@prosopo/provider 5.10.3 → 5.11.0

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/provider@5.10.3 build:cjs
+> @prosopo/provider@5.11.0 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -29,6 +29,7 @@ ViteCommonJSConfig: .
     '/home/runner/work/captcha/captcha/packages/web-bot-auth/tsconfig.json'
   ]
 }
+The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
 {
   externals: [
     '@prosopo/api-route',
@@ -55,11 +56,10 @@ ViteCommonJSConfig: .
     '@prosopo/web-bot-auth'
   ]
 }
-The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 111 modules transformed.
+✓ 112 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/cjs/tasks/index.cjs                                                       0.08 kB │ gzip:  0.07 kB
@@ -100,6 +100,7 @@ dist/cjs/pairs.cjs                                                             1
 dist/cjs/tasks/dataset/datasetTasksUtils.cjs                                   1.42 kB │ gzip:  0.49 kB
 dist/cjs/utils/clientMetaData.cjs                                              1.48 kB │ gzip:  0.72 kB
 dist/cjs/tasks/detection/assignSecret.cjs                                      1.48 kB │ gzip:  0.75 kB
+dist/cjs/api/assetDocument.cjs                                                 1.50 kB │ gzip:  0.81 kB
 dist/cjs/compositeIpAddress.cjs                                                1.55 kB │ gzip:  0.57 kB
 dist/cjs/api/admin/apiGetAllDecisionMachinesEndpoint.cjs                       1.59 kB │ gzip:  0.60 kB
 dist/cjs/schedulers/updateSpamEmailDomains.cjs                                 1.64 kB │ gzip:  0.62 kB
@@ -117,22 +118,22 @@ dist/cjs/api/captcha/signedAssetsResolver.cjs                                  1
 dist/cjs/api/admin/apiClearAllCountersEndpoint.cjs                             2.01 kB │ gzip:  0.78 kB
 dist/cjs/tasks/frictionless/ipMatch.cjs                                        2.03 kB │ gzip:  1.03 kB
 dist/cjs/tasks/spam/updateSpamEmailDomains.cjs                                 2.12 kB │ gzip:  0.85 kB
-dist/cjs/tasks/frictionless/routingMachine.cjs                                 2.17 kB │ gzip:  0.91 kB
 dist/cjs/migrations/frictionlessLadder.cjs                                     2.19 kB │ gzip:  0.95 kB
 dist/cjs/tasks/puzzle/stratifiedSampler.cjs                                    2.20 kB │ gzip:  1.08 kB
+dist/cjs/tasks/frictionless/routingMachine.cjs                                 2.21 kB │ gzip:  0.93 kB
 dist/cjs/tasks/frictionless/frictionlessTasksUtils.cjs                         2.21 kB │ gzip:  1.10 kB
 dist/cjs/tasks/captchaTypeSelection.cjs                                        2.44 kB │ gzip:  1.04 kB
 dist/cjs/api/admin/apiDnsEventEndpoint.cjs                                     2.59 kB │ gzip:  1.00 kB
 dist/cjs/utils/dns.cjs                                                         2.66 kB │ gzip:  1.02 kB
 dist/cjs/api/forwardVerify.cjs                                                 2.66 kB │ gzip:  1.12 kB
 dist/cjs/tasks/puzzle/puzzleDifficulty.cjs                                     2.66 kB │ gzip:  1.10 kB
-dist/cjs/api/public.cjs                                                        2.67 kB │ gzip:  1.05 kB
-dist/cjs/tasks/detection/getBotScore.cjs                                       2.67 kB │ gzip:  0.97 kB
 dist/cjs/api/captcha/checkSpamEmail.cjs                                        2.73 kB │ gzip:  0.95 kB
 dist/cjs/api/captcha/submitPuzzleCaptchaSolution.cjs                           2.77 kB │ gzip:  0.99 kB
-dist/cjs/api/captcha/assignDetectorBundle.cjs                                  2.90 kB │ gzip:  1.15 kB
+dist/cjs/api/public.cjs                                                        2.79 kB │ gzip:  1.07 kB
 dist/cjs/api/captcha/maintenanceModeResponses.cjs                              2.91 kB │ gzip:  0.77 kB
