@prosopo/provider 4.15.14 → 4.15.15

package/dist/cjs/utils/devicePlatform.cjs

@@ -1,10 +1,16 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const APPLE_UA_REGEX = /iPhone|iPad|iPod|Macintosh|Mac OS X/i;
-const MOBILE_UA_REGEX = /Mobile|Android|iPhone|iPad|iPod|Opera Mini|IEMobile/i;
-const derivePlatform = (userAgent, webView, ipInfo) => ({
-  isApple: APPLE_UA_REGEX.test(userAgent),
-  isWebView: webView,
-  isMobile: typeof ipInfo?.isMobile === "boolean" ? ipInfo.isMobile : MOBILE_UA_REGEX.test(userAgent)
+//#region src/utils/devicePlatform.ts
+var APPLE_UA_REGEX = /iPhone|iPad|iPod|Macintosh|Mac OS X/i;
+var MOBILE_UA_REGEX = /Mobile|Android|iPhone|iPad|iPod|Opera Mini|IEMobile/i;
+/**
+* Derive platform flags from server-visible signals. `isWebView` is supplied
+* by the caller because that bit only comes from the encrypted bot-detection
+* payload, not request headers. `isMobile` prefers IPInfo's network-classified
+* mobile bit when present and falls back to UA parsing otherwise.
+*/
+var derivePlatform = (userAgent, webView, ipInfo) => ({
+	isApple: APPLE_UA_REGEX.test(userAgent),
+	isWebView: webView,
+	isMobile: typeof ipInfo?.isMobile === "boolean" ? ipInfo.isMobile : MOBILE_UA_REGEX.test(userAgent)
 });
+//#endregion
 exports.derivePlatform = derivePlatform;

