@prosopo/provider 5.14.0 → 5.15.0

package/dist/api/captcha/submitPoWCaptchaSolution.js

@@ -1,16 +1,16 @@
 import { validateAddr, validateSiteKey } from "../validateAddress.js";
+import { rawTlsSignalsForSession, rawTlsSignalsFromRecord } from "../rawTlsSignalsMiddleware.js";
 import { coerceToEnabledCaptchaType } from "../../tasks/captchaTypeSelection.js";
 import { samplePuzzleDifficulty } from "../../tasks/puzzle/puzzleDifficulty.js";
 import { derivePlatform, deriveTrafficPolicies } from "../../utils/devicePlatform.js";
 import { Tasks } from "../../tasks/tasks.js";
 import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
 import { resolveTestSiteKeyVerdict } from "../testSiteKey.js";
-import { rawTlsSignalsForSession } from "../rawTlsSignalsMiddleware.js";
 import { summariseRequestBody } from "../requestBodySummary.js";
 import { ProsopoApiError } from "@prosopo/common";
-import { CaptchaType, SubmitPowCaptchaSolutionBody, imageMaxRoundsDefault } from "@prosopo/types";
+import { CaptchaType, SubmitPowCaptchaSolutionBody, imageMaxRoundsDefault, resolveAllowedCaptchaTypes } from "@prosopo/types";
 import { flatten, getIPAddress } from "@prosopo/util";
-import { severityToPuzzleDifficulty } from "@prosopo/captcha-severity";
+import { resolveMaxEscalationLevel, severityToPuzzleDifficulty } from "@prosopo/captcha-severity";
 import { DEFAULT_RENDER_SETTINGS } from "@prosopo/puzzle-assets";
 //#region src/api/captcha/submitPoWCaptchaSolution.ts
 var submitPoWCaptchaSolution_default = (env) => async (req, res, next) => {
@@ -100,8 +100,9 @@ var submitPoWCaptchaSolution_default = (env) => async (req, res, next) => {
 			chelloToHandshakeUs: req.chelloToHandshakeUs,
 			...rawTlsSignalsForSession(req)
 		}, {
-			frictionlessTypes: clientRecord.settings?.frictionlessTypes,
-			imageMaxRounds: clientRecord.settings?.imageMaxRounds
+			allowedCaptchaTypes: resolveAllowedCaptchaTypes(clientRecord.settings),
+			imageMaxRounds: clientRecord.settings?.imageMaxRounds,
+			puzzleMaxDifficulty: clientRecord.settings?.puzzleMaxDifficulty
 		});
 		const response = {
 			status: "ok",
@@ -144,17 +145,19 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 	const originSession = await tasks.db.getSessionRecordBySessionId(powRecord.sessionId);
 	if (!originSession) return void 0;
 	const routed = result.routingOutput;
-	const escalatedType = coerceToEnabledCaptchaType(routed.captchaType, siteConstraints?.frictionlessTypes);
+	const escalatedType = coerceToEnabledCaptchaType(routed.captchaType, siteConstraints?.allowedCaptchaTypes);
 	if (escalatedType === CaptchaType.pow) return void 0;
 	const imageMaxRounds = siteConstraints?.imageMaxRounds ?? imageMaxRoundsDefault;
 	const escalationPuzzleOverrides = (() => {
 		if (escalatedType !== CaptchaType.puzzle) return void 0;
-		const level = severityToPuzzleDifficulty(routed.solvedImagesCount ?? originSession.solvedImagesCount, tasks.config.captchas.solved.count);
+		const { isMobile } = derivePlatform(originSession.headers?.["user-agent"] ?? "", originSession.webView);
+		const level = severityToPuzzleDifficulty(routed.solvedImagesCount ?? originSession.solvedImagesCount, tasks.config.captchas.solved.count, resolveMaxEscalationLevel(siteConstraints?.puzzleMaxDifficulty, isMobile));
 		if (level === 0) return void 0;
 		const difficulty = samplePuzzleDifficulty(level, DEFAULT_RENDER_SETTINGS.holeDarken);
 		return {
 			puzzleTolerance: difficulty.tolerance,
-			puzzle: difficulty.puzzle
+			puzzle: difficulty.puzzle,
+			puzzleLevel: difficulty.level
 		};
 	})();
 	const selectionReason = routed.reason ?? originSession.reason;
@@ -185,15 +188,7 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 		originSessionId: originSession.sessionId,
 		tcpToChelloUs: perConnectionSignals?.tcpToChelloUs,
 		chelloToHandshakeUs: perConnectionSignals?.chelloToHandshakeUs,
-		synNs: perConnectionSignals?.synNs,
-		synackNs: perConnectionSignals?.synackNs,
-		ackNs: perConnectionSignals?.ackNs,
-		observedTtl: perConnectionSignals?.observedTtl,
-		tcpMss: perConnectionSignals?.tcpMss,
-		tcpWscale: perConnectionSignals?.tcpWscale,
-		tcpOptsFlags: perConnectionSignals?.tcpOptsFlags,
-		tcpOptsOrder: perConnectionSignals?.tcpOptsOrder,
-		tcpWindow: perConnectionSignals?.tcpWindow,
+		...rawTlsSignalsFromRecord(perConnectionSignals),
 		puzzleTolerance: escalationPuzzleOverrides?.puzzleTolerance,
 		puzzle: escalationPuzzleOverrides?.puzzle,
 		clientMetaData: originSession.clientMetaData

