@prosopo/provider 5.13.0 → 5.13.2

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/provider@5.13.0 build:cjs
+> @prosopo/provider@5.13.2 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -32,7 +32,6 @@ ViteCommonJSConfig: .
 {
   externals: [
     '@prosopo/api-route',
-The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
     '@prosopo/logger',
     '@prosopo/util',
     '@prosopo/api-express-router',
@@ -56,10 +55,11 @@ ViteCommonJSConfig: .
     '@prosopo/web-bot-auth'
   ]
 }
+The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 116 modules transformed.
+✓ 117 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/cjs/tasks/index.cjs                                                       0.08 kB │ gzip: 0.07 kB
@@ -98,7 +98,6 @@ dist/cjs/schedulers/getClientList.cjs                                          1
 dist/cjs/api/admin/apiGetDecisionMachineEndpoint.cjs                           1.33 kB │ gzip: 0.52 kB
 dist/cjs/api/admin/apiRemoveDecisionMachineEndpoint.cjs                        1.36 kB │ gzip: 0.52 kB
 dist/cjs/api/admin/apiRemoveAllDecisionMachinesEndpoint.cjs                    1.36 kB │ gzip: 0.54 kB
-dist/cjs/pairs.cjs                                                             1.39 kB │ gzip: 0.60 kB
 dist/cjs/tasks/dataset/datasetTasksUtils.cjs                                   1.42 kB │ gzip: 0.49 kB
 dist/cjs/tasks/puzzle/backgroundBuffer.cjs                                     1.44 kB │ gzip: 0.54 kB
 dist/cjs/utils/clientMetaData.cjs                                              1.48 kB │ gzip: 0.72 kB
@@ -116,6 +115,7 @@ dist/cjs/tasks/imgCaptcha/imgCaptchaTasksUtils.cjs                             1
 dist/cjs/api/admin/apiToggleMaintenanceModeEndpoint.cjs                        1.80 kB │ gzip: 0.72 kB
 dist/cjs/utils/honeypot/phraseBank.cjs                                         1.87 kB │ gzip: 0.91 kB
 dist/cjs/api/handshakeTimingMiddleware.cjs                                     1.88 kB │ gzip: 0.71 kB
+dist/cjs/api/requestBodySummary.cjs                                            1.96 kB │ gzip: 0.88 kB
 dist/cjs/api/admin/apiClearAllCountersEndpoint.cjs                             2.01 kB │ gzip: 0.78 kB
 dist/cjs/tasks/frictionless/ipMatch.cjs                                        2.03 kB │ gzip: 1.03 kB
 dist/cjs/tasks/spam/updateSpamEmailDomains.cjs                                 2.12 kB │ gzip: 0.85 kB
@@ -126,21 +126,22 @@ dist/cjs/tasks/frictionless/frictionlessTasksUtils.cjs                         2
 dist/cjs/api/captcha/signedAssetsResolver.cjs                                  2.24 kB │ gzip: 1.00 kB
 dist/cjs/api/captcha/sealedAssetsResolver.cjs                                  2.37 kB │ gzip: 0.98 kB
 dist/cjs/tasks/captchaTypeSelection.cjs                                        2.44 kB │ gzip: 1.04 kB
-dist/cjs/api/admin/apiDnsEventEndpoint.cjs                                     2.59 kB │ gzip: 1.00 kB
 dist/cjs/utils/dns.cjs                                                         2.66 kB │ gzip: 1.02 kB
 dist/cjs/api/forwardVerify.cjs                                                 2.66 kB │ gzip: 1.12 kB
 dist/cjs/tasks/puzzle/puzzleDifficulty.cjs                                     2.66 kB │ gzip: 1.10 kB
 dist/cjs/api/captcha/checkSpamEmail.cjs                                        2.73 kB │ gzip: 0.95 kB
-dist/cjs/api/captcha/submitPuzzleCaptchaSolution.cjs                           2.77 kB │ gzip: 0.99 kB
 dist/cjs/api/public.cjs                                                        2.79 kB │ gzip: 1.07 kB
 dist/cjs/api/captcha/maintenanceModeResponses.cjs                              2.91 kB │ gzip: 0.77 kB
-dist/cjs/api/captcha/submitImageCaptchaSolution.cjs                            2.93 kB │ gzip: 1.03 kB
+dist/cjs/api/captcha/submitPuzzleCaptchaSolution.cjs                           2.93 kB │ gzip: 1.01 kB
+dist/cjs/api/captcha/submitImageCaptchaSolution.cjs                            3.09 kB │ gzip: 1.06 kB
+dist/cjs/api/admin/apiDnsEventEndpoint.cjs                                     3.20 kB │ gzip: 1.22 kB
 dist/cjs/tasks/detection/getBotScore.cjs                                       3.37 kB │ gzip: 1.33 kB
 dist/cjs/compositeIpAddress.cjs                                                3.39 kB │ gzip: 1.36 kB
 dist/cjs/api/captcha/assetSealFormat.cjs                                       3.59 kB │ gzip: 1.37 kB
 dist/cjs/api/captcha/assignDetectorBundle.cjs                                  3.63 kB │ gzip: 1.37 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.cjs          3.66 kB │ gzip: 1.35 kB
 dist/cjs/api/admin/apiAdminRoutesProvider.cjs                                  3.67 kB │ gzip: 0.62 kB
+dist/cjs/tasks/tasks.cjs                                                       3.82 kB │ gzip: 1.07 kB
 dist/cjs/api/rawTlsSignalsMiddleware.cjs                                       3.84 kB │ gzip: 1.16 kB
 dist/cjs/api/domainMiddleware.cjs                                              3.85 kB │ gzip: 1.26 kB
