@prosopo/provider 5.10.1 → 5.10.2

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/provider@5.10.1 build:cjs
+> @prosopo/provider@5.10.2 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -59,7 +59,7 @@ ViteCommonJSConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 110 modules transformed.
+✓ 111 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/cjs/tasks/index.cjs                                                       0.08 kB │ gzip:  0.07 kB
@@ -99,6 +99,7 @@ dist/cjs/tasks/puzzle/backgroundBuffer.cjs                                     1
 dist/cjs/pairs.cjs                                                             1.39 kB │ gzip:  0.60 kB
 dist/cjs/tasks/dataset/datasetTasksUtils.cjs                                   1.42 kB │ gzip:  0.49 kB
 dist/cjs/utils/clientMetaData.cjs                                              1.48 kB │ gzip:  0.72 kB
+dist/cjs/tasks/detection/assignSecret.cjs                                      1.48 kB │ gzip:  0.75 kB
 dist/cjs/compositeIpAddress.cjs                                                1.55 kB │ gzip:  0.57 kB
 dist/cjs/api/admin/apiGetAllDecisionMachinesEndpoint.cjs                       1.59 kB │ gzip:  0.60 kB
 dist/cjs/schedulers/updateSpamEmailDomains.cjs                                 1.64 kB │ gzip:  0.62 kB
@@ -114,7 +115,6 @@ dist/cjs/utils/honeypot/phraseBank.cjs                                         1
 dist/cjs/api/handshakeTimingMiddleware.cjs                                     1.88 kB │ gzip:  0.71 kB
 dist/cjs/api/captcha/signedAssetsResolver.cjs                                  1.96 kB │ gzip:  0.96 kB
 dist/cjs/api/admin/apiClearAllCountersEndpoint.cjs                             2.01 kB │ gzip:  0.78 kB
-dist/cjs/api/captcha/assignDetectorBundle.cjs                                  2.03 kB │ gzip:  0.86 kB
 dist/cjs/tasks/frictionless/ipMatch.cjs                                        2.03 kB │ gzip:  1.03 kB
 dist/cjs/tasks/spam/updateSpamEmailDomains.cjs                                 2.12 kB │ gzip:  0.85 kB
 dist/cjs/tasks/frictionless/routingMachine.cjs                                 2.17 kB │ gzip:  0.91 kB
@@ -123,13 +123,14 @@ dist/cjs/tasks/puzzle/stratifiedSampler.cjs                                    2
 dist/cjs/tasks/frictionless/frictionlessTasksUtils.cjs                         2.21 kB │ gzip:  1.10 kB
 dist/cjs/tasks/captchaTypeSelection.cjs                                        2.44 kB │ gzip:  1.04 kB
 dist/cjs/api/admin/apiDnsEventEndpoint.cjs                                     2.59 kB │ gzip:  1.00 kB
-dist/cjs/tasks/detection/getBotScore.cjs                                       2.60 kB │ gzip:  0.95 kB
+dist/cjs/tasks/detection/getBotScore.cjs                                       2.63 kB │ gzip:  0.96 kB
 dist/cjs/utils/dns.cjs                                                         2.66 kB │ gzip:  1.02 kB
 dist/cjs/api/forwardVerify.cjs                                                 2.66 kB │ gzip:  1.12 kB
 dist/cjs/tasks/puzzle/puzzleDifficulty.cjs                                     2.66 kB │ gzip:  1.10 kB
 dist/cjs/api/public.cjs                                                        2.67 kB │ gzip:  1.05 kB