package/dist/api/captcha/submitPoWCaptchaSolution.js.map

@@ -1 +1 @@
-{"version":3,"file":"submitPoWCaptchaSolution.js","sourceRoot":"","sources":["../../../src/api/captcha/submitPoWCaptchaSolution.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACN,WAAW,EAMX,4BAA4B,EAE5B,qBAAqB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EACN,cAAc,EACd,qBAAqB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtE,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IAIH,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,8CAA8C;SACnD,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;SACd,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,MAA8C,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACJ,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE;YACnE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,gBAAgB,GAChB,GAAG,MAAM,CAAC;IAEX,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAInB,MAAM,WAAW,GAAG,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,WAAW;SACrB,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAMD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QAId,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,gBAAgB;gBACpB,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,uCAAuC;YAC1C,IAAI,EAAE;gBACL,uBAAuB,EAAE,gBAAgB,KAAK,SAAS;gBACvD,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;gBACpD,SAAS;aACT;SACD,CAAC,CAAC,CAAC;QAEJ,MAAM,eAAe,GAAG,qBAAqB,CAC5C,YAAY,CAAC,QAAQ,EAAE,aAAa,CACpC,CAAC;QAEF,KAAK,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;YACzC,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;YAChB,WAAW;YAGX,QAAQ,EAAE,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC;YAC1C,GAAG,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS;gBACT,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI;oBACtC,aAAa,EAAE,GAAG,CAAC,aAAa;iBAChC,CAAC;gBACF,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI;oBAC5C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;iBAC5C,CAAC;gBACF,GAAG,uBAAuB,CAAC,GAAG,CAAC;gBAK/B,GAAG,CAAC,GAAG,CAAC,MAAM;oBACb,SAAS,IAAI,GAAG,CAAC,MAAM;oBACvB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBAG9C,GAAG,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,CAAC;aAC3C;SACD,CAAC,CAAC;QAOH,MAAM,wBAAwB,GAAG,YAAY,CAAC,QAAQ,CAAC,eAE3C,CAAC;QACb,MAAM,cAAc,GACnB,wBAAwB,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,wBAAwB,CACpE,SAAS,EACT,SAAS,CAAC,QAAQ,CAAC,SAAS,EAC5B,KAAK,EACL,cAAc,EACd,SAAS,CAAC,IAAI,CAAC,SAAS,EACxB,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAC1B,WAAW,EACX,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,cAAc,CACd,CAAC;QAKF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,2BAA2B;gBAChC,IAAI,EAAE;oBACL,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW;oBACpD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM;oBAC3C,SAAS;iBACT;aACD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,eAAe,CACvC,KAAK,EACL,MAAM,EACN,SAAS,EACT;YACC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;YAC5C,GAAG,uBAAuB,CAAC,GAAG,CAAC;SAC/B,EACD;YACC,iBAAiB,EAAE,YAAY,CAAC,QAAQ,EAAE,iBAAiB;YAC3D,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc;SACrD,CACD,CAAC;QACF,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YAGZ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC9C,GAAG,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;SACjC,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,0CAA0C;SAC/C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EACnC,KAAY,EACZ,MAA2E,EAC3E,SAAiB,EAKjB,oBAYC,EAMD,eAGC,EACmD,EAAE;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;IACpD,IAAI,UAAU,KAAK,WAAW,CAAC,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,EAAE,SAAS;QAAE,OAAO,SAAS,CAAC;IAE5C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAC/D,SAAS,CAAC,SAAS,CACnB,CAAC;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,CAAC,aAKrB,CAAC;IAMF,MAAM,aAAa,GAAG,0BAA0B,CAC/C,MAAM,CAAC,WAAW,EAClB,eAAe,EAAE,iBAAiB,CAClC,CAAC;IAOF,IAAI,aAAa,KAAK,WAAW,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,cAAc,GACnB,eAAe,EAAE,cAAc,IAAI,qBAAqB,CAAC;IAO1D,MAAM,yBAAyB,GAAG,CAAC,GAEtB,EAAE;QACd,IAAI,aAAa,KAAK,WAAW,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,0BAA0B,CACvC,MAAM,CAAC,iBAAiB,IAAI,aAAa,CAAC,iBAAiB,EAC3D,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAClC,CAAC;QAGF,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,UAAU,GAAG,sBAAsB,CACxC,KAAK,EACL,uBAAuB,CAAC,UAAU,CAClC,CAAC;QACF,OAAO;YACN,eAAe,EAAE,UAAU,CAAC,SAAS;YACrC,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAKL,MAAM,eAAe,GACnB,MAAM,CAAC,MAAyC,IAAI,aAAa,CAAC,MAAM,CAAC;IAO3E,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC;QAChE,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,WAAW,EAAE,aAAa;QAE1B,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,SAAS,CAAC,WAAW;QAIvD,iBAAiB,EAChB,aAAa,KAAK,WAAW,CAAC,KAAK;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CACR,MAAM,CAAC,iBAAiB;gBACvB,aAAa,CAAC,iBAAiB;gBAC/B,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EACnC,cAAc,CACd;YACF,CAAC,CAAC,SAAS;QACb,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,YAAY,EAAE,aAAa,CAAC,YAAY;QAKxC,CAAC,EAAE,aAAa,CAAC,CAAC;QAGlB,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,YAAY,EAAE,IAAI;QAMlB,eAAe,EAAE,aAAa,CAAC,SAAS;QAGxC,aAAa,EAAE,oBAAoB,EAAE,aAAa;QAClD,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB;QAC9D,KAAK,EAAE,oBAAoB,EAAE,KAAK;QAClC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ;QACxC,KAAK,EAAE,oBAAoB,EAAE,KAAK;QAClC,WAAW,EAAE,oBAAoB,EAAE,WAAW;QAC9C,MAAM,EAAE,oBAAoB,EAAE,MAAM;QACpC,SAAS,EAAE,oBAAoB,EAAE,SAAS;QAC1C,YAAY,EAAE,oBAAoB,EAAE,YAAY;QAChD,YAAY,EAAE,oBAAoB,EAAE,YAAY;QAChD,SAAS,EAAE,oBAAoB,EAAE,SAAS;QAC1C,eAAe,EAAE,yBAAyB,EAAE,eAAe;QAC3D,MAAM,EAAE,yBAAyB,EAAE,MAAM;QAGzC,cAAc,EAAE,aAAa,CAAC,cAAc;KAC5C,CAAC,CAAC;IAQH,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAC5C,SAAS,CAAC,SAAS,EACnB,UAAU,CAAC,SAAS,CACpB,CAAC;IACH,CAAC;IAED,OAAO;QACN,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,UAAU,CAAC,SAAS;KAC/B,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"submitPoWCaptchaSolution.js","sourceRoot":"","sources":["../../../src/api/captcha/submitPoWCaptchaSolution.ts"],"names":[],"mappings":"AAaA,OAAO,EACN,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACN,WAAW,EAMX,4BAA4B,EAE5B,qBAAqB,EACrB,0BAA0B,GAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EACN,cAAc,EACd,qBAAqB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAEN,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEtE,eAAe,CAAC,GAAwB,EAAE,EAAE,CAC3C,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IAIH,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,8CAA8C;SACnD,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;SACd,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,MAA8C,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACJ,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE;YACnE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,gBAAgB,GAChB,GAAG,MAAM,CAAC;IAEX,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAInB,MAAM,WAAW,GAAG,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,WAAW;SACrB,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAMD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QAId,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,gBAAgB;gBACpB,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,uCAAuC;YAC1C,IAAI,EAAE;gBACL,uBAAuB,EAAE,gBAAgB,KAAK,SAAS;gBACvD,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;gBACpD,SAAS;aACT;SACD,CAAC,CAAC,CAAC;QAEJ,MAAM,eAAe,GAAG,qBAAqB,CAC5C,YAAY,CAAC,QAAQ,EAAE,aAAa,CACpC,CAAC;QAEF,KAAK,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;YACzC,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;YAChB,WAAW;YAGX,QAAQ,EAAE,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC;YAC1C,GAAG,EAAE;gBACJ,OAAO,EAAE,WAAW;gBACpB,SAAS;gBACT,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBAC7C,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI;oBACtC,aAAa,EAAE,GAAG,CAAC,aAAa;iBAChC,CAAC;gBACF,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI;oBAC5C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;iBAC5C,CAAC;gBACF,GAAG,uBAAuB,CAAC,GAAG,CAAC;gBAK/B,GAAG,CAAC,GAAG,CAAC,MAAM;oBACb,SAAS,IAAI,GAAG,CAAC,MAAM;oBACvB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBAG9C,GAAG,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,CAAC;aAC3C;SACD,CAAC,CAAC;QAOH,MAAM,wBAAwB,GAAG,YAAY,CAAC,QAAQ,CAAC,eAE3C,CAAC;QACb,MAAM,cAAc,GACnB,wBAAwB,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,wBAAwB,CACpE,SAAS,EACT,SAAS,CAAC,QAAQ,CAAC,SAAS,EAC5B,KAAK,EACL,cAAc,EACd,SAAS,CAAC,IAAI,CAAC,SAAS,EACxB,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAC1B,WAAW,EACX,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,cAAc,CACd,CAAC;QAKF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,2BAA2B;gBAChC,IAAI,EAAE;oBACL,iBAAiB,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW;oBACpD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM;oBAC3C,SAAS;iBACT;aACD,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,eAAe,CACvC,KAAK,EACL,MAAM,EACN,SAAS,EACT;YACC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;YAC5C,GAAG,uBAAuB,CAAC,GAAG,CAAC;SAC/B,EACD;YACC,mBAAmB,EAAE,0BAA0B,CAC9C,YAAY,CAAC,QAAQ,CACrB;YACD,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc;YACrD,mBAAmB,EAAE,YAAY,CAAC,QAAQ,EAAE,mBAAmB;SAC/D,CACD,CAAC;QACF,MAAM,QAAQ,GAA+B;YAC5C,MAAM,EAAE,IAAI;YAGZ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC9C,GAAG,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;SACjC,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,0CAA0C;SAC/C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EACnC,KAAY,EACZ,MAA2E,EAC3E,SAAiB,EAKjB,oBAGC,EAMD,eAIC,EACmD,EAAE;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;IACpD,IAAI,UAAU,KAAK,WAAW,CAAC,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,EAAE,SAAS;QAAE,OAAO,SAAS,CAAC;IAE5C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAC/D,SAAS,CAAC,SAAS,CACnB,CAAC;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,CAAC,aAKrB,CAAC;IAMF,MAAM,aAAa,GAAG,0BAA0B,CAC/C,MAAM,CAAC,WAAW,EAClB,eAAe,EAAE,mBAAmB,CACpC,CAAC;IAOF,IAAI,aAAa,KAAK,WAAW,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,cAAc,GACnB,eAAe,EAAE,cAAc,IAAI,qBAAqB,CAAC;IAO1D,MAAM,yBAAyB,GAAG,CAAC,GAMtB,EAAE;QACd,IAAI,aAAa,KAAK,WAAW,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,CAClC,aAAa,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAC3C,aAAa,CAAC,OAAO,CACrB,CAAC;QACF,MAAM,KAAK,GAAG,0BAA0B,CACvC,MAAM,CAAC,iBAAiB,IAAI,aAAa,CAAC,iBAAiB,EAC3D,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAClC,yBAAyB,CAAC,eAAe,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CACzE,CAAC;QAGF,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,UAAU,GAAG,sBAAsB,CACxC,KAAK,EACL,uBAAuB,CAAC,UAAU,CAClC,CAAC;QACF,OAAO;YACN,eAAe,EAAE,UAAU,CAAC,SAAS;YACrC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,UAAU,CAAC,KAAK;SAC7B,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAKL,MAAM,eAAe,GACnB,MAAM,CAAC,MAAyC,IAAI,aAAa,CAAC,MAAM,CAAC;IAO3E,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC;QAChE,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,WAAW,EAAE,aAAa;QAE1B,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,SAAS,CAAC,WAAW;QAIvD,iBAAiB,EAChB,aAAa,KAAK,WAAW,CAAC,KAAK;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,CACR,MAAM,CAAC,iBAAiB;gBACvB,aAAa,CAAC,iBAAiB;gBAC/B,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EACnC,cAAc,CACd;YACF,CAAC,CAAC,SAAS;QACb,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,YAAY,EAAE,aAAa,CAAC,YAAY;QAKxC,CAAC,EAAE,aAAa,CAAC,CAAC;QAGlB,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,YAAY,EAAE,IAAI;QAMlB,eAAe,EAAE,aAAa,CAAC,SAAS;QAGxC,aAAa,EAAE,oBAAoB,EAAE,aAAa;QAClD,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB;QAC9D,GAAG,uBAAuB,CAAC,oBAAoB,CAAC;QAChD,eAAe,EAAE,yBAAyB,EAAE,eAAe;QAC3D,MAAM,EAAE,yBAAyB,EAAE,MAAM;QAGzC,cAAc,EAAE,aAAa,CAAC,cAAc;KAC5C,CAAC,CAAC;IAQH,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAC5C,SAAS,CAAC,SAAS,EACnB,UAAU,CAAC,SAAS,CACpB,CAAC;IACH,CAAC;IAED,OAAO;QACN,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,UAAU,CAAC,SAAS;KAC/B,CAAC;AACH,CAAC,CAAC"}

