@prosopo/provider 4.15.13 → 4.15.15

package/dist/cjs/tasks/detection/getBotScore.cjs

@@ -1,45 +1,39 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const decodePayload = require("./decodePayload.cjs");
-const getBotScore = async (payload, headHash, privateKeyString) => {
-  const result = await decodePayload(
-    payload,
-    headHash,
-    privateKeyString
-  );
-  const baseBotScore = result.score;
-  const timestamp = result.timestamp;
-  const userId = result.userId;
-  const userAgent = result.userAgent;
-  const isWebView = result.isWebView ?? false;
-  const isIframe = result.isIframe ?? false;
-  const decryptedHeadHash = result.decryptedHeadHash;
-  const triggeredDetectors = result.triggeredDetectors;
-  const shadowDomPenalty = result.shadowDomPenalty;
-  const entropyMathRandomFingerprint = result.entropyMathRandomFingerprint;
-  const entropyCryptoFingerprint = result.entropyCryptoFingerprint;
-  const entropyWallClockOffsetMs = result.entropyWallClockOffsetMs;
-  const entropyMathRandomFirst = result.entropyMathRandomFirst;
-  if (baseBotScore === void 0 || Number.isNaN(baseBotScore)) {
-    return {
-      baseBotScore: 1,
-      timestamp: 0
-    };
-  }
-  return {
-    baseBotScore,
-    timestamp,
-    userId,
-    userAgent,
-    isWebView,
-    isIframe,
-    decryptedHeadHash,
-    triggeredDetectors,
-    shadowDomPenalty,
-    entropyMathRandomFingerprint,
-    entropyCryptoFingerprint,
-    entropyWallClockOffsetMs,
-    entropyMathRandomFirst
-  };
+const require_decodePayload = require("./decodePayload.cjs");
+//#region src/tasks/detection/getBotScore.ts
+var getBotScore = async (payload, headHash, privateKeyString) => {
+	const result = await require_decodePayload.default(payload, headHash, privateKeyString);
+	const baseBotScore = result.score;
+	const timestamp = result.timestamp;
+	const userId = result.userId;
+	const userAgent = result.userAgent;
+	const isWebView = result.isWebView ?? false;
+	const isIframe = result.isIframe ?? false;
+	const decryptedHeadHash = result.decryptedHeadHash;
+	const triggeredDetectors = result.triggeredDetectors;
+	const shadowDomPenalty = result.shadowDomPenalty;
+	const entropyMathRandomFingerprint = result.entropyMathRandomFingerprint;
+	const entropyCryptoFingerprint = result.entropyCryptoFingerprint;
+	const entropyWallClockOffsetMs = result.entropyWallClockOffsetMs;
+	const entropyMathRandomFirst = result.entropyMathRandomFirst;
+	if (baseBotScore === void 0 || Number.isNaN(baseBotScore)) return {
+		baseBotScore: 1,
+		timestamp: 0
+	};
+	return {
+		baseBotScore,
+		timestamp,
+		userId,
+		userAgent,
+		isWebView,
+		isIframe,
+		decryptedHeadHash,
+		triggeredDetectors,
+		shadowDomPenalty,
+		entropyMathRandomFingerprint,
+		entropyCryptoFingerprint,
+		entropyWallClockOffsetMs,
+		entropyMathRandomFirst
+	};
 };
+//#endregion
 exports.getBotScore = getBotScore;

package/dist/cjs/tasks/dnsEvent/enrichDnsEvent.cjs

@@ -1,77 +1,94 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const types = require("@prosopo/types");
-const checkTrafficFilter = require("../spam/checkTrafficFilter.cjs");
-const enrichDnsEvent = async (dnsEvent, ipInfoService, primaryIp) => {
-  if (!dnsEvent) {
-    return void 0;
-  }
-  const enriched = {
-    peerIp: dnsEvent.peerIp,
-    resolverIp: dnsEvent.resolverIp,
-    pathValid: dnsEvent.pathValid
-  };
-  const lookups = [];
-  const kinds = [];