 dist/cjs/api/captcha/checkSpamEmail.cjs                                        2.73 kB │ gzip:  0.95 kB
 dist/cjs/api/captcha/submitPuzzleCaptchaSolution.cjs                           2.77 kB │ gzip:  0.99 kB
+dist/cjs/api/captcha/assignDetectorBundle.cjs                                  2.90 kB │ gzip:  1.15 kB
 dist/cjs/api/captcha/maintenanceModeResponses.cjs                              2.91 kB │ gzip:  0.77 kB
 dist/cjs/api/captcha/submitImageCaptchaSolution.cjs                            2.93 kB │ gzip:  1.03 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.cjs          3.66 kB │ gzip:  1.35 kB
@@ -154,7 +155,7 @@ dist/cjs/api/captcha/getImageCaptchaChallenge.cjs                              7
 dist/cjs/tasks/spam/checkTrafficFilter.cjs                                     7.47 kB │ gzip:  2.48 kB
 dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs                             7.56 kB │ gzip:  2.03 kB
 dist/cjs/api/metrics.cjs                                                       7.96 kB │ gzip:  2.23 kB
-dist/cjs/tasks/detection/bundlePool.cjs                                        8.72 kB │ gzip:  3.26 kB
+dist/cjs/tasks/detection/bundlePool.cjs                                        8.89 kB │ gzip:  3.29 kB
 dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs                              9.54 kB │ gzip:  2.81 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.cjs      10.33 kB │ gzip:  1.82 kB
 dist/cjs/api/startProviderApi.cjs                                             11.62 kB │ gzip:  3.70 kB
@@ -163,17 +164,17 @@ dist/cjs/tasks/decisionMachine/decisionMachineRunner.cjs                      12
 dist/cjs/api/blacklistRequestInspector.cjs                                    13.10 kB │ gzip:  4.41 kB
 dist/cjs/util.cjs                                                             13.15 kB │ gzip:  3.26 kB
 dist/cjs/api/verify.cjs                                                       16.79 kB │ gzip:  2.93 kB
-dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.58 kB │ gzip:  4.72 kB
+dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.65 kB │ gzip:  4.74 kB
 dist/cjs/tasks/frictionless/frictionlessTasks.cjs                             20.69 kB │ gzip:  5.49 kB
-dist/cjs/tasks/captchaManager.cjs                                             22.43 kB │ gzip:  6.38 kB
+dist/cjs/tasks/captchaManager.cjs                                             23.52 kB │ gzip:  6.78 kB
 dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs                                  24.03 kB │ gzip:  5.15 kB
 dist/cjs/tasks/powCaptcha/powTasks.cjs                                        24.84 kB │ gzip:  5.97 kB
 dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs                                 27.96 kB │ gzip:  6.37 kB
 dist/cjs/tasks/detection/decodeBehavior.cjs                                   32.24 kB │ gzip: 10.32 kB
 dist/cjs/tasks/detection/decodeSimd.cjs                                       36.03 kB │ gzip: 11.96 kB
-dist/cjs/tasks/detection/decodePayload.cjs                                    54.84 kB │ gzip: 17.78 kB
+dist/cjs/tasks/detection/decodePayload.cjs                                    53.96 kB │ gzip: 18.08 kB
 