package/dist/api/rawTlsSignalsMiddleware.d.ts

@@ -9,11 +9,24 @@ export interface RawTlsSignals {
     observedTtl?: number;
     tcpMss?: number;
     tcpWscale?: number;
+    tcpWindow?: number;
+    tcpOptsKinds?: number[];
+    tcpOptsPresent?: number;
+    tcpOptsCount?: number;
+    tcpTsval?: number;
+    tcpTsecr?: number;
+    tcpFlags?: number;
+    tcpDataOffsetResv?: number;
+    tcpUrgPtr?: number;
+    ipIdent?: number;
+    ipTotalLen?: number;
+    ipFragFlags?: number;
+    ipTos?: number;
     tcpOptsFlags?: number;
     tcpOptsOrder?: number;
-    tcpWindow?: number;
 }
 export declare const getRawTlsSignals: (headers: IncomingHttpHeaders, logger?: Logger) => RawTlsSignals;
 export declare const rawTlsSignalsForSession: (req: Pick<Request, keyof RawTlsSignals>) => Partial<RawTlsSignals>;
+export declare const rawTlsSignalsFromRecord: (record: Partial<RawTlsSignals> | undefined | null) => Partial<RawTlsSignals>;
 export declare const rawTlsSignalsMiddleware: (env: ProviderEnvironment) => (req: Request, res: Response, next: NextFunction) => Promise<void>;
 //# sourceMappingURL=rawTlsSignalsMiddleware.d.ts.map

package/dist/api/rawTlsSignalsMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rawTlsSignalsMiddleware.d.ts","sourceRoot":"","sources":["../../src/api/rawTlsSignalsMiddleware.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAsB/D,MAAM,WAAW,aAAa;IAM7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IAKf,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,YAAY,CAAC,EAAE,MAAM,CAAC;IAKtB,YAAY,CAAC,EAAE,MAAM,CAAC;IAGtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAyCD,eAAO,MAAM,gBAAgB,YACnB,mBAAmB,WACnB,MAAM,KACb,aAgDF,CAAC;AAQF,eAAO,MAAM,uBAAuB,QAC9B,IAAI,CAAC,OAAO,EAAE,MAAM,aAAa,CAAC,KACrC,OAAO,CAAC,aAAa,CAYvB,CAAC;AAMF,eAAO,MAAM,uBAAuB,QAAS,mBAAmB,WAC5C,OAAO,OAAO,QAAQ,QAAQ,YAAY,kBAyB7D,CAAC"}
+{"version":3,"file":"rawTlsSignalsMiddleware.d.ts","sourceRoot":"","sources":["../../src/api/rawTlsSignalsMiddleware.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA2C/D,MAAM,WAAW,aAAa;IAM7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IAKf,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAcnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAKxB,cAAc,CAAC,EAAE,MAAM,CAAC;IAGxB,YAAY,CAAC,EAAE,MAAM,CAAC;IAQtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,CAAC,EAAE,MAAM,CAAC;IAMf,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAwID,eAAO,MAAM,gBAAgB,YACnB,mBAAmB,WACnB,MAAM,KACb,aA8GF,CAAC;AAQF,eAAO,MAAM,uBAAuB,QAC9B,IAAI,CAAC,OAAO,EAAE,MAAM,aAAa,CAAC,KACrC,OAAO,CAAC,aAAa,CAAiC,CAAC;AAW1D,eAAO,MAAM,uBAAuB,WAC3B,OAAO,CAAC,aAAa,CAAC,GAAG,SAAS,GAAG,IAAI,KAC/C,OAAO,CAAC,aAAa,CAYvB,CAAC;AAMF,eAAO,MAAM,uBAAuB,QAAS,mBAAmB,WAC5C,OAAO,OAAO,QAAQ,QAAQ,YAAY,kBAmB7D,CAAC"}

