@prosopo/provider 4.11.3 → 4.11.5

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAmBtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAgXG"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAmBtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAgYG"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js

@@ -187,7 +187,11 @@ const getFrictionlessCaptchaChallenge = (env, userAccessRulesStorage) => async (
       decryptedHeadHash,
       decryptionFailed,
       triggeredDetectors,
-      shadowDomPenalty
+      shadowDomPenalty,
+      entropyMathRandomFingerprint,
+      entropyCryptoFingerprint,
+      entropyWallClockOffsetMs,
+      entropyMathRandomFirst
     } = decryptedPayload;
     req.logger.debug(() => ({
       msg: "Decrypted payload",
@@ -232,7 +236,19 @@ const getFrictionlessCaptchaChallenge = (env, userAccessRulesStorage) => async (
       ipInfo: req.ipInfo,
       headers: flatHeaders,
       mode: sessionMode,
-      ...decodedSimdReadings && { simdReadings: decodedSimdReadings }
+      ...decodedSimdReadings && { simdReadings: decodedSimdReadings },
+      ...entropyMathRandomFingerprint !== void 0 && {
+        entropyMathRandomFingerprint
+      },
+      ...entropyCryptoFingerprint !== void 0 && {
+        entropyCryptoFingerprint
+      },
+      ...entropyWallClockOffsetMs !== void 0 && {
+        entropyWallClockOffsetMs
+      },
+      ...entropyMathRandomFirst !== void 0 && {
+        entropyMathRandomFirst
+      }
     });
     const ipInfoMobile = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.isMobile : void 0;
     const safeUserAgent = userAgent ?? "";