 dist/cjs/tasks/spam/evaluateEmailSpamRules.cjs                                 4.03 kB │ gzip: 1.60 kB
@@ -148,22 +149,22 @@ dist/cjs/services/ipComparison.cjs                                             4
 dist/cjs/tasks/spam/checkSpamEmail.cjs                                         4.14 kB │ gzip: 1.14 kB
 dist/cjs/api/captcha/trafficFilterRequestTime.cjs                              4.17 kB │ gzip: 1.53 kB
 dist/cjs/api/cpuProfiler.cjs                                                   4.21 kB │ gzip: 1.78 kB
-dist/cjs/api/hardBlockVerdictCache.cjs                                         4.27 kB │ gzip: 1.70 kB
 dist/cjs/tasks/puzzle/puzzleRenderer.cjs                                       4.36 kB │ gzip: 1.55 kB
+dist/cjs/api/hardBlockVerdictCache.cjs                                         4.39 kB │ gzip: 1.74 kB
 dist/cjs/api/captcha.cjs                                                       4.51 kB │ gzip: 1.40 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.cjs          4.56 kB │ gzip: 1.07 kB
+dist/cjs/pairs.cjs                                                             4.64 kB │ gzip: 1.61 kB
 dist/cjs/tasks/dnsEvent/enrichDnsEvent.cjs                                     4.84 kB │ gzip: 1.74 kB
 dist/cjs/index.cjs                                                             5.02 kB │ gzip: 1.05 kB
-dist/cjs/tasks/tasks.cjs                                                       5.07 kB │ gzip: 1.57 kB
 dist/cjs/tasks/detection/decoderPool.cjs                                       5.47 kB │ gzip: 2.06 kB
 dist/cjs/util/usageCounters.cjs                                                5.72 kB │ gzip: 2.03 kB
-dist/cjs/api/captcha/getPoWCaptchaChallenge.cjs                                6.73 kB │ gzip: 1.89 kB
+dist/cjs/api/captcha/getPoWCaptchaChallenge.cjs                                6.85 kB │ gzip: 1.92 kB
 dist/cjs/api/healthzGeo.cjs                                                    7.03 kB │ gzip: 2.70 kB
 dist/cjs/api/captcha/getImageCaptchaChallenge.cjs                              7.39 kB │ gzip: 2.06 kB
 dist/cjs/tasks/spam/checkTrafficFilter.cjs                                     7.47 kB │ gzip: 2.48 kB
-dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs                             7.56 kB │ gzip: 2.03 kB
-dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs                              9.12 kB │ gzip: 2.71 kB
-dist/cjs/tasks/detection/bundlePool.cjs                                        9.24 kB │ gzip: 3.37 kB
+dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs                             7.67 kB │ gzip: 2.05 kB
+dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs                              9.28 kB │ gzip: 2.74 kB
+dist/cjs/tasks/detection/bundlePool.cjs                                        9.29 kB │ gzip: 3.38 kB
 dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.cjs      10.33 kB │ gzip: 1.82 kB
 dist/cjs/api/startProviderApi.cjs                                             11.73 kB │ gzip: 3.72 kB
 dist/cjs/tasks/client/clientTasks.cjs                                         11.73 kB │ gzip: 3.04 kB
@@ -171,15 +172,15 @@ dist/cjs/api/metrics.cjs                                                      11
 dist/cjs/tasks/decisionMachine/decisionMachineRunner.cjs                      12.69 kB │ gzip: 3.91 kB
 dist/cjs/util.cjs                                                             13.15 kB │ gzip: 3.26 kB
 dist/cjs/api/blacklistRequestInspector.cjs                                    13.39 kB │ gzip: 4.50 kB
-dist/cjs/api/verify.cjs                                                       16.79 kB │ gzip: 2.93 kB
-dist/cjs/tasks/frictionless/frictionlessTasks.cjs                             18.37 kB │ gzip: 4.89 kB
-dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.05 kB │ gzip: 4.59 kB
-dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs                                  24.12 kB │ gzip: 5.17 kB
-dist/cjs/tasks/captchaManager.cjs                                             24.62 kB │ gzip: 7.42 kB
-dist/cjs/tasks/powCaptcha/powTasks.cjs                                        25.55 kB │ gzip: 6.16 kB
-dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs                                 27.94 kB │ gzip: 6.36 kB
+dist/cjs/api/verify.cjs                                                       17.22 kB │ gzip: 2.97 kB
+dist/cjs/tasks/frictionless/frictionlessTasks.cjs                             18.43 kB │ gzip: 4.88 kB
+dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs              20.15 kB │ gzip: 4.63 kB
+dist/cjs/tasks/puzzleCaptcha/puzzleTasks.cjs                                  24.26 kB │ gzip: 5.18 kB
+dist/cjs/tasks/captchaManager.cjs                                             25.12 kB │ gzip: 7.48 kB
+dist/cjs/tasks/powCaptcha/powTasks.cjs                                        25.99 kB │ gzip: 6.23 kB
+dist/cjs/tasks/imgCaptcha/imgCaptchaTasks.cjs                                 28.88 kB │ gzip: 6.55 kB
 
