@prosopo/provider 5.15.0 → 5.16.0

package/dist/api/captcha/getPuzzleCaptchaChallenge.js

@@ -1,144 +1,51 @@
-import { validateAddr, validateSiteKey } from "../validateAddress.js";
-import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
-import { getCompositeIpAddress } from "../../compositeIpAddress.js";
-import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
 import { renderPuzzleImages, resolvePuzzlePieceSize, resolvePuzzleRenderSettings } from "../../tasks/puzzle/puzzleRenderer.js";
-import { Tasks } from "../../tasks/tasks.js";
-import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
-import { isReservedTestSiteKey } from "../testSiteKey.js";
-import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
+import { interactiveChallengeHandler } from "./interactiveCaptchaChallenge.js";
 import { buildPuzzleMaintenanceResponse } from "./maintenanceModeResponses.js";
-import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
-import { summariseRequestBody } from "../requestBodySummary.js";
-import { ProsopoApiError } from "@prosopo/common";
-import { ApiParams, CaptchaType, GetPuzzleCaptchaChallengeRequestBody, SimdReadingsStage } from "@prosopo/types";
-import { flatten } from "@prosopo/util";
+import { ApiParams, CaptchaType } from "@prosopo/types";
 import { DEFAULT_GEOMETRY } from "@prosopo/puzzle-assets";
 //#region src/api/captcha/getPuzzleCaptchaChallenge.ts
-var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (req, res, next) => {
-	let parsed;
-	try {
-		parsed = GetPuzzleCaptchaChallengeRequestBody.parse(req.body);
-	} catch (err) {
-		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
-			context: {
-				code: 400,
-				error: err
-			},
-			i18n: req.i18n,
-			logger: req.logger
+var issuePuzzleChallenge = async ({ tasks, user, dapp, origin, clientSettings, sessionRecord, trafficVerdict, provenance }) => {
+	const challengeVerdict = trafficVerdict.kind === "challenge" ? trafficVerdict : void 0;
+	const tolerance = challengeVerdict?.puzzleTolerance ?? sessionRecord?.puzzleTolerance ?? clientSettings?.settings?.puzzleTolerance;
+	const routedPuzzleSettings = challengeVerdict?.puzzleSettings ?? sessionRecord?.puzzle;
+	const effectivePuzzleSettings = resolvePuzzleRenderSettings(clientSettings?.settings?.puzzle, routedPuzzleSettings);
+	const effectivePieceSize = resolvePuzzlePieceSize(clientSettings?.settings?.puzzle, routedPuzzleSettings);
+	const challenge = await tasks.puzzleCaptchaManager.getPuzzleCaptchaChallenge(user, dapp, origin, tolerance);
+	await tasks.db.storePuzzleCaptchaRecord(challenge.challenge, {
+		requestedAtTimestamp: challenge.requestedAtTimestamp,
+		userAccount: user,
+		dappAccount: dapp
+	}, challenge.targetX, challenge.targetY, challenge.originX, challenge.originY, challenge.tolerance, challenge.providerSignature, provenance.ipAddress, provenance.headers, provenance.ja4, provenance.sessionId, provenance.ipInfo);
+	const images = await renderPuzzleImages({
+		targetX: challenge.targetX,
+		targetY: challenge.targetY
+	}, effectivePuzzleSettings, effectivePieceSize);
+	await tasks.db.updatePuzzleCaptchaRecord(challenge.challenge, { render: {
+		...sessionRecord?.puzzleLevel !== void 0 && { level: sessionRecord.puzzleLevel },
+		pieceSize: images.pieceSize,
+		geometry: {
+			width: DEFAULT_GEOMETRY.width,
+			height: DEFAULT_GEOMETRY.height,
+			notchSize: DEFAULT_GEOMETRY.notchSize
+		},
+		settings: {
+			decoyCount: effectivePuzzleSettings.decoyCount,
+			decoyEdgeDarkness: effectivePuzzleSettings.decoyEdgeDarkness,
+			decoyBodyBrightness: effectivePuzzleSettings.decoyBodyBrightness,
+			holeDarken: effectivePuzzleSettings.holeDarken,
+			decoyHoleDarken: effectivePuzzleSettings.decoyHoleDarken
+		},
+		backgroundSeed: images.backgroundSeed,
+		renderSeed: images.renderSeed
+	} }).catch((updateErr) => {
+		tasks.logger.warn(() => ({
+			err: updateErr,
+			msg: "Failed to patch puzzle render inputs onto the challenge record"
 		}));
-	}
-	const { user, dapp, sessionId, simdReadings } = parsed;
-	validateSiteKey(dapp);
-	validateAddr(user);
-	if (getMaintenanceMode()) {
-		req.logger.info(() => ({
-			msg: "Maintenance mode active - returning dummy puzzle challenge",
-			data: {
-				dapp,
-				user,
-				sessionId
-			}
-		}));
-		return res.json(await buildPuzzleMaintenanceResponse(user, dapp));
-	}
-	if (isReservedTestSiteKey(dapp)) {
-		req.logger.warn(() => ({
-			msg: "Reserved TEST site key - returning dummy puzzle challenge",
-			data: {
-				dapp,
-				user,
-				sessionId
-			}
-		}));
-		return res.json(await buildPuzzleMaintenanceResponse(user, dapp));
-	}
-	const tasks = new Tasks(env, req.logger);
-	try {
-		const clientSettings = await tasks.db.getClientRecord(dapp);
-		if (!clientSettings) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
-			context: {
-				code: 400,
-				siteKey: dapp
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const normalizedIp = normalizeRequestIp(req.ip, req.logger);
-		if (!normalizedIp) req.logger.warn(() => ({ msg: "Request missing IP; geoblocking will be skipped" }));
-		const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
-		const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
-		const sessionRecord = sessionId ? await tasks.db.getSessionRecordBySessionId(sessionId) : void 0;