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,SAAS,EACT,WAAW,EACX,0CAA0C,EAC1C,QAAQ,GAER,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oCAAoC,EAAE,MAAM,mBAAmB,CAAC;AAEzE,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,CAAC;QACJ,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,gCAAgC;gBACrC,IAAI,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,MAAM,EAAE,GAAG,CAAC,UAAU;oBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBAClB;aACD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GACxD,0CAA0C,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,WAAW,GAChB,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4BAA4B;YACjC,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK;gBACL,IAAI;gBACJ,IAAI;gBACJ,YAAY;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;aACzC;SACD,CAAC,CAAC,CAAC;QAOJ,IAAI,kBAAkB,EAAE,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,+DAA+D;gBACpE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACpB,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CACd,oCAAoC,CACnC,WAAW,CAAC,GAAG,EACf,GAAG,CAAC,MAAM,CAAC,IAAI,CACf,CACD,CAAC;QACH,CAAC;QAQD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,0DAA0D;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACpB,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CACd,oCAAoC,CACnC,WAAW,CAAC,GAAG,EACf,GAAG,CAAC,MAAM,CAAC,IAAI,CACf,CACD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAS/D,MAAM,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,YAAY,CAAC,GAClE,MAAM,OAAO,CAAC,GAAG,CAAC;YACjB,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC;YACpE,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC;YAChE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;SAC9B,CAAC,CAAC;QAEJ,IAAI,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,6BAA6B;aAClC,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,0DAA0D;gBAC/D,IAAI,EAAE;oBACL,iBAAiB;oBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;iBAC9B;aACD,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,uBAAuB;gBAC5B,IAAI,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,QAAQ,EAAE,eAAe;oBACzB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC1B;aACD,CAAC,CAAC,CAAC;YACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,IAAI,CAAC;gBACf,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,WAGV;gBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS;gBACtC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;gBACxB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,oBAAoB,GAAG,MAAM,oCAAoC,CACtE;YACC,KAAK;YACL,GAAG;YACH,YAAY;YACZ,KAAK;YACL,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW;YACX,WAAW;YACX,iBAAiB;YACjB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,EACD,GAAG,CACH,CAAC;QACF,IAAI,oBAAoB;YAAE,OAAO,oBAAoB,CAAC;QAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACtD,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CACpC,CAAC;QAEF,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,SAAS,EACT,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAOF,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxE,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC;YACzD,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACvC,YAAY,EACZ,WAAW,CAAC,YAAY,EACxB,GAAG,CACH;YACD,KAAK,CAAC,mBAAmB,CAAC,4BAA4B,CACrD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT;SACD,CAAC,CAAC;QAEH,MAAM,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GAChB,GAAG,gBAAgB,CAAC;QAErB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE;gBACL,YAAY;gBACZ,SAAS;gBACT,qBAAqB;gBACrB,MAAM;gBACN,SAAS;gBACT,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,IAAI,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;QAErC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QAErC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GACjB,YAAY,CAAC,QAAQ,EAAE,qBAAqB;YAC5C,8BAA8B,CAAC;QAEhC,IAAI,eAAe,GAAoB;YACtC,SAAS,EAAE,YAAY;YACvB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,kBAAkB;gBACrB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC;YACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAC3D,CAAC;QAEF,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC1C,KAAK;YACL,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,YAAY;YACvB,eAAe;YACf,qBAAqB;YACrB,SAAS;YACT,OAAO;YACP,MAAM;YACN,iBAAiB;YACjB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,WAAW;YACjB,GAAG,CAAC,mBAAmB,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,MAAM,YAAY,GACjB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;YACrB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,SAAS,IAAI,EAAE,CAAC;QACtC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;YAC3C,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;YACjB,EAAE,EAAE,YAAY;YAChB,WAAW;YACX,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE;gBAChD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;aACpE,CAAC;YACF,GAAG,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,aAAa;gBACxB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;aAChC;SACD,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAE3C,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CACnD;YACC,KAAK;YACL,YAAY;YACZ,gBAAgB;YAChB,YAAY;YACZ,QAAQ;YACR,eAAe;YACf,iBAAiB;YACjB,IAAI;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW;YACX,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;SACT,EACD,GAAG,CACH,CAAC;QACF,IAAI,mBAAmB,CAAC,OAAO;YAAE,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACrE,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC;QACxC,eAAe,GAAG,mBAAmB,CAAC,eAAe,CAAC;QAEtD,OAAO,MAAM,kBAAkB,CAC9B;YACC,KAAK;YACL,GAAG;YACH,YAAY;YACZ,IAAI;YACJ,IAAI;YACJ,iBAAiB;YACjB,WAAW;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,gBAAgB;YAChB,SAAS;YACT,MAAM;YACN,OAAO;YACP,iBAAiB;YACjB,qBAAqB;YACrB,YAAY;YACZ,QAAQ;YACR,eAAe;YACf,KAAK;YACL,YAAY;SACZ,EACD,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,GAAG,EAAE,yCAAyC;SAC9C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACN,SAAS,EACT,WAAW,EACX,0CAA0C,EAC1C,QAAQ,GAER,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oCAAoC,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oCAAoC,EAAE,MAAM,mBAAmB,CAAC;AAEzE,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,CAAC;QACJ,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,gCAAgC;gBACrC,IAAI,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,MAAM,EAAE,GAAG,CAAC,UAAU;oBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBAClB;aACD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GACxD,0CAA0C,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,WAAW,GAChB,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4BAA4B;YACjC,IAAI,EAAE;gBACL,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK;gBACL,IAAI;gBACJ,IAAI;gBACJ,YAAY;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;aACzC;SACD,CAAC,CAAC,CAAC;QAOJ,IAAI,kBAAkB,EAAE,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,+DAA+D;gBACpE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACpB,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CACd,oCAAoC,CACnC,WAAW,CAAC,GAAG,EACf,GAAG,CAAC,MAAM,CAAC,IAAI,CACf,CACD,CAAC;QACH,CAAC;QAQD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,0DAA0D;gBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACpB,CAAC,CAAC,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CACd,oCAAoC,CACnC,WAAW,CAAC,GAAG,EACf,GAAG,CAAC,MAAM,CAAC,IAAI,CACf,CACD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAS/D,MAAM,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,YAAY,CAAC,GAClE,MAAM,OAAO,CAAC,GAAG,CAAC;YACjB,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC;YACpE,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC;YAChE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;SAC9B,CAAC,CAAC;QAEJ,IAAI,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,6BAA6B;aAClC,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,0DAA0D;gBAC/D,IAAI,EAAE;oBACL,iBAAiB;oBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;iBAC9B;aACD,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,uBAAuB;gBAC5B,IAAI,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,QAAQ,EAAE,eAAe;oBACzB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC1B;aACD,CAAC,CAAC,CAAC;YACJ,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAClC,OAAO,GAAG,CAAC,IAAI,CAAC;gBACf,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,WAGV;gBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS;gBACtC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;gBACxB,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,oBAAoB,GAAG,MAAM,oCAAoC,CACtE;YACC,KAAK;YACL,GAAG;YACH,YAAY;YACZ,KAAK;YACL,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW;YACX,WAAW;YACX,iBAAiB;YACjB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,EACD,GAAG,CACH,CAAC;QACF,IAAI,oBAAoB;YAAE,OAAO,oBAAoB,CAAC;QAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACtD,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CACpC,CAAC;QAEF,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,SAAS,EACT,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAOF,MAAM,CAAC,gBAAgB,EAAE,UAAU,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxE,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC;YACzD,KAAK,CAAC,mBAAmB,CAAC,cAAc,CACvC,YAAY,EACZ,WAAW,CAAC,YAAY,EACxB,GAAG,CACH;YACD,KAAK,CAAC,mBAAmB,CAAC,4BAA4B,CACrD,sBAAsB,EACtB,IAAI,EACJ,SAAS,CACT;SACD,CAAC,CAAC;QAEH,MAAM,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,GACtB,GAAG,gBAAgB,CAAC;QAErB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE;gBACL,YAAY;gBACZ,SAAS;gBACT,qBAAqB;gBACrB,MAAM;gBACN,SAAS;gBACT,OAAO;aACP;SACD,CAAC,CAAC,CAAC;QAEJ,IAAI,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;QAErC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QAErC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC3C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GACjB,YAAY,CAAC,QAAQ,EAAE,qBAAqB;YAC5C,8BAA8B,CAAC;QAEhC,IAAI,eAAe,GAAoB;YACtC,SAAS,EAAE,YAAY;YACvB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,kBAAkB;gBACrB,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC;YACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;SAC3D,CAAC;QAEF,KAAK,CAAC,mBAAmB,CAAC,gBAAgB,CAAC;YAC1C,KAAK;YACL,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,YAAY;YACvB,eAAe;YACf,qBAAqB;YACrB,SAAS;YACT,OAAO;YACP,MAAM;YACN,iBAAiB;YACjB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,WAAW;YACjB,GAAG,CAAC,mBAAmB,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;YACjE,GAAG,CAAC,4BAA4B,KAAK,SAAS,IAAI;gBACjD,4BAA4B;aAC5B,CAAC;YACF,GAAG,CAAC,wBAAwB,KAAK,SAAS,IAAI;gBAC7C,wBAAwB;aACxB,CAAC;YACF,GAAG,CAAC,wBAAwB,KAAK,SAAS,IAAI;gBAC7C,wBAAwB;aACxB,CAAC;YACF,GAAG,CAAC,sBAAsB,KAAK,SAAS,IAAI;gBAC3C,sBAAsB;aACtB,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GACjB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;YACrB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,SAAS,IAAI,EAAE,CAAC;QACtC,KAAK,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;YAC3C,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;YACjB,EAAE,EAAE,YAAY;YAChB,WAAW;YACX,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE;gBAChD,GAAG,CAAC,OAAO,YAAY,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;aACpE,CAAC;YACF,GAAG,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,aAAa;gBACxB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;aAChC;SACD,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAE3C,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CACnD;YACC,KAAK;YACL,YAAY;YACZ,gBAAgB;YAChB,YAAY;YACZ,QAAQ;YACR,eAAe;YACf,iBAAiB;YACjB,IAAI;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW;YACX,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;SACT,EACD,GAAG,CACH,CAAC;QACF,IAAI,mBAAmB,CAAC,OAAO;YAAE,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACrE,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC;QACxC,eAAe,GAAG,mBAAmB,CAAC,eAAe,CAAC;QAEtD,OAAO,MAAM,kBAAkB,CAC9B;YACC,KAAK;YACL,GAAG;YACH,YAAY;YACZ,IAAI;YACJ,IAAI;YACJ,iBAAiB;YACjB,WAAW;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,gBAAgB;YAChB,SAAS;YACT,MAAM;YACN,OAAO;YACP,iBAAiB;YACjB,qBAAqB;YACrB,YAAY;YACZ,QAAQ;YACR,eAAe;YACf,KAAK;YACL,YAAY;SACZ,EACD,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,GAAG,EAAE,yCAAyC;SAC9C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}

