@prosopo/provider 5.14.0 → 5.16.0

package/dist/compositeIpAddress.js

@@ -4,6 +4,11 @@ import { Address4, Address6 } from "ip-address";
 //#region src/compositeIpAddress.ts
 var V6_SHIFT = 64n;
 var v6_LOWER_MASK = (1n << V6_SHIFT) - 1n;
+/**
+* The part of a v4 address treated as the host rather than the network, for
+* the purposes of `isSameIpOrigin`. 8 bits — a /24.
+*/
+var V4_HOST_BITS = 8n;
 var getCompositeIpAddress = (ip) => {
 	let ipAddress;
 	try {
@@ -60,10 +65,19 @@ var isUnknownIp = (ip) => ip.type === IpAddressType.v4 && readPart(ip.lower) ===
 /**
 * Do two observations of a client come from the same place on the network?
 *
-* v4 is compared exactly. v6 is compared on the /64 prefix alone — the
-* interface identifier in the low 64 bits is designed to rotate (RFC 8981
-* privacy extensions), often several times a day on one unchanged connection,
-* so comparing it would call an ordinary phone a different host.
+* Both families are compared on the network part and neither on the host part.
+*
+* v6 is the /64 prefix: the interface identifier in the low 64 bits is designed
+* to rotate (RFC 8981 privacy extensions), often several times a day on one
+* unchanged connection, so comparing it would call an ordinary phone a
+* different host.
+*
+* v4 is the /24. A carrier NAT or mobile pool reassigns the low octet mid
+* session — an EE subscriber was observed moving one address in four seconds —
+* so comparing the whole address called every rotating mobile and CGNAT client
+* a different host, which is the opposite of the leniency this check is for.
+* The /24 still separates an unrelated network, which is the case worth
+* catching: a challenge handed to a second host to farm the work out.
 *
 * A value we do not actually have counts as the same — one that will not
 * parse, or the all-zero v4 `getCompositeIpAddress` returns when handed an
@@ -73,13 +87,13 @@ var isUnknownIp = (ip) => ip.type === IpAddressType.v4 && readPart(ip.lower) ===
 var isSameIpOrigin = (a, b) => {
 	if (isUnknownIp(a) || isUnknownIp(b)) return true;
 	if (a.type !== b.type) return false;
-	const compare = (left, right) => {
+	const sameNetwork = (left, right, hostBits) => {
 		const leftPart = readPart(left);
 		const rightPart = readPart(right);
 		if (leftPart === void 0 || rightPart === void 0) return true;
-		return leftPart === rightPart;
+		return leftPart >> hostBits === rightPart >> hostBits;
 	};
-	return a.type === IpAddressType.v6 ? compare(a.upper, b.upper) : compare(a.lower, b.lower);
+	return a.type === IpAddressType.v6 ? sameNetwork(a.upper, b.upper, 0n) : sameNetwork(a.lower, b.lower, V4_HOST_BITS);
 };
 var never = () => {
 	throw new Error("Unhandled type");

package/dist/compositeIpAddress.js.map

@@ -1 +1 @@
-{"version":3,"file":"compositeIpAddress.js","sourceRoot":"","sources":["../src/compositeIpAddress.ts"],"names":[],"mappings":"AAeA,OAAO,EAA2B,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,EAAsB,EACD,EAAE;IACvB,IAAI,SAAoB,CAAC;IAEzB,IAAI,CAAC;QACJ,SAAS,GAAG,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,aAAa,CAAC,EAAE;SACtB,CAAC;IACH,CAAC;IAED,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CACjC,SAAoB,EACC,EAAE;IACvB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;IAErC,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;QACnC,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,aAAa,CAAC,EAAE;SACtB,CAAC;IACH,CAAC;IAED,SAA4B,CAAC;IAE7B,OAAO;QACN,KAAK,EAAE,SAAS,GAAG,aAAa;QAChC,KAAK,EAAE,SAAS,IAAI,QAAQ;QAC5B,IAAI,EAAE,aAAa,CAAC,EAAE;KACtB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,kBAAsC,EAC1B,EAAE;IACd,QAAQ,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,aAAa,CAAC,EAAE;YACpB,OAAO,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,KAAK,aAAa,CAAC,EAAE;YACpB,OAAO,QAAQ,CAAC,UAAU,CACzB,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;gBAChD,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CACtD,CAAC;QACH;YACC,KAAK,EAAE,CAAC;YACR,OAAO,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAmC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAOhF,MAAM,QAAQ,GAAG,CAAC,KAAkC,EAAsB,EAAE;IAC3E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC;QACJ,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC,CAAC;AAOF,MAAM,WAAW,GAAG,CAAC,EAAsB,EAAW,EAAE,CACvD,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAe3D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,CAAqB,EACrB,CAAqB,EACX,EAAE;IACZ,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,OAAO,GAAG,CACf,IAAiC,EACjC,KAAkC,EACxB,EAAE;QACZ,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO,QAAQ,KAAK,SAAS,CAAC;IAC/B,CAAC,CAAC;IAEF,OAAO,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE;QACjC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,GAAU,EAAE;IACzB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACnC,CAAC,CAAC"}
+{"version":3,"file":"compositeIpAddress.js","sourceRoot":"","sources":["../src/compositeIpAddress.ts"],"names":[],"mappings":"AAeA,OAAO,EAA2B,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;AAM5C,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,EAAsB,EACD,EAAE;IACvB,IAAI,SAAoB,CAAC;IAEzB,IAAI,CAAC;QACJ,SAAS,GAAG,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO;YACN,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,aAAa,CAAC,EAAE;SACtB,CAAC;IACH,CAAC;IAED,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CACjC,SAAoB,EACC,EAAE;IACvB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;IAErC,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;QACnC,OAAO;YACN,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,aAAa,CAAC,EAAE;SACtB,CAAC;IACH,CAAC;IAED,SAA4B,CAAC;IAE7B,OAAO;QACN,KAAK,EAAE,SAAS,GAAG,aAAa;QAChC,KAAK,EAAE,SAAS,IAAI,QAAQ;QAC5B,IAAI,EAAE,aAAa,CAAC,EAAE;KACtB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,kBAAsC,EAC1B,EAAE;IACd,QAAQ,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,aAAa,CAAC,EAAE;YACpB,OAAO,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,KAAK,aAAa,CAAC,EAAE;YACpB,OAAO,QAAQ,CAAC,UAAU,CACzB,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC;gBAChD,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,CACtD,CAAC;QACH;YACC,KAAK,EAAE,CAAC;YACR,OAAO,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAmC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAOhF,MAAM,QAAQ,GAAG,CAAC,KAAkC,EAAsB,EAAE;IAC3E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC;QACJ,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC,CAAC;AAOF,MAAM,WAAW,GAAG,CAAC,EAAsB,EAAW,EAAE,CACvD,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAwB3D,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,CAAqB,EACrB,CAAqB,EACX,EAAE;IACZ,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,WAAW,GAAG,CACnB,IAAiC,EACjC,KAAkC,EAClC,QAAgB,EACN,EAAE;QACZ,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC;IACvD,CAAC,CAAC;IAIF,OAAO,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE;QACjC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,GAAU,EAAE;IACzB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACnC,CAAC,CAAC"}

