@prosopo/provider 3.15.0 → 4.7.2

package/dist/tests/unit/api/blacklistRequestInspector.unit.test.js

@@ -1,5 +1,6 @@
-import { describe, expect, it } from "vitest";
-import { getRequestUserScope } from "../../../api/blacklistRequestInspector.js";
+import { AccessPolicyType, } from "@prosopo/user-access-policy";
+import { describe, expect, it, vi } from "vitest";
+import { BlacklistRequestInspector, getRequestUserScope, } from "../../../api/blacklistRequestInspector.js";
 describe("getRequestUserScope", () => {
     it("should return a user scope with ja4Hash and userAgent and ip and userId", () => {
         const ja4 = "t13d1516h2_8daaf6152771_8eba31f8906f";
@@ -56,5 +57,81 @@ describe("getRequestUserScope", () => {
             userAgent: userAgent,
         });
     });
+    it("should include countryCode in the scope when provided", () => {
+        const userScope = getRequestUserScope({ "user-agent": "ua" }, "ja4", "1.1.1.1", "user1", undefined, undefined, "DE");
+        expect(userScope.countryCode).toBe("DE");
+    });
+});
+describe("BlacklistRequestInspector.shouldAbortRequest", () => {
+    const mockLogger = {
+        info: vi.fn(),
+        debug: vi.fn(),
+        error: vi.fn(),
+        warn: vi.fn(),
+    };
+    const buildStorage = (findRules) => ({
+        findRules: vi.fn().mockImplementation(findRules),
+    });
+    const validIpInfo = (countryCode) => ({
+        ip: "1.1.1.1",
+        isValid: true,
+        isVPN: false,
+        isTor: false,
+        isProxy: false,
+        isDatacenter: false,
+        isAbuser: false,
+        isMobile: false,
+        isSatellite: false,
+        isCrawler: false,
+        countryCode,
+    });
+    it("threads req.ipInfo.countryCode into the access-rule lookup", async () => {
+        const seenScopes = [];
+        const storage = buildStorage(async (filter) => {
+            const f = filter;
+            seenScopes.push(f.userScope);
+            return [];
+        });
+        const inspector = new BlacklistRequestInspector(storage, async () => undefined);
+        await inspector.shouldAbortRequest("/v1/prosopo/provider/client/captcha/frictionless", "1.1.1.1", "ja4hash", {}, {}, mockLogger, validIpInfo("DE"));
+        const hasCountry = seenScopes.some((scope) => scope.countryCode === "DE");
+        expect(hasCountry).toBe(true);
+    });
+    it("does not pass countryCode when req.ipInfo is missing", async () => {
+        const seenScopes = [];
+        const storage = buildStorage(async (filter) => {
+            const f = filter;
+            seenScopes.push(f.userScope);
+            return [];
+        });
+        const inspector = new BlacklistRequestInspector(storage, async () => undefined);
+        await inspector.shouldAbortRequest("/v1/prosopo/provider/client/captcha/frictionless", "1.1.1.1", "ja4hash", {}, {}, mockLogger, undefined);
+        const anyCountry = seenScopes.some((scope) => "countryCode" in scope);
+        expect(anyCountry).toBe(false);
+    });
+    it("does not pass countryCode when req.ipInfo is an error response", async () => {
+        const seenScopes = [];
+        const storage = buildStorage(async (filter) => {
+            const f = filter;
+            seenScopes.push(f.userScope);
+            return [];
+        });
+        const inspector = new BlacklistRequestInspector(storage, async () => undefined);
+        await inspector.shouldAbortRequest("/v1/prosopo/provider/client/captcha/frictionless", "1.1.1.1", "ja4hash", {}, {}, mockLogger, { isValid: false, error: "lookup failed", ip: "1.1.1.1" });
+        const anyCountry = seenScopes.some((scope) => "countryCode" in scope);
+        expect(anyCountry).toBe(false);
+    });
+    it("aborts the request when a Block policy matches on country", async () => {
+        const storage = buildStorage(async (filter) => {
+            const f = filter;
+            if (f.userScope.countryCode === "DE") {
+                return [{ type: AccessPolicyType.Block }];
+            }
+            return [];
+        });
+        const inspector = new BlacklistRequestInspector(storage, async () => undefined);
+        const shouldAbort = await inspector.shouldAbortRequest("/v1/prosopo/provider/client/captcha/frictionless", "1.1.1.1", "ja4hash", {}, {}, mockLogger, validIpInfo("DE"));
+        expect(shouldAbort).toBe(true);
+    });
 });
 //# sourceMappingURL=blacklistRequestInspector.unit.test.js.map