-		const userScope = getRequestUserScope(flatten(req.headers), req.ja4, normalizedIp, user, sessionRecord?.decryptedHeadHash, void 0, countryCode, asn);
-		const userAccessPolicy = (await tasks.puzzleCaptchaManager.getPrioritisedAccessPolicies(userAccessRulesStorage, dapp, userScope, normalizeHeadersForMatching(req.headers))).find((p) => !p.deferToVerify);
-		const { valid, reason, sessionId: validSessionId } = await tasks.puzzleCaptchaManager.isValidRequest(clientSettings, CaptchaType.puzzle, env, sessionId, userAccessPolicy, normalizedIp);
-		if (!valid) return next(new ProsopoApiError(reason || "API.BAD_REQUEST", {
-			context: {
-				code: 400,
-				siteKey: dapp,
-				user
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const origin = req.headers.origin;
-		if (!origin) return next(new ProsopoApiError("API.BAD_REQUEST", {
-			context: {
-				error: "Origin header not found",
-				code: 400,
-				siteKey: dapp,
-				user
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-		const trafficVerdict = applyTrafficFilterAtRequestTime(req.ipInfo, clientSettings.settings?.trafficFilter, req.logger);
-		const tolerance = (trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleTolerance : void 0) ?? sessionRecord?.puzzleTolerance ?? clientSettings?.settings?.puzzleTolerance;
-		const routedPuzzleSettings = (trafficVerdict.kind === "challenge" ? trafficVerdict.puzzleSettings : void 0) ?? sessionRecord?.puzzle;
-		const effectivePuzzleSettings = resolvePuzzleRenderSettings(clientSettings?.settings?.puzzle, routedPuzzleSettings);
-		const effectivePieceSize = resolvePuzzlePieceSize(clientSettings?.settings?.puzzle, routedPuzzleSettings);
-		const challenge = await tasks.puzzleCaptchaManager.getPuzzleCaptchaChallenge(user, dapp, origin, tolerance);
-		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, SimdReadingsStage.challenge).catch((updateErr) => {
-			req.logger.warn(() => ({
-				err: updateErr,
-				msg: "Failed to patch session with SIMD readings on puzzle challenge"
-			}));
-		});
-		await tasks.db.storePuzzleCaptchaRecord(challenge.challenge, {
-			requestedAtTimestamp: challenge.requestedAtTimestamp,
-			userAccount: user,
-			dappAccount: dapp
-		}, challenge.targetX, challenge.targetY, challenge.originX, challenge.originY, challenge.tolerance, challenge.providerSignature, getCompositeIpAddress(normalizedIp), flatten(req.headers), req.ja4, validSessionId, req.ipInfo);
-		const images = await renderPuzzleImages({
-			targetX: challenge.targetX,
-			targetY: challenge.targetY
-		}, effectivePuzzleSettings, effectivePieceSize);
-		await tasks.db.updatePuzzleCaptchaRecord(challenge.challenge, { render: {
-			...sessionRecord?.puzzleLevel !== void 0 && { level: sessionRecord.puzzleLevel },
-			pieceSize: images.pieceSize,
-			geometry: {
-				width: DEFAULT_GEOMETRY.width,
-				height: DEFAULT_GEOMETRY.height,
-				notchSize: DEFAULT_GEOMETRY.notchSize
-			},
-			settings: {
-				decoyCount: effectivePuzzleSettings.decoyCount,
-				decoyEdgeDarkness: effectivePuzzleSettings.decoyEdgeDarkness,
-				decoyBodyBrightness: effectivePuzzleSettings.decoyBodyBrightness,
-				holeDarken: effectivePuzzleSettings.holeDarken,
-				decoyHoleDarken: effectivePuzzleSettings.decoyHoleDarken
-			},
-			backgroundSeed: images.backgroundSeed,
-			renderSeed: images.renderSeed
-		} }).catch((updateErr) => {
-			req.logger.warn(() => ({
-				err: updateErr,
-				msg: "Failed to patch puzzle render inputs onto the challenge record"
-			}));
-		});
-		const padBytes = trafficVerdict.padBytes;
-		const getPuzzleCaptchaResponse = {
+	});
+	return {
+		logData: { tolerance: challenge.tolerance },
+		response: {
 			[ApiParams.status]: "ok",
 			[ApiParams.challenge]: challenge.challenge,
 			[ApiParams.background]: images.background,
@@ -148,39 +55,15 @@ var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => async (
 			[ApiParams.originY]: challenge.originY,
 			[ApiParams.timestamp]: challenge.requestedAtTimestamp.toString(),
 			[ApiParams.signature]: { [ApiParams.provider]: { [ApiParams.challenge]: challenge.providerSignature } }
-		};
-		req.logger.info(() => ({
-			msg: "Puzzle captcha challenge issued",
-			data: {
-				captchaType: CaptchaType.puzzle,
-				challenge: challenge.challenge,
-				tolerance: challenge.tolerance,
-				user,
-				dapp,
-				session: sessionId
-			}
-		}));
-		res.locals.padBytes = padBytes;
-		recordCaptchaIssued(CaptchaType.puzzle);
-		return res.json(getPuzzleCaptchaResponse);
-	} catch (err) {
-		recordCaptchaIssueError(CaptchaType.puzzle);
-		req.logger.error(() => ({
-			err,
-			body: summariseRequestBody(req),
-			msg: "Error in puzzle captcha challenge request"
-		}));
-		return next(new ProsopoApiError("API.BAD_REQUEST", {
-			context: {
-				code: 500,
-				siteKey: req.body.dapp,
-				user: req.body.user,
-				error: err
-			},
-			i18n: req.i18n,
-			logger: req.logger
-		}));
-	}
+		}
+	};
 };
+var getPuzzleCaptchaChallenge_default = (env, userAccessRulesStorage) => interactiveChallengeHandler(env, userAccessRulesStorage, {
+	captchaType: CaptchaType.puzzle,
+	label: "puzzle",
+	manager: (tasks) => tasks.puzzleCaptchaManager,
+	maintenanceResponse: buildPuzzleMaintenanceResponse,
+	issue: issuePuzzleChallenge
+});
 //#endregion
 export { getPuzzleCaptchaChallenge_default as default };