package/dist/index.js

@@ -1,9 +1,9 @@
 import "./_virtual/_rolldown/runtime.js";
 import { getCompositeIpAddress, getIpAddressFromComposite, isSameIpOrigin } from "./compositeIpAddress.js";
-import { BlacklistRequestInspector, getPrioritisedAccessRule, getRequestUserScope, getVerdictCache, normalizeHeadersForMatching, rankCandidateRules } from "./api/blacklistRequestInspector.js";
-import { FrictionlessReason } from "./tasks/frictionless/frictionlessTasks.js";
 import { compareIPs } from "./services/ipComparison.js";
 import { checkIfTaskIsRunning, deepValidateIpAddress, encodeStringAddress, evaluateIpValidationRules, getIPAddress, getIPAddressFromBigInt, shuffleArray, validateIpAddress } from "./util.js";
+import { BlacklistRequestInspector, getPrioritisedAccessRule, getRequestUserScope, getVerdictCache, normalizeHeadersForMatching, rankCandidateRules } from "./api/blacklistRequestInspector.js";
+import { FrictionlessReason } from "./tasks/frictionless/frictionlessTasks.js";
 import { Tasks } from "./tasks/tasks.js";
 import { updateSpamEmailDomains } from "./tasks/spam/updateSpamEmailDomains.js";
 import { blockMiddleware } from "./api/block.js";

package/dist/tasks/audio/audioBuffer.d.ts

@@ -0,0 +1,23 @@
+import { type AudioRenderSettings, type RenderedAudioChallenge } from "@prosopo/audio-assets";
+export interface AudioChallengeBuffer {
+    take(settings: AudioRenderSettings): RenderedAudioChallenge;
+    depth(): number;
+    starvations(): number;
+    stop(): void;
+}
+export interface AudioBufferOptions {
+    capacity?: number;
+    refillIntervalMs?: number;
+    refillBatch?: number;
+    maxVariants?: number;
+    primeSettings?: AudioRenderSettings;
+}
+export declare const DEFAULT_CAPACITY = 8;
+export declare const DEFAULT_REFILL_INTERVAL_MS = 500;
+export declare const DEFAULT_REFILL_BATCH = 2;
+export declare const DEFAULT_MAX_VARIANTS = 8;
+export declare const createAudioChallengeBuffer: (options?: AudioBufferOptions) => AudioChallengeBuffer;
+export declare const initAudioChallengeBuffer: (options?: AudioBufferOptions) => AudioChallengeBuffer;
+export declare const getAudioChallengeBuffer: () => AudioChallengeBuffer | null;
+export declare const resetAudioChallengeBuffer: () => void;
+//# sourceMappingURL=audioBuffer.d.ts.map

package/dist/tasks/audio/audioBuffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioBuffer.d.ts","sourceRoot":"","sources":["../../../src/tasks/audio/audioBuffer.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,mBAAmB,EAExB,KAAK,sBAAsB,EAE3B,MAAM,uBAAuB,CAAC;AAa/B,MAAM,WAAW,oBAAoB;IAEpC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,sBAAsB,CAAC;IAE5D,KAAK,IAAI,MAAM,CAAC;IAEhB,WAAW,IAAI,MAAM,CAAC;IAEtB,IAAI,IAAI,IAAI,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IAElC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAatC,eAAO,MAAM,0BAA0B,aAC7B,kBAAkB,KACzB,oBAiEF,CAAC;AAIF,eAAO,MAAM,wBAAwB,aAC3B,kBAAkB,KACzB,oBAIF,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAO,oBAAoB,GAAG,IACrD,CAAC;AAGd,eAAO,MAAM,yBAAyB,QAAO,IAG5C,CAAC"}

package/dist/tasks/audio/audioBuffer.js

@@ -0,0 +1,70 @@
+import { DEFAULT_RENDER_SETTINGS, renderAudioChallenge } from "@prosopo/audio-assets";
+var settingsKey = (settings) => [
+	settings.digitCount,
+	settings.noiseSnrDb,
+	settings.babbleGain,
+	settings.babbleVoices,
+	settings.reverbMix,
+	settings.gapMs
+].join(":");
+var createAudioChallengeBuffer = (options = {}) => {
+	const capacity = options.capacity ?? 8;
+	const refillIntervalMs = options.refillIntervalMs ?? 500;
+	const refillBatch = options.refillBatch ?? 2;
+	const maxVariants = options.maxVariants ?? 8;
+	const variants = /* @__PURE__ */ new Map();
+	let starved = 0;
+	const touch = (key, settings) => {
+		const existing = variants.get(key);
+		if (existing) {
+			variants.delete(key);
+			variants.set(key, existing);
+			return existing;
+		}
+		const created = {
+			settings,
+			ready: []
+		};
+		variants.set(key, created);
+		while (variants.size > maxVariants) {
+			const oldest = variants.keys().next().value;
+			if (oldest === void 0) break;
+			variants.delete(oldest);
+		}
+		return created;
+	};
+	const topUp = (limit) => {
+		for (const variant of variants.values()) for (let i = 0; i < limit && variant.ready.length < capacity; i++) variant.ready.push(renderAudioChallenge(variant.settings));
+	};
+	const prime = options.primeSettings ?? DEFAULT_RENDER_SETTINGS;
+	touch(settingsKey(prime), prime);
+	topUp(capacity);
+	const timer = setInterval(() => topUp(refillBatch), refillIntervalMs);
+	timer.unref?.();
+	return {
+		take(settings) {
+			const challenge = touch(settingsKey(settings), settings).ready.pop();
+			if (!challenge) {
+				starved++;
+				return renderAudioChallenge(settings);
+			}
+			return challenge;
+		},
+		depth: () => {
+			let total = 0;
+			for (const variant of variants.values()) total += variant.ready.length;
+			return total;
+		},
+		starvations: () => starved,
+		stop: () => clearInterval(timer)
+	};
+};
+var globalBuffer = null;
+var initAudioChallengeBuffer = (options = {}) => {
+	globalBuffer?.stop();
+	globalBuffer = createAudioChallengeBuffer(options);
+	return globalBuffer;
+};
+var getAudioChallengeBuffer = () => globalBuffer;
+//#endregion
+export { createAudioChallengeBuffer, getAudioChallengeBuffer, initAudioChallengeBuffer };