package/dist/tests/unit/api/blacklistRequestInspector.unit.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"blacklistRequestInspector.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/unit/api/blacklistRequestInspector.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAEhF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,sCAAsC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,UAAU;SAClB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,sCAAsC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;SACT,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;SACT,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;SACvB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,SAAS,EAAE,SAAS;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}
+{"version":3,"file":"blacklistRequestInspector.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/unit/api/blacklistRequestInspector.unit.test.ts"],"names":[],"mappings":"AAgBA,OAAO,EACN,gBAAgB,GAEhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACN,yBAAyB,EACzB,mBAAmB,GACnB,MAAM,2CAA2C,CAAC;AAEnD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,sCAAsC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,UAAU;SAClB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,sCAAsC,CAAC;QACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;SACT,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,KAAK;SACxB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,SAAS,EAAE,SAAS;YACpB,EAAE,EAAE,KAAK;SACT,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,cAAc,GAAG;YACtB,YAAY,EAAE,SAAS;SACvB,CAAC;QACF,MAAM,SAAS,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YACzB,SAAS,EAAE,SAAS;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,MAAM,SAAS,GAAG,mBAAmB,CACpC,EAAE,YAAY,EAAE,IAAI,EAAE,EACtB,KAAK,EACL,SAAS,EACT,OAAO,EACP,SAAS,EACT,SAAS,EACT,IAAI,CACJ,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC7D,MAAM,UAAU,GAAG;QAClB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;KACQ,CAAC;IAEvB,MAAM,YAAY,GAAG,CACpB,SAAkD,EAC7B,EAAE,CACvB,CAAC;QACA,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC;KAChD,CAAkC,CAAC;IAErC,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAkB,EAAE,CAAC,CAAC;QAC7D,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,KAAK;QAChB,WAAW;KACX,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,UAAU,GAAmC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,GAAG,MAAgD,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAC9C,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,SAAS,CACrB,CAAC;QAEF,MAAM,SAAS,CAAC,kBAAkB,CACjC,kDAAkD,EAClD,SAAS,EACT,SAAS,EACT,EAAE,EACF,EAAE,EACF,UAAU,EACV,WAAW,CAAC,IAAI,CAAC,CACjB,CAAC;QAKF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,UAAU,GAAmC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,GAAG,MAAgD,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAC9C,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,SAAS,CACrB,CAAC;QAEF,MAAM,SAAS,CAAC,kBAAkB,CACjC,kDAAkD,EAClD,SAAS,EACT,SAAS,EACT,EAAE,EACF,EAAE,EACF,UAAU,EACV,SAAS,CACT,CAAC;QAEF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,GAAmC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,GAAG,MAAgD,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAC9C,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,SAAS,CACrB,CAAC;QAEF,MAAM,SAAS,CAAC,kBAAkB,CACjC,kDAAkD,EAClD,SAAS,EACT,SAAS,EACT,EAAE,EACF,EAAE,EACF,UAAU,EACV,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,CACzD,CAAC;QAEF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAE7C,MAAM,CAAC,GAAG,MAAiD,CAAC;YAC5D,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAC9C,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,SAAS,CACrB,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,kBAAkB,CACrD,kDAAkD,EAClD,SAAS,EACT,SAAS,EACT,EAAE,EACF,EAAE,EACF,UAAU,EACV,WAAW,CAAC,IAAI,CAAC,CACjB,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/block.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=block.unit.test.d.ts.map

package/dist/tests/unit/api/block.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.unit.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/unit/api/block.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/api/block.unit.test.js

@@ -0,0 +1,60 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { BlacklistRequestInspector } from "../../../api/blacklistRequestInspector.js";
+import { blockMiddleware } from "../../../api/block.js";
+vi.mock("../../../api/blacklistRequestInspector.js");
+describe("blockMiddleware", () => {
+    beforeEach(() => {
+        vi.mocked(BlacklistRequestInspector).mockClear();
+    });