package/dist/api/rawTlsSignalsMiddleware.js

@@ -7,9 +7,44 @@ var HEADER_ACK_NS = "x-tls-ack-ns";
 var HEADER_OBSERVED_TTL = "x-tls-observed-ttl";
 var HEADER_TCP_MSS = "x-tls-tcp-mss";
 var HEADER_TCP_WSCALE = "x-tls-tcp-wscale";
+var HEADER_TCP_WINDOW = "x-tls-tcp-window";
+var HEADER_TCP_OPTS_KINDS = "x-tls-tcp-opts-kinds";
+var HEADER_TCP_OPTS_PRESENT = "x-tls-tcp-opts-present";
+var HEADER_TCP_OPTS_COUNT = "x-tls-tcp-opts-count";
+var HEADER_TCP_TSVAL = "x-tls-tcp-tsval";
+var HEADER_TCP_TSECR = "x-tls-tcp-tsecr";
+var HEADER_TCP_FLAGS = "x-tls-tcp-flags";
+var HEADER_TCP_DATA_OFFSET_RESV = "x-tls-tcp-data-offset-resv";
+var HEADER_TCP_URG_PTR = "x-tls-tcp-urg-ptr";
+var HEADER_IP_IDENT = "x-tls-ip-ident";
+var HEADER_IP_TOTAL_LEN = "x-tls-ip-total-len";
+var HEADER_IP_FRAG_FLAGS = "x-tls-ip-frag-flags";
+var HEADER_IP_TOS = "x-tls-ip-tos";
 var HEADER_TCP_OPTS_FLAGS = "x-tls-tcp-opts-flags";
 var HEADER_TCP_OPTS_ORDER = "x-tls-tcp-opts-order";
-var HEADER_TCP_WINDOW = "x-tls-tcp-window";
+var RAW_TLS_SIGNAL_KEYS = [
+	"synNs",
+	"synackNs",
+	"ackNs",
+	"observedTtl",
+	"tcpMss",
+	"tcpWscale",
+	"tcpWindow",
+	"tcpOptsKinds",
+	"tcpOptsPresent",
+	"tcpOptsCount",
+	"tcpTsval",
+	"tcpTsecr",
+	"tcpFlags",
+	"tcpDataOffsetResv",
+	"tcpUrgPtr",
+	"ipIdent",
+	"ipTotalLen",
+	"ipFragFlags",
+	"ipTos",
+	"tcpOptsFlags",
+	"tcpOptsOrder"
+];
 var parseIntHeader = (raw, logger, headerName, max) => {
 	if (raw === void 0) return;
 	const value = Array.isArray(raw) ? raw[0] : raw;
@@ -31,6 +66,46 @@ var MAX_NS = 2 ** 63;
 var MAX_U8 = 255;
 var MAX_U16 = 65535;
 var MAX_U32 = 4294967295;
+var OPTS_KINDS_SLOTS = 8;
+var MAX_U64 = (1n << 64n) - 1n;
+var parseOptsKindsHeader = (raw, logger) => {
+	if (raw === void 0) return;
+	const value = Array.isArray(raw) ? raw[0] : raw;
+	if (value === void 0 || !/^\d+$/.test(value)) {
+		if (value !== void 0) logger.debug(() => ({
+			msg: "Ignoring malformed raw TLS signal header",
+			data: {
+				header: HEADER_TCP_OPTS_KINDS,
+				raw: value
+			}
+		}));
+		return;
+	}
+	let packed;
+	try {
+		packed = BigInt(value);
+	} catch {
+		return;
+	}
+	if (packed > MAX_U64) {
+		logger.debug(() => ({
+			msg: "Ignoring out-of-range raw TLS signal header",
+			data: {
+				header: HEADER_TCP_OPTS_KINDS,
+				raw: value
+			}
+		}));
+		return;
+	}
+	if (packed === 0n) return;
+	const kinds = [];
+	for (let slot = 0; slot < OPTS_KINDS_SLOTS; slot++) {
+		const kind = Number(packed >> BigInt(slot * 8) & 255n);
+		if (kind === 0) break;
+		kinds.push(kind);
+	}
+	return kinds.length > 0 ? kinds : void 0;
+};
 var getRawTlsSignals = (headers, logger) => {
 	const log = logger ?? getLogger("info", "provider:raw-tls-signals");
 	return {
@@ -40,37 +115,50 @@ var getRawTlsSignals = (headers, logger) => {
 		observedTtl: parseIntHeader(headers[HEADER_OBSERVED_TTL], log, HEADER_OBSERVED_TTL, MAX_U8),
 		tcpMss: parseIntHeader(headers[HEADER_TCP_MSS], log, HEADER_TCP_MSS, MAX_U16),
 		tcpWscale: parseIntHeader(headers[HEADER_TCP_WSCALE], log, HEADER_TCP_WSCALE, MAX_U8),
+		tcpWindow: parseIntHeader(headers[HEADER_TCP_WINDOW], log, HEADER_TCP_WINDOW, MAX_U16),
+		tcpOptsKinds: parseOptsKindsHeader(headers[HEADER_TCP_OPTS_KINDS], log),
+		tcpOptsPresent: parseIntHeader(headers[HEADER_TCP_OPTS_PRESENT], log, HEADER_TCP_OPTS_PRESENT, MAX_U16),
+		tcpOptsCount: parseIntHeader(headers[HEADER_TCP_OPTS_COUNT], log, HEADER_TCP_OPTS_COUNT, MAX_U8),
+		tcpTsval: parseIntHeader(headers[HEADER_TCP_TSVAL], log, HEADER_TCP_TSVAL, MAX_U32),
+		tcpTsecr: parseIntHeader(headers[HEADER_TCP_TSECR], log, HEADER_TCP_TSECR, MAX_U32),
+		tcpFlags: parseIntHeader(headers[HEADER_TCP_FLAGS], log, HEADER_TCP_FLAGS, MAX_U8),
+		tcpDataOffsetResv: parseIntHeader(headers[HEADER_TCP_DATA_OFFSET_RESV], log, HEADER_TCP_DATA_OFFSET_RESV, MAX_U8),
+		tcpUrgPtr: parseIntHeader(headers[HEADER_TCP_URG_PTR], log, HEADER_TCP_URG_PTR, MAX_U16),
+		ipIdent: parseIntHeader(headers[HEADER_IP_IDENT], log, HEADER_IP_IDENT, MAX_U16),
+		ipTotalLen: parseIntHeader(headers[HEADER_IP_TOTAL_LEN], log, HEADER_IP_TOTAL_LEN, MAX_U16),
+		ipFragFlags: parseIntHeader(headers[HEADER_IP_FRAG_FLAGS], log, HEADER_IP_FRAG_FLAGS, MAX_U16),
+		ipTos: parseIntHeader(headers[HEADER_IP_TOS], log, HEADER_IP_TOS, MAX_U8),
 		tcpOptsFlags: parseIntHeader(headers[HEADER_TCP_OPTS_FLAGS], log, HEADER_TCP_OPTS_FLAGS, MAX_U8),
-		tcpOptsOrder: parseIntHeader(headers[HEADER_TCP_OPTS_ORDER], log, HEADER_TCP_OPTS_ORDER, MAX_U32),
-		tcpWindow: parseIntHeader(headers[HEADER_TCP_WINDOW], log, HEADER_TCP_WINDOW, MAX_U16)
+		tcpOptsOrder: parseIntHeader(headers[HEADER_TCP_OPTS_ORDER], log, HEADER_TCP_OPTS_ORDER, MAX_U32)
 	};
 };
-var rawTlsSignalsForSession = (req) => {
+var rawTlsSignalsForSession = (req) => rawTlsSignalsFromRecord(req);
+/**
+* Pull the raw TLS signals out of a persisted Session — or anything shaped
+* like one — for a decision machine's `raw` bag, or to carry forward onto a
+* new Session record.
+*
+* Six call sites used to name every field by hand, so adding one to the
+* probe meant remembering six places; the fields that were forgotten read as
+* `undefined` and the rules gating on them silently never fired.
+*/
+var rawTlsSignalsFromRecord = (record) => {
 	const out = {};
-	if (req.synNs !== void 0) out.synNs = req.synNs;
-	if (req.synackNs !== void 0) out.synackNs = req.synackNs;
-	if (req.ackNs !== void 0) out.ackNs = req.ackNs;
-	if (req.observedTtl !== void 0) out.observedTtl = req.observedTtl;
-	if (req.tcpMss !== void 0) out.tcpMss = req.tcpMss;
-	if (req.tcpWscale !== void 0) out.tcpWscale = req.tcpWscale;
-	if (req.tcpOptsFlags !== void 0) out.tcpOptsFlags = req.tcpOptsFlags;
-	if (req.tcpOptsOrder !== void 0) out.tcpOptsOrder = req.tcpOptsOrder;
-	if (req.tcpWindow !== void 0) out.tcpWindow = req.tcpWindow;
+	if (!record) return out;
+	for (const key of RAW_TLS_SIGNAL_KEYS) {
+		const value = record[key];
+		if (value !== void 0) Object.assign(out, { [key]: value });
+	}
 	return out;
 };
 var rawTlsSignalsMiddleware = (env) => {
 	return async (req, res, next) => {
 		try {
 			const signals = getRawTlsSignals(req.headers, req.logger);
-			if (signals.synNs !== void 0) req.synNs = signals.synNs;
-			if (signals.synackNs !== void 0) req.synackNs = signals.synackNs;
-			if (signals.ackNs !== void 0) req.ackNs = signals.ackNs;
-			if (signals.observedTtl !== void 0) req.observedTtl = signals.observedTtl;
-			if (signals.tcpMss !== void 0) req.tcpMss = signals.tcpMss;
-			if (signals.tcpWscale !== void 0) req.tcpWscale = signals.tcpWscale;
-			if (signals.tcpOptsFlags !== void 0) req.tcpOptsFlags = signals.tcpOptsFlags;
-			if (signals.tcpOptsOrder !== void 0) req.tcpOptsOrder = signals.tcpOptsOrder;
-			if (signals.tcpWindow !== void 0) req.tcpWindow = signals.tcpWindow;
+			for (const key of RAW_TLS_SIGNAL_KEYS) {
+				const value = signals[key];
+				if (value !== void 0) Object.assign(req, { [key]: value });
+			}
 			if (Object.values(signals).some((v) => v !== void 0)) req.logger = req.logger.with(signals, "rawTlsSignals");
 			next();
 		} catch (err) {
@@ -79,4 +167,4 @@ var rawTlsSignalsMiddleware = (env) => {
 	};
 };
 //#endregion
-export { getRawTlsSignals, rawTlsSignalsForSession, rawTlsSignalsMiddleware };
+export { getRawTlsSignals, rawTlsSignalsForSession, rawTlsSignalsFromRecord, rawTlsSignalsMiddleware };