 dist/cjs/api/captcha/submitImageCaptchaSolution.cjs                            2.93 kB │ gzip:  1.03 kB
+dist/cjs/tasks/detection/getBotScore.cjs                                       3.35 kB │ gzip:  1.30 kB
+dist/cjs/api/captcha/assignDetectorBundle.cjs                                  3.63 kB │ gzip:  1.37 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.cjs          3.66 kB │ gzip:  1.35 kB
 dist/cjs/api/admin/apiAdminRoutesProvider.cjs                                  3.67 kB │ gzip:  0.62 kB
 dist/cjs/api/rawTlsSignalsMiddleware.cjs                                       3.84 kB │ gzip:  1.16 kB
@@ -155,8 +156,8 @@ dist/cjs/api/captcha/getImageCaptchaChallenge.cjs                              7
 dist/cjs/tasks/spam/checkTrafficFilter.cjs                                     7.47 kB │ gzip:  2.48 kB
 dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs                             7.56 kB │ gzip:  2.03 kB
 dist/cjs/api/metrics.cjs                                                       7.96 kB │ gzip:  2.23 kB
-dist/cjs/tasks/detection/bundlePool.cjs                                        9.12 kB │ gzip:  3.34 kB
-dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs                              9.54 kB │ gzip:  2.81 kB
+dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs                              9.12 kB │ gzip:  2.71 kB
+dist/cjs/tasks/detection/bundlePool.cjs                                        9.24 kB │ gzip:  3.37 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.cjs      10.33 kB │ gzip:  1.82 kB
 dist/cjs/api/startProviderApi.cjs                                             11.62 kB │ gzip:  3.70 kB
 dist/cjs/tasks/client/clientTasks.cjs                                         11.73 kB │ gzip:  3.04 kB
@@ -164,17 +165,17 @@ dist/cjs/tasks/decisionMachine/decisionMachineRunner.cjs                      12
 dist/cjs/api/blacklistRequestInspector.cjs                                    13.10 kB │ gzip:  4.41 kB
 dist/cjs/util.cjs                                                             13.15 kB │ gzip:  3.26 kB
 dist/cjs/api/verify.cjs                                                       16.79 kB │ gzip:  2.93 kB
-dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.65 kB │ gzip:  4.74 kB
-dist/cjs/tasks/frictionless/frictionlessTasks.cjs                             20.75 kB │ gzip:  5.51 kB
-dist/cjs/tasks/captchaManager.cjs                                             23.59 kB │ gzip:  6.81 kB
-dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs                                  24.03 kB │ gzip:  5.15 kB
-dist/cjs/tasks/powCaptcha/powTasks.cjs                                        24.84 kB │ gzip:  5.97 kB
-dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs                                 27.96 kB │ gzip:  6.37 kB
+dist/cjs/tasks/frictionless/frictionlessTasks.cjs                             18.37 kB │ gzip:  4.89 kB
+dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.05 kB │ gzip:  4.59 kB
+dist/cjs/tasks/captchaManager.cjs                                             22.28 kB │ gzip:  6.57 kB
+dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs                                  24.05 kB │ gzip:  5.15 kB
+dist/cjs/tasks/powCaptcha/powTasks.cjs                                        24.93 kB │ gzip:  5.99 kB
+dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs                                 27.98 kB │ gzip:  6.37 kB
 dist/cjs/tasks/detection/decodeBehavior.cjs                                   32.24 kB │ gzip: 10.32 kB
 dist/cjs/tasks/detection/decodeSimd.cjs                                       36.03 kB │ gzip: 11.96 kB
-dist/cjs/tasks/detection/decodePayload.cjs                                    54.63 kB │ gzip: 19.30 kB
+dist/cjs/tasks/detection/decodePayload.cjs                                    70.12 kB │ gzip: 22.57 kB
 