-✓ built in 203ms
+✓ built in 173ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeSimd.js

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/provider@5.10.1 build:tsc
+> @prosopo/provider@5.10.2 build:tsc
 > tsc --build --verbose
 
-1:49:47 PM - Projects in this build: 
+5:39:46 AM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../util/tsconfig.json
     * ../logger/tsconfig.json
@@ -28,53 +28,53 @@
     * ../web-bot-auth/tsconfig.json
     * tsconfig.json
 
-1:49:47 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/logger.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/tests/utils/batches.unit.test.ts' is older than output '../common/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/index.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/types.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/types.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
+5:39:46 AM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/ruleRecord.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/unit/captchaLabel.unit.test.ts' is older than output '../database/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/mongoGlobalSetup.ts' is older than output '../database/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/index.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/keyring/keyring.test.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/index.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/env.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/index.ts' is older than output '../env/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/tests/env.maintenance.unit.test.ts' is older than output '../env/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/middlewares/requestLoggerMiddleware.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/errorHandler.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/dataset.unit.test.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/index.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/balancer.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/tests/productionProviderList.unit.test.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/base64.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
+5:39:47 AM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/base64.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
 
-1:49:47 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+5:39:47 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-1:49:47 PM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
+5:39:47 AM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/provider@5.10.1 build
+> @prosopo/provider@5.10.2 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/provider@5.10.1 build:cross-env
+> @prosopo/provider@5.10.2 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -63,7 +63,7 @@ ViteEsmConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 110 modules transformed.
+✓ 111 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js                                        0.04 kB │ gzip:  0.06 kB
@@ -103,6 +103,7 @@ dist/api/admin/apiRemoveAllDecisionMachinesEndpoint.js                    1.27 k
 dist/api/admin/apiRemoveDecisionMachineEndpoint.js                        1.29 kB │ gzip:  0.51 kB
 dist/tasks/dataset/datasetTasksUtils.js                                   1.30 kB │ gzip:  0.48 kB
 dist/compositeIpAddress.js                                                1.36 kB │ gzip:  0.55 kB
+dist/tasks/detection/assignSecret.js                                      1.42 kB │ gzip:  0.74 kB
 dist/utils/clientMetaData.js                                              1.42 kB │ gzip:  0.72 kB
 dist/api/admin/apiGetAllDecisionMachinesEndpoint.js                       1.48 kB │ gzip:  0.57 kB
 dist/schedulers/updateSpamEmailDomains.js                                 1.52 kB │ gzip:  0.60 kB
@@ -119,7 +120,6 @@ dist/api/handshakeTimingMiddleware.js                                     1.75 k
 dist/tasks/spam/updateSpamEmailDomains.js                                 1.87 kB │ gzip:  0.77 kB
 dist/api/captcha/signedAssetsResolver.js                                  1.89 kB │ gzip:  0.94 kB
 dist/api/admin/apiClearAllCountersEndpoint.js                             1.89 kB │ gzip:  0.76 kB