+    const buildMockEnv = (getUserAccessRulesStorageImpl = () => ({
+        get: vi.fn(),
+        set: vi.fn(),
+    })) => {
+        const mockDb = {
+            getUserAccessRulesStorage: vi.fn(getUserAccessRulesStorageImpl),
+        };
+        return {
+            env: {
+                getDb: vi.fn().mockReturnValue(mockDb),
+                isReady: vi.fn(),
+            },
+            mockDb,
+        };
+    };
+    it("constructs BlacklistRequestInspector lazily on first request", async () => {
+        const { env, mockDb } = buildMockEnv();
+        const mockAbort = vi.fn();
+        vi.mocked(BlacklistRequestInspector).mockReturnValue({
+            abortRequestForBlockedUsers: mockAbort,
+        });
+        const middleware = blockMiddleware(env);
+        expect(BlacklistRequestInspector).not.toHaveBeenCalled();
+        expect(mockDb.getUserAccessRulesStorage).not.toHaveBeenCalled();
+        await middleware({}, {}, vi.fn());
+        expect(BlacklistRequestInspector).toHaveBeenCalledTimes(1);
+        expect(mockAbort).toHaveBeenCalledTimes(1);
+    });
+    it("skips the blocklist check when access-rules storage is unavailable", async () => {
+        const { env } = buildMockEnv(() => {
+            throw new Error("storage not ready");
+        });
+        const middleware = blockMiddleware(env);
+        const next = vi.fn();
+        await middleware({}, {}, next);
+        expect(next).toHaveBeenCalledTimes(1);
+        expect(BlacklistRequestInspector).not.toHaveBeenCalled();
+    });
+    it("caches the inspector across requests", async () => {
+        const { env } = buildMockEnv();
+        const mockAbort = vi.fn();
+        vi.mocked(BlacklistRequestInspector).mockReturnValue({
+            abortRequestForBlockedUsers: mockAbort,
+        });
+        const middleware = blockMiddleware(env);
+        await middleware({}, {}, vi.fn());
+        await middleware({}, {}, vi.fn());
+        expect(BlacklistRequestInspector).toHaveBeenCalledTimes(1);
+        expect(mockAbort).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=block.unit.test.js.map

package/dist/tests/unit/api/block.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block.unit.test.js","sourceRoot":"","sources":["../../../../src/tests/unit/api/block.unit.test.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;AAErD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,SAAS,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CACpB,gCAA+C,GAAG,EAAE,CAAC,CAAC;QACrD,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;KACZ,CAAC,EACD,EAAE;QACH,MAAM,MAAM,GAAG;YACd,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,6BAA6B,CAAC;SAC/D,CAAC;QACF,OAAO;YACN,GAAG,EAAE;gBACJ,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;gBACtC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;aACkB;YACnC,MAAM;SACN,CAAC;IACH,CAAC,CAAC;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,eAAe,CAAC;YACpD,2BAA2B,EAAE,SAAS;SAC7B,CAAC,CAAC;QAEZ,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAGxC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAEhE,MAAM,UAAU,CAAC,EAAW,EAAE,EAAW,EAAE,EAAE,CAAC,EAAE,EAAW,CAAC,CAAC;QAG7D,MAAM,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE;YACjC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,EAAW,EAAE,EAAW,EAAE,IAAI,CAAC,CAAC;QAGjD,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,eAAe,CAAC;YACpD,2BAA2B,EAAE,SAAS;SAC7B,CAAC,CAAC;QAEZ,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,UAAU,CAAC,EAAW,EAAE,EAAW,EAAE,EAAE,CAAC,EAAE,EAAW,CAAC,CAAC;QAC7D,MAAM,UAAU,CAAC,EAAW,EAAE,EAAW,EAAE,EAAE,CAAC,EAAE,EAAW,CAAC,CAAC;QAE7D,MAAM,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=accessPolicy.unit.test.d.ts.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessPolicy.unit.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.js

@@ -0,0 +1,118 @@
+import { CaptchaType } from "@prosopo/types";
+import { AccessPolicyType } from "@prosopo/user-access-policy";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { handleAccessPolicy } from "../../../../../api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.js";
+const buildInput = () => {
+    const tasks = {
+        frictionlessManager: {
+            scoreIncreaseAccessPolicy: vi.fn((_p, _bs, score, sc) => ({
+                score: score + 0.1,
+                scoreComponents: { ...sc, bumped: true },
+            })),
+            updateScore: vi.fn(),
+            registerBlockedSession: vi.fn(),
+            sendImageCaptcha: vi.fn().mockResolvedValue({ kind: "image" }),