package/dist/api/captcha/getPuzzleCaptchaChallenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"getPuzzleCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACN,SAAS,EACT,WAAW,EACX,oCAAoC,EAGpC,iBAAiB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EACN,mBAAmB,EACnB,2BAA2B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,IAAI,MAAsD,CAAC;IAE3D,IAAI,CAAC;QACJ,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAKnB,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4DAA4D;YACjE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,8BAA8B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAMD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,2DAA2D;YAChE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,8BAA8B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAId,MAAM,aAAa,GAAG,SAAS;YAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,aAAa,EAAE,iBAAiB,EAChC,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAGF,MAAM,gBAAgB,GAAG,CACxB,MAAM,KAAK,CAAC,oBAAoB,CAAC,4BAA4B,CAC5D,sBAAsB,EACtB,IAAI,EACJ,SAAS,EACT,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CACxC,CACD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAEhC,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,GACzB,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,cAAc,CAClD,cAAc,EACd,WAAW,CAAC,MAAM,EAClB,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAQD,MAAM,cAAc,GAAG,+BAA+B,CACrD,GAAG,CAAC,MAAM,EACV,cAAc,CAAC,QAAQ,EAAE,aAAa,EACtC,GAAG,CAAC,MAAM,CACV,CAAC;QACF,MAAM,sBAAsB,GAC3B,cAAc,CAAC,IAAI,KAAK,WAAW;YAClC,CAAC,CAAC,cAAc,CAAC,eAAe;YAChC,CAAC,CAAC,SAAS,CAAC;QAOd,MAAM,SAAS,GACd,sBAAsB;YACtB,aAAa,EAAE,eAAe;YAC9B,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC;QAM3C,MAAM,qBAAqB,GAC1B,cAAc,CAAC,IAAI,KAAK,WAAW;YAClC,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,oBAAoB,GACzB,qBAAqB,IAAI,aAAa,EAAE,MAAM,CAAC;QAChD,MAAM,uBAAuB,GAAG,2BAA2B,CAC1D,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;QAKF,MAAM,kBAAkB,GAAG,sBAAsB,CAChD,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;QACF,MAAM,SAAS,GACd,MAAM,KAAK,CAAC,oBAAoB,CAAC,yBAAyB,CACzD,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,SAAS,CACT,CAAC;QAEH,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,gEAAgE;iBACrE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC,EAAE,CAAC,wBAAwB,CACtC,SAAS,CAAC,SAAS,EACnB;YACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SACjB,EACD,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,iBAAiB,EAC3B,qBAAqB,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,cAAc,EAId,GAAG,CAAC,MAAM,CACV,CAAC;QAMF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACtC;YACC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;SAC1B,EACD,uBAAuB,EACvB,kBAAkB,CAClB,CAAC;QASF,MAAM,KAAK,CAAC,EAAE;aACZ,yBAAyB,CAAC,SAAS,CAAC,SAAS,EAAE;YAC/C,MAAM,EAAE;gBACP,GAAG,CAAC,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI;oBAC/C,KAAK,EAAE,aAAa,CAAC,WAAW;iBAChC,CAAC;gBACF,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE;oBACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;oBAC7B,MAAM,EAAE,gBAAgB,CAAC,MAAM;oBAC/B,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACrC;gBACD,QAAQ,EAAE;oBACT,UAAU,EAAE,uBAAuB,CAAC,UAAU;oBAC9C,iBAAiB,EAAE,uBAAuB,CAAC,iBAAiB;oBAC5D,mBAAmB,EAAE,uBAAuB,CAAC,mBAAmB;oBAChE,UAAU,EAAE,uBAAuB,CAAC,UAAU;oBAC9C,eAAe,EAAE,uBAAuB,CAAC,eAAe;iBACxD;gBACD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;aAC7B;SACD,CAAC;aACD,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,gEAAgE;aACrE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QAEzC,MAAM,wBAAwB,GAA6B;YAC1D,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU;YACzC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK;YAC/B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,iCAAiC;YACtC,IAAI,EAAE;gBACL,WAAW,EAAE,WAAW,CAAC,MAAM;gBAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC/B,mBAAmB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uBAAuB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,2CAA2C;SAChD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}
+{"version":3,"file":"getPuzzleCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/getPuzzleCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACN,SAAS,EACT,WAAW,GAEX,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAGN,2BAA2B,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAE/E,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACnC,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,GACa,EAEtB,EAAE;IACH,MAAM,gBAAgB,GACrB,cAAc,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAOlE,MAAM,SAAS,GACd,gBAAgB,EAAE,eAAe;QACjC,aAAa,EAAE,eAAe;QAC9B,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC;IAM3C,MAAM,oBAAoB,GACzB,gBAAgB,EAAE,cAAc,IAAI,aAAa,EAAE,MAAM,CAAC;IAC3D,MAAM,uBAAuB,GAAG,2BAA2B,CAC1D,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;IAKF,MAAM,kBAAkB,GAAG,sBAAsB,CAChD,cAAc,EAAE,QAAQ,EAAE,MAAM,EAChC,oBAAoB,CACpB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,oBAAoB,CAAC,yBAAyB,CAC3E,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,SAAS,CACT,CAAC;IAEF,MAAM,KAAK,CAAC,EAAE,CAAC,wBAAwB,CACtC,SAAS,CAAC,SAAS,EACnB;QACC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;KACjB,EACD,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,iBAAiB,EAC3B,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,GAAG,EACd,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,MAAM,CACjB,CAAC;IAMF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACtC;QACC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;KAC1B,EACD,uBAAuB,EACvB,kBAAkB,CAClB,CAAC;IAMF,MAAM,KAAK,CAAC,EAAE;SACZ,yBAAyB,CAAC,SAAS,CAAC,SAAS,EAAE;QAC/C,MAAM,EAAE;YACP,GAAG,CAAC,aAAa,EAAE,WAAW,KAAK,SAAS,IAAI;gBAC/C,KAAK,EAAE,aAAa,CAAC,WAAW;aAChC,CAAC;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE;gBACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;gBAC7B,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,SAAS,EAAE,gBAAgB,CAAC,SAAS;aACrC;YACD,QAAQ,EAAE;gBACT,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,iBAAiB,EAAE,uBAAuB,CAAC,iBAAiB;gBAC5D,mBAAmB,EAAE,uBAAuB,CAAC,mBAAmB;gBAChE,UAAU,EAAE,uBAAuB,CAAC,UAAU;gBAC9C,eAAe,EAAE,uBAAuB,CAAC,eAAe;aACxD;YACD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B;KACD,CAAC;SACD,KAAK,CAAC,CAAC,SAAkB,EAAE,EAAE;QAC7B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,gEAAgE;SACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEJ,OAAO;QACN,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;QAC3C,QAAQ,EAAE;YACT,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI;YACxB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,SAAS;YAC1C,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU;YACzC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK;YAC/B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,SAAS;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,OAAO;YACtC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YAChE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBACrB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,iBAAiB;iBAClD;aACD;SACD;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,CACd,GAAwB,EACxB,sBAA0C,EACzC,EAAE,CACH,2BAA2B,CAAC,GAAG,EAAE,sBAAsB,EAAE;IACxD,WAAW,EAAE,WAAW,CAAC,MAAM;IAC/B,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB;IAC9C,mBAAmB,EAAE,8BAA8B;IACnD,KAAK,EAAE,oBAAoB;CAC3B,CAAC,CAAC"}