-✓ built in 180ms
+✓ built in 202ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeSimd.js

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/provider@5.10.3 build:tsc
+> @prosopo/provider@5.11.0 build:tsc
 > tsc --build --verbose
 
-1:05:09 PM - Projects in this build: 
+2:43:22 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../util/tsconfig.json
     * ../logger/tsconfig.json
@@ -28,53 +28,53 @@
     * ../web-bot-auth/tsconfig.json
     * tsconfig.json
 
-1:05:09 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/logger.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/tests/apiRoute.unit.test.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+2:43:22 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/tests/utils/batches.unit.test.ts' is older than output '../common/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/utils/batches.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/IpInfoService.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/index.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/tests/testRedisConnection.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/tests/apiHarness.ts' is older than output '../api/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/types/schemas.test.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/mongoGlobalSetup.ts' is older than output '../database/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/unit/captchaLabel.unit.test.ts' is older than output '../database/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/pair/decode.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/pair/decode.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/tests/typesEnv.test-d.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/env.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/tests/env.maintenance.unit.test.ts' is older than output '../env/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/env.ts' is older than output '../env/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/errorHandler.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/middlewares/requestLoggerMiddleware.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/mocks/data/captchas.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/index.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/tests/productionProviderList.unit.test.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/tests/productionProviderList.unit.test.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/base64.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
+2:43:23 PM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/verify.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
 