package/dist/tasks/audio/audioBuffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioBuffer.js","sourceRoot":"","sources":["../../../src/tasks/audio/audioBuffer.ts"],"names":[],"mappings":"AAcA,OAAO,EAEN,uBAAuB,EAEvB,oBAAoB,GACpB,MAAM,uBAAuB,CAAC;AAqC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAGtC,MAAM,WAAW,GAAG,CAAC,QAA6B,EAAU,EAAE,CAC7D;IACC,QAAQ,CAAC,UAAU;IACnB,QAAQ,CAAC,UAAU;IACnB,QAAQ,CAAC,UAAU;IACnB,QAAQ,CAAC,YAAY;IACrB,QAAQ,CAAC,SAAS;IAClB,QAAQ,CAAC,KAAK;CACd,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEb,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,UAA8B,EAAE,EACT,EAAE;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACtD,MAAM,gBAAgB,GACrB,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAGhE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,QAA6B,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5B,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAA8B,EAAE,CAAC;QACpE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,QAAQ,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAQ,EAAE;QACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5D,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC/D,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEtE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEhB,OAAO;QACN,IAAI,CAAC,QAA6B;YACjC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;gBACV,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,KAAK,EAAE,GAAW,EAAE;YACnB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACvE,OAAO,KAAK,CAAC;QACd,CAAC;QACD,WAAW,EAAE,GAAW,EAAE,CAAC,OAAO;QAClC,IAAI,EAAE,GAAS,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;KACtC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,YAAY,GAAgC,IAAI,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACvC,UAA8B,EAAE,EACT,EAAE;IACzB,YAAY,EAAE,IAAI,EAAE,CAAC;IACrB,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAgC,EAAE,CACxE,YAAY,CAAC;AAGd,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAS,EAAE;IACnD,YAAY,EAAE,IAAI,EAAE,CAAC;IACrB,YAAY,GAAG,IAAI,CAAC;AACrB,CAAC,CAAC"}

package/dist/tasks/audio/audioRenderer.d.ts

@@ -0,0 +1,11 @@
+import { type AudioRenderSettings } from "@prosopo/audio-assets";
+import type { IAudioSettings } from "@prosopo/types";
+export interface RenderedAudioClip {
+    clip: string;
+    characterCount: number;
+    answer: string;
+    durationMs: number;
+}
+export declare const resolveAudioRenderSettings: (...overrides: (IAudioSettings | undefined)[]) => AudioRenderSettings;
+export declare const renderAudioClip: (settings: AudioRenderSettings) => RenderedAudioClip;
+//# sourceMappingURL=audioRenderer.d.ts.map

package/dist/tasks/audio/audioRenderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioRenderer.d.ts","sourceRoot":"","sources":["../../../src/tasks/audio/audioRenderer.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,mBAAmB,EAIxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,iBAAiB;IAEjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IAEvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,0BAA0B,iBACxB,CAAC,cAAc,GAAG,SAAS,CAAC,EAAE,KAC1C,mBAaF,CAAC;AAMF,eAAO,MAAM,eAAe,aACjB,mBAAmB,KAC3B,iBAUF,CAAC"}

package/dist/tasks/audio/audioRenderer.js

@@ -0,0 +1,31 @@
+import { getAudioChallengeBuffer, initAudioChallengeBuffer } from "./audioBuffer.js";
+import { DEFAULT_RENDER_SETTINGS, toDataUri } from "@prosopo/audio-assets";
+//#region src/tasks/audio/audioRenderer.ts
+/** Layers partial overrides onto the asset defaults; later sources win. */
+var resolveAudioRenderSettings = (...overrides) => {
+	let resolved = { ...DEFAULT_RENDER_SETTINGS };
+	for (const override of overrides) resolved = {
+		digitCount: override?.digitCount ?? resolved.digitCount,
+		noiseSnrDb: override?.noiseSnrDb ?? resolved.noiseSnrDb,
+		babbleGain: override?.babbleGain ?? resolved.babbleGain,
+		babbleVoices: override?.babbleVoices ?? resolved.babbleVoices,
+		reverbMix: override?.reverbMix ?? resolved.reverbMix,
+		gapMs: override?.gapMs ?? resolved.gapMs
+	};
+	return resolved;
+};
+/**
+* Takes one challenge from the process-wide buffer, created on first use so a
+* provider that never serves audio pays nothing for it.
+*/
+var renderAudioClip = (settings) => {
+	const challenge = (getAudioChallengeBuffer() ?? initAudioChallengeBuffer()).take(settings);
+	return {
+		clip: toDataUri(challenge.wav),
+		characterCount: challenge.answer.length,
+		answer: challenge.answer,
+		durationMs: challenge.durationMs
+	};
+};
+//#endregion
+export { renderAudioClip, resolveAudioRenderSettings };