package/dist/cjs/utils/dns.cjs

@@ -1,101 +1,76 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const dns = require("node:dns");
-const https = require("node:https");
-const node_util = require("node:util");
-function _interopNamespaceDefault(e) {
-  const n = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
-  if (e) {
-    for (const k in e) {
-      if (k !== "default") {
-        const d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: () => e[k]
-        });
-      }
-    }
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-const dns__namespace = /* @__PURE__ */ _interopNamespaceDefault(dns);
-const https__namespace = /* @__PURE__ */ _interopNamespaceDefault(https);
-const DEFAULT_DNS_SERVERS = ["8.8.8.8", "1.1.1.1"];
-const DEFAULT_HTTPS_TIMEOUT_MS = 1e3;
-const createResolver = (dnsServers) => {
-  const resolver = new dns__namespace.Resolver();
-  resolver.setServers(dnsServers ?? DEFAULT_DNS_SERVERS);
-  return resolver;
+const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
+let node_dns = require("node:dns");
+node_dns = require_runtime.__toESM(node_dns, 1);
+let node_https = require("node:https");
+node_https = require_runtime.__toESM(node_https, 1);
+let node_util = require("node:util");
+//#region src/utils/dns.ts
+/** Default DNS servers to use for lookups (Google and Cloudflare) */
+var DEFAULT_DNS_SERVERS = ["8.8.8.8", "1.1.1.1"];
+/** Default timeout for HTTPS requests in milliseconds */
+var DEFAULT_HTTPS_TIMEOUT_MS = 1e3;
+/**
+* Creates an isolated DNS resolver instance that doesn't affect global DNS config.
+* Uses custom DNS servers by default for reliable lookups.
+*/
+var createResolver = (dnsServers) => {
+	const resolver = new node_dns.Resolver();
+	resolver.setServers(dnsServers ?? DEFAULT_DNS_SERVERS);
+	return resolver;
 };
-const checkForCname = async (domain, resolver) => {
-  try {
-    const res = resolver ?? createResolver();
-    const resolveCname = node_util.promisify(res.resolveCname.bind(res));
-    return await resolveCname(domain);
-  } catch (err) {
-    return null;
-  }
+var checkForCname = async (domain, resolver) => {
+	try {
+		const res = resolver ?? createResolver();
+		return await (0, node_util.promisify)(res.resolveCname.bind(res))(domain);
+	} catch (err) {
+		return null;
+	}
 };
-const checkForARecord = async (domain, resolver) => {
-  try {
-    const res = resolver ?? createResolver();
-    const resolve4 = node_util.promisify(res.resolve4.bind(res));
-    return await resolve4(domain);
-  } catch (err) {
-    return null;
-  }
+var checkForMXRecord = async (domain, resolver) => {
+	try {
+		const res = resolver ?? createResolver();
+		return await (0, node_util.promisify)(res.resolveMx.bind(res))(domain);
+	} catch (err) {
+		return null;
+	}
 };
-const checkForMXRecord = async (domain, resolver) => {
-  try {
-    const res = resolver ?? createResolver();
-    const resolveMx = node_util.promisify(res.resolveMx.bind(res));
-    return await resolveMx(domain);
-  } catch (err) {
-    return null;
-  }
+var checkForRedirect = (url, timeoutMs = DEFAULT_HTTPS_TIMEOUT_MS) => {
+	return new Promise((resolve) => {
+		const req = node_https.get(url, { timeout: timeoutMs }, (res) => {
+			res.resume();
+			if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) try {
+				const absoluteUrl = new URL(res.headers.location, url).href;
+				resolve({ redirectUrl: absoluteUrl });
+			} catch {
+				resolve({});
+			}
+			else resolve({});
+		}).on("timeout", () => {
+			req.destroy();
+			resolve({ timeout: true });
+		}).on("error", (e) => {
+			resolve({ tlsError: e.message.includes("CERT") || e.message.includes("SSL") || e.message.includes("TLS") || e.message.includes("certificate") || e.message.includes("EPROTO") });
+		});
+	});
 };
-const checkForRedirect = (url, timeoutMs = DEFAULT_HTTPS_TIMEOUT_MS) => {
-  return new Promise((resolve) => {
-    const req = https__namespace.get(url, { timeout: timeoutMs }, (res) => {
-      res.resume();
-      if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-        try {
-          const absoluteUrl = new URL(res.headers.location, url).href;
-          resolve({ redirectUrl: absoluteUrl });
-        } catch {
-          resolve({});
-        }
-      } else {
-        resolve({});
-      }
-    }).on("timeout", () => {
-      req.destroy();
-      resolve({ timeout: true });
-    }).on("error", (e) => {
-      const isTlsError = e.message.includes("CERT") || e.message.includes("SSL") || e.message.includes("TLS") || e.message.includes("certificate") || e.message.includes("EPROTO");
-      resolve({ tlsError: isTlsError });
-    });
-  });
+var runDnsChecks = async (domain, options) => {
+	const resolver = createResolver(options?.dnsServers);
+	try {
+		const [cnameResult, mxRecordResult, redirectResult] = await Promise.all([
+			checkForCname(domain, resolver),
+			checkForMXRecord(domain, resolver),
+			checkForRedirect(`https://${domain}`)
+		]);
+		return {
+			cnameResult,
+			mxRecordResult,
+			redirectResult
+		};
+	} catch (e) {
+		throw new Error(`Error during DNS checks: ${e.toString()}`);
+	}
 };
-const runDnsChecks = async (domain, options) => {
-  const resolver = createResolver(options?.dnsServers);
-  try {
-    const [cnameResult, mxRecordResult, redirectResult] = await Promise.all([
-      checkForCname(domain, resolver),
-      checkForMXRecord(domain, resolver),
-      checkForRedirect(`https://${domain}`)
-    ]);
-    return {
-      cnameResult,
-      mxRecordResult,
-      redirectResult
-    };
-  } catch (e) {
-    throw new Error(`Error during DNS checks: ${e.toString()}`);
-  }
-};
-exports.checkForARecord = checkForARecord;
+//#endregion
 exports.checkForCname = checkForCname;
 exports.checkForMXRecord = checkForMXRecord;
 exports.checkForRedirect = checkForRedirect;

package/dist/cjs/utils/hashUserAgent.cjs

@@ -1,10 +1,17 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const node_crypto = require("node:crypto");
+let node_crypto = require("node:crypto");
+//#region src/utils/hashUserAgent.ts
+/**
+* Hash a user agent string to a fixed-length string to prevent RSA-OAEP encryption size limits
+* Uses SHA-256 and returns first 32 characters of the hex digest (128 bits)
+* This provides a good balance between uniqueness and size constraints
+*
+* @param userAgent - The user agent string to hash
+* @returns A 32-character hex string representing the hash
+*/
 function hashUserAgent(userAgent) {
-  const hash = node_crypto.createHash("sha256");
-  hash.update(userAgent, "utf8");
-  const hashHex = hash.digest("hex");
-  return hashHex.substring(0, 32);
+	const hash = (0, node_crypto.createHash)("sha256");
+	hash.update(userAgent, "utf8");
+	return hash.digest("hex").substring(0, 32);
 }
+//#endregion
 exports.hashUserAgent = hashUserAgent;