-dist/api/captcha/assignDetectorBundle.js                                  1.90 kB │ gzip:  0.84 kB
 dist/tasks/frictionless/ipMatch.js                                        1.98 kB │ gzip:  1.02 kB
 dist/migrations/frictionlessLadder.js                                     2.12 kB │ gzip:  0.93 kB
 dist/tasks/puzzle/stratifiedSampler.js                                    2.14 kB │ gzip:  1.07 kB
@@ -132,10 +132,11 @@ dist/utils/dns.js                                                         2.36 k
 dist/api/admin/apiDnsEventEndpoint.js                                     2.43 kB │ gzip:  0.96 kB
 dist/api/captcha/checkSpamEmail.js                                        2.47 kB │ gzip:  0.91 kB
 dist/tasks/puzzle/puzzleDifficulty.js                                     2.50 kB │ gzip:  1.09 kB
-dist/tasks/detection/getBotScore.js                                       2.52 kB │ gzip:  0.94 kB
+dist/tasks/detection/getBotScore.js                                       2.55 kB │ gzip:  0.95 kB
 dist/api/captcha/submitPuzzleCaptchaSolution.js                           2.55 kB │ gzip:  0.96 kB
 dist/api/forwardVerify.js                                                 2.59 kB │ gzip:  1.10 kB
 dist/api/captcha/submitImageCaptchaSolution.js                            2.59 kB │ gzip:  1.00 kB
+dist/api/captcha/assignDetectorBundle.js                                  2.69 kB │ gzip:  1.11 kB
 dist/api/admin/apiAdminRoutesProvider.js                                  2.78 kB │ gzip:  0.55 kB
 dist/index.js                                                             2.92 kB │ gzip:  0.80 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.js          3.39 kB │ gzip:  1.32 kB
@@ -158,7 +159,7 @@ dist/api/captcha/getPuzzleCaptchaChallenge.js                             6.84 k
 dist/api/healthzGeo.js                                                    6.86 kB │ gzip:  2.68 kB
 dist/tasks/spam/checkTrafficFilter.js                                     7.16 kB │ gzip:  2.45 kB
 dist/api/metrics.js                                                       7.36 kB │ gzip:  2.19 kB
-dist/tasks/detection/bundlePool.js                                        8.30 kB │ gzip:  3.21 kB
+dist/tasks/detection/bundlePool.js                                        8.46 kB │ gzip:  3.25 kB
 dist/api/captcha/submitPoWCaptchaSolution.js                              9.02 kB │ gzip:  2.76 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js       9.36 kB │ gzip:  1.80 kB
 dist/api/startProviderApi.js                                              9.93 kB │ gzip:  3.42 kB
@@ -167,17 +168,17 @@ dist/tasks/decisionMachine/decisionMachineRunner.js                      11.93 k
 dist/api/blacklistRequestInspector.js                                    12.46 kB │ gzip:  4.37 kB
 dist/util.js                                                             12.47 kB │ gzip:  3.20 kB
 dist/api/verify.js                                                       15.12 kB │ gzip:  2.82 kB
-dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              19.06 kB │ gzip:  4.61 kB
-dist/tasks/frictionless/frictionlessTasks.js                             20.10 kB │ gzip:  5.46 kB
-dist/tasks/captchaManager.js                                             21.92 kB │ gzip:  6.32 kB
+dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              19.13 kB │ gzip:  4.63 kB
+dist/tasks/frictionless/frictionlessTasks.js                             20.12 kB │ gzip:  5.46 kB
 dist/tasks/puzzleCaptcha/puzzleTasks.js                                  22.62 kB │ gzip:  5.10 kB
+dist/tasks/captchaManager.js                                             23.01 kB │ gzip:  6.72 kB
 dist/tasks/powCaptcha/powTasks.js                                        23.47 kB │ gzip:  5.93 kB
 dist/tasks/imgCaptcha/imgCaptchaTasks.js                                 26.44 kB │ gzip:  6.31 kB
 dist/tasks/detection/decodeBehavior.js                                   32.26 kB │ gzip: 10.34 kB
 dist/tasks/detection/decodeSimd.js                                       36.06 kB │ gzip: 12.00 kB
-dist/tasks/detection/decodePayload.js                                    54.75 kB │ gzip: 17.77 kB
+dist/tasks/detection/decodePayload.js                                    53.87 kB │ gzip: 18.06 kB
 