package/dist/api/captcha/interactiveCaptchaChallenge.d.ts

@@ -0,0 +1,42 @@
+import { type ApiResponse, type CaptchaType, type CompositeIpAddress, type IPInfoResponse, type PoWChallengeId, type RequestHeaders } from "@prosopo/types";
+import type { ClientRecord, ProjectedSession } from "@prosopo/types-database";
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../express.js";
+import type { CaptchaManager } from "../../tasks/captchaManager.js";
+import { Tasks } from "../../tasks/index.js";
+import { type RequestTimeTrafficVerdict } from "./trafficFilterRequestTime.js";
+export interface ChallengeIssueContext {
+    tasks: Tasks;
+    user: string;
+    dapp: string;
+    origin: string;
+    clientSettings: ClientRecord;
+    sessionRecord: ProjectedSession | undefined;
+    trafficVerdict: RequestTimeTrafficVerdict;
+    provenance: {
+        ipAddress: CompositeIpAddress;
+        headers: RequestHeaders;
+        ja4: string;
+        sessionId?: string;
+        ipInfo?: IPInfoResponse;
+    };
+}
+type ChallengeResponse = ApiResponse & {
+    challenge: PoWChallengeId;
+};
+export interface IssuedChallenge<TResponse> {
+    response: TResponse;
+    logData: Readonly<Record<string, number>>;
+}
+export interface InteractiveChallengeSpec<TResponse extends ChallengeResponse> {
+    captchaType: CaptchaType.puzzle | CaptchaType.iconOrder | CaptchaType.audio;
+    label: string;
+    manager: (tasks: Tasks) => CaptchaManager;
+    maintenanceResponse: (user: string, dapp: string) => Promise<TResponse>;
+    issue: (context: ChallengeIssueContext) => Promise<IssuedChallenge<TResponse>>;
+}
+export declare const interactiveChallengeHandler: <TResponse extends ChallengeResponse>(env: ProviderEnvironment, userAccessRulesStorage: AccessRulesStorage, spec: InteractiveChallengeSpec<TResponse>) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+export {};
+//# sourceMappingURL=interactiveCaptchaChallenge.d.ts.map