package/dist/cjs/utils/hashUserIp.cjs

@@ -1,9 +1,17 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const node_crypto = require("node:crypto");
+let node_crypto = require("node:crypto");
+//#region src/utils/hashUserIp.ts
+/**
+* Hash a user and IP address combination to create a unique session identifier
+* SHA-256 hash of user:ip:sitekey combination
+*
+* @param user - The user identifier
+* @param ip - The IP address
+* @returns A 64-character hex string representing the hash
+*/
 function hashUserIp(user, ip, sitekey) {
-  const hash = node_crypto.createHash("sha256");
-  hash.update(`${user}:${ip}:${sitekey}`, "utf8");
-  return hash.digest("hex");
+	const hash = (0, node_crypto.createHash)("sha256");
+	hash.update(`${user}:${ip}:${sitekey}`, "utf8");
+	return hash.digest("hex");
 }
+//#endregion
 exports.hashUserIp = hashUserIp;

package/dist/cjs/utils/honeypot/encoders.cjs

@@ -1,86 +1,80 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const types = require("@prosopo/types");
-const MORSE_MAP = {
-  a: ".-",
-  b: "-...",
-  c: "-.-.",
-  d: "-..",
-  e: ".",
-  f: "..-.",
-  g: "--.",
-  h: "....",
-  i: "..",
-  j: ".---",
-  k: "-.-",
-  l: ".-..",
-  m: "--",
-  n: "-.",
-  o: "---",
-  p: ".--.",
-  q: "--.-",
-  r: ".-.",
-  s: "...",
-  t: "-",
-  u: "..-",
-  v: "...-",
-  w: ".--",
-  x: "-..-",
-  y: "-.--",
-  z: "--..",
-  "0": "-----",
-  "1": ".----",
-  "2": "..---",
-  "3": "...--",
-  "4": "....-",
-  "5": ".....",
-  "6": "-....",
-  "7": "--...",
-  "8": "---..",
-  "9": "----."
+let _prosopo_types = require("@prosopo/types");
+//#region src/utils/honeypot/encoders.ts
+var MORSE_MAP = {
+	a: ".-",
+	b: "-...",
+	c: "-.-.",
+	d: "-..",
+	e: ".",
+	f: "..-.",
+	g: "--.",
+	h: "....",
+	i: "..",
+	j: ".---",
+	k: "-.-",
+	l: ".-..",
+	m: "--",
+	n: "-.",
+	o: "---",
+	p: ".--.",
+	q: "--.-",
+	r: ".-.",
+	s: "...",
+	t: "-",
+	u: "..-",
+	v: "...-",
+	w: ".--",
+	x: "-..-",
+	y: "-.--",
+	z: "--..",
+	"0": "-----",
+	"1": ".----",
+	"2": "..---",
+	"3": "...--",
+	"4": "....-",
+	"5": ".....",
+	"6": "-....",
+	"7": "--...",
+	"8": "---..",
+	"9": "----."
 };
-const SEMAPHORE_MAP = {
-  a: "↙↓",
-  b: "←↓",
-  c: "↖↓",
-  d: "↑↓",
-  e: "↓↘",
-  f: "↓→",
-  g: "↓↗",
-  h: "↙←",
-  i: "↙↖",
-  j: "↓↑",
-  k: "↑←",
-  l: "↗←",
-  m: "←↖",
-  n: "←↑",
-  o: "↖↑",
-  p: "↑↗",
-  q: "↗→",
-  r: "→↘",
-  s: "↘↓",
-  t: "↓↙",
-  u: "↘↗",
-  v: "→↑",
-  w: "↘↑",
-  x: "↙↗",
-  y: "→↗",
-  z: "↘→"
+var SEMAPHORE_MAP = {
+	a: "↙↓",
+	b: "←↓",
+	c: "↖↓",
+	d: "↑↓",
+	e: "↓↘",
+	f: "↓→",
+	g: "↓↗",
+	h: "↙←",
+	i: "↙↖",
+	j: "↓↑",
+	k: "↑←",
+	l: "↗←",
+	m: "←↖",
+	n: "←↑",
+	o: "↖↑",
+	p: "↑↗",
+	q: "↗→",
+	r: "→↘",
+	s: "↘↓",
+	t: "↓↙",
+	u: "↘↗",
+	v: "→↑",
+	w: "↘↑",
+	x: "↙↗",
+	y: "→↗",
+	z: "↘→"
 };
-const encodeMorse = (text) => {
-  const words = text.toLowerCase().split(/\s+/).filter(Boolean);
-  return words.map(
-    (word) => [...word].map((ch) => MORSE_MAP[ch]).filter((code) => Boolean(code)).join(" ")
-  ).filter(Boolean).join(" / ");
+var encodeMorse = (text) => {
+	return text.toLowerCase().split(/\s+/).filter(Boolean).map((word) => [...word].map((ch) => MORSE_MAP[ch]).filter((code) => Boolean(code)).join(" ")).filter(Boolean).join(" / ");
 };
-const encodeSemaphore = (text) => {
-  const words = text.toLowerCase().split(/\s+/).filter(Boolean);
-  return words.map(
-    (word) => [...word].map((ch) => SEMAPHORE_MAP[ch]).filter((code) => Boolean(code)).join(" ")
-  ).filter(Boolean).join(" / ");
+var encodeSemaphore = (text) => {
+	return text.toLowerCase().split(/\s+/).filter(Boolean).map((word) => [...word].map((ch) => SEMAPHORE_MAP[ch]).filter((code) => Boolean(code)).join(" ")).filter(Boolean).join(" / ");
 };
-const encodeHoneypotQuestion = (text, encoding) => {
-  const encoded = encoding === types.EncodingType.morse ? encodeMorse(text) : encodeSemaphore(text);
-  return Buffer.from(encoded, "utf-8").toString("base64");
+var encodeHoneypotQuestion = (text, encoding) => {
+	const encoded = encoding === _prosopo_types.EncodingType.morse ? encodeMorse(text) : encodeSemaphore(text);
+	return Buffer.from(encoded, "utf-8").toString("base64");
 };
+//#endregion
 exports.encodeHoneypotQuestion = encodeHoneypotQuestion;