-✓ built in 196ms
+✓ built in 170ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeSimd.js

package/CHANGELOG.md

@@ -1,5 +1,100 @@
 # @prosopo/provider
 
+## 5.10.2
+### Patch Changes
+
+- 98ab052: Serve a repeat caller the same detector bundle.
+  
+  `/detector/assign` picked a bundle at random on every request. The provider now
+  records which bundle it served a caller and returns that one for a bounded
+  period, so a returning visitor gets a stable bundle instead of a fresh draw each
+  time. Any bundle performs identically, so this is not visible to users. If Redis
+  cannot answer, assign falls back to the previous behaviour rather than failing.
+  
+  Also fixes the `assignDetectorBundle` tests, which were failing on main and had
+  gone unnoticed because the file was named `*.test.ts` while CI only runs
+  `*.unit.test.ts`. Renamed so it runs, and replaced the mock that
+  `clearAllMocks` was silently emptying.
+- 028a158: Add optional field `dz` to detector payload
+- 1f0598c: Derive the detector bundle for a caller instead of storing it.
+  
+  `assignDetectorBundle` now picks the bundle with a keyed hash of the caller's
+  address, using a per-provider secret kept on the pool volume. Same caller, same
+  bundle, with nothing recorded and nothing to expire — which also means the
+  result no longer changes when the cache is unavailable.
+  
+  Replaces the Redis client → bundle entry added in the previous patch, so
+  `bindDetectorBundleToClient` and its TTL constant are gone.
+- 3958046: Keep a detector bundle binding for as long as its payload is accepted
+  
+  The `detectorSessionId → bundleId` binding held the only key able to read a
+  detector payload, and expired after 60 seconds. The frictionless flow accepts a
+  payload for ten minutes (`DEFAULT_MAX_TIMESTAMP_AGE`). For nine of those ten
+  minutes the provider would therefore accept a payload it had already discarded
+  the means to decrypt: `resolveDecryptAttempts` returns an empty key list, the
+  decrypt loop never runs, the score is forced to 1 and the caller is challenged
+  despite nothing having been measured about them.
+  
+  Sixty seconds is ample for the assign → submit gap in the normal case — it is
+  around 1.5s — but it only has to stall once to be lost, and a backgrounded
+  mobile tab is enough.
+  
+  The two values are now one value. `DEFAULT_MAX_TIMESTAMP_AGE` moves from a
+  private constant in `frictionlessTasks` to `@prosopo/types`, the only package
+  both the provider and the database can see, and `DETECTOR_BUNDLE_TTL_SECONDS` is
+  derived from it instead of being written down a second time. A unit test pins
+  the relationship so they cannot drift apart again.
+  
+  The TTL cannot now outlive the payload-age check, so this does not widen the
+  window in which any payload is usable. Bundle selection is unaffected: which
+  bundle a caller receives is derived from their IP and a server secret, not from
+  this binding's lifetime.
+- 0cdf286: Log why a detector bundle could not be resolved
+  
+  `resolveBundleByDetectorSession` returns undefined on three unrelated
+  conditions: the caller sent no detector session id, the
+  `detectorSessionId → bundleId` Redis binding was absent or had expired, or the
+  binding named a bundle this provider no longer holds in its pool.
+  
+  All three surface downstream as the same thing — `resolveDecryptAttempts`
+  hands back an empty key list, the decrypt loop never runs, and the score is
+  forced to 1 with `DECRYPTION_FAILED`, so the caller is challenged despite
+  nothing having been measured about it. They need different fixes, but nothing
+  recorded which one had happened: the only line carrying that detail logged at
+  `debug`, which is below the level aggregated log search runs at, and it could
+  not have separated them anyway because `resolveDecryptAttempts` omits the
+  `bundleId` whenever the attempt list is empty.
+  
+  Adds a single `info` line, `"Detector bundle not resolved"`, carrying a `cause`
+  of `noDetectorSession`, `noBinding` or `bundleNotInPool`, plus the `bundleId`
+  in the last case. It is emitted only on the failure path, so there is no cost
+  on the hot path, and the pool lookup now happens after the binding check rather
+  than before it.
+  
+  No behavioural change — the same conditions return undefined as before.
+- ea4e6aa: Persist the optional `cg` and `sm` session fields, which were not being written.
+- 028a158: Add optional session field `dz`.
+- Updated dependencies [98ab052]
+- Updated dependencies [028a158]
+- Updated dependencies [1f0598c]
+- Updated dependencies [3958046]
+- Updated dependencies [864ddde]
+- Updated dependencies [028a158]
+  - @prosopo/database@4.0.33
+  - @prosopo/types-database@5.5.3
+  - @prosopo/types@5.8.3
+  - @prosopo/locale@3.4.2
+  - @prosopo/env@3.6.56
+  - @prosopo/types-env@2.11.2
+  - @prosopo/api@4.2.3
+  - @prosopo/api-express-router@3.1.87
+  - @prosopo/common@3.1.55
+  - @prosopo/datasets@3.1.82
+  - @prosopo/ipinfo@0.4.2
+  - @prosopo/keyring@2.9.89
+  - @prosopo/load-balancer@2.10.44
+  - @prosopo/user-access-policy@3.14.3
+
 ## 5.10.1
 ### Patch Changes
 

package/dist/api/captcha/assignDetectorBundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assignDetectorBundle.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAgBpC,mBAAmB,WAEjC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,SACN,YAAY,KACjB,OAAO,CAAC,QAAQ,CAAC;AALrB,wBAwDG"}
+{"version":3,"file":"assignDetectorBundle.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BA4BpC,mBAAmB,WAEjC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,SACN,YAAY,KACjB,OAAO,CAAC,QAAQ,CAAC;AALrB,wBA+DG"}