package/dist/tasks/audio/audioRenderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioRenderer.js","sourceRoot":"","sources":["../../../src/tasks/audio/audioRenderer.ts"],"names":[],"mappings":"AAcA,OAAO,EAEN,uBAAuB,EAEvB,SAAS,GACT,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACN,uBAAuB,EACvB,wBAAwB,GACxB,MAAM,kBAAkB,CAAC;AAY1B,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACzC,GAAG,SAAyC,EACtB,EAAE;IACxB,IAAI,QAAQ,GAAwB,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACnE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,QAAQ,GAAG;YACV,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU;YACvD,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU;YACvD,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU;YACvD,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;YAC7D,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;YACpD,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC,KAAK;SACxC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC9B,QAA6B,EACT,EAAE;IACtB,MAAM,MAAM,GAAG,uBAAuB,EAAE,IAAI,wBAAwB,EAAE,CAAC;IACvE,MAAM,SAAS,GAA2B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEhE,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;QAC9B,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM;QACvC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,UAAU,EAAE,SAAS,CAAC,UAAU;KAChC,CAAC;AACH,CAAC,CAAC"}

package/dist/tasks/audioAlternative.d.ts

@@ -0,0 +1,8 @@
+import { CaptchaType, type IUserSettings } from "@prosopo/types";
+export declare const isAudioAlternativeSessionType: (captchaType: string | undefined) => boolean;
+type AudioAlternativeSettings = Pick<IUserSettings, "audioAccessibilityEnabled" | "captchaTypeFeatureFlags">;
+export declare const isAudioAlternativeEnabled: (settings: AudioAlternativeSettings | undefined) => boolean;
+export declare const offersAudioAlternative: (captchaType: string | undefined, audioAlternativeEnabled: boolean) => boolean;
+export declare const isAudioAlternativeAllowed: (requestedCaptchaType: CaptchaType, sessionCaptchaType: CaptchaType, settings: AudioAlternativeSettings | undefined) => boolean;
+export {};
+//# sourceMappingURL=audioAlternative.d.ts.map

package/dist/tasks/audioAlternative.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioAlternative.d.ts","sourceRoot":"","sources":["../../src/tasks/audioAlternative.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,WAAW,EACX,KAAK,aAAa,EAElB,MAAM,gBAAgB,CAAC;AAaxB,eAAO,MAAM,6BAA6B,gBAC5B,MAAM,GAAG,SAAS,KAC7B,OAC2E,CAAC;AAE/E,KAAK,wBAAwB,GAAG,IAAI,CACnC,aAAa,EACb,2BAA2B,GAAG,yBAAyB,CACvD,CAAC;AAMF,eAAO,MAAM,yBAAyB,aAC3B,wBAAwB,GAAG,SAAS,KAC5C,OAKD,CAAC;AAGH,eAAO,MAAM,sBAAsB,gBACrB,MAAM,GAAG,SAAS,2BACN,OAAO,KAC9B,OACmE,CAAC;AAGvE,eAAO,MAAM,yBAAyB,yBACf,WAAW,sBACb,WAAW,YACrB,wBAAwB,GAAG,SAAS,KAC5C,OAKD,CAAC"}

package/dist/tasks/audioAlternative.js

@@ -0,0 +1,20 @@
+import { CaptchaType, isCaptchaTypeFeatureEnabled } from "@prosopo/types";
+//#region src/tasks/audioAlternative.ts
+var AUDIO_ALTERNATIVE_SESSION_TYPES = /* @__PURE__ */ new Set([
+	CaptchaType.image,
+	CaptchaType.puzzle,
+	CaptchaType.iconOrder
+]);
+/** Whether a session of this type is a visual challenge that can offer audio. */
+var isAudioAlternativeSessionType = (captchaType) => captchaType !== void 0 && AUDIO_ALTERNATIVE_SESSION_TYPES.has(captchaType);
+/**
+* The site owner has to turn the alternative on, and Prosopo has to have
+* switched on the audio feature flag for the site.
+*/
+var isAudioAlternativeEnabled = (settings) => settings?.audioAccessibilityEnabled === true && isCaptchaTypeFeatureEnabled(CaptchaType.audio, settings.captchaTypeFeatureFlags);
+/** Whether a challenge of this type shows "use audio instead". */
+var offersAudioAlternative = (captchaType, audioAlternativeEnabled) => audioAlternativeEnabled && isAudioAlternativeSessionType(captchaType);
+/** Whether an audio challenge may be issued against a session of another type. */
+var isAudioAlternativeAllowed = (requestedCaptchaType, sessionCaptchaType, settings) => requestedCaptchaType === CaptchaType.audio && offersAudioAlternative(sessionCaptchaType, isAudioAlternativeEnabled(settings));
+//#endregion
+export { isAudioAlternativeAllowed, isAudioAlternativeEnabled, isAudioAlternativeSessionType, offersAudioAlternative };

package/dist/tasks/audioAlternative.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioAlternative.js","sourceRoot":"","sources":["../../src/tasks/audioAlternative.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,WAAW,EAEX,2BAA2B,GAC3B,MAAM,gBAAgB,CAAC;AAMxB,MAAM,+BAA+B,GAAwB,IAAI,GAAG,CAAS;IAC5E,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,MAAM;IAClB,WAAW,CAAC,SAAS;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,WAA+B,EACrB,EAAE,CACZ,WAAW,KAAK,SAAS,IAAI,+BAA+B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAW/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,QAA8C,EACpC,EAAE,CACZ,QAAQ,EAAE,yBAAyB,KAAK,IAAI;IAC5C,2BAA2B,CAC1B,WAAW,CAAC,KAAK,EACjB,QAAQ,CAAC,uBAAuB,CAChC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACrC,WAA+B,EAC/B,uBAAgC,EACtB,EAAE,CACZ,uBAAuB,IAAI,6BAA6B,CAAC,WAAW,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,oBAAiC,EACjC,kBAA+B,EAC/B,QAA8C,EACpC,EAAE,CACZ,oBAAoB,KAAK,WAAW,CAAC,KAAK;IAC1C,sBAAsB,CACrB,kBAAkB,EAClB,yBAAyB,CAAC,QAAQ,CAAC,CACnC,CAAC"}