package/dist/cjs/utils/honeypot/phraseBank.cjs

@@ -1,47 +1,54 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const fs = require("node:fs");
-const logger$1 = require("@prosopo/logger");
-const DEFAULT_PHRASE_BANK_PATH = "/app/data/honeypot-phrases.json";
-const logger = logger$1.getLogger("info", "honeypot-phrase-bank");
-let cachedPhrases = null;
-const resolvePath = () => process.env.PROSOPO_HONEYPOT_PHRASE_BANK_PATH ?? DEFAULT_PHRASE_BANK_PATH;
-const loadPhrases = () => {
-  const path = resolvePath();
-  try {
-    const raw = fs.readFileSync(path, "utf-8");
-    const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed === "object" && "phrases" in parsed && Array.isArray(parsed.phrases)) {
-      const phrases = parsed.phrases.filter(
-        (p) => typeof p === "string" && p.trim().length > 0
-      );
-      logger.info(() => ({
-        msg: "Loaded honeypot phrase bank",
-        data: { path, count: phrases.length }
-      }));
-      return phrases;
-    }
-    logger.warn(() => ({
-      msg: "Honeypot phrase bank missing `phrases` array",
-      data: { path }
-    }));
-    return [];
-  } catch (err) {
-    logger.warn(() => ({
-      msg: "Failed to load honeypot phrase bank — fallback questions disabled",
-      data: { path, err: err instanceof Error ? err.message : String(err) }
-    }));
-    return [];
-  }
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+let _prosopo_logger = require("@prosopo/logger");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+//#region src/utils/honeypot/phraseBank.ts
+var DEFAULT_PHRASE_BANK_PATH = "/app/data/honeypot-phrases.json";
+var logger = (0, _prosopo_logger.getLogger)("info", "honeypot-phrase-bank");
+var cachedPhrases = null;
+var resolvePath = () => process.env.PROSOPO_HONEYPOT_PHRASE_BANK_PATH ?? DEFAULT_PHRASE_BANK_PATH;
+var loadPhrases = () => {
+	const path = resolvePath();
+	try {
+		const raw = node_fs.default.readFileSync(path, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (parsed && typeof parsed === "object" && "phrases" in parsed && Array.isArray(parsed.phrases)) {
+			const phrases = parsed.phrases.filter((p) => typeof p === "string" && p.trim().length > 0);
+			logger.info(() => ({
+				msg: "Loaded honeypot phrase bank",
+				data: {
+					path,
+					count: phrases.length
+				}
+			}));
+			return phrases;
+		}
+		logger.warn(() => ({
+			msg: "Honeypot phrase bank missing `phrases` array",
+			data: { path }
+		}));
+		return [];
+	} catch (err) {
+		logger.warn(() => ({
+			msg: "Failed to load honeypot phrase bank — fallback questions disabled",
+			data: {
+				path,
+				err: err instanceof Error ? err.message : String(err)
+			}
+		}));
+		return [];
+	}
 };
-const getRandomPhrase = () => {
-  if (cachedPhrases === null) cachedPhrases = loadPhrases();
-  if (cachedPhrases.length === 0) return void 0;
-  const idx = Math.floor(Math.random() * cachedPhrases.length);
-  return cachedPhrases[idx];
-};
-const resetPhraseBankCache = () => {
-  cachedPhrases = null;
+/**
+* Returns a random phrase from the loaded bank, or `undefined` if the bank
+* is empty / unloadable. Loads lazily on first call so startup ordering
+* doesn't matter and tests can swap the env var before first use.
+*/
+var getRandomPhrase = () => {
+	if (cachedPhrases === null) cachedPhrases = loadPhrases();
+	if (cachedPhrases.length === 0) return void 0;
+	const idx = Math.floor(Math.random() * cachedPhrases.length);
+	return cachedPhrases[idx];
 };
+//#endregion
 exports.getRandomPhrase = getRandomPhrase;
-exports.resetPhraseBankCache = resetPhraseBankCache;