package/dist/api/captcha/assignDetectorBundle.js

@@ -1,19 +1,27 @@
-import { getDetectorBundlePool } from "../../tasks/detection/bundlePool.js";
+import { getDetectorBundlePool, getDetectorBundlePoolDir } from "../../tasks/detection/bundlePool.js";
 import { Tasks } from "../../tasks/tasks.js";
+import { getAssignSecret } from "../../tasks/detection/assignSecret.js";
+import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
 import { ApiParams } from "@prosopo/types";
+import { createHmac } from "node:crypto";
 import { v4 } from "uuid";
 //#region src/api/captcha/assignDetectorBundle.ts
+/** Pool position for this caller: a keyed hash of their address. */
+var clientIndex = (ip, secret) => createHmac("sha256", secret).update(ip).digest().readUIntBE(0, 6);
 /**
 * Assigns a precomputed detector bundle for this detection session.
 *
-* When the provider has a non-empty pool it picks a random bundle, records the
-* (short-TTL) `detectorSessionId → bundleId` binding in Redis, and returns the
-* obfuscated detector script inline.
+* The bundle is derived from the caller's address and this provider's secret,
+* so a repeat caller keeps getting the same one with nothing stored and nothing
+* to expire. Any bundle detects equally well, so this is not visible to users.
 *
-* When it cannot (no pool loaded, or Redis unavailable so the binding could not
-* be persisted) it returns `useProviderBundle: false`. There is NO bundled
-* detector and no legacy key pool to fall back to — the client sends an empty
-* token on the frictionless hop and the provider decides what to serve.
+* The `detectorSessionId → bundleId` binding is still written to Redis; the
+* decrypt side resolves the session's bundle from it on the next hop.
+*
+* Returns `useProviderBundle: false` when there is no pool, no secret, or Redis
+* could not store that binding. There is NO bundled detector to fall back to —
+* the client sends an empty token on the frictionless hop and the provider
+* decides what to serve.
 */
 var assignDetectorBundle_default = (env) => async (req, res, _next) => {
 	try {
@@ -23,7 +31,17 @@ var assignDetectorBundle_default = (env) => async (req, res, _next) => {
 		};
 		const pool = getDetectorBundlePool();
 		if (!pool || pool.size() === 0) return res.json(noBundle);
-		const { bundleId, bundle } = pool.pickRandom();
+		const secret = getAssignSecret(getDetectorBundlePoolDir(), {
+			info: (msg, data) => req.logger.info(() => ({
+				msg,
+				data
+			})),
+			warn: (msg, data) => req.logger.warn(() => ({
+				msg,
+				data
+			}))
+		});
+		const { bundleId, bundle } = pool.at(clientIndex(normalizeRequestIp(req.ip, req.logger), secret));
 		const detectorSessionId = `det-${v4()}`;
 		const writeQueue = new Tasks(env, req.logger).frictionlessManager.writeQueue;
 		if (!writeQueue) return res.json(noBundle);

package/dist/api/captcha/assignDetectorBundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"assignDetectorBundle.js","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAqC,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAc7C,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,KAAmB,EACC,EAAE;IACtB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,iBAAiB,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC;QAM5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAClD,iBAAiB,EACjB,QAAQ,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI;YACnC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB;YAChD,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE;YACrC,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAGd,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,+DAA+D;YACpE,GAAG;SACH,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC;YACf,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SAC2B,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"assignDetectorBundle.js","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAqC,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EACN,qBAAqB,EACrB,wBAAwB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,MAAc,EAAU,EAAE,CAC1D,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAiBnE,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,KAAmB,EACC,EAAE;IACtB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,wBAAwB,EAAE,EAAE;YAC1D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CACnC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAC3D,CAAC;QACF,MAAM,iBAAiB,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC;QAM5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAClD,iBAAiB,EACjB,QAAQ,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI;YACnC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB;YAChD,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE;YACrC,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAGd,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,+DAA+D;YACpE,GAAG;SACH,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC;YACf,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SAC2B,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/assignDetectorBundle.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assignDetectorBundle.unit.test.d.ts.map

package/dist/api/captcha/assignDetectorBundle.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignDetectorBundle.unit.test.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.unit.test.ts"],"names":[],"mappings":""}