package/dist/cjs/api/blacklistRequestInspector.cjs

@@ -103,7 +103,7 @@ const rankCandidateRules = (rules, request, requestClientId) => rules.filter((ru
   }
   return policySeverity(b) - policySeverity(a);
 });
-const getPrioritisedAccessRule = async (userAccessRulesStorage, userScope, clientId) => {
+const getPrioritisedAccessRule = async (userAccessRulesStorage, userScope, clientId, options) => {
   const parsedUserScope = userAccessPolicy.userScopeInput.parse(userScope);
   const filter = {
     ...clientId && {
@@ -113,7 +113,8 @@ const getPrioritisedAccessRule = async (userAccessRulesStorage, userScope, clien
     },
     policyScopeMatch: userAccessPolicy.FilterScopeMatch.Greedy,
     userScope: parsedUserScope,
-    userScopeMatch: userAccessPolicy.FilterScopeMatch.Greedy
+    userScopeMatch: userAccessPolicy.FilterScopeMatch.Greedy,
+    ...options?.blockOnly && { blockOnly: true }
   };
   const candidates = await userAccessRulesStorage.findRules(
     filter,
@@ -186,7 +187,14 @@ class BlacklistRequestInspector {
           countryCode,
           asn
         ),
-        clientId
+        clientId,
+        // Request-time middleware only ever fires on Block policies
+        // (Restrict rules flow through and let the captcha-creation
+        // path decorate the response). Restrict the Redis-side
+        // candidate pool so the SERVER_SIDE_RANK_TOP_N cap can't
+        // crowd out hard-block rules in clients with dense Restrict
+        // rule populations.
+        { blockOnly: true }
       );
       const enforceable = (accessPolicies ?? []).filter(
         (p) => !p.deferToVerify