-✓ built in 191ms
+✓ built in 194ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/cjs/tasks/detection/decodeSimd.js

package/.turbo/turbo-build$colon$tsc.log

@@ -1,8 +1,8 @@
 
-> @prosopo/provider@5.13.0 build:tsc
+> @prosopo/provider@5.13.2 build:tsc
 > tsc --build --verbose
 
-9:06:33 AM - Projects in this build: 
+9:57:12 AM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../util/tsconfig.json
     * ../logger/tsconfig.json
@@ -28,53 +28,53 @@
     * ../web-bot-auth/tsconfig.json
     * tsconfig.json
 
-9:06:33 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/vite.frontend.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/verifyRecency.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/tests/loggerBrowser.unit.test.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../api-route/tsconfig.json' is up to date because newest input '../api-route/src/apiRoutes.ts' is older than output '../api-route/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/util.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/error.ts' is older than output '../common/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/index.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/types.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../ipinfo/tsconfig.json' is up to date because newest input '../ipinfo/src/IpInfoService.ts' is older than output '../ipinfo/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/redisClient.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../redis-client/tsconfig.json' is up to date because newest input '../redis-client/src/index.ts' is older than output '../redis-client/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/index.ts' is older than output '../api/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../api/tsconfig.json' is up to date because newest input '../api/src/tests/apiHarness.ts' is older than output '../api/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../user-access-policy/tsconfig.json' is up to date because newest input '../user-access-policy/src/transformRule.ts' is older than output '../user-access-policy/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../types-database/tsconfig.json' is up to date because newest input '../types-database/src/index.ts' is older than output '../types-database/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/unit/captchaLabel.unit.test.ts' is older than output '../database/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../database/tsconfig.json' is up to date because newest input '../database/src/tests/unit/captchaLabel.unit.test.ts' is older than output '../database/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/index.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../keyring/tsconfig.json' is up to date because newest input '../keyring/src/index.ts' is older than output '../keyring/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/index.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../types-env/tsconfig.json' is up to date because newest input '../types-env/src/env.ts' is older than output '../types-env/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/env.ts' is older than output '../env/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../env/tsconfig.json' is up to date because newest input '../env/src/env.ts' is older than output '../env/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/tests/unit/testDoubles.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../api-express-router/tsconfig.json' is up to date because newest input '../api-express-router/src/tests/unit/apiExpressDefaultEndpointAdapter.unit.test.ts' is older than output '../api-express-router/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../captcha-severity/tsconfig.json' is up to date because newest input '../captcha-severity/src/index.test.ts' is older than output '../captcha-severity/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/index.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../datasets/tsconfig.json' is up to date because newest input '../datasets/src/tests/mocks/data/captchas.ts' is older than output '../datasets/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/balancer.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../load-balancer/tsconfig.json' is up to date because newest input '../load-balancer/src/balancer.ts' is older than output '../load-balancer/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../puzzle-assets/tsconfig.json' is up to date because newest input '../puzzle-assets/src/background.ts' is older than output '../puzzle-assets/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/base64.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
+9:57:12 AM - Project '../web-bot-auth/tsconfig.json' is up to date because newest input '../web-bot-auth/src/verify.ts' is older than output '../web-bot-auth/tsconfig.tsbuildinfo'
 