package/dist/api/rawTlsSignalsMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"rawTlsSignalsMiddleware.js","sourceRoot":"","sources":["../../src/api/rawTlsSignalsMiddleware.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAczD,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAoC7C,MAAM,cAAc,GAAG,CACtB,GAAkC,EAClC,MAAc,EACd,UAAkB,EAClB,GAAW,EACU,EAAE;IACvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACnB,GAAG,EAAE,0CAA0C;YAC/C,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE;SACxC,CAAC,CAAC,CAAC;QACJ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAYF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AACvB,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,OAAO,GAAG,aAAa,CAAC;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,OAA4B,EAC5B,MAAe,EACC,EAAE;IAClB,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACpE,OAAO;QACN,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC;QACzE,QAAQ,EAAE,cAAc,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,GAAG,EACH,gBAAgB,EAChB,MAAM,CACN;QACD,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC;QACzE,WAAW,EAAE,cAAc,CAC1B,OAAO,CAAC,mBAAmB,CAAC,EAC5B,GAAG,EACH,mBAAmB,EACnB,MAAM,CACN;QACD,MAAM,EAAE,cAAc,CACrB,OAAO,CAAC,cAAc,CAAC,EACvB,GAAG,EACH,cAAc,EACd,OAAO,CACP;QACD,SAAS,EAAE,cAAc,CACxB,OAAO,CAAC,iBAAiB,CAAC,EAC1B,GAAG,EACH,iBAAiB,EACjB,MAAM,CACN;QACD,YAAY,EAAE,cAAc,CAC3B,OAAO,CAAC,qBAAqB,CAAC,EAC9B,GAAG,EACH,qBAAqB,EACrB,MAAM,CACN;QACD,YAAY,EAAE,cAAc,CAC3B,OAAO,CAAC,qBAAqB,CAAC,EAC9B,GAAG,EACH,qBAAqB,EACrB,OAAO,CACP;QACD,SAAS,EAAE,cAAc,CACxB,OAAO,CAAC,iBAAiB,CAAC,EAC1B,GAAG,EACH,iBAAiB,EACjB,OAAO,CACP;KACD,CAAC;AACH,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,GAAuC,EACd,EAAE;IAC3B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACnD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACrE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IACtD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACxE,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACxE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAwB,EAAE,EAAE;IACnE,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC3D,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YACpE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC3D,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBACpC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9D,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACvE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBACrC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YACzC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBACrC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YACzC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAEvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YACnE,IAAI,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,GAAY,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;IACF,CAAC,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"rawTlsSignalsMiddleware.js","sourceRoot":"","sources":["../../src/api/rawTlsSignalsMiddleware.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAczD,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAI7C,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AACzD,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,2BAA2B,GAAG,4BAA4B,CAAC;AACjE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AACnD,MAAM,aAAa,GAAG,cAAc,CAAC;AAOrC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AACrD,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAgGrD,MAAM,mBAAmB,GAAG;IAC3B,OAAO;IACP,UAAU;IACV,OAAO;IACP,aAAa;IACb,QAAQ;IACR,WAAW;IACX,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,UAAU;IACV,UAAU;IACV,UAAU;IACV,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,aAAa;IACb,OAAO;IACP,cAAc;IACd,cAAc;CACsC,CAAC;AAQtD,MAAM,oBAAoB,GACzB,IAAI,CAAC;AAEN,MAAM,cAAc,GAAG,CACtB,GAAkC,EAClC,MAAc,EACd,UAAkB,EAClB,GAAW,EACU,EAAE;IACvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACnB,GAAG,EAAE,0CAA0C;YAC/C,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE;SACxC,CAAC,CAAC,CAAC;QACJ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAYF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AACvB,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,OAAO,GAAG,aAAa,CAAC;AAG9B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAQjC,MAAM,oBAAoB,GAAG,CAC5B,GAAkC,EAClC,MAAc,EACS,EAAE;IACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,0CAA0C;gBAC/C,IAAI,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,KAAK,EAAE;aACnD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACnB,GAAG,EAAE,6CAA6C;YAClD,IAAI,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,KAAK,EAAE;SACnD,CAAC,CAAC,CAAC;QACJ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAGnB,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;QACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,OAA4B,EAC5B,MAAe,EACC,EAAE;IAClB,MAAM,GAAG,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACpE,OAAO;QACN,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC;QACzE,QAAQ,EAAE,cAAc,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,GAAG,EACH,gBAAgB,EAChB,MAAM,CACN;QACD,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC;QACzE,WAAW,EAAE,cAAc,CAC1B,OAAO,CAAC,mBAAmB,CAAC,EAC5B,GAAG,EACH,mBAAmB,EACnB,MAAM,CACN;QACD,MAAM,EAAE,cAAc,CACrB,OAAO,CAAC,cAAc,CAAC,EACvB,GAAG,EACH,cAAc,EACd,OAAO,CACP;QACD,SAAS,EAAE,cAAc,CACxB,OAAO,CAAC,iBAAiB,CAAC,EAC1B,GAAG,EACH,iBAAiB,EACjB,MAAM,CACN;QACD,SAAS,EAAE,cAAc,CACxB,OAAO,CAAC,iBAAiB,CAAC,EAC1B,GAAG,EACH,iBAAiB,EACjB,OAAO,CACP;QACD,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,GAAG,CAAC;QACvE,cAAc,EAAE,cAAc,CAC7B,OAAO,CAAC,uBAAuB,CAAC,EAChC,GAAG,EACH,uBAAuB,EACvB,OAAO,CACP;QACD,YAAY,EAAE,cAAc,CAC3B,OAAO,CAAC,qBAAqB,CAAC,EAC9B,GAAG,EACH,qBAAqB,EACrB,MAAM,CACN;QACD,QAAQ,EAAE,cAAc,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,GAAG,EACH,gBAAgB,EAChB,OAAO,CACP;QACD,QAAQ,EAAE,cAAc,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,GAAG,EACH,gBAAgB,EAChB,OAAO,CACP;QACD,QAAQ,EAAE,cAAc,CACvB,OAAO,CAAC,gBAAgB,CAAC,EACzB,GAAG,EACH,gBAAgB,EAChB,MAAM,CACN;QACD,iBAAiB,EAAE,cAAc,CAChC,OAAO,CAAC,2BAA2B,CAAC,EACpC,GAAG,EACH,2BAA2B,EAC3B,MAAM,CACN;QACD,SAAS,EAAE,cAAc,CACxB,OAAO,CAAC,kBAAkB,CAAC,EAC3B,GAAG,EACH,kBAAkB,EAClB,OAAO,CACP;QACD,OAAO,EAAE,cAAc,CACtB,OAAO,CAAC,eAAe,CAAC,EACxB,GAAG,EACH,eAAe,EACf,OAAO,CACP;QACD,UAAU,EAAE,cAAc,CACzB,OAAO,CAAC,mBAAmB,CAAC,EAC5B,GAAG,EACH,mBAAmB,EACnB,OAAO,CACP;QACD,WAAW,EAAE,cAAc,CAC1B,OAAO,CAAC,oBAAoB,CAAC,EAC7B,GAAG,EACH,oBAAoB,EACpB,OAAO,CACP;QACD,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC;QACzE,YAAY,EAAE,cAAc,CAC3B,OAAO,CAAC,qBAAqB,CAAC,EAC9B,GAAG,EACH,qBAAqB,EACrB,MAAM,CACN;QACD,YAAY,EAAE,cAAc,CAC3B,OAAO,CAAC,qBAAqB,CAAC,EAC9B,GAAG,EACH,qBAAqB,EACrB,OAAO,CACP;KACD,CAAC;AACH,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,GAAuC,EACd,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;AAW1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,MAAiD,EACxB,EAAE;IAC3B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAwB,EAAE,EAAE;IACnE,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAChE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1D,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtC,CAAC;YACF,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YACnE,IAAI,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,GAAY,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;IACF,CAAC,CAAC;AACH,CAAC,CAAC"}