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.cjs

@@ -21,6 +21,51 @@ const runDecisionMachine = async (input, handle) => {
   } = input;
   const { req, res } = handle;
   let { botScore, scoreComponents } = input;
+  const userAgentMismatchResponse = await runUserAgentMismatchCheck(
+    input,
+    handle
+  );
+  if (userAgentMismatchResponse) return userAgentMismatchResponse;
+  const contextResponse = await runContextAwareValidation(input, handle);
+  if (contextResponse) return contextResponse;
+  const webViewTripped = clientRecord.settings.disallowWebView === true && input.webView === true;
+  if (webViewTripped) {
+    tasks.logger.info(() => ({ msg: "WebView detected" }));
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseWebView(
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  }
+  const timestampTripped = frictionlessTasks.FrictionlessManager.timestampTooOld(input.timestamp);
+  if (timestampTripped) {
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseTimestamp(
+      input.timestamp,
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  }
+  const hostVerified = await tasks.frictionlessManager.hostVerified(
+    input.providerSelectEntropy
+  );
+  if (!hostVerified.verified) {
+    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseUnverifiedHost(
+      hostVerified.domain,
+      input.baseBotScore,
+      botScore,
+      scoreComponents
+    );
+    botScore = scoreUpdate.score;
+    scoreComponents = scoreUpdate.scoreComponents;
+    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  }
   const autoBanThreshold = clientRecord.settings.autoBanScoreThreshold;
   if (autoBanThreshold !== void 0 && Number(botScore) >= autoBanThreshold) {
     req.logger.info(() => ({
@@ -43,23 +88,7 @@ const runDecisionMachine = async (input, handle) => {
     });
     return res.status(401).json({ error: "Unauthorized" });
   }
-  const userAgentMismatchResponse = await runUserAgentMismatchCheck(
-    input,
-    handle
-  );
-  if (userAgentMismatchResponse) return userAgentMismatchResponse;
-  const contextResponse = await runContextAwareValidation(input, handle);
-  if (contextResponse) return contextResponse;
-  if (clientRecord.settings.disallowWebView && input.webView) {
-    tasks.logger.info(() => ({ msg: "WebView detected" }));
-    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseWebView(
-      input.baseBotScore,
-      botScore,
-      scoreComponents
-    );
-    botScore = scoreUpdate.score;
-    scoreComponents = scoreUpdate.scoreComponents;
-    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  if (webViewTripped) {
     req.logger.info(() => ({
       msg: "Frictionless decision",
       data: {
@@ -83,16 +112,7 @@ const runDecisionMachine = async (input, handle) => {
       })
     );
   }
-  if (frictionlessTasks.FrictionlessManager.timestampTooOld(input.timestamp)) {
-    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseTimestamp(
-      input.timestamp,
-      input.baseBotScore,
-      botScore,
-      scoreComponents
-    );
-    botScore = scoreUpdate.score;
-    scoreComponents = scoreUpdate.scoreComponents;
-    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
+  if (timestampTripped) {
     req.logger.info(() => ({
       msg: "Frictionless decision",
       data: {
@@ -117,20 +137,6 @@ const runDecisionMachine = async (input, handle) => {
       })
     );
   }
-  const hostVerified = await tasks.frictionlessManager.hostVerified(
-    input.providerSelectEntropy
-  );
-  if (!hostVerified.verified) {
-    const scoreUpdate = tasks.frictionlessManager.scoreIncreaseUnverifiedHost(
-      hostVerified.domain,
-      input.baseBotScore,
-      botScore,
-      scoreComponents
-    );
-    botScore = scoreUpdate.score;
-    scoreComponents = scoreUpdate.scoreComponents;
-    tasks.frictionlessManager.updateScore(botScore, scoreComponents);
-  }
   if (Number(botScore) > input.botThreshold) {
     req.logger.info(() => ({
       msg: "Bot score is greater than threshold",