-  if (dnsEvent.peerIp && dnsEvent.peerIp !== primaryIp) {
-    lookups.push(ipInfoService.lookup(dnsEvent.peerIp));
-    kinds.push("peer");
-  }
-  if (dnsEvent.resolverIp && dnsEvent.resolverIp !== primaryIp) {
-    lookups.push(ipInfoService.lookup(dnsEvent.resolverIp));
-    kinds.push("resolver");
-  }
-  if (lookups.length === 0) {
-    return enriched;
-  }
-  const results = await Promise.all(lookups);
-  kinds.forEach((k, i) => {
-    const info = results[i];
-    if (!info) return;
-    if (k === "peer") enriched.peerIpInfo = info;
-    else enriched.resolverIpInfo = info;
-  });
-  return enriched;
+const require_checkTrafficFilter = require("../spam/checkTrafficFilter.cjs");
+let _prosopo_types = require("@prosopo/types");
+//#region src/tasks/dnsEvent/enrichDnsEvent.ts
+var enrichDnsEvent = async (dnsEvent, ipInfoService, primaryIp) => {
+	if (!dnsEvent) return;
+	const enriched = {
+		peerIp: dnsEvent.peerIp,
+		resolverIp: dnsEvent.resolverIp,
+		pathValid: dnsEvent.pathValid
+	};
+	const lookups = [];
+	const kinds = [];
+	if (dnsEvent.peerIp && dnsEvent.peerIp !== primaryIp) {
+		lookups.push(ipInfoService.lookup(dnsEvent.peerIp));
+		kinds.push("peer");
+	}
+	if (dnsEvent.resolverIp && dnsEvent.resolverIp !== primaryIp) {
+		lookups.push(ipInfoService.lookup(dnsEvent.resolverIp));
+		kinds.push("resolver");
+	}
+	if (lookups.length === 0) return enriched;
+	const results = await Promise.all(lookups);
+	kinds.forEach((k, i) => {
+		const info = results[i];
+		if (!info) return;
+		if (k === "peer") enriched.peerIpInfo = info;
+		else enriched.resolverIpInfo = info;
+	});
+	return enriched;
 };
-const getIpInfoAsn = (info) => info?.isValid ? info.asnNumber : void 0;
-const extraIpInfosFromEnrichedDnsEvent = (enriched) => {
-  if (!enriched) return [];
-  const out = [];
-  if (enriched.peerIpInfo) out.push(enriched.peerIpInfo);
-  if (enriched.resolverIpInfo) out.push(enriched.resolverIpInfo);
-  return out;
+var getIpInfoAsn = (info) => info?.isValid ? info.asnNumber : void 0;
+var extraIpInfosFromEnrichedDnsEvent = (enriched) => {
+	if (!enriched) return [];
+	const out = [];
+	if (enriched.peerIpInfo) out.push(enriched.peerIpInfo);
+	if (enriched.resolverIpInfo) out.push(enriched.resolverIpInfo);
+	return out;
 };
-const computeDnsAsymmetry = (enriched, clientIpInfo, trafficFilter) => {
-  if (!enriched) return 0;
-  let score = 0;
-  if (enriched.pathValid === false) score += 0.3;
-  const countDc = (ip) => {
-    if (!ip?.isValid || !ip.isDatacenter) return false;
-    if (!trafficFilter) return true;
-    if (ip.isVPN && trafficFilter.blockVpn !== true || ip.isProxy && trafficFilter.blockProxy !== true || ip.isTor && trafficFilter.blockTor !== true || ip.isCrawler && trafficFilter.blockCrawler !== true) {
-      return false;
-    }
-    if (trafficFilter.blockDatacenter !== true) return false;
-    if (ip.providerType === "isp") return false;
-    return !checkTrafficFilter.isDatacenterAllowlisted(ip, trafficFilter.datacenterNameAllowlist);
-  };
-  const countAbuser = (ip) => {
-    if (!ip?.isValid || !ip.isAbuser) return false;
-    if (!trafficFilter) return true;
-    if (trafficFilter.blockAbuser === false) return false;
-    const threshold = trafficFilter.abuserScoreThreshold ?? types.trafficFilterAbuserScoreThresholdDefault;
-    const maxScore = Math.max(ip.abuserScore ?? 0, ip.companyAbuserScore ?? 0);
-    return maxScore >= threshold;
-  };