package/dist/api/startProviderApi.js

@@ -1,8 +1,8 @@
 import { metricsMiddleware } from "./metrics.js";
+import { rawTlsSignalsMiddleware } from "./rawTlsSignalsMiddleware.js";
 import { getVerdictCache } from "./blacklistRequestInspector.js";
 import { initDetectorBundlePool } from "../tasks/detection/bundlePool.js";
 import { blockMiddleware } from "./block.js";
-import { rawTlsSignalsMiddleware } from "./rawTlsSignalsMiddleware.js";
 import { prosopoRouter } from "./captcha.js";
 import { prosopoVerifyRouter } from "./verify.js";
 import { ja4Middleware } from "./ja4Middleware.js";
@@ -19,10 +19,10 @@ import { ipInfoMiddleware } from "./ipInfoMiddleware.js";
 import { robotsMiddleware } from "./robotsMiddleware.js";
 import { parseLogLevel } from "@prosopo/logger";
 import { AdminApiPaths, ClientApiPaths } from "@prosopo/types";
+import { apiExpressRouterFactory, authMiddleware, createApiExpressDefaultEndpointAdapter, requestLoggerMiddleware } from "@prosopo/api-express-router";
 import fs from "node:fs";
 import path from "node:path";
 import https from "node:https";
-import { apiExpressRouterFactory, authMiddleware, createApiExpressDefaultEndpointAdapter, requestLoggerMiddleware } from "@prosopo/api-express-router";
 import express from "express";
 import { fileURLToPath } from "node:url";
 import { i18nMiddleware } from "@prosopo/locale";

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/constants.cjs

@@ -13,6 +13,15 @@ var resolveScoreLadder = (configured) => {
 	};
 };
 /**
+* The types any session minted by /frictionless may be. The owner's
+* `frictionlessTypes` only governs the frictionless flow, so a site pinned to
+* a concrete `captchaType` is held to the feature flags alone.
+*/
+var resolveSiteAllowedCaptchaTypes = (settings) => (0, _prosopo_types.resolveAllowedCaptchaTypes)({
+	captchaTypeFeatureFlags: settings.captchaTypeFeatureFlags,
+	...(!settings.captchaType || settings.captchaType === _prosopo_types.CaptchaType.frictionless) && { frictionlessTypes: settings.frictionlessTypes }
+});
+/**
 * Size an image challenge by how much was actually found. `base` is the
 * sitekey's ordinary image round count; each triggered signal adds a round,
 * capped by `MAX_DETECTOR_EXTRA_IMAGE_ROUNDS`. A session with nothing
@@ -24,3 +33,4 @@ var getRoundsFromTriggeredDetectors = (base, triggeredDetectors) => base + Math.
 //#endregion
 exports.getRoundsFromTriggeredDetectors = getRoundsFromTriggeredDetectors;
 exports.resolveScoreLadder = resolveScoreLadder;
+exports.resolveSiteAllowedCaptchaTypes = resolveSiteAllowedCaptchaTypes;