package/dist/tasks/audioCaptcha/audioTasks.d.ts

@@ -0,0 +1,19 @@
+import type { AudioRenderSettings } from "@prosopo/audio-assets";
+import { type AudioEvent, type CaptchaResult, CaptchaType, type ClientMetaData, type DecisionMachineInput, type IPAddress, type PoWChallengeId } from "@prosopo/types";
+import type { AudioCaptchaRecord } from "@prosopo/types-database";
+import { type RenderedAudioClip } from "../audio/audioRenderer.js";
+import { InteractiveCaptchaManager, type InteractiveCaptchaRecordUpdate, type MintedChallenge } from "../interactiveCaptcha/interactiveCaptchaManager.js";
+export type AudioCaptchaChallenge = MintedChallenge & RenderedAudioClip;
+export declare class AudioCaptchaManager extends InteractiveCaptchaManager<AudioCaptchaRecord> {
+    protected readonly captchaType = CaptchaType.audio;
+    protected readonly logLabel = "audio";
+    protected getRecordByChallenge(challenge: string): Promise<AudioCaptchaRecord | null>;
+    protected updateRecord(challenge: PoWChallengeId, updates: InteractiveCaptchaRecordUpdate): Promise<void>;
+    protected updateSubmissionResult(challenge: PoWChallengeId, result: CaptchaResult, userSignature: string, coords: [number, number][][] | undefined): Promise<void>;
+    protected claimSubmission(record: AudioCaptchaRecord): Promise<boolean>;
+    protected markRecordChecked(challenge: PoWChallengeId): Promise<boolean>;
+    protected decisionMachineEventFields(record: AudioCaptchaRecord): Partial<DecisionMachineInput>;
+    getAudioCaptchaChallenge(userAccount: string, dappAccount: string, settings: AudioRenderSettings): AudioCaptchaChallenge;
+    verifyAudioCaptchaSolution(challenge: PoWChallengeId, providerChallengeSignature: string, submittedAnswer: string, replays: number, audioEvents: AudioEvent[], timeout: number, userTimestampSignature: string, ipAddress: IPAddress, behavioralData?: string, salt?: string, simdReadings?: string, clientMetaData?: ClientMetaData): Promise<boolean>;
+}
+//# sourceMappingURL=audioTasks.d.ts.map

package/dist/tasks/audioCaptcha/audioTasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioTasks.d.ts","sourceRoot":"","sources":["../../../src/tasks/audioCaptcha/audioTasks.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACN,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,yBAAyB,EACzB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,MAAM,oDAAoD,CAAC;AAM5D,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAExE,qBAAa,mBAAoB,SAAQ,yBAAyB,CAAC,kBAAkB,CAAC;IACrF,SAAS,CAAC,QAAQ,CAAC,WAAW,qBAAqB;IACnD,SAAS,CAAC,QAAQ,CAAC,QAAQ,WAAW;IAEtC,SAAS,CAAC,oBAAoB,CAC7B,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAIrC,SAAS,CAAC,YAAY,CACrB,SAAS,EAAE,cAAc,EACzB,OAAO,EAAE,8BAA8B,GACrC,OAAO,CAAC,IAAI,CAAC;IAIhB,SAAS,CAAC,sBAAsB,CAC/B,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC;IAYhB,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE,SAAS,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxE,SAAS,CAAC,0BAA0B,CACnC,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAQhC,wBAAwB,CACvB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,GAC3B,qBAAqB;IAOlB,0BAA0B,CAC/B,SAAS,EAAE,cAAc,EACzB,0BAA0B,EAAE,MAAM,EAClC,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,EAAE,EACzB,OAAO,EAAE,MAAM,EACf,sBAAsB,EAAE,MAAM,EAC9B,SAAS,EAAE,SAAS,EACpB,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,CAAC,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,cAAc,GAC7B,OAAO,CAAC,OAAO,CAAC;CAuBnB"}

package/dist/tasks/audioCaptcha/audioTasks.js

@@ -0,0 +1,65 @@
+import { renderAudioClip } from "../audio/audioRenderer.js";
+import { InteractiveCaptchaManager } from "../interactiveCaptcha/interactiveCaptchaManager.js";
+import { normaliseAudioAnswer, validateAudioSolution } from "./audioTasksUtils.js";
+import { CaptchaType } from "@prosopo/types";
+//#region src/tasks/audioCaptcha/audioTasks.ts
+var AudioCaptchaManager = class extends InteractiveCaptchaManager {
+	constructor(..._args) {
+		super(..._args);
+		this.captchaType = CaptchaType.audio;
+		this.logLabel = "audio";
+	}
+	getRecordByChallenge(challenge) {
+		return this.db.getAudioCaptchaRecordByChallenge(challenge);
+	}
+	updateRecord(challenge, updates) {
+		return this.db.updateAudioCaptchaRecord(challenge, updates);
+	}
+	updateSubmissionResult(challenge, result, userSignature, coords) {
+		return this.db.updateAudioCaptchaRecordResult(challenge, result, false, true, userSignature, coords);
+	}
+	/** Atomic, so concurrent submissions cannot each be graded. */
+	claimSubmission(record) {
+		return this.db.claimAudioCaptchaSubmission(record.challenge);
+	}
+	markRecordChecked(challenge) {
+		return this.db.markAudioCaptchaRecordChecked(challenge);
+	}
+	decisionMachineEventFields(record) {
+		return {
+			audioEvents: record.audioEvents,
+			audioReplays: record.replays
+		};
+	}
+	/**
+	* The renderer picks the digits, so the answer only exists once the clip
+	* does; the caller must store `answer` before responding.
+	*/
+	getAudioCaptchaChallenge(userAccount, dappAccount, settings) {
+		return {
+			...this.mintChallenge(userAccount, dappAccount),
+			...renderAudioClip(settings)
+		};
+	}
+	async verifyAudioCaptchaSolution(challenge, providerChallengeSignature, submittedAnswer, replays, audioEvents, timeout, userTimestampSignature, ipAddress, behavioralData, salt, simdReadings, clientMetaData) {
+		return this.submitInteractiveCaptchaSolution({
+			challenge,
+			providerChallengeSignature,
+			timeout,
+			userTimestampSignature,
+			ipAddress,
+			behavioralData,
+			salt,
+			simdReadings,
+			clientMetaData,
+			isCorrect: (record) => validateAudioSolution(submittedAnswer, record.answer),
+			persistInteraction: () => this.db.updateAudioCaptchaRecord(challenge, {
+				audioEvents,
+				replays,
+				submittedAnswer: normaliseAudioAnswer(submittedAnswer)
+			})
+		});
+	}
+};
+//#endregion
+export { AudioCaptchaManager };