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs

@@ -188,7 +188,11 @@ const getFrictionlessCaptchaChallenge = (env, userAccessRulesStorage) => async (
       decryptedHeadHash,
       decryptionFailed,
       triggeredDetectors,
-      shadowDomPenalty
+      shadowDomPenalty,
+      entropyMathRandomFingerprint,
+      entropyCryptoFingerprint,
+      entropyWallClockOffsetMs,
+      entropyMathRandomFirst
     } = decryptedPayload;
     req.logger.debug(() => ({
       msg: "Decrypted payload",
@@ -233,7 +237,19 @@ const getFrictionlessCaptchaChallenge = (env, userAccessRulesStorage) => async (
       ipInfo: req.ipInfo,
       headers: flatHeaders,
       mode: sessionMode,
-      ...decodedSimdReadings && { simdReadings: decodedSimdReadings }
+      ...decodedSimdReadings && { simdReadings: decodedSimdReadings },
+      ...entropyMathRandomFingerprint !== void 0 && {
+        entropyMathRandomFingerprint
+      },
+      ...entropyCryptoFingerprint !== void 0 && {
+        entropyCryptoFingerprint
+      },
+      ...entropyWallClockOffsetMs !== void 0 && {
+        entropyWallClockOffsetMs
+      },
+      ...entropyMathRandomFirst !== void 0 && {
+        entropyMathRandomFirst
+      }
     });
     const ipInfoMobile = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.isMobile : void 0;
     const safeUserAgent = userAgent ?? "";

package/dist/cjs/tasks/captchaManager.cjs

@@ -253,11 +253,12 @@ class CaptchaManager {
       }
     };
   }
-  async getPrioritisedAccessPolicies(userAccessRulesStorage, clientId, userScope) {
+  async getPrioritisedAccessPolicies(userAccessRulesStorage, clientId, userScope, options) {
     return blacklistRequestInspector.getPrioritisedAccessRule(
       userAccessRulesStorage,
       userScope,
-      clientId
+      clientId,
+      options
     );
   }
   async getDetectorKeys() {
@@ -380,7 +381,12 @@ class CaptchaManager {
     const accessPolicies = await this.getPrioritisedAccessPolicies(
       userAccessRulesStorage,
       challengeRecord.dappAccount,
-      userScope
+      userScope,
+      // Hard-block lookup only — restrict the Redis-side candidate
+      // pool to Block rules so the SERVER_SIDE_RANK_TOP_N cap can't
+      // crowd a hard-block out of the top-N with Restrict or
+      // routing-Block (captchaType-scoped) entries.
+      { blockOnly: true }
     );
     return findHardBlockPolicy(accessPolicies);
   }
@@ -422,7 +428,8 @@ class CaptchaManager {
     return checkTrafficFilter.checkTrafficFilter(
       ipInfo,
       effective,
-      enrichDnsEvent.extraIpInfosFromEnrichedDnsEvent(enrichedDnsEvent)
+      enrichDnsEvent.extraIpInfosFromEnrichedDnsEvent(enrichedDnsEvent),
+      enrichedDnsEvent?.pathValid
     );
   }
   static canClientSeeScore(tier, score) {

package/dist/cjs/tasks/detection/getBotScore.cjs

@@ -18,6 +18,10 @@ const getBotScore = async (payload, headHash, privateKeyString) => {
   const decryptedHeadHash = result.decryptedHeadHash;
   const triggeredDetectors = result.triggeredDetectors;
   const shadowDomPenalty = result.shadowDomPenalty;
+  const entropyMathRandomFingerprint = result.entropyMathRandomFingerprint;
+  const entropyCryptoFingerprint = result.entropyCryptoFingerprint;
+  const entropyWallClockOffsetMs = result.entropyWallClockOffsetMs;
+  const entropyMathRandomFirst = result.entropyMathRandomFirst;
   if (baseBotScore === void 0 || Number.isNaN(baseBotScore)) {
     return {
       baseBotScore: 1,
@@ -35,7 +39,11 @@ const getBotScore = async (payload, headHash, privateKeyString) => {
     isIframe,
     decryptedHeadHash,
     triggeredDetectors,
-    shadowDomPenalty
+    shadowDomPenalty,
+    entropyMathRandomFingerprint,
+    entropyCryptoFingerprint,
+    entropyWallClockOffsetMs,
+    entropyMathRandomFirst
   };
 };
 exports.getBotScore = getBotScore;