package/dist/api/captcha/interactiveCaptchaChallenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaChallenge.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaChallenge.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EAGvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAW7C,OAAO,EACN,KAAK,yBAAyB,EAE9B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,YAAY,CAAC;IAC7B,aAAa,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,cAAc,EAAE,yBAAyB,CAAC;IAE1C,UAAU,EAAE;QACX,SAAS,EAAE,kBAAkB,CAAC;QAC9B,OAAO,EAAE,cAAc,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,cAAc,CAAC;KACxB,CAAC;CACF;AAED,KAAK,iBAAiB,GAAG,WAAW,GAAG;IAAE,SAAS,EAAE,cAAc,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,eAAe,CAAC,SAAS;IACzC,QAAQ,EAAE,SAAS,CAAC;IAEpB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAwB,CAAC,SAAS,SAAS,iBAAiB;IAC5E,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC;IAE5E,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,cAAc,CAAC;IAC1C,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAExE,KAAK,EAAE,CACN,OAAO,EAAE,qBAAqB,KAC1B,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;CACzC;AAMD,eAAO,MAAM,2BAA2B,GACtC,SAAS,SAAS,iBAAiB,OAC9B,mBAAmB,0BACA,kBAAkB,QACpC,wBAAwB,CAAC,SAAS,CAAC,WAGpC,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY,uDAoOlB,CAAC"}

package/dist/api/captcha/interactiveCaptchaChallenge.js

@@ -0,0 +1,154 @@
+import { getCompositeIpAddress } from "../../compositeIpAddress.js";
+import { recordCaptchaIssueError, recordCaptchaIssued } from "../metrics.js";
+import { getRequestUserScope, normalizeHeadersForMatching } from "../blacklistRequestInspector.js";
+import { validateAddr, validateSiteKey } from "../validateAddress.js";
+import { Tasks } from "../../tasks/tasks.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
+import { isReservedTestSiteKey } from "../testSiteKey.js";
+import { normalizeRequestIp } from "../../utils/normalizeRequestIp.js";
+import { summariseRequestBody } from "../requestBodySummary.js";
+import { applyTrafficFilterAtRequestTime } from "./trafficFilterRequestTime.js";
+import { ProsopoApiError } from "@prosopo/common";
+import { GetPuzzleCaptchaChallengeRequestBody, SimdReadingsStage } from "@prosopo/types";
+import { flatten } from "@prosopo/util";
+//#region src/api/captcha/interactiveCaptchaChallenge.ts
+var capitalise = (text) => text.charAt(0).toUpperCase() + text.slice(1);
+/** Request handling shared by the challenge endpoints of the interactive types. */
+var interactiveChallengeHandler = (env, userAccessRulesStorage, spec) => async (req, res, next) => {
+	const { captchaType, label } = spec;
+	let parsed;
+	try {
+		parsed = GetPuzzleCaptchaChallengeRequestBody.parse(req.body);
+	} catch (err) {
+		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	const { user, dapp, sessionId, simdReadings } = parsed;
+	validateSiteKey(dapp);
+	validateAddr(user);
+	if (getMaintenanceMode()) {
+		req.logger.info(() => ({
+			msg: `Maintenance mode active - returning dummy ${label} challenge`,
+			data: {
+				dapp,
+				user,
+				sessionId
+			}
+		}));
+		return res.json(await spec.maintenanceResponse(user, dapp));
+	}
+	if (isReservedTestSiteKey(dapp)) {
+		req.logger.warn(() => ({
+			msg: `Reserved TEST site key - returning dummy ${label} challenge`,
+			data: {
+				dapp,
+				user,
+				sessionId
+			}
+		}));
+		return res.json(await spec.maintenanceResponse(user, dapp));
+	}
+	const tasks = new Tasks(env, req.logger);
+	const manager = spec.manager(tasks);
+	try {
+		const clientSettings = await tasks.db.getClientRecord(dapp);
+		if (!clientSettings) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const normalizedIp = normalizeRequestIp(req.ip, req.logger);
+		if (!normalizedIp) req.logger.warn(() => ({ msg: "Request missing IP; geoblocking will be skipped" }));
+		const countryCode = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.countryCode : void 0;
+		const asn = req.ipInfo && "isValid" in req.ipInfo && req.ipInfo.isValid ? req.ipInfo.asnNumber : void 0;
+		const sessionRecord = sessionId ? await tasks.db.getSessionRecordBySessionId(sessionId) : void 0;
+		const userScope = getRequestUserScope(flatten(req.headers), req.ja4, normalizedIp, user, sessionRecord?.decryptedHeadHash, void 0, countryCode, asn);
+		const userAccessPolicy = (await manager.getPrioritisedAccessPolicies(userAccessRulesStorage, dapp, userScope, normalizeHeadersForMatching(req.headers))).find((p) => !p.deferToVerify);
+		const { valid, reason, sessionId: validSessionId } = await manager.isValidRequest(clientSettings, captchaType, env, sessionId, userAccessPolicy, normalizedIp);
+		if (!valid) return next(new ProsopoApiError(reason || "API.BAD_REQUEST", {
+			context: {
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const origin = req.headers.origin;
+		if (!origin) return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				error: "Origin header not found",
+				code: 400,
+				siteKey: dapp,
+				user
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const trafficVerdict = applyTrafficFilterAtRequestTime(req.ipInfo, clientSettings.settings?.trafficFilter, req.logger);
+		if (validSessionId && simdReadings) await tasks.frictionlessManager.decryptAndAttachSimdReadingsIfAbsent(validSessionId, simdReadings, SimdReadingsStage.challenge).catch((updateErr) => {
+			req.logger.warn(() => ({
+				err: updateErr,
+				msg: `Failed to patch session with SIMD readings on ${label} challenge`
+			}));
+		});
+		const { response, logData } = await spec.issue({
+			tasks,
+			user,
+			dapp,
+			origin,
+			clientSettings,
+			sessionRecord,
+			trafficVerdict,
+			provenance: {
+				ipAddress: getCompositeIpAddress(normalizedIp),
+				headers: flatten(req.headers),
+				ja4: req.ja4,
+				sessionId: validSessionId,
+				ipInfo: req.ipInfo
+			}
+		});
+		req.logger.info(() => ({
+			msg: `${capitalise(label)} captcha challenge issued`,
+			data: {
+				captchaType,
+				challenge: response.challenge,
+				...logData,
+				user,
+				dapp,
+				session: sessionId
+			}
+		}));
+		res.locals.padBytes = trafficVerdict.padBytes;
+		recordCaptchaIssued(captchaType);
+		return res.json(response);
+	} catch (err) {
+		recordCaptchaIssueError(captchaType);
+		req.logger.error(() => ({
+			err,
+			body: summariseRequestBody(req),
+			msg: `Error in ${label} captcha challenge request`
+		}));
+		return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 500,
+				siteKey: req.body.dapp,
+				user: req.body.user,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+};
+//#endregion
+export { interactiveChallengeHandler };