package/dist/tasks/audioCaptcha/audioTasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioTasks.js","sourceRoot":"","sources":["../../../src/tasks/audioCaptcha/audioTasks.ts"],"names":[],"mappings":"AAeA,OAAO,EAGN,WAAW,GAKX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEN,eAAe,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,yBAAyB,GAGzB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACN,oBAAoB,EACpB,qBAAqB,GACrB,MAAM,sBAAsB,CAAC;AAI9B,MAAM,OAAO,mBAAoB,SAAQ,yBAA6C;IAAtF;;QACoB,gBAAW,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,aAAQ,GAAG,OAAO,CAAC;IAiGvC,CAAC;IA/FU,oBAAoB,CAC7B,SAAiB;QAEjB,OAAO,IAAI,CAAC,EAAE,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAES,YAAY,CACrB,SAAyB,EACzB,OAAuC;QAEvC,OAAO,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAES,sBAAsB,CAC/B,SAAyB,EACzB,MAAqB,EACrB,aAAqB,EACrB,MAAwC;QAExC,OAAO,IAAI,CAAC,EAAE,CAAC,8BAA8B,CAC5C,SAAS,EACT,MAAM,EACN,KAAK,EACL,IAAI,EACJ,aAAa,EACb,MAAM,CACN,CAAC;IACH,CAAC;IAGS,eAAe,CAAC,MAA0B;QACnD,OAAO,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAES,iBAAiB,CAAC,SAAyB;QACpD,OAAO,IAAI,CAAC,EAAE,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAES,0BAA0B,CACnC,MAA0B;QAE1B,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAMD,wBAAwB,CACvB,WAAmB,EACnB,WAAmB,EACnB,QAA6B;QAE7B,OAAO;YACN,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC;YAC/C,GAAG,eAAe,CAAC,QAAQ,CAAC;SAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC/B,SAAyB,EACzB,0BAAkC,EAClC,eAAuB,EACvB,OAAe,EACf,WAAyB,EACzB,OAAe,EACf,sBAA8B,EAC9B,SAAoB,EACpB,cAAuB,EACvB,IAAa,EACb,YAAqB,EACrB,cAA+B;QAE/B,OAAO,IAAI,CAAC,gCAAgC,CAAC;YAC5C,SAAS;YACT,0BAA0B;YAC1B,OAAO;YACP,sBAAsB;YACtB,SAAS;YACT,cAAc;YACd,IAAI;YACJ,YAAY;YACZ,cAAc;YACd,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,qBAAqB,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;YAGtD,kBAAkB,EAAE,GAAG,EAAE,CACxB,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE;gBAC3C,WAAW;gBACX,OAAO;gBACP,eAAe,EAAE,oBAAoB,CAAC,eAAe,CAAC;aACtD,CAAC;SACH,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/tasks/audioCaptcha/audioTasksUtils.d.ts

@@ -0,0 +1,3 @@
+export declare const normaliseAudioAnswer: (raw: string) => string;
+export declare const validateAudioSolution: (submitted: string, expected: string) => boolean;
+//# sourceMappingURL=audioTasksUtils.d.ts.map

package/dist/tasks/audioCaptcha/audioTasksUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioTasksUtils.d.ts","sourceRoot":"","sources":["../../../src/tasks/audioCaptcha/audioTasksUtils.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,oBAAoB,QAAS,MAAM,KAAG,MAC5B,CAAC;AAOxB,eAAO,MAAM,qBAAqB,cACtB,MAAM,YACP,MAAM,KACd,OAKF,CAAC"}

package/dist/tasks/audioCaptcha/audioTasksUtils.js

@@ -0,0 +1,18 @@
+//#region src/tasks/audioCaptcha/audioTasksUtils.ts
+/**
+* Keeps only the digits, in order: "1 2 3", "1-2-3" and screen-reader inserted
+* separators all grade the same, and no different digit sequence can pass.
+*/
+var normaliseAudioAnswer = (raw) => raw.replace(/\D/g, "");
+/**
+* Exact match after normalisation. No edit-distance slack: one substitution
+* widens the accepted set far more than it helps a listener, and a wrong
+* answer only costs a fresh challenge.
+*/
+var validateAudioSolution = (submitted, expected) => {
+	const normalised = normaliseAudioAnswer(submitted);
+	if (normalised.length === 0 || expected.length === 0) return false;
+	return normalised === expected;
+};
+//#endregion
+export { normaliseAudioAnswer, validateAudioSolution };

package/dist/tasks/audioCaptcha/audioTasksUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioTasksUtils.js","sourceRoot":"","sources":["../../../src/tasks/audioCaptcha/audioTasksUtils.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAU,EAAE,CAC3D,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAOxB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,SAAiB,EACjB,QAAgB,EACN,EAAE;IACZ,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAEnD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,UAAU,KAAK,QAAQ,CAAC;AAChC,CAAC,CAAC"}

