@prosopo/provider 5.10.4 → 5.11.1

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs

@@ -130,6 +130,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 				...dedupCountryCode && { countryCode: dedupCountryCode },
 				score: dedup.session.score,
 				platform: require_devicePlatform.derivePlatform(dedupUserAgent, dedup.session.webView, { ...typeof dedupIsMobile === "boolean" && { isMobile: dedupIsMobile } }),
+				...dedup.session.d !== void 0 && { d: dedup.session.d },
 				raw: {
 					headers: dedupFlatHeaders,
 					userAgent: dedupUserAgent,
@@ -267,7 +268,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 				...verifiedSignerUrl && { agent: verifiedSignerUrl }
 			});
 		}
-		const { baseBotScore: rawBaseBotScore, timestamp: rawTimestamp, userId: rawUserId, userAgent: rawUserAgent, webView, iFrame, decryptedHeadHash, decryptionFailed: rawDecryptionFailed, triggeredDetectors, shadowDomPenalty, entropyMathRandomFingerprint, entropyCryptoFingerprint, entropyWallClockOffsetMs, entropyMathRandomFirst, g, i, cv, sq, cg, sm, dz, b, sw, md, bn, fs, bundleId } = decryptedPayload;
+		const { baseBotScore: rawBaseBotScore, timestamp: rawTimestamp, userId: rawUserId, userAgent: rawUserAgent, webView, iFrame, decryptedHeadHash, decryptionFailed: rawDecryptionFailed, triggeredDetectors, shadowDomPenalty, d, bundleId } = decryptedPayload;
 		const detectorOverride = process.env.PROSOPO_TEST_FRICTIONLESS_DETECTOR_OVERRIDE === "1";
 		const baseBotScore = detectorOverride ? 0 : rawBaseBotScore;
 		const timestamp = detectorOverride ? Date.now() : rawTimestamp;
@@ -323,22 +324,8 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			mode: sessionMode,
 			...bundleId && { bundleId },
 			...decodedSimdReadings && { simdReadings: decodedSimdReadings },
-			...entropyMathRandomFingerprint !== void 0 && { entropyMathRandomFingerprint },
-			...entropyCryptoFingerprint !== void 0 && { entropyCryptoFingerprint },
-			...entropyWallClockOffsetMs !== void 0 && { entropyWallClockOffsetMs },
-			...entropyMathRandomFirst !== void 0 && { entropyMathRandomFirst },
-			...g !== void 0 && { g },
-			...i !== void 0 && { i },
-			...cv !== void 0 && { cv },
-			...sq !== void 0 && { sq },
-			...cg !== void 0 && { cg },
-			...sm !== void 0 && { sm },
-			...dz !== void 0 && { dz },
-			...b !== void 0 && { b },
-			...sw !== void 0 && { sw },
-			...md !== void 0 && { md },
-			...bn !== void 0 && { bn },
-			...fs !== void 0 && { fs },
+			...d !== void 0 && { d },
+			...clientSessionId && { clientMetaData: { clientSessionId } },
 			...req.tcpToChelloUs !== void 0 && { tcpToChelloUs: req.tcpToChelloUs },
 			...req.chelloToHandshakeUs !== void 0 && { chelloToHandshakeUs: req.chelloToHandshakeUs },
 			...require_rawTlsSignalsMiddleware.rawTlsSignalsForSession(req)
@@ -358,6 +345,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			baseImageRounds: env.config.captchas.solved.count,
 			puzzleMaxDifficulty: clientRecord.settings.puzzleMaxDifficulty,
 			platform: require_devicePlatform.derivePlatform(requestUserAgent, webView, { ...typeof ipInfoMobile === "boolean" && { isMobile: ipInfoMobile } }),
+			...d !== void 0 && { d },
 			raw: {
 				headers: flatHeaders,
 				userAgent: requestUserAgent,

package/dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs

@@ -175,25 +175,13 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 		headers: originSession.headers,
 		mode: originSession.mode,
 		simdReadings: originSession.simdReadings,
-		entropyMathRandomFingerprint: originSession.entropyMathRandomFingerprint,
-		entropyCryptoFingerprint: originSession.entropyCryptoFingerprint,
-		entropyWallClockOffsetMs: originSession.entropyWallClockOffsetMs,
-		entropyMathRandomFirst: originSession.entropyMathRandomFirst,
+		d: originSession.d,
 		bundleId: originSession.bundleId,
 		currentUrl: originSession.currentUrl,
 		iframeUrl: originSession.iframeUrl,
 		isProtect: originSession.isProtect,
 		isEscalation: true,
 		originSessionId: originSession.sessionId,
-		g: originSession.g,
-		i: originSession.i,
-		cv: originSession.cv,
-		sq: originSession.sq,
-		b: originSession.b,
-		sw: originSession.sw,
-		md: originSession.md,
-		bn: originSession.bn,
-		fs: originSession.fs,
 		tcpToChelloUs: perConnectionSignals?.tcpToChelloUs,
 		chelloToHandshakeUs: perConnectionSignals?.chelloToHandshakeUs,
 		synNs: perConnectionSignals?.synNs,
@@ -206,7 +194,8 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 		tcpOptsOrder: perConnectionSignals?.tcpOptsOrder,
 		tcpWindow: perConnectionSignals?.tcpWindow,
 		puzzleTolerance: escalationPuzzleOverrides?.puzzleTolerance,
-		puzzle: escalationPuzzleOverrides?.puzzle
+		puzzle: escalationPuzzleOverrides?.puzzle,
+		clientMetaData: originSession.clientMetaData
 	});
 	if (tasks.writeQueue) await tasks.writeQueue.cacheSessionEscalation(powRecord.sessionId, newSession.sessionId);
 	return {