-9:06:33 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+9:57:12 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-9:06:33 AM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
+9:57:12 AM - Building project '/home/runner/work/captcha/captcha/packages/provider/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/provider@5.13.0 build
+> @prosopo/provider@5.13.2 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/provider@5.13.0 build:cross-env
+> @prosopo/provider@5.13.2 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -63,7 +63,7 @@ ViteEsmConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 116 modules transformed.
+✓ 117 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js                                        0.04 kB │ gzip: 0.06 kB
@@ -98,7 +98,6 @@ dist/api/admin/apiRemoveSiteKeyEndpoint.js                                1.08 k
 dist/api/block.js                                                         1.08 kB │ gzip: 0.46 kB
 dist/schedulers/captchaScheduler.js                                       1.11 kB │ gzip: 0.48 kB
 dist/utils/normalizeRequestIp.js                                          1.14 kB │ gzip: 0.52 kB
-dist/pairs.js                                                             1.19 kB │ gzip: 0.58 kB
 dist/schedulers/getClientList.js                                          1.19 kB │ gzip: 0.53 kB
 dist/api/admin/apiGetDecisionMachineEndpoint.js                           1.26 kB │ gzip: 0.50 kB
 dist/tasks/puzzle/backgroundBuffer.js                                     1.26 kB │ gzip: 0.51 kB
@@ -122,6 +121,7 @@ dist/utils/honeypot/phraseBank.js                                         1.69 k
 dist/api/handshakeTimingMiddleware.js                                     1.75 kB │ gzip: 0.69 kB
 dist/tasks/spam/updateSpamEmailDomains.js                                 1.87 kB │ gzip: 0.77 kB
 dist/api/admin/apiClearAllCountersEndpoint.js                             1.89 kB │ gzip: 0.76 kB
+dist/api/requestBodySummary.js                                            1.94 kB │ gzip: 0.88 kB
 dist/tasks/frictionless/ipMatch.js                                        1.98 kB │ gzip: 1.02 kB
 dist/api/captcha/signedAssetsResolver.js                                  2.08 kB │ gzip: 0.98 kB
 dist/migrations/frictionlessLadder.js                                     2.12 kB │ gzip: 0.93 kB
@@ -132,20 +132,21 @@ dist/tasks/frictionless/routingMachine.js                                 2.20 k
 dist/tasks/captchaTypeSelection.js                                        2.22 kB │ gzip: 1.03 kB
 dist/api/captcha/sealedAssetsResolver.js                                  2.26 kB │ gzip: 0.97 kB
 dist/utils/dns.js                                                         2.36 kB │ gzip: 0.95 kB
-dist/api/admin/apiDnsEventEndpoint.js                                     2.43 kB │ gzip: 0.96 kB
 dist/api/public.js                                                        2.45 kB │ gzip: 0.98 kB
 dist/api/captcha/checkSpamEmail.js                                        2.47 kB │ gzip: 0.91 kB
 dist/tasks/puzzle/puzzleDifficulty.js                                     2.50 kB │ gzip: 1.09 kB
-dist/api/captcha/submitPuzzleCaptchaSolution.js                           2.55 kB │ gzip: 0.96 kB
 dist/api/forwardVerify.js                                                 2.59 kB │ gzip: 1.10 kB
-dist/api/captcha/submitImageCaptchaSolution.js                            2.59 kB │ gzip: 1.00 kB
+dist/api/captcha/submitPuzzleCaptchaSolution.js                           2.65 kB │ gzip: 0.99 kB
+dist/api/captcha/submitImageCaptchaSolution.js                            2.69 kB │ gzip: 1.03 kB
 dist/api/admin/apiAdminRoutesProvider.js                                  2.78 kB │ gzip: 0.55 kB
 dist/index.js                                                             2.95 kB │ gzip: 0.81 kB
+dist/api/admin/apiDnsEventEndpoint.js                                     3.05 kB │ gzip: 1.18 kB
 dist/compositeIpAddress.js                                                3.15 kB │ gzip: 1.34 kB
 dist/tasks/detection/getBotScore.js                                       3.29 kB │ gzip: 1.32 kB
 dist/api/captcha/assetSealFormat.js                                       3.38 kB │ gzip: 1.34 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/shortCircuit.js          3.39 kB │ gzip: 1.32 kB
 dist/api/captcha/assignDetectorBundle.js                                  3.40 kB │ gzip: 1.34 kB
+dist/tasks/tasks.js                                                       3.44 kB │ gzip: 1.01 kB
 dist/api/domainMiddleware.js                                              3.52 kB │ gzip: 1.22 kB
 dist/api/rawTlsSignalsMiddleware.js                                       3.69 kB │ gzip: 1.13 kB
 dist/tasks/spam/evaluateEmailSpamRules.js                                 3.84 kB │ gzip: 1.59 kB
@@ -155,19 +156,19 @@ dist/services/ipComparison.js                                             4.04 k
 dist/api/captcha.js                                                       4.05 kB │ gzip: 1.31 kB
 dist/tasks/spam/checkSpamEmail.js                                         4.12 kB │ gzip: 1.12 kB
 dist/api/cpuProfiler.js                                                   4.12 kB │ gzip: 1.77 kB
-dist/api/hardBlockVerdictCache.js                                         4.14 kB │ gzip: 1.69 kB
+dist/api/hardBlockVerdictCache.js                                         4.26 kB │ gzip: 1.72 kB
+dist/pairs.js                                                             4.27 kB │ gzip: 1.57 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/accessPolicy.js          4.35 kB │ gzip: 1.07 kB
-dist/tasks/tasks.js                                                       4.69 kB │ gzip: 1.51 kB
 dist/tasks/dnsEvent/enrichDnsEvent.js                                     4.71 kB │ gzip: 1.72 kB
 dist/tasks/detection/decoderPool.js                                       5.34 kB │ gzip: 2.02 kB
 dist/util/usageCounters.js                                                5.65 kB │ gzip: 2.01 kB
-dist/api/captcha/getPoWCaptchaChallenge.js                                6.09 kB │ gzip: 1.83 kB
+dist/api/captcha/getPoWCaptchaChallenge.js                                6.17 kB │ gzip: 1.85 kB
 dist/api/captcha/getImageCaptchaChallenge.js                              6.61 kB │ gzip: 2.00 kB
-dist/api/captcha/getPuzzleCaptchaChallenge.js                             6.84 kB │ gzip: 1.97 kB
 dist/api/healthzGeo.js                                                    6.86 kB │ gzip: 2.68 kB
+dist/api/captcha/getPuzzleCaptchaChallenge.js                             6.92 kB │ gzip: 1.99 kB
 dist/tasks/spam/checkTrafficFilter.js                                     7.16 kB │ gzip: 2.45 kB
-dist/api/captcha/submitPoWCaptchaSolution.js                              8.60 kB │ gzip: 2.66 kB
-dist/tasks/detection/bundlePool.js                                        8.80 kB │ gzip: 3.32 kB
+dist/api/captcha/submitPoWCaptchaSolution.js                              8.70 kB │ gzip: 2.69 kB
+dist/tasks/detection/bundlePool.js                                        8.86 kB │ gzip: 3.34 kB
 dist/api/captcha/getFrictionlessCaptchaChallenge/decisionMachine.js       9.36 kB │ gzip: 1.80 kB
 dist/api/startProviderApi.js                                             10.02 kB │ gzip: 3.45 kB
 dist/api/metrics.js                                                      11.27 kB │ gzip: 3.53 kB
@@ -175,15 +176,15 @@ dist/tasks/client/clientTasks.js                                         11.27 k
 dist/tasks/decisionMachine/decisionMachineRunner.js                      12.28 kB │ gzip: 3.85 kB
 dist/util.js                                                             12.47 kB │ gzip: 3.20 kB
 dist/api/blacklistRequestInspector.js                                    12.75 kB │ gzip: 4.46 kB
-dist/api/verify.js                                                       15.12 kB │ gzip: 2.82 kB
-dist/tasks/frictionless/frictionlessTasks.js                             17.80 kB │ gzip: 4.86 kB
-dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              18.54 kB │ gzip: 4.48 kB
-dist/tasks/puzzleCaptcha/puzzleTasks.js                                  22.71 kB │ gzip: 5.12 kB
-dist/tasks/captchaManager.js                                             24.12 kB │ gzip: 7.34 kB
-dist/tasks/powCaptcha/powTasks.js                                        24.13 kB │ gzip: 6.12 kB
-dist/tasks/imgCaptcha/imgCaptchaTasks.js                                 26.42 kB │ gzip: 6.30 kB
+dist/api/verify.js                                                       15.32 kB │ gzip: 2.84 kB
+dist/tasks/frictionless/frictionlessTasks.js                             17.86 kB │ gzip: 4.86 kB
+dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js              18.63 kB │ gzip: 4.53 kB
+dist/tasks/puzzleCaptcha/puzzleTasks.js                                  22.85 kB │ gzip: 5.14 kB
+dist/tasks/powCaptcha/powTasks.js                                        24.56 kB │ gzip: 6.17 kB
+dist/tasks/captchaManager.js                                             24.61 kB │ gzip: 7.41 kB
+dist/tasks/imgCaptcha/imgCaptchaTasks.js                                 27.39 kB │ gzip: 6.51 kB
 