package/dist/tasks/captchaManager.d.ts

@@ -1,8 +1,8 @@
 import type { RedisWriteQueue } from "@prosopo/database";
 import type { TranslationKey } from "@prosopo/locale";
 import { type Logger } from "@prosopo/logger";
-import { type CaptchaType, type EnrichedDnsEvent, type IPInfoResponse, type ITrafficFilter, type KeyringPair, type ProsopoConfigOutput, type RequestHeaders, type Session, type SimdReadingsStage, Tier, type UserCommitment } from "@prosopo/types";
-import type { ClientRecord, IProviderDatabase, IUserDataSlim, PoWCaptchaRecord, ProjectedSession, PuzzleCaptchaRecord } from "@prosopo/types-database";
+import { CaptchaType, type CompositeIpAddress, type EnrichedDnsEvent, type IPInfoResponse, type ITrafficFilter, type KeyringPair, type ProsopoConfigOutput, type RequestHeaders, type Session, type SimdReadingsStage, Tier } from "@prosopo/types";
+import type { ClientRecord, IProviderDatabase, IUserDataSlim, ProjectedSession } from "@prosopo/types-database";
 import type { ProviderEnvironment } from "@prosopo/types-env";
 import { type AccessPolicy, type AccessRule, type AccessRulesStorage, type UserScope, type UserScopeRecord } from "@prosopo/user-access-policy";
 import type { BehavioralDataResult } from "./detection/decodeBehavior.js";
@@ -14,6 +14,12 @@ export interface PoolBundleDecrypt {
     payloadLayout?: string;
     keyMap?: string;
 }
+export interface HardBlockRecordView {
+    dappAccount: string;
+    ipAddress: CompositeIpAddress;
+    ja4: string;
+    sessionId?: string;
+}
 export declare class CaptchaManager {
     pair: KeyringPair;
     db: IProviderDatabase;
@@ -68,7 +74,7 @@ export declare class CaptchaManager {
     resolveBundleBySessionId(sessionId?: string): Promise<PoolBundleDecrypt | undefined>;
     decryptSimdReadings(encryptedData: string, bundle: PoolBundleDecrypt | undefined): Promise<SimdReadingsResult | null>;
     decryptBehavioralData(encryptedData: string, bundle: PoolBundleDecrypt | undefined): Promise<BehavioralDataResult | null>;
-    checkForHardBlock(userAccessRulesStorage: AccessRulesStorage, challengeRecord: PoWCaptchaRecord | PuzzleCaptchaRecord | UserCommitment, userAccount: string, headers: RequestHeaders, coords?: [number, number][][], countryCode?: string, asn?: number): Promise<AccessRule | undefined>;
+    checkForHardBlock(userAccessRulesStorage: AccessRulesStorage, challengeRecord: HardBlockRecordView, userAccount: string, headers: RequestHeaders, coords?: [number, number][][], countryCode?: string, asn?: number): Promise<AccessRule | undefined>;
     checkSpamEmail(email: string): Promise<boolean>;
     resolveTrafficFilterCheck(env: ProviderEnvironment, recordIpInfo: IPInfoResponse | undefined, trafficFilter: Partial<ITrafficFilter> | undefined, currentIp?: string, enrichedDnsEvent?: EnrichedDnsEvent): Promise<TrafficCheckResult>;
     static canClientSeeScore(tier: Tier, score?: number): boolean;

package/dist/tasks/captchaManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"captchaManager.d.ts","sourceRoot":"","sources":["../../src/tasks/captchaManager.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAEN,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EAEnB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,IAAI,EAEJ,KAAK,cAAc,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,YAAY,EAEjB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,MAAM,6BAA6B,CAAC;AAQrC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,OAAO,EACN,KAAK,kBAAkB,EAEvB,MAAM,8BAA8B,CAAC;AAStC,MAAM,WAAW,iBAAiB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IAMpB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAkCD,qBAAa,cAAc;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,iBAAiB,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;gBAGlC,EAAE,EAAE,iBAAiB,EACrB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAqBvB,4BAA4B,CACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EACzB,eAAe,CAAC,EAAE,OAAO,GACvB,OAAO,CAAC,IAAI,CAAC;IAkBH,4BAA4B,CACxC,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC;IAgC/C,kCAAkC,CAC9C,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAmD3B,wBAAwB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QACV,WAAW,CAAC,EAAE,oBAAoB,CAAC;QACnC,IAAI,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;KAC5C,CAAC;IA+DW,oCAAoC,CAChD,SAAS,EAAE,MAAM,EACjB,sBAAsB,EAAE,MAAM,EAC9B,KAAK,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC;IAkBH,0CAA0C,CACtD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAC9C,KAAK,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC;IAgBT,0BAA0B,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EACzB,eAAe,CAAC,EAAE,OAAO,GACvB,IAAI;IAqBA,+BAA+B,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAC9C,KAAK,EAAE,iBAAiB,GACtB,IAAI;IAYD,iBAAiB,CACtB,aAAa,EAAE,OAAO,EACtB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,mBAAmB,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC;IAMjD,cAAc,CACnB,cAAc,EAAE,YAAY,GAAG,aAAa,EAC5C,oBAAoB,EAAE,WAAW,EACjC,GAAG,EAAE,mBAAmB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,YAAY,EAC/B,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;QACV,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAI3B,MAAM,CAAC,EAAE,cAAc,CAAC;KACxB,CAAC;IAyTF,uBAAuB,CACtB,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EACpC,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM;;;;;;;IAoBb,4BAA4B,CACjC,sBAAsB,EAAE,kBAAkB,EAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,GAAG,eAAe,EAGtC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,OAAO,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC;QAGpB,eAAe,CAAC,EAAE,OAAO,CAAC;QAK1B,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB;IAgBF,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,SAAS;IAsBpE,8BAA8B,CACnC,iBAAiB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,CAAC,iBAAiB,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IA6BlE,OAAO,CAAC,2BAA2B;IAgB7B,wBAAwB,CAC7B,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAsBnC,mBAAmB,CACxB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAsB/B,qBAAqB,CAC1B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAuCjC,iBAAiB,CACtB,sBAAsB,EAAE,kBAAkB,EAC1C,eAAe,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,cAAc,EACxE,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE,MAAM,GAIV,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IA0D5B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B/C,yBAAyB,CAC9B,GAAG,EAAE,mBAAmB,EACxB,YAAY,EAAE,cAAc,GAAG,SAAS,EACxC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,EAClD,SAAS,CAAC,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,gBAAgB,GACjC,OAAO,CAAC,kBAAkB,CAAC;IA4C9B,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;CAG7D"}
+{"version":3,"file":"captchaManager.d.ts","sourceRoot":"","sources":["../../src/tasks/captchaManager.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,MAAM,EAAa,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAEN,WAAW,EACX,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EAEnB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,IAAI,EAGJ,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,YAAY,EAEjB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,MAAM,6BAA6B,CAAC;AAYrC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,OAAO,EACN,KAAK,kBAAkB,EAEvB,MAAM,8BAA8B,CAAC;AAStC,MAAM,WAAW,iBAAiB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IAMpB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAmCD,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,cAAc;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,iBAAiB,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;gBAGlC,EAAE,EAAE,iBAAiB,EACrB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI;IAqBvB,4BAA4B,CACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EACzB,eAAe,CAAC,EAAE,OAAO,GACvB,OAAO,CAAC,IAAI,CAAC;IAkBH,4BAA4B,CACxC,sBAAsB,EAAE,MAAM,EAC9B,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC;IAgC/C,kCAAkC,CAC9C,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAmD3B,wBAAwB,CACpC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QACV,WAAW,CAAC,EAAE,oBAAoB,CAAC;QACnC,IAAI,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;KAC5C,CAAC;IA+DW,oCAAoC,CAChD,SAAS,EAAE,MAAM,EACjB,sBAAsB,EAAE,MAAM,EAC9B,KAAK,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC;IAkBH,0CAA0C,CACtD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAC9C,KAAK,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC;IAgBT,0BAA0B,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EACzB,eAAe,CAAC,EAAE,OAAO,GACvB,IAAI;IAqBA,+BAA+B,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAC9C,KAAK,EAAE,iBAAiB,GACtB,IAAI;IAYD,iBAAiB,CACtB,aAAa,EAAE,OAAO,EACtB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,mBAAmB,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC;IAMjD,cAAc,CACnB,cAAc,EAAE,YAAY,GAAG,aAAa,EAC5C,oBAAoB,EAAE,WAAW,EACjC,GAAG,EAAE,mBAAmB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,YAAY,EAC/B,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;QACV,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAI3B,MAAM,CAAC,EAAE,cAAc,CAAC;KACxB,CAAC;IAwWF,uBAAuB,CACtB,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EACpC,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM;;;;;;;IAoBb,4BAA4B,CACjC,sBAAsB,EAAE,kBAAkB,EAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,GAAG,eAAe,EAGtC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,OAAO,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,OAAO,CAAC;QAGpB,eAAe,CAAC,EAAE,OAAO,CAAC;QAK1B,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB;IAgBF,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,SAAS;IAsBpE,8BAA8B,CACnC,iBAAiB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,CAAC,iBAAiB,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IA6BlE,OAAO,CAAC,2BAA2B;IAgB7B,wBAAwB,CAC7B,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAsBnC,mBAAmB,CACxB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAsB/B,qBAAqB,CAC1B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACnC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAuCjC,iBAAiB,CACtB,sBAAsB,EAAE,kBAAkB,EAC1C,eAAe,EAAE,mBAAmB,EACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAC7B,WAAW,CAAC,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE,MAAM,GAIV,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IA0D5B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B/C,yBAAyB,CAC9B,GAAG,EAAE,mBAAmB,EACxB,YAAY,EAAE,cAAc,GAAG,SAAS,EACxC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,EAClD,SAAS,CAAC,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,gBAAgB,GACjC,OAAO,CAAC,kBAAkB,CAAC;IA4C9B,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;CAG7D"}