package/dist/api/captcha/assignDetectorBundle.unit.test.js

@@ -0,0 +1,153 @@
+import { mkdtempSync, readFileSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { resetAssignSecretCache } from "../../tasks/detection/assignSecret.js";
+import { initDetectorBundlePool } from "../../tasks/detection/bundlePool.js";
+import assignDetectorBundle from "./assignDetectorBundle.js";
+const cacheDetectorBundle = vi.fn(async (_detectorSessionId, _bundleId) => true);
+vi.mock("../../tasks/index.js", () => ({
+    Tasks: class {
+        constructor() {
+            this.frictionlessManager = {
+                writeQueue: { cacheDetectorBundle },
+            };
+        }
+    },
+}));
+const makeReq = (ip = "203.0.113.1") => ({
+    ip,
+    body: { dapp: "site-key" },
+    logger: { warn: vi.fn(), info: vi.fn(), debug: vi.fn() },
+});
+const writePool = (dir, count) => {
+    const ids = [];
+    for (let i = 0; i < count; i++) {
+        const id = `bundle-${i}`;
+        writeFileSync(join(dir, `${id}.js`), `export default ${i};`);
+        writeFileSync(join(dir, `${id}.json`), JSON.stringify({ privateKey: `PK${i}`, innerConfig: `C${i}` }));
+        ids.push(id);
+    }
+    return ids;
+};
+const assignedBundleId = () => cacheDetectorBundle.mock.calls.at(-1)?.[1];
+const assignOnceWith = async (ip) => {
+    const r = makeRes();
+    await assignDetectorBundle(env)(makeReq(ip), r.res, next);
+    return r;
+};
+const assignOnce = async (ip) => {
+    await assignOnceWith(ip);
+};
+const makeRes = () => {
+    const json = vi.fn((body) => body);
+    return { res: { json }, json };
+};
+const env = {};
+const next = vi.fn();
+describe("assignDetectorBundle", () => {
+    let dir;
+    beforeEach(() => {
+        dir = mkdtempSync(join(tmpdir(), "assign-"));
+        cacheDetectorBundle.mockClear();
+        resetAssignSecretCache();
+    });
+    afterEach(() => {
+        rmSync(dir, { recursive: true, force: true });
+        vi.clearAllMocks();
+    });
+    it("returns useProviderBundle:false when the pool is empty", async () => {
+        initDetectorBundlePool(dir);
+        const { res, json } = makeRes();
+        await assignDetectorBundle(env)(makeReq(), res, next);
+        expect(json).toHaveBeenCalledWith({
+            useProviderBundle: false,
+            status: "ok",
+        });
+        expect(cacheDetectorBundle).not.toHaveBeenCalled();
+    });
+    it("assigns a bundle, stores the binding, and returns the script", async () => {
+        writeFileSync(join(dir, "bundle-0.js"), "export default 1;");
+        writeFileSync(join(dir, "bundle-0.json"), JSON.stringify({ privateKey: "PK", innerConfig: "C" }));
+        initDetectorBundlePool(dir);
+        const { res, json } = makeRes();
+        await assignDetectorBundle(env)(makeReq(), res, next);
+        expect(cacheDetectorBundle).toHaveBeenCalledTimes(1);
+        const [detSessionId, bundleId] = cacheDetectorBundle.mock.calls[0];
+        expect(bundleId).toBe("bundle-0");
+        expect(detSessionId).toMatch(/^det-/);
+        const body = json.mock.calls[0]?.[0];
+        expect(body.useProviderBundle).toBe(true);
+        expect(body.detectorScript).toBe("export default 1;");
+        expect(body.detectorSessionId).toBe(detSessionId);
+    });
+    it("falls back to bundled when the Redis binding cannot be stored", async () => {
+        writeFileSync(join(dir, "bundle-0.js"), "JS");
+        writeFileSync(join(dir, "bundle-0.json"), JSON.stringify({ privateKey: "PK", innerConfig: "C" }));
+        initDetectorBundlePool(dir);
+        cacheDetectorBundle.mockResolvedValueOnce(false);
+        const { res, json } = makeRes();
+        await assignDetectorBundle(env)(makeReq(), res, next);
+        expect(json).toHaveBeenCalledWith({
+            useProviderBundle: false,
+            status: "ok",
+        });
+    });
+    it("serves one caller the same bundle across many assigns", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        const served = new Set();
+        for (let i = 0; i < 200; i++) {
+            await assignOnce();
+            served.add(assignedBundleId());
+        }
+        expect(served.size).toBe(1);
+    });
+    it("keeps serving that bundle after the secret is re-read from disk", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        await assignOnce();
+        const first = assignedBundleId();
+        resetAssignSecretCache();
+        await assignOnce();
+        expect(assignedBundleId()).toBe(first);
+    });
+    it("returns the bundle body matching the id it recorded", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        const { json } = await assignOnceWith();
+        const body = json.mock.calls[0]?.[0];
+        expect(body.detectorScript).toBe(`export default ${assignedBundleId().replace("bundle-", "")};`);
+    });
+    it("spreads distinct callers across the pool", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        const served = new Set();
+        for (let i = 0; i < 60; i++) {
+            await assignOnce(`203.0.113.${i}`);
+            served.add(assignedBundleId());
+        }
+        expect(served.size).toBeGreaterThan(1);
+    });
+    it("still assigns when Redis holds no client state", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        const { json } = await assignOnceWith();
+        const body = json.mock.calls[0]?.[0];
+        expect(body.useProviderBundle).toBe(true);
+        expect(assignedBundleId()).toMatch(/^bundle-\d+$/);
+    });
+    it("writes the secret 0600 and leaves it alone on reload", async () => {
+        writePool(dir, 50);
+        initDetectorBundlePool(dir);
+        await assignOnce();
+        const secretPath = join(dir, ".assign-secret");
+        const first = readFileSync(secretPath);
+        expect(first.length).toBe(32);
+        expect(statSync(secretPath).mode & 0o777).toBe(0o600);
+        resetAssignSecretCache();
+        await assignOnce();
+        expect(readFileSync(secretPath)).toEqual(first);
+    });
+});
+//# sourceMappingURL=assignDetectorBundle.unit.test.js.map