-1:05:09 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+2:43:23 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-1:05:09 PM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
+2:43:23 PM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/provider@5.10.3 build
+> @prosopo/provider@5.11.0 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/provider@5.10.3 build:cross-env
+> @prosopo/provider@5.11.0 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -63,7 +63,7 @@ ViteEsmConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 111 modules transformed.
+✓ 112 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js                                        0.04 kB │ gzip:  0.06 kB
@@ -102,6 +102,7 @@ dist/api/admin/apiGetDecisionMachineEndpoint.js                           1.26 k
 dist/api/admin/apiRemoveAllDecisionMachinesEndpoint.js                    1.27 kB │ gzip:  0.51 kB
 dist/api/admin/apiRemoveDecisionMachineEndpoint.js                        1.29 kB │ gzip:  0.51 kB
 dist/tasks/dataset/datasetTasksUtils.js                                   1.30 kB │ gzip:  0.48 kB
+dist/api/assetDocument.js                                                 1.36 kB │ gzip:  0.75 kB
 dist/compositeIpAddress.js                                                1.36 kB │ gzip:  0.55 kB
 dist/tasks/detection/assignSecret.js                                      1.42 kB │ gzip:  0.74 kB
 dist/utils/clientMetaData.js                                              1.42 kB │ gzip:  0.72 kB
@@ -123,23 +124,23 @@ dist/api/admin/apiClearAllCountersEndpoint.js                             1.89 k
 dist/tasks/frictionless/ipMatch.js                                        1.98 kB │ gzip:  1.02 kB
 dist/migrations/frictionlessLadder.js                                     2.12 kB │ gzip:  0.93 kB
 dist/tasks/puzzle/stratifiedSampler.js                                    2.14 kB │ gzip:  1.07 kB
-dist/tasks/frictionless/routingMachine.js                                 2.16 kB │ gzip:  0.91 kB
 dist/tasks/frictionless/frictionlessTasksUtils.js                         2.16 kB │ gzip:  1.09 kB
 dist/api/captcha/maintenanceModeResponses.js                              2.16 kB │ gzip:  0.73 kB
+dist/tasks/frictionless/routingMachine.js                                 2.20 kB │ gzip:  0.93 kB
 dist/tasks/captchaTypeSelection.js                                        2.22 kB │ gzip:  1.03 kB
-dist/api/public.js                                                        2.36 kB │ gzip:  0.96 kB
 dist/utils/dns.js                                                         2.36 kB │ gzip:  0.95 kB
 dist/api/admin/apiDnsEventEndpoint.js                                     2.43 kB │ gzip:  0.96 kB
+dist/api/public.js                                                        2.45 kB │ gzip:  0.98 kB
 dist/api/captcha/checkSpamEmail.js                                        2.47 kB │ gzip:  0.91 kB
 dist/tasks/puzzle/puzzleDifficulty.js                                     2.50 kB │ gzip:  1.09 kB
 dist/api/captcha/submitPuzzleCaptchaSolution.js                           2.55 kB │ gzip:  0.96 kB
 dist/api/forwardVerify.js                                                 2.59 kB │ gzip:  1.10 kB
 dist/api/captcha/submitImageCaptchaSolution.js                            2.59 kB │ gzip:  1.00 kB
-dist/tasks/detection/getBotScore.js                                       2.59 kB │ gzip:  0.95 kB
-dist/api/captcha/assignDetectorBundle.js                                  2.69 kB │ gzip:  1.11 kB
 dist/api/admin/apiAdminRoutesProvider.js                                  2.78 kB │ gzip:  0.55 kB
 dist/index.js                                                             2.92 kB │ gzip:  0.80 kB
+dist/tasks/detection/getBotScore.js                                       3.27 kB │ gzip:  1.29 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.js          3.39 kB │ gzip:  1.32 kB
+dist/api/captcha/assignDetectorBundle.js                                  3.40 kB │ gzip:  1.34 kB
 dist/api/domainMiddleware.js                                              3.52 kB │ gzip:  1.22 kB
 dist/api/rawTlsSignalsMiddleware.js                                       3.69 kB │ gzip:  1.13 kB
 dist/tasks/spam/evaluateEmailSpamRules.js                                 3.84 kB │ gzip:  1.59 kB
@@ -159,8 +160,8 @@ dist/api/captcha/getPuzzleCaptchaChallenge.js                             6.84 k
 dist/api/healthzGeo.js                                                    6.86 kB │ gzip:  2.68 kB
 dist/tasks/spam/checkTrafficFilter.js                                     7.16 kB │ gzip:  2.45 kB
 dist/api/metrics.js                                                       7.36 kB │ gzip:  2.19 kB
-dist/tasks/detection/bundlePool.js                                        8.69 kB │ gzip:  3.30 kB
-dist/api/captcha/submitPoWCaptchaSolution.js                              9.02 kB │ gzip:  2.76 kB
+dist/api/captcha/submitPoWCaptchaSolution.js                              8.60 kB │ gzip:  2.66 kB
+dist/tasks/detection/bundlePool.js                                        8.80 kB │ gzip:  3.32 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js       9.36 kB │ gzip:  1.80 kB
 dist/api/startProviderApi.js                                              9.93 kB │ gzip:  3.42 kB
 dist/tasks/client/clientTasks.js                                         11.27 kB │ gzip:  3.00 kB
@@ -168,17 +169,17 @@ dist/tasks/decisionMachine/decisionMachineRunner.js                      12.19 k
 dist/api/blacklistRequestInspector.js                                    12.46 kB │ gzip:  4.37 kB
 dist/util.js                                                             12.47 kB │ gzip:  3.20 kB
 dist/api/verify.js                                                       15.12 kB │ gzip:  2.82 kB
-dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              19.13 kB │ gzip:  4.63 kB
-dist/tasks/frictionless/frictionlessTasks.js                             20.18 kB │ gzip:  5.48 kB
-dist/tasks/puzzleCaptcha/puzzleTasks.js                                  22.62 kB │ gzip:  5.10 kB
-dist/tasks/captchaManager.js                                             23.08 kB │ gzip:  6.74 kB
-dist/tasks/powCaptcha/powTasks.js                                        23.47 kB │ gzip:  5.93 kB
-dist/tasks/imgCaptcha/imgCaptchaTasks.js                                 26.44 kB │ gzip:  6.31 kB
+dist/tasks/frictionless/frictionlessTasks.js                             17.80 kB │ gzip:  4.86 kB
+dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              18.54 kB │ gzip:  4.48 kB
+dist/tasks/captchaManager.js                                             21.77 kB │ gzip:  6.50 kB
+dist/tasks/puzzleCaptcha/puzzleTasks.js                                  22.65 kB │ gzip:  5.11 kB
+dist/tasks/powCaptcha/powTasks.js                                        23.55 kB │ gzip:  5.95 kB
+dist/tasks/imgCaptcha/imgCaptchaTasks.js                                 26.47 kB │ gzip:  6.31 kB
 dist/tasks/detection/decodeBehavior.js                                   32.26 kB │ gzip: 10.34 kB
 dist/tasks/detection/decodeSimd.js                                       36.06 kB │ gzip: 12.00 kB
-dist/tasks/detection/decodePayload.js                                    54.54 kB │ gzip: 19.29 kB
+dist/tasks/detection/decodePayload.js                                    70.03 kB │ gzip: 22.55 kB
 