-✓ built in 484ms
+✓ built in 185ms
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeBehavior.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeBehavior.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodePayload.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodePayload.js
 [copy-plugin] copying /home/runner/work/captcha/captcha/packages/provider/src/tasks/detection/decodeSimd.js to /home/runner/work/captcha/captcha/packages/provider/dist/tasks/detection/decodeSimd.js

package/CHANGELOG.md

@@ -1,5 +1,118 @@
 # @prosopo/provider
 
+## 5.13.2
+### Patch Changes
+
+- f650c66: A Web Bot Auth (authenticated) token can now only be verified once, even when several verify requests for it arrive at the same time. Before, the provider checked whether the session was already used and then marked it used in a separate step, so parallel verifies could all return `verified: true`. Marking the session used is now a single conditional database write, and only the request that wins it is verified; the rest get `API.USER_ALREADY_VERIFIED`.
+- e482b25: When a captcha challenge, solution or verify request fails to parse, the provider now logs a short summary of the body (its type, size, top-level keys and a preview of at most 512 characters) instead of the whole body. Signature, token, secret, proof, salt, email, password and IP fields are replaced with `[redacted]` in the preview, however deeply they are nested. Before, a caller could post a body close to the 1 MB limit and have all of it copied into the logs, including any tokens and signatures it carried.
+- 8933ad5: Build the proofs returned after a passed image captcha from the right leaves, and refuse to build a proof for a hash that is not a leaf.
+  
+  The provider asked the commitment tree for a proof of each captcha ID, but the tree's leaves are solution hashes, so no captcha ID is ever a leaf. `proof()` did not check, and returned a proof that linked nothing to the root. The provider now asks for a proof of each leaf, and `proof()` throws `DATASET.MERKLE_ERROR` when the hash is not a leaf. Several merkle tests that could never fail (`expect(x > -1)`) now assert properly.
+- 026b126: A PoW captcha challenge can now only be submitted once. Before, submitting the same solved challenge again after the site's server had verified the token reset the record to "not yet checked", so the same token could pass server verification a second time for as long as the verify window lasted. Puzzle captchas already refused a second submission, and PoW now does the same.
+- 0c8678e: The DNS event ingest endpoint now checks each event on its own. One malformed event used to make
+  the whole batch fail validation, so every good event sent alongside it was lost. Bad events are now
+  dropped and counted, the rest are stored, and the response reports how many were dropped. A single
+  warning names up to five of the dropped events and why they failed.
+- b77c5f4: The image captcha widget now tells the provider whether each tile, and the checkbox, was picked with a mouse or finger or with the keyboard. Keyboard presses have no screen position, so they all arrive as (0, 0). The provider used to see those repeats as a script clicking the same pixel and reject people who solve with the keyboard. It now looks for repeated positions among pointer selections only. It rejects a keyboard selection that claims a position. Requests from older widgets, which send no input method, are checked as strictly as before. The input method is stored on the commitment next to the coordinates.
+- 7065689: Removed the Redis session write queue. Nothing ever put a session on it, yet every provider polled Redis for it every 10 seconds, and its drain step could duplicate, drop or delete records if it had ever been used. `RedisWriteQueue` loses `queueSessionRecord`, `drainSessionRecords`, `startPeriodicFlush` and `stopPeriodicFlush`, and `Tasks.flushWriteQueue` is gone. The session read cache is unchanged.
+- 9318584: A frictionless session can now only be used by the site it was issued for. Before, a session created on one site, for example one set up for easy PoW, could be passed with a request for a different site and the provider would issue the captcha type and difficulty chosen for the first site. The provider now refuses the session when its site key does not match the site asking for a captcha, with the same "no session found" answer it gives for an unknown session.
+- 084da7e: Changing an access rule now reliably clears the provider's cached block verdicts. A verdict lookup that was already running when the rules changed used to finish afterwards and write the old answer back into the cache, so a just-deleted block rule could keep blocking (or a just-added one keep allowing) for up to ten more seconds. Lookups that started before the change no longer write their result, and new requests no longer wait on them.