+            sendPowCaptcha: vi.fn().mockResolvedValue({ kind: "pow" }),
+            sendPuzzleCaptcha: vi.fn().mockResolvedValue({ kind: "puzzle" }),
+        },
+    };
+    return {
+        tasks,
+        input: {
+            tasks,
+            clientRecord: {
+                settings: { imageMaxRounds: 5 },
+            },
+            userAccessPolicy: undefined,
+            baseBotScore: 0,
+            botScore: 0.4,
+            scoreComponents: { baseScore: 0 },
+            userSitekeyIpHash: "hash",
+            dapp: "dapp",
+            ipInfo: undefined,
+            flatHeaders: {},
+            requestId: "rid",
+            logger: { info: vi.fn(), warn: vi.fn(), debug: vi.fn(), error: vi.fn() },
+            userScope: {},
+        },
+    };
+};
+const buildRes = () => ({
+    json: vi.fn().mockReturnValue("ok"),
+    status: vi.fn().mockReturnThis(),
+});
+describe("handleAccessPolicy", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it("returns handled=false unchanged when no policy is supplied", async () => {
+        const { input } = buildInput();
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r).toEqual({
+            handled: false,
+            botScore: 0.4,
+            scoreComponents: { baseScore: 0 },
+        });
+    });
+    it("bumps the score even when no branch fires (carries state forward)", async () => {
+        const { tasks, input } = buildInput();
+        input.userAccessPolicy = {
+            type: AccessPolicyType.Restrict,
+            captchaType: CaptchaType.frictionless,
+        };
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r.handled).toBe(false);
+        if (!r.handled) {
+            expect(r.botScore).toBeCloseTo(0.5);
+            expect(r.scoreComponents).toMatchObject({ bumped: true });
+        }
+        expect(tasks.frictionlessManager.updateScore).toHaveBeenCalled();
+    });
+    it("returns 401 for block policies", async () => {
+        const { tasks, input } = buildInput();
+        input.userAccessPolicy = { type: "block" };
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r.handled).toBe(true);
+        expect(res.status).toHaveBeenCalledWith(401);
+        expect(tasks.frictionlessManager.registerBlockedSession).toHaveBeenCalled();
+    });
+    it("dispatches to sendImageCaptcha for image-typed policies", async () => {
+        const { tasks, input } = buildInput();
+        input.userAccessPolicy = {
+            type: AccessPolicyType.Restrict,
+            captchaType: CaptchaType.image,
+            solvedImagesCount: 99,
+        };
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r.handled).toBe(true);
+        const args = tasks.frictionlessManager.sendImageCaptcha.mock.calls[0]?.[0];
+        expect(args.solvedImagesCount).toBe(5);
+    });
+    it("dispatches to sendPowCaptcha for pow-typed policies", async () => {
+        const { tasks, input } = buildInput();
+        input.userAccessPolicy = {
+            type: AccessPolicyType.Restrict,
+            captchaType: CaptchaType.pow,
+        };
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r.handled).toBe(true);
+        expect(tasks.frictionlessManager.sendPowCaptcha).toHaveBeenCalled();
+    });
+    it("dispatches to sendPuzzleCaptcha for puzzle-typed policies", async () => {
+        const { tasks, input } = buildInput();
+        input.userAccessPolicy = {
+            type: AccessPolicyType.Restrict,
+            captchaType: CaptchaType.puzzle,
+        };
+        const res = buildRes();
+        const r = await handleAccessPolicy(input, res);
+        expect(r.handled).toBe(true);
+        expect(tasks.frictionlessManager.sendPuzzleCaptcha).toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=accessPolicy.unit.test.js.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessPolicy.unit.test.js","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4EAA4E,CAAC;AAEhH,MAAM,UAAU,GAAG,GAAG,EAAE;IACvB,MAAM,KAAK,GAAG;QACb,mBAAmB,EAAE;YACpB,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAC/B,CAAC,EAAW,EAAE,GAAW,EAAE,KAAa,EAAE,EAAW,EAAE,EAAE,CAAC,CAAC;gBAC1D,KAAK,EAAE,KAAK,GAAG,GAAG;gBAClB,eAAe,EAAE,EAAE,GAAI,EAAa,EAAE,MAAM,EAAE,IAAI,EAAE;aACpD,CAAC,CACF;YACD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC/B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9D,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1D,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SAChE;KACD,CAAC;IACF,OAAO;QACN,KAAK;QACL,KAAK,EAAE;YACN,KAAK;YACL,YAAY,EAAE;gBACb,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;aAC/B;YACD,gBAAgB,EAAE,SAAoB;YACtC,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,GAAG;YACb,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;YACjC,iBAAiB,EAAE,MAAM;YACzB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;YACxE,SAAS,EAAE,EAAW;SACtB;KACD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;IACvB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IACnC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;CAChC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,GAAG;YACb,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;SACjC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,WAAW,CAAC,YAAY;SACrC,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,iBAAiB,EAAE,EAAE;SACrB,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3E,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,WAAW,CAAC,GAAG;SAC5B,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,WAAW,CAAC,MAAM;SAC/B,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAc,EAAE,GAAY,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=constants.unit.test.d.ts.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.unit.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.js

@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+import { DEFAULT_FRICTIONLESS_THRESHOLD, getRoundsFromSimScore, } from "../../../../../api/captcha/getFrictionlessCaptchaChallenge/constants.js";
+describe("getFrictionlessCaptchaChallenge/constants", () => {
+    it("uses 0.5 as the default frictionless threshold", () => {
+        expect(DEFAULT_FRICTIONLESS_THRESHOLD).toBe(0.5);
+    });
+    describe("getRoundsFromSimScore", () => {
+        const cases = [
+            [1.0, 0],
+            [0.9, 0],
+            [0.89, 3],
+            [0.8, 3],
+            [0.79, 4],
+            [0.7, 4],
+            [0.69, 6],
+            [0.6, 6],
+            [0.59, 7],
+            [0.5, 7],
+            [0.49, 8],
+            [0, 8],
+        ];
+        for (const [sim, rounds] of cases) {
+            it(`maps sim=${sim} → ${rounds} rounds`, () => {
+                expect(getRoundsFromSimScore(sim)).toBe(rounds);
+            });
+        }
+        it("is monotonically non-decreasing as similarity decreases", () => {
+            let last = -Number.POSITIVE_INFINITY;
+            for (let pct = 100; pct >= 0; pct -= 5) {
+                const rounds = getRoundsFromSimScore(pct / 100);
+                expect(rounds).toBeGreaterThanOrEqual(last);
+                last = rounds;
+            }
+        });
+    });
+});
+//# sourceMappingURL=constants.unit.test.js.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.unit.test.js","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/constants.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACN,8BAA8B,EAC9B,qBAAqB,GACrB,MAAM,yEAAyE,CAAC;AAEjF,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAA4B;YACtC,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,IAAI,EAAE,CAAC,CAAC;YACT,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,IAAI,EAAE,CAAC,CAAC;YACT,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,IAAI,EAAE,CAAC,CAAC;YACT,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,IAAI,EAAE,CAAC,CAAC;YACT,CAAC,GAAG,EAAE,CAAC,CAAC;YACR,CAAC,IAAI,EAAE,CAAC,CAAC;YACT,CAAC,CAAC,EAAE,CAAC,CAAC;SACN,CAAC;QACF,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACnC,EAAE,CAAC,YAAY,GAAG,MAAM,MAAM,SAAS,EAAE,GAAG,EAAE;gBAC7C,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAElE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACrC,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBAChD,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,GAAG,MAAM,CAAC;YACf,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decisionMachine.unit.test.d.ts.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionMachine.unit.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.js

@@ -0,0 +1,154 @@
+import { ContextType } from "@prosopo/types";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+const { hashUserAgentMock, timestampTooOldMock, timestampDecayMock } = vi.hoisted(() => ({
+    hashUserAgentMock: vi.fn((ua) => `hashed:${ua}`),
+    timestampTooOldMock: vi.fn(() => false),
+    timestampDecayMock: vi.fn(() => 2),
+}));
+vi.mock("../../../../../utils/hashUserAgent.js", () => ({
+    hashUserAgent: hashUserAgentMock,
+}));
+vi.mock("../../../../../tasks/frictionless/frictionlessTasks.js", () => ({