-✓ built in 152ms
+✓ built in 174ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeSimd.js

package/CHANGELOG.md

@@ -1,5 +1,91 @@
 # @prosopo/provider
 
+## 5.11.0
+### Minor Changes
+
+- a606f54: Detector signals now travel in a single open field, `d`, instead of one named
+  field each.
+  
+  Previously every signal the detector reported needed adding by hand in about a
+  dozen places — the decoder, two type files, the Mongoose schema, the read
+  projection, the session write path, the escalation copy, and each machine's
+  input — and missing any one of them dropped the signal with no error. Signals
+  were in fact being dropped that way: one was persisted but never reached a
+  decision machine at all, and three more were lost whenever a user was escalated
+  from PoW to another challenge.
+  
+  Now the provider carries whatever the detector reported without knowing what it
+  is, and hands it to decision and routing machines as `input.d`. A rule can read
+  a signal that no release of `@prosopo/types` or `@prosopo/provider` has ever
+  heard of, so adding one no longer requires a release of either. Values keep
+  their types: a boolean arrives as a boolean and a number as a number.
+  
+  The bag is client-controlled data that gets persisted, so it is sanitised and
+  capped on ingress — key names Mongo cannot store are dropped, values that are
+  not JSON are dropped, and there are limits on key count, string length, array
+  length, nesting depth and total size.
+  
+  Two things to note when deploying. Sessions written before this change carry
+  the old named fields and no `d`, so queries and dashboards that read those
+  fields need a `d.` prefix; the sessions collection expires after a day, so the
+  overlap is short. And the sparse session index moves to a dotted path inside
+  the bag.
+- 0f23010: Correlate captcha sessions with Prosopo Protect sessions on sites that run both.
+  
+  Protect's challenge page already renders the widget with `data-sessionid=<its session id>`, so captchas served from the interstitial can be matched back to the Protect session. A widget the site embeds itself — on its own pages — had no way to know that id, so those sessions could not be matched to anything.
+  
+  The widget now falls back to reading Protect's session id from the page (`window.prosopo_protect.jti`, or the `prosopo_session` cookie Protect sets on the site's domain) when the site has not supplied a session id of its own. A session id the site does supply always wins, so nothing changes for sites that use the field themselves, and sites without Protect are unaffected. Only the id is read — the session token that shares the cookie never leaves the page.
+  
+  Two gaps in the existing field are closed alongside it: the widget now sends the session id when it first asks for a captcha rather than only when submitting a solution, and the provider records it on the session at that point. Previously a session that was allowed without a challenge, or abandoned before the user solved one, carried no session id at all. An escalated session now inherits the id from the session it escalated from.
+
+### Patch Changes
+
+- a4a71be: Regenerate the obfuscated payload decoder so it matches the payload the
+  detector now produces.
+  
+  The decoder ships as a pre-built file rather than being compiled from source
+  here, so it did not pick up the payload format change that landed alongside the
+  detector data bag. It still expected the old fixed field count, and rejected
+  every payload written in the new format — the provider then treated a perfectly
+  good detection result as an unreadable one and fell back to a challenge.
+- Updated dependencies [a606f54]
+- Updated dependencies [ce2500b]
+- Updated dependencies [0f23010]
+  - @prosopo/types@5.9.0
+  - @prosopo/types-database@5.6.0
+  - @prosopo/api@4.3.0
+  - @prosopo/api-express-router@3.1.90
+  - @prosopo/database@4.0.36
+  - @prosopo/datasets@3.1.85
+  - @prosopo/env@3.6.59
+  - @prosopo/ipinfo@0.4.5
+  - @prosopo/keyring@2.9.92
+  - @prosopo/load-balancer@2.10.47
+  - @prosopo/types-env@2.11.5
+  - @prosopo/user-access-policy@3.14.6
+
+## 5.10.4
+### Patch Changes
+
+- be25974: Two optional per-site settings are now passed through to the client. Sites that
+  do not set them are unaffected.
+- 8d158a1: Type the mocks in the provider's PoW, client, dataset and scheduler unit tests with `vi.mocked` and correctly-typed fixtures instead of `any`, so the test mocks now match the real function signatures.
+- be25974: Fixes a decoded session field that was being dropped before it reached the
+  session record.
+- Updated dependencies [be25974]
+  - @prosopo/types@5.8.5
+  - @prosopo/api@4.2.5
+  - @prosopo/api-express-router@3.1.89
+  - @prosopo/database@4.0.35
+  - @prosopo/datasets@3.1.84
+  - @prosopo/env@3.6.58
+  - @prosopo/ipinfo@0.4.4
+  - @prosopo/keyring@2.9.91
+  - @prosopo/load-balancer@2.10.46
+  - @prosopo/types-database@5.5.5
+  - @prosopo/types-env@2.11.4
+  - @prosopo/user-access-policy@3.14.5
+
 ## 5.10.3
 ### Patch Changes
 