package/dist/cjs/tasks/frictionless/frictionlessTasks.cjs

@@ -58,7 +58,11 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
       ipInfo: params.ipInfo,
       headers: params.headers,
       mode: params.mode,
-      simdReadings: params.simdReadings
+      simdReadings: params.simdReadings,
+      entropyMathRandomFingerprint: params.entropyMathRandomFingerprint,
+      entropyCryptoFingerprint: params.entropyCryptoFingerprint,
+      entropyWallClockOffsetMs: params.entropyWallClockOffsetMs,
+      entropyMathRandomFirst: params.entropyMathRandomFirst
     };
   }
   updateScore(score, scoreComponents) {
@@ -70,7 +74,7 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
   checkLangRules(acceptLanguage) {
     return lang.checkLangRules(this.config, acceptLanguage);
   }
-  async createSession(token, score, threshold, scoreComponents, providerSelectEntropy, ipAddress, captchaType, siteKey, solvedImagesCount, powDifficulty, userSitekeyIpHash, webView = false, iFrame = false, decryptedHeadHash = "", reason, blocked, deleted, ipInfo, headers, mode, simdReadings) {
+  async createSession(token, score, threshold, scoreComponents, providerSelectEntropy, ipAddress, captchaType, siteKey, solvedImagesCount, powDifficulty, userSitekeyIpHash, webView = false, iFrame = false, decryptedHeadHash = "", reason, blocked, deleted, ipInfo, headers, mode, simdReadings, entropyMathRandomFingerprint, entropyCryptoFingerprint, entropyWallClockOffsetMs, entropyMathRandomFirst) {
     const sessionRecord = {
       sessionId: `${getSessionIDPrefix(this.config.host)}-${uuid.v4()}`,
       createdAt: /* @__PURE__ */ new Date(),
@@ -99,7 +103,11 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
       // this hop. Absence of readings → absence of stage.
       ...simdReadings && {
         simdReadingsStage: types.SimdReadingsStage.frictionless
-      }
+      },
+      entropyMathRandomFingerprint,
+      entropyCryptoFingerprint,
+      entropyWallClockOffsetMs,
+      entropyMathRandomFirst
     };
     await this.db.storeSessionRecord(sessionRecord);
     if (this.writeQueue) {
@@ -195,7 +203,11 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
       effectiveParams.ipInfo,
       effectiveParams.headers,
       effectiveParams.mode,
-      effectiveParams.simdReadings
+      effectiveParams.simdReadings,
+      effectiveParams.entropyMathRandomFingerprint,
+      effectiveParams.entropyCryptoFingerprint,
+      effectiveParams.entropyWallClockOffsetMs,
+      effectiveParams.entropyMathRandomFirst
     );
     if (this.routingContext && this.usageCounters) {
       this.usageCounters.incrManyAsync(
@@ -347,6 +359,10 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
     let decryptionFailed = false;
     let triggeredDetectors;
     let shadowDomPenalty;
+    let entropyMathRandomFingerprint;
+    let entropyCryptoFingerprint;
+    let entropyWallClockOffsetMs;
+    let entropyMathRandomFirst;
     for (const [keyIndex, key] of decryptKeys.entries()) {
       try {
         this.logger.info(() => ({
@@ -366,6 +382,10 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
         const i = decrypted.isIframe;
         const td = decrypted.triggeredDetectors;
         const sd = decrypted.shadowDomPenalty;
+        const ef = decrypted.entropyMathRandomFingerprint;
+        const ec = decrypted.entropyCryptoFingerprint;
+        const eo = decrypted.entropyWallClockOffsetMs;
+        const em = decrypted.entropyMathRandomFirst;
         this.logger.debug(() => ({
           msg: "Successfully decrypted score",
           data: {
@@ -378,7 +398,11 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
             webView: w,
             iFrame: i,
             triggeredDetectors: td,
-            shadowDomPenalty: sd
+            shadowDomPenalty: sd,
+            entropyMathRandomFingerprint: ef,
+            entropyCryptoFingerprint: ec,
+            entropyWallClockOffsetMs: eo,
+            entropyMathRandomFirst: em
           }
         }));
         baseBotScore = s;
@@ -390,6 +414,10 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
         iFrame = i;
         triggeredDetectors = td;
         shadowDomPenalty = sd;
+        entropyMathRandomFingerprint = ef;
+        entropyCryptoFingerprint = ec;
+        entropyWallClockOffsetMs = eo;
+        entropyMathRandomFirst = em;
         break;
       } catch (err) {
         if (keyIndex === decryptKeys.length - 1) {
@@ -444,7 +472,11 @@ class FrictionlessManager extends captchaManager.CaptchaManager {
       decryptedHeadHash,
       decryptionFailed,
       triggeredDetectors,
-      shadowDomPenalty
+      shadowDomPenalty,
+      entropyMathRandomFingerprint,
+      entropyCryptoFingerprint,
+      entropyWallClockOffsetMs,
+      entropyMathRandomFirst
     };
   }
   async getClientContextEntropy(siteKey, contextType) {

package/dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs

@@ -693,7 +693,18 @@ class ImgCaptchaManager extends captchaManager.CaptchaManager {
         captchaType: types.CaptchaType.image,
         countryCode: solution.ipInfo?.isValid ? solution.ipInfo.countryCode : void 0,
         ipInfo: solution.ipInfo,
-        dnsEvent: enrichedDnsEvent
+        dnsEvent: enrichedDnsEvent,
+        score,
+        threshold: sessionRecord?.threshold,
+        scoreComponents: sessionRecord?.scoreComponents,
+        decryptedHeadHash: sessionRecord?.decryptedHeadHash,
+        userSitekeyIpHash: sessionRecord?.userSitekeyIpHash,
+        providerSelectEntropy: sessionRecord?.providerSelectEntropy,
+        simdReadings: sessionRecord?.simdReadings,
+        frictionlessReason: sessionRecord?.reason,
+        ruleType: sessionRecord?.ruleType,
+        webView: sessionRecord?.webView,
+        iFrame: sessionRecord?.iFrame
       };
       try {
         const decision = await this.decisionMachineRunner.decide(