-  if (countDc(enriched.resolverIpInfo)) score += 0.3;
-  if (countAbuser(enriched.resolverIpInfo)) score += 0.2;
-  if (countDc(enriched.peerIpInfo)) score += 0.2;
-  if (countAbuser(enriched.peerIpInfo)) score += 0.2;
-  if (clientIpInfo?.isValid && clientIpInfo.providerType === "isp" && countDc(enriched.resolverIpInfo)) {
-    score += 0.2;
-  }
-  return Math.min(score, 1);
+/**
+* Score the DNS path for asymmetry between the client's DNS resolver / peer
+* IPs and its connection IP. The score sums four kinds of signal:
+*
+*   - `pathValid=false` (protocol-layer failure — always counted)
+*   - resolver / peer classified `isDatacenter`
+*   - resolver / peer classified `isAbuser`
+*   - client IP is a consumer ISP but resolver is datacenter (compound)
+*
+* When `trafficFilter` is supplied, the datacenter and abuser contributions
+* are gated on the same rules `checkTrafficFilter` uses for the client IP:
+*
+*   - `blockDatacenter` must be opted in (default off); IPs whose
+*     `providerType === "isp"` short-circuit; named allowlist skips
+*   - `blockAbuser` opt-in (default on) with the abuser-score threshold
+*   - cross-category suppression: VPN / proxy / Tor / crawler IPs that also
+*     carry `isDatacenter=true` are NOT counted as datacenter when the
+*     operator hasn't opted into blocking that more specific category —
+*     mirrors the `datacenterSuppressedByCategory` rule in evaluateIpInfo.
+*
+* `pathValid` is a protocol signal, not a category — it always contributes
+* regardless of trafficFilter. When `trafficFilter` is omitted, all
+* datacenter / abuser flags count (preserves the pre-gating behaviour for
+* admin / diagnostic recompute callers).
+*/
+var computeDnsAsymmetry = (enriched, clientIpInfo, trafficFilter) => {
+	if (!enriched) return 0;
+	let score = 0;
+	if (enriched.pathValid === false) score += .3;
+	const countDc = (ip) => {
+		if (!ip?.isValid || !ip.isDatacenter) return false;
+		if (!trafficFilter) return true;
+		if (trafficFilter.blockDatacenter !== true) return false;
+		if (require_checkTrafficFilter.isDatacenterDenylisted(ip, trafficFilter.datacenterNameDenylist)) return true;
+		if (ip.isVPN && trafficFilter.blockVpn !== true || ip.isProxy && trafficFilter.blockProxy !== true || ip.isTor && trafficFilter.blockTor !== true || ip.isCrawler && trafficFilter.blockCrawler !== true) return false;
+		if (ip.providerType === "isp") return false;
+		return !require_checkTrafficFilter.isDatacenterAllowlisted(ip, trafficFilter.datacenterNameAllowlist);
+	};
+	const countAbuser = (ip) => {
+		if (!ip?.isValid || !ip.isAbuser) return false;
+		if (!trafficFilter) return true;
+		if (trafficFilter.blockAbuser === false) return false;
+		const threshold = trafficFilter.abuserScoreThreshold ?? _prosopo_types.trafficFilterAbuserScoreThresholdDefault;
+		return Math.max(ip.abuserScore ?? 0, ip.companyAbuserScore ?? 0) >= threshold;
+	};
+	if (countDc(enriched.resolverIpInfo)) score += .3;
+	if (countAbuser(enriched.resolverIpInfo)) score += .2;
+	if (countDc(enriched.peerIpInfo)) score += .2;
+	if (countAbuser(enriched.peerIpInfo)) score += .2;
+	if (clientIpInfo?.isValid && clientIpInfo.providerType === "isp" && countDc(enriched.resolverIpInfo)) score += .2;
+	return Math.min(score, 1);
 };
+//#endregion
 exports.computeDnsAsymmetry = computeDnsAsymmetry;
 exports.enrichDnsEvent = enrichDnsEvent;
 exports.extraIpInfosFromEnrichedDnsEvent = extraIpInfosFromEnrichedDnsEvent;