package/dist/api/captcha/interactiveCaptchaChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaChallenge.js","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaChallenge.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAIN,oCAAoC,EAKpC,iBAAiB,GACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EACN,mBAAmB,EACnB,2BAA2B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAEN,+BAA+B,GAC/B,MAAM,+BAA+B,CAAC;AAyCvC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAG9C,MAAM,CAAC,MAAM,2BAA2B,GACvC,CACC,GAAwB,EACxB,sBAA0C,EAC1C,IAAyC,EACxC,EAAE,CACJ,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IACH,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACpC,IAAI,MAAsD,CAAC;IAE3D,IAAI,CAAC;QACJ,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE;YAClC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAEvD,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAKnB,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,6CAA6C,KAAK,YAAY;YACnE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAMD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,4CAA4C,KAAK,YAAY;YAClE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEpC,IAAI,CAAC;QACJ,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAChB,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GACR,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;YAC1D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS;YACtB,CAAC,CAAC,SAAS,CAAC;QAId,MAAM,aAAa,GAAG,SAAS;YAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EACpB,GAAG,CAAC,GAAG,EACP,YAAY,EACZ,IAAI,EACJ,aAAa,EAAE,iBAAiB,EAChC,SAAS,EACT,WAAW,EACX,GAAG,CACH,CAAC;QAGF,MAAM,gBAAgB,GAAG,CACxB,MAAM,OAAO,CAAC,4BAA4B,CACzC,sBAAsB,EACtB,IAAI,EACJ,SAAS,EACT,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CACxC,CACD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAEhC,MAAM,EACL,KAAK,EACL,MAAM,EACN,SAAS,EAAE,cAAc,GACzB,GAAG,MAAM,OAAO,CAAC,cAAc,CAC/B,cAAc,EACd,WAAW,EACX,GAAG,EACH,SAAS,EACT,gBAAgB,EAChB,YAAY,CACZ,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBAChD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;gBACtC,OAAO,EAAE;oBACR,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,GAAG;oBACT,OAAO,EAAE,IAAI;oBACb,IAAI;iBACJ;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAMD,MAAM,cAAc,GAAG,+BAA+B,CACrD,GAAG,CAAC,MAAM,EACV,cAAc,CAAC,QAAQ,EAAE,aAAa,EACtC,GAAG,CAAC,MAAM,CACV,CAAC;QAEF,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,mBAAmB;iBAC7B,oCAAoC,CACpC,cAAc,EACd,YAAY,EACZ,iBAAiB,CAAC,SAAS,CAC3B;iBACA,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACtB,GAAG,EAAE,SAAS;oBACd,GAAG,EAAE,iDAAiD,KAAK,YAAY;iBACvE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAC9C,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,cAAc;YACd,aAAa;YACb,cAAc;YACd,UAAU,EAAE;gBACX,SAAS,EAAE,qBAAqB,CAAC,YAAY,CAAC;gBAC9C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC7B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,SAAS,EAAE,cAAc;gBAIzB,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB;SACD,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,2BAA2B;YACpD,IAAI,EAAE;gBACL,WAAW;gBACX,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,GAAG,OAAO;gBACV,IAAI;gBACJ,IAAI;gBACJ,OAAO,EAAE,SAAS;aAClB;SACD,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QAC9C,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,YAAY,KAAK,4BAA4B;SAClD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/interactiveCaptchaSolution.d.ts