package/dist/cjs/tasks/powCaptcha/powTasks.cjs

@@ -89,13 +89,19 @@ class PowCaptchaManager extends captchaManager.CaptchaManager {
     }
     const difficulty = challengeRecord.difficulty;
     let coords;
+    let saltDecodeError;
     if (salt) {
       try {
         const extractedData = util$1.extractData(salt);
         if (extractedData.length >= 2) {
-          coords = [[[extractedData[0], extractedData[1]]]];
+          const built = [
+            [[extractedData[0], extractedData[1]]]
+          ];
+          util$1.assertCoordsSafe(built, "coords");
+          coords = built;
         }
       } catch (error) {
+        saltDecodeError = error;
         this.logger.warn(() => ({
           msg: "Failed to extract coordinates from salt",
           error,
@@ -103,6 +109,35 @@ class PowCaptchaManager extends captchaManager.CaptchaManager {
         }));
       }
     }
+    if (saltDecodeError) {
+      const badSaltResult = {
+        status: types.CaptchaStatus.disapproved,
+        reason: types.ResultReason.CAPTCHA_INVALID_SALT
+      };
+      const writePromises2 = [
+        this.db.updatePowCaptchaRecordResult(
+          challenge,
+          badSaltResult,
+          false,
+          // serverChecked
+          true,
+          // userSubmitted
+          userTimestampSignature,
+          void 0
+          // never persist the bad coords
+        )
+      ];
+      if (challengeRecord.sessionId) {
+        writePromises2.push(
+          this.updateSessionRecordWithCache(challengeRecord.sessionId, {
+            userSubmitted: true,
+            result: badSaltResult
+          })
+        );
+      }
+      await Promise.all(writePromises2);
+      return { verified: false };
+    }
     if (!util$1.verifyRecency(challenge, timeout)) {
       const timeoutResult = {
         status: types.CaptchaStatus.disapproved,
@@ -547,7 +582,18 @@ class PowCaptchaManager extends captchaManager.CaptchaManager {
           deviceCapability: challengeRecord.deviceCapability,
           countryCode: challengeRecord.ipInfo?.isValid ? challengeRecord.ipInfo.countryCode : void 0,
           ipInfo: challengeRecord.ipInfo,
-          dnsEvent: enrichedDnsEvent
+          dnsEvent: enrichedDnsEvent,
+          score,
+          threshold: sessionRecord?.threshold,
+          scoreComponents: sessionRecord?.scoreComponents,
+          decryptedHeadHash: sessionRecord?.decryptedHeadHash,
+          userSitekeyIpHash: sessionRecord?.userSitekeyIpHash,
+          providerSelectEntropy: sessionRecord?.providerSelectEntropy,
+          simdReadings: sessionRecord?.simdReadings,
+          frictionlessReason: sessionRecord?.reason,
+          ruleType: sessionRecord?.ruleType,
+          webView: sessionRecord?.webView,
+          iFrame: sessionRecord?.iFrame
         };
         const decision = await this.decisionMachineRunner.decide(
           decisionInput,