package/dist/tasks/captchaManager.js

@@ -1,12 +1,13 @@
 import { getIpAddressFromComposite } from "../compositeIpAddress.js";
 import { getPrioritisedAccessRule, getRequestUserScope, normalizeHeadersForMatching } from "../api/blacklistRequestInspector.js";
+import { isAudioAlternativeAllowed, isAudioAlternativeEnabled } from "./audioAlternative.js";
 import { getDetectorBundlePool } from "./detection/bundlePool.js";
 import { decode } from "./detection/decoderPool.js";
 import { checkTrafficFilter } from "./spam/checkTrafficFilter.js";
 import { extraIpInfosFromEnrichedDnsEvent } from "./dnsEvent/enrichDnsEvent.js";
 import { checkSpamEmail } from "./spam/checkSpamEmail.js";
 import { getLogger } from "@prosopo/logger";
-import { ApiParams, ResultReason, Tier, TrafficFilterAction } from "@prosopo/types";
+import { ApiParams, CaptchaType, ResultReason, Tier, TrafficFilterAction, isCaptchaTypeFeatureEnabled } from "@prosopo/types";
 import { AccessPolicyType } from "@prosopo/user-access-policy";
 //#region src/tasks/captchaManager.ts
 /**
@@ -225,6 +226,21 @@ var CaptchaManager = class CaptchaManager {
 				sessionId
 			}
 		}));
+		if (!(requestedCaptchaType === CaptchaType.audio ? isAudioAlternativeEnabled(clientSettings.settings) : isCaptchaTypeFeatureEnabled(requestedCaptchaType, clientSettings.settings?.captchaTypeFeatureFlags))) {
+			this.logger.warn(() => ({
+				msg: "Captcha type is switched off for this site",
+				data: {
+					account: clientSettings.account,
+					requestedCaptchaType,
+					sessionId
+				}
+			}));
+			return {
+				valid: false,
+				reason: ResultReason.INCORRECT_CAPTCHA_TYPE,
+				type: requestedCaptchaType
+			};
+		}
 		if (sessionId) {
 			const cachedBeforeRemove = this.writeQueue ? await this.writeQueue.getCachedSession(sessionId) : null;
 			const cachedHash = typeof cachedBeforeRemove?.userSitekeyIpHash === "string" ? cachedBeforeRemove.userSitekeyIpHash : void 0;
@@ -317,7 +333,7 @@ var CaptchaManager = class CaptchaManager {
 					type: requestedCaptchaType
 				};
 			}
-			if (sessionRecord.captchaType !== requestedCaptchaType) {
+			if (sessionRecord.captchaType !== requestedCaptchaType && !isAudioAlternativeAllowed(requestedCaptchaType, sessionRecord.captchaType, clientSettings.settings)) {
 				this.logger.warn(() => ({
 					msg: "Session captcha type does not match requested type",
 					data: {
@@ -342,6 +358,17 @@ var CaptchaManager = class CaptchaManager {
 				ipInfo: sessionRecord.ipInfo
 			};
 		}
+		if (requestedCaptchaType === CaptchaType.audio) {
+			this.logger.warn(() => ({
+				msg: "Sessionless audio captcha request rejected",
+				data: { account: clientSettings.account }
+			}));
+			return {
+				valid: false,
+				reason: ResultReason.INCORRECT_CAPTCHA_TYPE,
+				type: requestedCaptchaType
+			};
+		}
 		if (userAccessPolicy?.captchaType !== void 0 && userAccessPolicy.captchaType !== requestedCaptchaType) {
 			this.logger.warn(() => ({
 				msg: "Invalid captcha type for user access policy (sessionless)",