package/dist/api/assetDocument.d.ts

@@ -0,0 +1,3 @@
+import { type Router } from "express";
+export declare function assetDocumentRouter(): Router;
+//# sourceMappingURL=assetDocument.d.ts.map

package/dist/api/assetDocument.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetDocument.d.ts","sourceRoot":"","sources":["../../src/api/assetDocument.ts"],"names":[],"mappings":"AAcA,OAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAiC/C,wBAAgB,mBAAmB,IAAI,MAAM,CAyB5C"}

package/dist/api/assetDocument.js

@@ -0,0 +1,41 @@
+import express from "express";
+//#region src/api/assetDocument.ts
+var scriptLiteral = (value) => JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e");
+var page = (inner, id) => `<!doctype html>
+<meta charset="utf-8">
+<body><script>
+var f=document.createElement('iframe');
+f.src=${scriptLiteral(inner)};
+f.onload=function(){window.top.postMessage({p:'n',i:${scriptLiteral(id)}},'*')};
+document.body.appendChild(f);
+<\/script></body>`;
+var ID_PATTERN = /^[A-Za-z0-9]{1,64}$/;
+var probeId = (raw) => "string" === typeof raw && ID_PATTERN.test(raw) ? raw : "";
+var innerUrl = (raw) => {
+	if ("string" !== typeof raw || 0 === raw.length) return;
+	try {
+		const url = new URL(raw);
+		return "http:" === url.protocol || "https:" === url.protocol ? url.href : void 0;
+	} catch {
+		return;
+	}
+};
+function assetDocumentRouter() {
+	const router = express.Router();
+	router.get(/.*/, (req, res, next) => {
+		if ("n" !== req.query.m) return next();
+		const inner = innerUrl(req.query.u);
+		if (!inner) return next();
+		const id = probeId(req.query.i);
+		res.removeHeader("X-Frame-Options");
+		res.set({
+			"Content-Type": "text/html; charset=utf-8",
+			"Cache-Control": "no-store",
+			"Content-Security-Policy": "frame-ancestors *"
+		});
+		return res.status(200).send(page(inner, id));
+	});
+	return router;
+}
+//#endregion
+export { assetDocumentRouter };

package/dist/api/assetDocument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assetDocument.js","sourceRoot":"","sources":["../../src/api/assetDocument.ts"],"names":[],"mappings":"AAcA,OAAO,OAAwB,MAAM,SAAS,CAAC;AAE/C,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAEzE,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAU,EAAU,EAAE,CAAC;;;;QAI5C,aAAa,CAAC,KAAK,CAAC;sDAC0B,aAAa,CAAC,EAAE,CAAC;;iBAEtD,CAAC;AAElB,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAU,EAAE,CACxC,QAAQ,KAAK,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAE5D,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAsB,EAAE;IACrD,IAAI,QAAQ,KAAK,OAAO,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,OAAO,KAAK,GAAG,CAAC,QAAQ,IAAI,QAAQ,KAAK,GAAG,CAAC,QAAQ;YAC3D,CAAC,CAAC,GAAG,CAAC,IAAI;YACV,CAAC,CAAC,SAAS,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,UAAU,mBAAmB;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACnC,IAAI,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEhC,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;YAC3B,yBAAyB,EAAE,mBAAmB;SAC9C,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/captcha/assignDetectorBundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assignDetectorBundle.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BA4BpC,mBAAmB,WAEjC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,SACN,YAAY,KACjB,OAAO,CAAC,QAAQ,CAAC;AALrB,wBA+DG"}
+{"version":3,"file":"assignDetectorBundle.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;8BAgEpC,mBAAmB,WAEjC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,SACN,YAAY,KACjB,OAAO,CAAC,QAAQ,CAAC;AALrB,wBAgEG"}