package/dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs

@@ -87,13 +87,19 @@ class PuzzleCaptchaManager extends captchaManager.CaptchaManager {
       return false;
     }
     let coords;
+    let saltDecodeError;
     if (salt) {
       try {
         const extractedData = util$1.extractData(salt);
         if (extractedData.length >= 2) {
-          coords = [[[extractedData[0], extractedData[1]]]];
+          const built = [
+            [[extractedData[0], extractedData[1]]]
+          ];
+          util$1.assertCoordsSafe(built, "coords");
+          coords = built;
         }
       } catch (error) {
+        saltDecodeError = error;
         this.logger.warn(() => ({
           msg: "Failed to extract coordinates from salt",
           error,
@@ -107,6 +113,30 @@ class PuzzleCaptchaManager extends captchaManager.CaptchaManager {
       }));
       return false;
     }
+    if (saltDecodeError) {
+      const badSaltResult = {
+        status: types.CaptchaStatus.disapproved,
+        reason: types.ResultReason.CAPTCHA_INVALID_SALT
+      };
+      await this.db.updatePuzzleCaptchaRecordResult(
+        challenge,
+        badSaltResult,
+        false,
+        // serverChecked
+        true,
+        // userSubmitted
+        userTimestampSignature,
+        void 0
+        // never persist the bad coords
+      );
+      if (challengeRecord.sessionId) {
+        await this.updateSessionRecordWithCache(challengeRecord.sessionId, {
+          userSubmitted: true,
+          result: badSaltResult
+        });
+      }
+      return false;
+    }
     if (!util$1.verifyRecency(challenge, timeout)) {
       const timeoutResult = {
         status: types.CaptchaStatus.disapproved,
@@ -495,7 +525,18 @@ class PuzzleCaptchaManager extends captchaManager.CaptchaManager {
         deviceCapability: challengeRecord.deviceCapability,
         countryCode: challengeRecord.ipInfo?.isValid ? challengeRecord.ipInfo.countryCode : void 0,
         ipInfo: challengeRecord.ipInfo,
-        dnsEvent: enrichedDnsEvent
+        dnsEvent: enrichedDnsEvent,
+        score,
+        threshold: sessionRecord?.threshold,
+        scoreComponents: sessionRecord?.scoreComponents,
+        decryptedHeadHash: sessionRecord?.decryptedHeadHash,
+        userSitekeyIpHash: sessionRecord?.userSitekeyIpHash,
+        providerSelectEntropy: sessionRecord?.providerSelectEntropy,
+        simdReadings: sessionRecord?.simdReadings,
+        frictionlessReason: sessionRecord?.reason,
+        ruleType: sessionRecord?.ruleType,
+        webView: sessionRecord?.webView,
+        iFrame: sessionRecord?.iFrame
       };
       const decision = await this.decisionMachineRunner.decide(
         decisionInput,

package/dist/cjs/tasks/spam/checkTrafficFilter.cjs

@@ -1,15 +1,27 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const types = require("@prosopo/types");
-const isDatacenterNameAllowlisted = (datacenterName, allowlist) => {
-  if (!datacenterName || !allowlist || allowlist.length === 0) {
+const isDatacenterAllowlisted = (ipInfo, allowlist) => {
+  if (!allowlist || allowlist.length === 0) {
     return false;
   }
-  const needle = datacenterName.trim().toLowerCase();
-  if (!needle) {
+  const candidates = [];
+  for (const value of [
+    ipInfo.datacenterName,
+    ipInfo.providerName,
+    ipInfo.asnOrganization
+  ]) {
+    if (typeof value !== "string") continue;
+    const trimmed = value.trim().toLowerCase();
+    if (trimmed) candidates.push(trimmed);
+  }
+  if (candidates.length === 0) {
     return false;
   }
-  return allowlist.some((entry) => entry.trim().toLowerCase() === needle);
+  const normalisedAllowlist = allowlist.map(
+    (entry) => entry.trim().toLowerCase()
+  );
+  return candidates.some((c) => normalisedAllowlist.includes(c));
 };
 const evaluateIpInfo = (ipInfo, trafficFilter, options) => {
   if (!ipInfo || !ipInfo.isValid) {
@@ -34,10 +46,7 @@ const evaluateIpInfo = (ipInfo, trafficFilter, options) => {
       return { isBlocked: true, reason: types.ResultReason.ABUSER_BLOCKED };
     }
   }
-  if (trafficFilter.blockDatacenter && ipInfo.isDatacenter && !(options.suppressVpnDatacenterInteraction && ipInfo.isVPN && !trafficFilter.blockVpn) && !isDatacenterNameAllowlisted(
-    ipInfo.datacenterName,
-    trafficFilter.datacenterNameAllowlist
-  )) {
+  if (trafficFilter.blockDatacenter && ipInfo.isDatacenter && !(options.suppressVpnDatacenterInteraction && ipInfo.isVPN && !trafficFilter.blockVpn) && !isDatacenterAllowlisted(ipInfo, trafficFilter.datacenterNameAllowlist)) {
     return { isBlocked: true, reason: types.ResultReason.DATACENTER_BLOCKED };
   }
   if (trafficFilter.blockMobile && ipInfo.isMobile) {
@@ -51,13 +60,16 @@ const evaluateIpInfo = (ipInfo, trafficFilter, options) => {
   }
   return { isBlocked: false };
 };
-const checkTrafficFilter = (ipInfo, trafficFilter, extraIpInfos) => {
+const checkTrafficFilter = (ipInfo, trafficFilter, extraIpInfos, dnsPathValid) => {
   const primary = evaluateIpInfo(ipInfo, trafficFilter, {
     suppressVpnDatacenterInteraction: true
   });
   if (primary.isBlocked) {
     return primary;
   }
+  if (trafficFilter.skipExtrasOnValidDnsPath && dnsPathValid === true) {
+    return { isBlocked: false };
+  }
   for (const extra of extraIpInfos ?? []) {
     const result = evaluateIpInfo(extra, trafficFilter, {
       suppressVpnDatacenterInteraction: false