+    FrictionlessManager: { timestampTooOld: timestampTooOldMock },
+    FrictionlessReason: {
+        USER_AGENT_MISMATCH: "USER_AGENT_MISMATCH",
+        CONTEXT_AWARE_VALIDATION_FAILED: "CONTEXT_AWARE_VALIDATION_FAILED",
+        WEBVIEW_DETECTED: "WEBVIEW_DETECTED",
+        OLD_TIMESTAMP: "OLD_TIMESTAMP",
+        BOT_SCORE_ABOVE_THRESHOLD: "BOT_SCORE_ABOVE_THRESHOLD",
+    },
+}));
+vi.mock("../../../../../tasks/frictionless/frictionlessTasksUtils.js", () => ({
+    timestampDecayFunction: timestampDecayMock,
+}));
+vi.mock("../../../contextAwareValidation.js", () => ({
+    determineContextType: (webView) => webView ? ContextType.Webview : ContextType.Default,
+    getContextThreshold: () => 0.5,
+}));
+import { runDecisionMachine } from "../../../../../api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js";
+const buildInput = (overrides = {}) => ({
+    tasks: {
+        logger: { info: vi.fn() },
+        frictionlessManager: {
+            sendImageCaptcha: vi.fn().mockResolvedValue({ kind: "image" }),
+            sendPowCaptcha: vi.fn().mockResolvedValue({ kind: "pow" }),
+            scoreIncreaseWebView: vi.fn((_bs, score, sc) => ({
+                score,
+                scoreComponents: sc,
+            })),
+            scoreIncreaseTimestamp: vi.fn((_t, _bs, score, sc) => ({
+                score,
+                scoreComponents: sc,
+            })),
+            scoreIncreaseUnverifiedHost: vi.fn((_d, _bs, score, sc) => ({
+                score,
+                scoreComponents: sc,
+            })),
+            updateScore: vi.fn(),
+            hostVerified: vi.fn().mockResolvedValue({ verified: true, domain: "ok" }),
+            getClientContextEntropy: vi.fn().mockResolvedValue(undefined),
+        },
+    },
+    env: { config: { captchas: { solved: { count: 4 } } } },
+    clientRecord: {
+        settings: {
+            imageMaxRounds: 8,
+            disallowWebView: false,
+            contextAware: undefined,
+        },
+    },
+    dapp: "dapp",
+    user: "user",
+    userSitekeyIpHash: "hash",
+    flatHeaders: {},
+    ipInfo: undefined,
+    timestamp: Date.now(),
+    decryptionFailed: false,
+    userAgent: "hashed:ua",
+    userId: "uid",
+    webView: false,
+    decryptedHeadHash: "",
+    providerSelectEntropy: 0,
+    baseBotScore: 0,
+    botScore: 0.1,
+    scoreComponents: { baseScore: 0 },
+    token: "tok",
+    botThreshold: 0.5,
+    ...overrides,
+});
+const buildHandle = (uaHeader = "ua", prosopoUser = "uid") => {
+    const req = {
+        headers: { "user-agent": uaHeader, "prosopo-user": prosopoUser },
+        logger: { info: vi.fn() },
+        requestId: "rid",
+        i18n: { t: (s) => s },
+    };
+    const res = { json: vi.fn().mockReturnValue("done") };
+    const next = vi.fn();
+    return { req, res, next, handle: { req, res, next } };
+};
+describe("runDecisionMachine", () => {
+    beforeEach(() => {
+        hashUserAgentMock.mockClear();
+        timestampTooOldMock.mockReturnValue(false);
+        timestampDecayMock.mockClear();
+        timestampDecayMock.mockReturnValue(2);
+    });
+    it("returns image captcha on user-agent mismatch", async () => {
+        const input = buildInput();
+        const { res, handle } = buildHandle("differentUA", "uid");
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.sendImageCaptcha).toHaveBeenCalled();
+        expect(input.tasks.frictionlessManager.sendPowCaptcha).not.toHaveBeenCalled();
+        expect(res.json).toHaveBeenCalled();
+    });
+    it("returns image captcha when webview detected and disallowed", async () => {
+        const input = buildInput({
+            clientRecord: {
+                settings: { imageMaxRounds: 8, disallowWebView: true },
+            },
+            webView: true,
+        });
+        const { res, handle } = buildHandle();
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.sendImageCaptcha).toHaveBeenCalled();
+        const args = input.tasks.frictionlessManager.sendImageCaptcha.mock.calls[0]?.[0];
+        expect(args.reason).toBe("WEBVIEW_DETECTED");
+    });
+    it("returns image captcha when token timestamp is too old", async () => {
+        timestampTooOldMock.mockReturnValueOnce(true);
+        const input = buildInput();
+        const { handle } = buildHandle();
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.sendImageCaptcha).toHaveBeenCalled();
+        const args = input.tasks.frictionlessManager.sendImageCaptcha.mock.calls[0]?.[0];
+        expect(args.reason).toBe("OLD_TIMESTAMP");