package/dist/api/captcha/assignDetectorBundle.js

@@ -2,12 +2,32 @@ import { getDetectorBundlePool, getDetectorBundlePoolDir } from "../../tasks/det
 import { Tasks } from "../../tasks/tasks.js";
 import { getAssignSecret } from "../../tasks/detection/assignSecret.js";
 import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
-import { ApiParams } from "@prosopo/types";
+import { ApiParams, AssignDetectorBundleRequestBody } from "@prosopo/types";
 import { createHmac } from "node:crypto";
 import { v4 } from "uuid";
 //#region src/api/captcha/assignDetectorBundle.ts
 /** Pool position for this caller: a keyed hash of their address. */
 var clientIndex = (ip, secret) => createHmac("sha256", secret).update(ip).digest().readUIntBE(0, 6);
+var siteConfig = async (tasks, body, logger) => {
+	const parsed = AssignDetectorBundleRequestBody.safeParse(body);
+	if (!parsed.success) return {};
+	try {
+		const client = await tasks.db.getClientRecord(parsed.data[ApiParams.dapp]);
+		const clientUrl = client?.settings?.clientUrl;
+		const assetOrigin = client?.settings?.assetOrigin;
+		if (!clientUrl || !assetOrigin) return {};
+		return {
+			[ApiParams.clientUrl]: clientUrl,
+			[ApiParams.assetOrigin]: assetOrigin
+		};
+	} catch (err) {
+		logger.warn(() => ({
+			msg: "assignDetectorBundle site config failed",
+			err
+		}));
+		return {};
+	}
+};
 /**
 * Assigns a precomputed detector bundle for this detection session.
 *
@@ -43,13 +63,15 @@ var assignDetectorBundle_default = (env) => async (req, res, _next) => {
 		});
 		const { bundleId, bundle } = pool.at(clientIndex(normalizeRequestIp(req.ip, req.logger), secret));
 		const detectorSessionId = `det-${v4()}`;
-		const writeQueue = new Tasks(env, req.logger).frictionlessManager.writeQueue;
+		const tasks = new Tasks(env, req.logger);
+		const writeQueue = tasks.frictionlessManager.writeQueue;
 		if (!writeQueue) return res.json(noBundle);
 		if (!await writeQueue.cacheDetectorBundle(detectorSessionId, bundleId)) return res.json(noBundle);
 		const response = {
 			[ApiParams.useProviderBundle]: true,
 			[ApiParams.detectorSessionId]: detectorSessionId,
 			[ApiParams.detectorScript]: bundle.js,
+			...await siteConfig(tasks, req.body, req.logger),
 			status: "ok"
 		};
 		return res.json(response);

package/dist/api/captcha/assignDetectorBundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"assignDetectorBundle.js","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAqC,MAAM,gBAAgB,CAAC;AAG9E,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EACN,qBAAqB,EACrB,wBAAwB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,MAAc,EAAU,EAAE,CAC1D,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAiBnE,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,KAAmB,EACC,EAAE;IACtB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,wBAAwB,EAAE,EAAE;YAC1D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CACnC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAC3D,CAAC;QACF,MAAM,iBAAiB,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC;QAM5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAClD,iBAAiB,EACjB,QAAQ,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI;YACnC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB;YAChD,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE;YACrC,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAGd,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,+DAA+D;YACpE,GAAG;SACH,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC;YACf,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SAC2B,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"assignDetectorBundle.js","sourceRoot":"","sources":["../../../src/api/captcha/assignDetectorBundle.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,SAAS,EACT,+BAA+B,GAE/B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EACN,qBAAqB,EACrB,wBAAwB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,MAAM,WAAW,GAAG,CAAC,EAAU,EAAE,MAAc,EAAU,EAAE,CAC1D,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAOnE,MAAM,UAAU,GAAG,KAAK,EACvB,KAAY,EACZ,IAAa,EACb,MAAkC,EACZ,EAAE;IACxB,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC;QAClD,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACX,CAAC;QAED,OAAO;YACN,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS;YAChC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,WAAW;SACpC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,GAAG,EAAE,yCAAyC;YAC9C,GAAG;SACH,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC,CAAC;AAiBF,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,KAAmB,EACC,EAAE;IACtB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,wBAAwB,EAAE,EAAE;YAC1D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;SAC3D,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CACnC,WAAW,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAC3D,CAAC;QACF,MAAM,iBAAiB,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC;QAM5C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAClD,iBAAiB,EACjB,QAAQ,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAiC;YAC9C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI;YACnC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB;YAChD,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE;YACrC,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAGd,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,+DAA+D;YACpE,GAAG;SACH,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC;YACf,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,KAAK;YACpC,MAAM,EAAE,IAAI;SAC2B,CAAC,CAAC;IAC3C,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAEN,KAAK,kBAAkB,EACvB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAuCtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAg5BG"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAEN,KAAK,kBAAkB,EACvB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAuCtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAq3BG"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js