@@ -0,0 +1,14 @@
+import type { ProviderEnvironment } from "@prosopo/types-env";
+import type { NextFunction, Request, Response } from "express";
+import type { AugmentedRequest } from "../../express.js";
+import { Tasks } from "../../tasks/tasks.js";
+export interface InteractiveSolutionSpec<TBody> {
+    label: string;
+    parse: (body: unknown) => TBody;
+    verify: (tasks: Tasks, body: TBody, submitWindowMs: number, req: Request & AugmentedRequest) => Promise<boolean>;
+}
+export declare const interactiveSolutionHandler: <TBody extends {
+    dapp: string;
+    user: string;
+}>(env: ProviderEnvironment, spec: InteractiveSolutionSpec<TBody>) => (req: Request & AugmentedRequest, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+//# sourceMappingURL=interactiveCaptchaSolution.d.ts.map

package/dist/api/captcha/interactiveCaptchaSolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaSolution.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaSolution.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAM7C,MAAM,WAAW,uBAAuB,CAAC,KAAK;IAE7C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC;IAEhC,MAAM,EAAE,CACP,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,KAAK,EACX,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,OAAO,GAAG,gBAAgB,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAGD,eAAO,MAAM,0BAA0B,GACrC,KAAK,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,OACvC,mBAAmB,QAClB,uBAAuB,CAAC,KAAK,CAAC,WAG/B,OAAO,GAAG,gBAAgB,OAC1B,QAAQ,QACP,YAAY,uDA8FlB,CAAC"}

package/dist/api/captcha/interactiveCaptchaSolution.js

@@ -0,0 +1,77 @@
+import { validateAddr, validateSiteKey } from "../validateAddress.js";
+import { Tasks } from "../../tasks/tasks.js";
+import { getMaintenanceMode } from "../admin/apiToggleMaintenanceModeEndpoint.js";
+import { resolveTestSiteKeyVerdict } from "../testSiteKey.js";
+import { summariseRequestBody } from "../requestBodySummary.js";
+import { ProsopoApiError } from "@prosopo/common";
+//#region src/api/captcha/interactiveCaptchaSolution.ts
+/** Request handling shared by the solution endpoints of the interactive types. */
+var interactiveSolutionHandler = (env, spec) => async (req, res, next) => {
+	if (getMaintenanceMode()) {
+		req.logger.info(() => ({ msg: "Maintenance mode active - returning verified" }));
+		return res.json({
+			status: "ok",
+			verified: true
+		});
+	}
+	let parsed;
+	const tasks = new Tasks(env, req.logger);
+	try {
+		parsed = spec.parse(req.body);
+	} catch (err) {
+		return next(new ProsopoApiError("CAPTCHA.PARSE_ERROR", {
+			context: {
+				code: 400,
+				error: err,
+				body: summariseRequestBody(req)
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+	const { dapp, user } = parsed;
+	validateSiteKey(dapp);
+	validateAddr(user);
+	const testVerdict = resolveTestSiteKeyVerdict(dapp, req.logger);
+	if (testVerdict !== null) {
+		const response = {
+			status: "ok",
+			verified: testVerdict
+		};
+		return res.json(response);
+	}
+	try {
+		const clientRecord = await tasks.db.getClientRecord(dapp);
+		if (!clientRecord) return next(new ProsopoApiError("API.SITE_KEY_NOT_REGISTERED", {
+			context: {
+				code: 400,
+				siteKey: dapp
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+		const submitWindowMs = clientRecord.settings.solutionTimeout ?? clientRecord.settings.verifiedTimeout;
+		const response = {
+			status: "ok",
+			verified: await spec.verify(tasks, parsed, submitWindowMs, req)
+		};
+		return res.json(response);
+	} catch (err) {
+		req.logger.error(() => ({
+			err,
+			body: summariseRequestBody(req),
+			msg: `Error in ${spec.label} captcha solution submission`
+		}));
+		return next(new ProsopoApiError("API.BAD_REQUEST", {
+			context: {
+				code: 500,
+				siteKey: req.body.dapp,
+				error: err
+			},
+			i18n: req.i18n,
+			logger: req.logger
+		}));
+	}
+};
+//#endregion
+export { interactiveSolutionHandler };

package/dist/api/captcha/interactiveCaptchaSolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaSolution.js","sourceRoot":"","sources":["../../../src/api/captcha/interactiveCaptchaSolution.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKlD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAgBtE,MAAM,CAAC,MAAM,0BAA0B,GACtC,CACC,GAAwB,EACxB,IAAoC,EACnC,EAAE,CACJ,KAAK,EACJ,GAA+B,EAC/B,GAAa,EACb,IAAkB,EACjB,EAAE;IAIH,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,8CAA8C;SACnD,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAkC;YAC/C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;SACd,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,MAAa,CAAC;IAClB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,qBAAqB,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE;YACnE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAE9B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,YAAY,CAAC,IAAI,CAAC,CAAC;IAInB,MAAM,WAAW,GAAG,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAkC;YAC/C,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,WAAW;SACrB,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,6BAA6B,EAAE;gBAClD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CACF,CAAC;QACH,CAAC;QAOD,MAAM,wBAAwB,GAAG,YAAY,CAAC,QAAQ,CAAC,eAE3C,CAAC;QACb,MAAM,cAAc,GACnB,wBAAwB,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAkC;YAC/C,MAAM,EAAE,IAAI;YACZ,QAAQ;SACR,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACvB,GAAG;YACH,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC;YAC/B,GAAG,EAAE,YAAY,IAAI,CAAC,KAAK,8BAA8B;SACzD,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CACV,IAAI,eAAe,CAAC,iBAAiB,EAAE;YACtC,OAAO,EAAE;gBACR,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACtB,KAAK,EAAE,GAAG;aACV;YACD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SAClB,CAAC,CACF,CAAC;IACH,CAAC;AACF,CAAC,CAAC"}