+- fa316d6: A captcha token now verifies at most once even when a site's server sends several verify requests for it at the same moment. Before, each request read the record, saw it had not been checked yet, and then marked it checked, so every request that arrived before the first write finished was accepted. Marking a PoW, puzzle or image result as checked is now a single conditional write, and only the request that wins it is verified. The same applies to image captcha submissions: a request hash can now only be spent by one submission, so answers can no longer be tried in parallel against one challenge.
+- 9ed0ac5: Web Bot Auth signatures are now held to the replay window the spec requires. A signature must carry `created`, `expires` and `tag="web-bot-auth"`. It is rejected if it was created in the future (allowing 5s of clock skew) or if it stays valid for more than 24 hours. Before this, a signature with no `expires` could be replayed forever.
+  
+  The signer key directory is fetched more carefully, since its URL comes from a request header:
+  - The URL must be https and a public hostname. IP literals, localhost and dotless hosts are refused, except in test and development.
+  - The fetch times out after 3s and does not follow redirects.
+  - The body is capped at 64KiB.
+  - The cache holds at most 1000 entries, each for at most 24 hours.
+- Updated dependencies [f650c66]
+- Updated dependencies [59b7e87]
+- Updated dependencies [b5e55a6]
+- Updated dependencies [e5aefc6]
+- Updated dependencies [d528f41]
+- Updated dependencies [8933ad5]
+- Updated dependencies [5375d10]
+- Updated dependencies [294b480]
+- Updated dependencies [0a4ae2f]
+- Updated dependencies [0c8678e]
+- Updated dependencies [b77c5f4]
+- Updated dependencies [4109641]
+- Updated dependencies [7065689]
+- Updated dependencies [dab0338]
+- Updated dependencies [dffecf0]
+- Updated dependencies [0d29dde]
+- Updated dependencies [fa316d6]
+- Updated dependencies [9ed0ac5]
+  - @prosopo/database@4.1.0
+  - @prosopo/types-database@5.7.0
+  - @prosopo/types@5.11.0
+  - @prosopo/common@3.1.60
+  - @prosopo/load-balancer@2.11.2
+  - @prosopo/captcha-severity@1.1.2
+  - @prosopo/datasets@3.1.92
+  - @prosopo/locale@3.6.1
+  - @prosopo/native-ja4@0.0.7
+  - @prosopo/redis-client@1.0.38
+  - @prosopo/api@4.3.6
+  - @prosopo/util@3.3.12
+  - @prosopo/web-bot-auth@0.1.3
+  - @prosopo/env@3.6.65
+  - @prosopo/types-env@2.11.11
+  - @prosopo/api-express-router@3.1.96
+  - @prosopo/ipinfo@0.4.11
+  - @prosopo/keyring@2.9.98
+  - @prosopo/user-access-policy@3.14.12
+  - @prosopo/api-route@2.6.61
+  - @prosopo/logger@2.1.1
+
+## 5.13.1
+### Patch Changes
+
+- fda0eba: Decision machines can now see which page the captcha was rendered on. `currentUrl` (the top-frame page) and `iframeUrl` (the widget's own frame, when embedded) were already stored on the session and already read back from the database, but the verify-time path never passed them to the decision machine, so rules always saw them as undefined.
+  
+  They are now forwarded on all three verify paths (image, PoW and puzzle). No behaviour changes on its own — it just makes the fields available to rules that need to treat an embedded widget differently from a first-party one.
+  
+  Both values are reported by the client and are not checked against the request's Origin or Referer header, so a rule must not hand out an exemption on the strength of these fields alone.
+- 1728cd0: Carry the detector bundle's `keyMap` through the pool push.
+  
+  `keyMap` is an opaque per-bundle decode parameter, written alongside each
+  bundle by the pool build and meaningless without it — the same contract as
+  `payloadLayout`. The admin pool-replace body schema never declared it, so zod
+  stripped it from every push, and the endpoint's persist step then wrote the
+  bundle back to disk without it.
+  
+  The result was a pool the provider served but could not decode: the push
+  returned success with `persisted: true`, the bundles loaded and sessions were
+  assigned them, but what they produced could not be read. Pools copied onto the
+  volume were unaffected, because that path never goes through the schema.
+  
+  Adds `keyMap` to `ReplaceDetectorPoolBody` and writes it in
+  `persistDetectorBundlePool`.
+- 20542d8: Send page scroll events with the captcha's behavioural data.
+  
+  The widget now passes a fourth collector, the page's scroll position and the
+  time of each scroll, alongside mouse, touch and click data, and the provider
+  stores it as `c4` on the captcha record. People scroll in uneven bursts while
+  bots tend to scroll at a steady rate, so this gives detection something to
+  work with. Detector bundles that predate the scroll tracker simply send no
+  `c4`.
+- Updated dependencies [fda0eba]
+- Updated dependencies [1728cd0]
+- Updated dependencies [20542d8]
+- Updated dependencies [eebe6ee]
+  - @prosopo/types@5.10.2
+  - @prosopo/types-database@5.6.5
+  - @prosopo/api@4.3.5
+  - @prosopo/api-express-router@3.1.95
+  - @prosopo/database@4.0.41
+  - @prosopo/datasets@3.1.91
+  - @prosopo/env@3.6.64
+  - @prosopo/ipinfo@0.4.10
+  - @prosopo/keyring@2.9.97
+  - @prosopo/load-balancer@2.11.1
+  - @prosopo/types-env@2.11.10
+  - @prosopo/user-access-policy@3.14.11
+
 ## 5.13.0
 ### Minor Changes
 