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/handler.cjs

@@ -1,7 +1,9 @@
 const require_metrics = require("../../metrics.cjs");
 const require_dnsEventUrl = require("../../dnsEventUrl.cjs");
+const require_rawTlsSignalsMiddleware = require("../../rawTlsSignalsMiddleware.cjs");
 const require_compositeIpAddress = require("../../../compositeIpAddress.cjs");
 const require_blacklistRequestInspector = require("../../blacklistRequestInspector.cjs");
+const require_captchaTypeSelection = require("../../../tasks/captchaTypeSelection.cjs");
 const require_devicePlatform = require("../../../utils/devicePlatform.cjs");
 const require_tasks = require("../../../tasks/tasks.cjs");
 const require_apiToggleMaintenanceModeEndpoint = require("../../admin/apiToggleMaintenanceModeEndpoint.cjs");
@@ -9,7 +11,6 @@ const require_testSiteKey = require("../../testSiteKey.cjs");
 const require_normalizeRequestIp = require("../../../utils/normalizeRequestIp.cjs");
 const require_hashUserAgent = require("../../../utils/hashUserAgent.cjs");
 const require_hashUserIp = require("../../../utils/hashUserIp.cjs");
-const require_rawTlsSignalsMiddleware = require("../../rawTlsSignalsMiddleware.cjs");
 const require_maintenanceModeResponses = require("../maintenanceModeResponses.cjs");
 const require_trafficFilterRequestTime = require("../trafficFilterRequestTime.cjs");
 const require_honeypotResponse = require("./honeypotResponse.cjs");
@@ -17,6 +18,7 @@ const require_accessPolicy = require("./accessPolicy.cjs");
 const require_constants = require("./constants.cjs");
 const require_decisionMachine = require("./decisionMachine.cjs");
 const require_decryptSimdReadings = require("./decryptSimdReadings.cjs");
+const require_refreshLineage = require("./refreshLineage.cjs");
 const require_sessionDedup = require("./sessionDedup.cjs");
 const require_shortCircuit = require("./shortCircuit.cjs");
 let _prosopo_common = require("@prosopo/common");
@@ -38,7 +40,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 				}
 			}));
 		});
-		const { token, headHash, dapp, user, mode, simdReadings, detectorSessionId, currentUrl: reportedCurrentUrl, iframeUrl: reportedIframeUrl, clientSessionId } = _prosopo_types.GetFrictionlessCaptchaChallengeRequestBody.parse(req.body);
+		const { token, headHash, dapp, user, mode, simdReadings, detectorSessionId, currentUrl: reportedCurrentUrl, iframeUrl: reportedIframeUrl, clientSessionId, refreshOf } = _prosopo_types.GetFrictionlessCaptchaChallengeRequestBody.parse(req.body);
 		const currentUrl = (0, _prosopo_util.sanitisePageUrl)(reportedCurrentUrl);
 		const iframeUrl = (0, _prosopo_util.sanitisePageUrl)(reportedIframeUrl);
 		const isProtect = (0, _prosopo_util.isProtectDeployment)(currentUrl, iframeUrl);
@@ -108,6 +110,8 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			i18n: req.i18n,
 			logger: req.logger
 		}));
+		const allowedCaptchaTypes = require_constants.resolveSiteAllowedCaptchaTypes(clientRecord.settings);
+		tasks.frictionlessManager.setAllowedCaptchaTypes(allowedCaptchaTypes);
 		if (dedup) {
 			const dedupCountryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
 			const dedupAsn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
@@ -144,16 +148,17 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 					...dedupTrafficPolicies && { trafficPolicies: dedupTrafficPolicies }
 				}
 			}) : { captchaType: cachedCaptchaType };
-			const dedupConflictsWithRouting = dedupRouted.captchaType !== cachedCaptchaType;
+			const dedupConflictsWithRouting = require_captchaTypeSelection.coerceToEnabledCaptchaType(dedupRouted.captchaType, allowedCaptchaTypes) !== cachedCaptchaType;
+			const dedupConflictsWithAllowedTypes = require_captchaTypeSelection.coerceToEnabledCaptchaType(cachedCaptchaType, allowedCaptchaTypes) !== cachedCaptchaType;
 			let dedupConflictsWithBundle = false;
 			let dedupIncomingBundleId;
 			if (detectorSessionId && dedup.session.bundleId) {
 				dedupIncomingBundleId = (await tasks.frictionlessManager.resolveBundleByDetectorSession(detectorSessionId))?.bundleId;
 				if (dedupIncomingBundleId !== void 0 && dedupIncomingBundleId !== dedup.session.bundleId) dedupConflictsWithBundle = true;
 			}
-			if (dedupConflictsWithPolicy || dedupConflictsWithRouting) {
+			if (dedupConflictsWithPolicy || dedupConflictsWithRouting || dedupConflictsWithAllowedTypes) {
 				req.logger.info(() => ({
-					msg: "Evicting reused session: cached captchaType conflicts with access policy or routing machine",
+					msg: "Evicting reused session: cached captchaType conflicts with access policy, routing machine or allowed types",
 					data: {
 						userSitekeyIpHash,
 						sessionId: dedup.sessionId,
@@ -162,7 +167,8 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 							policyType: dedupAccessPolicy?.type,
 							policyCaptchaType: dedupAccessPolicy?.captchaType
 						},
-						...dedupConflictsWithRouting && { routedCaptchaType: dedupRouted.captchaType }
+						...dedupConflictsWithRouting && { routedCaptchaType: dedupRouted.captchaType },
+						...dedupConflictsWithAllowedTypes && { allowedCaptchaTypes }
 					}
 				}));
 				await tasks.db.checkAndRemoveSession(dedup.sessionId);
@@ -306,6 +312,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			...triggeredDetectors && triggeredDetectors.length > 0 && { triggeredDetectors },
 			...shadowDomPenalty !== void 0 && { shadowDomPenalty }
 		};
+		const refreshLineage = await require_refreshLineage.resolveRefreshLineage(tasks.db, refreshOf, dapp, /* @__PURE__ */ new Date());
 		tasks.frictionlessManager.setSessionParams({
 			token: sessionToken,
 			score: botScore,
@@ -326,6 +333,7 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			...decodedSimdReadings && { simdReadings: decodedSimdReadings },
 			...d !== void 0 && { d },
 			...clientSessionId && { clientMetaData: { clientSessionId } },
+			...refreshLineage,
 			...req.tcpToChelloUs !== void 0 && { tcpToChelloUs: req.tcpToChelloUs },
 			...req.chelloToHandshakeUs !== void 0 && { chelloToHandshakeUs: req.chelloToHandshakeUs },
 			...require_rawTlsSignalsMiddleware.rawTlsSignalsForSession(req)
@@ -341,7 +349,6 @@ var handler_default = (env, userAccessRulesStorage) => async (req, res, next) =>
 			score: botScore,
 			imageMaxRounds: clientRecord.settings.imageMaxRounds,
 			imageMinRounds: clientRecord.settings.imageMinRounds,
-			frictionlessTypes: clientRecord.settings.frictionlessTypes,
 			baseImageRounds: env.config.captchas.solved.count,
 			puzzleMaxDifficulty: clientRecord.settings.puzzleMaxDifficulty,
 			platform: require_devicePlatform.derivePlatform(requestUserAgent, webView, { ...typeof ipInfoMobile === "boolean" && { isMobile: ipInfoMobile } }),

package/dist/cjs/api/captcha/getFrictionlessCaptchaChallenge/refreshLineage.cjs

@@ -0,0 +1,20 @@
+//#region src/api/captcha/getFrictionlessCaptchaChallenge/refreshLineage.ts
+/**
+* Work out where a refresh sits in its chain from the session it replaced.
+*
+* An unknown session, or one from another site, is ignored rather than
+* rejected: the request then mints an ordinary session, which is all a client
+* that never sent `refreshOf` would have got.
+*/
+var resolveRefreshLineage = async (db, refreshOf, siteKey, now) => {
+	if (!refreshOf) return void 0;
+	const replaced = await db.getSessionRecordBySessionId(refreshOf);
+	if (!replaced || replaced.siteKey !== siteKey) return void 0;
+	return {
+		refreshOf,
+		refreshCount: (replaced.refreshCount ?? 0) + 1,
+		refreshedAfterMs: Math.max(0, now.getTime() - new Date(replaced.createdAt).getTime())
+	};
+};
+//#endregion
+exports.resolveRefreshLineage = resolveRefreshLineage;