package/dist/cjs/tasks/captchaManager.cjs

@@ -74,7 +74,7 @@ var CaptchaManager = class CaptchaManager {
 	* Read a session and, if it's an escalation missing one of the
 	* inherently-origin-populated fields, walk to `originSessionId` and fill
 	* the gap. Intended for the decision-machine input read path only —
-	* `simdReadings`, `dnsEvent`, `entropyMathRandomFingerprint` etc. are
+	* `simdReadings`, `dnsEvent` and the detector bag are
 	* populated on the origin session (SIMD via pow-submit's fire-and-forget
 	* attach; DNS via the sidecar's origin-TLS-scoped patch) and don't
 	* automatically end up on the escalation record because
@@ -98,33 +98,20 @@ var CaptchaManager = class CaptchaManager {
 		if (!session.originSessionId) return session;
 		const needsSimd = session.simdReadings === void 0 || session.simdReadings === null;
 		const needsDns = session.dnsEvent === void 0 || session.dnsEvent === null;
-		const needsEntropyMath = session.entropyMathRandomFingerprint === void 0;
-		const needsEntropyCrypto = session.entropyCryptoFingerprint === void 0;
-		const needsEntropyWall = session.entropyWallClockOffsetMs === void 0;
-		const needsEntropyFirst = session.entropyMathRandomFirst === void 0;
-		const needsG = session.g === void 0;
-		const needsI = session.i === void 0;
-		const needsSw = session.sw === void 0;
-		const needsMd = session.md === void 0;
-		const needsBn = session.bn === void 0;
-		const needsFs = session.fs === void 0;
-		if (!needsSimd && !needsDns && !needsEntropyMath && !needsEntropyCrypto && !needsEntropyWall && !needsEntropyFirst && !needsG && !needsI && !needsSw && !needsMd && !needsBn && !needsFs) return session;
+		const escalationData = session.d ?? {};
+		const needsData = session.d === void 0;
+		if (!needsSimd && !needsDns && !needsData) return session;
 		const origin = await this.db.getSessionRecordBySessionId(session.originSessionId);
 		if (!origin) return session;
+		const mergedData = origin.d === void 0 ? session.d : {
+			...origin.d,
+			...escalationData
+		};
 		return {
 			...session,
 			...needsSimd && origin.simdReadings && { simdReadings: origin.simdReadings },
 			...needsDns && origin.dnsEvent && { dnsEvent: origin.dnsEvent },
-			...needsEntropyMath && origin.entropyMathRandomFingerprint !== void 0 && { entropyMathRandomFingerprint: origin.entropyMathRandomFingerprint },
-			...needsEntropyCrypto && origin.entropyCryptoFingerprint !== void 0 && { entropyCryptoFingerprint: origin.entropyCryptoFingerprint },
-			...needsEntropyWall && origin.entropyWallClockOffsetMs !== void 0 && { entropyWallClockOffsetMs: origin.entropyWallClockOffsetMs },
-			...needsEntropyFirst && origin.entropyMathRandomFirst !== void 0 && { entropyMathRandomFirst: origin.entropyMathRandomFirst },
-			...needsG && origin.g !== void 0 && { g: origin.g },
-			...needsI && origin.i !== void 0 && { i: origin.i },
-			...needsSw && origin.sw !== void 0 && { sw: origin.sw },
-			...needsMd && origin.md !== void 0 && { md: origin.md },
-			...needsBn && origin.bn !== void 0 && { bn: origin.bn },
-			...needsFs && origin.fs !== void 0 && { fs: origin.fs }
+			...mergedData !== void 0 && { d: mergedData }
 		};
 	}
 	/**
@@ -346,7 +333,8 @@ var CaptchaManager = class CaptchaManager {
 		return bundle ? {
 			key: bundle.privateKey,
 			innerConfig: bundle.innerConfig,
-			...bundle.payloadLayout && { payloadLayout: bundle.payloadLayout }
+			...bundle.payloadLayout && { payloadLayout: bundle.payloadLayout },
+			...bundle.keyMap && { keyMap: bundle.keyMap }
 		} : void 0;
 	}
 	/**

package/dist/cjs/tasks/detection/bundlePool.cjs

@@ -68,12 +68,14 @@ var DetectorBundlePool = class {
 				}
 				if (expectedRelease && !release) unstamped++;
 				const payloadLayout = typeof secrets.payloadLayout === "string" ? secrets.payloadLayout : void 0;
+				const keyMap = typeof secrets.keyMap === "string" ? secrets.keyMap : void 0;
 				next.set(bundleId, {
 					js,
 					privateKey: secrets.privateKey,
 					innerConfig: secrets.innerConfig,
 					...release && { release },
-					...payloadLayout && { payloadLayout }
+					...payloadLayout && { payloadLayout },
+					...keyMap && { keyMap }
 				});
 			} catch (error) {
 				logger.warn?.("failed to load bundle pool entry", {