@@ -130,6 +130,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 				...dedupCountryCode && { countryCode: dedupCountryCode },
 				score: dedup.session.score,
 				platform: derivePlatform(dedupUserAgent, dedup.session.webView, { ...typeof dedupIsMobile === "boolean" && { isMobile: dedupIsMobile } }),
+				...dedup.session.d !== void 0 && { d: dedup.session.d },
 				raw: {
 					headers: dedupFlatHeaders,
 					userAgent: dedupUserAgent,
@@ -267,7 +268,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 				...verifiedSignerUrl && { agent: verifiedSignerUrl }
 			});
 		}
-		const { baseBotScore: rawBaseBotScore, timestamp: rawTimestamp, userId: rawUserId, userAgent: rawUserAgent, webView, iFrame, decryptedHeadHash, decryptionFailed: rawDecryptionFailed, triggeredDetectors, shadowDomPenalty, entropyMathRandomFingerprint, entropyCryptoFingerprint, entropyWallClockOffsetMs, entropyMathRandomFirst, g, i, cv, sq, cg, sm, b, sw, md, bn, fs, bundleId } = decryptedPayload;
+		const { baseBotScore: rawBaseBotScore, timestamp: rawTimestamp, userId: rawUserId, userAgent: rawUserAgent, webView, iFrame, decryptedHeadHash, decryptionFailed: rawDecryptionFailed, triggeredDetectors, shadowDomPenalty, d, bundleId } = decryptedPayload;
 		const detectorOverride = process.env.PROSOPO_TEST_FRICTIONLESS_DETECTOR_OVERRIDE === "1";
 		const baseBotScore = detectorOverride ? 0 : rawBaseBotScore;
 		const timestamp = detectorOverride ? Date.now() : rawTimestamp;
@@ -323,21 +324,8 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			mode: sessionMode,
 			...bundleId && { bundleId },
 			...decodedSimdReadings && { simdReadings: decodedSimdReadings },
-			...entropyMathRandomFingerprint !== void 0 && { entropyMathRandomFingerprint },
-			...entropyCryptoFingerprint !== void 0 && { entropyCryptoFingerprint },
-			...entropyWallClockOffsetMs !== void 0 && { entropyWallClockOffsetMs },
-			...entropyMathRandomFirst !== void 0 && { entropyMathRandomFirst },
-			...g !== void 0 && { g },
-			...i !== void 0 && { i },
-			...cv !== void 0 && { cv },
-			...sq !== void 0 && { sq },
-			...cg !== void 0 && { cg },
-			...sm !== void 0 && { sm },
-			...b !== void 0 && { b },
-			...sw !== void 0 && { sw },
-			...md !== void 0 && { md },
-			...bn !== void 0 && { bn },
-			...fs !== void 0 && { fs },
+			...d !== void 0 && { d },
+			...clientSessionId && { clientMetaData: { clientSessionId } },
 			...req.tcpToChelloUs !== void 0 && { tcpToChelloUs: req.tcpToChelloUs },
 			...req.chelloToHandshakeUs !== void 0 && { chelloToHandshakeUs: req.chelloToHandshakeUs },
 			...rawTlsSignalsForSession(req)
@@ -357,6 +345,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			baseImageRounds: env.config.captchas.solved.count,
 			puzzleMaxDifficulty: clientRecord.settings.puzzleMaxDifficulty,
 			platform: derivePlatform(requestUserAgent, webView, { ...typeof ipInfoMobile === "boolean" && { isMobile: ipInfoMobile } }),
+			...d !== void 0 && { d },
 			raw: {
 				headers: flatHeaders,
 				userAgent: requestUserAgent,