8d8]
+- Updated dependencies [e14fce6]
+  - @prosopo/util@3.3.5
+  - @prosopo/procaptcha-common@2.11.18
+  - @prosopo/types@4.10.0
+  - @prosopo/api@3.5.20
+  - @prosopo/common@3.1.48
+  - @prosopo/datasets@3.1.55
+
 ## 2.10.57
 ### Patch Changes
 

package/dist/_virtual/_rolldown/runtime.js

@@ -0,0 +1,3 @@
+import "node:module";
+//#endregion
+export {};

package/dist/cjs/index.cjs

@@ -1,9 +1,7 @@
-"use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("./modules/index.cjs");
-const Manager = require("./modules/Manager.cjs");
-const ProsopoCaptchaApi = require("./modules/ProsopoCaptchaApi.cjs");
-const collector = require("./modules/collector.cjs");
-exports.Manager = Manager.Manager;
-exports.ProsopoCaptchaApi = ProsopoCaptchaApi.ProsopoCaptchaApi;
-exports.startCollector = collector.startCollector;
+const require_ProsopoCaptchaApi = require("./modules/ProsopoCaptchaApi.cjs");
+const require_Manager = require("./modules/Manager.cjs");
+const require_collector = require("./modules/collector.cjs");
+exports.Manager = require_Manager.Manager;
+exports.ProsopoCaptchaApi = require_ProsopoCaptchaApi.ProsopoCaptchaApi;
+exports.startCollector = require_collector.startCollector;