package/dist/api/admin/apiDnsEventEndpoint.d.ts

@@ -1,10 +1,10 @@
 import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
 import type { IIpInfoService } from "@prosopo/ipinfo";
 import { type Logger } from "@prosopo/logger";
-import { type DnsEvent, DnsEventBatchSchema } from "@prosopo/types";
+import { type DnsEvent, DnsEventIngestBatchSchema } from "@prosopo/types";
 import type { IProviderDatabase } from "@prosopo/types-database";
 import type { z } from "zod";
-type DnsEventBatchSchemaType = typeof DnsEventBatchSchema;
+type DnsEventBatchSchemaType = typeof DnsEventIngestBatchSchema;
 export declare const dnsEventToFields: (event: DnsEvent) => {
     resolverIp?: string;
     peerIp?: string;

package/dist/api/admin/apiDnsEventEndpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiDnsEventEndpoint.d.ts","sourceRoot":"","sources":["../../../src/api/admin/apiDnsEventEndpoint.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,KAAK,QAAQ,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAM7B,KAAK,uBAAuB,GAAG,OAAO,mBAAmB,CAAC;AAG1D,eAAO,MAAM,gBAAgB,UACrB,QAAQ,KACb;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAW7D,CAAC;AAEF,cAAM,mBAAoB,YAAW,WAAW,CAAC,uBAAuB,CAAC;IAEvE,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBADd,EAAE,EAAE,iBAAiB,EACrB,aAAa,CAAC,EAAE,cAAc,YAAA;IAG1C,cAAc,CACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAgDxB,oBAAoB,IAAI,uBAAuB;YAIxC,qBAAqB;CAkCnC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"apiDnsEventEndpoint.d.ts","sourceRoot":"","sources":["../../../src/api/admin/apiDnsEventEndpoint.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACN,KAAK,QAAQ,EACb,yBAAyB,EAEzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAU7B,KAAK,uBAAuB,GAAG,OAAO,yBAAyB,CAAC;AAGhE,eAAO,MAAM,gBAAgB,UACrB,QAAQ,KACb;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAW7D,CAAC;AAEF,cAAM,mBAAoB,YAAW,WAAW,CAAC,uBAAuB,CAAC;IAEvE,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBADd,EAAE,EAAE,iBAAiB,EACrB,aAAa,CAAC,EAAE,cAAc,YAAA;IAG1C,cAAc,CACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAuExB,oBAAoB,IAAI,uBAAuB;YAIxC,qBAAqB;CAkCnC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/api/admin/apiDnsEventEndpoint.js

@@ -1,8 +1,9 @@
 import { computeDnsAsymmetry, enrichDnsEvent } from "../../tasks/dnsEvent/enrichDnsEvent.js";
 import { getLogger } from "@prosopo/logger";
-import { DnsEventBatchSchema } from "@prosopo/types";
+import { DnsEventIngestBatchSchema, DnsEventSchema } from "@prosopo/types";
 import { ApiEndpointResponseStatus } from "@prosopo/api-route";
 //#region src/api/admin/apiDnsEventEndpoint.ts
+var MAX_LOGGED_INVALID = 5;
 var dnsEventToFields = (event) => {
 	if (event.kind === "dns") return { resolverIp: event.src_ip };
 	const out = { peerIp: event.src_ip };
@@ -19,8 +20,20 @@ var ApiDnsEventEndpoint = class {
 		const { events } = args;
 		let stored = 0;
 		let errors = 0;
+		let dropped = 0;
+		const invalid = [];
 		const now = /* @__PURE__ */ new Date();
-		for (const event of events) {
+		for (const [index, raw] of events.entries()) {
+			const parsed = DnsEventSchema.safeParse(raw);
+			if (!parsed.success) {
+				dropped += 1;
+				if (invalid.length < MAX_LOGGED_INVALID) invalid.push({
+					index,
+					issues: parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+				});
+				continue;
+			}
+			const event = parsed.data;
 			const sessionId = event.jti;
 			if (!sessionId) continue;
 			try {
@@ -41,11 +54,20 @@ var ApiDnsEventEndpoint = class {
 				}));
 			}
 		}
+		if (dropped > 0) logger.warn(() => ({
+			data: {
+				received: events.length,
+				dropped,
+				invalid
+			},
+			msg: "Dropped invalid DNS events from batch"
+		}));
 		logger.info(() => ({
 			data: {
 				received: events.length,
 				stored,
-				errors
+				errors,
+				dropped
 			},
 			msg: "Processed DNS event batch"
 		}));
@@ -53,12 +75,13 @@ var ApiDnsEventEndpoint = class {
 			status: ApiEndpointResponseStatus.SUCCESS,
 			data: {
 				stored,
-				errors
+				errors,
+				dropped
 			}
 		};
 	}
 	getRequestArgsSchema() {
-		return DnsEventBatchSchema;
+		return DnsEventIngestBatchSchema;
 	}
 	async recomputeDnsAsymmetry(sessionId, logger) {
 		if (!this.ipInfoService) return;