package/dist/api/captcha/assignDetectorBundle.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assignDetectorBundle.unit.test.js","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,WAAW,EACX,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,oBAAoB,MAAM,2BAA2B,CAAC;AAE7D,MAAM,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAChC,KAAK,EAAE,kBAA0B,EAAE,SAAiB,EAAE,EAAE,CAAC,IAAI,CAC7D,CAAC;AAMF,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,KAAK,EAAE;QAAA;YACN,wBAAmB,GAAG;gBACrB,UAAU,EAAE,EAAE,mBAAmB,EAAE;aACnC,CAAC;QACH,CAAC;KAAA;CACD,CAAC,CAAC,CAAC;AAEJ,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,aAAa,EAA8B,EAAE,CAClE,CAAC;IACA,EAAE;IACF,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;IAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;CACxD,CAA0C,CAAC;AAG7C,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,KAAa,EAAY,EAAE;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC7D,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EACvB,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAC9D,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAGF,MAAM,gBAAgB,GAAG,GAAW,EAAE,CACrC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC;AAEtD,MAAM,cAAc,GAAG,KAAK,EAC3B,EAAW,EACkD,EAAE;IAC/D,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC;AACV,CAAC,CAAC;AACF,MAAM,UAAU,GAAG,KAAK,EAAE,EAAW,EAAiB,EAAE;IACvD,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,GAAsD,EAAE;IACvE,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAyB,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,EAAoC,CAAC;AACjD,MAAM,IAAI,GAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;AAEnC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,IAAI,GAAW,CAAC;IAEhB,UAAU,CAAC,GAAG,EAAE;QACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7C,mBAAmB,CAAC,SAAS,EAAE,CAAC;QAChC,sBAAsB,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;QAEhC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACjC,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC7D,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CACtD,CAAC;QACF,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;QAEhC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,CAAC,mBAAmB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAGhE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAIlC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC9E,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9C,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CACtD,CAAC;QACF,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,mBAAmB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;QAEhC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtD,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC;YACjC,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,IAAI;SACZ,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAChF,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,UAAU,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QAGjC,sBAAsB,EAAE,CAAC;QACzB,MAAM,UAAU,EAAE,CAAC;QAEnB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAA+B,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAC/B,kBAAkB,gBAAgB,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACzD,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAE/D,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAmC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAE5B,MAAM,UAAU,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtD,sBAAsB,EAAE,CAAC;QACzB,MAAM,UAAU,EAAE,CAAC;QACnB,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}