package/dist/api/captcha/maintenanceModeResponses.d.ts

@@ -1,8 +1,10 @@
-import { type CaptchaResponseBody, type CaptchaType, type GetFrictionlessCaptchaResponse, type GetPowCaptchaResponse, type GetPuzzleCaptchaResponse, type VerificationResponse } from "@prosopo/types";
+import { type CaptchaResponseBody, type CaptchaType, type GetAudioCaptchaResponse, type GetFrictionlessCaptchaResponse, type GetIconOrderCaptchaResponse, type GetPowCaptchaResponse, type GetPuzzleCaptchaResponse, type VerificationResponse } from "@prosopo/types";
 export declare const MAINTENANCE_VERIFY_SCORE = 0;
 export declare const buildMaintenanceVerificationResponse: (translate: (key: string) => string) => VerificationResponse;
-export declare const buildFrictionlessMaintenanceResponse: (captchaType: CaptchaType.pow | CaptchaType.image | CaptchaType.puzzle, host: string | undefined) => GetFrictionlessCaptchaResponse;
+export declare const buildFrictionlessMaintenanceResponse: (captchaType: CaptchaType.pow | CaptchaType.image | CaptchaType.puzzle | CaptchaType.iconOrder, host: string | undefined) => GetFrictionlessCaptchaResponse;
 export declare const buildPowMaintenanceResponse: (user: string, dapp: string) => GetPowCaptchaResponse;
 export declare const buildImageMaintenanceResponse: () => CaptchaResponseBody;
 export declare const buildPuzzleMaintenanceResponse: (user: string, dapp: string) => Promise<GetPuzzleCaptchaResponse>;
+export declare const buildAudioMaintenanceResponse: (user: string, dapp: string) => Promise<GetAudioCaptchaResponse>;
+export declare const buildIconOrderMaintenanceResponse: (user: string, dapp: string) => Promise<GetIconOrderCaptchaResponse>;
 //# sourceMappingURL=maintenanceModeResponses.d.ts.map

package/dist/api/captcha/maintenanceModeResponses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenanceModeResponses.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/maintenanceModeResponses.ts"],"names":[],"mappings":"AAeA,OAAO,EAEN,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAG7B,KAAK,oBAAoB,EACzB,MAAM,gBAAgB,CAAC;AAoBxB,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAiB1C,eAAO,MAAM,oCAAoC,cACrC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,KAChC,oBAID,CAAC;AAEH,eAAO,MAAM,oCAAoC,gBACnC,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,QAC/D,MAAM,GAAG,SAAS,KACtB,8BAID,CAAC;AAEH,eAAO,MAAM,2BAA2B,SACjC,MAAM,QACN,MAAM,KACV,qBAWF,CAAC;AAOF,eAAO,MAAM,6BAA6B,QAAO,mBAQ/C,CAAC;AAMH,eAAO,MAAM,8BAA8B,SACpC,MAAM,QACN,MAAM,KACV,OAAO,CAAC,wBAAwB,CAgBlC,CAAC"}
+{"version":3,"file":"maintenanceModeResponses.d.ts","sourceRoot":"","sources":["../../../src/api/captcha/maintenanceModeResponses.ts"],"names":[],"mappings":"AAeA,OAAO,EAEN,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAG7B,KAAK,oBAAoB,EACzB,MAAM,gBAAgB,CAAC;AAyBxB,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAiB1C,eAAO,MAAM,oCAAoC,cACrC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,KAChC,oBAID,CAAC;AAEH,eAAO,MAAM,oCAAoC,gBAE7C,WAAW,CAAC,GAAG,GACf,WAAW,CAAC,KAAK,GACjB,WAAW,CAAC,MAAM,GAClB,WAAW,CAAC,SAAS,QAClB,MAAM,GAAG,SAAS,KACtB,8BAID,CAAC;AAEH,eAAO,MAAM,2BAA2B,SACjC,MAAM,QACN,MAAM,KACV,qBAWF,CAAC;AAOF,eAAO,MAAM,6BAA6B,QAAO,mBAQ/C,CAAC;AAMH,eAAO,MAAM,8BAA8B,SACpC,MAAM,QACN,MAAM,KACV,OAAO,CAAC,wBAAwB,CAgBlC,CAAC;AAIF,eAAO,MAAM,6BAA6B,SACnC,MAAM,QACN,MAAM,KACV,OAAO,CAAC,uBAAuB,CAajC,CAAC;AAIF,eAAO,MAAM,iCAAiC,SACvC,MAAM,QACN,MAAM,KACV,OAAO,CAAC,2BAA2B,CAcrC,CAAC"}