package/dist/cjs/utils/normalizeRequestIp.cjs

@@ -1,27 +1,35 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const normalizeRequestIp = (rawIp, logger) => {
-  let normalizedIp = "";
-  const rawType = typeof rawIp;
-  const rawCtor = rawIp && rawType === "object" ? rawIp.constructor?.name : void 0;
-  const addressProp = rawIp && rawType === "object" ? rawIp.address : void 0;
-  if (rawType === "string") {
-    normalizedIp = rawIp;
-  } else if (typeof addressProp === "string") {
-    normalizedIp = addressProp;
-  } else if (rawIp != null) {
-    normalizedIp = String(rawIp);
-  }
-  logger.debug(() => ({
-    msg: "Normalized request IP",
-    data: {
-      rawIpType: rawType,
-      rawIpCtor: rawCtor,
-      rawIpString: rawType === "string" ? rawIp : void 0,
-      addressPropType: typeof addressProp,
-      normalizedIp
-    }
-  }));
-  return normalizedIp;
+//#region src/utils/normalizeRequestIp.ts
+/**
+* Normalizes a request IP address from various formats to a string
+*
+* Handles different IP formats:
+* - Direct string
+* - Object with address property (e.g., IPv6 format)
+* - Other objects by converting to string
+*
+* @param rawIp - The raw IP value from the request
+* @param logger - Logger instance for debugging
+* @returns Normalized IP address as a string
+*/
+var normalizeRequestIp = (rawIp, logger) => {
+	let normalizedIp = "";
+	const rawType = typeof rawIp;
+	const rawCtor = rawIp && rawType === "object" ? rawIp.constructor?.name : void 0;
+	const addressProp = rawIp && rawType === "object" ? rawIp.address : void 0;
+	if (rawType === "string") normalizedIp = rawIp;
+	else if (typeof addressProp === "string") normalizedIp = addressProp;
+	else if (rawIp != null) normalizedIp = String(rawIp);
+	logger.debug(() => ({
+		msg: "Normalized request IP",
+		data: {
+			rawIpType: rawType,
+			rawIpCtor: rawCtor,
+			rawIpString: rawType === "string" ? rawIp : void 0,
+			addressPropType: typeof addressProp,
+			normalizedIp
+		}
+	}));
+	return normalizedIp;
 };
+//#endregion
 exports.normalizeRequestIp = normalizeRequestIp;