package/dist/api/admin/apiDnsEventEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiDnsEventEndpoint.js","sourceRoot":"","sources":["../../../src/api/admin/apiDnsEventEndpoint.ts"],"names":[],"mappings":"AAcA,OAAO,EAGN,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAiB,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGpE,OAAO,EACN,mBAAmB,EACnB,cAAc,GACd,MAAM,wCAAwC,CAAC;AAKhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,KAAe,EACiD,EAAE;IAClE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAA4C;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3C,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,mBAAmB;IACxB,YACkB,EAAqB,EACrB,aAA8B;QAD9B,OAAE,GAAF,EAAE,CAAmB;QACrB,kBAAa,GAAb,aAAa,CAAiB;IAC7C,CAAC;IAEJ,KAAK,CAAC,cAAc,CACnB,IAAsC,EACtC,MAAe;QAEf,MAAM,GAAG,MAAM;YACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACxD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,SAAS;YACV,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CACjD,SAAS,EACT,MAAM,EACN,GAAG,CACH,CAAC;gBACF,IAAI,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,CAAC,CAAC;oBACZ,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG;oBACH,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACrC,GAAG,EAAE,wCAAwC;iBAC7C,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACjD,GAAG,EAAE,2BAA2B;SAChC,CAAC,CAAC,CAAC;QAEJ,OAAO;YACN,MAAM,EAAE,yBAAyB,CAAC,OAAO;YACzC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SACxB,CAAC;IACH,CAAC;IAEM,oBAAoB;QAC1B,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,SAAiB,EACjB,MAAc;QAEd,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAChC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO,EAAE,QAAQ;gBAAE,OAAO;YAC/B,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,OAAO,CAAC,QAAQ,EAChB,IAAI,CAAC,aAAa,EAClB,OAAO,CAAC,MAAM,EAAE,EAAE,CAClB,CAAC;YAKF,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE;oBAC5C,eAAe,EAAE;wBAChB,GAAG,OAAO,CAAC,eAAe;wBAC1B,YAAY;qBACZ;iBACD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClB,GAAG;gBACH,IAAI,EAAE,EAAE,SAAS,EAAE;gBACnB,GAAG,EAAE,wDAAwD;aAC7D,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC;CACD;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"apiDnsEventEndpoint.js","sourceRoot":"","sources":["../../../src/api/admin/apiDnsEventEndpoint.ts"],"names":[],"mappings":"AAcA,OAAO,EAGN,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAEN,yBAAyB,EACzB,cAAc,GACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACN,mBAAmB,EACnB,cAAc,GACd,MAAM,wCAAwC,CAAC;AAIhD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAK7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,KAAe,EACiD,EAAE;IAClE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAA4C;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3C,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,mBAAmB;IACxB,YACkB,EAAqB,EACrB,aAA8B;QAD9B,OAAE,GAAF,EAAE,CAAmB;QACrB,kBAAa,GAAb,aAAa,CAAiB;IAC7C,CAAC;IAEJ,KAAK,CAAC,cAAc,CACnB,IAAsC,EACtC,MAAe;QAEf,MAAM,GAAG,MAAM;YACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACxD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,OAAO,GAA0C,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;oBACzC,OAAO,CAAC,IAAI,CAAC;wBACZ,KAAK;wBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAC9B,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CACtD;qBACD,CAAC,CAAC;gBACJ,CAAC;gBACD,SAAS;YACV,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;YAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,SAAS;YACV,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CACjD,SAAS,EACT,MAAM,EACN,GAAG,CACH,CAAC;gBACF,IAAI,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,CAAC,CAAC;oBACZ,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG;oBACH,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACrC,GAAG,EAAE,wCAAwC;iBAC7C,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClB,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;gBACnD,GAAG,EAAE,uCAAuC;aAC5C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClB,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1D,GAAG,EAAE,2BAA2B;SAChC,CAAC,CAAC,CAAC;QAEJ,OAAO;YACN,MAAM,EAAE,yBAAyB,CAAC,OAAO;YACzC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;SACjC,CAAC;IACH,CAAC;IAEM,oBAAoB;QAC1B,OAAO,yBAAyB,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,SAAiB,EACjB,MAAc;QAEd,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAChC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO,EAAE,QAAQ;gBAAE,OAAO;YAC/B,MAAM,QAAQ,GAAG,MAAM,cAAc,CACpC,OAAO,CAAC,QAAQ,EAChB,IAAI,CAAC,aAAa,EAClB,OAAO,CAAC,MAAM,EAAE,EAAE,CAClB,CAAC;YAKF,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE;oBAC5C,eAAe,EAAE;wBAChB,GAAG,OAAO,CAAC,eAAe;wBAC1B,YAAY;qBACZ;iBACD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClB,GAAG;gBACH,IAAI,EAAE,EAAE,SAAS,EAAE;gBACnB,GAAG,EAAE,wDAAwD;aAC7D,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC;CACD;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAEN,KAAK,kBAAkB,EACvB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAuCtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBAq3BG"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/api/captcha/getFrictionlessCaptchaChallenge/handler.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAEN,KAAK,kBAAkB,EACvB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;8BAuCtD,mBAAmB,0BACA,kBAAkB,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY;AAPpB,wBA43BG"}

package/dist/api/captcha/getFrictionlessCaptchaChallenge/handler.js

@@ -237,7 +237,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			method: req.method,
 			url: `https://${req.headers.host ?? ""}${req.originalUrl ?? req.url}`,
 			headers: flatten(req.headers)
-		});
+		}, { allowLocalSigners: process.env.NODE_ENV === "test" || process.env.NODE_ENV === "development" });
 		const verifiedSignerUrl = verified.verified ? verified.signerUrl : void 0;
 		const userScope = getRequestUserScope(flatten(req.headers), req.ja4, normalizedIp, user, void 0, void 0, countryCode, asn, verifiedSignerUrl);
 		const [decryptedPayload, validation, accessPolicies] = await Promise.all([