package/dist/cjs/api/captcha/getPuzzleCaptchaChallenge.cjs

@@ -13,6 +13,7 @@ const require_requestBodySummary = require("../requestBodySummary.cjs");
 let _prosopo_common = require("@prosopo/common");
 let _prosopo_types = require("@prosopo/types");
 let _prosopo_util = require("@prosopo/util");
+let _prosopo_puzzle_assets = require("@prosopo/puzzle-assets");
 //#region src/api/captcha/getPuzzleCaptchaChallenge.ts
 var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (req, res, next) => {
 	let parsed;
@@ -113,6 +114,29 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 			targetX: challenge.targetX,
 			targetY: challenge.targetY
 		}, effectivePuzzleSettings, effectivePieceSize);
+		await tasks.db.updatePuzzleCaptchaRecord(challenge.challenge, { render: {
+			...sessionRecord?.puzzleLevel !== void 0 && { level: sessionRecord.puzzleLevel },
+			pieceSize: images.pieceSize,
+			geometry: {
+				width: _prosopo_puzzle_assets.DEFAULT_GEOMETRY.width,
+				height: _prosopo_puzzle_assets.DEFAULT_GEOMETRY.height,
+				notchSize: _prosopo_puzzle_assets.DEFAULT_GEOMETRY.notchSize
+			},
+			settings: {
+				decoyCount: effectivePuzzleSettings.decoyCount,
+				decoyEdgeDarkness: effectivePuzzleSettings.decoyEdgeDarkness,
+				decoyBodyBrightness: effectivePuzzleSettings.decoyBodyBrightness,
+				holeDarken: effectivePuzzleSettings.holeDarken,
+				decoyHoleDarken: effectivePuzzleSettings.decoyHoleDarken
+			},
+			backgroundSeed: images.backgroundSeed,
+			renderSeed: images.renderSeed
+		} }).catch((updateErr) => {
+			req.logger.warn(() => ({
+				err: updateErr,
+				msg: "Failed to patch puzzle render inputs onto the challenge record"
+			}));
+		});
 		const padBytes = trafficVerdict.padBytes;
 		const getPuzzleCaptchaResponse = {
 			[_prosopo_types.ApiParams.status]: "ok",

package/dist/cjs/api/captcha/submitPoWCaptchaSolution.cjs

@@ -1,11 +1,11 @@
 const require_validateAddress = require("../validateAddress.cjs");
+const require_rawTlsSignalsMiddleware = require("../rawTlsSignalsMiddleware.cjs");
 const require_captchaTypeSelection = require("../../tasks/captchaTypeSelection.cjs");
 const require_puzzleDifficulty = require("../../tasks/puzzle/puzzleDifficulty.cjs");
 const require_devicePlatform = require("../../utils/devicePlatform.cjs");
 const require_tasks = require("../../tasks/tasks.cjs");
 const require_apiToggleMaintenanceModeEndpoint = require("../admin/apiToggleMaintenanceModeEndpoint.cjs");
 const require_testSiteKey = require("../testSiteKey.cjs");
-const require_rawTlsSignalsMiddleware = require("../rawTlsSignalsMiddleware.cjs");
 const require_requestBodySummary = require("../requestBodySummary.cjs");
 let _prosopo_common = require("@prosopo/common");
 let _prosopo_types = require("@prosopo/types");
@@ -100,8 +100,9 @@ var submitPoWCaptchaSolution_default = (env) => async (req, res, next) => {
 			chelloToHandshakeUs: req.chelloToHandshakeUs,
 			...require_rawTlsSignalsMiddleware.rawTlsSignalsForSession(req)
 		}, {
-			frictionlessTypes: clientRecord.settings?.frictionlessTypes,
-			imageMaxRounds: clientRecord.settings?.imageMaxRounds
+			allowedCaptchaTypes: (0, _prosopo_types.resolveAllowedCaptchaTypes)(clientRecord.settings),
+			imageMaxRounds: clientRecord.settings?.imageMaxRounds,
+			puzzleMaxDifficulty: clientRecord.settings?.puzzleMaxDifficulty
 		});
 		const response = {
 			status: "ok",
@@ -144,17 +145,19 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 	const originSession = await tasks.db.getSessionRecordBySessionId(powRecord.sessionId);
 	if (!originSession) return void 0;
 	const routed = result.routingOutput;
-	const escalatedType = require_captchaTypeSelection.coerceToEnabledCaptchaType(routed.captchaType, siteConstraints?.frictionlessTypes);
+	const escalatedType = require_captchaTypeSelection.coerceToEnabledCaptchaType(routed.captchaType, siteConstraints?.allowedCaptchaTypes);
 	if (escalatedType === _prosopo_types.CaptchaType.pow) return void 0;
 	const imageMaxRounds = siteConstraints?.imageMaxRounds ?? _prosopo_types.imageMaxRoundsDefault;
 	const escalationPuzzleOverrides = (() => {
 		if (escalatedType !== _prosopo_types.CaptchaType.puzzle) return void 0;
-		const level = (0, _prosopo_captcha_severity.severityToPuzzleDifficulty)(routed.solvedImagesCount ?? originSession.solvedImagesCount, tasks.config.captchas.solved.count);
+		const { isMobile } = require_devicePlatform.derivePlatform(originSession.headers?.["user-agent"] ?? "", originSession.webView);
+		const level = (0, _prosopo_captcha_severity.severityToPuzzleDifficulty)(routed.solvedImagesCount ?? originSession.solvedImagesCount, tasks.config.captchas.solved.count, (0, _prosopo_captcha_severity.resolveMaxEscalationLevel)(siteConstraints?.puzzleMaxDifficulty, isMobile));
 		if (level === 0) return void 0;
 		const difficulty = require_puzzleDifficulty.samplePuzzleDifficulty(level, _prosopo_puzzle_assets.DEFAULT_RENDER_SETTINGS.holeDarken);
 		return {
 			puzzleTolerance: difficulty.tolerance,
-			puzzle: difficulty.puzzle
+			puzzle: difficulty.puzzle,
+			puzzleLevel: difficulty.level
 		};
 	})();
 	const selectionReason = routed.reason ?? originSession.reason;
@@ -185,15 +188,7 @@ var buildEscalation = async (tasks, result, challenge, perConnectionSignals, sit
 		originSessionId: originSession.sessionId,
 		tcpToChelloUs: perConnectionSignals?.tcpToChelloUs,
 		chelloToHandshakeUs: perConnectionSignals?.chelloToHandshakeUs,
-		synNs: perConnectionSignals?.synNs,
-		synackNs: perConnectionSignals?.synackNs,
-		ackNs: perConnectionSignals?.ackNs,
-		observedTtl: perConnectionSignals?.observedTtl,
-		tcpMss: perConnectionSignals?.tcpMss,
-		tcpWscale: perConnectionSignals?.tcpWscale,
-		tcpOptsFlags: perConnectionSignals?.tcpOptsFlags,
-		tcpOptsOrder: perConnectionSignals?.tcpOptsOrder,
-		tcpWindow: perConnectionSignals?.tcpWindow,
+		...require_rawTlsSignalsMiddleware.rawTlsSignalsFromRecord(perConnectionSignals),
 		puzzleTolerance: escalationPuzzleOverrides?.puzzleTolerance,
 		puzzle: escalationPuzzleOverrides?.puzzle,
 		clientMetaData: originSession.clientMetaData