+    });
+    it("returns image captcha when bot score exceeds threshold", async () => {
+        const input = buildInput({ botScore: 0.95, botThreshold: 0.5 });
+        const { handle } = buildHandle();
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.sendImageCaptcha).toHaveBeenCalled();
+        const args = input.tasks.frictionlessManager.sendImageCaptcha.mock.calls[0]?.[0];
+        expect(args.reason).toBe("BOT_SCORE_ABOVE_THRESHOLD");
+    });
+    it("returns pow captcha when nothing trips (default path)", async () => {
+        const input = buildInput();
+        const { handle } = buildHandle();
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.sendPowCaptcha).toHaveBeenCalled();
+        expect(input.tasks.frictionlessManager.sendImageCaptcha).not.toHaveBeenCalled();
+    });
+    it("bumps score on unverified host without sending a response", async () => {
+        const input = buildInput();
+        input.tasks.frictionlessManager.hostVerified.mockResolvedValueOnce({
+            verified: false,
+            domain: "bad",
+        });
+        const { handle } = buildHandle();
+        await runDecisionMachine(input, handle);
+        expect(input.tasks.frictionlessManager.scoreIncreaseUnverifiedHost).toHaveBeenCalled();
+        expect(input.tasks.frictionlessManager.sendPowCaptcha).toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=decisionMachine.unit.test.js.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionMachine.unit.test.js","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GACnE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjB,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;IACxD,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACvC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC,CAAC;AAEL,EAAE,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,aAAa,EAAE,iBAAiB;CAChC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,mBAAmB,EAAE,EAAE,eAAe,EAAE,mBAAmB,EAAE;IAC7D,kBAAkB,EAAE;QACnB,mBAAmB,EAAE,qBAAqB;QAC1C,+BAA+B,EAAE,iCAAiC;QAClE,gBAAgB,EAAE,kBAAkB;QACpC,aAAa,EAAE,eAAe;QAC9B,yBAAyB,EAAE,2BAA2B;KACtD;CACD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,sBAAsB,EAAE,kBAAkB;CAC1C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,oBAAoB,EAAE,CAAC,OAAgB,EAAE,EAAE,CAC1C,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO;IACpD,mBAAmB,EAAE,GAAG,EAAE,CAAC,GAAG;CAC9B,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,+EAA+E,CAAC;AAEnH,MAAM,UAAU,GAAG,CAAC,YAA8C,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,KAAK,EAAE;QACN,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;QACzB,mBAAmB,EAAE;YACpB,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9D,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1D,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChD,KAAK;gBACL,eAAe,EAAE,EAAE;aACnB,CAAC,CAAC;YACH,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBACtD,KAAK;gBACL,eAAe,EAAE,EAAE;aACnB,CAAC,CAAC;YACH,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC3D,KAAK;gBACL,eAAe,EAAE,EAAE;aACnB,CAAC,CAAC;YACH,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzE,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SAC7D;KACD;IACD,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;IACvD,YAAY,EAAE;QACb,QAAQ,EAAE;YACT,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,SAAS;SACvB;KACD;IACD,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,iBAAiB,EAAE,MAAM;IACzB,WAAW,EAAE,EAAE;IACf,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;IACrB,gBAAgB,EAAE,KAAK;IACvB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,KAAK;IACd,iBAAiB,EAAE,EAAE;IACrB,qBAAqB,EAAE,CAAC;IACxB,YAAY,EAAE,CAAC;IACf,QAAQ,EAAE,GAAG;IACb,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;IACjC,KAAK,EAAE,KAAK;IACZ,YAAY,EAAE,GAAG;IACjB,GAAG,SAAS;CACZ,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,WAAW,GAAG,KAAK,EAAE,EAAE;IAC5D,MAAM,GAAG,GAAG;QACX,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE;QAChE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;QACzB,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE;KAC7B,CAAC;IACF,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACrB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;AACvD,CAAC,CAAC;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACf,iBAAiB,CAAC,SAAS,EAAE,CAAC;QAC9B,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5E,MAAM,CACL,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAC9C,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAG,UAAU,CAAC;YACxB,YAAY,EAAE;gBACb,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;aACtD;YACD,OAAO,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5E,MAAM,IAAI,GACT,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,mBAAmB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5E,MAAM,IAAI,GACT,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5E,MAAM,IAAI,GACT,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1E,MAAM,CACL,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAChD,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,qBAAqB,CAAC;YAClE,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,KAAK;SACb,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,kBAAkB,CAAC,KAAc,EAAE,MAAe,CAAC,CAAC;QAC1D,MAAM,CACL,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,2BAA2B,CAC3D,CAAC,gBAAgB,EAAE,CAAC;QAErB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decryptSimdReadings.unit.test.d.ts.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptSimdReadings.unit.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.js

@@ -0,0 +1,46 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { decryptIncomingSimdReadings } from "../../../../../api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.js";
+const buildManager = () => ({
+    getDetectorKeys: vi.fn().mockResolvedValue(["k1"]),
+    decryptSimdReadings: vi.fn(),
+});
+describe("decryptIncomingSimdReadings", () => {
+    let manager;
+    beforeEach(() => {
+        manager = buildManager();
+    });
+    it("returns undefined when no ciphertext is provided", async () => {
+        const r = await decryptIncomingSimdReadings(manager, undefined);
+        expect(r).toBeUndefined();
+        expect(manager.decryptSimdReadings).not.toHaveBeenCalled();
+    });
+    it("returns undefined when decryption yields nothing", async () => {
+        manager.decryptSimdReadings.mockResolvedValueOnce(undefined);
+        const r = await decryptIncomingSimdReadings(manager, "blob");
+        expect(r).toBeUndefined();
+    });
+    it("drops the inner replay-protection `timestamp` field", async () => {
+        manager.decryptSimdReadings.mockResolvedValueOnce({
+            timestamp: 12345,
+            supported: true,
+            ops: [{ name: "x", duration: 1 }],
+        });
+        const r = await decryptIncomingSimdReadings(manager, "blob");
+        expect(r).toEqual({
+            supported: true,
+            ops: [{ name: "x", duration: 1 }],
+        });
+        expect(r?.timestamp).toBeUndefined();
+    });
+    it("passes the detector keys plus the env fallback to decrypt", async () => {
+        process.env.BOT_DECRYPTION_KEY = "envk";
+        manager.decryptSimdReadings.mockResolvedValueOnce({ supported: true });
+        await decryptIncomingSimdReadings(manager, "blob");
+        expect(manager.decryptSimdReadings).toHaveBeenCalledWith("blob", [
+            "k1",
+            "envk",
+        ]);
+        process.env.BOT_DECRYPTION_KEY = undefined;
+    });
+});
+//# sourceMappingURL=decryptSimdReadings.unit.test.js.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptSimdReadings.unit.test.js","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/decryptSimdReadings.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mFAAmF,CAAC;AAOhI,MAAM,YAAY,GAAG,GAA4B,EAAE,CAAC,CAAC;IACpD,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC5B,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC5C,IAAI,OAAgC,CAAC;IAErC,UAAU,CAAC,GAAG,EAAE;QACf,OAAO,GAAG,YAAY,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,OAAgB,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,OAAgB,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC;YACjD,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,OAAgB,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjB,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,CAAE,CAA6B,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACxC,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,2BAA2B,CAAC,OAAgB,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE;YAChE,IAAI;YACJ,MAAM;SACN,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/sessionDedup.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sessionDedup.unit.test.d.ts.map

package/dist/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/sessionDedup.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionDedup.unit.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/unit/api/captcha/getFrictionlessCaptchaChallenge/sessionDedup.unit.test.ts"],"names":[],"mappings":""}